This is a summary of the named.conf options supported by this version of BIND 9. options { avoid-v4-udp-ports { ; ... }; avoid-v6-udp-ports { ; ... }; blackhole { ; ... }; coresize ; datasize ; deallocate-on-exit ; // obsolete directory ; dump-file ; fake-iquery ; // obsolete files ; has-old-clients ; // obsolete heartbeat-interval ; host-statistics ; // not implemented host-statistics-max ; // not implemented hostname ( | none ); interface-interval ; listen-on [ port ] { ; ... }; listen-on-v6 [ port ] { ; ... }; match-mapped-addresses ; memstatistics-file ; multiple-cnames ; // obsolete named-xfer ; // obsolete pid-file ( | none ); port ; querylog ; recursing-file ; random-device ; recursive-clients ; serial-queries ; // obsolete serial-query-rate ; server-id ( | none |; stacksize ; statistics-file ; statistics-interval ; // not yet implemented tcp-clients ; tcp-listen-queue ; tkey-dhkey ; tkey-gssapi-credential ; tkey-domain ; transfers-per-ns ; transfers-in ; transfers-out ; treat-cr-as-space ; // obsolete use-id-pool ; // obsolete use-ixfr ; version ( | none ); flush-zones-on-shutdown ; allow-query-cache { ; ... }; allow-recursion { ; ... }; allow-v6-synthesis { ; ... }; // obsolete sortlist { ; ... }; topology { ; ... }; // not implemented auth-nxdomain ; // default changed minimal-responses ; recursion ; rrset-order { [ class ] [ type ] [ name ] ; ... }; provide-ixfr ; request-ixfr ; fetch-glue ; // obsolete rfc2308-type1 ; // not yet implemented additional-from-auth ; additional-from-cache ; query-source ; query-source-v6 ; cleaning-interval ; min-roots ; // not implemented lame-ttl ; max-ncache-ttl ; max-cache-ttl ; transfer-format ( many-answers | one-answer ); max-cache-size ; check-names ( master | slave | response ) ( fail | warn | ignore ); cache-file ; suppress-initial-notify ; // not yet implemented preferred-glue ; dual-stack-servers [ port ] { ( [port ] | [port ] | [port ] ); ... }; edns-udp-size ; max-udp-size ; root-delegation-only [ exclude { ; ... } ]; disable-algorithms { ; ... }; dnssec-enable ; dnssec-validation ; dnssec-lookaside trust-anchor ; dnssec-must-be-secure ; dnssec-accept-expired ; ixfr-from-differences ; acache-enable ; acache-cleaning-interval ; max-acache-size ; clients-per-query ; max-clients-per-query ; empty-server ; empty-contact ; empty-zones-enable ; disable-empty-zone ; zero-no-soa-ttl-cache ; allow-query { ; ... }; allow-transfer { ; ... }; allow-update { ; ... }; allow-update-forwarding { ; ... }; allow-notify { ; ... }; masterfile-format ( text | raw ); notify ; notify-source ( | * ) [ port ( | * ) ]; notify-source-v6 ( | * ) [ port ( | * ) ]; also-notify [ port ] { ( | ) [ port ]; ... }; notify-delay ; dialup ; forward ( first | only ); forwarders [ port ] { ( | ) [ port ]; ... }; maintain-ixfr-base ; // obsolete max-ixfr-log-size ; // obsolete max-journal-size ; max-transfer-time-in ; max-transfer-time-out ; max-transfer-idle-in ; max-transfer-idle-out ; max-retry-time ; min-retry-time ; max-refresh-time ; min-refresh-time ; multi-master ; sig-validity-interval ; transfer-source ( | * ) [ port ( | * ) ]; transfer-source-v6 ( | * ) [ port ( | * ) ]; alt-transfer-source ( | * ) [ port ( | * ) ]; alt-transfer-source-v6 ( | * ) [ port ( | * ) ]; use-alt-transfer-source ; zone-statistics ; key-directory ; check-wildcard ; check-integrity ; check-mx ( fail | warn | ignore ); check-mx-cname ( fail | warn | ignore ); check-srv-cname ( fail | warn | ignore ); check-sibling ; zero-no-soa-ttl ; update-check-ksk ; }; controls { inet ( | | * ) [ port ( | * ) ] allow { ; ... } [ keys { ; ... } ]; unix perm owner group [ keys { ; ... } ]; }; acl { ; ... }; masters [ port ] { ( | [port ] | [port ] ) [ key ]; ... }; logging { channel { file ; syslog ; null; stderr; severity ; print-time ; print-severity ; print-category ; }; category { ; ... }; }; view { match-clients { ; ... }; match-destinations { ; ... }; match-recursive-only ; key { algorithm ; secret ; }; zone { type ( master | slave | stub | hint | forward | delegation-only ); file ; journal ; ixfr-base ; // obsolete ixfr-tmp-file ; // obsolete masters [ port ] { ( | [port ] | [port ] ) [ key ]; ... }; pubkey ; // obsolete update-policy { ( grant | deny ) ( name | subdomain | wildcard | self | selfsub | selfwild ) ; ... }; database ; delegation-only ; check-names ( fail | warn | ignore ); ixfr-from-differences ; allow-query { ; ... }; allow-transfer { ; ... }; allow-update { ; ... }; allow-update-forwarding { ; ... }; allow-notify { ; ... }; masterfile-format ( text | raw ); notify ; notify-source ( | * ) [ port ( | * ) ]; notify-source-v6 ( | * ) [ port ( | * ) ]; also-notify [ port ] { ( | ) [ port ]; ... }; notify-delay ; dialup ; forward ( first | only ); forwarders [ port ] { ( | ) [ port ]; ... }; maintain-ixfr-base ; // obsolete max-ixfr-log-size ; // obsolete max-journal-size ; max-transfer-time-in ; max-transfer-time-out ; max-transfer-idle-in ; max-transfer-idle-out ; max-retry-time ; min-retry-time ; max-refresh-time ; min-refresh-time ; multi-master ; sig-validity-interval ; transfer-source ( | * ) [ port ( | * ) ]; transfer-source-v6 ( | * ) [ port ( | * ) ]; alt-transfer-source ( | * ) [ port ( | * ) ]; alt-transfer-source-v6 ( | * ) [ port ( | * ) ]; use-alt-transfer-source ; zone-statistics ; key-directory ; check-wildcard ; check-integrity ; check-mx ( fail | warn | ignore ); check-mx-cname ( fail | warn | ignore ); check-srv-cname ( fail | warn | ignore ); check-sibling ; zero-no-soa-ttl ; update-check-ksk ; }; dlz { database ; }; server { bogus ; provide-ixfr ; request-ixfr ; support-ixfr ; // obsolete transfers ; transfer-format ( many-answers | one-answer ); keys ; edns ; edns-udp-size ; max-udp-size ; notify-source ( | * ) [ port ( | * ) ]; notify-source-v6 ( | * ) [ port ( | * ) ]; query-source ; query-source-v6 ; transfer-source ( | * ) [ port ( | * ) ]; transfer-source-v6 ( | * ) [ port ( | * ) ]; }; trusted-keys { ; ... }; allow-query-cache { ; ... }; allow-recursion { ; ... }; allow-v6-synthesis { ; ... }; // obsolete sortlist { ; ... }; topology { ; ... }; // not implemented auth-nxdomain ; // default changed minimal-responses ; recursion ; rrset-order { [ class ] [ type ] [ name ] ; ... }; provide-ixfr ; request-ixfr ; fetch-glue ; // obsolete rfc2308-type1 ; // not yet implemented additional-from-auth ; additional-from-cache ; query-source ; query-source-v6 ; cleaning-interval ; min-roots ; // not implemented lame-ttl ; max-ncache-ttl ; max-cache-ttl ; transfer-format ( many-answers | one-answer ); max-cache-size ; check-names ( master | slave | response ) ( fail | warn | ignore ); cache-file ; suppress-initial-notify ; // not yet implemented preferred-glue ; dual-stack-servers [ port ] { ( [port ] | [port ] | [port ] ); ... }; edns-udp-size ; max-udp-size ; root-delegation-only [ exclude { ; ... } ]; disable-algorithms { ; ... }; dnssec-enable ; dnssec-validation ; dnssec-lookaside trust-anchor ; dnssec-must-be-secure ; dnssec-accept-expired ; ixfr-from-differences ; acache-enable ; acache-cleaning-interval ; max-acache-size ; clients-per-query ; max-clients-per-query ; empty-server ; empty-contact ; empty-zones-enable ; disable-empty-zone ; zero-no-soa-ttl-cache ; allow-query { ; ... }; allow-transfer { ; ... }; allow-update { ; ... }; allow-update-forwarding { ; ... }; allow-notify { ; ... }; masterfile-format ( text | raw ); notify ; notify-source ( | * ) [ port ( | * ) ]; notify-source-v6 ( | * ) [ port ( | * ) ]; also-notify [ port ] { ( | ) [ port ]; ... }; notify-delay ; dialup ; forward ( first | only ); forwarders [ port ] { ( | ) [ port ]; ... }; maintain-ixfr-base ; // obsolete max-ixfr-log-size ; // obsolete max-journal-size ; max-transfer-time-in ; max-transfer-time-out ; max-transfer-idle-in ; max-transfer-idle-out ; max-retry-time ; min-retry-time ; max-refresh-time ; min-refresh-time ; multi-master ; sig-validity-interval ; transfer-source ( | * ) [ port ( | * ) ]; transfer-source-v6 ( | * ) [ port ( | * ) ]; alt-transfer-source ( | * ) [ port ( | * ) ]; alt-transfer-source-v6 ( | * ) [ port ( | * ) ]; use-alt-transfer-source ; zone-statistics ; key-directory ; check-wildcard ; check-integrity ; check-mx ( fail | warn | ignore ); check-mx-cname ( fail | warn | ignore ); check-srv-cname ( fail | warn | ignore ); check-sibling ; zero-no-soa-ttl ; update-check-ksk ; database ; }; lwres { listen-on [ port ] { ( | ) [ port ]; ... }; view ; search { ; ... }; ndots ; }; key { algorithm ; secret ; }; zone { type ( master | slave | stub | hint | forward | delegation-only ); file ; journal ; ixfr-base ; // obsolete ixfr-tmp-file ; // obsolete masters [ port ] { ( | [port ] | [port ] ) [ key ]; ... }; pubkey ; // obsolete update-policy { ( grant | deny ) ( name | subdomain | wildcard | self | selfsub | selfwild ) ; ... }; database ; delegation-only ; check-names ( fail | warn | ignore ); ixfr-from-differences ; allow-query { ; ... }; allow-transfer { ; ... }; allow-update { ; ... }; allow-update-forwarding { ; ... }; allow-notify { ; ... }; masterfile-format ( text | raw ); notify ; notify-source ( | * ) [ port ( | * ) ]; notify-source-v6 ( | * ) [ port ( | * ) ]; also-notify [ port ] { ( | ) [ port ]; ... }; notify-delay ; dialup ; forward ( first | only ); forwarders [ port ] { ( | ) [ port ]; ... }; maintain-ixfr-base ; // obsolete max-ixfr-log-size ; // obsolete max-journal-size ; max-transfer-time-in ; max-transfer-time-out ; max-transfer-idle-in ; max-transfer-idle-out ; max-retry-time ; min-retry-time ; max-refresh-time ; min-refresh-time ; multi-master ; sig-validity-interval ; transfer-source ( | * ) [ port ( | * ) ]; transfer-source-v6 ( | * ) [ port ( | * ) ]; alt-transfer-source ( | * ) [ port ( | * ) ]; alt-transfer-source-v6 ( | * ) [ port ( | * ) ]; use-alt-transfer-source ; zone-statistics ; key-directory ; check-wildcard ; check-integrity ; check-mx ( fail | warn | ignore ); check-mx-cname ( fail | warn | ignore ); check-srv-cname ( fail | warn | ignore ); check-sibling ; zero-no-soa-ttl ; update-check-ksk ; }; dlz { database ; }; server { bogus ; provide-ixfr ; request-ixfr ; support-ixfr ; // obsolete transfers ; transfer-format ( many-answers | one-answer ); keys ; edns ; edns-udp-size ; max-udp-size ; notify-source ( | * ) [ port ( | * ) ]; notify-source-v6 ( | * ) [ port ( | * ) ]; query-source ; query-source-v6 ; transfer-source ( | * ) [ port ( | * ) ]; transfer-source-v6 ( | * ) [ port ( | * ) ]; }; trusted-keys { ; ... };