article.xml revision 285461
1<?xml version="1.0" encoding="iso-8859-1"?>
2<!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
3	"../../../share/xml/freebsd50.dtd" [
4<!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "release.ent">
5 %release;
6<!ENTITY % sponsor PUBLIC "-//FreeBSD//ENTITIES Sponsor Specification//EN" "sponsor.ent">
7 %sponsor;
8<!ENTITY % vendor PUBLIC "-//FreeBSD//ENTITIES Vendor Specification//EN" "vendor.ent">
9 %vendor;
10<!ENTITY security SYSTEM "../../share/xml/security.xml">
11<!ENTITY errata SYSTEM "../../share/xml/errata.xml">
12]>
13<article xmlns="http://docbook.org/ns/docbook"
14  xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">
15
16  <info>
17    <title>&os; &release.current; Release Notes</title>
18
19    <author>
20      <orgname>The &os; Project</orgname>
21    </author>
22
23    <pubdate>$FreeBSD: head/release/doc/en_US.ISO8859-1/relnotes/article.xml 285461 2015-07-13 15:44:37Z gjb $</pubdate>
24
25    <!-- Last rev: 284814 -->
26
27    <copyright>
28      <year>2015</year>
29      <holder role="mailto:doc@FreeBSD.org">The &os; Documentation
30	Project</holder>
31    </copyright>
32
33    <legalnotice xml:id="trademarks" role="trademarks">
34      &tm-attrib.freebsd;
35      &tm-attrib.ibm;
36      &tm-attrib.ieee;
37      &tm-attrib.intel;
38      &tm-attrib.sparc;
39      &tm-attrib.general;
40    </legalnotice>
41
42    <abstract>
43      <para>The release notes for &os; &release.current; contain
44	a summary of the changes made to the &os; base system on the
45	&release.branch; development line.  This document lists
46	applicable security advisories that were issued since the last
47	release, as well as significant changes to the &os; kernel and
48	userland.  Some brief remarks on upgrading are also
49	presented.</para>
50    </abstract>
51  </info>
52
53  <sect1 xml:id="intro">
54    <title>Introduction</title>
55
56    <para>This document contains the release notes for &os;
57      &release.current;.  It describes recently added, changed, or
58      deleted features of &os;.  It also provides some notes on
59      upgrading from previous versions of &os;.</para>
60
61    <para releasetype="current">The &release.type; distribution to
62      which these release notes apply represents the latest point
63      along the &release.branch; development branch since
64      &release.branch; was created.  Information regarding pre-built,
65      binary &release.type; distributions along this branch can be
66      found at <uri
67	xlink:href="&release.url;">&release.url;</uri>.</para>
68
69    <para releasetype="snapshot">The &release.type; distribution to
70      which these release notes apply represents a point along the
71      &release.branch; development branch between &release.prev; and
72      the future &release.next;.  Information regarding pre-built,
73      binary &release.type; distributions along this branch can be
74      found at <uri
75	xlink:href="&release.url;">&release.url;</uri>.</para>
76
77    <para releasetype="release">This distribution of &os;
78      &release.current; is a &release.type; distribution.  It can be
79      found at <uri xlink:href="&release.url;">&release.url;</uri> or
80      any of its mirrors.  More information on obtaining this (or
81      other) &release.type; distributions of &os; can be found in the
82      <link
83	xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
84	  &os;</quote> appendix</link> to the <link
85	xlink:href="&url.books.handbook;/">&os;
86	Handbook</link>.</para>
87
88    <para>All users are encouraged to consult the release errata
89      before installing &os;.  The errata document is updated with
90      <quote>late-breaking</quote> information discovered late in the
91      release cycle or after the release.  Typically, it contains
92      information on known bugs, security advisories, and corrections
93      to documentation.  An up-to-date copy of the errata for &os;
94      &release.current; can be found on the &os; Web site.</para>
95
96    <para>This document describes the most user-visible new or changed
97      features in &os; since &release.prev;.  In general, changes
98      described here are unique to the &release.branch; branch unless
99      specifically marked as &merged; features.</para>
100
101    <para>Typical release note items document recent security
102      advisories issued after &release.prev;, new drivers or hardware
103      support, new commands or options, major bug fixes, or
104      contributed software upgrades.  They may also list changes to
105      major ports/packages or release engineering practices.  Clearly
106      the release notes cannot list every single change made to &os;
107      between releases; this document focuses primarily on security
108      advisories, user-visible changes, and major architectural
109      improvements.</para>
110  </sect1>
111
112  <sect1 xml:id="upgrade">
113    <title>Upgrading from Previous Releases of &os;</title>
114
115    <para arch="amd64,i386">Binary upgrades between RELEASE versions
116      (and snapshots of the various security branches) are supported
117      using the &man.freebsd-update.8; utility.  The binary upgrade
118      procedure will update unmodified userland utilities, as well as
119      unmodified GENERIC kernels distributed as a part of an official
120      &os; release.  The &man.freebsd-update.8; utility requires that
121      the host being upgraded have Internet connectivity.</para>
122
123    <para>Source-based upgrades (those based on recompiling the &os;
124      base system from source code) from previous versions are
125      supported, according to the instructions in
126      <filename>/usr/src/UPDATING</filename>.</para>
127
128    <important>
129      <para>Upgrading &os; should only be attempted after backing up
130	<emphasis>all</emphasis> data and configuration files.</para>
131    </important>
132  </sect1>
133
134  <sect1 xml:id="security-errata">
135    <title>Security and Errata</title>
136
137    <para>This section lists the various Security Advisories and
138      Errata Notices since &release.prev;.</para>
139
140    <sect2 xml:id="security">
141      <title>Security Advisories</title>
142
143      &security;
144    </sect2>
145
146    <sect2 xml:id="errata">
147      <title>Errata Notices</title>
148
149      &errata;
150    </sect2>
151  </sect1>
152
153  <sect1 xml:id="userland">
154    <title>Userland</title>
155
156    <para>This section covers changes and additions to userland
157      applications, contributed software, and system utilities.</para>
158
159    <sect2 xml:id="userland-config">
160      <title>Userland Configuration Changes</title>
161
162      <para revision="266463">The default &man.newsyslog.conf.5; now
163	includes files in the
164	<filename>/etc/newsyslog.conf.d/</filename> and
165	<filename>/usr/local/etc/newsyslog.conf.d/</filename>
166	directories by default for &man.newsyslog.8;.</para>
167
168      <para revision="270675">The &man.mailwrapper.8; utility has been
169	updated to use &man.mailer.conf.5; from the
170	<literal>LOCALBASE</literal> environment variable, which
171	defaults to <filename class="directory">/usr/local</filename>
172	if unset.</para>
173
174      <para revision="272350">The <literal>MK_ARM_EABI</literal>
175	&man.src.conf.5; option has been removed.</para>
176    </sect2>
177
178    <sect2 xml:id="userland-programs">
179      <title>Userland Application Changes</title>
180
181      <para revision="258838" contrib="sponsor" sponsor="&ff;,
182	&google;" sponsorurl="">The &man.casperd.8; daemon has been
183	added, which provides access to functionality that is not
184	available in the <quote>capability mode</quote>
185	sandbox.</para>
186
187      <para revision="260594">When unable to load a kernel module with
188	&man.kldload.8;, a message informing to view output of
189	&man.dmesg.8; is now printed, opposed to the previous output
190	<quote>Exec format error.</quote>.</para>
191
192      <para revision="260910">Allow &man.pciconf.8; to identify PCI
193	devices that are attached to a driver to be identified by
194	their device name instead of just the selector.  Additionally,
195	an optional device argument to the <literal>-l</literal> flag
196	to restrict the output to only listing details about a single
197	device.</para>
198
199      <para revision="260913">A new flag, <quote>onifconsole</quote>
200	has been added to <filename>/etc/ttys</filename>.  This allows
201	the system to provide a login prompt via serial console if the
202	device is an active kernel console, otherwise it is equivalent
203	to <literal>off</literal>.</para>
204
205      <para revision="260926">Support for displaying VPD for PCI
206	devices via &man.pciconf.8; has been added.</para>
207
208      <para revision="261498">&man.ping.8; protects against malicious
209	network packets using the Capsicum framework to drop
210	privileges.</para>
211
212      <para revision="265229">The &man.ps.1; utility has been
213	updated to include the <literal>-J</literal> flag, used to
214	filter output by matching &man.jail.8; IDs and names.
215	Additionally, argument <literal>0</literal> can be used to
216	<literal>-J</literal> to only list processes running on the
217	host system.</para>
218
219      <para revision="265249">The &man.top.1; utility has been updated
220	to filter by &man.jail.8; ID or name, in followup to the
221	&man.ps.1; change in <literal>r265229</literal>.</para>
222
223      <para revision="266209">The &man.pmcstat.8; utility has been
224	updated to include a new flag, <literal>-l</literal>, which
225	ends event collection after the specified number of
226	seconds.</para>
227
228      <para revision="270745">The &man.ps.1; utility has been updated
229	to include a new keyword, <quote>tracer</quote>, which
230	displays the <acronym>PID</acronym> of the tracing
231	process.</para>
232
233      <para revision="271482">Support for adding empty partitions has
234	been added to the &man.mkimg.1; utility.</para>
235
236      <para revision="272166">The &man.primes.6; utility has been
237	updated to correctly enumerate prime numbers between
238	<literal>4295098369</literal> and
239	<literal>3825123056546413050</literal>, which prior to this
240	change, it would be possible for returned values to be
241	incorrectly identified as prime numbers.</para>
242
243      <para revision="272198">The &man.mkimg.1; utility has been
244	updated to include three options used to print information
245	about &man.mkimg.1; itself:</para>
246
247      <informaltable frame="none" pgwide="0">
248	<tgroup cols="2">
249	  <colspec colwidth="1*"/>
250	  <colspec colwidth="1*"/>
251	  <thead>
252	    <row>
253	      <entry>Option</entry>
254	      <entry>Output</entry>
255	    </row>
256	  </thead>
257
258	  <tbody>
259	    <row>
260	      <entry><literal>--version</literal></entry>
261	      <entry>The current version of the &man.mkimg.1;
262		utility</entry>
263	    </row>
264
265	    <row>
266	      <entry><literal>--formats</literal></entry>
267	      <entry>The disk image file formats supported by
268		&man.mkimg.1;</entry>
269	    </row>
270
271	    <row>
272	      <entry><literal>--schemes</literal></entry>
273	      <entry>The partition schemes supported by
274		&man.mkimg.1;</entry>
275	    </row>
276	  </tbody>
277	</tgroup>
278      </informaltable>
279
280      <para revision="272488">Userland &man.ctf.5; support in
281	&man.dtrace.1; has been added.  With this change,
282	&man.dtrace.1; is able to resolve type info for function and
283	<acronym>USDT</acronym> probe arguments, and function return
284	values.</para>
285
286      <para revision="274960">The &man.elfdump.1; utility has been
287	updated to support capability mode provided by
288	&man.capsicum.4;.</para>
289
290      <para revision="275680" contrib="sponsor" sponsor="&ff;">The
291	&man.fstyp.8; utility has been added, which is used to
292	determine the filesystem on a specified device.</para>
293
294      <para revision="276881">The <literal>libedit</literal> library
295	has been updated to support <acronym>UTF</acronym>-8, which
296	additionally provides unicode support to &man.sh.1;.</para>
297
298      <para revision="277166" arch="powerpc">The &man.ptrace.2; system
299	call has been updated include support for Altivec registers on
300	&os;/&arch.powerpc;.</para>
301
302      <para revision="278320">A new device control utility,
303	&man.devctl.8; has been added, which allows making
304	administrative changes to individual devices, such as
305	attaching and detaching drivers, and enabling and disabling
306	devices.  The &man.devctl.8; utility uses the new
307	&man.devctl.3; library.</para>
308
309      <para revision="279315" contrib="sponsor" sponsor="&ff;">The
310	&man.uefisign.8; utility has been added.</para>
311
312      <para revision="279571" contrib="sponsor"
313	sponsor="&scaleengine;">The &man.freebsd-update.8; utility has
314	been updated to prevent fetching updated binary patches when
315	a previous upgrade has not been thoroughly completed.</para>
316
317      <para revision="279122" contrib="sponsor"
318	sponsor="&juniper;">The &man.netstat.1; utility has been
319	updated to link against the &man.libxo.3; shared
320	library.</para>
321
322      <para revision="280870">A regression in the &man.libarchive.3;
323	library that would prevent a directory from being included in
324	the archive when <literal>--one-file-system</literal> is used
325	has been fixed.</para>
326
327      <para revision="281311" contrib="sponsor" sponsor="&ff;">The
328	&man.ar.1; utility has been updated to set
329	<literal>ARCHIVE_EXTRACT_SECURE_SYMLINKS</literal> and
330	<literal>ARCHIVE_EXTRACT_SECURE_NODOTDOT</literal> to disallow
331	directory traversal when extracting an archive, similar to
332	&man.tar.1;.</para>
333
334      <para revision="282208" contrib="sponsor"
335	sponsor="&multiplay;">The &man.chflags.1;, &man.chgrp.1;,
336	&man.chmod.1;, and &man.chown.8; utilities now affect symbolic
337	links when the <literal>-R</literal> flag is specified, as
338	documented in &man.symlink.7;.</para>
339
340      <para revision="281617">A race condition in &man.wc.1; that
341	would cause final results to be sent to &man.stderr.4; when
342	receiving the <literal>SIGINFO</literal> signal has been
343	fixed.</para>
344
345      <para revision="283961">The &man.pw.8; utility has been updated
346	with a new flag, <literal>-R</literal>, that sets the root
347	directory within which the utility will operate.</para>
348
349      <para revision="284297" contrib="sponsor"
350	sponsor="&clusterhq;">The &man.lockstat.1; utility has been
351	updated with several improvements:</para>
352
353      <itemizedlist>
354	<listitem>
355	  <para>Spin locks are now reported as the amount of time
356	    spinning, instead of loop iterations.</para>
357	</listitem>
358
359	<listitem>
360	  <para>Reader locks are now recognized as adaptive that can
361	    spin on &os;.</para>
362	</listitem>
363
364	<listitem>
365	  <para>Lock aquisition events for successful reader try-lock
366	    events are now reported.</para>
367	</listitem>
368
369	<listitem>
370	  <para>Spin and block events are now reported before lock
371	    acquisition events.</para>
372	</listitem>
373      </itemizedlist>
374
375      <para revision="284589" contrib="sponsor"
376	sponsor="&scaleengine;">The &man.fstyp.8; utility has been
377	updated to be able to detect &man.zfs.8; and &man.geli.8;
378	filesystems.</para>
379
380      <para revision="282608">The &man.date.1; utility has been
381	updated to print the modification time of the file passed as
382	an argument to the <literal>-r</literal> flag, improving
383	compatibility with the <acronym>GNU</acronym> &man.date.1;
384	utility behavior.</para>
385    </sect2>
386
387    <sect2 xml:id="userland-contrib">
388      <title>Contributed Software</title>
389
390      <para revision="258884" contrib="sponsor"
391	sponsor="&darpa_afrl;">&man.lldb.1; has been updated to
392	upstream snapshot version r196259.</para>
393
394      <para revision="259626">Timezone data files have been updated to
395	version 2013i.</para>
396
397      <para revision="260445">&man.byacc.1; has been updated to
398	version 20140101.</para>
399
400      <para revision="261071">&man.jemalloc.3; has been updated to
401	version 3.5.0.</para>
402
403      <para revision="261283"><application>libc++</application> has
404	been updated to version 3.4.</para>
405
406      <para revision="261320"><application>OpenSSH</application> has
407	been updated to 6.5p1.</para>
408
409      <para revision="261344"><application>mdocml</application> has
410	been updated to version 1.12.3.</para>
411
412      <para revision="261991"><application>LLVM</application> and
413	<application>Clang</application> have been updated to
414	version 3.4.</para>
415
416      <para revision="276577"><application>file</application> has been
417	updated to version 5.22.</para>
418
419      <para revision="275718">The <application>binutils</application>
420	suite of utilities has been updated to include upstream
421	patches that add new relocations for &arch.powerpc;
422	support.</para>
423
424      <para revision="276398" contrib="sponsor" sponsor="&ff;">The
425	<application>ELF Tool Chain</application> has been updated to
426	upstream revision r3136.</para>
427
428      <para revision="276551">The <application>texinfo</application>
429	utility and <literal>info</literal> pages were removed from
430	the base system.  The <filename
431	  role="package">print/texinfo</filename> port should be
432	installed on systems where <literal>info</literal> pages are
433	needed.</para>
434
435      <para revision="276796" contrib="sponsor" sponsor="&ff;">The ELF
436	object manipulation tools
437	<application>addr2line</application>,
438	<application>elfcopy (strip)</application>,
439	<application>nm</application>,
440	<application>readelf</application>,
441	<application>size</application>, and
442	<application>strings</application> were switched to the
443	versions from the ELF Tool Chain project.</para>
444
445      <para revision="276881">The <literal>libedit</literal> library
446	has been updated to include <acronym>UTF-8</acronym> support,
447	adding <acronym>UTF-8</acronym> support to the &man.sh.1;
448	shell.</para>
449
450      <para revision="278433">The &man.xz.1; utility has been updated
451	to support multi-threaded compression.</para>
452
453      <para revision="280932" contrib="sponsor" sponsor="&ff;">The
454	<application>elftoolchain</application> utilities have been
455	updated to version 3179.</para>
456
457      <para revision="281316">The &man.xz.1; utility has been updated
458	to version 5.2.1.</para>
459
460      <para revision="281373">The &man.nvi.1; utility has been updated
461	to version 2.1.3.</para>
462
463      <para revision="281806">The &man.wpa.supplicant.8; and
464	&man.hostapd.8; utilities have been updated to version
465	2.4.</para>
466
467      <para revision="282089">The &man.unbound.8; utility has been
468	updated to version 1.5.3.</para>
469
470      <para revision="282434" contrib="sponsor" sponsor="&ff;">The
471	&man.resolvconf.8; utility has been updated to version
472	3.7.0.</para>
473
474      <para revision="284254"><application>bmake</application> has
475	been updated to version 20150606.</para>
476
477      <para revision="283092">The &man.acpi.4; subsystem has been
478	updated to version 20150515.</para>
479
480      <para revision="284237">The &man.file.1; utility has been
481	updated to version 5.23.</para>
482
483      <para revision="285229"><application>sendmail</application> has
484	been updated to 8.15.2.  Starting with &os;&nbsp;11.0 and
485	sendmail 8.15, sendmail uses uncompressed IPv6 addresses by
486	default, i.e., they will not contain <quote>::</quote>.  For
487	example, instead of <quote>::1</quote>, it will be
488	<quote>0:0:0:0:0:0:0:1</quote>.  This permits a zero subnet to
489	have a more specific match, such as different map entries for
490	IPv6:0:0 vs IPv6:0.  This change requires that configuration
491	data (including maps, files, classes, custom ruleset, etc.)
492	must use the same format, so make certain such configuration
493	data is upgrading.  As a very simple check search for patterns
494	like 'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'.  To return to the
495	old behavior, set the m4 option
496	<literal>confUSE_COMPRESSED_IPV6_ADDRESSES</literal> or the cf
497	option <literal>UseCompressedIPv6Addresses</literal>.</para>
498
499      <para revision="285329"><application>OpenSSL</application> has
500	been updated to version 1.0.1p.</para>
501    </sect2>
502
503    <sect2 xml:id="userland-installer">
504      <title>Installation and Configuration Tools</title>
505
506      <para revision="271539">The &man.bsdinstall.8; partition editor
507	and &man.sade.8; utility have been updated to include native
508	<acronym>ZFS</acronym> support.</para>
509
510      <para revision="272274">The &os; installation utility,
511	&man.bsdinstall.8;, has been updated to set the
512	<literal>canmount</literal> &man.zfs.8; property to
513	<literal>off</literal> for the <filename
514	  class="directory">/var</filename> dataset, preventing the
515	contents of directories within <filename
516	  class="directory">/var</filename> from conflicting when
517	using multiple boot environments, such as that provided by
518	<filename role="package">sysutils/beadm</filename>.</para>
519
520      <para revision="274394">The &man.bsdconfig.8; utility has been
521	updated to skip the initial &man.tzsetup.8;
522	<acronym>UTC</acronym> versus wall-clock time prompt when run
523	in a virtual machine, determined when the
524	<literal>kern.vm_guest</literal> &man.sysctl.8; is set to
525	<literal>1</literal>.</para>
526
527      <para revision="275874">The &man.bsdinstall.8; utility has been
528	updated to use the new &man.dpv.3; library to display progress
529	when extracting the &os; distributions.</para>
530    </sect2>
531
532    <sect2 xml:id="userland-rc">
533      <title><filename class="directory">/etc/rc.d</filename>
534	Scripts</title>
535
536      <para revision="270676">The &man.rc.8; subsystem has been
537	updated to allow configuring services in <filename
538	  class="directory">&dollar;{LOCALBASE}/etc/rc.conf.d/</filename>.
539	If <literal>LOCALBASE</literal> is unset, it defaults to
540	<filename class="directory">/usr/local</filename>.</para>
541
542      <para revision="275299">The <filename>mrouted</filename>
543	&man.rc.8; script has been removed from the base system.  An
544	equivalent script is available from the <filename
545	  role="package">net/mrouted</filename> port.</para>
546
547      <para revision="279463" contrib="sponsor"
548	sponsor="&sandvine;">A new &man.rc.8; script,
549	<filename>iovctl</filename>, has been added, which allows
550	automatically starting the &man.iovctl.8; utility at
551	boot.</para>
552    </sect2>
553
554    <sect2 xml:id="userland-periodic">
555      <title><filename class="directory">/etc/periodic</filename>
556	Scripts</title>
557
558      <para revision="271321">The daily &man.periodic.8; script
559	<filename>110.clean-tmps</filename> has been updated to avoid
560	crossing filesystem mount boundaries when cleaning files in
561	<filename class="directory">/tmp</filename>.</para>
562    </sect2>
563
564    <sect2 xml:id="userland-libraries">
565      <title>Runtime Libraries and API</title>
566
567      <para revision="265995">The Blowfish &man.crypt.3; default
568	format has been changed to
569	<literal>&dollar;2b&dollar;</literal>.</para>
570
571      <para revision="268461">The &man.readline.3; library is now
572	statically linked in software within the base system, and the
573	shared library is no longer installed, allowing the Ports
574	Collection to use a modern version of the library.</para>
575
576      <para revision="272273">The &man.strptime.3; library has been
577	updated to add support for <acronym>POSIX</acronym>-2001
578	features <literal>%U</literal> and
579	<literal>%W</literal>.</para>
580
581      <para revision="272842,272848" contrib="sponsor"
582	sponsor="&ff;">The &man.dl.iterate.phdr.3; library has been
583	changed to always return the path name of the
584	<acronym>ELF</acronym> object in the
585	<literal>dlpi_name</literal> structure member.</para>
586
587      <para revision="273562" contrib="sponsor"
588	sponsor="&juniper;">The &man.libxo.3; library has been
589	imported to the base system.</para>
590
591      <para revision="273806" contrib="sponsor" sponsor="&chelsio;">A
592	userland library for Chelsio Terminator 5 based iWARP cards
593	has been added, allowing userland <acronym>RDMA</acronym>
594	applications to work over compatible
595	<acronym>NIC</acronym>s.</para>
596
597      <para revision="274987">The &man.gpio.3; library has been added,
598	providing a wrapper around the &man.gpio.4; kernel
599	interface.</para>
600
601      <para revision="277610">The <literal>futimens()</literal> and
602	<literal>utimensat()</literal> system calls have been
603	added.  See &man.utimensat.2; for more information.</para>
604
605      <para revision="278934">The &man.elf.3; compile-time dependency
606	has been removed from <filename>dtri.o</filename>, which
607	allows adding <application>DTrace</application> probes to
608	userland applications and libraries without also linking
609	against &man.elf.3;.</para>
610
611      <para revision="279186">The &man.setmode.3; function has been
612	updated to consistently set <literal>errno</literal> on
613	failure.</para>
614
615      <para revision="279663">The &man.qsort.3; functions have been
616	updated to be able to handle 32-bit aligned data on 64-bit
617	platforms, also providing a significant improvement in 32-bit
618	workloads.</para>
619
620      <para revision="281130">Several standard include headers have
621	been updated to use of <application>gcc</application>
622	attributes, such as <literal>__result_use_check()</literal>,
623	<literal>__alloc_size()</literal>, and
624	<literal>__nonnull()</literal>.</para>
625
626      <para revision="281845">Support for file verification in
627	<acronym>MAC</acronym> has been added.</para>
628
629      <para revision="282973" contrib="sponsor" sponsor="&ff;">The
630	<literal>libgomp</literal> library is now only built when
631	building <acronym>GCC</acronym> from the base system.  An
632	up-to-date version is available in the Ports Collection as
633	<filename
634	  role="package">devel/libiomp5-devel</filename>.</para>
635
636      <para revision="282988">The <filename>stdlib.h</filename> and
637	<filename>malloc.h</filename> headers have been updated to
638	make use of the <application>gcc</application>
639	<literal>alloc_align()</literal> attribute.</para>
640
641      <para revision="284483" contrib="sponsor"
642	sponsor="&scaleengine;">The Blowfish &man.crypt.3; library
643	has been updated to support &dollar;2y&dollar; hashes.</para>
644    </sect2>
645
646    <sect2 xml:id="userland-abi">
647      <title>ABI Compatibility</title>
648
649      <para revision="271982">The &linux; compatibility version has
650	been updated to <literal>2.6.18</literal>.  The
651	<literal>compat.linux.osrelease</literal> &man.sysctl.8; is
652	evaluated when building the <filename
653	  role="package">emulators/linux-c6</filename> and related
654	ports.</para>
655    </sect2>
656  </sect1>
657
658  <sect1 xml:id="kernel">
659    <title>Kernel</title>
660
661    <para>This section covers changes to kernel configurations, system
662      tuning, and system control parameters that are not otherwise
663      categorized.</para>
664
665    <sect2 xml:id="kernel-bugfix">
666      <title>Kernel Bug Fixes</title>
667
668      <para revision="265876">A kernel bug that inhibited proper
669	functionality of the <literal>dev.cpu.0.freq</literal>
670	&man.sysctl.8; on &intel; processors with Turbo
671	Boost&nbsp;&trade; enabled has been fixed.</para>
672
673      <para revision="271697" arch="powerpc">Support for
674	&man.dtrace.1; stack tracing has been fixed for
675	&os;/&arch.powerpc;, using the <literal>trapexit()</literal>
676	and <literal>asttrapexit()</literal> functions instead of
677	checking within addressed kernel space.</para>
678
679      <para revision="272089">A bug in &man.ipfw.4; that could
680	potentially lead to a kernel panic when using &man.dummynet.4;
681	at layer 2 has been fixed.</para>
682
683      <para revision="280930" contrib="sponsor" sponsor="&mitail;">The
684	kernel <acronym>RPC</acronym> has been updated to include
685	several enhancements:</para>
686
687      <itemizedlist>
688	<listitem>
689	  <para>The 45 MiB limit on requests queued for
690	    &man.nfsd.8; threads has been removed.</para>
691	</listitem>
692
693	<listitem>
694	  <para>Avoids unnecessary throttling by not deferring
695	    accounting for completed requests.</para>
696	</listitem>
697
698	<listitem>
699	  <para>Fixes an integer overflow and signedness bugs.</para>
700	</listitem>
701      </itemizedlist>
702
703      <para revision="281261" arch="powerpc">Support for
704	&man.dtrace.1; has been added for the
705	Book-E&nbsp;&trade;.</para>
706    </sect2>
707
708    <sect2 xml:id="kernel-config">
709      <title>Kernel Configuration</title>
710
711      <para revision="266531">The <literal>IMAGACT_BINMISC</literal>
712	kernel configuration option has been enabled by default,
713	which enables application execution through emulators, such
714	as <application>Qemu</application>.</para>
715
716      <para revision="268045">The <literal>VT</literal> kernel
717	configuration file has been removed, and the &man.vt.4;
718	driver is included in the <literal>GENERIC</literal> kernel.
719	To enable &man.vt.4;, enter <literal>set kern.vty=vt</literal>
720	at the &man.loader.8; prompt during boot, or add
721	<literal>kern.vty=vt</literal> to &man.loader.conf.5; and
722	reboot the system.</para>
723
724      <para revision="277904">The &man.config.8; utility has been
725	updated to allow using a non-standard <filename
726	  class="directory">src/</filename> tree, specified as an
727	argument to the <literal>-s</literal> flag.</para>
728
729      <para revision="277990" arch="powerpc64">The
730	&os;/&arch.powerpc64; kernel now builds as
731	a position-independent executable, allowing the kernel to be
732	loaded into and run from any physical or virtual
733	address.</para>
734
735      <important>
736	<para>This change requires an update to &man.loader.8;.
737	  The userland and kernel must be updated before rebooting the
738	  system.</para>
739      </important>
740
741      <para revision="279189" contrib="sponsor" sponsor="&ff;"
742	arch="powerpc">Kernel support for Vector-Scalar eXtension
743	(<acronym>VSX</acronym>) found on POWER7 and POWER8 hardware
744	has been added.</para>
745
746      <para revision="279252" contrib="sponsor" sponsor="&ff;"
747	arch="powerpc">The &man.pmap.9; implementation for 64-bit
748	&powerpc; processors has been overhaulded to improve
749	concurrency.</para>
750
751      <para revision="283959" contrib="sponsor"
752	sponsor="&limelight;">A new kernel configuration option,
753	<literal>EM_MULTIQUEUE</literal>, has been added which enables
754	multi-queue support in the &man.em.4; driver.</para>
755
756      <note>
757	<para>Multi-queue support in the &man.em.4; driver is not
758	  officially supported by &intel;.</para>
759      </note>
760    </sect2>
761
762    <sect2 xml:id="kernel-sysctl">
763      <title>System Tuning and Controls</title>
764
765      <para revision="275140" contrib="sponsor" sponsor="&ff;">The
766	&man.hwpmc.4; default and maximum callchain depths have been
767	increased.  The default has been increased from 16 to 32, and
768	the maximum increased from 32 to 128.</para>
769
770      <para revision="279361">The <literal>kern.osrelease</literal>
771	and <literal>kern.osreldate</literal> are now configurable
772	&man.jail.8; parameters.</para>
773
774      <para revision="280308,280949" contrib="sponsor"
775	sponsor="&ix;, &ff;">The &man.devfs.5; device filesystem has
776	been changed to update timestamps for read/write operations
777	using seconds precision.  A new &man.sysctl.8;,
778	<literal>vfs.devfs.dotimes</literal> has been added, which
779	when set to a non-zero value, enables default precision
780	timestamps for these operations.</para>
781
782      <para revision="282213" contrib="sponsor" sponsor="&ff;">A new
783	&man.sysctl.8;, <literal>kern.racct.enable</literal>, has been
784	added, which when set to a non-zero value allows using
785	&man.rctl.8; with the <literal>GENERIC</literal> kernel.
786	A new kernel configuration option,
787	<literal>RACCT_DISABLED</literal> has also been added.</para>
788
789      <para revision="282901" contrib="sponsor" sponsor="&ff;">The
790	<literal>GENERIC</literal> kernel configuration now includes
791	<literal>RACCT</literal> and <literal>RCTL</literal> by
792	default.</para>
793
794      <note>
795	<para>To enable <literal>RACCT</literal> and
796	  <literal>RCTL</literal> on a system using the
797	  <literal>GENERIC</literal> kernel configuration, add
798	  <literal>kern.racct.enable=1</literal> to
799	  &man.loader.conf.5;, and reboot the system.</para>
800      </note>
801
802      <para revision="283136" contrib="sponsor"
803	sponsor="&limelight;">A new &man.sysctl.8;,
804	<literal>net.inet.tcp.hostcache.purgenow</literal>, has
805	been added, which when set to <literal>1</literal> during
806	runtime will flush all
807	<literal>net.inet.tcp.hostcache</literal> entries.</para>
808    </sect2>
809  </sect1>
810
811  <sect1 xml:id="drivers">
812    <title>Devices and Drivers</title>
813
814    <para>This section covers changes and additions to devices and
815      device drivers since &release.prev;.</para>
816
817    <sect2 xml:id="drivers-device">
818      <title>Device Drivers</title>
819
820      <para revision="260903">Support for GPS ports has been added to
821	&man.uhso.4;.</para>
822
823      <para revision="265132">The &man.full.4; device has been added,
824	and the <literal>lindev(4)</literal> device has been removed.
825	Prior to this change, <literal>lindev(4)</literal> provided
826	only the <filename>/dev/full</filename> character device,
827	returning <literal>ENOSPC</literal> on write attempts.  As
828	this device is not specific to &linux;, a native &os; version
829	has been added.</para>
830
831      <para revision="271705">Hardware context support has been
832	added to the <literal>drm/i915</literal> driver, adding
833	support for <application>Mesa</application> 9.2 and
834	later.</para>
835
836      <para revision="273178">The &man.vt.4; driver has been updated,
837	replacing the bitmapped <literal>kern.vt.spclkeys</literal>
838	&man.sysctl.8; with individual
839	<literal>kern.vt.kbd_*</literal> variants.</para>
840
841      <para revision="273598">The &man.hpet.4; driver has been updated
842	to create a
843	<filename>/dev/hpet<replaceable>N</replaceable></filename>
844	device, providing access to <acronym>HPET</acronym> from
845	userspace.</para>
846
847      <para revision="280183">The <literal>drm</literal> code has
848	been updated to match &linux; version 3.8.13.</para>
849
850      <para revision="282783" arch="powerpc">Support for the Freescale
851	<acronym>PCI</acronym> Root Complex device has been
852	added.</para>
853    </sect2>
854
855    <sect2 xml:id="drivers-storage">
856      <title>Storage Drivers</title>
857
858      <para revision="265236" contrib="sponsor"
859	sponsor="&lsi;, &spectralogic;" sponsorurl="">The &man.mpr.4;
860	device has been added, providing support for LSI Fusion-MPT
861	3 12Gb SCSI/SATA controllers.</para>
862
863      <para revision="265555" contrib="sponsor"
864	  sponsor="&lsi;">The &man.mrsas.4; driver has been added,
865	providing support for LSI MegaRAID SAS controllers.  The
866	&man.mfi.4; driver will attach to the controller, by default.
867	To enable &man.mrsas.4; add
868	<literal>hw.mfi.mrsas_enable=1</literal> to
869	<filename>/boot/loader.conf</filename>, which turns off
870	&man.mfi.4; device probing.</para>
871
872      <note>
873	<para>At this time, the &man.mfiutil.8; utility and the &os;
874	  version of <application>MegaCLI</application> and
875	  <application>StorCli</application> do not work with
876	  &man.mrsas.4;.</para>
877      </note>
878
879      <para revision="275461" contrib="sponsor" sponsor="&ix;">The
880	&man.ctl.4; subsystem has been updated, increasing the ports
881	limit from <literal>128</literal> to <literal>256</literal>,
882	and <acronym>LUN</acronym> limit from <literal>256</literal>
883	to <literal>1024</literal>.</para>
884
885      <para revision="276526">The <literal>asr(4)</literal> driver has
886	been removed, and is no longer supported.</para>
887
888      <para revision="281387">The &man.hptnr.4; driver has been
889	updated to version 1.1.1.</para>
890    </sect2>
891
892    <sect2 xml:id="drivers-network">
893      <title>Network Drivers</title>
894
895      <para revision="258830">Support for Broadcom chipsets BCM57764,
896	BCM57767, BCM57782, BCM57786 and BCM57787 has been added to
897	&man.bge.4;.</para>
898
899      <para revision="260448">Support for the &intel; Centrino&trade;
900	Wireless-N 135 chipset has been added.</para>
901
902      <para revision="260552">Firmware for &intel; Centrino&trade;
903	Wireless-N 105 devices has been added to the base
904	system.</para>
905
906      <para revision="261975">The deprecated nve(4) driver has been
907	removed.  Users of NVIDIA nForce MCP network adapters are
908	advised to use the &man.nfe.4; driver instead, which has been
909	the default driver for this hardware since
910	&os;&nbsp;7.0.</para>
911
912      <para revision="264601" contrib="sponsor"
913	sponsor="&darpa_afrl;">The <literal>if_nf10bmac(4)</literal>
914	device has been added, providing support for NetFPGA-10G
915	Embedded CPU Ethernet Core.</para>
916
917      <note>
918	<para>The <literal>if_nf10bmac(4)</literal> driver operates on
919	  the FPGA, and is not suited for the PCI host
920	  interface.</para>
921      </note>
922
923      <para revision="265348" contrib="sponsor"
924	sponsor="&netgate;">The &man.ath.hal.4; driver has been
925	updated to support the Atheros AR1111 chipset.</para>
926
927      <para revision="266770">Support for the &intel; Centrino&trade;
928	Wireless-N 105 chipset has been added.</para>
929
930      <para revision="266757" contrib="sponsor"
931	sponsor="&chelsio;">Support for the &man.cxgbe.4; Terminator
932	5 (T5) 10G/40G cards has been added to &man.netmap.4;.</para>
933
934      <para revision="272730">The &man.alc.4; driver has been updated
935	to support AR816x and AR817x ethernet controllers.</para>
936
937      <para revision="273331">The &man.vxlan.4; driver has been added,
938	which creates a virtual Layer 2 (Ethernet) network overlaid in
939	a Layer 3 (IP/UDP) network.  The &man.vxlan.4; driver is
940	analogous to &man.vlan.4;, but is designed to be better suited
941	for large, multiple-tenant datacenter environments.</para>
942
943      <para revision="274246" contrib="sponsor" sponsor="&yandex;">The
944	&man.gre.4; driver has been significantly overhauled, and has
945	been split into two separate modules, &man.gre.4; and
946	&man.me.4;.</para>
947
948      <para revision="283766" contrib="sponsor"
949	sponsor="&limelight;">The &man.em.4; driver has been updated
950	with improved transmission queue hang detection.</para>
951    </sect2>
952  </sect1>
953
954  <sect1 xml:id="hardware">
955    <title>Hardware Support</title>
956
957    <para>This section covers general hardware support for physical
958      machines, hypervisors, and virtualization environments, as well
959      as hardware changes and updates that do not otherwise fit in
960      other sections of this document.</para>
961
962    <sect2 xml:id="hardware-support">
963      <title>Hardware Support</title>
964
965      <para revision="268303">The &man.asmc.4; driver has been
966	updated to support the &apple;&nbsp;MacMini 3,1.</para>
967
968      <para revision="268351">Support for &os;/ia64 has been dropped
969	as of &os;&nbsp;11.</para>
970
971      <para revision="274386">An issue that could cause a system to
972	hang when entering <acronym>ACPI</acronym>
973	<literal>S3</literal> state (suspend to
974	<acronym>RAM</acronym>) has been corrected in the &man.acpi.4;
975	and &man.pci.4; drivers.</para>
976
977      <para revision="274733" arch="powerpc">The power management unit
978	subsystem has been updated to support power button events on
979	certain &arch.powerpc; hardware, such as aluminum
980	PowerBook&nbsp;&reg;.</para>
981
982      <para revision="275171,275190" arch="powerpc">The &man.hwpmc.4;
983	driver has been updated to correct performance counter
984	sampling on G4 (MPC74xxx) and G5 class processors.</para>
985
986      <para revision="281713" arch="powerpc">The &man.hwpmc.4;
987	driver has been updated to support the Freescale e500
988	core.</para>
989
990      <para revision="275732" contrib="sponsor"
991	sponsor="&ff;,&netgate;">The
992	<application>OpenCrypto</application> framework has been
993	updated to include <literal>AES-ICM</literal> and
994	<literal>AES-GCM</literal> modes, both of which have also been
995	added to the &man.aesni.4; driver.</para>
996
997      <para revision="283766">The &man.ig4.4; driver has been added,
998	providing support for the fourth generation &intel;
999	<acronym>I2C</acronym> SMBus.</para>
1000
1001      <para>The &man.uart.4; driver has been updated to support
1002	<acronym>AMT</acronym> devices on newer systems.</para>
1003    </sect2>
1004
1005    <sect2 xml:id="hardware-virtualization">
1006      <title>Virtualization Support</title>
1007
1008      <para revision="260410">Support for the <quote>Virtual Interrupt
1009	  Delivery</quote> feature of &intel;&nbsp;VT-x is enabled if
1010	supported by the CPU.  This feature can be disabled by running
1011	<literal>sysctl hw.vmm.vmx.use_apic_vid=0</literal>.
1012	Additionally, to persist this setting across reboots, add
1013	<literal>hw.vmm.vmx.use_apic_vid=0</literal> to
1014	<filename>/etc/sysctl.conf</filename>.</para>
1015
1016      <para revision="260532">Support for <quote>Posted Interrupt
1017	  Processing</quote> is enabled if supported by the CPU.  This
1018	feature can be disabled by running <literal>sysctl
1019	  hw.vmm.vmx.use_apic_pir=0</literal>.  Additionally, to
1020	persist this setting across reboots, add
1021	<literal>hw.vmm.vmx.use_apic_pir=0</literal> to
1022	<filename>/etc/sysctl.conf</filename>.</para>
1023
1024      <para revision="260582">Unmapped IO support has been added to
1025	&man.virtio_blk.4;.</para>
1026
1027      <para revision="260583">Unmapped IO support has been added to
1028	&man.virtio_scsi.4;.</para>
1029
1030      <para revision="260847">The &man.virtio_random.4; driver has
1031	been added to harvest entropy from the host system.</para>
1032
1033      <para revision="261504">&os;/&arch.i386; guests can be run under
1034	bhyve.</para>
1035
1036      <para revision="267536" contrib="sponsor"
1037	sponsor="&citrix.rd;">Support for running a &os;/&arch.amd64;
1038	<application>Xen</application> guest instance as
1039	<acronym>PVH</acronym> guest has been added.
1040	<acronym>PVH</acronym> mode, short for <quote>Para-Virtualized
1041	  Hardware</quote>, uses para-virtualized drivers for boot and
1042	I/O, and uses hardware virtualization extensions for all other
1043	tasks, without the need for emulation.</para>
1044
1045      <para revision="273515">The &man.virtio.console.4; driver has
1046	been added, which provides an interface to VirtIO console
1047	devices through a &man.tty.4; device.</para>
1048
1049      <para revision="279957">The &man.bhyve.8; hypervisor has been
1050	updated to support <literal>DSM TRIM</literal> commands for
1051	virtual <acronym>AHCI</acronym> disks.</para>
1052
1053      <para revision="281439" arch="arm">Support for the
1054	<application>QEMU</application> <literal>virt</literal> system
1055	has been added.</para>
1056
1057      <para revision="282212" contrib="sponsor" sponsor="&msostc;">The
1058	Hyper-V&trade; drivers have been updated with several
1059	enhancements:</para>
1060
1061      <itemizedlist>
1062	<listitem>
1063	  <para>The &man.hv.vmbus.4; driver now has multi-channel
1064	    support.</para>
1065	</listitem>
1066
1067	<listitem>
1068	  <para>The &man.hv.storvsc.4; driver now has scatter/gather
1069	    support, in addition to performance improvements.</para>
1070	</listitem>
1071
1072	<listitem>
1073	  <para>The &man.hv.kvp.4; driver has received several bug
1074	    fixes.</para>
1075	</listitem>
1076      </itemizedlist>
1077
1078      <para revision="282274">Support for &man.xen.4; para-virtualized
1079	<literal>domU</literal> kernels has been removed.</para>
1080
1081      <para revision="284746" contrib="sponsor" sponsor="&msostc;">The
1082	&man.hv.netvsc.4; driver has been updated to support checksum
1083	offloading and <acronym>TSO</acronym>.</para>
1084    </sect2>
1085
1086    <sect2 xml:id="hardware-arm">
1087      <title>ARM Support</title>
1088
1089      <para revision="260921">The &man.nand.4; device is enabled for
1090	ARM devices by default.</para>
1091
1092      <para revision="273264" arch="armv6">An issue that could cause
1093	instability when detecting <acronym>SD</acronym> cards on the
1094	Raspberry Pi <acronym>SOC</acronym> has been fixed.</para>
1095
1096      <para revision="275963">The <literal>bcm2835_cpufreq</literal>
1097	driver has been added, which supports <acronym>CPU</acronym>
1098	frequency and voltage control on the Raspberry Pi
1099	<acronym>SOC</acronym>.</para>
1100
1101      <para revision="280259" contrib="sponsor" sponsor="&ff;">Initial
1102	support for the ARM AArch64 architecture has been
1103	added.</para>
1104
1105      <para revision="282779" arch="arm">Kernel support for Thumb-2
1106	userland has been added.</para>
1107
1108      <para revision="282827">Support for the hardware power button
1109	on the BeagleBone Black system has been added.</para>
1110
1111      <para revision="284273" contrib="sponsor"
1112	sponsor="&ff;">Initial
1113	<acronym>ACPI</acronym> support has been added for
1114	&os;/&arch.arm64;.</para>
1115    </sect2>
1116  </sect1>
1117
1118  <sect1 xml:id="storage">
1119    <title>Storage</title>
1120
1121    <para>This section covers changes and additions to file systems
1122      and other storage subsystems, both local and networked.</para>
1123
1124    <sect2 xml:id="storage-general">
1125      <title>General Storage</title>
1126
1127      <para revision="278037" contrib="sponsor" sponsor="&ix;">The
1128	&man.ctl.4; <acronym>LUN</acronym> mapping has been rewritten,
1129	replacing <acronym>iSCSI</acronym>-specific mapping mechanisms
1130	with a new mechanism that works for any port.</para>
1131
1132      <para revision="278354" contrib="sponsor" sponsor="&ix;">The
1133	&man.ctld.8; utility has been updated to allow controlling
1134	non-<acronym>iSCSI</acronym> &man.ctl.4; ports.</para>
1135
1136      <para revision="275681" contrib="sponsor" sponsor="&ff;">The
1137	&man.autofs.5; subsystem has been updated to include a new
1138	&man.auto.master.5; map, <literal>-media</literal>, which
1139	allows automatically mounting removable media, such as
1140	<acronym>CD</acronym> drives or <acronym>USB</acronym> flash
1141	drives.</para>
1142
1143      <para revision="279955" contrib="sponsor" sponsor="&ff;">The
1144	&man.autofs.5; subsystem has been updated to include a new
1145	&man.auto.master.5; map, <literal>-noauto</literal>, which
1146	handles &man.fstab.5; entries set to
1147	<literal>noauto</literal>.</para>
1148    </sect2>
1149
1150    <sect2 xml:id="storage-net">
1151      <title>Networked Storage</title>
1152
1153      <para revision="270096" contrib="sponsor" sponsor="&ff;">The new
1154	filesystem automount facility, &man.autofs.5;, has been added.
1155	The new &man.autofs.5; facility is similar to that found in
1156	other &unix;-like operating systems, such as OS&nbsp;X&trade;
1157	and Solaris&trade;.  The &man.autofs.5; facility uses
1158	a &sun;-compatible &man.auto.master.5; configuration file, and
1159	is administered with the &man.automount.8; userland utility,
1160	and the &man.automountd.8; and &man.autounmountd.8;
1161	daemons.</para>
1162    </sect2>
1163
1164    <sect2 xml:id="storage-zfs">
1165      <title>ZFS</title>
1166
1167      <para revision="275748">The <literal>arc_meta_limit</literal>
1168	statistics are now visible through the
1169	<literal>kstat</literal> &man.sysctl.8;.  As a result of this
1170	change, the <literal>vfs.zfs.arc_meta_used</literal>
1171	&man.sysctl.8; has been removed, and replaced with the
1172	<literal>kstat.zfs.misc.arcstats.arc_meta_used</literal>
1173	&man.sysctl.8;.</para>
1174    </sect2>
1175
1176    <sect2 xml:id="storage-geom">
1177      <title>&man.geom.4;</title>
1178
1179      <para revision="267359">Support for the
1180	<literal>disklabel64</literal> partitioning scheme has been
1181	added to &man.gpart.8;.</para>
1182    </sect2>
1183  </sect1>
1184
1185  <sect1 xml:id="boot">
1186    <title>Boot Loader Changes</title>
1187
1188    <para>This section covers the boot loader, boot menu, and other
1189      boot-related changes.</para>
1190
1191    <sect2 xml:id="boot-loader">
1192      <title>Boot Loader Changes</title>
1193
1194      <para revision="274085">The &man.vt.4; driver has been made the
1195	default system console driver.  The &man.syscons.4; driver is
1196	still available, and can be enabled by adding
1197	<literal>kern.vty=sc</literal> in &man.loader.conf.5;.
1198	Alternatively, &man.syscons.4; can be enabled at boot time by
1199	entering <literal>set kern.vty=sc</literal> at the
1200	&man.loader.8; prompt.</para>
1201
1202      <para revision="281616">The boot loader has been updated to
1203	support entering the <acronym>GELI</acronym> passphrase before
1204	loading the kernel.  To enable this behavior, add
1205	<literal>geom_eli_passphrase_prompt="YES"</literal> to
1206	&man.loader.conf.5;.</para>
1207
1208      <para revision="258431" contrib="sponsor" sponsor="&ff;">The
1209	memory test run at boot time on &os;/&arch.amd64; platforms
1210	has been disabled by default.</para>
1211    </sect2>
1212
1213    <sect2 xml:id="boot-menu">
1214      <title>Boot Menu Changes</title>
1215
1216      <para>&nbsp;</para>
1217    </sect2>
1218  </sect1>
1219
1220  <sect1 xml:id="network">
1221    <title>Networking</title>
1222
1223    <para>This section describes changes that affect networking in
1224      &os;.</para>
1225
1226    <sect2 xml:id="network-protocols">
1227      <title>Network Procols</title>
1228
1229      <para revision="263140">Support for the IPX network transport
1230	protocol has been removed, and will not be supported in
1231	&os;&nbsp;11 and later releases.</para>
1232
1233      <para revision="272720" contrib="sponsor"
1234	sponsor="&limelight;">Support for <acronym>PLPMTUD</acronym>
1235	blackhole detection (<acronym>RFC</acronym> 4821) has been
1236	added to the &man.tcp.4; stack, disabled by default.  New
1237	control tunables have been added:</para>
1238
1239      <informaltable frame="none" pgwide="0">
1240	<tgroup cols="2">
1241	  <colspec colwidth="1*"/>
1242	  <colspec colwidth="1*"/>
1243	  <thead>
1244	    <row>
1245	      <entry>Tunable</entry>
1246	      <entry>Description</entry>
1247	    </row>
1248	  </thead>
1249
1250	  <tbody>
1251	    <row>
1252	      <entry><literal>net.inet.tcp.pmtud_blackhole_detection</literal></entry>
1253	      <entry>Enables or disables <acronym>PLPMTUD</acronym>
1254		blackhole detection</entry>
1255	    </row>
1256
1257	    <row>
1258	      <entry><literal>net.inet.tcp.pmtud_blackhole_mss</literal></entry>
1259	      <entry><acronym>MSS</acronym> to try for IPv4</entry>
1260	    </row>
1261
1262	    <row>
1263	      <entry><literal>net.inet.tcp.v6pmtud_blackhole_mss</literal></entry>
1264	      <entry><acronym>MSS to try for IPv6</acronym></entry>
1265	    </row>
1266	  </tbody>
1267	</tgroup>
1268      </informaltable>
1269
1270      <para>New monitoring &man.sysctl.8;s haven been added:</para>
1271
1272      <informaltable frame="none" pgwide="0">
1273	<tgroup cols="2">
1274	  <colspec colwidth="1*"/>
1275	  <colspec colwidth="1*"/>
1276	  <thead>
1277	    <row>
1278	      <entry>Tunable</entry>
1279	      <entry>Description</entry>
1280	    </row>
1281	  </thead>
1282
1283	  <tbody>
1284	    <row>
1285	      <entry><literal>net.inet.tcp.pmtud_blackhole_activated</literal></entry>
1286	      <entry>Number of times the code was activated to attempt
1287		downshifting the <acronym>MSS</acronym></entry>
1288	    </row>
1289
1290	    <row>
1291	      <entry><literal>net.inet.tcp.pmtud_blackhole_min_activated</literal></entry>
1292	      <entry>Number of times the blackhole
1293		<acronym>MSS</acronym> was used in an attempt to
1294		downshift</entry>
1295	    </row>
1296
1297	    <row>
1298	      <entry><literal>net.inet.tcp.pmtud_blackhole_failed</literal></entry>
1299	      <entry>Number of times that the blackhole failed to
1300		connect after downshifting the
1301		<acronym>MSS</acronym></entry>
1302	    </row>
1303	  </tbody>
1304	</tgroup>
1305      </informaltable>
1306
1307      <para revision="280971" contrib="sponsor"
1308	sponsor="&netflix;, &nginx;">Support for <acronym>IP</acronym>
1309	identification for atomic datagrams (<acronym>RFC</acronym>
1310	6864) has been added.  Support for this feature can be toggled
1311	with the <literal>net.inet.ip.rfc6864</literal>
1312	&man.sysctl.8;, which is enabled by default.</para>
1313    </sect2>
1314  </sect1>
1315
1316  <sect1 xml:id="ports">
1317    <title>Ports Collection and Package Infrastructure</title>
1318
1319    <para>This section covers changes to the &os;&nbsp;Ports
1320      Collection, package infrastructure, and package maintenance and
1321      installation tools.</para>
1322
1323    <sect2 xml:id="ports-infrastructure">
1324      <title>Infrastructure Changes</title>
1325
1326      <para>&nbsp;</para>
1327    </sect2>
1328
1329    <sect2 xml:id="ports-packages ">
1330      <title>Packaging Changes</title>
1331
1332      <para>&nbsp;</para>
1333    </sect2>
1334  </sect1>
1335
1336  <sect1 xml:id="doc">
1337    <title>Documentation</title>
1338
1339    <para>This section covers changes to the &os;&nbsp;Documentation
1340      Project sources and toolchain.</para>
1341
1342    <sect2 xml:id="doc-sources">
1343      <title>Documentation Source Changes</title>
1344
1345      <para>&nbsp;</para>
1346    </sect2>
1347
1348    <sect2 xml:id="doc-toolchain">
1349      <title>Documentation Toolchain Changes</title>
1350
1351      <para>&nbsp;</para>
1352    </sect2>
1353  </sect1>
1354
1355  <sect1 xml:id="releng">
1356    <title>Release Engineering and Integration</title>
1357
1358    <para>This section convers changes that are specific to the
1359      &os;&nbsp;Release Engineering processes.</para>
1360
1361    <sect2 xml:id="releng-changes">
1362      <title>Integration Changes</title>
1363
1364      <para revision="277458" contrib="sponsor" sponsor="&ff;">The
1365	Release Engineering build tools have been updated to include
1366	support for producing virtual machine disk images for various
1367	cloud hosting providers.</para>
1368
1369      <para revision="278926">The Release Engineering build tools have
1370	been updated to use multi-threaded &man.xz.1;.  By default,
1371	the number of &man.xz.1; threads is set to the number of cores
1372	available.</para>
1373
1374      <para revision="281802" contrib="sponsor" sponsor="&ff;">The
1375	Release Engineering build tools have been updated to include
1376	support for building &os;/&arch.arm64; virtual machine and
1377	memory stick installation images.</para>
1378    </sect2>
1379  </sect1>
1380</article>
1381