Stratum v1.0.0-rc.48

Release candidate. Fills the operator gaps found while testing rc.47, so nothing known is left open.

New

• Flush connection tracking. A firewall change only affects new connections — one that is already established keeps being admitted until it ages out. firewall conntrack-flush drops that state so current traffic is re-evaluated against your rules right away, optionally for a single peer:

sudo cenvero-str-ctl firewall conntrack-flush
sudo cenvero-str-ctl firewall conntrack-flush 198.51.100.7

• Firewall port ranges. A rule can now cover a whole range instead of one port, so "allow 8000-9000" is a single rule rather than a thousand. Add dest_port_max alongside dest_port:

sudo cenvero-str-ctl firewall allow '{"chain":"forward","action":"accept","protocol":"tcp","dest_port":8000,"dest_port_max":9000}'

• Graceful load-balancer drain. Removing a backend is immediate and cuts the connections on it. Draining stops new connections while the existing ones finish, and tells you how many are still active so you know when it is safe to remove:

sudo cenvero-str-ctl lb drain web-lb backend-1

Draining the only healthy backend of a load balancer is refused, since that would take the service down.

Fixes

• A request carrying an invalid value now returns a client error rather than a server error, so monitoring no longer treats a bad request body as a fault.

Feedback on this release candidate is welcome — report issues through your account.