summaryrefslogtreecommitdiff
path: root/docs/configuration/service
diff options
context:
space:
mode:
authorkhramshinr <khramshinr@gmail.com>2024-01-30 21:02:23 +0700
committerkhramshinr <khramshinr@gmail.com>2024-01-30 21:02:23 +0700
commitce0b62678f791a18dcc58defc209fbe71b868fca (patch)
treed03291e6431efea3584f97ddda8955db5833d0dc /docs/configuration/service
parentc1716052eba00ad6c612755f55015e840e946828 (diff)
downloadvyos-documentation-ce0b62678f791a18dcc58defc209fbe71b868fca.tar.gz
vyos-documentation-ce0b62678f791a18dcc58defc209fbe71b868fca.zip
dns forwarding: T5687: Implement ECS settings for PowerDNS recursor
Diffstat (limited to 'docs/configuration/service')
-rw-r--r--docs/configuration/service/dns.rst14
1 files changed, 14 insertions, 0 deletions
diff --git a/docs/configuration/service/dns.rst b/docs/configuration/service/dns.rst
index 7624d309..e430dc73 100644
--- a/docs/configuration/service/dns.rst
+++ b/docs/configuration/service/dns.rst
@@ -156,6 +156,20 @@ avoid being tracked by the provider of your upstream DNS server.
recursor does not like, it is throttled. Any servers matching the supplied
netmasks will never be throttled.
+.. cfgcmd:: set service dns forwarding options ecs-add-for <address>
+
+ The requestor netmask for which the requestor IP Address should be used as the
+ EDNS Client Subnet for outgoing queries.
+
+.. cfgcmd:: set service dns forwarding options ecs-ipv4-bits <number>
+
+ Number of bits of client IPv4 address to pass when sending EDNS Client Subnet
+ address information.
+
+.. cfgcmd:: set service dns forwarding options edns-subnet-allow-list <address|domain>
+
+ The netmask or domain that EDNS Client Subnet should be enabled for in outgoing queries.
+
Example
=======