- Changelog entry for #486: Make VAL_MAX_RESTART_COUNT configurable.

- Generetated lexer and parser for #486; updated example.conf.
This commit is contained in:
George Thessalonikefs
2021-06-09 12:32:58 +02:00
parent 45be341267
commit d02e956da0
5 changed files with 4910 additions and 5552 deletions
+4
View File
@@ -1,3 +1,7 @@
9 June 2021: George
- Merge #486 by fobster: Make VAL_MAX_RESTART_COUNT configurable.
- Generated lexer and parser for #486; updated example.conf.
8 June 2021: George
- Fix unused variable warning when compiling with --enable-dnstap.
+4
View File
@@ -557,6 +557,10 @@ server:
# val-sig-skew-min: 3600
# val-sig-skew-max: 86400
# The maximum number the validator should restart validation with
# another authority in case of failed validation.
# val-max-restart: 5
# Should additional section of secure message also be kept clean of
# unsecure data. Useful to shield the users of this validator from
# potential bogus data in the additional section. All unsigned data
+2446 -2434
View File
File diff suppressed because it is too large Load Diff
+2057 -2722
View File
File diff suppressed because it is too large Load Diff
+399 -396
View File
@@ -1,4 +1,4 @@
/* A Bison parser, made by GNU Bison 3.6.4. */
/* A Bison parser, made by GNU Bison 3.7.4. */
/* Bison interface for Yacc-like parsers in C
@@ -169,207 +169,209 @@ extern int yydebug;
VAR_PYTHON_SCRIPT = 370, /* VAR_PYTHON_SCRIPT */
VAR_VAL_SIG_SKEW_MIN = 371, /* VAR_VAL_SIG_SKEW_MIN */
VAR_VAL_SIG_SKEW_MAX = 372, /* VAR_VAL_SIG_SKEW_MAX */
VAR_CACHE_MIN_TTL = 373, /* VAR_CACHE_MIN_TTL */
VAR_VAL_LOG_LEVEL = 374, /* VAR_VAL_LOG_LEVEL */
VAR_AUTO_TRUST_ANCHOR_FILE = 375, /* VAR_AUTO_TRUST_ANCHOR_FILE */
VAR_KEEP_MISSING = 376, /* VAR_KEEP_MISSING */
VAR_ADD_HOLDDOWN = 377, /* VAR_ADD_HOLDDOWN */
VAR_DEL_HOLDDOWN = 378, /* VAR_DEL_HOLDDOWN */
VAR_SO_RCVBUF = 379, /* VAR_SO_RCVBUF */
VAR_EDNS_BUFFER_SIZE = 380, /* VAR_EDNS_BUFFER_SIZE */
VAR_PREFETCH = 381, /* VAR_PREFETCH */
VAR_PREFETCH_KEY = 382, /* VAR_PREFETCH_KEY */
VAR_SO_SNDBUF = 383, /* VAR_SO_SNDBUF */
VAR_SO_REUSEPORT = 384, /* VAR_SO_REUSEPORT */
VAR_HARDEN_BELOW_NXDOMAIN = 385, /* VAR_HARDEN_BELOW_NXDOMAIN */
VAR_IGNORE_CD_FLAG = 386, /* VAR_IGNORE_CD_FLAG */
VAR_LOG_QUERIES = 387, /* VAR_LOG_QUERIES */
VAR_LOG_REPLIES = 388, /* VAR_LOG_REPLIES */
VAR_LOG_LOCAL_ACTIONS = 389, /* VAR_LOG_LOCAL_ACTIONS */
VAR_TCP_UPSTREAM = 390, /* VAR_TCP_UPSTREAM */
VAR_SSL_UPSTREAM = 391, /* VAR_SSL_UPSTREAM */
VAR_TCP_AUTH_QUERY_TIMEOUT = 392, /* VAR_TCP_AUTH_QUERY_TIMEOUT */
VAR_SSL_SERVICE_KEY = 393, /* VAR_SSL_SERVICE_KEY */
VAR_SSL_SERVICE_PEM = 394, /* VAR_SSL_SERVICE_PEM */
VAR_SSL_PORT = 395, /* VAR_SSL_PORT */
VAR_FORWARD_FIRST = 396, /* VAR_FORWARD_FIRST */
VAR_STUB_SSL_UPSTREAM = 397, /* VAR_STUB_SSL_UPSTREAM */
VAR_FORWARD_SSL_UPSTREAM = 398, /* VAR_FORWARD_SSL_UPSTREAM */
VAR_TLS_CERT_BUNDLE = 399, /* VAR_TLS_CERT_BUNDLE */
VAR_HTTPS_PORT = 400, /* VAR_HTTPS_PORT */
VAR_HTTP_ENDPOINT = 401, /* VAR_HTTP_ENDPOINT */
VAR_HTTP_MAX_STREAMS = 402, /* VAR_HTTP_MAX_STREAMS */
VAR_HTTP_QUERY_BUFFER_SIZE = 403, /* VAR_HTTP_QUERY_BUFFER_SIZE */
VAR_HTTP_RESPONSE_BUFFER_SIZE = 404, /* VAR_HTTP_RESPONSE_BUFFER_SIZE */
VAR_HTTP_NODELAY = 405, /* VAR_HTTP_NODELAY */
VAR_HTTP_NOTLS_DOWNSTREAM = 406, /* VAR_HTTP_NOTLS_DOWNSTREAM */
VAR_STUB_FIRST = 407, /* VAR_STUB_FIRST */
VAR_MINIMAL_RESPONSES = 408, /* VAR_MINIMAL_RESPONSES */
VAR_RRSET_ROUNDROBIN = 409, /* VAR_RRSET_ROUNDROBIN */
VAR_MAX_UDP_SIZE = 410, /* VAR_MAX_UDP_SIZE */
VAR_DELAY_CLOSE = 411, /* VAR_DELAY_CLOSE */
VAR_UDP_CONNECT = 412, /* VAR_UDP_CONNECT */
VAR_UNBLOCK_LAN_ZONES = 413, /* VAR_UNBLOCK_LAN_ZONES */
VAR_INSECURE_LAN_ZONES = 414, /* VAR_INSECURE_LAN_ZONES */
VAR_INFRA_CACHE_MIN_RTT = 415, /* VAR_INFRA_CACHE_MIN_RTT */
VAR_INFRA_KEEP_PROBING = 416, /* VAR_INFRA_KEEP_PROBING */
VAR_DNS64_PREFIX = 417, /* VAR_DNS64_PREFIX */
VAR_DNS64_SYNTHALL = 418, /* VAR_DNS64_SYNTHALL */
VAR_DNS64_IGNORE_AAAA = 419, /* VAR_DNS64_IGNORE_AAAA */
VAR_DNSTAP = 420, /* VAR_DNSTAP */
VAR_DNSTAP_ENABLE = 421, /* VAR_DNSTAP_ENABLE */
VAR_DNSTAP_SOCKET_PATH = 422, /* VAR_DNSTAP_SOCKET_PATH */
VAR_DNSTAP_IP = 423, /* VAR_DNSTAP_IP */
VAR_DNSTAP_TLS = 424, /* VAR_DNSTAP_TLS */
VAR_DNSTAP_TLS_SERVER_NAME = 425, /* VAR_DNSTAP_TLS_SERVER_NAME */
VAR_DNSTAP_TLS_CERT_BUNDLE = 426, /* VAR_DNSTAP_TLS_CERT_BUNDLE */
VAR_DNSTAP_TLS_CLIENT_KEY_FILE = 427, /* VAR_DNSTAP_TLS_CLIENT_KEY_FILE */
VAR_DNSTAP_TLS_CLIENT_CERT_FILE = 428, /* VAR_DNSTAP_TLS_CLIENT_CERT_FILE */
VAR_DNSTAP_SEND_IDENTITY = 429, /* VAR_DNSTAP_SEND_IDENTITY */
VAR_DNSTAP_SEND_VERSION = 430, /* VAR_DNSTAP_SEND_VERSION */
VAR_DNSTAP_BIDIRECTIONAL = 431, /* VAR_DNSTAP_BIDIRECTIONAL */
VAR_DNSTAP_IDENTITY = 432, /* VAR_DNSTAP_IDENTITY */
VAR_DNSTAP_VERSION = 433, /* VAR_DNSTAP_VERSION */
VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES = 434, /* VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES */
VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES = 435, /* VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES */
VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES = 436, /* VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES */
VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES = 437, /* VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES */
VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES = 438, /* VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES */
VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES = 439, /* VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES */
VAR_RESPONSE_IP_TAG = 440, /* VAR_RESPONSE_IP_TAG */
VAR_RESPONSE_IP = 441, /* VAR_RESPONSE_IP */
VAR_RESPONSE_IP_DATA = 442, /* VAR_RESPONSE_IP_DATA */
VAR_HARDEN_ALGO_DOWNGRADE = 443, /* VAR_HARDEN_ALGO_DOWNGRADE */
VAR_IP_TRANSPARENT = 444, /* VAR_IP_TRANSPARENT */
VAR_IP_DSCP = 445, /* VAR_IP_DSCP */
VAR_DISABLE_DNSSEC_LAME_CHECK = 446, /* VAR_DISABLE_DNSSEC_LAME_CHECK */
VAR_IP_RATELIMIT = 447, /* VAR_IP_RATELIMIT */
VAR_IP_RATELIMIT_SLABS = 448, /* VAR_IP_RATELIMIT_SLABS */
VAR_IP_RATELIMIT_SIZE = 449, /* VAR_IP_RATELIMIT_SIZE */
VAR_RATELIMIT = 450, /* VAR_RATELIMIT */
VAR_RATELIMIT_SLABS = 451, /* VAR_RATELIMIT_SLABS */
VAR_RATELIMIT_SIZE = 452, /* VAR_RATELIMIT_SIZE */
VAR_RATELIMIT_FOR_DOMAIN = 453, /* VAR_RATELIMIT_FOR_DOMAIN */
VAR_RATELIMIT_BELOW_DOMAIN = 454, /* VAR_RATELIMIT_BELOW_DOMAIN */
VAR_IP_RATELIMIT_FACTOR = 455, /* VAR_IP_RATELIMIT_FACTOR */
VAR_RATELIMIT_FACTOR = 456, /* VAR_RATELIMIT_FACTOR */
VAR_SEND_CLIENT_SUBNET = 457, /* VAR_SEND_CLIENT_SUBNET */
VAR_CLIENT_SUBNET_ZONE = 458, /* VAR_CLIENT_SUBNET_ZONE */
VAR_CLIENT_SUBNET_ALWAYS_FORWARD = 459, /* VAR_CLIENT_SUBNET_ALWAYS_FORWARD */
VAR_CLIENT_SUBNET_OPCODE = 460, /* VAR_CLIENT_SUBNET_OPCODE */
VAR_MAX_CLIENT_SUBNET_IPV4 = 461, /* VAR_MAX_CLIENT_SUBNET_IPV4 */
VAR_MAX_CLIENT_SUBNET_IPV6 = 462, /* VAR_MAX_CLIENT_SUBNET_IPV6 */
VAR_MIN_CLIENT_SUBNET_IPV4 = 463, /* VAR_MIN_CLIENT_SUBNET_IPV4 */
VAR_MIN_CLIENT_SUBNET_IPV6 = 464, /* VAR_MIN_CLIENT_SUBNET_IPV6 */
VAR_MAX_ECS_TREE_SIZE_IPV4 = 465, /* VAR_MAX_ECS_TREE_SIZE_IPV4 */
VAR_MAX_ECS_TREE_SIZE_IPV6 = 466, /* VAR_MAX_ECS_TREE_SIZE_IPV6 */
VAR_CAPS_WHITELIST = 467, /* VAR_CAPS_WHITELIST */
VAR_CACHE_MAX_NEGATIVE_TTL = 468, /* VAR_CACHE_MAX_NEGATIVE_TTL */
VAR_PERMIT_SMALL_HOLDDOWN = 469, /* VAR_PERMIT_SMALL_HOLDDOWN */
VAR_QNAME_MINIMISATION = 470, /* VAR_QNAME_MINIMISATION */
VAR_QNAME_MINIMISATION_STRICT = 471, /* VAR_QNAME_MINIMISATION_STRICT */
VAR_IP_FREEBIND = 472, /* VAR_IP_FREEBIND */
VAR_DEFINE_TAG = 473, /* VAR_DEFINE_TAG */
VAR_LOCAL_ZONE_TAG = 474, /* VAR_LOCAL_ZONE_TAG */
VAR_ACCESS_CONTROL_TAG = 475, /* VAR_ACCESS_CONTROL_TAG */
VAR_LOCAL_ZONE_OVERRIDE = 476, /* VAR_LOCAL_ZONE_OVERRIDE */
VAR_ACCESS_CONTROL_TAG_ACTION = 477, /* VAR_ACCESS_CONTROL_TAG_ACTION */
VAR_ACCESS_CONTROL_TAG_DATA = 478, /* VAR_ACCESS_CONTROL_TAG_DATA */
VAR_VIEW = 479, /* VAR_VIEW */
VAR_ACCESS_CONTROL_VIEW = 480, /* VAR_ACCESS_CONTROL_VIEW */
VAR_VIEW_FIRST = 481, /* VAR_VIEW_FIRST */
VAR_SERVE_EXPIRED = 482, /* VAR_SERVE_EXPIRED */
VAR_SERVE_EXPIRED_TTL = 483, /* VAR_SERVE_EXPIRED_TTL */
VAR_SERVE_EXPIRED_TTL_RESET = 484, /* VAR_SERVE_EXPIRED_TTL_RESET */
VAR_SERVE_EXPIRED_REPLY_TTL = 485, /* VAR_SERVE_EXPIRED_REPLY_TTL */
VAR_SERVE_EXPIRED_CLIENT_TIMEOUT = 486, /* VAR_SERVE_EXPIRED_CLIENT_TIMEOUT */
VAR_SERVE_ORIGINAL_TTL = 487, /* VAR_SERVE_ORIGINAL_TTL */
VAR_FAKE_DSA = 488, /* VAR_FAKE_DSA */
VAR_FAKE_SHA1 = 489, /* VAR_FAKE_SHA1 */
VAR_LOG_IDENTITY = 490, /* VAR_LOG_IDENTITY */
VAR_HIDE_TRUSTANCHOR = 491, /* VAR_HIDE_TRUSTANCHOR */
VAR_TRUST_ANCHOR_SIGNALING = 492, /* VAR_TRUST_ANCHOR_SIGNALING */
VAR_AGGRESSIVE_NSEC = 493, /* VAR_AGGRESSIVE_NSEC */
VAR_USE_SYSTEMD = 494, /* VAR_USE_SYSTEMD */
VAR_SHM_ENABLE = 495, /* VAR_SHM_ENABLE */
VAR_SHM_KEY = 496, /* VAR_SHM_KEY */
VAR_ROOT_KEY_SENTINEL = 497, /* VAR_ROOT_KEY_SENTINEL */
VAR_DNSCRYPT = 498, /* VAR_DNSCRYPT */
VAR_DNSCRYPT_ENABLE = 499, /* VAR_DNSCRYPT_ENABLE */
VAR_DNSCRYPT_PORT = 500, /* VAR_DNSCRYPT_PORT */
VAR_DNSCRYPT_PROVIDER = 501, /* VAR_DNSCRYPT_PROVIDER */
VAR_DNSCRYPT_SECRET_KEY = 502, /* VAR_DNSCRYPT_SECRET_KEY */
VAR_DNSCRYPT_PROVIDER_CERT = 503, /* VAR_DNSCRYPT_PROVIDER_CERT */
VAR_DNSCRYPT_PROVIDER_CERT_ROTATED = 504, /* VAR_DNSCRYPT_PROVIDER_CERT_ROTATED */
VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE = 505, /* VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE */
VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS = 506, /* VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS */
VAR_DNSCRYPT_NONCE_CACHE_SIZE = 507, /* VAR_DNSCRYPT_NONCE_CACHE_SIZE */
VAR_DNSCRYPT_NONCE_CACHE_SLABS = 508, /* VAR_DNSCRYPT_NONCE_CACHE_SLABS */
VAR_PAD_RESPONSES = 509, /* VAR_PAD_RESPONSES */
VAR_PAD_RESPONSES_BLOCK_SIZE = 510, /* VAR_PAD_RESPONSES_BLOCK_SIZE */
VAR_PAD_QUERIES = 511, /* VAR_PAD_QUERIES */
VAR_PAD_QUERIES_BLOCK_SIZE = 512, /* VAR_PAD_QUERIES_BLOCK_SIZE */
VAR_IPSECMOD_ENABLED = 513, /* VAR_IPSECMOD_ENABLED */
VAR_IPSECMOD_HOOK = 514, /* VAR_IPSECMOD_HOOK */
VAR_IPSECMOD_IGNORE_BOGUS = 515, /* VAR_IPSECMOD_IGNORE_BOGUS */
VAR_IPSECMOD_MAX_TTL = 516, /* VAR_IPSECMOD_MAX_TTL */
VAR_IPSECMOD_WHITELIST = 517, /* VAR_IPSECMOD_WHITELIST */
VAR_IPSECMOD_STRICT = 518, /* VAR_IPSECMOD_STRICT */
VAR_CACHEDB = 519, /* VAR_CACHEDB */
VAR_CACHEDB_BACKEND = 520, /* VAR_CACHEDB_BACKEND */
VAR_CACHEDB_SECRETSEED = 521, /* VAR_CACHEDB_SECRETSEED */
VAR_CACHEDB_REDISHOST = 522, /* VAR_CACHEDB_REDISHOST */
VAR_CACHEDB_REDISPORT = 523, /* VAR_CACHEDB_REDISPORT */
VAR_CACHEDB_REDISTIMEOUT = 524, /* VAR_CACHEDB_REDISTIMEOUT */
VAR_CACHEDB_REDISEXPIRERECORDS = 525, /* VAR_CACHEDB_REDISEXPIRERECORDS */
VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM = 526, /* VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM */
VAR_FOR_UPSTREAM = 527, /* VAR_FOR_UPSTREAM */
VAR_AUTH_ZONE = 528, /* VAR_AUTH_ZONE */
VAR_ZONEFILE = 529, /* VAR_ZONEFILE */
VAR_MASTER = 530, /* VAR_MASTER */
VAR_URL = 531, /* VAR_URL */
VAR_FOR_DOWNSTREAM = 532, /* VAR_FOR_DOWNSTREAM */
VAR_FALLBACK_ENABLED = 533, /* VAR_FALLBACK_ENABLED */
VAR_TLS_ADDITIONAL_PORT = 534, /* VAR_TLS_ADDITIONAL_PORT */
VAR_LOW_RTT = 535, /* VAR_LOW_RTT */
VAR_LOW_RTT_PERMIL = 536, /* VAR_LOW_RTT_PERMIL */
VAR_FAST_SERVER_PERMIL = 537, /* VAR_FAST_SERVER_PERMIL */
VAR_FAST_SERVER_NUM = 538, /* VAR_FAST_SERVER_NUM */
VAR_ALLOW_NOTIFY = 539, /* VAR_ALLOW_NOTIFY */
VAR_TLS_WIN_CERT = 540, /* VAR_TLS_WIN_CERT */
VAR_TCP_CONNECTION_LIMIT = 541, /* VAR_TCP_CONNECTION_LIMIT */
VAR_FORWARD_NO_CACHE = 542, /* VAR_FORWARD_NO_CACHE */
VAR_STUB_NO_CACHE = 543, /* VAR_STUB_NO_CACHE */
VAR_LOG_SERVFAIL = 544, /* VAR_LOG_SERVFAIL */
VAR_DENY_ANY = 545, /* VAR_DENY_ANY */
VAR_UNKNOWN_SERVER_TIME_LIMIT = 546, /* VAR_UNKNOWN_SERVER_TIME_LIMIT */
VAR_LOG_TAG_QUERYREPLY = 547, /* VAR_LOG_TAG_QUERYREPLY */
VAR_STREAM_WAIT_SIZE = 548, /* VAR_STREAM_WAIT_SIZE */
VAR_TLS_CIPHERS = 549, /* VAR_TLS_CIPHERS */
VAR_TLS_CIPHERSUITES = 550, /* VAR_TLS_CIPHERSUITES */
VAR_TLS_USE_SNI = 551, /* VAR_TLS_USE_SNI */
VAR_IPSET = 552, /* VAR_IPSET */
VAR_IPSET_NAME_V4 = 553, /* VAR_IPSET_NAME_V4 */
VAR_IPSET_NAME_V6 = 554, /* VAR_IPSET_NAME_V6 */
VAR_TLS_SESSION_TICKET_KEYS = 555, /* VAR_TLS_SESSION_TICKET_KEYS */
VAR_RPZ = 556, /* VAR_RPZ */
VAR_TAGS = 557, /* VAR_TAGS */
VAR_RPZ_ACTION_OVERRIDE = 558, /* VAR_RPZ_ACTION_OVERRIDE */
VAR_RPZ_CNAME_OVERRIDE = 559, /* VAR_RPZ_CNAME_OVERRIDE */
VAR_RPZ_LOG = 560, /* VAR_RPZ_LOG */
VAR_RPZ_LOG_NAME = 561, /* VAR_RPZ_LOG_NAME */
VAR_DYNLIB = 562, /* VAR_DYNLIB */
VAR_DYNLIB_FILE = 563, /* VAR_DYNLIB_FILE */
VAR_EDNS_CLIENT_STRING = 564, /* VAR_EDNS_CLIENT_STRING */
VAR_EDNS_CLIENT_STRING_OPCODE = 565, /* VAR_EDNS_CLIENT_STRING_OPCODE */
VAR_NSID = 566, /* VAR_NSID */
VAR_ZONEMD_PERMISSIVE_MODE = 567, /* VAR_ZONEMD_PERMISSIVE_MODE */
VAR_ZONEMD_CHECK = 568, /* VAR_ZONEMD_CHECK */
VAR_ZONEMD_REJECT_ABSENCE = 569 /* VAR_ZONEMD_REJECT_ABSENCE */
VAR_VAL_MAX_RESTART = 373, /* VAR_VAL_MAX_RESTART */
VAR_CACHE_MIN_TTL = 374, /* VAR_CACHE_MIN_TTL */
VAR_VAL_LOG_LEVEL = 375, /* VAR_VAL_LOG_LEVEL */
VAR_AUTO_TRUST_ANCHOR_FILE = 376, /* VAR_AUTO_TRUST_ANCHOR_FILE */
VAR_KEEP_MISSING = 377, /* VAR_KEEP_MISSING */
VAR_ADD_HOLDDOWN = 378, /* VAR_ADD_HOLDDOWN */
VAR_DEL_HOLDDOWN = 379, /* VAR_DEL_HOLDDOWN */
VAR_SO_RCVBUF = 380, /* VAR_SO_RCVBUF */
VAR_EDNS_BUFFER_SIZE = 381, /* VAR_EDNS_BUFFER_SIZE */
VAR_PREFETCH = 382, /* VAR_PREFETCH */
VAR_PREFETCH_KEY = 383, /* VAR_PREFETCH_KEY */
VAR_SO_SNDBUF = 384, /* VAR_SO_SNDBUF */
VAR_SO_REUSEPORT = 385, /* VAR_SO_REUSEPORT */
VAR_HARDEN_BELOW_NXDOMAIN = 386, /* VAR_HARDEN_BELOW_NXDOMAIN */
VAR_IGNORE_CD_FLAG = 387, /* VAR_IGNORE_CD_FLAG */
VAR_LOG_QUERIES = 388, /* VAR_LOG_QUERIES */
VAR_LOG_REPLIES = 389, /* VAR_LOG_REPLIES */
VAR_LOG_LOCAL_ACTIONS = 390, /* VAR_LOG_LOCAL_ACTIONS */
VAR_TCP_UPSTREAM = 391, /* VAR_TCP_UPSTREAM */
VAR_SSL_UPSTREAM = 392, /* VAR_SSL_UPSTREAM */
VAR_TCP_AUTH_QUERY_TIMEOUT = 393, /* VAR_TCP_AUTH_QUERY_TIMEOUT */
VAR_SSL_SERVICE_KEY = 394, /* VAR_SSL_SERVICE_KEY */
VAR_SSL_SERVICE_PEM = 395, /* VAR_SSL_SERVICE_PEM */
VAR_SSL_PORT = 396, /* VAR_SSL_PORT */
VAR_FORWARD_FIRST = 397, /* VAR_FORWARD_FIRST */
VAR_STUB_SSL_UPSTREAM = 398, /* VAR_STUB_SSL_UPSTREAM */
VAR_FORWARD_SSL_UPSTREAM = 399, /* VAR_FORWARD_SSL_UPSTREAM */
VAR_TLS_CERT_BUNDLE = 400, /* VAR_TLS_CERT_BUNDLE */
VAR_HTTPS_PORT = 401, /* VAR_HTTPS_PORT */
VAR_HTTP_ENDPOINT = 402, /* VAR_HTTP_ENDPOINT */
VAR_HTTP_MAX_STREAMS = 403, /* VAR_HTTP_MAX_STREAMS */
VAR_HTTP_QUERY_BUFFER_SIZE = 404, /* VAR_HTTP_QUERY_BUFFER_SIZE */
VAR_HTTP_RESPONSE_BUFFER_SIZE = 405, /* VAR_HTTP_RESPONSE_BUFFER_SIZE */
VAR_HTTP_NODELAY = 406, /* VAR_HTTP_NODELAY */
VAR_HTTP_NOTLS_DOWNSTREAM = 407, /* VAR_HTTP_NOTLS_DOWNSTREAM */
VAR_STUB_FIRST = 408, /* VAR_STUB_FIRST */
VAR_MINIMAL_RESPONSES = 409, /* VAR_MINIMAL_RESPONSES */
VAR_RRSET_ROUNDROBIN = 410, /* VAR_RRSET_ROUNDROBIN */
VAR_MAX_UDP_SIZE = 411, /* VAR_MAX_UDP_SIZE */
VAR_DELAY_CLOSE = 412, /* VAR_DELAY_CLOSE */
VAR_UDP_CONNECT = 413, /* VAR_UDP_CONNECT */
VAR_UNBLOCK_LAN_ZONES = 414, /* VAR_UNBLOCK_LAN_ZONES */
VAR_INSECURE_LAN_ZONES = 415, /* VAR_INSECURE_LAN_ZONES */
VAR_INFRA_CACHE_MIN_RTT = 416, /* VAR_INFRA_CACHE_MIN_RTT */
VAR_INFRA_KEEP_PROBING = 417, /* VAR_INFRA_KEEP_PROBING */
VAR_DNS64_PREFIX = 418, /* VAR_DNS64_PREFIX */
VAR_DNS64_SYNTHALL = 419, /* VAR_DNS64_SYNTHALL */
VAR_DNS64_IGNORE_AAAA = 420, /* VAR_DNS64_IGNORE_AAAA */
VAR_DNSTAP = 421, /* VAR_DNSTAP */
VAR_DNSTAP_ENABLE = 422, /* VAR_DNSTAP_ENABLE */
VAR_DNSTAP_SOCKET_PATH = 423, /* VAR_DNSTAP_SOCKET_PATH */
VAR_DNSTAP_IP = 424, /* VAR_DNSTAP_IP */
VAR_DNSTAP_TLS = 425, /* VAR_DNSTAP_TLS */
VAR_DNSTAP_TLS_SERVER_NAME = 426, /* VAR_DNSTAP_TLS_SERVER_NAME */
VAR_DNSTAP_TLS_CERT_BUNDLE = 427, /* VAR_DNSTAP_TLS_CERT_BUNDLE */
VAR_DNSTAP_TLS_CLIENT_KEY_FILE = 428, /* VAR_DNSTAP_TLS_CLIENT_KEY_FILE */
VAR_DNSTAP_TLS_CLIENT_CERT_FILE = 429, /* VAR_DNSTAP_TLS_CLIENT_CERT_FILE */
VAR_DNSTAP_SEND_IDENTITY = 430, /* VAR_DNSTAP_SEND_IDENTITY */
VAR_DNSTAP_SEND_VERSION = 431, /* VAR_DNSTAP_SEND_VERSION */
VAR_DNSTAP_BIDIRECTIONAL = 432, /* VAR_DNSTAP_BIDIRECTIONAL */
VAR_DNSTAP_IDENTITY = 433, /* VAR_DNSTAP_IDENTITY */
VAR_DNSTAP_VERSION = 434, /* VAR_DNSTAP_VERSION */
VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES = 435, /* VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES */
VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES = 436, /* VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES */
VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES = 437, /* VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES */
VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES = 438, /* VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES */
VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES = 439, /* VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES */
VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES = 440, /* VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES */
VAR_RESPONSE_IP_TAG = 441, /* VAR_RESPONSE_IP_TAG */
VAR_RESPONSE_IP = 442, /* VAR_RESPONSE_IP */
VAR_RESPONSE_IP_DATA = 443, /* VAR_RESPONSE_IP_DATA */
VAR_HARDEN_ALGO_DOWNGRADE = 444, /* VAR_HARDEN_ALGO_DOWNGRADE */
VAR_IP_TRANSPARENT = 445, /* VAR_IP_TRANSPARENT */
VAR_IP_DSCP = 446, /* VAR_IP_DSCP */
VAR_DISABLE_DNSSEC_LAME_CHECK = 447, /* VAR_DISABLE_DNSSEC_LAME_CHECK */
VAR_IP_RATELIMIT = 448, /* VAR_IP_RATELIMIT */
VAR_IP_RATELIMIT_SLABS = 449, /* VAR_IP_RATELIMIT_SLABS */
VAR_IP_RATELIMIT_SIZE = 450, /* VAR_IP_RATELIMIT_SIZE */
VAR_RATELIMIT = 451, /* VAR_RATELIMIT */
VAR_RATELIMIT_SLABS = 452, /* VAR_RATELIMIT_SLABS */
VAR_RATELIMIT_SIZE = 453, /* VAR_RATELIMIT_SIZE */
VAR_RATELIMIT_FOR_DOMAIN = 454, /* VAR_RATELIMIT_FOR_DOMAIN */
VAR_RATELIMIT_BELOW_DOMAIN = 455, /* VAR_RATELIMIT_BELOW_DOMAIN */
VAR_IP_RATELIMIT_FACTOR = 456, /* VAR_IP_RATELIMIT_FACTOR */
VAR_RATELIMIT_FACTOR = 457, /* VAR_RATELIMIT_FACTOR */
VAR_SEND_CLIENT_SUBNET = 458, /* VAR_SEND_CLIENT_SUBNET */
VAR_CLIENT_SUBNET_ZONE = 459, /* VAR_CLIENT_SUBNET_ZONE */
VAR_CLIENT_SUBNET_ALWAYS_FORWARD = 460, /* VAR_CLIENT_SUBNET_ALWAYS_FORWARD */
VAR_CLIENT_SUBNET_OPCODE = 461, /* VAR_CLIENT_SUBNET_OPCODE */
VAR_MAX_CLIENT_SUBNET_IPV4 = 462, /* VAR_MAX_CLIENT_SUBNET_IPV4 */
VAR_MAX_CLIENT_SUBNET_IPV6 = 463, /* VAR_MAX_CLIENT_SUBNET_IPV6 */
VAR_MIN_CLIENT_SUBNET_IPV4 = 464, /* VAR_MIN_CLIENT_SUBNET_IPV4 */
VAR_MIN_CLIENT_SUBNET_IPV6 = 465, /* VAR_MIN_CLIENT_SUBNET_IPV6 */
VAR_MAX_ECS_TREE_SIZE_IPV4 = 466, /* VAR_MAX_ECS_TREE_SIZE_IPV4 */
VAR_MAX_ECS_TREE_SIZE_IPV6 = 467, /* VAR_MAX_ECS_TREE_SIZE_IPV6 */
VAR_CAPS_WHITELIST = 468, /* VAR_CAPS_WHITELIST */
VAR_CACHE_MAX_NEGATIVE_TTL = 469, /* VAR_CACHE_MAX_NEGATIVE_TTL */
VAR_PERMIT_SMALL_HOLDDOWN = 470, /* VAR_PERMIT_SMALL_HOLDDOWN */
VAR_QNAME_MINIMISATION = 471, /* VAR_QNAME_MINIMISATION */
VAR_QNAME_MINIMISATION_STRICT = 472, /* VAR_QNAME_MINIMISATION_STRICT */
VAR_IP_FREEBIND = 473, /* VAR_IP_FREEBIND */
VAR_DEFINE_TAG = 474, /* VAR_DEFINE_TAG */
VAR_LOCAL_ZONE_TAG = 475, /* VAR_LOCAL_ZONE_TAG */
VAR_ACCESS_CONTROL_TAG = 476, /* VAR_ACCESS_CONTROL_TAG */
VAR_LOCAL_ZONE_OVERRIDE = 477, /* VAR_LOCAL_ZONE_OVERRIDE */
VAR_ACCESS_CONTROL_TAG_ACTION = 478, /* VAR_ACCESS_CONTROL_TAG_ACTION */
VAR_ACCESS_CONTROL_TAG_DATA = 479, /* VAR_ACCESS_CONTROL_TAG_DATA */
VAR_VIEW = 480, /* VAR_VIEW */
VAR_ACCESS_CONTROL_VIEW = 481, /* VAR_ACCESS_CONTROL_VIEW */
VAR_VIEW_FIRST = 482, /* VAR_VIEW_FIRST */
VAR_SERVE_EXPIRED = 483, /* VAR_SERVE_EXPIRED */
VAR_SERVE_EXPIRED_TTL = 484, /* VAR_SERVE_EXPIRED_TTL */
VAR_SERVE_EXPIRED_TTL_RESET = 485, /* VAR_SERVE_EXPIRED_TTL_RESET */
VAR_SERVE_EXPIRED_REPLY_TTL = 486, /* VAR_SERVE_EXPIRED_REPLY_TTL */
VAR_SERVE_EXPIRED_CLIENT_TIMEOUT = 487, /* VAR_SERVE_EXPIRED_CLIENT_TIMEOUT */
VAR_SERVE_ORIGINAL_TTL = 488, /* VAR_SERVE_ORIGINAL_TTL */
VAR_FAKE_DSA = 489, /* VAR_FAKE_DSA */
VAR_FAKE_SHA1 = 490, /* VAR_FAKE_SHA1 */
VAR_LOG_IDENTITY = 491, /* VAR_LOG_IDENTITY */
VAR_HIDE_TRUSTANCHOR = 492, /* VAR_HIDE_TRUSTANCHOR */
VAR_TRUST_ANCHOR_SIGNALING = 493, /* VAR_TRUST_ANCHOR_SIGNALING */
VAR_AGGRESSIVE_NSEC = 494, /* VAR_AGGRESSIVE_NSEC */
VAR_USE_SYSTEMD = 495, /* VAR_USE_SYSTEMD */
VAR_SHM_ENABLE = 496, /* VAR_SHM_ENABLE */
VAR_SHM_KEY = 497, /* VAR_SHM_KEY */
VAR_ROOT_KEY_SENTINEL = 498, /* VAR_ROOT_KEY_SENTINEL */
VAR_DNSCRYPT = 499, /* VAR_DNSCRYPT */
VAR_DNSCRYPT_ENABLE = 500, /* VAR_DNSCRYPT_ENABLE */
VAR_DNSCRYPT_PORT = 501, /* VAR_DNSCRYPT_PORT */
VAR_DNSCRYPT_PROVIDER = 502, /* VAR_DNSCRYPT_PROVIDER */
VAR_DNSCRYPT_SECRET_KEY = 503, /* VAR_DNSCRYPT_SECRET_KEY */
VAR_DNSCRYPT_PROVIDER_CERT = 504, /* VAR_DNSCRYPT_PROVIDER_CERT */
VAR_DNSCRYPT_PROVIDER_CERT_ROTATED = 505, /* VAR_DNSCRYPT_PROVIDER_CERT_ROTATED */
VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE = 506, /* VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE */
VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS = 507, /* VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS */
VAR_DNSCRYPT_NONCE_CACHE_SIZE = 508, /* VAR_DNSCRYPT_NONCE_CACHE_SIZE */
VAR_DNSCRYPT_NONCE_CACHE_SLABS = 509, /* VAR_DNSCRYPT_NONCE_CACHE_SLABS */
VAR_PAD_RESPONSES = 510, /* VAR_PAD_RESPONSES */
VAR_PAD_RESPONSES_BLOCK_SIZE = 511, /* VAR_PAD_RESPONSES_BLOCK_SIZE */
VAR_PAD_QUERIES = 512, /* VAR_PAD_QUERIES */
VAR_PAD_QUERIES_BLOCK_SIZE = 513, /* VAR_PAD_QUERIES_BLOCK_SIZE */
VAR_IPSECMOD_ENABLED = 514, /* VAR_IPSECMOD_ENABLED */
VAR_IPSECMOD_HOOK = 515, /* VAR_IPSECMOD_HOOK */
VAR_IPSECMOD_IGNORE_BOGUS = 516, /* VAR_IPSECMOD_IGNORE_BOGUS */
VAR_IPSECMOD_MAX_TTL = 517, /* VAR_IPSECMOD_MAX_TTL */
VAR_IPSECMOD_WHITELIST = 518, /* VAR_IPSECMOD_WHITELIST */
VAR_IPSECMOD_STRICT = 519, /* VAR_IPSECMOD_STRICT */
VAR_CACHEDB = 520, /* VAR_CACHEDB */
VAR_CACHEDB_BACKEND = 521, /* VAR_CACHEDB_BACKEND */
VAR_CACHEDB_SECRETSEED = 522, /* VAR_CACHEDB_SECRETSEED */
VAR_CACHEDB_REDISHOST = 523, /* VAR_CACHEDB_REDISHOST */
VAR_CACHEDB_REDISPORT = 524, /* VAR_CACHEDB_REDISPORT */
VAR_CACHEDB_REDISTIMEOUT = 525, /* VAR_CACHEDB_REDISTIMEOUT */
VAR_CACHEDB_REDISEXPIRERECORDS = 526, /* VAR_CACHEDB_REDISEXPIRERECORDS */
VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM = 527, /* VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM */
VAR_FOR_UPSTREAM = 528, /* VAR_FOR_UPSTREAM */
VAR_AUTH_ZONE = 529, /* VAR_AUTH_ZONE */
VAR_ZONEFILE = 530, /* VAR_ZONEFILE */
VAR_MASTER = 531, /* VAR_MASTER */
VAR_URL = 532, /* VAR_URL */
VAR_FOR_DOWNSTREAM = 533, /* VAR_FOR_DOWNSTREAM */
VAR_FALLBACK_ENABLED = 534, /* VAR_FALLBACK_ENABLED */
VAR_TLS_ADDITIONAL_PORT = 535, /* VAR_TLS_ADDITIONAL_PORT */
VAR_LOW_RTT = 536, /* VAR_LOW_RTT */
VAR_LOW_RTT_PERMIL = 537, /* VAR_LOW_RTT_PERMIL */
VAR_FAST_SERVER_PERMIL = 538, /* VAR_FAST_SERVER_PERMIL */
VAR_FAST_SERVER_NUM = 539, /* VAR_FAST_SERVER_NUM */
VAR_ALLOW_NOTIFY = 540, /* VAR_ALLOW_NOTIFY */
VAR_TLS_WIN_CERT = 541, /* VAR_TLS_WIN_CERT */
VAR_TCP_CONNECTION_LIMIT = 542, /* VAR_TCP_CONNECTION_LIMIT */
VAR_FORWARD_NO_CACHE = 543, /* VAR_FORWARD_NO_CACHE */
VAR_STUB_NO_CACHE = 544, /* VAR_STUB_NO_CACHE */
VAR_LOG_SERVFAIL = 545, /* VAR_LOG_SERVFAIL */
VAR_DENY_ANY = 546, /* VAR_DENY_ANY */
VAR_UNKNOWN_SERVER_TIME_LIMIT = 547, /* VAR_UNKNOWN_SERVER_TIME_LIMIT */
VAR_LOG_TAG_QUERYREPLY = 548, /* VAR_LOG_TAG_QUERYREPLY */
VAR_STREAM_WAIT_SIZE = 549, /* VAR_STREAM_WAIT_SIZE */
VAR_TLS_CIPHERS = 550, /* VAR_TLS_CIPHERS */
VAR_TLS_CIPHERSUITES = 551, /* VAR_TLS_CIPHERSUITES */
VAR_TLS_USE_SNI = 552, /* VAR_TLS_USE_SNI */
VAR_IPSET = 553, /* VAR_IPSET */
VAR_IPSET_NAME_V4 = 554, /* VAR_IPSET_NAME_V4 */
VAR_IPSET_NAME_V6 = 555, /* VAR_IPSET_NAME_V6 */
VAR_TLS_SESSION_TICKET_KEYS = 556, /* VAR_TLS_SESSION_TICKET_KEYS */
VAR_RPZ = 557, /* VAR_RPZ */
VAR_TAGS = 558, /* VAR_TAGS */
VAR_RPZ_ACTION_OVERRIDE = 559, /* VAR_RPZ_ACTION_OVERRIDE */
VAR_RPZ_CNAME_OVERRIDE = 560, /* VAR_RPZ_CNAME_OVERRIDE */
VAR_RPZ_LOG = 561, /* VAR_RPZ_LOG */
VAR_RPZ_LOG_NAME = 562, /* VAR_RPZ_LOG_NAME */
VAR_DYNLIB = 563, /* VAR_DYNLIB */
VAR_DYNLIB_FILE = 564, /* VAR_DYNLIB_FILE */
VAR_EDNS_CLIENT_STRING = 565, /* VAR_EDNS_CLIENT_STRING */
VAR_EDNS_CLIENT_STRING_OPCODE = 566, /* VAR_EDNS_CLIENT_STRING_OPCODE */
VAR_NSID = 567, /* VAR_NSID */
VAR_ZONEMD_PERMISSIVE_MODE = 568, /* VAR_ZONEMD_PERMISSIVE_MODE */
VAR_ZONEMD_CHECK = 569, /* VAR_ZONEMD_CHECK */
VAR_ZONEMD_REJECT_ABSENCE = 570 /* VAR_ZONEMD_REJECT_ABSENCE */
};
typedef enum yytokentype yytoken_kind_t;
#endif
/* Token kinds. */
#define YYEMPTY -2
#define YYEOF 0
#define YYerror 256
#define YYUNDEF 257
@@ -488,203 +490,204 @@ extern int yydebug;
#define VAR_PYTHON_SCRIPT 370
#define VAR_VAL_SIG_SKEW_MIN 371
#define VAR_VAL_SIG_SKEW_MAX 372
#define VAR_CACHE_MIN_TTL 373
#define VAR_VAL_LOG_LEVEL 374
#define VAR_AUTO_TRUST_ANCHOR_FILE 375
#define VAR_KEEP_MISSING 376
#define VAR_ADD_HOLDDOWN 377
#define VAR_DEL_HOLDDOWN 378
#define VAR_SO_RCVBUF 379
#define VAR_EDNS_BUFFER_SIZE 380
#define VAR_PREFETCH 381
#define VAR_PREFETCH_KEY 382
#define VAR_SO_SNDBUF 383
#define VAR_SO_REUSEPORT 384
#define VAR_HARDEN_BELOW_NXDOMAIN 385
#define VAR_IGNORE_CD_FLAG 386
#define VAR_LOG_QUERIES 387
#define VAR_LOG_REPLIES 388
#define VAR_LOG_LOCAL_ACTIONS 389
#define VAR_TCP_UPSTREAM 390
#define VAR_SSL_UPSTREAM 391
#define VAR_TCP_AUTH_QUERY_TIMEOUT 392
#define VAR_SSL_SERVICE_KEY 393
#define VAR_SSL_SERVICE_PEM 394
#define VAR_SSL_PORT 395
#define VAR_FORWARD_FIRST 396
#define VAR_STUB_SSL_UPSTREAM 397
#define VAR_FORWARD_SSL_UPSTREAM 398
#define VAR_TLS_CERT_BUNDLE 399
#define VAR_HTTPS_PORT 400
#define VAR_HTTP_ENDPOINT 401
#define VAR_HTTP_MAX_STREAMS 402
#define VAR_HTTP_QUERY_BUFFER_SIZE 403
#define VAR_HTTP_RESPONSE_BUFFER_SIZE 404
#define VAR_HTTP_NODELAY 405
#define VAR_HTTP_NOTLS_DOWNSTREAM 406
#define VAR_STUB_FIRST 407
#define VAR_MINIMAL_RESPONSES 408
#define VAR_RRSET_ROUNDROBIN 409
#define VAR_MAX_UDP_SIZE 410
#define VAR_DELAY_CLOSE 411
#define VAR_UDP_CONNECT 412
#define VAR_UNBLOCK_LAN_ZONES 413
#define VAR_INSECURE_LAN_ZONES 414
#define VAR_INFRA_CACHE_MIN_RTT 415
#define VAR_INFRA_KEEP_PROBING 416
#define VAR_DNS64_PREFIX 417
#define VAR_DNS64_SYNTHALL 418
#define VAR_DNS64_IGNORE_AAAA 419
#define VAR_DNSTAP 420
#define VAR_DNSTAP_ENABLE 421
#define VAR_DNSTAP_SOCKET_PATH 422
#define VAR_DNSTAP_IP 423
#define VAR_DNSTAP_TLS 424
#define VAR_DNSTAP_TLS_SERVER_NAME 425
#define VAR_DNSTAP_TLS_CERT_BUNDLE 426
#define VAR_DNSTAP_TLS_CLIENT_KEY_FILE 427
#define VAR_DNSTAP_TLS_CLIENT_CERT_FILE 428
#define VAR_DNSTAP_SEND_IDENTITY 429
#define VAR_DNSTAP_SEND_VERSION 430
#define VAR_DNSTAP_BIDIRECTIONAL 431
#define VAR_DNSTAP_IDENTITY 432
#define VAR_DNSTAP_VERSION 433
#define VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES 434
#define VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES 435
#define VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES 436
#define VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES 437
#define VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES 438
#define VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES 439
#define VAR_RESPONSE_IP_TAG 440
#define VAR_RESPONSE_IP 441
#define VAR_RESPONSE_IP_DATA 442
#define VAR_HARDEN_ALGO_DOWNGRADE 443
#define VAR_IP_TRANSPARENT 444
#define VAR_IP_DSCP 445
#define VAR_DISABLE_DNSSEC_LAME_CHECK 446
#define VAR_IP_RATELIMIT 447
#define VAR_IP_RATELIMIT_SLABS 448
#define VAR_IP_RATELIMIT_SIZE 449
#define VAR_RATELIMIT 450
#define VAR_RATELIMIT_SLABS 451
#define VAR_RATELIMIT_SIZE 452
#define VAR_RATELIMIT_FOR_DOMAIN 453
#define VAR_RATELIMIT_BELOW_DOMAIN 454
#define VAR_IP_RATELIMIT_FACTOR 455
#define VAR_RATELIMIT_FACTOR 456
#define VAR_SEND_CLIENT_SUBNET 457
#define VAR_CLIENT_SUBNET_ZONE 458
#define VAR_CLIENT_SUBNET_ALWAYS_FORWARD 459
#define VAR_CLIENT_SUBNET_OPCODE 460
#define VAR_MAX_CLIENT_SUBNET_IPV4 461
#define VAR_MAX_CLIENT_SUBNET_IPV6 462
#define VAR_MIN_CLIENT_SUBNET_IPV4 463
#define VAR_MIN_CLIENT_SUBNET_IPV6 464
#define VAR_MAX_ECS_TREE_SIZE_IPV4 465
#define VAR_MAX_ECS_TREE_SIZE_IPV6 466
#define VAR_CAPS_WHITELIST 467
#define VAR_CACHE_MAX_NEGATIVE_TTL 468
#define VAR_PERMIT_SMALL_HOLDDOWN 469
#define VAR_QNAME_MINIMISATION 470
#define VAR_QNAME_MINIMISATION_STRICT 471
#define VAR_IP_FREEBIND 472
#define VAR_DEFINE_TAG 473
#define VAR_LOCAL_ZONE_TAG 474
#define VAR_ACCESS_CONTROL_TAG 475
#define VAR_LOCAL_ZONE_OVERRIDE 476
#define VAR_ACCESS_CONTROL_TAG_ACTION 477
#define VAR_ACCESS_CONTROL_TAG_DATA 478
#define VAR_VIEW 479
#define VAR_ACCESS_CONTROL_VIEW 480
#define VAR_VIEW_FIRST 481
#define VAR_SERVE_EXPIRED 482
#define VAR_SERVE_EXPIRED_TTL 483
#define VAR_SERVE_EXPIRED_TTL_RESET 484
#define VAR_SERVE_EXPIRED_REPLY_TTL 485
#define VAR_SERVE_EXPIRED_CLIENT_TIMEOUT 486
#define VAR_SERVE_ORIGINAL_TTL 487
#define VAR_FAKE_DSA 488
#define VAR_FAKE_SHA1 489
#define VAR_LOG_IDENTITY 490
#define VAR_HIDE_TRUSTANCHOR 491
#define VAR_TRUST_ANCHOR_SIGNALING 492
#define VAR_AGGRESSIVE_NSEC 493
#define VAR_USE_SYSTEMD 494
#define VAR_SHM_ENABLE 495
#define VAR_SHM_KEY 496
#define VAR_ROOT_KEY_SENTINEL 497
#define VAR_DNSCRYPT 498
#define VAR_DNSCRYPT_ENABLE 499
#define VAR_DNSCRYPT_PORT 500
#define VAR_DNSCRYPT_PROVIDER 501
#define VAR_DNSCRYPT_SECRET_KEY 502
#define VAR_DNSCRYPT_PROVIDER_CERT 503
#define VAR_DNSCRYPT_PROVIDER_CERT_ROTATED 504
#define VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE 505
#define VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS 506
#define VAR_DNSCRYPT_NONCE_CACHE_SIZE 507
#define VAR_DNSCRYPT_NONCE_CACHE_SLABS 508
#define VAR_PAD_RESPONSES 509
#define VAR_PAD_RESPONSES_BLOCK_SIZE 510
#define VAR_PAD_QUERIES 511
#define VAR_PAD_QUERIES_BLOCK_SIZE 512
#define VAR_IPSECMOD_ENABLED 513
#define VAR_IPSECMOD_HOOK 514
#define VAR_IPSECMOD_IGNORE_BOGUS 515
#define VAR_IPSECMOD_MAX_TTL 516
#define VAR_IPSECMOD_WHITELIST 517
#define VAR_IPSECMOD_STRICT 518
#define VAR_CACHEDB 519
#define VAR_CACHEDB_BACKEND 520
#define VAR_CACHEDB_SECRETSEED 521
#define VAR_CACHEDB_REDISHOST 522
#define VAR_CACHEDB_REDISPORT 523
#define VAR_CACHEDB_REDISTIMEOUT 524
#define VAR_CACHEDB_REDISEXPIRERECORDS 525
#define VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM 526
#define VAR_FOR_UPSTREAM 527
#define VAR_AUTH_ZONE 528
#define VAR_ZONEFILE 529
#define VAR_MASTER 530
#define VAR_URL 531
#define VAR_FOR_DOWNSTREAM 532
#define VAR_FALLBACK_ENABLED 533
#define VAR_TLS_ADDITIONAL_PORT 534
#define VAR_LOW_RTT 535
#define VAR_LOW_RTT_PERMIL 536
#define VAR_FAST_SERVER_PERMIL 537
#define VAR_FAST_SERVER_NUM 538
#define VAR_ALLOW_NOTIFY 539
#define VAR_TLS_WIN_CERT 540
#define VAR_TCP_CONNECTION_LIMIT 541
#define VAR_FORWARD_NO_CACHE 542
#define VAR_STUB_NO_CACHE 543
#define VAR_LOG_SERVFAIL 544
#define VAR_DENY_ANY 545
#define VAR_UNKNOWN_SERVER_TIME_LIMIT 546
#define VAR_LOG_TAG_QUERYREPLY 547
#define VAR_STREAM_WAIT_SIZE 548
#define VAR_TLS_CIPHERS 549
#define VAR_TLS_CIPHERSUITES 550
#define VAR_TLS_USE_SNI 551
#define VAR_IPSET 552
#define VAR_IPSET_NAME_V4 553
#define VAR_IPSET_NAME_V6 554
#define VAR_TLS_SESSION_TICKET_KEYS 555
#define VAR_RPZ 556
#define VAR_TAGS 557
#define VAR_RPZ_ACTION_OVERRIDE 558
#define VAR_RPZ_CNAME_OVERRIDE 559
#define VAR_RPZ_LOG 560
#define VAR_RPZ_LOG_NAME 561
#define VAR_DYNLIB 562
#define VAR_DYNLIB_FILE 563
#define VAR_EDNS_CLIENT_STRING 564
#define VAR_EDNS_CLIENT_STRING_OPCODE 565
#define VAR_NSID 566
#define VAR_ZONEMD_PERMISSIVE_MODE 567
#define VAR_ZONEMD_CHECK 568
#define VAR_ZONEMD_REJECT_ABSENCE 569
#define VAR_VAL_MAX_RESTART 373
#define VAR_CACHE_MIN_TTL 374
#define VAR_VAL_LOG_LEVEL 375
#define VAR_AUTO_TRUST_ANCHOR_FILE 376
#define VAR_KEEP_MISSING 377
#define VAR_ADD_HOLDDOWN 378
#define VAR_DEL_HOLDDOWN 379
#define VAR_SO_RCVBUF 380
#define VAR_EDNS_BUFFER_SIZE 381
#define VAR_PREFETCH 382
#define VAR_PREFETCH_KEY 383
#define VAR_SO_SNDBUF 384
#define VAR_SO_REUSEPORT 385
#define VAR_HARDEN_BELOW_NXDOMAIN 386
#define VAR_IGNORE_CD_FLAG 387
#define VAR_LOG_QUERIES 388
#define VAR_LOG_REPLIES 389
#define VAR_LOG_LOCAL_ACTIONS 390
#define VAR_TCP_UPSTREAM 391
#define VAR_SSL_UPSTREAM 392
#define VAR_TCP_AUTH_QUERY_TIMEOUT 393
#define VAR_SSL_SERVICE_KEY 394
#define VAR_SSL_SERVICE_PEM 395
#define VAR_SSL_PORT 396
#define VAR_FORWARD_FIRST 397
#define VAR_STUB_SSL_UPSTREAM 398
#define VAR_FORWARD_SSL_UPSTREAM 399
#define VAR_TLS_CERT_BUNDLE 400
#define VAR_HTTPS_PORT 401
#define VAR_HTTP_ENDPOINT 402
#define VAR_HTTP_MAX_STREAMS 403
#define VAR_HTTP_QUERY_BUFFER_SIZE 404
#define VAR_HTTP_RESPONSE_BUFFER_SIZE 405
#define VAR_HTTP_NODELAY 406
#define VAR_HTTP_NOTLS_DOWNSTREAM 407
#define VAR_STUB_FIRST 408
#define VAR_MINIMAL_RESPONSES 409
#define VAR_RRSET_ROUNDROBIN 410
#define VAR_MAX_UDP_SIZE 411
#define VAR_DELAY_CLOSE 412
#define VAR_UDP_CONNECT 413
#define VAR_UNBLOCK_LAN_ZONES 414
#define VAR_INSECURE_LAN_ZONES 415
#define VAR_INFRA_CACHE_MIN_RTT 416
#define VAR_INFRA_KEEP_PROBING 417
#define VAR_DNS64_PREFIX 418
#define VAR_DNS64_SYNTHALL 419
#define VAR_DNS64_IGNORE_AAAA 420
#define VAR_DNSTAP 421
#define VAR_DNSTAP_ENABLE 422
#define VAR_DNSTAP_SOCKET_PATH 423
#define VAR_DNSTAP_IP 424
#define VAR_DNSTAP_TLS 425
#define VAR_DNSTAP_TLS_SERVER_NAME 426
#define VAR_DNSTAP_TLS_CERT_BUNDLE 427
#define VAR_DNSTAP_TLS_CLIENT_KEY_FILE 428
#define VAR_DNSTAP_TLS_CLIENT_CERT_FILE 429
#define VAR_DNSTAP_SEND_IDENTITY 430
#define VAR_DNSTAP_SEND_VERSION 431
#define VAR_DNSTAP_BIDIRECTIONAL 432
#define VAR_DNSTAP_IDENTITY 433
#define VAR_DNSTAP_VERSION 434
#define VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES 435
#define VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES 436
#define VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES 437
#define VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES 438
#define VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES 439
#define VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES 440
#define VAR_RESPONSE_IP_TAG 441
#define VAR_RESPONSE_IP 442
#define VAR_RESPONSE_IP_DATA 443
#define VAR_HARDEN_ALGO_DOWNGRADE 444
#define VAR_IP_TRANSPARENT 445
#define VAR_IP_DSCP 446
#define VAR_DISABLE_DNSSEC_LAME_CHECK 447
#define VAR_IP_RATELIMIT 448
#define VAR_IP_RATELIMIT_SLABS 449
#define VAR_IP_RATELIMIT_SIZE 450
#define VAR_RATELIMIT 451
#define VAR_RATELIMIT_SLABS 452
#define VAR_RATELIMIT_SIZE 453
#define VAR_RATELIMIT_FOR_DOMAIN 454
#define VAR_RATELIMIT_BELOW_DOMAIN 455
#define VAR_IP_RATELIMIT_FACTOR 456
#define VAR_RATELIMIT_FACTOR 457
#define VAR_SEND_CLIENT_SUBNET 458
#define VAR_CLIENT_SUBNET_ZONE 459
#define VAR_CLIENT_SUBNET_ALWAYS_FORWARD 460
#define VAR_CLIENT_SUBNET_OPCODE 461
#define VAR_MAX_CLIENT_SUBNET_IPV4 462
#define VAR_MAX_CLIENT_SUBNET_IPV6 463
#define VAR_MIN_CLIENT_SUBNET_IPV4 464
#define VAR_MIN_CLIENT_SUBNET_IPV6 465
#define VAR_MAX_ECS_TREE_SIZE_IPV4 466
#define VAR_MAX_ECS_TREE_SIZE_IPV6 467
#define VAR_CAPS_WHITELIST 468
#define VAR_CACHE_MAX_NEGATIVE_TTL 469
#define VAR_PERMIT_SMALL_HOLDDOWN 470
#define VAR_QNAME_MINIMISATION 471
#define VAR_QNAME_MINIMISATION_STRICT 472
#define VAR_IP_FREEBIND 473
#define VAR_DEFINE_TAG 474
#define VAR_LOCAL_ZONE_TAG 475
#define VAR_ACCESS_CONTROL_TAG 476
#define VAR_LOCAL_ZONE_OVERRIDE 477
#define VAR_ACCESS_CONTROL_TAG_ACTION 478
#define VAR_ACCESS_CONTROL_TAG_DATA 479
#define VAR_VIEW 480
#define VAR_ACCESS_CONTROL_VIEW 481
#define VAR_VIEW_FIRST 482
#define VAR_SERVE_EXPIRED 483
#define VAR_SERVE_EXPIRED_TTL 484
#define VAR_SERVE_EXPIRED_TTL_RESET 485
#define VAR_SERVE_EXPIRED_REPLY_TTL 486
#define VAR_SERVE_EXPIRED_CLIENT_TIMEOUT 487
#define VAR_SERVE_ORIGINAL_TTL 488
#define VAR_FAKE_DSA 489
#define VAR_FAKE_SHA1 490
#define VAR_LOG_IDENTITY 491
#define VAR_HIDE_TRUSTANCHOR 492
#define VAR_TRUST_ANCHOR_SIGNALING 493
#define VAR_AGGRESSIVE_NSEC 494
#define VAR_USE_SYSTEMD 495
#define VAR_SHM_ENABLE 496
#define VAR_SHM_KEY 497
#define VAR_ROOT_KEY_SENTINEL 498
#define VAR_DNSCRYPT 499
#define VAR_DNSCRYPT_ENABLE 500
#define VAR_DNSCRYPT_PORT 501
#define VAR_DNSCRYPT_PROVIDER 502
#define VAR_DNSCRYPT_SECRET_KEY 503
#define VAR_DNSCRYPT_PROVIDER_CERT 504
#define VAR_DNSCRYPT_PROVIDER_CERT_ROTATED 505
#define VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE 506
#define VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS 507
#define VAR_DNSCRYPT_NONCE_CACHE_SIZE 508
#define VAR_DNSCRYPT_NONCE_CACHE_SLABS 509
#define VAR_PAD_RESPONSES 510
#define VAR_PAD_RESPONSES_BLOCK_SIZE 511
#define VAR_PAD_QUERIES 512
#define VAR_PAD_QUERIES_BLOCK_SIZE 513
#define VAR_IPSECMOD_ENABLED 514
#define VAR_IPSECMOD_HOOK 515
#define VAR_IPSECMOD_IGNORE_BOGUS 516
#define VAR_IPSECMOD_MAX_TTL 517
#define VAR_IPSECMOD_WHITELIST 518
#define VAR_IPSECMOD_STRICT 519
#define VAR_CACHEDB 520
#define VAR_CACHEDB_BACKEND 521
#define VAR_CACHEDB_SECRETSEED 522
#define VAR_CACHEDB_REDISHOST 523
#define VAR_CACHEDB_REDISPORT 524
#define VAR_CACHEDB_REDISTIMEOUT 525
#define VAR_CACHEDB_REDISEXPIRERECORDS 526
#define VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM 527
#define VAR_FOR_UPSTREAM 528
#define VAR_AUTH_ZONE 529
#define VAR_ZONEFILE 530
#define VAR_MASTER 531
#define VAR_URL 532
#define VAR_FOR_DOWNSTREAM 533
#define VAR_FALLBACK_ENABLED 534
#define VAR_TLS_ADDITIONAL_PORT 535
#define VAR_LOW_RTT 536
#define VAR_LOW_RTT_PERMIL 537
#define VAR_FAST_SERVER_PERMIL 538
#define VAR_FAST_SERVER_NUM 539
#define VAR_ALLOW_NOTIFY 540
#define VAR_TLS_WIN_CERT 541
#define VAR_TCP_CONNECTION_LIMIT 542
#define VAR_FORWARD_NO_CACHE 543
#define VAR_STUB_NO_CACHE 544
#define VAR_LOG_SERVFAIL 545
#define VAR_DENY_ANY 546
#define VAR_UNKNOWN_SERVER_TIME_LIMIT 547
#define VAR_LOG_TAG_QUERYREPLY 548
#define VAR_STREAM_WAIT_SIZE 549
#define VAR_TLS_CIPHERS 550
#define VAR_TLS_CIPHERSUITES 551
#define VAR_TLS_USE_SNI 552
#define VAR_IPSET 553
#define VAR_IPSET_NAME_V4 554
#define VAR_IPSET_NAME_V6 555
#define VAR_TLS_SESSION_TICKET_KEYS 556
#define VAR_RPZ 557
#define VAR_TAGS 558
#define VAR_RPZ_ACTION_OVERRIDE 559
#define VAR_RPZ_CNAME_OVERRIDE 560
#define VAR_RPZ_LOG 561
#define VAR_RPZ_LOG_NAME 562
#define VAR_DYNLIB 563
#define VAR_DYNLIB_FILE 564
#define VAR_EDNS_CLIENT_STRING 565
#define VAR_EDNS_CLIENT_STRING_OPCODE 566
#define VAR_NSID 567
#define VAR_ZONEMD_PERMISSIVE_MODE 568
#define VAR_ZONEMD_CHECK 569
#define VAR_ZONEMD_REJECT_ABSENCE 570
/* Value type. */
#if ! defined YYSTYPE && ! defined YYSTYPE_IS_DECLARED
@@ -694,7 +697,7 @@ union YYSTYPE
char* str;
#line 698 "util/configparser.h"
#line 701 "util/configparser.h"
};
typedef union YYSTYPE YYSTYPE;