OpenBGPD 9.2 released

We have released OpenBGPD 9.2, which will be arriving in the OpenBGPD directory of your local OpenBSD mirror soon.

This release includes the following changes to the previous release:

• Require negotiation of the 'as-4byte' capability by default. Sessions with legacy speakers unable to handle this capability can still be downgraded through explicit configuration, but our long term goal is to drop support for old 2-byte only clients.

  
  

• Rework fast reconnect and the IdleHold timer in a way that fixes too fast reconnects after a NOTIFICATION was sent out.

  
  

• `bgpctl neighbor X up` now opens a connection to the neighbor for session in state active and sessions that are passive.

  
  

• Various fixes in the Adj-RIB-Out handling and bring back optimized `addpath send all` updates.

  
  

• Include example ASPA filter rule to the default config.

  
  

• Further improve CH hash performance.

  
  

• Automatically set 'fib-update no' when the extended nexthop encoding capability is configured. Currently IPv4 routes with IPv6 nexthops are supported only for the IX RS deployment use-case where there is no need for a FIB.

  
  

• Enforce the use of 'fib-update no' when the extended nexthop encoding capability is configured.

  
  

• Limit ASPATH and AS4_PATH attributes to a maximum of 750 elements.

  
  

• Fix handling of unknown extended communities.

  
  

• Improve the 'as-4byte' fixup handling for old 2byte only clients. When old clients use the extended message capability it is possible to trigger a case where the reconstructed ASPATH attribute would overflow the maximum buffer size.

  
  

• Various fixes for defects found by a code review by 7ASecurity. According to their scoring system 0 critical, 1 high, 14 medium, and 3 low issues were found and fixed. One defect classified as medium is still open but only affects VPN and EVPN AFI/SAFI pairs.

  
  

• Various minor fixes for defects detected by automated code review.

OpenBGPD-portable is known to compile and run on FreeBSD and the Linux distributions Alpine, Debian, Fedora, RHEL/CentOS and Ubuntu.

It is our hope that packagers take interest and help adapt OpenBGPD-portable to more distributions.

We welcome feedback and improvements from the broader community.

Thanks to all of the contributors who helped make this release possible.