Skip to content

v4.9.0

Latest

Choose a tag to compare

@github-actions github-actions released this 01 Sep 12:36
v4.9.0

Changelog

  • 01c5c4c GoBGP 4.9.0
  • 9d50d8e server: drop stale notifications queued while a peer session was down
  • efa0900 packet/bgp: check the per-type message length in parseBody
  • d7c721d packet/bgp: reject a body that does not match the declared length
  • 5e34ff5 test: move the KEEPALIVE length test next to the other header tests
  • e37c5a2 packet/bgp: reject KEEPALIVE messages that are not 19 octets
  • b2c73cf test: drop run_all_tests.sh and document how to run scenario tests
  • 8056d41 docs: document the listen address of the gRPC API
  • 4bbeb79 security: define what we treat as a vulnerability
  • e6c6f10 table: find the policy assignments in DeletePolicy itself
  • 4171aa9 server: drop the policy assignment of a deleted peer
  • a111094 server: store the per peer policy only for a route server client
  • c0214f7 table: report a statement that the policy does not have
  • 36cca5d table: check the import direction when deleting a policy
  • 698cc61 table: fix preserve flag in DeletePolicy
  • d4eb7d3 config: remove the collector configuration
  • 8006da4 config: log reload failures at Error again
  • 3436d72 config: log the export policy assignment failure at Error
  • 5f4a6b5 config: do not abort startup when zebra is not reachable
  • 94518c5 fix(cmd/gobgpd): delay sdnotify readiness
  • 6e08373 feat(config): return initial apply errors
  • 11a4096 server: fill in the Data field of the too long message error
  • 8f72434 packet/bgp: fill in the Data field of message header errors
  • c927e31 server: type fsmStateReason's notification as *bgp.BGPNotification
  • 88ac6da server: pass the sent NOTIFICATION to fsmStateReason in handleOpen
  • c4e13d1 server: fix wrong message wired into fsmStateReason on bad-peer-AS/invalid-msg
  • 36e6efd config: test peer group deletion against config updates
  • e585c39 config: fix deleting peer group and neighbor together
  • eb2a727 packet/bgp: include the type in an unknown route distinguisher string
  • f9152c2 packet/bgp: keep the value of an unknown route distinguisher
  • 33539ee apiutil: round-trip the SR-MPLS Binding SID label through the API
  • 8b19441 tcp-ao: expose HMAC-SHA256 profiles
  • 9341943 netutils: support HMAC-SHA256 for TCP-AO
  • cb123e9 spell-check: keep dictionary.txt sorted
  • d7ae493 spell-check: fix the "mututally" typo
  • 3b05300 config: load TCP-AO keychains from config
  • c32c92f config/oc: add TCP-AO keychain model
  • dae5a6c config/oc: reject out-of-range integers in the config file
  • 1b84a40 packet/bgp: add a test for concurrent Serialize
  • e7f8d7e packet/bgp: do not cache the message length in the BGP header
  • b010677 packet/bgp: do not store the serialized length in OPEN
  • caccf7b packet/bgp: do not store the serialized value in the capability
  • 3b6ff68 packet/bgp: make capability Len independent of Serialize
  • a40450d server: hold fsm.lock when reading fsm.recvOpen
  • 8c84624 cmd/gobgp: document the I-PMSI route target as required
  • aac7dea cmd/gobgp: validate I-PMSI route target before use
  • 42abd24 packet/bgp: serialize the full SID in the SRv6 Binding SID sub-TLV
  • c0d5851 packet/bgp: set the bottom-of-stack bit in the VPLS Label Base
  • 708c180 packet/bgp: compare the decoded NLRI in the VPLS round-trip test
  • 45c9244 packet/bgp: cover the VPLS BGP-AD NLRI at the MP_REACH level
  • 62f3d94 packet/bgp: re-serialize the VPLS NLRI in the fuzz target
  • 96105cb packet/bgp: drop the stale RFC 6074 comment in the VPLS NLRI decoder
  • 7b1d80a reject VPLS NLRI with a length other than 17
  • 02bcba0 ci: make the YANG check fail when pyang fails
  • f626c40 tools/pyang_plugins: declare the route-family typedef
  • 84868f8 tools/pyang_plugins: drop the ineffective ip-prefix deviation
  • 9c22b63 ci: add job for yang files diff
  • 97ff24e config: fix incorrect yang generation
  • 69faffb server: compare TCP-AO keychain messages with proto.Equal
  • f306bba server: run the TCP-AO validation cases inside their subtests
  • e68a92f server: spell the TCP-AO keychain store field as one word
  • 2328707 api, server: drop the keychain from the TCP-AO add response
  • 407deba server: treat the TCP-AO keychain list name as a filter
  • 0e9a005 server: reject out-of-range TCP-AO key IDs on keychain update
  • aba1929 server: implement TCP-AO keychain management
  • a7251b9 api: add TCP-AO keychain configuration API
  • 8e65579 zebra: drop dead pos increments in zapi tests
  • 55eb7a8 api, cli: surface the flowspec redirect-to-IP action
  • 58940aa packet/bgp: add flowspec redirect-to-IP extended communities
  • ad3e7c2 packet/bgp: bound MUP Type 2 endpoint address length to address family
  • 5bf33cf zebra: reject a nexthop label count above the maximum
  • b7d523b fix(server): avoid mutating Adj-RIB-In when listing accepted paths and refactor
  • b6a519b server: reject an unknown peer group in the dynamic neighbor API