This meta-issue collects ongoing work to keep on overview on the many work items.
Please add your comment and detailed discussions below in the thread.
This first thread-entry is updated to reflect the current state of the ongoing work.

Latest changes

• v1.5.2 release
• v1.4.16 release
• v1.3.17 release
• RBAC (partial)
• Audit Events

Ongoing Work

• EventLoop
  • [REVIEW] Integrate libwebsockets library #5683 Merge libwebsockets library for the EventLoop (HTTP/MQTT/Websocket)
  • Implement WebSocket based on libwebsockets
  • Switch MQTT support based on libwebsockets
  • Implement async DNS resolution to make EventLoop fully non-blocking
• Role-based Access Control #6521
  • Build upon [WIP]feat: OPC UA Role Permissions #6149
• feat(server): improve alarms and conditions part 1 #6718 Alarms and Conditions rework
  • Remove the experimental warning

PR Housekeeping

• Nodeset resolver Tool (for generating custom tailored namespace-zero nodesets) #4647 NodeSet Compiler
  • Whitelist node selection for the Nodeset Compiler
    • Backwards chaining to include all dependencies
    • Use this to create the ReducedNodeSet2.xml from a whitelist
  • Next step: Move to the tools folder, integrate with the nodeset compiler later
• Fix amalgamation build without selected architecture #7767
• Fix event filter modification in the client #7666

Major open issues:

• [Review] fix(eventloop): Fix deadlock with event loop mutex #7084
• Loading DI nodeset fails on 1.5 #7774
• UA_Server_loadNodeset() fails when custom datatype depends on another custom datatype not yet loaded #7784

Feature Wishlist

• Make the PubSub representation in the object compatible with UAExpert
• Nodeset-compiler should generate method stubs nodeset-compiler should generate function stubs for method calls #3199
  • Open PR NodesetCompiler: Generate callback stubs for methods #7252
• Partially resolved: PubSub option for maximum string length
  • If the length is fixed we need to fill up with zero-bytes
  • Partially resolved: Works for strings/bytestrings but not if wrapped inside a structure
  • @andreasebner Add warnings to remove as "major issue"
  • PR now created feat(pubsub) warn when structure fields with nested strings use RawData encoding #7871
  • New PR for raw PubSub decoding [XXX]
• Implementation of FileType and friends #2383
• mDNS discovery for Clients #1988
• Unit tests for OperationLimits #1413
• Proposal: Use Ninja for CI #3301 Use Ninja
• Create optional event fields on the fly, if user tries to set them #2736
• Feature Request: Parse Configuration from File #1921 Client JSON configuration parsing
  • [Review] feat(plugin): add parsing from json client configuration and tests #7705
• [Review] Permit CreateMonitoredItem service for hidden nodes/statuscode BadNodeIdUnknown #4603 MonitoredItems for Nodes that are sometimes hidden
  • Make the behavior configurable in the server config
  • @mlang-de is interested in the feature
• PubSub-Publishing of Events
  • PR [WIP] feat(pubsub): Publishing of Events #4220 was abandonded, needs a final push
• PubSub Encryption support for OpenSSL #5601, right now only mbedTLS
• Diagnostics and auditing
  • Diagnostics Object in the Server
  • Diagnostic/Auditing metadata returned for the services
    • Used by the IOLink CS (optional)
    • Used by the Global Discovery Server
  • PubSub diagnostics
• Reduce memory consumption and copying for chunking
  • Currently, enough space for the entire message is allocated
  • Use mmap / MMU to “virtually assemble” the message
• Decryption of chunks (and decoding of messages) in worker threads
• Overhaul the Nodeset Compiler
  • The bsd file format for the DataType definitions is obsolete
    • DataType definitions directly in nodeset xml
    • SIOME does no longer support the old bsd file format
• Storing Historical Timeseries on disk
  • Default plugin keeps timeseries in RAM
  • Can fork / extend the backend for historical data by BasysKom
• Event History in the Backend
• Client-Server Security with TPM
  • Store keys in the TPM
  • Also do encryption inside the TPM?
  • SecurityPolicy API design allows keys to remain in the TPM
  • Requires specific implementation of
    • SecurityPolicies
    • GDS functionality allows certificates and CSR to be generated on the device
• Support Structures with arrays that are multidimensional
  • Latest changes in the spec
  • Quite fundamental
• Parsing of XML configuration per the standard annex
  • Translate to our JSON-based configuration
  • The standard only defines the security configuration per XML
• Driver API for backend system integration
  • First example: "File" driver
  • Set up a repository of device drivers mapping into OPC UA objects
• ActivateSession: Delayed answer with a unified time delay
  • Rate limiting, exponential backoff
• OPC UA over HTTP and REST/OpenAPI support
  • Architecture design for HTTP in discussion