Set up release notes for BIND 9.17.17

diff --git a/doc/arm/notes.rst b/doc/arm/notes.rst
index f7035c977d2e821445be46ea4e838ec09f140578..eb5c9ad81e706abec9a1070aff7f9a6b6c77cc78 100644 (file)
--- a/doc/arm/notes.rst
+++ b/doc/arm/notes.rst
@@ -51,6 +51,7 @@ The latest versions of BIND 9 software can always be found at
 https://www.isc.org/download/. There you will find additional
 information about each release, and source code.
 
+.. include:: ../notes/notes-current.rst
 .. include:: ../notes/notes-9.17.16.rst
 .. include:: ../notes/notes-9.17.15.rst
 .. include:: ../notes/notes-9.17.14.rst

diff --git a/doc/notes/notes-9.17.16.rst b/doc/notes/notes-9.17.16.rst
index e19ab79fd6798a5033d0166a64b0c2deccdbc630..fceb95bc892e6985d25dd2bb7c8e0b4384ef3474 100644 (file)
--- a/doc/notes/notes-9.17.16.rst
+++ b/doc/notes/notes-9.17.16.rst
@@ -22,12 +22,6 @@ Security Fixes
   Research Center for bringing this vulnerability to our attention.
   :gl:`#2787`
 
-- Named failed to check the opcode of responses when performing refresh,
-  stub updates, and UPDATE forwarding.  This could lead to an assertion
-  failure under particular conditions.  This has been addressed by checking
-  the opcode of those responses and rejecting the messages if they don't
-  match the expected value. :gl:`#2762`
-
 New Features
 ~~~~~~~~~~~~
 
@@ -36,13 +30,6 @@ New Features
   DS RRset in the parent zone. This enables automatic KSK rollovers.
   :gl:`#1126`
 
-- It is now possible to set a hard quota on the number of concurrent DoH
-  connections, and the number of active HTTP/2 streams per connection,
-  by using the ``http-listener-clients`` and ``http-streams-per-connection``
-  options, or the ``listener-clients`` and ``streams-per-connection``
-  parameters to an ``http`` statement. The defaults are 300 and 100
-  respectively. :gl:`#2809`
-
 Removed Features
 ~~~~~~~~~~~~~~~~
 
@@ -59,29 +46,6 @@ Feature Changes
   (TrunCated) bit set, which forces DNS clients to fall back to TCP.
   :gl:`#2790`
 
-- DNS over HTTPS support can be disabled at the compile time via the new
-  configuration option ``--disable-doh``.  This allows BIND 9 to be
-  compiled without libnghttp2 library. :gl:`#2478`
-
-- Memory allocation has been substantially refactored, and is now based on
-  the memory allocation API provided by the `jemalloc` library on platforms
-  where it is available. This library is now recommended for building BIND 9.
-  :gl:`#2433`
-
-- Previously, named accepted FORMERR responses both with and without
-  an OPT record, as an indication that a given server did not support
-  EDNS. To implement full compliance with RFC 6891, only FORMERR
-  responses without an OPT record are now accepted. This intentionally
-  breaks communication with servers that do not support EDNS and
-  that incorrectly echo back the query message with the RCODE field
-  set to FORMERR and the QR bit set to 1. :gl:`#2249`
-
-- CDS and CDNSKEY records may now be published in a zone without the
-  requirement that they exactly match an existing DNSKEY record, so long
-  the zone is signed with an algorithm represented in the CDS or CDNSKEY
-  record.  This allows a clean rollover from one DNS provider to another
-  when using a multiple-signer DNSSEC configuration. :gl:`#2710`
-
 Bug Fixes
 ~~~~~~~~~
 
@@ -112,12 +76,3 @@ Bug Fixes
 - A race condition could occur where two threads were competing for the
   same set of key file locks, leading to a deadlock. This has been
   fixed. :gl:`#2786`
-
-- Testing revealed that setting the thread affinity on both the netmgr
-  and netthread threads led to inconsistent recursive performance, as
-  sometimes the netmgr and netthread threads competed over a single
-  resource.
-
-  When the affinity is not set, tests show a slight dip in the authoritative
-  performance of around 5% (ranging from 3.8% to 7.8%), but
-  the recursive performance is now consistently improved. :gl:`#2822`

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
new file mode 100644 (file)
index 0000000..c6a5892
--- /dev/null
+++ b/doc/notes/notes-current.rst
@@ -0,0 +1,79 @@
+.. 
+   Copyright (C) Internet Systems Consortium, Inc. ("ISC")
+   
+   This Source Code Form is subject to the terms of the Mozilla Public
+   License, v. 2.0. If a copy of the MPL was not distributed with this
+   file, you can obtain one at https://mozilla.org/MPL/2.0/.
+   
+   See the COPYRIGHT file distributed with this work for additional
+   information regarding copyright ownership.
+
+Notes for BIND 9.17.17
+----------------------
+
+Security Fixes
+~~~~~~~~~~~~~~
+
+- Named failed to check the opcode of responses when performing refresh,
+  stub updates, and UPDATE forwarding.  This could lead to an assertion
+  failure under particular conditions.  This has been addressed by checking
+  the opcode of those responses and rejecting the messages if they don't
+  match the expected value. :gl:`#2762`
+
+Known Issues
+~~~~~~~~~~~~
+
+- None.
+
+New Features
+~~~~~~~~~~~~
+
+- It is now possible to set a hard quota on the number of concurrent DoH
+  connections, and the number of active HTTP/2 streams per connection,
+  by using the ``http-listener-clients`` and ``http-streams-per-connection``
+  options, or the ``listener-clients`` and ``streams-per-connection``
+  parameters to an ``http`` statement. The defaults are 300 and 100
+  respectively. :gl:`#2809`
+
+Removed Features
+~~~~~~~~~~~~~~~~
+
+- None.
+
+Feature Changes
+~~~~~~~~~~~~~~~
+
+- DNS over HTTPS support can be disabled at the compile time via the new
+  configuration option ``--disable-doh``.  This allows BIND 9 to be
+  compiled without libnghttp2 library. :gl:`#2478`
+
+- Memory allocation has been substantially refactored, and is now based on
+  the memory allocation API provided by the `jemalloc` library on platforms
+  where it is available. This library is now recommended for building BIND 9.
+  :gl:`#2433`
+
+- Previously, named accepted FORMERR responses both with and without
+  an OPT record, as an indication that a given server did not support
+  EDNS. To implement full compliance with RFC 6891, only FORMERR
+  responses without an OPT record are now accepted. This intentionally
+  breaks communication with servers that do not support EDNS and
+  that incorrectly echo back the query message with the RCODE field
+  set to FORMERR and the QR bit set to 1. :gl:`#2249`
+
+- CDS and CDNSKEY records may now be published in a zone without the
+  requirement that they exactly match an existing DNSKEY record, so long
+  the zone is signed with an algorithm represented in the CDS or CDNSKEY
+  record.  This allows a clean rollover from one DNS provider to another
+  when using a multiple-signer DNSSEC configuration. :gl:`#2710`
+
+Bug Fixes
+~~~~~~~~~
+
+- Testing revealed that setting the thread affinity on both the netmgr
+  and netthread threads led to inconsistent recursive performance, as
+  sometimes the netmgr and netthread threads competed over a single
+  resource.
+
+  When the affinity is not set, tests show a slight dip in the authoritative
+  performance of around 5% (ranging from 3.8% to 7.8%), but
+  the recursive performance is now consistently improved. :gl:`#2822`