From: Otto Moerbeek Date: Mon, 1 Dec 2025 07:28:56 +0000 (+0100) Subject: Merge pull request #16553 from omoerbeek/rec-any-to-tcp X-Git-Tag: rec-5.4.0-alpha1~37 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1b215c741bc6cd4afea3ea35c18f0e296d69538b;p=thirdparty%2Fpdns.git Merge pull request #16553 from omoerbeek/rec-any-to-tcp rec: always do ANY queries using TCP --- 1b215c741bc6cd4afea3ea35c18f0e296d69538b diff --cc pdns/recursordist/docs/upgrade.rst index 0e58440526,20aa1eb383..6559f4e2bd --- a/pdns/recursordist/docs/upgrade.rst +++ b/pdns/recursordist/docs/upgrade.rst @@@ -13,14 -13,12 +13,19 @@@ New Setting - The :ref:`setting-yaml-outgoing.cookies` setting has been introduced to implement cookie support for contacting authoritative servers and forwarders. See :rfc:`7873` and :rfc:`9018`. - The :ref:`setting-yaml-outgoing.cookies_unsupported` setting has been introduced to permanently mark authoritative servers as not supporting cookies. - The :ref:`setting-yaml-outgoing.tls_configurations` setting has been introduced to be able to force certificate validation and other properties of outgoing DoT connections. + - The :ref:`setting-yaml-outgoing.any_to_tcp` setting has been introduced to force outgoing ANY queries to TCP. + + Changed Settings + ^^^^^^^^^^^^^^^^ + - The default value of :ref:`setting-yaml-recursor.any_to_tcp` has been changed to ``true``. +Changed Settings +^^^^^^^^^^^^^^^^ + +- It is no longer necessary to set :ref:`setting-yaml-webservice.api_key` to enable the web service. + When no API key is set, usage is limited to (potentially password based) access of the frontpage and related statistics calls. + If you have a configuration where the webservice is enabled but no api key is set, the webservice will now become available where it was not before. + :program:`rec_control` ^^^^^^^^^^^^^^^^^^^^^^