mirror of
https://github.com/isc-projects/bind9.git
synced 2026-06-11 10:29:59 -04:00
64 lines
1.9 KiB
ReStructuredText
64 lines
1.9 KiB
ReStructuredText
.. Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
..
|
|
.. SPDX-License-Identifier: MPL-2.0
|
|
..
|
|
.. This Source Code Form is subject to the terms of the Mozilla Public
|
|
.. License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
.. file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
..
|
|
.. See the COPYRIGHT file distributed with this work for additional
|
|
.. information regarding copyright ownership.
|
|
|
|
Notes for BIND 9.18.2
|
|
---------------------
|
|
|
|
Security Fixes
|
|
~~~~~~~~~~~~~~
|
|
|
|
- None.
|
|
|
|
Known Issues
|
|
~~~~~~~~~~~~
|
|
|
|
- None.
|
|
|
|
New Features
|
|
~~~~~~~~~~~~
|
|
|
|
- None.
|
|
|
|
Removed Features
|
|
~~~~~~~~~~~~~~~~
|
|
|
|
- None.
|
|
|
|
Feature Changes
|
|
~~~~~~~~~~~~~~~
|
|
|
|
- None.
|
|
|
|
- Add a new configuration option ``reuseport`` to disable load balancing
|
|
on sockets in situations where processing of Response Policy Zones
|
|
(RPZ), Catalog Zones, or large zone transfers can cause service
|
|
disruptions. See the BIND 9 ARM for more detail. :gl:`#3249`
|
|
|
|
Bug Fixes
|
|
~~~~~~~~~
|
|
|
|
- Invalid ``dnssec-policy`` definitions, where the defined keys did not
|
|
cover both KSK and ZSK roles for a given algorithm, were being
|
|
accepted. These are now checked, and the ``dnssec-policy`` is rejected
|
|
if both roles are not present for all algorithms in use. :gl:`#3142`
|
|
|
|
- Handling of TCP write timeouts has been improved to track the timeout
|
|
for each TCP write separately, leading to a faster connection teardown
|
|
in case the other party is not reading the data. :gl:`#3200`
|
|
|
|
- Previously, zone maintenance DNS queries retried forever if the
|
|
destination server was unreachable. These queries included outgoing
|
|
NOTIFY messages, refresh SOA queries, parental DS checks, and stub
|
|
zone NS queries. For example, if a zone had any nameservers with IPv6
|
|
addresses and a secondary server without IPv6 connectivity, that
|
|
server would keep trying to send a growing amount of NOTIFY traffic
|
|
over IPv6. This futile traffic was not logged. This excessive retry
|
|
behavior has been fixed. :gl:`#3242`
|