This release brings a number of new features, along with the usual
smattering of bug fixes and cleanups.
One minor-but-major change is that we no longer wait for IPv6 Duplicate
Address Detection to complete. This reduces execution time by 2 seconds.
New features:
- firewall: support ingressPolicy=(open|same-bridge) for isolating bridges as in Docker (#584)
- dhcp ipam: support customizing dhcp options from CNI args (#670)
- Allow setting sysctls on a particular interface (#669)
- bridge: Add macspoofchk support (#639).
Bug fixes:
- portmap: fix bug that new udp connection deletes all existing conntrack entries (#705)
- portmap: fix checkPorts result when chain does not exist (#707)
- dhcp: fixed DHCP problem that broke when fast retry was added (#681)
- ipvlan: Send Gratuitous ARP after IPs are set (#675)
Improvements
- host-device: Bring interfaces up after moving into container (#679)
- Explicitly Disable Duplicate Address Detection For Container Side Veth (#695)
- Replace arping package with arp_notify (#687)
- host-device: add ipam support for dpdk device (#642)