From: Mark Andrews <marka@isc.org>
Date: Mon, 23 Nov 2020 23:44:40 +0000 (+1100)
Subject: Add CHANGES and release notes for [GL #2295]
X-Git-Tag: v9.19.6~67^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=b22df206d48e8e3f191de7e85a5499122216899f;p=thirdparty%2Fbind9.git

Add CHANGES and release notes for [GL #2295]
---

diff --git a/CHANGES b/CHANGES
index 3c1adb50e68..eda0b74b72f 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,9 @@
+5966.	[func]		You can now specify if a server must return a DNS
+			COOKIE before accepting the response over UDP.
+			[GL #2295]
+
+			server <prefix> { require-cookie <yes_or_no>; };
+
 5965.	[cleanup]	Move the duplicated ASCII case conversion tables to
 			isc_ascii where they can be shared, and replace the
 			various hot-path tolower() loops with calls to new
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 6b9730770da..e1f3761303a 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -27,6 +27,12 @@ New Features
 
 - None.
 
+- A new configuration option ``require-cookie`` has been introduced, it
+  specifies if there should be a DNS COOKIE in the response for a given
+  prefix and if not named falls back to TCP.  This is useful if you know
+  a given server support DNS COOKIE.  It can also be used to force all
+  non DNS COOKIE responses to fall back to TCP.  :gl:`#2295`
+
 Removed Features
 ~~~~~~~~~~~~~~~~