ConfD 8.0 Release Highlights

We are happy to announce the release of ConfD 8.0 with several exciting new features.  This blog post highlights the most important enhancements, changes, and deprecations.  These, however, are just the highlights.  As with any new ConfD release, you should read the CHANGES file to learn more about what is highlighted here as well as to learn about everything else which is new in this release.

New features include:

• Long Term Support release.
• Enabled use of authentication cache for RESTCONF external authentication (username/password) when RESTCONF token-based authentication is also being used.
• Reduced filesystem writes by reducing writes of state file.
• Added VRF support for RESTCONF and SNMP.
• Bias-free renaming of HA methods and APIs. Old version of names still available in C API.
• The YANG string input validation across interfaces and APIs is now enabled by default. i.e. The default value for /confdConfig/validateUtf8/enabled is now changed to ‘true’.
• Previously, using cdb_create(), cdb_set_elem() or cdb_set_elem2() on children of non-existent presence container succeeded and the presence container was created implicitly. The behaviour has been corrected and the presence container must be created explicitly before setting/creating its children.
• TLS 1.1 is still available but is now disabled by default.
• Operational data can now be loaded into ConfD in JSON format through MAAPI load config.
• The location of the shared-memory schema file used by C API clients is now configurable in confd.conf through the /confdConfig/sharedMemorySchemaPath parameter. It defaults to <confd-run-dir>/state/schema, which was previously hard-coded.
• The confdc compiler has been changed to prevent emitting custom versions of system built-in YANG namespaces.
• YANG 1.1 submodules belonging to the same module, including each other, no longer cause circular dependency errors.

Removals include:

• As first announced in the ConfD 7.6 release, the ConfD build toolchain has been updated for ConfD 8.0. This impacts the oldest version of glibc supported for use on Linux. As of the ConfD 8.0 release, the minimum version of glibc supported for Linux will be glibc-2.24 for all ConfD CPU architectures except for MIPS where the minimum version remains 2.16.