diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1f0a371..5b9946e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,25 @@
+## 3.2.7 (May 18, 2021)
+- What’s fixed?
+  - DHCP: Resolved an issue where the DHCP option sip-directory-agent was deployed with incorrect syntax
+  - DHCP: Cannot add DHCP option 102 or 121 using API or portal
+  - DHCP: addressed a tag related migration issue between 3.1 and 3.2
+  - DHCP: NS1 DDNS use zone handle instead of domain when zone is in a view
+  - DHCP: Duplicate key value violates unique constraint scope_id_address_key
+  - DHCP: Fixed an issue that prevented clearing rebind/renew timers 
+  - DHCP: Fixed an issue where lease-time and related renew/rebind timers are not correctly deployed to DHCP
+  - DHCP: Fixed an issue were prefixes would occasionally disappear requiring a page refresh
+  - DHCP: Fixed an issue where editing a remote zone resulted in an invalid body error
+  - DHCP: Resolved several issues related to creation of DHCP reservations
+  - DHCP: Resolved an issue wthere HA DHCP could lose synchronization
+  - DNS: Creating a record with up metadata attached to data feed causes a 500 error
+  - DNS: Cannot add RFC 2317 zone through portal
+  - DNS: Validation errors on zone object when editing views and networks
+  - Monitoring: Allow private IPs by default in DDI platform
+  - Portal: Blank screen on scope group option tab
+  - System: Fixed OpenSSL vulnerability CVE-2021-3450
+  - System: Improved logging from ns1_backup and ns1_restore scripts
+  - System: DIST container closes its connection pool and doesn’t recover
+
 ## 3.3.3 (May 4, 2021)
 - New Features
   - DHCP: Update utilization stats now include gateway/broadcast IP addresses
diff --git a/docker-compose/README.md b/docker-compose/README.md
index 4e666de..047660c 100644
--- a/docker-compose/README.md
+++ b/docker-compose/README.md
@@ -40,7 +40,7 @@ Use to start all container images on a single host: `data`, `dns`, `core`, `xfr`
 #### For example:
 
 ```shell
-$sudo TAG=3.3.3 POP_ID=mypop SERVER_ID=myserver docker-compose -p myproject -f docker-compose.yml up -d
+$sudo TAG=3.2.7 POP_ID=mypop SERVER_ID=myserver docker-compose -p myproject -f docker-compose.yml up -d
 ```
 
 ---
@@ -78,14 +78,14 @@ Used to start control services on a single host: `data`, `core`, `xfr`.
 #### For example, starting a control host with primary data:
 
 ```shell
-$sudo TAG=3.3.3 POP_ID=dc1 SERVER_ID=host1 PRIMARY=true DATA_CONTAINER_NAME=data1 DATA_PEERS=data2 DATA_HOSTS=data1,data2 \
+$sudo TAG=3.2.7 POP_ID=dc1 SERVER_ID=host1 PRIMARY=true DATA_CONTAINER_NAME=data1 DATA_PEERS=data2 DATA_HOSTS=data1,data2 \
 docker-compose -p myproject -f control-compose.yml up -d
 ```
 
 #### For example, starting a control host with replica data:
 
 ```shell
-$sudo TAG=3.3.3 POP_ID=dc1 SERVER_ID=host2 DATA_CONTAINER_NAME=data2 DATA_PEERS=data1 DATA_HOSTS=data1,data2 \
+$sudo TAG=3.2.7 POP_ID=dc1 SERVER_ID=host2 DATA_CONTAINER_NAME=data2 DATA_PEERS=data1 DATA_HOSTS=data1,data2 \
 docker-compose -p myproject -f control-compose.yml up -d
 ```
 
@@ -109,5 +109,5 @@ Used to start edge services on a single host: `dns`, `dhcp` and `dist` (distribu
 #### For example:
 
 ```shell
-$sudo TAG=3.3.3 POP_ID=dc2 SERVER_ID=host3 docker-compose -p myproject -f edge-compose.yml up -d
+$sudo TAG=3.2.7 POP_ID=dc2 SERVER_ID=host3 docker-compose -p myproject -f edge-compose.yml up -d
 ```
diff --git a/docker-compose/control-compose.yml b/docker-compose/control-compose.yml
index 82265c7..2eedc7b 100644
--- a/docker-compose/control-compose.yml
+++ b/docker-compose/control-compose.yml
@@ -3,7 +3,7 @@ version: '3.4'
 services:
   data:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${DATA_CONTAINER_NAME:-data}
-    image: ns1inc/privatedns_data:${TAG:-3.3.3}
+    image: ns1inc/privatedns_data:${TAG:-3.2.7}
     logging:
       driver: "json-file"
       options:
@@ -61,7 +61,7 @@ services:
       --server_id            ${SERVER_ID:-myserver}
   core:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${CORE_CONTAINER_NAME:-core}
-    image: ns1inc/privatedns_core:${TAG:-3.3.3}
+    image: ns1inc/privatedns_core:${TAG:-3.2.7}
     logging:
       driver: "json-file"
       options:
@@ -100,7 +100,7 @@ services:
       --nameservers          ${NAMESERVERS:-ns1.mycompany.net}
   xfr:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${XFR_CONTAINER_NAME:-xfr}
-    image: ns1inc/privatedns_xfr:${TAG:-3.3.3}
+    image: ns1inc/privatedns_xfr:${TAG:-3.2.7}
     logging:
       driver: "json-file"
       options:
diff --git a/docker-compose/docker-compose.yml b/docker-compose/docker-compose.yml
index 2946afc..67ae936 100644
--- a/docker-compose/docker-compose.yml
+++ b/docker-compose/docker-compose.yml
@@ -3,7 +3,7 @@ version: '3.4'
 services:
   data:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${DATA_CONTAINER_NAME:-data}
-    image: ns1inc/privatedns_data:${TAG:-3.3.3}
+    image: ns1inc/privatedns_data:${TAG:-3.2.7}
     logging:
       driver: "json-file"
       options:
@@ -49,7 +49,7 @@ services:
       --server_id            ${SERVER_ID:-myserver}
   core:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${CORE_CONTAINER_NAME:-core}
-    image: ns1inc/privatedns_core:${TAG:-3.3.3}
+    image: ns1inc/privatedns_core:${TAG:-3.2.7}
     logging:
       driver: "json-file"
       options:
@@ -88,7 +88,7 @@ services:
       --nameservers          ${NAMESERVERS:-ns1.mycompany.net}
   xfr:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${XFR_CONTAINER_NAME:-xfr}
-    image: ns1inc/privatedns_xfr:${TAG:-3.3.3}
+    image: ns1inc/privatedns_xfr:${TAG:-3.2.7}
     logging:
       driver: "json-file"
       options:
@@ -120,7 +120,7 @@ services:
       --core_host           ${CORE_HOSTS:-core}
   dns:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${DNS_CONTAINER_NAME:-dns}
-    image: ns1inc/privatedns_dns:${TAG:-3.3.3}
+    image: ns1inc/privatedns_dns:${TAG:-3.2.7}
     logging:
       driver: "json-file"
       options:
@@ -154,7 +154,7 @@ services:
       --num_trex_procs      2
   dhcp:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${DHCP_CONTAINER_NAME:-dhcp}
-    image: ns1inc/privatedns_dhcp:${TAG:-3.3.3}
+    image: ns1inc/privatedns_dhcp:${TAG:-3.2.7}
     logging:
       driver: "json-file"
       options:
@@ -194,7 +194,7 @@ services:
       --service_def_id      2
   monitor:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${MONITOR_CONTAINER_NAME:-monitor}
-    image: ns1inc/privatedns_monitor:${TAG:-3.3.3}
+    image: ns1inc/privatedns_monitor:${TAG:-3.2.7}
     logging:
       driver: "json-file"
       options:
diff --git a/docker-compose/edge-compose.yml b/docker-compose/edge-compose.yml
index afc055a..62a88dd 100644
--- a/docker-compose/edge-compose.yml
+++ b/docker-compose/edge-compose.yml
@@ -3,7 +3,7 @@ version: '3.4'
 services:
   dns:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${DNS_CONTAINER_NAME:-dns}
-    image: ns1inc/privatedns_dns:${TAG:-3.3.3}
+    image: ns1inc/privatedns_dns:${TAG:-3.2.7}
     logging:
       driver: "json-file"
       options:
@@ -37,7 +37,7 @@ services:
       --num_trex_procs      4
   dhcp:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${DHCP_CONTAINER_NAME:-dhcp}
-    image: ns1inc/privatedns_dhcp:${TAG:-3.3.3}
+    image: ns1inc/privatedns_dhcp:${TAG:-3.2.7}
     logging:
       driver: "json-file"
       options:
@@ -77,7 +77,7 @@ services:
       --service_def_id      2
   dist:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${DIST_CONTAINER_NAME:-dist}
-    image: ns1inc/privatedns_dist:${TAG:-3.3.3}
+    image: ns1inc/privatedns_dist:${TAG:-3.2.7}
     logging:
       driver: "json-file"
       options:
@@ -112,7 +112,7 @@ services:
       --core_host            ${CORE_HOSTS}
   monitor:
     hostname: ${POP_ID:-mypop}-${SERVER_ID:-myserver}-${MONITOR_CONTAINER_NAME:-monitor}
-    image: ns1inc/privatedns_monitor:${TAG:-3.3.3}
+    image: ns1inc/privatedns_monitor:${TAG:-3.2.7}
     logging:
       driver: "json-file"
       options:
diff --git a/helm/README.md b/helm/README.md
index 934b9e7..7ce2bcc 100644
--- a/helm/README.md
+++ b/helm/README.md
@@ -71,7 +71,7 @@ By default, services are disabled. See the examples folder for examples of value
 | `data.name` | Name to be used for the various data resources. | `data` |
 | `data.replicas` | Number of data replicas to run. This should be 1, 3, or 5. | `3` |
 | `data.image.name` | The name of the image to use for the data container. | `ns1inc/privatedns_data` |
-| `data.image.tag` | The tag of the image to use for the data container. | `3.3.3` |
+| `data.image.tag` | The tag of the image to use for the data container. | `3.2.7` |
 | `data.image.pullPolicy` | The pull policy for the image. | `IfNotPresent` |
 | `data.livenessProbe.initialDelaySeconds` | How long to wait for the data pods to come up before beginning health checks. | `120` |
 | `data.livenessProbe.failureThreshold` | How many failed healthchecks are tolerated prior to restarting the pod. | `5` |
@@ -91,7 +91,7 @@ By default, services are disabled. See the examples folder for examples of value
 | `core.name` | Name to be used for the various core resources. | `core` |
 | `core.replicas` | Number of core replicas to run. | `3` |
 | `core.image.name` | The name of the image to use for the core container. | `ns1inc/privatedns_core` |
-| `core.image.tag` | The tag of the image to use for the core container. | `3.3.3` |
+| `core.image.tag` | The tag of the image to use for the core container. | `3.2.7` |
 | `core.image.pullPolicy` | The pull policy for the image. | `IfNotPresent` |
 | `core.livenessProbe.initialDelaySeconds` | How long to wait for the core pods to come up before beginning health checks. | `30` |
 | `core.livenessProbe.failureThreshold` | How many failed healthchecks are tolerated prior to restarting the pod. | `3` |
@@ -113,7 +113,7 @@ By default, services are disabled. See the examples folder for examples of value
 | Parameter | Description | Example |
 | --------- | ----------- | ------- |
 | `dns.image.name` | The name of the image to use for the DNS container. | `ns1inc/privatedns_dns` |
-| `dns.image.tag` | The tag of the image to use for the DNS container. | `3.3.3` |
+| `dns.image.tag` | The tag of the image to use for the DNS container. | `3.2.7` |
 | `dns.image.pullPolicy` | The pull policy for the image. | `IfNotPresent` |
 | `dns.pops[#].name` | Name to be used for the various DNS resources. | `dns` |
 | `dns.pops[#].replicas` | Number of DNS replicas to run at this PoP. | `3` |
@@ -135,7 +135,7 @@ By default, services are disabled. See the examples folder for examples of value
 | Parameter | Description | Example |
 | --------- | ----------- | ------- |
 | `dist.image.name` | The name of the image to use for the dist container. | `ns1inc/privatedns_dist` |
-| `dist.image.tag` | The tag of the image to use for the dist container. | `3.3.3` |
+| `dist.image.tag` | The tag of the image to use for the dist container. | `3.2.7` |
 | `dist.image.pullPolicy` | The pull policy for the image. | `IfNotPresent` |
 | `dist.pops[#].name` | Name to be used for the various dist resources. | `dist` |
 | `dist.pops[#].replicas` | Number of dist replicas to run at this PoP. | `3` |
@@ -157,7 +157,7 @@ By default, services are disabled. See the examples folder for examples of value
 | Parameter | Description | Example |
 | --------- | ----------- | ------- |
 | `dhcp.image.name` | The name of the image to use for the DHCP container. | `ns1inc/privatedns_dhcp` |
-| `dhcp.image.tag` | The tag of the image to use for the DHCP container. | `3.3.3` |
+| `dhcp.image.tag` | The tag of the image to use for the DHCP container. | `3.2.7` |
 | `dhcp.image.pullPolicy` | The pull policy for the image. | `IfNotPresent` |
 | `dhcp.pops[#].name` | Name to be used for the various DHCP resources. | `dhcp` |
 | `dhcp.pops[#].replicas` | Number of DHCP replicas to run at this PoP. | `3` |
@@ -183,7 +183,7 @@ By default, services are disabled. See the examples folder for examples of value
 | `xfr.name` | Name to be used for the various XFR resources. | `xfr` |
 | `xfr.replicas` | Number of XFR replicas to run. | `1` |
 | `xfr.image.name` | The name of the image to use for the XFR container. | `ns1inc/privatedns_xfr` |
-| `xfr.image.tag` | The tag of the image to use for the XFR container. | `3.3.3` |
+| `xfr.image.tag` | The tag of the image to use for the XFR container. | `3.2.7` |
 | `xfr.image.pullPolicy` | The pull policy for the image. | `IfNotPresent` |
 | `xfr.livenessProbe.initialDelaySeconds` | How long to wait for the XFR pods to come up before beginning health checks. | `30` |
 | `xfr.livenessProbe.failureThreshold` | How many failed healthchecks are tolerated prior to restarting the pod. | `3` |
diff --git a/helm/examples/basic.yml b/helm/examples/basic.yml
index 2f645c6..dc1a674 100644
--- a/helm/examples/basic.yml
+++ b/helm/examples/basic.yml
@@ -22,7 +22,7 @@ data:
   replicas: 1
   image:
     name: ns1inc/privatedns_data
-    tag: 3.3.3
+    tag: 3.2.7
     pullPolicy: IfNotPresent
   livenessProbe:
     initialDelaySeconds: 120
@@ -43,7 +43,7 @@ core:
   replicas: 1
   image:
     name: ns1inc/privatedns_core
-    tag: 3.3.3
+    tag: 3.2.7
     pullPolicy: IfNotPresent
   livenessProbe:
     initialDelaySeconds: 30
@@ -65,7 +65,7 @@ core:
 dns:
   image:
     name: ns1inc/privatedns_dns
-    tag: 3.3.3
+    tag: 3.2.7
     pullPolicy: IfNotPresent
   pops:
   - name: dns
@@ -87,7 +87,7 @@ dns:
 dhcp:
   image:
     name: ns1inc/privatedns_dhcp
-    tag: 3.3.3
+    tag: 3.2.7
     pullPolicy: IfNotPresent
   pops:
   - name: dhcp
@@ -112,7 +112,7 @@ xfr:
   replicas: 1
   image:
     name: ns1inc/privatedns_xfr
-    tag: 3.3.3
+    tag: 3.2.7
     pullPolicy: IfNotPresent
   livenessProbe:
     initialDelaySeconds: 30
diff --git a/helm/examples/multi-node.yml b/helm/examples/multi-node.yml
index e9d48c7..46e1460 100644
--- a/helm/examples/multi-node.yml
+++ b/helm/examples/multi-node.yml
@@ -5,7 +5,7 @@ data:
   replicas: 3
   image:
     name: ns1inc/privatedns_data
-    tag: 3.3.3
+    tag: 3.2.7
     pullPolicy: IfNotPresent
   livenessProbe:
     initialDelaySeconds: 300
@@ -38,7 +38,7 @@ core:
   replicas: 2
   image:
     name: ns1inc/privatedns_core
-    tag: 3.3.3
+    tag: 3.2.7
     pullPolicy: IfNotPresent
   livenessProbe:
     initialDelaySeconds: 30
@@ -82,7 +82,7 @@ core:
 dns:
   image:
     name: ns1inc/privatedns_dns
-    tag: 3.3.3
+    tag: 3.2.7
     pullPolicy: IfNotPresent
   pops:
   - name: dns
@@ -130,7 +130,7 @@ dns:
 dist:
   image:
     name: ns1inc/privatedns_dist
-    tag: 3.3.3
+    tag: 3.2.7
     pullPolicy: IfNotPresent
   pops:
   - name: dist
@@ -160,7 +160,7 @@ dist:
 dhcp:
   image:
     name: ns1inc/privatedns_dhcp
-    tag: 3.3.3
+    tag: 3.2.7
     pullPolicy: IfNotPresent
   pops:
   - name: dhcp
@@ -210,7 +210,7 @@ xfr:
   replicas: 2
   image:
     name: ns1inc/privatedns_xfr
-    tag: 3.3.3
+    tag: 3.2.7
     pullPolicy: IfNotPresent
   livenessProbe:
     initialDelaySeconds: 30
diff --git a/terraform/modules/core/variables.tf b/terraform/modules/core/variables.tf
index 41b4890..5451c60 100644
--- a/terraform/modules/core/variables.tf
+++ b/terraform/modules/core/variables.tf
@@ -1,5 +1,5 @@
 variable "docker_image_tag" {
-  default     = "3.3.3"
+  default     = "3.2.7"
   description = "The image tag of the Docker image. Defaults to the latest GA version number."
 }
 
diff --git a/terraform/modules/data/variables.tf b/terraform/modules/data/variables.tf
index 6a9d684..01ae238 100644
--- a/terraform/modules/data/variables.tf
+++ b/terraform/modules/data/variables.tf
@@ -1,5 +1,5 @@
 variable "docker_image_tag" {
-  default     = "3.3.3"
+  default     = "3.2.7"
   description = "The image tag of the Docker image. Defaults to the latest GA version number."
 }
 
diff --git a/terraform/modules/dhcp/variables.tf b/terraform/modules/dhcp/variables.tf
index df520c4..d04c10e 100644
--- a/terraform/modules/dhcp/variables.tf
+++ b/terraform/modules/dhcp/variables.tf
@@ -1,5 +1,5 @@
 variable "docker_image_tag" {
-  default     = "3.3.3"
+  default     = "3.2.7"
   description = "The image tag of the Docker image. Defaults to the latest GA version number."
 }
 
diff --git a/terraform/modules/dist/variables.tf b/terraform/modules/dist/variables.tf
index bcdbe08..7108fd2 100644
--- a/terraform/modules/dist/variables.tf
+++ b/terraform/modules/dist/variables.tf
@@ -1,5 +1,5 @@
 variable "docker_image_tag" {
-  default     = "3.3.3"
+  default     = "3.2.7"
   description = "The image tag of the Docker image. Defaults to the latest GA version number."
 }
 
diff --git a/terraform/modules/dns/variables.tf b/terraform/modules/dns/variables.tf
index 87a56f3..350b8b1 100644
--- a/terraform/modules/dns/variables.tf
+++ b/terraform/modules/dns/variables.tf
@@ -1,5 +1,5 @@
 variable "docker_image_tag" {
-  default     = "3.3.3"
+  default     = "3.2.7"
   description = "The image tag of the Docker image. Defaults to the latest GA version number."
 }
 
diff --git a/terraform/modules/monitor/variables.tf b/terraform/modules/monitor/variables.tf
index c4f374c..423b650 100644
--- a/terraform/modules/monitor/variables.tf
+++ b/terraform/modules/monitor/variables.tf
@@ -1,5 +1,5 @@
 variable "docker_image_tag" {
-  default     = "3.3.3"
+  default     = "3.2.7"
   description = "The image tag of the Docker image. Defaults to the latest GA version number."
 }
 
diff --git a/terraform/modules/xfr/variables.tf b/terraform/modules/xfr/variables.tf
index 5672f27..16ad726 100644
--- a/terraform/modules/xfr/variables.tf
+++ b/terraform/modules/xfr/variables.tf
@@ -1,5 +1,5 @@
 variable "docker_image_tag" {
-  default     = "3.3.3"
+  default     = "3.2.7"
   description = "The image tag of the Docker image. Defaults to the latest GA version number."
 }