One miracle at a time :)

FRRouting Release 8.4 Available for Download
November 7, 2022

We are pleased to announce FRR 8.4.

FRR 8.4 brings a list of enhancements and fixes with 700+ commits from 66 developers. Thanks to all contributors.

Debian Packages - https://deb.frrouting.org

RPM Packages - https://rpm.frrouting.org

Snaps - https://snapcraft.io/frr

Docker - frrouting/frr:v8.4.0

Release Overview

• New BGP command (neighbor PEER soo) to configure SoO to prevent routing loops and suboptimal routing on dual-homed sites.
• Command debug bgp allow-martian replaced to bgp allow-martian-nexthop because previously we allowed using martian next-hops when debug is turned on.
• Implement BGP Prefix Origin Validation State Extended Community rfc8097
• Implement Route Leak Prevention and Detection Using Roles in UPDATE and OPEN Messages rfc9234
• BMP L3VPN support
• PIMv6 support
• MLD support
• New command to enable using reserved IPv4 ranges as normal addresses for BGP next-hops, interface addresses, etc.
• As usual, lots of bugs and memory leaks were fixed \m/

Changelog

babeld

• Ignore Sub-TLV’s with mandatory bit set
• Ignore unicast Hello’s

bfdd

• Add IPv4 BFD Echo support
• Add RTT to BFD IPv4 Echo packet processing
• Allow L3 VRF BFD sessions without UDP leaking

bgpd

• Add mpls bgp forwarding to ease MPLS-VPN EBGP peering
• Add bgp allow-martian-nexthop command (remove debug bgp allow-martian)
• Add neighbor soo command
• Add no rpki command
• Add show bgp access-list command to filter routes by access-list
• Implement rfc8097
• Implement rfc9234
• Add resolution for L3VPN traffic over GRE interfaces
• Allow setting custom port for BGP unnumbered peers
• Allow statistics gathering to give more data about prefix lengths
• Apply conditional advertisements policy to update-group
• Associate appropriate family for redistributed connected addresses
• Avoid notify race between io and main pthreads
• Call a hook when as-path filter is replaced
• Cleanup memory leaks associated with t_deferral_timer
• Do not check if the whole as-path has target asn when using as-override
• Do not print new line for EVPN CLI outputs if it’s a JSON
• Do not show polling_period default value in CLI for RPKI
• Don’t advertise conditionally withdrawn routes
• Drop SSH public key for RPKI CLI option
• Fix show bgp nexthop a.b.c.d
• Fix for aggregate-address summary-only matching-med-only
• Fix inconsistencies with default-originate route-map
• Fix memory leak for as-override
• Fix memory leak for set as-path replace route-map command
• Fix memory leak for community alias
• Fix memory leak for community stuff
• Fix memory leak in SRv6 locator
• Fix memory leak when an SRv6 sid is removed
• Fix memory leak when setting large/community at the egress
• Fix route-map update and delete route-map
• Fix show bgp l2vpn evpn route rd crash
• Fix the wrong next-hop BGP struct for next-hop validation
• Fixed BMP VPNv4 monitoring are withdrawn instead of updates
• Fixup PBR rule changes that were missed
• Fixup some MAC address token CLI syntax
• Free ecommunity before returning on warning/error
• Free memory for as-path filter if regexp is wrong
• Free memory for BMP listeners when deleting BGP instance
• Generate RPKI CLI config even if no cache servers are configured
• Handle origin validation state extended community via route-map match
• Handle route-refresh requests received before EOR
• Implement retain route-target all behavior
• Improve labelpool performance at scale
• Inconsistencies in snt counters with default-originate
• Prevent memory leak of the listener on shutdown
• Print peer’s hostname for BGP (filtering) messages
• Print source VRF name when leaking to another VRF
• Release RCU lock in BGP keepalive pthread
• Reset BGP sessions when changing the port
• Send route updates when modifying access/aspath/prefix lists
• Set TTL for iBGP/eBGP by checking only if generic TTL security applied
• Show cache server preference in show rpki cache-server output
• Show extended communities memory consumption
• Show TTL value unconditionally for neighbors
• Start conditional advertisement timer instantly
• Stop conditional advertisements thread when terminating
• Stop LLGR thread when deleting a peer and/or gr flags changed
• Treat as withdraw if we receive as path with as_set / as_confed_set
• When specifying listen address for BGP we shouldn’t imply no-fib flag
• Withdraw implicitly old paths from VRFs when import/export list changes
• Ensure that bgp open message stream has enough data to read
• Notify BGP conditional advertisement thread when the peer goes down

bmp

• Add an interface source to BMP connect command
• Add L3VPN support

eigrpd

• VRF variable name hides a parameter of the same name

fabricd

T* urn off excessive logging when peering will not come up

isisd

• Ensure rcap is freed in error case
• Fix crash with xfrm interface type
• Fix memory leak on shutdown with prefix lists
• Fix prefix-sid last-hop-behavior

ldpd

• Check if the thread is scheduled before calling for remained time

lib

• Abstract usage of %pnhs so that next-hop groups can use it too
• Add errno details to the sockopt_reuseaddr API
• Add sys_rawio to the capabilities definitions
• Allow downgrade of all caps when none are specified
• Allow using ipv4 (class e) reserved block if enabled
• Check hostname in resolver_resolve
• Cleanup red-herring memleaks in the parent of daemonizing fork
• Ensure ls_msg2edge does not use memory after freeing
• Fix show route-map name json command and memory leak
• Fix memory leak in zclient_send_localsid()
• Fix skip of every other plist deletion
• Fixup workqueue.c to use the proper thread.h semantics
• Function crypt does not need to be declared mid function
• Increase next-hop flags size to 16 bits
• Prevent uninitialized usage of data
• Remove usage of inet_ntop in lib/sockopt.c
• Require at least 2.1.42 version of sysrepo when compiling
• Return 0 as the remaining msec if the thread is not scheduled
• stream_dup memory alloc cannot fail
• Update sysrepo code with the latest API changes
• Use pi4 instead of inet_ntop in sockopt.c

nhrpd

• Use frr_weak_random()
• Use nhrp_interface_update_nbma when source VRF was changed

ospf6d

• Don’t remove the summary route if it is a range
• Ensure that ospf6d does not memcpy beyond the end of the data
• Fix missing cost change
• Permit route delete without next-hops
• Remove ospf6enabled from JSON output

ospfd

• Add how many packets the interface has queued to send
• Add router-id support to OSPF API
• Added CLIs to change default timers for lsa refresh and maxage remove delay.
• Adding per neighbor JSON details to gr helper detail command
• Crash when router acts as gr helper upon a topo change
• Fix show ip ospf neighbour <nbrid> command
• Increase packets sent at one time in ospf_write
• Refactor fifo_flush for the interface
• Remove deprecated command graceful-restart helper-only
• When a neighbor goes down clear the oi->obuf if we can
• Catch and report too small LSAs
• Remove assert on zero length LSA - which is permitted by spec
• Fix bug where acks were not be generated to incoming P2P/P2MP neighbors

pathd

• no mpls-te on command was not working
• Add a zebra stop handler
• Change the vty output, when no ted is enabled on pathd
• Ensure the path is free’d after we no longer need it
• Nai adjacency fix query type f for IPv5

pim6d

• (*,g) mroutes not learnt after pim6d daemon restart
• Lots of CLI changes regarding MLD
• Lots of CLI changes regarding PIMv6
• Clear interface stats on interface shutdown
• Disable pim6d compilation by default
• Don’t enable MLD on pimreg interface
• Fix the code for MLD in the show pim state command
• mroute stuck in register state, multicast traffic getting drops
• Register message getting dropped in the source node, mroute stuck in regj
• Send register msg with IPv6 global address
• Update last_member_query_interval and last_member_query_count
• Use ttable for displaying show commands
• Deleting the memory malloced for JSON
• Adding JSON support for show ipv6 next-hop
• Send register msg via register socket
• Change the show running commands based on the address family
• Set rp to true if the address matches, ignore prefix-length

pimd

• Allow v6 to do non-integrated configuration
• Assign a vty port value for v6
• Cleanup rpf lookup debug to help us figure out what is going on
• Correct the order of show JSON for interface traffic
• During prune pending, behave as noinfo state
• Fix invalid memory access join_timer_stop
• Fix memleak in bfd profile
• Fix PIM interface deletion flow
• Fix static mroute to also take into account the input interface
• Fix the setting of oif_flags in channel oil
• Fix unaligned accesses
• Handle receive of (*,g) register stop with src addr as 0
• Igmp querier election is not correct in lan scenario
• JSON support for next-hop
• Let the end operator know the ifindex as well in the failure case
• Limit PIM’s ECMP to what zebra tells us is the multipath
• Querier to non-querier transition to be ignored
• Register stop message sent with mask 32
• Show interface traffic even if the interface is currently down
• Update mroute iif based on next-hop received from zebra
• VRF may be null from pim_cmd_lookup_vrf

ripd

• Use a sequence number instead of a time

sharpd

• Fix memory leak in release-locator-chunk
• Fix memory leak in release-locator-chunk
• Fix memory leaks related to SRv6 next-hops

staticd

• When changing the underlying nh ensure it is reinstalled

tools

• Add missing bfdd to logrotate config
• Add pim6d to tools so that pim6d will work properly
• Fix boot config load in watchfrr
• Stop zebra daemon last

vtysh

• Account validity should be verified when authenticating users with pam
• Add autocomplete for VRFs when using with router bgp
• Handle SIGTSTP (c-z) without exiting the vty shell
• Ignore end when parsing frr.conf
• Properly handle [no] service cputime-stats in config
• Properly handle service cputime-warning xx in the config
• Add allow-reserved-ranges global command

watchfrr

• Check that the operational timeout specified is good

zebrad

• Fixing log flooding when disabling MLAG leaf configuration
• Add a mpls enable interface node command
• Add a configurable knob zebra nexthop-group keep (1-3600)
• Add a timer to next-hop group deletion
• Add ability for netconf dplane to handle global values
• Add interface sysctl ignore on linkdown status
• Add more cases to proto2zebra for understanding kernel routes
• Add some more data to rtadv socket failures
• Add support for maintaining local neigh entries
• Add tc handlers in the script code
• Add tc netlink and dplane ops
• Allow kernel routes to stick around better on interface state changes
• Attempt to make ioctl.c have a bit more useful log messages
• Avoid buffer overflow using netlink_parse_rtattr_nested()
• Cleanup the memory from the hash for MPLS stuff
• Create a zebra_rib_route_entry_new function and use it
• Debug decode rta_expires and rta_mfc_stats
• Delete the malloced memory under show zebra
• Don’t install connected routes multiple times into frr
• Expand PBR rule action for data-plane programming
• Explicitly call out the correct queue name
• Fix bond down for EVPN-MH
• Fix bug in netconf handling where dplane would drop the change
• Fix crash in shutdown w/ pw thread still running
• Fix ctab calculation typo in tc netlink
• Fix FPM crash
• Fix lost memory on lsp free
• Fix memory leak in srv6 locator delete
• Fix memory leaks and use after frees in nhg’s on shutdown
• Fix missing tenant VRF change notification
• Fix missing VNI transition
• Fix remaining mr rtm_getroute oddities
• Fix rtadv startup when config read in is before interface up
• Free neighbor state before the exit to avoid memleaks
• Handle freebsd routing socket enobufs
• Iif/oif are not used in mr rtm_getroute
• Infrastructure for the new dataplane plugin
• Initialize hw via DPDK
• Introduce early route processing on the metaq
• Mc_forwarding was being sent but not retrieved across dataplane
• Notice when an interface is turned on w/ mpls and enable mpls subsystem
• On Linux let interface data come in through netlink messaging
• Pass AFI received for netconf updates
• Pass PBR expanded actions to the dataplane
• Pbr DPDK programming
• Reconfiguring netns for VRF is not a failure
• Rtnetlink: flow attr per gateway attr in multipath updates
• Setup the zebra interface to the DPDK port map table
• System routes should be processed the same time as the kernel
• Use default ns directly in tc dplane
• When deleting next-hop group entries ensure the thread is off
• When saving nhg for later stop processing