Devel

devel@lists.kronosnet.org

1 participants
56 discussions

kronosnet v1.35 released (security fixes release)
by Fabio M. Di Nitto 20 Jul '26

20 Jul '26

All, We are pleased to announce the general availability of kronosnet v1.35 kronosnet (or knet for short) is the new underlying network protocol for Linux HA components (corosync), that features the ability to use multiple links between nodes, active/active and active/passive link failover policies, automatic link recovery, FIPS compliant encryption (nss and/or openssl), automatic PMTUd and in general better performance compared to the old network protocol. Highlights in this release: Security fixes: - CVE-2026-15811 (LOW): encryption key exposure in memory after cryptographic configuration changes. Wipe cryptographic keys with explicit_bzero() before freeing to prevent exposure through memory disclosure vulnerabilities. https://bugzilla.redhat.com/show_bug.cgi?id=2500850 - CVE-2026-15812 (LOW): access control list bypass via link ID spoofing on unencrypted dynamic links. Validate source address against claimed link_id and enable ACL by default. https://bugzilla.redhat.com/show_bug.cgi?id=2500852 - CVE-2026-15813 (MEDIUM): memory corruption and out-of-bounds access via malformed network packet defragmentation. Validate fragment sequence numbers before accessing defragmentation buffers. https://bugzilla.redhat.com/show_bug.cgi?id=2500864 Other improvements: - tests: add coverage for connected named AF_UNIX SOCK_STREAM sockets - libnozzle: Introduce test macros similar to libknet - docs: convert README to markdown format Known issues in this release: None Download: https://www.kronosnet.org/releases/ Upstream resources and contacts: - https://kronosnet.org/ - https://github.com/kronosnet/kronosnet/ - https://ci.kronosnet.org/ - https://projects.clusterlabs.org/project/board/86/ - https://goo.gl/9ZvkLS - IRC: #kronosnet on Libera - https://lists.kronosnet.org/ Cheers, The knet developer team

1 0

kronosnet v1.34 released
by Fabio M. Di Nitto 30 Jun '26

30 Jun '26

All, We are pleased to announce the general availability of kronosnet v1.34 kronosnet (or knet for short) is the new underlying network protocol for Linux HA components (corosync), that features the ability to use multiple links between nodes, active/active and active/passive link failover policies, automatic link recovery, FIPS compliant encryption (nss and/or openssl), automatic PMTUd and in general better performance compared to the old network protocol. Highlights in this release: Important bugfixes: * Fix critical defragmentation buffer reclamation logic * Fix sequence number wraparound calculation in defragmentation * Add decompression buffer size validation * Fix SCTP reconnect thread race condition * Build fixes for int_decompress_bufsize without zlib New features: * Add unique names to all threads for better debugging * Add Wireshark dissector plugin for kronosnet protocol analysis * Add API to enumerate supported cipher modes and hash algorithms * libnozzle: Platform-specific refactoring and native ioctl implementations * libnozzle: Add input validation for network prefixes * libnozzle: Portable type and macro abstractions for BSD/Solaris * Improve OpenSSL error logging to print entire error stack * Add CLAUDE.md documentation for AI-assisted development Test suite improvements: * Add comprehensive defragmentation and sequence wraparound test suites * Improve test infrastructure with unified logging and injection helpers * libnozzle: Introduce test macros similar to libknet * Comprehensive test suite improvements and C99 compliance fixes * Test suite now supports parallel execution with "make -j check" on systems with sufficient resources Known issues in this release: - None The source tarballs can be downloaded here: https://www.kronosnet.org/releases/ Upstream resources and contacts: https://kronosnet.org/ https://github.com/kronosnet/kronosnet/ https://ci.kronosnet.org/ https://projects.clusterlabs.org/project/board/86/ (TODO list and activities tracking) https://goo.gl/9ZvkLS (google shared drive with presentations and diagrams) IRC: #kronosnet on Libera https://lists.kronosnet.org/mailman3/postorius/lists/users.lists.kronosnet.… https://lists.kronosnet.org/mailman3/postorius/lists/devel.lists.kronosnet.… Cheers, The knet developer team

1 0

kronosnet v1.33 released
by Fabio M. Di Nitto 14 Jan '26

14 Jan '26

All, We are pleased to announce the general availability of kronosnet v1.33 kronosnet (or knet for short) is the new underlying network protocol for Linux HA components (corosync), that features the ability to use multiple links between nodes, active/active and active/passive link failover policies, automatic link recovery, FIPS compliant encryption (nss and/or openssl), automatic PMTUd and in general better performance compared to the old network protocol. Highlights in this release: * Build fixes for gcc-15 * Build fixes for rust coreutils * Coverity tests cleanup * Release: ship all files for completeness Known issues in this release: * None The source tarballs can be downloaded here: https://www.kronosnet.org/releases/ Upstream resources and contacts: https://kronosnet.org/ https://github.com/kronosnet/kronosnet/ https://ci.kronosnet.org/ https://projects.clusterlabs.org/project/board/86/ (TODO list and activities tracking) https://goo.gl/9ZvkLS (google shared drive with presentations and diagrams) IRC: #kronosnet on Libera https://lists.kronosnet.org/mailman3/postorius/lists/users.lists.kronosnet.… https://lists.kronosnet.org/mailman3/postorius/lists/devel.lists.kronosnet.… Cheers, The knet developer team

1 0

Re: [ClusterLabs Developers] kronosnet v1.32 released
by Fabio M. Di Nitto 03 Oct '25

03 Oct '25

Hi, we discussed it between team members on IRC. The implementation in knet has some bugs that noone had the time to address and we have been hitting a lot of instabilities while running CI tests across different distros/kernel combinations, due to different implementations of SCTP at kernel level itself, that makes it rather challenging to have a functional userland. Based on the bugs reports that we receive, noone is using SCTP for what we know (I think one was reported over the last 4 or 5 years? and I know the code has bugs...) 1.x will continue to ship the code, it´s one --enable-* away. Since knet allows runtime reconfiguration of links, switching to UDP will be a 0 downtime change. Cheers Fabio On 03/10/2025 10.19, Jehan-Guillaume de Rorthais wrote: > Hi there, > > On Thu, 25 Sep 2025 04:26:55 +0200 > "Fabio M. Di Nitto" <fabbione(a)fabbione.net> wrote: > >> […] >> >> * IMPORTANT: sctp support is now officially deprecated. It is disabled >> by default and it will be removed in knet 2.x. > > I'm being curious, but I failed to found some changelog or discussion about knet > development, history and such decision. Any pointers? > > Thanks!

1 0

kronosnet v1.32 released
by Fabio M. Di Nitto 25 Sep '25

25 Sep '25

All, We are pleased to announce the general availability of kronosnet v1.32 kronosnet (or knet for short) is the new underlying network protocol for Linux HA components (corosync), that features the ability to use multiple links between nodes, active/active and active/passive link failover policies, automatic link recovery, FIPS compliant encryption (nss and/or openssl), automatic PMTUd and in general better performance compared to the old network protocol. Highlights in this release: * IMPORTANT: sctp support is now officially deprecated. It is disabled by default and it will be removed in knet 2.x. * Fix potential thread race condition in libnozzle close. * Fix wrong pointer in libknet RX thread, only triggered by old gcc (< 11). * Libnozzle: different fixes for BSD to deal with new tap driver changes and don´t leak interfaces. * New API call in libknet to allow configuring a dscp value for KNET_LINK_FLAG_TRAFFICHIPRIO. * Bump soname to reflect new API call. * Add support for OpenIndiana. * Documentation updates. * Fix several tests to better deal with execution timing. * Handle some new coverity errors. * Create and refine STYLE_GUIDE.md for project contributions. Known issues in this release: * None The source tarballs can be downloaded here: https://www.kronosnet.org/releases/ Upstream resources and contacts: https://kronosnet.org/ https://github.com/kronosnet/kronosnet/ https://ci.kronosnet.org/ https://projects.clusterlabs.org/project/board/86/ (TODO list and activities tracking) https://goo.gl/9ZvkLS (google shared drive with presentations and diagrams) IRC: #kronosnet on Libera https://lists.kronosnet.org/mailman3/postorius/lists/users.lists.kronosnet.… https://lists.kronosnet.org/mailman3/postorius/lists/devel.lists.kronosnet.… https://lists.kronosnet.org/mailman3/postorius/lists/commits.lists.kronosne… Cheers, The knet developer team

1 0

Time to open the AI policy pandora´s box
by Fabio M. Di Nitto 10 Jun '25

10 Jun '25

All, sooner or later we will face the issue, might as well start talking about it now. I am not planning to start any technical discussion here about models, or prompts or tools. This is strictly about the legal aspects of AI. If you have the urge to discuss tools, please do so in another thread :) The HA projects are currently lacking a policy/policies to deal with AI related code submission. It is my understanding that a lack of guidelines, implicitly allows people to submit contributions generated by AI. I started drafting a rather conservative doc here: https://github.com/ClusterLabs/ai-policies with the goals of all projects under the ClusterLabs/Corosync/Kronosnet umbrellas to use a common set of rules by adopting the ClusterLab/ai-policies, and to work over time to expand the policy to allow AI usage for safe use cases. Please submit comments, ideas, etc. on github directly. I have added only a subset of contributors to ai-policies, please let me know if you would like to be involved. The list of people submitting code/patches to all projects, on a regular base, is rather large and I am sure I am going to miss someone anyway :) Cheers Fabio

1 0

kronosnet v1.31 released
by Fabio M. Di Nitto 24 Apr '25

24 Apr '25

All, We are pleased to announce the general availability of kronosnet v1.31 kronosnet (or knet for short) is the new underlying network protocol for Linux HA components (corosync), that features the ability to use multiple links between nodes, active/active and active/passive link failover policies, automatic link recovery, FIPS compliant encryption (nss and/or openssl), automatic PMTUd and in general better performance compared to the old network protocol. Highlights in this release: * Fixed incorrect lzo1x_decompress call to use the safe version * Udp: lower log levels for messages triggered by every single packets to trace level. Known issues in this release: * None The source tarballs can be downloaded here: https://www.kronosnet.org/releases/ Upstream resources and contacts: https://kronosnet.org/ https://github.com/kronosnet/kronosnet/ https://ci.kronosnet.org/ https://projects.clusterlabs.org/project/board/86/ (TODO list and activities tracking) https://goo.gl/9ZvkLS (google shared drive with presentations and diagrams) IRC: #kronosnet on Libera https://lists.kronosnet.org/mailman3/postorius/lists/users.lists.kronosnet.… https://lists.kronosnet.org/mailman3/postorius/lists/devel.lists.kronosnet.… https://lists.kronosnet.org/mailman3/postorius/lists/commits.lists.kronosne… Cheers, The knet developer team

1 0

kronosnet v1.30 released
by Fabio M. Di Nitto 02 Dec '24

02 Dec '24

All, We are pleased to announce the general availability of kronosnet v1.30 kronosnet (or knet for short) is the new underlying network protocol for Linux HA components (corosync), that features the ability to use multiple links between nodes, active/active and active/passive link failover policies, automatic link recovery, FIPS compliant encryption (nss and/or openssl), automatic PMTUd and in general better performance compared to the old network protocol. Highlights in this release: * Convert time_t to unsigned long long before formatting * Add warning when packets are being received from the wrong interface Known issues in this release: * None The source tarballs can be downloaded here: https://www.kronosnet.org/releases/ Upstream resources and contacts: https://kronosnet.org/ https://github.com/kronosnet/kronosnet/ https://ci.kronosnet.org/ https://projects.clusterlabs.org/project/board/86/ (TODO list and activities tracking) https://goo.gl/9ZvkLS (google shared drive with presentations and diagrams) IRC: #kronosnet on Libera https://lists.kronosnet.org/mailman3/postorius/lists/users.lists.kronosnet.… https://lists.kronosnet.org/mailman3/postorius/lists/devel.lists.kronosnet.… https://lists.kronosnet.org/mailman3/postorius/lists/commits.lists.kronosne… Cheers, The knet developer team

1 0

kronosnet v1.29 released
by Fabio M. Di Nitto 06 Jun '24

06 Jun '24

All, We are pleased to announce the general availability of kronosnet v1.29 kronosnet (or knet for short) is the new underlying network protocol for Linux HA components (corosync), that features the ability to use multiple links between nodes, active/active and active/passive link failover policies, automatic link recovery, FIPS compliant encryption (nss and/or openssl), automatic PMTUd and in general better performance compared to the old network protocol. Highlights in this release: * Fix build on armhf * update to latest doxyxml from libqb * Fix FORTIFY source detection * Fix potential overflow in the test suite Known issues in this release: * None The source tarballs can be downloaded here: https://www.kronosnet.org/releases/ Upstream resources and contacts: https://kronosnet.org/ https://github.com/kronosnet/kronosnet/ https://ci.kronosnet.org/ https://projects.clusterlabs.org/project/board/86/ (TODO list and activities tracking) https://goo.gl/9ZvkLS (google shared drive with presentations and diagrams) IRC: #kronosnet on Libera https://lists.kronosnet.org/mailman3/postorius/lists/users.lists.kronosnet.… https://lists.kronosnet.org/mailman3/postorius/lists/devel.lists.kronosnet.… https://lists.kronosnet.org/mailman3/postorius/lists/commits.lists.kronosne… Cheers, The knet developer team

1 0

kronosnet v1.28 released
by Fabio M. Di Nitto 27 Sep '23

27 Sep '23

All, We are pleased to announce the general availability of kronosnet v1.28 kronosnet (or knet for short) is the new underlying network protocol for Linux HA components (corosync), that features the ability to use multiple links between nodes, active/active and active/passive link failover policies, automatic link recovery, FIPS compliant encryption (nss and/or openssl), automatic PMTUd and in general better performance compared to the old network protocol. Highlights in this release: * Fix build on i686 Known issues in this release: * none The source tarballs can be downloaded here: https://www.kronosnet.org/releases/ Upstream resources and contacts: https://kronosnet.org/ https://github.com/kronosnet/kronosnet/ https://ci.kronosnet.org/ https://projects.clusterlabs.org/project/board/86/ (TODO list and activities tracking) https://goo.gl/9ZvkLS (google shared drive with presentations and diagrams) IRC: #kronosnet on Libera https://lists.kronosnet.org/mailman3/postorius/lists/users.lists.kronosnet.… https://lists.kronosnet.org/mailman3/postorius/lists/devel.lists.kronosnet.… https://lists.kronosnet.org/mailman3/postorius/lists/commits.lists.kronosne… Cheers, The knet developer team

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

Devel