- Repo names: ziti-* → zt-* - Go modules: github.com/hanzozt/ziti → github.com/hanzozt/zt - Docker images: hanzozt/ziti-* → hanzozt/zt-* - C/Java/JS symbols: ziti_* → zt_* - File and directory names updated
22 KiB
Release 0.27.9
What's New
- Refactored the websocket transport to fix a concurrency issue
- v0.27.6 changed delete behaviors to error if the entity was not found. This release reverts that behavior.
Component Updates and Bug Fixes
-
github.com/hanzozt/channel/v2: v2.0.53 -> v2.0.58
-
github.com/hanzozt/edge: v0.24.228 -> v0.24.239
- Issue #1391 - AuthPolicies for identities is missing a reference link
-
github.com/hanzozt/edge-api: v0.25.9 -> v0.25.11
-
github.com/hanzozt/fabric: v0.22.77 -> v0.22.87
-
github.com/hanzozt/foundation/v2: v2.0.18 -> v2.0.21
-
github.com/hanzozt/identity: v1.0.42 -> v1.0.45
-
github.com/hanzozt/runzmd: v1.0.18 -> v1.0.20
-
github.com/hanzozt/storage: v0.1.46 -> v0.1.49
-
github.com/hanzozt/transport/v2: v2.0.68 -> v2.0.72
-
github.com/hanzozt/metrics: v1.2.16 -> v1.2.19
-
github.com/hanzozt/zt: v0.27.8 -> v0.27.9
Release 0.27.8
What's New
- CLI additions for auth policies and external JWT signers
- Performance improvements for listing services
Component Updates and Bug Fixes
-
github.com/hanzozt/edge: v0.24.224 -> v0.24.228
- Issue #1388 - Make better use of identity service indexes for service list
- Issue #1386 - PUT on identities results in an error and internal PANIC
-
github.com/hanzozt/fabric: v0.22.76 -> v0.22.77
-
github.com/hanzozt/storage: v0.1.45 -> v0.1.46
-
github.com/hanzozt/zt: v0.27.7 -> v0.27.8
- Issue #1064 - Support auth-policy assignments on identities via the CLI
- Issue #1058 - Allow Auth Policy Create/Update/Delete via CLI
- Issue #1059 - Expose Delete for Ext JWT Signers in CLI
Release 0.27.7
What's New
- This release updates the build to use Go 1.20
Release 0.27.6
What's New
- Makes inspect CLI more discoverable by adding subcommands for inspectable values
- Adds new inspection allowing configs to be retrieved:
zt fabric inspect config - Many improvements to edge-router/tunneler hosting performance with large numbers of hosted services
- Routers should no longer overwhelm controller while setting up or reestablishing hosting
- Adds ability to disable router
- Adds CLI command to compact offline bbolt database:
zt ops db compact <src> <dst> - Adds CLI command to re-enroll edge routers:
zt edge re-enroll edge-router - Routers can now be disabled. Connections to the controller from disabled routers will be rejected.
- Disable with:
zt fabric update router <router-id> --disabled - Enable with:
zt fabric update router <router-id> --disabled=false
- Disable with:
Component Updates and Bug Fixes
-
github.com/hanzozt/agent: v1.0.8 -> v1.0.10
-
github.com/hanzozt/channel/v2: v2.0.27 -> v2.0.53
-
github.com/hanzozt/edge: v0.24.125 -> v0.24.224
- Issue #1373 - Add support for disabled flag to edge and transit routers
- Issue #1374 - Multiple MFA enrollments cannot be cleaned up by administrators
- Issue #1336 - xgress_edge_tunnel shouldn't stop/start host on control channel reconnect
- Issue #1369 - Add missing entity type id for TransitRouter
- Issue #1366 - Error message incorrectly state 'invalid api session' when it's an invalid session
- Issue #1364 - Cache api-sessions for tunneler router so we don't need to unnecessarily create new sessions
- Issue #1362 - Rate limit terminator creates for router/tunneler
- Issue #1359 - Sessions creates should be idempotent
- Issue #1355 - Handle duplicate create terminator requests if create terminator fails
- Issue #1350 - Router event processing can deadlock
- Issue #1329 - UDP connections can drop data if datagrams are > 10k in size
- Issue #1310 - Creating a cert backed ext-jwt-signer causes nil dereference
-
github.com/hanzozt/edge-api: v0.25.6 -> v0.25.9
-
github.com/hanzozt/fabric: v0.22.24 -> v0.22.76
- Issue #651 - Add router enable/disable mechanism
- Issue #648 - Add rate limiter pool to router for operations with potential to flood the controller
- Issue #610 - Fix router disconnect when endpoint removed from cluster
- Issue #622 - fatal error: concurrent map iteration and map write in logContext.WireEntry
- Issue #507 - Add configuration for control channel heartbeat
- Issue #584 - Add cluster events
- Issue #599 - Add release and transfer leadership commands
- Issue #606 - Ensure consistent use of peer address
- Issue #598 - Add support to fabric inspect to propagate inspect to other controllers
- Issue #597 - Make raft settings configurable
- Issue #604 - Don't create link dropped msg metric until channel bind time
- Issue #638 - Fix atomic 64-bit alignment error on arm devices
-
github.com/hanzozt/foundation/v2: v2.0.10 -> v2.0.18
-
github.com/hanzozt/identity: v1.0.30 -> v1.0.42
-
github.com/hanzozt/runzmd: v1.0.9 -> v1.0.18
-
github.com/hanzozt/sdk-golang: v0.18.28 -> v0.18.76
- Issue #356 - sdk connections should respect net.Conn deadline related API specifications
-
github.com/hanzozt/storage: v0.1.34 -> v0.1.45
-
github.com/hanzozt/transport/v2: v2.0.51 -> v2.0.68
-
github.com/hanzozt/jwks: v1.0.2 -> v1.0.3
-
github.com/hanzozt/metrics: v1.2.3 -> v1.2.16
-
github.com/hanzozt/zt: v0.27.5 -> v0.27.6
- Issue #1041 - Add zt compact command to CLI
- Issue #1032 - zt edge create service fails silently if config names don't exist
- Issue #1031 - Fixed quickstart bug with arm and arm64 ambiguity when running quickstart on arm architecture
Release 0.27.5
What's New
- Fixes an issue with
ztCLI when using a globally trusted CA - Fixes bug where
zt agent stackwas callingzt agent stats - zt controller/router no longer compare the running version with the latest from github by default. Set ZITI_CHECK_VERSION=true to enable this behavior
Component Updates and Bug Fixes
-
github.com/hanzozt/edge: v0.24.121 -> v0.24.125
-
github.com/hanzozt/fabric: v0.22.20 -> v0.22.24
- Issue #601 - Only use endpoints file in router once endpoints have changed
- Issue #583 - Compress raft snapshots
-
github.com/hanzozt/sdk-golang: v0.18.27 -> v0.18.28
-
github.com/hanzozt/storage: v0.1.33 -> v0.1.34
-
github.com/hanzozt/zt: v0.27.4 -> v0.27.5
Release 0.27.4
What's New
This release contains a fix for a controller deadlock
Component Updates and Bug Fixes
-
github.com/hanzozt/channel/v2: v2.0.26 -> v2.0.27
-
github.com/hanzozt/edge: v0.24.115 -> v0.24.121
- Issue #1303 - Fix deadlock when flushing api session heartbeats
-
github.com/hanzozt/fabric: v0.22.19 -> v0.22.20
-
github.com/hanzozt/sdk-golang: v0.18.26 -> v0.18.27
-
github.com/hanzozt/transport/v2: v2.0.50 -> v2.0.51
-
github.com/hanzozt/zt: v0.27.3 -> v0.27.4
Release 0.27.3
What's New
-
Docker images for
ztCLI -
New Raft interaction commands
raft-leaveallows removal of controllers from the raft clusterraft-listlists all connected controllers and their version/connected statusfabric raft list-memberssame info as the agent command, but over rest
Component Updates and Bug Fixes
-
github.com/hanzozt/agent: v1.0.7 -> v1.0.8
-
github.com/hanzozt/channel/v2: v2.0.25 -> v2.0.26
-
github.com/hanzozt/edge: v0.24.95 -> v0.24.115
- Issue #1292 - Support alternative tproxy configuration methods
-
github.com/hanzozt/edge-api: v0.25.6 (new)
-
github.com/hanzozt/fabric: v0.22.7 -> v0.22.19
- Issue #592 - Incoming "gateway" connections should be logged at a socket level
- Issue #588 - Make service events more consistent
- Issue #589 - Add duration to circuit updated and deleted events
- Issue #508 - Refactor router debug ops for multiple controllers
-
github.com/hanzozt/identity: v1.0.29 -> v1.0.30
-
github.com/hanzozt/runzmd: v1.0.7 -> v1.0.9
-
github.com/hanzozt/sdk-golang: v0.18.21 -> v0.18.26
-
github.com/hanzozt/storage: v0.1.31 -> v0.1.33
-
github.com/hanzozt/transport/v2: v2.0.49 -> v2.0.50
-
github.com/hanzozt/zt: v0.27.2 -> v0.27.3
- Issue #974 - tunnel "host" and "proxy" modes shouldn't run the nameserver
- Issue #972 - tunnel segfault
Release 0.27.2
What's New
- Bug fixes
Component Updates and Bug Fixes
-
github.com/hanzozt/channel/v2: v2.0.24 -> v2.0.25
-
github.com/hanzozt/edge: v0.24.86 -> v0.24.95
- Issue #1282 - Ensure entity count events can be configured to only be emitted on the leader
- Issue #1279 - Constrain config-type schema to accept only object types
-
github.com/hanzozt/fabric: v0.22.1 -> v0.22.7
- Issue #573 - Ensure specific events aren't duplicated in raft cluster
- Issue #577 - JSON Event formatter isn't putting events on their own line
- Issue #571 - Move raft.advertiseAddress to ctrl for consistency
- Issue #569 - Support automatic migration and agent based migration
- Issue #567 - Remove link dropped_msg metrics for closed links
- Issue #566 - Link listeners aren't properly configuring channel out queue size
-
github.com/hanzozt/foundation/v2: v2.0.9 -> v2.0.10
-
github.com/hanzozt/identity: v1.0.28 -> v1.0.29
-
github.com/hanzozt/sdk-golang: v0.18.19 -> v0.18.21
-
github.com/hanzozt/storage: v0.1.30 -> v0.1.31
-
github.com/hanzozt/transport/v2: v2.0.48 -> v2.0.49
-
github.com/hanzozt/metrics: v1.2.2 -> v1.2.3
-
github.com/hanzozt/zt: v0.27.1 -> v0.27.2
- Issue #916 - Allow defining resource tags via json in the cli
Release 0.27.1
What's New
- Event streaming over websocket
zt fabric stream events- Events use same JSON formatting as the file based streaming
- Plain Text formatting removed
- Individual streaming of metrics/circuits removed in favor of unified events streaming
- Improvements to router/tunneler terminator creation
- Create terminator requests are now idempotent, so repeated requests will not result in multiple terminators
- Create terminator requests are now asynchronous, so responses will no longer get timed out
- There is new timer metric from routers, timing how long terminator creates take:
xgress_edge_tunnel.terminator.create_timer
Component Updates and Bug Fixes
-
github.com/hanzozt/edge: v0.24.75 -> v0.24.86
- Issue #1272 - Mark xgress_edge and xgress_edge_tunnel created terminators as system entity
- Issue #1270 - Make xgress_edge_tunnel service hosting more scalabe
- Issue #1268 - session deletion can get stalled by restarts
-
github.com/hanzozt/fabric: v0.21.36 -> v0.22.1
- Issue #563 - Allow streaming events over webscocket, replacing stream circuits and stream metrics
- Issue #552 - Add minimum cost delta for smart routing
- Issue #558 - Allow terminators to be marked as system entities
-
github.com/hanzozt/zt: v0.27.0 -> v0.27.1
- Issue #928 - zt fabric update terminator should not require setting router
- Issue #929 - zit fabric list terminators isn't showing cost or dynamic cost
Release 0.27.0
What's New
- Ziti CLI
- The CLI has been cleaned up and unused, unusable and underused components have been removed or hidden
- Add create/delete transit-router CLI commands
- Issue-706 - Add port check to quickstart
Ziti CLI
- The update command has been removed. It was non-functional, so this should not affect anyone
- The adhoc, ping and playbook commands have been removed. These were ansible and vagrant commands that were not widely used.
- Make the art command hidden, doesn't need to be removed, leave it as an easter egg
- Move zt ps command under zt agent. Remove all zt ps subcommands, as they already exist as zt agent subcommands
- Add
zt controllerandzt routercommands- They should work exactly the same as
zt-controllerandzt router - The standalone binaries for
zt-controllerandzt-routerare deprecated and will be removed in a future release
- They should work exactly the same as
- Add hidden
zt tunnelcommand- Should work exactly the same as
zt-tunnel - Is hidden as
zt-edge-tunnelis the preferred tunnelling application - The standalone binary
zt-tunnelis deprecated and will be removed in a future release
- Should work exactly the same as
- The db, log-format and unwrap commands have been moved under a new ops command
- zt executable download management has been deprecated
- The init and uninstall commands have been removed
- The install, upgrade, use and version commands have been hidden and will be hidden once tests using them are updated or replaced
- The demo and tutorial commands have been moved under the new learn subcommand
zt edge enrollnow has a verbose option for additional debugging- The
zt edgeCLI now support create/delete transit-router. This allows transit/fabric routers to be provisioned using an enrollment process, rather than requiring certs to be created externally. Note that this requires that the fabric router config file has acsrsection.
Component Updates and Bug Fixes
-
github.com/hanzozt/agent: v1.0.5 -> v1.0.7
-
github.com/hanzozt/channel/v2: v2.0.12 -> v2.0.24
-
github.com/hanzozt/edge: v0.24.36 -> v0.24.75
- Issue #1253 - Panic in controller getting hello from edge router
- Issue #1233 - edge-routers ref link in identities endpoint is incorrectly keyed
- Issue #1234 - identities missing service-config link ref
- Issue #1232 - edge management api identity-types endpoint produces incorrect links
-
github.com/hanzozt/fabric: v0.21.17 -> v0.21.36
- Issue #525 - Update metrics message propagation from router to controller for HA
-
github.com/hanzozt/foundation/v2: v2.0.7 -> v2.0.9
-
github.com/hanzozt/identity: v1.0.20 -> v1.0.28
-
github.com/hanzozt/runzmd: v1.0.3 -> v1.0.7
-
github.com/hanzozt/sdk-golang: v0.16.146 -> v0.18.19
-
github.com/hanzozt/storage: v0.1.26 -> v0.1.30
-
github.com/hanzozt/transport/v2: v2.0.38 -> v2.0.48
-
github.com/hanzozt/metrics: v1.1.5 -> v1.2.2
-
github.com/hanzozt/zt: v0.26.11 -> v0.26.12
- Issue #892 - Add timeout to zt agent controller snapshot-db command
- Issue #917 - ZITI_BIN_ROOT is incorrect in docker env
- Issue #912 - Binaries not updated in docker-compose env with new image
- Issue #897 - Add CLI options to manage /edge/v1/transit-routers
- Issue #706 - Add port check to quickstart
Older Changelogs
Changelogs for previous releases can be found in changelogs.