os-carp-vip-dhcp v1.13.6

Accept 802.1Q priority-tagged (VID 0) DHCP/ARP replies + HA-sync doc fixes.

Since v1.13.5:

• Accept 802.1Q priority-tagged (VID 0) DHCP and ARP replies (PR #97) — some ISPs/switches return priority-tagged frames; the keeper now parses them.

• Make the BPF table regeneration recipe runnable.

• docs: HA sync is on-demand and does not restart the backup keeper (only the per-service button does); name the right buttons (#96); newcomer README/single-IP restructure + screenshots; single-IP backup egress uses the built-in feature.

• ci: bump actions/setup-node 4->7; workflow permissions hardening.

• Version: 1.13.6 (main e8d2582)

• Built from a clean git archive of main on OPNsense (ABI 26.7, amd64).

• pkg sha256: b6a048bee069dbe340941e70eb41788cd5fb46a282049477f2a471663a0f18eb

• Signature verified against keys/release.pub (Verified OK).

Verify: openssl base64 -d -in SHA256SUMS.sig -out sig.bin && openssl dgst -sha256 -verify keys/release.pub -signature sig.bin SHA256SUMS

os-carp-vip-dhcp v1.13.5

Maintenance release: ifprobe refactor + concurrency/robustness hardening (PR #88, no behaviour change).

Since v1.13.3:

• Share one ifconfig(8) parser (ifprobe) between the keeper and status; read interface address via ifconfig -f inet:cidr; harden the CARP/inet parse.

• Concurrency audit: bpf reader gets its own read size; fix wake-fd / close ordering on shutdown; guarantee keeper.close() on every path (incl. --once).

• Distinguish no-lease from lease-without-gateway in the no-default log; bound vhid by whitespace.

• Clarity renames (functions/fields/locals), TimingSource enum, added unit tests for log parser + status probes.

• Version: 1.13.5 (main 40639a1)

• Built from a clean git archive of main on OPNsense (ABI 26.7, amd64).

• pkg sha256: 9b8bbee55737ee4f61065b3414f8a85c0bd5f42f8af4ce39c597f706541ce1de

• Signature verified against keys/release.pub (Verified OK).

Verify: openssl base64 -d -in SHA256SUMS.sig -out sig.bin && openssl dgst -sha256 -verify keys/release.pub -signature sig.bin SHA256SUMS

os-carp-vip-dhcp v1.13.3

Maintenance release (internal refactor, no behaviour change).

Since v1.13.2:

• Funnel the daemon's system commands through one syscmd module (PR #87).

• Version: 1.13.3 (main 81045a2)

• Built from a clean git archive of main on OPNsense (ABI 26.7, amd64).

• pkg sha256: 13742b809129593cf3eaad636124d95e08b008a026da85cee946639db442d5e3

• Signature verified against keys/release.pub (Verified OK).

Verify: openssl base64 -d -in SHA256SUMS.sig -out sig.bin && openssl dgst -sha256 -verify keys/release.pub -signature sig.bin SHA256SUMS

os-carp-vip-dhcp v1.13.2

Maintenance release (refactor + test-quality + GUI help-text clarity).

Since v1.13.0:

• Split file IO from parsing in keeperconf/status; shared keeper.conf shell parser + reader-conformance test (#83).

• Split DefaultRouteReconciler into two peer reconcilers (#81); group injected DI hooks into named ports (#80).

• Test-quality: shared fakes, DhcpReply builder, parametrized tables (#82); reader conformance hard-fails under CI.

• SendMsgType enum; narrowed broad-except; bpf reader-generation resource grouping.

• GUI/docs: clearer chaddr-override help, standardised MAC/IP wording, backup-egress documented in the single-IP guide.

• Version: 1.13.2 (main e8a2868)

• Built from a clean git archive of main on OPNsense (ABI 26.7, amd64).

• pkg sha256: 421731837b74db8ca59a68f8f5c40451631c81b7553dda63e18baf39ce30e0d1

• Signature verified against keys/release.pub (Verified OK).

Verify: openssl base64 -d -in SHA256SUMS.sig -out sig.bin && openssl dgst -sha256 -verify keys/release.pub -signature sig.bin SHA256SUMS

os-carp-vip-dhcp v1.13.0

Drop the scapy backend; name-keyed keeper.conf (PR #74, merged to main).

• Version: 1.13.0 (main 1eb0bd3)
• Built from a clean git archive of main on OPNsense (ABI 26.7, amd64).
• pkg sha256: 3090445301506947caaa80877482e106b55cd784a6ace8160d1bb22e60e0d4f7
• Signature verified against keys/release.pub (Verified OK).

Verify: openssl base64 -d -in SHA256SUMS.sig -out sig.bin && openssl dgst -sha256 -verify keys/release.pub -signature sig.bin SHA256SUMS

os-carp-vip-dhcp v1.12.0

Backup egress for the non-master CARP node (PR #73, merged to main).

Opt-in feature (default off): while a node is the CARP backup and holds no WAN default, route its own internet traffic (updates, NTP, DNS) to the master, which NATs it out the single WAN. The route is removed automatically when the node becomes master. Interface selectable via an InterfaceField dropdown.

• Version: 1.12.0 (main 738631c)
• Built from a clean git archive of main on OPNsense (ABI 26.7, amd64).
• pkg sha256: da7f78b8dce668b7ee003eb45ca82b52bc71767dc57ecfe0e8baefaa7f4cce73
• Signature verified against keys/release.pub (Verified OK).

Verify: openssl base64 -d -in SHA256SUMS.sig -out sig.bin && openssl dgst -sha256 -verify keys/release.pub -signature sig.bin SHA256SUMS

Supersedes the v1.12.0-rc.* previews.

os-carp-vip-dhcp v1.12.0-rc.4 (preview)

Preview / release candidate built from PR #73 (feat/carpvipdhcp-backup-egress), not merged to main.

Supersedes v1.12.0-rc.3 — new commit:

• backup-egress interface as an InterfaceField dropdown

Feature: opt-in backup egress for the non-master CARP node (default off).

• Version: 1.12.0 (branch head 1ba08ff)
• Built from a clean git archive of the PR branch on OPNsense (ABI 26.7, amd64).
• pkg sha256: 1f7e581af118934c7d3b800a06cf7df1cdf8def334971f95e6fe85b646fc89e8
• Signature verified against keys/release.pub (Verified OK).

Preview only — pending further validation (PR is draft).

os-carp-vip-dhcp v1.12.0-rc.3 (preview)

Preview / release candidate built from PR #73 (feat/carpvipdhcp-backup-egress), not merged to main.

Supersedes v1.12.0-rc.2 — follow-up review fixes:

• prune backup-egress ownership on removal too
• review round: confirmed-gateway ownership, NetworkField, lint

Feature: opt-in backup egress for the non-master CARP node (default off) — routes the backup node's own internet traffic to the master, which NATs it out the single WAN. Route auto-removed on becoming master.

• Version: 1.12.0 (branch head bc4e33a)
• Built from a clean git archive of the PR branch on OPNsense (ABI 26.7, amd64).
• pkg sha256: 5929037553609cc2e0f76aedd43e107a76a8308781ada381c9ccb09c5648bfae
• Signature verified against keys/release.pub (Verified OK).

Verify: openssl base64 -d -in SHA256SUMS.sig -out sig.bin && openssl dgst -sha256 -verify keys/release.pub -signature sig.bin SHA256SUMS

⚠️ Preview only — pending further validation (PR is draft).

os-carp-vip-dhcp v1.12.0-rc.2 (preview)

Preview / release candidate built from PR #73 (feat/carpvipdhcp-backup-egress), not merged to main.

Supersedes v1.12.0-rc.1 — rebased branch head with follow-up fixes:

• harden backup-egress ownership and logging
• keep hidden conditional dialog fields out of runtime
• show keeper dialog fields only when they apply

Feature: opt-in backup egress for the non-master CARP node (default off) — routes the backup node's own internet traffic to the master, which NATs it out the single WAN. Route auto-removed on becoming master.

• Version: 1.12.0 (branch head 7d218b8)
• Built from a clean git archive of the PR branch on OPNsense (ABI 26.7, amd64).
• pkg sha256: e241f41da80e190483b414ef2c4e41a94d5c18acf4b3cb831a270584784f3015
• Signature verified against keys/release.pub (Verified OK).

Verify: openssl base64 -d -in SHA256SUMS.sig -out sig.bin && openssl dgst -sha256 -verify keys/release.pub -signature sig.bin SHA256SUMS

⚠️ Preview only — pending further validation (PR is draft).

os-carp-vip-dhcp v1.12.0-rc.1 (preview)

Preview / release candidate built from PR #73 (feat/carpvipdhcp-backup-egress), not merged to main.

Feature: opt-in backup egress for the non-master CARP node (default off) — routes the backup node's own internet traffic to the master, which NATs it out the single WAN. Route auto-removed on becoming master.

• Version: 1.12.0
• Built from a clean git archive of the PR branch on OPNsense (ABI 26.7, amd64).
• pkg sha256: 70ab6fedaa49192637da3f4d0a6251bf238bf0cbabda3d6ee572f74c0fcc2a5a
• Signature verified against keys/release.pub (Verified OK).

Verify: openssl base64 -d -in SHA256SUMS.sig -out sig.bin && openssl dgst -sha256 -verify keys/release.pub -signature sig.bin SHA256SUMS

⚠️ Preview only — pending further validation (PR is draft). Not deployed to nodes.