Release Notes 3.1.7.0 EcoNAT Documentation / Release Notes 3.1.7.0

Release notes 3.1.7.0.25

Release date: 19.06.25

Fixed

Fixed a critical bug in the TLS defragmenter operation (#4837)

Fixed a critical error that occurred when parsing dump.xml (#5042)

Failure to read EEPROM data of SFP modules installed in 100G Melanox and Intel E810 NICs (#3013)

Release notes 3.1.7.0.24

Release date: 17.06.25

Fixed

Failure to read NVRAM data on SFP modules for twisted pair cable (#5038)

Critical CLI bug (#5036)

Fixed a bug that caused excessive load on the helper core, which in turn caused delays in SNMP operation (#4979)

Release notes 3.1.7.0.23

Release date: 26.05.25

Fixed

Fixed an issue causing increased load on the control plane (#5034)

Release notes 3.1.7.0.22

Release date: 23.05.25

Added

CLI: support for special characters in URLs (#5017)

Fixed

Leakage of logging memory buffers (#5032, 5011)

Release notes 3.1.7.0.21

Release date: 22.05.25

Changed

Minor changes

Release notes 3.1.7.0.20

Release date: 14.05.25

Changed

Added new features and optimized algorithm of the tech-support command (#4956)

Fixed

ARP records of log servers were not updated by timer (#5006)

Release notes 3.1.7.0.19

Release date: 29.04.25

Fixed

NAT subsystem did not recognize external VLAN tags in QinQ packets and did not create corresponding translations (#4399)

Release notes 3.1.7.0.18

Release date: 26.03.25

Fixed

Fixed fast path operation when burst_size!=32 (#4924)

Fixed a bug that caused irrelevant sessions to be deleted after changing pool settings (#4898)

Release notes 3.1.7.0.17

Release date: 17.03.25

Fixed

Fixed an issue with sending logs from LOG2 (te18) interface when LOG1 (ge17) is disabled (#4893)

Release notes 3.1.7.0.16

Release date: 13.03.25

Added

Ability to seamlessly switch to new format of connection_log configuration branch when upgrading from previous versions (#4892)

Release notes 3.1.7.0.15

Release date: 11.03.25

Fixed

Fixed a critical bug in TLS defragmenter operation (#4901)

Release notes 3.1.7.0.14

Release date: 28.02.25

Fixed

Fixed a problem with race condition occurrence in DPI subsystem (#4812)

Release notes 3.1.7.0.13

Release date: 06.02.25

Changed

Minor changes

Release notes 3.1.7.0.12

Release date: 05.02.25

Changed

Autologoff_timeout can now be set in the range of 1 to 120 minutes (#4880)

Fixed

Incorrect calculation of 'Abons table total' in the output of the show resources command (#4732)

Incorrect BRAS response when receiving a CoA-Request with a non-existent service name (#4802)

Incorrect service name in Accounting Stop packets after changing services by CoA-Request (#4803)

NAT64 translations were not displayed by the show xlate command (#4867)

Release notes 3.1.7.0.11

Release date: 17.01.25

Changed

Minor changes

Release notes 3.1.7.0.10

Release date: 16.01.25

Changed

Uploading various files (custom filter lists, etc.) to EcoSGE now requires less free disk space (#4843)

Release notes 3.1.7.0.9

Release date: 16.01.25

Added

Ability to bind multiple session logging profiles to a single pool (#4563)

Changed

BRAS: the password for authentication on a RADIUS server (User-Password attribute) is now set via the user_password parameter in the system.bras.radius branch (#4597)

Fixed

Failure to apply configuration if 2 or more servers are specified in RADIUS server group settings (#4834)

Release notes 3.1.7.0.8

Release date: 24.12.24

Added

BRAS: in RADIUS server group settings it is now possible to specify the management interface to be used for communication with the servers of this group (#4598)

Fixed

Irrelevant error messages like path not started with ‘/’ (#4807)

Errors during reconfiguration on platforms with 25G interfaces (#4828)

Critical error in BRAS operation (#4778)

Release notes 3.1.7.0.7

Release date: 02.12.24

Fixed

PPTP_GRE sessions were not deleted under certain conditions (#4684)

Failure to paginate the entire valid configuration using the show config effective | more command if the configuration contains parameters with the none value (#4693)

Release notes 3.1.7.0.6

Release date: 15.11.24

Added

The wait_time parameter in system.dpi branch that sets the maximum allowable time for cURL operations such as loading custom filter lists (#4748)

Fixed

Displaying wrong user IPv6 address when accessing CLI over IPv6 (#4629)

Critical CLI error during reconfiguration (#4764)

An issue with handling duplicate fragmented packets (#4677)

Release notes 3.1.7.0.5

Release date: 01.11.24

Fixed

Minor fixes and improvements

Release notes 3.1.7.0.4

Release date: 15.10.24

Fixed

Incorrect fan numbering in the output of the show fan command on some hardware platforms (#4691)

Errors when applying changes to certain configuration branches (#4686)

Fixed a bug that caused problems with PPTP traffic handling (#4668)

Release notes 3.1.7.0.3

Release date: 02.10.24

Fixed

Incorrect handling of ICMP traffic in CGNAT pools with nat_filtering_mode address_and_port_dependent setting (#4584)

Release notes 3.1.7.0.2

Release date: 18.09.24

Added

Added counters for TLS defragmenter and QUIC parser to MIB (#4587)

Fixed

Now after the DPI subsystem is loaded and the internal filtering base is updated, all unnecessary temporary files are deleted (#4640)

Release notes 3.1.7.0.1

Release date: 04.09.24

Added

Restored support for Mellanox cards

Fixed

Fixed a critical bug that occurred when an enabled session logging profile with no log servers specified was bound to a pool (#4603)

Incorrect information in the output of the show version command (#4609)

Fixed an issue with SSH sessions not closing (#4468)

Fixed Clickstream logging issues when domain names are too long (#4542)

LACP crash after sniffer is enabled (#4611)

Negative values of DPI host/path/state buffers in the output of show resources command (#4600)

Release notes 3.1.7.0.0

Release date: 30.07.24

[!] – Attention! The specified change affects the configuration order, the external behavior of the system and/or the structure of the configuration file.

Added

The ability to collect and upload system diagnostic information to an FTP/TFTP server (#2716)

It is now possible to configure a balancing mechanism for sending session logs in NetFlow format to multiple servers (#3462)

In the LAG settings, you can specify the minimum number of properly working channels at which the LAG is considered to be operational (#4015)

Using the BRAS subsystem in conjunction with the DPI subsystem now allows to detect connections disguised as requests to charge-free resources (#4028)

New TTL and Hop Limit values for egress and ingress IPv4 and IPv6 packets respectively can be specified in BRAS service settings (#4122)

[!] New fields in QoE accounting logs: service name, ingress peak rate, egress peak rate (#4189, #4312)

CLI hints for inner_vlan and outer_vlan parameters in the nat_defaults branch (#4193)

Application of BRAS services based on analyzing contents of certain fields in HTTP requests and responses payload (#4218)

Ability to view license list in loaded but inactive software (#4220)

It is now possible to specify hashed passwords in TACACS+ server access settings (#4222)

The counters for egress and ingress sessions, bytes and packets for each protocol recognized by the DPI subsystem have been added to the CLI and MIB (#4229)

L4_OPAQUE and PPTP_GRE session monitoring (#4255)

Handling Perl-compatible regular expressions (PCRE) in custom filter lists (#4343)

Ability to monitor filter list downloads using the show dpilist stat CLI command and corresponding counters in the MIB (#4500)

New logging format - FlatBuffers (#3391)

Changed

[!] The connection_log branch in the factory configuration is now empty. You can create up to eight independent logging profiles in this branch and associate them with different pools. Attention! The existing session logging settings will be lost during software upgrade (#4016)

Improved QUIC protocol filtering (#2949)

Now during applying changes to no more than four pools of nat, fake, static, port_fwd, fake6 and static64 types new session creation is not frozen (#3560)

The CLI command history will no longer store "break" after pressing Ctrl+C (#4194)

When creating ACL rules without numbering them, the system now automatically assigns numbers divisible by 10 starting at 10. If there is a rule with any number, the next rule added without a number will be assigned the nearest higher number divisible by 10 (#4221)

"EcoSGE" instead of "EcoNAT" in CLI prompt and hostname parameter in nat_defaults, snmp and system_log settings (#4313)

Reduced translation table size for ECO_APPLIANCE_X3_S1_64G profile (#4525)

Fixed

Fixed an issue with race condition occurring in DPI subsystem when using Intel X710 based NICs (#3614)

The system blocked egress ICMP Echo Reply in Static NAT64 mode (#4338)

Traffic blocking by a DPI list with behavior pass setting (#4427)

Excessive ARP requests to servers from log_servers list in connection_log branch when log_interface mng is set (#4440)

Resolved an issue with management inaccessibility through IPMI interface when disabling logging port in CLI on platforms with combined IPMI/LOG interface (#4018)

When logging QoE with specified interim_interval, the system did not send the last session log (#4214)

Fixed a critical bug that rarely occurs when pools are reconfigured and connection_log is enabled (#4239)

Critical error in the ClickStream module (#4259)

Critical error when connection_log num_copies > 1 (#4349)

Excessive CPU load when logging via mng interface (#4444)

Dropping packets with destination addresses in 127.0.0.0.0/8 subnet (#4301)