|
| 1 | ++++ |
| 2 | +title = "25.03" |
| 3 | +weight = 251660942438.0 |
| 4 | ++++ |
| 5 | + |
| 6 | +## OVN 25.03 |
| 7 | + |
| 8 | +OVN 25.03 was initially released on 7 March, 2025. |
| 9 | +This version of OVN is currently supported for all bug fixes. |
| 10 | +Support for this version will end on 7 March, 2026. |
| 11 | + |
| 12 | +### v25.03.0 |
| 13 | +v25.03.0 was released on 7 March, 2025. |
| 14 | + |
| 15 | +[Github link](https://github.com/ovn-org/ovn/releases/tag/v25.03.0) |
| 16 | + |
| 17 | +Release Notes: |
| 18 | +``` |
| 19 | +OVN v25.03.0 - 07 Mar 2025 |
| 20 | +-------------------------- |
| 21 | + - Added support to choose selection methods - dp_hash or |
| 22 | + hash (with specified hash fields) for ECMP routes |
| 23 | + while choosing nexthop. |
| 24 | + - ovn-ic: Add support for route tag to prevent route learning. |
| 25 | + - Support for STT tunnels in ovn-encap-type is deprecated and will be |
| 26 | + removed in the next release. |
| 27 | + - The LRP option 'centralize_routing' has been removed. The behavior is now |
| 28 | + enabled in all cases where it is needed. |
| 29 | + - ovn-nb: Changed schema of ovn-nb to make networks optional within Logical |
| 30 | + Router Ports. |
| 31 | + - Added support for Spine-Leaf topology of logical switches by adding |
| 32 | + a new LSP type 'switch' that can directly connect two logical switches. |
| 33 | + Supported for both distributed and transit switches. |
| 34 | + - Bump python version required for building OVN to 3.7. |
| 35 | + - SSL/TLS: |
| 36 | + * TLSv1 and TLSv1.1 protocols are deprecated and disabled by default |
| 37 | + on OpenFlow and database connections. Use --ssl-protocols to turn |
| 38 | + them back on. Support will be fully removed in the next release. |
| 39 | + * OpenSSL 1.1.1 or newer is now required for SSL/TLS support. |
| 40 | + * The protocol list in --ssl-protocols or corresponding database column |
| 41 | + now supports specifying simple protocol ranges like: |
| 42 | + - "TLSv1-TLSv1.2" to enable all protocols between TLSv1 and TLSv1.2. |
| 43 | + - "TLSv1.2+" to enable protocol TLSv1.2 and later. |
| 44 | + The value must be a list of protocols or exactly one protocol range. |
| 45 | + * Added explicit support for TLSv1.3. It can now be enabled via |
| 46 | + --ssl-protocols (TLSv1.3 was supported in earlier versions only when |
| 47 | + this option was not set). TLS ciphersuites for TLSv1.3 and later can |
| 48 | + be configured via --ssl-ciphersuites (--ssl-ciphers only applies to |
| 49 | + TLSv1.2 and earlier). |
| 50 | + - Add "arp-nd-max-timeout-sec" config option to vswitchd external-ids to |
| 51 | + configure the interval (in seconds) between ovn-controller originated |
| 52 | + ARP/ND packets used for tracking ECMP next hop MAC addresses. |
| 53 | + - Auto flush ECMP symmetric reply connection states when an ECMP route is |
| 54 | + removed by the CMS. This behavior is controlled by the |
| 55 | + "ecmp_nexthop_monitor_enable" config option in the NB_Global table. |
| 56 | + Disabled by default. |
| 57 | + - Improved handling of IPv6 traffic by enabling address prefix tracking |
| 58 | + in OVS for both IPv4 and IPv6 addresses, whenever possible, reducing |
| 59 | + the amount of IPv6 datapath flows. |
| 60 | + - Add concept of Transit Routers, users are now allowed to specify |
| 61 | + options:requested-chassis for router ports; if the chassis is remote |
| 62 | + then the router port will behave as a remote port. |
| 63 | + - Added a new ACL option "persist-established" that allows for |
| 64 | + established connections to bypass ACL matching. This way, if an ACL |
| 65 | + match changes, traffic on the established connection can still pass. |
| 66 | + - Logical router policies can now be arranged in chains. Using the new |
| 67 | + "jump" action, combined with new "chain" and "jump_chain" columns, |
| 68 | + allows for policies to be chained together. |
| 69 | + - Reduce the max number of local datapath to 1024 when OVN is using VXLAN |
| 70 | + encapsulation type in OVN-interconnect mode. |
| 71 | + - Added vxlan_mode parameter in IC_NB_GLOBAL option column to enable or |
| 72 | + disable VXLAN encapsulation type in OVN-interconnect mode. |
| 73 | + - Dynamic Routing: |
| 74 | + * Add the option "dynamic-routing" to Logical Routers. If set to true |
| 75 | + static and connected routes matching the filter below are shared to the |
| 76 | + southbound "Advertised_Route" table for sharing outside of OVN. |
| 77 | + The routes can further be configured by setting |
| 78 | + `dynamic-routing-redistribute` on the LR or LRP. The LRP settings |
| 79 | + overwrite the LR settings for all routes using this interface to |
| 80 | + forward traffic on. |
| 81 | + * Allow Logical Routers to dynamically learn routes from outside the |
| 82 | + fabric. Routes entered into the "Learned_Route" table in the southbound |
| 83 | + database will be learned by the respective LR. They are included in the |
| 84 | + route table with a lower priority than static routes. |
| 85 | + * Add the option value "connected-as-host" to the |
| 86 | + "dynamic-routing-redistribute" LR and LRP option. If set then connected |
| 87 | + routes are announced as individual host routes. |
| 88 | + * Add the option "dynamic-routing-maintain-vrf" to LRPs. If set the |
| 89 | + ovn-controller will create a vrf named "ovnvrf" + datapath id that |
| 90 | + includes all advertised and learned routes. |
| 91 | + The vrf name can be overwritten with the "dynamic-routing-vrf-name" |
| 92 | + setting. |
| 93 | + * Add the option "dynamic-routing-port-name" to LRPs. If set only routes |
| 94 | + learned from a linux interfaces that is locally bound to the referenced |
| 95 | + LSP will be learned. Additionally support local overwrites for arbitrary |
| 96 | + interface names using "dynamic-routing-port-mapping". |
| 97 | + * The logical router port options "routing-protocol-redirect" and |
| 98 | + "routing-protocols" are now also usable on distributed gateway ports. |
| 99 | + * Logical router port options "routing-protocol-redirect" and |
| 100 | + "routing-protocols" are now considered stable. Their "experimental" tag |
| 101 | + was removed. |
| 102 | + - Add "options:ct-commit-all" to LR, that enables commit of all traffic |
| 103 | + to DNAT and SNAT zone when LR is stateful. |
| 104 | +
|
| 105 | +
|
| 106 | +``` |
| 107 | +[Changelog](../changelog_v25.03.0) |
0 commit comments