Return to 49.html CVS log | Up to [local] / www |
version 1.28, 2011/04/25 17:06:55 | version 1.29, 2011/04/25 17:44:07 | ||
---|---|---|---|
|
|
||
<li>Reworking of the MCLGETI livelock algorithm to improve | <li>Reworking of the MCLGETI livelock algorithm to improve | ||
forwarding and host performance under high network load.</li> | forwarding and host performance under high network load.</li> | ||
<li>Added support for socket splicing. | <li>Added support for socket splicing. | ||
<li>Added AES-GCM support for IPSec. | <li>Added AES-GCM support for IPsec. | ||
<li>Added automatic send and receive buffer scaling for TCP. | <li>Added automatic send and receive buffer scaling for TCP. | ||
<li>Added wpakey option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> replacing wpa-psk(8). | <li>Added wpakey option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> replacing wpa-psk(8). | ||
<li>TCP acknowledgments are no longer delayed on the loopback interface. | <li>TCP acknowledgments are no longer delayed on the loopback interface. | ||
|
|
||
now includes the original addresses and ports for packets that have been | now includes the original addresses and ports for packets that have been | ||
rewritten. This is also displayed by | rewritten. This is also displayed by | ||
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>. | <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>. | ||
</ul> | |||
<p> | |||
<li>IPsec stack audit was performed resulting in: | |||
<ul> | |||
<li>Several potential security problems have been identified and fixed. | |||
<li>ARC4 based PRNG code was audited and revamped. | |||
<li>New explicit_bzero kernel function was introduced to prevent a compiler | |||
from optimizing | |||
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bzero&sektion=3">bzero</a> | |||
calls away. | |||
</ul> | </ul> | ||
<p> | <p> | ||