mirror of
https://github.com/isc-projects/bind9.git
synced 2026-07-16 07:32:52 -04:00
Merge branch 'michal/prepare-documentation-for-bind-9.17.9' into 'v9_17_9-release'
Prepare documentation for BIND 9.17.9 See merge request isc-private/bind9!230
This commit is contained in:
Michał Kępień
commit
5eac635fc0
4 changed files with 80 additions and 103 deletions
45
CHANGES
45
CHANGES
|
|
@ -19,46 +19,47 @@
|
|||
enabling support for libmaxminddb was not working
|
||||
correctly. This has been fixed. [GL #2366]
|
||||
|
||||
5558. [bug] Asynchronous hook modules could assert due to
|
||||
the fetch handle being detached too late. [GL #2379]
|
||||
5558. [bug] Asynchronous hook modules could trigger an assertion
|
||||
failure when the fetch handle was detached too late.
|
||||
Thanks to Jinmei Tatuya at Infoblox. [GL #2379]
|
||||
|
||||
5557. [bug] Prevent rbtdb instances being destroyed by multiple
|
||||
5557. [bug] Prevent RBTDB instances from being destroyed by multiple
|
||||
threads at the same time. [GL #2355]
|
||||
|
||||
5556. [bug] dnssec-signzone and dnssec-verify where now
|
||||
printing too many newlines between log messages.
|
||||
[GL #2359]
|
||||
5556. [bug] Further tweak newline printing in dnssec-signzone and
|
||||
dnssec-verify. [GL #2359]
|
||||
|
||||
5555. [placeholder]
|
||||
|
||||
5554. [bug] dnssec-signzone and dnssec-verify where missing
|
||||
newlines between log messages. [GL #2359]
|
||||
5554. [bug] dnssec-signzone and dnssec-verify were missing newlines
|
||||
between log messages. [GL #2359]
|
||||
|
||||
5553. [bug] When reconfiguring named, removing "auto-dnssec"
|
||||
did not actually turn off DNSSEC maintenance.
|
||||
This has been fixed. [GL #2341]
|
||||
5553. [bug] When reconfiguring named, removing "auto-dnssec" did not
|
||||
turn off DNSSEC maintenance. [GL #2341]
|
||||
|
||||
5552. [func] When switching to "dnssec-policy none;", named
|
||||
now permits a safe transition to insecure mode
|
||||
and publishes the CDS and CDNSKEY DELETE
|
||||
records, as described in RFC 8078. [GL #1750]
|
||||
5552. [func] When switching to "dnssec-policy none;", named now
|
||||
permits a safe transition to insecure mode and publishes
|
||||
the CDS and CDNSKEY DELETE records, as described in RFC
|
||||
8078. [GL #1750]
|
||||
|
||||
5551. [bug] Only assign threads to CPUs in the CPU affinity set.
|
||||
Thanks to Ole Bjørn Hessen. [GL #2245]
|
||||
5551. [bug] named no longer attempts to assign threads to CPUs
|
||||
outside the CPU affinity set. Thanks to Ole Bjørn
|
||||
Hessen. [GL #2245]
|
||||
|
||||
5550. [func] Print a warning when falling back to the "increment" SOA
|
||||
serial method. [GL #2058]
|
||||
5550. [func] dnssec-signzone and named now log a warning when falling
|
||||
back to the "increment" SOA serial method. [GL #2058]
|
||||
|
||||
5549. [protocol] Serve ipv4only.arpa when dns64 is configured. [GL #385]
|
||||
5549. [protocol] ipv4only.arpa is now served when DNS64 is configured.
|
||||
[GL #385]
|
||||
|
||||
5548. [placeholder]
|
||||
|
||||
5547. [placeholder]
|
||||
|
||||
5546. [placeholder]
|
||||
|
||||
--- 9.17.8 released ---
|
||||
|
||||
5546. [placeholder]
|
||||
|
||||
5545. [func] OS support for load-balanced sockets is no longer
|
||||
required to receive incoming queries in multiple netmgr
|
||||
threads. [GL #2137]
|
||||
|
|
|
|||
|
|
@ -52,7 +52,7 @@ https://www.isc.org/download/. There you will find additional
|
|||
information about each release, source code, and pre-compiled versions
|
||||
for Microsoft Windows operating systems.
|
||||
|
||||
.. include:: ../notes/notes-current.rst
|
||||
.. include:: ../notes/notes-9.17.9.rst
|
||||
.. include:: ../notes/notes-9.17.8.rst
|
||||
.. include:: ../notes/notes-9.17.7.rst
|
||||
.. include:: ../notes/notes-9.17.6.rst
|
||||
|
|
|
|||
56
doc/notes/notes-9.17.9.rst
Normal file
56
doc/notes/notes-9.17.9.rst
Normal file
|
|
@ -0,0 +1,56 @@
|
|||
..
|
||||
Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
||||
|
||||
This Source Code Form is subject to the terms of the Mozilla Public
|
||||
License, v. 2.0. If a copy of the MPL was not distributed with this
|
||||
file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
||||
|
||||
See the COPYRIGHT file distributed with this work for additional
|
||||
information regarding copyright ownership.
|
||||
|
||||
Notes for BIND 9.17.9
|
||||
---------------------
|
||||
|
||||
New Features
|
||||
~~~~~~~~~~~~
|
||||
|
||||
- ``ipv4only.arpa`` is now served when DNS64 is configured. [GL #385]
|
||||
|
||||
Feature Changes
|
||||
~~~~~~~~~~~~~~~
|
||||
|
||||
- It is now possible to transition a zone from secure to insecure mode
|
||||
without making it bogus in the process; changing to ``dnssec-policy
|
||||
none;`` also causes CDS and CDNSKEY DELETE records to be published, to
|
||||
signal that the entire DS RRset at the parent must be removed, as
|
||||
described in RFC 8078. [GL #1750]
|
||||
|
||||
- When using the ``unixtime`` or ``date`` method to update the SOA
|
||||
serial number, ``named`` and ``dnssec-signzone`` silently fell back to
|
||||
the ``increment`` method to prevent the new serial number from being
|
||||
smaller than the old serial number (using serial number arithmetics).
|
||||
``dnssec-signzone`` now prints a warning message, and ``named`` logs a
|
||||
warning, when such a fallback happens. [GL #2058]
|
||||
|
||||
Bug Fixes
|
||||
~~~~~~~~~
|
||||
|
||||
- Multiple threads could attempt to destroy a single RBTDB instance at
|
||||
the same time, resulting in an unpredictable but low-probability
|
||||
assertion failure in ``free_rbtdb()``. This has been fixed. [GL #2317]
|
||||
|
||||
- ``named`` no longer attempts to assign threads to CPUs outside the CPU
|
||||
affinity set. Thanks to Ole Bjørn Hessen. [GL #2245]
|
||||
|
||||
- When reconfiguring ``named``, removing ``auto-dnssec`` did not turn
|
||||
off DNSSEC maintenance. This has been fixed. [GL #2341]
|
||||
|
||||
- The report of intermittent BIND assertion failures triggered in
|
||||
``lib/dns/resolver.c:dns_name_issubdomain()`` has now been closed
|
||||
without further action. Our initial response to this was to add
|
||||
diagnostic logging instead of terminating ``named``, anticipating that
|
||||
we would receive further useful troubleshooting input. This workaround
|
||||
first appeared in BIND releases 9.17.5 and 9.16.7. However, since
|
||||
those releases were published, there have been no new reports of
|
||||
assertion failures matching this issue, but also no further diagnostic
|
||||
input, so we have closed the issue. [GL #2091]
|
||||
|
|
@ -1,80 +0,0 @@
|
|||
..
|
||||
Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
||||
|
||||
This Source Code Form is subject to the terms of the Mozilla Public
|
||||
License, v. 2.0. If a copy of the MPL was not distributed with this
|
||||
file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
||||
|
||||
See the COPYRIGHT file distributed with this work for additional
|
||||
information regarding copyright ownership.
|
||||
|
||||
Notes for BIND 9.17.9
|
||||
---------------------
|
||||
|
||||
Security Fixes
|
||||
~~~~~~~~~~~~~~
|
||||
|
||||
- None.
|
||||
|
||||
Known Issues
|
||||
~~~~~~~~~~~~
|
||||
|
||||
- None.
|
||||
|
||||
New Features
|
||||
~~~~~~~~~~~~
|
||||
|
||||
- None.
|
||||
|
||||
Removed Features
|
||||
~~~~~~~~~~~~~~~~
|
||||
|
||||
- A number of non-working configuration options that had been marked
|
||||
as obsolete in previous releases have now been removed completely.
|
||||
Using any of the following options is now considered a configuration
|
||||
failure:
|
||||
``acache-cleaning-interval``, ``acache-enable``, ``additional-from-auth``,
|
||||
``additional-from-cache``, ``allow-v6-synthesis``, ``cleaning-interval``,
|
||||
``dnssec-enable``, ``dnssec-lookaside``, ``filter-aaaa``,
|
||||
``filter-aaaa-on-v4``, ``filter-aaaa-on-v6``, ``geoip-use-ecs``, ``lwres``,
|
||||
``max-acache-size``, ``nosit-udp-size``, ``queryport-pool-ports``,
|
||||
``queryport-pool-updateinterval``, ``request-sit``, ``sit-secret``,
|
||||
``support-ixfr``, ``use-queryport-pool``, ``use-ixfr``. [GL #1086]
|
||||
|
||||
Feature Changes
|
||||
~~~~~~~~~~~~~~~
|
||||
|
||||
- ``ipv4only.arpa`` is now served when ``dns64`` is configured. [GL #385]
|
||||
|
||||
- It is now possible to transition a zone from secure to insecure mode
|
||||
without making it bogus in the process: changing to ``dnssec-policy
|
||||
none;`` also causes CDS and CDNSKEY DELETE records to be published, to
|
||||
signal that the entire DS RRset at the parent must be removed, as
|
||||
described in RFC 8078. [GL #1750]
|
||||
|
||||
- The default value of ``max-stale-ttl`` has been changed from 12 hours to 1
|
||||
day and the default value of ``stale-answer-ttl`` has been changed from 1
|
||||
second to 30 seconds, following RFC 8767 recommendations. [GL #2248]
|
||||
|
||||
- When using the ``unixtime`` or ``date`` method to update the SOA
|
||||
serial number, ``named`` and ``dnssec-signzone`` silently fell back to
|
||||
the ``increment`` method to prevent the new serial number from being
|
||||
smaller than the old serial number (using serial number arithmetics).
|
||||
``dnsssec-signzone`` now prints a warning message, and ``named`` logs
|
||||
a warning, when such a fallback happens. [GL #2058]
|
||||
|
||||
Bug Fixes
|
||||
~~~~~~~~~
|
||||
|
||||
- Only assign threads to CPUs in the CPU affinity set, so that ``named`` no
|
||||
longer attempts to run threads on CPUs outside the affinity set. Thanks to
|
||||
Ole Bjørn Hessen. [GL #2245]
|
||||
|
||||
- When reconfiguring ``named``, removing ``auto-dnssec`` did actually not turn
|
||||
off DNSSEC maintenance. This has been fixed. [GL #2341]
|
||||
|
||||
- Prevent rbtdb instances being destroyed by multiple threads at the same
|
||||
time. This can trigger assertion failures. [GL #2355]
|
||||
|
||||
- KASP incorrectly set signature validity to the value of the DNSKEY signature
|
||||
validity. This is now fixed. [GL #2383]
|
||||
Loading…
Reference in a new issue