article.xml revision 285233
1<?xml version="1.0" encoding="iso-8859-1"?>
2<!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
3	"../../../share/xml/freebsd50.dtd" [
4<!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "release.ent">
5 %release;
6<!ENTITY % sponsor PUBLIC "-//FreeBSD//ENTITIES Sponsor Specification//EN" "sponsor.ent">
7 %sponsor;
8<!ENTITY % vendor PUBLIC "-//FreeBSD//ENTITIES Vendor Specification//EN" "vendor.ent">
9 %vendor;
10<!ENTITY security SYSTEM "../../share/xml/security.xml">
11<!ENTITY errata SYSTEM "../../share/xml/errata.xml">
12]>
13<article xmlns="http://docbook.org/ns/docbook"
14  xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">
15
16  <info>
17    <title>&os; &release.current; Release Notes</title>
18
19    <author>
20      <orgname>The &os; Project</orgname>
21    </author>
22
23    <pubdate>$FreeBSD: head/release/doc/en_US.ISO8859-1/relnotes/article.xml 285233 2015-07-07 03:06:56Z gshapiro $</pubdate>
24
25    <!-- Last rev: 284814 -->
26
27    <copyright>
28      <year>2015</year>
29      <holder role="mailto:doc@FreeBSD.org">The &os; Documentation
30	Project</holder>
31    </copyright>
32
33    <legalnotice xml:id="trademarks" role="trademarks">
34      &tm-attrib.freebsd;
35      &tm-attrib.ibm;
36      &tm-attrib.ieee;
37      &tm-attrib.intel;
38      &tm-attrib.sparc;
39      &tm-attrib.general;
40    </legalnotice>
41
42    <abstract>
43      <para>The release notes for &os; &release.current; contain
44	a summary of the changes made to the &os; base system on the
45	&release.branch; development line.  This document lists
46	applicable security advisories that were issued since the last
47	release, as well as significant changes to the &os; kernel and
48	userland.  Some brief remarks on upgrading are also
49	presented.</para>
50    </abstract>
51  </info>
52
53  <sect1 xml:id="intro">
54    <title>Introduction</title>
55
56    <para>This document contains the release notes for &os;
57      &release.current;.  It describes recently added, changed, or
58      deleted features of &os;.  It also provides some notes on
59      upgrading from previous versions of &os;.</para>
60
61    <para releasetype="current">The &release.type; distribution to
62      which these release notes apply represents the latest point
63      along the &release.branch; development branch since
64      &release.branch; was created.  Information regarding pre-built,
65      binary &release.type; distributions along this branch can be
66      found at <uri
67	xlink:href="&release.url;">&release.url;</uri>.</para>
68
69    <para releasetype="snapshot">The &release.type; distribution to
70      which these release notes apply represents a point along the
71      &release.branch; development branch between &release.prev; and
72      the future &release.next;.  Information regarding pre-built,
73      binary &release.type; distributions along this branch can be
74      found at <uri
75	xlink:href="&release.url;">&release.url;</uri>.</para>
76
77    <para releasetype="release">This distribution of &os;
78      &release.current; is a &release.type; distribution.  It can be
79      found at <uri xlink:href="&release.url;">&release.url;</uri> or
80      any of its mirrors.  More information on obtaining this (or
81      other) &release.type; distributions of &os; can be found in the
82      <link
83	xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
84	  &os;</quote> appendix</link> to the <link
85	xlink:href="&url.books.handbook;/">&os;
86	Handbook</link>.</para>
87
88    <para>All users are encouraged to consult the release errata
89      before installing &os;.  The errata document is updated with
90      <quote>late-breaking</quote> information discovered late in the
91      release cycle or after the release.  Typically, it contains
92      information on known bugs, security advisories, and corrections
93      to documentation.  An up-to-date copy of the errata for &os;
94      &release.current; can be found on the &os; Web site.</para>
95
96    <para>This document describes the most user-visible new or changed
97      features in &os; since &release.prev;.  In general, changes
98      described here are unique to the &release.branch; branch unless
99      specifically marked as &merged; features.</para>
100
101    <para>Typical release note items document recent security
102      advisories issued after &release.prev;, new drivers or hardware
103      support, new commands or options, major bug fixes, or
104      contributed software upgrades.  They may also list changes to
105      major ports/packages or release engineering practices.  Clearly
106      the release notes cannot list every single change made to &os;
107      between releases; this document focuses primarily on security
108      advisories, user-visible changes, and major architectural
109      improvements.</para>
110  </sect1>
111
112  <sect1 xml:id="upgrade">
113    <title>Upgrading from Previous Releases of &os;</title>
114
115    <para arch="amd64,i386">Binary upgrades between RELEASE versions
116      (and snapshots of the various security branches) are supported
117      using the &man.freebsd-update.8; utility.  The binary upgrade
118      procedure will update unmodified userland utilities, as well as
119      unmodified GENERIC kernels distributed as a part of an official
120      &os; release.  The &man.freebsd-update.8; utility requires that
121      the host being upgraded have Internet connectivity.</para>
122
123    <para>Source-based upgrades (those based on recompiling the &os;
124      base system from source code) from previous versions are
125      supported, according to the instructions in
126      <filename>/usr/src/UPDATING</filename>.</para>
127
128    <important>
129      <para>Upgrading &os; should only be attempted after backing up
130	<emphasis>all</emphasis> data and configuration files.</para>
131    </important>
132  </sect1>
133
134  <sect1 xml:id="security-errata">
135    <title>Security and Errata</title>
136
137    <para>This section lists the various Security Advisories and
138      Errata Notices since &release.prev;.</para>
139
140    <sect2 xml:id="security">
141      <title>Security Advisories</title>
142
143      &security;
144    </sect2>
145
146    <sect2 xml:id="errata">
147      <title>Errata Notices</title>
148
149      &errata;
150    </sect2>
151  </sect1>
152
153  <sect1 xml:id="userland">
154    <title>Userland</title>
155
156    <para>This section covers changes and additions to userland
157      applications, contributed software, and system utilities.</para>
158
159    <sect2 xml:id="userland-config">
160      <title>Userland Configuration Changes</title>
161
162      <para revision="266463">The default &man.newsyslog.conf.5; now
163	includes files in the
164	<filename>/etc/newsyslog.conf.d/</filename> and
165	<filename>/usr/local/etc/newsyslog.conf.d/</filename>
166	directories by default for &man.newsyslog.8;.</para>
167
168      <para revision="270675">The &man.mailwrapper.8; utility has been
169	updated to use &man.mailer.conf.5; from the
170	<literal>LOCALBASE</literal> environment variable, which
171	defaults to <filename class="directory">/usr/local</filename>
172	if unset.</para>
173
174      <para revision="272350">The <literal>MK_ARM_EABI</literal>
175	&man.src.conf.5; option has been removed.</para>
176    </sect2>
177
178    <sect2 xml:id="userland-programs">
179      <title>Userland Application Changes</title>
180
181      <para revision="258838" contrib="sponsor" sponsor="&ff;,
182	&google;" sponsorurl="">The &man.casperd.8; daemon has been
183	added, which provides access to functionality that is not
184	available in the <quote>capability mode</quote>
185	sandbox.</para>
186
187      <para revision="260594">When unable to load a kernel module with
188	&man.kldload.8;, a message informing to view output of
189	&man.dmesg.8; is now printed, opposed to the previous output
190	<quote>Exec format error.</quote>.</para>
191
192      <para revision="260910">Allow &man.pciconf.8; to identify PCI
193	devices that are attached to a driver to be identified by
194	their device name instead of just the selector.  Additionally,
195	an optional device argument to the <literal>-l</literal> flag
196	to restrict the output to only listing details about a single
197	device.</para>
198
199      <para revision="260913">A new flag, <quote>onifconsole</quote>
200	has been added to <filename>/etc/ttys</filename>.  This allows
201	the system to provide a login prompt via serial console if the
202	device is an active kernel console, otherwise it is equivalent
203	to <literal>off</literal>.</para>
204
205      <para revision="260926">Support for displaying VPD for PCI
206	devices via &man.pciconf.8; has been added.</para>
207
208      <para revision="261498">&man.ping.8; protects against malicious
209	network packets using the Capsicum framework to drop
210	privileges.</para>
211
212      <para revision="265229">The &man.ps.1; utility has been
213	updated to include the <literal>-J</literal> flag, used to
214	filter output by matching &man.jail.8; IDs and names.
215	Additionally, argument <literal>0</literal> can be used to
216	<literal>-J</literal> to only list processes running on the
217	host system.</para>
218
219      <para revision="265249">The &man.top.1; utility has been updated
220	to filter by &man.jail.8; ID or name, in followup to the
221	&man.ps.1; change in <literal>r265229</literal>.</para>
222
223      <para revision="266209">The &man.pmcstat.8; utility has been
224	updated to include a new flag, <literal>-l</literal>, which
225	ends event collection after the specified number of
226	seconds.</para>
227
228      <para revision="270745">The &man.ps.1; utility has been updated
229	to include a new keyword, <quote>tracer</quote>, which
230	displays the <acronym>PID</acronym> of the tracing
231	process.</para>
232
233      <para revision="271482">Support for adding empty partitions has
234	been added to the &man.mkimg.1; utility.</para>
235
236      <para revision="272166">The &man.primes.6; utility has been
237	updated to correctly enumerate prime numbers between
238	<literal>4295098369</literal> and
239	<literal>3825123056546413050</literal>, which prior to this
240	change, it would be possible for returned values to be
241	incorrectly identified as prime numbers.</para>
242
243      <para revision="272198">The &man.mkimg.1; utility has been
244	updated to include three options used to print information
245	about &man.mkimg.1; itself:</para>
246
247      <informaltable frame="none" pgwide="0">
248	<tgroup cols="2">
249	  <colspec colwidth="1*"/>
250	  <colspec colwidth="1*"/>
251	  <thead>
252	    <row>
253	      <entry>Option</entry>
254	      <entry>Output</entry>
255	    </row>
256	  </thead>
257
258	  <tbody>
259	    <row>
260	      <entry><literal>--version</literal></entry>
261	      <entry>The current version of the &man.mkimg.1;
262		utility</entry>
263	    </row>
264
265	    <row>
266	      <entry><literal>--formats</literal></entry>
267	      <entry>The disk image file formats supported by
268		&man.mkimg.1;</entry>
269	    </row>
270
271	    <row>
272	      <entry><literal>--schemes</literal></entry>
273	      <entry>The partition schemes supported by
274		&man.mkimg.1;</entry>
275	    </row>
276	  </tbody>
277	</tgroup>
278      </informaltable>
279
280      <para revision="272488">Userland &man.ctf.5; support in
281	&man.dtrace.1; has been added.  With this change,
282	&man.dtrace.1; is able to resolve type info for function and
283	<acronym>USDT</acronym> probe arguments, and function return
284	values.</para>
285
286      <para revision="274960">The &man.elfdump.1; utility has been
287	updated to support capability mode provided by
288	&man.capsicum.4;.</para>
289
290      <para revision="275680" contrib="sponsor" sponsor="&ff;">The
291	&man.fstyp.8; utility has been added, which is used to
292	determine the filesystem on a specified device.</para>
293
294      <para revision="276881">The <literal>libedit</literal> library
295	has been updated to support <acronym>UTF</acronym>-8, which
296	additionally provides unicode support to &man.sh.1;.</para>
297
298      <para revision="277166" arch="powerpc">The &man.ptrace.2; system
299	call has been updated include support for Altivec registers on
300	&os;/&arch.powerpc;.</para>
301
302      <para revision="278320">A new device control utility,
303	&man.devctl.8; has been added, which allows making
304	administrative changes to individual devices, such as
305	attaching and detaching drivers, and enabling and disabling
306	devices.  The &man.devctl.8; utility uses the new
307	&man.devctl.3; library.</para>
308
309      <para revision="279315" contrib="sponsor" sponsor="&ff;">The
310	&man.uefisign.8; utility has been added.</para>
311
312      <para revision="279571" contrib="sponsor"
313	sponsor="&scaleengine;">The &man.freebsd-update.8; utility has
314	been updated to prevent fetching updated binary patches when
315	a previous upgrade has not been thoroughly completed.</para>
316
317      <para revision="279122" contrib="sponsor"
318	sponsor="&juniper;">The &man.netstat.1; utility has been
319	updated to link against the &man.libxo.3; shared
320	library.</para>
321
322      <para revision="280870">A regression in the &man.libarchive.3;
323	library that would prevent a directory from being included in
324	the archive when <literal>--one-file-system</literal> is used
325	has been fixed.</para>
326
327      <para revision="281311" contrib="sponsor" sponsor="&ff;">The
328	&man.ar.1; utility has been updated to set
329	<literal>ARCHIVE_EXTRACT_SECURE_SYMLINKS</literal> and
330	<literal>ARCHIVE_EXTRACT_SECURE_NODOTDOT</literal> to disallow
331	directory traversal when extracting an archive, similar to
332	&man.tar.1;.</para>
333
334      <para revision="282208" contrib="sponsor"
335	sponsor="&multiplay;">The &man.chflags.1;, &man.chgrp.1;,
336	&man.chmod.1;, and &man.chown.8; utilities now affect symbolic
337	links when the <literal>-R</literal> flag is specified, as
338	documented in &man.symlink.7;.</para>
339
340      <para revision="281617">A race condition in &man.wc.1; that
341	would cause final results to be sent to &man.stderr.4; when
342	receiving the <literal>SIGINFO</literal> signal has been
343	fixed.</para>
344
345      <para revision="284297" contrib="sponsor"
346	sponsor="&clusterhq;">The &man.lockstat.1; utility has been
347	updated with several improvements:</para>
348
349      <itemizedlist>
350	<listitem>
351	  <para>Spin locks are now reported as the amount of time
352	    spinning, instead of loop iterations.</para>
353	</listitem>
354
355	<listitem>
356	  <para>Reader locks are now recognized as adaptive that can
357	    spin on &os;.</para>
358	</listitem>
359
360	<listitem>
361	  <para>Lock aquisition events for successful reader try-lock
362	    events are now reported.</para>
363	</listitem>
364
365	<listitem>
366	  <para>Spin and block events are now reported before lock
367	    acquisition events.</para>
368	</listitem>
369      </itemizedlist>
370
371      <para revision="284589" contrib="sponsor"
372	sponsor="&scaleengine;">The &man.fstyp.8; utility has been
373	updated to be able to detect &man.zfs.8; and &man.geli.8;
374	filesystems.</para>
375    </sect2>
376
377    <sect2 xml:id="userland-contrib">
378      <title>Contributed Software</title>
379
380      <para revision="258884" contrib="sponsor"
381	sponsor="&darpa_afrl;">&man.lldb.1; has been updated to
382	upstream snapshot version r196259.</para>
383
384      <para revision="259626">Timezone data files have been updated to
385	version 2013i.</para>
386
387      <para revision="260445">&man.byacc.1; has been updated to
388	version 20140101.</para>
389
390      <para revision="261071">&man.jemalloc.3; has been updated to
391	version 3.5.0.</para>
392
393      <para revision="261283"><application>libc++</application> has
394	been updated to version 3.4.</para>
395
396      <para revision="261320"><application>OpenSSH</application> has
397	been updated to 6.5p1.</para>
398
399      <para revision="261344"><application>mdocml</application> has
400	been updated to version 1.12.3.</para>
401
402      <para revision="261991"><application>LLVM</application> and
403	<application>Clang</application> have been updated to
404	version 3.4.</para>
405
406      <para revision="285229"><application>sendmail</application>
407	has been updated to 8.15.2.  Starting with FreeBSD 11.0 and
408	sendmail 8.15, sendmail uses uncompressed IPv6 addresses by
409	default, i.e., they will not contain "::".  For example,
410	instead of ::1, it will be 0:0:0:0:0:0:0:1.  This permits a
411	zero subnet to have a more specific match, such as different
412	map entries for IPv6:0:0 vs IPv6:0.  This change requires that
413	configuration data (including maps, files, classes, custom
414	ruleset, etc.) must use the same format, so make certain such
415	configuration data is upgrading.  As a very simple check
416	search for patterns like 'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'.
417	To return to the old behavior, set the m4 option
418	confUSE_COMPRESSED_IPV6_ADDRESSES or the cf option
419	UseCompressedIPv6Addresses.</para>
420
421      <para revision="276577"><application>file</application> has been
422	updated to version 5.22.</para>
423
424      <para revision="275718">The <application>binutils</application>
425	suite of utilities has been updated to include upstream
426	patches that add new relocations for &arch.powerpc;
427	support.</para>
428
429      <para revision="276398" contrib="sponsor" sponsor="&ff;">The
430	<application>ELF Tool Chain</application> has been updated to
431	upstream revision r3136.</para>
432
433      <para revision="276551">The <application>texinfo</application>
434	utility and <literal>info</literal> pages were removed from
435	the base system.  The <filename
436	  role="package">print/texinfo</filename> port should be
437	installed on systems where <literal>info</literal> pages are
438	needed.</para>
439
440      <para revision="276796" contrib="sponsor" sponsor="&ff;">The ELF
441	object manipulation tools
442	<application>addr2line</application>,
443	<application>elfcopy (strip)</application>,
444	<application>nm</application>,
445	<application>readelf</application>,
446	<application>size</application>, and
447	<application>strings</application> were switched to the
448	versions from the ELF Tool Chain project.</para>
449
450      <para revision="276881">The <literal>libedit</literal> library
451	has been updated to include <acronym>UTF-8</acronym> support,
452	adding <acronym>UTF-8</acronym> support to the &man.sh.1;
453	shell.</para>
454
455      <para revision="278433">The &man.xz.1; utility has been updated
456	to support multi-threaded compression.</para>
457
458      <para revision="280932" contrib="sponsor" sponsor="&ff;">The
459	<application>elftoolchain</application> utilities have been
460	updated to version 3179.</para>
461
462      <para revision="281316">The &man.xz.1; utility has been updated
463	to version 5.2.1.</para>
464
465      <para revision="281373">The &man.nvi.1; utility has been updated
466	to version 2.1.3.</para>
467
468      <para revision="281806">The &man.wpa.supplicant.8; and
469	&man.hostapd.8; utilities have been updated to version
470	2.4.</para>
471
472      <para revision="282089">The &man.unbound.8; utility has been
473	updated to version 1.5.3.</para>
474
475      <para revision="282434" contrib="sponsor" sponsor="&ff;">The
476	&man.resolvconf.8; utility has been updated to version
477	3.7.0.</para>
478
479      <para revision="284254"><application>bmake</application> has
480	been updated to version 20150606.</para>
481
482      <para revision="284329"><application>OpenSSL</application> has
483	been updated to version 1.0.1o.</para>
484
485      <para revision="283092">The &man.acpi.4; subsystem has been
486	updated to version 20150515.</para>
487
488      <para revision="284237">The &man.file.1; utility has been
489	updated to version 5.23.</para>
490    </sect2>
491
492    <sect2 xml:id="userland-installer">
493      <title>Installation and Configuration Tools</title>
494
495      <para revision="271539">The &man.bsdinstall.8; partition editor
496	and &man.sade.8; utility have been updated to include native
497	<acronym>ZFS</acronym> support.</para>
498
499      <para revision="272274">The &os; installation utility,
500	&man.bsdinstall.8;, has been updated to set the
501	<literal>canmount</literal> &man.zfs.8; property to
502	<literal>off</literal> for the <filename
503	  class="directory">/var</filename> dataset, preventing the
504	contents of directories within <filename
505	  class="directory">/var</filename> from conflicting when
506	using multiple boot environments, such as that provided by
507	<filename role="package">sysutils/beadm</filename>.</para>
508
509      <para revision="274394">The &man.bsdconfig.8; utility has been
510	updated to skip the initial &man.tzsetup.8;
511	<acronym>UTC</acronym> versus wall-clock time prompt when run
512	in a virtual machine, determined when the
513	<literal>kern.vm_guest</literal> &man.sysctl.8; is set to
514	<literal>1</literal>.</para>
515
516      <para revision="275874">The &man.bsdinstall.8; utility has been
517	updated to use the new &man.dpv.3; library to display progress
518	when extracting the &os; distributions.</para>
519    </sect2>
520
521    <sect2 xml:id="userland-rc">
522      <title><filename class="directory">/etc/rc.d</filename>
523	Scripts</title>
524
525      <para revision="270676">The &man.rc.8; subsystem has been
526	updated to allow configuring services in <filename
527	  class="directory">&dollar;{LOCALBASE}/etc/rc.conf.d/</filename>.
528	If <literal>LOCALBASE</literal> is unset, it defaults to
529	<filename class="directory">/usr/local</filename>.</para>
530
531      <para revision="275299">The <filename>mrouted</filename>
532	&man.rc.8; script has been removed from the base system.  An
533	equivalent script is available from the <filename
534	  role="package">net/mrouted</filename> port.</para>
535
536      <para revision="279463" contrib="sponsor"
537	sponsor="&sandvine;">A new &man.rc.8; script,
538	<filename>iovctl</filename>, has been added, which allows
539	automatically starting the &man.iovctl.8; utility at
540	boot.</para>
541    </sect2>
542
543    <sect2 xml:id="userland-periodic">
544      <title><filename class="directory">/etc/periodic</filename>
545	Scripts</title>
546
547      <para revision="271321">The daily &man.periodic.8; script
548	<filename>110.clean-tmps</filename> has been updated to avoid
549	crossing filesystem mount boundaries when cleaning files in
550	<filename class="directory">/tmp</filename>.</para>
551    </sect2>
552
553    <sect2 xml:id="userland-libraries">
554      <title>Runtime Libraries and API</title>
555
556      <para revision="265995">The Blowfish &man.crypt.3; default
557	format has been changed to
558	<literal>&dollar;2b&dollar;</literal>.</para>
559
560      <para revision="268461">The &man.readline.3; library is now
561	statically linked in software within the base system, and the
562	shared library is no longer installed, allowing the Ports
563	Collection to use a modern version of the library.</para>
564
565      <para revision="272273">The &man.strptime.3; library has been
566	updated to add support for <acronym>POSIX</acronym>-2001
567	features <literal>%U</literal> and
568	<literal>%W</literal>.</para>
569
570      <para revision="272842,272848" contrib="sponsor"
571	sponsor="&ff;">The &man.dl.iterate.phdr.3; library has been
572	changed to always return the path name of the
573	<acronym>ELF</acronym> object in the
574	<literal>dlpi_name</literal> structure member.</para>
575
576      <para revision="273562" contrib="sponsor"
577	sponsor="&juniper;">The &man.libxo.3; library has been
578	imported to the base system.</para>
579
580      <para revision="273806" contrib="sponsor" sponsor="&chelsio;">A
581	userland library for Chelsio Terminator 5 based iWARP cards
582	has been added, allowing userland <acronym>RDMA</acronym>
583	applications to work over compatible
584	<acronym>NIC</acronym>s.</para>
585
586      <para revision="274987">The &man.gpio.3; library has been added,
587	providing a wrapper around the &man.gpio.4; kernel
588	interface.</para>
589
590      <para revision="277610">The <literal>futimens()</literal> and
591	<literal>utimensat()</literal> system calls have been
592	added.  See &man.utimensat.2; for more information.</para>
593
594      <para revision="278934">The &man.elf.3; compile-time dependency
595	has been removed from <filename>dtri.o</filename>, which
596	allows adding <application>DTrace</application> probes to
597	userland applications and libraries without also linking
598	against &man.elf.3;.</para>
599
600      <para revision="279186">The &man.setmode.3; function has been
601	updated to consistently set <literal>errno</literal> on
602	failure.</para>
603
604      <para revision="279663">The &man.qsort.3; functions have been
605	updated to be able to handle 32-bit aligned data on 64-bit
606	platforms, also providing a significant improvement in 32-bit
607	workloads.</para>
608
609      <para revision="281130">Several standard include headers have
610	been updated to use of <application>gcc</application>
611	attributes, such as <literal>__result_use_check()</literal>,
612	<literal>__alloc_size()</literal>, and
613	<literal>__nonnull()</literal>.</para>
614
615      <para revision="281845">Support for file verification in
616	<acronym>MAC</acronym> has been added.</para>
617
618      <para revision="282973" contrib="sponsor" sponsor="&ff;">The
619	<literal>libgomp</literal> library is now only built when
620	building <acronym>GCC</acronym> from the base system.  An
621	up-to-date version is available in the Ports Collection as
622	<filename
623	  role="package">devel/libiomp5-devel</filename>.</para>
624
625      <para revision="282988">The <filename>stdlib.h</filename> and
626	<filename>malloc.h</filename> headers have been updated to
627	make use of the <application>gcc</application>
628	<literal>alloc_align()</literal> attribute.</para>
629
630      <para revision="284483" contrib="sponsor"
631	sponsor="&scaleengine;">The Blowfish &man.crypt.3; library
632	has been updated to support &dollar;2y&dollar; hashes.</para>
633    </sect2>
634
635    <sect2 xml:id="userland-abi">
636      <title>ABI Compatibility</title>
637
638      <para revision="271982">The &linux; compatibility version has
639	been updated to <literal>2.6.18</literal>.  The
640	<literal>compat.linux.osrelease</literal> &man.sysctl.8; is
641	evaluated when building the <filename
642	  role="package">emulators/linux-c6</filename> and related
643	ports.</para>
644    </sect2>
645  </sect1>
646
647  <sect1 xml:id="kernel">
648    <title>Kernel</title>
649
650    <para>This section covers changes to kernel configurations, system
651      tuning, and system control parameters that are not otherwise
652      categorized.</para>
653
654    <sect2 xml:id="kernel-bugfix">
655      <title>Kernel Bug Fixes</title>
656
657      <para revision="265876">A kernel bug that inhibited proper
658	functionality of the <literal>dev.cpu.0.freq</literal>
659	&man.sysctl.8; on &intel; processors with Turbo
660	Boost&nbsp;&trade; enabled has been fixed.</para>
661
662      <para revision="271697" arch="powerpc">Support for
663	&man.dtrace.1; stack tracing has been fixed for
664	&os;/&arch.powerpc;, using the <literal>trapexit()</literal>
665	and <literal>asttrapexit()</literal> functions instead of
666	checking within addressed kernel space.</para>
667
668      <para revision="272089">A bug in &man.ipfw.4; that could
669	potentially lead to a kernel panic when using &man.dummynet.4;
670	at layer 2 has been fixed.</para>
671
672      <para revision="280930" contrib="sponsor" sponsor="&mitail;">The
673	kernel <acronym>RPC</acronym> has been updated to include
674	several enhancements:</para>
675
676      <itemizedlist>
677	<listitem>
678	  <para>The 45 MiB limit on requests queued for
679	    &man.nfsd.8; threads has been removed.</para>
680	</listitem>
681
682	<listitem>
683	  <para>Avoids unnecessary throttling by not deferring
684	    accounting for completed requests.</para>
685	</listitem>
686
687	<listitem>
688	  <para>Fixes an integer overflow and signedness bugs.</para>
689	</listitem>
690      </itemizedlist>
691
692      <para revision="281261" arch="powerpc">Support for
693	&man.dtrace.1; has been added for the
694	Book-E&nbsp;&trade;.</para>
695    </sect2>
696
697    <sect2 xml:id="kernel-config">
698      <title>Kernel Configuration</title>
699
700      <para revision="266531">The <literal>IMAGACT_BINMISC</literal>
701	kernel configuration option has been enabled by default,
702	which enables application execution through emulators, such
703	as <application>Qemu</application>.</para>
704
705      <para revision="268045">The <literal>VT</literal> kernel
706	configuration file has been removed, and the &man.vt.4;
707	driver is included in the <literal>GENERIC</literal> kernel.
708	To enable &man.vt.4;, enter <literal>set kern.vty=vt</literal>
709	at the &man.loader.8; prompt during boot, or add
710	<literal>kern.vty=vt</literal> to &man.loader.conf.5; and
711	reboot the system.</para>
712
713      <para revision="277904">The &man.config.8; utility has been
714	updated to allow using a non-standard <filename
715	  class="directory">src/</filename> tree, specified as an
716	argument to the <literal>-s</literal> flag.</para>
717
718      <para revision="277990" arch="powerpc64">The
719	&os;/&arch.powerpc64; kernel now builds as
720	a position-independent executable, allowing the kernel to be
721	loaded into and run from any physical or virtual
722	address.</para>
723
724      <important>
725	<para>This change requires an update to &man.loader.8;.
726	  The userland and kernel must be updated before rebooting the
727	  system.</para>
728      </important>
729
730      <para revision="279189" contrib="sponsor" sponsor="&ff;"
731	arch="powerpc">Kernel support for Vector-Scalar eXtension
732	(<acronym>VSX</acronym>) found on POWER7 and POWER8 hardware
733	has been added.</para>
734
735      <para revision="279252" contrib="sponsor" sponsor="&ff;"
736	arch="powerpc">The &man.pmap.9; implementation for 64-bit
737	&powerpc; processors has been overhaulded to improve
738	concurrency.</para>
739
740      <para revision="283959" contrib="sponsor"
741	sponsor="&limelight;">A new kernel configuration option,
742	<literal>EM_MULTIQUEUE</literal>, has been added which enables
743	multi-queue support in the &man.em.4; driver.</para>
744
745      <note>
746	<para>Multi-queue support in the &man.em.4; driver is not
747	  officially supported by &intel;.</para>
748      </note>
749    </sect2>
750
751    <sect2 xml:id="kernel-sysctl">
752      <title>System Tuning and Controls</title>
753
754      <para revision="275140" contrib="sponsor" sponsor="&ff;">The
755	&man.hwpmc.4; default and maximum callchain depths have been
756	increased.  The default has been increased from 16 to 32, and
757	the maximum increased from 32 to 128.</para>
758
759      <para revision="279361">The <literal>kern.osrelease</literal>
760	and <literal>kern.osreldate</literal> are now configurable
761	&man.jail.8; parameters.</para>
762
763      <para revision="280308,280949" contrib="sponsor"
764	sponsor="&ix;, &ff;">The &man.devfs.5; device filesystem has
765	been changed to update timestamps for read/write operations
766	using seconds precision.  A new &man.sysctl.8;,
767	<literal>vfs.devfs.dotimes</literal> has been added, which
768	when set to a non-zero value, enables default precision
769	timestamps for these operations.</para>
770
771      <para revision="282213" contrib="sponsor" sponsor="&ff;">A new
772	&man.sysctl.8;, <literal>kern.racct.enable</literal>, has been
773	added, which when set to a non-zero value allows using
774	&man.rctl.8; with the <literal>GENERIC</literal> kernel.
775	A new kernel configuration option,
776	<literal>RACCT_DISABLED</literal> has also been added.</para>
777
778      <para revision="282901" contrib="sponsor" sponsor="&ff;">The
779	<literal>GENERIC</literal> kernel configuration now includes
780	<literal>RACCT</literal> and <literal>RCTL</literal> by
781	default.</para>
782
783      <note>
784	<para>To enable <literal>RACCT</literal> and
785	  <literal>RCTL</literal> on a system using the
786	  <literal>GENERIC</literal> kernel configuration, add
787	  <literal>kern.racct.enable=1</literal> to
788	  &man.loader.conf.5;, and reboot the system.</para>
789      </note>
790
791      <para revision="283136" contrib="sponsor"
792	sponsor="&limelight;">A new &man.sysctl.8;,
793	<literal>net.inet.tcp.hostcache.purgenow</literal>, has
794	been added, which when set to <literal>1</literal> during
795	runtime will flush all
796	<literal>net.inet.tcp.hostcache</literal> entries.</para>
797    </sect2>
798  </sect1>
799
800  <sect1 xml:id="drivers">
801    <title>Devices and Drivers</title>
802
803    <para>This section covers changes and additions to devices and
804      device drivers since &release.prev;.</para>
805
806    <sect2 xml:id="drivers-device">
807      <title>Device Drivers</title>
808
809      <para revision="260903">Support for GPS ports has been added to
810	&man.uhso.4;.</para>
811
812      <para revision="265132">The &man.full.4; device has been added,
813	and the <literal>lindev(4)</literal> device has been removed.
814	Prior to this change, <literal>lindev(4)</literal> provided
815	only the <filename>/dev/full</filename> character device,
816	returning <literal>ENOSPC</literal> on write attempts.  As
817	this device is not specific to &linux;, a native &os; version
818	has been added.</para>
819
820      <para revision="271705">Hardware context support has been
821	added to the <literal>drm/i915</literal> driver, adding
822	support for <application>Mesa</application> 9.2 and
823	later.</para>
824
825      <para revision="273178">The &man.vt.4; driver has been updated,
826	replacing the bitmapped <literal>kern.vt.spclkeys</literal>
827	&man.sysctl.8; with individual
828	<literal>kern.vt.kbd_*</literal> variants.</para>
829
830      <para revision="273598">The &man.hpet.4; driver has been updated
831	to create a
832	<filename>/dev/hpet<replaceable>N</replaceable></filename>
833	device, providing access to <acronym>HPET</acronym> from
834	userspace.</para>
835
836      <para revision="280183">The <literal>drm</literal> code has
837	been updated to match &linux; version 3.8.13.</para>
838
839      <para revision="282783" arch="powerpc">Support for the Freescale
840	<acronym>PCI</acronym> Root Complex device has been
841	added.</para>
842    </sect2>
843
844    <sect2 xml:id="drivers-storage">
845      <title>Storage Drivers</title>
846
847      <para revision="265236" contrib="sponsor"
848	sponsor="&lsi;, &spectralogic;" sponsorurl="">The &man.mpr.4;
849	device has been added, providing support for LSI Fusion-MPT
850	3 12Gb SCSI/SATA controllers.</para>
851
852      <para revision="265555" contrib="sponsor"
853	  sponsor="&lsi;">The &man.mrsas.4; driver has been added,
854	providing support for LSI MegaRAID SAS controllers.  The
855	&man.mfi.4; driver will attach to the controller, by default.
856	To enable &man.mrsas.4; add
857	<literal>hw.mfi.mrsas_enable=1</literal> to
858	<filename>/boot/loader.conf</filename>, which turns off
859	&man.mfi.4; device probing.</para>
860
861      <note>
862	<para>At this time, the &man.mfiutil.8; utility and the &os;
863	  version of <application>MegaCLI</application> and
864	  <application>StorCli</application> do not work with
865	  &man.mrsas.4;.</para>
866      </note>
867
868      <para revision="275461" contrib="sponsor" sponsor="&ix;">The
869	&man.ctl.4; subsystem has been updated, increasing the ports
870	limit from <literal>128</literal> to <literal>256</literal>,
871	and <acronym>LUN</acronym> limit from <literal>256</literal>
872	to <literal>1024</literal>.</para>
873
874      <para revision="276526">The <literal>asr(4)</literal> driver has
875	been removed, and is no longer supported.</para>
876
877      <para revision="281387">The &man.hptnr.4; driver has been
878	updated to version 1.1.1.</para>
879    </sect2>
880
881    <sect2 xml:id="drivers-network">
882      <title>Network Drivers</title>
883
884      <para revision="258830">Support for Broadcom chipsets BCM57764,
885	BCM57767, BCM57782, BCM57786 and BCM57787 has been added to
886	&man.bge.4;.</para>
887
888      <para revision="260448">Support for the &intel; Centrino&trade;
889	Wireless-N 135 chipset has been added.</para>
890
891      <para revision="260552">Firmware for &intel; Centrino&trade;
892	Wireless-N 105 devices has been added to the base
893	system.</para>
894
895      <para revision="261975">The deprecated nve(4) driver has been
896	removed.  Users of NVIDIA nForce MCP network adapters are
897	advised to use the &man.nfe.4; driver instead, which has been
898	the default driver for this hardware since
899	&os;&nbsp;7.0.</para>
900
901      <para revision="264601" contrib="sponsor"
902	sponsor="&darpa_afrl;">The <literal>if_nf10bmac(4)</literal>
903	device has been added, providing support for NetFPGA-10G
904	Embedded CPU Ethernet Core.</para>
905
906      <note>
907	<para>The <literal>if_nf10bmac(4)</literal> driver operates on
908	  the FPGA, and is not suited for the PCI host
909	  interface.</para>
910      </note>
911
912      <para revision="265348" contrib="sponsor"
913	sponsor="&netgate;">The &man.ath.hal.4; driver has been
914	updated to support the Atheros AR1111 chipset.</para>
915
916      <para revision="266770">Support for the &intel; Centrino&trade;
917	Wireless-N 105 chipset has been added.</para>
918
919      <para revision="266757" contrib="sponsor"
920	sponsor="&chelsio;">Support for the &man.cxgbe.4; Terminator
921	5 (T5) 10G/40G cards has been added to &man.netmap.4;.</para>
922
923      <para revision="272730">The &man.alc.4; driver has been updated
924	to support AR816x and AR817x ethernet controllers.</para>
925
926      <para revision="273331">The &man.vxlan.4; driver has been added,
927	which creates a virtual Layer 2 (Ethernet) network overlaid in
928	a Layer 3 (IP/UDP) network.  The &man.vxlan.4; driver is
929	analogous to &man.vlan.4;, but is designed to be better suited
930	for large, multiple-tenant datacenter environments.</para>
931
932      <para revision="274246" contrib="sponsor" sponsor="&yandex;">The
933	&man.gre.4; driver has been significantly overhauled, and has
934	been split into two separate modules, &man.gre.4; and
935	&man.me.4;.</para>
936
937      <para revision="283766" contrib="sponsor"
938	sponsor="&limelight;">The &man.em.4; driver has been updated
939	with improved transmission queue hang detection.</para>
940    </sect2>
941  </sect1>
942
943  <sect1 xml:id="hardware">
944    <title>Hardware Support</title>
945
946    <para>This section covers general hardware support for physical
947      machines, hypervisors, and virtualization environments, as well
948      as hardware changes and updates that do not otherwise fit in
949      other sections of this document.</para>
950
951    <sect2 xml:id="hardware-support">
952      <title>Hardware Support</title>
953
954      <para revision="268303">The &man.asmc.4; driver has been
955	updated to support the &apple;&nbsp;MacMini 3,1.</para>
956
957      <para revision="268351">Support for &os;/ia64 has been dropped
958	as of &os;&nbsp;11.</para>
959
960      <para revision="274386">An issue that could cause a system to
961	hang when entering <acronym>ACPI</acronym>
962	<literal>S3</literal> state (suspend to
963	<acronym>RAM</acronym>) has been corrected in the &man.acpi.4;
964	and &man.pci.4; drivers.</para>
965
966      <para revision="274733" arch="powerpc">The power management unit
967	subsystem has been updated to support power button events on
968	certain &arch.powerpc; hardware, such as aluminum
969	PowerBook&nbsp;&reg;.</para>
970
971      <para revision="275171,275190" arch="powerpc">The &man.hwpmc.4;
972	driver has been updated to correct performance counter
973	sampling on G4 (MPC74xxx) and G5 class processors.</para>
974
975      <para revision="281713" arch="powerpc">The &man.hwpmc.4;
976	driver has been updated to support the Freescale e500
977	core.</para>
978
979      <para revision="275732" contrib="sponsor"
980	sponsor="&ff;,&netgate;">The
981	<application>OpenCrypto</application> framework has been
982	updated to include <literal>AES-ICM</literal> and
983	<literal>AES-GCM</literal> modes, both of which have also been
984	added to the &man.aesni.4; driver.</para>
985
986      <para revision="283766">The &man.ig4.4; driver has been added,
987	providing support for the fourth generation &intel;
988	<acronym>I2C</acronym> SMBus.</para>
989
990      <para>The &man.uart.4; driver has been updated to support
991	<acronym>AMT</acronym> devices on newer systems.</para>
992    </sect2>
993
994    <sect2 xml:id="hardware-virtualization">
995      <title>Virtualization Support</title>
996
997      <para revision="260410">Support for the <quote>Virtual Interrupt
998	  Delivery</quote> feature of &intel;&nbsp;VT-x is enabled if
999	supported by the CPU.  This feature can be disabled by running
1000	<literal>sysctl hw.vmm.vmx.use_apic_vid=0</literal>.
1001	Additionally, to persist this setting across reboots, add
1002	<literal>hw.vmm.vmx.use_apic_vid=0</literal> to
1003	<filename>/etc/sysctl.conf</filename>.</para>
1004
1005      <para revision="260532">Support for <quote>Posted Interrupt
1006	  Processing</quote> is enabled if supported by the CPU.  This
1007	feature can be disabled by running <literal>sysctl
1008	  hw.vmm.vmx.use_apic_pir=0</literal>.  Additionally, to
1009	persist this setting across reboots, add
1010	<literal>hw.vmm.vmx.use_apic_pir=0</literal> to
1011	<filename>/etc/sysctl.conf</filename>.</para>
1012
1013      <para revision="260582">Unmapped IO support has been added to
1014	&man.virtio_blk.4;.</para>
1015
1016      <para revision="260583">Unmapped IO support has been added to
1017	&man.virtio_scsi.4;.</para>
1018
1019      <para revision="260847">The &man.virtio_random.4; driver has
1020	been added to harvest entropy from the host system.</para>
1021
1022      <para revision="261504">&os;/&arch.i386; guests can be run under
1023	bhyve.</para>
1024
1025      <para revision="267536" contrib="sponsor"
1026	sponsor="&citrix.rd;">Support for running a &os;/&arch.amd64;
1027	<application>Xen</application> guest instance as
1028	<acronym>PVH</acronym> guest has been added.
1029	<acronym>PVH</acronym> mode, short for <quote>Para-Virtualized
1030	  Hardware</quote>, uses para-virtualized drivers for boot and
1031	I/O, and uses hardware virtualization extensions for all other
1032	tasks, without the need for emulation.</para>
1033
1034      <para revision="273515">The &man.virtio.console.4; driver has
1035	been added, which provides an interface to VirtIO console
1036	devices through a &man.tty.4; device.</para>
1037
1038      <para revision="279957">The &man.bhyve.8; hypervisor has been
1039	updated to support <literal>DSM TRIM</literal> commands for
1040	virtual <acronym>AHCI</acronym> disks.</para>
1041
1042      <para revision="281439" arch="arm">Support for the
1043	<application>QEMU</application> <literal>virt</literal> system
1044	has been added.</para>
1045
1046      <para revision="282212" contrib="sponsor" sponsor="&msostc;">The
1047	Hyper-V&trade; drivers have been updated with several
1048	enhancements:</para>
1049
1050      <itemizedlist>
1051	<listitem>
1052	  <para>The &man.hv.vmbus.4; driver now has multi-channel
1053	    support.</para>
1054	</listitem>
1055
1056	<listitem>
1057	  <para>The &man.hv.storvsc.4; driver now has scatter/gather
1058	    support, in addition to performance improvements.</para>
1059	</listitem>
1060
1061	<listitem>
1062	  <para>The &man.hv.kvp.4; driver has received several bug
1063	    fixes.</para>
1064	</listitem>
1065      </itemizedlist>
1066
1067      <para revision="282274">Support for &man.xen.4; para-virtualized
1068	<literal>domU</literal> kernels has been removed.</para>
1069
1070      <para revision="284746" contrib="sponsor" sponsor="&msostc;">The
1071	&man.hv.netvsc.4; driver has been updated to support checksum
1072	offloading and <acronym>TSO</acronym>.</para>
1073    </sect2>
1074
1075    <sect2 xml:id="hardware-arm">
1076      <title>ARM Support</title>
1077
1078      <para revision="260921">The &man.nand.4; device is enabled for
1079	ARM devices by default.</para>
1080
1081      <para revision="273264" arch="armv6">An issue that could cause
1082	instability when detecting <acronym>SD</acronym> cards on the
1083	Raspberry Pi <acronym>SOC</acronym> has been fixed.</para>
1084
1085      <para revision="275963">The <literal>bcm2835_cpufreq</literal>
1086	driver has been added, which supports <acronym>CPU</acronym>
1087	frequency and voltage control on the Raspberry Pi
1088	<acronym>SOC</acronym>.</para>
1089
1090      <para revision="280259" contrib="sponsor" sponsor="&ff;">Initial
1091	support for the ARM AArch64 architecture has been
1092	added.</para>
1093
1094      <para revision="282779" arch="arm">Kernel support for Thumb-2
1095	userland has been added.</para>
1096
1097      <para revision="282827">Support for the hardware power button
1098	on the BeagleBone Black system has been added.</para>
1099
1100      <para revision="284273" contrib="sponsor"
1101	sponsor="&ff;">Initial
1102	<acronym>ACPI</acronym> support has been added for
1103	&os;/&arch.arm64;.</para>
1104    </sect2>
1105  </sect1>
1106
1107  <sect1 xml:id="storage">
1108    <title>Storage</title>
1109
1110    <para>This section covers changes and additions to file systems
1111      and other storage subsystems, both local and networked.</para>
1112
1113    <sect2 xml:id="storage-general">
1114      <title>General Storage</title>
1115
1116      <para revision="278037" contrib="sponsor" sponsor="&ix;">The
1117	&man.ctl.4; <acronym>LUN</acronym> mapping has been rewritten,
1118	replacing <acronym>iSCSI</acronym>-specific mapping mechanisms
1119	with a new mechanism that works for any port.</para>
1120
1121      <para revision="278354" contrib="sponsor" sponsor="&ix;">The
1122	&man.ctld.8; utility has been updated to allow controlling
1123	non-<acronym>iSCSI</acronym> &man.ctl.4; ports.</para>
1124
1125      <para revision="275681" contrib="sponsor" sponsor="&ff;">The
1126	&man.autofs.5; subsystem has been updated to include a new
1127	&man.auto.master.5; map, <literal>-media</literal>, which
1128	allows automatically mounting removable media, such as
1129	<acronym>CD</acronym> drives or <acronym>USB</acronym> flash
1130	drives.</para>
1131
1132      <para revision="279955" contrib="sponsor" sponsor="&ff;">The
1133	&man.autofs.5; subsystem has been updated to include a new
1134	&man.auto.master.5; map, <literal>-noauto</literal>, which
1135	handles &man.fstab.5; entries set to
1136	<literal>noauto</literal>.</para>
1137    </sect2>
1138
1139    <sect2 xml:id="storage-net">
1140      <title>Networked Storage</title>
1141
1142      <para revision="270096" contrib="sponsor" sponsor="&ff;">The new
1143	filesystem automount facility, &man.autofs.5;, has been added.
1144	The new &man.autofs.5; facility is similar to that found in
1145	other &unix;-like operating systems, such as OS&nbsp;X&trade;
1146	and Solaris&trade;.  The &man.autofs.5; facility uses
1147	a &sun;-compatible &man.auto.master.5; configuration file, and
1148	is administered with the &man.automount.8; userland utility,
1149	and the &man.automountd.8; and &man.autounmountd.8;
1150	daemons.</para>
1151    </sect2>
1152
1153    <sect2 xml:id="storage-zfs">
1154      <title>ZFS</title>
1155
1156      <para revision="275748">The <literal>arc_meta_limit</literal>
1157	statistics are now visible through the
1158	<literal>kstat</literal> &man.sysctl.8;.  As a result of this
1159	change, the <literal>vfs.zfs.arc_meta_used</literal>
1160	&man.sysctl.8; has been removed, and replaced with the
1161	<literal>kstat.zfs.misc.arcstats.arc_meta_used</literal>
1162	&man.sysctl.8;.</para>
1163    </sect2>
1164
1165    <sect2 xml:id="storage-geom">
1166      <title>&man.geom.4;</title>
1167
1168      <para revision="267359">Support for the
1169	<literal>disklabel64</literal> partitioning scheme has been
1170	added to &man.gpart.8;.</para>
1171    </sect2>
1172  </sect1>
1173
1174  <sect1 xml:id="boot">
1175    <title>Boot Loader Changes</title>
1176
1177    <para>This section covers the boot loader, boot menu, and other
1178      boot-related changes.</para>
1179
1180    <sect2 xml:id="boot-loader">
1181      <title>Boot Loader Changes</title>
1182
1183      <para revision="274085">The &man.vt.4; driver has been made the
1184	default system console driver.  The &man.syscons.4; driver is
1185	still available, and can be enabled by adding
1186	<literal>kern.vty=sc</literal> in &man.loader.conf.5;.
1187	Alternatively, &man.syscons.4; can be enabled at boot time by
1188	entering <literal>set kern.vty=sc</literal> at the
1189	&man.loader.8; prompt.</para>
1190
1191      <para revision="281616">The boot loader has been updated to
1192	support entering the <acronym>GELI</acronym> passphrase before
1193	loading the kernel.  To enable this behavior, add
1194	<literal>geom_eli_passphrase_prompt="YES"</literal> to
1195	&man.loader.conf.5;.</para>
1196
1197      <para revision="258431" contrib="sponsor" sponsor="&ff;">The
1198	memory test run at boot time on &os;/&arch.amd64; platforms
1199	has been disabled by default.</para>
1200    </sect2>
1201
1202    <sect2 xml:id="boot-menu">
1203      <title>Boot Menu Changes</title>
1204
1205      <para>&nbsp;</para>
1206    </sect2>
1207  </sect1>
1208
1209  <sect1 xml:id="network">
1210    <title>Networking</title>
1211
1212    <para>This section describes changes that affect networking in
1213      &os;.</para>
1214
1215    <sect2 xml:id="network-protocols">
1216      <title>Network Procols</title>
1217
1218      <para revision="263140">Support for the IPX network transport
1219	protocol has been removed, and will not be supported in
1220	&os;&nbsp;11 and later releases.</para>
1221
1222      <para revision="272720" contrib="sponsor"
1223	sponsor="&limelight;">Support for <acronym>PLPMTUD</acronym>
1224	blackhole detection (<acronym>RFC</acronym> 4821) has been
1225	added to the &man.tcp.4; stack, disabled by default.  New
1226	control tunables have been added:</para>
1227
1228      <informaltable frame="none" pgwide="0">
1229	<tgroup cols="2">
1230	  <colspec colwidth="1*"/>
1231	  <colspec colwidth="1*"/>
1232	  <thead>
1233	    <row>
1234	      <entry>Tunable</entry>
1235	      <entry>Description</entry>
1236	    </row>
1237	  </thead>
1238
1239	  <tbody>
1240	    <row>
1241	      <entry><literal>net.inet.tcp.pmtud_blackhole_detection</literal></entry>
1242	      <entry>Enables or disables <acronym>PLPMTUD</acronym>
1243		blackhole detection</entry>
1244	    </row>
1245
1246	    <row>
1247	      <entry><literal>net.inet.tcp.pmtud_blackhole_mss</literal></entry>
1248	      <entry><acronym>MSS</acronym> to try for IPv4</entry>
1249	    </row>
1250
1251	    <row>
1252	      <entry><literal>net.inet.tcp.v6pmtud_blackhole_mss</literal></entry>
1253	      <entry><acronym>MSS to try for IPv6</acronym></entry>
1254	    </row>
1255	  </tbody>
1256	</tgroup>
1257      </informaltable>
1258
1259      <para>New monitoring &man.sysctl.8;s haven been added:</para>
1260
1261      <informaltable frame="none" pgwide="0">
1262	<tgroup cols="2">
1263	  <colspec colwidth="1*"/>
1264	  <colspec colwidth="1*"/>
1265	  <thead>
1266	    <row>
1267	      <entry>Tunable</entry>
1268	      <entry>Description</entry>
1269	    </row>
1270	  </thead>
1271
1272	  <tbody>
1273	    <row>
1274	      <entry><literal>net.inet.tcp.pmtud_blackhole_activated</literal></entry>
1275	      <entry>Number of times the code was activated to attempt
1276		downshifting the <acronym>MSS</acronym></entry>
1277	    </row>
1278
1279	    <row>
1280	      <entry><literal>net.inet.tcp.pmtud_blackhole_min_activated</literal></entry>
1281	      <entry>Number of times the blackhole
1282		<acronym>MSS</acronym> was used in an attempt to
1283		downshift</entry>
1284	    </row>
1285
1286	    <row>
1287	      <entry><literal>net.inet.tcp.pmtud_blackhole_failed</literal></entry>
1288	      <entry>Number of times that the blackhole failed to
1289		connect after downshifting the
1290		<acronym>MSS</acronym></entry>
1291	    </row>
1292	  </tbody>
1293	</tgroup>
1294      </informaltable>
1295
1296      <para revision="280971" contrib="sponsor"
1297	sponsor="&netflix;, &nginx;">Support for <acronym>IP</acronym>
1298	identification for atomic datagrams (<acronym>RFC</acronym>
1299	6864) has been added.  Support for this feature can be toggled
1300	with the <literal>net.inet.ip.rfc6864</literal>
1301	&man.sysctl.8;, which is enabled by default.</para>
1302    </sect2>
1303  </sect1>
1304
1305  <sect1 xml:id="ports">
1306    <title>Ports Collection and Package Infrastructure</title>
1307
1308    <para>This section covers changes to the &os;&nbsp;Ports
1309      Collection, package infrastructure, and package maintenance and
1310      installation tools.</para>
1311
1312    <sect2 xml:id="ports-infrastructure">
1313      <title>Infrastructure Changes</title>
1314
1315      <para>&nbsp;</para>
1316    </sect2>
1317
1318    <sect2 xml:id="ports-packages ">
1319      <title>Packaging Changes</title>
1320
1321      <para>&nbsp;</para>
1322    </sect2>
1323  </sect1>
1324
1325  <sect1 xml:id="doc">
1326    <title>Documentation</title>
1327
1328    <para>This section covers changes to the &os;&nbsp;Documentation
1329      Project sources and toolchain.</para>
1330
1331    <sect2 xml:id="doc-sources">
1332      <title>Documentation Source Changes</title>
1333
1334      <para>&nbsp;</para>
1335    </sect2>
1336
1337    <sect2 xml:id="doc-toolchain">
1338      <title>Documentation Toolchain Changes</title>
1339
1340      <para>&nbsp;</para>
1341    </sect2>
1342  </sect1>
1343
1344  <sect1 xml:id="releng">
1345    <title>Release Engineering and Integration</title>
1346
1347    <para>This section convers changes that are specific to the
1348      &os;&nbsp;Release Engineering processes.</para>
1349
1350    <sect2 xml:id="releng-changes">
1351      <title>Integration Changes</title>
1352
1353      <para revision="277458" contrib="sponsor" sponsor="&ff;">The
1354	Release Engineering build tools have been updated to include
1355	support for producing virtual machine disk images for various
1356	cloud hosting providers.</para>
1357
1358      <para revision="278926">The Release Engineering build tools have
1359	been updated to use multi-threaded &man.xz.1;.  By default,
1360	the number of &man.xz.1; threads is set to the number of cores
1361	available.</para>
1362
1363      <para revision="281802" contrib="sponsor" sponsor="&ff;">The
1364	Release Engineering build tools have been updated to include
1365	support for building &os;/&arch.arm64; virtual machine and
1366	memory stick installation images.</para>
1367    </sect2>
1368  </sect1>
1369</article>
1370