For each version, changes are listed in order of importance. Minor changes are not listed here. Each change is mapped to a category identified with a specific icon:
- 💥: breaking change
- ✨: new feature
- 🗑: removed feature
- 🔒: security fix
- 🩹: bug fix
- 🌱: miscellaneous change
- 🩹 inlet: fix decoding of QinQ in Ethernet packets
- 🩹 console: fix ordering of top rows when multiple sampling rates are used
- 🌱 docker: update ClickHouse to 24.8 (not mandatory)
- 🌱 docker: update to Traefik 3.1 (not mandatory)
- 🌱 docker: add docker/docker-compose-local.yml for local overrides
For upgrading, you should use the "upgrade tarball" instead of the "quickstart
tarball". This new tarball does not upgrade the configuration files, nor the
.env file.
- 🩹 console: sort results by number of packets when unit is packets per second
- 🌱 inlet: use AS path from routing component if sFlow received an empty one
- 🌱 console: add
bidirectionalandprevious-periodas configurable values for default visualize options - 🌱 docker: build IPinfo updater image from CI
- 🌱 docker: update Kafka UI to 0.7.2
- 🌱 docker: provide an upgrade tarball in addition to the quickstart tarball
- 🌱 build: minimal Go version to build is now 1.22
- 💥 console: persist metadata cache on the default
docker composesetup - 🩹 orchestrator: fix population of
DstNetSiteandSrcNetSite - 🩹 orchestrator: remove previous networks.csv temporary files on start
- 🌱 inlet: add support Netflow V5
- 🌱 console: add support for PostgreSQL and MySQL to store filters
- 🌱 console: add
console→homepage-graph-timerangeto define the time range for the homepage graph - 🌱 console: enable round-robin for ClickHouse connections
- 🌱 console: display TCP and UDP port names if known
- 🌱 orchestrator: add ClickHouse version check for INTERPOLATE bug
- 🌱 docker: add monitoring stack with Prometheus and Grafana (work in progress, not enabled by default, check
.env) - 🌱 docker: update to Traefik 3.0 (not mandatory)
- 🌱 docker: update ClickHouse to 24.3 (not mandatory)
- 🌱 docker: switch from Redis to Valkey (not mandatory)
- 🌱 docker: build IPinfo updater image to make it available for non-x86 architectures and ensure the databases are downloaded only when an update is available
- 🩹 orchestrator: do not use AS names from GeoIP as tenant for networks
- 🩹 inlet: fix sampling rate parsing for IPFIX packets using "packet interval"
- 🩹 inlet: fix
inlet→metadata→providers→targetsfor gNMI provider
- 🩹 inlet: fix versioning of metadata cache
- 🩹 orchestrator: fix panic in networks CSV refresher
On this release, geo IP is now performed in ClickHouse instead of inlet. When
using the standard docker compose setup, the configuration should be
automatically migrated from the inlet component to the orchestrator component.
This also changes how geo IP is used for AS numbers: geo IP is used as last
resort when configured. It also increases memory usage (1.3GB for ClickHouse).
Another new feature is the ability to use a ClickHouse cluster deployment. This
is enabled when specifying a cluster name in clickhouse→cluster. There is no
automatic migration of an existing database. You should start from scratch and
copy data from the previous setup. Do not try to enable the cluster mode on
existing setup!
New installations should also get better compression and performance from the main table, due to a change to the primary key used for this table. Check this Altinity article if you want to apply the change on your installation.
Support for Docker Compose V1 (docker-compose command) has been removed in
favor of Docker Compose V2 (docker compose command). On Ubuntu/Debian systems,
this means you can no longer use the docker-compose package. On Ubuntu, you
can install the docker-compose-v2 package. For other options, check the
documentation for installing the Compose plugin.
- 💥 inlet: GeoIP data is moved from inlets to ClickHouse, add city and region
- 💥 console: persist console database on the default
docker composesetup - 💥 docker: remove support for
docker-composeV1 - ✨ orchestrator: add support for ClickHouse clusters
- ✨ inlet: add gNMI metadata provider
- ✨ inlet: static metadata provider can provide exporter and interface metadata
- ✨ inlet: static metadata provider can fetch its configuration from an HTTP endpoint
- ✨ inlet: metadata can be fetched from multiple providers (eg, static, then SNMP)
- ✨ inlet: add support for several SNMPv2 communities
- ✨ inlet: timestamps for Netflow/IPFIX can now be retrieved from packet content, see
inlet→flow→inputs→timestamp-source - 🩹 cmd: fix parsing of
inlet→metadata→provider→ports - 🩹 console: fix use of
InIfBoundaryandOutIfBoundaryas dimensions - 🌱 orchestrator: add TLS support to connect to ClickHouse database
- 🌱 docker: update to Redis 7.2, Kafka 3.7, Kafka UI 0.7.1, and Zookeeper 3.8 (not mandatory)
- 🌱 orchestrator: improved ClickHouse schema to increase performance
- 💥 inlet: many metrics renamed to match Prometheus best practices
- ✨ inlet: add the following collected data (disabled by default):
MPLSLabels,MPLS1stLabel,MPLS2ndLabel,MPLS3rdLabel, andMPLS4thLabel - 🩹 inlet: fix static metadata provider configuration validation
- 🩹 inlet: fix a performance regression when enriching flows
- 🩹 inlet: do not decode L4 header if IP packet is fragmented
- 🩹 inlet: handle exporters using several sampling rates
- 🌱 docker: update ClickHouse to 23.8 (this is not mandatory)
- 🌱 orchestrator: add
orchestrator→clickhouse→prometheus-endpointto configure an endpoint to expose metrics to Prometheus
- 🩹 docker: ensure ClickHouse init script is executed even when database already exists
- 🌱 console: add filtering support for custom columns
- 🌱 inlet: update Expr, the language behind the classifiers: support for variables
- 🌱 inlet: support for RFC 7133 for IPFIX (data link frame)
- 🌱 orchestrator: improve performance when looking up for
SrcNetPrefixandDstNetPrefixwhen these columns are materialized
- 💥 cmd: use
AKVORADO_CFG_as a prefix for environment variables used to modify configuration (AKVORADO_CFG_ORCHESTRATOR_HTTP_LISTENinstead ofAKVORADO_ORCHESTRATOR_HTTP_LISTEN) - 💥 inlet:
inlet→metadata→provider(snmp)→portsis now a map from exporter subnets to ports, instead of a map from agent subnets to ports. This is aligned with howcommunitiesandsecurity-parametersoptions behave. - ✨ inlet: support for IPinfo geo IP database and use it by default
- ✨ inlet: metadata retrieval is now pluggable. In addition to SNMP, it is
now possible to set exporter names, interface names and descriptions directly
in the configuration file. See
inlet→metadata. - ✨ inlet: routing information is now pluggable. See
inlet→routing. - ✨ inlet: BioRIS provider to retrieve routing information
- ✨ inlet: allow extraction of prefix length from routing information. See
inlet→core→net-providers. - ✨ inlet: add the following collected data (disabled by default):
IPTTLIPTosFragmentIDandFragmentOffsetTCPFlagsICMPv4Type,ICMPv4Code,ICMPv6Type,ICMPv6Code,ICMPv4, andICMPv6NextHop
- ✨ orchestrator: add custom dictionaries for additional flow hydration. See
orchestrator→schema→custom-dictionaries. Currently, filtering on the generated data is not available. - 🩹 inlet: fix Netflow processing when template is received with data
- 🩹 inlet: use sampling rate in Netflow data packet if available
- 🩹 console: fix display when using “%” units and interface speed is 0
- 🩹 orchestrator: create flows table with
allow_suspicious_low_cardinality_typesto ensure we can useLowCardinality(IPv6). - 🌱 inlet: update Expr, the language behind the classifiers: new builtins are available
- 🌱 build: minimum supported Node version is now 16
- 🌱 docker: move Docker-related files to
docker/ - 🌱 docker: update ClickHouse to 23.3 (not mandatory)
- 🌱 docker: update to Zookeeper 3.8 (not mandatory)
- 🌱 docker: update to Kafka 3.5 (not mandatory, but there is also a configuration change)
- 🌱 docker: add healthchecks for Redis and Zookeeper
- 🌱 console: emphasize trajectory on Sankey graphs
- 🩹 docker: ensure Kafka is not using KRaft by default
- 🩹 console: fix
SrcVlanandDstVlanas a dimension - 🌱 orchestrator: add
methodandheadersto specify HTTP method and additional headers to use when requesting a network source
- ✨ orchestrator: add an option to materialize a column instead of using an alias
- 🩹 inlet: fix caching when setting interface name or description
- 🩹 console: fix subnet aggregation when IPv4 or IPv6 is set to its default value
- 🩹 console: fix
SrcNetPrefix,DstNetPrefix,PacketSize, andPacketSizeBucketdimensions
- 💥 docker-compose: the configuration files are now shipped in a
config/directory: you need to move yourakvorado.yamlinconfig/as well - 💥 inlet: unknown interfaces are not skipped anymore
- ✨ console: add subnet aggregation for
SrcAddrandDstAddr - ✨ inlet: expose
Interface.IndexandInterface.VLANto interface classification - ✨ inlet: add
Reject()to the set of classification functions to drop the current flow - ✨ inlet: add
SetName()andSetDescription()to modify interface name and description during classification - ✨ inlet: add
Format()to format a string during classification - 🩹 inlet: fix parsing of sFlow containing IPv4/IPv6 headers
- 🌱 orchestrator: accept an
!includetag to include other YAML files inakvorado.yaml
When upgrading to this release, it takes some time to reduce the storage size for a few columns.
- ✨ console: add “%” to available units
- 🩹 inlet: fix parsing of sFlow IPv4/IPv6 data
- 🩹 inlet: fix
Bytesvalue for sFlow (this is the L3 length) - 🩹 orchestrator: fix disabling of
DstASPath - 🩹 console: fix time range selection
- 🩹 console: fix calculation of the L2 overhead when selecting L2 bps
- 🩹 console: fix behavior of dimension limit field when empty
- 🌱 console: accept
INandNOTINoperators forExporterAddr,SrcAddr,DstAddr,SrcAddrNAT,DstAddrNAT - 🌱 inlet: optimize to reduce the number of queries to the system clock
- 🌱 orchestrator: reduce storage for
InIfDescription,OutIfDescription,SrcAddr,DstAddr,Bytes, andPackets
This is an important bugfix release. DstNet* values were classified using the
source address instead of the destination address.
- 🩹 orchestrator: fix
DstNet*values - 🌱 inlet: if available, use sFlow for
DstASPath - 🌱 docker: update Kafka UI image
This version introduces the ability to customize the data schema used by
Akvorado. This change is quite invasive and you should be cautious when
deploying it. It requires a restart of ClickHouse after upgrading the
orchestrator. It also takes some time to reduce the storage size for SrcPort
and DstPort.
The orchestrator automatically defines the TTL for the system log tables (like
system.query_log). The default TTL is 30 days. You can disable that by setting
orchestrator→clickhouse→system-log-ttl to 0.
- ✨ inlet: add
schema→enabled,schema→disabled,schema→main-table-only, andschema→not-main-table-onlyto alter collected data - ✨ inlet: add the following collected data (disabled by default):
SrcAddrNATandDstAddrNATSrcPortNATandDstPortNATSrcMACandDstMACSrcVlanandDstVlan
- 🩹 inlet: handle correctly interfaces with high indexes for sFlow
- 🩹 docker: fix Kafka healthcheck
- 🌱 inlet: improve decoding/encoding performance (twice faster!)
- 🌱 orchestrator: set TTL for ClickHouse system log tables and
exporterstable - 🌱 orchestrator: reduce storage size for
SrcPortandDstPort - 🌱 orchestrator: add
clickhouse→kafka→engine-settingsto configure additional settings for the Kafka engine - 🌱 common: Go profiler endpoints are enabled by default
There is a schema update in this version: you also have to restart ClickHouse after upgrading for it to pick the new schema.
This version also introduces a cache for some HTTP requests, notably those to
plot the graphs in the “Visualize” tab. The default backend is in-memory,
however the shipped akvorado.yaml configuration file is using Redis instead.
The docker-compose setup has also been updated to start a Redis container for
this usage. Use of Redis is preferred but on upgrade, you need to enable it
explicitely by adding console→http→cache in your configuration.
- ✨ console: cache some costly requests to the backend
- ✨ console: add
SrcNetPrefixandDstNetPrefix(as a dimension and a filter attribute) - ✨ inlet: add
inlet→flow→inputs→use-src-addr-for-exporter-addrto override exporter address - 🌱 console: add
limitandgraph-typetoconsole→default-visualize-options - 🌱 docker: published
docker-compose.ymlfile pins Akvorado image to the associated release - 🌱 docker: update Zookeeper and Kafka images (this upgrade is optional)
- ✨ console: add 100% stacked graph type
- 🩹 inlet: handle non-fatal BMP decoding errors more gracefully
- 🩹 inlet: fix a small memory leak in BMP collector
- 🩹 console: fix selection of the aggregate table to not get empty graphs
- 🩹 console: use configured dimensions limit for “Visualize” tab
- 🌱 inlet: optimize BMP CPU usage, memory usage, and lock times
- 🌱 inlet: replace LRU cache for classifiers by a time-based cache
- 🌱 inlet: add TLS support for Kafka transport
- 🌱 console: Ctrl-Enter or Cmd-Enter when editing a filter now applies the changes
- 🌱 console: switch to TypeScript for the frontend code
- ✨ orchestrator: add
orchestrator→network-sourcesto fetch network attributes with HTTP - ✨ console: add
console→database→saved-filtersto populate filters from the configuration file - 🩹 doc: durations must be written using a suffix (like
5s) - 🌱 docker: provider a tarball with essential files to install or upgrade a
docker-composesetup - 🌱 inlet: skip unknown AFI/SAFI in BMP route monitoring messages
- 🩹 inlet: fix SrcAS when receiving flows with sFlow
- 🩹 inlet: do not half-close BMP connection (a remote IOS XR closes its own end)
- 🌱 docker: split demo exporters out of
docker-compose.yml - 🌱 console: make the upper limit for dimensions configurable
(
console→dimensions-limit)
This release features a BMP collector to grab BGP routes from one or
several routers. The routes can be used to determine source and
destination AS (instead of using GeoIP or information from the flows)
but also the AS paths and the communities. Check inlet→bmp and
inlet→core configuration settings for more information.
- ✨ inlet: BMP collector to get AS numbers, AS paths, and communities from BGP PR #155
- ✨ inlet: add
inlet→snmp→agentsto override exporter IP address for SNMP queries - 🩹 inlet: handle sFlow specific interface number for locally originated/terminated traffic, discarded traffic and traffic sent to multiple interfaces
- 🌱 build: Docker image is built using Nix instead of Alpine
This release bumps the minimal required version for ClickHouse to
22.4. The docker-compose file has been updated to use ClickHouse
22.8 (which is a long term version). Moreover, Akvorado now has its
own organisation and the code is hosted at
akvorado/akvorado.
- 💥 console: make ClickHouse interpolate missing values (ClickHouse 22.4+ is required)
- 🩹 orchestrator: validate configuration of other services on start
- 🩹 inlet: correctly parse
inlet→snmp→communitieswhen it is just a string - 🌱 cmd: print a shorter message when an internal error happens when parsing configuration
- 🌱 inlet: add
inlet→snmp→portsto configure SNMP exporter ports
- ✨ inlet: add support for flow rate-limiting with
inlet→flow→rate-limit - 🌱 inlet: improve performance of GeoIP lookup
- 🌱 inlet: add
inlet→core→asn-providersto specify how to get AS numbers.inlet→core→ignore-asn-from-flowis deprecated and mapped togeoip.
- ✨ inlet: add support for SNMPv3 protocol
- 🌱 inlet:
inlet→snmp→default-communityis now deprecated - 🌱 console: make “previous period” line more visible
- 🩹 geoip: fix
inlet→geoip→country-databaserename toinlet→geoip→geo-database
- ✨ console: add an option to also display flows in the opposite direction on time series graph
- ✨ console: add an option to also display the previous period (day, week, month, year) on stacked graphs
- 🌱 inlet: Kafka key is now a 4-byte random value making scaling less dependent on the number of exporters
- 🌱 demo-exporter: add a setting to automatically generate a reverse flow
- 🌱 docker-compose: loosen required privileges for
conntrack-fixer
SrcCountry/DstCountry were incorrectly filled in aggregated
tables. This is fixed with this release, but this implies dropping the
existing data (only the country information). See PR #61 for more
details.
- ✨ inlet:
inlet→core→default-sampling-ratealso accepts a map from subnet to sampling rate - ✨ inlet:
inlet→core→override-sampling-rateenables overriding the sampling rate received from a device - 🩹 orchestrator: fix
SrcCountry/DstCountrycolumns in aggregated tables PR #61 - 🌱 inlet:
inlet→geoip→country-databasehas been renamed toinlet→geoip→geo-database - 🌱 inlet: add counters for GeoIP database hit/miss
- 🌱 inlet:
inlet→snmp→communitiesaccepts subnets as keys - 🌱 docker-compose: disable healthcheck for the conntrack-fixer container
- 💥 cmd: replace the
fake-exportersubcommand bydemo-exporterto make easier to understand its purpose - 🌱 console: make
<<and!<<operators more efficient
- ✨ console: add
<</!<<operator forSrcAddrandDstAddrto match on a subnet PR #57 - 🩹 build: remove
-dirtyfrom version number in released Docker images - 🌱 console: hide
::ffff:prefix from IPv6-mapped IPv4 addresses
- 🩹 cmd: do not merge user-provided lists with defaults when parsing configuration
- 🩹 docker-compose: make
docker-compose.ymlwork with Docker Compose v2/v3 - 🩹 inlet: update UDP packet counters when receiving packets, not after decoding
- 🌱 console: add configuration for default options of the visualize tab and the top widgets to display on the home page.
This release introduce a new protobuf schema. When using
docker-compose, a restart of ClickHouse is needed after upgrading
the orchestrator to load this new schema.
- ✨ inlet: add sflow support PR #23
- ✨ inlet: classify exporters to group, role, site, region, and tenant PR #14
- ✨ orchestrator: add role, site, region, and tenant attributes to networks PR #15
- ✨ docker-compose: clean conntrack entries when inlet container starts
- 🩹 console: fix use of
InIfBoundaryandOutIfBoundaryas dimensions PR #11 - 🩹 build: make Akvorado compile on macOS
- 🌱 inlet: ask the kernel to timestamp incoming packets
- 🌱 orchestrator: limit number of Kafka consumers in ClickHouse to the number of CPUs
- 🌱 doc: add configuration for Juniper devices
- 🌱 docker-compose: add UI for Apache Kafka to help debug starter issues
- ✨ inlet: add an option to ignore ASN received from flows PR #7
- 🩹 console: fix maximum value for the grid view
- 🌱 orchestrator: adapt partition key for each consolidated flow tables in ClickHouse to limit the number of partitions (this change won't be applied on an existing installation)
- 🌱 inlet: add
default-sampling-rateas an option - 🌱 inlet: only require either input or output interface for a valid flow
- 🌱 build: switch from Yarn to npm as a Javascript package manager PR #4
- 🌱 docker-compose: pull image from GitHub instead of building it
- 🌱 doc: add more tips to the troubleshooting section
- 🔒 docker-compose: expose two HTTP endpoints, one public (8081) and one private (8080)
- 🌱 docker-compose: restart ClickHouse container on failure
- 🚀 first public release under the AGPL 3.0 license