* QClass (QClassRule)
* QType (QTypeRule)
* RegexRule on query name
+ * RE2Rule on query name (optional)
* Packet requests DNSSEC processing
* Query received over UDP or TCP
* a QClassRule
* a QTypeRule
* a RegexRule
+ * a RE2Rule
* a SuffixMatchNodeRule
* a TCPRule
Note that the query name is presented without a trailing dot to the regex.
The regex is applied case insensitively.
+Alternatively, if compiled in, RE2Rule provides similar functionality, but against libre2.
+
Inspecting live traffic
-----------------------
This is still much in flux, but for now, try: