]>
Commit | Line | Data |
---|---|---|
50e5523b IM |
1 | Post-v2.15.0 |
2 | --------------------- | |
9513c023 BP |
3 | - In ovs-vsctl and vtep-ctl, the "find" command now accept new |
4 | operators {in} and {not-in}. | |
50e5523b IM |
5 | |
6 | ||
afce96fa | 7 | v2.15.0 - xx xxx xxxx |
9cfb1d0f | 8 | --------------------- |
7024ddf3 | 9 | - OVSDB: |
2ccd66f5 IM |
10 | * Changed format in which ovsdb transactions are stored in database files. |
11 | Now each transaction contains diff of data instead of the whole new | |
12 | value of a column. | |
13 | New ovsdb-server process will be able to read old database format, but | |
14 | old processes will *fail* to read database created by the new one. | |
15 | For cluster and active-backup service models follow upgrade instructions | |
16 | in 'Upgrading from version 2.14 and earlier to 2.15 and later' section | |
17 | of ovsdb(7). | |
7024ddf3 DC |
18 | * New unixctl command 'ovsdb-server/get-db-storage-status' to show the |
19 | status of the storage that's backing a database. | |
f38f98a2 IM |
20 | * New unixctl command 'ovsdb-server/memory-trim-on-compaction on|off'. |
21 | If turned on, ovsdb-server will try to reclaim all the unused memory | |
22 | after every DB compaction back to OS. Disabled by default. | |
eca34ebd IM |
23 | * Maximum backlog on RAFT connections limited to 500 messages or 4GB. |
24 | Once threshold reached, connection is dropped (and re-established). | |
80e3becd | 25 | Use the 'cluster/set-backlog-threshold' command to change limits. |
86f624e4 IS |
26 | - DPDK: |
27 | * Removed support for vhost-user dequeue zero-copy. | |
252e1e57 | 28 | * Add support for DPDK 20.11. |
2fe34c03 TZ |
29 | - Userspace datapath: |
30 | * Add the 'pmd' option to "ovs-appctl dpctl/dump-flows", which | |
31 | restricts a flow dump to a single PMD thread if set. | |
f4336f50 GR |
32 | * New 'options:dpdk-vf-mac' field for DPDK interface of VF ports, |
33 | that allows configuring the MAC address of a VF representor. | |
a27d70a8 EC |
34 | * Add generic IP protocol support to conntrack. With this change, all |
35 | none UDP, TCP, and ICMP traffic will be treated as general L3 | |
36 | traffic, i.e. using 3 tupples. | |
62ab5594 CF |
37 | * Add parameters 'pmd-auto-lb-load-threshold' and |
38 | 'pmd-auto-lb-improvement-threshold' to configure PMD auto load balance | |
39 | behaviour. | |
f00c47b8 TE |
40 | - The environment variable OVS_UNBOUND_CONF, if set, is now used |
41 | as the DNS resolver's (unbound) configuration file. | |
f3b345bd GR |
42 | - Linux datapath: |
43 | * Support for kernel versions up to 5.8.x. | |
e39897fe IM |
44 | - Terminology: |
45 | * The terms "master" and "slave" have been replaced by "primary" and | |
46 | "secondary", respectively, for OpenFlow connection roles. | |
91fc374a BP |
47 | * The term "slave" has been replaced by "member", for bonds, LACP, and |
48 | OpenFlow bundle actions. | |
6cb2f5a6 IM |
49 | - Support for GitHub Actions based continuous integration builds has been |
50 | added. | |
ebe0e518 MV |
51 | - Bareudp Tunnel |
52 | * Bareudp device support is present in linux kernel from version 5.7 | |
53 | * Kernel bareudp device is not backported to ovs tree. | |
54 | * Userspace datapath support is not added | |
bf8812cd EC |
55 | - ovs-dpctl and 'ovs-appctl dpctl/': |
56 | * New commands '{add,mod,del}-flows' where added, which allow adding, | |
57 | deleting, or modifying flows based on information read from a file. | |
aa8bed09 MG |
58 | - IPsec: |
59 | * Add option '--no-cleanup' to allow ovs-monitor-ipsec to stop without | |
60 | tearing down IPsec tunnels. | |
fe5ff26a MG |
61 | * Add option '--no-restart-ike-daemon' to allow ovs-monitor-ipsec to start |
62 | without restarting ipsec daemon. | |
acb46c58 GR |
63 | - Building the Linux kernel module from the OVS source tree is deprecated |
64 | * Support for the Linux kernel is capped at version 5.8 | |
65 | * Only bug fixes for the Linux OOT kernel module will be accepted. | |
66 | * The Linux kernel module will be fully removed from the OVS source tree | |
67 | in OVS branch 2.18 | |
9cfb1d0f IM |
68 | |
69 | ||
5601e86c | 70 | v2.14.0 - 17 Aug 2020 |
34b00fd2 | 71 | --------------------- |
79eadafe | 72 | - ovs-vswitchd no longer deletes datapath flows on exit by default. |
8e371aa4 KK |
73 | - OpenFlow: |
74 | * The OpenFlow ofp_desc/serial_num may now be configured by setting the | |
75 | value of other-config:dp-sn in the Bridge table. | |
44810e6d | 76 | * Added support to watch CONTROLLER port status in fast failover group. |
81f71381 | 77 | * New action "delete_field". |
4cf89cb0 IM |
78 | - DPDK: |
79 | * Deprecated DPDK pdump packet capture support removed. | |
82c9d999 | 80 | * Deprecated DPDK ring ports (dpdkr) are no longer supported. |
02927385 | 81 | * Add hardware offload support for VLAN Push/Pop actions (experimental). |
85270e99 | 82 | * Add hardware offload support for matching IPv6 protocol (experimental). |
b6207b1d | 83 | * Add hardware offload support for set of IPv6 src/dst/ttl |
6571965b | 84 | and tunnel push-output actions (experimental). |
02abe831 IS |
85 | * OVS validated with DPDK 19.11.2, due to the inclusion of fixes for |
86 | CVE-2020-10722, CVE-2020-10723, CVE-2020-10724, CVE-2020-10725 and | |
87 | CVE-2020-10726, this DPDK version is strongly recommended to be used. | |
9af9dbce DM |
88 | * New 'ovs-appctl dpdk/log-list' and 'ovs-appctl dpdk/log-set' commands |
89 | to list and change log levels in DPDK components. | |
e919fd49 IS |
90 | * Vhost-user Dequeue zero-copy support is deprecated and will be removed |
91 | in the next release. | |
59e99442 GR |
92 | - Linux datapath: |
93 | * Support for kernel versions up to 5.5.x. | |
5bfc519f WT |
94 | - AF_XDP: |
95 | * New netdev class 'afxdp-nonpmd' for netdev-afxdp to save CPU cycles | |
96 | by enabling interrupt mode. | |
2078901a | 97 | - Userspace datapath: |
df5c2936 TZ |
98 | * Removed artificial datapath flow limit that was 65536. |
99 | Now number of datapath flows is fully controlled by revalidators and the | |
100 | 'other_config:flow-limit' knob. | |
2078901a | 101 | * Add support for conntrack zone-based timeout policy. |
9df65060 VDA |
102 | * New configuration knob 'other_config:lb-output-action' for bond ports |
103 | that enables new datapath action 'lb_output' to avoid recirculation | |
104 | in balance-tcp mode. Disabled by default. | |
842c3630 HH |
105 | * Add runtime CPU ISA detection to allow optimized ISA functions |
106 | * Add support for dynamically changing DPCLS subtable lookup functions | |
107 | * Add ISA optimized DPCLS lookup function using AVX512 | |
b4e50218 JS |
108 | - New configuration knob 'other_config:bond-primary' for AB bonds |
109 | that specifies interface will be the preferred port if it is active. | |
5f568d04 TZ |
110 | - Tunnels: TC Flower offload |
111 | * Tunnel Local endpoint address masked match are supported. | |
112 | * Tunnel Romte endpoint address masked match are supported. | |
a87d827e IM |
113 | - GTP-U Tunnel Protocol |
114 | * Add two new fields: tun_gtpu_flags, tun_gtpu_msgtype. | |
115 | * Only support for userspace datapath. | |
34b00fd2 BP |
116 | |
117 | ||
9efbdaa2 | 118 | v2.13.0 - 14 Feb 2020 |
91a38e89 | 119 | --------------------- |
f3e24610 MM |
120 | - OVN: |
121 | * OVN has been removed from this repository. It now exists as a | |
122 | separate project. You can find it at | |
123 | https://github.com/ovn-org/ovn.git | |
64207120 | 124 | - Userspace datapath: |
e8f56344 IM |
125 | * Add option to enable, disable and query TCP sequence checking in |
126 | conntrack. | |
a7f33fdb | 127 | * Add support for conntrack zone limits. |
0e8f5c6a EF |
128 | * Command "ovs-appctl dpctl/dump-flows" refactored to show subtable |
129 | miniflow bits for userspace datapath. | |
e8f56344 | 130 | - AF_XDP: |
e50547b5 WT |
131 | * New option 'use-need-wakeup' for netdev-afxdp to control enabling |
132 | of corresponding 'need_wakeup' flag in AF_XDP rings. Enabled by default | |
133 | if supported by libbpf. | |
e8f56344 IM |
134 | * 'xdpmode' option for netdev-afxdp renamed to 'xdp-mode'. |
135 | Modes also updated. New values: | |
136 | native-with-zerocopy - former DRV | |
137 | native - new one, DRV without zero-copy | |
138 | generic - former SKB | |
139 | best-effort [default] - new one, chooses the best available from | |
140 | 3 above modes | |
4ae8c461 IM |
141 | - DPDK: |
142 | * DPDK pdump packet capture support disabled by default. New configure | |
143 | option '--enable-dpdk-pdump' to enable it. | |
144 | * DPDK pdump support is deprecated and will be removed in next releases. | |
b4c5f00c IM |
145 | * DPDK ring ports (dpdkr) are deprecated and will be removed in next |
146 | releases. | |
127b6a6e | 147 | * Add support for DPDK 19.11. |
8ae6a5f9 EB |
148 | * Add hardware offload support for output, drop, set of MAC, IPv4 and |
149 | TCP/UDP ports actions (experimental). | |
29cf9c1b | 150 | * Add experimental support for TSO. |
1a008ebf KK |
151 | - RSTP: |
152 | * The rstp_statistics column in Port table will only be updated every | |
f2c7be23 | 153 | stats-update-interval configured in Open_vSwitch table. |
e988b8ab NS |
154 | - OVSDB: |
155 | * When ovsdb-server is running in backup mode, the default value of probe | |
156 | interval is increased to 60 seconds for the connection to the | |
157 | replication server. This value is configurable with the unixctl | |
158 | command - ovsdb-server/set-active-ovsdb-server-probe-interval. | |
a529e3cd | 159 | * ovsdb-server: New OVSDB extension to allow clients to specify row UUIDs. |
80944cb4 EB |
160 | - 'ovs-appctl dpctl/dump-flows' can now show offloaded=partial for |
161 | partially offloaded flows, dp:dpdk for fully offloaded by dpdk, and | |
162 | type filter supports new filters: "dpdk" and "partially-offloaded". | |
a35e9ab3 IM |
163 | - Add new argument '--offload-stats' for command |
164 | 'ovs-appctl bridge/dump-flows', | |
165 | so it can display offloaded packets statistics. | |
91a38e89 | 166 | |
d11f4cbb | 167 | v2.12.0 - 03 Sep 2019 |
fe2870c5 | 168 | --------------------- |
8411b6cc IM |
169 | - DPDK: |
170 | * New option 'other_config:dpdk-socket-limit' to limit amount of | |
171 | hugepage memory that can be used by DPDK. | |
30e834dc | 172 | * Add support for vHost Post-copy Live Migration (experimental). |
61473a0e DM |
173 | * OVS validated with DPDK 18.11.2 which is the new minimal supported |
174 | version. | |
175 | * DPDK 18.11.1 and lower is no longer supported. | |
080f080c KT |
176 | * New option 'tx-retries-max' to set the maximum amount of vhost tx |
177 | retries that can be made. | |
29718ad4 | 178 | - OpenFlow: |
13c952ca BP |
179 | * All features required by OpenFlow 1.5 are now implemented, so |
180 | ovs-vswitchd now enables OpenFlow 1.5 by default (in addition to | |
181 | OpenFlow 1.0 to 1.4). | |
29718ad4 | 182 | * Removed support for OpenFlow 1.6 (draft), which ONF abandoned. |
5b34f8fc | 183 | * New action "check_pkt_larger". |
4332b671 | 184 | * Support for OpenFlow 1.5 "meter" action. |
9b2b8497 VDA |
185 | - Userspace datapath: |
186 | * ICMPv6 ND enhancements: support for match and set ND options type | |
187 | and reserved fields. | |
4ea96698 DB |
188 | * Add v4/v6 fragmentation support for conntrack. |
189 | * New ovs-appctl "dpctl/ipf-set-enabled" and "dpctl/ipf-set-disabled" | |
190 | commands for userspace datapath conntrack fragmentation support. | |
191 | * New "ovs-appctl dpctl/ipf-set-min-frag" command for userspace | |
192 | datapath conntrack fragmentation support. | |
193 | * New "ovs-appctl dpctl/ipf-set-max-nfrags" command for userspace datapath | |
194 | conntrack fragmentation support. | |
195 | * New "ovs-appctl dpctl/ipf-get-status" command for userspace datapath | |
196 | conntrack fragmentation support. | |
5b34f8fc | 197 | * New action "check_pkt_len". |
ffbe41db EB |
198 | * Port configuration with "other-config:priority-tags" now has a mode |
199 | that retains the 802.1Q header even if VLAN and priority are both zero. | |
f87c1357 IM |
200 | * 'ovs-appctl exit' now implies cleanup of non-internal ports in userspace |
201 | datapath regardless of '--cleanup' option. Use '--cleanup' to remove | |
202 | internal ports too. | |
e6a97fe6 | 203 | * Removed experimental tag for SMC cache. |
f54d8f00 HH |
204 | * Datapath classifer code refactored to enable function pointers to select |
205 | the lookup implementation at runtime. This enables specialization of | |
206 | specific subtables based on the miniflow attributes, enhancing the | |
207 | performance of the subtable search. | |
0de1b425 | 208 | * Add Linux AF_XDP support through a new experimental netdev type "afxdp". |
23a4e016 HZ |
209 | - OVSDB: |
210 | * OVSDB clients can now resynchronize with clustered servers much more | |
211 | quickly after a brief disconnection, saving bandwidth and CPU time. | |
212 | See section 4.1.15 of ovsdb-server(7) for details of related OVSDB | |
213 | protocol extension. | |
00de46f9 AG |
214 | * Support to convert from cluster database to standalone database is now |
215 | available when clustered is down and cannot be revived using ovsdb-tool | |
216 | . Check "Database Migration Commands" in ovsdb-tool man section. | |
f1301a25 | 217 | - OVN: |
de0c1c32 LB |
218 | * IPAM/MACAM: |
219 | - select IPAM mac_prefix in a random manner if not provided by the user | |
220 | - add the capability to specify a static IPv4 and/or IPv6 address and | |
221 | get the L2 one allocated dynamically using the following syntax: | |
222 | ovn-nbctl lsp-set-addresses <port> "dynamic <IPv4 addr> <IPv6 addr>" | |
bddb73db | 223 | * Added the HA chassis group support. |
96080083 | 224 | * Added 'external' logical port support. |
e9cbac53 MM |
225 | * Added Policy-based routing(PBR) support to create permit/deny/reroute |
226 | policies on the logical router. New table(Logical_Router_Policy) added in | |
227 | OVN-NB schema. New "ovn-nbctl" commands to add/delete/list PBR policies. | |
3bb479d9 LAG |
228 | * Support for Transport Zones, a way to separate chassis into |
229 | logical groups which results in tunnels only been formed between | |
230 | members of the same transport zone(s). | |
c904ee47 | 231 | * Support for IGMP Snooping and IGMP Querier. |
2f564bb1 | 232 | - New QoS type "linux-netem" on Linux. |
b291eb69 | 233 | - Added support for TLS Server Name Indication (SNI). |
d58b59c1 YS |
234 | - Linux datapath: |
235 | * Support for the kernel versions 4.19.x and 4.20.x. | |
2adada0e | 236 | * Support for the kernel version 5.0.x. |
187bb41f | 237 | * Add support for conntrack zone-based timeout policy. |
7eef7001 IM |
238 | - 'ovs-dpctl dump-flows' is no longer suitable for dumping offloaded flows. |
239 | 'ovs-appctl dpctl/dump-flows' should be used instead. | |
a3173ee1 | 240 | - Add L2 GRE tunnel over IPv6 support. |
b291eb69 | 241 | |
0af63ac5 | 242 | v2.11.0 - 19 Feb 2019 |
024810cf | 243 | --------------------- |
4e413ac8 BP |
244 | - OpenFlow: |
245 | * OFPMP_TABLE_FEATURES_REQUEST can now modify table features. | |
246 | - ovs-ofctl: | |
247 | * "mod-table" command can now change OpenFlow table names. | |
08c05ad2 | 248 | - ovn: |
b6413ae4 HZ |
249 | * OVN-SB schema changed: duplicated IP with same Encapsulation type |
250 | is not allowed any more. Please refer to | |
251 | Documentation/intro/install/ovn-upgrades.rst for the instructions | |
252 | in case there are problems encountered when upgrading from an earlier | |
253 | version. | |
fcd8f561 | 254 | * New support for IPSEC encrypted tunnels between hypervisors. |
08c05ad2 | 255 | * ovn-ctl: allow passing user:group ids to the OVN daemons. |
e46b7020 LB |
256 | * IPAM/MACAM: |
257 | - add the capability to dynamically assign just L2 addresses | |
258 | - add the capability to specify a static ip address and get the L2 one | |
259 | allocated dynamically using the following syntax: | |
260 | ovn-nbctl lsp-set-addresses <port> "dynamic <IP>" | |
e77c97b9 | 261 | - DPDK: |
2fbadeb6 IM |
262 | * Add support for DPDK 18.11 |
263 | * Add support for port representors. | |
264 | - Userspace datapath: | |
e77c97b9 KT |
265 | * Add option for simple round-robin based Rxq to PMD assignment. |
266 | It can be set with pmd-rxq-assign. | |
5bf84282 | 267 | * Add support for Auto load balancing of PMDs (experimental) |
2fbadeb6 IM |
268 | * Added new per-port configurable option to manage EMC: |
269 | 'other_config:emc-enable'. | |
84ddf96c | 270 | - Add 'symmetric_l3' hash function. |
f9417807 | 271 | - OVS now honors 'updelay' and 'downdelay' for bonds with LACP configured. |
57924fc9 SB |
272 | - ovs-vswitchd: |
273 | * New configuration option "offload-rebalance", that enables dynamic | |
274 | rebalancing of offloaded flows. | |
8511af87 JP |
275 | - The environment variable OVS_SYSLOG_METHOD, if set, is now used |
276 | as the default syslog method. | |
277 | - The environment variable OVS_CTL_TIMEOUT, if set, is now used | |
278 | as the default timeout for control utilities. | |
9ce4aa8e YS |
279 | - The environment variable OVS_RESOLV_CONF, if set, is now used |
280 | as the DNS server configuration file. | |
78203a9c NS |
281 | - RHEL packaging: |
282 | * OVN packages are split from OVS packages. A new spec | |
283 | file - ovn-fedora.spec.in is added to generate OVN packages. | |
7c84d7f4 | 284 | - Linux datapath: |
8511af87 | 285 | * Support for the kernel versions 4.16.x, 4.17.x, and 4.18.x. |
024810cf | 286 | |
52499f66 | 287 | v2.10.0 - 18 Aug 2018 |
b1ca64f0 | 288 | --------------------- |
771680d9 YS |
289 | - ovs-vswitchd and utilities now support DNS names in OpenFlow and |
290 | OVSDB remotes. | |
4bc938cc | 291 | - ovs-vswitchd: |
8e98556b | 292 | * New options --l7 and --l7-len to "ofproto/trace" command. |
4bc938cc BP |
293 | * Previous versions gave OpenFlow tables default names of the form |
294 | "table#". These are not helpful names for the purpose of accepting | |
295 | and displaying table names, so now tables by default have no names. | |
ee60eefe | 296 | * The "null" interface type, deprecated since 2013, has been removed. |
60405863 | 297 | * Add minimum network namespace support for Linux. |
49b9cad3 | 298 | * New command "lacp/show-stats" |
8e98556b BP |
299 | - ovs-ofctl: |
300 | * ovs-ofctl now accepts and display table names in place of numbers. By | |
301 | default it always accepts names and in interactive use it displays them; | |
302 | use --names or --no-names to override. See ovs-ofctl(8) for details. | |
ec5ef1cf | 303 | - ovs-vsctl: New commands "add-bond-iface" and "del-bond-iface". |
4eeec031 YHW |
304 | - ovs-dpctl: |
305 | * New commands "ct-set-limits", "ct-del-limits", and "ct-get-limits". | |
b0e07d50 BP |
306 | - OpenFlow: |
307 | * OFPT_ROLE_STATUS is now available in OpenFlow 1.3. | |
7b809df9 BP |
308 | * OpenFlow 1.5 extensible statistics (OXS) now implemented. |
309 | * New OpenFlow 1.0 extensions for group support. | |
06db81cc JS |
310 | * Default selection method for select groups is now dp_hash with improved |
311 | accuracy. | |
e02b6f81 AZ |
312 | - Linux datapath |
313 | * Add support for compiling OVS with the latest Linux 4.14 kernel. | |
314 | * Added support for meters. | |
cb2a5486 | 315 | * Add support for conntrack zone limit. |
c319fabc | 316 | - ovn: |
047791dc | 317 | * Implemented icmp4/icmp6/tcp_reset actions in order to drop the packet |
c319fabc LB |
318 | and reply with a RST for TCP or ICMPv4/ICMPv6 unreachable message for |
319 | other IPv4/IPv6-based protocols whenever a reject ACL rule is hit. | |
689829d5 | 320 | * ACL match conditions can now match on Port_Groups as well as address |
1beb60af HZ |
321 | sets that are automatically generated by Port_Groups. ACLs can be |
322 | applied directly to Port_Groups as well. | |
7e5f6b1e BP |
323 | * ovn-nbctl can now run as a daemon (long-lived, background process). |
324 | See ovn-nbctl(8) for details. | |
a7e4849e MR |
325 | - DPDK: |
326 | * New 'check-dpdk' Makefile target to run a new system testsuite. | |
327 | See Testing topic for the details. | |
f8b64a61 | 328 | * Add LSC interrupt support for DPDK physical devices. |
3e52fa56 | 329 | * Allow init to fail and record DPDK status/version in OVS database. |
c3c722d2 | 330 | * Add experimental flow hardware offload support |
43307ad0 | 331 | * Support both shared and per port mempools for DPDK devices. |
79f36875 JS |
332 | - Userspace datapath: |
333 | * Commands ovs-appctl dpif-netdev/pmd-*-show can now work on a single PMD | |
334 | * Detailed PMD performance metrics available with new command | |
335 | ovs-appctl dpif-netdev/pmd-perf-show | |
7178fefb JS |
336 | * Supervision of PMD performance metrics and logging of suspicious |
337 | iterations | |
60d8ccae YW |
338 | * Add signature match cache (SMC) as experimental feature. When turned on, |
339 | it improves throughput when traffic has many more flows than EMC size. | |
4ee9f056 WT |
340 | - ERSPAN: |
341 | * Implemented ERSPAN protocol (draft-foschiano-erspan-00.txt) for | |
342 | both kernel datapath and userspace datapath. | |
343 | * Added port-based and flow-based ERSPAN tunnel port support, added | |
344 | OpenFlow rules matching ERSPAN fields. See ovs-fields(7). | |
c8efec6e QX |
345 | - ovs-pki |
346 | * ovs-pki now generates x.509 version 3 certificate. The new format adds | |
347 | subjectAltName field and sets its value the same as common name (CN). | |
a1ba48e0 | 348 | |
430d7d15 | 349 | v2.9.0 - 19 Feb 2018 |
e656b165 | 350 | -------------------- |
9a180f2c | 351 | - NSH implementation now conforms to latest draft (draft-ietf-sfc-nsh-28). |
17553f27 | 352 | * Add ttl field. |
491e05c2 | 353 | * Add a new action dec_nsh_ttl. |
96b82f6d | 354 | * Enable NSH support in kernel datapath. |
1b1d2e6d | 355 | - OVSDB has new, experimental support for database clustering: |
12b84d50 BP |
356 | * New high-level documentation in ovsdb(7). |
357 | * New file format documentation for developers in ovsdb(5). | |
358 | * Protocol documentation moved from ovsdb-server(1) to ovsdb-server(7). | |
53178986 BP |
359 | * ovsdb-server now supports online schema conversion via |
360 | "ovsdb-client convert". | |
6bb9b060 BP |
361 | * ovsdb-server now always hosts a built-in database named _Server. See |
362 | ovsdb-server(5) for more details. | |
1b1d2e6d BP |
363 | * ovsdb-client: New "get-schema-cksum", "query", "backup", "restore", |
364 | and "wait" commands. New --timeout option. | |
365 | * ovsdb-tool: New "create-cluster", "join-cluster", "db-cid", "db-sid", | |
366 | "db-local-address", "db-is-clustered", "db-is-standalone", "db-name", | |
367 | "schema-name", "compare-versions", and "check-cluster" commands. | |
368 | * ovsdb-server: New ovs-appctl commands for managing clusters. | |
369 | * ovs-sandbox: New support for clustered databases. | |
80f66ee0 BP |
370 | - ovs-vsctl and other commands that display data in tables now support a |
371 | --max-column-width option to limit column width. | |
d39ec23d JP |
372 | - No longer slow-path traffic that sends to a controller. Applications, |
373 | such as OVN ACL logging, want to send a copy of a packet to a | |
374 | controller while leaving the actual packet forwarding in the datapath. | |
bd32425f RB |
375 | - OVN: |
376 | * The "requested-chassis" option for a logical switch port now accepts a | |
377 | chassis "hostname" in addition to a chassis "name". | |
d601127b NS |
378 | * IPv6 |
379 | - Added support to send IPv6 Router Advertisement packets in response to | |
380 | the IPv6 Router Solicitation packets from the VIF ports. | |
381 | - Added support to generate Neighbor Solicitation packets using the OVN | |
382 | action 'nd_ns' to resolve unknown next hop MAC addresses for the | |
383 | IPv6 packets. | |
047791dc | 384 | * Add support for QoS bandwidth limit with DPDK. |
74103dc2 | 385 | * ovn-ctl: New commands run_nb_ovsdb and run_sb_ovsdb. |
1b1d2e6d | 386 | * ovn-sbctl, ovn-nbctl: New options --leader-only, --no-leader-only. |
a1ba48e0 JP |
387 | - OpenFlow: |
388 | * ct_clear action is now backed by kernel datapath. Support is probed for | |
389 | when OVS starts. | |
4a67e420 GR |
390 | - Linux kernel 4.13 |
391 | * Add support for compiling OVS with the latest Linux 4.13 kernel | |
c92339ad DB |
392 | - ovs-dpctl and related ovs-appctl commands: |
393 | * "flush-conntrack" now accept a 5-tuple to delete a specific | |
394 | connection tracking entry. | |
875075b3 DB |
395 | * New "ct-set-maxconns", "ct-get-maxconns", and "ct-get-nconns" commands |
396 | for userspace datapath. | |
22dcb534 FL |
397 | - No longer send packets to the Linux TAP device if it's DOWN unless it is |
398 | in another networking namespace. | |
5e925ccc MK |
399 | - DPDK: |
400 | * Add support for DPDK v17.11 | |
a14d1cc8 | 401 | * Add support for vHost IOMMU |
be481733 | 402 | * New debug appctl command 'netdev-dpdk/get-mempool-info'. |
40f185ac | 403 | * All the netdev-dpdk appctl commands described in ovs-vswitchd man page. |
971f4b39 MW |
404 | * Custom statistics: |
405 | - DPDK physical ports now return custom set of "dropped", "error" and | |
406 | "management" statistics. | |
407 | - ovs-ofctl dump-ports command now prints new of set custom statistics | |
408 | if available (for OpenFlow 1.4+). | |
a1e53988 SF |
409 | * Switch from round-robin allocation of rxq to pmd assignments to a |
410 | utilization-based allocation. | |
c190e2ad KT |
411 | * New appctl command 'dpif-netdev/pmd-rxq-rebalance' to rebalance rxq to |
412 | pmd assignments. | |
2a2c67b4 | 413 | * Add rxq utilization of pmd to appctl 'dpif-netdev/pmd-rxq-show'. |
93c0ef12 | 414 | * Add support for vHost dequeue zero copy (experimental). |
06ee1d3e IM |
415 | - Userspace datapath: |
416 | * Output packet batching support. | |
62705b81 BP |
417 | - vswitchd: |
418 | * Datapath IDs may now be specified as 0x1 (etc.) instead of 16 digits. | |
d3b84833 BP |
419 | * Configuring a controller, or unconfiguring all controllers, now deletes |
420 | all groups and meters (as well as all flows). | |
d4042a70 | 421 | - New --enable-sparse configure option enables "sparse" checking by default. |
b2e8b12f | 422 | - Added additional information to vhost-user status. |
e656b165 | 423 | |
a61016be | 424 | v2.8.0 - 31 Aug 2017 |
3a32d0ae | 425 | -------------------- |
1b3758c3 BP |
426 | - ovs-ofctl: |
427 | * ovs-ofctl can now accept and display port names in place of numbers. By | |
428 | default it always accepts names and in interactive use it displays them; | |
429 | use --names or --no-names to override. See ovs-ofctl(8) for details. | |
430 | * "ovs-ofctl dump-flows" now accepts --no-stats to omit flow statistics. | |
8a0d9d85 | 431 | - New ovs-dpctl command "ct-stats-show" to show connection tracking stats. |
e2218eee JP |
432 | - Tunnels: |
433 | * Added support to set packet mark for tunnel endpoint using | |
434 | `egress_pkt_mark` OVSDB option. | |
921c370a EG |
435 | * When using Linux kernel datapath tunnels may be created using rtnetlink. |
436 | This will allow us to take advantage of new tunnel features without | |
437 | having to make changes to the vport modules. | |
4c30b246 CL |
438 | - EMC insertion probability is reduced to 1% and is configurable via |
439 | the new 'other_config:emc-insert-inv-prob' option. | |
736ca516 IM |
440 | - DPDK: |
441 | * DPDK log messages redirected to OVS logging subsystem. | |
442 | Log level can be changed in a usual OVS way using | |
443 | 'ovs-appctl vlog' commands for 'dpdk' module. Lower bound | |
444 | still can be configured via extra arguments for DPDK EAL. | |
28ca969e AC |
445 | * dpdkvhostuser ports are marked as deprecated. They will be removed |
446 | in an upcoming release. | |
f3e7ec25 | 447 | * Support for DPDK v17.05.1. |
0b4f83e2 PS |
448 | - IPFIX now provides additional counters: |
449 | * Total counters since metering process startup. | |
450 | * Per-flow TCP flag counters. | |
ebfe9a21 | 451 | * Multicast, broadcast, and unicast counters. |
fed8962a EG |
452 | - New support for multiple VLANs (802.1ad or "QinQ"), including a new |
453 | "dot1q-tunnel" port VLAN mode. | |
4e3000a0 BP |
454 | - In ovn-vsctl and vtep-ctl, record UUIDs in commands may now be |
455 | abbreviated to 4 hex digits. | |
3346c985 DB |
456 | - Userspace Datapath: |
457 | * Added NAT support for userspace datapath. | |
05f282c2 | 458 | * Added FTP and TFTP support with NAT for userspace datapath. |
ab27bfa6 | 459 | * Experimental NSH (Network Service Header) support in userspace datapath. |
b89d25e5 | 460 | - OVN: |
302eda27 | 461 | * New built-in DNS support. |
161ea2c8 | 462 | * IPAM for IPv4 can now exclude user-defined addresses from assignment. |
7cc0741e | 463 | * IPAM can now assign IPv6 addresses. |
b89d25e5 | 464 | * Make the DHCPv4 router setting optional. |
f40c5588 | 465 | * Gratuitous ARP for NAT addresses on a distributed logical router. |
4d232c75 LR |
466 | * Allow ovn-controller SSL configuration to be obtained from vswitchd |
467 | database. | |
42c1e58e | 468 | * ovn-trace now has basic support for tracing distributed firewalls. |
4e3000a0 BP |
469 | * In ovn-nbctl and ovn-sbctl, record UUIDs in commands may now be |
470 | abbreviated to 4 hex digits. | |
c2f4c39b BP |
471 | * "ovn-sbctl lflow-list" can now print OpenFlow flows that correspond |
472 | to logical flows. | |
75ddb5f4 | 473 | * Now uses OVSDB RBAC support to reduce impact of compromised hypervisors. |
35ad41ba RB |
474 | * Multiple chassis may now be specified for L3 gateways. When more than |
475 | one chassis is specified, OVN will manage high availability for that | |
476 | gateway. | |
d383eed5 | 477 | * Add support for ACL logging. |
46a54ce7 | 478 | * ovn-northd now has native support for active-standby high availability. |
0f2f05bb | 479 | - Tracing with ofproto/trace now traces through recirculation. |
d6db7b3c LR |
480 | - OVSDB: |
481 | * New support for role-based access control (see ovsdb-server(1)). | |
cc3a32f3 | 482 | - New commands 'stp/show' and 'rstp/show' (see ovs-vswitchd(8)). |
417cfdb6 | 483 | - OpenFlow: |
8d348579 BP |
484 | * All features required by OpenFlow 1.4 are now implemented, so |
485 | ovs-vswitchd now enables OpenFlow 1.4 by default (in addition to | |
486 | OpenFlow 1.0 to 1.3). | |
2f2b904f | 487 | * Increased support for OpenFlow 1.6 (draft). |
417cfdb6 | 488 | * Bundles now support hashing by just nw_src or nw_dst. |
489 | * The "learn" action now supports a "limit" option (see ovs-ofctl(8)). | |
f73b83fd | 490 | * The port status bit OFPPS_LIVE now reflects link aliveness. |
577bfa9f | 491 | * OpenFlow 1.5 packet-out is now supported. |
f839892a JS |
492 | * Support for OpenFlow 1.5 field packet_type and packet-type-aware |
493 | pipeline (PTAP). | |
494 | * Added generic encap and decap actions (EXT-382). | |
495 | First supported use case is encap/decap for Ethernet. | |
b48f44ff YY |
496 | * Added NSH (Network Service Header) support in userspace |
497 | Used generic encap and decap actions to implement encapsulation and | |
498 | decapsulation of NSH header. | |
499 | IETF NSH draft - https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/ | |
f6fabcc6 JP |
500 | * Conntrack state is only available to the processing path that |
501 | follows the "recirc_table" argument of the ct() action. Starting | |
502 | in OVS 2.8, this state is now cleared for the current processing | |
503 | path whenever ct() is called. | |
44dd4cc4 LR |
504 | - Fedora Packaging: |
505 | * OVN services are no longer restarted automatically after upgrade. | |
e3e738a3 | 506 | * ovs-vswitchd and ovsdb-server run as non-root users by default. |
fe13ccdc | 507 | - Add --cleanup option to command 'ovs-appctl exit' (see ovs-vswitchd(8)). |
63171f04 | 508 | - L3 tunneling: |
875ab130 | 509 | * Use new tunnel port option "packet_type" to configure L2 vs. L3. |
f839892a JS |
510 | * In conjunction with PTAP tunnel ports can handle a mix of L2 and L3 |
511 | payload. | |
439f39cb | 512 | * New vxlan tunnel extension "gpe" to support VXLAN-GPE tunnels. |
875ab130 | 513 | * New support for non-Ethernet (L3) payloads in GRE and VXLAN-GPE. |
4cefc3da | 514 | - The BFD detection multiplier is now user-configurable. |
2a85b7cc | 515 | - Add experimental support for hardware offloading |
bf090264 RD |
516 | * HW offloading is disabled by default. |
517 | * HW offloading is done through the TC interface. | |
5d77b36b BP |
518 | - IPv6 link local addresses are now supported on Linux. Use % to designate |
519 | the scope device. | |
e2218eee | 520 | |
a9c838b2 | 521 | v2.7.0 - 21 Feb 2017 |
92690eae | 522 | --------------------- |
e18a1d08 ER |
523 | - Utilities and daemons that support SSL now allow protocols and |
524 | ciphers to be configured with --ssl-protocols and --ssl-ciphers. | |
a6095f81 BS |
525 | - OVN: |
526 | * QoS is now implemented via egress shaping rather than ingress policing. | |
1a03fc7d | 527 | * DSCP marking is now supported, via the new northbound QoS table. |
6374d518 | 528 | * IPAM now supports fixed MAC addresses. |
440a9f4b | 529 | * Support for source IP address based routing. |
d444a914 BP |
530 | * ovn-trace: |
531 | - New --ovs option to also print OpenFlow flows. | |
532 | - put_dhcp_opts and put_dhcp_optsv6 actions may now be traced. | |
821302cf | 533 | * Support for managing SSL and remote connection configuration in |
10471820 | 534 | northbound and southbound databases. |
84d0ca5d LR |
535 | * TCP connections to northbound and southbound databases are no |
536 | longer enabled by default and must be explicitly configured. | |
537 | See documentation for ovn-sbctl/ovn-nbctl "set-connection" | |
538 | command or the ovn-ctl "--db-sb-create-insecure-remote" and | |
539 | "--db-nb-create-insecure-remote" command-line options for | |
540 | information regarding remote connection configuration. | |
714651c7 JP |
541 | * New appctl "inject-pkt" command in ovn-controller that allows |
542 | packets to be injected into the connected OVS instance. | |
878b54d7 MS |
543 | * Distributed logical routers may now be connected directly to |
544 | logical switches with localnet ports, by specifying a | |
545 | "redirect-chassis" on the distributed gateway port of the | |
546 | logical router. NAT rules may be specified directly on the | |
547 | distributed logical router, and are handled either centrally on | |
548 | the "redirect-chassis", or in many cases are handled locally on | |
549 | the hypervisor where the corresponding logical port resides. | |
550 | Gratuitous ARP for NAT addresses on a distributed logical | |
551 | router is not yet supported, but will be added in a future | |
552 | version. | |
a027899e JR |
553 | - Fixed regression in table stats maintenance introduced in OVS |
554 | 2.3.0, wherein the number of OpenFlow table hits and misses was | |
555 | not accurate. | |
51bb26fa | 556 | - OpenFlow: |
6dd3c787 | 557 | * OFPT_PACKET_OUT messages are now supported in bundles. |
53cc166a JR |
558 | * A new "selection_method=dp_hash" type for OpenFlow select group |
559 | bucket selection that uses the datapath computed 5-tuple hash | |
560 | without making datapath flows match the 5-tuple fields, which | |
561 | is useful for more efficient load balancing, for example. This | |
562 | uses the Netronome extension to OpenFlow 1.5+ that allows | |
563 | control over the OpenFlow select groups selection method. See | |
564 | "selection_method" and related options in ovs-ofctl(8) for | |
565 | details. | |
4930ea56 | 566 | * The "sample" action now supports "ingress" and "egress" options. |
40c7b2fc | 567 | * The "ct" action now supports the TFTP ALG where support is available. |
72fe7578 | 568 | * New actions "clone" and "ct_clear". |
798a1033 | 569 | * The "meter" action is now supported in the userspace datapath. |
6dd3c787 JR |
570 | - ovs-ofctl: |
571 | * 'bundle' command now supports packet-out messages. | |
572 | * New syntax for 'ovs-ofctl packet-out' command, which uses the | |
573 | same string parser as the 'bundle' command. The old 'packet-out' | |
574 | syntax is deprecated and will be removed in a later OVS | |
575 | release. | |
576 | * New unixctl "ofctl/packet-out" command, which can be used to | |
577 | instruct a flow monitor to issue OpenFlow packet-out messages. | |
9c1a1182 LR |
578 | - ovsdb-server: |
579 | * Remote connections can now be made read-only (see ovsdb-server(1)). | |
8d8ab6c2 JG |
580 | - Tunnels: |
581 | * TLV mappings for protocols such as Geneve are now segregated on | |
582 | a per-OpenFlow bridge basis rather than globally. (The interface | |
583 | has not changed.) | |
2b02d770 | 584 | * Removed support for IPsec tunnels. |
08484bae CL |
585 | - DPDK: |
586 | * New option 'n_rxq_desc' and 'n_txq_desc' fields for DPDK interfaces | |
587 | which set the number of rx and tx descriptors to use for the given port. | |
04de404e | 588 | * Support for DPDK v16.11. |
1a2bb118 | 589 | * Support for rx checksum offload. Refer DPDK HOWTO for details. |
b8374d0d | 590 | * Port Hotplug is now supported. |
55e075e6 CL |
591 | * DPDK physical ports can now have arbitrary names. The PCI address of |
592 | the device must be set using the 'dpdk-devargs' option. Compatibility | |
593 | with the old dpdk<portid> naming scheme is broken, and as such a | |
594 | device will not be available for use until a valid dpdk-devargs is | |
595 | specified. | |
69876ed7 | 596 | * Virtual DPDK Poll Mode Driver (vdev PMD) support. |
602e24ee | 597 | * Removed experimental tag. |
5771f476 FL |
598 | - Fedora packaging: |
599 | * A package upgrade does not automatically restart OVS service. | |
58d636ee BK |
600 | - ovs-vswitchd/ovs-vsctl: |
601 | * Ports now have a "protected" flag. Protected ports can not forward | |
602 | frames to other protected ports. Unprotected ports can receive and | |
603 | forward frames to protected and other unprotected ports. | |
1ab39058 LR |
604 | - ovs-vsctl, ovn-nbctl, ovn-sbctl, vtep-ctl: |
605 | * Database commands now accept integer ranges, e.g. "set port | |
606 | eth0 trunks=1-10" to enable trunking VLANs 1 to 10. | |
92690eae | 607 | |
62f0430e | 608 | v2.6.0 - 27 Sep 2016 |
ca32170a | 609 | --------------------- |
e921fc3f JP |
610 | - First supported release of OVN. See ovn-architecture(7) for more |
611 | details. | |
92f8d65b | 612 | - ovsdb-server: |
c383f3bf LS |
613 | * New "monitor_cond" "monitor_cond_update" and "update2" extensions to |
614 | RFC 7047. | |
56085be5 | 615 | - OpenFlow: |
8225b3b7 JR |
616 | * OpenFlow 1.3+ bundles now expire after 10 seconds since the |
617 | last time the bundle was either opened, modified, or closed. | |
fe996936 JR |
618 | * OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is |
619 | now implemented. | |
25070e04 JR |
620 | * OpenFlow 1.3+ bundles are now supported for group mods as well as |
621 | flow mods and port mods. Both 'atomic' and 'ordered' bundle | |
622 | flags are supported for group mods as well as flow mods. | |
5fc0ad0a JR |
623 | * Internal OpenFlow rule representation for load and set-field |
624 | actions is now much more memory efficient. For a complex flow | |
625 | table this can reduce rule memory consumption by 40%. | |
626 | * Bundles are now much more memory efficient than in OVS 2.5. | |
627 | Together with memory efficiency improvements in OpenFlow rule | |
628 | representation, the peak OVS resident memory use during a | |
629 | bundle commit for large complex set of flow mods can be only | |
630 | 25% of that in OVS 2.5 (4x lower). | |
56085be5 | 631 | * OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY. |
e016fb63 | 632 | * OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported. |
6c6eedc5 | 633 | * OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported. |
bdcad671 | 634 | * New property-based packet-in message format NXT_PACKET_IN2 with support |
77ab5fd2 BP |
635 | for arbitrary user-provided data and for serializing flow table |
636 | traversal into a continuation for later resumption. | |
637 | * New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like | |
638 | control over asynchronous messages in earlier versions of OpenFlow. | |
bef3f465 | 639 | * New OpenFlow extension NXM_NX_MPLS_TTL to provide access to MPLS TTL. |
aaca4fe0 WT |
640 | * New output option, output(port=N,max_len=M), to allow truncating a |
641 | packet to size M bytes when outputting to port N. | |
88b87a36 JS |
642 | * New command OFPGC_ADD_OR_MOD for OFPT_GROUP_MOD message that adds a |
643 | new group or modifies an existing groups | |
54b78c95 JR |
644 | * The optional OpenFlow packet buffering feature is deprecated in |
645 | this release, and will be removed in the next OVS release | |
646 | (2.7). After the change OVS always sends the 'buffer_id' as | |
647 | 0xffffffff in packet-in messages and will send an error | |
648 | response if any other value of this field is included in | |
649 | packet-out and flow mod sent by a controller. Controllers are | |
650 | already expected to work properly in cases where the switch can | |
651 | not buffer packets, so this change should not affect existing | |
652 | users. | |
2a7c4805 | 653 | * New OpenFlow extension NXT_CT_FLUSH_ZONE to flush conntrack zones. |
4b684612 | 654 | - Improved OpenFlow version compatibility for actions: |
88c8ca26 | 655 | * New OpenFlow extension to support the "group" action in OpenFlow 1.0. |
0f2aaee9 | 656 | * OpenFlow 1.0 "enqueue" action now properly translated to OpenFlow 1.1+. |
56a91749 BP |
657 | * OpenFlow 1.1 "mod_nw_ecn" and OpenFlow 1.1+ "mod_nw_ttl" actions now |
658 | properly translated to OpenFlow 1.0. | |
e016fb63 BP |
659 | - ovs-ofctl: |
660 | * queue-get-config command now allows a queue ID to be specified. | |
25070e04 JR |
661 | * '--bundle' option can now be used with OpenFlow 1.3 and with group mods. |
662 | * New "bundle" command allows executing a mixture of flow and group mods | |
663 | as a single atomic transaction. | |
8743fa8c | 664 | * New option "--color" to produce colorized output for some commands. |
88b87a36 | 665 | * New option '--may-create' to use OFPGC_ADD_OR_MOD in mod-group command. |
c97320eb WZ |
666 | - IPFIX: |
667 | * New "sampling_port" option for "sample" action to allow sampling | |
668 | ingress and egress tunnel metadata with IPFIX. | |
669 | * New ovs-ofctl commands "dump-ipfix-bridge" and "dump-ipfix-flow" to | |
670 | dump bridge IPFIX statistics and flow based IPFIX statistics. | |
671 | * New setting other-config:virtual_obs_id to add an arbitrary string | |
672 | to IPFIX records. | |
6cf888b8 | 673 | - Linux: |
fe996936 JR |
674 | * OVS Linux datapath now implements Conntrack NAT action with all |
675 | supported Linux kernels. | |
676 | * Support for truncate action. | |
6cf888b8 BS |
677 | * New QoS type "linux-noop" that prevents Open vSwitch from trying to |
678 | manage QoS for a given port (useful when other software manages QoS). | |
a14b8947 IM |
679 | - DPDK: |
680 | * New option "n_rxq" for PMD interfaces. | |
681 | Old 'other_config:n-dpdk-rxqs' is no longer supported. | |
81acebda IM |
682 | Not supported by vHost interfaces. For them number of rx and tx queues |
683 | is applied from connected virtio device. | |
3eb67853 IM |
684 | * New 'other_config:pmd-rxq-affinity' field for PMD interfaces, that |
685 | allows to pin port's rx queues to desired cores. | |
ce179f11 IM |
686 | * New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq |
687 | assignment. | |
688 | * Type of log messages from PMD threads changed from INFO to DBG. | |
0bf765f7 | 689 | * QoS functionality with sample egress-policer implementation. |
bab69409 AC |
690 | * The mechanism for configuring DPDK has changed to use database |
691 | * Sensible defaults have been introduced for many of the required | |
692 | configuration options | |
693 | * DB entries have been added for many of the DPDK EAL command line | |
eac84432 AC |
694 | arguments. Additional arguments can be passed via the dpdk-extra |
695 | entry. | |
9509913a | 696 | * Add ingress policing functionality. |
db8f13b0 CL |
697 | * PMD threads servicing vHost User ports can now come from the NUMA |
698 | node that device memory is located on if CONFIG_RTE_LIBRTE_VHOST_NUMA | |
699 | is enabled in DPDK. | |
5cf3edb3 DDP |
700 | * Basic connection tracking for the userspace datapath (no ALG, |
701 | fragmentation or NAT support yet) | |
0a0f39df | 702 | * Support for DPDK 16.07 |
4b88d678 | 703 | * Optional support for DPDK pdump enabled. |
0072e931 | 704 | * Jumbo frame support |
41987644 | 705 | * Remove dpdkvhostcuse port type. |
c1ff66ac | 706 | * OVS client mode for vHost and vHost reconnect (Requires QEMU 2.7) |
2d24d165 | 707 | * 'dpdkvhostuserclient' port type. |
847b8b02 | 708 | - Increase number of registers to 16. |
e7529141 BP |
709 | - ovs-benchmark: This utility has been removed due to lack of use and |
710 | bitrot. | |
06380128 BP |
711 | - ovs-appctl: |
712 | * New "vlog/close" command. | |
7fc28c50 AC |
713 | - ovs-ctl: |
714 | * Added the ability to selectively start the forwarding and database | |
715 | functions (ovs-vswitchd and ovsdb-server, respectively). | |
acdd0764 AZ |
716 | - ovsdb-server: |
717 | * Remove max number of sessions limit, to enable connection scaling | |
718 | testing. | |
99c8be3e RB |
719 | - python: |
720 | * Added support for Python 3.4+ in addition to existing support | |
721 | for 2.7+. | |
9b897c91 AA |
722 | - SELinux: |
723 | * Introduced SELinux policy package. | |
8063e095 PS |
724 | - Datapath Linux kernel compatibility. |
725 | * Dropped support for kernel older than 3.10. | |
42deb67d | 726 | * Removed VLAN splinters feature. |
c3cbb286 | 727 | * Datapath supports kernel upto 4.7. |
80c4589a PS |
728 | - Tunnels: |
729 | * Flow based tunnel match and action can be used for IPv6 address using | |
730 | tun_ipv6_src, tun_ipv6_dst fields. | |
8a2d4905 | 731 | * Added support for IPv6 tunnels, for details checkout FAQ. |
9e9d0384 | 732 | * Deprecated support for IPsec tunnels ports. |
314ce647 AC |
733 | - A wrapper script, 'ovs-tcpdump', to easily port-mirror an OVS port and |
734 | watch with tcpdump | |
81d2f75c AA |
735 | - Introduce --no-self-confinement flag that allows daemons to work with |
736 | sockets outside their run directory. | |
29dd784d BP |
737 | - ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because |
738 | SHA-1 is no longer secure and some operating systems have started to | |
739 | disable it in OpenSSL. | |
56abcf49 | 740 | - Add 'mtu_request' column to the Interface table. It can be used to |
3a414a0a | 741 | configure the MTU of the ports. |
29dd784d | 742 | |
c0fa821f JS |
743 | Known issues: |
744 | - Using openvswitch module in conjunction with upstream Linux tunnels: | |
745 | * When using the openvswitch module distributed with OVS against kernel | |
746 | versions 4.4 to 4.6, the openvswitch module cannot be loaded or used at | |
747 | the same time as "ip_gre". | |
748 | - Conntrack FTP ALGs: When using the openvswitch module distributed with | |
749 | OVS, particular Linux distribution kernels versions may provide diminished | |
750 | functionality. This typically affects active FTP data connections when | |
751 | using "actions=ct(alg=ftp),..." in flow tables. Specifically: | |
752 | * Centos 7.1 kernels (3.10.0-2xx) kernels are unable to correctly set | |
753 | up expectations for FTP data connections in multiple zones, | |
754 | eg "actions=ct(zone=1,alg=ftp),ct(zone=2,alg=ftp),...". Executing the | |
755 | "ct" action for subsequent data connections may fail to determine that | |
756 | the data connection is "related" to an existing connection. | |
757 | * Centos 7.2 kernels (3.10.0-3xx) kernels may not establish FTP ALG state | |
758 | correctly for NATed connections. As a result, flows that perform NAT, | |
759 | eg "actions=ct(nat,ftp=alg,table=1),..." may fail to NAT the packet, | |
760 | and will populate the "ct_state=inv" bit in the flow. | |
761 | ||
ca32170a | 762 | |
1c0383a9 | 763 | v2.5.0 - 26 Feb 2016 |
c4c7e593 | 764 | --------------------- |
e23812fc BP |
765 | - Dropped support for Python older than version 2.7. As a consequence, |
766 | using Open vSwitch 2.5 or later on XenServer 6.5 or earlier (which | |
767 | have Python 2.4) requires first installing Python 2.7. | |
0eb48fe1 BP |
768 | - OpenFlow: |
769 | * Group chaining (where one OpenFlow group triggers another) is | |
770 | now supported. | |
f70b94de | 771 | * OpenFlow 1.4+ "importance" is now considered for flow eviction. |
82c22d34 | 772 | * OpenFlow 1.4+ OFPTC_EVICTION is now implemented. |
de7d3c07 | 773 | * OpenFlow 1.4+ OFPTC_VACANCY_EVENTS is now implemented. |
03c72922 | 774 | * OpenFlow 1.4+ OFPMP_TABLE_DESC is now implemented. |
f6ecf944 | 775 | * Allow modifying the ICMPv4/ICMPv6 type and code fields. |
c61f4bc1 BP |
776 | * OpenFlow 1.4+ OFPT_SET_ASYNC_CONFIG and OFPT_GET_ASYNC_CONFIG are |
777 | now implemented. | |
6d5d1f3b BP |
778 | - ovs-ofctl: |
779 | * New "out_group" keyword for OpenFlow 1.1+ matching on output group. | |
c61f4bc1 BP |
780 | - Tunnels: |
781 | * Geneve tunnels can now match and set options and the OAM bit. | |
782 | * The nonstandard GRE64 tunnel extension has been dropped. | |
06994f87 | 783 | - Support Multicast Listener Discovery (MLDv1 and MLDv2). |
4249b547 | 784 | - Add 'symmetric_l3l4' and 'symmetric_l3l4+udp' hash functions. |
7321bda3 | 785 | - sFlow agent now reports tunnel and MPLS structures. |
548f9fe7 DDP |
786 | - New 'check-system-userspace', 'check-kmod' and 'check-kernel' Makefile |
787 | targets to run a new system testsuite. These tests can be run inside | |
788 | a Vagrant box. See INSTALL.md for details | |
195360dc AA |
789 | - Mark --syslog-target argument as deprecated. It will be removed in |
790 | the next OVS release. | |
e91b927d | 791 | - Added --user option to all daemons |
07659514 | 792 | - Add support for connection tracking through the new "ct" action |
9daf2348 JS |
793 | and "ct_state"/"ct_zone"/"ct_mark"/"ct_label" match fields. Only |
794 | available on Linux kernels with the connection tracking module loaded. | |
a2e61be6 RB |
795 | - Add experimental version of OVN. OVN, the Open Virtual Network, is a |
796 | system to support virtual network abstraction. OVN complements the | |
797 | existing capabilities of OVS to add native support for virtual network | |
798 | abstractions, such as virtual L2 and L3 overlays and security groups. | |
f6bf8880 PM |
799 | - RHEL packaging: |
800 | * DPDK ports may now be created via network scripts (see README.RHEL). | |
4573fbd3 FL |
801 | - DPDK: |
802 | * Requires DPDK 2.2 | |
803 | * Added multiqueue support to vhost-user | |
db6e1383 | 804 | * Note: QEMU 2.5+ required for multiqueue support |
c4c7e593 | 805 | |
2fac5fed | 806 | v2.4.0 - 20 Aug 2015 |
2c7ea589 | 807 | --------------------- |
39c94593 JR |
808 | - Flow table modifications are now atomic, meaning that each packet |
809 | now sees a coherent version of the OpenFlow pipeline. For | |
810 | example, if a controller removes all flows with a single OpenFlow | |
811 | "flow_mod", no packet sees an intermediate version of the OpenFlow | |
812 | pipeline where only some of the flows have been deleted. | |
db5076ee | 813 | - Added support for SFQ, FQ_CoDel and CoDel qdiscs. |
557570fa AW |
814 | - Add bash command-line completion support for ovs-vsctl Please check |
815 | utilities/ovs-command-compgen.INSTALL.md for how to use. | |
9d078ec2 BP |
816 | - The MAC learning feature now includes per-port fairness to mitigate |
817 | MAC flooding attacks. | |
18080541 BP |
818 | - New support for a "conjunctive match" OpenFlow extension, which |
819 | allows constructing OpenFlow matches of the form "field1 in | |
820 | {a,b,c...} AND field2 in {d,e,f...}" and generalizations. For details, | |
cc23805c | 821 | see documentation for the "conjunction" action in ovs-ofctl(8). |
423ede18 AW |
822 | - Add bash command-line completion support for ovs-appctl/ovs-dpctl/ |
823 | ovs-ofctl/ovsdb-tool commands. Please check | |
824 | utilities/ovs-command-compgen.INSTALL.md for how to use. | |
35f48b8b BP |
825 | - The "learn" action supports a new flag "delete_learned" that causes |
826 | the learned flows to be deleted when the flow with the "learn" action | |
827 | is deleted. | |
c1fc1411 JG |
828 | - Basic support for the Geneve tunneling protocol. It is not yet |
829 | possible to generate or match options. This is planned for a future | |
830 | release. The protocol is documented at | |
831 | http://tools.ietf.org/html/draft-gross-geneve-00 | |
a413195e | 832 | - The OVS database now reports controller rate limiting statistics. |
50b9699f | 833 | - sflow now exports information about LACP-based bonds, port names, and |
3d2912f2 | 834 | OpenFlow port numbers, as well as datapath performance counters. |
fceef209 DDP |
835 | - ovs-dpctl functionality is now available for datapaths integrated |
836 | into ovs-vswitchd, via ovs-appctl. Some existing ovs-appctl | |
837 | commands are now redundant and will be removed in a future | |
838 | release. See ovs-vswitchd(8) for details. | |
79fe0f46 | 839 | - OpenFlow: |
1c38055d JR |
840 | * OpenFlow 1.4 bundles are now supported for flow mods and port |
841 | mods. For flow mods, both 'atomic' and 'ordered' bundle flags | |
842 | are trivially supported, as all bundled messages are executed | |
843 | in the order they were added and all flow table modifications | |
844 | are now atomic to the datapath. Port mods may not appear in | |
845 | atomic bundles, as port status modifications are not atomic. | |
e60e935b | 846 | * IPv6 flow label and neighbor discovery fields are now modifiable. |
d3cb080e BP |
847 | * OpenFlow 1.5 extended registers are now supported. |
848 | * The OpenFlow 1.5 actset_output field is now supported. | |
849 | * OpenFlow 1.5 Copy-Field action is now supported. | |
850 | * OpenFlow 1.5 masked Set-Field action is now supported. | |
3c4e10fb | 851 | * OpenFlow 1.3+ table features requests are now supported (read-only). |
1b0ee636 | 852 | * Nicira extension "move" actions may now be included in action sets. |
2e34a6a3 SS |
853 | * "resubmit" actions may now be included in action sets. The resubmit |
854 | is executed last, and only if the action set has no "output" or "group" | |
855 | action. | |
ca26eb44 | 856 | * OpenFlow 1.4+ flow "importance" is now maintained in the flow table. |
0c4b9393 SH |
857 | * A new Netronome extension to OpenFlow 1.5+ allows control over the |
858 | fields hashed for OpenFlow select groups. See "selection_method" and | |
859 | related options in ovs-ofctl(8) for details. | |
db5076ee JR |
860 | - ovs-ofctl has a new '--bundle' option that makes the flow mod commands |
861 | ('add-flow', 'add-flows', 'mod-flows', 'del-flows', and 'replace-flows') | |
862 | use an OpenFlow 1.4 bundle to operate the modifications as a single | |
39c94593 JR |
863 | atomic transaction. If any of the flow mods in a transaction fail, none |
864 | of them are executed. All flow mods in a bundle appear to datapath | |
865 | lookups simultaneously. | |
db5076ee JR |
866 | - ovs-ofctl 'add-flow' and 'add-flows' commands now accept arbitrary flow |
867 | mods as an input by allowing the flow specification to start with an | |
868 | explicit 'add', 'modify', 'modify_strict', 'delete', or 'delete_strict' | |
869 | keyword. A missing keyword is treated as 'add', so this is fully | |
870 | backwards compatible. With the new '--bundle' option all the flow mods | |
39c94593 | 871 | are executed as a single atomic transaction using an OpenFlow 1.4 bundle. |
4a1f9610 | 872 | - ovs-pki: Changed message digest algorithm from MD5 to SHA-1 because |
9ff33ca7 BP |
873 | MD5 is no longer secure and some operating systems have started to disable |
874 | it in OpenSSL. | |
09e25603 TW |
875 | - ovsdb-server: New OVSDB protocol extension allows inequality tests on |
876 | "optional scalar" columns. See ovsdb-server(1) for details. | |
ff495b63 BP |
877 | - ovs-vsctl now permits immutable columns in a new row to be modified in |
878 | the same transaction that creates the row. | |
0bc1b46a BP |
879 | - test-controller has been renamed ovs-testcontroller at request of users |
880 | who find it useful for testing basic OpenFlow setups. It is still not | |
881 | a necessary or desirable part of most Open vSwitch deployments. | |
cccf7e9d | 882 | - Support for travis-ci.org based continuous integration builds has been |
542cc9bb | 883 | added. Build failures are reported to build@openvswitch.org. See INSTALL.md |
cccf7e9d | 884 | file for additional details. |
bbda3a2f DV |
885 | - Support for the Rapid Spanning Tree Protocol (IEEE 802.1D-2004). |
886 | The implementation has been tested successfully against the Ixia Automated | |
887 | Network Validation Library (ANVL). | |
2f9dd77f | 888 | - Stats are no longer updated on fake bond interface. |
91fc374a | 889 | - Keep active bond interface selection across OVS restart. |
ec8f0f0c | 890 | - A simple wrapper script, 'ovs-docker', to integrate OVS with Docker |
62dbc5bd GS |
891 | containers. If and when there is a native integration of Open vSwitch |
892 | with Docker, the wrapper script will be retired. | |
e5a1caee JG |
893 | - Added support for DPDK Tunneling. VXLAN, GRE, and Geneve are supported |
894 | protocols. This is generic tunneling mechanism for userspace datapath. | |
e3102e42 | 895 | - Support for multicast snooping (IGMPv1, IGMPv2 and IGMPv3) |
3afcde43 | 896 | - Support for Linux kernels up to 4.0.x |
d5460484 GS |
897 | - The documentation now use the term 'destination' to mean one of syslog, |
898 | console or file for vlog logging instead of the previously used term | |
899 | 'facility'. | |
ac6073e3 | 900 | - Support for VXLAN Group Policy extension |
99eef98b DF |
901 | - Initial support for the IETF Auto-Attach SPBM draft standard. This |
902 | contains rudimentary support for the LLDP protocol as needed for | |
903 | Auto-Attach. | |
d4763d1d JP |
904 | - The default OpenFlow and OVSDB ports are now the IANA-assigned |
905 | numbers. OpenFlow is 6653 and OVSDB is 6640. | |
58397e6c | 906 | - Support for DPDK vHost. |
4752cc0c | 907 | - Support for outer UDP checksums in Geneve and VXLAN. |
d0d986a5 TG |
908 | - The kernel vports with dependencies are no longer part of the overall |
909 | openvswitch.ko but built and loaded automatically as individual kernel | |
910 | modules (vport-*.ko). | |
4237026e | 911 | - Support for STT tunneling. |
6901639b BP |
912 | - ovs-sim: New developer tool for simulating multiple OVS instances. |
913 | See ovs-sim(1) for more information. | |
fe089c0d AA |
914 | - Support to configure method (--syslog-method argument) that determines |
915 | how daemons will talk with syslog. | |
532e1463 AA |
916 | - Support for "ovs-appctl vlog/list-pattern" command that lets to query |
917 | logging message format for each destination. | |
2c7ea589 JP |
918 | |
919 | ||
e13440fc | 920 | v2.3.0 - 14 Aug 2014 |
c5cf1059 | 921 | --------------------- |
6dc53744 BP |
922 | - OpenFlow 1.1, 1.2, and 1.3 are now enabled by default in |
923 | ovs-vswitchd. | |
69d6040e JR |
924 | - Linux kernel datapath now has an exact match cache optimizing the |
925 | flow matching process. | |
926 | - Datapath flows now have partially wildcarded tranport port field | |
927 | matches. This reduces userspace upcalls, but increases the | |
928 | number of different masks in the datapath. The kernel datapath | |
929 | exact match cache removes the overhead of matching the incoming | |
930 | packets with the larger number of masks, but when paired with an | |
931 | older kernel module, some workloads may perform worse with the | |
932 | new userspace. | |
0877a018 | 933 | - Compatibility with autoconf 2.63 (previously >=2.64) |
c5cf1059 | 934 | |
012c3a52 | 935 | v2.2.0 - Internal Release |
bff46ebb | 936 | --------------------- |
1839c356 FL |
937 | - Internal ports are no longer brought up by default, because it |
938 | should be an administrator task to bring up devices as they are | |
939 | configured properly. | |
c3ccfe98 AZ |
940 | - ovs-vsctl now reports when ovs-vswitchd fails to create a new port or |
941 | bridge. | |
9500f505 TG |
942 | - Port creation and configuration errors are now stored in a new error |
943 | column of the Interface table and included in 'ovs-vsctl show'. | |
7868fbc6 BP |
944 | - The "ovsdbmonitor" graphical tool has been removed, because it was |
945 | poorly maintained and not widely used. | |
e3c7ed29 | 946 | - New "check-ryu" Makefile target for running Ryu tests for OpenFlow |
542cc9bb | 947 | controllers against Open vSwitch. See INSTALL.md for details. |
f51e8ccb | 948 | - Added IPFIX support for SCTP flows and templates for ICMPv4/v6 flows. |
0b114fa0 GS |
949 | - Upon the receipt of a SIGHUP signal, ovs-vswitchd no longer reopens its |
950 | log file (it will terminate instead). Please use 'ovs-appctl vlog/reopen' | |
951 | instead. | |
e2f3178f | 952 | - Support for Linux kernels up to 3.14. From Kernel 3.12 onwards OVS uses |
cb25142c | 953 | tunnel API for GRE and VXLAN. |
8a9562d2 | 954 | - Added DPDK support. |
a5ed8fe3 | 955 | - Added support for custom vlog patterns in Python |
f51e8ccb | 956 | |
bff46ebb | 957 | |
a3aabcd2 | 958 | v2.1.0 - 19 Mar 2014 |
b366c1f4 | 959 | --------------------- |
13751fd8 JR |
960 | - Address prefix tracking support for flow tables. New columns |
961 | "prefixes" in OVS-DB table "Flow_Table" controls which packet | |
962 | header fields are used for address prefix tracking. Prefix | |
963 | tracking allows the classifier to skip rules with longer than | |
964 | necessary prefixes, resulting in better wildcarding for datapath | |
965 | flows. Default configuration is to not use any fields for prefix | |
966 | tracking. However, if any flow tables contain both exact matches | |
967 | and masked matches for IP address fields, OVS performance may be | |
968 | increased by using this feature. | |
969 | * As of now, the fields for which prefix lookup can be enabled | |
970 | are: 'tun_id', 'tun_src', 'tun_dst', 'nw_src', 'nw_dst' (or | |
971 | aliases 'ip_src' and 'ip_dst'), 'ipv6_src', and 'ipv6_dst'. | |
972 | (Using this feature for 'tun_id' would only make sense if the | |
973 | tunnel IDs have prefix structure similar to IP addresses.) | |
974 | * There is a maximum number of fields that can be enabled for any | |
975 | one flow table. Currently this limit is 3. | |
976 | * Examples: | |
977 | $ ovs-vsctl set Bridge br0 flow_tables:0=@N1 -- \ | |
978 | --id=@N1 create Flow_Table name=table0 | |
979 | $ ovs-vsctl set Bridge br0 flow_tables:1=@N1 -- \ | |
980 | --id=@N1 create Flow_Table name=table1 | |
981 | $ ovs-vsctl set Flow_Table table0 prefixes=ip_dst,ip_src | |
982 | $ ovs-vsctl set Flow_Table table1 prefixes=[] | |
bcb8bde4 JR |
983 | - TCP flags matching: OVS now supports matching of TCP flags. This |
984 | has an adverse performance impact when using OVS userspace 1.10 | |
985 | or older (no megaflows support) together with the new OVS kernel | |
986 | module. It is recommended that the kernel and userspace modules | |
987 | both are upgraded at the same time. | |
36359150 JP |
988 | - The default OpenFlow and OVSDB ports will change to |
989 | IANA-assigned numbers in a future release. Consider updating | |
990 | your installations to specify port numbers instead of using the | |
991 | defaults. | |
7fdb60a7 SH |
992 | - OpenFlow: |
993 | * The OpenFlow 1.1+ "Write-Actions" instruction is now supported. | |
484c8355 BP |
994 | * OVS limits the OpenFlow port numbers it assigns to port 32767 and |
995 | below, leaving port numbers above that range free for assignment | |
996 | by the controller. | |
4abb8608 BP |
997 | * ovs-vswitchd now honors changes to the "ofport_request" column |
998 | in the Interface table by changing the port's OpenFlow port | |
999 | number. | |
5dc6f8e1 | 1000 | * The Open vSwitch software switch now supports OpenFlow groups. |
a5ae88ff AA |
1001 | - ovs-vswitchd.conf.db.5 man page will contain graphviz/dot |
1002 | diagram only if graphviz package was installed at the build time. | |
54af97ad | 1003 | - Support for Linux kernels up to 3.11 |
847108dc AZ |
1004 | - ovs-dpctl: |
1005 | The "show" command also displays mega flow mask stats. | |
60e46251 BP |
1006 | - ovs-ofctl: |
1007 | * New command "ofp-parse-pcap" to dump OpenFlow from PCAP files. | |
1d5aaa61 BP |
1008 | - ovs-controller has been renamed test-controller. It is no longer |
1009 | packaged or installed by default, because too many users assumed | |
1010 | incorrectly that ovs-controller was a necessary or desirable part | |
1011 | of an Open vSwitch deployment. | |
afc9f547 | 1012 | - Added vlog option to export to a UDP syslog sink. |
4227b221 BP |
1013 | - ovsdb-client: |
1014 | * The "monitor" command can now monitor all tables in a database, | |
1015 | instead of being limited to a single table. | |
e79a6c83 EJ |
1016 | - The flow-eviction-threshold has been replaced by the flow-limit which is a |
1017 | hard limit on the number of flows in the datapath. It defaults to 200,000 | |
1018 | flows. OVS automatically adjusts this number depending on network | |
1019 | conditions. | |
e731d71b | 1020 | - Added IPv6 support for active and passive socket communications. |
b366c1f4 JP |
1021 | |
1022 | ||
2fdb1879 | 1023 | v2.0.0 - 15 Oct 2013 |
9f31efc7 | 1024 | --------------------- |
d27705ea JP |
1025 | - The ovs-vswitchd process is no longer single-threaded. Multiple |
1026 | threads are now used to handle flow set up and asynchronous | |
1027 | logging. | |
0ad90c84 | 1028 | - OpenFlow: |
75fa58f8 BP |
1029 | * Experimental support for OpenFlow 1.1 (in addition to 1.2 and |
1030 | 1.3, which had experimental support in 1.10). | |
7395c052 NZ |
1031 | * Experimental protocol support for OpenFlow 1.1+ groups. This |
1032 | does not yet include an implementation in the Open vSwitch | |
1033 | software switch. | |
1034 | * Experimental protocol support for OpenFlow 1.2+ meters. This | |
1035 | does not yet include an implementation in the Open vSwitch | |
1036 | software switch. | |
0ad90c84 JR |
1037 | * New support for matching outer source and destination IP address |
1038 | of tunneled packets, for tunnel ports configured with the newly | |
e0eeeca5 | 1039 | added "remote_ip=flow" and "local_ip=flow" options. |
ac923e91 JG |
1040 | * Support for matching on metadata 'pkt_mark' for interacting with |
1041 | other system components. On Linux this corresponds to the skb | |
1042 | mark. | |
fe8a1798 | 1043 | * Support matching, rewriting SCTP ports |
ea401d9a NM |
1044 | - The Interface table in the database has a new "ifindex" column to |
1045 | report the interface's OS-assigned ifindex. | |
81a114e5 BP |
1046 | - New "check-oftest" Makefile target for running OFTest against Open |
1047 | vSwitch. See README-OFTest for details. | |
380f49c4 | 1048 | - The flow eviction threshold has been moved to the Open_vSwitch table. |
fb6de52c GS |
1049 | - Database names are now mandatory when specifying ovsdb-server options |
1050 | through database paths (e.g. Private key option with the database name | |
1051 | should look like "--private-key=db:Open_vSwitch,SSL,private_key"). | |
fef5244f | 1052 | - Added ovs-dev.py, a utility script helpful for Open vSwitch developers. |
9b764edf | 1053 | - Support for Linux kernels up to 3.10 |
1ac0e975 BP |
1054 | - ovs-ofctl: |
1055 | * New "ofp-parse" for printing OpenFlow messages read from a file. | |
7395c052 | 1056 | * New commands for OpenFlow 1.1+ groups. |
978427a5 | 1057 | - Added configurable flow caching support to IPFIX exporter. |
37418c86 | 1058 | - Dropped support for Linux pre-2.6.32. |
7c018033 BP |
1059 | - Log file timestamps and ovsdb commit timestamps are now reported |
1060 | with millisecond resolution. (Previous versions only reported | |
1061 | whole seconds.) | |
9f31efc7 JP |
1062 | |
1063 | ||
03c8f0b7 | 1064 | v1.11.0 - 28 Aug 2013 |
d224e350 | 1065 | --------------------- |
d445cc16 JP |
1066 | - Support for megaflows, which allows wildcarding in the kernel (and |
1067 | any dpif implementation that supports wildcards). Depending on | |
1068 | the flow table and switch configuration, flow set up rates are | |
1069 | close to the Linux bridge. | |
eeecce05 BP |
1070 | - The "tutorial" directory contains a new tutorial for some advanced |
1071 | Open vSwitch features. | |
df53d41c | 1072 | - Stable bond mode has been removed. |
1bda9b9e | 1073 | - The autopath action has been removed. |
a6ae068b LJ |
1074 | - New support for the data encapsulation format of the LISP tunnel |
1075 | protocol (RFC 6830). An external control plane or manual flow | |
1076 | setup is required for EID-to-RLOC mapping. | |
b676167a | 1077 | - OpenFlow: |
0f3f3c3d SH |
1078 | * The "dec_mpls_ttl" and "set_mpls_ttl" actions from OpenFlow |
1079 | 1.1 and later are now implemented. | |
bd85dac1 AZ |
1080 | * New "stack" extension for use in actions, to push and pop from |
1081 | NXM fields. | |
a7b07d4c BP |
1082 | * The "load" and "set_field" actions can now modify the "in_port". (This |
1083 | allows one to enable output to a flow's input port by setting the | |
1084 | in_port to some unused value, such as OFPP_NONE.) | |
186afbfe BP |
1085 | - ovs-dpctl: |
1086 | * New debugging commands "add-flow", "mod-flow", "del-flow". | |
041e7168 | 1087 | * "dump-flows" now has a -m option to increase output verbosity. |
bcd2633a JP |
1088 | - In dpif-based bridges, cache action translations, which can improve |
1089 | flow set up performance by 80% with a complicated flow table. | |
ca03aae0 | 1090 | - New syslog format, prefixed with "ovs|", to be easier to filter. |
f9ee9dcb GS |
1091 | - RHEL: Removes the default firewall rule that allowed GRE traffic to |
1092 | pass through. Any users that relied on this automatic firewall hole | |
1093 | will have to manually configure it. The ovs-ctl(8) manpage documents | |
1094 | the "enable-protocol" command that can be used as an alternative. | |
90967e95 EJ |
1095 | - New CFM demand mode which uses data traffic to indicate interface |
1096 | liveness. | |
d224e350 | 1097 | |
b82b19e9 | 1098 | v1.10.0 - 01 May 2013 |
4191f435 | 1099 | --------------------- |
685e46da BP |
1100 | - Bridge compatibility support has been removed. Any uses that |
1101 | rely on ovs-brcompatd will have to stick with Open vSwitch 1.9.x | |
1102 | or adapt to native Open vSwitch support (e.g. use ovs-vsctl instead | |
1103 | of brctl). | |
c4069512 | 1104 | - The maximum size of the MAC learning table is now configurable. |
989fd548 JP |
1105 | - With the Linux datapath, packets for new flows are now queued |
1106 | separately on a per-port basis, so it should no longer be | |
1107 | possible for a large number of new flows arriving on one port to | |
1108 | prevent new flows from being processed on other ports. | |
43d18dc1 BP |
1109 | - ovs-vsctl: |
1110 | * Previously ovs-vsctl would retry connecting to the database forever, | |
1111 | causing it to hang if ovsdb-server was not running. Now, ovs-vsctl | |
1112 | only tries once by default (use --retry to try forever). This change | |
1113 | means that you may want to remove uses of --timeout to avoid hangs | |
1114 | in ovs-vsctl calls. | |
1115 | * Many "ovs-vsctl" database commands now accept an --if-exists option. | |
1116 | Please refer to the ovs-vsctl manpage for details. | |
e6024057 | 1117 | - OpenFlow: |
d6123831 JP |
1118 | - Experimental support for newer versions of OpenFlow. See |
1119 | the "What versions of OpenFlow does Open vSwitch support?" | |
1120 | question in the FAQ for more details. | |
e6024057 JP |
1121 | - The OpenFlow "dp_desc" may now be configured by setting the |
1122 | value of other-config:dp-desc in the Bridge table. | |
1123 | - It is possible to request the OpenFlow port number with the | |
1124 | "ofport_request" column in the Interface table. | |
c9accf5b BP |
1125 | - The NXM flow_removed message now reports the OpenFlow table ID |
1126 | from which the flow was removed. | |
3c23e920 JP |
1127 | - Tunneling: |
1128 | - New support for the VXLAN tunnel protocol (see the IETF draft here: | |
238bc978 | 1129 | http://tools.ietf.org/html/draft-mahalingam-dutt-dcops-vxlan-03). |
3c23e920 JP |
1130 | - Tunneling requires the version of the kernel module paired with |
1131 | Open vSwitch 1.9.0 or later. | |
1132 | - Inheritance of the Don't Fragment bit in IP tunnels (df_inherit) | |
1133 | is no longer supported. | |
1134 | - Path MTU discovery is no longer supported. | |
ccd989e0 JG |
1135 | - CAPWAP tunneling support removed. |
1136 | - Tunnels with multicast destination ports are no longer supported. | |
e6024057 JP |
1137 | - ovs-dpctl: |
1138 | - The "dump-flows" and "del-flows" no longer require an argument | |
1139 | if only one datapath exists. | |
1140 | - ovs-appctl: | |
1141 | - New "vlog/disable-rate-limit" and "vlog/enable-rate-limit" | |
1142 | commands available allow control over logging rate limits. | |
1143 | - New "dpif/dump-dps", "dpif/show", and "dpif/dump-flows" command | |
1144 | that mimic the equivalent ovs-dpctl commands. | |
e6024057 JP |
1145 | - The ofproto library is now responsible for assigning OpenFlow port |
1146 | numbers. An ofproto implementation should assign them when | |
1147 | port_construct() is called. | |
1148 | - All dpif-based bridges of a particular type share a common | |
1149 | datapath called "ovs-<type>", e.g. "ovs-system". The ovs-dpctl | |
1150 | commands will now return information on that shared datapath. To | |
1151 | get the equivalent bridge-specific information, use the new | |
1152 | "ovs-appctl dpif/*" commands. | |
bedde04c GS |
1153 | - Backward-incompatible changes: |
1154 | - Earlier Open vSwitch versions treated ANY as a wildcard in flow | |
1155 | syntax. OpenFlow 1.1 adds a port named ANY, which introduces a | |
1156 | conflict. ANY was rarely used in flow syntax, so we chose to | |
1157 | retire that meaning of ANY in favor of the OpenFlow 1.1 meaning. | |
3c23e920 JP |
1158 | - Patch ports no longer require kernel support, so they now work |
1159 | with FreeBSD and the kernel module built into Linux 3.3 and later. | |
29089a54 | 1160 | - New "sample" action. |
f07ee64c | 1161 | |
e5f77cc3 | 1162 | |
fdfe872d JP |
1163 | v1.9.0 - 26 Feb 2013 |
1164 | ------------------------ | |
72e8bf28 AA |
1165 | - Datapath: |
1166 | - Support for ipv6 set action. | |
1167 | - SKB mark matching and setting. | |
64807dfb | 1168 | - support for Linux kernels up to 3.8 |
f6eb6b20 GL |
1169 | - FreeBSD is now a supported platform, thanks to code contributions from |
1170 | Gaetano Catalli, Ed Maste, and Giuseppe Lettieri. | |
b592e726 | 1171 | - ovs-bugtool: New --ovs option to report only OVS related information. |
781dee08 BP |
1172 | - New %t and %T log escapes to identify the subprogram within a |
1173 | cooperating group of processes or threads that emitted a log message. | |
1174 | The default log patterns now include this information. | |
32455024 | 1175 | - OpenFlow: |
e878338b SH |
1176 | - Allow bitwise masking for SHA and THA fields in ARP, SLL and TLL |
1177 | fields in IPv6 neighbor discovery messages, and IPv6 flow label. | |
4cceacb9 | 1178 | - Adds support for writing to the metadata field for a flow. |
3c23e920 JP |
1179 | - Tunneling: |
1180 | - The tunneling code no longer assumes input and output keys are | |
1181 | symmetric. If they are not, PMTUD needs to be disabled for | |
1182 | tunneling to work. Note this only applies to flow-based keys. | |
1183 | - New support for a nonstandard form of GRE that supports a 64-bit key. | |
1184 | - Tunnel Path MTU Discovery default value was set to 'disabled'. | |
1185 | This feature is deprecated and will be removed soon. | |
1186 | - Tunnel header caching removed. | |
c6100d92 BP |
1187 | - ovs-ofctl: |
1188 | - Commands and actions that accept port numbers now also accept keywords | |
1189 | that represent those ports (such as LOCAL, NONE, and ALL). This is | |
1190 | also the recommended way to specify these ports, for compatibility | |
1191 | with OpenFlow 1.1 and later (which use the OpenFlow 1.0 numbers | |
1192 | for these ports for different purposes). | |
2562714a | 1193 | - ovs-dpctl: |
4b3b8d8f JP |
1194 | - Support requesting the port number with the "port_no" option in |
1195 | the "add-if" command. | |
2562714a BP |
1196 | - ovs-pki: The "online PKI" features have been removed, along with |
1197 | the ovs-pki-cgi program that facilitated it, because of some | |
1198 | alarmist insecurity claims. We do not believe that these claims | |
1199 | are true, but because we do not know of any users for this | |
1200 | feature it seems better on balance to remove it. (The ovs-pki-cgi | |
1201 | program was not included in distribution packaging.) | |
341c4e59 BP |
1202 | - ovsdb-server now enforces the immutability of immutable columns. This |
1203 | was not enforced in earlier versions due to an oversight. | |
fd38af85 BP |
1204 | - The following features are now deprecated. They will be removed no |
1205 | earlier than February 2013. Please email dev@openvswitch.org with | |
1206 | concerns. | |
a8643e44 | 1207 | - Bridge compatibility. |
fd38af85 BP |
1208 | - Stable bond mode. |
1209 | - The autopath action. | |
1210 | - Interface type "null". | |
1211 | - Numeric values for reserved ports (see "ovs-ofctl" note above). | |
85340733 | 1212 | - Tunnel Path MTU Discovery. |
1280bf0e | 1213 | - CAPWAP tunnel support. |
f07ee64c MM |
1214 | - The data in the RARP packets can now be matched in the same way as the |
1215 | data in ARP packets. | |
945cad7f | 1216 | |
79f827fa | 1217 | |
fdfe872d | 1218 | v1.8.0 - 26 Feb 2013 |
c8d5d22c | 1219 | ------------------------ |
fdfe872d | 1220 | *** Internal only release *** |
c483d489 | 1221 | - New FAQ. Please send updates and additions! |
f25d0cf3 BP |
1222 | - Authors of controllers, please read the new section titled "Action |
1223 | Reproduction" in DESIGN, which describes an Open vSwitch change in | |
1224 | behavior in corner cases that may affect some controllers. | |
2d8bdd8f AA |
1225 | - ovs-l3ping: |
1226 | - A new test utility that can create L3 tunnel between two Open | |
1227 | vSwitches and detect connectivity issues. | |
5498c01f | 1228 | - ovs-ofctl: |
bdcc5925 | 1229 | - New --sort and --rsort options for "dump-flows" command. |
5498c01f | 1230 | - "mod-port" command can now control all OpenFlow config flags. |
c08201d6 | 1231 | - OpenFlow: |
ff0b06ee BP |
1232 | - Allow general bitwise masking for IPv4 and IPv6 addresses in |
1233 | IPv4, IPv6, and ARP packets. (Previously, only CIDR masks | |
c08201d6 BP |
1234 | were allowed.) |
1235 | - Allow support for arbitrary Ethernet masks. (Previously, only | |
1236 | the multicast bit in the destination address could be individually | |
5a0e4aec | 1237 | masked.) |
969fc56c | 1238 | - New field OXM_OF_METADATA, to align with OpenFlow 1.1. |
0414d158 BP |
1239 | - The OFPST_QUEUE request now reports an error if a specified port or |
1240 | queue does not exist, or for requests for a specific queue on all | |
1241 | ports, if the specified queue does not exist on any port. (Previous | |
1242 | versions generally reported an empty set of results.) | |
2b07c8b1 BP |
1243 | - New "flow monitor" feature to allow controllers to be notified of |
1244 | flow table changes as they happen. | |
c93f9a78 EJ |
1245 | - Additional protocols are not mirrored and dropped when forward-bpdu is |
1246 | false. For a full list, see the ovs-vswitchd.conf.db man page. | |
38f7147c EJ |
1247 | - Open vSwitch now sends RARP packets in situations where it previously |
1248 | sent a custom protocol, making it consistent with behavior of QEMU and | |
1249 | VMware. | |
969e46a2 AS |
1250 | - All Open vSwitch programs and log files now show timestamps in UTC, |
1251 | instead the local timezone, by default. | |
c8d5d22c JP |
1252 | |
1253 | ||
3b4ab170 | 1254 | v1.7.0 - 30 Jul 2012 |
dd1ba5b3 | 1255 | ------------------------ |
9b80f761 CW |
1256 | - kernel modules are renamed. openvswitch_mod.ko is now |
1257 | openvswitch.ko and brcompat_mod.ko is now brcompat.ko. | |
e9358af6 | 1258 | - Increased the number of NXM registers to 8. |
22dd5cec | 1259 | - Added ability to configure DSCP setting for manager and controller |
f125905c MM |
1260 | connections. By default, these connections have a DSCP value of |
1261 | Internetwork Control (0xc0). | |
3967a833 MM |
1262 | - Added the granular link health statistics, 'cfm_health', to an |
1263 | interface. | |
47284b1f AA |
1264 | - OpenFlow: |
1265 | - Added support to mask nd_target for ICMPv6 neighbor discovery flows. | |
2be393ed JP |
1266 | - Added support for OpenFlow 1.3 port description (OFPMP_PORT_DESC) |
1267 | multipart messages. | |
1268 | - ovs-ofctl: | |
1269 | - Added the "dump-ports-desc" command to retrieve port | |
1270 | information using the new port description multipart messages. | |
8d25d9a2 AA |
1271 | - ovs-test: |
1272 | - Added support for spawning ovs-test server from the client. | |
1273 | - Now ovs-test is able to automatically create test bridges and ports. | |
7393104d | 1274 | - "ovs-dpctl dump-flows" now prints observed TCP flags in TCP flows. |
22dd5cec | 1275 | - Tripled flow setup performance. |
a5f607bc BP |
1276 | - The "coverage/log" command previously available through ovs-appctl |
1277 | has been replaced by "coverage/show". The new command replies with | |
1278 | coverage counter values, instead of logging them. | |
dd1ba5b3 JP |
1279 | |
1280 | ||
9d564cb2 | 1281 | v1.6.1 - 25 Jun 2012 |
d0a8c2e0 | 1282 | ------------------------ |
9d564cb2 JP |
1283 | - Allow OFPP_CONTROLLER as the in_port for packet-out messages. |
1284 | ||
1285 | ||
1286 | v1.6.0 - 24 Feb 2012 | |
1287 | ------------------------ | |
1288 | *** Internal only release *** | |
4df08875 | 1289 | - bonding |
bdebeece EJ |
1290 | - LACP bonds no longer fall back to balance-slb when negotiations fail. |
1291 | Instead they drop traffic. | |
4df08875 EJ |
1292 | - The default bond_mode changed from SLB to active-backup, to protect |
1293 | unsuspecting users from the significant risks of SLB bonds (which are | |
1294 | documented in vswitchd/INTERNALS). | |
bc1b010c EJ |
1295 | - Load balancing can be disabled by setting the bond-rebalance-interval |
1296 | to zero. | |
73f33563 BP |
1297 | - OpenFlow: |
1298 | - Added support for bitwise matching on TCP and UDP ports. | |
1299 | See ovs-ofctl(8) for more information. | |
80d5aefd BP |
1300 | - NXM flow dumps now include times elapsed toward idle and hard |
1301 | timeouts. | |
1302 | - Added an OpenFlow extension NXT_SET_ASYNC_CONFIG that allows | |
1303 | controllers more precise control over which OpenFlow messages they | |
1304 | receive asynchronously. | |
0e553d9c BP |
1305 | - New "fin_timeout" action. |
1306 | - Added "fin_timeout" support to "learn" action. | |
a7349929 BP |
1307 | - New Nicira action NXAST_CONTROLLER that offers additional features |
1308 | over output to OFPP_CONTROLLER. | |
2c999774 BP |
1309 | - When QoS settings for an interface do not configure a default queue |
1310 | (queue 0), Open vSwitch now uses a default configuration for that | |
1311 | queue, instead of dropping all packets as in previous versions. | |
2a3e30b2 BP |
1312 | - Logging: |
1313 | - Logging to console and file will have UTC timestamp as a default for | |
1314 | all the daemons. An example of the default format is | |
1315 | 2012-01-27T16:35:17Z. ovs-appctl can be used to change the default | |
1316 | format as before. | |
1317 | - The syntax of commands and options to set log levels was simplified, | |
1318 | to make it easier to remember. | |
254750ce BP |
1319 | - New support for limiting the number of flows in an OpenFlow flow |
1320 | table, with configurable policy for evicting flows upon | |
1321 | overflow. See the Flow_Table table in ovs-vswitch.conf.db(5) | |
1322 | for more information. | |
9886b662 BP |
1323 | - New "enable-async-messages" column in the Controller table. If set to |
1324 | false, OpenFlow connections to the controller will initially have all | |
1325 | asynchronous messages disabled, overriding normal OpenFlow behavior. | |
1745cd08 BP |
1326 | - ofproto-provider interface: |
1327 | - "struct rule" has a new member "used" that ofproto implementations | |
1328 | should maintain by updating with ofproto_rule_update_used(). | |
8f46c9bb BP |
1329 | - ovsdb-client: |
1330 | - The new option --timestamp causes the "monitor" command to print | |
1331 | a timestamp with every update. | |
a7aa2d3c | 1332 | - CFM module CCM broadcasts can now be tagged with an 802.1p priority. |
d0a8c2e0 JP |
1333 | |
1334 | ||
a6492d91 | 1335 | v1.5.0 - 01 Jun 2012 |
e68bfcfc | 1336 | ------------------------ |
e729e793 JP |
1337 | - OpenFlow: |
1338 | - Added support for querying, modifying, and deleting flows | |
1339 | based on flow cookie when using NXM. | |
b4b7f827 | 1340 | - Added new NXM_PACKET_IN format. |
f0fd1a17 | 1341 | - Added new NXAST_DEC_TTL action. |
1eb85ef5 EJ |
1342 | - ovs-ofctl: |
1343 | - Added daemonization support to the monitor and snoop commands. | |
2a9537e2 BP |
1344 | - ovs-vsctl: |
1345 | - The "find" command supports new set relational operators | |
1346 | {=}, {!=}, {<}, {>}, {<=}, and {>=}. | |
e4476f74 BP |
1347 | - ovsdb-tool now uses the typical database and schema installation |
1348 | directories as defaults. | |
d1add61d JP |
1349 | - The default MAC learning timeout has been increased from 60 seconds |
1350 | to 300 seconds. The MAC learning timeout is now configurable. | |
e68bfcfc JP |
1351 | |
1352 | ||
ef13dc11 | 1353 | v1.4.0 - 30 Jan 2012 |
b6a9a95b | 1354 | ------------------------ |
50bf17cd | 1355 | - Compatible with Open vSwitch kernel module included in Linux 3.3. |
52a90c29 BP |
1356 | - New "VLAN splinters" feature to work around buggy device drivers |
1357 | in old Linux versions. (This feature is deprecated. When | |
1358 | broken device drivers are no longer in widespread use, we will | |
1359 | delete this feature.) See ovs-vswitchd.conf.db(5) for more | |
1360 | information. | |
fa8223b7 JP |
1361 | - OpenFlow: |
1362 | - Added ability to match on IPv6 flow label through NXM. | |
530180fd | 1363 | - Added ability to match on ECN bits in IPv4 and IPv6 through NXM. |
a61680c6 | 1364 | - Added ability to match on TTL in IPv4 and IPv6 through NXM. |
530180fd | 1365 | - Added ability to modify ECN bits in IPv4. |
a61680c6 | 1366 | - Added ability to modify TTL in IPv4. |
9d24de3b | 1367 | - ovs-vswitchd: |
c06bba01 JP |
1368 | - Don't require the "normal" action to use mirrors. Traffic will |
1369 | now be properly mirrored for any flows, regardless of their | |
1370 | actions. | |
9d24de3b | 1371 | - Track packet and byte statistics sent on mirrors. |
733adf2a LG |
1372 | - The sFlow implementation can now usually infer the correct agent |
1373 | device instead of having to be told explicitly. | |
f0a3aa2e AA |
1374 | - ovs-appctl: |
1375 | - New "fdb/flush" command to flush bridge's MAC learning table. | |
0be6140a AA |
1376 | - ovs-test: |
1377 | - A new distributed testing tool that allows one to diagnose performance | |
1378 | and connectivity issues. This tool currently is not included in RH or | |
1379 | Xen packages. | |
0fb42626 | 1380 | - RHEL packaging now supports integration with Red Hat network scripts. |
4c57c3bc EJ |
1381 | - bonding: |
1382 | - Post 1.4.*, OVS will be changing the default bond mode from balance-slb | |
1383 | to active-backup. SLB bonds carry significant risks with them | |
1384 | (documented vswitchd/INTERNALS) which we want to prevent unsuspecting | |
1385 | users from running into. Users are advised to update any scripts or | |
1386 | configuration which may be negatively impacted by explicitly setting | |
1387 | the bond mode which they want to use. | |
b6a9a95b | 1388 | |
0be6140a | 1389 | |
ddc29387 | 1390 | v1.3.0 - 09 Dec 2011 |
3e60856b | 1391 | ------------------------ |
f694937d EJ |
1392 | - OpenFlow: |
1393 | - Added an OpenFlow extension which allows the "output" action to accept | |
1394 | NXM fields. | |
75a75043 | 1395 | - Added an OpenFlow extension for flexible learning. |
d2c0fed9 | 1396 | - Bumped number of NXM registers from four to five. |
d5e1e5ed | 1397 | - ovs-appctl: |
ae75dae3 JP |
1398 | - New "version" command to determine version of running daemon. |
1399 | - If no argument is provided for "cfm/show", displays detailed | |
1400 | information about all interfaces with CFM enabled. | |
5dab8ece JP |
1401 | - If no argument is provided for "lacp/show", displays detailed |
1402 | information about all ports with LACP enabled. | |
10500639 BP |
1403 | - ovs-dpctl: |
1404 | - New "set-if" command to modify a datapath port's configuration. | |
29901626 BP |
1405 | - ovs-vswitchd: |
1406 | - The software switch now supports 255 OpenFlow tables, instead | |
1407 | of just one. By default, only table 0 is consulted, but the | |
1408 | new NXAST_RESUBMIT_TABLE action can look up in additional | |
1409 | tables. Tables 128 and above are reserved for use by the | |
1410 | switch itself; please use only tables 0 through 127. | |
21f7563c | 1411 | - Add support for 802.1D spanning tree (STP). |
7257b535 BP |
1412 | - Fragment handling extensions: |
1413 | - New OFPC_FRAG_NX_MATCH fragment handling mode, in which L4 | |
1414 | fields are made available for matching in fragments with | |
1415 | offset 0. | |
1416 | - New NXM_NX_IP_FRAG match field for matching IP fragments (usable | |
1417 | via "ip_frag" in ovs-ofctl). | |
1418 | - New ovs-ofctl "get-frags" and "set-frags" commands to get and set | |
1419 | fragment handling policy. | |
2f4bc10d BP |
1420 | - CAPWAP tunneling now supports an extension to transport a 64-bit key. |
1421 | By default it remains compatible with the old version and other | |
c87112ca | 1422 | standards-based implementations. |
17411ecf JG |
1423 | - Flow setups are now processed in a round-robin manner across ports |
1424 | to prevent any single client from monopolizing the CPU and conducting | |
1425 | a denial of service attack. | |
ecac4ebf BP |
1426 | - Added support for native VLAN tagging. A new "vlan_mode" |
1427 | parameter can be set for "port". Possible values: "access", | |
1428 | "trunk", "native-tagged" and "native-untagged". | |
023e1e0a | 1429 | - test-openflowd has been removed. Please use ovs-vswitchd instead. |
3e60856b | 1430 | |
5e9c5b61 | 1431 | v1.2.0 - 03 Aug 2011 |
b78f6b77 | 1432 | ------------------------ |
1a142ced JP |
1433 | - New "ofproto" abstraction layer to ease porting to hardware |
1434 | switching ASICs. | |
1435 | - Packaging for Red Hat Enterprise Linux 5.6 and 6.0. | |
1436 | - Datapath support for Linux kernels up to 3.0. | |
1437 | - OpenFlow: | |
1438 | - New "bundle" and "bundle_load" action extensions. | |
1439 | - Database: | |
1440 | - Implement table unique constraints. | |
1441 | - Support cooperative locking between callers. | |
1442 | - ovs-dpctl: | |
1443 | - New "-s" option for "show" command prints packet and byte | |
1444 | counters for each port. | |
c4ea79bf BP |
1445 | - ovs-ofctl: |
1446 | - New "--readd" option for "replace-flows". | |
9b1735a7 BP |
1447 | - ovs-vsctl: |
1448 | - New "show" command to print an overview of configuration. | |
1a142ced | 1449 | - New "comment" command to add remark that explains intentions. |
2b01925c | 1450 | - ovs-brcompatd has been rewritten to fix long-standing bugs. |
045b2e5c BP |
1451 | - ovs-openflowd has been renamed test-openflowd and moved into the |
1452 | tests directory. Its presence confused too many users. Please | |
1453 | use ovs-vswitchd instead. | |
1a142ced JP |
1454 | - New ovs-benchmark utility to test flow setup performance. |
1455 | - A new log level "off" has been added. Configuring a log facility | |
1456 | "off" prevents any messages from being logged to it. Previously, | |
1457 | "emer" was effectively "off" because no messages were ever logged at | |
1458 | level "emer". Now, errors that cause a process to exit are logged | |
1459 | at "emer" level. | |
8a2d6596 BP |
1460 | - "configure" option --with-l26 has been renamed --with-linux, and |
1461 | --with-l26-source has been renamed --with-linux-source. The old | |
1462 | names will be removed after the next release, so please update | |
1463 | your scripts. | |
22bcc0e7 JG |
1464 | - The "-2.6" suffix has been dropped from the datapath/linux-2.6 and |
1465 | datapath/linux-2.6/compat-2.6 directories. | |
b78f6b77 BP |
1466 | - Feature removals: |
1467 | - Dropped support for "tun_id_from_cookie" OpenFlow extension. | |
0be6140a | 1468 | Please use the extensible match extensions instead. |
93b8df38 EJ |
1469 | - Removed the Maintenance_Point and Monitor tables in an effort |
1470 | to simplify 802.1ag configuration. | |
1a142ced JP |
1471 | - Performance and scalability improvements |
1472 | - Bug fixes | |
b78f6b77 | 1473 | |
d4da3acc JP |
1474 | v1.1.0 - 05 Apr 2011 |
1475 | ------------------------ | |
1476 | - Ability to define policies over IPv6 | |
1477 | - LACP | |
1478 | - 802.1ag CCM | |
1479 | - Support for extensible match extensions to OpenFlow | |
1480 | - QoS: | |
1481 | - Support for HFSC qdisc. | |
1482 | - Queue used by in-band control can now be configured. | |
1483 | - Kernel: | |
1484 | - Kernel<->userspace interface has been reworked and should be | |
1485 | close to a stable ABI now. | |
1486 | - "Port group" concept has been dropped. | |
1487 | - GRE over IPSEC tunnels | |
1488 | - Bonding: | |
1489 | - New active backup bonding mode. | |
1490 | - New L4 hashing support when LACP is enabled. | |
1491 | - Source MAC hash now includes VLAN field also. | |
1492 | - miimon support. | |
1493 | - Greatly improved handling of large flow tables | |
1494 | - ovs-dpctl: | |
1495 | - "show" command now prints full vport configuration. | |
1496 | - "dump-groups" command removed since kernel support for | |
1497 | port groups was dropped. | |
1498 | - ovs-vsctl: | |
1499 | - New commands for working with the new Managers table. | |
1500 | - "list" command enhanced with new formatting options and --columns | |
1501 | option. | |
1502 | - "get" command now accepts new --id option. | |
1503 | - New "find" command. | |
1504 | - ovs-ofctl: | |
1505 | - New "queue-stats" command for printing queue stats. | |
1506 | - New commands "replace-flows" and "diff-flows". | |
1507 | - Commands to add and remove flows can now read from files. | |
1508 | - New --flow-format option to enable or disable NXM. | |
1509 | - New --more option to increase OpenFlow message verbosity. | |
1510 | - Removed "tun-cookie" command, which is no longer useful. | |
1511 | - ovs-controller enhancements for testing various features. | |
1512 | - New ovs-vlan-test command for testing for Linux kernel driver VLAN | |
1513 | bugs. New ovs-vlan-bug-workaround command for enabling and | |
1514 | disabling a workaround for these driver bugs. | |
1515 | - OpenFlow support: | |
35d25d44 | 1516 | - "Resubmit" actions now update flow statistics. |
d4da3acc JP |
1517 | - New "register" extension for use in matching and actions, via NXM. |
1518 | - New "multipath" experimental action extension. | |
1519 | - New support for matching multicast Ethernet frames, via NXM. | |
1520 | - New extension for OpenFlow vendor error codes. | |
1521 | - New extension to set the QoS output queue without actually | |
1522 | sending to an output port. | |
1523 | - Open vSwitch now reports a single flow table, instead of | |
1524 | separate hash and wildcard tables. This better models the | |
1525 | current implementation. | |
1526 | - New experimental "note" action. | |
1527 | - New "ofproto/trace" ovs-appctl command and associated utilities | |
1528 | to ease debugging complex flow tables. | |
1529 | - Database: | |
1530 | - Schema documentation now includes an entity-relationship diagram. | |
1531 | - The database is now garbage collected. In most tables, | |
1532 | unreferenced rows will be deleted automatically. | |
1533 | - Many tables now include statistics updated periodically by | |
1534 | ovs-vswitchd or ovsdb-server. | |
1535 | - Every table now has an "external-ids" column for use by OVS | |
1536 | integrators. | |
1537 | - There is no default controller anymore. Each bridge must have its | |
1538 | controller individually specified. | |
1539 | - The "fail-mode" is now a property of a Bridge instead of a Controller. | |
1540 | - New versioning and checksum features. | |
1541 | - New Managers table and manager_options column in Open_vSwitch table | |
1542 | for specifying managers. The old "managers" column in the | |
1543 | Open_vSwitch table has been removed. | |
1544 | - Many "name" columns are now immutable. | |
1545 | - Feature removals: | |
1546 | - Dropped support for XenServer pre-5.6.100. | |
1547 | - Dropped support for Linux pre-2.6.18. | |
1548 | - Dropped controller discovery support. | |
1549 | - Dropped "ovs-ofctl status" and the OpenFlow extension that it used. | |
1550 | Statistics reporting in the database is a rough equivalent. | |
1551 | - Dropped the "corekeeper" package (now separate, at | |
1552 | http://openvswitch.org/cgi-bin/gitweb.cgi?p=corekeeper). | |
1553 | - Performance and scalability improvements | |
1554 | - Bug fixes | |
1555 | ||
d5905136 JP |
1556 | v1.1.0pre2 - 13 Sep 2010 |
1557 | ------------------------ | |
1558 | - Bug fixes | |
1559 | ||
fdf20378 JP |
1560 | v1.1.0pre1 - 31 Aug 2010 |
1561 | ------------------------ | |
476d56f5 JP |
1562 | - OpenFlow 1.0 slicing (QoS) functionality |
1563 | - Python bindings for configuration database (no write support) | |
1564 | - Performance and scalability improvements | |
1565 | - Bug fixes | |
1566 | ||
b9b0865a JP |
1567 | v1.0.1 - 31 May 2010 |
1568 | -------------------- | |
1569 | - New "patch" interface type | |
1570 | - Bug fixes | |
1571 | ||
7c284ac4 JP |
1572 | v1.0.0 - 15 May 2010 |
1573 | -------------------- | |
1574 | - Configuration database with remote management | |
1575 | - OpenFlow 1.0 | |
1576 | - GRE tunneling | |
1577 | - Support for XenServer 5.5 and 5.6 | |
1578 | - Performance and scalability improvements | |
1579 | - Bug fixes | |
1580 | ||
2f0a1f42 JP |
1581 | v0.99.2 - 18 Feb 2010 |
1582 | --------------------- | |
1583 | - Bug fixes | |
1584 | ||
b84a0589 JP |
1585 | v0.99.1 - 25 Jan 2010 |
1586 | --------------------- | |
1587 | - Add support for sFlow(R) | |
1588 | - Make headers compatible with C++ | |
1589 | - Bug fixes | |
1590 | ||
b7f22a6a JP |
1591 | v0.99.0 - 14 Jan 2010 |
1592 | --------------------- | |
1593 | - User-space forwarding engine | |
1594 | - Bug fixes | |
35d25d44 | 1595 | |
6d735676 JP |
1596 | v0.90.7 - 29 Nov 2009 |
1597 | --------------------- | |
1598 | - Add support for NetFlow active timeouts | |
1599 | - Bug fixes | |
b7f22a6a | 1600 | |
ef5925df JP |
1601 | v0.90.6 - 6 Oct 2009 |
1602 | -------------------- | |
1603 | - Bug fixes | |
1604 | ||
3c708eb8 | 1605 | v0.90.5 - 21 Sep 2009 |
30ee1c4d JP |
1606 | --------------------- |
1607 | - Generalize in-band control to more diverse network setups | |
1608 | - Bug fixes |