OpenSync 3.0 Release Notes

Release 3.0.1.0

Notable Fixes

  • CM: Fixed LAN connectivity loss after a prolonged Internet outage

  • CM: Fixed logic in connectivity checks for faster detection of broken connectivity, and to switch between IPv4 and IPv6 promptly

  • WM, hapd: Added a workaround for client's oftag not being populated when WPA3 is used

  • WM: Fixed an out of bounds crash (core, platform/qca)

  • NM: Fixed MSS clamping rules for PPPoE

  • NM: Fixed problems with configuration being applied too early (most notably for DHCPv6 client)

  • NM: Fixed occasional ‘use-after-free’ crashes (nm2_dhcpv6_client_release(), nm2_dhcpv6_server_release())

  • NFM: Fixed incorrect behavior when deleting rules referring to no longer existing tags

  • NFM: Fixed parsing of locationId and nodeId

  • OSN: Added missing ‘null’ implementations of functions in osn_route_null.c

  • BM: Added missing CLIENT_BTM_STATUS in protobuf

  • QM: Fixed MQTT reconnect logic

  • FSM/FCM fixes and enhancements:

    • Fixes and enhancements in the Gatekeeper plugin and related modules

    • Fixed a crash when disabling then enabling IP threat protection

    • Fixed dns_cache hit count

    • Added filtering for invalid DNS lookups

    • Improved blocking of UDP packets

    • Improved memory usage threshold handling

    • Various improvements and fixes in lan_stats

    • Using new memutil macros for improved diagnostics of memory usage

    • Fixed several memory leaks

    • Fixed some unit tests and added a few new ones

    • Fixed flow filtering

    • Fixed a FSM crash caused by incorrectly handled offset in lib/mdnsd

    • Fixed a FSM crash caused by improper cleanup in ct_stats and nf_ct

    • Fixed a FSM crash caused by not properly restarting the pcap container when configuration options change

    • Fixed an issue which caused replies from upstream being marked as a separate inbound flow

Notable Enhancements

  • CM: Reduced the amount of ICMP traffic (ping) in normal state (connected to the cloud)

  • Optimized 'ip -6 route replace' commands to improve behavior of traffic accelerators

  • Adjusted or removed several log messages that were causing unnecessary ‘noise’ in logs

  • Replaced proprietary plookup with nslookup in healthcheck

  • Added a pattern for Kernel crash reporting for ATOM-based platforms

Platform Support

  • Fixed handling of open network clients so that they can be steered (platform/bcm)

  • Fixed 'mcp reload' which could have failed because mcpd was not ready, resulting in snooping settings not being applied (platform/bcm)

  • Added a workaround for a bug in some drivers, which resets the ‘MPC’ power saving mode to ‘1’ (platform/bcm)

  • Added an option to adjust netfilter NAT options to resolve problems with SIP phones (platform/qca)

  • Fixed a memory leak in osync_nl80211_scan_results_fetch() (platform/qca)

  • Added support for 6 GHz for QCN9074 (platform/qca)

  • Added a target for RDP419 reference board (opensync-vendor-qca-template)

Release 3.0.0.0

New Features

  • WPA3 support for backhaul network

  • NFM updates and a new osn_nflog API provide ability for detection and prevention of DoS attacks

  • New osp_power API for advanced power management functionalities

  • Basic support for Wi-Fi 6E (6 GHz channels)

  • Initial infrastructure for LTE uplink management

Notable Enhancements

  • Modularized start and stop scripts and moved them to the platform layer

Notable Fixes

  • NM: Added MSS clamping rules for PPPoE

  • FSM: Fixed incorrect handling of reserved ports (< 1024)

  • FSM: Fixes and enhancements in the Gatekeeper plugin

Platform Support

  • DPP 1.2 support on Qualcomm

  • Initial implementation for DPP 1.1 support on Broadcom

  • OSN: Added support for the egress QoS map (platform/bcm)

  • Improved netlink event processing to ignore uninteresting events (platform/bcm)