From: Vladimír Čunát Date: Mon, 17 Sep 2018 10:48:30 +0000 (+0200) Subject: view doc: warn against split-horizon DNS X-Git-Tag: v3.2.0~6^2~6 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c5f041444d75a81de1c29ac2450f5187f0e06e79;p=thirdparty%2Fknot-resolver.git view doc: warn against split-horizon DNS --- diff --git a/modules/view/README.rst b/modules/view/README.rst index 71c13ab19..b29c52d63 100644 --- a/modules/view/README.rst +++ b/modules/view/README.rst @@ -23,6 +23,14 @@ You can combine this information with :ref:`policy ` rules. This fill force given client subnet to TCP for names in ``example.com``. You can combine view selectors with RPZ_ to create personalized filters for example. +.. warning:: + + Beware that cache is shared by *all* requests. For example, it is safe + to refuse answer based on who asks the resolver, but trying to serve + different data to different clients may result in surprises. + Such setups are usually called **split-horizon** or similarly. + + Example configuration ^^^^^^^^^^^^^^^^^^^^^