.. Copyright (C) Internet Systems Consortium, Inc. ("ISC")
..
.. SPDX-License-Identifier: MPL-2.0
..
.. This Source Code Form is subject to the terms of the Mozilla Public
.. License, v. 2.0.  If a copy of the MPL was not distributed with this
.. file, you can obtain one at https://mozilla.org/MPL/2.0/.
..
.. See the COPYRIGHT file distributed with this work for additional
.. information regarding copyright ownership.

Notes for BIND 9.17.14
----------------------

New Features
~~~~~~~~~~~~

- New configuration options, ``tcp-receive-buffer``,
  ``tcp-send-buffer``, ``udp-receive-buffer``, and ``udp-send-buffer``,
  have been added. These options allow the operator to fine-tune the
  receiving and sending buffers in the operating system. On busy
  servers, increasing the size of the receive buffers can prevent the
  server from dropping packets during short traffic spikes, and
  decreasing it can prevent the server from becoming clogged with
  queries that are too old and have already timed out. :gl:`#2313`

Feature Changes
~~~~~~~~~~~~~~~

- Zone dumping tasks are now run on separate asynchronous thread pools.
  This change prevents zone dumping from blocking network I/O.
  :gl:`#2732`

- The interface handling code has been refactored to use fewer
  resources, which should lead to less memory fragmentation and better
  startup performance. :gl:`#2433`

Bug Fixes
~~~~~~~~~

- The calculation of the estimated IXFR transaction size in
  ``dns_journal_iter_init()`` was invalid. This resulted in excessive
  AXFR-style IXFR responses. :gl:`#2685`

- Fixed an assertion failure that could occur if stale data was used to
  answer a query, and then a prefetch was triggered after the query was
  restarted (for example, to follow a CNAME). :gl:`#2733`

- If a query was answered with stale data on a server with DNS64
  enabled, an assertion could occur if a non-stale answer arrived
  afterward. This has been fixed. :gl:`#2731`

- Fixed an error which caused the ``IP_DONTFRAG`` socket option to be
  enabled instead of disabled, leading to errors when sending oversized
  UDP packets. :gl:`#2746`

- Zones which are configured in multiple views, with different values
  set for ``dnssec-policy`` and with identical values set for
  ``key-directory``, are now detected and treated as a configuration
  error. :gl:`#2463`

- A race condition could occur when reading and writing key files for
  zones using KASP and configured in multiple views. This has been
  fixed. :gl:`#1875`
