path: root/release/doc/en_US.ISO8859-1/relnotes/article.xml

<?xml version="1.0" encoding="iso-8859-1"?>
<!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
	"../../../share/xml/freebsd50.dtd" [
<!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "release.ent">
 %release;
<!ENTITY % sponsor PUBLIC "-//FreeBSD//ENTITIES Sponsor Specification//EN" "sponsor.ent">
 %sponsor;
<!ENTITY % vendor PUBLIC "-//FreeBSD//ENTITIES Vendor Specification//EN" "vendor.ent">
 %vendor;
<!ENTITY security SYSTEM "../../share/xml/security.xml">
<!ENTITY errata SYSTEM "../../share/xml/errata.xml">
]>
<article xmlns="http://docbook.org/ns/docbook"
  xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">

  <info>
    <title>&os; &release.current; Release Notes</title>

    <author>
      <orgname>The &os; Project</orgname>
    </author>

    <pubdate>$FreeBSD$</pubdate>

    <!-- Last rev: 288943 -->

    <copyright>
      <year>2015</year>
      <year>2016</year>
      <holder role="mailto:doc@FreeBSD.org">The &os; Documentation
	Project</holder>
    </copyright>

    <legalnotice xml:id="trademarks" role="trademarks">
      &tm-attrib.freebsd;
      &tm-attrib.ibm;
      &tm-attrib.ieee;
      &tm-attrib.intel;
      &tm-attrib.sparc;
      &tm-attrib.general;
    </legalnotice>

    <abstract>
      <para>The release notes for &os; &release.current; contain
	a summary of the changes made to the &os; base system on the
	&release.branch; development line.  This document lists
	applicable security advisories that were issued since the last
	release, as well as significant changes to the &os; kernel and
	userland.  Some brief remarks on upgrading are also
	presented.</para>
    </abstract>
  </info>

  <sect1 xml:id="intro">
    <title>Introduction</title>

    <para>This document contains the release notes for &os;
      &release.current;.  It describes recently added, changed, or
      deleted features of &os;.  It also provides some notes on
      upgrading from previous versions of &os;.</para>

    <para releasetype="current">The &release.type; distribution to
      which these release notes apply represents the latest point
      along the &release.branch; development branch since
      &release.branch; was created.  Information regarding pre-built,
      binary &release.type; distributions along this branch can be
      found at <uri
	xlink:href="&release.url;">&release.url;</uri>.</para>

    <para releasetype="snapshot">The &release.type; distribution to
      which these release notes apply represents a point along the
      &release.branch; development branch between &release.prev; and
      the future &release.next;.  Information regarding pre-built,
      binary &release.type; distributions along this branch can be
      found at <uri
	xlink:href="&release.url;">&release.url;</uri>.</para>

    <para releasetype="release">This distribution of &os;
      &release.current; is a &release.type; distribution.  It can be
      found at <uri xlink:href="&release.url;">&release.url;</uri> or
      any of its mirrors.  More information on obtaining this (or
      other) &release.type; distributions of &os; can be found in the
      <link
	xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
	  &os;</quote> appendix</link> to the <link
	xlink:href="&url.books.handbook;/">&os;
	Handbook</link>.</para>

    <para>All users are encouraged to consult the release errata
      before installing &os;.  The errata document is updated with
      <quote>late-breaking</quote> information discovered late in the
      release cycle or after the release.  Typically, it contains
      information on known bugs, security advisories, and corrections
      to documentation.  An up-to-date copy of the errata for &os;
      &release.current; can be found on the &os; Web site.</para>

    <para>This document describes the most user-visible new or changed
      features in &os; since &release.prev;.  In general, changes
      described here are unique to the &release.branch; branch unless
      specifically marked as &merged; features.</para>

    <para>Typical release note items document recent security
      advisories issued after &release.prev;, new drivers or hardware
      support, new commands or options, major bug fixes, or
      contributed software upgrades.  They may also list changes to
      major ports/packages or release engineering practices.  Clearly
      the release notes cannot list every single change made to &os;
      between releases; this document focuses primarily on security
      advisories, user-visible changes, and major architectural
      improvements.</para>
  </sect1>

  <sect1 xml:id="important">
    <title>Important Notes</title>

    <para>This section lists important information for those upgrading
      from prior &os; releases.</para>

    <sect2 xml:id="important-notes">
      <title>User-facing Changes</title>

      <para>As of <literal>r303719</literal>,
	<application>OpenSSH</application> <literal>DSA</literal> key
	generation has been disabled by default.  It is important to
	update <application>OpenSSH</application> keys prior to
	upgrading.  Additionally, <literal>Protocol 1</literal>
	support has been removed.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="upgrade">
    <title>Upgrading from Previous Releases of &os;</title>

    <para arch="amd64,i386">Binary upgrades between RELEASE versions
      (and snapshots of the various security branches) are supported
      using the &man.freebsd-update.8; utility.  The binary upgrade
      procedure will update unmodified userland utilities, as well as
      unmodified GENERIC kernels distributed as a part of an official
      &os; release.  The &man.freebsd-update.8; utility requires that
      the host being upgraded have Internet connectivity.</para>

    <para>Source-based upgrades (those based on recompiling the &os;
      base system from source code) from previous versions are
      supported, using the instructions in
      <filename>/usr/src/UPDATING</filename>.</para>

    <important>
      <para>Upgrading &os; should only be attempted after backing up
	<emphasis>all</emphasis> data and configuration files.</para>
    </important>
  </sect1>

  <sect1 xml:id="userland">
    <title>Userland</title>

    <para>This section covers changes and additions to userland
      applications, contributed software, and system utilities.</para>

    <sect2 xml:id="userland-config">
      <title>Userland Configuration Changes</title>

      <para revision="266463">The default &man.newsyslog.conf.5; now
	includes files in the
	<filename>/etc/newsyslog.conf.d/</filename> and
	<filename>/usr/local/etc/newsyslog.conf.d/</filename>
	directories for &man.newsyslog.8;.</para>

      <para revision="270675">The &man.mailwrapper.8; utility has been
	updated to use &man.mailer.conf.5; from the
	<literal>LOCALBASE</literal> environment variable, which
	defaults to <filename class="directory">/usr/local</filename>
	if unset.</para>

      <para revision="272350">The <literal>MK_ARM_EABI</literal>
	&man.src.conf.5; option has been removed and is now the only
	supported ABI for &os;/&arch.arm;.</para>

      <para revision="301247">The <application>ntp</application> suite
	has been updated to version 4.2.8p8.</para>

      <para revision="301247">
	<filename>/etc/ntp/leap-seconds</filename> has been updated to
	version 3676752000.</para>

      <para revision="302177">The
	<literal>WITH_SYSTEM_COMPILER</literal> &man.src.conf.5;
	option is enabled by default.</para>
    </sect2>

    <sect2 xml:id="userland-programs">
      <title>Userland Application Changes</title>

      <para revision="260594">When unable to load a kernel module with
	&man.kldload.8;, a message informing to view output of
	&man.dmesg.8; is now printed, opposed to the previous output
	<quote>Exec format error.</quote>.</para>

      <para revision="260910">The &man.pciconf.8; utility can now
	identify PCI devices that are attached to a driver to be
	identified by their device name instead of just the selector.
	Additionally, the <literal>-l</literal> flag now accepts an
	optional device argument to list details about a single
	device.</para>

      <para revision="260913">A new flag, <quote>onifconsole</quote>
	has been added to <filename>/etc/ttys</filename>.  This allows
	the system to provide a login prompt via serial console if the
	device is an active kernel console, otherwise it is equivalent
	to <literal>off</literal>.</para>

      <para revision="260926">Support for displaying VPD for PCI
	devices via &man.pciconf.8; has been added.</para>

      <para revision="261498">The &man.ping.8; utility has been
	updated to use the Capsicum framework to drop priviliges,
	protecting against malicious network packets.</para>

      <para revision="265229">The &man.ps.1; utility has been
	updated to include the <literal>-J</literal> flag, used to
	filter output by matching &man.jail.8; IDs and names.
	Additionally, argument <literal>0</literal> can be used to
	<literal>-J</literal> to only list processes running on the
	host system.</para>

      <para revision="265249">The &man.top.1; utility has been updated
	to filter by &man.jail.8; ID or name, in followup to the
	&man.ps.1; change in <literal>r265229</literal>.</para>

      <para revision="266209">The &man.pmcstat.8; utility has been
	updated to include a new flag, <literal>-l</literal>, which
	ends event collection after the specified number of
	seconds.</para>

      <para revision="270745">The &man.ps.1; utility has been updated
	to include a new keyword, <quote>tracer</quote>, which
	displays the <acronym>PID</acronym> of the tracing
	process.</para>

      <para revision="271482">Support for adding empty partitions has
	been added to the &man.mkimg.1; utility.</para>

      <para revision="272166">The &man.primes.6; utility has been
	updated to correctly enumerate prime numbers between
	<literal>4295098369</literal> and
	<literal>3825123056546413050</literal>.  Prior to this change,
	it was possible for returned values to be incorrectly
	identified as prime numbers.</para>

      <para revision="272198">The &man.mkimg.1; utility has been
	updated to include three options used to print information
	about &man.mkimg.1; itself:</para>

      <informaltable frame="none" pgwide="0">
	<tgroup cols="2">
	  <colspec colwidth="1*"/>
	  <colspec colwidth="1*"/>
	  <thead>
	    <row>
	      <entry>Option</entry>
	      <entry>Output</entry>
	    </row>
	  </thead>

	  <tbody>
	    <row>
	      <entry><literal>--version</literal></entry>
	      <entry>The current version of the &man.mkimg.1;
		utility</entry>
	    </row>

	    <row>
	      <entry><literal>--formats</literal></entry>
	      <entry>The disk image file formats supported by
		&man.mkimg.1;</entry>
	    </row>

	    <row>
	      <entry><literal>--schemes</literal></entry>
	      <entry>The partition schemes supported by
		&man.mkimg.1;</entry>
	    </row>
	  </tbody>
	</tgroup>
      </informaltable>

      <para revision="272488">Userland &man.ctf.5; support in
	&man.dtrace.1; has been added.  With this change,
	&man.dtrace.1; is able to resolve type info for function and
	<acronym>USDT</acronym> probe arguments, and function return
	values.</para>

      <para revision="274960">The &man.elfdump.1; utility has been
	updated to support capability mode provided by
	&man.capsicum.4;.</para>

      <para revision="275680" contrib="sponsor" sponsor="&ff;">The
	&man.fstyp.8; utility has been added, which is used to
	determine the filesystem on a specified device.</para>

      <para revision="276881">The <literal>libedit</literal> library
	has been updated to support <acronym>UTF</acronym>-8, which
	additionally provides unicode support to &man.sh.1;.</para>

      <para revision="276893" contrib="sponsor" sponsor="&ff;">The
	&man.mkimg.1; utility has been updated to support the
	<acronym>MBR</acronym> <acronym>EFI</acronym> partition
	type.</para>

      <para revision="277166">The &man.ptrace.2; system call has been
	updated include support for Altivec registers on
	&os;/&arch.powerpc;.</para>

      <para revision="278320">A new device control utility,
	&man.devctl.8; has been added, which allows making
	administrative changes to individual devices, such as
	attaching and detaching drivers, and enabling and disabling
	devices.  The &man.devctl.8; utility uses the new
	&man.devctl.3; library.</para>

      <para revision="279122" contrib="sponsor"
	sponsor="&juniper;">The &man.netstat.1; utility has been
	updated to use &man.libxo.3; to optionally generate
	machine-readable output.</para>

      <para revision="279139">A new flag, <literal>-c</literal>, has
	been added to the &man.mkimg.1; utility, which allows
	specifying the capacity of the target disk image.</para>

      <para revision="279315" contrib="sponsor" sponsor="&ff;">The
	<acronym>UEFI</acronym> Secure Boot signing utility,
	&man.uefisign.8; utility has been added.</para>

      <para revision="279571" contrib="sponsor"
	sponsor="&scaleengine;">The &man.freebsd-update.8; utility has
	been updated to prevent fetching updated binary patches when
	a previous upgrade has not been thoroughly completed.</para>

      <para revision="280870">A regression in the &man.libarchive.3;
	library that would prevent a directory from being included in
	the archive when <literal>--one-file-system</literal> is used
	has been fixed.</para>

      <para revision="281311" contrib="sponsor" sponsor="&ff;">The
	&man.ar.1; utility has been updated to set
	<literal>ARCHIVE_EXTRACT_SECURE_SYMLINKS</literal> and
	<literal>ARCHIVE_EXTRACT_SECURE_NODOTDOT</literal> to disallow
	directory traversal when extracting an archive, similar to
	&man.tar.1;.</para>

      <para revision="281617">A race condition in &man.wc.1; that
	would cause final results to be sent to &man.stderr.4; when
	receiving the <literal>SIGINFO</literal> signal has been
	fixed.</para>

      <para revision="282208" contrib="sponsor"
	sponsor="&multiplay;">The &man.chflags.1;, &man.chgrp.1;,
	&man.chmod.1;, and &man.chown.8; utilities now affect symbolic
	links when the <literal>-R</literal> flag is specified, as
	documented in &man.symlink.7;.</para>

      <para revision="282608">The &man.date.1; utility has been
	updated to print the modification time of the file passed as
	an argument to the <literal>-r</literal> flag, improving
	compatibility with the <acronym>GNU</acronym> &man.date.1;
	utility behavior.</para>

      <para revision="283961">The &man.pw.8; utility has been updated
	with a new flag, <literal>-R</literal>, that sets the root
	directory within which the utility will operate.</para>

      <para revision="284297" contrib="sponsor"
	sponsor="&clusterhq;">The &man.lockstat.1; utility has been
	updated with several improvements:</para>

      <itemizedlist>
	<listitem>
	  <para>Spin locks are now reported as the amount of time
	    spinning, instead of loop iterations.</para>
	</listitem>

	<listitem>
	  <para>Reader locks are now recognized as adaptive that can
	    spin on &os;.</para>
	</listitem>

	<listitem>
	  <para>Lock aquisition events for successful reader try-lock
	    events are now reported.</para>
	</listitem>

	<listitem>
	  <para>Spin and block events are now reported before lock
	    acquisition events.</para>
	</listitem>
      </itemizedlist>

      <para revision="284589" contrib="sponsor"
	sponsor="&scaleengine;">The &man.fstyp.8; utility has been
	updated to be able to detect &man.zfs.8; and &man.geli.8;
	filesystems.</para>

      <para revision="284883">The &man.mkimg.1; utility has been
	updated to include support for <literal>NTFS</literal>
	filesystems in both <acronym>MBR</acronym> and
	<acronym>GPT</acronym> partitioning schemes.</para>

      <para revision="285253">The &man.quota.1; utility has been
	updated to include support for <acronym>IPv6</acronym>.</para>

      <para revision="285420">The &man.jexec.8; utility has been
	updated to include a new flag, <literal>-l</literal>, which
	ensures a clean environment in the target jail when used.
	Additionally, &man.jexec.8; will run a shell within the target
	jail when run no commands are specified.</para>

      <para revision="285550">The &man.w.1; utility has been updated
	to display the full IPv6 remote address of the host from which
	a user is connected.</para>

      <para revision="285685">The &man.jail.8; framework has been
	updated to allow mounting &man.linprocfs.5; and
	&man.linsysfs.5; within a jail.</para>

      <para revision="285772" contrib="sponsor"
	sponsor="&emcisilon;">The &man.patch.1; utility has been
	updated to include a new option to the <literal>-V</literal>
	flag, <literal>none</literal>, which disables backup file
	creation when applying a patch.</para>

      <para revision="286010" contrib="sponsor" sponsor="&ff;">The
	&man.ar.1; utility now enables deterministic mode
	(<literal>-D</literal>) by default.  This behavior can be
	disabled by specifying the <literal>-U</literal> flag.</para>

      <para revision="286289" contrib="sponsor"
	sponsor="&scaleengine;">The &man.xargs.1; utility has been
	updated to allow specifying <literal>0</literal> as an
	argument to the <literal>-P</literal> (parallel mode) flag,
	which allows creating as many concurrent processes as
	possible.</para>

      <para revision="286795">The &man.patch.1; utility has been
	updated to remove the automatic checkout feature.</para>

      <para revision="287197" contrib="sponsor"
	sponsor="&netflix;, &nginx;">The wireless network stack has
	been modified to no longer show physical wireless devices by
	default.  In order to view available wireless devices on the
	system, run <literal>sysctl net.wlan.devices</literal>.</para>

      <para revision="287473" contrib="sponsor" sponsor="&gandi;">A
	new utility, &man.sesutil.8;, has been added, which is used
	to manage &man.ses.4; (<acronym>SCSI</acronym> Environmental
	Services) devices.</para>

      <para revision="287522">The &man.pciconf.8; utility has been
	updated to use the PCI ID database from the <filename
	  role="package">misc/pciids</filename> package, if present,
	falling back to the PCI ID database in the &os; base
	system.</para>

      <para revision="289315" contrib="sponsor" sponsor="&dell;">The
	resolver library has been updated to reload
	<filename>/etc/resolv.conf</filename> if the modification time
	has changed.</para>

      <para revision="297678">The &man.uuencode.1; utility has been
	updated to include a new flag, <literal>-r</literal>, which
	when used will generate raw output similar the
	&man.uudecode.1; <literal>-r</literal> flag.</para>

      <para revision="300738">By default the &man.ifconfig.8; utility
	will set the default regulatory domain to
	<literal>FCC</literal> on wireless interfaces.  As a result,
	newly created wireless interfaces with default settings will
	have less chance to violate country-specific
	regulations.</para>

      <para revision="302558">A bug in the &man.ul.1; utility that
	caused lines to be truncated at 512 characters has been
	fixed.</para>
    </sect2>

    <sect2 xml:id="userland-contrib">
      <title>Contributed Software</title>

      <para revision="275718">The <application>binutils</application>
	suite of utilities has been updated to include upstream
	patches that add new relocations for &arch.powerpc;
	support.</para>

      <para revision="300698" contrib="sponsor" sponsor="&ff;">The
	<application>ELF Tool Chain</application> has been updated to
	upstream revision r3477.</para>

      <para revision="276551">The <application>texinfo</application>
	utility and <literal>info</literal> pages were removed from
	the base system.  The <filename
	  role="package">print/texinfo</filename> port should be
	installed on systems where <literal>info</literal> pages are
	needed.</para>

      <para revision="276796" contrib="sponsor" sponsor="&ff;">The ELF
	object manipulation tools
	<application>addr2line</application>,
	<application>c++filt</application>,
	<application>objcopy</application>,
	<application>nm</application>,
	<application>readelf</application>,
	<application>size</application>,
	<application>strip</application>, and
	<application>strings</application> were switched to the
	versions from the ELF Tool Chain project.</para>

      <para revision="278433">The &man.xz.1; utility has been updated
	to support multi-threaded compression.</para>

      <para revision="281373">The &man.nvi.1; editor and related
	utilities have been updated to version 2.1.3.</para>

      <para revision="281806">The &man.wpa.supplicant.8; and
	&man.hostapd.8; utilities have been updated to version
	2.4.</para>

      <para revision="284254"><application>bmake</application> has
	been updated to version 20150606.</para>

      <para revision="285229"><application>Sendmail</application> has
	been updated to 8.15.2.  Starting with &os;&nbsp;11.0 and
	sendmail 8.15, sendmail uses uncompressed IPv6 addresses by
	default, i.e., they will not contain <quote>::</quote>.  For
	example, instead of <quote>::1</quote>, it will be
	<quote>0:0:0:0:0:0:0:1</quote>.  This permits a zero subnet to
	have a more specific match, such as different map entries for
	IPv6:0:0 versus IPv6:0.  This change requires that
	configuration data (including maps, files, classes, custom
	ruleset, etc.) must use the same format, so make certain such
	configuration data is in place before upgrading.  As a very
	simple check search for patterns like 'IPv6:[0-9a-fA-F:]*::'
	and 'IPv6::'.  To return to the old behavior, set the m4
	option <literal>confUSE_COMPRESSED_IPV6_ADDRESSES</literal> or
	the cf option
	<literal>UseCompressedIPv6Addresses</literal>.</para>

      <para revision="285275">The &man.tcpdump.1; utility has been
	updated to version 4.7.4.</para>

      <para revision="285642" contrib="sponsor" sponsor="&dell;">The
	&man.ssh.1; utility has been updated to re-implement hostname
	canonicalization before locating the host in
	<filename>known_hosts</filename>.</para>

      <para revision="285972">The &man.libarchive.3; library has been
	updated to properly skip a sparse file entry in a &man.tar.1;
	file, which would previously produce errors.</para>

      <para revision="286503">The <application>apr</application>
	library used by &man.svnlite.1; has been updated to version
	1.5.2.</para>

      <para revision="286505">The <application>serf</application>
	library used by &man.svnlite.1; has been updated to version
	1.3.8.</para>

      <para revision="287168">The &man.acpi.4; subsystem has been
	updated to version 20150818.</para>

      <para revision="287917">The &man.unbound.8; utility has been
	updated to version 1.5.4.</para>

      <para revision="288303">The &man.nc.1; utility has been updated
	to the OpenBSD 5.8 version.</para>

      <para revision="290697">Timezone data files have been updated to
	version 2015g.</para>

      <para revision="291125">The &man.xz.1; utility has been updated
	to version 5.2.2.</para>

      <para revision="292257">The &man.mandoc.1; utility has been
	updated to version 20160116.</para>

      <para revision="292432"><application>OpenBSM</application> has
	been updated to version 1.2 alpha 4.</para>

      <para revision="296417"><application>Clang</application> has
	been updated to version 3.8.0.</para>

      <para revision="296417"><application>LLVM</application> has
	been updated to version 3.8.0.</para>

      <para revision="296417"><application>LLDB</application> has
	been updated to version 3.8.0.</para>

      <para revision="296417"><application>libc++</application> has
	been updated to version 3.8.0.</para>

      <para revision="296417">The
	<application>compiler_rt</application> utility has been
	updated to version 3.8.0.</para>

      <para revision="296190" contrib="sponsor" sponsor="&ff;">The
	&man.resolvconf.8; utility has been updated to version
	3.7.3.</para>

      <para revision="296633"><application>OpenSSH</application> has
	been updated to 7.2p2.</para>

      <para revision="297276">The &man.byacc.1; utility has been
	updated to version 20160324.</para>

      <para revision="298161">The <application>sqlite3</application>
	library used by &man.svnlite.1; and &man.kerberos.8; has been
	updated to version 3.12.1.</para>

      <para revision="298166"><application>libucl</application> has
	been updated to version 0.8.0.</para>

      <para revision="298845">The &man.svnlite.1; utility has been
	updated to version 1.9.4.</para>

      <para revision="298998"><application>OpenSSL</application> has
	been updated to version 1.0.2h.</para>

      <para revision="300879"><application>ACPICA</application> has
	been updated to version 20160527.</para>

      <para revision="301169" contrib="sponsor" sponsor="&ff;">The
	&man.libblacklist.3; library and applications have been ported
	from the NetBSD Project.  Packet filtering support for the
	&man.pf.4; packet filtering systems has been implemented.  The
	<application>blacklist</application> system provides the
	<application>blacklistd</application> daemon, the helper
	script <application>blacklistd-helper</application> to make
	changes to the running packet filter system and the
	<application>blacklistctl</application> control program.
	A selection of system daemons, including:
	<application>fingerd</application>,
	<application>ftpd</application>,
	<application>rlogind</application>, and
	<application>rshd</application> have been modified to support
	sending notifications to the
	<application>blacklistd</application> daemon.</para>

      <para revision="301718">The &man.jemalloc.3; library has been
	updated to version 4.2.1.</para>

      <para revision="301736" contrib="sponsor" sponsor="&ff;">Support
	for the &man.ipfw.4; packet filter has been added to the
	<application>blacklistd-helper</application> script.</para>

      <para revision="301843" contrib="sponsor" sponsor="&ff;">Support
	for the &man.ipfilter.4; packet filter has been added to the
	<application>blacklistd-helper</application> script.</para>

      <para revision="302221">The &man.file.1; utility has been
	updated to version 5.28.</para>

      <para revision="303716">SSHv1 support has been removed from
	<application>OpenSSH</application>.</para>

      <para revision="303719">Support for DSA is disabled by default
	in <application>OpenSSH</application>.</para>
    </sect2>

    <sect2 xml:id="userland-installer">
      <title>Installation and Configuration Tools</title>

      <para revision="271539">The &man.bsdinstall.8; partition editor
	and &man.sade.8; utility have been updated to include native
	<acronym>ZFS</acronym> support.</para>

      <para revision="272274">The &os; installation utility,
	&man.bsdinstall.8;, has been updated to set the
	<literal>canmount</literal> &man.zfs.8; property to
	<literal>off</literal> for the <filename
	  class="directory">/var</filename> dataset, preventing the
	contents of directories within <filename
	  class="directory">/var</filename> from conflicting when
	using multiple boot environments, such as that provided by
	<filename role="package">sysutils/beadm</filename>.</para>

      <para revision="274394">The &man.bsdconfig.8; utility has been
	updated to skip the initial &man.tzsetup.8;
	<acronym>UTC</acronym> versus wall-clock time prompt when run
	in a virtual machine, determined when the
	<literal>kern.vm_guest</literal> &man.sysctl.8; is set to
	<literal>1</literal>.</para>

      <para revision="275874">The &man.bsdinstall.8; utility has been
	updated to use the new &man.dpv.3; library to display progress
	when extracting the &os; distributions.</para>

      <para revision="285557" contrib="sponsor"
	sponsor="&scaleengine;">Support for detecting and implementing
	aligning partitions on 1Mb boundaries has been added to
	&man.bsdinstall.8;.</para>

      <para revision="285679" contrib="sponsor"
	sponsor="&scaleengine;">Support for detecting and implementing
	a workaround for various laptops and motherboards that do not
	boot properly from <acronym>GPT</acronym>-partitioned disks
	has been added to &man.bsdinstall.8;.  Additionally, the
	<literal>active</literal> flag will be set on the partition
	when needed.</para>

      <para revision="285679" contrib="sponsor"
	sponsor="&scaleengine;">Support for selecting the partitioning
	scheme when installing on the <acronym>UFS</acronym>
	filesystem has been added to &man.bsdinstall.8;.</para>

      <para revision="298243">The &man.bsdinstall.8; utility now
	supports
	a &quot;<acronym>BIOS</acronym>+<acronym>UEFI</acronym> option
	during installation, supporting systems with
	<acronym>UEFI</acronym> or
	<acronym>BIOS</acronym>/<acronym>CSM</acronym>
	capability.</para>

      <para revision="303447">The &man.bsdinstall.8; utility has been
	updated to include various system hardening options during
	installation.</para>
    </sect2>

    <sect2 xml:id="userland-rc">
      <title><filename class="directory">/etc/rc.d</filename>
	Scripts</title>

      <para revision="270676">The &man.rc.8; subsystem has been
	updated to allow configuring services in <filename
	  class="directory">&dollar;{LOCALBASE}/etc/rc.conf.d/</filename>.
	If <literal>LOCALBASE</literal> is unset, it defaults to
	<filename class="directory">/usr/local</filename>.</para>

      <para revision="273955">A new &man.rc.8; script,
	<filename>growfs</filename>, has been added, which will resize
	the root filesystem to fill the device on boot if
	<filename>/firstboot</filename> exists and
	<literal>growfs_enable</literal> is enabled in
	&man.rc.conf.5;.</para>

      <para revision="275299">The <filename>mrouted</filename>
	&man.rc.8; script has been removed from the base system.  An
	equivalent script is available from the <filename
	  role="package">net/mrouted</filename> port.</para>

      <para revision="287576" contrib="sponsor"
	sponsor="&scaleengine;">The &man.service.8; utility has been
	updated to honor entries within <filename
	  class="directory">/etc/rc.conf.d/</filename>.</para>

      <para revision="298515">Two new subcommands have been added to
	the &man.rc.8; subsystem.  <command>describe</command> shows
	an rc script's description, and
	<command>extracommands</command> shows any non-standard
	commands present in an rc script, like
	<command>reload</command>, <command>configtest</command>, or
	<command>keygen</command>.</para>
    </sect2>

    <sect2 xml:id="userland-periodic">
      <title><filename class="directory">/etc/periodic</filename>
	Scripts</title>

      <para revision="271321">The daily &man.periodic.8; script
	<filename>110.clean-tmps</filename> has been updated to avoid
	crossing filesystem mount boundaries when cleaning files in
	<filename class="directory">/tmp</filename>.</para>

      <para revision="277216" contrib="sponsor" sponsor="&ff;">A new
	&man.periodic.8; script,
	<filename>510.status-world-kernel</filename>, has been added,
	which evaluates the running userland and kernel versions from
	the &man.uname.1; <literal>-U</literal> and
	<literal>-K</literal> arguments, and prints an error if the
	system userland and kernel are not in sync.</para>
    </sect2>

    <sect2 xml:id="userland-libraries">
      <title>Runtime Libraries and API</title>

      <para revision="265995">The Blowfish &man.crypt.3; default
	format has been changed to
	<literal>&dollar;2b&dollar;</literal>.</para>

      <para revision="268461">The &man.readline.3; library is now
	statically linked in software within the base system, and the
	shared library is no longer installed, allowing the Ports
	Collection to use a modern version of the library.</para>

      <para revision="272273">The &man.strptime.3; library has been
	updated to add support for <acronym>POSIX</acronym>-2001
	features <literal>%U</literal> and
	<literal>%W</literal>.</para>

      <para revision="272842,272848" contrib="sponsor"
	sponsor="&ff;">The &man.dl.iterate.phdr.3; library has been
	changed to always return the path name of the
	<acronym>ELF</acronym> object in the
	<literal>dlpi_name</literal> structure member.</para>

      <para revision="273562" contrib="sponsor"
	sponsor="&juniper;">The &man.libxo.3; library has been
	imported to the base system.</para>

      <para revision="273806" contrib="sponsor" sponsor="&chelsio;">A
	userland library for Chelsio Terminator 5 based iWARP cards
	has been added, allowing userland <acronym>RDMA</acronym>
	applications to work over compatible
	<acronym>NIC</acronym>s.</para>

      <para revision="274987">The &man.gpio.3; library has been added,
	providing a wrapper around the &man.gpio.4; kernel
	interface.</para>

      <para revision="275800" contrib="sponsor" sponsor="&ff;">The
	&man.procctl.2; system call has been updated to include
	a facility for non-&man.init.8; processes to be declared as
	the reaper of child processes and their decendants.</para>

      <para revision="277610">The <literal>futimens()</literal> and
	<literal>utimensat()</literal> system calls have been
	added.  See &man.utimensat.2; for more information.</para>

      <para revision="278934">The &man.elf.3; compile-time dependency
	has been removed from <filename>dtri.o</filename>, which
	allows adding <application>DTrace</application> probes to
	userland applications and libraries without also linking
	against &man.elf.3;.</para>

      <para revision="279186">The &man.setmode.3; function has been
	updated to consistently set <literal>errno</literal> on
	failure.</para>

      <para revision="279663">The &man.qsort.3;-related functions have
	been updated to be able to handle 32-bit aligned data on
	64-bit platforms, also providing a significant improvement in
	32-bit workloads.</para>

      <para revision="281130">Several standard include headers have
	been updated to make use of <application>gcc</application>
	attributes, such as <literal>__result_use_check()</literal>,
	<literal>__alloc_size()</literal>, and
	<literal>__nonnull()</literal>.</para>

      <para revision="281845">Support for file verification in
	<acronym>MAC</acronym> has been added.</para>

      <para revision="282973" contrib="sponsor" sponsor="&ff;">The
	<literal>libgomp</literal> library is now only built when
	building <acronym>GCC</acronym> from the base system.  An
	up-to-date version is available in the Ports Collection as
	<filename
	  role="package">devel/libiomp5-devel</filename>.</para>

      <para revision="282988">The <filename>stdlib.h</filename> and
	<filename>malloc.h</filename> headers have been updated to
	make use of the <application>gcc</application>
	<literal>alloc_align()</literal> attribute.</para>

      <para revision="284483" contrib="sponsor"
	sponsor="&scaleengine;">The Blowfish &man.crypt.3; library
	has been updated to support &dollar;2y&dollar; hashes.</para>

      <para revision="285277">The &man.execl.3; and &man.execlp.3;
	library functions have been updated to use the
	<literal>__sentinel</literal> <application>gcc</application>
	attribute.</para>
    </sect2>

    <sect2 xml:id="userland-abi">
      <title>ABI Compatibility</title>

      <para revision="271982">The &linux; compatibility version has
	been updated to <literal>2.6.18</literal>.  The
	<literal>compat.linux.osrelease</literal> &man.sysctl.8; is
	evaluated when building the <filename
	  role="package">emulators/linux-c6</filename> and related
	ports.</para>

      <para revision="288669">The stack protector has been upgraded to
	the "strong" level, elevating the protection against buffer
	overflows.  While this significantly improves the security of
	the system, extensive testing was done to ensure there are no
	measurable side effects in performance or
	functionality.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="kernel">
    <title>Kernel</title>

    <para>This section covers changes to kernel configurations, system
      tuning, and system control parameters that are not otherwise
      categorized.</para>

    <sect2 xml:id="kernel-bugfix">
      <title>Kernel Bug Fixes</title>

      <para revision="265876">A kernel bug that inhibited proper
	functionality of the <literal>dev.cpu.0.freq</literal>
	&man.sysctl.8; on &intel; processors with Turbo
	Boost&nbsp;&trade; enabled has been fixed.</para>

      <para revision="271697">Support for &man.dtrace.1; stack tracing
	has been fixed for &os;/&arch.powerpc;, using the
	<literal>trapexit()</literal> and
	<literal>asttrapexit()</literal> functions instead of checking
	within addressed kernel space.</para>

      <para revision="271917">A kernel panic triggered when destroying
	a &man.vnet.9; &man.jail.8; configured with &man.gif.4; has
	been fixed.</para>

      <para revision="271918">A kernel panic triggered when destroying
	a &man.vnet.9; &man.jail.8; configured with &man.gre.4; has
	been fixed.</para>

      <para revision="272089">A bug in &man.ipfw.4; that could
	potentially lead to a kernel panic when using &man.dummynet.4;
	at layer 2 has been fixed.</para>

      <para revision="280930" contrib="sponsor" sponsor="&mitail;">The
	kernel <acronym>RPC</acronym> has been updated to include
	several enhancements:</para>

      <itemizedlist>
	<listitem>
	  <para>The 45 MiB limit on requests queued for
	    &man.nfsd.8; threads has been removed.</para>
	</listitem>

	<listitem>
	  <para>Avoids unnecessary throttling by not deferring
	    accounting for completed requests.</para>
	</listitem>

	<listitem>
	  <para>Fixes an integer overflow and signedness bugs.</para>
	</listitem>
      </itemizedlist>

      <para revision="281261">Support for &man.dtrace.1; has been
	added for the PowerPC Book-E&nbsp;&trade;.</para>

      <para revision="287886" contrib="sponsor"
	sponsor="&multiplay;">The &man.kqueue.2; system call has been
	updated to handle write events to files larger than 2
	gigabytes.</para>
    </sect2>

    <sect2 xml:id="kernel-config">
      <title>Kernel Configuration</title>

      <para revision="266531">The <literal>IMAGACT_BINMISC</literal>
	kernel configuration option has been enabled by default,
	which enables application execution through emulators, such
	as <application>QEMU</application> via
	&man.binmiscctl.8;.</para>

      <para revision="268045">The <literal>VT</literal> kernel
	configuration file has been removed, and the &man.vt.4;
	driver is included in the <literal>GENERIC</literal> kernel.
	To enable &man.vt.4;, enter <literal>set kern.vty=vt</literal>
	at the &man.loader.8; prompt during boot, or add
	<literal>kern.vty=vt</literal> to &man.loader.conf.5; and
	reboot the system.</para>

      <para revision="277904">The &man.config.8; utility has been
	updated to allow using a non-standard <filename
	  class="directory">src/</filename> tree, specified as an
	argument to the <literal>-s</literal> flag.</para>

      <para revision="277990">The &os;/&arch.powerpc64; kernel now
	builds as a position-independent executable, allowing the
	kernel to be loaded into and run from any physical or virtual
	address.</para>

      <important>
	<para>This change requires an update to &man.loader.8;.
	  The userland and kernel must be updated before rebooting the
	  system.</para>
      </important>

      <para revision="278338">A new module for creating
	<filename>rpi.dtb</filename> has been added for the Raspberry
	Pi.</para>

      <para revision="278340" arch="arm">The
	<filename>rpi.dtb</filename> module is now installed to
	<filename class="directory">/boot/dtb/</filename> by
	default for the Raspberry Pi system.</para>

      <para revision="279189" contrib="sponsor" sponsor="&ff;">Kernel
	support for Vector-Scalar eXtension (<acronym>VSX</acronym>)
	found on POWER7 and POWER8 hardware has been added.</para>

      <para revision="279252" contrib="sponsor" sponsor="&ff;">The
	&man.pmap.9; implementation for 64-bit &powerpc; processors
	has been overhaulded to improve concurrency.</para>

      <para revision="279824">A new module for creating the
	<filename>dtb</filename> module for ARM AM335x systems has
	been added.</para>

      <para revision="281495" contrib="sponsor" sponsor="&ff;">The
	<literal>PAE_TABLES</literal> kernel configuration option has
	been added for &os;/&arch.i386;, which instructs &man.pmap.9;
	to use <acronym>PAE</acronym> format for page tables while
	maintaining a 32-bit physical address size elsewhere in the
	kernel.  The use of this option can enhance application-level
	security by enabling the creation of <quote>no execute</quote>
	mappings on modern &arch.i386; processors.  Unlike the
	<literal>PAE</literal> option, <literal>PAE_TABLES</literal>
	preserves kernel binary interface (<acronym>KBI</acronym>)
	compatibility with non-<literal>PAE</literal> kernels,
	allowing non-<literal>PAE</literal> kernel modules and drivers
	to work with a <literal>PAE_TABLES</literal>-enabled kernel.
	Additionally, system limits are tuned for 4GB maximum
	<acronym>RAM</acronym>, avoiding kernel virtual address space
	(<acronym>KVA</acronym>) exhaustion.</para>

      <para revision="282215">The <literal>SIFTR</literal> kernel
	configuration has been added, allowing building &man.siftr.4;
	statically into the kernel.</para>

      <para revision="282731">The ARM boot loader,
	<filename>ubldr</filename>, is now relocatable.  In addition,
	<filename>ubldr.bin</filename> is now created during build
	time, which is a stripped binary with an entry point of
	<literal>0</literal>, providing the ability to specify the
	load address by running <literal>go
	  &dollar;{loadaddr}</literal> in
	<literal>u-boot</literal>.</para>

      <para revision="282921" contrib="sponsor" sponsor="&intelcorp;"
	arch="amd64,i386">The &man.nvd.4; and &man.nvme.4; drivers are
	now included in the <filename>GENERIC</filename> kernel
	configuration by default.</para>

      <para revision="283959" contrib="sponsor"
	  sponsor="&limelight;">A new kernel configuration option,
	<literal>EM_MULTIQUEUE</literal>, has been added which enables
	multi-queue support in the &man.em.4; driver.</para>

      <note>
	<para>Multi-queue support in the &man.em.4; driver is not
	  officially supported by &intel;.</para>
      </note>

      <para revision="285142" contrib="sponsor"
	sponsor="&netgate;">The <filename>GENERIC</filename> kernel
	configuration has been updated to include the
	<literal>IPSEC</literal> option by default.</para>

      <para revision="285387" contrib="sponsor"
	sponsor="&norse;, &dell;">Initial <acronym>NUMA</acronym>
	affinity and policy configuration has been added.  See
	&man.numactl.1;, and &man.numa.getaffinity.2;, for usage
	details.</para>

      <note>
	<para>If the system BIOS generates an invalid ACPI SRAT table,
	  the kernel will ignore it, effectively disabling
	  <acronym>NUMA</acronym>.  If dmesg shows &quot;SRAT:
	  Duplicate local APIC ID&quot;, try updating the BIOS to fix
	  NUMA support.</para>
      </note>

      <para revision="285307">Support for running CloudABI executables
	on amd64 and arm64 has been added.  CloudABI is a runtime
	environment that uses capability-based security exclusively,
	similar to &man.capsicum.4; always being enabled.  It allows
	designing, implementing and testing strongly sandboxed
	applications more easily.</para>

      <para revision="286231">The &man.pms.4; driver has been added
	to the <filename>GENERIC</filename> kernel configuration for
	supported architectures.</para>

      <para revision="287306">The <filename>CUBIEBOARD2</filename>
	kernel configuration has been renamed to
	<filename>A20</filename> to add support for other boards with
	the <literal>A20</literal> processor, such as the Banana
	Pi.</para>

      <para revision="288176" contrib="sponsor" sponsor="&ff;">Kernel
	debugging symbols are now installed to <filename
	  class="directory">/usr/lib/debug/boot/kernel/</filename>.
	To retain the previous behavior, add
	<literal>KERN_DEBUGDIR=""</literal> to
	&man.src.conf.5;.</para>

      <para revision="296277" contrib="sponsor"
	  sponsor="&chelsio;">Support for POSIX asynchronous I/O is
	now included in the kernel by default.  The
	<literal>VFS_AIO</literal> kernel option and
	<literal>aio.ko</literal> kernel module have been removed.
	Asynchronous I/O operations on sockets, local files, and
	disk devices are permitted by default.  However, operations
	on other file types are disabled.  See the &man.aio.4;
	manual page for more details.</para>

      <para revision="301565" contrib="sponsor" sponsor="&ff;"
	  arch="arm64">&arch.arm64; has been switched over to using
	<literal>INTRNG</literal> by default.</para>
    </sect2>

    <sect2 xml:id="kernel-sysctl">
      <title>System Tuning and Controls</title>

      <para revision="275140" contrib="sponsor" sponsor="&ff;">The
	&man.hwpmc.4; default and maximum callchain depths have been
	increased.  The default has been increased from 16 to 32, and
	the maximum increased from 32 to 128.</para>

      <para revision="279361">The <literal>kern.osrelease</literal>
	and <literal>kern.osreldate</literal> are now configurable
	&man.jail.8; parameters.</para>

      <para revision="280308,280949" contrib="sponsor"
	sponsor="&ix;, &ff;">The &man.devfs.5; device filesystem has
	been changed to update timestamps for read/write operations
	using seconds precision.  A new &man.sysctl.8;,
	<literal>vfs.devfs.dotimes</literal> has been added, which
	when set to a non-zero value, enables default precision
	timestamps for these operations.</para>

      <para revision="282213" contrib="sponsor" sponsor="&ff;">A new
	&man.sysctl.8;, <literal>kern.racct.enable</literal>, has been
	added, which when set to a non-zero value allows using
	&man.rctl.8; with the <literal>GENERIC</literal> kernel.
	A new kernel configuration option,
	<literal>RACCT_DISABLED</literal> has also been added.</para>

      <para revision="282901" contrib="sponsor" sponsor="&ff;">The
	<literal>GENERIC</literal> kernel configuration now includes
	<literal>RACCT</literal> and <literal>RCTL</literal> by
	default.</para>

      <note>
	<para>To enable <literal>RACCT</literal> and
	  <literal>RCTL</literal> on a system using the
	  <literal>GENERIC</literal> kernel configuration, add
	  <literal>kern.racct.enable=1</literal> to
	  &man.loader.conf.5;, and reboot the system.</para>
      </note>

      <para revision="283136" contrib="sponsor"
	sponsor="&limelight;">A new &man.sysctl.8;,
	<literal>net.inet.tcp.hostcache.purgenow</literal>, has
	been added, which when set to <literal>1</literal> during
	runtime will flush all
	<literal>net.inet.tcp.hostcache</literal> entries.</para>

      <para revision="285524">A new &man.sysctl.8;,
	<literal>hw.model</literal>, has been added, which displays
	<acronym>CPU</acronym> model information.</para>

      <para revision="286591">The &man.uart.4; driver has been
	updated to allow tuning pulses per second captured in the
	CTS line during runtime, whereas previously only the DCD line
	could be used without rebuilding the kernel.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="drivers">
    <title>Devices and Drivers</title>

    <para>This section covers changes and additions to devices and
      device drivers since &release.prev;.</para>

    <sect2 xml:id="drivers-device">
      <title>Device Drivers</title>

      <para revision="260903">Support for GPS ports has been added to
	&man.uhso.4;.</para>

      <para revision="265132">The &man.full.4; device has been added,
	and the <literal>lindev(4)</literal> device has been removed.
	Prior to this change, <literal>lindev(4)</literal> provided
	only the <filename>/dev/full</filename> character device,
	returning <literal>ENOSPC</literal> on write attempts.  As
	this device is not specific to &linux;, a native &os; version
	has been added.</para>

      <para revision="271705">Hardware context support has been
	added to the <literal>drm/i915</literal> driver, adding
	support for <application>Mesa</application> 9.2 and
	later.</para>

      <para revision="273178">The &man.vt.4; driver has been updated,
	replacing the bitmapped <literal>kern.vt.spclkeys</literal>
	&man.sysctl.8; with individual
	<literal>kern.vt.kbd_*</literal> variants.</para>

      <para revision="273598">The &man.hpet.4; driver has been updated
	to create a
	<filename>/dev/hpet<replaceable>N</replaceable></filename>
	device, providing access to <acronym>HPET</acronym> from
	userspace.</para>

      <para revision="280183">The <literal>drm</literal> code has
	been updated to match &linux; version 3.8.13.</para>

      <para revision="281440">The &man.psm.4; driver has been updated
	to include improved support for newer Synaptics&nbsp;&reg;
	touchpads and the ClickPad&nbsp;&reg; mouse on newer
	Lenovo&nbsp;&trade; laptops.</para>

      <para revision="282783">Support for the Freescale
	<acronym>PCI</acronym> Root Complex device has been
	added to &os;/&arch.powerpc;.</para>

      <para revision="285876">The &man.cyapa.4; driver has been added,
	supporting the Cypress APA I2C trackpad.</para>

      <para revision="285883">The &man.isl.4; driver has been added,
	supporting the Intersil I2C ISL29018 digital ambient light
	sensor.</para>
    </sect2>

    <sect2 xml:id="drivers-storage">
      <title>Storage Drivers</title>

      <para revision="265236" contrib="sponsor"
	sponsor="&lsi;, &spectralogic;" sponsorurl="">The &man.mpr.4;
	device has been added, providing support for LSI Fusion-MPT
	3 12Gb SCSI/SATA controllers.</para>

      <para revision="265555" contrib="sponsor"
	  sponsor="&lsi;">The &man.mrsas.4; driver has been added,
	providing support for LSI MegaRAID SAS controllers.  The
	&man.mfi.4; driver will attach to the controller, by default.
	To enable &man.mrsas.4; add
	<literal>hw.mfi.mrsas_enable=1</literal> to
	<filename>/boot/loader.conf</filename>, which turns off
	&man.mfi.4; device probing.</para>

      <note>
	<para>At this time, the &man.mfiutil.8; utility and the &os;
	  version of <application>MegaCLI</application> and
	  <application>StorCli</application> do not work with
	  &man.mrsas.4;.</para>
      </note>

      <para revision="275461" contrib="sponsor" sponsor="&ix;">The
	&man.ctl.4; subsystem has been updated, increasing the ports
	limit from <literal>128</literal> to <literal>256</literal>,
	and <acronym>LUN</acronym> limit from <literal>256</literal>
	to <literal>1024</literal>.</para>

      <para revision="276526">The <literal>asr(4)</literal> driver has
	been removed, and is no longer supported.</para>

      <para revision="281387">The &man.hptnr.4; driver has been
	updated to version 1.1.1.</para>

      <para revision="285662">The &man.pms.4; driver has been added,
	providing support for the PMC Sierra line of
	<acronym>SAS</acronym>/<acronym>SATA</acronym> host bus
	adapters.</para>

      <para revision="287117" contrib="sponsor"
	sponsor="&emcisilon;">The &man.ioat.4; driver has been added,
	providing support for the <acronym>PSE</acronym> (Platform
	Storage Extension).</para>

      <para revision="287621" contrib="sponsor" sponsor="&ix;">The
	<acronym>CTL</acronym> High Availability implementation has
	been rewritten.</para>

      <para revision="288310">The &man.ctl.4; driver has been updated
	to support CD-ROM and removable devices.</para>

      <para contrib="sponsor" sponsor="&ix;">The &man.isp.4; driver
	has been updated and improved: added support for 16Gbps FC
	cards, improved target mode support, completed Multi-ID (NPIV)
	functionality.</para>
    </sect2>

    <sect2 xml:id="drivers-network">
      <title>Network Drivers</title>

      <para revision="258830">Support for Broadcom chipsets BCM57764,
	BCM57767, BCM57782, BCM57786 and BCM57787 has been added to
	&man.bge.4;.</para>

      <para revision="261975">The deprecated nve(4) driver has been
	removed.  Users of NVIDIA nForce MCP network adapters are
	advised to use the &man.nfe.4; driver instead, which has been
	the default driver for this hardware since
	&os;&nbsp;7.0.</para>

      <para revision="264601" contrib="sponsor"
	sponsor="&darpa_afrl;">The <literal>if_nf10bmac(4)</literal>
	device has been added, providing support for NetFPGA-10G
	Embedded CPU Ethernet Core.</para>

      <note>
	<para>The <literal>if_nf10bmac(4)</literal> driver operates on
	  the FPGA, and is not suited for the PCI host
	  interface.</para>
      </note>

      <para revision="265348" contrib="sponsor"
	sponsor="&netgate;">The &man.ath.hal.4; driver has been
	updated to support the Atheros AR1111 chipset.</para>

      <para revision="266770">The &man.iwn.4; driver was added,
	providing support for the &intel; Centrino&trade; Wireless-N
	105 and 135 chipsets.</para>

      <para revision="266757" contrib="sponsor"
	sponsor="&chelsio;">Support for the &man.cxgbe.4; Terminator
	5 (T5) 10G/40G cards has been added to &man.netmap.4;.</para>

      <para revision="272730">The &man.alc.4; driver has been updated
	to support AR816x and AR817x ethernet controllers.</para>

      <para revision="272906">The &man.pf.4; packet filter default
	hash has been changed from <literal>Jenkins</literal> to
	<literal>Murmur3</literal>, providing a 3-percent performance
	increase in packets-per-second.</para>

      <para revision="273331">The &man.vxlan.4; driver has been added,
	which creates a virtual Layer 2 (Ethernet) network overlaid in
	a Layer 3 (IP/UDP) network.  The &man.vxlan.4; driver is
	analogous to &man.vlan.4;, but is designed to be better suited
	for large, multiple-tenant datacenter environments.</para>

      <para revision="274246" contrib="sponsor" sponsor="&yandex;">The
	&man.gre.4; driver has been significantly overhauled, and has
	been split into two separate modules, &man.gre.4; and
	&man.me.4;.</para>

      <para revision="278551">The &man.ral.4; driver has been updated
	to support the RT5390 and RT5392 chipsets.</para>

      <para revision="283514" contrib="sponsor"
	sponsor="&solarflare;">The &man.sfxge.4; driver has been
	updated to support Solarflare Flareon Ultra 7000-series
	chipsets.</para>

      <para revision="283923" contrib="sponsor"
	sponsor="&limelight;">The &man.em.4; driver has been updated
	with improved transmission queue hang detection.</para>

      <para revision="284125">The &man.cdce.4; driver has been updated
	to include support for the RTL8153 chipset.</para>

      <para revision="286441">The &man.iwm.4; driver has been imported
	from OpenBSD, providing support for &intel; 3160/7260/7265
	wireless chipsets.</para>

      <para revision="286829" contrib="sponsor"
	sponsor="&limelight;">The &man.em.4; driver has been updated
	to allow disabling <acronym>CRC</acronym> stripping.</para>

      <para revision="287222">The &man.pf.4; implementation has been
	updated to remove support for the <literal>scrub fragment
	  crop|drop-ovl</literal> filtering rule.  Systems with this
	rule in &man.pf.conf.5; will implicitly be converted to the
	<literal>scrub fragment reassemble</literal> filtering rule,
	without necessary intervention.</para>

      <para revision="288654">The &man.lagg.4; driver has been updated
	to remove support for the <literal>fec</literal>
	protocol.</para>

      <para revision="300779">The &man.dummynet.4; driver has been
	updated to include support for <acronym>AQM</acronym> (Active
	Queue Management), adding support for <acronym>PIE</acronym>
	(Proportional Integral controller Enhanced) and
	<acronym>FQ-PIE</acronym> (Fair Queueing Proportional Integral
	controller Enhanced).</para>
    </sect2>
  </sect1>

  <sect1 xml:id="hardware">
    <title>Hardware Support</title>

    <para>This section covers general hardware support for physical
      machines, hypervisors, and virtualization environments, as well
      as hardware changes and updates that do not otherwise fit in
      other sections of this document.</para>

    <sect2 xml:id="hardware-support">
      <title>Hardware Support</title>

      <para revision="268303">The &man.asmc.4; driver has been
	updated to support the &apple;&nbsp;MacMini 3,1.</para>

      <para revision="268351">Support for &os;/ia64 (Itanium) has been
	dropped as of &os;&nbsp;11.</para>

      <para revision="274386">An issue that could cause a system to
	hang when entering <acronym>ACPI</acronym>
	<literal>S3</literal> state (suspend to
	<acronym>RAM</acronym>) has been corrected in the &man.acpi.4;
	and &man.pci.4; drivers.</para>

      <para revision="274733">The power management unit
	subsystem has been updated to support power button events on
	certain PowerPC hardware, such as aluminum
	PowerBook&nbsp;&reg;.</para>

      <para revision="275171,275190">The &man.hwpmc.4; driver has been
	updated to correct performance counter sampling on PowerPC G4
	(MPC74xxx) and G5 class processors.</para>

      <para revision="275732" contrib="sponsor"
	sponsor="&ff;,&netgate;">The
	<application>OpenCrypto</application> framework has been
	updated to include <literal>AES-ICM</literal> and
	<literal>AES-GCM</literal> modes, both of which have also been
	added to the &man.aesni.4; driver.</para>

      <para revision="281713" arch="powerpc">The &man.hwpmc.4;
	driver has been updated to support the Freescale e500
	core.</para>

      <para revision="283766">The &man.ig4.4; driver has been added,
	providing support for the fourth generation &intel;
	<acronym>I2C</acronym> SMBus.</para>

      <para>The &man.uart.4; driver has been updated to support
	<acronym>AMT</acronym> devices on newer systems.</para>

      <para revision="285316" contrib="sponsor" sponsor="&ff;"
	arch="arm64">Initial <acronym>SMP</acronym> support has been
	added to the &os;/&arch.arm64; port.</para>

      <para revision="291292" contrib="sponsor" sponsor="&yandex;">The
	&man.enc.4; driver has updated to allow creating an interface
	via &man.kldload.8; during runtime without requiring
	additional kernel and/or userland changes.</para>

      <para revision="296177">The <literal>dtsec(4)</literal> driver
	for Freescale QorIQ SoCs has been added, supporting P2041,
	P3041, P5010, and P5020 systems.</para>

      <para revision="297001">Freescale PowerQUICC and QorIQ systems
	now support larger address spaces, equivalent to PAE mode on
	&arch.i386;.</para>

      <para revision="297977">The e500mc and e5500 PowerPC cores are
	now supported, supporting most QorIQ systems.</para>

      <para revision="298237"><acronym>SMP</acronym> for Multicore
	Freescale QorIQ systems now works correctly for SoCs with the
	<acronym>AP</acronym> cores in boot holdoff mode (not in
	spinloop wait mode).</para>

      <para revision="299142">Native PCI-express HotPlug support is
	enabled by default on &arch.amd64;, &arch.arm64;, and
	&arch.powerpc;.  This feature has exposed compatibility issues
	on some hardware that result in missing devices or a hang
	during boot.  To work around such issues, run <literal>set
	  hw.pci.enable_pcie_hp=0</literal> in the boot loader, and
	add <literal>hw.pci.enable_pcie_hp=0</literal> to
	<filename>/boot/loader.conf</filename>.</para>
    </sect2>

    <sect2 xml:id="hardware-virtualization">
      <title>Virtualization Support</title>

      <para revision="260410">Support for the <quote>Virtual Interrupt
	  Delivery</quote> feature of &intel;&nbsp;VT-x is enabled if
	supported by the CPU.  This feature can be disabled by running
	<literal>sysctl hw.vmm.vmx.use_apic_vid=0</literal>.
	Additionally, to persist this setting across reboots, add
	<literal>hw.vmm.vmx.use_apic_vid=0</literal> to
	<filename>/etc/sysctl.conf</filename>.</para>

      <para revision="260532">Support for <quote>Posted Interrupt
	  Processing</quote> is enabled if supported by the CPU.  This
	feature can be disabled by running <literal>sysctl
	  hw.vmm.vmx.use_apic_pir=0</literal>.  Additionally, to
	persist this setting across reboots, add
	<literal>hw.vmm.vmx.use_apic_pir=0</literal> to
	<filename>/etc/sysctl.conf</filename>.</para>

      <para revision="260582">Unmapped IO support has been added to
	&man.virtio_blk.4;.</para>

      <para revision="260583">Unmapped IO support has been added to
	&man.virtio_scsi.4;.</para>

      <para revision="260847">The &man.virtio_random.4; driver has
	been added to harvest entropy from the host system.</para>

      <para revision="261504">&os;/&arch.i386; guests can be run under
	bhyve.</para>

      <para revision="267536" contrib="sponsor"
	sponsor="&citrix.rd;">Support for running a &os;/&arch.amd64;
	<application>Xen</application> guest instance as
	<acronym>PVH</acronym> guest has been added.
	<acronym>PVH</acronym> mode, short for <quote>Para-Virtualized
	  Hardware</quote>, uses para-virtualized drivers for boot and
	I/O, and uses hardware virtualization extensions for all other
	tasks, without the need for emulation.</para>

      <para revision="273375">The &man.bhyve.8; hypervisor has been
	updated to support &amd; processors with
	<acronym>SVM</acronym> and <acronym>AMD-V</acronym> hardware
	extensions.</para>

      <para revision="273515">The &man.virtio.console.4; driver has
	been added, which provides an interface to VirtIO console
	devices through a &man.tty.4; device.</para>

      <para revision="279463" contrib="sponsor"
	sponsor="&sandvine;">Support for PCI Single Root I/O
	Virtualization (SR-IOV) has been introduced, allowing the
	creation of PCI Virtual Functions (VFs) for device drivers
	that support SR-IOV.  See &man.iovctl.8; for details on
	creating and configuring VFs.</para>

      <para revision="279957">The &man.bhyve.8; hypervisor has been
	updated to support <literal>DSM TRIM</literal> commands for
	virtual <acronym>AHCI</acronym> disks.</para>

      <para revision="281439" arch="arm">Support for the
	<application>QEMU</application> <literal>virt</literal> system
	has been added.</para>

      <para revision="282212" contrib="sponsor" sponsor="&msostc;">The
	Hyper-V&trade; drivers have been updated with several
	enhancements:</para>

      <itemizedlist>
	<listitem>
	  <para>The &man.hv.vmbus.4; driver now has multi-channel
	    support.</para>
	</listitem>

	<listitem>
	  <para>The &man.hv.storvsc.4; driver now has scatter/gather
	    support, in addition to performance improvements.</para>
	</listitem>

	<listitem>
	  <para>The &man.hv.kvp.4; driver has received several bug
	    fixes.</para>
	</listitem>
      </itemizedlist>

      <para revision="282274">Support for &man.xen.4; para-virtualized
	<literal>domU</literal> kernels has been removed.</para>

      <para revision="284746" contrib="sponsor" sponsor="&msostc;">The
	&man.hv.netvsc.4; driver has been updated to support checksum
	offloading and <acronym>TSO</acronym>.</para>

      <para revision="286062">The &man.xen.4; blkfront driver has been
	updated to include support for <literal>blkif</literal>
	indirect segment I/O.</para>

      <para revision="302288">Indirect segment I/O is enabled by
	default in the Xen blkfront driver when running on AWS
	EC2.</para>

      <para revision="302332">Native graphics support has been added
	to the &man.bhyve.8; hypervisor.</para>
    </sect2>

    <sect2 xml:id="hardware-arm">
      <title>ARM Support</title>

      <para revision="260921">The &man.nand.4; device is enabled for
	ARM devices by default.</para>

      <para revision="266943">Support for the Exynos 5420 Octa system
	has been added.</para>

      <para revision="267390">The <acronym>SMP</acronym> option has
	been enabled for all Exynos 5 systems supported by
	&os;.</para>

      <para revision="268838">Support for the Toradex Apalis i.MX6
	development board has been added.</para>

      <para revision="273264">An issue that could cause instability
	when detecting <acronym>SD</acronym> cards on the Raspberry Pi
	<acronym>SOC</acronym> has been fixed.</para>

      <para revision="275963">The <literal>bcm2835_cpufreq</literal>
	driver has been added, which supports <acronym>CPU</acronym>
	frequency and voltage control on the Raspberry Pi
	<acronym>SOC</acronym>.</para>

      <para revision="277042">Support to turn off the BeagleBone Black
	system with the &man.shutdown.8; <literal>-p</literal> flag or
	by invoking &man.poweroff.8; has been added.</para>

      <para revision="277644">Audio transmission drivers have been
	added for Digital Audio Multiplexer
	(<acronym>AUDMUXM</acronym>), Smart Direct Memory Access
	Controller (<acronym>SDMA</acronym>), and Syncronous Serial
	Interface (<acronym>SSI</acronym>).</para>

      <para revision="280259" contrib="sponsor" sponsor="&ff;">Initial
	support for the ARM AArch64 architecture has been
	added.</para>

      <para revision="282779">Kernel support for Thumb-2 userland has
	been added.</para>

      <para revision="282827">Support for the hardware power button on
	the BeagleBone Black system has been added.</para>

      <para revision="284273" contrib="sponsor" sponsor="&ff;">Initial
	<acronym>ACPI</acronym> support has been added for
	&os;/&arch.arm64;.</para>

      <para revision="287225">Support for 1-Wire devices has been
	added, providing support for 1-Wire hardware through
	&man.gpio.4;.  See &man.ow.4;, &man.owc.4;, and
	&man.ow.temp.4; for more information.</para>

      <para revision="287371" contrib="sponsor"
	  sponsor="&abt;">Support for the HiSilicon HI6220 SoC has
	been added.</para>

      <para revision="263698">The second CPU core on Allwinner A20 SoC
	have been enabled.</para>

      <para revision="299688">Support for the Allwinner H3 SoC has
	been added.</para>

      <para revision="299786">Support for X-Powers AXP813 and AXP818
	power management integrated circuits have been added.</para>

      <para revision="299781">Support for the Allwinner Reduced Serial
	Bus (RSB) has been added.</para>

      <para revision="296064">Support for Allwinner A20 HDMI has been
	added.</para>

      <para revision="300777">Support for GPIO, Sensors and interrupts
	on AXP209 power management integrated circuits have been
	added.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="storage">
    <title>Storage</title>

    <para>This section covers changes and additions to file systems
      and other storage subsystems, both local and networked.</para>

    <sect2 xml:id="storage-general">
      <title>General Storage</title>

      <para revision="278037" contrib="sponsor" sponsor="&ix;">The
	&man.ctl.4; <acronym>LUN</acronym> mapping has been rewritten,
	replacing <acronym>iSCSI</acronym>-specific mapping mechanisms
	with a new mechanism that works for any port.</para>

      <para revision="278354" contrib="sponsor" sponsor="&ix;">The
	&man.ctld.8; utility has been updated to allow controlling
	non-<acronym>iSCSI</acronym> &man.ctl.4; ports.</para>

      <para revision="275681" contrib="sponsor" sponsor="&ff;">The
	&man.autofs.5; subsystem has been updated to include a new
	&man.auto.master.5; map, <literal>-media</literal>, which
	allows automatically mounting removable media, such as
	<acronym>CD</acronym> drives or <acronym>USB</acronym> flash
	drives.</para>

      <para revision="279955" contrib="sponsor" sponsor="&ff;">The
	&man.autofs.5; subsystem has been updated to include a new
	&man.auto.master.5; map, <literal>-noauto</literal>, which
	handles &man.fstab.5; entries set to
	<literal>noauto</literal>.</para>

      <para revision="286444">The <acronym>GELI</acronym> class has
	been updated to support the <literal>BIO_DELETE</literal>
	&man.g.bio.9; <literal>bio_cmd</literal> field, providing
	<acronym>TRIM</acronym>/<acronym>UNMAP</acronym> support on
	<acronym>GELI</acronym>-backed <acronym>SSD</acronym> storage
	providers.</para>

      <para revision="291716" contrib="sponsor"
	sponsor="&spectralogic;">The &man.camdd.8; utility has been
	added, which allows copying data sequentially to and from
	<acronym>SCSI</acronym> devices, files, block devices and tape
	drives.  If the source and/or destination is
	a <acronym>SCSI</acronym> disk, &man.camdd.8; can use the
	asynchronous &man.pass.4; interface to queue multiple I/Os for
	improved speed.  (ATA passthrough support for &man.camdd.8; is
	in development.)</para>

      <para revision="291716" contrib="sponsor"
	sponsor="&spectralogic;">The &man.pass.4;
	<acronym>SCSI</acronym>/<acronym>ATA</acronym> passthrough
	driver now has an asynchronous interface.  User applications
	may queue many requests, get notification of completion via
	&man.kqueue.2; and retrieve status later.  &man.camdd.8; is an
	example application using the interface.</para>

      <para revision="295212" contrib="sponsor" sponsor="&ix;">Support
	for parsing libucl-based configuration files has been added to
	&man.ctld.8;.</para>

      <para revision="298002" contrib="sponsor"
	sponsor="&netflix;">The &man.ahci.4; driver has been updated
	to add <acronym>NCQ</acronym> <acronym>TRIM</acronym> support
	for drives that support it.</para>

      <note>
	<para>Drives that advertise this feature but do not properly
	  support it have been blacklisted.  Systems experiencing
	  traffic problems with <acronym>NCQ</acronym>
	  <acronym>TRIM</acronym> enabled can set the
	  <literal>kern.cam.ada.%d.quirks</literal> tunable to
	  <literal>2</literal> for 512k sectors or
	  <literal>3</literal> for 4096k sectors, replacing
	  <literal>%d</literal> with the drive number.</para>
      </note>

      <para revision="298002" contrib="sponsor"
	sponsor="&netflix;">The &man.cam.4; driver has been updated to
	allow I/O scheduling tuning to fit workload and drive
	characteristics.  This option is off by default, and can be
	enabled by adding <literal>option
	  CAM_IOSCHED_ADAPTIVE</literal> option to the kernel
	configuration and recompiling the kernel.</para>

      <para revision="299371" contrib="sponsor" sponsor="&ff;">The
	&man.camcontrol.8; command can manually force updating
	capacity data after a disk gets resized using the reprobe
	subcommand.</para>

      <para revision="300880" contrib="sponsor"
	sponsor="&spectralogic;"> Leading spaces are now stripped off
	<acronym>SCSI</acronym> disk serial numbers when populating
	the CAM serial number.  This affects the output of
	&man.diskinfo.8; and the names of
	<filename>/dev/diskid/DISK-*</filename> device nodes, among
	other things.</para>

      <para revision="300207" contrib="sponsor"
	sponsor="&spectralogic;"> Support for managing Shingled
	Magnetic Recording (SMR) drives has been added.</para>
    </sect2>

    <sect2 xml:id="storage-net">
      <title>Networked Storage</title>

      <para revision="270096" contrib="sponsor" sponsor="&ff;">The new
	filesystem automount facility, &man.autofs.5;, has been added.
	The new &man.autofs.5; facility is similar to that found in
	other &unix;-like operating systems, such as OS&nbsp;X&trade;
	and Solaris&trade;.  The &man.autofs.5; facility uses
	a &sun;-compatible &man.auto.master.5; configuration file, and
	is administered with the &man.automount.8; userland utility,
	and the &man.automountd.8; and &man.autounmountd.8;
	daemons.</para>

      <para revision="273849" contrib="sponsor" sponsor="&ff;">Support
	for the <literal>timeo</literal>, <literal>actimeo</literal>,
	<literal>noac</literal>, and <literal>proto</literal> options
	have been added to &man.mount.nfs.8;.</para>

      <para revision="300723">The Mellanox implementation of iSER
	(iSCSI Extensions for RDMA) has been imported.</para>

      <para revision="301033" contrib="sponsor" sponsor="&ff;">The
	ability to discover iSCSI targets without having to attach to
	a target has been added to the &man.iscsictl.8;
	command.</para>
    </sect2>

    <sect2 xml:id="storage-zfs">
      <title>ZFS</title>

      <para revision="275748">The <literal>arc_meta_limit</literal>
	statistics are now visible through the
	<literal>kstat</literal> &man.sysctl.8;.  As a result of this
	change, the <literal>vfs.zfs.arc_meta_used</literal>
	&man.sysctl.8; has been removed, and replaced with the
	<literal>kstat.zfs.misc.arcstats.arc_meta_used</literal>
	&man.sysctl.8;.</para>

      <para revision="287099" contrib="sponsor"
	sponsor="&clusterhq;">The &man.zfs.8; <literal>l2arc</literal>
	code has been updated to take <literal>ashift</literal> into
	account when gathering buffers to be written to the
	<literal>l2arc</literal> device.</para>

      <para revision="297633" contrib="sponsor" sponsor="&ff;">Four
	new resources have been added to &man.rctl.8; to allow
	throttles to be set on filesystem IO.</para>

      <para revision="300906" contrib="sponsor" sponsor="&ix;,
	&spectralogic;">The zfsd daemon has been added, which manages
	hotspares and replements in drive slots that publish physical
	paths.</para>

      <para revision="302265" contrib="sponsor"
	sponsor="&multiplay;">The minimum and maximum values for the
	ZFS adaptive replacement cache can be modified at
	runtime.</para>
    </sect2>

    <sect2 xml:id="storage-geom">
      <title>&man.geom.4;</title>

      <para revision="267359">Support for the
	<literal>disklabel64</literal> partitioning scheme has been
	added to &man.gpart.8;.</para>

      <para revision="282465">Support for the
	<literal>apple-boot</literal>, <literal>apple-hfs</literal>,
	and <literal>apple-ufs</literal> <acronym>MBR</acronym>
	partitioning schemes have been added to &man.gpart.8;.</para>

      <para revision="285594" contrib="sponsor"
	sponsor="&scaleengine;">The &man.gpart.8; utility has been
	updated to include a new attribute for <acronym>GPT</acronym>
	partitions, <literal>lenovofix</literal>, which when set,
	which works around <acronym>BIOS</acronym> compatibility
	issues reported on several Lenovo&nbsp;&trade; laptops.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="boot">
    <title>Boot Loader Changes</title>

    <para>This section covers the boot loader, boot menu, and other
      boot-related changes.</para>

    <sect2 xml:id="boot-loader">
      <title>Boot Loader Changes</title>

      <para revision="258431" contrib="sponsor" sponsor="&ff;">The
	memory test run at boot time on &os;/&arch.amd64; platforms
	has been disabled by default.</para>

      <para revision="262955">A new &man.ttys.5; class,
	<literal>3wire</literal>, has been added.  This is similar to
	the existing terminal classes, but does not have a defined
	baudrate.</para>

      <para revision="274085">The &man.vt.4; driver has been made the
	default system console driver.  The &man.syscons.4; driver is
	still available, and can be enabled by adding
	<literal>kern.vty=sc</literal> in &man.loader.conf.5;.
	Alternatively, &man.syscons.4; can be enabled at boot time by
	entering <literal>set kern.vty=sc</literal> at the
	&man.loader.8; prompt.</para>

      <para revision="279950">Support for <literal>bzipfs</literal>
	has been added to the <acronym>EFI</acronym> loader.</para>

      <para revision="281616">The boot loader has been updated to
	support entering the <acronym>GELI</acronym> passphrase before
	loading the kernel.  To enable this behavior, add
	<literal>geom_eli_passphrase_prompt="YES"</literal> to
	&man.loader.conf.5;.</para>

      <para revision="284683" contrib="sponsor" sponsor="&ff;"
	arch="arm">The &man.ttys.5; file for &os;/&arch.arm; has been
	updated to enable <filename>ttyu1</filename>,
	<filename>ttyu2</filename>, and <filename>ttyu3</filename> by
	default, if the callin port is an active console port.</para>

      <para revision="299393">The default installation directory for
	modules has been changed to
	<filename>/boot/modules</filename>.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="network">
    <title>Networking</title>

    <para>This section describes changes that affect networking in
      &os;.</para>

    <sect2 xml:id="network-protocols">
      <title>Network Protocols</title>

      <para revision="263140">Support for the IPX network transport
	protocol has been removed, and will not be supported in
	&os;&nbsp;11 and later releases.</para>

      <para revision="272720" contrib="sponsor"
	sponsor="&limelight;">Support for <acronym>PLPMTUD</acronym>
	blackhole detection (<acronym>RFC</acronym> 4821) has been
	added to the &man.tcp.4; stack, disabled by default.  New
	control tunables have been added:</para>

      <informaltable frame="none" pgwide="0">
	<tgroup cols="2">
	  <colspec colwidth="1*"/>
	  <colspec colwidth="1*"/>
	  <thead>
	    <row>
	      <entry>Tunable</entry>
	      <entry>Description</entry>
	    </row>
	  </thead>

	  <tbody>
	    <row>
	      <entry><literal>net.inet.tcp.pmtud_blackhole_detection</literal></entry>
	      <entry>Enables or disables <acronym>PLPMTUD</acronym>
		blackhole detection</entry>
	    </row>

	    <row>
	      <entry><literal>net.inet.tcp.pmtud_blackhole_mss</literal></entry>
	      <entry><acronym>MSS</acronym> to try for IPv4</entry>
	    </row>

	    <row>
	      <entry><literal>net.inet.tcp.v6pmtud_blackhole_mss</literal></entry>
	      <entry><acronym>MSS to try for IPv6</acronym></entry>
	    </row>
	  </tbody>
	</tgroup>
      </informaltable>

      <para>New monitoring &man.sysctl.8;s haven been added:</para>

      <informaltable frame="none" pgwide="0">
	<tgroup cols="2">
	  <colspec colwidth="1*"/>
	  <colspec colwidth="1*"/>
	  <thead>
	    <row>
	      <entry>Tunable</entry>
	      <entry>Description</entry>
	    </row>
	  </thead>

	  <tbody>
	    <row>
	      <entry><literal>net.inet.tcp.pmtud_blackhole_activated</literal></entry>
	      <entry>Number of times the code was activated to attempt
		downshifting the <acronym>MSS</acronym></entry>
	    </row>

	    <row>
	      <entry><literal>net.inet.tcp.pmtud_blackhole_min_activated</literal></entry>
	      <entry>Number of times the blackhole
		<acronym>MSS</acronym> was used in an attempt to
		downshift</entry>
	    </row>

	    <row>
	      <entry><literal>net.inet.tcp.pmtud_blackhole_failed</literal></entry>
	      <entry>Number of times that the blackhole failed to
		connect after downshifting the
		<acronym>MSS</acronym></entry>
	    </row>
	  </tbody>
	</tgroup>
      </informaltable>

      <para revision="280971" contrib="sponsor"
	sponsor="&netflix;, &nginx;">Support for <acronym>IP</acronym>
	identification for atomic datagrams (<acronym>RFC</acronym>
	6864) has been added.  Support for this feature can be toggled
	with the <literal>net.inet.ip.rfc6864</literal>
	&man.sysctl.8;, which is enabled by default.</para>

      <para revision="285336" contrib="sponsor"
	sponsor="&netgate;">The <acronym>IPSEC</acronym> has been
	updated to include support for <acronym>AES</acronym> modes on
	both software-only and hardware-backed (&man.aesni.4;)
	systems.</para>

      <para revision="287798" contrib="sponsor" sponsor="&dell;">The
	network stack has been updated to fix handling of
	<acronym>IPv6</acronym> On-Link redirects.</para>

      <para revision="299848" contrib="sponsor" sponsor="&ff;">Support
	to be able to reroot into a NFSv4 volume has been
	added.</para>

      <para revision="300240">The net.inet.tcp.ecn.enable sysctl mib
	has been changed from a binary off/on control to a three way
	setting.</para>

      <informaltable frame="none" pgwide="0">
	<tgroup cols="2">
	  <colspec colwidth="1*"/>
	  <colspec colwidth="1*"/>
	  <thead>
	    <row>
	      <entry>Value</entry>
	      <entry>Description</entry>
	    </row>
	  </thead>
	  <tbody>
	    <row>
	      <entry><literal>0</literal></entry>
	      <entry>Totally disable ECN.</entry>
	    </row>

	    <row>
	      <entry><literal>1</literal></entry>
	      <entry>Enable ECN if incoming connections request it.
		Outgoing connections will request ECN.</entry>
	    </row>

	    <row>
	      <entry><literal>2</literal></entry>
	      <entry>Enable ECN if incoming connections request it.
		Outgoing conections will not request ECN.</entry>
	    </row>
	  </tbody>
	</tgroup>
      </informaltable>

      <para revision="300779">Dummynet AQM, an independent
	implementation of CoDel and FQ-CoDel for ipfw/dummynet has
	been imported to the base system.</para>

      <para revision="301875">The unused
	<literal>SIOCSIFALIFETIME_IN6</literal> ioctl has been
	removed.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="releng">
    <title>Release Engineering and Integration</title>

    <para>This section convers changes that are specific to the
      &os;&nbsp;Release Engineering processes.</para>

    <sect2 xml:id="releng-changes">
      <title>Integration Changes</title>

      <para revision="277458" contrib="sponsor" sponsor="&ff;">The
	Release Engineering build tools have been updated to include
	support for producing virtual machine disk images for various
	cloud hosting providers.</para>

      <para revision="278926">The Release Engineering build tools have
	been updated to use multi-threaded &man.xz.1;.  By default,
	the number of &man.xz.1; threads is set to the number of cores
	available.</para>

      <para revision="281802" contrib="sponsor" sponsor="&ff;">The
	Release Engineering build tools have been updated to include
	support for building &os;/&arch.arm64; virtual machine and
	memory stick installation images.</para>

      <para revision="282693" contrib="sponsor" sponsor="&ff;">The
	Release Engineering build tools have been updated to support
	building &os;/&arch.arm; images without external utilities for
	supported boards where a corresponding
	<literal>u-boot</literal> port exists in the Ports
	Collection.</para>

      <para revision="283307" contrib="sponsor" sponsor="&ff;">The
	&os;/&arch.i386; memory stick installation images are now
	created using the &man.mkimg.1; utility, matching the way
	the &os;/&arch.amd64; images are created.</para>
    </sect2>
  </sect1>
</article>