Changelog of SSG BETA-version [Документация VAS Experts]

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
en:dpi:dpi_components:platform:dpi_admin:testversion_install [2025/06/03 13:59] elena.krasnobryzhen:dpi:dpi_components:platform:dpi_admin:testversion_install [2025/08/18 07:13] (current) – [Changes in version 14.0 BETA4.4] elena.krasnobryzh
Line 44: Line 44:
   - [SNMP] Created a module for monitoring system components via SNMP   - [SNMP] Created a module for monitoring system components via SNMP
  
 +====Changes in version 14.0 BETA4====
 +  - [DPI] Added DOQ 49318 protocol (DNS-over-QUIC)
 +  - [Router] Announcing subscriber white addresses for 1:1 NAT individually and after authentication
 +  - [PCRF] Added support for service 19 "DNS spoofing", profile required.
 +  - [DPDK] Added ''dpdk_engine=6'' (''mqrx-bridge'') — number of RSS dispatchers per bridge. Total number of dispatchers = ''dpdk_rss * number of bridges''. NIC configuration: RX queue count = ''dpdk_rss'', TX queue count = number of worker threads (''num_threads''). Intended for setups with many bridges (dev1:dev2:dev3:...) for 100G+ NICs, as a replacement for the cluster approach. On-stick devices are supported.
 +  - [DPDK] Removed dedicated mempools. The fastdpi.conf option ''dpdk_emit_mempool_size'' is deprecated and no longer used.
 +  - [VLAN-Rule] Moved vlan group data from UDR to SDR. Global rules for vlan drop/pass/hide/permit set by the previous CLI command ''vlan group'' were converted and moved from UDR to SDR, with removal from UDR.
 +  - [VLAN] VLAN rules — added CLI commands:
 +    - ''vlan rule add'' - add new rule to SDR
 +    - ''vlan rule modify'' - modify existing rule in SDR
 +    - ''vlan rule delete'' - delete rule from SDR
 +    - ''vlan rule show'' - show all rules for the specified VLAN/QinQ
 +    - ''vlan rule dump'' - dump all rules in SDR
 +    - ''vlan rule purge vlan''/''qinq''/''all'' - clear SDR for VLAN/QinQ or both
 +    - ''vlan rule apply'' - apply rules; by default, rules are applied 5 minutes after the last SDR modification
 +  - [IPv6] Added direction detection in combined traffic (IN+OUT on one port) based on the local flag for IP addresses. Enabled via ''combined_io_direction_mode'' option
  
 +====Changes in version 14.0 BETA4.1====
 +  - [BRAS] Fixed compatibility with the old format of service 18, where there were fewer protocols and both fields in the profile needed to be filled
 +  - [DPI] Lowered detection priority for ''telegram_tls''
 +
 +====Changes in version 14.0 BETA4.2====
 +  - [DPI] Improved detection of ''WECHAT'' and ''WECHAT_CALL''
 +  - [BRAS][Framed-Route] Fixed: possible crash when freeing memory
 +  - [BRAS] Refactored PCRF connectivity: in the new implementation, all connections are equal; an error on any triggers reconnection of all connections and a switch to another PCRF. Added CLI commands:
 +    - ''pcrf connect show'' — show current status and accumulated statistics for PCRF connections.
 +    - Force connection to the specified PCRF ''pcrf connect switch [<pcrf_index>]'', where ''<pcrf_indxed>'' is the index of the connection line in the ''auth_server'' parameter. If ''<pcrf_indxed>'' is not specified — defaults to 0.
 +  - [IPFIX DNS] Added the ability to send DNS MX responses via IPFIX. Enabled by setting bit 3 (4) of the ''ajb_save_dns'' parameter
 +
 +====Changes in version 14.0 BETA4.3====
 +  - [DPI] Added FakeTLS protocol (49319) with validation
 +  - [BRAS][DHCP] Changed: sliding window algorithm for rate limit
 +  - [BRAS] Fixed: time comparison error when loading ip_prop from UDR
 +  - [VLAN-Rule] Added support for 'any' instead of '*' when describing VLAN range <code>
 +'*.*' is interpreted in bash command line as a file search mask, so now instead of '*', you can specify 'any' ('*' is still supported):
 +'any.any' - equivalent to '*.*'
 +'any' - equivalent to '*'
 +'68.any' - equivalent to '68.any'
 +'any.78-90' - equivalent to '*.78-90' </code>
 +  - [BRAS] Removed support for DHCP-Dual (moved to next release)
 +  - [DPI][LOG] Messages about insufficient SSL parsers are written to the slave log not for every event, but at a frequency of 1/50000.
 +
 +====Changes in version 14.0 BETA4.4====
 +  - [DPI] Added protocols ZALO_CALL(49320) and VK_CALL(49321)
 +  - [DPI] Fixed blocking in hard mode for SSL
 +  - [Acct] Added attribute ''VASExperts-Service-Type''. Radius acct start/interim/stop sends the authorization type in the ''VASExperts-Service-Type'' attribute.
 +  - [CLI] Added: ''stat flow ip6'' command to display IPv6 flow statistics
 +  - [CLI] Added: ''stat flow ip4'' command to display IPv4 flow statistics. Analogous to the output in ''fastdpi_stat.log''.
 +  - [IPFIX] Fixed ExportTime formation error in IPFIX Fullflow
 +  - [CLI] Added ''stat netflow'' command. Displays general statistics for Netflow/IPFIX (same as in ''fastdpi_stat.log'' under the "Statistics on NFLW_export" section)
 +  - [DNS] Added support for substitution/blocking/dropping of DNS requests A, AAAA, MX, HTTPS
 +  - [CLI] Added ''stat firewall'' command
 +
 +====Changes in Version 14.0 BETA4.5====
 +  - [DPI] Added BIGO_CDN protocol (49324)
 +  - [DPI] Added UDP support for BIGOTV
 +  - [PCRF][L2TP] Fixed: NAS attributes for L2TP during authorization
 +  - [BRAS][L2TP] Fixed: data race when closing sessions
 +  - [DPDK] Removed deprecated rx channels settings and related checks
 ====Update instructions==== ====Update instructions====
 You can check the current installed version with the command below You can check the current installed version with the command below