published on Monday, May 4, 2026 by fortinetdev
published on Monday, May 4, 2026 by fortinetdev
Configure DNS.
Create SystempSystemDns Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new SystempSystemDns(name: string, args: SystempSystemDnsArgs, opts?: CustomResourceOptions);@overload
def SystempSystemDns(resource_name: str,
args: SystempSystemDnsArgs,
opts: Optional[ResourceOptions] = None)
@overload
def SystempSystemDns(resource_name: str,
opts: Optional[ResourceOptions] = None,
devprof: Optional[str] = None,
ip6_primary: Optional[str] = None,
log: Optional[str] = None,
cache_notfound_responses: Optional[str] = None,
alt_primary: Optional[str] = None,
dns_cache_limit: Optional[float] = None,
dns_cache_ttl: Optional[float] = None,
dns_over_tls: Optional[str] = None,
domains: Optional[Sequence[str]] = None,
ip6_secondary: Optional[str] = None,
fqdn_max_refresh: Optional[float] = None,
fqdn_min_refresh: Optional[float] = None,
hostname_limit: Optional[float] = None,
hostname_ttl: Optional[float] = None,
interface_select_method: Optional[str] = None,
alt_secondary: Optional[str] = None,
interfaces: Optional[Sequence[str]] = None,
fqdn_cache_ttl: Optional[float] = None,
adom: Optional[str] = None,
primary: Optional[str] = None,
protocols: Optional[Sequence[str]] = None,
retry: Optional[float] = None,
root_servers: Optional[str] = None,
scopetype: Optional[str] = None,
secondary: Optional[str] = None,
server_hostnames: Optional[Sequence[str]] = None,
server_select_method: Optional[str] = None,
source_ip: Optional[str] = None,
source_ip_interfaces: Optional[Sequence[str]] = None,
ssl_certificates: Optional[Sequence[str]] = None,
systemp_system_dns_id: Optional[str] = None,
timeout: Optional[float] = None,
vrf_select: Optional[float] = None)func NewSystempSystemDns(ctx *Context, name string, args SystempSystemDnsArgs, opts ...ResourceOption) (*SystempSystemDns, error)public SystempSystemDns(string name, SystempSystemDnsArgs args, CustomResourceOptions? opts = null)
public SystempSystemDns(String name, SystempSystemDnsArgs args)
public SystempSystemDns(String name, SystempSystemDnsArgs args, CustomResourceOptions options)
type: fortimanager:SystempSystemDns
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "fortimanager_systempsystemdns" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args SystempSystemDnsArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args SystempSystemDnsArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args SystempSystemDnsArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args SystempSystemDnsArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args SystempSystemDnsArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var systempSystemDnsResource = new Fortimanager.SystempSystemDns("systempSystemDnsResource", new()
{
Devprof = "string",
Ip6Primary = "string",
Log = "string",
CacheNotfoundResponses = "string",
AltPrimary = "string",
DnsCacheLimit = 0,
DnsCacheTtl = 0,
DnsOverTls = "string",
Domains = new[]
{
"string",
},
Ip6Secondary = "string",
FqdnMaxRefresh = 0,
FqdnMinRefresh = 0,
HostnameLimit = 0,
HostnameTtl = 0,
InterfaceSelectMethod = "string",
AltSecondary = "string",
Interfaces = new[]
{
"string",
},
FqdnCacheTtl = 0,
Adom = "string",
Primary = "string",
Protocols = new[]
{
"string",
},
Retry = 0,
RootServers = "string",
Scopetype = "string",
Secondary = "string",
ServerHostnames = new[]
{
"string",
},
ServerSelectMethod = "string",
SourceIp = "string",
SourceIpInterfaces = new[]
{
"string",
},
SslCertificates = new[]
{
"string",
},
SystempSystemDnsId = "string",
Timeout = 0,
VrfSelect = 0,
});
example, err := fortimanager.NewSystempSystemDns(ctx, "systempSystemDnsResource", &fortimanager.SystempSystemDnsArgs{
Devprof: pulumi.String("string"),
Ip6Primary: pulumi.String("string"),
Log: pulumi.String("string"),
CacheNotfoundResponses: pulumi.String("string"),
AltPrimary: pulumi.String("string"),
DnsCacheLimit: pulumi.Float64(0),
DnsCacheTtl: pulumi.Float64(0),
DnsOverTls: pulumi.String("string"),
Domains: pulumi.StringArray{
pulumi.String("string"),
},
Ip6Secondary: pulumi.String("string"),
FqdnMaxRefresh: pulumi.Float64(0),
FqdnMinRefresh: pulumi.Float64(0),
HostnameLimit: pulumi.Float64(0),
HostnameTtl: pulumi.Float64(0),
InterfaceSelectMethod: pulumi.String("string"),
AltSecondary: pulumi.String("string"),
Interfaces: pulumi.StringArray{
pulumi.String("string"),
},
FqdnCacheTtl: pulumi.Float64(0),
Adom: pulumi.String("string"),
Primary: pulumi.String("string"),
Protocols: pulumi.StringArray{
pulumi.String("string"),
},
Retry: pulumi.Float64(0),
RootServers: pulumi.String("string"),
Scopetype: pulumi.String("string"),
Secondary: pulumi.String("string"),
ServerHostnames: pulumi.StringArray{
pulumi.String("string"),
},
ServerSelectMethod: pulumi.String("string"),
SourceIp: pulumi.String("string"),
SourceIpInterfaces: pulumi.StringArray{
pulumi.String("string"),
},
SslCertificates: pulumi.StringArray{
pulumi.String("string"),
},
SystempSystemDnsId: pulumi.String("string"),
Timeout: pulumi.Float64(0),
VrfSelect: pulumi.Float64(0),
})
resource "fortimanager_systempsystemdns" "systempSystemDnsResource" {
devprof = "string"
ip6_primary = "string"
log = "string"
cache_notfound_responses = "string"
alt_primary = "string"
dns_cache_limit = 0
dns_cache_ttl = 0
dns_over_tls = "string"
domains = ["string"]
ip6_secondary = "string"
fqdn_max_refresh = 0
fqdn_min_refresh = 0
hostname_limit = 0
hostname_ttl = 0
interface_select_method = "string"
alt_secondary = "string"
interfaces = ["string"]
fqdn_cache_ttl = 0
adom = "string"
primary = "string"
protocols = ["string"]
retry = 0
root_servers = "string"
scopetype = "string"
secondary = "string"
server_hostnames = ["string"]
server_select_method = "string"
source_ip = "string"
source_ip_interfaces = ["string"]
ssl_certificates = ["string"]
systemp_system_dns_id = "string"
timeout = 0
vrf_select = 0
}
var systempSystemDnsResource = new SystempSystemDns("systempSystemDnsResource", SystempSystemDnsArgs.builder()
.devprof("string")
.ip6Primary("string")
.log("string")
.cacheNotfoundResponses("string")
.altPrimary("string")
.dnsCacheLimit(0.0)
.dnsCacheTtl(0.0)
.dnsOverTls("string")
.domains("string")
.ip6Secondary("string")
.fqdnMaxRefresh(0.0)
.fqdnMinRefresh(0.0)
.hostnameLimit(0.0)
.hostnameTtl(0.0)
.interfaceSelectMethod("string")
.altSecondary("string")
.interfaces("string")
.fqdnCacheTtl(0.0)
.adom("string")
.primary("string")
.protocols("string")
.retry(0.0)
.rootServers("string")
.scopetype("string")
.secondary("string")
.serverHostnames("string")
.serverSelectMethod("string")
.sourceIp("string")
.sourceIpInterfaces("string")
.sslCertificates("string")
.systempSystemDnsId("string")
.timeout(0.0)
.vrfSelect(0.0)
.build());
systemp_system_dns_resource = fortimanager.SystempSystemDns("systempSystemDnsResource",
devprof="string",
ip6_primary="string",
log="string",
cache_notfound_responses="string",
alt_primary="string",
dns_cache_limit=float(0),
dns_cache_ttl=float(0),
dns_over_tls="string",
domains=["string"],
ip6_secondary="string",
fqdn_max_refresh=float(0),
fqdn_min_refresh=float(0),
hostname_limit=float(0),
hostname_ttl=float(0),
interface_select_method="string",
alt_secondary="string",
interfaces=["string"],
fqdn_cache_ttl=float(0),
adom="string",
primary="string",
protocols=["string"],
retry=float(0),
root_servers="string",
scopetype="string",
secondary="string",
server_hostnames=["string"],
server_select_method="string",
source_ip="string",
source_ip_interfaces=["string"],
ssl_certificates=["string"],
systemp_system_dns_id="string",
timeout=float(0),
vrf_select=float(0))
const systempSystemDnsResource = new fortimanager.SystempSystemDns("systempSystemDnsResource", {
devprof: "string",
ip6Primary: "string",
log: "string",
cacheNotfoundResponses: "string",
altPrimary: "string",
dnsCacheLimit: 0,
dnsCacheTtl: 0,
dnsOverTls: "string",
domains: ["string"],
ip6Secondary: "string",
fqdnMaxRefresh: 0,
fqdnMinRefresh: 0,
hostnameLimit: 0,
hostnameTtl: 0,
interfaceSelectMethod: "string",
altSecondary: "string",
interfaces: ["string"],
fqdnCacheTtl: 0,
adom: "string",
primary: "string",
protocols: ["string"],
retry: 0,
rootServers: "string",
scopetype: "string",
secondary: "string",
serverHostnames: ["string"],
serverSelectMethod: "string",
sourceIp: "string",
sourceIpInterfaces: ["string"],
sslCertificates: ["string"],
systempSystemDnsId: "string",
timeout: 0,
vrfSelect: 0,
});
type: fortimanager:SystempSystemDns
properties:
adom: string
altPrimary: string
altSecondary: string
cacheNotfoundResponses: string
devprof: string
dnsCacheLimit: 0
dnsCacheTtl: 0
dnsOverTls: string
domains:
- string
fqdnCacheTtl: 0
fqdnMaxRefresh: 0
fqdnMinRefresh: 0
hostnameLimit: 0
hostnameTtl: 0
interfaceSelectMethod: string
interfaces:
- string
ip6Primary: string
ip6Secondary: string
log: string
primary: string
protocols:
- string
retry: 0
rootServers: string
scopetype: string
secondary: string
serverHostnames:
- string
serverSelectMethod: string
sourceIp: string
sourceIpInterfaces:
- string
sslCertificates:
- string
systempSystemDnsId: string
timeout: 0
vrfSelect: 0
SystempSystemDns Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The SystempSystemDns resource accepts the following input properties:
- Devprof string
- Devprof.
- Adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - Alt
Primary string - Alternate primary DNS server. This is not used as a failover DNS server.
- Alt
Secondary string - Alternate secondary DNS server. This is not used as a failover DNS server.
- Cache
Notfound stringResponses - Enable/disable response from the DNS server when a record is not in cache. Valid values:
disable,enable. - Dns
Cache doubleLimit - Maximum number of records in the DNS cache.
- Dns
Cache doubleTtl - Duration in seconds that the DNS cache retains information.
- Dns
Over stringTls - Enable/disable/enforce DNS over TLS. Valid values:
disable,enable,enforce. - Domains List<string>
- Support meta variable Search suffix list for hostname lookup.
- Fqdn
Cache doubleTtl - FQDN cache time to live in seconds (0 - 86400, default = 0).
- Fqdn
Max doubleRefresh - FQDN cache maximum refresh time in seconds (3600 - 86400, default = 3600).
- Fqdn
Min doubleRefresh - FQDN cache minimum refresh time in seconds (10 - 3600, default = 60).
- Hostname
Limit double - Limit of the number of hostname table entries (0 - 50000).
- Hostname
Ttl double - TTL of hostname table entries (60 - 86400).
- Interface
Select stringMethod - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - Interfaces List<string>
- Support meta variable Specify outgoing interface to reach server.
- Ip6Primary string
- Primary DNS server IPv6 address.
- Ip6Secondary string
- Secondary DNS server IPv6 address.
- Log string
- Local DNS log setting. Valid values:
disable,error,all. - Primary string
- Support meta variable Primary DNS server IP address.
- Protocols List<string>
- DNS transport protocols. Valid values:
cleartext,dot,doh. - Retry double
- Number of times to retry (0 - 5).
- Root
Servers string - Configure up to two preferred servers that serve the DNS root zone (default uses all 13 root servers).
- Scopetype string
- The scope of application of the resource. Valid values:
inherit,adom. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - Secondary string
- Support meta variable Secondary DNS server IP address.
- Server
Hostnames List<string> - DNS server host name list.
- Server
Select stringMethod - Specify how configured servers are prioritized. Valid values:
least-rtt,failover. - Source
Ip string - IP address used by the DNS server as its source IP.
- Source
Ip List<string>Interfaces - IP address of the specified interface as the source IP address.
- Ssl
Certificates List<string> - Name of local certificate for SSL connections.
- Systemp
System stringDns Id - an identifier for the resource.
- Timeout double
- DNS query timeout interval in seconds (1 - 10).
- Vrf
Select double - VRF ID used for connection to server.
- Devprof string
- Devprof.
- Adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - Alt
Primary string - Alternate primary DNS server. This is not used as a failover DNS server.
- Alt
Secondary string - Alternate secondary DNS server. This is not used as a failover DNS server.
- Cache
Notfound stringResponses - Enable/disable response from the DNS server when a record is not in cache. Valid values:
disable,enable. - Dns
Cache float64Limit - Maximum number of records in the DNS cache.
- Dns
Cache float64Ttl - Duration in seconds that the DNS cache retains information.
- Dns
Over stringTls - Enable/disable/enforce DNS over TLS. Valid values:
disable,enable,enforce. - Domains []string
- Support meta variable Search suffix list for hostname lookup.
- Fqdn
Cache float64Ttl - FQDN cache time to live in seconds (0 - 86400, default = 0).
- Fqdn
Max float64Refresh - FQDN cache maximum refresh time in seconds (3600 - 86400, default = 3600).
- Fqdn
Min float64Refresh - FQDN cache minimum refresh time in seconds (10 - 3600, default = 60).
- Hostname
Limit float64 - Limit of the number of hostname table entries (0 - 50000).
- Hostname
Ttl float64 - TTL of hostname table entries (60 - 86400).
- Interface
Select stringMethod - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - Interfaces []string
- Support meta variable Specify outgoing interface to reach server.
- Ip6Primary string
- Primary DNS server IPv6 address.
- Ip6Secondary string
- Secondary DNS server IPv6 address.
- Log string
- Local DNS log setting. Valid values:
disable,error,all. - Primary string
- Support meta variable Primary DNS server IP address.
- Protocols []string
- DNS transport protocols. Valid values:
cleartext,dot,doh. - Retry float64
- Number of times to retry (0 - 5).
- Root
Servers string - Configure up to two preferred servers that serve the DNS root zone (default uses all 13 root servers).
- Scopetype string
- The scope of application of the resource. Valid values:
inherit,adom. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - Secondary string
- Support meta variable Secondary DNS server IP address.
- Server
Hostnames []string - DNS server host name list.
- Server
Select stringMethod - Specify how configured servers are prioritized. Valid values:
least-rtt,failover. - Source
Ip string - IP address used by the DNS server as its source IP.
- Source
Ip []stringInterfaces - IP address of the specified interface as the source IP address.
- Ssl
Certificates []string - Name of local certificate for SSL connections.
- Systemp
System stringDns Id - an identifier for the resource.
- Timeout float64
- DNS query timeout interval in seconds (1 - 10).
- Vrf
Select float64 - VRF ID used for connection to server.
- devprof string
- Devprof.
- adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - alt_
primary string - Alternate primary DNS server. This is not used as a failover DNS server.
- alt_
secondary string - Alternate secondary DNS server. This is not used as a failover DNS server.
- cache_
notfound_ stringresponses - Enable/disable response from the DNS server when a record is not in cache. Valid values:
disable,enable. - dns_
cache_ numberlimit - Maximum number of records in the DNS cache.
- dns_
cache_ numberttl - Duration in seconds that the DNS cache retains information.
- dns_
over_ stringtls - Enable/disable/enforce DNS over TLS. Valid values:
disable,enable,enforce. - domains list(string)
- Support meta variable Search suffix list for hostname lookup.
- fqdn_
cache_ numberttl - FQDN cache time to live in seconds (0 - 86400, default = 0).
- fqdn_
max_ numberrefresh - FQDN cache maximum refresh time in seconds (3600 - 86400, default = 3600).
- fqdn_
min_ numberrefresh - FQDN cache minimum refresh time in seconds (10 - 3600, default = 60).
- hostname_
limit number - Limit of the number of hostname table entries (0 - 50000).
- hostname_
ttl number - TTL of hostname table entries (60 - 86400).
- interface_
select_ stringmethod - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - interfaces list(string)
- Support meta variable Specify outgoing interface to reach server.
- ip6_
primary string - Primary DNS server IPv6 address.
- ip6_
secondary string - Secondary DNS server IPv6 address.
- log string
- Local DNS log setting. Valid values:
disable,error,all. - primary string
- Support meta variable Primary DNS server IP address.
- protocols list(string)
- DNS transport protocols. Valid values:
cleartext,dot,doh. - retry number
- Number of times to retry (0 - 5).
- root_
servers string - Configure up to two preferred servers that serve the DNS root zone (default uses all 13 root servers).
- scopetype string
- The scope of application of the resource. Valid values:
inherit,adom. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - secondary string
- Support meta variable Secondary DNS server IP address.
- server_
hostnames list(string) - DNS server host name list.
- server_
select_ stringmethod - Specify how configured servers are prioritized. Valid values:
least-rtt,failover. - source_
ip string - IP address used by the DNS server as its source IP.
- source_
ip_ list(string)interfaces - IP address of the specified interface as the source IP address.
- ssl_
certificates list(string) - Name of local certificate for SSL connections.
- systemp_
system_ stringdns_ id - an identifier for the resource.
- timeout number
- DNS query timeout interval in seconds (1 - 10).
- vrf_
select number - VRF ID used for connection to server.
- devprof String
- Devprof.
- adom String
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - alt
Primary String - Alternate primary DNS server. This is not used as a failover DNS server.
- alt
Secondary String - Alternate secondary DNS server. This is not used as a failover DNS server.
- cache
Notfound StringResponses - Enable/disable response from the DNS server when a record is not in cache. Valid values:
disable,enable. - dns
Cache DoubleLimit - Maximum number of records in the DNS cache.
- dns
Cache DoubleTtl - Duration in seconds that the DNS cache retains information.
- dns
Over StringTls - Enable/disable/enforce DNS over TLS. Valid values:
disable,enable,enforce. - domains List<String>
- Support meta variable Search suffix list for hostname lookup.
- fqdn
Cache DoubleTtl - FQDN cache time to live in seconds (0 - 86400, default = 0).
- fqdn
Max DoubleRefresh - FQDN cache maximum refresh time in seconds (3600 - 86400, default = 3600).
- fqdn
Min DoubleRefresh - FQDN cache minimum refresh time in seconds (10 - 3600, default = 60).
- hostname
Limit Double - Limit of the number of hostname table entries (0 - 50000).
- hostname
Ttl Double - TTL of hostname table entries (60 - 86400).
- interface
Select StringMethod - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - interfaces List<String>
- Support meta variable Specify outgoing interface to reach server.
- ip6Primary String
- Primary DNS server IPv6 address.
- ip6Secondary String
- Secondary DNS server IPv6 address.
- log String
- Local DNS log setting. Valid values:
disable,error,all. - primary String
- Support meta variable Primary DNS server IP address.
- protocols List<String>
- DNS transport protocols. Valid values:
cleartext,dot,doh. - retry Double
- Number of times to retry (0 - 5).
- root
Servers String - Configure up to two preferred servers that serve the DNS root zone (default uses all 13 root servers).
- scopetype String
- The scope of application of the resource. Valid values:
inherit,adom. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - secondary String
- Support meta variable Secondary DNS server IP address.
- server
Hostnames List<String> - DNS server host name list.
- server
Select StringMethod - Specify how configured servers are prioritized. Valid values:
least-rtt,failover. - source
Ip String - IP address used by the DNS server as its source IP.
- source
Ip List<String>Interfaces - IP address of the specified interface as the source IP address.
- ssl
Certificates List<String> - Name of local certificate for SSL connections.
- systemp
System StringDns Id - an identifier for the resource.
- timeout Double
- DNS query timeout interval in seconds (1 - 10).
- vrf
Select Double - VRF ID used for connection to server.
- devprof string
- Devprof.
- adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - alt
Primary string - Alternate primary DNS server. This is not used as a failover DNS server.
- alt
Secondary string - Alternate secondary DNS server. This is not used as a failover DNS server.
- cache
Notfound stringResponses - Enable/disable response from the DNS server when a record is not in cache. Valid values:
disable,enable. - dns
Cache numberLimit - Maximum number of records in the DNS cache.
- dns
Cache numberTtl - Duration in seconds that the DNS cache retains information.
- dns
Over stringTls - Enable/disable/enforce DNS over TLS. Valid values:
disable,enable,enforce. - domains string[]
- Support meta variable Search suffix list for hostname lookup.
- fqdn
Cache numberTtl - FQDN cache time to live in seconds (0 - 86400, default = 0).
- fqdn
Max numberRefresh - FQDN cache maximum refresh time in seconds (3600 - 86400, default = 3600).
- fqdn
Min numberRefresh - FQDN cache minimum refresh time in seconds (10 - 3600, default = 60).
- hostname
Limit number - Limit of the number of hostname table entries (0 - 50000).
- hostname
Ttl number - TTL of hostname table entries (60 - 86400).
- interface
Select stringMethod - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - interfaces string[]
- Support meta variable Specify outgoing interface to reach server.
- ip6Primary string
- Primary DNS server IPv6 address.
- ip6Secondary string
- Secondary DNS server IPv6 address.
- log string
- Local DNS log setting. Valid values:
disable,error,all. - primary string
- Support meta variable Primary DNS server IP address.
- protocols string[]
- DNS transport protocols. Valid values:
cleartext,dot,doh. - retry number
- Number of times to retry (0 - 5).
- root
Servers string - Configure up to two preferred servers that serve the DNS root zone (default uses all 13 root servers).
- scopetype string
- The scope of application of the resource. Valid values:
inherit,adom. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - secondary string
- Support meta variable Secondary DNS server IP address.
- server
Hostnames string[] - DNS server host name list.
- server
Select stringMethod - Specify how configured servers are prioritized. Valid values:
least-rtt,failover. - source
Ip string - IP address used by the DNS server as its source IP.
- source
Ip string[]Interfaces - IP address of the specified interface as the source IP address.
- ssl
Certificates string[] - Name of local certificate for SSL connections.
- systemp
System stringDns Id - an identifier for the resource.
- timeout number
- DNS query timeout interval in seconds (1 - 10).
- vrf
Select number - VRF ID used for connection to server.
- devprof str
- Devprof.
- adom str
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - alt_
primary str - Alternate primary DNS server. This is not used as a failover DNS server.
- alt_
secondary str - Alternate secondary DNS server. This is not used as a failover DNS server.
- cache_
notfound_ strresponses - Enable/disable response from the DNS server when a record is not in cache. Valid values:
disable,enable. - dns_
cache_ floatlimit - Maximum number of records in the DNS cache.
- dns_
cache_ floatttl - Duration in seconds that the DNS cache retains information.
- dns_
over_ strtls - Enable/disable/enforce DNS over TLS. Valid values:
disable,enable,enforce. - domains Sequence[str]
- Support meta variable Search suffix list for hostname lookup.
- fqdn_
cache_ floatttl - FQDN cache time to live in seconds (0 - 86400, default = 0).
- fqdn_
max_ floatrefresh - FQDN cache maximum refresh time in seconds (3600 - 86400, default = 3600).
- fqdn_
min_ floatrefresh - FQDN cache minimum refresh time in seconds (10 - 3600, default = 60).
- hostname_
limit float - Limit of the number of hostname table entries (0 - 50000).
- hostname_
ttl float - TTL of hostname table entries (60 - 86400).
- interface_
select_ strmethod - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - interfaces Sequence[str]
- Support meta variable Specify outgoing interface to reach server.
- ip6_
primary str - Primary DNS server IPv6 address.
- ip6_
secondary str - Secondary DNS server IPv6 address.
- log str
- Local DNS log setting. Valid values:
disable,error,all. - primary str
- Support meta variable Primary DNS server IP address.
- protocols Sequence[str]
- DNS transport protocols. Valid values:
cleartext,dot,doh. - retry float
- Number of times to retry (0 - 5).
- root_
servers str - Configure up to two preferred servers that serve the DNS root zone (default uses all 13 root servers).
- scopetype str
- The scope of application of the resource. Valid values:
inherit,adom. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - secondary str
- Support meta variable Secondary DNS server IP address.
- server_
hostnames Sequence[str] - DNS server host name list.
- server_
select_ strmethod - Specify how configured servers are prioritized. Valid values:
least-rtt,failover. - source_
ip str - IP address used by the DNS server as its source IP.
- source_
ip_ Sequence[str]interfaces - IP address of the specified interface as the source IP address.
- ssl_
certificates Sequence[str] - Name of local certificate for SSL connections.
- systemp_
system_ strdns_ id - an identifier for the resource.
- timeout float
- DNS query timeout interval in seconds (1 - 10).
- vrf_
select float - VRF ID used for connection to server.
- devprof String
- Devprof.
- adom String
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - alt
Primary String - Alternate primary DNS server. This is not used as a failover DNS server.
- alt
Secondary String - Alternate secondary DNS server. This is not used as a failover DNS server.
- cache
Notfound StringResponses - Enable/disable response from the DNS server when a record is not in cache. Valid values:
disable,enable. - dns
Cache NumberLimit - Maximum number of records in the DNS cache.
- dns
Cache NumberTtl - Duration in seconds that the DNS cache retains information.
- dns
Over StringTls - Enable/disable/enforce DNS over TLS. Valid values:
disable,enable,enforce. - domains List<String>
- Support meta variable Search suffix list for hostname lookup.
- fqdn
Cache NumberTtl - FQDN cache time to live in seconds (0 - 86400, default = 0).
- fqdn
Max NumberRefresh - FQDN cache maximum refresh time in seconds (3600 - 86400, default = 3600).
- fqdn
Min NumberRefresh - FQDN cache minimum refresh time in seconds (10 - 3600, default = 60).
- hostname
Limit Number - Limit of the number of hostname table entries (0 - 50000).
- hostname
Ttl Number - TTL of hostname table entries (60 - 86400).
- interface
Select StringMethod - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - interfaces List<String>
- Support meta variable Specify outgoing interface to reach server.
- ip6Primary String
- Primary DNS server IPv6 address.
- ip6Secondary String
- Secondary DNS server IPv6 address.
- log String
- Local DNS log setting. Valid values:
disable,error,all. - primary String
- Support meta variable Primary DNS server IP address.
- protocols List<String>
- DNS transport protocols. Valid values:
cleartext,dot,doh. - retry Number
- Number of times to retry (0 - 5).
- root
Servers String - Configure up to two preferred servers that serve the DNS root zone (default uses all 13 root servers).
- scopetype String
- The scope of application of the resource. Valid values:
inherit,adom. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - secondary String
- Support meta variable Secondary DNS server IP address.
- server
Hostnames List<String> - DNS server host name list.
- server
Select StringMethod - Specify how configured servers are prioritized. Valid values:
least-rtt,failover. - source
Ip String - IP address used by the DNS server as its source IP.
- source
Ip List<String>Interfaces - IP address of the specified interface as the source IP address.
- ssl
Certificates List<String> - Name of local certificate for SSL connections.
- systemp
System StringDns Id - an identifier for the resource.
- timeout Number
- DNS query timeout interval in seconds (1 - 10).
- vrf
Select Number - VRF ID used for connection to server.
Outputs
All input properties are implicitly available as output properties. Additionally, the SystempSystemDns resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing SystempSystemDns Resource
Get an existing SystempSystemDns resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: SystempSystemDnsState, opts?: CustomResourceOptions): SystempSystemDns@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
adom: Optional[str] = None,
alt_primary: Optional[str] = None,
alt_secondary: Optional[str] = None,
cache_notfound_responses: Optional[str] = None,
devprof: Optional[str] = None,
dns_cache_limit: Optional[float] = None,
dns_cache_ttl: Optional[float] = None,
dns_over_tls: Optional[str] = None,
domains: Optional[Sequence[str]] = None,
fqdn_cache_ttl: Optional[float] = None,
fqdn_max_refresh: Optional[float] = None,
fqdn_min_refresh: Optional[float] = None,
hostname_limit: Optional[float] = None,
hostname_ttl: Optional[float] = None,
interface_select_method: Optional[str] = None,
interfaces: Optional[Sequence[str]] = None,
ip6_primary: Optional[str] = None,
ip6_secondary: Optional[str] = None,
log: Optional[str] = None,
primary: Optional[str] = None,
protocols: Optional[Sequence[str]] = None,
retry: Optional[float] = None,
root_servers: Optional[str] = None,
scopetype: Optional[str] = None,
secondary: Optional[str] = None,
server_hostnames: Optional[Sequence[str]] = None,
server_select_method: Optional[str] = None,
source_ip: Optional[str] = None,
source_ip_interfaces: Optional[Sequence[str]] = None,
ssl_certificates: Optional[Sequence[str]] = None,
systemp_system_dns_id: Optional[str] = None,
timeout: Optional[float] = None,
vrf_select: Optional[float] = None) -> SystempSystemDnsfunc GetSystempSystemDns(ctx *Context, name string, id IDInput, state *SystempSystemDnsState, opts ...ResourceOption) (*SystempSystemDns, error)public static SystempSystemDns Get(string name, Input<string> id, SystempSystemDnsState? state, CustomResourceOptions? opts = null)public static SystempSystemDns get(String name, Output<String> id, SystempSystemDnsState state, CustomResourceOptions options)resources: _: type: fortimanager:SystempSystemDns get: id: ${id}import {
to = fortimanager_systempsystemdns.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - Alt
Primary string - Alternate primary DNS server. This is not used as a failover DNS server.
- Alt
Secondary string - Alternate secondary DNS server. This is not used as a failover DNS server.
- Cache
Notfound stringResponses - Enable/disable response from the DNS server when a record is not in cache. Valid values:
disable,enable. - Devprof string
- Devprof.
- Dns
Cache doubleLimit - Maximum number of records in the DNS cache.
- Dns
Cache doubleTtl - Duration in seconds that the DNS cache retains information.
- Dns
Over stringTls - Enable/disable/enforce DNS over TLS. Valid values:
disable,enable,enforce. - Domains List<string>
- Support meta variable Search suffix list for hostname lookup.
- Fqdn
Cache doubleTtl - FQDN cache time to live in seconds (0 - 86400, default = 0).
- Fqdn
Max doubleRefresh - FQDN cache maximum refresh time in seconds (3600 - 86400, default = 3600).
- Fqdn
Min doubleRefresh - FQDN cache minimum refresh time in seconds (10 - 3600, default = 60).
- Hostname
Limit double - Limit of the number of hostname table entries (0 - 50000).
- Hostname
Ttl double - TTL of hostname table entries (60 - 86400).
- Interface
Select stringMethod - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - Interfaces List<string>
- Support meta variable Specify outgoing interface to reach server.
- Ip6Primary string
- Primary DNS server IPv6 address.
- Ip6Secondary string
- Secondary DNS server IPv6 address.
- Log string
- Local DNS log setting. Valid values:
disable,error,all. - Primary string
- Support meta variable Primary DNS server IP address.
- Protocols List<string>
- DNS transport protocols. Valid values:
cleartext,dot,doh. - Retry double
- Number of times to retry (0 - 5).
- Root
Servers string - Configure up to two preferred servers that serve the DNS root zone (default uses all 13 root servers).
- Scopetype string
- The scope of application of the resource. Valid values:
inherit,adom. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - Secondary string
- Support meta variable Secondary DNS server IP address.
- Server
Hostnames List<string> - DNS server host name list.
- Server
Select stringMethod - Specify how configured servers are prioritized. Valid values:
least-rtt,failover. - Source
Ip string - IP address used by the DNS server as its source IP.
- Source
Ip List<string>Interfaces - IP address of the specified interface as the source IP address.
- Ssl
Certificates List<string> - Name of local certificate for SSL connections.
- Systemp
System stringDns Id - an identifier for the resource.
- Timeout double
- DNS query timeout interval in seconds (1 - 10).
- Vrf
Select double - VRF ID used for connection to server.
- Adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - Alt
Primary string - Alternate primary DNS server. This is not used as a failover DNS server.
- Alt
Secondary string - Alternate secondary DNS server. This is not used as a failover DNS server.
- Cache
Notfound stringResponses - Enable/disable response from the DNS server when a record is not in cache. Valid values:
disable,enable. - Devprof string
- Devprof.
- Dns
Cache float64Limit - Maximum number of records in the DNS cache.
- Dns
Cache float64Ttl - Duration in seconds that the DNS cache retains information.
- Dns
Over stringTls - Enable/disable/enforce DNS over TLS. Valid values:
disable,enable,enforce. - Domains []string
- Support meta variable Search suffix list for hostname lookup.
- Fqdn
Cache float64Ttl - FQDN cache time to live in seconds (0 - 86400, default = 0).
- Fqdn
Max float64Refresh - FQDN cache maximum refresh time in seconds (3600 - 86400, default = 3600).
- Fqdn
Min float64Refresh - FQDN cache minimum refresh time in seconds (10 - 3600, default = 60).
- Hostname
Limit float64 - Limit of the number of hostname table entries (0 - 50000).
- Hostname
Ttl float64 - TTL of hostname table entries (60 - 86400).
- Interface
Select stringMethod - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - Interfaces []string
- Support meta variable Specify outgoing interface to reach server.
- Ip6Primary string
- Primary DNS server IPv6 address.
- Ip6Secondary string
- Secondary DNS server IPv6 address.
- Log string
- Local DNS log setting. Valid values:
disable,error,all. - Primary string
- Support meta variable Primary DNS server IP address.
- Protocols []string
- DNS transport protocols. Valid values:
cleartext,dot,doh. - Retry float64
- Number of times to retry (0 - 5).
- Root
Servers string - Configure up to two preferred servers that serve the DNS root zone (default uses all 13 root servers).
- Scopetype string
- The scope of application of the resource. Valid values:
inherit,adom. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - Secondary string
- Support meta variable Secondary DNS server IP address.
- Server
Hostnames []string - DNS server host name list.
- Server
Select stringMethod - Specify how configured servers are prioritized. Valid values:
least-rtt,failover. - Source
Ip string - IP address used by the DNS server as its source IP.
- Source
Ip []stringInterfaces - IP address of the specified interface as the source IP address.
- Ssl
Certificates []string - Name of local certificate for SSL connections.
- Systemp
System stringDns Id - an identifier for the resource.
- Timeout float64
- DNS query timeout interval in seconds (1 - 10).
- Vrf
Select float64 - VRF ID used for connection to server.
- adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - alt_
primary string - Alternate primary DNS server. This is not used as a failover DNS server.
- alt_
secondary string - Alternate secondary DNS server. This is not used as a failover DNS server.
- cache_
notfound_ stringresponses - Enable/disable response from the DNS server when a record is not in cache. Valid values:
disable,enable. - devprof string
- Devprof.
- dns_
cache_ numberlimit - Maximum number of records in the DNS cache.
- dns_
cache_ numberttl - Duration in seconds that the DNS cache retains information.
- dns_
over_ stringtls - Enable/disable/enforce DNS over TLS. Valid values:
disable,enable,enforce. - domains list(string)
- Support meta variable Search suffix list for hostname lookup.
- fqdn_
cache_ numberttl - FQDN cache time to live in seconds (0 - 86400, default = 0).
- fqdn_
max_ numberrefresh - FQDN cache maximum refresh time in seconds (3600 - 86400, default = 3600).
- fqdn_
min_ numberrefresh - FQDN cache minimum refresh time in seconds (10 - 3600, default = 60).
- hostname_
limit number - Limit of the number of hostname table entries (0 - 50000).
- hostname_
ttl number - TTL of hostname table entries (60 - 86400).
- interface_
select_ stringmethod - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - interfaces list(string)
- Support meta variable Specify outgoing interface to reach server.
- ip6_
primary string - Primary DNS server IPv6 address.
- ip6_
secondary string - Secondary DNS server IPv6 address.
- log string
- Local DNS log setting. Valid values:
disable,error,all. - primary string
- Support meta variable Primary DNS server IP address.
- protocols list(string)
- DNS transport protocols. Valid values:
cleartext,dot,doh. - retry number
- Number of times to retry (0 - 5).
- root_
servers string - Configure up to two preferred servers that serve the DNS root zone (default uses all 13 root servers).
- scopetype string
- The scope of application of the resource. Valid values:
inherit,adom. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - secondary string
- Support meta variable Secondary DNS server IP address.
- server_
hostnames list(string) - DNS server host name list.
- server_
select_ stringmethod - Specify how configured servers are prioritized. Valid values:
least-rtt,failover. - source_
ip string - IP address used by the DNS server as its source IP.
- source_
ip_ list(string)interfaces - IP address of the specified interface as the source IP address.
- ssl_
certificates list(string) - Name of local certificate for SSL connections.
- systemp_
system_ stringdns_ id - an identifier for the resource.
- timeout number
- DNS query timeout interval in seconds (1 - 10).
- vrf_
select number - VRF ID used for connection to server.
- adom String
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - alt
Primary String - Alternate primary DNS server. This is not used as a failover DNS server.
- alt
Secondary String - Alternate secondary DNS server. This is not used as a failover DNS server.
- cache
Notfound StringResponses - Enable/disable response from the DNS server when a record is not in cache. Valid values:
disable,enable. - devprof String
- Devprof.
- dns
Cache DoubleLimit - Maximum number of records in the DNS cache.
- dns
Cache DoubleTtl - Duration in seconds that the DNS cache retains information.
- dns
Over StringTls - Enable/disable/enforce DNS over TLS. Valid values:
disable,enable,enforce. - domains List<String>
- Support meta variable Search suffix list for hostname lookup.
- fqdn
Cache DoubleTtl - FQDN cache time to live in seconds (0 - 86400, default = 0).
- fqdn
Max DoubleRefresh - FQDN cache maximum refresh time in seconds (3600 - 86400, default = 3600).
- fqdn
Min DoubleRefresh - FQDN cache minimum refresh time in seconds (10 - 3600, default = 60).
- hostname
Limit Double - Limit of the number of hostname table entries (0 - 50000).
- hostname
Ttl Double - TTL of hostname table entries (60 - 86400).
- interface
Select StringMethod - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - interfaces List<String>
- Support meta variable Specify outgoing interface to reach server.
- ip6Primary String
- Primary DNS server IPv6 address.
- ip6Secondary String
- Secondary DNS server IPv6 address.
- log String
- Local DNS log setting. Valid values:
disable,error,all. - primary String
- Support meta variable Primary DNS server IP address.
- protocols List<String>
- DNS transport protocols. Valid values:
cleartext,dot,doh. - retry Double
- Number of times to retry (0 - 5).
- root
Servers String - Configure up to two preferred servers that serve the DNS root zone (default uses all 13 root servers).
- scopetype String
- The scope of application of the resource. Valid values:
inherit,adom. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - secondary String
- Support meta variable Secondary DNS server IP address.
- server
Hostnames List<String> - DNS server host name list.
- server
Select StringMethod - Specify how configured servers are prioritized. Valid values:
least-rtt,failover. - source
Ip String - IP address used by the DNS server as its source IP.
- source
Ip List<String>Interfaces - IP address of the specified interface as the source IP address.
- ssl
Certificates List<String> - Name of local certificate for SSL connections.
- systemp
System StringDns Id - an identifier for the resource.
- timeout Double
- DNS query timeout interval in seconds (1 - 10).
- vrf
Select Double - VRF ID used for connection to server.
- adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - alt
Primary string - Alternate primary DNS server. This is not used as a failover DNS server.
- alt
Secondary string - Alternate secondary DNS server. This is not used as a failover DNS server.
- cache
Notfound stringResponses - Enable/disable response from the DNS server when a record is not in cache. Valid values:
disable,enable. - devprof string
- Devprof.
- dns
Cache numberLimit - Maximum number of records in the DNS cache.
- dns
Cache numberTtl - Duration in seconds that the DNS cache retains information.
- dns
Over stringTls - Enable/disable/enforce DNS over TLS. Valid values:
disable,enable,enforce. - domains string[]
- Support meta variable Search suffix list for hostname lookup.
- fqdn
Cache numberTtl - FQDN cache time to live in seconds (0 - 86400, default = 0).
- fqdn
Max numberRefresh - FQDN cache maximum refresh time in seconds (3600 - 86400, default = 3600).
- fqdn
Min numberRefresh - FQDN cache minimum refresh time in seconds (10 - 3600, default = 60).
- hostname
Limit number - Limit of the number of hostname table entries (0 - 50000).
- hostname
Ttl number - TTL of hostname table entries (60 - 86400).
- interface
Select stringMethod - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - interfaces string[]
- Support meta variable Specify outgoing interface to reach server.
- ip6Primary string
- Primary DNS server IPv6 address.
- ip6Secondary string
- Secondary DNS server IPv6 address.
- log string
- Local DNS log setting. Valid values:
disable,error,all. - primary string
- Support meta variable Primary DNS server IP address.
- protocols string[]
- DNS transport protocols. Valid values:
cleartext,dot,doh. - retry number
- Number of times to retry (0 - 5).
- root
Servers string - Configure up to two preferred servers that serve the DNS root zone (default uses all 13 root servers).
- scopetype string
- The scope of application of the resource. Valid values:
inherit,adom. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - secondary string
- Support meta variable Secondary DNS server IP address.
- server
Hostnames string[] - DNS server host name list.
- server
Select stringMethod - Specify how configured servers are prioritized. Valid values:
least-rtt,failover. - source
Ip string - IP address used by the DNS server as its source IP.
- source
Ip string[]Interfaces - IP address of the specified interface as the source IP address.
- ssl
Certificates string[] - Name of local certificate for SSL connections.
- systemp
System stringDns Id - an identifier for the resource.
- timeout number
- DNS query timeout interval in seconds (1 - 10).
- vrf
Select number - VRF ID used for connection to server.
- adom str
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - alt_
primary str - Alternate primary DNS server. This is not used as a failover DNS server.
- alt_
secondary str - Alternate secondary DNS server. This is not used as a failover DNS server.
- cache_
notfound_ strresponses - Enable/disable response from the DNS server when a record is not in cache. Valid values:
disable,enable. - devprof str
- Devprof.
- dns_
cache_ floatlimit - Maximum number of records in the DNS cache.
- dns_
cache_ floatttl - Duration in seconds that the DNS cache retains information.
- dns_
over_ strtls - Enable/disable/enforce DNS over TLS. Valid values:
disable,enable,enforce. - domains Sequence[str]
- Support meta variable Search suffix list for hostname lookup.
- fqdn_
cache_ floatttl - FQDN cache time to live in seconds (0 - 86400, default = 0).
- fqdn_
max_ floatrefresh - FQDN cache maximum refresh time in seconds (3600 - 86400, default = 3600).
- fqdn_
min_ floatrefresh - FQDN cache minimum refresh time in seconds (10 - 3600, default = 60).
- hostname_
limit float - Limit of the number of hostname table entries (0 - 50000).
- hostname_
ttl float - TTL of hostname table entries (60 - 86400).
- interface_
select_ strmethod - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - interfaces Sequence[str]
- Support meta variable Specify outgoing interface to reach server.
- ip6_
primary str - Primary DNS server IPv6 address.
- ip6_
secondary str - Secondary DNS server IPv6 address.
- log str
- Local DNS log setting. Valid values:
disable,error,all. - primary str
- Support meta variable Primary DNS server IP address.
- protocols Sequence[str]
- DNS transport protocols. Valid values:
cleartext,dot,doh. - retry float
- Number of times to retry (0 - 5).
- root_
servers str - Configure up to two preferred servers that serve the DNS root zone (default uses all 13 root servers).
- scopetype str
- The scope of application of the resource. Valid values:
inherit,adom. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - secondary str
- Support meta variable Secondary DNS server IP address.
- server_
hostnames Sequence[str] - DNS server host name list.
- server_
select_ strmethod - Specify how configured servers are prioritized. Valid values:
least-rtt,failover. - source_
ip str - IP address used by the DNS server as its source IP.
- source_
ip_ Sequence[str]interfaces - IP address of the specified interface as the source IP address.
- ssl_
certificates Sequence[str] - Name of local certificate for SSL connections.
- systemp_
system_ strdns_ id - an identifier for the resource.
- timeout float
- DNS query timeout interval in seconds (1 - 10).
- vrf_
select float - VRF ID used for connection to server.
- adom String
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - alt
Primary String - Alternate primary DNS server. This is not used as a failover DNS server.
- alt
Secondary String - Alternate secondary DNS server. This is not used as a failover DNS server.
- cache
Notfound StringResponses - Enable/disable response from the DNS server when a record is not in cache. Valid values:
disable,enable. - devprof String
- Devprof.
- dns
Cache NumberLimit - Maximum number of records in the DNS cache.
- dns
Cache NumberTtl - Duration in seconds that the DNS cache retains information.
- dns
Over StringTls - Enable/disable/enforce DNS over TLS. Valid values:
disable,enable,enforce. - domains List<String>
- Support meta variable Search suffix list for hostname lookup.
- fqdn
Cache NumberTtl - FQDN cache time to live in seconds (0 - 86400, default = 0).
- fqdn
Max NumberRefresh - FQDN cache maximum refresh time in seconds (3600 - 86400, default = 3600).
- fqdn
Min NumberRefresh - FQDN cache minimum refresh time in seconds (10 - 3600, default = 60).
- hostname
Limit Number - Limit of the number of hostname table entries (0 - 50000).
- hostname
Ttl Number - TTL of hostname table entries (60 - 86400).
- interface
Select StringMethod - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - interfaces List<String>
- Support meta variable Specify outgoing interface to reach server.
- ip6Primary String
- Primary DNS server IPv6 address.
- ip6Secondary String
- Secondary DNS server IPv6 address.
- log String
- Local DNS log setting. Valid values:
disable,error,all. - primary String
- Support meta variable Primary DNS server IP address.
- protocols List<String>
- DNS transport protocols. Valid values:
cleartext,dot,doh. - retry Number
- Number of times to retry (0 - 5).
- root
Servers String - Configure up to two preferred servers that serve the DNS root zone (default uses all 13 root servers).
- scopetype String
- The scope of application of the resource. Valid values:
inherit,adom. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - secondary String
- Support meta variable Secondary DNS server IP address.
- server
Hostnames List<String> - DNS server host name list.
- server
Select StringMethod - Specify how configured servers are prioritized. Valid values:
least-rtt,failover. - source
Ip String - IP address used by the DNS server as its source IP.
- source
Ip List<String>Interfaces - IP address of the specified interface as the source IP address.
- ssl
Certificates List<String> - Name of local certificate for SSL connections.
- systemp
System StringDns Id - an identifier for the resource.
- timeout Number
- DNS query timeout interval in seconds (1 - 10).
- vrf
Select Number - VRF ID used for connection to server.
Import
Systemp SystemDns can be imported using any of these accepted formats:
Set import_options = [“devprof=YOUR_VALUE”] in the provider section.
$ export “FORTIMANAGER_IMPORT_TABLE”=“true”
$ pulumi import fortimanager:index/systempSystemDns:SystempSystemDns labelname SystempSystemDns
$ unset “FORTIMANAGER_IMPORT_TABLE”
-> Hint: The scopetype and adom for import will directly inherit the scopetype and adom configuration of the provider.
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- fortimanager fortinetdev/terraform-provider-fortimanager
- License
- Notes
- This Pulumi package is based on the
fortimanagerTerraform Provider.
published on Monday, May 4, 2026 by fortinetdev
