config global-dns-server zone | |
domain-name | The domain name must end with a period. For example: example.com. |
negative-ttl | The last field in the SOA—the negative caching TTL. This informs other servers how long to cache no-such-domain (NXDOMAIN) responses from you. The default is 3600 seconds. The valid range is 0 to 2,147,483,647. |
primary-server-ip | The IP address of the primary server. |
primary-server-ip6 | The IP address of the primary server. |
primary-server-name | Sets the server name in the SOA record. |
responsible-mail | Username of the person responsible for this zone, such as root. |
ttl | The $TTL directive at the top of the zone file (before the SOA) gives a default TTL for every RR without a specific TTL set. The default is 86,400. The valid range is 1 to 2,147,483,647. |
type | • forward—The configuration allows you to apply DNS forwarding on a per-domain basis, overriding the forwarding settings in the “general” configuration. • fqdn-generate—The configuration has been generated by the global load balancing feature set. You cannot configure this type manually. • master—The configuration contains the “master” copy of data for the zone and is the authoritative server for it. |
forward | • first—The DNS server queries the forwarder before doing its own DNS lookup. • only—Only query the forwarder. Do not perform a DNS lookup. |
forwarders | Specify a remote server configuration object. |
dnssec-status | Enable/disable DNSSEC. |
dnssec-algorithm | RSHSHA1 is the only supported algorithm. |
dsset-info | It is generated by the system if DNSSEC is enabled for the zone. |
dssetinfo-filename | The file is generated by the system if DNSSEC is enabled for the zone. The file generated by the zone configuration editor is the one you give to any parent zone or the registrar of your domain. The convention is dsset-<domain>, for example dsset-example.com. |
dsset-info-list | Specify a DSset info list configuration object. |
KSK | Type characters for a string key. The file is generated by the system if DNSSEC is enabled for the zone. |
KSK-Filename | The file is generated by the system if DNSSEC is enabled for the zone. To regenerate the KSK, disable DNSSEC and then re-enable DNSSEC. |
ZSK | Type characters for a string key. The file is generated by the system if DNSSEC is enabled for the zone. |
ZSK-Filename | The file is generated by the system if DNSSEC is enabled for the zone. To regenerate the ZSK, disable DNSSEC and then re-enable DNSSEC. |
config a-aaaa-record | |
hostname | The hostname part of the FQDN, such as www. |
source-type | • ipv4—Specify this option to configure IPv4 address information and weight. • ipv6—Specify this option to configure IPv6 address information and weight. |
ip | Specify the IP address of the virtual server. |
ip6 | Specify the IP address of the virtual server. |
method | Weighted Round Robin is the only method supported. |
weight | Assigns relative preference among members—higher values are more preferred and are assigned connections more frequently. The default is 1. The valid range is 1-255. |
config cname-record | |
alias | An alias name to another true or canonical domain name (the target). For instance, www.example.com is an alias for example.com. |
target | The true or canonical domain name. For instance, example.com. |
config mx-record | |
hostname | The hostname part of the FQDN for a mail exchange server, such as mail. |
type | • IPv4 • IPv6 |
ip | Specify the IP address. |
ip6 | Specify the IP address. |
priority | Preference given to this RR among others at the same owner. Lower values have greater priority. |
config ns-record | |
domain-name | The domain for which the name server has authoritative answers, such as example.com. |
host-name | The hostname part of the FQDN, such as ns. |
type | • IPv4 • IPv6 |
ip | Specify the IP address of the name server. |
ip6 | Specify the IP address of the name server. |