description	icon
Latest features and enhancements added in this release.	sparkles

What's New

{% hint style="info" %} Only significant new updates are listed here. To see the complete list of changes, refer to the NSO Changelog Explorer. {% endhint %}

Release Highlights

This release includes major enhancements in the following areas:

Filtering JSON-RPC show_config method

The show_config JSON-RPC method now supports filtering and pagination options for improved user experience when retrieving large list instances.

Documentation Updates:

• Added filtering and pagination parameters to show_config documentation in JSON-RPC API Data.

Service Improvements

This NSO version introduces multiple quality of life improvements for service development:

• A device template can be converted to a service with the /services/create-template action.
• New child-tags and inherit XML template attributes simplify template operations, further described in Template Operations.
• NSO warns if there are unused macros inside XML templates.
• New MAAPI call (get_template_variables / ncsGetTemplateVariables) enumerates variables in device, service, or compliance template.
• New MAAPI call (get_trans_mode / getTransactionMode) returns mode of the transaction, allowing, for example, easier reuse of existing transaction in an action.
• Similar to Python API, Java API action callback now always provides an open transaction. If there is no existing transaction, a new read-only transaction is started automatically.
• Data kickers can now kick for the same transaction where they are defined when configured with a new kick-on-creation leaf.

Web Server Connection Limits

The NSO Web Server now has a configurable number of simultaneous connections. Additionally, the number of current connections can be monitored through the metrics framework.

Documentation Updates:

• Documented a new /ncs-config/webui/max-connections parameter for the ncs.conf file.

Partial Service Reconciliation

Added support for reconciling only specific parts of a device configuration during service reconciliation using the new include and exclude parameters.

Documentation Updates:

• Added a Partial Reconcile section to the Services Deep Dive chapter.

Changes to CDB Persistence Mode

From NSO 6.7, the default CDB persistence mode has been set to on-demand-v1, instead of the in-memory-v1 mode, which has also been deprecated. If you're upgrading to NSO 6.7, the on-demand-v1 mode will become the new default. Read more about the change in the documentation.

Documentation Updates:

• Updated the CDB Persistence section to reflect the new changes in the CDB persistence mode.

Updates to Multi-Factor Authentication Handling

MFA handling is now tied directly to the authentication method being attempted. When a method issues a challenge, NSO invokes the challenge handler associated with that method only. Package-based MFA is the preferred approach. The configuration option /ncs-config/aaa/challenge-order is deprecated and ignored at runtime; authentication flow is controlled solely by /ncs-config/aaa/auth-order.

Documentation Updates

• Updated the Multi-Factor Authentication documentation in AAA Infrastructure to cover new changes.