2021-01-21 09:02:04 +01:00
|
|
|
..
|
|
|
|
|
Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
|
|
|
|
|
|
|
|
This Source Code Form is subject to the terms of the Mozilla Public
|
|
|
|
|
License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
|
|
|
file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
|
|
|
|
|
|
|
|
See the COPYRIGHT file distributed with this work for additional
|
|
|
|
|
information regarding copyright ownership.
|
|
|
|
|
|
|
|
|
|
Notes for BIND 9.17.10
|
|
|
|
|
----------------------
|
|
|
|
|
|
|
|
|
|
Security Fixes
|
|
|
|
|
~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
|
|
- None.
|
|
|
|
|
|
|
|
|
|
Known Issues
|
|
|
|
|
~~~~~~~~~~~~
|
|
|
|
|
|
|
|
|
|
- None.
|
|
|
|
|
|
|
|
|
|
New Features
|
|
|
|
|
~~~~~~~~~~~~
|
|
|
|
|
|
|
|
|
|
- None.
|
|
|
|
|
|
2020-12-23 12:16:26 -03:00
|
|
|
- A new option, ```stale-answer-client-timeout``, has been added to
|
|
|
|
|
improve ``named``'s behavior with respect to serving stale data. The option
|
|
|
|
|
defines the amount of time ``named`` waits before attempting
|
|
|
|
|
to answer the query with a stale RRset from cache. If a stale answer
|
|
|
|
|
is found, ``named`` continues the ongoing fetches, attempting to
|
|
|
|
|
refresh the RRset in cache until the ``resolver-query-timeout`` interval is
|
|
|
|
|
reached.
|
|
|
|
|
|
|
|
|
|
The default value is ``1800`` (in milliseconds) and the maximum value is
|
|
|
|
|
bounded to ``resolver-query-timeout`` minus one second. A value of
|
|
|
|
|
``0`` immediately returns a cached RRset if available, and still
|
|
|
|
|
attempts a refresh of the data in cache.
|
|
|
|
|
|
|
|
|
|
The option can be disabled by setting the value to ``off`` or
|
|
|
|
|
``disabled``. It also has no effect if ``stale-answer-enable`` is
|
|
|
|
|
disabled.
|
|
|
|
|
|
2021-01-21 09:02:04 +01:00
|
|
|
Removed Features
|
|
|
|
|
~~~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
|
|
- A number of non-working configuration options that had been marked
|
|
|
|
|
as obsolete in previous releases have now been removed completely.
|
|
|
|
|
Using any of the following options is now considered a configuration
|
|
|
|
|
failure:
|
|
|
|
|
``acache-cleaning-interval``, ``acache-enable``, ``additional-from-auth``,
|
|
|
|
|
``additional-from-cache``, ``allow-v6-synthesis``, ``cleaning-interval``,
|
|
|
|
|
``dnssec-enable``, ``dnssec-lookaside``, ``filter-aaaa``,
|
|
|
|
|
``filter-aaaa-on-v4``, ``filter-aaaa-on-v6``, ``geoip-use-ecs``, ``lwres``,
|
|
|
|
|
``max-acache-size``, ``nosit-udp-size``, ``queryport-pool-ports``,
|
|
|
|
|
``queryport-pool-updateinterval``, ``request-sit``, ``sit-secret``,
|
|
|
|
|
``support-ixfr``, ``use-queryport-pool``, ``use-ixfr``. [GL #1086]
|
|
|
|
|
|
|
|
|
|
Feature Changes
|
|
|
|
|
~~~~~~~~~~~~~~~
|
|
|
|
|
|
2021-01-12 15:18:27 +01:00
|
|
|
- The SONAMEs for BIND 9 libraries now include the current BIND 9
|
|
|
|
|
version number, in an effort to tightly couple internal libraries with
|
|
|
|
|
a specific release. This change makes the BIND 9 release process both
|
|
|
|
|
simpler and more consistent while also unequivocally preventing BIND 9
|
|
|
|
|
binaries from silently loading wrong versions of shared libraries (or
|
|
|
|
|
multiple versions of the same shared library) at startup. [GL #2387]
|
|
|
|
|
|
2021-01-21 09:02:04 +01:00
|
|
|
- The default value of ``max-stale-ttl`` has been changed from 12 hours to 1
|
|
|
|
|
day and the default value of ``stale-answer-ttl`` has been changed from 1
|
|
|
|
|
second to 30 seconds, following RFC 8767 recommendations. [GL #2248]
|
|
|
|
|
|
|
|
|
|
Bug Fixes
|
|
|
|
|
~~~~~~~~~
|
|
|
|
|
|
|
|
|
|
- KASP incorrectly set signature validity to the value of the DNSKEY signature
|
|
|
|
|
validity. This is now fixed. [GL #2383]
|
