Version 2.8.0

[new23d]

Release Notes

• wildcard support is now in preview:
  • they are supported for the TLS protocol only
  • the character ? (or _) may be used to substitute one wild character in an FQDN to be allowed
  • the set of wild characters is from a to z, 0 to 9 and the - (hyphen or minus) only; the . (period, dot or fullstop) character is not included
  • you may use any number of wildcards in a single FQDN address (in the allowlist)
  • see our dedicated page on using wildcards with examples and the caveats expected in this preview; ensure you've read the Operation section as well
  • further improvements are expected in the next version of DiscrimiNAT; please write to us with your experience on using this feature
• suppressed repetitive warning log messages no ip addresses resolved about CRL endpoint crl.comodo.net
• improved compatibility with proprietary SSH server-side implementations, such as GoAnywhere, that send a larger than normal list of ciphers during the initial handshake
• Terraform module source includes a script rmig-update-maxUnavailable-1.sh that could be run in Cloud Shell or as part of your CI/CD pipeline to update DiscrimiNAT instances separately from a version update of the instance template for their Managed Instance Group. This has the added advantage of keeping under the number of allocated External IPs during a rolling update
  • the script will need setting of GOOGLE_CLOUD_PROJECT, MIG_NAME, MIG_EXPECTED_SIZE and MIG_REGION environment variables. Examples are provided within the script
  • variable mig_update_policy_type should be set to OPPORTUNISTIC for this to be useful

🔗 Preceding Release Notes

Released

20 Aug '24