mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-30 22:15:20 +00:00
Code Issues Releases Wiki Activity

[master] clarify auth ECS is not meant for production use

Browse Source
This commit is contained in:
Evan Hunt
2016-12-26 16:51:55 -08:00
parent c43f150d0a
commit c5b8b74113
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
doc/arm/Bv9ARM-book.xml
View File

@@ -17205,6 +17205,18 @@ zone "example.com" {
in ACLs that are not prefixed with "ecs" are matched only in ACLs that are not prefixed with "ecs" are matched only
against the source address. against the source address.
</para> </para>
<note>
<simpara>
(Note: The authoritative ECS implementation in
<command>named</command> is based on an early version of the
specification, and is known to have incompatibilities with
other implementations. It is also inefficient, requiring
a separate view for each client subnet to be sent different
answers, and it is unable to correct for overlapping subnets in
the configuration. It can be used for testing purposes, but is
not recommended for production use.)
</simpara>
</note>
<para> <para>
When <acronym>BIND</acronym> 9 is built with GeoIP support, When <acronym>BIND</acronym> 9 is built with GeoIP support,
ACLs can also be used for geographic access restrictions. ACLs can also be used for geographic access restrictions.