]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/blob - release/doc/en_US.ISO8859-1/relnotes/article.xml
Document r305476, OpenSSH blacklistd(8) support.
[FreeBSD/FreeBSD.git] / release / doc / en_US.ISO8859-1 / relnotes / article.xml
1 <?xml version="1.0" encoding="iso-8859-1"?>
2 <!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
3         "../../../share/xml/freebsd50.dtd" [
4 <!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "release.ent">
5  %release;
6 <!ENTITY % sponsor PUBLIC "-//FreeBSD//ENTITIES Sponsor Specification//EN" "sponsor.ent">
7  %sponsor;
8 <!ENTITY % vendor PUBLIC "-//FreeBSD//ENTITIES Vendor Specification//EN" "vendor.ent">
9  %vendor;
10 <!ENTITY security SYSTEM "../../share/xml/security.xml">
11 <!ENTITY errata SYSTEM "../../share/xml/errata.xml">
12 ]>
13 <article xmlns="http://docbook.org/ns/docbook"
14   xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">
15
16   <info>
17     <title>&os; &release.current; Release Notes</title>
18
19     <author>
20       <orgname>The &os; Project</orgname>
21     </author>
22
23     <pubdate>$FreeBSD$</pubdate>
24
25     <!-- Last rev: 288943 -->
26
27     <copyright>
28       <year>2017</year>
29       <holder role="mailto:doc@FreeBSD.org">The &os; Documentation
30         Project</holder>
31     </copyright>
32
33     <legalnotice xml:id="trademarks" role="trademarks">
34       &tm-attrib.freebsd;
35       &tm-attrib.ibm;
36       &tm-attrib.ieee;
37       &tm-attrib.intel;
38       &tm-attrib.sparc;
39       &tm-attrib.general;
40     </legalnotice>
41
42     <abstract>
43       <para>The release notes for &os; &release.current; contain
44         a summary of the changes made to the &os; base system on the
45         &release.branch; development line.  This document lists
46         applicable security advisories that were issued since the last
47         release, as well as significant changes to the &os; kernel and
48         userland.  Some brief remarks on upgrading are also
49         presented.</para>
50     </abstract>
51   </info>
52
53   <sect1 xml:id="intro">
54     <title>Introduction</title>
55
56     <para>This document contains the release notes for &os;
57       &release.current;.  It describes recently added, changed, or
58       deleted features of &os;.  It also provides some notes on
59       upgrading from previous versions of &os;.</para>
60
61     <para releasetype="current">The &release.type; distribution to
62       which these release notes apply represents the latest point
63       along the &release.branch; development branch since
64       &release.branch; was created.  Information regarding pre-built,
65       binary &release.type; distributions along this branch can be
66       found at <uri
67         xlink:href="&release.url;">&release.url;</uri>.</para>
68
69     <para releasetype="snapshot">The &release.type; distribution to
70       which these release notes apply represents a point along the
71       &release.branch; development branch between &release.prev; and
72       the future &release.next;.  Information regarding pre-built,
73       binary &release.type; distributions along this branch can be
74       found at <uri
75         xlink:href="&release.url;">&release.url;</uri>.</para>
76
77     <para releasetype="release">This distribution of &os;
78       &release.current; is a &release.type; distribution.  It can be
79       found at <uri xlink:href="&release.url;">&release.url;</uri> or
80       any of its mirrors.  More information on obtaining this (or
81       other) &release.type; distributions of &os; can be found in the
82       <link
83         xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
84           &os;</quote> appendix</link> to the <link
85         xlink:href="&url.books.handbook;/">&os;
86         Handbook</link>.</para>
87
88     <para>All users are encouraged to consult the release errata
89       before installing &os;.  The errata document is updated with
90       <quote>late-breaking</quote> information discovered late in the
91       release cycle or after the release.  Typically, it contains
92       information on known bugs, security advisories, and corrections
93       to documentation.  An up-to-date copy of the errata for &os;
94       &release.current; can be found on the &os; Web site.</para>
95
96     <para>This document describes the most user-visible new or changed
97       features in &os; since &release.prev;.  In general, changes
98       described here are unique to the &release.branch; branch unless
99       specifically marked as &merged; features.</para>
100
101     <para>Typical release note items document recent security
102       advisories issued after &release.prev;, new drivers or hardware
103       support, new commands or options, major bug fixes, or
104       contributed software upgrades.  They may also list changes to
105       major ports/packages or release engineering practices.  Clearly
106       the release notes cannot list every single change made to &os;
107       between releases; this document focuses primarily on security
108       advisories, user-visible changes, and major architectural
109       improvements.</para>
110   </sect1>
111
112   <sect1 xml:id="upgrade">
113     <title>Upgrading from Previous Releases of &os;</title>
114
115     <para arch="amd64,i386">Binary upgrades between RELEASE versions
116       (and snapshots of the various security branches) are supported
117       using the &man.freebsd-update.8; utility.  The binary upgrade
118       procedure will update unmodified userland utilities, as well as
119       unmodified GENERIC kernels distributed as a part of an official
120       &os; release.  The &man.freebsd-update.8; utility requires that
121       the host being upgraded have Internet connectivity.</para>
122
123     <para>Source-based upgrades (those based on recompiling the &os;
124       base system from source code) from previous versions are
125       supported, according to the instructions in
126       <filename>/usr/src/UPDATING</filename>.</para>
127
128     <important>
129       <para>Upgrading &os; should only be attempted after backing up
130         <emphasis>all</emphasis> data and configuration files.</para>
131     </important>
132   </sect1>
133
134   <sect1 xml:id="security-errata">
135     <title>Security and Errata</title>
136
137     <para>This section lists the various Security Advisories and
138       Errata Notices since &release.prev;.</para>
139
140     <sect2 xml:id="security">
141       <title>Security Advisories</title>
142
143       &security;
144     </sect2>
145
146     <sect2 xml:id="errata">
147       <title>Errata Notices</title>
148
149       &errata;
150     </sect2>
151   </sect1>
152
153   <sect1 xml:id="userland">
154     <title>Userland</title>
155
156     <para>This section covers changes and additions to userland
157       applications, contributed software, and system utilities.</para>
158
159     <sect2 xml:id="userland-config">
160       <title>Userland Configuration Changes</title>
161
162       <para revision="313203">The &man.inetd.8; utility is now built
163         without <literal>libwrap</literal> support when
164         <literal>WITHOUT_TCP_WRAPPERS</literal> is set in
165         &man.src.conf.5;.</para>
166
167       <para revision="316045">The &man.libthr.3; library and related
168         files are now evaluated and removed by the
169         <literal>delete-old-libs</literal> target when upgrading the
170         system if <literal>WITHOUT_LIBTHR</literal> is
171         set in &man.src.conf.5;.</para>
172
173       <para revision="316423" contrib="sponsor" sponsor="&ff;">The
174         <literal>WITH_LLD_AS_LD</literal> build knob has been added,
175         which installs <application>LLD</application> as
176         <filename>/usr/bin/ld</filename> if set.</para>
177     </sect2>
178
179     <sect2 xml:id="userland-programs">
180       <title>Userland Application Changes</title>
181
182       <para revision="305476" contrib="sponsor"
183         sponsor="&ff;">Support for &man.blacklistd.8; has been added
184         to <application>OpenSSH</application>.</para>
185
186       <para revision="308720" contrib="sponsor" sponsor="&gandi;">The
187         &man.cron.8; utility has been updated to add support for
188         including files within <filename
189           class="directory">/etc/cron.d</filename> and <filename
190           class="directory">/usr/local/etc/cron.d</filename> by
191         default.</para>
192
193       <para revision="308721" contrib="sponsor" sponsor="&gandi;">The
194         &man.syslogd.8; utility has been updated to add the
195         <literal>include</literal> keyword which allows specifying
196         a directory containing configuration files to be included in
197         addition to &man.syslog.conf.5;.  The default
198         &man.syslog.conf.5; has been updated to include <filename
199           class="directory">/etc/syslog.d</filename> and <filename
200           class="directory">/usr/local/etc/syslog.d</filename> by
201         default.</para>
202
203       <para revision="308914">The &man.zfsbootcfg.8; utility has been
204         added, providing one-time &man.boot.config.5;-style options
205         for &man.zfsboot.8;.</para>
206
207       <para revision="315514" contrib="sponsor" sponsor="&yandex;">The
208         &man.setkey.8; utility has been modified to show the runtime
209         <acronym>NAT-T</acronym> configuration.  The
210         <literal>-g</literal> and <literal>-t</literal> flags have
211         been added, which list only global and virtual policies,
212         respectively, when used with the <literal>-D</literal> and
213         <literal>-P</literal> flags.</para>
214
215       <para revision="316098" contrib="sponsor"
216         sponsor="&dellemc;">The &man.getaddrinfo.1; utility has been
217         added, ported from NetBSD.</para>
218
219       <para revision="316944" contrib="sponsor"
220         sponsor="&multiplay;">The &man.jail.8; utility has been
221         updated to allow explicitly-assigned <acronym>IPv4</acronym>
222         and <acronym>IPv6</acronym> addresses to be used within
223         a jail.</para>
224
225       <para revision="317855">The &man.daemon.8; utility has been
226         updated to allow redirecting &man.stdout.4; and &man.stderr.4;
227         output to &man.syslog.3; or to a file.</para>
228     </sect2>
229
230     <sect2 xml:id="userland-contrib">
231       <title>Contributed Software</title>
232
233       <para revision="307729">&man.unbound.8; has been updated to
234         version 1.5.10.</para>
235
236       <para revision="309511"><application>Subversion</application>
237         has been updated to version 1.9.5.</para>
238
239       <para revision="309847">&man.file.1; has been updated to version
240         5.29.</para>
241
242       <para revision="310490">The &man.amd.8; utility has been updated
243         to version 6.2.</para>
244
245       <para revision="312336">The <acronym>CLDR</acronym> locales have
246         been updated to version 30.0.3.  The unicode locales have been
247         updated to version 9.0.0.</para>
248
249       <para revision="312517">&man.xz.1; has been updated to version
250         5.2.3.</para>
251
252       <para revision="313537">&man.tcpdump.1; has been updated to
253         version 4.9.0.</para>
254
255       <para revision="313795">&man.zlib.3; has been updated to version
256         1.2.11.</para>
257
258       <para revision="313980"><application>openresolv</application>
259         has been updated to version 3.9.0.</para>
260
261       <para revision="313680">The NetBSD test suite has been updated
262         to the 01.11.2017_23.20 snapshot.</para>
263
264       <para revision="314278"><literal>libucl</literal> has been
265         updated to version 20170219.</para>
266
267       <para revision="315432">&man.libarchive.3; has been updated to
268         version 3.3.1.</para>
269
270       <para revision="315995">&man.dma.8; has been updated to the
271         2017-02-10 snapshot.</para>
272
273       <para revision="316068">&man.ntpd.8; has been updated to version
274         4.2.8p10.</para>
275
276       <para revision="316303"><application>ACPICA</application> has
277         been updated to version 20170303.</para>
278
279       <para revision="316349">Timezone data files have been updated to
280         version 2017b.</para>
281
282       <para revision="316420">&man.mandoc.1; has been updated to
283         version 1.14.</para>
284
285       <para revision="316423"><application>Clang</application> has
286         been updated to version 4.0.0.</para>
287
288       <para revision="316423"><application>LLVM</application> has
289         been updated to version 4.0.0.</para>
290
291       <para revision="316423"><application>LLD</application> has
292         been updated to version 4.0.0.</para>
293
294       <para revision="316423"><application>LLDB</application> has
295         been updated to version 4.0.0.</para>
296
297       <para revision="316423"><application>compiler-rt</application>
298         has been updated to version 4.0.0.</para>
299
300       <para revision="316423"><application>libc++</application> has
301         been updated to version 4.0.0.</para>
302
303       <para revision="316957">&man.tcsh.1; has been updated to version
304         6.20.00.</para>
305
306       <para revision="318239" contrib="sponsor"
307         sponsor="&ff;">&man.blacklistd.8; has been updated to the
308         20170503 snapshot.</para>
309
310       <para revision="318402" contrib="sponsor"
311         sponsor="&ff;">&man.blacklistd.8; support for
312         <application>OpenSSH</application> has been refined to adjust
313         notification points to catch all authentication failures
314         rather than only those caused by invalid login
315         usernames.</para>
316     </sect2>
317
318     <sect2 xml:id="userland-installer">
319       <title>Installation and Configuration Tools</title>
320
321       <para revision="311686">The &man.bsdinstall.8; installer has
322         been updated to include support for hidden wireless networks
323         when configuring the &man.wlan.4; interface.</para>
324     </sect2>
325
326     <sect2 xml:id="userland-rc">
327       <title><filename class="directory">/etc/rc.d</filename>
328         Scripts</title>
329
330       <para revision="310009" contrib="sponsor"
331         sponsor="&fisglobal;">The <literal>jail_confwarn</literal>
332         &man.rc.conf.5; entry has been added, which suppresses warning
333         about obsolete per-&man.jail.8; configurations.</para>
334     </sect2>
335
336     <sect2 xml:id="userland-periodic">
337       <title><filename class="directory">/etc/periodic</filename>
338         Scripts</title>
339
340       <para revision="317373">The default &man.periodic.conf.5; has
341         been updated to include the
342         <literal>anticongestion_sleeptime</literal> option,
343         consolidating random sleeps in &man.periodic.8; scripts and
344         replacing the <literal>daily_ntpd_avoid_congestion</literal>
345         option.  The default value is 3600 seconds.</para>
346
347       <para revision="317857">The <filename>410.status-mfi</filename>
348         &man.periodic.8; script has been added to monitor the status
349         of &man.mfi.4; volumes.</para>
350     </sect2>
351
352     <sect2 xml:id="userland-libraries">
353       <title>Runtime Libraries and API</title>
354
355       <para revision="316039">The &man.kvm.close.3; function has been
356         updated to return the accumulated error from previous
357         &man.close.2; calls.</para>
358
359       <para revision="317618" contrib="sponsor"
360         sponsor="&dellemc;">The <function>clock_nanosleep()</function>
361         system call has been added.  The
362         <function>nanosleep()</function> system call is now a wrapper
363         around <function>clock_nanosleep()</function>.</para>
364     </sect2>
365
366     <sect2 xml:id="userland-abi">
367       <title>ABI Compatibility</title>
368
369       <para revision="309258">The type <literal>max_align_t</literal>
370         is now defined for C11 compliance.</para>
371
372       <para revision="315274" contrib="sponsor"
373         sponsor="&dellemc;">The
374         <function>sem_clockwait_np()</function> library function has
375         been added, which allows the caller to specify the reference
376         clock and choose between absolute and relative mode.</para>
377
378       <para revision="315282">The <application>clang</application>
379         <literal>nullability</literal> attribute has been added to the
380         <literal>C</literal> library headers.</para>
381     </sect2>
382
383     <sect2 xml:id="userland-debug">
384       <title>Userland Debugging</title>
385
386       <para revision="304499">&man.ptrace.2; now supports events for
387         &man.vfork.2;, permitting reliable debugging across
388         &man.vfork.2; invocations.</para>
389
390       <para revision="306786">Process core dumps now include the
391         process ID (<acronym>PID</acronym> and command line
392         arguments.</para>
393     </sect2>
394   </sect1>
395
396   <sect1 xml:id="kernel">
397     <title>Kernel</title>
398
399     <para>This section covers changes to kernel configurations, system
400       tuning, and system control parameters that are not otherwise
401       categorized.</para>
402
403     <sect2 xml:id="kernel-bugfix">
404       <title>Kernel Bug Fixes</title>
405
406       <para revision="317434">The &man.ipf.4; packet filter has been
407         updated to prevent <literal>keep state</literal> from
408         incorrectly implying <literal>keep frags</literal>, matching
409         the behavior documented in &man.ipf.5;.</para>
410     </sect2>
411
412     <sect2 xml:id="kernel-config">
413       <title>Kernel Configuration</title>
414
415       <para revision="315514" contrib="sponsor" sponsor="&yandex;">The
416         <literal>IPSEC_NAT_T</literal> kernel configuration option has
417         been removed.  Support for <acronym>NAT-T</acronym> is now
418         enabled by default.</para>
419
420       <para revision="315514" contrib="sponsor" sponsor="&yandex;">The
421         <literal>IPSEC_FILTERTUNNEL</literal> kernel option has been
422         removed, which was deprecated by the
423         <literal>net.inet.ipsec.filtertunnel</literal> sysctl.</para>
424     </sect2>
425
426     <sect2 xml:id="kernel-modules">
427       <title>Kernel Modules</title>
428
429       <para revision="307144">&man.cloudabi.4; has been updated to
430         allow running 32-bit binaries within 64-bit userland
431         environments when the kernel configuration file has the
432         <literal>COMPAT_CLOUDABI32</literal> option present.</para>
433
434       <para revision="315514" contrib="sponsor" sponsor="&yandex;">The
435         <literal>ipsec</literal> and <literal>tcpmd5</literal> kernel
436         modules have been added.</para>
437
438       <para revision="316274" contrib="sponsor" sponsor="&yandex;">The
439         &man.ipfw.4; packet filter has been updated to add support for
440         named dynamic states.</para>
441
442       <para revision="316444" contrib="sponsor" sponsor="&yandex;">The
443         <literal>ipfw_nptv6</literal> kernel module has been added,
444         implementing Network Prefix Translation for
445         <acronym>IPv6</acronym> as defined in <acronym>RFC</acronym>
446         6296.</para>
447
448       <para revision="316446" contrib="sponsor" sponsor="&yandex;">The
449         <literal>ipfw_nat64</literal> kernel module has been added,
450         implementing stateless and stateful
451         <acronym>NAT64</acronym>.</para>
452
453       <para revision="316660" contrib="sponsor" sponsor="&ff;">The
454         &man.cfumass.4; device has been added, providing a storage
455         frontend to <acronym>USB</acronym>
456         <acronym>OTG</acronym>-capable hardware.</para>
457
458       <para revision="317045" contrib="sponsor" sponsor="&yandex;">The
459         <literal>ipfw_pmod</literal> kernel module has been added,
460         designed for modifying packets of any protocol.</para>
461
462       <note>
463         <para>At present, only <acronym>TCP</acronym>
464           <acronym>MSS</acronym> modification is implemented.</para>
465       </note>
466     </sect2>
467
468     <sect2 xml:id="kernel-sysctl">
469       <title>System Tuning and Controls</title>
470
471       <para revision="315539">The
472         <literal>vfs.root_mount_always_wait</literal> tunable has been
473         added, which forces the kernel to wait for root mount holds
474         even if the root device is already present.</para>
475
476       <para revision="316120" contrib="sponsor"
477         sponsor="&dellemc;">When the system real time clock
478         (<acronym>RTC</acronym>) is adjusted, such as by
479         <function>clock_settime()</function>, sleeping threads are now
480         awakened and absolute sleep times are reevaluated based on the
481         new value of the RTC.</para>
482     </sect2>
483   </sect1>
484
485   <sect1 xml:id="drivers">
486     <title>Devices and Drivers</title>
487
488     <para>This section covers changes and additions to devices and
489       device drivers since &release.prev;.</para>
490
491     <sect2 xml:id="drivers-device">
492       <title>Device Drivers</title>
493
494       <para revision="307768">The &man.jedec.ts.4; driver has been
495         added, providing support for thermal sensors on memory
496         modules.  The driver currently supports chips that are fully
497         compliant with the <acronym>JEDEC</acronym>
498         <acronym>JC</acronym> 42.4 specification.</para>
499
500       <para revision="308104">The &man.chromebook.platform.4; driver
501         has been added, providing support for various Chromebook
502         models.</para>
503
504       <para revision="308942">The &man.bytgpio.4; driver has been
505         added, providing support for Intel&reg; Bay&nbsp;Trail&trade;
506         SoC GPIO controllers.</para>
507
508       <para revision="312394"><filename>/dev/kmem</filename> no longer
509         supports access via <function>mmap()</function>.  Consumers
510         wishing to use <filename>/dev/kmem</filename> must use
511         <function>read()</function> and
512         <function>write()</function>.</para>
513
514       <para revision="306533" contrib="sponsor"
515         sponsor="&chelsio;">&man.devctl.8; now supports a &quot;clear
516         driver&quot; command as a complement to &quot;set
517         driver&quot;.</para>
518     </sect2>
519
520     <sect2 xml:id="drivers-storage">
521       <title>Storage Drivers</title>
522
523       <para>&nbsp;</para>
524     </sect2>
525
526     <sect2 xml:id="drivers-network">
527       <title>Network Drivers</title>
528
529       <para revision="306660" contrib="sponsor"
530         sponsor="&chelsio;">The &man.cxgbe.4; has been updated to
531         provide support for Virtual Function devices
532         (<acronym>VFs</acronym>) on Chelsio T4 and T5 adapters.</para>
533
534       <para revision="306661" contrib="sponsor"
535         sponsor="&chelsio;">TCP connections using the TCP Offload
536         Engine (<acronym>TOE</acronym>) on Chelsio T4+ adapters can
537         now perform zero-copy sends via
538         <function>aio_write()</function>.</para>
539
540       <para revision="306664" contrib="sponsor"
541         sponsor="&chelsio;">The &man.cxgbev.4; has been added,
542         providing support for Virtual Function devices
543         (<acronym>VFs</acronym>) on Chelsio T4 and T5 adapters.</para>
544
545       <para revision="309377" contrib="sponsor"
546         sponsor="&broadcom;">The &man.bnxt.4; driver has been added,
547         providing support for Broadcom&reg; NetXtreme-C&trade; and
548         NetXtreme-E&trade; devices.</para>
549
550       <para revision="309560" contrib="sponsor"
551         sponsor="&chelsio;">The &man.cxgbe.4; driver now supports
552         devices using T6-based adapters which support 10, 25, 40, and
553         100 Gbps.</para>
554
555       <para revision="309560" contrib="sponsor"
556         sponsor="&chelsio;">The &man.cxgbe.4; has been updated to
557         provide support for Virtual Function devices
558         (<acronym>VFs</acronym>) on Chelsio T6 adapters.</para>
559
560       <para revision="309560" contrib="sponsor"
561         sponsor="&chelsio;">The &man.cxgbev.4; has been updated to
562         provide support for Virtual Function devices
563         (<acronym>VFs</acronym>) on Chelsio T6 adapters.</para>
564
565       <para revision="310852" contrib="sponsor"
566         sponsor="&netgate;">The &man.miibus.4; driver has been updated
567         to support Microchip/Micrel KSZ9031 Gigabit ethernet
568         cards.</para>
569
570       <para revision="311506" contrib="sponsor"
571         sponsor="&chelsio;">The &man.cxgbe.4; driver has been updated
572         to firmware version 1.16.26.0 for T4, T5, and T6 cards.</para>
573
574       <para revision="312358">The &man.alc.4; driver has been updated
575         to provide support for Atheros&reg; Killer&nbsp;E2400&trade;
576         Gigabit ethernet cards.</para>
577
578       <para revision="314005" contrib="sponsor" sponsor="&ms;">The
579         &man.alc.4; driver has been updated to provide support for
580         Atheros&reg; Killer&nbsp;E2500&trade; Gigabit ethernet
581         cards.</para>
582
583       <para revision="315330" contrib="sponsor"
584         sponsor="&netgate;">The &man.etherswitch.4; driver has been
585         updated to support RTL8366RB and RTL8366SR cards.</para>
586
587       <para revision="317116">The &man.qlnxe.4; driver has been added,
588         providing support for Cavium&reg; Qlogic&trade; 45000 Series
589         adapters.</para>
590
591       <para revision="317182">The &man.qlxgbe.4; firmware has been
592         updated to version 5.4.64.</para>
593
594       <para revision="318357" contrib="sponsor"
595         sponsor="&intelcorp;">The &man.ixl.4; driver has been updated
596         to version 1.7.12-k.</para>
597     </sect2>
598   </sect1>
599
600   <sect1 xml:id="hardware">
601     <title>Hardware Support</title>
602
603     <para>This section covers general hardware support for physical
604       machines, hypervisors, and virtualization environments, as well
605       as hardware changes and updates that do not otherwise fit in
606       other sections of this document.</para>
607
608     <sect2 xml:id="hardware-support">
609       <title>Hardware Support</title>
610
611       <para revision="307576">The &man.atkbdc.4; driver has been
612         updated to provide support for Elantech&reg; trackpads.  To
613         enable hardware support, add
614         <literal>hw.psm.elantech_support=1</literal> to
615         &man.loader.conf.5;.</para>
616     </sect2>
617
618     <sect2 xml:id="hardware-virtualization">
619       <title>Virtualization Support</title>
620
621       <para revision="306471" contrib="sponsor"
622         sponsor="&chelsio;"><acronym>PCI</acronym> passthrough with
623         &man.bhyve.4; supports more dynamic configurations permitting
624         devices to be marked for passthrough or host use at
625         runtime.</para>
626
627       <para revision="306520" contrib="sponsor"
628         sponsor="&chelsio;"><acronym>PCI</acronym> passthrough with
629         &man.bhyve.4; resets functions via <acronym>FLR</acronym> when
630         a virtual machine is started and stopped.</para>
631     </sect2>
632
633     <sect2 xml:id="hardware-arm">
634       <title>ARM Support</title>
635
636       <para revision="305436">Support for the Allwinner A13 board has
637         been added.</para>
638     </sect2>
639   </sect1>
640
641   <sect1 xml:id="storage">
642     <title>Storage</title>
643
644     <para>This section covers changes and additions to file systems
645       and other storage subsystems, both local and networked.</para>
646
647     <sect2 xml:id="storage-general">
648       <title>General Storage</title>
649
650       <para>&nbsp;</para>
651     </sect2>
652
653     <sect2 xml:id="storage-net">
654       <title>Networked Storage</title>
655
656       <para>&nbsp;</para>
657     </sect2>
658
659     <sect2 xml:id="storage-zfs">
660       <title>ZFS</title>
661
662       <para>&nbsp;</para>
663     </sect2>
664
665     <sect2 xml:id="storage-geom">
666       <title><literal>geom(4)</literal></title>
667
668       <para>&nbsp;</para>
669     </sect2>
670   </sect1>
671
672   <sect1 xml:id="boot">
673     <title>Boot Loader Changes</title>
674
675     <para>This section covers the boot loader, boot menu, and other
676       boot-related changes.</para>
677
678     <sect2 xml:id="boot-loader">
679       <title>Boot Loader Changes</title>
680
681       <para revision="307632" contrib="sponsor" sponsor="&gandi;">The
682         <acronym>EFI</acronym> loader has been updated to support
683         <acronym>TFTPFS</acronym>, providing netboot support without
684         requiring an <acronym>NFS</acronym> server.</para>
685     </sect2>
686
687     <sect2 xml:id="boot-menu">
688       <title>Boot Menu Changes</title>
689
690       <para>&nbsp;</para>
691     </sect2>
692   </sect1>
693
694   <sect1 xml:id="network">
695     <title>Networking</title>
696
697     <para>This section describes changes that affect networking in
698       &os;.</para>
699
700     <sect2 xml:id="network-general">
701       <title>General Network Changes</title>
702
703       <para revision="311681" contrib="sponsor" sponsor="&yandex;">The
704         network stack has been updated to include
705         <function>ip6_tryforward()</function>, providing performance
706         benefits as result of a reduced number of checks.</para>
707
708       <para revision="313523" contrib="sponsor"
709         sponsor="&dellemc;">The network stack has been modified to fix
710         incorrect or invalid <acronym>IP</acronym> addresses if
711         multiple threads emit a <acronym>UDP</acronym>
712         <literal>log_in_vain</literal> message concurrently.</para>
713
714       <para revision="317386" contrib="sponsor"
715         sponsor="&multiplay;">The <acronym>TCP</acronym> stack has
716         been changed to use the estimated <acronym>RTT</acronym>
717         instead of timestamps for receive buffer auto resizing.</para>
718     </sect2>
719
720     <sect2 xml:id="network-protocols">
721       <title>Network Protocols</title>
722
723       <para revision="309337" contrib="sponsor"
724         sponsor="&dellemc;">Support for <acronym>GARP</acronym>
725         (gratuitous <acronym>ARP</acronym>) retransmit has been added.
726         A new &man.sysctl.8;,
727         <literal>net.link.ether.inet.garp_rexmit_count</literal>, has
728         been added, which sets the maximum number of retransmissions
729         when set to a non-zero value.</para>
730
731       <para revision="315514" contrib="sponsor"
732         sponsor="&yandex;">Support for the
733         <literal>UDP_ENCAP_ESPINUDP_NON_IKE</literal> encapsulation
734         type has been removed.</para>
735     </sect2>
736   </sect1>
737
738   <sect1 xml:id="ports">
739     <title>Ports Collection and Package Infrastructure</title>
740
741     <para>This section covers changes to the &os;&nbsp;Ports
742       Collection, package infrastructure, and package maintenance and
743       installation tools.</para>
744
745     <sect2 xml:id="ports-infrastructure">
746       <title>Infrastructure Changes</title>
747
748       <para>&nbsp;</para>
749     </sect2>
750
751     <sect2 xml:id="ports-packages ">
752       <title>Packaging Changes</title>
753
754       <para>&nbsp;</para>
755     </sect2>
756   </sect1>
757
758   <sect1 xml:id="doc">
759     <title>Documentation</title>
760
761     <para>This section covers changes to the &os;&nbsp;Documentation
762       Project sources and toolchain.</para>
763
764     <sect2 xml:id="doc-sources">
765       <title>Documentation Source Changes</title>
766
767       <para>&nbsp;</para>
768     </sect2>
769
770     <sect2 xml:id="doc-toolchain">
771       <title>Documentation Toolchain Changes</title>
772
773       <para>&nbsp;</para>
774     </sect2>
775   </sect1>
776
777   <sect1 xml:id="releng">
778     <title>Release Engineering and Integration</title>
779
780     <para>This section convers changes that are specific to the
781       &os;&nbsp;Release Engineering processes.</para>
782
783     <sect2 xml:id="releng-changes">
784       <title>Integration Changes</title>
785
786       <para>&nbsp;</para>
787     </sect2>
788   </sect1>
789 </article>