Infix v26.06.0

Note

Noteworthy changes and additions in this release:

🌐 Web Interface: Infix gets its first-ever web interface! Browse live status and a full operational tree, handle common tasks from curated configuration pages, and drop into a YANG tree editor for everything else. A maintenance section covers firmware upgrade, backup & restore, and more.

📶 Wi-Fi Roaming & Mesh: Access points sharing an SSID can hand clients off seamlessly with 802.11k/v/r, form a cable-free 802.11s mesh backhaul, and steer dual-band clients onto the faster 5/6 GHz band.

🗓️ System Scheduling: Reusable time schedules based on ietf-schedule (RFC 9922) let features like scheduled reboot and software update checks run on a recurring, cron-style calendar.

Changes

• Upgrade Linux kernel to 6.18.37 (LTS)
• Upgrade Buildroot to 2025.02.15 (LTS)
• Add basic web interface: static status pages and a tree view of operational status. Curated configuration pages for some common tasks and a YANG tree editor for the rest. Also includes a maintenance section for firmware upgrade, backup & restore, and more
• Add Wi-Fi roaming for fast, seamless hand-off between access points that share an SSID: 802.11k, 802.11v and 802.11r (over-the-air FT). See the Wi-Fi guide for details
• Add Wi-Fi 802.11s mesh support, letting access points form a wireless backhaul between each other without cabling
• Add band steering for dual-band access points, nudging dual-band clients onto the faster 5/6 GHz band
• Add legacy-rates option to re-enable 802.11b rates on 2.4 GHz for old IoT devices (disabled by default)
• Add system scheduling based on ietf-schedule (RFC 9922), using the iCalendar recurrence grouping pruned to cron-expressible rules. Schedules are reusable time-specs; features (scheduled-reboot, software/check-update) trigger off them via a schedule reference
• Configuring multiple BSS (more than one SSID) on a single Wi-Fi radio now requires an explicitly configured MAC address per BSS
• New operational advertised-pmd-types leaf-list on each Ethernet interface, exposing the link modes currently advertised, to compare against the supported-pmd-types introduced in v26.05.0
• Release assets no longer ship separate .sha256 checksum files; the download page now publishes a SHA-256 checksum for each asset directly

Fixes

• Fix #941: a VETH pair can now connect two containers directly, with both ends assigned to containers.
• Enabling IP masquerading in the firewall no longer enables IP forwarding on all interfaces. This has been an issue ever since the firewall support was introduced in v25.10.0
• Fix file permission regression in /cfg/startup-config.cfg, causing the default admin user no permission to read or write the file from shell
• Fix admin url shown for HTTP/HTTPS links in https://network.local browser, used pre-conflict resolution hostname.local, instead of hostname-2.local
• Fix unreadable per-port temperature sensor names in show hardware on Marvell based switches: each sensor is now named after the front-panel port it serves (e.g. e1, e2) instead of a raw device-tree path. show system also reports a representative SoC temperature on CN913x platforms
• Fix missing contact and location settings in operational status; the values were configurable but never returned on RESTCONF/NETCONF reads
• Fix spurious YANG validation warnings, for NTP and WireGuard configuration, emitted on every NETCONF session and schema load

Tip

Try Infix in GNS3! See the blog post for details https://www.kernelkit.org/posts/infix-in-gns3/

Infix v26.06.0-rc1

Changes

• Upgrade Linux kernel to 6.18.37 (LTS)
• Upgrade Buildroot to 2025.02.15 (LTS)
• Add basic web interface: static status pages and a tree view of operational status. Curated configuration pages for some common tasks and a YANG tree editor for the rest. Also includes a maintenance section for firmware upgrade, backup & restore, and more
• Add Wi-Fi roaming for fast, seamless handoff between access points that share an SSID: 802.11k, 802.11v and 802.11r (over-the-air FT). See the Wi-Fi guide for details
• Add Wi-Fi 802.11s mesh support, letting access points form a wireless backhaul between each other without cabling
• Add band steering for dual-band access points, nudging dual-band clients onto the faster 5/6 GHz band
• Add legacy-rates option to re-enable 802.11b rates on 2.4 GHz for old IoT devices (disabled by default)
• Add system scheduling based on ietf-schedule (RFC 9922), using the iCalendar recurrence grouping pruned to cron-expressible rules. Schedules are reusable time-specs; features (scheduled-reboot, software/check-update) trigger off them via a schedule reference
• Configuring multiple BSS (more than one SSID) on a single Wi-Fi radio now requires an explicitly configured MAC address per BSS
• New operational advertised-pmd-types leaf-list on each Ethernet interface, exposing the link modes currently advertised, to compare against the supported-pmd-types introduced in v26.05.0
• Release assets no longer ship separate .sha256 checksum files; the download page now publishes a SHA-256 checksum for each asset directly

Fixes

• Fix #941: a VETH pair can now connect two containers directly, with both ends assigned to containers.
• Enabling IP masquerading in the firewall no longer enables IP forwarding on all interfaces. This has been an issue ever since the firewall support was introduced in v25.10.0
• Fix file permission regression in /cfg/startup-config.cfg, causing the default admin user no permission to read or write the file from shell
• Fix admin url shown for HTTP/HTTPS links in https://network.local browser, used pre-conflict resolution hostname.local, instead of hostname-2.local
• Fix unreadable per-port temperature sensor names in show hardware on Marvell based switches: each sensor is now named after the front-panel port it serves (e.g. e1, e2) instead of a raw device-tree path. show system also reports a representative SoC temperature on CN913x platforms
• Fix missing contact and location settings in operational status; the values were configurable but never returned on RESTCONF/NETCONF reads
• Fix spurious YANG validation warnings, for NTP and WireGuard configuration, emitted on every NETCONF session and schema load

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.

Infix v26.05.0

Changes

• Upgrade Linux kernel to 6.18.33 (LTS)
• Upgrade Buildroot to 2025.02.14 (LTS)
• Upgrade FRR to 10.5.4
• Add support for Acer Connect Vero W6m, a low-cost COTS home router, based on the same hardware as Banana Pi BPI-R3, but with a Wi-Fi 6E (6 GHz band) chip.
• Add configurable channel-width in Wi-Fi configuration.
• Upgrade ieee802-ethernet-interface YANG model to revision 2025-09-10 (IEEE Std 802.3.2-2025), adding the standard phy-type and pmd-type operational leaves. Speed is now exposed via ietf-interfaces:speed (bps, RFC 8343); the now obsolete eth:speed is no longer returned
• Rework show interface summary output as layered protocol rows. When a port has link, a physical-medium row (e.g. 1000baseT, 10GbaseLR) appears above the ethernet row. VLAN, GRE, VXLAN and WiFi interfaces likewise get one row per protocol layer, with type-specific data on each (vid:, remote:, vni:, station ssid:, etc.), issue #530
• Add support for configurable auto-negotiation for Ethernet ports. A new advertised-pmd-types leaf-list replaces the fixed speed idiom for pinned link modes, issue #805. See the Ethernet Interfaces section in the User Guide for details. Existing configurations using fixed speed are migrated automatically on upgrade
• Add support for configurable MDI/MDI-X pinout on Ethernet ports. Needed on some PHYs where Auto-MDIX stops working once auto-negotiation is disabled
• New operational supported-pmd-types leaf-list on each Ethernet interface, exposing the set of PMD types currently supported
• New CLI command show operational, and optional XPath filtering for this and any of the other datastores, using [path /path/to/subtree]
• CLI show commands now surface human-friendly error messages instead of a raw Python exceptions, e.g., Interface "w" not found

Fixes

• Fix #1493: container with a physical interface not properly removed when switching to a configuration without containers
• Fix #1506: add documentation on how to configure VLAN interfaces, including stacked (Q-in-Q) VLAN interfaces, in a dedicated vlan.md
• Handle unclean daemon exits better, e.g., dbus-daemon crashing and leaving a stale pidfile behind, causing it to refuse to be restarted
• Fix occasional blank or garbled [ OK ] lines at startup
• Disallow multicast MAC addresses in custom MAC address configuration
• Fix broken Wi-Fi 6 GHz band configuration.
• Fix operational read of /containers failing and thereby aborting all operational get-data, including RESTCONF/NETCONF reads — for containers whose command contains shell metacharacters, e.g. sh -c "... && ..."
• WireGuard interfaces are now regenerated when a referenced keystore key changes: the asymmetric private-key, and the symmetric preshared-key at both peer-group and per-peer level
• Fix crash in operational data when a bridge has VLAN ranges configured: the kernel may report ranges (e.g. vlan 1 vlanEnd 3) from bridge vlan global show, which were not expanded, so show interface and other operational reads failed. Ranges are now expanded and listed correctly

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.

Infix v26.05.0-rc1

Changes

• Upgrade Linux kernel to 6.18.33 (LTS)
• Upgrade Buildroot to 2025.02.14 (LTS)
• Upgrade FRR to 10.5.4
• Add support for Acer Connect Vero W6m, a low-cost COTS home router, based on the same hardware as Banana Pi BPI-R3, but with a Wi-Fi 6E (6 GHz band) chip.
• Add configurable channel-width in Wi-Fi configuration.
• Upgrade ieee802-ethernet-interface YANG model to revision 2025-09-10 (IEEE Std 802.3.2-2025), adding the standard phy-type and pmd-type operational leaves. Speed is now exposed via ietf-interfaces:speed (bps, RFC 8343); the now obsolete eth:speed is no longer returned
• Rework show interface summary output as layered protocol rows. When a port has link, a physical-medium row (e.g. 1000baseT, 10GbaseLR) appears above the ethernet row. VLAN, GRE, VXLAN and WiFi interfaces likewise get one row per protocol layer, with type-specific data on each (vid:, remote:, vni:, station ssid:, etc.), issue #530
• Add support for configurable auto-negotiation for Ethernet ports. A new advertised-pmd-types leaf-list replaces the fixed speed idiom for pinned link modes, issue #805. See the Ethernet Interfaces section in the User Guide for details. Existing configurations using fixed speed are migrated automatically on upgrade
• Add support for configurable MDI/MDI-X pinout on Ethernet ports. Needed on some PHYs where Auto-MDIX stops working once auto-negotiation is disabled
• New operational supported-pmd-types leaf-list on each Ethernet interface, exposing the set of PMD types currently supported
• New CLI command show operational, and optional XPath filtering for this and any of the other datastores, using [path /path/to/subtree]
• CLI show commands now surface human-friendly error messages instead of a raw Python exceptions, e.g., Interface "w" not found

Fixes

• Fix #1493: container with a physical interface not properly removed when switching to a configuration without containers
• Fix #1506: add documentation on how to configure VLAN interfaces, including stacked (Q-in-Q) VLAN interfaces, in a dedicated vlan.md
• Handle unclean daemon exits better, e.g., dbus-daemon crashing and leaving a stale pidfile behind, causing it to refuse to be restarted
• Fix occasional blank or garbled [ OK ] lines at startup
• Disallow multicast MAC addresses in custom MAC address configuration
• Fix broken Wi-Fi 6 GHz band configuration.
• Fix operational read of /containers failing and thereby aborting all operational get-data, including RESTCONF/NETCONF reads — for containers whose command contains shell metacharacters, e.g. sh -c "... && ..."
• WireGuard interfaces are now regenerated when a referenced keystore key changes: the asymmetric private-key, and the symmetric preshared-key at both peer-group and per-peer level
• Fix crash in operational data when a bridge has VLAN ranges configured: the kernel may report ranges (e.g. vlan 1 vlanEnd 3) from bridge vlan global show, which were not expanded, so show interface and other operational reads failed. Ranges are now expanded and listed correctly

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.

Infix v26.04.0

Changes

• Upgrade Linux kernel to 6.18.25 (LTS)
• Upgrade Buildroot to 2025.02.13 (LTS)
• Add support for per-bridge multicast router port in operational, issue #395
• Add support for static ARP (IPv4) and neighbor cache (IPv6) entries per interface, issue #819. Static entries are installed as permanent kernel neighbor table entries that are never evicted by normal ARP/NDP aging
• Add support for PTP/gPTP (IEEE 1588-2019 / 802.1AS) clock synchronization. Supported clock types: Ordinary Clock, Boundary Clock, and Transparent Clock. See the User Guide for configuration details
• Add support for Banana Pi BPI-R4, quad-core Cortex-A73 router with 4x 2.5 GbE switching, dual 10 GbE SFP+. Variants BPI-R4-2g5 and BPI-R4P have one SFP+ replaced by a 2.5 GbE RJ45, with optional PoE on the R4P
• Update Marvell ESPRESSObin board support. Allow booting with stock U-Boot, which only supports ext4 rootfs partitions; to use, apply the ext4 developer snippet before building (make apply-ext4 all)
• Fix onboard WiFi support on the Banana Pi BPi-R64

Fixes

• Fix #520: warn in syslog if multicast flooding is disabled
• Fix #769: document dummy interfaces in user guide
• Fix #790: document static multicast filters in user guide
• Fix #1439: changing hostname does not regenerate DHCP client conf until restart
• Fix #1458: show ntp tracking displaying a truncated Reference ID, e.g., 92.2 instead of 92.246.137.39
• Fix #1466: show container showing no output for containers whose command line includes environment variables
• Fix issue with IGMP queries sent with all-zeroes source MAC address
• Fix missing IGMP query startup burst when assuming IGMP querier role, as defined in RFC3376 §8.6/§8.7
• Fix Raspberry Pi 4 and Pi 400 display instability after soft reboot. Previously the touchscreen/DSI display required a full power cycle to reinitialise correctly; it now works reliably after reboot. Please note, you need a fairly up-to-date EEPROM version as well
• Fix BPI-R4 board README showing inverted DIP switch values for eMMC and SPI NAND boot modes, which would prevent the board from booting correctly
• Fix SAMA7G54 U-Boot build system selection that caused build failures
• Fix BPI-R3 PCIe devices failing to initialize on boot due to a missing clock definition in the device tree

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.

Infix v26.04.0-rc3

Changes

• Upgrade Linux kernel to 6.18.25 (LTS)
• Upgrade Buildroot to 2025.02.13 (LTS)
• Add support for per-bridge multicast router port in operational, issue #395
• Add support for static ARP (IPv4) and neighbor cache (IPv6) entries per interface, issue #819. Static entries are installed as permanent kernel neighbor table entries that are never evicted by normal ARP/NDP aging
• Add support for PTP/gPTP (IEEE 1588-2019 / 802.1AS) clock synchronization. Supported clock types: Ordinary Clock, Boundary Clock, and Transparent Clock. See the User Guide for configuration details
• Add support for Banana Pi BPI-R4, quad-core Cortex-A73 router with 4x 2.5 GbE switching, dual 10 GbE SFP+. Variants BPI-R4-2g5 and BPI-R4P have one SFP+ replaced by a 2.5 GbE RJ45, with optional PoE on the R4P
• Update Marvell ESPRESSObin board support. Allow booting with stock U-Boot, which only supports ext4 rootfs partitions; to use, apply the ext4 developer snippet before building (make apply-ext4 all)
• Fix onboard WiFi support on the Banana Pi BPi-R64

Fixes

• Fix #520: warn in syslog if multicast flooding is disabled
• Fix #769: document dummy interfaces in user guide
• Fix #790: document static multicast filters in user guide
• Fix #1439: changing hostname does not regenerate DHCP client conf until restart
• Fix #1458: show ntp tracking displaying a truncated Reference ID, e.g., 92.2 instead of 92.246.137.39
• Fix #1466: show container showing no output for containers whose command line includes environment variables
• Fix issue with IGMP queries sent with all-zeroes source MAC address
• Fix missing IGMP query startup burst when assuming IGMP querier role, as defined in RFC3376 §8.6/§8.7
• Fix Raspberry Pi 4 and Pi 400 display instability after soft reboot. Previously the touchscreen/DSI display required a full power cycle to reinitialise correctly; it now works reliably after reboot. Please note, you need a fairly up-to-date EEPROM version as well
• Fix BPI-R4 board README showing inverted DIP switch values for eMMC and SPI NAND boot modes, which would prevent the board from booting correctly
• Fix SAMA7G54 U-Boot build system selection that caused build failures
• Fix BPI-R3 PCIe devices failing to initialize on boot due to a missing clock definition in the device tree

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.

Infix v26.03.0

Changes

• Upgrade Linux kernel to 6.18.20 (LTS)
• Upgrade Buildroot to 2025.02.12 (LTS)
• Upgrade FRR to 10.5.3
• Add support for Banana Pi R64 Mini, 5 port router with WiFi 5
• Add support for Raspberry Pi 400, an RPi 4B built into a keyboard
• Significant boot time improvements, issue #1284. The InitViz boot profiling tool is now included for users who want to visualize and measure the boot process on their own hardware
• Add OSPF point-to-multipoint (P2MP) and hybrid interface type support. This also includes support for setting static neighbors, issue #1426
• Revamped http://network.local device browser. Device cards now show the IP address, product name, and firmware version from mDNS TXT records. the mDNS browser is now also available over plain HTTP
• mDNS service records now embed the per-device hostname (using avahi's %h wildcard), so devices avoid the #2, #3 suffix collisions on service names when multiple Infix devices share the same LAN
• Add configurable mDNS hostname: set services mdns hostname to override the mDNS name advertised in A/AAAA records. Supports %h (default hostname), %i (hardware ID), and %m (MAC address) format specifiers
• cli: new show mdns command to list mDNS-discovered devices on the LAN, with addresses and product model
• Add SSH client commands to the CLI: - ssh [user <name>] [port <num>] <host> — connect to a remote device - set ssh known-hosts <host> <keytype> <pubkey> — pre-enroll a host key received out-of-band, e.g. after a factory reset - no ssh known-hosts <host> — remove a stale or changed host key entry
• Add support for user-configurable HTTPS certificate: select any certificate stored in the keystore via services web certificate <name>. The default auto-generated self-signed certificate is now stored in the keystore rather than in /cfg/ssl and existing certificates are auto-migrated on upgrade
• Add NTP stratum-weight setting to fine-tune server selection when multiple NTP sources are available with different stratum levels
• Enable HDMI console output on Raspberry Pi 4 and Pi 400. Previously the display was suppressed; a login prompt now appears on the HDMI monitor

Fixes

• Fix #892: suppress rousette RESTCONF server warnings from syslog
• Fix #1122: add missing migration script for the YANG validation introduced in v25.10.0 that disallows IP addresses on bridge member ports. Without this script, upgrading with such a startup-config would prevent the device from booting. The migration removes all IP addresses from bridge member ports; any addresses that should be kept must be re-added to the bridge interface itself after upgrade
• Fix #1387: infix.local now resolves to exactly one device per LAN. Previously all Infix devices claimed both hostname.local and infix.local, causing avahi to append #2, #3 suffixes to the shared alias on busy networks. Assignment is now first-come-first-served using standard mDNS conflict resolution
• Fix #1389: firewall policies with names longer than 17 characters were silently rejected
• Fix #1416: show firewall command show an error when the firewall is disabled
• Fix #1438: default route from DHCP client not set at boot, regression in v26.02.0
• Fix #1446: suppress netopeer2-server NETCONF server warnings from syslog
• Fix #1456: update project links in SUPPORT.md and README.md to point to the home page and blog at https://www.kernelkit.org, and update the release link to always resolve to the latest stable release
• Fix regression in MVEBU SafeXcel Crypto Engine for Marvell Armada SOCs (37xx, 7k, 8k, and CN913x series). Firmware package lost in v26.01.0
• Fix DHCP client not sending hostname to server (e.g. for dnsmasq lease registration). All board factory configs had the hostname option without value: auto, so udhcpc only requested the option instead of sending it. Setting up a DHCP client manually was not affected. Also, the hostname format string (e.g. rpi-%m) was not expanded to the actual system hostname before being passed to udhcpc
• Fix dnsmasq logging spurious "Ignoring duplicate dhcp-option" warnings for options 3 (router) and 6 (dns-server) on every DHCP transaction. Add dhcp-authoritative so clients with unexpired leases are not NAKed after a router crash or factory reset that clears the lease database

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.

Infix v26.03.0-rc1

Changes

• Upgrade Linux kernel to 6.18.20 (LTS)
• Upgrade Buildroot to 2025.02.12 (LTS)
• Upgrade FRR to 10.5.3
• Add support for Banana Pi R64 Mini, 5 port router with WiFi 5
• Add support for Raspberry Pi 400, an RPi 4B built into a keyboard
• Significant boot time improvements, issue #1284. The InitViz boot profiling tool is now included for users who want to visualize and measure the boot process on their own hardware
• Add OSPF point-to-multipoint (P2MP) and hybrid interface type support. This also includes support for setting static neighbors, issue #1426
• Revamped http://network.local device browser. Device cards now show the IP address, product name, and firmware version from mDNS TXT records. the mDNS browser is now also available over plain HTTP
• mDNS service records now embed the per-device hostname (using avahi's %h wildcard), so devices avoid the #2, #3 suffix collisions on service names when multiple Infix devices share the same LAN
• Add configurable mDNS hostname: set services mdns hostname to override the mDNS name advertised in A/AAAA records. Supports %h (default hostname), %i (hardware ID), and %m (MAC address) format specifiers
• cli: new show mdns command to list mDNS-discovered devices on the LAN, with addresses and product model
• Add SSH client commands to the CLI: - ssh [user <name>] [port <num>] <host> — connect to a remote device - set ssh known-hosts <host> <keytype> <pubkey> — pre-enroll a host key received out-of-band, e.g. after a factory reset - no ssh known-hosts <host> — remove a stale or changed host key entry
• Add support for user-configurable HTTPS certificate: select any certificate stored in the keystore via services web certificate <name>. The default auto-generated self-signed certificate is now stored in the keystore rather than in /cfg/ssl and existing certificates are auto-migrated on upgrade
• Add NTP stratum-weight setting to fine-tune server selection when multiple NTP sources are available with different stratum levels
• Enable HDMI console output on Raspberry Pi 4 and Pi 400. Previously the display was suppressed; a login prompt now appears on the HDMI monitor

Fixes

• Fix #892: suppress rousette RESTCONF server warnings from syslog
• Fix #1122: add missing migration script for the YANG validation introduced in v25.10.0 that disallows IP addresses on bridge member ports. Without this script, upgrading with such a startup-config would prevent the device from booting. The migration removes all IP addresses from bridge member ports; any addresses that should be kept must be re-added to the bridge interface itself after upgrade
• Fix #1387: infix.local now resolves to exactly one device per LAN. Previously all Infix devices claimed both hostname.local and infix.local, causing avahi to append #2, #3 suffixes to the shared alias on busy networks. Assignment is now first-come-first-served using standard mDNS conflict resolution
• Fix #1389: firewall policies with names longer than 17 characters were silently rejected
• Fix #1416: show firewall command show an error when the firewall is disabled
• Fix #1438: default route from DHCP client not set at boot, regression in v26.02.0
• Fix #1446: suppress netopeer2-server NETCONF server warnings from syslog
• Fix #1456: update project links in SUPPORT.md and README.md to point to the home page and blog at https://www.kernelkit.org, and update the release link to always resolve to the latest stable release
• Fix regression in MVEBU SafeXcel Crypto Engine for Marvell Armada SOCs (37xx, 7k, 8k, and CN913x series). Firmware package lost in v26.01.0
• Fix DHCP client not sending hostname to server (e.g. for dnsmasq lease registration). All board factory configs had the hostname option without value: auto, so udhcpc only requested the option instead of sending it. Setting up a DHCP client manually was not affected. Also, the hostname format string (e.g. rpi-%m) was not expanded to the actual system hostname before being passed to udhcpc
• Fix dnsmasq logging spurious "Ignoring duplicate dhcp-option" warnings for options 3 (router) and 6 (dns-server) on every DHCP transaction. Add dhcp-authoritative so clients with unexpired leases are not NAKed after a router crash or factory reset that clears the lease database

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.

Infix v26.02.1

Changes

• Upgrade Linux kernel to 6.18.17 (LTS)
• Add support for disabling WiFi and GPS features in builds
• Add OSPF point-to-multipoint (P2MP) and hybrid interface type support. This also includes support for setting static neighbors, issue #1426

Fixes

• Fix #1389: legacy name limit in firewalld triggered problems with policy names
• Fix #1416: show firewall command show an error when the firewall is disabled
• Fix #1438: default route from DHCP client not set at boot, regression in v26.02.0
• Fix instabilities in Zebra route manager after Frr upgrade in v26.02.0
• Fix regression in MVEBU SafeXcel Crypto Engine for Marvell Armada SOCs (37xx, 7k, 8k, and CN913x series). Firmware package lost in v26.01.0

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.

Infix v26.02.1-rc3

Changes

• Upgrade Linux kernel to 6.18.17 (LTS)
• Add support for disabling WiFi and GPS features in builds
• Add OSPF point-to-multipoint (P2MP) and hybrid interface type support. This also includes support for setting static neighbors, issue #1426

Fixes

• Fix #1389: legacy name limit in firewalld triggered problems with policy names
• Fix #1416: show firewall command show an error when the firewall is disabled
• Fix #1438: default route from DHCP client not set at boot, regression in v26.02.0
• Fix instabilities in Zebra route manager after Frr upgrade in v26.02.0
• Fix regression in MVEBU SafeXcel Crypto Engine for Marvell Armada SOCs (37xx, 7k, 8k, and CN913x series). Firmware package lost in v26.01.0

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.