2.8.0

This release includes the following new feature:

• Added support for a few CF components in BPM. Using BPM for iptables logger requires BPM version 0.8.0
  Tested with cf-networking-release v2.8.0

Significant Changes

Leverage BPM for CF components

• Use bpm for iptables-logger

2.7.0

This release includes the following new feature:

• Changes to netmon job to apply lock before reading iptables in order to fix multiple processes claiming iptables lock

Tested with cf-networking-release v2.7.0

Significant Changes

Xenial stemcell

• Investigate issue with xenial

2.6.0

This release includes no new features
Tested with cf-networking-release v2.6.0

Significant Changes

Leverage BPM for CF components

• Use bpm for silk-controller
• Use bpm for netmon
• Use bpm for silk-daemon
• Use bpm for vxlan-policy-agent

2.5.0

This release includes no new features
Tested with cf-networking-release v2.5.0

Significant Changes

Move to credhub

• Move cf-networking ci environments vars-store to credhub

2.4.0

This release has no major changes.
Tested with cf-networking-release v2.4.0

2.3.0

This release includes the following new features:

• Bandwidth limiting is supported through CNI chaining
• Fixes to database and Consul timeout configurations

Tested with cf-networking-release v2.3.0

Significant Changes

Manifest Changes

New Properties

• An optional parameter has been added to the silk-controller job to configure the consul dns health check timeout. Defaults
  to 5 seconds.
  • health_check_timeout_seconds

Changed Properties

• Namespaced the connect_timeout_seconds under database in the silk-controller job.
  • health_check_timeout_seconds

CNI enhancements

• Silk release should provide bandwidth shaping via chaining to upstream CNI plugin
• CNI Wrapper integration tests should pass from Docker for Mac

Timeout changes

• Consul DNS healthcheck timeout should be independently configurable from the database connection timeout
• cloudfoundry/silk #4: Too many open connections error

Router on the overlay

• Silk Controller supports CRUD for a Single IP Lease
• Silk daemon can acquire and connect a Single IP
• Silk-connected VMs can connect to App Ports

Chores

• Create known issues doc for silk-release

2.2.0

With this release silk controller and policy server can connect to mySQL database with TLS.

Tested with cf-networking-release v2.2.0

Significant Changes

• Silk controller can connect to MySQL with TLS
• Network policy server can connect to MySQL with TLS
• do we need to downgrade to Go 1.9?

2.1.0

Features

• A process inside the app container can connect to the cell-local service
• Consul DNS healthcheck timeout should be hardcoded back to 5 seconds

Bug

• iptables logging should work correctly with recent versions of syslog release

Manifest Changes

• An optional parameter host_tcp_services has been added to the silk-cni job to specify TCP addresses running on the BOSH VM that should be accessible from containers. The address must not be in the 127.0.0.0/8 range. The silk-cni plugin will install an iptables INPUT rule for each service.
• See all manifest changes in the manifest changelog.

---

Tested with cf-networking-release v2.1.0

2.0.0

silk-release packages the Silk container networking fabric for deployment with BOSH in the Cloud Foundry Application Runtime. It is designed to work with CF Networking Release v2.0.0. See those release notes for a summary of how they work together.

Features

• An operator can disable silk-release
• Rename cni job to silk-cni in silk-release
• CF Networking Release and Silk Release have the same version numbers

Bug Fix

• cloudfoundry/cf-networking-release #37: Request's source IP is a cell's IP instead of a VXLAN one.

Manifest Changes

• You can see all of the changes in the manifest changelog

Tested with cf-networking-release v2.0.0

0.3.0

• ASGs are applied to multiple interfaces
• Update to go 1.10
• use cloudfoundry/filelock repo
• Tested with cf-networking-release v1.13.0