]>
Commit | Line | Data |
---|---|---|
1 | openvswitch (2.15.90-1) unstable; urgency=low | |
2 | ||
3 | * New upstream version | |
4 | ||
5 | -- Open vSwitch team <dev@openvswitch.org> Fri, 15 Jan 2021 20:17:51 +0100 | |
6 | ||
7 | openvswitch (2.15.0-1) unstable; urgency=low | |
8 | ||
9 | * New upstream version | |
10 | ||
11 | -- Open vSwitch team <dev@openvswitch.org> Fri, 15 Jan 2021 20:16:50 +0100 | |
12 | ||
13 | openvswitch (2.14.0-1) unstable; urgency=low | |
14 | ||
15 | * New upstream version | |
16 | ||
17 | -- Open vSwitch team <dev@openvswitch.org> Mon, 17 Aug 2020 14:17:17 +0200 | |
18 | ||
19 | openvswitch (2.13.0-1) unstable; urgency=low | |
20 | [ Open vSwitch team] | |
21 | * New upstream version | |
22 | ||
23 | -- Open vSwitch team <dev@openvswitch.org> Fri, 14 Feb 2020 12:00:00 -0700 | |
24 | ||
25 | openvswitch (2.12.0-1) unstable; urgency=low | |
26 | [ Open vSwitch team ] | |
27 | * New upstream version | |
28 | ||
29 | -- Open vSwitch team <dev@openvswitch.org> Tue, 03 Sep 2019 14:56:53 -0700 | |
30 | ||
31 | openvswitch (2.11.0-1) unstable; urgency=low | |
32 | ||
33 | * New upstream version | |
34 | ||
35 | -- Open vSwitch team <dev@openvswitch.org> Tue, 19 Feb 2019 21:42:33 -0700 | |
36 | ||
37 | openvswitch (2.10.0-1) unstable; urgency=low | |
38 | ||
39 | * New upstream version | |
40 | ||
41 | -- Open vSwitch team <dev@openvswitch.org> Sat, 18 Aug 2018 10:38:23 -0700 | |
42 | ||
43 | openvswitch (2.9.0-1) unstable; urgency=low | |
44 | ||
45 | * New upstream version | |
46 | ||
47 | -- Open vSwitch team <dev@openvswitch.org> Mon, 19 Feb 2018 11:03:12 -0700 | |
48 | ||
49 | openvswitch (2.8.0-1) unstable; urgency=medium | |
50 | ||
51 | [ Open vSwitch team ] | |
52 | * Use debhelper for DEB_VERSION_UPSTREAM. Thanks to Clint Byrum | |
53 | <spamaps@debian.org> for this improvement. | |
54 | * New upstream version | |
55 | ||
56 | -- Open vSwitch team <dev@openvswitch.org> Thu, 31 Aug 2017 09:32:16 -0700 | |
57 | ||
58 | openvswitch (2.7.0-1) unstable; urgency=low | |
59 | [ Open vSwitch team ] | |
60 | * New upstream version | |
61 | - Utilities and daemons that support SSL now allow protocols and | |
62 | ciphers to be configured with --ssl-protocols and --ssl-ciphers. | |
63 | - OVN: | |
64 | * QoS is now implemented via egress shaping rather than ingress policing. | |
65 | * DSCP marking is now supported, via the new northbound QoS table. | |
66 | * IPAM now supports fixed MAC addresses. | |
67 | * Support for source IP address based routing. | |
68 | * ovn-trace: | |
69 | - New --ovs option to also print OpenFlow flows. | |
70 | - put_dhcp_opts and put_dhcp_optsv6 actions may now be traced. | |
71 | * Support for managing SSL and remote connection configuration in | |
72 | northbound and southbound databases. | |
73 | * TCP connections to northbound and southbound databases are no | |
74 | longer enabled by default and must be explicitly configured. | |
75 | See documentation for ovn-sbctl/ovn-nbctl "set-connection" | |
76 | command or the ovn-ctl "--db-sb-create-insecure-remote" and | |
77 | "--db-nb-create-insecure-remote" command-line options for | |
78 | information regarding remote connection configuration. | |
79 | * New appctl "inject-pkt" command in ovn-controller that allows | |
80 | packets to be injected into the connected OVS instance. | |
81 | * Distributed logical routers may now be connected directly to | |
82 | logical switches with localnet ports, by specifying a | |
83 | "redirect-chassis" on the distributed gateway port of the | |
84 | logical router. NAT rules may be specified directly on the | |
85 | distributed logical router, and are handled either centrally on | |
86 | the "redirect-chassis", or in many cases are handled locally on | |
87 | the hypervisor where the corresponding logical port resides. | |
88 | Gratuitous ARP for NAT addresses on a distributed logical | |
89 | router is not yet supported, but will be added in a future | |
90 | version. | |
91 | - Fixed regression in table stats maintenance introduced in OVS | |
92 | 2.3.0, wherein the number of OpenFlow table hits and misses was | |
93 | not accurate. | |
94 | - OpenFlow: | |
95 | * OFPT_PACKET_OUT messages are now supported in bundles. | |
96 | * A new "selection_method=dp_hash" type for OpenFlow select group | |
97 | bucket selection that uses the datapath computed 5-tuple hash | |
98 | without making datapath flows match the 5-tuple fields, which | |
99 | is useful for more efficient load balancing, for example. This | |
100 | uses the Netronome extension to OpenFlow 1.5+ that allows | |
101 | control over the OpenFlow select groups selection method. See | |
102 | "selection_method" and related options in ovs-ofctl(8) for | |
103 | details. | |
104 | * The "sample" action now supports "ingress" and "egress" options. | |
105 | * The "ct" action now supports the TFTP ALG where support is available. | |
106 | * New actions "clone" and "ct_clear". | |
107 | - ovs-ofctl: | |
108 | * 'bundle' command now supports packet-out messages. | |
109 | * New syntax for 'ovs-ofctl packet-out' command, which uses the | |
110 | same string parser as the 'bundle' command. The old 'packet-out' | |
111 | syntax is deprecated and will be removed in a later OVS | |
112 | release. | |
113 | * New unixctl "ofctl/packet-out" command, which can be used to | |
114 | instruct a flow monitor to issue OpenFlow packet-out messages. | |
115 | - ovsdb-server: | |
116 | * Remote connections can now be made read-only (see ovsdb-server(1)). | |
117 | - Tunnels: | |
118 | * TLV mappings for protocols such as Geneve are now segregated on | |
119 | a per-OpenFlow bridge basis rather than globally. (The interface | |
120 | has not changed.) | |
121 | * Removed support for IPsec tunnels. | |
122 | - DPDK: | |
123 | * New option 'n_rxq_desc' and 'n_txq_desc' fields for DPDK interfaces | |
124 | which set the number of rx and tx descriptors to use for the given port. | |
125 | * Support for DPDK v16.11. | |
126 | * Support for rx checksum offload. Refer DPDK HOWTO for details. | |
127 | * Port Hotplug is now supported. | |
128 | * DPDK physical ports can now have arbitrary names. The PCI address of | |
129 | the device must be set using the 'dpdk-devargs' option. Compatibility | |
130 | with the old dpdk<portid> naming scheme is broken, and as such a | |
131 | device will not be available for use until a valid dpdk-devargs is | |
132 | specified. | |
133 | * Virtual DPDK Poll Mode Driver (vdev PMD) support. | |
134 | * Removed experimental tag. | |
135 | - Fedora packaging: | |
136 | * A package upgrade does not automatically restart OVS service. | |
137 | - ovs-vswitchd/ovs-vsctl: | |
138 | * Ports now have a "protected" flag. Protected ports can not forward | |
139 | frames to other protected ports. Unprotected ports can receive and | |
140 | forward frames to protected and other unprotected ports. | |
141 | - ovs-vsctl, ovn-nbctl, ovn-sbctl, vtep-ctl: | |
142 | * Database commands now accept integer ranges, e.g. "set port | |
143 | eth0 trunks=1-10" to enable trunking VLANs 1 to 10. | |
144 | ||
145 | -- Open vSwitch team <dev@openvswitch.org> Tue, 21 Feb 2017 13:57:33 -0700 | |
146 | ||
147 | openvswitch (2.6.0-1) unstable; urgency=low | |
148 | [ Open vSwitch team ] | |
149 | * New upstream version | |
150 | - First supported release of OVN. See ovn-architecture(7) for more | |
151 | details. | |
152 | - ovsdb-server: | |
153 | * New "monitor_cond" "monitor_cond_update" and "update2" extensions to | |
154 | RFC 7047. | |
155 | - OpenFlow: | |
156 | * OpenFlow 1.3+ bundles are now supported for group mods as well as | |
157 | flow mods and port mods. Both 'atomic' and 'ordered' bundle | |
158 | flags are supported for group mods as well as flow mods. | |
159 | * OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY. | |
160 | * OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported. | |
161 | * OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported. | |
162 | * New property-based packet-in message format NXT_PACKET_IN2 with support | |
163 | for arbitrary user-provided data and for serializing flow table | |
164 | traversal into a continuation for later resumption. | |
165 | * New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like | |
166 | control over asynchronous messages in earlier versions of OpenFlow. | |
167 | * OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is | |
168 | now implemented. Only flow mod and port mod messages are supported | |
169 | in bundles. | |
170 | * New OpenFlow extension NXM_NX_MPLS_TTL to provide access to MPLS TTL. | |
171 | * New output option, output(port=N,max_len=M), to allow truncating a | |
172 | packet to size M bytes when outputting to port N. | |
173 | * New command OFPGC_ADD_OR_MOD for OFPT_GROUP_MOD message that adds a | |
174 | new group or modifies an existing groups | |
175 | * The optional OpenFlow packet buffering feature is deprecated in | |
176 | this release, and will be removed in the next OVS release | |
177 | (2.7). After the change OVS always sends the 'buffer_id' as | |
178 | 0xffffffff in packet-in messages and will send an error | |
179 | response if any other value of this field is included in | |
180 | packet-out and flow mod sent by a controller. Controllers are | |
181 | already expected to work properly in cases where the switch can | |
182 | not buffer packets, so this change should not affect existing | |
183 | users. | |
184 | * New OpenFlow extension NXT_CT_FLUSH_ZONE to flush conntrack zones. | |
185 | - Improved OpenFlow version compatibility for actions: | |
186 | * New OpenFlow extension to support the "group" action in OpenFlow 1.0. | |
187 | * OpenFlow 1.0 "enqueue" action now properly translated to OpenFlow 1.1+. | |
188 | * OpenFlow 1.1 "mod_nw_ecn" and OpenFlow 1.1+ "mod_nw_ttl" actions now | |
189 | properly translated to OpenFlow 1.0. | |
190 | - ovs-ofctl: | |
191 | * queue-get-config command now allows a queue ID to be specified. | |
192 | * '--bundle' option can now be used with OpenFlow 1.3 and with group mods. | |
193 | * New "bundle" command allows executing a mixture of flow and group mods | |
194 | as a single atomic transaction. | |
195 | * New option "--color" to produce colorized output for some commands. | |
196 | * New option '--may-create' to use OFPGC_ADD_OR_MOD in mod-group command. | |
197 | - IPFIX: | |
198 | * New "sampling_port" option for "sample" action to allow sampling | |
199 | ingress and egress tunnel metadata with IPFIX. | |
200 | * New ovs-ofctl commands "dump-ipfix-bridge" and "dump-ipfix-flow" to | |
201 | dump bridge IPFIX statistics and flow based IPFIX statistics. | |
202 | * New setting other-config:virtual_obs_id to add an arbitrary string | |
203 | to IPFIX records. | |
204 | - Linux: | |
205 | * New QoS type "linux-noop" that prevents Open vSwitch from trying to | |
206 | manage QoS for a given port (useful when other software manages QoS). | |
207 | - DPDK: | |
208 | * New option "n_rxq" for PMD interfaces. | |
209 | Old 'other_config:n-dpdk-rxqs' is no longer supported. | |
210 | Not supported by vHost interfaces. For them number of rx and tx queues | |
211 | is applied from connected virtio device. | |
212 | * New 'other_config:pmd-rxq-affinity' field for PMD interfaces, that | |
213 | allows to pin port's rx queues to desired cores. | |
214 | * New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq | |
215 | assignment. | |
216 | * Type of log messages from PMD threads changed from INFO to DBG. | |
217 | * QoS functionality with sample egress-policer implementation. | |
218 | * The mechanism for configuring DPDK has changed to use database | |
219 | * Sensible defaults have been introduced for many of the required | |
220 | configuration options | |
221 | * DB entries have been added for many of the DPDK EAL command line | |
222 | arguments. Additional arguments can be passed via the dpdk-extra | |
223 | entry. | |
224 | * Add ingress policing functionality. | |
225 | * PMD threads servicing vHost User ports can now come from the NUMA | |
226 | node that device memory is located on if CONFIG_RTE_LIBRTE_VHOST_NUMA | |
227 | is enabled in DPDK. | |
228 | * Basic connection tracking for the userspace datapath (no ALG, | |
229 | fragmentation or NAT support yet) | |
230 | * Support for DPDK 16.07 | |
231 | * Optional support for DPDK pdump enabled. | |
232 | * Jumbo frame support | |
233 | * Remove dpdkvhostcuse port type. | |
234 | * OVS client mode for vHost and vHost reconnect (Requires QEMU 2.7) | |
235 | - Increase number of registers to 16. | |
236 | - ovs-benchmark: This utility has been removed due to lack of use and | |
237 | bitrot. | |
238 | - ovs-appctl: | |
239 | * New "vlog/close" command. | |
240 | - ovs-ctl: | |
241 | * Added the ability to selectively start the forwarding and database | |
242 | functions (ovs-vswitchd and ovsdb-server, respectively). | |
243 | - ovsdb-server: | |
244 | * Remove max number of sessions limit, to enable connection scaling | |
245 | testing. | |
246 | - python: | |
247 | * Added support for Python 3.4+ in addition to existing support | |
248 | for 2.7+. | |
249 | - SELinux: | |
250 | * Introduced SELinux policy package. | |
251 | - Datapath Linux kernel compatibility. | |
252 | * Dropped support for kernel older than 3.10. | |
253 | * Removed VLAN splinters feature. | |
254 | * Support for truncate action. | |
255 | * Datapath supports kernel upto 4.6. | |
256 | - Tunnels: | |
257 | * Flow based tunnel match and action can be used for IPv6 address using | |
258 | tun_ipv6_src, tun_ipv6_dst fields. | |
259 | * Added support for IPv6 tunnels, for details checkout FAQ. | |
260 | * Deprecated support for IPsec tunnels ports. | |
261 | - A wrapper script, 'ovs-tcpdump', to easily port-mirror an OVS port and | |
262 | watch with tcpdump | |
263 | - Introduce --no-self-confinement flag that allows daemons to work with | |
264 | sockets outside their run directory. | |
265 | - ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because | |
266 | SHA-1 is no longer secure and some operating systems have started to | |
267 | disable it in OpenSSL. | |
268 | - Add 'mtu_request' column to the Interface table. It can be used to | |
269 | configure the MTU of non-internal ports. | |
270 | ||
271 | -- Open vSwitch team <dev@openvswitch.org> Mon, 15 Aug 2016 19:53:13 -0700 | |
272 | ||
273 | openvswitch (2.5.0-1) unstable; urgency=low | |
274 | [ Open vSwitch team ] | |
275 | * New upstream version | |
276 | - Dropped support for Python older than version 2.7. As a consequence, | |
277 | using Open vSwitch 2.5 or later on XenServer 6.5 or earlier (which | |
278 | have Python 2.4) requires first installing Python 2.7. | |
279 | - OpenFlow: | |
280 | * Group chaining (where one OpenFlow group triggers another) is | |
281 | now supported. | |
282 | * OpenFlow 1.4+ "importance" is now considered for flow eviction. | |
283 | * OpenFlow 1.4+ OFPTC_EVICTION is now implemented. | |
284 | * OpenFlow 1.4+ OFPTC_VACANCY_EVENTS is now implemented. | |
285 | * OpenFlow 1.4+ OFPMP_TABLE_DESC is now implemented. | |
286 | * Allow modifying the ICMPv4/ICMPv6 type and code fields. | |
287 | * OpenFlow 1.4+ OFPT_SET_ASYNC_CONFIG and OFPT_GET_ASYNC_CONFIG are | |
288 | now implemented. | |
289 | - ovs-ofctl: | |
290 | * New "out_group" keyword for OpenFlow 1.1+ matching on output group. | |
291 | - Tunnels: | |
292 | * Geneve tunnels can now match and set options and the OAM bit. | |
293 | * The nonstandard GRE64 tunnel extension has been dropped. | |
294 | - Support Multicast Listener Discovery (MLDv1 and MLDv2). | |
295 | - Add 'symmetric_l3l4' and 'symmetric_l3l4+udp' hash functions. | |
296 | - sFlow agent now reports tunnel and MPLS structures. | |
297 | - New 'check-system-userspace', 'check-kmod' and 'check-kernel' Makefile | |
298 | targets to run a new system testsuite. These tests can be run inside | |
299 | a Vagrant box. See INSTALL.md for details | |
300 | - Mark --syslog-target argument as deprecated. It will be removed in | |
301 | the next OVS release. | |
302 | - Added --user option to all daemons | |
303 | - Add support for connection tracking through the new "ct" action | |
304 | and "ct_state"/"ct_zone"/"ct_mark"/"ct_label" match fields. Only | |
305 | available on Linux kernels with the connection tracking module loaded. | |
306 | - Add experimental version of OVN. OVN, the Open Virtual Network, is a | |
307 | system to support virtual network abstraction. OVN complements the | |
308 | existing capabilities of OVS to add native support for virtual network | |
309 | abstractions, such as virtual L2 and L3 overlays and security groups. | |
310 | ||
311 | -- Open vSwitch team <dev@openvswitch.org> Thu, 03 Dec 2015 23:17:44 -0700 | |
312 | ||
313 | openvswitch (2.4.0-1) unstable; urgency=low | |
314 | [ Open vSwitch team ] | |
315 | * New upstream version | |
316 | - Flow table modifications are now atomic, meaning that each packet | |
317 | now sees a coherent version of the OpenFlow pipeline. For | |
318 | example, if a controller removes all flows with a single OpenFlow | |
319 | "flow_mod", no packet sees an intermediate version of the OpenFlow | |
320 | pipeline where only some of the flows have been deleted. | |
321 | - Added support for SFQ, FQ_CoDel and CoDel qdiscs. | |
322 | - Add bash command-line completion support for ovs-vsctl Please check | |
323 | utilities/ovs-command-compgen.INSTALL.md for how to use. | |
324 | - The MAC learning feature now includes per-port fairness to mitigate | |
325 | MAC flooding attacks. | |
326 | - New support for a "conjunctive match" OpenFlow extension, which | |
327 | allows constructing OpenFlow matches of the form "field1 in | |
328 | {a,b,c...} AND field2 in {d,e,f...}" and generalizations. For details, | |
329 | see documentation for the "conjunction" action in ovs-ofctl(8). | |
330 | - Add bash command-line completion support for ovs-appctl/ovs-dpctl/ | |
331 | ovs-ofctl/ovsdb-tool commands. Please check | |
332 | utilities/ovs-command-compgen.INSTALL.md for how to use. | |
333 | - The "learn" action supports a new flag "delete_learned" that causes | |
334 | the learned flows to be deleted when the flow with the "learn" action | |
335 | is deleted. | |
336 | - Basic support for the Geneve tunneling protocol. It is not yet | |
337 | possible to generate or match options. This is planned for a future | |
338 | release. The protocol is documented at | |
339 | http://tools.ietf.org/html/draft-gross-geneve-00 | |
340 | - The OVS database now reports controller rate limiting statistics. | |
341 | - sflow now exports information about LACP-based bonds, port names, and | |
342 | OpenFlow port numbers, as well as datapath performance counters. | |
343 | - ovs-dpctl functionality is now available for datapaths integrated | |
344 | into ovs-vswitchd, via ovs-appctl. Some existing ovs-appctl | |
345 | commands are now redundant and will be removed in a future | |
346 | release. See ovs-vswitchd(8) for details. | |
347 | - OpenFlow: | |
348 | * OpenFlow 1.4 bundles are now supported for flow mods and port | |
349 | mods. For flow mods, both 'atomic' and 'ordered' bundle flags | |
350 | are trivially supported, as all bundled messages are executed | |
351 | in the order they were added and all flow table modifications | |
352 | are now atomic to the datapath. Port mods may not appear in | |
353 | atomic bundles, as port status modifications are not atomic. | |
354 | * IPv6 flow label and neighbor discovery fields are now modifiable. | |
355 | * OpenFlow 1.5 extended registers are now supported. | |
356 | * The OpenFlow 1.5 actset_output field is now supported. | |
357 | * OpenFlow 1.5 Copy-Field action is now supported. | |
358 | * OpenFlow 1.5 masked Set-Field action is now supported. | |
359 | * OpenFlow 1.3+ table features requests are now supported (read-only). | |
360 | * Nicira extension "move" actions may now be included in action sets. | |
361 | * "resubmit" actions may now be included in action sets. The resubmit | |
362 | is executed last, and only if the action set has no "output" or "group" | |
363 | action. | |
364 | * OpenFlow 1.4+ flow "importance" is now maintained in the flow table. | |
365 | * A new Netronome extension to OpenFlow 1.5+ allows control over the | |
366 | fields hashed for OpenFlow select groups. See "selection_method" and | |
367 | related options in ovs-ofctl(8) for details. | |
368 | - ovs-ofctl has a new '--bundle' option that makes the flow mod commands | |
369 | ('add-flow', 'add-flows', 'mod-flows', 'del-flows', and 'replace-flows') | |
370 | use an OpenFlow 1.4 bundle to operate the modifications as a single | |
371 | atomic transaction. If any of the flow mods in a transaction fail, none | |
372 | of them are executed. All flow mods in a bundle appear to datapath | |
373 | lookups simultaneously. | |
374 | - ovs-ofctl 'add-flow' and 'add-flows' commands now accept arbitrary flow | |
375 | mods as an input by allowing the flow specification to start with an | |
376 | explicit 'add', 'modify', 'modify_strict', 'delete', or 'delete_strict' | |
377 | keyword. A missing keyword is treated as 'add', so this is fully | |
378 | backwards compatible. With the new '--bundle' option all the flow mods | |
379 | are executed as a single atomic transaction using an OpenFlow 1.4 bundle. | |
380 | - ovs-pki: Changed message digest algorithm from MD5 to SHA-1 because | |
381 | MD5 is no longer secure and some operating systems have started to disable | |
382 | it in OpenSSL. | |
383 | - ovsdb-server: New OVSDB protocol extension allows inequality tests on | |
384 | "optional scalar" columns. See ovsdb-server(1) for details. | |
385 | - ovs-vsctl now permits immutable columns in a new row to be modified in | |
386 | the same transaction that creates the row. | |
387 | - test-controller has been renamed ovs-testcontroller at request of users | |
388 | who find it useful for testing basic OpenFlow setups. It is still not | |
389 | a necessary or desirable part of most Open vSwitch deployments. | |
390 | - Support for travis-ci.org based continuous integration builds has been | |
391 | added. Build failures are reported to build@openvswitch.org. See INSTALL.md | |
392 | file for additional details. | |
393 | - Support for the Rapid Spanning Tree Protocol (IEEE 802.1D-2004). | |
394 | The implementation has been tested successfully against the Ixia Automated | |
395 | Network Validation Library (ANVL). | |
396 | - Stats are no longer updated on fake bond interface. | |
397 | - Keep active bond member selection across OVS restart. | |
398 | - A simple wrapper script, 'ovs-docker', to integrate OVS with Docker | |
399 | containers. If and when there is a native integration of Open vSwitch | |
400 | with Docker, the wrapper script will be retired. | |
401 | - Added support for DPDK Tunneling. VXLAN, GRE, and Geneve are supported | |
402 | protocols. This is generic tunneling mechanism for userspace datapath. | |
403 | - Support for multicast snooping (IGMPv1, IGMPv2 and IGMPv3) | |
404 | - Support for Linux kernels up to 4.0.x | |
405 | - The documentation now use the term 'destination' to mean one of syslog, | |
406 | console or file for vlog logging instead of the previously used term | |
407 | 'facility'. | |
408 | - Support for VXLAN Group Policy extension | |
409 | - Initial support for the IETF Auto-Attach SPBM draft standard. This | |
410 | contains rudimentary support for the LLDP protocol as needed for | |
411 | Auto-Attach. | |
412 | - The default OpenFlow and OVSDB ports are now the IANA-assigned | |
413 | numbers. OpenFlow is 6653 and OVSDB is 6640. | |
414 | - Support for DPDK vHost. | |
415 | - Support for outer UDP checksums in Geneve and VXLAN. | |
416 | - The kernel vports with dependencies are no longer part of the overall | |
417 | openvswitch.ko but built and loaded automatically as individual kernel | |
418 | modules (vport-*.ko). | |
419 | - Support for STT tunneling. | |
420 | - Support to configure method (--syslog-method argument) that determines | |
421 | how daemons will talk with syslog. | |
422 | - Support for "ovs-appctl vlog/list-pattern" command that lets to query | |
423 | logging message format for each destination. | |
424 | - GRE64 and ipsec_gre64 tunnel protocol is deprecated and will be removed | |
425 | from OVS v2.5 release. | |
426 | * The openvswitch-testcontroller package is new. It reintroduces the | |
427 | simple OpenFlow controller that was packaged with Open vSwitch prior to | |
428 | version 2.1, at request of users who find it useful for testing basic | |
429 | OpenFlow setups. It is still not a necessary or desirable part of most | |
430 | Open vSwitch deployments. | |
431 | ||
432 | -- Open vSwitch team <dev@openvswitch.org> Thu, 20 Aug 2015 17:23:43 -0700 | |
433 | ||
434 | openvswitch (2.3.0-1) unstable; urgency=low | |
435 | [ Open vSwitch team ] | |
436 | * New upstream version | |
437 | - OpenFlow 1.1, 1.2, and 1.3 are now enabled by default in | |
438 | ovs-vswitchd. | |
439 | - Linux kernel datapath now has an exact match cache optimizing the | |
440 | flow matching process. | |
441 | - Datapath flows now have partially wildcarded tranport port field | |
442 | matches. This reduces userspace upcalls, but increases the | |
443 | number of different masks in the datapath. The kernel datapath | |
444 | exact match cache removes the overhead of matching the incoming | |
445 | packets with the larger number of masks, but when paired with an | |
446 | older kernel module, some workloads may perform worse with the | |
447 | new userspace. | |
448 | ||
449 | -- Open vSwitch team <dev@openvswitch.org> Thu, 14 Aug 2014 11:03:32 -0700 | |
450 | ||
451 | openvswitch (2.2.0-1) unstable; urgency=low | |
452 | [ Open vSwitch team ] | |
453 | * New upstream version | |
454 | - Internal ports are no longer brought up by default, because it | |
455 | should be an administrator task to bring up devices as they are | |
456 | configured properly. | |
457 | - ovs-vsctl now reports when ovs-vswitchd fails to create a new port or | |
458 | bridge. | |
459 | - The "ovsdbmonitor" graphical tool has been removed, because it was | |
460 | poorly maintained and not widely used. | |
461 | - New "check-ryu" Makefile target for running Ryu tests for OpenFlow | |
462 | controllers against Open vSwitch. See INSTALL for details. | |
463 | - Added IPFIX support for SCTP flows and templates for ICMPv4/v6 flows. | |
464 | - Upon the receipt of a SIGHUP signal, ovs-vswitchd no longer reopens its | |
465 | log file (it will terminate instead). Please use 'ovs-appctl vlog/reopen' | |
466 | instead. | |
467 | - Support for Linux kernels up to 3.14. From Kernel 3.12 onwards OVS uses | |
468 | tunnel API for GRE and VXLAN. | |
469 | - Added DPDK support. | |
470 | - Added support for custom vlog patterns in Python | |
471 | ||
472 | -- Open vSwitch team <dev@openvswitch.org> Wed, 19 Mar 2014 16:08:38 -0700 | |
473 | ||
474 | openvswitch (2.1.0-1) unstable; urgency=low | |
475 | [ Open vSwitch team ] | |
476 | * New upstream version | |
477 | - Address prefix tracking support for flow tables. New columns | |
478 | "prefixes" in OVS-DB table "Flow_Table" controls which packet | |
479 | header fields are used for address prefix tracking. Prefix | |
480 | tracking allows the classifier to skip rules with longer than | |
481 | necessary prefixes, resulting in better wildcarding for datapath | |
482 | flows. Default configuration is to not use any fields for prefix | |
483 | tracking. However, if any flow tables contain both exact matches | |
484 | and masked matches for IP address fields, OVS performance may be | |
485 | increased by using this feature. | |
486 | * As of now, the fields for which prefix lookup can be enabled | |
487 | are: 'tun_id', 'tun_src', 'tun_dst', 'nw_src', 'nw_dst' (or | |
488 | aliases 'ip_src' and 'ip_dst'), 'ipv6_src', and 'ipv6_dst'. | |
489 | (Using this feature for 'tun_id' would only make sense if the | |
490 | tunnel IDs have prefix structure similar to IP addresses.) | |
491 | * There is a maximum number of fields that can be enabled for any | |
492 | one flow table. Currently this limit is 3. | |
493 | * Examples: | |
494 | $ ovs-vsctl set Bridge br0 flow_tables:0=@N1 -- \ | |
495 | --id=@N1 create Flow_Table name=table0 | |
496 | $ ovs-vsctl set Bridge br0 flow_tables:1=@N1 -- \ | |
497 | --id=@N1 create Flow_Table name=table1 | |
498 | $ ovs-vsctl set Flow_Table table0 prefixes=ip_dst,ip_src | |
499 | $ ovs-vsctl set Flow_Table table1 prefixes=[] | |
500 | - TCP flags matching: OVS now supports matching of TCP flags. This | |
501 | has an adverse performance impact when using OVS userspace 1.10 | |
502 | or older (no megaflows support) together with the new OVS kernel | |
503 | module. It is recommended that the kernel and userspace modules | |
504 | both are upgraded at the same time. | |
505 | - The default OpenFlow and OVSDB ports will change to | |
506 | IANA-assigned numbers in a future release. Consider updating | |
507 | your installations to specify port numbers instead of using the | |
508 | defaults. | |
509 | - OpenFlow: | |
510 | * The OpenFlow 1.1+ "Write-Actions" instruction is now supported. | |
511 | * OVS limits the OpenFlow port numbers it assigns to port 32767 and | |
512 | below, leaving port numbers above that range free for assignment | |
513 | by the controller. | |
514 | * ovs-vswitchd now honors changes to the "ofport_request" column | |
515 | in the Interface table by changing the port's OpenFlow port | |
516 | number. | |
517 | - ovs-vswitchd.conf.db.5 man page will contain graphviz/dot | |
518 | diagram only if graphviz package was installed at the build time. | |
519 | - Support for Linux kernels up to 3.11 | |
520 | - ovs-dpctl: | |
521 | The "show" command also displays mega flow mask stats. | |
522 | - ovs-ofctl: | |
523 | * New command "ofp-parse-pcap" to dump OpenFlow from PCAP files. | |
524 | - ovs-controller has been renamed test-controller. It is no longer | |
525 | packaged or installed by default, because too many users assumed | |
526 | incorrectly that ovs-controller was a necessary or desirable part | |
527 | of an Open vSwitch deployment. | |
528 | - Added vlog option to export to a UDP syslog sink. | |
529 | - ovsdb-client: | |
530 | * The "monitor" command can now monitor all tables in a database, | |
531 | instead of being limited to a single table. | |
532 | - The flow-eviction-threshold has been replaced by the flow-limit which is a | |
533 | hard limit on the number of flows in the datapath. It defaults to 200,000 | |
534 | flows. OVS automatically adjusts this number depending on network | |
535 | conditions. | |
536 | * The openvswitch-controller package has been removed, because too many | |
537 | users assumed incorrectly that ovs-controller was a necessary or | |
538 | desirable part of an Open vSwitch deployment. | |
539 | ||
540 | -- Open vSwitch team <dev@openvswitch.org> Wed, 19 Mar 2014 16:08:38 -0700 | |
541 | ||
542 | openvswitch (2.0.0-1) unstable; urgency=low | |
543 | [ Open vSwitch team ] | |
544 | * New upstream version | |
545 | - The ovs-vswitchd process is no longer single-threaded. Multiple | |
546 | threads are now used to handle flow set up and asynchronous | |
547 | logging. | |
548 | - OpenFlow: | |
549 | * Experimental support for OpenFlow 1.1 (in addition to 1.2 and | |
550 | 1.3, which had experimental support in 1.10). | |
551 | * New support for matching outer source and destination IP address | |
552 | of tunneled packets, for tunnel ports configured with the newly | |
553 | added "remote_ip=flow" and "local_ip=flow" options. | |
554 | * Support for matching on metadata 'pkt_mark' for interacting with | |
555 | other system components. On Linux this corresponds to the skb | |
556 | mark. | |
557 | * Support matching, rewriting SCTP ports | |
558 | - The Interface table in the database has a new "ifindex" column to | |
559 | report the interface's OS-assigned ifindex. | |
560 | - New "check-oftest" Makefile target for running OFTest against Open | |
561 | vSwitch. See README-OFTest for details. | |
562 | - The flow eviction threshold has been moved to the Open_vSwitch table. | |
563 | - Database names are now mandatory when specifying ovsdb-server options | |
564 | through database paths (e.g. Private key option with the database name | |
565 | should look like "--private-key=db:Open_vSwitch,SSL,private_key"). | |
566 | - Added ovs-dev.py, a utility script helpful for Open vSwitch developers. | |
567 | - Support for Linux kernels up to 3.10 | |
568 | - ovs-ofctl: | |
569 | * New "ofp-parse" for printing OpenFlow messages read from a file. | |
570 | - Added configurable flow caching support to IPFIX exporter. | |
571 | - Dropped support for Linux pre-2.6.32. | |
572 | - Log file timestamps and ovsdb commit timestamps are now reported | |
573 | with millisecond resolution. (Previous versions only reported | |
574 | whole seconds.) | |
575 | ||
576 | -- Open vSwitch team <dev@openvswitch.org> Tue, 15 Oct 2013 15:03:42 -0700 | |
577 | ||
578 | openvswitch (1.11.0-1) unstable; urgency=low | |
579 | [ Open vSwitch team ] | |
580 | * New upstream version | |
581 | - Support for megaflows, which allows wildcarding in the kernel (and | |
582 | any dpif implementation that supports wildcards). Depending on | |
583 | the flow table and switch configuration, flow set up rates are | |
584 | close to the Linux bridge. | |
585 | - The "tutorial" directory contains a new tutorial for some advanced | |
586 | Open vSwitch features. | |
587 | - Stable bond mode has been removed. | |
588 | - The autopath action has been removed. | |
589 | - New support for the data encapsulation format of the LISP tunnel | |
590 | protocol (RFC 6830). An external control plane or manual flow | |
591 | setup is required for EID-to-RLOC mapping. | |
592 | - OpenFlow: | |
593 | * The "dec_mpls_ttl" and "set_mpls_ttl" actions from OpenFlow | |
594 | 1.1 and later are now implemented. | |
595 | * New "stack" extension for use in actions, to push and pop from | |
596 | NXM fields. | |
597 | * The "load" and "set_field" actions can now modify the "in_port". (This | |
598 | allows one to enable output to a flow's input port by setting the | |
599 | in_port to some unused value, such as OFPP_NONE.) | |
600 | - ovs-dpctl: | |
601 | * New debugging commands "add-flow", "mod-flow", "del-flow". | |
602 | - In dpif-based bridges, cache action translations, which can improve | |
603 | flow set up performance by 80% with a complicated flow table. | |
604 | - New syslog format, prefixed with "ovs|", to be easier to filter. | |
605 | - RHEL: Removes the default firewall rule that allowed GRE traffic to | |
606 | pass through. Any users that relied on this automatic firewall hole | |
607 | will have to manually configure it. The ovs-ctl(8) manpage documents | |
608 | the "enable-protocol" command that can be used as an alternative. | |
609 | - New CFM demand mode which uses data traffic to indicate interface | |
610 | liveness. | |
611 | ||
612 | -- Open vSwitch team <dev@openvswitch.org> Wed, 28 Aug 2013 14:31:44 -0700 | |
613 | ||
614 | openvswitch (1.10.0-1) unstable; urgency=low | |
615 | [ Open vSwitch team ] | |
616 | * New upstream version | |
617 | - Bridge compatibility support has been removed. Any uses that | |
618 | rely on ovs-brcompatd will have to stick with Open vSwitch 1.9.x | |
619 | or adapt to native Open vSwitch support (e.g. use ovs-vsctl instead | |
620 | of brctl). | |
621 | - The maximum size of the MAC learning table is now configurable. | |
622 | - With the Linux datapath, packets for new flows are now queued | |
623 | separately on a per-port basis, so it should no longer be | |
624 | possible for a large number of new flows arriving on one port to | |
625 | prevent new flows from being processed on other ports. | |
626 | - Many "ovs-vsctl" database commands now accept an --if-exists option. | |
627 | Please refer to the ovs-vsctl manpage for details. | |
628 | - OpenFlow: | |
629 | - Experimental support for newer versions of OpenFlow. See | |
630 | the "What versions of OpenFlow does Open vSwitch support?" | |
631 | question in the FAQ for more details. | |
632 | - The OpenFlow "dp_desc" may now be configured by setting the | |
633 | value of other-config:dp-desc in the Bridge table. | |
634 | - It is possible to request the OpenFlow port number with the | |
635 | "ofport_request" column in the Interface table. | |
636 | - Tunneling: | |
637 | - New support for the VXLAN tunnel protocol (see the IETF draft here: | |
638 | http://tools.ietf.org/html/draft-mahalingam-dutt-dcops-vxlan-03). | |
639 | - Tunneling requires the version of the kernel module paired with | |
640 | Open vSwitch 1.9.0 or later. | |
641 | - Inheritance of the Don't Fragment bit in IP tunnels (df_inherit) | |
642 | is no longer supported. | |
643 | - Path MTU discovery is no longer supported. | |
644 | - ovs-dpctl: | |
645 | - The "dump-flows" and "del-flows" no longer require an argument | |
646 | if only one datapath exists. | |
647 | - ovs-appctl: | |
648 | - New "vlog/disable-rate-limit" and "vlog/enable-rate-limit" | |
649 | commands available allow control over logging rate limits. | |
650 | - New "dpif/dump-dps", "dpif/show", and "dpif/dump-flows" command | |
651 | that mimic the equivalent ovs-dpctl commands. | |
652 | - The ofproto library is now responsible for assigning OpenFlow port | |
653 | numbers. An ofproto implementation should assign them when | |
654 | port_construct() is called. | |
655 | - All dpif-based bridges of a particular type share a common | |
656 | datapath called "ovs-<type>", e.g. "ovs-system". The ovs-dpctl | |
657 | commands will now return information on that shared datapath. To | |
658 | get the equivalent bridge-specific information, use the new | |
659 | "ovs-appctl dpif/*" commands. | |
660 | - Backward-incompatible changes: | |
661 | - Earlier Open vSwitch versions treated ANY as a wildcard in flow | |
662 | syntax. OpenFlow 1.1 adds a port named ANY, which introduces a | |
663 | conflict. ANY was rarely used in flow syntax, so we chose to | |
664 | retire that meaning of ANY in favor of the OpenFlow 1.1 meaning. | |
665 | - Patch ports no longer require kernel support, so they now work | |
666 | with FreeBSD and the kernel module built into Linux 3.3 and later. | |
667 | ||
668 | -- Open vSwitch team <dev@openvswitch.org> Wed, 01 May 2013 14:28:21 -0700 | |
669 | ||
670 | openvswitch (1.9.0-1) unstable; urgency=low | |
671 | [ Open vSwitch team ] | |
672 | * New upstream version | |
673 | - Datapath: | |
674 | - Support for ipv6 set action. | |
675 | - SKB mark matching and setting. | |
676 | - support for Linux kernels up to 3.8 | |
677 | - FreeBSD is now a supported platform, thanks to code contributions from | |
678 | Gaetano Catalli, Ed Maste, and Giuseppe Lettieri. | |
679 | - ovs-bugtool: New --ovs option to report only OVS related information. | |
680 | - New %t and %T log escapes to identify the subprogram within a | |
681 | cooperating group of processes or threads that emitted a log message. | |
682 | The default log patterns now include this information. | |
683 | - OpenFlow: | |
684 | - Allow bitwise masking for SHA and THA fields in ARP, SLL and TLL | |
685 | fields in IPv6 neighbor discovery messages, and IPv6 flow label. | |
686 | - Adds support for writing to the metadata field for a flow. | |
687 | - Tunneling: | |
688 | - The tunneling code no longer assumes input and output keys are | |
689 | symmetric. If they are not, PMTUD needs to be disabled for | |
690 | tunneling to work. Note this only applies to flow-based keys. | |
691 | - New support for a nonstandard form of GRE that supports a 64-bit key. | |
692 | - Tunnel Path MTU Discovery default value was set to 'disabled'. | |
693 | This feature is deprecated and will be removed soon. | |
694 | - Tunnel header caching removed. | |
695 | - ovs-ofctl: | |
696 | - Commands and actions that accept port numbers now also accept keywords | |
697 | that represent those ports (such as LOCAL, NONE, and ALL). This is | |
698 | also the recommended way to specify these ports, for compatibility | |
699 | with OpenFlow 1.1 and later (which use the OpenFlow 1.0 numbers | |
700 | for these ports for different purposes). | |
701 | - ovs-dpctl: | |
702 | - Support requesting the port number with the "port_no" option in | |
703 | the "add-if" command. | |
704 | - ovs-pki: The "online PKI" features have been removed, along with | |
705 | the ovs-pki-cgi program that facilitated it, because of some | |
706 | alarmist insecurity claims. We do not believe that these claims | |
707 | are true, but because we do not know of any users for this | |
708 | feature it seems better on balance to remove it. (The ovs-pki-cgi | |
709 | program was not included in distribution packaging.) | |
710 | - ovsdb-server now enforces the immutability of immutable columns. This | |
711 | was not enforced in earlier versions due to an oversight. | |
712 | - The following features are now deprecated. They will be removed no | |
713 | earlier than February 2013. Please email dev@openvswitch.org with | |
714 | concerns. | |
715 | - Bridge compatibility. | |
716 | - Stable bond mode. | |
717 | - The autopath action. | |
718 | - Interface type "null". | |
719 | - Numeric values for reserved ports (see "ovs-ofctl" note above). | |
720 | - Tunnel Path MTU Discovery. | |
721 | - CAPWAP tunnel support. | |
722 | - The data in the RARP packets can now be matched in the same way as the | |
723 | data in ARP packets. | |
724 | ||
725 | -- Open vSwitch team <dev@openvswitch.org> Tue, 26 Feb 2013 11:23:19 -0700 | |
726 | ||
727 | openvswitch (1.8.0-1) unstable; urgency=low | |
728 | [ Open vSwitch team ] | |
729 | * New upstream version | |
730 | *** Internal only release *** | |
731 | - New FAQ. Please send updates and additions! | |
732 | - Authors of controllers, please read the new section titled "Action | |
733 | Reproduction" in DESIGN, which describes an Open vSwitch change in | |
734 | behavior in corner cases that may affect some controllers. | |
735 | - ovs-l3ping: | |
736 | - A new test utility that can create L3 tunnel between two Open | |
737 | vSwitches and detect connectivity issues. | |
738 | - ovs-ofctl: | |
739 | - New --sort and --rsort options for "dump-flows" command. | |
740 | - "mod-port" command can now control all OpenFlow config flags. | |
741 | - OpenFlow: | |
742 | - Allow general bitwise masking for IPv4 and IPv6 addresses in | |
743 | IPv4, IPv6, and ARP packets. (Previously, only CIDR masks | |
744 | were allowed.) | |
745 | - Allow support for arbitrary Ethernet masks. (Previously, only | |
746 | the multicast bit in the destination address could be individually | |
747 | masked.) | |
748 | - New field OXM_OF_METADATA, to align with OpenFlow 1.1. | |
749 | - The OFPST_QUEUE request now reports an error if a specified port or | |
750 | queue does not exist, or for requests for a specific queue on all | |
751 | ports, if the specified queue does not exist on any port. (Previous | |
752 | versions generally reported an empty set of results.) | |
753 | - New "flow monitor" feature to allow controllers to be notified of | |
754 | flow table changes as they happen. | |
755 | - Additional protocols are not mirrored and dropped when forward-bpdu is | |
756 | false. For a full list, see the ovs-vswitchd.conf.db man page. | |
757 | - Open vSwitch now sends RARP packets in situations where it previously | |
758 | sent a custom protocol, making it consistent with behavior of QEMU and | |
759 | VMware. | |
760 | - All Open vSwitch programs and log files now show timestamps in UTC, | |
761 | instead the local timezone, by default. | |
762 | ||
763 | -- Open vSwitch team <dev@openvswitch.org> Mon, 16 Jul 2012 16:44:52 +0900 | |
764 | ||
765 | openvswitch (1.7.0-1) unstable; urgency=low | |
766 | [ Open vSwitch team ] | |
767 | * New upstream version | |
768 | - kernel modules are renamed. openvswitch_mod.ko is now | |
769 | openvswitch.ko and brcompat_mod.ko is now brcompat.ko. | |
770 | - Increased the number of NXM registers to 8. | |
771 | - Added ability to configure dscp setting for manager and controller | |
772 | connections. By default, these connections have a DSCP value of | |
773 | Internetwork Control (0xc0). | |
774 | - Added the granular link health statistics, 'cfm_health', to an | |
775 | interface. | |
776 | - OpenFlow: | |
777 | - Added support to mask nd_target for ICMPv6 neighbor discovery flows. | |
778 | - Added support for OpenFlow 1.3 port description (OFPMP_PORT_DESC) | |
779 | multipart messages. | |
780 | - ovs-ofctl: | |
781 | - Added the "dump-ports-desc" command to retrieve port | |
782 | information using the new port description multipart messages. | |
783 | - ovs-test: | |
784 | - Added support for spawning ovs-test server from the client. | |
785 | - Now ovs-test is able to automatically create test bridges and ports. | |
786 | - "ovs-dpctl dump-flows" now prints observed TCP flags in TCP flows. | |
787 | - Tripled flow setup performance. | |
788 | - The "coverage/log" command previously available through ovs-appctl | |
789 | has been replaced by "coverage/show". The new command replies with | |
790 | coverage counter values, instead of logging them. | |
791 | ||
792 | -- Open vSwitch team <dev@openvswitch.org> Mon, 30 Jul 2012 17:23:57 +0900 | |
793 | ||
794 | openvswitch (1.6.1-1) unstable; urgency=low | |
795 | [ Open vSwitch team ] | |
796 | * New upstream version | |
797 | - Allow OFPP_CONTROLLER as the in_port for packet-out messages. | |
798 | ||
799 | -- Open vSwitch team <dev@openvswitch.org> Mon, 25 Jun 2012 13:52:17 +0900 | |
800 | ||
801 | openvswitch (1.6.0-1) unstable; urgency=low | |
802 | [ Open vSwitch team ] | |
803 | * New upstream version | |
804 | - bonding | |
805 | - LACP bonds no longer fall back to balance-slb when negotiations fail. | |
806 | Instead they drop traffic. | |
807 | - The default bond_mode changed from SLB to active-backup, to protect | |
808 | unsuspecting users from the significant risks of SLB bonds (which are | |
809 | documented in vswitchd/INTERNALS). | |
810 | - Load balancing can be disabled by setting the bond-rebalance-interval | |
811 | to zero. | |
812 | - OpenFlow: | |
813 | - Added support for bitwise matching on TCP and UDP ports. | |
814 | See ovs-ofctl(8) for more information. | |
815 | - NXM flow dumps now include times elapsed toward idle and hard | |
816 | timeouts. | |
817 | - Added an OpenFlow extension NXT_SET_ASYNC_CONFIG that allows | |
818 | controllers more precise control over which OpenFlow messages they | |
819 | receive asynchronously. | |
820 | - New "fin_timeout" action. | |
821 | - Added "fin_timeout" support to "learn" action. | |
822 | - The default MAC learning timeout has been increased from 60 seconds | |
823 | to 300 seconds. The MAC learning timeout is now configurable. | |
824 | - When QoS settings for an interface do not configure a default queue | |
825 | (queue 0), Open vSwitch now uses a default configuration for that | |
826 | queue, instead of dropping all packets as in previous versions. | |
827 | - Logging to console and file will have UTC timestamp as a default for all | |
828 | the daemons. An example of the default format is 2012-01-27T16:35:17Z. | |
829 | ovs-appctl can be used to change the default format as before. | |
830 | - New support for limiting the number of flows in an OpenFlow flow | |
831 | table, with configurable policy for evicting flows upon | |
832 | overflow. See the Flow_Table table in ovs-vswitch.conf.db(5) | |
833 | for more information. | |
834 | - New "enable-async-messages" column in the Controller table. If set to | |
835 | false, OpenFlow connections to the controller will initially have all | |
836 | asynchronous messages disabled, overriding normal OpenFlow behavior. | |
837 | - ofproto-provider interface: | |
838 | - "struct rule" has a new member "used" that ofproto implementations | |
839 | should maintain by updating with ofproto_rule_update_used(). | |
840 | - ovsdb-client: | |
841 | - The new option --timestamp causes the "monitor" command to print | |
842 | a timestamp with every update. | |
843 | - CFM module CCM broadcasts can now be tagged with an 802.1p priority. | |
844 | ||
845 | -- Open vSwitch team <dev@openvswitch.org> Fri, 24 Feb 2012 11:12:48 +0900 | |
846 | ||
847 | openvswitch (1.5.0-1) unstable; urgency=low | |
848 | [ Open vSwitch team ] | |
849 | * New upstream version | |
850 | - OpenFlow: | |
851 | - Added support for querying, modifying, and deleting flows | |
852 | based on flow cookie when using NXM. | |
853 | - Added new NXM_PACKET_IN format. | |
854 | - ovs-ofctl: | |
855 | - Added daemonization support to the monitor and snoop commands. | |
856 | - ovs-vsctl: | |
857 | - The "find" command supports new set relational operators | |
858 | {=}, {!=}, {<}, {>}, {<=}, and {>=}. | |
859 | - ovsdb-tool now uses the typical database and schema installation | |
860 | directories as defaults. | |
861 | ||
862 | -- Open vSwitch team <dev@openvswitch.org> Fri, 01 June 2012 13:06:00 +0900 | |
863 | ||
864 | openvswitch (1.4.0+git20120426-1) unstable; urgency=low | |
865 | ||
866 | * New upstream release fixing the following bugs: | |
867 | o Broken log rotation. | |
868 | o Use-after-free error when ports disappear. | |
869 | o Minor memory leaks. | |
870 | o Testsuite failures on big-endian architectures. | |
871 | ||
872 | -- Ben Pfaff <pfaffben@debian.org> Thu, 26 Apr 2012 13:46:55 -0700 | |
873 | ||
874 | openvswitch (1.4.0+git20120321-1) unstable; urgency=low | |
875 | ||
876 | * New upstream version including: | |
877 | o Features: | |
878 | - ovs-vsctl: Allow "fake bridges" to be created for VLAN 0. | |
879 | - vswitchd: Make the MAC entry aging time configurable. | |
880 | - mac-learning: Increase MAC learning timeout to 300 seconds. | |
881 | o Bug fixes: | |
882 | - netdev-linux: Fix use-after-free when netdev_dump_queues() deletes | |
883 | queues. | |
884 | - netlink-socket: Increase Netlink socket receive buffer size. | |
885 | - ofproto: Fix code that keeps track of MTU. | |
886 | - ovs-monitor-ipsec: Detect correctly IPSEC configuration changes | |
887 | - bond: Incorrectly reported an error in appctl. | |
888 | - socket-util: Unlink Unix domain sockets that bind but fail to connect. | |
889 | - bridge: Remove unwanted ports at time of ofproto creation. | |
890 | - dpif-linux: Make dpif_linux_port_query_by_name() query only one | |
891 | datapath. | |
892 | - ofproto-dpif: Cleanup STP on ports when disabled on their bridge. | |
893 | - configure: Try to extract kernel source directory from build Makefile. | |
894 | - vswitchd: Always configure a default queue for QoS. | |
895 | - ofproto-dpif: Don't output to in_port even if in_port is OFPP_LOCAL. | |
896 | - sflow_agent: Use snprintf() in place of sprintf(). | |
897 | o Packaging: | |
898 | - Move PKI directory to FHS-compliant location. Closes: #661090. | |
899 | Thanks to Andreas Beckmann <debian@abeckmann.de> for reporting | |
900 | this bug. | |
901 | - Use a different way to avoid failing install without kernel module. | |
902 | - Avoid unit test failure when doing "unofficial" builds. | |
903 | - Bump standards-version to 3.9.3. | |
904 | - Remove some useless files from the dkms package. | |
905 | - Clean .pyc files in "clean" target. | |
906 | - Remove po-debconf build dependency. | |
907 | - Build-depend on python-all to pull in all Python versions. | |
908 | - Add missing ${python:Depends} to openvswitch-test package. | |
909 | - Improve long descriptions so as to better describe the packages. | |
910 | - Bump debhelper compat level to 8 and make build-depends consistent. | |
911 | - Fix exit status of openvswitch-switch init script "status" command. | |
912 | - Use provided kernel source dir instead of host kernel version. | |
913 | - Do not run "make" if "configure" fails during DKMS build. | |
914 | - Look in /lib/modules instead of /usr/src for DKMS kernel sources. | |
915 | - Fix dependencies for openvswitch-datapath-dkms package. | |
916 | - Don't install Python modules for obsolete Python versions. | |
917 | - Add dependency on ${misc:Depends} to openvswitch-test | |
918 | o Documentation improvements: | |
919 | - ovsdb-doc: Use minus sign in negative numbers in nroff output. | |
920 | - ovsdb-doc: Convert '-' preceding a number as a minus sign, not a | |
921 | hyphen. | |
922 | - ovsdb-doc: Put NAME section into generated manpage. | |
923 | - Fix typo in manpage. | |
924 | - vswitchd: Document behavior of 802.1p priorities with VLAN splinters. | |
925 | - netdev: Fix typo in error message. | |
926 | - INSTALL.Linux: minor typo | |
927 | ||
928 | * Many thanks to Thomas Goirand <zigo@debian.org> for contributing many | |
929 | of the packaging fixes listed above. | |
930 | ||
931 | * This version fixes most of the lintian errors described in bug | |
932 | #663051, but a few remain, so this upload does not close that bug. I | |
933 | believe that this upload should be suitable for downgrading that bug's | |
934 | severity. | |
935 | ||
936 | -- Ben Pfaff <pfaffben@debian.org> Wed, 21 Mar 2012 10:00:28 -0700 | |
937 | ||
938 | openvswitch (1.4.0-2+nmu1) unstable; urgency=low | |
939 | ||
940 | * Non maintainer upload. | |
941 | * Removes all patches in debian/patches, because they are patching stuff | |
942 | inconditionally in debian/*, and this should be applied by default. | |
943 | * Uses the correct ${kernel_source_dir} in debian/dkms.conf.in, so that | |
944 | the kernel module builds as expected (Closes: #659685). | |
945 | ||
946 | -- Thomas Goirand <zigo@debian.org> Thu, 08 Mar 2012 08:46:24 +0000 | |
947 | ||
948 | openvswitch (1.4.0-2) unstable; urgency=low | |
949 | ||
950 | * Use explicit DKMS variable for kernel source directory | |
951 | - 0001-debian-Fix-dependencies-for-openvswitch-datapath-dkm.patch | |
952 | - 0002-debian-Look-in-lib-modules-instead-of-usr-src-for-DK.patch | |
953 | - 0001-debian-Use-provided-kernel-source-dir.patch | |
954 | - 0001-debian-Do-not-run-make-if-configure-fails-during-DKM.patch | |
955 | - (closes: #659685) | |
956 | * Don't install Python modules for obsolete Python versions | |
957 | - 0001-debian-Don-t-install-Python-modules-for-obsolete-Pyt.patch | |
958 | ||
959 | -- Simon Horman <horms@debian.org> Tue, 14 Feb 2012 11:43:13 +0900 | |
960 | ||
961 | openvswitch (1.4.0-1) unstable; urgency=low | |
962 | [ Open vSwitch team ] | |
963 | * New upstream version | |
964 | - Compatible with Open vSwitch kernel module included in Linux 3.3. | |
965 | - New "VLAN splinters" feature to work around buggy device drivers | |
966 | in old Linux versions. (This feature is deprecated. When | |
967 | broken device drivers are no longer in widespread use, we will | |
968 | delete this feature.) See ovs-vswitchd.conf.db(5) for more | |
969 | information. | |
970 | - OpenFlow: | |
971 | - Added ability to match on IPv6 flow label through NXM. | |
972 | - Added ability to match on ECN bits in IPv4 and IPv6 through NXM. | |
973 | - Added ability to match on TTL in IPv4 and IPv6 through NXM. | |
974 | - Added ability to modify ECN bits in IPv4. | |
975 | - Added ability to modify TTL in IPv4. | |
976 | - ovs-vswitchd: | |
977 | - Don't require the "normal" action to use mirrors. Traffic will | |
978 | now be properly mirrored for any flows, regardless of their | |
979 | actions. | |
980 | - Track packet and byte statistics sent on mirrors. | |
981 | - ovs-appctl: | |
982 | - New "fdb/flush" command to flush bridge's MAC learning table. | |
983 | - ovs-test: | |
984 | - A new distributed testing tool that allows one to diagnose performance | |
985 | and connectivity issues. This tool currently is not included in RH or | |
986 | Xen packages. | |
987 | - RHEL packaging now supports integration with Red Hat network scripts. | |
988 | - Debian: Depend on python (>= 2.7) | python-argparse instead of | |
989 | python-argparse to avoid pulling in python2.6 | |
990 | (closes: #653645) | |
991 | ||
992 | -- Open vSwitch team <dev@openvswitch.org> Mon, 30 Jan 2012 23:36:00 +0000 | |
993 | ||
994 | openvswitch (1.3.0-1) unstable; urgency=low | |
995 | [ Open vSwitch team ] | |
996 | * New upstream version | |
997 | - OpenFlow: | |
998 | - Added an OpenFlow extension which allows the "output" action to accept | |
999 | NXM fields. | |
1000 | - Added an OpenFlow extension for flexible learning. | |
1001 | - Bumped number of NXM registers from four to five. | |
1002 | - ovs-appctl: | |
1003 | - New "version" command to determine version of running daemon. | |
1004 | - If no argument is provided for "cfm/show", displays detailed | |
1005 | information about all interfaces with CFM enabled. | |
1006 | - If no argument is provided for "lacp/show", displays detailed | |
1007 | information about all ports with LACP enabled. | |
1008 | - ovs-vswitchd: | |
1009 | - The software switch now supports 255 OpenFlow tables, instead | |
1010 | of just one. By default, only table 0 is consulted, but the | |
1011 | new NXAST_RESUBMIT_TABLE action can look up in additional | |
1012 | tables. Tables 128 and above are reserved for use by the | |
1013 | switch itself; please use only tables 0 through 127. | |
1014 | - Add support for 802.1D spanning tree (STP). | |
1015 | - Fragment handling extensions: | |
1016 | - New OFPC_FRAG_NX_MATCH fragment handling mode, in which L4 | |
1017 | fields are made available for matching in fragments with | |
1018 | offset 0. | |
1019 | - New NXM_NX_IP_FRAG match field for matching IP fragments (usable | |
1020 | via "ip_frag" in ovs-ofctl). | |
1021 | - New ovs-ofctl "get-frags" and "set-frags" commands to get and set | |
1022 | fragment handling policy. | |
1023 | - CAPWAP tunneling now supports an extension to transport a 64-key. By | |
1024 | default it remains compatible with the old version and other | |
1025 | standards-based implementations. | |
1026 | - Flow setups are now processed in a round-robin manner across ports | |
1027 | to prevent any single client from monopolizing the CPU and conducting | |
1028 | a denial of service attack. | |
1029 | - Added support for native VLAN tagging. A new "vlan_mode" | |
1030 | parameter can be set for "port". Possible values: "access", | |
1031 | "trunk", "native-tagged" and "native-untagged". | |
1032 | - test-openflowd has been removed. Please use ovs-vswitchd instead. | |
1033 | ||
1034 | -- Open vSwitch team <dev@openvswitch.org> Mon, 09 Dec 2011 23:36:00 +0000 | |
1035 | ||
1036 | openvswitch (1.2.0-1) unstable; urgency=low | |
1037 | ||
1038 | [ Open vSwitch team ] | |
1039 | * New upstream version | |
1040 | - New "ofproto" abstraction layer to ease porting to hardware | |
1041 | switching ASICs. | |
1042 | - Packaging for Red Hat Enterprise Linux 5.6 and 6.0. | |
1043 | - Datapath support for Linux kernels up to 3.0. | |
1044 | - OpenFlow: | |
1045 | - New "bundle" and "bundle_load" action extensions. | |
1046 | - Database: | |
1047 | - Implement table unique constraints. | |
1048 | - Support cooperative locking between callers. | |
1049 | - ovs-dpctl: | |
1050 | - New "-s" option for "show" command prints packet and byte | |
1051 | counters for each port. | |
1052 | - ovs-ofctl: | |
1053 | - New "--readd" option for "replace-flows". | |
1054 | - ovs-vsctl: | |
1055 | - New "show" command to print an overview of configuration. | |
1056 | - New "comment" command to add remark that explains intentions. | |
1057 | - ovs-brcompatd has been rewritten to fix long-standing bugs. | |
1058 | - ovs-openflowd has been renamed test-openflowd and moved into the | |
1059 | tests directory. Its presence confused too many users. Please | |
1060 | use ovs-vswitchd instead. | |
1061 | - New ovs-benchmark utility to test flow setup performance. | |
1062 | - A new log level "off" has been added. Configuring a log facility | |
1063 | "off" prevents any messages from being logged to it. Previously, | |
1064 | "emer" was effectively "off" because no messages were ever logged at | |
1065 | level "emer". Now, errors that cause a process to exit are logged | |
1066 | at "emer" level. | |
1067 | - "configure" option --with-l26 has been renamed --with-linux, and | |
1068 | --with-l26-source has been renamed --with-linux-source. The old | |
1069 | names will be removed after the next release, so please update | |
1070 | your scripts. | |
1071 | - The "-2.6" suffix has been dropped from the datapath/linux-2.6 and | |
1072 | datapath/linux-2.6/compat-2.6 directories. | |
1073 | - Feature removals: | |
1074 | - Dropped support for "tun_id_from_cookie" OpenFlow extension. | |
1075 | Please use the extensible match extensions instead. | |
1076 | - Removed the Maintenance_Point and Monitor tables in an effort | |
1077 | to simplify 802.1ag configuration. | |
1078 | - Performance and scalability improvements | |
1079 | - Bug fixes | |
1080 | ||
1081 | -- Open vSwitch team <dev@openvswitch.org> Wed, 03 Aug 2011 14:43:00 +0000 | |
1082 | ||
1083 | openvswitch (1.1.1-1) unstable; urgency=low | |
1084 | ||
1085 | [ Open vSwitch team ] | |
1086 | * Bug fixes. | |
1087 | ||
1088 | [ Simon Horman ] | |
1089 | * docs: Suppress warning marcro DD not defined | |
1090 | (upstream commit 58f870d0) | |
1091 | * debian: Make openvswitch depend on Python | |
1092 | (upstream commit aa41cb61) | |
1093 | * debian: Don't begin openvswitch-pki description with article. | |
1094 | (upstream commit bc6bb66) | |
1095 | * Debian: Add ${misc:Depends} dependency to python-openvswitch | |
1096 | * Debian: Update standards version from 3.9.1 to 3.9.2 | |
1097 | * Debian: ${source:Version} dependency on python openvswitch | |
1098 | * Debian: ${source:Version} dependency for python openvswitch | |
1099 | * Switch to dpkg-source 3.0 (quilt) format | |
1100 | - For local non-debian/ patches (above) | |
1101 | ||
1102 | -- Simon Horman <horms@debian.org> Wed, 15 Jun 2011 10:46:15 +0900 | |
1103 | ||
1104 | openvswitch (1.1.0-1) unstable; urgency=low | |
1105 | ||
1106 | [ Open vSwitch team ] | |
1107 | * New upstream version | |
1108 | - Ability to define policies over IPv6 | |
1109 | - LACP | |
1110 | - 802.1ag CCM | |
1111 | - Support for extensible match extensions to OpenFlow | |
1112 | - QoS: | |
1113 | - Support for HFSC qdisc. | |
1114 | - Queue used by in-band control can now be configured. | |
1115 | - Kernel: | |
1116 | - Kernel<->userspace interface has been reworked and should be | |
1117 | close to a stable ABI now. | |
1118 | - "Port group" concept has been dropped. | |
1119 | - GRE over IPSEC tunnels | |
1120 | - Bonding: | |
1121 | - New active backup bonding mode. | |
1122 | - New L4 hashing support when LACP is enabled. | |
1123 | - Source MAC hash now includes VLAN field also. | |
1124 | - miimon support. | |
1125 | - Greatly improved handling of large flow tables | |
1126 | - ovs-dpctl: | |
1127 | - "show" command now prints full vport configuration. | |
1128 | - "dump-groups" command removed since kernel support for | |
1129 | port groups was dropped. | |
1130 | - ovs-vsctl: | |
1131 | - New commands for working with the new Managers table. | |
1132 | - "list" command enhanced with new formatting options and --columns | |
1133 | option. | |
1134 | - "get" command now accepts new --id option. | |
1135 | - New "find" command. | |
1136 | - ovs-ofctl: | |
1137 | - New "queue-stats" command for printing queue stats. | |
1138 | - New commands "replace-flows" and "diff-flows". | |
1139 | - Commands to add and remove flows can now read from files. | |
1140 | - New --flow-format option to enable or disable NXM. | |
1141 | - New --more option to increase OpenFlow message verbosity. | |
1142 | - Removed "tun-cookie" command, which is no longer useful. | |
1143 | - ovs-controller enhancements for testing various features. | |
1144 | - New ovs-vlan-test command for testing for Linux kernel driver VLAN | |
1145 | bugs. New ovs-vlan-bug-workaround command for enabling and | |
1146 | disabling a workaround for these driver bugs. | |
1147 | - OpenFlow support: | |
1148 | - "Resubmit" actions now update flow statistics. | |
1149 | - New "register" extension for use in matching and actions, via NXM. | |
1150 | - New "multipath" experimental action extension. | |
1151 | - New support for matching multicast Ethernet frames, via NXM. | |
1152 | - New extension for OpenFlow vendor error codes. | |
1153 | - New extension to set the QoS output queue without actually | |
1154 | sending to an output port. | |
1155 | - Open vSwitch now reports a single flow table, instead of | |
1156 | separate hash and wildcard tables. This better models the | |
1157 | current implementation. | |
1158 | - New experimental "note" action. | |
1159 | - New "ofproto/trace" ovs-appctl command and associated utilities | |
1160 | to ease debugging complex flow tables. | |
1161 | - Database: | |
1162 | - Schema documentation now includes an entity-relationship diagram. | |
1163 | - The database is now garbage collected. In most tables, | |
1164 | unreferenced rows will be deleted automatically. | |
1165 | - Many tables now include statistics updated periodically by | |
1166 | ovs-vswitchd or ovsdb-server. | |
1167 | - Every table now has an "external-ids" column for use by OVS | |
1168 | integrators. | |
1169 | - There is no default controller anymore. Each bridge must have its | |
1170 | controller individually specified. | |
1171 | - The "fail-mode" is now a property of a Bridge instead of a Controller. | |
1172 | - New versioning and checksum features. | |
1173 | - New Managers table and manager_options column in Open_vSwitch table | |
1174 | for specifying managers. The old "managers" column in the | |
1175 | Open_vSwitch table has been removed. | |
1176 | - Many "name" columns are now immutable. | |
1177 | - Feature removals: | |
1178 | - Dropped support for XenServer pre-5.6.100. | |
1179 | - Dropped support for Linux pre-2.6.18. | |
1180 | - Dropped controller discovery support. | |
1181 | - Dropped "ovs-ofctl status" and the OpenFlow extension that it used. | |
1182 | Statistics reporting in the database is a rough equivalent. | |
1183 | - Dropped the "corekeeper" package (now separate, at | |
1184 | http://openvswitch.org/cgi-bin/gitweb.cgi?p=corekeeper). | |
1185 | - Performance and scalability improvements | |
1186 | - Bug fixes | |
1187 | ||
1188 | [ Simon Horman ] | |
1189 | * Add the following fixes from upstream branch-1.1 | |
1190 | - 7f1aca9 dpif-linux: Avoid logging error on ENOENT in | |
1191 | dpif_linux_is_internal_device(). | |
1192 | - 8996f83 dpif-linux: Avoid segfault on netdev_get_stats() without kernel | |
1193 | module. | |
1194 | - 002d4a3 vswitch: Improve schema documentation. | |
1195 | - 58bd294 cfm: Fix broken fault logic. | |
1196 | - c042664 bridge: Run once before configuring CFM. | |
1197 | * Switch to dpkg-source 3.0 (quilt) format | |
1198 | ||
1199 | -- Simon Horman <horms@debian.org> Wed, 27 Apr 2011 17:11:10 +0900 | |
1200 | ||
1201 | openvswitch (1.1.0~pre2.g2.ea763e0e-1) unstable; urgency=low | |
1202 | ||
1203 | * Git snapshot, including | |
1204 | - tests: Fix Y2011 bug in testsuite | |
1205 | (closes: #609506) | |
1206 | ||
1207 | -- Simon Horman <horms@debian.org> Wed, 12 Jan 2011 08:34:35 +0900 | |
1208 | ||
1209 | openvswitch (1.1.0~pre2.g1.bbe8d06e-1) unstable; urgency=low | |
1210 | ||
1211 | * Git snaptshot | |
1212 | ||
1213 | -- Simon Horman <horms@debian.org> Thu, 06 Jan 2011 11:11:55 +0900 | |
1214 | ||
1215 | openvswitch (1.1.0~pre2-5) unstable; urgency=low | |
1216 | ||
1217 | * Open vSwitch only works on Linux so set | |
1218 | the Architecture of binary packages to linux-any accordingly | |
1219 | ||
1220 | -- Simon Horman <horms@debian.org> Tue, 23 Nov 2010 07:55:19 +0900 | |
1221 | ||
1222 | openvswitch (1.1.0~pre2-4) unstable; urgency=low | |
1223 | ||
1224 | * Add procps to Build-Depends | |
1225 | (closes: #602891) | |
1226 | ||
1227 | -- Simon Horman <horms@debian.org> Tue, 16 Nov 2010 06:46:17 +0900 | |
1228 | ||
1229 | openvswitch (1.1.0~pre2-3) unstable; urgency=low | |
1230 | ||
1231 | * Remove the corekeeper package as it isn't strongly related | |
1232 | to Open vSwitch. It has subsequently been broken off into | |
1233 | a separate source repository and may be uploaded as its | |
1234 | own debian source package. | |
1235 | http://openvswitch.org/cgi-bin/gitweb.cgi?p=corekeeper;a=summary | |
1236 | (closes: #602946) | |
1237 | * Avoid the use of long socket names. | |
1238 | (closes: #602891, closes: #602911) | |
1239 | ||
1240 | -- Simon Horman <horms@debian.org> Thu, 11 Nov 2010 06:35:05 +0900 | |
1241 | ||
1242 | openvswitch (1.1.0~pre2-2) unstable; urgency=low | |
1243 | ||
1244 | * Clarify licensing of files in xenserver/ | |
1245 | ||
1246 | -- Simon Horman <horms@debian.org> Thu, 23 Sep 2010 10:56:18 +0900 | |
1247 | ||
1248 | openvswitch (1.1.0~pre2-1) unstable; urgency=low | |
1249 | ||
1250 | * New upstream version | |
1251 | - Bug fixes | |
1252 | ||
1253 | -- Simon Horman <horms@debian.org> Wed, 15 Sep 2010 18:28:59 +0900 | |
1254 | ||
1255 | openvswitch (1.1.0~pre1-1) unstable; urgency=low | |
1256 | ||
1257 | * New upstream version | |
1258 | - OpenFlow 1.0 slicing (QoS) functionality | |
1259 | - Python bindings for configuration database (no write support) | |
1260 | - Performance and scalability improvements | |
1261 | - Bug fixes | |
1262 | ||
1263 | -- Open vSwitch team <dev@openvswitch.org> Tue, 31 Aug 2010 23:20:00 +0000 | |
1264 | ||
1265 | openvswitch (1.0.1-1) unstable; urgency=low | |
1266 | ||
1267 | * New upstream version. | |
1268 | ||
1269 | -- Open vSwitch team <dev@openvswitch.org> Mon, 17 May 2010 10:36:00 +0000 |