From 4b35c362999a26ae80ec9eeb85209b3fcbbdb8a9 Mon Sep 17 00:00:00 2001 From: serinko <97586125+serinko@users.noreply.github.com> Date: Wed, 26 Nov 2025 12:05:48 +0100 Subject: [PATCH 1/5] add dev notes --- .../docs/pages/operators/changelog.mdx | 48 +++++++++++++++++++ 1 file changed, 48 insertions(+) diff --git a/documentation/docs/pages/operators/changelog.mdx b/documentation/docs/pages/operators/changelog.mdx index aa1fe30dfe..eda18da58d 100644 --- a/documentation/docs/pages/operators/changelog.mdx +++ b/documentation/docs/pages/operators/changelog.mdx @@ -49,6 +49,54 @@ This page displays a full list of all the changes during our release cycle from +## `v2025.21-mozzarella` + +- [Release Binaries](https://github.com/nymtech/nym/releases/tag/nym-binaries-v2025.21-mozzarella) +- [`nym-node`](nodes/nym-node.mdx) version `1.22.0` + +```sh +some version output blabla +``` + +### Operators Updates & Tools + +- new cli +- new tunnel manager +- updated DP + + +### Features + +- [HTTP API resilience enable & domain rotation conditions](https://github.com/nymtech/nym/pull/6200): Changes to make sure fallback domains are updated / enabled only for relevant + +- [Typescript SDK 1.4.1](https://github.com/nymtech/nym/pull/6146): This PR is a new release of the Typescript SDK, `mixFetch` and `WASM` client. It also removes the Harbour Master client from `mixFetch`, replacing it with the Nym API's described endpoint for nym-nodes. + +- [Enable URL rotation and retries for mixnet gateway init](https://github.com/nymtech/nym/pull/6126): + - Multiple URL fallback with configurable retries (defaults to 3) + - Infallible URL conversion per feedback (`Url::from()` instead of `parse().ok()`) + - Non-breaking builder pattern for `BuilderConfig` per feedback + - Reverted redundant node filtering per clarification that API already filters by `supported_roles.entry` + +- [Credential proxy jwt](https://github.com/nymtech/nym/pull/5957): This PR is part of the 'Upgrade Mode' that should allow usage of the network in a situation where ecash credentials are unissuable, because, for example, we have lost signing quorum (i.e. we have fewer than the required number of threshold signers responding to requests). This version is more naive. Instead requesting actual 'emergency credentials' that would have been issued by a subset of ecash signers, the credentials proxy creates a JWT, signed with its key, attesting the upgrade mode has been enabled. + +### Bugfix + +- [Tunnel not waiting on `MixnetClient` to shut down cleanly](https://github.com/nymtech/nym/pull/6225): When there is a wireguard registration error, the mixnet client is signalled to shut down, but the tunnel doesn't wait. Now on errors, the registration client doesn't return until everything is properly stopped + +- [Fix credential proxy upgrade mode attestation url arg](https://github.com/nymtech/nym/pull/6202): This includes bringing over changes introduced in [\#6174](https://github.com/nymtech/nym/pull/6174) + +- [Remove debug feature from `http-macro` spec in gateway probe](https://github.com/nymtech/nym/pull/6195) + +- [DNS relibility and troubleshooting ](https://github.com/nymtech/nym/pull/6179) + +- [Distinguish authenticator errors by credential spent](https://github.com/nymtech/nym/pull/6176): This PR introduces a distinction between authenticator client errors that are happening before a credential was taken out of storage, and after ] + +- [Disconnect mixnet client if registration fails](https://github.com/nymtech/nym/pull/6158): Currently the registration client does its job and then handles everything to the `vpn-client`, who then takes care on the mixnet client. However, if the registration fails, nothing is disconnecting the mixnet client, which can lead to errors of the kind of `There is already an open connection to this client`. This PR addresses that + + +### Refactors & Maintenance + + ## `v2025.20-leerdammer` - [Release Binaries](https://github.com/nymtech/nym/releases/tag/nym-binaries-v2025.20-leerdammer) From fcf782674c3966baf428f0e4131dcb578abadd7c Mon Sep 17 00:00:00 2001 From: serinko <97586125+serinko@users.noreply.github.com> Date: Wed, 26 Nov 2025 12:08:27 +0100 Subject: [PATCH 2/5] bump up version --- documentation/docs/pages/operators/changelog.mdx | 11 ++++++++++- .../docs/pages/operators/nodes/nym-node/setup.mdx | 8 ++++---- 2 files changed, 14 insertions(+), 5 deletions(-) diff --git a/documentation/docs/pages/operators/changelog.mdx b/documentation/docs/pages/operators/changelog.mdx index eda18da58d..2b26a5d19f 100644 --- a/documentation/docs/pages/operators/changelog.mdx +++ b/documentation/docs/pages/operators/changelog.mdx @@ -55,7 +55,16 @@ This page displays a full list of all the changes during our release cycle from - [`nym-node`](nodes/nym-node.mdx) version `1.22.0` ```sh -some version output blabla +nym-node +Binary Name: nym-node +Build Timestamp: 2025-11-25T14:26:29.627763948Z +Build Version: 1.22.0 +Commit SHA: 22793bc45ea21561671d6670497ff42bc36b9d76 +Commit Date: 2025-11-25T15:16:42.000000000+01:00 +Commit Branch: HEAD +rustc Version: 1.88.0 +rustc Channel: stable +cargo Profile: release ``` ### Operators Updates & Tools diff --git a/documentation/docs/pages/operators/nodes/nym-node/setup.mdx b/documentation/docs/pages/operators/nodes/nym-node/setup.mdx index de584513ec..36e415e78a 100644 --- a/documentation/docs/pages/operators/nodes/nym-node/setup.mdx +++ b/documentation/docs/pages/operators/nodes/nym-node/setup.mdx @@ -21,10 +21,10 @@ This documentation page provides a guide on how to set up and run a [NYM NODE](. ```sh nym-node Binary Name: nym-node -Build Timestamp: 2025-11-12T08:19:33.288341371Z -Build Version: 1.21.0 -Commit SHA: babf113fe5d396fa8a84fa939ad4b1b5b4d38b83 -Commit Date: 2025-11-12T08:39:48.000000000+01:00 +Build Timestamp: 2025-11-25T14:26:29.627763948Z +Build Version: 1.22.0 +Commit SHA: 22793bc45ea21561671d6670497ff42bc36b9d76 +Commit Date: 2025-11-25T15:16:42.000000000+01:00 Commit Branch: HEAD rustc Version: 1.88.0 rustc Channel: stable From 36d0adfe92810c821059b9805d322427dd3920a0 Mon Sep 17 00:00:00 2001 From: serinko <97586125+serinko@users.noreply.github.com> Date: Wed, 26 Nov 2025 12:15:50 +0100 Subject: [PATCH 3/5] add NTM info message --- documentation/docs/pages/operators/changelog.mdx | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/documentation/docs/pages/operators/changelog.mdx b/documentation/docs/pages/operators/changelog.mdx index 2b26a5d19f..3d3ea3738e 100644 --- a/documentation/docs/pages/operators/changelog.mdx +++ b/documentation/docs/pages/operators/changelog.mdx @@ -69,6 +69,14 @@ cargo Profile: release ### Operators Updates & Tools + +**We are introducing new `network-tunnel-manager.sh` (NTM), with improved server configuration (see all changes here: [\#6186](https://github.com/nymtech/nym/pull/6186/)). We ask operators to re-run their routing configuration using the new NTM, following [these steps](/operators/nodes/nym-node/configuration#routing-configuration).** + +**PLEASE NOTE THAT THIS IS A NEW TOOL HANDLING VARIOUS COMPLEX SERVER SETTINGS, PLEASE RUN IT ON A FEW NODES AT A TIME, DO THE TESTING, MONITOR YOUR NODES AND REPORT ANY ISSUES** + +We will keep `nym-node v1.21.1` as the latest version on API side for another 3 days to not penalize operators taking time for a proper implementation. + + - new cli - new tunnel manager - updated DP From fd1b52403728617b18f2a1dfba5c8ed1c59421e3 Mon Sep 17 00:00:00 2001 From: serinko <97586125+serinko@users.noreply.github.com> Date: Wed, 26 Nov 2025 13:13:37 +0100 Subject: [PATCH 4/5] add operators news --- .../docs/pages/operators/changelog.mdx | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/documentation/docs/pages/operators/changelog.mdx b/documentation/docs/pages/operators/changelog.mdx index 3d3ea3738e..4036fc5aae 100644 --- a/documentation/docs/pages/operators/changelog.mdx +++ b/documentation/docs/pages/operators/changelog.mdx @@ -72,15 +72,18 @@ cargo Profile: release **We are introducing new `network-tunnel-manager.sh` (NTM), with improved server configuration (see all changes here: [\#6186](https://github.com/nymtech/nym/pull/6186/)). We ask operators to re-run their routing configuration using the new NTM, following [these steps](/operators/nodes/nym-node/configuration#routing-configuration).** -**PLEASE NOTE THAT THIS IS A NEW TOOL HANDLING VARIOUS COMPLEX SERVER SETTINGS, PLEASE RUN IT ON A FEW NODES AT A TIME, DO THE TESTING, MONITOR YOUR NODES AND REPORT ANY ISSUES** +**NOTE THAT THIS IS A NEW TOOL HANDLING VARIOUS COMPLEX SERVER SETTINGS, PLEASE RUN IT ON A FEW NODES AT A TIME, DO THE TESTING, MONITOR YOUR NODES AND REPORT ANY ISSUES** We will keep `nym-node v1.21.1` as the latest version on API side for another 3 days to not penalize operators taking time for a proper implementation. -- new cli -- new tunnel manager -- updated DP +We are proud to announce that there are several improvements on tools aiming to make node operators life easier. Please let us know how do these programs work for you. +- [**New Nym Node CLI version**](/operators/tools#nym-node-cli): This version introduces arguments, allowing the operator to pass all needed variables (ie. hostname, mode etcetra) and let the program setup everything needed for `nym-node`, server configuration, nginx, routing, tunnels and bridges without further prompts for these values. This version also installs [QUIC bridge](/operators/nodes/nym-node/configuration#quic-transport-bridge-deployment) + +- [**New Network Tunnel Manager**](/operators/nodes/nym-node/configuration#routing-configuration): NTM went through an big overhaul ([\#6186](https://github.com/nymtech/nym/pull/6186/)) - this new version combines old NTM with WG scripts. If run with `complete_networking_configuration` the tool does entire routing configuration, creates interfaces, and configures WireGuard exit policy. + +- [**Updated QUIC Deployment Tool**](/operators/nodes/nym-node/configuration#quic-transport-bridge-deployment): The program is lighter, stripped of redundant functions reworking iptables rules. ### Features @@ -104,14 +107,11 @@ We will keep `nym-node v1.21.1` as the latest version on API side for another 3 - [Remove debug feature from `http-macro` spec in gateway probe](https://github.com/nymtech/nym/pull/6195) -- [DNS relibility and troubleshooting ](https://github.com/nymtech/nym/pull/6179) +- [DNS reliability and troubleshooting ](https://github.com/nymtech/nym/pull/6179) -- [Distinguish authenticator errors by credential spent](https://github.com/nymtech/nym/pull/6176): This PR introduces a distinction between authenticator client errors that are happening before a credential was taken out of storage, and after ] +- [Distinguish authenticator errors by credential spent](https://github.com/nymtech/nym/pull/6176): This PR introduces a distinction between authenticator client errors that are happening before a credential was taken out of storage, and after - [Disconnect mixnet client if registration fails](https://github.com/nymtech/nym/pull/6158): Currently the registration client does its job and then handles everything to the `vpn-client`, who then takes care on the mixnet client. However, if the registration fails, nothing is disconnecting the mixnet client, which can lead to errors of the kind of `There is already an open connection to this client`. This PR addresses that - - -### Refactors & Maintenance ## `v2025.20-leerdammer` From 32e06e19e790bcb5111e2741d2ac30b1afd79bfd Mon Sep 17 00:00:00 2001 From: serinko <97586125+serinko@users.noreply.github.com> Date: Wed, 26 Nov 2025 13:18:47 +0100 Subject: [PATCH 5/5] bump stats --- .../docs/components/outputs/api-scraping-outputs/time-now.md | 2 +- documentation/docs/pages/operators/changelog.mdx | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/documentation/docs/components/outputs/api-scraping-outputs/time-now.md b/documentation/docs/components/outputs/api-scraping-outputs/time-now.md index da40fc5444..a7fdf68bde 100644 --- a/documentation/docs/components/outputs/api-scraping-outputs/time-now.md +++ b/documentation/docs/components/outputs/api-scraping-outputs/time-now.md @@ -1 +1 @@ -Tuesday, November 25th 2025, 08:49:55 UTC +Wednesday, November 26th 2025, 12:13:56 UTC diff --git a/documentation/docs/pages/operators/changelog.mdx b/documentation/docs/pages/operators/changelog.mdx index 4036fc5aae..34c4551975 100644 --- a/documentation/docs/pages/operators/changelog.mdx +++ b/documentation/docs/pages/operators/changelog.mdx @@ -72,14 +72,14 @@ cargo Profile: release **We are introducing new `network-tunnel-manager.sh` (NTM), with improved server configuration (see all changes here: [\#6186](https://github.com/nymtech/nym/pull/6186/)). We ask operators to re-run their routing configuration using the new NTM, following [these steps](/operators/nodes/nym-node/configuration#routing-configuration).** -**NOTE THAT THIS IS A NEW TOOL HANDLING VARIOUS COMPLEX SERVER SETTINGS, PLEASE RUN IT ON A FEW NODES AT A TIME, DO THE TESTING, MONITOR YOUR NODES AND REPORT ANY ISSUES** +**NOTE THAT THIS IS A NEW TOOL HANDLING VARIOUS COMPLEX SERVER SETTINGS, PLEASE RUN IT ON A FEW NODES AT A TIME, DO THE TESTING, MONITOR YOUR NODES AND [REPORT ANY ISSUES](https://matrix.to/#/#operators:nymtech.chat).** We will keep `nym-node v1.21.1` as the latest version on API side for another 3 days to not penalize operators taking time for a proper implementation. We are proud to announce that there are several improvements on tools aiming to make node operators life easier. Please let us know how do these programs work for you. -- [**New Nym Node CLI version**](/operators/tools#nym-node-cli): This version introduces arguments, allowing the operator to pass all needed variables (ie. hostname, mode etcetra) and let the program setup everything needed for `nym-node`, server configuration, nginx, routing, tunnels and bridges without further prompts for these values. This version also installs [QUIC bridge](/operators/nodes/nym-node/configuration#quic-transport-bridge-deployment) +- [**New Nym Node CLI version**](/operators/tools#nym-node-cli): This version introduces arguments, allowing the operator to pass all needed variables (ie. hostname, mode etcetra) and let the program setup everything required for `nym-node` installation, server configuration, nginx, routing, tunnels and bridges, without further prompts for these values. This version also installs [QUIC bridge](/operators/nodes/nym-node/configuration#quic-transport-bridge-deployment). - [**New Network Tunnel Manager**](/operators/nodes/nym-node/configuration#routing-configuration): NTM went through an big overhaul ([\#6186](https://github.com/nymtech/nym/pull/6186/)) - this new version combines old NTM with WG scripts. If run with `complete_networking_configuration` the tool does entire routing configuration, creates interfaces, and configures WireGuard exit policy.