willy tarreau | 036e1ce | 2005-12-17 13:46:33 +0100 | [diff] [blame] | 1 | ChangeLog : |
| 2 | =========== |
willy tarreau | 4302f49 | 2005-12-18 01:00:37 +0100 | [diff] [blame] | 3 | |
willy tarreau | 7e6328d | 2006-05-21 23:26:20 +0200 | [diff] [blame] | 4 | 2006/05/21 : 1.2.14 |
| 5 | - new HTML status report with the 'stats' keyword. |
| 6 | - added the 'abortonclose' option to better resist traffic surges |
| 7 | - implemented dynamic traffic regulation with the 'minconn' option |
| 8 | - show request time on denied requests |
| 9 | - definitely fixed hot reconf on OpenBSD by the use of SO_REUSEPORT |
| 10 | - now a proxy instance is allowed to run without servers, which is |
| 11 | useful to dedicate one instance to stats |
| 12 | - added lots of error counters |
| 13 | - a missing parenthesis preventd matching of cacheable cookies |
| 14 | - a missing parenthesis in poll_loop() might have caused missed events. |
| 15 | |
Willy TARREAU | 4404b7e | 2006-05-14 10:00:09 +0200 | [diff] [blame] | 16 | 2006/05/14 : 1.2.13.1 |
| 17 | - an uninitialized field in the struct session could cause a crash when |
| 18 | the session was freed. This has been encountered on Solaris only. |
| 19 | - Solaris and OpenBSD no not support shutdown() on listening socket. Let's |
| 20 | be nice to them by performing a soft stop if pause fails. |
| 21 | |
willy tarreau | c3a2e07 | 2006-05-13 18:51:38 +0200 | [diff] [blame] | 22 | 2006/05/13 : 1.2.13 |
| 23 | - 'maxconn' server parameter to do per-server session limitation |
| 24 | - queueing to support non-blocking session limitation |
| 25 | - fixed removal of cookies for cookie-less servers such as backup servers |
| 26 | - two separate wait queues for expirable and non-expirable tasks provide |
| 27 | better performance with lots of sessions. |
| 28 | - some code cleanups and performance improvements |
| 29 | - made state dumps a bit more verbose |
| 30 | - fixed missing checks for NULL srv in dispatch mode |
| 31 | - load balancing on backup servers was not possible in source hash mode. |
| 32 | - two session flags shared the same bit, but fortunately they were not |
| 33 | compatible. |
| 34 | |
willy tarreau | c0d4bbd | 2006-04-15 21:47:50 +0200 | [diff] [blame] | 35 | 2006/04/15 : 1.2.12 |
| 36 | Very few changes preparing for more important changes to support per-server |
| 37 | session limitations and queueing : |
| 38 | - ignore leading empty lines in HTTP requests as suggested by RFC2616. |
| 39 | - added the 'weight' parameter to the servers, limited to 1..256. It applies |
| 40 | to roundrobin and source hash. |
| 41 | - the optional '-s' option could clobber '-st' and '-sf' if compiled in. |
| 42 | |
willy tarreau | e0dd269 | 2006-03-30 16:27:34 +0200 | [diff] [blame] | 43 | 2006/03/30 : 1.2.11.1 |
| 44 | - under some conditions, it might have been possible that when the |
| 45 | last dead server became available, it would not have been used |
| 46 | till another one would have changed state. Could not be reproduced |
| 47 | at all, however seems possible from the code. |
| 48 | |
willy tarreau | d2058dc | 2006-03-25 20:35:41 +0100 | [diff] [blame] | 49 | 2006/03/25 : 1.2.11 |
| 50 | - added the '-db' command-line option to disable backgrounding. |
| 51 | - added the -sf/-st command-line arguments which are used to specify |
| 52 | a list of pids to send a FINISH or TERMINATE signal upon startup. |
| 53 | They will also be asked to release their port if a bind fails. |
| 54 | - reworked the startup mechanism to allow the sending of a signal to a list |
| 55 | of old pids if a socket cannot be bound, with a retry for a limited amount |
| 56 | of time (1 second by default). |
| 57 | - added the ability to enforce limits on memory usage. |
| 58 | - added the 'source' load-balancing algorithm which uses the source IP(v4|v6) |
| 59 | - re-architectured the server round-robin mechanism to ease integration of |
| 60 | other algorithms. It now relies on the number of active and backup servers. |
| 61 | - added a counter for the number of active and backup servers, and report |
| 62 | these numbers upon SIGHUP or state change. |
| 63 | |
willy tarreau | bfad574 | 2006-03-23 14:19:11 +0100 | [diff] [blame] | 64 | 2006/03/23 : 1.2.10.1 |
| 65 | - while fixing the backup server round-robin "feature", a new bug was |
| 66 | introduced which could miss some backup servers. |
| 67 | - the displayed proxy name was wrong when dumping upon SIGHUP. |
| 68 | |
willy tarreau | aaff30e | 2006-03-19 21:30:41 +0100 | [diff] [blame] | 69 | 2006/03/19 : 1.2.10 |
| 70 | - assert.h is needed when DEBUG is defined. |
| 71 | - ENORMOUS long standing bug affecting the epoll polling system : |
| 72 | event_data is a union, not a structure ! |
| 73 | - Make fd management more robust and easier to debug. Also some |
| 74 | micro-optimisations. |
| 75 | - Limit the number of consecutive accept() in multi-process mode. |
| 76 | This produces a more evenly distributed load across the processes and |
| 77 | slightly improves performance by reducing bottlenecks. |
| 78 | - Make health-checks be more regular, and faster to retry after a timeout. |
| 79 | - Fixed some messages to ease parsing of alerts. |
| 80 | - provided a patch to enable epoll on RHEL3 kernels. |
| 81 | - Separated OpenBSD build from the main Makefile into a new one. |
| 82 | |
willy tarreau | 50be017 | 2006-03-15 19:41:19 +0100 | [diff] [blame] | 83 | 2006/03/15 : 1.2.9 |
| 84 | - haproxy could not be stopped after being paused, it had to be woken up |
| 85 | first. This has been fixed. |
| 86 | - the 'ulimit-n' parameter is now optional and by default computed from |
| 87 | maxconn + the number of listeners + the number of health-checks. |
| 88 | - it is now possible to specify a maximum number of connections at build |
| 89 | time with the SYSTEM_MAXCONN define. The value set in the configuration |
| 90 | file will then be limited to this value, and only the command-line '-n' |
| 91 | option will be able to bypass it. It will prevent against accidental |
| 92 | high memory usage on small systems. |
| 93 | - RFC2616 expects that any HTTP agent accepts multi-line headers. Earlier |
| 94 | versions did not detect a line beginning with a space as the continuation |
| 95 | of previous header. It is now correct. |
| 96 | - health checks sent to servers configured with identical intervals were |
| 97 | sent in perfect synchronisation because the initial time was the same |
| 98 | for all. This could induce high load peaks when fragile servers were |
| 99 | hosting tens of instances for the same application. Now the load is |
| 100 | spread evenly across the smallest interval amongst a listener. |
| 101 | - a new 'forceclose' option was added to make the proxy close the outgoing |
| 102 | channel to the server once it has sent all its headers and the server |
| 103 | starts responding. This helps some servers which don't close upon the |
| 104 | 'Connection: close' header. It implies 'option httpclose'. |
| 105 | - there was a bug in the way the backup servers were handled. They were |
| 106 | erroneously load-balanced while the doc said the opposite. Since |
| 107 | load-balanced backup servers is one of the features some people have |
| 108 | been asking for, the problem was fixed to reflect the documented |
| 109 | behaviour and a new option 'allbackups' was introduced to provide the |
| 110 | feature to those who need it. |
| 111 | - a never ending connect() could lead to a fast select() loop if its |
| 112 | timeout times the number of retransmits exceeded the server read or write |
| 113 | timeout, because the later was used to compute select()'s timeout while |
| 114 | the connection timeout was not reached. |
| 115 | - now we initialize the libc's localtime structures very early so that even |
| 116 | under OOM conditions, we can still send dated error messages without |
| 117 | segfaulting. |
| 118 | - the 'daemon' mode implies 'quiet' and disables 'verbose' because file |
| 119 | descriptors are closed. |
| 120 | |
willy tarreau | 065f1c0 | 2006-01-29 22:10:07 +0100 | [diff] [blame] | 121 | 2006/01/29 : 1.2.8 |
| 122 | - fixed a nasty bug affecting poll/epoll which could return unmodified data |
| 123 | from the server to the client, and sometimes lead to memory corruption |
| 124 | crashing the process. |
| 125 | - added the new pause/play mechanism with SIGTTOU/SIGTTIN for hot-reconf. |
| 126 | |
| 127 | 2005/12/18 : 1.2.7.1 |
| 128 | - the "retries" option was ignored because connect() could not return an |
| 129 | error if the connection failed before the timeout. |
| 130 | - TCP health-checks could not detect a connection refused in poll/epoll |
| 131 | mode. |
| 132 | |
willy tarreau | a56eca7 | 2005-12-18 01:34:42 +0100 | [diff] [blame] | 133 | 2005/11/13 : 1.2.7 |
willy tarreau | 77bc854 | 2005-12-18 01:31:43 +0100 | [diff] [blame] | 134 | - building with -DUSE_PCRE should include PCRE headers and not regex.h. At |
| 135 | least on Solaris, this caused the libc's regex primitives to be used instead |
| 136 | of PCRE, which caused trouble on group references. This is now fixed. |
willy tarreau | d0fb465 | 2005-12-18 01:32:04 +0100 | [diff] [blame] | 137 | - delayed the quiet mode during startup so that most of the startup alerts can |
| 138 | be displayed even in quiet mode. |
| 139 | - display an alert when a listener has no address, invalid or no port, or when |
| 140 | there are no enabled listeners upon startup. |
willy tarreau | 4373b96 | 2005-12-18 01:32:31 +0100 | [diff] [blame] | 141 | - added "static-pcre" to the list of supported regex options in the Makefile. |
willy tarreau | 77bc854 | 2005-12-18 01:31:43 +0100 | [diff] [blame] | 142 | |
willy tarreau | b952e1d | 2005-12-18 01:31:20 +0100 | [diff] [blame] | 143 | 2005/10/09 : 1.2.7rc (1.1.33rc) |
| 144 | - second batch of socklen_t changes. |
| 145 | - clean-ups from Cameron Simpson. |
| 146 | - because tv_remain() does not know about eternity, using no timeout can |
| 147 | make select() spin around a null time-out. Bug reported by Cameron Simpson. |
| 148 | - client read timeout was not properly set to eternity initialized after an |
| 149 | accept() if it was not set in the config. It remained undetected so long |
| 150 | because eternity is 0 and newly allocated pages are zeroed by the system. |
| 151 | - do not call get_original_dst() when not in transparent mode. |
| 152 | - implemented a workaround for a bug in certain epoll() implementations on |
| 153 | linux-2.4 kernels (epoll-lt <= 0.21). |
| 154 | - implemented TCP keepalive with new options : tcpka, clitcpka, srvtcpka. |
| 155 | |
willy tarreau | c5f73ed | 2005-12-18 01:26:38 +0100 | [diff] [blame] | 156 | 2005/08/07 : 1.2.6 |
| 157 | - clean-up patch from Alexander Lazic fixes build on Debian 3.1 (socklen_t). |
| 158 | |
| 159 | 2005/07/06 : 1.2.6-pre5 (1.1.32) |
willy tarreau | 0fe3965 | 2005-12-18 01:25:24 +0100 | [diff] [blame] | 160 | - added the number of active sessions (proxy/process) in the logs |
| 161 | |
| 162 | 2005/07/06 : 1.2.6-pre4 (1.1.32-pre4) |
willy tarreau | b1285d5 | 2005-12-18 01:20:14 +0100 | [diff] [blame] | 163 | - the time-out fix introduced in 1.1.25 caused a corner case where it was |
| 164 | possible for a client to keep a connection maintained regardless of the |
| 165 | timeout if the server closed the connection during the HEADER phase, |
| 166 | while the client ignored the close request while doing nothing in the |
| 167 | other direction. This has been fixed now by ensuring that read timeouts |
| 168 | are re-armed when switching to any SHUTW state. |
| 169 | |
| 170 | 2005/07/05 : 1.2.6-pre3 (1.1.32-pre3) |
| 171 | - enhanced error reporting in the logs. Now the proxy will precisely detect |
| 172 | various error conditions related to the system and/or process limits, and |
| 173 | generate LOG_EMERG logs indicating that a resource has been exhausted. |
| 174 | - logs will contain two new characters for the error cause : 'R' indicates |
| 175 | a resource exhausted, and 'I' indicates an internal error, though this |
| 176 | one should never happen. |
| 177 | - server connection timeouts can now be reported in the logs (sC), as well |
| 178 | as connections refused because of maxconn limitations (PC). |
| 179 | |
| 180 | 2005/07/05 : 1.2.6-pre2 (1.1.32-pre2) |
| 181 | - new global configuration keyword "ulimit-n" may be used to raise the FD |
| 182 | limit to usable values. |
| 183 | - a warning is now displayed on startup if the FD limit is lower than the |
| 184 | configured maximum number of sockets. |
| 185 | |
| 186 | 2005/07/05 : 1.2.6-pre1 (1.1.32-pre1) |
| 187 | - new configuration keyword "monitor-net" makes it possible to be monitored |
| 188 | by external devices which connect to the proxy without being logged nor |
| 189 | forwarded to any server. Particularly useful on generic TCPv4 relays. |
| 190 | |
willy tarreau | 5dffb60 | 2005-12-18 01:15:23 +0100 | [diff] [blame] | 191 | 2005/06/21 : 1.2.5.2 |
| 192 | - fixed build on PPC where chars are unsigned by default |
| 193 | |
willy tarreau | 08dedbe | 2005-12-18 01:13:48 +0100 | [diff] [blame] | 194 | 2005/05/02 : 1.2.5.1 |
| 195 | - dirty hack to fix a bug introduced with epoll : if we close an FD and |
| 196 | immediately reassign it to another session through a connect(), the |
| 197 | Prev{Read,Write}Events are not updated, which causes trouble detecting |
| 198 | changes, thus leading to many timeouts at high loads. |
| 199 | |
willy tarreau | 64a3cc3 | 2005-12-18 01:13:11 +0100 | [diff] [blame] | 200 | 2005/04/30 : 1.2.5 (1.1.31) |
| 201 | - changed the runtime argument to disable epoll() to '-de' |
| 202 | - changed the runtime argument to disable poll() to '-dp' |
| 203 | - added global options 'nopoll' and 'noepoll' to do the same at the |
| 204 | configuration level. |
| 205 | - added a 'linux24e' target to the Makefile for Linux 2.4 systems patched to |
| 206 | support epoll(). |
| 207 | - changed default FD_SETSIZE to 65536 on Solaris (default=1024) |
| 208 | - conditionned signals redirection to #ifdef DEBUG_MEMORY |
| 209 | |
willy tarreau | 1c2ad21 | 2005-12-18 01:11:29 +0100 | [diff] [blame] | 210 | 2005/04/26 : 1.2.5-pre4 |
| 211 | - made epoll() support a compile-time option : ENABLE_EPOLL |
| 212 | - provided a very little libc replacement for a possibly missing epoll() |
| 213 | implementation which can be enabled by -DUSE_MY_EPOLL |
| 214 | - implemented the poll() poller, which can be enabled with -DENABLE_POLL. |
| 215 | The equivalent runtime argument becomes '-P'. A few tests show that it |
| 216 | performs like select() with many fds, but slightly slower (certainly |
| 217 | because of the higher amount of memory involved). |
| 218 | - separated the 3 polling methods and the tasks scheduler into 4 distinct |
| 219 | functions which makes the code a lot more modular. |
| 220 | - moved some event tables to private static declarations inside the poller |
| 221 | functions. |
| 222 | - the poller functions can now initialize themselves, run, and cleanup. |
| 223 | - changed the runtime argument to enable epoll() to '-E'. |
| 224 | - removed buggy epoll_ctl() code in the client_retnclose() function. This |
| 225 | function was never meant to remove anything. |
| 226 | - fixed a typo which caused glibc to yell about a double free on exit. |
| 227 | - removed error checking after epoll_ctl(DEL) because we can never know if |
| 228 | the fd is still active or already closed. |
| 229 | - added a few entries in the makefile |
| 230 | |
willy tarreau | ad90a0c | 2005-12-18 01:09:15 +0100 | [diff] [blame] | 231 | 2005/04/25 : 1.2.5-pre3 |
| 232 | - experimental epoll() support (use temporary '-e' argument) |
| 233 | |
| 234 | 2005/04/24 : 1.2.5-pre2 |
willy tarreau | c1f4753 | 2005-12-18 01:08:26 +0100 | [diff] [blame] | 235 | - implemented the HTTP 303 code for error redirection. This forces the |
| 236 | browser to fetch the given URI with a GET request. The new keyword for |
| 237 | this is 'errorloc303', and a new 'errorloc302' keyword has been created |
| 238 | to make them easily distinguishable. |
| 239 | - added more controls in the parser for valid use of '\x' sequence. |
| 240 | - few fixes from Alex & Klaus |
| 241 | |
willy tarreau | ad90a0c | 2005-12-18 01:09:15 +0100 | [diff] [blame] | 242 | 2005/02/17 : 1.2.5-pre1 |
willy tarreau | c1f4753 | 2005-12-18 01:08:26 +0100 | [diff] [blame] | 243 | - fixed a few errors in the documentation |
| 244 | |
| 245 | 2005/02/13 |
| 246 | - do not pre-initialize unused file-descriptors before select() anymore. |
| 247 | |
willy tarreau | 1235015 | 2005-12-18 01:03:27 +0100 | [diff] [blame] | 248 | 2005/01/22 : 1.2.4 |
| 249 | - merged Alexander Lazic's and Klaus Wagner's work on application |
| 250 | cookie-based persistence. Since this is the first merge, this version is |
| 251 | not intended for general use and reports are more than welcome. Some |
| 252 | documentation is really needed though. |
| 253 | |
willy tarreau | 0174f31 | 2005-12-18 01:02:42 +0100 | [diff] [blame] | 254 | 2005/01/22 : 1.2.3 (1.1.30) |
| 255 | - add an architecture guide to the documentation |
| 256 | - released without any changes |
| 257 | |
| 258 | 2004/12/26 : 1.2.3-pre1 (1.1.30-pre1) |
| 259 | - increased default BUFSIZE to 16 kB to accept max headers of 8 kB which is |
| 260 | compatible with Apache. This limit can be configured in the makefile now. |
| 261 | Thanks to Eric Fehr for the checks. |
| 262 | - added a per-server "source" option which now makes it possible to bind to |
| 263 | a different source for each (potentially identical) server. |
| 264 | - changed cookie-based server selection slightly to allow several servers to |
| 265 | share a same cookie, thus making it possible to associate backup servers to |
| 266 | live servers and ease soft-stop for maintenance periods. (Alexander Lazic) |
| 267 | - added the cookie 'prefix' mode which makes it possible to use persistence |
| 268 | with thin clients which support only one cookie. The server name is prefixed |
| 269 | before the application cookie, and restore back. |
| 270 | - fixed the order of servers within an instance to match documentation. Now |
| 271 | the servers are *really* used in the order of their declaration. This is |
| 272 | particularly important when multiple backup servers are in use. |
| 273 | |
willy tarreau | 4302f49 | 2005-12-18 01:00:37 +0100 | [diff] [blame] | 274 | 2004/10/18 : 1.2.2 (1.1.29) |
| 275 | - fixed a bug where a TCP connection would be logged twice if the 'logasap' |
| 276 | option was enabled without the 'tcplog' option. |
| 277 | - encode_string() would use hdr_encode_map instead of the map argument. |
| 278 | |
| 279 | 2004/08/10 : (1.1.29-pre2) |
| 280 | - the logged request is now encoded with '#XX' for unprintable characters |
| 281 | - new keywords 'capture request header' and 'capture response header' enable |
| 282 | logging of arbitrary HTTP headers in requests and responses |
| 283 | - removed "-DSOLARIS" after replacing the last inet_aton() with inet_pton() |
| 284 | |
willy tarreau | 982249e | 2005-12-18 00:57:06 +0100 | [diff] [blame] | 285 | 2004/06/06 : 1.2.1 (1.1.28) |
| 286 | - added the '-V' command line option to verbosely report errors even though |
| 287 | the -q or 'quiet' options are specified. This is useful with '-c'. |
| 288 | - added a Red Hat init script and a .spec from Simon Matter <simon.matter@invoca.ch> |
willy tarreau | 036e1ce | 2005-12-17 13:46:33 +0100 | [diff] [blame] | 289 | |
willy tarreau | 982249e | 2005-12-18 00:57:06 +0100 | [diff] [blame] | 290 | 2004/06/05 : |
| 291 | - added the "logasap" option which produces a log without waiting for the data |
| 292 | to be transferred from the server to the client. |
| 293 | - added the "httpclose" option which removes any "connection:" header and adds |
| 294 | "Connection: close" in both direction. |
willy tarreau | 97f5857 | 2005-12-18 00:53:44 +0100 | [diff] [blame] | 295 | - added the 'checkcache' option which blocks cacheable responses containing |
| 296 | dangerous headers, such as 'set-cookie'. |
willy tarreau | 982249e | 2005-12-18 00:57:06 +0100 | [diff] [blame] | 297 | - added 'rspdeny' and 'rspideny' to block certain responses to avoid sensible |
| 298 | information leak from servers. |
willy tarreau | 25c4ea5 | 2005-12-18 00:49:49 +0100 | [diff] [blame] | 299 | |
| 300 | 2004/04/18 : |
willy tarreau | dd07e97 | 2005-12-18 00:48:48 +0100 | [diff] [blame] | 301 | - send an EMERG log when no server is available for a given proxy |
| 302 | - added the '-c' command line option to syntactically check the |
| 303 | configuration file without starting the service. |
| 304 | |
willy tarreau | 8a86dbf | 2005-12-18 00:45:59 +0100 | [diff] [blame] | 305 | 2003/11/09 : 1.2.0 |
| 306 | - the same as 1.1.27 + IPv6 support on the client side |
| 307 | |
willy tarreau | fe2c5c1 | 2005-12-17 14:14:34 +0100 | [diff] [blame] | 308 | 2003/10/27 : 1.1.27 |
| 309 | - the configurable HTTP health check introduced in 1.1.23 revealed a shameful |
| 310 | bug : the code still assumed that HTTP requests were the same size as the |
| 311 | original ones (22 bytes), and failed if they were not. |
| 312 | - added support for pidfiles. |
| 313 | |
willy tarreau | c58fc69 | 2005-12-17 14:13:08 +0100 | [diff] [blame] | 314 | 2003/10/22 : 1.1.26 |
| 315 | - the fix introduced in 1.1.25 for client timeouts while waiting for servers |
| 316 | broke almost all compatibility with POST requests, because the proxy |
| 317 | stopped to read anything from the client as soon as it got all of its |
| 318 | headers. |
| 319 | |
willy tarreau | c1cae63 | 2005-12-17 14:12:23 +0100 | [diff] [blame] | 320 | 2003/10/15 : 1.1.25 |
| 321 | - added the 'tcplog' option, which provides enhanced, HTTP-like logs for |
| 322 | generic TCP proxies, or lighter logs for HTTP proxies. |
| 323 | - fixed a time-out condition wrongly reported as client time-out in data |
| 324 | phase if the client timeout was lower than the connect timeout times the |
| 325 | number of retries. |
| 326 | |
willy tarreau | 197e8ec | 2005-12-17 14:10:59 +0100 | [diff] [blame] | 327 | 2003/09/21 : 1.1.24 |
| 328 | - if a client sent a full request then shut its write connection down, then |
| 329 | the request was aborted. This case was detected only when using haproxy |
| 330 | both as health-check client and as a server. |
| 331 | - if 'option httpchk' is used in a 'health' mode server, then responses will |
| 332 | change from 'OK' to 'HTTP/1.0 200 OK'. |
| 333 | - fixed a Linux-only bug in case of HTTP server health-checks, where a single |
| 334 | server response followed by a close could be ignored, and the server seen |
| 335 | as failed. |
| 336 | |
willy tarreau | eedaa9f | 2005-12-17 14:08:03 +0100 | [diff] [blame] | 337 | 2003/09/19 : 1.1.23 |
| 338 | - fixed a stupid bug introduced in 1.1.22 which caused second and subsequent |
| 339 | 'default' sections to keep previous parameters, and not initialize logs |
| 340 | correctly. |
| 341 | - fixed a second stupid bug introduced in 1.1.22 which caused configurations |
| 342 | relying on 'dispatch' mode to segfault at the first connection. |
| 343 | - 'option httpchk' now supports method, HTTP version and a few headers. |
| 344 | - now, 'option httpchk', 'cookie' and 'capture' can be specified in |
| 345 | 'defaults' section |
| 346 | |
| 347 | 2003/09/10 : 1.1.22 |
willy tarreau | a41a8b4 | 2005-12-17 14:02:24 +0100 | [diff] [blame] | 348 | - 'listen' now supports optionnal address:port-range lists |
| 349 | - 'bind' introduced to add new listen addresses |
| 350 | - fixed a bug which caused a session to be kept established on a server till |
| 351 | it timed out if the client closed during the DATA phase. |
| 352 | - the port part of each server address can now be empty to make the proxy |
| 353 | connect to the server on the same port it was connected to, be an absolute |
| 354 | unsigned number to reflect a single port (as in older versions), or an |
| 355 | explicitly signed number (+N/-N) to indicate that this offset must be |
| 356 | applied to the port the proxy was connected to, when connecting to the |
| 357 | server. |
| 358 | - the 'port' server option allows the user to specify a different |
| 359 | health-check port than the service one. It is mandatory when only relative |
| 360 | ports have been specified and check is required. By default, the checks are |
| 361 | sent to the service port. |
| 362 | - new 'defaults' section which is rather similar to 'listen' except that all |
| 363 | values are only used as default values for future 'listen' sections, until |
| 364 | a new 'defaults' resets them. At the moment, server options, regexes, |
| 365 | cookie names and captures cannot be set in the 'defaults' section. |
| 366 | |
willy tarreau | 2f6ba65 | 2005-12-17 13:57:42 +0100 | [diff] [blame] | 367 | 2003/05/06 : 1.1.21 |
| 368 | - changed the debug output format so that it now includes the session unique |
| 369 | ID followed by the instance name at the beginning of each line. |
| 370 | - in debug mode, accept now shows the client's IP and port. |
| 371 | - added one 3 small debugging scripts to search and pretty print debug output |
| 372 | - changed the default health check request to "OPTIONS /" instead of |
| 373 | "OPTIONS *" since not all servers implement the later one. |
| 374 | - "option httpchk" now accepts an optional parameter allowing the user to |
| 375 | specify and URI other than '/' during health-checks. |
| 376 | |
willy tarreau | b1ff9db | 2005-12-17 13:51:03 +0100 | [diff] [blame] | 377 | 2003/04/21 : 1.1.20 |
| 378 | - fixed two problems with time-outs, one where a server would be logged as |
| 379 | timed out during transfer that take longer to complete than the fixed |
| 380 | time-out, and one where clients were logged as timed-out during the data |
| 381 | phase because they didn't have anything to send. This sometimes caused |
| 382 | slow client connections to close too early while in fact there was no |
| 383 | problem. The proper fix would be to have a per-fd time-out with |
| 384 | conditions depending on the state of the HTTP FSM. |
| 385 | |
willy tarreau | 906b268 | 2005-12-17 13:49:52 +0100 | [diff] [blame] | 386 | 2003/04/16 : 1.1.19 |
| 387 | - haproxy was NOT RFC compliant because it was case-sensitive on HTTP |
| 388 | "Cookie:" and "Set-Cookie:" headers. This caused JVM 1.4 to fail on |
| 389 | cookie persistence because it uses "cookie:". Two memcmp() have been |
| 390 | replaced with strncasecmp(). |
| 391 | |
willy tarreau | 036e1ce | 2005-12-17 13:46:33 +0100 | [diff] [blame] | 392 | 2003/04/02 : 1.1.18 |
| 393 | - Haproxy can be compiled with PCRE regex instead of libc regex, by setting |
| 394 | REGEX=pcre on the make command line. |
| 395 | - HTTP health-checks now use "OPTIONS *" instead of "OPTIONS /". |
| 396 | - when explicit source address binding is required, it is now also used for |
| 397 | health-checks. |
| 398 | - added 'reqpass' and 'reqipass' to allow certain headers but not the request |
| 399 | itself. |
| 400 | - factored several strings to reduce binary size by about 2 kB. |
| 401 | - replaced setreuid() and setregid() with more standard setuid() and setgid(). |
| 402 | - added 4 status flags to the log line indicating who ended the connection |
| 403 | first, the sessions state, the validity of the cookie, and action taken on |
| 404 | the set-cookie header. |
| 405 | |
| 406 | 2002/10/18 : 1.1.17 |
| 407 | - add the notion of "backup" servers, which are used only when all other |
| 408 | servers are down. |
| 409 | - make Set-Cookie return "" instead of "(null)" when the server has no |
| 410 | cookie assigned (useful for backup servers). |
| 411 | - "log" now supports an optionnal level name (info, notice, err ...) above |
| 412 | which nothing is sent. |
| 413 | - replaced some strncmp() with memcmp() for better efficiency. |
| 414 | - added "capture cookie" option which logs client and/or server cookies |
| 415 | - cleaned up/down messages and dump servers states upon SIGHUP |
| 416 | - added a redirection feature for errors : "errorloc <errnum> <url>" |
| 417 | - now we won't insist on connecting to a dead server, even with a cookie, |
| 418 | unless option "persist" is specified. |
| 419 | - added HTTP/408 response for client request time-out and HTTP/50[234] for |
| 420 | server reply time-out or errors. |
| 421 | |
| 422 | 2002/09/01 : 1.1.16 |
| 423 | - implement HTTP health checks when option "httpchk" is specified. |
| 424 | |
| 425 | 2002/08/07 : 1.1.15 |
| 426 | - replaced setpgid()/setpgrp() with setsid() for better portability, because |
| 427 | setpgrp() doesn't have the same meaning under Solaris, Linux, and OpenBSD. |
| 428 | |
| 429 | 2002/07/20 : 1.1.14 |
| 430 | - added "postonly" cookie mode |
| 431 | |
| 432 | 2002/07/15 : 1.1.13 |
| 433 | - tv_diff used inverted parameters which led to negative times ! |
| 434 | |
| 435 | 2002/07/13 : 1.1.12 |
| 436 | - fixed stats monitoring, and optimized some tv_* for most common cases. |
| 437 | - replaced temporary 'newhdr' with 'trash' to reduce stack size |
| 438 | - made HTTP errors more HTML-fiendly. |
| 439 | - renamed strlcpy() to strlcpy2() because of a slightly difference between |
| 440 | their behaviour (return value), to avoid confusion. |
| 441 | - restricted HTTP messages to HTTP proxies only |
| 442 | - added a 502 message when the connection has been refused by the server, |
| 443 | to prevent clients from believing this is a zero-byte HTTP 0.9 reply. |
| 444 | - changed 'Cache-control:' from 'no-cache="set-cookie"' to 'private' when |
| 445 | inserting a cookie, because some caches (apache) don't understand it. |
| 446 | - fixed processing of server headers when client is in SHUTR state |
| 447 | |
| 448 | 2002/07/04 : |
| 449 | - automatically close fd's 0,1 and 2 when going daemon ; setpgrp() after |
| 450 | setpgid() |
| 451 | |
| 452 | 2002/06/04 : 1.1.11 |
| 453 | - fixed multi-cookie handling in client request to allow clean deletion |
| 454 | in insert+indirect mode. Now, only the server cookie is deleted and not |
willy tarreau | 906b268 | 2005-12-17 13:49:52 +0100 | [diff] [blame] | 455 | all the header. Should now be compliant to RFC2965. |
willy tarreau | 036e1ce | 2005-12-17 13:46:33 +0100 | [diff] [blame] | 456 | - added a "nocache" option to "cookie" to specify that we explicitly want |
| 457 | to add a "cache-control" header when we add a cookie. |
| 458 | It is also possible to add an "Expires: <old-date>" to keep compatibility |
| 459 | with old/broken caches. |
| 460 | |
| 461 | 2002/05/10 : 1.1.10 |
| 462 | - if a cookie is used in insert+indirect mode, it's desirable that the |
| 463 | the servers don't see it. It was not possible to remove it correctly |
| 464 | with regexps, so now it's removed automatically. |
| 465 | |
| 466 | 2002/04/19 : 1.1.9 |
| 467 | - don't use snprintf()'s return value as an end of message since it may |
| 468 | be larger. This caused bus errors and segfaults in internal libc's |
| 469 | getenv() during localtime() in send_log(). |
| 470 | - removed dead insecure send_syslog() function and all references to it. |
| 471 | - fixed warnings on Solaris due to buggy implementation of isXXXX(). |
| 472 | |
| 473 | 2002/04/18 : 1.1.8 |
| 474 | - option "dontlognull" |
| 475 | - fixed "double space" bug in config parser |
| 476 | - fixed an uninitialized server field in case of dispatch |
| 477 | with no existing server which could cause a segfault during |
| 478 | logging. |
| 479 | - the pid logged was always the father's, which was wrong for daemons. |
| 480 | - fixed wrong level "LOG_INFO" for message "proxy started". |
| 481 | |
| 482 | 2002/04/13 : |
| 483 | - http logging is now complete : |
| 484 | - ip:port, date, proxy, server |
| 485 | - req_time, conn_time, hdr_time, tot_time |
| 486 | - status, size, request |
| 487 | - source address |
| 488 | |
| 489 | 2002/04/12 : 1.1.7 |
| 490 | - added option forwardfor |
| 491 | - added reqirep, reqidel, reqiallow, reqideny, rspirep, rspidel |
| 492 | - added "log global" in "listen" section. |
| 493 | |
| 494 | 2002/04/09 : |
| 495 | - added a new "global" section : |
| 496 | - logs |
| 497 | - debug, quiet, daemon modes |
| 498 | - uid, gid, chroot, nbproc, maxconn |
| 499 | |
| 500 | 2002/04/08 : 1.1.6 |
| 501 | - regex are now chained and not limited anymore. |
| 502 | - unavailable server now returns HTTP/502. |
| 503 | - increased per-line args limit to 40 |
| 504 | - added reqallow/reqdeny to block some request on matches |
| 505 | - added HTTP 400/403 responses |
| 506 | |
| 507 | 2002/04/03 : 1.1.5 |
| 508 | - connection logging displayed incorrect source address. |
| 509 | - added proxy start/stop and server up/down log events. |
| 510 | - replaced log message short buffers with larger trash. |
| 511 | - enlarged buffer to 8 kB and replace buffer to 4 kB. |
| 512 | |
| 513 | 2002/03/25 : 1.1.4 |
| 514 | - made rise/fall/interval time configurable |
| 515 | |
| 516 | 2002/03/22 : 1.1.3 |
| 517 | - fixed a bug : cr_expire and cw_expire were inverted in CL_STSHUT[WR] |
| 518 | which could lead to loops. |
| 519 | |
| 520 | 2002/03/21 : 1.1.2 |
| 521 | - fixed a bug in buffer management where we could have a loop |
| 522 | between event_read() and process_{cli|srv} if R==BUFSIZE-MAXREWRITE. |
| 523 | => implemented an adjustable buffer limit. |
| 524 | - fixed a bug : expiration of tasks in wait queue timeout is used again, |
| 525 | and running tasks are skipped. |
| 526 | - added some debug lines for accept events. |
| 527 | - send warnings for servers up/down. |
| 528 | |
| 529 | 2002/03/12 : 1.1.1 |
| 530 | - fixed a bug in total failure handling |
| 531 | - fixed a bug in timestamp comparison within same second (tv_cmp_ms) |
| 532 | |
| 533 | 2002/03/10 : 1.1.0 |
| 534 | - fixed a few timeout bugs |
| 535 | - rearranged the task scheduler subsystem to improve performance, |
| 536 | add new tasks, and make it easier to later port to librt ; |
| 537 | - allow multiple accept() for one select() wake up ; |
| 538 | - implemented internal load balancing with basic health-check ; |
| 539 | - cookie insertion and header add/replace/delete, with better strings |
| 540 | support. |
| 541 | |
| 542 | 2002/03/08 |
| 543 | - reworked buffer handling to fix a few rewrite bugs, and |
| 544 | improve overall performance. |
| 545 | - implement the "purge" option to delete server cookies in direct mode. |
| 546 | |
| 547 | 2002/03/07 |
| 548 | - fixed some error cases where the maxfd was not decreased. |
| 549 | |
| 550 | 2002/02/26 |
| 551 | - now supports transparent proxying, at least on linux 2.4. |
| 552 | |
| 553 | 2002/02/12 |
| 554 | - soft stop works again (fixed select timeout computation). |
| 555 | - it seems that TCP proxies sometimes cannot timeout. |
| 556 | - added a "quiet" mode. |
| 557 | - enforce file descriptor limitation on socket() and accept(). |
| 558 | |
| 559 | 2001/12/30 : release of version 1.0.2 : fixed a bug in header processing |
| 560 | 2001/12/19 : release of version 1.0.1 : no MSG_NOSIGNAL on solaris |
| 561 | 2001/12/16 : release of version 1.0.0. |
| 562 | 2001/12/16 : added syslog capability for each accepted connection. |
| 563 | 2001/11/19 : corrected premature end of files and occasional SIGPIPE. |
| 564 | 2001/10/31 : added health-check type servers (mode health) which replies OK then closes. |
| 565 | 2001/10/30 : added the ability to support standard TCP proxies and HTTP proxies |
| 566 | with or without cookies (use keyword http for this). |
| 567 | 2001/09/01 : added client/server header replacing with regexps. |
| 568 | eg: |
| 569 | cliexp ^(Host:\ [^:]*).* Host:\ \1:80 |
| 570 | srvexp ^Server:\ .* Server:\ Apache |
| 571 | 2000/11/29 : first fully working release with complete FSMs and timeouts. |
| 572 | 2000/11/28 : major rewrite |
| 573 | 2000/11/26 : first write |