blob: d43178b21ccc4b7a620dd66535475e15860d2edd [file] [log] [blame]
willy tarreau036e1ce2005-12-17 13:46:33 +01001ChangeLog :
2===========
willy tarreau4302f492005-12-18 01:00:37 +01003
willy tarreau7e6328d2006-05-21 23:26:20 +020042006/05/21 : 1.2.14
5 - new HTML status report with the 'stats' keyword.
6 - added the 'abortonclose' option to better resist traffic surges
7 - implemented dynamic traffic regulation with the 'minconn' option
8 - show request time on denied requests
9 - definitely fixed hot reconf on OpenBSD by the use of SO_REUSEPORT
10 - now a proxy instance is allowed to run without servers, which is
11 useful to dedicate one instance to stats
12 - added lots of error counters
13 - a missing parenthesis preventd matching of cacheable cookies
14 - a missing parenthesis in poll_loop() might have caused missed events.
15
Willy TARREAU4404b7e2006-05-14 10:00:09 +0200162006/05/14 : 1.2.13.1
17 - an uninitialized field in the struct session could cause a crash when
18 the session was freed. This has been encountered on Solaris only.
19 - Solaris and OpenBSD no not support shutdown() on listening socket. Let's
20 be nice to them by performing a soft stop if pause fails.
21
willy tarreauc3a2e072006-05-13 18:51:38 +0200222006/05/13 : 1.2.13
23 - 'maxconn' server parameter to do per-server session limitation
24 - queueing to support non-blocking session limitation
25 - fixed removal of cookies for cookie-less servers such as backup servers
26 - two separate wait queues for expirable and non-expirable tasks provide
27 better performance with lots of sessions.
28 - some code cleanups and performance improvements
29 - made state dumps a bit more verbose
30 - fixed missing checks for NULL srv in dispatch mode
31 - load balancing on backup servers was not possible in source hash mode.
32 - two session flags shared the same bit, but fortunately they were not
33 compatible.
34
willy tarreauc0d4bbd2006-04-15 21:47:50 +0200352006/04/15 : 1.2.12
36 Very few changes preparing for more important changes to support per-server
37 session limitations and queueing :
38 - ignore leading empty lines in HTTP requests as suggested by RFC2616.
39 - added the 'weight' parameter to the servers, limited to 1..256. It applies
40 to roundrobin and source hash.
41 - the optional '-s' option could clobber '-st' and '-sf' if compiled in.
42
willy tarreaue0dd2692006-03-30 16:27:34 +0200432006/03/30 : 1.2.11.1
44 - under some conditions, it might have been possible that when the
45 last dead server became available, it would not have been used
46 till another one would have changed state. Could not be reproduced
47 at all, however seems possible from the code.
48
willy tarreaud2058dc2006-03-25 20:35:41 +0100492006/03/25 : 1.2.11
50 - added the '-db' command-line option to disable backgrounding.
51 - added the -sf/-st command-line arguments which are used to specify
52 a list of pids to send a FINISH or TERMINATE signal upon startup.
53 They will also be asked to release their port if a bind fails.
54 - reworked the startup mechanism to allow the sending of a signal to a list
55 of old pids if a socket cannot be bound, with a retry for a limited amount
56 of time (1 second by default).
57 - added the ability to enforce limits on memory usage.
58 - added the 'source' load-balancing algorithm which uses the source IP(v4|v6)
59 - re-architectured the server round-robin mechanism to ease integration of
60 other algorithms. It now relies on the number of active and backup servers.
61 - added a counter for the number of active and backup servers, and report
62 these numbers upon SIGHUP or state change.
63
willy tarreaubfad5742006-03-23 14:19:11 +0100642006/03/23 : 1.2.10.1
65 - while fixing the backup server round-robin "feature", a new bug was
66 introduced which could miss some backup servers.
67 - the displayed proxy name was wrong when dumping upon SIGHUP.
68
willy tarreauaaff30e2006-03-19 21:30:41 +0100692006/03/19 : 1.2.10
70 - assert.h is needed when DEBUG is defined.
71 - ENORMOUS long standing bug affecting the epoll polling system :
72 event_data is a union, not a structure !
73 - Make fd management more robust and easier to debug. Also some
74 micro-optimisations.
75 - Limit the number of consecutive accept() in multi-process mode.
76 This produces a more evenly distributed load across the processes and
77 slightly improves performance by reducing bottlenecks.
78 - Make health-checks be more regular, and faster to retry after a timeout.
79 - Fixed some messages to ease parsing of alerts.
80 - provided a patch to enable epoll on RHEL3 kernels.
81 - Separated OpenBSD build from the main Makefile into a new one.
82
willy tarreau50be0172006-03-15 19:41:19 +0100832006/03/15 : 1.2.9
84 - haproxy could not be stopped after being paused, it had to be woken up
85 first. This has been fixed.
86 - the 'ulimit-n' parameter is now optional and by default computed from
87 maxconn + the number of listeners + the number of health-checks.
88 - it is now possible to specify a maximum number of connections at build
89 time with the SYSTEM_MAXCONN define. The value set in the configuration
90 file will then be limited to this value, and only the command-line '-n'
91 option will be able to bypass it. It will prevent against accidental
92 high memory usage on small systems.
93 - RFC2616 expects that any HTTP agent accepts multi-line headers. Earlier
94 versions did not detect a line beginning with a space as the continuation
95 of previous header. It is now correct.
96 - health checks sent to servers configured with identical intervals were
97 sent in perfect synchronisation because the initial time was the same
98 for all. This could induce high load peaks when fragile servers were
99 hosting tens of instances for the same application. Now the load is
100 spread evenly across the smallest interval amongst a listener.
101 - a new 'forceclose' option was added to make the proxy close the outgoing
102 channel to the server once it has sent all its headers and the server
103 starts responding. This helps some servers which don't close upon the
104 'Connection: close' header. It implies 'option httpclose'.
105 - there was a bug in the way the backup servers were handled. They were
106 erroneously load-balanced while the doc said the opposite. Since
107 load-balanced backup servers is one of the features some people have
108 been asking for, the problem was fixed to reflect the documented
109 behaviour and a new option 'allbackups' was introduced to provide the
110 feature to those who need it.
111 - a never ending connect() could lead to a fast select() loop if its
112 timeout times the number of retransmits exceeded the server read or write
113 timeout, because the later was used to compute select()'s timeout while
114 the connection timeout was not reached.
115 - now we initialize the libc's localtime structures very early so that even
116 under OOM conditions, we can still send dated error messages without
117 segfaulting.
118 - the 'daemon' mode implies 'quiet' and disables 'verbose' because file
119 descriptors are closed.
120
willy tarreau065f1c02006-01-29 22:10:07 +01001212006/01/29 : 1.2.8
122 - fixed a nasty bug affecting poll/epoll which could return unmodified data
123 from the server to the client, and sometimes lead to memory corruption
124 crashing the process.
125 - added the new pause/play mechanism with SIGTTOU/SIGTTIN for hot-reconf.
126
1272005/12/18 : 1.2.7.1
128 - the "retries" option was ignored because connect() could not return an
129 error if the connection failed before the timeout.
130 - TCP health-checks could not detect a connection refused in poll/epoll
131 mode.
132
willy tarreaua56eca72005-12-18 01:34:42 +01001332005/11/13 : 1.2.7
willy tarreau77bc8542005-12-18 01:31:43 +0100134 - building with -DUSE_PCRE should include PCRE headers and not regex.h. At
135 least on Solaris, this caused the libc's regex primitives to be used instead
136 of PCRE, which caused trouble on group references. This is now fixed.
willy tarreaud0fb4652005-12-18 01:32:04 +0100137 - delayed the quiet mode during startup so that most of the startup alerts can
138 be displayed even in quiet mode.
139 - display an alert when a listener has no address, invalid or no port, or when
140 there are no enabled listeners upon startup.
willy tarreau4373b962005-12-18 01:32:31 +0100141 - added "static-pcre" to the list of supported regex options in the Makefile.
willy tarreau77bc8542005-12-18 01:31:43 +0100142
willy tarreaub952e1d2005-12-18 01:31:20 +01001432005/10/09 : 1.2.7rc (1.1.33rc)
144 - second batch of socklen_t changes.
145 - clean-ups from Cameron Simpson.
146 - because tv_remain() does not know about eternity, using no timeout can
147 make select() spin around a null time-out. Bug reported by Cameron Simpson.
148 - client read timeout was not properly set to eternity initialized after an
149 accept() if it was not set in the config. It remained undetected so long
150 because eternity is 0 and newly allocated pages are zeroed by the system.
151 - do not call get_original_dst() when not in transparent mode.
152 - implemented a workaround for a bug in certain epoll() implementations on
153 linux-2.4 kernels (epoll-lt <= 0.21).
154 - implemented TCP keepalive with new options : tcpka, clitcpka, srvtcpka.
155
willy tarreauc5f73ed2005-12-18 01:26:38 +01001562005/08/07 : 1.2.6
157 - clean-up patch from Alexander Lazic fixes build on Debian 3.1 (socklen_t).
158
1592005/07/06 : 1.2.6-pre5 (1.1.32)
willy tarreau0fe39652005-12-18 01:25:24 +0100160 - added the number of active sessions (proxy/process) in the logs
161
1622005/07/06 : 1.2.6-pre4 (1.1.32-pre4)
willy tarreaub1285d52005-12-18 01:20:14 +0100163 - the time-out fix introduced in 1.1.25 caused a corner case where it was
164 possible for a client to keep a connection maintained regardless of the
165 timeout if the server closed the connection during the HEADER phase,
166 while the client ignored the close request while doing nothing in the
167 other direction. This has been fixed now by ensuring that read timeouts
168 are re-armed when switching to any SHUTW state.
169
1702005/07/05 : 1.2.6-pre3 (1.1.32-pre3)
171 - enhanced error reporting in the logs. Now the proxy will precisely detect
172 various error conditions related to the system and/or process limits, and
173 generate LOG_EMERG logs indicating that a resource has been exhausted.
174 - logs will contain two new characters for the error cause : 'R' indicates
175 a resource exhausted, and 'I' indicates an internal error, though this
176 one should never happen.
177 - server connection timeouts can now be reported in the logs (sC), as well
178 as connections refused because of maxconn limitations (PC).
179
1802005/07/05 : 1.2.6-pre2 (1.1.32-pre2)
181 - new global configuration keyword "ulimit-n" may be used to raise the FD
182 limit to usable values.
183 - a warning is now displayed on startup if the FD limit is lower than the
184 configured maximum number of sockets.
185
1862005/07/05 : 1.2.6-pre1 (1.1.32-pre1)
187 - new configuration keyword "monitor-net" makes it possible to be monitored
188 by external devices which connect to the proxy without being logged nor
189 forwarded to any server. Particularly useful on generic TCPv4 relays.
190
willy tarreau5dffb602005-12-18 01:15:23 +01001912005/06/21 : 1.2.5.2
192 - fixed build on PPC where chars are unsigned by default
193
willy tarreau08dedbe2005-12-18 01:13:48 +01001942005/05/02 : 1.2.5.1
195 - dirty hack to fix a bug introduced with epoll : if we close an FD and
196 immediately reassign it to another session through a connect(), the
197 Prev{Read,Write}Events are not updated, which causes trouble detecting
198 changes, thus leading to many timeouts at high loads.
199
willy tarreau64a3cc32005-12-18 01:13:11 +01002002005/04/30 : 1.2.5 (1.1.31)
201 - changed the runtime argument to disable epoll() to '-de'
202 - changed the runtime argument to disable poll() to '-dp'
203 - added global options 'nopoll' and 'noepoll' to do the same at the
204 configuration level.
205 - added a 'linux24e' target to the Makefile for Linux 2.4 systems patched to
206 support epoll().
207 - changed default FD_SETSIZE to 65536 on Solaris (default=1024)
208 - conditionned signals redirection to #ifdef DEBUG_MEMORY
209
willy tarreau1c2ad212005-12-18 01:11:29 +01002102005/04/26 : 1.2.5-pre4
211 - made epoll() support a compile-time option : ENABLE_EPOLL
212 - provided a very little libc replacement for a possibly missing epoll()
213 implementation which can be enabled by -DUSE_MY_EPOLL
214 - implemented the poll() poller, which can be enabled with -DENABLE_POLL.
215 The equivalent runtime argument becomes '-P'. A few tests show that it
216 performs like select() with many fds, but slightly slower (certainly
217 because of the higher amount of memory involved).
218 - separated the 3 polling methods and the tasks scheduler into 4 distinct
219 functions which makes the code a lot more modular.
220 - moved some event tables to private static declarations inside the poller
221 functions.
222 - the poller functions can now initialize themselves, run, and cleanup.
223 - changed the runtime argument to enable epoll() to '-E'.
224 - removed buggy epoll_ctl() code in the client_retnclose() function. This
225 function was never meant to remove anything.
226 - fixed a typo which caused glibc to yell about a double free on exit.
227 - removed error checking after epoll_ctl(DEL) because we can never know if
228 the fd is still active or already closed.
229 - added a few entries in the makefile
230
willy tarreauad90a0c2005-12-18 01:09:15 +01002312005/04/25 : 1.2.5-pre3
232 - experimental epoll() support (use temporary '-e' argument)
233
2342005/04/24 : 1.2.5-pre2
willy tarreauc1f47532005-12-18 01:08:26 +0100235 - implemented the HTTP 303 code for error redirection. This forces the
236 browser to fetch the given URI with a GET request. The new keyword for
237 this is 'errorloc303', and a new 'errorloc302' keyword has been created
238 to make them easily distinguishable.
239 - added more controls in the parser for valid use of '\x' sequence.
240 - few fixes from Alex & Klaus
241
willy tarreauad90a0c2005-12-18 01:09:15 +01002422005/02/17 : 1.2.5-pre1
willy tarreauc1f47532005-12-18 01:08:26 +0100243 - fixed a few errors in the documentation
244
2452005/02/13
246 - do not pre-initialize unused file-descriptors before select() anymore.
247
willy tarreau12350152005-12-18 01:03:27 +01002482005/01/22 : 1.2.4
249 - merged Alexander Lazic's and Klaus Wagner's work on application
250 cookie-based persistence. Since this is the first merge, this version is
251 not intended for general use and reports are more than welcome. Some
252 documentation is really needed though.
253
willy tarreau0174f312005-12-18 01:02:42 +01002542005/01/22 : 1.2.3 (1.1.30)
255 - add an architecture guide to the documentation
256 - released without any changes
257
2582004/12/26 : 1.2.3-pre1 (1.1.30-pre1)
259 - increased default BUFSIZE to 16 kB to accept max headers of 8 kB which is
260 compatible with Apache. This limit can be configured in the makefile now.
261 Thanks to Eric Fehr for the checks.
262 - added a per-server "source" option which now makes it possible to bind to
263 a different source for each (potentially identical) server.
264 - changed cookie-based server selection slightly to allow several servers to
265 share a same cookie, thus making it possible to associate backup servers to
266 live servers and ease soft-stop for maintenance periods. (Alexander Lazic)
267 - added the cookie 'prefix' mode which makes it possible to use persistence
268 with thin clients which support only one cookie. The server name is prefixed
269 before the application cookie, and restore back.
270 - fixed the order of servers within an instance to match documentation. Now
271 the servers are *really* used in the order of their declaration. This is
272 particularly important when multiple backup servers are in use.
273
willy tarreau4302f492005-12-18 01:00:37 +01002742004/10/18 : 1.2.2 (1.1.29)
275 - fixed a bug where a TCP connection would be logged twice if the 'logasap'
276 option was enabled without the 'tcplog' option.
277 - encode_string() would use hdr_encode_map instead of the map argument.
278
2792004/08/10 : (1.1.29-pre2)
280 - the logged request is now encoded with '#XX' for unprintable characters
281 - new keywords 'capture request header' and 'capture response header' enable
282 logging of arbitrary HTTP headers in requests and responses
283 - removed "-DSOLARIS" after replacing the last inet_aton() with inet_pton()
284
willy tarreau982249e2005-12-18 00:57:06 +01002852004/06/06 : 1.2.1 (1.1.28)
286 - added the '-V' command line option to verbosely report errors even though
287 the -q or 'quiet' options are specified. This is useful with '-c'.
288 - added a Red Hat init script and a .spec from Simon Matter <simon.matter@invoca.ch>
willy tarreau036e1ce2005-12-17 13:46:33 +0100289
willy tarreau982249e2005-12-18 00:57:06 +01002902004/06/05 :
291 - added the "logasap" option which produces a log without waiting for the data
292 to be transferred from the server to the client.
293 - added the "httpclose" option which removes any "connection:" header and adds
294 "Connection: close" in both direction.
willy tarreau97f58572005-12-18 00:53:44 +0100295 - added the 'checkcache' option which blocks cacheable responses containing
296 dangerous headers, such as 'set-cookie'.
willy tarreau982249e2005-12-18 00:57:06 +0100297 - added 'rspdeny' and 'rspideny' to block certain responses to avoid sensible
298 information leak from servers.
willy tarreau25c4ea52005-12-18 00:49:49 +0100299
3002004/04/18 :
willy tarreaudd07e972005-12-18 00:48:48 +0100301 - send an EMERG log when no server is available for a given proxy
302 - added the '-c' command line option to syntactically check the
303 configuration file without starting the service.
304
willy tarreau8a86dbf2005-12-18 00:45:59 +01003052003/11/09 : 1.2.0
306 - the same as 1.1.27 + IPv6 support on the client side
307
willy tarreaufe2c5c12005-12-17 14:14:34 +01003082003/10/27 : 1.1.27
309 - the configurable HTTP health check introduced in 1.1.23 revealed a shameful
310 bug : the code still assumed that HTTP requests were the same size as the
311 original ones (22 bytes), and failed if they were not.
312 - added support for pidfiles.
313
willy tarreauc58fc692005-12-17 14:13:08 +01003142003/10/22 : 1.1.26
315 - the fix introduced in 1.1.25 for client timeouts while waiting for servers
316 broke almost all compatibility with POST requests, because the proxy
317 stopped to read anything from the client as soon as it got all of its
318 headers.
319
willy tarreauc1cae632005-12-17 14:12:23 +01003202003/10/15 : 1.1.25
321 - added the 'tcplog' option, which provides enhanced, HTTP-like logs for
322 generic TCP proxies, or lighter logs for HTTP proxies.
323 - fixed a time-out condition wrongly reported as client time-out in data
324 phase if the client timeout was lower than the connect timeout times the
325 number of retries.
326
willy tarreau197e8ec2005-12-17 14:10:59 +01003272003/09/21 : 1.1.24
328 - if a client sent a full request then shut its write connection down, then
329 the request was aborted. This case was detected only when using haproxy
330 both as health-check client and as a server.
331 - if 'option httpchk' is used in a 'health' mode server, then responses will
332 change from 'OK' to 'HTTP/1.0 200 OK'.
333 - fixed a Linux-only bug in case of HTTP server health-checks, where a single
334 server response followed by a close could be ignored, and the server seen
335 as failed.
336
willy tarreaueedaa9f2005-12-17 14:08:03 +01003372003/09/19 : 1.1.23
338 - fixed a stupid bug introduced in 1.1.22 which caused second and subsequent
339 'default' sections to keep previous parameters, and not initialize logs
340 correctly.
341 - fixed a second stupid bug introduced in 1.1.22 which caused configurations
342 relying on 'dispatch' mode to segfault at the first connection.
343 - 'option httpchk' now supports method, HTTP version and a few headers.
344 - now, 'option httpchk', 'cookie' and 'capture' can be specified in
345 'defaults' section
346
3472003/09/10 : 1.1.22
willy tarreaua41a8b42005-12-17 14:02:24 +0100348 - 'listen' now supports optionnal address:port-range lists
349 - 'bind' introduced to add new listen addresses
350 - fixed a bug which caused a session to be kept established on a server till
351 it timed out if the client closed during the DATA phase.
352 - the port part of each server address can now be empty to make the proxy
353 connect to the server on the same port it was connected to, be an absolute
354 unsigned number to reflect a single port (as in older versions), or an
355 explicitly signed number (+N/-N) to indicate that this offset must be
356 applied to the port the proxy was connected to, when connecting to the
357 server.
358 - the 'port' server option allows the user to specify a different
359 health-check port than the service one. It is mandatory when only relative
360 ports have been specified and check is required. By default, the checks are
361 sent to the service port.
362 - new 'defaults' section which is rather similar to 'listen' except that all
363 values are only used as default values for future 'listen' sections, until
364 a new 'defaults' resets them. At the moment, server options, regexes,
365 cookie names and captures cannot be set in the 'defaults' section.
366
willy tarreau2f6ba652005-12-17 13:57:42 +01003672003/05/06 : 1.1.21
368 - changed the debug output format so that it now includes the session unique
369 ID followed by the instance name at the beginning of each line.
370 - in debug mode, accept now shows the client's IP and port.
371 - added one 3 small debugging scripts to search and pretty print debug output
372 - changed the default health check request to "OPTIONS /" instead of
373 "OPTIONS *" since not all servers implement the later one.
374 - "option httpchk" now accepts an optional parameter allowing the user to
375 specify and URI other than '/' during health-checks.
376
willy tarreaub1ff9db2005-12-17 13:51:03 +01003772003/04/21 : 1.1.20
378 - fixed two problems with time-outs, one where a server would be logged as
379 timed out during transfer that take longer to complete than the fixed
380 time-out, and one where clients were logged as timed-out during the data
381 phase because they didn't have anything to send. This sometimes caused
382 slow client connections to close too early while in fact there was no
383 problem. The proper fix would be to have a per-fd time-out with
384 conditions depending on the state of the HTTP FSM.
385
willy tarreau906b2682005-12-17 13:49:52 +01003862003/04/16 : 1.1.19
387 - haproxy was NOT RFC compliant because it was case-sensitive on HTTP
388 "Cookie:" and "Set-Cookie:" headers. This caused JVM 1.4 to fail on
389 cookie persistence because it uses "cookie:". Two memcmp() have been
390 replaced with strncasecmp().
391
willy tarreau036e1ce2005-12-17 13:46:33 +01003922003/04/02 : 1.1.18
393 - Haproxy can be compiled with PCRE regex instead of libc regex, by setting
394 REGEX=pcre on the make command line.
395 - HTTP health-checks now use "OPTIONS *" instead of "OPTIONS /".
396 - when explicit source address binding is required, it is now also used for
397 health-checks.
398 - added 'reqpass' and 'reqipass' to allow certain headers but not the request
399 itself.
400 - factored several strings to reduce binary size by about 2 kB.
401 - replaced setreuid() and setregid() with more standard setuid() and setgid().
402 - added 4 status flags to the log line indicating who ended the connection
403 first, the sessions state, the validity of the cookie, and action taken on
404 the set-cookie header.
405
4062002/10/18 : 1.1.17
407 - add the notion of "backup" servers, which are used only when all other
408 servers are down.
409 - make Set-Cookie return "" instead of "(null)" when the server has no
410 cookie assigned (useful for backup servers).
411 - "log" now supports an optionnal level name (info, notice, err ...) above
412 which nothing is sent.
413 - replaced some strncmp() with memcmp() for better efficiency.
414 - added "capture cookie" option which logs client and/or server cookies
415 - cleaned up/down messages and dump servers states upon SIGHUP
416 - added a redirection feature for errors : "errorloc <errnum> <url>"
417 - now we won't insist on connecting to a dead server, even with a cookie,
418 unless option "persist" is specified.
419 - added HTTP/408 response for client request time-out and HTTP/50[234] for
420 server reply time-out or errors.
421
4222002/09/01 : 1.1.16
423 - implement HTTP health checks when option "httpchk" is specified.
424
4252002/08/07 : 1.1.15
426 - replaced setpgid()/setpgrp() with setsid() for better portability, because
427 setpgrp() doesn't have the same meaning under Solaris, Linux, and OpenBSD.
428
4292002/07/20 : 1.1.14
430 - added "postonly" cookie mode
431
4322002/07/15 : 1.1.13
433 - tv_diff used inverted parameters which led to negative times !
434
4352002/07/13 : 1.1.12
436 - fixed stats monitoring, and optimized some tv_* for most common cases.
437 - replaced temporary 'newhdr' with 'trash' to reduce stack size
438 - made HTTP errors more HTML-fiendly.
439 - renamed strlcpy() to strlcpy2() because of a slightly difference between
440 their behaviour (return value), to avoid confusion.
441 - restricted HTTP messages to HTTP proxies only
442 - added a 502 message when the connection has been refused by the server,
443 to prevent clients from believing this is a zero-byte HTTP 0.9 reply.
444 - changed 'Cache-control:' from 'no-cache="set-cookie"' to 'private' when
445 inserting a cookie, because some caches (apache) don't understand it.
446 - fixed processing of server headers when client is in SHUTR state
447
4482002/07/04 :
449 - automatically close fd's 0,1 and 2 when going daemon ; setpgrp() after
450 setpgid()
451
4522002/06/04 : 1.1.11
453 - fixed multi-cookie handling in client request to allow clean deletion
454 in insert+indirect mode. Now, only the server cookie is deleted and not
willy tarreau906b2682005-12-17 13:49:52 +0100455 all the header. Should now be compliant to RFC2965.
willy tarreau036e1ce2005-12-17 13:46:33 +0100456 - added a "nocache" option to "cookie" to specify that we explicitly want
457 to add a "cache-control" header when we add a cookie.
458 It is also possible to add an "Expires: <old-date>" to keep compatibility
459 with old/broken caches.
460
4612002/05/10 : 1.1.10
462 - if a cookie is used in insert+indirect mode, it's desirable that the
463 the servers don't see it. It was not possible to remove it correctly
464 with regexps, so now it's removed automatically.
465
4662002/04/19 : 1.1.9
467 - don't use snprintf()'s return value as an end of message since it may
468 be larger. This caused bus errors and segfaults in internal libc's
469 getenv() during localtime() in send_log().
470 - removed dead insecure send_syslog() function and all references to it.
471 - fixed warnings on Solaris due to buggy implementation of isXXXX().
472
4732002/04/18 : 1.1.8
474 - option "dontlognull"
475 - fixed "double space" bug in config parser
476 - fixed an uninitialized server field in case of dispatch
477 with no existing server which could cause a segfault during
478 logging.
479 - the pid logged was always the father's, which was wrong for daemons.
480 - fixed wrong level "LOG_INFO" for message "proxy started".
481
4822002/04/13 :
483 - http logging is now complete :
484 - ip:port, date, proxy, server
485 - req_time, conn_time, hdr_time, tot_time
486 - status, size, request
487 - source address
488
4892002/04/12 : 1.1.7
490 - added option forwardfor
491 - added reqirep, reqidel, reqiallow, reqideny, rspirep, rspidel
492 - added "log global" in "listen" section.
493
4942002/04/09 :
495 - added a new "global" section :
496 - logs
497 - debug, quiet, daemon modes
498 - uid, gid, chroot, nbproc, maxconn
499
5002002/04/08 : 1.1.6
501 - regex are now chained and not limited anymore.
502 - unavailable server now returns HTTP/502.
503 - increased per-line args limit to 40
504 - added reqallow/reqdeny to block some request on matches
505 - added HTTP 400/403 responses
506
5072002/04/03 : 1.1.5
508 - connection logging displayed incorrect source address.
509 - added proxy start/stop and server up/down log events.
510 - replaced log message short buffers with larger trash.
511 - enlarged buffer to 8 kB and replace buffer to 4 kB.
512
5132002/03/25 : 1.1.4
514 - made rise/fall/interval time configurable
515
5162002/03/22 : 1.1.3
517 - fixed a bug : cr_expire and cw_expire were inverted in CL_STSHUT[WR]
518 which could lead to loops.
519
5202002/03/21 : 1.1.2
521 - fixed a bug in buffer management where we could have a loop
522 between event_read() and process_{cli|srv} if R==BUFSIZE-MAXREWRITE.
523 => implemented an adjustable buffer limit.
524 - fixed a bug : expiration of tasks in wait queue timeout is used again,
525 and running tasks are skipped.
526 - added some debug lines for accept events.
527 - send warnings for servers up/down.
528
5292002/03/12 : 1.1.1
530 - fixed a bug in total failure handling
531 - fixed a bug in timestamp comparison within same second (tv_cmp_ms)
532
5332002/03/10 : 1.1.0
534 - fixed a few timeout bugs
535 - rearranged the task scheduler subsystem to improve performance,
536 add new tasks, and make it easier to later port to librt ;
537 - allow multiple accept() for one select() wake up ;
538 - implemented internal load balancing with basic health-check ;
539 - cookie insertion and header add/replace/delete, with better strings
540 support.
541
5422002/03/08
543 - reworked buffer handling to fix a few rewrite bugs, and
544 improve overall performance.
545 - implement the "purge" option to delete server cookies in direct mode.
546
5472002/03/07
548 - fixed some error cases where the maxfd was not decreased.
549
5502002/02/26
551 - now supports transparent proxying, at least on linux 2.4.
552
5532002/02/12
554 - soft stop works again (fixed select timeout computation).
555 - it seems that TCP proxies sometimes cannot timeout.
556 - added a "quiet" mode.
557 - enforce file descriptor limitation on socket() and accept().
558
5592001/12/30 : release of version 1.0.2 : fixed a bug in header processing
5602001/12/19 : release of version 1.0.1 : no MSG_NOSIGNAL on solaris
5612001/12/16 : release of version 1.0.0.
5622001/12/16 : added syslog capability for each accepted connection.
5632001/11/19 : corrected premature end of files and occasional SIGPIPE.
5642001/10/31 : added health-check type servers (mode health) which replies OK then closes.
5652001/10/30 : added the ability to support standard TCP proxies and HTTP proxies
566 with or without cookies (use keyword http for this).
5672001/09/01 : added client/server header replacing with regexps.
568 eg:
569 cliexp ^(Host:\ [^:]*).* Host:\ \1:80
570 srvexp ^Server:\ .* Server:\ Apache
5712000/11/29 : first fully working release with complete FSMs and timeouts.
5722000/11/28 : major rewrite
5732000/11/26 : first write