add ca_ bind and df_ in ns-default