Table of Contents
Beta Version 14.3
Changes in Version 14.3 BETA2
- [LAG] Fixed: when a flow is created and the rx device belongs to a LAG, this port is now stored in
lag_cacheas "selected" so that the reply packet is sent to this exact port - [DPI Utils] Unified AGID notation in the service 18 and 20 profile converters: the accounting group is written the same way in the text profiles of both services; only the prefixes differ (
rg:in service 18 markup,rgin the service 20 profile), and any of the characters| . - /can be used as the separator between the two parts. Description - [BNG/Mobile] The DPI ↔ PCEF interface has been aligned with BCP v2.2
- [Service-18] Added: separate default records for tethering ON and OFF
When describing the file that maps protocols to traffic classes and rating groups, different rating groups and classes can be specified for tethering On and Off. Description - [CFG] The
tethering_ttl_allowedoption: parsing and application - [BNG][CLI] Added: support for the
ipv4andipv6parameters in thesubs traffic statcommand. Description - [BNG][Mobile] Fixed: a final report is now sent when service 20 is disabled in UpdateL3Session
- [BNG][SHCV] Fixed: SHCV status reset on authorization. A subscriber's SHCV status is reset when an ARP reply is received for the subscriber's IP address. If no one sends an ARP request to one of the addresses, the SHCV state is not reset. This fix adds a forced SHCV state reset on L2 subscriber authorization.
- [LLDP] Fixed: crash on a Link Up event when the LLDP agent is disabled. Description
- [BNG][CLI] The
subs traffic statCLI command displays accumulated billing statistics for a subscriber. Description - [LLDP] Added: support for ttl=0 and sending PDUs on Link Up events. Description
- [BNG][DHCP] Added: opt82 change control. Description
- [CLI] Improved the
stat httpCLI command: memory statistics have been added to the command output. Description - [LAG] Fixed: LAG did not work in on-stick mode. Balancing did not take into account that the LAG includes the base on-stick device rather than the two virtual on-stick ends
Changes in Version 14.3 BETA1
- [BNG][MOBILE] Support for PGW and PCEF functions: GTP tunnel termination, Rating Group (RG) assignment, RG policing, RG quota management, tethering management, BCP API
- [DPI] Support for loadable programmable custom signatures based on a DSL description, a WEB form, or C++. Examples are provided for the WireGuard VPN and Zello messenger signatures
- [IPFIX] Added a mechanism for exporting traffic events that are not visible via NETFLOW, since no sessions are created for them.
The list of events will be extended in the future: IP Spoofing filtering, per-subscriber session limits, inbound traffic to the NAT pool. Description - [DPI] Added support for the CONNECT method in the HTTP parser. Description
- [CTL] Fixed: handling of socket overflow when sending a large response to an
fdpi_ctrlcommand - [DPI] Faster restart and shutdown: any loading of lists and dictionaries is interrupted on shutdown
- [PPP] Fixed: session termination on CoA Disconnect. CoA Disconnect used to initiate a dialog for closing the PPP connection, and Accounting Stop could be sent with a long delay in this case. Now CoA Disconnect causes an immediate teardown of the tunnel (for PPPoE, a PADT is sent, which requires no response from the subscriber) and Accounting Stop is sent immediately.
- [BNG][PPP] Fixed: setting the authorization status for addresses from framed-pool
- [Router] TX dev replacement and NUMA node awareness in ECMP. Significant changes in routing algorithms. Description
- [BNG] New
authflag for AS — only authorized subscribers are allowed in this AS. Description - [CLI] Added: commands for creating and deleting service and policing profiles.
Deleting a service profile (synonyms):fdpi_cli profile delete service N name=<profile_name> fdpi_cli del profile service N name=<profile_name>
N is the service number
Deleting a policing profile (synonyms):fdpi_cli profile delete policing name=<profile_name> fdpi_cli del profile policing name=<profile_name>
The
profile create serviceandprofile create policingcommands are equivalent to thefdpi_ctrl load profile --serviceandfdpi_ctrl load profile --policingcommands. A policing profile can only be specified as JSON on the command line. - [CG-NAT] Fixed excessive ERROR-level logging in the
list all status --service 11command - [CG-NAT] Fixed queue desynchronization with the
nat exclude/includecommands and when changing a subscriber's NAT profile - [CLI][ACCT] Traffic class statistics have been added to the
pcrf acct showcommand output for subscriber data. Traffic class data is not displayed in thepcrf acct show allandpcrf acct show activecommands. Description - [LAG] Fixed: multi-cluster mode support
- [Router][CLI] Fixed: crash in
router neighborcommand handlers in case of errors - [TAP] Fixed: operation in read-only mode
- [BNG] Fixed: VLAN → QinQ transformation mode
bras_vlan_terminate=3. VLAN → QinQ replacement now works correctly - [DPI] Support for cloud lists for DNS TUNNELS
- [DPI] Stricter detection mode for certain protocols
The mode is enabled with thedpi_strict_protocols_maskparameter infastdpi.conf. The parameter value is a bit mask:0x1— BITTORRENT TCP ENCRYPTED0x2— TELEGRAM0x4— SHADOWSOCKS VPN
Was this information helpful?