blob: 0c2140aac15b68c98b92d1a706c378ad94ac857e [file] [log] [blame]
willy tarreau036e1ce2005-12-17 13:46:33 +01001ChangeLog :
2===========
willy tarreau982249e2005-12-18 00:57:06 +010032004/06/06 : 1.2.1 (1.1.28)
4 - added the '-V' command line option to verbosely report errors even though
5 the -q or 'quiet' options are specified. This is useful with '-c'.
6 - added a Red Hat init script and a .spec from Simon Matter <simon.matter@invoca.ch>
willy tarreau036e1ce2005-12-17 13:46:33 +01007
willy tarreau982249e2005-12-18 00:57:06 +010082004/06/05 :
9 - added the "logasap" option which produces a log without waiting for the data
10 to be transferred from the server to the client.
11 - added the "httpclose" option which removes any "connection:" header and adds
12 "Connection: close" in both direction.
willy tarreau97f58572005-12-18 00:53:44 +010013 - added the 'checkcache' option which blocks cacheable responses containing
14 dangerous headers, such as 'set-cookie'.
willy tarreau982249e2005-12-18 00:57:06 +010015 - added 'rspdeny' and 'rspideny' to block certain responses to avoid sensible
16 information leak from servers.
willy tarreau25c4ea52005-12-18 00:49:49 +010017
182004/04/18 :
willy tarreaudd07e972005-12-18 00:48:48 +010019 - send an EMERG log when no server is available for a given proxy
20 - added the '-c' command line option to syntactically check the
21 configuration file without starting the service.
22
willy tarreau8a86dbf2005-12-18 00:45:59 +0100232003/11/09 : 1.2.0
24 - the same as 1.1.27 + IPv6 support on the client side
25
willy tarreaufe2c5c12005-12-17 14:14:34 +0100262003/10/27 : 1.1.27
27 - the configurable HTTP health check introduced in 1.1.23 revealed a shameful
28 bug : the code still assumed that HTTP requests were the same size as the
29 original ones (22 bytes), and failed if they were not.
30 - added support for pidfiles.
31
willy tarreauc58fc692005-12-17 14:13:08 +0100322003/10/22 : 1.1.26
33 - the fix introduced in 1.1.25 for client timeouts while waiting for servers
34 broke almost all compatibility with POST requests, because the proxy
35 stopped to read anything from the client as soon as it got all of its
36 headers.
37
willy tarreauc1cae632005-12-17 14:12:23 +0100382003/10/15 : 1.1.25
39 - added the 'tcplog' option, which provides enhanced, HTTP-like logs for
40 generic TCP proxies, or lighter logs for HTTP proxies.
41 - fixed a time-out condition wrongly reported as client time-out in data
42 phase if the client timeout was lower than the connect timeout times the
43 number of retries.
44
willy tarreau197e8ec2005-12-17 14:10:59 +0100452003/09/21 : 1.1.24
46 - if a client sent a full request then shut its write connection down, then
47 the request was aborted. This case was detected only when using haproxy
48 both as health-check client and as a server.
49 - if 'option httpchk' is used in a 'health' mode server, then responses will
50 change from 'OK' to 'HTTP/1.0 200 OK'.
51 - fixed a Linux-only bug in case of HTTP server health-checks, where a single
52 server response followed by a close could be ignored, and the server seen
53 as failed.
54
willy tarreaueedaa9f2005-12-17 14:08:03 +0100552003/09/19 : 1.1.23
56 - fixed a stupid bug introduced in 1.1.22 which caused second and subsequent
57 'default' sections to keep previous parameters, and not initialize logs
58 correctly.
59 - fixed a second stupid bug introduced in 1.1.22 which caused configurations
60 relying on 'dispatch' mode to segfault at the first connection.
61 - 'option httpchk' now supports method, HTTP version and a few headers.
62 - now, 'option httpchk', 'cookie' and 'capture' can be specified in
63 'defaults' section
64
652003/09/10 : 1.1.22
willy tarreaua41a8b42005-12-17 14:02:24 +010066 - 'listen' now supports optionnal address:port-range lists
67 - 'bind' introduced to add new listen addresses
68 - fixed a bug which caused a session to be kept established on a server till
69 it timed out if the client closed during the DATA phase.
70 - the port part of each server address can now be empty to make the proxy
71 connect to the server on the same port it was connected to, be an absolute
72 unsigned number to reflect a single port (as in older versions), or an
73 explicitly signed number (+N/-N) to indicate that this offset must be
74 applied to the port the proxy was connected to, when connecting to the
75 server.
76 - the 'port' server option allows the user to specify a different
77 health-check port than the service one. It is mandatory when only relative
78 ports have been specified and check is required. By default, the checks are
79 sent to the service port.
80 - new 'defaults' section which is rather similar to 'listen' except that all
81 values are only used as default values for future 'listen' sections, until
82 a new 'defaults' resets them. At the moment, server options, regexes,
83 cookie names and captures cannot be set in the 'defaults' section.
84
willy tarreau2f6ba652005-12-17 13:57:42 +0100852003/05/06 : 1.1.21
86 - changed the debug output format so that it now includes the session unique
87 ID followed by the instance name at the beginning of each line.
88 - in debug mode, accept now shows the client's IP and port.
89 - added one 3 small debugging scripts to search and pretty print debug output
90 - changed the default health check request to "OPTIONS /" instead of
91 "OPTIONS *" since not all servers implement the later one.
92 - "option httpchk" now accepts an optional parameter allowing the user to
93 specify and URI other than '/' during health-checks.
94
willy tarreaub1ff9db2005-12-17 13:51:03 +0100952003/04/21 : 1.1.20
96 - fixed two problems with time-outs, one where a server would be logged as
97 timed out during transfer that take longer to complete than the fixed
98 time-out, and one where clients were logged as timed-out during the data
99 phase because they didn't have anything to send. This sometimes caused
100 slow client connections to close too early while in fact there was no
101 problem. The proper fix would be to have a per-fd time-out with
102 conditions depending on the state of the HTTP FSM.
103
willy tarreau906b2682005-12-17 13:49:52 +01001042003/04/16 : 1.1.19
105 - haproxy was NOT RFC compliant because it was case-sensitive on HTTP
106 "Cookie:" and "Set-Cookie:" headers. This caused JVM 1.4 to fail on
107 cookie persistence because it uses "cookie:". Two memcmp() have been
108 replaced with strncasecmp().
109
willy tarreau036e1ce2005-12-17 13:46:33 +01001102003/04/02 : 1.1.18
111 - Haproxy can be compiled with PCRE regex instead of libc regex, by setting
112 REGEX=pcre on the make command line.
113 - HTTP health-checks now use "OPTIONS *" instead of "OPTIONS /".
114 - when explicit source address binding is required, it is now also used for
115 health-checks.
116 - added 'reqpass' and 'reqipass' to allow certain headers but not the request
117 itself.
118 - factored several strings to reduce binary size by about 2 kB.
119 - replaced setreuid() and setregid() with more standard setuid() and setgid().
120 - added 4 status flags to the log line indicating who ended the connection
121 first, the sessions state, the validity of the cookie, and action taken on
122 the set-cookie header.
123
1242002/10/18 : 1.1.17
125 - add the notion of "backup" servers, which are used only when all other
126 servers are down.
127 - make Set-Cookie return "" instead of "(null)" when the server has no
128 cookie assigned (useful for backup servers).
129 - "log" now supports an optionnal level name (info, notice, err ...) above
130 which nothing is sent.
131 - replaced some strncmp() with memcmp() for better efficiency.
132 - added "capture cookie" option which logs client and/or server cookies
133 - cleaned up/down messages and dump servers states upon SIGHUP
134 - added a redirection feature for errors : "errorloc <errnum> <url>"
135 - now we won't insist on connecting to a dead server, even with a cookie,
136 unless option "persist" is specified.
137 - added HTTP/408 response for client request time-out and HTTP/50[234] for
138 server reply time-out or errors.
139
1402002/09/01 : 1.1.16
141 - implement HTTP health checks when option "httpchk" is specified.
142
1432002/08/07 : 1.1.15
144 - replaced setpgid()/setpgrp() with setsid() for better portability, because
145 setpgrp() doesn't have the same meaning under Solaris, Linux, and OpenBSD.
146
1472002/07/20 : 1.1.14
148 - added "postonly" cookie mode
149
1502002/07/15 : 1.1.13
151 - tv_diff used inverted parameters which led to negative times !
152
1532002/07/13 : 1.1.12
154 - fixed stats monitoring, and optimized some tv_* for most common cases.
155 - replaced temporary 'newhdr' with 'trash' to reduce stack size
156 - made HTTP errors more HTML-fiendly.
157 - renamed strlcpy() to strlcpy2() because of a slightly difference between
158 their behaviour (return value), to avoid confusion.
159 - restricted HTTP messages to HTTP proxies only
160 - added a 502 message when the connection has been refused by the server,
161 to prevent clients from believing this is a zero-byte HTTP 0.9 reply.
162 - changed 'Cache-control:' from 'no-cache="set-cookie"' to 'private' when
163 inserting a cookie, because some caches (apache) don't understand it.
164 - fixed processing of server headers when client is in SHUTR state
165
1662002/07/04 :
167 - automatically close fd's 0,1 and 2 when going daemon ; setpgrp() after
168 setpgid()
169
1702002/06/04 : 1.1.11
171 - fixed multi-cookie handling in client request to allow clean deletion
172 in insert+indirect mode. Now, only the server cookie is deleted and not
willy tarreau906b2682005-12-17 13:49:52 +0100173 all the header. Should now be compliant to RFC2965.
willy tarreau036e1ce2005-12-17 13:46:33 +0100174 - added a "nocache" option to "cookie" to specify that we explicitly want
175 to add a "cache-control" header when we add a cookie.
176 It is also possible to add an "Expires: <old-date>" to keep compatibility
177 with old/broken caches.
178
1792002/05/10 : 1.1.10
180 - if a cookie is used in insert+indirect mode, it's desirable that the
181 the servers don't see it. It was not possible to remove it correctly
182 with regexps, so now it's removed automatically.
183
1842002/04/19 : 1.1.9
185 - don't use snprintf()'s return value as an end of message since it may
186 be larger. This caused bus errors and segfaults in internal libc's
187 getenv() during localtime() in send_log().
188 - removed dead insecure send_syslog() function and all references to it.
189 - fixed warnings on Solaris due to buggy implementation of isXXXX().
190
1912002/04/18 : 1.1.8
192 - option "dontlognull"
193 - fixed "double space" bug in config parser
194 - fixed an uninitialized server field in case of dispatch
195 with no existing server which could cause a segfault during
196 logging.
197 - the pid logged was always the father's, which was wrong for daemons.
198 - fixed wrong level "LOG_INFO" for message "proxy started".
199
2002002/04/13 :
201 - http logging is now complete :
202 - ip:port, date, proxy, server
203 - req_time, conn_time, hdr_time, tot_time
204 - status, size, request
205 - source address
206
2072002/04/12 : 1.1.7
208 - added option forwardfor
209 - added reqirep, reqidel, reqiallow, reqideny, rspirep, rspidel
210 - added "log global" in "listen" section.
211
2122002/04/09 :
213 - added a new "global" section :
214 - logs
215 - debug, quiet, daemon modes
216 - uid, gid, chroot, nbproc, maxconn
217
2182002/04/08 : 1.1.6
219 - regex are now chained and not limited anymore.
220 - unavailable server now returns HTTP/502.
221 - increased per-line args limit to 40
222 - added reqallow/reqdeny to block some request on matches
223 - added HTTP 400/403 responses
224
2252002/04/03 : 1.1.5
226 - connection logging displayed incorrect source address.
227 - added proxy start/stop and server up/down log events.
228 - replaced log message short buffers with larger trash.
229 - enlarged buffer to 8 kB and replace buffer to 4 kB.
230
2312002/03/25 : 1.1.4
232 - made rise/fall/interval time configurable
233
2342002/03/22 : 1.1.3
235 - fixed a bug : cr_expire and cw_expire were inverted in CL_STSHUT[WR]
236 which could lead to loops.
237
2382002/03/21 : 1.1.2
239 - fixed a bug in buffer management where we could have a loop
240 between event_read() and process_{cli|srv} if R==BUFSIZE-MAXREWRITE.
241 => implemented an adjustable buffer limit.
242 - fixed a bug : expiration of tasks in wait queue timeout is used again,
243 and running tasks are skipped.
244 - added some debug lines for accept events.
245 - send warnings for servers up/down.
246
2472002/03/12 : 1.1.1
248 - fixed a bug in total failure handling
249 - fixed a bug in timestamp comparison within same second (tv_cmp_ms)
250
2512002/03/10 : 1.1.0
252 - fixed a few timeout bugs
253 - rearranged the task scheduler subsystem to improve performance,
254 add new tasks, and make it easier to later port to librt ;
255 - allow multiple accept() for one select() wake up ;
256 - implemented internal load balancing with basic health-check ;
257 - cookie insertion and header add/replace/delete, with better strings
258 support.
259
2602002/03/08
261 - reworked buffer handling to fix a few rewrite bugs, and
262 improve overall performance.
263 - implement the "purge" option to delete server cookies in direct mode.
264
2652002/03/07
266 - fixed some error cases where the maxfd was not decreased.
267
2682002/02/26
269 - now supports transparent proxying, at least on linux 2.4.
270
2712002/02/12
272 - soft stop works again (fixed select timeout computation).
273 - it seems that TCP proxies sometimes cannot timeout.
274 - added a "quiet" mode.
275 - enforce file descriptor limitation on socket() and accept().
276
2772001/12/30 : release of version 1.0.2 : fixed a bug in header processing
2782001/12/19 : release of version 1.0.1 : no MSG_NOSIGNAL on solaris
2792001/12/16 : release of version 1.0.0.
2802001/12/16 : added syslog capability for each accepted connection.
2812001/11/19 : corrected premature end of files and occasional SIGPIPE.
2822001/10/31 : added health-check type servers (mode health) which replies OK then closes.
2832001/10/30 : added the ability to support standard TCP proxies and HTTP proxies
284 with or without cookies (use keyword http for this).
2852001/09/01 : added client/server header replacing with regexps.
286 eg:
287 cliexp ^(Host:\ [^:]*).* Host:\ \1:80
288 srvexp ^Server:\ .* Server:\ Apache
2892000/11/29 : first fully working release with complete FSMs and timeouts.
2902000/11/28 : major rewrite
2912000/11/26 : first write