TM Patch History Last Updated 2011/07/01 Version 28

Transcription

1 TM Patch History Last Updated 2011/07/01 Version 28 To contact Array Networks, Inc. Customer Support, please call MY-ARRAY ( ) or the team at Additional Information: Array Networks, Inc McCarthy Blvd. Milpitas, CA Phone: (408) Toll Free: MY-ARRAY Fax: (408) Telephone access to Array Networks, Inc. is available Monday - Friday, 9 A.M. to 5 P.M. PST.

2 TM x Release Patch History Release Date Work ID Component Change Description TM /07/ SSL Fix SSL CRL partial import issue WebUI Add WebUI support for SSL CRL filter ) Security Holes Update BIND to to address CVE vulnerabilities WebUI Fix WebUI vlink Japanese translation SLB Fix ftp passive externalip could not be loaded successful after system upgrade WebUI Add publickey option support for http xclientcert plaintext cookie on WebUI SLB Fix a SLB HC status display problem. TM /03/ ) General Add more information into HTTP Log and Error Log for debug SSL Fix a CRL file download problem due to two CRL CAs use the same subject ClickTCP Fix a problem of duplicate ACK on POST request Proxy Fix a system reboot caused by compression engine WebUI Add Opera and Chrome browser support for WebUI SSL Fix a SSL problem that CRL file download incompletely Proxy Fix unit reboot problem with http rewrite request url WebUI Add "http rewrite request insertheader" support on WebUI SLB Fix SLB SSLSID group method error log problem SLB Support L4SLB actively closing connection for the SSLSID group method HealthCheck Enhance the help string for "health check" flag parameter.

3 TM /02/ ) TM /01/ ) Reverse Proxy Fix a system reboot by proper track server closing WebUI Fix WebUI errors when system name field has space Compression Fix compression error caused by compressed response contains chunked transfer-coding when client use HTTP/1.0 protocol Compression Fix compression pages display failure caused by timer overflow Cluster Virtual Fix cluster abnormal switchover problem caused by system ticks overflow when unit run over 497 days WebUI Fix debug snapshot file open failure caused by WebUI "show tech" changed the file access mode SLB Fix show statistic slb failure caused by lack of memory General General Fix unit reboot due to HW fan failure (speed equal 0) and add a log message for it. Fix WebUI unable store changed WebUI port information with bind interface WebUI Fix WebUI blank/timeout page problem with sysconfig Security Holes Upgrade BIND to P3 to address CVE vulnerabilities WebUI Fix WebUI unable save port forward mode configuration with Japanese and Chinese language SLB Extend SLB name string length to 40 characters (from 20) SSL Fix SSL Key missing issue due to original key is deleted and the new key cannot be imported General Fix the disk problem by moving messages logs to /var/crash/.

4 TM /11/ ) General Fix show run and show tech partial output due to invalid log alert input SLB Fix SLB QoS policy problem that could not work with vlink Cluster Virtual Fix a high CPU usage problem SLB WebUI Support actively closing connection for the L4 real service when its health check status is down. Fix missing L2SLB virtual service display problem on WebUI SSL Upgrade OpenSSL to 0.9.8p to avoid the vulnerability CVE L4SLB Fix SLB UDP source port select problem to stay consistent with SLB TCP s behavior under system transparent mode NAT Fix a problem that FTP could not pass through NAT under FTP passive mode SSL Decrease the memory allocation for FastCRL zone from 50M to 45M Proxy Cache Fix partial object retrieve through cache with slow client, system transparent mode and serverconnreuse LLB Fix a LLB DNS problem by associating it with related LLB link route General Add the statistics of show interface and show cluster virtual status into monitor script Cluster Virtual Fix a high CPU usage by cluster after switchover SLB Fix a panic caused by local DOS/DDOS attack with large number of MAC addresses GSLB Fix GSLB CLI slow response/display missing issue SSL Fix FastCRL certificate check inconsistency issue by associate LDAP CDP to the assigned SSL vhost.

5 TM /9/ ) SLB Add WebUI interface for tracking Client and Server relationship WebUI Support the external IP address for SLB FTP and SLB FTPS data connection on WebUI Proxy Cache Fix a problem of Vary header error log caused by Vary field contains * character General Fix a system unstable problem caused by Eroute table work failure under stress testing SLB Support the external IP address for SLB SLB FTP and SLB FTPS data connections. Fix an SLB 503 error caused by that SLB backup policy could not be hit when Real service is in overload status WebUI Fix incomplete page display problem caused by host name contains - character ClickTCP Fix a panic caused by that RDP service received a data packet with FIN flag General Fix an Enable password problem when input an invalid enable password SLB Add upper limit (3600 sec) for Real Service recovery time and warm-up time GSLB Fix a problem to enable SDNS DPS detector to work with Cluster IP Security Holes Update Apache to to avoid the vulnerability CVE SNMP Change MIB Object-type name first letter to lower case to comply with RFC WebUI Fix a Real service sorting problem on WebUI SSL Add regular expression support for command http acl url SLB Add regular expression support for the host field of commands http rewrite and http redirect.

6 TM /7/16/ ) General Fix a TCP Syslog lost problem during new setup new TCP connection to log server SLB Fix a SharePoint integration issue: proper process server response before client request is completed SSL Add SSL session ID for Fastlog SLB Add a debug tool for SLB traffic trace support WebUI Add SLB RDP for full Microsoft Terminal Services support on WebUI General Add Border Gateway Protocol (BGP) support LLB Fix reboot problem caused by removing SDNS site under load SLB Fix backup group not taking traffic problem with cookie-based policy WebUI Fix a hostname display problem General Fix system statistics counter overflow error when unit run over 280 days CLI Add SNMP v2c support for SDNS SNMP load balancing method CLI Check the input of snmp on {}, only allow default or v WebUI Update WebUI SSL Certificate/Key with strong cipher for better security WebUI Fix bond interface missing IP statistics update errors LLB Fix a LLB statistics report issue SSL Fix errors when passing certificate OID data has Chinese characters with customized name General Resolve a high CPU usage problem caused by rrdtool SLB Purge imported HTTP/SSL error pages as part of clear config factorydefault General Fix an alert mail problem.

7 TM (GA) 2010/4/ ) CLI Add SLB FTPS for implicit FTPS support CLI Add SLB RDP for full Microsoft Terminal Services support.

8 Appendix A Enhancement 27274; Support actively closing connection for the L4 real service when its health check status is down. A new command is added for this enhancement. slb mode activeclose <{ on off }> This command is used to enable or disable the L4SLB TCP connection actively closing feature. By default, this feature is turned off. Turning this feature off will not actively close the TCP connections though the health check status of the real service is down. Enhancement 27051; Support the external IP address for SLB FTP and SLB FTPS data connection. A new command is added for this enhancement. ftp passive externalip <vsname> <ip> vsname Ip The name of the virtual service. The external IP address. Enhancement 26966; Add one parameter linkname to the CLI llb dns host. A new parameter is added for this enhancement. llb dns host <hostname> <ip> [weight] [port] [linkname] linkname The LLB link route name. The default value is. Enhancement 26413, 26411; Add SNMP v2c support for SDNS SNMP load balancing method. sdns snmp version [{v1 v2c}] The version of snmp protocol for manager to collect data, support v1 and v2c, default is snmp v2c. Enhancement 26412; Check the input of snmp on {}, only allow default or v3. snmp on [{default v3}] This command allows users to set the SNMP versions which are supported by the Array appliance SNMP agent. default means that the SNMP agent supports three SNMP versions: v1, v2 & v3. v3 means that SNMP agent only supports SNMP version 3.

9 Enhancement 25653; Add regular expression support for command http acl url. http acl url <virtual_service> <path> [level 0 1 2] For the <path> parameter, add regular expression support. Enhancement 25230; Add regular expression support for the host field of commands http rewrite and http redirect. http rewrite request url <virtual_name> <policy_name> <priority> <orig_host> <path_regex> <new_host> <path_replacement> For the <orig_host> parameter, add regular expression support. http rewrite response url <virtual_name> <policy_name> <priority> <orig_protocol> <orig_host> <path_regex> <new_protocol> <new_host> <path_replacement> For the <orig_host> parameter, add regular expression support. http redirect url <virtual_name> <policy_name> <priority> <orig_host> <path_regex> <new_protocol> <new_host> <path_replacement> <response_code> For the <orig_host> parameter, add regular expression support. Enhancement 23631; Add a debug tool for SLB traffic trace support. A new command is added for this enhancement. show slb server <client_ip> <IP_Mask> [<vs_name> <time_inteval>] client_ IP IP_Mask vs_name time_inteval The client IP address. It supports a single IP address or a range of IPs. The client network mask. The name of the virtual service. It should be a valid Virtual Service Name; the client and server access information will be collected only under this Virtual Service when this option is specified. The time internal (in seconds) of client access information collection. The default value is 10. Enhancement 22162; Add SLB FTPS for implicit FTPS support. Two new commands are added for this enhancement.

10 slb virtual ftps <virtual_name> <ip> [port] [max_conn] virtual_name ip port max_conn An assigned name, in the form of a character string, to the virtual service. Note: If the assigned name begins with a numeric character, then the string should be framed in double quotes. The virtual server IP address, in traditional dotted IP format. The virtual server port. When the port is 0, the virtual service is a virtual service with all-port range and this port range may be narrowed down by using the slb virtual port command. Set the maximum number of open connections per VIP. Default is 0. ftp passive portrange <start port> <end port> This command allows users to set the port range for data connections in passive FTP/FTPS. The begin port and end port should be within the range [1024, 65535]. Users can add 20 to 1000 ports to a port range. The port range is global. It can be used for all FTP/FTPS virtual services. Enhancement 19797; Add SLB RDP for full Microsoft Terminal Services support. slb virtual rdp <virtual_name> <ip> [port] [arp noarp] [maxconn] virtual_name ip port arp noarp An assigned name, in the form of a character string, to the virtual service. Note: If the assigned name begins with a numeric character, then the string should be framed in double quotes. The virtual server IP address, in traditional dotted IP format. The virtual server port. When the port is 0, the virtual service is a virtual service with all-port range and this port range may be narrowed down by using the slb virtual port command. If this parameter is provided, a noarp SLB virtual service is defined. A noarp SLB virtual service doesn t have its virtual IP address added in the network interfaces. Therefore, the virtual IP addresses of a noarp SLB virtual service can t be pinged or ARPed. This enables the client to send packets to the real service s IP address directly without knowing any new virtual IP address. In this case, Array

11 max_conn appliance should be set as the client s gateway. The Array appliance will forward the traffic to the real servers after some kinds of SLB processing, e.g.: SSL acceleration. It defaults to arp. Set the maximum number of open connections per VIP. Default is 0. slb real rdp <real_name> <ip> [port] [maxconn] [tcp icmp] [hc_up] [hc_down] real_name ip port max_conn tcp icmp hc_up hc_down An alpha-numeric string for the real service name. Note: If the assigned name begins with a numeric character, then the string needs to be framed in double quotes. The real service s IP address The port number that the real service will answer incoming requests. When the port is 0, it is a port range real service, and its port range is considered all-port. Sets the maximum number of open connections per real server. Default is Health check type performed to determine real service availability. The number of health checks to be performed with a positive result before marking the service as up. The default value is 3. The number of health checks to be performed with a negative result before determining the service as down. The default value is 3. For "slb group method <group_name> [algorithm]" Add algorithm "rdprt" for RDP Routing Token algorithm.