From fdb3cff87cd838a10e529c379a3d97205d3f08d1 Mon Sep 17 00:00:00 2001 From: Yong Tang Date: Wed, 11 Dec 2019 06:49:38 -0800 Subject: [PATCH] Regenerate man-page (#3530) Signed-off-by: Yong Tang --- man/coredns-acl.7 | 2 +- man/coredns-any.7 | 2 +- man/coredns-auto.7 | 2 +- man/coredns-autopath.7 | 2 +- man/coredns-azure.7 | 2 +- man/coredns-bind.7 | 2 +- man/coredns-bufsize.7 | 2 +- man/coredns-cache.7 | 10 +++++++++- man/coredns-cancel.7 | 2 +- man/coredns-chaos.7 | 2 +- man/coredns-clouddns.7 | 2 +- man/coredns-debug.7 | 2 +- man/coredns-dnssec.7 | 2 +- man/coredns-dnstap.7 | 2 +- man/coredns-erratic.7 | 2 +- man/coredns-errors.7 | 2 +- man/coredns-etcd.7 | 2 +- man/coredns-file.7 | 2 +- man/coredns-forward.7 | 2 +- man/coredns-grpc.7 | 2 +- man/coredns-health.7 | 2 +- man/coredns-hosts.7 | 2 +- man/coredns-import.7 | 2 +- man/coredns-k8s_external.7 | 2 +- man/coredns-kubernetes.7 | 2 +- man/coredns-loadbalance.7 | 2 +- man/coredns-log.7 | 2 +- man/coredns-loop.7 | 2 +- man/coredns-metadata.7 | 2 +- man/coredns-metrics.7 | 2 +- man/coredns-nsid.7 | 2 +- man/coredns-pprof.7 | 2 +- man/coredns-ready.7 | 2 +- man/coredns-reload.7 | 2 +- man/coredns-rewrite.7 | 2 +- man/coredns-root.7 | 2 +- man/coredns-route53.7 | 2 +- man/coredns-secondary.7 | 2 +- man/coredns-sign.7 | 32 ++++++++++++++++++++------------ man/coredns-template.7 | 2 +- man/coredns-tls.7 | 2 +- man/coredns-trace.7 | 14 +++++++------- man/coredns-transfer.7 | 2 +- man/coredns-whoami.7 | 2 +- 44 files changed, 77 insertions(+), 61 deletions(-) diff --git a/man/coredns-acl.7 b/man/coredns-acl.7 index 15c25af1d..d92594171 100644 --- a/man/coredns-acl.7 +++ b/man/coredns-acl.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-ACL" 7 "October 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-ACL" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .PP \fIacl\fP - enforces access control policies on source ip and prevents unauthorized access to DNS servers. diff --git a/man/coredns-any.7 b/man/coredns-any.7 index d79953bc2..a745461bf 100644 --- a/man/coredns-any.7 +++ b/man/coredns-any.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-ANY" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-ANY" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-auto.7 b/man/coredns-auto.7 index 22d4555bc..c3b925036 100644 --- a/man/coredns-auto.7 +++ b/man/coredns-auto.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-AUTO" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-AUTO" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-autopath.7 b/man/coredns-autopath.7 index e493dc451..397921047 100644 --- a/man/coredns-autopath.7 +++ b/man/coredns-autopath.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-AUTOPATH" 7 "November 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-AUTOPATH" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-azure.7 b/man/coredns-azure.7 index 42527ae20..db86a38ce 100644 --- a/man/coredns-azure.7 +++ b/man/coredns-azure.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-AZURE" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-AZURE" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-bind.7 b/man/coredns-bind.7 index 942536b0f..2cfc34a8c 100644 --- a/man/coredns-bind.7 +++ b/man/coredns-bind.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-BIND" 7 "October 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-BIND" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-bufsize.7 b/man/coredns-bufsize.7 index e337ef61f..e3e4e0e97 100644 --- a/man/coredns-bufsize.7 +++ b/man/coredns-bufsize.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-BUFSIZE" 7 "November 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-BUFSIZE" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-cache.7 b/man/coredns-cache.7 index 5481ced31..0349af0f6 100644 --- a/man/coredns-cache.7 +++ b/man/coredns-cache.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-CACHE" 7 "October 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-CACHE" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP @@ -48,6 +48,7 @@ cache [TTL] [ZONES...] { success CAPACITY [TTL] [MINTTL] denial CAPACITY [TTL] [MINTTL] prefetch AMOUNT [[DURATION] [PERCENTAGE%]] + serve\_stale [DURATION] } .fi @@ -70,6 +71,11 @@ Popular means \fBAMOUNT\fP queries have been seen with no gaps of \fBDURATION\fP \fBDURATION\fP defaults to 1m. Prefetching will happen when the TTL drops below \fBPERCENTAGE\fP, which defaults to \fB\fC10%\fR, or latest 1 second before TTL expiration. Values should be in the range \fB\fC[10%, 90%]\fR. Note the percent sign is mandatory. \fBPERCENTAGE\fP is treated as an \fB\fCint\fR. +.IP \(bu 4 +\fB\fCserve_stale\fR, when serve_stale is set, cache always will serve an expired entry to a client if there is one +available. When this happens, cache will attempt to refresh the cache entry after sending the expired cache +entry to the client. The responses have a TTL of 0. \fBDURATION\fP is how far back to consider +stale responses as fresh. The default duration is 1h. .SH "CAPACITY AND EVICTION" @@ -95,6 +101,8 @@ If monitoring is enabled (via the \fIprometheus\fP plugin) then the following me \fB\fCcoredns_cache_misses_total{server}\fR - Counter of cache misses. .IP \(bu 4 \fB\fCcoredns_cache_drops_total{server}\fR - Counter of dropped messages. +.IP \(bu 4 +\fB\fCcoredns_cache_served_stale_total{server}\fR - Counter of requests served from stale cache entries. .PP diff --git a/man/coredns-cancel.7 b/man/coredns-cancel.7 index a628d9ad0..3cb6f6292 100644 --- a/man/coredns-cancel.7 +++ b/man/coredns-cancel.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-CANCEL" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-CANCEL" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-chaos.7 b/man/coredns-chaos.7 index 1769f3d2d..07d7e5ee6 100644 --- a/man/coredns-chaos.7 +++ b/man/coredns-chaos.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-CHAOS" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-CHAOS" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-clouddns.7 b/man/coredns-clouddns.7 index a0cf3b23a..4783e028d 100644 --- a/man/coredns-clouddns.7 +++ b/man/coredns-clouddns.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-CLOUDDNS" 7 "November 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-CLOUDDNS" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-debug.7 b/man/coredns-debug.7 index a9eb04511..a00c376ab 100644 --- a/man/coredns-debug.7 +++ b/man/coredns-debug.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-DEBUG" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-DEBUG" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-dnssec.7 b/man/coredns-dnssec.7 index 07c096110..c9d944808 100644 --- a/man/coredns-dnssec.7 +++ b/man/coredns-dnssec.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-DNSSEC" 7 "October 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-DNSSEC" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-dnstap.7 b/man/coredns-dnstap.7 index 60fa63a49..e891614c5 100644 --- a/man/coredns-dnstap.7 +++ b/man/coredns-dnstap.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-DNSTAP" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-DNSTAP" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-erratic.7 b/man/coredns-erratic.7 index 8c97fc009..774a478e6 100644 --- a/man/coredns-erratic.7 +++ b/man/coredns-erratic.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-ERRATIC" 7 "October 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-ERRATIC" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-errors.7 b/man/coredns-errors.7 index 072f1c3ba..57adeb019 100644 --- a/man/coredns-errors.7 +++ b/man/coredns-errors.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-ERRORS" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-ERRORS" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-etcd.7 b/man/coredns-etcd.7 index 8221ed63e..f9784196f 100644 --- a/man/coredns-etcd.7 +++ b/man/coredns-etcd.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-ETCD" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-ETCD" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-file.7 b/man/coredns-file.7 index 6bf360369..bdc4e1b04 100644 --- a/man/coredns-file.7 +++ b/man/coredns-file.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-FILE" 7 "October 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-FILE" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-forward.7 b/man/coredns-forward.7 index 894fe7138..40cbd9b85 100644 --- a/man/coredns-forward.7 +++ b/man/coredns-forward.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-FORWARD" 7 "November 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-FORWARD" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-grpc.7 b/man/coredns-grpc.7 index be33ab498..c0b68bba0 100644 --- a/man/coredns-grpc.7 +++ b/man/coredns-grpc.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-GRPC" 7 "October 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-GRPC" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-health.7 b/man/coredns-health.7 index adbbf4ea9..c8567a2e1 100644 --- a/man/coredns-health.7 +++ b/man/coredns-health.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-HEALTH" 7 "October 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-HEALTH" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-hosts.7 b/man/coredns-hosts.7 index f31a08f3d..2f7b6168f 100644 --- a/man/coredns-hosts.7 +++ b/man/coredns-hosts.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-HOSTS" 7 "October 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-HOSTS" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-import.7 b/man/coredns-import.7 index ba3dfb52a..215a86b21 100644 --- a/man/coredns-import.7 +++ b/man/coredns-import.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-IMPORT" 7 "October 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-IMPORT" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-k8s_external.7 b/man/coredns-k8s_external.7 index 1cabc3e7f..5b43fe125 100644 --- a/man/coredns-k8s_external.7 +++ b/man/coredns-k8s_external.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-K8S_EXTERNAL" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-K8S_EXTERNAL" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-kubernetes.7 b/man/coredns-kubernetes.7 index e3b5e3177..21596ed94 100644 --- a/man/coredns-kubernetes.7 +++ b/man/coredns-kubernetes.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-KUBERNETES" 7 "October 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-KUBERNETES" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-loadbalance.7 b/man/coredns-loadbalance.7 index 230421f76..0b34f522a 100644 --- a/man/coredns-loadbalance.7 +++ b/man/coredns-loadbalance.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-LOADBALANCE" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-LOADBALANCE" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-log.7 b/man/coredns-log.7 index d9d7f30fb..d1e7e6538 100644 --- a/man/coredns-log.7 +++ b/man/coredns-log.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-LOG" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-LOG" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-loop.7 b/man/coredns-loop.7 index 636d46ed6..b1baa91ea 100644 --- a/man/coredns-loop.7 +++ b/man/coredns-loop.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-LOOP" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-LOOP" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-metadata.7 b/man/coredns-metadata.7 index 63af5a066..7c6de649f 100644 --- a/man/coredns-metadata.7 +++ b/man/coredns-metadata.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-METADATA" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-METADATA" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-metrics.7 b/man/coredns-metrics.7 index 6fd2f6215..ca895cacb 100644 --- a/man/coredns-metrics.7 +++ b/man/coredns-metrics.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-METRICS" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-METRICS" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-nsid.7 b/man/coredns-nsid.7 index 765c5b7ed..359b79384 100644 --- a/man/coredns-nsid.7 +++ b/man/coredns-nsid.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-NSID" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-NSID" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-pprof.7 b/man/coredns-pprof.7 index 8a9741445..092336943 100644 --- a/man/coredns-pprof.7 +++ b/man/coredns-pprof.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-PPROF" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-PPROF" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-ready.7 b/man/coredns-ready.7 index f97a10323..fdcaad6c6 100644 --- a/man/coredns-ready.7 +++ b/man/coredns-ready.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-READY" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-READY" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-reload.7 b/man/coredns-reload.7 index 97c81c9b9..8265abc65 100644 --- a/man/coredns-reload.7 +++ b/man/coredns-reload.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-RELOAD" 7 "November 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-RELOAD" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-rewrite.7 b/man/coredns-rewrite.7 index 898f7509d..b7afff2be 100644 --- a/man/coredns-rewrite.7 +++ b/man/coredns-rewrite.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-REWRITE" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-REWRITE" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-root.7 b/man/coredns-root.7 index e5c882928..aee1865b5 100644 --- a/man/coredns-root.7 +++ b/man/coredns-root.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-ROOT" 7 "August 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-ROOT" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-route53.7 b/man/coredns-route53.7 index 8aa1badcd..276b6a7a0 100644 --- a/man/coredns-route53.7 +++ b/man/coredns-route53.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-ROUTE53" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-ROUTE53" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-secondary.7 b/man/coredns-secondary.7 index 9ca520eaa..b1ce5afbc 100644 --- a/man/coredns-secondary.7 +++ b/man/coredns-secondary.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-SECONDARY" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-SECONDARY" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-sign.7 b/man/coredns-sign.7 index bed4ff11d..7d780b60b 100644 --- a/man/coredns-sign.7 +++ b/man/coredns-sign.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-SIGN" 7 "November 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-SIGN" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP @@ -10,8 +10,7 @@ The \fIsign\fP plugin is used to sign (see RFC 6781) zones. In this process DNSSEC resource records are added. The signatures that sign the resource records sets have an expiration date, this means the signing process must be repeated before this expiration data is reached. Otherwise the zone's data -will go BAD (RFC 4035, Section 5.5). The \fIsign\fP plugin takes care of this. \fISign\fP works, but has -a couple of limitations, see the "Bugs" section. +will go BAD (RFC 4035, Section 5.5). The \fIsign\fP plugin takes care of this. .PP Only NSEC is supported, \fIsign\fP does not support NSEC3. @@ -43,9 +42,12 @@ the signature only has 14 days left before expiring. Both these dates are only checked on the SOA's signature(s). .IP \(bu 4 -Create signatures that have an inception of -3 hours (minus a jitter between 0 and 18 hours) +Create RRSIGs that have an inception of -3 hours (minus a jitter between 0 and 18 hours) and a expiration of +32 days for every given DNSKEY. .IP \(bu 4 +Add NSEC records for all names in the zone. The TTL for these is the negative cache TTL from the +SOA record. +.IP \(bu 4 Add or replace \fIall\fP apex CDS/CDNSKEY records with the ones derived from the given keys. For each key two CDS are created one with SHA1 and another with SHA256. .IP \(bu 4 @@ -54,8 +56,8 @@ overwrite \fIany\fP previous serial number. .PP -Thus there are two ways that dictate when a zone is signed. Normally every 6 days (plus jitter) it -will be resigned. If for some reason we fail this check, the 14 days before expiring kicks in. +There are two ways that dictate when a zone is signed. Normally every 6 days (plus jitter) it will +be resigned. If for some reason we fail this check, the 14 days before expiring kicks in. .PP Keys are named (following BIND9): \fB\fCK++.key\fR and \fB\fCK++.private\fR. @@ -200,8 +202,8 @@ This will lead to \fB\fCdb.example.org\fR be signed \fItwice\fP, as this entire you have specified the origins \fB\fCexample.org\fR and \fB\fCexample.net\fR in the server block. .PP -Forcibly resigning a zone can be accomplished by removing the signed zone file (CoreDNS will keep on -serving it from memory), and sending SIGUSR1 to the process to make it reload and resign the zone +Forcibly resigning a zone can be accomplished by removing the signed zone file (CoreDNS will keep +on serving it from memory), and sending SIGUSR1 to the process to make it reload and resign the zone file. .SH "ALSO SEE" @@ -210,11 +212,17 @@ The DNSSEC RFCs: RFC 4033, RFC 4034 and RFC 4035. And the BCP on DNSSEC, RFC 678 manual pages coredns-keygen(1) and dnssec-keygen(8). And the \fIfile\fP plugin's documentation. .PP -Coredns-keygen can be found at https://github.com/coredns/coredns-utils -\[la]https://github.com/coredns/coredns-utils\[ra] in the coredns-keygen directory. +Coredns-keygen can be found at +https://github.com/coredns/coredns-utils +\[la]https://github.com/coredns/coredns-utils\[ra] in the +coredns-keygen directory. + +.PP +Other useful DNSSEC tools can be found in ldns +\[la]https://nlnetlabs.nl/projects/ldns/about/\[ra], e.g. +\fB\fCldns-key2ds\fR to create DS records from DNSKEYs. .SH "BUGS" .PP -\fB\fCkeys directory\fR is not implemented. Glue records are currently signed, and no DS records are added -for child zones. +\fB\fCkeys directory\fR is not implemented. diff --git a/man/coredns-template.7 b/man/coredns-template.7 index 8ece38763..9f18b7496 100644 --- a/man/coredns-template.7 +++ b/man/coredns-template.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-TEMPLATE" 7 "October 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-TEMPLATE" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-tls.7 b/man/coredns-tls.7 index 1098a50ec..ef72fb1d9 100644 --- a/man/coredns-tls.7 +++ b/man/coredns-tls.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-TLS" 7 "October 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-TLS" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-trace.7 b/man/coredns-trace.7 index eb5391ebf..bf58f3e9e 100644 --- a/man/coredns-trace.7 +++ b/man/coredns-trace.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-TRACE" 7 "August 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-TRACE" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP @@ -41,9 +41,9 @@ Additional features can be enabled with this syntax: .nf trace [ENDPOINT\-TYPE] [ENDPOINT] { - every AMOUNT - service NAME - client\_server + every AMOUNT + service NAME + client\_server } .fi @@ -132,9 +132,9 @@ Trace one query every 10000 queries, rename the service, and enable same span: .nf trace tracinghost:9411 { - every 10000 - service dnsproxy - client\_server + every 10000 + service dnsproxy + client\_server } .fi diff --git a/man/coredns-transfer.7 b/man/coredns-transfer.7 index 96091556c..6bb473642 100644 --- a/man/coredns-transfer.7 +++ b/man/coredns-transfer.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-TRANSFER" 7 "November 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-TRANSFER" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP diff --git a/man/coredns-whoami.7 b/man/coredns-whoami.7 index f71cd891f..860a4230c 100644 --- a/man/coredns-whoami.7 +++ b/man/coredns-whoami.7 @@ -1,5 +1,5 @@ .\" Generated by Mmark Markdown Processer - mmark.miek.nl -.TH "COREDNS-WHOAMI" 7 "September 2019" "CoreDNS" "CoreDNS Plugins" +.TH "COREDNS-WHOAMI" 7 "December 2019" "CoreDNS" "CoreDNS Plugins" .SH "NAME" .PP