====== Changelog of SSG BETA-version ====== {{indexmenu_n>3}} ====Changes in version 14.0 BETA1==== - [BRAS] Support for L2TP termination - [BRAS] Support for DHCP-Dual - [DPI] Migration to DPDK 24.11, support for new NICs (Intel E830 200G, Intel E630, Napatech SmartNIC) - [CLI] Added support for ''subs_id'' in commands: ''dhcp show'', ''dhcp reauth'', ''dhcp6 show'', ''dhcp6 reauth'', and ''dhcp disconnect'' ====Changes in version 14.0 BETA2==== - [DPI] New protocols added: AGORA_STREAMS(49314), AZAR_CALL(49315), WECHAT_CALL(49316), TEAMS_CALL(49317). [[dpi:dpi_options:protocols]] - [DPI] Improved support for LINE_CALL, VYKE_CALL protocols. [[dpi:dpi_options:protocols]] - [DPI] Fixed smartdrop behavior - [DPI] Added validation for complex protocols. [[dpi:dpi_options:protocols]] - [DPDK] Increased the maximum number of dispatchers to 32 - [IPFIX/Netflow] Added the ability to change IPFIX/Netflow parameters without restarting fastDPI. A new config parameter ''ipfix_reserved'' has been added to reserve memory for enabling/changing IPFIX/Netflow parameters. If IPFIX/Netflow parameters are set in the configuration file, memory reservation for IPFIX/Netflow is automatically enabled and parameters/new exporter types can be changed without restarting fastDPI. - [FastRadius] It is now possible to set both ''bind_ipv6_address'' and ''bind_ipv6_subnet''. If the Framed-IPv6-Prefix has a /128 mask, it is not checked against the ''bind_ipv6_subnet'' restriction. - CLI command ''dev info'' now includes the name of the LAG that the port belongs to - [PCRF][PPP][Framed-pool] Added: DHCP option ''Client-Id'' now includes ''tunnel-IP'' as part of the subscriber ID. Format of DHCP option ''Client-Id'' with fastpcrf.conf option ''dhcp_client_id=1'' is as follows: [conntype][subs_id][tunnel_ip] conntype = 1 (1 byte) subs_id - 16 bytes tunnel_ip - 4 bytes Tunnel IP is available in L2TP; for PPPoE, tunnel IP = 0. - [IPFIX] Message aggregation added for IPFIX streams: FullFlow/DNS/META/NAT - [IPFIX] Added parameter ''ipfix_mtu_limit'' to restrict maximum message size for IPFIX UDP packets - [IPFIX DNS] New elements added to IPFIX DNS: 224 (ipTotalLength) and 43823:3206 (DNS transaction id) - [VRRP] Fixed proper handling of the ''vrrp_enable'' option change - [BRAS][PPP] PPP session key is now compound: ''l2subs_id'' + ''tunnel-IP''. For PPPoE sessions, tunnel IP = 0. CLI commands that use ''subs_id'' as a key (''subs prop show'', ''l2tp show session'', ''l2tp term'', etc.) may now return multiple entries with the same ''l2subs_id''. ====Changes in version 14.0 BETA3==== - [DPI] Added cloud protocols with identifiers 55296..58367 - [IPFIX] Fixed IPFIX exporter reinitialization bugs - [BRAS][subs_grooming] Fixed potential crash due to race condition during fastDPI shutdown - [CLI] Added commands to display mempool properties and statistics hal mempool props hal mempool statDPDK must be built with statistics collection enabled to display mempool stats - [BRAS][DHCP] Fixed crash when parsing Framed-Pool Renew response if it contains no DHCP options - [PCRF][Acct] Fixed: Interim-Update sending is now disabled when ''Acct-Interim-Interval = 0'' is explicitly set in the RADIUS response - [VASE_CLI] Created a unified CLI for managing DPI, BRAS, DHCP (KEA), ROUTER (BIRD) with support for authorization and command logging via TACACS (VEOS 8.x required) - [SNMP] Created a module for monitoring system components via SNMP ====Update instructions==== You can check the current installed version with the command below yum info fastdpi If you have CentOS 6.x or CentOS 8.x installed, then switch the repository once with the command: sed -i -e '/^mirrorlist=http:\/\//d' -e 's/^# *baseurl=http:\/\/mirror.centos.org/baseurl=http:\/\/vault .centos.org/' /etc/yum.repos.d/CentOS-*.repo and then update as usual. To install the test version, you should issue the following command: yum --enablerepo vasexperts-beta update fastdpi Downgrade to 13.3: yum downgrade fastdpi-13.3 fastpcrf-13.3 dpiutils-13.3 fastradius-13.3 After an update or version change, a restart of the service is required.