---
title: Charmhub | Deploy Designate Bind using Charmhub - The Open Operator Collection
description: Deploy the latest version of Designate Bind on any cloud.
url: https://charmhub.io/designate-bind/configurations
---

# Designate Bind

[OpenStack Charmers](https://charmhub.io/publisher/openstack-charmers "View all packages from OpenStack Charmers")

* [OpenStack Charmers](https://charmhub.io/publisher/openstack-charmers "View all packages from OpenStack Charmers")
* [Cloud](https://charmhub.io/?filter=cloud)
* [Networking](https://charmhub.io/?filter=networking)

Platform:

24.04

23.10

23.04

22.10

22.04

20.04

18.04

yoga/stable d885da1

```
juju deploy designate-bind --channel yoga/stable
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

* [allowed\_nets](https://charmhub.io/designate-bind/configurations#allowed_nets)
* [allowed\_recursion\_nets](https://charmhub.io/designate-bind/configurations#allowed_recursion_nets)
* [debug](https://charmhub.io/designate-bind/configurations#debug)
* [disable-dnssec-validation](https://charmhub.io/designate-bind/configurations#disable-dnssec-validation)
* [forwarders](https://charmhub.io/designate-bind/configurations#forwarders)
* [recursion](https://charmhub.io/designate-bind/configurations#recursion)
* [service\_ips](https://charmhub.io/designate-bind/configurations#service_ips)
* [ssl\_ca](https://charmhub.io/designate-bind/configurations#ssl_ca)
* [ssl\_cert](https://charmhub.io/designate-bind/configurations#ssl_cert)
* [ssl\_key](https://charmhub.io/designate-bind/configurations#ssl_key)
* [use-internal-endpoints](https://charmhub.io/designate-bind/configurations#use-internal-endpoints)
* [use-syslog](https://charmhub.io/designate-bind/configurations#use-syslog)
* [verbose](https://charmhub.io/designate-bind/configurations#verbose)

[Learn about configurations >](https://juju.is/docs/juju/configuration#heading--application-configuration)

* allowed\_nets | string

  String containing a list of allowed networks of hosts for DNS
  queries, separated by semicolons: e.g.,
  "10.0.0.0/8;172.16.0.0/12;192.168.0.0/16". The option is
  equivalent to "allow-query" in BIND9. If not specified, the
  default is to allow queries from all hosts.
* allowed\_recursion\_nets | string

  String containing a list of allowed networks of hosts for
  recursive queries through the designate-bind servers, spearated by
  semicolons: e.g., "10.0.0.0/8;172.16.0.0/12;192.168.0.0/16". The
  option is equivalent to "allow-recursion" in BIND9. If
  allowed\_recursion\_nets is not set then allowed\_nets is used if
  set, otherwise any will be set to allow recursive queries from all
  hosts.
* debug | boolean

  Enable debug logging
* disable-dnssec-validation | boolean

  Whether or not to disable DNSSEC validation. This may be helpful
  in a situation that upstream DNS servers do not support DNSSEC,
  and BIND9 reports "Unable to fetch DNSKEY". For production
  deployments, it's encouraged to keep DNSSEC enabled.
* forwarders | string

  String containing a list of forwarders, separated by semicolons:
  e.g., "8.8.8.8;8.8.4.4". As non-empty forwarders option implies
  recursion, recursive queries will be enabled regardless of the
  value set in the recursion option. When using this option, ACLs
  should be used with allowed\_nets and/or allowed\_recursion\_nets to
  prevent it from being a open resolver.
* recursion | boolean

  Whether or not to enable recursive queries with BIND9 itself to be
  installed by the charm. The option is equivalent to "recursion" in
  BIND9. When using this option, ACLs should be used with
  allowed\_nets and/or allowed\_recursion\_nets to prevent it from
  being a open resolver.
* service\_ips | string

  Service IPs are list of Virtual IPs that will be assigned to the
  designate-bind units. This option accepts comma separated list of
  IPv4 or IPv6 addresses that belong to the at least one directly
  connected network.
  This option also requires that relation with subordinate hacluster
  unit is created, otherwise the designate-bind units go into the the
  blocked state until the hacluster relation is made, or this option
  is uncofigured.
* ssl\_ca | string

  TLS CA to use to communicate with other components in a deployment.
  .
  **NOTE**: This configuration option will take precedence over any
  certificates received over the `certificates` relation.
* ssl\_cert | string

  TLS certificate to install and use for any listening services.
  .
  **NOTE**: This configuration option will take precedence over any
  certificates received over the `certificates` relation.
* ssl\_key | string

  TLS key to use with certificate specified as `ssl_cert`.
  .
  **NOTE**: This configuration option will take precedence over any
  certificates received over the `certificates` relation.
* use-internal-endpoints | boolean

  Openstack mostly defaults to using public endpoints for
  internal communication between services. If set to True this option
  will configure services to use internal endpoints where possible.
* use-syslog | boolean

  Setting this to True will allow supporting services to log to syslog.
* verbose | boolean

  Enable verbose logging