# Kea 3.1.2 Release Notes, September 24th, 2025 Welcome to Kea 3.1.2, a maintenance release of the 3.1 development series. As with any other development release, use this with caution: development releases are not recommended for production use. Kea is a DHCP implementation developed by Internet Systems Consortium (ISC) that features DHCPv4 and DHCPv6 servers with DNS update and a REST API; optional database support (MySQL and PostgreSQL); optional RADIUS, YANG/NETCONF, and Kerberos GSS-TSIG support; and much more. Kea provides extensive management capabilities, including but not limited to: TLS support, Role-Based Access Control, run-time configuration monitoring and updates via a REST API, host reservations, and client classification. The text below references issue numbers. For more details, visit the Kea GitLab page at https://gitlab.isc.org/isc-projects/kea/-/issues. For details about Docker issues, visit the page at https://gitlab.isc.org/isc-projects/kea-docker/-/issues/. For details about packaging, visit the page at https://gitlab.isc.org/isc-projects/kea-packaging/-/issues/. The following bug fixes and features have been implemented since the previous release: 1. **Statistics**: New global address counters, packet statistics, and statistic commands (`statistics-global-get-all`) were introduced. A fix for the address miscount was introduced [#3213, #3239, #3925, #4096]. The new statistics are: - `pkt4-service-disabled` and `pkt6-service-disabled` - `assigned-addresses`, `assigned-nas` and `assigned-pds` 2. **Security**: Kea High Availability (HA) now allows specifying HTTP authentication details in the password file using the `basic-auth-user-file` parameter [#4070]. Kea no longer logs the database password as clear text when `kea-dhcp4` or `kea-dhcp6` initializes the schema [#4086]. 3. **Flex-id hook**: The flex-id hook library parameter `identifier-expression` is now optional; previously, it was mandatory [#4011]. 4. **RADIUS**: The RADIUS dictionary has been extended to support includes, vendor attributes, and integer translations to the RADIUS hook library [#3860]. 5. **API**: We expanded the `config-get` command to include the location of the lease file in the "csv-lease-file" entry [#2305]. 6. **Logging**: Debug-level logging has been expanded with additional packet details [#3531]. 7. **Bug fixes**: Kea now rejects the `config-set` and `config-reload` commands while the lease file cleanup process is running, to avoid file corruption [#3986]. We fixed a race condition where starting two Kea servers could result in deletion of one of the PID files [#4107]. ## Incompatible Changes There are no incompatible changes. ## License This version of Kea is released under the Mozilla Public License, version 2.0. https://www.mozilla.org/en-US/MPL/2.0 Some Kea hook libraries are provided under the MPL 2.0; others are licensed with the [Kea Hooks Basic Commercial End User License](https://www.isc.org/kea-premium-license/). The source for each hook library includes the applicable license. ## Download Pre-built ISC packages for current versions of the most popular Linux operating systems are available at: https://cloudsmith.io/~isc/repos/ Pre-built Docker images, as well as Docker files, are available. For details, see: https://gitlab.isc.org/isc-projects/kea-docker The Kea source and PGP signature for this release may be downloaded from: https://www.isc.org/download The signature was generated with the ISC code-signing key, which is available at: https://www.isc.org/pgpkey ISC provides detailed documentation, including installation instructions and usage tutorials, in the Kea Administrator Reference Manual. Documentation is included with the installation or at https://kea.readthedocs.io/en/latest/index.html in HTML, PDF, or EPUB formats. ISC maintains a public open source code tree, wiki, issue tracking system, milestone planner, and roadmap at https://gitlab.isc.org/isc-projects/kea. Limitations and known issues with this release can be found at https://gitlab.isc.org/isc-projects/kea/-/wikis/known-issues-list. We ask users of this software to please let us know how it worked for you and what operating system you tested on. Feel free to share your feedback on the Kea Users mailing list (https://lists.isc.org/mailman/listinfo/kea-users). We would also like to hear whether the documentation is adequate and accurate. Please open tickets in the Kea GitLab project for bugs, documentation omissions and errors, and enhancement requests. We want to hear from you even if everything worked. ## Support Professional support for Kea is available from ISC. We encourage all professional users to consider this option; Kea maintenance is funded with support subscriptions. For more information on ISC's Kea software support, see https://www.isc.org/support/. Free best-effort support is provided by our user community via a mailing list. Information on all public email lists is available at https://www.isc.org/community/mailing-list. If you have any comments or questions about working with Kea, please share them to the Kea Users list (https://lists.isc.org/mailman/listinfo/kea-users). Bugs and feature requests may be submitted via GitLab at https://gitlab.isc.org/isc-projects/kea/-/issues. ## Changes The following summarizes the changes since the previous release. Core: 2403. [func] fdupont Added "pkt4-service-disabled" and "pkt6-service-disabled" statistics which are increased when an incoming packet was dropped because the DHCP service is disabled. (Gitlab #4096) 2402. [func] fdupont When Kea is configured to use the memfile lease backend, the "status-get" command returns the location of the CVS backup file in the "csv-lease-file" entry. (Gitlab #2305) 2401. [sec] tmark Removed logging of database password as clear text when kea-dhcp4 or kea-dhcp6 initializes the schema. (Gitlab #4086) 2400. [bug] fdupont Fixed a race condition in pid file handling (used by servers, agents and lease file cleanup). (Gitlab #4107) 2399. [func] fdupont Added support of RADIUS dictionary includes, vendor attributes and integer translations to the RADIUS hook library for compatibility with previous versions using the FreeRADIUS client library. (Gitlab #3860) 2398. [sec] fdupont Added the "basic-auth-user-file" parameter to the HA hook library. This allows the basic HTTP auth user ID to be read from a file rather than specified as clear text in the configuration. (Gitlab #4070) 2397. [func] tmark Additional packet details are now emitted in debug level logs by kea-dhcp4 for both inbound and outbound packets. (Gitlab #3531) 2396. [func] tmark The flex-id hook library parameter, ``identifier-expression``, is now optional. Prior to this, it was mandatory. (Gitlab #4011) 2395. [build] razvan The library version numbers have been bumped up for the Kea 3.1.2 development release. (Gitlab #4120) 2394. [func] razvan Added new 'statistics-global-get-all' command for kea-dhcp4 and kea-dhcp6 servers, which returns all statistica except subnet counters. (Gitlab #3213) 2393. [func] razvan Added global counters for 'assigned-addresses', 'assigned-nas' and 'assigned-pds'. The 'stat-lease4-get' and 'stat-lease6-get' now properly return 'assigned-addresses' and 'assigned-nas' containing also the 'declined-addresses' address count. (Gitlab #3239, #3925) 2392. [func] razvan Reject 'config-set' and 'config-reload' commands when lease file cleanup process is running. (Gitlab #3986) --- Thank you again to everyone who assisted us in making this release possible. We look forward to receiving your feedback.