Michał Kępień
bf14b1a74c
Set up release notes for BIND 9.19.10
2023-01-13 15:35:32 +01:00
Evan Hunt
34a7166029
CHANGES and release note for [GL #3773 ]
2023-01-09 12:15:28 -08:00
Evan Hunt
916ea26ead
remove nonfunctional DSCP implementation
...
DSCP has not been fully working since the network manager was
introduced in 9.16, and has been completely broken since 9.18.
This seems to have caused very few difficulties for anyone,
so we have now marked it as obsolete and removed the
implementation.
To ensure that old config files don't fail, the code to parse
dscp key-value pairs is still present, but a warning is logged
that the feature is obsolete and should not be used. Nothing is
done with configured values, and there is no longer any
range checking.
2023-01-09 12:15:21 -08:00
Matthijs Mekking
e43a26fd1e
Add release note and CHANGES for #3743
2023-01-09 15:39:57 +01:00
Michał Kępień
1a5d707f52
Update copyright year to 2023
2023-01-02 13:58:00 +01:00
Matthijs Mekking
e277f1f757
Add CHANGES and release notes for #3714
...
Update release notes, remove the deprecation entry and add a new
removed feature entry.
2022-12-23 15:32:12 +01:00
Matthijs Mekking
8640e70616
Remove setting alternate transfer source from doc
...
Remove any reference to 'alt-transfer-source', 'alt-transfer-source-v6',
and 'use-alt-transfer-source' from the documentation and manual pages.
2022-12-23 14:44:48 +01:00
Matthijs Mekking
80178c2134
Add release notes
...
The refactor introduces a new way to configure source addresses for
primaries and parental-agents, a new thingy that we should make people
aware of.
2022-12-23 13:36:50 +00:00
Matthijs Mekking
ad248f2261
Add new 'source[-v6]' option for remote servers
...
Add a new way to configure the preferred source address when talking to
remote servers such as primaries and parental-agents. This will
eventually deprecate options such as 'parental-source',
'parental-source-v6', 'transfer-source', etc.
Example of the new configuration:
parental-agents "parents" port 5353 \
source 10.10.10.10 port 5354 dscp 54 \
source-v6 2001:db8::10 port 5355 dscp 55 {
10.10.10.11;
2001:db8::11;
};
2022-12-23 13:36:50 +00:00
Aram Sargsyan
a4def095f3
Add CHANGES and release notes for [GL #3752 ]
2022-12-23 09:45:20 +00:00
Tom Krizek
a3fcfe3d71
Merge tag 'v9_19_8'
...
BIND 9.19.8
2022-12-22 10:13:38 +01:00
Artem Boldariev
849d7292ad
Modify release notes [GL #3374 ]
...
Mention that DNS over TCP and DNS over TLS transports are superseded.
2022-12-20 22:13:53 +02:00
Ondřej Surý
2df311eb21
Add CHANGES and release note for [GL #3178 ] and [GL #3636 ]
2022-12-19 11:42:50 +01:00
Ondřej Surý
11df7f02fd
Add CHANGES and release note for [GL #3739 ]
2022-12-15 16:15:39 +01:00
Ondřej Surý
d1f1db2f5a
Add CHANGES and release notes for [GL #3637 ]
2022-12-14 18:49:54 +01:00
Artem Boldariev
67d74e228f
Update Release notes [GL #3725 ]
...
Mention that TLS session resumption for Mutual TLS has been fixed.
2022-12-14 18:08:51 +02:00
Tom Krizek
0e16e9e8d1
Set up release notes for BIND 9.19.9
2022-12-13 16:45:13 +01:00
Michał Kępień
bd71684f07
Add release note for GL #3721
2022-12-12 12:11:01 +01:00
Michał Kępień
815694d018
Reorder release notes
2022-12-12 12:11:01 +01:00
Michał Kępień
d4801a9163
Tweak and reword release notes
2022-12-12 12:11:01 +01:00
Michał Kępień
64985af9fc
Prepare release notes for BIND 9.19.8
2022-12-12 12:11:01 +01:00
Michał Kępień
98bb01a22b
Restore release note for GL #3570
2022-12-12 12:11:01 +01:00
Ondřej Surý
56a997b0b5
Add CHANGES and release note for [GL #3727 ]
2022-12-08 08:32:59 +01:00
Mark Andrews
b5951f0411
Add reference to +tcp for +ignore
2022-12-07 21:38:18 +00:00
Ondřej Surý
01c58e6d40
Add CHANGES and release note for [GL #3676 ]
2022-12-07 19:42:55 +01:00
Ondřej Surý
0c62c0bdb7
Mark setting operating system limits from named.conf as ancient
...
After deprecating the operating system limits settings (coresize,
datasize, files and stacksize), mark them as ancient and remove the code
that sets the values from config.
2022-12-07 19:40:00 +01:00
Ondřej Surý
48059a1bc2
Add CHANGES and release notes for [GL #3183 ]
2022-12-07 18:06:35 +01:00
Matthijs Mekking
f7b477f6ea
Document NS queries are excempt from minimal-responses
...
Also document that DNSKEY, DS, CDNSKEY, and CDS never do additional
section processing.
2022-12-07 11:37:55 +01:00
Mark Andrews
9843da3423
Add release note for [GL #3683 ]
2022-12-07 09:04:49 +11:00
Mark Andrews
e8e40e2e01
Check that DS records are only present at delegations
...
This extends the integrity check to look for stray DS records
in the zone.
2022-12-06 23:27:40 +11:00
Matthijs Mekking
7920347077
Mention deprecation of alternate transfer source
...
In the CHANGES and release notes.
2022-11-30 16:30:06 +01:00
Matthijs Mekking
13a16c1f4d
Add missing deprecated tag to max-zone-ttl
...
This option was deprecated in commit 19352dd187 but at that time
we didn't mark it deprecated in the ARM reference.
2022-11-30 16:29:46 +01:00
Matthijs Mekking
105465d316
Deprecate alt-transfer-source and companions
...
Deprecate the alternate transfer sources from BIND 8.
2022-11-30 16:29:46 +01:00
Tony Finch
a8f1d0c19c
Compress zone transfers properly
...
After change 5995, zone transfers were using a small
compression context that only had space for the first
few dozen names in each message. They now use a large
compression context with enough space for every name.
2022-11-30 12:16:09 +00:00
Ondřej Surý
116d1b94a9
Add CHANGES and release note for [GL #3707 ]
2022-11-30 11:46:09 +01:00
Michal Nowak
afdb41a5aa
Update sources to Clang 15 formatting
2022-11-29 08:54:34 +01:00
Mark Andrews
3769266318
Fix typo in dig man page '+qr' should be '+noqr'
...
Reported by Fabian P. Schmidt
2022-11-29 08:47:18 +11:00
Ondřej Surý
32e0df2a13
Add CHANGES and release note for [GL #3693 ]
2022-11-25 16:22:07 +01:00
Mark Andrews
7e223f5e55
Add release note for [GL #3638 ]
2022-11-25 08:51:09 +11:00
Matthijs Mekking
fde1d89d03
Add CHANGES and release note for GL #3667
...
Announce deprecation of 'auto-dnssec'.
2022-11-23 09:46:16 +01:00
Matthijs Mekking
f9845dd128
Deprecate auto-dnssec
...
Deprecate auto-dnssec, add specific log warning to migrate to
dnssec-policy.
2022-11-23 09:46:16 +01:00
Michal Nowak
b293b2c638
Add Fedora 37
2022-11-21 12:48:40 +01:00
Matthijs Mekking
c7cae33cc3
Add CHANGES and release note for removed feature
...
Also mention that 'dnssec-secure-to-insecure' is obsoleted.
2022-11-18 11:05:11 +01:00
Matthijs Mekking
f71a6692db
Obsolete dnssec-secure-to-insecure option
...
Now that the key management operations using dynamic updates feature
has been removed, the 'dnssec-secure-to-insecure' option has become
obsoleted.
2022-11-18 11:04:17 +01:00
Matthijs Mekking
93441714ad
Remove dynamic update key management documentation
...
Remove the text from the ARM and DNSSEC guide that describes how to do
key and denial of existence operations using dynamic update. Add a new
section about DNSSEC multi-signer models, but no longer suggest using
dynamic update and auto-dnssec allow.
2022-11-18 11:04:17 +01:00
Michal Nowak
0b5a58202e
Merge tag 'v9_19_7'
...
BIND 9.19.7
2022-11-16 15:10:51 +01:00
Michal Nowak
b239e6870d
Add OpenBSD 7.2
2022-11-15 08:06:37 +01:00
Michal Nowak
d34c7ae227
Replace "sha1sum" with "openssl sha1 -r"
...
"sha1sum" is part of GNU Coreutils, neither BIND 9 dependency nor POSIX.
Replace it with "openssl sha1 -r" as OpenSSL is BIND 9 dependency.
2022-11-14 19:54:42 +00:00
Ondřej Surý
65156afb8c
Add CHANGES and release note [GL #3676 ]
2022-11-14 16:48:52 +01:00
Ondřej Surý
379929e052
Deprecate setting operating system limits from named.conf
...
It was possible to set operating system limits (RLIMIT_DATA,
RLIMIT_STACK, RLIMIT_CORE and RLIMIT_NOFILE) from named.conf. It's
better to leave these untouched as setting these is responsibility of
the operating system and/or supervisor.
Deprecate the configuration options and remove them in future BIND 9
release.
2022-11-14 16:48:52 +01:00