DMF 8.10.0 TOI

The Analytics Node includes CIDR (Classless Inter-Domain Routing) filtering for records and documents. The feature applies to dashboards including Netflow, sFlow®, ICMP, Dapper, and others. The filtering utilizes Lucene and KQL syntaxes. The update introduces two new fields: sIp.ip and dIp.ip.

The Clear Recorder Node (RN) Query History feature introduces CLI and GUI support on the DMF Controller for managing query records. Previously, deleting query history required direct interaction with the Floodlight (FL) API. This update allows for the removal of all query history entries through standard management interfaces. Note: The CLI and GUI support the deletion of the entire query history only; selective filtering of entries for deletion is not supported.

MACsec operates as a global fabric configuration, encrypting traffic between core switches while excluding ancillary traffic, such as tap-to-filter or tool delivery. This feature introduces configurable MACsec path requirements, enabling the formation of multi-DC fabrics where inter-DC communication utilizes encrypted MACsec links while intra-DC traffic remains unencrypted.

This document describes the updates to the DANZ Monitoring Fabric (DMF) 8.10 release verified scale and performance numbers.

The DMF 8.10.0 release introduces a completely redesigned Fabric page. This modernization effort improves visual clarity for data displays and the topology graph, providing an interactive fabric representation for a better understanding of device connectivity.

Match rules define the specific traffic forwarded through the fabric. These criteria are applied directly within a policy, as part of a rule within a referenced rule group, or as a post-service match in a managed service. Each rule specifies parameters such as IP addresses, protocols, and ports. This update introduces expanded matching capabilities and removes previous restrictions regarding the combination of match criteria, allowing for more granular traffic steering.

Implementing these identifier fields ensures compatibility with IPFIX record collector tools that require both ingress and egress data for flow record processing.

Session templates allow supported DANZ Monitoring Fabric (DMF) managed service actions to specify a selection of keys for matching packet fields and classifying flows. If an action lacks a defined session template, the system applies the default template appropriate for that action. Specified keys provide valid values for the IPFIX record. As of release 8.10, session template support includes TCP Analysis, Flow Diff, and Session Slice.

Add support for configuring SHA-256 for NTP keys used in NTP server authentication.