Skip to content

v0.8.0 — unified Junos/SRX server and operational controls

Latest
Latest

Choose a tag to compare

View all tags
@fastrevmd-lab fastrevmd-lab released this 17 Jul 16:55
v0.8.0
521c2f7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v0.8.0 combines Junos and SRX into one server and adds the operational controls needed to run that endpoint safely. Default builds expose the complete 26-tool Junos/SRX surface; Junos-only builds retain the 17-tool surface with --no-default-features.

Highlights

  • One Junos/SRX server — one binary, endpoint, process, inventory, device manager, destructive-operation lease manager, auth surface, and SIGHUP reload path.
  • Resource controls — per-router concurrency limits, per-token session caps, per-token RPS limits, and strict global session admission.
  • Operations and observability — bounded Prometheus metrics and optional native journald audit fan-out.
  • Security and packaging — scoped router-list results, cross-process destructive-operation leases, non-root container SCP support, process healthchecks, and expanded package/container security gates.

Breaking deployment change

The standalone rust-srxmcp executable, rust-srxmcp.service, and 127.0.0.1:30032/mcp endpoint are retired. Package upgrades remove the old binary, unit, and enabled-service link while preserving support bundles under /var/lib/jmcp/srx-staging/bundles.

Use the unified rust-junosmcp endpoint at the configured listener (packaged default 127.0.0.1:30030/mcp). Existing JMCP_SRX_* names are deprecated aliases for v0.8.0 only. JMCP_SRX_HTTP_PORT is ignored because there is no second listener.

Artifacts

  • rust-junosmcp_0.8.0_amd64.tar.gz
  • rust-junosmcp_0.8.0_amd64.tar.gz.sha256
  • ghcr.io/fastrevmd-lab/rust-junosmcp:0.8.0
  • ghcr.io/fastrevmd-lab/rust-junosmcp:0.8
  • ghcr.io/fastrevmd-lab/rust-junosmcp:latest

Known tracked dependency risk

Issue #110 remains open for prerelease RustCrypto dependencies inherited through russh 0.61.2. The currently available stable russh 0.62.2 still carries RC crypto dependencies, so this release retains the audited and previously exercised dependency set.

Full changelog: https://github.com/fastrevmd-lab/rustjunosmcp/blob/v0.8.0/CHANGELOG.md

Diff: v0.7.0...v0.8.0

Assets 4
Loading