GitLab

			ARM documentation about RFC 5011 support. [RT #19874]

			added a regression test to check it. [RT #20007]

			"update-policy local;" to switch on local DDNS in a
			zone.  [RT #19875]

			maintenance.  The new "managed-keys" statement can
			be used in place of "trusted-keys" for zones which
			support this protocol.  (Note: this syntax is
			expected to change prior to 9.7.0 final.) [RT #19248]

			- add ddns-confgen command to generate
			  configuration text for named.conf
			- add zone option "ddns-autoconf yes;", which
			  causes named to generate a TSIG session key
			  and allow updates to the zone using that key
			- add '-l' (localhost) option to nsupdate, which
			  causes nsupdate to connect to a locally-running
			  named process using the session key generated
			  by named
			[RT #19284]

			new options, deny-answer-addresses and
			deny-answer-aliases.  Based on contributed code from
			JD Nurmi, Google. [RT #18192]

			"dnssec-lookaside auto;"  This is the equivalent
			of "dnssec-lookaside . trust-anchor dlv.isc.org;"
			plus setting a trusted-key for dlv.isc.org.

			Note: The trusted key is hard-coded into named,
			but is also stored in (and can be overridden
			by) $sysconfdir/bind.keys.  As the ISC DLV key
			rolls over it can be kept up to date by replacing
			the bind.keys file with a key downloaded from
			https://www.isc.org/solutions/dlv. [RT #18685]

			views to share a single cache to save memory and
			improve lookup efficiency. [RT 18905]

			default.  It should be safe because expired cache
			entries are also purged.

                        temporary, named.conf option reserved-sockets,
                        default 512. [RT #18344]

			forgery resilience. [RT #17949, #18098]

                        'dig +nsid' requests NSID from server.
                        'request-nsid yes;' causes recursive server to send
                        NSID requests to upstream servers.  Server responds
                        to NSID requests with the string configured by
                        'server-id' option.  [RT #17091]

                        dynamic zones. [RT #1091]

back out incorrect branch rt1091 and apply correct branch rt1091a.

                        [RT #17888]

2294.   [func]          Allow the experimental statistics channels to have
                        multiple connections and ACL.

			multiple connections and ACL.
			Note: the stats-server and stats-server-v6 options
			available in the previous beta releases are replaced
			with the generic statistics-channels statment.

                        authentication method for reverse zones.
                        New update-policy methods tcp-self and 6to4-self.
                        [RT #17378]

                        memory statistics file should be written or not.
                        Additionally named's -m option will cause the
                        statistics file to be written. [RT #17113]

                        SOA MNAME field to be disabled by specifying
                        'notify-to-soa yes;'.  [RT #17073]

                        if we will answer the query or recurse.
                        allow-query-on, allow-recursion-on and
                        allow-query-cache-on. [RT #16291]

                        made over. See use-queryport-pool, queryport-pool-ports
                        and queryport-pool-updateinterval.  [RT #16415]

                        for named via xml.

                        optional. Default "try-tcp-refresh yes;" for BIND 8
                        compatibility. [RT #16123]

                        consistancy.  Default acache-enable off in BIND 9.4
                        as it requires memory usage to be configured.
                        It may be enabled by default in BIND 9.5 once we
                        have more experience with it.

                        validation.  default dnssec-validation no; to
                        be changed to yes in 9.5.0.  [RT #15674]

                        New zone option "update-check-ksk yes;".  [RT #15817]

                        as readonly.  Expand the use of const to enforce this
                        at compile time. [RT #15813]

                        on a per server basis similar to transfer-source.