[Mellanox] Add SAI_DROP_OVER_MAX keys-values to SN5600, SN5640 and recalculated buffers#72
Open
[Mellanox] Add SAI_DROP_OVER_MAX keys-values to SN5600, SN5640 and recalculated buffers#72
Conversation
stephenxs
reviewed
Mar 4, 2026
device/mellanox/x86_64-nvidia_sn5600-r0/Mellanox-SN5600-C256S1/sai.profile
Outdated
Show resolved
Hide resolved
device/mellanox/x86_64-nvidia_sn5600-r0/Mellanox-SN5600-C256S1/buffers_defaults_t0.j2
Show resolved
Hide resolved
…ecalculated buffers Signed-off-by: noaOrMlnx <noaor@nvidia.com>
stephenxs
approved these changes
Mar 12, 2026
…lly (sonic-net#25285) #### Why I did it src/sonic-gnmi ``` * 5da416f - (HEAD -> master, origin/master, origin/HEAD) Implements the frontend logic for gNSI Authz (sonic-net#549) (5 hours ago) [niranjanivivek] * 153f13f - Skip flaky integration tests to stabilize PR pipeline (sonic-net#615) (34 hours ago) [Dawei Huang] * d297045 - Refactor: Add missing defer Close() to prevent Redis connection leak (sonic-net#608) (5 days ago) [jayaragini-hcl] * bf5d3e0 - Implements the frontend logic for gNSI Certz (sonic-net#559) (9 days ago) [jayaragini-hcl] * 91b14bf - Add support to write gNSI credentials metadata to DB (sonic-net#596) (9 days ago) [jayaragini-hcl] * f0d2b7d - Add support for PHY diagnostic parameters (sonic-net#583) (12 days ago) [Feng-msft] * 469b400 - Add unit tests for DPU proxy singleton and GetDPUConnection (sonic-net#595) (12 days ago) [Dawei Huang] * 8fccb68 - Fix TransferToRemote DPU connection: replace localhost loopback with … (sonic-net#591) (2 weeks ago) [Dawei Huang] ``` #### How I did it #### How to verify it #### Description for the changelog
…tically (sonic-net#25906) #### Why I did it src/sonic-sairedis ``` * ca4fe78a - (HEAD -> master, origin/master, origin/HEAD) Support route update (sonic-net#1772) (4 days ago) [yue-fred-gao] * 3679821a - [DPU] Add support for Flow bulk session get notifications (sonic-net#1769) (6 days ago) [Vivek] * ba4bbd8e - vpp: fix bogus errors (sonic-net#1642) (7 days ago) [yue-fred-gao] ``` #### How I did it #### How to verify it #### Description for the changelog
…omatically (sonic-net#26139) #### Why I did it src/sonic-swss-common ``` * 364023a - (HEAD -> master, origin/master, origin/HEAD) ZMQ lib change to support one-to-one sync (sonic-net#1039) (21 minutes ago) [divyagayathri-hcl] ``` #### How I did it #### How to verify it #### Description for the changelog
…onic-net#25423) * Allow for speed change by updating the config_db and reloading Why I did it 1) Automate generation of ASIC, gearbox, and PHY configs for different port speeds, instead of maintaining HWSKUs which are inflexible. 2) Derive configuration from platform files: a) port_speed.json (port speed profiles + ASIC/gearbox mapping) b) Q3D_ports.json (ASIC core/PM → lanes/port names) c) CONFIG_DB.PORT (actual ports, speeds, indices, lanes) 3) Add validation so invalid lane/speed combinations are caught early (before swss brings up ports). How I did it 1) Changed docker image template to provide rw permission to hwsku directory to allow for the config generation. 2) The hwsku-init runs everytime the swss starts and generates the configuration file. 3) Introduced a common hwsku pipeline: a) Dataclasses for ASIC ports, gearbox ports, speed profiles, and CONFIG_DB entries. b) Loaders for: port_speed.json → per-port speed profiles + ASIC/gearbox mapping. Q3D_ports.json → core/PM → port → lane map. CONFIG_DB PORT table (or a JSON dump) → typed port map. c) Generators for: Gearbox interfaces list. Per‑PHY phy_config.json content. ASIC specific config d) A run() method that: Calls platform-specific ASIC config generation. Renders Jinja2 templates into nh5010.bcm, gearbox_config.json, and phy*_config.json, with a fallback to defaults/ on error. 4) Currently supports: (400G-4, 100G-2) ASIC config, (400G-8, 100G-4) front port on the ports 1-32. (400G-4, 100G-4) ASIC and front port config (no gearbox) on ports 33-64. This commit moves all current signal integrity settings for gearboxes into the media_settings file in the device/nexthop/x86_64-nexthop_5010-r0 directory. It also removes the older configuration via gearbox_config.json so that we only have a single source of truth for all signal integrity configuration on this platform. Signed-off-by: arpit-nexthop <arpit@nexthop.ai> Signed-off-by: arpit-nexthop <arpit@nexthop.ai> * Ignore flask warning as the j2 generation is not for html Signed-off-by: arpit-nexthop <arpit@nexthop.ai> * jinja2 warning ignore to correct line Signed-off-by: arpit-nexthop <arpit@nexthop.ai> * Updated media settings with correct data, fixed review comments Signed-off-by: arpit-nexthop <arpit@nexthop.ai> * enable Credit-WD-Del counter for DNX Signed-off-by: Roy Wen <roy@nexthop.ai> * update default bcm files Signed-off-by: Roy Wen <roy@nexthop.ai> * Trigger CI/CD build Signed-off-by: arpit-nexthop <arpit@nexthop.ai> * Trigger CI/CD build Signed-off-by: arpit-nexthop <arpit@nexthop.ai> --------- Signed-off-by: arpit-nexthop <arpit@nexthop.ai> Signed-off-by: Roy Wen <roy@nexthop.ai> Co-authored-by: saravanan sellappa <saravanan@nexthop.ai> Co-authored-by: Roy Wen <roy@nexthop.ai>
Why I did it\n- 202511 includes migration to Debian 13 from Debian 12. Previous kubelet cgroupdriver configuration was set to cgroupfs for compatibility with Debian 12. Debian 13 expects systemd cgroupdriver, which is the default configuration of kubelet in Kubernetes v1.22.2- so we should remove the explicit cgroupfs cgroupdriver configuration in SONiC OSVersion >= 202511.\n\nHow I did it\n- Remove the explicit cgroupfs cgroupdriver configuration in SONiC OSVersion >= 202511.\n\nHow to verify it\n- Build image and join node to cluster.\n\nSigned-off-by\n- isabel <isl@microsoft.com>\n- isabel <isabel.li@microsoft.com>
Why I did it Due to the recent s360 vulnerability reports. This PR is needed to address the problems. We have vulnerability in the follow image: docker-ptf debian docker-sonic-mgmt Signed-off-by: Austin Pham <austinpham@microsoft.com>
…et#26141) Signed-off-by: Yijing Yan <yijingyan@microsoft.com>
srv6: creating sr0 dummy interface for srv6
…lly (sonic-net#26163) #### Why I did it src/sonic-gnmi ``` * 4946885 - (HEAD -> master, origin/master, origin/HEAD) Skip authentication for UDS connections (sonic-net#617) (5 hours ago) [Dawei Huang] ``` #### How I did it #### How to verify it #### Description for the changelog
…lly (sonic-net#25846) #### Why I did it src/sonic-swss ``` * 4b8f6494 - (HEAD -> master, origin/master, origin/HEAD) Merge pull request sonic-net#4261 from bibhuprasad-hcl/bibhu_swss_p4_branch14 (2 hours ago) [StephenWangGoogle] |\ | failure_prs.log skip_prs.log a367ddb2 - [P4Orch] Remove code associated with old L3 multicast database format. (6 hours ago) [mint570] |/ * f94622ab - Optimize memory usage in ResponsePublisher queue (sonic-net#4328) (7 hours ago) [Santhosh Thodupunoori] * dc7210f3 - Merge pull request sonic-net#4258 from bibhuprasad-hcl/bibhu_swss_p4_branch_11_12_13 (8 hours ago) [StephenWangGoogle] |\ | failure_prs.log skip_prs.log 49df9e7d - [P4Orch]Migrate to use updateMulticastGroupEntries, verifyState to new database schema format, processMulticastGroupEntries and drainMulticastGroupEntries. (13 hours ago) [mint570] |/ * d084258b - Suppressing the ERR logs (sonic-net#4265) (35 hours ago) [Dhanasekar Rathinavel] * 6a931d91 - Fix debug flexcounter uninstall to skip non-PHY ports (sonic-net#4103) (2 days ago) [manish1-arista] * fa37c5c7 - [Marvell-Teralynx][PFCWD]: Fix pfc_detect filename to align with asic_type (sonic-net#3968) (2 days ago) [jithenderkondam] * 57b12c1f - Merge pull request sonic-net#4238 from ksravani-hcl/p4orch_g3 (4 days ago) [StephenWangGoogle] |\ | failure_prs.log skip_prs.log 6b52aae4 - Add IPv6 src IP as new ternary key field for table ipv6_tunnel_termination_table (6 days ago) [mint570] |/ * e09a0d0f - Merge pull request sonic-net#4169 from divyagayathri-hcl/ip_multicast_5 (6 days ago) [StephenWangGoogle] |\ | failure_prs.log skip_prs.log b96ec617 - [P4Orch] Implement drain, validate and verifyState entry functions in IP multicast table manager. (6 days ago) [mint570] |/ * bebc9e43 - Merge pull request sonic-net#4163 from divyagayathri-hcl/ip_multicast_3 (6 days ago) [StephenWangGoogle] |\ | failure_prs.log skip_prs.log 0df5456a - [P4Orch] Implement createIpMulticastEntries, deleteIpMulticastEntries & updateIpMulticastEntries in new IP multicast table manager. (7 days ago) [mint570] |/ * 558a6d81 - Merge pull request sonic-net#4175 from ksravani-hcl/sws_7 (7 days ago) [StephenWangGoogle] |\ | failure_prs.log skip_prs.log 45a1e14d - Enable use of SAI L2 multicast and add p4orch mocks (7 days ago) [mint570] |/ * 6daa5cea - Merge pull request sonic-net#4147 from divyagayathri-hcl/sws_4 (7 days ago) [StephenWangGoogle] |\ | failure_prs.log skip_prs.log 2ffdab3c - Add TunnelDecapGroupManager (8 days ago) [mint570] |/ * ef371099 - Merge pull request sonic-net#4082 from divyagayathri-hcl/set_ip_nexthop_and_disable_rewrites (8 days ago) [StephenWangGoogle] |\ | failure_prs.log skip_prs.log c1f53c5c - Merge branch 'master' into set_ip_nexthop_and_disable_rewrites (8 days ago) [divyagayathri-hcl] | |\ | |/ |/| * | e108aec3 - [DASH] Add support for multiple trusted VNI ranges and values (sonic-net#4252) (8 days ago) [Lawrence Lee] * | 54261942 - Merge pull request sonic-net#4132 from divyagayathri-hcl/18_multicast (9 days ago) [StephenWangGoogle] |\ \ | failure_prs.log skip_prs.log | dc55967f - [P4Orch] Update route manager & verifyState validate functions and to implement drain rout entried to support multicast action. (9 days ago) [mint570] |/ / | failure_prs.log skip_prs.log aba11043 - [P4Orch] Add support for action set_ip_nexthop_and_disable_rewrites in the next hop manager. (10 days ago) [mint570] |/ * 3f77e90c - Merge pull request sonic-net#4250 from bibhuprasad-hcl/bibhu_swss_p4_branch_8_9_10 (10 days ago) [StephenWangGoogle] * 179e86f9 - [P4Orch] Migrate to new schema format for REPLICATION_MULTICAST_TABLE and to use addMulticastGroupEntries and deleteMulticastGroupEntries. (11 days ago) [mint570] ``` #### How I did it #### How to verify it #### Description for the changelog
… automatically (sonic-net#25594) #### Why I did it src/sonic-platform-common ``` * 19451b5 - (HEAD -> master, origin/master, origin/HEAD) Fix invalid escape sequence warnings in ssd.py (sonic-net#629) (3 days ago) [Stephen Sun] ``` #### How I did it #### How to verify it #### Description for the changelog
…e latest HEAD automatically (sonic-net#25943) #### Why I did it src/wpasupplicant/sonic-wpa-supplicant ``` * f3f3caa14 - (HEAD -> master, origin/master, origin/HEAD) [driver_macsec_sonic] Fix repeated MACsec session flaps on creation (sonic-net#111) (7 days ago) [senthil-nexthop] ``` #### How I did it #### How to verify it #### Description for the changelog
What is the motivation for this PR When --client_auth cert is configured on the gNMI server, UDS connections fail auth because TLS peer creds are unavailable, blocking local services (e.g., device-ops-agent) from using gNMI/gNOI over UDS. How did you do it Updated sonic-gnmi submodule to include sonic-net/sonic-gnmi#617, adding a UDS detection check in authenticate() to skip cert auth for UDS (secured by socket permissions). How did you verify/test it On a device with --client_auth cert configured: $ sudo grpcurl -plaintext unix:///var/run/gnmi/gnmi.sock gnoi.system.System/Time {time: 1773163799143468772} Without sudo: permission denied at filesystem level. Unique Signed-off-by Signed-off-by: Dawei Huang <daweihuang@microsoft.com>
[swss] Restart countersyncd after unexpected exit
Signed-off-by: mint570 <runmingwu@google.com> Co-authored-by: mint570 <runmingwu@google.com>
Strip unneeded symbols from grpcio and grpcio-tools native .so files after installation in the docker-platform-monitor container. These extensions contain debug and symbol information that is not required at runtime. On aarch64, the two largest .so files (cygrpc and _protoc_compiler) are ~190MB and ~91MB respectively before stripping. After stripping, they shrink significantly, reducing the overall PMON image size. Fixes: sonic-net#25300 Signed-off-by: Rustiqly <rustiqly@users.noreply.github.com> Co-authored-by: Rustiqly <rustiqly@users.noreply.github.com>
…remove (sonic-net#25552) * [build-hooks] Fix reproducible build: pin apt versions and track autoremove When ENABLE_VERSION_CONTROL_DEB=y (SONIC_VERSION_CONTROL_COMPONENTS includes 'deb'), the apt-get hook now actively pins package versions from versions-deb instead of only warning about missing versions. Three fixes: 1. Add pin_apt_versions() - rewrites 'apt-get install foo' to 'apt-get install foo=1.2.3' using versions from versions-deb file. Only activates when deb version control is enabled. Packages not in the versions file pass through unchanged (with existing warning). 2. Track autoremove - collect package versions before apt-get autoremove (like we already do for purge/remove) so intermediate build dependencies are captured in purge-versions-deb. 3. Keep existing APT preferences mechanism (Pin-Priority: 999) as defense-in-depth alongside the explicit version pinning. Fixes sonic-net#7502 Signed-off-by: Rustiqly <rustiqly@users.noreply.github.com> * fix check_apt_version: local VERSION_FILE + awk exact match Address Copilot review feedback: - Make VERSION_FILE local in check_apt_version() to avoid global mutation - Replace grep '^pkg=' with awk -F'==' exact match (versions-deb uses ==) Signed-off-by: Rustiqly <rustiqly@users.noreply.github.com> * fix pin_apt_versions: strip +fips suffix for non-FIPS builds When versions-deb is generated from a FIPS build, package versions may contain a +fips suffix (e.g. openssh-server==1:10.0p1-7+fips). When building without ENABLE_FIPS=y, these versions don't exist in the apt repositories, causing 'apt-get install' to fail. Strip the +fips suffix from pinned versions when ENABLE_FIPS is not enabled. Signed-off-by: Rustiqly <rustiqly@users.noreply.github.com> * Drop pin_apt_versions, rely solely on preferences.d for version control Address review feedback from liushilongbuaa: remove the pin_apt_versions() function and its call in the apt-get hook. Version pinning is already handled by /etc/apt/preferences.d/01-versions-deb (Pin-Priority: 999), generated by update_preference_deb() and installed by pre_run_buildinfo. Having two mechanisms was confusing and hard to debug. Also add +fips suffix stripping in update_preference_deb() so preferences.d handles FIPS packages correctly (previously only pin_apt_versions did this). Signed-off-by: Rustiqly <rustiqly@users.noreply.github.com> --------- Signed-off-by: Rustiqly <rustiqly@users.noreply.github.com> Co-authored-by: Rustiqly <rustiqly@users.noreply.github.com>
…atically (sonic-net#25254) #### Why I did it src/sonic-utilities ``` * 20a7131b - (HEAD -> master, origin/master, origin/HEAD) clear: make --namespace optional for arp and ndp commands (sonic-net#4355) (5 minutes ago) [Oleksandr Ivantsiv] * f56e4a78 - show version: replace --verbose with --brief flag (sonic-net#4350) (20 hours ago) [Ashwin Srinivasan] * 5e50cf3d - Wait for monit monitor <service> operation to complete during config (sonic-net#4295) (23 hours ago) [Hemanth Kumar Tirupati] * 0306ea20 - Change sensorshow conn to use TCP socket (sonic-net#4343) (2 days ago) [Chenyang Wang] * cb5b3e82 - Fix route_check.py redis client memory usage (sonic-net#4217) (2 days ago) [Roee Bar] * e93a5c3c - config: allow golden config to override mac, platform, asic_id (sonic-net#4348) (2 days ago) [securely1g] * 0024c8d4 - Add non -B- hwsku names as well (sonic-net#4331) (2 days ago) [dakotac-arista] * eb7301cc - Fix unit tests (sonic-net#4345) (3 days ago) [william8545] * 052199c0 - [Arista] Add Arista-7050CX3-32C-C28S4 to generic_config_updater (sonic-net#4257) (4 days ago) [byu343] * ed68290a - Add multi-ASIC namespace support for show/config subinterface(s) command (sonic-net#4298) (4 days ago) [william8545] * 9c9f099d - New CLI proposal for PHY diagnostics (sonic-net#4214) (4 days ago) [Prince George] * 9e3373df - Fix generate_dump to preserve per-ASIC subdirectory structure for sdk_dbg collection (sonic-net#4334) (4 days ago) [william8545] * 3fe8972f - Add multi-ASIC namespace support for ARP/NDP show and clear commands (sonic-net#4231) (4 days ago) [Oleksandr Ivantsiv] * be5fe2aa - Add multi-ASIC namespace support for VLAN and FDB operations (sonic-net#4230) (4 days ago) [Oleksandr Ivantsiv] * e74fca78 - Add multi-ASIC namespace support for static route commands (sonic-net#4269) (4 days ago) [Oleksandr Ivantsiv] * 599e7c71 - Add multi-ASIC namespace support for ACL table add/remove commands (sonic-net#4270) (4 days ago) [Oleksandr Ivantsiv] * d09d6cd6 - Add CLI support for "show interfaces <intf> <phy-signal/phy-serdes>" commands (sonic-net#4312) (4 days ago) [prajjwal-arista] * 345f5686 - Add multi-asic namespace support for IPv6 link-local commands (sonic-net#4289) (4 days ago) [william8545] * edd4b190 - Add multi-asic namespace support for crm show resources command (sonic-net#4290) (4 days ago) [william8545] * 2b52a051 - [multi-asic] Add namespace support for vxlan and vnet show/config commands (sonic-net#4299) (4 days ago) [william8545] * 03160905 - [fast-reboot][cosmetic] Fixed debug/error prints with the correct reboot type (sonic-net#4285) (4 days ago) [Yair Raviv] * 6eedf8a7 - [warm-reboot][multi-asic] Added error-handling for faulty ASIC/s after orchagent freeze (sonic-net#4297) (4 days ago) [Yair Raviv] * 2330bab5 - [BMC] Add new BMC CLIs for manual session management and reset root password (sonic-net#4238) (4 days ago) [Ben Levi] * 4d0cc933 - Fix issue: pmon services's restart count is not cleared during config reload (sonic-net#4314) (4 days ago) [Stephen Sun] * 0a1bbc55 - Fix the generate_dump for BCM Asic Q3D (sonic-net#4326) (6 days ago) [saksarav-nokia] * 1580ccce - GCU generates suboptimal plan for CreateOnly paths (sonic-net#4335) (6 days ago) [Brad House - Nexthop] * 369e703e - GCU: Add path tracing support (sonic-net#4317) (7 days ago) [Brad House - Nexthop] * bc05e1a4 - [GCU]: Restart telemetry container on port speed change via GCU to handle OID update (sonic-net#4248) (7 days ago) [Xincun Li] * 73f1ea51 - Fix warning messages due to nose test deprecation (sonic-net#4322) (8 days ago) [Brad House - Nexthop] * ebfefbd8 - [Arista] Add TH5 HWSKU to list for pfcwd support (sonic-net#4329) (8 days ago) [dakotac-arista] * 0d969b85 - [DPU] Add support for HA Set Counters (sonic-net#4283) (8 days ago) [Connor Roos] * 44f8c37b - [DPU] Add CLI to trigger and dump flows (sonic-net#4278) (8 days ago) [Vivek] * 76bf567e - [show interfaces] "show interfaces flap" command does not support multi-ASIC platforms (sonic-net#4316) (9 days ago) [pnakka28] * 2ec21e19 - Limit PFC WD Detection time to maximum value of 1000ms (sonic-net#4306) (9 days ago) [Hemanth Kumar Tirupati] * 99b1b76a - Modified dualtor_neighbor_check to use mux neighbor_mode (sonic-net#4227) (10 days ago) [manamand2020] * 5dfd11ed - Fix 'show version' KeyError when sonic_version.yml has missing fields (sonic-net#4324) (10 days ago) [securely1g] * 4c77f9d4 - fix: skip PORT_INGRESS/EGRESS_MIRROR_CAPABLE check for ERSPAN mirror sessions (sonic-net#4323) (11 days ago) [bingwang-ms] * d8d2a39e - fix scapy delayed import when we have large routes (sonic-net#4315) (11 days ago) [Hemanth Kumar Tirupati] * c6601cda - [LACP retry-count] Syntax Fix for Trixie (sonic-net#4274) (11 days ago) [Yair Raviv] * f54d0a7c - Add fsync to config save to persist config across power cycle (sonic-net#4313) (11 days ago) [Jianyue Wu] * e5f77f61 - Fix unit test assertions broken by spelling typo PRs (sonic-net#4321) (13 days ago) [rustiqly] * 7660b19f - Fix spelling typos in muxcable modules (sonic-net#4259) (2 weeks ago) [rustiqly] * f7d820f3 - Fix spelling typos in config/main.py (sonic-net#4261) (2 weeks ago) [rustiqly] * 244942bd - Fix spelling typos in scripts/ (sonic-net#4262) (2 weeks ago) [rustiqly] * 89001b10 - Fix spelling typos in show/ and clear/ modules (sonic-net#4263) (2 weeks ago) [rustiqly] * d6e646c2 - Fix spelling typos in config/config_mgmt.py (sonic-net#4260) (2 weeks ago) [rustiqly] * e244129c - Fix spelling typos in config/nat.py (sonic-net#4258) (2 weeks ago) [rustiqly] * 5a0c48f0 - In route_check.py, Convey the IJSON Backend using an env variable (sonic-net#4294) (2 weeks ago) [venkit-nexthop] * e2712fc1 - Fix spelling typos across utilities_common, config plugins, and misc modules (sonic-net#4264) (2 weeks ago) [rustiqly] * 4211edee - Fixed show vxlan remotemac ambiguity (sonic-net#4121) (2 weeks ago) [Gnanapriya [Marvell]] * cfd23f97 - Add FEC histograms to generate_dump output (sonic-net#4244) (2 weeks ago) [Fraser Gordon] * 8882a633 - [storm-control] Fixed show storm-control interface command display (sonic-net#4122) (2 weeks ago) [Gnanapriya [Marvell]] * 7a1e656e - [fibshow]: Fix exception when blackhole routes are present (sonic-net#4189) (2 weeks ago) [Ravi Minnikanti(Marvell)] * 2b3f14de - [marvell-teralynx] Enhance techsupport to include HWSKU configs (sonic-net#4161) (3 weeks ago) [Naveen-Rampuram] * 9cb7b3e6 - Merge pull request sonic-net#4275 from tirupatihemanth/fix_scapy_lagkeepalive (3 weeks ago) [Ying Xie] |\ | failure_prs.log skip_prs.log 7e54ddff - Fix delayed scapy import when we have a lot of routes (3 weeks ago) [Hemanth Kumar Tirupati] * | cbb31f0d - [multi-asic] fix utilities_common Db helper (sonic-net#4273) (3 weeks ago) [Yakiv Huryk] * | f65ddfa2 - Prevent early exit of reboot status (sonic-net#4282) (3 weeks ago) [Gagan Punathil Ellath] * | 14840074 - [fast-reboot] Remove teamsyncd timer override by fast-boot (sonic-net#4233) (3 weeks ago) [Yair Raviv] * | a3085380 - [lag_keepalive] add `--namespace` option (sonic-net#4194) (4 weeks ago) [Yair Raviv] * | abc8bba1 - [teamd_retry_count] Add support for --namespace parameter (sonic-net#4195) (4 weeks ago) [Yair Raviv] * | c05d995c - [warm/fast-reboot] check per-ASIC FW upgrade status (sonic-net#4196) (4 weeks ago) [Yair Raviv] * | 433d01c1 - [check_db_integrity] Add NETNS environment (sonic-net#4197) (4 weeks ago) [Yair Raviv] * | 441595c7 - [centralize_database] Add --namespace option (sonic-net#4198) (4 weeks ago) [Yair Raviv] * | 0f3b5291 - [multi-asic][warm-reboot] Support warm-reboot on Multi-ASIC systems (sonic-net#4199) (4 weeks ago) [Yair Raviv] * | 28623ca9 - [multi-asic][warm_restart] add Multi-ASIC support for warm_restart commands (sonic-net#4200) (4 weeks ago) [Yair Raviv] * | 3cd228af - Add filesystem sync after plugin installation (sonic-net#4251) (4 weeks ago) [Jianyue Wu] * | 1d78c210 - Add .github/copilot-instructions.md for AI-assisted development (sonic-net#4271) (4 weeks ago) [rustiqly] * | 7895da57 - Fix dump port state CLI command crash on multi-asic platforms (sonic-net#4229) (4 weeks ago) [Setu Patel] |/ * bcb1d4bb - Clearing /tmp/tmp* is unsafe with parallel builds (sonic-net#4268) (4 weeks ago) [Brad House - NextHop] * 8103627e - Fix sonic-utilities submodule update failure due to ijson library (sonic-net#4256) (4 weeks ago) [venkit-nexthop] * 85becedc - [Mellanox] Add restricted sysfs to fw control list (sonic-net#4240) (4 weeks ago) [Noa Or] * 275bdc6c - Add multi-asic support for sonic-clear queue wredcounters and counter poll , --nonzero support for show queue wredcounters (sonic-net#4152) (5 weeks ago) [saksarav-nokia] * fbc85ee4 - Fix j2 files not getting packaged (sonic-net#4250) (5 weeks ago) [Saikrishna Arcot] * a9543cba - Fix route_check.py to not hog a lot of memory (sonic-net#4205) (5 weeks ago) [venkit-nexthop] * 40260d5b - Fix JsonMove._get_value to Support Both String and Integer List Indices (sonic-net#4237) (5 weeks ago) [Xincun Li] * 0a3ef184 - refactor: enhance show bfd summary command (sonic-net#4242) (5 weeks ago) [Chenyang Wang] * 7c6dfdc2 - Update the error message for sfputil debug loopback command (sonic-net#4224) (5 weeks ago) [Ariz Zubair] * f246da25 - [Fast-linkup] Added CLIs for config/show (sonic-net#4182) (6 weeks ago) [Yair Raviv] * 87703c1 - Use Singleton PlatformDataProvider to reduce module import time (sonic-net#4183) (6 weeks ago) [Hemanth Kumar Tirupati] * 0dae5f2 - [sfputil] Fix issue: should not do low power mode or reset for non-present ports (sonic-net#4206) (6 weeks ago) [Junchao-Mellanox] * 5f56518 - generate_dump: add interface FEC stats (sonic-net#4093) (6 weeks ago) [Fraser Gordon] * 2e9e81c - [GCU] Update WRED_PROFILE and BUFFER_POOL validators for GCU (sonic-net#4219) (6 weeks ago) [Dev Ojha] * 2350203 - Update bash completions for sonic-utilities commands (sonic-net#4163) (6 weeks ago) [Saikrishna Arcot] * 5052e02 - Fix the PSU show command error message on platform without psu at all (sonic-net#4151) (6 weeks ago) [Yuanzhe] * 7d9ec5d - Fix issue that namespace is not correctly fetched in Multi ASIC environment for mirror capability checking (sonic-net#4159) (6 weeks ago) [Stephen Sun] * f473b4f - Fix multi asic initialization for dump command (sonic-net#4108) (6 weeks ago) [Gagan Punathil Ellath] * 0f45e43 - Add current and configured frequency to DOM CLI (sonic-net#4209) (7 weeks ago) [Ariz Zubair] * 6f0b181 - Added counterpoll CLI support (sonic-net#4106) (7 weeks ago) [Dhanasekar Rathinavel] * 3d5bef9 - [multi-asic][Mellanox] Add multi-ASIC support for generate_dump and update FW upgrade script (sonic-net#4192) (7 weeks ago) [Oleksandr Ivantsiv] * 8451f01 - sonic-utilities: Support for clearing aggregate VOQ counters(sonic-net#2001) (sonic-net#4044) (8 weeks ago) [manish1-arista] * 21f013f - Add q3d SKUs to gcu_field_operation_validators.conf.json (sonic-net#4201) (8 weeks ago) [HP] * 1a15091 - Fix multi asic connection creation (sonic-net#4109) (8 weeks ago) [Gagan Punathil Ellath] ``` #### How I did it #### How to verify it #### Description for the changelog
…fix (sonic-net#25962) Add TELEMETRY_WATCHDOG_CERT_PROBE_ENABLED function into watchdog and fix
Enhance lldpd.conf.j2 for IPv6 support
…D automatically (sonic-net#25994) #### Why I did it src/sonic-platform-daemons ``` * b85fff3 - (HEAD -> master, origin/master, origin/HEAD) Set DOM polling interval based on the time at the start of the loop instead of the end. (sonic-net#757) (7 hours ago) [Aditya Bhiday] * 7d8007d - [Smartswitch] Use MODULE_ADMIN_DOWN when DPU operational state is offline (sonic-net#772) (35 hours ago) [Gagan Punathil Ellath] * 4c23a4e - Support parsing gearbox configuration from media_settings.json (sonic-net#728) (4 days ago) [Brian Gallagher] ``` #### How I did it #### How to verify it #### Description for the changelog
…omatically (sonic-net#26185) #### Why I did it src/sonic-mgmt-common ``` * 61d8b07 - (HEAD -> master, origin/master, origin/HEAD) Implement translib backend logic for the gNSI Credentialz (sonic-net#203) (11 hours ago) [jayaragini-hcl] ``` #### How I did it #### How to verify it #### Description for the changelog
…lly (sonic-net#26183) #### Why I did it src/sonic-gnmi ``` * fd6db1c - (HEAD -> master, origin/master, origin/HEAD) Implements the frontend logic for gNSI Pathz (sonic-net#537) (11 hours ago) [niranjanivivek] ``` #### How I did it #### How to verify it #### Description for the changelog
…ly (sonic-net#26181) #### Why I did it src/sonic-bmp ``` * 9625f50 - (HEAD -> master, origin/master, origin/HEAD) Merge pull request #32 from rustiqly/gcc14-cstdint-fix (4 hours ago) [Feng-msft] * 7098b13 - Add missing #include <cstdint> for GCC 14 compatibility (9 days ago) [Rustiqly] ``` #### How I did it #### How to verify it #### Description for the changelog
…tically (sonic-net#26169) #### Why I did it src/sonic-sairedis ``` * d99fb083 - (HEAD -> master, origin/master, origin/HEAD) Port Serdes Attribute Flex Counter Phase 2 (sonic-net#1771) (20 hours ago) [prajjwal-arista] ``` #### How I did it #### How to verify it #### Description for the changelog
Update PFC WD poll interval range in yang-model
…lly (sonic-net#26291) #### Why I did it src/sonic-swss ``` * c20ded7b - (HEAD -> master, origin/master, origin/HEAD) SAI_REDIS_SYNC_OPERATION_RESPONSE_TIMEOUT expand for armhf (sonic-net#4041) (10 hours ago) [Yan Markman] ``` #### How I did it #### How to verify it #### Description for the changelog
…atically (sonic-net#26263) #### Why I did it src/sonic-utilities ``` * 6b47fed6 - (HEAD -> master, origin/master, origin/HEAD) Updating mgmt vrf table id for 4k vrf pool (sonic-net#4279) (3 hours ago) [Yash Pandit] * 4c03bdb9 - Add CLI commands for bgp aggregate feature (sonic-net#4354) (20 hours ago) [nanali-msft] * 6098a0fa - scripts/generate_dump: Fix duplicate generate_dump entry (#4300) (32 hours ago) [yxu-lumentum] * 463fe890 - [console] add config console escape (sonic-net#4266) (2 days ago) [Xichen96] ``` #### How I did it #### How to verify it #### Description for the changelog
…omatically (sonic-net#26257) #### Why I did it src/sonic-mgmt-common ``` * 3bcc002 - (HEAD -> master, origin/master, origin/HEAD) Add openconfig system annotation for authz (sonic-net#206) (33 hours ago) [niranjanivivek] ``` #### How I did it #### How to verify it #### Description for the changelog
…tically (sonic-net#26290) #### Why I did it src/sonic-sairedis ``` * 9a87a71c - (HEAD -> master, origin/master, origin/HEAD) create default hash profile for ecmp and lag (sonic-net#1793) (6 hours ago) [yue-fred-gao] * 7d78093e - Support ARP passthrough (sonic-net#1792) (8 hours ago) [yue-fred-gao] * 5772733c - vpp: enable bulk operations (sonic-net#1794) (13 hours ago) [yue-fred-gao] * 755b853c - [nokia-c1] Add a new virtual switch type (sonic-net#1779) (21 hours ago) [henry huang] ``` #### How I did it #### How to verify it #### Description for the changelog
…ically (sonic-net#26286) #### Why I did it src/sonic-dash-ha ``` * 90c10b6 - (HEAD -> master, origin/master, origin/HEAD) Fix endianess mismatch. (sonic-net#149) (10 hours ago) [dypet] ``` #### How I did it #### How to verify it #### Description for the changelog
…tomatically (sonic-net#26288) #### Why I did it src/sonic-linux-kernel ``` * c125a95 - (HEAD -> master, origin/master, origin/HEAD) Disable SPD instantiation in I2C SMBUS driver (sonic-net#542) (11 hours ago) [Aravind Mani] ``` #### How I did it #### How to verify it #### Description for the changelog
…tomatically (sonic-net#26288) #### Why I did it src/sonic-linux-kernel ``` * c125a95 - (HEAD -> master, origin/master, origin/HEAD) Disable SPD instantiation in I2C SMBUS driver (sonic-net#542) (11 hours ago) [Aravind Mani] ``` #### How I did it #### How to verify it #### Description for the changelog
What is the motivation for this PR? When running pygnmi GET requests with xpaths where the keyname contains "-", pygnmi returns errors (xpath parse error and syntax warnings). This blocks openconfig sonic-mgmt tests. How did you do it? Ported the gnxi upstream patch (google/gnxi#240) to sonic-buildimage and fixed the python syntax issues in py_gnmicli.py. How did you verify/test it? Tested patch application, ran pygnmi with key-name containing "-", and ran sonic-mgmt gnmi tests. Signed-off-by: Verma-Anukul <anukulverma2013@gmail.com>
…c-net#25557) What is the motivation for this PR? Address flakiness when dhcp_dos_logger runs tc commands during config reload while ports are being removed/reinitialized. It should wait for PortInitDone before executing tc commands. How did you do it? Introduced a wait function in dhcp_dos_logger.py to wait for PortInitDone notification before running tc commands. How did you verify/test it? Repeated config reloads; confirmed no TC command errors. Verified wait behavior when PortInitDone is pending (~40s) and when already done (~0.1s). Restarted dhcp_dos_logger and checked logs. Signed-off-by: Prajjwal Singh <prajjwal@arista.com>
What is the motivation for this PR? Address rsyslogd memory growth in syncd/swss containers caused by imuxsock ratelimiter growth from frequent short-lived sender PIDs (e.g., phc_ctl and logger). How did you do it? - Make phc_ctl successful runs quiet (phc_ctl -q -Q ... >/dev/null) to reduce log churn. - Use logger --id=$$ in syncd_common.sh and swss.sh so log messages share a stable PID. How did you verify/test it? Monitored imuxsock.ratelimit.numratelimiters; expected it to stop continuous growth (or reduce drastically). Signed-off-by: Hemanth Kumar Tirupati <tirupatihemanthkumar@gmail.com>
…ic-net#25698) What is the motivation for this PR? Enable lossy headroom usage for ingress PG XOFF statistics on SN5640 SKUs by setting the appropriate SAI key. How did you do it? Updated sai.profile for Mellanox-SN5640-C448O16 and Mellanox-SN5640-C512S2 to add SAI_KEY_INGRESS_PG_XOFF_STAT_LOSSY_HR_ENABLED=1. How did you verify/test it? Run traffic tests and ensure PG headroom is used for lossy. Signed-off-by: Sudharsan Dhamal Gopalarathnam <sudharsand@nvidia.com>
…-net#26267) Why I did it In order to use kubelet/kubectl, we update systemctl service user from admin into root, but there's some systemctl generator which will ingest data into systemctl service unit file, that will result in endless overwrite from sidecar container. Work item tracking Microsoft ADO (number only): How I did it Switch back to admin user for systemctl unit file, and use docker command instead of kubelet for systemctl service restart
What is the motivation for this PR? Replace gnxi gnmi_cli with gNMIc to reduce maintenance burden, avoid proto version issues, and improve gNMI test tooling. How did you do it? Added gNMIc Debian package to docker-ptf image and dynamically select arch similarly to gNOIc. How did you verify/test it? Built docker-ptf and verified gnmic is present via `gnmic version` inside the container. Signed-off-by: Ronan Mac Fhlannchadha <ronan@nexthop.ai>
What is the motivation for this PR? psutil occasionally throws errors when reading process names; retrying fixes the intermittent failure. How did you do it? Added a retry around the dhcprelayd process name check. How did you verify/test it? Applied on a production machine and confirmed the issue was fixed. Signed-off-by: Xichen Lin <lukelin0907@gmail.com>
… automatically (sonic-net#26303) #### Why I did it src/sonic-platform-common ``` * 2fbd4f8 - (HEAD -> master, origin/master, origin/HEAD) Fix UnicodeDecodeError in xcvr API for corrupted EEPROM (sonic-net#633) (24 hours ago) [arpit-nexthop] ``` #### How I did it #### How to verify it #### Description for the changelog
…atically (sonic-net#26306) #### Why I did it src/sonic-utilities ``` * fb3d73db - (HEAD -> master, origin/master, origin/HEAD) Fix migrate_sonic_packages() crash on symlink resolv.conf (sonic-net#4365) (6 hours ago) [william8545] ``` #### How I did it #### How to verify it #### Description for the changelog
…lly (sonic-net#26304) #### Why I did it src/sonic-swss ``` * d0afdb66 - (HEAD -> master, origin/master, origin/HEAD) orchagent: Add missing end() check in VNetRouteOrch custom monitor lookup (sonic-net#4347) (3 hours ago) [Uma Ramanathan] * 53bf005f - Extract serdes programming logic into dedicated function (sonic-net#4285) (5 hours ago) [Brian Gallagher] ``` #### How I did it #### How to verify it #### Description for the changelog
User 'from' instead of 'form' Signed-off-by: Chris Packham <chris.packham@alliedtelesis.co.nz>
Signed-off-by: Peter <peterbailey@arista.com>
Signed-off-by: Nathan Wolfe <nwolfe@arista.com>
…25651) Include arista-firmware in the image if it exists Signed-off-by: Peter <peterbailey@arista.com>
…#26245) Signed-off-by: saksarav <sakthivadivu.saravanaraj@nokia.com>
…lly (sonic-net#26312) #### Why I did it src/sonic-gnmi ``` * 86c3c5b - (HEAD -> master, origin/master, origin/HEAD) Remove abandoned sonic-gnmi-standalone directory (sonic-net#627) (24 hours ago) [sigabrtv1] ``` #### How I did it #### How to verify it #### Description for the changelog
* Add db alias Signed-off-by: Eddie Ruan <eddie.ruan@alibaba-inc.com> * Fix a typo Signed-off-by: Eddie Ruan <eddie.ruan@alibaba-inc.com> * Remove redis-sysmondb alias Signed-off-by: Eddie Ruan <eddie.ruan@alibaba-inc.com> * Take care review comments from Aseem and Selva Signed-off-by: Eddie Ruan <eddie.ruan@alibaba-inc.com> * Update sonic-gnmi submodule to include UDS auth bypass (sonic-net#26155) What is the motivation for this PR When --client_auth cert is configured on the gNMI server, UDS connections fail auth because TLS peer creds are unavailable, blocking local services (e.g., device-ops-agent) from using gNMI/gNOI over UDS. How did you do it Updated sonic-gnmi submodule to include sonic-net/sonic-gnmi#617, adding a UDS detection check in authenticate() to skip cert auth for UDS (secured by socket permissions). How did you verify/test it On a device with --client_auth cert configured: $ sudo grpcurl -plaintext unix:///var/run/gnmi/gnmi.sock gnoi.system.System/Time {time: 1773163799143468772} Without sudo: permission denied at filesystem level. Unique Signed-off-by Signed-off-by: Dawei Huang <daweihuang@microsoft.com> Signed-off-by: Eddie Ruan <eddie.ruan@alibaba-inc.com> * Remove exit based on Aseem's comments Signed-off-by: Eddie Ruan <eddie.ruan@alibaba-inc.com> * Add DCO sign-off for previous commit Signed-off-by: Eddie Ruan <eddie.ruan@alibaba-inc.com> * Reorg codes based on Ashwin's comments Signed-off-by: Eddie Ruan <eddie.ruan@alibaba-inc.com> * Update pythonscript name Signed-off-by: Eddie Ruan <eddie.ruan@alibaba-inc.com> --------- Signed-off-by: Eddie Ruan <eddie.ruan@alibaba-inc.com> Signed-off-by: Dawei Huang <daweihuang@microsoft.com> Co-authored-by: Dawei Huang <daweihuang@microsoft.com>
Why I did it In PR sonic-net/sonic-mgmt#23123, I added INCLUDE_JOBS to allow PR test and baseline test in different scopes. So need corresponding change in baseline yaml Signed-off-by: xiaweijiang <xiaweijiang@microsoft.com>
…onic-net#26284) Signed-off-by: Yijing Yan <yijingyan@microsoft.com>
[master] Upgrade SONiC package Versions
Why I did it Currently there is a golang vulnerability golang.org/x/net (GHSA-qxp5-gwg8-xv66) which flagged since the x/net is 0.33.0 instead of 0.36.0. This could be a transitive module. To address this, we can build grpcurl from source instead. Signed-off-by: Austin Pham <austinpham@microsoft.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
20 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why I did it
Mellanox SAI added the ability to use more than 150KB in drop over MAX.
Update sai.proflie to use 300KB as drop over MAX, and calculated buffers accordingly (reduced 10M from iPool).
How I did it
Added relevant sai.profile key-value to SN5600, SN5640 SKUs.
recalculated buffers to the SKUs.
How to verify it
Check that drop over max can reach up to 300KB, and check calculations in SDK dump.
Which release branch to backport (provide reason below if selected)
Tested branch (Please provide the tested image version)
Description for the changelog
Link to config_db schema for YANG module changes
A picture of a cute animal (not mandatory but encouraged)