Logo
6.0.6

Getting Started

  • Installation
  • Startup
    • First DNS query
  • Configuration
    • Listening on network interfaces
    • Example: Internal Resolver
      • Internal-only domains
    • Example: ISP Resolver
      • Limiting client access
      • TLS server configuration
      • Mandatory domain blocking
    • Example: Personal Resolver
      • Forwarding over TLS protocol (DNS-over-TLS)
      • Non-persistent cache

Configuration

  • Configuration Overview
    • Validation
    • JSON Schema
      • Getting the JSON Schema
      • Interactive visualization
  • Networking and protocols
    • Server (communication with clients)
      • Addresses and services
        • PROXYv2 protocol
        • TCP pipeline limit
      • DoT and DoH (encrypted DNS)
        • DNS-over-TLS (DoT)
        • DNS-over-HTTPS (DoH)
        • Configuration options for DoT and DoH
    • Client (retrieving answers from servers)
      • IPv4 and IPv6 usage
      • Forwarding
    • DNS protocol tweaks
      • DNS protocol tweaks
  • Performance and resiliency
    • Cache
      • Sizing
      • Persistence
      • Configuration reference
    • Multiple workers
    • Prefetching records
      • Expiring records
      • Prediction
      • Configuration
      • Exported metrics
    • Cache prefilling
      • Dependencies
    • Serve stale
      • Running
    • Root on loopback (RFC 7706)
    • Priming
    • EDNS keepalive
  • Policy, access control, data manipulation
    • Views and ACLs
      • Conditions
      • Actions
    • Local Data and RPZ
    • Forwarding
    • DNS64
      • Advanced options
    • IP address renumbering
      • Example configuration
    • Answer reordering
    • Rebinding protection
    • Refuse queries without RD bit
    • Tags
  • Logging, monitoring, diagnostics
    • DNSSEC validation failure logging
    • Statistics collector
      • Prometheus metrics endpoint
      • Graphite/InfluxDB/Metronome
    • Name Server Identifier (NSID)
    • Dnstap (traffic collection)
    • Sentinel for Detecting Trusted Root Keys
    • Signaling Trust Anchor Knowledge in DNSSEC
    • System time skew detector
    • Detect discontinuous jumps in the system time
    • Debugging options
  • DNSSEC, data verification
  • Lua Scripting
  • Experimental features
    • Experimental DNS-over-TLS Auto-discovery
      • How it works
      • Generating NS target names
      • Caveats
      • Dependencies

Deployment

  • Systemd
  • Manual
    • Multiple instances on a single server
  • Docker
  • Advanced
    • Usage without the manager
      • Startup
      • Configuration
    • Usage without systemd and without manager
      • Process management
        • Garbage Collector
      • Privileges and capabilities
        • Using capabilities
        • Running as non-privileged user
        • Running as root

Management

  • HTTP API
    • Management HTTP API
    • Dynamically changing configuration
      • Reloading configuration file
      • HTTP API
        • Listen address
        • List of API endpoints
        • Config modification endpoint (v1)
  • kresctl utility
    • Connecting to the management API
    • Commands

For operators

  • Upgrading to version 6.x
    • Configuration
      • Reconfiguration
    • Useful commands rosetta
  • Upgrading
    • Upcoming changes
    • 5.x to 6.x
    • 5.4 to 5.5
      • Packagers & Developers
      • Module API changes
    • 5.3 to 5.4
      • Configuration file
      • Packagers & Developers
      • Module changes
    • 5.2 to 5.3
      • Configuration file
      • Packagers & Developers
    • 5.1 to 5.2
      • Users
      • Configuration file
      • Module changes
    • 5.0 to 5.1
      • Module changes
    • 4.x to 5.x
      • Users
      • Configuration file
    • 4.2.2 to 4.3+
      • Module changes
    • 4.x to 4.2.1+
      • Users
    • 3.x to 4.x
      • Users
        • Configuration file
      • Packagers & Developers
        • Module changes
    • 2.x to 3.x
      • Users
      • Packagers & Developers
        • Module changes
  • Release notes
    • Version numbering
    • Knot Resolver 6.0.6 (2024-02-13)
      • Security
      • Improvements
      • Bugfixes
    • Knot Resolver 6.0.5 (2024-01-09)

For developers

  • Manager’s development guide
    • Development environment
      • Tools
      • First run of the Manager from source
      • Helper scripts
      • Code editor
    • Code structure
      • The subprocess controllers
      • Processing of config change requests
    • Packaging
    • Testing
  • Internal Lua configuration
    • Syntax
    • Documentation Conventions
    • Modules
      • modules.list()
      • modules.load()
      • modules.unload()
    • Networking and protocols
      • Server (communication with clients)
        • Addresses and services
        • DoT and DoH (encrypted DNS)
        • Other HTTP services
      • Client (retrieving answers from servers)
        • IPv4 and IPv6 usage
        • Forwarding
      • DNS protocol tweaks
        • DNS protocol tweaks
    • Performance and resiliency
      • Cache
        • Sizing
        • Persistence
        • Configuration reference
      • Multiple instances
        • Zero-downtime restarts
        • Instance-specific configuration
      • Prefetching records
        • Expiring records
        • Prediction
        • Example configuration
        • Exported metrics
        • Properties
      • Cache prefilling
        • Dependencies
      • Serve stale
        • Running
      • Root on loopback (RFC 7706)
      • Priming module
      • EDNS keepalive
      • XDP for higher UDP performance
        • Prerequisites
        • Set up
        • Optimizations
        • Limitations
    • Policy, access control, data manipulation
      • Query policies
        • Filters
        • Actions
        • Forwarding
        • Forwarding over TLS protocol (DNS-over-TLS)
        • Replacing part of the DNS tree
        • Response policy zones
        • Additional properties
      • Views and ACLs
        • Example configuration
        • Rule order
        • Properties
      • Static hints
        • Examples
        • Properties
      • DNS64
        • Simple example
        • Advanced options
      • IP address renumbering
        • Example configuration
      • Answer reordering
        • reorder_RR()
      • Rebinding protection
      • Refuse queries without RD bit
      • DNS Application Firewall
        • Example configuration
        • Web interface
        • RESTful interface
    • Logging, monitoring, diagnostics
      • log_level()
      • verbose()
      • log_target()
      • log_groups()
      • DNSSEC validation failure logging
      • Statistics collector
        • Built-in statistics
        • Module reference
        • Graphite/InfluxDB/Metronome
        • Prometheus metrics endpoint
      • Scripting worker
        • worker.stats()
      • Name Server Identifier (NSID)
      • Debugging a single request
        • Using query policies
        • Using HTTP module
      • Watchdog
      • Dnstap (traffic collection)
      • Sentinel for Detecting Trusted Root Keys
      • Signaling Trust Anchor Knowledge in DNSSEC
      • System time skew detector
      • Detect discontinuous jumps in the system time
      • Debugging options
      • Logging API
    • DNSSEC, data verification
      • trust_anchors.add_file()
      • trust_anchors.remove()
      • trust_anchors.set_insecure()
      • trust_anchors.add()
      • trust_anchors.summary()
      • mode()
    • Experimental features
      • Run-time reconfiguration
        • Control sockets
        • Lua scripts
        • Asynchronous events
        • Etcd support
      • Experimental DNS-over-TLS Auto-discovery
        • How it works
        • Generating NS target names
        • Example configuration
        • Caveats
        • Dependencies
  • System architecture
    • Knot Resolver startup
    • Failure handling
    • Individual components
      • kres-manager
        • API
        • Config processing
        • Actual manager
        • Interactions with supervisord
      • kresd
      • kres-cache-gc
  • Building from sources
    • Building with apkg
    • Building with Meson
      • Dependencies
      • Compilation
      • Build options
      • Customizing compiler flags
    • Tests
      • Unit tests
      • Postinstall tests
      • Config tests
      • Extra tests
      • Useful meson commands
    • Documentation
    • Tarball
    • Packaging
      • Systemd
      • Trust anchors
    • Docker image
  • Knot Resolver library
    • Requirements
    • For users
    • For developers
    • Writing layers
    • APIs in Lua
      • Elementary types and constants
      • Working with domain names
      • Working with resource records
      • Working with packets
      • Working with requests
      • Significant Lua API changes
        • Incompatible changes since 3.0.0
    • API reference
      • Name resolution
        • Example usage of the iterative API:
      • Cache
      • Rules
      • Nameservers
      • Modules
      • Utilities
      • Generics library
        • array
        • queue
        • pack
        • lru
        • trie
  • Modules API reference
    • Supported languages
    • The anatomy of an extension
    • Writing a module in Lua
    • Writing a module in C
    • Configuring modules
    • Exposing C module properties
      • Special properties
  • Worker API reference
  • Custom HTTP services
    • Custom RESTful services
Knot Resolver
  • Internal Lua configuration
  • View page source

Internal Lua configuration¶

  • Syntax
  • Documentation Conventions
  • Modules
    • modules.list()
    • modules.load()
    • modules.unload()
  • Networking and protocols
    • Server (communication with clients)
    • Client (retrieving answers from servers)
    • DNS protocol tweaks
  • Performance and resiliency
    • Cache
    • Multiple instances
    • Prefetching records
    • Cache prefilling
    • Serve stale
    • Root on loopback (RFC 7706)
    • Priming module
    • EDNS keepalive
    • XDP for higher UDP performance
  • Policy, access control, data manipulation
    • Query policies
    • Views and ACLs
    • Static hints
    • DNS64
    • IP address renumbering
    • Answer reordering
    • Rebinding protection
    • Refuse queries without RD bit
    • DNS Application Firewall
  • Logging, monitoring, diagnostics
    • log_level()
    • verbose()
    • log_target()
    • log_groups()
    • DNSSEC validation failure logging
    • Statistics collector
    • Scripting worker
    • Name Server Identifier (NSID)
    • Debugging a single request
    • Watchdog
    • Dnstap (traffic collection)
    • Sentinel for Detecting Trusted Root Keys
    • Signaling Trust Anchor Knowledge in DNSSEC
    • System time skew detector
    • Detect discontinuous jumps in the system time
    • Debugging options
    • Logging API
  • DNSSEC, data verification
    • trust_anchors.add_file()
    • trust_anchors.remove()
    • trust_anchors.set_insecure()
    • trust_anchors.add()
    • trust_anchors.summary()
    • mode()
  • Experimental features
    • Run-time reconfiguration
    • Experimental DNS-over-TLS Auto-discovery
Previous Next

© Copyright CZ.NIC labs.

Built with Sphinx using a theme provided by Read the Docs.