Infix v25.08.2

Changes

• Upgrade Linux kernel to 6.12.63 (LTS)
• Enable workaround for issue #670 by disabling iitod on styx platform. This
  prohibits software control of LEDs, leaving the default HW control, which
  has proven more stable on this platform
• Add support for configurable OSPF debug logging, issue #1281. Debug options
  can now be enabled per category (bfd, packet, ism, nsm, default-information,
  nssa). All debug options are disabled by default to prevent log flooding in
  production environments. See the documentation for usage examples
• Add support data collection script, useful when troubleshooting issues on
  deployed systems. Gathers system information, logs, and more. Issue #1287
• Enable kernel panic on lockups + hung tasks => console log + reboot. Also,
  enable watchdogd resource monitors, logs: memory/file system + descriptor
  usage. Issue #1318
• Enable CN9130 HW watchdog, and kernel test_lockup module, issue #1320

Fixes

• Fix #981: copying any file, including running-config, to the persistent
  back-end store for startup-config, does not take
• Fix #1203: copying any file, including startup-config, to running-config
  does not take

Infix v25.08.2-rc1

Changes

• Upgrade Linux kernel to 6.12.63 (LTS)
• Enable workaround for issue #670 by disabling iitod on styx platform. This
  prohibits software control of LEDs, leaving the default HW control, which
  has proven more stable on this platform
• Add support for configurable OSPF debug logging, issue #1281. Debug options
  can now be enabled per category (bfd, packet, ism, nsm, default-information,
  nssa). All debug options are disabled by default to prevent log flooding in
  production environments. See the documentation for usage examples
• Add support data collection script, useful when troubleshooting issues on
  deployed systems. Gathers system information, logs, and more. Issue #1287
• Enable kernel panic on lockups + hung tasks => console log + reboot. Also,
  enable watchdogd resource monitors, logs: memory/file system + descriptor
  usage. Issue #1318
• Enable CN9130 HW watchdog, and kernel test_lockup module, issue #1320

Fixes

• Fix #981: copying any file, including running-config, to the persistent
  back-end store for startup-config, does not take
• Fix #1203: copying any file, including startup-config, to running-config
  does not take

Infix v25.11.0

Note

Noteworthy changes and additions in this release:

• DHCPv6 client support
• Configurable support for TTL in GRE/VXLAN tunnels
• Extensive filtering support for syslog messages

Changes

• Upgrade Buildroot to 2025.02.8 (LTS)
• Upgrade Linux kernel to 6.12.60 (LTS)
• Initial support for 32-bit ARM systems, reference board: Raspberry Pi 2B
• Enable MVEBU SafeXcel Crypto Engine firmware for Marvell Armada SOCs (37xx, 7k, 8k, and CN913x series). Fixes kernel warnings about firmware load failures and crypto-safexcel probe errors on affected boards
• Major improvements to OSPF and BFD operational data and CLI commands:
  • CLI commands now use data from the operational datastore instead of calling vtysh directly, providing better integration and consistency
  • New show ip ospf command family (neighbor, interface, route) to align with industry standard CLI conventions. Legacy show ospf commands are deprecated but still work with warnings
  • The show ip ospf database subcommand has been dropped for now, the advanced user can still use vtysh from Bash if necessary, issue #1253
  • Extended BFD commands: show bfd (status), show bfd peers (detailed), show bfd peers brief (table format), and show bfd peer <address>
  • All command names now use singular form (interface, route, neighbor) matching Cisco/FRR conventions, as well as configure context naming
  • New support for configuring OSPF interface priority for DR/BDR election
• The DHCP client configuration has moved from /infix-dhcp-client:dhcp-client to /interfaces/interface[name]/ipv4/infix-dhcp-client:dhcp, issue #1109. The configuration is automatically migrated on upgrade. The DHCP client is now enabled using a presence container instead of a separate enabled leaf
• The enabled node for IPv4 autoconf (ZeroConf) has been dropped, autoconf is now a presence container. Configuration automatically migrated on upgrade
• Add DHCPv6 client support for per-interface IPv6 configuration, augmenting /interfaces/interface[name]/ipv6/infix-dhcpv6-client:dhcp, issue #1110
• Fix namespace for DHCPv4 client YANG module from urn:ietf:params:xml:ns:yang to urn:infix:params:xml:ns:yang to properly reflect custom implementation
• Improvements to sdcard.img generation, useful for developers mostly:
  • The NanoPi R2S bootloader is now automatically built and uploaded to the latest-boot release tag
  • The utils/mkimage.sh script now supports fetching the bootloader
  • The raspberrypi-rpi64 board's bootloader is now aptly named rpi64
• Add support for configuring TTL, ToS/DSCP, and Path MTU Discovery on GRE and VXLAN tunnels. This also changes the default TTL of tunnels to 64, from the kernel default (inherit), which in turn fixes reported issues with dropped OSPF Hello frames in GRE tunnels
• Document how to go from SD card to eMMC on BPi-R3
• Add CLI commands for managing boot partition order: show boot-order and set boot-order allow viewing and changing the boot order from the CLI, complementing the existing YANG RPC support, issue #1032
• Extended syslog filtering capabilities, issue #1091:
  • Add support for pattern matching using POSIX extended regular expressions on message content (IETF select-match feature)
  • Add support for advanced severity comparison: exact match (equals) and exclusion (block/stop) in addition to the default equals-or-higher (IETF select-adv-compare feature)
  • Add support for hostname-based filtering, useful when acting as a log server to route messages from different devices to separate log files
  • Add support for property-based filtering with operators (contains, isequal, startswith, regex, ereregex) on message properties (msg, msgid, programname, hostname, source, data), with optional case-insensitive and negate modifiers
• Update factory configuration for BPi-R3 and NanoPi R2S boards to enable DHCPv6 client on WAN interface and allow traffic forwarding from LAN to WAN zone in the firewall (this is what most users expect)
• New support command for collecting system diagnostics to aid in both troubleshooting and support. Run support collect > data.tar.gz locally or remotely via SSH to gather configuration, logs, network state, and system information (encryption using gpg available too)

Fixes

• Fix #855: User admin sometimes fails to be added to wheel group
• Fix #1112: setting hostname via DHCP client sometimes gets overridden by the configured system hostname
• Fix #1247: Prevent invalid configuration of OSPF backbone area (0.0.0.0) as stub or NSSA. The backbone must always be a normal area per RFC 2328. Any existing invalid configurations are automatically corrected during upgrade
• Fix #1255: serious regression in boot time, introduced in v25.10, delays the boot step "Mounting filesystems ...", from 30 seconds up to five minutes!
• Fix #1289: SSH host key generation warning at boot after factory reset
• Fix broken intra-document links in container and tunnel documentation
• Fix show dhcp-server command crashing with invalid timestamp format. DHCP lease expiry timestamps had double timezone suffix causing libyang validation errors
• Fix show dhcp-server output alignment. The EXPIRES column was misaligned when CLIENT ID field was empty, and CLIENT ID column was too narrow for typical 20-character client IDs

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.

Infix v25.11.0-rc2

Note

Noteworthy changes and additions in this release:

• DHCPv6 client support
• Configurable support for TTL in GRE/VXLAN tunnels
• Extensive filtering support for syslog messages

Changes

• Upgrade Buildroot to 2025.02.8 (LTS)
• Upgrade Linux kernel to 6.12.60 (LTS)
• Initial support for 32-bit ARM systems, reference board: Raspberry Pi 2B
• Enable MVEBU SafeXcel Crypto Engine firmware for Marvell Armada SOCs (37xx,
  7k, 8k, and CN913x series). Fixes kernel warnings about firmware load failures
  and crypto-safexcel probe errors on affected boards
• Major improvements to OSPF and BFD operational data and CLI commands:
  • CLI commands now use data from the operational datastore instead of
    calling vtysh directly, providing better integration and consistency
  • New show ip ospf command family (neighbor, interface, route) to align
    with industry standard CLI conventions. Legacy show ospf commands are
    deprecated but still work with warnings
  • The show ip ospf database subcommand has been dropped for now, the
    advanced user can still use vtysh from Bash if necessary, issue #1253
  • Extended BFD commands: show bfd (status), show bfd peers (detailed),
    show bfd peers brief (table format), and show bfd peer <address>
  • All command names now use singular form (interface, route, neighbor)
    matching Cisco/FRR conventions, as well as configure context naming
  • New support for configuring OSPF interface priority for DR/BDR election
• The DHCP client configuration has moved from /infix-dhcp-client:dhcp-client
  to /interfaces/interface[name]/ipv4/infix-dhcp-client:dhcp, issue #1109.
  The configuration is automatically migrated on upgrade. The DHCP client is
  now enabled using a presence container instead of a separate enabled leaf
• The enabled node for IPv4 autoconf (ZeroConf) has been dropped, autoconf
  is now a presence container. Configuration automatically migrated on upgrade
• Add DHCPv6 client support for per-interface IPv6 configuration, augmenting
  /interfaces/interface[name]/ipv6/infix-dhcpv6-client:dhcp, issue #1110
• Fix namespace for DHCPv4 client YANG module from urn:ietf:params:xml:ns:yang
  to urn:infix:params:xml:ns:yang to properly reflect custom implementation
• Improvements to sdcard.img generation, useful for developers mostly:
  • The NanoPi R2S bootloader is now automatically built and uploaded to
    the latest-boot release tag
  • The utils/mkimage.sh script now supports fetching the bootloader
  • The raspberrypi-rpi64 board's bootloader is now aptly named rpi64
• Add support for configuring TTL, ToS/DSCP, and Path MTU Discovery on GRE and
  VXLAN tunnels. This also changes the default TTL of tunnels to 64, from the
  kernel default (inherit), which in turn fixes reported issues with dropped
  OSPF Hello frames in GRE tunnels
• Document how to go from SD card to eMMC on BPi-R3
• Add CLI commands for managing boot partition order: show boot-order and
  set boot-order allow viewing and changing the boot order from the CLI,
  complementing the existing YANG RPC support, issue #1032
• Extended syslog filtering capabilities, issue #1091:
  • Add support for pattern matching using POSIX extended regular expressions
    on message content (IETF select-match feature)
  • Add support for advanced severity comparison: exact match (equals) and
    exclusion (block/stop) in addition to the default equals-or-higher
    (IETF select-adv-compare feature)
  • Add support for hostname-based filtering, useful when acting as a log
    server to route messages from different devices to separate log files
  • Add support for property-based filtering with operators (contains, isequal,
    startswith, regex, ereregex) on message properties (msg, msgid, programname,
    hostname, source, data), with optional case-insensitive and negate modifiers
• Update factory configuration for BPi-R3 and NanoPi R2S boards to enable
  DHCPv6 client on WAN interface and allow traffic forwarding from LAN to WAN
  zone in the firewall (this is what most users expect)
• New support command for collecting system diagnostics to aid in both
  troubleshooting and support. Run support collect > data.tar.gz
  locally or remotely via SSH to gather configuration, logs, network state,
  and system information (encryption using gpg available too)

Fixes

• Fix #855: User admin sometimes fails to be added to wheel group
• Fix #1112: setting hostname via DHCP client sometimes gets overridden by the
  configured system hostname
• Fix #1247: Prevent invalid configuration of OSPF backbone area (0.0.0.0) as
  stub or NSSA. The backbone must always be a normal area per RFC 2328. Any
  existing invalid configurations are automatically corrected during upgrade
• Fix #1255: serious regression in boot time, introduced in v25.10, delays the
  boot step "Mounting filesystems ...", from 30 seconds up to five minutes!
• Fix #1289: SSH host key generation warning at boot after factory reset
• Fix broken intra-document links in container and tunnel documentation
• Fix show dhcp-server command crashing with invalid timestamp format.
  DHCP lease expiry timestamps had double timezone suffix causing libyang
  validation errors
• Fix show dhcp-server output alignment. The EXPIRES column was misaligned
  when CLIENT ID field was empty, and CLIENT ID column was too narrow for
  typical 20-character client IDs

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.

Infix v25.10.0

Note

Noteworthy changes and additions in this release:

🛡️ Zone-Based Firewall (ZBF): Protect your network with our zone-based firewall powered by firewalld. Define security zones, set policies between them, and enable masquerading.

📊 System & Hardware Monitoring: CLI show system, show services, and show hardware now give you instant visibility into CPU temperature, fan speeds, memory, running services, and sensor data from SFP modules, WiFi radios, and more. All operational data also available over NETCONF and RESTCONF.

🚀 Expanded Hardware Support: The NanoPi R2S is now included in the default Aarch64 build, which also adds support for Raspberry Pi 3B, and Raspberry Pi CM4 variants. All boards now benefit from automatic /var partition expansion on first boot.

Changes

• Upgrade Buildroot to 2025.02.7 (LTS)

• Upgrade Linux kernel to 6.12.56 (LTS)

• Extend NETCONF and RESTCONF scripting documentation with operational data examples, discovery patterns, and common workflow examples, issue #1156

• Initial support for a zone-based firewall, based on firewalld, issue #448

• Add validate option to CLI copy command. This can be used before doing a restore of a backup, or when having edited configuration files manually. With the validate flag (-n from the shell) the file is only loaded and validated against the YANG models, it is not rolled in if validation is successful, issue #373. Example:

    copy /media/backup/old.cfg running-config validate
  

• Automatically expand /var partition at first boot on all MMC-based devices

• New upgrade RPC (action) for containers using images with mutable tags

• Optimize startup of preexisting containers by adding metadata to track all OCI archives loaded into container store, and all container configurations used to create container instances. Instances are now only recreated when metadata from an existing instance does not match either the configuration or the image — because of configuration changes or image upgrades

• Updated container documentation on volumes, image tags, and image upgrade

• Add new show services command to display running system services

• Add new show system command with comprehensive system overview including hostname, uptime, load average, CPU/fan temperatures, memory, disk usage

• Add hardware sensor monitoring support in show hardware with hierarchical display of temperature, fan, voltage, current, and power sensors

• Add support for NanoPi R2S router platform to the default Aarch64 build, bumping it to Tier 2 support (SD-card images built separately)

• Add support for Raspberry Pi 3B (BCM2837)

• Add support for Raspberry Pi Compute Module 4 IoT Router Board Mini

• Add support for Raspberry Pi Compute Module 4 NVME NAS box

• Add reboot option to CLI upgrade command for automatic system restart

Fixes

• Fix #981: copying any file, including running-config, to the persistent back-end store for startup-config, does not take
• Fix #1121: Ensure DHCP server does not crash if no address pool is set. This change infers a pool range (only) for /24 networks, and only when a pool is enabled. YANG validation for this and other use-cases is also included. As an unforeseen bonus, Infix now also support non-pool (static lease) setups
• Fix #1122: Add YANG validation for consistency, IP addresses are not allowed on bridge port (interfaces). Even though Infix previously allowed this, but disregarded it operationally, it is no longer supported in the configuration
• Fix #1146: Possible to set longer containers names than the system supports. Root cause, a limit of 15 characters implicitly imposed by the service mgmt daemon, Finit. The length has not been increased to 64 characters (min: 2) and the YANG model now properly warns if the name is outside of these limits
• Fix #1147: Use container metadata to clean up lingering old container images instead of using the too broad podman image prune -af command
• Fix #1148: Only retry container instance create on remote images
• Fix #1149: Increase podman stop timeout, from 10 to 30 seconds, needed with bigger containers on heavily loaded systems
• Fix #1194: CLI text-editor command does not do proper input sanitation
• Fix #1197: RPi4 no longer boots after BPi-R3 merge, introduced in v25.09
• Upgrade fixes for containers with mutable images, e.g., :latest. Infix now always tries to fetch a new version of the OCI archive, for remote images, regardless of the transport. After upgrade the old image is pruned
• Fix #1203: copying any file, including startup-config, to running-config does not take

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.

Infix v25.08.1

Changes

• N/A

Fixes

• Fix #1150: show-legacy wrapper permissions
• Fix #1155: show ospf commands regression
• Fix #1169: Expected OSPF neighbors not shown in sysrepocfg when the system has at least one non-OSPF interface

Infix v25.08.1-rc1

Changes

• N/A

Fixes

• Fix #1150: show-legacy wrapper permissions
• Fix #1155: show ospf commands regression
• Fix #1169: Expected OSPF neighbors not shown in sysrepocfg when the system has at least one non-OSPF interface

Infix v25.09.0

Changes

• Upgrade Buildroot to 2025.02.6 (LTS)
• Upgrade Linux kernel to 6.12.49 (LTS)
• Upgrade libyang to 3.13.5
• Upgrade sysrepo to 3.7.11
• Upgrade netopeer2 (NETCONF) to 2.4.5
• Upgrade rousette (RESTCONF) to v2
• Add support for Banana Pi R3, a 7 port switch with 2 WiFi chip
• Add neofetch system information tool for system introspection, issue #1143
• Add mtr and iperf3 network diagnostic tools, issue #1144
• Improve default bash settings with better history handling and tab completion
• cli: new terminal reset and terminal resize convenience commands

Fixes

• Fix #1080: Error message in log from rauc, deprecated 'Install' D-Bus method
• Fix #1100: Reduce DHCP client logging verbosity by 70% and include interface
  names in log messages for easier troubleshooting
• Fix #1119: CLI UX regression, restore proper behavior for no enabled command
• Fix #1155: show ospf commands regression
• Fix #1150: show-legacy wrapper permissions
• Fix #1161: error in log during boot about unsupported command
• Fix #1169: Expected neighbors not shown in sysrepocfg
• Fixes for unicode translation in log and pager outputs as well as syslogd

Infix v25.09.0-rc1

Changes

• Upgrade Buildroot to 2025.02.6 (LTS)
• Upgrade Linux kernel to 6.12.49 (LTS)
• Upgrade libyang to 3.13.5
• Upgrade sysrepo to 3.7.11
• Upgrade netopeer2 (NETCONF) to 2.4.5
• Upgrade rousette (RESTCONF) to v2
• Add support for Banana Pi R3, a 7 port switch with 2 WiFi chip
• Add neofetch system information tool for system introspection, issue #1143
• Add mtr and iperf3 network diagnostic tools, issue #1144
• Improve default bash settings with better history handling and tab completion
• cli: new terminal reset and terminal resize convenience commands

Fixes

• Fix #1080: Error message in log from rauc, deprecated 'Install' D-Bus method
• Fix #1100: Reduce DHCP client logging verbosity by 70% and include interface names in log messages for easier troubleshooting
• Fix #1119: CLI UX regression, restore proper behavior for no enabled command
• Fix #1155: show ospf commands regression
• Fix #1150: show-legacy wrapper permissions
• Fix #1161: error in log during boot about unsupported command
• Fix #1169: Expected neighbors not shown in sysrepocfg
• Fixes for unicode translation in log and pager outputs as well as syslogd

Infix v25.08.0

Changes

• Upgrade Buildroot to 2025.02.5 (LTS)
• Upgrade Linux kernel to 6.12.44 (LTS)
• Raspberry Pi 4 is now a part of the aarch64 image.
• Add support for Raspberry Pi touch display on Raspberry Pi 4

Fixes

• Fix #1098: Prune dangling container images to reclaim disk space
• Fix #1123: Disabling or removing a container may cause podman to hang
• Fix #1124: Container setup with unreachable remote image spawns
  excessive ip monitor processes
• Fix #1127: Silence libyang Obsolete schema node warnings in log