diff --git a/bin/named/named.conf.5 b/bin/named/named.conf.5 index 18bdb7daee..4f70632088 100644 --- a/bin/named/named.conf.5 +++ b/bin/named/named.conf.5 @@ -257,7 +257,7 @@ options { topology { \fIaddress_match_element\fR; \&.\&.\&. }; // not implemented auth\-nxdomain \fIboolean\fR; // default changed minimal\-any \fIboolean\fR; - minimal\-responses \fIboolean\fR; + minimal\-responses ( \fIboolean\fR | no\-auth | no\-auth\-recursive ); recursion \fIboolean\fR; rrset\-order { [ class \fIstring\fR ] [ type \fIstring\fR ] diff --git a/bin/named/named.conf.html b/bin/named/named.conf.html index 55ec3f9351..da8309a19a 100644 --- a/bin/named/named.conf.html +++ b/bin/named/named.conf.html @@ -200,7 +200,7 @@ options topology { address_match_element; ... }; // not implemented
auth-nxdomain boolean; // default changed
minimal-any boolean;
- minimal-responses boolean;
+ minimal-responses ( boolean | no-auth | no-auth-recursive );
recursion boolean;
rrset-order {
[ class string ] [ type string ]
diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html index c1525a395b..001dd5a722 100644 --- a/doc/arm/Bv9ARM.ch06.html +++ b/doc/arm/Bv9ARM.ch06.html @@ -2309,7 +2309,7 @@ badresp:1,adberr:0,findfail:0,valfail:0] [ host-statistics yes_or_no; ] [ host-statistics-max number; ] [ minimal-any yes_or_no; ] - [ minimal-responses yes_or_no; ] + [ minimal-responses (yes_or_no | no-auth | no-auth-recursive); ] [ multiple-cnames yes_or_no; ] [ notify yes_or_no | explicit | master-only; ] [ recursion yes_or_no; ] @@ -3804,14 +3804,31 @@ options { 6.1.3.2. The default is yes.

minimal-responses
-

- If yes, then when generating +

+

+ If set to yes, then when generating responses the server will only add records to the authority and additional data sections when they are required (e.g. delegations, negative responses). This may improve the performance of the server. +

+

+ When set to no-auth, the + server will omit records from the authority section + unless they are required, but it may still add + records to the additional section. When set to + no-auth-recursive, this + is only done if the query is recursive. These + settings are useful when answering stub clients, + which usually ignore the authority section. + no-auth-recursive is + designed for mixed-mode servers which handle + both authoritative and recursive queries. +

+

The default is no. -

+

+
minimal-any

If set to yes, then when diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html index 16f0527067..8775e5f8e9 100644 --- a/doc/arm/Bv9ARM.ch09.html +++ b/doc/arm/Bv9ARM.ch09.html @@ -513,7 +513,7 @@

  • An --enable-querytrace configure switch is - now available to enable very verbose query tracelogging. This + now available to enable very verbose query trace logging. This option can only be set at compile time. This option has a negative performance impact and should be used only for debugging. [RT #37520] @@ -757,6 +757,13 @@ block the server.

    • +

  • + minimal-responses now takes two new + arguments: no-auth suppresses + populating the authority section but not the additional + section; no-auth-recursive + does the same but only when answering recursive queries. +

    • diff --git a/doc/arm/man.named.conf.html b/doc/arm/man.named.conf.html index 4efaaa945c..e600992841 100644 --- a/doc/arm/man.named.conf.html +++ b/doc/arm/man.named.conf.html @@ -218,7 +218,7 @@ options topology { address_match_element; ... }; // not implemented
    auth-nxdomain boolean; // default changed
    minimal-any boolean;
    - minimal-responses boolean;
    + minimal-responses ( boolean | no-auth | no-auth-recursive );
    recursion boolean;
    rrset-order {
    [ class string ] [ type string ]
    diff --git a/doc/arm/notes.html b/doc/arm/notes.html index 1f4d5df731..8b74e92480 100644 --- a/doc/arm/notes.html +++ b/doc/arm/notes.html @@ -474,7 +474,7 @@

  • An --enable-querytrace configure switch is - now available to enable very verbose query tracelogging. This + now available to enable very verbose query trace logging. This option can only be set at compile time. This option has a negative performance impact and should be used only for debugging. [RT #37520] @@ -718,6 +718,13 @@ block the server.

    • +

  • + minimal-responses now takes two new + arguments: no-auth suppresses + populating the authority section but not the additional + section; no-auth-recursive + does the same but only when answering recursive queries. +

    • diff --git a/doc/misc/options b/doc/misc/options index b2277b90b1..e4922a3e7e 100644 --- a/doc/misc/options +++ b/doc/misc/options @@ -216,7 +216,7 @@ options { min-retry-time ; min-roots ; // not implemented minimal-any ; - minimal-responses ; + minimal-responses ( no-auth | no-auth-recursive | ); multi-master ; multiple-cnames ; // obsolete named-xfer ; // obsolete @@ -508,7 +508,7 @@ view [ ] { min-retry-time ; min-roots ; // not implemented minimal-any ; - minimal-responses ; + minimal-responses ( no-auth | no-auth-recursive | ); multi-master ; no-case-compress { ; ... }; nocookie-udp-size ;