# Release 23.09

The following section will breakdown the **main** additions delivered in
zStorage 23.09 and its service pack releases (23.09-SP1, 23.09-SP2 and
23.09-SP3) to the Zadara Storage Cloud platform.

## Object Storage

### UI Console search and direct uploads and downloads

Version: 23.09-SP3

The Object Storage UI has enhanced usability with a search and sort feature
for containers, folders and files, and direct uploads and downloads of
folders and objects. This includes the option to specify versions of
versioned objects for download.

For more details, see:

* [Search for Containers](http://guides.zadarastorage.com/ngos-guide/latest/ngos-console.html#search-for-containers)
* [Search for Folders or Objects](http://guides.zadarastorage.com/ngos-guide/latest/ngos-console.html#search-for-folders-or-objects)
* [Uploading Folders or Objects](http://guides.zadarastorage.com/ngos-guide/latest/ngos-console.html#uploading-folders-or-objects)
* [Downloading Objects](http://guides.zadarastorage.com/ngos-guide/latest/ngos-console.html#downloading-objects)

### Custom MTU

Version: 23.09-SP3

MTU size configuration has been extended in Object Storage, with the option
to overwrite an MTU size selected from the UI dropdown.

Any custom MTU value in the range of 1420 - 9000 is supported.

### Presigned URL for POST (Object Upload)

Version: 23.09-SP3

Using a presigned URL for POST (object upload) is now supported for Swift.

See the
[Presigned URL for POST](http://guides.zadarastorage.com/ngos-guide/latest/object-storage-clients.html#presigned-url-for-post)
example.

### Support for S3 Transfer Manager multipart uploads and downloads

Version: 23.09-SP3

Object Storage now supports S3 Transfer Manager (HEAD and GET on multipart
segments).

See the
[Multipart Object example](http://guides.zadarastorage.com/ngos-guide/latest/object-storage-clients.html#multipart-object-example)
example.

### Object life-cycle policy

Version: 23.09-SP1

Managing digital assets efficiently is crucial for organizations.
Zadara’s Object Storage platforms offer scalable and durable
solutions for vast amounts of unstructured data. Managing this data
effectively requires a strategic approach. An Object Life Cycle Policy
automates the management of objects from creation to deletion, balancing
cost and compliance.

(ZSTRG-23790)

### CORS S3 Compatible API support

Version: 23.09-SP1

CORS (Cross-Origin Resource Sharing) is a security feature that permits
Object Storage containers to accept requests from different origins by
specifying permissible origins, methods, and headers. It is important as it
enables web applications to securely interact with the Object Storage
resources across various domains, ensuring proper data access while
maintaining stringent security protocols.

(ZSTRG-26582)

### Accounts and Containers(buckets) quotas

Accounts and container-level quotas empower the Object Storage administrator
to specify and manage data usage within the Object Storage platform.
The platform includes an integrated notification mechanism and customizable
threshold, enhancing the administrator’s ability to effectively oversee and
regulate storage resources.

(ZSTRG-23709)

### Container Logging

The Container Logging feature offers logging functionalities
for objects stored in the object storage system. This feature is intended
to offer insights into activities at the object level, facilitating audit
trails. It aids in comprehending access patterns, usage statistics, and
identifying security incidents.

(ZSTRG-24592)

### Strong Consistency

Zadara’s NextGen Object Storage was built with strong consistency in mind,
ensuring read operations will always return the most recent data. With zStorage
23.09, Zadara’s Object Storage is strong consistent for all object operations.

(ZSTRG-23073)

## VPSA Storage Array & All Flash Array

### Custom MTU

Version: 23.09-SP3

MTU size configuration has been extended, with the option
to overwrite an MTU size selected from the UI dropdown.

Any custom MTU value in the range of 1420 - 9000 is supported.

### Periodic media scan on all user RAID groups

Version: 23.09-SP3

A media scan is a proactive maintenance process that scans the underlying
drives of a RAID group, identifies potential issues, and automatically
tries to correct media errors when detected.

The VPSA performs periodic regular media scans on the drives in each RAID
group, with default scheduling configured to minimize performance impact.

For more details, see
[RAID Group Media Scan](http://guides.zadarastorage.com/vpsa-guide/latest/raid-groups.html#raid-group-media-scan).

### File System Trim (FSTRIM) and Defragmentation custom schedule support

Version: 23.09-SP3

On HDD media, the defragmentation process reorganizes files that are
fragmented into non-contiguous blocks, by rearranging them into contiguous
blocks.
This reduces seek time and improves file access speed.

On SSD media, the File System Trim (FSTRIM) operation improves performance
and extends the lifespan of the drive with effective erasure and reuse
of deleted blocks.

Customizing File System Trim (FSTRIM) and Defragmentation schedules is now
supported in VPSA Storage Array and Flash Array.

For more details, see:

* [Defragmentation](http://guides.zadarastorage.com/vpsa-guide/latest/settings.html#defragmentation)
* [File System Trim](http://guides.zadarastorage.com/vpsa-guide/latest/settings.html#file-system-trim)

### Enhanced NAS volume unmount error handling

Version: 23.09-SP3

Deletion of snapshots might affect snapshot policy routines, such as
creating new snapshots or deleting expired ones.

If a folder from the SMB File History Snapshot remains open on a client,
the snapshot deletion might fail.

In such cases, the VPSA now sends a
“Failed to unmount busy file history snapshot” notification to the VPSA
owner, and opens a support ticket.

In these situations, it is recommended to
[Restart File Services](http://guides.zadarastorage.com/vpsa-guide/latest/controllers.html#restart-file-services).

### Enhanced Virtual Controller (VC) Failover

Version: 23.09-SP2

VPSA version 23.03-SP2 introduces significant improvements in the VC (Virtual
Controller) failover time, further improving the efficiency and transparency
of VPSA Engine upgrade, software upgrade and scheduled failover for VPSA
server clients. This enhancement will be visible to server clients after the
VPSA has been fully upgraded to 23.09-SP2.

(ZSTRG-28238)

### VMware’s Extended-XCOPY API

Version: 23.09-SP1

VMware Extended XCOPY (E-XCOPY) is a feature introduced in vSphere 8.0 U1
that optimizes data copies between VMFS datastores hosted on different
storage arrays. E-XCOPY allows you to offload, migrate, and clone workloads
between VMFS datastores that reside in separate storage arrays. It
significantly improves the performance of tasks like Storage vMotion and
cloning by leveraging array-based data movement instead of relying solely
on host-assisted data copying within vSphere. By using E-XCOPY, you can
reduce the impact on vSphere resources during large-scale data transfers.

Users who wishes to leverage this capability please contact [support@zadara.com](mailto:support@zadara.com)

(ZSTRG-27217)

### Self-managed VPSA software updates

zStorage 23.09 allows VPSA owners to manage the software life-cycle of their
VPSAs. Upon releasing a new software version the platform will notify the
VPSA owner and will allow self-managed upgrade directly from Zadara’s Provisioning
Portal. VPSA Administrators can start their software upgrade immediately or
schedule it for a later time per their convenience.

(ZSTRG-19954)

## Command Center

### Custom MTU

Version: 23.09-SP3

MTU size configuration has been extended, with the option
to overwrite an MTU size selected from the UI dropdown.

Any custom MTU value in the range of 1420 - 9000 is supported.

<br/>

## Version 23.09-SP3-399

### Object Storage

- **ZSTRG-35064** - Fixed an issue in the segment-tracker service where
  a percent-encoded form of a multi-part object name led the orphan-object
  cleanup service to incorrectly identify some valid data fragments as
  orphans
- **ZSTRG-35088** - Fixed a performance issue in large Object Storage
  deployments where multi-delete API (DeleteObjects) requests experienced
  increased latency.

## Version 23.09-SP3-393

### VPSA Storage Array / VPSA Flash Array

- **ZSTRG-33450** - Fixed an issue where the access keys for an existing
  B2OS endpoint could not be updated
- **ZSTRG-34409** - Added visibility in the VPSA event log entry for KMIP
  key rotation event

## Version 23.09-SP3-391

### VPSA Storage Array / VPSA Flash Array

- **ZSTRG-32534** - Updated zadaravpsa.com VPSA TLS certificate
- **ZSTRG-33363, ZSTRG-33635** - Resolved an issue where iSCSI target login
  was permitted too early in the activation process, which can potentially
  cause VMware path disruption (PDU) during a VPSA failover

### Command Center

- **ZSTRG-32319** - Resolved an issue where existing password policies
  could inadvertently block user access to the Command Center
- **ZSTRG-33382** - Resolved an issue affecting the IP access control
  whitelist mechanism

## Version 23.09-SP3-381

### VPSA Storage Array / VPSA Flash Array

- **ZSTRG-29710** - Added the ability to add a custom schedule for the FSTRIM
  process ([more information](http://guides.zadarastorage.com/vpsa-guide/latest/settings.html#file-system-trim))
- **ZSTRG-30822** - Added the ability to add a custom schedule for NAS
  defragmentation process ([more information](http://guides.zadarastorage.com/vpsa-guide/latest/settings.html#defragmentation))
- **ZSTRG-26077** - Added Active Directory DNS monitoring
- **ZSTRG-28508** - Added the instance description to the main dashboard
- **ZSTRG-29723** - Added the option to search and filter by the volume
  comment field
- **ZSTRG-29182** - Implemented a periodic Media Scan mechanism for all
  RAID groups
- **ZSTRG-27710** - Added the ability to define a custom MTU for the Front-End
  (FE) interface
- **ZSTRG-30202** - Added a notification when VPSA failed unmounting a
  volume/snapshot due to a client lock
- **ZSTRG-30633** - Added the ability to restart the NAS services directly
  from the management interface (either SMB or NFS) ([more information](http://guides.zadarastorage.com/vpsa-guide/latest/controllers.html#restart-file-services))
- **ZSTRG-31492** - Added new B2OS (Backup to Object Storage) metrics to the
  VPSA performance section

### Object Storage

- **ZSTRG-30381** - Added formal support for IPv6 Front End network (NextGen
  Object Storage)
- **ZSTRG-26093** - Added support for uploading/downloading objects from the
  Object Storage management interface along with the option to download a
  specific object version ([more information](http://guides.zadarastorage.com/ngos-guide/latest/ngos-console.html#uploading-folders-or-objects))
- **ZSTRG-26093** - Added a container search option in the Object Storage
  management interface
- **ZSTRG-28610** - Added support for S3 Transfer Manager (HEAD/GET support
  of multipart segments) ([more information](http://guides.zadarastorage.com/ngos-guide/latest/object-storage-clients.html#multipart-object-example))
- **ZSTRG-28543** - Added the option to honor any client region value
- **ZSTRG-28521** - Added quota display for all accounts in the main grid
  display
- **ZSTRG-28508** - Added the instance description to the main dashboard
- **ZSTRG-29989** - Fixed an issue where bandwidth traffic was incorrectly
  reported
- **ZSTRG-27855** - Added support for POST (upload) pre-signed URLs ([more information](http://guides.zadarastorage.com/ngos-guide/latest/object-storage-clients.html#presigned-url-for-post))
- **ZSTRG-27710** - Added the ability to define a custom MTU for the Front-End
  (FE) interface
- **ZSTRG-29588** - Fix an issue where PUT request is failing due to an
  orphan metadata header
- **ZSTRG-31762** - Updated TLS certificate of zadarazios.com domain

### Security

Version 23.09-SP3 introduces a range of security fixes and enhancements across
the entire zStorage product line.

Notable updates include the mitigation of the following CVEs:

* [CVE-2019-8331](https://www.cve.org/CVERecord?id=CVE-2019-8331)
* [CVE-2018-20676](https://www.cve.org/CVERecord?id=CVE-2018-20676)
* [CVE-2016-10735](https://www.cve.org/CVERecord?id=CVE-2016-10735)
* [CVE-2018-20677](https://www.cve.org/CVERecord?id=CVE-2018-20677)
* [CVE-2018-14042](https://www.cve.org/CVERecord?id=CVE-2018-14042)
* [CVE-2018-14040](https://www.cve.org/CVERecord?id=CVE-2018-14040)
* ZSTRG-30546 - Added protection against XSS injection
* ZSTRG-27978 - Upgrade of outdated UI components

### Interoperability

- **Zadara VPSA CSI for Kubernetes** -    Zadara VPSA CSI version 2.4.2 is
  now available. For more information, see
  [CSI Driver](https://guides.zadarastorage.com/vpsa-guide/latest/interoperability-csi-driver.html)
  in the VPSA Storage Array user guide, and the
  [Zadara CSI repository on Github](https://github.com/zadarastorage/zadara-csi).

## Version 23.09-SP2-248

### VPSA Storage Array / VPSA Flash Array

- **ZSTRG-28238** - VPSA version 23.03-SP2 introduces significant improvements
  in the failover time, further improving the efficiency and transparency
  of VPSA Engine upgrade, software upgrade and scheduled failover for
  VPSA server clients.  This enhancement will be visible to server clients
  after the VPSA has been fully upgraded to 23.09-SP2.
- **ZSTRG-27428** - Interoperability (VMware ESXi v8): Renewed official
  support for VPSA with FC connectivity
- **ZSTRG-30033** - Fixed an issue in the server’s automatic connection
  script that caused an error during execution on RHEL
- **ZSTRG-30020** - For RAID groups, the VPSA will set the maximum sync speed
  based on the media type (HDD or SSD)
- **ZSTRG-28463** - Added the VPSA description to the main dashboard
  information tile

### Object Storage

- **ZSTRG-29616** - Fixed an issue where the Object Storage was stuck in the
  “Rebalancing” state
- **ZSTRG-29485** - Fixed an issue where VHS mode couldn’t be enabled after
  being disabled
- **ZSTRG-28113** - Scaling enhancements for OLCP (Object Life Cycle Policy)
  to support expiration rules for large-scale containers
- **ZSTRG-28961** - Fixed an issue where renaming an object failed when
  using the CyberDuck client
- **ZSTRG-28941** - Fixed an issue where deleting a large object from the
  management console did not delete the underlying segments
- **ZSTRG-28931** - Added the expiration timestamp response for OLCP enabled
  containers’ PUT requests (S3 API)
- **ZSTRG-28395** - Fixed an issue where a Static Website returned a 500 error
  instead of a 40X error
- **ZSTRG-28449** - Fixed an issue when using temporary URLs for large objects
  (Swift API)
- **ZSTRG-28857** - Fixed an issue where querying the accounts API
  returned an incorrect account count
- **ZSTRG-28463** - Added the Object Storage description to the main dashboard
  information tile
- **ZSTRG-28401** - Fixed an issue where account capacity usage is presented
  incorrectly
- **ZSTRG-28188** - Fixed a Proxy server issue where an incomplete PUT,
  terminated prematurely by the client, was not handled as expected by the
  Proxy, leading to high memory utilization.
- **ZSTRG-28186** - Fixed an issue with account custom reporting where the
  usage was calculated for a fixed 30-day period

### Command Center

- **ZSTRG-29814** - Fixed an issue where setting Active Directory connectivity
  was not successful while using a Firefox browser
- **ZSTRG-29530** - Fixed an issue where trying to set a custom logo was not
  working as expected
- **ZSTRG-29387** - Fixed an issue where the Object Storage view was returning
  an error
- **ZSTRG-28637** - Fixed an issue where the displayed timezone did not match
  the cloud’s configured timezone

### Provisioning Portal

- **ZSTRG-29964** - Fixed an issue in the VPSA creation wizard where some of
  the extended cache options were not displayed
- **ZSTRG-28989** - Add the ability to hide Object Storage for a new service
  offering

### Security

Version 23.09-SP2 introduces a range of security fixes and enhancements across
the entire zStorage product line.

Notable updates include the mitigation of the following CVEs:

* [CVE-2024-38428](https://www.cve.org/CVERecord?id=CVE-2024-38428)
* [CVE-2024-1013](https://www.cve.org/CVERecord?id=CVE-2024-1013)
* [CVE-2024-6345](https://www.cve.org/CVERecord?id=CVE-2024-6345)
* [CVE-2024-3651](https://www.cve.org/CVERecord?id=CVE-2024-3651)

## Version 23.09-SP1-317

### Command Center

- **ZSTRG-28683** - Increase Cloud Control allowed IP from 50 to 256 IP
  entries

## Version 23.09-SP1-309

### Object Storage

- **ZSTRG-23790** - Added Object Life Cycle support (including S3 API support)
- **ZSTRG-26582** - Added S3API CORS support
- **ZSTRG-27854** - Adjust container permissions cache to 60 seconds. With
  this change, both Container and Account ACL cache duration are 60 seconds
- **ZSTRG-27300** - Improved responsiveness of the Object Storage management
  console, particularly when handling multiple user requests, has been
  implemented to address slow UI performance
- **ZSTRG-28020** - Usage reports generator can now produce reports for the
  last two calendar months
- **ZSTRG-28211** - Fixed an issue where a disabled account user could still
  access the system
- **ZSTRG-27872** - Fixed an issue where an object that contains a comma (,) in
  its name couldn’t be deleted from the console
- **ZSTRG-27379** - Fixed an issue where the capacity dashboard graph doesn’t
  reflect the actual capacity
- **ZSTRG-26953** - Fixed an issue where the diagnostic reachability test
  failed for the Public IP as the source interface

### VPSA Storage Array / VPSA Flash Array

- **ZSTRG-27217** - Added support for VMware’s Extended-XCOPY API to allow
  Storage vMotion across two storage array. Users who wish to leverage this
  capability, please contact [support@zadara.com](mailto:support@zadara.com)
- **ZSTRG-28029** - Improved failover experience for VPSAs with block volumes
  consumers
- **ZSTRG-27898** - Adjusted the demote rate from the VPSA performance SSD
  tier to the capacity tier in an All Flash Array to avoid high SSD tier usage
- **ZSTRG-27539** - (*VPSA Storage Array*) New encrypted volumes will use
  a new encryption cipher which improves performance. There is no impact
  on existing VPSA volumes and VPSA Flash Array
- **ZSTRG-27321** - Enhanced stability for RAID protection
- **ZSTRG-28300, ZSTRG-28216** - Fixed an issue where internal API timeout
  can lead to a controller failover
- **ZSTRG-27875** - Fixed an issue where VPSA Flash Array went into Lock-Down
  state
- **ZSTRG-26953** - Fixed an issue where diagnostic reachability test failed
  for Public IP as the source interface

### Command Center

- **ZSTRG-27886** - Fixed an issue where user with a RO permissions couldn’t
  get the Storage Node CPU information
- **ZSTRG-27547** - RestAPI - Fixed an issue where used capacity per VPSA
  was not returned correctly

### Provisioning Portal

- **ZSTRG-27144** - General UI enhancements
- **ZSTRG-28110** - Fixed an issue where unsupported protection policies were
  listed for Object Storage creation

### Storage Node & Cloud Orchestration

- **ZSTRG-28505** - Rolled out a new zStorage Cloud Controller certificate
- **ZSTRG-22856** - Enhanced the cloud internal monitoring capabilities to
  detect networking issues

### Security

Version 23.09-SP1 introduces a range of security fixes and enhancements across
the entire zStorage product line, bolstering protection and improving user
safety.

Notable updates include the mitigation of the following CVEs:

## Version 23.09-302

### Object Storage

- **ZSTRG-25989** - Variety of improvements for a metadata policy
  performance and scale-out process
- **ZSTRG-25736** - Fixed an issue where the public URL is not presented with
  a custom endpoint
- **ZSTRG-25251** - Fixed an issue where changing the Object Storage instance
  name is not populated in the UI
- **ZSTRG-23709** - Added the ability to set account/container level quota
- **ZSTRG-23073** - Strong Consistency for all object operations
- **ZSTRG-24592** - Added the option to define container level auditing
- **ZSTRG-26506** - Added Zadara’s Object Storage signature to S3API responses
  (Server = Zadara)

### VPSA Storage Array / VPSA All Flash

- **ZSTRG-26744** - Fixed an issue where high memory utilization is caused
  due to an internal reporting process
- **ZSTRG-26686** - Fixed an issue where snapshot is stuck in “Deletion Pending”
  state
- **ZSTRG-25274** - Starting of 23.09 creating new RAID6 Raid-Group is not
  allowed
- **ZSTRG-25022** - Added the option to list existing tags for Volumes filtering
- **ZSTRG-22987** - Added a display of expected volume size post expansion
- **ZSTRG-24727** - Upgrade Samba SMB service
- **ZSTRG-22767** - KMIP KMS *Equinix SmartKeys* is now labeled as *Fortanix DSM*

### Command Center

- **ZSTRG-26652** - Allow administrator to select a permanent UI language in
  the VPSA UI view (cloud_admin), with the new behavior the language selected
  for the cloud_admin view will persist.
- **ZSTRG-27270** - Updated zadarastorage.com TLS certificate

### Provisioning Portal

- **ZSTRG-25855** - Fixed an issue where custom logo got stretched in the
  login screen
- **ZSTRG-19954** - Added the ability for VPSAs owners to upgrade their VPSA
  software version directly from the Provisioning Portal
- **ZSTRG-26272** - (AWS Marketplace Users) Added the visibility of the AWS
  account ID
- **ZSTRG-26272** - (AWS Marketplace Users) Added a protection to prevent AWS
  account association
- **ZSTRG-27270** - Updated zadarastorage.com TLS certificate

### Security

#### Provisioning Portal

- **ZSTRG-24912** - Diverse security-related solutions and improvements aimed
  at enhancing the security of Provisioning Portal web application.

#### Command Center

- **ZSTRG-24912** - Diverse security-related solutions and improvements aimed
  at enhancing the security of Provisioning Portal web application.

#### VPSA Storage Array/Flash Array

- **ZSTRG-24912** - Diverse security-related solutions and improvements aimed
  at enhancing the security of Provisioning Portal web application.

#### Cloud common components

- **ZSTRG-26902** - Upgraded cross cloud components to mitigate the following CVEs

### API Documentation

The zStorage cloud products API documentation is now available in a unified
portal: [https://api-doc.zadara.com/](https://api-doc.zadara.com/)
The old documentation portals will be deprecated gradually and currently serves
the RestAPI documentation for version 23.03 and below.

## Revision history

- 23.09-SP3-399, November 2025
- 23.09-SP3-393, September 2025
- 23.09-SP3-391, July 2025
- 23.09-SP3-381, February 2025
- 23.09-SP2-248, October 2024
- 23.09-SP1-317, June 2024
- 23.09-SP1-309, May 2024
- 23.09-302, December 2023