Bv9ARM.ch09.html revision 19a1241d2f775a3d7ded77e522288c8407fa3413
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews - Copyright (C) 2000-2016 Internet Systems Consortium, Inc. ("ISC")
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews - This Source Code Form is subject to the terms of the Mozilla Public
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews - License, v. 2.0. If a copy of the MPL was not distributed with this
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews - file, You can obtain one at http://mozilla.org/MPL/2.0/.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<link rel="prev" href="Bv9ARM.ch08.html" title="Chapter�8.�Troubleshooting">
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews<link rel="next" href="Bv9ARM.ch10.html" title="Appendix�B.�A Brief History of the DNS and BIND">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<table width="100%" summary="Navigation header">
e21a2904f02a03fa06b6db04d348f65fe9c67b2bMark Andrews<tr><th colspan="3" align="center">Appendix�A.�Release Notes</th></tr>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<a accesskey="p" href="Bv9ARM.ch08.html">Prev</a>�</td>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<td width="20%" align="right">�<a accesskey="n" href="Bv9ARM.ch10.html">Next</a>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="titlepage"><div><div><h1 class="title">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<a name="Bv9ARM.ch09"></a>Release Notes</h1></div></div></div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.1rc3</a></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="section"><a href="Bv9ARM.ch09.html#root_key">New DNSSEC Root Key</a></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_license">License Change</a></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_security">Security Fixes</a></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_changes">Feature Changes</a></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_bugs">Bug Fixes</a></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_maint">Maintenance</a></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_misc">Miscellaneous Notes</a></span></dt>
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews<dt><span class="section"><a href="Bv9ARM.ch09.html#end_of_life">End of Life</a></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_thanks">Thank You</a></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="titlepage"><div><div><h2 class="title" style="clear: both">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<a name="id-1.10.2"></a>Release Notes for BIND Version 9.11.1rc3</h2></div></div></div>
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews<div class="titlepage"><div><div><h3 class="title">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<a name="relnotes_intro"></a>Introduction</h3></div></div></div>
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews This document summarizes changes since the last production
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews release on the BIND 9.11 branch.
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews Please see the <code class="filename">CHANGES</code> file for a further
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews list of bug fixes and other changes.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="titlepage"><div><div><h3 class="title">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<a name="relnotes_download"></a>Download</h3></div></div></div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews The latest versions of BIND 9 software can always be found at
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <a class="link" href="http://www.isc.org/downloads/" target="_top">http://www.isc.org/downloads/</a>.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews There you will find additional information about each release,
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews source code, and pre-compiled versions for Microsoft Windows
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews operating systems.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="titlepage"><div><div><h3 class="title">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<a name="root_key"></a>New DNSSEC Root Key</h3></div></div></div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews ICANN is in the process of introducing a new Key Signing Key (KSK) for
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews the global root zone. BIND has multiple methods for managing DNSSEC
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews trust anchors, with somewhat different behaviors. If the root
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews key is configured using the <span class="command"><strong>managed-keys</strong></span>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews statement, or if the pre-configured root key is enabled by using
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <span class="command"><strong>dnssec-validation auto</strong></span>, then BIND can keep
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews keys up to date automatically. Servers configured in this way
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews will roll seamlessly to the new key when it is published in
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews the root zone. However, keys configured using the
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews <span class="command"><strong>trusted-keys</strong></span> statement are not automatically
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews maintained. If your server is performing DNSSEC validation
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews and is configured using <span class="command"><strong>trusted-keys</strong></span>, you are
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews advised to change your configuration before the root zone begins
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews signing with the new KSK. This is currently scheduled for
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews October 11, 2017.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews This release includes an updated version of the
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <code class="filename">bind.keys</code> file containing the new root
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews key. This file can also be downloaded from
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <a class="link" href="https://www.isc.org/bind-keys" target="_top">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="titlepage"><div><div><h3 class="title">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<a name="relnotes_license"></a>License Change</h3></div></div></div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews With the release of BIND 9.11.0, ISC changed to the open
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews source license for BIND from the ISC license to the Mozilla
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Public License (MPL 2.0).
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews The MPL-2.0 license requires that if you make changes to
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews licensed software (e.g. BIND) and distribute them outside
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews your organization, that you publish those changes under that
4abdfc917e6635a7c81d1f931a0c79227e72d025Mark Andrews same license. It does not require that you publish or disclose
4abdfc917e6635a7c81d1f931a0c79227e72d025Mark Andrews anything other than the changes you made to our software.
4abdfc917e6635a7c81d1f931a0c79227e72d025Mark Andrews This new requirement will not affect anyone who is using BIND
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews without redistributing it, nor anyone redistributing it without
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews changes, therefore this change will be without consequence
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews for most individuals and organizations who are using BIND.
license may contact ISC at <a class="link" href="https://www.isc.org/mission/contact/" target="_top">
Some chaining (i.e., type CNAME or DNAME) responses to upstream
<span class="command"><strong>dns64</strong></span> with <span class="command"><strong>break-dnssec yes;</strong></span>
<span class="command"><strong>master</strong></span> or <span class="command"><strong>slave</strong></span>.
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
IPv6 address (2001:500:12::d0d) for G.ROOT-SERVERS.NET.
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
<a class="link" href="https://www.isc.org/downloads/software-support-policy/" target="_top">https://www.isc.org/downloads/software-support-policy/</a>