| ChangeLog : |
| =========== |
| |
| 2022/04/29 : 2.4.16 |
| - BUG/MINOR: tools: fix url2sa return value with IPv4 |
| - BUG/MINOR: server/ssl: free the SNI sample expression |
| - CI: github actions: switch to LibreSSL-3.5.1 |
| - BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf |
| - BUG/MEDIUM: trace: avoid race condition when retrieving session from conn->owner |
| - MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1 |
| - DOC: config: Explictly add supported MQTT versions |
| - BUG/MINOR: tools: url2sa reads too far when no port nor path |
| - BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing |
| - BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing |
| - BUG/MEDIUM: stream-int: do not rely on the connection error once established |
| - MEDIUM: mux-h2: slightly relax timeout management rules |
| - BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts |
| - DOC: reflect H2 timeout changes |
| - BUG/MINOR: samples: add missing context names for sample fetch functions |
| - BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads |
| - BUG/MAJOR: mux_pt: always report the connection error to the conn_stream |
| - CI: github actions: update OpenSSL to 3.0.2 |
| - BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests |
| - BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message |
| - BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet |
| - BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message |
| - BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached |
| - BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples |
| - BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid |
| - BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set() |
| - EXAMPLES: opentracing: refined shell scripts for testing filter performance |
| - DOC: opentracing: corrected comments in function descriptions |
| - CLEANUP: opentracing: removed unused function flt_ot_var_unset() |
| - CLEANUP: opentracing: removed unused function flt_ot_var_get() |
| - CLEANUP: opentracing: added flt_ot_smp_init() function |
| - CLEANUP: opentracing: added variable to store variable length |
| - DEBUG: opentracing: show return values of all functions in the debug output |
| - CI: Update to actions/checkout@v3 |
| - CI: Update to actions/cache@v3 |
| - CI: cirrus: switch to FreeBSD-13.0 |
| - BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent |
| - BUG/MINOR: cache: do not display expired entries in "show cache" |
| - BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak |
| - BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side |
| - BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive |
| - BUG/MEDIUM: mux-h1: Don't request more room on partial trailers |
| - BUILD: sched: workaround crazy and dangerous warning in Clang 14 |
| - BUILD: compiler: use a more portable set of asm(".weak") statements |
| - BUG/MEDIUM: stream: do not abort connection setup too early |
| - BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added |
| - BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags |
| - SCRIPTS: announce-release: update the doc's URL |
| - DOC: lua: update a few doc URLs |
| - SCRIPTS: announce-release: add shortened links to pending issues |
| - BUG/MINOR: cache: Disable cache if applet creation fails |
| - BUG/MAJOR: connection: Never remove connection from idle lists outside the lock |
| - DOC: remove my name from the config doc |
| - BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments |
| - MINOR: task: add a new task_instant_wakeup() function |
| - MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks |
| - REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc |
| - BUILD: compiler: properly distinguish weak and global symbols |
| - BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit() |
| - BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all() |
| - CLEANUP: acl: Remove unused variable when releasing an acl expression |
| - BUILD: fd: remove unused variable totlen in fd_write_frag_line() |
| - BUILD: sockpair: do not set unused flag |
| - BUILD: proto_uxst: do not set unused flag |
| - BUILD: opentracing: Fix OT build due to misuse of var_clear() |
| |
| 2022/03/14 : 2.4.15 |
| - CI: github actions: add the output of $CC -dM -E- |
| - CI: github actions: add OpenTracing builds |
| - CI: github actions: use cache for OpenTracing |
| - CI: github actions: use cache for SSL libs |
| - BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks() |
| - REGTESTS: fix the race conditions in normalize_uri.vtc |
| - REGTESTS: fix the race conditions in secure_memcmp.vtc |
| - BUG/MINOR: pool: always align pool_heads to 64 bytes |
| - BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed |
| - MINOR: pools: add a new global option "no-memory-trimming" |
| - BUILD: pools: fix backport of no-memory-trimming on non-linux OS |
| - BUG/MINOR: add missing modes in proxy_mode_str() |
| - BUG/MINOR: cli: shows correct mode in "show sess" |
| - BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request |
| - BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request |
| - BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request |
| - BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request |
| - DEBUG: cache: Update underlying buffer when loading HTX message in cache applet |
| - BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing |
| - DEBUG: stream: Add the missing descriptions for stream trace events |
| - DEBUG: stream: Fix stream trace message to print response buffer state |
| - BUG/MAJOR: mux-pt: Always destroy the backend connection on detach |
| - BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd() |
| - BUG/MINOR: stream: make the call_rate only count the no-progress calls |
| - DOC: Fix usage/examples of deprecated ACLs |
| - BUILD: tree-wide: mark a few numeric constants as explicitly long long |
| |
| 2022/02/25 : 2.4.14 |
| - MINOR: sock: move the unused socket cleaning code into its own function |
| - BUG/MEDIUM: mworker: close unused transferred FDs on load failure |
| - BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload |
| - BUG/MINOR: sink: Use the right field in appctx context in release callback |
| - BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names |
| - BUG/MEDIUM: fd: always align fdtab[] to 64 bytes |
| - BUG/MAJOR: compiler: relax alignment constraints on certain structures |
| - CI: ssl: enable parallel builds for OpenSSL on Linux |
| - CI: ssl: do not needlessly build the OpenSSL docs |
| - CI: ssl: keep the old method for ancient OpenSSL versions |
| - BUILD: fix compilation for OpenSSL-3.0.0-alpha17 |
| - BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2 |
| - CI: github actions: add OpenSSL-3.0.0 builds |
| - CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0 |
| - CI: github actions: relax OpenSSL-3.0.0 version comparision |
| - CI: github: switch to OpenSSL 3.0.0 |
| - CI: github actions: update OpenSSL to 3.0.1 |
| - BUG/MINOR: mailers: negotiate SMTP, not ESMTP |
| - BUG/MINOR: tools: url2sa reads ipv4 too far |
| - BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message |
| - BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer |
| - BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer |
| - BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy() |
| - REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks |
| - CI: github: enable pool debugging by default |
| - BUG/MEDIUM: stream: Abort processing if response buffer allocation fails |
| |
| 2022/02/16 : 2.4.13 |
| - BUG/MEDIUM: connection: properly leave stopping list on error |
| - BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer |
| - BUILD/MINOR: fix solaris build with clang. |
| - BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl |
| - MEDIUM: cli: yield between each pipelined command |
| - MINOR: channel: add new function co_getdelim() to support multiple delimiters |
| - BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands |
| - BUG/MEDIUM: cli: Never wait for more data on client shutdown |
| - BUG/MEDIUM: mcli: do not try to parse empty buffers |
| - BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them |
| - MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change |
| - DEBUG: cli: add a new "debug dev fd" expert command |
| - BUILD: debug/cli: condition test of O_ASYNC to its existence |
| - DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY |
| - BUG/MEDIUM: mworker: don't lose the stats socket on failed reload |
| - BUG/MINOR: pools: always flush pools about to be destroyed |
| - DEBUG: pools: add extra sanity checks when picking objects from a local cache |
| - DEBUG: pools: let's add reverse mapping from cache heads to thread and pool |
| - DEBUG: pools: replace the link pointer with the caller's address on pool_free() |
| - BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks |
| - BUG/MINOR: mworker: does not erase the pidfile upon reload |
| - MINOR: listener: replace the listener's spinlock with an rwlock |
| - BUG/MEDIUM: listener: read-lock the listener during accept() |
| - BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies |
| - BUG/MAJOR: spoe: properly detach all agents when releasing the applet |
| - REGTESTS: peers: leave a bit more time to peers to synchronize |
| - BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change |
| - BUG/MINOR: mux-h2: update the session's idle delay before creating the stream |
| |
| 2022/01/11 : 2.4.12 |
| - BUG/MEDIUM: mworker: don't use _getsocks in wait mode |
| - BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data |
| |
| 2022/01/07 : 2.4.11 |
| - BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch |
| - BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode |
| - BUILD: cli: clear a maybe-unused warning on some older compilers |
| - BUILD: ssl: unbreak the build with newer libressl |
| - DOC: fix misspelled keyword "resolve_retries" in resolvers |
| - BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server |
| - REGTESTS: ssl: fix ssl_default_server.vtc |
| - MINOR: proxy: add option idle-close-on-response |
| - BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning |
| - BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message |
| - BUG/MINOR: mux-h1: Fix splicing for messages with unknown length |
| - MINOR: compat: detect support for dl_iterate_phdr() |
| - MINOR: debug: add ability to dump loaded shared libraries |
| - MINOR: debug: add support for -dL to dump library names at boot |
| - BUG/MINOR: ssl: free the fields in srv->ssl_ctx |
| - BUG/MEDIUM: ssl: free the ckch instance linked to a server |
| - BUILD/MINOR: cpuset FreeBSD 14 build fix. |
| - BUILD/MINOR: tools: solaris build fix on dladdr. |
| - BUG/MINOR: cli: fix _getsocks with musl libc |
| - BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry |
| |
| 2021/12/23 : 2.4.10 |
| - BUILD/MINOR: server: fix compilation without SSL |
| - BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time |
| - BUG/MINOR: server: Don't rely on last default-server to init server SSL context |
| - BUG/MEDIUM: resolvers: Detach query item on response error |
| - BUG/MAJOR: segfault using multiple log forward sections. |
| - MINOR: mux-h1: Improve H1 traces by adding info about http parsers |
| - BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH |
| - CI: Github Actions: temporarily disable BoringSSL builds |
| - MINOR: cli: "show version" displays the current process version |
| - BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types |
| - IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode |
| - BUG/MINOR: cli/server: Don't crash when a server is added with a custom id |
| - DOC: spoe: Clarify use of the event directive in spoe-message section |
| - DOC: config: Specify %Ta is only available in HTTP mode |
| - DOC: config: retry-on list is space-delimited |
| - BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode |
| - MINOR: pools: work around possibly slow malloc_trim() during gc |
| - BUG/MINOR: backend: do not set sni on connection reuse |
| - BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose |
| |
| 2021/11/24 : 2.4.9 |
| - MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close |
| - MINOR: mux-h2: perform a full cycle shutdown+drain on close |
| - MINOR: mux-h2: add trace on extended connect usage |
| - BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support |
| - BUG/MINOR: resolvers: fix sent messages were counted twice |
| - BUG/MINOR: resolvers: throw log message if trash not large enough for query |
| - BUG/MINOR: cache: properly ignore unparsable max-age in quotes |
| - DOC: config: Fix typo in ssl_fc_unique_id description |
| - BUG/MINOR: http-ana: Apply stop to the current section for http-response rules |
| - Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back" |
| - DOC: lua: Be explicit with the Reply object limits |
| - MINOR: mux-h1: Slightly Improve H1 traces |
| - BUG/MEDIUM: conn-stream: Don't reset CS flags on close |
| - BUG/MINOR: mworker: doesn't launch the program postparser |
| - BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value |
| - BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent |
| - BUG/MINOR: stick-table/cli: Check for invalid ipv6 key |
| - BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C |
| - BUILD: makefile: simplify detection of libatomic |
| - BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3 |
| - BUG/MINOR: ssl: free correctly the sni in the backend SSL cache |
| - CLEANUP: ssl: fix wrong #else commentary |
| - BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found |
| - BUG/MEDIUM: mux-h2: always process a pending shut read |
| - BUG/MEDIUM: cache/cli: make "show cache" thread-safe |
| - BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found |
| - BUG/MINOR: shctx: do not look for available blocks when the first one is enough |
| - MINOR: shctx: add a few BUG_ON() for consistency checks |
| - BUG/MINOR: ssl: make SSL counters atomic |
| - MINOR: stream/mux: implement websocket stream flag |
| - MINOR: connection: implement function to update ALPN |
| - MINOR: connection: add alternative mux_ops param for conn_install_mux_be |
| - MEDIUM: server/backend: implement websocket protocol selection |
| - MINOR: server: add ws keyword |
| - MINOR: promex: backend aggregated server check status |
| - BUG/MINOR: cache: Fix loop on cache entries in "show cache" |
| |
| 2021/11/03 : 2.4.8 |
| - CLEANUP: server: always include the storage for SSL settings |
| - CLEANUP: sample: rename sample_conv_var2smp() to *_sint |
| - CLEANUP: sample: uninline sample_conv_var2smp_str() |
| - MINOR: sample: provide a generic var-to-sample conversion function |
| - BUG/MEDIUM: sample: properly verify that variables cast to sample |
| - BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames |
| - DOC: configuration: add clarification on escaping in keyword arguments |
| - MINOR: initcall: Rename __GLOBL and __GLOBL1. |
| - BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back |
| - BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data |
| - BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD |
| - BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error |
| - Revert "CLEANUP: server: always include the storage for SSL settings" |
| - BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors |
| - BUG/MAJOR: dns: tcp session can remain attached to a list after a free |
| - BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier |
| - MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero |
| - BUG/MEDIUM: resolver: make sure to always use the correct hostname length |
| - BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records |
| - MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero |
| - BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix |
| - BUG/MEDIUM: resolvers: use correct storage for the target address |
| - MINOR: resolvers: merge address and target into a union "data" |
| - BUG/MAJOR: resolvers: add other missing references during resolution removal |
| - BUILD: resolvers: avoid a possible warning on null-deref |
| - BUG/MEDIUM: resolvers: always check a valid item in query_list |
| - BUG/MAJOR: buf: fix varint API post- vs pre- increment |
| - BUG/MINOR: task: do not set TASK_F_USR1 for no reason |
| - BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame |
| - BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems |
| - MINOR: memprof: report the delta between alloc and free on realloc() |
| - MINOR: memprof: add one pointer size to the size of allocations |
| - BUILD: fix compilation on NetBSD |
| - BUG/MINOR: backend: fix improper insert in avail tree for always reuse |
| - BUILD: atomic: fix build on mac/arm64 |
| - BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed |
| - BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released |
| - CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records() |
| - CLEANUP: always initialize the answer_list |
| - CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters |
| - CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT |
| - MEDIUM: resolvers: use a kill list to preserve the list consistency |
| - MEDIUM: resolvers: remove the last occurrences of the "safe" argument |
| - BUG/MEDIUM: resolvers: Don't recursively perform requester unlink |
| - BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions |
| - MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX |
| - DOC: halog: Move the `-qry` parameter into the correct section in help text |
| - MINOR: halog: Rename -qry to -query |
| - CLEANUP: halog: Use consistent indentation in help() |
| - BUG/MINOR: halog: Add missing newlines in die() messages |
| - MINOR: halog: Add support for extracting captures using -hdr |
| - BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration |
| - BUG/MINOR: http: Authorization value can have multiple spaces after the scheme |
| - BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data |
| - BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags |
| - BUG/MINOR: sample: fix backend direction flags consecutive to last fix |
| - DOC: config: Fix alphabetical order of fc_* samples |
| - BUILD/MINOR: cpuset freebsd build fix |
| - MINOR: stream: Improve dump of bogus streams |
| - DOC/peers: some grammar fixes for peers 2.1 spec |
| - SCRIPTS: git-show-backports: re-enable file-based filtering |
| |
| 2021/10/04 : 2.4.7 |
| - BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule |
| |
| 2021/10/04 : 2.4.6 |
| - BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release |
| |
| 2021/10/01 : 2.4.5 |
| - MINOR: lua: Add a flag on lua context to know the yield capability at run time |
| - BUG/MINOR: lua: Yield in channel functions only if lua context can yield |
| - BUG/MINOR: lua: Don't yield in channel.append() and channel.set() |
| - BUG/MINOR: stream: Don't release a stream if FLT_END is still registered |
| - BUG/MEDIUM: http-ana: Reset channels analysers when returning an error |
| - BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set |
| - BUG/MINOR: filters: Set right FLT_END analyser depending on channel |
| - BUG/MINOR: systemd: ExecStartPre must use -Ws |
| - BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload |
| - MINOR: htx: Skip headers with no value when adding a header list to a message |
| - CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload |
| - BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached |
| - BUG/MINOR: compat: make sure __WORDSIZE is always defined |
| - CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools() |
| - MINOR: pools: automatically disable malloc_trim() with external allocators |
| - MINOR: pools: use mallinfo2() when available instead of mallinfo() |
| - BUG/MAJOR: mux-h1: Don't eval input data if an error was reported |
| - BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check |
| - DOC: management: certificate files must be sanitized before injection |
| - BUG/MINOR: connection: prevent null deref on mux cleanup task allocation |
| - BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc |
| - BUG/MINOR: cli/payload: do not search for args inside payload |
| - BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set |
| - BUILD: tools: get the absolute path of the current binary on NetBSD. |
| - MINOR: tools: add FreeBSD support to get_exec_path() |
| - MINOR: proc: setting the process to produce a core dump on FreeBSD. |
| - BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING |
| - BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef |
| - BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef |
| - IMPORT: slz: silence a build warning with -Wundef |
| - BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef |
| - BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER |
| - BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL |
| - BUILD: tools: properly guard __GLIBC__ with defined() |
| - BUG/MINOR: vars: improve accuracy of the rules used to check expression validity |
| - MINOR: sample: add missing ARGC_ entries |
| - BUG/MINOR: vars: properly set the argument parsing context in the expression |
| - BUG/MINOR: vars: truncate the variable name in error reports about scope. |
| - BUG/MINOR: vars: do not talk about global section in CLI errors for set-var |
| - BUILD: fix dragonfly build again on __read_mostly |
| - BUILD: compiler: fixed a missing test on defined(__GNUC__) |
| - BUILD: halog: fix a -Wundef warning on non-glibc systems |
| - BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl |
| - BUG/MINOR: server: allow 'enable health' only if check configured |
| - BUG/MEDIUM: leastconn: fix rare possibility of divide by zero |
| - BUG/MINOR: h1-htx: Fix a typo when request parser is reset |
| - BUG/MINOR: http-ana: increment internal_errors counter on response error |
| - MINOR: server: implement a refcount for dynamic servers |
| - MINOR: global: define MODE_STOPPING |
| - BUG/MINOR: server: do not use refcount in free_server in stopping mode |
| - MINOR: server: return the next srv instance on free_server |
| - BUG/MINOR: stats: use refcount to protect dynamic server on dump |
| - BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer |
| - BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data |
| - BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM |
| - MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv() |
| - MINOR: htx: Add an HTX flag to know when a message is fragmented |
| - MINOR: htx: Add a function to know if the free space wraps |
| - BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary |
| - MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf |
| - BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers" |
| - DOC: peers: fix doc "enable" statement on "peers" sections |
| - MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options |
| - BUG/MEDIUM: lua: fix wakeup condition from sleep() |
| - BUG/MAJOR: lua: use task_wakeup() to properly run a task once |
| - MINOR: arg: Be able to forbid unresolved args when building an argument list |
| - BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing |
| - BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input |
| - MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue() |
| |
| 2021/09/07 : 2.4.4 |
| - BUG/MEDIUM: h2: match absolute-path not path-absolute for :path |
| - REGTESTS: http_upgrade: fix incorrect expectation on TCP->H1->H2 |
| - REGTESTS: abortonclose: after retries, 503 is expected, not close |
| - MINOR: hlua: take the global Lua lock inside a global function |
| - BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions |
| - BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec} |
| - BUG/MINOR: base64: base64urldec() ignores padding in output size check |
| - MINOR: compiler: implement an ONLY_ONCE() macro |
| - BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords |
| - BUG/MINOR: time: fix idle time computation for long sleeps |
| - MINOR: time: add report_idle() to report process-wide idle time |
| - BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long |
| - BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time |
| - BUG/MINOR: tools: Fix loop condition in dump_text() |
| - CLEANUP: Add missing include guard to signal.h |
| - BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser |
| - DOC: configuration: remove wrong tcp-request examples in tcp-response |
| - BUG/MINOR: config: reject configs using HTTP with bufsize >= 256 MB |
| - CLEANUP: htx: remove comments about "must be < 256 MB" |
| - BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer |
| - Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive" |
| |
| 2021/08/17 : 2.4.3 |
| - BUILD: http_htx: fix ci compilation error with isdigit for Windows |
| - MINOR: mux_h2: define config to disable h2 websocket support |
| - BUG/MINOR: ssl: Default-server configuration ignored by server |
| - BUILD: add detection of missing important CFLAGS |
| - BUILD: lua: silence a build warning with TCC |
| - BUG/MEDIUM: mworker: do not register an exit handler if exit is expected |
| - BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs |
| - BUILD/MINOR: memprof fix macOs build. |
| - BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request |
| - BUG/MINOR: stats: Add missing agent stats on servers |
| - BUG/MINOR: check: fix the condition to validate a port-less server |
| - BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree |
| - BUG/MINOR: systemd: must check the configuration using -Ws |
| - BUG/MINOR: mux-h1: Obey dontlognull option for empty requests |
| - BUG/MINOR: mux-h2: Obey dontlognull option during the preface |
| - BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called |
| - BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames |
| - BUG/MINOR: connection: Add missing error labels to conn_err_code_str |
| - BUG/MEDIUM: connection: close a rare race between idle conn close and takeover |
| - BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before |
| - BUG/MINOR: select: fix excess number of dead/skip reported |
| - BUG/MINOR: poll: fix abnormally high skip_fd counter |
| - BUG/MINOR: pollers: always program an update for migrated FDs |
| - BUG/MINOR: fd: protect fd state harder against a concurrent takeover |
| - DOC: internals: document the FD takeover process |
| - BUILD: opentracing: fixed build when using pkg-config utility |
| - BUG/MINOR: server: remove srv from px list on CLI 'add server' error |
| - BUG/MINOR: server: update last_change on maint->ready transitions too |
| - MINOR: server: unmark deprecated on enable health/agent cli |
| - ADMIN: dyncookie: implement a simple dynamic cookie calculator |
| - MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure |
| - BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released |
| - BUG/MINOR: buffer: fix buffer_dump() formatting |
| - BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer |
| - DOC: Improve the lua documentation |
| - DOC: config: Fix 'http-response send-spoe-group' documentation |
| - BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued |
| - BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check |
| - CLEANUP: assorted typo fixes in the code and comments |
| - DOC/MINOR: fix typo in management document |
| - MINOR: http: add a new function http_validate_scheme() to validate a scheme |
| - BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax |
| - BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it |
| - BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header |
| - BUG/MEDIUM: h2: give :authority precedence over Host |
| - REGTESTS: add a test to prevent h2 desync attacks |
| |
| 2021/07/07 : 2.4.2 |
| - BUG/MINOR: server-state: load SRV resolution only if params match the config |
| - BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled |
| - BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI |
| - MINOR: resolvers: Clean server in a dedicated function when removing a SRV item |
| - MINOR: resolvers: Remove server from named_servers tree when removing a SRV item |
| - BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status |
| - BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task() |
| - BUG/MINOR: server/cli: Fix locking in function processing "set server" command |
| - BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header |
| - BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check |
| - REGTESTS: fix maxconn update with agent-check |
| - MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules |
| - DOC: config: Add missing actions in "tcp-request session" documentation |
| - CLEANUP: dns: Remove a forgotten debug message |
| - BUG/MINOR: resolvers: Always attach server on matching record on resolution |
| - BUG/MINOR: resolvers: Reset server IP when no ip is found in the response |
| - MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response() |
| - BUG/MINOR: checks: return correct error code for srv_parse_agent_check |
| - BUILD: Makefile: fix linkage for Haiku. |
| - BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules |
| - BUG/MINOR: mqtt: Fix parser for string with more than 127 characters |
| - BUG/MINOR: mqtt: Support empty client ID in CONNECT message |
| - BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution |
| - DOC: config: use CREATE USER for mysql-check |
| - BUG/MINOR: stick-table: fix several printf sign errors dumping tables |
| - BUG/MINOR: peers: fix data_type bit computation more than 32 data_types |
| - DOC: stick-table: add missing documentation about gpt0 stored type |
| - BUG/MEDIUM: sock: make sure to never miss early connection failures |
| - BUG/MINOR: cli: fix server name output in "show fd" |
| - Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules" |
| - MINOR: http: implement http_get_scheme |
| - MEDIUM: http: implement scheme-based normalization |
| - MEDIUM: h1-htx: apply scheme-based normalization on h1 requests |
| - MEDIUM: h2: apply scheme-based normalization on h2 requests |
| - REGTESTS: add http scheme-based normalization test |
| |
| 2021/06/17 : 2.4.1 |
| - BUG/MEDIUM: ebtree: Invalid read when looking for dup entry |
| - BUG/MAJOR: server: prevent deadlock when using 'set maxconn server' |
| - BUILD/MINOR: opentracing: fixed build when using clang |
| - BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter |
| - BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response |
| - Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers" |
| - BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry |
| - BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts |
| - MINOR: http-ana: Perform L7 retries because of status codes in response analyser |
| - MINOR: cfgparse: Fail when encountering extra arguments in macro |
| - DOC: intro: Fix typo in starter guide |
| - BUG/MINOR: server: Missing calloc return value check in srv_parse_source |
| - BUG/MINOR: peers: Missing calloc return value check in peers_register_table |
| - BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine |
| - BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture |
| - BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare |
| - BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy |
| - BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response |
| - BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule |
| - BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo |
| - BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list |
| - BUG/MINOR: http: Missing calloc return value check while parsing redirect rule |
| - BUG/MINOR: http: Missing calloc return value check in make_arg_list |
| - BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree |
| - CLEANUP: http-ana: Remove useless if statement about L7 retries |
| - BUG/MINOR: vars: Be sure to have a session to get checks variables |
| - DOC/MINOR: move uuid in the configuration to the right alphabetical order |
| - BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry |
| - MINOR: errors: allow empty va_args for diag variadic macro |
| - DOC: use the req.ssl_sni in examples |
| - BUILD: make tune.ssl.keylog available again |
| - BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future |
| - Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode" |
| - BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode |
| - BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block |
| - BUG/MEDIUM: compression: Properly get the next block to iterate on payload |
| - BUG/MEDIUM: compression: Add a flag to know the filter is still processing data |
| - BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush() |
| - BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location |
| - MINOR: pools: do not maintain the lock during pool_flush() |
| - MINOR: pools: call malloc_trim() under thread isolation |
| - MEDIUM: pools: use a single pool_gc() function for locked and lockless |
| - BUG/MAJOR: pools: fix possible race with free() in the lockless variant |
| - CLEANUP: pools: remove now unused seq and pool_free_list |
| - BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded |
| - BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default |
| - CLEANUP: l7-retries: do not test the buffer before calling b_alloc() |
| - BUG/MINOR: resolvers: answser item list was randomly purged or errors |
| - MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item |
| - MEDIUM: resolvers: add a ref between servers and srv request or used SRV record |
| - BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs |
| - DOC: lua: Add a warning about buffers modification in HTTP |
| - BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id |
| - BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server' |
| - BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees |
| - BUG/MEDIUM: server: do not forget to generate the dynamic servers ids |
| - BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree |
| - BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node |
| - BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE |
| - BUG/MINOR: ssl: use atomic ops to update global shctx stats |
| - BUG/MINOR: mworker: fix typo in chroot error message |
| - CLEANUP: global: remove unused definition of stopping_task[] |
| - BUG/MAJOR: queue: set SF_ASSIGNED when setting strm->target on dequeue |
| - MINOR: backend: only skip LB when there are actual connections |
| - BUG/MINOR: mux-h1: do not skip the error response on bad requests |
| - BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers |
| - MINOR: connection: add helper conn_append_debug_info() |
| - MINOR: mux-h2/trace: report a few connection-level info during h2_init() |
| - CLEANUP: mux-h2/traces: better align user messages |
| - BUG/MINOR: stats: make "show stat typed desc" work again |
| - MINOR: mux-h2: obey http-ignore-probes during the preface |
| - BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace |
| - BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces |
| |
| 2021/05/14 : 2.4.0 |
| - BUG/MINOR: http_fetch: fix possible uninit sockaddr in fetch_url_ip/port |
| - CLEANUP: cli/activity: Remove double spacing in set profiling command |
| - CI: Build VTest with clang |
| - CI: extend spellchecker whitelist, add "ists" as well |
| - CLEANUP: assorted typo fixes in the code and comments |
| - BUG/MINOR: memprof: properly account for differences for realloc() |
| - MINOR: memprof: also report the method used by each call |
| - MINOR: memprof: also report the totals and delta alloc-free |
| - CLEANUP: pattern: remove the unused and dangerous pat_ref_reload() |
| - BUG/MINOR: http_act: Fix normalizer names in error messages |
| - MINOR: uri_normalizer: Add `fragment-strip` normalizer |
| - MINOR: uri_normalizer: Add `fragment-encode` normalizer |
| - IMPORT: slz: use the generic function for the last bytes of the crc32 |
| - IMPORT: slz: do not produce the crc32_fast table when CRC is natively supported |
| - BUILD/MINOR: opentracing: fixed compilation with filter enabled |
| - BUILD: makefile: add a few popular ARMv8 CPU targets |
| - BUG/MEDIUM: stick_table: fix crash when using tcp smp_fetch_src |
| - REGTESTS: stick-table: add src_conn_rate test |
| - CLEANUP: stick-table: remove a leftover of an old keyword declaration |
| - BUG/MINOR: stats: fix lastchk metric that got accidently lost |
| - EXAMPLES: add a "basic-config-edge" example config |
| - EXAMPLES: add a trivial config for quick testing |
| - DOC: management: Correct example reload command in the document |
| - Revert "CI: Build VTest with clang" |
| - MINOR: activity/cli: optionally support sorting by address on "show profiling" |
| - DEBUG: ssl: export ssl_sock_close() to see its symbol resolved in profiling |
| - BUG/MINOR: lua/vars: prevent get_var() from allocating a new name |
| - DOC: config: Fix configuration example for mqtt |
| - BUG/MAJOR: config: properly initialize cpu_map.thread[] up to MAX_THREADS |
| - BUILD: config: avoid a build warning on numa_detect_topology() without threads |
| - DOC: update min requirements in INSTALL |
| - IMPORT: slz: use inttypes.h instead of stdint.h |
| - BUILD: sample: use strtoll() instead of atoll() |
| - MINOR: version: mention that it's LTS now. |
| |
| 2021/05/10 : 2.4-dev19 |
| - BUG/MINOR: hlua: Don't rely on top of the stack when using Lua buffers |
| - BUG/MEDIUM: cli: prevent memory leak on write errors |
| - BUG/MINOR: ssl/cli: fix a lock leak when no memory available |
| - MINOR: debug: add a new "debug dev sym" command in expert mode |
| - MINOR: pools/debug: slightly relax DEBUG_DONT_SHARE_POOLS |
| - CI: Github Actions: switch to LibreSSL-3.3.3 |
| - MINOR: srv: close all idle connections on shutdown |
| - MINOR: connection: move session_list member in a union |
| - MEDIUM: mux_h1: release idling frontend conns on soft-stop |
| - MEDIUM: connection: close front idling connection on soft-stop |
| - MINOR: tools: add functions to retrieve the address of a symbol |
| - CLEANUP: activity: mark the profiling and task_profiling_mask __read_mostly |
| - MINOR: activity: add a "memory" entry to "profiling" |
| - MINOR: activity: declare the storage for memory usage statistics |
| - MEDIUM: activity: collect memory allocator statistics with USE_MEMORY_PROFILING |
| - MINOR: activity: clean up the show profiling io_handler a little bit |
| - MINOR: activity: make "show profiling" support a few arguments |
| - MINOR: activity: make "show profiling" also dump the memoery usage |
| - MINOR: activity: add the profiling.memory global setting |
| - BUILD: makefile: add new option USE_MEMORY_PROFILING |
| - MINOR: channel: Rely on HTX version if appropriate in channel_may_recv() |
| - BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive |
| - MINOR: conn-stream: Force mux to wait for read events if abortonclose is set |
| - MEDIUM: mux-h1: Don't block reads when waiting for the other side |
| - BUG/MEDIUM: mux-h1: Properly report client close if abortonclose option is set |
| - REGTESTS: Add script to test abortonclose option |
| - MINOR: mux-h1: clean up conditions to enabled and disabled splicing |
| - MINOR: mux-h1: Subscribe for sends if output buffer is not empty in h1_snd_pipe |
| - MINOR: mux-h1: Always subscribe for reads when splicing is disabled |
| - MEDIUM: mux-h1: Wake H1 stream when both sides a synchronized |
| - CLEANUP: mux-h1: rename WAIT_INPUT/WAIT_OUTPUT flags |
| - MINOR: mux-h1: Manage processing blocking flags on the H1 stream |
| - BUG/MINOR: stream: Decrement server current session counter on L7 retry |
| - BUG/MINOR: config: fix uninitialized initial state in ".if" block evaluator |
| - BUG/MINOR: config: add a missing "ELIF_TAKE" test for ".elif" condition evaluator |
| - BUG/MINOR: config: .if/.elif should also accept negative integers |
| - MINOR: config: centralize the ".if"/".elif" condition parser and evaluator |
| - MINOR: config: keep up-to-date current file/line/section in the global struct |
| - MINOR: config: support some pseudo-variables for file/line/section |
| - BUILD: activity: do not include malloc.h |
| - MINOR: arg: improve the error message on missing closing parenthesis |
| - MINOR: global: export the build features string list |
| - MINOR: global: add version comparison functions |
| - MINOR: config: improve .if condition error reporting |
| - MINOR: config: make cfg_eval_condition() support predicates with arguments |
| - MINOR: config: add predicate "defined()" to conditional expression blocks |
| - MINOR: config: add predicates "streq()" and "strneq()" to conditional expressions |
| - MINOR: config: add predicate "feature" to detect certain built-in features |
| - MINOR: config: add predicates "version_atleast" and "version_before" to cond blocks |
| - BUG/MINOR: activity: use the new pointer to calculate the new size in realloc() |
| - BUG/MINOR: stream: properly clear the previous error mask on L7 retries |
| - MEDIUM: log: slightly refine the output format of alerts/warnings/etc |
| - MINOR: config: add a new message directive: .diag |
| - CLEANUP: cli/tree-wide: properly re-align the CLI commands' help messages |
| - BUG/MINOR: stream: Reset stream final state and si error type on L7 retry |
| - BUG/MINOR: checks: Handle synchronous connect when a tcpcheck is started |
| - BUG/MINOR: checks: Reschedule check on observe mode only if fastinter is set |
| - MINOR: global: define tainted flag |
| - MINOR: cfgparse: add a new field flags in cfg_keyword |
| - MINOR: cfgparse: implement experimental config keywords |
| - MINOR: action: replace match_pfx by a keyword flags field |
| - MINOR: action: implement experimental actions |
| - MINOR: cli: set tainted when using CLI expert/experimental mode |
| - MINOR: stats: report tainted on show info |
| - MINOR: http_act: mark normalize-uri as experimental |
| - BUILD: fix usage of ha_alert without format string |
| - MINOR: proxy: define PR_CAP_LB |
| - BUG/MINOR: server: do not report diag for peer servers with null weight |
| - DOC: ssl: Extra files loading now works for backends too |
| - ADDONS: make addons/ discoverable by git via .gitignore |
| - DOC: ssl: Add information about crl-file option |
| - MINOR: sample: improve error reporting on missing arg to strcmp() converter |
| - DOC: management: mention that some fields may be emitted as floats |
| - MINOR: tools: implement trimming of floating point numbers |
| - MINOR: tools: add a float-to-ascii conversion function |
| - MINOR: freq_ctr: add new functions to report float measurements |
| - MINOR: stats: avoid excessive padding of float values with trailing zeroes |
| - MINOR: stats: add the HTML conversion for float types |
| - MINOR: stats: pass the appctx flags to stats_fill_info() |
| - MINOR: stats: support an optional "float" option to "show info" |
| - MINOR: stats: use tv_remain() to precisely compute the uptime |
| - MINOR: stats: report uptime and start time as floats with subsecond resolution |
| - MINOR: stats: make "show info" able to report rates as floats when asked |
| - MINOR: config: mark tune.fd.edge-triggered as experimental |
| - REORG: vars: move the "proc" scope variables out of the global struct |
| - REORG: threads: move all_thread_mask() to thread.h |
| - BUILD: wdt: include signal-t.h |
| - BUILD: auth: include missing list.h |
| - REORG: mworker: move proc_self from global to mworker |
| - BUILD: ssl: ssl_utils requires chunk.h |
| - BUILD: config: cfgparse-ssl.c needs tools.h |
| - BUILD: wurfl: wurfl.c needs tools.h |
| - BUILD: spoe: flt_spoe.c needs tools.h |
| - BUILD: promex: service-prometheus.c needs tools.h |
| - BUILD: resolvers: include tools.h |
| - BUILD: config: include tools.h in cfgparse-listen.c |
| - BUILD: htx: include tools.h in http_htx.c |
| - BUILD: proxy: include tools.h in proxy.c |
| - BUILD: session: include tools.h in session.c |
| - BUILD: cache: include tools.h in cache.c |
| - BUILD: sink: include tools.h in sink.c |
| - BUILD: connection: include tools.h in connection.c |
| - BUILD: server-state: include tools.h from server_state.c |
| - BUILD: dns: include tools.h in dns.c |
| - BUILD: payload: include tools.h in payload.c |
| - BUILD: vars: include tools.h in vars.c |
| - BUILD: compression: include tools.h in compression.c |
| - BUILD: mworker: include tools.h from mworker.c |
| - BUILD: queue: include tools.h from queue.c |
| - BUILD: udp: include tools.h from proto_udp.c |
| - BUILD: stick-table: include freq_ctr.h from stick_table.h |
| - BUILD: server: include tools.h from server.c |
| - BUILD: server: include missing proxy.h in server.c |
| - BUILD: sink: include proxy.h in sink.c |
| - BUILD: mworker: include proxy.h in mworker.c |
| - BUILD: filters: include proxy.h in filters.c |
| - BUILD: fcgi-app: include proxy.h in fcgi-app.c |
| - BUILD: connection: move list_mux_proto() to connection.c |
| - REORG: stick-table: uninline stktable_alloc_data_type() |
| - REORG: stick-table: move composite address functions to stick_table.h |
| - REORG: config: uninline warnifnotcap() and failifnotcap() |
| - BUILD: task: remove unused includes from task.c |
| - MINOR: task: stop including stream.h from task.c |
| - BUILD: connection: stop including listener-t.h |
| - BUILD: hlua: include proxy.h from hlua.c |
| - BUILD: mux-h1: include proxy.h from mux-h1.c |
| - BUILD: mux-fcgi: include proxy.h from mux-fcgi.c |
| - BUILD: listener: include proxy.h from listener.c |
| - BUILD: http-rules: include proxy.h from http_rules.c |
| - BUILD: thread: include log.h from thread.c |
| - BUILD: comp: include proxy.h from flt_http_comp.c |
| - BUILD: fd: include log.h from fd.c |
| - BUILD: config: do not include proxy.h nor errors.h anymore in cfgparse.h |
| - BUILD: makefile: reorder object files by build time |
| - DOC: Fix a few grammar/spelling issues and casing of HAProxy |
| - REGTESTS: run-regtests: match both "HAProxy" and "HA-Proxy" in the version |
| - MINOR: version: report "HAProxy" not "HA-Proxy" in the version output |
| - DOC: remove last occurrences of "HA-Proxy" syntax |
| - DOC: peers: fix the protocol tag name in the doc |
| - ADMIN: netsnmp: report "HAProxy" and not "Haproxy" in output descriptions |
| - MEDIUM: mailers: use "HAProxy" nor "HAproxy" in the subject of messages |
| - DOC: fix a few remainig cases of "Haproxy" and "HAproxy" in doc and comments |
| - MINOR: tools/rnd: compute the result outside of the CAS loop |
| - BUILD: http_fetch: address a few aliasing warnings with older compilers |
| - BUILD: ssl: define HAVE_CRYPTO_memcmp() based on the library version |
| - BUILD: errors: include stdarg in errors.h |
| - REGTESTS: disable inter-thread idle connection sharing on sensitive tests |
| - MINOR: cli: make "help" support a command in argument |
| - MINOR: cli: sort the output of the "help" keywords |
| - CLEANUP: cli/mworker: properly align the help messages |
| - BUILD: memprof: make the old caller pointer a const in get_prof_bin() |
| - BUILD: compat: include malloc_np.h for USE_MEMORY_PROFILING on FreeBSD |
| - CI: Github Actions: enable USE_QUIC=1 for BoringSSL builds |
| - BUG/MEDIUM: quic: fix null deref on error path in qc_conn_init() |
| - BUILD: cli: appease a null-deref warning in cli_gen_usage_msg() |
| |
| 2021/05/01 : 2.4-dev18 |
| - DOC: Fix indentation for `path-strip-dot` normalizer |
| - DOC: Fix RFC reference for the percent-to-uppercase normalizer |
| - DOC: Add RFC references for the path-strip-dot(dot)? normalizers |
| - MINOR: uri_normalizer: Add a `percent-decode-unreserved` normalizer |
| - BUG/MINOR: mux-fcgi: Don't send normalized uri to FCGI application |
| - REORG: htx: Inline htx functions to add HTX blocks in a message |
| - CLEANUP: assorted typo fixes in the code and comments |
| - DOC: general: fix white spaces for HTML converter |
| - BUG/MINOR: ssl: ssl_sock_prepare_ssl_ctx does not return an error code |
| - BUG/MINOR: cpuset: move include guard at the very beginning |
| - BUG/MAJOR: fix build on musl with cpu_set_t support |
| - BUG/MEDIUM: cpuset: fix build on MacOS |
| - BUG/MINOR: htx: Preserve HTX flags when draining data from an HTX message |
| - MEDIUM: htx: Refactor htx_xfer_blks() to not rely on hdrs_bytes field |
| - CLEANUP: htx: Remove unsued hdrs_bytes field from the HTX start-line |
| - BUG/MINOR: mux-h2: Don't encroach on the reserve when decoding headers |
| - MEDIUM: http-ana: handle read error on server side if waiting for response |
| - MINOR: htx: Limit length of headers name/value when a HTX message is dumped |
| - BUG/MINOR: applet: Notify the other side if data were consumed by an applet |
| - BUG/MINOR: hlua: Don't consume headers when starting an HTTP lua service |
| - BUG/MEDIUM: mux-h2: Handle EOM flag when sending a DATA frame with zero-copy |
| - CLEANUP: channel: No longer notify the producer in co_skip()/co_htx_skip() |
| - DOC: general: fix example in set-timeout |
| - CLEANUP: cfgparse: de-uglify early file error handling in readcfgfile() |
| - MINOR: config: add a new "default-path" global directive |
| - BUG/MEDIUM: peers: initialize resync timer to get an initial full resync |
| - BUG/MEDIUM: peers: register last acked value as origin receiving a resync req |
| - BUG/MEDIUM: peers: stop considering ack messages teaching a full resync |
| - BUG/MEDIUM: peers: reset starting point if peers appears longly disconnected |
| - BUG/MEDIUM: peers: reset commitupdate value in new conns |
| - BUG/MEDIUM: peers: re-work updates lookup during the sync on the fly |
| - BUG/MEDIUM: peers: reset tables stage flags stages on new conns |
| - MINOR: peers: add informative flags about resync process for debugging |
| - BUG/MEDIUM: time: fix updating of global_now upon clock drift |
| - CLEANUP: freq_ctr: make arguments of freq_ctr_total() const |
| - CLEANUP: hlua: rename hlua_appctx* appctx to luactx |
| - MINOR: server: fix doc/trace on lb algo for dynamic server creation |
| - REGTESTS: server: fix cli_add_server due to previous trace update |
| - REGTESTS: add minimal CLI "add map" tests |
| - DOC: management: move "set var" to the proper place |
| - CLEANUP: map: slightly reorder the add map function |
| - MINOR: map: get rid of map_add_key_value() |
| - MINOR: map: show the current and next pattern version in "show map" |
| - MINOR: map/acl: add the possibility to specify the version in "show map/acl" |
| - MINOR: pattern: support purging arbitrary ranges of generations |
| - MINOR: map/acl: add the possibility to specify the version in "clear map/acl" |
| - MINOR: map/acl: add the "prepare map/acl" CLI command |
| - MINOR: map/acl: add the "commit map/acl" CLI command |
| - MINOR: map/acl: make "add map/acl" support an optional version number |
| - CLEANUP: map/cli: properly align the map/acl help |
| - BUILD: compiler: do not use already defined __read_mostly on dragonfly |
| |
| 2021/04/23 : 2.4-dev17 |
| - MINOIR: mux-pt/trace: Register a new trace source with its events |
| - BUG/MINOR: mux-pt: Fix a possible UAF because of traces in mux_pt_io_cb |
| - CI: travis: Drastically clean up .travis.yml |
| - CLEANUP: pattern: make all pattern tables read-only |
| - MINOR: trace: replace the trace() inline function with an equivalent macro |
| - MINOR: initcall: uniformize the section names between MacOS and other unixes |
| - CLEANUP: initcall: rename HA_SECTION to HA_INIT_SECTION |
| - MINOR: compiler: add macros to declare section names |
| - CLEANUP: initcall: rely on HA_SECTION_* instead of defining its own |
| - MINOR: global: declare a read_mostly section |
| - MINOR: fd: move a few read-mostly variables to their own section |
| - MINOR: epoll: move epoll_fd to read_mostly |
| - MINOR: kqueue: move kqueue_fd to read_mostly |
| - MINOR: pool: move pool declarations to read_mostly |
| - MINOR: threads: mark all_threads_mask as read_mostly |
| - MINOR: server: move idle_conn_task to read_mostly |
| - MINOR: protocol: move __protocol_by_family to read_mostly |
| - MINOR: pattern: make the pat_lru_seed read_mostly |
| - MINOR: trace: make trace sources read_mostly |
| - MINOR: freq_ctr: add a generic function to report the total value |
| - MEDIUM: freq_ctr: make read_freq_ctr_period() use freq_ctr_total() |
| - MEDIUM: freq_ctr: reimplement freq_ctr_remain_period() from freq_ctr_total() |
| - MINOR: freq_ctr: add the missing next_event_delay_period() |
| - MINOR: freq_ctr: unify freq_ctr and freq_ctr_period into freq_ctr |
| - MEDIUM: freq_ctr: replace the per-second counters with the generic ones |
| - MINOR: freq_ctr: add cpu_relax in the rotation loop of update_freq_ctr_period() |
| - MINOR: freq_ctr: simplify and improve the update function |
| - CLEANUP: time: remove the now unused ms_left_scaled |
| - MINOR: time: move the time initialization out of tv_update_date() |
| - MINOR: time: remove useless variable copies in tv_update_date() |
| - MINOR: time: change the global timeval and the the global tick at once |
| - MEDIUM: time: make the clock offset global and no per-thread |
| - MINOR: atomic: reimplement the relaxed version of x86 BTS/BTR |
| - MINOR: trace: Add the checks as a possible trace source |
| - MINOIR: checks/trace: Register a new trace source with its events |
| - MINOR: hlua: Add function to release a lua function |
| - BUG/MINOR: hlua: Fix memory leaks on error path when registering a task |
| - BUG/MINOR: hlua: Fix memory leaks on error path when registering a converter |
| - BUG/MINOR: hlua: Fix memory leaks on error path when registering a fetch |
| - BUG/MINOR: hlua: Fix memory leaks on error path when parsing a lua action |
| - BUG/MINOR: hlua: Fix memory leaks on error path when registering an action |
| - BUG/MINOR: hlua: Fix memory leaks on error path when registering a service |
| - BUG/MINOR: hlua: Fix memory leaks on error path when registering a cli keyword |
| - BUG/MINOR: cfgparse/proxy: Fix some leaks during proxy section parsing |
| - BUG/MINOR: listener: Handle allocation error when allocating a new bind_conf |
| - BUG/MINOR: cfgparse/proxy: Hande allocation errors during proxy section parsing |
| - MINOR: cfgparse/proxy: Group alloc error handling during proxy section parsing |
| - DOC: internals: update the SSL architecture schema |
| - BUG/MEDIUM: sample: Fix adjusting size in field converter |
| - MINOR: sample: add ub64dec and ub64enc converters |
| - CLEANUP: sample: align samples list in sample.c |
| - MINOR: ist: Add `istclear(struct ist*)` |
| - CI: cirrus: install "pcre" package |
| - MINOR: opentracing: correct calculation of the number of arguments in the args[] |
| - MINOR: opentracing: transfer of context names without prefix |
| - MINOR: sample: converter: Add mjson library. |
| - MINOR: sample: converter: Add json_query converter |
| - CI: travis-ci: enable weekly graviton2 builds |
| - DOC: ssl: Certificate hot update only works on fronted certificates |
| - DOC: ssl: Certificate hot update works on server certificates |
| - BUG/MEDIUM: threads: Ignore current thread to end its harmless period |
| - MINOR: threads: Only consider running threads to end a thread harmeless period |
| - BUG/MINOR: checks: Set missing id to the dummy checks frontend |
| - MINOR: logs: Add support of checks as session origin to format lf strings |
| - BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections |
| - MINOR: connection: Make bc_http_major compatible with tcp-checks |
| - BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check |
| - BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded |
| - MINOR: tcp_samples: Add samples to get src/dst info of the backend connection |
| - MINOR: tcp_samples: Be able to call bc_src/bc_dst from the health-checks |
| - BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function |
| - BUG/MINOR: logs: Report the true number of retries if there was no connection |
| - BUILD: makefile: Redirect stderr to /dev/null when probing options |
| - MINOR: uri_normalizer: Add uri_normalizer module |
| - MINOR: uri_normalizer: Add `enum uri_normalizer_err` |
| - MINOR: uri_normalizer: Add `http-request normalize-uri` |
| - MINOR: uri_normalizer: Add a `merge-slashes` normalizer to http-request normalize-uri |
| - MINOR: uri_normalizer: Add a `dotdot` normalizer to http-request normalize-uri |
| - MINOR: uri_normalizer: Add support for supressing leading `../` for dotdot normalizer |
| - MINOR: uri_normalizer: Add a `sort-query` normalizer |
| - MINOR: uri_normalizer: Add a `percent-upper` normalizer |
| - MEDIUM: http_act: Rename uri-normalizers |
| - DOC: Add introduction to http-request normalize-uri |
| - DOC: Note that URI normalization is experimental |
| - BUG/MINOR: pools: maintain consistent ->allocated count on alloc failures |
| - BUG/MINOR: pools/buffers: make sure to always reserve the required buffers |
| - MINOR: pools: drop the unused static history of artificially failed allocs |
| - CLEANUP: pools: remove unused arguments to pool_evict_from_cache() |
| - MEDIUM: pools: move the cache into the pool header |
| - MINOR: pool: remove the size field from pool_cache_head |
| - MINOR: pools: rename CONFIG_HAP_LOCAL_POOLS to CONFIG_HAP_POOLS |
| - MINOR: pools: enable the fault injector in all allocation modes |
| - MINOR: pools: make the basic pool_refill_alloc()/pool_free() update needed_avg |
| - MEDIUM: pools: unify pool_refill_alloc() across all models |
| - CLEANUP: pools: re-merge pool_refill_alloc() and __pool_refill_alloc() |
| - MINOR: pools: call pool_alloc_nocache() out of the pool's lock |
| - CLEANUP: pools: move the lock to the only __pool_get_first() that needs it |
| - CLEANUP: pools: rename __pool_get_first() to pool_get_from_shared_cache() |
| - CLEANUP: pools: rename pool_*_{from,to}_cache() to *_local_cache() |
| - CLEANUP: pools: rename __pool_free() to pool_put_to_shared_cache() |
| - MINOR: tools: add statistical_prng_range() to get a random number over a range |
| - MINOR: pools: use cheaper randoms for fault injections |
| - MINOR: pools: move the fault injector to __pool_alloc() |
| - MINOR: pools: split the OS-based allocator in two |
| - MINOR: pools: always use atomic ops to maintain counters |
| - MINOR: pools: move pool_free_area() out of the lock in the locked version |
| - MINOR: pools: factor the release code into pool_put_to_os() |
| - MEDIUM: pools: make CONFIG_HAP_POOLS control both local and shared pools |
| - MINOR: pools: create unified pool_{get_from,put_to}_cache() |
| - MINOR: pools: evict excess objects using pool_evict_from_local_cache() |
| - MEDIUM: pools: make pool_put_to_cache() always call pool_put_to_local_cache() |
| - CLEANUP: pools: make the local cache allocator fall back to the shared cache |
| - CLEANUP: pools: merge pool_{get_from,put_to}_local_caches with generic ones |
| - CLEANUP: pools: uninline pool_put_to_cache() |
| - CLEANUP: pools: declare dummy pool functions to remove some ifdefs |
| - BUILD: pools: fix build with DEBUG_FAIL_ALLOC |
| - BUG/MINOR: server: make srv_alloc_lb() allocate lb_nodes for consistent hash |
| - CONTRIB: mod_defender: import the minimal number of includes |
| - CONTRIB: mod_defender: make the code build with the embedded includes |
| - CONTRIB: modsecurity: import the minimal number of includes |
| - CONTRIB: modsecurity: make the code build with the embedded includes |
| - CLEANUP: sample: Improve local variables in sample_conv_json_query |
| - CLEANUP: sample: Explicitly handle all possible enum values from mjson |
| - CLEANUP: sample: Use explicit return for successful `json_query`s |
| - CLEANUP: lists/tree-wide: rename some list operations to avoid some confusion |
| - CONTRIB: move spoa_example out of the tree |
| - BUG/MINOR: server: free srv.lb_nodes in free_server |
| - BUG/MINOR: logs: free logsrv.conf.file on exit |
| - BUG/MEDIUM: server: ensure thread-safety of server runtime creation |
| - MINOR: server: add log on dynamic server creation |
| - MINOR: server: implement delete server cli command |
| - CONTRIB: move spoa_server out of the tree |
| - CONTRIB: move modsecurity out of the tree |
| - BUG/MINOR: server: fix potential null gcc error in delete server |
| - BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers |
| - BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames |
| - BUG/MINOR: uri_normalizer: Use delim parameter when building the sorted query in uri_normalizer_query_sort |
| - CLEANUP: uri_normalizer: Remove trailing whitespace |
| - MINOR: uri_normalizer: Add a `strip-dot` normalizer |
| - CONTRIB: move mod_defender out of the tree |
| - CLEANUP: contrib: remove the last references to the now dead contrib/ directory |
| - BUG/MEDIUM: config: fix cpu-map notation with both process and threads |
| - MINOR: config: add a diag for invalid cpu-map statement |
| - BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases |
| - BUG/MINOR: mworker: don't use oldpids[] anymore for reload |
| - BUILD: makefile: fix the "make clean" target on strict bourne shells |
| - IMPORT: slz: import slz into the tree |
| - BUILD: compression: switch SLZ from out-of-tree to in-tree |
| - CI: github: do not build libslz any more |
| - CLEANUP: compression: remove calls to SLZ init functions |
| - BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data |
| - MINOR: cpuset: define a platform-independent cpuset type |
| - MINOR: cfgparse: use hap_cpuset for parse_cpu_set |
| - MEDIUM: config: use platform independent type hap_cpuset for cpu-map |
| - MINOR: thread: implement the detection of forced cpu affinity |
| - MINOR: cfgparse: support the comma separator on parse_cpu_set |
| - MEDIUM: cfgparse: detect numa and set affinity if needed |
| - MINOR: global: add option to disable numa detection |
| - BUG/MINOR: haproxy: fix compilation on macOS |
| - BUG/MINOR: cpuset: fix compilation on platform without cpu affinity |
| - MINOR: time: avoid unneeded updates to now_offset |
| - MINOR: time: avoid overwriting the same values of global_now |
| - CLEANUP: time: use __tv_to_ms() in tv_update_date() instead of open-coding |
| - MINOR: time: avoid u64 needlessly expensive computations for the 32-bit now_ms |
| - BUG/MINOR: peers: remove useless table check if initial resync is finished |
| - BUG/MEDIUM: peers: re-work connection to new process during reload. |
| - BUG/MEDIUM: peers: re-work refcnt on table to protect against flush |
| - BUG/MEDIUM: config: fix missing initialization in numa_detect_topology() |
| |
| 2021/04/09 : 2.4-dev16 |
| - CLEANUP: dev/flags: remove useless test in the stdin number parser |
| - MINOR: No longer rely on deprecated sample fetches for predefined ACLs |
| - MINOR: acl: Add HTTP_2.0 predefined macro |
| - BUG/MINOR: hlua: Detect end of request when reading data for an HTTP applet |
| - BUG/MINOR: tools: fix parsing "us" unit for timers |
| - MINOR: server/bind: add support of new prefixes for addresses. |
| - MINOR: log: register config file and line number on log servers. |
| - MEDIUM: log: support tcp or stream addresses on log lines. |
| - BUG/MEDIUM: log: fix config parse error logging on stdout/stderr or any raw fd |
| - CLEANUP: fd: remove FD_POLL_DATA and FD_POLL_STICKY |
| - MEDIUM: fd: prepare FD_POLL_* to move to bits 8-15 |
| - MEDIUM: fd: merge fdtab[].ev and state for FD_EV_* and FD_POLL_* into state |
| - MINOR: fd: move .linger_risk into fdtab[].state |
| - MINOR: fd: move .cloned into fdtab[].state |
| - MINOR: fd: move .initialized into fdtab[].state |
| - MINOR: fd: move .et_possible into fdtab[].state |
| - MINOR: fd: move .exported into fdtab[].state |
| - MINOR: fd: implement an exclusive syscall bit to remove the ugly "log" lock |
| - MINOR: cli/show-fd: slightly reorganize the FD status flags |
| - MINOR: atomic/arm64: detect and use builtins for the double-word CAS |
| - CLEANUP: atomic: add an explicit _FETCH variant for add/sub/and/or |
| - CLEANUP: atomic: make all standard add/or/and/sub operations return void |
| - CLEANUP: atomic: add a fetch-and-xxx variant for common operations |
| - CLEANUP: atomic: add HA_ATOMIC_INC/DEC for unit increments |
| - CLEANUP: atomic/tree-wide: replace single increments/decrements with inc/dec |
| - CLEANUP: atomic: use the __atomic variant of BTS/BTR on modern compilers |
| - MINOR: atomic: implement native BTS/BTR for x86 |
| - MINOR: ist: Add `istappend(struct ist, char)` |
| - MINOR: ist: Add `istshift(struct ist*)` |
| - MINOR: ist: Add `istsplit(struct ist*, char)` |
| - BUG/MAJOR: fd: switch temp values to uint in fd_stop_both() |
| - MINOR: opentracing: register config file and line number on log servers |
| - MEDIUM: resolvers: add support of tcp address on nameserver line. |
| - MINOR: ist: Rename istappend() to __istappend() |
| - CLEANUP: htx: Make http_get_stline take a `const struct` |
| - CLEANUP: ist: Remove unused `count` argument from `ist2str*` |
| - CLEANUP: Remove useless malloc() casts |
| |
| 2021/04/02 : 2.4-dev15 |
| - BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv |
| - BUG/MINOR: stats: Apply proper styles in HTML status page. |
| - BUG/MEDIUM: time: make sure to always initialize the global tick |
| - BUG/MINOR: tcp: fix silent-drop workaround for IPv6 |
| - BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS |
| - CLEANUP: socket: replace SOL_IP/IPV6/TCP with IPPROTO_IP/IPV6/TCP |
| - BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields |
| - BUG/MINOR: mux-h2: Don't emit log twice if an error occurred on the preface |
| - MINOR: stream: Don't trigger errors on destructive HTTP upgrades |
| - MINOR: frontend: Create HTTP txn for HTX streams |
| - MINOR: stream: Be sure to set HTTP analysers when creating an HTX stream |
| - BUG/MINOR: stream: Properly handle TCP>H1>H2 upgrades in http_wait_for_request |
| - BUG/MINOR: config: Add warning for http-after-response rules in TCP mode |
| - MINOR: muxes: Add a flag to notify a mux does not support any upgrade |
| - MINOR: mux-h1: Don't perform implicit HTTP/2 upgrade if not supported by mux |
| - MINOR: mux-pt: Don't perform implicit HTTP upgrade if not supported by mux |
| - MEDIUM: mux-h1: Expose h1 in the list of supported mux protocols |
| - MEDIUM: mux-pt: Expose passthrough in the list of supported mux protocols |
| - MINOR: muxes: Show muxes flags when the mux list is displayed |
| - DOC: config: Improve documentation about proto/check-proto keywords |
| - MINOR: stream: Use stream type instead of proxy mode when appropriate |
| - MINOR: filters/http-ana: Decide to filter HTTP headers in HTTP analysers |
| - MINOR: http-ana: Simplify creation/destruction of HTTP transactions |
| - MINOR: stream: Handle stream HTTP upgrade in a dedicated function |
| - MEDIUM: Add tcp-request switch-mode action to perform HTTP upgrade |
| - MINOR: config/proxy: Don't warn for HTTP rules in TCP if 'switch-mode http' set |
| - MINOR: config/proxy: Warn if a TCP proxy without backend is upgradable to HTTP |
| - DOC: config: Add documentation about TCP to HTTP upgrades |
| - REGTESTS: Add script to tests TCP to HTTP upgrades |
| - BUG/MINOR: payload/htx: Ingore L6 sample fetches for HTX streams/checks |
| - MINOR: htx: Make internal.strm.is_htx an internal sample fetch |
| - MINOR: action: Use a generic function to check validity of an action rule list |
| - MINOR: payload/config: Warn if a L6 sample fetch is used from an HTTP proxy |
| - MEDIUM: http-rules: Add wait-for-body action on request and response side |
| - REGTESTS: Add script to tests the wait-for-body HTTP action |
| - BUG/MINOR: http-fetch: Fix test on message state to capture the version |
| - CLEANUP: vars: always pre-initialize smp in vars_parse_cli_get_var() |
| - MINOR: global: define diagnostic mode of execution |
| - MINOR: cfgparse: diag for multiple nbthread statements |
| - MINOR: server: diag for 0 weight server |
| - MINOR: diag: create cfgdiag module |
| - MINOR: diag: diag if servers use the same cookie value |
| - MINOR: config: diag if global section after non-global |
| - TESTS: slightly reorganize the code in the tests/ directory |
| - TESTS: move tests/*.cfg to tests/config |
| - REGTESTS: ssl: "set ssl cert" and multi-certificates bundle |
| - REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken |
| - CONTRIB: halog: fix issue with array of type char |
| - CONTRIB: tcploop: add a shutr command |
| - CONTRIB: debug: add the show-fd-to-flags script |
| - CONTRIB: debug: split poll from flags |
| - CONTRIB: move some dev-specific tools to dev/ |
| - BUILD: makefile: always build the flags utility |
| - DEV: flags: replace the unneeded makefile with a README |
| - BUILD: makefile: integrate the hpack tools |
| - CONTRIB: merge ip6range with iprange |
| - CONTRIB: move some admin-related sub-projects to admin/ |
| - CONTRIB: move halog to admin/ |
| - ADMIN: halog: automatically enable USE_MEMCHR on the right glibc version |
| - BUILD: makefile: build halog with the correct flags |
| - BUILD: makefile: add a "USE_PROMEX" variable to ease building prometheus-exporter |
| - CONTRIB: move prometheus-exporter to addons/promex |
| - DOC: add a few words about USE_* and the addons directory |
| - CONTRIB: move 51Degrees to addons/51degrees |
| - CONTRIB: move src/da.c and contrib/deviceatlas to addons/deviceatlas |
| - CONTRIB: move src/wurfl.c and contrib/wurfl to addons/wurfl |
| - CONTRIB: move contrib/opentracing to addons/ot |
| - BUG/MINOR: opentracing: initialization after establishing daemon mode |
| - DOC: clarify that compression works for HTTP/2 |
| |
| 2021/03/27 : 2.4-dev14 |
| - MEDIUM: quic: Fix build. |
| - MEDIUM: quic: Fix build. |
| - CI: codespell: whitelist "Dragan Dosen" |
| - CLEANUP: assorted typo fixes in the code and comments |
| - CI: github actions: update LibreSSL to 3.2.5 |
| - REGTESTS: revert workaround for a crash with recent libressl on http-reuse sni |
| - CLEANUP: mark defproxy as const on parse tune.fail-alloc |
| - REGTESTS: remove unneeded experimental-mode in cli add server test |
| - REGTESTS: wait for proper return of enable server in cli add server test |
| - MINOR: compression: use pool_alloc(), not pool_alloc_dirty() |
| - MINOR: spoe: use pool_alloc(), not pool_alloc_dirty() |
| - MINOR: fcgi-app: use pool_alloc(), not pool_alloc_dirty() |
| - MINOR: cache: use pool_alloc(), not pool_alloc_dirty() |
| - MINOR: ssl: use pool_alloc(), not pool_alloc_dirty() |
| - MINOR: opentracing: use pool_alloc(), not pool_alloc_dirty() |
| - MINOR: dynbuf: make b_alloc() always check if the buffer is allocated |
| - CLEANUP: compression: do not test for buffer before calling b_alloc() |
| - CLEANUP: l7-retries: do not test the buffer before calling b_alloc() |
| - MINOR: channel: simplify the channel's buffer allocation |
| - MEDIUM: dynbuf: remove last usages of b_alloc_margin() |
| - CLEANUP: dynbuf: remove b_alloc_margin() |
| - CLEANUP: dynbuf: remove the unused b_alloc_fast() function |
| - CLEANUP: pools: remove the unused pool_get_first() function |
| - MINOR: pools: make the pool allocator support a few flags |
| - MINOR: pools: add pool_zalloc() to return a zeroed area |
| - CLEANUP: connection: use pool_zalloc() in conn_alloc_hash_node() |
| - CLEANUP: filters: use pool_zalloc() in flt_stream_add_filter() |
| - CLEANUP: spoe: use pool_zalloc() instead of pool_alloc+memset |
| - CLEANUP: frontend: use pool_zalloc() in frontend_accept() |
| - CLEANUP: mailers: use pool_zalloc() in enqueue_one_email_alert() |
| - CLEANUP: resolvers: use pool_zalloc() in resolv_link_resolution() |
| - CLEANUP: ssl: use pool_zalloc() in ssl_init_keylog() |
| - CLEANUP: tcpcheck: use pool_zalloc() instead of pool_alloc+memset |
| - CLEANUP: quic: use pool_zalloc() instead of pool_alloc+memset |
| - MINOR: time: also provide a global, monotonic global_now_ms timer |
| - BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable |
| - MINOR: tools: introduce new option PA_O_DEFAULT_DGRAM on str2sa_range. |
| - BUILD: tools: fix build error with new PA_O_DEFAULT_DGRAM |
| - BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list" |
| - CLEANUP: ssl: remove unused definitions |
| - BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro |
| - MINOR: lua: Slightly improve function dumping the lua traceback |
| - BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback |
| - BUG/MEDIUM: lua: Always init the lua stack before referencing the context |
| - MINOR: fd: make fd_clr_running() return the remaining running mask |
| - MINOR: fd: remove the unneeded running bit from fd_insert() |
| - BUG/MEDIUM: fd: do not wait on FD removal in fd_delete() |
| - CLEANUP: fd: remove unused fd_set_running_excl() |
| - CLEANUP: fd: slightly simplify up _fd_delete_orphan() |
| - BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available. |
| - BUG/MEDIUM: release lock on idle conn killing on reached pool high count |
| - BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless |
| - MINOR: tools: make url2ipv4 return the exact number of bytes parsed |
| - BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters |
| - BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent |
| - BUG/MINOR: ssl: Fix update of default certificate |
| - BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one |
| - BUILD: ssl: introduce fine guard for ssl random extraction functions |
| - REORG: global: move initcall register code in a dedicated file |
| - REORG: global: move free acl/action in their related source files |
| - REORG: split proxy allocation functions |
| - MINOR: proxy: implement a free_proxy function |
| - MINOR: proxy: define cap PR_CAP_LUA |
| - MINOR: lua: properly allocate the lua Socket proxy |
| - MINOR: lua: properly allocate the lua Socket servers |
| - MINOR: vars: make get_vars() allow the session to be null |
| - MINOR: vars: make the var() sample fetch keyword depend on nothing |
| - CLEANUP: sample: remove duplicate "stopping" sample fetch keyword |
| - MINOR: sample: make smp_resolve_args() return an allocate error message |
| - MINOR: sample: add a new SMP_SRC_CONST sample capability |
| - MINOR: sample: mark the truly constant sample fetch keywords as such |
| - MINOR: sample: add a new CFG_PARSER context for samples |
| - MINOR: action: add a new ACT_F_CFG_PARSER origin designation |
| - MEDIUM: vars: add support for a "set-var" global directive |
| - REGTESTS: add a basic reg-test for some "set-var" commands |
| - MINOR: sample: add a new CLI_PARSER context for samples |
| - MINOR: action: add a new ACT_F_CLI_PARSER origin designation |
| - MINOR: vars/cli: add a "get var" CLI command to retrieve global variables |
| - MEDIUM: cli: add a new experimental "set var" command |
| - MINOR: compat: add short aliases for a few very commonly used types |
| - BUILD: ssl: use EVP_CIPH_GCM_MODE macro instead of HA_OPENSSL_VERSION |
| - MEDIUM: backend: use a trylock to grab a connection on high FD counts as well |
| |
| 2021/03/19 : 2.4-dev13 |
| - BUG/MEDIUM: cli: fix "help" crashing since recent spelling fixes |
| - BUG/MINOR: cfgparse: use the GLOBAL not LISTEN keywords list for spell checking |
| - MINOR: tools: improve word fingerprinting by counting presence |
| - MINOR: tools: do not sum squares of differences for word fingerprints |
| - MINOR: cli: improve fuzzy matching to work on all remaining words at once |
| - MINOR: cli: sort the suggestions by order of relevance |
| - MINOR: cli: limit spelling suggestions to 5 |
| - MINOR: cfgparse/proxy: also support spelling fixes on options |
| - BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames |
| - MINOR: time: export the global_now variable |
| - BUG/MINOR: freq_ctr/threads: make use of the last updated global time |
| - MINOR: freq_ctr/threads: relax when failing to update a sliding window value |
| - MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket |
| - MINOR: mworker/cli: alert the user if we enabled a master CLI but not the master-worker mode |
| - MINOR: cli: implement experimental-mode |
| - REORG: server: add a free server function |
| - MINOR: cfgparse: always alloc idle conns task |
| - REORG: server: move keywords in srv_kws |
| - MINOR: server: remove fastinter from mistyped kw list |
| - REORG: server: split parse_server |
| - REORG: server: move alert traces in parse_server |
| - REORG: server: rename internal functions from parse_server |
| - REORG: server: attach servers in parse_server |
| - REORG: server: use flags for parse_server |
| - MINOR: server: prepare parsing for dynamic servers |
| - MINOR: stats: export function to allocate extra proxy counters |
| - MEDIUM: server: implement 'add server' cli command |
| - REGTESTS: implement test for 'add server' cli |
| - MINOR: server: enable standard options for dynamic servers |
| - MINOR: server: support keyword proto in 'add server' cli |
| - BUG/MINOR: protocol: add missing support of dgram unix socket. |
| - CLEANUP: Fix a typo in fix_is_valid description |
| - MINOR: raw_sock: Add a close method. |
| - MEDIUM: connections: Introduce a new XPRT method, start(). |
| - MEDIUM: connections: Implement a start() method for xprt_handshake. |
| - MEDIUM: connections: Implement a start() method in ssl_sock. |
| - MINOR: muxes: garbage collect the reset() method. |
| - CLEANUP: tcp-rules: Fix a typo in error messages about expect-netscaler-cip |
| - MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua |
| - BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable |
| |
| 2021/03/13 : 2.4-dev12 |
| - CLEANUP: connection: Use `VAR_ARRAY` in `struct tlv` definition |
| - CLEANUP: connection: Remove useless test for NULL before calling `pool_free()` |
| - CLEANUP: connection: Use istptr / istlen for proxy_unique_id |
| - MINOR: connection: Use a `struct ist` to store proxy_authority |
| - CLEANUP: connection: Consistently use `struct ist` to process all TLV types |
| - BUILD: task: fix build at -O0 with threads disabled |
| - BUILD: bug: refine HA_LINK_ERROR() to only be used on gcc and derivatives |
| - CLEANUP: config: make the cfg_keyword parsers take a const for the defproxy |
| - BUILD: connection: do not use VAR_ARRAY in struct tlv |
| - BUG/MEDIUM: session: NULL dereference possible when accessing the listener |
| - MINOR: build: force CC to set a return code when probing options |
| - CLEANUP: stream: rename a few remaining occurrences of "stream *sess" |
| - BUG/MEDIUM: resolvers: handle huge responses over tcp servers. |
| - CLEANUP: config: also address the cfg_keyword API change in the compression code |
| - BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake |
| - BUG/MINOR: sample: Rename SenderComID/TargetComID to SenderCompID/TargetCompID |
| - MINOR: task: give the scheduler a bit more flexibility in the runqueue size |
| - OPTIM: task: automatically adjust the default runqueue-depth to the threads |
| - BUG/MINOR: connection: Missing QUIC initialization |
| - BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc. |
| - BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw() |
| - BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached |
| - BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check |
| - BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters |
| - BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check |
| - BUG/MINOR: server-state: properly handle the case where the base is not set |
| - BUG/MINOR: server-state: use the argument, not the global state |
| - CLEANUP: tcp-rules: add missing actions in the tcp-request error message |
| - CLEANUP: vars: make the error message clearer on missing arguments for set-var |
| - CLEANUP: http-rules: remove the unexpected comma before the list of action keywords |
| - CLEANUP: actions: the keyword must always be const from the rule |
| - MINOR: tools: add simple word fingerprinting to find similar-looking words |
| - MINOR: cfgparse: add cfg_find_best_match() to suggest an existing word |
| - MINOR: cfgparse: suggest correct spelling for unknown words in proxy sections |
| - MINOR: cfgparse: suggest correct spelling for unknown words in global section |
| - MINOR: cfgparse/server: try to fix spelling mistakes on server lines |
| - MINOR: cfgparse/bind: suggest correct spelling for unknown bind keywords |
| - MINOR: actions: add a function to suggest an action ressembling a given word |
| - MINOR: http-rules: suggest approaching action names on mismatch |
| - MINOR: tcp-rules: suggest approaching action names on mismatch |
| - BUG/MINOR: cfgparse/server: increment the extra keyword counter one at a time |
| - Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record" |
| - BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error |
| - BUG/MINOR: resolvers: Reset server address on DNS error only on status change |
| - BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution |
| - BUG/MEDIUM: resolvers: Don't set an address-less server as UP |
| - BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item |
| - MINOR: resolvers: new function find_srvrq_answer_record() |
| - BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item |
| - BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete |
| - MINOR: resolvers: Use a function to remove answers attached to a resolution |
| - MINOR: resolvers: Purge answer items when a SRV resolution triggers an error |
| - MINOR: resolvers: Add function to change the srv status based on SRV resolution |
| - MINOR: resolvers: Directly call srvrq_update_srv_state() when possible |
| - BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks |
| - BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set |
| - MINOR: resolvers: Use milliseconds for cached items in resolver responses |
| - MINOR: resolvers: Don't try to match immediatly renewed ADD items |
| - CLEANUP: resolvers: Use ha_free() in srvrq_resolution_error_cb() |
| - CLEANUP: resolvers: Perform unsafe loop on requester list when possible |
| - BUG/MINOR: cli: make sure "help", "prompt", "quit" are enabled at master level |
| - CLEANUP: cli: fix misleading comment and better indent the access level flags |
| - MINOR: cli: set the ACCESS_MASTER* bits on the master bind_conf |
| - MINOR: cli: test the appctx level for master access instead of comparing pointers |
| - MINOR: cli: print the error message in the parser function itself |
| - MINOR: cli: filter the list of commands to the matching part |
| - MEDIUM: cli: apply spelling fixes for known commands before listing them |
| - MINOR: tools: add the ability to update a word fingerprint |
| - MINOR: cli: apply the fuzzy matching on the whole command instead of words |
| - CLEANUP: cli: rename MAX_STATS_ARGS to MAX_CLI_ARGS |
| - CLEANUP: cli: rename the last few "stats_" to "cli_" |
| - CLEANUP: task: make sure tasklet handlers always indicate their statuses |
| - CLEANUP: assorted typo fixes in the code and comments |
| |
| 2021/03/05 : 2.4-dev11 |
| - CI: codespell: skip Makefile for spell check |
| - CLEANUP: assorted typo fixes in the code and comments |
| - BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule |
| - BUG/MINOR: connection: Use the client's dst family for adressless servers |
| - BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread > 1 |
| - CLEANUP: Use ist2(const void*, size_t) whenever possible |
| - CLEANUP: Use IST_NULL whenever possible |
| - BUILD: proxy: Missing header inclusion for quic_transport_params_init() |
| - BUILD: quic: Implicit conversion between SSL related enums. |
| - DOC: spoe: Add a note about fragmentation support in HAProxy |
| - MINOR: contrib: add support for heartbeat control messages. |
| - MINOR: contrib: Enhance peers dissector heuristic. |
| - BUG/MINOR: mux-h2: Fix typo in scheme adjustment |
| - CLEANUP: Reapply the ist2() replacement patch |
| - CLEANUP: Use istadv(const struct ist, const size_t) whenever possible |
| - CLEANUP: Use isttest(const struct ist) whenever possible |
| - Revert "CI: Pin VTest to a known good commit" |
| - CLEANUP: backend: fix a wrong comment |
| - BUG/MINOR: backend: free allocated bind_addr if reuse conn |
| - MINOR: backend: handle reuse for conns with no server as target |
| - REGTESTS: test http-reuse if no server target |
| - BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring() |
| - BUG/MINOR: server-state: Don't load server-state file for disabled backends |
| - CLEANUP: dns: Use DISGUISE() on a never-failing ring_attach() call |
| - CLEANUP: dns: Remove useless test on ns->dgram in dns_connect_nameserver() |
| - DOC: fix originalto except clause on destination address |
| - CLEANUP: Use the ist() macro whenever possible |
| - CLEANUP: Replace for loop with only a condition by while |
| - REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h |
| - BUG/MINOR: mt-list: always perform a cpu_relax call on failure |
| - MINOR: atomic: add armv8.1-a atomics variant for cas-dw |
| - MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs |
| - BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode |
| - MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS |
| - MINOR: pools: double the local pool cache size to 1 MB |
| - MINOR: stream: use ABORT_NOW() and not abort() in stream_dump_and_crash() |
| - CLEANUP: stream: explain why we queue the stream at the head of the server list |
| - MEDIUM: backend: use a trylock when trying to grab an idle connection |
| - REORG: tools: promote the debug PRNG to more general use as a statistical one |
| - OPTIM: lb-random: use a cheaper PRNG to pick a server |
| - MINOR: task: stop abusing the nice field to detect a tasklet |
| - MINOR: task: move the nice field to the struct task only |
| - MEDIUM: task: extend the state field to 32 bits |
| - MINOR: task: add an application specific flag to the state: TASK_F_USR1 |
| - MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1 |
| - MINOR: xprt: add new xprt_set_idle and xprt_set_used methods |
| - MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks |
| - MINOR: server: don't read curr_used_conns multiple times |
| - CLEANUP: global: reorder some fields to respect cache lines |
| - CLEANUP: sockpair: silence a coverity check about fcntl() |
| - CLEANUP: lua: set a dummy file name and line number on the dummy servers |
| - MINOR: server: add a global list of all known servers |
| - MINOR: cfgparse: finish to set up servers outside of the proxy setup loop |
| - MINOR: server: allocate a per-thread struct for the per-thread connections stuff |
| - MINOR: server: move actconns to the per-thread structure |
| - CLEANUP: server: reorder some fields in the server struct to respect cache lines |
| - MINOR: backend: add a BUG_ON if conn mux NULL in connect_server |
| - BUG/MINOR: backend: fix condition for reuse on mode HTTP |
| - BUILD: Fix build when using clang without optimizing. |
| - CLEANUP: assorted typo fixes in the code and comments |
| |
| 2021/02/26 : 2.4-dev10 |
| - BUILD: SSL: introduce fine guard for RAND_keep_random_devices_open |
| - MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes |
| - BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert" |
| - BUG/MINOR: sample: secure convs that accept base64 string and var name as args |
| - BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe |
| - CLEANUP: vars: make smp_fetch_var() to reuse vars_get_by_desc() |
| - DOC: muxes: add a diagram of the exchanges between muxes and outer world |
| - BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop |
| - BUG/MEDIUM: cli/shutdown sessions: make it thread-safe |
| - BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal |
| - MINOR: stream: add an "epoch" to figure which streams appeared when |
| - MINOR: cli/streams: make "show sess" dump all streams till the new epoch |
| - MINOR: streams: use one list per stream instead of a global one |
| - MEDIUM: streams: do not use the streams lock anymore |
| - BUILD: dns: avoid a build warning when threads are disabled (dss unused) |
| - MEDIUM: task: remove the tasks_run_queue counter and have one per thread |
| - MINOR: tasks: do not maintain the rqueue_size counter anymore |
| - CLEANUP: tasks: use a less confusing name for task_list_size |
| - CLEANUP: task: move the tree root detection from __task_wakeup() to task_wakeup() |
| - MINOR: task: limit the remote thread wakeup to the global runqueue only |
| - MINOR: task: move the allocated tasks counter to the per-thread struct |
| - CLEANUP: task: split the large tasklet_wakeup_on() function in two |
| - BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl() |
| - BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned |
| - BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record |
| - BUG/MINOR: resolvers: new callback to properly handle SRV record errors |
| - BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records |
| - BUG/MEDIUM: resolvers: Reset address for unresolved servers |
| - DOC: Update the module list in MAINTAINERS file |
| - MINOR: htx: Add function to reserve the max possible size for an HTX DATA block |
| - DOC: Update the HTX API documentation |
| - DOC: Update the filters guide |
| - BUG/MEDIUM: contrib/prometheus-exporter: fix segfault in listener name dump |
| - MINOR: task: split the counts of local and global tasks picked |
| - MINOR: task: do not use __task_unlink_rq() from process_runnable_tasks() |
| - MINOR: task: don't decrement then increment the local run queue |
| - CLEANUP: task: re-merge __task_unlink_rq() with task_unlink_rq() |
| - MINOR: task: make grq_total atomic to move it outside of the grq_lock |
| - MINOR: tasks: also compute the tasklet latency when DEBUG_TASK is set |
| - MINOR: task: make tasklet wakeup latency measurements more accurate |
| - MINOR: server: Be more strict on the server-state line parsing |
| - MINOR: server: Only fill one array when parsing a server-state line |
| - MEDIUM: server: Refactor apply_server_state() to make it more readable |
| - CLEANUP: server: Rename state_line node to node instead of name_name |
| - CLEANUP: server: Rename state_line structure into server_state_line |
| - CLEANUP: server: Use a local eb-tree to store lines of the global server-state file |
| - MINOR: server: Be more strict when reading the version of a server-state file |
| - MEDIUM: server: Store parsed params of a server-state line in the tree |
| - MINOR: server: Remove cached line from global server-state tree when found |
| - MINOR: server: Move loading state of servers in a dedicated function |
| - MEDIUM: server: Use a tree to store local server-state lines |
| - MINOR: server: Parse and store server-state lines in a dedicated function |
| - MEDIUM: server: Don't load server-state file if a line is corrupted |
| - REORG: server: Export and rename some functions updating server info |
| - REORG: server-state: Move functions to deal with server-state in its own file |
| - MINOR: server-state: Don't load server-state file for serverless proxies |
| - CLEANUP: muxes: Remove useless if condition in show_fd function |
| - BUG/MINOR: stats: fix compare of no-maint url suffix |
| - MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY |
| - MINOR: ssl: mark the SSL handshake tasklet as heavy |
| - CLEANUP: server: rename srv_cleanup_{idle,toremove}_connections() |
| - BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup() |
| - MINOR: task: add one extra tasklet class: TL_HEAVY |
| - MINOR: task: place the heavy elements in TL_HEAVY |
| - MINOR: task: only limit TL_HEAVY tasks but not others |
| - BUG/MINOR: http-ana: Only consider dst address to process originalto option |
| - MINOR: tools: Add net_addr structure describing a network addess |
| - MINOR: tools: Add function to compare an address to a network address |
| - MEDIUM: http-ana: Add IPv6 support for forwardfor and orignialto options |
| - CLEANUP: hlua: Use net_addr structure internally to parse and compare addresses |
| - REGTESTS: Add script to test except param for fowardedfor/originalto options |
| - DOC: scheduler: add a diagram showing the different queues and their usages |
| - CLEANUP: tree-wide: replace free(x);x=NULL with ha_free(&x) |
| - CLEANUP: config: replace a few free() with ha_free() |
| - CLEANUP: vars: always zero the pointers after a free() |
| - CLEANUP: ssl: remove a useless "if" before freeing an error message |
| - CLEANUP: ssl: make ssl_sock_free_srv_ctx() zero the pointers after free |
| - CLEANUP: ssl: use realloc() instead of free()+malloc() |
| |
| 2021/02/20 : 2.4-dev9 |
| - BUG/MINOR: server: Remove RMAINT from admin state when loading server state |
| - CLEANUP: check: fix get_check_status_info declaration |
| - CLEANUP: contrib/prometheus-exporter: align for with srv status case |
| - MEDIUM: stats: allow to select one field in `stats_fill_li_stats` |
| - MINOR: stats: add helper to get status string |
| - MEDIUM: contrib/prometheus-exporter: add listen stats |
| - BUG/MINOR: dns: add test on result getting value from buffer into ring. |
| - BUG/MINOR: dns: dns_connect_server must return -1 unsupported nameserver's type |
| - BUG/MINOR: dns: missing test writing in output channel in session handler |
| - BUG/MINOR: dns: fix ring attach control on dns_session_new |
| - BUG/MEDIUM: dns: fix multiple double close on fd in dns.c |
| - BUG/MAJOR: connection: prevent double free if conn selected for removal |
| - BUG/MINOR: session: atomically increment the tracked sessions counter |
| - REGTESTS: fix http_reuse_conn_hash proxy test |
| - BUG/MINOR: backend: do not call smp_make_safe for sni conn hash |
| - MINOR: connection: remove pointers for prehash in conn_hash_params |
| - BUG/MINOR: checks: properly handle wrapping time in __health_adjust() |
| - BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust() |
| - DEBUG: thread: add 5 extra lock labels for statistics and debugging |
| - OPTIM: server: switch the actconn list to an mt-list |
| - Revert "MINOR: threads: change lock_t to an unsigned int" |
| - MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock |
| - OPTIM: lb-first: do not take the server lock on take_conn/drop_conn |
| - OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn |
| - OPTIM: lb-leastconn: do not unlink the server if it did not change |
| - MINOR: tasks: add DEBUG_TASK to report caller info in a task |
| - MINOR: tasks/debug: add some extra controls of use-after-free in DEBUG_TASK |
| - BUG/MINOR: sample: Always consider zero size string samples as unsafe |
| - MINOR: cli: add missing agent commands for set server |
| - BUILD/MEDIUM: da Adding pcre2 support. |
| - BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions |
| - REGTESTS: reorder reuse conn proxy protocol test |
| - DOC: explain the relation between pool-low-conn and tune.idle-pool.shared |
| - MINOR: tasks: refine the default run queue depth |
| - MINOR: listener: refine the default MAX_ACCEPT from 64 to 4 |
| - MINOR: mux_h2: do not try to remove front conn from idle trees |
| - REGTESTS: workaround for a crash with recent libressl on http-reuse sni |
| - BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ(). |
| - MINOR: connection: allocate dynamically hash node for backend conns |
| - DOC: DeviceAtlas documentation typo fix. |
| - BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer |
| - BUG/MINOR: http-rules: Always replace the response status on a return action |
| - BUG/MINOR: server: Init params before parsing a new server-state line |
| - BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line |
| - MEDIUM: server: Don't introduce a new server-state file version |
| - DOC: contrib/prometheus-exporter: remove htx reference |
| - REGTESTS: contrib/prometheus-exporter: test NaN values |
| - REGTESTS: contrib/prometheus-exporter: test well known labels |
| - CI: github actions: switch to stable LibreSSL release |
| - BUG/MINOR: server: Fix test on number of fields allowed in a server-state line |
| - MINOR: dynbuf: make the buffer wait queue per thread |
| - MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait |
| - MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold |
| - MINOR: sched: have one runqueue ticks counter per thread |
| |
| 2021/02/13 : 2.4-dev8 |
| - BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro |
| - BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro |
| - BUG/MINOR: mux-h1: Don't emit extra CRLF for empty chunked messages |
| - MINOR: contrib/prometheus-exporter: use stats desc when possible followup |
| - MEDIUM: contrib/prometheus-exporter: export base stick table stats |
| - CLEANUP: assorted typo fixes in the code and comments |
| - CLEANUP: check: fix some typo in comments |
| - CLEANUP: tools: typo in `strl2irc` mention |
| - BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro |
| - MEDIUM: ssl: add a rwlock for SSL server session cache |
| - BUG/MINOR: intops: fix mul32hi()'s off-by-one |
| - BUG/MINOR: freq_ctr: fix a wrong delay calculation in next_event_delay() |
| - MINOR: stick-tables/counters: add http_fail_cnt and http_fail_rate data types |
| - MINOR: ssl: add SSL_SERVER_LOCK label in threads.h |
| - BUG/MINOR: mux-h1: Don't increment HTTP error counter for 408/500/501 errors |
| - BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors |
| - BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state |
| - BUG/MINOR: mux-h1: Fix data skipping for bodyless responses |
| - BUG/MINOR: mux-h1: Don't blindly skip EOT block for non-chunked messages |
| - BUG/MEDIUM: mux-h2: Add EOT block when EOM flag is set on an empty HTX message |
| - MINOR: mux-h1: Be sure EOM flag is set when processing end of outgoing message |
| - REGTESTS: Add a script to test payload skipping for bodyless HTTP responses |
| - BUG/MINOR: server: re-align state file fields number |
| - CLEANUP: muxes: Remove useless calls to b_realign_if_empty() |
| - BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints() |
| - CLEANUP: remove unused variable assigned found by Coverity |
| - CLEANUP: queue: Remove useless tests on p or pp in pendconn_process_next_strm() |
| - BUG/MINOR: backend: hold correctly lock when killing idle conn |
| - MEDIUM: connection: protect idle conn lists with locks |
| - MEDIUM: connection: replace idle conn lists by eb trees |
| - MINOR: backend: search conn in idle/safe trees after available |
| - MINOR: backend: search conn in idle tree after safe on always reuse |
| - MINOR: connection: prepare hash calcul for server conns |
| - MINOR: connection: use the srv pointer for the srv conn hash |
| - MINOR: backend: compare conn hash for session conn reuse |
| - MINOR: connection: use sni as parameter for srv conn hash |
| - MINOR: reg-tests: test http-reuse with sni |
| - MINOR: backend: rewrite alloc of stream target address |
| - MINOR: connection: use dst addr as parameter for srv conn hash |
| - MINOR: reg-test: test http-reuse with specific dst addr |
| - MINOR: backend: rewrite alloc of connection src address |
| - MINOR: connection: use src addr as parameter for srv conn hash |
| - MINOR: connection: use proxy protocol as parameter for srv conn hash |
| - MINOR: reg-tests: test http-reuse with proxy protocol |
| - MINOR: doc: update http reuse for new eligilible connections |
| - BUG/MINOR: backend: fix compilation without ssl |
| - REGTESTS: adjust http_reuse_conn_hash requirements |
| - REGTESTS: deactivate a failed test on CI in http_reuse_conn_hash |
| - REGTESTS: fix sni used in http_reuse_conn_hash for libressl 3.3.0 |
| - CI: cirrus: update FreeBSD image to 12.2 |
| - MEDIUM: cli: add check-addr command |
| - MEDIUM: cli: add agent-port command |
| - MEDIUM: server: add server-states version 2 |
| - MEDIUM: server: support {check,agent}_addr, agent_port in server state |
| - MINOR: server: enhance error precision when applying server state |
| - BUG/MINOR: server: Fix server-state-file-name directive |
| - CLEANUP: deinit: release global and per-proxy server-state variables on deinit |
| - BUG/MEDIUM: config: don't pick unset values from last defaults section |
| - BUG/MINOR: stats: revert the change on ST_CONVDONE |
| - BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines |
| - BUG/MINOR: http-htx: defpx must be a const in proxy_dup_default_conf_errors() |
| - BUG/MINOR: tcpheck: the source list must be a const in dup_tcpcheck_var() |
| - BUILD: proxy: add missing compression-t.h to proxy-t.h |
| - REORG: move init_default_instance() to proxy.c and pass it the defproxy pointer |
| - REORG: proxy: centralize the proxy allocation code into alloc_new_proxy() |
| - MEDIUM: proxy: only take defaults when a default proxy is passed. |
| - MINOR: proxy: move the defproxy freeing code to proxy.c |
| - MINOR: proxy: always properly reset the just freed default instance pointers |
| - BUG/MINOR: extcheck: proxy_parse_extcheck() must take a const for the defproxy |
| - BUG/MINOR: tcpcheck: proxy_parse_*check*() must take a const for the defproxy |
| - BUG/MINOR: server: parse_server() must take a const for the defproxy |
| - MINOR: cfgparse: move defproxy to cfgparse-listen as a static |
| - MINOR: proxy: add a new capability PR_CAP_DEF |
| - MINOR: cfgparse: check PR_CAP_DEF instead of comparing poiner against defproxy |
| - MINOR: cfgparse: use a pointer to the current default proxy |
| - MINOR: proxy: also store the name for a defaults section |
| - MINOR: proxy: support storing defaults sections into their own tree |
| - MEDIUM: proxy: store the default proxies in a tree by name |
| - MEDIUM: cfgparse: allow a proxy to designate the defaults section to use |
| - MINOR: http: add baseq sample fetch |
| - CLEANUP: tcpcheck: Remove a useless test on port variable |
| - BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL |
| - CLEANUP: server: Remove useless "filepath" variable in apply_server_state() |
| - MINOR: peers/cli: do not dump the peers dictionaries by default on "show peers" |
| - MINOR: cfgparse: implement a simple if/elif/else/endif macro block handler |
| - DOC: tune: explain the origin of block size for ssl.cachesize |
| - MINOR: tcp: add support for defer-accept on FreeBSD. |
| - MINOR: ring: adds new ring_init function. |
| - CLEANUP: channel: fix comment in ci_putblk. |
| - BUG/MINOR: dns: add missing sent counter and parent id to dns counters. |
| - BUG/MINOR: resolvers: fix attribute packed struct for dns |
| - MINOR: resolvers: renames some resolvers internal types and removes dns prefix |
| - MINOR: resolvers: renames type dns_resolvers to resolvers. |
| - MINOR: resolvers: renames some resolvers specific types to not use dns prefix |
| - MINOR: resolvers: renames some dns prefixed types using resolv prefix. |
| - MINOR: resolvers: renames resolvers DNS_RESP_* errcodes RSLV_RESP_* |
| - MINOR: resolvers: renames resolvers DNS_UPD_* returncodes to RSLV_UPD_* |
| - MINOR: resolvers: rework prototype suffixes to split resolving and dns. |
| - MEDIUM: resolvers: move resolvers section parsing from cfgparse.c to dns.c |
| - MINOR: resolvers: replace nameserver's resolver ref by generic parent pointer |
| - MINOR: resolvers: rework dns stats prototype because specific to resolvers |
| - MEDIUM: resolvers: split resolving and dns message exchange layers. |
| - MEDIUM: resolvers/dns: split dns.c into dns.c and resolvers.c |
| - MEDIUM: dns: adds code to support pipelined DNS requests over TCP. |
| - MEDIUM: resolvers: add supports of TCP nameservers in resolvers. |
| |
| 2021/02/05 : 2.4-dev7 |
| - BUG/MINOR: stats: Continue to fill frontend stats on unimplemented metric |
| - BUILD: ssl: guard Client Hello callbacks with HAVE_SSL_CLIENT_HELLO_CB macro instead of openssl version |
| - BUG/MINOR: stats: Init the metric variable when frontend stats are filled |
| - MINOR: contrib/prometheus-exporter: better output of Not-a-Number |
| - CLEANUP: stats: improve field selection for frontend http fields |
| - CLEANUP: assorted typo fixes in the code and comments |
| - DOC: Improve documentation of the various hdr() fetches |
| - MEDIUM: stats: allow to select one field in `stats_fill_be_stats` |
| - MINOR: contrib/prometheus-exporter: use fill_be_stats for backend dump |
| - MEDIUM: stats: allow to select one field in `stats_fill_sv_stats` |
| - MINOR: contrib/prometheus-exporter: use fill_sv_stats for server dump |
| - MINOR: abort() on my_unreachable() when DEBUG_USE_ABORT is set. |
| - BUG/MEDIUM: filters/htx: Fix data forwarding when payload length is unknown |
| - BUG/MINOR: config: fix leak on proxy.conn_src.bind_hdr_name |
| - MINOR: reg-tests: add http-reuse test |
| - CLEANUP: srv: fix comment for pool-max-conn |
| - CLEANUP: backend: remove an obsolete comment on conn_backend_get |
| - REORG: backend: simplify conn_backend_get |
| - MINOR: ssl: Server ssl context prepare function refactoring |
| - MINOR: ssl: Certificate chain loading refactorization |
| - MEDIUM: ssl: Load client certificates in a ckch for backend servers |
| - MEDIUM: ssl: Enable backend certificate hot update |
| - MINOR: ssl: Remove client_crt member of the server's ssl context |
| - CLEANUP: ssl/cli: rework free in cli_io_handler_commit_cert() |
| - CLEANUP: ssl: remove SSL_CTX function parameter |
| - CLEANUP: ssl: make load_srv_{ckchs,cert} match their bind counterpart |
| - BUILD: Include stdlib.h in compiler.h if DEBUG_USE_ABORT is set |
| - CI: Fix DEBUG_STRICT definition for Coverity |
| - BUG/MINOR: stats: Remove a break preventing ST_F_QCUR to be set for servers |
| - BUG/MINOR: stats: Add a break after filling ST_F_MODE field for servers |
| - CLEANUP: ssl: remove dead code in ckch_inst_new_load_srv_store() |
| - BUG/MINOR: ssl: init tmp chunk correctly in ssl_sock_load_sctl_from_file() |
| - BUG/MEDIUM: session: only retrieve ready idle conn from session |
| - BUG/MEDIUM: backend: never reuse a connection for tcp mode |
| - REGTESTS: set_ssl_server_cert.vtc: remove the abort command |
| - REGTESTS: set_ssl_server_cert.vtc: check the Sha1 Fingerprint |
| - REGTESTS: set_ssl_server_cert.vtc: check the sha1 from the server |
| - MEDIUM: stream-int: Take care of EOS if the SI wake callback function |
| - MINOR: mux-h1: Try to wake up data layer first before calling its wake callback |
| - MINOR: mux-h1: Wake up H1C after its creation if input buffer is not empty |
| - MEDIUM: mux-h1: Add ST_READY state for the H1 connections |
| - MINOR: stream: Add a function to validate TCP to H1 upgrades |
| - MEDIUM: http-ana: Do nothing in wait-for-request analyzer if not htx |
| - BUG/MEDIUM: stream: Don't immediatly ack the TCP to H1 upgrades |
| - BUG/MAJOR: mux-h1: Properly handle TCP to H1 upgrades |
| - MINOR: htx/http-ana: Save info about Upgrade option in the Connection header |
| - MEDIUM: http-ana: Refuse invalid 101-switching-protocols responses |
| - BUG/MINOR: h2/mux-h2: Reject 101 responses with a PROTOCOL_ERROR h2s error |
| - MINOR: mux-h1/mux-fcgi: Don't set TUNNEL mode if payload length is unknown |
| - MINOR: mux-h1: Split H1C_F_WAIT_OPPOSITE flag to separate input/output sides |
| - MINOR: mux-h2: Add 2 flags to help to properly handle tunnel mode |
| - MEDIUM: mux-h2: Block client data on server side waiting tunnel establishment |
| - MEDIUM: mux-h2: Close streams when processing data for an aborted tunnel |
| - MEDIUM: mux-h1: Properly handle tunnel establishments and aborts |
| - BUG/MAJOR: mux-h1/mux-h2/htx: Fix HTTP tunnel management at the mux level |
| - MINOR: htx: Rename HTX_FL_EOI flag into HTX_FL_EOM |
| - REGTESTS: Don't run http_msg_full_on_eom script on the 2.4 anymore |
| - MINOR: htx: Add a function to know if a block is the only one in a message |
| - MAJOR: htx: Remove the EOM block type and use HTX_FL_EOM instead |
| - MINOR: mux-h1: Add a flag on H1 streams with a response known to be bodyless |
| - MEDIUM: mux-h1: Don't emit any payload for bodyless responses |
| - MINOR: mux-h1: Don't emit C-L and T-E headers for 204 and 1xx responses |
| - MINOR: mux-h1: Don't add Connection close/keep-alive header for 1xx messages |
| - MINOR: h2/mux-h2: Add flags to notify the response is known to have no body |
| - MEDIUM: mux-h2: Don't emit DATA frame for bodyless responses |
| - MEDIUM: http-ana: Deal with L7 retries in HTTP analysers |
| - MINOR: h1: reject websocket handshake if missing key |
| - MEDIUM: h1: generate WebSocket key on response if needed |
| - MINOR: mux_h2: define H2_SF_EXT_CONNECT_SENT stream flag |
| - MEDIUM: h2: parse Extended CONNECT reponse to htx |
| - MEDIUM: mux_h2: generate Extended CONNECT from htx upgrade |
| - MEDIUM: h1: add a WebSocket key on handshake if needed |
| - MEDIUM: mux_h2: generate Extended CONNECT response |
| - MEDIUM: h2: parse Extended CONNECT request to htx |
| - MEDIUM: h2: send connect protocol h2 settings |
| - MINOR: vtc: add test for h1/h2 protocol upgrade translation |
| - MINOR: vtc: add websocket test |
| - REGTESTS: Fix required versions for several scripts |
| - REGTEST: Don't use the websocket to validate http-check |
| - MINOR: mux-h1/trace: add traces at level ERROR for all kind of errors |
| - MINOR: mux-fcgi/trace: add traces at level ERROR for all kind of errors |
| - MINOR: h1: Raise the chunk size limit up to (2^52 - 1) |
| - BUG/MEDIUM: listener: do not accept connections faster than we can process them |
| - REGTESTS: set_ssl_server_cert.vtc: set as broken |
| - Revert "BUG/MEDIUM: listener: do not accept connections faster than we can process them" |
| - BUG/MINOR: backend: check available list allocation for reuse |
| - CI: Fix the coverity builds |
| - DOC: management: fix "show resolvers" alphabetical ordering |
| - MINOR: tools: add print_time_short() to print a condensed duration value |
| - MINOR: activity: make profiling more manageable |
| - MINOR: activity: declare a new structure to collect per-function activity |
| - MEDIUM: tasks/activity: collect per-task statistics when profiling is enabled |
| - MINOR: activity: also report collected tasks stats in "show profiling" |
| - MINOR: activity: flush scheduler stats on "set profiling tasks on" |
| - MINOR: activity: add a new "show tasks" command to list currently active tasks |
| - MINOR: listener: export accept_queue_process |
| - MINOR: session: export session_expire_embryonic() |
| - MINOR: muxes: export the timeout and shutr task handlers |
| - MINOR: checks: export a few functions that appear often in trace dumps |
| - MINOR: peers: export process_peer_sync() to improve traces |
| - MINOR: stick-tables: export process_table_expire() |
| - MINOR: mux-h1: Remove first useless test on count in h1_process_output() |
| - BUG/MINOR: stick-table: Always call smp_fetch_src() with a valid arg list |
| - MINOR: http-fetch: Don't check if argument list is set in sample fetches |
| - MINOR: http-conv: Don't check if argument list is set in sample converters |
| - MINOR: sample: Don't check if argument list is set in sample fetches |
| - MINOR: ssl-sample: Don't check if argument list is set in sample fetches |
| - MINOR: mux-h2: Don't tests the start-line when sending HEADERS frame |
| - MINOR: mux-h2: Slightly improve request HEADERS frames sending |
| - MINOR: contrib/prometheus-exporter: declare states for objects |
| - MAJOR: contrib/prometheus-exporter: move ftd/bkd/srv states to labels |
| - MEDIUM: contrib/prometheus-exporter: Use dynamic labels instead of static ones |
| - MINOR: listener: export manage_global_listener_queue() |
| - BUG/MINOR: activity: take care of late wakeups in "show tasks" |
| - REGTESTS: set_ssl_server_cert.vtc: remove SSL caching and set as working |
| - REGTESTS: set_ssl_server_cert: cleanup the SSL caching option |
| - MINOR: checks: Add function to get the result code corresponding to a status |
| - MAJOR: contrib/prometheus-exporter: move health check status to labels |
| - MINOR: contrib/prometheus-exporter: improve service status description field |
| - MINOR: stats: improve pending connections description |
| - MINOR: stats: improve max stats descriptions |
| - MINOR: contrib/prometheus-exporter: use stats desc when possible |
| - MINOR: contrib/prometheus-exporter: add uweight field |
| - MINOR: contrib/prometheus-exporter: add recv logs_logs_total field |
| - CLEANUP: contrib/prometheus-exporter: remove unused includes |
| - CLEANUP: contrib/prometheus-exporter: align and reorder fields |
| - CLEANUP: contrib/prometheus-exporter: remove description in README |
| - DOC: contrib/prometheus-exporter: Add missing metrics in README |
| - BUG/MINOR: contrib/prometheus-exporter: Add missing label for ST_F_HRSP_1XX |
| - BUG/MINOR: contrib/prometheus-exporter: Restart labels dump at the right pos |
| - BUG/MEDIUM: ssl/cli: abort ssl cert is freeing the old store |
| - BUG/MEDIUM: ssl: check a connection's status before computing a handshake |
| - BUG/MINOR: mux_h2: fix incorrect stat titles |
| - MINOR: ssl/cli: flush the server session cache upon 'commit ssl cert' |
| - BUG/MINOR: cli: fix set server addr/port coherency with health checks |
| - MINOR: server: Don't set the check port during the update from a state file |
| - MINOR: dns: Don't set the check port during a server dns resolution |
| - MEDIUM: check: remove checkport checkaddr flag |
| - MEDIUM: server: adding support for check_port in server state |
| - BUG/MINOR: check: consitent way to set agentaddr |
| - MEDIUM: check: align agentaddr and agentport behaviour |
| - DOC: server: Add missing params in comment of the server state line parsing |
| - BUG/MINOR: xxhash: make sure armv6 uses memcpy() |
| - REGTESTS: mark http-check-send.vtc as 2.4-only |
| - REGTESTS: mark sample_fetches/hashes.vtc as 2.4-only |
| - BUG/MINOR: ssl: do not try to use early data if not configured |
| - REGTESTS: unbreak http-check-send.vtc |
| - MINOR: cli/show_fd: report local and report ports when known |
| - BUILD: Makefile: move REGTESTST_TYPE default setting |
| - BUG/MEDIUM: mux-h2: handle remaining read0 cases |
| - CLEANUP: http-htx: Set buffer area to NULL instead of malloc(0) |
| - BUG/MINOR: sock: Unclosed fd in case of connection allocation failure |
| - BUG/MEDIUM: mux-h2: do not quit the demux loop before setting END_REACHED |
| |
| 2021/01/22 : 2.4-dev6 |
| - MINOR: converter: adding support for url_enc |
| - BUILD: SSL: guard TLS13 ciphersuites with HAVE_SSL_CTX_SET_CIPHERSUITES |
| - BUILD: ssl: guard EVP_PKEY_get_default_digest_nid with ASN1_PKEY_CTRL_DEFAULT_MD_NID |
| - BUILD: ssl: guard openssl specific with SSL_READ_EARLY_DATA_SUCCESS |
| - BUILD: Makefile: exclude broken tests by default |
| - CLEANUP: cfgparse: replace "realloc" with "my_realloc2" to fix to memory leak on error |
| - BUG/MINOR: hlua: Fix memory leak in hlua_alloc |
| - MINOR: contrib/prometheus-exporter: export build_info |
| - DOC: fix some spelling issues over multiple files |
| - CLEANUP: Fix spelling errors in comments |
| - SCRIPTS: announce-release: fix typo in help message |
| - CI: github: add a few more words to the codespell ignore list |
| - DOC: Add maintainers for the Prometheus exporter |
| - BUG/MINOR: sample: fix concat() converter's corruption with non-string variables |
| - BUG/MINOR: server: Memory leak of proxy.used_server_addr during deinit |
| - CLEANUP: sample: remove uneeded check in json validation |
| - MINOR: reg-tests: add a way to add service dependency |
| - BUG/MINOR: sample: check alloc_trash_chunk return value in concat() |
| - BUG/MINOR: reg-tests: fix service dependency script |
| - MINOR: reg-tests: add base prometheus test |
| - Revert "BUG/MINOR: dns: SRV records ignores duplicated AR records" |
| - BUG/MINOR: sample: Memory leak of sample_expr structure in case of error |
| - BUG/MINOR: check: Don't perform any check on servers defined in a frontend |
| - BUG/MINOR: init: enforce strict-limits when using master-worker |
| - MINOR: contrib/prometheus-exporter: avoid connection close header |
| - MINOR: contrib/prometheus-exporter: use fill_info for process dump |
| - BUG/MINOR: init: Use a dynamic buffer to set HAPROXY_CFGFILES env variable |
| - MINOR: config: Add failifnotcap() to emit an alert on proxy capabilities |
| - MINOR: server: Forbid server definitions in frontend sections |
| - BUG/MINOR: threads: Fixes the number of possible cpus report for Mac. |
| - CLEANUP: pattern: rename pat_ref_commit() to pat_ref_commit_elt() |
| - MINOR: pattern: add the missing generation ID manipulation functions |
| - MINOR: peers: Add traces for peer control messages. |
| - BUG/MINOR: dns: SRV records ignores duplicated AR records (v2) |
| - BUILD: peers: fix build warning about unused variable |
| - BUG/MEDIUM: stats: add missing INF_BUILD_INFO definition |
| - MINOR: cache: Do not store responses with an unknown encoding |
| - BUG/MINOR: peers: Possible appctx pointer dereference. |
| - MINOR: build: discard echoing in help target |
| - MINOR: cache: Remove the `hash` part of the accept-encoding secondary key |
| - CLEANUP: cache: Use proper data types in secondary_key_cmp() |
| - CLEANUP: Rename accept_encoding_hash_cmp to accept_encoding_bitmap_cmp |
| - BUG/MINOR: peers: Wrong "new_conn" value for "show peers" CLI command. |
| - MINOR: contrib: Make the wireshark peers dissector compile for more distribs. |
| - BUG/MINOR: mux_h2: missing space between "st" and ".flg" in the "show fd" helper |
| - CLEANUP: tools: make resolve_sym_name() take a const pointer |
| - CLEANUP: cli: make "show fd" use a const connection to access other fields |
| - MINOR: cli: make "show fd" also report the xprt and xprt_ctx |
| - MINOR: xprt: add a new show_fd() helper to complete some "show fd" dumps. |
| - MINOR: ssl: provide a "show fd" helper to report important SSL information |
| - MINOR: xprt/mux: export all *_io_cb functions so that "show fd" resolves them |
| - MINOR: mux-h2: make the "show fd" helper also decode the h2s subscriber when known |
| - MINOR: mux-h1: make the "show fd" helper also decode the h1s subscriber when known |
| - MINOR: mux-fcgi: make the "show fd" helper also decode the fstrm subscriber when known |
| - CI: Pin VTest to a known good commit |
| - MINOR: cli: give the show_fd helpers the ability to report a suspicious entry |
| - MINOR: cli/show_fd: report some easily detectable suspicious states |
| - MINOR: ssl/show_fd: report some FDs as suspicious when possible |
| - MINOR: mux-h2/show_fd: report as suspicious an entry with too many calls |
| - MINOR: mux-h1/show_fd: report as suspicious an entry with too many calls |
| - BUG/MINOR: mworker: define _GNU_SOURCE for strsignal() |
| - BUG/MEDIUM: tcpcheck: Don't destroy connection in the wake callback context |
| - BUG/MEDIUM: mux-h2: Xfer rxbuf to the upper layer when creating a front stream |
| - MINOR: http: Add HTTP 501-not-implemented error message |
| - MINOR: muxes: Add exit status for errors about not implemented features |
| - MINOR: mux-h1: Be prepared to return 501-not-implemented error during parsing |
| - MEDIUM: mux-h1: Return a 501-not-implemented for upgrade requests with a body |
| - DOC: Remove space after comma in converter signature |
| - DOC: Rename '<var name>' to '<var>' in converter signature |
| - MINOR: stats: duplicate 3 fields in bytes in info |
| - MINOR: stats: add new start time field |
| - MINOR: contrib/prometheus-exporter: merge info description from stats |
| - MEDIUM: stats: allow to select one field in `stats_fill_fe_stats` |
| - MINOR: contrib/prometheus-exporter: use fill_fe_stats for frontend dump |
| - MINOR: contrib/prometheus-exporter: Don't needlessly set empty label for metrics |
| - MINOR: contrib/prometheus-exporter: Split the PROMEX_FL_STATS_METRIC flag |
| - MINOR: contrib/prometheus-exporter: Add promex_metric struct defining a metric |
| - MEDIUM: contrib/prometheus-exporter: Rework matrices defining Promex metrics |
| - BUG/MINOR: stream: Don't update counters when TCP to H2 upgrades are performed |
| - BUG/MEDIUM: mux-h2: fix read0 handling on partial frames |
| - MINOR: debug: always export the my_backtrace function |
| - MINOR: debug: extract the backtrace dumping code to its own function |
| - MINOR: debug: create ha_backtrace_to_stderr() to dump an instant backtrace |
| - MEDIUM: debug: now always print a backtrace on CRASH_NOW() and friends |
| - MINOR: debug: let ha_dump_backtrace() dump a bit further for some callers |
| - BUILD: debug: fix build warning by consuming the write() result |
| - MINOR: lua: remove unused variable |
| - BUILD/MINOR: lua: define _GNU_SOURCE for LLONG_MAX |
| |
| 2021/01/06 : 2.4-dev5 |
| - BUG/MEDIUM: mux_h2: Add missing braces in h2_snd_buf()around trace+wakeup |
| - BUILD: hpack: hpack-tbl-t.h uses VAR_ARRAY but does not include compiler.h |
| - MINOR: time: increase the minimum wakeup interval to 60s |
| - MINOR: check: do not ignore a connection header for http-check send |
| - REGTESTS: complete http-check test |
| - CI: travis-ci: drop coverity scan builds |
| - MINOR: atomic: don't use ; to separate instruction on aarch64. |
| - IMPORT: xxhash: update to v0.8.0 that introduces stable XXH3 variant |
| - MEDIUM: xxhash: use the XXH3 functions to generate 64-bit hashes |
| - MEDIUM: xxhash: use the XXH_INLINE_ALL macro to inline all functions |
| - CLEANUP: xxhash: remove the unused src/xxhash.c |
| - MINOR: sample: add the xxh3 converter |
| - REGTESTS: add tests for the xxh3 converter |
| - MINOR: protocol: Create proto_quic QUIC protocol layer. |
| - MINOR: connection: Attach a "quic_conn" struct to "connection" struct. |
| - MINOR: quic: Redefine control layer callbacks which are QUIC specific. |
| - MINOR: ssl_sock: Initialize BIO and SSL objects outside of ssl_sock_init() |
| - MINOR: connection: Add a new xprt to connection. |
| - MINOR: ssl: Export definitions required by QUIC. |
| - MINOR: cfgparse: Do not modify the QUIC xprt when parsing "ssl". |
| - MINOR: tools: Add support for QUIC addresses parsing. |
| - MINOR: quic: Add definitions for QUIC protocol. |
| - MINOR: quic: Import C source code files for QUIC protocol. |
| - MINOR: listener: Add QUIC info to listeners and receivers. |
| - MINOR: server: Add QUIC definitions to servers. |
| - MINOR: ssl: SSL CTX initialization modifications for QUIC. |
| - MINOR: ssl: QUIC transport parameters parsing. |
| - MINOR: quic: QUIC socket management finalization. |
| - MINOR: cfgparse: QUIC default server transport parameters init. |
| - MINOR: quic: Enable the compilation of QUIC modules. |
| - MAJOR: quic: Make usage of ebtrees to store QUIC ACK ranges. |
| - MINOR: quic: Attempt to make trace more readable |
| - MINOR: quic: Make usage of the congestion control window. |
| - MINOR: quic: Flag RX packet as ack-eliciting from the generic parser. |
| - MINOR: quic: Code reordering to help in reviewing/modifying. |
| - MINOR: quic: Add traces to congestion avoidance NewReno callback. |
| - MINOR: quic: Display the SSL alert in ->ssl_send_alert() callback. |
| - MINOR: quic: Update the initial salt to that of draft-29. |
| - MINOR: quic: Add traces for in flght ack-eliciting packet counter. |
| - MINOR: quic: make a packet build fails when qc_build_frm() fails. |
| - MINOR: quic: Add traces for quic_packet_encrypt(). |
| - MINOR: cache: Refactoring of secondary_key building functions |
| - MINOR: cache: Avoid storing responses whose secondary key was not correctly calculated |
| - BUG/MINOR: cache: Manage multiple headers in accept-encoding normalization |
| - MINOR: cache: Add specific secondary key comparison mechanism |
| - MINOR: http: Add helper functions to trim spaces and tabs |
| - MEDIUM: cache: Manage a subset of encodings in accept-encoding normalizer |
| - REGTESTS: cache: Simplify vary.vtc file |
| - REGTESTS: cache: Add a specific test for the accept-encoding normalizer |
| - MINOR: cache: Remove redundant test in http_action_req_cache_use |
| - MINOR: cache: Replace the "process-vary" option's expected values |
| - CI: GitHub Actions: enable daily Coverity scan |
| - BUG/MEDIUM: cache: Fix hash collision in `accept-encoding` handling for `Vary` |
| - MEDIUM: stick-tables: Add srvkey option to stick-table |
| - REGTESTS: add test for stickiness using "srvkey addr" |
| - BUILD: Makefile: disable -Warray-bounds until it's fixed in gcc 11 |
| - BUG/MINOR: sink: Return an allocation failure in __sink_new if strdup() fails |
| - BUG/MINOR: lua: Fix memory leak error cases in hlua_config_prepend_path |
| - MINOR: lua: Use consistent error message 'memory allocation failed' |
| - CLEANUP: Compare the return value of `XXXcmp()` functions with zero |
| - CLEANUP: Apply the coccinelle patch for `XXXcmp()` on include/ |
| - CLEANUP: Apply the coccinelle patch for `XXXcmp()` on contrib/ |
| - MINOR: qpack: Add static header table definitions for QPACK. |
| - CLEANUP: qpack: Wrong comment about the draft for QPACK static header table. |
| - CLEANUP: quic: Remove useless QUIC event trace definitions. |
| - BUG/MINOR: quic: Possible CRYPTO frame building errors. |
| - MINOR: quic: Pass quic_conn struct to frame parsers. |
| - BUG/MINOR: quic: Wrong STREAM frames parsing. |
| - MINOR: quic: Drop packets with STREAM frames with wrong direction. |
| - CLEANUP: ssl: Remove useless loop in tlskeys_list_get_next() |
| - CLEANUP: ssl: Remove useless local variable in tlskeys_list_get_next() |
| - MINOR: ssl: make tlskeys_list_get_next() take a list element |
| - Revert "BUILD: Makefile: disable -Warray-bounds until it's fixed in gcc 11" |
| - BUG/MINOR: cfgparse: Fail if the strdup() for `rule->be.name` for `use_backend` fails |
| - CLEANUP: mworker: remove duplicate pointer tests in cfg_parse_program() |
| - CLEANUP: Reduce scope of `header_name` in http_action_store_cache() |
| - CLEANUP: Reduce scope of `hdr_age` in http_action_store_cache() |
| - CLEANUP: spoe: fix typo on `var_check_arg` comment |
| - BUG/MINOR: tcpcheck: Report a L7OK if the last evaluated rule is a send rule |
| - CI: github actions: build several popular "contrib" tools |
| - DOC: Improve the message printed when running `make` w/o `TARGET` |
| - BUG/MEDIUM: server: srv_set_addr_desc() crashes when a server has no address |
| - REGTESTS: add unresolvable servers to srvkey-addr |
| - BUG/MINOR: stats: Make stat_l variable used to dump a stat line thread local |
| - BUG/MINOR: quic: NULL pointer dereferences when building post handshake frames. |
| - SCRIPTS: improve announce-release to support different tag and versions |
| - SCRIPTS: make announce release support preparing announces before tag exists |
| - CLEANUP: assorted typo fixes in the code and comments |
| - BUG/MINOR: srv: do not init address if backend is disabled |
| - BUG/MINOR: srv: do not cleanup idle conns if pool max is null |
| - CLEANUP: assorted typo fixes in the code and comments |
| - CLEANUP: few extra typo and fixes over last one ("ot" -> "to") |
| |
| 2020/12/21 : 2.4-dev4 |
| - BUG/MEDIUM: lb-leastconn: Reposition a server using the right eweight |
| - BUG/MEDIUM: mux-h1: Fix a deadlock when a 408 error is pending for a client |
| - BUG/MEDIUM: ssl/crt-list: bad behavior with "commit ssl cert" |
| - BUG/MAJOR: cache: Crash because of disabled entry not removed from the tree |
| - BUILD: SSL: fine guard for SSL_CTX_add_server_custom_ext call |
| - MEDIUM: cache: Add a secondary entry counter and insertion limitation |
| - MEDIUM: cache: Avoid going over duplicates lists too often |
| - MINOR: cache: Add a max-secondary-entries cache option |
| - CI: cirrus: drop CentOS 6 builds |
| - BUILD: Makefile: have "make clean" destroy .o/.a/.s in contrib subdirs as well |
| - MINOR: vars: replace static functions with global ones |
| - MINOR: opentracing: add ARGC_OT enum |
| - CONTRIB: opentracing: add the OpenTracing filter |
| - DOC: opentracing: add the OpenTracing filter section |
| - REGTESTS: make use of HAPROXY_ARGS and pass -dM by default |
| - BUG/MINOR: http: Establish a tunnel for all 2xx responses to a CONNECT |
| - BUG/MINOR: mux-h1: Don't set CS_FL_EOI too early for protocol upgrade requests |
| - BUG/MEDIUM: http-ana: Never for sending data in TUNNEL mode |
| - CLEANUP: mux-h2: Rename h2s_frt_make_resp_data() to be generic |
| - CLEANUP: mux-h2: Rename h2c_frt_handle_data() to be generic |
| - BUG/MEDIUM: mux-h1: Handle h1_process() failures on a pipelined request |
| - CLEANUP: debug: mark the RNG's seed as unsigned |
| - CONTRIB: halog: fix build issue caused by %L printf format |
| - CONTRIB: halog: mark the has_zero* functions unused |
| - CONTRIB: halog: fix signed/unsigned build warnings on counts and timestamps |
| - CONTRIB: debug: address "poll" utility build on non-linux platforms |
| - BUILD: plock: remove dead code that causes a warning in gcc 11 |
| - BUILD: ssl: fine guard for SSL_CTX_get0_privatekey call |
| - BUG/MINOR: dns: SRV records ignores duplicated AR records |
| - DOC: fix "smp_size" vs "sample_size" in "log" directive arguments |
| - CLEANUP: assorted typo fixes in the code and comments |
| - DOC: assorted typo fixes in the documentation |
| - CI: codespell: whitelist "te" and "nd" words |
| |
| 2020/12/11 : 2.4-dev3 |
| - MINOR: log: Logging HTTP path only with %HPO |
| - BUG/MINOR: mux-h2/stats: make stream/connection proto errors more accurate |
| - MINOR: traces: add a new level "error" below the "user" level |
| - MINOR: mux-h2/trace: add traces at level ERROR for protocol errors |
| - BUG/MINOR: mux-h2/stats: not all GOAWAY frames are errors |
| - BUG/MINOR: lua: missing "\n" in error message |
| - BUG/MINOR: lua: lua-load doesn't check its parameters |
| - BUG/MINOR: lua: Post init register function are not executed beyond the first one |
| - BUG/MINOR: lua: Some lua init operation are processed unsafe |
| - MINOR: actions: Export actions lookup functions |
| - MINOR: actions: add a function returning a service pointer from its name |
| - MINOR: cli: add a function to look up a CLI service description |
| - BUG/MINOR: lua: warn when registering action, conv, sf, cli or applet multiple times |
| - MINOR: cache: Improve accept_encoding_normalizer |
| - MINOR: cache: Add entry to the tree as soon as possible |
| - BUG/MINOR: trace: Wrong displayed trace level |
| - BUG/MAJOR: ring: tcp forward on ring can break the reader counter. |
| - MINOR: lua: simplify hlua_alloc() to only rely on realloc() |
| - MEDIUM: lua-thread: use atomics for memory accounting |
| - MINOR: lua-thread: remove struct hlua from function hlua_prepend_path() |
| - MEDIUM: lua-thread: make hlua_post_init() no longer use the runtime execution function |
| - MINOR: lua-thread: hlua_ctx_renew() is never called with main gL lua state |
| - MINOR: lua-thread: Use NULL context for main lua state |
| - MINOR: lua-thread: Stop usage of struct hlua for the global lua state |
| - MINOR: lua-thread: Replace embedded struct hlua_function by a pointer |
| - MINOR: lua-thread: Split hlua_init() function in two parts |
| - MINOR: lua-thread: make hlua_ctx_init() get L from its caller |
| - MINOR: lua-thread: Split hlua_load function in two parts |
| - MINOR: lua-thread: Split hlua_post_init() function in two parts |
| - MINOR: lua-thread: Add the "thread" core variable |
| - MEDIUM: lua-thread: No longer use locked context in initialization parts |
| - MEDIUM: lua-thread: Apply lock only if the parent state is the main thread |
| - MINOR: lua-thread: Replace global gL var with an array of states |
| - MINOR: lua-thread: Replace "struct hlua_function" allocation by dedicated function |
| - MINOR: lua-thread: Replace state_from by state_id |
| - MINOR: lua-thread: Store each function reference and init reference in array |
| - MEDIUM: lua-thread: Add the lua-load-per-thread directive |
| - MINOR: lua-thread: Add verbosity in errors |
| - REGTESTS: add a test for the threaded Lua code |
| - BUILD/MINOR: haproxy DragonFlyBSD affinity build update. |
| - DOC/MINOR: Fix formatting in Management Guide |
| - MINOR: cache: Do not store stale entry |
| - MINOR: cache: Add extra "cache-control" value checks |
| - MEDIUM: cache: Remove cache entry in case of POST on the same resource |
| - MINOR: cache: Consider invalid Age values as stale |
| - BUG/MEDIUM: lua-thread: some parts must be initialized once |
| - BUG/MINOR: lua-thread: close all states on deinit |
| - BUG/MINOR: listener: use sockaddr_in6 for IPv6 |
| - BUG/MINOR: mux-h1: Handle keep-alive timeout for idle frontend connections |
| - MINOR: session: Add the idle duration field into the session |
| - MINOR: mux-h1: Update session idle duration when data are received |
| - MINOR: mux-h1: Reset session dates and durations info when the CS is detached |
| - MINOR: logs: Use session idle duration when no stream is provided |
| - MINOR: stream: Always get idle duration from the session |
| - MINOR: stream: Don't retrieve anymore timing info from the mux csinfo |
| - MINOR: mux-h1: Don't provide anymore timing info using cs_info structure |
| - MINOR: muxes: Remove get_cs_info callback function now useless |
| - MINOR: stream: Pass an optional input buffer when a stream is created |
| - MINOR: mux-h1: Add a flag to disable reads to wait opposite side |
| - MEDIUM: mux-h1: Use a h1c flag to block reads when splicing is in-progress |
| - MINOR: mux-h1: Introduce H1C_F_IS_BACK flag on the H1 connection |
| - MINOR: mux-h1: Separate parsing and formatting errors at H1 stream level |
| - MINOR: mux-h1: Split front/back h1 stream creation in 2 functions |
| - MINOR: mux-h1: Add a rxbuf into the H1 stream |
| - MINOR: mux-h1: Don't set CS flags in internal parsing functions |
| - MINOR: mux-h1: Add embryonic and attached states on the H1 connection |
| - MINOR: mux-h1: rework the h1_timeout_task() function |
| - MINOR: mux-h1: Reset more H1C flags when a H1 stream is destroyed |
| - MINOR: mux-h1: Disable reads if an error was reported on the H1 stream |
| - MINOR: mux-h1: Rework how shutdowns are handled |
| - MINOR: mux-h1: Rework h1_refresh_timeout to be easier to read |
| - MINOR: mux-h1: Process next request for IDLE connection only |
| - MINOR: mux-h1: Add a idle expiration date on the H1 connection |
| - MINOR: stick-tables: Add functions to update some values of a tracked counter |
| - MINOR: session: Add functions to increase http values of tracked counters |
| - MINOR: mux: Add a ctl parameter to get the exit status of the multiplexers |
| - MINOR: logs: Get the multiplexer exist status when no stream is provided |
| - MINOR: mux-h1: Add functions to send HTTP errors from the mux |
| - MAJOR: mux-h1: Create the client stream as later as possible |
| - DOC: config: Add notes about errors emitted by H1 mux |
| - CLEANUP: mux-h1: Rename H1C_F_CS_* flags and reorder H1C flags |
| - MINOR: http-ana: Remove useless update of t_idle duration of the stream |
| - CLEANUP: htx: Remove HTX_FL_UPGRADE unsued flag |
| - MEDIUM: http-ana: Don't process partial or empty request anymore |
| - CLEANUP: http-ana: Remove TX_WAIT_NEXT_RQ unsued flag |
| - CLEANUP: connection: Remove CS_FL_READ_PARTIAL flag |
| - REGTESTS: Fix proxy_protocol_tlv_validation |
| - MINOR: http-ana: Properly set message flags from the start-line flags |
| - MINOR: h1-htx/http-ana: Set BODYLESS flag on message in TUNNEL state |
| - MINOR: protocol: add a ->set_port() helper to address families |
| - MINOR: listener: automatically set the port when creating listeners |
| - MINOR: listener: now use a generic add_listener() function |
| - MEDIUM: ssl: fatal error with bundle + openssl < 1.1.1 |
| - BUG/MEDIUM: stream: Xfer the input buffer to a fully created stream |
| - BUG/MINOR: stream: Don't use input buffer after the ownership xfer |
| - MINOR: protocol: remove the redundant ->sock_domain field |
| - MINOR: protocol: export protocol definitions |
| - CLEANUP: protocol: group protocol struct members by usage |
| - MINOR: protocol: add a set of ctrl_init/ctrl_close methods for setup/teardown |
| - MINOR: connection: use the control layer's init/close |
| - MINOR: udp: export udp_suspend_receiver() and udp_resume_receiver() |
| - BUG/MAJOR: spoa/python: Fixing return None |
| - DOC: spoa/python: Fixing typo in IP related error messages |
| - DOC: spoa/python: Rephrasing memory related error messages |
| - DOC: spoa/python: Fixing typos in comments |
| - BUG/MINOR: spoa/python: Cleanup references for failed Module Addobject operations |
| - BUG/MINOR: spoa/python: Cleanup ipaddress objects if initialization fails |
| - BUG/MEDIUM: spoa/python: Fixing PyObject_Call positional arguments |
| - BUG/MEDIUM: spoa/python: Fixing references to None |
| - DOC: email change of the DeviceAtlas maintainer |
| - MINOR: cache: Dump secondary entries in "show cache" |
| - CLEANUP: connection: use fd_stop_both() instead of conn_stop_polling() |
| - MINOR: stream-int: don't touch polling anymore on shutdown |
| - MINOR: connection: implement cs_drain_and_close() |
| - MINOR: mux-pt: take care of CS_SHR_DRAIN in shutr() |
| - MINOR: checks: use cs_drain_and_close() instead of draining the connection |
| - MINOR: checks: don't call conn_cond_update_polling() anymore |
| - CLEANUP: connection: open-code conn_cond_update_polling() and update the comment |
| - CLEANUP: connection: remove the unused conn_{stop,cond_update}_polling() |
| - BUG/MINOR: http-check: Use right condition to consider HTX message as full |
| - BUG/MINOR: tcpcheck: Don't rearm the check timeout on each read |
| - MINOR: tcpcheck: Only wait for more payload data on HTTP expect rules |
| - BUG/MINOR: tools: make parse_time_err() more strict on the timer validity |
| - BUG/MINOR: tools: Reject size format not starting by a digit |
| - MINOR: action: define enum for timeout type of the set-timeout rule |
| - MINOR: stream: prepare the hot refresh of timeouts |
| - MEDIUM: stream: support a dynamic server timeout |
| - MEDIUM: stream: support a dynamic tunnel timeout |
| - MEDIUM: http_act: define set-timeout server/tunnel action |
| - MINOR: frontend: add client timeout sample fetch |
| - MINOR: backend: add timeout sample fetches |
| - MINOR: stream: add sample fetches |
| - MINOR: stream: add timeout sample fetches |
| - REGTESTS: add regtest for http-request set-timeout |
| - CLEANUP: remove the unused fd_stop_send() in conn_xprt_shutw{,_hard}() |
| - CLEANUP: connection: remove the unneeded fd_stop_{recv,send} on read0/shutw |
| - MINOR: connection: remove sock-specific code from conn_sock_send() |
| - REORG: connection: move the socket iocb (conn_fd_handler) to sock.c |
| - MINOR: protocol: add a ->drain() function at the connection control layer |
| - MINOR: connection: make conn_sock_drain() use the control layer's ->drain() |
| - MINOR: protocol: add a pair of check_events/ignore_events functions at the ctrl layer |
| - MEDIUM: connection: make use of the control layer check_events/ignore_events |
| |
| 2020/12/01 : 2.4-dev2 |
| - BUILD: Make DEBUG part of .build_opts |
| - BUILD: Show the value of DEBUG= in haproxy -vv |
| - CI: Set DEBUG=-DDEBUG_STRICT=1 in GitHub Actions |
| - MINOR: stream: Add level 7 retries on http error 401, 403 |
| - CLEANUP: remove unused function "ssl_sock_is_ckch_valid" |
| - BUILD: SSL: add BoringSSL guarding to "RAND_keep_random_devices_open" |
| - BUILD: SSL: do not "update" BoringSSL version equivalent anymore |
| - BUG/MEDIUM: http_act: Restore init of log-format list |
| - DOC: better describes how to configure a fallback crt |
| - BUG/MAJOR: filters: Always keep all offsets up to date during data filtering |
| - MINOR: cache: Prepare helper functions for Vary support |
| - MEDIUM: cache: Add the Vary header support |
| - MINOR: cache: Add a process-vary option that can enable/disable Vary processing |
| - BUG/CRITICAL: cache: Fix trivial crash by sending accept-encoding header |
| - BUG/MAJOR: peers: fix partial message decoding |
| - DOC: cache: Add new caching limitation information |
| - DOC: cache: Add information about Vary support |
| - DOC: better document the config file format and escaping/quoting rules |
| - DOC: Clarify %HP description in log-format |
| - CI: github actions: update LibreSSL to 3.3.0 |
| - CI: github actions: enable 51degrees feature |
| - MINOR: fd/threads: silence a build warning with threads disabled |
| - BUG/MINOR: tcpcheck: Don't forget to reset tcp-check flags on new kind of check |
| - MINOR: tcpcheck: Don't handle anymore in-progress send rules in tcpcheck_main |
| - BUG/MAJOR: tcpcheck: Allocate input and output buffers from the buffer pool |
| - MINOR: tcpcheck: Don't handle anymore in-progress connect rules in tcpcheck_main |
| - MINOR: config: Deprecate and ignore tune.chksize global option |
| - MINOR: config: Add a warning if tune.chksize is used |
| - REORG: tcpcheck: Move check option parsing functions based on tcp-check |
| - MINOR: check: Always increment check health counter on CONPASS |
| - MINOR: tcpcheck: Add support of L7OKC on expect rules error-status argument |
| - DOC: config: Make disable-on-404 option clearer on transition conditions |
| - DOC: config: Move req.hdrs and req.hdrs_bin in L7 samples fetches section |
| - BUG/MINOR: http-fetch: Fix smp_fetch_body() when called from a health-check |
| - MINOR: plock: use an ARMv8 instruction barrier for the pause instruction |
| - MINOR: debug: add "debug dev sched" to stress the scheduler. |
| - MINOR: debug: add a trivial PRNG for scheduler stress-tests |
| - BUG/MEDIUM: lists: Lock the element while we check if it is in a list. |
| - MINOR: task: remove tasklet_insert_into_tasklet_list() |
| - MINOR: task: perform atomic counter increments only once per wakeup |
| - MINOR: task: remove __tasklet_remove_from_tasklet_list() |
| - BUG/MEDIUM: task: close a possible data race condition on a tasklet's list link |
| - BUG/MEDIUM: local log format regression. |
| |
| 2020/11/21 : 2.4-dev1 |
| - MINOR: ist: Add istend() function to return a pointer to the end of the string |
| - MINOR: sample: Add converters to parse FIX messages |
| - REGTEST: converter: Add a regtest for fix converters |
| - MINOR: sample: Add converts to parses MQTT messages |
| - REGTEST: converter: Add a regtest for MQTT converters |
| - MINOR: compat: automatically include malloc.h on glibc |
| - MEDIUM: pools: call malloc_trim() from pool_gc() |
| - MEDIUM: pattern: call malloc_trim() on pat_ref_reload() |
| - MINOR: pattern: move the update revision to the pat_ref, not the expression |
| - CLEANUP: pattern: delete the back refs at once during pat_ref_reload() |
| - MINOR: pattern: new sflag PAT_SF_REGFREE indicates regex_free() is needed |
| - MINOR: pattern: make the delete and prune functions more generic |
| - MEDIUM: pattern: link all final elements from the reference |
| - MEDIUM: pattern: change the pat_del_* functions to delete from the references |
| - MINOR: pattern: remerge the list and tree deletion functions |
| - MINOR: pattern: perform a single call to pat_delete_gen() under the expression |
| - CLEANUP: acl: don't reference the generic pattern deletion function anymore |
| - CLEANUP: pattern: remove pat_delete_fcts[] and pattern_head->delete() |
| - MINOR: pattern: introduce pat_ref_delete_by_ptr() to delete a valid reference |
| - MINOR: pattern: store a generation number in the reference patterns |
| - MEDIUM: pattern: only match patterns that match the current generation |
| - MINOR: pattern: add pat_ref_commit() to commit a previously inserted element |
| - MINOR: pattern: implement pat_ref_load() to load a pattern at a given generation |
| - MINOR: pattern: add pat_ref_purge_older() to purge old entries |
| - MEDIUM: pattern: make pat_ref_prune() rely on pat_ref_purge_older() |
| - MINOR: pattern: during reload, delete elements frem the ref, not the expression |
| - MINOR: pattern: prepare removal of a pattern from the list head |
| - MEDIUM: pattern: turn the pattern chaining to single-linked list |
| - CLEANUP: cfgparse: remove duplicate registration for transparent build options |
| - BUG/MINOR: ssl: don't report 1024 bits DH param load error when it's higher |
| - MINOR: http-htx: Add understandable errors for the errorfiles parsing |
| - MINOR: ssl: instantiate stats module |
| - MINOR: ssl: count client hello for stats |
| - MINOR: ssl: add counters for ssl sessions |
| - DOC: config: Fix a typo on ssl_c_chain_der |
| - MINOR: server: remove idle lock in srv_cleanup_connections |
| - BUILD: ssl: silence build warning on uninitialised counters |
| - BUILD: http-htx: fix build warning regarding long type in printf |
| - REGTEST: ssl: test wildcard and multi-type + exclusions |
| - BUG/MEDIUM: ssl/crt-list: correctly insert crt-list line if crt already loaded |
| - CI: Expand use of GitHub Actions for CI |
| - REGTEST: ssl: mark reg-tests/ssl/ssl_crt-list_filters.vtc as broken |
| - BUG/MINOR: pattern: a sample marked as const could be written |
| - BUG/MINOR: lua: set buffer size during map lookups |
| - MEDIUM: cache: Change caching conditions |
| - BUG/MINOR: stats: free dynamically stats fields/lines on shutdown |
| - BUG/MEDIUM: stats: prevent crash if counters not alloc with dummy one |
| - MINOR: peers: Add traces to peer_treat_updatemsg(). |
| - BUG/MINOR: peers: Do not ignore a protocol error for dictionary entries. |
| - BUG/MINOR: peers: Missing TX cache entries reset. |
| - BUG/MEDIUM: peers: fix decoding of multi-byte length in stick-table messages |
| - BUG/MINOR: http-fetch: Extract cookie value even when no cookie name |
| - BUG/MINOR: http-fetch: Fix calls w/o parentheses of the cookie sample fetches |
| - BUG/MEDIUM: check: reuse srv proto only if using same mode |
| - MINOR: check: report error on incompatible proto |
| - MINOR: check: report error on incompatible connect proto |
| - BUG/MINOR: http-htx: Handle warnings when parsing http-error and http-errors |
| - BUG/MAJOR: spoe: Be sure to remove all references on a released spoe applet |
| - MINOR: spoe: Don't close connection in sync mode on processing timeout |
| - BUG/MINOR: tcpcheck: Don't warn on unused rules if check option is after |
| - MINOR: init: Fix the prototype for per-thread free callbacks |
| - MINOR: config/mux-h2: Return ERR_ flags from init_h2() instead of a status |
| - CLEANUP: config: Return ERR_NONE from config callbacks instead of 0 |
| - MINOR: cfgparse: tighten the scope of newnameserver variable, free it on error. |
| - REGTEST: make ssl_client_samples and ssl_server_samples require to 2.2 |
| - REGTESTS: Add sample_fetches/cook.vtc |
| - BUG/MEDIUM: filters: Forward all filtered data at the end of http filtering |
| - BUG/MINOR: http-ana: Don't wait for the body of CONNECT requests |
| - CLEANUP: flt-trace: Remove unused random-parsing option |
| - MINOR: flt-trace: Add an option to inhibits trace messages |
| - MINOR: flt-trace: Use a bitfield for the trace options |
| - REGTESTS: Add a script to test the random forwarding with several filters |
| - REGTESTS: mark the abns test as broken again |
| - REGTESTS: converter: add url_dec test |
| - CI: Stop hijacking the hosts file |
| - CI: Make the h2spec workflow more consistent with the VTest workflow |
| - CI: travis-ci: remove amd64, osx builds |
| - CI: travis-ci: arm64 are not allowed to fail anymore |
| - DOC: add missing 3.10 in the summary |
| - MINOR: ssl: remove client hello counters |
| - MEDIUM: stats: add counters for failed handshake |
| - MINOR: ssl: create common ssl_ctx init |
| - MEDIUM: cli/ssl: configure ssl on server at runtime |
| - REGTEST: server/cli_set_ssl.vtc requires OpenSSL |
| - DOC: coding-style: update a few rules about pointers |
| - BUG/MINOR: ssl: segv on startup when AKID but no keyid |
| - BUILD: ssl: use SSL_MODE_ASYNC macro instead of OPENSSL_VERSION |
| - BUG/MEDIUM: http-ana: Don't eval http-after-response ruleset on empty messages |
| - BUG/MEDIUM: ssl/crt-list: bundle support broken in crt-list |
| - BUG/MEDIUM: ssl: error when no certificate are found |
| - BUG/MINOR: ssl/crt-list: load bundle in crt-list only if activated |
| - BUG/MEDIUM: ssl/crt-list: fix error when no file found |
| - CI: Github Actions: enable prometheus exporter |
| - CI: Github Actions: remove LibreSSL-3.0.2 builds |
| - CI: Github Actions: enable BoringSSL builds |
| - CI: travis-ci: remove builds migrated to GH actions |
| - BUILD: makefile: enable crypt(3) for OpenBSD |
| - CI: Github Action: run "apt-get update" before packages restore |
| - BUILD: SSL: guard TLS13 ciphersuites with HAVE_SSL_CTX_SET_CIPHERSUITES |
| - CI: Pass the github.event_name to matrix.py |
| - CI: Clean up Windows CI |
| - DOC: clarify how to create a fallback crt |
| - CLEANUP: connection: do not use conn->owner when the session is known |
| - BUG/MAJOR: connection: reset conn->owner when detaching from session list |
| - REGTESTS: mark proxy_protocol_random_fail as broken |
| - BUG/MINOR: http_htx: Fix searching headers by substring |
| - MINOR: http_act: Add -m flag for del-header name matching method |
| |
| 2020/11/05 : 2.4-dev0 |
| - MINOR: version: it's development again. |
| - DOC: mention in INSTALL that it's development again |
| |
| 2020/11/05 : 2.3.0 |
| - CLEANUP: pattern: remove unused entry "tree" in pattern.val |
| - BUILD: ssl: use SSL_CTRL_GET_RAW_CIPHERLIST instead of OpenSSL versions |
| - BUG/MEDIUM: filters: Don't try to init filters for disabled proxies |
| - BUG/MINOR: proxy/server: Skip per-proxy/server post-check for disabled proxies |
| - BUG/MINOR: checks: Report a socket error before any connection attempt |
| - BUG/MINOR: server: Set server without addr but with dns in RMAINT on startup |
| - MINOR: server: Copy configuration file and line for server templates |
| - BUG/MEDIUM: mux-pt: Release the tasklet during an HTTP upgrade |
| - BUILD: ssl: use HAVE_OPENSSL_KEYLOG instead of OpenSSL versions |
| - MINOR: debug: don't count free(NULL) in memstats |
| - BUG/MINOR: filters: Skip disabled proxies during startup only |
| - MINOR: mux_h2: capitalize frame type in stats |
| - MINOR: mux_h2: add stat for total count of connections/streams |
| - MINOR: stats: do not display empty stat module title on html |
| - BUG/MEDIUM: stick-table: limit the time spent purging old entries |
| - BUG/MEDIUM: listener: only enable a listening listener if needed |
| - BUG/MEDIUM: listener: never suspend inherited sockets |
| - BUG/MEDIUM: listener: make the master also keep workers' inherited FDs |
| - MINOR: fd: add fd_want_recv_safe() |
| - MEDIUM: listeners: make use of fd_want_recv_safe() to enable early receivers |
| - REGTESTS: mark abns_socket as working now |
| - CLEANUP: mux-h2: Remove the h1 parser state from the h2 stream |
| - MINOR: sock: add a check against cross worker<->master socket activities |
| - CI: github actions: limit OpenSSL no-deprecated builds to "default,bug,devel" reg-tests |
| - BUG/MEDIUM: server: make it possible to kill last idle connections |
| - MINOR: mworker/cli: the master CLI use its own applet |
| - MINOR: ssl: define SSL_CTX_set1_curves_list to itself on BoringSSL |
| - BUILD: ssl: use feature macros for detecting ec curves manipulation support |
| - DOC: Add dns as an available domain to show stat |
| - BUILD: makefile: usual reorder of objects for faster builds |
| - DOC: update INSTALL to mention that TCC is supported |
| - DOC: mention in INSTALL that haproxy 2.3 is a stable version |
| - MINOR: version: mention that it's stable now |
| |
| 2020/10/31 : 2.3-dev9 |
| - CLEANUP: http_ana: remove unused assignation of `att_beg` |
| - BUG/MEDIUM: ssl: OCSP must work with BoringSSL |
| - BUG/MINOR: log: fix memory leak on logsrv parse error |
| - BUG/MINOR: log: fix risk of null deref on error path |
| - BUILD: ssl: more elegant OpenSSL early data support check |
| - CI: github actions: update h2spec to 2.6.0 |
| - BUG/MINOR: cache: Check the return value of http_replace_res_status |
| - MINOR: cache: Store the "Last-Modified" date in the cache_entry |
| - MINOR: cache: Process the If-Modified-Since header in conditional requests |
| - MINOR: cache: Create res.cache_hit and res.cache_name sample fetches |
| - MINOR: mux-h2: register a stats module |
| - MINOR: mux-h2: add counters instance to h2c |
| - MINOR: mux-h2: add stats for received frame types |
| - MINOR: mux-h2: report detected error on stats |
| - MINOR: mux-h2: count open connections/streams on stats |
| - BUG/MINOR: server: fix srv downtime calcul on starting |
| - BUG/MINOR: server: fix down_time report for stats |
| - BUG/MINOR: lua: initialize sample before using it |
| - MINOR: cache: Add Expires header value parsing |
| - MINOR: ist: Add a case insensitive istmatch function |
| - BUG/MINOR: cache: Manage multiple values in cache-control header value |
| - BUG/MINOR: cache: Inverted variables in http_calc_maxage function |
| - MINOR: pattern: make pat_ref_append() return the newly added element |
| - MINOR: pattern: make pat_ref_add() rely on pat_ref_append() |
| - MINOR: pattern: export pat_ref_push() |
| - CLEANUP: pattern: use calloc() rather than malloc for structures |
| - CLEANUP: pattern: fix spelling/grammatical/copy-paste in comments |
| |
| 2020/10/24 : 2.3-dev8 |
| - MINOR: backend: replace the lbprm lock with an rwlock |
| - MINOR: lb/map: use seek lock and read locks where appropriate |
| - MINOR: lb/leastconn: only take a read lock in fwlc_get_next_server() |
| - MINOR: lb/first: use a read lock in fas_get_next_server() |
| - MINOR: lb/chash: use a read lock in chash_get_server_hash() |
| - BUG/MINOR: disable dynamic OCSP load with BoringSSL |
| - BUILD: ssl: make BoringSSL use its own version numbers |
| - CLEANUP: threads: don't register an initcall when not debugging |
| - MINOR: threads: change lock_t to an unsigned int |
| - CLEANUP: tree-wide: reorder a few structures to plug some holes around locks |
| - CLEANUP: task: remove the unused and mishandled global_rqueue_size |
| - BUG/MEDIUM: connection: Never cleanup server lists when freeing private conns |
| - MEDIUM: config: report that "nbproc" is deprecated |
| - BUG/MINOR: listener: close before free in `listener_accept` |
| - MINOR: ssl: 'ssl-load-extra-del-ext' removes the certificate extension |
| - BUG/MINOR: queue: properly report redistributed connections |
| - CONTRIB: tcploop: remove unused local variables in tcp_pause() |
| - BUILD: makefile: add entries to build common debugging tools |
| - BUG/MEDIUM: server: support changing the slowstart value from state-file |
| - MINOR: http: Add `enum etag_type http_get_etag_type(const struct ist)` |
| - MINOR: http: Add etag comparison function |
| - MEDIUM: cache: Store the ETag information in the cache_entry |
| - MEDIUM: cache: Add support for 'If-None-Match' request header |
| - REGTEST: cache: Add if-none-match test case |
| - CLEANUP: compression: Make use of http_get_etag_type() |
| - BUG/MINOR: http-ana: Don't send payload for internal responses to HEAD requests |
| - BUG/MAJOR: mux-h2: Don't try to send data if we know it is no longer possible |
| - MINOR: threads/debug: only report used lock stats |
| - MINOR: threads/debug: only report lock stats for used operations |
| - MINOR: proxy; replace the spinlock with an rwlock |
| - MINOR: server: read-lock the cookie during srv_set_dyncookie() |
| - MINOR: proxy/cli: only take a read lock in "show errors" |
| - OPTIM: queue: don't call pendconn_unlink() when the pendconn is not queued |
| - MINOR: queue: split __pendconn_unlink() in per-srv and per-prx |
| - MINOR: queue: reduce the locked area in pendconn_add() |
| - OPTIM: queue: make the nbpend counters atomic |
| - OPTIM: queue: decrement the nbpend and totpend counters outside of the lock |
| - MINOR: leastconn: take the queue length into account when queuing servers |
| - MEDIUM: fwlc: re-enable per-server queuing up to maxqueue |
| - Revert "OPTIM: queue: don't call pendconn_unlink() when the pendconn is not queued" |
| - MINOR: stats: support the "up" output modifier for "show stat" |
| - MINOR: stats: also support a "no-maint" show stat modifier |
| - MINOR: stats: indicate the number of servers in a backend's status |
| - MEDIUM: ssl: ssl-load-extra-del-ext work only with .crt |
| - REGTEST: ssl: test "set ssl cert" with separate key / crt |
| - DOC: management: apply the "show stat" modifiers to "show stat", not "show info" |
| - MINOR: stats: report server's user-configured weight next to effective weight |
| - CI: travis-ci: switch to Ubuntu 20.04 |
| - CONTRIB: release-estimator: Add release estimating tool |
| - BUG/MEDIUM: queue: fix unsafe proxy pointer when counting nbpend |
| - BUG/MINOR: extcheck: add missing checks on extchk_setenv() |
| |
| 2020/10/17 : 2.3-dev7 |
| - CI: travis-ci: replace not defined SSL_LIB, SSL_INC for BotringSSL builds |
| - BUG/MINOR: init: only keep rlim_fd_cur if max is unlimited |
| - BUG/MINOR: mux-h2: do not stop outgoing connections on stopping |
| - MINOR: fd: report an error message when failing initial allocations |
| - MINOR: proto-tcp: make use of connect(AF_UNSPEC) for the pause |
| - MINOR: sock: add sock_accept_conn() to test a listening socket |
| - MINOR: protocol: make proto_tcp & proto_uxst report listening sockets |
| - MINOR: sockpair: implement the .rx_listening function |
| - CLEANUP: tcp: make use of sock_accept_conn() where relevant |
| - CLEANUP: unix: make use of sock_accept_conn() where relevant |
| - BUG/MINOR: listener: detect and handle shared sockets stopped in other processes |
| - CONTRIB: tcploop: implement a disconnect operation 'D' |
| - CLEANUP: protocol: intitialize all of the sockaddr when disconnecting |
| - BUG/MEDIUM: deinit: check fdtab before fdtab[fd].owner |
| - BUG/MINOR: connection: fix loop iter on connection takeover |
| - BUG/MEDIUM: connection: fix srv idle count on conn takeover |
| - MINOR: connection: improve list api usage |
| - MINOR: mux/connection: add a new mux flag for HOL risk |
| - MINOR: connection: don't check priv flag on free |
| - MEDIUM: backend: add new conn to session if mux marked as HOL blocking |
| - MEDIUM: backend: add reused conn to sess if mux marked as HOL blocking |
| - MEDIUM: h2: remove conn from session on detach |
| - MEDIUM: fcgi: remove conn from session on detach |
| - DOC: Describe reuse safe for HOL handling |
| - MEDIUM: proxy: remove obsolete "mode health" |
| - MEDIUM: proxy: remove obsolete "monitor-net" |
| - CLEANUP: protocol: remove the ->drain() function |
| - CLEANUP: fd: finally get rid of fd_done_recv() |
| - MINOR: connection: make sockaddr_alloc() take the address to be copied |
| - MEDIUM: listener: allocate the connection before queuing a new connection |
| - MINOR: session: simplify error path in session_accept_fd() |
| - MINOR: connection: add new error codes for accept_conn() |
| - MINOR: sock: rename sock_accept_conn() to sock_accepting_conn() |
| - MINOR: protocol: add a new function accept_conn() |
| - MINOR: sock: implement sock_accept_conn() to accept a connection |
| - MINOR: sockpair: implement sockpair_accept_conn() to accept a connection |
| - MEDIUM: listener: use protocol->accept_conn() to accept a connection |
| - MEDIUM: listener: remove the second pass of fd manipulation at the end |
| - MINOR: protocol: add a default I/O callback and put it into the receiver |
| - MINOR: log: set the UDP receiver's I/O handler in the receiver |
| - MINOR: protocol: register the receiver's I/O handler and not the protocol's |
| - CLEANUP: protocol: remove the now unused <handler> field of proto_fam->bind() |
| - DOC: improve the documentation for "option nolinger" |
| - BUG/MEDIUM: proxy: properly stop backends |
| - BUG/MEDIUM: task: bound the number of tasks picked from the wait queue at once |
| - MINOR: threads: augment rwlock debugging stats to report seek lock stats |
| - MINOR: threads: add the transitions to/from the seek state |
| - MEDIUM: task: use an upgradable seek lock when scanning the wait queue |
| - BUILD: listener: avoir a build warning when threads are disabled |
| - BUG/MINOR: peers: Possible unexpected peer seesion reset after collisions. |
| - MINOR: ssl: add volatile flags to ssl samples |
| - MEDIUM: backend: reuse connection if using a static sni |
| - BUG/MEDIUM: spoe: Unset variable instead of set it if no data provided |
| - BUG/MEDIUM: mux-h1: Get the session from the H1S when capturing bad messages |
| - BUG/MEDIUM: lb: Always lock the server when calling server_{take,drop}_conn |
| - DOC: fix typo in MAX_SESS_STKCTR |
| |
| 2020/10/10 : 2.3-dev6 |
| - REGTESTS: use "command" instead of "which" for better POSIX compatibility |
| - BUILD: makefile: Update feature flags for OpenBSD |
| - DOC: agent-check: fix typo in "fail" word expected reply |
| - DOC: crt: advise to move away from cert bundle |
| - BUG/MINOR: ssl/crt-list: exit on warning out of crtlist_parse_line() |
| - REGTEST: fix host part in balance-uri-path-only.vtc |
| - REGTEST: make ssl_client_samples and ssl_server_samples requiret to 2.3 |
| - REGTEST: the iif converter test requires 2.3 |
| - REGTEST: make agent-check.vtc require 1.8 |
| - REGTEST: make abns_socket.vtc require 1.8 |
| - REGTEST: make map_regm_with_backref require 1.7 |
| - BUILD: makefile: Update feature flags for FreeBSD |
| - OPTIM: backend/random: never queue on the server, always on the backend |
| - OPTIM: backend: skip LB when we know the backend is full |
| - BUILD: makefile: Fix building with closefrom() support enabled |
| - BUILD: makefile: add an EXTRAVERSION variable to ease local naming |
| - MINOR: tools: support for word expansion of environment in parse_line |
| - BUILD: tools: fix minor build issue on isspace() |
| - BUILD: makefile: Enable closefrom() support on Solaris |
| - CLEANUP: ssl: Use structured format for error line report during crt-list parsing |
| - MINOR: ssl: Add error if a crt-list might be truncated |
| - MINOR: ssl: remove uneeded check in crtlist_parse_file |
| - BUG/MINOR: Fix several leaks of 'log_tag' in init(). |
| - DOC: tcp-rules: Refresh details about L7 matching for tcp-request content rules |
| - MEDIUM: tcp-rules: Warn if a track-sc* content rule doesn't depend on content |
| - BUG/MINOR: tcpcheck: Set socks4 and send-proxy flags before the connect call |
| - DOC: ssl: new "cert bundle" behavior |
| - BUG/MEDIUM: queue: make pendconn_cond_unlink() really thread-safe |
| - CLEANUP: ssl: "bundle" is not an OpenSSL wording |
| - MINOR: counters: fix a typo in comment |
| - BUG/MINOR: stats: fix validity of the json schema |
| - REORG: stats: export some functions |
| - MINOR: stats: add stats size as a parameter for csv/json dump |
| - MINOR: stats: hide px/sv/li fields in applet struct |
| - REORG: stats: extract proxy json dump |
| - REORG: stats: extract proxies dump loop in a function |
| - MINOR: hlua: Display debug messages on stderr only in debug mode |
| - MINOR: stats: define the concept of domain for statistics |
| - MINOR: stats: define additional flag px cap on domain |
| - MEDIUM: stats: add delimiter for static proxy stats on csv |
| - MEDIUM: stats: define an API to register stat modules |
| - MEDIUM: stats: add abstract type to store counters |
| - MEDIUM: stats: integrate static proxies stats in new stats |
| - MINOR: stats: support clear counters for dynamic stats |
| - MINOR: stats: display extra proxy stats on the html page |
| - MINOR: stats: add config "stats show modules" |
| - MINOR: dns/stats: integrate dns counters in stats |
| - MINOR: stats: remove for loop declaration |
| - DOC: ssl: fix typo about ocsp files |
| - BUG/MINOR: peers: Inconsistency when dumping peer status codes. |
| - DOC: update INSTALL with supported OpenBSD / FreeBSD versions |
| - BUG/MINOR: proto_tcp: Report warning messages when listeners are bound |
| - CLEANUP: cache: Fix leak of cconf->c.name during config check |
| - CLEANUP: ssl: Release cached SSL sessions on deinit |
| - BUG/MINOR: mux-h1: Be sure to only set CO_RFL_READ_ONCE for the first read |
| - BUG/MINOR: mux-h1: Always set the session on frontend h1 stream |
| - MINOR: mux-h1: Don't wakeup the H1C when output buffer become available |
| - CLEANUP: sock-unix: Remove an unreachable goto clause |
| - BUG/MINOR: proxy: inc req counter on new syslog messages. |
| - BUG/MEDIUM: log: old processes with log foward section don't die on soft stop. |
| - MINOR: stats: inc req counter on listeners. |
| - MINOR: channel: new getword and getchar functions on channel. |
| - MEDIUM: log: syslog TCP support on log forward section. |
| - BUG/MINOR: proxy/log: frontend/backend and log forward names must differ |
| - DOC: re-work log forward bind statement documentation. |
| - DOC: fix a confusing typo on a regsub example |
| - BUILD: Add a DragonFlyBSD target |
| - BUG/MINOR: makefile: fix a tiny typo in the target list |
| - BUILD: makefile: Update feature flags for NetBSD |
| - CI: travis-ci: help Coverity to detect BUG_ON() as a real stop |
| - DOC: Add missing stats fields in the management doc |
| - BUG/MEDIUM: mux-fcgi: Don't handle pending read0 too early on streams |
| - BUG/MEDIUM: mux-h2: Don't handle pending read0 too early on streams |
| - DOC: Fix typos in configuration.txt |
| - BUG/MINOR: http: Fix content-length of the default 500 error |
| - BUG/MINOR: http-htx: Expect no body for 204/304 internal HTTP responses |
| - REGTESTS: mark abns_socket as broken |
| - MEDIUM: fd: always wake up one thread when enabling a foreing FD |
| - MEDIUM: listeners: don't bounce listeners management between queues |
| - MEDIUM: init: stop disabled proxies after initializing fdtab |
| - MEDIUM: listeners: make unbind_listener() converge if needed |
| - MEDIUM: deinit: close all receivers/listeners before scanning proxies |
| - MEDIUM: listeners: remove the now unused ZOMBIE state |
| - MINOR: listeners: do not uselessly try to close zombie listeners in soft_stop() |
| - CLEANUP: proxy: remove the first_to_listen hack in zombify_proxy() |
| - MINOR: listeners: introduce listener_set_state() |
| - MINOR: proxy: maintain per-state counters of listeners |
| - MEDIUM: proxy: remove the unused PR_STFULL state |
| - MEDIUM: proxy: remove the PR_STERROR state |
| - MEDIUM: proxy: remove state PR_STPAUSED |
| - MINOR: startup: don't rely on PR_STNEW to check for listeners |
| - CLEANUP: peers: don't use the PR_ST* states to mark enabled/disabled |
| - MEDIUM: proxy: replace proxy->state with proxy->disabled |
| - MEDIUM: proxy: remove start_proxies() |
| - MEDIUM: proxy: merge zombify_proxy() with stop_proxy() |
| - MINOR: listeners: check the current listener state in pause_listener() |
| - MINOR: listeners: check the current listener earlier state in resume_listener() |
| - MEDIUM: listener/proxy: make the listeners notify about proxy pause/resume |
| - MINOR: protocol: introduce protocol_{pause,resume}_all() |
| - MAJOR: signals: use protocol_pause_all() and protocol_resume_all() |
| - CLEANUP: proxy: remove the now unused pause_proxies() and resume_proxies() |
| - MEDIUM: proto_tcp: make the pause() more robust in multi-process |
| - BUG/MEDIUM: listeners: correctly report pause() errors |
| - MINOR: listeners: move fd_stop_recv() to the receiver's socket code |
| - CLEANUP: protocol: remove the ->disable_all method |
| - CLEANUP: listeners: remove unused disable_listener and disable_all_listeners |
| - MINOR: listeners: export enable_listener() |
| - MINOR: protocol: directly call enable_listener() from protocol_enable_all() |
| - CLEANUP: protocol: remove the ->enable_all method |
| - CLEANUP: listeners: remove the now unused enable_all_listeners() |
| - MINOR: protocol: rename the ->listeners field to ->receivers |
| - MINOR: protocol: replace ->pause(listener) with ->rx_suspend(receiver) |
| - MINOR: protocol: implement an ->rx_resume() method |
| - MINOR: listener: use the protocol's ->rx_resume() method when available |
| - MINOR: sock: provide a set of generic enable/disable functions |
| - MINOR: protocol: add a new pair of rx_enable/rx_disable methods |
| - MINOR: protocol: add a new pair of enable/disable methods for listeners |
| - MEDIUM: listeners: now use the listener's ->enable/disable |
| - MINOR: listeners: split delete_listener() in two versions |
| - MINOR: listeners: count unstoppable jobs on creation, not deletion |
| - MINOR: listeners: add a new stop_listener() function |
| - MEDIUM: proxy: make stop_proxy() now use stop_listener() |
| - MEDIUM: proxy: add mode PR_MODE_PEERS to flag peers frontends |
| - MEDIUM: proxy: centralize proxy status update and reporting |
| - MINOR: protocol: add protocol_stop_now() to instant-stop listeners |
| - MEDIUM: proxy: make soft_stop() stop most listeners using protocol_stop_now() |
| - MEDIUM: udp: implement udp_suspend() and udp_resume() |
| - MINOR: listener: add a few BUG_ON() statements to detect inconsistencies |
| - MEDIUM: listeners: always close master vs worker listeners |
| - BROKEN/MEDIUM: listeners: rework the unbind logic to make it idempotent |
| - MEDIUM: listener: let do_unbind_listener() decide whether to close or not |
| - CLEANUP: listeners: remove the do_close argument to unbind_listener() |
| - MINOR: listeners: move the LI_O_MWORKER flag to the receiver |
| - MEDIUM: receivers: add an rx_unbind() method in the protocols |
| - MINOR: listeners: split do_unbind_listener() in two |
| - MEDIUM: listeners: implement protocol level ->suspend/resume() calls |
| - MEDIUM: config: mark "grace" as deprecated |
| - MEDIUM: config: remove the deprecated and dangerous global "debug" directive |
| - BUG/MINOR: proxy: respect the proper format string in sig_pause/sig_listen |
| - MINOR: peers: heartbeat, collisions and handshake information for "show peers" command. |
| - BUILD: makefile: Enable getaddrinfo() on OS/X |
| |
| 2020/09/25 : 2.3-dev5 |
| - DOC: Fix typo in iif() example |
| - CLEANUP: Update .gitignore |
| - BUILD: introduce possibility to define ABORT_NOW() conditionally |
| - CI: travis-ci: help Coverity to recognize abort() |
| - BUG/MINOR: Fix type passed of sizeof() for calloc() |
| - CLEANUP: Do not use a fixed type for 'sizeof' in 'calloc' |
| - CLEANUP: tree-wide: use VAR_ARRAY instead of [0] in various definitions |
| - BUILD: connection: fix build on clang after the VAR_ARRAY cleanup |
| - BUG/MINOR: ssl: verifyhost is case sensitive |
| - BUILD: makefile: change default value of CC from gcc to cc |
| - CI: travis-ci: split asan step out of running tests |
| - BUG/MINOR: server: report correct error message for invalid port on "socks4" |
| - BUG/MEDIUM: ssl: Don't call ssl_sock_io_cb() directly. |
| - BUG/MINOR: ssl/crt-list: crt-list could end without a \n |
| - BUG/MINOR: log-forward: fail on unknown keywords |
| - MEDIUM: log-forward: use "dgram-bind" instead of "bind" for the listener |
| - BUG/MEDIUM: log-forward: always quit on parsing errors |
| - MEDIUM: ssl: remove bundle support in crt-list and directories |
| - MEDIUM: ssl/cli: remove support for multi certificates bundle |
| - MINOR: ssl: crtlist_dup_ssl_conf() duplicates a ssl_bind_conf |
| - MINOR: ssl: crtlist_entry_dup() duplicates a crtlist_entry |
| - MEDIUM: ssl: emulates the multi-cert bundles in the crtlist |
| - MEDIUM: ssl: emulate multi-cert bundles loading in standard loading |
| - CLEANUP: ssl: remove test on "multi" variable in ckch functions |
| - CLEANUP: ssl/cli: remove test on 'multi' variable in CLI functions |
| - CLEANUP: ssl: remove utility functions for bundle |
| - DOC: explain bundle emulation in configuration.txt |
| - BUILD: fix build with openssl < 1.0.2 since bundle removal |
| - BUG/MINOR: log: gracefully handle the "udp@" address format for log servers |
| - BUG/MINOR: dns: gracefully handle the "udp@" address format for nameservers |
| - MINOR: listener: create a new struct "settings" in bind_conf |
| - MINOR: listener: move bind_proc and bind_thread to struct settings |
| - MINOR: listener: move the interface to the struct settings |
| - MINOR: listener: move the network namespace to the struct settings |
| - REORG: listener: create a new struct receiver |
| - REORG: listener: move the listening address to a struct receiver |
| - REORG: listener: move the receiving FD to struct receiver |
| - REORG: listener: move the listener's proto to the receiver |
| - MINOR: listener: make sock_find_compatible_fd() check the socket type |
| - REORG: listener: move the receiver part to a new file |
| - MINOR: receiver: link the receiver to its settings |
| - MINOR: receiver: link the receiver to its owner |
| - MINOR: listener: prefer to retrieve the socket's settings via the receiver |
| - MINOR: receiver: add a receiver-specific flag to indicate the socket is bound |
| - MINOR: listener: move the INHERITED flag down to the receiver |
| - MINOR: receiver: move the FOREIGN and V6ONLY options from listener to settings |
| - MINOR: sock: make sock_find_compatible_fd() only take a receiver |
| - MINOR: protocol: rename the ->bind field to ->listen |
| - MINOR: protocol: add a new ->bind() entry to bind the receiver |
| - MEDIUM: sock_inet: implement sock_inet_bind_receiver() |
| - MEDIUM: tcp: make use of sock_inet_bind_receiver() |
| - MEDIUM: udp: make use of sock_inet_bind_receiver() |
| - MEDIUM: sock_unix: implement sock_unix_bind_receiver() |
| - MEDIUM: uxst: make use of sock_unix_bind_receiver() |
| - MEDIUM: sockpair: implement sockpair_bind_receiver() |
| - MEDIUM: proto_sockpair: make use of sockpair_bind_receiver() |
| - MEDIUM: protocol: explicitly start the receiver before the listener |
| - MEDIUM: protocol: do not call proto->bind() anymore from bind_listener() |
| - MINOR: protocol: add a new proto_fam structure for protocol families |
| - MINOR: protocol: retrieve the family-specific fields from the family |
| - CLEANUP: protocol: remove family-specific fields from struct protocol |
| - MINOR: protocol: add a real family for existing FDs |
| - CLEANUP: tools: make str2sa_range() less awful for fd@ and sockpair@ |
| - MINOR: tools: make str2sa_range() take more options than just resolve |
| - MINOR: tools: add several PA_O_PORT_* flags in str2sa_range() callers |
| - MEDIUM: tools: make str2sa_range() validate callers' port specifications |
| - MEDIUM: config: remove all checks for missing/invalid ports/ranges |
| - MINOR: tools: add several PA_O_* flags in str2sa_range() callers |
| - MINOR: listener: remove the inherited arg to create_listener() |
| - MINOR: tools: make str2sa_range() optionally return the fd |
| - MINOR: log: detect LOG_TARGET_FD from the fd and not from the syntax |
| - MEDIUM: tools: make str2sa_range() resolve pre-bound listeners |
| - MINOR: config: do not test an inherited socket again |
| - MEDIUM: tools: make str2sa_range() check for the sockpair's FD usability |
| - MINOR: tools: start to distinguish stream and dgram in str2sa_range() |
| - MEDIUM: tools: make str2sa_range() only report AF_CUST_UDP on listeners |
| - MINOR: tools: remove the central test for "udp" in str2sa_range() |
| - MINOR: cfgparse: add str2receiver() to parse dgram receivers |
| - MINOR: log-forward: use str2receiver() to parse the dgram-bind address |
| - MEDIUM: config: make str2listener() not accept datagram sockets anymore |
| - MINOR: listener: pass the chosen protocol to create_listeners() |
| - MINOR: tools: make str2sa_range() directly return the protocol |
| - MEDIUM: tools: make str2sa_range() check that the protocol has ->connect() |
| - MINOR: protocol: add the control layer type in the protocol struct |
| - MEDIUM: protocol: store the socket and control type in the protocol array |
| - MEDIUM: tools: make str2sa_range() use protocol_lookup() |
| - MEDIUM: proto_udp: replace last AF_CUST_UDP* with AF_INET* |
| - MINOR: tools: drop listener detection hack from str2sa_range() |
| - BUILD: sock_unix: add missing errno.h |
| - MINOR: sock_inet: report the errno string in binding errors |
| - MINOR: sock_unix: report the errno string in binding errors |
| - BUILD: sock_inet: include errno.h |
| - MINOR: h2/trace: also display the remaining frame length in traces |
| - BUG/MINOR: h2/trace: do not display "stream error" after a frame ACK |
| - BUG/MEDIUM: h2: report frame bits only for handled types |
| - BUG/MINOR: http-fetch: Don't set the sample type during the htx prefetch |
| - BUG/MINOR: Fix memory leaks cfg_parse_peers |
| - BUG/MINOR: config: Fix memory leak on config parse listen |
| - MINOR: backend: make the "whole" option of balance uri take only one bit |
| - MINOR: backend: add a new "path-only" option to "balance uri" |
| - REGTESTS: add a few load balancing tests |
| - BUG/MEDIUM: listeners: do not pause foreign listeners |
| - BUG/MINOR: listeners: properly close listener FDs |
| - BUILD: trace: include tools.h |
| |
| 2020/09/11 : 2.3-dev4 |
| - MINOR: hlua: Add error message relative to the Channel manipulation and HTTP mode |
| - BUG/MEDIUM: ssl: crt-list negative filters don't work |
| - DOC: overhauling github issue templates |
| - MEDIUM: cfgparse: Emit hard error on truncated lines |
| - DOC: cache: Use '<name>' instead of '<id>' in error message |
| - MINOR: cache: Reject duplicate cache names |
| - REGTEST: remove stray leading spaces in converteers_ref_cnt_never_dec.vtc |
| - MINOR: stats: prevent favicon.ico requests for stats page |
| - BUILD: tools: include auxv a bit later |
| - BUILD: task: work around a bogus warning in gcc 4.7/4.8 at -O1 |
| - MEDIUM: ssl: Support certificate chaining for certificate generation |
| - MINOR: ssl: Support SAN extension for certificate generation |
| - MINOR: tcp: don't try to set/clear v6only on inherited sockets |
| - BUG/MINOR: reload: detect the OS's v6only status before choosing an old socket |
| - MINOR: reload: determine the foreing binding status from the socket |
| - MEDIUM: reload: stop passing listener options along with FDs |
| - BUG/MEDIUM: ssl: fix ssl_bind_conf double free w/ wildcards |
| - MEDIUM: fd: replace usages of fd_remove() with fd_stop_both() |
| - CLEANUP: fd: remove fd_remove() and rename fd_dodelete() to fd_delete() |
| - MINOR: fd: add a new "exported" flag and use it for all regular listeners |
| - MEDIUM: reload: pass all exportable FDs, not just listeners |
| - DOC: add description of pidfile in master-worker mode |
| - BUG/MINOR: reload: do not fail when no socket is sent |
| - REORG: tcp: move TCP actions from proto_tcp.c to tcp_act.c |
| - CLEANUP: tcp: stop exporting smp_fetch_src() |
| - REORG: tcp: move TCP sample fetches from proto_tcp.c to tcp_sample.c |
| - REORG: tcp: move TCP bind/server keywords from proto_tcp.c to cfgparse-tcp.c |
| - REORG: unix: move UNIX bind/server keywords from proto_uxst.c to cfgparse-unix.c |
| - REORG: sock: start to move some generic socket code to sock.c |
| - MINOR: sock: introduce sock_inet and sock_unix |
| - MINOR: tcp/udp/unix: make use of proto->addrcmp() to compare addresses |
| - MINOR: sock_inet: implement sock_inet_get_dst() |
| - REORG: inet: replace tcp_is_foreign() with sock_inet_is_foreign() |
| - REORG: sock_inet: move v6only_default from proto_tcp.c to sock_inet.c |
| - REORG: sock_inet: move default_tcp_maxseg from proto_tcp.c |
| - REORG: listener: move xfer_sock_list to sock.{c,h}. |
| - MINOR: sock: add interface and namespace length to xfer_sock_list |
| - MINOR: sock: implement sock_find_compatible_fd() |
| - MINOR: sock_inet: move the IPv4/v6 transparent mode code to sock_inet |
| - REORG: sock: move get_old_sockets() from haproxy.c |
| - MINOR: sock: do not use LI_O_* in xfer_sock_list anymore |
| - MINOR: sock: distinguish dgram from stream types when retrieving old sockets |
| - BUILD: sock_unix: fix build issue with isdigit() |
| - BUG/MEDIUM: http-ana: Don't wait to send 1xx responses received from servers |
| - MINOR: http-htx: Add an option to eval query-string when the path is replaced |
| - BUG/MINOR: http-rules: Replace path and query-string in "replace-path" action |
| - MINOR: http-htx: Handle an optional reason when replacing the response status |
| - MINOR: contrib/spoa-server: allow MAX_FRAME_SIZE override |
| - BUG/MAJOR: contrib/spoa-server: Fix unhandled python call leading to memory leak |
| - BUG/MINOR: contrib/spoa-server: Ensure ip address references are freed |
| - BUG/MINOR: contrib/spoa-server: Do not free reference to NULL |
| - BUG/MINOR: contrib/spoa-server: Updating references to free in case of failure |
| - BUG/MEDIUM: contrib/spoa-server: Fix ipv4_address used instead of ipv6_address |
| - CLEANUP: http: silence a cppcheck warning in get_http_auth() |
| - REGTEST: increase some short timeouts to make tests more reliable |
| - BUG/MINOR: threads: work around a libgcc_s issue with chrooting |
| - BUILD: thread: limit the libgcc_s workaround to glibc only |
| - MINOR: protocol: do not call proto->bind_all() anymore |
| - MINOR: protocol: do not call proto->unbind_all() anymore |
| - CLEANUP: protocol: remove all ->bind_all() and ->unbind_all() functions |
| - MAJOR: init: start all listeners via protocols and not via proxies anymore |
| - BUG/MINOR: startup: haproxy -s cause 100% cpu |
| - Revert "BUG/MINOR: http-rules: Replace path and query-string in "replace-path" action" |
| - BUG/MEDIUM: doc: Fix replace-path action description |
| - MINOR: http-rules: Add set-pathq and replace-pathq actions |
| - MINOR: http-fetch: Add pathq sample fetch |
| - REGTEST: Add a test for request path manipulations, with and without the QS |
| - MINOR: Commit .gitattributes |
| - CLEANUP: Update .gitignore |
| - BUG/MEDIUM: dns: Don't store additional records in a linked-list |
| - BUG/MEDIUM: dns: Be sure to renew IP address for already known servers |
| - MINOR: server: Improve log message sent when server address is updated |
| - DOC: ssl-load-extra-files only applies to certificates on bind lines |
| - BUG/MINOR: auth: report valid crypto(3) support depending on build options |
| - BUG/MEDIUM: mux-h1: always apply the timeout on half-closed connections |
| - BUILD: threads: better workaround for late loading of libgcc_s |
| - BUILD: compiler: reserve the gcc version checks to the gcc compiler |
| - BUILD: compiler: workaround a glibc madness around __attribute__() |
| - BUILD: intops: on x86_64, the bswap instruction is called bswapq |
| - BUILD: trace: always have an argument before variadic args in macros |
| - BUILD: traces: don't pass an empty argument for missing ones |
| - BUG/MINOR: haproxy: Free uri_auth->scope during deinit |
| - CLEANUP: Free old_argv on deinit |
| - CLEANUP: haproxy: Free post_proxy_check_list in deinit() |
| - CLEANUP: haproxy: Free per_thread_*_list in deinit() |
| - CLEANUP: haproxy: Free post_check_list in deinit() |
| - BUG/MEDIUM: pattern: Renew the pattern expression revision when it is pruned |
| - REORG: tools: move PARSE_OPT_* from tools.h to tools-t.h |
| - MINOR: sample: Add iif(<true>,<false>) converter |
| |
| 2020/08/14 : 2.3-dev3 |
| - SCRIPTS: git-show-backports: make -m most only show the left branch |
| - SCRIPTS: git-show-backports: emit the shell command to backport a commit |
| - BUILD: Makefile: require SSL_LIB, SSL_INC to be explicitly set |
| - CI: travis-ci: specify SLZ_LIB, SLZ_INC for travis builds |
| - BUG/MEDIUM: mux-h1: Refresh H1 connection timeout after a synchronous send |
| - CLEANUP: dns: typo in reported error message |
| - BUG/MAJOR: dns: disabled servers through SRV records never recover |
| - BUG/MINOR: spoa-server: fix size_t format printing |
| - DOC: spoa-server: fix false friends `actually` |
| - BUG/MINOR: ssl: fix memory leak at OCSP loading |
| - BUG/MEDIUM: ssl: memory leak of ocsp data at SSL_CTX_free() |
| - BUG/MEDIUM: map/lua: Return an error if a map is loaded during runtime |
| - MINOR: arg: Add an argument type to keep a reference on opaque data |
| - BUG/MINOR: converters: Store the sink in an arg pointer for debug() converter |
| - BUG/MINOR: lua: Duplicate map name to load it when a new Map object is created |
| - BUG/MINOR: arg: Fix leaks during arguments validation for fetches/converters |
| - BUG/MINOR: lua: Check argument type to convert it to IPv4/IPv6 arg validation |
| - BUG/MINOR: lua: Check argument type to convert it to IP mask in arg validation |
| - MINOR: hlua: Don't needlessly copy lua strings in trash during args validation |
| - BUG/MINOR: lua: Duplicate lua strings in sample fetches/converters arg array |
| - MEDIUM: lua: Don't filter exported fetches and converters |
| - MINOR: lua: Add support for userlist as fetches and converters arguments |
| - MINOR: lua: Add support for regex as fetches and converters arguments |
| - MINOR: arg: Use chunk_destroy() to release string arguments |
| - BUG/MINOR: snapshots: leak of snapshots on deinit() |
| - CLEANUP: ssl: ssl_sock_crt2der semicolon and spaces |
| - MINOR: ssl: add ssl_{c,s}_chain_der fetch methods |
| - CLEANUP: fix all duplicated semicolons |
| - BUG/MEDIUM: ssl: fix the ssl-skip-self-issued-ca option |
| - BUG/MINOR: ssl: ssl-skip-self-issued-ca requires >= 1.0.2 |
| - BUG/MINOR: stats: use strncmp() instead of memcmp() on health states |
| - BUILD: makefile: don't disable -Wstringop-overflow anymore |
| - BUG/MINOR: ssl: double free w/ smp_fetch_ssl_x_chain_der() |
| - BUG/MEDIUM: htx: smp_prefetch_htx() must always validate the direction |
| - BUG/MEDIUM: ssl: never generates the chain from the verify store |
| - OPTIM: regex: PCRE2 use JIT match when JIT optimisation occured. |
| - BUG/MEDIUM: ssl: does not look for all SNIs before chosing a certificate |
| - CLEANUP: ssl: remove poorly readable nested ternary |
| |
| 2020/07/31 : 2.3-dev2 |
| - DOC: ssl: req_ssl_sni needs implicit TLS |
| - BUG/MEDIUM: arg: empty args list must be dropped |
| - BUG/MEDIUM: resolve: fix init resolving for ring and peers section. |
| - BUG/MAJOR: tasks: don't requeue global tasks into the local queue |
| - MINOR: tasks/debug: make the thread affinity BUG_ON check a bit stricter |
| - MINOR: tasks/debug: add a few BUG_ON() to detect use of wrong timer queue |
| - MINOR: tasks/debug: add a BUG_ON() check to detect requeued task on free |
| - BUG/MAJOR: dns: Make the do-resolve action thread-safe |
| - BUG/MEDIUM: dns: Release answer items when a DNS resolution is freed |
| - MEDIUM: htx: Add a flag on a HTX message when no more data are expected |
| - BUG/MEDIUM: stream-int: Don't set MSG_MORE flag if no more data are expected |
| - BUG/MEDIUM: http-ana: Only set CF_EXPECT_MORE flag on data filtering |
| - CLEANUP: dns: remove 45 "return" statements from dns_validate_dns_response() |
| - BUG/MINOR: htx: add two missing HTX_FL_EOI and remove an unexpected one |
| - BUG/MINOR: mux-fcgi: Don't url-decode the QUERY_STRING parameter anymore |
| - BUILD: tools: fix build with static only toolchains |
| - DOC: Use gender neutral language |
| - BUG/MINOR: debug: Don't dump the lua stack if it is not initialized |
| - BUG/MAJOR: dns: fix null pointer dereference in snr_update_srv_status |
| - BUG/MAJOR: dns: don't treat Authority records as an error |
| - CI : travis-ci : prepare for using stock OpenSSL |
| - CI: travis-ci : switch to stock openssl when openssl-1.1.1 is used |
| - MEDIUM: lua: Add support for the Lua 5.4 |
| - BUG/MEDIUM: dns: Don't yield in do-resolve action on a final evaluation |
| - BUG/MINOR: lua: Abort execution of actions that yield on a final evaluation |
| - MINOR: tcp-rules: Return an internal error if an action yields on a final eval |
| - BUG/MINOR: tcp-rules: Preserve the right filter analyser on content eval abort |
| - BUG/MINOR: tcp-rules: Set the inspect-delay when a tcp-response action yields |
| - MEDIUM: tcp-rules: Use a dedicated expiration date for tcp ruleset |
| - MEDIUM: lua: Set the analyse expiration date with smaller wake_time only |
| - BUG/MEDIUM: connection: Be sure to always install a mux for sync connect |
| - MINOR: connection: Preinstall the mux for non-ssl connect |
| - MINOR: stream-int: Be sure to have a mux to do sends and receives |
| - BUG/MINOR: lua: Fix a possible null pointer deref on lua ctx |
| - SCRIPTS: announce-release: add the link to the wiki in the announce messages |
| - CI: travis-ci: use better name for Coverity scan job |
| - CI: travis-ci: use proper linking flags for SLZ build |
| - BUG/MEDIUM: backend: always attach the transport before installing the mux |
| - BUG/MEDIUM: tcp-checks: always attach the transport before installing the mux |
| - MINOR: connection: avoid a useless recvfrom() on outgoing connections |
| - MINOR: mux-h1: do not even try to receive if the connection is not fully set up |
| - MINOR: mux-h1: do not try to receive on backend before sending a request |
| - CLEANUP: assorted typo fixes in the code and comments |
| - BUG/MEDIUM: ssl: check OCSP calloc in ssl_sock_load_ocsp() |
| |
| 2020/07/17 : 2.3-dev1 |
| - MINOR: config: make strict limits enabled by default |
| - BUG/MINOR: acl: Fix freeing of expr->smp in prune_acl_expr |
| - BUG/MINOR: sample: Fix freeing of conv_exprs in release_sample_expr |
| - BUG/MINOR: haproxy: Free proxy->format_unique_id during deinit |
| - BUG/MINOR: haproxy: Add missing free of server->(hostname|resolvers_id) |
| - BUG/MINOR: haproxy: Free proxy->unique_id_header during deinit |
| - BUG/MINOR: haproxy: Free srule->file during deinit |
| - BUG/MINOR: haproxy: Free srule->expr during deinit |
| - BUG/MINOR: sample: Free str.area in smp_check_const_bool |
| - BUG/MINOR: sample: Free str.area in smp_check_const_meth |
| - CLEANUP: haproxy: Free proxy_deinit_list in deinit() |
| - CLEANUP: haproxy: Free post_deinit_list in deinit() |
| - CLEANUP: haproxy: Free server_deinit_list in deinit() |
| - CLEANUP: haproxy: Free post_server_check_list in deinit() |
| - CLEANUP: Add static void vars_deinit() |
| - CLEANUP: Add static void hlua_deinit() |
| - CLEANUP: contrib/prometheus-exporter: typo fixes for ssl reuse metric |
| - BUG/MEDIUM: lists: add missing store barrier on MT_LIST_BEHEAD() |
| - BUG/MEDIUM: lists: add missing store barrier in MT_LIST_ADD/MT_LIST_ADDQ |
| - MINOR: tcp: Support TCP keepalive parameters customization |
| - BUILD: tcp: condition TCP keepalive settings to platforms providing them |
| - MINOR: lists: rename some MT_LIST operations to clarify them |
| - MINOR: buffer: use MT_LIST_ADDQ() for buffer_wait lists additions |
| - MINOR: connection: use MT_LIST_ADDQ() to add connections to idle lists |
| - MINOR: tasks: use MT_LIST_ADDQ() when killing tasks. |
| - CONTRIB: da: fix memory leak in dummy function da_atlas_open() |
| - CI: travis-ci: speed up osx build by running brew scripted, switch to latest osx image |
| - BUG/MEDIUM: mux-h2: Don't add private connections in available connection list |
| - BUG/MEDIUM: mux-fcgi: Don't add private connections in available connection list |
| - MINOR: connection: Set the SNI on server connections before installing the mux |
| - MINOR: connection: Set new connection as private on reuse never |
| - MINOR: connection: Add a wrapper to mark a connection as private |
| - MEDIUM: connection: Add private connections synchronously in session server list |
| - MINOR: connection: Use a dedicated function to look for a session's connection |
| - MINOR: connection: Set the conncetion target during its initialisation |
| - MINOR: session: Take care to decrement idle_conns counter in session_unown_conn |
| - MINOR: server: Factorize code to deal with reuse of server idle connections |
| - MINOR: server: Factorize code to deal with connections removed from an idle list |
| - CLEANUP: connection: remove unused field idle_time from the connection struct |
| - BUG/MEDIUM: mux-h1: Continue to process request when switching in tunnel mode |
| - MINOR: raw_sock: Report the number of bytes emitted using the splicing |
| - MINOR: contrib/prometheus-exporter: Add missing global and per-server metrics |
| - MINOR: backend: Add sample fetches to get the server's weight |
| - BUG/MINOR: mux-fcgi: Handle empty STDERR record |
| - BUG/MINOR: mux-fcgi: Set conn state to RECORD_P when skipping the record padding |
| - BUG/MINOR: mux-fcgi: Set flags on the right stream field for empty FCGI_STDOUT |
| - BUG/MINOR: backend: fix potential null deref on srv_conn |
| - BUG/MEDIUM: log: issue mixing sampled to not sampled log servers. |
| - MEDIUM: udp: adds minimal proto udp support for message listeners. |
| - MEDIUM: log/sink: re-work and merge of build message API. |
| - MINOR: log: adds syslog udp message handler and parsing. |
| - MEDIUM: log: adds log forwarding section. |
| - MINOR: log: adds counters on received syslog messages. |
| - BUG/MEDIUM: fcgi-app: fix memory leak in fcgi_flt_http_headers |
| - BUG/MEDIUM: server: resolve state file handle leak on reload |
| - BUG/MEDIUM: server: fix possibly uninitialized state file on close |
| - BUG/MEDIUM: channel: Be aware of SHUTW_NOW flag when output data are peeked |
| - BUILD: config: address build warning on raspbian+rpi4 |
| - BUG/MAJOR: tasks: make sure to always lock the shared wait queue if needed |
| - BUILD: config: fix again bugs gcc warnings on calloc |
| |
| 2020/07/07 : 2.3-dev0 |
| - [RELEASE] Released version 2.3-dev0 |
| - MINOR: version: back to development, update status message |
| |
| 2020/07/07 : 2.3-dev0 |
| - exact copy of 2.2.0 |
| |
| 2020/07/07 : 2.2.0 |
| - BUILD: mux-h2: fix typo breaking build when using DEBUG_LOCK |
| - CLEANUP: makefile: update the outdated list of DEBUG_xxx options |
| - BUILD: tools: make resolve_sym_name() return a const |
| - CLEANUP: auth: fix useless self-include of auth-t.h |
| - BUILD: tree-wide: cast arguments to tolower/toupper to unsigned char |
| - CLEANUP: assorted typo fixes in the code and comments |
| - WIP/MINOR: ssl: add sample fetches for keylog in frontend |
| - DOC: fix tune.ssl.keylog sample fetches array |
| - BUG/MINOR: ssl: check conn in keylog sample fetch |
| - DOC: configuration: various typo fixes |
| - MINOR: log: Remove unused case statement during the log-format string parsing |
| - BUG/MINOR: mux-h1: Fix the splicing in TUNNEL mode |
| - BUG/MINOR: mux-h1: Don't read data from a pipe if the mux is unable to receive |
| - BUG/MINOR: mux-h1: Disable splicing only if input data was processed |
| - BUG/MEDIUM: mux-h1: Disable splicing for the conn-stream if read0 is received |
| - MINOR: mux-h1: Improve traces about the splicing |
| - BUG/MINOR: backend: Remove CO_FL_SESS_IDLE if a client remains on the last server |
| - BUG/MEDIUM: connection: Don't consider new private connections as available |
| - BUG/MINOR: connection: See new connection as available only on reuse always |
| - DOC: configuration: remove obsolete mentions of H2 being converted to HTTP/1.x |
| - CLEANUP: ssl: remove unrelevant comment in smp_fetch_ssl_x_keylog() |
| - DOC: update INSTALL with new compiler versions |
| - DOC: minor update to coding style file |
| - MINOR: version: mention that it's an LTS release now |
| |
| 2020/07/04 : 2.2-dev12 |
| - BUG/MINOR: mux_h2: don't lose the leaving trace in h2_io_cb() |
| - MINOR: cli: make "show sess" stop at the last known session |
| - CLEANUP: buffers: remove unused buffer_wq_lock lock |
| - BUG/MEDIUM: buffers: always allocate from the local cache first |
| - MINOR: connection: align toremove_{lock,connections} and cleanup into idle_conns |
| - CONTRIB: debug: add missing flags SI_FL_L7_RETRY & SI_FL_D_L7_RETRY |
| - BUG/MEDIUM: connections: Don't increase curr_used_conns for shared connections. |
| - BUG/MEDIUM: checks: Increment the server's curr_used_conns |
| - REORG: buffer: rename buffer.c to dynbuf.c |
| - REORG: includes: create tinfo.h for the thread_info struct |
| - CLEANUP: pool: only include the type files from types |
| - MINOR: pools: move the LRU cache heads to thread_info |
| - BUG/MINOR: debug: fix "show fd" null-deref when built with DEBUG_FD |
| - MINOR: stats: add 3 new output values for the per-server idle conn state |
| - MINOR: activity: add per-thread statistics on FD takeover |
| - BUG/MINOR: server: start cleaning idle connections from various points |
| - MEDIUM: server: improve estimate of the need for idle connections |
| - MINOR: stats: add the estimated need of concurrent connections per server |
| - BUG/MINOR: threads: Don't forget to init each thread toremove_lock. |
| - BUG/MEDIUM: lists: Lock the element while we check if it is in a list. |
| - Revert "BUG/MEDIUM: lists: Lock the element while we check if it is in a list." |
| - BUG/MINOR: haproxy: don't wake already stopping threads on exit |
| - BUG/MINOR: server: always count one idle slot for current thread |
| - MEDIUM: server: use the two thresholds for the connection release algorithm |
| - BUG/MINOR: http-rules: Fix ACLs parsing for http deny rules |
| - BUG/MINOR: sched: properly cover for a rare MT_LIST_ADDQ() race |
| - MINOR: mux-h1: avoid taking the toremove_lock in on dying tasks |
| - MINOR: mux-h2: avoid taking the toremove_lock in on dying tasks |
| - MINOR: mux-fcgi: avoid taking the toremove_lock in on dying tasks |
| - MINOR: pools: increase MAX_BASE_POOLS to 64 |
| - DOC: ssl: add "allow-0rtt" and "ciphersuites" in crt-list |
| - BUG/MEDIUM: pattern: Add a trailing \0 to match strings only if possible |
| - BUG/MEDIUM: log-format: fix possible endless loop in parse_logformat_string() |
| - BUG/MINOR: proxy: fix dump_server_state()'s misuse of the trash |
| - BUG/MINOR: proxy: always initialize the trash in show servers state |
| - MINOR: cli/proxy: add a new "show servers conn" command |
| - MINOR: server: skip servers with no idle conns earlier |
| - BUG/MINOR: server: fix the connection release logic regarding nearly full conditions |
| - MEDIUM: server: add a new pool-low-conn server setting |
| - BUG/MEDIUM: backend: always search in the safe list after failing on the idle one |
| - MINOR: backend: don't always takeover from the same threads |
| - MINOR: sched: make sched->task_list_size atomic |
| - MEDIUM: sched: create a new TASK_KILLED task flag |
| - MEDIUM: sched: implement task_kill() to kill a task |
| - MEDIUM: mux-h1: use task_kill() during h1_takeover() instead of task_wakeup() |
| - MEDIUM: mux-h2: use task_kill() during h2_takeover() instead of task_wakeup() |
| - MEDIUM: mux-fcgi: use task_kill() during fcgi_takeover() instead of task_wakeup() |
| - MINOR: list: Add MT_LIST_DEL_SAFE_NOINIT() and MT_LIST_ADDQ_NOCHECK() |
| - CLEANUP: connections: rename the toremove_lock to takeover_lock |
| - MEDIUM: connections: Don't use a lock when moving connections to remove. |
| - DOC: configuration: add missing index entries for tune.pool-{low,high}-fd-ratio |
| - DOC: configuration: fix alphabetical ordering for tune.pool-{high,low}-fd-ratio |
| - MINOR: config: add a new tune.idle-pool.shared global setting. |
| - MINOR: 51d: silence a warning about null pointer dereference |
| - MINOR: debug: add a new "debug dev memstats" command |
| - MINOR: log-format: allow to preserve spacing in log format strings |
| - BUILD: debug: avoid build warnings with DEBUG_MEM_STATS |
| - BUG/MAJOR: sched: make sure task_kill() always queues the task |
| - BUG/MEDIUM: muxes: Make sure nobody stole the connection before using it. |
| - BUG/MEDIUM: cli/proxy: don't try to dump idle connection state if there's none |
| - BUILD: haproxy: fix build error when RLIMIT_AS is not set |
| - BUG/MAJOR: sched: make it work also when not building with DEBUG_STRICT |
| - MINOR: log: add time second fraction field to rfc5424 log timestamp. |
| - BUG/MINOR: log: missing timezone on iso dates. |
| - BUG/MEDIUM: server: don't kill all idle conns when there are not enough |
| - MINOR: sched: split tasklet_wakeup() into tasklet_wakeup_on() |
| - BUG/MEDIUM: connections: Set the tid for the old tasklet on takeover. |
| - BUG/MEDIUM: connections: Let the xprt layer know a takeover happened. |
| - BUG/MINOR: http_act: don't check capture id in backend (2) |
| - BUILD: makefile: disable threads by default on OpenBSD |
| - BUILD: peers: fix build warning with gcc 4.2.1 |
| - CI: cirrus-ci: exclude slow reg-tests |
| |
| 2020/06/26 : 2.2-dev11 |
| - REGTEST: Add a simple script to tests errorfile directives in proxy sections |
| - BUG/MEDIUM: fcgi-app: Resolve the sink if a fcgi-app logs in a ring buffer |
| - BUG/MINOR: spoe: correction of setting bits for analyzer |
| - BUG/MINOR: cfgparse: Support configurations without newline at EOF |
| - MINOR: cfgparse: Warn on truncated lines / files |
| - BUG/MINOR: http_ana: clarify connection pointer check on L7 retry |
| - MINOR: debug: add a new DEBUG_FD build option |
| - BUG/MINOR: tasks: make sure never to exceed max_processed |
| - MINOR: task: add a new pointer to current tasklet queue |
| - BUG/MEDIUM: task: be careful not to run too many tasks at TL_URGENT |
| - BUG/MINOR: cfgparse: Fix argument reference in PARSE_ERR_TOOMANY message |
| - BUG/MINOR: cfgparse: Fix calculation of position for PARSE_ERR_TOOMANY message |
| - BUG/MEDIUM: ssl: fix ssl_bind_conf double free |
| - MINOR: ssl: free bind_conf_node in crtlist_free() |
| - MINOR: ssl: free the crtlist and the ckch during the deinit() |
| - BUG/MINOR: ssl: fix build with ckch_deinit() and crtlist_deinit() |
| - BUG/MINOR: ssl/cli: certs added from the CLI can't be deleted |
| - MINOR: ssl: move the ckch/crtlist deinit to ssl_sock.c |
| - MEDIUM: tasks: apply a fair CPU distribution between tasklet classes |
| - MINOR: tasks: make current_queue an index instead of a pointer |
| - MINOR: tasks: add a mask of the queues with active tasklets |
| - MINOR: tasks: pass the queue index to run_task_from_list() |
| - MINOR: tasks: make run_tasks_from_lists() scan the queues itself |
| - MEDIUM: tasks: add a tune.sched.low-latency option |
| - BUG/MEDIUM: ssl/cli: 'commit ssl cert' crashes when no private key |
| - BUG/MINOR: cfgparse: don't increment linenum on incomplete lines |
| - MINOR: tools: make parse_line() always terminate the args list |
| - BUG/MINOR: cfgparse: report extraneous args *after* the string is allocated |
| - MINOR: cfgparse: sanitize the output a little bit |
| - MINOR: cli/ssl: handle trailing slashes in crt-list commands |
| - MINOR: ssl: add the ssl_s_* sample fetches for server side certificate |
| - BUG/MEDIUM: http-ana: Don't loop trying to generate a malformed 500 response |
| - BUG/MINOR: stream-int: Don't wait to send truncated HTTP messages |
| - BUG/MINOR: http-ana: Set CF_EOI on response channel for generated responses |
| - BUG/MINOR: http-ana: Don't wait to send 1xx responses generated by HAProxy |
| - MINOR: spoe: Don't systematically create new applets if processing rate is low |
| - DOC: fix some typos in the ssl_s_{s|i}_dn documentation |
| - BUILD: fix ssl_sample.c when building against BoringSSL |
| - CI: travis-ci: switch BoringSSL builds to ninja |
| - CI: extend spellchecker whitelist |
| - DOC: assorted typo fixes in the documentation |
| - CLEANUP: assorted typo fixes in the code and comments |
| - MINOR: http: Add support for http 413 status |
| - REGTEST: ssl: tests the ssl_f_* sample fetches |
| - REGTEST: ssl: add some ssl_c_* sample fetches test |
| - DOC: ssl: update the documentation of "commit ssl cert" |
| - BUG/MINOR: cfgparse: correctly deal with empty lines |
| - BUG/MEDIUM: fetch: Fix hdr_ip misparsing IPv4 addresses due to missing NUL |
| |
| 2020/06/19 : 2.2-dev10 |
| - BUILD: include: add sys/types before netinet/tcp.h |
| - BUG/MEDIUM: log: don't hold the log lock during writev() on a file descriptor |
| - BUILD: Remove nowarn for warnings that do not trigger |
| - BUG/MEDIUM: pattern: fix thread safety of pattern matching |
| - BUILD: Re-enable -Wimplicit-fallthrough |
| - BUG/MINOR: ssl: fix ssl-{min,max}-ver with openssl < 1.1.0 |
| - BUILD: thread: add parenthesis around values of locking macros |
| - BUILD: proto_uxst: shut up yet another gcc's absurd warning |
| - BUG/MEDIUM: checks: Fix off-by-one in allocation of SMTP greeting cmd |
| - CI: travis-ci: use "-O1" for clang builds |
| - MINOR: haproxy: Add void deinit_and_exit(int) |
| - MINOR: haproxy: Make use of deinit_and_exit() for clean exits |
| - BUG/MINOR: haproxy: Free rule->arg.vars.expr during deinit_act_rules |
| - BUILD: compression: make gcc 10 happy with free_zlib() |
| - BUILD: atomic: add string.h for memcpy() on ARM64 |
| - BUG/MINOR: http: make smp_fetch_body() report that the contents may change |
| - BUG/MINOR: tcp-rules: tcp-response must check the buffer's fullness |
| - BUILD: haproxy: mark deinit_and_exit() as noreturn |
| - BUG/MAJOR: vars: Fix bogus free() during deinit() for http-request rules |
| - BUG/MEDIUM: ebtree: use a byte-per-byte memcmp() to compare memory blocks |
| - MINOR: tools: add a new configurable line parse, parse_line() |
| - BUG/MEDIUM: cfgparse: use parse_line() to expand/unquote/unescape config lines |
| - BUG/MEDIUM: cfgparse: stop after a reasonable amount of fatal error |
| - MINOR: http: do not close connections anymore after internal responses |
| - BUG/MINOR: cfgparse: Add missing fatal++ in PARSE_ERR_HEX case |
| - BUG/MINOR: spoe: add missing key length check before checking key names |
| - MINOR: version: put the compiler version output into version.c not haproxy.c |
| - MINOR: compiler: always define __has_feature() |
| - MINOR: version: report the presence of the compiler's address sanitizer |
| - BUILD: Fix build by including haproxy/global.h |
| - BUG/MAJOR: connection: always disable ready events once reported |
| - CLEANUP: activity: remove unused counter fd_lock |
| - DOC: fd: make it clear that some fields ordering must absolutely be respected |
| - MINOR: activity: report the number of times poll() reports I/O |
| - MINOR: activity: rename confusing poll_* fields in the output |
| - MINOR: fd: Fix a typo in a coment. |
| - BUG/MEDIUM: fd: Don't fd_stop_recv() a fd we don't own. |
| - BUG/MEDIUM: fd: Call fd_stop_recv() when we just got a fd. |
| - MINOR: activity: group the per-loop counters at the top |
| - MINOR: activity: rename the "stream" field to "stream_calls" |
| - MEDIUM: fd: refine the fd_takeover() migration lock |
| - MINOR: fd: slightly optimize the fd_takeover double-CAS loop |
| - MINOR: fd: factorize the fd_takeover() exit path to make it safer |
| - MINOR: peers: do not use localpeer as an array anymore |
| - MEDIUM: peers: add the "localpeer" global option |
| - MEDIUM: fd: add experimental support for edge-triggered polling |
| - CONTRIB: debug: add the missing flags CO_FL_SAFE_LIST and CO_FL_IDLE_LIST |
| - MINOR: haproxy: process signals before runnable tasks |
| - MEDIUM: tasks: clean up the front side of the wait queue in wake_expired_tasks() |
| - MEDIUM: tasks: also process late wakeups in process_runnable_tasks() |
| - BUG/MINOR: cli: allow space escaping on the CLI |
| - BUG/MINOR: mworker/cli: fix the escaping in the master CLI |
| - BUG/MINOR: mworker/cli: fix semicolon escaping in master CLI |
| - REGTEST: http-rules: test spaces in ACLs |
| - REGTEST: http-rules: test spaces in ACLs with master CLI |
| - BUG/MAJOR: init: properly compute the default global.maxpipes value |
| - MEDIUM: map: make the "clear map" operation yield |
| - BUG/MEDIUM: stream-int: fix loss of CO_SFL_MSG_MORE flag in forwarding |
| - MINOR: mux_h1: Set H1_F_CO_MSG_MORE if we know we have more to send. |
| - BUG/MINOR: systemd: Wait for network to be online |
| - DOC: configuration: Unindent non-code sentences in the protobuf example |
| - DOC: configuration: http-check send was missing from matrix |
| |
| 2020/06/11 : 2.2-dev9 |
| - BUG/MINOR: http-htx: Don't forget to release the http reply in release function |
| - BUG/MINOR: http-htx: Fix a leak on error path during http reply parsing |
| - MINOR: checks: Remove dead code from process_chk_conn() |
| - REGTESTS: checks: Fix tls_health_checks when IPv6 addresses are used |
| - REGTESTS: Add missing OPENSSL to REQUIRE_OPTIONS for lua/txn_get_priv |
| - MINOR: lua: Use vars_unset_by_name_ifexist() |
| - CLEANUP: vars: Remove void vars_unset_by_name(const char*, size_t, struct sample*) |
| - MINOR: vars: Make vars_(un|)set_by_name(_ifexist|) return a success value |
| - MINOR: lua: Make `set_var()` and `unset_var()` return success |
| - MEDIUM: lua: Add `ifexist` parameter to `set_var` |
| - MEDIUM: ring: new section ring to declare custom ring buffers. |
| - REGTESTS: Add missing OPENSSL to REQUIRE_OPTIONS for compression/lua_validation |
| - REGTESTS: Require the version 2.2 to execute lua/set_var |
| - BUG/MEDIUM: checks: Refresh the conn-stream and the connection after a connect |
| - MINOR: checks: Remove useless tests on the connection and conn-stream |
| - BUG/MEDIUM: contrib/spoa: do not register python3.8 if --embed fail |
| - BUG/MEDIUM: connection: Ignore PP2 unique ID for stream-less connections |
| - BUG/MINOR: connection: Always get the stream when available to send PP2 line |
| - BUG/MEDIUM: backend: set the connection owner to the session when using alpn. |
| - MINOR: pools: compute an estimate of each pool's average needed objects |
| - MEDIUM: pools: directly free objects when pools are too much crowded |
| - REGTEST: Add connection/proxy_protocol_send_unique_id_alpn |
| - MINOR: http-ana: Make the function http_reply_to_htx() public |
| - MINOR: http-ana: Use proxy's error replies to emit 401/407 responses |
| - MINOR: http-rules: Use an action function to eval http-request auth rules |
| - CLEANUP: http: Remove unused HTTP message templates |
| - BUG/MEDIUM: checks: Don't blindly subscribe for receive if waiting for connect |
| - MINOR: checks: I/O callback function only rely on the data layer wake callback |
| - BUG/MINOR: lua: Add missing string length for lua sticktable lookup |
| - BUG/MEDIUM: logs: fix trailing zeros on log message. |
| - CI: cirrus-ci: skip reg-tests/connection/proxy_protocol_send_unique_id_alpn.vtc on CentOS 6 |
| - BUG/MINOR: nameservers: fix error handling in parsing of resolv.conf |
| - BUG/MEDIUM: checks: Don't add a tcpcheck ruleset twice in the shared tree |
| - MEDIUM: ssl: use TLSv1.2 as the minimum default on bind lines |
| - CLEANUP: pools: use the regular lock for the flush operation on lockless pools |
| - SCRIPTS: publish-release: pass -n to gzip to remove timestamp |
| - MINOR: ring: re-work ring attach generic API. |
| - BUG/MINOR: error on unknown statement in ring section. |
| - MEDIUM: ring: add server statement to forward messages from a ring |
| - MEDIUM: ring: add new srv statement to support octet counting forward |
| - MINOR: ssl: set ssl-min-ver in ambiguous configurations |
| - CLEANUP: ssl: remove comment from dump_crtlist_sslconf() |
| - BUILD: sink: address build warning on 32-bit architectures |
| - BUG/MINOR: peers: fix internal/network key type mapping. |
| - CLEANUP: regex: remove outdated support for regex actions |
| - Revert "MINOR: ssl: rework add cert chain to CTX to be libssl independent" |
| - MINOR: mux-h1/proxy: Add a proxy option to disable clear h2 upgrade |
| - BUG/MEDIUM: lua: Reset analyse expiration timeout before executing a lua action |
| - DOC: add a line about comments in crt-list |
| - BUG/MEDIUM: hlua: Lock pattern references to perform set/add/del operations |
| - BUG/MINOR: checks: Fix test on http-check rulesets during config validity check |
| - BUG/MEDIUM: contrib/prometheus-exporter: Properly set flags to dump metrics |
| - BUG/MEDIUM: mworker: fix the copy of options in copy_argv() |
| - BUG/MINOR: init: -x can have a parameter starting with a dash |
| - BUG/MINOR: init: -S can have a parameter starting with a dash |
| - BUG/MEDIUM: mworker: fix the reload with an -- option |
| - BUG/MINOR: ssl: fix a trash buffer leak in some error cases |
| - BUG/MINOR: mworker: fix a memleak when execvp() failed |
| - MINOR: sample: Add secure_memcmp converter |
| - REORG: ebtree: move the C files from ebtree/ to src/ |
| - REORG: ebtree: move the include files from ebtree to include/import/ |
| - REORG: ebtree: clean up remains of the ebtree/ directory |
| - REORG: include: create new file haproxy/api-t.h |
| - REORG: include: create new file haproxy/api.h |
| - REORG: include: update all files to use haproxy/api.h or api-t.h if needed |
| - CLEANUP: include: remove common/config.h |
| - CLEANUP: include: remove unused template.h |
| - REORG: include: move MIN/MAX from tools.h to compat.h |
| - REORG: include: move SWAP/MID_RANGE/MAX_RANGE from tools.h to standard.h |
| - CLEANUP: include: remove unused common/tools.h |
| - REORG: include: move the base files from common/ to haproxy/ |
| - REORG: include: move version.h to haproxy/ |
| - REORG: include: move base64.h, errors.h and hash.h from common to to haproxy/ |
| - REORG: include: move openssl-compat.h from common/ to haproxy/ |
| - REORG: include: move ist.h from common/ to import/ |
| - REORG: include: move the BUG_ON() code to haproxy/bug.h |
| - REORG: include: move debug.h from common/ to haproxy/ |
| - CLEANUP: debug: drop unused function p_malloc() |
| - REORG: include: split buf.h into haproxy/buf-t.h and haproxy/buf.h |
| - REORG: include: move istbuf.h to haproxy/ |
| - REORG: include: split mini-clist into haproxy/list and list-t.h |
| - REORG: threads: extract atomic ops from hathreads.h |
| - CLEANUP: threads: remove a few needless includes of hathreads.h |
| - REORG: include: split hathreads into haproxy/thread.h and haproxy/thread-t.h |
| - CLEANUP: thread: rename __decl_hathreads() to __decl_thread() |
| - REORG: include: move time.h from common/ to haproxy/ |
| - REORG: include: move integer manipulation functions from standard.h to intops.h |
| - CLEANUP: include: remove excessive includes of common/standard.h |
| - REORG: include: move freq_ctr to haproxy/ |
| - CLEANUP: pool: include freq_ctr.h and remove locally duplicated functions |
| - REORG: memory: move the pool type definitions to haproxy/pool-t.h |
| - REORG: memory: move the OS-level allocator to haproxy/pool-os.h |
| - MINOR: memory: don't let __pool_get_first() pick from the cache |
| - MEDIUM: memory: don't let pool_put_to_cache() free the objects itself |
| - MINOR: memory: move pool-specific path of the locked pool_free() to __pool_free() |
| - MEDIUM: memory: make local pools independent on lockless pools |
| - REORG: include: move common/memory.h to haproxy/pool.h |
| - REORG: include: move common/chunk.h to haproxy/chunk.h |
| - REORG: include: move activity to haproxy/ |
| - REORG: include: move common/buffer.h to haproxy/dynbuf{,-t}.h |
| - REORG: include: move common/net_helper.h to haproxy/net_helper.h |
| - REORG: include: move common/namespace.h to haproxy/namespace{,-t}.h |
| - REORG: include: split common/regex.h into haproxy/regex{,-t}.h |
| - REORG: include: split common/xref.h into haproxy/xref{,-t}.h |
| - REORG: include: move common/ticks.h to haproxy/ticks.h |
| - REORG: include: split common/http.h into haproxy/http{,-t}.h |
| - REORG: include: split common/http-hdr.h into haproxy/http-hdr{,-t}.h |
| - REORG: include: move common/h1.h to haproxy/h1.h |
| - REORG: include: split common/htx.h into haproxy/htx{,-t}.h |
| - REORG: include: move hpack*.h to haproxy/ and split hpack-tbl |
| - REORG: include: move common/h2.h to haproxy/h2.h |
| - REORG: include: move common/fcgi.h to haproxy/ |
| - REORG: include: move protocol.h to haproxy/protocol{,-t}.h |
| - REORG: tools: split common/standard.h into haproxy/tools{,-t}.h |
| - REORG: include: move dict.h to hparoxy/dict{,-t}.h |
| - REORG: include: move shctx to haproxy/shctx{,-t}.h |
| - REORG: include: move port_range.h to haproxy/port_range{,-t}.h |
| - REORG: include: move fd.h to haproxy/fd{,-t}.h |
| - REORG: include: move ring to haproxy/ring{,-t}.h |
| - REORG: include: move sink.h to haproxy/sink{,-t}.h |
| - REORG: include: move pipe.h to haproxy/pipe{,-t}.h |
| - CLEANUP: include: remove empty raw_sock.h |
| - REORG: include: move proto_udp.h to haproxy/proto_udp{,-t}.h |
| - REORG: include: move proto/proto_sockpair.h to haproxy/proto_sockpair.h |
| - REORG: include: move compression.h to haproxy/compression{,-t}.h |
| - REORG: include: move h1_htx.h to haproxy/h1_htx.h |
| - REORG: include: move http_htx.h to haproxy/http_htx{,-t}.h |
| - REORG: include: move hlua.h to haproxy/hlua{,-t}.h |
| - REORG: include: move hlua_fcn.h to haproxy/hlua_fcn.h |
| - REORG: include: move action.h to haproxy/action{,-t}.h |
| - REORG: include: move arg.h to haproxy/arg{,-t}.h |
| - REORG: include: move auth.h to haproxy/auth{,-t}.h |
| - REORG: include: move dns.h to haproxy/dns{,-t}.h |
| - REORG: include: move flt_http_comp.h to haproxy/ |
| - REORG: include: move counters.h to haproxy/counters-t.h |
| - REORG: include: split mailers.h into haproxy/mailers{,-t}.h |
| - REORG: include: move capture.h to haproxy/capture{,-t}.h |
| - REORG: include: move frontend.h to haproxy/frontend.h |
| - REORG: include: move obj_type.h to haproxy/obj_type{,-t}.h |
| - REORG: include: move http_rules.h to haproxy/http_rules.h |
| - CLEANUP: include: remove unused mux_pt.h |
| - REORG: include: move mworker.h to haproxy/mworker{,-t}.h |
| - REORG: include: move ssl_utils.h to haproxy/ssl_utils.h |
| - REORG: include: move ssl_ckch.h to haproxy/ssl_ckch{,-t}.h |
| - REORG: move ssl_crtlist.h to haproxy/ssl_crtlist{,-t}.h |
| - REORG: include: move lb_chash.h to haproxy/lb_chash{,-t}.h |
| - REORG: include: move lb_fas.h to haproxy/lb_fas{,-t}.h |
| - REORG: include: move lb_fwlc.h to haproxy/lb_fwlc{,-t}.h |
| - REORG: include: move lb_fwrr.h to haproxy/lb_fwrr{,-t}.h |
| - REORG: include: move listener.h to haproxy/listener{,-t}.h |
| - REORG: include: move pattern.h to haproxy/pattern{,-t}.h |
| - REORG: include: move map to haproxy/map{,-t}.h |
| - REORG: include: move payload.h to haproxy/payload.h |
| - REORG: include: move sample.h to haproxy/sample{,-t}.h |
| - REORG: include: move protocol_buffers.h to haproxy/protobuf{,-t}.h |
| - REORG: include: move vars.h to haproxy/vars{,-t}.h |
| - REORG: include: split global.h into haproxy/global{,-t}.h |
| - REORG: include: move task.h to haproxy/task{,-t}.h |
| - REORG: include: move proto_tcp.h to haproxy/proto_tcp.h |
| - REORG: include: move signal.h to haproxy/signal{,-t}.h |
| - REORG: include: move tcp_rules.h to haproxy/tcp_rules.h |
| - REORG: include: move connection.h to haproxy/connection{,-t}.h |
| - REORG: include: move checks.h to haproxy/check{,-t}.h |
| - REORG: include: move http_fetch.h to haproxy/http_fetch.h |
| - REORG: include: move peers.h to haproxy/peers{,-t}.h |
| - REORG: include: move stick_table.h to haproxy/stick_table{,-t}.h |
| - REORG: include: move session.h to haproxy/session{,-t}.h |
| - REORG: include: move trace.h to haproxy/trace{,-t}.h |
| - REORG: include: move acl.h to haproxy/acl.h{,-t}.h |
| - REORG: include: split common/uri_auth.h into haproxy/uri_auth{,-t}.h |
| - REORG: move applet.h to haproxy/applet{,-t}.h |
| - REORG: include: move stats.h to haproxy/stats{,-t}.h |
| - REORG: include: move cli.h to haproxy/cli{,-t}.h |
| - REORG: include: move lb_map.h to haproxy/lb_map{,-t}.h |
| - REORG: include: move ssl_sock.h to haproxy/ssl_sock{,-t}.h |
| - REORG: include: move stream_interface.h to haproxy/stream_interface{,-t}.h |
| - REORG: include: move channel.h to haproxy/channel{,-t}.h |
| - REORG: include: move http_ana.h to haproxy/http_ana{,-t}.h |
| - REORG: include: move filters.h to haproxy/filters{,-t}.h |
| - REORG: include: move fcgi-app.h to haproxy/fcgi-app{,-t}.h |
| - REORG: include: move log.h to haproxy/log{,-t}.h |
| - REORG: include: move proxy.h to haproxy/proxy{,-t}.h |
| - REORG: include: move spoe.h to haproxy/spoe{,-t}.h |
| - REORG: include: move backend.h to haproxy/backend{,-t}.h |
| - REORG: include: move queue.h to haproxy/queue{,-t}.h |
| - REORG: include: move server.h to haproxy/server{,-t}.h |
| - REORG: include: move stream.h to haproxy/stream{,-t}.h |
| - REORG: include: move cfgparse.h to haproxy/cfgparse.h |
| - CLEANUP: hpack: export debug functions and move inlines to .h |
| - REORG: check: move the e-mail alerting code to mailers.c |
| - REORG: check: move tcpchecks away from check.c |
| - REORG: check: move email_alert* from proxy-t.h to mailers-t.h |
| - REORG: check: extract the external checks from check.{c,h} |
| - CLEANUP: include: don't include stddef.h directly |
| - CLEANUP: include: don't include proxy-t.h in global-t.h |
| - CLEANUP: include: move sample_data out of sample-t.h |
| - REORG: include: move the error reporting functions to from log.h to errors.h |
| - BUILD: reorder objects in the Makefile for faster builds |
| - CLEANUP: compiler: add a THREAD_ALIGNED macro and use it where appropriate |
| - CLEANUP: include: make atomic.h part of the base API |
| - REORG: include: move MAX_THREADS to defaults.h |
| - REORG: include: move THREAD_LOCAL and __decl_thread() to compiler.h |
| - CLEANUP: include: tree-wide alphabetical sort of include files |
| - REORG: include: make list-t.h part of the base API |
| - REORG: dgram: rename proto_udp to dgram |
| |
| 2020/05/22 : 2.2-dev8 |
| - MINOR: checks: Improve report of unexpected errors for expect rules |
| - MEDIUM: checks: Add matching on log-format string for expect rules |
| - DOC: Fix req.body and co documentation to be accurate |
| - MEDIUM: checks: Remove dedicated sample fetches and use response ones instead |
| - CLEANUP: checks: sort and rename tcpcheck_expect_type types |
| - MINOR: checks: Use dedicated actions to send log-format strings in send rules |
| - MINOR: checks: Simplify matching on HTTP headers in HTTP expect rules |
| - MINOR: checks/sample: Remove unnecessary tests on the sample session |
| - REGTEST: checks: Adapt SSL error message reported when connection is rejected |
| - MINOR: mworker: replace ha_alert by ha_warning when exiting successfuly |
| - MINOR: checks: Support log-format string to set the URI for HTTP send rules |
| - MINOR: checks: Support log-format string to set the body for HTTP send rules |
| - DOC: Be more explicit about configurable check ok/error/timeout status |
| - MINOR: checks: Make matching on HTTP headers for expect rules less obscure |
| - BUG/MEDIUM: lua: Fix dumping of stick table entries for STD_T_DICT |
| - BUG/MINOR: config: Make use_backend and use-server post-parsing less obscur |
| - REGTESTS: make the http-check-send test require version 2.2 |
| - BUG/MINOR: http-ana: fix NTLM response parsing again |
| - BUG/MEDIUM: http_ana: make the detection of NTLM variants safer |
| - BUG/MINOR: cfgparse: Abort parsing the current line if an invalid \x sequence is encountered |
| - MINOR: cfgparse: Improve error message for invalid \x sequences |
| - CI: travis-ci: enable arm64 builds again |
| - MEDIUM: ssl: increase default-dh-param to 2048 |
| - CI: travis-ci: skip pcre2 on arm64 build |
| - CI: travis-ci: extend the build time for SSL to 60 minutes |
| - CLEANUP: config: drop unused setting CONFIG_HAP_MEM_OPTIM |
| - CLEANUP: config: drop unused setting CONFIG_HAP_INLINE_FD_SET |
| - CLENAUP: config: move CONFIG_HAP_LOCKLESS_POOLS out of config.h |
| - CLEANUP: remove THREAD_LOCAL from config.h |
| - CI: travis-ci: upgrade LibreSSL versions |
| - DOC: assorted typo fixes in the documentation |
| - CI: extend spellchecker whitelist |
| - CLEANUP: assorted typo fixes in the code and comments |
| - MAJOR: contrib: porting spoa_server to support python3 |
| - BUG/MEDIUM: checks: Subscribe to I/O events on an unfinished connect |
| - BUG/MINOR: checks: Don't subscribe to I/O events if it is already done |
| - BUG/MINOR: checks: Rely on next I/O oriented rule when waiting for a connection |
| - MINOR: checks: Don't try to send outgoing data if waiting to be able to send |
| - MINOR: sample: Move aes_gcm_dec implementation into sample.c |
| - MINOR: sample: Add digest and hmac converters |
| - BUG/MEDIUM: checks: Subscribe to I/O events only if a mux was installed |
| - BUG/MINOR: sample/ssl: Fix digest converter for openssl < 1.1.0 |
| - BUG/MINOR: pools: use %u not %d to report pool stats in "show pools" |
| - BUG/MINOR: pollers: remove uneeded free in global init |
| - CLEANUP: select: enhance readability in init |
| - BUG/MINOR: soft-stop: always wake up waiting threads on stopping |
| - MINOR: soft-stop: let the first stopper only signal other threads |
| - BUILD: select: only declare existing local labels to appease clang |
| - BUG/MEDIUM: streams: Remove SF_ADDR_SET if we're retrying due to L7 retry. |
| - BUG/MEDIUM: stream: Only allow L7 retries when using HTTP. |
| - DOC: retry-on can only be used with mode http |
| - MEDIUM: ssl: allow to register callbacks for SSL/TLS protocol messages |
| - MEDIUM: ssl: split ssl_sock_msgcbk() and use a new callback mechanism |
| - MINOR: ssl: add a new function ssl_sock_get_ssl_object() |
| - MEDIUM: ssl: use ssl_sock_get_ssl_object() in fetchers where appropriate |
| - REORG: ssl: move macros and structure definitions to ssl_sock.h |
| - CLEANUP: ssl: remove the shsess_* macros |
| - REORG: move the crt-list structures in their own .h |
| - REORG: ssl: move the ckch structures to types/ssl_ckch.h |
| - CLEANUP: ssl: add ckch prototypes in proto/ssl_ckch.h |
| - REORG: ssl: move crtlist functions to src/ssl_crtlist.c |
| - CLEANUP: ssl: avoid circular dependencies in ssl_crtlist.h |
| - REORG: ssl: move the ckch_store related functions to src/ssl_ckch.c |
| - REORG: ssl: move ckch_inst functions to src/ssl_ckch.c |
| - REORG: ssl: move the crt-list CLI functions in src/ssl_crtlist.c |
| - REORG: ssl: move the CLI 'cert' functions to src/ssl_ckch.c |
| - REORG: ssl: move ssl configuration to cfgparse-ssl.c |
| - MINOR: ssl: remove static keyword in some SSL utility functions |
| - REORG: ssl: move ssl_sock_ctx and fix cross-dependencies issues |
| - REORG: ssl: move sample fetches to src/ssl_sample.c |
| - REORG: ssl: move utility functions to src/ssl_utils.c |
| - DOC: ssl: update MAINTAINERS file |
| - CI: travis-ci: switch arm64 builds to use openssl from distro |
| - MINOR: stats: Prepare for more accurate moving averages |
| - MINOR: stats: Expose native cum_req metric for a server |
| - MEDIUM: stats: Enable more accurate moving average calculation for stats |
| - BUILD: ssl: include buffer common headers for ssl_sock_ctx |
| - BUILD: ssl: include errno.h in ssl_crtlist.c |
| - CLEANUP: acl: remove unused assignment |
| - DOC/MINOR: halog: Add long help info for ic flag |
| - BUILD: ssl: fix build without OPENSSL_NO_ENGINE |
| - DOC: SPOE is no longer experimental |
| - BUG/MINOR: cache: Don't needlessly test "cache" keyword in parse_cache_flt() |
| - MINOR: config: Don't dump keywords if argument is NULL |
| - MEDIUM: checks: Make post-41 the default mode for mysql checks |
| - BUG/MINOR: logs: prevent double line returns in some events. |
| - MEDIUM: sink: build header in sink_write for log formats |
| - MEDIUM: logs: buffer targets now rely on new sink_write |
| - MEDIUM: sink: add global statement to create a new ring (sink buffer) |
| - MEDIUM: hpack: use a pool for the hpack table |
| - BUG/MAJOR: mux-fcgi: Stop sending loop if FCGI stream is blocked for any reason |
| - BUG/MEDIUM: ring: write-lock the ring while attaching/detaching |
| - MINOR: applet: adopt the wait list entry from the CLI |
| - MINOR: ring: make the applet code not depend on the CLI |
| - Revert "MEDIUM: sink: add global statement to create a new ring (sink buffer)" |
| - CI: travis-ci: fix libslz download URL |
| - MINOR: ssl: split config and runtime variable for ssl-{min,max}-ver |
| - CLEANUP: http_ana: Remove unused TXN flags |
| - BUG/MINOR: http-rules: Mark http return rules as final |
| - MINOR: http-htx: Add http_reply type based on what is used for http return rules |
| - CLEANUP: http-htx: Rename http_error structure into http_error_msg |
| - MINOR: http-rules: Use http_reply structure for http return rules |
| - MINOR: http-htx: Use a dedicated function to release http_reply objects |
| - MINOR: http-htx: Use a dedicated function to parse http reply arguments |
| - MINOR: http-htx: Use a dedicated function to check http reply validity |
| - MINOR: http-ana: Use a dedicated function to send a response from an http reply |
| - MEDIUM: http-rules: Rely on http reply for http deny/tarpit rules |
| - MINOR: http-htx: Store default error messages in a global http reply array |
| - MINOR: http-htx: Store messages of an http-errors section in a http reply array |
| - MINOR: http-htx: Store errorloc/errorfile messages in http replies |
| - MINOR: proxy: Add references on http replies for proxy error messages |
| - MINOR: http-htx: Use http reply from the http-errors section |
| - MINOR: http-ana: Use a TXN flag to prevent after-response ruleset evaluation |
| - MEDIUM: http-ana: Use http replies for HTTP error messages |
| - CLEANUP: http-htx: Remove unused storage of error messages in buffers |
| - MINOR: htx: Add a function to copy a buffer in an HTX message |
| - CLEANUP: channel: Remove channel_htx_copy_msg() function |
| - MINOR: http-ana: Add a function to write an http reply in an HTX message |
| - MINOR: http-htx/proxy: Add http-error directive using http return syntax |
| - DOC: Fix "errorfile" description in the configuration manual |
| - BUG/MINOR: checks: Respect check-ssl param when a port or an addr is specified |
| - BUILD: hpack: make sure the hpack table can still be built standalone |
| - CONTRIB: hpack: make use of the simplified standalone HPACK API |
| - MINOR: connection: add pp2-never-send-local to support old PP2 behavior |
| |
| 2020/05/05 : 2.2-dev7 |
| - MINOR: version: Show uname output in display_version() |
| - CI: run weekly OpenSSL "no-deprecated" builds |
| - CLEANUP: log: fix comment of parse_logformat_string() |
| - DOC: Improve documentation on http-request set-src |
| - MINOR: ssl/cli: disallow SSL options for directory in 'add ssl crt-list' |
| - MINOR: ssl/cli: restrain certificate path when inserting into a directory |
| - MINOR: ssl: add ssl-skip-self-issued-ca global option |
| - BUG/MINOR: ssl: default settings for ssl server options are not used |
| - MINOR: config: add a global directive to set default SSL curves |
| - BUG/MEDIUM: http-ana: Handle NTLM messages correctly. |
| - DOC: internals: update the SSL architecture schema |
| - BUG/MINOR: tools: fix the i386 version of the div64_32 function |
| - BUG/MINOR: mux-fcgi/trace: fix wrong set of trace flags in fcgi_strm_add_eom() |
| - BUG/MINOR: http: make url_decode() optionally convert '+' to SP |
| - DOC: option logasap does not depend on mode |
| - MEDIUM: memory: make pool_gc() run under thread isolation |
| - MINOR: contrib: make the peers wireshark dissector a plugin |
| - BUG/MINOR: http-ana: Throw a 500 error if after-response ruleset fails on errors |
| - BUG/MINOR: check: Update server address and port to execute an external check |
| - MINOR: mini-clist: Add functions to iterate backward on a list |
| - MINOR: checks: Add a way to send custom headers and payload during http chekcs |
| - MINOR: server: respect warning and alert semantic |
| - BUG/MINOR: checks: Respect the no-check-ssl option |
| - BUG/MEDIUM: server/checks: Init server check during config validity check |
| - CLEANUP: checks: Don't export anymore init_check and srv_check_healthcheck_port |
| - BUG/MINOR: checks: chained expect will not properly wait for enough data |
| - BUG/MINOR: checks: Forbid tcp-check lines in default section as documented |
| - MINOR: checks: Use an enum to describe the tcp-check rule type |
| - MINOR: checks: Simplify connection flag parsing in tcp-check connect |
| - MEDIUM: checks: rewind to the first inverse expect rule of a chain on new data |
| - MINOR: checks: simplify tcp expect config parser |
| - MINOR: checks: add min-recv tcp-check expect option |
| - MINOR: checks: add linger option to tcp connect |
| - MINOR: checks: define a tcp expect type |
| - MEDIUM: checks: rewrite tcp-check expect block |
| - MINOR: checks: Stop xform buffers to null-terminated string for tcp-check rules |
| - MINOR: checks: add rbinary expect match type |
| - MINOR: checks: Simplify functions to get step id and comment |
| - MEDIUM: checks: capture groups in expect regexes |
| - MINOR: checks: Don't use a static tcp rule list head |
| - MEDIUM: checks: Use a non-comment rule iterator to get next rule |
| - MEDIUM: proxy/checks: Register a keyword to parse tcp-check rules |
| - MINOR: checks: Set the tcp-check rule index during parsing |
| - MINOR: checks: define tcp-check send type |
| - MINOR: checks: define a tcp-check connect type |
| - MEDIUM: checks: Add implicit tcp-check connect rule |
| - MAJOR: checks: Refactor and simplify the tcp-check loop |
| - MEDIUM: checks: Associate a session to each tcp-check healthcheck |
| - MINOR: checks/vars: Add a check scope for variables |
| - MEDIUM: checks: Parse custom action rules in tcp-checks |
| - MINOR: checks: Add support to set-var and unset-var rules in tcp-checks |
| - MINOR: checks: Add the sni option for tcp-check connect rules |
| - MINOR: checks: Add the via-socks4 option for tcp-check connect rules |
| - MINOR: checks: Add the alpn option for tcp-check connect rules |
| - MINOR: ssl: Export a generic function to parse an alpn string |
| - MINOR: checks: Add the default option for tcp-check connect rules |
| - MINOR: checks: Add the addr option for tcp-check connect rule |
| - MEDIUM: checks: Support expression to set the port |
| - MEDIUM: checks: Support log-format strings for tcp-check send rules |
| - MINOR: log: Don't depends on a stream to process samples in log-format string |
| - MINOR: log: Don't systematically set LW_REQ when a sample expr is added |
| - MEDIUM: checks: Add a shared list of tcp-check rules |
| - MINOR: sample: add htonl converter |
| - MINOR: sample: add cut_crlf converter |
| - MINOR: sample: add ltrim converter |
| - MINOR: sample: add rtrim converter |
| - MINOR: checks: Use a name for the healthcheck status enum |
| - MINOR: checks: Add option to tcp-check expect rules to customize error status |
| - MINOR: checks: Merge tcp-check comment rules with the others at config parsing |
| - MINOR: checks: Add a sample fetch to extract a block from the input check buffer |
| - MEDIUM: checks: Add on-error/on-success option on tcp-check expect rules |
| - MEDIUM: checks: Add status-code sample expression on tcp-check expect rules |
| - MINOR: checks: Relax the default option for tcp-check connect rules |
| - MEDIUM: checks: Add a list of vars to set before executing a tpc-check ruleset |
| - MINOR: checks: Export the tcpcheck_eval_ret enum |
| - MINOR: checks: Use dedicated function to handle onsuccess/onerror messages |
| - MINOR: checks: Support custom functions to eval a tcp-check expect rules |
| - MEDIUM: checks: Implement redis check using tcp-check rules |
| - MEDIUM: checks: Implement ssl-hello check using tcp-check rules |
| - MEDIUM: checks: Implement smtp check using tcp-check rules |
| - MEDIUM: checks: Implement postgres check using tcp-check rules |
| - MEDIUM: checks: Implement MySQL check using tcp-check rules |
| - MEDIUM: checks: Implement LDAP check using tcp-check rules |
| - MEDIUM: checks: Implement SPOP check using tcp-check rules |
| - MINOR: server/checks: Move parsing of agent keywords in checks.c |
| - MINOR: server/checks: Move parsing of server check keywords in checks.c |
| - MEDIUM: checks: Implement agent check using tcp-check rules |
| - REGTEST: Adapt regtests about checks to recent changes |
| - MINOR: Produce tcp-check info message for pure tcp-check rules only |
| - MINOR: checks: Add an option to set success status of tcp-check expect rules |
| - MINOR: checks: Improve log message of tcp-checks on success |
| - MINOR: proxy/checks: Move parsing of httpchk option in checks.c |
| - MINOR: proxy/checks: Move parsing of tcp-check option in checks.c |
| - MINOR: proxy/checks: Register a keyword to parse http-check rules |
| - MINOR: proxy/checks: Move parsing of external-check option in checks.c |
| - MINOR: proxy/checks: Register a keyword to parse external-check rules |
| - MEDIUM: checks: Use a shared ruleset to store tcp-check rules |
| - MINOR: checks: Use an indirect string to represent the expect matching string |
| - MINOR: checks: Introduce flags to configure in tcp-check expect rules |
| - MINOR: standard: Add my_memspn and my_memcspn |
| - MINOR: checks: Add a reverse non-comment rule iterator to get last rule |
| - MAJOR: checks: Implement HTTP check using tcp-check rules |
| - MINOR: checks: Make resume conditions more explicit in tcpcheck_main() |
| - MINOR: connection: Add macros to know if a conn or a cs uses an HTX mux |
| - MEDIUM: checks: Refactor how data are received in tcpcheck_main() |
| - MINOR: checks/obj_type: Add a new object type for checks |
| - BUG/MINOR: obj_type: Handle stream object in obj_base_ptr() function |
| - MINOR: checks: Use the check as origin when a session is created |
| - MINOR: checks: Add a mux proto to health-check and tcp-check connect rule |
| - MINOR: connection: Add a function to install a mux for a health-check |
| - MAJOR: checks: Use the best mux depending on the protocol for health checks |
| - MEDIUM: checks: Implement default TCP check using tcp-check rules |
| - MINOR: checks: Remove unused code about pure TCP checks |
| - CLEANUP: checks: Reorg checks.c file to be more readable |
| - REGTEST: Fix reg-tests about health-checks to adapt them to recent changes |
| - MINOR: ist: Add a function to retrieve the ist pointer |
| - MINOR: checks: Use ist API as far as possible |
| - BUG/MEDIUM: checks: Be sure to subscribe for sends if outgoing data remains |
| - MINOR: checks: Use a tree instead of a list to store tcp-check rulesets |
| - BUG/MINOR: checks: Send the right amount of outgoing data for HTTP checks |
| - REGTEST: Add scripts to test based tcp-check health-checks |
| - Revert "MEDIUM: checks: capture groups in expect regexes" |
| - DOC: Add documentation about comments for tcp-check and http-check directives |
| - DOC: Fix the tcp-check and http-check directives layout |
| - BUG/MEDIUM: checks: Use the mux protocol specified on the server line |
| - MINOR: checks: Support mux protocol definition for tcp and http health checks |
| - BUG/MINOR: mux-fcgi: Be sure to have a connection as session's origin to use it |
| - MINOR: checks: Support list of status codes on http-check expect rules |
| - BUG/MEDIUM: checks: Unsubscribe to mux events when a conn-stream is destroyed |
| - REGTEST: Add a script to validate agent checks |
| - BUG/MINOR: server: Fix server_finalize_init() to avoid unused variable |
| - BUG/MEDIUM: checks: unsubscribe for events on the old conn-stream on connect |
| - BUG/MINOR: checks: Only use ssl_sock_is_ssl() if compiled with SSL support |
| - BUG/MINOR: checks/server: use_ssl member must be signed |
| - BUG/MEDIUM: sessions: Always pass the mux context as argument to destroy a mux |
| - BUG/MEDIUM: checks: Destroy the conn-stream before the session |
| - BUG/MINOR: checks: Fix PostgreSQL regex on the authentication packet |
| - CI: cirrus-ci: remove reg-tests/checks/tcp-check-ssl.vtc on CentOS 6 |
| - MINOR: checks: Support HTTP/2 version (without '.0') for http-check send rules |
| - MINOR: checks: Use ver keyword to specify the HTTP version for http checks |
| - BUG/MINOR: checks: Remove wrong variable redeclaration |
| - BUG/MINOR: checks: Properly handle truncated mysql server messages |
| - CLEANUP: checks: Remove unused code when ldap server message is parsed |
| - MINOR: checks: Make the use of the check's server more explicit on connect |
| - BUG/MINOR: checks: Avoid incompatible cast when a binary string is parsed |
| - BUG/MINOR: checks: Remove bad call to free() when an expect rule is parsed |
| - BUG/MINOR: checks: Don't lose warning on proxy capability |
| - MINOR: log: Add "Tu" timer |
| - BUG/MINOR: checks: Set the output buffer length before calling parse_binary() |
| - BUG/MEDIUM: mux-h1: make sure we always have a timeout on front connections |
| - REGTEST: ssl: test the client certificate authentication |
| - DOC: give a more accurate description of what check does |
| - BUG/MEDIUM: capture: capture-req/capture-res converters crash without a stream |
| - BUG/MEDIUM: capture: capture.{req,res}.* crash without a stream |
| - BUG/MEDIUM: http: the "http_first_req" sample fetch could crash without a steeam |
| - BUG/MEDIUM: http: the "unique-id" sample fetch could crash without a steeam |
| - CLEANUP: http: add a few comments on certain functions' assumptions about streams |
| - BUG/MEDIUM: sample: make the CPU and latency sample fetches check for a stream |
| - MINOR: http-htx: Export functions to update message authority and host |
| - MINOR: checks: Don't support multiple host header for http-check send rule |
| - MINOR: checks: Skip some headers for http-check send rules |
| - MINOR: checks: Keep the Host header and the request uri synchronized |
| - CLEANUP: checks: Fix checks includes |
| - DOC: Fix send rules in the http-check connect example |
| - DOC: Add more info about request formatting in http-check send description |
| - REGTEST: http-rules: Require PCRE or PCRE2 option to run map_redirect script |
| - REGTEST: ssl: remove curl from the "add ssl crt-list" test |
| - REGTEST: ssl: improve the "set ssl cert" test |
| - CLEANUP: ssl: silence a build warning when threads are disabled |
| - BUG/MEDIUM: listener: mark the thread as not stuck inside the loop |
| - MINOR: threads: export the POSIX thread ID in panic dumps |
| - BUG/MINOR: debug: properly use long long instead of long for the thread ID |
| - BUG/MEDIUM: shctx: really check the lock's value while waiting |
| - BUG/MEDIUM: shctx: bound the number of loops that can happen around the lock |
| - MINOR: stream: report the list of active filters on stream crashes |
| - BUG/MEDIUM: mux-fcgi: Return from detach if server don't keep the connection |
| - BUG/MEDIUM: mux_fcgi: Free the FCGI connection at the end of fcgi_release() |
| - BUG/MEDIUM: mux-fcgi: Fix wrong test on FCGI_CF_KEEP_CONN in fcgi_detach() |
| - BUG/MEDIUM: connections: force connections cleanup on server changes |
| - BUG/MEDIUM: h1: Don't compare host and authority if only h1 headers are parsed |
| - BUG/MEDIUM: ssl: fix the id length check within smp_fetch_ssl_fc_session_id() |
| - CLEANUP: connections: align function declaration |
| - BUG/MINOR: sample: Set the correct type when a binary is converted to a string |
| - MEDIUM: checks/http-fetch: Support htx prefetch from a check for HTTP samples |
| - DOC: Document the log-format parameter for tcp-check send/send-binary rules |
| - MINOR: checks: Add support of payload-based sample fetches |
| - MINOR: checks: Add support of be_id, be_name, srv_id and srv_name sample fetches |
| - MINOR: checks: Add support of server side ssl sample fetches |
| - MINOR: checks: Add support of HTTP response sample fetches |
| - MINOR: http-htx: Support different methods to look for header names |
| - MINOR: checks: Set by default expect rule status to UNKNOWN during parsing |
| - BUG/MINOR: checks: Support multiple HTTP expect rules |
| - REGTEST: checks: Fix sync condition for agent-check |
| - MEDIUM: checks: Support matching on headers for http-check expect rules |
| - MINOR: lua: allow changing port with set_addr |
| - BUG/MINOR: da: Fix HTX message prefetch |
| - BUG/MINOR: wurfl: Fix HTX message prefetch |
| - BUG/MINOR: 51d: Fix HTX message prefetch |
| - MINOR: ist: add istadv() function |
| - MINOR: ist: add istissame() function |
| - MINOR: istbuf: add ist2buf() function |
| - BUG/MINOR: threads: fix multiple use of argument inside HA_ATOMIC_CAS() |
| - BUG/MINOR: threads: fix multiple use of argument inside HA_ATOMIC_UPDATE_{MIN,MAX}() |
| - DOC: update intro.txt for 2.2 |
| - DOC: intro: add a contacts section |
| |
| 2020/04/17 : 2.2-dev6 |
| - BUG/MINOR: ssl: memory leak when find_chain is NULL |
| - CLEANUP: ssl: rename ssl_get_issuer_chain to ssl_get0_issuer_chain |
| - MINOR: ssl: rework add cert chain to CTX to be libssl independent |
| - BUG/MINOR: peers: init bind_proc to 1 if it wasn't initialized |
| - BUG/MINOR: peers: avoid an infinite loop with peers_fe is NULL |
| - BUG/MINOR: peers: Use after free of "peers" section. |
| - CI: github actions: add weekly h2spec test |
| - BUG/MEDIUM: mux_h1: Process a new request if we already received it. |
| - MINOR: build: Fix build in mux_h1 |
| - CLEANUP: remove obsolete comments |
| - BUG/MEDIUM: dns: improper parsing of aditional records |
| - MINOR: ssl: skip self issued CA in cert chain for ssl_ctx |
| - MINOR: listener: add so_name sample fetch |
| - MEDIUM: stream: support use-server rules with dynamic names |
| - MINOR: servers: Add a counter for the number of currently used connections. |
| - MEDIUM: connections: Revamp the way idle connections are killed |
| - MINOR: cli: add a general purpose pointer in the CLI struct |
| - MINOR: ssl: add a list of bind_conf in struct crtlist |
| - REORG: ssl: move SETCERT enum to ssl_sock.h |
| - BUG/MINOR: ssl: ckch_inst wrongly inserted in crtlist_entry |
| - REORG: ssl: move some functions above crtlist_load_cert_dir() |
| - MINOR: ssl: use crtlist_free() upon error in directory loading |
| - MINOR: ssl: add a list of crtlist_entry in ckch_store |
| - MINOR: ssl: store a ptr to crtlist in crtlist_entry |
| - MINOR: ssl/cli: update pointer to store in 'commit ssl cert' |
| - MEDIUM: ssl/cli: 'add ssl crt-list' command |
| - REGTEST: ssl/cli: test the 'add ssl crt-list' command |
| - BUG/MINOR: ssl: entry->ckch_inst not initialized |
| - REGTEST: ssl/cli: change test type to devel |
| - REGTEST: make the PROXY TLV validation depend on version 2.2 |
| - CLEANUP: assorted typo fixes in the code and comments |
| - BUG/MINOR: stats: Fix color of draining servers on stats page |
| - DOC: internals: Fix spelling errors in filters.txt |
| - MINOR: connections: Don't mark conn flags 0x00000001 and 0x00000002 as unused. |
| - REGTEST: make the unique-id test depend on version 2.0 |
| - BUG/MEDIUM: dns: Consider the fact that dns answers are case-insensitive |
| - MINOR: ssl: split the line parsing of the crt-list |
| - MINOR: ssl/cli: support filters and options in add ssl crt-list |
| - MINOR: ssl: add a comment above the ssl_bind_conf keywords |
| - REGTEST: ssl/cli: tests options and filters w/ add ssl crt-list |
| - REGTEST: ssl: pollute the crt-list file |
| - BUG/CRITICAL: hpack: never index a header into the headroom after wrapping |
| - BUG/MINOR: protocol_buffer: Wrong maximum shifting. |
| - CLEANUP: src/fd.c: mask setsockopt with DISGUISE |
| - BUG/MINOR: ssl/cli: initialize fcount int crtlist_entry |
|