/usr/bin/pdns_server

Nov 09 15:07:46 Unable to open /etc/pdns.conf
syntax:

  --8bit-dns | --8bit-dns=yes | --8bit-dns=no
	Allow 8bit dns queries
  --allow-axfr-ips=...
	Allow zonetransfers only to these subnets
  --allow-dnsupdate-from=...
	A global setting to allow DNS updates from these IP ranges.
  --allow-notify-from=...
	Allow AXFR NOTIFY from these IP ranges. If empty, drop all incoming notifies.
  --allow-unsigned-autoprimary=...
	Allow autoprimaries to create zones without TSIG signed NOTIFY
  --allow-unsigned-notify=...
	Allow unsigned notifications for TSIG secured zones
  --also-notify=...
	When notifying a zone, also notify these nameservers
  --any-to-tcp | --any-to-tcp=yes | --any-to-tcp=no
	Answer ANY queries with tc=1, shunting to TCP
  --api | --api=yes | --api=no
	Enable/disable the REST API (including HTTP listener)
  --api-key=...
	Static pre-shared authentication key for access to the REST API
  --autosecondary | --autosecondary=yes | --autosecondary=no
	Act as an autosecondary
  --axfr-fetch-timeout=...
	Maximum time in seconds for inbound AXFR to start or be idle after starting
  --axfr-lower-serial | --axfr-lower-serial=yes | --axfr-lower-serial=no
	Also AXFR a zone from a primary with a lower serial
  --cache-ttl=...
	Seconds to store packets in the PacketCache
  --carbon-instance=...
	If set overwrites the instance name default
  --carbon-interval=...
	Number of seconds between carbon (graphite) updates
  --carbon-namespace=...
	If set overwrites the first part of the carbon string
  --carbon-ourname=...
	If set, overrides our reported hostname for carbon stats
  --carbon-server=...
	If set, send metrics in carbon (graphite) format to this server IP address
  --chroot=...
	If set, chroot to this directory for more security
  --config
	Provide configuration file on standard output
  --config-dir=...
	Location of configuration directory (pdns.conf)
  --config-name=...
	Name of this virtual configuration - will rename the binary image
  --consistent-backends | --consistent-backends=yes | --consistent-backends=no
	Assume individual zones are not divided over backends. Send only ANY lookup operations to the backend to reduce the number of lookups
  --control-console=...
	Debugging switch - don't use
  --daemon=...
	Operate as a daemon
  --default-api-rectify | --default-api-rectify=yes | --default-api-rectify=no
	Default API-RECTIFY value for zones
  --default-catalog-zone=...
	Catalog zone to assign newly created primary zones (via the API) to
  --default-ksk-algorithm=...
	Default KSK algorithm
  --default-ksk-size=...
	Default KSK size (0 means default)
  --default-publish-cdnskey=...
	Default value for PUBLISH-CDNSKEY
  --default-publish-cds=...
	Default value for PUBLISH-CDS
  --default-soa-content=...
	Default SOA content
  --default-soa-edit=...
	Default SOA-EDIT value
  --default-soa-edit-api=...
	Default SOA-EDIT-API value for new zones
  --default-soa-edit-signed=...
	Default SOA-EDIT value for signed zones
  --default-ttl=...
	Seconds a result is valid if not set otherwise
  --default-zsk-algorithm=...
	Default ZSK algorithm
  --default-zsk-size=...
	Default ZSK size (0 means default)
  --delay-notifications=...
	Configure a delay to send out notifications, no delay by default
  --direct-dnskey | --direct-dnskey=yes | --direct-dnskey=no
	Fetch DNSKEY, CDS and CDNSKEY RRs from backend during DNSKEY or CDS/CDNSKEY synthesis
  --direct-dnskey-signature | --direct-dnskey-signature=yes | --direct-dnskey-signature=no
	Fetch signature of DNSKEY RRs from backend directly
  --disable-axfr | --disable-axfr=yes | --disable-axfr=no
	Disable zonetransfers but do allow TCP queries
  --disable-axfr-rectify | --disable-axfr-rectify=yes | --disable-axfr-rectify=no
	Disable the rectify step during an outgoing AXFR. Only required for regression testing.
  --disable-syslog=...
	Disable logging to syslog, useful when running inside a supervisor that logs stderr
  --distributor-threads=...
	Default number of Distributor (backend) threads to start
  --dname-processing | --dname-processing=yes | --dname-processing=no
	If we should support DNAME records
  --dnsproxy-udp-port-range=...
	Select DNS Proxy outgoing UDP port from given range (lower upper)
  --dnssec-key-cache-ttl=...
	Seconds to cache DNSSEC keys from the database
  --dnsupdate | --dnsupdate=yes | --dnsupdate=no
	Enable/Disable DNS update (RFC2136) support. Default is no.
  --dnsupdate-require-tsig | --dnsupdate-require-tsig=yes | --dnsupdate-require-tsig=no
	Require TSIG secured DNS updates. Default is no.
  --domain-metadata-cache-ttl=...
	Seconds to cache zone metadata from the database
  --edns-cookie-secret=...
	When set, set a server cookie when responding to a query with a Client cookie (in hex)
  --edns-subnet-processing | --edns-subnet-processing=yes | --edns-subnet-processing=no
	If we should act on EDNS Subnet options
  --enable-lua-record-updates | --enable-lua-record-updates=yes | --enable-lua-record-updates=no
	Allow updates to Lua records
  --enable-lua-records | --enable-lua-records=yes | --enable-lua-records=no
	Process Lua records for all zones (metadata overrides this)
  --entropy-source=...

  --expand-alias | --expand-alias=yes | --expand-alias=no
	Expand ALIAS records
  --forward-dnsupdate | --forward-dnsupdate=yes | --forward-dnsupdate=no
	A global setting to allow DNS update packages that are for a Secondary zone, to be forwarded to the primary.
  --forward-notify=...
	IP addresses to forward received notifications to regardless of primary or secondary settings
  --guardian | --guardian=yes | --guardian=no
	Run within a guardian process
  --help
	Provide a helpful message
  --ignore-unknown-settings=...
	Configuration settings to ignore if they are unknown
  --include-dir=...
	Include *.conf files from this directory
  --launch=...
	Which backends to launch and order to query them in
  --list-modules
	Lists all modules available
  --load-modules=...
	Load this module - supply absolute or relative path
  --local-address=...
	Local IP addresses to which we bind
  --local-address-nonexist-fail | --local-address-nonexist-fail=yes | --local-address-nonexist-fail=no
	Fail to start if one or more of the local-address's do not exist on this server
  --local-port=...
	The port on which we listen
  --log-dns-details | --log-dns-details=yes | --log-dns-details=no
	If PDNS should log DNS non-erroneous details
  --log-dns-queries | --log-dns-queries=yes | --log-dns-queries=no
	If PDNS should log all incoming DNS queries
  --log-timestamp=...
	Print timestamps in log lines
  --logging-facility=...
	Log under a specific facility
  --logging-structured | --logging-structured=yes | --logging-structured=no
	Produce structured log messages
  --loglevel=...
	Amount of logging. Higher is more. Do not set below 3
  --loglevel-show | --loglevel-show=yes | --loglevel-show=no
	Include log level indicator in log output
  --lua-axfr-script=...
	Script to be used to edit incoming AXFRs
  --lua-consistent-hashes-cleanup-interval=...
	Pre-computed hashes cleanup interval (in seconds)
  --lua-consistent-hashes-expire-delay=...
	Cleanup pre-computed hashes that haven't been used for the given delay (in seconds). See pickchashed() Lua function
  --lua-dnsupdate-policy-script=...
	Lua script with DNS update policy handler
  --lua-global-include-dir=...
	Include *.lua files from this directory into Lua contexts
  --lua-health-checks-expire-delay=...
	Stops doing health checks after the record hasn't been used for that delay (in seconds)
  --lua-health-checks-interval=...
	Lua records health checks monitoring interval in seconds
  --lua-prequery-script=...
	Lua script with prequery handler (DO NOT USE)
  --lua-records-exec-limit=...
	Lua records scripts execution limit (instructions count). Values <= 0 mean no limit
  --lua-records-insert-whitespace | --lua-records-insert-whitespace=yes | --lua-records-insert-whitespace=no
	Insert whitespace when combining Lua chunks
  --max-cache-entries=...
	Maximum number of entries in the query cache
  --max-ent-entries=...
	Maximum number of empty non-terminals in a zone
  --max-generate-steps=...
	Maximum number of $GENERATE steps when loading a zone from a file
  --max-include-depth=...
	Maximum number of nested $INCLUDE directives while processing a zone file
  --max-nsec3-iterations=...
	Limit the number of NSEC3 hash iterations
  --max-packet-cache-entries=...
	Maximum number of entries in the packet cache
  --max-pointers-per-name=...
	Maximum number of name pointers followed per name
  --max-pointers-per-packet-byte=...
	Maximum number of name pointers per DNS packet byte followed
  --max-pointers-to-pointers=...
	Maximum number of name pointers pointing directly to another pointer per name
  --max-queue-length=...
	Maximum queuelength before considering situation lost
  --max-signature-cache-entries=...
	Maximum number of signatures cache entries
  --max-tcp-connection-duration=...
	Maximum time in seconds that a TCP DNS connection is allowed to stay open.
  --max-tcp-connections=...
	Maximum number of TCP connections
  --max-tcp-connections-per-client=...
	Maximum number of simultaneous TCP connections per client
  --max-tcp-transactions-per-conn=...
	Maximum number of subsequent queries per TCP connection
  --member-catalog-group=...
	Catalog group used to signal that a member zone is a catalog
  --module-dir=...
	Default directory for modules
  --naptr-additional-processing | --naptr-additional-processing=yes | --naptr-additional-processing=no
	Add NAPTR a and s records to the additional section
  --negquery-cache-ttl=...
	Seconds to store negative query results in the QueryCache
  --no-config
	Don't parse configuration file
  --no-shuffle | --no-shuffle=yes | --no-shuffle=no
	Set this to prevent random shuffling of answers - for regression testing
  --non-local-bind | --non-local-bind=yes | --non-local-bind=no
	Enable binding to non-local addresses by using FREEBIND / BINDANY socket options
  --only-notify=...
	Only send AXFR NOTIFY to these IP addresses or netmasks
  --outgoing-axfr-expand-alias=...
	Expand ALIAS records during outgoing AXFR
  --overload-queue-length=...
	Maximum queuelength moving to packetcache only
  --prevent-self-notification | --prevent-self-notification=yes | --prevent-self-notification=no
	Don't send notifications to what we think is ourself
  --primary | --primary=yes | --primary=no
	Act as a primary
  --protobuf-servers=...
	Servers to send protobuf logging to
  --proxy-protocol-from=...
	A Proxy Protocol header is only allowed from these subnets, and is mandatory then too.
  --proxy-protocol-maximum-size=...
	The maximum size of a proxy protocol payload, including the TLV values
  --query-cache-ttl=...
	Seconds to store query results in the QueryCache
  --query-local-address=...
	Source IP addresses for sending queries
  --query-logging | --query-logging=yes | --query-logging=no
	Hint backends that queries should be logged
  --queue-limit=...
	Maximum number of milliseconds to queue a query
  --receiver-threads=...
	Default number of receiver threads to start
  --resolve-across-zones | --resolve-across-zones=yes | --resolve-across-zones=no
	Resolve CNAME targets and other referrals across local zones
  --resolver=...
	Use this resolver for ALIAS and the internal stub resolver
  --retrieval-threads=...
	Number of AXFR-retrieval threads for secondary operation
  --reuseport | --reuseport=yes | --reuseport=no
	Enable higher performance on compliant kernels by using SO_REUSEPORT allowing each receiver thread to open its own socket
  --rng=...

  --rrsig-expiry-extend=...
	Seconds to extend RRSIG expiry by, or follow soa-edit-spread
  --secondary | --secondary=yes | --secondary=no
	Act as a secondary
  --secondary-check-signature-freshness=...
	Check signatures in SOA freshness check. Sets DO flag on SOA queries. Outside some very problematic scenarios, say yes here.
  --secondary-do-renotify=...
	If this secondary should send out notifications after receiving zone transfers from a primary
  --security-poll-suffix=...
	Zone name from which to query security update notifications
  --send-signed-notify | --send-signed-notify=yes | --send-signed-notify=no
	Send TSIG secured NOTIFY if TSIG key is configured for a zone
  --server-id=...
	Returned when queried for 'id.server' TXT or NSID, defaults to hostname - disabled or custom
  --setgid=...
	If set, change group id to this gid for more security
  --setuid=...
	If set, change user id to this uid for more security
  --signing-threads=...
	Default number of signer threads to start
  --soa-edit-spread=...
	Seconds to spread SOA-EDIT bumps over
  --socket-dir=...
	Where the controlsocket will live, /var/run/pdns when unset and not chrooted. Set to the RUNTIME_DIRECTORY environment variable when that variable has a value (e.g. under systemd).
  --svc-autohints | --svc-autohints=yes | --svc-autohints=no
	Transparently fill ipv6hint=auto ipv4hint=auto SVC params with AAAA/A records for the target name of the record (if within the same zone)
  --tcp-control-address=...
	If set, PowerDNS can be controlled over TCP on this address
  --tcp-control-port=...
	If set, PowerDNS can be controlled over TCP on this port
  --tcp-control-range=...
	If set, remote control of PowerDNS is possible over these networks only
  --tcp-control-secret=...
	If set, PowerDNS can be controlled over TCP after passing this secret
  --tcp-fast-open=...
	Enable TCP Fast Open support on the listening sockets, using the supplied numerical value as the queue size
  --tcp-idle-timeout=...
	Maximum time in seconds that a TCP DNS connection is allowed to stay open while being idle
  --traceback-handler | --traceback-handler=yes | --traceback-handler=no
	Enable the traceback handler (Linux only)
  --trusted-notification-proxy=...
	IP address of incoming notification proxy
  --udp-truncation-threshold=...
	Maximum UDP response size before we truncate
  --upgrade-unknown-types | --upgrade-unknown-types=yes | --upgrade-unknown-types=no
	Transparently upgrade known TYPExxx records. Recommended to keep off, except for PowerDNS upgrades until data sources are cleaned up
  --version
	Output version and compilation date
  --version-string=...
	PowerDNS version in packets - full, anonymous, powerdns or custom
  --views | --views=yes | --views=no
	Enable views (variants) of zones, for backends which support them
  --webserver | --webserver=yes | --webserver=no
	Start a webserver for monitoring (api=yes also enables the HTTP listener)
  --webserver-address=...
	IP Address or path to UNIX domain socket for webserver/API to listen on
  --webserver-allow-from=...
	Webserver/API access is only allowed from these subnets
  --webserver-connection-timeout=...
	Webserver/API request/response timeout in seconds
  --webserver-cross-origin-request-header=...
	Webserver cross origin request header value
  --webserver-hash-plaintext-credentials | --webserver-hash-plaintext-credentials=yes | --webserver-hash-plaintext-credentials=no
	Whether to hash passwords and api keys supplied in plaintext, to prevent keeping the plaintext version in memory at runtime
  --webserver-loglevel=...
	Amount of logging in the webserver (none, normal, detailed)
  --webserver-max-bodysize=...
	Webserver/API maximum request/response body size in megabytes
  --webserver-max-concurrent-connections=...
	Webserver/API maximum concurrent connections allowed
  --webserver-password=...
	Password required for accessing the webserver
  --webserver-port=...
	Port of webserver/API to listen on
  --webserver-print-arguments | --webserver-print-arguments=yes | --webserver-print-arguments=no
	If the webserver should print arguments
  --workaround-11804 | --workaround-11804=yes | --workaround-11804=no
	Workaround for issue 11804: send single RR per AXFR chunk
  --write-pid | --write-pid=yes | --write-pid=no
	Write a PID file
  --xfr-cycle-interval=...
	Schedule primary/secondary SOA freshness checks once every .. seconds
  --xfr-max-received-mbytes=...
	Maximum number of megabytes received from an incoming XFR
  --zone-cache-refresh-interval=...
	Seconds to cache list of known zones
  --zone-metadata-cache-ttl=...
	Seconds to cache zone metadata from the database