Release 0.27.6

What's New

• Makes inspect CLI more discoverable by adding subcommands for inspectable values
• Adds new inspection allowing configs to be retrieved: ziti fabric inspect config
• Many improvements to edge-router/tunneler hosting performance with large numbers of hosted services
  • Routers should no longer overwhelm controller while setting up or reestablishing hosting
• Adds ability to disable router
• Adds CLI command to compact offline bbolt database: ziti ops db compact <src> <dst>
• Adds CLI command to re-enroll edge routers: ziti edge re-enroll edge-router
• Routers can now be disabled. Connections to the controller from disabled routers will be rejected.
  • Disable with: ziti fabric update router <router-id> --disabled
  • Enable with: ziti fabric update router <router-id> --disabled=false

Component Updates and Bug Fixes

• github.com/openziti/agent: v1.0.8 -> v1.0.10

• github.com/openziti/channel/v2: v2.0.27 -> v2.0.53

  • Issue #83 - Improve protocol mismatch error(s)
  • Issue #93 - Fix atomic 64-bit alignment error on arm devices

• github.com/openziti/edge: v0.24.125 -> v0.24.224

  • Issue #1373 - Add support for disabled flag to edge and transit routers
  • Issue #1374 - Multiple MFA enrollments cannot be cleaned up by administrators
  • Issue #1336 - xgress_edge_tunnel shouldn't stop/start host on control channel reconnect
  • Issue #1369 - Add missing entity type id for TransitRouter
  • Issue #1366 - Error message incorrectly state 'invalid api session' when it's an invalid session
  • Issue #1364 - Cache api-sessions for tunneler router so we don't need to unnecessarily create new sessions
  • Issue #1362 - Rate limit terminator creates for router/tunneler
  • Issue #1359 - Sessions creates should be idempotent
  • Issue #1355 - Handle duplicate create terminator requests if create terminator fails
  • Issue #1350 - Router event processing can deadlock
  • Issue #1329 - UDP connections can drop data if datagrams are > 10k in size
  • Issue #1310 - Creating a cert backed ext-jwt-signer causes nil dereference

• github.com/openziti/edge-api: v0.25.6 -> v0.25.9

• github.com/openziti/fabric: v0.22.24 -> v0.22.76

  • Issue #651 - Add router enable/disable mechanism
  • Issue #648 - Add rate limiter pool to router for operations with potential to flood the controller
  • Issue #610 - Fix router disconnect when endpoint removed from cluster
  • Issue #622 - fatal error: concurrent map iteration and map write in logContext.WireEntry
  • Issue #507 - Add configuration for control channel heartbeat
  • Issue #584 - Add cluster events
  • Issue #599 - Add release and transfer leadership commands
  • Issue #606 - Ensure consistent use of peer address
  • Issue #598 - Add support to fabric inspect to propagate inspect to other controllers
  • Issue #597 - Make raft settings configurable
  • Issue #604 - Don't create link dropped msg metric until channel bind time
  • Issue #638 - Fix atomic 64-bit alignment error on arm devices

• github.com/openziti/foundation/v2: v2.0.10 -> v2.0.18

• github.com/openziti/identity: v1.0.30 -> v1.0.42

• github.com/openziti/runzmd: v1.0.9 -> v1.0.18

• github.com/openziti/sdk-golang: v0.18.28 -> v0.18.76

  • Issue #356 - sdk connections should respect net.Conn deadline related API specifications

• github.com/openziti/storage: v0.1.34 -> v0.1.45

• github.com/openziti/transport/v2: v2.0.51 -> v2.0.68

• github.com/openziti/jwks: v1.0.2 -> v1.0.3

• github.com/openziti/metrics: v1.2.3 -> v1.2.16

• github.com/openziti/ziti: v0.27.5 -> v0.27.6

  • Issue #1041 - Add ziti compact command to CLI
  • Issue #1032 - ziti edge create service fails silently if config names don't exist
  • Issue #1031 - Fixed quickstart bug with arm and arm64 ambiguity when running quickstart on arm architecture