Skip to content

Robotweax SRT 0.3.0 — Crypto Providers and Admission Controls

Latest
Latest

Choose a tag to compare

View all tags
@SRTPioneer SRTPioneer released this 14 Oct 21:14
· 33 commits to main since this release
v0.3.0
4ae6330
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Robotweax SRT 0.3.0 adds crypto-provider choice, richer peer admission controls, group observability, and transport reliability fixes.

Additions

  • Mbed TLS crypto provider: supported Mbed TLS 3.6.7+ 3.6.x configurations on Linux/macOS, with static/shared consumers and cross-provider CTR/GCM interoperability. OpenSSL remains the default.
  • Peer handshake metadata: bounded snapshots during admission and after connection setup. Self-reported values are not authenticated identity.
  • Optional extension policies: OFF, REQUIRED, and listener-only IF_OFFERED policies for path labels and Standby RTT let one listener admit ordinary peers and extension-enabled peers.
  • Group retransmission statistics: group packet/byte retransmission counters include member activity through departure and final send drain.

Fixes

  • Correct false group rejections across bonded listeners and recovery from unconfirmed peer-group associations.
  • Preserve negotiated retransmission marking in File/Stream and Control/Message, enabling adaptive reorder tolerance with positive SRTO_LOSSMAXTTL bounds.
  • Preserve FileCC's window/RTT startup fallback when peer rate feedback is absent, preventing sparse acknowledgements from selecting an unnecessarily slow rate.
  • Harden callback cleanup, submitted-DATA ACK validation, peer-credit bounds and Sensor gap expiry.
  • Correct listener setup races and duplicate-admission handling.
  • Retire remote interoperability process-group descendants safely after their leader exits.

Experimental features

  • ACP1 runtime control authentication: default-off build gate and strict bilateral socket opt-in; ordinary/group Caller/Listener and Rendezvous profiles. Independent cryptographic review remains outstanding. ACP1 is unstable and is not a supported security profile or ordinary Haivision-compatible mode.
  • Peer implementation identity: default-off, bounded, self-reported implementation labels. Compatibility-version and capability negotiation remain unchanged.

Upgrade requirements

Project version is 0.3.0; the shared-library ABI moves from 0.2 to 0.3. Rebuild applications and dependencies, including source-tree C++ consumers. All 84 existing public C exports remain. The compatible SRT API and srt_getversion() remain 1.5.7. OpenSSL/AES-CTR and ordinary compatible wire behavior remain the defaults.

Windows SDK installers are provided separately for OpenSSL and BCrypt. Use SHA256SUMS to verify downloads.

Qualification limits

The corrected candidate completed all five tested finite File/Stream transfers within the original 60-second deadline; published 0.2.9 completed two. The release owner approved proceeding without a comparative resource claim: CPU, memory and throughput regression thresholds remain unqualified. All original failed cases are retained, and no general transfer-deadline guarantee is made.

Live final-loss behavior and the documented crypto replay limitations remain. ACP1's inclusion does not close the outstanding independent-review requirements.

Full changes · Qualification record

Assets 6
Loading