From: Claudio Jeker <cjeker@diehard.n-r-g.com>
Subject: OpenBGPD 9.2 released
To: tech@openbsd.org
Date: Thu, 6 Aug 2026 15:22:53 +0200

We have released OpenBGPD 9.2, which will be arriving in the
OpenBGPD directory of your local OpenBSD mirror soon.

This release includes the following changes to the previous release:

    * Require negotiation of the 'as-4byte' capability by default.
      Sessions with legacy speakers unable to handle this capability
      can still be downgraded through explicit configuration, but our
      long term goal is to drop support for old 2-byte only clients.

    * Rework fast reconnect and the IdleHold timer in a way that fixes
      too fast reconnects after a NOTIFICATION was sent out.

    * `bgpctl neighbor X up` now opens a connection to the neighbor for
      session in state active and sessions that are passive.

    * Various fixes in the Adj-RIB-Out handling and bring back optimized
      `addpath send all` updates.

    * Include example ASPA filter rule to the default config.

    * Further improve CH hash performance.

    * Automatically set 'fib-update no' when the extended nexthop encoding
      capability is configured. Currently IPv4 routes with IPv6 nexthops
      are supported only for the IX RS deployment use-case where there is
      no need for a FIB.

    * Enforce the use of 'fib-update no' when the extended nexthop
      encoding capability is configured.

    * Limit ASPATH and AS4_PATH attributes to a maximum of 750 elements.

    * Fix handling of unknown extended communities.

    * Improve the 'as-4byte' fixup handling for old 2byte only clients.
      When old clients use the extended message capability it is possible
      to trigger a case where the reconstructed ASPATH attribute would
      overflow the maximum buffer size.

    * Various fixes for defects found by a code review by 7ASecurity.
      According to their scoring system 0 critical, 1 high, 14 medium,
      and 3 low issues were found and fixed. One defect classified as
      medium is still open but only affects VPN and EVPN AFI/SAFI pairs.

    * Various minor fixes for defects detected by automated code review.

OpenBGPD-portable is known to compile and run on FreeBSD and the
Linux distributions Alpine, Debian, Fedora, RHEL/CentOS and Ubuntu.
It is our hope that packagers take interest and help adapt OpenBGPD-portable
to more distributions.

We welcome feedback and improvements from the broader community.
Thanks to all of the contributors who helped make this release
possible.