vendor/unbound/1.11.0

1 files changed, 563 insertions, 535 deletions

diff --git a/util/configparser.h b/util/configparser.h
index 3e8effb5bfa4..2f56c42a6ad2 100644
--- a/util/configparser.h
+++ b/util/configparser.h
@@ -57,273 +57,287 @@ extern int yydebug;
     ANY = 263,
     ZONESTR = 264,
     STRING_ARG = 265,
-    VAR_SERVER = 266,
-    VAR_VERBOSITY = 267,
-    VAR_NUM_THREADS = 268,
-    VAR_PORT = 269,
-    VAR_OUTGOING_RANGE = 270,
-    VAR_INTERFACE = 271,
-    VAR_DO_IP4 = 272,
-    VAR_DO_IP6 = 273,
-    VAR_PREFER_IP6 = 274,
-    VAR_DO_UDP = 275,
-    VAR_DO_TCP = 276,
-    VAR_TCP_MSS = 277,
-    VAR_OUTGOING_TCP_MSS = 278,
-    VAR_TCP_IDLE_TIMEOUT = 279,
-    VAR_EDNS_TCP_KEEPALIVE = 280,
-    VAR_EDNS_TCP_KEEPALIVE_TIMEOUT = 281,
-    VAR_CHROOT = 282,
-    VAR_USERNAME = 283,
-    VAR_DIRECTORY = 284,
-    VAR_LOGFILE = 285,
-    VAR_PIDFILE = 286,
-    VAR_MSG_CACHE_SIZE = 287,
-    VAR_MSG_CACHE_SLABS = 288,
-    VAR_NUM_QUERIES_PER_THREAD = 289,
-    VAR_RRSET_CACHE_SIZE = 290,
-    VAR_RRSET_CACHE_SLABS = 291,
-    VAR_OUTGOING_NUM_TCP = 292,
-    VAR_INFRA_HOST_TTL = 293,
-    VAR_INFRA_LAME_TTL = 294,
-    VAR_INFRA_CACHE_SLABS = 295,
-    VAR_INFRA_CACHE_NUMHOSTS = 296,
-    VAR_INFRA_CACHE_LAME_SIZE = 297,
-    VAR_NAME = 298,
-    VAR_STUB_ZONE = 299,
-    VAR_STUB_HOST = 300,
-    VAR_STUB_ADDR = 301,
-    VAR_TARGET_FETCH_POLICY = 302,
-    VAR_HARDEN_SHORT_BUFSIZE = 303,
-    VAR_HARDEN_LARGE_QUERIES = 304,
-    VAR_FORWARD_ZONE = 305,
-    VAR_FORWARD_HOST = 306,
-    VAR_FORWARD_ADDR = 307,
-    VAR_DO_NOT_QUERY_ADDRESS = 308,
-    VAR_HIDE_IDENTITY = 309,
-    VAR_HIDE_VERSION = 310,
-    VAR_IDENTITY = 311,
-    VAR_VERSION = 312,
-    VAR_HARDEN_GLUE = 313,
-    VAR_MODULE_CONF = 314,
-    VAR_TRUST_ANCHOR_FILE = 315,
-    VAR_TRUST_ANCHOR = 316,
-    VAR_VAL_OVERRIDE_DATE = 317,
-    VAR_BOGUS_TTL = 318,
-    VAR_VAL_CLEAN_ADDITIONAL = 319,
-    VAR_VAL_PERMISSIVE_MODE = 320,
-    VAR_INCOMING_NUM_TCP = 321,
-    VAR_MSG_BUFFER_SIZE = 322,
-    VAR_KEY_CACHE_SIZE = 323,
-    VAR_KEY_CACHE_SLABS = 324,
-    VAR_TRUSTED_KEYS_FILE = 325,
-    VAR_VAL_NSEC3_KEYSIZE_ITERATIONS = 326,
-    VAR_USE_SYSLOG = 327,
-    VAR_OUTGOING_INTERFACE = 328,
-    VAR_ROOT_HINTS = 329,
-    VAR_DO_NOT_QUERY_LOCALHOST = 330,
-    VAR_CACHE_MAX_TTL = 331,
-    VAR_HARDEN_DNSSEC_STRIPPED = 332,
-    VAR_ACCESS_CONTROL = 333,
-    VAR_LOCAL_ZONE = 334,
-    VAR_LOCAL_DATA = 335,
-    VAR_INTERFACE_AUTOMATIC = 336,
-    VAR_STATISTICS_INTERVAL = 337,
-    VAR_DO_DAEMONIZE = 338,
-    VAR_USE_CAPS_FOR_ID = 339,
-    VAR_STATISTICS_CUMULATIVE = 340,
-    VAR_OUTGOING_PORT_PERMIT = 341,
-    VAR_OUTGOING_PORT_AVOID = 342,
-    VAR_DLV_ANCHOR_FILE = 343,
-    VAR_DLV_ANCHOR = 344,
-    VAR_NEG_CACHE_SIZE = 345,
-    VAR_HARDEN_REFERRAL_PATH = 346,
-    VAR_PRIVATE_ADDRESS = 347,
-    VAR_PRIVATE_DOMAIN = 348,
-    VAR_REMOTE_CONTROL = 349,
-    VAR_CONTROL_ENABLE = 350,
-    VAR_CONTROL_INTERFACE = 351,
-    VAR_CONTROL_PORT = 352,
-    VAR_SERVER_KEY_FILE = 353,
-    VAR_SERVER_CERT_FILE = 354,
-    VAR_CONTROL_KEY_FILE = 355,
-    VAR_CONTROL_CERT_FILE = 356,
-    VAR_CONTROL_USE_CERT = 357,
-    VAR_EXTENDED_STATISTICS = 358,
-    VAR_LOCAL_DATA_PTR = 359,
-    VAR_JOSTLE_TIMEOUT = 360,
-    VAR_STUB_PRIME = 361,
-    VAR_UNWANTED_REPLY_THRESHOLD = 362,
-    VAR_LOG_TIME_ASCII = 363,
-    VAR_DOMAIN_INSECURE = 364,
-    VAR_PYTHON = 365,
-    VAR_PYTHON_SCRIPT = 366,
-    VAR_VAL_SIG_SKEW_MIN = 367,
-    VAR_VAL_SIG_SKEW_MAX = 368,
-    VAR_CACHE_MIN_TTL = 369,
-    VAR_VAL_LOG_LEVEL = 370,
-    VAR_AUTO_TRUST_ANCHOR_FILE = 371,
-    VAR_KEEP_MISSING = 372,
-    VAR_ADD_HOLDDOWN = 373,
-    VAR_DEL_HOLDDOWN = 374,
-    VAR_SO_RCVBUF = 375,
-    VAR_EDNS_BUFFER_SIZE = 376,
-    VAR_PREFETCH = 377,
-    VAR_PREFETCH_KEY = 378,
-    VAR_SO_SNDBUF = 379,
-    VAR_SO_REUSEPORT = 380,
-    VAR_HARDEN_BELOW_NXDOMAIN = 381,
-    VAR_IGNORE_CD_FLAG = 382,
-    VAR_LOG_QUERIES = 383,
-    VAR_LOG_REPLIES = 384,
-    VAR_LOG_LOCAL_ACTIONS = 385,
-    VAR_TCP_UPSTREAM = 386,
-    VAR_SSL_UPSTREAM = 387,
-    VAR_SSL_SERVICE_KEY = 388,
-    VAR_SSL_SERVICE_PEM = 389,
-    VAR_SSL_PORT = 390,
-    VAR_FORWARD_FIRST = 391,
-    VAR_STUB_SSL_UPSTREAM = 392,
-    VAR_FORWARD_SSL_UPSTREAM = 393,
-    VAR_TLS_CERT_BUNDLE = 394,
-    VAR_STUB_FIRST = 395,
-    VAR_MINIMAL_RESPONSES = 396,
-    VAR_RRSET_ROUNDROBIN = 397,
-    VAR_MAX_UDP_SIZE = 398,
-    VAR_DELAY_CLOSE = 399,
-    VAR_UNBLOCK_LAN_ZONES = 400,
-    VAR_INSECURE_LAN_ZONES = 401,
-    VAR_INFRA_CACHE_MIN_RTT = 402,
-    VAR_DNS64_PREFIX = 403,
-    VAR_DNS64_SYNTHALL = 404,
-    VAR_DNS64_IGNORE_AAAA = 405,
-    VAR_DNSTAP = 406,
-    VAR_DNSTAP_ENABLE = 407,
-    VAR_DNSTAP_SOCKET_PATH = 408,
-    VAR_DNSTAP_SEND_IDENTITY = 409,
-    VAR_DNSTAP_SEND_VERSION = 410,
-    VAR_DNSTAP_IDENTITY = 411,
-    VAR_DNSTAP_VERSION = 412,
-    VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES = 413,
-    VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES = 414,
-    VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES = 415,
-    VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES = 416,
-    VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES = 417,
-    VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES = 418,
-    VAR_RESPONSE_IP_TAG = 419,
-    VAR_RESPONSE_IP = 420,
-    VAR_RESPONSE_IP_DATA = 421,
-    VAR_HARDEN_ALGO_DOWNGRADE = 422,
-    VAR_IP_TRANSPARENT = 423,
-    VAR_DISABLE_DNSSEC_LAME_CHECK = 424,
-    VAR_IP_RATELIMIT = 425,
-    VAR_IP_RATELIMIT_SLABS = 426,
-    VAR_IP_RATELIMIT_SIZE = 427,
-    VAR_RATELIMIT = 428,
-    VAR_RATELIMIT_SLABS = 429,
-    VAR_RATELIMIT_SIZE = 430,
-    VAR_RATELIMIT_FOR_DOMAIN = 431,
-    VAR_RATELIMIT_BELOW_DOMAIN = 432,
-    VAR_IP_RATELIMIT_FACTOR = 433,
-    VAR_RATELIMIT_FACTOR = 434,
-    VAR_SEND_CLIENT_SUBNET = 435,
-    VAR_CLIENT_SUBNET_ZONE = 436,
-    VAR_CLIENT_SUBNET_ALWAYS_FORWARD = 437,
-    VAR_CLIENT_SUBNET_OPCODE = 438,
-    VAR_MAX_CLIENT_SUBNET_IPV4 = 439,
-    VAR_MAX_CLIENT_SUBNET_IPV6 = 440,
-    VAR_MIN_CLIENT_SUBNET_IPV4 = 441,
-    VAR_MIN_CLIENT_SUBNET_IPV6 = 442,
-    VAR_MAX_ECS_TREE_SIZE_IPV4 = 443,
-    VAR_MAX_ECS_TREE_SIZE_IPV6 = 444,
-    VAR_CAPS_WHITELIST = 445,
-    VAR_CACHE_MAX_NEGATIVE_TTL = 446,
-    VAR_PERMIT_SMALL_HOLDDOWN = 447,
-    VAR_QNAME_MINIMISATION = 448,
-    VAR_QNAME_MINIMISATION_STRICT = 449,
-    VAR_IP_FREEBIND = 450,
-    VAR_DEFINE_TAG = 451,
-    VAR_LOCAL_ZONE_TAG = 452,
-    VAR_ACCESS_CONTROL_TAG = 453,
-    VAR_LOCAL_ZONE_OVERRIDE = 454,
-    VAR_ACCESS_CONTROL_TAG_ACTION = 455,
-    VAR_ACCESS_CONTROL_TAG_DATA = 456,
-    VAR_VIEW = 457,
-    VAR_ACCESS_CONTROL_VIEW = 458,
-    VAR_VIEW_FIRST = 459,
-    VAR_SERVE_EXPIRED = 460,
-    VAR_SERVE_EXPIRED_TTL = 461,
-    VAR_SERVE_EXPIRED_TTL_RESET = 462,
-    VAR_SERVE_EXPIRED_REPLY_TTL = 463,
-    VAR_SERVE_EXPIRED_CLIENT_TIMEOUT = 464,
-    VAR_FAKE_DSA = 465,
-    VAR_FAKE_SHA1 = 466,
-    VAR_LOG_IDENTITY = 467,
-    VAR_HIDE_TRUSTANCHOR = 468,
-    VAR_TRUST_ANCHOR_SIGNALING = 469,
-    VAR_AGGRESSIVE_NSEC = 470,
-    VAR_USE_SYSTEMD = 471,
-    VAR_SHM_ENABLE = 472,
-    VAR_SHM_KEY = 473,
-    VAR_ROOT_KEY_SENTINEL = 474,
-    VAR_DNSCRYPT = 475,
-    VAR_DNSCRYPT_ENABLE = 476,
-    VAR_DNSCRYPT_PORT = 477,
-    VAR_DNSCRYPT_PROVIDER = 478,
-    VAR_DNSCRYPT_SECRET_KEY = 479,
-    VAR_DNSCRYPT_PROVIDER_CERT = 480,
-    VAR_DNSCRYPT_PROVIDER_CERT_ROTATED = 481,
-    VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE = 482,
-    VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS = 483,
-    VAR_DNSCRYPT_NONCE_CACHE_SIZE = 484,
-    VAR_DNSCRYPT_NONCE_CACHE_SLABS = 485,
-    VAR_IPSECMOD_ENABLED = 486,
-    VAR_IPSECMOD_HOOK = 487,
-    VAR_IPSECMOD_IGNORE_BOGUS = 488,
-    VAR_IPSECMOD_MAX_TTL = 489,
-    VAR_IPSECMOD_WHITELIST = 490,
-    VAR_IPSECMOD_STRICT = 491,
-    VAR_CACHEDB = 492,
-    VAR_CACHEDB_BACKEND = 493,
-    VAR_CACHEDB_SECRETSEED = 494,
-    VAR_CACHEDB_REDISHOST = 495,
-    VAR_CACHEDB_REDISPORT = 496,
-    VAR_CACHEDB_REDISTIMEOUT = 497,
-    VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM = 498,
-    VAR_FOR_UPSTREAM = 499,
-    VAR_AUTH_ZONE = 500,
-    VAR_ZONEFILE = 501,
-    VAR_MASTER = 502,
-    VAR_URL = 503,
-    VAR_FOR_DOWNSTREAM = 504,
-    VAR_FALLBACK_ENABLED = 505,
-    VAR_TLS_ADDITIONAL_PORT = 506,
-    VAR_LOW_RTT = 507,
-    VAR_LOW_RTT_PERMIL = 508,
-    VAR_FAST_SERVER_PERMIL = 509,
-    VAR_FAST_SERVER_NUM = 510,
-    VAR_ALLOW_NOTIFY = 511,
-    VAR_TLS_WIN_CERT = 512,
-    VAR_TCP_CONNECTION_LIMIT = 513,
-    VAR_FORWARD_NO_CACHE = 514,
-    VAR_STUB_NO_CACHE = 515,
-    VAR_LOG_SERVFAIL = 516,
-    VAR_DENY_ANY = 517,
-    VAR_UNKNOWN_SERVER_TIME_LIMIT = 518,
-    VAR_LOG_TAG_QUERYREPLY = 519,
-    VAR_STREAM_WAIT_SIZE = 520,
-    VAR_TLS_CIPHERS = 521,
-    VAR_TLS_CIPHERSUITES = 522,
-    VAR_IPSET = 523,
-    VAR_IPSET_NAME_V4 = 524,
-    VAR_IPSET_NAME_V6 = 525,
-    VAR_TLS_SESSION_TICKET_KEYS = 526,
-    VAR_RPZ = 527,
-    VAR_TAGS = 528,
-    VAR_RPZ_ACTION_OVERRIDE = 529,
-    VAR_RPZ_CNAME_OVERRIDE = 530,
-    VAR_RPZ_LOG = 531,
-    VAR_RPZ_LOG_NAME = 532
+    VAR_FORCE_TOPLEVEL = 266,
+    VAR_SERVER = 267,
+    VAR_VERBOSITY = 268,
+    VAR_NUM_THREADS = 269,
+    VAR_PORT = 270,
+    VAR_OUTGOING_RANGE = 271,
+    VAR_INTERFACE = 272,
+    VAR_PREFER_IP4 = 273,
+    VAR_DO_IP4 = 274,
+    VAR_DO_IP6 = 275,
+    VAR_PREFER_IP6 = 276,
+    VAR_DO_UDP = 277,
+    VAR_DO_TCP = 278,
+    VAR_TCP_MSS = 279,
+    VAR_OUTGOING_TCP_MSS = 280,
+    VAR_TCP_IDLE_TIMEOUT = 281,
+    VAR_EDNS_TCP_KEEPALIVE = 282,
+    VAR_EDNS_TCP_KEEPALIVE_TIMEOUT = 283,
+    VAR_CHROOT = 284,
+    VAR_USERNAME = 285,
+    VAR_DIRECTORY = 286,
+    VAR_LOGFILE = 287,
+    VAR_PIDFILE = 288,
+    VAR_MSG_CACHE_SIZE = 289,
+    VAR_MSG_CACHE_SLABS = 290,
+    VAR_NUM_QUERIES_PER_THREAD = 291,
+    VAR_RRSET_CACHE_SIZE = 292,
+    VAR_RRSET_CACHE_SLABS = 293,
+    VAR_OUTGOING_NUM_TCP = 294,
+    VAR_INFRA_HOST_TTL = 295,
+    VAR_INFRA_LAME_TTL = 296,
+    VAR_INFRA_CACHE_SLABS = 297,
+    VAR_INFRA_CACHE_NUMHOSTS = 298,
+    VAR_INFRA_CACHE_LAME_SIZE = 299,
+    VAR_NAME = 300,
+    VAR_STUB_ZONE = 301,
+    VAR_STUB_HOST = 302,
+    VAR_STUB_ADDR = 303,
+    VAR_TARGET_FETCH_POLICY = 304,
+    VAR_HARDEN_SHORT_BUFSIZE = 305,
+    VAR_HARDEN_LARGE_QUERIES = 306,
+    VAR_FORWARD_ZONE = 307,
+    VAR_FORWARD_HOST = 308,
+    VAR_FORWARD_ADDR = 309,
+    VAR_DO_NOT_QUERY_ADDRESS = 310,
+    VAR_HIDE_IDENTITY = 311,
+    VAR_HIDE_VERSION = 312,
+    VAR_IDENTITY = 313,
+    VAR_VERSION = 314,
+    VAR_HARDEN_GLUE = 315,
+    VAR_MODULE_CONF = 316,
+    VAR_TRUST_ANCHOR_FILE = 317,
+    VAR_TRUST_ANCHOR = 318,
+    VAR_VAL_OVERRIDE_DATE = 319,
+    VAR_BOGUS_TTL = 320,
+    VAR_VAL_CLEAN_ADDITIONAL = 321,
+    VAR_VAL_PERMISSIVE_MODE = 322,
+    VAR_INCOMING_NUM_TCP = 323,
+    VAR_MSG_BUFFER_SIZE = 324,
+    VAR_KEY_CACHE_SIZE = 325,
+    VAR_KEY_CACHE_SLABS = 326,
+    VAR_TRUSTED_KEYS_FILE = 327,
+    VAR_VAL_NSEC3_KEYSIZE_ITERATIONS = 328,
+    VAR_USE_SYSLOG = 329,
+    VAR_OUTGOING_INTERFACE = 330,
+    VAR_ROOT_HINTS = 331,
+    VAR_DO_NOT_QUERY_LOCALHOST = 332,
+    VAR_CACHE_MAX_TTL = 333,
+    VAR_HARDEN_DNSSEC_STRIPPED = 334,
+    VAR_ACCESS_CONTROL = 335,
+    VAR_LOCAL_ZONE = 336,
+    VAR_LOCAL_DATA = 337,
+    VAR_INTERFACE_AUTOMATIC = 338,
+    VAR_STATISTICS_INTERVAL = 339,
+    VAR_DO_DAEMONIZE = 340,
+    VAR_USE_CAPS_FOR_ID = 341,
+    VAR_STATISTICS_CUMULATIVE = 342,
+    VAR_OUTGOING_PORT_PERMIT = 343,
+    VAR_OUTGOING_PORT_AVOID = 344,
+    VAR_DLV_ANCHOR_FILE = 345,
+    VAR_DLV_ANCHOR = 346,
+    VAR_NEG_CACHE_SIZE = 347,
+    VAR_HARDEN_REFERRAL_PATH = 348,
+    VAR_PRIVATE_ADDRESS = 349,
+    VAR_PRIVATE_DOMAIN = 350,
+    VAR_REMOTE_CONTROL = 351,
+    VAR_CONTROL_ENABLE = 352,
+    VAR_CONTROL_INTERFACE = 353,
+    VAR_CONTROL_PORT = 354,
+    VAR_SERVER_KEY_FILE = 355,
+    VAR_SERVER_CERT_FILE = 356,
+    VAR_CONTROL_KEY_FILE = 357,
+    VAR_CONTROL_CERT_FILE = 358,
+    VAR_CONTROL_USE_CERT = 359,
+    VAR_EXTENDED_STATISTICS = 360,
+    VAR_LOCAL_DATA_PTR = 361,
+    VAR_JOSTLE_TIMEOUT = 362,
+    VAR_STUB_PRIME = 363,
+    VAR_UNWANTED_REPLY_THRESHOLD = 364,
+    VAR_LOG_TIME_ASCII = 365,
+    VAR_DOMAIN_INSECURE = 366,
+    VAR_PYTHON = 367,
+    VAR_PYTHON_SCRIPT = 368,
+    VAR_VAL_SIG_SKEW_MIN = 369,
+    VAR_VAL_SIG_SKEW_MAX = 370,
+    VAR_CACHE_MIN_TTL = 371,
+    VAR_VAL_LOG_LEVEL = 372,
+    VAR_AUTO_TRUST_ANCHOR_FILE = 373,
+    VAR_KEEP_MISSING = 374,
+    VAR_ADD_HOLDDOWN = 375,
+    VAR_DEL_HOLDDOWN = 376,
+    VAR_SO_RCVBUF = 377,
+    VAR_EDNS_BUFFER_SIZE = 378,
+    VAR_PREFETCH = 379,
+    VAR_PREFETCH_KEY = 380,
+    VAR_SO_SNDBUF = 381,
+    VAR_SO_REUSEPORT = 382,
+    VAR_HARDEN_BELOW_NXDOMAIN = 383,
+    VAR_IGNORE_CD_FLAG = 384,
+    VAR_LOG_QUERIES = 385,
+    VAR_LOG_REPLIES = 386,
+    VAR_LOG_LOCAL_ACTIONS = 387,
+    VAR_TCP_UPSTREAM = 388,
+    VAR_SSL_UPSTREAM = 389,
+    VAR_SSL_SERVICE_KEY = 390,
+    VAR_SSL_SERVICE_PEM = 391,
+    VAR_SSL_PORT = 392,
+    VAR_FORWARD_FIRST = 393,
+    VAR_STUB_SSL_UPSTREAM = 394,
+    VAR_FORWARD_SSL_UPSTREAM = 395,
+    VAR_TLS_CERT_BUNDLE = 396,
+    VAR_STUB_FIRST = 397,
+    VAR_MINIMAL_RESPONSES = 398,
+    VAR_RRSET_ROUNDROBIN = 399,
+    VAR_MAX_UDP_SIZE = 400,
+    VAR_DELAY_CLOSE = 401,
+    VAR_UNBLOCK_LAN_ZONES = 402,
+    VAR_INSECURE_LAN_ZONES = 403,
+    VAR_INFRA_CACHE_MIN_RTT = 404,
+    VAR_DNS64_PREFIX = 405,
+    VAR_DNS64_SYNTHALL = 406,
+    VAR_DNS64_IGNORE_AAAA = 407,
+    VAR_DNSTAP = 408,
+    VAR_DNSTAP_ENABLE = 409,
+    VAR_DNSTAP_SOCKET_PATH = 410,
+    VAR_DNSTAP_IP = 411,
+    VAR_DNSTAP_TLS = 412,
+    VAR_DNSTAP_TLS_SERVER_NAME = 413,
+    VAR_DNSTAP_TLS_CERT_BUNDLE = 414,
+    VAR_DNSTAP_TLS_CLIENT_KEY_FILE = 415,
+    VAR_DNSTAP_TLS_CLIENT_CERT_FILE = 416,
+    VAR_DNSTAP_SEND_IDENTITY = 417,
+    VAR_DNSTAP_SEND_VERSION = 418,
+    VAR_DNSTAP_BIDIRECTIONAL = 419,
+    VAR_DNSTAP_IDENTITY = 420,
+    VAR_DNSTAP_VERSION = 421,
+    VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES = 422,
+    VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES = 423,
+    VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES = 424,
+    VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES = 425,
+    VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES = 426,
+    VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES = 427,
+    VAR_RESPONSE_IP_TAG = 428,
+    VAR_RESPONSE_IP = 429,
+    VAR_RESPONSE_IP_DATA = 430,
+    VAR_HARDEN_ALGO_DOWNGRADE = 431,
+    VAR_IP_TRANSPARENT = 432,
+    VAR_IP_DSCP = 433,
+    VAR_DISABLE_DNSSEC_LAME_CHECK = 434,
+    VAR_IP_RATELIMIT = 435,
+    VAR_IP_RATELIMIT_SLABS = 436,
+    VAR_IP_RATELIMIT_SIZE = 437,
+    VAR_RATELIMIT = 438,
+    VAR_RATELIMIT_SLABS = 439,
+    VAR_RATELIMIT_SIZE = 440,
+    VAR_RATELIMIT_FOR_DOMAIN = 441,
+    VAR_RATELIMIT_BELOW_DOMAIN = 442,
+    VAR_IP_RATELIMIT_FACTOR = 443,
+    VAR_RATELIMIT_FACTOR = 444,
+    VAR_SEND_CLIENT_SUBNET = 445,
+    VAR_CLIENT_SUBNET_ZONE = 446,
+    VAR_CLIENT_SUBNET_ALWAYS_FORWARD = 447,
+    VAR_CLIENT_SUBNET_OPCODE = 448,
+    VAR_MAX_CLIENT_SUBNET_IPV4 = 449,
+    VAR_MAX_CLIENT_SUBNET_IPV6 = 450,
+    VAR_MIN_CLIENT_SUBNET_IPV4 = 451,
+    VAR_MIN_CLIENT_SUBNET_IPV6 = 452,
+    VAR_MAX_ECS_TREE_SIZE_IPV4 = 453,
+    VAR_MAX_ECS_TREE_SIZE_IPV6 = 454,
+    VAR_CAPS_WHITELIST = 455,
+    VAR_CACHE_MAX_NEGATIVE_TTL = 456,
+    VAR_PERMIT_SMALL_HOLDDOWN = 457,
+    VAR_QNAME_MINIMISATION = 458,
+    VAR_QNAME_MINIMISATION_STRICT = 459,
+    VAR_IP_FREEBIND = 460,
+    VAR_DEFINE_TAG = 461,
+    VAR_LOCAL_ZONE_TAG = 462,
+    VAR_ACCESS_CONTROL_TAG = 463,
+    VAR_LOCAL_ZONE_OVERRIDE = 464,
+    VAR_ACCESS_CONTROL_TAG_ACTION = 465,
+    VAR_ACCESS_CONTROL_TAG_DATA = 466,
+    VAR_VIEW = 467,
+    VAR_ACCESS_CONTROL_VIEW = 468,
+    VAR_VIEW_FIRST = 469,
+    VAR_SERVE_EXPIRED = 470,
+    VAR_SERVE_EXPIRED_TTL = 471,
+    VAR_SERVE_EXPIRED_TTL_RESET = 472,
+    VAR_SERVE_EXPIRED_REPLY_TTL = 473,
+    VAR_SERVE_EXPIRED_CLIENT_TIMEOUT = 474,
+    VAR_FAKE_DSA = 475,
+    VAR_FAKE_SHA1 = 476,
+    VAR_LOG_IDENTITY = 477,
+    VAR_HIDE_TRUSTANCHOR = 478,
+    VAR_TRUST_ANCHOR_SIGNALING = 479,
+    VAR_AGGRESSIVE_NSEC = 480,
+    VAR_USE_SYSTEMD = 481,
+    VAR_SHM_ENABLE = 482,
+    VAR_SHM_KEY = 483,
+    VAR_ROOT_KEY_SENTINEL = 484,
+    VAR_DNSCRYPT = 485,
+    VAR_DNSCRYPT_ENABLE = 486,
+    VAR_DNSCRYPT_PORT = 487,
+    VAR_DNSCRYPT_PROVIDER = 488,
+    VAR_DNSCRYPT_SECRET_KEY = 489,
+    VAR_DNSCRYPT_PROVIDER_CERT = 490,
+    VAR_DNSCRYPT_PROVIDER_CERT_ROTATED = 491,
+    VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE = 492,
+    VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS = 493,
+    VAR_DNSCRYPT_NONCE_CACHE_SIZE = 494,
+    VAR_DNSCRYPT_NONCE_CACHE_SLABS = 495,
+    VAR_IPSECMOD_ENABLED = 496,
+    VAR_IPSECMOD_HOOK = 497,
+    VAR_IPSECMOD_IGNORE_BOGUS = 498,
+    VAR_IPSECMOD_MAX_TTL = 499,
+    VAR_IPSECMOD_WHITELIST = 500,
+    VAR_IPSECMOD_STRICT = 501,
+    VAR_CACHEDB = 502,
+    VAR_CACHEDB_BACKEND = 503,
+    VAR_CACHEDB_SECRETSEED = 504,
+    VAR_CACHEDB_REDISHOST = 505,
+    VAR_CACHEDB_REDISPORT = 506,
+    VAR_CACHEDB_REDISTIMEOUT = 507,
+    VAR_CACHEDB_REDISEXPIRERECORDS = 508,
+    VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM = 509,
+    VAR_FOR_UPSTREAM = 510,
+    VAR_AUTH_ZONE = 511,
+    VAR_ZONEFILE = 512,
+    VAR_MASTER = 513,
+    VAR_URL = 514,
+    VAR_FOR_DOWNSTREAM = 515,
+    VAR_FALLBACK_ENABLED = 516,
+    VAR_TLS_ADDITIONAL_PORT = 517,
+    VAR_LOW_RTT = 518,
+    VAR_LOW_RTT_PERMIL = 519,
+    VAR_FAST_SERVER_PERMIL = 520,
+    VAR_FAST_SERVER_NUM = 521,
+    VAR_ALLOW_NOTIFY = 522,
+    VAR_TLS_WIN_CERT = 523,
+    VAR_TCP_CONNECTION_LIMIT = 524,
+    VAR_FORWARD_NO_CACHE = 525,
+    VAR_STUB_NO_CACHE = 526,
+    VAR_LOG_SERVFAIL = 527,
+    VAR_DENY_ANY = 528,
+    VAR_UNKNOWN_SERVER_TIME_LIMIT = 529,
+    VAR_LOG_TAG_QUERYREPLY = 530,
+    VAR_STREAM_WAIT_SIZE = 531,
+    VAR_TLS_CIPHERS = 532,
+    VAR_TLS_CIPHERSUITES = 533,
+    VAR_TLS_USE_SNI = 534,
+    VAR_IPSET = 535,
+    VAR_IPSET_NAME_V4 = 536,
+    VAR_IPSET_NAME_V6 = 537,
+    VAR_TLS_SESSION_TICKET_KEYS = 538,
+    VAR_RPZ = 539,
+    VAR_TAGS = 540,
+    VAR_RPZ_ACTION_OVERRIDE = 541,
+    VAR_RPZ_CNAME_OVERRIDE = 542,
+    VAR_RPZ_LOG = 543,
+    VAR_RPZ_LOG_NAME = 544,
+    VAR_DYNLIB = 545,
+    VAR_DYNLIB_FILE = 546
   };
 #endif
 /* Tokens.  */
@@ -335,273 +349,287 @@ extern int yydebug;
 #define ANY 263
 #define ZONESTR 264
 #define STRING_ARG 265
-#define VAR_SERVER 266
-#define VAR_VERBOSITY 267
-#define VAR_NUM_THREADS 268
-#define VAR_PORT 269
-#define VAR_OUTGOING_RANGE 270
-#define VAR_INTERFACE 271
-#define VAR_DO_IP4 272
-#define VAR_DO_IP6 273
-#define VAR_PREFER_IP6 274
-#define VAR_DO_UDP 275
-#define VAR_DO_TCP 276
-#define VAR_TCP_MSS 277
-#define VAR_OUTGOING_TCP_MSS 278
-#define VAR_TCP_IDLE_TIMEOUT 279
-#define VAR_EDNS_TCP_KEEPALIVE 280
-#define VAR_EDNS_TCP_KEEPALIVE_TIMEOUT 281
-#define VAR_CHROOT 282
-#define VAR_USERNAME 283
-#define VAR_DIRECTORY 284
-#define VAR_LOGFILE 285
-#define VAR_PIDFILE 286
-#define VAR_MSG_CACHE_SIZE 287
-#define VAR_MSG_CACHE_SLABS 288
-#define VAR_NUM_QUERIES_PER_THREAD 289
-#define VAR_RRSET_CACHE_SIZE 290
-#define VAR_RRSET_CACHE_SLABS 291
-#define VAR_OUTGOING_NUM_TCP 292
-#define VAR_INFRA_HOST_TTL 293
-#define VAR_INFRA_LAME_TTL 294
-#define VAR_INFRA_CACHE_SLABS 295
-#define VAR_INFRA_CACHE_NUMHOSTS 296
-#define VAR_INFRA_CACHE_LAME_SIZE 297
-#define VAR_NAME 298
-#define VAR_STUB_ZONE 299
-#define VAR_STUB_HOST 300
-#define VAR_STUB_ADDR 301
-#define VAR_TARGET_FETCH_POLICY 302
-#define VAR_HARDEN_SHORT_BUFSIZE 303
-#define VAR_HARDEN_LARGE_QUERIES 304
-#define VAR_FORWARD_ZONE 305
-#define VAR_FORWARD_HOST 306
-#define VAR_FORWARD_ADDR 307
-#define VAR_DO_NOT_QUERY_ADDRESS 308
-#define VAR_HIDE_IDENTITY 309
-#define VAR_HIDE_VERSION 310
-#define VAR_IDENTITY 311
-#define VAR_VERSION 312
-#define VAR_HARDEN_GLUE 313
-#define VAR_MODULE_CONF 314
-#define VAR_TRUST_ANCHOR_FILE 315
-#define VAR_TRUST_ANCHOR 316
-#define VAR_VAL_OVERRIDE_DATE 317
-#define VAR_BOGUS_TTL 318
-#define VAR_VAL_CLEAN_ADDITIONAL 319
-#define VAR_VAL_PERMISSIVE_MODE 320
-#define VAR_INCOMING_NUM_TCP 321
-#define VAR_MSG_BUFFER_SIZE 322
-#define VAR_KEY_CACHE_SIZE 323
-#define VAR_KEY_CACHE_SLABS 324
-#define VAR_TRUSTED_KEYS_FILE 325
-#define VAR_VAL_NSEC3_KEYSIZE_ITERATIONS 326
-#define VAR_USE_SYSLOG 327
-#define VAR_OUTGOING_INTERFACE 328
-#define VAR_ROOT_HINTS 329
-#define VAR_DO_NOT_QUERY_LOCALHOST 330
-#define VAR_CACHE_MAX_TTL 331
-#define VAR_HARDEN_DNSSEC_STRIPPED 332
-#define VAR_ACCESS_CONTROL 333
-#define VAR_LOCAL_ZONE 334
-#define VAR_LOCAL_DATA 335
-#define VAR_INTERFACE_AUTOMATIC 336
-#define VAR_STATISTICS_INTERVAL 337
-#define VAR_DO_DAEMONIZE 338
-#define VAR_USE_CAPS_FOR_ID 339
-#define VAR_STATISTICS_CUMULATIVE 340
-#define VAR_OUTGOING_PORT_PERMIT 341
-#define VAR_OUTGOING_PORT_AVOID 342
-#define VAR_DLV_ANCHOR_FILE 343
-#define VAR_DLV_ANCHOR 344
-#define VAR_NEG_CACHE_SIZE 345
-#define VAR_HARDEN_REFERRAL_PATH 346
-#define VAR_PRIVATE_ADDRESS 347
-#define VAR_PRIVATE_DOMAIN 348
-#define VAR_REMOTE_CONTROL 349
-#define VAR_CONTROL_ENABLE 350
-#define VAR_CONTROL_INTERFACE 351
-#define VAR_CONTROL_PORT 352
-#define VAR_SERVER_KEY_FILE 353
-#define VAR_SERVER_CERT_FILE 354
-#define VAR_CONTROL_KEY_FILE 355
-#define VAR_CONTROL_CERT_FILE 356
-#define VAR_CONTROL_USE_CERT 357
-#define VAR_EXTENDED_STATISTICS 358
-#define VAR_LOCAL_DATA_PTR 359
-#define VAR_JOSTLE_TIMEOUT 360
-#define VAR_STUB_PRIME 361
-#define VAR_UNWANTED_REPLY_THRESHOLD 362
-#define VAR_LOG_TIME_ASCII 363
-#define VAR_DOMAIN_INSECURE 364
-#define VAR_PYTHON 365
-#define VAR_PYTHON_SCRIPT 366
-#define VAR_VAL_SIG_SKEW_MIN 367
-#define VAR_VAL_SIG_SKEW_MAX 368
-#define VAR_CACHE_MIN_TTL 369
-#define VAR_VAL_LOG_LEVEL 370
-#define VAR_AUTO_TRUST_ANCHOR_FILE 371
-#define VAR_KEEP_MISSING 372
-#define VAR_ADD_HOLDDOWN 373
-#define VAR_DEL_HOLDDOWN 374
-#define VAR_SO_RCVBUF 375
-#define VAR_EDNS_BUFFER_SIZE 376
-#define VAR_PREFETCH 377
-#define VAR_PREFETCH_KEY 378
-#define VAR_SO_SNDBUF 379
-#define VAR_SO_REUSEPORT 380
-#define VAR_HARDEN_BELOW_NXDOMAIN 381
-#define VAR_IGNORE_CD_FLAG 382
-#define VAR_LOG_QUERIES 383
-#define VAR_LOG_REPLIES 384
-#define VAR_LOG_LOCAL_ACTIONS 385
-#define VAR_TCP_UPSTREAM 386
-#define VAR_SSL_UPSTREAM 387
-#define VAR_SSL_SERVICE_KEY 388
-#define VAR_SSL_SERVICE_PEM 389
-#define VAR_SSL_PORT 390
-#define VAR_FORWARD_FIRST 391
-#define VAR_STUB_SSL_UPSTREAM 392
-#define VAR_FORWARD_SSL_UPSTREAM 393
-#define VAR_TLS_CERT_BUNDLE 394
-#define VAR_STUB_FIRST 395
-#define VAR_MINIMAL_RESPONSES 396
-#define VAR_RRSET_ROUNDROBIN 397
-#define VAR_MAX_UDP_SIZE 398
-#define VAR_DELAY_CLOSE 399
-#define VAR_UNBLOCK_LAN_ZONES 400
-#define VAR_INSECURE_LAN_ZONES 401
-#define VAR_INFRA_CACHE_MIN_RTT 402
-#define VAR_DNS64_PREFIX 403
-#define VAR_DNS64_SYNTHALL 404
-#define VAR_DNS64_IGNORE_AAAA 405
-#define VAR_DNSTAP 406
-#define VAR_DNSTAP_ENABLE 407
-#define VAR_DNSTAP_SOCKET_PATH 408
-#define VAR_DNSTAP_SEND_IDENTITY 409
-#define VAR_DNSTAP_SEND_VERSION 410
-#define VAR_DNSTAP_IDENTITY 411
-#define VAR_DNSTAP_VERSION 412
-#define VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES 413
-#define VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES 414
-#define VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES 415
-#define VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES 416
-#define VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES 417
-#define VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES 418
-#define VAR_RESPONSE_IP_TAG 419
-#define VAR_RESPONSE_IP 420
-#define VAR_RESPONSE_IP_DATA 421
-#define VAR_HARDEN_ALGO_DOWNGRADE 422
-#define VAR_IP_TRANSPARENT 423
-#define VAR_DISABLE_DNSSEC_LAME_CHECK 424
-#define VAR_IP_RATELIMIT 425
-#define VAR_IP_RATELIMIT_SLABS 426
-#define VAR_IP_RATELIMIT_SIZE 427
-#define VAR_RATELIMIT 428
-#define VAR_RATELIMIT_SLABS 429
-#define VAR_RATELIMIT_SIZE 430
-#define VAR_RATELIMIT_FOR_DOMAIN 431
-#define VAR_RATELIMIT_BELOW_DOMAIN 432
-#define VAR_IP_RATELIMIT_FACTOR 433
-#define VAR_RATELIMIT_FACTOR 434
-#define VAR_SEND_CLIENT_SUBNET 435
-#define VAR_CLIENT_SUBNET_ZONE 436
-#define VAR_CLIENT_SUBNET_ALWAYS_FORWARD 437
-#define VAR_CLIENT_SUBNET_OPCODE 438
-#define VAR_MAX_CLIENT_SUBNET_IPV4 439
-#define VAR_MAX_CLIENT_SUBNET_IPV6 440
-#define VAR_MIN_CLIENT_SUBNET_IPV4 441
-#define VAR_MIN_CLIENT_SUBNET_IPV6 442
-#define VAR_MAX_ECS_TREE_SIZE_IPV4 443
-#define VAR_MAX_ECS_TREE_SIZE_IPV6 444
-#define VAR_CAPS_WHITELIST 445
-#define VAR_CACHE_MAX_NEGATIVE_TTL 446
-#define VAR_PERMIT_SMALL_HOLDDOWN 447
-#define VAR_QNAME_MINIMISATION 448
-#define VAR_QNAME_MINIMISATION_STRICT 449
-#define VAR_IP_FREEBIND 450
-#define VAR_DEFINE_TAG 451
-#define VAR_LOCAL_ZONE_TAG 452
-#define VAR_ACCESS_CONTROL_TAG 453
-#define VAR_LOCAL_ZONE_OVERRIDE 454
-#define VAR_ACCESS_CONTROL_TAG_ACTION 455
-#define VAR_ACCESS_CONTROL_TAG_DATA 456
-#define VAR_VIEW 457
-#define VAR_ACCESS_CONTROL_VIEW 458
-#define VAR_VIEW_FIRST 459
-#define VAR_SERVE_EXPIRED 460
-#define VAR_SERVE_EXPIRED_TTL 461
-#define VAR_SERVE_EXPIRED_TTL_RESET 462
-#define VAR_SERVE_EXPIRED_REPLY_TTL 463
-#define VAR_SERVE_EXPIRED_CLIENT_TIMEOUT 464
-#define VAR_FAKE_DSA 465
-#define VAR_FAKE_SHA1 466
-#define VAR_LOG_IDENTITY 467
-#define VAR_HIDE_TRUSTANCHOR 468
-#define VAR_TRUST_ANCHOR_SIGNALING 469
-#define VAR_AGGRESSIVE_NSEC 470
-#define VAR_USE_SYSTEMD 471
-#define VAR_SHM_ENABLE 472
-#define VAR_SHM_KEY 473
-#define VAR_ROOT_KEY_SENTINEL 474
-#define VAR_DNSCRYPT 475
-#define VAR_DNSCRYPT_ENABLE 476
-#define VAR_DNSCRYPT_PORT 477
-#define VAR_DNSCRYPT_PROVIDER 478
-#define VAR_DNSCRYPT_SECRET_KEY 479
-#define VAR_DNSCRYPT_PROVIDER_CERT 480
-#define VAR_DNSCRYPT_PROVIDER_CERT_ROTATED 481
-#define VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE 482
-#define VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS 483
-#define VAR_DNSCRYPT_NONCE_CACHE_SIZE 484
-#define VAR_DNSCRYPT_NONCE_CACHE_SLABS 485
-#define VAR_IPSECMOD_ENABLED 486
-#define VAR_IPSECMOD_HOOK 487
-#define VAR_IPSECMOD_IGNORE_BOGUS 488
-#define VAR_IPSECMOD_MAX_TTL 489
-#define VAR_IPSECMOD_WHITELIST 490
-#define VAR_IPSECMOD_STRICT 491
-#define VAR_CACHEDB 492
-#define VAR_CACHEDB_BACKEND 493
-#define VAR_CACHEDB_SECRETSEED 494
-#define VAR_CACHEDB_REDISHOST 495
-#define VAR_CACHEDB_REDISPORT 496
-#define VAR_CACHEDB_REDISTIMEOUT 497
-#define VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM 498
-#define VAR_FOR_UPSTREAM 499
-#define VAR_AUTH_ZONE 500
-#define VAR_ZONEFILE 501
-#define VAR_MASTER 502
-#define VAR_URL 503
-#define VAR_FOR_DOWNSTREAM 504
-#define VAR_FALLBACK_ENABLED 505
-#define VAR_TLS_ADDITIONAL_PORT 506
-#define VAR_LOW_RTT 507
-#define VAR_LOW_RTT_PERMIL 508
-#define VAR_FAST_SERVER_PERMIL 509
-#define VAR_FAST_SERVER_NUM 510
-#define VAR_ALLOW_NOTIFY 511
-#define VAR_TLS_WIN_CERT 512
-#define VAR_TCP_CONNECTION_LIMIT 513
-#define VAR_FORWARD_NO_CACHE 514
-#define VAR_STUB_NO_CACHE 515
-#define VAR_LOG_SERVFAIL 516
-#define VAR_DENY_ANY 517
-#define VAR_UNKNOWN_SERVER_TIME_LIMIT 518
-#define VAR_LOG_TAG_QUERYREPLY 519
-#define VAR_STREAM_WAIT_SIZE 520
-#define VAR_TLS_CIPHERS 521
-#define VAR_TLS_CIPHERSUITES 522
-#define VAR_IPSET 523
-#define VAR_IPSET_NAME_V4 524
-#define VAR_IPSET_NAME_V6 525
-#define VAR_TLS_SESSION_TICKET_KEYS 526
-#define VAR_RPZ 527
-#define VAR_TAGS 528
-#define VAR_RPZ_ACTION_OVERRIDE 529
-#define VAR_RPZ_CNAME_OVERRIDE 530
-#define VAR_RPZ_LOG 531
-#define VAR_RPZ_LOG_NAME 532
+#define VAR_FORCE_TOPLEVEL 266
+#define VAR_SERVER 267
+#define VAR_VERBOSITY 268
+#define VAR_NUM_THREADS 269
+#define VAR_PORT 270
+#define VAR_OUTGOING_RANGE 271
+#define VAR_INTERFACE 272
+#define VAR_PREFER_IP4 273
+#define VAR_DO_IP4 274
+#define VAR_DO_IP6 275
+#define VAR_PREFER_IP6 276
+#define VAR_DO_UDP 277
+#define VAR_DO_TCP 278
+#define VAR_TCP_MSS 279
+#define VAR_OUTGOING_TCP_MSS 280
+#define VAR_TCP_IDLE_TIMEOUT 281
+#define VAR_EDNS_TCP_KEEPALIVE 282
+#define VAR_EDNS_TCP_KEEPALIVE_TIMEOUT 283
+#define VAR_CHROOT 284
+#define VAR_USERNAME 285
+#define VAR_DIRECTORY 286
+#define VAR_LOGFILE 287
+#define VAR_PIDFILE 288
+#define VAR_MSG_CACHE_SIZE 289
+#define VAR_MSG_CACHE_SLABS 290
+#define VAR_NUM_QUERIES_PER_THREAD 291
+#define VAR_RRSET_CACHE_SIZE 292
+#define VAR_RRSET_CACHE_SLABS 293
+#define VAR_OUTGOING_NUM_TCP 294
+#define VAR_INFRA_HOST_TTL 295
+#define VAR_INFRA_LAME_TTL 296
+#define VAR_INFRA_CACHE_SLABS 297
+#define VAR_INFRA_CACHE_NUMHOSTS 298
+#define VAR_INFRA_CACHE_LAME_SIZE 299
+#define VAR_NAME 300
+#define VAR_STUB_ZONE 301
+#define VAR_STUB_HOST 302
+#define VAR_STUB_ADDR 303
+#define VAR_TARGET_FETCH_POLICY 304
+#define VAR_HARDEN_SHORT_BUFSIZE 305
+#define VAR_HARDEN_LARGE_QUERIES 306
+#define VAR_FORWARD_ZONE 307
+#define VAR_FORWARD_HOST 308
+#define VAR_FORWARD_ADDR 309
+#define VAR_DO_NOT_QUERY_ADDRESS 310
+#define VAR_HIDE_IDENTITY 311
+#define VAR_HIDE_VERSION 312
+#define VAR_IDENTITY 313
+#define VAR_VERSION 314
+#define VAR_HARDEN_GLUE 315
+#define VAR_MODULE_CONF 316
+#define VAR_TRUST_ANCHOR_FILE 317
+#define VAR_TRUST_ANCHOR 318
+#define VAR_VAL_OVERRIDE_DATE 319
+#define VAR_BOGUS_TTL 320
+#define VAR_VAL_CLEAN_ADDITIONAL 321
+#define VAR_VAL_PERMISSIVE_MODE 322
+#define VAR_INCOMING_NUM_TCP 323
+#define VAR_MSG_BUFFER_SIZE 324
+#define VAR_KEY_CACHE_SIZE 325
+#define VAR_KEY_CACHE_SLABS 326
+#define VAR_TRUSTED_KEYS_FILE 327
+#define VAR_VAL_NSEC3_KEYSIZE_ITERATIONS 328
+#define VAR_USE_SYSLOG 329
+#define VAR_OUTGOING_INTERFACE 330
+#define VAR_ROOT_HINTS 331
+#define VAR_DO_NOT_QUERY_LOCALHOST 332
+#define VAR_CACHE_MAX_TTL 333
+#define VAR_HARDEN_DNSSEC_STRIPPED 334
+#define VAR_ACCESS_CONTROL 335
+#define VAR_LOCAL_ZONE 336
+#define VAR_LOCAL_DATA 337
+#define VAR_INTERFACE_AUTOMATIC 338
+#define VAR_STATISTICS_INTERVAL 339
+#define VAR_DO_DAEMONIZE 340
+#define VAR_USE_CAPS_FOR_ID 341
+#define VAR_STATISTICS_CUMULATIVE 342
+#define VAR_OUTGOING_PORT_PERMIT 343
+#define VAR_OUTGOING_PORT_AVOID 344
+#define VAR_DLV_ANCHOR_FILE 345
+#define VAR_DLV_ANCHOR 346
+#define VAR_NEG_CACHE_SIZE 347
+#define VAR_HARDEN_REFERRAL_PATH 348
+#define VAR_PRIVATE_ADDRESS 349
+#define VAR_PRIVATE_DOMAIN 350
+#define VAR_REMOTE_CONTROL 351
+#define VAR_CONTROL_ENABLE 352
+#define VAR_CONTROL_INTERFACE 353
+#define VAR_CONTROL_PORT 354
+#define VAR_SERVER_KEY_FILE 355
+#define VAR_SERVER_CERT_FILE 356
+#define VAR_CONTROL_KEY_FILE 357
+#define VAR_CONTROL_CERT_FILE 358
+#define VAR_CONTROL_USE_CERT 359
+#define VAR_EXTENDED_STATISTICS 360
+#define VAR_LOCAL_DATA_PTR 361
+#define VAR_JOSTLE_TIMEOUT 362
+#define VAR_STUB_PRIME 363
+#define VAR_UNWANTED_REPLY_THRESHOLD 364
+#define VAR_LOG_TIME_ASCII 365
+#define VAR_DOMAIN_INSECURE 366
+#define VAR_PYTHON 367
+#define VAR_PYTHON_SCRIPT 368
+#define VAR_VAL_SIG_SKEW_MIN 369
+#define VAR_VAL_SIG_SKEW_MAX 370
+#define VAR_CACHE_MIN_TTL 371
+#define VAR_VAL_LOG_LEVEL 372
+#define VAR_AUTO_TRUST_ANCHOR_FILE 373
+#define VAR_KEEP_MISSING 374
+#define VAR_ADD_HOLDDOWN 375
+#define VAR_DEL_HOLDDOWN 376
+#define VAR_SO_RCVBUF 377
+#define VAR_EDNS_BUFFER_SIZE 378
+#define VAR_PREFETCH 379
+#define VAR_PREFETCH_KEY 380
+#define VAR_SO_SNDBUF 381
+#define VAR_SO_REUSEPORT 382
+#define VAR_HARDEN_BELOW_NXDOMAIN 383
+#define VAR_IGNORE_CD_FLAG 384
+#define VAR_LOG_QUERIES 385
+#define VAR_LOG_REPLIES 386
+#define VAR_LOG_LOCAL_ACTIONS 387
+#define VAR_TCP_UPSTREAM 388
+#define VAR_SSL_UPSTREAM 389
+#define VAR_SSL_SERVICE_KEY 390
+#define VAR_SSL_SERVICE_PEM 391
+#define VAR_SSL_PORT 392
+#define VAR_FORWARD_FIRST 393
+#define VAR_STUB_SSL_UPSTREAM 394
+#define VAR_FORWARD_SSL_UPSTREAM 395
+#define VAR_TLS_CERT_BUNDLE 396
+#define VAR_STUB_FIRST 397
+#define VAR_MINIMAL_RESPONSES 398
+#define VAR_RRSET_ROUNDROBIN 399
+#define VAR_MAX_UDP_SIZE 400
+#define VAR_DELAY_CLOSE 401
+#define VAR_UNBLOCK_LAN_ZONES 402
+#define VAR_INSECURE_LAN_ZONES 403
+#define VAR_INFRA_CACHE_MIN_RTT 404
+#define VAR_DNS64_PREFIX 405
+#define VAR_DNS64_SYNTHALL 406
+#define VAR_DNS64_IGNORE_AAAA 407
+#define VAR_DNSTAP 408
+#define VAR_DNSTAP_ENABLE 409
+#define VAR_DNSTAP_SOCKET_PATH 410
+#define VAR_DNSTAP_IP 411
+#define VAR_DNSTAP_TLS 412
+#define VAR_DNSTAP_TLS_SERVER_NAME 413
+#define VAR_DNSTAP_TLS_CERT_BUNDLE 414
+#define VAR_DNSTAP_TLS_CLIENT_KEY_FILE 415
+#define VAR_DNSTAP_TLS_CLIENT_CERT_FILE 416
+#define VAR_DNSTAP_SEND_IDENTITY 417
+#define VAR_DNSTAP_SEND_VERSION 418
+#define VAR_DNSTAP_BIDIRECTIONAL 419
+#define VAR_DNSTAP_IDENTITY 420
+#define VAR_DNSTAP_VERSION 421
+#define VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES 422
+#define VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES 423
+#define VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES 424
+#define VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES 425
+#define VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES 426
+#define VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES 427
+#define VAR_RESPONSE_IP_TAG 428
+#define VAR_RESPONSE_IP 429
+#define VAR_RESPONSE_IP_DATA 430
+#define VAR_HARDEN_ALGO_DOWNGRADE 431
+#define VAR_IP_TRANSPARENT 432
+#define VAR_IP_DSCP 433
+#define VAR_DISABLE_DNSSEC_LAME_CHECK 434
+#define VAR_IP_RATELIMIT 435
+#define VAR_IP_RATELIMIT_SLABS 436
+#define VAR_IP_RATELIMIT_SIZE 437
+#define VAR_RATELIMIT 438
+#define VAR_RATELIMIT_SLABS 439
+#define VAR_RATELIMIT_SIZE 440
+#define VAR_RATELIMIT_FOR_DOMAIN 441
+#define VAR_RATELIMIT_BELOW_DOMAIN 442
+#define VAR_IP_RATELIMIT_FACTOR 443
+#define VAR_RATELIMIT_FACTOR 444
+#define VAR_SEND_CLIENT_SUBNET 445
+#define VAR_CLIENT_SUBNET_ZONE 446
+#define VAR_CLIENT_SUBNET_ALWAYS_FORWARD 447
+#define VAR_CLIENT_SUBNET_OPCODE 448
+#define VAR_MAX_CLIENT_SUBNET_IPV4 449
+#define VAR_MAX_CLIENT_SUBNET_IPV6 450
+#define VAR_MIN_CLIENT_SUBNET_IPV4 451
+#define VAR_MIN_CLIENT_SUBNET_IPV6 452
+#define VAR_MAX_ECS_TREE_SIZE_IPV4 453
+#define VAR_MAX_ECS_TREE_SIZE_IPV6 454
+#define VAR_CAPS_WHITELIST 455
+#define VAR_CACHE_MAX_NEGATIVE_TTL 456
+#define VAR_PERMIT_SMALL_HOLDDOWN 457
+#define VAR_QNAME_MINIMISATION 458
+#define VAR_QNAME_MINIMISATION_STRICT 459
+#define VAR_IP_FREEBIND 460
+#define VAR_DEFINE_TAG 461
+#define VAR_LOCAL_ZONE_TAG 462
+#define VAR_ACCESS_CONTROL_TAG 463
+#define VAR_LOCAL_ZONE_OVERRIDE 464
+#define VAR_ACCESS_CONTROL_TAG_ACTION 465
+#define VAR_ACCESS_CONTROL_TAG_DATA 466
+#define VAR_VIEW 467
+#define VAR_ACCESS_CONTROL_VIEW 468
+#define VAR_VIEW_FIRST 469
+#define VAR_SERVE_EXPIRED 470
+#define VAR_SERVE_EXPIRED_TTL 471
+#define VAR_SERVE_EXPIRED_TTL_RESET 472
+#define VAR_SERVE_EXPIRED_REPLY_TTL 473
+#define VAR_SERVE_EXPIRED_CLIENT_TIMEOUT 474
+#define VAR_FAKE_DSA 475
+#define VAR_FAKE_SHA1 476
+#define VAR_LOG_IDENTITY 477
+#define VAR_HIDE_TRUSTANCHOR 478
+#define VAR_TRUST_ANCHOR_SIGNALING 479
+#define VAR_AGGRESSIVE_NSEC 480
+#define VAR_USE_SYSTEMD 481
+#define VAR_SHM_ENABLE 482
+#define VAR_SHM_KEY 483
+#define VAR_ROOT_KEY_SENTINEL 484
+#define VAR_DNSCRYPT 485
+#define VAR_DNSCRYPT_ENABLE 486
+#define VAR_DNSCRYPT_PORT 487
+#define VAR_DNSCRYPT_PROVIDER 488
+#define VAR_DNSCRYPT_SECRET_KEY 489
+#define VAR_DNSCRYPT_PROVIDER_CERT 490
+#define VAR_DNSCRYPT_PROVIDER_CERT_ROTATED 491
+#define VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE 492
+#define VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS 493
+#define VAR_DNSCRYPT_NONCE_CACHE_SIZE 494
+#define VAR_DNSCRYPT_NONCE_CACHE_SLABS 495
+#define VAR_IPSECMOD_ENABLED 496
+#define VAR_IPSECMOD_HOOK 497
+#define VAR_IPSECMOD_IGNORE_BOGUS 498
+#define VAR_IPSECMOD_MAX_TTL 499
+#define VAR_IPSECMOD_WHITELIST 500
+#define VAR_IPSECMOD_STRICT 501
+#define VAR_CACHEDB 502
+#define VAR_CACHEDB_BACKEND 503
+#define VAR_CACHEDB_SECRETSEED 504
+#define VAR_CACHEDB_REDISHOST 505
+#define VAR_CACHEDB_REDISPORT 506
+#define VAR_CACHEDB_REDISTIMEOUT 507
+#define VAR_CACHEDB_REDISEXPIRERECORDS 508
+#define VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM 509
+#define VAR_FOR_UPSTREAM 510
+#define VAR_AUTH_ZONE 511
+#define VAR_ZONEFILE 512
+#define VAR_MASTER 513
+#define VAR_URL 514
+#define VAR_FOR_DOWNSTREAM 515
+#define VAR_FALLBACK_ENABLED 516
+#define VAR_TLS_ADDITIONAL_PORT 517
+#define VAR_LOW_RTT 518
+#define VAR_LOW_RTT_PERMIL 519
+#define VAR_FAST_SERVER_PERMIL 520
+#define VAR_FAST_SERVER_NUM 521
+#define VAR_ALLOW_NOTIFY 522
+#define VAR_TLS_WIN_CERT 523
+#define VAR_TCP_CONNECTION_LIMIT 524
+#define VAR_FORWARD_NO_CACHE 525
+#define VAR_STUB_NO_CACHE 526
+#define VAR_LOG_SERVFAIL 527
+#define VAR_DENY_ANY 528
+#define VAR_UNKNOWN_SERVER_TIME_LIMIT 529
+#define VAR_LOG_TAG_QUERYREPLY 530
+#define VAR_STREAM_WAIT_SIZE 531
+#define VAR_TLS_CIPHERS 532
+#define VAR_TLS_CIPHERSUITES 533
+#define VAR_TLS_USE_SNI 534
+#define VAR_IPSET 535
+#define VAR_IPSET_NAME_V4 536
+#define VAR_IPSET_NAME_V6 537
+#define VAR_TLS_SESSION_TICKET_KEYS 538
+#define VAR_RPZ 539
+#define VAR_TAGS 540
+#define VAR_RPZ_ACTION_OVERRIDE 541
+#define VAR_RPZ_CNAME_OVERRIDE 542
+#define VAR_RPZ_LOG 543
+#define VAR_RPZ_LOG_NAME 544
+#define VAR_DYNLIB 545
+#define VAR_DYNLIB_FILE 546
 
 /* Value type.  */
 #if ! defined YYSTYPE && ! defined YYSTYPE_IS_DECLARED
@@ -611,7 +639,7 @@ union YYSTYPE
 
 	char*	str;
 
-#line 615 "util/configparser.h"
+#line 643 "util/configparser.h"
 
 };
 typedef union YYSTYPE YYSTYPE;