blob: fbd0140216a72b4aac5879f1ff23ea9890214ba2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
|
-- Config file with split-view for internal zone
-- Refer to manual: https://knot-resolver.readthedocs.io/en/latest/daemon.html#configuration
-- Listen on localhost and external interface
net = { '127.0.0.1', '::1', '192.168.1.1' }
-- Drop root privileges
user('knot-resolver', 'knot-resolver')
-- Auto-maintain root TA
trust_anchors.file = 'root.keys'
-- Load Useful modules
modules = {
'hints > iterate', -- Load /etc/hosts and allow custom root hints
'stats', -- Track internal statistics
graphite = { -- Send statistics to local InfluxDB
-- `worker.id` allows us to keep per-fork statistics
prefix = hostname()..worker.id,
-- Address of the Graphite/InfluxDB server
host = '192.168.1.2',
},
-- Use DNS64 with specified NAT64 address
dns64 = 'fe80::21b:77ff:0:0',
}
-- Large cache size, so we don't need to flush often
-- This can be larger than available RAM, least frequently accessed
-- records will be paged out
cache.size = 4 * GB
-- Forward everything below `company.cz` to `192.168.1.3`
policy.add(policy.suffix(policy.FORWARD('192.168.1.3'), {todname('company.cz')}))
|
