Weave Net Release 1.9.0

New Features

Fast Datapath Encryption

• Encryption is now available for Fast Datapath connections, which
  greatly improves the performance. Previously turning on encryption
  would make the connection use the slower 'Sleeve' transport. #1644,#2687

Multi-architecture

• We now build images for Intel/AMD 64-bit, ARM and ARM 64-bit. #2713

NOTE: The move to multi-architecture required that we update the embedded Docker client, and this has the effect that this release of Weave Net will not work with Docker installations older than 1.10. We apologise for any inconvenience.

Other new features

• Weave Net Docker images are now labelled with description, vendor,
  etc., according to the Label Schema Convention;
  we have removed the deprecated MAINTAINER field in Dockerfiles #2712
• weave status connections now shows the MTU, the largest packet
  size allowed on the network, which can be useful when
  troubleshooting #2389,#2663
• CNI plugin is now a stand-alone binary that does not depend on Docker #2594,#2662
• Embedded docker client updated to version 1.10.3 #2395

Installation and Upgrading

Follow the installation instructions to install this latest release of weave.

If your host's network interface has a limit on packet size (the "MTU") smaller than 1496 bytes, you should reboot after upgrading to ensure encrypted fast datapath can work. For instance this applies to Google Cloud Platform, but is not necessary on AWS.

Weave Net 1.9.0 is fully compatible with all previous versions back to 1.1.0, so it is possible to upgrade clusters incrementally and run mixed versions.

Upgrading the Weave Net Kubernetes addon (weave-kube)

Kubernetes does not currently support rolling upgrades of daemon sets, so you will need to perform the procedure manually - see https://weave.works/docs/net/latest/kube-addon/ for details.

NOTE: The mount points for host directories have moved. If you are running a modified version of the DaemonSet specification, please update it to match the new release.

Bug fixes

• Ensure peer-name is unique on some cloud providers such as Online.net, Scaleway #2427,#2711,#2743
• Allow network traffic from the weave network to other networks, when enabled via weave expose or weave-kube. Docker versions prior to 1.13 will set a policy that allows this, but as of 1.13 we have to. #2758,#2762
• Allow multicast traffic when the Network Policy Controller weave-npc is in use #2689,#2747
• Stop a gossip loop forming when dns and no-dns peers are connected together #2738,#2740
• Improve log messages from the Network Policy Controller weave-npc #2633,#2666,#2692,#2695
• Weave daemon would get unexpected peerName if run outside of the 'weave' script #2480,#2685
• Fix a rare race condition where the daemon could crash if two instances tried to create the 'datapath' device at the same time #2638,#2706
• Fix typo in weave-npc updating network policy (currently it is impossible to hit this bug, because Kubernetes prohibits such updates) #2716

Minor improvements

• Weave Net is now built with Go version 1.7.4, which improves performance #2529,2522
• Fix weave-npc failing to start if a previous instance was in zombie state #2653,#2728
• Don't fail if bridge netfilter setting is already on but read-only #2581,#2659
• Don't fail if docker bridge happens to have more than one IP address #2580,#2686
• Mount /etc under a different path for weave-kube, to avoid accidents #2708
• Exec weave daemon from weave-kube launch, to remove an idle waiting shell process #2684,#2688
• Cleaned up duplicated CNI plugin code #2593,#2678

Documentation changes

• Warn not to delete all Weave Net pods in Kubernetes #2722
• Fix instructions to view NetworkPolicy logs in Kubernetes #2697
• Minor fixes to links, wording, etc #2703

Build and test

• Pin alpine container version to 3.4, because newer version breaks weave-npc #2732,#2735,#2759
• Parallelise CI tasks, to speed up builds. #2704, #2699
• Many other build and test improvements #2696,#2698,#2707,#2720,#2724,#2725,#2742,#2749,#2752,#2753,#2757

Weave Cloud provides monitoring and visualisation of Weave Net application and containers.
Sign-up for a free trial at https://cloud.weave.works