update release notes and documentation for 3.7.0

diff --git a/docs/markdown/changelog.md.raw b/docs/markdown/changelog.md.raw
index 6a8c24718156ba7d34deaf04d493fa3ee637b6ed..e55d6ed41877b7d04d553f0da73cd1de6a755d3e 100644 (file)
--- a/docs/markdown/changelog.md.raw
+++ b/docs/markdown/changelog.md.raw
@@ -108,6 +108,8 @@ Improvements:
 
 New features:
 
+- New `root-nx-trust` flag makes PowerDNS generalize NXDOMAIN responses from the root-servers 01402d56846a3a61811ebd4e6bc97e53f908e568
+- `getregisteredname()` for Lua, which turns 'www.bbc.co.uk' into 'bbc.co.uk' 8cd4851beb78bc6ab320926fb5cb6a09282016b1
 - Lua preoutquery filter 3457a2a0ec41d3b3aff7640f30008788e1228a6e
 - Lua IP-based filter (ipfilter) before parsing packets 4ea949413c495254acb0bd19335142761c1efc0c
 - `iputils` class for Lua, to quickly process IP addresses and netmasks in their native format

diff --git a/docs/markdown/recursor/settings.md b/docs/markdown/recursor/settings.md
index 841587b3b24f36d74dbc94b454102a4a5731de83..b7ca135b4a4758a5edd8d3527f2a3e2d51166f10 100644 (file)
--- a/docs/markdown/recursor/settings.md
+++ b/docs/markdown/recursor/settings.md
@@ -481,6 +481,14 @@ which also disables outgoing IPv6 support.
 
 Don't log queries.
 
+## `root-nx-trust`
+* Boolean
+* Default: no
+* Available since: 3.7.0
+
+If set, an NXDOMAIN from the root-servers will serve as a blanket NXDOMAIN for the entire TLD
+the query belonged to. The effect of this is far fewer queries to the root-servers.
+
 ## `serve-rfc1918`
 * Boolean
 * Default: yes