- update to 3.20:
* Millisecond-resolution representations have been added to JSON
timestamps. (PR #1846)
* The reorder_seen metric, where available, is now available in
the JSON output. (PR #1278)
* A division by zero error has been fixed. (PR #1906)
* Some command-line options were not properly restricted to the
client or server; this problem has been fixed. (#1892 / PR #1894)
* The combination of `--udp` and `--file` is now explicitly
disallowed. (PR #1909)
* It is now possible to get both the full JSON result object as
well as streaming intermediate JSON result objects. This
functionality is enabled by using the new `--json-stream-full`
command-line flag, in addition to the existing `--json-stream`
flag (PR #1903)
* Sends with `--zerocopy` are now properly seeded with data
instead of being all-zeroes. (PR #1949)
* The `--server-max-duration` flag is now allowed on the iperf3
server to impose a maximum duration on timed tests. (PR #1684)
* The `--rcv-timeout` flag is now ignored for `--bidir` tests.
This change prevents premature termination of bidirectional
tests. (#1766 / PR #1946)
* Several errors in the authentication code were uncovered when
building with OpenSSL 3.5.3 and later versions. These were
fixed. (#1951 / PR #1956)
* Various issues in the iperf3 manual page were fixed up. (PR
#1887, PR #1927, PR #1936, PR #1941, #1891 / PR #1952)
OBS-URL: https://build.opensuse.org/request/show/1321912
OBS-URL: https://build.opensuse.org/package/show/network:utilities/iperf?expand=0&rev=84
- update to 3.19.1:
* SECURITY NOTE: Thanks to Han Lee with Apple Information
Security for finding and reporting several memory errors
* off-by-one heap overflow has been fixed in authentication
(bsc#1247519, CVE-2025-54349, ESNET-SECADV-2025-0003)
* assert in authentication has been removed
(bsc#1247520, CVE-2025-54350, ESNET-SECADV-2025-0002)
* a buffer overflow in the --skip-rx-copy option for zerocopy
has been fixed (bsc#1247522, CVE-2025-54351,
ESNET-SECADV-2025-0001)
OBS-URL: https://build.opensuse.org/request/show/1297534
OBS-URL: https://build.opensuse.org/package/show/network:utilities/iperf?expand=0&rev=82
- update to 3.19
* iperf3 now supports the use of Multi-Path TCP (MPTCPv1) on Linux
with the use of the `-m` or `--mptcp` flag. (PR #1661)
* iperf3 now supports a `--cntl-ka` option to enable TCP keepalives
on the control connection. (#812, #835, PR #1423)
* iperf3 now supports the `MSG_TRUNC` receive option, specified by
the `--skip-rx-copy`. This theoretically improves the rated
throughput of tests at high bitrates by not delivering network
payload data to userspace. (#1678, PR #1717)
* A bug that caused the bitrate setting to be ignored when bursts
are set, has been fixed. (#1773, #1820, PR #1821, PR #1848)
* The congestion control protocol setting, if used, is now
properly reset between tests. (PR #1812)
* iperf3 now exits with a non-error 0 exit code if exiting via a
`SIGTERM`, `SIGHUP`, or `SIGINT`. (#1009, PR# 1829)
* The current behavior of iperf3 with respect to the `-n` and `-k`
options is now documented as correct. (#1768, #1775, #596, PR #1800)
- switched to official sources from https://downloads.es.net/pub/iperf/
following the note on https://software.es.net/iperf/obtaining.html#source-distributions
GitHub releases are not guaranteed to always be released with
proper checksums, signage and downloads.
- removed patches: iperf-gcc15.patch (included upstream)
OBS-URL: https://build.opensuse.org/request/show/1279942
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/iperf?expand=0&rev=42
- update to 3.19
* iperf3 now supports the use of Multi-Path TCP (MPTCPv1) on Linux
with the use of the `-m` or `--mptcp` flag. (PR #1661)
* iperf3 now supports a `--cntl-ka` option to enable TCP keepalives
on the control connection. (#812, #835, PR #1423)
* iperf3 now supports the `MSG_TRUNC` receive option, specified by
the `--skip-rx-copy`. This theoretically improves the rated
throughput of tests at high bitrates by not delivering network
payload data to userspace. (#1678, PR #1717)
* A bug that caused the bitrate setting to be ignored when bursts
are set, has been fixed. (#1773, #1820, PR #1821, PR #1848)
* The congestion control protocol setting, if used, is now
properly reset between tests. (PR #1812)
* iperf3 now exits with a non-error 0 exit code if exiting via a
`SIGTERM`, `SIGHUP`, or `SIGINT`. (#1009, PR# 1829)
* The current behavior of iperf3 with respect to the `-n` and `-k`
options is now documented as correct. (#1768, #1775, #596, PR #1800)
- switched to official sources from https://downloads.es.net/pub/iperf/
following the note on https://software.es.net/iperf/obtaining.html#source-distributions
GitHub releases are not guaranteed to always be released with
proper checksums, signage and downloads.
- removed patches: iperf-gcc15.patch (included upstream)
OBS-URL: https://build.opensuse.org/request/show/1279087
OBS-URL: https://build.opensuse.org/package/show/network:utilities/iperf?expand=0&rev=79
- update to 3.18 (bsc#1234705, CVE-2024-53580):
* SECURITY NOTE: Thanks to Leonid Krolle Bi.Zone for
discovering a JSON type security vulnerability that caused a
segmentation fault in the server. (CVE-2024-53580)
This has now been fixed. (PR#1810)
* UDP packets per second now reports the correct number of
packets, by reporting NET_SOFTERROR if there's a EAGAIN/EINTR
errno if no data was sent (#1367/PR#1379).
* Several segmentation faults related to threading were fixed.
One where `pthread_cancel` was called on an improperly
initialized thread (#1801), another where threads were being
recycled (#1760/PR#1761), and another where threads were
improperly handling signals (#1750/PR#1752).
* A segmentation fault from calling `freeaddrinfo` with `NULL`
was fixed (PR#1755).
* Some JSON options were fixed, including checking the size for
`json_read` (PR#1709), but the size limit was removed for
received server output (PR#1779).
* A rcv-timeout error has been fixed. The Nread timeout was
hardcoded and timed out before the `--rcv-timeout` option
* There is no longer a limit on the omit time period
* Fixed an output crash under 32-bit big-endian systems
* An issue was fixed where CPU utilization was unexpectedly
high during limited baud rate tests. The `--pacing-timer`
option was removed, but it is still available in the library
* Add SCTP information to `--json` output and fixed compile
error when SCTP is not supported (#1731).
* `--fq-rate` was changed from a uint to a uint64 to allow
pacing above 32G. Not yet tested on big-endian systems
OBS-URL: https://build.opensuse.org/request/show/1240619
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/iperf?expand=0&rev=40
* SECURITY NOTE: Thanks to Leonid Krolle Bi.Zone for
discovering a JSON type security vulnerability that caused a
segmentation fault in the server. (CVE-2024-53580)
This has now been fixed. (PR#1810)
* UDP packets per second now reports the correct number of
packets, by reporting NET_SOFTERROR if there's a EAGAIN/EINTR
errno if no data was sent (#1367/PR#1379).
* Several segmentation faults related to threading were fixed.
One where `pthread_cancel` was called on an improperly
initialized thread (#1801), another where threads were being
recycled (#1760/PR#1761), and another where threads were
improperly handling signals (#1750/PR#1752).
* A segmentation fault from calling `freeaddrinfo` with `NULL`
was fixed (PR#1755).
* Some JSON options were fixed, including checking the size for
`json_read` (PR#1709), but the size limit was removed for
received server output (PR#1779).
* A rcv-timeout error has been fixed. The Nread timeout was
hardcoded and timed out before the `--rcv-timeout` option
* There is no longer a limit on the omit time period
* Fixed an output crash under 32-bit big-endian systems
* An issue was fixed where CPU utilization was unexpectedly
high during limited baud rate tests. The `--pacing-timer`
option was removed, but it is still available in the library
* Add SCTP information to `--json` output and fixed compile
error when SCTP is not supported (#1731).
* `--fq-rate` was changed from a uint to a uint64 to allow
pacing above 32G. Not yet tested on big-endian systems
OBS-URL: https://build.opensuse.org/package/show/network:utilities/iperf?expand=0&rev=75
- update to 3.17.1 (bsc#1224262, CVE-2024-26306):
* BREAKING CHANGE: iperf3's authentication features, when used
with OpenSSL prior to 3.2.0, contain a vulnerability to a
side-channel timing attack. To address this flaw, a change
has been made to the padding applied to encrypted strings.
This change is not backwards compatible with older versions of
iperf3 (before 3.17). To restore
the older (vulnerable) behavior, and hence
backwards-compatibility, use the --use-pkcs1-padding flag. The
iperf3 team thanks Hubert Kario from RedHat for reporting this
issue and providing feedback on the fix. (CVE-2024-26306)(PR#1695)
* iperf3 no longer changes its current working directory in --daemon
mode. This results in more predictable behavior with relative
paths, in particular finding key and credential files for
authentication. (PR#1672)
* A new --json-stream option has been added to enable a streaming
output format, consisting of a series of JSON objects (for the
start of the test, each measurement interval, and the end of the
test) separated by newlines (#444, #923, #1098).
* UDP tests now work correctly between different endian hosts
* The --fq-rate parameter now works for --reverse tests
* The statistics reporting interval is now available in the --json
start test object (#1663).
* A negative time test duration is now properly flagged as an error
(IS#1662 / PR#1666).
OBS-URL: https://build.opensuse.org/request/show/1174204
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/iperf?expand=0&rev=38
* BREAKING CHANGE: iperf3's authentication features, when used
with OpenSSL prior to 3.2.0, contain a vulnerability to a
side-channel timing attack. To address this flaw, a change
has been made to the padding applied to encrypted strings.
This change is not backwards compatible with older versions of
iperf3 (before 3.17). To restore
the older (vulnerable) behavior, and hence
backwards-compatibility, use the --use-pkcs1-padding flag. The
iperf3 team thanks Hubert Kario from RedHat for reporting this
issue and providing feedback on the fix. (CVE-2024-26306)(PR#1695)
* iperf3 no longer changes its current working directory in --daemon
mode. This results in more predictable behavior with relative
paths, in particular finding key and credential files for
authentication. (PR#1672)
* A new --json-stream option has been added to enable a streaming
output format, consisting of a series of JSON objects (for the
start of the test, each measurement interval, and the end of the
test) separated by newlines (#444, #923, #1098).
* UDP tests now work correctly between different endian hosts
* The --fq-rate parameter now works for --reverse tests
* The statistics reporting interval is now available in the --json
start test object (#1663).
* A negative time test duration is now properly flagged as an error
(IS#1662 / PR#1666).
OBS-URL: https://build.opensuse.org/package/show/network:utilities/iperf?expand=0&rev=71
- update to 3.16:
* Multiple test streams started with -P/--parallel will now be
serviced by different threads. This allows iperf3 to take
advantage of multiple CPU cores on modern processors, and will
generally result in significant throughput increases
* OpenSSL 3 is now detected at build time. If OpenSSL 3 is found,
various older, deprecated, APIs will not be used. iperf3 will
continue to work with OpenSSL 1.1.1. OpenSSL is used as a part
of the iperf3 authentication functionality
* The authorized users file used by the authentication
functionality is now checked for accessibility much earlier
during the program startup, as opposed to being checked near
the start of a test (Issue #1583, PR #1585).
* BREAKING CHANGE: iperf3 now requires pthreads and C atomic
variables to compile and run.
OBS-URL: https://build.opensuse.org/request/show/1135291
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/iperf?expand=0&rev=37
* Multiple test streams started with -P/--parallel will now be
serviced by different threads. This allows iperf3 to take
advantage of multiple CPU cores on modern processors, and will
generally result in significant throughput increases
* OpenSSL 3 is now detected at build time. If OpenSSL 3 is found,
various older, deprecated, APIs will not be used. iperf3 will
continue to work with OpenSSL 1.1.1. OpenSSL is used as a part
of the iperf3 authentication functionality
* The authorized users file used by the authentication
functionality is now checked for accessibility much earlier
during the program startup, as opposed to being checked near
the start of a test (Issue #1583, PR #1585).
* BREAKING CHANGE: iperf3 now requires pthreads and C atomic
variables to compile and run.
OBS-URL: https://build.opensuse.org/package/show/network:utilities/iperf?expand=0&rev=69
- update to 3.15:
* Several bugs that could allow the iperf3 server to hang waiting
for input on the control connection has been fixed
(ESnet Software Security Advisory ESNET-SECADV-2023-0002)
* A bug that caused garbled output with UDP tests on 32-bit hosts
has been fixed (PR #1554, PR #1556). This bug was introduced in
iperf-3.14.
* A bug in counting UDP messages has been fixed
JSON output on CentOS 6
* This maintenance release adds a -1 flag to make the iperf3
execute a single test and exit, needed for an upcoming bwctl
there is only one stream.
version developed at NLANR/DAST. iperf3 is a new implementation from scratch,
with the goal of a smaller, simpler code base, and a library version of the
functionality that can be used in other programs. iperf3 also a number of
features found in other tools such as nuttcp and netperf, but were missing
from the original iperf. These include, for example, a zero-copy mode and
OBS-URL: https://build.opensuse.org/request/show/1113223
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/iperf?expand=0&rev=35
* Several bugs that could allow the iperf3 server to hang waiting
for input on the control connection has been fixed
(ESnet Software Security Advisory ESNET-SECADV-2023-0002)
* A bug that caused garbled output with UDP tests on 32-bit hosts
has been fixed (PR #1554, PR #1556). This bug was introduced in
iperf-3.14.
* A bug in counting UDP messages has been fixed
JSON output on CentOS 6
* This maintenance release adds a -1 flag to make the iperf3
execute a single test and exit, needed for an upcoming bwctl
there is only one stream.
version developed at NLANR/DAST. iperf3 is a new implementation from scratch,
with the goal of a smaller, simpler code base, and a library version of the
functionality that can be used in other programs. iperf3 also a number of
features found in other tools such as nuttcp and netperf, but were missing
from the original iperf. These include, for example, a zero-copy mode and
OBS-URL: https://build.opensuse.org/package/show/network:utilities/iperf?expand=0&rev=64
- update to 3.12:
* cJSON has been updated to version 1.7.15 (#1383).
* The --bind <host>%<dev> option syntax now works properly (#1360 /
* A server-side file descriptor leak with the --logfile option has
been fixed (#1369 / #1360 / #1369 / #1389 / #1393).
* A bug that caused some large values from TCP_INFO to be misprinted
as negative numbers has been fixed (#1372).
* Using the -k or -n flags with --reverse no longer leak into future
tests (#1363 / #1364).
* There are now various debug level options available with the
--debug option. These can be used to adjust the amount of
debugging output (#1327).
* A new --snd-timeout option has been added to set a termination
timeout for idle TCP connections (#1215 / #1282).
* iperf3 is slightly more robust to out-of-order packets during UDP
connection setup in --reverse mode (#914 / #1123 / #1182 / #1212 /
* iperf3 will now use different ports for each direction when the
--cport and --bdir options are set (#1249 / #1259).
* The iperf3 server will now exit if it can't open its log file
* Various help message and output fixes have been made (#1299 /
* Various compiler warnings have been fixed (#1211 / #1316).
* Operation of bootstrap.sh has been fixed and simplified (#1335 /
* Flow label support / compatibility under Linux has been improved
* Various minor memory leaks have been fixed (#1332 / #1333).
* A getter/setter has been added for the bind_port parameter
(--cport option). (#1303, #1305)
* Various internal documentation improvements (#1265 / #1285 / #1304).
OBS-URL: https://build.opensuse.org/request/show/1039815
OBS-URL: https://build.opensuse.org/package/show/network:utilities/iperf?expand=0&rev=58
- update to 3.11:
* Update links to Discussions in documentation
* Fix DSCP so that TOS = DSCP * 4 (#1162)
* Fix --bind-dev for TCP streams (#1153)
* Fix interface specification so doesn't overlap with IPv6 link-local addresses for -c and -B (#1157, #1180)
* Add get/set test_unit_format function declaration to iperf_api.h
* Auto adjustment of test-end condition for file transfers (-F), if no end condition is set, it will automatically adjust it to file size in bytes
* Exit if idle time expires waiting for a connection in one-off mode (#1187, #1197)
* Support zerocopy by reverse mode (#1204)
* Update help and manpage text for #1157, support bind device
* Consistently print target_bandwidth in JSON start section (#1177)
* Test bitrate added to JSON output (#1168)
* Remove fsync call after every write to receiving --file (#1176, #1159)
* Update documentation for -w (#1175)
* Fix for #952, different JSON object names for bidir reverse channel
OBS-URL: https://build.opensuse.org/request/show/958747
OBS-URL: https://build.opensuse.org/package/show/network:utilities/iperf?expand=0&rev=56
- update to 3.10.1:
* Fixed a problem with autoconf scripts that made builds fail in
some environments (#1154 / #1155).
* GNU autoconf 2.71 or newer is now required to regenerate iperf3's
configure scripts.
- update to 3.10:
* Fix a bug where some --reverse tests didn't terminate (#982 /
#1054).
* Responsiveness of control connections is slightly improved (#1045
/ #1046 / #1063).
* The allowable clock skew when doing authentication between client
and server is now configurable with the new --time-skew-threshold
(#1065 / #1070).
* Bitrate throttling using the -b option now works when a burst size
is specified (#1090).
* A bug with calculating CPU utilization has been fixed (#1076 /
#1077).
* A --bind-dev option to support binding sockets to a given network
interface has been added to make iperf3 work better with
multi-homed machines and/or VRFs (#817 / #1089 / #1097).
* --pidfile now works with --client mode (#1110).
* The server is now less likely to get stuck due to network errors
(#1101, #1125), controlled by the new --rcv-timeout option.
* Fixed a few bugs in termination conditions for byte or
block-limited tests (#1113, #1114, #1115).
* Added tcp_info.snd_wnd to JSON output (#1148).
* Some bugs with garbled JSON output have been fixed (#1086, #1118,
#1143 / #1146).
* Support for setting the IPv4 don't-fragment (DF) bit has been
OBS-URL: https://build.opensuse.org/request/show/899921
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/iperf?expand=0&rev=30
- update to 3.10.1:
* Fixed a problem with autoconf scripts that made builds fail in
some environments (#1154 / #1155).
* GNU autoconf 2.71 or newer is now required to regenerate iperf3's
configure scripts.
- update to 3.10:
* Fix a bug where some --reverse tests didn't terminate (#982 /
#1054).
* Responsiveness of control connections is slightly improved (#1045
/ #1046 / #1063).
* The allowable clock skew when doing authentication between client
and server is now configurable with the new --time-skew-threshold
(#1065 / #1070).
* Bitrate throttling using the -b option now works when a burst size
is specified (#1090).
* A bug with calculating CPU utilization has been fixed (#1076 /
#1077).
* A --bind-dev option to support binding sockets to a given network
interface has been added to make iperf3 work better with
multi-homed machines and/or VRFs (#817 / #1089 / #1097).
* --pidfile now works with --client mode (#1110).
* The server is now less likely to get stuck due to network errors
(#1101, #1125), controlled by the new --rcv-timeout option.
* Fixed a few bugs in termination conditions for byte or
block-limited tests (#1113, #1114, #1115).
* Added tcp_info.snd_wnd to JSON output (#1148).
* Some bugs with garbled JSON output have been fixed (#1086, #1118,
#1143 / #1146).
* Support for setting the IPv4 don't-fragment (DF) bit has been
added with the new --dont-fragment option (#1119).
* A failure with not being able to read the congestion control
algorithm under WSL1 has been fixed (#1061 / #1126).
* Error handling and error messages now make more sense in cases
where sockets were not successfully opened (#1129 / #1132 /
#1136, #1135 / #1138, #1128 / #1139).
* Some buffer overflow hazards were fixed (#1134).
* It is now possible to use the API to set/get the congestion
control algorithm (#1036 / #1112).
OBS-URL: https://build.opensuse.org/request/show/898020
OBS-URL: https://build.opensuse.org/package/show/network:utilities/iperf?expand=0&rev=53
- update to 3.9:
* A --timestamps flag has been added, which prepends a timestamp to
each output line. An optional argument to this flag, which is a
format specification to strftime(3), allows for custom timestamp
formats (#909, #1028).
* A --server-bitrate-limit flag has been added as a server-side
command-line argument. It allows a server to enforce a maximum
throughput rate; client connections that specify a higher bitrate
or exceed this bitrate during a test will be terminated. The
bitrate is expressed in bits per second, with an optional trailing
slash and integer count that specifies an averaging interval over
which to enforce the limit (#999).
* A bug that caused increased CPU usage with the --bidir option has
been fixed (#1011).
* Fixed various minor memory leaks (#1023).
OBS-URL: https://build.opensuse.org/request/show/834275
OBS-URL: https://build.opensuse.org/package/show/network:utilities/iperf?expand=0&rev=51
