willy tarreau | 036e1ce | 2005-12-17 13:46:33 +0100 | [diff] [blame] | 1 | ChangeLog : |
| 2 | =========== |
willy tarreau | 4302f49 | 2005-12-18 01:00:37 +0100 | [diff] [blame] | 3 | |
willy tarreau | ad90a0c | 2005-12-18 01:09:15 +0100 | [diff] [blame^] | 4 | 2005/04/25 : 1.2.5-pre3 |
| 5 | - experimental epoll() support (use temporary '-e' argument) |
| 6 | |
| 7 | 2005/04/24 : 1.2.5-pre2 |
willy tarreau | c1f4753 | 2005-12-18 01:08:26 +0100 | [diff] [blame] | 8 | - implemented the HTTP 303 code for error redirection. This forces the |
| 9 | browser to fetch the given URI with a GET request. The new keyword for |
| 10 | this is 'errorloc303', and a new 'errorloc302' keyword has been created |
| 11 | to make them easily distinguishable. |
| 12 | - added more controls in the parser for valid use of '\x' sequence. |
| 13 | - few fixes from Alex & Klaus |
| 14 | |
willy tarreau | ad90a0c | 2005-12-18 01:09:15 +0100 | [diff] [blame^] | 15 | 2005/02/17 : 1.2.5-pre1 |
willy tarreau | c1f4753 | 2005-12-18 01:08:26 +0100 | [diff] [blame] | 16 | - fixed a few errors in the documentation |
| 17 | |
| 18 | 2005/02/13 |
| 19 | - do not pre-initialize unused file-descriptors before select() anymore. |
| 20 | |
willy tarreau | 1235015 | 2005-12-18 01:03:27 +0100 | [diff] [blame] | 21 | 2005/01/22 : 1.2.4 |
| 22 | - merged Alexander Lazic's and Klaus Wagner's work on application |
| 23 | cookie-based persistence. Since this is the first merge, this version is |
| 24 | not intended for general use and reports are more than welcome. Some |
| 25 | documentation is really needed though. |
| 26 | |
willy tarreau | 0174f31 | 2005-12-18 01:02:42 +0100 | [diff] [blame] | 27 | 2005/01/22 : 1.2.3 (1.1.30) |
| 28 | - add an architecture guide to the documentation |
| 29 | - released without any changes |
| 30 | |
| 31 | 2004/12/26 : 1.2.3-pre1 (1.1.30-pre1) |
| 32 | - increased default BUFSIZE to 16 kB to accept max headers of 8 kB which is |
| 33 | compatible with Apache. This limit can be configured in the makefile now. |
| 34 | Thanks to Eric Fehr for the checks. |
| 35 | - added a per-server "source" option which now makes it possible to bind to |
| 36 | a different source for each (potentially identical) server. |
| 37 | - changed cookie-based server selection slightly to allow several servers to |
| 38 | share a same cookie, thus making it possible to associate backup servers to |
| 39 | live servers and ease soft-stop for maintenance periods. (Alexander Lazic) |
| 40 | - added the cookie 'prefix' mode which makes it possible to use persistence |
| 41 | with thin clients which support only one cookie. The server name is prefixed |
| 42 | before the application cookie, and restore back. |
| 43 | - fixed the order of servers within an instance to match documentation. Now |
| 44 | the servers are *really* used in the order of their declaration. This is |
| 45 | particularly important when multiple backup servers are in use. |
| 46 | |
willy tarreau | 4302f49 | 2005-12-18 01:00:37 +0100 | [diff] [blame] | 47 | 2004/10/18 : 1.2.2 (1.1.29) |
| 48 | - fixed a bug where a TCP connection would be logged twice if the 'logasap' |
| 49 | option was enabled without the 'tcplog' option. |
| 50 | - encode_string() would use hdr_encode_map instead of the map argument. |
| 51 | |
| 52 | 2004/08/10 : (1.1.29-pre2) |
| 53 | - the logged request is now encoded with '#XX' for unprintable characters |
| 54 | - new keywords 'capture request header' and 'capture response header' enable |
| 55 | logging of arbitrary HTTP headers in requests and responses |
| 56 | - removed "-DSOLARIS" after replacing the last inet_aton() with inet_pton() |
| 57 | |
willy tarreau | 982249e | 2005-12-18 00:57:06 +0100 | [diff] [blame] | 58 | 2004/06/06 : 1.2.1 (1.1.28) |
| 59 | - added the '-V' command line option to verbosely report errors even though |
| 60 | the -q or 'quiet' options are specified. This is useful with '-c'. |
| 61 | - added a Red Hat init script and a .spec from Simon Matter <simon.matter@invoca.ch> |
willy tarreau | 036e1ce | 2005-12-17 13:46:33 +0100 | [diff] [blame] | 62 | |
willy tarreau | 982249e | 2005-12-18 00:57:06 +0100 | [diff] [blame] | 63 | 2004/06/05 : |
| 64 | - added the "logasap" option which produces a log without waiting for the data |
| 65 | to be transferred from the server to the client. |
| 66 | - added the "httpclose" option which removes any "connection:" header and adds |
| 67 | "Connection: close" in both direction. |
willy tarreau | 97f5857 | 2005-12-18 00:53:44 +0100 | [diff] [blame] | 68 | - added the 'checkcache' option which blocks cacheable responses containing |
| 69 | dangerous headers, such as 'set-cookie'. |
willy tarreau | 982249e | 2005-12-18 00:57:06 +0100 | [diff] [blame] | 70 | - added 'rspdeny' and 'rspideny' to block certain responses to avoid sensible |
| 71 | information leak from servers. |
willy tarreau | 25c4ea5 | 2005-12-18 00:49:49 +0100 | [diff] [blame] | 72 | |
| 73 | 2004/04/18 : |
willy tarreau | dd07e97 | 2005-12-18 00:48:48 +0100 | [diff] [blame] | 74 | - send an EMERG log when no server is available for a given proxy |
| 75 | - added the '-c' command line option to syntactically check the |
| 76 | configuration file without starting the service. |
| 77 | |
willy tarreau | 8a86dbf | 2005-12-18 00:45:59 +0100 | [diff] [blame] | 78 | 2003/11/09 : 1.2.0 |
| 79 | - the same as 1.1.27 + IPv6 support on the client side |
| 80 | |
willy tarreau | fe2c5c1 | 2005-12-17 14:14:34 +0100 | [diff] [blame] | 81 | 2003/10/27 : 1.1.27 |
| 82 | - the configurable HTTP health check introduced in 1.1.23 revealed a shameful |
| 83 | bug : the code still assumed that HTTP requests were the same size as the |
| 84 | original ones (22 bytes), and failed if they were not. |
| 85 | - added support for pidfiles. |
| 86 | |
willy tarreau | c58fc69 | 2005-12-17 14:13:08 +0100 | [diff] [blame] | 87 | 2003/10/22 : 1.1.26 |
| 88 | - the fix introduced in 1.1.25 for client timeouts while waiting for servers |
| 89 | broke almost all compatibility with POST requests, because the proxy |
| 90 | stopped to read anything from the client as soon as it got all of its |
| 91 | headers. |
| 92 | |
willy tarreau | c1cae63 | 2005-12-17 14:12:23 +0100 | [diff] [blame] | 93 | 2003/10/15 : 1.1.25 |
| 94 | - added the 'tcplog' option, which provides enhanced, HTTP-like logs for |
| 95 | generic TCP proxies, or lighter logs for HTTP proxies. |
| 96 | - fixed a time-out condition wrongly reported as client time-out in data |
| 97 | phase if the client timeout was lower than the connect timeout times the |
| 98 | number of retries. |
| 99 | |
willy tarreau | 197e8ec | 2005-12-17 14:10:59 +0100 | [diff] [blame] | 100 | 2003/09/21 : 1.1.24 |
| 101 | - if a client sent a full request then shut its write connection down, then |
| 102 | the request was aborted. This case was detected only when using haproxy |
| 103 | both as health-check client and as a server. |
| 104 | - if 'option httpchk' is used in a 'health' mode server, then responses will |
| 105 | change from 'OK' to 'HTTP/1.0 200 OK'. |
| 106 | - fixed a Linux-only bug in case of HTTP server health-checks, where a single |
| 107 | server response followed by a close could be ignored, and the server seen |
| 108 | as failed. |
| 109 | |
willy tarreau | eedaa9f | 2005-12-17 14:08:03 +0100 | [diff] [blame] | 110 | 2003/09/19 : 1.1.23 |
| 111 | - fixed a stupid bug introduced in 1.1.22 which caused second and subsequent |
| 112 | 'default' sections to keep previous parameters, and not initialize logs |
| 113 | correctly. |
| 114 | - fixed a second stupid bug introduced in 1.1.22 which caused configurations |
| 115 | relying on 'dispatch' mode to segfault at the first connection. |
| 116 | - 'option httpchk' now supports method, HTTP version and a few headers. |
| 117 | - now, 'option httpchk', 'cookie' and 'capture' can be specified in |
| 118 | 'defaults' section |
| 119 | |
| 120 | 2003/09/10 : 1.1.22 |
willy tarreau | a41a8b4 | 2005-12-17 14:02:24 +0100 | [diff] [blame] | 121 | - 'listen' now supports optionnal address:port-range lists |
| 122 | - 'bind' introduced to add new listen addresses |
| 123 | - fixed a bug which caused a session to be kept established on a server till |
| 124 | it timed out if the client closed during the DATA phase. |
| 125 | - the port part of each server address can now be empty to make the proxy |
| 126 | connect to the server on the same port it was connected to, be an absolute |
| 127 | unsigned number to reflect a single port (as in older versions), or an |
| 128 | explicitly signed number (+N/-N) to indicate that this offset must be |
| 129 | applied to the port the proxy was connected to, when connecting to the |
| 130 | server. |
| 131 | - the 'port' server option allows the user to specify a different |
| 132 | health-check port than the service one. It is mandatory when only relative |
| 133 | ports have been specified and check is required. By default, the checks are |
| 134 | sent to the service port. |
| 135 | - new 'defaults' section which is rather similar to 'listen' except that all |
| 136 | values are only used as default values for future 'listen' sections, until |
| 137 | a new 'defaults' resets them. At the moment, server options, regexes, |
| 138 | cookie names and captures cannot be set in the 'defaults' section. |
| 139 | |
willy tarreau | 2f6ba65 | 2005-12-17 13:57:42 +0100 | [diff] [blame] | 140 | 2003/05/06 : 1.1.21 |
| 141 | - changed the debug output format so that it now includes the session unique |
| 142 | ID followed by the instance name at the beginning of each line. |
| 143 | - in debug mode, accept now shows the client's IP and port. |
| 144 | - added one 3 small debugging scripts to search and pretty print debug output |
| 145 | - changed the default health check request to "OPTIONS /" instead of |
| 146 | "OPTIONS *" since not all servers implement the later one. |
| 147 | - "option httpchk" now accepts an optional parameter allowing the user to |
| 148 | specify and URI other than '/' during health-checks. |
| 149 | |
willy tarreau | b1ff9db | 2005-12-17 13:51:03 +0100 | [diff] [blame] | 150 | 2003/04/21 : 1.1.20 |
| 151 | - fixed two problems with time-outs, one where a server would be logged as |
| 152 | timed out during transfer that take longer to complete than the fixed |
| 153 | time-out, and one where clients were logged as timed-out during the data |
| 154 | phase because they didn't have anything to send. This sometimes caused |
| 155 | slow client connections to close too early while in fact there was no |
| 156 | problem. The proper fix would be to have a per-fd time-out with |
| 157 | conditions depending on the state of the HTTP FSM. |
| 158 | |
willy tarreau | 906b268 | 2005-12-17 13:49:52 +0100 | [diff] [blame] | 159 | 2003/04/16 : 1.1.19 |
| 160 | - haproxy was NOT RFC compliant because it was case-sensitive on HTTP |
| 161 | "Cookie:" and "Set-Cookie:" headers. This caused JVM 1.4 to fail on |
| 162 | cookie persistence because it uses "cookie:". Two memcmp() have been |
| 163 | replaced with strncasecmp(). |
| 164 | |
willy tarreau | 036e1ce | 2005-12-17 13:46:33 +0100 | [diff] [blame] | 165 | 2003/04/02 : 1.1.18 |
| 166 | - Haproxy can be compiled with PCRE regex instead of libc regex, by setting |
| 167 | REGEX=pcre on the make command line. |
| 168 | - HTTP health-checks now use "OPTIONS *" instead of "OPTIONS /". |
| 169 | - when explicit source address binding is required, it is now also used for |
| 170 | health-checks. |
| 171 | - added 'reqpass' and 'reqipass' to allow certain headers but not the request |
| 172 | itself. |
| 173 | - factored several strings to reduce binary size by about 2 kB. |
| 174 | - replaced setreuid() and setregid() with more standard setuid() and setgid(). |
| 175 | - added 4 status flags to the log line indicating who ended the connection |
| 176 | first, the sessions state, the validity of the cookie, and action taken on |
| 177 | the set-cookie header. |
| 178 | |
| 179 | 2002/10/18 : 1.1.17 |
| 180 | - add the notion of "backup" servers, which are used only when all other |
| 181 | servers are down. |
| 182 | - make Set-Cookie return "" instead of "(null)" when the server has no |
| 183 | cookie assigned (useful for backup servers). |
| 184 | - "log" now supports an optionnal level name (info, notice, err ...) above |
| 185 | which nothing is sent. |
| 186 | - replaced some strncmp() with memcmp() for better efficiency. |
| 187 | - added "capture cookie" option which logs client and/or server cookies |
| 188 | - cleaned up/down messages and dump servers states upon SIGHUP |
| 189 | - added a redirection feature for errors : "errorloc <errnum> <url>" |
| 190 | - now we won't insist on connecting to a dead server, even with a cookie, |
| 191 | unless option "persist" is specified. |
| 192 | - added HTTP/408 response for client request time-out and HTTP/50[234] for |
| 193 | server reply time-out or errors. |
| 194 | |
| 195 | 2002/09/01 : 1.1.16 |
| 196 | - implement HTTP health checks when option "httpchk" is specified. |
| 197 | |
| 198 | 2002/08/07 : 1.1.15 |
| 199 | - replaced setpgid()/setpgrp() with setsid() for better portability, because |
| 200 | setpgrp() doesn't have the same meaning under Solaris, Linux, and OpenBSD. |
| 201 | |
| 202 | 2002/07/20 : 1.1.14 |
| 203 | - added "postonly" cookie mode |
| 204 | |
| 205 | 2002/07/15 : 1.1.13 |
| 206 | - tv_diff used inverted parameters which led to negative times ! |
| 207 | |
| 208 | 2002/07/13 : 1.1.12 |
| 209 | - fixed stats monitoring, and optimized some tv_* for most common cases. |
| 210 | - replaced temporary 'newhdr' with 'trash' to reduce stack size |
| 211 | - made HTTP errors more HTML-fiendly. |
| 212 | - renamed strlcpy() to strlcpy2() because of a slightly difference between |
| 213 | their behaviour (return value), to avoid confusion. |
| 214 | - restricted HTTP messages to HTTP proxies only |
| 215 | - added a 502 message when the connection has been refused by the server, |
| 216 | to prevent clients from believing this is a zero-byte HTTP 0.9 reply. |
| 217 | - changed 'Cache-control:' from 'no-cache="set-cookie"' to 'private' when |
| 218 | inserting a cookie, because some caches (apache) don't understand it. |
| 219 | - fixed processing of server headers when client is in SHUTR state |
| 220 | |
| 221 | 2002/07/04 : |
| 222 | - automatically close fd's 0,1 and 2 when going daemon ; setpgrp() after |
| 223 | setpgid() |
| 224 | |
| 225 | 2002/06/04 : 1.1.11 |
| 226 | - fixed multi-cookie handling in client request to allow clean deletion |
| 227 | in insert+indirect mode. Now, only the server cookie is deleted and not |
willy tarreau | 906b268 | 2005-12-17 13:49:52 +0100 | [diff] [blame] | 228 | all the header. Should now be compliant to RFC2965. |
willy tarreau | 036e1ce | 2005-12-17 13:46:33 +0100 | [diff] [blame] | 229 | - added a "nocache" option to "cookie" to specify that we explicitly want |
| 230 | to add a "cache-control" header when we add a cookie. |
| 231 | It is also possible to add an "Expires: <old-date>" to keep compatibility |
| 232 | with old/broken caches. |
| 233 | |
| 234 | 2002/05/10 : 1.1.10 |
| 235 | - if a cookie is used in insert+indirect mode, it's desirable that the |
| 236 | the servers don't see it. It was not possible to remove it correctly |
| 237 | with regexps, so now it's removed automatically. |
| 238 | |
| 239 | 2002/04/19 : 1.1.9 |
| 240 | - don't use snprintf()'s return value as an end of message since it may |
| 241 | be larger. This caused bus errors and segfaults in internal libc's |
| 242 | getenv() during localtime() in send_log(). |
| 243 | - removed dead insecure send_syslog() function and all references to it. |
| 244 | - fixed warnings on Solaris due to buggy implementation of isXXXX(). |
| 245 | |
| 246 | 2002/04/18 : 1.1.8 |
| 247 | - option "dontlognull" |
| 248 | - fixed "double space" bug in config parser |
| 249 | - fixed an uninitialized server field in case of dispatch |
| 250 | with no existing server which could cause a segfault during |
| 251 | logging. |
| 252 | - the pid logged was always the father's, which was wrong for daemons. |
| 253 | - fixed wrong level "LOG_INFO" for message "proxy started". |
| 254 | |
| 255 | 2002/04/13 : |
| 256 | - http logging is now complete : |
| 257 | - ip:port, date, proxy, server |
| 258 | - req_time, conn_time, hdr_time, tot_time |
| 259 | - status, size, request |
| 260 | - source address |
| 261 | |
| 262 | 2002/04/12 : 1.1.7 |
| 263 | - added option forwardfor |
| 264 | - added reqirep, reqidel, reqiallow, reqideny, rspirep, rspidel |
| 265 | - added "log global" in "listen" section. |
| 266 | |
| 267 | 2002/04/09 : |
| 268 | - added a new "global" section : |
| 269 | - logs |
| 270 | - debug, quiet, daemon modes |
| 271 | - uid, gid, chroot, nbproc, maxconn |
| 272 | |
| 273 | 2002/04/08 : 1.1.6 |
| 274 | - regex are now chained and not limited anymore. |
| 275 | - unavailable server now returns HTTP/502. |
| 276 | - increased per-line args limit to 40 |
| 277 | - added reqallow/reqdeny to block some request on matches |
| 278 | - added HTTP 400/403 responses |
| 279 | |
| 280 | 2002/04/03 : 1.1.5 |
| 281 | - connection logging displayed incorrect source address. |
| 282 | - added proxy start/stop and server up/down log events. |
| 283 | - replaced log message short buffers with larger trash. |
| 284 | - enlarged buffer to 8 kB and replace buffer to 4 kB. |
| 285 | |
| 286 | 2002/03/25 : 1.1.4 |
| 287 | - made rise/fall/interval time configurable |
| 288 | |
| 289 | 2002/03/22 : 1.1.3 |
| 290 | - fixed a bug : cr_expire and cw_expire were inverted in CL_STSHUT[WR] |
| 291 | which could lead to loops. |
| 292 | |
| 293 | 2002/03/21 : 1.1.2 |
| 294 | - fixed a bug in buffer management where we could have a loop |
| 295 | between event_read() and process_{cli|srv} if R==BUFSIZE-MAXREWRITE. |
| 296 | => implemented an adjustable buffer limit. |
| 297 | - fixed a bug : expiration of tasks in wait queue timeout is used again, |
| 298 | and running tasks are skipped. |
| 299 | - added some debug lines for accept events. |
| 300 | - send warnings for servers up/down. |
| 301 | |
| 302 | 2002/03/12 : 1.1.1 |
| 303 | - fixed a bug in total failure handling |
| 304 | - fixed a bug in timestamp comparison within same second (tv_cmp_ms) |
| 305 | |
| 306 | 2002/03/10 : 1.1.0 |
| 307 | - fixed a few timeout bugs |
| 308 | - rearranged the task scheduler subsystem to improve performance, |
| 309 | add new tasks, and make it easier to later port to librt ; |
| 310 | - allow multiple accept() for one select() wake up ; |
| 311 | - implemented internal load balancing with basic health-check ; |
| 312 | - cookie insertion and header add/replace/delete, with better strings |
| 313 | support. |
| 314 | |
| 315 | 2002/03/08 |
| 316 | - reworked buffer handling to fix a few rewrite bugs, and |
| 317 | improve overall performance. |
| 318 | - implement the "purge" option to delete server cookies in direct mode. |
| 319 | |
| 320 | 2002/03/07 |
| 321 | - fixed some error cases where the maxfd was not decreased. |
| 322 | |
| 323 | 2002/02/26 |
| 324 | - now supports transparent proxying, at least on linux 2.4. |
| 325 | |
| 326 | 2002/02/12 |
| 327 | - soft stop works again (fixed select timeout computation). |
| 328 | - it seems that TCP proxies sometimes cannot timeout. |
| 329 | - added a "quiet" mode. |
| 330 | - enforce file descriptor limitation on socket() and accept(). |
| 331 | |
| 332 | 2001/12/30 : release of version 1.0.2 : fixed a bug in header processing |
| 333 | 2001/12/19 : release of version 1.0.1 : no MSG_NOSIGNAL on solaris |
| 334 | 2001/12/16 : release of version 1.0.0. |
| 335 | 2001/12/16 : added syslog capability for each accepted connection. |
| 336 | 2001/11/19 : corrected premature end of files and occasional SIGPIPE. |
| 337 | 2001/10/31 : added health-check type servers (mode health) which replies OK then closes. |
| 338 | 2001/10/30 : added the ability to support standard TCP proxies and HTTP proxies |
| 339 | with or without cookies (use keyword http for this). |
| 340 | 2001/09/01 : added client/server header replacing with regexps. |
| 341 | eg: |
| 342 | cliexp ^(Host:\ [^:]*).* Host:\ \1:80 |
| 343 | srvexp ^Server:\ .* Server:\ Apache |
| 344 | 2000/11/29 : first fully working release with complete FSMs and timeouts. |
| 345 | 2000/11/28 : major rewrite |
| 346 | 2000/11/26 : first write |