Changelog — SipLive SBC

v1.2 2026-06-30 Release

Setup Wizard, MariaDB Replication & WireGuard HA

First-login setup wizard — 7-step web GUI wizard appears automatically on a fresh install: (1) Network & Node Identity, (2) Firewall whitelist, (3) Admin password change, (4) License activation & SipLive account link, (5) TLS certificate (Let's Encrypt), (6) SIP TLS on port 5061, (7) Initial config apply. Existing installs are automatically exempted on upgrade.
Master-master binary-log replication replaces Galera — Switched to standard MariaDB master-master circular replication (server IDs 1/2, auto-increment offsets). Removes the Galera library dependency; configured via Settings → DB Replication.
WireGuard HA transport — Encrypted inter-node tunnel for both MariaDB replication and the peer control channel. Only WireGuard UDP port 51820 needs to be exposed. Keys are portal-provisioned with a shared PSK.
Live WireGuard status — HA page shows real-time tunnel state (handshake age, bytes transferred) with 15-second auto-refresh.

Wizard apply step failed on fresh installs — targetNodes() now falls back to local node when no scheduler heartbeat exists yet
Wizard apply-kick used a non-existent binary — replaced with correct sbc:apply-pending artisan dispatch
Wizard Skip buttons on Activation and SIP TLS steps were broken due to nested forms — restructured as standalone forms
Wizard password step returned 500 on second run — removed redundant current_password requirement since login already proves identity

Galera-specific services (GaleraConfigWriter, GaleraServiceRunner, GaleraStatusService) — replaced by sbc-configure-replication

v1.1 2026-06-27 Release

WireGuard VPN underlay for Active-Active HA replication — each node reports its WG public key and listen port on check-in; the licensing portal distributes peer WG config (endpoint, public key, PSK) automatically
Galera replication now routes over an encrypted WireGuard tunnel between HA peers, eliminating the need for a shared flat Layer 2 network
Portal recheck endpoint (/api/portal/recheck) — allows the licensing server to push instant license/HA config updates to the appliance without waiting for the next scheduled check-in
Multi-IP reporting on check-in — appliance reports all active interface IPs; portal records the full set per check-in event

HA peer config payload now includes WireGuard endpoint, public key, and PSK alongside existing Galera replication IP and web URL
Check-in now accepted on paid license without requiring an HA partner to be paired — ha: true is returned as soon as a Professional license is linked

v1.0 2026-06-21 Initial Release

Full SBC Manager web GUI (Laravel 11 / PHP 8.3)
Asterisk 20 PJSIP B2BUA compiled from source with STIR/SHAKEN (A/B/C attestation)
Trunk (SIP NAP) management with carrier templates and capacity guardrails
Route management with dial plan policy, route simulator, and time-based routing
DID inventory management with E.164 normalization
Endpoint Provisioning Wizard — guided NAP → DID → HMR → Route flow
Media profiles — reusable codec and RTP parameter sets
Hot Media Redundancy (HMR) — media failover rule sets
Fraud detection with configurable blocking rules
CDR viewer with filtering and CSV export
System health dashboard (services, disk, CPU, RAM)
Live SIP packet capture (pcap download via tshark)
Diagnostic bundle — one-click log + config snapshot download
On-demand and scheduled backups, S3-compatible cloud backup
Staged config apply system with per-node diff view, scheduling, and rollback
Active-Active HA clustering with Galera, GUI-driven node management
Role-based access control with fully customizable permission sets
Immutable audit log
Scoped REST API with bearer tokens
SOAP/WSDL API for legacy integrations
Device activation and licensing (first-boot registration, daily check-in)
ClearIP STIR/SHAKEN analytics integration
UFW firewall management and TLS certificate management via GUI
Let's Encrypt obtain/renew from the GUI