bind: commit checkpoint

1 files changed, 21 insertions, 9 deletions

diff --git a/bind/conf/named.conf b/bind/conf/named.conf
index b79af07..dcf0cf3 100644
--- a/bind/conf/named.conf
+++ b/bind/conf/named.conf
@@ -18,18 +18,25 @@ options {
         zone-statistics full;
 
         auth-nxdomain no;    # conform to RFC1035
-        notify master-only;  # don't send NOTIFY from slaves
-
-        listen-on { any; };
-        listen-on-v6 { any; };
+        notify master-only;  # don't send NOTIFY from secondaries
 
         version none;
         hostname none;
 
-        allow-update-forwarding { any; };
+        listen-on {
+                any;
+        };
+
+        listen-on-v6 {
+                any;
+        };
+
+        allow-update-forwarding {
+                any;
+        };
 
         allow-notify {
-                all-masters;
+                all-dns-servers;
         };
 
         allow-recursion {
@@ -42,9 +49,14 @@ options {
                 localhost;
         };
 
-        // Allow more transfers at once to improve slave convergence
-        transfers-in 30;
-        transfers-out 30;
+        // Force TCP if response would be larger than IPv6 fragment size
+        // see: https://blog.apnic.net/2020/09/17/dns-flag-day-2020-what-you-need-to-know/
+        max-udp-size 1220;
+        edns-udp-size 1220;
+
+        // Allow more transfers at once to improve secondary convergence
+        transfers-in 50;
+        transfers-out 50;
 };
 
 statistics-channels {