Index | Thread | Search

From:
Claudio Jeker <cjeker@diehard.n-r-g.com>
Subject:
OpenBGPD 9.2 released
To:
tech@openbsd.org
Date:
Thu, 6 Aug 2026 15:22:53 +0200

Download raw body.

Thread
  • Claudio Jeker:

    OpenBGPD 9.2 released

We have released OpenBGPD 9.2, which will be arriving in the
OpenBGPD directory of your local OpenBSD mirror soon.

This release includes the following changes to the previous release:

    * Require negotiation of the 'as-4byte' capability by default.
      Sessions with legacy speakers unable to handle this capability
      can still be downgraded through explicit configuration, but our
      long term goal is to drop support for old 2-byte only clients.

    * Rework fast reconnect and the IdleHold timer in a way that fixes
      too fast reconnects after a NOTIFICATION was sent out.

    * `bgpctl neighbor X up` now opens a connection to the neighbor for
      session in state active and sessions that are passive.

    * Various fixes in the Adj-RIB-Out handling and bring back optimized
      `addpath send all` updates.

    * Include example ASPA filter rule to the default config.

    * Further improve CH hash performance.

    * Automatically set 'fib-update no' when the extended nexthop encoding
      capability is configured. Currently IPv4 routes with IPv6 nexthops
      are supported only for the IX RS deployment use-case where there is
      no need for a FIB.

    * Enforce the use of 'fib-update no' when the extended nexthop
      encoding capability is configured.

    * Limit ASPATH and AS4_PATH attributes to a maximum of 750 elements.

    * Fix handling of unknown extended communities.

    * Improve the 'as-4byte' fixup handling for old 2byte only clients.
      When old clients use the extended message capability it is possible
      to trigger a case where the reconstructed ASPATH attribute would
      overflow the maximum buffer size.

    * Various fixes for defects found by a code review by 7ASecurity.
      According to their scoring system 0 critical, 1 high, 14 medium,
      and 3 low issues were found and fixed. One defect classified as
      medium is still open but only affects VPN and EVPN AFI/SAFI pairs.

    * Various minor fixes for defects detected by automated code review.

OpenBGPD-portable is known to compile and run on FreeBSD and the
Linux distributions Alpine, Debian, Fedora, RHEL/CentOS and Ubuntu.
It is our hope that packagers take interest and help adapt OpenBGPD-portable
to more distributions.

We welcome feedback and improvements from the broader community.
Thanks to all of the contributors who helped make this release
possible.