- Changelog entry for #486: Make VAL_MAX_RESTART_COUNT configurable.

- Generetated lexer and parser for #486; updated example.conf.
This commit is contained in:
George Thessalonikefs 2021-06-09 12:32:58 +02:00
parent 45be341267
commit d02e956da0
5 changed files with 4910 additions and 5552 deletions

View file

@ -1,3 +1,7 @@
9 June 2021: George
- Merge #486 by fobster: Make VAL_MAX_RESTART_COUNT configurable.
- Generated lexer and parser for #486; updated example.conf.
8 June 2021: George
- Fix unused variable warning when compiling with --enable-dnstap.

View file

@ -557,6 +557,10 @@ server:
# val-sig-skew-min: 3600
# val-sig-skew-max: 86400
# The maximum number the validator should restart validation with
# another authority in case of failed validation.
# val-max-restart: 5
# Should additional section of secure message also be kept clean of
# unsecure data. Useful to shield the users of this validator from
# potential bogus data in the additional section. All unsigned data

File diff suppressed because it is too large Load diff

File diff suppressed because it is too large Load diff

View file

@ -1,4 +1,4 @@
/* A Bison parser, made by GNU Bison 3.6.4. */
/* A Bison parser, made by GNU Bison 3.7.4. */
/* Bison interface for Yacc-like parsers in C
@ -169,207 +169,209 @@ extern int yydebug;
VAR_PYTHON_SCRIPT = 370, /* VAR_PYTHON_SCRIPT */
VAR_VAL_SIG_SKEW_MIN = 371, /* VAR_VAL_SIG_SKEW_MIN */
VAR_VAL_SIG_SKEW_MAX = 372, /* VAR_VAL_SIG_SKEW_MAX */
VAR_CACHE_MIN_TTL = 373, /* VAR_CACHE_MIN_TTL */
VAR_VAL_LOG_LEVEL = 374, /* VAR_VAL_LOG_LEVEL */
VAR_AUTO_TRUST_ANCHOR_FILE = 375, /* VAR_AUTO_TRUST_ANCHOR_FILE */
VAR_KEEP_MISSING = 376, /* VAR_KEEP_MISSING */
VAR_ADD_HOLDDOWN = 377, /* VAR_ADD_HOLDDOWN */
VAR_DEL_HOLDDOWN = 378, /* VAR_DEL_HOLDDOWN */
VAR_SO_RCVBUF = 379, /* VAR_SO_RCVBUF */
VAR_EDNS_BUFFER_SIZE = 380, /* VAR_EDNS_BUFFER_SIZE */
VAR_PREFETCH = 381, /* VAR_PREFETCH */
VAR_PREFETCH_KEY = 382, /* VAR_PREFETCH_KEY */
VAR_SO_SNDBUF = 383, /* VAR_SO_SNDBUF */
VAR_SO_REUSEPORT = 384, /* VAR_SO_REUSEPORT */
VAR_HARDEN_BELOW_NXDOMAIN = 385, /* VAR_HARDEN_BELOW_NXDOMAIN */
VAR_IGNORE_CD_FLAG = 386, /* VAR_IGNORE_CD_FLAG */
VAR_LOG_QUERIES = 387, /* VAR_LOG_QUERIES */
VAR_LOG_REPLIES = 388, /* VAR_LOG_REPLIES */
VAR_LOG_LOCAL_ACTIONS = 389, /* VAR_LOG_LOCAL_ACTIONS */
VAR_TCP_UPSTREAM = 390, /* VAR_TCP_UPSTREAM */
VAR_SSL_UPSTREAM = 391, /* VAR_SSL_UPSTREAM */
VAR_TCP_AUTH_QUERY_TIMEOUT = 392, /* VAR_TCP_AUTH_QUERY_TIMEOUT */
VAR_SSL_SERVICE_KEY = 393, /* VAR_SSL_SERVICE_KEY */
VAR_SSL_SERVICE_PEM = 394, /* VAR_SSL_SERVICE_PEM */
VAR_SSL_PORT = 395, /* VAR_SSL_PORT */
VAR_FORWARD_FIRST = 396, /* VAR_FORWARD_FIRST */
VAR_STUB_SSL_UPSTREAM = 397, /* VAR_STUB_SSL_UPSTREAM */
VAR_FORWARD_SSL_UPSTREAM = 398, /* VAR_FORWARD_SSL_UPSTREAM */
VAR_TLS_CERT_BUNDLE = 399, /* VAR_TLS_CERT_BUNDLE */
VAR_HTTPS_PORT = 400, /* VAR_HTTPS_PORT */
VAR_HTTP_ENDPOINT = 401, /* VAR_HTTP_ENDPOINT */
VAR_HTTP_MAX_STREAMS = 402, /* VAR_HTTP_MAX_STREAMS */
VAR_HTTP_QUERY_BUFFER_SIZE = 403, /* VAR_HTTP_QUERY_BUFFER_SIZE */
VAR_HTTP_RESPONSE_BUFFER_SIZE = 404, /* VAR_HTTP_RESPONSE_BUFFER_SIZE */
VAR_HTTP_NODELAY = 405, /* VAR_HTTP_NODELAY */
VAR_HTTP_NOTLS_DOWNSTREAM = 406, /* VAR_HTTP_NOTLS_DOWNSTREAM */
VAR_STUB_FIRST = 407, /* VAR_STUB_FIRST */
VAR_MINIMAL_RESPONSES = 408, /* VAR_MINIMAL_RESPONSES */
VAR_RRSET_ROUNDROBIN = 409, /* VAR_RRSET_ROUNDROBIN */
VAR_MAX_UDP_SIZE = 410, /* VAR_MAX_UDP_SIZE */
VAR_DELAY_CLOSE = 411, /* VAR_DELAY_CLOSE */
VAR_UDP_CONNECT = 412, /* VAR_UDP_CONNECT */
VAR_UNBLOCK_LAN_ZONES = 413, /* VAR_UNBLOCK_LAN_ZONES */
VAR_INSECURE_LAN_ZONES = 414, /* VAR_INSECURE_LAN_ZONES */
VAR_INFRA_CACHE_MIN_RTT = 415, /* VAR_INFRA_CACHE_MIN_RTT */
VAR_INFRA_KEEP_PROBING = 416, /* VAR_INFRA_KEEP_PROBING */
VAR_DNS64_PREFIX = 417, /* VAR_DNS64_PREFIX */
VAR_DNS64_SYNTHALL = 418, /* VAR_DNS64_SYNTHALL */
VAR_DNS64_IGNORE_AAAA = 419, /* VAR_DNS64_IGNORE_AAAA */
VAR_DNSTAP = 420, /* VAR_DNSTAP */
VAR_DNSTAP_ENABLE = 421, /* VAR_DNSTAP_ENABLE */
VAR_DNSTAP_SOCKET_PATH = 422, /* VAR_DNSTAP_SOCKET_PATH */
VAR_DNSTAP_IP = 423, /* VAR_DNSTAP_IP */
VAR_DNSTAP_TLS = 424, /* VAR_DNSTAP_TLS */
VAR_DNSTAP_TLS_SERVER_NAME = 425, /* VAR_DNSTAP_TLS_SERVER_NAME */
VAR_DNSTAP_TLS_CERT_BUNDLE = 426, /* VAR_DNSTAP_TLS_CERT_BUNDLE */
VAR_DNSTAP_TLS_CLIENT_KEY_FILE = 427, /* VAR_DNSTAP_TLS_CLIENT_KEY_FILE */
VAR_DNSTAP_TLS_CLIENT_CERT_FILE = 428, /* VAR_DNSTAP_TLS_CLIENT_CERT_FILE */
VAR_DNSTAP_SEND_IDENTITY = 429, /* VAR_DNSTAP_SEND_IDENTITY */
VAR_DNSTAP_SEND_VERSION = 430, /* VAR_DNSTAP_SEND_VERSION */
VAR_DNSTAP_BIDIRECTIONAL = 431, /* VAR_DNSTAP_BIDIRECTIONAL */
VAR_DNSTAP_IDENTITY = 432, /* VAR_DNSTAP_IDENTITY */
VAR_DNSTAP_VERSION = 433, /* VAR_DNSTAP_VERSION */
VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES = 434, /* VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES */
VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES = 435, /* VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES */
VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES = 436, /* VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES */
VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES = 437, /* VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES */
VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES = 438, /* VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES */
VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES = 439, /* VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES */
VAR_RESPONSE_IP_TAG = 440, /* VAR_RESPONSE_IP_TAG */
VAR_RESPONSE_IP = 441, /* VAR_RESPONSE_IP */
VAR_RESPONSE_IP_DATA = 442, /* VAR_RESPONSE_IP_DATA */
VAR_HARDEN_ALGO_DOWNGRADE = 443, /* VAR_HARDEN_ALGO_DOWNGRADE */
VAR_IP_TRANSPARENT = 444, /* VAR_IP_TRANSPARENT */
VAR_IP_DSCP = 445, /* VAR_IP_DSCP */
VAR_DISABLE_DNSSEC_LAME_CHECK = 446, /* VAR_DISABLE_DNSSEC_LAME_CHECK */
VAR_IP_RATELIMIT = 447, /* VAR_IP_RATELIMIT */
VAR_IP_RATELIMIT_SLABS = 448, /* VAR_IP_RATELIMIT_SLABS */
VAR_IP_RATELIMIT_SIZE = 449, /* VAR_IP_RATELIMIT_SIZE */
VAR_RATELIMIT = 450, /* VAR_RATELIMIT */
VAR_RATELIMIT_SLABS = 451, /* VAR_RATELIMIT_SLABS */
VAR_RATELIMIT_SIZE = 452, /* VAR_RATELIMIT_SIZE */
VAR_RATELIMIT_FOR_DOMAIN = 453, /* VAR_RATELIMIT_FOR_DOMAIN */
VAR_RATELIMIT_BELOW_DOMAIN = 454, /* VAR_RATELIMIT_BELOW_DOMAIN */
VAR_IP_RATELIMIT_FACTOR = 455, /* VAR_IP_RATELIMIT_FACTOR */
VAR_RATELIMIT_FACTOR = 456, /* VAR_RATELIMIT_FACTOR */
VAR_SEND_CLIENT_SUBNET = 457, /* VAR_SEND_CLIENT_SUBNET */
VAR_CLIENT_SUBNET_ZONE = 458, /* VAR_CLIENT_SUBNET_ZONE */
VAR_CLIENT_SUBNET_ALWAYS_FORWARD = 459, /* VAR_CLIENT_SUBNET_ALWAYS_FORWARD */
VAR_CLIENT_SUBNET_OPCODE = 460, /* VAR_CLIENT_SUBNET_OPCODE */
VAR_MAX_CLIENT_SUBNET_IPV4 = 461, /* VAR_MAX_CLIENT_SUBNET_IPV4 */
VAR_MAX_CLIENT_SUBNET_IPV6 = 462, /* VAR_MAX_CLIENT_SUBNET_IPV6 */
VAR_MIN_CLIENT_SUBNET_IPV4 = 463, /* VAR_MIN_CLIENT_SUBNET_IPV4 */
VAR_MIN_CLIENT_SUBNET_IPV6 = 464, /* VAR_MIN_CLIENT_SUBNET_IPV6 */
VAR_MAX_ECS_TREE_SIZE_IPV4 = 465, /* VAR_MAX_ECS_TREE_SIZE_IPV4 */
VAR_MAX_ECS_TREE_SIZE_IPV6 = 466, /* VAR_MAX_ECS_TREE_SIZE_IPV6 */
VAR_CAPS_WHITELIST = 467, /* VAR_CAPS_WHITELIST */
VAR_CACHE_MAX_NEGATIVE_TTL = 468, /* VAR_CACHE_MAX_NEGATIVE_TTL */
VAR_PERMIT_SMALL_HOLDDOWN = 469, /* VAR_PERMIT_SMALL_HOLDDOWN */
VAR_QNAME_MINIMISATION = 470, /* VAR_QNAME_MINIMISATION */
VAR_QNAME_MINIMISATION_STRICT = 471, /* VAR_QNAME_MINIMISATION_STRICT */
VAR_IP_FREEBIND = 472, /* VAR_IP_FREEBIND */
VAR_DEFINE_TAG = 473, /* VAR_DEFINE_TAG */
VAR_LOCAL_ZONE_TAG = 474, /* VAR_LOCAL_ZONE_TAG */
VAR_ACCESS_CONTROL_TAG = 475, /* VAR_ACCESS_CONTROL_TAG */
VAR_LOCAL_ZONE_OVERRIDE = 476, /* VAR_LOCAL_ZONE_OVERRIDE */
VAR_ACCESS_CONTROL_TAG_ACTION = 477, /* VAR_ACCESS_CONTROL_TAG_ACTION */
VAR_ACCESS_CONTROL_TAG_DATA = 478, /* VAR_ACCESS_CONTROL_TAG_DATA */
VAR_VIEW = 479, /* VAR_VIEW */
VAR_ACCESS_CONTROL_VIEW = 480, /* VAR_ACCESS_CONTROL_VIEW */
VAR_VIEW_FIRST = 481, /* VAR_VIEW_FIRST */
VAR_SERVE_EXPIRED = 482, /* VAR_SERVE_EXPIRED */
VAR_SERVE_EXPIRED_TTL = 483, /* VAR_SERVE_EXPIRED_TTL */
VAR_SERVE_EXPIRED_TTL_RESET = 484, /* VAR_SERVE_EXPIRED_TTL_RESET */
VAR_SERVE_EXPIRED_REPLY_TTL = 485, /* VAR_SERVE_EXPIRED_REPLY_TTL */
VAR_SERVE_EXPIRED_CLIENT_TIMEOUT = 486, /* VAR_SERVE_EXPIRED_CLIENT_TIMEOUT */
VAR_SERVE_ORIGINAL_TTL = 487, /* VAR_SERVE_ORIGINAL_TTL */
VAR_FAKE_DSA = 488, /* VAR_FAKE_DSA */
VAR_FAKE_SHA1 = 489, /* VAR_FAKE_SHA1 */
VAR_LOG_IDENTITY = 490, /* VAR_LOG_IDENTITY */
VAR_HIDE_TRUSTANCHOR = 491, /* VAR_HIDE_TRUSTANCHOR */
VAR_TRUST_ANCHOR_SIGNALING = 492, /* VAR_TRUST_ANCHOR_SIGNALING */
VAR_AGGRESSIVE_NSEC = 493, /* VAR_AGGRESSIVE_NSEC */
VAR_USE_SYSTEMD = 494, /* VAR_USE_SYSTEMD */
VAR_SHM_ENABLE = 495, /* VAR_SHM_ENABLE */
VAR_SHM_KEY = 496, /* VAR_SHM_KEY */
VAR_ROOT_KEY_SENTINEL = 497, /* VAR_ROOT_KEY_SENTINEL */
VAR_DNSCRYPT = 498, /* VAR_DNSCRYPT */
VAR_DNSCRYPT_ENABLE = 499, /* VAR_DNSCRYPT_ENABLE */
VAR_DNSCRYPT_PORT = 500, /* VAR_DNSCRYPT_PORT */
VAR_DNSCRYPT_PROVIDER = 501, /* VAR_DNSCRYPT_PROVIDER */
VAR_DNSCRYPT_SECRET_KEY = 502, /* VAR_DNSCRYPT_SECRET_KEY */
VAR_DNSCRYPT_PROVIDER_CERT = 503, /* VAR_DNSCRYPT_PROVIDER_CERT */
VAR_DNSCRYPT_PROVIDER_CERT_ROTATED = 504, /* VAR_DNSCRYPT_PROVIDER_CERT_ROTATED */
VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE = 505, /* VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE */
VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS = 506, /* VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS */
VAR_DNSCRYPT_NONCE_CACHE_SIZE = 507, /* VAR_DNSCRYPT_NONCE_CACHE_SIZE */
VAR_DNSCRYPT_NONCE_CACHE_SLABS = 508, /* VAR_DNSCRYPT_NONCE_CACHE_SLABS */
VAR_PAD_RESPONSES = 509, /* VAR_PAD_RESPONSES */
VAR_PAD_RESPONSES_BLOCK_SIZE = 510, /* VAR_PAD_RESPONSES_BLOCK_SIZE */
VAR_PAD_QUERIES = 511, /* VAR_PAD_QUERIES */
VAR_PAD_QUERIES_BLOCK_SIZE = 512, /* VAR_PAD_QUERIES_BLOCK_SIZE */
VAR_IPSECMOD_ENABLED = 513, /* VAR_IPSECMOD_ENABLED */
VAR_IPSECMOD_HOOK = 514, /* VAR_IPSECMOD_HOOK */
VAR_IPSECMOD_IGNORE_BOGUS = 515, /* VAR_IPSECMOD_IGNORE_BOGUS */
VAR_IPSECMOD_MAX_TTL = 516, /* VAR_IPSECMOD_MAX_TTL */
VAR_IPSECMOD_WHITELIST = 517, /* VAR_IPSECMOD_WHITELIST */
VAR_IPSECMOD_STRICT = 518, /* VAR_IPSECMOD_STRICT */
VAR_CACHEDB = 519, /* VAR_CACHEDB */
VAR_CACHEDB_BACKEND = 520, /* VAR_CACHEDB_BACKEND */
VAR_CACHEDB_SECRETSEED = 521, /* VAR_CACHEDB_SECRETSEED */
VAR_CACHEDB_REDISHOST = 522, /* VAR_CACHEDB_REDISHOST */
VAR_CACHEDB_REDISPORT = 523, /* VAR_CACHEDB_REDISPORT */
VAR_CACHEDB_REDISTIMEOUT = 524, /* VAR_CACHEDB_REDISTIMEOUT */
VAR_CACHEDB_REDISEXPIRERECORDS = 525, /* VAR_CACHEDB_REDISEXPIRERECORDS */
VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM = 526, /* VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM */
VAR_FOR_UPSTREAM = 527, /* VAR_FOR_UPSTREAM */
VAR_AUTH_ZONE = 528, /* VAR_AUTH_ZONE */
VAR_ZONEFILE = 529, /* VAR_ZONEFILE */
VAR_MASTER = 530, /* VAR_MASTER */
VAR_URL = 531, /* VAR_URL */
VAR_FOR_DOWNSTREAM = 532, /* VAR_FOR_DOWNSTREAM */
VAR_FALLBACK_ENABLED = 533, /* VAR_FALLBACK_ENABLED */
VAR_TLS_ADDITIONAL_PORT = 534, /* VAR_TLS_ADDITIONAL_PORT */
VAR_LOW_RTT = 535, /* VAR_LOW_RTT */
VAR_LOW_RTT_PERMIL = 536, /* VAR_LOW_RTT_PERMIL */
VAR_FAST_SERVER_PERMIL = 537, /* VAR_FAST_SERVER_PERMIL */
VAR_FAST_SERVER_NUM = 538, /* VAR_FAST_SERVER_NUM */
VAR_ALLOW_NOTIFY = 539, /* VAR_ALLOW_NOTIFY */
VAR_TLS_WIN_CERT = 540, /* VAR_TLS_WIN_CERT */
VAR_TCP_CONNECTION_LIMIT = 541, /* VAR_TCP_CONNECTION_LIMIT */
VAR_FORWARD_NO_CACHE = 542, /* VAR_FORWARD_NO_CACHE */
VAR_STUB_NO_CACHE = 543, /* VAR_STUB_NO_CACHE */
VAR_LOG_SERVFAIL = 544, /* VAR_LOG_SERVFAIL */
VAR_DENY_ANY = 545, /* VAR_DENY_ANY */
VAR_UNKNOWN_SERVER_TIME_LIMIT = 546, /* VAR_UNKNOWN_SERVER_TIME_LIMIT */
VAR_LOG_TAG_QUERYREPLY = 547, /* VAR_LOG_TAG_QUERYREPLY */
VAR_STREAM_WAIT_SIZE = 548, /* VAR_STREAM_WAIT_SIZE */
VAR_TLS_CIPHERS = 549, /* VAR_TLS_CIPHERS */
VAR_TLS_CIPHERSUITES = 550, /* VAR_TLS_CIPHERSUITES */
VAR_TLS_USE_SNI = 551, /* VAR_TLS_USE_SNI */
VAR_IPSET = 552, /* VAR_IPSET */
VAR_IPSET_NAME_V4 = 553, /* VAR_IPSET_NAME_V4 */
VAR_IPSET_NAME_V6 = 554, /* VAR_IPSET_NAME_V6 */
VAR_TLS_SESSION_TICKET_KEYS = 555, /* VAR_TLS_SESSION_TICKET_KEYS */
VAR_RPZ = 556, /* VAR_RPZ */
VAR_TAGS = 557, /* VAR_TAGS */
VAR_RPZ_ACTION_OVERRIDE = 558, /* VAR_RPZ_ACTION_OVERRIDE */
VAR_RPZ_CNAME_OVERRIDE = 559, /* VAR_RPZ_CNAME_OVERRIDE */
VAR_RPZ_LOG = 560, /* VAR_RPZ_LOG */
VAR_RPZ_LOG_NAME = 561, /* VAR_RPZ_LOG_NAME */
VAR_DYNLIB = 562, /* VAR_DYNLIB */
VAR_DYNLIB_FILE = 563, /* VAR_DYNLIB_FILE */
VAR_EDNS_CLIENT_STRING = 564, /* VAR_EDNS_CLIENT_STRING */
VAR_EDNS_CLIENT_STRING_OPCODE = 565, /* VAR_EDNS_CLIENT_STRING_OPCODE */
VAR_NSID = 566, /* VAR_NSID */
VAR_ZONEMD_PERMISSIVE_MODE = 567, /* VAR_ZONEMD_PERMISSIVE_MODE */
VAR_ZONEMD_CHECK = 568, /* VAR_ZONEMD_CHECK */
VAR_ZONEMD_REJECT_ABSENCE = 569 /* VAR_ZONEMD_REJECT_ABSENCE */
VAR_VAL_MAX_RESTART = 373, /* VAR_VAL_MAX_RESTART */
VAR_CACHE_MIN_TTL = 374, /* VAR_CACHE_MIN_TTL */
VAR_VAL_LOG_LEVEL = 375, /* VAR_VAL_LOG_LEVEL */
VAR_AUTO_TRUST_ANCHOR_FILE = 376, /* VAR_AUTO_TRUST_ANCHOR_FILE */
VAR_KEEP_MISSING = 377, /* VAR_KEEP_MISSING */
VAR_ADD_HOLDDOWN = 378, /* VAR_ADD_HOLDDOWN */
VAR_DEL_HOLDDOWN = 379, /* VAR_DEL_HOLDDOWN */
VAR_SO_RCVBUF = 380, /* VAR_SO_RCVBUF */
VAR_EDNS_BUFFER_SIZE = 381, /* VAR_EDNS_BUFFER_SIZE */
VAR_PREFETCH = 382, /* VAR_PREFETCH */
VAR_PREFETCH_KEY = 383, /* VAR_PREFETCH_KEY */
VAR_SO_SNDBUF = 384, /* VAR_SO_SNDBUF */
VAR_SO_REUSEPORT = 385, /* VAR_SO_REUSEPORT */
VAR_HARDEN_BELOW_NXDOMAIN = 386, /* VAR_HARDEN_BELOW_NXDOMAIN */
VAR_IGNORE_CD_FLAG = 387, /* VAR_IGNORE_CD_FLAG */
VAR_LOG_QUERIES = 388, /* VAR_LOG_QUERIES */
VAR_LOG_REPLIES = 389, /* VAR_LOG_REPLIES */
VAR_LOG_LOCAL_ACTIONS = 390, /* VAR_LOG_LOCAL_ACTIONS */
VAR_TCP_UPSTREAM = 391, /* VAR_TCP_UPSTREAM */
VAR_SSL_UPSTREAM = 392, /* VAR_SSL_UPSTREAM */
VAR_TCP_AUTH_QUERY_TIMEOUT = 393, /* VAR_TCP_AUTH_QUERY_TIMEOUT */
VAR_SSL_SERVICE_KEY = 394, /* VAR_SSL_SERVICE_KEY */
VAR_SSL_SERVICE_PEM = 395, /* VAR_SSL_SERVICE_PEM */
VAR_SSL_PORT = 396, /* VAR_SSL_PORT */
VAR_FORWARD_FIRST = 397, /* VAR_FORWARD_FIRST */
VAR_STUB_SSL_UPSTREAM = 398, /* VAR_STUB_SSL_UPSTREAM */
VAR_FORWARD_SSL_UPSTREAM = 399, /* VAR_FORWARD_SSL_UPSTREAM */
VAR_TLS_CERT_BUNDLE = 400, /* VAR_TLS_CERT_BUNDLE */
VAR_HTTPS_PORT = 401, /* VAR_HTTPS_PORT */
VAR_HTTP_ENDPOINT = 402, /* VAR_HTTP_ENDPOINT */
VAR_HTTP_MAX_STREAMS = 403, /* VAR_HTTP_MAX_STREAMS */
VAR_HTTP_QUERY_BUFFER_SIZE = 404, /* VAR_HTTP_QUERY_BUFFER_SIZE */
VAR_HTTP_RESPONSE_BUFFER_SIZE = 405, /* VAR_HTTP_RESPONSE_BUFFER_SIZE */
VAR_HTTP_NODELAY = 406, /* VAR_HTTP_NODELAY */
VAR_HTTP_NOTLS_DOWNSTREAM = 407, /* VAR_HTTP_NOTLS_DOWNSTREAM */
VAR_STUB_FIRST = 408, /* VAR_STUB_FIRST */
VAR_MINIMAL_RESPONSES = 409, /* VAR_MINIMAL_RESPONSES */
VAR_RRSET_ROUNDROBIN = 410, /* VAR_RRSET_ROUNDROBIN */
VAR_MAX_UDP_SIZE = 411, /* VAR_MAX_UDP_SIZE */
VAR_DELAY_CLOSE = 412, /* VAR_DELAY_CLOSE */
VAR_UDP_CONNECT = 413, /* VAR_UDP_CONNECT */
VAR_UNBLOCK_LAN_ZONES = 414, /* VAR_UNBLOCK_LAN_ZONES */
VAR_INSECURE_LAN_ZONES = 415, /* VAR_INSECURE_LAN_ZONES */
VAR_INFRA_CACHE_MIN_RTT = 416, /* VAR_INFRA_CACHE_MIN_RTT */
VAR_INFRA_KEEP_PROBING = 417, /* VAR_INFRA_KEEP_PROBING */
VAR_DNS64_PREFIX = 418, /* VAR_DNS64_PREFIX */
VAR_DNS64_SYNTHALL = 419, /* VAR_DNS64_SYNTHALL */
VAR_DNS64_IGNORE_AAAA = 420, /* VAR_DNS64_IGNORE_AAAA */
VAR_DNSTAP = 421, /* VAR_DNSTAP */
VAR_DNSTAP_ENABLE = 422, /* VAR_DNSTAP_ENABLE */
VAR_DNSTAP_SOCKET_PATH = 423, /* VAR_DNSTAP_SOCKET_PATH */
VAR_DNSTAP_IP = 424, /* VAR_DNSTAP_IP */
VAR_DNSTAP_TLS = 425, /* VAR_DNSTAP_TLS */
VAR_DNSTAP_TLS_SERVER_NAME = 426, /* VAR_DNSTAP_TLS_SERVER_NAME */
VAR_DNSTAP_TLS_CERT_BUNDLE = 427, /* VAR_DNSTAP_TLS_CERT_BUNDLE */
VAR_DNSTAP_TLS_CLIENT_KEY_FILE = 428, /* VAR_DNSTAP_TLS_CLIENT_KEY_FILE */
VAR_DNSTAP_TLS_CLIENT_CERT_FILE = 429, /* VAR_DNSTAP_TLS_CLIENT_CERT_FILE */
VAR_DNSTAP_SEND_IDENTITY = 430, /* VAR_DNSTAP_SEND_IDENTITY */
VAR_DNSTAP_SEND_VERSION = 431, /* VAR_DNSTAP_SEND_VERSION */
VAR_DNSTAP_BIDIRECTIONAL = 432, /* VAR_DNSTAP_BIDIRECTIONAL */
VAR_DNSTAP_IDENTITY = 433, /* VAR_DNSTAP_IDENTITY */
VAR_DNSTAP_VERSION = 434, /* VAR_DNSTAP_VERSION */
VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES = 435, /* VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES */
VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES = 436, /* VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES */
VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES = 437, /* VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES */
VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES = 438, /* VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES */
VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES = 439, /* VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES */
VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES = 440, /* VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES */
VAR_RESPONSE_IP_TAG = 441, /* VAR_RESPONSE_IP_TAG */
VAR_RESPONSE_IP = 442, /* VAR_RESPONSE_IP */
VAR_RESPONSE_IP_DATA = 443, /* VAR_RESPONSE_IP_DATA */
VAR_HARDEN_ALGO_DOWNGRADE = 444, /* VAR_HARDEN_ALGO_DOWNGRADE */
VAR_IP_TRANSPARENT = 445, /* VAR_IP_TRANSPARENT */
VAR_IP_DSCP = 446, /* VAR_IP_DSCP */
VAR_DISABLE_DNSSEC_LAME_CHECK = 447, /* VAR_DISABLE_DNSSEC_LAME_CHECK */
VAR_IP_RATELIMIT = 448, /* VAR_IP_RATELIMIT */
VAR_IP_RATELIMIT_SLABS = 449, /* VAR_IP_RATELIMIT_SLABS */
VAR_IP_RATELIMIT_SIZE = 450, /* VAR_IP_RATELIMIT_SIZE */
VAR_RATELIMIT = 451, /* VAR_RATELIMIT */
VAR_RATELIMIT_SLABS = 452, /* VAR_RATELIMIT_SLABS */
VAR_RATELIMIT_SIZE = 453, /* VAR_RATELIMIT_SIZE */
VAR_RATELIMIT_FOR_DOMAIN = 454, /* VAR_RATELIMIT_FOR_DOMAIN */
VAR_RATELIMIT_BELOW_DOMAIN = 455, /* VAR_RATELIMIT_BELOW_DOMAIN */
VAR_IP_RATELIMIT_FACTOR = 456, /* VAR_IP_RATELIMIT_FACTOR */
VAR_RATELIMIT_FACTOR = 457, /* VAR_RATELIMIT_FACTOR */
VAR_SEND_CLIENT_SUBNET = 458, /* VAR_SEND_CLIENT_SUBNET */
VAR_CLIENT_SUBNET_ZONE = 459, /* VAR_CLIENT_SUBNET_ZONE */
VAR_CLIENT_SUBNET_ALWAYS_FORWARD = 460, /* VAR_CLIENT_SUBNET_ALWAYS_FORWARD */
VAR_CLIENT_SUBNET_OPCODE = 461, /* VAR_CLIENT_SUBNET_OPCODE */
VAR_MAX_CLIENT_SUBNET_IPV4 = 462, /* VAR_MAX_CLIENT_SUBNET_IPV4 */
VAR_MAX_CLIENT_SUBNET_IPV6 = 463, /* VAR_MAX_CLIENT_SUBNET_IPV6 */
VAR_MIN_CLIENT_SUBNET_IPV4 = 464, /* VAR_MIN_CLIENT_SUBNET_IPV4 */
VAR_MIN_CLIENT_SUBNET_IPV6 = 465, /* VAR_MIN_CLIENT_SUBNET_IPV6 */
VAR_MAX_ECS_TREE_SIZE_IPV4 = 466, /* VAR_MAX_ECS_TREE_SIZE_IPV4 */
VAR_MAX_ECS_TREE_SIZE_IPV6 = 467, /* VAR_MAX_ECS_TREE_SIZE_IPV6 */
VAR_CAPS_WHITELIST = 468, /* VAR_CAPS_WHITELIST */
VAR_CACHE_MAX_NEGATIVE_TTL = 469, /* VAR_CACHE_MAX_NEGATIVE_TTL */
VAR_PERMIT_SMALL_HOLDDOWN = 470, /* VAR_PERMIT_SMALL_HOLDDOWN */
VAR_QNAME_MINIMISATION = 471, /* VAR_QNAME_MINIMISATION */
VAR_QNAME_MINIMISATION_STRICT = 472, /* VAR_QNAME_MINIMISATION_STRICT */
VAR_IP_FREEBIND = 473, /* VAR_IP_FREEBIND */
VAR_DEFINE_TAG = 474, /* VAR_DEFINE_TAG */
VAR_LOCAL_ZONE_TAG = 475, /* VAR_LOCAL_ZONE_TAG */
VAR_ACCESS_CONTROL_TAG = 476, /* VAR_ACCESS_CONTROL_TAG */
VAR_LOCAL_ZONE_OVERRIDE = 477, /* VAR_LOCAL_ZONE_OVERRIDE */
VAR_ACCESS_CONTROL_TAG_ACTION = 478, /* VAR_ACCESS_CONTROL_TAG_ACTION */
VAR_ACCESS_CONTROL_TAG_DATA = 479, /* VAR_ACCESS_CONTROL_TAG_DATA */
VAR_VIEW = 480, /* VAR_VIEW */
VAR_ACCESS_CONTROL_VIEW = 481, /* VAR_ACCESS_CONTROL_VIEW */
VAR_VIEW_FIRST = 482, /* VAR_VIEW_FIRST */
VAR_SERVE_EXPIRED = 483, /* VAR_SERVE_EXPIRED */
VAR_SERVE_EXPIRED_TTL = 484, /* VAR_SERVE_EXPIRED_TTL */
VAR_SERVE_EXPIRED_TTL_RESET = 485, /* VAR_SERVE_EXPIRED_TTL_RESET */
VAR_SERVE_EXPIRED_REPLY_TTL = 486, /* VAR_SERVE_EXPIRED_REPLY_TTL */
VAR_SERVE_EXPIRED_CLIENT_TIMEOUT = 487, /* VAR_SERVE_EXPIRED_CLIENT_TIMEOUT */
VAR_SERVE_ORIGINAL_TTL = 488, /* VAR_SERVE_ORIGINAL_TTL */
VAR_FAKE_DSA = 489, /* VAR_FAKE_DSA */
VAR_FAKE_SHA1 = 490, /* VAR_FAKE_SHA1 */
VAR_LOG_IDENTITY = 491, /* VAR_LOG_IDENTITY */
VAR_HIDE_TRUSTANCHOR = 492, /* VAR_HIDE_TRUSTANCHOR */
VAR_TRUST_ANCHOR_SIGNALING = 493, /* VAR_TRUST_ANCHOR_SIGNALING */
VAR_AGGRESSIVE_NSEC = 494, /* VAR_AGGRESSIVE_NSEC */
VAR_USE_SYSTEMD = 495, /* VAR_USE_SYSTEMD */
VAR_SHM_ENABLE = 496, /* VAR_SHM_ENABLE */
VAR_SHM_KEY = 497, /* VAR_SHM_KEY */
VAR_ROOT_KEY_SENTINEL = 498, /* VAR_ROOT_KEY_SENTINEL */
VAR_DNSCRYPT = 499, /* VAR_DNSCRYPT */
VAR_DNSCRYPT_ENABLE = 500, /* VAR_DNSCRYPT_ENABLE */
VAR_DNSCRYPT_PORT = 501, /* VAR_DNSCRYPT_PORT */
VAR_DNSCRYPT_PROVIDER = 502, /* VAR_DNSCRYPT_PROVIDER */
VAR_DNSCRYPT_SECRET_KEY = 503, /* VAR_DNSCRYPT_SECRET_KEY */
VAR_DNSCRYPT_PROVIDER_CERT = 504, /* VAR_DNSCRYPT_PROVIDER_CERT */
VAR_DNSCRYPT_PROVIDER_CERT_ROTATED = 505, /* VAR_DNSCRYPT_PROVIDER_CERT_ROTATED */
VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE = 506, /* VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE */
VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS = 507, /* VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS */
VAR_DNSCRYPT_NONCE_CACHE_SIZE = 508, /* VAR_DNSCRYPT_NONCE_CACHE_SIZE */
VAR_DNSCRYPT_NONCE_CACHE_SLABS = 509, /* VAR_DNSCRYPT_NONCE_CACHE_SLABS */
VAR_PAD_RESPONSES = 510, /* VAR_PAD_RESPONSES */
VAR_PAD_RESPONSES_BLOCK_SIZE = 511, /* VAR_PAD_RESPONSES_BLOCK_SIZE */
VAR_PAD_QUERIES = 512, /* VAR_PAD_QUERIES */
VAR_PAD_QUERIES_BLOCK_SIZE = 513, /* VAR_PAD_QUERIES_BLOCK_SIZE */
VAR_IPSECMOD_ENABLED = 514, /* VAR_IPSECMOD_ENABLED */
VAR_IPSECMOD_HOOK = 515, /* VAR_IPSECMOD_HOOK */
VAR_IPSECMOD_IGNORE_BOGUS = 516, /* VAR_IPSECMOD_IGNORE_BOGUS */
VAR_IPSECMOD_MAX_TTL = 517, /* VAR_IPSECMOD_MAX_TTL */
VAR_IPSECMOD_WHITELIST = 518, /* VAR_IPSECMOD_WHITELIST */
VAR_IPSECMOD_STRICT = 519, /* VAR_IPSECMOD_STRICT */
VAR_CACHEDB = 520, /* VAR_CACHEDB */
VAR_CACHEDB_BACKEND = 521, /* VAR_CACHEDB_BACKEND */
VAR_CACHEDB_SECRETSEED = 522, /* VAR_CACHEDB_SECRETSEED */
VAR_CACHEDB_REDISHOST = 523, /* VAR_CACHEDB_REDISHOST */
VAR_CACHEDB_REDISPORT = 524, /* VAR_CACHEDB_REDISPORT */
VAR_CACHEDB_REDISTIMEOUT = 525, /* VAR_CACHEDB_REDISTIMEOUT */
VAR_CACHEDB_REDISEXPIRERECORDS = 526, /* VAR_CACHEDB_REDISEXPIRERECORDS */
VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM = 527, /* VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM */
VAR_FOR_UPSTREAM = 528, /* VAR_FOR_UPSTREAM */
VAR_AUTH_ZONE = 529, /* VAR_AUTH_ZONE */
VAR_ZONEFILE = 530, /* VAR_ZONEFILE */
VAR_MASTER = 531, /* VAR_MASTER */
VAR_URL = 532, /* VAR_URL */
VAR_FOR_DOWNSTREAM = 533, /* VAR_FOR_DOWNSTREAM */
VAR_FALLBACK_ENABLED = 534, /* VAR_FALLBACK_ENABLED */
VAR_TLS_ADDITIONAL_PORT = 535, /* VAR_TLS_ADDITIONAL_PORT */
VAR_LOW_RTT = 536, /* VAR_LOW_RTT */
VAR_LOW_RTT_PERMIL = 537, /* VAR_LOW_RTT_PERMIL */
VAR_FAST_SERVER_PERMIL = 538, /* VAR_FAST_SERVER_PERMIL */
VAR_FAST_SERVER_NUM = 539, /* VAR_FAST_SERVER_NUM */
VAR_ALLOW_NOTIFY = 540, /* VAR_ALLOW_NOTIFY */
VAR_TLS_WIN_CERT = 541, /* VAR_TLS_WIN_CERT */
VAR_TCP_CONNECTION_LIMIT = 542, /* VAR_TCP_CONNECTION_LIMIT */
VAR_FORWARD_NO_CACHE = 543, /* VAR_FORWARD_NO_CACHE */
VAR_STUB_NO_CACHE = 544, /* VAR_STUB_NO_CACHE */
VAR_LOG_SERVFAIL = 545, /* VAR_LOG_SERVFAIL */
VAR_DENY_ANY = 546, /* VAR_DENY_ANY */
VAR_UNKNOWN_SERVER_TIME_LIMIT = 547, /* VAR_UNKNOWN_SERVER_TIME_LIMIT */
VAR_LOG_TAG_QUERYREPLY = 548, /* VAR_LOG_TAG_QUERYREPLY */
VAR_STREAM_WAIT_SIZE = 549, /* VAR_STREAM_WAIT_SIZE */
VAR_TLS_CIPHERS = 550, /* VAR_TLS_CIPHERS */
VAR_TLS_CIPHERSUITES = 551, /* VAR_TLS_CIPHERSUITES */
VAR_TLS_USE_SNI = 552, /* VAR_TLS_USE_SNI */
VAR_IPSET = 553, /* VAR_IPSET */
VAR_IPSET_NAME_V4 = 554, /* VAR_IPSET_NAME_V4 */
VAR_IPSET_NAME_V6 = 555, /* VAR_IPSET_NAME_V6 */
VAR_TLS_SESSION_TICKET_KEYS = 556, /* VAR_TLS_SESSION_TICKET_KEYS */
VAR_RPZ = 557, /* VAR_RPZ */
VAR_TAGS = 558, /* VAR_TAGS */
VAR_RPZ_ACTION_OVERRIDE = 559, /* VAR_RPZ_ACTION_OVERRIDE */
VAR_RPZ_CNAME_OVERRIDE = 560, /* VAR_RPZ_CNAME_OVERRIDE */
VAR_RPZ_LOG = 561, /* VAR_RPZ_LOG */
VAR_RPZ_LOG_NAME = 562, /* VAR_RPZ_LOG_NAME */
VAR_DYNLIB = 563, /* VAR_DYNLIB */
VAR_DYNLIB_FILE = 564, /* VAR_DYNLIB_FILE */
VAR_EDNS_CLIENT_STRING = 565, /* VAR_EDNS_CLIENT_STRING */
VAR_EDNS_CLIENT_STRING_OPCODE = 566, /* VAR_EDNS_CLIENT_STRING_OPCODE */
VAR_NSID = 567, /* VAR_NSID */
VAR_ZONEMD_PERMISSIVE_MODE = 568, /* VAR_ZONEMD_PERMISSIVE_MODE */
VAR_ZONEMD_CHECK = 569, /* VAR_ZONEMD_CHECK */
VAR_ZONEMD_REJECT_ABSENCE = 570 /* VAR_ZONEMD_REJECT_ABSENCE */
};
typedef enum yytokentype yytoken_kind_t;
#endif
/* Token kinds. */
#define YYEMPTY -2
#define YYEOF 0
#define YYerror 256
#define YYUNDEF 257
@ -488,203 +490,204 @@ extern int yydebug;
#define VAR_PYTHON_SCRIPT 370
#define VAR_VAL_SIG_SKEW_MIN 371
#define VAR_VAL_SIG_SKEW_MAX 372
#define VAR_CACHE_MIN_TTL 373
#define VAR_VAL_LOG_LEVEL 374
#define VAR_AUTO_TRUST_ANCHOR_FILE 375
#define VAR_KEEP_MISSING 376
#define VAR_ADD_HOLDDOWN 377
#define VAR_DEL_HOLDDOWN 378
#define VAR_SO_RCVBUF 379
#define VAR_EDNS_BUFFER_SIZE 380
#define VAR_PREFETCH 381
#define VAR_PREFETCH_KEY 382
#define VAR_SO_SNDBUF 383
#define VAR_SO_REUSEPORT 384
#define VAR_HARDEN_BELOW_NXDOMAIN 385
#define VAR_IGNORE_CD_FLAG 386
#define VAR_LOG_QUERIES 387
#define VAR_LOG_REPLIES 388
#define VAR_LOG_LOCAL_ACTIONS 389
#define VAR_TCP_UPSTREAM 390
#define VAR_SSL_UPSTREAM 391
#define VAR_TCP_AUTH_QUERY_TIMEOUT 392
#define VAR_SSL_SERVICE_KEY 393
#define VAR_SSL_SERVICE_PEM 394
#define VAR_SSL_PORT 395
#define VAR_FORWARD_FIRST 396
#define VAR_STUB_SSL_UPSTREAM 397
#define VAR_FORWARD_SSL_UPSTREAM 398
#define VAR_TLS_CERT_BUNDLE 399
#define VAR_HTTPS_PORT 400
#define VAR_HTTP_ENDPOINT 401
#define VAR_HTTP_MAX_STREAMS 402
#define VAR_HTTP_QUERY_BUFFER_SIZE 403
#define VAR_HTTP_RESPONSE_BUFFER_SIZE 404
#define VAR_HTTP_NODELAY 405
#define VAR_HTTP_NOTLS_DOWNSTREAM 406
#define VAR_STUB_FIRST 407
#define VAR_MINIMAL_RESPONSES 408
#define VAR_RRSET_ROUNDROBIN 409
#define VAR_MAX_UDP_SIZE 410
#define VAR_DELAY_CLOSE 411
#define VAR_UDP_CONNECT 412
#define VAR_UNBLOCK_LAN_ZONES 413
#define VAR_INSECURE_LAN_ZONES 414
#define VAR_INFRA_CACHE_MIN_RTT 415
#define VAR_INFRA_KEEP_PROBING 416
#define VAR_DNS64_PREFIX 417
#define VAR_DNS64_SYNTHALL 418
#define VAR_DNS64_IGNORE_AAAA 419
#define VAR_DNSTAP 420
#define VAR_DNSTAP_ENABLE 421
#define VAR_DNSTAP_SOCKET_PATH 422
#define VAR_DNSTAP_IP 423
#define VAR_DNSTAP_TLS 424
#define VAR_DNSTAP_TLS_SERVER_NAME 425
#define VAR_DNSTAP_TLS_CERT_BUNDLE 426
#define VAR_DNSTAP_TLS_CLIENT_KEY_FILE 427
#define VAR_DNSTAP_TLS_CLIENT_CERT_FILE 428
#define VAR_DNSTAP_SEND_IDENTITY 429
#define VAR_DNSTAP_SEND_VERSION 430
#define VAR_DNSTAP_BIDIRECTIONAL 431
#define VAR_DNSTAP_IDENTITY 432
#define VAR_DNSTAP_VERSION 433
#define VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES 434
#define VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES 435
#define VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES 436
#define VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES 437
#define VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES 438
#define VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES 439
#define VAR_RESPONSE_IP_TAG 440
#define VAR_RESPONSE_IP 441
#define VAR_RESPONSE_IP_DATA 442
#define VAR_HARDEN_ALGO_DOWNGRADE 443
#define VAR_IP_TRANSPARENT 444
#define VAR_IP_DSCP 445
#define VAR_DISABLE_DNSSEC_LAME_CHECK 446
#define VAR_IP_RATELIMIT 447
#define VAR_IP_RATELIMIT_SLABS 448
#define VAR_IP_RATELIMIT_SIZE 449
#define VAR_RATELIMIT 450
#define VAR_RATELIMIT_SLABS 451
#define VAR_RATELIMIT_SIZE 452
#define VAR_RATELIMIT_FOR_DOMAIN 453
#define VAR_RATELIMIT_BELOW_DOMAIN 454
#define VAR_IP_RATELIMIT_FACTOR 455
#define VAR_RATELIMIT_FACTOR 456
#define VAR_SEND_CLIENT_SUBNET 457
#define VAR_CLIENT_SUBNET_ZONE 458
#define VAR_CLIENT_SUBNET_ALWAYS_FORWARD 459
#define VAR_CLIENT_SUBNET_OPCODE 460
#define VAR_MAX_CLIENT_SUBNET_IPV4 461
#define VAR_MAX_CLIENT_SUBNET_IPV6 462
#define VAR_MIN_CLIENT_SUBNET_IPV4 463
#define VAR_MIN_CLIENT_SUBNET_IPV6 464
#define VAR_MAX_ECS_TREE_SIZE_IPV4 465
#define VAR_MAX_ECS_TREE_SIZE_IPV6 466
#define VAR_CAPS_WHITELIST 467
#define VAR_CACHE_MAX_NEGATIVE_TTL 468
#define VAR_PERMIT_SMALL_HOLDDOWN 469
#define VAR_QNAME_MINIMISATION 470
#define VAR_QNAME_MINIMISATION_STRICT 471
#define VAR_IP_FREEBIND 472
#define VAR_DEFINE_TAG 473
#define VAR_LOCAL_ZONE_TAG 474
#define VAR_ACCESS_CONTROL_TAG 475
#define VAR_LOCAL_ZONE_OVERRIDE 476
#define VAR_ACCESS_CONTROL_TAG_ACTION 477
#define VAR_ACCESS_CONTROL_TAG_DATA 478
#define VAR_VIEW 479
#define VAR_ACCESS_CONTROL_VIEW 480
#define VAR_VIEW_FIRST 481
#define VAR_SERVE_EXPIRED 482
#define VAR_SERVE_EXPIRED_TTL 483
#define VAR_SERVE_EXPIRED_TTL_RESET 484
#define VAR_SERVE_EXPIRED_REPLY_TTL 485
#define VAR_SERVE_EXPIRED_CLIENT_TIMEOUT 486
#define VAR_SERVE_ORIGINAL_TTL 487
#define VAR_FAKE_DSA 488
#define VAR_FAKE_SHA1 489
#define VAR_LOG_IDENTITY 490
#define VAR_HIDE_TRUSTANCHOR 491
#define VAR_TRUST_ANCHOR_SIGNALING 492
#define VAR_AGGRESSIVE_NSEC 493
#define VAR_USE_SYSTEMD 494
#define VAR_SHM_ENABLE 495
#define VAR_SHM_KEY 496
#define VAR_ROOT_KEY_SENTINEL 497
#define VAR_DNSCRYPT 498
#define VAR_DNSCRYPT_ENABLE 499
#define VAR_DNSCRYPT_PORT 500
#define VAR_DNSCRYPT_PROVIDER 501
#define VAR_DNSCRYPT_SECRET_KEY 502
#define VAR_DNSCRYPT_PROVIDER_CERT 503
#define VAR_DNSCRYPT_PROVIDER_CERT_ROTATED 504
#define VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE 505
#define VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS 506
#define VAR_DNSCRYPT_NONCE_CACHE_SIZE 507
#define VAR_DNSCRYPT_NONCE_CACHE_SLABS 508
#define VAR_PAD_RESPONSES 509
#define VAR_PAD_RESPONSES_BLOCK_SIZE 510
#define VAR_PAD_QUERIES 511
#define VAR_PAD_QUERIES_BLOCK_SIZE 512
#define VAR_IPSECMOD_ENABLED 513
#define VAR_IPSECMOD_HOOK 514
#define VAR_IPSECMOD_IGNORE_BOGUS 515
#define VAR_IPSECMOD_MAX_TTL 516
#define VAR_IPSECMOD_WHITELIST 517
#define VAR_IPSECMOD_STRICT 518
#define VAR_CACHEDB 519
#define VAR_CACHEDB_BACKEND 520
#define VAR_CACHEDB_SECRETSEED 521
#define VAR_CACHEDB_REDISHOST 522
#define VAR_CACHEDB_REDISPORT 523
#define VAR_CACHEDB_REDISTIMEOUT 524
#define VAR_CACHEDB_REDISEXPIRERECORDS 525
#define VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM 526
#define VAR_FOR_UPSTREAM 527
#define VAR_AUTH_ZONE 528
#define VAR_ZONEFILE 529
#define VAR_MASTER 530
#define VAR_URL 531
#define VAR_FOR_DOWNSTREAM 532
#define VAR_FALLBACK_ENABLED 533
#define VAR_TLS_ADDITIONAL_PORT 534
#define VAR_LOW_RTT 535
#define VAR_LOW_RTT_PERMIL 536
#define VAR_FAST_SERVER_PERMIL 537
#define VAR_FAST_SERVER_NUM 538
#define VAR_ALLOW_NOTIFY 539
#define VAR_TLS_WIN_CERT 540
#define VAR_TCP_CONNECTION_LIMIT 541
#define VAR_FORWARD_NO_CACHE 542
#define VAR_STUB_NO_CACHE 543
#define VAR_LOG_SERVFAIL 544
#define VAR_DENY_ANY 545
#define VAR_UNKNOWN_SERVER_TIME_LIMIT 546
#define VAR_LOG_TAG_QUERYREPLY 547
#define VAR_STREAM_WAIT_SIZE 548
#define VAR_TLS_CIPHERS 549
#define VAR_TLS_CIPHERSUITES 550
#define VAR_TLS_USE_SNI 551
#define VAR_IPSET 552
#define VAR_IPSET_NAME_V4 553
#define VAR_IPSET_NAME_V6 554
#define VAR_TLS_SESSION_TICKET_KEYS 555
#define VAR_RPZ 556
#define VAR_TAGS 557
#define VAR_RPZ_ACTION_OVERRIDE 558
#define VAR_RPZ_CNAME_OVERRIDE 559
#define VAR_RPZ_LOG 560
#define VAR_RPZ_LOG_NAME 561
#define VAR_DYNLIB 562
#define VAR_DYNLIB_FILE 563
#define VAR_EDNS_CLIENT_STRING 564
#define VAR_EDNS_CLIENT_STRING_OPCODE 565
#define VAR_NSID 566
#define VAR_ZONEMD_PERMISSIVE_MODE 567
#define VAR_ZONEMD_CHECK 568
#define VAR_ZONEMD_REJECT_ABSENCE 569
#define VAR_VAL_MAX_RESTART 373
#define VAR_CACHE_MIN_TTL 374
#define VAR_VAL_LOG_LEVEL 375
#define VAR_AUTO_TRUST_ANCHOR_FILE 376
#define VAR_KEEP_MISSING 377
#define VAR_ADD_HOLDDOWN 378
#define VAR_DEL_HOLDDOWN 379
#define VAR_SO_RCVBUF 380
#define VAR_EDNS_BUFFER_SIZE 381
#define VAR_PREFETCH 382
#define VAR_PREFETCH_KEY 383
#define VAR_SO_SNDBUF 384
#define VAR_SO_REUSEPORT 385
#define VAR_HARDEN_BELOW_NXDOMAIN 386
#define VAR_IGNORE_CD_FLAG 387
#define VAR_LOG_QUERIES 388
#define VAR_LOG_REPLIES 389
#define VAR_LOG_LOCAL_ACTIONS 390
#define VAR_TCP_UPSTREAM 391
#define VAR_SSL_UPSTREAM 392
#define VAR_TCP_AUTH_QUERY_TIMEOUT 393
#define VAR_SSL_SERVICE_KEY 394
#define VAR_SSL_SERVICE_PEM 395
#define VAR_SSL_PORT 396
#define VAR_FORWARD_FIRST 397
#define VAR_STUB_SSL_UPSTREAM 398
#define VAR_FORWARD_SSL_UPSTREAM 399
#define VAR_TLS_CERT_BUNDLE 400
#define VAR_HTTPS_PORT 401
#define VAR_HTTP_ENDPOINT 402
#define VAR_HTTP_MAX_STREAMS 403
#define VAR_HTTP_QUERY_BUFFER_SIZE 404
#define VAR_HTTP_RESPONSE_BUFFER_SIZE 405
#define VAR_HTTP_NODELAY 406
#define VAR_HTTP_NOTLS_DOWNSTREAM 407
#define VAR_STUB_FIRST 408
#define VAR_MINIMAL_RESPONSES 409
#define VAR_RRSET_ROUNDROBIN 410
#define VAR_MAX_UDP_SIZE 411
#define VAR_DELAY_CLOSE 412
#define VAR_UDP_CONNECT 413
#define VAR_UNBLOCK_LAN_ZONES 414
#define VAR_INSECURE_LAN_ZONES 415
#define VAR_INFRA_CACHE_MIN_RTT 416
#define VAR_INFRA_KEEP_PROBING 417
#define VAR_DNS64_PREFIX 418
#define VAR_DNS64_SYNTHALL 419
#define VAR_DNS64_IGNORE_AAAA 420
#define VAR_DNSTAP 421
#define VAR_DNSTAP_ENABLE 422
#define VAR_DNSTAP_SOCKET_PATH 423
#define VAR_DNSTAP_IP 424
#define VAR_DNSTAP_TLS 425
#define VAR_DNSTAP_TLS_SERVER_NAME 426
#define VAR_DNSTAP_TLS_CERT_BUNDLE 427
#define VAR_DNSTAP_TLS_CLIENT_KEY_FILE 428
#define VAR_DNSTAP_TLS_CLIENT_CERT_FILE 429
#define VAR_DNSTAP_SEND_IDENTITY 430
#define VAR_DNSTAP_SEND_VERSION 431
#define VAR_DNSTAP_BIDIRECTIONAL 432
#define VAR_DNSTAP_IDENTITY 433
#define VAR_DNSTAP_VERSION 434
#define VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES 435
#define VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES 436
#define VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES 437
#define VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES 438
#define VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES 439
#define VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES 440
#define VAR_RESPONSE_IP_TAG 441
#define VAR_RESPONSE_IP 442
#define VAR_RESPONSE_IP_DATA 443
#define VAR_HARDEN_ALGO_DOWNGRADE 444
#define VAR_IP_TRANSPARENT 445
#define VAR_IP_DSCP 446
#define VAR_DISABLE_DNSSEC_LAME_CHECK 447
#define VAR_IP_RATELIMIT 448
#define VAR_IP_RATELIMIT_SLABS 449
#define VAR_IP_RATELIMIT_SIZE 450
#define VAR_RATELIMIT 451
#define VAR_RATELIMIT_SLABS 452
#define VAR_RATELIMIT_SIZE 453
#define VAR_RATELIMIT_FOR_DOMAIN 454
#define VAR_RATELIMIT_BELOW_DOMAIN 455
#define VAR_IP_RATELIMIT_FACTOR 456
#define VAR_RATELIMIT_FACTOR 457
#define VAR_SEND_CLIENT_SUBNET 458
#define VAR_CLIENT_SUBNET_ZONE 459
#define VAR_CLIENT_SUBNET_ALWAYS_FORWARD 460
#define VAR_CLIENT_SUBNET_OPCODE 461
#define VAR_MAX_CLIENT_SUBNET_IPV4 462
#define VAR_MAX_CLIENT_SUBNET_IPV6 463
#define VAR_MIN_CLIENT_SUBNET_IPV4 464
#define VAR_MIN_CLIENT_SUBNET_IPV6 465
#define VAR_MAX_ECS_TREE_SIZE_IPV4 466
#define VAR_MAX_ECS_TREE_SIZE_IPV6 467
#define VAR_CAPS_WHITELIST 468
#define VAR_CACHE_MAX_NEGATIVE_TTL 469
#define VAR_PERMIT_SMALL_HOLDDOWN 470
#define VAR_QNAME_MINIMISATION 471
#define VAR_QNAME_MINIMISATION_STRICT 472
#define VAR_IP_FREEBIND 473
#define VAR_DEFINE_TAG 474
#define VAR_LOCAL_ZONE_TAG 475
#define VAR_ACCESS_CONTROL_TAG 476
#define VAR_LOCAL_ZONE_OVERRIDE 477
#define VAR_ACCESS_CONTROL_TAG_ACTION 478
#define VAR_ACCESS_CONTROL_TAG_DATA 479
#define VAR_VIEW 480
#define VAR_ACCESS_CONTROL_VIEW 481
#define VAR_VIEW_FIRST 482
#define VAR_SERVE_EXPIRED 483
#define VAR_SERVE_EXPIRED_TTL 484
#define VAR_SERVE_EXPIRED_TTL_RESET 485
#define VAR_SERVE_EXPIRED_REPLY_TTL 486
#define VAR_SERVE_EXPIRED_CLIENT_TIMEOUT 487
#define VAR_SERVE_ORIGINAL_TTL 488
#define VAR_FAKE_DSA 489
#define VAR_FAKE_SHA1 490
#define VAR_LOG_IDENTITY 491
#define VAR_HIDE_TRUSTANCHOR 492
#define VAR_TRUST_ANCHOR_SIGNALING 493
#define VAR_AGGRESSIVE_NSEC 494
#define VAR_USE_SYSTEMD 495
#define VAR_SHM_ENABLE 496
#define VAR_SHM_KEY 497
#define VAR_ROOT_KEY_SENTINEL 498
#define VAR_DNSCRYPT 499
#define VAR_DNSCRYPT_ENABLE 500
#define VAR_DNSCRYPT_PORT 501
#define VAR_DNSCRYPT_PROVIDER 502
#define VAR_DNSCRYPT_SECRET_KEY 503
#define VAR_DNSCRYPT_PROVIDER_CERT 504
#define VAR_DNSCRYPT_PROVIDER_CERT_ROTATED 505
#define VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE 506
#define VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS 507
#define VAR_DNSCRYPT_NONCE_CACHE_SIZE 508
#define VAR_DNSCRYPT_NONCE_CACHE_SLABS 509
#define VAR_PAD_RESPONSES 510
#define VAR_PAD_RESPONSES_BLOCK_SIZE 511
#define VAR_PAD_QUERIES 512
#define VAR_PAD_QUERIES_BLOCK_SIZE 513
#define VAR_IPSECMOD_ENABLED 514
#define VAR_IPSECMOD_HOOK 515
#define VAR_IPSECMOD_IGNORE_BOGUS 516
#define VAR_IPSECMOD_MAX_TTL 517
#define VAR_IPSECMOD_WHITELIST 518
#define VAR_IPSECMOD_STRICT 519
#define VAR_CACHEDB 520
#define VAR_CACHEDB_BACKEND 521
#define VAR_CACHEDB_SECRETSEED 522
#define VAR_CACHEDB_REDISHOST 523
#define VAR_CACHEDB_REDISPORT 524
#define VAR_CACHEDB_REDISTIMEOUT 525
#define VAR_CACHEDB_REDISEXPIRERECORDS 526
#define VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM 527
#define VAR_FOR_UPSTREAM 528
#define VAR_AUTH_ZONE 529
#define VAR_ZONEFILE 530
#define VAR_MASTER 531
#define VAR_URL 532
#define VAR_FOR_DOWNSTREAM 533
#define VAR_FALLBACK_ENABLED 534
#define VAR_TLS_ADDITIONAL_PORT 535
#define VAR_LOW_RTT 536
#define VAR_LOW_RTT_PERMIL 537
#define VAR_FAST_SERVER_PERMIL 538
#define VAR_FAST_SERVER_NUM 539
#define VAR_ALLOW_NOTIFY 540
#define VAR_TLS_WIN_CERT 541
#define VAR_TCP_CONNECTION_LIMIT 542
#define VAR_FORWARD_NO_CACHE 543
#define VAR_STUB_NO_CACHE 544
#define VAR_LOG_SERVFAIL 545
#define VAR_DENY_ANY 546
#define VAR_UNKNOWN_SERVER_TIME_LIMIT 547
#define VAR_LOG_TAG_QUERYREPLY 548
#define VAR_STREAM_WAIT_SIZE 549
#define VAR_TLS_CIPHERS 550
#define VAR_TLS_CIPHERSUITES 551
#define VAR_TLS_USE_SNI 552
#define VAR_IPSET 553
#define VAR_IPSET_NAME_V4 554
#define VAR_IPSET_NAME_V6 555
#define VAR_TLS_SESSION_TICKET_KEYS 556
#define VAR_RPZ 557
#define VAR_TAGS 558
#define VAR_RPZ_ACTION_OVERRIDE 559
#define VAR_RPZ_CNAME_OVERRIDE 560
#define VAR_RPZ_LOG 561
#define VAR_RPZ_LOG_NAME 562
#define VAR_DYNLIB 563
#define VAR_DYNLIB_FILE 564
#define VAR_EDNS_CLIENT_STRING 565
#define VAR_EDNS_CLIENT_STRING_OPCODE 566
#define VAR_NSID 567
#define VAR_ZONEMD_PERMISSIVE_MODE 568
#define VAR_ZONEMD_CHECK 569
#define VAR_ZONEMD_REJECT_ABSENCE 570
/* Value type. */
#if ! defined YYSTYPE && ! defined YYSTYPE_IS_DECLARED
@ -694,7 +697,7 @@ union YYSTYPE
char* str;
#line 698 "util/configparser.h"
#line 701 "util/configparser.h"
};
typedef union YYSTYPE YYSTYPE;