NEWS + doc about TTL: apply changes from previous commits

(and minor other changes)

diff --git a/NEWS b/NEWS
index 53b11e6ee60b9213c8433df31027686484e536df..f93929e403e16e174fa79773b192b9fababf6a8e 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -3,6 +3,8 @@ Knot Resolver 5.x.y (202y-mm-dd)
 
 Improvements
 ------------
+- cache.max_ttl(): lower the default from six days to one day (!1323)
+  and apply both limits to the first uncached answer already
 - depend on jemalloc, preferably, to improve memory usage (!1353)
 - no longer accept DNS messages with trailing data (!1365)
 - policy.STUB: avoid applying aggressive DNSSEC denial proofs (!1364)

diff --git a/daemon/bindings/cache.rst b/daemon/bindings/cache.rst
index 6cab99305c0afe88f5a18556d8eee1b1c2a505cb..fe614bf963a0e3a2d6babbb21524a0280931b08b 100644 (file)
--- a/daemon/bindings/cache.rst
+++ b/daemon/bindings/cache.rst
@@ -221,17 +221,15 @@ Configuration reference
 
 .. function:: cache.max_ttl([ttl])
 
-  :param number ttl: maximum cache TTL in seconds (default: 1 day)
+  :param number ttl: maximum TTL in seconds (default: 1 day)
 
   .. KR_CACHE_DEFAULT_TTL_MAX ^^
 
   :return: current maximum TTL
 
-  Get or set maximum cache TTL.
+  Get or set maximum TTL bound applied to all received records.
 
-  .. note:: The `ttl` value must be in range `(min_ttl, 4294967295)`.
-
-  .. warning:: This settings applies only to currently open cache, it will not persist if the cache is closed or reopened.
+  .. note:: The `ttl` value must be in range `(min_ttl, 2147483647)`.
 
   .. code-block:: lua
 
@@ -244,18 +242,18 @@ Configuration reference
 
 .. function:: cache.min_ttl([ttl])
 
-  :param number ttl: minimum cache TTL in seconds (default: 5 seconds)
+  :param number ttl: minimum TTL in seconds (default: 5 seconds)
 
   .. KR_CACHE_DEFAULT_TTL_MIN ^^
 
   :return: current maximum TTL
 
-  Get or set minimum cache TTL. Any entry inserted into cache with TTL lower than minimal will be overridden to minimum TTL. Forcing TTL higher than specified violates DNS standards, use with care.
+  Get or set minimum TTL bound applied to all received records.
+  Forcing TTL higher than specified violates DNS standards, so use it with care.
+  TTL still won't be extended beyond expiration of the corresponding DNSSEC signature.
 
   .. note:: The `ttl` value must be in range `<0, max_ttl)`.
 
-  .. warning:: This settings applies only to currently open cache, it will not persist if the cache is closed or reopened.
-
   .. code-block:: lua
 
      -- Get minimum TTL