This release primarily adds a new Per-Member Document Store feature to IXP Manager and fixes a security issue. It also has a small number of bug fixes and improvements. All IX's running < v5.6.0 are advised to upgrade.
Summary:
git --no-pager diff --shortstat --no-merges v5.5.0 v5.6.0
138 files changed, 12118 insertions(+), 3682 deletions(-)
Upgrade Instructions
Please follow the official upgrade documentation without skipping any steps.
There are no additional release specific steps required.
Security Fix
This release includes a fix for a security bug introduced in v4.9.0.
The bug allows logged in non-administrator users to affect changes to a non-service affecting database table.
To allow people a chance to upgrade, we will delay publishing more information on the security issue until Friday, May 29th 2020 .
Credit to David Croft (@davidc), an elected member director of LONAP, for finding and responsibly disclosing this issue.
Per-Member Document Store
We introduced a general document store in v5.4.0 which allows administrators to upload documents to be made generally available for specific user classes (public, customer user, customer admin, superadmin).
This release introduces a per-member document store which supports:
- Upload any file type.
- Edit uploaded files including name, description, minimum access privilege and replacing the file itself.
- Display of text (
.txt) and display and parsing of Markdown (.md) files within IXP Manager. - Directory hierarchy allowing the categorization of files.
- Each directory can have explanatory text.
- Deletion of files and recursive deletion of directories.
- Logging of destructive actions.
As an additional useful convenience, the per-member document store presents a virtual directory which collates any patch panel files that have been uploaded to a member's current or past cross connect record.
Please see the complete official document here.
Small Features & Improvements
- Display MD5 password for RS/RC peering sessions on customer portal.
- (Re)implemented logging for failed auth events - #642
- Route servers: review and update IPv4 martian list (see 282fe10) - also closes #589
- Route servers: fully disable standard community filtering if route server ASN is 32bit (see notes in 4372d79).
- Add 400G as an edge port option.
- Removed a large chunk of internal database result caching as this has proven endlessly problematic. In reality, the MySQL result cache will handle this anyway.
- Allow a customer to add an inital MAC address. Removes check for >0 MACs. Resovles issue #643.
- [IM] Better percentage members per VLAN stats and add VLAN to switch configuration explorer
- Max prefixes for peering sessions should be available in IX-F member export