From: Michał Kępień <michal@isc.org>
Date: Wed, 10 Jun 2020 09:07:02 +0000 (+0200)
Subject: Add release note for #1834
X-Git-Tag: v9.17.3~52^2~3^2~3
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b932982903cb83c2193da95fb757f41db34bcca3;p=thirdparty%2Fbind9.git

Add release note for #1834
---

diff --git a/doc/notes/notes-9.17.2.rst b/doc/notes/notes-9.17.2.rst
index 582fe4c022b..a4784b2c0db 100644
--- a/doc/notes/notes-9.17.2.rst
+++ b/doc/notes/notes-9.17.2.rst
@@ -150,6 +150,14 @@ Feature Changes
 Bug Fixes
 ~~~~~~~~~
 
+-  When fully updating the NSEC3 chain for a large zone via IXFR, a
+   temporary loss of performance could be experienced on the secondary
+   server when answering queries for nonexistent data that required
+   DNSSEC proof of non-existence (in other words, queries that required
+   the server to find and to return NSEC3 data). The unnecessary
+   processing step that was causing this delay has now been removed.
+   [GL #1834]
+
 -  ``named`` could crash with an assertion failure if the name of a
    database node was looked up while the database was being modified.
    [GL #1857]