diff --git a/.gitignore b/.gitignore
index 3857200..f4241c4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/kronosnet-1.25.tar.xz
+SOURCES/kronosnet-1.28.tar.xz
diff --git a/.kronosnet.metadata b/.kronosnet.metadata
index 125adfa..ad02221 100644
--- a/.kronosnet.metadata
+++ b/.kronosnet.metadata
@@ -1 +1 @@
-69bbd8549a0a4d69971b30945daed0dbfd147c20 SOURCES/kronosnet-1.25.tar.xz
+2d8bac472188907dc04c0f1f9457bf4ae8d9f8d8 SOURCES/kronosnet-1.28.tar.xz
diff --git a/SPECS/kronosnet.spec b/SPECS/kronosnet.spec
index b31daed..6c99ad9 100644
--- a/SPECS/kronosnet.spec
+++ b/SPECS/kronosnet.spec
@@ -36,8 +36,8 @@
 
 Name: kronosnet
 Summary: Multipoint-to-Multipoint VPN daemon
-Version: 1.25
-Release: 2%{?dist}
+Version: 1.28
+Release: 1%{?dist}
 License: GPLv2+ and LGPLv2+
 URL: https://kronosnet.org
 Source0: https://kronosnet.org/releases/%{name}-%{version}.tar.xz
@@ -252,7 +252,7 @@ Requires: pkgconfig
 %description -n libknet1-devel
  The whole kronosnet core is implemented in this library.
  Please refer to the not-yet-existing documentation for further
- information. 
+ information.
 
 %files -n libknet1-devel
 %license COPYING.* COPYRIGHT
@@ -442,6 +442,16 @@ Requires: libnozzle1%{_isa} = %{version}-%{release}
 %endif
 
 %changelog
+* Mon Oct  9 2023 Christine Caulfield <ccaulfie@redhat.com> - 1.28-1
+  Rebase to 1.28 for startup and performance fixes
+   threads: add config check to match min value with pong timeouts
+   rx: allow links to be active faster
+   links: fix ping interval and pong timeout value checking
+   crypto: Try crypt and decrypt on crypto_init
+   tx: Remove expensive memsets
+   log: Add a TRACE log level
+  Resolves: #RHEL-11787
+
 * Wed Jan 18 2023 Christine Caulfield <ccaulfie@redhat.com> - 1.25-1
   Rebase to 1.25 for PMTUd fixes
   Resolves: rhbz#2161168