Version History

Kraken Outputs now supports RTSP streaming for PUSH (send to client) and PULL (Kraken as an RTSP server) modes for compatibility with Video Management Systems (VMS) such as Milestone and Genetec.

• RTSP Server Service

• Configuring RTSP Outputs

Kraken now supports both IPV4 and IPV6 networking and streaming services.

• IPv4 and IPv6 Support

• Configuring Network Settings

Kraken now supports MJPEG video inputs over HTTP and HTTPS for low-latency streaming of camera or AI workflows.

• Configuring Inputs

• Input Settings

Kraken now supports discovery and use of NDI sources on a local network for encoding.

• Configuring Input Parameters

• Input Settings

HTTP Live Streaming (HLS) is a supported output format for bypass streams in MPEG2TS format and is compatible with h.264 encoded streams. An HLS preview player is included within Kraken for admin troubleshooting.

• Configuring Output Parameters

• HLS Live Preview

• Output Settings

wolfSSL allows Kraken appliances to support FIPS cryptographic requirements. The use of wolfSSL is available in version 3.8, but is disabled by default. To manually enable the wolfEngine within Kraken, please contact your Haivision account representative, or our technical support team at tickets@haivision.com.

• N/A

Corrective action to resolve identified security issues affecting certification. Including:

• Account Lifecycle — Core features include:

  • Locking accounts upon multiple failed login attempts

  • Disabling accounts after login inactivity

  • Allowing Administrators to disable accounts from Active or Locked account states, as well as enable accounts from Locked or Disabled account states

  • Prompting users to change password when nearing expiration

  • Allowing administrative adjustment of account settings via configuration file

  • Logging account events including creation, modification, disabling, enabling, and removal

• User Sessions — Core features include:

  • Enforcing security flags on cookies

  • Limiting the number of concurrent login sessions

  • Enforcing logout upon idle timeout

  • Clearing client session data upon logout

  • Allowing administrative adjustment of session settings via configuration file

  • Logging user session events

• Password Lifecycle — Core features include:

  • Enforcing password complexity for length and character types

  • Enforcing a minimum number of character changes between successive passwords

  • Preventing reuse of old passwords over a configurable period

  • Enforcing a minimum and maximum password lifespan

  • Allowing administrative adjustment of password settings via configuration file

  • Logging password creation and modification events

• Password Requirements

Kraken now has Reverse-Path filtering (a Linux Kernel feature, defined in RFC 3704, designed to ensure that packets that are not routable are dropped). Reverse path filtering drops packets with source addresses that should not have been able to be received on the interface they were received on. Two options are available: Strict or Loose.

• Managing Security Policies

Kraken has multiple physical interfaces that are intended to provide redundancy and bandwidth, not network segregation. Because of this, the system will listen on all available physical interfaces regardless of IP address and respond to web requests. This new feature allows configuration of the web server to listen on a specified IP address and port.

• Enabling and Disabling Services

Kraken Bypass Streams can now be licensed and counted separately from Kraken Transcode Streams. This follows introduction of stream-based licensing in Kraken 3.6 which adjusted how the Kraken runtime stream capacity related to license limits for any stream type (Bypass or Transcode).

• Status Settings

The legacy v1.0 REST API is now deprecated.

• Kraken API v2.0 Integrator's Guide

Kraken 3.7 has retired usage of Apache and 32-bit libraries in favor of NodeJS-based microservices.

• N/A

Kraken 3.7 addresses known vulnerabilities discovered through security scans during development.

• N/A

Kraken 3.6.1 provides controls to adjust the Program clock Reference (PCR) in outgoing Kraken Transport Streams.

• Transcoder Settings

Audio codec choice is no longer restrained by video codec selection. MPEG1 Layer II may now be selected for all video codecs.

• Transcoder Settings

Kraken 3.6.1 enforces password length and complexity requirements when changing user passwords

• Password Requirements

Kraken 3.6.1 logs Local User login, logout, and timeout events.

• N/A

Kraken 3.6.1 addresses known package vulnerabilities with applicable updates.

• N/A

Kraken v3.6 supports more granular licensing based on stream capacity for Kraken virtual instances on AWS, Azure, and other customer hardware. This enables flexibility for the Kraken Small Form Factor hardware, Virtual Machines, and Cloud offerings to match desired stream throughput

• N/A

Kraken v3.6 enables support for the latest series of NVIDIA devices (for example, updated Cuda version to 11.2 and Nvidia drivers version to 460.32).

• N/A

A BYOL Kraken offering is now available for the AWS and AWS GovCloud marketplaces.

• Kraken AWS Quick Start Guide

Administrators can now control the running state of certain Kraken services.

• Enabling and Disabling Services

The Web Interface now provides options to specify which TLS versions are accepted from the HTTPS client.

• Managing Security Policies

Kraken can now be paired with a Haivision EMS (Element Management System) to discover, manage and monitor all of your Haivision devices from one place.

• N/A

Kraken now supports and encodes video from NDI sources.

• Configuring Input Parameters

Kraken now supports ingest of GigE Vision input over Ethernet for routing into the supported encoders within the transcoding pipeline. GigE Vision streams can be encoded using H.264/H.265 transport streams and distributed as output from Kraken as transport streams over UDP or SRT. GigE Vision encoding and output is supported across any device that conforms to the GigE Vision 2.1 standard.

• Configuring Input Parameters

The Kraken Web Interface now displays a warning indication in the title bar when changes to Streams, Inputs, Transcoders, Outputs, or Metadata have been applied but not saved to a preset. The indication is displayed when a user signs out or in to Kraken.

• Saving and Loading Presets

This new Haivision appliance offers a small form factor transcoder where ruggedization is not required.

• Kraken Edge Quick Start Guide

The Kraken Web Interface can now display corporate branding. This "white labeling" allows customers to import their corporate logo for display in the following areas: banner graphic, Sign-in page graphics, browser favicon and title, as well as to switch between dark or light color scheme.

• Re-Branding the User Interface

The Kraken Web Interface now provides SRT statistics and graphs, and allows selection of the network interface for SRT inputs and outputs. New SRT statistics and graphs provide a diagnostic tool for troubleshooting network packet loss issues, and help users to make informed decisions on configuring SRT latency and bandwidth overhead.

• Viewing Kraken Statistics

Kraken may now be used to capture and encode SDI input using an SFP (Small Form-factor Pluggable) SDI-to-IP gateway adapter. Phase 2 of this feature provides support for multiple SDI inputs, interlaced video, audio and ancillary data (KLV, CC).

• N/A

Kraken 3.3 supports RTMP input and output in Bypass mode for transmuxing and stream routing with RTMP.

• N/A

Kraken is now available in the Azure marketplace. Streams from a variety of sources may be sent to the cloud-based Kraken for transcoding and routing to other locations.

• N/A

Kraken may now be used to capture and encode SDI input using an SFP (Small Form-factor Pluggable) SDI to IP gateway device. The initial implementation supports Embrionix SDI-SFP devices that support SMPTE 2100 IP encapsulation.

• Kraken OVA Deployment Guide

Kraken now provides certificate management from the Web Interface. Administrators can now use the Web Interface to generate self-signed certificates and certificate signing requests (CSRs), as well as importing certificates or private keys.

• Managing Certificates

Kraken 3.2 provides an improved user experience for software upgrades. This includes a more accurate progress indicator, additional status feedback in the Web Interface, and efficiency improvements.

• N/A

The transport protocol can now be set for RTSP inputs. Users can select from UDP, TCP, UDP Multicast and HTTP.

• Configuring Inputs

Ability to bypass the transcoder for transmuxing and stream routing for live streams.

• N/A

Tags 106 - 141 added to the full 0601 UAS KLV Tag Filtering set on the Transcoders page.

• N/A

Users can now shut down Kraken from the Administration>Status page.

• N/A

Newly added virtual network interfaces are displayed on the Network page after rebooting.

• N/A

Ability to add, edit and remove user accounts within each user role: Administrator, Operator and Viewer

• Role-based Authorization

Public offering of REST API v2.0 and JSON Web format. API v2.0 provides all functionality from the Kraken Web GUI and is also harmonized with other Haivision appliances. Note that REST API v1.0 is still available and unchanged with this release.

• N/A

(On qualified hardware) Offloads encode processing from the Kraken transcode pipeline to NVIDIA GPUs. Assumes Kraken is running as a VM in an ESXi 6.5+ environment.

• Configuring Transcoder Parameters

• Kraken OVA Deployment Guide

Architecture Transition to CentOS 7 64-bit.

• N/A

Filter out undesired or unused MISB 0601 UAS KLV metadata tags to reduce the outbound metadata bitrate. This allows more bandwidth to be allocated to video on limited capacity network links

• Filtering UAS KLV Metadata Tags

Configure the transcoder to frame-decimate KLV (Key Length Value) metadata. This can reduce the rate at which metadata is transmitted from Kraken to allow better control of the outbound metadata bitrate.

• Configuring Transcoder Parameters

A new feedback component features stream event reporting within the Web Interface with the option to download the stream event log. This feature is intended to aid in diagnostics and debugging sessions.

• Monitoring Stream Health

A continual commitment to security. Updates to the kernel and other related mitigations to ever-evolving vulnerabilities.

Integration of the latest SRT 1.3.1 libraries. Expanded configurability of SRT to include MTU, and TTL. SRT Passphrases is now protected in logs and Kraken configuration files.

• N/A

Enhanced debugging logs per transcode session. Alpha version of v2 API available upon request to Haivision Technical Support.

• N/A

Added MPEG4 (Part 2) Encoding capability. Improved and enhanced the interoperability with RTSP camera sources. Updated underlying QSV libraries.

• N/A

Continual commitment to security. Updates to the kernel and other related mitigations to ever-evolving vulnerabilities.

• N/A