Skip to content

Commit

Permalink
Update 2024-12-16-rspamd-3.11.0.md
Browse files Browse the repository at this point in the history
  • Loading branch information
vstakhov authored Dec 16, 2024
1 parent cbce08f commit 7a9c774
Showing 1 changed file with 11 additions and 15 deletions.
26 changes: 11 additions & 15 deletions _posts/2024-12-16-rspamd-3.11.0.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ Users upgrading from previous versions should review their Elasticsearch configu
## Enhanced Security and Performance Features

### New Ratelimiting Capabilities
The release introduces sophisticated ratelimiting mechanisms:
The release introduces helper tools to manage ratelimits:
- LRU cache implementation for tracking recent ratelimit buckets
- New management utilities for better control over ratelimits
- Improved monitoring and administration tools via `rspamadm`
Expand All @@ -34,15 +34,15 @@ The release introduces sophisticated ratelimiting mechanisms:
- Enhanced UTF-8 processing capabilities

### Message Processing Enhancements
- New header processing controls with include/exclude logic
- Improved upstream selection with smarter address rotation
- New message anonymization tools for privacy-conscious deployments

- New message anonymization tools for privacy-conscious deployments `rspamadm mime anonymize`
- Addition of `rspamadm mime strip` for secure attachment handling

## Critical Fixes and Security Updates

Several important security and functionality fixes have been implemented:

- Improved upstream selection with smarter address rotation
- Comprehensive fixes for RFC 2047 header encoding
- Enhanced fuzzy storage security with improved dynamic key handling
- Optimized TCP connection handling with cumulative timeouts
Expand All @@ -61,30 +61,26 @@ The web interface received significant usability updates:
## Configuration and Administration

New configuration capabilities have been added:
- Introduction of `lua.local.d` folder for better organization
- Extended configuration options for greater flexibility
- Introduction of `lua.local.d` folder to allow user's plugins to be placed there
- Extended configuration options for user based plugins and rules in `conf.local.d/*.conf`
- Improved documentation and examples

## Performance Optimizations

Several performance-focused improvements have been implemented:
- Optimized RBL checking logic
- Refined multimap text part processing
- Optimized RBL checking logic (e.g. `received` checks exclude `from` IP)
- Refined multimap text part processing: so no more double scoring for multipart/alternative hits
- Enhanced GPT module response parsing
- Improved memory management and resource utilization

## Installation and Upgrade Notes

Users upgrading to version 3.11 should:
1. Review Elasticsearch/OpenSearch configurations if using these features
2. Test existing configurations with the new header processing logic
3. Update any custom scripts that interact with ratelimiting features
4. Review the new configuration options for potential optimizations
1. Review Elasticsearch/OpenSearch configurations if using these features (please bear in mind, that by default this module is **disabled** now, so you will need to enable it explicitly after review of the configuration, e.g. by specifying `enabled = true`).
2. Review the new scores for multimap plugin if your score relied on double hits for `multipart/alternative` and `content` multimap type

The Rspamd team recommends testing the upgrade in a staging environment first, particularly if using the Elasticsearch integration.

## Looking Forward

This release represents a significant step forward in Rspamd's evolution, with particular focus on modern infrastructure support, security, and usability. The improvements to the Elasticsearch integration and the addition of new management tools provide a solid foundation for future enhancements.

For detailed technical information and full changelog, please visit the [Rspamd documentation](https://rspamd.com/doc/) website.
For detailed technical information and [full changelog](https://github.com/rspamd/rspamd/compare/3.10.2...3.11.0), please visit the [Rspamd documentation](https://rspamd.com/doc/) website.

0 comments on commit 7a9c774

Please sign in to comment.