2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-31 06:25:31 +00:00

Update ARM documentation

(cherry picked from commit b5265a8cfa)
This commit is contained in:
Mukund Sivaraman
2018-03-20 21:49:16 +05:30
committed by Evan Hunt
parent a60cef9dec
commit 8c98e7abfe

View File

@@ -6104,10 +6104,25 @@ options {
<term><command>answer-cookie</command></term>
<listitem>
<para>
<emphasis>This option is obsolete</emphasis>.
This option was used to prevent the sending of
a DNS COOKIE option in response to a request with
one present in BIND 9.11 and BIND 9.12.
When set to the default value of <userinput>yes</userinput>,
COOKIE EDNS options will be sent when applicable in
replies to client queries. If set to
<userinput>no</userinput>, COOKIE EDNS options will not
be sent in replies. This can only be set at the global
options level, not per-view.
</para>
<para>
<command>answer-cookie</command> is only available
as a temporary measure, for use when
<command>named</command> shares an IP address
with other servers that do not yet support DNS
COOKIE. A mismatch between servers on the same
address is not expected to cause operational
problems, but the option to disable COOKIE responses
so that all servers have the same behavior is
provided out of an abundance of caution. DNS COOKIE
is an important security mechanism and should not be
disabled unless absolutely necessary.
</para>
</listitem>
</varlistentry>