Traffic Dictator v1.3.1 Release Notes

by

Summary

Traffic Dictator version 1.3.1 has been released on 21.02.2025. This article describes changes in the new version.

This is a minor release with just a couple of improvements and bug fixes.

New feature: user management

TD relies on Linux configuration for user management and authentication. If you want to SSH into a TD container, or authenticate API requests, TD would use regular Linux PAM system to authenticate users.

It might not be very convenient to add users every time you remove the TD container and start the new one. The idea is to have all configuration in the startup-config file, so you can kill and start new containers without any extra tuning. So now it’s possible to create users directly from TD CLI.

Config model:

management users
   ! 
   user 
      password [cleartext|encrypted] <>

Example:

TD1#conf
TD1(config)#management users
TD1(config-mgmt-users)#user testuser123
TD1(config-mgmt-username)#password cleartext testpwd123

The cleartext pаssword is not stored anywhere, its converted immediately into a salted hash that is stored in /etc/shаdow. Verify:

TD1#show run | sec users
management users
   !
   user testuser123
      password encrypted $6$ywTuflJYxwWhyJUs$xxAptP1yoU23MwTyWZ50wNPm8wIPHMr42yN6mm4BovOAeNpPq5fx4tyST5fEK8UDMt7yyb9WhiNvfanlNyVC30

Next time you can start another TD container with the same config, the user will be created with the encrypted pаssword. You can also copy-paste the encrypted pаssword into CLI of another container.

Bug fixes

1. Extended admin group TLV in BGP-LS is parsed incorrectly in some cases (bug #37). RFC 9104 is vague about the length of TLV 1173, but most implementations advertise 8 different values (per priority, similar to unreserved bandwidth). FRR advertises just one value which was handled incorrectly until 1.3.1. This is mostly cosmetic because as of 1.3.1, TD uses only regular admin group (TLV 1088) for path calculation.

2. Exception when trying to send a BGP-LU route (bug #38). Policy advertisement using BGP-LU got broken in 1.3, due to a significant rework of segment list format in policy engine that was required by PCEP. The code that extracts segment list to generate BGP-LU routes was not updated properly. Now it’s fixed in 1.3.1.

Download

You can download the new version of Traffic Dictator from the Downloads page.

Leave a Comment