anchor.diff:    # Default on, which insists on dnssec data for trust-anchored zones.
     # harden-dnssec-stripped: yes
   
  -        # Harden the referral path by performing additional queries for
  +  # Harden the referral path by performing additional queries for
     # infrastructure data.  Validates the replies (if possible).
     # Default off, because the lookups burden the server.  Experimental 
     # implementation of draft-wijngaards-dnsext-resolver-side-mitigation.
  
positive.code:   # whitespace is not necessary, but looks cleaner.
  
    # verbosity number, 0 is least verbose. 1 is default.
    verbosity: 1
  
    # print statistics to the log (for every thread) every N seconds.
    # Set to "" or 0 to disable. Default is disabled.
  
negative.code: 
    # the amount of memory to use for the message cache.
    # plain value in bytes or you can append k, m or G. default is "4Mb". 
    msg-cache-size: 2G
  
    # the number of slabs to use for the message cache.
    # the number of slabs must be a power of 2.
  