[tor-commits] [tor/master] reflow 0.2.6.3 changelog
nickm at torproject.org
nickm at torproject.org
Thu Feb 19 14:54:15 UTC 2015
commit 61f9030409143efff07b3a9b6d12dbc05ad36587
Author: Nick Mathewson <nickm at torproject.org>
Date: Thu Feb 19 09:54:00 2015 -0500
reflow 0.2.6.3 changelog
---
ChangeLog | 83 +++++++++++++++++++++++++++++++------------------------------
1 file changed, 42 insertions(+), 41 deletions(-)
diff --git a/ChangeLog b/ChangeLog
index 09a915b..bcade74 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,10 +1,9 @@
Changes in version 0.2.6.3-alpha - 2015-02-2?
Tor 0.2.6.3-alpha is the third (and hopefully final) alpha release in
- the 0.2.6.x series. It introduces support for
- more kinds of sockets, makes it harder to accidentally run an
- exit, improves our multithreading backend, incorporates several fixes
- for the AutomapHostsOnResolve option, and fixes numerous other
- bugs besides.
+ the 0.2.6.x series. It introduces support for more kinds of sockets,
+ makes it harder to accidentally run an exit, improves our
+ multithreading backend, incorporates several fixes for the
+ AutomapHostsOnResolve option, and fixes numerous other bugs besides.
If no major regressions or security holes are found in this version,
the next version will be a release candidate.
@@ -16,12 +15,13 @@ Changes in version 0.2.6.3-alpha - 2015-02-2?
o Major features (security, unix domain sockets):
- Allow SocksPort to be an AF_UNIX Unix Domain Socket. Now high risk
applications can reach Tor without having to create AF_INET or
- AF_INET6 sockets, meaning they can completely disable their ability
- to make non-Tor network connections. To create a socket of this
- type, use "SocksPort unix:/path/to/socket". Implements ticket 12585.
+ AF_INET6 sockets, meaning they can completely disable their
+ ability to make non-Tor network connections. To create a socket of
+ this type, use "SocksPort unix:/path/to/socket". Implements
+ ticket 12585.
- Support mapping hidden service virtual ports to AF_UNIX sockets.
- The syntax is "HiddenServicePort 80
- unix:/path/to/socket". Implements ticket 11485.
+ The syntax is "HiddenServicePort 80 unix:/path/to/socket".
+ Implements ticket 11485.
o Major features (changed defaults):
- Prevent relay operators from unintentionally running exits: When a
@@ -31,21 +31,6 @@ Changes in version 0.2.6.3-alpha - 2015-02-2?
can indicate accidental misconfiguration. Setting "ExitRelay 0"
stops Tor from running as an exit relay. Closes ticket 10067.
- o Major features (performance):
- - Make the CPU worker implementation more efficient by avoiding
- the kernel and lengthening pipelines. The original implementation
- used sockets to transfer data from the main thread to the workers,
- and didn't allow any thread to be assigned more than a single
- piece of work at once. The new implementation avoids communications
- overhead by making requests in shared memory, avoiding kernel IO
- where possible, and keeping more requests in flight at once.
- Implements ticket 9682.
-
- o Major features (relay):
- - Raise the minimum acceptable configured bandwidth rate for bridges
- to 50 KiB/sec and for relays to 75 KiB/sec. (The old values were
- 20 KiB/sec.) Closes ticket 13822.
-
o Major features (directory system):
- When downloading server- or microdescriptors from a directory
server, we no longer launch multiple simultaneous requests to the
@@ -60,10 +45,25 @@ Changes in version 0.2.6.3-alpha - 2015-02-2?
notified of updates and their correct digests. Implements proposal
227. Closes ticket 10395.
+ o Major features (performance):
+ - Make the CPU worker implementation more efficient by avoiding the
+ kernel and lengthening pipelines. The original implementation used
+ sockets to transfer data from the main thread to the workers, and
+ didn't allow any thread to be assigned more than a single piece of
+ work at once. The new implementation avoids communications
+ overhead by making requests in shared memory, avoiding kernel IO
+ where possible, and keeping more requests in flight at once.
+ Implements ticket 9682.
+
+ o Major features (relay):
+ - Raise the minimum acceptable configured bandwidth rate for bridges
+ to 50 KiB/sec and for relays to 75 KiB/sec. (The old values were
+ 20 KiB/sec.) Closes ticket 13822.
+
o Major bugfixes (client):
- Allow MapAddress and AutomapHostsOnResolve to work together when
- an address is mapped into another address type (like .onion)
- that must be automapped at resolve time. Fixes bug 7555; bugfix
+ an address is mapped into another address type (like .onion) that
+ must be automapped at resolve time. Fixes bug 7555; bugfix
on 0.2.0.1-alpha.
o Major bugfixes (exit node stability):
@@ -81,8 +81,8 @@ Changes in version 0.2.6.3-alpha - 2015-02-2?
o Minor features (build):
- New --disable-system-torrc compile-time option to prevent Tor from
- looking for the system-wide torrc or torrc-defaults files. Resolves
- ticket 13037.
+ looking for the system-wide torrc or torrc-defaults files.
+ Resolves ticket 13037.
o Minor features (controller):
- Include SOCKS_USERNAME and SOCKS_PASSWORD values in controller
@@ -107,8 +107,8 @@ Changes in version 0.2.6.3-alpha - 2015-02-2?
for small requests. Closes ticket 11791.
o Minor features (geoip):
- - Update geoip and geoip6 files to the January 7 2015 Maxmind GeoLite2
- Country database.
+ - Update geoip and geoip6 files to the January 7 2015 Maxmind
+ GeoLite2 Country database.
o Minor features (guard nodes):
- Reduce the time delay before saving guard status to disk from 10
@@ -142,8 +142,8 @@ Changes in version 0.2.6.3-alpha - 2015-02-2?
o Minor features (stability):
- Add assertions in our hash-table iteration code to check for
- corrupted values that could cause infinite loops. Closes ticket
- 11737.
+ corrupted values that could cause infinite loops. Closes
+ ticket 11737.
o Minor features (systemd):
- Various improvements and modernizations in systemd hardening
@@ -153,9 +153,10 @@ Changes in version 0.2.6.3-alpha - 2015-02-2?
- Drop the minimum RendPostPeriod on a testing network to 5 seconds,
and the default on a testing network to 2 minutes. Drop the
MIN_REND_INITIAL_POST_DELAY on a testing network to 5 seconds, but
- keep the default on a testing network at 30 seconds. This reduces HS
- bootstrap time to around 25 seconds. Also, change the default time
- in test-network.sh to match. Closes ticket 13401. Patch by "teor".
+ keep the default on a testing network at 30 seconds. This reduces
+ HS bootstrap time to around 25 seconds. Also, change the default
+ time in test-network.sh to match. Closes ticket 13401. Patch
+ by "teor".
- Create TestingDirAuthVoteHSDir to correspond to
TestingDirAuthVoteExit/Guard. Ensures that authorities vote the
HSDir flag for the listed relays regardless of uptime or ORPort
@@ -174,9 +175,9 @@ Changes in version 0.2.6.3-alpha - 2015-02-2?
on 0.2.0.1-alpha.
o Minor bugfixes (client DNS):
- - Report the correct cached DNS expiration times on SOCKS port or in DNS replies. Previously, we
- would report everything as "never expires." Fixes bug 14193;
- bugfix on 0.2.3.17-beta.
+ - Report the correct cached DNS expiration times on SOCKS port or in
+ DNS replies. Previously, we would report everything as "never
+ expires." Fixes bug 14193; bugfix on 0.2.3.17-beta.
- Avoid a small memory leak when we find a cached answer for a
reverse DNS lookup in a client-side DNS cache. (Remember, client-
side DNS caching is off by default, and is not recommended.) Fixes
@@ -251,8 +252,8 @@ Changes in version 0.2.6.3-alpha - 2015-02-2?
o Minor bugfixes (hidden services):
- Close the introduction circuit when we have no more usable intro
points, instead of waiting for it to time out. This also ensures
- that no follow-up HS descriptor fetch is triggered when the circuit
- eventually times out. Fixes bug 14224; bugfix on 0.0.6.
+ that no follow-up HS descriptor fetch is triggered when the
+ circuit eventually times out. Fixes bug 14224; bugfix on 0.0.6.
- When fetching a hidden service descriptor for a down service that
was recently up, do not keep refetching until we try the same
replica twice in a row. Fixes bug 14219; bugfix on 0.2.0.10-alpha.
More information about the tor-commits
mailing list