SSG changelog and update [Документация VAS Experts]
Документация VAS Experts Документация VAS Experts-mobile
in

Settings

  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • Backlinks
  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • Backlinks

    • Differences

    This shows you the differences between two versions of the page.

    Link to this comparison view

    Both sides previous revisionPrevious revision
    Next revision    		Previous revision
    en:dpi:update [2025/10/01 11:40] – elena.krasnobryzhen:dpi:update [2025/10/22 10:34] (current) – elena.krasnobryzh
    Line 103: Line 103:
         hal mempool stat</code>DPDK must be built with statistics collection enabled to display mempool stats     hal mempool stat</code>DPDK must be built with statistics collection enabled to display mempool stats
       - [BRAS][DHCP] Fixed crash when parsing Framed-Pool Renew response if it contains no DHCP options   - [BRAS][DHCP] Fixed crash when parsing Framed-Pool Renew response if it contains no DHCP options
    -  - [PCRF][Acct] Fixed: Interim-Update sending is now disabled when ''Acct-Interim-Interval = 0'' is explicitly set in the RADIUS response. For more details, see sections  [[en:dpi:bras_bng:radius_integration:radius_auth_server_integration:radius_auth_response#acct-interim-interval|Subscriber authorization attributes]], [[en:dpi:bras_bng:bras_pppoe:bras_pppoe_radius:bras_pppoe_radius_acc]], [[en:dpi:bras_bng:bras_pppoe:bras_pppoe_radius:bras_pppoe_radius_rej]]+  - [PCRF][Acct] Fixed: Interim-Update sending is now disabled when ''Acct-Interim-Interval = 0'' is explicitly set in the RADIUS response. For more details, see sections  [[en:dpi:bras_bng:radius_integration:radius_auth_server_integration:radius_auth_response#acct-interim-interval|]], [[en:dpi:bras_bng:bras_pppoe:pppoe_pppol2tp_parameters:bras_pppoe_radius]]
       - [VASE_CLI] Created a unified CLI for managing DPI, BRAS, DHCP (KEA), ROUTER (BIRD) with support for authorization and command logging via TACACS (VEOS 8.x required). [[en:dpi:dpi_components:utilities:vase_cli|Description]]   - [VASE_CLI] Created a unified CLI for managing DPI, BRAS, DHCP (KEA), ROUTER (BIRD) with support for authorization and command logging via TACACS (VEOS 8.x required). [[en:dpi:dpi_components:utilities:vase_cli|Description]]
       - [SNMP] Created a module for monitoring system components via SNMP   - [SNMP] Created a module for monitoring system components via SNMP
    Line 113: Line 113:
       - [VLAN-Rule] Moved vlan group data from UDR to SDR. Global rules for vlan drop/pass/hide/permit set by the previous CLI command ''vlan group'' were converted and moved from UDR to SDR, with removal from UDR. [[en:dpi:dpi_components:platform:vlan_traffic_handling|Description]]   - [VLAN-Rule] Moved vlan group data from UDR to SDR. Global rules for vlan drop/pass/hide/permit set by the previous CLI command ''vlan group'' were converted and moved from UDR to SDR, with removal from UDR. [[en:dpi:dpi_components:platform:vlan_traffic_handling|Description]]
       - Up to version 14, only one built-in database UDR (User Data Repository) is used, intended for permanent storage of data about services, policings, and other FastDPI settings.\\ Starting from Version 14, UDR is split into UDR and SDR. The split occurs automatically during version update.\\ SDR (System Data Repository) is intended for storing FastDPI settings not related to subscribers. It can be considered that SDR is an extension of fastdpi.conf. No special activation of SDR is required — the necessary .mdb files are created automatically when the corresponding mode is enabled in fastdpi.conf.   - Up to version 14, only one built-in database UDR (User Data Repository) is used, intended for permanent storage of data about services, policings, and other FastDPI settings.\\ Starting from Version 14, UDR is split into UDR and SDR. The split occurs automatically during version update.\\ SDR (System Data Repository) is intended for storing FastDPI settings not related to subscribers. It can be considered that SDR is an extension of fastdpi.conf. No special activation of SDR is required — the necessary .mdb files are created automatically when the corresponding mode is enabled in fastdpi.conf.
    -  - [VLAN] VLAN rules — added CLI commands: +  - [VLAN] VLAN rules — added CLI commands. [[en:dpi:dpi_components:platform:vlan_traffic_handling#vlan_rule|Description]]
    -    - ''vlan rule add'' - add new rule to SDR +
    -    - ''vlan rule modify'' - modify existing rule in SDR +
    -    - ''vlan rule delete'' - delete rule from SDR +
    -    - ''vlan rule show'' - show all rules for the specified VLAN/QinQ +
    -    - ''vlan rule dump'' - dump all rules in SDR +
    -    - ''vlan rule purge vlan''/''qinq''/''all'' - clear SDR for VLAN/QinQ or both +
    -    - ''vlan rule apply'' - apply rules; by default, rules are applied 5 minutes after the last SDR modification+
       - [IPv6] Added direction detection in combined traffic (IN+OUT on one port) based on the local flag for IP addresses. Enabled via ''combined_io_direction_mode'' option   - [IPv6] Added direction detection in combined traffic (IN+OUT on one port) based on the local flag for IP addresses. Enabled via ''combined_io_direction_mode'' option
       - [BRAS] Fixed compatibility with the old format of service 18, where there were fewer protocols and both fields in the profile needed to be filled   - [BRAS] Fixed compatibility with the old format of service 18, where there were fewer protocols and both fields in the profile needed to be filled
    Line 133: Line 126:
       - [BRAS][DHCP] Changed: sliding window algorithm for rate limit   - [BRAS][DHCP] Changed: sliding window algorithm for rate limit
       - [BRAS] Fixed: time comparison error when loading ip_prop from UDR   - [BRAS] Fixed: time comparison error when loading ip_prop from UDR
    -  - [VLAN-Rule] Added support for 'any' instead of '*' when describing VLAN range <code> +  - [VLAN-Rule] Added support for 'any' instead of '*' when describing VLAN range. [[en:dpi:dpi_components:platform:vlan_traffic_handling#vlan_rule|Description]]
    -'*.*' is interpreted in bash command line as a file search mask, so now instead of '*', you can specify 'any' ('*' is still supported): +
    -'any.any' - equivalent to '*.*' +
    -'any' - equivalent to '*' +
    -'68.any' - equivalent to '68.any' +
    -'any.78-90' - equivalent to '*.78-90' </code>+
       - [DPI][LOG] Messages about insufficient SSL parsers are written to the slave log not for every event, but at a frequency of 1/50000.   - [DPI][LOG] Messages about insufficient SSL parsers are written to the slave log not for every event, but at a frequency of 1/50000.
       - [DPI] Added protocols ZALO_CALL(49320) and VK_CALL(49321)   - [DPI] Added protocols ZALO_CALL(49320) and VK_CALL(49321)
       - [DPI] Fixed blocking in hard mode for SSL   - [DPI] Fixed blocking in hard mode for SSL
       - [Acct] Added attribute ''VASExperts-Service-Type''. Radius acct start/interim/stop sends the authorization type in the ''VASExperts-Service-Type'' attribute. [[en:dpi:bras_bng:radius_integration:radius_accounting:radius_attr|Description]]   - [Acct] Added attribute ''VASExperts-Service-Type''. Radius acct start/interim/stop sends the authorization type in the ''VASExperts-Service-Type'' attribute. [[en:dpi:bras_bng:radius_integration:radius_accounting:radius_attr|Description]]
    -  - [CLI] Added: ''stat flow ip6'' command to display IPv6 flow statistics +  - [CLI] Added: ''stat flow ip6'' command to display IPv6 flow statistics. [[en:dpi:bras_bng:cli:stat|Description]] 
    -  - [CLI] Added: ''stat flow ip4'' command to display IPv4 flow statistics. Analogous to the output in ''fastdpi_stat.log''.+  - [CLI] Added: ''stat flow ip4'' command to display IPv4 flow statistics. Analogous to the output in ''fastdpi_stat.log''. [[en:dpi:bras_bng:cli:stat|Description]]
       - [IPFIX] Fixed ExportTime formation error in IPFIX Fullflow   - [IPFIX] Fixed ExportTime formation error in IPFIX Fullflow
    -  - [CLI] Added ''stat netflow'' command. Displays general statistics for Netflow/IPFIX (same as in ''fastdpi_stat.log'' under the "Statistics on NFLW_export" section)+  - [CLI] Added ''stat netflow'' command. Displays general statistics for Netflow/IPFIX (same as in ''fastdpi_stat.log'' under the "Statistics on NFLW_export" section). [[en:dpi:bras_bng:cli:stat|Description]]
       - [DNS] Added support for substitution/blocking/dropping of DNS requests A, AAAA, MX, HTTPS. [[en:dpi:dpi_options:dns_substitution|Description]]   - [DNS] Added support for substitution/blocking/dropping of DNS requests A, AAAA, MX, HTTPS. [[en:dpi:dpi_options:dns_substitution|Description]]
    -  - [CLI] Added ''stat firewall'' command+  - [CLI] Added ''stat firewall'' command. [[en:dpi:bras_bng:cli:stat|Description]]
       - [DPI] Added BIGO_CDN protocol (49324)   - [DPI] Added BIGO_CDN protocol (49324)
       - [DPI] Added UDP support for BIGOTV   - [DPI] Added UDP support for BIGOTV
    Line 155: Line 143:
       - [DPDK] Removed deprecated rx channels settings and related checks   - [DPDK] Removed deprecated rx channels settings and related checks
       - [IPFIX] Added configurable sending of drop octets/packets counters when generating IPFIX fullflow. [[en:dpi:dpi_options:opt_statistics:statistics_ipfix|Description]]   - [IPFIX] Added configurable sending of drop octets/packets counters when generating IPFIX fullflow. [[en:dpi:dpi_options:opt_statistics:statistics_ipfix|Description]]
    -  - [PCAP] Added capability to save traffic of a specified vlan using the ''ajb_save_vlan'' parameter. [[en:dpi:dpi_options:opt_li:li_ctrl|Description]]+  - [PCAP] Added capability to save traffic of a specified vlan using the ''ajb_save_vlan'' parameter. [[en:dpi:dpi_options:opt_li:li_settings#pcap_by_vlan|Description]]
       - [DPIUTILS] Updated checknat utility. [[en:dpi:dpi_components:utilities:management_utilities#checknat|Description]]   - [DPIUTILS] Updated checknat utility. [[en:dpi:dpi_components:utilities:management_utilities#checknat|Description]]
       - [DPIUTILS] Updated dns2dic utility with domain blocking support. [[en:dpi:dpi_options:dns_substitution|Description]]   - [DPIUTILS] Updated dns2dic utility with domain blocking support. [[en:dpi:dpi_options:dns_substitution|Description]]