]>
Commit | Line | Data |
---|---|---|
1 | Post-v2.3.0 | |
2 | --------------------- | |
3 | - Added support for SFQ, FQ_CoDel and CoDel qdiscs. | |
4 | - Add bash command-line completion support for ovs-vsctl Please check | |
5 | utilities/ovs-command-compgen.INSTALL.md for how to use. | |
6 | - The MAC learning feature now includes per-port fairness to mitigate | |
7 | MAC flooding attacks. | |
8 | - New support for a "conjunctive match" OpenFlow extension, which | |
9 | allows constructing OpenFlow matches of the form "field1 in | |
10 | {a,b,c...} AND field2 in {d,e,f...}" and generalizations. For details, | |
11 | see documentation for the "conjunction" action in ovs-ofctl(8). | |
12 | - Add bash command-line completion support for ovs-appctl/ovs-dpctl/ | |
13 | ovs-ofctl/ovsdb-tool commands. Please check | |
14 | utilities/ovs-command-compgen.INSTALL.md for how to use. | |
15 | - The "learn" action supports a new flag "delete_learned" that causes | |
16 | the learned flows to be deleted when the flow with the "learn" action | |
17 | is deleted. | |
18 | - Basic support for the Geneve tunneling protocol. It is not yet | |
19 | possible to generate or match options. This is planned for a future | |
20 | release. The protocol is documented at | |
21 | http://tools.ietf.org/html/draft-gross-geneve-00 | |
22 | - The OVS database now reports controller rate limiting statistics. | |
23 | - sflow now exports information about LACP-based bonds, port names, and | |
24 | OpenFlow port numbers, as well as datapath performance counters. | |
25 | - ovs-dpctl functionality is now available for datapaths integrated | |
26 | into ovs-vswitchd, via ovs-appctl. Some existing ovs-appctl | |
27 | commands are now redundant and will be removed in a future | |
28 | release. See ovs-vswitchd(8) for details. | |
29 | - OpenFlow: | |
30 | * IPv6 flow label and neighbor discovery fields are now modifiable. | |
31 | * OpenFlow 1.5 extended registers are now supported. | |
32 | * The OpenFlow 1.5 actset_output field is now supported. | |
33 | * OpenFlow 1.5 Copy-Field action is now supported. | |
34 | * OpenFlow 1.5 masked Set-Field action is now supported. | |
35 | * OpenFlow 1.3+ table features requests are now supported (read-only). | |
36 | * Nicira extension "move" actions may now be included in action sets. | |
37 | * "resubmit" actions may now be included in action sets. The resubmit | |
38 | is executed last, and only if the action set has no "output" or "group" | |
39 | action. | |
40 | * OpenFlow 1.4+ flow "importance" is now maintained in the flow table. | |
41 | * A new Netronome extension to OpenFlow 1.5+ allows control over the | |
42 | fields hashed for OpenFlow select groups. See "selection_method" and | |
43 | related options in ovs-ofctl(8) for details. | |
44 | - ovs-pki: Changed message digest algorithm from MD5 to SHA-1 because | |
45 | MD5 is no longer secure and some operating systems have started to disable | |
46 | it in OpenSSL. | |
47 | - ovsdb-server: New OVSDB protocol extension allows inequality tests on | |
48 | "optional scalar" columns. See ovsdb-server(1) for details. | |
49 | - ovs-vsctl now permits immutable columns in a new row to be modified in | |
50 | the same transaction that creates the row. | |
51 | - test-controller has been renamed ovs-testcontroller at request of users | |
52 | who find it useful for testing basic OpenFlow setups. It is still not | |
53 | a necessary or desirable part of most Open vSwitch deployments. | |
54 | - Support for travis-ci.org based continuous integration builds has been | |
55 | added. Build failures are reported to build@openvswitch.org. See INSTALL.md | |
56 | file for additional details. | |
57 | - Support for the Rapid Spanning Tree Protocol (IEEE 802.1D-2004). | |
58 | The implementation has been tested successfully against the Ixia Automated | |
59 | Network Validation Library (ANVL). | |
60 | - Stats are no longer updated on fake bond interface. | |
61 | - Keep active bond slave selection across OVS restart. | |
62 | - A simple wrapper script, 'ovs-docker', to integrate OVS with Docker | |
63 | containers. If and when there is a native integration of Open vSwitch | |
64 | with Docker, the wrapper script will be retired. | |
65 | - Added support for DPDK Tunneling. VXLAN and GRE are supported protocols. | |
66 | This is generic tunneling mechanism for userspace datapath. | |
67 | - Support for multicast snooping (IGMPv1 and IGMPv2) | |
68 | - Support for Linux kernels up to 3.19.x | |
69 | - The documentation now use the term 'destination' to mean one of syslog, | |
70 | console or file for vlog logging instead of the previously used term | |
71 | 'facility'. | |
72 | - Support for VXLAN Group Policy extension | |
73 | - Initial support for the IETF Auto-Attach SPBM draft standard. This | |
74 | contains rudimentary support for the LLDP protocol as needed for | |
75 | Auto-Attach. | |
76 | - The default OpenFlow and OVSDB ports are now the IANA-assigned | |
77 | numbers. OpenFlow is 6653 and OVSDB is 6640. | |
78 | - Support for DPDK vHost. | |
79 | - Support for outer UDP checksums in Geneve and VXLAN. | |
80 | ||
81 | ||
82 | v2.3.0 - 14 Aug 2014 | |
83 | --------------------- | |
84 | - OpenFlow 1.1, 1.2, and 1.3 are now enabled by default in | |
85 | ovs-vswitchd. | |
86 | - Linux kernel datapath now has an exact match cache optimizing the | |
87 | flow matching process. | |
88 | - Datapath flows now have partially wildcarded tranport port field | |
89 | matches. This reduces userspace upcalls, but increases the | |
90 | number of different masks in the datapath. The kernel datapath | |
91 | exact match cache removes the overhead of matching the incoming | |
92 | packets with the larger number of masks, but when paired with an | |
93 | older kernel module, some workloads may perform worse with the | |
94 | new userspace. | |
95 | - Compatibility with autoconf 2.63 (previously >=2.64) | |
96 | ||
97 | v2.2.0 - Internal Release | |
98 | --------------------- | |
99 | - Internal ports are no longer brought up by default, because it | |
100 | should be an administrator task to bring up devices as they are | |
101 | configured properly. | |
102 | - ovs-vsctl now reports when ovs-vswitchd fails to create a new port or | |
103 | bridge. | |
104 | - Port creation and configuration errors are now stored in a new error | |
105 | column of the Interface table and included in 'ovs-vsctl show'. | |
106 | - The "ovsdbmonitor" graphical tool has been removed, because it was | |
107 | poorly maintained and not widely used. | |
108 | - New "check-ryu" Makefile target for running Ryu tests for OpenFlow | |
109 | controllers against Open vSwitch. See INSTALL.md for details. | |
110 | - Added IPFIX support for SCTP flows and templates for ICMPv4/v6 flows. | |
111 | - Upon the receipt of a SIGHUP signal, ovs-vswitchd no longer reopens its | |
112 | log file (it will terminate instead). Please use 'ovs-appctl vlog/reopen' | |
113 | instead. | |
114 | - Support for Linux kernels up to 3.14. From Kernel 3.12 onwards OVS uses | |
115 | tunnel API for GRE and VXLAN. | |
116 | - Added DPDK support. | |
117 | - Added support for custom vlog patterns in Python | |
118 | ||
119 | ||
120 | v2.1.0 - 19 Mar 2014 | |
121 | --------------------- | |
122 | - Address prefix tracking support for flow tables. New columns | |
123 | "prefixes" in OVS-DB table "Flow_Table" controls which packet | |
124 | header fields are used for address prefix tracking. Prefix | |
125 | tracking allows the classifier to skip rules with longer than | |
126 | necessary prefixes, resulting in better wildcarding for datapath | |
127 | flows. Default configuration is to not use any fields for prefix | |
128 | tracking. However, if any flow tables contain both exact matches | |
129 | and masked matches for IP address fields, OVS performance may be | |
130 | increased by using this feature. | |
131 | * As of now, the fields for which prefix lookup can be enabled | |
132 | are: 'tun_id', 'tun_src', 'tun_dst', 'nw_src', 'nw_dst' (or | |
133 | aliases 'ip_src' and 'ip_dst'), 'ipv6_src', and 'ipv6_dst'. | |
134 | (Using this feature for 'tun_id' would only make sense if the | |
135 | tunnel IDs have prefix structure similar to IP addresses.) | |
136 | * There is a maximum number of fields that can be enabled for any | |
137 | one flow table. Currently this limit is 3. | |
138 | * Examples: | |
139 | $ ovs-vsctl set Bridge br0 flow_tables:0=@N1 -- \ | |
140 | --id=@N1 create Flow_Table name=table0 | |
141 | $ ovs-vsctl set Bridge br0 flow_tables:1=@N1 -- \ | |
142 | --id=@N1 create Flow_Table name=table1 | |
143 | $ ovs-vsctl set Flow_Table table0 prefixes=ip_dst,ip_src | |
144 | $ ovs-vsctl set Flow_Table table1 prefixes=[] | |
145 | - TCP flags matching: OVS now supports matching of TCP flags. This | |
146 | has an adverse performance impact when using OVS userspace 1.10 | |
147 | or older (no megaflows support) together with the new OVS kernel | |
148 | module. It is recommended that the kernel and userspace modules | |
149 | both are upgraded at the same time. | |
150 | - The default OpenFlow and OVSDB ports will change to | |
151 | IANA-assigned numbers in a future release. Consider updating | |
152 | your installations to specify port numbers instead of using the | |
153 | defaults. | |
154 | - OpenFlow: | |
155 | * The OpenFlow 1.1+ "Write-Actions" instruction is now supported. | |
156 | * OVS limits the OpenFlow port numbers it assigns to port 32767 and | |
157 | below, leaving port numbers above that range free for assignment | |
158 | by the controller. | |
159 | * ovs-vswitchd now honors changes to the "ofport_request" column | |
160 | in the Interface table by changing the port's OpenFlow port | |
161 | number. | |
162 | * The Open vSwitch software switch now supports OpenFlow groups. | |
163 | - ovs-vswitchd.conf.db.5 man page will contain graphviz/dot | |
164 | diagram only if graphviz package was installed at the build time. | |
165 | - Support for Linux kernels up to 3.11 | |
166 | - ovs-dpctl: | |
167 | The "show" command also displays mega flow mask stats. | |
168 | - ovs-ofctl: | |
169 | * New command "ofp-parse-pcap" to dump OpenFlow from PCAP files. | |
170 | - ovs-controller has been renamed test-controller. It is no longer | |
171 | packaged or installed by default, because too many users assumed | |
172 | incorrectly that ovs-controller was a necessary or desirable part | |
173 | of an Open vSwitch deployment. | |
174 | - Added vlog option to export to a UDP syslog sink. | |
175 | - ovsdb-client: | |
176 | * The "monitor" command can now monitor all tables in a database, | |
177 | instead of being limited to a single table. | |
178 | - The flow-eviction-threshold has been replaced by the flow-limit which is a | |
179 | hard limit on the number of flows in the datapath. It defaults to 200,000 | |
180 | flows. OVS automatically adjusts this number depending on network | |
181 | conditions. | |
182 | - Added IPv6 support for active and passive socket communications. | |
183 | ||
184 | ||
185 | v2.0.0 - 15 Oct 2013 | |
186 | --------------------- | |
187 | - The ovs-vswitchd process is no longer single-threaded. Multiple | |
188 | threads are now used to handle flow set up and asynchronous | |
189 | logging. | |
190 | - OpenFlow: | |
191 | * Experimental support for OpenFlow 1.1 (in addition to 1.2 and | |
192 | 1.3, which had experimental support in 1.10). | |
193 | * Experimental protocol support for OpenFlow 1.1+ groups. This | |
194 | does not yet include an implementation in the Open vSwitch | |
195 | software switch. | |
196 | * Experimental protocol support for OpenFlow 1.2+ meters. This | |
197 | does not yet include an implementation in the Open vSwitch | |
198 | software switch. | |
199 | * New support for matching outer source and destination IP address | |
200 | of tunneled packets, for tunnel ports configured with the newly | |
201 | added "remote_ip=flow" and "local_ip=flow" options. | |
202 | * Support for matching on metadata 'pkt_mark' for interacting with | |
203 | other system components. On Linux this corresponds to the skb | |
204 | mark. | |
205 | * Support matching, rewriting SCTP ports | |
206 | - The Interface table in the database has a new "ifindex" column to | |
207 | report the interface's OS-assigned ifindex. | |
208 | - New "check-oftest" Makefile target for running OFTest against Open | |
209 | vSwitch. See README-OFTest for details. | |
210 | - The flow eviction threshold has been moved to the Open_vSwitch table. | |
211 | - Database names are now mandatory when specifying ovsdb-server options | |
212 | through database paths (e.g. Private key option with the database name | |
213 | should look like "--private-key=db:Open_vSwitch,SSL,private_key"). | |
214 | - Added ovs-dev.py, a utility script helpful for Open vSwitch developers. | |
215 | - Support for Linux kernels up to 3.10 | |
216 | - ovs-ofctl: | |
217 | * New "ofp-parse" for printing OpenFlow messages read from a file. | |
218 | * New commands for OpenFlow 1.1+ groups. | |
219 | - Added configurable flow caching support to IPFIX exporter. | |
220 | - Dropped support for Linux pre-2.6.32. | |
221 | - Log file timestamps and ovsdb commit timestamps are now reported | |
222 | with millisecond resolution. (Previous versions only reported | |
223 | whole seconds.) | |
224 | ||
225 | ||
226 | v1.11.0 - 28 Aug 2013 | |
227 | --------------------- | |
228 | - Support for megaflows, which allows wildcarding in the kernel (and | |
229 | any dpif implementation that supports wildcards). Depending on | |
230 | the flow table and switch configuration, flow set up rates are | |
231 | close to the Linux bridge. | |
232 | - The "tutorial" directory contains a new tutorial for some advanced | |
233 | Open vSwitch features. | |
234 | - Stable bond mode has been removed. | |
235 | - The autopath action has been removed. | |
236 | - New support for the data encapsulation format of the LISP tunnel | |
237 | protocol (RFC 6830). An external control plane or manual flow | |
238 | setup is required for EID-to-RLOC mapping. | |
239 | - OpenFlow: | |
240 | * The "dec_mpls_ttl" and "set_mpls_ttl" actions from OpenFlow | |
241 | 1.1 and later are now implemented. | |
242 | * New "stack" extension for use in actions, to push and pop from | |
243 | NXM fields. | |
244 | * The "load" and "set_field" actions can now modify the "in_port". (This | |
245 | allows one to enable output to a flow's input port by setting the | |
246 | in_port to some unused value, such as OFPP_NONE.) | |
247 | - ovs-dpctl: | |
248 | * New debugging commands "add-flow", "mod-flow", "del-flow". | |
249 | * "dump-flows" now has a -m option to increase output verbosity. | |
250 | - In dpif-based bridges, cache action translations, which can improve | |
251 | flow set up performance by 80% with a complicated flow table. | |
252 | - New syslog format, prefixed with "ovs|", to be easier to filter. | |
253 | - RHEL: Removes the default firewall rule that allowed GRE traffic to | |
254 | pass through. Any users that relied on this automatic firewall hole | |
255 | will have to manually configure it. The ovs-ctl(8) manpage documents | |
256 | the "enable-protocol" command that can be used as an alternative. | |
257 | - New CFM demand mode which uses data traffic to indicate interface | |
258 | liveness. | |
259 | ||
260 | v1.10.0 - 01 May 2013 | |
261 | --------------------- | |
262 | - Bridge compatibility support has been removed. Any uses that | |
263 | rely on ovs-brcompatd will have to stick with Open vSwitch 1.9.x | |
264 | or adapt to native Open vSwitch support (e.g. use ovs-vsctl instead | |
265 | of brctl). | |
266 | - The maximum size of the MAC learning table is now configurable. | |
267 | - With the Linux datapath, packets for new flows are now queued | |
268 | separately on a per-port basis, so it should no longer be | |
269 | possible for a large number of new flows arriving on one port to | |
270 | prevent new flows from being processed on other ports. | |
271 | - ovs-vsctl: | |
272 | * Previously ovs-vsctl would retry connecting to the database forever, | |
273 | causing it to hang if ovsdb-server was not running. Now, ovs-vsctl | |
274 | only tries once by default (use --retry to try forever). This change | |
275 | means that you may want to remove uses of --timeout to avoid hangs | |
276 | in ovs-vsctl calls. | |
277 | * Many "ovs-vsctl" database commands now accept an --if-exists option. | |
278 | Please refer to the ovs-vsctl manpage for details. | |
279 | - OpenFlow: | |
280 | - Experimental support for newer versions of OpenFlow. See | |
281 | the "What versions of OpenFlow does Open vSwitch support?" | |
282 | question in the FAQ for more details. | |
283 | - The OpenFlow "dp_desc" may now be configured by setting the | |
284 | value of other-config:dp-desc in the Bridge table. | |
285 | - It is possible to request the OpenFlow port number with the | |
286 | "ofport_request" column in the Interface table. | |
287 | - The NXM flow_removed message now reports the OpenFlow table ID | |
288 | from which the flow was removed. | |
289 | - Tunneling: | |
290 | - New support for the VXLAN tunnel protocol (see the IETF draft here: | |
291 | http://tools.ietf.org/html/draft-mahalingam-dutt-dcops-vxlan-03). | |
292 | - Tunneling requires the version of the kernel module paired with | |
293 | Open vSwitch 1.9.0 or later. | |
294 | - Inheritance of the Don't Fragment bit in IP tunnels (df_inherit) | |
295 | is no longer supported. | |
296 | - Path MTU discovery is no longer supported. | |
297 | - CAPWAP tunneling support removed. | |
298 | - Tunnels with multicast destination ports are no longer supported. | |
299 | - ovs-dpctl: | |
300 | - The "dump-flows" and "del-flows" no longer require an argument | |
301 | if only one datapath exists. | |
302 | - ovs-appctl: | |
303 | - New "vlog/disable-rate-limit" and "vlog/enable-rate-limit" | |
304 | commands available allow control over logging rate limits. | |
305 | - New "dpif/dump-dps", "dpif/show", and "dpif/dump-flows" command | |
306 | that mimic the equivalent ovs-dpctl commands. | |
307 | - The ofproto library is now responsible for assigning OpenFlow port | |
308 | numbers. An ofproto implementation should assign them when | |
309 | port_construct() is called. | |
310 | - All dpif-based bridges of a particular type share a common | |
311 | datapath called "ovs-<type>", e.g. "ovs-system". The ovs-dpctl | |
312 | commands will now return information on that shared datapath. To | |
313 | get the equivalent bridge-specific information, use the new | |
314 | "ovs-appctl dpif/*" commands. | |
315 | - Backward-incompatible changes: | |
316 | - Earlier Open vSwitch versions treated ANY as a wildcard in flow | |
317 | syntax. OpenFlow 1.1 adds a port named ANY, which introduces a | |
318 | conflict. ANY was rarely used in flow syntax, so we chose to | |
319 | retire that meaning of ANY in favor of the OpenFlow 1.1 meaning. | |
320 | - Patch ports no longer require kernel support, so they now work | |
321 | with FreeBSD and the kernel module built into Linux 3.3 and later. | |
322 | - New "sample" action. | |
323 | ||
324 | ||
325 | v1.9.0 - 26 Feb 2013 | |
326 | ------------------------ | |
327 | - Datapath: | |
328 | - Support for ipv6 set action. | |
329 | - SKB mark matching and setting. | |
330 | - support for Linux kernels up to 3.8 | |
331 | - FreeBSD is now a supported platform, thanks to code contributions from | |
332 | Gaetano Catalli, Ed Maste, and Giuseppe Lettieri. | |
333 | - ovs-bugtool: New --ovs option to report only OVS related information. | |
334 | - New %t and %T log escapes to identify the subprogram within a | |
335 | cooperating group of processes or threads that emitted a log message. | |
336 | The default log patterns now include this information. | |
337 | - OpenFlow: | |
338 | - Allow bitwise masking for SHA and THA fields in ARP, SLL and TLL | |
339 | fields in IPv6 neighbor discovery messages, and IPv6 flow label. | |
340 | - Adds support for writing to the metadata field for a flow. | |
341 | - Tunneling: | |
342 | - The tunneling code no longer assumes input and output keys are | |
343 | symmetric. If they are not, PMTUD needs to be disabled for | |
344 | tunneling to work. Note this only applies to flow-based keys. | |
345 | - New support for a nonstandard form of GRE that supports a 64-bit key. | |
346 | - Tunnel Path MTU Discovery default value was set to 'disabled'. | |
347 | This feature is deprecated and will be removed soon. | |
348 | - Tunnel header caching removed. | |
349 | - ovs-ofctl: | |
350 | - Commands and actions that accept port numbers now also accept keywords | |
351 | that represent those ports (such as LOCAL, NONE, and ALL). This is | |
352 | also the recommended way to specify these ports, for compatibility | |
353 | with OpenFlow 1.1 and later (which use the OpenFlow 1.0 numbers | |
354 | for these ports for different purposes). | |
355 | - ovs-dpctl: | |
356 | - Support requesting the port number with the "port_no" option in | |
357 | the "add-if" command. | |
358 | - ovs-pki: The "online PKI" features have been removed, along with | |
359 | the ovs-pki-cgi program that facilitated it, because of some | |
360 | alarmist insecurity claims. We do not believe that these claims | |
361 | are true, but because we do not know of any users for this | |
362 | feature it seems better on balance to remove it. (The ovs-pki-cgi | |
363 | program was not included in distribution packaging.) | |
364 | - ovsdb-server now enforces the immutability of immutable columns. This | |
365 | was not enforced in earlier versions due to an oversight. | |
366 | - The following features are now deprecated. They will be removed no | |
367 | earlier than February 2013. Please email dev@openvswitch.org with | |
368 | concerns. | |
369 | - Bridge compatibility. | |
370 | - Stable bond mode. | |
371 | - The autopath action. | |
372 | - Interface type "null". | |
373 | - Numeric values for reserved ports (see "ovs-ofctl" note above). | |
374 | - Tunnel Path MTU Discovery. | |
375 | - CAPWAP tunnel support. | |
376 | - The data in the RARP packets can now be matched in the same way as the | |
377 | data in ARP packets. | |
378 | ||
379 | ||
380 | v1.8.0 - 26 Feb 2013 | |
381 | ------------------------ | |
382 | *** Internal only release *** | |
383 | - New FAQ. Please send updates and additions! | |
384 | - Authors of controllers, please read the new section titled "Action | |
385 | Reproduction" in DESIGN, which describes an Open vSwitch change in | |
386 | behavior in corner cases that may affect some controllers. | |
387 | - ovs-l3ping: | |
388 | - A new test utility that can create L3 tunnel between two Open | |
389 | vSwitches and detect connectivity issues. | |
390 | - ovs-ofctl: | |
391 | - New --sort and --rsort options for "dump-flows" command. | |
392 | - "mod-port" command can now control all OpenFlow config flags. | |
393 | - OpenFlow: | |
394 | - Allow general bitwise masking for IPv4 and IPv6 addresses in | |
395 | IPv4, IPv6, and ARP packets. (Previously, only CIDR masks | |
396 | were allowed.) | |
397 | - Allow support for arbitrary Ethernet masks. (Previously, only | |
398 | the multicast bit in the destination address could be individually | |
399 | masked.) | |
400 | - New field OXM_OF_METADATA, to align with OpenFlow 1.1. | |
401 | - The OFPST_QUEUE request now reports an error if a specified port or | |
402 | queue does not exist, or for requests for a specific queue on all | |
403 | ports, if the specified queue does not exist on any port. (Previous | |
404 | versions generally reported an empty set of results.) | |
405 | - New "flow monitor" feature to allow controllers to be notified of | |
406 | flow table changes as they happen. | |
407 | - Additional protocols are not mirrored and dropped when forward-bpdu is | |
408 | false. For a full list, see the ovs-vswitchd.conf.db man page. | |
409 | - Open vSwitch now sends RARP packets in situations where it previously | |
410 | sent a custom protocol, making it consistent with behavior of QEMU and | |
411 | VMware. | |
412 | - All Open vSwitch programs and log files now show timestamps in UTC, | |
413 | instead the local timezone, by default. | |
414 | ||
415 | ||
416 | v1.7.0 - 30 Jul 2012 | |
417 | ------------------------ | |
418 | - kernel modules are renamed. openvswitch_mod.ko is now | |
419 | openvswitch.ko and brcompat_mod.ko is now brcompat.ko. | |
420 | - Increased the number of NXM registers to 8. | |
421 | - Added ability to configure DSCP setting for manager and controller | |
422 | connections. By default, these connections have a DSCP value of | |
423 | Internetwork Control (0xc0). | |
424 | - Added the granular link health statistics, 'cfm_health', to an | |
425 | interface. | |
426 | - OpenFlow: | |
427 | - Added support to mask nd_target for ICMPv6 neighbor discovery flows. | |
428 | - Added support for OpenFlow 1.3 port description (OFPMP_PORT_DESC) | |
429 | multipart messages. | |
430 | - ovs-ofctl: | |
431 | - Added the "dump-ports-desc" command to retrieve port | |
432 | information using the new port description multipart messages. | |
433 | - ovs-test: | |
434 | - Added support for spawning ovs-test server from the client. | |
435 | - Now ovs-test is able to automatically create test bridges and ports. | |
436 | - "ovs-dpctl dump-flows" now prints observed TCP flags in TCP flows. | |
437 | - Tripled flow setup performance. | |
438 | - The "coverage/log" command previously available through ovs-appctl | |
439 | has been replaced by "coverage/show". The new command replies with | |
440 | coverage counter values, instead of logging them. | |
441 | ||
442 | ||
443 | v1.6.1 - 25 Jun 2012 | |
444 | ------------------------ | |
445 | - Allow OFPP_CONTROLLER as the in_port for packet-out messages. | |
446 | ||
447 | ||
448 | v1.6.0 - 24 Feb 2012 | |
449 | ------------------------ | |
450 | *** Internal only release *** | |
451 | - bonding | |
452 | - LACP bonds no longer fall back to balance-slb when negotiations fail. | |
453 | Instead they drop traffic. | |
454 | - The default bond_mode changed from SLB to active-backup, to protect | |
455 | unsuspecting users from the significant risks of SLB bonds (which are | |
456 | documented in vswitchd/INTERNALS). | |
457 | - Load balancing can be disabled by setting the bond-rebalance-interval | |
458 | to zero. | |
459 | - OpenFlow: | |
460 | - Added support for bitwise matching on TCP and UDP ports. | |
461 | See ovs-ofctl(8) for more information. | |
462 | - NXM flow dumps now include times elapsed toward idle and hard | |
463 | timeouts. | |
464 | - Added an OpenFlow extension NXT_SET_ASYNC_CONFIG that allows | |
465 | controllers more precise control over which OpenFlow messages they | |
466 | receive asynchronously. | |
467 | - New "fin_timeout" action. | |
468 | - Added "fin_timeout" support to "learn" action. | |
469 | - New Nicira action NXAST_CONTROLLER that offers additional features | |
470 | over output to OFPP_CONTROLLER. | |
471 | - When QoS settings for an interface do not configure a default queue | |
472 | (queue 0), Open vSwitch now uses a default configuration for that | |
473 | queue, instead of dropping all packets as in previous versions. | |
474 | - Logging: | |
475 | - Logging to console and file will have UTC timestamp as a default for | |
476 | all the daemons. An example of the default format is | |
477 | 2012-01-27T16:35:17Z. ovs-appctl can be used to change the default | |
478 | format as before. | |
479 | - The syntax of commands and options to set log levels was simplified, | |
480 | to make it easier to remember. | |
481 | - New support for limiting the number of flows in an OpenFlow flow | |
482 | table, with configurable policy for evicting flows upon | |
483 | overflow. See the Flow_Table table in ovs-vswitch.conf.db(5) | |
484 | for more information. | |
485 | - New "enable-async-messages" column in the Controller table. If set to | |
486 | false, OpenFlow connections to the controller will initially have all | |
487 | asynchronous messages disabled, overriding normal OpenFlow behavior. | |
488 | - ofproto-provider interface: | |
489 | - "struct rule" has a new member "used" that ofproto implementations | |
490 | should maintain by updating with ofproto_rule_update_used(). | |
491 | - ovsdb-client: | |
492 | - The new option --timestamp causes the "monitor" command to print | |
493 | a timestamp with every update. | |
494 | - CFM module CCM broadcasts can now be tagged with an 802.1p priority. | |
495 | ||
496 | ||
497 | v1.5.0 - 01 Jun 2012 | |
498 | ------------------------ | |
499 | - OpenFlow: | |
500 | - Added support for querying, modifying, and deleting flows | |
501 | based on flow cookie when using NXM. | |
502 | - Added new NXM_PACKET_IN format. | |
503 | - Added new NXAST_DEC_TTL action. | |
504 | - ovs-ofctl: | |
505 | - Added daemonization support to the monitor and snoop commands. | |
506 | - ovs-vsctl: | |
507 | - The "find" command supports new set relational operators | |
508 | {=}, {!=}, {<}, {>}, {<=}, and {>=}. | |
509 | - ovsdb-tool now uses the typical database and schema installation | |
510 | directories as defaults. | |
511 | - The default MAC learning timeout has been increased from 60 seconds | |
512 | to 300 seconds. The MAC learning timeout is now configurable. | |
513 | ||
514 | ||
515 | v1.4.0 - 30 Jan 2012 | |
516 | ------------------------ | |
517 | - Compatible with Open vSwitch kernel module included in Linux 3.3. | |
518 | - New "VLAN splinters" feature to work around buggy device drivers | |
519 | in old Linux versions. (This feature is deprecated. When | |
520 | broken device drivers are no longer in widespread use, we will | |
521 | delete this feature.) See ovs-vswitchd.conf.db(5) for more | |
522 | information. | |
523 | - OpenFlow: | |
524 | - Added ability to match on IPv6 flow label through NXM. | |
525 | - Added ability to match on ECN bits in IPv4 and IPv6 through NXM. | |
526 | - Added ability to match on TTL in IPv4 and IPv6 through NXM. | |
527 | - Added ability to modify ECN bits in IPv4. | |
528 | - Added ability to modify TTL in IPv4. | |
529 | - ovs-vswitchd: | |
530 | - Don't require the "normal" action to use mirrors. Traffic will | |
531 | now be properly mirrored for any flows, regardless of their | |
532 | actions. | |
533 | - Track packet and byte statistics sent on mirrors. | |
534 | - The sFlow implementation can now usually infer the correct agent | |
535 | device instead of having to be told explicitly. | |
536 | - ovs-appctl: | |
537 | - New "fdb/flush" command to flush bridge's MAC learning table. | |
538 | - ovs-test: | |
539 | - A new distributed testing tool that allows one to diagnose performance | |
540 | and connectivity issues. This tool currently is not included in RH or | |
541 | Xen packages. | |
542 | - RHEL packaging now supports integration with Red Hat network scripts. | |
543 | - bonding: | |
544 | - Post 1.4.*, OVS will be changing the default bond mode from balance-slb | |
545 | to active-backup. SLB bonds carry significant risks with them | |
546 | (documented vswitchd/INTERNALS) which we want to prevent unsuspecting | |
547 | users from running into. Users are advised to update any scripts or | |
548 | configuration which may be negatively impacted by explicitly setting | |
549 | the bond mode which they want to use. | |
550 | ||
551 | ||
552 | v1.3.0 - 09 Dec 2011 | |
553 | ------------------------ | |
554 | - OpenFlow: | |
555 | - Added an OpenFlow extension which allows the "output" action to accept | |
556 | NXM fields. | |
557 | - Added an OpenFlow extension for flexible learning. | |
558 | - Bumped number of NXM registers from four to five. | |
559 | - ovs-appctl: | |
560 | - New "version" command to determine version of running daemon. | |
561 | - If no argument is provided for "cfm/show", displays detailed | |
562 | information about all interfaces with CFM enabled. | |
563 | - If no argument is provided for "lacp/show", displays detailed | |
564 | information about all ports with LACP enabled. | |
565 | - ovs-dpctl: | |
566 | - New "set-if" command to modify a datapath port's configuration. | |
567 | - ovs-vswitchd: | |
568 | - The software switch now supports 255 OpenFlow tables, instead | |
569 | of just one. By default, only table 0 is consulted, but the | |
570 | new NXAST_RESUBMIT_TABLE action can look up in additional | |
571 | tables. Tables 128 and above are reserved for use by the | |
572 | switch itself; please use only tables 0 through 127. | |
573 | - Add support for 802.1D spanning tree (STP). | |
574 | - Fragment handling extensions: | |
575 | - New OFPC_FRAG_NX_MATCH fragment handling mode, in which L4 | |
576 | fields are made available for matching in fragments with | |
577 | offset 0. | |
578 | - New NXM_NX_IP_FRAG match field for matching IP fragments (usable | |
579 | via "ip_frag" in ovs-ofctl). | |
580 | - New ovs-ofctl "get-frags" and "set-frags" commands to get and set | |
581 | fragment handling policy. | |
582 | - CAPWAP tunneling now supports an extension to transport a 64-bit key. | |
583 | By default it remains compatible with the old version and other | |
584 | standards-based implementations. | |
585 | - Flow setups are now processed in a round-robin manner across ports | |
586 | to prevent any single client from monopolizing the CPU and conducting | |
587 | a denial of service attack. | |
588 | - Added support for native VLAN tagging. A new "vlan_mode" | |
589 | parameter can be set for "port". Possible values: "access", | |
590 | "trunk", "native-tagged" and "native-untagged". | |
591 | - test-openflowd has been removed. Please use ovs-vswitchd instead. | |
592 | ||
593 | v1.2.0 - 03 Aug 2011 | |
594 | ------------------------ | |
595 | - New "ofproto" abstraction layer to ease porting to hardware | |
596 | switching ASICs. | |
597 | - Packaging for Red Hat Enterprise Linux 5.6 and 6.0. | |
598 | - Datapath support for Linux kernels up to 3.0. | |
599 | - OpenFlow: | |
600 | - New "bundle" and "bundle_load" action extensions. | |
601 | - Database: | |
602 | - Implement table unique constraints. | |
603 | - Support cooperative locking between callers. | |
604 | - ovs-dpctl: | |
605 | - New "-s" option for "show" command prints packet and byte | |
606 | counters for each port. | |
607 | - ovs-ofctl: | |
608 | - New "--readd" option for "replace-flows". | |
609 | - ovs-vsctl: | |
610 | - New "show" command to print an overview of configuration. | |
611 | - New "comment" command to add remark that explains intentions. | |
612 | - ovs-brcompatd has been rewritten to fix long-standing bugs. | |
613 | - ovs-openflowd has been renamed test-openflowd and moved into the | |
614 | tests directory. Its presence confused too many users. Please | |
615 | use ovs-vswitchd instead. | |
616 | - New ovs-benchmark utility to test flow setup performance. | |
617 | - A new log level "off" has been added. Configuring a log facility | |
618 | "off" prevents any messages from being logged to it. Previously, | |
619 | "emer" was effectively "off" because no messages were ever logged at | |
620 | level "emer". Now, errors that cause a process to exit are logged | |
621 | at "emer" level. | |
622 | - "configure" option --with-l26 has been renamed --with-linux, and | |
623 | --with-l26-source has been renamed --with-linux-source. The old | |
624 | names will be removed after the next release, so please update | |
625 | your scripts. | |
626 | - The "-2.6" suffix has been dropped from the datapath/linux-2.6 and | |
627 | datapath/linux-2.6/compat-2.6 directories. | |
628 | - Feature removals: | |
629 | - Dropped support for "tun_id_from_cookie" OpenFlow extension. | |
630 | Please use the extensible match extensions instead. | |
631 | - Removed the Maintenance_Point and Monitor tables in an effort | |
632 | to simplify 802.1ag configuration. | |
633 | - Performance and scalability improvements | |
634 | - Bug fixes | |
635 | ||
636 | v1.1.0 - 05 Apr 2011 | |
637 | ------------------------ | |
638 | - Ability to define policies over IPv6 | |
639 | - LACP | |
640 | - 802.1ag CCM | |
641 | - Support for extensible match extensions to OpenFlow | |
642 | - QoS: | |
643 | - Support for HFSC qdisc. | |
644 | - Queue used by in-band control can now be configured. | |
645 | - Kernel: | |
646 | - Kernel<->userspace interface has been reworked and should be | |
647 | close to a stable ABI now. | |
648 | - "Port group" concept has been dropped. | |
649 | - GRE over IPSEC tunnels | |
650 | - Bonding: | |
651 | - New active backup bonding mode. | |
652 | - New L4 hashing support when LACP is enabled. | |
653 | - Source MAC hash now includes VLAN field also. | |
654 | - miimon support. | |
655 | - Greatly improved handling of large flow tables | |
656 | - ovs-dpctl: | |
657 | - "show" command now prints full vport configuration. | |
658 | - "dump-groups" command removed since kernel support for | |
659 | port groups was dropped. | |
660 | - ovs-vsctl: | |
661 | - New commands for working with the new Managers table. | |
662 | - "list" command enhanced with new formatting options and --columns | |
663 | option. | |
664 | - "get" command now accepts new --id option. | |
665 | - New "find" command. | |
666 | - ovs-ofctl: | |
667 | - New "queue-stats" command for printing queue stats. | |
668 | - New commands "replace-flows" and "diff-flows". | |
669 | - Commands to add and remove flows can now read from files. | |
670 | - New --flow-format option to enable or disable NXM. | |
671 | - New --more option to increase OpenFlow message verbosity. | |
672 | - Removed "tun-cookie" command, which is no longer useful. | |
673 | - ovs-controller enhancements for testing various features. | |
674 | - New ovs-vlan-test command for testing for Linux kernel driver VLAN | |
675 | bugs. New ovs-vlan-bug-workaround command for enabling and | |
676 | disabling a workaround for these driver bugs. | |
677 | - OpenFlow support: | |
678 | - "Resubmit" actions now update flow statistics. | |
679 | - New "register" extension for use in matching and actions, via NXM. | |
680 | - New "multipath" experimental action extension. | |
681 | - New support for matching multicast Ethernet frames, via NXM. | |
682 | - New extension for OpenFlow vendor error codes. | |
683 | - New extension to set the QoS output queue without actually | |
684 | sending to an output port. | |
685 | - Open vSwitch now reports a single flow table, instead of | |
686 | separate hash and wildcard tables. This better models the | |
687 | current implementation. | |
688 | - New experimental "note" action. | |
689 | - New "ofproto/trace" ovs-appctl command and associated utilities | |
690 | to ease debugging complex flow tables. | |
691 | - Database: | |
692 | - Schema documentation now includes an entity-relationship diagram. | |
693 | - The database is now garbage collected. In most tables, | |
694 | unreferenced rows will be deleted automatically. | |
695 | - Many tables now include statistics updated periodically by | |
696 | ovs-vswitchd or ovsdb-server. | |
697 | - Every table now has an "external-ids" column for use by OVS | |
698 | integrators. | |
699 | - There is no default controller anymore. Each bridge must have its | |
700 | controller individually specified. | |
701 | - The "fail-mode" is now a property of a Bridge instead of a Controller. | |
702 | - New versioning and checksum features. | |
703 | - New Managers table and manager_options column in Open_vSwitch table | |
704 | for specifying managers. The old "managers" column in the | |
705 | Open_vSwitch table has been removed. | |
706 | - Many "name" columns are now immutable. | |
707 | - Feature removals: | |
708 | - Dropped support for XenServer pre-5.6.100. | |
709 | - Dropped support for Linux pre-2.6.18. | |
710 | - Dropped controller discovery support. | |
711 | - Dropped "ovs-ofctl status" and the OpenFlow extension that it used. | |
712 | Statistics reporting in the database is a rough equivalent. | |
713 | - Dropped the "corekeeper" package (now separate, at | |
714 | http://openvswitch.org/cgi-bin/gitweb.cgi?p=corekeeper). | |
715 | - Performance and scalability improvements | |
716 | - Bug fixes | |
717 | ||
718 | v1.1.0pre2 - 13 Sep 2010 | |
719 | ------------------------ | |
720 | - Bug fixes | |
721 | ||
722 | v1.1.0pre1 - 31 Aug 2010 | |
723 | ------------------------ | |
724 | - OpenFlow 1.0 slicing (QoS) functionality | |
725 | - Python bindings for configuration database (no write support) | |
726 | - Performance and scalability improvements | |
727 | - Bug fixes | |
728 | ||
729 | v1.0.1 - 31 May 2010 | |
730 | -------------------- | |
731 | - New "patch" interface type | |
732 | - Bug fixes | |
733 | ||
734 | v1.0.0 - 15 May 2010 | |
735 | -------------------- | |
736 | - Configuration database with remote management | |
737 | - OpenFlow 1.0 | |
738 | - GRE tunneling | |
739 | - Support for XenServer 5.5 and 5.6 | |
740 | - Performance and scalability improvements | |
741 | - Bug fixes | |
742 | ||
743 | v0.99.2 - 18 Feb 2010 | |
744 | --------------------- | |
745 | - Bug fixes | |
746 | ||
747 | v0.99.1 - 25 Jan 2010 | |
748 | --------------------- | |
749 | - Add support for sFlow(R) | |
750 | - Make headers compatible with C++ | |
751 | - Bug fixes | |
752 | ||
753 | v0.99.0 - 14 Jan 2010 | |
754 | --------------------- | |
755 | - User-space forwarding engine | |
756 | - Bug fixes | |
757 | ||
758 | v0.90.7 - 29 Nov 2009 | |
759 | --------------------- | |
760 | - Add support for NetFlow active timeouts | |
761 | - Bug fixes | |
762 | ||
763 | v0.90.6 - 6 Oct 2009 | |
764 | -------------------- | |
765 | - Bug fixes | |
766 | ||
767 | v0.90.5 - 21 Sep 2009 | |
768 | --------------------- | |
769 | - Generalize in-band control to more diverse network setups | |
770 | - Bug fixes |