Configure Options

NSD can be configured using GNU autoconf’s configure script. In addition to standard configure options, one may use the following:


Specify the C compiler. The default is gcc or cc. The compiler must support ANSI C89.


Specify the C preprocessor flags. Such as -I<includedir>.


Specify the C compiler flags. These include code generation, optimisation, warning, and debugging flags. These flags are also passed to the linker.

The default for gcc is -g -O2.


Specify the linker (defaults to the C compiler).


Specify linker flags.


Specify additional libraries to link with.


Configure NSD as a root server. Unless this option is specified, NSD will refuse to serve the . zone as a misconfiguration safeguard.


Disables IPv6 support in NSD.


Enable some internal development checks. Useful if you want to modify NSD. This option enables the standard C “assert” macro and compiler warnings.

This will instruct NSD to be stricter when validating its input. This could lead to a reduced service level.


Enables BIND8-like statistics.


Enables rate limiting, based on query name, type and source.


Enables draft RRtypes.


Specified, NSD configuration directory, default /etc/nsd.


Pathname to the NSD configuration file, default /etc/nsd/nsd.conf.


Pathname to the NSD pidfile, default is platform specific, mostly /var/run/


Pathname to the NSD database, default is /etc/nsd/nsd.db.


NSD default location for master zone files, default /etc/nsd/.


User name or ID to answer the queries with, default is nsd.


Specify the syslog facility to use. The default is LOG_DAEMON. See the syslog(3) manual page for the available facilities.


Specity the location of the libevent library (or libev). --with-libevent=no uses a builtin portable implementation (select()).


Specify the location of the OpenSSL libraries. OpenSSL 0.9.7 or higher is required for TSIG support.


Startup priority for NSD.


Shutdown priority for NSD.


Set the default TCP timeout (in seconds). The default is 120 seconds.


Disable NSEC3 support. With NSEC3 support enabled, very large zones, also non-NSEC3 zones, use about 20% more memory.


Disable minimal responses. If disabled, responses are more likely to get truncated, resulting in TCP fallback. When enabled (by default) NSD will leave out RRsets to make responses fit inside one datagram, but for shorter responses the full normal response is carried.


Disable large file support (64 bit file lengths). Makes off_t a 32bit length during compilation.