blob: 50d8a3759105bd5dc17baa9da92a3e0a19e0c051 [file] [log] [blame]
willy tarreau036e1ce2005-12-17 13:46:33 +01001ChangeLog :
2===========
willy tarreau4302f492005-12-18 01:00:37 +01003
Willy Tarreau85270da2007-01-02 00:59:39 +010042007/01/02 : 1.3.4
5 - support for cttproxy on the server side to present the client
6 address to the server.
7 - added support for SO_REUSEPORT on Linux (needs kernel patch)
8 - new RFC2616-compliant HTTP request parser with header indexing
9 - split proxies in frontends, rulesets and backends
10 - implemented the 'req[i]setbe' to select a backend depending
11 on the contents
12 - added the 'default_backend' keyword to select a default BE.
13 - new stats page featuring FEs and BEs + bytes in both dirs
14 - improved log format to indicate the backend and the time in ms.
15 - lots of cleanups
16
Willy Tarreau9c9fea42006-10-16 00:03:35 +0200172006/10/15 : 1.3.3
18 - fix broken redispatch option in case the connection has already
19 been marked "in progress" (ie: nearly always).
20 - support regparm on x86 to speed up some often called functions
21 - removed a few useless calls to gettimeofday() in log functions.
22 - lots of 'const char*' cleanups
23 - turn every FD_* into functions which are faster on recent CPUs
24
Willy Tarreau690f9aa2006-09-03 11:23:06 +0200252006/09/03 : 1.3.2
26 - started the changes towards I/O completion callbacks. stream_sock* have
27 replaced event_*.
28 - added the new "reqtarpit" and "reqitarpit" protection features
29
Willy Tarreau8f2b8552006-07-09 17:11:39 +0200302006/07/09 : 1.3.1 (1.2.15)
31 - now, haproxy warns about missing timeout during startup to try to
32 eliminate all those buggy configurations.
33 - added "Content-Type: text/html" in responses wherever appropriate, as
34 suggested by Cameron Simpson.
35 - implemented "option ssl-hello-chk" to use SSLv3 CLIENT HELLO messages to
36 test server's health
37 - implemented "monitor-uri" so that haproxy can reply to a specific URI with
38 an "HTTP/1.0 200 OK" response. This is useful to validate multiple proxies
39 at once.
40
Willy Tarreaub9e98b62006-07-03 10:32:46 +0200412006/06/29 : 1.3.0
42 - exploded the whole file into multiple .c and .h. No functionnal
Willy Tarreau8f2b8552006-07-09 17:11:39 +020043 difference is expected at all.
44 - fixed a bug by which neither stats nor error messages could be returned if
45 'clitimeout' was missing.
Willy Tarreaub9e98b62006-07-03 10:32:46 +020046
willy tarreau7e6328d2006-05-21 23:26:20 +0200472006/05/21 : 1.2.14
48 - new HTML status report with the 'stats' keyword.
49 - added the 'abortonclose' option to better resist traffic surges
50 - implemented dynamic traffic regulation with the 'minconn' option
51 - show request time on denied requests
52 - definitely fixed hot reconf on OpenBSD by the use of SO_REUSEPORT
53 - now a proxy instance is allowed to run without servers, which is
54 useful to dedicate one instance to stats
55 - added lots of error counters
56 - a missing parenthesis preventd matching of cacheable cookies
57 - a missing parenthesis in poll_loop() might have caused missed events.
58
Willy TARREAU4404b7e2006-05-14 10:00:09 +0200592006/05/14 : 1.2.13.1
60 - an uninitialized field in the struct session could cause a crash when
61 the session was freed. This has been encountered on Solaris only.
62 - Solaris and OpenBSD no not support shutdown() on listening socket. Let's
63 be nice to them by performing a soft stop if pause fails.
64
willy tarreauc3a2e072006-05-13 18:51:38 +0200652006/05/13 : 1.2.13
66 - 'maxconn' server parameter to do per-server session limitation
67 - queueing to support non-blocking session limitation
68 - fixed removal of cookies for cookie-less servers such as backup servers
69 - two separate wait queues for expirable and non-expirable tasks provide
70 better performance with lots of sessions.
71 - some code cleanups and performance improvements
72 - made state dumps a bit more verbose
73 - fixed missing checks for NULL srv in dispatch mode
74 - load balancing on backup servers was not possible in source hash mode.
75 - two session flags shared the same bit, but fortunately they were not
76 compatible.
77
willy tarreauc0d4bbd2006-04-15 21:47:50 +0200782006/04/15 : 1.2.12
79 Very few changes preparing for more important changes to support per-server
80 session limitations and queueing :
81 - ignore leading empty lines in HTTP requests as suggested by RFC2616.
82 - added the 'weight' parameter to the servers, limited to 1..256. It applies
83 to roundrobin and source hash.
84 - the optional '-s' option could clobber '-st' and '-sf' if compiled in.
85
willy tarreaue0dd2692006-03-30 16:27:34 +0200862006/03/30 : 1.2.11.1
87 - under some conditions, it might have been possible that when the
88 last dead server became available, it would not have been used
89 till another one would have changed state. Could not be reproduced
90 at all, however seems possible from the code.
91
willy tarreaud2058dc2006-03-25 20:35:41 +0100922006/03/25 : 1.2.11
93 - added the '-db' command-line option to disable backgrounding.
94 - added the -sf/-st command-line arguments which are used to specify
95 a list of pids to send a FINISH or TERMINATE signal upon startup.
96 They will also be asked to release their port if a bind fails.
97 - reworked the startup mechanism to allow the sending of a signal to a list
98 of old pids if a socket cannot be bound, with a retry for a limited amount
99 of time (1 second by default).
100 - added the ability to enforce limits on memory usage.
101 - added the 'source' load-balancing algorithm which uses the source IP(v4|v6)
102 - re-architectured the server round-robin mechanism to ease integration of
103 other algorithms. It now relies on the number of active and backup servers.
104 - added a counter for the number of active and backup servers, and report
105 these numbers upon SIGHUP or state change.
106
willy tarreaubfad5742006-03-23 14:19:11 +01001072006/03/23 : 1.2.10.1
108 - while fixing the backup server round-robin "feature", a new bug was
109 introduced which could miss some backup servers.
110 - the displayed proxy name was wrong when dumping upon SIGHUP.
111
willy tarreauaaff30e2006-03-19 21:30:41 +01001122006/03/19 : 1.2.10
113 - assert.h is needed when DEBUG is defined.
114 - ENORMOUS long standing bug affecting the epoll polling system :
115 event_data is a union, not a structure !
116 - Make fd management more robust and easier to debug. Also some
117 micro-optimisations.
118 - Limit the number of consecutive accept() in multi-process mode.
119 This produces a more evenly distributed load across the processes and
120 slightly improves performance by reducing bottlenecks.
121 - Make health-checks be more regular, and faster to retry after a timeout.
122 - Fixed some messages to ease parsing of alerts.
123 - provided a patch to enable epoll on RHEL3 kernels.
124 - Separated OpenBSD build from the main Makefile into a new one.
125
willy tarreau50be0172006-03-15 19:41:19 +01001262006/03/15 : 1.2.9
127 - haproxy could not be stopped after being paused, it had to be woken up
128 first. This has been fixed.
129 - the 'ulimit-n' parameter is now optional and by default computed from
130 maxconn + the number of listeners + the number of health-checks.
131 - it is now possible to specify a maximum number of connections at build
132 time with the SYSTEM_MAXCONN define. The value set in the configuration
133 file will then be limited to this value, and only the command-line '-n'
134 option will be able to bypass it. It will prevent against accidental
135 high memory usage on small systems.
136 - RFC2616 expects that any HTTP agent accepts multi-line headers. Earlier
137 versions did not detect a line beginning with a space as the continuation
138 of previous header. It is now correct.
139 - health checks sent to servers configured with identical intervals were
140 sent in perfect synchronisation because the initial time was the same
141 for all. This could induce high load peaks when fragile servers were
142 hosting tens of instances for the same application. Now the load is
143 spread evenly across the smallest interval amongst a listener.
144 - a new 'forceclose' option was added to make the proxy close the outgoing
145 channel to the server once it has sent all its headers and the server
146 starts responding. This helps some servers which don't close upon the
147 'Connection: close' header. It implies 'option httpclose'.
148 - there was a bug in the way the backup servers were handled. They were
149 erroneously load-balanced while the doc said the opposite. Since
150 load-balanced backup servers is one of the features some people have
151 been asking for, the problem was fixed to reflect the documented
152 behaviour and a new option 'allbackups' was introduced to provide the
153 feature to those who need it.
154 - a never ending connect() could lead to a fast select() loop if its
155 timeout times the number of retransmits exceeded the server read or write
156 timeout, because the later was used to compute select()'s timeout while
157 the connection timeout was not reached.
158 - now we initialize the libc's localtime structures very early so that even
159 under OOM conditions, we can still send dated error messages without
160 segfaulting.
161 - the 'daemon' mode implies 'quiet' and disables 'verbose' because file
162 descriptors are closed.
163
willy tarreau065f1c02006-01-29 22:10:07 +01001642006/01/29 : 1.2.8
165 - fixed a nasty bug affecting poll/epoll which could return unmodified data
166 from the server to the client, and sometimes lead to memory corruption
167 crashing the process.
168 - added the new pause/play mechanism with SIGTTOU/SIGTTIN for hot-reconf.
169
1702005/12/18 : 1.2.7.1
171 - the "retries" option was ignored because connect() could not return an
172 error if the connection failed before the timeout.
173 - TCP health-checks could not detect a connection refused in poll/epoll
174 mode.
175
willy tarreaua56eca72005-12-18 01:34:42 +01001762005/11/13 : 1.2.7
willy tarreau77bc8542005-12-18 01:31:43 +0100177 - building with -DUSE_PCRE should include PCRE headers and not regex.h. At
178 least on Solaris, this caused the libc's regex primitives to be used instead
179 of PCRE, which caused trouble on group references. This is now fixed.
willy tarreaud0fb4652005-12-18 01:32:04 +0100180 - delayed the quiet mode during startup so that most of the startup alerts can
181 be displayed even in quiet mode.
182 - display an alert when a listener has no address, invalid or no port, or when
183 there are no enabled listeners upon startup.
willy tarreau4373b962005-12-18 01:32:31 +0100184 - added "static-pcre" to the list of supported regex options in the Makefile.
willy tarreau77bc8542005-12-18 01:31:43 +0100185
willy tarreaub952e1d2005-12-18 01:31:20 +01001862005/10/09 : 1.2.7rc (1.1.33rc)
187 - second batch of socklen_t changes.
188 - clean-ups from Cameron Simpson.
189 - because tv_remain() does not know about eternity, using no timeout can
190 make select() spin around a null time-out. Bug reported by Cameron Simpson.
191 - client read timeout was not properly set to eternity initialized after an
192 accept() if it was not set in the config. It remained undetected so long
193 because eternity is 0 and newly allocated pages are zeroed by the system.
194 - do not call get_original_dst() when not in transparent mode.
195 - implemented a workaround for a bug in certain epoll() implementations on
196 linux-2.4 kernels (epoll-lt <= 0.21).
197 - implemented TCP keepalive with new options : tcpka, clitcpka, srvtcpka.
198
willy tarreauc5f73ed2005-12-18 01:26:38 +01001992005/08/07 : 1.2.6
200 - clean-up patch from Alexander Lazic fixes build on Debian 3.1 (socklen_t).
201
2022005/07/06 : 1.2.6-pre5 (1.1.32)
willy tarreau0fe39652005-12-18 01:25:24 +0100203 - added the number of active sessions (proxy/process) in the logs
204
2052005/07/06 : 1.2.6-pre4 (1.1.32-pre4)
willy tarreaub1285d52005-12-18 01:20:14 +0100206 - the time-out fix introduced in 1.1.25 caused a corner case where it was
207 possible for a client to keep a connection maintained regardless of the
208 timeout if the server closed the connection during the HEADER phase,
209 while the client ignored the close request while doing nothing in the
210 other direction. This has been fixed now by ensuring that read timeouts
211 are re-armed when switching to any SHUTW state.
212
2132005/07/05 : 1.2.6-pre3 (1.1.32-pre3)
214 - enhanced error reporting in the logs. Now the proxy will precisely detect
215 various error conditions related to the system and/or process limits, and
216 generate LOG_EMERG logs indicating that a resource has been exhausted.
217 - logs will contain two new characters for the error cause : 'R' indicates
218 a resource exhausted, and 'I' indicates an internal error, though this
219 one should never happen.
220 - server connection timeouts can now be reported in the logs (sC), as well
221 as connections refused because of maxconn limitations (PC).
222
2232005/07/05 : 1.2.6-pre2 (1.1.32-pre2)
224 - new global configuration keyword "ulimit-n" may be used to raise the FD
225 limit to usable values.
226 - a warning is now displayed on startup if the FD limit is lower than the
227 configured maximum number of sockets.
228
2292005/07/05 : 1.2.6-pre1 (1.1.32-pre1)
230 - new configuration keyword "monitor-net" makes it possible to be monitored
231 by external devices which connect to the proxy without being logged nor
232 forwarded to any server. Particularly useful on generic TCPv4 relays.
233
willy tarreau5dffb602005-12-18 01:15:23 +01002342005/06/21 : 1.2.5.2
235 - fixed build on PPC where chars are unsigned by default
236
willy tarreau08dedbe2005-12-18 01:13:48 +01002372005/05/02 : 1.2.5.1
238 - dirty hack to fix a bug introduced with epoll : if we close an FD and
239 immediately reassign it to another session through a connect(), the
240 Prev{Read,Write}Events are not updated, which causes trouble detecting
241 changes, thus leading to many timeouts at high loads.
242
willy tarreau64a3cc32005-12-18 01:13:11 +01002432005/04/30 : 1.2.5 (1.1.31)
244 - changed the runtime argument to disable epoll() to '-de'
245 - changed the runtime argument to disable poll() to '-dp'
246 - added global options 'nopoll' and 'noepoll' to do the same at the
247 configuration level.
248 - added a 'linux24e' target to the Makefile for Linux 2.4 systems patched to
249 support epoll().
250 - changed default FD_SETSIZE to 65536 on Solaris (default=1024)
251 - conditionned signals redirection to #ifdef DEBUG_MEMORY
252
willy tarreau1c2ad212005-12-18 01:11:29 +01002532005/04/26 : 1.2.5-pre4
254 - made epoll() support a compile-time option : ENABLE_EPOLL
255 - provided a very little libc replacement for a possibly missing epoll()
256 implementation which can be enabled by -DUSE_MY_EPOLL
257 - implemented the poll() poller, which can be enabled with -DENABLE_POLL.
258 The equivalent runtime argument becomes '-P'. A few tests show that it
259 performs like select() with many fds, but slightly slower (certainly
260 because of the higher amount of memory involved).
261 - separated the 3 polling methods and the tasks scheduler into 4 distinct
262 functions which makes the code a lot more modular.
263 - moved some event tables to private static declarations inside the poller
264 functions.
265 - the poller functions can now initialize themselves, run, and cleanup.
266 - changed the runtime argument to enable epoll() to '-E'.
267 - removed buggy epoll_ctl() code in the client_retnclose() function. This
268 function was never meant to remove anything.
269 - fixed a typo which caused glibc to yell about a double free on exit.
270 - removed error checking after epoll_ctl(DEL) because we can never know if
271 the fd is still active or already closed.
272 - added a few entries in the makefile
273
willy tarreauad90a0c2005-12-18 01:09:15 +01002742005/04/25 : 1.2.5-pre3
275 - experimental epoll() support (use temporary '-e' argument)
276
2772005/04/24 : 1.2.5-pre2
willy tarreauc1f47532005-12-18 01:08:26 +0100278 - implemented the HTTP 303 code for error redirection. This forces the
279 browser to fetch the given URI with a GET request. The new keyword for
280 this is 'errorloc303', and a new 'errorloc302' keyword has been created
281 to make them easily distinguishable.
282 - added more controls in the parser for valid use of '\x' sequence.
283 - few fixes from Alex & Klaus
284
willy tarreauad90a0c2005-12-18 01:09:15 +01002852005/02/17 : 1.2.5-pre1
willy tarreauc1f47532005-12-18 01:08:26 +0100286 - fixed a few errors in the documentation
287
2882005/02/13
289 - do not pre-initialize unused file-descriptors before select() anymore.
290
willy tarreau12350152005-12-18 01:03:27 +01002912005/01/22 : 1.2.4
292 - merged Alexander Lazic's and Klaus Wagner's work on application
293 cookie-based persistence. Since this is the first merge, this version is
294 not intended for general use and reports are more than welcome. Some
295 documentation is really needed though.
296
willy tarreau0174f312005-12-18 01:02:42 +01002972005/01/22 : 1.2.3 (1.1.30)
298 - add an architecture guide to the documentation
299 - released without any changes
300
3012004/12/26 : 1.2.3-pre1 (1.1.30-pre1)
302 - increased default BUFSIZE to 16 kB to accept max headers of 8 kB which is
303 compatible with Apache. This limit can be configured in the makefile now.
304 Thanks to Eric Fehr for the checks.
305 - added a per-server "source" option which now makes it possible to bind to
306 a different source for each (potentially identical) server.
307 - changed cookie-based server selection slightly to allow several servers to
308 share a same cookie, thus making it possible to associate backup servers to
309 live servers and ease soft-stop for maintenance periods. (Alexander Lazic)
310 - added the cookie 'prefix' mode which makes it possible to use persistence
311 with thin clients which support only one cookie. The server name is prefixed
312 before the application cookie, and restore back.
313 - fixed the order of servers within an instance to match documentation. Now
314 the servers are *really* used in the order of their declaration. This is
315 particularly important when multiple backup servers are in use.
316
willy tarreau4302f492005-12-18 01:00:37 +01003172004/10/18 : 1.2.2 (1.1.29)
318 - fixed a bug where a TCP connection would be logged twice if the 'logasap'
319 option was enabled without the 'tcplog' option.
320 - encode_string() would use hdr_encode_map instead of the map argument.
321
3222004/08/10 : (1.1.29-pre2)
323 - the logged request is now encoded with '#XX' for unprintable characters
324 - new keywords 'capture request header' and 'capture response header' enable
325 logging of arbitrary HTTP headers in requests and responses
326 - removed "-DSOLARIS" after replacing the last inet_aton() with inet_pton()
327
willy tarreau982249e2005-12-18 00:57:06 +01003282004/06/06 : 1.2.1 (1.1.28)
329 - added the '-V' command line option to verbosely report errors even though
330 the -q or 'quiet' options are specified. This is useful with '-c'.
331 - added a Red Hat init script and a .spec from Simon Matter <simon.matter@invoca.ch>
willy tarreau036e1ce2005-12-17 13:46:33 +0100332
willy tarreau982249e2005-12-18 00:57:06 +01003332004/06/05 :
334 - added the "logasap" option which produces a log without waiting for the data
335 to be transferred from the server to the client.
336 - added the "httpclose" option which removes any "connection:" header and adds
337 "Connection: close" in both direction.
willy tarreau97f58572005-12-18 00:53:44 +0100338 - added the 'checkcache' option which blocks cacheable responses containing
339 dangerous headers, such as 'set-cookie'.
willy tarreau982249e2005-12-18 00:57:06 +0100340 - added 'rspdeny' and 'rspideny' to block certain responses to avoid sensible
341 information leak from servers.
willy tarreau25c4ea52005-12-18 00:49:49 +0100342
3432004/04/18 :
willy tarreaudd07e972005-12-18 00:48:48 +0100344 - send an EMERG log when no server is available for a given proxy
345 - added the '-c' command line option to syntactically check the
346 configuration file without starting the service.
347
willy tarreau8a86dbf2005-12-18 00:45:59 +01003482003/11/09 : 1.2.0
349 - the same as 1.1.27 + IPv6 support on the client side
350
willy tarreaufe2c5c12005-12-17 14:14:34 +01003512003/10/27 : 1.1.27
352 - the configurable HTTP health check introduced in 1.1.23 revealed a shameful
353 bug : the code still assumed that HTTP requests were the same size as the
354 original ones (22 bytes), and failed if they were not.
355 - added support for pidfiles.
356
willy tarreauc58fc692005-12-17 14:13:08 +01003572003/10/22 : 1.1.26
358 - the fix introduced in 1.1.25 for client timeouts while waiting for servers
359 broke almost all compatibility with POST requests, because the proxy
360 stopped to read anything from the client as soon as it got all of its
361 headers.
362
willy tarreauc1cae632005-12-17 14:12:23 +01003632003/10/15 : 1.1.25
364 - added the 'tcplog' option, which provides enhanced, HTTP-like logs for
365 generic TCP proxies, or lighter logs for HTTP proxies.
366 - fixed a time-out condition wrongly reported as client time-out in data
367 phase if the client timeout was lower than the connect timeout times the
368 number of retries.
369
willy tarreau197e8ec2005-12-17 14:10:59 +01003702003/09/21 : 1.1.24
371 - if a client sent a full request then shut its write connection down, then
372 the request was aborted. This case was detected only when using haproxy
373 both as health-check client and as a server.
374 - if 'option httpchk' is used in a 'health' mode server, then responses will
375 change from 'OK' to 'HTTP/1.0 200 OK'.
376 - fixed a Linux-only bug in case of HTTP server health-checks, where a single
377 server response followed by a close could be ignored, and the server seen
378 as failed.
379
willy tarreaueedaa9f2005-12-17 14:08:03 +01003802003/09/19 : 1.1.23
381 - fixed a stupid bug introduced in 1.1.22 which caused second and subsequent
382 'default' sections to keep previous parameters, and not initialize logs
383 correctly.
384 - fixed a second stupid bug introduced in 1.1.22 which caused configurations
385 relying on 'dispatch' mode to segfault at the first connection.
386 - 'option httpchk' now supports method, HTTP version and a few headers.
387 - now, 'option httpchk', 'cookie' and 'capture' can be specified in
388 'defaults' section
389
3902003/09/10 : 1.1.22
willy tarreaua41a8b42005-12-17 14:02:24 +0100391 - 'listen' now supports optionnal address:port-range lists
392 - 'bind' introduced to add new listen addresses
393 - fixed a bug which caused a session to be kept established on a server till
394 it timed out if the client closed during the DATA phase.
395 - the port part of each server address can now be empty to make the proxy
396 connect to the server on the same port it was connected to, be an absolute
397 unsigned number to reflect a single port (as in older versions), or an
398 explicitly signed number (+N/-N) to indicate that this offset must be
399 applied to the port the proxy was connected to, when connecting to the
400 server.
401 - the 'port' server option allows the user to specify a different
402 health-check port than the service one. It is mandatory when only relative
403 ports have been specified and check is required. By default, the checks are
404 sent to the service port.
405 - new 'defaults' section which is rather similar to 'listen' except that all
406 values are only used as default values for future 'listen' sections, until
407 a new 'defaults' resets them. At the moment, server options, regexes,
408 cookie names and captures cannot be set in the 'defaults' section.
409
willy tarreau2f6ba652005-12-17 13:57:42 +01004102003/05/06 : 1.1.21
411 - changed the debug output format so that it now includes the session unique
412 ID followed by the instance name at the beginning of each line.
413 - in debug mode, accept now shows the client's IP and port.
414 - added one 3 small debugging scripts to search and pretty print debug output
415 - changed the default health check request to "OPTIONS /" instead of
416 "OPTIONS *" since not all servers implement the later one.
417 - "option httpchk" now accepts an optional parameter allowing the user to
418 specify and URI other than '/' during health-checks.
419
willy tarreaub1ff9db2005-12-17 13:51:03 +01004202003/04/21 : 1.1.20
421 - fixed two problems with time-outs, one where a server would be logged as
422 timed out during transfer that take longer to complete than the fixed
423 time-out, and one where clients were logged as timed-out during the data
424 phase because they didn't have anything to send. This sometimes caused
425 slow client connections to close too early while in fact there was no
426 problem. The proper fix would be to have a per-fd time-out with
427 conditions depending on the state of the HTTP FSM.
428
willy tarreau906b2682005-12-17 13:49:52 +01004292003/04/16 : 1.1.19
430 - haproxy was NOT RFC compliant because it was case-sensitive on HTTP
431 "Cookie:" and "Set-Cookie:" headers. This caused JVM 1.4 to fail on
432 cookie persistence because it uses "cookie:". Two memcmp() have been
433 replaced with strncasecmp().
434
willy tarreau036e1ce2005-12-17 13:46:33 +01004352003/04/02 : 1.1.18
436 - Haproxy can be compiled with PCRE regex instead of libc regex, by setting
437 REGEX=pcre on the make command line.
438 - HTTP health-checks now use "OPTIONS *" instead of "OPTIONS /".
439 - when explicit source address binding is required, it is now also used for
440 health-checks.
441 - added 'reqpass' and 'reqipass' to allow certain headers but not the request
442 itself.
443 - factored several strings to reduce binary size by about 2 kB.
444 - replaced setreuid() and setregid() with more standard setuid() and setgid().
445 - added 4 status flags to the log line indicating who ended the connection
446 first, the sessions state, the validity of the cookie, and action taken on
447 the set-cookie header.
448
4492002/10/18 : 1.1.17
450 - add the notion of "backup" servers, which are used only when all other
451 servers are down.
452 - make Set-Cookie return "" instead of "(null)" when the server has no
453 cookie assigned (useful for backup servers).
454 - "log" now supports an optionnal level name (info, notice, err ...) above
455 which nothing is sent.
456 - replaced some strncmp() with memcmp() for better efficiency.
457 - added "capture cookie" option which logs client and/or server cookies
458 - cleaned up/down messages and dump servers states upon SIGHUP
459 - added a redirection feature for errors : "errorloc <errnum> <url>"
460 - now we won't insist on connecting to a dead server, even with a cookie,
461 unless option "persist" is specified.
462 - added HTTP/408 response for client request time-out and HTTP/50[234] for
463 server reply time-out or errors.
464
4652002/09/01 : 1.1.16
466 - implement HTTP health checks when option "httpchk" is specified.
467
4682002/08/07 : 1.1.15
469 - replaced setpgid()/setpgrp() with setsid() for better portability, because
470 setpgrp() doesn't have the same meaning under Solaris, Linux, and OpenBSD.
471
4722002/07/20 : 1.1.14
473 - added "postonly" cookie mode
474
4752002/07/15 : 1.1.13
476 - tv_diff used inverted parameters which led to negative times !
477
4782002/07/13 : 1.1.12
479 - fixed stats monitoring, and optimized some tv_* for most common cases.
480 - replaced temporary 'newhdr' with 'trash' to reduce stack size
481 - made HTTP errors more HTML-fiendly.
482 - renamed strlcpy() to strlcpy2() because of a slightly difference between
483 their behaviour (return value), to avoid confusion.
484 - restricted HTTP messages to HTTP proxies only
485 - added a 502 message when the connection has been refused by the server,
486 to prevent clients from believing this is a zero-byte HTTP 0.9 reply.
487 - changed 'Cache-control:' from 'no-cache="set-cookie"' to 'private' when
488 inserting a cookie, because some caches (apache) don't understand it.
489 - fixed processing of server headers when client is in SHUTR state
490
4912002/07/04 :
492 - automatically close fd's 0,1 and 2 when going daemon ; setpgrp() after
493 setpgid()
494
4952002/06/04 : 1.1.11
496 - fixed multi-cookie handling in client request to allow clean deletion
497 in insert+indirect mode. Now, only the server cookie is deleted and not
willy tarreau906b2682005-12-17 13:49:52 +0100498 all the header. Should now be compliant to RFC2965.
willy tarreau036e1ce2005-12-17 13:46:33 +0100499 - added a "nocache" option to "cookie" to specify that we explicitly want
500 to add a "cache-control" header when we add a cookie.
501 It is also possible to add an "Expires: <old-date>" to keep compatibility
502 with old/broken caches.
503
5042002/05/10 : 1.1.10
505 - if a cookie is used in insert+indirect mode, it's desirable that the
506 the servers don't see it. It was not possible to remove it correctly
507 with regexps, so now it's removed automatically.
508
5092002/04/19 : 1.1.9
510 - don't use snprintf()'s return value as an end of message since it may
511 be larger. This caused bus errors and segfaults in internal libc's
512 getenv() during localtime() in send_log().
513 - removed dead insecure send_syslog() function and all references to it.
514 - fixed warnings on Solaris due to buggy implementation of isXXXX().
515
5162002/04/18 : 1.1.8
517 - option "dontlognull"
518 - fixed "double space" bug in config parser
519 - fixed an uninitialized server field in case of dispatch
520 with no existing server which could cause a segfault during
521 logging.
522 - the pid logged was always the father's, which was wrong for daemons.
523 - fixed wrong level "LOG_INFO" for message "proxy started".
524
5252002/04/13 :
526 - http logging is now complete :
527 - ip:port, date, proxy, server
528 - req_time, conn_time, hdr_time, tot_time
529 - status, size, request
530 - source address
531
5322002/04/12 : 1.1.7
533 - added option forwardfor
534 - added reqirep, reqidel, reqiallow, reqideny, rspirep, rspidel
535 - added "log global" in "listen" section.
536
5372002/04/09 :
538 - added a new "global" section :
539 - logs
540 - debug, quiet, daemon modes
541 - uid, gid, chroot, nbproc, maxconn
542
5432002/04/08 : 1.1.6
544 - regex are now chained and not limited anymore.
545 - unavailable server now returns HTTP/502.
546 - increased per-line args limit to 40
547 - added reqallow/reqdeny to block some request on matches
548 - added HTTP 400/403 responses
549
5502002/04/03 : 1.1.5
551 - connection logging displayed incorrect source address.
552 - added proxy start/stop and server up/down log events.
553 - replaced log message short buffers with larger trash.
554 - enlarged buffer to 8 kB and replace buffer to 4 kB.
555
5562002/03/25 : 1.1.4
557 - made rise/fall/interval time configurable
558
5592002/03/22 : 1.1.3
560 - fixed a bug : cr_expire and cw_expire were inverted in CL_STSHUT[WR]
561 which could lead to loops.
562
5632002/03/21 : 1.1.2
564 - fixed a bug in buffer management where we could have a loop
565 between event_read() and process_{cli|srv} if R==BUFSIZE-MAXREWRITE.
566 => implemented an adjustable buffer limit.
567 - fixed a bug : expiration of tasks in wait queue timeout is used again,
568 and running tasks are skipped.
569 - added some debug lines for accept events.
570 - send warnings for servers up/down.
571
5722002/03/12 : 1.1.1
573 - fixed a bug in total failure handling
574 - fixed a bug in timestamp comparison within same second (tv_cmp_ms)
575
5762002/03/10 : 1.1.0
577 - fixed a few timeout bugs
578 - rearranged the task scheduler subsystem to improve performance,
579 add new tasks, and make it easier to later port to librt ;
580 - allow multiple accept() for one select() wake up ;
581 - implemented internal load balancing with basic health-check ;
582 - cookie insertion and header add/replace/delete, with better strings
583 support.
584
5852002/03/08
586 - reworked buffer handling to fix a few rewrite bugs, and
587 improve overall performance.
588 - implement the "purge" option to delete server cookies in direct mode.
589
5902002/03/07
591 - fixed some error cases where the maxfd was not decreased.
592
5932002/02/26
594 - now supports transparent proxying, at least on linux 2.4.
595
5962002/02/12
597 - soft stop works again (fixed select timeout computation).
598 - it seems that TCP proxies sometimes cannot timeout.
599 - added a "quiet" mode.
600 - enforce file descriptor limitation on socket() and accept().
601
6022001/12/30 : release of version 1.0.2 : fixed a bug in header processing
6032001/12/19 : release of version 1.0.1 : no MSG_NOSIGNAL on solaris
6042001/12/16 : release of version 1.0.0.
6052001/12/16 : added syslog capability for each accepted connection.
6062001/11/19 : corrected premature end of files and occasional SIGPIPE.
6072001/10/31 : added health-check type servers (mode health) which replies OK then closes.
6082001/10/30 : added the ability to support standard TCP proxies and HTTP proxies
609 with or without cookies (use keyword http for this).
6102001/09/01 : added client/server header replacing with regexps.
611 eg:
612 cliexp ^(Host:\ [^:]*).* Host:\ \1:80
613 srvexp ^Server:\ .* Server:\ Apache
6142000/11/29 : first fully working release with complete FSMs and timeouts.
6152000/11/28 : major rewrite
6162000/11/26 : first write