jetNEXUS ALB-X Accelerating Load Balancer Software Version 3.55.1 (Build 1559) October 21st 2014 ================================================================================================ Software Version 3.55.1 (Build 1559) is a customer patch release for existing 32bit and 64bit platforms. Existing customers are recommended to upgrade to this version to take advantage of the changes detailed below. Platform Availability ---------------------- * ISO: 2 Core CPU, 2 NIC's, 2 GIG RAM, 10 GIG HDD * Hardware Appliance: E4 * Virtual Appliances: Min Spec 2 vCPU, 2GB RAM, 10GB HDD - VMWare ESX 5.x, Hyper-V Server 2012, Hyper-V Server 2012 R2, Oracle, XENServer Resolved ========= - Open SSL updated to version 1.0.1j - Fixed an issue that may add files to /tmp - Resolved SNMPD memory leak - Updated Bash to remove potential shellshock vulnerability - Security fix for CLI command "viewlog" - Hyper-V licence tied to eth0 IP address rather than MAC - Updated SNMP MIB - SSH access tied to web-console IP address jetNEXUS ALB-X Accelerating Load Balancer Software Version 3.54.3 (Build 1553) July 2014 ============================================================================================= Software Version 3.54.3 (Build 1553) is a customer patch release for existing 32bit and 64bit platforms. Existing customers are recommended to upgrade to this version to take advantage of the changes detailed below. Platform Availability ---------------------- * ISO: 2 Core CPU, 2 NIC's, 2 GIG RAM, 10 GIG HDD * Hardware Appliance: E4 * Virtual Appliances: Min Spec 2 vCPU, 2GB RAM, 10GB HDD - VMWare ESX 5.x, Hyper-V Server 2012, Hyper-V Server 2012 R2, Oracle, XENServer Resolved ========= - Customers experiencing 100% CPU in the GUI with no traffic - Direct Server return and servers failing to come back online - Changing the default gateway in the GUI deletes the current gateway only - Creating a CSR on harware appliance now works correctly Known Issues ============= - Basic Connectivity sometimes fails to bring content servers back online after failure - IE11 has issues with the IP Services page - please change IE to use compatability mode - Hyper-V uses MAC address for license machineid - FTP does not support browser directory listing - workaround - use an ftp client jetNEXUS ALB-X Accelerating Load Balancer Software Version 3.54.3 (Build 1548) June 2014 ============================================================================================= Software Version 3.54.3 (Build 1548) is a security patch release for existing 32bit and 64bit platforms. Existing customers are recommended to upgrade to this version to take advantage of the changes detailed below. Platform Availability ---------------------- * ISO: 2 Core CPU, 2 NIC's, 2 GIG RAM, 10 GIG HDD * Hardware Appliance: E4 * Virtual Appliances: Min Spec 2 vCPU, 2GB RAM, 10GB HDD - VMWare ESX 5.x, Hyper-V Server 2012, Hyper-V Server 2012 R2, Oracle, XENServer Improvement =========================================================== - Open SSL Library upgraded to 1.0.1h (http://www.openssl.org/news/secadv_20140605.txt) - Stunnel Version updated to 4.56 Resolved =========================================================== - CLI command "defaults" now working correctly - Resolved an issue with High Availability Failover caused by writing messages to the console Known Issues =========================================================== - Creating a CSR on hardware appliance does not work correctly, work around is to complete the CSR, export the certificate, delete it from the ALB-X then import - Changing the default gateway in the GUI deletes the current gateway only - workaround - use the command line to change the default gateway ################################################################################################################################################################ ============================================================================================= jetNEXUS ALB-X Accelerating Load Balancer Software Version 3.54.1 (Build 1540) April 2014 ============================================================================================= Software Version 3.54.1 (Build 1540) is a service pack release for existing 32bit platforms. It is also the base software for 64bit platforms. Existing customers are recommended to upgrade to this version to take advantage of the changes detailed below. Platform Availability ---------------------- * ISO: 2 Core CPU, 2 NIC's, 2 GIG RAM, 10 GIG HDD * Hardware Appliance: E4 * Virtual Appliances: Min Spec 2 vCPU, 2GB RAM, 10GB HDD - VMWare ESX 5.x, Hyper-V Server 2012, Hyper-V Server 2012 R2, Oracle, XENServer New =========================================================== - 64bit OS - Centos 6.5 Kernel - Delivered by full download only - Basic Mode - Low latency, low CPU load balancing (64bit builds only) - Added support for UDP via Basic mode only (64bit builds only) - Added support for unified TCP/UDP channel (64bit builds only) - First boot script added - Manual keyboard interrupt to add IP, Mask, Gateway and DNS. No interrupt falls back to DHCP. No DHCP available it will ARP for 192.168.100.100 and assign that or free address thereafter. Improvement =========================================================== - Open SSL Library upgraded to 1.0.1g - Default user interface port changed for new builds from 27376 to 443 - GUI access now via https://x.x.x.x - Added default bonding option layer2+3 - Maximum number of concurrent connections increased from 50,000 to 250,000 - Bonding: xmit hash policy option changed to "layer2+3" - Increased conntrack limit - Increased concurrent connections - Use AES ciphers as a preference to utilise the AES instruction set for Intel CPU's - Console messages are now available with Alt F7 Resolved =========================================================== - Heart Bleed: Open SSL version 1.0.1g resolves this issue - Adding or changing default gateway in CLI is now replicated in GUI and persistent - Eliminated extra reboot after initial install - Solved an issue with IP-List based persistence and Standby servers ############################################################################################################################################################################################################# jetNEXUS ALB-X Accelerating Load Balancer Software Version:3.53.2 (Build 1510) November 2013 ============================================================================================= 3.53.2 (Build 1510) is a service pack release. Customers are recommended to upgrade to this version to take advantage of the changes detailed below. Platform Availability ---------------------- * ISO: 2 Core CPU, 2 NIC's, 2 GIG RAM, 10 GIG HDD * Hardware Appliance: E4 * Virtual Appliances: VMWare 4.0, 4.1, 5.x; Microsoft Hyper-V Server 2008 R2, Hyper-V Server 2012, Citrix XenServer 6.0, New =========================================================== - RDP healthcheck monitor (2659) - GUI heartbeat connection status light (2957) - Added SNMP OID for Global Current Connections (2840) Improvement =========================================================== - GUI latency and performance enhancements (2537) - Console logging and messaging improvements (2944) - Upgrade SSL libraries to the latest stable version "OpenSSL 1.0.d" (2731) - TCP level XFF headers to facilitate persistence with non-http protocols (3025) - Performance improvements for custommonitor (2756) - Improve logging for data processing errors (2705) - Increase ARP counters to increase compatibility with various switches (2905) - Cookie-based loadbalancing fallback improvement (3072) - Improve browser compatibility with IE10(2953) - Better external storage compatibility (2934) - Improved debugging facilities (2966) - GUI refresh congestion protection (2662) - Improved L7 HTTP fragmented chunked content processing (2289) - Improve platform stability (2968) - Connectivity mode "Managed" changed to "Reverse Proxy" (2802) Resolved =========================================================== - Resolved issue with SSL offload L4 persistence (2741) - Resolved possible security vulnerability on SSL certificate password management (3150) - Fix to generate proper MachineId and synchronize the HyperV VA root password (2702) - Failover issue with secondary changes, sometimes affecting primary (2800) - DoS attack prevention protection (ramping) failed in certain circumstances (2837) - Unexpected secondary interface take over (2869) - Lost default gw after reboot (2895) - Unlengthed HTTP traffic can corrupt payload (3057) - FlightPath Body replace on fragmented chunked content won't work (3058) - High CPU on FlightPath UseServer and BodyReplace with chunked content (3099) - Custommonitor watchdog not working (3102) - Standby doesn't work in DSR mode (2776) - Page rendering issues during flightPath body replace with SSL offload (2992) - Expired GUI certificates not refreshed on update for older appliances (2948) ########################################################################################################################################################################## ========================================================================================= jetNEXUS ALB-X Accelerating Load Balancer Software Version:3.50.0 (Build 1480) April 2013 ========================================================================================= 3.51.1 (Build 1480) is a general release. Customers are recommended to upgrade to this version to take advantage of the changes detailed below. Platform Availability ---------------------- * ISO: 2 Core CPU, 2 NIC's, 2 GIG RAM, 10 GIG HDD * Hardware Appliance: E4 * Virtual Appliances: VMWare 4.0, 4.1, 5.0, 5.1; Microsoft Hyper-V Server 2008 R2, Hyper-V Server 2012, Citrix XenServer 6.0, Amazon EC2,VPC New =========================================================== - Web GUI is now compatible with all major browsers. IE 10, 9, 8; Chrome, FireFox, Safari. (2479) - "Content-Server Monitoring" now has the ability (via jetPACK) to adjust the number of counts before bringing a server in or out of service. (2256) - Added the ability create custom layer 7 content server health checks. Please email support@jetnexus.com for further details. (2191) - Added a layer 7 health check for DICOM service. Digital Imaging and Communications in Medicine. (2191) - Dashboard page loading time improved. - SSL Cipher Options can now be customised via jetPACK (Config change). (2142) Improvement =========================================================== - Status Lights are now grey in colour when the status is unknown. (717) - The default gateway is now preserved after reboot when added from the command line. (2323) - "Server too Busy" page is now set so it is not cached by the browser. (2348) - flightPATH action "Redirect 301 and 302" now needs absolute URL's. e.g. http://www.edgenexus.io/redirect.html. Non absolute URL's such as /redirect.html can cause issues in some browsers. (2387) - Informational message added to Syslog ad Events Log to advise customers that 2GIG memory will provide improved performance. (2125) - Added updated User Manual v2.5 (26/03/2013) to Help-->Reference Section - Hyperlink for SSL information now working in the Help-->About Us section - IP List-Based load balancing policy altered to maintain persistence to current online server upon return to originally persisted server. (2409) - Content-Server Monitoring errors now logged to the Dashboard Events log. Example: "Content Server 10.1.1.102:104 unreachable; DICOM health-check failed". (2222) - Status lights now turn grey when finding correct state. (2441) - Cookie Based Load Balancing falls back to IP List-Based Load Balancing then Least Connections. (2330) - GUI change within the IP Services page. Destination - Actions - flightPATH tabs now all on one line for simplification. (2070) - W3C logging. Referrer (English) now changed to Referer (American) for global compatibility. (2082) Resolved =========================================================== - Resolved issue with flightPATH Action "Use Server" (2133) - Load Balancing Policy "IP List Based" now providing correct session affinity for Service Type "Layer 4" (2309) - "Reset" on the Monitor-->Statistics page now resets the statistics correctly. (2403) - Adding an entry to the Global Compression Exclusions no longer stops all compression. (2374) - CLI command "machineid" now provides the same value as the Web GUI. (2373) - Resolved an issue with chunked data when uploading on SSL connections. (2255) - Resolved an issue that occurred infrequently when issuing a POST with Chrome SSL connections. (2143) - Activity "Offline" now disconnects immediately for Layer 4 traffic (2408) - Update button on Content-Server Monitoring page now applies any changes to the running configuration. (2465) - Changing a flightPATH rule name is now automatically changed in the apply flightPATH rule section. (2482) - Resolved an issue with flightPATH redirect being cached. (2388) - flightPATH now accepts literal encoding. (2085) jetNEXUS ALB-X Accelerating Load Balancer Software Version:3.42.1 (Build 1475) December 2012 ============================================================================================= 1475 is a maintenance release to improve stability, GUI performance and reliability Customers are recommended to upgrade to this version to take advantage of the changes Platform Availability ---------------------- * ISO: 2 Core CPU, 2 NIC's, 2 GIG RAM, 10 GIG HDD * Hardware Appliance: E4 * Virtual Appliances: VMWare 4.0, 4.1, 5.0; Microsoft Hyper-V Server 2008 R2, Hyper-V Server 2012, Citrix XenServer 6.0, Amazon EC2,VPC GUI Improvements in Software Version:3.42.1 (Build 1475) =========================================================== - GUI "Processing" has been moved to the bottom status bar and users gain the ability to continue working whilst "Please Wait" is displayed - GUI is much faster to save configuration after "Update" - A warning message is displayed if an "Update" requires a service restart - Added a message in the status bar to indicate minimum memory allocation - 2 GIG Other changes in Software Version:3.42.1 (Build 1475) ====================================================== - File upload via HTTP POST now unlimited - XFF formatting corrected - Improvements to Cookie Based persitence load balancing - Improvements to IP List Based load balancing - Improved SSL security - Remove weak cyphers flightPATH ============ - Added the ability for literal encoding for flightPATH rules ====================================================================================================================== Previous Versions ====================================================================================================================== jetNEXUS ALB-X Accelerating Load Balancer Software Version 3.32.9 (Build 1460) October 2012 ========================================================================================== 1460 is a performance update revision of the ALB and ALB-X family, containing a number of functionality enhancements and fixes. Customers are recommended to upgrade to this version to take advantage of the changes. Platform Availability ---------------------- * ISO: 2 Core CPU, 2 NIC's, 2 GIG RAM, 10 GIG HDD * Hardware Appliance: E4 * Virtual Appliances: VMWare 4.0, 4.1, 5.0; Microsoft Hyper-V Server 2008 R2, Citrix XenServer 6.0, Amazon EC2,VPC Performance Changes Software Version 3.32.9 (Build 1460) ======================================================== - Transactions per second doubled (Compared to 1431) - Latency reduced 10 fold (Compared to 1431) - Throughput over 10GBps New Features in Software Version 3.32.9 (Build 1460) ==================================================== - SSL Upgrade. This version now supports latest version "OpenSSL" 1.0.1c - Added Content Server "Notes" field - Added common Service Types to drop down list - flightPATH Google Analytics rule changed to latest "asynchronous" script - flightPATH "301 Object Moved" has now changed to "301 Moved Permanently" - flightPATH "302 Moved Temporarily" has now changed to "302 Found" - flightPATH Added the ability to create custom Request Headers - Added the ability to configure a default gateway on a different network to ethernet interfaces - Global TCP timeout changed to 10 minutes on new installations (not upgrades) - FTP now works in a multi-homed environment - Content Server Port automatically copied from Channel Port upon Update (If left blank) - Certificate Authority Root Certificates refreshed Other changes in Software Version 3.32.9 (Build 1460) ===================================================== - Fixed an issue that may delete channels when selecting DSR on a 443 channel - Fixed an issue that would cause SNMP to stop working - Fixed an issue that would amalgamate custom monitoring rules for the same content servers. - Fixed an issue when using Internet Explorer and trying to paste multiple lines in a flightPATH Action-Data section - Fixed an issue with service type FTP not working with multiple banners - Removed unnessessary message "SSL_accept:Peer suddenly disconnected" messages from the console ====================================================================================================================== Previous Versions ====================================================================================================================== Major Features in Version 3.25.2 Build (1431) ============================================== - Content Servers: Four Activity Options * The "Enabled" Tick Box has now changed to "Activity" * The Four Activities are Online, Drain, Offline, Standby Each content server can be assigned one of the four activities: - Any content servers assigned as "Online" will be part of the primary content server pool. - Any content servers assigned as "Standby" will remain offline until ALL of the online group fail, at which point the "Standby" group will start serving content. If any one of the "Online" group becomes available they will start serving content and the Standby group will go offline. - Any server assigned as "Offline" will imediately be taken offline and wont serve content. - Any server assigned "Drain" will honour existing connections but not accept new connections. Once the existing connections have be serviced it will be taken offline. - flightPATH Condition * Additional condition "Source IP" * Additional condition "Origin IP" - flightPATH now includes the ability to specify Source IP and Origin IP as a condition. - "Source IP" is where the traffic comes from which could be either origin IP, proxy server IP or some other aggregator IP. - "Origin IP" is the same as the above but if the upstream proxies support X-Forwarded-For (XFF) it will use the true Origin IP address and not that of an upstream proxy. - Muliple IP addresses or Subnets can be matched using Regular Expression. - flightPATH Action * Redirect 301 Additional flightPATH Condition called "Redirect 301". This is in addition to the existing Redirect 302. Redirect 301 Moved Permanently is the most 'Search Engine Friendly' method for webpage redirection. Other changes in Version 3.25.2 Build (1431) ============================================= - flightPATH Body Replace * Fixed an issue that could result in the service restarting when applying a flightPATH rule under heavy SSL load * Fixed an issue with Body Replace and content-length not being updated. * Fixed an issue with Body Replace and chunked content. * Changed flightPATH so that it does not perform body replace on encoded content. Add entry to syslog detailing this. - Certificate Management * Certificate Signing Request process fixed * A check has been added to verify the signed request before the certificate is installed as Trusted. - Clock * Fixed an issue that accured when the user or NTP server adjusted time correction backwards. - Failover * Fixed an issue that resolves the conflict between two ALB's if they are both configured as Primary for one VIP. - Cache * Issue resolved with large cache size and small disk - Stand alone ALB * Stand-alone servers no longer fail the whole VIP when a single channel goes offline provided there is more than one channel(s) acociated with the same VIP. - Licence * Evaluation VA licence in Download is now restricted to 14 days with 2 VIPs and 4 content servers. - GUI * Various Fixes to improve the stability. These include remaining at the edited flightPATH rule instead of jumping to the top. * Dragging a flighPATH rule to apply no longer jumps to another rule