-- ref: https://www.knot-resolver.cz/documentation/stable/config-overview.html -- load non-default modules modules.load("view") modules.load("prefill") -- define list of internal-only domains ehDomains = policy.todnames({'noc.eh22.intern'}) -- for the mgmt-network, forward ehDomains to our authorative server view:addr('10.20.25.0/24', policy.suffix(policy.FLAGS({'NO_CACHE'}), ehDomains)) view:addr('10.20.25.0/24', policy.suffix(policy.STUB({'10.20.25.3'}), ehDomains)) -- allow resolution from our internal network view:addr('10.20.25.0/24', policy.all(policy.PASS)) -- precache the root zone to reduce traffic load to it prefill.config({ ["."] = { url = "https://www.internic.net/domain/root.zone", interval = 24 * 60 * 60, } })