Bv9ARM.ch09.html revision 1ca759b3f5c0672b2a66bc02288fe010cabbfe37
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
75c0816e8295e180f4bc7f10db3d0d880383bc1cMark Andrews - Copyright (C) 2000-2015 Internet Systems Consortium, Inc. ("ISC")
4a14ce5ba00ab7bc55c99ffdcf59c7a4ab902721Automatic Updater - This Source Code Form is subject to the terms of the Mozilla Public
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - License, v. 2.0. If a copy of the MPL was not distributed with this
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - file, You can obtain one at http://mozilla.org/MPL/2.0/.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<link rel="prev" href="Bv9ARM.ch08.html" title="Chapter�8.�Troubleshooting">
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater<link rel="next" href="Bv9ARM.ch10.html" title="Appendix�B.�A Brief History of the DNS and BIND">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
e21a2904f02a03fa06b6db04d348f65fe9c67b2bMark Andrews<tr><th colspan="3" align="center">Appendix�A.�Release Notes</th></tr>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<a accesskey="p" href="Bv9ARM.ch08.html">Prev</a>�</td>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<td width="20%" align="right">�<a accesskey="n" href="Bv9ARM.ch10.html">Next</a>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<div class="titlepage"><div><div><h1 class="title">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<a name="Bv9ARM.ch09"></a>Release Notes</h1></div></div></div>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.0</a></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
ab8729140b1ad688ab03e1e9ce438fb1cbb49222Automatic Updater<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_license">License Change</a></span></dt>
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_security">Security Fixes</a></span></dt>
75c0816e8295e180f4bc7f10db3d0d880383bc1cMark Andrews<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_features">New Features</a></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_changes">Feature Changes</a></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_bugs">Bug Fixes</a></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="section"><a href="Bv9ARM.ch09.html#end_of_life">End of Life</a></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_thanks">Thank You</a></span></dt>
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater<div class="titlepage"><div><div><h2 class="title" style="clear: both">
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater<a name="id-1.10.2"></a>Release Notes for BIND Version 9.11.0</h2></div></div></div>
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater<div class="titlepage"><div><div><h3 class="title">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<a name="relnotes_intro"></a>Introduction</h3></div></div></div>
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater BIND 9.11.0 is a new feature release of BIND, still under development.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater This document summarizes new features and functional changes that
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater have been introduced on this branch. With each development
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater release leading up to the final BIND 9.11.0 release, this document
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater will be updated with additional features added and bugs fixed.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<div class="titlepage"><div><div><h3 class="title">
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater<a name="relnotes_download"></a>Download</h3></div></div></div>
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater The latest versions of BIND 9 software can always be found at
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater <a class="link" href="http://www.isc.org/downloads/" target="_top">http://www.isc.org/downloads/</a>.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater There you will find additional information about each release,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein source code, and pre-compiled versions for Microsoft Windows
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein operating systems.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater<div class="titlepage"><div><div><h3 class="title">
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater<a name="relnotes_license"></a>License Change</h3></div></div></div>
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater With the release of BIND 9.11.0, ISC is changing the open
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater source license for BIND from the ISC license to the Mozilla
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Public License (MPL 2.0). This change is effective from BIND
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater 9.11.0b1 onwards.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein The MPL-2.0 license requires that if you make changes to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein licensed software (e.g. BIND) and distribute them outside
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein your organization, that you publish those changes under that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein same license. It does not require that you publish or disclose
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein anything other than the changes you made to our software.
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater This new requirement will not affect anyone who is using BIND
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater without redistributing it, nor anyone redistributing it without
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein changes, therefore this change will be without consequence
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for most individuals and organizations who are using BIND.
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater Those unsure whether or not the license change affects their
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater use of BIND, or who wish to discuss how to comply with the
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater license may contact ISC at <a class="link" href="https://www.isc.org/mission/contact/" target="_top">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<div class="titlepage"><div><div><h3 class="title">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater It was possible to trigger a assertion when rendering a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein message using a specially crafted request. This flaw is
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater disclosed in CVE-2016-2776. [RT #43139]
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater getrrsetbyname with a non absolute name could trigger an
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein infinite recursion bug in lwresd and named with lwres
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein configured if when combined with a search list entry the
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews resulting name is too long. This flaw is disclosed in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein CVE-2016-2775. [RT #42694]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<div class="titlepage"><div><div><h3 class="title">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<a name="relnotes_features"></a>New Features</h3></div></div></div>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein A new method of provisioning secondary servers called
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "Catalog Zones" has been added. This is an implementation of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <a class="link" href="https://datatracker.ietf.org/doc/draft-muks-dnsop-dns-catalog-zones/" target="_top">
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater draft-muks-dnsop-dns-catalog-zones/
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein A catalog zone is a regular DNS zone which contains a list
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of "member zones", along with the configuration options for
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater each of those zones. When a server is configured to use a
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater catalog zone, all the zones listed in the catalog zone are
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein added to the local server as slave zones. When the catalog
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater zone is updated (e.g., by adding or removing zones, or
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater changing configuration options for existing zones) those
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater changes will be put into effect. Since the catalog zone is
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater itself a DNS zone, this means configuration changes can be
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein propagated to slaves using the standard AXFR/IXFR update
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater This feature should be considered experimental. It currently
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein supports only basic features; more advanced features such as
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater ACLs and TSIG keys are not yet supported. Example catalog
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zone configurations can be found in the Chapter 9 of the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein BIND Administrator Reference Manual.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Support for master entries with TSIG keys has been added to catalog
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater zones, as well as support for allow-query and allow-transfer.
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater Added an <span class="command"><strong>isc.rndc</strong></span> Python module, which allows
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span class="command"><strong>rndc</strong></span> commands to be sent from Python programs.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Added support for DynDB, a new interface for loading zone data
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater from an external database, developed by Red Hat for the FreeIPA
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein project. (Thanks in particular to Adam Tkac and Petr
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater Spacek of Red Hat for the contribution.)
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater Unlike the existing DLZ and SDB interfaces, which provide a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein limited subset of database functionality within BIND —
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater translating DNS queries into real-time database lookups with
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater relatively poor performance and with no ability to handle
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater DNSSEC-signed data — DynDB is able to fully implement
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews and extend the database API used natively by BIND.
507151045be68c671ffd4e2f37e17cdfa0376fc4Automatic Updater A DynDB module could pre-load data from an external data
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein source, then serve it with the same performance and
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews functionality as conventional BIND zones, and with the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ability to take advantage of database features not
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein available in BIND, such as multi-master replication.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Fetch quotas are now compiled in by default: they
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein no longer require BIND to be configured with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span class="command"><strong>--enable-fetchlimit</strong></span>, as was the case
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when the feature was introduced in BIND 9.10.3.
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater These quotas limit the queries that are sent by recursive
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater resolvers to authoritative servers experiencing denial-of-service
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater attacks. They can both reduce the harm done to authoritative
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein servers and also avoid the resource exhaustion that can be
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein experienced by recursive servers when they are being used as a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein vehicle for such an attack.
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: circle; ">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <code class="option">fetches-per-server</code> limits the number of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein simultaneous queries that can be sent to any single
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein authoritative server. The configured value is a starting
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein point; it is automatically adjusted downward if the server is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein partially or completely non-responsive. The algorithm used to
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater adjust the quota can be configured via the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <code class="option">fetch-quota-params</code> option.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <code class="option">fetches-per-zone</code> limits the number of
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews simultaneous queries that can be sent for names within a
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews single domain. (Note: Unlike "fetches-per-server", this
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews value is not self-tuning.)
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Statistics counters have also been added to track the number
922312472e2e05ebc64993d465999c5351b83036Automatic Updater of queries affected by these quotas.
28b3569d6248168e6c00caab951521cc8141a49dAutomatic Updater Added support for <span class="command"><strong>dnstap</strong></span>, a fast,
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews flexible method for capturing and logging DNS traffic,
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews developed by Robert Edmonds at Farsight Security, Inc.,
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews whose assistance is gratefully acknowledged.
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater To enable <span class="command"><strong>dnstap</strong></span> at compile time,
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews the <span class="command"><strong>fstrm</strong></span> and <span class="command"><strong>protobuf-c</strong></span>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews libraries must be available, and BIND must be configured with
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews A new utility <span class="command"><strong>dnstap-read</strong></span> has been added
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews to allow <span class="command"><strong>dnstap</strong></span> data to be presented in
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews a human-readable format.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <span class="command"><strong>rndc dnstap -roll</strong></span> causes <span class="command"><strong>dnstap</strong></span>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews output files to be rolled like log files -- the most recent output
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater file is renamed with a <code class="filename">.0</code> suffix, the next
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater most recent with <code class="filename">.1</code>, etc. (Note that this
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater only works when <span class="command"><strong>dnstap</strong></span> output is being written
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews to a file, not to a UNIX domain socket.) An optional numerical
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews argument specifies how many backup log files to retain; if not
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews specified or set to 0, there is no limit.
9b469e3c59015b1a4899c9d8395168126fe094fdAutomatic Updater <span class="command"><strong>rndc dnstap -reopen</strong></span> simply closes and reopens
9b469e3c59015b1a4899c9d8395168126fe094fdAutomatic Updater the <span class="command"><strong>dnstap</strong></span> output channel without renaming
9b469e3c59015b1a4899c9d8395168126fe094fdAutomatic Updater the output file.
9b469e3c59015b1a4899c9d8395168126fe094fdAutomatic Updater For more information on <span class="command"><strong>dnstap</strong></span>, see
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <a class="link" href="http://dnstap.info" target="_top">http://dnstap.info</a>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein New statistics counters have been added to track traffic
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein sizes, as specified in RSSAC002. Query and response
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein message sizes are broken up into ranges of histogram buckets:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein TCP and UDP queries of size 0-15, 16-31, ..., 272-288, and 288+,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and TCP and UDP responses of size 0-15, 16-31, ..., 4080-4095,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and 4096+. These values can be accessed via the XML and JSON
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein statistics channels at, for example,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <a class="link" href="http://localhost:8888/xml/v3/traffic" target="_top">http://localhost:8888/xml/v3/traffic</a>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <a class="link" href="http://localhost:8888/json/v1/traffic" target="_top">http://localhost:8888/json/v1/traffic</a>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Statistics for RSSAC02v3 traffic-volume, traffic-sizes and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein rcode-volume reporting are now collected.
<span class="command"><strong>rndc signing -serial <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>zonename</code></em></strong></span>.
in order to persist across restarts of the <span class="command"><strong>named</strong></span> server.
<span class="command"><strong>dig +ttlunits</strong></span> causes <span class="command"><strong>dig</strong></span>
<span class="command"><strong>dig +dscp=<em class="replaceable"><code>value</code></em></strong></span>
<span class="command"><strong>named -L <em class="replaceable"><code>filename</code></em></strong></span>
<span class="command"><strong>managed-keys</strong></span>, <span class="command"><strong>dnssec-validation
Updated the compiled-in addresses for H.ROOT-SERVERS.NET
When using native PKCS#11 cryptography (i.e.,
(e.g., when a zone file cannot be loaded) have been clarified
The SIT-related named.conf options have been marked as
Retrieving the local port range from net.ipv4.ip_local_port_range
<strong class="userinput"><code>no</code></strong>, <span class="command"><strong>named</strong></span> will only
<a class="link" href="https://www.isc.org/downloads/software-support-policy/" target="_top">https://www.isc.org/downloads/software-support-policy/</a>