reflow 0.2.6.3 changelog

This commit is contained in:
Nick Mathewson 2015-02-19 09:54:00 -05:00
parent b099e73daf
commit 61f9030409

View File

@ -1,10 +1,9 @@
Changes in version 0.2.6.3-alpha - 2015-02-2? Changes in version 0.2.6.3-alpha - 2015-02-2?
Tor 0.2.6.3-alpha is the third (and hopefully final) alpha release in Tor 0.2.6.3-alpha is the third (and hopefully final) alpha release in
the 0.2.6.x series. It introduces support for the 0.2.6.x series. It introduces support for more kinds of sockets,
more kinds of sockets, makes it harder to accidentally run an makes it harder to accidentally run an exit, improves our
exit, improves our multithreading backend, incorporates several fixes multithreading backend, incorporates several fixes for the
for the AutomapHostsOnResolve option, and fixes numerous other AutomapHostsOnResolve option, and fixes numerous other bugs besides.
bugs besides.
If no major regressions or security holes are found in this version, If no major regressions or security holes are found in this version,
the next version will be a release candidate. the next version will be a release candidate.
@ -16,12 +15,13 @@ Changes in version 0.2.6.3-alpha - 2015-02-2?
o Major features (security, unix domain sockets): o Major features (security, unix domain sockets):
- Allow SocksPort to be an AF_UNIX Unix Domain Socket. Now high risk - Allow SocksPort to be an AF_UNIX Unix Domain Socket. Now high risk
applications can reach Tor without having to create AF_INET or applications can reach Tor without having to create AF_INET or
AF_INET6 sockets, meaning they can completely disable their ability AF_INET6 sockets, meaning they can completely disable their
to make non-Tor network connections. To create a socket of this ability to make non-Tor network connections. To create a socket of
type, use "SocksPort unix:/path/to/socket". Implements ticket 12585. this type, use "SocksPort unix:/path/to/socket". Implements
ticket 12585.
- Support mapping hidden service virtual ports to AF_UNIX sockets. - Support mapping hidden service virtual ports to AF_UNIX sockets.
The syntax is "HiddenServicePort 80 The syntax is "HiddenServicePort 80 unix:/path/to/socket".
unix:/path/to/socket". Implements ticket 11485. Implements ticket 11485.
o Major features (changed defaults): o Major features (changed defaults):
- Prevent relay operators from unintentionally running exits: When a - Prevent relay operators from unintentionally running exits: When a
@ -31,21 +31,6 @@ Changes in version 0.2.6.3-alpha - 2015-02-2?
can indicate accidental misconfiguration. Setting "ExitRelay 0" can indicate accidental misconfiguration. Setting "ExitRelay 0"
stops Tor from running as an exit relay. Closes ticket 10067. stops Tor from running as an exit relay. Closes ticket 10067.
o Major features (performance):
- Make the CPU worker implementation more efficient by avoiding
the kernel and lengthening pipelines. The original implementation
used sockets to transfer data from the main thread to the workers,
and didn't allow any thread to be assigned more than a single
piece of work at once. The new implementation avoids communications
overhead by making requests in shared memory, avoiding kernel IO
where possible, and keeping more requests in flight at once.
Implements ticket 9682.
o Major features (relay):
- Raise the minimum acceptable configured bandwidth rate for bridges
to 50 KiB/sec and for relays to 75 KiB/sec. (The old values were
20 KiB/sec.) Closes ticket 13822.
o Major features (directory system): o Major features (directory system):
- When downloading server- or microdescriptors from a directory - When downloading server- or microdescriptors from a directory
server, we no longer launch multiple simultaneous requests to the server, we no longer launch multiple simultaneous requests to the
@ -60,10 +45,25 @@ Changes in version 0.2.6.3-alpha - 2015-02-2?
notified of updates and their correct digests. Implements proposal notified of updates and their correct digests. Implements proposal
227. Closes ticket 10395. 227. Closes ticket 10395.
o Major features (performance):
- Make the CPU worker implementation more efficient by avoiding the
kernel and lengthening pipelines. The original implementation used
sockets to transfer data from the main thread to the workers, and
didn't allow any thread to be assigned more than a single piece of
work at once. The new implementation avoids communications
overhead by making requests in shared memory, avoiding kernel IO
where possible, and keeping more requests in flight at once.
Implements ticket 9682.
o Major features (relay):
- Raise the minimum acceptable configured bandwidth rate for bridges
to 50 KiB/sec and for relays to 75 KiB/sec. (The old values were
20 KiB/sec.) Closes ticket 13822.
o Major bugfixes (client): o Major bugfixes (client):
- Allow MapAddress and AutomapHostsOnResolve to work together when - Allow MapAddress and AutomapHostsOnResolve to work together when
an address is mapped into another address type (like .onion) an address is mapped into another address type (like .onion) that
that must be automapped at resolve time. Fixes bug 7555; bugfix must be automapped at resolve time. Fixes bug 7555; bugfix
on 0.2.0.1-alpha. on 0.2.0.1-alpha.
o Major bugfixes (exit node stability): o Major bugfixes (exit node stability):
@ -81,8 +81,8 @@ Changes in version 0.2.6.3-alpha - 2015-02-2?
o Minor features (build): o Minor features (build):
- New --disable-system-torrc compile-time option to prevent Tor from - New --disable-system-torrc compile-time option to prevent Tor from
looking for the system-wide torrc or torrc-defaults files. Resolves looking for the system-wide torrc or torrc-defaults files.
ticket 13037. Resolves ticket 13037.
o Minor features (controller): o Minor features (controller):
- Include SOCKS_USERNAME and SOCKS_PASSWORD values in controller - Include SOCKS_USERNAME and SOCKS_PASSWORD values in controller
@ -107,8 +107,8 @@ Changes in version 0.2.6.3-alpha - 2015-02-2?
for small requests. Closes ticket 11791. for small requests. Closes ticket 11791.
o Minor features (geoip): o Minor features (geoip):
- Update geoip and geoip6 files to the January 7 2015 Maxmind GeoLite2 - Update geoip and geoip6 files to the January 7 2015 Maxmind
Country database. GeoLite2 Country database.
o Minor features (guard nodes): o Minor features (guard nodes):
- Reduce the time delay before saving guard status to disk from 10 - Reduce the time delay before saving guard status to disk from 10
@ -142,8 +142,8 @@ Changes in version 0.2.6.3-alpha - 2015-02-2?
o Minor features (stability): o Minor features (stability):
- Add assertions in our hash-table iteration code to check for - Add assertions in our hash-table iteration code to check for
corrupted values that could cause infinite loops. Closes ticket corrupted values that could cause infinite loops. Closes
11737. ticket 11737.
o Minor features (systemd): o Minor features (systemd):
- Various improvements and modernizations in systemd hardening - Various improvements and modernizations in systemd hardening
@ -153,9 +153,10 @@ Changes in version 0.2.6.3-alpha - 2015-02-2?
- Drop the minimum RendPostPeriod on a testing network to 5 seconds, - Drop the minimum RendPostPeriod on a testing network to 5 seconds,
and the default on a testing network to 2 minutes. Drop the and the default on a testing network to 2 minutes. Drop the
MIN_REND_INITIAL_POST_DELAY on a testing network to 5 seconds, but MIN_REND_INITIAL_POST_DELAY on a testing network to 5 seconds, but
keep the default on a testing network at 30 seconds. This reduces HS keep the default on a testing network at 30 seconds. This reduces
bootstrap time to around 25 seconds. Also, change the default time HS bootstrap time to around 25 seconds. Also, change the default
in test-network.sh to match. Closes ticket 13401. Patch by "teor". time in test-network.sh to match. Closes ticket 13401. Patch
by "teor".
- Create TestingDirAuthVoteHSDir to correspond to - Create TestingDirAuthVoteHSDir to correspond to
TestingDirAuthVoteExit/Guard. Ensures that authorities vote the TestingDirAuthVoteExit/Guard. Ensures that authorities vote the
HSDir flag for the listed relays regardless of uptime or ORPort HSDir flag for the listed relays regardless of uptime or ORPort
@ -174,9 +175,9 @@ Changes in version 0.2.6.3-alpha - 2015-02-2?
on 0.2.0.1-alpha. on 0.2.0.1-alpha.
o Minor bugfixes (client DNS): o Minor bugfixes (client DNS):
- Report the correct cached DNS expiration times on SOCKS port or in DNS replies. Previously, we - Report the correct cached DNS expiration times on SOCKS port or in
would report everything as "never expires." Fixes bug 14193; DNS replies. Previously, we would report everything as "never
bugfix on 0.2.3.17-beta. expires." Fixes bug 14193; bugfix on 0.2.3.17-beta.
- Avoid a small memory leak when we find a cached answer for a - Avoid a small memory leak when we find a cached answer for a
reverse DNS lookup in a client-side DNS cache. (Remember, client- reverse DNS lookup in a client-side DNS cache. (Remember, client-
side DNS caching is off by default, and is not recommended.) Fixes side DNS caching is off by default, and is not recommended.) Fixes
@ -251,8 +252,8 @@ Changes in version 0.2.6.3-alpha - 2015-02-2?
o Minor bugfixes (hidden services): o Minor bugfixes (hidden services):
- Close the introduction circuit when we have no more usable intro - Close the introduction circuit when we have no more usable intro
points, instead of waiting for it to time out. This also ensures points, instead of waiting for it to time out. This also ensures
that no follow-up HS descriptor fetch is triggered when the circuit that no follow-up HS descriptor fetch is triggered when the
eventually times out. Fixes bug 14224; bugfix on 0.0.6. circuit eventually times out. Fixes bug 14224; bugfix on 0.0.6.
- When fetching a hidden service descriptor for a down service that - When fetching a hidden service descriptor for a down service that
was recently up, do not keep refetching until we try the same was recently up, do not keep refetching until we try the same
replica twice in a row. Fixes bug 14219; bugfix on 0.2.0.10-alpha. replica twice in a row. Fixes bug 14219; bugfix on 0.2.0.10-alpha.