Removed Features
~~~~~~~~~~~~~~~~
-- The options to set alternate local addresses for inbound zone transfers
- are removed (``alt-transfer-source``, ``alt-transfer-source-v6``,
- ``use-alt-transfer-source``). :gl:`#3694`
+- The statements setting alternate local addresses for inbound zone
+ transfers (``alt-transfer-source``, ``alt-transfer-source-v6``, and
+ ``use-alt-transfer-source``) have been removed. :gl:`#3714`
-- The Differentiated Services Code Point (DSCP) feature in BIND
- has been non-operational since the new Network Manager was introduced
- in BIND 9.16. It is now marked as obsolete, and vestigial code
- implementing it has been removed. Configuring DSCP values in
- ``named.conf`` will cause a warning to be logged. :gl:`#3773`
+- The Differentiated Services Code Point (DSCP) feature in BIND has been
+ non-operational since the new Network Manager was introduced in BIND
+ 9.16. It is now marked as obsolete, and vestigial code implementing it
+ has been removed. Configuring DSCP values in ``named.conf`` now causes
+ a warning to be logged. :gl:`#3773`
Feature Changes
~~~~~~~~~~~~~~~
-- Add the ability to configure the preferred source address when talking to
- remote servers such as :any:`primaries` and any:`parental-agents`.
- :gl:`!7110`
+- A new way of configuring the preferred source address when talking to
+ remote servers, such as :any:`primaries` and :any:`parental-agents`,
+ has been added: setting the ``source`` and/or ``source-v6`` arguments
+ for a given statement is now possible. This new approach is intended
+ to eventually replace statements such as :any:`parental-source`,
+ :any:`parental-source-v6`, :any:`transfer-source`, etc. :gl:`#3762`
-- Replace DNS over TCP and DNS over TLS transports code with a new,
- unified transport implementation. :gl:`#3374`
+- The code for DNS over TCP and DNS over TLS transports has been
+ replaced with a new, unified transport implementation. :gl:`#3374`
Bug Fixes
~~~~~~~~~
-- TLS session resumption might lead to handshake failures when client
- certificates are used for authentication (Mutual TLS). This has
- been fixed. :gl:`#3725`
+- Previously, TLS session resumption could have led to handshake
+ failures when client certificates were used for authentication (Mutual
+ TLS). This has been fixed. :gl:`#3725`
-- When an outgoing request timed out, the ``named`` would retry up to three
- times with the same server instead of trying a next available name server.
- This has been fixed. :gl:`#3637`
+- When an outgoing request timed out, :iscman:`named` would retry up to
+ three times with the same server instead of trying the next available
+ name server. This has been fixed. :gl:`#3637`
-- Recently used ADB names and ADB entries (IP addresses) could get cleaned when
- ADB would be under memory pressure. To mitigate this, count only actual ADB
- names and ADB entries into the overmem memory limit (exclude internal memory
- structures used for "housekeeping") and exclude recently used (<= 10 seconds)
- ADB names and entries from the overmem memory cleaner. :gl:`#3739`
+- Recently used ADB names and ADB entries (IP addresses) could get
+ cleaned when ADB was under memory pressure. To mitigate this, only
+ actual ADB names and ADB entries are now counted (excluding internal
+ memory structures used for "housekeeping") and recently used (<= 10
+ seconds) ADB names and entries are excluded from the overmem memory
+ cleaner. :gl:`#3739`
-- Fix a rare assertion failure in the outgoing TCP DNS connection handling.
- :gl:`#3178` :gl:`#3636`
+- A rare assertion failure was fixed in outgoing TCP DNS connection
+ handling. :gl:`#3178` :gl:`#3636`
-- In addition to a previously fixed bug, another similar issue was discovered
- where quotas could be erroneously reached for servers, including any
- configured forwarders, resulting in SERVFAIL answers being sent to clients.
- This has been fixed. :gl:`#3752`
+- In addition to a previously fixed bug, another similar issue was
+ discovered where quotas could be erroneously reached for servers,
+ including any configured forwarders, resulting in SERVFAIL answers
+ being sent to clients. This has been fixed. :gl:`#3752`
-- Clients may see an unexpected "Prohibited" extended DNS error when ``named``
- is configured with :any:`allow-recursion`). :gl:`#3743`
+- The "Prohibited" Extended DNS Error was inadvertently set in some
+ NOERROR responses. This has been fixed. :gl:`#3743`
Known Issues
~~~~~~~~~~~~