Version 11.0 Foundation [Документация VAS Experts]

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

en:dpi:changelog:versions:ver_11 [2025/12/26 12:06] – created elena.krasnobryzhen:dpi:changelog:versions:ver_11 [2025/12/26 13:04] (current) elena.krasnobryzh
Line 2: Line 2:
 {{indexmenu_n>88}} {{indexmenu_n>88}}
  
- 
-==== Changes in version 11.0 Foundation ==== 
 11.0 Foundation ((Stabilization of the foundation for further development: mobile networks, analytics, DDOS protection, LI, AI)) 11.0 Foundation ((Stabilization of the foundation for further development: mobile networks, analytics, DDOS protection, LI, AI))
 +
 +===== Changes in version 11.0 Foundation =====
  
   - Added support for user defined signatures based on SNI, IP[:PORT] or SUBNET   - Added support for user defined signatures based on SNI, IP[:PORT] or SUBNET
Line 36: Line 36:
   - Added: parameters sds_ajb_num - number of queues sds_ajb ( default 1 ) sds_ajb_bind_cores - sets the cores to which threads should be bound. If not set, cores are assigned automatically. Example sds_ajb_bind_cores=1:1:2:2   - Added: parameters sds_ajb_num - number of queues sds_ajb ( default 1 ) sds_ajb_bind_cores - sets the cores to which threads should be bound. If not set, cores are assigned automatically. Example sds_ajb_bind_cores=1:1:2:2
  
-==== Changes in version 11.1 Foundation ====+===== Changes in version 11.1 Foundation =====
  
   - [fastpcrf] Fixed: pass opt82 to accounting with L3 auth   - [fastpcrf] Fixed: pass opt82 to accounting with L3 auth
Line 46: Line 46:
   - [DPI] Fixed reload error when setting lag   - [DPI] Fixed reload error when setting lag
  
-==== Changes in version 11.2 Foundation ====+===== Changes in version 11.2 Foundation =====
  
   - [DPI] Support for SNI decoding in QUIC IETF protocol (HTTP/3)   - [DPI] Support for SNI decoding in QUIC IETF protocol (HTTP/3)
Line 60: Line 60:
   - [fastpcrf] Fixed: Error processing L3 auth over IPv6   - [fastpcrf] Fixed: Error processing L3 auth over IPv6
  
-==== Changes in version 11.3 Foundation ====+===== Changes in version 11.3 Foundation =====
  
   - CGNAT significantly redesigned: clients with the same public IP address will reuse each other's sessions more actively   - CGNAT significantly redesigned: clients with the same public IP address will reuse each other's sessions more actively
Line 79: Line 79:
   - [dhcp6] Fixed: sending acct even if service 9 is disabled   - [dhcp6] Fixed: sending acct even if service 9 is disabled
  
-==== Changes in version 11.4 Foundation ====+===== Changes in version 11.4 Foundation =====
   - Added service 15 (Special Subscriber): when the service is activated, the subscriber's traffic is prioritized by the special_dscp parameter (0 by default)   - Added service 15 (Special Subscriber): when the service is activated, the subscriber's traffic is prioritized by the special_dscp parameter (0 by default)
   - Added nat_gcache_slice_k100 parameter which defines how many ports are allocated per slice (125 by default)   - Added nat_gcache_slice_k100 parameter which defines how many ports are allocated per slice (125 by default)
Line 95: Line 95:
   - Fixed size of batch buffer for DPDK 21.11 with mellanox driver   - Fixed size of batch buffer for DPDK 21.11 with mellanox driver
  
-==== Changes in version 11.4.1 Foundation ====+===== Changes in version 11.4.1 Foundation =====
   - Fixed TAP interfaces support   - Fixed TAP interfaces support
   - [BRAS][pppoe] Added new conf parameter bras_ppp_padi_recreate_timeout. Time interval (seconds) during which repeated session creation requests (PADI) coming from a subscriber do not lead to creation of a new session (the previously created session object is used). This parameter is designed to protect against a storm of PADI requests from a subscriber and recreating session objects. Some routers send multiple PADI when creating a session, without waiting for a response from BRAS. Default: 5. Value 0 is no control   - [BRAS][pppoe] Added new conf parameter bras_ppp_padi_recreate_timeout. Time interval (seconds) during which repeated session creation requests (PADI) coming from a subscriber do not lead to creation of a new session (the previously created session object is used). This parameter is designed to protect against a storm of PADI requests from a subscriber and recreating session objects. Some routers send multiple PADI when creating a session, without waiting for a response from BRAS. Default: 5. Value 0 is no control
Line 103: Line 103:
   - [PCRF] Radius attribute dictionary updated   - [PCRF] Radius attribute dictionary updated
  
-==== Changes in version 11.4.2 Foundation ====+===== Changes in version 11.4.2 Foundation =====
   - changed: when connecting service 15, channel blacklist (or default) filtering is disabled   - changed: when connecting service 15, channel blacklist (or default) filtering is disabled
   - changed: tbf rate 8bit optimized to drop   - changed: tbf rate 8bit optimized to drop
Line 113: Line 113:
  
  
-===== Upgrade Instructions ===== 
-You can check the currently installed version with the command 
-<code> 
-yum info fastdpi 
-</code> 
- 
-  
-Rollback at 11.2: 
- 
-<code> 
-yum downgrade fastdpi-11.2 fastpcrf-11.2 fastradius-11.1 
-</code> 
- 
-After updating or changing the version, restart of the service is required: 
- 
-<code> 
-service fastdpi restart 
-</code> 
- 
-:!: If PCRF and/or Radius are used, they also need to be restarted, the following order is preferable for restarting pcrf: 
-<code> 
-service fastdpi stop 
-setvice fastpcrf restart 
-service fastdpi start 
-</code> 
- 
- 
-:!: Do not update the Linux kernel. In new versions of the kernel, binary compatibility with the Kernel ABI may be broken and the network driver will not load after the update. If you did upgrade, then while solving the problem, configure the grub bootloader to load the previous version of the kernel (in the /etc/grub.conf file, set the default=1 parameter). 
- 
-If you receive a message during the update that the update was not found or there are problems with dependencies, then before updating, run the command 
-<code> 
-yum clean all 
-</code>