From: Evan Hunt Date: Tue, 21 Oct 2014 23:42:23 +0000 (-0700) Subject: [master] backfill release notes X-Git-Tag: v9.11.0a1~1327 X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=67c6b5edd034c445ccb6c36097d9fac4de21a542;p=thirdparty%2Fbind9.git [master] backfill release notes --- diff --git a/README b/README index 5681a17dc1f..5dace6cd4be 100644 --- a/README +++ b/README @@ -57,9 +57,9 @@ BIND 9.11.0 releases. New features include: - The zone serial number of a dynamically updatable zone - can now be set via "rndc signing -serial". This allows - inline-signing zones to be set to a specific serial - number. + can now be set via "rndc signing -serial ". + This allows inline-signing zones to be set to a specific + serial number. - SERVFAIL responses can now be cached for a limited time (defaulting to 10 seconds, with an upper limit of 30). This can reduce the frequency of retries when a query is @@ -86,8 +86,6 @@ BIND 9.11.0 - A new "masterfile-style" zone option controls the formatting of text zone files: When set to "full", a zone file is dumped in single-line-per-record format. - - "dig" now supports sending arbitrary EDNS options by specifying - them on the command line. - "dig +ttlunits" causes dig to print TTL values with time-unit suffixes: w, d, h, m, s for weeks, days, hours, minutes, and seconds. diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml index 3bd26e174b4..9d7e6dae960 100644 --- a/doc/arm/notes.xml +++ b/doc/arm/notes.xml @@ -48,21 +48,134 @@ - rndc can be used to set the serial of dynamically updatable - zones using "rndc signing -serial # zone". This is - particularly useful with inline zones which have been - reset. The serial should be set to a value larger than - that on the slaves. This will trigger a AXFR style + The serial number of a dynamically updatable zone can + now be set using + rndc signing -serial number zonename. + This is particularly useful with + zones that have been reset. Setting the serial number to a value + larger than that on the slaves will trigger an AXFR-style transfer. + + + When answering recursive queries, SERVFAIL responses can now be + cached by the server for a limited time; subsequent queries for + the same query name and type will return another SERVFAIL until + the cache times out. This reduces the frequency of retries + when a query is persistently failing, which can be a burden + on recursive serviers. The SERVFAIL cache timeout is controlled + by , which defaults to 10 seconds + and has an upper limit of 30. + + + + + The new rndc nta command can now be used to + set a "negative trust anchor" (NTA), disabling DNSSEC validation for + a specific domain; this can be used when responses from a domain + are known to be failing validation due to administrative error + rather than because of a spoofing attack. NTAs are strictly + temporary; by default they expire after one hour, but can be + configured to last up to one week. The default NTA lifetime + can be changed by setting the in + named.conf. + + + + + The EDNS Client Subnet (ECS) option is now supported for + authoritative servers; if a query contains an ECS option then + ACLs containing or + elements can match against the the address encoded in the option. + This can be used to select a view for a query, so that different + answers can be provided depending on the client network. + + + + + The EDNS EXPIRE option has been implemented on the client + side, allowing a slave server to set the expiration timer + correctly when transferring zone data from another slave + server. + + + + + A new zone option controls + the formatting of text zone files: When set to + full, the zone file will dumped in + single-line-per-record format. + + + + + dig +ednsopt can now be used to set + arbitrary EDNS options in DNS requests. + + + + + dig +ednsflags can now be used to set + yet-to-be-defined EDNS flags in DNS requests. + + + + + dig +ttlunits causes dig to print TTL + values with time-unit suffixes: w, d, h, m, s for weeks, + days, hours, minutes, and seconds. + + + + + can now be set to + date. On update, the serial number will + be set to the current date in YYYYMMDDNN format. + + + + + dnssec-signzone -N date also sets the serial + number to YYYYMMDDNN. + + + + + named -L filename + causes named to send log messages to the specified file by + default instead of to the system log. + + + + + The rate limiter configured by the + option no longer covers + NOTIFY messages; those are now separately controlled by + and + (the latter of which + controls the rate of NOTIFY messages sent when the server + is first started up or reconfigured). + + Feature Changes - None + + Update forwarding performance has been improved by allowing + a single TCP connection to be shared between multiple updates. + + + + + By default, nsupdate will now check + the correctness of hostnames when adding records of type + A, AAAA, MX, SOA, NS, SRV or PTR. This behavior can be + disabled with check-names no. +