notes.html revision eaaf00efc02fdd4965f747afb51f881ac5a389d2
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<!--
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina -
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina - Permission to use, copy, modify, and/or distribute this software for any
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina - purpose with or without fee is hereby granted, provided that the above
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina - copyright notice and this permission notice appear in all copies.
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina -
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina - PERFORMANCE OF THIS SOFTWARE.
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina-->
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<!-- $Id$ -->
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<html>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<head>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<title></title>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina</head>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="book" lang="en">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<div class="titlepage"><hr></div>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<div class="toc">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<p><b>Table of Contents</b></p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<dl>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<dt><span class="preface"><a href="#id2542024">�</a></span></dt>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<dd><dl>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<dt><span class="sect1"><a href="#id2542008">Release Notes for BIND Version 9.11.0pre-alpha</a></span></dt>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<dd><dl>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<dt><span class="sect2"><a href="#relnotes_intro">Introduction</a></span></dt>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<dt><span class="sect2"><a href="#relnotes_download">Download</a></span></dt>
47863dee64fa93859bc16ddc387010734da665eeFabiano Fidêncio<dt><span class="sect2"><a href="#relnotes_security">Security Fixes</a></span></dt>
3cb4592e27dac8032bd528b6a9f1b49dfa4ec0b8Fabiano Fidêncio<dt><span class="sect2"><a href="#relnotes_features">New Features</a></span></dt>
3cb4592e27dac8032bd528b6a9f1b49dfa4ec0b8Fabiano Fidêncio<dt><span class="sect2"><a href="#relnotes_changes">Feature Changes</a></span></dt>
3cb4592e27dac8032bd528b6a9f1b49dfa4ec0b8Fabiano Fidêncio<dt><span class="sect2"><a href="#relnotes_bugs">Bug Fixes</a></span></dt>
3cb4592e27dac8032bd528b6a9f1b49dfa4ec0b8Fabiano Fidêncio<dt><span class="sect2"><a href="#relnotes_thanks">Thank You</a></span></dt>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina</dl></dd>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina</dl></dd>
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek</dl>
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek</div>
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek<div class="preface" lang="en">
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek<div class="titlepage"><div><div><h2 class="title">
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek<a name="id2542024"></a>�</h2></div></div></div>
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek<div class="toc">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<p><b>Table of Contents</b></p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<dl>
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek<dt><span class="sect1"><a href="#id2542008">Release Notes for BIND Version 9.11.0pre-alpha</a></span></dt>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<dd><dl>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<dt><span class="sect2"><a href="#relnotes_intro">Introduction</a></span></dt>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<dt><span class="sect2"><a href="#relnotes_download">Download</a></span></dt>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<dt><span class="sect2"><a href="#relnotes_security">Security Fixes</a></span></dt>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<dt><span class="sect2"><a href="#relnotes_features">New Features</a></span></dt>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<dt><span class="sect2"><a href="#relnotes_changes">Feature Changes</a></span></dt>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<dt><span class="sect2"><a href="#relnotes_bugs">Bug Fixes</a></span></dt>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<dt><span class="sect2"><a href="#relnotes_thanks">Thank You</a></span></dt>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina</dl></dd>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina</dl>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina</div>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<div class="sect1" lang="en">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<div class="titlepage"><div><div><h2 class="title" style="clear: both">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<a name="id2542008"></a>Release Notes for BIND Version 9.11.0pre-alpha</h2></div></div></div>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<div class="sect2" lang="en">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<div class="titlepage"><div><div><h3 class="title">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<a name="relnotes_intro"></a>Introduction</h3></div></div></div>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina This document summarizes changes since the last production release
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina of BIND on the corresponding major release branch.
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p>
f316e5446313bbf61c96b6763badc21604bff4a3Fabiano Fidêncio</div>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<div class="sect2" lang="en">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<div class="titlepage"><div><div><h3 class="title">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<a name="relnotes_download"></a>Download</h3></div></div></div>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina The latest versions of BIND 9 software can always be found at
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina <a href="http://www.isc.org/downloads/" target="_top">http://www.isc.org/downloads/</a>.
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina There you will find additional information about each release,
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina source code, and pre-compiled versions for Microsoft Windows
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina operating systems.
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina</div>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<div class="sect2" lang="en">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<div class="titlepage"><div><div><h3 class="title">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<div class="itemizedlist"><ul type="disc">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>None</p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina Errors reported when running <span><strong class="command">rndc addzone</strong></span>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina (e.g., when a zone file cannot be loaded) have been clarified
47863dee64fa93859bc16ddc387010734da665eeFabiano Fidêncio to make it easier to diagnose problems.
47863dee64fa93859bc16ddc387010734da665eeFabiano Fidêncio </p></li>
47863dee64fa93859bc16ddc387010734da665eeFabiano Fidêncio</ul></div>
47863dee64fa93859bc16ddc387010734da665eeFabiano Fidêncio</div>
47863dee64fa93859bc16ddc387010734da665eeFabiano Fidêncio<div class="sect2" lang="en">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<div class="titlepage"><div><div><h3 class="title">
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek<a name="relnotes_features"></a>New Features</h3></div></div></div>
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek<div class="itemizedlist"><ul type="disc">
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek<li><p>
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek The serial number of a dynamically updatable zone can
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek now be set using
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek <span><strong class="command">rndc signing -serial <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>zonename</code></em></strong></span>.
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek This is particularly useful with <code class="option">inline-signing</code>
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek zones that have been reset. Setting the serial number to a value
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek larger than that on the slaves will trigger an AXFR-style
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek transfer.
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek </p></li>
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek<li><p>
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek When answering recursive queries, SERVFAIL responses can now be
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek cached by the server for a limited time; subsequent queries for
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek the same query name and type will return another SERVFAIL until
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek the cache times out. This reduces the frequency of retries
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek when a query is persistently failing, which can be a burden
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek on recursive serviers. The SERVFAIL cache timeout is controlled
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek by <code class="option">servfail-ttl</code>, which defaults to 10 seconds
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek and has an upper limit of 30.
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek </p></li>
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek<li><p>
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek The new <span><strong class="command">rndc nta</strong></span> command can now be used to
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek set a "negative trust anchor" (NTA), disabling DNSSEC validation for
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek a specific domain; this can be used when responses from a domain
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek are known to be failing validation due to administrative error
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek rather than because of a spoofing attack. NTAs are strictly
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek temporary; by default they expire after one hour, but can be
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina configured to last up to one week. The default NTA lifetime
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina can be changed by setting the <code class="option">nta-lifetime</code> in
3cb4592e27dac8032bd528b6a9f1b49dfa4ec0b8Fabiano Fidêncio <code class="filename">named.conf</code>.
3cb4592e27dac8032bd528b6a9f1b49dfa4ec0b8Fabiano Fidêncio </p></li>
3cb4592e27dac8032bd528b6a9f1b49dfa4ec0b8Fabiano Fidêncio<li><p>
3cb4592e27dac8032bd528b6a9f1b49dfa4ec0b8Fabiano Fidêncio The EDNS Client Subnet (ECS) option is now supported for
3cb4592e27dac8032bd528b6a9f1b49dfa4ec0b8Fabiano Fidêncio authoritative servers; if a query contains an ECS option then
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina ACLs containing <code class="option">geoip</code> or <code class="option">ecs</code>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina elements can match against the the address encoded in the option.
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina This can be used to select a view for a query, so that different
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina answers can be provided depending on the client network.
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina The EDNS EXPIRE option has been implemented on the client
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina side, allowing a slave server to set the expiration timer
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina correctly when transferring zone data from another slave
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina server.
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
3cb4592e27dac8032bd528b6a9f1b49dfa4ec0b8Fabiano Fidêncio A new <code class="option">masterfile-style</code> zone option controls
3cb4592e27dac8032bd528b6a9f1b49dfa4ec0b8Fabiano Fidêncio the formatting of text zone files: When set to
3cb4592e27dac8032bd528b6a9f1b49dfa4ec0b8Fabiano Fidêncio <code class="literal">full</code>, the zone file will dumped in
3cb4592e27dac8032bd528b6a9f1b49dfa4ec0b8Fabiano Fidêncio single-line-per-record format.
3cb4592e27dac8032bd528b6a9f1b49dfa4ec0b8Fabiano Fidêncio </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina <span><strong class="command">dig +ednsopt</strong></span> can now be used to set
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina arbitrary EDNS options in DNS requests.
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina <span><strong class="command">dig +ednsflags</strong></span> can now be used to set
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina yet-to-be-defined EDNS flags in DNS requests.
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina <span><strong class="command">dig +ttlunits</strong></span> causes <span><strong class="command">dig</strong></span>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina to print TTL values with time-unit suffixes: w, d, h, m, s for
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina weeks, days, hours, minutes, and seconds.
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina <span><strong class="command">dig +dscp=<em class="replaceable"><code>value</code></em></strong></span>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina can now be used to set the DSCP code point in outgoing query
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina packets.
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek <code class="option">serial-update-method</code> can now be set to
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina <code class="literal">date</code>. On update, the serial number will
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina be set to the current date in YYYYMMDDNN format.
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina <span><strong class="command">dnssec-signzone -N date</strong></span> also sets the serial
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina number to YYYYMMDDNN.
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina <span><strong class="command">named -L <em class="replaceable"><code>filename</code></em></strong></span>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina causes named to send log messages to the specified file by
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina default instead of to the system log.
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina The rate limiter configured by the
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina <code class="option">serial-query-rate</code> option no longer covers
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina NOTIFY messages; those are now separately controlled by
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina <code class="option">notify-rate</code> and
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina <code class="option">startup-notify-rate</code> (the latter of which
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina controls the rate of NOTIFY messages sent when the server
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina is first started up or reconfigured).
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
3cb4592e27dac8032bd528b6a9f1b49dfa4ec0b8Fabiano Fidêncio The default number of tasks and client objects available
3cb4592e27dac8032bd528b6a9f1b49dfa4ec0b8Fabiano Fidêncio for serving lightweight resolver queries have been increased,
3cb4592e27dac8032bd528b6a9f1b49dfa4ec0b8Fabiano Fidêncio and are now configurable via the new <code class="option">lwres-tasks</code>
3cb4592e27dac8032bd528b6a9f1b49dfa4ec0b8Fabiano Fidêncio and <code class="option">lwres-clients</code> options in
3cb4592e27dac8032bd528b6a9f1b49dfa4ec0b8Fabiano Fidêncio <code class="filename">named.conf</code>. [RT #35857]
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina</ul></div>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina</div>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<div class="sect2" lang="en">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<div class="titlepage"><div><div><h3 class="title">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<a name="relnotes_changes"></a>Feature Changes</h3></div></div></div>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<div class="itemizedlist"><ul type="disc">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina ACLs containing <span><strong class="command">geoip asnum</strong></span> elements were
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina not correctly matched unless the full organization name was
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina specified in the ACL (as in
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina <span><strong class="command">geoip asnum "AS1234 Example, Inc.";</strong></span>).
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina They can now match against the AS number alone (as in
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina <span><strong class="command">geoip asnum "AS1234";</strong></span>).
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina When using native PKCS#11 cryptography (i.e.,
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina <span><strong class="command">configure --enable-native-pkcs11</strong></span>) HSM PINs
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina of up to 256 characters can now be used.
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina NXDOMAIN responses to queries of type DS are now cached separately
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina from those for other types. This helps when using "grafted" zones
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina of type forward, for which the parent zone does not contain a
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina delegation, such as local top-level domains. Previously a query
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina of type DS for such a zone could cause the zone apex to be cached
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina as NXDOMAIN, blocking all subsequent queries. (Note: This
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina change is only helpful when DNSSEC validation is not enabled.
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina "Grafted" zones without a delegation in the parent are not a
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina recommended configuration.)
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina Update forwarding performance has been improved by allowing
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina a single TCP connection to be shared between multiple updates.
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina By default, <span><strong class="command">nsupdate</strong></span> will now check
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina the correctness of hostnames when adding records of type
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina A, AAAA, MX, SOA, NS, SRV or PTR. This behavior can be
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina disabled with <span><strong class="command">check-names no</strong></span>.
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina</ul></div>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina</div>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<div class="sect2" lang="en">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<div class="titlepage"><div><div><h3 class="title">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<div class="itemizedlist"><ul type="disc">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina <span><strong class="command">dig</strong></span>, <span><strong class="command">host</strong></span> and
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina <span><strong class="command">nslookup</strong></span> aborted when encountering
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina a name which, after appending search list elements,
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina exceeded 255 bytes. Such names are now skipped, but
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina processing of other names will continue. [RT #36892]
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina The error message generated when
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina <span><strong class="command">named-checkzone</strong></span> or
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina <span><strong class="command">named-checkconf -z</strong></span> encounters a
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina <code class="option">$TTL</code> directive without a value has
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina been clarified. [RT #37138]
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina Semicolon characters (;) included in TXT records were
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina incorrectly escaped with a backslash when the record was
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina displayed as text. This is actually only necessary when there
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina are no quotation marks. [RT #37159]
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina When files opened for writing by <span><strong class="command">named</strong></span>,
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina such as zone journal files, were referenced more than once
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina in <code class="filename">named.conf</code>, it could lead to file
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina corruption as multiple threads wrote to the same file. This
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina is now detected when loading <code class="filename">named.conf</code>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina and reported as an error. [RT #37172]
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina When checking for updates to trust anchors listed in
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina <code class="option">managed-keys</code>, <span><strong class="command">named</strong></span>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina now revalidates keys based on the current set of
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina active trust anchors, without relying on any cached
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina record of previous validation. [RT #37506]
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<li><p>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina Large-system tuning
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina (<span><strong class="command">configure --with-tuning=large</strong></span>) caused
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina problems on some platforms by setting a socket receive
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina buffer size that was too large. This is now detected and
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina corrected at run time. [RT #37187]
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina </p></li>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina</ul></div>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina</div>
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<div class="sect2" lang="en">
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina<div class="titlepage"><div><div><h3 class="title">
3c6e15e8aa38d9dfa02a7255fad56149bdfb35a6Pavel Březina<a name="relnotes_thanks"></a>Thank You</h3></div></div></div>
3c6e15e8aa38d9dfa02a7255fad56149bdfb35a6Pavel Březina<p>
3c6e15e8aa38d9dfa02a7255fad56149bdfb35a6Pavel Březina Thank you to everyone who assisted us in making this release possible.
3c6e15e8aa38d9dfa02a7255fad56149bdfb35a6Pavel Březina If you would like to contribute to ISC to assist us in continuing to
3c6e15e8aa38d9dfa02a7255fad56149bdfb35a6Pavel Březina make quality open source software, please visit our donations page at
e157b9f6cb370e1b94bcac2044d26ad66d640fbaPavel Březina <a href="http://www.isc.org/donate/" target="_top">http://www.isc.org/donate/</a>.
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek </p>
3c6e15e8aa38d9dfa02a7255fad56149bdfb35a6Pavel Březina</div>
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek</div>
3c6e15e8aa38d9dfa02a7255fad56149bdfb35a6Pavel Březina</div>
bad11d1d9bd7292dd64856b8156dfc65c891d8bfJakub Hrozek</div></body>
aa691837a2fa2fe2e38a55d576644074e0f45bd8Pavel Březina</html>
aa691837a2fa2fe2e38a55d576644074e0f45bd8Pavel Březina