OpenBGPD 9.2 released
Claudio Jeker <[email protected]> Thu, 6 Aug 2026 15:22:53 +0200
| Newsgroups | gmane.os.openbsd.tech |
|---|---|
| Message-ID | <[email protected]> |
We have released OpenBGPD 9.2, which will be arriving in the
OpenBGPD directory of your local OpenBSD mirror soon.
This release includes the following changes to the previous release:
* Require negotiation of the 'as-4byte' capability by default.
Sessions with legacy speakers unable to handle this capability
can still be downgraded through explicit configuration, but our
long term goal is to drop support for old 2-byte only clients.
* Rework fast reconnect and the IdleHold timer in a way that fixes
too fast reconnects after a NOTIFICATION was sent out.
* `bgpctl neighbor X up` now opens a connection to the neighbor for
session in state active and sessions that are passive.
* Various fixes in the Adj-RIB-Out handling and bring back optimized
`addpath send all` updates.
* Include example ASPA filter rule to the default config.
* Further improve CH hash performance.
* Automatically set 'fib-update no' when the extended nexthop encoding
capability is configured. Currently IPv4 routes with IPv6 nexthops
are supported only for the IX RS deployment use-case where there is
no need for a FIB.
* Enforce the use of 'fib-update no' when the extended nexthop
encoding capability is configured.
* Limit ASPATH and AS4_PATH attributes to a maximum of 750 elements.
* Fix handling of unknown extended communities.
* Improve the 'as-4byte' fixup handling for old 2byte only clients.
When old clients use the extended message capability it is possible
to trigger a case where the reconstructed ASPATH attribute would
overflow the maximum buffer size.
* Various fixes for defects found by a code review by 7ASecurity.
According to their scoring system 0 critical, 1 high, 14 medium,
and 3 low issues were found and fixed. One defect classified as
medium is still open but only affects VPN and EVPN AFI/SAFI pairs.
* Various minor fixes for defects detected by automated code review.
OpenBGPD-portable is known to compile and run on FreeBSD and the
Linux distributions Alpine, Debian, Fedora, RHEL/CentOS and Ubuntu.
It is our hope that packagers take interest and help adapt OpenBGPD-portable
to more distributions.
We welcome feedback and improvements from the broader community.
Thanks to all of the contributors who helped make this release
possible.