Search filters

Type

Section

Actions

Changelog - HAProxy Enterprise 1.8r1

#2019/09/18 : 1.8r1 (1.0.0-193.716)

#2019/08/26 : 1.8r1 (1.0.0-192.716)

  • BUG/MEDIUMlistener/threadsfix an AB/BA locking issue in delete_listener()
  • BUG/MINORmworkerdisable SIGPROF on re-exec
  • DOCfixed typo in management.txt
  • MINORdocDocument allow-0rtt on the server line.
  • BUG/MINORlogs/threadsproperly split the log area upon startup
  • BUG/MEDIUMchecksmake sure the warmup task takes the server lock
  • BUG/MEDIUMsslUse the early_data API the right way.
  • MINORconnectionadd new function conn_is_back()
  • BUG/MINORhaproxyfix rule->file memory leak
  • BUILD/MINORstreamavoid a build warning with threads disabled
  • BUG/MEDIUMluaFix test on the direction to set the channel exp timeout
  • MINORsslssl_fc_has_early should work for BoringSSL
  • BUG/MINORsslfix 0-RTT for BoringSSL
  • MINORbuildDisable -Wstringop-overflow.
  • BUG/MINORmux-h2always reset rcvd_s when switching to a new frame
  • BUG/MINORmux-h2always send stream window update before connection's
  • BUG/MEDIUMmux-h2do not recheck a frame type after a state transition
  • BUG/MINORmux-h2use CANCEL, not STREAM_CLOSED in h2c_frt_handle_data()
  • BUG/MINORmux-h2don't refrain from sending an RST_STREAM after another one
  • BUG/MEDIUMfdAlways reset the polled_mask bits in fd_dodelete().
  • BUG/MEDIUMmux-h2split the stream's and connection's window sizes
  • BUG/MINORstream-intalso update analysers timeouts on activity
  • BUG/MEDIUMlb-chashEnsure the tree integrity when server weight is increased

#2019/07/30 : 1.8r1 (1.0.0-192.693)

  • BUG/MAJORqueue/threadsavoid an AB/BA locking issue in process_srv_queue()
  • BUG/MINORhluaOnly execute functions of HTTP class if the txn is HTTP ready
  • MINORhluaAdd a flag on the lua txn to know in which context it can be used
  • MINORhluaDon't set request analyzers on response channel for lua actions
  • BUG/MEDIUMhluaCheck the calling direction in lua functions of the HTTP class
  • BUG/MINORluaSet right direction and flags on new HTTP objects
  • DOCimprove the wording in CONTRIBUTING about how to document a bug fix
  • BUG/MEDIUMlb-chashFix the realloc() when the number of nodes is increased
  • BUG/MINORproxyalways lock stop_proxy()
  • BUG/MEDIUMprotocolsproperly initialize the proto_lock in 1.8
  • BUG/MEDIUMprotocolsadd a global lock for the init/deinit stuff
  • BUILDthreadsadd the definition of PROTO_LOCK
  • BUG/MEDIUMtcp-checksdo not dereference inexisting conn_stream
  • BUG/MEDIUMhttp/htxunbreak option http_proxy
  • BUG/MEDIUMtcp-checkunbreak multiple connect rules again
  • BUG/MAJORlistenerfix thread safety in resume_listener()
  • MINORtaskintroduce work lists
  • BUG/MEDIUMdacast the chunk to string.
  • BUG/MEDIUMlb_fasDon't test the server's lb_tree from outside the lock
  • BUILDmakefiledo not rely on shell substitutions to determine git version
  • BUILDmakefileuse :space: instead of digits to count commits

#2019/06/06 : 1.8r1 (1.0.0-192.672)

  • BUG/MEDIUMspoeBe sure the sample is found before setting its context

#2019/05/27 : 1.8r1 (1.0.0-192.671)

  • BUG/MAJORlb/threadsmake sure the avoided server is not full on second pass
  • BUILDsslfix latest LibreSSL reg-test error
  • BUG/MINORssl_sockFix memory leak when disabling compression
  • DOCfix typos
  • BUG/MEDIUMspoeDon't use the SPOE applet after releasing it
  • BUG/MEDIUMdnsmake the port numbers unsigned
  • BUG/MINORhttp_fetchRely on the smp direction for cookie() and hdr()
  • BUG/MEDIUMspoeReturn an error if nothing is encoded for fragmented messages
  • BUG/MEDIUMspoeQueue message only if no SPOE applet is attached to the stream
  • BUG/MEDIUMport_rangeMake the ring buffer lock-free.
  • MINORthreadsImplement HA_ATOMIC_LOAD().
  • MEDIUMthreadsUse __ATOMIC_SEQ_CST when using the newer atomic API.
  • MINORconfigTest validity of tune.maxaccept during the config parsing
  • BUG/MEDIUMlistenerFix how unlimited number of consecutive accepts is handled
  • BUG/MAJORmap/aclreal fix segfault during show map/acl on CLI
  • BUG/MEDIUMcontrib/modsecurityIf host header is NULL, don't try to strdup it
  • DOCcontrib/modsecurityTypos and fix the reject example
  • MINORspoeUse the sample context to pass frag_ctx info during encoding
  • BUG/MEDIUMspoearg len encoded in previous frag frame but len changed
  • BUG/MINORhttpCall stream_inc_be_http_req_ctr() only one time per request
  • BUG/MINORspoeDon't systematically wakeup SPOE stream in the applet handler
  • BUG/MINORdaGet the request channel to call CHECK_HTTP_MESSAGE_FIRST()
  • BUG/MINOR51dGet the request channel to call CHECK_HTTP_MESSAGE_FIRST()
  • BUG/MEDIUMthread/httpAdd missing locks in set-map and add-acl HTTP rules
  • BUG/MINORaclproperly detect pattern type SMP_T_ADDR
  • BUG/MEDIUMmapsonly try to parse the default value when it's present
  • BUG/MAJORhttp_fetchGet the channel depending on the keyword used
  • BUILD/MINORlistenerSilent a few signedness warnings.
  • BUG/MEDIUMlistenermake sure the listener never accepts too many conns
  • BUG/MEDIUMlisteneruse a self-locked list for the dequeue lists
  • MAJORlistenerdo not hold the listener lock in listener_accept()
  • BUG/MEDIUMlistfix incorrect pointer unlocking in LIST_DEL_LOCKED()
  • BUG/MEDIUMlistfix again LIST_ADDQ_LOCKED
  • BUG/MEDIUMlistcorrect fix for LIST_POP_LOCKED's removal of last element
  • MINORlistmake the delete and pop operations idempotent
  • BUG/MEDIUMlistadd missing store barriers when updating elements and head
  • BUG/MEDIUMlistfix LIST_POP_LOCKED's removal of the last pointer
  • BUG/MEDIUMlistfix the rollback on addq in the locked liss
  • BUG/MEDIUMlistsProperly handle the case we're removing the first elt.
  • MINORlistsImplement locked variations.
  • BUG/MINORthreadsfix the process range of thread masks
  • BUG/MEDIUMpatternassign pattern IDs after checking the config validity
  • BUG/MEDIUMpeersfix a case where peer session is not cleanly reset on release.
  • BUG/MINORclicorrectly handle abns in 'show cli sockets'
  • BUG/MAJORcheckssegfault during tcpcheck_main
  • DOCThe option httplog is no longer valid in a backend.
  • BUG/MINORlogproperly format IPv6 address when LOG_OPT_HEXA modifier is used.
  • BUG/MEDIUMsslability to set TLS 1.3 ciphers using ssl-default-server-ciphersuites
  • BUG/MINORhttp/countersfix missing increment of fe->srv_aborts
  • BUG/MAJORstatsFix how huge POST data are read from the channel
  • BUG/MAJORspoeFix initialization of thread-dependent fields
  • BUG/MEDIUMthreads/fddo not forget to take into account epoll_fd/pipes

#2019/03/19 : 1.8r1 (1.0.0-192.619)

#2019/03/12 : 1.8r1 (1.0.0-190.619)

  • BUG/MINORthreadsmove declaration of capabilities to config.h

#2019/03/11 : 1.8r1 (1.0.0-190.618)

  • BUG/MINORconfigReinforce validity check when a process number is parsed
  • BUG/MAJORstreamavoid double free on unique_id
  • BUG/MAJORspoeDon't try to get agent config during SPOP healthcheck
  • BUG/MEDIUMserverinitialize the idle conns list after parsing the config
  • BUG/MEDIUMspoeinitialization depending on nbthread must be done last
  • BUG/MINORluainitialize the correct idle conn lists for the SSL sockets
  • BUG/MINORspoedo not assume agent->rt is valid on exit
  • DOCsslStop documenting ciphers example to use
  • DOCsslClarify when pre TLSv1.3 cipher can be used
  • DOCmention the effect of nf_conntrack_tcp_loose on src/dst
  • BUG/MEDIUMsslFix handling of TLS 1.3 KeyUpdate messages
  • BUG/MINORcheckWake the check task if the check is finished in wake_srv_chk()
  • BUG/MINORserverdon't always trust srv_check_health when loading a server state
  • BUG/MINORstick_tablePrevent conn_cur from underflowing
  • BUG/MINORbackendBE_LB_LKUP_CHTREE is a value, not a bit
  • BUG/MINORbackendbalance uri specific options were lost across defaults
  • BUG/MINORbackenddon't use url_param_name as a hint for BE_LB_ALGO_PH
  • BUG/MEDIUMsslmissing allocation failure checks loading tls key file
  • DOCBe a bit more explicit about allow-0rtt security implications.
  • BUG/MEDIUMsslDisable anti-replay protection and set max data with 0RTT.
  • BUG/MAJORcachefix confusion between zero and uninitialized cache key
  • DOChttp-request cache-use / http-response cache-store expects cache name
  • BUG/MINORsslfix warning about ssl-min/max-ver support
  • BUG/MEDIUMlogsOnly attempt to free startup_logs once.
  • BUG/MINORlistenerkeep accept rate counters accurate under saturation
  • BUG/MAJORlistenerMake sure the listener exist before using it.
  • BUG/MEDIUMhapee/51dfix a segfault on exit when 51d configuration is not loaded

#2019/02/06 : 1.8r1 (1.0.0-190.591)

  • BUG/MINORconfigmake sure to count the error on incorrect track-sc/stick rules
  • BUILD/MINORcompilerfix offsetof() on older compilers
  • MINORcompilerintroduce offsetoff().
  • BUG/MAJORspoeverify that backends used by SPOE cover all their callers' processes
  • BUG/MAJORconfigverify that targets of track-sc and stick rules are present
  • BUG/MINORconfigfix bind line thread mask validation
  • BUG/MEDIUMstreamDon't forget to free s->unique_id in stream_free().
  • BUG/MEDIUMmux-h2do not close the connection on aborted streams
  • MINORconnstreamhave a new flag CS_FL_KILL_CONN to kill a connection
  • MINORstream-intadd a new flag to mention that we want the connection to be killed
  • MINORstream-intexpand the flags to 32-bit
  • BUG/MEDIUMmux-h2wait for the mux buffer to be empty before closing the connection
  • BUG/MEDIUMmux-h2make sure never to send GOAWAY on too old streams
  • BUG/MEDIUMmux-h2fix two half-closed to closed transitions
  • BUG/MEDIUMmux-h2wake up flow-controlled streams on initial window update
  • MINORxrefAdd missing barriers.
  • BUG/MINORstreamdon't close the front connection when facing a backend error
  • SCRIPTSadd the issue tracker URL to the announce script
  • SCRIPTSadd the slack channel URL to the announce script
  • BUG/MINORdeinittcp_rep.inspect_rules not deinit, add to deinit
  • BUG/MINORspoecorrected fragmentation string size
  • DOCnbthread is no longer experimental.
  • BUG/MINORhpackreturn a compression error on invalid table size updates
  • BUG/MINORmux-h2make it possible to set the error code on an already closed stream
  • BUG/MINORmux-h2headers-type frames in HREM are always a connection error
  • BUG/MINORmux-h2CONTINUATION in closed state must always return GOAWAY
  • MINORh2declare new sets of frame types
  • MINORh2add a bit-based frame type representation

#2019/01/08 : 1.8r1 (1.0.0-190.563)

  • BUG/CRITICALmux-h2re-check the frame length when PRIORITY is used
  • BUG/MEDIUMluadead lock when Lua tasks are trigerred
  • BUG/MINORluabad args are returned for Lua actions
  • BUG/MINORluaReturn an error if a legacy HTTP applet doesn't send anything
  • BUG/MEDIUMclimake show sess really thread-safe
  • MINORstream/clireport more info about the HTTP messages on show sess all
  • MINORstream/clifix the location of the waiting flag in show sess all
  • MINORlballow redispatch when using consistent hash
  • BUG/MEDIUMserverAlso copy check-sni for server templates.
  • BUG/MEDIUMmux-h2mark that we have too many CS once we have more than the max
  • MINORmux-h2only increase the connection window with the first update
  • BUG/MAJORstream-intUpdate the stream expiration date in stream_int_notify()
  • BUG/MEDIUMdnsoverflowed dns name start position causing invalid dns error
  • BUG/MEDIUMdnsDon't prevent reading the last byte of the payload in dns_validate_response()
  • BUG/MINORlogsleave startup-logs global and not per-thread

#2018/12/12 : 1.8r1 (1.0.0-189.548)

  • DOCfix a few typos in the documentation
  • DOCFix typos in different subsections of the documentation
  • DOCFix typos in README and CONTRIBUTING
  • DOCrestore note about independant typo
  • DOCUpdate configuration doc about the maximum number of stick counters.
  • BUGdnsFix off-by-one write in dns_validate_dns_response()
  • BUGdnsFix out-of-bounds read via signedness error in dns_validate_dns_response()
  • BUGdnsPrevent out-of-bounds read in dns_validate_dns_response()
  • BUGdnsPrevent out-of-bounds read in dns_read_name()
  • BUGdnsPrevent stack-exhaustion via recursion loop in dns_read_name
  • DOCrefer to check-sni in the documentation of sni
  • DOCclarify that check-sni needs an argument.
  • MINORserversFree [idle|safe|priv]_conns on exit.
  • BUILDthreadsfix minor build warnings when threads are disabled
  • BUILDcompressionfix build error with DEFAULT_MAXZLIBMEM
  • BUG/MINORmux-h2advertise a larger connection window size
  • BUG/MINORmux-h2refrain from muxing during the preface
  • BUG/MINORhpackfix off-by-one in header name encoding length calculation
  • BUG/MEDIUMsampleDon't treat SMP_T_METH as SMP_T_STR.
  • BUG/MINORlb-mapfix unprotected update to server's score
  • BUG/MINORcfgparseFix the call to post parser of the last sections parsed
  • BUG/MINORcfgparseFix transition between 2 sections with the same name
  • BUG/MINORsslssl_sock_parse_clienthello ignores session id
  • BUG/MINORclidon't stop cli_gen_usage_msg() when kw->usage == NULL

#2018/11/29 : 1.8r1 (1.0.0-189.524)

  • BUG/MEDIUMhpackfix encoding of accept-ranges field
  • BUG/MINORconfigCopy default error messages when parsing of a backend starts
  • BUG/MEDIUMMake sure stksess is properly aligned.
  • BUG/MINORconfigbetter detect the presence of the h2 pattern in npn/alpn
  • BUG/MEDIUMauth/threadsuse of crypt() is not thread-safe
  • BUG/MAJORhttphttp_txn_get_path() may deference an inexisting buffer
  • BUG/MINORonly auto-prefer last server if lb-alg is non-deterministic
  • BUG/MINORonly mark connections private if NTLM is detected
  • DOCcacheMissing information about total-max-size
  • BUG/MINORsslWrong usage of shctx_init().
  • BUG/MINORcacheWrong usage of shctx_init().
  • BUG/MINORcacheCrashes with total-max-size > 2047(MB).
  • BUILDMakefileadd the new ERR variable to force -Werror
  • BUG/MEDIUMh2Close connection if no stream is left an GOAWAY was sent.
  • BUG/MEDIUMpoolsFix the usage of mmap()) with DEBUG_UAF.
  • BUILDcompilerrename __unreachable() to my_unreachable()
  • DOCfix reference to map files in MAINTAINERS
  • MINORpeersuse defines instead of enums to appease clang.
  • MINORcfgparseWrite 130 as 128 as 0x82 and 0x80.
  • MINORserverUse memcpy() instead of strncpy().
  • BUILDMakefilesilence an option conflict warning with clang
  • BUILDMakefilespeed up compiler options detection
  • CLEANUPstick-tablesRemove unneeded double (()) around conditional clause
  • BUILDluasilence some compiler warnings after WILL_LJMP
  • BUILDluasilence some compiler warnings about potential null derefs (#2)
  • MINORluaall functions calling lua_yieldk() may return
  • BUILDcompileradd a new statement __unreachable()
  • BUILDpeerscheck allocation error during peers_init_sync()
  • BUILDstick-tablemake sure not to fail on task_new() during initialization
  • BUILDsslfix another null-deref warning in ssl_sock_switchctx_cbk()
  • BUILDsslfix null-deref warning in ssl_fc_cipherlist_str sample fetch
  • BUG/MINORclimake sure the getsock command is only called on connections
  • BUG/MINORtoolsfix set_net_port() / set_host_port() on IPv4
  • BUG/MEDIUMthreadsmake sure threads_want_sync is marked volatile
  • BUG/MEDIUMthreadsfix thread_release() at the end of the rendez-vous point
  • DOCFix a few typos
  • BUG/MEDIUMstreamdon't crash on out-of-memory
  • BUG/MEDIUMmworkersegfault receiving SIGUSR1 followed by SIGTERM.
  • BUG/MINORchecksqueues null-deref
  • BUG/MEDIUMCur/CumSslConns counters not threadsafe.
  • MEDIUMssladd support for ciphersuites option for TLSv1.3
  • BUG/MEDIUMbuffersMake sure we don't wrap in buffer_insert_line2/replace2.
  • BUG/MINORbackendcheck that the mux installed properly
  • BUG/MINORconnectionavoid null pointer dereference in send-proxy-v2
  • DOCclarify force-private-cache is an option
  • MINORthreadsMake sure threads_sync_pipe is initialized before using it.

#2018/10/11 : 1.8r1 (1.0.0-189.478)

  • MEDIUMluaAdd stick table support for Lua.

#2018/09/20 : 1.8r1 (1.0.0-189.477)

  • BUG/CRITICALhpackfix improper sign check on the header index value
  • MINORAdd srv_conn_free sample fetch
  • MINORadd be_conn_free sample fetch
  • BUG/MEDIUMpatternsfix possible double free when reloading a pattern list
  • DOCFix typos in lua documentation
  • BUG/MINORserverCrash when setting FQDN via CLI.
  • BUG/MAJORkqueueDon't reset the changes number by accident.
  • BUG/MEDIUMsnapshottake the proxy's lock while dumping errors
  • BUG/MINORhttp/threadsatomically increment the error snapshot ID
  • BUG/MINORdnscheck and link servers' resolvers right after config parsing
  • BUG/MEDIUMh2fix risk of memory leak on malformated wrapped frames
  • BUG/MEDIUMsessionfix reporting of handshake processing time in the logs
  • BUG/MINORstreamuse atomic increments for the request counter
  • MINORthreadimplement HA_ATOMIC_XADD()
  • BUG/MEDIUMECC cert should work with TLS < v1.2 and openssl >= 1.1.1
  • BUG/MEDIUMdns/serverfix incomatibility between SRV resolution and server state file
  • BUG/MEDIUMhluaDon't call RESET_SAFE_LJMP if SET_SAFE_LJMP returns 0.
  • BUG/MAJORthreadlua: Wrong SSL context initialization.
  • BUG/MEDIUMhluaMake sure we drain the output buffer when done.
  • BUG/MEDIUMluareset lua transaction between http requests

#2018/08/24 : 1.8r1 (1.0.0-188.457)

  • MINORfd cache: And the thread_mask with all_threads_mask.
  • BUG/MEDIUMmux_ptdereference the connection with care in mux_pt_wake()
  • BUG/MINORluaBad HTTP client request duration.
  • BUG/MEDIUMunixprovide a ->drain() function
  • DOCFix spelling error in configuration doc
  • BUG/MEDIUMcli/threadsprotect some server commands against concurrent operations
  • BUG/MEDIUMcli/threadsprotect all proxy commands against concurrent updates
  • BUG/MEDIUMluasocket timeouts are not applied
  • DOCsslUse consistent naming for TLS protocols
  • DOCdnsexplain set server ... fqdn requires resolver
  • BUG/MINORmapfix map_regm with backref
  • BUG/MEDIUMsslloading dh param from certifile causes unpredictable error.
  • BUG/MEDIUMsslfix missing error loading a keytype cert from a bundle.
  • BUG/MINORsslempty connections reported as errors.
  • BUG/MEDIUMclimake show fd thread-safe
  • MEDIUMhathreadsimplement a more flexible rendez-vous point
  • BUG/MEDIUMthreadsfix the no-thread case after the change to the sync point
  • MINORthreadsadd more consistency between certain variables in no-thread case
  • BUG/MEDIUMluapossible CLOSE-WAIT state with '\n' headers
  • MINORdnsnew DNS options to allow/prevent IP address duplication
  • MINORdnsfix wrong score computation in dns_get_ip_from_response
  • BUG/MEDIUMqueueprevent a backup server from draining the proxy's connections
  • BUG/MEDIUMserverscheck the queues once enabling a server
  • BUG/MEDIUMfdDon't modify the update_mask in fd_dodelete().
  • SCRIPTSgit-show-backportsadd missing quotes to echo
  • MEDIUMproxy_protocolConvert IPs to v6 when protocols are mixed
  • BUG/MEDIUMthreadsunbreak bind referencing an incorrect thread number
  • MINORthreadsmove nbthread parsing to hathreads.c
  • BUG/MEDIUMthreadsproperly fix nbthreads == MAX_THREADS
  • BUG/MINORthreadsHandle nbthread == MAX_THREADS.
  • BUG/MINORconfigstick-table is not supported in defaults section
  • BUG/MEDIUMh2prevent orphaned streams from blocking a connection forever
  • BUG/MEDIUMthreads/syncuse sched_yield when available
  • BUG/MINORserversDon't make server in a frontend fatal.
  • BUG/MEDIUMstatsdon't ask for more data as long as we're responding
  • BUG/MEDIUMstream-intdon't immediately enable reading when the buffer was reportedly full
  • MINORh2add the error code and the max/last stream IDs to show fd
  • BUG/MINORhttpSet brackets for the unlikely macro at the right place

#2018/07/20 : 1.8r1 (1.0.0-186.419)

  • BUG/MEDIUMthreadsFix the exit condition of the thread barrier
  • MINORdebugAdd checks for conn_stream flags
  • MINORdebugAdd check for CO_FL_WILL_UPDATE
  • BUILDGenerate sha256 checksums in publish-release
  • BUG/MINORunixMake sure we can transfer abns sockets on seamless reload.
  • BUG/MEDIUMh2make sure the last stream closes the connection after a timeout
  • BUG/MEDIUMh2never leave pending data in the output buffer on close
  • BUG/MEDIUMh2don't accept new streams if conn_streams are still in excess
  • MINORh2add the mux and demux buffer lengths on show fd
  • MINORh2keep a count of the number of conn_streams attached to the mux
  • BUG/MINORh2remove accidental debug code introduced with show_fd function
  • MINORh2implement a basic show_fd function
  • MINORmuxadd a show_fd function to dump debugging information for show fd
  • BUG/MINORsslproperly ref-count the tls_keys entries
  • MINORsystemdconsider exit status 143 as successful

#2018/06/27 : 1.8r1 (1.0.0-186.404)

  • MINORstick-tablesmake stktable_release() do nothing on NULL
  • BUG/MAJORstick_tableComplete incomplete SEGV fix
  • BUG/BUILDthreadsunbreak build without threads
  • BUG/MAJORStick-tables crash with segfault when the key is not in the stick-table
  • MINORthreadsBe sure to remove threads from all_threads_mask on exit
  • BUG/MEDIUMthreadsUse the sync point to check active jobs and exit
  • BUG/MAJORsslOpenSSL context is stored in non-reserved memory slot
  • BUG/MAJORsslRandom crash with cipherlist capture
  • BUG/MINORluaSegfaults with wrong usage of types.
  • BUG/MINORsignalsha_sigmask macro for multithreading
  • BUG/MINORdon't ignore SIG{BUS,FPE,ILL,SEGV} during signal processing
  • BUG/MEDIUMthreadshandle signal queue only in thread 0
  • MINORluaIncrease debug information
  • BUG/MAJORmapfix a segfault when using http-request set-map
  • MAJORhapee/spoeReintroduce the support of SPOP 1.0
  • DOCcontrib/modsecurityfew typo fixes
  • DOCSPOE.txtfix a typo
  • BUG/MINORcontrib/modsecurityupdate pointer on the end of the frame
  • BUG/MINORcontrib/mod_defenderupdate pointer on the end of the frame
  • BUG/MINORcontrib/modsecurityDon't reset the status code during disconnect
  • BUG/MINORcontrib/mod_defenderDon't reset the status code during disconnect
  • BUG/MINORcontrib/spoa_exampleDon't reset the status code during disconnect
  • MAJORspoeupgrade the SPOP version to 2.0 and remove the support for 1.0
  • BUG/MEDIUMlua/socketBuffer error, may segfault
  • BUG/MEDIUMlua/socketSheduling error on write: may dead-lock
  • BUG/MEDIUMlua/socketNotification error
  • BUG/MAJORluaDead lock with sockets
  • BUG/MEDIUMlua/socketwrong scheduling for sockets
  • MINORtask/notificationIs notifications registered ?
  • BUG/MEDIUMspoeReturn an error when the wrong ACK is received in sync mode
  • BUG/MEDIUMstick-tablesDecrement ref_cnt in table_* converters
  • BUG/MEDIUMlua/socketLength required read doesn't work
  • BUG/MEDIUMserversAdd srv_addr default placeholder to the state file
  • BUG/BUILDthreadsunbreak build without threads
  • BUG/MEDIUMdnsDelay the attempt to run a DNS resolution on check failure.
  • BUG/MEDIUMcachedon't cache when an Authorization header is present
  • BUG/MINORssl/luaprevent lua from affecting automatic maxconn computation
  • BUG/MEDIUMcontrib/modsecurityUse network order to encode/decode flags
  • BUG/MEDIUMcontrib/mod_defenderUse network order to encode/decode flags
  • BUG/MEDIUMspoeFlags are not encoded in network order
  • BUG/MINORluaSocket.send threw runtime error: 'close' needs 1 arguments.

#2018/05/18 : 1.8r1 (1.0.0-186.363)

  • BUG/MINORspoeMistake in error message about SPOE configuration
  • BUG/MEDIUMsslproperly protect SSL cert generation
  • BUG/MEDIUMhttpdon't always abort transfers on CF_SHUTR
  • BUG/MEDIUMpollersUse a global list for fd shared between threads.
  • MINORfdMake the lockless fd list work with multiple lists.
  • BUG/MINORluaensure large proxy IDs can be represented
  • BUG/MINORluaschedule socket task upon lua connect()
  • BUG/MEDIUMtaskDon't free a task that is about to be run.
  • BUG/MINORmapcorrectly track reference to the last ref_elt being dumped
  • DOC/MINORclean up LUA documentation re: servers & array/table.
  • BUG/MINORluaPut tasks to sleep when waiting for data
  • BUG/MEDIUMthreadsFix the sync point for more than 32 threads
  • BUG/MINORchecksFix check->health computation for flapping servers
  • BUG/MINORspoeFix parsing of dontlog-normal option
  • BUG/MINORspoeFix counters update when processing is interrupted
  • BUG/MINORconfigdisable http-reuse on TCP proxies
  • BUG/MINORlua/threadsMake lua's tasks sticky to the current thread
  • BUG/MEDIUMh2implement missing support for chunked encoded uploads
  • MINORh2detect presence of CONNECT and/or content-length
  • BUG/MEDIUMluaFix segmentation fault if a Lua task exits
  • BUG/MINORlogt_idle (%Ti) is not set for some requests
  • BUG/MAJORchannelFix crash when trying to read from a closed socket
  • BUG/MINORpatternAdd a missing HA_SPIN_INIT() in pat_ref_newid()

#2018/04/19 : 1.8r1 (1.0.0-186.340)

  • BUG/CRITICALh2fix incorrect frame length check
  • DOCluaupdate the links to the config and Lua API
  • BUILDsampleavoid build warning in sample.c
  • MEDIUMsampleExtend functionality for field/word converters
  • MINORproxyAdd fe_defbe fetcher
  • BUG/MEDIUMkqueueWhen adding new events, provide an output to get errors.
  • MINORcliEnsure the CLI always outputs an error when it should
  • BUG/MINORcliGuard against NULL messages when using CLI_ST_PRINT_FREE
  • BUG/MINORhttpReturn an error in proxy mode when url2sa fails
  • BUG/MEDIUMconnectionMake sure we have a mux before calling detach().
  • BUG/MEDIUMthreadsFix the max/min calculation because of name clashes

#2018/04/06 : 1.8r1 (1.0.0-186.329)

  • MINORserversSupport alphanumeric characters for the server templates names
  • BUG/MAJORcachealways initialize newly created objects
  • MINORspoeAdd counters to log info about SPOE agents
  • MINORspoeuse agent's logger to log SPOE messages
  • MINORspoeAdd support for option dontlog-normal in the SPOE agent section
  • MINORspoeAdd loggers dedicated to the SPOE agent
  • MINORspoeAdd options to store processing times in variables
  • MINORspoeAdd metrics in to know time spent in the SPOE
  • BUG/MINORspoeDon't forget to decrement fpa when a processing is interrupted
  • BUG/MINORspoeRegister the variable to set when an error occurred
  • BUG/MINORspoeDon't release the context buffer in .check_timeouts callbaclk
  • BUG/MINORspoeInitialize variables used during conf parsing before any check
  • CLEANUPspoeRemove unused label retry
  • MINORlogKeep the ref when a log server is copied to avoid duplicate entries
  • MINORlogmove 'log' keyword parsing in dedicated function
  • BUG/MAJORcachefix random crashes caused by incorrect delete() on non-first blocks
  • BUG/MINORfdDon't clear the update_mask in fd_insert.
  • BUG/MINORcachefix show cache output
  • BUG/MINORemail-alertSet the mailer port during alert initialization
  • BUG/MINORcheckscheck the conn_stream's readiness and not the connection
  • BUG/MEDIUMh2always add a stream to the send or fctl list when blocked
  • BUILD/MINORthreadsalways export thread_sync_io_handler()
  • BUG/MEDIUMh2don't consider pending data on detach if connection is in error
  • BUG/MEDIUMh2/threadsnever release the task outside of the task handler
  • MINORh2fuse h2s_detach() and h2s_free() into h2s_destroy()
  • MINORh2always call h2s_detach() in h2_detach()
  • BUG/MAJORh2remove orphaned streams from the send list before closing
  • MINORh2provide and use h2s_detach() and h2s_free()
  • CLEANUPh2rename misleading h2c_stream_close() to h2s_close()
  • BUG/MINORhpackfix harmless use of uninitialized value in hpack_dht_insert
  • BUILD/MINORclifix a build warning introduced by last commit
  • MINORclimake show fd report the mux and mux_ctx pointers when available
  • MINORcli/threadsmake show fd report thread_sync_io_handler instead of unknown
  • BUILD/MINORfix build when USE_THREAD is not defined
  • BUG/MINORlua funtion hlua_socket_settimeout don't check negative values
  • BUG/MINORluathe function returns anything
  • BUG/MINORlistenerDon't decrease actconn twice when a new session is rejected
  • BUG/MINORh2ensure we can never send an RST_STREAM in response to an RST_STREAM
  • BUG/MEDIUMh2properly account for DATA padding in flow control

#2018/03/21 : 1.8r1 (1.0.0-186.290)

  • BUG/MINORcliEnsure all command outputs end with a LF
  • BUG/MINORpools/threadsdon't ignore DEBUG_UAF on double-word CAS capable archs
  • DOCdon't suggest using http-server-close
  • BUG/MEDIUMfd/threadsensure the fdcache_mask always reflects the cache contents
  • DOClogmore than 2 log servers are allowed
  • BUILD/BUGenable -fno-strict-overflow by default
  • MINORlogstop emitting alerts when it's not possible to write on the socket
  • BUG/MEDIUMthreads/queuewake up other threads upon dequeue

#2018/03/19 : 1.8r1 (1.0.0-186.282)

  • BUG/MINORtcp-checkuse the server's service port as a fallback
  • BUG/MEDIUMtcp-checksingle connect rule can't detect DOWN servers
  • BUG/MINORluareturn bad error messages
  • BUG/MINORspoa-exampleunexpected behavior for more than 127 args
  • BUILDsslFix build with OpenSSL without NPN capability
  • BUG/MINORcliFix a crash when sending a command with too many arguments
  • BUG/MINORseemless reload: Fix crash when an interface is specified.
  • BUG/MINORdnsdon't downgrade DNS accepted payload size automatically
  • BUG/MAJORthreads/queueFix thread-safety issues on the queues management
  • BUG/MEDIUMthreads/unixFix a deadlock when a listener is temporarily disabled
  • BUG/MINORforce-persist and ignore-persist only apply to backends
  • BUG/MEDIUMfix a 100% cpu usage with cpu-map and nbthread/nbproc
  • BUG/MINORcliFix a typo in the 'set rate-limit' usage
  • CLEANUPcliRemove a leftover debug message
  • CLEANUPsslRemove a duplicated #include
  • BUG/MINORcliFix a crash when passing a negative or too large value to show fd
  • BUG/MEDIUMh2also arm the h2 timeout when sending
  • BUG/MINORunixDon't mess up when removing the socket from the xfer_sock_list.
  • CLEANUP.gitignoreIgnore binaries from the contrib directory
  • BUG/MINORsessionFix tcp-request session failure if handshake.
  • BUILD/MINORfix Lua build on Mac OS X (again)
  • MINOR/BUILDfix Lua build on Mac OS X
  • MINORsystemdAdd SystemD's SystemCallFilter option to the unit file
  • MINORsystemdAdd SystemD's Protect*= options to the unit file
  • MINORsystemdAdd section for SystemD sandboxing to unit file
  • BUG/MEDIUMbufferFix the wrapping case in bi_putblk
  • BUG/MEDIUMbufferFix the wrapping case in bo_putblk
  • BUG/MEDIUMh2always consume any trailing data after end of output buffers
  • MINORstatsdisplay the number of threads in the statistics.
  • MINORmodulesadd a new label MODULES_LOCK to the lock_label enum

#2018/03/12 : 1.8r1 (1.0.0-186.251)

  • BUG/MINORh2Set the target of dbuf_wait to h2c
  • MINORdebug/poolsmake DEBUG_UAF also detect underflows
  • BUG/MINORdebug/poolsproperly handle out-of-memory when building with DEBUG_UAF
  • DOCcfgparseWarn on option (tcp|http)log in backend
  • DOCluanew prototype for function register_action()
  • BUG/MEDIUMssl/samplessl_bc_* fetch keywords are broken.
  • BUG/MEDIUMhttpSwitch the HTTP response in tunnel mode as earlier as possible
  • BUG/MINORssl/threadsMake management of the TLS ticket keys files thread-safe
  • BUG/MEDIUMsslShutdown the connection for reading on SSL_ERROR_SYSCALL
  • BUG/MEDIUMsslDon't always treat SSL_ERROR_SYSCALL as unrecovarable.
  • BUG/MINORthreadsfix missing thread lock labels for 1.8
  • BUG/MEDIUMspoeRemove idle applets from idle list when HAProxy is stopping
  • BUG/MINORinitAdd missing brackets in the code parsing -sf/-st
  • BUG/MEDIUMthreadsfix the double CAS implementation for ARMv7
  • BUG/MINORfd/threadsproperly lock the FD before adding it to the fd cache.
  • BUILDfd/threadsfix breakage build breakage without threads
  • MINORfdreorder fd_add_to_fd_list()
  • MINORfdremove the unneeded last CAS when adding an fd to the list
  • BUG/MINORfd/threadsproperly dereference fdcache as volatile
  • MINORfdmove the fd_{add_to,rm_from}_fdlist functions to fd.c
  • MEDIUMpolleruse atomic ops to update the fdtab mask
  • MEDIUMfdmake updt_fd_polling() use atomics
  • CLEANUPfdremove the now unused fd_compute_new_polled_status() function
  • MINORselectget rid of the now useless fd_compute_new_polled_status()
  • MINORpollget rid of the now useless fd_compute_new_polled_status()
  • MINORkqueueget rid of the now useless fd_compute_new_polled_status()
  • MINORepollget rid of the now useless fd_compute_new_polled_status()
  • MAJORfdcompute the new fd polling state out of the fd lock
  • MEDIUMfd/threadsMake sure we don't miss a fd cache entry.
  • MAJORfd/threadsMake the fdcache mostly lockless.
  • MINORpools/threadsImplement lockless memory pools.
  • MINORthreadsadd test and set/reset operations
  • MINORthreadsIntroduce double-width CAS on x86_64 and arm.
  • MINORfdpass the iocb and owner to fd_insert()
  • MEDIUMpolldon't use the old FD state anymore
  • MEDIUMselectdon't use the old FD state anymore
  • MEDIUMfduse atomic ops for hap_fd_{clr,set} and remove poll_lock
  • MEDIUMselectmake use of hap_fd_* functions
  • MINORfdmove the hap_fd_{clr,set,isset} functions to fd.h
  • CLEANUPfdremove the unused new field
  • MINORpollmore accurately compute the new maxfd in the loop
  • CLEANUPfd/threadsremove the now unused fdtab_lock
  • MEDIUMpollingstart to move maxfd computation to the pollers
  • MINORfddon't report maxfd in alert messages
  • MINORpollingmake epoll and kqueue not depend on maxfd anymore
  • MINORssl/sampleadds ssl_bc_is_resumed fetch keyword.
  • MINORsampleadd a new concat converter
  • MINORconfigAdd support for ARGT_MSK6
  • MINORstandardAdd str2mask6 function
  • CLEANUPstandardUse len2mask4 in str2mask
  • MINORconfigEnable tracking of up to MAX_SESS_STKCTR stick counters.
  • MINORstick-tablesAdds support for new gpc1 and gpc1_rate counters.
  • MEDIUMsampleAdd IPv6 support to the ipmask converter
  • MINORsampleadd date_us sample
  • MINORsamplerename the len converter to length
  • MINORsampleadd len converter
  • MINORspoeAdd max-waiting-frames directive in spoe-agent configuration
  • MEDIUMspoeUse an ebtree to manage idle applets
  • MINORspoeCount the number of frames waiting for an ack for each applet
  • MINORspoeReplace sending_rate by a frequency counter
  • MINORspoeAlways link a SPOE context with the applet processing it
  • MINORspoeRemove check on min_applets number when a SPOE context is queued
  • MINORspoeDon't queue a SPOE context if nothing is sent
  • MINORspoeadd register-var-names directive in spoe-agent configuration
  • MINORspoeadd force-set-var option in spoe-agent configuration
  • MEDIUM51duse fiftyoneDegreesProvider to access the pool and dataset
  • MINORconfigreport when monitor fail rules are misplaced
  • BUILDmodulesupdate HAPEE version macro to 1.8r1
  • MINORmodulesAdd the ability to register variable and functions.
  • MINORmodulesreport more precise errors about module API mismatch
  • MINORmodulesRemove Gcc warnings about unused variables
  • BUILDmodulesRemove modules-config.h from DEP variable to generate .i file
  • BUILDmodulesAdd macors to compute numerical value of a HAPEE version
  • BUILDmodulesOnly define the all target if MODULES isn't defined.
  • MEDIUMmodules'modules list' on the cli shows currently loaded modules
  • BUILDmodulesstrip the MODULE_COPTS before hashing them
  • BUILDmodulesadd make module-copts to show module options
  • BUILDmodulestake pkg-config out of install-inc
  • MINORmodulesfix incorrect API HASH generation with certain awk versions
  • MODULESBUILDmodules: Add version of the module in the defines
  • BUILDmodulesuse gawk insteads of awk
  • BUILDmodulesmake modules support optional
  • MINORmodulesDon't use constructor/destructor anymore...
  • MINORmodulesTerminate properly loaded modules if possible
  • MINORmodulesKeep a list of loaded modules to unload them when HAProxy is stopped
  • MINORmodulesRegister function called after the main config check
  • MEDIUMmodulesmodules: Add memory reservation support for the modules
  • MEDIUMmodulesmodules: Add modules support
  • BUG/MINORconfigdon't emit a warning when global stats is incompletely configured
  • DOCMention -Ws in the list of available options
  • DOCDescribe routing impact of using interface keyword on bind lines
  • MINORinitemit warning when -sf/-sd cannot parse argument
  • BUG/MEDIUMstandardFix memory leak in str2ip2()
  • BUG/MINORtime/threadsensure the adjusted time is always correct
  • BUG/MEDIUMspoeAllow producer to read and to forward shutdown on request side
  • BUG/MEDIUMspoeAlways try to receive or send the frame to detect shutdowns
  • BUG/MINORepoll/threadsonly call epoll_ctl(DEL) on polled FDs
  • BUG/MINORthreadsUpdate labels array because of changes in lock_label enum
  • BUG/MINORcliuse global.maxsock and not maxfd to list all FDs
  • CLEANUPFix typo in ARGT_MSK6 comment
  • BUG/MINORsampleFix output type of c_ipv62ip
  • CLEANUPsampleFix outdated comment about sample casts functions
  • CLEANUPsampleFix comment encoding of sample.c
  • BUILDkqueue/threadsAdd test on MAX_THREADS to avoid warnings when complied without threads
  • BUILDepoll/threadsAdd test on MAX_THREADS to avoid warnings when complied without threads
  • MINORthreadsUse __decl_hathreads instead of #ifdef/#endif
  • BUG/MINORkqueue/threadsDon't forget to close kqueue_fd[tid] on each thread
  • BUG/MEDIUMchecksDon't try to release undefined conn_stream when a check is freed
  • BUG/MEDIUMthreads/serverFix deadlock in srv_set_stopping/srv_set_admin_flag
  • BUG/MINORthreadsalways set an owner to the thread_sync pipe
  • MINORthreadsFix build when we're not compiling with threads.
  • BUG/MINORmworkeronly write to pidfile if it exists
  • BUG/MEDIUMthreads/mworkerfix a race on startup
  • BUG/MEDIUMkqueue/threadsuse one kqueue_fd per thread
  • BUG/MEDIUMepoll/threadsuse one epoll_fd per thread
  • MINORfdadd a bitmask to indicate that an FD is known by the poller
  • BUG/MEDIUMfdmaintain a per-thread update mask
  • BUG/MEDIUMthreads/pollingUse fd_cache_mask instead of fd_cache_num
  • MINORthreads/fdUse a bitfield to know if there are FDs for a thread in the FD cache
  • MINORglobaladd some global activity counters to help debugging
  • MINORthreadsadd a MAX_THREADS define instead of LONGBITS
  • MINORglobal/threadsmove cpu_map at the end of the global struct
  • MINORserversDon't report duplicate dyncookies for disabled servers.
  • BUG/MEDIUMpeersfix expire date wasn't updated if entry is modified remotely.
  • BUG/MINORpolltoo large size allocation for FD events
  • CONTRIBdebugfix a few flags definitions
  • DOCclarify the scope of ssl_fc_is_resumed
  • BUG/MEDIUMstreamproperly handle client aborts during redispatch
  • BUILD/MINORancient gcc versions atomic fix
  • MINORhathreadsadd support for gcc < 4.7
  • BUG/MEDIUMmworkerexecvp failure depending on argv[0]
  • MINORdnsHandle SRV record weight correctly.
  • BUG/MINORluaFix return value of Socket.settimeout
  • BUG/MEDIUMluaFix IPv6 with separate port support for Socket.connect
  • DOCluaFix typos in comments of hlua_socket_receive
  • BUG/MINORluaFix default value for pattern in Socket.receive
  • BUG/MEDIUMsslcache doesn't release shctx blocks
  • BUILDsslsilence a warning when building without NPN nor ALPN support
  • BUG/MEDIUMh2properly handle the END_STREAM flag on empty DATA frames
  • MEDIUMh2prepare a graceful shutdown when the frontend is stopped
  • BUG/MAJORhpackdon't return direct references to the dynamic headers table
  • BUG/MEDIUMhttpdon't automatically forward request close
  • MINORdon't close stdio anymore
  • BUG/MEDIUMmworkerdon't close stdio several time
  • BUG/MEDIUMh2ensure we always know the stream before sending a reset
  • DOC/MINORconfigurationtypo, formatting fixes
  • BUG/MEDIUMh2improve handling of frames received on closed streams
  • BUG/MEDIUMh2properly handle and report some stream errors
  • BUG/MEDIUMchecksproperly set servers to stopping state on 404
  • BUG/MAJORconnectionrefine the situations where we don't send shutw()
  • BUG/MEDIUMcachedon't cache the response on no-cache=set-cookie
  • BUG/MEDIUMcacherespect the request cache-control header
  • BUG/MEDIUMcachereplace old object on store
  • BUG/MEDIUMcachedo not try to retrieve host-less requests from the cache
  • MINORhttpadd a function to check request's cache-control header field
  • BUG/MINORcachedo not force the TX_CACHEABLE flag before checking cacheability
  • BUG/MINORhttpproperly detect max-age=0 and s-maxage=0 in responses
  • BUG/MINORhttpdo not ignore cache-control: public
  • MINORhttpstart to compute the transaction's cacheability from the request
  • MINORhttpupdate the list of cacheable status codes as per RFC7231
  • MINORhttpadjust the list of supposedly cacheable methods
  • BUG/MEDIUMluafix crash when using bogus mode in register_service()
  • BUG/MEDIUMchecksa server passed in maint state was not forced down.
  • MEDIUMnetscaleradd support for standard NetScaler CIP protocol
  • MEDIUMnetscalerdo not analyze original IP packet size
  • MINORnetscalercheck in one-shot if buffer is large enough for IP and TCP header
  • BUG/MEDIUMstreamdon't consider abortonclose on muxes which close cleanly
  • MINORstream-intset flag SI_FL_CLEAN_ABRT when mux supports clean aborts
  • MINORmuxadd flags to describe a mux's capabilities
  • BUG/MINORh2properly report a stream error on RST_STREAM
  • CONTRIBhalogFix compiler warnings in halog.c
  • CONTRIBiprangeFix compiler warning in iprange.c
  • BUG/MAJORnetscaleraddress truncated CIP header detection
  • BUG/MEDIUMnetscaleruse the appropriate IPv6 header size
  • MINORnetscalerrename cip_len to clarify its uage
  • MINORnetscalerremove the use of cip_magic only used once
  • MINORnetscalerrespect syntax
  • DOC/MINORintrotypo, wording, formatting fixes
  • BUG/MEDIUMmworkerSet FD_CLOEXEC flag on log fd
  • BUILD/MINORMakefile : enabling USE_CPU_AFFINITY
  • BUGMINORhttp: don't check http-request capture id when len is provided
  • BUGMAJORlb_map: server map calculation broken
  • BUG/MINORstream-intdon't try to receive again after receiving an EOS
  • BUG/MEDIUMh2fix stream limit enforcement
  • BUG/MEDIUMhttpdon't disable lingering on requests with tunnelled responses
  • BUG/MEDIUMh2don't close after the first DATA frame on tunnelled responses
  • BUG/MEDIUMh2don't switch the state to HREM before end of DATA frame
  • MINORh2don't demand that a DATA frame is complete before processing it
  • BUG/MEDIUMh2support uploading partial DATA frames
  • MINORh2store the demux padding length in the h2c struct
  • BUG/MEDIUMh2debug incoming traffic in h2_wake()
  • BUG/MEDIUMh2work around a connection API limitation
  • BUG/MEDIUMh2enable recv polling whenever demuxing is possible
  • BUG/MEDIUMh2automatically set CS_FL_RCV_MORE when the output buffer is full
  • BUG/MEDIUMstream-intalways set SI_FL_WAIT_ROOM on CS_FL_RCV_MORE
  • MINORconn_streamadd new flag CS_FL_RCV_MORE to indicate pending data
  • BUG/MEDIUMlua/notificationmemory leak
  • DOCnotificationsadd precisions about thread usage
  • MINORsystemdremove comment about HAPROXY_STATS_SOCKET
  • BUG/MEDIUMthreads/varsFix deadlock in register_name
  • BUG/MEDIUMemail-alertdon't set server check status from a email-alert task
  • CONTRIBhalogAdd help text for -s switch in halog program
  • MINORmworkerImprove wording in `void mworker_wait()`
  • MINORmworkerUpdate messages referencing exit-on-failure
  • BUG/MEDIUMh2fix handling of end of stream again
  • BUG/MEDIUMpeersset NOLINGER on the outgoing stream interface
  • BUG/MEDIUMchecksa down server going to maint remains definitely stucked on down state.
  • BUG/MEDIUMssl engines: Fix async engines fds were not considered to fix fd limit automatically.
  • BUG/MEDIUMmworkeralso close peers sockets in the master
  • BUG/MINORsslsupport tune.ssl.cachesize 0 again
  • BUG/MAJORhpackdon't pretend large headers fit in empty table
  • BUG/MINORactionDon't check http capture rules when no id is defined
  • BUG/MINORh2use the H2_F_DATA_* macros for DATA frames
  • BUG/MEDIUMh2do not accept upper case letters in request header names
  • BUG/MEDIUMh2remove connection-specific headers from request
  • BUG/MINORh2reject response pseudo-headers from requests
  • BUG/MINORh2properly check PRIORITY frames
  • BUG/MINORh2reject incorrect stream dependencies on HEADERS frame
  • BUG/MINORh2do not accept SETTINGS_ENABLE_PUSH other than 0 or 1
  • BUG/MEDIUMh2enforce the per-connection stream limit
  • BUG/MINORh2the TE header if present may only contain trailers
  • BUG/MINORh2fix a typo causing PING/ACK to be responded to
  • BUG/MINORh2:path must not be empty
  • BUG/MINORh2try to abort closed streams as soon as possible
  • BUG/MINORh2immediately close if receiving GOAWAY after the last stream
  • BUG/MAJORh2correctly check the request length when building an H1 request
  • BUG/MINORhpackdynamic table size updates are only allowed before headers
  • BUG/MINORhpackreject invalid header index
  • BUG/MINORhpackmust reject huffman literals padded with more than 7 bits
  • BUG/MINORhpackfix debugging output of pseudo header names
  • BUG/MEDIUMchecksBe sure we have a mux if we created a cs.
  • BUILDFix LDFLAGS vs. LIBS re linking order in various makefiles
  • BUG/MAJORthreadBe sure to request a sync between threads only once at a time
  • MINORthreadsFix pthread_setaffinity_np on FreeBSD.
  • BUG/MINORmworkerdetach from tty when in daemon mode
  • BUG/MINORmworkerfix validity check for the pipe FDs
  • BUILD/MINORhaproxycompiling config cpu parsing handling when needed
  • BUG/MAJORthread/peersfix deadlock on peers sync.
  • BUG/MEDIUMpeersfix some track counter rules dont register entries for sync.
  • BUG/MEDIUMh2don't report an error after parsing a 100-continue response
  • BUG/MEDIUMthreads/peersdecrement, not increment jobs on quitting
  • BUG/MINORsslCO_FL_EARLY_DATA removal is managed by stream
  • BUILD/MINORhaproxy : FreeBSD/cpu affinity needs pthread_np header
  • BUG/MEDIUMstreamfix session leak on applet-initiated connections
  • BUILDchecksdon't include server.h
  • BUG/MEDIUMcachebad computation of the remaining size
  • BUG/MEDIUMssldon't allocate shctx several time
  • BUG/MEDIUMtcp-checkDon't lock the server in tcpcheck_main
  • BUILD/MINORdeviceatlasenable thread support
  • DOCcacheupdate sections and fix some typos
  • BUG/MEDIUMkqueueDon't bother closing the kqueue after fork.