ISAP
Version 5.12.0 - Early deployment
Release notes
- Feature: Add support for rate limiting on SRV6 (PC-2549)
- Bugfix: Ensure that SRV8 sends request to next host in balancer on timeout (PC-2516) (PC-2517)
- Dependency:
Special manual upgrade actions
There are no special actions to perform during the upgrade.
Changed components
Show changed componentsHide changed components
New module versions
No new module versions.
New resource versions
- UEP 2.0 HTTP Proxy
- UEP 2.0 HTTP Proxy v.5.3.0 Show release notesHide release notes
- Feature: Support rate limiting (PC-2549) (MCH-1095)
- Deprecated: Breaks compatibility by making JWT public key mandatory (TS-3217)
HTTP Reverse Proxy
New action versions
No new action versions.
Included components
Modules
Resources
Actions
Version 5.9.0 - Early deployment
Release notes
- Feature: Add possibility to remove TLS1.0 and TLS1.1 (PC-1500)
- Dependency:
Special manual upgrade actions
There are no special actions to perform during the upgrade.
Changed components
Show changed componentsHide changed components
New module versions
No new module versions.
New resource versions
ApplyClusterChanges
UEP 2.0 HTTP Proxy
UEP 2.0 HTTP Proxy v.5.2.0 (intermediate version) Show release notesHide release notes
- Improvement: Support webrtc /api/v1 in central resource (PC-1768)
- Deprecated: Breaks compatibility by making JWT public key mandatory (TS-3217)
UEP 2.0 HTTP Proxy v.5.1.0 Show release notesHide release notes
- Improvement: Add possibility to remove TLS1.0 and TLS1.1 (PC-1500)
UEP 2.0 Cloud Web Proxy
HTTP Reverse Proxy
HTTP Reverse Proxy v.3.7.0 (intermediate version) Show release notesHide release notes
- Feature: Support http only
Generic Templated NGINX Service
New action versions
No new action versions.
Included components
Modules
Resources
Actions
Version 5.8.0 - Early deployment
Release notes
- Feature: Centralized WebRTC resource (MCH-655)
- Feature: Centralized Polycom resource (PC-850)
- Dependency:
Special manual upgrade actions
There are no special actions to perform during the upgrade.
Changed components
Show changed componentsHide changed components
New module versions
No new module versions.
New resource versions
No new resource versions.
New action versions
No new action versions.
Included components
Modules
Resources
Actions
Version 5.7.1 - Early deployment
Release notes
- Feature: Make timeout of HTTP Reverse Proxy configurable (MCH-582)
- Dependency:
Special manual upgrade actions
There are no special actions to perform during the upgrade.
Changed components
Show changed componentsHide changed components
New module versions
No new module versions.
New resource versions
Generic ISAP authentication wall
- Generic ISAP authentication wall v.1.4.0 Show release notesHide release notes
- Feature: Multiple SMP targets in a single authentication wall (FMG-281)
- Improvement: Use /v2/login reverse proxy target (FMG-281)
New action versions
No new action versions.
Included components
Modules
Resources
Actions
Version 5.7.0 - Early deployment
Release notes
- Feature: Support Generic ISAP Authentication Wall resource (MCH-441)
- Feature: Support NGINX RawWebResource 2.0.0 (MCH-441)
- Bugfix: Incorrect Template Restrictions (MCH-441)
- Dependency:
Special manual upgrade actions
There are no special actions to perform during the upgrade.
Changed components
Show changed componentsHide changed components
New module versions
No new module versions.
New resource versions
HTTP Reverse Proxy
HTTP Reverse Proxy v.3.4.0 (intermediate version) Show release notesHide release notes
- Feature: Allow sop selection
- Feature: Allow to specify JWT token for validation
HTTP Reverse Proxy v.3.3.0 (intermediate version) Show release notesHide release notes
- Feature: PROXY protocol logging support
HTTP Reverse Proxy v.3.2.0 (intermediate version) Show release notesHide release notes
- Feature: Support custom port for http and https (M0)
HTTP Reverse Proxy v.3.14.0 (intermediate version) Show release notesHide release notes
- Improvement: Added STS security request (TS-8409)
- Improvement: Mitigate vulnerability to SWEET32 (TS-9338)
- Improvement: Allow to disable backup in balancer
HTTP Reverse Proxy v.3.13.0 (intermediate version) Show release notesHide release notes
- Improvement: Increase size of buffer
HTTP Reverse Proxy v.3.12.0 (intermediate version) Show release notesHide release notes
- Improvement: Proxy pass authorization header (CM-1374)
HTTP Reverse Proxy v.3.11.0 (intermediate version) Show release notesHide release notes
- Feature: Send HTTP 429 code when rate limiting (MCH-1095)
HTTP Reverse Proxy v.3.10.0 (intermediate version) Show release notesHide release notes
- Feature: Rate-limiting (MCH-1130)
HTTP Reverse Proxy v.3.1.2 (intermediate version) Show release notesHide release notes
- Bugfix: send hostname in host header when proxying (M0)
- Bugfix: print configuration file correctly in debug log (M0)
Generic ISAP authentication wall
New action versions
No new action versions.
Included components
Modules
Resources
Actions
Version 5.6.9 - Early deployment
Release notes
- Bugfix: Merge branch 'hotfix/leading-zeroes' into develop (M0)
- Bugfix: MCH-280 Don't use leading zeroes for sopkeys in inventory (M0)
- Bugfix: PC-234 Make fields required for cloudphone and webrtc proxies (M0)
- Bugfix: MCH-151 Use DNS servers from sop.ini as upstream (M0)
- Bugfix: M25650 Put prov certs in .input.yml (M0)
- Bugfix: M25433 Don't use ansible workaround in 2.8 (M0)
- Dependency:
Special manual upgrade actions
There are no special actions to perform during the upgrade.
Changed components
Show changed componentsHide changed components
New module versions
No new module versions.
New resource versions
No new resource versions.
New action versions
No new action versions.
Included components
Modules
Resources
Actions
Version 5.6.5 - Early deployment
Release notes
- Bugfix: Fix custom firewall rules (M0)
- Bugfix: Ensure ssl certificate directories are properly created (M0)
- Bugfix: Allow that http provisioning is optional (M0)
- Dependency:
Special manual upgrade actions
There are no special actions to perform during the upgrade.
Changed components
Show changed componentsHide changed components
New module versions
No new module versions.
New resource versions
SSH Connection v.2.1.0 (intermediate version) Show release notesHide release notes
- Feature: Implement caching (M25041) - link
SSH Connection v.2.0.5 (intermediate version) Show release notesHide release notes
- just debugging some stuff
New action versions
No new action versions.
Included components
Modules
Resources
Actions
Version 5.6.0 - Early deployment
Release notes
- Feature: Expose public IP using PROXY protocol (M23879)
- Feature: Centralize UEP 2.0 Cloud Web Proxy (M23946)
- Feature: Centralize UEP 2.0 HTTP Proxy (M23945)
- Bugfix: Restart nginx after crash (M22880)
- Bugfix: Cleanup nginx worker afters reload (M23636)
- Dependency:
Special manual upgrade actions
There are no special actions to perform during the upgrade.
Changed components
Show changed componentsHide changed components
New module versions
No new module versions.
New resource versions
- UEP 2.0 HTTP Proxy
- UEP 2.0 HTTP Proxy v.5.0.0 Show release notesHide release notes
- Feature: Support centralized proxy to WebRTC (M23946) - link
- Feature: WebRTC DNS only mode (M23946) - link
- Feature: Regular expression in domain name (M23946) - link
- Bugfix: Content-Length Header typo
UEP 2.0 Cloud Web Proxy
New action versions
No new action versions.
Included components
Modules
Resources
Actions
Version 5.5.0 - Early deployment
Release notes
- Feature: Added ReverseProxy profile (M21253)
- Dependency:
Special manual upgrade actions
There are no special actions to perform during the upgrade.
Changed components
Show changed componentsHide changed components
New module versions
No new module versions.
New resource versions
UEP 2.0 HTTP Proxy
UEP 2.0 HTTP Proxy v.4.0.1 (intermediate version) Show release notesHide release notes
- Bugfix: Ensure valid sopkey is used (M0)
UEP 2.0 HTTP Proxy v.4.0.0 (intermediate version) Show release notesHide release notes
- Bugfix: Fix logging location (M0)
- Bugfix: Allow SRV6 to serve a list of unauthenticated paths (M19079) - link
- Bugfix: Remove Apache 2 support (M0)
UEP 2.0 HTTP Proxy v.3.0.3 (intermediate version) Show release notesHide release notes
- Deprecated: Unreleased (M0)
UEP 2.0 HTTP Proxy v.3.0.2 (intermediate version) Show release notesHide release notes
- Bugfix: Allow to disable HTTP2 (M0)
HTTP Provisioning
- HTTP Provisioning v.1.0.0 Show release notesHide release notes
- Feature: Initial version creating the nginx upstream used in the provisioning (M18956)
- Deprecated: Never used in production (M21451)
UEP 2.0 Cloud Web Proxy
UEP 2.0 Cloud Web Proxy v.3.1.1 (intermediate version) Show release notesHide release notes
- Bugfix: Ensure valid sopkey is used (M0)
UEP 2.0 Cloud Web Proxy v.3.1.0 (intermediate version) Show release notesHide release notes
- Feature: Allow access with JWT token (M0)
UEP 2.0 Cloud Web Proxy v.3.0.0 (intermediate version) Show release notesHide release notes
- Improvement: Remove support for Apache 2 (M0)
- Feature: Support custom certificates (M0)
UEP 2.0 Cloud Web Proxy v.2.0.5 (intermediate version) Show release notesHide release notes
- Bugfix: Improve logging (#10195935)
- Bugfix: Fix UMA (M0)
UEP 2.0 Cloud Web Proxy v.2.0.4 (intermediate version) Show release notesHide release notes
- Bugfix: Forward proxied host name (M0)
UEP 2.0 Cloud Web Proxy v.2.0.3 (intermediate version) Show release notesHide release notes
- Bugfix: Allow to disable HTTP2 (M0)
UEP 2.0 Cloud Web Proxy v.2.0.2 (intermediate version) Show release notesHide release notes
- Bugfix: Create proxy on all hosts in the cluster (M17459) - link
- Bugfix: restore compatibility with apache
HTTP Reverse Proxy
HTTP Reverse Proxy v.3.1.0 (intermediate version) Show release notesHide release notes
- Feature: Support SSH tunnels (M20034) - link
HTTP Reverse Proxy v.3.0.2 (intermediate version) Show release notesHide release notes
- Feature: Allow limiting access by IP (M20034) - link
HTTP Reverse Proxy v.3.0.1 (intermediate version) Show release notesHide release notes
- Bugfix: Hostname forwarding (M0)
HTTP Reverse Proxy v.3.0.0 (intermediate version) Show release notesHide release notes
- Improvement: Remove Apache 2 Support (M0)
- Bugfix: Ensure OPTIONS are answered with 204 (M0)
HTTP Reverse Proxy v.2.1.0 (intermediate version) Show release notesHide release notes
- Feature: Added the ability to provide different ciphers suite (M18899) - link
- Deprecated: HTTP Serve generates incorrect configuration (M0)
HTTP Reverse Proxy v.2.0.9 (intermediate version) Show release notesHide release notes
- Bugfix: Allow to generate certificates on load balanced ISAPs (M0)
HTTP Reverse Proxy v.2.0.8 (intermediate version) Show release notesHide release notes
- Bugfix: Take into account destination prefix (M0)
HTTP Reverse Proxy v.2.0.7 (intermediate version) Show release notesHide release notes
- Bugfix: Destinations using https and a domain name were faulty (M0)
HTTP Reverse Proxy v.2.0.6 (intermediate version) Show release notesHide release notes
- Bugfix: Correctly sets the Host header when proxying (M0)
HTTP Reverse Proxy v.2.0.5 (intermediate version) Show release notesHide release notes
- Bugfix: Set correct server name (M0)
HTTP Reverse Proxy v.2.0.4 (intermediate version) Show release notesHide release notes
- Bugfix: Allow to disable HTTP2 (M0)
Escaux Connect Web Service
New action versions
No new action versions.
Included components
Modules
Resources
Actions
Version 5.4.0 - Early deployment
Release notes
- Bugfix: Ensure SRV6 is synched on every ISAP (M20688)
- Feature: Provide SRV2 for legacy Connect Me on Isap (M0)
- Dependency:
Special manual upgrade actions
There are no special actions to perform during the upgrade.
Changed components
Show changed componentsHide changed components
New module versions
No new module versions.
New resource versions
No new resource versions.
New action versions
No new action versions.
Included components
Modules
Resources
Actions
Version 5.3.0 - Early deployment
Release notes
- Feature: Allow reverse proxy to filter access by IP (M0020034)
- Dependency:
Special manual upgrade actions
There are no special actions to perform during the upgrade.
Changed components
Show changed componentsHide changed components
New module versions
No new module versions.
New resource versions
No new resource versions.
New action versions
No new action versions.
Included components
Modules
Resources
Actions
Version 5.2.0 - Early deployment
Release notes
- Feature: Support JWT in cookie (M0)
- Dependency:
Special manual upgrade actions
There are no special actions to perform during the upgrade.
Changed components
Show changed componentsHide changed components
New module versions
No new module versions.
New resource versions
No new resource versions.
New action versions
No new action versions.
Included components
Modules
Resources
Actions
Version 5.1.0 - Early deployment
Release notes
- Bugfix: Support iOS 11 (#10204803) (M0)
- Dependency:
Special manual upgrade actions
There are no special actions to perform during the upgrade.
Changed components
Show changed componentsHide changed components
New module versions
No new module versions.
New resource versions
No new resource versions.
New action versions
No new action versions.
Included components
Modules
Resources
Actions
Version 5.0.5 - Early deployment
Release notes
- Feature: Added the ability to provide different ciphers suite (M18899)
- Bugfix: Allow to generate certificates on load balanced ISAPs (M0)
- Bugfix: Allow to disable HTTP2 (M0)
- Dependency:
Special manual upgrade actions
There are no special actions to perform during the upgrade.
Changed components
Show changed componentsHide changed components
New module versions
- Network
- Network v.3.0.0 Show release notesHide release notes
- Feature: Support for automatic failover to standby server (M0)
- Feature: Support active-standby link aggregation with bond interfaces (M11308) - link
Network v.2.2.0 (intermediate version) Show release notesHide release notes
- Feature: Allow to reconfigure the network without cutting the SMP Connection (M0)
New resource versions
No new resource versions.
New action versions
No new action versions.
Included components
Modules
Resources
Actions
Version 5.0.2 - Early deployment
Release notes
- Improvement: ISAP v5 switched from Apache2 Web Server to a NGINX Webserver (M0)
- Feature: Supports OAuth validation (M0)
- Bugfix: Fixed SRV8 and SRV4 issues (M0)
- Dependency:
Special manual upgrade actions
There are no special actions to perform during the upgrade.
Changed components
Show changed componentsHide changed components
New module versions
No new module versions.
New resource versions
- SSH Connection
- SSH Connection v.2.0.2 (intermediate version) Show release notesHide release notes
- Bugfix: Configuration cache was never updated
- Deprecated: Custom SSH host incorrectly configured (M0)
HTTP Reverse Proxy
HTTP Reverse Proxy v.2.0.2 (intermediate version) Show release notesHide release notes
- Bugfix: Use correct certificate (M0)
- Deprecated: Invalid certificate selection (M0)
HTTP Reverse Proxy v.2.0.10 (intermediate version) Show release notesHide release notes
New action versions
No new action versions.
Included components
Modules
Resources
Actions
Version 5.0.1 - Deprecated
Release notes
- Deprecated: SRV4 resources where not generating correct config (M0)
- Deprecated: SRV8 resources where not generating correct certificate configuration (M0)
- Dependency:
Special manual upgrade actions
There are no special actions to perform during the upgrade.
Changed components
Show changed componentsHide changed components
New module versions
No new module versions.
New resource versions
RawWebService
SSH Connection
SSH Connection v.2.0.0 Show release notesHide release notes
- Feature: Support ssh routers with ECDSA keys (M0)
- Deprecated: Custom SSH host incorrectly configured (M0)
UEP 2.0 HTTP Proxy
UEP 2.0 Cloud Web Proxy
HTTP Reverse Proxy
- HTTP Reverse Proxy v.2.0.1 Show release notesHide release notes
- Bugfix: Prevent max opened files error (M18427) - link
- Bugfix: Use custom access log file (M0)
- Bugfix: Only write config if certificate is created (M0)
- Deprecated: Invalid certificate selection (M0)
New action versions
No new action versions.
Included components
Modules
Resources
Actions
Version 5.0.0 - Deprecated
Release notes
- Improvement: ISAP v5 switched from Apache2 Web Server to a NGINX Webserver (M0)
- Feature: Supports OAuth validation (M0)
- Deprecated: SRV4 resources where not generating correct config (M0)
- Deprecated: SRV8 resources where not generating correct certificate configuration (M0)
- Dependency:
Special manual upgrade actions
There are no special actions to perform during the upgrade.
Changed components
Show changed componentsHide changed components
New module versions
No new module versions.
New resource versions
UEP 2.0 HTTP Proxy
UEP 2.0 HTTP Proxy v.2.1.1 (intermediate version) Show release notesHide release notes
- Improvement: Added support form "Authorization" HTTP header in CORS requests (M0)
HTTP Reverse Proxy
HTTP Reverse Proxy v.1.1.1 (intermediate version) Show release notesHide release notes
- Bugfix: Prevent max opened files error (M18427) - link
New action versions
No new action versions.
Included components
Modules
Resources
Actions
Version 4.0.0 - Early deployment
Release notes
- Feature: UEP2 Core and WebRTC can now be configured through the SMP API (M16300)
- Feature: Make the ssh connection between the UEP and the WebRTC optional (M16512)
- Feature: Maximum number of client configuration is now configurable (M17756)
- Bugfix: resource_cleanup was cleaning too many resources (M17792)
- Dependency:
Special manual upgrade actions
When upgrading from 3.2, the profile SshProxy needs to be renamed first to UEP2-Proxy
Changed components
Show changed componentsHide changed components
New module versions
Shell
- Shell v.2.1.0 Show release notesHide release notes
- Feature: Convert plugins to new library model (M14774) - link
- Improvement: The default interface for the admin user is now the Escaux CLI instead of the SOP shell (M16256) - link
- Potential update impact level 1 : no critical impact expected. Update can be applied without risk of breaking critical functionality.: You will have to upgrade other modules too. The module documentation lists special upgrade actions for this version (M14774) - link
SSH router
SNMP Agent
SNMP Agent v.4.1.0 (intermediate version) Show release notesHide release notes
- Feature: Include finished calls passed during the last polling period in computation (M11435) - link
- Feature: Support of Dahdi Trunk (M9308) - link
- Feature: Support NodeJS api monitoring (M16185) - link
- Feature: Convert plugins to new library model (M14774) - link
- Improvement: Rating oriented probe to check connectivity (M13333) - link
- Improvement: Rating oriented probe for monitoring daily rating (M13332) - link
- Improvement: Support internal error in dialogic dsi probe (M13812) - link
- Improvement: Improve dahdi probe for lua expression (M15598) - link
- Improvement: Improve sip probe for lua expression (M13970) - link
- Improvement: Generate Probe ID to support inheritance (M16035) - link
- Bugfix: Fix false positive errors when installed on vsop (M12943) - link
- Bugfix: Fixed error with dmidecode command on vsops (M0)
- Bugfix: Support DL360 G9 and DL20 on baseline 3 (M15310) - link
- Bugfix: Upgrade SNMP subsystem for HP hardware probes support (M15763) - link
- Potential update impact level 1 : no critical impact expected. Update can be applied without risk of breaking critical functionality.: You will have to upgrade the Shell module and other modules too. Please verify the release notes of the Shell module 1.23.0 to find out which modules need to be upgraded. (M14774) - link
ISAP utils
ISAP utils v.1.0.0 (intermediate version) Show release notesHide release notes
- Bugfix: Avoid transient HTTP 403 Forbidden during apply changes (M14313) - link
- Feature: Support for SRV8 resources (M0014694) - link
- Deprecated: Resources containing alphabetic characters were removed (M17792) - link
System Base
- System Base v.2.3.1 Show release notesHide release notes
- Bugfix: Remove unused packages causing network to restart slowly
- Deprecated: Unused daemon process was causing high memory usage (M19120) - link
System Base v.2.3.0 (intermediate version) Show release notesHide release notes
- Bugfix: Coredumps appeared on the VSOP host filesystem instead of the VSOP filesystem (M16350) - link
- Bugfix: Apply changes could remove configuration in some rare cases (M16800) - link
- Bugfix: Remove obsolete public key (M16229) - link
- Feature: Generate more complex passwords (M16373) - link
- Deprecated: Unused daemon process was causing high memory usage (M19120) - link
New resource versions
UEP 2.0 HTTP Proxy
SSH Connection
New action versions
No new action versions.
Included components
Modules
Resources
Actions
Version 3.1.0 - Early deployment
Release notes
- Feature: Use ISAP as proxy for the SMP (M15854)
- Bugfix: Update modules to fix issues that can affect the template (M0)
- Dependency:
Special manual upgrade actions
There are no special actions to perform during the upgrade.
Changed components
Show changed componentsHide changed components
New module versions
Web Server
SSH router
System Base
- System Base v.2.2.1 Show release notesHide release notes
- Bugfix: Add mission version from packages (M0)
- Bugfix: Restored the package escaux-evaluate (M0)
- Deprecated: Adds an obsolete public key to the SOP (M16229) - link
System Base v.2.2.0 (intermediate version) Show release notesHide release notes
- Feature: Resource cleanup tool (M14313) - link
- Improvement: Added the ability to rotate logs file hourly (M13315) - link
- Bugfix: Coredumps were not generated in some cases (M13582) - link
- Bugfix: When doing rollback the configuration files were not restored (M14238) - link
- Deprecated: Adds an obsolete public key to the SOP (M16229) - link
System Base v.2.1.1 (intermediate version) Show release notesHide release notes
- Bugfix: Connection to the SMP could be lost when the module was downgraded to a version before 1.6.0 (M14760) - link
- Deprecated: Adds an obsolete public key to the SOP (M16229) - link
Mail Server
Local Admin Password
Local Admin Password v.1.1.3 (intermediate version) Show release notesHide release notes
- Bugfix: Really remove password full administrative password changes (M15525)
Software sources
Software sources v.1.2.1 (intermediate version) Show release notesHide release notes
- Bugfix: Connection to the SMP could be lost when the System Base module was downgraded to a version before 1.6.0 (M14760) - link
- Deprecated: Permissions on the hosts file were incorrect (M15819) - link
New resource versions
- HTTP Reverse Proxy
- HTTP Reverse Proxy v.1.1.0 Show release notesHide release notes
- Feature: Allow SOP key in destination (M14902) - link
- Improvement: Cookie domain was not processed correctly (M15044) - link
- Feature: Allow multiple destination configuration for failover capabilities (M15044) - link
New action versions
No new action versions.
Included components
Modules
Resources
Actions
Version 3.0.0 - Early deployment
Release notes
- Feature: Made modules installable with apt (M12365)
- Feature: Added security update task (M12365)
- Feature: Template made compatible with both UEP1 and UEP2 (M13632)
- Dependency:
Special manual upgrade actions
There are no special actions to perform during the upgrade.
Changed components
Show changed componentsHide changed components
New module versions
No new module versions.
New resource versions
No new resource versions.
New action versions
No new action versions.
Included components
Modules
Resources
Actions