Add release notes

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 4a4cfbd5e2c644bc15571be3bda7706e24d17020..c82d3b0894d900c609d1d3c4504010de9bfc41e9 100644 (file)
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -261,6 +261,22 @@
          installation path as an optional argument.
        </para>
       </listitem>
+      <listitem>
+       <para>
+         A SipHash 2-4 based DNS Cookie (RFC 7873) algorithm has been added and
+         made default.  Old non-default HMAC-SHA based DNS Cookie algorithms
+         have been removed, and only the default AES algorithm is being kept
+         for legacy reasons.  This changes doesn't have any operational impact
+         in most common scenarios.
+       </para>
+       <para>
+         If you are running multiple DNS Servers (different versions of BIND 9
+         or DNS server from multiple vendors) responding from the same IP
+         address (anycast or load-balancing scenarios), you'll have to make
+         sure that all the servers are configured with the same DNS Cookie
+         algorithm and same Server Secret for the best performance.
+       </para>
+      </listitem>
     </itemizedlist>
   </section>