DNS

Added in: v0.10.0

源代码: lib/dns.js

The node:dns module enables name resolution. For example, use it to look up IP addresses of host names.

Although named for the Domain Name System (DNS), it does not always use the DNS protocol for lookups. dns.lookup() uses the operating system facilities to perform name resolution. It may not need to perform any network communication. To perform name resolution the way other applications on the same system do, use dns.lookup().

JScopy

All other functions in the node:dns module connect to an actual DNS server to perform name resolution. They will always use the network to perform DNS queries. These functions do not use the same set of configuration files used by dns.lookup() (e.g. /etc/hosts). Use these functions to always perform DNS queries, bypassing other name-resolution facilities.

JScopy

See the Implementation considerations section for more information.

C dns.Resolver

Added in: v8.3.0

An independent resolver for DNS requests.

Creating a new resolver uses the default server settings. Setting the servers used for a resolver using resolver.setServers() does not affect other resolvers:

JScopy

The following methods from the node:dns module are available:

• resolver.getServers()
• resolver.resolve()
• resolver.resolve4()
• resolver.resolve6()
• resolver.resolveAny()
• resolver.resolveCaa()
• resolver.resolveCname()
• resolver.resolveMx()
• resolver.resolveNaptr()
• resolver.resolveNs()
• resolver.resolvePtr()
• resolver.resolveSoa()
• resolver.resolveSrv()
• resolver.resolveTxt()
• resolver.reverse()
• resolver.setServers()

M Resolver([options])

Create a new resolver.

• options Object
  • timeout integer Query timeout in milliseconds, or -1 to use the default timeout.
  • tries integer The number of tries the resolver will try contacting each name server before giving up. Default: 4

M resolver.cancel()

Added in: v8.3.0

Cancel all outstanding DNS queries made by this resolver. The corresponding callbacks will be called with an error with code ECANCELLED.

M resolver.setLocalAddress([ipv4][, ipv6])

Added in: v15.1.0, v14.17.0

• ipv4 string A string representation of an IPv4 address. Default: '0.0.0.0'
• ipv6 string A string representation of an IPv6 address. Default: '::0'

The resolver instance will send its requests from the specified IP address. This allows programs to specify outbound interfaces when used on multi-homed systems.

If a v4 or v6 address is not specified, it is set to the default and the operating system will choose a local address automatically.

The resolver will use the v4 local address when making requests to IPv4 DNS servers, and the v6 local address when making requests to IPv6 DNS servers. The rrtype of resolution requests has no impact on the local address used.

M dns.getServers()

Added in: v0.11.3

• Returns: string[]

Returns an array of IP address strings, formatted according to RFC 5952, that are currently configured for DNS resolution. A string will include a port section if a custom port is used.

JScopy

M dns.lookup(hostname[, options], callback)

• hostname string
• options integer | Object
  • family integer | string The record family. Must be 4, 6, or 0. For backward compatibility reasons,'IPv4' and 'IPv6' are interpreted as 4 and 6 respectively. The value 0 indicates that IPv4 and IPv6 addresses are both returned. Default: 0.
  • hints number One or more supported getaddrinfo flags. Multiple flags may be passed by bitwise ORing their values.
  • all boolean When true, the callback returns all resolved addresses in an array. Otherwise, returns a single address. Default: false.
  • verbatim boolean When true, the callback receives IPv4 and IPv6 addresses in the order the DNS resolver returned them. When false, IPv4 addresses are placed before IPv6 addresses. Default: true (addresses are not reordered). Default value is configurable using dns.setDefaultResultOrder() or --dns-result-order.
• callback Function
  • err Error
  • address string A string representation of an IPv4 or IPv6 address.
  • family integer 4 or 6, denoting the family of address, or 0 if the address is not an IPv4 or IPv6 address. 0 is a likely indicator of a bug in the name resolution service used by the operating system.

Resolves a host name (e.g. 'nodejs.org') into the first found A (IPv4) or AAAA (IPv6) record. All option properties are optional. If options is an integer, then it must be 4 or 6 – if options is 0 or not provided, then IPv4 and IPv6 addresses are both returned if found.

With the all option set to true, the arguments for callback change to (err, addresses), with addresses being an array of objects with the properties address and family.

On error, err is an Error object, where err.code is the error code. Keep in mind that err.code will be set to 'ENOTFOUND' not only when the host name does not exist but also when the lookup fails in other ways such as no available file descriptors.

dns.lookup() does not necessarily have anything to do with the DNS protocol. The implementation uses an operating system facility that can associate names with addresses and vice versa. This implementation can have subtle but important consequences on the behavior of any Node.js program. Please take some time to consult the Implementation considerations section before using dns.lookup().

Example usage:

JScopy

If this method is invoked as its util.promisify()ed version, and all is not set to true, it returns a Promise for an Object with address and family properties.

Supported getaddrinfo flags

The following flags can be passed as hints to dns.lookup().

• dns.ADDRCONFIG: Limits returned address types to the types of non-loopback addresses configured on the system. For example, IPv4 addresses are only returned if the current system has at least one IPv4 address configured.
• dns.V4MAPPED: If the IPv6 family was specified, but no IPv6 addresses were found, then return IPv4 mapped IPv6 addresses. It is not supported on some operating systems (e.g. FreeBSD 10.1).
• dns.ALL: If dns.V4MAPPED is specified, return resolved IPv6 addresses as well as IPv4 mapped IPv6 addresses.

M dns.lookupService(address, port, callback)

• address string
• port number
• callback Function
  • err Error
  • hostname string e.g. example.com
  • service string e.g. http

Resolves the given address and port into a host name and service using the operating system's underlying getnameinfo implementation.

If address is not a valid IP address, a TypeError will be thrown. The port will be coerced to a number. If it is not a legal port, a TypeError will be thrown.

On an error, err is an Error object, where err.code is the error code.

JScopy

If this method is invoked as its util.promisify()ed version, it returns a Promise for an Object with hostname and service properties.

M dns.resolve(hostname[, rrtype], callback)

• hostname string Host name to resolve.
• rrtype string Resource record type. Default: 'A'.
• callback Function
  • err Error
  • records Object

Uses the DNS protocol to resolve a host name (e.g. 'nodejs.org') into an array of the resource records. The callback function has arguments (err, records). When successful, records will be an array of resource records. The type and structure of individual results varies based on rrtype:

On error, err is an Error object, where err.code is one of the DNS error codes.

M dns.resolve4(hostname[, options], callback)

• hostname string Host name to resolve.
• options Object
  • ttl boolean Retrieves the Time-To-Live value (TTL) of each record. When true, the callback receives an array of { address: '1.2.3.4', ttl: 60 } objects rather than an array of strings, with the TTL expressed in seconds.
• callback Function
  • err Error
  • addresses string[] | Object[]

Uses the DNS protocol to resolve a IPv4 addresses (A records) for the hostname. The addresses argument passed to the callback function will contain an array of IPv4 addresses (e.g. ['74.125.79.104', '74.125.79.105', '74.125.79.106']).

M dns.resolve6(hostname[, options], callback)

• hostname string Host name to resolve.
• options Object
  • ttl boolean Retrieve the Time-To-Live value (TTL) of each record. When true, the callback receives an array of { address: '0:1:2:3:4:5:6:7', ttl: 60 } objects rather than an array of strings, with the TTL expressed in seconds.
• callback Function
  • err Error
  • addresses string[] | Object[]

Uses the DNS protocol to resolve IPv6 addresses (AAAA records) for the hostname. The addresses argument passed to the callback function will contain an array of IPv6 addresses.

M dns.resolveAny(hostname, callback)

• hostname string
• callback Function
  • err Error
  • ret Object[]

Uses the DNS protocol to resolve all records (also known as ANY or * query). The ret argument passed to the callback function will be an array containing various types of records. Each object has a property type that indicates the type of the current record. And depending on the type, additional properties will be present on the object:

Here is an example of the ret object passed to the callback:

JScopy

DNS server operators may choose not to respond to ANY queries. It may be better to call individual methods like dns.resolve4(), dns.resolveMx(), and so on. For more details, see RFC 8482.

M dns.resolveCname(hostname, callback)

• hostname string
• callback Function
  • err Error
  • addresses string[]

Uses the DNS protocol to resolve CNAME records for the hostname. The addresses argument passed to the callback function will contain an array of canonical name records available for the hostname (e.g. ['bar.example.com']).

M dns.resolveCaa(hostname, callback)

• hostname string
• callback Function
  • err Error
  • records Object[]

Uses the DNS protocol to resolve CAA records for the hostname. The addresses argument passed to the callback function will contain an array of certification authority authorization records available for the hostname (e.g. [{critical: 0, iodef: 'mailto:pki@example.com'}, {critical: 128, issue: 'pki.example.com'}]).

M dns.resolveMx(hostname, callback)

• hostname string
• callback Function
  • err Error
  • addresses Object[]

Uses the DNS protocol to resolve mail exchange records (MX records) for the hostname. The addresses argument passed to the callback function will contain an array of objects containing both a priority and exchange property (e.g. [{priority: 10, exchange: 'mx.example.com'}, ...]).

M dns.resolveNaptr(hostname, callback)

• hostname string
• callback Function
  • err Error
  • addresses Object[]

Uses the DNS protocol to resolve regular expression-based records (NAPTR records) for the hostname. The addresses argument passed to the callback function will contain an array of objects with the following properties:

• flags
• service
• regexp
• replacement
• order
• preference

JScopy

M dns.resolveNs(hostname, callback)

• hostname string
• callback Function
  • err Error
  • addresses string[]

Uses the DNS protocol to resolve name server records (NS records) for the hostname. The addresses argument passed to the callback function will contain an array of name server records available for hostname (e.g. ['ns1.example.com', 'ns2.example.com']).

M dns.resolvePtr(hostname, callback)

• hostname string
• callback Function
  • err Error
  • addresses string[]

Uses the DNS protocol to resolve pointer records (PTR records) for the hostname. The addresses argument passed to the callback function will be an array of strings containing the reply records.

M dns.resolveSoa(hostname, callback)

• hostname string
• callback Function
  • err Error
  • address Object

Uses the DNS protocol to resolve a start of authority record (SOA record) for the hostname. The address argument passed to the callback function will be an object with the following properties:

• nsname
• hostmaster
• serial
• refresh
• retry
• expire
• minttl

JScopy

M dns.resolveSrv(hostname, callback)

• hostname string
• callback Function
  • err Error
  • addresses Object[]

Uses the DNS protocol to resolve service records (SRV records) for the hostname. The addresses argument passed to the callback function will be an array of objects with the following properties:

• priority
• weight
• port
• name

JScopy

M dns.resolveTxt(hostname, callback)

• hostname string
• callback Function
  • err Error
  • records \<string[][]>

Uses the DNS protocol to resolve text queries (TXT records) for the hostname. The records argument passed to the callback function is a two-dimensional array of the text records available for hostname (e.g. [ ['v=spf1 ip4:0.0.0.0 ', '~all' ] ]). Each sub-array contains TXT chunks of one record. Depending on the use case, these could be either joined together or treated separately.

M dns.reverse(ip, callback)

Added in: v0.1.16

• ip string
• callback Function
  • err Error
  • hostnames string[]

Performs a reverse DNS query that resolves an IPv4 or IPv6 address to an array of host names.

On error, err is an Error object, where err.code is one of the DNS error codes.

M dns.setDefaultResultOrder(order)

Added in: v16.4.0, v14.18.0

• order string must be 'ipv4first' or 'verbatim'.

Set the default value of verbatim in dns.lookup() and dnsPromises.lookup(). The value could be:

• ipv4first: sets default verbatim false.
• verbatim: sets default verbatim true.

The default is ipv4first and dns.setDefaultResultOrder() have higher priority than --dns-result-order. When using worker threads, dns.setDefaultResultOrder() from the main thread won't affect the default dns orders in workers.

M dns.setServers(servers)

Added in: v0.11.3

• servers string[] array of RFC 5952 formatted addresses

Sets the IP address and port of servers to be used when performing DNS resolution. The servers argument is an array of RFC 5952 formatted addresses. If the port is the IANA default DNS port (53) it can be omitted.

JScopy

An error will be thrown if an invalid address is provided.

The dns.setServers() method must not be called while a DNS query is in progress.

The dns.setServers() method affects only dns.resolve(), dns.resolve*() and dns.reverse() (and specifically not dns.lookup()).

This method works much like resolve.conf. That is, if attempting to resolve with the first server provided results in a NOTFOUND error, the resolve() method will not attempt to resolve with subsequent servers provided. Fallback DNS servers will only be used if the earlier ones time out or result in some other error.

DNS promises API

The dns.promises API provides an alternative set of asynchronous DNS methods that return Promise objects rather than using callbacks. The API is accessible via require('node:dns').promises or require('node:dns/promises').

C dnsPromises.Resolver

Added in: v10.6.0

An independent resolver for DNS requests.

Creating a new resolver uses the default server settings. Setting the servers used for a resolver using resolver.setServers() does not affect other resolvers:

JScopy

The following methods from the dnsPromises API are available:

• resolver.getServers()
• resolver.resolve()
• resolver.resolve4()
• resolver.resolve6()
• resolver.resolveAny()
• resolver.resolveCaa()
• resolver.resolveCname()
• resolver.resolveMx()
• resolver.resolveNaptr()
• resolver.resolveNs()
• resolver.resolvePtr()
• resolver.resolveSoa()
• resolver.resolveSrv()
• resolver.resolveTxt()
• resolver.reverse()
• resolver.setServers()

M resolver.cancel()

Added in: v15.3.0, v14.17.0

Cancel all outstanding DNS queries made by this resolver. The corresponding promises will be rejected with an error with the code ECANCELLED.

M dnsPromises.getServers()

Added in: v10.6.0

• Returns: string[]

Returns an array of IP address strings, formatted according to RFC 5952, that are currently configured for DNS resolution. A string will include a port section if a custom port is used.

JScopy

M dnsPromises.lookup(hostname[, options])

Added in: v10.6.0

• hostname string
• options integer | Object
  • family integer The record family. Must be 4, 6, or 0. The value 0 indicates that IPv4 and IPv6 addresses are both returned. Default:0.
  • hints number One or more supported getaddrinfo flags. Multiple flags may be passed by bitwise ORing their values.
  • all boolean When true, the Promise is resolved with all addresses in an array. Otherwise, returns a single address. Default: false.
  • verbatim boolean When true, the Promise is resolved with IPv4 and IPv6 addresses in the order the DNS resolver returned them. When false, IPv4 addresses are placed before IPv6 addresses. Default: currently false (addresses are reordered) but this is expected to change in the not too distant future. Default value is configurable using dns.setDefaultResultOrder() or --dns-result-order. New code should use { verbatim: true }.

Resolves a host name (e.g. 'nodejs.org') into the first found A (IPv4) or AAAA (IPv6) record. All option properties are optional. If options is an integer, then it must be 4 or 6 – if options is not provided, then IPv4 and IPv6 addresses are both returned if found.

With the all option set to true, the Promise is resolved with addresses being an array of objects with the properties address and family.

On error, the Promise is rejected with an Error object, where err.code is the error code. Keep in mind that err.code will be set to 'ENOTFOUND' not only when the host name does not exist but also when the lookup fails in other ways such as no available file descriptors.

dnsPromises.lookup() does not necessarily have anything to do with the DNS protocol. The implementation uses an operating system facility that can associate names with addresses and vice versa. This implementation can have subtle but important consequences on the behavior of any Node.js program. Please take some time to consult the Implementation considerations section before using dnsPromises.lookup().

Example usage:

JScopy

M dnsPromises.lookupService(address, port)

Added in: v10.6.0

• address string
• port number

Resolves the given address and port into a host name and service using the operating system's underlying getnameinfo implementation.

If address is not a valid IP address, a TypeError will be thrown. The port will be coerced to a number. If it is not a legal port, a TypeError will be thrown.

On error, the Promise is rejected with an Error object, where err.code is the error code.

JScopy

M dnsPromises.resolve(hostname[, rrtype])

Added in: v10.6.0

• hostname string Host name to resolve.
• rrtype string Resource record type. Default: 'A'.

Uses the DNS protocol to resolve a host name (e.g. 'nodejs.org') into an array of the resource records. When successful, the Promise is resolved with an array of resource records. The type and structure of individual results vary based on rrtype:

On error, the Promise is rejected with an Error object, where err.code is one of the DNS error codes.

M dnsPromises.resolve4(hostname[, options])

Added in: v10.6.0

• hostname string Host name to resolve.
• options Object
  • ttl boolean Retrieve the Time-To-Live value (TTL) of each record. When true, the Promise is resolved with an array of { address: '1.2.3.4', ttl: 60 } objects rather than an array of strings, with the TTL expressed in seconds.

Uses the DNS protocol to resolve IPv4 addresses (A records) for the hostname. On success, the Promise is resolved with an array of IPv4 addresses (e.g. ['74.125.79.104', '74.125.79.105', '74.125.79.106']).

M dnsPromises.resolve6(hostname[, options])

Added in: v10.6.0

• hostname string Host name to resolve.
• options Object
  • ttl boolean Retrieve the Time-To-Live value (TTL) of each record. When true, the Promise is resolved with an array of { address: '0:1:2:3:4:5:6:7', ttl: 60 } objects rather than an array of strings, with the TTL expressed in seconds.

Uses the DNS protocol to resolve IPv6 addresses (AAAA records) for the hostname. On success, the Promise is resolved with an array of IPv6 addresses.

M dnsPromises.resolveAny(hostname)

Added in: v10.6.0

• hostname string

Uses the DNS protocol to resolve all records (also known as ANY or * query). On success, the Promise is resolved with an array containing various types of records. Each object has a property type that indicates the type of the current record. And depending on the type, additional properties will be present on the object:

Here is an example of the result object:

JScopy

M dnsPromises.resolveCaa(hostname)

Added in: v15.0.0, v14.17.0

• hostname string

Uses the DNS protocol to resolve CAA records for the hostname. On success, the Promise is resolved with an array of objects containing available certification authority authorization records available for the hostname (e.g. [{critical: 0, iodef: 'mailto:pki@example.com'},{critical: 128, issue: 'pki.example.com'}]).

M dnsPromises.resolveCname(hostname)

Added in: v10.6.0

• hostname string

Uses the DNS protocol to resolve CNAME records for the hostname. On success, the Promise is resolved with an array of canonical name records available for the hostname (e.g. ['bar.example.com']).

M dnsPromises.resolveMx(hostname)

Added in: v10.6.0

• hostname string

Uses the DNS protocol to resolve mail exchange records (MX records) for the hostname. On success, the Promise is resolved with an array of objects containing both a priority and exchange property (e.g. [{priority: 10, exchange: 'mx.example.com'}, ...]).

M dnsPromises.resolveNaptr(hostname)

Added in: v10.6.0

• hostname string

Uses the DNS protocol to resolve regular expression-based records (NAPTR records) for the hostname. On success, the Promise is resolved with an array of objects with the following properties:

• flags
• service
• regexp
• replacement
• order
• preference

JScopy

M dnsPromises.resolveNs(hostname)

Added in: v10.6.0

• hostname string

Uses the DNS protocol to resolve name server records (NS records) for the hostname. On success, the Promise is resolved with an array of name server records available for hostname (e.g. ['ns1.example.com', 'ns2.example.com']).

M dnsPromises.resolvePtr(hostname)

Added in: v10.6.0

• hostname string

Uses the DNS protocol to resolve pointer records (PTR records) for the hostname. On success, the Promise is resolved with an array of strings containing the reply records.

M dnsPromises.resolveSoa(hostname)

Added in: v10.6.0

• hostname string

Uses the DNS protocol to resolve a start of authority record (SOA record) for the hostname. On success, the Promise is resolved with an object with the following properties:

• nsname
• hostmaster
• serial
• refresh
• retry
• expire
• minttl

JScopy

M dnsPromises.resolveSrv(hostname)

Added in: v10.6.0

• hostname string

Uses the DNS protocol to resolve service records (SRV records) for the hostname. On success, the Promise is resolved with an array of objects with the following properties:

• priority
• weight
• port
• name

JScopy

M dnsPromises.resolveTxt(hostname)

Added in: v10.6.0

• hostname string

Uses the DNS protocol to resolve text queries (TXT records) for the hostname. On success, the Promise is resolved with a two-dimensional array of the text records available for hostname (e.g. [ ['v=spf1 ip4:0.0.0.0 ', '~all' ] ]). Each sub-array contains TXT chunks of one record. Depending on the use case, these could be either joined together or treated separately.

M dnsPromises.reverse(ip)

Added in: v10.6.0

• ip string

Performs a reverse DNS query that resolves an IPv4 or IPv6 address to an array of host names.

On error, the Promise is rejected with an Error object, where err.code is one of the DNS error codes.

M dnsPromises.setDefaultResultOrder(order)

Added in: v16.4.0, v14.18.0

• order string must be 'ipv4first' or 'verbatim'.

Set the default value of verbatim in dns.lookup() and dnsPromises.lookup(). The value could be:

• ipv4first: sets default verbatim false.
• verbatim: sets default verbatim true.

The default is ipv4first and dnsPromises.setDefaultResultOrder() have higher priority than --dns-result-order. When using worker threads, dnsPromises.setDefaultResultOrder() from the main thread won't affect the default dns orders in workers.

M dnsPromises.setServers(servers)

Added in: v10.6.0

• servers string[] array of RFC 5952 formatted addresses

Sets the IP address and port of servers to be used when performing DNS resolution. The servers argument is an array of RFC 5952 formatted addresses. If the port is the IANA default DNS port (53) it can be omitted.

JScopy

An error will be thrown if an invalid address is provided.

The dnsPromises.setServers() method must not be called while a DNS query is in progress.

This method works much like resolve.conf. That is, if attempting to resolve with the first server provided results in a NOTFOUND error, the resolve() method will not attempt to resolve with subsequent servers provided. Fallback DNS servers will only be used if the earlier ones time out or result in some other error.

Error codes

Each DNS query can return one of the following error codes:

• dns.NODATA: DNS server returned an answer with no data.
• dns.FORMERR: DNS server claims query was misformatted.
• dns.SERVFAIL: DNS server returned general failure.
• dns.NOTFOUND: Domain name not found.
• dns.NOTIMP: DNS server does not implement the requested operation.
• dns.REFUSED: DNS server refused query.
• dns.BADQUERY: Misformatted DNS query.
• dns.BADNAME: Misformatted host name.
• dns.BADFAMILY: Unsupported address family.
• dns.BADRESP: Misformatted DNS reply.
• dns.CONNREFUSED: Could not contact DNS servers.
• dns.TIMEOUT: Timeout while contacting DNS servers.
• dns.EOF: End of file.
• dns.FILE: Error reading file.
• dns.NOMEM: Out of memory.
• dns.DESTRUCTION: Channel is being destroyed.
• dns.BADSTR: Misformatted string.
• dns.BADFLAGS: Illegal flags specified.
• dns.NONAME: Given host name is not numeric.
• dns.BADHINTS: Illegal hints flags specified.
• dns.NOTINITIALIZED: c-ares library initialization not yet performed.
• dns.LOADIPHLPAPI: Error loading iphlpapi.dll.
• dns.ADDRGETNETWORKPARAMS: Could not find GetNetworkParams function.
• dns.CANCELLED: DNS query cancelled.

The dnsPromises API also exports the above error codes, e.g., dnsPromises.NODATA.

Implementation considerations

Although dns.lookup() and the various dns.resolve*()/dns.reverse() functions have the same goal of associating a network name with a network address (or vice versa), their behavior is quite different. These differences can have subtle but significant consequences on the behavior of Node.js programs.

M dns.lookup()

Under the hood, dns.lookup() uses the same operating system facilities as most other programs. For instance, dns.lookup() will almost always resolve a given name the same way as the ping command. On most POSIX-like operating systems, the behavior of the dns.lookup() function can be modified by changing settings in nsswitch.conf(5) and/or resolv.conf(5), but changing these files will change the behavior of all other programs running on the same operating system.

Though the call to dns.lookup() will be asynchronous from JavaScript's perspective, it is implemented as a synchronous call to getaddrinfo(3) that runs on libuv's threadpool. This can have surprising negative performance implications for some applications, see the UV_THREADPOOL_SIZE documentation for more information.

Various networking APIs will call dns.lookup() internally to resolve host names. If that is an issue, consider resolving the host name to an address using dns.resolve() and using the address instead of a host name. Also, some networking APIs (such as socket.connect() and dgram.createSocket()) allow the default resolver, dns.lookup(), to be replaced.

M dns.resolve(), dns.resolve*(), and dns.reverse()

These functions are implemented quite differently than dns.lookup(). They do not use getaddrinfo(3) and they always perform a DNS query on the network. This network communication is always done asynchronously and does not use libuv's threadpool.

As a result, these functions cannot have the same negative impact on other processing that happens on libuv's threadpool that dns.lookup() can have.

They do not use the same set of configuration files that dns.lookup() uses. For instance, they do not use the configuration from /etc/hosts.