Skip to content


You can find the source of this version on GitHub at cloudfoundry/cf-release. It was created based on the commit 82fb38a8.

Release Notes

Contents - Notices - Job Spec Changes - CVEs - Compatible Releases and Stemcells - Subcomponent Updates


  • Preparatory manifest changes: Both CF 253 and Diego 1.8.1 include changes to the manifest generation scripts that introduce the following line in a number of places:

    consumes: { consul: nil }

This will allow the consul job to start providing a bosh link without having that link be consumed by the various consul jobs in the deployment. CF 254 will introduce a version of consul that requires these changes to the manifest, so please ensure that you deploy CF 253 and Diego 1.8.1 first before moving on to CF 254.

Job Spec Changes

  • cf-networking-release: If you are deploying cf-networking-release (which is still experimental), there will be some necessary changes to your manifest.
  • statsd-injector: To successfully deploy statsd-injector (part of loggregator), you’ll need to generate the following properties:
    • loggregator.tls.statsd_injector.cert
    • loggregator.tls.statsd_injector.key

You can generate this keypair using this script. You’ll need to provide the certificate and key for the CA that was used to sign the other loggregator certs. The certificate for that CA can also be found in Deployers should have the private key stored securely. - The included version of Loggregator restricts ciphers to use only the following 4 ciphers. This is a breaking change for some operators and a configurable property for opting into more cipher suites was introduced in Loggregator 85 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384


  • None

Subcomponent Updates

Compatible Releases and Stemcells


You can reference this release in your deployment manifest from the releases section:

- name: "cf"
  version: "253"
  url: ""
  sha1: "8e0ea926929bdb1ff16a366e2154d017c637a137"

Or upload it to your director with the upload-release command:

bosh upload-release --sha1 8e0ea926929bdb1ff16a366e2154d017c637a137 \