diff --git a/doc/arm/reference.rst b/doc/arm/reference.rst index 9d4b0f0e03..3ee8cf1c2c 100644 --- a/doc/arm/reference.rst +++ b/doc/arm/reference.rst @@ -1399,14 +1399,20 @@ default is used. :tags: query :short: Controls QNAME minimization behavior in the BIND 9 resolver. - This option controls QNAME minimization behavior in the BIND - resolver. When set to ``strict``, BIND follows the QNAME + When this is set to ``strict``, BIND follows the QNAME minimization algorithm to the letter, as specified in :rfc:`7816`. + Setting this option to ``relaxed`` causes BIND to fall back to normal (non-minimized) query mode when it receives either NXDOMAIN or other unexpected responses (e.g., SERVFAIL, improper zone cut, - REFUSED) to a minimized query. ``disabled`` disables QNAME - minimization completely. ``off`` is a synonym for ``disabled``. The current default is ``relaxed``, but it + REFUSED) to a minimized query. A resolver can use a leading + underscore, like ``_.example.com``, in an attempt to improve + interoperability. (See :rfc:`7816` section 3.) + + ``disabled`` disables QNAME minimization completely. + ``off`` is a synonym for ``disabled``. + + The current default is ``relaxed``, but it may be changed to ``strict`` in a future release. .. namedconf:statement:: tkey-gssapi-keytab