2ce3995...
by
OpenDev Sysadmins <email address hidden>
OpenDev Migration Patch
This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:
Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.
This option may be helpful in a situation that upstream DNS servers do
not support DNSSEC, and BIND9 reports "Unable to fetch DNSKEY". For
production deployments, it's encouraged to keep DNSSEC enabled.
Enable recursion when requested by forwarders or users
Forwarders do not work unless recursion is enabled. Also, allow users to
set recursion explicitly when they want BIND9 set up by the charm to act
as a full-service resolver.
Documentation has been updated to warn users to set ACLs when enabling
forwarders or recursion to avoid it from being a open resolver.
Change-Id: I53d53decbbae12e0b743aa34421d63a5a5c892f1
Closes-Bug: #1776952
Co-Authored-By: Pedro <email address hidden>