vyos-1x.git/data/templates/dns-forwarding, branch rolling

dns: T9175: rename security-poll-suffix option to security-status-poll-domain

2026-09-01T12:16:05+00:00

Per dmbaturin's review: the value is a full FQDN, not a suffix, and the help text should clarify that the poll checks for known vulnerabilities in the running PowerDNS recursor version.

dns: T9175: make PowerDNS security status poll opt-in

2026-09-01T12:16:05+00:00

The PowerDNS recursor periodically polls secpoll.powerdns.com to check for known security issues, but VyOS ships a patched/backported package that is never updated in-place, so the check result is meaningless and only produces log noise. Add a new `service dns forwarding options security-poll-suffix` option, disabled by default. Users who still want the check (e.g. against PowerDNS' own poll domain, or a custom one) can opt back in.

dns: T8045: expose PowerDNS dont-query list as recursion-exclude-address

2026-08-25T18:11:48+00:00

The `+=` append syntax is used for appending. To remove from the defaults, users can use negation.

T8881: dns: expose PowerDNS recursor cache tuning options (#5209)

2026-06-18T14:17:06+00:00

Add refresh-on-ttl-perc, nothing-below-nxdomain, and minimum-ttl-override under service dns forwarding with recursor template and smoketest coverage. Co-authored-by: Cursor Co-authored-by: Daniil Baturin

T6294: Service dns forwarding add the ability to configure ZonetoCache

2024-09-11T07:14:31+00:00

dns forwarding: T5687: Implement ECS settings for PowerDNS recursor

2024-01-30T09:45:54+00:00

dns: T5959: Streamline dns forwarding service

2024-01-21T19:29:25+00:00

Streamline configuration and operation of dns forwarding service in following ways: - Remove `dns_forwarding_reset.py` as its functionality is now covered by `dns.py` - Adjust function names in `dns.py` to disambiguate between DNS forwarding and dynamic DNS - Remove `dns_forwarding_restart.sh` as its functionality is inlined in `dns-forwarding.xml` - Templatize systemd override for `pdns-recursor.service` and move the generated override files in /run. This ensures that the override files are always generated afresh after boot - Simplify the systemd override file by removing the redundant overrides - Relocate configuration path for pdns-recursor to `/run/pdns-recursor` and utilize the `RuntimeDirectory` default that pdns-recursor expects - We do not need to use custom `--socket-dir` path anymore, the default path (viz., `/run/pdns-recursor` is fine)

dns: T5900: fix smoketests for serve-stale-extension and exclude-throttle-address

2024-01-06T19:48:59+00:00

This fixes commit 199ceb1f0a ("dns: T5900: add dont-throttle-netmasks and serve-stale-extensions powerdns features") where after the latest review round the Jinja2 template was inconsitently changed and smoketests were not re-run.

dns: T5900: add dont-throttle-netmasks and serve-stale-extensions powerdns features

2024-01-06T12:02:11+00:00

T5474: establish common file name pattern for XML conf mode commands

2023-12-31T22:49:48+00:00

We will use _ as CLI level divider. The XML definition filename and also the Python helper should match the CLI node. Example: set interfaces ethernet -> interfaces_ethernet.xml.in set interfaces bond -> interfaces_bond.xml.in set service dhcp-server -> service_dhcp-server-xml.in