Skip to content

Osprey 1.2.0

Choose a tag to compare

View all tags
@MichelW6667 MichelW6667 released this 28 Jul 13:30
· 5 commits to main since this release
v1.2.0
9483c65

Osprey 1.2.0. Network topology intelligence for OSPF, IS-IS, EIGRP, BGP, MPLS, and EVPN — passive discovery, protocol-accurate modelling, no agents on your routers and no routes injected.

Three themes since 1.0.0: EIGRP joins the supported protocols, path analysis now shows what the packet actually does rather than what the source router wishes it did, and enterprise sign-on arrives — OpenID Connect, LDAP / Active Directory, SAML 2.0, SCIM provisioning and two-factor authentication.

Highlights since 1.0.0

EIGRP support (new protocol)

  • Passive discovery over CISCO-EIGRP-MIB — neighbours and interface state for IPv4 and IPv6, classic and named mode, per VRF and AS. Read-only: Osprey never forms an adjacency.
  • EIGRP adjacencies are drawn on the topology and stitched onto the L2 fabric, so an EIGRP domain sits alongside your OSPF and IS-IS areas in one view.
  • Observed forwarding paths follow each router's installed successor and report the real composite metric (FD) — no borrowed OSPF cost, no placeholder numbers. Equal-cost brothers installed in the RIB are shown as variants.
  • Administrative distance, neighbour-down alerting, and an EIGRP recorder you add and switch on like any other protocol.
  • An EIGRP domain participates in cross-AS path analysis in both directions, including from a third-party vantage point.

Path analysis you can trust

  • Hop-by-hop forwarding chain — every hop is that router's own routing-table decision. Where the old view drew a source-rooted shortest path, the panel now draws the path the packet takes, with each hop's metric, route type and installed equal-cost set. Validated hop-by-hop against the live routing tables of every router in a multi-AS reference lab — metric, path type and full equal-cost set matching exactly on every device pair.
  • Costs anchored to the advertising area — inter-area and external routes are priced against the router that advertises them, matching what show ip route prints on the box.
  • The complete equal-cost set — variant tabs now list every distinct equal-cost path instead of a partial selection, and say so when more exist than can be shown.
  • Cross-domain and multi-tenant paths — paths that leave a routing domain are stitched across ASes and tenants from BGP evidence, with per-segment costs and honest confidence: resolved, inferred, or an explicit opaque cloud. No invented hops.
  • Address-family correctness end to end — an IPv6 question gets an IPv6 answer: hop addresses in the family you asked for, BGP evidence matched in-family, and a clear explanation when IPv6 reachability simply does not exist between two domains instead of an IPv4 path presented as the IPv6 one.
  • Where a forwarding chain cannot be reconstructed, the answer says so and explains why, rather than presenting an approximation as fact.

Enterprise sign-on

  • Single sign-on via OpenID Connect, LDAP / Active Directory, and SAML 2.0 — bring your existing identity provider.
  • SCIM 2.0 user provisioning and de-provisioning.
  • Two-factor authentication (TOTP) for local accounts, at no extra cost.
  • All of it on the existing session model, with a recovery CLI for the case where your IdP is the thing that is down.

Security

  • Fixed a signature-validation bypass in the XML signature library used to validate SAML responses, and patched a TLS privacy issue reachable through e-mail notifications. Both were found by vulnerability scanning, which now reports no advisories affecting Osprey code — one upstream advisory remains open with no fix released and no reachable call path from Osprey.

Also in this release

  • MPLS discovery is a plain on/off switch, off by default.
  • An EIGRP adjacency and the OSPF or IS-IS link on the same wire merge into a single topology link.
  • Path mode dims the off-path topology and badges the protocol deciding each hop.
  • Numerous correctness fixes across the node drawer, sidebar, system health and topology refresh.

Install

curl -LO https://github.com/wijnberg-net/osprey/releases/latest/download/osprey_amd64.deb
curl -LO https://github.com/wijnberg-net/osprey/releases/latest/download/SHA256SUMS
sha256sum -c SHA256SUMS
sudo apt install ./osprey_amd64.deb

Debian 12+, Ubuntu 24.04+ (bare metal, Proxmox LXC, or VM). PostgreSQL, NATS, and nginx are pulled in as dependencies; services start under systemd and a self-signed TLS certificate is generated on first install. Open https://your-server/ and log in with the admin account created during setup.

Free evaluation: all features, up to 32 devices, no time limit. Commercial licensing: sales@wijnberg.net.

Full documentation: https://www.wijnberg.net/osprey/docs

Assets 4
Loading