Struct DNSSECConfig 

pub struct DNSSECConfig {
    pub validation: Option<bool>,
    pub signing: Option<DNSSECSigningConfig>,
}

DNSSEC (DNS Security Extensions) configuration

DNSSEC adds cryptographic signatures to DNS records to ensure authenticity and integrity. This configuration supports both DNSSEC validation (verifying signatures from upstream) and DNSSEC signing (cryptographically signing your own zones).

Example

dnssec:
  validation: true  # Validate upstream DNSSEC responses
  signing:
    enabled: true
    policy: "default"
    algorithm: "ECDSAP256SHA256"
    kskLifetime: "365d"
    zskLifetime: "90d"

Fields

validation: Option<bool>

Enable DNSSEC validation of responses

When enabled, BIND will validate DNSSEC signatures on responses from other nameservers. Invalid or missing signatures will cause queries to fail.

Default: false

Important: Requires valid DNSSEC trust anchors and proper network connectivity to root DNS servers. May cause resolution failures if DNSSEC is broken upstream.

signing: Option<DNSSECSigningConfig>

Enable DNSSEC zone signing configuration

Configures automatic DNSSEC signing for zones served by this cluster. When enabled, BIND9 will automatically generate keys, sign zones, and rotate keys based on the configured policy.

Important: Requires BIND 9.16+ for modern dnssec-policy support.

Trait Implementations

impl Clone for DNSSECConfig

fn clone(&self) -> DNSSECConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DNSSECConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for DNSSECConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for DNSSECConfig

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl PartialEq for DNSSECConfig

fn eq(&self, other: &DNSSECConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for DNSSECConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for DNSSECConfig