Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Dense Vector "Neural" Search through DenseVectorField fieldType and Knn Query Parser  ← Explain
  • Admin UI support for SQL Querying

Security

  • Certificate Authentication Plugin: Supports loading the certificate subject via a user principal into the AuthorizationContext and enables end-to-end use of client certificates for Authentication and Authorization
  • Improved security when using PKI Authentication plugin
  • Upgrade to ZK 3.7 allows for TLS communication between Solr and Zookeeper
  • All request handlers support security permissions for access
  • Ability to disable admin UI through a system property
  • The property blockUnknown in the BasicAuthPlugin and the JWTAuthPlugin now defaults to true instead of false.
  • The allow-list defining allowed URLs for the shards parameter is not in the shardHandler configuration anymore. It is defined by the allowUrls top-level property of the solr.xml file. For more information, see Format of solr.allowUrls documentation
  • Solr now runs with the Java security manager enabled by default. Hadoop users may need to disable this
  • Solr embedded zookeeper only binds to localhost by default. See Upgrade Notes for how to obtain old behavior.
  • Dependency updates - A lot of dependency updates make Solr overall much more secure.

...

  • Solr is now built and released independently from Lucene (separate Apache projects)
  • Build system switched to Gradle, no longer uses Ant + Ivy
  • Docker image creation is now a part of the Apache Solr Github repo
  • Docker image documentation is now a part of the reference guide
  • Official Docker image upgraded to use JDK17 (by Eclipse Temurin) and ability to create functionally identical local image

Other

...

  • Contrib modules are now just "modules". You can easily enable module(s) through environment variable SOLR_MODULES
  • Features lifted out as separate modules are: HDFS, Hadoop-Auth, Scripting and JWT-Auth
  • The "dist" folder in the release is gone. Module jars are now inside respective module's lib/ folder
  • Metrics handler only depends on SolrJ instead of core and has its own log4j2.xml now so it doesn’t share Solr’s logging config
  • SolrJ class CloudSolrClient now supports HTTP2. It has a new Builder. See CloudLegacySolrClient (deprecated) for the 8.x version of this class
  • Jetty Request log is now enabled by default, i.e. logging every request

...