New Features
~~~~~~~~~~~~
-- Add support for multi-signer model 2 (RFC 8901) when using
- ``inline-signing``. :gl:`#2710`
+- Support for multi-signer model 2 (:rfc:`8901`) when using
+ :any:`inline-signing` was added. :gl:`#2710`
-- A new option to :any:`dnssec-policy` has been added, :any:`cdnskey`, that
- allows you to enable or disable the publication of CDNSKEY records.
- :gl:`#4050`
+- A new option to :any:`dnssec-policy` has been added, :any:`cdnskey`,
+ that allows users to enable or disable the publication of CDNSKEY
+ records. :gl:`#4050`
-- The read timeout in ``rndc`` can now be specified on the command line
- using the ``-t`` option, allowing commands that take a long time to
- complete sufficient time to do so. :gl:`#4046`
+- The read timeout in :iscman:`rndc` can now be specified on the command
+ line using the :option:`-t <rndc -t>` option, allowing commands that
+ take a long time to complete sufficient time to do so. :gl:`#4046`
- The system test suite can now be executed with pytest (along with
pytest-xdist for parallel execution). :gl:`#3978`
- Special-case code that was originally added to allow GSS-TSIG to work
around bugs in the Windows 2000 version of Active Directory has now
- been removed since Windows 2000 is long past end-of-life.
- The ``nsupdate -o`` option and the ``oldgsstsig`` command to ``nsupdate``
- have been deprecated, and are now treated as synonyms for ``nsupdate -g``
- and ``gsstsig`` respectively. :gl:`#4012`
+ been removed, since Windows 2000 is long past end-of-life. The
+ :option:`-o <nsupdate -o>` option and the ``oldgsstsig`` command to
+ :iscman:`nsupdate` have been deprecated, and are now treated as
+ synonyms for :option:`-g <nsupdate -g>` and ``gsstsig`` respectively.
+ :gl:`#4012`
Feature Changes
~~~~~~~~~~~~~~~
-- Improve the responsiveness of the ``named`` serving as an authoritative DNS
- server for a delegation-heavy zone(s) shortly after loading such zone(s).
- :gl:`#4045`
+- The responsiveness of :iscman:`named` was improved, when serving as an
+ authoritative DNS server for a delegation-heavy zone(s) shortly after
+ loading such zone(s). :gl:`#4045`
Bug Fixes
~~~~~~~~~
- When the :any:`stale-answer-enable` option was enabled and the
- :any:`stale-answer-client-timeout` option was enabled and larger than 0,
- ``named`` was taking two places from the :any:`clients-per-query` limit for
- each client and was failing to gradually auto-tune its value, as configured.
- This has been fixed. :gl:`#4074`
-
-- It could happen that after the :any:`stale-answer-client-timeout` duration,
- a delegation from cache was returned to the client. This has now been fixed.
- :gl:`#3950`
+ :any:`stale-answer-client-timeout` option was enabled and larger than
+ 0, :iscman:`named` previously allocated two slots from the
+ :any:`clients-per-query` limit for each client and failed to gradually
+ auto-tune its value, as configured. This has been fixed. :gl:`#4074`
+
+- Previously, it was possible for a delegation from cache to be returned
+ to the client after the :any:`stale-answer-client-timeout` duration.
+ This has been fixed. :gl:`#3950`
- BIND could allocate too big buffers when sending data via
stream-based DNS transports, leading to increased memory usage.