OpenBSD 4.7 released

OpenBSD 4.7 is here. To get the files for this release either order a CDROM or check out one of the FTP page for a list of mirrors.

OpenBGPD, OpenOSPFD and other routing daemon improvements:

• Update capability code in bgpd(8) to follow RFC 5492.
• BGP MPLS VPN (RFC 4364) support added to the bgpd RIB.
• In bgpd(8), implement the RFC4486 BGP Cease Notification Message subcodes.
• It is now possible to enable/disable specific BGP capabilities.
• Update bgpctl(8) irrfilter to support IPv6 and 4-byte AS numbers.
• Minimal router-dead-time of 1 second and sub-second hello intervals added to ospfd(8). Additionally it is now possible to specify sub-second SPF timers for faster route fail-over.
• ospf6d(8) is now installed by default. The RIB can be synced with the kernel routing table now. Support for AS-ext LSA has been added. This is still work-in-progress but testing is highly appreciated.
• ldpd — the MPLS label distribution protocol daemon — is now installed by default. A custom kernel with option MPLS is needed to use it.

Generic network stack improvements:

• brconfig is now integrated into ifconfig(8)
• Added vether(4), a virtual Ethernet device.
• Two bugs in IPsec/HMAC-SHA2 were fixed, resulting in an incompatibility with the HMAC-SHA-256/384/512 hash algorithms with previous versions of OpenBSD and other IPsec implementations sharing the bugs.
• In dhcpd(8), echo back the Relay Agent Information option if present, and add support for the ipsec-tunnel hardware type.
• Make dhcrelay(8) pick up the routing domain from the specified interface and use that rdomain for relaying the packets to the server.
• Added support in dhcrelay(8) for RFC3046 “DHCP-over-ipsec”.
• Make the tcpdump(8) BGP OPEN capability parser RFC 5492 compliant.
• Added an exec command to route(8) to run a process and its children in a specified routing domain.
• ifconfig(8) now deals with more than 64 alias addresses.
• Various fixes to mbuf defragmenting and mbuf chain copying improve reliability.

Install/Upgrade process changes:

• Take more care to ensure all filesystems are umount’ed when restarting an install or upgrade.
• If no possible root disk is found, keep checking until one appears.
• The default ftp directory for -stable is now the release directory instead of the snapshot directory.
• Selection of TZ during installs is no longer confused by trailing slashes.
• If /etc/X11 is found during upgrades, add the X sets to the list of default sets to install.