]> git.proxmox.com Git - mirror_ovs.git/blame - NEWS
doc: Remove some link targets that aren't used anywhere.
[mirror_ovs.git] / NEWS
CommitLineData
e2218eee
JP
1Post-v2.7.0
2---------------------
3 - Tunnels:
4 * Added support to set packet mark for tunnel endpoint using
5 `egress_pkt_mark` OVSDB option.
4c30b246
CL
6 - EMC insertion probability is reduced to 1% and is configurable via
7 the new 'other_config:emc-insert-inv-prob' option.
736ca516
IM
8 - DPDK:
9 * DPDK log messages redirected to OVS logging subsystem.
10 Log level can be changed in a usual OVS way using
11 'ovs-appctl vlog' commands for 'dpdk' module. Lower bound
12 still can be configured via extra arguments for DPDK EAL.
fed8962a
EG
13 - New support for multiple VLANs (802.1ad or "QinQ"), including a new
14 "dot1q-tunnel" port VLAN mode.
b89d25e5
GL
15 - OVN:
16 * Make the DHCPv4 router setting optional.
f40c5588 17 * Gratuitous ARP for NAT addresses on a distributed logical router.
4d232c75
LR
18 * Allow ovn-controller SSL configuration to be obtained from vswitchd
19 database.
5f206eb6 20 - Add the command 'ovs-appctl stp/show' (see ovs-vswitchd(8)).
417cfdb6 21 - OpenFlow:
2f2b904f 22 * Increased support for OpenFlow 1.6 (draft).
417cfdb6 23 * Bundles now support hashing by just nw_src or nw_dst.
24 * The "learn" action now supports a "limit" option (see ovs-ofctl(8)).
e2218eee 25
a9c838b2 26v2.7.0 - 21 Feb 2017
92690eae 27---------------------
e18a1d08
ER
28 - Utilities and daemons that support SSL now allow protocols and
29 ciphers to be configured with --ssl-protocols and --ssl-ciphers.
a6095f81
BS
30 - OVN:
31 * QoS is now implemented via egress shaping rather than ingress policing.
1a03fc7d 32 * DSCP marking is now supported, via the new northbound QoS table.
6374d518 33 * IPAM now supports fixed MAC addresses.
440a9f4b 34 * Support for source IP address based routing.
d444a914
BP
35 * ovn-trace:
36 - New --ovs option to also print OpenFlow flows.
37 - put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
821302cf 38 * Support for managing SSL and remote connection configuration in
10471820 39 northbound and southbound databases.
84d0ca5d
LR
40 * TCP connections to northbound and southbound databases are no
41 longer enabled by default and must be explicitly configured.
42 See documentation for ovn-sbctl/ovn-nbctl "set-connection"
43 command or the ovn-ctl "--db-sb-create-insecure-remote" and
44 "--db-nb-create-insecure-remote" command-line options for
45 information regarding remote connection configuration.
714651c7
JP
46 * New appctl "inject-pkt" command in ovn-controller that allows
47 packets to be injected into the connected OVS instance.
878b54d7
MS
48 * Distributed logical routers may now be connected directly to
49 logical switches with localnet ports, by specifying a
50 "redirect-chassis" on the distributed gateway port of the
51 logical router. NAT rules may be specified directly on the
52 distributed logical router, and are handled either centrally on
53 the "redirect-chassis", or in many cases are handled locally on
54 the hypervisor where the corresponding logical port resides.
55 Gratuitous ARP for NAT addresses on a distributed logical
56 router is not yet supported, but will be added in a future
57 version.
a027899e
JR
58 - Fixed regression in table stats maintenance introduced in OVS
59 2.3.0, wherein the number of OpenFlow table hits and misses was
60 not accurate.
51bb26fa 61 - OpenFlow:
6dd3c787 62 * OFPT_PACKET_OUT messages are now supported in bundles.
53cc166a
JR
63 * A new "selection_method=dp_hash" type for OpenFlow select group
64 bucket selection that uses the datapath computed 5-tuple hash
65 without making datapath flows match the 5-tuple fields, which
66 is useful for more efficient load balancing, for example. This
67 uses the Netronome extension to OpenFlow 1.5+ that allows
68 control over the OpenFlow select groups selection method. See
69 "selection_method" and related options in ovs-ofctl(8) for
70 details.
4930ea56 71 * The "sample" action now supports "ingress" and "egress" options.
40c7b2fc 72 * The "ct" action now supports the TFTP ALG where support is available.
72fe7578 73 * New actions "clone" and "ct_clear".
6dd3c787
JR
74 - ovs-ofctl:
75 * 'bundle' command now supports packet-out messages.
76 * New syntax for 'ovs-ofctl packet-out' command, which uses the
77 same string parser as the 'bundle' command. The old 'packet-out'
78 syntax is deprecated and will be removed in a later OVS
79 release.
80 * New unixctl "ofctl/packet-out" command, which can be used to
81 instruct a flow monitor to issue OpenFlow packet-out messages.
9c1a1182
LR
82 - ovsdb-server:
83 * Remote connections can now be made read-only (see ovsdb-server(1)).
8d8ab6c2
JG
84 - Tunnels:
85 * TLV mappings for protocols such as Geneve are now segregated on
86 a per-OpenFlow bridge basis rather than globally. (The interface
87 has not changed.)
2b02d770 88 * Removed support for IPsec tunnels.
08484bae
CL
89 - DPDK:
90 * New option 'n_rxq_desc' and 'n_txq_desc' fields for DPDK interfaces
91 which set the number of rx and tx descriptors to use for the given port.
04de404e 92 * Support for DPDK v16.11.
1a2bb118 93 * Support for rx checksum offload. Refer DPDK HOWTO for details.
b8374d0d 94 * Port Hotplug is now supported.
55e075e6
CL
95 * DPDK physical ports can now have arbitrary names. The PCI address of
96 the device must be set using the 'dpdk-devargs' option. Compatibility
97 with the old dpdk<portid> naming scheme is broken, and as such a
98 device will not be available for use until a valid dpdk-devargs is
99 specified.
69876ed7 100 * Virtual DPDK Poll Mode Driver (vdev PMD) support.
602e24ee 101 * Removed experimental tag.
5771f476
FL
102 - Fedora packaging:
103 * A package upgrade does not automatically restart OVS service.
58d636ee
BK
104 - ovs-vswitchd/ovs-vsctl:
105 * Ports now have a "protected" flag. Protected ports can not forward
106 frames to other protected ports. Unprotected ports can receive and
107 forward frames to protected and other unprotected ports.
1ab39058
LR
108 - ovs-vsctl, ovn-nbctl, ovn-sbctl, vtep-ctl:
109 * Database commands now accept integer ranges, e.g. "set port
110 eth0 trunks=1-10" to enable trunking VLANs 1 to 10.
92690eae 111
62f0430e 112v2.6.0 - 27 Sep 2016
ca32170a 113---------------------
e921fc3f
JP
114 - First supported release of OVN. See ovn-architecture(7) for more
115 details.
92f8d65b 116 - ovsdb-server:
c383f3bf
LS
117 * New "monitor_cond" "monitor_cond_update" and "update2" extensions to
118 RFC 7047.
56085be5 119 - OpenFlow:
8225b3b7
JR
120 * OpenFlow 1.3+ bundles now expire after 10 seconds since the
121 last time the bundle was either opened, modified, or closed.
fe996936
JR
122 * OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
123 now implemented.
25070e04
JR
124 * OpenFlow 1.3+ bundles are now supported for group mods as well as
125 flow mods and port mods. Both 'atomic' and 'ordered' bundle
126 flags are supported for group mods as well as flow mods.
5fc0ad0a
JR
127 * Internal OpenFlow rule representation for load and set-field
128 actions is now much more memory efficient. For a complex flow
129 table this can reduce rule memory consumption by 40%.
130 * Bundles are now much more memory efficient than in OVS 2.5.
131 Together with memory efficiency improvements in OpenFlow rule
132 representation, the peak OVS resident memory use during a
133 bundle commit for large complex set of flow mods can be only
134 25% of that in OVS 2.5 (4x lower).
56085be5 135 * OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
e016fb63 136 * OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
6c6eedc5 137 * OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
bdcad671 138 * New property-based packet-in message format NXT_PACKET_IN2 with support
77ab5fd2
BP
139 for arbitrary user-provided data and for serializing flow table
140 traversal into a continuation for later resumption.
141 * New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
142 control over asynchronous messages in earlier versions of OpenFlow.
bef3f465 143 * New OpenFlow extension NXM_NX_MPLS_TTL to provide access to MPLS TTL.
aaca4fe0
WT
144 * New output option, output(port=N,max_len=M), to allow truncating a
145 packet to size M bytes when outputting to port N.
88b87a36
JS
146 * New command OFPGC_ADD_OR_MOD for OFPT_GROUP_MOD message that adds a
147 new group or modifies an existing groups
54b78c95
JR
148 * The optional OpenFlow packet buffering feature is deprecated in
149 this release, and will be removed in the next OVS release
150 (2.7). After the change OVS always sends the 'buffer_id' as
151 0xffffffff in packet-in messages and will send an error
152 response if any other value of this field is included in
153 packet-out and flow mod sent by a controller. Controllers are
154 already expected to work properly in cases where the switch can
155 not buffer packets, so this change should not affect existing
156 users.
2a7c4805 157 * New OpenFlow extension NXT_CT_FLUSH_ZONE to flush conntrack zones.
4b684612 158 - Improved OpenFlow version compatibility for actions:
88c8ca26 159 * New OpenFlow extension to support the "group" action in OpenFlow 1.0.
0f2aaee9 160 * OpenFlow 1.0 "enqueue" action now properly translated to OpenFlow 1.1+.
56a91749
BP
161 * OpenFlow 1.1 "mod_nw_ecn" and OpenFlow 1.1+ "mod_nw_ttl" actions now
162 properly translated to OpenFlow 1.0.
e016fb63
BP
163 - ovs-ofctl:
164 * queue-get-config command now allows a queue ID to be specified.
25070e04
JR
165 * '--bundle' option can now be used with OpenFlow 1.3 and with group mods.
166 * New "bundle" command allows executing a mixture of flow and group mods
167 as a single atomic transaction.
8743fa8c 168 * New option "--color" to produce colorized output for some commands.
88b87a36 169 * New option '--may-create' to use OFPGC_ADD_OR_MOD in mod-group command.
c97320eb
WZ
170 - IPFIX:
171 * New "sampling_port" option for "sample" action to allow sampling
172 ingress and egress tunnel metadata with IPFIX.
173 * New ovs-ofctl commands "dump-ipfix-bridge" and "dump-ipfix-flow" to
174 dump bridge IPFIX statistics and flow based IPFIX statistics.
175 * New setting other-config:virtual_obs_id to add an arbitrary string
176 to IPFIX records.
6cf888b8 177 - Linux:
fe996936
JR
178 * OVS Linux datapath now implements Conntrack NAT action with all
179 supported Linux kernels.
180 * Support for truncate action.
6cf888b8
BS
181 * New QoS type "linux-noop" that prevents Open vSwitch from trying to
182 manage QoS for a given port (useful when other software manages QoS).
a14b8947
IM
183 - DPDK:
184 * New option "n_rxq" for PMD interfaces.
185 Old 'other_config:n-dpdk-rxqs' is no longer supported.
81acebda
IM
186 Not supported by vHost interfaces. For them number of rx and tx queues
187 is applied from connected virtio device.
3eb67853
IM
188 * New 'other_config:pmd-rxq-affinity' field for PMD interfaces, that
189 allows to pin port's rx queues to desired cores.
ce179f11
IM
190 * New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
191 assignment.
192 * Type of log messages from PMD threads changed from INFO to DBG.
0bf765f7 193 * QoS functionality with sample egress-policer implementation.
bab69409
AC
194 * The mechanism for configuring DPDK has changed to use database
195 * Sensible defaults have been introduced for many of the required
196 configuration options
197 * DB entries have been added for many of the DPDK EAL command line
eac84432
AC
198 arguments. Additional arguments can be passed via the dpdk-extra
199 entry.
9509913a 200 * Add ingress policing functionality.
db8f13b0
CL
201 * PMD threads servicing vHost User ports can now come from the NUMA
202 node that device memory is located on if CONFIG_RTE_LIBRTE_VHOST_NUMA
203 is enabled in DPDK.
5cf3edb3
DDP
204 * Basic connection tracking for the userspace datapath (no ALG,
205 fragmentation or NAT support yet)
0a0f39df 206 * Support for DPDK 16.07
4b88d678 207 * Optional support for DPDK pdump enabled.
0072e931 208 * Jumbo frame support
41987644 209 * Remove dpdkvhostcuse port type.
c1ff66ac 210 * OVS client mode for vHost and vHost reconnect (Requires QEMU 2.7)
2d24d165 211 * 'dpdkvhostuserclient' port type.
847b8b02 212 - Increase number of registers to 16.
e7529141
BP
213 - ovs-benchmark: This utility has been removed due to lack of use and
214 bitrot.
06380128
BP
215 - ovs-appctl:
216 * New "vlog/close" command.
7fc28c50
AC
217 - ovs-ctl:
218 * Added the ability to selectively start the forwarding and database
219 functions (ovs-vswitchd and ovsdb-server, respectively).
acdd0764
AZ
220 - ovsdb-server:
221 * Remove max number of sessions limit, to enable connection scaling
222 testing.
99c8be3e
RB
223 - python:
224 * Added support for Python 3.4+ in addition to existing support
225 for 2.7+.
9b897c91
AA
226 - SELinux:
227 * Introduced SELinux policy package.
8063e095
PS
228 - Datapath Linux kernel compatibility.
229 * Dropped support for kernel older than 3.10.
42deb67d 230 * Removed VLAN splinters feature.
c3cbb286 231 * Datapath supports kernel upto 4.7.
80c4589a
PS
232 - Tunnels:
233 * Flow based tunnel match and action can be used for IPv6 address using
234 tun_ipv6_src, tun_ipv6_dst fields.
8a2d4905 235 * Added support for IPv6 tunnels, for details checkout FAQ.
9e9d0384 236 * Deprecated support for IPsec tunnels ports.
314ce647
AC
237 - A wrapper script, 'ovs-tcpdump', to easily port-mirror an OVS port and
238 watch with tcpdump
81d2f75c
AA
239 - Introduce --no-self-confinement flag that allows daemons to work with
240 sockets outside their run directory.
29dd784d
BP
241 - ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
242 SHA-1 is no longer secure and some operating systems have started to
243 disable it in OpenSSL.
56abcf49 244 - Add 'mtu_request' column to the Interface table. It can be used to
3a414a0a 245 configure the MTU of the ports.
29dd784d 246
c0fa821f
JS
247Known issues:
248 - Using openvswitch module in conjunction with upstream Linux tunnels:
249 * When using the openvswitch module distributed with OVS against kernel
250 versions 4.4 to 4.6, the openvswitch module cannot be loaded or used at
251 the same time as "ip_gre".
252 - Conntrack FTP ALGs: When using the openvswitch module distributed with
253 OVS, particular Linux distribution kernels versions may provide diminished
254 functionality. This typically affects active FTP data connections when
255 using "actions=ct(alg=ftp),..." in flow tables. Specifically:
256 * Centos 7.1 kernels (3.10.0-2xx) kernels are unable to correctly set
257 up expectations for FTP data connections in multiple zones,
258 eg "actions=ct(zone=1,alg=ftp),ct(zone=2,alg=ftp),...". Executing the
259 "ct" action for subsequent data connections may fail to determine that
260 the data connection is "related" to an existing connection.
261 * Centos 7.2 kernels (3.10.0-3xx) kernels may not establish FTP ALG state
262 correctly for NATed connections. As a result, flows that perform NAT,
263 eg "actions=ct(nat,ftp=alg,table=1),..." may fail to NAT the packet,
264 and will populate the "ct_state=inv" bit in the flow.
265
ca32170a 266
1c0383a9 267v2.5.0 - 26 Feb 2016
c4c7e593 268---------------------
e23812fc
BP
269 - Dropped support for Python older than version 2.7. As a consequence,
270 using Open vSwitch 2.5 or later on XenServer 6.5 or earlier (which
271 have Python 2.4) requires first installing Python 2.7.
0eb48fe1
BP
272 - OpenFlow:
273 * Group chaining (where one OpenFlow group triggers another) is
274 now supported.
f70b94de 275 * OpenFlow 1.4+ "importance" is now considered for flow eviction.
82c22d34 276 * OpenFlow 1.4+ OFPTC_EVICTION is now implemented.
de7d3c07 277 * OpenFlow 1.4+ OFPTC_VACANCY_EVENTS is now implemented.
03c72922 278 * OpenFlow 1.4+ OFPMP_TABLE_DESC is now implemented.
f6ecf944 279 * Allow modifying the ICMPv4/ICMPv6 type and code fields.
c61f4bc1
BP
280 * OpenFlow 1.4+ OFPT_SET_ASYNC_CONFIG and OFPT_GET_ASYNC_CONFIG are
281 now implemented.
6d5d1f3b
BP
282 - ovs-ofctl:
283 * New "out_group" keyword for OpenFlow 1.1+ matching on output group.
c61f4bc1
BP
284 - Tunnels:
285 * Geneve tunnels can now match and set options and the OAM bit.
286 * The nonstandard GRE64 tunnel extension has been dropped.
06994f87 287 - Support Multicast Listener Discovery (MLDv1 and MLDv2).
4249b547 288 - Add 'symmetric_l3l4' and 'symmetric_l3l4+udp' hash functions.
7321bda3 289 - sFlow agent now reports tunnel and MPLS structures.
548f9fe7
DDP
290 - New 'check-system-userspace', 'check-kmod' and 'check-kernel' Makefile
291 targets to run a new system testsuite. These tests can be run inside
292 a Vagrant box. See INSTALL.md for details
195360dc
AA
293 - Mark --syslog-target argument as deprecated. It will be removed in
294 the next OVS release.
e91b927d 295 - Added --user option to all daemons
07659514 296 - Add support for connection tracking through the new "ct" action
9daf2348
JS
297 and "ct_state"/"ct_zone"/"ct_mark"/"ct_label" match fields. Only
298 available on Linux kernels with the connection tracking module loaded.
a2e61be6
RB
299 - Add experimental version of OVN. OVN, the Open Virtual Network, is a
300 system to support virtual network abstraction. OVN complements the
301 existing capabilities of OVS to add native support for virtual network
302 abstractions, such as virtual L2 and L3 overlays and security groups.
f6bf8880
PM
303 - RHEL packaging:
304 * DPDK ports may now be created via network scripts (see README.RHEL).
4573fbd3
FL
305 - DPDK:
306 * Requires DPDK 2.2
307 * Added multiqueue support to vhost-user
db6e1383 308 * Note: QEMU 2.5+ required for multiqueue support
c4c7e593 309
2fac5fed 310v2.4.0 - 20 Aug 2015
2c7ea589 311---------------------
39c94593
JR
312 - Flow table modifications are now atomic, meaning that each packet
313 now sees a coherent version of the OpenFlow pipeline. For
314 example, if a controller removes all flows with a single OpenFlow
315 "flow_mod", no packet sees an intermediate version of the OpenFlow
316 pipeline where only some of the flows have been deleted.
db5076ee 317 - Added support for SFQ, FQ_CoDel and CoDel qdiscs.
557570fa
AW
318 - Add bash command-line completion support for ovs-vsctl Please check
319 utilities/ovs-command-compgen.INSTALL.md for how to use.
9d078ec2
BP
320 - The MAC learning feature now includes per-port fairness to mitigate
321 MAC flooding attacks.
18080541
BP
322 - New support for a "conjunctive match" OpenFlow extension, which
323 allows constructing OpenFlow matches of the form "field1 in
324 {a,b,c...} AND field2 in {d,e,f...}" and generalizations. For details,
cc23805c 325 see documentation for the "conjunction" action in ovs-ofctl(8).
423ede18
AW
326 - Add bash command-line completion support for ovs-appctl/ovs-dpctl/
327 ovs-ofctl/ovsdb-tool commands. Please check
328 utilities/ovs-command-compgen.INSTALL.md for how to use.
35f48b8b
BP
329 - The "learn" action supports a new flag "delete_learned" that causes
330 the learned flows to be deleted when the flow with the "learn" action
331 is deleted.
c1fc1411
JG
332 - Basic support for the Geneve tunneling protocol. It is not yet
333 possible to generate or match options. This is planned for a future
334 release. The protocol is documented at
335 http://tools.ietf.org/html/draft-gross-geneve-00
a413195e 336 - The OVS database now reports controller rate limiting statistics.
50b9699f 337 - sflow now exports information about LACP-based bonds, port names, and
3d2912f2 338 OpenFlow port numbers, as well as datapath performance counters.
fceef209
DDP
339 - ovs-dpctl functionality is now available for datapaths integrated
340 into ovs-vswitchd, via ovs-appctl. Some existing ovs-appctl
341 commands are now redundant and will be removed in a future
342 release. See ovs-vswitchd(8) for details.
79fe0f46 343 - OpenFlow:
1c38055d
JR
344 * OpenFlow 1.4 bundles are now supported for flow mods and port
345 mods. For flow mods, both 'atomic' and 'ordered' bundle flags
346 are trivially supported, as all bundled messages are executed
347 in the order they were added and all flow table modifications
348 are now atomic to the datapath. Port mods may not appear in
349 atomic bundles, as port status modifications are not atomic.
e60e935b 350 * IPv6 flow label and neighbor discovery fields are now modifiable.
d3cb080e
BP
351 * OpenFlow 1.5 extended registers are now supported.
352 * The OpenFlow 1.5 actset_output field is now supported.
353 * OpenFlow 1.5 Copy-Field action is now supported.
354 * OpenFlow 1.5 masked Set-Field action is now supported.
3c4e10fb 355 * OpenFlow 1.3+ table features requests are now supported (read-only).
1b0ee636 356 * Nicira extension "move" actions may now be included in action sets.
2e34a6a3
SS
357 * "resubmit" actions may now be included in action sets. The resubmit
358 is executed last, and only if the action set has no "output" or "group"
359 action.
ca26eb44 360 * OpenFlow 1.4+ flow "importance" is now maintained in the flow table.
0c4b9393
SH
361 * A new Netronome extension to OpenFlow 1.5+ allows control over the
362 fields hashed for OpenFlow select groups. See "selection_method" and
363 related options in ovs-ofctl(8) for details.
db5076ee
JR
364 - ovs-ofctl has a new '--bundle' option that makes the flow mod commands
365 ('add-flow', 'add-flows', 'mod-flows', 'del-flows', and 'replace-flows')
366 use an OpenFlow 1.4 bundle to operate the modifications as a single
39c94593
JR
367 atomic transaction. If any of the flow mods in a transaction fail, none
368 of them are executed. All flow mods in a bundle appear to datapath
369 lookups simultaneously.
db5076ee
JR
370 - ovs-ofctl 'add-flow' and 'add-flows' commands now accept arbitrary flow
371 mods as an input by allowing the flow specification to start with an
372 explicit 'add', 'modify', 'modify_strict', 'delete', or 'delete_strict'
373 keyword. A missing keyword is treated as 'add', so this is fully
374 backwards compatible. With the new '--bundle' option all the flow mods
39c94593 375 are executed as a single atomic transaction using an OpenFlow 1.4 bundle.
4a1f9610 376 - ovs-pki: Changed message digest algorithm from MD5 to SHA-1 because
9ff33ca7
BP
377 MD5 is no longer secure and some operating systems have started to disable
378 it in OpenSSL.
09e25603
TW
379 - ovsdb-server: New OVSDB protocol extension allows inequality tests on
380 "optional scalar" columns. See ovsdb-server(1) for details.
ff495b63
BP
381 - ovs-vsctl now permits immutable columns in a new row to be modified in
382 the same transaction that creates the row.
0bc1b46a
BP
383 - test-controller has been renamed ovs-testcontroller at request of users
384 who find it useful for testing basic OpenFlow setups. It is still not
385 a necessary or desirable part of most Open vSwitch deployments.
cccf7e9d 386 - Support for travis-ci.org based continuous integration builds has been
542cc9bb 387 added. Build failures are reported to build@openvswitch.org. See INSTALL.md
cccf7e9d 388 file for additional details.
bbda3a2f
DV
389 - Support for the Rapid Spanning Tree Protocol (IEEE 802.1D-2004).
390 The implementation has been tested successfully against the Ixia Automated
391 Network Validation Library (ANVL).
2f9dd77f 392 - Stats are no longer updated on fake bond interface.
3e5aeeb5 393 - Keep active bond slave selection across OVS restart.
ec8f0f0c 394 - A simple wrapper script, 'ovs-docker', to integrate OVS with Docker
62dbc5bd
GS
395 containers. If and when there is a native integration of Open vSwitch
396 with Docker, the wrapper script will be retired.
e5a1caee
JG
397 - Added support for DPDK Tunneling. VXLAN, GRE, and Geneve are supported
398 protocols. This is generic tunneling mechanism for userspace datapath.
e3102e42 399 - Support for multicast snooping (IGMPv1, IGMPv2 and IGMPv3)
3afcde43 400 - Support for Linux kernels up to 4.0.x
d5460484
GS
401 - The documentation now use the term 'destination' to mean one of syslog,
402 console or file for vlog logging instead of the previously used term
403 'facility'.
ac6073e3 404 - Support for VXLAN Group Policy extension
99eef98b
DF
405 - Initial support for the IETF Auto-Attach SPBM draft standard. This
406 contains rudimentary support for the LLDP protocol as needed for
407 Auto-Attach.
d4763d1d
JP
408 - The default OpenFlow and OVSDB ports are now the IANA-assigned
409 numbers. OpenFlow is 6653 and OVSDB is 6640.
58397e6c 410 - Support for DPDK vHost.
4752cc0c 411 - Support for outer UDP checksums in Geneve and VXLAN.
d0d986a5
TG
412 - The kernel vports with dependencies are no longer part of the overall
413 openvswitch.ko but built and loaded automatically as individual kernel
414 modules (vport-*.ko).
4237026e 415 - Support for STT tunneling.
6901639b
BP
416 - ovs-sim: New developer tool for simulating multiple OVS instances.
417 See ovs-sim(1) for more information.
fe089c0d
AA
418 - Support to configure method (--syslog-method argument) that determines
419 how daemons will talk with syslog.
532e1463
AA
420 - Support for "ovs-appctl vlog/list-pattern" command that lets to query
421 logging message format for each destination.
2c7ea589
JP
422
423
e13440fc 424v2.3.0 - 14 Aug 2014
c5cf1059 425---------------------
6dc53744
BP
426 - OpenFlow 1.1, 1.2, and 1.3 are now enabled by default in
427 ovs-vswitchd.
69d6040e
JR
428 - Linux kernel datapath now has an exact match cache optimizing the
429 flow matching process.
430 - Datapath flows now have partially wildcarded tranport port field
431 matches. This reduces userspace upcalls, but increases the
432 number of different masks in the datapath. The kernel datapath
433 exact match cache removes the overhead of matching the incoming
434 packets with the larger number of masks, but when paired with an
435 older kernel module, some workloads may perform worse with the
436 new userspace.
0877a018 437 - Compatibility with autoconf 2.63 (previously >=2.64)
c5cf1059 438
012c3a52 439v2.2.0 - Internal Release
bff46ebb 440---------------------
1839c356
FL
441 - Internal ports are no longer brought up by default, because it
442 should be an administrator task to bring up devices as they are
443 configured properly.
c3ccfe98
AZ
444 - ovs-vsctl now reports when ovs-vswitchd fails to create a new port or
445 bridge.
9500f505
TG
446 - Port creation and configuration errors are now stored in a new error
447 column of the Interface table and included in 'ovs-vsctl show'.
7868fbc6
BP
448 - The "ovsdbmonitor" graphical tool has been removed, because it was
449 poorly maintained and not widely used.
e3c7ed29 450 - New "check-ryu" Makefile target for running Ryu tests for OpenFlow
542cc9bb 451 controllers against Open vSwitch. See INSTALL.md for details.
f51e8ccb 452 - Added IPFIX support for SCTP flows and templates for ICMPv4/v6 flows.
0b114fa0
GS
453 - Upon the receipt of a SIGHUP signal, ovs-vswitchd no longer reopens its
454 log file (it will terminate instead). Please use 'ovs-appctl vlog/reopen'
455 instead.
e2f3178f 456 - Support for Linux kernels up to 3.14. From Kernel 3.12 onwards OVS uses
cb25142c 457 tunnel API for GRE and VXLAN.
8a9562d2 458 - Added DPDK support.
a5ed8fe3 459 - Added support for custom vlog patterns in Python
f51e8ccb 460
bff46ebb 461
a3aabcd2 462v2.1.0 - 19 Mar 2014
b366c1f4 463---------------------
13751fd8
JR
464 - Address prefix tracking support for flow tables. New columns
465 "prefixes" in OVS-DB table "Flow_Table" controls which packet
466 header fields are used for address prefix tracking. Prefix
467 tracking allows the classifier to skip rules with longer than
468 necessary prefixes, resulting in better wildcarding for datapath
469 flows. Default configuration is to not use any fields for prefix
470 tracking. However, if any flow tables contain both exact matches
471 and masked matches for IP address fields, OVS performance may be
472 increased by using this feature.
473 * As of now, the fields for which prefix lookup can be enabled
474 are: 'tun_id', 'tun_src', 'tun_dst', 'nw_src', 'nw_dst' (or
475 aliases 'ip_src' and 'ip_dst'), 'ipv6_src', and 'ipv6_dst'.
476 (Using this feature for 'tun_id' would only make sense if the
477 tunnel IDs have prefix structure similar to IP addresses.)
478 * There is a maximum number of fields that can be enabled for any
479 one flow table. Currently this limit is 3.
480 * Examples:
481 $ ovs-vsctl set Bridge br0 flow_tables:0=@N1 -- \
482 --id=@N1 create Flow_Table name=table0
483 $ ovs-vsctl set Bridge br0 flow_tables:1=@N1 -- \
484 --id=@N1 create Flow_Table name=table1
485 $ ovs-vsctl set Flow_Table table0 prefixes=ip_dst,ip_src
486 $ ovs-vsctl set Flow_Table table1 prefixes=[]
bcb8bde4
JR
487 - TCP flags matching: OVS now supports matching of TCP flags. This
488 has an adverse performance impact when using OVS userspace 1.10
489 or older (no megaflows support) together with the new OVS kernel
490 module. It is recommended that the kernel and userspace modules
491 both are upgraded at the same time.
36359150
JP
492 - The default OpenFlow and OVSDB ports will change to
493 IANA-assigned numbers in a future release. Consider updating
494 your installations to specify port numbers instead of using the
495 defaults.
7fdb60a7
SH
496 - OpenFlow:
497 * The OpenFlow 1.1+ "Write-Actions" instruction is now supported.
484c8355
BP
498 * OVS limits the OpenFlow port numbers it assigns to port 32767 and
499 below, leaving port numbers above that range free for assignment
500 by the controller.
4abb8608
BP
501 * ovs-vswitchd now honors changes to the "ofport_request" column
502 in the Interface table by changing the port's OpenFlow port
503 number.
5dc6f8e1 504 * The Open vSwitch software switch now supports OpenFlow groups.
a5ae88ff
AA
505 - ovs-vswitchd.conf.db.5 man page will contain graphviz/dot
506 diagram only if graphviz package was installed at the build time.
54af97ad 507 - Support for Linux kernels up to 3.11
847108dc
AZ
508 - ovs-dpctl:
509 The "show" command also displays mega flow mask stats.
60e46251
BP
510 - ovs-ofctl:
511 * New command "ofp-parse-pcap" to dump OpenFlow from PCAP files.
1d5aaa61
BP
512 - ovs-controller has been renamed test-controller. It is no longer
513 packaged or installed by default, because too many users assumed
514 incorrectly that ovs-controller was a necessary or desirable part
515 of an Open vSwitch deployment.
afc9f547 516 - Added vlog option to export to a UDP syslog sink.
4227b221
BP
517 - ovsdb-client:
518 * The "monitor" command can now monitor all tables in a database,
519 instead of being limited to a single table.
e79a6c83
EJ
520 - The flow-eviction-threshold has been replaced by the flow-limit which is a
521 hard limit on the number of flows in the datapath. It defaults to 200,000
522 flows. OVS automatically adjusts this number depending on network
523 conditions.
e731d71b 524 - Added IPv6 support for active and passive socket communications.
b366c1f4
JP
525
526
2fdb1879 527v2.0.0 - 15 Oct 2013
9f31efc7 528---------------------
d27705ea
JP
529 - The ovs-vswitchd process is no longer single-threaded. Multiple
530 threads are now used to handle flow set up and asynchronous
531 logging.
0ad90c84 532 - OpenFlow:
75fa58f8
BP
533 * Experimental support for OpenFlow 1.1 (in addition to 1.2 and
534 1.3, which had experimental support in 1.10).
7395c052
NZ
535 * Experimental protocol support for OpenFlow 1.1+ groups. This
536 does not yet include an implementation in the Open vSwitch
537 software switch.
538 * Experimental protocol support for OpenFlow 1.2+ meters. This
539 does not yet include an implementation in the Open vSwitch
540 software switch.
0ad90c84
JR
541 * New support for matching outer source and destination IP address
542 of tunneled packets, for tunnel ports configured with the newly
e0eeeca5 543 added "remote_ip=flow" and "local_ip=flow" options.
ac923e91
JG
544 * Support for matching on metadata 'pkt_mark' for interacting with
545 other system components. On Linux this corresponds to the skb
546 mark.
fe8a1798 547 * Support matching, rewriting SCTP ports
ea401d9a
NM
548 - The Interface table in the database has a new "ifindex" column to
549 report the interface's OS-assigned ifindex.
81a114e5
BP
550 - New "check-oftest" Makefile target for running OFTest against Open
551 vSwitch. See README-OFTest for details.
380f49c4 552 - The flow eviction threshold has been moved to the Open_vSwitch table.
fb6de52c
GS
553 - Database names are now mandatory when specifying ovsdb-server options
554 through database paths (e.g. Private key option with the database name
555 should look like "--private-key=db:Open_vSwitch,SSL,private_key").
fef5244f 556 - Added ovs-dev.py, a utility script helpful for Open vSwitch developers.
9b764edf 557 - Support for Linux kernels up to 3.10
1ac0e975
BP
558 - ovs-ofctl:
559 * New "ofp-parse" for printing OpenFlow messages read from a file.
7395c052 560 * New commands for OpenFlow 1.1+ groups.
978427a5 561 - Added configurable flow caching support to IPFIX exporter.
37418c86 562 - Dropped support for Linux pre-2.6.32.
7c018033
BP
563 - Log file timestamps and ovsdb commit timestamps are now reported
564 with millisecond resolution. (Previous versions only reported
565 whole seconds.)
9f31efc7
JP
566
567
03c8f0b7 568v1.11.0 - 28 Aug 2013
d224e350 569---------------------
d445cc16
JP
570 - Support for megaflows, which allows wildcarding in the kernel (and
571 any dpif implementation that supports wildcards). Depending on
572 the flow table and switch configuration, flow set up rates are
573 close to the Linux bridge.
eeecce05
BP
574 - The "tutorial" directory contains a new tutorial for some advanced
575 Open vSwitch features.
df53d41c 576 - Stable bond mode has been removed.
1bda9b9e 577 - The autopath action has been removed.
a6ae068b
LJ
578 - New support for the data encapsulation format of the LISP tunnel
579 protocol (RFC 6830). An external control plane or manual flow
580 setup is required for EID-to-RLOC mapping.
b676167a 581 - OpenFlow:
0f3f3c3d
SH
582 * The "dec_mpls_ttl" and "set_mpls_ttl" actions from OpenFlow
583 1.1 and later are now implemented.
bd85dac1
AZ
584 * New "stack" extension for use in actions, to push and pop from
585 NXM fields.
a7b07d4c
BP
586 * The "load" and "set_field" actions can now modify the "in_port". (This
587 allows one to enable output to a flow's input port by setting the
588 in_port to some unused value, such as OFPP_NONE.)
186afbfe
BP
589 - ovs-dpctl:
590 * New debugging commands "add-flow", "mod-flow", "del-flow".
041e7168 591 * "dump-flows" now has a -m option to increase output verbosity.
bcd2633a
JP
592 - In dpif-based bridges, cache action translations, which can improve
593 flow set up performance by 80% with a complicated flow table.
ca03aae0 594 - New syslog format, prefixed with "ovs|", to be easier to filter.
f9ee9dcb
GS
595 - RHEL: Removes the default firewall rule that allowed GRE traffic to
596 pass through. Any users that relied on this automatic firewall hole
597 will have to manually configure it. The ovs-ctl(8) manpage documents
598 the "enable-protocol" command that can be used as an alternative.
90967e95
EJ
599 - New CFM demand mode which uses data traffic to indicate interface
600 liveness.
d224e350 601
b82b19e9 602v1.10.0 - 01 May 2013
4191f435 603---------------------
685e46da
BP
604 - Bridge compatibility support has been removed. Any uses that
605 rely on ovs-brcompatd will have to stick with Open vSwitch 1.9.x
606 or adapt to native Open vSwitch support (e.g. use ovs-vsctl instead
607 of brctl).
c4069512 608 - The maximum size of the MAC learning table is now configurable.
989fd548
JP
609 - With the Linux datapath, packets for new flows are now queued
610 separately on a per-port basis, so it should no longer be
611 possible for a large number of new flows arriving on one port to
612 prevent new flows from being processed on other ports.
43d18dc1
BP
613 - ovs-vsctl:
614 * Previously ovs-vsctl would retry connecting to the database forever,
615 causing it to hang if ovsdb-server was not running. Now, ovs-vsctl
616 only tries once by default (use --retry to try forever). This change
617 means that you may want to remove uses of --timeout to avoid hangs
618 in ovs-vsctl calls.
619 * Many "ovs-vsctl" database commands now accept an --if-exists option.
620 Please refer to the ovs-vsctl manpage for details.
e6024057 621 - OpenFlow:
d6123831
JP
622 - Experimental support for newer versions of OpenFlow. See
623 the "What versions of OpenFlow does Open vSwitch support?"
624 question in the FAQ for more details.
e6024057
JP
625 - The OpenFlow "dp_desc" may now be configured by setting the
626 value of other-config:dp-desc in the Bridge table.
627 - It is possible to request the OpenFlow port number with the
628 "ofport_request" column in the Interface table.
c9accf5b
BP
629 - The NXM flow_removed message now reports the OpenFlow table ID
630 from which the flow was removed.
3c23e920
JP
631 - Tunneling:
632 - New support for the VXLAN tunnel protocol (see the IETF draft here:
238bc978 633 http://tools.ietf.org/html/draft-mahalingam-dutt-dcops-vxlan-03).
3c23e920
JP
634 - Tunneling requires the version of the kernel module paired with
635 Open vSwitch 1.9.0 or later.
636 - Inheritance of the Don't Fragment bit in IP tunnels (df_inherit)
637 is no longer supported.
638 - Path MTU discovery is no longer supported.
ccd989e0
JG
639 - CAPWAP tunneling support removed.
640 - Tunnels with multicast destination ports are no longer supported.
e6024057
JP
641 - ovs-dpctl:
642 - The "dump-flows" and "del-flows" no longer require an argument
643 if only one datapath exists.
644 - ovs-appctl:
645 - New "vlog/disable-rate-limit" and "vlog/enable-rate-limit"
646 commands available allow control over logging rate limits.
647 - New "dpif/dump-dps", "dpif/show", and "dpif/dump-flows" command
648 that mimic the equivalent ovs-dpctl commands.
e6024057
JP
649 - The ofproto library is now responsible for assigning OpenFlow port
650 numbers. An ofproto implementation should assign them when
651 port_construct() is called.
652 - All dpif-based bridges of a particular type share a common
653 datapath called "ovs-<type>", e.g. "ovs-system". The ovs-dpctl
654 commands will now return information on that shared datapath. To
655 get the equivalent bridge-specific information, use the new
656 "ovs-appctl dpif/*" commands.
bedde04c
GS
657 - Backward-incompatible changes:
658 - Earlier Open vSwitch versions treated ANY as a wildcard in flow
659 syntax. OpenFlow 1.1 adds a port named ANY, which introduces a
660 conflict. ANY was rarely used in flow syntax, so we chose to
661 retire that meaning of ANY in favor of the OpenFlow 1.1 meaning.
3c23e920
JP
662 - Patch ports no longer require kernel support, so they now work
663 with FreeBSD and the kernel module built into Linux 3.3 and later.
29089a54 664 - New "sample" action.
f07ee64c 665
e5f77cc3 666
fdfe872d
JP
667v1.9.0 - 26 Feb 2013
668------------------------
72e8bf28
AA
669 - Datapath:
670 - Support for ipv6 set action.
671 - SKB mark matching and setting.
64807dfb 672 - support for Linux kernels up to 3.8
f6eb6b20
GL
673 - FreeBSD is now a supported platform, thanks to code contributions from
674 Gaetano Catalli, Ed Maste, and Giuseppe Lettieri.
b592e726 675 - ovs-bugtool: New --ovs option to report only OVS related information.
781dee08
BP
676 - New %t and %T log escapes to identify the subprogram within a
677 cooperating group of processes or threads that emitted a log message.
678 The default log patterns now include this information.
32455024 679 - OpenFlow:
e878338b
SH
680 - Allow bitwise masking for SHA and THA fields in ARP, SLL and TLL
681 fields in IPv6 neighbor discovery messages, and IPv6 flow label.
4cceacb9 682 - Adds support for writing to the metadata field for a flow.
3c23e920
JP
683 - Tunneling:
684 - The tunneling code no longer assumes input and output keys are
685 symmetric. If they are not, PMTUD needs to be disabled for
686 tunneling to work. Note this only applies to flow-based keys.
687 - New support for a nonstandard form of GRE that supports a 64-bit key.
688 - Tunnel Path MTU Discovery default value was set to 'disabled'.
689 This feature is deprecated and will be removed soon.
690 - Tunnel header caching removed.
c6100d92
BP
691 - ovs-ofctl:
692 - Commands and actions that accept port numbers now also accept keywords
693 that represent those ports (such as LOCAL, NONE, and ALL). This is
694 also the recommended way to specify these ports, for compatibility
695 with OpenFlow 1.1 and later (which use the OpenFlow 1.0 numbers
696 for these ports for different purposes).
2562714a 697 - ovs-dpctl:
4b3b8d8f
JP
698 - Support requesting the port number with the "port_no" option in
699 the "add-if" command.
2562714a
BP
700 - ovs-pki: The "online PKI" features have been removed, along with
701 the ovs-pki-cgi program that facilitated it, because of some
702 alarmist insecurity claims. We do not believe that these claims
703 are true, but because we do not know of any users for this
704 feature it seems better on balance to remove it. (The ovs-pki-cgi
705 program was not included in distribution packaging.)
341c4e59
BP
706 - ovsdb-server now enforces the immutability of immutable columns. This
707 was not enforced in earlier versions due to an oversight.
fd38af85
BP
708 - The following features are now deprecated. They will be removed no
709 earlier than February 2013. Please email dev@openvswitch.org with
710 concerns.
a8643e44 711 - Bridge compatibility.
fd38af85
BP
712 - Stable bond mode.
713 - The autopath action.
714 - Interface type "null".
715 - Numeric values for reserved ports (see "ovs-ofctl" note above).
85340733 716 - Tunnel Path MTU Discovery.
1280bf0e 717 - CAPWAP tunnel support.
f07ee64c
MM
718 - The data in the RARP packets can now be matched in the same way as the
719 data in ARP packets.
945cad7f 720
79f827fa 721
fdfe872d 722v1.8.0 - 26 Feb 2013
c8d5d22c 723------------------------
fdfe872d 724 *** Internal only release ***
c483d489 725 - New FAQ. Please send updates and additions!
f25d0cf3
BP
726 - Authors of controllers, please read the new section titled "Action
727 Reproduction" in DESIGN, which describes an Open vSwitch change in
728 behavior in corner cases that may affect some controllers.
2d8bdd8f
AA
729 - ovs-l3ping:
730 - A new test utility that can create L3 tunnel between two Open
731 vSwitches and detect connectivity issues.
5498c01f 732 - ovs-ofctl:
bdcc5925 733 - New --sort and --rsort options for "dump-flows" command.
5498c01f 734 - "mod-port" command can now control all OpenFlow config flags.
c08201d6 735 - OpenFlow:
ff0b06ee
BP
736 - Allow general bitwise masking for IPv4 and IPv6 addresses in
737 IPv4, IPv6, and ARP packets. (Previously, only CIDR masks
c08201d6
BP
738 were allowed.)
739 - Allow support for arbitrary Ethernet masks. (Previously, only
740 the multicast bit in the destination address could be individually
741 masked.)
969fc56c 742 - New field OXM_OF_METADATA, to align with OpenFlow 1.1.
0414d158
BP
743 - The OFPST_QUEUE request now reports an error if a specified port or
744 queue does not exist, or for requests for a specific queue on all
745 ports, if the specified queue does not exist on any port. (Previous
746 versions generally reported an empty set of results.)
2b07c8b1
BP
747 - New "flow monitor" feature to allow controllers to be notified of
748 flow table changes as they happen.
c93f9a78
EJ
749 - Additional protocols are not mirrored and dropped when forward-bpdu is
750 false. For a full list, see the ovs-vswitchd.conf.db man page.
38f7147c
EJ
751 - Open vSwitch now sends RARP packets in situations where it previously
752 sent a custom protocol, making it consistent with behavior of QEMU and
753 VMware.
969e46a2
AS
754 - All Open vSwitch programs and log files now show timestamps in UTC,
755 instead the local timezone, by default.
c8d5d22c
JP
756
757
3b4ab170 758v1.7.0 - 30 Jul 2012
dd1ba5b3 759------------------------
9b80f761
CW
760 - kernel modules are renamed. openvswitch_mod.ko is now
761 openvswitch.ko and brcompat_mod.ko is now brcompat.ko.
e9358af6 762 - Increased the number of NXM registers to 8.
22dd5cec 763 - Added ability to configure DSCP setting for manager and controller
f125905c
MM
764 connections. By default, these connections have a DSCP value of
765 Internetwork Control (0xc0).
3967a833
MM
766 - Added the granular link health statistics, 'cfm_health', to an
767 interface.
47284b1f
AA
768 - OpenFlow:
769 - Added support to mask nd_target for ICMPv6 neighbor discovery flows.
2be393ed
JP
770 - Added support for OpenFlow 1.3 port description (OFPMP_PORT_DESC)
771 multipart messages.
772 - ovs-ofctl:
773 - Added the "dump-ports-desc" command to retrieve port
774 information using the new port description multipart messages.
8d25d9a2
AA
775 - ovs-test:
776 - Added support for spawning ovs-test server from the client.
777 - Now ovs-test is able to automatically create test bridges and ports.
7393104d 778 - "ovs-dpctl dump-flows" now prints observed TCP flags in TCP flows.
22dd5cec 779 - Tripled flow setup performance.
a5f607bc
BP
780 - The "coverage/log" command previously available through ovs-appctl
781 has been replaced by "coverage/show". The new command replies with
782 coverage counter values, instead of logging them.
dd1ba5b3
JP
783
784
9d564cb2 785v1.6.1 - 25 Jun 2012
d0a8c2e0 786------------------------
9d564cb2
JP
787 - Allow OFPP_CONTROLLER as the in_port for packet-out messages.
788
789
790v1.6.0 - 24 Feb 2012
791------------------------
792 *** Internal only release ***
4df08875 793 - bonding
bdebeece
EJ
794 - LACP bonds no longer fall back to balance-slb when negotiations fail.
795 Instead they drop traffic.
4df08875
EJ
796 - The default bond_mode changed from SLB to active-backup, to protect
797 unsuspecting users from the significant risks of SLB bonds (which are
798 documented in vswitchd/INTERNALS).
bc1b010c
EJ
799 - Load balancing can be disabled by setting the bond-rebalance-interval
800 to zero.
73f33563
BP
801 - OpenFlow:
802 - Added support for bitwise matching on TCP and UDP ports.
803 See ovs-ofctl(8) for more information.
80d5aefd
BP
804 - NXM flow dumps now include times elapsed toward idle and hard
805 timeouts.
806 - Added an OpenFlow extension NXT_SET_ASYNC_CONFIG that allows
807 controllers more precise control over which OpenFlow messages they
808 receive asynchronously.
0e553d9c
BP
809 - New "fin_timeout" action.
810 - Added "fin_timeout" support to "learn" action.
a7349929
BP
811 - New Nicira action NXAST_CONTROLLER that offers additional features
812 over output to OFPP_CONTROLLER.
2c999774
BP
813 - When QoS settings for an interface do not configure a default queue
814 (queue 0), Open vSwitch now uses a default configuration for that
815 queue, instead of dropping all packets as in previous versions.
2a3e30b2
BP
816 - Logging:
817 - Logging to console and file will have UTC timestamp as a default for
818 all the daemons. An example of the default format is
819 2012-01-27T16:35:17Z. ovs-appctl can be used to change the default
820 format as before.
821 - The syntax of commands and options to set log levels was simplified,
822 to make it easier to remember.
254750ce
BP
823 - New support for limiting the number of flows in an OpenFlow flow
824 table, with configurable policy for evicting flows upon
825 overflow. See the Flow_Table table in ovs-vswitch.conf.db(5)
826 for more information.
9886b662
BP
827 - New "enable-async-messages" column in the Controller table. If set to
828 false, OpenFlow connections to the controller will initially have all
829 asynchronous messages disabled, overriding normal OpenFlow behavior.
1745cd08
BP
830 - ofproto-provider interface:
831 - "struct rule" has a new member "used" that ofproto implementations
832 should maintain by updating with ofproto_rule_update_used().
8f46c9bb
BP
833 - ovsdb-client:
834 - The new option --timestamp causes the "monitor" command to print
835 a timestamp with every update.
a7aa2d3c 836 - CFM module CCM broadcasts can now be tagged with an 802.1p priority.
d0a8c2e0
JP
837
838
a6492d91 839v1.5.0 - 01 Jun 2012
e68bfcfc 840------------------------
e729e793
JP
841 - OpenFlow:
842 - Added support for querying, modifying, and deleting flows
843 based on flow cookie when using NXM.
b4b7f827 844 - Added new NXM_PACKET_IN format.
f0fd1a17 845 - Added new NXAST_DEC_TTL action.
1eb85ef5
EJ
846 - ovs-ofctl:
847 - Added daemonization support to the monitor and snoop commands.
2a9537e2
BP
848 - ovs-vsctl:
849 - The "find" command supports new set relational operators
850 {=}, {!=}, {<}, {>}, {<=}, and {>=}.
e4476f74
BP
851 - ovsdb-tool now uses the typical database and schema installation
852 directories as defaults.
d1add61d
JP
853 - The default MAC learning timeout has been increased from 60 seconds
854 to 300 seconds. The MAC learning timeout is now configurable.
e68bfcfc
JP
855
856
ef13dc11 857v1.4.0 - 30 Jan 2012
b6a9a95b 858------------------------
50bf17cd 859 - Compatible with Open vSwitch kernel module included in Linux 3.3.
52a90c29
BP
860 - New "VLAN splinters" feature to work around buggy device drivers
861 in old Linux versions. (This feature is deprecated. When
862 broken device drivers are no longer in widespread use, we will
863 delete this feature.) See ovs-vswitchd.conf.db(5) for more
864 information.
fa8223b7
JP
865 - OpenFlow:
866 - Added ability to match on IPv6 flow label through NXM.
530180fd 867 - Added ability to match on ECN bits in IPv4 and IPv6 through NXM.
a61680c6 868 - Added ability to match on TTL in IPv4 and IPv6 through NXM.
530180fd 869 - Added ability to modify ECN bits in IPv4.
a61680c6 870 - Added ability to modify TTL in IPv4.
9d24de3b 871 - ovs-vswitchd:
c06bba01
JP
872 - Don't require the "normal" action to use mirrors. Traffic will
873 now be properly mirrored for any flows, regardless of their
874 actions.
9d24de3b 875 - Track packet and byte statistics sent on mirrors.
733adf2a
LG
876 - The sFlow implementation can now usually infer the correct agent
877 device instead of having to be told explicitly.
f0a3aa2e
AA
878 - ovs-appctl:
879 - New "fdb/flush" command to flush bridge's MAC learning table.
0be6140a
AA
880 - ovs-test:
881 - A new distributed testing tool that allows one to diagnose performance
882 and connectivity issues. This tool currently is not included in RH or
883 Xen packages.
0fb42626 884 - RHEL packaging now supports integration with Red Hat network scripts.
4c57c3bc
EJ
885 - bonding:
886 - Post 1.4.*, OVS will be changing the default bond mode from balance-slb
887 to active-backup. SLB bonds carry significant risks with them
888 (documented vswitchd/INTERNALS) which we want to prevent unsuspecting
889 users from running into. Users are advised to update any scripts or
890 configuration which may be negatively impacted by explicitly setting
891 the bond mode which they want to use.
b6a9a95b 892
0be6140a 893
ddc29387 894v1.3.0 - 09 Dec 2011
3e60856b 895------------------------
f694937d
EJ
896 - OpenFlow:
897 - Added an OpenFlow extension which allows the "output" action to accept
898 NXM fields.
75a75043 899 - Added an OpenFlow extension for flexible learning.
d2c0fed9 900 - Bumped number of NXM registers from four to five.
d5e1e5ed 901 - ovs-appctl:
ae75dae3
JP
902 - New "version" command to determine version of running daemon.
903 - If no argument is provided for "cfm/show", displays detailed
904 information about all interfaces with CFM enabled.
5dab8ece
JP
905 - If no argument is provided for "lacp/show", displays detailed
906 information about all ports with LACP enabled.
10500639
BP
907 - ovs-dpctl:
908 - New "set-if" command to modify a datapath port's configuration.
29901626
BP
909 - ovs-vswitchd:
910 - The software switch now supports 255 OpenFlow tables, instead
911 of just one. By default, only table 0 is consulted, but the
912 new NXAST_RESUBMIT_TABLE action can look up in additional
913 tables. Tables 128 and above are reserved for use by the
914 switch itself; please use only tables 0 through 127.
21f7563c 915 - Add support for 802.1D spanning tree (STP).
7257b535
BP
916 - Fragment handling extensions:
917 - New OFPC_FRAG_NX_MATCH fragment handling mode, in which L4
918 fields are made available for matching in fragments with
919 offset 0.
920 - New NXM_NX_IP_FRAG match field for matching IP fragments (usable
921 via "ip_frag" in ovs-ofctl).
922 - New ovs-ofctl "get-frags" and "set-frags" commands to get and set
923 fragment handling policy.
2f4bc10d
BP
924 - CAPWAP tunneling now supports an extension to transport a 64-bit key.
925 By default it remains compatible with the old version and other
c87112ca 926 standards-based implementations.
17411ecf
JG
927 - Flow setups are now processed in a round-robin manner across ports
928 to prevent any single client from monopolizing the CPU and conducting
929 a denial of service attack.
ecac4ebf
BP
930 - Added support for native VLAN tagging. A new "vlan_mode"
931 parameter can be set for "port". Possible values: "access",
932 "trunk", "native-tagged" and "native-untagged".
023e1e0a 933 - test-openflowd has been removed. Please use ovs-vswitchd instead.
3e60856b 934
5e9c5b61 935v1.2.0 - 03 Aug 2011
b78f6b77 936------------------------
1a142ced
JP
937 - New "ofproto" abstraction layer to ease porting to hardware
938 switching ASICs.
939 - Packaging for Red Hat Enterprise Linux 5.6 and 6.0.
940 - Datapath support for Linux kernels up to 3.0.
941 - OpenFlow:
942 - New "bundle" and "bundle_load" action extensions.
943 - Database:
944 - Implement table unique constraints.
945 - Support cooperative locking between callers.
946 - ovs-dpctl:
947 - New "-s" option for "show" command prints packet and byte
948 counters for each port.
c4ea79bf
BP
949 - ovs-ofctl:
950 - New "--readd" option for "replace-flows".
9b1735a7
BP
951 - ovs-vsctl:
952 - New "show" command to print an overview of configuration.
1a142ced 953 - New "comment" command to add remark that explains intentions.
2b01925c 954 - ovs-brcompatd has been rewritten to fix long-standing bugs.
045b2e5c
BP
955 - ovs-openflowd has been renamed test-openflowd and moved into the
956 tests directory. Its presence confused too many users. Please
957 use ovs-vswitchd instead.
1a142ced
JP
958 - New ovs-benchmark utility to test flow setup performance.
959 - A new log level "off" has been added. Configuring a log facility
960 "off" prevents any messages from being logged to it. Previously,
961 "emer" was effectively "off" because no messages were ever logged at
962 level "emer". Now, errors that cause a process to exit are logged
963 at "emer" level.
8a2d6596
BP
964 - "configure" option --with-l26 has been renamed --with-linux, and
965 --with-l26-source has been renamed --with-linux-source. The old
966 names will be removed after the next release, so please update
967 your scripts.
22bcc0e7
JG
968 - The "-2.6" suffix has been dropped from the datapath/linux-2.6 and
969 datapath/linux-2.6/compat-2.6 directories.
b78f6b77
BP
970 - Feature removals:
971 - Dropped support for "tun_id_from_cookie" OpenFlow extension.
0be6140a 972 Please use the extensible match extensions instead.
93b8df38
EJ
973 - Removed the Maintenance_Point and Monitor tables in an effort
974 to simplify 802.1ag configuration.
1a142ced
JP
975 - Performance and scalability improvements
976 - Bug fixes
b78f6b77 977
d4da3acc
JP
978v1.1.0 - 05 Apr 2011
979------------------------
980 - Ability to define policies over IPv6
981 - LACP
982 - 802.1ag CCM
983 - Support for extensible match extensions to OpenFlow
984 - QoS:
985 - Support for HFSC qdisc.
986 - Queue used by in-band control can now be configured.
987 - Kernel:
988 - Kernel<->userspace interface has been reworked and should be
989 close to a stable ABI now.
990 - "Port group" concept has been dropped.
991 - GRE over IPSEC tunnels
992 - Bonding:
993 - New active backup bonding mode.
994 - New L4 hashing support when LACP is enabled.
995 - Source MAC hash now includes VLAN field also.
996 - miimon support.
997 - Greatly improved handling of large flow tables
998 - ovs-dpctl:
999 - "show" command now prints full vport configuration.
1000 - "dump-groups" command removed since kernel support for
1001 port groups was dropped.
1002 - ovs-vsctl:
1003 - New commands for working with the new Managers table.
1004 - "list" command enhanced with new formatting options and --columns
1005 option.
1006 - "get" command now accepts new --id option.
1007 - New "find" command.
1008 - ovs-ofctl:
1009 - New "queue-stats" command for printing queue stats.
1010 - New commands "replace-flows" and "diff-flows".
1011 - Commands to add and remove flows can now read from files.
1012 - New --flow-format option to enable or disable NXM.
1013 - New --more option to increase OpenFlow message verbosity.
1014 - Removed "tun-cookie" command, which is no longer useful.
1015 - ovs-controller enhancements for testing various features.
1016 - New ovs-vlan-test command for testing for Linux kernel driver VLAN
1017 bugs. New ovs-vlan-bug-workaround command for enabling and
1018 disabling a workaround for these driver bugs.
1019 - OpenFlow support:
35d25d44 1020 - "Resubmit" actions now update flow statistics.
d4da3acc
JP
1021 - New "register" extension for use in matching and actions, via NXM.
1022 - New "multipath" experimental action extension.
1023 - New support for matching multicast Ethernet frames, via NXM.
1024 - New extension for OpenFlow vendor error codes.
1025 - New extension to set the QoS output queue without actually
1026 sending to an output port.
1027 - Open vSwitch now reports a single flow table, instead of
1028 separate hash and wildcard tables. This better models the
1029 current implementation.
1030 - New experimental "note" action.
1031 - New "ofproto/trace" ovs-appctl command and associated utilities
1032 to ease debugging complex flow tables.
1033 - Database:
1034 - Schema documentation now includes an entity-relationship diagram.
1035 - The database is now garbage collected. In most tables,
1036 unreferenced rows will be deleted automatically.
1037 - Many tables now include statistics updated periodically by
1038 ovs-vswitchd or ovsdb-server.
1039 - Every table now has an "external-ids" column for use by OVS
1040 integrators.
1041 - There is no default controller anymore. Each bridge must have its
1042 controller individually specified.
1043 - The "fail-mode" is now a property of a Bridge instead of a Controller.
1044 - New versioning and checksum features.
1045 - New Managers table and manager_options column in Open_vSwitch table
1046 for specifying managers. The old "managers" column in the
1047 Open_vSwitch table has been removed.
1048 - Many "name" columns are now immutable.
1049 - Feature removals:
1050 - Dropped support for XenServer pre-5.6.100.
1051 - Dropped support for Linux pre-2.6.18.
1052 - Dropped controller discovery support.
1053 - Dropped "ovs-ofctl status" and the OpenFlow extension that it used.
1054 Statistics reporting in the database is a rough equivalent.
1055 - Dropped the "corekeeper" package (now separate, at
1056 http://openvswitch.org/cgi-bin/gitweb.cgi?p=corekeeper).
1057 - Performance and scalability improvements
1058 - Bug fixes
1059
d5905136
JP
1060v1.1.0pre2 - 13 Sep 2010
1061------------------------
1062 - Bug fixes
1063
fdf20378
JP
1064v1.1.0pre1 - 31 Aug 2010
1065------------------------
476d56f5
JP
1066 - OpenFlow 1.0 slicing (QoS) functionality
1067 - Python bindings for configuration database (no write support)
1068 - Performance and scalability improvements
1069 - Bug fixes
1070
b9b0865a
JP
1071v1.0.1 - 31 May 2010
1072--------------------
1073 - New "patch" interface type
1074 - Bug fixes
1075
7c284ac4
JP
1076v1.0.0 - 15 May 2010
1077--------------------
1078 - Configuration database with remote management
1079 - OpenFlow 1.0
1080 - GRE tunneling
1081 - Support for XenServer 5.5 and 5.6
1082 - Performance and scalability improvements
1083 - Bug fixes
1084
2f0a1f42
JP
1085v0.99.2 - 18 Feb 2010
1086---------------------
1087 - Bug fixes
1088
b84a0589
JP
1089v0.99.1 - 25 Jan 2010
1090---------------------
1091 - Add support for sFlow(R)
1092 - Make headers compatible with C++
1093 - Bug fixes
1094
b7f22a6a
JP
1095v0.99.0 - 14 Jan 2010
1096---------------------
1097 - User-space forwarding engine
1098 - Bug fixes
35d25d44 1099
6d735676
JP
1100v0.90.7 - 29 Nov 2009
1101---------------------
1102 - Add support for NetFlow active timeouts
1103 - Bug fixes
b7f22a6a 1104
ef5925df
JP
1105v0.90.6 - 6 Oct 2009
1106--------------------
1107 - Bug fixes
1108
3c708eb8 1109v0.90.5 - 21 Sep 2009
30ee1c4d
JP
1110---------------------
1111 - Generalize in-band control to more diverse network setups
1112 - Bug fixes