DOM Customer Portal / Releases / Doppler On-Prem: v21.10

Doppler On-Prem: v21.10


Version 21.10 of Doppler On-Prem has been released. This is a major update with over 580 changes.

Downloads

An OVA without a manifest (marked legacy) has been provided for compatibility with VMware administration interfaces that don’t support SHA256 checksums.

We recommend verifying the integrity of the installation images. Our PGP keyring used for signing releases has recently been updated.

Changes in 21.10

This update contains database changes, remember to run update-database to update the database schema.

NOTE: Users who are upgrading from an install of v21.04.3 or v21.03 will need to use the force option when upgrading the schema due to a state bug in that version. This applies if “Database Schema” is listed as 8 in System Preferences and you are running v21.04.3 or v21.03.

We recommend ensuring you have a recent backup of the database available before proceeding to update.

Security

  • Linux base images and dependencies have been updated to the latest patch levels as of 2021-11-04.

  • Fixed medium vulnerability where a user could inject HTML via the RTask retry feature. This was partially mitigated by CSP rules.

Features

  • Reports: Added aggregated charts for individual routers and groups, which are updated daily.

  • Reports: Added timeline showing data usage, ppp and restart events to router details page.

  • API: Added a sets parameter that allows API consumers to specify what datasets they’d like when calling the /router/ endpoint.

  • API/Status: API Token Status now show one entry per ip address.

  • API/Write: Add Ability to write to Router objects in the API (a new RW token is required). (#912)

  • Group/Lock: Allow a group administrator to lock changes to the group configuration.

  • User/Become: Allow root users to “become” other users.

  • DX/SarOS: Updated to v3.2.4. Sends config deltas to Doppler On-Prem automatically when a local change has been detected.

  • DX/DAL: Updated to v4.2.0002. Enables DAL routers to accept multiple commands in one RTask action.

  • Firmware/Router: Ability to pin SarOS specific firmware versions to groups.

  • Firmware/Modem: Added support for uploading Sierra Wireless and Telit firmware images.

  • Firmware/Modem: Improved download performance of Sierra Wireless update script.

  • Logs/Syslog: Added support for sending security events and change log entries to a remote syslog server in RFC5424 format with Structured Data attached. (#864)

  • Logs/Security: Added a security log showing authentication and authorization events.

  • Router/Reboot: Agent users can now reboot SarOS routers via a button on the router details page. (#922/892)

  • RConfig: Improved configuration management for SarOS routers, allowing configuration changes to be resolved via templates.

  • RConfig: Added a search feature, allowing users to search router configurations via a template (#852)

  • RTask: Added multi-select retry and stop buttons (#674)

  • System Status: Added page showing misc. system performance parameters.

  • Warnings/Mute: Allow users to mute (hide) specific unresolved warnings (#926/894)

Bugfixes

  • Fixed an id space problem when inserting data from uncommon router types, leading to write performance issues. (#951)

  • Fixed an occasional race condition in the dx server. (#931)

  • Fixed missing temperature being shown incorrectly if Fahrenheit was selected as output format (#844)

And, many more technical changes.