v5.2.1
Quick Start
Installation
Startup
First DNS query
Configuration
Listening on network interfaces
Scenario: Internal Resolver
Internal-only domains
Scenario: ISP Resolver
Limiting client access
TLS server configuration
Mandatory domain blocking
Scenario: Personal Resolver
Forwarding over TLS protocol (DNS-over-TLS)
Forwarding to multiple targets
Non-persistent cache
Configuration
Configuration Overview
Syntax
Documentation Conventions
Modules
Networking and protocols
Server (communication with clients)
Addresses and services
Features for scripting
DoT and DoH (encrypted DNS)
DNS-over-TLS (DoT)
DNS-over-HTTPS (DoH)
Configuration options
Other HTTP services
Example configuration
HTTPS (TLS for HTTP)
Legacy DNS-over-HTTPS (DoH)
Built-in services
Dependencies
Client (retrieving answers from servers)
IPv4 and IPv6 usage
Forwarding
DNS protocol tweaks
DNS protocol tweaks
Performance and resiliency
Cache
Sizing
Persistence
Configuration reference
Multiple instances
Zero-downtime restarts
Instance-specific configuration
Prefetching records
Example configuration
Exported metrics
Properties
Cache prefilling
Dependencies
Serve stale
Running
Root on loopback (RFC 7706)
Priming module
EDNS keepalive
XDP for higher UDP performance
Prerequisites
Set up
Optimizations
Limitations
Policy, access control, data manipulation
Query policies
Filters
Actions
Non-chain actions
Chain actions
Custom actions
Forwarding
Forwarding over TLS protocol (DNS-over-TLS)
CA+hostname authentication
Key-pinned authentication
TLS Examples
Forwarding to multiple targets
Replacing part of the DNS tree
Response policy zones
Additional properties
Views and ACLs
Example configuration
Rule order
Properties
Static hints
Examples
Properties
DNS64
Example configuration
IP address renumbering
Example configuration
Answer reordering
Rebinding protection
Refuse queries without RD bit
DNS Application Firewall
Example configuration
Web interface
RESTful interface
Logging, monitoring, diagnostics
DNSSEC validation failure logging
Statistics collector
Built-in statistics
Module reference
Graphite/InfluxDB/Metronome
Dependencies
Prometheus metrics endpoint
Scripting worker
Name Server Identifier (NSID)
Debugging a single request
Watchdog
Dnstap (traffic collection)
Sentinel for Detecting Trusted Root Keys
Signaling Trust Anchor Knowledge in DNSSEC
System time skew detector
Detect discontinuous jumps in the system time
DNSSEC, data verification
Experimental features
Run-time reconfiguration
Control sockets
Lua scripts
Helper functions
Asynchronous events
Timers and events reference
Asynchronous function execution
Etcd support
Example configuration
Dependencies
Experimental DNS-over-TLS Auto-discovery
How it works
Generating NS target names
Example configuration
Caveats
Dependencies
Usage without systemd
Process management
Garbage Collector
Privileges and capabilities
Using capabilities
Running as non-privileged user
Running as root
Operation
Upgrading
Upcoming changes
5.1 to 5.2
Users
Configuration file
Module changes
5.0 to 5.1
Module changes
4.x to 5.x
Users
Configuration file
4.2.2 to 4.3+
Module changes
4.x to 4.2.1+
Users
3.x to 4.x
Users
Configuration file
Packagers & Developers
Module changes
2.x to 3.x
Users
Packagers & Developers
Module changes
Release notes
Version numbering
Knot Resolver 5.2.1 (2020-12-09)
Improvements
Bugfixes
Knot Resolver 5.2.0 (2020-11-11)
Improvements
Bugfixes
Incompatible changes
Knot Resolver 5.1.3 (2020-09-08)
Improvements
Bugfixes
Knot Resolver 5.1.2 (2020-07-01)
Bugfixes
Knot Resolver 5.1.1 (2020-05-19)
Security
Bugfixes
Knot Resolver 5.1.0 (2020-04-29)
Improvements
Bugfixes
Incompatible changes
Knot Resolver 5.0.1 (2020-02-05)
Bugfixes
Improvements
Knot Resolver 5.0.0 (2020-01-27)
Incompatible changes
Improvements
Bugfixes
Knot Resolver 4.3.0 (2019-12-04)
Security - CVE-2019-19331
Bugfixes
Improvements
Knot Resolver 4.2.2 (2019-10-07)
Bugfixes
Knot Resolver 4.2.1 (2019-09-26)
Bugfixes
Improvements
Knot Resolver 4.2.0 (2019-08-05)
Improvements
Bugfixes
Module API changes
Knot Resolver 4.1.0 (2019-07-10)
Security
Improvements
Bugfixes
Module API changes
Knot Resolver 4.0.0 (2019-04-18)
Incompatible changes
Improvements
Bugfixes
Module API changes
Knot Resolver 3.2.1 (2019-01-10)
Bugfixes
Improvements
Knot Resolver 3.2.0 (2018-12-17)
New features
Bugfixes
Improvements
Module API changes
Knot Resolver 3.1.0 (2018-11-02)
Incompatible changes
Improvements
Bugfixes
Knot Resolver 3.0.0 (2018-08-20)
Incompatible changes
Bugfixes
Improvements
Knot Resolver 2.4.1 (2018-08-02)
Security
Bugfixes
Knot Resolver 2.4.0 (2018-07-03)
Incompatible changes
Security
New features
Bugfixes
Improvements
Knot Resolver 2.3.0 (2018-04-23)
Security
New features
Bugfixes
Improvements
Knot Resolver 2.2.0 (2018-03-28)
New features
Bugfixes
Knot Resolver 2.1.1 (2018-02-23)
Bugfixes
Knot Resolver 2.1.0 (2018-02-16)
Incompatible changes
Bugfixes
Knot Resolver 2.0.0 (2018-01-31)
Incompatible changes
New features
Bugfixes
Knot Resolver 1.5.3 (2018-01-23)
Bugfixes
Knot Resolver 1.5.2 (2018-01-22)
Security
Bugfixes
Knot Resolver 1.5.1 (2017-12-12)
Incompatible changes
Bugfixes
Improvements
Knot Resolver 1.5.0 (2017-11-02)
Bugfixes
Improvements
Knot Resolver 1.99.1-alpha (2017-10-26)
Improvements
Regressions
Knot Resolver 1.4.0 (2017-09-22)
Incompatible changes
Bugfixes
Improvements
Knot Resolver 1.3.3 (2017-08-09)
Security
Bugfixes
Improvements
Knot Resolver 1.3.2 (2017-07-28)
Security
Bugfixes
Improvements
Knot Resolver 1.3.1 (2017-06-23)
Bugfixes
Knot Resolver 1.3.0 (2017-06-13)
Security
Improvements
Bugfixes
Knot Resolver 1.2.6 (2017-04-24)
Security
Improvements
Bugfixes
Knot Resolver 1.2.5 (2017-04-05)
Security
Improvements
Bugfixes
Knot Resolver 1.2.4 (2017-03-09)
Security
Improvements
Bugfixes
Knot Resolver 1.2.3 (2017-02-23)
Bugfixes
Knot Resolver 1.2.2 (2017-02-10)
Bugfixes:
Testing:
Knot Resolver 1.2.1 (2017-02-01)
Security:
Documentation
Bugfixes:
Knot Resolver 1.2.0 (2017-01-24)
Security:
Improvements:
Bugfixes:
Miscellaneous:
Knot Resolver 1.1.1 (2016-08-24)
Bugfixes:
Improvements:
Knot Resolver 1.1.0 (2016-08-12)
Improvements:
Knot Resolver 1.0.0 (2016-05-30)
Initial release:
Developers
Building from sources
Dependencies
Packaged dependencies
Compilation
Build options
Customizing compiler flags
Tests
Documentation
Tarball
Packaging
Systemd
Trust anchors
Docker image
Custom HTTP services
Custom RESTful services
Knot Resolver library
Requirements
For users
For developers
Writing layers
APIs in Lua
Elementary types and constants
Working with domain names
Working with resource records
Working with packets
Working with requests
Significant Lua API changes
Incompatible changes since 3.0.0
API reference
Name resolution
Cache
Nameservers
Modules
Utilities
Generics library
array
queue
map
set
pack
lru
trie
Modules API reference
Supported languages
The anatomy of an extension
Writing a module in Lua
Writing a module in C
Configuring modules
Exposing C module properties
Special properties
Worker API reference
Knot Resolver
Docs
»
Index
Index
A
|
B
|
C
|
D
|
E
|
F
|
G
|
H
|
I
|
K
|
L
|
M
|
N
|
P
|
Q
|
R
|
S
|
T
|
U
|
V
|
W
A
add() (in module policy)
all() (in module policy)
alloc_wire_f (C type)
ANSWER() (in module policy)
array_clear (C macro)
array_clear_mm (C macro)
array_del (C macro)
array_init (C macro)
array_next_count (C function)
array_pop (C macro)
array_push (C macro)
array_push_mm (C macro)
array_reserve (C macro)
array_reserve_mm (C macro)
array_std_free (C function)
array_std_reserve (C function)
array_t (C macro)
array_tail (C macro)
B
built-in function
cache.backends()
cache.clear()
cache.close()
cache.count()
cache.fssize()
cache.get()
cache.max_ttl()
cache.min_ttl()
cache.ns_tout()
cache.open()
cache.stats()
event.after()
event.cancel()
event.recurrent()
event.reschedule()
event.socket()
fromjson()
hints.add_hosts()
hints.config()
hints.del()
hints.get()
hints.root()
hints.root_file()
hints.set()
hints.ttl()
hints.use_nodata()
hostname()
map()
mode()
modules.list()
modules.load()
modules.unload()
net.bufsize()
net.close()
net.interfaces()
net.list()
net.listen()
net.outgoing_v4()
net.outgoing_v6()
net.tcp_pipeline()
net.tls()
net.tls_padding()
net.tls_sticket_secret()
net.tls_sticket_secret_file()
package_version()
predict.config()
reorder_RR()
resolve()
stats.clear_frequent()
stats.frequent()
stats.get()
stats.list()
stats.set()
stats.upstreams()
tojson()
trust_anchors.add()
trust_anchors.add_file()
trust_anchors.remove()
trust_anchors.set_insecure()
trust_anchors.summary()
user()
verbose()
worker.coroutine()
worker.sleep()
worker.stats()
C
cache.backends()
built-in function
cache.clear()
built-in function
cache.close()
built-in function
cache.count()
built-in function
cache.fssize()
built-in function
cache.get()
built-in function
cache.max_ttl()
built-in function
cache.min_ttl()
built-in function
cache.ns_tout()
built-in function
cache.open()
built-in function
cache.size
cache.stats()
built-in function
cache_peek (C function)
cache_stash (C function)
custom_action() (in module policy)
custom_filter() (in module policy)
D
DEBUG_ALWAYS (in module policy)
DEBUG_CACHE_MISS (in module policy)
DEBUG_IF() (in module policy)
del() (in module policy)
DENY (in module policy)
DENY_MSG() (in module policy)
DROP (in module policy)
E
environment variable
cache.current_size
cache.current_storage
cache.size
,
[1]
cache.storage
env (table)
net.ipv4 = true|false
net.ipv6 = true|false
trust_anchors.hold_down_time = 30 * day
trust_anchors.keep_removed = 0
trust_anchors.refresh_time = nil
worker.id
,
[1]
,
[2]
,
[3]
worker.pid
,
[1]
event.after()
built-in function
event.cancel()
built-in function
event.recurrent()
built-in function
event.reschedule()
built-in function
event.socket()
built-in function
F
FLAGS() (in module policy)
FORWARD() (in module policy)
fromjson()
built-in function
G
get_workdir (C function)
H
hints.add_hosts()
built-in function
hints.config()
built-in function
hints.del()
built-in function
hints.get()
built-in function
hints.root()
built-in function
hints.root_file()
built-in function
hints.set()
built-in function
hints.ttl()
built-in function
hints.use_nodata()
built-in function
hostname()
built-in function
I
inaddr (C union)
inaddr.ip (C var)
inaddr.ip4 (C var)
inaddr.ip6 (C var)
K
KEY_COVERING_RRSIG (C function)
KEY_FLAG_RANK (C function)
KEY_FLAG_RRSIG (C var)
knot_dname_lf2wire (C function)
kr_absolutize_path (C function)
kr_bitcmp (C function)
kr_cache (C struct)
kr_cache.api (C var)
kr_cache.checkpoint_monotime (C var)
kr_cache.checkpoint_walltime (C var)
kr_cache.db (C var)
kr_cache.health_timer (C var)
kr_cache.stats (C var)
kr_cache.ttl_max (C var)
kr_cache.ttl_min (C var)
kr_cache_check_health (C function)
kr_cache_clear (C function)
kr_cache_close (C function)
kr_cache_closest_apex (C function)
kr_cache_commit (C function)
kr_cache_emergency_file_to_remove (C var)
kr_cache_insert_rr (C function)
kr_cache_is_open (C function)
kr_cache_make_checkpoint (C function)
kr_cache_match (C function)
kr_cache_materialize (C function)
kr_cache_open (C function)
kr_cache_p (C struct)
kr_cache_p.[anonymous] (C var)
kr_cache_p.rank (C var)
kr_cache_p.raw_bound (C var)
kr_cache_p.raw_data (C var)
kr_cache_p.time (C var)
kr_cache_p.ttl (C var)
kr_cache_peek_exact (C function)
kr_cache_remove (C function)
kr_cache_remove_subtree (C function)
kr_cache_ttl (C function)
KR_COLD (C macro)
KR_CONST (C macro)
kr_context (C struct)
kr_context.cache (C var)
kr_context.cache_cookie (C var)
kr_context.cache_rep (C var)
kr_context.cache_rtt (C var)
kr_context.cache_rtt_tout_retry_interval (C var)
kr_context.cookie_ctx (C var)
kr_context.downstream_opt_rr (C var)
kr_context.modules (C var)
kr_context.negative_anchors (C var)
kr_context.options (C var)
kr_context.pool (C var)
kr_context.root_hints (C var)
kr_context.tls_padding (C var)
kr_context.trust_anchors (C var)
kr_context.upstream_opt_rr (C var)
kr_dirent_name (C function)
KR_DNAME_GET_STR (C macro)
kr_dname_lf (C function)
kr_dname_text (C function)
kr_error (C function)
KR_EXPORT (C macro)
kr_family_len (C function)
kr_file_mtime (C function)
kr_fssize (C function)
kr_inaddr (C function)
kr_inaddr_family (C function)
kr_inaddr_len (C function)
kr_inaddr_port (C function)
kr_inaddr_set_port (C function)
kr_inaddr_str (C function)
kr_layer (C struct)
kr_layer.api (C var)
kr_layer.dst (C var)
kr_layer.is_stream (C var)
kr_layer.pkt (C var)
kr_layer.req (C var)
kr_layer.state (C var)
kr_layer_api (C struct)
kr_layer_api.answer_finalize (C var)
kr_layer_api.begin (C var)
kr_layer_api.cb_slots (C var)
kr_layer_api.checkout (C var)
kr_layer_api.consume (C var)
kr_layer_api.data (C var)
kr_layer_api.finish (C var)
kr_layer_api.produce (C var)
kr_layer_api.reset (C var)
kr_layer_api_t (C type)
kr_layer_pickle (C struct)
kr_layer_pickle.api (C var)
kr_layer_pickle.next (C var)
kr_layer_pickle.pkt (C var)
kr_layer_pickle.state (C var)
kr_layer_state (C enum)
kr_layer_state.KR_STATE_CONSUME (C enumerator)
kr_layer_state.KR_STATE_DONE (C enumerator)
kr_layer_state.KR_STATE_FAIL (C enumerator)
kr_layer_state.KR_STATE_PRODUCE (C enumerator)
kr_layer_state.KR_STATE_YIELD (C enumerator)
kr_layer_t (C type)
kr_log_deprecate (C macro)
kr_log_error (C macro)
kr_log_info (C macro)
kr_log_q (C function)
kr_log_qtrace_enabled (C macro)
kr_log_req (C function)
kr_log_rtrace_enabled (C macro)
kr_log_verbose (C macro)
kr_memreserve (C function)
kr_module (C struct)
kr_module.config (C var)
kr_module.data (C var)
kr_module.deinit (C var)
kr_module.init (C var)
kr_module.layer (C var)
kr_module.lib (C var)
kr_module.name (C var)
kr_module.props (C var)
KR_MODULE_API (C macro)
kr_module_call (C function)
KR_MODULE_EXPORT (C macro)
kr_module_get_embedded (C function)
kr_module_init_cb (C type)
kr_module_load (C function)
kr_module_unload (C function)
KR_NORETURN (C macro)
kr_now (C function)
KR_NS_DEAD (C macro)
KR_NS_FWD_DEAD (C macro)
kr_ns_rep (C enum)
kr_ns_rep.KR_NS_NOEDNS (C enumerator)
kr_ns_rep.KR_NS_NOIP4 (C enumerator)
kr_ns_rep.KR_NS_NOIP6 (C enumerator)
kr_ns_score (C enum)
kr_ns_score.KR_NS_FWD_TIMEOUT (C enumerator)
kr_ns_score.KR_NS_GLUED (C enumerator)
kr_ns_score.KR_NS_LONG (C enumerator)
kr_ns_score.KR_NS_MAX_SCORE (C enumerator)
kr_ns_score.KR_NS_PENALTY (C enumerator)
kr_ns_score.KR_NS_TIMEOUT (C enumerator)
kr_ns_score.KR_NS_UNKNOWN (C enumerator)
KR_NS_TIMEOUT_RETRY_INTERVAL (C macro)
kr_ns_update_mode (C enum)
kr_ns_update_mode.KR_NS_ADD (C enumerator)
kr_ns_update_mode.KR_NS_MAX (C enumerator)
kr_ns_update_mode.KR_NS_RESET (C enumerator)
kr_ns_update_mode.KR_NS_UPDATE (C enumerator)
kr_ns_update_mode.KR_NS_UPDATE_NORESET (C enumerator)
kr_nsrep (C struct)
kr_nsrep.addr (C var)
kr_nsrep.ctx (C var)
kr_nsrep.name (C var)
kr_nsrep.reputation (C var)
kr_nsrep.score (C var)
kr_nsrep_copy_set (C function)
kr_nsrep_elect (C function)
kr_nsrep_elect_addr (C function)
kr_nsrep_lru_t (C type)
KR_NSREP_MAXADDR (C macro)
kr_nsrep_rtt_lru_entry (C struct)
kr_nsrep_rtt_lru_entry.score (C var)
kr_nsrep_rtt_lru_entry.tout_timestamp (C var)
kr_nsrep_rtt_lru_entry_t (C type)
kr_nsrep_rtt_lru_t (C type)
kr_nsrep_set (C function)
kr_nsrep_sort (C function)
kr_nsrep_update_rep (C function)
kr_nsrep_update_rtt (C function)
kr_ntop_str (C function)
kr_ok (C macro)
kr_pkt_clear_payload (C function)
kr_pkt_has_dnssec (C function)
kr_pkt_make_auth_header (C function)
kr_pkt_put (C function)
kr_pkt_qclass (C function)
kr_pkt_qtype (C function)
kr_pkt_recycle (C function)
kr_pkt_text (C function)
KR_PRINTF (C macro)
kr_prop (C struct)
kr_prop.cb (C var)
kr_prop.info (C var)
kr_prop.name (C var)
KR_PURE (C macro)
kr_qflags (C struct)
kr_qflags.ALLOW_LOCAL (C var)
kr_qflags.ALWAYS_CUT (C var)
kr_qflags.AWAIT_CUT (C var)
kr_qflags.AWAIT_IPV4 (C var)
kr_qflags.AWAIT_IPV6 (C var)
kr_qflags.BADCOOKIE_AGAIN (C var)
kr_qflags.CACHE_TRIED (C var)
kr_qflags.CACHED (C var)
kr_qflags.CNAME (C var)
kr_qflags.DNS64_MARK (C var)
kr_qflags.DNSSEC_BOGUS (C var)
kr_qflags.DNSSEC_CD (C var)
kr_qflags.DNSSEC_INSECURE (C var)
kr_qflags.DNSSEC_NODS (C var)
kr_qflags.DNSSEC_OPTOUT (C var)
kr_qflags.DNSSEC_WANT (C var)
kr_qflags.DNSSEC_WEXPAND (C var)
kr_qflags.EXPIRING (C var)
kr_qflags.FORWARD (C var)
kr_qflags.NO_0X20 (C var)
kr_qflags.NO_CACHE (C var)
kr_qflags.NO_IPV4 (C var)
kr_qflags.NO_IPV6 (C var)
kr_qflags.NO_MINIMIZE (C var)
kr_qflags.NO_NS_FOUND (C var)
kr_qflags.NO_THROTTLE (C var)
kr_qflags.NONAUTH (C var)
kr_qflags.PERMISSIVE (C var)
kr_qflags.PKT_IS_SANE (C var)
kr_qflags.REORDER_RR (C var)
kr_qflags.RESOLVED (C var)
kr_qflags.SAFEMODE (C var)
kr_qflags.STRICT (C var)
kr_qflags.STUB (C var)
kr_qflags.TCP (C var)
kr_qflags.TRACE (C var)
kr_qflags_clear (C function)
kr_qflags_set (C function)
kr_query (C struct)
kr_query.cname_depth (C var)
kr_query.cname_parent (C var)
kr_query.creation_time_mono (C var)
kr_query.deferred (C var)
kr_query.flags (C var)
kr_query.forward_flags (C var)
kr_query.id (C var)
kr_query.ns (C var)
kr_query.parent (C var)
kr_query.reorder (C var)
kr_query.request (C var)
kr_query.sclass (C var)
kr_query.secret (C var)
kr_query.sname (C var)
kr_query.stale_cb (C var)
kr_query.stype (C var)
kr_query.timestamp (C var)
kr_query.timestamp_mono (C var)
kr_query.uid (C var)
kr_query.zone_cut (C var)
kr_rand_bytes (C function)
kr_rand_coin (C function)
kr_rank (C enum)
kr_rank.KR_RANK_AUTH (C enumerator)
kr_rank.KR_RANK_BOGUS (C enumerator)
kr_rank.KR_RANK_INDET (C enumerator)
kr_rank.KR_RANK_INITIAL (C enumerator)
kr_rank.KR_RANK_INSECURE (C enumerator)
kr_rank.KR_RANK_MISMATCH (C enumerator)
kr_rank.KR_RANK_MISSING (C enumerator)
kr_rank.KR_RANK_OMIT (C enumerator)
kr_rank.KR_RANK_SECURE (C enumerator)
kr_rank.KR_RANK_TRY (C enumerator)
kr_rank_check (C function)
kr_rank_set (C function)
kr_rank_test (C function)
kr_ranked_rrarray_add (C function)
kr_ranked_rrarray_finalize (C function)
kr_ranked_rrarray_set_wire (C function)
kr_request (C struct)
kr_request.add_selected (C var)
kr_request.addr (C var)
kr_request.alloc_wire_cb (C var)
kr_request.answ_selected (C var)
kr_request.answ_validated (C var)
kr_request.answer (C var)
kr_request.auth_selected (C var)
kr_request.auth_validated (C var)
kr_request.count_fail_row (C var)
kr_request.count_no_nsaddr (C var)
kr_request.ctx (C var)
kr_request.current_query (C var)
kr_request.dst_addr (C var)
kr_request.flags (C var)
kr_request.options (C var)
kr_request.packet (C var)
kr_request.pool (C var)
kr_request.qsource (C var)
kr_request.rank (C var)
kr_request.rplan (C var)
kr_request.rtt (C var)
kr_request.size (C var)
kr_request.state (C var)
kr_request.stream_id (C var)
kr_request.trace_finish (C var)
kr_request.trace_log (C var)
kr_request.uid (C var)
kr_request.upstream (C var)
kr_request.vars_ref (C var)
kr_request_ensure_answer (C function)
kr_request_qsource_flags (C struct)
kr_request_qsource_flags.http (C var)
kr_request_qsource_flags.tcp (C var)
kr_request_qsource_flags.tls (C var)
kr_request_qsource_flags.xdp (C var)
kr_request_selected (C macro)
kr_resolve_begin (C function)
kr_resolve_checkout (C function)
kr_resolve_consume (C function)
kr_resolve_finish (C function)
kr_resolve_plan (C function)
kr_resolve_pool (C function)
kr_resolve_produce (C function)
kr_rnd_buffered (C function)
kr_rplan (C struct)
kr_rplan.initial (C var)
kr_rplan.next_uid (C var)
kr_rplan.pending (C var)
kr_rplan.pool (C var)
kr_rplan.request (C var)
kr_rplan.resolved (C var)
kr_rplan_deinit (C function)
kr_rplan_empty (C function)
kr_rplan_find_resolved (C function)
kr_rplan_init (C function)
kr_rplan_last (C function)
kr_rplan_pop (C function)
kr_rplan_push (C function)
kr_rplan_push_empty (C function)
kr_rplan_resolved (C function)
kr_rplan_satisfies (C function)
kr_rrkey (C function)
KR_RRKEY_LEN (C macro)
kr_rrset_init (C function)
kr_rrset_text (C function)
kr_rrset_type_maysig (C function)
kr_rrsig_sig_expiration (C function)
kr_rrsig_sig_inception (C function)
kr_rrsig_type_covered (C function)
KR_RRTYPE_GET_STR (C macro)
kr_rrtype_text (C function)
kr_sockaddr_cmp (C function)
kr_sockaddr_len (C function)
kr_stale_cb (C type)
kr_state_consistent (C function)
kr_straddr (C function)
kr_straddr_family (C function)
kr_straddr_join (C function)
kr_straddr_socket (C function)
kr_straddr_subnet (C function)
kr_strcatdup (C function)
kr_strerror (C macro)
kr_strptime_diff (C function)
kr_unpack_cache_key (C function)
kr_uv_free_cb (C function)
kr_verbose_set (C function)
kr_verbose_status (C var)
kr_zonecut (C struct)
kr_zonecut.key (C var)
kr_zonecut.name (C var)
kr_zonecut.nsset (C var)
kr_zonecut.parent (C var)
kr_zonecut.pool (C var)
kr_zonecut.trust_anchor (C var)
kr_zonecut_add (C function)
kr_zonecut_copy (C function)
kr_zonecut_copy_trust (C function)
kr_zonecut_deinit (C function)
kr_zonecut_del (C function)
kr_zonecut_del_all (C function)
kr_zonecut_find (C function)
kr_zonecut_find_cached (C function)
kr_zonecut_init (C function)
kr_zonecut_is_empty (C function)
kr_zonecut_move (C function)
kr_zonecut_set (C function)
kr_zonecut_set_sbelt (C function)
L
lru_apply (C macro)
lru_apply_do (C enum)
lru_apply_do.LRU_APPLY_DO_EVICT (C enumerator)
lru_apply_do.LRU_APPLY_DO_NOTHING (C enumerator)
lru_capacity (C macro)
lru_create (C macro)
lru_free (C macro)
lru_get_new (C macro)
lru_get_try (C macro)
lru_reset (C macro)
lru_t (C macro)
M
map()
built-in function
map_clear (C function)
map_contains (C function)
map_del (C function)
map_get (C function)
map_make (C function)
map_set (C function)
map_t (C struct)
map_t.pool (C var)
map_t.root (C var)
map_walk (C macro)
map_walk_prefixed (C function)
MIRROR() (in module policy)
mode()
built-in function
module
policy
modules.list()
built-in function
modules.load()
built-in function
modules.unload()
built-in function
N
net.bufsize()
built-in function
net.close()
built-in function
net.interfaces()
built-in function
net.list()
built-in function
net.listen()
built-in function
net.outgoing_v4()
built-in function
net.outgoing_v6()
built-in function
net.tcp_pipeline()
built-in function
net.tls()
built-in function
net.tls_padding()
built-in function
net.tls_sticket_secret()
built-in function
net.tls_sticket_secret_file()
built-in function
P
pack_clear (C macro)
pack_clear_mm (C macro)
pack_clone (C function)
pack_head (C macro)
pack_init (C macro)
pack_last (C function)
pack_obj_del (C function)
pack_obj_find (C function)
pack_obj_len (C function)
pack_obj_next (C function)
pack_obj_push (C function)
pack_obj_val (C function)
pack_objlen_t (C type)
pack_reserve (C macro)
pack_reserve_mm (C macro)
pack_t (C type)
pack_tail (C macro)
package_version()
built-in function
PASS (in module policy)
pattern() (in module policy)
PKT_SIZE_NOWIRE (C var)
policy
module
predict.config()
built-in function
Q
qr_task_on_send (C function)
QRVERBOSE (C macro)
QTRACE (in module policy)
queue_deinit (C macro)
queue_head (C macro)
queue_init (C macro)
queue_it_begin (C macro)
queue_it_finished (C macro)
queue_it_next (C macro)
queue_it_t (C macro)
queue_it_val (C macro)
queue_len (C macro)
queue_pop (C macro)
queue_push (C macro)
queue_push_head (C macro)
queue_t (C macro)
queue_tail (C macro)
R
REFUSE (in module policy)
reorder_RR()
built-in function
REQTRACE (in module policy)
REROUTE() (in module policy)
resolve()
built-in function
RFC
RFC 1034
,
[1]
RFC 1035
,
[1]
,
[2]
RFC 3986
RFC 4035
RFC 5001
RFC 5011
,
[1]
,
[2]
RFC 5077
RFC 6147
RFC 6761
RFC 6761#section-6
RFC 6891
RFC 7540
RFC 7540#section-9.2
RFC 7646
RFC 7706
RFC 7828
RFC 7858
,
[1]
,
[2]
RFC 8109
RFC 8145#section-5
RFC 8198
,
[1]
RFC 8484
,
[1]
,
[2]
,
[3]
,
[4]
RFC 8509
rpz() (in module policy)
S
set_add (C macro)
set_clear (C macro)
set_contains (C macro)
set_del (C macro)
set_make (C macro)
set_t (C type)
set_walk (C macro)
set_walk_prefixed (C macro)
slice() (in module policy)
slice_randomize_psl() (in module policy)
stats.clear_frequent()
built-in function
stats.frequent()
built-in function
stats.get()
built-in function
stats.list()
built-in function
stats.set()
built-in function
stats.upstreams()
built-in function
strcmp_p (C function)
STUB() (in module policy)
suffix() (in module policy)
suffix_common() (in module policy)
SWAP (C macro)
T
TC (in module policy)
the_worker (C var)
time_diff (C function)
TLS_FORWARD() (in module policy)
todnames() (in module policy)
tojson()
built-in function
trace_callback_f (C type)
trace_log_f (C type)
trie_apply (C function)
trie_clear (C function)
trie_create (C function)
trie_del (C function)
trie_del_first (C function)
trie_free (C function)
trie_get_first (C function)
trie_get_ins (C function)
trie_get_leq (C function)
trie_get_try (C function)
trie_it_begin (C function)
trie_it_finished (C function)
trie_it_free (C function)
trie_it_key (C function)
trie_it_next (C function)
trie_it_t (C type)
trie_it_val (C function)
trie_t (C type)
trie_val_t (C type)
trie_weight (C function)
trust_anchors.add()
built-in function
trust_anchors.add_file()
built-in function
trust_anchors.remove()
built-in function
trust_anchors.set_insecure()
built-in function
trust_anchors.summary()
built-in function
U
user()
built-in function
V
verbose()
built-in function
VERBOSE_STATUS (C macro)
W
WITH_VERBOSE (C macro)
worker.coroutine()
built-in function
worker.id
,
[1]
,
[2]
worker.pid
worker.sleep()
built-in function
worker.stats()
built-in function
worker_add_tcp_connected (C function)
worker_deinit (C function)
worker_del_tcp_connected (C function)
worker_del_tcp_waiting (C function)
worker_end_tcp (C function)
worker_init (C function)
worker_request_get_source_session (C function)
worker_request_set_source_session (C function)
worker_resolve_exec (C function)
worker_resolve_mk_pkt (C function)
worker_resolve_start (C function)
worker_stats (C struct)
worker_stats.concurrent (C var)
worker_stats.dropped (C var)
worker_stats.err_http (C var)
worker_stats.err_tcp (C var)
worker_stats.err_tls (C var)
worker_stats.err_udp (C var)
worker_stats.ipv4 (C var)
worker_stats.ipv6 (C var)
worker_stats.queries (C var)
worker_stats.rconcurrent (C var)
worker_stats.tcp (C var)
worker_stats.timeout (C var)
worker_stats.tls (C var)
worker_stats.udp (C var)
worker_submit (C function)
worker_task_complete (C function)
worker_task_creation_time (C function)
worker_task_finalize (C function)
worker_task_finished (C function)
worker_task_get_pktbuf (C function)
worker_task_get_request (C function)
worker_task_numrefs (C function)
worker_task_pkt_get_msgid (C function)
worker_task_pkt_set_msgid (C function)
worker_task_ref (C function)
worker_task_request (C function)
worker_task_step (C function)
worker_task_subreq_finalize (C function)
worker_task_timeout_inc (C function)
worker_task_unref (C function)