Welcome to Knot DNS's documentation!¶
- Introduction
- Requirements
- Installation
- Configuration
- Operation
- Configuration database
- Dynamic configuration
- Secondary (slave) mode
- Primary (master) mode
- Reading and editing zones
- Reading and editing the zone file safely
- Zone loading
- Journal behaviour
- Handling zone file, journal, changes, serials
- Zone bootstrapping on secondary
- Zone expiration
- DNSSEC key states
- DNSSEC key rollovers
- DNSSEC shared KSK
- DNSSEC delete algorithm
- DNSSEC Offline KSK
- Import of keys to HSM
- Daemon controls
- Data and metadata backup
- Statistics
- Mode XDP
- Troubleshooting
- Configuration Reference
- Modules
cookies
— DNS Cookiesdnsproxy
– Tiny DNS proxydnstap
– Dnstap traffic logginggeoip
— Geography-based responsesnoudp
— No UDP responseonlinesign
— Online DNSSEC signingprobe
— DNS traffic probequeryacl
— Limit queries by remote address or target interfacerrl
— Response rate limitingstats
— Query statisticssynthrecord
– Automatic forward/reverse recordswhoami
— Whoami response
- Utilities
knotd
– Knot DNS server daemonknotc
– Knot DNS control utilitykeymgr
– Key management utilitykjournalprint
– Knot DNS journal print utility- kcatalogprint – Knot DNS catalog print utility
kzonecheck
– Knot DNS zone file checking toolkzonesign
– DNSSEC signing utilitykdig
– Advanced DNS lookup utilitykhost
– Simple DNS lookup utilityknsec3hash
– NSEC hash computation utilityknsupdate
– Dynamic DNS update utilitykxdpgun
– DNS benchmarking tool
- Migration
- Appendices