Faucet

Latest version: v1.10.11

Safety actively analyzes 625951 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 24 of 24

1.6.2

Not secure
* Internal refactoring and improvements for test reliability and diagnostics.

1.6.1

Not secure
* FaucetTagged tests were incorrectly excluded.
* Use dp_id label consistently including in Prometheus rule examples.

1.6.0

Not secure
Switch to using PBR "preversioning" for more consistent version numbers.

v1_5_9
* Gauge now supports Prometheus
* Major testing cleanup and refactor for reliability (and pipeline/tshark based reporting)
* Run OF meters tests if hardware supports them.
* Initial gNMI config testing
* Optimize ACL reloads on a port when only the ACL changed (reload just port ACL flows)
* Fix Gauge handling of ACL counters where match has a int mask




v1_5_8
* Fix Gauge crash with InfluxDB when notified of port status change
* Gauge did not handle SIGHUP config requests
* Support TCP/UDP/SCTP port masking for ACLs
* Hardware tests now verify correct cabling
* Aruba TFM includes OF meter support.



v1_5_7
* Fix nexthop resolution for IVR.
* Explicitly log host/port/VLAN learning association.

v1_5_6
* Fix logging of DPID of VID
* Ryu upgrade to 4.16
* Security fixes for crashes in Ryu parser (severely restricted byte range)
* Add OF meter support
* Multiple VLANs can have the same VID
* VLAN and drop rule tags on InfluxDB flows




v1_5_5
* Upgrade to Ryu 4.15
* Inter VLAN routing can now be configured between specific VLANs (does not have to be global)
* Can export flow table to InfluxDB
* ACL actions can swap VIDs
* FAUCET MAC can be reconfigured on per VLAN basis
* Gauge: handle InfluxDB being slow to accept a push, don't crash
* Don't rotate logs based on time (logrotate can be used instead)

v1_5_4
* Add VIP table so that FIB tables can use fewer match types.
* Add hairpin to ports - if enabled enables switching between hosts on same port (eg. WiFi)
* Simplify TFM definitions and remove unneeded matches from eth_src.
* Type checking on config items.

v1_5_3
*** move from python2 to python3 ***
*** python 2 is no longer supported ***

Ensure you remove all previous versions of FAUCET before upgrading. If you use pip, make sure pip uninstalls the any old python2 version before using pip3 to install the python3 version. Eg.

pip uninstall faucet
pip3 install faucet


v1_5_2
Explicitly close connections from unknown DPs (so can add a new DP with a reload).
Fix corner case fall through to cold start when port uses new VLAN.

v1_5_1
* Fix update of VLAN flood rules when reloading config and port changes VLAN.
* Faster port add/delete operations.
* python3 fix for Aruba pipeline, and pipeline config moved outside code to /etc/ryu/faucet.
* Add support for GenericTFM switch (can take a custom pipeline).
* Test coverage improvements.

v1_5_0-rc6
Test reliability changes only.


v1_5_0-rc5
* Fix crash in Gauge trying to stop a down DPID.
* Fix crash in FAUCET exporting long DPID to Prometheus.
* Fix heavy handed config reload when only removing a port (false ACL change and global VLAN change)
* FaucetGroupTableTest could fail depending on flow order returned from switch.
* Tests could fail due to temporary port use (so preallocate more ports and restart controller if temp conflict).


v1_5_0
RC6:

Test reliability changes only.

RC5:

Fix crash in Gauge trying to stop a down DPID.
Fix crash in FAUCET exporting long DPID to Prometheus.
Fix heavy handed config reload when only removing a port (false ACL change and global VLAN change)
FaucetGroupTableTest could fail depending on flow order returned from switch.
Tests could fail due to temporary port use (so preallocate more ports and restart controller if temp conflict).

RC4:

Improve config change handling (and cold start if all ports changed config).

RC3:

Greatly improve cold start performance.

RC2:

Test cleanup (runs faster, more reliable and python3 compatible).
Docker tests now run FAUCET with python3.
Port and DP status exported to Prometheus.

1.4.0

Notable features:

* IPv6: RS/RA support
* IPv6: hosts with privacy addresses support (when routing)
* IPV6: expensive ipv6_nd_target match no longer used (instead use multicast encoded eth_dst)
* Inter VLAN routing
* Prometheus support
* Export of MAC/port/VLAN association (via Prometheus)
* Can configure max hosts per port
* More robust config parsing (cannot configure unknown items anymore)
* ACLs can push/pop VLANs and rewrite eth addresses
* ARP/ND/learning scheduling jittered to reduce controller load spikes
* Reduced usage of barrier message (only when necessary for delete serialization)
* Reduce packet in maximum (to 128 bytes)

Notable bugs fixed:

* Default route not handled correctly
* Exceptions not caught in background threads
* IPv6 multicast MAC address correctly set for Neighbor Discovery packets
* Gauge could crash if InfluxDB back end returns an error

Packaging changes:

* Rename package from ‘ryu-faucet’ to ‘faucet’
* Use PBR to simplify python packaging
* Add python console script for validating faucet configuration
* Split faucet apps into their own repo https://github.com/faucetsdn/faucetapps

Documentation

* Per vendor quickstart documentation added
* Lagopus and OVS DPDK tested working

Testing:

* Entire test suite runs in TravisCI
* Dockerized hardware testing
* iperf/counter testing
* Enforcement of minimum pylint score, and 2to3 style (to make python3 migration easier)
* Gauge test coverage improved (reloading, InfluxDB back end)


v1_4_0
* Initial group table support
* Switch/learning performance improvements (reduced number of messages necessary)
* Nexthop learning performance improvements (backoff, jitter, rate limiting)
* Travis CI config added
* External config checker script (check_faucet_config.py)
* Rename controller_ip -> faucet_vip config

v1_3_2
Synchronize with pip package.


v1_3_1
- Documentation (YAML graph), including for HPe.
- Fix stack ports not initialized if ports are down.
- Default policy drop rules configurable.
- Experimental TLS for OF channel support.


v1_3
- Config V1 format support removed.
- Pipeline change - ACL table now comes before VLAN.
- Fix FIB entries for hosts.
- Multiple BGP peers per VLAN.
- Many test/docker reliability fixes.
- Require Ryu >= 4.9.


v1_2_2
- Configurable LLDP unblocking for NFV.
- IP routing fixes (host FIB entries).
- Lagopus and Netronome vendors added.
- Parallel test reliability fixes.
- Optimize config reload (only reload affected ports/VLANs)
- Increase Gauge testing.


v1_2_1
docker/pip install and mirror default behavior fixes


v1_2
- Fix for v2 config ACLs
- Fix port level unicast_flood parameter has opposite effect.
- All tests use v2 config
- Basic stacking/distributed switching support.


v1_1
- Version 2 config (both FAUCET and Gauge)
- Can control multiple DPs
- Policy based forwarding/mirroring (ACLs can rewrite/output or mirror, supports NFV including 802.1x)
- Can run unit tests against hardware
- BGP routing
- Can send OF table features to provision switch pipeline

Page 24 of 24

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.