summaryrefslogtreecommitdiff
path: root/interface-definitions
diff options
context:
space:
mode:
Diffstat (limited to 'interface-definitions')
-rw-r--r--interface-definitions/service_dns_forwarding.xml.in50
1 files changed, 50 insertions, 0 deletions
diff --git a/interface-definitions/service_dns_forwarding.xml.in b/interface-definitions/service_dns_forwarding.xml.in
index d0bc2e6c8..b07e170f3 100644
--- a/interface-definitions/service_dns_forwarding.xml.in
+++ b/interface-definitions/service_dns_forwarding.xml.in
@@ -684,6 +684,56 @@
</properties>
<defaultValue>0</defaultValue>
</leafNode>
+ <leafNode name="ttl-percent">
+ <properties>
+ <help>Refresh cached records when remaining TTL is below this percentage of the original TTL (0 to disable)</help>
+ <valueHelp>
+ <format>u32:0-100</format>
+ <description>Percentage of original TTL remaining before refresh</description>
+ </valueHelp>
+ <constraint>
+ <validator name="numeric" argument="--range 0-100"/>
+ </constraint>
+ </properties>
+ <defaultValue>0</defaultValue>
+ </leafNode>
+ <leafNode name="nothing-below-nxdomain">
+ <properties>
+ <help>NXDOMAIN subtree handling (RFC 8020)</help>
+ <completionHelp>
+ <list>no dnssec yes</list>
+ </completionHelp>
+ <valueHelp>
+ <format>no</format>
+ <description>Do not apply RFC 8020 processing</description>
+ </valueHelp>
+ <valueHelp>
+ <format>dnssec</format>
+ <description>Apply RFC 8020 only for DNSSEC-validated NXDOMAIN records</description>
+ </valueHelp>
+ <valueHelp>
+ <format>yes</format>
+ <description>Apply for any cached NXDOMAIN that is not bogus</description>
+ </valueHelp>
+ <constraint>
+ <regex>(no|dnssec|yes)</regex>
+ </constraint>
+ </properties>
+ <defaultValue>dnssec</defaultValue>
+ </leafNode>
+ <leafNode name="minimum-ttl-override">
+ <properties>
+ <help>Minimum TTL in seconds for cached DNS records</help>
+ <valueHelp>
+ <format>u32:0-2147483647</format>
+ <description>Minimum cached record TTL in seconds</description>
+ </valueHelp>
+ <constraint>
+ <validator name="numeric" argument="--range 0-2147483647"/>
+ </constraint>
+ </properties>
+ <defaultValue>1</defaultValue>
+ </leafNode>
<leafNode name="timeout">
<properties>
<help>Number of milliseconds to wait for a remote authoritative server to respond</help>