- Add
cert_common_name
andcert_subject
placeholder support for authz_http and authz_mongo.#8973
- Check ACLs for last will testament topic before publishing the message. #8930
- Fix exhook
client.authorize
never being execauted. #8780 - Fix JWT plugin don't support non-integer timestamp claims. #8867
- Avoid publishing will message when client fails to auhtenticate. #8887
- Speed up dispatching of shared subscription messages in a cluster #8893
- Fix the extra / prefix when CoAP gateway parsing client topics. #8658
- Speed up updating the configuration, When some nodes in the cluster are down. #8857
- Fix delayed publish inaccurate caused by os time change. #8926
- Fix that EMQX can't start when the retainer is disabled #8911
- Print a warning message when boot with the default (insecure) Erlang cookie. #8905
- Change the
/gateway
API path to plural form. #8823 - Remove
node.etc_dir
from emqx.conf, because it is never used. Also allow user to customize the logging directory #8892 - Added a new API
POST /listeners
for creating listener. #8876
- Remove
will_msg
(not used) field from the client API. #8721 - Fix
$queue
topic name error in management API return. #8728 - Fix race condition which may cause
client.connected
andclient.disconnected
out of order. #8625 - Fix quic listener default idle timeout's type. #8826
- Do not auto-populate default SSL cipher suites, so that the configs are less bloated. #8769
- Upgrade Dashboard version to fix an issue where the node status was not displayed correctly. #8771
- Allow changing the license type from key to file (and vice-versa). #8598
- Add back http connector config keys
max_retries
retry_interval
as deprecated fields #8672 This caused upgrade failure in 5.0.4, because it would fail to boot on configs created from older version.
- Add
bootstrap_users_file
configuration to add default Dashboard username list, which is only added when EMQX is first started. - The license is now copied to all nodes in the cluster when it's reloaded. #8598
- Added a HTTP API to manage licenses. #8610
- Updated
/nodes
API node_status fromRunning/Stopped
torunning/stopped
. #8642 - Improve handling of placeholder interpolation errors #8635
- Better logging on unknown object IDs. #8670
- The bind option support
:1883
style. #8758
- The
data/configs/cluster-override.conf
is cleared to 0KB ifhocon_pp:do/2
failed commits/71f64251 - Improve the health_check for webhooks.
Prior to this change, the webhook only checks the connectivity of the TCP port using
gen_tcp:connect/2
, so if it's a HTTPs server, we didn't check if TLS handshake was successful. commits/6b45d2ea - The
created_at
field of rules is missing after emqx restarts. commits/5fc09e6b - The rule engine's jq function now works even when the path to the EMQX install dir contains spaces jq#35 #8455
- Avoid applying any ACL checks on superusers #8452
- Fix statistics related system topic name error
- Fix AuthN JWKS SSL schema. Using schema in
emqx_schema
. #8458 sentinel
field should be required when AuthN/AuthZ Redis using sentinel mode. #8458- Fix bad swagger format. #8517
- Fix
chars_limit
is not working whenformatter
isjson
. #8518 - Ensuring that exhook dispatches the client events are sequential. #8530
- Avoid using RocksDB backend for persistent sessions when such backend is unavailable. #8528
- Fix AuthN
cert_subject
andcert_common_name
placeholder rendering failure. #8531 - Support listen on an IPv6 address, e.g: [::1]:1883 or ::1:1883. #8547
- GET '/rules' support for pagination and fuzzy search. #8472
‼️ Note : The previous API only returns array:[RuleObj1,RuleObj2]
, after updating, it will become{"data": [RuleObj1,RuleObj2], "meta":{"count":2, "limit":100, "page":1}
, which will carry the paging meta information. - Fix the issue that webhook leaks TCP connections. ehttpc#34, #8580
- Improve the dashboard listener startup log, the listener name is no longer spliced with port information, and the colon(:) is no longer displayed when IP is not specified. #8480
- Remove
/configs/listeners
API, use/listeners/
instead. #8485 - Optimize performance of builtin database operations in processes with long message queue #8439
- Improve authentication tracing. #8554
- Standardize the '/listeners' and
/gateway/<name>/listeners
API fields. It will introduce some incompatible updates, see #8571 - Add option to perform GC on connection process after TLS/SSL handshake is performed. #8637
- Websocket listener failed to read headers
X-Forwarded-For
andX-Forwarded-Port
#8415 - Deleted
cluster_singleton
from MQTT bridge config document. This config is no longer applicable in 5.0 #8407 - Fix
emqx/emqx:latest
docker image publish to use the Erlang flavor, but not Elixir flavor #8414 - Changed the
exp
field in JWT auth to be optional rather than required to fix backwards compatability with 4.X releases. #8425
- Improve the speed of dashboard's HTTP API routing rule generation, which sometimes causes timeout #8438
Announcement: EMQX team has decided to stop supporting relup for opensource edition. Going forward, it will be an enterprise-only feature.
Main reason: relup requires carefully crafted upgrade instructions from ALL previous versions.
For example, 4.3 is now at 4.3.16, we have 4.3.0->4.3.16
, 4.3.1->4.3.16
, ... 16 such upgrade paths in total to maintain.
This had been the biggest obstacle for EMQX team to act agile enough in delivering enhancements and fixes.
- Fixed a typo in
bin/emqx
which affects MacOs release when trying to enable Erlang distribution over TLS #8398 - Restricted shell was accidentally disabled in 5.0.1, it has been added back. #8396
5.0.1 is built on Erlang/OTP 24.2.1-1. Same as 5.0.0.
5.0.0 (like 4.4.x) had Erlang/OTP version number in the package name. This is because we wanted to release different flavor packages (on different Elixir/Erlang/OTP platforms).
However the long package names also causes confusion, as users may not know which to choose if there were more than one presented at the same time.
Going forward, (starting from 5.0.1), packages will be released in both default (short) and flavored (long) package names.
For example: emqx-5.0.1-otp24.2.1-1-ubuntu20.04-amd64.tar.gz
,
but only the default one is presented to the users: emqx-5.0.1-ubuntu20.04-amd64.tar.gz
.
In case anyone wants to try a different flavor package, it can be downlowded from the public s3 bucket, for example: https://s3.us-west-2.amazonaws.com/packages.emqx/emqx-ce/v5.0.1/emqx-5.0.1-otp24.2.1-1-ubuntu20.04-arm64.tar.gz
Exceptions:
- Windows package is always presented with short name (currently on Erlang/OTP 24.2.1).
- Elixir package name is flavored with both Elixir and Erlang/OTP version numbers,
for example:
emqx-5.0.1-elixir1.13.4-otp24.2.1-1-ubuntu20.04-amd64.tar.gz
- Removed management API auth for prometheus scraping endpoint /api/v5/prometheus/stats #8299
- Added more TCP options for exhook (gRPC) connections. #8317
- HTTP Servers used for authentication and authorization will now indicate the result via the response body. #8374 #8377
- Bulk subscribe/unsubscribe APIs #8356
- Added exclusive subscription #8315
- Provide authentication counter metrics #8352 #8375
- Do not allow admin user self-deletion #8286
- After restart, ensure to copy
cluster-override.conf
from the clustered node which has the greatesttnxid
. #8333
- A bug fix ported from 4.x: allow deleting subscriptions from
client.subscribe
hookpoint callback result. #8304 #8347 - Fixed Erlang distribution over TLS #8309
- Made possible to override authentication configs from environment variables #8323
- Made authentication passwords in Mnesia database backward compatible to 4.x, so we can support data migration better. #8351
- Fix plugins upload for rpm/deb installations #8379
- Sync data/authz/acl.conf and data/certs from clustered nodes after a new node joins the cluster #8369
- Ensure auto-retry of failed resources #8371
- Fix the issue that the count of
packets.connack.auth_error
is inaccurate when the client uses a protocol version below MQTT v5.0 to access #8178
- Rate limiter interface is hidden so far, it's subject to a UX redesign.
- QUIC library upgraded to 0.0.14.
- Now the default packages will be released withot otp version number in the package name.
- Renamed config exmpale file name in
etc
dir.