In the last week we worked on performance improvements, the Selenium monitor, time-series storage and instrumentation, Kafka SSL, Minion config and heartbeat, documentation, flow QoS/ToS, BMP, cloud Cassandra for Newts, UI fixes, and Helm.

Github Project Updates

Internals, APIs, and Documentation

  • Chandra made an improvement to performance when checking salted passwords
  • Craig continued his work on modernizing the Selenium monitor
  • Patrick worked on some changes to the time-series storage API tests
  • Christian added support for SSL in Nephron's Kafka implementation
  • Bonnie made some improvements to the documentation for the Minion config schema
  • Marcel worked on documentation for the BSF detector
  • Stefan did more work on the new flow QoS/ToS support
  • Chandra fixed some timing issues in the BMP code when PeerUp messages are received before router initialization
  • Jeff made some Newts improvements to support cloud-hosted Cassandra
  • Chandra fixed an issue with lagging minion heartbeats
  • Jesse added more metrics to time-series instrumentation

Web, ReST, UI, and Helm

  • Christian backported some UI fixes to older Meridian branches
  • Stefan and I worked on porting our Helm build to use Grafana's new build toolkit (including finally converting some code to TypeScript)


Thanks to the following contributors for committing changes since last OOH:

  • Benjamin Reed
  • Bonnie Robinson
  • Chandra Gorantla
  • Christian Pape
  • Craig Gallen
  • Dustin Frisch
  • Jeff Gehlbach
  • Jesse White
  • Marcel Fuhrmann
  • Patrick Schweizer
  • Stefan Wachter

April Releases

In April, we released updates to all OpenNMS versions under active support.

Horizon 27.1.1

Release 27.1.1 contains a few enhancements, as well as a number of bug fixes including some XSS and CSRF cleanups and a Jetty DoS CVE.

The codename for 27.1.1 is Infinite Improbability Drive.

For a high-level overview of what has changed in Horizon 27, see What’s New in OpenNMS Horizon 27.

For a complete list of changes in 27.1.1, see the detailed release notes.

Meridian Releases

Meridian 2018.1.27 was a small release, with just the Jetty CVE update and a new option for tuning Minion communication with OpenNMS.

Meridian 2019.1.18 added on top of that a number of other useful bug fixes including some cosmetic UI cleanups and a fix to Kafka producer resource naming.

Meridian 2020.1.7 contains all of those changes, plus a few other bug fixes and a performance improvement in the Kafka producer.

For a list of changes, see the release notes:

Release Roadmap

May Releases

The next OpenNMS release day is May 11th, 2021.

Currently we expect a new Horizon 27 release, as well as Meridians 2019 and 2020.

Next Horizon: 28 (Q? 2021)

The next major Horizon release will be Horizon 28.

Horizon 28 will still be coming down the pipeline soon.
Currently, we hope for it to contain the move to building with JDK 11 (and, consequently, a requirement to only run on JDK 11 or higher), QoS flow aggergation, and some other improvements in the pipeline.

Next Meridian: 2021 (Q2 2021)

Meridian 2021 is on track for a release in 2nd quarter of 2021. It is expected to be based on the Horizon 27.1 codebase, which means it will contain all of the bug fixes and new features introduced in Horizon 26 and 27.


Note that this is just based on current plans; dates, features, and releases can change or slip depending on how development goes.

The statements contained herein may contain certain forward-looking statements relating to The OpenNMS Group that are based on the beliefs of the Group’s management as well as assumptions made by and information currently available to the Group’s management. These forward-looking statements are, by their nature, subject to significant risks and uncertainties.

...We apologize for the excessive disclaimers. Those responsible have been sacked.

Mynd you, møøse bites Kan be pretti nasti...

We apologise again for the fault in the disclaimers. Those responsible for sacking the people who have just been sacked have been sacked.

Until Next Time…

If there’s anything you’d like me to talk about in a future OOH, or you just have a comment or criticism you’d like to share, don’t hesitate to say hi.

- Ben

Resolved Issues Since Last OOH

  • NMS-11752: "Search/Filter Resources" on "Resource Graphs" not functioning as expected
  • NMS-12946: Nephron: examine what additional compute and storage load is implied by the new QoS-based aggregations
  • NMS-13114: Drift (ES): Trying to create too many buckets.
  • NMS-13188: Page not found on topology
  • NMS-13203: Nephron should support Kafka over TLS
  • NMS-13207: Poor PasswordEncryptor performance with large number of Minions
  • NMS-13215: Flows: Fallback config for flow timeouts
  • NMS-13220: Upgrade Karaf to 4.2.11
  • NMS-13228: Stored XSS reported 2021-03-31 (update summary after disclosure)
  • NMS-13231: Backport Security Issues from Last Month

Jump to section

About the Author: RangerRick

Principal Software Engineer. Manages the release process of OpenNMS Horizon and Meridian, and a bunch of other stuff.
Published On: April 20th, 2021Last Updated: April 20th, 20214 min readTags: , , , , , , , , , , , , ,