Bv9ARM.ch09.html revision 19a1241d2f775a3d7ded77e522288c8407fa3413
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
c78c39caab4cf8b5daefc9c65878f7f5ed3eb7a0Tinderbox User - Copyright (C) 2000-2016 Internet Systems Consortium, Inc. ("ISC")
ab496cc3df1648e9ad992a87c35c2c0870fdc69dTinderbox User - This Source Code Form is subject to the terms of the Mozilla Public
7c1468ed500356839a4a222517364e6ce18cb1a2Tinderbox User - License, v. 2.0. If a copy of the MPL was not distributed with this
c57668a2fbbe558c1bd21652813616f2f517c469Tinderbox User - file, You can obtain one at http://mozilla.org/MPL/2.0/.
8de3f14f1c300c3e1ed99084cc03485b42c92bf1Tinderbox User<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews<link rel="prev" href="Bv9ARM.ch08.html" title="Chapter�8.�Troubleshooting">
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<link rel="next" href="Bv9ARM.ch10.html" title="Appendix�B.�A Brief History of the DNS and BIND">
d5637bdbb931ff79fced3d4858d83212ea58ed15Tinderbox User<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<table width="100%" summary="Navigation header">
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews<tr><th colspan="3" align="center">Appendix�A.�Release Notes</th></tr>
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User<a accesskey="p" href="Bv9ARM.ch08.html">Prev</a>�</td>
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User<td width="20%" align="right">�<a accesskey="n" href="Bv9ARM.ch10.html">Next</a>
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User<div class="titlepage"><div><div><h1 class="title">
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews<a name="Bv9ARM.ch09"></a>Release Notes</h1></div></div></div>
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.1rc3</a></span></dt>
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews<dt><span class="section"><a href="Bv9ARM.ch09.html#root_key">New DNSSEC Root Key</a></span></dt>
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_license">License Change</a></span></dt>
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_security">Security Fixes</a></span></dt>
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_changes">Feature Changes</a></span></dt>
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_bugs">Bug Fixes</a></span></dt>
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_maint">Maintenance</a></span></dt>
16f6050f29b6b0422cee858e609f65e474e70ef2Tinderbox User<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_misc">Miscellaneous Notes</a></span></dt>
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<dt><span class="section"><a href="Bv9ARM.ch09.html#end_of_life">End of Life</a></span></dt>
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_thanks">Thank You</a></span></dt>
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<div class="titlepage"><div><div><h2 class="title" style="clear: both">
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<a name="id-1.10.2"></a>Release Notes for BIND Version 9.11.1rc3</h2></div></div></div>
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater<div class="titlepage"><div><div><h3 class="title">
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews<a name="relnotes_intro"></a>Introduction</h3></div></div></div>
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews This document summarizes changes since the last production
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews release on the BIND 9.11 branch.
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater Please see the <code class="filename">CHANGES</code> file for a further
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews list of bug fixes and other changes.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews<div class="titlepage"><div><div><h3 class="title">
eabc9c3c07cd956d3c436bd7614cb162dabdda76Mark Andrews<a name="relnotes_download"></a>Download</h3></div></div></div>
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews The latest versions of BIND 9 software can always be found at
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews <a class="link" href="http://www.isc.org/downloads/" target="_top">http://www.isc.org/downloads/</a>.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews There you will find additional information about each release,
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User source code, and pre-compiled versions for Microsoft Windows
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt operating systems.
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt<div class="titlepage"><div><div><h3 class="title">
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt<a name="root_key"></a>New DNSSEC Root Key</h3></div></div></div>
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt ICANN is in the process of introducing a new Key Signing Key (KSK) for
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt the global root zone. BIND has multiple methods for managing DNSSEC
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt trust anchors, with somewhat different behaviors. If the root
7cc0a5d21ef046bfd630c4769943d896a7d7472cTinderbox User key is configured using the <span class="command"><strong>managed-keys</strong></span>
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews statement, or if the pre-configured root key is enabled by using
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews <span class="command"><strong>dnssec-validation auto</strong></span>, then BIND can keep
ee11dfc481f2ef6a032a715454f6290961a722d2Tinderbox User keys up to date automatically. Servers configured in this way
ee11dfc481f2ef6a032a715454f6290961a722d2Tinderbox User will roll seamlessly to the new key when it is published in
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews the root zone. However, keys configured using the
e40c4e4c17d4df338e2a7db0f84d8dbb3858964cTinderbox User <span class="command"><strong>trusted-keys</strong></span> statement are not automatically
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews maintained. If your server is performing DNSSEC validation
e40c4e4c17d4df338e2a7db0f84d8dbb3858964cTinderbox User and is configured using <span class="command"><strong>trusted-keys</strong></span>, you are
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User advised to change your configuration before the root zone begins
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews signing with the new KSK. This is currently scheduled for
e40c4e4c17d4df338e2a7db0f84d8dbb3858964cTinderbox User October 11, 2017.
77932ac533c711eca5cd86de4e7eca8d91102b43Tinderbox User This release includes an updated version of the
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews <code class="filename">bind.keys</code> file containing the new root
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User key. This file can also be downloaded from
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson <a class="link" href="https://www.isc.org/bind-keys" target="_top">
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews<div class="titlepage"><div><div><h3 class="title">
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User<a name="relnotes_license"></a>License Change</h3></div></div></div>
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User With the release of BIND 9.11.0, ISC changed to the open
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson source license for BIND from the ISC license to the Mozilla
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User Public License (MPL 2.0).
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews The MPL-2.0 license requires that if you make changes to
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User licensed software (e.g. BIND) and distribute them outside
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson your organization, that you publish those changes under that
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User same license. It does not require that you publish or disclose
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews anything other than the changes you made to our software.
28a5dd720187fddb16055a0f64b63a7b66f29f64Mark Andrews This new requirement will not affect anyone who is using BIND
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews without redistributing it, nor anyone redistributing it without
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews changes, therefore this change will be without consequence
e40c4e4c17d4df338e2a7db0f84d8dbb3858964cTinderbox User for most individuals and organizations who are using BIND.
fd972434c29fc1169d66594e4cc7697d33036c2bTinderbox User Those unsure whether or not the license change affects their
e40c4e4c17d4df338e2a7db0f84d8dbb3858964cTinderbox User use of BIND, or who wish to discuss how to comply with the
37d8e0a4455876fe1e4cca511076cc2c5ab9eedeTinderbox User license may contact ISC at <a class="link" href="https://www.isc.org/mission/contact/" target="_top">
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<div class="titlepage"><div><div><h3 class="title">
e40c4e4c17d4df338e2a7db0f84d8dbb3858964cTinderbox User<a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
5747235bf35e7398984fd6b4632743396895ea7aTinderbox User <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark Andrews 'rndc ""' could trigger a assertion failure in named. This flaw
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews is disclosed in (CVE-2017-3138). [RT #44924]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews Some chaining (i.e., type CNAME or DNAME) responses to upstream
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews queries could trigger assertion failures. This flaw is disclosed
e40c4e4c17d4df338e2a7db0f84d8dbb3858964cTinderbox User in CVE-2017-3137. [RT #44734]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews <span class="command"><strong>dns64</strong></span> with <span class="command"><strong>break-dnssec yes;</strong></span>
01a5c5503482fb3ba52088bf0178a7213273bf96Mark Andrews can result in an assertion failure. This flaw is disclosed in
e40c4e4c17d4df338e2a7db0f84d8dbb3858964cTinderbox User CVE-2017-3136. [RT #44653]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User If a server is configured with a response policy zone (RPZ)
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews that rewrites an answer with local data, and is also configured
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User for DNS64 address mapping, a NULL pointer can be read
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater triggering a server crash. This flaw is disclosed in
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User CVE-2017-3135. [RT #44434]
fa0326cc2cf428f67575b6ba3b97b528a31b0010Tinderbox User A coding error in the <code class="option">nxdomain-redirect</code>
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User feature could lead to an assertion failure if the redirection
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews namespace was served from a local authoritative data source
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User such as a local zone or a DLZ instead of via recursive
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews lookup. This flaw is disclosed in CVE-2016-9778. [RT #43837]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User <span class="command"><strong>named</strong></span> could mishandle authority sections
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews with missing RRSIGs, triggering an assertion failure. This
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User flaw is disclosed in CVE-2016-9444. [RT #43632]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews <span class="command"><strong>named</strong></span> mishandled some responses where
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User covering RRSIG records were returned without the requested
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater data, resulting in an assertion failure. This flaw is
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User disclosed in CVE-2016-9147. [RT #43548]
133e6d43fa82e80d3798be4de00f4540f485ec6cAutomatic Updater <span class="command"><strong>named</strong></span> incorrectly tried to cache TKEY
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User records which could trigger an assertion failure when there was
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews a class mismatch. This flaw is disclosed in CVE-2016-9131.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews It was possible to trigger assertions when processing
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User responses containing answers of type DNAME. This flaw is
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews disclosed in CVE-2016-8864. [RT #43465]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User Added the ability to specify the maximum number of records
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews permitted in a zone (<code class="option">max-records #;</code>).
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User This provides a mechanism to block overly large zone
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews transfers, which is a potential risk with slave zones from
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews other parties, as described in CVE-2016-6170.
7ca715ad1587a68a531ea1cdea07515d7232567eTinderbox User<div class="titlepage"><div><div><h3 class="title">
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User<a name="relnotes_changes"></a>Feature Changes</h3></div></div></div>
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews <span class="command"><strong>dnstap</strong></span> now stores both the local and remote
933799f3641f4f78445d015008bad0038900a82aTinderbox User addresses for all messages, instead of only the remote address.
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews The default output format for <span class="command"><strong>dnstap-read</strong></span> has
933799f3641f4f78445d015008bad0038900a82aTinderbox User been updated to include these addresses, with the initiating
4151211e6649332f7b5a55870cbe37128bcc7b29Tinderbox User address first and the responding address second, separated by
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews "-%gt;" or "%lt;-" to indicate in which direction the message
bc0a53583d92309bebcf93c408e2f3247ebd3d3cAutomatic Updater was sent. [RT #43595]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Expanded and improved the YAML output from
ba8b771c371967dd1254c7fa82ebe4158ee04b24Tinderbox User <span class="command"><strong>dnstap-read -y</strong></span>: it now includes packet
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater size and a detailed breakdown of message contents.
3ec8f7777ea2b04fc1ebb63077f0916f63b1011aTinderbox User [RT #43622] [RT #43642]
19b3dc94bce93fa76bd7e066f9298630dbc9dcb4Automatic Updater If an ACL is specified with an address prefix in which the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater prefix length is longer than the address portion (for example,
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater 192.0.2.1/8), <span class="command"><strong>named</strong></span> will now log a warning.
7f94d9a8162c9a96b56e66176702b66e79d8e1a2Automatic Updater In future releases this will be a fatal configuration error.
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User<div class="titlepage"><div><div><h3 class="title">
96ea71632887c58a9d00f47eb318bf76b35903c3Mark Andrews<a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User A synthesized CNAME record appearing in a response before the
4cda4fd158d6ded5586bacea8c388445d99611eaAutomatic Updater associated DNAME could be cached, when it should not have been.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews This was a regression introduced while addressing CVE-2016-8864.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews <span class="command"><strong>named</strong></span> could deadlock if multiple changes
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews to NSEC/NSEC3 parameters for the same zone were being processed
bac4435d473c9a0281507524f084480c34aa942aTinderbox User at the same time. [RT #42770]
e40c4e4c17d4df338e2a7db0f84d8dbb3858964cTinderbox User <span class="command"><strong>named</strong></span> could trigger an assertion when
933799f3641f4f78445d015008bad0038900a82aTinderbox User sending NOTIFY messages. [RT #44019]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User Referencing a nonexistent zone in a <span class="command"><strong>response-policy</strong></span>
757ff043760e4743dda1a10e7d58349275934902Tinderbox User statement could cause an assertion failure during configuration.
ae454ec746d1d4db8d04e107d4d25ff13158c37fMark Andrews <span class="command"><strong>rndc addzone</strong></span> could cause a crash
1bcc3273a80c256f11d9098a00ba2c041939e233Mark Andrews when attempting to add a zone with a type other than
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson <span class="command"><strong>master</strong></span> or <span class="command"><strong>slave</strong></span>.
1bcc3273a80c256f11d9098a00ba2c041939e233Mark Andrews Such zones are now rejected. [RT #43665]
bac4435d473c9a0281507524f084480c34aa942aTinderbox User <span class="command"><strong>named</strong></span> could hang when encountering log
f520803b46dc189fdaf84adc87ef327d3587b435Mark Andrews file names with large apparent gaps in version number (for
e40c4e4c17d4df338e2a7db0f84d8dbb3858964cTinderbox User example, when files exist called "logfile.0", "logfile.1",
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User and "logfile.1482954169"). This is now handled correctly.
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User If a zone was updated while <span class="command"><strong>named</strong></span> was
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson processing a query for nonexistent data, it could return
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User out-of-sync NSEC3 records causing potential DNSSEC validation
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews failure. [RT #43247]
caaff35375fba833f156f952aeca689e5bc7cddfFrancis Dupont<div class="titlepage"><div><div><h3 class="title">
caaff35375fba833f156f952aeca689e5bc7cddfFrancis Dupont<a name="relnotes_maint"></a>Maintenance</h3></div></div></div>
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews The built-in root hints have been updated to include an
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews IPv6 address (2001:500:12::d0d) for G.ROOT-SERVERS.NET.
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews<div class="titlepage"><div><div><h3 class="title">
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User<a name="relnotes_misc"></a>Miscellaneous Notes</h3></div></div></div>
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews Authoritative server support for the EDNS Client Subnet option
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews (ECS), introduced in BIND 9.11.0, was based on an early version
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews of the specification, and is now known to have incompatibilities
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews with other ECS implementations. It is also inefficient, requiring
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater a separate view for each answer, and is unable to correct for
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews overlapping subnets in the configuration. It is intended for
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews testing purposes but is not recommended for for production use.
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews This was not made sufficiently clear in the documentation at
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews the time of release.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews<div class="titlepage"><div><div><h3 class="title">
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews<a name="end_of_life"></a>End of Life</h3></div></div></div>
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews The end of life for BIND 9.11 is yet to be determined but
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews will not be before BIND 9.13.0 has been released for 6 months.
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews <a class="link" href="https://www.isc.org/downloads/software-support-policy/" target="_top">https://www.isc.org/downloads/software-support-policy/</a>
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews<div class="titlepage"><div><div><h3 class="title">
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews<a name="relnotes_thanks"></a>Thank You</h3></div></div></div>
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrews Thank you to everyone who assisted us in making this release possible.
39cad8fb7d7ff3436bb24ce761354afcb80d295aMark Andrews If you would like to contribute to ISC to assist us in continuing to
c5a97a549c89d562e999d4f906b882c5a2a474e1Tinderbox User make quality open source software, please visit our donations page at
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User <a class="link" href="http://www.isc.org/donate/" target="_top">http://www.isc.org/donate/</a>.
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User<table width="100%" summary="Navigation footer">
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<a accesskey="p" href="Bv9ARM.ch08.html">Prev</a>�</td>
757ff043760e4743dda1a10e7d58349275934902Tinderbox User<td width="40%" align="right">�<a accesskey="n" href="Bv9ARM.ch10.html">Next</a>
933799f3641f4f78445d015008bad0038900a82aTinderbox User<td width="40%" align="left" valign="top">Chapter�8.�Troubleshooting�</td>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<td width="40%" align="right" valign="top">�Appendix�B.�A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym>
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.1rc3</p>