From: Ondřej Surý <ondrej@sury.org>
Date: Sun, 21 Jul 2019 15:28:17 +0000 (-0400)
Subject: Add release notes
X-Git-Tag: v9.15.3~45^2~1
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=eee6f51d05b6a923e5e1eb57a4165f1ae0525011;p=thirdparty%2Fbind9.git

Add release notes
---

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 4a4cfbd5e2c..c82d3b0894d 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -261,6 +261,22 @@
 	  installation path as an optional argument.
 	</para>
       </listitem>
+      <listitem>
+	<para>
+	  A SipHash 2-4 based DNS Cookie (RFC 7873) algorithm has been added and
+	  made default.  Old non-default HMAC-SHA based DNS Cookie algorithms
+	  have been removed, and only the default AES algorithm is being kept
+	  for legacy reasons.  This changes doesn't have any operational impact
+	  in most common scenarios.
+	</para>
+	<para>
+	  If you are running multiple DNS Servers (different versions of BIND 9
+	  or DNS server from multiple vendors) responding from the same IP
+	  address (anycast or load-balancing scenarios), you'll have to make
+	  sure that all the servers are configured with the same DNS Cookie
+	  algorithm and same Server Secret for the best performance.
+	</para>
+      </listitem>
     </itemizedlist>
   </section>