no more need for separate v4/v6 groups.  ok claudio@

"prefix-set" blocks work with line breaks just fine,
probably old macro leftover.
OK job claudio

compute, based upon flags.  OpenBGPD compatible format by default if
no options, to integrate with bgpd.conf and bgpctl reload.  Adapt
mtree and stuff.  This will receive further refactoring...
ok benno job

discussed at length with claudio and benno

OK otto

ok jmc millert

surround words with double quote.  Also fix a bug in the man page
that module argument was missing for "module set".

Note that unwind(8) works without a config file in many (most?) cases.
This provides an example on how to use the captive portal detection
feature.
Input benno
Input & OK sthen

agreement url in here we no longer need to updated it all the time.
OK deraadt

or-longer at useage time.
ok job benno

OK phessler@

network prefix-set ... and filters with prefix-set ... or-longer.
ok claudio@

commas may become a syntax error.

We're aiming to work towards an examples/bgpd.conf file that is a good starting
point for real world deployments rather than a showcase of all capabilities
bgpd(8) has.
OK deraadt@ claudio@

Macros get sometimes logged so we should not encurage to use them for
sensitive data.

that, the macro used was password and if we changed it to something like
pass="secret" it would log it if the daemon was ran in verbose mode.
Hint and OK claudio@

ok florian@

Globally anycasted 6to4 has outlived its usefulness.
Operational discussion: http://seclists.org/nanog/2018/Jun/268
OK deraadt@

"root strip" was semantically incorrect and did cause some confusion
as it never stripped the root but the client's request path.
Discussed with many.  Heads up: this is a grammar change that also
affects acme-client(1) configurations (see current.html).
OK claudio@

Adjust filters and comment them to explain the basic operation.
Use large-community and a prefix-set to ensure no bad prefixes are
leaked to eBGP speakers.
With and OK job@

cases and will just be copied by users without thinking.
ok claudio@

OK benno

With & OK deraadt
input sthen
looks better to beck
OK benno

session tickets instead. Adjust example relayd.conf file.
From Matt Schwartz, reminded by jmc@ OK deraadt@

The existing example was written over a decade ago, when carp(4) was
not supporting carpdemote and did not track it's interfaces link state itself.
OK jmc@, rob@

discussed at length with benno, beck, deraadt, and florian

etc) from underlying switch interface instead of handling this on its
own.
Diff from carlos cardenas, Thanks!
ok reyk@

fixes parsing of the example configuration
OK benno@

noticed by Alex Holst
OK henning@

OK phessler@

OK phessler@

that direclty uses /etc/ssl/{,private} by default. Adapt the httpd.conf example
accordingly.
ok florian@ benno@ millert@

Instead of using the internal "vmboot", VMs will now be booted using
the external BIOS firmware in /etc/firmware/vmm-bios (which is subject
to a LGPLv3 license).  Direct booting of OpenBSD kernels or
non-default BIOS images is still supported for now using the -b/boot
option that is replacing the -k/kernel option.
As requested by Theo, vmd(8) fails if neither the default BIOS is
found nor a kernel has been specified in the VM configuration.  The
"vmm" BIOS has to be installed using fw_update(1), which will be done
automatically in most cases where the OpenBSD can fetch it after
install/upgrade.
OK mlarkin@

a single configuration file for the OpenBSD repository location.
The pkg_* tools now use installurl(5) to find the package repository.
NOTE:
/etc/installurl only contains a single URL pointing to a mirror.
Use the PKG_PATH environment variable to specify more than one
package repository.
prodded by and OK deraadt@ aja@

wireless in station mode is not supported.

See vm.conf(5) for more details.
OK mlarkin@

reported by brynet

ok florian