XO 6.10: paste into consoles, 3x faster backups
Hello everyone, 🎃
XO 6.10 finally brings one of our most requested features: you can now paste text into host and VM consoles, in XO 6 and XO Lite. Backups get faster, with full mirror backups up to 1.4 GB/s on our test bench, and live restore boots a VM straight from its backup. XO 6 takes over more of backup management, and the load balancer can now pin VMs to hosts.
Please plan this update: XOA and XO Proxy move to Node.js 22.23.4, which fixes a high-severity vulnerability. Our funding round, the new Vates Alliance Network platform and our November events, KubeCon included, are below. Enjoy!
🛡️ Security
⚠️ XOA and XO Proxy now run Node.js 22.23.4, which fixes CVE-2026-111497, a high-severity flaw in the Brotli decoder. Before updating, check that your XOA can reach nodejs.org (XOA > Support). If you run XO from sources, update Node.js yourself.
💾 Backup Pro
Full mirror backups go from 450 MB/s to 1.4 GB/s on our test bench, and incremental backups can skip NBD encryption on an isolated backup network.
⏪ Live restore Pro Preview
Last month's live mount becomes live restore: a VM boots straight from its backup, without restoring its disks first. Its writes go to a local cache, so the backup stays untouched. Keep it away from critical production workloads for now.
🥝 Console clipboard Free
Paste text from your computer into host and VM consoles, in XO 6 and XO Lite, typed in your keyboard layout (AZERTY and QWERTY for now). Handy for long passwords when there's no SSH.
🛰️ XO 6 Free
Create, edit and bulk-edit backup repositories, list backup jobs and logs, and migrate VMs within or across pools. Changes now show up in real time, and you can export disks in VMDK.
🔭 XO Lite Free
A host side panel, host actions (detach, disable, enable, restart the toolstack) and PIFs you can forget from the network view.
⚖️ Load balancer Enterprise
VM-to-host affinity: tag VMs and hosts to keep those VMs on those hosts. Tagged VMs can now also move for performance, as long as their rules hold.
🐦 VMware to Vates (V2V) Free
Still on older VMware hosts? V2V reads disks from ESXi 6.x again, tested end to end on ESXi 6.0.
📡 REST API Free
Real-time updates over subscriptions (no more polling), plugin management, SR probe endpoints and priorities for SDN traffic rules.
☸️ DevOps tools Free
Our Cluster API provider went through five v1.1.0 release candidates (IPAM pool addresses, extra XO tags, Helm options), the Go SDK shipped v1.20.0 and v1.21.0, and the Cloud Controller Manager now handles VM shutdowns better.
🆕 And more
NetBox 4.7 support, a multipathing fix that keeps local SRs connected, the estimated VM power metric documented for OpenMetrics, and 12 more languages fully translated. Full details in the changelog, and you can watch our XO 6.10 overview video.
Vates VMS Editions: Free Pro Enterprise
Add-ons: XOSTOR Proxy Air gap
Tech Preview or beta: Preview Beta
The Vates Alliance Network is live
Members, the Solutions list, Solution Briefs and Solution Guides, in one place. Before you pick your servers, storage or backup tools, check what has been tested with Vates VMS, and on which versions.
€30M raised, still open source
Our first funding round, with IRIS and Bpifrance, after ten years of self-funded growth. The co-founders keep the majority, and XCP-ng and Xen Orchestra keep their licenses. We're hiring!
XCP-ng 8.3 LTS: three October updates
Live storage migration up to 2.5x faster, storage fixes and new Windows guest tools, then five vulnerabilities fixed in Xen and tapdisk. A host reboot is required. Check your Windows VMs and AlmaLinux templates: some defaults changed.
🔹A new home for the Xen Orchestra project
xen-orchestra.org has a new design, built around the open source project: five ways to run XO, the latest releases, and where the community lives.
🔹XCP-ng and Xen Orchestra on RISC-V
After Xen on real boards last month, Bruno ran the full stack in QEMU: XO starts VMs and opens consoles, and a Debian guest runs Docker and K3s. A prototype, and an honest progress report.
🔹Reading Intel CPU temperatures from dom0
Under Xen, dom0 can't read them on its own. Teddy explains how XCP-ng now does it with xenpm get-core-temp, without touching the security model.
Here's where to catch us next:
🔹KubeCon + CloudNativeCon, Salt Lake City (Nov 9-12)
Booth 264: a live demo of XCP-ng 9 and Xen Orchestra on an ARM server, and a first look at VMK, Vates Managed Kubernetes. 🇺🇸
🔹Capitole du Libre, Toulouse (Nov 14)
At 11:30, Bruno Verachten gives « 100 % open source, vraiment ? Un strace de la promesse, de la VM au silicium » (in French). 🇫🇷
🔹Tech Show Paris (Nov 18-19)
Stand B34, Paris Expo Porte de Versailles. Comparing VMware alternatives or planning a migration? Come and talk to the team. 🇫🇷
🔹Open Source Experience, Paris (Dec 10)
At 9:30, Cyrille Gandon and Patrice Ferlet show how to go from VMs to Kubernetes on a sovereign platform built on XCP-ng and Xen Orchestra. 🇫🇷