Project Clearview Build 93 Release Notes

Based on ON build 93

Note: There is a new bfu script that removes stale STREAMS modules in /kernel/strmod/. For convenience you can download the SUNWonbld-i386 or SUNWonbld-sparc tools which includes the new bfu scripts. However, if you use the bfu scripts provided with current ON build the system will work fine but you will have dead modules in the /kernel/strmod/ directory.

New Clearview features in this build

• IPMP now works seamlessly with DHCP and IP Filter.
• Numerous small bugfixes and improvements.

Project Clearview Functionality Overview:

• IPMP Rearchitecture - Simplifies the administration of IPMP and greatly improves the interaction between IPMP and other OpenSolaris features by representing an IPMP group as a single IP interface.  It also offers significant observability improvements via the new ipmpstat command.
• IP Tunneling - Simplifies and rationalizes IP tunnels by representing them as GLDv3 datalinks.  You can use snoop to observe packets flowing over an IP tunnel interface (e.g., "snoop -d ip.tun0"), even if the tunnel uses IPsec.  You can administer tunnels using dladm (create, modify, delete, and show), and give them meaningful names.  Creating tunnels with ifconfig (e.g., ifconfig ip.tun0 plumb tsrc ...) is still supported for backward compatibility.  The only feature-disparity between Nevada and this build of Clearview is the ability to create an IP tunnel from within a non-global zone.  This will be coming shortly.
• IP Observability - Allows one to observe all IP traffic on the system (including loopback and traffic between zones). However, there are still some pieces of functionality that are not implemented (see "Known Issues" below).
• Nemo Unification and Vanity Naming [In Nevada as of build 83] -
• Nemo Unification allows dladm features to work with all applicable network interfaces.  For instance, it is now possible to place older drivers such as ce into an aggregation or create VLANs over it.
• Vanity Naming allows administrators to give a meaningful name to a link.
• Public DLPI API [In Nevada as of build 59] - Provides a public interface for using DLPI.
• VLAN observability [In Nevada as of build 50] - Allows one to observe VLAN traffic using snoop.
• Nemo MAC type plugin architecture [In Nevada as of build 44] - Enhances the GLDv3 framework to allow support for network drivers other than Ethernet.

Known Issues Specific to Project Clearview

• There are no security checks yet for observing loopback in a zone, so you will see all loopback traffic, even if you are in a non-global zone.
• The /dev/ipnet/lo0 device is not created in an exclusive stack non-global zone.
• If snoop is not given a device when run in a non-global zone whose only interface is lo0, then snoop will not automatically open lo0 and will fail claiming it cannot find any devices to open.
• Cannot yet create IP tunnels from within non-global zones.
• Sun Cluster is not yet supported with IPMP.
• Packet snooping is not yet supported on an IPMP meta-interface.
• IPMP misbehaves with IPv6 in a few uncommon cases, such as changing the MAC address of a grouped interface that's in an active/active configuration.  (Most of these cases are also problems in Nevada today.)

Note that since these bits are based on Nevada (which is itself under development), you may also hit Nevada bugs.  Please let us know if you have problems.

Please contact us at <clearview-discuss@opensolaris.org> with any questions, concerns, or comments.