Skip to content

Releases: lolepezy/rpki-prover

0.3.2

10 Feb 12:54
Compare
Choose a tag to compare
  • Add /api/config API end-point that dumps the configuration of the running instance.
  • Add rpkiprover_ prefix to all metrics.

0.3.1

06 Feb 14:23
Compare
Choose a tag to compare
  • Add --no-rrdp and --no-rsync options to control repository fetching. Setting both options means validation will work with only cached objects.
  • Add --max-total-tree-size, --max-ta-repositories, --max-certificate-path-depth, --max-object-size, --min-object-size, --top-down-timeout for setting validation fencing limits. Run rpki-prover --help for more information.
  • Optimise fetching of large rsync trees

NOTE: Cache format is incompatible with the previous releases, so ~/.rpki/cache directory needs to be cleaned up for this release to start.

0.3.0

06 Feb 14:06
Compare
Choose a tag to compare
  • Introduces an isolation model using separate processes for fetching repositories (both RRDP and rsync) and parsing objects from them. This allows limiting resources (time, memory allocations)  for each of the repositories separately and prevents the majority of DoS attacks on the validator. It also reduces heap fragmentation and allows for a smaller main process footprint.

  • Per-repository metrics that are available for Prometheus and in the UI.

  • Use happy-eyeballs-like DNS resolver for http(s) requests, preventing long downloads of repositories with misconfigured IPv6 addresses.

  • Multiple adjustments for API endpoints (/api/validations, /api/metrics) to have a stable JSON format instead of the automatically generated one.

  • Multiple fixes for better stability and resiliency: time-limited validation, handling extremely long object URLs, handling TAs that take forever to validate, etc.

NOTE: Cache format is incompatible with the previous releases, so ~/.rpki/cache directory needs to be cleaned up for this release to start.

v0.1.0

26 Jun 13:28
Compare
Choose a tag to compare
v0.1.0 Pre-release
Pre-release