diff options
| author | mrpops2ko <34683587+mrpops2ko@users.noreply.github.com> | 2026-06-18 15:17:06 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-06-18 16:17:06 +0200 |
| commit | e64100195d16744db173d3217e6ec1e596c34ff1 (patch) | |
| tree | 553f6ae7d32f0320834b864185b5c246315ed7c3 /interface-definitions | |
| parent | 38e2293e046e88f4773f67d2084fdaf101c3fd6a (diff) | |
| download | vyos-1x-e64100195d16744db173d3217e6ec1e596c34ff1.tar.gz vyos-1x-e64100195d16744db173d3217e6ec1e596c34ff1.zip | |
T8881: dns: expose PowerDNS recursor cache tuning options (#5209)
Add refresh-on-ttl-perc, nothing-below-nxdomain, and minimum-ttl-override
under service dns forwarding with recursor template and smoketest coverage.
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Daniil Baturin <daniil@baturin.org>
Diffstat (limited to 'interface-definitions')
| -rw-r--r-- | interface-definitions/service_dns_forwarding.xml.in | 50 |
1 files changed, 50 insertions, 0 deletions
diff --git a/interface-definitions/service_dns_forwarding.xml.in b/interface-definitions/service_dns_forwarding.xml.in index d0bc2e6c8..b07e170f3 100644 --- a/interface-definitions/service_dns_forwarding.xml.in +++ b/interface-definitions/service_dns_forwarding.xml.in @@ -684,6 +684,56 @@ </properties> <defaultValue>0</defaultValue> </leafNode> + <leafNode name="ttl-percent"> + <properties> + <help>Refresh cached records when remaining TTL is below this percentage of the original TTL (0 to disable)</help> + <valueHelp> + <format>u32:0-100</format> + <description>Percentage of original TTL remaining before refresh</description> + </valueHelp> + <constraint> + <validator name="numeric" argument="--range 0-100"/> + </constraint> + </properties> + <defaultValue>0</defaultValue> + </leafNode> + <leafNode name="nothing-below-nxdomain"> + <properties> + <help>NXDOMAIN subtree handling (RFC 8020)</help> + <completionHelp> + <list>no dnssec yes</list> + </completionHelp> + <valueHelp> + <format>no</format> + <description>Do not apply RFC 8020 processing</description> + </valueHelp> + <valueHelp> + <format>dnssec</format> + <description>Apply RFC 8020 only for DNSSEC-validated NXDOMAIN records</description> + </valueHelp> + <valueHelp> + <format>yes</format> + <description>Apply for any cached NXDOMAIN that is not bogus</description> + </valueHelp> + <constraint> + <regex>(no|dnssec|yes)</regex> + </constraint> + </properties> + <defaultValue>dnssec</defaultValue> + </leafNode> + <leafNode name="minimum-ttl-override"> + <properties> + <help>Minimum TTL in seconds for cached DNS records</help> + <valueHelp> + <format>u32:0-2147483647</format> + <description>Minimum cached record TTL in seconds</description> + </valueHelp> + <constraint> + <validator name="numeric" argument="--range 0-2147483647"/> + </constraint> + </properties> + <defaultValue>1</defaultValue> + </leafNode> <leafNode name="timeout"> <properties> <help>Number of milliseconds to wait for a remote authoritative server to respond</help> |