mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-31 06:25:31 +00:00
Code Issues Releases Wiki Activity

Reorder release notes

Browse Source
This commit is contained in:
Michał Kępień
2020-11-16 11:00:50 +01:00
parent 59221c4b3b
commit a4dea3c70c
1 changed files with 11 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
doc/notes/notes-current.rst
View File

@@ -24,6 +24,12 @@ Known Issues
New Features New Features
~~~~~~~~~~~~ ~~~~~~~~~~~~
- Support for DNS over TLS (DoT) has been added: the ``dig`` tool is now
able to send DoT queries (``+tls`` option) and ``named`` can handle
DoT queries (``listen-on tls ...`` option). ``named`` can use either a
certificate provided by the user or an ephemeral certificate generated
automatically upon startup. [GL #1840]
- A new configuration option, ``stale-refresh-time``, has been - A new configuration option, ``stale-refresh-time``, has been
introduced. It allows a stale RRset to be served directly from cache introduced. It allows a stale RRset to be served directly from cache
for a period of time after a failed lookup, before a new attempt to for a period of time after a failed lookup, before a new attempt to
@@ -42,9 +48,6 @@ Removed Features
Feature Changes Feature Changes
~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~
- The network manager API is now used by ``named`` to send zone transfer
requests. [GL #2016]
- The ``dig``, ``host``, and ``nslookup`` tools have been converted to - The ``dig``, ``host``, and ``nslookup`` tools have been converted to
use the new network manager API rather than the older ISC socket API. use the new network manager API rather than the older ISC socket API.
@@ -55,11 +58,8 @@ Feature Changes
filtered before they ever reach ``dig``, so the option has been filtered before they ever reach ``dig``, so the option has been
removed. [GL #2140] removed. [GL #2140]
- Support for DNS over TLS (DoT) has been added: the ``dig`` tool is now - The network manager API is now used by ``named`` to send zone transfer
able to send DoT queries (``+tls`` option) and ``named`` can handle requests. [GL #2016]
DoT queries (``listen-on tls ...`` option). ``named`` can use either a
certificate provided by the user or an ephemeral certificate generated
automatically upon startup. [GL #1840]
- Add NSEC3 support for zones that manage their DNSSEC with the `dnssec-policy` - Add NSEC3 support for zones that manage their DNSSEC with the `dnssec-policy`
configuration. A new option 'nsec3param' can be used to set the desired configuration. A new option 'nsec3param' can be used to set the desired
@@ -68,11 +68,11 @@ Feature Changes
Bug Fixes Bug Fixes
~~~~~~~~~ ~~~~~~~~~
- ``UV_EOF`` is no longer treated as a ``TCP4RecvErr`` or a
``TCP6RecvErr``. [GL #2208]
- ``named`` could crash with an assertion failure if a TCP connection - ``named`` could crash with an assertion failure if a TCP connection
were closed while a request was still being processed. [GL #2227] were closed while a request was still being processed. [GL #2227]
- ``UV_EOF`` is no longer treated as a ``TCP4RecvErr`` or a
``TCP6RecvErr``. [GL #2208]
- The synthesised CNAME from a DNAME was incorrectly followed when the QTYPE - The synthesised CNAME from a DNAME was incorrectly followed when the QTYPE
was CNAME or ANY. [GL #2280] was CNAME or ANY. [GL #2280]