upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-02-25 10:59:35 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Reorder release notes

Browse source
This commit is contained in:
Michał Kępień 2021-12-06 15:51:24 +01:00 committed by Petr Špaček
parent a8d5fd88e3
commit 513dfd4fcc
No known key found for this signature in database
GPG key ID: ABD587CDF06581AE
1 changed files with 11 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
doc/notes/notes-current.rst
View file

@ -24,6 +24,11 @@ Known Issues
New Features
~~~~~~~~~~~~
- The ``allow-transfer`` option was extended to accept additional
``port`` and ``transport`` parameters, to further restrict zone
transfers to a particular port and/or DNS transport protocol.
:gl:`#2776`
- Extended DNS Error Code 18 - Prohibited (see :rfc:`8194` section
4.19) is now set if query access is denied to the specific client.
:gl:`#1836`
@ -36,10 +41,12 @@ Removed Features
Feature Changes
~~~~~~~~~~~~~~~
- The ``allow-transfer`` option was extended to accept additional
``port`` and ``transport`` parameters, to further restrict zone
transfers to a particular port and/or DNS transport protocol.
:gl:`#2776`
- Aggressive Use of DNSSEC-Validated Cache (``synth-from-dnssec``, see
:rfc:`8198`) is now enabled by default again, after having been
disabled in BIND 9.14.8. The implementation of this feature was
reworked to achieve better efficiency and tuned to ignore certain
types of broken NSEC records. Negative answer synthesis is currently
only supported for zones using NSEC. :gl:`#1265`
- The `UseSTD3ASCIIRules`_ flag is now disabled again for libidn2
function calls. Applying additional validation rules for domain names
@ -57,13 +64,6 @@ Feature Changes
following triggering events: ``socket is not connected``, ``quota
reached``, and ``soft quota reached``. :gl:`#2700`
- Aggressive Use of DNSSEC-Validated Cache (``synth-from-dnssec``, see
:rfc:`8198`) is now enabled by default again, after having been
disabled in BIND 9.14.8. The implementation of this feature was
reworked to achieve better efficiency and tuned to ignore certain
types of broken NSEC records. Negative answer synthesis is currently
only supported for zones using NSEC. :gl:`#1265`
- ``dnssec-dsfromkey`` no longer generates DS records from revoked keys.
:gl:`#853`