Nov 10 13:53:08 Unable to open /etc/pdns.conf syntax: --8bit-dns | --8bit-dns=yes | --8bit-dns=no Allow 8bit dns queries --allow-axfr-ips=... Allow zonetransfers only to these subnets --allow-dnsupdate-from=... A global setting to allow DNS updates from these IP ranges. --allow-notify-from=... Allow AXFR NOTIFY from these IP ranges. If empty, drop all incoming notifies. --allow-unsigned-autoprimary=... Allow autoprimaries to create zones without TSIG signed NOTIFY --allow-unsigned-notify=... Allow unsigned notifications for TSIG secured zones --also-notify=... When notifying a zone, also notify these nameservers --any-to-tcp | --any-to-tcp=yes | --any-to-tcp=no Answer ANY queries with tc=1, shunting to TCP --api | --api=yes | --api=no Enable/disable the REST API (including HTTP listener) --api-key=... Static pre-shared authentication key for access to the REST API --autosecondary | --autosecondary=yes | --autosecondary=no Act as an autosecondary --axfr-fetch-timeout=... Maximum time in seconds for inbound AXFR to start or be idle after starting --axfr-lower-serial | --axfr-lower-serial=yes | --axfr-lower-serial=no Also AXFR a zone from a primary with a lower serial --cache-ttl=... Seconds to store packets in the PacketCache --carbon-instance=... If set overwrites the instance name default --carbon-interval=... Number of seconds between carbon (graphite) updates --carbon-namespace=... If set overwrites the first part of the carbon string --carbon-ourname=... If set, overrides our reported hostname for carbon stats --carbon-server=... If set, send metrics in carbon (graphite) format to this server IP address --chroot=... If set, chroot to this directory for more security --config Provide configuration file on standard output --config-dir=... Location of configuration directory (pdns.conf) --config-name=... Name of this virtual configuration - will rename the binary image --consistent-backends | --consistent-backends=yes | --consistent-backends=no Assume individual zones are not divided over backends. Send only ANY lookup operations to the backend to reduce the number of lookups --control-console=... Debugging switch - don't use --daemon=... Operate as a daemon --default-api-rectify | --default-api-rectify=yes | --default-api-rectify=no Default API-RECTIFY value for zones --default-catalog-zone=... Catalog zone to assign newly created primary zones (via the API) to --default-ksk-algorithm=... Default KSK algorithm --default-ksk-size=... Default KSK size (0 means default) --default-publish-cdnskey=... Default value for PUBLISH-CDNSKEY --default-publish-cds=... Default value for PUBLISH-CDS --default-soa-content=... Default SOA content --default-soa-edit=... Default SOA-EDIT value --default-soa-edit-api=... Default SOA-EDIT-API value for new zones --default-soa-edit-signed=... Default SOA-EDIT value for signed zones --default-ttl=... Seconds a result is valid if not set otherwise --default-zsk-algorithm=... Default ZSK algorithm --default-zsk-size=... Default ZSK size (0 means default) --delay-notifications=... Configure a delay to send out notifications, no delay by default --direct-dnskey | --direct-dnskey=yes | --direct-dnskey=no Fetch DNSKEY, CDS and CDNSKEY RRs from backend during DNSKEY or CDS/CDNSKEY synthesis --direct-dnskey-signature | --direct-dnskey-signature=yes | --direct-dnskey-signature=no Fetch signature of DNSKEY RRs from backend directly --disable-axfr | --disable-axfr=yes | --disable-axfr=no Disable zonetransfers but do allow TCP queries --disable-axfr-rectify | --disable-axfr-rectify=yes | --disable-axfr-rectify=no Disable the rectify step during an outgoing AXFR. Only required for regression testing. --disable-syslog=... Disable logging to syslog, useful when running inside a supervisor that logs stderr --distributor-threads=... Default number of Distributor (backend) threads to start --dname-processing | --dname-processing=yes | --dname-processing=no If we should support DNAME records --dnsproxy-udp-port-range=... Select DNS Proxy outgoing UDP port from given range (lower upper) --dnssec-key-cache-ttl=... Seconds to cache DNSSEC keys from the database --dnsupdate | --dnsupdate=yes | --dnsupdate=no Enable/Disable DNS update (RFC2136) support. Default is no. --dnsupdate-require-tsig | --dnsupdate-require-tsig=yes | --dnsupdate-require-tsig=no Require TSIG secured DNS updates. Default is no. --domain-metadata-cache-ttl=... Seconds to cache zone metadata from the database --edns-cookie-secret=... When set, set a server cookie when responding to a query with a Client cookie (in hex) --edns-subnet-processing | --edns-subnet-processing=yes | --edns-subnet-processing=no If we should act on EDNS Subnet options --enable-lua-records | --enable-lua-records=yes | --enable-lua-records=no Process Lua records for all zones (metadata overrides this) --entropy-source=... --expand-alias | --expand-alias=yes | --expand-alias=no Expand ALIAS records --forward-dnsupdate | --forward-dnsupdate=yes | --forward-dnsupdate=no A global setting to allow DNS update packages that are for a Secondary zone, to be forwarded to the primary. --forward-notify=... IP addresses to forward received notifications to regardless of primary or secondary settings --guardian | --guardian=yes | --guardian=no Run within a guardian process --help Provide a helpful message --ignore-unknown-settings=... Configuration settings to ignore if they are unknown --include-dir=... Include *.conf files from this directory --launch=... Which backends to launch and order to query them in --list-modules Lists all modules available --load-modules=... Load this module - supply absolute or relative path --local-address=... Local IP addresses to which we bind --local-address-nonexist-fail | --local-address-nonexist-fail=yes | --local-address-nonexist-fail=no Fail to start if one or more of the local-address's do not exist on this server --local-port=... The port on which we listen --log-dns-details | --log-dns-details=yes | --log-dns-details=no If PDNS should log DNS non-erroneous details --log-dns-queries | --log-dns-queries=yes | --log-dns-queries=no If PDNS should log all incoming DNS queries --log-timestamp=... Print timestamps in log lines --logging-facility=... Log under a specific facility --loglevel=... Amount of logging. Higher is more. Do not set below 3 --loglevel-show | --loglevel-show=yes | --loglevel-show=no Include log level indicator in log output --lua-axfr-script=... Script to be used to edit incoming AXFRs --lua-consistent-hashes-cleanup-interval=... Pre-computed hashes cleanup interval (in seconds) --lua-consistent-hashes-expire-delay=... Cleanup pre-computed hashes that haven't been used for the given delay (in seconds). See pickchashed() Lua function --lua-dnsupdate-policy-script=... Lua script with DNS update policy handler --lua-global-include-dir=... Include *.lua files from this directory into Lua contexts --lua-health-checks-expire-delay=... Stops doing health checks after the record hasn't been used for that delay (in seconds) --lua-health-checks-interval=... Lua records health checks monitoring interval in seconds --lua-prequery-script=... Lua script with prequery handler (DO NOT USE) --lua-records-exec-limit=... Lua records scripts execution limit (instructions count). Values <= 0 mean no limit --lua-records-insert-whitespace | --lua-records-insert-whitespace=yes | --lua-records-insert-whitespace=no Insert whitespace when combining Lua chunks --max-cache-entries=... Maximum number of entries in the query cache --max-ent-entries=... Maximum number of empty non-terminals in a zone --max-generate-steps=... Maximum number of $GENERATE steps when loading a zone from a file --max-include-depth=... Maximum number of nested $INCLUDE directives while processing a zone file --max-nsec3-iterations=... Limit the number of NSEC3 hash iterations --max-packet-cache-entries=... Maximum number of entries in the packet cache --max-queue-length=... Maximum queuelength before considering situation lost --max-signature-cache-entries=... Maximum number of signatures cache entries --max-tcp-connection-duration=... Maximum time in seconds that a TCP DNS connection is allowed to stay open. --max-tcp-connections=... Maximum number of TCP connections --max-tcp-connections-per-client=... Maximum number of simultaneous TCP connections per client --max-tcp-transactions-per-conn=... Maximum number of subsequent queries per TCP connection --module-dir=... Default directory for modules --negquery-cache-ttl=... Seconds to store negative query results in the QueryCache --no-config Don't parse configuration file --no-shuffle | --no-shuffle=yes | --no-shuffle=no Set this to prevent random shuffling of answers - for regression testing --non-local-bind | --non-local-bind=yes | --non-local-bind=no Enable binding to non-local addresses by using FREEBIND / BINDANY socket options --only-notify=... Only send AXFR NOTIFY to these IP addresses or netmasks --outgoing-axfr-expand-alias=... Expand ALIAS records during outgoing AXFR --overload-queue-length=... Maximum queuelength moving to packetcache only --prevent-self-notification | --prevent-self-notification=yes | --prevent-self-notification=no Don't send notifications to what we think is ourself --primary | --primary=yes | --primary=no Act as a primary --proxy-protocol-from=... A Proxy Protocol header is only allowed from these subnets, and is mandatory then too. --proxy-protocol-maximum-size=... The maximum size of a proxy protocol payload, including the TLV values --query-cache-ttl=... Seconds to store query results in the QueryCache --query-local-address=... Source IP addresses for sending queries --query-logging | --query-logging=yes | --query-logging=no Hint backends that queries should be logged --queue-limit=... Maximum number of milliseconds to queue a query --receiver-threads=... Default number of receiver threads to start --resolve-across-zones | --resolve-across-zones=yes | --resolve-across-zones=no Resolve CNAME targets and other referrals across local zones --resolver=... Use this resolver for ALIAS and the internal stub resolver --retrieval-threads=... Number of AXFR-retrieval threads for secondary operation --reuseport | --reuseport=yes | --reuseport=no Enable higher performance on compliant kernels by using SO_REUSEPORT allowing each receiver thread to open its own socket --rng=... --secondary | --secondary=yes | --secondary=no Act as a secondary --secondary-check-signature-freshness=... Check signatures in SOA freshness check. Sets DO flag on SOA queries. Outside some very problematic scenarios, say yes here. --secondary-do-renotify=... If this secondary should send out notifications after receiving zone transfers from a primary --security-poll-suffix=... Zone name from which to query security update notifications --send-signed-notify | --send-signed-notify=yes | --send-signed-notify=no Send TSIG secured NOTIFY if TSIG key is configured for a zone --server-id=... Returned when queried for 'id.server' TXT or NSID, defaults to hostname - disabled or custom --setgid=... If set, change group id to this gid for more security --setuid=... If set, change user id to this uid for more security --signing-threads=... Default number of signer threads to start --socket-dir=... Where the controlsocket will live, /var/run/pdns when unset and not chrooted. Set to the RUNTIME_DIRECTORY environment variable when that variable has a value (e.g. under systemd). --svc-autohints | --svc-autohints=yes | --svc-autohints=no Transparently fill ipv6hint=auto ipv4hint=auto SVC params with AAAA/A records for the target name of the record (if within the same zone) --tcp-control-address=... If set, PowerDNS can be controlled over TCP on this address --tcp-control-port=... If set, PowerDNS can be controlled over TCP on this port --tcp-control-range=... If set, remote control of PowerDNS is possible over these networks only --tcp-control-secret=... If set, PowerDNS can be controlled over TCP after passing this secret --tcp-fast-open=... Enable TCP Fast Open support on the listening sockets, using the supplied numerical value as the queue size --tcp-idle-timeout=... Maximum time in seconds that a TCP DNS connection is allowed to stay open while being idle --traceback-handler | --traceback-handler=yes | --traceback-handler=no Enable the traceback handler (Linux only) --trusted-notification-proxy=... IP address of incoming notification proxy --udp-truncation-threshold=... Maximum UDP response size before we truncate --upgrade-unknown-types | --upgrade-unknown-types=yes | --upgrade-unknown-types=no Transparently upgrade known TYPExxx records. Recommended to keep off, except for PowerDNS upgrades until data sources are cleaned up --version Output version and compilation date --version-string=... PowerDNS version in packets - full, anonymous, powerdns or custom --views | --views=yes | --views=no Enable views (variants) of zones, for backends which support them --webserver | --webserver=yes | --webserver=no Start a webserver for monitoring (api=yes also enables the HTTP listener) --webserver-address=... IP Address or path to UNIX domain socket for webserver/API to listen on --webserver-allow-from=... Webserver/API access is only allowed from these subnets --webserver-connection-timeout=... Webserver/API request/response timeout in seconds --webserver-hash-plaintext-credentials | --webserver-hash-plaintext-credentials=yes | --webserver-hash-plaintext-credentials=no Whether to hash passwords and api keys supplied in plaintext, to prevent keeping the plaintext version in memory at runtime --webserver-loglevel=... Amount of logging in the webserver (none, normal, detailed) --webserver-max-bodysize=... Webserver/API maximum request/response body size in megabytes --webserver-password=... Password required for accessing the webserver --webserver-port=... Port of webserver/API to listen on --webserver-print-arguments | --webserver-print-arguments=yes | --webserver-print-arguments=no If the webserver should print arguments --workaround-11804 | --workaround-11804=yes | --workaround-11804=no Workaround for issue 11804: send single RR per AXFR chunk --write-pid | --write-pid=yes | --write-pid=no Write a PID file --xfr-cycle-interval=... Schedule primary/secondary SOA freshness checks once every .. seconds --xfr-max-received-mbytes=... Maximum number of megabytes received from an incoming XFR --zone-cache-refresh-interval=... Seconds to cache list of known zones --zone-metadata-cache-ttl=... Seconds to cache zone metadata from the database