NetBSD 11.0

The release adds a dedicated RISC-V port, meaning developers can compile and run NetBSD directly on RISC-V hardware without relying on emulation layers. This expands the set of architectures NetBSD officially supports and provides a clean baseline for RISC-V-based appliances or development boards. Engineers building firmware or custom kernels for RISC-V can now use the same NetBSD userland and tooling they already know. The port is presented as a new architecture option in the build system and installation media.

Linux system call compatibility has been refined in the compat_linux() layer, which translates Linux syscalls to native NetBSD calls. The changes improve the success rate of running unmodified Linux binaries, reducing the need for recompilation or static linking. For teams that depend on Linux-only utilities or legacy binaries, this can lower operational overhead when deploying on NetBSD servers or workstations. The update does not change the ABI of native NetBSD programs.

Improvements to the NPF firewall include better packet handling performance and additional filtering capabilities, as noted in the release notes. Users who rely on NPF for network segmentation, NAT, or stateful inspection will see updated behavior that may affect existing rule sets. Administrators should review the updated NPF documentation to adjust any rules that depend on the previous packet processing order. The changes are aimed at high-throughput scenarios such as routers or firewalls built on NetBSD.

The announcement also mentions practical installation details: ISO images have been split into separate files, and ARM users can download pre-configured U-Boot images. This affects how engineers create boot media or provision ARM-based devices, requiring them to select the appropriate split image or ARM-specific build. No other architectural changes are described in the supplied material. Teams should beeds.