diff --git a/doc/arm/Bv9ARM-book.xml b/doc/arm/Bv9ARM-book.xml
index 9c0728fb0c..3866a01ae4 100644
--- a/doc/arm/Bv9ARM-book.xml
+++ b/doc/arm/Bv9ARM-book.xml
@@ -4811,6 +4811,7 @@ badresp:1,adberr:0,findfail:0,valfail:0]
     <optional> require-server-cookie <replaceable>yes_or_no</replaceable>; </optional>
     <optional> cookie-algorithm <replaceable>secret_string</replaceable>; </optional>
     <optional> cookie-secret <replaceable>secret_string</replaceable>; </optional>
+    <optional> nocookie-udp-size <replaceable>number</replaceable> ; </optional>
     <optional> request-nsid <replaceable>yes_or_no</replaceable>; </optional>
     <optional> rfc2308-type1 <replaceable>yes_or_no</replaceable>; </optional>
     <optional> use-id-pool <replaceable>yes_or_no</replaceable>; </optional>
@@ -6570,6 +6571,19 @@ options {
 	      </listitem>
 	    </varlistentry>
 
+	    <varlistentry>
+	      <term><command>nocookie-udp-size</command></term>
+	      <listitem>
+		<para>
+		  Sets the maximum size of UDP responses that will be
+		  sent to queries without a valid server COOKIE. A value
+		  below 128 will be silently raised to 128. The default
+		  value is 4096, but the <command>max-udp-size</command>
+		  option may further limit the response size.
+		</para>
+	      </listitem>
+	    </varlistentry>
+
 	    <varlistentry>
 	      <term><command>sit-secret</command></term>
 	      <listitem>
@@ -10878,7 +10892,6 @@ example.com                 CNAME   rpz-tcp-only.
     <optional> edns <replaceable>yes_or_no</replaceable> ; </optional>
     <optional> edns-udp-size <replaceable>number</replaceable> ; </optional>
     <optional> edns-version <replaceable>number</replaceable> ; </optional>
-    <optional> nocookie-udp-size <replaceable>number</replaceable> ; </optional>
     <optional> max-udp-size <replaceable>number</replaceable> ; </optional>
     <optional> tcp-only <replaceable>yes_or_no</replaceable> ; </optional>
     <optional> transfers <replaceable>number</replaceable> ; </optional>
@@ -11043,14 +11056,6 @@ example.com                 CNAME   rpz-tcp-only.
 	    that is blocking large replies from <command>named</command>.
 	  </para>
 
-	  <para>
-	    The <command>nocookie-udp-size</command> option sets the
-	    maximum size of UDP responses that will be sent to
-	    queries without a valid server COOKIE.  The command
-	    <command>max-udp-size</command> option may further limit
-	    the response size.
-	  </para>
-
 	  <para>
 	    The <command>tcp-only</command> option sets the transport
 	    protocol to TCP. The default is to use the UDP transport