diff --git a/doc/guide/bind10-guide.xml b/doc/guide/bind10-guide.xml
index 00ffee60b5..7263e3d9b7 100644
--- a/doc/guide/bind10-guide.xml
+++ b/doc/guide/bind10-guide.xml
@@ -1257,20 +1257,64 @@ TODO
Incoming zones are transferred using the b10-xfrin
process which is started by bind10.
- When received, the zone is stored in the BIND 10
- data store, and its records can be served by
+ When received, the zone is stored in the corresponding BIND 10
+ data source, and its records can be served by
b10-auth.
In combination with b10-zonemgr (for
automated SOA checks), this allows the BIND 10 server to
provide secondary service.
+
+ The b10-xfrin process supports both AXFR and
+ IXFR. Due to some implementation limitations of the current
+ development release, however, it only tries AXFR by default,
+ and care should be taken to enable IXFR.
+
+
+
+ To enable IXFR, you need to
+ configure b10-xfrin with an explicit zone
+ configuration for the zone.
+ For example, to enable IXFR for a zone named "example.com"
+ (whose master address is assumed to be 2001:db8::53 here),
+ run the following at the bindctl prompt:
+
+ > config add Xfrin/zones
+> config set Xfrin/zones[0]/name ""
+> config set Xfrin/zones[0]/master_addr ""
+> config commit
+
+ (We assume there has been no zone configuration before).
+ Note that you do NOT have to explicitly enable IXFR in the zone
+ configuration; once it's defined, IXFR is enabled by default.
+ This also means if you specify a zone configuration for some
+ other reason but don't want to use IXFR for that zone, you need
+ to disable it explicitly:
+
+ > config set Xfrin/zones[0]/ixfr_disabled true
+
+
+
+ One reason why IXFR is disabled by default in the current
+ release is because it does not support automatic fallback from IXFR to
+ AXFR when it encounters a primary server that doesn't support
+ outbound IXFR (and, not many existing implementations support
+ it). Another, related reason is that it does not use AXFR even
+ if it has no knowledge about the zone (like at the very first
+ time the secondary server is set up). IXFR requires the
+ "current version" of the zone, so obviously it doesn't work
+ in this situation and AXFR is the only workable choice.
+ The current release of b10-xfrin does not
+ make this selection automatically.
+ These features will be implemented in a near future
+ version, at which point we will enable IXFR by default.
+
+
- The current development release of BIND 10 only supports
- AXFR. (IXFR is not supported.)
-
-
-
+ In the current development release of BIND 10, incoming zone
+ transfers are only available for SQLite3-based data sources,
+ that is, they don't work for an in-memory data source.