Networking

The patchset would teach inetd(8) about kqueue, which is originally authored by John-Mark and I have integerated it into the “delphijfork”. Now it was updated to fit 7.0-CURRENT.

It seems that we still have some race conditions that can lead to strange issues and we may want to discourage this for 6.0-RELEASE.

Alan Cox has committed some fixes for the issue, hope these can be merged back.

Today jianghong has pointed out that ConnectEx found in Windows Socket API has combined the connection and sending of the first block of data together within one system call. I think this is desirable for us too, as this can reduce unnecessary context switches.

FreeBSD has accept_filter(9) mechanism that does similiar thing for accept(2).

Andre Oppermann (andre@)开始行动了！希望我们在3个月后能够看到焕然一新的FreeBSD TCP/IP实现！

Available here.

AT YOUR OWN RISK!!

中华人民共和国公安部令第51号令 2000年4月26日

第一条 为了加强对计算机病毒的预防和治理，保护计算机信息系统安全，保障计算机的应用与发展，根据《中华人民共和国计算机信息系统安全保护条例》的规定，制定本办法。

第二条 本办法所称的计算机病毒，是指编制或者在计算机程序中插入的破坏计算机功能或者毁坏数据，影响计算机使用，并能自我复制的一组计算机指令或者程序代码。

从禁止ping，到最后的流量整形。不知道明天会是什么。

我不认为这是有助于安全的设施。

如果你相信——你生活在一个没有任何安全威胁的环境，那么，任何人都会变得缺少防备的意识。

Today quakelee@ has reported that an(4) is broken with a recent -CURRENT. I have identified that that was related to our recent ifnet change and has fixed it under scottl@’s approval.

Sometimes, when you are in a NAT’ed environment, ssh connection may be dropped when the gateway is busy.

OpenSSH has provided a solution against this.

The option is called “ClientAliveInterval”. With this setting in your sshd_config, sshd(8) would send a ping message through the encrypted channel periodically, thus prevent the early drop.

The default setting is 15, meaning the ping period is 15 seconds.

Jeffrey Hsu (a well known FreeBSD and DragonFly networking stack developer) has committed first cut of TCP ABC implementation for DragonFlyBSD. Described in RFC 3465, this is an improvement that can provide better throughput.