Repository navigation
Releases
BISDN Linux 6.0
We are excited to announce BISDN Linux 6.0!
BISDN Linux 6.0 is a major feature release, and provides multiple new functionalities and improvements
Usability Improvements
- Bash auto-completion: We enabled bash auto-completion for many packages, allowing more easily to (re-)configure the switch or access its state.
- Colored output by default: Command line utilities now default to colored output by default (e.g.
ip link), to allow more quickly to process the displayed state. - SFP Module information via Port Interfaces: It is now possible to access SFP module via
ethtool -m <interface>. This provides much more detailed information about inserted SFP modules and their parameters, and also allows accessing their sensor values.
Improved IP Routing Support
- Support for unnumbered BGP: BISDN Linux 6.0 now supports unnumbered BGP, and adds better support for IP configuration on the
lointerface
New Base Versions
- New Yocto Version: The base Yocto version was upgraded to 5.0 / Scarthgap, updating many utilities to newer versions.
- New Kernel Version: The kernel version was upgraded to 6.12, bringing many networking improvements.
- New FRR Version: FRR is now on the latest version, 10.7.
Improved Security
- Appended Image Configuration Support: It is now possible to change the default login and add public ssh keys in the image.
- Seccomp support: BISDN Linux has now seccomp enabled by default, reducing the potential damage on many services.
- Reduced Attack Surface: ofdpa-grpc now only listens on a local unix socket.
And many further smaller fixes and improvements.
Breaking Changes
- FRR: Only Single Config Supported: With FRR 10, support for per-daemon configuration was removed. While they can be still loaded, FRR does not support writing it. If you are using per-daemon configuration files, make sure to save it at least once after the upgrade to make sure the configuration is converted.
- ofdpa-gprc only listens on unix socket: If you are using
baseboxdas an off-switch controller,ofdpa-grpcneeds to be changed back to listen on a TCP socket. This can be changed in/etc/ofdpa-grpc.conf.
Deprecation Notices and other Noteworthy Upcoming Changes
- Using TAP interfaces for
baseboxdis deprecated, and support for it may be removed in the future. - Using
baseboxdas an off-switch controller is deprecated, and support for it may be removed in the future. - To strengthen security further, future BISDN Linux version will require a password change on first login when using the default login. To avoid this on new installations, use the new appended configuration support to set your own password.
For a detailed list of changes and addressed CVEs see the changelog and baseboxd version history.
BISDN Linux 5.6.5
We are excited to announce BISDN Linux 5.6.5!
BISDN Linux 5.6.5 is a follow-up fix for 5.6.4 with corrected package feed locations. There are no other changes included.
BISDN Linux 5.6.4
We are excited to announce BISDN Linux 5.6.4!
BISDN Linux 5.6.4 is a maintenance release, with the following major fixes:
- Improved stability during high stress situations: Both baseboxd and ofagent now stop checking liveness of the connection during barrier requests, as the standard disallows processing messages while a barrier request is active.
- Better handling of routes targeting nexthop objects: Userspace is now notified about route and nexthop object removal due to link down events. This enables baseboxd to properly remove these routes from the ASIC routing tables instead of just disabling them.
- Enhanced ARM iProc I2C bus recovery: On AS4610, the I2C controller will now also attempt to recover the bus by manually sending a stop signal if a device blocks the bus. This should allow it to recover from more error states without requiring a power cycle.
For a detailed list of changes and addressed CVEs, see the changelog and baseboxd version history.
BISDN Linux 5.6.3
We are excited to announce BISDN Linux 5.6.3!
BISDN Linux 5.6.3 is a maintenance release, which updates various components to address security issues.
For a detailed list of changes and addressed CVEs, see the changelog.
BISDN Linux 5.6.2
We are excited to announce BISDN Linux 5.6.2!
BISDN Linux 5.6.2 is a maintenance release, which mostly updates various components for address security issues.
It brings the following fixes:
- baseboxd would sometimes crash when removing a port with configured VLANs from a bridge.
Note: BISDN Linux is not affected by CVE-2026-31431, as the vulnerable subsystem is not enabled in BISDN Linux.
For a detailed list of changes and addressed CVEs, see the changelog and baseboxd version history.
BISDN Linux 5.6.1
We are excited to announce BISDN Linux 5.6.1!
BISDN Linux 5.6.1 is a maintenance release, with the following major fixes:
- Fixed FRR configuration backup: when upgrading from BISDN Linux 5.6.1, FRR configuration will now be properly taken over. Previously neither frr.conf, zebra.conf nor daemons were taken over on upgrade.
- ECMP routes with named nexthops switching from a 2 nexthop group to a 1 nexthop group now properly switch to the single nexthop group instead of becoming a ECMP route with 3 nexthops.
- Delta AG5648: Fixed the lane map for (QSFP) port 49
- License compliance: All software licenses are now included in the image in the path
/usr/share/doc/common-licenses/
Furthermore, it includes various minor fixes and updates for its components.
For a detailed list of changes and addressed CVEs, see the changelog and baseboxd version history.
BISDN Linux 5.6.0
We are excited to announce BISDN Linux 5.6.0!
BISDN Linux 5.6.0 is a feature release, and brings the following enhancements and fixes
- Bridge ageing time support BISDN Linux now follows configured bridge ageing time and learned entries will now time out after the configured time instead of a hard coded 300 seconds.
- We fixed an issue where restarting baseboxd would cause local multicast not being delivered to the controller anymore, causing STP or LACP to break.
Furthermore, it includes various minor fixes and updates for its components.
For a detailed list of changes and addressed CVEs, see the changelog and baseboxd version history.
BISDN Linux 5.5.0
We are excited to announce BISDN Linux 5.5.0!
BISDN Linux 5.5.0 is a feature release, and brings the following enhancements and fixes
- Increased bandwidth to controller: Packets received by the controller itself are now only limited by its CPU, allowing 150 Mbit/s and more instead of the old hardcoded 10 Mbit/s limit.
- Improved handling of link local multicast traffic: Link local multicast traffic like STP or LLDP is now better handled, and can now be forwarded.
- Improved interface counters: Due to the proper handling of link local multicast traffic it is no longer counted as dropped, so the interface counters are now more precise.
- 802.1X authentication events: To make it easier to react to 802.1x authentication events, we now provide a template script for writing an event handler.
- Additional text editors: We added multiple text editors than can be installed via
opkg, namelyed,joenano, andmg. - We fixed an issue where 802.1x authentication with MAB enabled was not properly accounted.
- We fixed an issue with VxLAN interfaces sometimes not being properly setup in certain orderings.
- We fixed multiple memory leaks in baseboxd.
Furthermore, it includes various fixes and updates for its components.
For a detailed list of changes and addressed CVEs, see the changelog and baseboxd version history.
BISDN Linux 5.4.0
We are excited to announce BISDN Linux 5.4.0!
BISDN Linux 5.4.0 is a feature release, and brings the following enhancements and fixes
- Interface statistics: Hardware interface counters are now exposed on port interfaces and can be accesses via standard utilities. This allows easy exporting and collecting them for better monitoring.
- Multicast and broadcast traffic between ports can now reach wirespeed on Edgecore AS4610 series and is not limited to ~10 Mbit/s anymore.
- Fixed an issue where ECMP routes may sometimes not get configured correctly on link state changes.
- baseboxd now properly cleans up VRF flows when removing VRFs.
Furthermore, it includes various fixes and updates for its components.
For a detailed list of changes and addressed CVEs, see the changelog and baseboxd version history.
BISDN Linux 5.3.1
We are excited to announce BISDN Linux 5.3.1!
BISDN Linux 5.3.1 is a feature release, and brings the following enhancements:
- 802.1X port security: You can now configure bridge ports to require authentication before allowing network connectivity. Both PAE authentication and Mac Authentication Bypass are supported as authentication methods.
- 802.1AD stacked VLAN support: It is now possible to forward double tagged traffic based on the outer tag, as well as encapsulate traffic on specific ports with an outer tag.
- Preservation of modified service state on upgrade: When upgrading BISDN Linux the state of services enabled or disabled is now retained, so they stay being enabled (or disabled) after the upgrade.
Furthermore, it includes a various fixes and updates for its components.
For a detailed list of changes and addressed CVEs, see the changelog and baseboxd version history.