Identity-Based Microsegmentation Guide
LAST UPDATED: October 8, 2021

April 1, 2020

What’s new

Windows support

Aporeto now provides apoctl and enforcer binaries for Windows. You can install the enforcer as a service on Windows Server 2016 and 2019 hosts. Refer to Get started for instructions.

Helm 3 support

This release adds support for Helm 3.

IPv6 support

Aporeto no longer ignores IPv6 communications. You can now control and monitor IPv6 traffic. To enable this, set the enforcer’s ENFORCERD_ENABLE_IPV6 option to 1. Refer to the installation documentation for more information.

eBPF support

This release of Aporeto provides better performance by using extended Berkeley Packet Filter (eBPF) on systems that support it.

Upgrade notes

The 3.14 enforcer requires changes to immutable Kubernetes fields. Before upgrading, issue the following command to remove the enforcer’s Helm chart.

helm delete enforcerd

Known issue

Red Hat Enterprise Linux 8+ requires special configuration to work with the SSH access control feature. If you require this distribution, contact us for assistance.