GNU Gatekeeper 5.12

Another important bug in the handling of the ExternalIP switch has been fixed as well as Y2K38 issues.

This release also adds features:

• support for Oracle databases
• easier cloud deployment with IP detection with STUN
• better load scaling by mixing proxied with direct mode
  endpoints in a single gatekeeper
• Windows 64bit executables with VS2022

All changes and additions:

• enable more runtime hardening flags from OpenSSF recommendation 11/2023
• fix bug with H.245 address when using ExternalIP= switch without H.460.18/.19
• auto-detect public IP with ExternalIP=STUN and STUNServer=stun.example.com
• compiler support for VS2022
• new database driver for Oracle and new timestamp format 'Oracle'
• new switch [EP::xxx] ForceDirectMode=1 to handle all calls from this endpoint in direct mode
• BUGFIX(RasSrv.cxx, gkauth.cxx) make sure time_t is handled unsigned to avoid Y2K38 issue
• BUGFIX(ProxyChannel.cxx) check for too small packets when acting as encryption proxy

GNU Gatekeeper 5.11

This is a bug fix release with a few new features added.

An important bug in the handling of the ExternalIP switch has been fixed.

We also added a few features that make it easier to use GnuGk with Graphana and InfluxDB monitoring.

Changes and additions:

• remove non-working command line switch -e / --externalip, use config file to set ExternalIP
• new accounting variables %{registrations}, %{calls}, %{total-calls}, %{successful-calls}, %{allocated-bandwidth}
• new switch [HttpAcct] Authorization= to send authorization headers to support InfluxDB
• replace \r and \n in HttpAcct body with carriage return and line feed characters
• new switch: [RasSrv::LRQFeatures] PreserveDestination=1 (helpful when calling Pexip servers)

GNU Gatekeeper 5.10

This is a bug fix release.

Buges fixed:

• fix a crash when handling the MasterSlaveDetermination message
• fix the documentation of [RasSrv::LRQFeatures] NeighborTimeout and consistently treat the value as 10th of a second in the program

GNU Gatekeeper 5.9

New features:

• new switches [Proxy] CachePortDetection=1 and
  CachePortDetectionDuration= to cache port detection packets
  for faster media connects when IgnoreSignaledIPs= is active
• new switch: [EP::] ForceTerminalType=
• new place holder for port notifications: %t for port type
• experimental: better error recovery if multiplexed RTP sending fails

Bug fixes:

• fix bug in port detection with AllowSignaledIPsFrom=
• when DNS name resolves to IP without alias, remove alias from ACF completely (Cisco interop)
• remove RTP session 0 from internal tables once H.245 master has assigned a session ID
• fix compilation of Avaya support
• initialized cmsg struct to zero before using
• fix regression introduced with MatchH239SessionsByIDOnly= switch

GNU Gatekeeper 5.8

Improved interoperability with:

• EdgeProtect
• Avaya

New features:

• experimental support for Avaya's non-standard version of H.323 (./configure --enable-avaya) (thanks Konstantin Prokazov)
• consider RFC 6598 shared network space (100.64.0.0/10) and Zeroconf (169.254.0.0/16) as private IPs
• new switch [Proxy] AllowSignaledIPsFrom= to skip auto-detect for messages received directly from certain IPs when IgnoreSignaledIPs=1
• new switch [Proxy] AllowAnyRTPSourcePortForH239From= to handle incorrect RTCP addresses in H.239 OLC (EdgeProtect interop)
• new switch [RoutedMode] MatchH239SessionsByIDOnly= to never attempt to match a H.239 reverse channel by type for improved interoperability with EdgeProtect
• new switches to set the HTTP Content-Type header in HttpAcct, HttpPasswordAuth and Routing::Http
• new switch [Routing::Http] JSONResponse=1 to send more flexible routing data in the HTML reponses
• many new status port shortcuts (see manual section for details)

Bug fixes:

• fix H.460.18/.19 on multi-homed servers
• fix race condition when handling H.460.19 multiplex IDs
• fix media loop on half port-detected channel when media is very early
• fix Net-SNMP query for total bandwidth
• save RTCP address from OLC for port-detection
• always check AllowSignaledIPs= before applying IgnoreSignaledAllH239IPs or IgnoreSignaledPrivateH239IPs
• handle extensions and CSRC in RTP header with H.235 half-call media
• better endpointIDs on Windows when compiling without OpenSSL

GNU Gatekeeper 5.7

This version has some important bug fixes, improves interoperability
with other vendors and also has a few new features.

Bug fixes:

• several severe crashes and a few memory leaks have been fixed

Improved interoperability with:

• Lifesize endpoints
• Poly's Microsoft Teams gateway
• Polycom RealPresence Capture Server

New features:

• You get a warning in the GUI / on the status port if one of your
  endpoints has an incorrect time setting and this password
  authentication fails. This makes trouble shooting a lot easier.

• Invalid TPKT packets (eg. due to network errors) now don't
  necessarily take down an otherwise healthy call. Use the new
  AbortOnInvalidTPKT=0 switch to enable.

• You have a new %{Vendor} variable for SqlAuth RegQuerys and LuaAuth

See changelog.txt for a full change log.

GNU Gatekeeper 5.6

This version contains an important bug fix to H.460.19 multiplexing and H.460.26 (media over TCP) when using GnuGk's internal call forwarding (ForwadOnFacility).

I have also added an interop tweak to be able to call video services that don't understand H.323 URL aliases (eg. videobutler.nl).
You can enable it with

[Routing::SRV]
ConvertURLs=1

GNU Gatekeeper 5.5

This release has new features and bug fixes when you run clustered
gatekeepers. It also improves the port detection feature and we have a
complete and up to date Chinese documentation.

New features:

• new feature GnuGkAssignedGatekeeper to push endpoints back to
  their intended home gatekeepers in the cluster
• support new PBKDF2 password hashes for ssh logins to the status port
• new switches to fine tune port detection for H.239 channels
  IgnoreSignaledPublicH239IPsFrom=x and IgnoreSignaledAllH239IPs=1
• new Chinese manual

Bug fixes:

• select correct source IP for neighbor pings
• set altGKisPermanent=true when redirecting endpoints
• fix RRJ to include alternates when RedirectGK=Endpoints limit is reached
• fix reading of AllowSignaledIPs= switch
• don't complain about [Neighbor::xxx] SendAliases switch when using --strict

Enjoy!

GNU Gatekeeper 5.4

New features:

• new accounting module to send accounting data to an MQTT server
• support for redis as database (eg. as backend for password storage)

Bug fixes:

• important fix for H.245 tunneling translation with H.460.18 endpoints
• fix for snmpwalk in PTLib-SNMP implementation
• fix sending alternate gatekeeper list to endpoints with assigned gatekeeper
• improved DRQ from child gatekeepers
• fix TLS with neighbor gatekeeper

Please also note that a bug has been found in PTLib that can cause a
crash in any GnuGk version if you use the status port (manually of from
an application). Please upgrade to PTLib 2.10.9.3!

GNU Gatekeeper 5.3

This release has a number of new features as well as some important bug
fixes.

Whats new ?

• LRQ loop detection to optimize calls flows between multiple
  neighbor gatekeepers
  This new feature has the potential to significantly reduce the load
  on all gatekeepers and prevent "LRQ storms".

• new routing policy to set call destinations by querying HTTP
  or REST servers, see [Routing::Http]

• much improved support for SNMP monitoring

• important bug fix for TLS encryption of signaling channels

• important bug fixes for H.460.18 (for H.245 tunneling and for
  multi-homed servers)

• performance optimization: this version can handle 5-10% more proxied
  calls on the same hardware

• performance optimization: re-authenticate lightweight, additive
  registrations only when new aliases differ
  This significantly reduces the load on password databases.

Enjoy!