Skip to content

Releases: painless-security/trust-router

Trust Router Monitoring

04 Jun 15:24
Compare
Choose a tag to compare

This is the release of v3.4.0 of the Trust Router. This release adds Trust Router monitoring support, fixes several bugs, and adds some general improvements to Trust Router operation.

New Features

  • Trust Router monitoring support
    • Configured with "monitoring" section in the "internal" configuration
    • Accessed using "trmon" utility
  • Support for running on non-default ports
    • AAA server and Trust Router ports specified as "hostname:port" in configuration
    • Port information propagated with TID and TRP messages
  • Add a "request_id" to TID requests
  • Add "-C" option to validate configuration without starting Trust Router

Enhancements and Bug Fixes
* GSS buffer reads now time out to prevent hung processes
* Improved subprocess cleanup
* Fixed several memory leaks
* Fixed several bugs in TRP protocol implementation
* Fixed bug in APC to CoI mapping
* Improvements to logging
* "tidc" utility returns nonzero value on failed TID request

To upgrade from a previous Trust Router

  1. Stop the existing Trust Router
  2. Back up your existing configuration
  3. Update your configuration
    * Add the "monitoring" section to enable monitoring
    * Use "hostname:peer" syntax for any peer Trust Routers on non-default ports
  4. Install the new Trust Router
  5. Start the new Trust Router

Packages for this release will appear on the package repositories soon.