Releases: lolepezy/rpki-prover
0.3.2
- Add
/api/config
API end-point that dumps the configuration of the running instance. - Add
rpkiprover_
prefix to all metrics.
0.3.1
- Add
--no-rrdp
and--no-rsync
options to control repository fetching. Setting both options means validation will work with only cached objects. - Add
--max-total-tree-size
,--max-ta-repositories
,--max-certificate-path-depth
,--max-object-size
,--min-object-size
,--top-down-timeout
for setting validation fencing limits. Runrpki-prover --help
for more information. - Optimise fetching of large rsync trees
NOTE: Cache format is incompatible with the previous releases, so ~/.rpki/cache directory needs to be cleaned up for this release to start.
0.3.0
-
Introduces an isolation model using separate processes for fetching repositories (both RRDP and rsync) and parsing objects from them. This allows limiting resources (time, memory allocations) for each of the repositories separately and prevents the majority of DoS attacks on the validator. It also reduces heap fragmentation and allows for a smaller main process footprint.
-
Per-repository metrics that are available for Prometheus and in the UI.
-
Use happy-eyeballs-like DNS resolver for http(s) requests, preventing long downloads of repositories with misconfigured IPv6 addresses.
-
Multiple adjustments for API endpoints (/api/validations, /api/metrics) to have a stable JSON format instead of the automatically generated one.
-
Multiple fixes for better stability and resiliency: time-limited validation, handling extremely long object URLs, handling TAs that take forever to validate, etc.
NOTE: Cache format is incompatible with the previous releases, so ~/.rpki/cache directory needs to be cleaned up for this release to start.
v0.1.0
First release.
Read about features on https://github.com/lolepezy/rpki-prover/blob/master/README.md