diff options
| author | Christian Breunig <christian@breunig.cc> | 2024-02-01 20:29:05 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-02-01 20:29:05 +0100 |
| commit | 6c68854aae448e1fbbf5ecf5f3ec49a3d9a269a1 (patch) | |
| tree | 4577ad23a12af3ce36d8a6c2e46d0c73256eb899 /docs | |
| parent | 5d8be0756eccd59e09de3b481a64a1d2ddb71cdd (diff) | |
| parent | 6f9d52dcb3e32248f724bbac6e14c047011705ec (diff) | |
| download | vyos-documentation-6c68854aae448e1fbbf5ecf5f3ec49a3d9a269a1.tar.gz vyos-documentation-6c68854aae448e1fbbf5ecf5f3ec49a3d9a269a1.zip | |
Merge pull request #1259 from vyos/mergify/bp/sagitta/pr-1256
dns forwarding: T5687: Implement ECS settings for PowerDNS recursor (backport #1256)
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/configuration/service/dns.rst | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/docs/configuration/service/dns.rst b/docs/configuration/service/dns.rst index 7624d309..e430dc73 100644 --- a/docs/configuration/service/dns.rst +++ b/docs/configuration/service/dns.rst @@ -156,6 +156,20 @@ avoid being tracked by the provider of your upstream DNS server. recursor does not like, it is throttled. Any servers matching the supplied netmasks will never be throttled. +.. cfgcmd:: set service dns forwarding options ecs-add-for <address> + + The requestor netmask for which the requestor IP Address should be used as the + EDNS Client Subnet for outgoing queries. + +.. cfgcmd:: set service dns forwarding options ecs-ipv4-bits <number> + + Number of bits of client IPv4 address to pass when sending EDNS Client Subnet + address information. + +.. cfgcmd:: set service dns forwarding options edns-subnet-allow-list <address|domain> + + The netmask or domain that EDNS Client Subnet should be enabled for in outgoing queries. + Example ======= |