This patch release is created to address the issue with the binaries from 0.15.0 (#4960)

Improvements

• The checks to prevent failures similar to 0.15.0 were added.
• Beacon grouping was fixed.
• Explicit setting of the grace period for non-base TRCs is now enforced.
• nil-deref panic on session events after routing table close was fixed.

Dependencies

• Bazel was upgraded to 9.1.1.
• Security updates for quic-go, golang.org/x/crypto, golang.org/x/net, google.golang.org/grpc and others.

New Contributors

• @mkowalski made their first contribution in #4954

Full Changelog: v0.15.0...v0.15.1

v0.15.1 "Schimberig" Latest

Latest

Compare

Choose a tag to compare

Please use v0.15.1 instead since the binaries for this release were built incorrectly.

New features and improvements

• STUN implementation for NAT traversal was added.
• Applications can now run without a SCION daemon by communicating with the control service directly and running daemon functionality in-process.
• Selection algorithm of the beacon store can now be changed with options.
• Subject template can now be extracted from an existing certificate or CSR.
• Voting certificates can now be created without ISD-AS.
• scion-pki UX was improved.
• Beacon diversity calculation bug was fixed.
• Repeated beacon registration errors are now handled gracefully.
• Grace period is considered when checking validity for DRKey.

Documentation

• UDP underlay documentation was updated.
• SIG docs were improved.

Building, testing, code quality

• Code base was modernized with Go upgrade.
• We made it clearer that certain files are generated and should not be edited directly.

Dependencies

• We revered back to using the mattn SQLite driver to address database issues (#4904)
• We're using Go 1.26.0 now.
• Bazel rules were upgraded.
• Security updates for quic-go, golang.org/x/crypto, google.golang.org/grpc and others.

New Contributors

• @jdslab made their first contribution in #4740
• @rolbk made their first contribution in #4868
• @nicorusti made their first contribution in #4895
• @jeltevanbommel made their first contribution in #4906

Full Changelog: v0.14.0...v0.15.0

v0.15.0 "Schimberig"

Compare

Choose a tag to compare

What's Changed

New features and improvements

• Connect RPC support was added on server and client side. Happy eyeballs is used on a client side.
• A new beacon extension containing the control and discovery service addresses of the AS was added, so less SVC resolution is done now.
• Pluggable segment registration was implemented.
• Various improvements were done for SQLite usage in the storage layer.
• A simple BPF port filter was added to enable the use of non-XDP raw sockets by the router underlay providers.
• Path MTU calculation was fixed for shortcut paths.

Documentation

• SGRP section was added.
• The demo network tutorial was further improved.
• KMS can now be configured in the TRC signing ceremony builder.
• Various small fixes are included too.

Building, testing, code quality

• We've upgraded to golangci-lint v2, fixing various linter findings at the same time.
• Different graph topologies can be generated and used in tests now.
• Local topology certificate validity was increased.

Dependencies

Various dependencies were updated:

• We're using Go 1.24.2 now.
• gopkg.in/yaml.v3 is used instead of gopkg.in/yaml.v2.
• We cleaned up the tools required for Bazel.
• Security updates for quic-go, golang.org/x/crypto, go-viper/mapstructure/v2 and others.

New Contributors

• @seadog007 made their first contribution in #4764
• @utkn made their first contribution in #4782
• @knmeynell made their first contribution in #4825
• @ddogfoodd made their first contribution in #4844

Full Changelog: v0.13.0...v0.14.0

v0.14.0 "Tannhorn"

Compare

Choose a tag to compare

What's Changed

New features and improvements

• A major refactoring of router was done to enable multiple underlay implementations.
• Handling TCP/SCION packets at the last-mile AS is now supported.
• BGP ASNs in local topologies are now supported.
• Flaky tests were fixed.
• Various changes for running SCION on Windows.

Documentation

• The demo network tutorial had multiple improvements, including an automated Docker setup.
• SIG documentation was updated.
• Various small updates were made as well.

Building, testing, code quality

• We are using Bazel 8.1.1 now. Bazel configuration was overhauled.
• Cross-platform RPM packages are now available.
• New linters were added.
• Lots of small refactorings to improve code quality and use the best code practices.

Dependencies

Various dependencies were updated:

• We are using Go 1.24.0 now.
• Security updates for quic-go, golang.org/x/crypto, golang.org/x/net and others.
• Bazel-related rules to use with Bazel 8.

New Contributors

• @LencigGaer made their first contribution in #4663
• @aaronbojarski made their first contribution in #4690
• @johnstudarus made their first contribution in #4738
• @guilloboi1917 made their first contribution in #4724

Full Changelog: v0.12.0...v0.13.0

v0.13.0 "Fürstein"

Compare

Choose a tag to compare

What's Changed

New Features and improvements

• The dispatcher is gone! Well, mostly. We still have a shim for backward compatibility.
• The migration to ConnectRPC has begun. The first PR has been merged. Many more to come.
• We now build RPM packages for the x86_64 platform. Stay tuned for other platforms as the Bazel rules improve.
• The router code got faster by about 15%.
• For the price of one small patch, SCION can now build for windows too.
• Scion-pki has acquired some new features. Find them in the scion-pki documentation.

Documentation

• We have updated and improved the deployment tutorial.
• The cryptography documentation now includes instructions to use scion-pki and sports a ceremony script builder UI (yes, embedded in the documentation!).
• Added OpenWRT installation instructions.

Configuration Changes

• The unused QUIC configuration field is gone from the Control Service's schema. It must be removed from toml files.
• The router configuration gained a new field: router.bfd. This allows to configure BFD on all links by default. Subfields are the same as in the bfd field of links in the topology configuration. The defaults apply to links that do not have an explicit configuration for a given field. Previously, this was done by setting the environment variables SCION_EXPERIMENTAL_BFD_*. Those are now ignored.
• The topology.json file gained a new field: dispatched_ports. While transitioning away from the dispatcher, SCION applications on dispatcher-less hosts are expected to listen on a restricted port range. This must be set to the same value on updated hosts and on their updated border routers. The recommended value is dispatched_ports="31000 - 32767". This must be configured, there is no safe default.
• The field "reconnect_to_dispatcher" is gone. It must be removed from all toml files (i.e. the control service and the SCION daemon).

Building, Testing, and Code Quality

As usual, we've put quite a bit of effort in improving build reliability, burying dead code, simplifying, adding tests, fixing flakes, filling potholes, and complying with best practice and standards (including SCION published specs). Most notable in the latter category were:

• router - race condition: #4282 - Another finding of VerifiedSCION (Thanks @jcp19!)
• router - drop invalid packets packets: #4415, #4558
• router - return SCMP on invalid dst address: #4126
• router - strengthen the checks performed by parsePath: #4524, #4531 - Another findind of VerifiedSCION (Thanks @jcp19 and @mlimbeck!)
• topology - allow peering links between core ASes: #4484

We have also made a small improvement to Wireshark's SCION support: heuristic detection of SCION traffic is now supported. With the removal of the dispatcher and associated limited port range, this became nice-to-have.

Dependencies

We have updated a few of our dependencies. Most notably our minimum Go version, which is now 1.22.7. Also updated are:

• Certifi: 2024.2.2 -> 2024.7.4
• Antlr: 0.6.0 -> 0.6.1
• rules_js: 1.33.1 -> 2.0.0-rc6
• nodejs: latest -> 16.19.0
• pnpm: latest -> 9.4.0
• spectral-cli: 6.11.0 -> 6.11.1

New Contributors

• @mseewer made their first contribution in #4532
• @GioBar00 made their first contribution in #4536
• @martenwallewein made their first contribution in #4610
• @thomasgruebl made their first contribution in #4619

Full Changelog: v0.11.0...v0.12.0

v0.12.0 "Rooterberg"

Compare

Choose a tag to compare