jcronenberg/kea
SHA256
1
0
Fork 0
forked from jengelh/kea
Code Pull Requests Activity

Trim-curate changelog to approx 30 lines are per guidelines

Browse Source 
OBS-URL: https://build.opensuse.org/package/show/network:dhcp/kea?expand=0&rev=42
This commit is contained in:
Jan Engelhardt 2023-07-07 13:20:38 +00:00 committed by Git OBS Bridge
parent 3deb055639
commit 672be5c9f2
1 changed files with 31 additions and 117 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

148
kea.changes
View File

@ -4,123 +4,37 @@ Wed Jul 6 13:57:08 UTC 2023 - Jorik Cronenberg <jorik.cronenberg@suse.com>
- Add RuntimeDirectory to kea.service
- Update to release 2.4.0
Breaking Changes:
* Both MySQL and PostgreSQL database schemas were updated to accommodate
upcoming Bulk Leasequery support in DHCPv6. Both schemas were also
updated to use dedicated types for storing IPv6 addresses rather
than using plain text fields.
* Kea now operates in a safer manner and behaves in an RFC-conformant
way in some corner cases where it previously sent invalid configuration.
Nevertheless, you should review your configuration if you have unusual
settings with scenarios where `preferred-lifetime` was greater than
`valid-lifetime`. This affects DHCPv6 only.
* The API `libreload` command is now deprecated. The command prints
a deprecation warning, but otherwise functions normally. It will be
removed in future releases.
* Auto-generated subnet identifiers are now deprecated. They still
work but will be removed in future releases.
* The values accepted by recently introduced parameter `operation-target`
used in `reservation-*` commands have been renamed. The "primary" was
renamed to "memory", and the "alternate" was renamed to "database".
Feature Changes:
* Multi-threading is now enabled by default
* Introduced alternative allocation strategies: iterative, random, and FLQ
* Kea DHCPv4 server can now handle multiple `vivco-suboptions` options
with different enterprise IDs and multiple vendor options with different
enterprise IDs and multiple vivso suboptions.
Support has been added for multiple instances of the DHCPv6
vendor-class (code 16) and vendor-opts (code 17) options. Kea now
supports specifying multiple options with different enterprise numbers.
* The Discovery of Network-designated Resolvers (DNR) options have been
implemented for both DHCPv4 and DHCPv6. The options allow configuration
of DNS over various transports, such as TLS (DNS-over-TLS or DoT), HTTPS
(DNS-over-HTTPS or DoH), and others. As this implementation is based on
a draft that has not yet reached RFC publication, use it with caution.
* Template classes mechanism, similar to spawning classes in ISC DHCP,
has been implemented, but is currently experimental.
* Introduced several new types of statistics that can
be observed on a per-pool basis.
* Broadcast MAC address in DHCPv4 reply
* Unless specifically told not to, Kea now keeps leases for a
period of time after they are released. This behavior is controlled by
`flush-reclaimed-timer-wait-time` and `hold-reclaimed-time`.
If both are non-zero, when the client sends a release message
the lease is expired; previously, it was deleted from lease storage.
The default values are 25 and 3600 respectively.
* An address reserved in a global reservation must now lie
within the range of the subnet or shared-network selected by Kea; if it
does not, the server attempts to allocate an address dynamically. This
change applies to both kea-dhcp4 and kea-dhcp6. Previously, the servers
would grant a lease for any globally reserved address without regard to
its inclusion in the selected subnet.
* It is now possible to add an "empty" host reservation without any attribute
(e.g. no address, no options, no hostname, no client classes, etc.).
This is useful to determine the KNOWN class.
* A new flag, `never-send`, allows users to configure a given option
globally and then suppress sending it in a particular subnet or
shared network.
* kea-dhcp4 and kea-dhcp6 support a new parameter, `ddns-ttl-percent`,
which allows setting the DNS time-to-live (TTL) as a percentage
of a lease lifetime.
* A new parameter, `ignore-dhcp-server-identifier` for kea-dhcp4, allows
it to accept packets where `server-identifier doesn't match Kea's.
* kea-dhcp4 now supports the `offer-lifetime` parameter to allow the
temporary allocation of leases during DHCPOFFER.
* Added support for Secure Zero Touch Provisioning options, per RFC8572.
Kea can now handle DHCPv4 Option code \#143 and DHCPv6 Option code \#136.
* Previously, kea-dhcp6 ignored prefix hints from clients and assigned
prefixes in the order the pools appeared in the config file.
The `prefix-len` and `pd-pools` list now checks the prefix lengths
correctly.
* The preferred lifetime is now calculated as 0.625 * `valid-lifetime`
unless explicitly specified, or if the specified value is higher
than the valid lifetime. This should avoid situations where Kea
sends configurations that are rejected by clients.
* The forensic logging hook now records whether a lease change is an
administrative action or an automated HA update.
* If using multiple loggers that have a relationship, e.g. `kea-dhcp4`
and `kea-dhcp4.packets`, the omitted logger configuration entries
in the child are now properly inherited from the root logger,
as stated in the ARM.
* The lease_cmds hook library supports two new commands, `lease4-write`
and `lease6-write`. They are supported by the memfile backend only.
The lease_cmds hook library returns a new "conflict" status code,
indicating an issue with a lease update due to a mismatch between
the received lease and the server's configuration or state.
The HA hook library differentiates between this new status and
a general error and avoids transitioning to the partner-down state
when conflicts occur. The new `max-rejected-lease-updates` parameter
sets a limit for the maximum number of conflicts before the server
terminates the HA service.
* A new command `config-hash-get` returns a SHA-256 hash of the existing
configuration. This can be used to easily detect whether
a configuration has changed. Existing `config-set` and `config-get`
calls return the hash as well.
* A new command, `reservation-get-by-address`, is now available in
the host_cmds hook library. It returns all host reservations for
a given IP address, either in all subnets or in a given subnet.
* A new command, `reservation-update` has been added that allows an
existing host reservation to be updated. It is implemented as
part of the Host Commands premium hook.
* New database connection parameters, `read-timeout` and `write-timeout`,
control the timeouts in communication with a MySQL database.
The `tcp-user-timeout` parameter controls the timeout in communication
with a PostgreSQL database. Setting these timeouts can prevent
occasional Kea hangs due to issues with database connectivity,
and are expected to improve compatibility with HAProxy. Compatibility
with recently published PostgreSQL 15 has been improved.
Kea can now detect a bug in MariaDB, which incorrectly rejects
certain valid constructs as invalid JSON.
* The link selection suboption is now optional; previously, Kea always
tried to use it when it was present in a packet. Right now,
its use is enabled by default, but it can be disabled using the
`ignore-rai-link-selection` parameter.
* A new `exclude-first-last-24` DHCPv4 compatibility flag was added,
which skips addresses in .0 and .255 in subnets larger than /24.
* See /usr/share/doc/kea/ChangeLog in the kea-doc package for a
complete list of all changes from versions 2.2.0-2.3.8 that are
included in this release.
* Both MySQL and PostgreSQL database schemas were updated to
accommodate DHCPv6 Bulk Leasequery support.
* The values accepted by `operation-target` used in
`reservation-*` commands have been renamed: primary ->
memory, alternate -> database.
* Kea DHCPv4 server can now handle multiple `vivco-suboptions`
options with different enterprise IDs and multiple vendor
options.
* The Discovery of Network-designated Resolvers (DNR) options
have been implemented for both DHCPv4 and DHCPv6. The options
allow configuration.
* Template classes mechanism, similar to spawning classes in
ISC DHCP, has been implemented.
* Kea now keeps leases for a period of time after they are
released.
* An address reserved in a global reservation must now lie
within the range of the subnet or shared-network selected by
Kea.
* It is now possible to add an "empty" host reservation without
any attribute.
* kea-dhcp4 now supports the `offer-lifetime` parameter to
allow the temporary allocation of leases during DHCPOFFER.
* Added support for Secure Zero Touch Provisioning options, per
RFC8572.
* The kea-dhcp6 `prefix-len` and `pd-pools` list now checks the
prefix lengths correctly.
* The preferred lifetime is now calculated as 0.625 *
`valid-lifetime` unless explicitly specified.
* The link selection suboption is now optional.
* See /usr/share/doc/kea/ChangeLog in the kea-doc package for
details.
-------------------------------------------------------------------
Wed Dec 14 14:51:33 UTC 2022 - Jorik Cronenberg <jorik.cronenberg@suse.com>