Add CHANGES and release note for [GL #1265]

diff --git a/CHANGES b/CHANGES
index 8fcdbc995c9f575481194e4db57de22ba354457c..29fc31e58684995a5ee3240a3e7f14e998162244 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+5774.  [func]          Restore NSEC Aggressive Cache ("synth-from-dnssec")
+                       as active by default. It is limited to NSEC only
+                       and by default ignores NSEC records with next name
+                       in form \000.domain. [GL #1265]
+
 5773.  [func]          Change the message when accepting TCP connection has
                        failed to say "Accepting TCP connection failed" and
                        change the log level for ISC_R_NOTCONNECTED, ISC_R_QUOTA

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index e539c51c9bfde9a1bb2861f721c4c958ffbbf0d6..5bca71daae6ff032c2e7a56b98cb4de2652abdd3 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -58,6 +58,11 @@ Feature Changes
   events: ``socket is not connected``, ``quota reached``, and ``soft
   quota reached``. :gl:`#2700`
 
+- Restore NSEC Aggressive Cache (``synth-from-dnssec``) as active by default.
+  The implementation was optimized for better efficiency, and also tuned
+  to ignore certain types of broken NSEC records.  This feature currently
+  supports answer synthtesis only for zones using NSEC.  :gl:`#1265`
+
 Bug Fixes
 ~~~~~~~~~