dnsconfd.conf(5)

📦
version 1.7.5 · 3 versions
, in centos-stream 10, centos-stream 9, fedora 43, fedora 44

🎀 dnsconfd.conf(5) — the config file manual, but make it make sense 💖

okay bestie, so this is the manual page for dnsconfd.conf, which is section 5 of the manual (yes, dnsconfd.conf(5)). It's the whole vibe-guide to the config file. Pull up a chair, grab a strawberry 🍓, and let's get into it.

✨ NAME ✨

dnsconfd.conf — the dnsconfd configuration file. that's it. that's the name. iconic of it.

🌸 DESCRIPTION 🌸

dnsconfd.conf is a YAML formatted configuration file that changes how Dnsconfd behaves. it alters the behaviour, it's giving main character energy, it's literally the settings page of your resolver's dreams 💅

🔥 OPTIONS 🔥

every single knob, no skips, no shortcuts. here we go 🫶

  • dbus_name — the DBUS name that dnsconfd should use. default is com.redhat.dnsconfd.
  • log_level — log level of dnsconfd. default is INFO.
  • resolv_conf_path — path to the resolv.conf that dnsconfd should manage. default is /etc/resolv.conf.
  • prioritize_wire — if you set it to yes, wireless interfaces get lower priority. default is yes.
  • listen_address — the address the local resolver listens on. default is 127.0.0.1.
  • resolver_options — options used in resolv.conf to alter the resolver. default is "edns0 trust-ad".
  • dnssec_enabled — turn on dnssec record validation. default is no.
  • handle_routing — dnsconfd will submit the necessary routes to the routing manager. default is yes.
  • api_choice — dnsconfd will switch between APIs. allowed options are resolve1 and dnsconfd. default is dnsconfd.
  • stderr_log — dnsconfd writes logs into stderr. default is yes.
  • journal_log — dnsconfd sends logs into journal. default is no.
  • syslog_log — dnsconfd sends logs to the syslog destination you specify with this option, disabled by default. see the command line option for the destination specification syntax 👀
  • file_log — dnsconfd writes logs into the file you specify. not used by default.
  • certification_authority — absolute path to a bundle of certification authorities that gets used when no custom ones were specified.
  • static_servers — list of servers that should be configured. default is empty.
  • certification_authority — (yes, it shows up twice in this page, that's just how it is 💀) a space separated list of CA bundles used for encrypted protocols as the default when no custom CA was specified. the first one that can be accessed will be used. default is /etc/pki/dns/extracted/pem/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem.

🌈 available attributes of servers 🌈

  • address — required, string of the server's ip address.
  • protocol — optional, DoT or plain.
  • name — optional, the name that should be present in the server's TLS certificate.
  • port — optional, the port the server is listening on. if it's not given, then 53 is used for the plain protocol and 853 for DoT.
  • routing_domains — optional, domains whose resolution should be performed through this server.
  • search_domains — optional, domains that should be used for hostname lookup.
  • dnssec — optional, boolean indicating whether this server supports dnssec or not.
  • networks — optional, networks whose reverse dns records must be resolved by this server.

🦋 examples 🦋

enabling one global server using DNS over TLS:

static_servers:
   - address: 192.168.6.3
     protocol: "dns+tls"
     name: named

enabling one server for a specific domain and a second one for everything else:

static_servers:
    - address: 192.168.6.3
    - address: 192.168.6.4
      routing_domains:
        - example.com
  • ignore_api — if enabled, dnsconfd will ignore configuration received through the API. default is no.

😭 REPORTING BUGS 😭

please, for reporting bugs, use the Github repository: https://github.com/InfrastructureServices/dnsconfd. we will love you forever for it 💜

💅 SEE ALSO 💅

Copyright (c) 2023 Red Hat, Inc.

fr fr, read your config twice, back it up, and vibe responsibly ✨

that's a wrap bestie 💖 this page is from dnsconfd-1.7.5, dated 07 Jan 2026, and it lives in section dnsconfd.conf(5) of the manual. slay 🎀🌈⭐

📦 where this page comes from