mirror of
https://gitlab.isc.org/isc-projects/bind9
synced 2025-08-25 11:38:29 +00:00
89 lines
2.9 KiB
ReStructuredText
89 lines
2.9 KiB
ReStructuredText
.. Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
..
|
|
.. SPDX-License-Identifier: MPL-2.0
|
|
..
|
|
.. This Source Code Form is subject to the terms of the Mozilla Public
|
|
.. License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
.. file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
..
|
|
.. See the COPYRIGHT file distributed with this work for additional
|
|
.. information regarding copyright ownership.
|
|
|
|
Notes for BIND 9.19.18
|
|
----------------------
|
|
|
|
Security Fixes
|
|
~~~~~~~~~~~~~~
|
|
|
|
- None.
|
|
|
|
New Features
|
|
~~~~~~~~~~~~
|
|
|
|
- The statstics channel now includes information about incoming zone transfers
|
|
currently in progress. :gl:`#3883`
|
|
|
|
- The new :any:`resolver-use-dns64` option enables ``named`` to apply
|
|
:any:`dns64` rules to IPv4 server addresses when sending recursive
|
|
queries, so that resolution can be performed over a NAT64 connection.
|
|
:gl:`#608`
|
|
|
|
- Processing large incremental transfers (IXFR) can take a long time.
|
|
Offload the processing to a separate work thread that doesn't block
|
|
networking threads and keeps them free to process regular traffic.
|
|
:gl:`#4367`
|
|
|
|
Removed Features
|
|
~~~~~~~~~~~~~~~~
|
|
|
|
- Configuring control channel to use Unix Domain Socket has an fatal error since
|
|
BIND 9.18. Completely remove the feature and make ``named-checkconf`` also
|
|
report this as an error in the configuration. :gl:`#4311`
|
|
|
|
The support for control channel over Unix Domain Sockets has been
|
|
non-functional since BIND 9.18
|
|
|
|
- Support for specifying ``lock-file`` via configuration and via the
|
|
:option:`named -X` command line option has been removed. An external process
|
|
supervisor should be used instead. :gl:`#4391`
|
|
|
|
Alternatively :program:`flock` can be used to achieve the same effect as the
|
|
removed configuration/argument:
|
|
|
|
flock -n -x <dir>/named.lock <path>/named <args>
|
|
|
|
Feature Changes
|
|
~~~~~~~~~~~~~~~
|
|
|
|
- The zone option :any:`inline-signing` is now ignored if there is no
|
|
:any:`dnssec-policy` configured for the zone. This means that unsigned
|
|
zones will no longer create redundant signed versions of the zone.
|
|
:gl:`#4349`
|
|
|
|
- B.ROOT-SERVERS.NET addresses are now 170.247.170.2 and 2801:1b8:10::b.
|
|
:gl:`#4101`
|
|
|
|
- QNAME minimization is now used when looking up the addresses of name
|
|
servers during the recursion process. :gl:`#4209`
|
|
|
|
Bug Fixes
|
|
~~~~~~~~~
|
|
|
|
- :any:`max-cache-size` accidentally became ineffective in BIND 9.19.16.
|
|
This has been fixed and the option now behaves as documented again.
|
|
:gl:`#4340`
|
|
|
|
- For inline-signing zones, if the unsigned version of the zone contains
|
|
DNSSEC records, it was scheduled to be resigning. This unwanted behavior
|
|
has been fixed. :gl:`#4350`
|
|
|
|
- Looking up stale data from the cache did not take into account local
|
|
authoritative zones. This has been fixed. :gl:`#4355`
|
|
|
|
Known Issues
|
|
~~~~~~~~~~~~
|
|
|
|
- There are no new known issues with this release. See :ref:`above
|
|
<relnotes_known_issues>` for a list of all known issues affecting this
|
|
BIND 9 branch.
|