diff options
| author | Christian Breunig <christian@breunig.cc> | 2024-02-01 20:26:20 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-02-01 20:26:20 +0100 |
| commit | 8af0791e2cded20e51feaa7ec130aa4f20194dbe (patch) | |
| tree | 3fd9f2d7e70b57eef97e3ad01956dee8c004a722 | |
| parent | 6196211d6fe0557cb215f1650e122d9523987a9b (diff) | |
| parent | ce0b62678f791a18dcc58defc209fbe71b868fca (diff) | |
| download | vyos-documentation-8af0791e2cded20e51feaa7ec130aa4f20194dbe.tar.gz vyos-documentation-8af0791e2cded20e51feaa7ec130aa4f20194dbe.zip | |
Merge pull request #1256 from HollyGurza/T6578
dns forwarding: T5687: Implement ECS settings for PowerDNS recursor
| -rw-r--r-- | docs/configuration/service/dns.rst | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/docs/configuration/service/dns.rst b/docs/configuration/service/dns.rst index 7624d309..e430dc73 100644 --- a/docs/configuration/service/dns.rst +++ b/docs/configuration/service/dns.rst @@ -156,6 +156,20 @@ avoid being tracked by the provider of your upstream DNS server. recursor does not like, it is throttled. Any servers matching the supplied netmasks will never be throttled. +.. cfgcmd:: set service dns forwarding options ecs-add-for <address> + + The requestor netmask for which the requestor IP Address should be used as the + EDNS Client Subnet for outgoing queries. + +.. cfgcmd:: set service dns forwarding options ecs-ipv4-bits <number> + + Number of bits of client IPv4 address to pass when sending EDNS Client Subnet + address information. + +.. cfgcmd:: set service dns forwarding options edns-subnet-allow-list <address|domain> + + The netmask or domain that EDNS Client Subnet should be enabled for in outgoing queries. + Example ======= |