blob: 887b19cb9904a8e1219bf1c9c1e78acfd5c2a4eb [file] [log] [blame]
willy tarreau036e1ce2005-12-17 13:46:33 +01001ChangeLog :
2===========
willy tarreau4302f492005-12-18 01:00:37 +01003
willy tarreau77bc8542005-12-18 01:31:43 +010042005/10/25
5 - building with -DUSE_PCRE should include PCRE headers and not regex.h. At
6 least on Solaris, this caused the libc's regex primitives to be used instead
7 of PCRE, which caused trouble on group references. This is now fixed.
willy tarreaud0fb4652005-12-18 01:32:04 +01008 - delayed the quiet mode during startup so that most of the startup alerts can
9 be displayed even in quiet mode.
10 - display an alert when a listener has no address, invalid or no port, or when
11 there are no enabled listeners upon startup.
willy tarreau4373b962005-12-18 01:32:31 +010012 - added "static-pcre" to the list of supported regex options in the Makefile.
willy tarreau77bc8542005-12-18 01:31:43 +010013
willy tarreaub952e1d2005-12-18 01:31:20 +0100142005/10/09 : 1.2.7rc (1.1.33rc)
15 - second batch of socklen_t changes.
16 - clean-ups from Cameron Simpson.
17 - because tv_remain() does not know about eternity, using no timeout can
18 make select() spin around a null time-out. Bug reported by Cameron Simpson.
19 - client read timeout was not properly set to eternity initialized after an
20 accept() if it was not set in the config. It remained undetected so long
21 because eternity is 0 and newly allocated pages are zeroed by the system.
22 - do not call get_original_dst() when not in transparent mode.
23 - implemented a workaround for a bug in certain epoll() implementations on
24 linux-2.4 kernels (epoll-lt <= 0.21).
25 - implemented TCP keepalive with new options : tcpka, clitcpka, srvtcpka.
26
willy tarreauc5f73ed2005-12-18 01:26:38 +0100272005/08/07 : 1.2.6
28 - clean-up patch from Alexander Lazic fixes build on Debian 3.1 (socklen_t).
29
302005/07/06 : 1.2.6-pre5 (1.1.32)
willy tarreau0fe39652005-12-18 01:25:24 +010031 - added the number of active sessions (proxy/process) in the logs
32
332005/07/06 : 1.2.6-pre4 (1.1.32-pre4)
willy tarreaub1285d52005-12-18 01:20:14 +010034 - the time-out fix introduced in 1.1.25 caused a corner case where it was
35 possible for a client to keep a connection maintained regardless of the
36 timeout if the server closed the connection during the HEADER phase,
37 while the client ignored the close request while doing nothing in the
38 other direction. This has been fixed now by ensuring that read timeouts
39 are re-armed when switching to any SHUTW state.
40
412005/07/05 : 1.2.6-pre3 (1.1.32-pre3)
42 - enhanced error reporting in the logs. Now the proxy will precisely detect
43 various error conditions related to the system and/or process limits, and
44 generate LOG_EMERG logs indicating that a resource has been exhausted.
45 - logs will contain two new characters for the error cause : 'R' indicates
46 a resource exhausted, and 'I' indicates an internal error, though this
47 one should never happen.
48 - server connection timeouts can now be reported in the logs (sC), as well
49 as connections refused because of maxconn limitations (PC).
50
512005/07/05 : 1.2.6-pre2 (1.1.32-pre2)
52 - new global configuration keyword "ulimit-n" may be used to raise the FD
53 limit to usable values.
54 - a warning is now displayed on startup if the FD limit is lower than the
55 configured maximum number of sockets.
56
572005/07/05 : 1.2.6-pre1 (1.1.32-pre1)
58 - new configuration keyword "monitor-net" makes it possible to be monitored
59 by external devices which connect to the proxy without being logged nor
60 forwarded to any server. Particularly useful on generic TCPv4 relays.
61
willy tarreau5dffb602005-12-18 01:15:23 +0100622005/06/21 : 1.2.5.2
63 - fixed build on PPC where chars are unsigned by default
64
willy tarreau08dedbe2005-12-18 01:13:48 +0100652005/05/02 : 1.2.5.1
66 - dirty hack to fix a bug introduced with epoll : if we close an FD and
67 immediately reassign it to another session through a connect(), the
68 Prev{Read,Write}Events are not updated, which causes trouble detecting
69 changes, thus leading to many timeouts at high loads.
70
willy tarreau64a3cc32005-12-18 01:13:11 +0100712005/04/30 : 1.2.5 (1.1.31)
72 - changed the runtime argument to disable epoll() to '-de'
73 - changed the runtime argument to disable poll() to '-dp'
74 - added global options 'nopoll' and 'noepoll' to do the same at the
75 configuration level.
76 - added a 'linux24e' target to the Makefile for Linux 2.4 systems patched to
77 support epoll().
78 - changed default FD_SETSIZE to 65536 on Solaris (default=1024)
79 - conditionned signals redirection to #ifdef DEBUG_MEMORY
80
willy tarreau1c2ad212005-12-18 01:11:29 +0100812005/04/26 : 1.2.5-pre4
82 - made epoll() support a compile-time option : ENABLE_EPOLL
83 - provided a very little libc replacement for a possibly missing epoll()
84 implementation which can be enabled by -DUSE_MY_EPOLL
85 - implemented the poll() poller, which can be enabled with -DENABLE_POLL.
86 The equivalent runtime argument becomes '-P'. A few tests show that it
87 performs like select() with many fds, but slightly slower (certainly
88 because of the higher amount of memory involved).
89 - separated the 3 polling methods and the tasks scheduler into 4 distinct
90 functions which makes the code a lot more modular.
91 - moved some event tables to private static declarations inside the poller
92 functions.
93 - the poller functions can now initialize themselves, run, and cleanup.
94 - changed the runtime argument to enable epoll() to '-E'.
95 - removed buggy epoll_ctl() code in the client_retnclose() function. This
96 function was never meant to remove anything.
97 - fixed a typo which caused glibc to yell about a double free on exit.
98 - removed error checking after epoll_ctl(DEL) because we can never know if
99 the fd is still active or already closed.
100 - added a few entries in the makefile
101
willy tarreauad90a0c2005-12-18 01:09:15 +01001022005/04/25 : 1.2.5-pre3
103 - experimental epoll() support (use temporary '-e' argument)
104
1052005/04/24 : 1.2.5-pre2
willy tarreauc1f47532005-12-18 01:08:26 +0100106 - implemented the HTTP 303 code for error redirection. This forces the
107 browser to fetch the given URI with a GET request. The new keyword for
108 this is 'errorloc303', and a new 'errorloc302' keyword has been created
109 to make them easily distinguishable.
110 - added more controls in the parser for valid use of '\x' sequence.
111 - few fixes from Alex & Klaus
112
willy tarreauad90a0c2005-12-18 01:09:15 +01001132005/02/17 : 1.2.5-pre1
willy tarreauc1f47532005-12-18 01:08:26 +0100114 - fixed a few errors in the documentation
115
1162005/02/13
117 - do not pre-initialize unused file-descriptors before select() anymore.
118
willy tarreau12350152005-12-18 01:03:27 +01001192005/01/22 : 1.2.4
120 - merged Alexander Lazic's and Klaus Wagner's work on application
121 cookie-based persistence. Since this is the first merge, this version is
122 not intended for general use and reports are more than welcome. Some
123 documentation is really needed though.
124
willy tarreau0174f312005-12-18 01:02:42 +01001252005/01/22 : 1.2.3 (1.1.30)
126 - add an architecture guide to the documentation
127 - released without any changes
128
1292004/12/26 : 1.2.3-pre1 (1.1.30-pre1)
130 - increased default BUFSIZE to 16 kB to accept max headers of 8 kB which is
131 compatible with Apache. This limit can be configured in the makefile now.
132 Thanks to Eric Fehr for the checks.
133 - added a per-server "source" option which now makes it possible to bind to
134 a different source for each (potentially identical) server.
135 - changed cookie-based server selection slightly to allow several servers to
136 share a same cookie, thus making it possible to associate backup servers to
137 live servers and ease soft-stop for maintenance periods. (Alexander Lazic)
138 - added the cookie 'prefix' mode which makes it possible to use persistence
139 with thin clients which support only one cookie. The server name is prefixed
140 before the application cookie, and restore back.
141 - fixed the order of servers within an instance to match documentation. Now
142 the servers are *really* used in the order of their declaration. This is
143 particularly important when multiple backup servers are in use.
144
willy tarreau4302f492005-12-18 01:00:37 +01001452004/10/18 : 1.2.2 (1.1.29)
146 - fixed a bug where a TCP connection would be logged twice if the 'logasap'
147 option was enabled without the 'tcplog' option.
148 - encode_string() would use hdr_encode_map instead of the map argument.
149
1502004/08/10 : (1.1.29-pre2)
151 - the logged request is now encoded with '#XX' for unprintable characters
152 - new keywords 'capture request header' and 'capture response header' enable
153 logging of arbitrary HTTP headers in requests and responses
154 - removed "-DSOLARIS" after replacing the last inet_aton() with inet_pton()
155
willy tarreau982249e2005-12-18 00:57:06 +01001562004/06/06 : 1.2.1 (1.1.28)
157 - added the '-V' command line option to verbosely report errors even though
158 the -q or 'quiet' options are specified. This is useful with '-c'.
159 - added a Red Hat init script and a .spec from Simon Matter <simon.matter@invoca.ch>
willy tarreau036e1ce2005-12-17 13:46:33 +0100160
willy tarreau982249e2005-12-18 00:57:06 +01001612004/06/05 :
162 - added the "logasap" option which produces a log without waiting for the data
163 to be transferred from the server to the client.
164 - added the "httpclose" option which removes any "connection:" header and adds
165 "Connection: close" in both direction.
willy tarreau97f58572005-12-18 00:53:44 +0100166 - added the 'checkcache' option which blocks cacheable responses containing
167 dangerous headers, such as 'set-cookie'.
willy tarreau982249e2005-12-18 00:57:06 +0100168 - added 'rspdeny' and 'rspideny' to block certain responses to avoid sensible
169 information leak from servers.
willy tarreau25c4ea52005-12-18 00:49:49 +0100170
1712004/04/18 :
willy tarreaudd07e972005-12-18 00:48:48 +0100172 - send an EMERG log when no server is available for a given proxy
173 - added the '-c' command line option to syntactically check the
174 configuration file without starting the service.
175
willy tarreau8a86dbf2005-12-18 00:45:59 +01001762003/11/09 : 1.2.0
177 - the same as 1.1.27 + IPv6 support on the client side
178
willy tarreaufe2c5c12005-12-17 14:14:34 +01001792003/10/27 : 1.1.27
180 - the configurable HTTP health check introduced in 1.1.23 revealed a shameful
181 bug : the code still assumed that HTTP requests were the same size as the
182 original ones (22 bytes), and failed if they were not.
183 - added support for pidfiles.
184
willy tarreauc58fc692005-12-17 14:13:08 +01001852003/10/22 : 1.1.26
186 - the fix introduced in 1.1.25 for client timeouts while waiting for servers
187 broke almost all compatibility with POST requests, because the proxy
188 stopped to read anything from the client as soon as it got all of its
189 headers.
190
willy tarreauc1cae632005-12-17 14:12:23 +01001912003/10/15 : 1.1.25
192 - added the 'tcplog' option, which provides enhanced, HTTP-like logs for
193 generic TCP proxies, or lighter logs for HTTP proxies.
194 - fixed a time-out condition wrongly reported as client time-out in data
195 phase if the client timeout was lower than the connect timeout times the
196 number of retries.
197
willy tarreau197e8ec2005-12-17 14:10:59 +01001982003/09/21 : 1.1.24
199 - if a client sent a full request then shut its write connection down, then
200 the request was aborted. This case was detected only when using haproxy
201 both as health-check client and as a server.
202 - if 'option httpchk' is used in a 'health' mode server, then responses will
203 change from 'OK' to 'HTTP/1.0 200 OK'.
204 - fixed a Linux-only bug in case of HTTP server health-checks, where a single
205 server response followed by a close could be ignored, and the server seen
206 as failed.
207
willy tarreaueedaa9f2005-12-17 14:08:03 +01002082003/09/19 : 1.1.23
209 - fixed a stupid bug introduced in 1.1.22 which caused second and subsequent
210 'default' sections to keep previous parameters, and not initialize logs
211 correctly.
212 - fixed a second stupid bug introduced in 1.1.22 which caused configurations
213 relying on 'dispatch' mode to segfault at the first connection.
214 - 'option httpchk' now supports method, HTTP version and a few headers.
215 - now, 'option httpchk', 'cookie' and 'capture' can be specified in
216 'defaults' section
217
2182003/09/10 : 1.1.22
willy tarreaua41a8b42005-12-17 14:02:24 +0100219 - 'listen' now supports optionnal address:port-range lists
220 - 'bind' introduced to add new listen addresses
221 - fixed a bug which caused a session to be kept established on a server till
222 it timed out if the client closed during the DATA phase.
223 - the port part of each server address can now be empty to make the proxy
224 connect to the server on the same port it was connected to, be an absolute
225 unsigned number to reflect a single port (as in older versions), or an
226 explicitly signed number (+N/-N) to indicate that this offset must be
227 applied to the port the proxy was connected to, when connecting to the
228 server.
229 - the 'port' server option allows the user to specify a different
230 health-check port than the service one. It is mandatory when only relative
231 ports have been specified and check is required. By default, the checks are
232 sent to the service port.
233 - new 'defaults' section which is rather similar to 'listen' except that all
234 values are only used as default values for future 'listen' sections, until
235 a new 'defaults' resets them. At the moment, server options, regexes,
236 cookie names and captures cannot be set in the 'defaults' section.
237
willy tarreau2f6ba652005-12-17 13:57:42 +01002382003/05/06 : 1.1.21
239 - changed the debug output format so that it now includes the session unique
240 ID followed by the instance name at the beginning of each line.
241 - in debug mode, accept now shows the client's IP and port.
242 - added one 3 small debugging scripts to search and pretty print debug output
243 - changed the default health check request to "OPTIONS /" instead of
244 "OPTIONS *" since not all servers implement the later one.
245 - "option httpchk" now accepts an optional parameter allowing the user to
246 specify and URI other than '/' during health-checks.
247
willy tarreaub1ff9db2005-12-17 13:51:03 +01002482003/04/21 : 1.1.20
249 - fixed two problems with time-outs, one where a server would be logged as
250 timed out during transfer that take longer to complete than the fixed
251 time-out, and one where clients were logged as timed-out during the data
252 phase because they didn't have anything to send. This sometimes caused
253 slow client connections to close too early while in fact there was no
254 problem. The proper fix would be to have a per-fd time-out with
255 conditions depending on the state of the HTTP FSM.
256
willy tarreau906b2682005-12-17 13:49:52 +01002572003/04/16 : 1.1.19
258 - haproxy was NOT RFC compliant because it was case-sensitive on HTTP
259 "Cookie:" and "Set-Cookie:" headers. This caused JVM 1.4 to fail on
260 cookie persistence because it uses "cookie:". Two memcmp() have been
261 replaced with strncasecmp().
262
willy tarreau036e1ce2005-12-17 13:46:33 +01002632003/04/02 : 1.1.18
264 - Haproxy can be compiled with PCRE regex instead of libc regex, by setting
265 REGEX=pcre on the make command line.
266 - HTTP health-checks now use "OPTIONS *" instead of "OPTIONS /".
267 - when explicit source address binding is required, it is now also used for
268 health-checks.
269 - added 'reqpass' and 'reqipass' to allow certain headers but not the request
270 itself.
271 - factored several strings to reduce binary size by about 2 kB.
272 - replaced setreuid() and setregid() with more standard setuid() and setgid().
273 - added 4 status flags to the log line indicating who ended the connection
274 first, the sessions state, the validity of the cookie, and action taken on
275 the set-cookie header.
276
2772002/10/18 : 1.1.17
278 - add the notion of "backup" servers, which are used only when all other
279 servers are down.
280 - make Set-Cookie return "" instead of "(null)" when the server has no
281 cookie assigned (useful for backup servers).
282 - "log" now supports an optionnal level name (info, notice, err ...) above
283 which nothing is sent.
284 - replaced some strncmp() with memcmp() for better efficiency.
285 - added "capture cookie" option which logs client and/or server cookies
286 - cleaned up/down messages and dump servers states upon SIGHUP
287 - added a redirection feature for errors : "errorloc <errnum> <url>"
288 - now we won't insist on connecting to a dead server, even with a cookie,
289 unless option "persist" is specified.
290 - added HTTP/408 response for client request time-out and HTTP/50[234] for
291 server reply time-out or errors.
292
2932002/09/01 : 1.1.16
294 - implement HTTP health checks when option "httpchk" is specified.
295
2962002/08/07 : 1.1.15
297 - replaced setpgid()/setpgrp() with setsid() for better portability, because
298 setpgrp() doesn't have the same meaning under Solaris, Linux, and OpenBSD.
299
3002002/07/20 : 1.1.14
301 - added "postonly" cookie mode
302
3032002/07/15 : 1.1.13
304 - tv_diff used inverted parameters which led to negative times !
305
3062002/07/13 : 1.1.12
307 - fixed stats monitoring, and optimized some tv_* for most common cases.
308 - replaced temporary 'newhdr' with 'trash' to reduce stack size
309 - made HTTP errors more HTML-fiendly.
310 - renamed strlcpy() to strlcpy2() because of a slightly difference between
311 their behaviour (return value), to avoid confusion.
312 - restricted HTTP messages to HTTP proxies only
313 - added a 502 message when the connection has been refused by the server,
314 to prevent clients from believing this is a zero-byte HTTP 0.9 reply.
315 - changed 'Cache-control:' from 'no-cache="set-cookie"' to 'private' when
316 inserting a cookie, because some caches (apache) don't understand it.
317 - fixed processing of server headers when client is in SHUTR state
318
3192002/07/04 :
320 - automatically close fd's 0,1 and 2 when going daemon ; setpgrp() after
321 setpgid()
322
3232002/06/04 : 1.1.11
324 - fixed multi-cookie handling in client request to allow clean deletion
325 in insert+indirect mode. Now, only the server cookie is deleted and not
willy tarreau906b2682005-12-17 13:49:52 +0100326 all the header. Should now be compliant to RFC2965.
willy tarreau036e1ce2005-12-17 13:46:33 +0100327 - added a "nocache" option to "cookie" to specify that we explicitly want
328 to add a "cache-control" header when we add a cookie.
329 It is also possible to add an "Expires: <old-date>" to keep compatibility
330 with old/broken caches.
331
3322002/05/10 : 1.1.10
333 - if a cookie is used in insert+indirect mode, it's desirable that the
334 the servers don't see it. It was not possible to remove it correctly
335 with regexps, so now it's removed automatically.
336
3372002/04/19 : 1.1.9
338 - don't use snprintf()'s return value as an end of message since it may
339 be larger. This caused bus errors and segfaults in internal libc's
340 getenv() during localtime() in send_log().
341 - removed dead insecure send_syslog() function and all references to it.
342 - fixed warnings on Solaris due to buggy implementation of isXXXX().
343
3442002/04/18 : 1.1.8
345 - option "dontlognull"
346 - fixed "double space" bug in config parser
347 - fixed an uninitialized server field in case of dispatch
348 with no existing server which could cause a segfault during
349 logging.
350 - the pid logged was always the father's, which was wrong for daemons.
351 - fixed wrong level "LOG_INFO" for message "proxy started".
352
3532002/04/13 :
354 - http logging is now complete :
355 - ip:port, date, proxy, server
356 - req_time, conn_time, hdr_time, tot_time
357 - status, size, request
358 - source address
359
3602002/04/12 : 1.1.7
361 - added option forwardfor
362 - added reqirep, reqidel, reqiallow, reqideny, rspirep, rspidel
363 - added "log global" in "listen" section.
364
3652002/04/09 :
366 - added a new "global" section :
367 - logs
368 - debug, quiet, daemon modes
369 - uid, gid, chroot, nbproc, maxconn
370
3712002/04/08 : 1.1.6
372 - regex are now chained and not limited anymore.
373 - unavailable server now returns HTTP/502.
374 - increased per-line args limit to 40
375 - added reqallow/reqdeny to block some request on matches
376 - added HTTP 400/403 responses
377
3782002/04/03 : 1.1.5
379 - connection logging displayed incorrect source address.
380 - added proxy start/stop and server up/down log events.
381 - replaced log message short buffers with larger trash.
382 - enlarged buffer to 8 kB and replace buffer to 4 kB.
383
3842002/03/25 : 1.1.4
385 - made rise/fall/interval time configurable
386
3872002/03/22 : 1.1.3
388 - fixed a bug : cr_expire and cw_expire were inverted in CL_STSHUT[WR]
389 which could lead to loops.
390
3912002/03/21 : 1.1.2
392 - fixed a bug in buffer management where we could have a loop
393 between event_read() and process_{cli|srv} if R==BUFSIZE-MAXREWRITE.
394 => implemented an adjustable buffer limit.
395 - fixed a bug : expiration of tasks in wait queue timeout is used again,
396 and running tasks are skipped.
397 - added some debug lines for accept events.
398 - send warnings for servers up/down.
399
4002002/03/12 : 1.1.1
401 - fixed a bug in total failure handling
402 - fixed a bug in timestamp comparison within same second (tv_cmp_ms)
403
4042002/03/10 : 1.1.0
405 - fixed a few timeout bugs
406 - rearranged the task scheduler subsystem to improve performance,
407 add new tasks, and make it easier to later port to librt ;
408 - allow multiple accept() for one select() wake up ;
409 - implemented internal load balancing with basic health-check ;
410 - cookie insertion and header add/replace/delete, with better strings
411 support.
412
4132002/03/08
414 - reworked buffer handling to fix a few rewrite bugs, and
415 improve overall performance.
416 - implement the "purge" option to delete server cookies in direct mode.
417
4182002/03/07
419 - fixed some error cases where the maxfd was not decreased.
420
4212002/02/26
422 - now supports transparent proxying, at least on linux 2.4.
423
4242002/02/12
425 - soft stop works again (fixed select timeout computation).
426 - it seems that TCP proxies sometimes cannot timeout.
427 - added a "quiet" mode.
428 - enforce file descriptor limitation on socket() and accept().
429
4302001/12/30 : release of version 1.0.2 : fixed a bug in header processing
4312001/12/19 : release of version 1.0.1 : no MSG_NOSIGNAL on solaris
4322001/12/16 : release of version 1.0.0.
4332001/12/16 : added syslog capability for each accepted connection.
4342001/11/19 : corrected premature end of files and occasional SIGPIPE.
4352001/10/31 : added health-check type servers (mode health) which replies OK then closes.
4362001/10/30 : added the ability to support standard TCP proxies and HTTP proxies
437 with or without cookies (use keyword http for this).
4382001/09/01 : added client/server header replacing with regexps.
439 eg:
440 cliexp ^(Host:\ [^:]*).* Host:\ \1:80
441 srvexp ^Server:\ .* Server:\ Apache
4422000/11/29 : first fully working release with complete FSMs and timeouts.
4432000/11/28 : major rewrite
4442000/11/26 : first write