BRs for tar.xz source

[packages/bind.git] / bind-named.conf

diff --git a/bind-named.conf b/bind-named.conf
index 83e3783bd5a9bf90264c49058e54caa458118a47..7968c2b4da7bd494f0a1ed5119ac2427e8ce78fd 100644 (file)
--- a/bind-named.conf
+++ b/bind-named.conf
@@ -5,15 +5,25 @@ options {
        pid-file "named.pid";
        auth-nxdomain yes;
        datasize default;
-// Uncoment these to enable IPv6 connections support
-// IPv4 will still work
-//     listen-on { none; };
+// For IPv4 and IPv6 uncoment listen-on and listen-on-v6 entries.
+// Regular DNS
+//     listen-on { any; };
+// DNS-over-TLS (DoT)
+//     listen-on tls ephemeral { any; };
+// DNS-over-HTTPS (DoH)
+//     listen-on tls ephemeral http local { any; };
 //     listen-on-v6 { any; };
+//     listen-on-v6 tls ephemeral { any; };
+//     listen-on-v6 tls ephemeral http local { any; };
 
-       #dnssec-enable yes;      # enable DNSSEC, default yes
+//     dnssec-enable yes;      # enable DNSSEC, default yes
        dnssec-validation auto;  # enable DNSSEC validation with the key from bind.keys
 };
 
+http local {
+    endpoints { "/dns-query"; };
+};
+
 zone "localhost" IN {
        type master;
        file "M/localhost.zone";