diff --git a/conf/globalConfig/virutalRouter.xml b/conf/globalConfig/virutalRouter.xml
index 36e3b30ef2c..e084e3f925b 100755
--- a/conf/globalConfig/virutalRouter.xml
+++ b/conf/globalConfig/virutalRouter.xml
@@ -21,6 +21,20 @@
         <category>virtualRouter</category>
         <type>java.lang.Integer</type>
     </config>
+    <config>
+        <name>dnsmasq.dnsForwardMax</name>
+        <description>The maximum number of concurrent DNS queries forwarded by dnsmasq on a virtual router.</description>
+        <defaultValue>1000</defaultValue>
+        <category>virtualRouter</category>
+        <type>java.lang.Integer</type>
+    </config>
+    <config>
+        <name>dnsmasq.cacheSize</name>
+        <description>The DNS cache size used by dnsmasq on a virtual router.</description>
+        <defaultValue>10000</defaultValue>
+        <category>virtualRouter</category>
+        <type>java.lang.Integer</type>
+    </config>
     <config>
         <name>ping.interval</name>
         <description>The interval management nodes ping the virtual router agents running virtual router VMs, in seconds</description>
diff --git a/plugin/virtualRouterProvider/src/main/java/org/zstack/network/service/virtualrouter/VirtualRouterGlobalConfig.java b/plugin/virtualRouterProvider/src/main/java/org/zstack/network/service/virtualrouter/VirtualRouterGlobalConfig.java
index 3b8d87bb8f0..7b38e6cc723 100755
--- a/plugin/virtualRouterProvider/src/main/java/org/zstack/network/service/virtualrouter/VirtualRouterGlobalConfig.java
+++ b/plugin/virtualRouterProvider/src/main/java/org/zstack/network/service/virtualrouter/VirtualRouterGlobalConfig.java
@@ -18,6 +18,12 @@ public class VirtualRouterGlobalConfig {
     public static GlobalConfig COMMANDS_PARALELLISM_DEGREE = new GlobalConfig(CATEGORY, "command.parallelismDegree");
     @GlobalConfigValidation
     public static GlobalConfig RESTART_DNSMASQ_COUNT = new GlobalConfig(CATEGORY, "dnsmasq.restartAfterNumberOfSIGUSER1");
+    @GlobalConfigValidation(numberGreaterThan = 0)
+    @BindResourceConfig({VmInstanceVO.class})
+    public static GlobalConfig DNSMASQ_DNS_FORWARD_MAX = new GlobalConfig(CATEGORY, "dnsmasq.dnsForwardMax");
+    @GlobalConfigValidation(numberGreaterThan = 0)
+    @BindResourceConfig({VmInstanceVO.class})
+    public static GlobalConfig DNSMASQ_CACHE_SIZE = new GlobalConfig(CATEGORY, "dnsmasq.cacheSize");
     @GlobalConfigValidation(numberGreaterThan = 1)
     public static GlobalConfig PING_INTERVAL = new GlobalConfig(CATEGORY, "ping.interval");
     @GlobalConfigValidation