Version 7

Version 7.1.1 (2025-06-05)

Fixes a bug where certificates were not loaded correctly into Varnish during renewal.

Support for revocation of ACME TLS Certificates.
Make it possible to remove deploylogs for undeployed VCLGroups.
Hide NATS password in configs
Agent root.vcl is now using none case-sensitive domain matching.
Domain validation is now more strict and follows RFC 1035.
Superflous error message in the agent has been supressed into a debug log message, that previously logged error if no BaseURL had been configured in the agent.
Normalization of NIC names in the agent.
Fixes a bug where negative values for Longitude/Latitude was not saved correctly.
Support for Domain Maps for CIDR:Tag routing.
Swagger documentation has been improved.
Support for eDNS subnet scopes.
- New configuration options for Routing Rules (ipv4MinMask and ipv6MinMask) to set the minimum mask for IPv4 and IPv6 addresses for router DNS responses.
Fixes a duplicate entry error for routing plugins.
Fixes an error that was triggered for static tags insert.
UI: Fixes a bug where contact information was not persisted for ACME accounts.
UI: Fixes a bug where unsaved changes in a file was overwritten when changing tabs.
UI: Add an option to trigger a deployment on a single VCLGroup from the VCLGroup index page.

Allow to stop aggregation queries from running when using the -keep-stats-* configurations.
Add support to export routing healths in prometheus for monitoring purposes.
Fixed duplicate labels on Prometheus output.
Fixed cleaning counter names for S3 and UDO statistics from IP addresses.
Upgrade dependencies to resolve CVEs.
UI server: Assume TLS as default.
UI: Add option for loadAllSans in certificates.
UI: Various bug fixes.
API documentation has been updated with fixes.
- POST|PUT has now required fields added and now reflect what should actually be part of the request body.
- gitRepos endpoint now lowercased.
- Swagger.json now contains extension x-nullable for string pointers.
- Descriptions for several endpoints has been improved.
- Required fields are now marked as required in swagger docs.

All components has been built with latest Go 1.24.
Support for Long Lived Tokens.
Support for file versioning.
Support for Git managed deployments.
New deployment procedure:
- Deployments has been removed and replaced with TagSets directly on VCLGroups.
- VCLGroups are no longer connected via files, they are deployed individually.
- Deploying files can be verified on a given set of matching agents, all matching agents or a random matching agent.
- Deploy logs for rollback of previously deployed files.
- Keep on failure always on.
- Deploy VCLGroup from git repository.
Support for ACME (Let’s Encrypt).
- Creation of accounts and certificates.
- Automatic renewal of certificates.
New database layer for performance improvements and stability.
Brainz now requires git as a dependency when installing the brainz package.
The default minimum TLS version for new certificates created in the Controller has been changed from TLSv1.3 to TLSv1.2.
Certificates now have an allSans option to load all SAN entries into Varnish, including wildcards.
Support to append a single domain ID to a VCLGroup.
Dropping support for a couple of old distributions that has reached End Of Life:
- Ubuntu Xenial
- Ubuntu Bionic
- Ubuntu Focal
- Debian Stretch
- Debian Buster
- Centos 7