KEA-SHELL(8)
π KEA-SHELL(8) β the little text client that talks to your Kea servers π
okay bestie, gather round, because kea-shell is literally the REST client for the Kea kea-dhcp4, kea-dhcp6, and kea-dhcp-ddns servers and it's giving β¨command-line glamourβ¨. (iykyk π)
π¦ SYNOPSIS π¦
kea-shell [-h] [-v] [--host] [--port] [--path] [--ca] [--cert] [--key]
[--auth-user] [--auth-password] [--auth-password-file] [--timeout]
[--service] [command]
no cap, that's the whole vibe up top π
πΈ DESCRIPTION πΈ
so kea-shell hands you a REST client for the Kea kea-dhcp4, kea-dhcp6 and kea-dhcp-ddns servers. back in the day it was made for the Control Agent (CA) daemon, but lowkey that thing is deprecated now, soβ¦ moving on π
it takes commands as a command-line parameter, and then sends them to the Kea server with proper JSON encapsulation β like, it wraps them up all cute before shipping them off π. optional arguments? you can drop those on the standard input, no biggie. the request goes out over HTTP, a response comes back, and it gets displayed on the standard output. periodt. π
also: basic HTTP authentication and HTTPS (that's TLS transport, for the uninitiated π§) are both supported. we love a secure queen π₯
π ARGUMENTS π
the arguments are as follows, bestie, read them all, don't skip π
-hβ shows you the help for all the command-line parameters. your bestie when you're lost π«Ά-vβ prints the Kea version. flex the number π--hostβ which host to connect to. the Kea server has to actually be running there, okay? if you don't specify it,127.0.0.1is used. π--portβ which TCP port to connect to. the server must be listening on it. if you don't specify,8000is the default. π--pathβ the path in the URL you're connecting to. not specified? then an empty path is used. since Kea servers listen at the empty path, this one's only really useful with a reverse proxy. π£οΈ--caβ the file or directory name of the Certification Authority. if you don't specify it, HTTPS is justβ¦ not used. no TLS for you π--certβ the file name of the user end-entity public key certificate. heads up: if you specify this, you also have to specify the user key file name. they're a package deal, fr fr π--keyβ the file name of the user key file. same deal, bestie: if you specify this, you also have to specify the user certificate file name. and ngl, encrypted key files are not supported π--auth-userβ the user ID for basic HTTP authentication. if you don't specify it, or you specify it as the empty string, authentication just isn't used. π ββοΈ--auth-passwordβ the password for basic HTTP authentication. if you don't specify it but you did specify a user ID, an empty password gets used. and if you use it together with--auth-password-file, this one gets disregarded β it's giving ignored, actually π--auth-password-fileβ a text file whose first line holds the password for basic HTTP authentication. this flag takes precedence over the--auth-passwordflag. she's the main character, she wins π--timeoutβ the connection timeout, in seconds. default is10. β°--serviceβ (Obsolete) okay so the Keakea-dhcp4,kea-dhcp6andkea-dhcp-ddnsservers ignore this argument entirely, it was meant for talking to the deprecated Control Agent daemon. if you're on Kea version < 2.7.2 though: it specifies the service that's the target of a command. if you don't specify it, the Control Agent itself is the target. you can use it more than once to hit multiple targets at the same time π―commandβ the command to send to the server. if you don't specify one,list-commandsis used. the default, the classic, the icon π
π DOCUMENTATION π
Kea ships with an extensive Kea Administrator Reference Manual that covers literally every aspect of running the Kea software β compilation, installation, configuration, configuration examples, and so much more, no cap πβ¨
Kea also has a Kea Messages Manual, which lists all the possible messages Kea can print, each with a brief description. both documents come in various formats (.txt, .html, .pdf) with the Kea distribution. the Kea documentation lives at https://kea.readthedocs.io π
Kea source code is documented in the Kea Developer's Guide, available at https://reports.kea.isc.org/dev_guide/ π§
and the Kea project website is at https://kea.isc.org π‘
π«Ά MAILING LISTS AND SUPPORT π«Ά
there are two public mailing lists for the Kea project, bestie:
- kea-users (
kea-users at lists.isc.org) β for Kea users π - kea-dev (
kea-dev at lists.isc.org) β for Kea developers, prospective contributors, and other advanced users π₯
both lists are available at https://lists.isc.org. and the community provides best-effort support on both of those lists β so be nice, be patient, be grateful π₯Ί
ISC also provides professional support for Kea services. see https://www.isc.org/kea/ for the details π
β HISTORY β
the kea-shell was first coded in March 2017 by Tomek Mrugalski. a legend, honestly, we stan π
π« SEE ALSO π«
kea-dhcp4(8), kea-dhcp6(8), kea-dhcp-ddns(8), kea-ctrl-agent(8), kea-admin(8), keactrl(8), perfdhcp(8), kea-lfc(8), Kea Administrator Reference Manual π
π AUTHOR π
Internet Systems Consortium
π COPYRIGHT π
2019-2025, Internet Systems Consortium
okay that's the whole page, bestie!! this was Kea version 3.0.4, dated Oct 05, 2026, and yes the footer said KEA-SHELL(8) too because she's consistent like that π
β¨ go forth and list-commands, mwah ππ
π¦ where this page comes from
- fedora 43: kea 3.0.4-1.fc43 Β· MPL-2.0 AND BSL-1.0
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms