Skip to content

Releases: containernetworking/plugins

v1.6.1: portmap: fix iptables conditions detection

02 Dec 16:08
Compare
Choose a tag to compare
As show in the docs, iptables conditions can also start with '!'

Fixes 01a94e17c77e6ff8e5019e15c42d8d92cf87194f

Signed-off-by: Etienne Champetier <[email protected]>

v1.6.1: portmap: fix iptables conditions detection

02 Dec 16:08
Compare
Choose a tag to compare
As show in the docs, iptables conditions can also start with '!'

Fixes 01a94e17c77e6ff8e5019e15c42d8d92cf87194f

Signed-off-by: Etienne Champetier <[email protected]>

CNI plugins v1.6.0

15 Oct 09:37
Compare
Choose a tag to compare

This is the v1.6.0 release of the CNI community plugins.

Changelog

Important

  • revert htb changes due to ongoing issues and missing maintainer by @h0nIg in #1105. This reverts the (undocumented) feature added in v1.5 where traffic from a specific CIDR would be exempted from bandwidth shaping. Unfortunately the implementation was lacking. We hope to re-add this feature in the future.

New features

CNI v1.1 support

Other improvements

Fixes

Misc / CI

New Contributors

Full Changelog: v1.5.1...v1.6.0

v1.5.1

17 Jun 15:51
c29dc79
Compare
Choose a tag to compare

What's Changed

Full Changelog: v1.5.0...v1.5.1

CNI Plugins v1.5.0

20 May 07:23
0259301
Compare
Choose a tag to compare

What's Changed

New Features:

Fixes:

New Contributors

Full Changelog: v1.4.1...v1.5.0

v1.4.1

12 Mar 10:57
8fc26ce
Compare
Choose a tag to compare
Merge pull request #991 from containernetworking/dependabot/docker/do…

CNI Plugins v1.4.0

04 Dec 17:00
1fb5bf6
Compare
Choose a tag to compare

New features:

  • (#832). tap: allow for a tap device to be created as a bridge port
  • (#914). [tuning] add ability to set tx queue len

Improvements:

  • (#969). Add CNI_NETNS_OVERRIDE
  • (#979). Add ndisc_notify in ipvlan for ipv6 ndp
  • (#974). macvlan: enable ipv6 ndisc_notify
  • (#950). Create IPAM files with 0600 permissions
  • (#924). More efficient iptables usage.
  • (#902). spoofcheck: Make use of go-nft's ApplyConfigEcho(). This is much faster
  • (#874). Add routes propagation for VRF plugin

Build:

  • (#982). Bump to golang:1.21-alpine
  • (#948). build: Use POSIX sh for shell scripts

Bug fixes:

  • (#954). macvlan cmdDel: handle deletion when master has been deleted
  • (#927). vrf: fix route filter to use output iface

CNI Plugins v1.3.0

09 May 21:04
38f18d2
Compare
Choose a tag to compare

This release introduces a new plugin: tap. Thanks to @mmirecki for contributing this

New features:

  • (#784). tap: This PR adds a plugin to create tap devices.
  • (#829). bridge: add vlan trunk support
  • (#875). bridge: Add parameter to disable default vlan
  • (#814). macvlan: Add support for in-container master
  • (#813). ipvlan: Add support for in-container master
  • (#781). vlan: Add support for in-container master

Improvements:

  • (#880). bridge: read only required chain on cni del instead of the entire ruleset
  • (#873). bridge, spoof check: remove drop rule index

Bug fixes:

  • (#892). sbr: Ignore LinkNotFoundError during cmdDel null
  • (#887). ptp: Fix ValidateExpectedRoute with non default routes and nil GW
  • (#885). tuning: fix cmdCheck when using IFNAME
  • (#831). Fix overwritten error var in getMTUByName
  • (#821). Only check or del ipv6 when an IPv6 is configured

CNI Plugins v1.2.0

16 Jan 22:00
c4d24e8
Compare
Choose a tag to compare

Changelog:

New plugins & features

  • (#743). dummy: Create a Dummy CNI plugin that creates a virtual interface
  • (#725). V2 API support for win-overlay CNI
  • (#693). tuning Add sysctl allowList

Bug fixes

  • (#809). bridge: refresh host-veth mac after port add
  • (#802). Add IPv6 support for AddDefaultRoute
  • (#779). Fix path substitution to enable setting sysctls on vlan interfaces
  • (#782). host-local: fix bug on getting NextIP of addresses with first byte
  • (#709). dhcp: Fix client id in renew/release

Improvements & Cleanups:

  • (#772). portmap support masquerade all
  • (#733). bridge: support IPAM DNS settings
  • (#702). bridge: call ipam.ExecDel after clean up device in netns #702
  • (#768). dhcp: Cleanup Socket and Pidfile on exit
  • (#792). dhcp: Update Allocate method to reuse lease if present
  • (#755). dhcp: Use the same options for acquiring, renewing lease
  • (#730). tuning Check for duplicated sysctl keys
  • (#739). build: support riscv64
  • (#712). bug: return errors when iptables and ip6tables are unusable
  • (#719). Make description for static plugin more exact

As always, many thanks to our contributors.

CNI plugins v1.1.1

09 Mar 19:46
4744ec2
Compare
Choose a tag to compare

Plugins release v1.1.1

This is a patch release that fixes the following bugs in v1.1.0:

  • #702 bridge: call ipam.ExecDel after clean up device in netns
  • #709 ipam/dhcp: Fix client id in renew/release

v1.1.0 Changelog:

One minor-but-major change is that we no longer wait for IPv6 Duplicate
Address Detection to complete. This reduces execution time by 2 seconds.

New features:

  • firewall: support ingressPolicy=(open|same-bridge) for isolating bridges as in Docker (#584)
  • dhcp ipam: support customizing dhcp options from CNI args (#670)
  • Allow setting sysctls on a particular interface (#669)
  • bridge: Add macspoofchk support (#639).

Bug fixes:

  • portmap: fix bug that new udp connection deletes all existing conntrack entries (#705)
  • portmap: fix checkPorts result when chain does not exist (#707)
  • dhcp: fixed DHCP problem that broke when fast retry was added (#681)
  • ipvlan: Send Gratuitous ARP after IPs are set (#675)

Improvements

  • host-device: Bring interfaces up after moving into container (#679)
  • Explicitly Disable Duplicate Address Detection For Container Side Veth (#695)
  • Replace arping package with arp_notify (#687)
  • host-device: add ipam support for dpdk device (#642)

Other changes

  • Ignore NetNS path errors on delete (#686)
  • Fix confusing error msg invalid cidr (#638)