Provisioning Domains (PvDs)
- Created
- 2020-02-18
- Last Updated
- 2026-05-15
- Available Formats
-

XML
HTML
Plain text
Registries Included Below
- Additional Information PvD Keys
- PvD Option Flags
- PvD Split DNS Claims
- Proxy Information PvD Keys
- Proxy Protocol PvD Values
- Proxy Destination Rule PvD Keys
Additional Information PvD Keys
- Registration Procedure(s)
-
Expert Review
- Expert(s)
-
Tommy Pauly, David Schinazi
- Reference
- [RFC8801]
- Available Formats
-

CSV
| JSON Key | Description | Type | Example | Reference |
|---|---|---|---|---|
| identifier | PvD ID FQDN | String | "pvd.example.com." | [RFC8801] |
| expires | Date after which this object is no longer valid | [RFC3339] Date | "2020-05-23T06:00:00Z" | [RFC8801] |
| prefixes | Array of IPv6 prefixes valid for this PvD | Array of strings | ["2001:db8:1::/48", "2001:db8:4::/48"] | [RFC8801] |
| dnsZones | DNS zones searchable and accessible | Array of strings | ["example.com", "sub.example.com"] | [RFC8801] |
| noInternet | No Internet; set to "true" when the PvD is restricted. | Boolean | true | [RFC8801] |
| splitDnsClaims | Verifiable locally served domains | Array of Objects | [{ "resolver": "dns.example.net", "parent": "example.com", "subdomains": ["sub"], "algorithm": "SHA384", "salt": "abc...123" }] | [RFC9704] |
| proxies | Array of proxy dictionaries associated with this PvD | Array of dictionaries | [ { "protocol": "connect-udp", "proxy": "https://proxy.example.org/masque{?target_host,target_port}" } ] | [RFC-ietf-intarea-proxy-config-13] |
| proxy-match | Array of proxy match rules, as dictionaries, associated with entries in the proxies array. | Array of dictionaries | [ { "domains": [ "*.internal.example.org" ], "proxies": [ "default_proxy" ] } ] | [RFC-ietf-intarea-proxy-config-13] |
PvD Option Flags
- Registration Procedure(s)
-
Standards Action
- Reference
- [RFC8801]
- Note
-
See [https://www.iana.org/assignments/icmpv6-parameters].
PvD Split DNS Claims
- Registration Procedure(s)
-
Expert Review
- Expert(s)
-
Tommy Pauly, Tirumaleswar Reddy.K, Benjamin M. Schwartz
- Reference
- [RFC9704]
- Available Formats
-

CSV
| JSON Key | Description | Type | Example | Reference |
|---|---|---|---|---|
| resolver | The Authentication Domain Name | String | "dns.example.net" | [RFC9704] |
| parent | The parent zone name | String | "example.com" | [RFC9704] |
| subdomains | An array containing the claimed subdomains | Array of Strings | ["sub"] | [RFC9704] |
| algorithm | The hash algorithm | String | "SHA384" | [RFC9704] |
| salt | The salt (base64url) | String | "abc...123" | [RFC9704] |
Proxy Information PvD Keys
- Registration Procedure(s)
-
Expert Review
- Expert(s)
-
Unassigned
- Reference
- [RFC-ietf-intarea-proxy-config-13]
- Available Formats
-

CSV
| JSON Key | Optional/Required | Description | Type | Example | Reference |
|---|---|---|---|---|---|
| protocol | required | The protocol used to communicate with the proxy | String | "connect-udp" | [RFC-ietf-intarea-proxy-config-13] |
| proxy | required | String containing the URI template or host and port of the proxy, depending on the format defined by the protocol | String | "https://example.org:4443/masque/{?target_host,target_port}" | [RFC-ietf-intarea-proxy-config-13] |
| mandatory | optional | An array of optional keys that client must understand and process to use this proxy | Array of Strings | ["example_key"] | [RFC-ietf-intarea-proxy-config-13] |
| alpn | optional | An array of Application-Layer Protocol Negotiation protocol identifiers | Array of Strings | ["h3","h2"] | [RFC-ietf-intarea-proxy-config-13] |
| identifier | optional | A string used to refer to the proxy, which can be referenced by other dictionaries, such as entries in proxy-match | String | "udp-proxy" | [RFC-ietf-intarea-proxy-config-13] |
Proxy Protocol PvD Values
- Registration Procedure(s)
-
Expert Review
- Expert(s)
-
Unassigned
- Reference
- [RFC-ietf-intarea-proxy-config-13]
- Available Formats
-

CSV
| Proxy Protocol | Proxy Location Format | Reference | Notes |
|---|---|---|---|
| socks5 | host:port | [RFC1928] | |
| http-connect | host:port | [RFC9110, Section 9.3.6] | Standard CONNECT method, using unencrypted HTTP to the proxy |
| https-connect | host:port | [RFC9110, Section 9.3.6] | Standard CONNECT method, using TLS-protected HTTP to the proxy |
| connect-udp | URI template | [RFC9298] | |
| connect-ip | URI template | [RFC9484] | |
| connect-tcp | URI template | [draft-httpbis-connect-tcp-11] |
Proxy Destination Rule PvD Keys
- Registration Procedure(s)
-
Expert Review
- Expert(s)
-
Unassigned
- Reference
- [RFC-ietf-intarea-proxy-config-13]
- Available Formats
-

CSV
| JSON Key | Optional/Required | Description | Type | Example | Reference |
|---|---|---|---|---|---|
| proxies | No | An array of strings that match identifier values from the top-level proxies array | Array of Strings | ["tcp-proxy", "udp-proxy"] | [RFC-ietf-intarea-proxy-config-13] |
| domains | Yes | An array of FQDNs and wildcard DNS domains | Array of Strings | ["www.example.com", "*.internal.example.com"] | [RFC-ietf-intarea-proxy-config-13] |
| subnets | Yes | An array of IPv4 and IPv6 addresses and subnets | Array of Strings | ["2001:db8::1", "192.0.2.0/24"] | [RFC-ietf-intarea-proxy-config-13] |
| ports | Yes | An array of TCP and UDP port ranges | Array of Strings | ["80", "443", "1024-65535"] | [RFC-ietf-intarea-proxy-config-13] |