Skip to content

Releases: FRRouting/frr

FRR 7.0 Release

13 Mar 11:49
Compare
Choose a tag to compare

For Debian/Ubuntu packages, please refer to https://deb.frrouting.org/.

For RPM packages, please scroll down


There are some major changes in this release, specifically libyang
https://github.com/CESNET/libyang is now a hard requirement to build and run
FRRouting. Here's the full list of major changes from 6.0.x to 7.0:

  • YANG data modeling & NETCONF support has arrived for the following daemons:

    • ripd
    • ripngd
    • isisd

    Note that this uses FRR-specific models and may still be subject to some
    changes. Feedback is strongly appreciated!

  • Error Codes / Categories are now added to log messages. They are printed as
    [EC 99999999999] on log messages and identify classes of errors. The
    library, bgpd, ospfd and zebra have been properly extended to categorize
    errors while the other daemons have somewhat more rudimentary cateogries.

  • configure terminal in the CLI is no longer an exclusive state on any
    daemon, i.e. multiple users can edit the configuration at the same time in
    all daemons. This was previously already the case for zebra and isisd.

  • BGP enhancements:

    • EVPN Duplicate Address Detection
    • EVPN route servers
    • EVPN extended mobility
    • Global IPv6 addresses can be used for RFC5549 (v4-over-v6) nexthops
    • Flowspec protocol support has been significantly extended. (Note that OS
      integration is still very incomplete.)
    • Add-Path IDs are now reused on transmission when possible
    • Aggregates now properly aggregate extended and large community attributes
  • IS-IS:

    • BFD support has been added
    • triggered hellos have been implemented
  • new daemon: OpenFabric (a datacenter variant of IS-IS - cf.
    https://datatracker.ietf.org/doc/draft-white-openfabric/)

  • Zebra's kernel/dataplane interface is undergoing a rewrite and parts have
    been moved into a separate thread with a more extensible architecture. Work
    on this project is ongoing.

  • staticd now supports onlink nexthops for static routes

  • sharpd now supports nexthop groups for route installs

  • many bugs were fixed, also including quite a few overdue documentation
    improvements. This also includes CVE-2017-3224 which is a low-severity
    low-impact OSPF vulnerability (as evident by the 2017 date.)

Important packaging and build related changes:

  • libyang is now required to build and run FRRouting. Version 0.16.74 or
    newer (e.g. 0.16-r3 which is 0.16.105) is strongly recommended. Older
    versions will create additional hazards at both build and runtime because
    an extension module needs to be installed. Support for libyang versions
    before 0.16.74 will be removed in the next non-stable FRRouting version.

    • when using libyang before 0.16.74, make sure to specify the
      --with-libyang-pluginsdir=/usr/lib/frr/libyang_plugins option (change
      path to fit system)
  • Debian packaging has been completely overhauled (matches the changes in
    6.0.2.) If you are creating derivative Debian packages, updates will be
    necessary.

    • RPKI and SNMP are now separate packages that can be installed
      additionally. There are no longer distinct "RPKI" and "no RPKI" versions
      of FRRouting on Debian.

    • Debian packages are now provided in a repository at:
      https://deb.frrouting.org/

  • Snapcraft packaging has been updated to match.

  • There is a new --enable-static-bin option to link libfrr statically into
    FRR binaries. This is the only supported way of doing any static linking
    of FRR. (--disable-shared is NOT supported.)

  • all daemons now properly complete their startup before allowing their parent
    to exit when the -d daemonization option is used. This should remove the
    need for any "sleep" calls or start retrying in init scripts.

  • some minor non-reproducibility issues were fixed. FRRouting should now
    always build reproducibly.

  • the topotests system that was previously maintained separately is now
    shipped as part of the FRR source under tests/topotests.

RPM Packages for 7.0:

Attached are some pre-built RPM binary packages.

The packages are all default builds based on the documentation with unmodified source

Full Package Sources etc are available on the CI system as artifacts

The packages require 'libyang' and the RPKI packages require the 'rtrlib' package as well.
Both of them are most likely not yet in any RPM repositories, but can be downloaded from the
NetDEF CI System.

FRR 6.0.2 Release

09 Jan 14:31
Compare
Choose a tag to compare

Main Changelog for 6.0: See Github Wiki Pages

Changes of 6.0.2 over 6.0:
(6.0.1 was built but not released before the security issue was found)

  • Security Issue (Denial of Service): Fix BGP Attribute 255 (experimental VNC)
    handling
  • Various fixes for label manager
  • Fix BGP unnumbered peer setup
  • Various other fixes
  • Complete rewrite of the Debian Package structure

If you are using a Debian / Ubuntu based system:

Please be aware that we removed the previous system of backports and rebuilt the
Debian packages from ground up. This eliminated all the backports and the separate
RPKI build. RPKI is now simple added by installing the extra frr-rpki-rtrlib package
(and the RTRLIB package itself - see below). The main package is unchanged.
The same is for SNMP which was previously disabled. If needed, install the related
frr-snmp package.
This new package setup was submitted to Debian for inclusing into upcoming Debian 10
and should be available from the official Debian repositories soon.

Attached are some pre-built binaries for some Distributions and Architectures.
(Please open an issue if you are missing something and would like a binary
package available for download).

The packages are all default builds based on the documentation with unmodified source

Full Package Sources etc are available on the CI system as artifacts

For some platforms we publish RPKI enabled packages. Please be aware that you will need
the RTRLIB package installed as well for the RPKI packages. You can find the RTRLIB packages
on the NetDEF CI system in the RTRLIB project
As an alternative, you could build RTRLIB on your own from the source available at
Github/rtrlib

Read more

FRR 5.0.2 Release

09 Jan 14:18
Compare
Choose a tag to compare

SECURITY RELEASE

Please be aware that this is an old release and just a security update. Upgrading
to the recent version is strongly encouraged as soon as possible

Main Changelog for 5.0: See Github Wiki Pages

Changes of 5.0.2 over 5.0.1:

  • Security Issue (Denial of Service): Fix BGP Attribute 255 (experimental VNC)
    handling
  • Fix for large AS paths
  • PIM fixes
  • BGP flowspec fixes
  • PBR fixes
  • Fix for ISIS crash
  • Add backport to build FRR on Sonic Debian

Attached are some pre-built binaries for some Distributions and Architectures.
(Please open an issue if you are missing something and would like a binary
package available for download).

The packages are all default builds based on the documentation with unmodified source

Full Package Sources etc are available on the CI system as artifacts

For some platforms we publish RPKI enabled packages. Please be aware that you will need
the RTRLIB package installed as well for the RPKI packages. You can find the RTRLIB packages
on the NetDEF CI system in the RTRLIB project
As an alternative, you could build RTRLIB on your own from the source available at
Github/rtrlib

Read more

FRR 4.0.1

09 Jan 14:09
Compare
Choose a tag to compare

SECURITY RELEASE

Please be aware that this is a very old release and just a security update. Upgrading
to the recent version is strongly encouraged as soon as possible

Main Changelog for 4.0: See Github Wiki Pages

Changes over version 4.0:

  • Security Issue (Denial of Service): Fix BGP Attribute 255 (experimental VNC)
    handling
  • Fix for large AS paths
  • Add json support to "show ip route" command
  • bgpd: fix rpki segfault
  • bgpd: fix rpki validation for ipv6
  • Fix for crash with p2p interfaces on *BSD
  • Fix for crash with some IPv6 tunnels
  • Run WatchFRR by default on systems with systemd
  • isisd: Fixed the way isis reads from bpf
  • Add backport to build FRR on Sonic Debian

Attached are some pre-built binaries for some Distributions and Architectures.
(Please open an issue if you are missing something and would like a binary
package available for download).

The packages are all default builds based on the documentation with unmodified source

Full Package Sources etc are available on the CI system as artifacts

Read more

FRR 3.0.4 Release

09 Jan 13:46
Compare
Choose a tag to compare

SECURITY RELEASE

Please be aware that this is a very old release and just a security update. Upgrading
to the recent version is strongly encouraged as soon as possible

Main Changelog for 3.0: See Github Wiki Pages

Changes over version 3.0.3:

  • Security Issue (Denial of Service): Fix BGP Attribute 255 (experimental VNC) handling
  • redhat: Fix missing lib_fpm in rpm packaging
  • ospfd: allow multiple options in the redistribute command

Attached are some pre-built binaries for some Distributions and Architectures.
(Please open an issue if you are missing something and would like a binary
package available for download).

The packages are all default builds based on the documentation with unmodified source

Full Package Sources etc are available on the CI system as artifacts

Read more

FRR 6.0 Release

09 Oct 15:35
Compare
Choose a tag to compare

Main Changelog for 6.0: See Github Wiki Pages

Changes of 6.0 over 6.0:

  • Staticd: New daemon responsible for management of static routes
  • ISISd: Implement dst-src routing as per draft-ietf-isis-ipv6-dst-src-routing
  • BFDd: new daemon for BFD (Bidrectional Forwarding Detection). Responsible
    for notifying link changes to make routing protocols converge faster.
  • Ubuntu 12.04 is no longer supported (FRR 5.x is last supported version for it)
  • various bug fixes

Attached are some pre-built binaries for some Distributions and Architectures.
(Please open an issue if you are missing something and would like a binary
package available for download).

The packages are all default builds based on the documentation with unmodified source

Full Package Sources etc are available on the CI system as artifacts

For some platforms we publish RPKI enabled packages. Please be aware that you will need
the RTRLIB package installed as well for the RPKI packages. You can find the RTRLIB packages
on the NetDEF CI system in the RTRLIB project
As an alternative, you could build RTRLIB on your own from the source available at
Github/rtrlib

Read more

FRR 5.0.1 Release

05 Jul 08:09
Compare
Choose a tag to compare

Main Changelog for 5.0: See Github Wiki Pages

Changes of 5.0.1 over 5.0:

  • Support Automake 1.16.1
  • BGPd: Support for flowspec ICMP, DSCP, packet length, fragment and tcp flags
  • BGPd: fix rpki validation for ipv6
  • VRF: Workaround for kernel bug on Linux 4.14 and newer
  • Zebra: Fix interface based routes from zebra not marked up
  • Zebra: Fix large zebra memory usage when redistribute between protocols
  • Zebra: Allow route-maps to match on source instance
  • BGPd: Backport peer-attr overrides, peer-level enforce-first-as and filtered-routes fix
  • BGPd: fix for crash during display of filtered-routes
  • BGPd: Actually display labeled unicast routes received
  • Label Manager: Fix to work correctly behind a label manager proxy

Attached are some pre-built binaries for some Distributions and Architectures.
(Please open an issue if you are missing something and would like a binary
package available for download).

The packages are all default builds based on the documentation with unmodified source

Full Package Sources etc are available on the CI system as artifacts

For some platforms we publish RPKI enabled packages. Please be aware that you will need
the RTRLIB package installed as well for the RPKI packages. You can find the RTRLIB packages
on the NetDEF CI system in the RTRLIB project
As an alternative, you could build RTRLIB on your own from the source available at
Github/rtrlib

Read more

FRR 5.0 release

11 Jun 17:59
Compare
Choose a tag to compare

Main Changelog for 5.0: See Github Wiki Pages

Changes over version 4.x:

  • PIM: Add a Multicast Trace Command draft-ietf-idmr-traceroute-ipm-05
  • IS-IS: Implement Three-Way Handshake as per RFC5303
  • BGP: Implement VPN-VRF route leaking per RFC4364. Please see the BGP VRFs section in the BGP section of the online manual.
  • BGP : Implement VRF with NETNS backend
  • PBR: Add a new Policy Based Routing Daemon. Allow users to create and specify policy maps for controlling routing.

Attached are some pre-built binaries for some Distributions and Architectures.
(Please open an issue if you are missing something and would like a binary
package available for download).

The packages are all default builds based on the documentation with unmodified source

Full Package Sources etc are available on the CI system as artifacts

For some platforms we publish RPKI enabled packages. Please be aware that you will need
the RTRLIB package installed as well for the RPKI packages. You can find the RTRLIB packages
on the NetDEF CI system in the RTRLIB project
As an alternative, you could build RTRLIB on your own from the source available at
Github/rtrlib

Read more

FRR 4.0 release

12 Mar 13:19
Compare
Choose a tag to compare

Main Changelog for 4.0: See Github Wiki Pages

Changes over version 3.x:

Attached are some pre-built binaries for some Distributions and Architectures.
(Please open an issue if you are missing something and would like a binary
package available for download).

The packages are all default builds based on the documentation with unmodified source

Full Package Sources etc are available on the CI system as artifacts

Read more

FRR 3.0.3 release

12 Jan 21:38
Compare
Choose a tag to compare

Main Changelog for 3.0: See Github Wiki Pages

Changes over version 3.0.2:

  • Fixes for GCC 7.0
  • Always enable watchfrr on new installation (req for systemd operation)
  • Add 'no password' command (with warning)
  • Added Ubuntu 17.10 Package support in source (no binary packages built [yet])

Attached are some pre-built binaries for some Distributions and Architectures.
(Please open an issue if you are missing something and would like a binary
package available for download).

The packages are all default builds based on the documentation with unmodified source

Full Package Sources etc are available on the CI system as artifacts

Read more