From 12c64d55f2471eab5e5663d9359b4f24592bfa98 Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Fri, 22 Oct 2021 15:23:43 +1100 Subject: [PATCH] Add CHANGES and release note for [GL #1265] --- CHANGES | 5 +++++ doc/notes/notes-current.rst | 5 +++++ 2 files changed, 10 insertions(+) diff --git a/CHANGES b/CHANGES index 8fcdbc995c..29fc31e586 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,8 @@ +5774. [func] Restore NSEC Aggressive Cache ("synth-from-dnssec") + as active by default. It is limited to NSEC only + and by default ignores NSEC records with next name + in form \000.domain. [GL #1265] + 5773. [func] Change the message when accepting TCP connection has failed to say "Accepting TCP connection failed" and change the log level for ISC_R_NOTCONNECTED, ISC_R_QUOTA diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst index e539c51c9b..5bca71daae 100644 --- a/doc/notes/notes-current.rst +++ b/doc/notes/notes-current.rst @@ -58,6 +58,11 @@ Feature Changes events: ``socket is not connected``, ``quota reached``, and ``soft quota reached``. :gl:`#2700` +- Restore NSEC Aggressive Cache (``synth-from-dnssec``) as active by default. + The implementation was optimized for better efficiency, and also tuned + to ignore certain types of broken NSEC records. This feature currently + supports answer synthtesis only for zones using NSEC. :gl:`#1265` + Bug Fixes ~~~~~~~~~