SD-WAN 2012.4 release notes

November 21, 2012

Additions

  • A performance-enhancing TCP proxy has been added to allow bonding of diverse types of connections, such as ADSL with cable. A number of related fields were added to the bond hook.
  • The config server task queue no longer uses the Celery library; it now uses a library called Huey. This should significantly improve reliability.
  • Logging on the config server uses syslog.
  • Logging on nodes also uses syslog. A new application for reading log files, bondlog, has been added to nodes.
  • Tunnel processes now log directly to the file /var/log/bonding/tunnel.log.
  • Logging about speed tests in bonding and the tunnel has been expanded.
  • A new method of inter-process communication has been introduced on nodes. This method is used for communication between the bonding process and each TCP proxy process.
  • The configuration server system info page displays the current load average.
  • The configuration server Django application now uses the virtualenv project for managing dependency modules.
  • A form for submitting bug reports has been added to the configuration server.
  • The following fields were added to bond hooks: TUNNEL_BONDER_IP, TUNNEL_AGGREGATOR_IP, TUNNEL_LOCAL_IP, TUNNEL_PEER_IP, and QOS_PROFILE_ID.

Removals

  • The configuration server no longer supports nodes earlier than 2012.3.
  • The preseed file no longer creates a dedicated boot partition on nodes. This eliminates issues on kernel upgrades due to insufficient space in the boot partition. To take advantage of this, partners must download a new ISO image from the configuration server.
  • A number of infreqently-used Munin plugins have been removed.

Changes

  • The bondingadmin.log file is rotated daily. Logs are retained for two weeks.
  • Munin has been updated to version 2 on the configuration server. Graphs are now generated on demand, not periodically, to save CPU.
  • Tunnel shaping hooks no longer block the main tunnel thread while they run.
  • The node key has been made shorter and is now shown with embedded dashes to improve readability.
  • Network address translation for CPE NAT IPs now matches packets going into and out of the tunnel interface only.
  • Bonders now rate limit leg traffic by matching on destination IP address/port instead of source address/port.
  • Changes to QoS profiles no longer create uncessary configuration updates.
  • The legids command now queries the bonding process instead of showing information from the cached configuration file.
  • Bonder and aggregator details pages no longer show graphs if the appropriate metrics are not available.
  • The Django framework has been updated to version 1.4.
  • Most Django files are compiled via Cython and now live in /usr/lib/bondingadmin.

Fixes

  • CPE NAT IPs are are disabled correctly when bonding is stopped on bonders.
  • Node configuration download does not crash if the configuration server returns an HTTP 500 error.
  • The details page for bond speed tests shows the traffic shaping status at the time of the test.
  • Bonding on aggregators does not crash when it receives a send_leg_state event with an incorrect bond ID value.
  • Node OpenVPN clients no longer receive incorrect configuration from the server when Apache is unavailable. They are disconnected instead.
  • Aggregators are sent configuration updates for new QoS profiles in all cases.
  • Aggregators create bonder NAT rules for bonded Ethernet interfaces.
  • Fixed various issues with QoS forms.
  • The bonds-by-aggregator Munin graph does not crash when there are no bonds.
  • The legids command again runs properly on Lenny bonders.
  • Fixed an issue affecting the Nagios check summary page.
  • Records for PPPoE legs are again removed from the FreeRadius database when the PPPoE leg is deleted.
  • The Home link on the 404 page points to the dashboard page, not the login page.

Defects

  • Speed tests from within the config server do not use the TCP proxy.
  • Django deprecation error messages appear when starting config server applications. This is due to a software dependency that will be removed in 2012.5.