Cookbooks
bind
documentation
Bind Acl

Back to resource list

bind_acl

This resource allows you to create a named ACL list within the BIND configuration.

Actions

ActionDescription
:createCreates a BIND ACL list

Properties

NameTypeDefaultDescription
bind_configStringdefaultName of the bind_config resource to notify actions on
entriesArray[]An array of strings representing each acl entry

entries

Each entry should be a valid BIND address match list. This means it can be:

  • an IP address
  • an IP prefix
  • a key id
  • the name of a different address march list from another acl statement
  • a nested address match list enclosed in braces

Predefined ACLs (from BIND itself) which do not need additional configuration are: any, none, localhost, and localnets.

Examples

bind_acl 'google-dns-servers' do
  entries [
    '8.8.8.8',
    '8.8.4.4'
  ]
end
 
bind_acl 'internal-dns' do
  entries [
    '! 10.1.1.1',
    '10/8'
  ]
end
 
bind_acl 'tsig_key' do
  entries [
    'key "internal-key"',
  ]
end