willy tarreau | 036e1ce | 2005-12-17 13:46:33 +0100 | [diff] [blame] | 1 | ChangeLog : |
| 2 | =========== |
willy tarreau | 4302f49 | 2005-12-18 01:00:37 +0100 | [diff] [blame] | 3 | |
willy tarreau | 64a3cc3 | 2005-12-18 01:13:11 +0100 | [diff] [blame^] | 4 | 2005/04/30 : 1.2.5 (1.1.31) |
| 5 | - changed the runtime argument to disable epoll() to '-de' |
| 6 | - changed the runtime argument to disable poll() to '-dp' |
| 7 | - added global options 'nopoll' and 'noepoll' to do the same at the |
| 8 | configuration level. |
| 9 | - added a 'linux24e' target to the Makefile for Linux 2.4 systems patched to |
| 10 | support epoll(). |
| 11 | - changed default FD_SETSIZE to 65536 on Solaris (default=1024) |
| 12 | - conditionned signals redirection to #ifdef DEBUG_MEMORY |
| 13 | |
willy tarreau | 1c2ad21 | 2005-12-18 01:11:29 +0100 | [diff] [blame] | 14 | 2005/04/26 : 1.2.5-pre4 |
| 15 | - made epoll() support a compile-time option : ENABLE_EPOLL |
| 16 | - provided a very little libc replacement for a possibly missing epoll() |
| 17 | implementation which can be enabled by -DUSE_MY_EPOLL |
| 18 | - implemented the poll() poller, which can be enabled with -DENABLE_POLL. |
| 19 | The equivalent runtime argument becomes '-P'. A few tests show that it |
| 20 | performs like select() with many fds, but slightly slower (certainly |
| 21 | because of the higher amount of memory involved). |
| 22 | - separated the 3 polling methods and the tasks scheduler into 4 distinct |
| 23 | functions which makes the code a lot more modular. |
| 24 | - moved some event tables to private static declarations inside the poller |
| 25 | functions. |
| 26 | - the poller functions can now initialize themselves, run, and cleanup. |
| 27 | - changed the runtime argument to enable epoll() to '-E'. |
| 28 | - removed buggy epoll_ctl() code in the client_retnclose() function. This |
| 29 | function was never meant to remove anything. |
| 30 | - fixed a typo which caused glibc to yell about a double free on exit. |
| 31 | - removed error checking after epoll_ctl(DEL) because we can never know if |
| 32 | the fd is still active or already closed. |
| 33 | - added a few entries in the makefile |
| 34 | |
willy tarreau | ad90a0c | 2005-12-18 01:09:15 +0100 | [diff] [blame] | 35 | 2005/04/25 : 1.2.5-pre3 |
| 36 | - experimental epoll() support (use temporary '-e' argument) |
| 37 | |
| 38 | 2005/04/24 : 1.2.5-pre2 |
willy tarreau | c1f4753 | 2005-12-18 01:08:26 +0100 | [diff] [blame] | 39 | - implemented the HTTP 303 code for error redirection. This forces the |
| 40 | browser to fetch the given URI with a GET request. The new keyword for |
| 41 | this is 'errorloc303', and a new 'errorloc302' keyword has been created |
| 42 | to make them easily distinguishable. |
| 43 | - added more controls in the parser for valid use of '\x' sequence. |
| 44 | - few fixes from Alex & Klaus |
| 45 | |
willy tarreau | ad90a0c | 2005-12-18 01:09:15 +0100 | [diff] [blame] | 46 | 2005/02/17 : 1.2.5-pre1 |
willy tarreau | c1f4753 | 2005-12-18 01:08:26 +0100 | [diff] [blame] | 47 | - fixed a few errors in the documentation |
| 48 | |
| 49 | 2005/02/13 |
| 50 | - do not pre-initialize unused file-descriptors before select() anymore. |
| 51 | |
willy tarreau | 1235015 | 2005-12-18 01:03:27 +0100 | [diff] [blame] | 52 | 2005/01/22 : 1.2.4 |
| 53 | - merged Alexander Lazic's and Klaus Wagner's work on application |
| 54 | cookie-based persistence. Since this is the first merge, this version is |
| 55 | not intended for general use and reports are more than welcome. Some |
| 56 | documentation is really needed though. |
| 57 | |
willy tarreau | 0174f31 | 2005-12-18 01:02:42 +0100 | [diff] [blame] | 58 | 2005/01/22 : 1.2.3 (1.1.30) |
| 59 | - add an architecture guide to the documentation |
| 60 | - released without any changes |
| 61 | |
| 62 | 2004/12/26 : 1.2.3-pre1 (1.1.30-pre1) |
| 63 | - increased default BUFSIZE to 16 kB to accept max headers of 8 kB which is |
| 64 | compatible with Apache. This limit can be configured in the makefile now. |
| 65 | Thanks to Eric Fehr for the checks. |
| 66 | - added a per-server "source" option which now makes it possible to bind to |
| 67 | a different source for each (potentially identical) server. |
| 68 | - changed cookie-based server selection slightly to allow several servers to |
| 69 | share a same cookie, thus making it possible to associate backup servers to |
| 70 | live servers and ease soft-stop for maintenance periods. (Alexander Lazic) |
| 71 | - added the cookie 'prefix' mode which makes it possible to use persistence |
| 72 | with thin clients which support only one cookie. The server name is prefixed |
| 73 | before the application cookie, and restore back. |
| 74 | - fixed the order of servers within an instance to match documentation. Now |
| 75 | the servers are *really* used in the order of their declaration. This is |
| 76 | particularly important when multiple backup servers are in use. |
| 77 | |
willy tarreau | 4302f49 | 2005-12-18 01:00:37 +0100 | [diff] [blame] | 78 | 2004/10/18 : 1.2.2 (1.1.29) |
| 79 | - fixed a bug where a TCP connection would be logged twice if the 'logasap' |
| 80 | option was enabled without the 'tcplog' option. |
| 81 | - encode_string() would use hdr_encode_map instead of the map argument. |
| 82 | |
| 83 | 2004/08/10 : (1.1.29-pre2) |
| 84 | - the logged request is now encoded with '#XX' for unprintable characters |
| 85 | - new keywords 'capture request header' and 'capture response header' enable |
| 86 | logging of arbitrary HTTP headers in requests and responses |
| 87 | - removed "-DSOLARIS" after replacing the last inet_aton() with inet_pton() |
| 88 | |
willy tarreau | 982249e | 2005-12-18 00:57:06 +0100 | [diff] [blame] | 89 | 2004/06/06 : 1.2.1 (1.1.28) |
| 90 | - added the '-V' command line option to verbosely report errors even though |
| 91 | the -q or 'quiet' options are specified. This is useful with '-c'. |
| 92 | - added a Red Hat init script and a .spec from Simon Matter <simon.matter@invoca.ch> |
willy tarreau | 036e1ce | 2005-12-17 13:46:33 +0100 | [diff] [blame] | 93 | |
willy tarreau | 982249e | 2005-12-18 00:57:06 +0100 | [diff] [blame] | 94 | 2004/06/05 : |
| 95 | - added the "logasap" option which produces a log without waiting for the data |
| 96 | to be transferred from the server to the client. |
| 97 | - added the "httpclose" option which removes any "connection:" header and adds |
| 98 | "Connection: close" in both direction. |
willy tarreau | 97f5857 | 2005-12-18 00:53:44 +0100 | [diff] [blame] | 99 | - added the 'checkcache' option which blocks cacheable responses containing |
| 100 | dangerous headers, such as 'set-cookie'. |
willy tarreau | 982249e | 2005-12-18 00:57:06 +0100 | [diff] [blame] | 101 | - added 'rspdeny' and 'rspideny' to block certain responses to avoid sensible |
| 102 | information leak from servers. |
willy tarreau | 25c4ea5 | 2005-12-18 00:49:49 +0100 | [diff] [blame] | 103 | |
| 104 | 2004/04/18 : |
willy tarreau | dd07e97 | 2005-12-18 00:48:48 +0100 | [diff] [blame] | 105 | - send an EMERG log when no server is available for a given proxy |
| 106 | - added the '-c' command line option to syntactically check the |
| 107 | configuration file without starting the service. |
| 108 | |
willy tarreau | 8a86dbf | 2005-12-18 00:45:59 +0100 | [diff] [blame] | 109 | 2003/11/09 : 1.2.0 |
| 110 | - the same as 1.1.27 + IPv6 support on the client side |
| 111 | |
willy tarreau | fe2c5c1 | 2005-12-17 14:14:34 +0100 | [diff] [blame] | 112 | 2003/10/27 : 1.1.27 |
| 113 | - the configurable HTTP health check introduced in 1.1.23 revealed a shameful |
| 114 | bug : the code still assumed that HTTP requests were the same size as the |
| 115 | original ones (22 bytes), and failed if they were not. |
| 116 | - added support for pidfiles. |
| 117 | |
willy tarreau | c58fc69 | 2005-12-17 14:13:08 +0100 | [diff] [blame] | 118 | 2003/10/22 : 1.1.26 |
| 119 | - the fix introduced in 1.1.25 for client timeouts while waiting for servers |
| 120 | broke almost all compatibility with POST requests, because the proxy |
| 121 | stopped to read anything from the client as soon as it got all of its |
| 122 | headers. |
| 123 | |
willy tarreau | c1cae63 | 2005-12-17 14:12:23 +0100 | [diff] [blame] | 124 | 2003/10/15 : 1.1.25 |
| 125 | - added the 'tcplog' option, which provides enhanced, HTTP-like logs for |
| 126 | generic TCP proxies, or lighter logs for HTTP proxies. |
| 127 | - fixed a time-out condition wrongly reported as client time-out in data |
| 128 | phase if the client timeout was lower than the connect timeout times the |
| 129 | number of retries. |
| 130 | |
willy tarreau | 197e8ec | 2005-12-17 14:10:59 +0100 | [diff] [blame] | 131 | 2003/09/21 : 1.1.24 |
| 132 | - if a client sent a full request then shut its write connection down, then |
| 133 | the request was aborted. This case was detected only when using haproxy |
| 134 | both as health-check client and as a server. |
| 135 | - if 'option httpchk' is used in a 'health' mode server, then responses will |
| 136 | change from 'OK' to 'HTTP/1.0 200 OK'. |
| 137 | - fixed a Linux-only bug in case of HTTP server health-checks, where a single |
| 138 | server response followed by a close could be ignored, and the server seen |
| 139 | as failed. |
| 140 | |
willy tarreau | eedaa9f | 2005-12-17 14:08:03 +0100 | [diff] [blame] | 141 | 2003/09/19 : 1.1.23 |
| 142 | - fixed a stupid bug introduced in 1.1.22 which caused second and subsequent |
| 143 | 'default' sections to keep previous parameters, and not initialize logs |
| 144 | correctly. |
| 145 | - fixed a second stupid bug introduced in 1.1.22 which caused configurations |
| 146 | relying on 'dispatch' mode to segfault at the first connection. |
| 147 | - 'option httpchk' now supports method, HTTP version and a few headers. |
| 148 | - now, 'option httpchk', 'cookie' and 'capture' can be specified in |
| 149 | 'defaults' section |
| 150 | |
| 151 | 2003/09/10 : 1.1.22 |
willy tarreau | a41a8b4 | 2005-12-17 14:02:24 +0100 | [diff] [blame] | 152 | - 'listen' now supports optionnal address:port-range lists |
| 153 | - 'bind' introduced to add new listen addresses |
| 154 | - fixed a bug which caused a session to be kept established on a server till |
| 155 | it timed out if the client closed during the DATA phase. |
| 156 | - the port part of each server address can now be empty to make the proxy |
| 157 | connect to the server on the same port it was connected to, be an absolute |
| 158 | unsigned number to reflect a single port (as in older versions), or an |
| 159 | explicitly signed number (+N/-N) to indicate that this offset must be |
| 160 | applied to the port the proxy was connected to, when connecting to the |
| 161 | server. |
| 162 | - the 'port' server option allows the user to specify a different |
| 163 | health-check port than the service one. It is mandatory when only relative |
| 164 | ports have been specified and check is required. By default, the checks are |
| 165 | sent to the service port. |
| 166 | - new 'defaults' section which is rather similar to 'listen' except that all |
| 167 | values are only used as default values for future 'listen' sections, until |
| 168 | a new 'defaults' resets them. At the moment, server options, regexes, |
| 169 | cookie names and captures cannot be set in the 'defaults' section. |
| 170 | |
willy tarreau | 2f6ba65 | 2005-12-17 13:57:42 +0100 | [diff] [blame] | 171 | 2003/05/06 : 1.1.21 |
| 172 | - changed the debug output format so that it now includes the session unique |
| 173 | ID followed by the instance name at the beginning of each line. |
| 174 | - in debug mode, accept now shows the client's IP and port. |
| 175 | - added one 3 small debugging scripts to search and pretty print debug output |
| 176 | - changed the default health check request to "OPTIONS /" instead of |
| 177 | "OPTIONS *" since not all servers implement the later one. |
| 178 | - "option httpchk" now accepts an optional parameter allowing the user to |
| 179 | specify and URI other than '/' during health-checks. |
| 180 | |
willy tarreau | b1ff9db | 2005-12-17 13:51:03 +0100 | [diff] [blame] | 181 | 2003/04/21 : 1.1.20 |
| 182 | - fixed two problems with time-outs, one where a server would be logged as |
| 183 | timed out during transfer that take longer to complete than the fixed |
| 184 | time-out, and one where clients were logged as timed-out during the data |
| 185 | phase because they didn't have anything to send. This sometimes caused |
| 186 | slow client connections to close too early while in fact there was no |
| 187 | problem. The proper fix would be to have a per-fd time-out with |
| 188 | conditions depending on the state of the HTTP FSM. |
| 189 | |
willy tarreau | 906b268 | 2005-12-17 13:49:52 +0100 | [diff] [blame] | 190 | 2003/04/16 : 1.1.19 |
| 191 | - haproxy was NOT RFC compliant because it was case-sensitive on HTTP |
| 192 | "Cookie:" and "Set-Cookie:" headers. This caused JVM 1.4 to fail on |
| 193 | cookie persistence because it uses "cookie:". Two memcmp() have been |
| 194 | replaced with strncasecmp(). |
| 195 | |
willy tarreau | 036e1ce | 2005-12-17 13:46:33 +0100 | [diff] [blame] | 196 | 2003/04/02 : 1.1.18 |
| 197 | - Haproxy can be compiled with PCRE regex instead of libc regex, by setting |
| 198 | REGEX=pcre on the make command line. |
| 199 | - HTTP health-checks now use "OPTIONS *" instead of "OPTIONS /". |
| 200 | - when explicit source address binding is required, it is now also used for |
| 201 | health-checks. |
| 202 | - added 'reqpass' and 'reqipass' to allow certain headers but not the request |
| 203 | itself. |
| 204 | - factored several strings to reduce binary size by about 2 kB. |
| 205 | - replaced setreuid() and setregid() with more standard setuid() and setgid(). |
| 206 | - added 4 status flags to the log line indicating who ended the connection |
| 207 | first, the sessions state, the validity of the cookie, and action taken on |
| 208 | the set-cookie header. |
| 209 | |
| 210 | 2002/10/18 : 1.1.17 |
| 211 | - add the notion of "backup" servers, which are used only when all other |
| 212 | servers are down. |
| 213 | - make Set-Cookie return "" instead of "(null)" when the server has no |
| 214 | cookie assigned (useful for backup servers). |
| 215 | - "log" now supports an optionnal level name (info, notice, err ...) above |
| 216 | which nothing is sent. |
| 217 | - replaced some strncmp() with memcmp() for better efficiency. |
| 218 | - added "capture cookie" option which logs client and/or server cookies |
| 219 | - cleaned up/down messages and dump servers states upon SIGHUP |
| 220 | - added a redirection feature for errors : "errorloc <errnum> <url>" |
| 221 | - now we won't insist on connecting to a dead server, even with a cookie, |
| 222 | unless option "persist" is specified. |
| 223 | - added HTTP/408 response for client request time-out and HTTP/50[234] for |
| 224 | server reply time-out or errors. |
| 225 | |
| 226 | 2002/09/01 : 1.1.16 |
| 227 | - implement HTTP health checks when option "httpchk" is specified. |
| 228 | |
| 229 | 2002/08/07 : 1.1.15 |
| 230 | - replaced setpgid()/setpgrp() with setsid() for better portability, because |
| 231 | setpgrp() doesn't have the same meaning under Solaris, Linux, and OpenBSD. |
| 232 | |
| 233 | 2002/07/20 : 1.1.14 |
| 234 | - added "postonly" cookie mode |
| 235 | |
| 236 | 2002/07/15 : 1.1.13 |
| 237 | - tv_diff used inverted parameters which led to negative times ! |
| 238 | |
| 239 | 2002/07/13 : 1.1.12 |
| 240 | - fixed stats monitoring, and optimized some tv_* for most common cases. |
| 241 | - replaced temporary 'newhdr' with 'trash' to reduce stack size |
| 242 | - made HTTP errors more HTML-fiendly. |
| 243 | - renamed strlcpy() to strlcpy2() because of a slightly difference between |
| 244 | their behaviour (return value), to avoid confusion. |
| 245 | - restricted HTTP messages to HTTP proxies only |
| 246 | - added a 502 message when the connection has been refused by the server, |
| 247 | to prevent clients from believing this is a zero-byte HTTP 0.9 reply. |
| 248 | - changed 'Cache-control:' from 'no-cache="set-cookie"' to 'private' when |
| 249 | inserting a cookie, because some caches (apache) don't understand it. |
| 250 | - fixed processing of server headers when client is in SHUTR state |
| 251 | |
| 252 | 2002/07/04 : |
| 253 | - automatically close fd's 0,1 and 2 when going daemon ; setpgrp() after |
| 254 | setpgid() |
| 255 | |
| 256 | 2002/06/04 : 1.1.11 |
| 257 | - fixed multi-cookie handling in client request to allow clean deletion |
| 258 | in insert+indirect mode. Now, only the server cookie is deleted and not |
willy tarreau | 906b268 | 2005-12-17 13:49:52 +0100 | [diff] [blame] | 259 | all the header. Should now be compliant to RFC2965. |
willy tarreau | 036e1ce | 2005-12-17 13:46:33 +0100 | [diff] [blame] | 260 | - added a "nocache" option to "cookie" to specify that we explicitly want |
| 261 | to add a "cache-control" header when we add a cookie. |
| 262 | It is also possible to add an "Expires: <old-date>" to keep compatibility |
| 263 | with old/broken caches. |
| 264 | |
| 265 | 2002/05/10 : 1.1.10 |
| 266 | - if a cookie is used in insert+indirect mode, it's desirable that the |
| 267 | the servers don't see it. It was not possible to remove it correctly |
| 268 | with regexps, so now it's removed automatically. |
| 269 | |
| 270 | 2002/04/19 : 1.1.9 |
| 271 | - don't use snprintf()'s return value as an end of message since it may |
| 272 | be larger. This caused bus errors and segfaults in internal libc's |
| 273 | getenv() during localtime() in send_log(). |
| 274 | - removed dead insecure send_syslog() function and all references to it. |
| 275 | - fixed warnings on Solaris due to buggy implementation of isXXXX(). |
| 276 | |
| 277 | 2002/04/18 : 1.1.8 |
| 278 | - option "dontlognull" |
| 279 | - fixed "double space" bug in config parser |
| 280 | - fixed an uninitialized server field in case of dispatch |
| 281 | with no existing server which could cause a segfault during |
| 282 | logging. |
| 283 | - the pid logged was always the father's, which was wrong for daemons. |
| 284 | - fixed wrong level "LOG_INFO" for message "proxy started". |
| 285 | |
| 286 | 2002/04/13 : |
| 287 | - http logging is now complete : |
| 288 | - ip:port, date, proxy, server |
| 289 | - req_time, conn_time, hdr_time, tot_time |
| 290 | - status, size, request |
| 291 | - source address |
| 292 | |
| 293 | 2002/04/12 : 1.1.7 |
| 294 | - added option forwardfor |
| 295 | - added reqirep, reqidel, reqiallow, reqideny, rspirep, rspidel |
| 296 | - added "log global" in "listen" section. |
| 297 | |
| 298 | 2002/04/09 : |
| 299 | - added a new "global" section : |
| 300 | - logs |
| 301 | - debug, quiet, daemon modes |
| 302 | - uid, gid, chroot, nbproc, maxconn |
| 303 | |
| 304 | 2002/04/08 : 1.1.6 |
| 305 | - regex are now chained and not limited anymore. |
| 306 | - unavailable server now returns HTTP/502. |
| 307 | - increased per-line args limit to 40 |
| 308 | - added reqallow/reqdeny to block some request on matches |
| 309 | - added HTTP 400/403 responses |
| 310 | |
| 311 | 2002/04/03 : 1.1.5 |
| 312 | - connection logging displayed incorrect source address. |
| 313 | - added proxy start/stop and server up/down log events. |
| 314 | - replaced log message short buffers with larger trash. |
| 315 | - enlarged buffer to 8 kB and replace buffer to 4 kB. |
| 316 | |
| 317 | 2002/03/25 : 1.1.4 |
| 318 | - made rise/fall/interval time configurable |
| 319 | |
| 320 | 2002/03/22 : 1.1.3 |
| 321 | - fixed a bug : cr_expire and cw_expire were inverted in CL_STSHUT[WR] |
| 322 | which could lead to loops. |
| 323 | |
| 324 | 2002/03/21 : 1.1.2 |
| 325 | - fixed a bug in buffer management where we could have a loop |
| 326 | between event_read() and process_{cli|srv} if R==BUFSIZE-MAXREWRITE. |
| 327 | => implemented an adjustable buffer limit. |
| 328 | - fixed a bug : expiration of tasks in wait queue timeout is used again, |
| 329 | and running tasks are skipped. |
| 330 | - added some debug lines for accept events. |
| 331 | - send warnings for servers up/down. |
| 332 | |
| 333 | 2002/03/12 : 1.1.1 |
| 334 | - fixed a bug in total failure handling |
| 335 | - fixed a bug in timestamp comparison within same second (tv_cmp_ms) |
| 336 | |
| 337 | 2002/03/10 : 1.1.0 |
| 338 | - fixed a few timeout bugs |
| 339 | - rearranged the task scheduler subsystem to improve performance, |
| 340 | add new tasks, and make it easier to later port to librt ; |
| 341 | - allow multiple accept() for one select() wake up ; |
| 342 | - implemented internal load balancing with basic health-check ; |
| 343 | - cookie insertion and header add/replace/delete, with better strings |
| 344 | support. |
| 345 | |
| 346 | 2002/03/08 |
| 347 | - reworked buffer handling to fix a few rewrite bugs, and |
| 348 | improve overall performance. |
| 349 | - implement the "purge" option to delete server cookies in direct mode. |
| 350 | |
| 351 | 2002/03/07 |
| 352 | - fixed some error cases where the maxfd was not decreased. |
| 353 | |
| 354 | 2002/02/26 |
| 355 | - now supports transparent proxying, at least on linux 2.4. |
| 356 | |
| 357 | 2002/02/12 |
| 358 | - soft stop works again (fixed select timeout computation). |
| 359 | - it seems that TCP proxies sometimes cannot timeout. |
| 360 | - added a "quiet" mode. |
| 361 | - enforce file descriptor limitation on socket() and accept(). |
| 362 | |
| 363 | 2001/12/30 : release of version 1.0.2 : fixed a bug in header processing |
| 364 | 2001/12/19 : release of version 1.0.1 : no MSG_NOSIGNAL on solaris |
| 365 | 2001/12/16 : release of version 1.0.0. |
| 366 | 2001/12/16 : added syslog capability for each accepted connection. |
| 367 | 2001/11/19 : corrected premature end of files and occasional SIGPIPE. |
| 368 | 2001/10/31 : added health-check type servers (mode health) which replies OK then closes. |
| 369 | 2001/10/30 : added the ability to support standard TCP proxies and HTTP proxies |
| 370 | with or without cookies (use keyword http for this). |
| 371 | 2001/09/01 : added client/server header replacing with regexps. |
| 372 | eg: |
| 373 | cliexp ^(Host:\ [^:]*).* Host:\ \1:80 |
| 374 | srvexp ^Server:\ .* Server:\ Apache |
| 375 | 2000/11/29 : first fully working release with complete FSMs and timeouts. |
| 376 | 2000/11/28 : major rewrite |
| 377 | 2000/11/26 : first write |