OS Manuals

/usr/bin/dnsdist

PowerDNS dnsdist without dnscrypt

From dnsdist-2.0-nodnscrypt 2.0.6-r0 (os), captured 2026-11-05 by running dnsdist --help (exit 0). permalink

dnsdist 2.0.6

Syntax: dnsdist [-C,--config file] [-c,--client [IP[:PORT]]]
[-e,--execute cmd] [-h,--help] [-l,--local addr]
[-v,--verbose] [--check-config] [--version]

-a,--acl netmask      Add this netmask to the ACL
-C,--config file      Load configuration from 'file'
-c,--client           Operate as a client, connect to dnsdist. This reads
                      controlSocket from your configuration file, but also
                      accepts an IP:PORT argument
-k,--setkey KEY       Use KEY for encrypted communication to dnsdist. This
                      is similar to setting setKey in the configuration file.
                      NOTE: this will leak this key in your shell's history
                      and in the systems running process list.
--check-config        Validate the configuration file and exit. The exit-code
                      reflects the validation, 0 is OK, 1 means an error.
                      Any errors are printed as well.
-e,--execute cmd      Connect to dnsdist and execute 'cmd'
-g,--gid gid          Change the process group ID after binding sockets
-h,--help             Display this helpful message
-l,--local address    Listen on this local address
--supervised          Don't open a console, I'm supervised
                        (use with e.g. systemd and daemontools)
--disable-syslog      Don't log to syslog, only to stdout
                        (use with e.g. systemd)
--log-timestamps      Prepend timestamps to messages logged to stdout.
-u,--uid uid          Change the process user ID after binding sockets
-v,--verbose          Enable verbose mode
-V,--version          Show dnsdist version information and exit
Options (15)
OptionDescriptionSource
-a, --acl netmaskAdd this netmask to the ACLhelp
-C, --config fileLoad configuration from 'file'help
-c, --clientOperate as a client, connect to dnsdist.help
-k, --setkey KEYUse KEY for encrypted communication to dnsdist.help
--check-configTest the configuration file (which may be set with --config or -C) for errors.help + man
-e, --execute cmdConnect to dnsdist and execute command.help + man
-g, --gid gidChange the process group to gid after binding sockets.help + man
-h, --helpDisplay a helpful message and exit.help + man
-l, --local addressBind to address, Supply as many addresses (using multiple --local statements) to listen on as required.help + man
--supervisedDon't open a console, I'm supervised (use with e.g. systemd and daemontools)help + man
--disable-syslogDon't log to syslog, only to stdout (use with e.g. systemd)help + man
--log-timestampsPrepend timestamps to messages logged to standard out.help + man
-u, --uid uidChange the process user to uid after binding sockets.help + man
-v, --verboseEnable verbose modehelp + man
-V, --versionShow dnsdist version information and exithelp + man

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.