Infix v26.05.0

Changes

• Upgrade Linux kernel to 6.18.33 (LTS)
• Upgrade Buildroot to 2025.02.14 (LTS)
• Upgrade FRR to 10.5.4
• Add support for Acer Connect Vero W6m, a low-cost COTS home router, based on the same hardware as Banana Pi BPI-R3, but with a Wi-Fi 6E (6 GHz band) chip.
• Add configurable channel-width in Wi-Fi configuration.
• Upgrade ieee802-ethernet-interface YANG model to revision 2025-09-10 (IEEE Std 802.3.2-2025), adding the standard phy-type and pmd-type operational leaves. Speed is now exposed via ietf-interfaces:speed (bps, RFC 8343); the now obsolete eth:speed is no longer returned
• Rework show interface summary output as layered protocol rows. When a port has link, a physical-medium row (e.g. 1000baseT, 10GbaseLR) appears above the ethernet row. VLAN, GRE, VXLAN and WiFi interfaces likewise get one row per protocol layer, with type-specific data on each (vid:, remote:, vni:, station ssid:, etc.), issue #530
• Add support for configurable auto-negotiation for Ethernet ports. A new advertised-pmd-types leaf-list replaces the fixed speed idiom for pinned link modes, issue #805. See the Ethernet Interfaces section in the User Guide for details. Existing configurations using fixed speed are migrated automatically on upgrade
• Add support for configurable MDI/MDI-X pinout on Ethernet ports. Needed on some PHYs where Auto-MDIX stops working once auto-negotiation is disabled
• New operational supported-pmd-types leaf-list on each Ethernet interface, exposing the set of PMD types currently supported
• New CLI command show operational, and optional XPath filtering for this and any of the other datastores, using [path /path/to/subtree]
• CLI show commands now surface human-friendly error messages instead of a raw Python exceptions, e.g., Interface "w" not found

Fixes

• Fix #1493: container with a physical interface not properly removed when switching to a configuration without containers
• Fix #1506: add documentation on how to configure VLAN interfaces, including stacked (Q-in-Q) VLAN interfaces, in a dedicated vlan.md
• Handle unclean daemon exits better, e.g., dbus-daemon crashing and leaving a stale pidfile behind, causing it to refuse to be restarted
• Fix occasional blank or garbled [ OK ] lines at startup
• Disallow multicast MAC addresses in custom MAC address configuration
• Fix broken Wi-Fi 6 GHz band configuration.
• Fix operational read of /containers failing and thereby aborting all operational get-data, including RESTCONF/NETCONF reads — for containers whose command contains shell metacharacters, e.g. sh -c "... && ..."
• WireGuard interfaces are now regenerated when a referenced keystore key changes: the asymmetric private-key, and the symmetric preshared-key at both peer-group and per-peer level
• Fix crash in operational data when a bridge has VLAN ranges configured: the kernel may report ranges (e.g. vlan 1 vlanEnd 3) from bridge vlan global show, which were not expanded, so show interface and other operational reads failed. Ranges are now expanded and listed correctly

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.

Infix v26.05.0-rc1

Changes

• Upgrade Linux kernel to 6.18.33 (LTS)
• Upgrade Buildroot to 2025.02.14 (LTS)
• Upgrade FRR to 10.5.4
• Add support for Acer Connect Vero W6m, a low-cost COTS home router, based on the same hardware as Banana Pi BPI-R3, but with a Wi-Fi 6E (6 GHz band) chip.
• Add configurable channel-width in Wi-Fi configuration.
• Upgrade ieee802-ethernet-interface YANG model to revision 2025-09-10 (IEEE Std 802.3.2-2025), adding the standard phy-type and pmd-type operational leaves. Speed is now exposed via ietf-interfaces:speed (bps, RFC 8343); the now obsolete eth:speed is no longer returned
• Rework show interface summary output as layered protocol rows. When a port has link, a physical-medium row (e.g. 1000baseT, 10GbaseLR) appears above the ethernet row. VLAN, GRE, VXLAN and WiFi interfaces likewise get one row per protocol layer, with type-specific data on each (vid:, remote:, vni:, station ssid:, etc.), issue #530
• Add support for configurable auto-negotiation for Ethernet ports. A new advertised-pmd-types leaf-list replaces the fixed speed idiom for pinned link modes, issue #805. See the Ethernet Interfaces section in the User Guide for details. Existing configurations using fixed speed are migrated automatically on upgrade
• Add support for configurable MDI/MDI-X pinout on Ethernet ports. Needed on some PHYs where Auto-MDIX stops working once auto-negotiation is disabled
• New operational supported-pmd-types leaf-list on each Ethernet interface, exposing the set of PMD types currently supported
• New CLI command show operational, and optional XPath filtering for this and any of the other datastores, using [path /path/to/subtree]
• CLI show commands now surface human-friendly error messages instead of a raw Python exceptions, e.g., Interface "w" not found

Fixes

• Fix #1493: container with a physical interface not properly removed when switching to a configuration without containers
• Fix #1506: add documentation on how to configure VLAN interfaces, including stacked (Q-in-Q) VLAN interfaces, in a dedicated vlan.md
• Handle unclean daemon exits better, e.g., dbus-daemon crashing and leaving a stale pidfile behind, causing it to refuse to be restarted
• Fix occasional blank or garbled [ OK ] lines at startup
• Disallow multicast MAC addresses in custom MAC address configuration
• Fix broken Wi-Fi 6 GHz band configuration.
• Fix operational read of /containers failing and thereby aborting all operational get-data, including RESTCONF/NETCONF reads — for containers whose command contains shell metacharacters, e.g. sh -c "... && ..."
• WireGuard interfaces are now regenerated when a referenced keystore key changes: the asymmetric private-key, and the symmetric preshared-key at both peer-group and per-peer level
• Fix crash in operational data when a bridge has VLAN ranges configured: the kernel may report ranges (e.g. vlan 1 vlanEnd 3) from bridge vlan global show, which were not expanded, so show interface and other operational reads failed. Ranges are now expanded and listed correctly

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.

Infix v26.04.0

Changes

• Upgrade Linux kernel to 6.18.25 (LTS)
• Upgrade Buildroot to 2025.02.13 (LTS)
• Add support for per-bridge multicast router port in operational, issue #395
• Add support for static ARP (IPv4) and neighbor cache (IPv6) entries per interface, issue #819. Static entries are installed as permanent kernel neighbor table entries that are never evicted by normal ARP/NDP aging
• Add support for PTP/gPTP (IEEE 1588-2019 / 802.1AS) clock synchronization. Supported clock types: Ordinary Clock, Boundary Clock, and Transparent Clock. See the User Guide for configuration details
• Add support for Banana Pi BPI-R4, quad-core Cortex-A73 router with 4x 2.5 GbE switching, dual 10 GbE SFP+. Variants BPI-R4-2g5 and BPI-R4P have one SFP+ replaced by a 2.5 GbE RJ45, with optional PoE on the R4P
• Update Marvell ESPRESSObin board support. Allow booting with stock U-Boot, which only supports ext4 rootfs partitions; to use, apply the ext4 developer snippet before building (make apply-ext4 all)
• Fix onboard WiFi support on the Banana Pi BPi-R64

Fixes

• Fix #520: warn in syslog if multicast flooding is disabled
• Fix #769: document dummy interfaces in user guide
• Fix #790: document static multicast filters in user guide
• Fix #1439: changing hostname does not regenerate DHCP client conf until restart
• Fix #1458: show ntp tracking displaying a truncated Reference ID, e.g., 92.2 instead of 92.246.137.39
• Fix #1466: show container showing no output for containers whose command line includes environment variables
• Fix issue with IGMP queries sent with all-zeroes source MAC address
• Fix missing IGMP query startup burst when assuming IGMP querier role, as defined in RFC3376 §8.6/§8.7
• Fix Raspberry Pi 4 and Pi 400 display instability after soft reboot. Previously the touchscreen/DSI display required a full power cycle to reinitialise correctly; it now works reliably after reboot. Please note, you need a fairly up-to-date EEPROM version as well
• Fix BPI-R4 board README showing inverted DIP switch values for eMMC and SPI NAND boot modes, which would prevent the board from booting correctly
• Fix SAMA7G54 U-Boot build system selection that caused build failures
• Fix BPI-R3 PCIe devices failing to initialize on boot due to a missing clock definition in the device tree

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.

Infix v26.04.0-rc3

Changes

• Upgrade Linux kernel to 6.18.25 (LTS)
• Upgrade Buildroot to 2025.02.13 (LTS)
• Add support for per-bridge multicast router port in operational, issue #395
• Add support for static ARP (IPv4) and neighbor cache (IPv6) entries per interface, issue #819. Static entries are installed as permanent kernel neighbor table entries that are never evicted by normal ARP/NDP aging
• Add support for PTP/gPTP (IEEE 1588-2019 / 802.1AS) clock synchronization. Supported clock types: Ordinary Clock, Boundary Clock, and Transparent Clock. See the User Guide for configuration details
• Add support for Banana Pi BPI-R4, quad-core Cortex-A73 router with 4x 2.5 GbE switching, dual 10 GbE SFP+. Variants BPI-R4-2g5 and BPI-R4P have one SFP+ replaced by a 2.5 GbE RJ45, with optional PoE on the R4P
• Update Marvell ESPRESSObin board support. Allow booting with stock U-Boot, which only supports ext4 rootfs partitions; to use, apply the ext4 developer snippet before building (make apply-ext4 all)
• Fix onboard WiFi support on the Banana Pi BPi-R64

Fixes

• Fix #520: warn in syslog if multicast flooding is disabled
• Fix #769: document dummy interfaces in user guide
• Fix #790: document static multicast filters in user guide
• Fix #1439: changing hostname does not regenerate DHCP client conf until restart
• Fix #1458: show ntp tracking displaying a truncated Reference ID, e.g., 92.2 instead of 92.246.137.39
• Fix #1466: show container showing no output for containers whose command line includes environment variables
• Fix issue with IGMP queries sent with all-zeroes source MAC address
• Fix missing IGMP query startup burst when assuming IGMP querier role, as defined in RFC3376 §8.6/§8.7
• Fix Raspberry Pi 4 and Pi 400 display instability after soft reboot. Previously the touchscreen/DSI display required a full power cycle to reinitialise correctly; it now works reliably after reboot. Please note, you need a fairly up-to-date EEPROM version as well
• Fix BPI-R4 board README showing inverted DIP switch values for eMMC and SPI NAND boot modes, which would prevent the board from booting correctly
• Fix SAMA7G54 U-Boot build system selection that caused build failures
• Fix BPI-R3 PCIe devices failing to initialize on boot due to a missing clock definition in the device tree

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.

Infix v26.03.0

Changes

• Upgrade Linux kernel to 6.18.20 (LTS)
• Upgrade Buildroot to 2025.02.12 (LTS)
• Upgrade FRR to 10.5.3
• Add support for Banana Pi R64 Mini, 5 port router with WiFi 5
• Add support for Raspberry Pi 400, an RPi 4B built into a keyboard
• Significant boot time improvements, issue #1284. The InitViz boot profiling tool is now included for users who want to visualize and measure the boot process on their own hardware
• Add OSPF point-to-multipoint (P2MP) and hybrid interface type support. This also includes support for setting static neighbors, issue #1426
• Revamped http://network.local device browser. Device cards now show the IP address, product name, and firmware version from mDNS TXT records. the mDNS browser is now also available over plain HTTP
• mDNS service records now embed the per-device hostname (using avahi's %h wildcard), so devices avoid the #2, #3 suffix collisions on service names when multiple Infix devices share the same LAN
• Add configurable mDNS hostname: set services mdns hostname to override the mDNS name advertised in A/AAAA records. Supports %h (default hostname), %i (hardware ID), and %m (MAC address) format specifiers
• cli: new show mdns command to list mDNS-discovered devices on the LAN, with addresses and product model
• Add SSH client commands to the CLI: - ssh [user <name>] [port <num>] <host> — connect to a remote device - set ssh known-hosts <host> <keytype> <pubkey> — pre-enroll a host key received out-of-band, e.g. after a factory reset - no ssh known-hosts <host> — remove a stale or changed host key entry
• Add support for user-configurable HTTPS certificate: select any certificate stored in the keystore via services web certificate <name>. The default auto-generated self-signed certificate is now stored in the keystore rather than in /cfg/ssl and existing certificates are auto-migrated on upgrade
• Add NTP stratum-weight setting to fine-tune server selection when multiple NTP sources are available with different stratum levels
• Enable HDMI console output on Raspberry Pi 4 and Pi 400. Previously the display was suppressed; a login prompt now appears on the HDMI monitor

Fixes

• Fix #892: suppress rousette RESTCONF server warnings from syslog
• Fix #1122: add missing migration script for the YANG validation introduced in v25.10.0 that disallows IP addresses on bridge member ports. Without this script, upgrading with such a startup-config would prevent the device from booting. The migration removes all IP addresses from bridge member ports; any addresses that should be kept must be re-added to the bridge interface itself after upgrade
• Fix #1387: infix.local now resolves to exactly one device per LAN. Previously all Infix devices claimed both hostname.local and infix.local, causing avahi to append #2, #3 suffixes to the shared alias on busy networks. Assignment is now first-come-first-served using standard mDNS conflict resolution
• Fix #1389: firewall policies with names longer than 17 characters were silently rejected
• Fix #1416: show firewall command show an error when the firewall is disabled
• Fix #1438: default route from DHCP client not set at boot, regression in v26.02.0
• Fix #1446: suppress netopeer2-server NETCONF server warnings from syslog
• Fix #1456: update project links in SUPPORT.md and README.md to point to the home page and blog at https://www.kernelkit.org, and update the release link to always resolve to the latest stable release
• Fix regression in MVEBU SafeXcel Crypto Engine for Marvell Armada SOCs (37xx, 7k, 8k, and CN913x series). Firmware package lost in v26.01.0
• Fix DHCP client not sending hostname to server (e.g. for dnsmasq lease registration). All board factory configs had the hostname option without value: auto, so udhcpc only requested the option instead of sending it. Setting up a DHCP client manually was not affected. Also, the hostname format string (e.g. rpi-%m) was not expanded to the actual system hostname before being passed to udhcpc
• Fix dnsmasq logging spurious "Ignoring duplicate dhcp-option" warnings for options 3 (router) and 6 (dns-server) on every DHCP transaction. Add dhcp-authoritative so clients with unexpired leases are not NAKed after a router crash or factory reset that clears the lease database

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.

Infix v26.03.0-rc1

Changes

• Upgrade Linux kernel to 6.18.20 (LTS)
• Upgrade Buildroot to 2025.02.12 (LTS)
• Upgrade FRR to 10.5.3
• Add support for Banana Pi R64 Mini, 5 port router with WiFi 5
• Add support for Raspberry Pi 400, an RPi 4B built into a keyboard
• Significant boot time improvements, issue #1284. The InitViz boot profiling tool is now included for users who want to visualize and measure the boot process on their own hardware
• Add OSPF point-to-multipoint (P2MP) and hybrid interface type support. This also includes support for setting static neighbors, issue #1426
• Revamped http://network.local device browser. Device cards now show the IP address, product name, and firmware version from mDNS TXT records. the mDNS browser is now also available over plain HTTP
• mDNS service records now embed the per-device hostname (using avahi's %h wildcard), so devices avoid the #2, #3 suffix collisions on service names when multiple Infix devices share the same LAN
• Add configurable mDNS hostname: set services mdns hostname to override the mDNS name advertised in A/AAAA records. Supports %h (default hostname), %i (hardware ID), and %m (MAC address) format specifiers
• cli: new show mdns command to list mDNS-discovered devices on the LAN, with addresses and product model
• Add SSH client commands to the CLI: - ssh [user <name>] [port <num>] <host> — connect to a remote device - set ssh known-hosts <host> <keytype> <pubkey> — pre-enroll a host key received out-of-band, e.g. after a factory reset - no ssh known-hosts <host> — remove a stale or changed host key entry
• Add support for user-configurable HTTPS certificate: select any certificate stored in the keystore via services web certificate <name>. The default auto-generated self-signed certificate is now stored in the keystore rather than in /cfg/ssl and existing certificates are auto-migrated on upgrade
• Add NTP stratum-weight setting to fine-tune server selection when multiple NTP sources are available with different stratum levels
• Enable HDMI console output on Raspberry Pi 4 and Pi 400. Previously the display was suppressed; a login prompt now appears on the HDMI monitor

Fixes

• Fix #892: suppress rousette RESTCONF server warnings from syslog
• Fix #1122: add missing migration script for the YANG validation introduced in v25.10.0 that disallows IP addresses on bridge member ports. Without this script, upgrading with such a startup-config would prevent the device from booting. The migration removes all IP addresses from bridge member ports; any addresses that should be kept must be re-added to the bridge interface itself after upgrade
• Fix #1387: infix.local now resolves to exactly one device per LAN. Previously all Infix devices claimed both hostname.local and infix.local, causing avahi to append #2, #3 suffixes to the shared alias on busy networks. Assignment is now first-come-first-served using standard mDNS conflict resolution
• Fix #1389: firewall policies with names longer than 17 characters were silently rejected
• Fix #1416: show firewall command show an error when the firewall is disabled
• Fix #1438: default route from DHCP client not set at boot, regression in v26.02.0
• Fix #1446: suppress netopeer2-server NETCONF server warnings from syslog
• Fix #1456: update project links in SUPPORT.md and README.md to point to the home page and blog at https://www.kernelkit.org, and update the release link to always resolve to the latest stable release
• Fix regression in MVEBU SafeXcel Crypto Engine for Marvell Armada SOCs (37xx, 7k, 8k, and CN913x series). Firmware package lost in v26.01.0
• Fix DHCP client not sending hostname to server (e.g. for dnsmasq lease registration). All board factory configs had the hostname option without value: auto, so udhcpc only requested the option instead of sending it. Setting up a DHCP client manually was not affected. Also, the hostname format string (e.g. rpi-%m) was not expanded to the actual system hostname before being passed to udhcpc
• Fix dnsmasq logging spurious "Ignoring duplicate dhcp-option" warnings for options 3 (router) and 6 (dns-server) on every DHCP transaction. Add dhcp-authoritative so clients with unexpired leases are not NAKed after a router crash or factory reset that clears the lease database

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.

Infix v26.02.1

Changes

• Upgrade Linux kernel to 6.18.17 (LTS)
• Add support for disabling WiFi and GPS features in builds
• Add OSPF point-to-multipoint (P2MP) and hybrid interface type support. This also includes support for setting static neighbors, issue #1426

Fixes

• Fix #1389: legacy name limit in firewalld triggered problems with policy names
• Fix #1416: show firewall command show an error when the firewall is disabled
• Fix #1438: default route from DHCP client not set at boot, regression in v26.02.0
• Fix instabilities in Zebra route manager after Frr upgrade in v26.02.0
• Fix regression in MVEBU SafeXcel Crypto Engine for Marvell Armada SOCs (37xx, 7k, 8k, and CN913x series). Firmware package lost in v26.01.0

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.

Infix v26.02.1-rc3

Changes

• Upgrade Linux kernel to 6.18.17 (LTS)
• Add support for disabling WiFi and GPS features in builds
• Add OSPF point-to-multipoint (P2MP) and hybrid interface type support. This also includes support for setting static neighbors, issue #1426

Fixes

• Fix #1389: legacy name limit in firewalld triggered problems with policy names
• Fix #1416: show firewall command show an error when the firewall is disabled
• Fix #1438: default route from DHCP client not set at boot, regression in v26.02.0
• Fix instabilities in Zebra route manager after Frr upgrade in v26.02.0
• Fix regression in MVEBU SafeXcel Crypto Engine for Marvell Armada SOCs (37xx, 7k, 8k, and CN913x series). Firmware package lost in v26.01.0

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.

Infix v26.02.1-rc2

Changes

• Upgrade Linux kernel to 6.18.16 (LTS)
• Add support for disabling WiFi and GPS features in builds
• Add OSPF point-to-multipoint (P2MP) and hybrid interface type support. This also includes support for setting static neighbors, issue #1426

Fixes

• Fix #1389: legacy name limit in firewalld triggered problems with policy names
• Fix #1416: show firewall command show an error when the firewall is disabled
• Fix #1438: default route from DHCP client not set at boot, regression in v26.02.0
• Fix instabilities in Zebra route manager after Frr upgrade in v26.02.0
• Fix regression in MVEBU SafeXcel Crypto Engine for Marvell Armada SOCs (37xx, 7k, 8k, and CN913x series). Firmware package lost in v26.01.0

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.

Infix v26.02.1-rc1

Changes

• Upgrade Linux kernel to 6.18.16 (LTS)
• Add support for disabling WiFi and GPS features in builds
• Add OSPF point-to-multipoint (P2MP) and hybrid interface type support. This also includes support for setting static neighbors, issue #1426

Fixes

• Fix #1389: legacy name limit in firewalld triggered problems with policy names
• Fix #1416: show firewall command show an error when the firewall is disabled
• Fix instabilities in Zebra route manager after Frr upgrade in v26.02.0
• Fix regression in MVEBU SafeXcel Crypto Engine for Marvell Armada SOCs (37xx, 7k, 8k, and CN913x series). Firmware package lost in v26.01.0

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.