diff options
| author | Ruben Herold <ruben@puettmann.net> | 2026-09-28 11:44:19 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-09-28 10:44:19 +0100 |
| commit | ed96f4952154bff54de9c9662af879bfb385c6d7 (patch) | |
| tree | d0deb2ddc7ec8a2bb018645ed6dc277b591166f0 /docs/_include | |
| parent | 3f1a2f8e600eebd2de93486d097d3f3b2268b016 (diff) | |
| download | vyos-documentation-ed96f4952154bff54de9c9662af879bfb385c6d7.tar.gz vyos-documentation-ed96f4952154bff54de9c9662af879bfb385c6d7.zip | |
docs: T9175: document dns forwarding options security-status-poll-domain (#2193)
* docs: T9175: document dns forwarding options security-poll-suffix
Document the new opt-in `service dns forwarding options
security-poll-suffix` setting that controls the PowerDNS recursor's
periodic security status poll, disabled by default.
* docs: T9175: fix security-poll-suffix placement and clarify disable
The security-poll-suffix cfgcmd was placed under "Per-domain
forwarding" even though it's a global forwarding option, and used the
"forwarding options" convention (bold summary + Example block) used
by ecs-add-for/ecs-ipv4-bits/edns-subnet-allow-list right above it.
Also documents how to disable polling again (delete the option),
clarifies it only takes effect with a non-empty suffix, and that
secpoll.powerdns.com is PowerDNS' own poll domain rather than a VyOS
default. Switches secpoll.powerdns.com from double to single
backticks, matching MyST inline-code convention.
Flagged by CodeRabbit and the Claude review bot on PR #2193.
* docs: T9175: rename security-poll-suffix option to security-status-poll-domain
Follows vyos-1x PR #5389 rename per dmbaturin's review: the value is a
full FQDN, not a suffix, and the poll checks for known vulnerabilities.
Diffstat (limited to 'docs/_include')
0 files changed, 0 insertions, 0 deletions