KNOTC(8) Knot DNS KNOTC(8) (NAME) knotc - Knot DNS (SYNOPSIS) knotc [_] [] [] (DESCRIPTION) knotd . knotc . (Config options) -c, --config file ( /etc/knot/knot.conf ). -C, --confdb directory ( /var/lib/knot/confdb ). . (Options) -m, --max-conf-size MiB ( ). -s, --socket path ( /run/knot/knot.sock ). -t, --timeout seconds . 0 ( 60 ). <#control-timeout> Control . -b, --blocking . . -e, --extended ( ). -f, --force . . -x, --mono . -X, --color (pipe). -v, --verbose . -h, --help . -V, --version . -VV . (Actions) status [detail] . version workers configure cert-key . stop . reload . ! stats [module[.counter]] () . 0 force . zone-check [zone...] . . force . (*) zone-status [zone...] [filter] . +role +serial +transaction +events +freeze +catalog. --extended . . --mono --color . : - (master) / - (slave) () - / - - . zone-reload [zone...] . () () . ! force . (#) zone-refresh [zone...] . . . (#) zone-retransfer [zone...] . . . (#) zone-notify [zone...] NOTIFY . NOTIFY . (#) zone-flush [zone...] [+outdir directory] . force . ( ) . . (#) zone-backup [zone...] +backupdir directory [filter...] . +zonefile +journal +timers +kaspdb +keysonly +catalog +quic +nozonefile +nojournal +notimers +nokaspdb +nokeysonly +nocatalog +noquic. KASP ( KASP) QUIC . +zonefile +timers +kaspdb +catalog +quic +nojournal +nokeysonly . +noquic . . +keysonly . . zone-freeze . force backupdir . . (#) zone-restore [zone...] +backupdir directory [filter...] . zone-backup . Knot DNS 3.1 force . . (#) zone-sign [zone...] DNSSEC . . DNSSEC . (#) zone-validate [zone...] DNSSEC . ! (#) zone-keys-load [zone...] DNSSEC KASP ( ). ( ). (#) zone-key-rollover zone key_type (rollover). . ksk ( CSK) zsk . DNSSEC . ! (#) zone-ksk-submitted zone... [+ttl seconds] KSK (submission) . DS KSK KSK . +ttl TTL DS KSK . (#) zone-freeze [zone...] . () ( DNSSEC) . 8 DDNS ( ) . ! (#) zone-thaw [zone...] . (#) zone-xfr-freeze [zone...] AXFR/IXFR (). . (#) zone-xfr-thaw [zone...] XFR. (#) zone-read zone [owner [type]] . zone-begin zone... [+benevolent] . +benevolent . zone-commit zone... . . zone-abort zone... . . zone-diff zone . zone-get zone [owner [type]] . zone-set zone owner [ttl] type rdata . rrset ttl . zone-unset zone owner [type [rdata]] . zone-purge zone... [+orphan] [filter...] / KASP . +expire +zonefile +journal +timers +kaspdb +catalog. . +orphan ( ). (orphan) . zone-freeze . force . (#) zone-stats zone [module[.counter]] () . 0 force . zone-serial-set zone [[+]serial] SOA . + ( MAX 2147483647 ). SOA . SOA . SOA . conf-init . ( sudo -u knot knotc conf-init). (*) conf-check . (*) conf-import filename [+nopurge] . ( sudo -u knot knotc conf-import ...). +nopurge . ! (*) conf-export [filename] [+schema] ( JSON) . (*) conf-list [item] . conf-read [item] . conf-begin . . conf-commit . conf-abort ( ) . conf-diff [item] . conf-get [item] . conf-set item [data...] . conf-unset [item] [data...] . (Notes) -- zone . @ owner . item section[[id]][.name] . (*) . (#) (blocking) . -b -f . knotc : o knotc . . o () knotc . OK . . zone-flush zone-backup zone-restore knotd . knotd . (Interactive mode) . ~/.editrc . editrc(5) . ~/.knotc_history . (EXIT VALUES) 0 . . (EXAMPLES) (Reload the whole server configuration) $ knotc reload example.com example.org (Flush the example.com and example.org zones) $ knotc zone-flush example.com example.org (Get the current server configuration) $ knotc conf-read server (Get the list of the current zones) $ knotc conf-read zone.domain example.com (Get the primary servers for the example.com zone) $ knotc conf-read 'zone[example.com].master' example.org (Add example.org zone with a zonefile location) $ knotc conf-begin $ knotc conf-set 'zone[example.org]' $ knotc conf-set 'zone[example.org].file' '/var/zones/example.org.zone' $ knotc conf-commit SOA (Get the SOA record for each configured zone) $ knotc zone-read -- @ SOA (SEE ALSO) knotd(8), knot.conf(5), editrc(5). (AUTHOR) CZ.NIC, z.s.p.o. and contributors (COPYRIGHT) Copyright (C) CZ.NIC, z.s.p.o. and contributors 3.5.5 2026-06-12 KNOTC(8)