Update the features page. Modified version of patch supplied.
PR: docs/186614 Submitted by: Allan Jude <freebsd@allanjude.com>
This commit is contained in:
parent
53452fecd6
commit
03011be15e
Notes:
svn2git
2020-12-08 03:00:23 +00:00
svn path=/head/; revision=43976
1 changed files with 95 additions and 32 deletions
|
@ -36,11 +36,68 @@
|
|||
diverse and world-wide membership of the
|
||||
volunteer &os; Project.</p>
|
||||
|
||||
<p><b>&os; 9.0</b>, brings many new features
|
||||
and performance enhancements with a special focus on desktop
|
||||
support and security features.</p>
|
||||
<p><b>&os; 10.X</b> introduced many new features
|
||||
and replaces many legacy tools with updated versions.</p>
|
||||
|
||||
<ul>
|
||||
<li><b>bhyve</b>:
|
||||
A new BSD licensed, legacy-free hypervisor has been imported
|
||||
to the &os; base system. It is currently able to run all
|
||||
supported versions of &os;, and with the help of the
|
||||
grub-bhyve port, OpenBSD and Linux.</li>
|
||||
|
||||
<li><b>KMS And New drm2 Video Drivers</b>:
|
||||
The new drm2 driver provides support for AMD GPUs up to the
|
||||
Radeon HD 6000 series and provides partial support for
|
||||
the Radeon HD 7000 family. &os; now also supports
|
||||
Kernel Mode Setting for AMD and Intel GPUs.</li>
|
||||
|
||||
<li><b>Capsicum Enabled By Default</b>:
|
||||
Capsicum has been enabled in the kernel by default, allowing
|
||||
sandboxing of several programs that work within the
|
||||
"capabilities mode", such as:
|
||||
<ul>
|
||||
<li>tcpdump</li>
|
||||
<li>dhclient</li>
|
||||
<li>hast</li>
|
||||
<li>rwhod</li>
|
||||
<li>kdump</li>
|
||||
</ul>
|
||||
</li>
|
||||
|
||||
<li><b>New Binary Packaging System</b>:
|
||||
&os; now uses pkg, a vastly improved package management
|
||||
system that supports multiple repositories, signed packages,
|
||||
and safe upgrades. The improved system is combined with
|
||||
more frequent official package builds for all supported
|
||||
platforms and a new stable branch of the ports tree for
|
||||
better long term support.</li>
|
||||
|
||||
<li><b>Unmapped I/O</b>:
|
||||
The newly implemented concept of unmapped VMIO buffers
|
||||
eliminates the need to perform costly TLB shootdowns for
|
||||
buffer creation and reuse, reducing system CPU time by up to
|
||||
25-30% on large SMP machines under heavy I/O load.</li>
|
||||
</ul>
|
||||
|
||||
<p><b>&os; 9.X</b> brought many new features
|
||||
and performance enhancements with a special focus on desktop
|
||||
support and security.</p>
|
||||
|
||||
<ul>
|
||||
<li><b>OpenZFS</b>:
|
||||
&os; 9.2 includes OpenZFS v5000 (Feature Flags), including
|
||||
the feature flags:
|
||||
<ul>
|
||||
<li>async_destroy</li>
|
||||
<li>empty_bpobj</li>
|
||||
<li>lz4_compress</li>
|
||||
</ul>
|
||||
which allow ZFS destroy operations to happen in the
|
||||
background, make snapshots consume less disk space, and
|
||||
offers a better compression algorithm for compressed
|
||||
datasets.</li>
|
||||
|
||||
<li><b>Capsicum Capability Mode</b>:
|
||||
Capsicum is a set of features for sandboxing support, using
|
||||
a capability model in which the capabilities are file
|
||||
|
@ -59,14 +116,14 @@
|
|||
These allow a structured way to dynamically extend the
|
||||
kernel at runtime in an ABI preserving manner.</li>
|
||||
|
||||
<li><b>Accounting API:</b> has been implemented. It can keep
|
||||
<li><b>Accounting API</b> has been implemented. It can keep
|
||||
per-process, per-jail, and per-login class resource
|
||||
accounting information. Note that this is neither built nor
|
||||
installed by default. To build and install this, specify
|
||||
the option RACCT in the kernel configuration file and rebuild
|
||||
the base system as described in the &os; Handbook.</li>
|
||||
|
||||
<li><b>Resource-limiting API:</b> has been implemented.
|
||||
<li><b>Resource-limiting API</b> has been implemented.
|
||||
It works in conjunction with the RACCT resource accounting
|
||||
implementation and takes user-configurable actions based on
|
||||
the set of rules it maintains and the current resource
|
||||
|
@ -74,17 +131,17 @@
|
|||
rules in userland. Note that this is neither built nor
|
||||
installed by default.</li>
|
||||
|
||||
<li><b>USB:</b> subsystem now supports USB packet filter.
|
||||
<li><b>USB</b> subsystem now supports USB packet filter.
|
||||
This allows capturing packets which go through each USB
|
||||
host. The architecture of the packet filter is similar to that of
|
||||
bpf. The userland program usbdump(8) has been
|
||||
added.</li>
|
||||
|
||||
<li><b>Infiniband support:</b>, OFED (OpenFabrics Enterprise
|
||||
<li><b>Infiniband support</b>: OFED (OpenFabrics Enterprise
|
||||
Distribution) version 1.5.3 has been imported into the
|
||||
base system.</li>
|
||||
|
||||
<li><b>TCP/IP network:</b> stack now supports the mod_cc(9)
|
||||
<li><b>TCP/IP network</b> stack now supports the mod_cc(9)
|
||||
pluggable congestion control framework. This allows TCP
|
||||
congestion control algorithms to be implemented as
|
||||
dynamically loadable kernel modules. Many kernel
|
||||
|
@ -96,42 +153,48 @@
|
|||
can be set by a new sysctl(8) variable
|
||||
net.inet.tcp.cc.algorithm.</li>
|
||||
|
||||
<li><b>SU+J:</b> &os;'s Fast File System now supports soft
|
||||
<li><b>SU+J</b>: &os;'s Fast File System now supports soft
|
||||
updates with journaling. It introduces an intent log into
|
||||
a softupdates-enabled file system which eliminates the need
|
||||
for background fsck(8) even on unclean shutdowns.</li>
|
||||
</ul>
|
||||
|
||||
<p><b>&os; 8.X</b> brought many new
|
||||
features and performance enhancements. With special focus on
|
||||
a new USB stack, &os; 8.X also shipped with experimental support
|
||||
for NFSv4. A new TTY layer was introduced, which improves
|
||||
scalability and resources handling in SMP enabled systems.</p>
|
||||
<p>&os; includes a number of other great features:</p>
|
||||
|
||||
<ul>
|
||||
<li><b>Netisr framework:</b> has been reimplemented for
|
||||
parallel threading support. This is a kernel network
|
||||
dispatch interface which allows device drivers (and other
|
||||
packet sources) to direct packets to protocols for directly
|
||||
dispatched or deferred processing. The new implementation
|
||||
supports up to one netisr thread per CPU, and several
|
||||
benchmarks on SMP machines show substantial performance
|
||||
improvement over the previous version.</li>
|
||||
<li><b>Firewalls:</b>
|
||||
The base system includes IPFW and IPFilter, as well as a
|
||||
modified version of the popular pf with improved SMP
|
||||
performance. IPFW also includes the dummynet feature,
|
||||
allowing network administrators to simular adverse network
|
||||
conditions, including latency, jitter, packet loss and
|
||||
limited bandwidth.</li>
|
||||
|
||||
<li><b>Jail improvements:</b> Jails now support multiple IPv4
|
||||
and IPv6 addresses per jail, and also support SCTP.
|
||||
Hierarchies of jails (jails-within-jails) are now supported,
|
||||
and jails can now be restricted to subsets of available
|
||||
CPUs.</li>
|
||||
<li><b>Jails</b>
|
||||
are a light-weight alternative to virtualization.
|
||||
Allowing processes to be restricted to a namespace with
|
||||
access only to the file systems and network addresses
|
||||
assigned to that namespace. Jails are also Hierarchical,
|
||||
allowing jails-within-jails.</li>
|
||||
|
||||
<li><b>Linux emulation:</b> layer has been updated to version
|
||||
2.6.16 and the default Linux infrastructure port is now
|
||||
emulators/linux_base-f10 (Fedora 10).</li>
|
||||
<li><b>Linux emulation</b>
|
||||
provides a system call translation layer that allows
|
||||
unmodified Linux binaries to be run on &os; systems.</li>
|
||||
|
||||
<li><b>DTrace</b>
|
||||
provides a comprehensive framework for tracing and
|
||||
troubleshooting kernel and application performance issues
|
||||
while under live load.</li>
|
||||
|
||||
<li><b>The Ports Collection</b> is a set of more than 23,000 third
|
||||
party applications that can be easily installed and run on
|
||||
&os;. The ports architecture also allows for easy
|
||||
customization of the compile time options of many of the
|
||||
applications.</li>
|
||||
|
||||
<li><b>Network Virtualization:</b> A container ("vimage") has
|
||||
been implemented, extending the &os; kernel to maintain
|
||||
multiple independent instances of networking state.
|
||||
Vimage facilities can be used independently to create fully
|
||||
multiple independent instances of networking state. Vimage facilities can be used independently to create fully
|
||||
virtualized network topologies, and jail(8) can directly
|
||||
take advantage of a fully virtualized network stack.</li>
|
||||
</ul>
|
||||
|
|
Loading…
Reference in a new issue