Releases: FRRouting/frr
FRR Release 10.5.3
Debian Packages - https://deb.frrouting.org/
RPM Packages - https://rpm.frrouting.org/
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
What's Changed
- pimd: When address change ensure DR changes too. (backport #20881) by @mergify[bot] in #20891
- lib/typesafe: guard skiplist level generation against ctz(0) UB (backport #20899) by @mergify[bot] in #20904
- bgpd: fix memory leak in cluster_intern() (backport #20913) by @mergify[bot] in #20919
- doc: add some text regarding libyang versions (backport #20862) by @mergify[bot] in #20924
- eigrpd: handle the gr neighbor list safely in update_receive (backport #20933) by @mergify[bot] in #20938
- nhrpd: fix packet and buffer handling errors (backport #20932) by @mergify[bot] in #20941
- bgpd: Fix test for OPEN message with remote-as auto (backport #20963) by @mergify[bot] in #20965
- bgpd: Add missing PEER_FLAG_SEND_NHC_ATTRIBUTE for update group flags (backport) by @ton31337 in #20972
- bgpd: check more during flowspec nlri parsing (backport #19909) by @mergify[bot] in #20982
- bgpd: Fix condition when evaluating paths (backport #20975) by @mergify[bot] in #20997
- ospfd: harden TE/SR TLV iteration against malformed lengths (backport #21002) by @mergify[bot] in #21013
- bfdd: Fix wrong memory free when using ttable code (backport #21020) by @mergify[bot] in #21022
- bgpd: fix off-by-one error in FlowSpec operator array bounds check (backport #21054) by @mergify[bot] in #21059
- lib: fix zclient crash when many peers reconnect after FRR restart (backport #21056) by @mergify[bot] in #21070
- lib: fix vty_is_closed() falsely reporting VTY_SHELL as closed (backport #21082) by @mergify[bot] in #21091
- bgpd: Check if the NHC length is enough to fill TLV value + TLV header (backport #21074) by @mergify[bot] in #21084
- ospfd: fix sequence number check, avoid truncation ambiguity (backport #21096) by @mergify[bot] in #21111
- nhrpd: Correct addrlen check in os_recvmsg() (backport #21100) by @mergify[bot] in #21120
FRR Release 10.5.2
Debian Packages - https://deb.frrouting.org/
RPM Packages - https://rpm.frrouting.org/
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
What's Changed
- bgpd: Do not crash if we receive a next-hop length not as expected for NHC (backport #20367) by @mergify[bot] in #20370
- bgpd: update source address for bgp neighbor (backport #20330) by @mergify[bot] in #20372
- Alpine Docker fix ups for 3.22 (backport #20004) by @mergify[bot] in #20379
- docker: Add missing
pytestpackage for Alpine as dependency (backport #20369) by @mergify[bot] in #20391 - bgpd: Use the default local-preference value and not 0 when adjusting (backport #20400) by @mergify[bot] in #20407
- eigrpd: Prevent crash in packet handling (backport #20410) by @mergify[bot] in #20414
- zebra: Fix memory leak when SRv6 explicit SID allocation fails (backport #20429) by @mergify[bot] in #20438
- zebra: Fix memory leak when SRv6 dynamic SID allocation fails (backport #20445) by @mergify[bot] in #20448
- isisd: fix crash when changing isis type (backport #20171) by @mergify[bot] in #20458
- ripd: Fix default-route accept and announce (backport #20416) by @mergify[bot] in #20471
- Revert RIP/RIPng default flush timer change (backport #20456) by @mergify[bot] in #20476
- Fix Batch Clearing to not skip path_info's (backport #20482) by @mergify[bot] in #20487
- ospfd: fixed ospf nssa flush issue (backport #20428) by @mergify[bot] in #20499
- zebra: EVPN check l3vni vxlan intf exist in rmac install (backport #20494) by @mergify[bot] in #20495
- tests: comment out debugs in bgp_batch_clearing topotest (backport #20485) by @mergify[bot] in #20511
- bgpd: Fix multipath decision when multipath is 1 (backport #20493) by @mergify[bot] in #20504
- pimd, pim6d: display iface ssm mode (backport #20466) by @mergify[bot] in #20524
- lib, vtysh: Fix
log timestamp precisionto actually be carried through (backport #20510) by @mergify[bot] in #20515 - bgpd: Prevent unnecessary re-install of routes (backport #19788) by @mergify[bot] in #20537
- bgpd: remove assert in batch-clearing (backport #20546) by @mergify[bot] in #20548
- pimd: compute inherited_olist before checking for (S,G,rpt) prune dec… (backport #20521) by @mergify[bot] in #20550
- bgpd: reduce ibuf_work ring buffer size (backport #20554) by @mergify[bot] in #20569
- zebra: fix crash on inactive VRF and import table (backport #20525) by @mergify[bot] in #20560
- bgpd: output 'graceful-restart' value for peer group in 'write' command (backport #20338) by @mergify[bot] in #20564
- pimd: Keep track of how long the S,G rpt Prune has been around (backport #20576) by @mergify[bot] in #20583
- Send register in fhr lhr case (backport #20575) by @mergify[bot] in #20581
- pimd, tests: Add pim test showing that registers work with no path -> rp (backport #20577) by @mergify[bot] in #20594
- fix vrf active value in YANG oper-state (backport #20633) by @mergify[bot] in #20640
- zebra: FRR restart leads to zebra mlag core (backport #20225) by @mergify[bot] in #20671
- pimd: regiface added to ssm group mroute (backport #20303) by @mergify[bot] in #20669
- bgpd: Fix double-free crash in peer_delete() during doppelganger peer… (backport #20661) by @mergify[bot] in #20682
- staticd: Fix SRv6 SID use-after-free on locator deletion (backport #20660 for 10.5) by @cscarpitta in #20701
- bgpd: use BGP_PATH_INFO_NUM_LABELS macro in bgp_evpn_path_info_get_l3vni (backport #20679) by @mergify[bot] in #20708
- bgpd: fix md5 password unset on dynamic nbr (backport #20740) by @mergify[bot] in #20742
- bgpd: Ignore transitiveness flag when checking type for link bandwidth (backport #20607) by @mergify[bot] in #20750
- bgpd: EVPN MH fix unimport ES route on vtep change (backport #20730) by @mergify[bot] in #20773
- Zebra fixup nhg handling from kernel (backport #20732) by @mergify[bot] in #20781
- bgpd: validate incoming NOTIFICATION messages (backport #20796) by @mergify[bot] in #20807
- bgpd: fix premature deletion of already-stale routes during GR clearing (backport) by @ton31337 in #20804
- Multiple local fix (backport #20798) by @mergify[bot] in #20816
- tests: Stop several tests from running on old branch by @donaldsharp in #20823
- bgpd: improve flowspec NLRI validation (backport #20814) by @mergify[bot] in #20826
- zebra: EVPN fix access BD deref of mbr intf (backport #20791) by @mergify[bot] in #20834
- Fix ospf checksum #20706 (backport #20729) by @mergify[bot] in #20841
- babeld: fix NULL pointer dereference in babel_clean_routing_process (backport #20727) by @mergify[bot] in #20850
Full Changelog: frr-10.5.1...frr-10.5.2
FRR Release 10.4.3
Debian Packages - https://deb.frrouting.org/
RPM Packages - https://rpm.frrouting.org/
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
What's Changed
- bgpd: Do not crash if we receive a next-hop length not as expected for NHC (backport #20367) by @mergify[bot] in #20371
- bgpd: update source address for bgp neighbor (backport #20330) by @mergify[bot] in #20373
- Alpine Docker fix ups for 3.22 (backport #20004) by @mergify[bot] in #20380
- docker: Add missing
pytestpackage for Alpine as dependency (backport #20369) by @mergify[bot] in #20392 - bgpd: Use the default local-preference value and not 0 when adjusting (backport #20400) by @mergify[bot] in #20408
- eigrpd: Prevent crash in packet handling (backport #20410) by @mergify[bot] in #20412
- zebra: Fix memory leak when SRv6 explicit SID allocation fails (backport #20429) by @mergify[bot] in #20439
- zebra: Fix memory leak when SRv6 dynamic SID allocation fails (backport #20445) by @mergify[bot] in #20449
- isisd: fix crash when changing isis type (backport #20171) by @mergify[bot] in #20459
- ripd: Fix default-route accept and announce (backport #20416) by @mergify[bot] in #20472
- Revert RIP/RIPng default flush timer change (backport #20456) by @mergify[bot] in #20477
- ospfd: fixed ospf nssa flush issue (backport #20428) by @mergify[bot] in #20500
- zebra: EVPN check l3vni vxlan intf exist in rmac install (backport #20494) by @mergify[bot] in #20496
- bgpd: Fix multipath decision when multipath is 1 (backport #20493) by @mergify[bot] in #20505
- pimd, pim6d: display iface ssm mode (backport #20466) by @mergify[bot] in #20523
- bgpd: Prevent unnecessary re-install of routes (backport #19788) by @mergify[bot] in #20536
- bgpd: remove assert in batch-clearing (backport #20546) by @mergify[bot] in #20549
- pimd: compute inherited_olist before checking for (S,G,rpt) prune dec… (backport #20521) by @mergify[bot] in #20551
- bgpd: reduce ibuf_work ring buffer size (backport #20554) by @mergify[bot] in #20570
- zebra: fix crash on inactive VRF and import table (backport #20525) by @mergify[bot] in #20561
- pimd: Keep track of how long the S,G rpt Prune has been around (backport #20576) by @mergify[bot] in #20584
- Send register in fhr lhr case (backport #20575) by @mergify[bot] in #20582
- pimd, tests: Add pim test showing that registers work with no path -> rp (backport #20577) by @mergify[bot] in #20595
- zebra: FRR restart leads to zebra mlag core (backport #20225) by @mergify[bot] in #20672
- pimd: regiface added to ssm group mroute (backport #20303) by @mergify[bot] in #20670
- bgpd: Fix double-free crash in peer_delete() during doppelganger peer… (backport #20661) by @mergify[bot] in #20683
- staticd: Fix SRv6 SID use-after-free on locator deletion (backport #20660 for 10.4) by @cscarpitta in #20702
- bgpd:send EOR during GR only when fib install comeplete for suppress … by @vijayalaxmi-basavaraj in #20396
- bgpd: fix md5 password unset on dynamic nbr (backport #20740) by @mergify[bot] in #20743
- bgpd: Ignore transitiveness flag when checking type for link bandwidth (backport #20607) by @mergify[bot] in #20751
- bgpd: EVPN MH fix unimport ES route on vtep change (backport #20730) by @mergify[bot] in #20774
- Zebra fixup nhg handling from kernel (backport #20732) by @mergify[bot] in #20782
- bgpd: validate incoming NOTIFICATION messages (backport #20796) by @mergify[bot] in #20808
- bgpd: fix premature deletion of already-stale routes during GR clearing (backport) by @ton31337 in #20805
- Multiple local fix (backport #20798) by @mergify[bot] in #20817
- bgpd: improve flowspec NLRI validation (backport #20814) by @mergify[bot] in #20827
- tests: Stop several tests from running on old branch (backport #20823) by @mergify[bot] in #20832
- zebra: EVPN fix access BD deref of mbr intf (backport #20791) by @mergify[bot] in #20835
- Fix ospf checksum #20706 (backport #20729) by @mergify[bot] in #20842
Full Changelog: frr-10.4.2...frr-10.4.3
FRR release 10.5.1
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Release Overview
bgpd
- Allow proper shutdown of bgp dynamic peers in rare case
- Check length for dynamic capability (software version new encoding)
- Correction in json output structure for no data case
- Fix labeled unicast inbound policy lookup
- Fix labeled-unicast output
- Fix maximum-prefix session recovery for peers and peer-groups
- Fix memory leak in bgp nhc tlv processing
- Fix route node lock leak in nht resolved prefix marking
- Fix srv6-only command defaulted when 'no segment-routing ipv6'
- Send route-refresh and/or trigger soft reconfig on enforce-first-as
- Try to handle software version capability with the new encoding format
isisd
- Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
pimd
- Add pim_debug_pim_reg protection for pim register stop debug message
- Crash while trying mroute_read when fd=-1
- Df election on zebra peer down synced to the mlag peer
- Fix for mc frame loss in a sequential traffic test
- Fix pim mlag update peer zebra status upon local mlag connection restoration
- Fix warnings for pimd
- Crash when pimreg interface not present
- Crashed because of indexing invalid index in an array
- Prevent crash on interface removal
vrrpd
- vrrp interface delete fails to free connected route
zebrad
- Fix crash due to lack of control of received number of srv6 sid from netlink
FRR release 10.4.2
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Release Overview
bgpd
- Add null-check in evpn-mh code
- Allow proper shutdown of bgp dynamic peers in rare case
- Check l3vni status before adv evpn vrf routes
- Check length for dynamic capability (software version new encoding)
- Check med flag correctly in encap_attr_export()
- Clean up coverity warnings in bgp_routemap.c
- Correction in json output structure for no data case
- Crash due to usage of freed up evpn_overlay attr
- Disable link-local capability by default
- Do not complain in the logs if we intentionally withdraw specific attrs
- Do not override a specified rd
- Don't use stale 'evpn' pointer in bgp_update()
- Evpn fix auto derive rd when user cfg removed
- Evpn-mh fix es-evi memleak during shutdown
- Fix bgp_attr_local_pref being set appropriately
- Fix bgp_attr_originator_id flag in outbound attribute cache
- Fix crash due to dangling pointer in bnc nht_info
- Fix default vrf check while configuring md5 password
- Fix deref_of_null.ex.cond in community_list_dup_check
- Fix expanded extcomm list delete
- Fix json wrapper brace consistency in neighbor commands
- Fix labeled unicast inbound policy lookup
- Fix labeled-unicast output
- Fix maximum-prefix session recovery for peers and peer-groups
- Fix memory leak in evpn mh es-evi del
- Fix memory leak in evpn mh esi del
- Fix overflow when decoding zapi nexthop for srv6 max segments
- Fix refcounts at termination
- Fix routemap evpn type-5 default route check
- Fix weird formatting in a function
- Notify all incoming/outgoing on peer group notify unconfig
- Put local bgp id when sending nnhn tlv for nh characteristic
- Try to handle software version capability with the new encoding format
isisd
- Reorder some free() bits, pass
make check - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
ospf6d
- Fix summary deletion dropping redistributed routes
- Protect lsa in vertex
ospfd
- Fix crash when entering
ospf authentication key xx - Ti-lfa: actually delete vertexes on list
- Ti-lfa: free copied vertex parent
- Ti-lfa: free tables after use
pbrd
- Cosmetic change for one name
- Dscp-only pbr rules not installing due to incorrect family field
- Fix crash for inconsistent status
- Fix memleak during pbr map deletion
pim6d
- Don't segv on repeated mld records
pimd, pim6d
- Changes to pimreg register socket initialization
pimd
- Add pim_debug_pim_reg protection for pim register stop debug message
- Allow freebsd pimd to have permission to do pim
- Consolidate setting hold time
- Crash while trying mroute_read when fd=-1
- Df election on zebra peer down synced to the mlag peer
- Fix autorp del error logging
- Fix for mc frame loss in a sequential traffic test
- Fix pim mlag update peer zebra status upon local mlag connection restoration
- Fix warnings for pimd
- Fix wrong bsm case with vrf
- Pimd crash when pimreg interface not present
- Pimd crashed because of indexing invalid index in an array
- Prevent crash on interface removal
- Properly use ip_recvif on freebsd
staticd
- Ensure sids are allocated before installation on interface up
- Ensure sids are uninstalled before sending them to zebra
- Extend sid dependency check for udt4/udt46 default vrf case
- Fix typo in srv6 sids debug logs for interface up/down events
- Handle
udt*sids for default vrf on sr0 intf state changes - Move sid interface dependency check to separate function
- Refactor and add comments to sid interface dependency logic
vrrpd
- Ipv6 vrrp macvlan doesn't have ipv6 link-local address
- [mem leak] vrrp interface delete fails to free connected route
zebrad
- Add missing debug guard in if netlink code
- Add missing debug guard in rt netlink code
- Check if the netlink socket is active before doing batch ops
- Cleanup early route q when removing routes.
- Coverity issue (null pointer derefence(cid 109575))
- Coverity issue (null pointer derefence(cid 18943))
- Coverity issue (null pointer derefence(cid 71721))
- Coverity issue (null pointer derefence(cid 72714))
- Coverity issue (null pointer dereference(cid 72706))
- Coverity issue (null pointer dereference(cid 90819))
- Evpn fix alignment of access-vlan cli output
- Explicitly print "exit" at the end of srv6 encap node config
- Fix crash due to lack of control of received number of srv6 sid from netlink
- Fix memory leak dplane providers queued contex
- Fix memory leak dplane pthread mutex destroy
- Fix memory leak in dplane zns info entries
- Fix memory leak in netlink link chg err case
- Fix missing fpm messages
- Fix neighbor table name length
- Fix yang data for mcast-group
- Metric 0 is valid, don't drop to 1 on bsd
- Reset encapsulation source address when 'no srv6' is executed
- Workaround for a race condition caused by if_zebra_speed_update timer
FRR release 10.3.3
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Release Overview
bgpd
- Check l3vni status before adv evpn vrf routes
- Check length for dynamic capability (software version new encoding)
- Check med flag correctly in encap_attr_export()
- Clean up coverity warnings in bgp_routemap.c
- Correction in json output structure for no data case
- Crash due to usage of freed up evpn_overlay attr
- Do not complain in the logs if we intentionally withdraw specific attrs
- Do not override a specified rd
- Don't use stale 'evpn' pointer in bgp_update()
- Evpn fix auto derive rd when user cfg removed
- Evpn-mh fix es-evi memleak during shutdown
- Fix bgp_attr_local_pref being set appropriately
- Fix bgp_attr_originator_id flag in outbound attribute cache
- Fix crash due to dangling pointer in bnc nht_info
- Fix default vrf check while configuring md5 password
- Fix deref_of_null.ex.cond in community_list_dup_check
- Fix expanded extcomm list delete
- Fix labeled unicast inbound policy lookup
- Fix labeled-unicast output
- Fix maximum-prefix session recovery for peers and peer-groups
- Fix memory leak in evpn mh es-evi del
- Fix memory leak in evpn mh esi del
- Fix overflow when decoding zapi nexthop for srv6 max segments
- Fix routemap evpn type-5 default route check
- Notify all incoming/outgoing on peer group notify unconfig
- Try to handle software version capability with the new encoding format
isisd
- Reorder some free() bits, pass
make check - Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
ospf6d
- Fix summary deletion dropping redistributed routes
- Protect lsa in vertex
ospfd
- Fix crash when entering
ospf authentication key xx - Ti-lfa: actually delete vertexes on list
- Ti-lfa: free copied vertex parent
- Ti-lfa: free tables after use
pbrd
- Cosmetic change for one name
- Dscp-only pbr rules not installing due to incorrect family field
- Fix crash for inconsistent status
- Fix memleak during pbr map deletion
pim6d
- Don't segv on repeated mld records
pimd
- Allow freebsd pimd to have permission to do pim
- Consolidate setting hold time
- Fix wrong bsm case with vrf
- Prevent crash on interface removal
- Properly use ip_recvif on freebsd
staticd
- Ensure sids are allocated before installation on interface up
- Ensure sids are uninstalled before sending them to zebra
- Extend sid dependency check for udt4/udt46 default vrf case
- Fix typo in srv6 sids debug logs for interface up/down events
- Handle
udt*sids for default vrf on sr0 intf state changes - Move sid interface dependency check to separate function
- Refactor and add comments to sid interface dependency logic
vrrpd
- Ipv6 vrrp macvlan doesn't have ipv6 link-local address
- [mem leak] vrrp interface delete fails to free connected route
zebrad
- Add missing debug guard in if netlink code
- Add missing debug guard in rt netlink code
- Check if the netlink socket is active before doing batch ops
- Coverity issue (null pointer derefence(cid 109575))
- Coverity issue (null pointer derefence(cid 18943))
- Coverity issue (null pointer derefence(cid 71721))
- Coverity issue (null pointer derefence(cid 72714))
- Coverity issue (null pointer dereference(cid 72706))
- Coverity issue (null pointer dereference(cid 90819))
- Evpn fix alignment of access-vlan cli output
- Explicitly print "exit" at the end of srv6 encap node config
- Fix crash due to lack of control of received number of srv6 sid from netlink
- Fix memory leak dplane providers queued contex
- Fix memory leak dplane pthread mutex destroy
- Fix memory leak in dplane zns info entries
- Fix memory leak in netlink link chg err case
- Fix missing fpm messages
- Fix neighbor table name length
- Fix yang data for mcast-group
- Metric 0 is valid, don't drop to 1 on bsd
FRR release 10.2.5
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Release Overview
bgpd
- Check l3vni status before adv evpn vrf routes
- Clean up coverity warnings in bgp_routemap.c
- Crash due to usage of freed up evpn_overlay attr
- Do not override a specified rd
- Evpn fix auto derive rd when user cfg removed
- Evpn-mh fix es-evi memleak during shutdown
- Fix bgp_attr_originator_id flag in outbound attribute cache
- Fix crash due to dangling pointer in bnc nht_info
- Fix default vrf check while configuring md5 password
- Fix deref_of_null.ex.cond in community_list_dup_check
- Fix expanded extcomm list delete
- Fix labeled-unicast output
- Fix maximum-prefix session recovery for peers and peer-groups
- Fix memory leak in evpn mh es-evi del
- Fix memory leak in evpn mh esi del
- Fix overflow when decoding zapi nexthop for srv6 max segments
- Fix routemap evpn type-5 default route check
isisd
- Use ipv6 mtid for srv6 locator tlvs when ipv6 mt is enabled
ospf6d
- Protect lsa in vertex
ospfd
- Fix crash when entering
ospf authentication key xx
pbrd
- Cosmetic change for one name
- Dscp-only pbr rules not installing due to incorrect family field
- Fix crash for inconsistent status
- Fix memleak during pbr map deletion
pim6d
- Don't segv on repeated mld records
pimd
- Allow freebsd pimd to have permission to do pim
- Fix wrong bsm case with vrf
- Prevent crash on interface removal
- Properly use ip_recvif on freebsd
vrrpd
- Ipv6 vrrp macvlan doesn't have ipv6 link-local address
- [mem leak] vrrp interface delete fails to free connected route
zebrad
- Add missing debug guard in if netlink code
- Add missing debug guard in rt netlink code
- Evpn fix alignment of access-vlan cli output
- Explicitly print "exit" at the end of srv6 encap node config
- Fix crash due to lack of control of received number of srv6 sid from netlink
- Fix neighbor table name length
- Fix yang data for mcast-group
- Metric 0 is valid, don't drop to 1 on bsd
FRR Release 10.5.0
Debian Packages - https://deb.frrouting.org
RPM Packages - https://rpm.frrouting.org
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
Release Overview
New Features Highlight
- BFD the ability to listen for specific VRFs only
- Configure which VRFs the BFD daemon will listen to. By default, BFD listens to all VRFs present in the system, including the default VRF. Default VRF must be specified as
default.
- Configure which VRFs the BFD daemon will listen to. By default, BFD listens to all VRFs present in the system, including the default VRF. Default VRF must be specified as
- BGP SRv6/MPLS coexistence
- Allow MPLS and SRv6 to coexist on the same L3VRF, even for a given prefix. This feature is important in brown fields where some operators want to migrate from MPLS to SRv6 backbone.
- BGP SRv6 locator per VRF support
- Ability to choose SRv6 locator per VRF.
- BGP Error handling (RFC 7606) for iBGP peers
- Before 10.5.0, once we received a malformed packet between iBGP peers, we always reset the session, and with this release, we handle malformed packets the same way as for eBGP (by withdrawing or discarding the malformed packets).
- BGP IPv6 Link-Local Capability is disabled by default
- In 10.4.0, this capability was enabled by default for a “datacenter” profile, but it’s disabled for 10.5.0 and will be backported to 10.4.2 as well. The problem arises when the receiver has configured a route-map with
set ipv6 next-hop prefer-globaland we send only an IPv6 Link-Local address; therefore, it was decided to revert it to be disabled by default.
- In 10.4.0, this capability was enabled by default for a “datacenter” profile, but it’s disabled for 10.5.0 and will be backported to 10.4.2 as well. The problem arises when the receiver has configured a route-map with
- BGP BGPID Next-Hop Characteristic
- In some cases, the BGP speaker sending a route might encode only a link-local address and no global address. To provide uniqueness in this case, it is sufficient to associate the BGP Identifier and AS Number of the route's sender. The BGP Identifier Characteristic (BGPID) provides a way to convey this information if required.
- BGP EVPN flooding per VNI support
- Add an ability to adjust BUM flooding per VNI, instead of just globally. E.g., disable flooding only for an arbitrary VNI.
- BGP RPKI strict mode
- RPKI strict mode prevents BGP from establishing a session if no RPKI cache server
is connected.
- RPKI strict mode prevents BGP from establishing a session if no RPKI cache server
- BGP rejects AS_SET by default
- Until 10.5.0, it was disabled by default, and since RFC 9774 was published, we switched this on by default (to reject).
- BGP has lots of improvements for Graceful-Restart
- PIM/PIMv6 route-map support to allow users to filter IGMP/MLD joins using source/group/ interface combinations
- Support for multiple SRv6 locators
- This extends the SRv6 SID Manager to add support for multiple locators.
- Zebra 16-bit next hop weights support
- The weights used in ECMP’s consistent hashing have been widened from 8 bits to 16 bits since the 6.12 Linux kernel.
What's Changed
- lib: Fix impossible situation with first variable by @donaldsharp in #18995
- bgpd: Clean up evpn mac hash on shutdown. by @donaldsharp in #18996
- bgpd: Do not reuse the same adj->adv when flushing fifo (attributes too long) by @ton31337 in #18993
- bgpd: Fix crash when fetching statistics for bgp instance by @ton31337 in #19003
- pimd: add boundary checks when parsing join/graft source lists (coverity) by @Jafaral in #18989
- tests: add new /run/netns tmpfs to each topotest router namespace by @choppsv1 in #19007
- tests: Use more complicated topology to show how NHC works by @ton31337 in #19009
- babeld: Convert all code to use our code formatting rules by @donaldsharp in #18630
- Fix some coverity issues by @donaldsharp in #18897
- ospfd: adjust one display command by @anlancs in #19022
- Add frr-host yang module - fix bug with reserved IP range config by @choppsv1 in #19019
- mgmtd: remove unfinished and unneeded yang-validate code by @choppsv1 in #19029
- static: [SRv6] Fixing uninstall and reinstall uA Sids upon Intf flaps by @raja-rajasekar in #19027
- lib: add "send log" command to log a message by @choppsv1 in #19030
- Update to munet release 0.15.5 by @choppsv1 in #19025
- bgpd: Allow BGP NHT resolved nodes to go early by @donaldsharp in #19008
- bgpd:fix as-path replace issue with bgp as-path access-list by @fdumontet6WIND in #19017
- nhrpd: fix crash when accessing invalid memory zone by @pguibert6WIND in #18994
- ospf6d: Fix summary LSA removal by @gromit1811 in #18345
- bgpd: Reject AS_SET by default by @ton31337 in #19024
- bgpd: [TOPOTEST] stabilize bgp_peergroup_gshut test case by @Manpreet-k0 in #18991
- zebra: fix nexthop rib out for duplicate nhg by @chiragshah6 in #19015
- topotests: test bfd when bgp is passive by @crosser in #18954
- zebra: Start EVPN neighbor hold timer only when interface is operative by @routingrocks in #18905
- tests: Notice that the support_bundle is not properly setup by @donaldsharp in #19045
- Nhrp redundancy ping by @donaldsharp in #19048
- pathd: fix compare function overflow by @guoguojia2021 in #19050
- pimd: Fix Register-Stop state machine logic to align with RFC7761 by @hhubb22 in #19023
- zebra: Initialize RB tree for router tables by @raja-rajasekar in #19049
- tests: Fix
bgp_srv6_sid_explicittest failures by @cscarpitta in #19068 - bgpd: Soft-reconfig should not completely stall bestpath processing by @donaldsharp in #19067
- pimd: eBGP integration for SA loop detection by @rzalamena in #17699
- zebra: fix null pointer dereference in zebra_evpn_sync_neigh_del by @routingrocks in #19054
- tests: munet release 0.15.6 by @choppsv1 in #19079
- Doc and test update by @choppsv1 in #19070
- zebra: fix stale NHG in kernel by @krishna-samy in #18899
- bgp_bmp: fix missing loc-rib stats reports by @lsang6WIND in #19073
- bgpd: Fix incorrect stripping of transitive extended communities due … by @nick-bouliane in #19065
- staticd: Remove unnecessary function parameters by @zice312963205 in #19090
- Convert logging config to YANG/mgmtd, and add missing mgmtd functionality by @choppsv1 in #19060
- doc: remove dead link to quagga website by @mjstapp in #19098
- debian, redhat: add missing info to changelog by @Jafaral in #19074
- SRv6: Add support for multiple SRv6 locators by @cscarpitta in #18806
- tests: exabgp drops
-vflag in 4.2.25, use `--version`` by @choppsv1 in #19111 - Bmp locrib bgp open message by @pguibert6WIND in #19063
- bgp_bmp: do not send end of rib by default by @lsang6WIND in #19071
- bgpd: Implement RPKI strict mode by @ton31337 in #19103
- lib: Fix
no on-match goto NUMcommand by @ton31337 in #19108 - bgpd: avoid BGP port opening for VRF instances by @fdumontet6WIND in #18962
- bgpd: Fix 'no' form for 'neighbor X ip-transparent' command by @ton31337 in #19118
- explicit SRv6 address configurable per address family by @pguibert6WIND in #19088
- zebra: Fix coverity issues by @cscarpitta in #19120
- bgpd: fix missing BGP_ROUTE_AGGREGATE for announcing to zebra by @enkechen-panw in #19105
- bgpd: Fix extended community check for IP non-transitive type by @ton31337 in #19097
- pimd, pim6d: route-map filtering for source/group by @rzalamena in #18955
- bgpd: add output support for srv6 l3vpn attribute option by @pguibert6WIND in #19117
- ospfd: fix missing debug running configuration by @anlancs in #19140
- lib: cleanup one duplicated code by @anlancs in #19123
- tests: Allow time for change of state to propagate by @donaldsharp in #19138
- bgpd: Fix DEREF_OF_NULL.EX.COND in bgp_updgrp_packet by @petrvaganoff in #19126
- bgpd: adjust display format by @anlancs in #19141
- ospf6d: Fix OSPFv3 SNMP interface state mapping by @miteshkanjariya in #18697
- zebra: zebra ...
FRR Release 10.1.4
Debian Packages - https://deb.frrouting.org/
RPM Packages - https://rpm.frrouting.org/
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
What's Changed
- ospf6d: Disable and delete OSPFv3 areas that no longer have interfaces or configuration. (backport #18393)
- zebra: Do not flush an existing vni configuration trying to remove wrong vni (backport #18108)
- bgpd: fix
set evpn gateway-ip ipv[46]route-map (#18465) - bgpd: Fix holdtime not working properly when busy (#8490)
- bgpd: Retain the routes if we do a clear with N-bit set for Graceful-Restart (backport)
- zebra: Prevent vrf table 254 being used by non-default vrf (backport #18702)
- bgpd: fix show bgp vpn rd json (backport #18802)
- Prefix list leak bfdd ldpd (backport #18830)
- redhat: Add Workaround for inet_ntop replacement which breaks rpms (backport #18864)
- bgpd: fix to show exist/non-exist-map in 'show run' properly (backport #18828)
- bgpd: correct no form commands (backport #18911)
- bgpd: use AS4B format for BGP loc-rib messages. (backport #18936)
- redhat: make FRR RPM build to work on RedHat 10 (backport #18920)
- build: check for libunwind.h, not unwind.h (backport #18912)
- bgpd: Force adj-rib-out updates if MRAI is kicked in (backport #18959)
- nhrpd: fix crash when accessing invalid memory zone (backport #18994)
- lib: Fix
no on-match goto NUMcommand (backport #19108) - bgpd: Fix DEREF_OF_NULL.EX.COND in bgp_updgrp_packet (backport #19126)
- bgpd: Extract link bandwidth value from extcommunity before using for WCMP (backport #19165)
- bfdd: Set bfd.LocalDiag when transitioning to AdminDown (backport #18592)
- bgpd: Do not try to reuse freed route-maps (backport #19191)
- lib: fix routemap crash (backport #19127)
- bgpd: [GR] fixed selectionDeferralTimer to display select_defer_time val (#19285)
- zebra: Fix buffer overflows found by fuzzing. (backport #19303)
- lib: compute link-state zapi message size (backport #19290)
Full Changelog: frr-10.1.3...frr-10.1.4
FRR Release 10.0.4
Debian Packages - https://deb.frrouting.org/
RPM Packages - https://rpm.frrouting.org/
Snaps - https://snapcraft.io/frr
Docker - quay.io/frrouting/frr
What's Changed
- isisd: Show correct level information for
show isis interface detail json(backport #17732) - tools: Add missing rpki keyword to vrf in frr-reload (backport #17750)
- bgpd: fix a bug in peer_allowas_in_set() (backport #17780)
- isisd: Allow full
noform fordomain-passwordandarea-password(backport #17725) - bgpd: fix crash in displaying json orf prefix-list (backport #17807)
- bgpd: use igpmetric in bgp_aigp_metric_total() (backport #17813)
- bgpd: Fix for local interface MAC cache issue in 'bgp mac hash' table (backport #17888)
- Revert "bgpd: Handle Addpath capability using dynamic capabilities" (backport #17940)
- tools: Fix frr-reload for ebgp-multihop TTL reconfiguration. (backport #17946)
- bgpd: With suppress-fib-pending ensure withdrawal is sent (backport #17971)
- bgpd: fix route-distinguisher in vrf leak json cmd (backport #17992)
- zebra: fix evpn svd hash avoid double free (backport #17991)
- bgpd: Send non-transitive extended communities from/to OAD peers (backport #17896)
- bgpd: Do not start BGP session if BGP identifier is not set (#18017)
- lib: actually hash all 16 bytes of IPv6 addresses, not just 4 (backport #17901)
- lib: crash handlers must be allowed on threads (backport #18060)
- zebra: include resolving nexthops in nhg hash (backport #17935)
- bgpd: fix incorrect JSON in bgp_show_table_rd (backport #18120)
- bgp/bfd backports for stable/10.0 (#18153)
- bgpd: When removing the prefix list drop the pointer (backport #18160)
- lib: fix false context information for SRv6 route (backport #18023)
- bgpd: fix vty output of evpn route-target AS4 (backport #18109)
- bgpd: release manual vpn label on instance deletion (backport #18121)
- Revert "bgpd: release manual vpn label on instance deletion (backport #18121)"
- isisd: Correct edge insertion into TED (backport #18294)
- bgpd: Fixed crash upon bgp network import-check command (backport #18387)
- ospf6d: Disable and delete OSPFv3 areas that no longer have interfaces or configuration. (backport #18393)
- zebra: Do not flush an existing vni configuration trying to remove wrong vni (backport #18108)
- bgpd: fix
set evpn gateway-ip ipv[46]route-map (#18466) - bgpd: Fix holdtime not working properly when busy (#18491)
- bgpd: Retain the routes if we do a clear with N-bit set for Graceful-Restart (#18518)
- zebra: Prevent vrf table 254 being used by non-default vrf (backport #18702)
- bgpd: fix show bgp vpn rd json (backport #18802
- redhat: Add Workaround for inet_ntop replacement which breaks rpms (backport #18864)
- bgpd: fix to show exist/non-exist-map in 'show run' properly (backport #18828)
- bgpd: correct no form commands (backport #18911)
- redhat: make FRR RPM build to work on RedHat 10 (backport #18920)
- build: check for libunwind.h, not unwind.h (backport #18912)
- bgpd: Force adj-rib-out updates if MRAI is kicked in (backport #18959)
- nhrpd: fix crash when accessing invalid memory zone (backport #18994)
- lib: Fix
no on-match goto NUMcommand (backport #19108) - bgpd: Fix DEREF_OF_NULL.EX.COND in bgp_updgrp_packet (backport #19126)
- bgpd: Extract link bandwidth value from extcommunity before using for WCMP (backport #19165)
- bfdd: Set bfd.LocalDiag when transitioning to AdminDown (backport #18592)
- bgpd: Do not try to reuse freed route-maps (backport #19191)
- lib: fix routemap crash (backport #19127)
Full Changelog: frr-10.0.3...frr-10.0.4