As previously noted, Rafael Sadowski (radowski@) has been behind a recent pickup in development of httpd(8) and relayd(8).

Now Rafael has written a new piece, entitled Headers Up! What's New in httpd and relayd, on some of his recent work on httpd(8) and relayd(8).

Among the notable additions are expanded and improved filtering and pattern matching features which make it harder to make a case for putting something like nginx in front of your httpd(8) and relayd(8) setups.

So while we at Undeadly were making notes with a view to reporting on all these features, Rafael himself beat us to it.

His latest article is well worth reading, here.

In another hint that a new OpenBSD release is close, the OpenBGPD project has announced a new release of its software, version 9.3:

We have released OpenBGPD 9.3, which will be arriving in the
OpenBGPD directory of your local OpenBSD mirror soon.

This release includes the following changes to the previous release:

    * Add shorthand for well-known "DOWNGRADE" BGP community.

    * Remove support old aspa-set table format that included per-provider AFI.
      Rpki-client stopped issuing those with the 8.5 release in July 2023.

    * Use getexecpath in the fork-and-execute privilege separation setup
      and implement portable shims for various other operating systems.

    * Various minor fixes:
       - Improve graceful restart timer handling for multi-AFI/SAFI sessions.
       - Clear the connected nexthop flag when nexthops and nexthops are
	 no longer connected.
       - Fix edge case where an ASPA table update was not applied because the
	 system erroneously thought the table did not change.

OpenBGPD-portable is known to compile and run on FreeBSD and the
Linux distributions Alpine, Debian, Fedora, RHEL/CentOS and Ubuntu.
It is our hope that packagers take interest and help adapt OpenBGPD-portable
to more distributions.

We welcome feedback and improvements from the broader community.
Thanks to all of the contributors who helped make this release
possible.

Theo de Raadt (deraadt@) updated the version of OpenBSD -current from "8.0" to "8.0-current".

List:       openbsd-cvs
Subject:    CVS: cvs.openbsd.org: src
From:       Theo de Raadt <deraadt () cvs ! openbsd ! org>
Date:       2026-09-30 20:44:06
Message-ID: 93920a1f5b4035b8 () cvs ! openbsd ! org

CVSROOT:	/cvs
Module name:	src
Changes by:	deraadt@cvs.openbsd.org	2026/09/30 14:44:06

Modified files:
	sys/conf       : newvers.sh 

Log message:
8.0 -current development

Thes means that those running the latest-and-greatest [via a sufficiently new snapshot or built from source] no longer need to use "-D snap" with pkg_add(1) (and pkg_info(1)).

The OpenBSD 8.0 release cycle is entering its final phases…

With the following commit, Theo de Raadt (deraadt@) moved -current to version 8.0 (dropping the "-beta"):

CVSROOT:	/cvs
Module name:	src
Changes by:	deraadt@cvs.openbsd.org	2026/09/26 10:41:23

Modified files:
	sys/conf       : newvers.sh 

Log message:
leave -beta

For those unfamiliar with the process:
this is not the 8.0 release, but is part of the standard build-up to the release.

Remember: It's time to start using "-D snap" with pkg_add(1) (and pkg_info(1)).

(Regular readers will know what comes next…)
This serves as an excellent reminder to upgrade snapshots frequently, test both base and ports, and report problems [plus, of course, donate!].

Job Snijders (job@) imported rtrd(8), and its associated control program, rtrctl(8):

CVSROOT:	/cvs
Module name:	src
Changes by:	job@cvs.openbsd.org	2026/09/16 10:11:46

Added files:
	usr.sbin/rtrctl: Makefile ometric.c ometric.h rtrctl.8 rtrctl.c 
	usr.sbin/rtrd  : Makefile RTRX.PROTOCOL cache.c cache.h 
	                 commands.c commands.h hash.c hash.h ip_utils.c 
	                 ip_utils.h logs.c logs.h packets.c packets.h 
	                 rtr_config.h rtrd.8 rtrd.c sched.c sched.h 
	                 send.c send.h signals.c signals.h sockets.c 
	                 sockets.h stats.c stats.h structs.h tables.c 
	                 tables.h version.h 

Log message:
Import rtrd(8), an easy-to-use RPKI-To-Router protocol implementation

The rtrd(8) program is intended as a scalable distribution layer to
deliver data produced by rpki-client(8) to clients such as bgpd(8)
in multi-node/multi-vendor IXP and ISP deployments. A single rtrd(8)
instance can concurrently serve many BGP routers and route servers.

Many thanks to Ralph Covelli from Hurricane Electric for creating rtrd!

OK deraadt@ claudio@

The software was later linked to the build

The original author, Ralph Covelli, is now rcovelli@.

Mike Larkin (mlarkin@) committed support for multi-processor virtual machines (i.e. guests):

CVSROOT:	/cvs
Module name:	src
Changes by:	mlarkin@cvs.openbsd.org	2026/09/17 20:35:55

Modified files:
	sys/arch/amd64/amd64: vmm_machdep.c 
	sys/arch/amd64/include: vmmvar.h 
	sys/dev/vmm    : vmm.c 
	usr.sbin/vmctl : main.c vmctl.8 vmctl.c vmctl.h 
	usr.sbin/vmd   : arm64_vm.c fw_cfg.c lapic.c lapic.h parse.y 
	                 vm.c vm.conf.5 vmd.c vmd.h x86_vm.c 

Log message:
vmm(4)/vmd(8): mp plumbing

Implements the sipi/init lapic state machine, mp IPI support and various
other changes required for mp. vmctl and man page changes for new start
and vm.conf options.

tested by dv and me on various guests

ok dv

This represents a huge jump forward in vmm(4)/vmd(8) flexibility and usability.

Version 0.129 of Game of Trees has been released (and the port updated). Complete release notes are as follows:

Filesystems on OpenBSD have come in two varieties, UFS1 or UFS2. Ori Bernstein has set out to possibly introduce a new option, the "Good Enough File System", which Ori describes as

"a new, crash-safe, snapshotting, copy on write FS that I wrote for 9front, and which I am in the process of moving to OpenBSD.

Ori gave a presentation about the work at EuroBSDCon 2026, and posted a summary message titled GEFS on OpenBSD: A very early preview to tech@, inviting hacking and testing:

List:       openbsd-tech
Subject:    GEFS on OpenBSD: A very early preview
From:       ori () eigenstate ! org
Date:       2026-09-15 15:45:05
Message-ID: EBB049B251DCF60A8C9A0575F6FC7DC9 () eigenstate ! org

Before anyone asks: I am *not* proposing to put
this in tree for a while yet.

What is it
----------
So, as people may have seen at EuroBSD, I've got a
rough, buggy, issue-filled preview of GEFS running
on OpenBSD. The port is NOT ready for production,
and data loss is currently expected, especially on
error.

In an annoucement that vastly understates the usefulness of their code, the OpenSMTPD project have announced their new OpenSMTPD 7.9.0p0 release.

The announcement says,

List:       openbsd-announce
Subject:    OpenSMTPD 7.9.0p0
From:       "Omar Polo" <op () openbsd ! org>
Date:       2026-09-13 21:11:58

OpenSMTPD is a FREE implementation of the SMTP protocol with some common
extensions. It allows ordinary machines to exchange e-mails with systems
speaking the SMTP protocol. It implements a fairly large part of RFC5321
and can already cover a large range of use-cases.