v0.15.0 "Schimberig"

New features and improvements

• STUN implementation for NAT traversal was added.
• Applications can now run without a SCION daemon by communicating with the control service directly and running daemon functionality in-process.
• Selection algorithm of the beacon store can now be changed with options.
• Subject template can now be extracted from an existing certificate or CSR.
• Voting certificates can now be created without ISD-AS.
• scion-pki UX was improved.
• Beacon diversity calculation bug was fixed.
• Repeated beacon registration errors are now handled gracefully.
• Grace period is considered when checking validity for DRKey.

Documentation

• UDP underlay documentation was updated.
• SIG docs were improved.

Building, testing, code quality

• Code base was modernized with Go upgrade.
• We made it clearer that certain files are generated and should not be edited directly.

Dependencies

• We revered back to using the mattn SQLite driver to address database issues (#4904)
• We're using Go 1.26.0 now.
• Bazel rules were upgraded.
• Security updates for quic-go, golang.org/x/crypto, google.golang.org/grpc and others.

New Contributors

• @jdslab made their first contribution in #4740
• @rolbk made their first contribution in #4868
• @nicorusti made their first contribution in #4895
• @jeltevanbommel made their first contribution in #4906

Full Changelog: v0.14.0...v0.15.0

v0.14.0 "Tannhorn"

What's Changed

New features and improvements

• Connect RPC support was added on server and client side. Happy eyeballs is used on a client side.
• A new beacon extension containing the control and discovery service addresses of the AS was added, so less SVC resolution is done now.
• Pluggable segment registration was implemented.
• Various improvements were done for SQLite usage in the storage layer.
• A simple BPF port filter was added to enable the use of non-XDP raw sockets by the router underlay providers.
• Path MTU calculation was fixed for shortcut paths.

Documentation

• SGRP section was added.
• The demo network tutorial was further improved.
• KMS can now be configured in the TRC signing ceremony builder.
• Various small fixes are included too.

Building, testing, code quality

• We've upgraded to golangci-lint v2, fixing various linter findings at the same time.
• Different graph topologies can be generated and used in tests now.
• Local topology certificate validity was increased.

Dependencies

Various dependencies were updated:

• We're using Go 1.24.2 now.
• gopkg.in/yaml.v3 is used instead of gopkg.in/yaml.v2.
• We cleaned up the tools required for Bazel.
• Security updates for quic-go, golang.org/x/crypto, go-viper/mapstructure/v2 and others.

New Contributors

• @seadog007 made their first contribution in #4764
• @utkn made their first contribution in #4782
• @knmeynell made their first contribution in #4825
• @ddogfoodd made their first contribution in #4844

Full Changelog: v0.13.0...v0.14.0

v0.13.0 "Fürstein"

What's Changed

New features and improvements

• A major refactoring of router was done to enable multiple underlay implementations.
• Handling TCP/SCION packets at the last-mile AS is now supported.
• BGP ASNs in local topologies are now supported.
• Flaky tests were fixed.
• Various changes for running SCION on Windows.

Documentation

• The demo network tutorial had multiple improvements, including an automated Docker setup.
• SIG documentation was updated.
• Various small updates were made as well.

Building, testing, code quality

• We are using Bazel 8.1.1 now. Bazel configuration was overhauled.
• Cross-platform RPM packages are now available.
• New linters were added.
• Lots of small refactorings to improve code quality and use the best code practices.

Dependencies

Various dependencies were updated:

• We are using Go 1.24.0 now.
• Security updates for quic-go, golang.org/x/crypto, golang.org/x/net and others.
• Bazel-related rules to use with Bazel 8.

New Contributors

• @LencigGaer made their first contribution in #4663
• @aaronbojarski made their first contribution in #4690
• @johnstudarus made their first contribution in #4738
• @guilloboi1917 made their first contribution in #4724

Full Changelog: v0.12.0...v0.13.0

v0.12.0 "Rooterberg"

What's Changed

New Features and improvements

• The dispatcher is gone! Well, mostly. We still have a shim for backward compatibility.
• The migration to ConnectRPC has begun. The first PR has been merged. Many more to come.
• We now build RPM packages for the x86_64 platform. Stay tuned for other platforms as the Bazel rules improve.
• The router code got faster by about 15%.
• For the price of one small patch, SCION can now build for windows too.
• Scion-pki has acquired some new features. Find them in the scion-pki documentation.

Documentation

• We have updated and improved the deployment tutorial.
• The cryptography documentation now includes instructions to use scion-pki and sports a ceremony script builder UI (yes, embedded in the documentation!).
• Added OpenWRT installation instructions.

Configuration Changes

• The unused QUIC configuration field is gone from the Control Service's schema. It must be removed from toml files.
• The router configuration gained a new field: router.bfd. This allows to configure BFD on all links by default. Subfields are the same as in the bfd field of links in the topology configuration. The defaults apply to links that do not have an explicit configuration for a given field. Previously, this was done by setting the environment variables SCION_EXPERIMENTAL_BFD_*. Those are now ignored.
• The topology.json file gained a new field: dispatched_ports. While transitioning away from the dispatcher, SCION applications on dispatcher-less hosts are expected to listen on a restricted port range. This must be set to the same value on updated hosts and on their updated border routers. The recommended value is dispatched_ports="31000 - 32767". This must be configured, there is no safe default.
• The field "reconnect_to_dispatcher" is gone. It must be removed from all toml files (i.e. the control service and the SCION daemon).

Building, Testing, and Code Quality

As usual, we've put quite a bit of effort in improving build reliability, burying dead code, simplifying, adding tests, fixing flakes, filling potholes, and complying with best practice and standards (including SCION published specs). Most notable in the latter category were:

• router - race condition: #4282 - Another finding of VerifiedSCION (Thanks @jcp19!)
• router - drop invalid packets packets: #4415, #4558
• router - return SCMP on invalid dst address: #4126
• router - strengthen the checks performed by parsePath: #4524, #4531 - Another findind of VerifiedSCION (Thanks @jcp19 and @mlimbeck!)
• topology - allow peering links between core ASes: #4484

We have also made a small improvement to Wireshark's SCION support: heuristic detection of SCION traffic is now supported. With the removal of the dispatcher and associated limited port range, this became nice-to-have.

Dependencies

We have updated a few of our dependencies. Most notably our minimum Go version, which is now 1.22.7. Also updated are:

• Certifi: 2024.2.2 -> 2024.7.4
• Antlr: 0.6.0 -> 0.6.1
• rules_js: 1.33.1 -> 2.0.0-rc6
• nodejs: latest -> 16.19.0
• pnpm: latest -> 9.4.0
• spectral-cli: 6.11.0 -> 6.11.1

New Contributors

• @mseewer made their first contribution in #4532
• @GioBar00 made their first contribution in #4536
• @martenwallewein made their first contribution in #4610
• @thomasgruebl made their first contribution in #4619

Full Changelog: v0.11.0...v0.12.0

v0.11.0 "Schibegütsch"

What's Changed

Path Segment Validity / CP-PKI

Path segment validation is now more strict. The lifetime of a path segment needs to be fully covered by the validity period of the signing certificate chain. Previously, the certificate chain only needed to be valid at the time of verification.
Segments that are valid under this stricter regime have been created since v0.9.0, thus this stricter check is expected to be compatible with all ASes operating at least v0.9.0.
See #4286 for more details.

Configuration

Simplify the configuration of the local address of a router interface. The fields public and bind have been combined into a single field local. The new field explicitly allows omitting the IP address, in which case the router binds to the wildcard IP.
The old public and bind fields are still accepted, but have been documented as deprecated and will be removed in a future release.
Refer to manual section on the topology.json file or #4489 for more details.

Management API

Added support for deleting segments and beacons.
Refer to the Open API section in the control service manual for more details (DELETE /segments/{segment-id}, DELETE /beacons/{segment-id}).

Dependencies

Update various dependencies; in particular, update quic-go to v0.43.1, go-toml to v2, security updates for lestrrat-go/jwx, x/crypto, and x/net.

Packages

In addition to the Debian packages built since the last release, we now also build packages for OpenWRT.
As the toolchain is relatively complicated, only x86_64 is supported for now. Like the .deb packages, these OpenWRT packages are not published in a package repository just yet. Packages for release versions are attached to the release. Packages for in-development versions are available from the latest nightly build.
See the installation manual page for more details.

Bug fixes

• paths: Add check for hopfield count <= 64 when deserializing a scion path by @jiceatscion in #4483
  Thanks to @jcp and the VerifiedSCION project for this bug report #4482
• router: factor out platform-dependent underlay conn flags by @marcfrei in #4507
  This allows building the router for non-Linux platforms, in particular macOS or BSD.
• pathpol: ensure deserialized ACL has default rule by @fbuetler in #4505
• router: forbid bouncing packets internally by @matzf in #4502
  Thanks to @mlimbeck and the VerifiedSCION project for this bug report #4497
• router: optimize computeProcID by @jiceatscion in #4520

New Contributors

• @cdekater made their first contribution in #4435
• @MatthewCroughan made their first contribution in #4466
• @tzaeschke made their first contribution in #4500
• @fbuetler made their first contribution in #4505

Full Changelog: v0.10.0...v0.11.0

v0.10.0 "Stäfeliflue"

What's Changed

Dependencies

Update various dependencies; in particular, update quic-go to v0.40.0.
Update to go 1.21, building with go 1.21.3.

Packages

Build debian packages for the SCION services and tools for multiple target platforms (x86-64, arm64, x86-32 and arm).
These packages are not published in a package repository just yet. Packages for release versions are attached to the release. Packages for in-development versions are available from the latest nightly build.
See the installation manual page for more details.

Internal / Testing

Add benchmark tests for the router to track the packet forwarding performance.
These benchmarks are run in the CI, failing on unexpected performance regressions. The benchmark can also be run locally to determine the performance impact of any changes. For this, run e.g. bazel test --test_output=streamed -t- //acceptance/router_benchmark:test and inspect the measured performance in the test output.

Bug fixes

• daemon: fix docstring for latencies in protobuf file by @mlegner in #4443
• processmetrics: explicit type conversion to support arm64 by @mlegner in #4446
• bazel: update bazelisk and support arm64 by @mlegner in #4447
• prometheus: fix copying of metrics labels by @sustrik in #4450
• pkg/log: fix panic when using custom Logger by @lukedirtwalker in #4452
• daemon: error out when using drkey endpoints without configured drkey by @rohrerj in #4453
• tools: fix wireshark dissector TLV options without data by @marcodermatt in #4458

Full Changelog

v0.9.1...v0.10.0

New Contributors

• @marcodermatt made their first contribution in #4458

v0.9.1

What's Changed

• Update google.golang.org/grpc dependency and set MaxConcurrentStreams, to address gRPC-Go HTTP/2 Rapid Reset vulnerability.

Full Changelog: v0.9.0...v0.9.1

v0.9.0 "Bürgenstock"

What's Changed

Peering links

Peering links in the topology are supported, in both the control plane (control) and the data plane (router).
Configuring a peering link requires setting the interface ID in the remote AS, see remote_interface_id in the configuration manual.

Router Performance Improvements and Slow-Path Packet Handling

An internal restructuring of the router decouples receiving, processing and forwarding packets. Directly, this restructuring brings modest performance improvements, and enables a special, lower priority processing of any exceptional cases (SCMP traceroute requests, and SCMP error messages).
This will be the basis for more performance tuning in the future.

Receive and send buffer sizes, batch sizes as well as the number of packet processing goroutines can now be tuned. See router in the router configuration manual.

DRKey and SPAO

Dynamically-Recreatable Key (DRKey) is a system to establish shared symmetric keys between any two hosts in SCION, based on a key-derivation hierarchy that requires explicit key exchange only on the level of ASes. These keys are intended to be used primarily for packet authentication, in the form of the SCION Packet Authentication Option (SPAO) in the end-to-end packet extension header.

The control service now includes an implementation of the DRKey infrastructure. This system is still somewhat experimental and is disabled by default. See drkey in the control service configuration manual.

The AS-level key exchanges in DRKey rely on TLS for authentication, based on the SCION control-plane-PKI AS certificates.
As a side-effect of this, all other RPC invocations between control services now use the CP-PKI AS certificates, too. Previously, this had not been required, as all other RPCs control messages that were directly authenticated.

The router includes an experimental and somewhat incomplete implementation of SPAO-based authentication of SCMP messages. This, too, is disabled by default.

Command line tools

• scion ping set payload size appropriately if --max-mtu is set (#4250) and and add new option --packet-size that allows setting the final packet size (#4251).
• Add machine readable output (json/yaml) for scion ping scion traceroute and scion showpaths with the new format option (#4287).
• Use the same emoji encoding mapping as smallstep in scion-pki certificate fingerprint --format emoji (#4252).
• Add scion-pki key fingerprint command to calculate SubjectKeyID (#4253).

Go packages:

• pkg/snet: support URI style UDPAddr encoding (#4254).
• pkg/addr: replace addr.HostAddr hierarchy with tagged union addr.Host.
  Additionally, add a new addr.Addr type representing a full SCION address (ISD, AS and host address), including parsing functionality. This definition is identical to the snet.SCIONAddress type, which is now only kept as a type alias for compatibility (#4346).

sqlite Implementation and Platform Compatibility

By default, the SCION components now use a pure Go implementation of sqlite (modernc.org/sqlite) and build without CGo. This allows to build the SCION components as statically linked binaries, removing any dependence on a minimum libc or libresolv version.

Gobra CI

All pull-requests now run through formal program verification using Gobra. Only a small fraction of the source code carries the annotations that enable the verification, but already some bugs in edge cases could be discovered and fixed.

Full Changelog

v0.8.0...v0.9.0

Upgrading

router

• router now validates that the source IP address of transit packets match the IP address of the corresponding other router (#4157). This could be incompatible with certain asymmetric NAT setups.

Configuration

• toml key trustengine.cache.expiration now expects a formatted duration string, instead of an integer number of nanoseconds.

Go package API

• pkg/snet: IntraASPathQuerier has been removed (moved to internal library) as it was not working correctly and not widely used.
• pkg/addr: replace addr.HostAddr hierarchy with tagged union addr.Host (#4346).
  The attached gopatch file can automatically patch some of the affected consumer code, but some manual changes are likely still necessary.
• pkg/slayers: SetNetworkLayerForChecksum now only accepts a type-safe *slayers.SCION.
• pkg/slayers/path: MaxTTL is now a time.Duration instead of an int number of seconds.

Deprecations

• topology.json: the AS attributes authoritative, voting, and issuing are ineffective and should no longer be used (#4333).
• scion showpaths: the --json flag is deprecated in favor of the --format=json option.

New Contributors

• @gavinleroy made their first contribution in #4229
• @kmavromati made their first contribution in #4237
• @jcp19 made their first contribution in #4187
• @bunert made their first contribution in #4250
• @fstreun made their first contribution in #4289
• @VickyMerzOwn made their first contribution in #4292
• @marcfrei made their first contribution in #4298
• @rohrerj made their first contribution in #4304
• @dependabot made their first contribution in #4316
• @MrR0b0t14 made their first contribution in #4341
• @steffenfritz made their first contribution in #4345
• @jBainMartincoit made their first contribution in #4349
• @HawkCorrigan made their first contribution in #4358
• @uniquefine made their first contribution in #4367
• @jiceatscion made their first contribution in #4373
• @edoardottt made their first contribution in #4419

v0.8.0

Full Changelog: v0.7.0...v0.8.0

What's Changed

The repository is completely restructured. We follow a more idomatic pattern and
make the separation between code that is private and code that is importable by
external parties more obvious.

The overall structure was discussed in #4076.

• Each service and command line tool gets a top-level directory. (e.g. daemon)
• Packages that are shared across multiple applications are grouped in the private directory.
  This should indicate that these packages are not intended to be used by external
  parties, and that semantic versioning will not apply to these packages.
• Project local developer tools are grouped in the tools directory.
• Code that is intended to be consumed by external third parties is grouped in the pkg directory.

To smoothen transition, we kept track of the move in a gist :

• shuffle.yml: lists all the moved packages and their targets.
• go-imports.sh: fixes the imports.

New Contributors

• @Hygster made their first contribution in #4204

v0.7.0

Full Changelog: v0.6.0...v0.7.0