v0.76-rel

Release Summary

This minor release focuses on allowing license management to be automated.
Users will find this useful for automating this task during deployments; such as via puppet, terraform, etc..

New Features

• add the ability to manage licenses from the CLI
• allow the licensemanager API routes to be accessed without a license

Bug Fixes

• support licenses with no end date
• merge in the fix for DMZ feature (installing via -dmz or NETWORK_MODE=2)
• fix dsiprouter chown defaults to check which installed services to chown

Full Changelog

v0.75-rel...v0.76-rel

dSIPRouter Version 0.75

New Features

support the following signalling translations for endpoint groups:

• sip_udp -> sip_udp
• sip_udp -> sip_tcp
• sip_udp -> sip_sctp
• sip_udp -> sips_tls
• sip_udp -> sips_sctp
• sip_tcp -> sip_udp
• sip_tcp -> sip_tcp
• sip_tcp -> sip_sctp
• sip_tcp -> sips_tls
• sip_tcp -> sips_sctp
• sip_sctp -> sip_udp
• sip_sctp -> sip_tcp
• sip_sctp -> sip_sctp
• sip_sctp -> sips_tls
• sip_sctp -> sips_sctp
• sips_tls -> sip_udp
• sips_tls -> sip_tcp
• sips_tls -> sip_sctp
• sips_tls -> sips_tls
• sips_tls -> sips_sctp
• sips_sctp -> sip_udp
• sips_sctp -> sip_tcp
• sips_sctp -> sip_sctp
• sips_sctp -> sips_tls
• sips_sctp -> sips_sctp
• sip_ws -> sip_udp
• sip_ws -> sip_tcp
• sip_ws -> sip_sctp
• sip_ws -> sips_tls
• sip_ws -> sips_sctp
• sips_wss -> sip_udp
• sips_wss -> sip_tcp
• sips_wss -> sip_sctp
• sips_wss -> sips_tls
• sips_wss -> sips_sctp

support the following media translations for endpoint groups:

• any -> Proxy Media
• any -> Direct Media
• any -> RTP/AVP
• any -> RTP/SAVP
• any -> RTP/AVPF
• any -> RTP/SAVPF
• any -> UDP/TLS/RTP/SAVP
• any -> UDP/TLS/RTP/SAVPF
• any -> T.38 over UDPTL
• any -> OSRTP over RTP/AVP
• any -> OSRTP over RTP/AVPF

Add GUI/API authentication module support

• supports plugging in custom authentication modules
• new LDAP authentication module added

LDAP Support:

• Added the ability to authenticate using LDAP
• Settings for LDAP group membership has been defined
• A user must be in a defined LDAP group in order to access the UI

Updated Privelege Escalation in HA Scripts

• add support for su in pacemaker/galera cluster install
• add support for sudo or su escalation using password

Add SCTP Support

• add support for SCTP in stable supported OS
• conditionally enable sctp on boot if module loaded

Upgrade Improvements

• add support for upgrading from v0.73/v0.74 -> v0.75
• add support for migrating licenses
• fix a few typos in the v0.74 upgrade script

Update Transnexus GUI Settings

• add support for configuring verify service in the GUI

Add Max Time Limit For Endpoint Groups

• Resolves #177
• add support for limiting call durations on endpoint groups
• reformat call limit into call_settings schema

Update TLS Cert Renewal Checks

• add support for renewing self signed cert
• update wildcard check to instead check for LE issued cert
• improve error handling during renewal failures

Add AWS Pacemaker Support

• add support for AWS elastic IPs in pacemaker
• fix cloud-init hosts template not applying

Add Support For License Tagging

• adds support for tagged licenses and license combos

Add Support for Load Balancing via Dispatcher for Carrier Groups

Bug Fixes

• CentOS 7/8/9 installer is now in stable support
• fix rtpengine kernel module build on centos
• fix bug where rtpengine instances disabled on reload
• Fix Missing BYE on Upstream
  • make in-dialog requests to upstream route to source from initial setup
• Fix CentOS SELinux Permissions
• Update Dependency Requirements for CLI
• fix dnsmasq installer network stack integrations
• fix kamailio service ordering before dsiprouter service in some cases
• fix default selection for latest release
• fix duplicate swap entries on reinstall
• disable WITH_PUSH by default (causing issues with routing)
• make record routing more reliable (stateful selection instead)
• fix call limiting pv conversions incorrect in some cases
• fix typo in dialog timeout
• fix FQDNs with IP in name not parsed by routing config
• fix htable syntax errors in routing config
• fix firewalld / ufw package conflict on debian
• fix #560
  • Enables the OpenSSL Default Provider on Debian12
• Fix Debian Net ISO Install
• add support for resolvconf integration on debian versions < 12
• Fixed regression that prevented Python based crontab processes from executing
• Fix Carrier Prefix Regression
  • Resolves #548
• fix load balancing to work in current drouting limitations
• fix gateways not updated in epg in clustered environment
• fix Gateways without a weight could not be deleted

Cluster Installation Fixes

• fix clusterinstall when running with cluster sync enabled
• add support for re-running clusterinstall after partial completion
• add support for changing key used in dsip_lib.sh encryption funcs
• fix ordering of module installs
• updated CDR feature to be conditionally loaded

Networking Edge Cases

• fix edge cases where network stack was failing
• fix edge cases where apt prompted during installs
• fix docker interface management

Fixup Styling on Reload Buttons

• make clicks on "reload" open the dropdown
• make styling more consistent with other dropdowns

Fix Dialog Call Settings

• fix null checks when setting dialog call settings

Fix Improper Htable Config

• rename route2lb lookup to gwgroup2lb

Fix Cron and JsonRPC Bugs

• fix bug in kamailio reload where some tuples were in wrong format
• refactor above tuples to lists for easier debugging
• fix license checks fail after cron job runs (wrong permissions)
• refactor cron jobs to use least privilege needed
• refactor fusionpbx certs into the standard configuration dir
• refactor fusion sync to use standard RPC reloads instead of kamcmd

Improve Error Messages for HTTP Errors

• Resolves #276

Stability Improvements

• update RPC reload deltas in kamailio
• add support for reload_delta in uac module
• fix license machine validation false positives
• fix license state not preloaded into template context
• fix shared memory not cleaned up on startup failure

Fix Subcriber Update API

• Resolves #566

Fix dSipRouter Startup Limits

• limit startup failures to 3 attempts when launched via systemd

Fix Kamailio Reloading Errors

• fix jsonrpc reload failing when features enabled/disabled
• fix kamailio not starting when WITH_TLS disabled

Central DB Config Updates

• fix credentials not being set properly when -db given
• fix DB data not synced properly for fresh install with -db

FusionPBX Modal Fixes

• Fix ignoreip statement being commented out
• Make FusionPBX Regex More Reliable
• Fix FusionPBX Toggle Button

Version Updates

• rtpengine mr9.5.5.1 -> mr11.5.1.11 for Debian 10/11/12 and CentOS 7/8/9
• kamailio 5.7.x -> 5.8.x for Debian 10/11/12, Ubuntu 20.04/22.04, and RHEL/AlmaLinux/RockyLinux 8
• kamailio 5.7.x -> 5.8.1 for Centos 8/9
• kamailio 5.5.x -> 5.7.4 for Centos 7
• add bson and python-ldap python module requirements
• mariadb 5.5.x -> 10.4.x for Centos 7

Miscellaneous Notes

Make DNSMasq Optional

• move dnsmasq / dsiprouter network stack to an install option
• add documentation for new -dns/--dnsmasq options
• make clusterinstall require dnsmasq install
• add tooltips to endpoint configuration options
• switch to rewight and relative load balancing as the default
• make modal popups relative to viewport size

Full Changelog

v0.74-rel...v0.75-rel

dSIPRouter Version v0.74

What's Changed

• OS And Cloud Bug Fixes
• DNSmasq and SElinux Fixes
• Add Support For v0.74 Upgrade

Full Changelog: v0.73-rel...v0.74-rel

v0.73-rel

What's Changed

• Fixed bugs with Carrier Groups
• Merge in a critical fix to prevent gateway duplication when you define an inbound route
• Fixed bug with Transnexus UI not able to be enabled
• Fixed STIR/Shaken compile error by pinning the version of the libks library
• Fixed issue with StirShaken not able to be disabled
• UAC Fixes for Carriers to resolve credential-based authentication issues
• Fixes to the cluster install
• Inbound Route Load Balancing fixes
• Hotfixes for dnsmasq
• Hotfixes for flood detection

Deprecated:

MediaServer API - it’s now available as part of the MeltAPI, which can be found here: http://meltapi.com/

Removed:

/api/kamailio/health endpoint was removed. It’s no longer needed since we have moved the licensing check from a Kamailio module to the core dSIPRouter component

Full Changelog: v0.721-rel...v0.73-rel

dSIPRouter Version v0.721

Highlights

• Patched issues with licenses of different formats
• Fixed password setting / resetting bug
• Fixed routing issues with MS Teams domains
• Fixed certificate uploads for certificate chains longer than one cert
• Fixed expired certificate in chain during certbot wildcard certificate generation
• Update upgrade section of the documentation
• Pin Flask version to 2.2.x
• Add support for automatically migrating transnexus licenses
• Add migration path from v0.70 -> v0.721

Details

Full Changelog: v0.72-rel...v0.721-rel

dSIPRouter Version v0.72

Highlights

• Auto Upgrade Feature added
• Added Networking Modes to cover:
  • full-auto: dynamically update all network settings, updated on startup
  • manual: user sets all network settings manually, interfaces are ignored
  • dmz: internal/external IP/subnet resolved from public/private interfaces, all other settings as in mode 0
• Updated Flask 2.0 or above
• Security Updates for WSGI Dependencies
• Added Pull Request Template
• Updated docs

What's Changed

• v0.71 bugfixes by @devopsec in #477
• Correction of CDR fields by @voice1 in #465
• Update issue templates by @devopsec in #481
• Update issue templates by @devopsec in #482
• Update Installation Documentation by @devopsec in #490
• Fix Default Dispatcher Attributes by @devopsec in #491
• Security Updates For WSGI Dependencies by @devopsec in #488
• Add PR Template by @devopsec in #483
• Merge licensing-update into v0.72 by @devopsec in #492
• Auto Upgrade Feature by @devopsec in #480
• V0.72 by @mackhendricks in #494
• V0.72 by @mackhendricks in #495
• Fixed permissions by @mackhendricks in #496
• Added execute permissions by @mackhendricks in #497
• Fixed permissions again by @mackhendricks in #498
• Merge Changes From Master by @devopsec in #500
• Update documentation and Bootstrapping for upgrade feature by @devopsec in #501

New Contributors

• @voice1 made their first contribution in #465

Full Changelog: v0.70-rel...v0.72-rel

dSIPRouter v0.524

Maintenance Release of v0.52. The following issues was addressed:

• Bugs that prevented Extension-to-Extension dialing. A test matrix can be found here: https://dsiprouter.readthedocs.io/en/latest/supported_configurations.html. It contains the PBX Distribution, Media Server Version, and SIP Channel Driver used to test this feature.

• Made Pass-Thru authentication on the Domain page as the default.

• Fixed an issue that prevented the admin password from being generated during install when using Bare Metal Hardware

dSIPRouter v0.521

This is a maintenance release that fixed a number of regressions from the v0.52 release. The list of bugs that was fixed can be found here: https://github.com/dOpensource/dsiprouter/issues?utf8=%E2%9C%93&q=is%3Aissue+label%3A0.521+

dSIPRouter v0.50

The major themes for this release are:

• carrier (UAS) registration
• sip endpoint (UAC) registration with multi-domain username
• re-design of the carrier management page. We introduced carrier groups
• notification to reload Kamailio when the configuration changes
• started a redesign of the gui

dSIPRouter v0.41

This release of dSIPRouter has three main focuses:

1. The ability to support PBX(s) and dSIPRouter behind a NAT with the Carrier(s) being external - The main driver behind this use case is the ability to keep PBX and dSIPRouter traffic within the local network without having it hop across routers. You can install in this configuration by using --servernat option.

2. To make it easier to deploy FusionPBX when your have multiple instances deployed for different customers - We have added support for provisioning phones via the dSIPRouter. This means that your SIP phones can access provisioning data via dSIPRouter router versus having the phones talk directly to your FusionPBX servers, which is the main reason why you want a proxy in the first place. The SIP Phone will request their configuration via dSIPRouter. dSIPRouter will then figure out which FusionPBX server contains the provisioning information and will obtain and send the data back to the phone. This only works with HTTP/S at the moment.

3. *** UI Input Validation*** - We have configured the plumbing needed to enable UI Input Validation and start to implement it.