NeoFS Node v0.58.0 enforces request validity windows, upgrades session encryption to HPKE
Time-based object expiration
v0.58.0 provides server-side help for time-based object expiration, complementing the client-side implementation launched in SDK RC24. Objects can now expire based mostly on Unix timestamps relatively than summary NeoFS epochs, bringing expiration habits nearer to traditional storage semantics. Storage nodes implement the timestamp metadata and incorporate it into rubbish assortment logic.
Erasure coding hardening
Erasure coding operations obtain a number of clarifications. A devoted ec_part_id discipline replaces the earlier use of X-Headers for EC half choice in GET and HEAD operations, with the CLI gaining an --ec-part flag to match. Storage nodes now block ambiguous EC GET requests that set the payload_only flag with out specifying a component index. Cross-rules EC elements restoration has been added for improved redundancy administration.
X-Headers are deprecated throughout the stack and are not forwarded between storage nodes. Integrators utilizing the CLI --xhdr flag ought to take away it.
Session safety improve
Session key encryption has been upgraded to HPKE (Hybrid Public Key Encryption), an IETF normal outlined in RFC 9180. Session token storage is now listed by expiration epoch, enhancing cleanup effectivity.
Session information saved on the persistent state path routinely migrate to the brand new epoch-indexed format with HPKE encryption on startup. The migration is irreversible, which means information develop into unreadable by older node variations. Operators ought to again up persistent state information earlier than upgrading.
Legacy removals
v0.58.0 removes help for compressed FSTree objects, multiaddr configuration within the CLI and node, the container contract create technique in inside ring, and homomorphic hashing output from the CLI netinfo command. Container contract Created and Eliminated occasion help has additionally been faraway from storage nodes, aligning with neofs-contract v0.28.0 adjustments.
Operators with compressed objects in FSTree should use the fstree-decompress utility from v0.57.0 earlier than upgrading, because the instrument is not included. Multiaddr entries in node configuration needs to be changed with plain URIs.
Bug fixes and efficiency
The discharge fixes panics in AccountingService.Steadiness dealing with, write-cache counter restoration on startup, and neofs-lancet metabase migration. A rubbish assortment stall brought on by expired objects protected by LOCKs saved on different shards has been resolved. GET and HEAD operations now traverse nodes strictly by weight earlier than falling again to native storage, and the policer makes use of an in-memory queue for redundant object removing to cut back metabase writes.
The complete launch notes will be discovered on the hyperlink beneath:
https://github.com/nspcc-dev/neofs-node/releases/tag/v0.58.0
