Tags: NICMx/Jool
Tags
Improvements since 4.1.2: - #410: 1. Move `joold` to `jool session proxy` 2. Move `jool joold advertise` to `jool session advertise` - Debian#1074120: Fix implementation of kernel modules' `make distclean` - #421: `jool session follow` - #422: Patch compilation on 32-bit architectures - e8c49da: Allow pool6 with prefix length ≠ 96 on joold - 78812d6: Deprecate and no-op `--ss-flush-asap` - 80760bb: Stop the userspace client from killing itself when the kernel module sends an unknown stat - 5150753: Drop `XTABLES_DISABLED`. (The kernel module now automatically detects whether the kernel was compiled with xtables support. The userspace client still needs to be told with `./configure --with-xtables=no`.)
Improvements since 4.1.10: - #407: Patch compilation in some environments. - #409: Move the Debian systemd service to `After=network-pre.target`, to prevent deadlock during boot in some environments. - 750909d: When running into an untranslatable address, print it clearly in the logs. - #413: Enhance validations of pool4, BIB and session userspace requests. - #415, Debian#1057445: Add support for kernels 6.4, 6.5, 6.6 and 6.7-rc6. - #417: Add support for RHEL 9.2 and 9.3. - Debian#1046037: Add the "distclean" target to the kernel module Makefiles. - Debian#1057703: Remove mime-support from build dependencies. - Debian#1041856: Remove all links to jool.mx in the Debian package. There have also been several patches in the joold code, but this is still an ongoing effort (#410). You might want to abstain from using joold at the moment.
Improvements since 4.1.8: - #347: Allow new Jool binaries to interact with other binaries sharing the same major and minor number versions. - #378: Fix randomly incomplete `stats display` table print. - #379, #380, #395: Add support for kernels 5.17, 5.18, 5.19, 6.0, 6.1, RHEL8.6, RHEL8.7, RHEL9.0 and RHEL9.1. Drop support for RHEL8.5. - #388, #389: Fix sample atomic configuration in the documentation. - #391, #392: Update OpenWRT installation documentation. - #396: Allow (and fix during translation, adding mandated padding) ICMP errors containing both ICMP extensions and internal packets measuring less than 128 bytes.
Improvements since 4.1.7: - #366, #375: Fix checksums in Slow Path. - Add validation to more verbosely reject IPv6 packets that contain more than one fragment header. - Add validation to more verbosely reject fragmented (and not reassembled by nf_defrag_ipv*) ICMP errors. - Bugfix: When routing TCP/UDP fragments, the code was including header ports even though nonzero fragment-offset packets lack TCP/UDP headers.
Improvements since 4.1.5: - #362: Fix joold in kernels 5.10+ - #363: Improve performance of EAMT table insertions during atomic configuration - #364: Tweak the TCP state machine so `--handle-rst-during-fin-rcv` works in both translation directions (IPv4 -> IPv6, IPv6 -> IPv4) - #368: Fix kernel crash during `pool4 flush` - #369: Fix localhost traffic on Netfilter SIIT mode - #370: Fix ICMP errors bounced back as responses from echo requests or echo replies - Update the kernel support table: Add kernels 5.12 through 5.15 and RHEL 8.0, remove 3.16 through 4.3 and the other RHELs
PreviousNext