summaryrefslogtreecommitdiffstats
path: root/modules/daf
diff options
context:
space:
mode:
authorTomas Krizek <tomas.krizek@nic.cz>2020-01-07 18:39:56 +0100
committerTomas Krizek <tomas.krizek@nic.cz>2020-01-15 10:38:18 +0100
commit90e86bfa60d72dbdc6e8cfaef5bb2719314f266d (patch)
tree7ec6a9376445054c82d84825ae334c3e08506363 /modules/daf
parentdoc: remove Operations/Monitoring - it was duplicate of Config/Monitoring (diff)
downloadknot-resolver-90e86bfa60d72dbdc6e8cfaef5bb2719314f266d.tar.xz
knot-resolver-90e86bfa60d72dbdc6e8cfaef5bb2719314f266d.zip
doc: restructure into smaller sections
Diffstat (limited to 'modules/daf')
-rw-r--r--modules/daf/README.rst8
1 files changed, 4 insertions, 4 deletions
diff --git a/modules/daf/README.rst b/modules/daf/README.rst
index 32b69c51..7e749c3a 100644
--- a/modules/daf/README.rst
+++ b/modules/daf/README.rst
@@ -1,12 +1,12 @@
.. _mod-daf:
DNS Application Firewall
-------------------------
+========================
This module is a high-level interface for other powerful filtering modules and DNS views. It provides an easy interface to apply and monitor DNS filtering rules and a persistent memory for them. It also provides a restful service interface and an HTTP interface.
Example configuration
-^^^^^^^^^^^^^^^^^^^^^
+---------------------
Firewall rules are declarative and consist of filters and actions. Filters have ``field operator operand`` notation (e.g. ``qname = example.com``), and may be chained using AND/OR keywords. Actions may or may not have parameters after the action name.
@@ -80,14 +80,14 @@ If you're not sure what firewall rules are in effect, see ``daf.rules``:
}
Web interface
-^^^^^^^^^^^^^
+-------------
If you have :ref:`HTTP/2 <mod-http>` loaded, the firewall automatically loads as a snippet.
You can create, track, suspend and remove firewall rules from the web interface.
If you load both modules, you have to load `daf` after `http`.
RESTful interface
-^^^^^^^^^^^^^^^^^
+-----------------
The module also exports a RESTful API for operations over rule chains.