From 814e29afa1aef6b3332e6fff46b1e2ec99b052ec Mon Sep 17 00:00:00 2001 From: Andreas Jakum Date: Tue, 3 Aug 2021 09:56:50 +0200 Subject: [PATCH] dnsdist: Document that setECSOverride has drawbacks under certain conditions. --- pdns/dnsdistdist/docs/reference/config.rst | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/pdns/dnsdistdist/docs/reference/config.rst b/pdns/dnsdistdist/docs/reference/config.rst index ec5debb4ea..101d68fc15 100644 --- a/pdns/dnsdistdist/docs/reference/config.rst +++ b/pdns/dnsdistdist/docs/reference/config.rst @@ -436,7 +436,8 @@ EDNS Client Subnet .. function:: setECSOverride(bool) - When ``useClientSubnet`` in :func:`newServer` is set and dnsdist adds an EDNS Client Subnet Client option to the query, override an existing option already present in the query, if any + When ``useClientSubnet`` in :func:`newServer` is set and dnsdist adds an EDNS Client Subnet Client option to the query, override an existing option already present in the query, if any. + Note that it's not recommended to enable ``setECSOverride`` in front of an authoritative server responding with EDNS Client Subnet information as mismatching data (ECS scopes) can confuse clients and lead to SERVFAIL responses on downstream nameservers. :param bool: Whether to override an existing EDNS Client Subnet option present in the query. Defaults to false -- 2.47.2