sysctl.7: add various networking-related nodes
There are probably more to add (certainly across all the top-level node
categories), but these cover (or are related to) a few that frequently
get mentioned in performance tuning blog posts and emails.
(Confusingly, some lists are alphabetical and others aren't. I added the
TCP autosizing entries where they seemed to logically go.)
tcp_usrreq.c: minor sysctl description updates
TCP buffer autosizing can't really be deemed "experimental" since it was
enabled by default in early 2010.
virtio(4): improve text and remove technical details not relevant to users.
Do not mention virtio_mmio directly.
Simplify wording were possible.
pv(4) usage examples and author credits should likely be added in the future.
Changes discussed with uwe@
No full concensus, but better than previous version.
Make sure the stack is aligned when delivering signals.
Fixes the t_signal_and_sp:misaligned_sp_and_signal and
t_signal_and_sp:signalsp_sigaltstack test cases on m68k.
virtio(4): combine virtio and virtio_mmio man pages.
While here, add missing VirtIO devices and improve grammar and text.
virtio_mmio.4 was present in the source tree but never installed.
mount_lfs: Build fix: s/unreachable()/__unreachable()/
<stddef.h> only declares unreachable() for C23 or later.
Here, as <sys/cdefs.h> is already being included, just
use one of its definitions directly, rather than attempting
to do so indirectly via <stddef.h>
This can be changed to anything else that works of course.
mount_lfs(8): Add unreachable() to fix clang build.
dependall ===> sbin/mount_lfs
/home/source/ab/HEAD-llvm/src/sbin/mount_lfs/mount_lfs.c:319:1: error: function declared 'noreturn' should not return [-Werror,-Winvalid-noreturn]
The only two cases in invoke_cleaner are already handled, so the rest
should be unreachable.
Import bind-9-20-27 (Previous was bind-9-20-24)
iNotes for BIND 9.20.27#
New Features#
Disclose active Negative Trust Anchors with Extended DNS Error 33.
A Negative Trust Anchor (RFC 7646) turns off DNSSEC validation for a
domain, so a name that would normally fail validation resolves instead. named
now marks such answers with Extended DNS Error code 33, "Negative Trust
Anchor", so operators can see at a glance when a response came back only
because an NTA was in effect. [GL #6268]
Feature Changes#
Speed up RPZ policy zone updates.
RPZ updates used to be applied one small step at a time, adding overhead on
large policy zones. Updates are now applied as a single batch, improving
update performance for large RPZ zones, at the cost of no longer overlapping
with concurrent updates. [GL #5787] [GL #6270]
Bug Fixes#
Ensure NSEC authority does not cross zonecut boundary.
When using a cached NSEC record to prove that a delegation is insecure, named
[239 lines not shown]