Skip to content

IP Fabric v8.0

Upgrade Version Policy

We support the following upgrade paths:

  • The latest version in the previous major line → any version in the current major line (for example: 7.12.4 → 8.0.1).
  • Any version in the current major line → any newer version in the current major line (for example: 8.0 → 8.1).
  • An upgrade to 8.0 can be only performed from version 7.12.4 or newer.

Clearing Browser Cache

After upgrading IP Fabric to a newer version, you should see the Your application has been updated and must be refreshed dialog in the main GUI.

It is usually sufficient to just click the Refresh button.

However, in case of issues with the main GUI or if you did not see the mentioned dialog, please force refresh your browser cache.

The key combination for doing this depends on your operating system. In your browser window with your IP Fabric appliance’s URL open, use one of the following key combinations:

  • Windows: Ctrl + F5
  • macOS: Command + Shift + R
  • Linux: Ctrl + F5

This will only affect the browser cache for the IP Fabric appliance.

Known Issues

Invalid Proxy Settings Cause Discovery to Fail to Start

Discovery may fail to start, discovering zero devices, with the error:

Call to Discovery API failed: Invalid URL

A blank proxy URL configured via sudo ipf-cli-config -p causes this issue:

http_proxy=http://:@:/
https_proxy=http://:@:/

Workaround

Log in to IP Fabric over SSH and reconfigure the proxy:

sudo ipf-cli-config -p

Enter valid proxy details, or select direct connection to disable the proxy. Discovery runs after the proxy is configured.

Breaking Changes

Podman

  • As of v8.0.0, Podman replaced Docker. See Extensions for details.

Container Runtime & Subnet Change

The default container subnet also changes from 172.17.0.0/16 (Docker) to 10.88.0.0/16 (Podman), and the service is now started via:

sudo systemctl enable --now podman.socket

If 10.88.0.0/16 overlaps with your network, configure a custom subnet first — see Unable to Discover Devices in 10.88.0.0/16 Subnet.

Extensions are not migrated during upgrade

Extensions are not automatically migrated from Docker to Podman when you upgrade to v8.0.0. If you use extensions, recreate them after the upgrade. Ensure you have the original images available — either Dockerfile, tar, or tar.gz. If not, export existing extensions before the upgrade. Deploy them afterward in the UI.

# docker images
IMAGE          TAG     IMAGE ID         CREATED       SIZE
extension1     latest  9516fb7634ba     3 weeks ago   236MB
# docker save <image>:<tag> -o <iamge_name>-<tag>.tar.gz
# gzip <iamge_name>-<tag>.tar

Download the exported images via SFTP or SCP. Then deploy the new extensions in the UI.

Force-stopping

  • As of v8.0.0, force-stopping the Topology Calculation process is temporarily unavailable
    • A fix will ship in a future release
    • As a temporary workaround, restart the ipf-api service to stop the process: systemctl restart ipf-api.service

Updater

  • The Updater service is removed from the system. Database ingestion is now part of IP Fabric API. View related logs in ipf-api service logs (see Service Logs).
  • For product architecture changes, see Architecture in IP Fabric Overview.

API: Path-Based Versioning Removed

IP Fabric removed the path-based API version identifier (/v7.x) in this major release. IP Fabric deprecated it in version 7.5, and affected responses included the Deprecation and Sunset headers announcing the upcoming removal.

Requests that include /v7.x in the URL path now return HTTP 410 Gone.

Migration: Remove the /v7.x segment from all API request URLs. Response payloads are unchanged and no extra headers are needed. To target a specific endpoint version, use the X-API-Version request header instead. See API Versioning for details.

v8.0.6 (August 3rd, 2026; GA)

SHA256 (ipfabric-update-8-0-6+0.tar.zst.sig) = af183f42af6fe2c9a12425c4dd2051f8fb73461496a9c33a98a1e487a33242b9
MD5 (ipfabric-update-8-0-6+0.tar.zst.sig) = d33b4b22688dd7d8053bb68133e58113
SHA256 (ipfabric-8-0-6+0.qcow2) = 58b6894ba2ec0d7146b1a10f46bb16bc7db865bfdf033513cb779bd7685c7432
MD5 (ipfabric-8-0-6+0.qcow2) = 1671acec67246bd93222ee50fb9c9537
SHA256 (ipfabric-8-0-6+0.vmdk) = 35b63e3981f25c869686f4b57f5a8e2490a9a5d5e08e1b5defec92aee6e513a6
MD5 (ipfabric-8-0-6+0.vmdk) = 4cdda4d2d1a0e7356e4e0f2a11314279
SHA256 (ipfabric-8-0-6+0.vhdx.zst) = 89628d2299d6664068b1d5deb56d48f82c9b4cefe604f0ec43140ca12bc022d3
MD5 (ipfabric-8-0-6+0.vhdx.zst) = 096255353df0ec21da601a2e3f35699b
SHA256 (unsupported-ESXi6.7U2-ipfabric-8-0-6+0.ova) = 2ca53824de07393a84c55613e5b22cafe3b37ab543414feadb87aa5182c4c140
MD5 (unsupported-ESXi6.7U2-ipfabric-8-0-6+0.ova) = ed5f18c902469d6326b94fb6b099099d
SHA256 (unsupported-ESXi7.0-ipfabric-8-0-6+0.ova) = 9348976e561bfb273cd089c413e38550f3c5778fe525fb28931101b9523f2155
MD5 (unsupported-ESXi7.0-ipfabric-8-0-6+0.ova) = 91b6120a596806eec81c8311e0d5c0d1
SHA256 (ESXi8.0-ipfabric-8-0-6+0.ova) = 79677c593ba0f756c3b689db88ccf51284e29ba4a746643d7b242c28932fc19e
MD5 (ESXi8.0-ipfabric-8-0-6+0.ova) = 6f07afbff68d3acd4bb475882bfa5a64

Improvements

  • Increased the body size limit for Discovery and configuration management API endpoints to handle large Discovery History requests.

Bug Fixes

  • Cisco ACI fixes:
    • Fixed E2E Path Lookup issue where the nexthop was not found for internal networks.
    • Resolved missing ACI infrastructure hop before the first hop in E2E Path Lookup between ACI Leaf and Check Point GAIA (host2gw).
  • Fixed missing devices in snapshots after discovery runs caused by absent vTaskId entries.
  • Corrected configuration download to enter enable mode before running the show running-config command.

v8.0.5 (July 30th, 2026; GA)

Improvements

  • Newly added license fields (for example, cloud licensing and AIM) now propagate via license upload and remain consumable by older product versions.

Bug Fixes

  • Resolved stuck discovery and missing data when the scanner runs, caused by setState(done) for snapshot X matched no rows — row missing, snapshot may have been evicted.
  • Resolved a Discovery API is not reachable error when using Collect device configurations in version 8.0.4.
  • Resolved a snapshot load/unload issue in version 8.0.4 that caused errors during snapshot operations. Also fixed an issue where devices in snapshots disappeared or were wiped out during load/unload.
  • Fixed Cloud Path Lookup queries that caused database deadlocks when another snapshot unloads, due to TRUNCATE requiring an EXCLUSIVE lock.
  • Cisco:
    • Prevented a multi-context firewall from stalling the rest of the discovery process.
    • Corrected a wrong Vendor API slug displayed in Cisco APIC technology tables.
    • Fixed path lookup inaccuracies in Cisco ACI environments.
    • Resolved Cisco Smart Licensing parsing issues.
  • Huawei:
    • Fixed SSH client connection failures to some versions of Huawei devices.
  • VeloCloud:
    • Resolved missing interface details for LAG1 in tasks/l2Interfaces.
    • Fixed missing next hops for subnets in tasks/routingTable.
  • Fixed ABParseError Could not validate the rule collection - "dnat": TypeError: Cannot read properties of undefined (reading 'reduce') during rule collection validation.
  • Fixed ABTaskMapResultError Cannot find BGP summary for neighbor <ip>, VRF <name>.

v8.0.4 (July 22nd, 2026; GA)

Improvements

  • Added a new SSH credentials option in Device Credentials to support SSH key authentication during discovery, for devices that have this option configured.

Technology Tables

  • Added a new SPBM (Shortest Path Bridging MAC, IEEE 802.1aq) section under Technology with two tables:
    • Services (/technology/spbm/services) – I-SID service entries distributed by IS-IS across the fabric. Includes the advertising node, backbone VLAN, bound access interfaces (SAPs), and whether each entry is locally originated or learned.
    • B-MAC Forwarding (/technology/spbm/bmac) – SPBM underlay unicast forwarding entries toward destination backbone MAC addresses (B-MACs). Includes the backbone VLAN, destination fabric node, egress interface, and path metric.
    • Initially supported on Extreme Networks VOSS and Alcatel-Lucent Enterprise AOS / OmniSwitch. See Shortest Path Bridging MAC (SPBM) for details.
  • Added two new tables under Inventory > Hosts:
    • Virtual Machines (/inventory/hosts/virtual-machines)
    • Virtual Machine Interfaces (/inventory/hosts/virtual-machines-interfaces)
    • Both are device-centric inventory tables, currently populated with VMware NSX-T data only. Available without any feature flag. They are intended to replace the existing /technology/cloud/endpoints location for VMware virtual machine data, which will no longer show VMware entries when the New Cloud Model feature flag is enabled, as those tables are moving away from a device-centric model.

Vendor Support

Extreme VOSS & Alcatel-Lucent Enterprise AOS

  • SPBM (Shortest Path Bridging MAC, IEEE 802.1aq) – Added support for collecting SPBM I-SID services and B-MAC unicast forwarding data. The data displays under Technology > SPBM. See Shortest Path Bridging MAC (SPBM) and the Feature Matrix for more details.

Cisco

D-Link

  • Extended IPv6 support for all D-Link switch families, including the DES-3000 family switches (DES-3028, DES-3052, DES-3200), DGS-1210/ME and DGS-1250.
  • Newly supported features include:
    • Managed IPv6 addresses
    • IPv6 routing table
    • Neighbor discovery

Meraki

  • Added support for MX L3 outbound firewall rules and MX L7 firewall rules, visible under Technology > Security > Zone Firewall. Note that L3 rules referencing FQDN objects are not supported. IP Fabric collects IP-based rules only.
  • Added support for Group Policy firewall rules with time scheduling (currently visible but not enforced in path lookup). Also added support for VPN-to-VPN firewall rules, visible under Technology > Security > Zone Firewall.
  • Added support for NAT rules — port forwarding, one-to-one, and one-to-many — visible under Technology > Addressing > NAT.
  • Added support for MS switch ACL rules with VLAN selector, visible under Technology > Security > ACL and reflected in path lookup results.
  • Added support for License information discovery across Meraki organizations. Licenses display under Technology > Management > Licenses and cover co-term, per-device, and subscription licensing models.

Versa

  • Interface Collection Split – A new feature flag ENABLE_VERSA_VOS_INTERFACES_SPLIT changes how the system collects interface data from Versa Director. When enabled, the single heavy interfaces?deep call is replaced by separate lightweight calls (interfaces/brief, interfaces/detail, and interfaces/dynamic-tunnels). This improves reliability on directors that struggle to return the full payload. For more information, see Feature Flags.

API Endpoint Deprecation

VM Cloud Endpoint Tables

The /technology/cloud/endpoints/virtual-machines-interfaces table is deprecated in v8.0 and marked for removal in a future major release. It previously covered AWS, Azure, GCP, and VMware NSX-T.

  • When the New Cloud Model feature flag is enabled, public cloud (AWS, Azure, GCP) network interface data is available at /technology/cloud/network-interfaces. VMware NSX-T data moves to the new /inventory/hosts/virtual-machines and /inventory/hosts/virtual-machines-interfaces inventory tables and is no longer shown under the cloud endpoints tables.
  • When the feature flag is disabled, the existing table continues to work unchanged.

Automation Concerns

Update all scripts, automations, intent rules, and reports that reference /technology/cloud/endpoints/virtual-machines-interfaces before upgrading to the release that removes it.

Experimental Features

VTY Line Transport Methods for Cisco

A new feature flag ENABLE_CISCO_LINE_VTY enables collection of operational data from Cisco IOS and IOS-XE VTY lines. When enabled, IP Fabric runs the show line vty <id> command per VTY range. This discovers permitted transport methods, such as SSH and Telnet.

Disabled by default. For more information, see Feature Flags.

New Cloud Model

A new feature flag ENABLE_NEW_CLOUD_MODEL enables the New Cloud Model (NCM). When enabled, cloud infrastructure is modeled using cloud-native constructs instead of adapted on-premises abstractions, improving the accuracy of network diagrams, path lookup, and technology tables.

Disabled by default. For more information, see Feature Flags.

JSON Schema Task Validation

A new opt-in feature flag ENABLE_JSON_SCHEMA_TASK_VALIDATION validates selected discovery task results against JSON Schema definitions from product contracts instead of legacy Joi schemas.

Disabled by default. For more information, see Feature Flags.

New Services

This release introduces two new services that support discovery:

  • discovery-api — acts as the gateway to discovery services. All discovery control runs through discovery-api.
  • Kafka — exchanges discovery artifacts with other services.

Operating System Change

  • As of 8.0.0, the appliance runs Debian 13/Trixie as its underlying operating system.