Infix v26.03.0

Changes

• Upgrade Linux kernel to 6.18.20 (LTS)
• Upgrade Buildroot to 2025.02.12 (LTS)
• Upgrade FRR to 10.5.3
• Add support for Banana Pi R64 Mini, 5 port router with WiFi 5
• Add support for Raspberry Pi 400, an RPi 4B built into a keyboard
• Significant boot time improvements, issue #1284. The InitViz boot profiling tool is now included for users who want to visualize and measure the boot process on their own hardware
• Add OSPF point-to-multipoint (P2MP) and hybrid interface type support. This also includes support for setting static neighbors, issue #1426
• Revamped http://network.local device browser. Device cards now show the IP address, product name, and firmware version from mDNS TXT records. the mDNS browser is now also available over plain HTTP
• mDNS service records now embed the per-device hostname (using avahi's %h wildcard), so devices avoid the #2, #3 suffix collisions on service names when multiple Infix devices share the same LAN
• Add configurable mDNS hostname: set services mdns hostname to override the mDNS name advertised in A/AAAA records. Supports %h (default hostname), %i (hardware ID), and %m (MAC address) format specifiers
• cli: new show mdns command to list mDNS-discovered devices on the LAN, with addresses and product model
• Add SSH client commands to the CLI: - ssh [user <name>] [port <num>] <host> — connect to a remote device - set ssh known-hosts <host> <keytype> <pubkey> — pre-enroll a host key received out-of-band, e.g. after a factory reset - no ssh known-hosts <host> — remove a stale or changed host key entry
• Add support for user-configurable HTTPS certificate: select any certificate stored in the keystore via services web certificate <name>. The default auto-generated self-signed certificate is now stored in the keystore rather than in /cfg/ssl and existing certificates are auto-migrated on upgrade
• Add NTP stratum-weight setting to fine-tune server selection when multiple NTP sources are available with different stratum levels
• Enable HDMI console output on Raspberry Pi 4 and Pi 400. Previously the display was suppressed; a login prompt now appears on the HDMI monitor

Fixes

• Fix #892: suppress rousette RESTCONF server warnings from syslog
• Fix #1122: add missing migration script for the YANG validation introduced in v25.10.0 that disallows IP addresses on bridge member ports. Without this script, upgrading with such a startup-config would prevent the device from booting. The migration removes all IP addresses from bridge member ports; any addresses that should be kept must be re-added to the bridge interface itself after upgrade
• Fix #1387: infix.local now resolves to exactly one device per LAN. Previously all Infix devices claimed both hostname.local and infix.local, causing avahi to append #2, #3 suffixes to the shared alias on busy networks. Assignment is now first-come-first-served using standard mDNS conflict resolution
• Fix #1389: firewall policies with names longer than 17 characters were silently rejected
• Fix #1416: show firewall command show an error when the firewall is disabled
• Fix #1438: default route from DHCP client not set at boot, regression in v26.02.0
• Fix #1446: suppress netopeer2-server NETCONF server warnings from syslog
• Fix #1456: update project links in SUPPORT.md and README.md to point to the home page and blog at https://www.kernelkit.org, and update the release link to always resolve to the latest stable release
• Fix regression in MVEBU SafeXcel Crypto Engine for Marvell Armada SOCs (37xx, 7k, 8k, and CN913x series). Firmware package lost in v26.01.0
• Fix DHCP client not sending hostname to server (e.g. for dnsmasq lease registration). All board factory configs had the hostname option without value: auto, so udhcpc only requested the option instead of sending it. Setting up a DHCP client manually was not affected. Also, the hostname format string (e.g. rpi-%m) was not expanded to the actual system hostname before being passed to udhcpc
• Fix dnsmasq logging spurious "Ignoring duplicate dhcp-option" warnings for options 3 (router) and 6 (dns-server) on every DHCP transaction. Add dhcp-authoritative so clients with unexpired leases are not NAKed after a router crash or factory reset that clears the lease database

Tip

Try Infix in GNS3! Download the appliance from the GNS3 Marketplace to test Infix in a virtual network environment without hardware.