version 1.45, 2018/03/27 01:49:19 |
version 1.46, 2018/03/27 04:53:39 |
|
|
<li>Generic network stack improvements: |
<li>Generic network stack improvements: |
<ul> |
<ul> |
<li>The network stack no longer runs with the KERNEL_LOCK() when IPsec is |
<li>The network stack no longer runs with the KERNEL_LOCK() when IPsec is |
enabled. |
enabled. |
<li>Processing of incoming TCP/UDP packets is now done without |
<li>Processing of incoming TCP/UDP packets is now done without |
KERNEL_LOCK(). |
KERNEL_LOCK(). |
<li>The socket splicing task runs without KERNEL_LOCK(). |
<li>The socket splicing task runs without KERNEL_LOCK(). |
<li>Cleanup and removal of code in sys/netinet6 since autoconfiguration |
<li>Cleanup and removal of code in sys/netinet6 since autoconfiguration |
runs in userland now. |
runs in userland now. |
|
|
<li>Enforce in <a href="https://man.openbsd.org/pf.4">pf(4)</a> |
<li>Enforce in <a href="https://man.openbsd.org/pf.4">pf(4)</a> |
that all neighbor discovery packets have 255 in their IPv6 |
that all neighbor discovery packets have 255 in their IPv6 |
header hop limit field. |
header hop limit field. |
<li>... |
|
</ul> |
</ul> |
<p> |
<p> |
|
|
|
|
<a href="https://man.openbsd.org/netstart.8">netstart(8)</a> no longer |
<a href="https://man.openbsd.org/netstart.8">netstart(8)</a> no longer |
messes with the default route. |
messes with the default route. |
It is now documented as well. |
It is now documented as well. |
<li>... |
|
</ul> |
</ul> |
<p> |
<p> |
|
|
|
|
<li>OpenBSD/armv7 and OpenBSD/arm64 now flush the Branch Target |
<li>OpenBSD/armv7 and OpenBSD/arm64 now flush the Branch Target |
Cache (BTB) on processors that do speculative execution to |
Cache (BTB) on processors that do speculative execution to |
mitigate Spectre variant 2 attacks. |
mitigate Spectre variant 2 attacks. |
<li>... |
|
</ul> |
</ul> |
<p> |
<p> |
|
|
|
|
available. |
available. |
<li><a href="https://man.openbsd.org/vmt.4">vmt(4)</a> now allows cloning and |
<li><a href="https://man.openbsd.org/vmt.4">vmt(4)</a> now allows cloning and |
taking disk-only snapshots of running guests. |
taking disk-only snapshots of running guests. |
<li>... |
|
</ul> |
</ul> |
<p> |
<p> |
|
|