ECO kit KERNEL-UPDATE-112_A053
KERNEL-UPDATE-112_A053 - Kernel ECO kit Rev 11.2 for MultiNet V5.3A 9-Feb-2012
Copyright © 2009, 2010, 2011, 2012 Process Software, LLC
This kit updates MultiNet V5.3 Rev A with a new version of MULTINET.EXE
for MultiNet for OpenVMS (VMS/VAX V5.5-2 and later, VMS/Alpha V6.1 and
later), or MULTINET_KERNEL.EXE for MultiNet for VMS/Integrity V8.2 and
later.
The ranking for this ECO is 1.
The overall ranking for it is 1 (KERNEL-UPDATE-112_A053).
The following changes have been made in this kit:
- Correct a possible crash.
ECO Rank: 1 KERNEL-UPDATE-112_A053 DE 11120
- Allow IPv6 Link Local addresses to be used without an interface index
in the second part of the address. This makes the use of addresses more
consistent with other implementations. When the interface index is not
specified the first interface with an IPv6 Link Local address will be
used to transmit packets.
ECO Rank: 3 KERNEL-UPDATE-112_A053 DE 11193
----------------------------------------
This kit also includes the following changes from previous ECO kits:
- Correct a patch assembly error of the fix for DE 10849, which changes
how cluster IP addresses are added to the ARP table.
ECO Rank: 3 KERNEL-UPDATE-102_A053 DE 10849
- Don't surrender the MultiNet spin lock when the 500 micro second timer
runs out if there are no other CPUs waiting for the spin lock. This can
reduce variability in processing time.
ECO Rank: 3 KERNEL-UPDATE-102_A053 DE
- Improvements to filtering. A packet that arrives on a different
interface than the one that it is addressed to will now also be checked
against the filters on the interface that it is addressed to.
ECO Rank: 3 KERNEL-UPDATE-101_A053
- Add a kernel variable (LO_REDUCEBY) that allows the amount that TCP
maximum segment size is restricted (reduced) by for the loopback
interface. The default value is 2668, which makes the maximum segment
size the same as a standard ethernet interface. Traditionally MultiNet
has restricted this because there are some applications that have
problems when receiving data in larger chunks. We have learned that
there are some applications (IBM Websphere MQ is an example) that are
adversely affected by this segmentation. This kernel variable has been
added so that the segmentation action can be adjusted to suit these
programs.
ECO Rank: 3 KERNEL-UPDATE-090_A053 DE 11097
- Correct a memory leak when routes that are created after receiving an
ICMP redirect timeout occurs when the reference count is non-zero.
ECO Rank: 1 KERNEL-UPDATE-081_A053 DE 10938
- Correct a potential crash due insufficient interlocking.
ECO Rank: 1 KERNEL-UPDATE-080_A053 DE 11043
- Correct a potential crash due to a null pointer
ECO Rank: 1 KERNEL-UPDATE-080_A053 DE 11042
- Correct a problem where port obfuscation can result in the previous
port being reused. ECO Rank: 3 KERNEL-UPDATE-080_A053
- Don't allow port obfuscation to generate port numbers below ephemeral
min. (ECO Rank: 3 KERNEL-UPDATE-070_A053 DE 11010)
- Send IP packet identification in correct order for UDP unknown port
ICMP message (ECO Rank: 3 KERNEL-UPDATE-070_A053 DE 11006)
- Improve handling of program keep alive options to more closely match
TCP/IP services. (ECO Rank: 3 KERNEL-UPDATE-070_a053 DE 10837)
- AXP and Integrity system support for RACOON2-010_A053, which provides
the Racoon2 IPSec Key Exchange utility.
ECO Rank: 3 KERNEL-UPDATE-060_A053
- Correct an error in processing IPv6 connect requests; this allows WEBM
to run. UCXDRIVER-030_A053 and CONFIGURE_NETWORK-010_A053 are also
required for WEBM to run.
ECO Rank: 3 KERNEL-UPDATE-060_A053 DE 10999
- Remove a debugging statement that was left in a recent ECO.
ECO Rank: 3 KERNEL-UPDATE-054_A053
- Add the kernel variable USE_PORT_OBFUSCATION which can be set to
0 (zero) to disable the port obfuscation code for ephemeral ports.
Some applications have significant problems with ephemeral port
obfuscation.
ECO Rank: 3 KERNEL-UPDATE-054_A053 DE 10968
- Change how MultiNet waits for its spinlock for telnet output.
This change is designed to remove contention by creating a new work
list item for processing.
ECO Rank: 3 KERNEL-UPDATE-053_A053
- Remove code that attempted to address draft-ietf-tcpm-tcpsecure-00.txt
as it appears to cause occaisional unexpected jumps in sequence
numbers. We will continue to investigate the problems with this code.
ECO Rank: 3 KERNEL-UPDATE-042_A053
- PD interfaces no longer support IPv6 as use of IPv6 on PD interfaces
can cause problems with IPv6 duplicate address detection. SE interfaces
can support multiple addresses so there is no loss of functionality.
ECO Rank: 3 KERNEL-UPDATE-041_A053
- Improvements based upon draft-ietf-tcpm-tcpsecure-00.txt to reduce
vulnerabilities.
ECO Rank: 3 KERNEL-UPDATE-040_A053 DE 10914
- Change the ephemeral port obfuscation algorithm such that a random
increment is chosen instead of a random port. This lengthens the time
until a port number is chosen again and reduces problems that FTP may
have with MPUT and MGET.
ECO Rank: 3 KERNEL-UPDATE-040_A053 DE 10916
- Racoon2 support: Correct an error in ESP code that is included in the
kernel; IPSec support for the STF (6to4) interface; Correct some
potential crashes in IPSec code.
ECO Rank: 3 KERNEL-UPDATE-040_A053
- Improvements to path MTU support when there is an existing path MTU
route.
ECO Rank: 3 KERNEL-UPDATE-040_A053
- Reduce contention on the QUEUEAST spinlock for VMS V8 (AXP and ia64).
ECO Rank: 3 KERNEL-UPDATE-040_A053
- Limit how long MultiNet's main loop holds the primary MultiNet spinlock
before releasing it to prevent spinwait timeouts. Also reduce
contention for IOLOCK8 on VMS V8.
ECO Rank: 3 KERNEL-UPDATE-040_A053 DE 10928
- When the only remaining packet filter on an interface is a PERMIT ALL
filter, delete the filter to improve performance by not performing
unnecessary packet filtering.
- Correct an error path in failure to allocate memory that can cause a
system crash.
ECO Rank: 1 KERNEL-UPDATE-030_A053 DE 10876
- Correct an error in reporting which kinds of activity are present on
channels from select calls.
ECO Rank: 3 KERNEL-UPDATE-020_A053 DE 10869
- Change how Cluster IP address are added to the ARP table so they can be
more easily deleted when the system releases the address.
ECO Rank: 3 KERNEL-UPDATE-020_A053 DE 10849
- Correct an data structure initialization error that can cause a system
crash.
ECO Rank: 1 KERNEL-UPDATE-020_A053 DE 10848
- Correct an error in IPv6 packet processing that can cause a system crash.
(DE 10843 ECO KERNEL-UPDATE-010_A053) ECO Rank: 1
- Correct some errors in ICMP redirect processing.
You must reboot after installing this ECO kit for the changes to
take effect.