version 1.62, 2017/10/06 17:45:39 |
version 1.63, 2017/10/06 18:05:53 |
|
|
<li><a href="https://man.openbsd.org/amd64/vmm.4">vmm(4)</a>/ |
<li><a href="https://man.openbsd.org/amd64/vmm.4">vmm(4)</a>/ |
<a href="https://man.openbsd.org/amd64/vmd.8">vmd(8)</a> improvements: |
<a href="https://man.openbsd.org/amd64/vmd.8">vmd(8)</a> improvements: |
<ul> |
<ul> |
<li><a href="https://man.openbsd.org/amd64/vmctl.8">vmctl(8)</a> supports paused VM migration and memory snapshotting using send and receive commands. |
<li><a href="https://man.openbsd.org/amd64/vmctl.8">vmctl(8)</a> supports |
<li>VPID/ASID reuse/rollover in <a href="https://man.openbsd.org/amd64/vmm.4">vmm(4)</a>. |
paused VM migration and memory snapshotting using send and receive commands. |
<li>SGABIOS imported as an option ROM payload in SeaBIOS (for VGA to serial console redirection.) |
<li>VPID/ASID reuse/rollover in <a |
<li><a href="https://man.openbsd.org/amd64/vmd.8">vmd(8)</a> resets the guest VM RTC (real time clock) on host resume from suspend/hibernate (OpenBSD guests only.) |
href="https://man.openbsd.org/amd64/vmm.4">vmm(4)</a>. |
<li>Allow guest VMs access to AVX/AVX2 host CPU features |
<li>SGABIOS imported as an option ROM payload in SeaBIOS (for VGA to serial |
<li>Support for AMD SVM/RVI hosts |
console redirection.) |
<li>Allow larger guest VM memory sizes (up to MAXDSIZ sized guests - eg, 32GB on amd64 hosts) |
<li><a href="https://man.openbsd.org/amd64/vmd.8">vmd(8)</a> resets the |
<li>Better handling of guest VM MONITOR/MWAIT and HLT instructions |
guest VM RTC (real time clock) on host resume from suspend/hibernate |
<li>Various device emulation improvements in <a href="https://man.openbsd.org/amd64/vmd.8">vmd(8)</a>. |
(OpenBSD guests only.) |
<li>Increase the <a href="https://man.openbsd.org/virtio.4">virtio(4)</a> queue size provided by <a href="https://man.openbsd.org/amd64/vmd.8">vmd(8)</a> from 64 to 128 entries, to increase performance. |
<li>Allow guest VMs access to AVX/AVX2 host CPU features. |
<li>Many fixes to <a href="https://man.openbsd.org/amd64/vmctl.8">vmctl(8)</a> and <a href="https://man.openbsd.org/amd64/vmd.8">vmd(8)</a> error handling. |
<li>Support for AMD SVM/RVI hosts. |
|
<li>Allow larger guest VM memory sizes (up to MAXDSIZ sized guests - e.g. |
|
32GB on amd64 hosts) |
|
<li>Better handling of guest VM MONITOR/MWAIT and HLT instructions. |
|
<li>Various device emulation improvements in <a |
|
href="https://man.openbsd.org/amd64/vmd.8">vmd(8)</a>. |
|
<li>Increase the <a href="https://man.openbsd.org/virtio.4">virtio(4)</a> |
|
queue size provided by <a |
|
href="https://man.openbsd.org/amd64/vmd.8">vmd(8)</a> from 64 to 128 entries, to increase performance. |
|
<li>Many fixes to <a href="https://man.openbsd.org/amd64/vmctl.8">vmctl(8)</a> |
|
and <a href="https://man.openbsd.org/amd64/vmd.8">vmd(8)</a> error handling. |
</ul> |
</ul> |
<p> |
<p> |
|
|
<li>IEEE 802.11 wireless stack improvements: |
<li>IEEE 802.11 wireless stack improvements: |
<ul> |
<ul> |
<li>MiRA 802.11n TX rate scaling now supports devices with unequal numbers of Tx and Rx streams. Fixes 11n mode for some <a href="https://man.openbsd.org/athn.8">athn(8)</a> devices. |
<li>MiRA 802.11n TX rate scaling now supports devices with unequal numbers |
<li>The <a href="https://man.openbsd.org/iwn.8">iwn(8)</a> and <a href="https://man.openbsd.org/iwm.8">iwm(8)</a> drivers will now start scanning for a new access point if they no longer receive beacons from their current AP. |
of Tx and Rx streams. Fixes 11n mode for some |
|
<a href="https://man.openbsd.org/athn.8">athn(8)</a> devices. |
|
<li>The <a href="https://man.openbsd.org/iwn.8">iwn(8)</a> and |
|
<a href="https://man.openbsd.org/iwm.8">iwm(8)</a> drivers will now start |
|
scanning for a new access point if they no longer receive beacons from |
|
the current AP. |
<li>Prefer the 5GHz band over the 2GHz band during access point selection. |
<li>Prefer the 5GHz band over the 2GHz band during access point selection. |
<li>Improved debug output in <a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> when a wireless interface is put into debug mode with <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>. |
<li>Improved debug output in |
|
<a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a> when a wireless |
|
interface is put into debug mode with |
|
<a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>. |
</ul> |
</ul> |
<p> |
<p> |
|
|
<li>Generic network stack improvements: |
<li>Generic network stack improvements: |
<ul> |
<ul> |
<li> Incoming and forwarded IP packets are now processed without |
<li>Incoming and forwarded IP packets are now processed without |
KERNEL_LOCK, resulting in better performances and reduced latency |
KERNEL_LOCK, resulting in better performances and reduced latency. |
<li> The kernel no longer handles IPv6 Stateless Address |
<li>The kernel no longer handles IPv6 Stateless Address |
Autoconfiguration (RFC 4862), allowing cleanup and simplification |
Autoconfiguration (RFC 4862), allowing cleanup and simplification |
of the IPv6 network stack. |
of the IPv6 network stack. |
<li> The kernel sends IPv6 router solicitations for link local addresses |
<li>The kernel sends IPv6 router solicitations for link local addresses |
with a link local source address. |
with a link local source address. |
<li> FQ-CoDel algorithm has been implemented for use with <a |
<li>FQ-CoDel algorithm has been implemented for use with <a |
href="https://man.openbsd.org/pf.conf#QUEUEING">pf(4) queueing</a>. |
href="https://man.openbsd.org/pf.conf#QUEUEING">pf(4) queueing</a>. |
<li>Improve IPv6 checks for IPsec policies and make them consistent |
<li>Improved IPv6 checks for IPsec policies and made them consistent |
with IPv4. |
with IPv4. |
<li>Refactor local IP delivery to process IPsec packets in a flow. |
<li>Refactored local IP delivery to process IPsec packets in a flow and |
Avoid that they are enqueued a second time. |
avoid enqueueing a second time. |
<li><a href="https://man.openbsd.org/pf.4">pf(4)</a> |
<li><a href="https://man.openbsd.org/pf.4">pf(4)</a> |
looks into AH packets and matches on the inner protocol. |
now inspects AH packets and matches on the inner protocol. |
This makes IPv4 authentication headers work like IPv6. |
This makes IPv4 authentication headers work like IPv6. |
<li>The length of extension header chains in pf(4) is limited. |
<li>The length of extension header chains in pf(4) is limited. |
This prevents spending excessive cpu time on crafted packets. |
This prevents spending excessive CPU time on crafted packets. |
<li>Block IPv6 packets in pf(4) that have hop-by-hop options |
<li>Block IPv6 packets in |
header or destination options header. |
<a href="https://man.openbsd.org/pf.4">pf(4)</a> |
Such packets can be passed by adding "allow-opts" to the |
that have a hop-by-hop options header or a destination options header. |
rule. |
Such packets can be passed by adding "allow-opts" to the rule. |
So IPv6 options are handled like their counterpart in IPv4 |
This makes IPv6 option handling consistent with IPv4. |
now. |
|
<li>If the IPv4 ID gets reused too fast, pf(4) fragment reassembly |
<li>If the IPv4 ID gets reused too fast, pf(4) fragment reassembly |
uses a smarter strategy to drop packets. |
uses a smarter strategy to drop packets. |
<li>Enable the use of per-CPU caches on the network packet allocators |
<li>Enabled the use of per-CPU caches in the network packet allocators. |
</ul> |
</ul> |
<p> |
<p> |
|
|
<li>Installer improvements: |
<li>Installer improvements: |
<ul> |
<ul> |
<li> The installer now uses the Allotment Routing Table (ART). |
<li>The installer now uses the Allotment Routing Table (ART). |
<li> A unique kernel is now created by the installer to boot from after install/upgrade. |
<li>A unique kernel is now created by the installer to boot from after |
<li> On release installs of architectures supported by syspatch "syspatch -c" is added to rc.firsttime. |
install/upgrade. |
<li> Backwards compatibility code to support the 'rtsol' keyword in hostname.if(5) has been removed. |
<li>On release installs of architectures supported by syspatch, |
<li> The install.site and upgrade.site scripts are now executed at the end of the install/upgrade process. |
"syspatch -c" is now added to rc.firsttime. |
<li> More detailed information is shown to identify disks. |
<li>Backwards compatibility code to support the 'rtsol' keyword in |
<li> The IPv6 default router selection has been fixed. |
<a href="https://man.openbsd.org/hostname.if.5">hostname.if(5)</a> |
<li> On the amd64 platform, the AES-NI is used if present. |
has been removed. |
|
<li>The <tt>install.site</tt> and <tt>upgrade.site</tt> scripts are now |
|
executed at the end of the install/upgrade process. |
|
<li>More detailed information is shown to identify disks. |
|
<li>The IPv6 default router selection has been fixed. |
|
<li>On the amd64 platform, AES-NI is used if present. |
</ul> |
</ul> |
<p> |
<p> |
|
|
<li>Routing daemons and other userland network improvements: |
<li>Routing daemons and other userland network improvements: |
<ul> |
<ul> |
<li> A new daemon, <a |
<li>A new daemon, <a |
href="https://man.openbsd.org/slaacd.8">slaacd(8)</a> handles IPv6 |
href="https://man.openbsd.org/slaacd.8">slaacd(8)</a> handles IPv6 |
Stateless Address Autoconfiguration (RFC 4862). |
Stateless Address Autoconfiguration (RFC 4862). |
<li> <a href="https://man.openbsd.org/rtadvd.8">rtadvd(8)</a> now supports |
<li><a href="https://man.openbsd.org/rtadvd.8">rtadvd(8)</a> now supports |
"Reducing Energy Consumption of Router Advertisements" (RFC 7772). |
"Reducing Energy Consumption of Router Advertisements" (RFC 7772). |
<li><a href="https://man.openbsd.org/rtadvd.8">rtadvd(8)</a> has |
<li><a href="https://man.openbsd.org/rtadvd.8">rtadvd(8)</a> has |
been fixed to quickly handle IPv6 prefixes changes on the system. |
been fixed to quickly handle IPv6 prefixes changes on the system. |
<li><a href="https://man.openbsd.org/ipsecctl.8">ipsecctl(8)</a> |
<li><a href="https://man.openbsd.org/ipsecctl.8">ipsecctl(8)</a> |
can show SA bundles now. |
can now show SA bundles and the "bundle" keyword allows them to be |
The keyword "bundle" allows to create them explicitly. |
explicitly created. This avoids confusion as they were previously |
This avoids confusion as they were used implicitly before. |
used implicitly. |
<li><a href="https://man.openbsd.org/nc.1">nc(1)</a> |
<li><a href="https://man.openbsd.org/nc.1">nc(1)</a> |
has got the option -W "recvlimit" to terminate netcat after |
now has a <tt>-W recvlimit</tt> option to terminate netcat after |
receiving a number of packets. |
receiving the specified number of packets. This allows for a UDP |
This allows to send a UDP request, receive a reply and check |
request to be sent, a reply to be received and the result checked on |
the result on the command line. |
the command line. |
<li><a href="https://man.openbsd.org/nc.1">nc(1)</a> |
<li><a href="https://man.openbsd.org/nc.1">nc(1)</a> |
now has a -Z option, allowing the peer certificate and chain to be |
now has a <tt>-Z</tt> option, allowing the peer certificate and chain to be |
saved to a file in PEM format. |
saved to a file in PEM format. |
<li>A new "-T tlscompat" option was added to |
<li>A new <tt>-T tlscompat</tt> option was added to |
<a href="https://man.openbsd.org/nc.1">nc(1)</a>, which enables the use |
<a href="https://man.openbsd.org/nc.1">nc(1)</a>, which enables the use |
of all TLS protocols and libtls "compat" ciphers. |
of all TLS protocols and libtls "compat" ciphers. |
<li>Fix a bunch of races in |
<li>Various races have been fixed in |
<a href="https://man.openbsd.org/relayd.8">relayd(8)</a> |
<a href="https://man.openbsd.org/relayd.8">relayd(8)</a>, |
expecially in HTTP chunked mode. |
expecially in HTTP chunked mode. |
<li><a href="https://man.openbsd.org/ndp.8">ndp(8)</a> shows the |
<li><a href="https://man.openbsd.org/ndp.8">ndp(8)</a> now shows the |
relevant NDP information when run in a non-default routing |
relevant NDP information when run in a non-default routing |
domain. |
domain. |
<li><a href="https://man.openbsd.org/ifstated.8">ifstated(8)</a> now |
<li><a href="https://man.openbsd.org/ifstated.8">ifstated(8)</a> now |
copes with interface departures/arrivals. |
copes with interface departures/arrivals. |
<li><a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> can now |
<li><a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> can now |
be started multiple times in different |
be started multiple times in different |
<a href="https://man.openbsd.org/rdomain.4">routing domains</a>, |
<a href="https://man.openbsd.org/rdomain.4">routing domains</a>, |
this provides virtual router functionality. |
this provides virtual router functionality. |
</ul> |
</ul> |
<p> |
<p> |
|
|