examples/bind: faster named.conf
@@ -7,24 +7,38 @@ options {
recursive-clients 1000000;
max-clients-per-query 100000;
max-recursion-queries 100000;
- max-cache-size 1;
- max-acache-size 1;
- acache-enable no;
+ max-recursion-depth 2;
+ max-cache-size 1024;
+ max-acache-size 1024;
+ acache-enable yes;
max-ncache-ttl 1;
max-cache-ttl 1;
- lame-ttl 1;
+ lame-ttl 0;
reserved-sockets 2048;
max-retry-time 1;
max-refresh-time 1;
check-integrity false;
cleaning-interval 1;
- notify no;
+ notify yes;
dnssec-enable yes;
dnssec-validation yes;
dnssec-secure-to-insecure yes;
+ dnssec-lookaside no;
+ allow-new-zones yes;
interface-interval 0;
additional-from-auth yes;
additional-from-cache yes;
+ minimal-responses yes;
+ prefetch 1;
+ resolver-query-timeout 1;
+ auth-nxdomain yes;
+ empty-server "tesZ";
+ disable-empty-zone "tesY";
+ zone-statistics yes;
+ preferred-glue AAAA;
+ query-source 127.0.0.3;
+ querylog yes;
+
allow-query {
any;
};
@@ -37,10 +51,25 @@ options {
allow-transfer {
any;
};
- forwarders {
- 127.0.0.2 port 5353;
+ allow-update-forwarding {
+ any;
};
+
forward only;
+
+ forwarders {
+ 127.0.0.2 port 53;
+ };
+
+ rate-limit {
+ responses-per-second 0;
+ all-per-second 0;
+ window 1;
+ log-only yes;
+ exempt-clients {
+ 127.0.0.0/8;
+ };
+ };
};
logging {
@@ -55,7 +84,8 @@ logging {
zone "test." {
type master;
- file "test.zone";
+ file "test";
+ also-notify { 127.0.0.2; };
};
key "rndc-key" {
