summaryrefslogtreecommitdiff
path: root/usr.sbin/nsd/nsd.conf.5.in
diff options
context:
space:
mode:
authorFlorian Obser <florian@cvs.openbsd.org>2023-06-29 19:38:51 +0000
committerFlorian Obser <florian@cvs.openbsd.org>2023-06-29 19:38:51 +0000
commit95a3f12ceccbeed1c6c1a4900d40a4f641ead10d (patch)
tree7869df3aea62da795055d88ffcf48099f5537f37 /usr.sbin/nsd/nsd.conf.5.in
parent4484138b88399ee6af4ae5032844977e10cdf3b8 (diff)
Update to nsd 4.7.0
OK tb
Diffstat (limited to 'usr.sbin/nsd/nsd.conf.5.in')
-rw-r--r--usr.sbin/nsd/nsd.conf.5.in19
1 files changed, 18 insertions, 1 deletions
diff --git a/usr.sbin/nsd/nsd.conf.5.in b/usr.sbin/nsd/nsd.conf.5.in
index f8c5987e914..6780ea7e849 100644
--- a/usr.sbin/nsd/nsd.conf.5.in
+++ b/usr.sbin/nsd/nsd.conf.5.in
@@ -1,4 +1,4 @@
-.TH "nsd.conf" "5" "Nov 10, 2022" "NLnet Labs" "nsd 4.6.1"
+.TH "nsd.conf" "5" "Jun 7, 2023" "NLnet Labs" "nsd 4.7.0"
.\" Copyright (c) 2001\-2008, NLnet Labs. All rights reserved.
.\" See LICENSE for the license.
.SH "NAME"
@@ -1071,6 +1071,23 @@ for those messages to the server.
Sets the unix socket file name for connecting to the server that is
listening on that socket. Default is "@dnstap_socket_path@".
.TP
+.B dnstap-ip:\fR <"" or addr[@port]>
+If disabled with "", the socket path is used. With a value, like address or
+address@port, like "127.0.0.1@3333" TCP or TLS is used. Default is "".
+.TP
+.B dnstap-tls:\fR <yes or no>
+If enabled, TLS is used to the address specified in \fBdnstap-ip\fR. Otherwise,
+TCP is used. Default is yes.
+.TP
+.B dnstap-tls-server-name:\fR <string>
+The name for authenticating the upstream server. With "" disabled.
+.TP
+.B dnstap-tls-client-key-file:\fR <file name>
+The key file for client authentication, or "" disabled.
+.TP
+.B dnstap-tls-client-cert-file:\fR <file name>
+The cert file for client authentication, or "" disabled.
+.TP
.B dnstap-send-identity:\fR <yes or no>
If enabled, the server identity is included in the log messages.
Default is no.