I-FreeBSD 13.0 ikhupha

Kwiminyaka emibini enesiqingatha emva kokusekwa kwesebe le-12.x, ukukhutshwa kwe-FreeBSD 13.0 kwaboniswa, elungiselelwe i-amd64, i386, i-powerpc, i-powerpc64, i-powerpc64le, i-powerpcspe, i-armv6, i-armv7, i-aarch64 kunye ne-riscv64 architectures. Ukongezelela, imifanekiso yenzelwe iinkqubo ze-virtualization (QCOW2, VHD, VMDK, eluhlaza) kunye neendawo zefu i-Amazon EC2, i-Google Compute Engine kunye neVagrant.

Iinguqulelo eziphambili:

  • Utshintsho oluya ku-c edibeneyo lugqityiwe Linux Ukuphunyezwa kwenkqubo yefayile ye-ZFS yiprojekthi ye-OpenZFS. Iimpawu ezifumaneka kwi-FreeBSD emva kokutshintshela kwi-OpenZFS ziquka: inkqubo ye-quota eyandisiweyo, ukubethela idatha, ukukhethwa kweklasi yokwabiwa okwahlukileyo, ukusetyenziswa kwemiyalelo yeprosesa yevektha ukukhawulezisa ukuphunyezwa kwe-RAIDZ kunye nokubalwa kwe-checksum, inkxaso ye-algorithm yoxinzelelo lwe-ZSTD, imo ye-multihost (MMP, uKhuseleko lweMulti Modifier), ukuphuculwa kwezixhobo zomgca womyalelo, kunye nokulungiswa kweengxaki ezininzi zobuhlanga kunye nokutshixa.
  • I-port ye-architecture ye-ARM64 (AArch64) ihanjiswe kwinqanaba lokuqala lenkxaso (i-Tier 1), exhaswa ngamaqela anoxanduva lokuphelisa ubuthathaka, ukulungiselela ukukhutshwa, kunye nokugcina amazibuko. Inqanaba lokuqala lenkxaso libandakanya ukudalwa kweendibano zokufakela, ukuhlaziywa kwebhinari kunye neepakethi ezilungiselelwe, kunye nokubonelela ngeziqinisekiso zokusombulula iingxaki ezithile kunye nokugcina i-ABI engatshintshiyo yendawo yomsebenzisi kunye ne-kernel (ngaphandle kwezinye ii-subsystems).
  • I-i386 i-architecture idluliselwe kwinqanaba lesibini lenkxaso yeqonga (i-Tier 2), apho ukubunjwa kweendibano zokufakela, ukuhlaziywa kwebhinari kunye neepakethi ezilungeleyo ziya kuqhubeka, kodwa aziqinisekisi isisombululo kwiingxaki ezithile. Uhlobo lwe-CPU olungagqibekanga (CPUTYPE) lwe-architecture ye-i386 itshintshiwe ukusuka kwi-486 ukuya kwi-686 (ukuba iyafunwa, iindibano ze-i486 kunye ne-i586 zinokudalwa ngokuzimeleyo).
  • Amalungu e-clang, i-lld, i-lldb, i-compiler-rt, i-llvm, i-libunwind kunye ne-libc++ zihlaziyiwe kuguqulelo lwe-11.
  • Uphuhliso lukhutshelwe ukusuka kwinkqubo yolawulo lwemithombo ephakathi Uguqulo ukuya kwinkqubo yokwabela amagunya iGit.
  • Inkqubo esisiseko yacocwa kwizicelo ezisasazwe phantsi kwelayisensi ye-GPL. I-Binutils 2.17 kunye ne-gcc 4.2.1 zisusiwe kumthombo womthi, kwaye zonke izakhiwo ezixhaswayo zihanjiswe kwi-LLVM/clang toolkit. Okuqukiweyo ziinguqulelo ezinelayisenisi ze-BSD ze-grep kunye ne-dtc (Isixhobo soMhlanganisi weMithi) eziluncedo, ezithatha indawo yeenguqulelo ezinelayisensi ye-GPL. Inkqubo yokunyuswa kwe-amd ngokuzenzekelayo isusiwe, ukusebenza kwayo ngoku kuphunyezwe ngee-autofs. Into eluncedo ye-ctm isusiwe, kwaye kuyacetyiswa ukuba kusetyenziswe i-misc/ctm port endaweni yoko.
  • Isitaki somzila sibhalwe ngokutsha ukubandakanya inkxaso yezinto ze-nexhop, ezigcina idatha yelizwe esetyenziselwa ukudlulisa ipakethi kwindawo oyifunayo. Yongeza ukukwazi ukuqhagamshela iindlela zakho zokukhangela iindlela. I-algorithms yokukhangela indlela eyongeziweyo esuka kwi-DPDK (iData Plane Development Kit) librte, ekuvumela ukuba wenze umsebenzi ngeetafile ezinkulu kakhulu. Kwizicelo zeproxyarp, ujongano lwefib luyasetyenziswa. Kongezwe ukukwazi ukutshintsha inombolo yefib kubhabho nge sysctl net.fibs. Iphunyeziwe inkxaso yeendlela zexeshana ze-IPv4 kunye ne-IPv6 (ngobomi obumiselweyo).
  • Inkxaso yomzila weendlela ezininzi iye yabhalwa ngokutsha kwaye yenziwa i-scalable ngakumbi, apho ixesha lokukhangela lingaxhomekekanga kubukhulu boluhlu (O(1)). Ukuphunyezwa kwe-Multipath entsha ngoku kudityaniswa ne-ROUTE_MPATH kernel parameter, ethathe indawo ye-RADIX_MPATH kwaye yenziwe ngokuzenzekelayo. Ukulawula iindlela ezininzi, i-sysctl net.route.multipath iyacetywa.
  • Isakhelo se-cryptographic esiphunyeziweyo kwinqanaba le-kernel senziwe ngokutsha, songeza inkxaso ye-cryptographic algorithms yanamhlanje kunye nokwenza lula ujongano lokusebenzisa uguqulelo oluntsonkothileyo kubaqhubi kunye namanye amacandelo e-kernel. Isusiwe i-algorithms yakudala i-ARC4, i-Blowfish, i-CAST128, i-DES, i-DES, i-MD5-HMAC kunye ne-Skipjack. IPsec kunye ne-Kerberos azisaxhasi i-algorithms ethotywe yi-RFC 8221 kunye ne-RFC 6649/8429, kuquka i-3DES. Isusiwe kwi-algorithms ebibhengezwe ngaphambili kwi-geli kunye ne-cryptodev disk encryption subsystem.
  • I-GENERIC kernel ibandakanya inkxaso ye-aesni kunye ne-armv8crypto abaqhubi ukukhawulezisa i-geli-based encryption yediski usebenzisa imiyalelo ye-AES-NI ye-amd64/i386 yezakhiwo kunye ne-AES-XTS ye-ARM64.
  • Umqhubi weqat wongeziwe we-Intel QuickAssist (QAT) i-crypto accelerators kunye nomqhubi we-ossl ngokuphunyezwa kweenkqubo ezikhawulezayo zokubethelwa kwesoftware evela kwi-OpenSSL, elungiselelwe kusetyenziswa ikhowudi yolwimi lwendibano. Umqhubi we-armv8crypto wongeza inkxaso ye-AES-XTS kunye ne-AES-GCM esebenzisa imiyalelo ehambelanayo yeeprosesa ze-ARMv8.
  • Ukuphunyezwa kwe-TLS (kTLS) eyongeziweyo eqhuba kwizinga le-kernel ye-FreeBSD, evumela ukwanda okukhulu ekusebenzeni kwe-encryption kwiisokethi ze-TCP. Iinguqulelo ezixhaswayo zeTLS 1.0 ukuya ku-1.3. Ukufihla, abaqhubi be-kernel crypto abaxhasa i-AES-CBC okanye i-AES-GCM bayasetyenziswa. Ukusebenzisa i-kTLS kwindawo yomsebenzisi kufuna ukwakha kwakhona i-OpenSSL nge-WITH_OPENSSL_KTLS ukhetho.
  • Kongezwe uhlobo olutsha lwezithinteli zomsebenzi womnatha, mbuf (idatha yedatha yothungelwano), enokumela amaphepha enkumbulo engabonakaliyo angaphindwanga kwisithinteli esinye, esiphucula usebenziso lwefayile ye-sendfile(2) umnxeba ngokunciphisa ubungakanani boluhlu lwembuf kwiisokethi zebhafa.
  • I-stack ye-TCP idibanisa inkxaso ye-algorithm yokunciphisa ngokulinganayo kubukhulu bokuthumela iipakethi (i-Proportional Rate Reduction, i-RFC 6937), evumela ukuba ubuyisele ngokukhawuleza iiparitha ezihamba kakuhle emva kweengxaki zesikhashana kunye nokuhanjiswa kwedatha. Ukuvala iPRR, i-sysctl net.inet.tcp.do_prr inikezelwe.
  • Amandla e-Bhyve hypervisor anwetshiwe: Inkxaso yokwabelana ngeefayile kusetyenziswa iVirtIO-9p (VirtFS) yongeziwe. Inkxaso yeSnapshot isetyenzisiwe. oomatshini bokweneneInkxaso eyongezelelweyo yezixhobo ze-PCI HDAudio kunye neeports ezongezelelweyo ze-serial COM3 kunye ne-COM4. Isuse iimodeli zezixhobo ze-bvmconsole eziphelelwe lixesha kunye ne-bvmdebug. Uzinzo oluphuculweyo kwiiklayenti ze-VNC, kuquka macOS-Usetyenziso lokwabelana ngesikrini.
  • Abaqhubi be-VirtIO bongeze inkxaso yenkcazo ye-VirtIO V1, eye yaphucula ukuhambelana kweendwendwe ze-FreeBSD kunye ne-emulators eyahlukeneyo kunye ne-hypervisors.
  • Kwiinkqubo ezincanyathiselwe kwimekobume yentolongo, uguqulo lwezibophelelo ze-CPU lunikiwe (i-cpuset ebotshelelwe ekuqaleni kwinkqubo iya kutshintshwa kuthathelwa ingqalelo i-cpuset yentolongo kunye nezithintelo ezibekiweyo).
  • Ubuchule bokwakha inkqubo yesiseko seFreeBSD kwiindawo ezisekelwe kwezinye iinkqubo zokusebenza bongeziwe. Imfuneko yokwakha kwezinye iinkqubo zokusebenza iqhutywa ngumnqweno wokusebenzisa izixhobo zokudibanisa eziqhubekayo ukuvavanya iFreeBSD, ezisekelwe kwi Linux okanye macOS.
  • Isitaki esitsha seMMC/SD sicetywayo, ngokusekwe kwisakhelo seCAM kwaye ikuvumela ukuba udibanise izixhobo kunye ne-SDIO (Secure Digital I/O) interface. Ngokomzekelo, i-SDIO isetyenziswe kwiimodyuli ze-WiFi kunye neBluetooth kwiibhodi ezininzi, ezifana neRaspberry Pi 3. I-stack entsha ivumela ukuba i-interface ye-CAM isetyenziswe ukuthumela imiyalelo ye-SD kwizicelo kwindawo yomsebenzisi, okwenza kube lula ukwenza isixhobo. abaqhubi abasebenza kwinqanaba lomsebenzisi.
  • Ukusebenza okuphuculweyo kwe-interlayer ukuze kuhambelane ne- LinuxIifayile ze-DTS (iMithombo yoMthi weSixhobo) zivunyelaniswe ne-kernel Linux 5.8.
  • Inkxaso eyongeziweyo ye-NFSv4.2 (RFC-7862) kwaye iphunyezwe isakhono sokusebenzisa i-NFS ngaphezulu kwetshaneli yonxibelelwano efihliweyo esekelwe kwi-TLS 1.3, endaweni yokusebenzisa i-Kerberos (i-sec=krb5p mode), eyayilinganiselwe ekuguquleleni imiyalezo ye-RPC kuphela kwaye yaphunyezwa. kuphela kwisoftware.
  • Inguqulelo ephelelwe lixesha ye-GDB debugger, ebifakwe ngaphambili kwi/usr/libexec directory kwaye isetyenziswe kusetyenziso lwecrashinfo, isusiwe. Endaweni ye-GDB efakwe ngaphambili, ukufumana ulwazi oluneenkcukacha malunga nezizathu zokuphazamiseka, ngoku kuyacetyiswa ukuba kufakwe uguqulelo lwamva nje lwe-GDB ukusuka kumazibuko okanye iipakethe. Inkxaso yolungiso lweempazamo ngeprocfs iye yanqunyanyiswa. Umqhubi we-netgdb wongeziwe, uvumela ufikelelo kwi-kernel debugger phezu kwenethiwekhi.
  • Ukungakhuselekanga ufumana umsebenzi ususiwe kwi-libc (ukuqala kumgangatho we-C11, lo msebenzi ukhutshiwe ngaphandle kobalulo) kwaye amazibuko asasebenzisa lo msebenzi ahlengahlengiswe. Imisebenzi ye-cap_random esusiwe (i-getrandom kufuneka isetyenziswe).
  • Kongezwe umnxeba omtsha wenkqubo ye-copy_file_range ohambelana nokuphunyezwa kwe-kernel. Linux kwaye ivumela ukukhawulezisa ukukopishwa kwedatha ukusuka kwenye ifayile ukuya kwenye ngokwenza umsebenzi kuphela kwicala le-kernel ngaphandle kokufunda idatha kuqala kwimemori yenkqubo. Ifowuni yenkqubo ikwasetyenziswa kwi umncedisi I-NFSv4.2 yokwenza imisebenzi yokukopa kwiseva (ngaphandle kokudlulisela kumthengi).
  • I-POSIX AIO injini ye-asynchronous ye-I / O yazisa inkxaso yemisebenzi ye-vectorized. Ngokukodwa, iifowuni ze-aio_writev kunye ne-aio_readv zongezwa, zivumela ukuphunyezwa kwe-vectorized equivalents ye-aio_read and aio_write function.
  • Amacandelo esithuba somsebenzisi ayekisiwe ukuxhasa i-a.out yefomathi yefayile ephunyeziweyo kwiinkqubo ze-i386 zokwakha. Usetyenziso lwe-elf2aout lususiwe.
  • I-ping kunye ne-ping6 eziluncedo zidityanisiwe. Ukukwazi ukuseta umgangatho wenkonzo (QoS) iiparamitha nge-IP DSCP kunye ne-Ethernet PCP yongezwe kwi-ping.
  • Isixhobo sohlaziyo lwe-freebsd ngoku sibonisa inkqubela yokukhuphela iifayile kwaye yongeza uhlaziyo olulungeleyo kunye nemiyalelo ye-showconfig ukujonga uhlaziyo kunye nokubonisa uqwalaselo.
  • Mninzi umsebenzi osele wenziwe ukuphucula inkxaso kwiisistim ze-NUMA (Non-Uniform Memory Access).
  • Abaqhubi bemizobo ehlaziyiweyo kunye namalungu estaki segrafiki. Iingxaki ngokusebenza kwemekobume esekelwe kwiprothokholi yaseWayland ziye zasonjululwa.
  • Isistim esezantsi yokukhanya eyongeziweyo yokudala abaqhubi bolawulo lwesibane. Kongezwe umqhubi we-pwm-backlight ukulawula iPinebook kunye nePinebook Pro backlighting.
  • Inkxaso yeprothokholi ye-SCTP ibandakanyiwe kwimodyuli eyahlukileyo sctp.ko, ekhutshaziwe ngokungagqibekanga kwi-kernel ye-GENERIC.
  • Kwizixhobo zokungenisa, umqhubi omtsha we-usbhid uye wacetywayo osebenzisa isakhelo esifihliweyo ukusebenza kunye nezixhobo ze-HID ze-USB, endaweni ye-ukbd, ums kunye nabaqhubi be-uhid.
  • Umqhubi we-cpufreq uxhasa itekhnoloji ye-Intel Speed ​​​​Shift.
  • Inkxaso eyongeziweyo yeebhodi ezintsha ezisekelwe kwii-CPU ze-64-bit ze-ARMv8, kuquka i-Broadcom BCM5871X kunye ne-NXP LS1046A SoCs.
  • Kuyilo lwe-AMD64, inkxaso yeedilesi ze-57-bit virtual (LA57) iphunyeziwe. Inkxaso eyongeziweyo ye-Chinese x86 CPU Hygon Dhyana esekwe kubuchwephesha be-AMD.
  • I-port ye-architecture ye-powerpc64 itshintshelwe ukusebenzisa i-LLVM kunye ne-ELFv2 ABI (ii-binaries ezivela kwiinguqulelo zangaphambili ze-FreeBSD aziyi kukwazi ukusetyenziswa kwi-FreeBSD 13). Abaqhubi be-virtio, ixl, mrsas, aacraid, cpld bafakwe kwi-powerpc64.
  • Abaqhubi beeadaptha ze-Ethernet zelifa basusiwe:
    • bm(4) BMAC
    • cs(4) Crystal Semiconductor CS8900/CS8920
    • de(4) DEC DC21x4x
    • ed (4) NE-2000 kunye ne-WD-80×3
    • ep(4) 3Com Etherlink III (3c5x9) ISA
    • ex(4) Intel EtherExpress Pro/10 kunye nePro/10+
    • fe(4) Fujitsu MB86960A/MB86965A
    • hme (4) Sun Microelectronics STP2002-STQ
    • pcn(4) AMD PCnet
    • sf(4) Umlilo weenkwenkwezi
    • sn(4) SMC 91Cxx
    • tl(4) Texas Instruments ThunderLAN
    • tx(4) SMC 83c17x
    • txp(4) 3Com 3XP Typhoon/Sidewinder (3CR990)
    • vx(4) 3Com EtherLink III / Fast EtherLink III (3c59x) PCI
    • wb(4) Winbond W89C840F
    • xe(4) Xircom PCMCIA
  • Abaqhubi abasusiweyo ubsec (Broadcom BCM58xx crypto accelerators), ufm (i-tuners ye-FM ene-interface ye-USB), i-ctau (i-Cronix Tau), i-cx (i-Cronix Sigma) kunye ne-vpo (i-port parallel SCSI).

umthombo: opennet.ru

Thenga ukusingathwa okuthembekileyo kwiindawo ezinokhuseleko lweDDoS, iiseva zeVPS VDS 🔥 Thenga ukusingathwa kwewebhusayithi okuthembekileyo ngokhuseleko lwe-DDoS, iiseva zeVPS VDS | ProHoster