summaryrefslogtreecommitdiff
path: root/docs/configuration/service/dns.rst
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2024-02-01 20:29:05 +0100
committerGitHub <noreply@github.com>2024-02-01 20:29:05 +0100
commit6c68854aae448e1fbbf5ecf5f3ec49a3d9a269a1 (patch)
tree4577ad23a12af3ce36d8a6c2e46d0c73256eb899 /docs/configuration/service/dns.rst
parent5d8be0756eccd59e09de3b481a64a1d2ddb71cdd (diff)
parent6f9d52dcb3e32248f724bbac6e14c047011705ec (diff)
downloadvyos-documentation-6c68854aae448e1fbbf5ecf5f3ec49a3d9a269a1.tar.gz
vyos-documentation-6c68854aae448e1fbbf5ecf5f3ec49a3d9a269a1.zip
Merge pull request #1259 from vyos/mergify/bp/sagitta/pr-1256
dns forwarding: T5687: Implement ECS settings for PowerDNS recursor (backport #1256)
Diffstat (limited to 'docs/configuration/service/dns.rst')
-rw-r--r--docs/configuration/service/dns.rst14
1 files changed, 14 insertions, 0 deletions
diff --git a/docs/configuration/service/dns.rst b/docs/configuration/service/dns.rst
index 7624d309..e430dc73 100644
--- a/docs/configuration/service/dns.rst
+++ b/docs/configuration/service/dns.rst
@@ -156,6 +156,20 @@ avoid being tracked by the provider of your upstream DNS server.
recursor does not like, it is throttled. Any servers matching the supplied
netmasks will never be throttled.
+.. cfgcmd:: set service dns forwarding options ecs-add-for <address>
+
+ The requestor netmask for which the requestor IP Address should be used as the
+ EDNS Client Subnet for outgoing queries.
+
+.. cfgcmd:: set service dns forwarding options ecs-ipv4-bits <number>
+
+ Number of bits of client IPv4 address to pass when sending EDNS Client Subnet
+ address information.
+
+.. cfgcmd:: set service dns forwarding options edns-subnet-allow-list <address|domain>
+
+ The netmask or domain that EDNS Client Subnet should be enabled for in outgoing queries.
+
Example
=======