Skip to content

DnsServerSettings.adoc

Latest commit

 

History

History
505 lines (421 loc) · 9.67 KB

DnsServerSettings.adoc

File metadata and controls

505 lines (421 loc) · 9.67 KB

DSC Resource 'DnsServerSettings'

DnsServerSettings manages comprehensive DNS server settings and properties.

When to use 'DnsServerSettings'

Use this resource when you need to configure detailed DNS server operational settings such as round robin, BIND secondaries, DNSSEC, IPv6, XFR connect timeout, recursion, and dozens of other server-level parameters. This is the primary resource for tuning DNS server behavior.

Source

DSC Resource

Documentation
Note

See the specification of DnsServerSetting to get a more detailed description of all supported attributes.
Table 1. Attributes of category 'DnsServerSettings'
Parameter Attribute DataType Description Allowed Values

DnsServer

Mandatory

String

Specifies the DNS server to connect to, or use localhost for the current node.

AddressAnswerLimit

UInt32

Maximum number of host records returned in response to an address request.

AllowUpdate

Boolean

Specifies whether the DNS Server accepts dynamic update requests.

  • True

  • False

AutoCacheUpdate

Boolean

Indicates whether the DNS Server attempts to update its cache entries using data from root servers.

  • True

  • False

AutoConfigFileZones

UInt32

Indicates which standard primary zones that are authoritative for the name of the DNS Server must be updated when the name server changes.

BindSecondaries

Boolean

Determines the AXFR message format when sending to non-Microsoft DNS Server secondaries.

  • True

  • False

BootMethod

UInt32

Initialization method for the DNS Server.

DisableAutoReverseZone

Boolean

Indicates whether the DNS Server automatically creates standard reverse lookup zones.

  • True

  • False

EnableDirectoryPartitions

Boolean

Specifies whether support for application directory partitions is enabled on the DNS Server.

  • True

  • False

EnableDnsSec

Boolean

Specifies whether the DNS Server includes DNSSEC-specific resource records in responses.

  • True

  • False

ForwardDelegations

Boolean

Specifies whether queries to delegated sub-zones are forwarded.

  • True

  • False

ListeningIPAddress

String[]

List of IP addresses on which the DNS Server listens for queries.

LocalNetPriority

Boolean

Indicates whether the DNS Server gives priority to the local net address when returning A records.

  • True

  • False

LooseWildcarding

Boolean

Indicates whether the DNS Server performs loose wildcarding.

  • True

  • False

NameCheckFlag

UInt32

Indicates the set of eligible characters to be used in DNS names.

RoundRobin

Boolean

Indicates whether the DNS Server round robins multiple A records.

  • True

  • False

RpcProtocol

UInt32

RPC protocol or protocols over which administrative RPC runs.

SendPort

UInt32

Port on which the DNS Server sends UDP queries to other servers.

StrictFileParsing

Boolean

Indicates whether the DNS Server parses zone files strictly.

  • True

  • False

UpdateOptions

UInt32

Restricts the type of records that can be dynamically updated on the server.

WriteAuthorityNS

Boolean

Specifies whether the DNS Server writes NS and SOA records to the authority section on successful response.

  • True

  • False

XfrConnectTimeout

UInt32

Time, in seconds, the DNS Server waits for a successful TCP connection to a remote server when attempting a zone transfer.

EnableIPv6

Boolean

Specifies whether IPv6 is enabled on the DNS Server.

  • True

  • False

EnableOnlineSigning

Boolean

Specifies whether online signing of DNS records is enabled.

  • True

  • False

EnableDuplicateQuerySuppression

Boolean

Specifies whether the DNS Server suppresses duplicate queries.

  • True

  • False

AllowCnameAtNs

Boolean

Specifies whether CNAME records are allowed at the NS delegation point.

  • True

  • False

EnableRsoForRodc

Boolean

Specifies whether read-only domain controller (RODC) read-only secondary operations (RSO) are enabled.

  • True

  • False

OpenAclOnProxyUpdates

Boolean

Specifies whether open ACLs are used on proxy dynamic updates.

  • True

  • False

NoUpdateDelegations

Boolean

Specifies whether to suppress dynamic updates at delegation points.

  • True

  • False

EnableUpdateForwarding

Boolean

Specifies whether dynamic update requests are forwarded to the primary server.

  • True

  • False

EnableWinsR

Boolean

Specifies whether WINS-R (WINS reverse lookup) is enabled on the DNS Server.

  • True

  • False

DeleteOutsideGlue

Boolean

Specifies whether the DNS Server deletes outside glue records.

  • True

  • False

AppendMsZoneTransferTag

Boolean

Specifies whether the Microsoft-specific zone transfer tag is appended to zone transfers.

  • True

  • False

AllowReadOnlyZoneTransfer

Boolean

Specifies whether zone transfers from read-only zones are allowed.

  • True

  • False

EnableSendErrorSuppression

Boolean

Specifies whether the DNS Server suppresses sending error responses.

  • True

  • False

SilentlyIgnoreCnameUpdateConflicts

Boolean

Specifies whether the DNS Server silently ignores CNAME update conflicts.

  • True

  • False

EnableIQueryResponseGeneration

Boolean

Specifies whether the DNS Server generates responses to IQUERY requests.

  • True

  • False

AdminConfigured

Boolean

Indicates whether the DNS Server has been administratively configured.

  • True

  • False

PublishAutoNet

Boolean

Specifies whether the DNS Server publishes AutoNet (APIPA) addresses.

  • True

  • False

ReloadException

Boolean

Specifies whether the DNS Server reloads exception data.

  • True

  • False

IgnoreServerLevelPolicies

Boolean

Specifies whether server-level DNS policies are ignored.

  • True

  • False

IgnoreAllPolicies

Boolean

Specifies whether all DNS policies are ignored.

  • True

  • False

EnableVersionQuery

UInt32

Specifies the level of version query response from the DNS Server.

AutoCreateDelegation

UInt32

Specifies the auto-creation mode for delegations.

RemoteIPv4RankBoost

UInt32

Rank boost value applied to remote IPv4 addresses during name resolution.

RemoteIPv6RankBoost

UInt32

Rank boost value applied to remote IPv6 addresses during name resolution.

MaximumRodcRsoQueueLength

UInt32

Maximum queue length for read-only domain controller RSO operations.

MaximumRodcRsoAttemptsPerCycle

UInt32

Maximum number of RSO attempts per cycle for read-only domain controllers.

MaxResourceRecordsInNonSecureUpdate

UInt32

Maximum number of resource records accepted in a single non-secure dynamic update.

LocalNetPriorityMask

UInt32

Network mask used when determining local net priority.

TcpReceivePacketSize

UInt32

Maximum TCP receive packet size for the DNS Server.

SelfTest

UInt32

Self-test bitmask that determines which tests the DNS Server runs at startup.

XfrThrottleMultiplier

UInt32

Multiplier used for throttling zone transfer requests.

SocketPoolSize

UInt32

Number of sockets in the UDP socket pool used by the DNS Server.

QuietRecvFaultInterval

UInt32

Interval, in seconds, for quiet receive fault detection.

QuietRecvLogInterval

UInt32

Interval, in seconds, for quiet receive fault logging.

SyncDsZoneSerial

UInt32

Specifies how the DNS Server synchronizes zone serial numbers from Active Directory.

ScopeOptionValue

UInt32

Scope option value used for DNS Server scope operations.

VirtualizationInstanceOptionValue

UInt32

Option value for the DNS Server virtualization instance.

ServerLevelPluginDll

String

Path to a server-level plugin DLL loaded by the DNS Server.

RootTrustAnchorsURL

String

URL from which the DNS Server retrieves root trust anchors.

SocketPoolExcludedPortRanges

String[]

Port ranges excluded from the DNS Server socket pool.

LameDelegationTTL

String

Time-to-live for lame delegation detection caching.

MaximumSignatureScanPeriod

String

Maximum period between DNSSEC signature scans.

MaximumTrustAnchorActiveRefreshInterval

String

Maximum interval for active refresh of DNSSEC trust anchors.

ZoneWritebackInterval

String

Interval at which zone data is written back to persistent storage.
Example
DnsServerSettings:
  DnsServer: localhost
  ListeningIPAddress:
    - 192.168.30.111
  RoundRobin: true
  LocalNetPriority: true
  BindSecondaries: false
  StrictFileParsing: false
  EnableIPv6: true
  EnableDnsSec: false
  AllowUpdate: true
  XfrConnectTimeout: 30