====== Version 5.0 Katyusha ======
{{indexmenu_n>94}}

New in version 5.0 Katyusha - Katyusha is a weapon of victoy in World War II - BM-13 mass rocket launcher that has the imposition of one blast wave on another increases the destructive effect several times. First usage of Katyusha took place on July 14, 1941, destroying the German echelons near Orsha. During the war, about 10,000 Katyushas were produced.

  - Added [[dpi:opt_cgnat|Carrier Grade NAT]]

Version 5.1

  - URL blocking with any starts (like *.domain.org/path). Added in black, white and RKN list.
  - Added parameter [[dpi:dpi_components:platform:dpi_inst_spec:dpi_inst_spec_mirror|emit_duplication]], useful for out of line DPI schema blocking

Version 5.2:

  - Fixed fragmented http requests detection
  - Fixed CGNAT error that limit income trafic

Version 5.2.1:

  - Fixed CGNAT check sum correction that not working correctly for several IP address combinations

Version 5.3:

  - Added SNI support in wite and black list for HTTPS and QUIC
  - Added SNI blocking in the ads block (now possible block ads in youtube) 
  - Added hostname HTTPS and QUIC into clickstream
  - Added * for blocking with mask on start of URL (*.domail.com/path)

Version 5.4 (5.3-101):
  - Fixed check order in URL blocking for white and black lists: 1-st step SNI check, if no SNI or host is not in SNI list then check on IP/CNAME list
  - Fixed IPFIX export of hostname in HTTPS and QUIС
  - Added automatic exluding of white IP from CGNAT service

Version 5.5.1:
  - Improved hostname detaction in HTTPS
  - Added [[dpi:dpi_options:opt_li:li_ipfix|IPFIX metadata exort acording SORM-3]] (PPRF №538)

Version 5.6.1:
  - Added POST requests to clickstream
  - Fixed MAC address error in RST packets to the subscriber side when SNI blocking that for several routed blocked traffic 

Version 5.7 и 5.7.1:
  - Fixed CG-NAT errors (in 5.7.1 for multicluster systems)
  - Added HTTP block by IP:PORT (for proxy blocking in general mode)