From owner-svn-src-stable-11@freebsd.org  Tue May  9 17:21:43 2017
Return-Path: <owner-svn-src-stable-11@freebsd.org>
Delivered-To: svn-src-stable-11@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 566A0D65C1C;
 Tue,  9 May 2017 17:21:43 +0000 (UTC) (envelope-from gjb@FreeBSD.org)
Received: from repo.freebsd.org (repo.freebsd.org
 [IPv6:2610:1c1:1:6068::e6a:0])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 0A2D499E;
 Tue,  9 May 2017 17:21:42 +0000 (UTC) (envelope-from gjb@FreeBSD.org)
Received: from repo.freebsd.org ([127.0.1.37])
 by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id v49HLgm8057252;
 Tue, 9 May 2017 17:21:42 GMT (envelope-from gjb@FreeBSD.org)
Received: (from gjb@localhost)
 by repo.freebsd.org (8.15.2/8.15.2/Submit) id v49HLgK1057251;
 Tue, 9 May 2017 17:21:42 GMT (envelope-from gjb@FreeBSD.org)
Message-Id: <201705091721.v49HLgK1057251@repo.freebsd.org>
X-Authentication-Warning: repo.freebsd.org: gjb set sender to gjb@FreeBSD.org
 using -f
From: Glen Barber <gjb@FreeBSD.org>
Date: Tue, 9 May 2017 17:21:42 +0000 (UTC)
To: src-committers@freebsd.org, svn-src-all@freebsd.org,
 svn-src-stable@freebsd.org, svn-src-stable-11@freebsd.org
Subject: svn commit: r318052 - stable/11/release/doc/en_US.ISO8859-1/relnotes
X-SVN-Group: stable-11
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-BeenThere: svn-src-stable-11@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: SVN commit messages for only the 11-stable src tree
 <svn-src-stable-11.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/svn-src-stable-11>, 
 <mailto:svn-src-stable-11-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/svn-src-stable-11/>
List-Post: <mailto:svn-src-stable-11@freebsd.org>
List-Help: <mailto:svn-src-stable-11-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/svn-src-stable-11>, 
 <mailto:svn-src-stable-11-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 09 May 2017 17:21:43 -0000

Author: gjb
Date: Tue May  9 17:21:41 2017
New Revision: 318052
URL: https://svnweb.freebsd.org/changeset/base/318052

Log:
  Document r315514:
  - IPSEC_FILTERTUNNEL deprecation
  - ipsec.ko and tcpmd5.ko additions
  - IPSEC_NAT_T removal
  - setkey(8) updates
  
  Sponsored by:	The FreeBSD Foundation

Modified:
  stable/11/release/doc/en_US.ISO8859-1/relnotes/article.xml

Modified: stable/11/release/doc/en_US.ISO8859-1/relnotes/article.xml
==============================================================================
--- stable/11/release/doc/en_US.ISO8859-1/relnotes/article.xml	Tue May  9 17:21:41 2017	(r318051)
+++ stable/11/release/doc/en_US.ISO8859-1/relnotes/article.xml	Tue May  9 17:21:41 2017	(r318052)
@@ -174,6 +174,14 @@
     <sect2 xml:id="userland-programs">
       <title>Userland Application Changes</title>
 
+      <para revision="315514" contrib="sponsor" sponsor="&yandex;">The
+	&man.setkey.8; utility has been modified to show the runtime
+	<acronym>NAT-T</acronym> configuration.  The
+	<literal>-g</literal> and <literal>-t</literal> flags have
+	been added, which list only global and virtual policies,
+	respectively when used with the <literal>-D</literal> and
+	<literal>-P</literal> flags.</para>
+
       <para revision="316098" contrib="sponsor"
 	sponsor="&dellemc;">The &man.getaddrinfo.1; utility has been
 	added, ported from NetBSD.</para>
@@ -276,12 +284,24 @@
     <sect2 xml:id="kernel-config">
       <title>Kernel Configuration</title>
 
-      <para>&nbsp;</para>
+      <para revision="315514" contrib="sponsor" sponsor="&yandex;">The
+	<literal>IPSEC_NAT_T</literal> kernel configuration option has
+	been removed.  Support for <acronym>NAT-T</acronym> is now
+	enabled by default.</para>
+
+      <para revision="315514" contrib="sponsor" sponsor="&yandex;">The
+	<literal>IPSEC_FILTERTUNNEL</literal> kernel option has been
+	removed, which was deprecated by the
+	<literal>net.inet.ipsec.filtertunnel</literal> sysctl.</para>
     </sect2>
 
     <sect2 xml:id="kernel-modules">
       <title>Kernel Modules</title>
 
+      <para revision="315514" contrib="sponsor" sponsor="&yandex;">The
+	<literal>ipsec</literal> and <literal>tcpmd5</literal> kernel
+	modules have been added.</para>
+
       <para revision="316274" contrib="sponsor" sponsor="&yandex;">The
 	&man.ipfw.4; packet filter has been updated to add support for
 	named dynamic states.</para>
@@ -449,7 +469,10 @@
     <sect2 xml:id="network-protocols">
       <title>Network Protocols</title>
 
-      <para>&nbsp;</para>
+      <para revision="315514" contrib="sponsor"
+	sponsor="&yandex;">Support for the
+	<literal>UDP_ENCAP_ESPINUDP_NON_IKE</literal> encapsulation
+	type has been removed.</para>
     </sect2>
   </sect1>