dnsconfd(8)

📦
version 1.7.5 · 3 versions
, in centos-stream 10, centos-stream 9, fedora 43, fedora 44

✨ dnsconfd — the manual page, but make it cute ✨

okay bestie, welcome to dnsconfd(8) 💖 this is the section 8 manual page for Dnsconfd, and we're gonna get you fully caught up, no cap.

🌸 NAME 🌸

Dnsconfd — the local DNS cache configuration daemon. she configures, she caches, she serves. 👑

🌈 SYNOPSIS 🌈

dnsconfd [options]

that's it. that's the whole vibe. ✨

💜 DESCRIPTION 💜

okay so Dnsconfd is a local cache configuration daemon. what she does is implement the DBus interface of systemd-resolved, and then translate all of that usage into the configuration of the dns service. literally a translator but for daemons 🫶

🎀 OPTIONS 🎀

  • -h, --help — shows you the help message and then dips. exit, stage left. 💅
  • --dbus-name DBUS_NAME — the DBUS name that dnsconfd should use. default is com.redhat.dnsconfd
  • --log-level {DEBUG,INFO,WARN} — the log level of dnsconfd. default is INFO
  • --resolv-conf-path RESOLV_CONF_PATH — path to the resolv.conf that dnsconfd should manage. default is /etc/resolv.conf
  • --prioritize-wire, --no-prioritize-wire — if you set this to yes, then wireless interfaces get lower priority. default is yes
  • --listen-address ADDRESS — the address on which the local resolver listens. default is 127.0.0.1
  • --config-file PATH — the path where the config file lives. default is /etc/dnsconfd.conf
  • --resolver-options options — options to be used in resolv.conf for alteration of the resolver. default is "edns0 trust-ad"
  • --dnssec-enabled, --no-dnssec-enabled — enable dnssec record validation. default is no
  • --handle-routing, --no-handle-routing — dnsconfd will submit the necessary routes to the routing manager. default is yes
  • --stderr-log, --no-stderr-log — dnsconfd will write logs into stderr. default is yes
  • --journal-log, --no-journal-log — dnsconfd will send logs into the journal. default is no
  • --syslog-log — dnsconfd will send logs into the syslog destination specified by this option. by default it's disabled. you can specify either a linux domain socket with 'unix:<path>', where path will usually be /dev/log on your system, or you can use tcp or udp protocols like '<transport_protocol>:<host>:<port>', where 'transport_protocol' is either tcp or udp, host can be an ipv4 address, an ipv6 address in square brackets, or a hostname, and the port is where the syslog daemon is listening. examples, bestie: udp:localhost:514, udp:[::1]:514, tcp:127.0.0.1:514, tcp:myhost.example.com:514 ✨
  • --file-log — dnsconfd will write logs into the specified file. not used by default.
  • --api-choice — dnsconfd will switch between APIs. the allowed options are resolve1 and dnsconfd. default is dnsconfd
  • --certification-authority — a space separated list of CA bundles used for encrypted protocols as the default when no custom CA was specified. the first one that can be accessed will be used. default is /etc/pki/dns/extracted/pem/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem

💀 EXIT STATUS 💀

she tells you exactly how it went, fr fr:

  • 0 — graceful stop. 🫶
  • 8 — DNS caching service failure. the service crashed, for example.
  • 9 — failed communication through DBUS. 😭
  • 10 — failed interaction with resolv.conf.
  • 11 — failed to configure the dns cache service.
  • 12 — failed to set up the necessary routes.
  • 13 — bad arguments. 🙈

🦋 ENVIRONMENT 🦋

okay so the tea here is: environment variables have lower priority than command line options, but higher priority than the configuration file. and the boolean options recognize 'yes' or '1' as True, while all other values are considered as False. periodt.

  • DBUS_NAME — DBUS name that dnsconfd should use. default is org.freedesktop.resolve1
  • LOG_LEVEL — log level of dnsconfd. default is INFO
  • RESOLV_CONF_PATH — path to the resolv.conf that dnsconfd should manage. default is /etc/resolv.conf
  • PRIORITIZE_WIRE — if set to yes, then wireless interfaces will have lower priority. default is yes
  • LISTEN_ADDRESS — address on which the local resolver listens. default is 127.0.0.1
  • CONFIG_FILE — path where the config file is located. default is /etc/dnsconfd.conf
  • RESOLVER_OPTIONS — options to be used in resolv.conf for alteration of the resolver. default is "edns0 trust-ad"
  • DNSSEC_ENABLED — enable dnssec record validation. default is no
  • HANDLE_ROUTING — dnsconfd will submit the necessary routes to the routing manager. default is yes
  • STDERR_LOG — dnsconfd will write logs into stderr. default is yes
  • JOURNAL_LOG — dnsconfd will send logs into the journal. default is no
  • SYSLOG_LOG — dnsconfd will send logs into the syslog destination specified by this option. by default it's disabled. for the destination specification syntax, go peek at the command line option. 👀
  • FILE_LOG — dnsconfd will write logs into the specified file. not used by default.
  • API_CHOICE — dnsconfd will switch between APIs. the allowed options are resolve1 and dnsconfd. default is resolve1

🍓 FILES 🍓

Dnsconfd manages resolv.conf to route domain name resolution to the local cache service. the default location of the configuration file is /etc/dnsconfd.conf. 💖

🧚 ROUTING 🧚

by default, Dnsconfd submits routes through NetworkManager, so the system contacts DNS servers through the right interfaces. this behaviour can be turned off by setting the handle_routing option to 'no'. ✨

🌟 NOTES 🌟

the only currently supported backend is Unbound. that's the one. the only one. 💅

and okay, so even though the default is to use stderr for logs and not the journal, the service is distributed with a sysconfig file that reverses this behaviour, so when you're running the Dnsconfd service you get the advantages of direct journal logs. iconic.

🌸 Installation 🌸

if you have systemd-resolved installed, then bestie, you have to disable it first. no way around it.

# systemctl disable --now systemd-resolved

stop systemd-resolved and disable its start on boot. 🛑

# systemctl mask systemd-resolved

mask the service so there are no conflicts.

# dnsconfd config install

this modifies NetworkManager to explicitly use the systemd-resolved dbus API, and changes ownership of resolvconf so that Dnsconfd does not need root privileges. slay. 👑

# systemctl enable --now dnsconfd

starts Dnsconfd and enables its startup on boot. 🔥

😭 REPORTING BUGS 😭

please, for reporting bugs, use the Github repository at https://github.com/InfrastructureServices/dnsconfd. she wants your bug reports, fr fr. 🫶

👑 SEE ALSO 👑

Copyright (c) 2023 Red Hat, Inc.

and that's the whole page bestie!! this was dnsconfd version dnsconfd-1.7.5, dated 07 Jan 2026, from the dnsconfd(8) manual — you're officially caught up, go configure something cute 💅✨🎀

📦 where this page comes from