Skip to content

Releases: FRRouting/frr

FRR 7.2 Release 🎃

16 Oct 20:03
@qlyoung qlyoung
frr-7.2
b606b4e
Compare
Choose a tag to compare
FRR 7.2 Release 🎃

We are pleased to announce FRR 7.2. This is a very big release, with a lot of bugs fixed, new features and even a new protocol daemon. We're also very happy to share that this release has the largest number of individual contributors of any release to date! Big thanks to all contributors.

Major additions in this release include:

  • Support for VRRP
  • Support for BMP
  • Support for PIM-BSM

Update

7.2 Debian packages are now available on the apt repository at https://deb.frrouting.org/.

Important Note

As of this post, we are still working on creating binary packages. Source tarballs can be found at the bottom of this post. This post will be updated when packaging operations are completed. As a reminder, our Debian repository is located at https://deb.frrouting.org/.

Changelog

All daemons:

  • -N <namespace> allows specifying a path postfix on the normal FRR config directory. This is helpful when running multiple FRR instances within different network namespaces.
  • access-lists now support sequence numbers
  • Route-maps now support matching blackhole nexthops: match ip next-hop type blackhole
  • Route-maps are now smarter when dependencies change
  • New command log-filter WORD adds builtin support for log filtering at the output stage

New daemon: vrrpd

bfdd

  • Gained VRF support
  • Gained support for Northbound API

bgpd

  • aggregate-address gained support for route maps
  • show bgp ipv4 unicast command family now shows FQDN for peers, if available
  • For route show commands, display the bestpath selection criterion
  • New show bgp <afi> <safi> summary failed command to show neighbors that failed to Establish
  • clear bgp * command now clears all peers, instead of only IPv6 peers
  • Improved JSON output for many commands
  • New module adds support for BMP

eigrpd

  • SIGHUP now signals a config reload
  • Gained support for Northbound API
  • Infrastructure changes to allow VRFs

isisd

  • Gained BFD support
  • Gained Support for circuits with MTUs > 8192

pbrd

  • fwmark support as part of match criteria
  • CLI commands gained autocomplete support for PBRMAPS
  • Improved support for nexthops

pimd

  • Gained support for PIM-BSM
  • Improved debugging support
  • Unusable ECMP paths are now saved in case they become valid in the future
  • IGMP queries not originated from directly connected sources are now ignored
  • Many new CLI improvements

sharpd

  • sharp watch [import|nexthop] now accepts prefixes instead of assuming /32

staticd

  • Significantly improved next-hop tracking support

zebra

  • Many dataplane-level improvements for routes, neighbor tables and EVPN
  • Next-hop tracking CLI is now VRF-aware
  • Next-hop tracking show commands have new options to modify output
  • Excised some duplicated work in route processing
  • Improved debugging facilities
  • Gained RMAC and VXLAN support for the FPM interface

Internal improvements

  • Library now has RCU primitives and facilities
  • Zebra continues to gain support for nexthop groups
  • ripd, isisd and ospfd can now be built to use openssl for MD5 crypto operations instead of FRR library functions, if desired
  • Builds will now fail by default if libcap is not present, due to severe performance issues when it is missing
  • Glue code for Lua support has been updated
  • Various improvements for cross compilation

Packaging changes

snapcraft:

  • Add fabricd
  • Add libyang
  • Update rtrlib
  • Update rpki

RPM Packages for 7.2:

Attached are some pre-built RPM binary packages.

The packages are all default builds based on the documentation with unmodified
source

Full Package Sources etc are available on the CI system as
artifacts

The packages require libyang and the RPKI packages require the rtrlib
package as well. Both of them are most likely not yet in any RPM repositories,
but can be downloaded from the NetDEF CI System.

CentOS 6: x86_64

Without RPKI

file Description
frr-7.2-01.el6.x86_64.rpm Main FRR Package
frr-debuginfo-7.2-01.el6.x86_64.rpm FRR Debug Symbols
frr-pythontools-7.2-01.el6.x86_64.rpm Python Reload tools for integrated config
frr-devel-7.2-01.el6.x86_64.rpm FRR Development libs
frr-contrib-7.2-01.el6.x86_64.rpm FRR Doc & Tools Contributions

With RPKI (see note above about RTRLIB requirement)

file Description
frr-7.2RPKI-01.el6.x86_64.rpm Main FRR Package
frr-debuginfo-7.2RPKI-01.el6.x86_64.rpm FRR Debug Symbols
frr-pythontools-7.2RPKI-01.el6.x86_64.rpm Python Reload tools for integrated config
frr-devel-7.2RPKI-01.el6.x86_64.rpm FRR Development libs
frr-contrib-7.2RPKI-01.el6.x86_64.rpm FRR Doc & Tools Contributions

CentOS 7: x86_64

Without RPKI

file Description
frr-7.2-01.el7.centos.x86_64.rpm Main FRR Package
frr-debuginfo-7.2-01.el7.centos.x86_64.rpm FRR Debug Symbols
frr-pythontools-7.2-01.el7.centos.x86_64.rpm Python Reload tools for integrated config
frr-devel-7.2-01.el7.centos.x86_64.rpm FRR Development libs
frr-contrib-7.2-01.el7.centos.x86_64.rpm FRR Doc & Tools Contributions

With RPKI (see note above about RTRLIB requirement)

file Description
frr-7.2RPKI-01.el7.centos.x86_64.rpm Main FRR Package
frr-debuginfo-7.2RPKI-01.el7.centos.x86_64.rpm FRR Debug Symbols
frr-pythontools-7.2RPKI-01.el7.centos.x86_64.rpm Python Reload tools for integrated config
frr-devel-7.2RPKI-01.el7.centos.x86_64.rpm FRR Development libs
frr-contrib-7.2RPKI-01.el7.centos.x86_64.rpm FRR Doc & Tools Contributions
Assets 24
Loading

FRR 7.1 Release

18 Jun 06:26
@eqvinox eqvinox
frr-7.1
23db048
Compare
Choose a tag to compare
FRR 7.1 Release

For Debian/Ubuntu packages, please refer to https://deb.frrouting.org/.

For RPM packages, please scroll down

Note: this version is primarily numbered "7.1" due to feedback from users about the major version number increasing too rapidly. It has the same amount of ongoing development as the usual FRR release cycle.

User-visible changes since the 7.0 release:

  • there is a new, work-in-progress gRPC northbound configuration interface plugin
  • zebra:
    • the table NNN command was removed from zebra since it has been broken for a long time.
    • the dataplane interface modularization and multithreading work is progressing steadily.
    • IPv6 Router Advertisements sent by zebra can now have RFC 8106 DNS options added to them.
  • bgpd:
    • EVPN can now be configured in non-default VRFs.
    • RFC 8212 — a default "deny" policy for eBGP sessions — can now be selected.

Aside from these, a huge amount of fixes and ongoing development is happening, as usual.

RPM Packages for 7.1:

Attached are some pre-built RPM binary packages.

The packages are all default builds based on the documentation with unmodified source

Full Package Sources etc are available on the CI system as artifacts

The packages require 'libyang' and the RPKI packages require the 'rtrlib' package as well.
Both of them are most likely not yet in any RPM repositories, but can be downloaded from the
NetDEF CI System.

Assets 24
Loading

FRR 7.0 Release

13 Mar 11:49
@eqvinox eqvinox
frr-7.0
10d4945
Compare
Choose a tag to compare
FRR 7.0 Release

For Debian/Ubuntu packages, please refer to https://deb.frrouting.org/.

For RPM packages, please scroll down

There are some major changes in this release, specifically libyang
https://github.com/CESNET/libyang is now a hard requirement to build and run
FRRouting. Here's the full list of major changes from 6.0.x to 7.0:

  • YANG data modeling & NETCONF support has arrived for the following daemons:

    • ripd
    • ripngd
    • isisd

    Note that this uses FRR-specific models and may still be subject to some
    changes. Feedback is strongly appreciated!

  • Error Codes / Categories are now added to log messages. They are printed as
    [EC 99999999999] on log messages and identify classes of errors. The
    library, bgpd, ospfd and zebra have been properly extended to categorize
    errors while the other daemons have somewhat more rudimentary cateogries.

  • configure terminal in the CLI is no longer an exclusive state on any
    daemon, i.e. multiple users can edit the configuration at the same time in
    all daemons. This was previously already the case for zebra and isisd.

  • BGP enhancements:

    • EVPN Duplicate Address Detection
    • EVPN route servers
    • EVPN extended mobility
    • Global IPv6 addresses can be used for RFC5549 (v4-over-v6) nexthops
    • Flowspec protocol support has been significantly extended. (Note that OS
      integration is still very incomplete.)
    • Add-Path IDs are now reused on transmission when possible
    • Aggregates now properly aggregate extended and large community attributes

  • IS-IS:

    • BFD support has been added
    • triggered hellos have been implemented

  • new daemon: OpenFabric (a datacenter variant of IS-IS - cf.
    https://datatracker.ietf.org/doc/draft-white-openfabric/)

  • Zebra's kernel/dataplane interface is undergoing a rewrite and parts have
    been moved into a separate thread with a more extensible architecture. Work
    on this project is ongoing.

  • staticd now supports onlink nexthops for static routes

  • sharpd now supports nexthop groups for route installs

  • many bugs were fixed, also including quite a few overdue documentation
    improvements. This also includes CVE-2017-3224 which is a low-severity
    low-impact OSPF vulnerability (as evident by the 2017 date.)

Important packaging and build related changes:

  • libyang is now required to build and run FRRouting. Version 0.16.74 or
    newer (e.g. 0.16-r3 which is 0.16.105) is strongly recommended. Older
    versions will create additional hazards at both build and runtime because
    an extension module needs to be installed. Support for libyang versions
    before 0.16.74 will be removed in the next non-stable FRRouting version.

    • when using libyang before 0.16.74, make sure to specify the
      --with-libyang-pluginsdir=/usr/lib/frr/libyang_plugins option (change
      path to fit system)

  • Debian packaging has been completely overhauled (matches the changes in
    6.0.2.) If you are creating derivative Debian packages, updates will be
    necessary.

    • RPKI and SNMP are now separate packages that can be installed
      additionally. There are no longer distinct "RPKI" and "no RPKI" versions
      of FRRouting on Debian.

    • Debian packages are now provided in a repository at:
      https://deb.frrouting.org/

  • Snapcraft packaging has been updated to match.

  • There is a new --enable-static-bin option to link libfrr statically into
    FRR binaries. This is the only supported way of doing any static linking
    of FRR. (--disable-shared is NOT supported.)

  • all daemons now properly complete their startup before allowing their parent
    to exit when the -d daemonization option is used. This should remove the
    need for any "sleep" calls or start retrying in init scripts.

  • some minor non-reproducibility issues were fixed. FRRouting should now
    always build reproducibly.

  • the topotests system that was previously maintained separately is now
    shipped as part of the FRR source under tests/topotests.

RPM Packages for 7.0:

Attached are some pre-built RPM binary packages.

The packages are all default builds based on the documentation with unmodified source

Full Package Sources etc are available on the CI system as artifacts

The packages require 'libyang' and the RPKI packages require the 'rtrlib' package as well.
Both of them are most likely not yet in any RPM repositories, but can be downloaded from the
NetDEF CI System.

Assets 24
Loading

FRR 6.0.2 Release

09 Jan 14:31
@mwinter-osr mwinter-osr
frr-6.0.2
1bdbe6e
Compare
Choose a tag to compare
FRR 6.0.2 Release

Main Changelog for 6.0: See Github Wiki Pages

Changes of 6.0.2 over 6.0:
(6.0.1 was built but not released before the security issue was found)

  • Security Issue (Denial of Service): Fix BGP Attribute 255 (experimental VNC)
    handling
  • Various fixes for label manager
  • Fix BGP unnumbered peer setup
  • Various other fixes
  • Complete rewrite of the Debian Package structure

If you are using a Debian / Ubuntu based system:

Please be aware that we removed the previous system of backports and rebuilt the
Debian packages from ground up. This eliminated all the backports and the separate
RPKI build. RPKI is now simple added by installing the extra frr-rpki-rtrlib package
(and the RTRLIB package itself - see below). The main package is unchanged.
The same is for SNMP which was previously disabled. If needed, install the related
frr-snmp package.
This new package setup was submitted to Debian for inclusing into upcoming Debian 10
and should be available from the official Debian repositories soon.

Attached are some pre-built binaries for some Distributions and Architectures.
(Please open an issue if you are missing something and would like a binary
package available for download).

The packages are all default builds based on the documentation with unmodified source

Full Package Sources etc are available on the CI system as artifacts

For some platforms we publish RPKI enabled packages. Please be aware that you will need
the RTRLIB package installed as well for the RPKI packages. You can find the RTRLIB packages
on the NetDEF CI system in the RTRLIB project
As an alternative, you could build RTRLIB on your own from the source available at
Github/rtrlib

Read more
Assets 79
Loading

FRR 5.0.2 Release

09 Jan 14:18
@mwinter-osr mwinter-osr
frr-5.0.2
9e0b354
Compare
Choose a tag to compare
FRR 5.0.2 Release

SECURITY RELEASE

Please be aware that this is an old release and just a security update. Upgrading
to the recent version is strongly encouraged as soon as possible

Main Changelog for 5.0: See Github Wiki Pages

Changes of 5.0.2 over 5.0.1:

  • Security Issue (Denial of Service): Fix BGP Attribute 255 (experimental VNC)
    handling
  • Fix for large AS paths
  • PIM fixes
  • BGP flowspec fixes
  • PBR fixes
  • Fix for ISIS crash
  • Add backport to build FRR on Sonic Debian

Attached are some pre-built binaries for some Distributions and Architectures.
(Please open an issue if you are missing something and would like a binary
package available for download).

The packages are all default builds based on the documentation with unmodified source

Full Package Sources etc are available on the CI system as artifacts

For some platforms we publish RPKI enabled packages. Please be aware that you will need
the RTRLIB package installed as well for the RPKI packages. You can find the RTRLIB packages
on the NetDEF CI system in the RTRLIB project
As an alternative, you could build RTRLIB on your own from the source available at
Github/rtrlib

Read more
Assets 87
Loading

FRR 4.0.1

09 Jan 14:09
@mwinter-osr mwinter-osr
frr-4.0.1
b29e322
Compare
Choose a tag to compare
FRR 4.0.1

SECURITY RELEASE

Please be aware that this is a very old release and just a security update. Upgrading
to the recent version is strongly encouraged as soon as possible

Main Changelog for 4.0: See Github Wiki Pages

Changes over version 4.0:

  • Security Issue (Denial of Service): Fix BGP Attribute 255 (experimental VNC)
    handling
  • Fix for large AS paths
  • Add json support to "show ip route" command
  • bgpd: fix rpki segfault
  • bgpd: fix rpki validation for ipv6
  • Fix for crash with p2p interfaces on *BSD
  • Fix for crash with some IPv6 tunnels
  • Run WatchFRR by default on systems with systemd
  • isisd: Fixed the way isis reads from bpf
  • Add backport to build FRR on Sonic Debian

Attached are some pre-built binaries for some Distributions and Architectures.
(Please open an issue if you are missing something and would like a binary
package available for download).

The packages are all default builds based on the documentation with unmodified source

Full Package Sources etc are available on the CI system as artifacts

Read more
Assets 43
Loading

FRR 3.0.4 Release

09 Jan 13:46
@mwinter-osr mwinter-osr
frr-3.0.4
6a18454
Compare
Choose a tag to compare
FRR 3.0.4 Release

SECURITY RELEASE

Please be aware that this is a very old release and just a security update. Upgrading
to the recent version is strongly encouraged as soon as possible

Main Changelog for 3.0: See Github Wiki Pages

Changes over version 3.0.3:

  • Security Issue (Denial of Service): Fix BGP Attribute 255 (experimental VNC) handling
  • redhat: Fix missing lib_fpm in rpm packaging
  • ospfd: allow multiple options in the redistribute command

Attached are some pre-built binaries for some Distributions and Architectures.
(Please open an issue if you are missing something and would like a binary
package available for download).

The packages are all default builds based on the documentation with unmodified source

Full Package Sources etc are available on the CI system as artifacts

Read more
Assets 43
Loading

FRR 6.0 Release

09 Oct 15:35
@mwinter-osr mwinter-osr
frr-6.0
c8c2427
Compare
Choose a tag to compare
FRR 6.0 Release

Main Changelog for 6.0: See Github Wiki Pages

Changes of 6.0 over 6.0:

  • Staticd: New daemon responsible for management of static routes
  • ISISd: Implement dst-src routing as per draft-ietf-isis-ipv6-dst-src-routing
  • BFDd: new daemon for BFD (Bidrectional Forwarding Detection). Responsible
    for notifying link changes to make routing protocols converge faster.
  • Ubuntu 12.04 is no longer supported (FRR 5.x is last supported version for it)
  • various bug fixes

Attached are some pre-built binaries for some Distributions and Architectures.
(Please open an issue if you are missing something and would like a binary
package available for download).

The packages are all default builds based on the documentation with unmodified source

Full Package Sources etc are available on the CI system as artifacts

For some platforms we publish RPKI enabled packages. Please be aware that you will need
the RTRLIB package installed as well for the RPKI packages. You can find the RTRLIB packages
on the NetDEF CI system in the RTRLIB project
As an alternative, you could build RTRLIB on your own from the source available at
Github/rtrlib

Read more
Assets 86
Loading

FRR 5.0.1 Release

05 Jul 08:09
@mwinter-osr mwinter-osr
frr-5.0.1
85f25d8
Compare
Choose a tag to compare
FRR 5.0.1 Release

Main Changelog for 5.0: See Github Wiki Pages

Changes of 5.0.1 over 5.0:

  • Support Automake 1.16.1
  • BGPd: Support for flowspec ICMP, DSCP, packet length, fragment and tcp flags
  • BGPd: fix rpki validation for ipv6
  • VRF: Workaround for kernel bug on Linux 4.14 and newer
  • Zebra: Fix interface based routes from zebra not marked up
  • Zebra: Fix large zebra memory usage when redistribute between protocols
  • Zebra: Allow route-maps to match on source instance
  • BGPd: Backport peer-attr overrides, peer-level enforce-first-as and filtered-routes fix
  • BGPd: fix for crash during display of filtered-routes
  • BGPd: Actually display labeled unicast routes received
  • Label Manager: Fix to work correctly behind a label manager proxy

Attached are some pre-built binaries for some Distributions and Architectures.
(Please open an issue if you are missing something and would like a binary
package available for download).

The packages are all default builds based on the documentation with unmodified source

Full Package Sources etc are available on the CI system as artifacts

For some platforms we publish RPKI enabled packages. Please be aware that you will need
the RTRLIB package installed as well for the RPKI packages. You can find the RTRLIB packages
on the NetDEF CI system in the RTRLIB project
As an alternative, you could build RTRLIB on your own from the source available at
Github/rtrlib

Read more
Assets 86
Loading

FRR 5.0 release

11 Jun 17:59
@mwinter-osr mwinter-osr
frr-5.0
ed02df4
Compare
Choose a tag to compare
FRR 5.0 release

Main Changelog for 5.0: See Github Wiki Pages

Changes over version 4.x:

  • PIM: Add a Multicast Trace Command draft-ietf-idmr-traceroute-ipm-05
  • IS-IS: Implement Three-Way Handshake as per RFC5303
  • BGP: Implement VPN-VRF route leaking per RFC4364. Please see the BGP VRFs section in the BGP section of the online manual.
  • BGP : Implement VRF with NETNS backend
  • PBR: Add a new Policy Based Routing Daemon. Allow users to create and specify policy maps for controlling routing.

Attached are some pre-built binaries for some Distributions and Architectures.
(Please open an issue if you are missing something and would like a binary
package available for download).

The packages are all default builds based on the documentation with unmodified source

Full Package Sources etc are available on the CI system as artifacts

For some platforms we publish RPKI enabled packages. Please be aware that you will need
the RTRLIB package installed as well for the RPKI packages. You can find the RTRLIB packages
on the NetDEF CI system in the RTRLIB project
As an alternative, you could build RTRLIB on your own from the source available at
Github/rtrlib

Read more
Assets 86
Loading