Enum DnssecPolicyConfig 

pub enum DnssecPolicyConfig {
    SecurityUnaware,
    ValidationDisabled,
    ValidateWithStaticKey {
        path: Option<PathBuf>,
        nsec3_soft_iteration_limit: Option<u16>,
        nsec3_hard_iteration_limit: Option<u16>,
        validation_cache_size: Option<usize>,
    },
}

Available on crate features recursor and serde only.

DNSSEC policy configuration

Variants

SecurityUnaware

security unaware; DNSSEC records will not be requested nor processed

ValidationDisabled

Available on crate feature __dnssec only.

DNSSEC validation is disabled; DNSSEC records will be requested and processed

ValidateWithStaticKey

Available on crate feature __dnssec only.

DNSSEC validation is enabled and will use the chosen trust_anchor set of keys

Fields

path: Option<PathBuf>

set to None to use built-in trust anchor

nsec3_soft_iteration_limit: Option<u16>

set to control the ‘soft’ NSEC3 iteration limit. Responses where valid NSEC3 records are returned having an iteration count above this limit, but below the hard limit, will be considered insecure (answered without the AD bit set.)

nsec3_hard_iteration_limit: Option<u16>

set to control the ‘hard’ NSEC3 iteration limit. Responses where valid NSEC3 records are returned having an iteration count above this limit will be considered Bogus and will result in a SERVFAIL response being returned to the requester.

validation_cache_size: Option<usize>

set to control the size of the DNSSEC validation cache. Set to none to use the default

Trait Implementations

impl Clone for DnssecPolicyConfig

fn clone(&self) -> DnssecPolicyConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DnssecPolicyConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for DnssecPolicyConfig

fn default() -> DnssecPolicyConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for DnssecPolicyConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for DnssecPolicyConfig

fn eq(&self, other: &DnssecPolicyConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for DnssecPolicyConfig

impl StructuralPartialEq for DnssecPolicyConfig