summaryrefslogtreecommitdiff
path: root/interface-definitions
diff options
context:
space:
mode:
authorchariri <w@chariri.moe>2026-08-16 05:51:03 +0900
committerchariri <w@chariri.moe>2026-08-26 03:11:48 +0900
commitdeeff86ce0e07382dba5fe5703ad09895a9615c8 (patch)
tree41438c734d9f39170985e53c9024dd0cc6d26eab /interface-definitions
parent745a4afd9bab8a99fdfdb38febe7bf39ac8e5a25 (diff)
downloadvyos-1x-deeff86ce0e07382dba5fe5703ad09895a9615c8.tar.gz
vyos-1x-deeff86ce0e07382dba5fe5703ad09895a9615c8.zip
dns: T8045: expose PowerDNS dont-query list as recursion-exclude-address
The `+=` append syntax is used for appending. To remove from the defaults, users can use negation.
Diffstat (limited to 'interface-definitions')
-rw-r--r--interface-definitions/service_dns_forwarding.xml.in48
1 files changed, 48 insertions, 0 deletions
diff --git a/interface-definitions/service_dns_forwarding.xml.in b/interface-definitions/service_dns_forwarding.xml.in
index b07e170f3..1cb1e4083 100644
--- a/interface-definitions/service_dns_forwarding.xml.in
+++ b/interface-definitions/service_dns_forwarding.xml.in
@@ -758,6 +758,54 @@
<valueless/>
</properties>
</leafNode>
+ <leafNode name="recursion-exclude-address">
+ <properties>
+ <help>Authoritative server addresses to exclude from recursive queries, use '!' to define an exception</help>
+ <valueHelp>
+ <format>ipv4</format>
+ <description>IPv4 address to exclude from recursive queries</description>
+ </valueHelp>
+ <valueHelp>
+ <format>ipv4net</format>
+ <description>IPv4 prefix to exclude from recursive queries</description>
+ </valueHelp>
+ <valueHelp>
+ <format>ipv6</format>
+ <description>IPv6 address to exclude from recursive queries</description>
+ </valueHelp>
+ <valueHelp>
+ <format>ipv6net</format>
+ <description>IPv6 prefix to exclude from recursive queries</description>
+ </valueHelp>
+ <valueHelp>
+ <format>!ipv4</format>
+ <description>IPv4 address exception to the recursive query exclusion list</description>
+ </valueHelp>
+ <valueHelp>
+ <format>!ipv4net</format>
+ <description>IPv4 prefix exception to the recursive query exclusion list</description>
+ </valueHelp>
+ <valueHelp>
+ <format>!ipv6</format>
+ <description>IPv6 address exception to the recursive query exclusion list</description>
+ </valueHelp>
+ <valueHelp>
+ <format>!ipv6net</format>
+ <description>IPv6 prefix exception to the recursive query exclusion list</description>
+ </valueHelp>
+ <constraint>
+ <validator name="ipv4-address"/>
+ <validator name="ipv4-prefix"/>
+ <validator name="ipv6-address"/>
+ <validator name="ipv6-prefix"/>
+ <validator name="ipv4-address-exclude"/>
+ <validator name="ipv4-prefix-exclude"/>
+ <validator name="ipv6-address-exclude"/>
+ <validator name="ipv6-prefix-exclude"/>
+ </constraint>
+ <multi/>
+ </properties>
+ </leafNode>
<leafNode name="exclude-throttle-address">
<properties>
<help>IP address or subnet</help>