summaryrefslogtreecommitdiff
path: root/interface-definitions
diff options
context:
space:
mode:
authorJernej Jakob <jernej.jakob@gmail.com>2020-06-11 09:12:00 +0200
committerJernej Jakob <jernej.jakob@gmail.com>2020-06-11 22:10:47 +0200
commit64b4f483832b436849ecbbd30c3cbea0bd663648 (patch)
tree75a2d92a5691a0733bcd9e2c38abea312e9d726a /interface-definitions
parent0f8beae7426dfc1fdb75c993a505672d9dd2ec0f (diff)
downloadvyos-1x-64b4f483832b436849ecbbd30c3cbea0bd663648.tar.gz
vyos-1x-64b4f483832b436849ecbbd30c3cbea0bd663648.zip
dns forwarding: T2486: add conf nodes 'addnta', 'recursion-desired', migrator
Add new nodes for 'service dns forwarding domain': 'addnta': adds addNTA to lua-config-file 'recursion-desired': sets '+' before the zone in forward-zones-file The migrator sets both options for all configured domains. This is usually the desired config.
Diffstat (limited to 'interface-definitions')
-rw-r--r--interface-definitions/dns-forwarding.xml.in14
1 files changed, 13 insertions, 1 deletions
diff --git a/interface-definitions/dns-forwarding.xml.in b/interface-definitions/dns-forwarding.xml.in
index 8b89bf758..993d69fe1 100644
--- a/interface-definitions/dns-forwarding.xml.in
+++ b/interface-definitions/dns-forwarding.xml.in
@@ -28,7 +28,7 @@
</leafNode>
<leafNode name="dhcp">
<properties>
- <help>Use DNS servers received from DHCP server for specified interface</help>
+ <help>Interfaces whose DHCP client nameservers to forward requests to</help>
<completionHelp>
<script>${vyos_completion_dir}/list_interfaces.py</script>
</completionHelp>
@@ -89,6 +89,18 @@
</constraint>
</properties>
</leafNode>
+ <leafNode name="addnta">
+ <properties>
+ <help>Add NTA (negative trust anchor) for this domain (must be set if the domain doesn't support DNSSEC)</help>
+ <valueless/>
+ </properties>
+ </leafNode>
+ <leafNode name="recursion-desired">
+ <properties>
+ <help>Set the "recursion desired" bit in requests to the upstream nameserver</help>
+ <valueless/>
+ </properties>
+ </leafNode>
</children>
</tagNode>
<leafNode name="ignore-hosts-file">