This unit is provided by:
Options
-
[Install]-
WantedBy=multi-user.target
-
-
[Service]-
AmbientCapabilities=CAP_NET_BIND_SERVICE -
CapabilityBoundingSet=CAP_NET_BIND_SERVICE -
ExecStart=/usr/bin/dnsdist --config /etc/dnsdist/dnsdist-%i.conf --supervised --disable-syslog -
ExecStart=/usr/bin/dnsdist --config /etc/dnsdist/dnsdist-%i.conf -u dnsdist -g dnsdist --supervised --disable-syslog -
ExecStartPre=/usr/bin/dnsdist --config /etc/dnsdist/dnsdist-%i.conf --check-config -
ExecStartPre=/usr/bin/dnsdist --config /etc/dnsdist/dnsdist-%i.conf -u dnsdist -g dnsdist --check-config -
Group=_dnsdist -
Group=dnsdist -
LimitNOFILE=16384 -
LockPersonalityIntroduced in systemd 235=yes -
NoNewPrivilegesIntroduced in systemd 239=yes -
PrivateDevicesIntroduced in systemd 209=yes -
PrivateTmp=yes -
ProtectClockIntroduced in systemd 245=yes -
ProtectControlGroupsIntroduced in systemd 232=yes -
ProtectHomeIntroduced in systemd 214=yes -
ProtectHostnameIntroduced in systemd 242=yes -
ProtectKernelLogsIntroduced in systemd 244=yes -
ProtectKernelModulesIntroduced in systemd 232=yes -
ProtectKernelTunablesIntroduced in systemd 232=yes -
ProtectSystemIntroduced in systemd 214=full -
Restart=on-failure -
RestartSec=2 -
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 -
RestrictNamespacesIntroduced in systemd 233=yes -
RestrictRealtimeIntroduced in systemd 231=yes -
RestrictSUIDSGIDIntroduced in systemd 242=yes -
StartLimitInterval=0 -
SyslogIdentifier=dnsdist-%i -
SystemCallArchitectures=native -
SystemCallFilter=~ @clock @debug @module @mount @raw-io @reboot @swap @cpu-emulation @obsolete -
TasksMax=8192 -
TimeoutStopSecIntroduced in systemd 188=5 -
Type=notify -
User=_dnsdist -
User=dnsdist
-
-
[Unit]-
After=network-online.target -
Description=DNS Loadbalancer -
Documentation=man:dnsdist(1) https://dnsdist.org -
Wants=network-online.target
-
Additionnal notes
Nothing here.