FRRouting官网普通更新(2023-11-28)

情报来源:TSRC

发布时间:2023-11-28

基本信息
  • 发布日期2023-11-28
  • 感知时间2023-11-28
  • 漏洞类型普通更新
  • 风险等级未知
  • 更新版本frr-9.1
  • 情报贡献TSRC
更新标题

普通更新

更新详情

We are pleased to announce FRR release 9.1.<br/><br/>FRR 9.1 brings a long list of enhancements and fixes with 941 commits from 73 developers. Thanks to all contributors.<br/><br/>Debian Packages - https://deb.frrouting.org<br/><br/>RPM Packages - https://rpm.frrouting.org<br/><br/>Snaps - https://snapcraft.io/frr<br/><br/>Docker - [quay.io/frrouting/frr:v9.1](https://quay.io/repository/frrouting/frr/manifest/sha256:f310c2ebb3827fa03b9674ee05e70a7d5eef2123bcc3b475eb2ef14dafcb52b4)<br/><br/>## Release Overview<br/><br/>### OSPFv2 HMAC-SHA Cryptographic Authentication<br/><br/>Specify that HMAC cryptographic authentication must be used on a specific interface using a key chain. <br/><br/>More details are [here](https://docs.frrouting.org/en/latest/ospfd.html#clicmd-ip-ospf-authentication-key-chain-KEYCHAIN).<br/><br/>### BGP MAC-VRF Site-Of-Origin support<br/><br/>In some EVPN deployments, it is useful to associate a logical VTEP’s Layer 2 domain (MAC-VRF) with a Site-of-Origin “site” identifier. This provides a BGP topology-independent means of marking and import-filtering EVPN routes originating from a particular L2 domain. One situation where this is valuable is when deploying EVPN using anycast VTEPs, i.e. Active/Active MLAG, as it can be used to avoid ownership conflicts between the two control planes (EVPN vs MLAG).<br/><br/>More details are [here](https://docs.frrouting.org/en/latest/bgp.html#evpn-mac-vrf-site-of-origin).<br/><br/>### BGP Dynamic capability support<br/><br/>Added support for Graceful-Restart, Long-lived Graceful-Restart, Software-version, and Role BGP capabilities to be adjusted dynamically using BGP dynamic capability.<br/><br/>Dynamic BGP capability allows the dynamic update of capabilities over an established BGP session. This capability would facilitate non-disruptive capability changes by BGP speakers.<br/><br/>[Here](https://datatracker.ietf.org/doc/html/draft-ietf-idr-dynamic-cap-04) is the draft implemented.<br/><br/>### IS-IS SRv6 uSID support (RFC 9352)<br/><br/>The Segment Routing (SR) architecture allows a flexible definition of the end-to-end path by encoding it as a sequence of topological elements called &amp;quot;segments&amp;quot;. It can be implemented over the MPLS or the IPv6 data plane. This feature enables extensions in IS-IS to support Segment Routing over the IPv6 data plane (SRv6) as per RFC 9352.<br/><br/>More details are [here](https://docs.frrouting.org/en/latest/isisd.html#segment-routing-over-ipv6-srv6).<br/><br/>### Next-hop resolution via the default route<br/><br/>Changed the default for a `traditional` profile to be enabled. The `datacenter` profile is left as disabled.<br/><br/>More details are on the links [link](https://docs.frrouting.org/en/latest/zebra.html#clicmd-ip-nht-resolve-via-default), [link](http://docs.frrouting.org/en/latest/zebra.html#clicmd-ipv6-nht-resolve-via-default).<br/><br/>### Add support for VLAN, ECN, DSCP mangling/filtering<br/><br/>PBR maps are a way to specify a set of rules that are applied to packets received on individual interfaces. If a received packet matches a rule, the rule’s next-hop-group or next-hop is used to forward it; any other actions specified in the rule are also applied to the packet.<br/><br/>With this change, we added more commands for PBR maps, like matching src-ip, dst-ip, src-port, dst-port, vlan, dscp, ecn, and more.<br/><br/>More details are [here](https://docs.frrouting.org/en/latest/pbr.html#pbr-maps).<br/><br/>### libyang 2.1.80 related breaking changes<br/><br/>prefix-list matching in route-maps is fundamentally broken with libyang 2.1.111. If you have this version, please downgrade to the most stable version 2.1.80. <br/><br/>More details https://github.com/CESNET/libyang/issues/2090<br/><br/>### Other significant changes<br/><br/>- Zebra support for route replace semantics in FPM [link](https://docs.frrouting.org/en/latest/zebra.html#clicmd-fpm-use-route-replace)<br/>- New command for BGP `neighbor x addpath-tx-best-selected` [link](https://docs.frrouting.org/en/latest/bgp.html#clicmd-neighbor-A.B.C.D-X-X-X-X-WORD-addpath-tx-best-selected-1-6)<br/>- New command for BGP `mpls bgp l3vpn-multi-domain-switching` [link](https://docs.frrouting.org/en/latest/bgp.html#clicmd-mpls-bgp-l3vpn-multi-domain-switching)<br/>- A couple more new BGP route-map commands:<br/> - `set as-path exclude all` [link](https://docs.frrouting.org/en/latest/bgp.html#clicmd-set-as-path-exclude-all)<br/> - `set as-path exclude as-path-access-list` [link](https://docs.frrouting.org/en/latest/bgp.html#clicmd-set-as-path-exclude-as-path-access-list-WORD)<br/> - `set extended-comm-list delete` [link](https://docs.frrouting.org/en/latest/routemap.html#clicmd-set-extended-comm-list-EXTCOMMUNITY_LIST_NAME-delete)<br/> - `set as-path replace &amp;lt;any|ASN&amp;gt; [&amp;lt;ASN&amp;gt;]` [link](https://docs.frrouting.org/en/latest/bgp.html#clicmd-set-as-path-replace-any-ASN-ASN)<br/> - `set as-path replace as-path-access-list WORD [&amp;lt;ASN&amp;gt;]` [link](https://docs.frrouting.org/en/latest/bgp.html#clicmd-set-as-path-replace-as-path-access-list-WORD-ASN)<br/> - `match community-list X any` [UPDATE](...)<br/><br/>### Deprecations<br/><br/>- Deprecate pre-standard outbound route filtering capability<br/>- Deprecate pre-standard route refresh capability<br/>- Drop deprecated capability<br/><br/>A complete log of changes can be found by browsing the commit history of the FRR 9.1 tag [here](https://github.com/FRRouting/frr/commits/frr-9.1)

软件描述

FRRouting(FRR)是用于Linux和Unix平台的IP路由协议套件,其中包括BGP,IS-IS,LDP,OSPF,PIM和RIP的协议守护程序。

CVE编号

暂无

Knowsafe分析

暂无

业界资讯

暂无

来源链接

https://github.com/FRRouting/frr/releases/tag/frr-9.1