chore(docs): regenerate man pages (#7971)

man/coredns-bind.7

@@ -1,5 +1,5 @@
 .\" Generated by Mmark Markdown Processer - mmark.miek.nl
-.TH "COREDNS-BIND" 7 "March 2021" "CoreDNS" "CoreDNS Plugins"
+.TH "COREDNS-BIND" 7 "March 2026" "CoreDNS" "CoreDNS Plugins"
 
 .SH "NAME"
 .PP
@@ -17,23 +17,43 @@ If several addresses are provided, a listener will be open on each of the IP pro
 Each address has to be an IP or name of one of the interfaces of the host. Bind by interface name, binds to the IPs on that interface at the time of startup or reload (reload will happen with a SIGHUP or if the config file changes).
 
 .PP
-If the given argument is an interface name, and that interface has serveral IP addresses, CoreDNS will listen on all of the interface IP addresses (including IPv4 and IPv6).
+If the given argument is an interface name, and that interface has several IP addresses, CoreDNS will listen on all of the interface IP addresses (including IPv4 and IPv6).
 
 .SH "SYNTAX"
+.PP
+In its basic form, a simple bind uses this syntax:
+
 .PP
 .RS
 
 .nf
-bind ADDRESS  ...
+bind ADDRESS|IFACE  ...
 
 .fi
 .RE
 
 .PP
-\fBADDRESS\fP is an IP address to bind to.
-When several addresses are provided a listener will be opened on each of the addresses.
+You can also exclude some addresses with their IP address or interface name in expanded syntax:
+
+.PP
+.RS
+
+.nf
+bind ADDRESS|IFACE ... {
+    except ADDRESS|IFACE ...
+}
+
+.fi
+.RE
+
+.IP \(bu 4
+\fBADDRESS|IFACE\fP is an IP address or interface name to bind to.
+When several addresses are provided a listener will be opened on each of the addresses. Please read the \fIDescription\fP for more details.
+.IP \(bu 4
+\fB\fCexcept\fR, excludes interfaces or IP addresses to bind to. \fB\fCexcept\fR option only excludes addresses for the current \fB\fCbind\fR directive if multiple \fB\fCbind\fR directives are used in the same server block.
 
 .SH "EXAMPLES"
+
 .PP
 To make your socket accessible only to that machine, bind to IP 127.0.0.1 (localhost):
 
@@ -92,12 +112,35 @@ The following server block, binds on localhost with its interface name (both "12
 .fi
 .RE
 
-.SH "BUGS"
 .PP
-When defining more than one server block, take care not to bind more than one server to the same
-address and port. Doing so will result in unpredictable behavior (requests may be randomly
-served by either server). Keep in mind that \fIwithout\fP the \fIbind\fP plugin, a server will bind to all
-interfaces, and this will collide with another server if it's using \fIbind\fP to listen to an interface
+You can exclude some addresses by their IP or interface name (The following will only listen on \fB\fC::1\fR or whatever addresses have been assigned to the \fB\fClo\fR interface):
+
+.PP
+.RS
+
+.nf
+\&. {
+    bind lo {
+        except 127.0.0.1
+    }
+}
+
+.fi
+.RE
+
+.SH "BUGS"
+.SS "AVOIDING LISTENER CONTENTION"
+.PP
+TL;DR, When adding the \fIbind\fP plugin to a server block, it must also be added to all other server blocks that listen on the same port.
+
+.PP
+When more than one server block is configured to listen to a common port, those server blocks must either
+all use the \fIbind\fP plugin, or all use default binding (no \fIbind\fP plugin).  Note that "port" here refers the TCP/UDP port that
+a server block is configured to serve (default 53) - not a network interface. For two server blocks listening on the same port,
+if one uses the bind plugin and the other does not, two separate listeners will be created that will contend for serving
+packets destined to the same address.  Doing so will result in unpredictable behavior (requests may be randomly
+served by either server). This happens because \fIwithout\fP the \fIbind\fP plugin, a server will bind to all
+interfaces, and this will collide with another server if it's using \fIbind\fP to listen to an address
 on the same port. For example, the following creates two servers that both listen on 127.0.0.1:53,
 which would result in unpredictable behavior for queries in \fB\fCa.bad.example.com\fR: