Version 14.0 Shooting Stars [Документация VAS Experts]
Документация VAS Experts Документация VAS Experts-mobile
in

Settings

  • Show page
  • Old revisions
  • Backlinks
  • Export to PDF
  • Fold/unfold all
  • ODT export
  • Back to top
  • Show page
  • Old revisions
  • Backlinks
  • Export to PDF
  • Fold/unfold all
  • ODT export
  • Back to top

    • Differences

    This shows you the differences between two versions of the page.

    Link to this comparison view

    Both sides previous revisionPrevious revision
    Next revision    		Previous revision
    en:dpi:changelog:versions:ver_14 [2026/06/11 08:46] – elena.krasnobryzhen:dpi:changelog:versions:ver_14 [2026/06/15 15:24] (current) – [Changes in Version 14.2.1] elena.krasnobryzh
    Line 3: Line 3:
      
     =====Changes in Version 14.2.1===== =====Changes in Version 14.2.1=====
     +
     +<note important>Starting from SSG **14.2.1**, the ''nat_dstaddr_cache_size'' parameter is no longer required and should be removed from ''/etc/dpi/fastdpi.conf''.</note>
     +
     ===DPI=== ===DPI===
       - Improved RFC standards compliance for redirects in Service 16 (HTTP redirect and IP address whitelist with TCP session termination on SSG): the ISN in SYN+ACK is replaced with an unpredictable value, and the session is terminated using the full TCP termination sequence   - Improved RFC standards compliance for redirects in Service 16 (HTTP redirect and IP address whitelist with TCP session termination on SSG): the ISN in SYN+ACK is replaced with an unpredictable value, and the session is terminated using the full TCP termination sequence
    Line 19: Line 22:
       - [DPDK] Increased the maximum memory size to 256 GB.   - [DPDK] Increased the maximum memory size to 256 GB.
       - [DPDK] Note: the distribution package includes the fastdpi_dpdk2411 build based on DPDK 24.11 to support certain older Mellanox models. If this affects your deployment, please plan a network adapter upgrade, as support for these models has likely been discontinued in the current and future DPDK versions.   - [DPDK] Note: the distribution package includes the fastdpi_dpdk2411 build based on DPDK 24.11 to support certain older Mellanox models. If this affects your deployment, please plan a network adapter upgrade, as support for these models has likely been discontinued in the current and future DPDK versions.
    -  - [DPDK] New ''dpdk_engine=7'' engine with support for explicit dispatcher assignment.\\ This engine supports heterogeneous configurations where ports of different types are used within the same cluster—for example, a 100G in-dev port and multiple 10G out-dev ports. [[en:dpi:dpi_components:platform:dpi_config#dpdk_engine_7explicit_dispatcher_assignment|Description]] +  - [DPDK] New ''dpdk_engine=7'' engine with support for explicit dispatcher assignment.\\ This engine supports heterogeneous configurations where ports of different types are used within the same cluster—for example, a 100G in-dev port and multiple 10G out-dev ports. [[en:dpi:dpi_components:platform:dpi_config#dpdk_engine_7explicit_dispatcher_configuration|Description]] 
    -  - [DPDK] Added the new ''dpdk_max_memzone'' [cold] option for configuring the DPDK max memzone count. [[en:dpi:dpi_components:platform:dpi_config#dpdk_engine_7explicit_dispatcher_assignment|Description]]+  - [DPDK] Added the new ''dpdk_max_memzone'' [cold] option for configuring the DPDK max memzone count. [[en:dpi:dpi_components:platform:dpi_config#dpdk_engine_7explicit_dispatcher_configuration|Description]]
       - [BALANCER] Added support for using vlan rule to filter packets. [[en:dpi:dpi_components:platform:vlan_traffic_handling#using_vlan_rule_in_balancer|Description]]   - [BALANCER] Added support for using vlan rule to filter packets. [[en:dpi:dpi_components:platform:vlan_traffic_handling#using_vlan_rule_in_balancer|Description]]
       - [DNS] Fixed an issue with Service 19 processing IPv6 traffic and added the dic2dns utility. [[en:dpi:dpi_options:dns_substitution#configuration|Description]]   - [DNS] Fixed an issue with Service 19 processing IPv6 traffic and added the dic2dns utility. [[en:dpi:dpi_options:dns_substitution#configuration|Description]]
       - Added GRE ERSPAN tunnel parsing support for ''check_tunnels=1'' mode. [[en:dpi:dpi_components:platform:dpi_inst_spec:dpi_tunnels|Description]]   - Added GRE ERSPAN tunnel parsing support for ''check_tunnels=1'' mode. [[en:dpi:dpi_components:platform:dpi_inst_spec:dpi_tunnels|Description]]
       - The "Can't allocate record http_state" message is now printed once every 50,000 occurrences.   - The "Can't allocate record http_state" message is now printed once every 50,000 occurrences.
    -  - Added MARK2 flag verification to override the protocol with QUIC_UNKNOWN_MARKED while the QUIC protocol is still in the SNI detection stage. [[en:dpi:dpi_options:opt_priority:priority_config_as#autonomous_system_priority_list_file_format|Description]]+  - Added MARK2 flag verification to override the protocol with QUIC_UNKNOWN_MARKED while the QUIC protocol is still in the SNI detection stage. [[en:dpi:dpi_options:opt_priority:priority_config_as#file_format_of_autonomous_systems_list_and_their_priorities|Description]]
       - Added validated FakeTLS protocol detection.   - Added validated FakeTLS protocol detection.
       - Fixed switching from QUIC_UNKNOWN to QUIC after successful SNI parsing.   - Fixed switching from QUIC_UNKNOWN to QUIC after successful SNI parsing.
    Line 67: Line 70:
     ===BRAS=== ===BRAS===
       - [DHCP-Dual] Added support for ''Lease-Time'' handling. [[en:dpi:bras_bng:bras_l2_vlan:bras_l2_vlan_dhcp:dual_dhcp#session-timeout_and_lease-time|Description]]   - [DHCP-Dual] Added support for ''Lease-Time'' handling. [[en:dpi:bras_bng:bras_l2_vlan:bras_l2_vlan_dhcp:dual_dhcp#session-timeout_and_lease-time|Description]]
    -  - [Router] Changed how the Linux route table is read during router startup. [[en:dpi:dpi_components:router#router_internal_architecture|Description]]+  - [Router] Changed how the Linux route table is read during router startup. [[en:dpi:dpi_components:router#the_internal_router_architecture|Description]]
       - [DHCP6-Proxy] Added DHCPv6 Option 79 (Client-LinkLayer-Address), containing the subscriber's MAC address, to Relay-Forward requests sent to the Framed-Pool DHCPv6 server.   - [DHCP6-Proxy] Added DHCPv6 Option 79 (Client-LinkLayer-Address), containing the subscriber's MAC address, to Relay-Forward requests sent to the Framed-Pool DHCPv6 server.
       - [DHCP-Dual] Fixed incorrect generation of IPv6 PD prefixes for addresses from Framed-IPv6-Pool.   - [DHCP-Dual] Fixed incorrect generation of IPv6 PD prefixes for addresses from Framed-IPv6-Pool.
    Line 74: Line 77:
       - [DHCP-Dual] Fixed tracing of DHCPv6 responses when the subscriber's MAC address is being traced.   - [DHCP-Dual] Fixed tracing of DHCPv6 responses when the subscriber's MAC address is being traced.
       - [DHCP-Dual] Fixed IPv4 address announcement for subscribers.   - [DHCP-Dual] Fixed IPv4 address announcement for subscribers.
    -  - [VLAN-Rule][PPPoE] Added full Service-Name support for QinQ. [[en:dpi:dpi_components:platform:vlan_traffic_handling#vlan_qinq_range_syntax|Description]]+  - [VLAN-Rule][PPPoE] Added full Service-Name support for QinQ. [[en:dpi:dpi_components:platform:vlan_traffic_handling#syntax_for_vlan_qinq_range_description|Description]]
       - [DHCPv6] Fixed periodic ICMPv6 Router Advertisement transmission for DHCPv6 subscribers.   - [DHCPv6] Fixed periodic ICMPv6 Router Advertisement transmission for DHCPv6 subscribers.
       - [PPPoE] Fixed src/dst MAC address modification in the Ethernet header during termination. Ethernet header termination must always be performed for PPPoE packets. However, when ''bras_term_by_as=1'' was enabled and srcAS was not marked as term, the Ethernet src/dst MAC addresses were not modified.   - [PPPoE] Fixed src/dst MAC address modification in the Ethernet header during termination. Ethernet header termination must always be performed for PPPoE packets. However, when ''bras_term_by_as=1'' was enabled and srcAS was not marked as term, the Ethernet src/dst MAC addresses were not modified.
    Line 93: Line 96:
     ===CLI=== ===CLI===
       - [LLDP] New CLI commands: ''fdpi_cli lldp enable'' and ''fdpi_cli lldp disable'' — enable or disable LLDP packet generation. [[en:dpi:dpi_components:platform:dpi_inst_spec:lldp_support|Description]]   - [LLDP] New CLI commands: ''fdpi_cli lldp enable'' and ''fdpi_cli lldp disable'' — enable or disable LLDP packet generation. [[en:dpi:dpi_components:platform:dpi_inst_spec:lldp_support|Description]]
    -  - [PCAP] Added a command to capture pcap traffic from a port: +  - [PCAP] Added a command to capture pcap traffic from a port:<code>dev pcap <dev-name> rx|tx|any|off</code>
    -<code> +
    -dev pcap <dev-name> rx|tx|any|off +
    -</code>+
         * ''rx'' — capture packets received on the port     * ''rx'' — capture packets received on the port
         * ''tx'' — capture packets transmitted through the port     * ''tx'' — capture packets transmitted through the port
    Line 116: Line 116:
       - Fixed an issue with setting the default data export timeout.   - Fixed an issue with setting the default data export timeout.
       - Fixed an issue when changing the ''ipfix_dev'' option.   - Fixed an issue when changing the ''ipfix_dev'' option.
    -  - [DNS] Added the ''ajb_save_dns_answer_types'' and ''ajb_save_dns_request_types'' parameters, which allow specifying DNS response and request types to save to a file and export via IPFIX. [[en:dpi:dpi_options:opt_li:li_ipfix#configuring_dns_response_or_dns_request_export|Description]]+  - [DNS] Added the ''ajb_save_dns_answer_types'' and ''ajb_save_dns_request_types'' parameters, which allow specifying DNS response and request types to save to a file and export via IPFIX. [[en:dpi:dpi_options:opt_li:li_ipfix#configuring_the_export_of_dns_responses_or_dns_queries|Description]]
      
     ===Utilities=== ===Utilities===