Home Products Store Blog Users Contact

Changelog

Note: micro releases (version X.Y.Z where only Z is incremented) that don't introduce any changes to program functionality are not listed. Those are usually fixes for trivial issues (spelling, esthetics), minor performance improvements or optimizations of program internals.

Version 1.16.4 (2025-04-18)

• added: SMS gateway aftinettelecom.com
• added: option parser now handles x > y = z syntax to append RADIUS attributes to certain options
• fixed: trivial HTML decoding and sanitazion of input received via WHMCS API
• added: handling of prefered IP auth. requests, usefull for DHCP lease renewal etc.

Version 1.16.0 (2025-03-02)

• added: NAS setting Calling ID field now supports multiple attributes
• added: new elements on overview page UI: sales/admin email entry for contact, more license details, links for online store, contact
• added: notifications for license expiration and technical issues
• added/changed: stats page with various bar graphs replaced earlier numeric profiling report
• changed: duplicated RADIUS request detection improved

Version 1.15.3 (2025-02-06)

• fixed: cleanup of duplicated online IP's is too slow on MySQL in certain cases
• changed: failed session cleanup now handles very short User-Request terminated sessions that had no upload or download

Version 1.15.1 (2025-01-10)

• fixed: limit error log sizes and error handling when database or operating system is in critical state
• added: Message-Authenticator is now included in access responses when request has it, not required by RFC but often expected in practice
• fixed: RFC 3579 handling of Message-Authenticator, requests with invalid hash are silently discarded
• added: option to invert upload/download counters for sessions, configurable per NAS/service

Version 1.15.0 (2024-09-27)

• added: postpaid license handling
• added: calling ID authentication alternative attribute lookup

Version 1.14.0 (2023-07-06)

• added: framed IP pools, "Framed IP" service option can now use predefined pools for easier management, see FAQ for usage details
• added: default Framed IP pool at top above NAS and service/product levels
• fixed: db limit check for licenses in local mode should not be enforced

Version 1.13.2 (2023-06-09)

• fixed/changed: updated RADIUS dictionaries

Version 1.13.1 (2023-03-18)

• fixed/changed: more effective prevention of duplicated framed IP's on flood authentication
• fixed: minor stability issues on Windows platform

Version 1.13.0 (2022-11-18)

• fixed/changed: issue with integration with WHMCS 8.6 / PHP 8+ fixed (mysql_* function deprecation), minimum of PHP 5+ is required now
• fixed/changed: LIMITED and PUBLIC mode usage is not counted towards quota or shown in usage, so topups and limits work correctly
• added: africastalking.com SMS gateway default country code

Version 1.12.0 (2021-12-31)

• fixed: sorting by column fails in some reports
• added: quick search by service # or username, detailed service report page
• added: limited Ubiquiti UISP host integration support
• added: africastalking.com SMS gateway

Version 1.11.1 (2021-08-27)

• added: disconnect services online in PUBLIC mode when service is unsuspended, so they can reconnect
• fixed/changed: PUBLIC mode sessions are not counted towards port limit for service, if session is matched to service by any means
• changed: more detailed license expiration warnings
• fix: trivial UI changes (typos etc.)

Version 1.11.0 (2021-04-30)

• fixed/changed: license verification and other security and performance issues
• changed: local SQLite storage upgraded to latest stable version
• fixed: invoking blissembed --help fails with 'program is already running' instead of help message if instance is running
• fixed: problem with sending CoA requests when NAS IP contains wildcard and no CoA IP is set

Version 1.10.4 (2021-02-08)

• added: more detailed database connection error messages
• fixed: connecting to MySQL or Postgres always uses default port even when blissembed.cfg file specifies differently

Version 1.10.3 (2020-12-26)

• added: web area/API login by trusted hosts, similar to login by trusted IP with wild card
• added: web area login attempts now store resolved host name along with remote IP

Version 1.10.2 (2020-12-11)

• changed: only sessions with public (unique) framed addresses are checked and terminated if there are duplicates, addresses from private ranges are permitted to be non unique
• added: HTML CSS customization of admin/client service details (output of API calls html_service_admin/client)

Version 1.10.1 (2020-12-04)

• fixed: termination of duplicated address sometimes runs on just started sessions with unknown framed IP
• fixed: database management page in web UI is slow with huge datasets

Version 1.10.0 (2020-10-31)

• added: more detailed logging in web area events report for various issues
• added: new service option "Special Dates"
• added: supplied password is shown in log when access is rejected where possible, works only with PAP
• added: most report searches now do text search for various integer id's where applicable, works on all database backends
• added: counter for items affected by empty_cache API call
• added: terminate duplicated online addresses, check runs every 5 minutes and sequentially sends PoD requests to NAS-es
• changed: local API secret hash size reduced from 32 to 20 bytes
• fixed: issues with empty_cache API call that misses to do complete work in some cases
• fixed: process guard protection against brute force restarting not working in some cases
• fixed: some localization issues

Version 1.9.2 (2020-02-18)

• fixed: Framed IP input field in NAS edit page shouldn't be required

Version 1.9.1 (2019-12-05)

• fixed: monthly data rollover incorrectly adding data from before service start

Version 1.9.0 (2019-11-24)

• added: framed IP pool for NAS, if service has no framed IP option set NAS will use own pool
• added: host API response monitoring, while host is unavailable cache is used efficiently instead
• added: Monthly Data Rollover service option
• added: better handling of bad connections with remote servers (web, email, SMS etc.)
• fixed: added missing EAP message in access reject when using EAP-MD5, mismatched ID and other deviations from RFC standard

Version 1.8.0 (2019-08-07)

• added: RADIUS dictionary aliases for less common attributes
• added: monitoring and error messages if database becomes unavailable
• added: more user friendly HTML output in API calls for easier CSS style customization of integrated code
• fixed: various stability & performance issues

Version 1.7.2 (2019-02-24)

• fixed: workaround for WHMCS issue with GetClientsProducts API call than causes unacceptable delays in some rare cases

Version 1.7.1 (2019-02-20)

• fixed: WHMCS get service API calls not working due to corrupted database data
• fixed: slow RADIUS communication over bad network
• fixed: status bar in top of WHMCS admin area not shown correctly with some templates/skins

Version 1.7.0 (2018-11-30)

• added: new service option named "NAS access" that controls from which device client can authenticate
• added: notifications can be sent on multiple email and SMS numbers (multi email possible only with SMTP or sendmail as gateway)
• added: Embedded's API can be accessed using secret sent with each request instead of trusted IP
• fixed: minor performance and reliability issues

Version 1.6.1 (2018-07-06)

• changed: program will not automatically disable authentication 10 days after license expires

Version 1.6.0 (2018-06-27)

• added: behavior option to periodically delete failed sessions from history, reclaims lot of wasted storage space (in some extreme cases as much as 2/3 of database space used)
• removed: 2 diagnostic tests (most complex ones, integrity check and fixing) as they are too resource intensive when using in production and are of little practical value
• added: automated database maintenance (SQLite and Postgres) that performs VACUUM when needed
• added: "Extend months" and "Extend days" top-up options that replace "Duration months" and "Duration days" with more intuitive behavior (see manual)
• added: Russian translation
• added: check if clock on host is not in sync with RADIUS server
• added: WHMCS API credentials can be used for API authentication in place of username and password
• added: WHMCS API access key can be used for API access to skip IP check
• changed: non standard zero length RADIUS attributes are now tolerated instead of rejecting request with "invalid attribute length" error
• added: command line option to run in anonymous mode, without accounting or retention of any client identifying information, can be used by providers of anonymous services like VPN
• added: strip user-name prefix behavior option
• added: strip access reply attributes NAS option
• added: WHMCS config option to turn off status bar in WHMCS admin area
• added: "disconnect" API call have additional parameters to match sessions by service id or username
• fixed: minor issues with UI and cache performance

Version 1.5.1 (2018-04-13)

• fixed: minor bugs with API calls and daily accounting stats

Version 1.5.0 (2018-03-31)

• added: full RADIUS proxy support with filter rules that include request type, source IP and username
• removed: proxyaccthost and proxyacctport command line and blissembed.cfg file options have been removed, new RADIUS proxy should be used instead to send copies of accounting requests to third party
• added: performance option "Max DB conns" to limit number of open database connections
• added: new behavior option "Strip Idle-Timeout" to disable idle timeout on sessions
• added: more information shown in UI for overview, database, session history etc.
• added: more advanced service cache system with debugging UI in admin area
• changed: service cache is stored in database now instead in local file

Version 1.4.4 (2018-03-09)

• fixed: Blesta integration sometimes failed to get service by username, indicated by repeated auth. rejections with reason "username not found"

Version 1.4.2 (2018-03-08)

• fixed: API call empty_cache without parameters (full empty) did nothing

Version 1.4.1 (2018-03-07)

• fixed: services were not fully reused from cache during authentication when host is unreachable

Version 1.4.0 (2018-03-04)

• added: WHMCS service Dedicated IP (edited in admin area) can override Framed IP option if you enable it in whmcs/modules/servers/blissembed/config.php file. See original config.php file described in installation manual for details.
• added: WHMCS config.php option to turn off HTML option picker in WHMCS admin area (same applies as above)
• added: budgetmessaging.com SMS gateway
• fixed: local mode top-up report search silently fails
• added: documentation for custom integration using generic mode

Version 1.3.0 (2017-12-02)

• added: CoA/Disconnect attribute control found in NAS edit page, workaround for non standard/broken NAS-es
• added: workarounds for some Cisco compatability issues and bugs with CoA/Disconnect
• added: IPv6 addresses can be used in Framed IP option
• changed: installers for all platforms are now .zip archives that include MD5 hash of included files
• added: new config option - "special mode override", found in Behavior config section in web area
• added: new template variables for email and SMS notifications
• added: more detailed and corrected log messages
• fixed: installing on Windows using MySQL database sometimes fails due to MySQL compatibility issues
• fixed: trivial UI issues

Version 1.2.0 (2017-06-05)

• added: support for Darwin (MacOS) and other flavors of Unix systems and more CPU architectures
• added: smart service cache that is saved on disc, significantly improves restart speed and reduces load on host API
• added: smart cache enables robust service lookup, even when host is down for extended periods of time
• added: Duration months/days option can now be used with top-ups for non-permanent services
• added: NetGSM gateway for Turkey
• changed: removed API timeout config option, it is automatically controlled by program
• fixed: running with WHMCS 7.2 causes "failed to load service" and "service lookup failed" errors
  Important: if you are upgrading but have not applied Version 1.1.3 yet you must follow instructions below on how to finalize patch

Version 1.1.3 (2017-05-19)

• fixed: invalid error message shown "CoA/Disconnect request rejected" but all is working correctly
• fixed: guard process restarts or runs multiple instances instead of only one blissembed.exe
• fixed: running with WHMCS 7.2 causes "failed to load service" and "service lookup failed" errors
  Important: to complete patch when upgrading, you also must start program, wait for it to extract and copy whmcs/includes/api/blissembed.php file over old one found in same path in your WHMCS installation folder. It is one of files copied during installation, see "Starting program and copying required PHP files" in manual under "Installing with WHMCS"

Version 1.1.0 (2017-04-20)

• added: EAP-MD5 authentication method
• added: service username and password are always shown in WHMCS client area
• fixed: Framed-IPv6-Prefix not working correctly
• fixed: disabled accounts identified by CallingID/MAC accepted instead rejected on auth

Version 1.0.3 (2017-02-16)

• fixed: non-active service sessions sometimes not disconnected automatically
• changed: CoA/Disconnect requests now use NAS-Identifier instead of NAS-IP-Address attribute for better reliability

Version 1.0.2 (2017-01-20)

• fixed: sometimes there is more than one "blissembed guard" processes running

Version 1.0.1 (2016-12-28)

• fixed: lot of minor issues with built-in web interface
• fixed: diagnostic test for missing service_id should ignore PUBLIC mode sessions
• added: simpler error messages
• added: attribute alias MT-Rate-Limit for Mikrotik-Rate-Limit

Version 1.0.0 (2016-11-05)

• added: option to proxy received acct requests to third party
• added: reminder message in built-in portal when program is running in debug mode
• added: more detailed reject reason messages in auth report
• fixed: not all info shown (username, password etc.) for built-in UI service overview
• fixed: possible rare bug with Port Limit option which could allow more online sessions than it should
• added: help page with technical term descriptions and solutions of common problems
• added: all passwords in built-in UI are hidden behind "show as text" checkbox
• added: system diagnostic page with tests
• fixed: sessions without service ID (using diagnostic)
• added: category filter in events report
• changed: simpler and more useful event messages
• added: protection against timing attacks on built-in login page
• added: capture report has empty table button
• added: all reports have additional navigation links below table

Version 0.9.2 (2016-10-03)

• added: service top-ups for Blesta integration
• added: changing service password in WHMCS client area can be disabled

Version 0.9.1 (2016-09-26)

• added: integration with Blesta billing

Version 0.9.0 (2016-09-01)

• added: host type "local" with management of local clients, products and services without integration with remote billing software (see local mode in manual)
• added: Postgres database back end support
• added: SMTP and sendmail (linux only) email gateways for notifications
• added: dbPort config/command line argument can be set to 0 to use database default port
• added: trusted IP address list in config can now contain wildcards to match address ranges
• changed: # column in reports now shows database ID instead of row number

Version 0.8 (2016-04-24)

• 0.8.12 - added: significant CPU and memory usage improvements
• 0.8.10 - added: NAS IP wildcard to match multiple NAS-es
• 0.8.9 - fixed: missing product name when using with WHMCS host (bug with WHMCS 6.3.0 and 6.3.1, not fixed at the moment)
• 0.8.9 - added: WSPr-Bandwidth-Max-Up and WISPr-Bandwidth-Max-Down are now parsed and showed as rate limit
• 0.8.8 - fixed: mode and rateLimit are not shown on session start
• 0.8.7 - changed: RADIUS Class attribute support by NAS is now optional
• added: significant performance improvements
• added: multiple RADIUS requests are handled using variable size thread pool
• fixed: timeouts on large number of simultaneous requests
• fixed: "missing coa_ip" bug on NAS edit page introduced in 0.7.1603300913 that affects only new installations (not upgrades)

Version 0.7 (2016-01-17)

• 1604111448 - fixed: email/SMS notifications triggered incorrectly and showing wrong values when service top-ups are used
• 1603300913 - added: CoA receiver IP settings in NAS edit page
• 1603251012 - added: Turkish and Italian localizations
• 1603231121 - fixed: service password editor not visible in WHMCS client area
• 1603221321 - added: web server runs HTTPS along HTTP, port is set using new program option httpsport
• 1603212106 - added: Digest auth schema
• 1603091010 - added: notification messages when license expires
• 1602211630 - added: optimizations with RADIUS accounting that reduce CPU usage by 40%
• 1602191202 - changed: WHMCS service lookup by username search prioritize active services over newer ones
• 1602121815 - added: RADIUS attribute names and named integer values can be set as case insensitive
• 1602101430 - added: config option to control username and password visibility in client area
• 1602101220 - changed: PANIC mode renamed to PUBLIC mode with more options
• 1602011555 - added: HTTPS support for admin area and API access
• 1601171131 - changed: service usage graphs show only last 2 months/2 years worth of history
• 1601161157 - added: Serbian localization
• 1601161141 - added: all reports now use improved pagination and columns are sortable
• 1601142108 - added: RADIUS request capture auto disabler
• 1601141646 - added: localization for host frontend
• 1601011158 - fixed: update timeout not working correctly when database clocks is not in sync with program
• 1512151800 - fixed: unexpected behavior when API cache timeout is set to 0 (possible database overload)
• 1512091119 - fixed: monthly usage wrong when using non calendar months option
• 1512071446 - fixed: possible bug with multiple notifications send in same second
• 1512051219 - changed: accounting on/off RADIUS requests are now silently ignored
• 1511230956 - changed: invalid accounting requests (without Acct-Session-Id) are not shown online any more
• 1511211321 - fixed: possible errors with Calling-ID authentication and accounting
• 1511211256 - added: API call emptycache now accepts username parameter

Version 0.6 (2015-09-25)

• 1511011252 - added: RADIUS auth. and acct. ports settings in blissembed.cfg
• 1510311122 - added: rate limit shown for Cisco online sessions
• 1510310841 - added: more detailed error logging for CoA/disconnect failures
• 1510391554 - added: option "Session attributes" (see docs)
• 1510301329 - added: ProxyCoA NAS option (dbrev.7)
• 1510281733 - added: support for IPv6 RADIUS attributes (RFC 3162)
• 1510271735 - added: accounting without Class attribute supported now
• 1510271211 - added: service-less (anonimous) sessions shown in online report from now on
• 1510191531 - added: PANIC mode (see docs)
• 1510151650 - fixed: multiple notifications for same event, problems with topup notifications
• 1510151124 - added: CPU/memory/GC stats to overview page
• 1510111515 - fixed: auth. spam protection not working correctly
• 1510101654 - added: request statistics report
• 1510091355 - fixed: "database is locked" error when using SQLite
• 1510081634 - fixed: no more i386/amd64 lib dependencies, program is self contained completely
• 1509300921 - changed: DB page, two buttons (run select and exec) instead of one
• 1509271154 - fixed: topups handled incorectly when using non calendar monthly limits
• 1509262104 - fixed: upload/download counters showing lower values than they should for some sessions
• 1509241945 - added: "Calendar monthly limit" product option
• 1509241817 - added: "Notification method" product option
• 1509240904 - added: smsbroadcast.com.au SMS gateway
• 1509180912 - added: install latest version button
• 1509180841 - added: check for update button
• 1509171354 - changed: update interval/timeout and CoA port are now set on NAS level
• 1509171354 - added: NAS now has notes field
• fixed: optimizations and bug fixes

Version 0.5 (2015-07-30)

• 1509151513 - added: NAS settings for including Message-Authenticator in CoA and PoD requests
• 1509090754 - changed: Strip Realm option moved to NAS
• 1509090754 - added: Add Realm option for NAS
• 1509051437 - added: per mode monthly usage graph
• 1509042202 - added: DB page for database administration & running of raw SQL queries
• 1509041744 - added: new categories for event log + auto cleanup of old logs
• 1509041608 - changed: service session report shows only latest 500 rows
• 1508241454 - added: RADIUS proxy support, new NAS type "proxy"
• 1508240944 - added: "Update Timeout" config option
• added: new API call: "disconnect"
• added: option to disable RADIUS request capture
• added: option to select email and SMS gateway (host, debug, etc.)
• added: clickatell.com SMS gateway
• added: protection against RADIUS auth. flooding
• fixed: lot of bugs
• changed: installation procedure stabilized, auto update working
• changed: top-ups now work using WHMCS product addons
• added: new API call: "service"
• added: 64-bit Linux executables

Version 0.2 - 0.4

• changes, testing, feedback

Version 0.1 (2015-06-30)

• initial release