Infix v23.10.0
Note: upcoming releases will lock the
rootuser for system-only services. Instead anadminuser will be the only default user with the CLI as its login shell. This user is already available, so please consider updating any guidelines or documentation you may have.
YANG Status
- ietf-system:
- augments:
- MotD (Message of the Day)
- User login shell, default:
/bin/false - State information for remotely querying firmware version information
- deviations:
- timezone-name, using IANA timezones instead of plain string
- UTC offset, only support per-hour offsets with tzdata
- Usernames, clarifying Linux restrictions
- Unsupported features marked as deviations, e.g. RADIUS
- infix-system-software: firmware upgrade with
install-bundleRPC
- augments:
- ietf-interfaces:
- deviation to allow read-write
if:phys-addressfor custom MAC address - ietf-ip: augments
- IPv4LL similar to standardized IPv6LL
- ietf-ip: deviations (
not-supported) added for IPv4 and IPv6:/if:interfaces/if:interface/ip:ipv4/ip:address/ip:subnet/ip:netmask/if:interfaces/if:interface/ip:ipv6/ip:address/ip:status/if:interfaces/if:interface/ip:ipv4/ip:neighbor/if:interfaces/if:interface/ip:ipv6/ip:neighbor
ietf-if-vlan-encapsulation:Removed in favor of a native model.- infix-if-bridge: Linux bridge interfaces with native VLAN support
- infix-if-type: deviation for interface types, limiting number
to supported types only. New identities are derived from default
IANA interface types, ensuring compatibility with other standard
models, e.g.,ieee802-ethernet-interface.yang - infix-if-veth: Linux VETH pairs
- infix-if-vlan: Linux VLAN interfaces, e.g.
eth0.10(New model!)
- deviation to allow read-write
- Configurable services:
- ieee802-dot1ab-lldp: stripped down to an
enabledsetting - infix-services: support for enabling mDNS service/device discovery
- ieee802-dot1ab-lldp: stripped down to an
Changes
-
Add support for setting/querying IPv4/IPv6 MTU, see #152 for details.
-
Add support for Fail Secure Mode: if loading
startup-configfails, e.g. YANG model validation failure after upgrade, the system now falls back to loadfailure-configinstead of just crashing. This config, along withfactory-config, is generated on every boot to match the active image's YANG models. In case neither config can be loaded, or even bootstrapping YANG models fail, the system will go into an RMA state -- Return to Manufacturer, clearly signaled on the console and, on devices that support it, angry LED signaling. See #154 for more. -
Add support for generating GNS3 appliance file for NETCONF Aarch64.
-
Add support for UTC offset (+/- HH:00) in
ietf-system, PR #174 -
Add support for
ietf-factory-defaultRPC, PR #175 -
Add support for performing factory reset (using #175 RPC) from CLI
-
Replace
ietf-if-vlan-encapsulationYANG model with the nativeinfix-if-vlanmodel. This fits better with Linux VLAN interfaces and simplifies the syntax greatly. For details, see PR #179admin@example:/config/interfaces/interface/eth0.10/> set vlan id 10 lower-layer-if eth0 -
The following new NETCONF interface operational counters have been added:
| YANG | Linux / Ethtool |
|---|---|
out-frames |
FramesTransmittedOK |
out-multicast-frames |
MulticastFramesXmittedOK |
out-broadcast-frames |
BroadcastFramesXmittedOK |
in-total-frames |
FramesReceivedOK |
+ FrameCheckSequenceErrors |
|
+ FramesLostDueToIntMACRcvError |
|
+ AlignmentErrors |
|
+ etherStatsOversizePkts |
|
+ etherStatsJabbers |
|
in-frames |
FramesReceivedOK |
in-multicast-frames |
MulticastFramesReceivedOK |
in-broadcast-frames |
BroadcastFramesReceivedOK |
in-error-undersize-frames |
undersize_pkts |
in-error-fcs-frames |
FrameCheckSequenceErrors |
- Greatly improved branding support using
make menuconfig. All the identifying strings, including firmware image, is in/etc/os-release, will be used in CLIshow system-information, the WebUI About dialog, and any prominent areas when booting up (on console), logging in to CLI and WebUI. - IGMP/MLD snooping is now disabled by default on new bridges. Support for multicast filtering bridges expected no later than v24.01.
- The SSDP responder, device discovery in Windows, has been removed in favor of Windows 10 (build 1709) native support for mDNS-SD. Details in #166
- A GreenPAK programmer has been added, not enabled by default. This is a popular programmable little chip from Renesas. Worth a look!
- The
confdscriptgen-interfacescan now generate bridges and stand-alone interfaces with IPv6 (SLAAC) forfactory-configet al. - Drop
x86_64_minimal_defconfig, previously used for regression tests only - Documentation updates of how IPv4/IPv6 addresses are shown in NETCONF operational data, as well as the built-in CLI, see #163 for details.