diff options
author | Tomas Krizek <tomas.krizek@nic.cz> | 2020-01-07 18:39:56 +0100 |
---|---|---|
committer | Tomas Krizek <tomas.krizek@nic.cz> | 2020-01-15 10:38:18 +0100 |
commit | 90e86bfa60d72dbdc6e8cfaef5bb2719314f266d (patch) | |
tree | 7ec6a9376445054c82d84825ae334c3e08506363 /modules/daf | |
parent | doc: remove Operations/Monitoring - it was duplicate of Config/Monitoring (diff) | |
download | knot-resolver-90e86bfa60d72dbdc6e8cfaef5bb2719314f266d.tar.xz knot-resolver-90e86bfa60d72dbdc6e8cfaef5bb2719314f266d.zip |
doc: restructure into smaller sections
Diffstat (limited to 'modules/daf')
-rw-r--r-- | modules/daf/README.rst | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/modules/daf/README.rst b/modules/daf/README.rst index 32b69c51..7e749c3a 100644 --- a/modules/daf/README.rst +++ b/modules/daf/README.rst @@ -1,12 +1,12 @@ .. _mod-daf: DNS Application Firewall ------------------------- +======================== This module is a high-level interface for other powerful filtering modules and DNS views. It provides an easy interface to apply and monitor DNS filtering rules and a persistent memory for them. It also provides a restful service interface and an HTTP interface. Example configuration -^^^^^^^^^^^^^^^^^^^^^ +--------------------- Firewall rules are declarative and consist of filters and actions. Filters have ``field operator operand`` notation (e.g. ``qname = example.com``), and may be chained using AND/OR keywords. Actions may or may not have parameters after the action name. @@ -80,14 +80,14 @@ If you're not sure what firewall rules are in effect, see ``daf.rules``: } Web interface -^^^^^^^^^^^^^ +------------- If you have :ref:`HTTP/2 <mod-http>` loaded, the firewall automatically loads as a snippet. You can create, track, suspend and remove firewall rules from the web interface. If you load both modules, you have to load `daf` after `http`. RESTful interface -^^^^^^^^^^^^^^^^^ +----------------- The module also exports a RESTful API for operations over rule chains. |