Add release note for #1834

diff --git a/doc/notes/notes-9.17.2.rst b/doc/notes/notes-9.17.2.rst
index 582fe4c022bdd77827595235dbd1b537bee939ff..a4784b2c0db82f390488645841d93f4f5e7f92c5 100644 (file)
--- a/doc/notes/notes-9.17.2.rst
+++ b/doc/notes/notes-9.17.2.rst
@@ -150,6 +150,14 @@ Feature Changes
 Bug Fixes
 ~~~~~~~~~
 
+-  When fully updating the NSEC3 chain for a large zone via IXFR, a
+   temporary loss of performance could be experienced on the secondary
+   server when answering queries for nonexistent data that required
+   DNSSEC proof of non-existence (in other words, queries that required
+   the server to find and to return NSEC3 data). The unnecessary
+   processing step that was causing this delay has now been removed.
+   [GL #1834]
+
 -  ``named`` could crash with an assertion failure if the name of a
    database node was looked up while the database was being modified.
    [GL #1857]