What's New in This Guide

This section lists the documentation updates for release 25.2.2xx.

Release 25.2.201- G47173-01, April 2026

Feature Updates

• New Features
  • Simultaneous Support for HTTP and HTTPS Connections
    • Added the Simultaneous Support for HTTP and HTTPS Connections section to describe the functionality of the feature.
    • Updated the Egress Gateway Route Configuration for Different Deployments section with the possible configurations.
    • Added a note for the following CNC Console parameters in the Routes Configuration section to set the value as false, if the "Simultaneous Support for HTTP and HTTPS Connections" feature is enabled.
      • httpsTargetOnly
      • httpRuriOnly
    • Added the following metrics:
      • oc_egressgateway_request_failure_total metric in the Egress Gateway Metrics section.
      • oc_ingressgateway_connection_failure_total metric in the Ingress Gateway Metrics section.
    • Added the following alerts for the feature:
      • OcnrfEgressGatewayFailureForHTTPRequests
      • OcnrfIngressGatewayFailureForIncomingConnections
  • Support for TLSv1.3 on Internal API Communication
    • Added the Support for TLSv1.3 on Internal API Communication section to describe the functionality of the feature.
    • Added the following metrics used in the feature in the CNC Jetty Metrics section:
      • oc_cnc_jetty_service_discovery_duration_seconds
      • oc_cnc_jetty_service_discovery_up
      • oc_cnc_jetty_service_discovery_fallbacks_total
    • Added the oc_ingressgateway_ip_addresses_fetch_failure metric in the Ingress Gateway Metrics section.
    • Added the following alerts in the System Level Alerts section:
      • OcnrfServicesFetchFailureForDestinationIPAddresses
      • OcnrfIngressGatewayFetchFailureForDestinationIPAddresses
  • Rerouting SLF Requests Based on Server Header Value
    • Added the feature description in the Rerouting SLF Requests Based on Server Header Value section.
    • Added the Server Header Value Based SLF Selection CNC Console parameter in the SLF Options section.
  • Migrating Ingress Gateway Routes Configuration from Helm to REST API
    • Added an appendix Managing Ingress Gateway Routes Configuration Using REST APIs to explain how to manage route configurations using {apiRoot}/nrf/nf-common-component/v1/igw/routesconfiguration and prevent accidental route removal of existing routes.
    • Modified the steps for enabling the CCA header validation feature in the CCA Header Validation in NRF for Access Token Service Operation section.
    • Enhanced the existing note for the Enabled parameter in the CCA Header section to indicate that the feature can be enabled or disabled using CNC Console post installation or upgrade.
    • Enhanced the existing note for the Role and Sub Key parameters in the CCA Header section to indicate that the default values should not be modified.
• Enhancements
  • Feature Enhancements
    • Support for cnDBTier APIs in CNC Console
      • Updated the Support for cnDBTier APIs in CNC Console with the following details:
        • Added the details for Georeplication Status Across All Sites API.
        • Updated the URI of the Georeplication Status from dbconfig-geoReplicationStatus to /ocdbtier/status/replication/realtime.
        • Removed the PVC Health Status related content from the description of NDB Health Status as cnDBTier has moved the PVC related metrics from db-monitor-svc to the db-infra-monitor-svc sidecar to distribute the load efficiently.
      • Added the CNC Console details for the attributes in the Georeplication Recovery Across All Sites section.
      • Removed the PVC related content from the Table 5-5 as cnDBTier has moved the PVC related metrics from db-monitor-svc to the db-infra-monitor-svc sidecar to distribute the load efficiently. in the cnDBTier Health section.
    • Increase in Active Subscription Count
      • Updated the NRF Supported Services section with the maximum number of active NFSubscriptions from 1000 to 1500.
      • Updated the Subscription Limit section with a reference to the maximum number of NFSubscriptions supported.
      • Added a note in the Subscription Limit section, to refer the subscription limit behavior when the Growth feature is enabled.
      • Removed the information that are no longer supported from the prerequisites section from the Subscription Limit feature.
      • Removed the ocnrf_subscription_migration_status metric from the following sections section as it is no longer supported.
        • NRF NF Metrics
        • Subscription Limit
      • Removed the OcnrfSubscriptionMigrationInProgressCritical and OcnrfSubscriptionMigrationInProgressWarn alerts as they are no longer supported from the following sections:
        • Subscription Limit
        • Subscription Limit Feature
    • Added an appendix NF Distribution Guidelines between NRF Instances for Single-set and Multi-set based Deployments section to include the guidelines for NF distribution between NRF instances or sets.
    • Added an appendix Error Handling and Expected Outcomes for NRF Growth Feature for documenting the fault scenarios for NRF Growth feature.
    • Added an appendix Loop Detection and Loop Prevention in NRF Forwarding Scenarios to include the loop detection and loop prevention behavior in NRF Forwarding scenarios.
    • Added a section in Interaction with Existing Features section to describe the NRF Growth Forwarding behavior.
    • Latency Metrics Format Enhancement for NRF Microservices with Micronaut
      • Updated NRF latency metrics from the *_latency_seconds format to the new *_latency_seconds_[suffix] format in conjunction with the migration from Spring Boot to Micronaut, impacting all related KPI expressions. Both formats are supported during the migration period for Ingress and Egress Gateway microservices. For more details, see NRF Metrics and NRF KPIs sections.
      • Modified the following metric names and added a note in the corresponding sections:
        • Ingress Gateway Metrics
          • oc_ingressgateway_request_latency_seconds_[suffix]
          • oc_ingressgateway_request_processing_latency_seconds_[suffix]
          • oc_ingressgateway_server_latency_seconds_[suffix]
        • oc_egressgateway_request_latency_seconds_[suffix] in the Egress Gateway Metrics section.
        • ocnrf_slf_jetty_latency_seconds_[suffix] in the NRF SLF Metrics section.
        • ocnrf_forward_jetty_latency_seconds_[suffix] in the NRF Forwarding Metrics section.
      • Modified the metric name from ocnrf_slf_jetty_latency_seconds to ocnrf_slf_jetty_latency_seconds_[suffix] in the Subscriber Location Function section.
      • Modified the metric name from ocnrf_forwarding_jetty_latency_seconds to ocnrf_forward_jetty_latency_seconds_[suffix] in the NRF Forwarding section.
      • Modified the metric name from security_cert_x509_expiration_seconds to security_cert_x509_expiration_seconds_[suffix] in the Support for TLS and Common Gateway Metrics sections.
    • Added the following metrics in the NRF NF Metrics section:
      • ocnrf_forward_jetty_latency_seconds_[suffix]
      • ocnrf_forward_jetty_request_total
      • ocnrf_forward_jetty_response_total
      • ocnrf_forward_jetty_req_body_size_bytes_[suffix]
      • ocnrf_forward_jetty_res_body_size_bytes_[suffix]
      • ocnrf_disc_cds_jetty_latency_seconds_[suffix]
      • ocnrf_disc_cds_jetty_request_total
      • ocnrf_disc_cds_jetty_response_total
      • ocnrf_disc_cds_jetty_req_body_size_bytes_[suffix]
      • ocnrf_disc_cds_jetty_res_body_size_bytes_[suffix]
      • ocnrf_oauth_jetty_latency_seconds_[suffix]
      • ocnrf_oauth_jetty_request_total
      • ocnrf_oauth_jetty_response_total
      • ocnrf_oauth_jetty_req_body_size_bytes_[suffix]
      • ocnrf_oauth_jetty_res_body_size_bytes_[suffix]
      • ocnrf_roaming_jetty_latency_seconds_[suffix]
      • ocnrf_roaming_jetty_request_total
      • ocnrf_roaming_jetty_response_total
      • ocnrf_roaming_jetty_req_body_size_bytes_[suffix]
      • ocnrf_roaming_jetty_res_body_size_bytes_[suffix]
      • ocnrf_slf_jetty_latency_seconds_[suffix]
      • ocnrf_slf_jetty_request_total
      • ocnrf_slf_jetty_response_total
      • ocnrf_slf_jetty_req_body_size_bytes_[suffix]
      • ocnrf_slf_jetty_res_body_size_bytes_[suffix]
      • ocnrf_subs_cds_jetty_latency_seconds_[suffix]
      • ocnrf_subs_cds_jetty_request_total
      • ocnrf_subs_cds_jetty_response_total
      • ocnrf_subs_cds_jetty_req_body_size_bytes_[suffix]
      • ocnrf_subs_cds_jetty_res_body_size_bytes_[suffix]
      • ocnrf_subs_notif_jetty_latency_seconds_[suffix]
      • ocnrf_subs_notif_jetty_request_total
      • ocnrf_subs_notif_jetty_response_total
      • ocnrf_subs_notif_jetty_req_body_size_bytes_[suffix]
      • ocnrf_subs_notif_jetty_res_body_size_bytes_[suffix]
      • ocnrf_subs_roaming_jetty_latency_seconds_[suffix]
      • ocnrf_subs_roaming_jetty_request_total
      • ocnrf_subs_roaming_jetty_response_total
      • ocnrf_subs_roaming_jetty_req_body_size_bytes_[suffix]
      • ocnrf_subs_roaming_jetty_res_body_size_bytes_[suffix]
    • Updated the description in the NRF KPIs section with the new dashboard images and included the KPI legends for the new dashboard view.
    • Added the following KPIs in the Resource Usage KPIs section:
      • CPU Usage Percentage (per microservice)
        • CPU Usage Percentage (per Ingress Gateway Microservice)
        • CPU Usage Percentage (per Egress Gateway Microservice)
        • CPU Usage Percentage (per discovery microservice)
        • CPU Usage Percentage (per nrfcachedata microservice)
        • CPU Usage Percentage (per nfregistration microservice)
        • CPU Usage Percentage (per nrfartisan microservice)
        • CPU Usage Percentage (per nfsubscription microservice)
        • CPU Usage Percentage (per nfaccesstoken microservice)
        • CPU Usage Percentage (per nrfauditor microservice)
        • CPU Usage Percentage (per nrfconfiguration microservice)
      • Memory Usage (per microservice)
        • Memory Usage (per discovery microservice)
        • Memory Usage (per nrfcachedata microservice)
        • Memory Usage (per nrfconfiguration microservice)
        • Memory Usage (per NfAccesstoken microservice)
        • Memory Usage (per NfRegistration microservice)
        • Memory Usage (per NfSubscription microservice)
        • Memory Usage (per nrfartisan microservice)
        • Memory Usage (per nrfauditor Microservice)
        • Memory Usage (per Egress Gateway Microservice)
        • Memory Usage (per Ingress Gateway Microservice)
      • NF Registration Microservice Pod Count
      • NF Discovery Microservice Pod Count
      • NF Subscription Microservice Pod Count
      • NF Access Token Microservice Pod Count
      • Ingress Gateway Microservice Pod Count
      • Egress Gateway Microservice Pod Count
    • Updated the KPI expressions by replacing kubernetes_namespace with namespace in the following sections:
      • NRF Service KPIs
        • Registration Service Success Ratio (2xx) %
        • Subscription Service Success Ratio (2xx) %
        • Discover Service Success Ratio (2xx) %
        • AccessToken Service Success Ratio (2xx) %
        • SLF Query Success Ratio (2xx) %
        • Current KeyId Health
        • NF AccessToken Failures
        • NRF Outgoing Response
      • Global Subscription Limit Level
        • Active Subscriptions
        • Subscription Limit level
      • Georedundancy KPIs
        • Total NFs switch over
        • Total Subscriptions switch over
• Updated the expression of the Congestion Level Bucket KPI in the Ingress Gateway Pod Protection Using Rate Limiting and Egress Gateway Pod Protection Using Rate Limiting feature related KPI sections.
• Added the Congestion Level KPI in the Ingress Gateway Pod Protection Using Rate Limiting and Egress Gateway Pod Protection Using Rate Limiting feature related KPI sections.
• Added the Congestion Level and Congestion Level Bucket KPIs in the Ingress Gateway Pod Protection Using Rate Limiting and Egress Gateway Pod Protection Using Rate Limiting sections.
• Removed the following content from the Ingress Gateway Pod Protection Using Rate Limiting section as errorCodeProfiles can be configured using the {apiRoot}/nrf/nf-common-component/v1/igw/errorcodeprofiles API.

  "Configure the ingressgateway.errorCodeProfiles in Helm. Perform a Helm upgrade. This ingressgateway.errorCodeProfiles value will be used when request is rejected at Ingress Gateway."

• Documentation Enhancements:
  • Updated the Cache Data microservice description in the NRF Architecture section.
  • Enhanced the feature description in the NRF Forwarding section.
  • Enhanced the feature description in the Support for Configurable Port and Routing Parameter Selection section.
  • Added a note in Step 4 to explain how NRF selects Kubernetes Secret details for each Key-ID in the NRF Access Token Service Usage Details section.
  • Added a note with a cross-reference for Kubernetes Secret configuration approaches for access token signing (including defaultK8SecretDetails versus Key-ID-specific Secret details) in the Key-ID for Access Token section.
  • Updated the Enhanced NRF Set Based Deployment (NRF Growth) section to describe that an NF’s Primary, Secondary, and Tertiary NRFs (including when resolved via Virtual FQDN) must belong to a single NRF Set, and that NF migration between NRF Sets must follow the documented NFs migration procedure.
  • Updated the Enhanced NRF Set Based Deployment (NRF Growth) section to include the NRF Growth Forwarding behavior.
  • Removed the note "This feature is enabled by default" from the Egress Gateway Pod Throttling section as the default value of the egress-gateway.podLevelMessageThrottling.enabled parameter is changed from true to false.
  • Added the ONRF-EGW-E223 and ONRF-IGW-E223 error response codes in the Egress Gateway Service and Ingress Gateway Service sections respectively.
  • Updated the supported values for the IPv4 over IPv6 and IPv6 over IPv4 in the Table 4-19 in the Dual Stack section.
  • Enhanced the existing note related to IPType configuration in the Dual Stack section.
  • Enhanced the Authorize Requester NF parameter description to clarify its behavior when the Access Token Authorization feature is enabled in the NF Access Token Options section.
  • Modified the default value of the Level Value parameter from 0 to NA for both Ingress Gateway and Egress Gateways in the Congestion Level Configuration and Congestion Level Configuration sections.
  • Enhanced the description and modified the constraints value for the Congestion Level parameter for both Ingress Gateway and Egress Gateways in the Pod Protection By Rate Limiting and Pod Protection By Rate Limiting sections.
  • Enhanced the existing note for the SLF Host Config CNC Console parameter in the SLF Options section.
  • Modified the Presence value for the following parameters in the Routes Configuration section.
    • Predicates parameter from O to M.
    • Failure Req Count ErrorCode Series Id parameter from M to O.
  • Modified the default value of errorCodeProfile from ERR_POD_PROTECTION_RATE_LIMIT to error429 in the Pod Protection By Rate Limiting section.
  • Modified the data type of the Error Codes parameter from String to Array in the Error Code Series section.
  • Added information about the limited capacity operation during the remote set synchronization outage in the OcnrfSyncFailureFromAllNrfsOfAllRemoteSets section.
  • Updated the summary details for the following threshold alerts:
    • OcnrfTotalIngressTrafficRateAboveCriticalThreshold
    • OcnrfTotalEgressTrafficRateAboveCriticalThreshold
    • OcnrfTotalForwardingTrafficRateAboveCriticalThreshold
    • OcnrfTotalSLFRateAboveCriticalThreshold
    • OcnrfAccessTokenRequestsAboveThreshold
    • OcnrfNfUpdateRequestsAboveThreshold
    • OcnrfNfHeartBeatRequestsAboveThreshold
    • OcnrfDiscoveryResponseSizeAboveThreshold
    • OcnrfDiscoveryRequestsForUDRAboveThreshold
    • OcnrfDiscoveryRequestsForUDMAboveThreshold
    • OcnrfDiscoveryRequestsForAMFAboveThreshold
    • OcnrfDiscoveryRequestsForSMFAboveThreshold
    • OcnrfRegisteredNfCountAboveThreshold
    • OcnrfTotalSubscriptionsAboveThreshold
  • Added the method dimension for the oc_ingressgateway_http_requests_total metric in the Ingress Gateway Metrics section.
  • Added the SubscriberIdType dimension in the NRF Metrics section.
  • Removed the ClientCertIdentity dimension from the dimension description table in the NRF Metrics section as it is not used in NRF.
  • Removed the SubscriptionIdType dimension from the NRF Metrics section as it is no longer used.
  • Removed the ClientCertIdentity dimension from the following metrics in the Ingress Gateway Metrics section as it is not used in NRF.
    • oc_ingressgateway_http_requests_total
    • oc_ingressgateway_http_responses_total
    • oc_ingressgateway_http_responses_total(4xx)
    • oc_ingressgateway_http_responses_total(5xx)
  • Replaced the SubscriptionIdType dimension with SubscriberIdType for the ocnrf_SLF_tx_requests_total and ocnrf_SLF_rx_responses_total metrics in the NRF SLF Metrics section.
  • Added a note to the following metrics in the Ingress Gateway Metrics and Egress Gateway Metrics sections to indicate that certain flags should be set to true to include the dimensions.
    • oc_ingressgateway_http_requests_total
    • oc_ingressgateway_http_responses_total
    • oc_ingressgateway_jetty_request_stat_metrics_total
    • oc_ingressgateway_jetty_response_stat_metrics_total
    • oc_ingressgateway_incoming_connections
    • oc_ingressgateway_outgoing_connections
    • oc_ingressgateway_incoming_tls_connections
    • oc_ingressgateway_incoming_ip_type
    • oc_ingressgateway_outgoing_ip_type
    • oc_egressgateway_outgoing_tls_connections
    • oc_egressgateway_http_requests_total
    • oc_egressgateway_connection_failure_total
    • oc_egressgateway_outgoing_connections
    • oc_egressgateway_incoming_connections
    • oc_egressgateway_jetty_request_stat_metrics_total
    • oc_egressgateway_jetty_response_stat_metrics_total
    • oc_egressgateway_incoming_ip_type
    • oc_egressgateway_outgoing_ip_type