SKUDONET's TIMELINE

SKUDONET 10 is the new Operating System version, based on Debian 12.5 LTS that replaces SKUDONET 6, more than 5 years of great work in SKUDONET 6 gave us the experience to do better. This new release includes the following:
 
New features:
[system] new Operating System based on Debian 12.5 LTS (Long Term Support).
[system] all the functionalities developed until now in previous versions of Community and Enterprise.
[system] virtual Load Balancer SVA10000 created supporting the majority of the hypervisors in the market like Vmware, HyperV, Xen, KVM, Proxmox, Nutanix, Red Hat and Oracle virtualization Environments, OpenSstack.
[system] virtual disks support in different formats VDI, QCOW2, VHDX, VMDK.
[system] enhanced Networking devices to support 100 GB NIC cards, required to support PICOPC hardware.
[system] new repository v10 created for subscription plans.
[system] increased Virtual Disk for SVA1000 to 32Gb with LVM support, customers can modify the partitions as required, increasing Log partition disk in case Audit logs are enabled.
[system] updated Virtual tools package for the majority of the hypervisors in the market.
[system] now more than 5 years of extended support for the operating system.
[system] cleaned and deleted non-used code to make the internals easiest to maintain and ready for new Application Delivery Controller functionalities that we are cooking.
[system] new ISO Distro file SKUDONET Baremetal Appliance v10 (SBA10000)

[system] native UEFI support for SKUDONET Baremetal Appliance v10 (SBA10000)
[system] tunned kernel with latest patches 6.1.90-10skudonet

read more about this release here

New features:
[networking] added DHCP to NIC and VLAN. As a native cloud Load Balancer, IPs can be configured by DHCP
[farms] added support for FQDN as backend IP in HTTP farms. As a native cloud Load Balancer, the backend configuration can be pointed to a DNS instead of an IP
[farms] added a new directive TLSv1.3 for HTTPS farms

Improvements:
[farms] added more 100-Continue modes: Pass, Ignore, Silent Pass, and Not Allow
[system] added QEMU hypervisor in the dashboard
[farmguardian] added a UDP check using nc
[ssl] added CSR Key Get call
[system] move the migrating script to old version
[system] sort logs files and reverse content
[ssl] add retries when restarting farms in Let’s Encrypt renewal action
[gui] disable TLS versions logic has been improved
[farms] HTTP proxy uses SSLv3 libraries
[gui] the new brand SKUDONET is applied in the web GUI

Bugfixes:
[system] fixed nftables package dependency
[farms] fixed Farm graphs when farm name starts with “dev”

 
read more about this release here

Improvement:
[gui] added DCHP status listing NIC, VLAN, and Bonding Interfaces. Now web GUI users can see which interface is configured in DHCP mode without accessing the configuration parameters
[system] configure APT after a Certificate Activation. APT configuration is done even if the SKUDONET Appliance is not able to connect to the internet

Bugfixes:
[ipds] fixed creating Blacklists when the configuration directory does not exist
[farm] fixed stop farms when updating. When SKUDONET Appliance is updated, the system doesn’t stop the farms unexpectedly
[system] disabled reset sysctl in Kernel optimization. Now kernel parameters are not reset on the updated process

Improvements:
[cluster] Improved ssyncd daemon logging
[farm] Allow set Alive parameter lower than ConnTO parameter when new generation proxy is disabled
[system] Improved logging when installing new SKUDONET packages
[system] Added ipv6 routing info in Supportsave

Bugfixes:
[cluster] Fixed sessions synchronization in HTTP farm with several services using persistence
[ssl] Fixed creating an existent Let’s Encrypt certificate
[routing] Fixed configure default IPv6 gateway
[farms] Fixed creating farms using IPv6 in VIP
[system] Fixed the following vulnerability issues:
CVE-2022-47015, CVE-2021-38185, CVE-2019-14866, CVE-2023-0466, CVE-2023-0465, CVE-2023-2650, CVE-2023-0464, CVE-2022-4141, CVE-2023-0054, CVE-2023-2610 and CVE-2023-1175

Improvements:
[lslb] Avoid duplicating backends with the same IP and port
[proxy] Improved Err directives in the configuration file
[proxy] Code optimization
[proxy] Disallow broadcast IPs for backends

Bugfixes:
[lslb] Fixed start HTTP Farm when the process is running but PID file does not exist
[lslb] Fixed error in the farm config file when adding persistence
[proxy] Fix memory leaks on service unification
[proxy] Fix PARM type persistence
[proxy] Fix possible segmentation fault in Sessions CTL calls

Improvements:
[ipds] reload blacklists without disabling them
[ipds] schedule blacklists without restarting them
[system] improve activation certificate notifications
[networking] improve default GW managing
[farms] L4xnat: improve multiport handle

Bugfixes:
[networking] fixed configure default GW application order in SKUDONET service.
[ipds] fixed mismatched blacklists order applied
[farms] L4xnat: fixed copy farm action
[zenbui] fixed interface configuration file not updated
[system] fixed the following vulnerabilities issues:
CVE-2022-1292,CVE-2022-29824,CVE-2022-1664 and CVE-2022-24903

Improvements:
[farms] L4xnat: autodetect backend source-address via the routing table

Bugfixes:
[farms] L4xnat: fixed set route table source as backend address when the route is not applied in the system
[farms] L4xnat: set routing table source instead of floating VIP as backend address
[farms] fixed no update backends status when performing changes of IPDS in a farm
[ipds] fix WAF data files installation path fault
[system] fixed the following vulnerabilities issues:
CVE-2021-3541, CVE-2021-3580, CVE-2021-2154, CVE-2021-2166, CVE-2021-28153, CVE-2021-3537, CVE-2021-31871, CVE-2021-33560, CVE-2020-24977, CVE-2021-25217, CVE-2021-27218, CVE-2021-27219, CVE-2020-24659, CVE-2021-20305, CVE-2021-3516, CVE-2021-3518, CVE-2021-3517, CVE-2021-31873, CVE-2021-31872, CVE-2021-27928, CVE-2021-20232, CVE-2021-31870, CVE-2021-20231

Improvements:
[webgui] added spinner to force changes in proxy of the new generation
[webgui] added messages to the translation module
[ipds] added description to WAF operators

Bugfixes:
[webgui] fixed table of backend GSLB with spinner and delete actions
[webgui] fixed backends ID in backends table of farms GSLB
[webgui] fixed creating an alias and create interface alias
[webgui] fixed WAF variables used in forms, data is loaded from API
[webgui] fixed error renaming blacklist
[webgui] changed the update method in routing rules
[webgui] fixed creating and updating routing rules
[webgui] fixed the refresh of stats
[webgui] fixed search of WAF variables
[webgui] fixed changing the schedule for a blacklist
[ssl] fixed issues in letsencrypt certificates management renovations
[ipds] fixed copying RBL lists
[lslb] fixed marks assignment for l4xnat backends
[routing] fixed issue modifying priorities of routing rules
[ipds] fixed deleting blacklist of HTTP profile
[zcli] fixed some issues in autocomplete for boolean values

Improvements:
[networking] Bonding interfaces restore their default mac address when the MAC field is empty
[networking] Created a wrapper to store default bonding mac address

Bugfixes:
[farms] fix SNI forward to backend
[system] APT configuration is checked daily and re-configured if required
[api] Fixed error 500 listing HTTP backends in API v3
[farms] fix backend aliases list for HTTP services
[system] Avoid to loop CA crl downloads without an Internet connection

New features:
[networking] support of custom script execution after configuring any route in a given interface

Improvements:
[api] return the SKUDONET version in the session response
[system] avoid connections and cluster annoying messages in the logs
[networking] bonding will restore its default MAC address when the MAC field is empty
[networking] default MAC is stored for future restoring
[cluster] increased detailed information in web GUI cluster section

Bugfixes:
[ipds] fix WAF parse failed when the parameter was between quotes
[networking] fix DHCP config overwriting errors after disabling/enabling the service
[networking] fix static IP configuration is not configured properly after disabling DHCP
[system] execute the web server stop/start action in the background
[networking] fix solved routes were not being added if the interface was configured in UP status
[networking] fix deleted routing table inputs when bondings are unset
[networking] fix bonding status lost when unsetting the interface
[rbac] fix RBAC module mutex
[system] make SNMP community string less strict
[api] fix error 500 listing HTTP backends in API v3
[farms] fix backend alias not listed in HTTP services
[system] avoid enqueueing curl commands for license checking
[farms] fix error configuring HTTP redirect code
[system] set a token to block i-notify while the IPDS package is being updated
[farms] added less strict param for gslb which allows using check_icmp
[gui] fix left side menu was not shown properly in some Chrome versions

New features:
[networking] added support to run a script after routing config in a given interface

New features:
[farms] direct server return DSR support for L4
[farms] stateless NAT support for L4
[farms] L4 core with round-robin algorithm
[farms] L4 core with IP and port hashing for both destination or source
[farms] L4 core with support of new protocols: SCTP, netbios, snmp, h323, pptp, irc, sane, amanda
[farms] L4 core with configurable persistence per source and destination IP, port or even MAC
[farms] websocket support for HTTP/S
[farms] support of OpenSSL 1.1 for HTTP/S (TLS 1.3)
[system] latest kernel 4.19 with Long Term Support (LTS)
[system] spectre and meltdown mitigations included by default
[system] integration with APT remote repositories by default
[ipds] web application firewall for HTTP/S
[webgui] new web GUI based on Angular 6
[networking] full support of DHCP
[networking] MAC address custom configuration
[rbac] dynamic menu configuration based on RBAC user permissions
[system] added factory reset

Improvements:
[farms] new L4 core system based on nftables
[ipds] optimized security rules based on nftables
[cluster] clustering based on nftables
[api] optimization and refactoring of the API calls
[networking] improve network link management
[guardian] more integrated advanced health checks

Improvements:
[rbac] Added two new preconfigured roles to be used in this module: management to allow to stop / start backend, and monitoring to allow to read information about system and farms

Bugfixes:
[rbac] Fix aliases are shown in the backends table even when user doesn’t have permissions to view this information
[alias] Fix aliases can be modified without permissions
[certificates] Fix search and upload actions break the SSL certificates table if some certificate has a CN field empty

New features:
[rbac] Roles templates added

Improvements:
[syslog] Log the error output when a command fails
[rbac] Allow more characters for RBAC: users, groups and roles
[rbac] Add RBAC information to supportsave

Bugfixes:
[guardian] Fix typo in farmguardian templates
[guardian] Migrate farmguardian of farms to new farmguardian check
[zenbui] Fix Zenbui symbolic link
[farms] The parameter “Log” in l4xnat farm returns blank sometimes
[rbac] Creating system user and system group needed for RBAC
[notifications] Notifications is enabled by default
[guardian] Run farmguardian in SKUDONET start process

New features:
[farms] Option to enable traffic logs for LSLB, DSLB, GSLB and the connection tracking
[farms] Support of aliases for backends
[networking] Support for aliases per NIC, bonding, VLANs and virtual interfaces.
[system] Role-Based Access Control (RBAC) to define new users, groups and permissions to actions in the system
[api] API 3.2 to manage all the new features
[networking] IPv6 Support for NICs, VLANs, Virtual Interfaces, Bonding and routing
[farms] IPv6 Support for HTTP and L4xNAT farms

Improvements:
[guardian] Improve of usability with several built-in health checks
[farms] More descriptive error messages for HTTP/S farms
[farms] Configurable redirect code for HTTP/S farms
[farms] Backend servers disabled if redirect is used for HTTP/S farms
[farms] Configurable Strict Transport Security header by service in HTTP/S farms
[farms] Improve of session table stats for LSLB farms
[system] Improve of message logs to syslog
[networking] Validation of network configurations
[networking] Automated virtual services configuration when modifying the network configuration
[networking] Real time networking packets/throughput stats per second