Search filters

Type

Section

Actions

Changelog - HAProxy Enterprise 1.8r2

#2020/04/01 : 1.8r2 (2.0.0-205.1048)

  • BUG/CRITICALhpacknever index a header into the headroom after wrapping
  • BUG/MINORhttp-anaReset request analysers on error when waiting for response
  • MINORhttp-rulesHandle the rule direction when a redirect is evaluated
  • BUG/MINORhttp_anamake sure redirect flags don't have overlapping bits
  • MINORhttp-rulesAdd a flag on redirect rules to know the rule direction
  • BUG/MEDIUMhttpunbreak redirects in legacy mode
  • DOCinternalsFix spelling errors in filters.txt
  • BUG/MINORstatsFix color of draining servers on stats page
  • BUG/MINORpeersavoid an infinite loop with peers_fe is NULL
  • BUG/MINORpeersinit bind_proc to 1 if it wasn't initialized
  • DOCassorted typo fixes in the documentation
  • DOCproxy_protocolReserve TLV type 0x05 as PP2_TYPE_UNIQUE_ID
  • DOCsslclarify security implications of TLS tickets
  • DOCimprove description of no-tls-tickets
  • DOCfix typo about no-tls-tickets
  • BUG/MINORrulesIncrement be_counters if backend is assigned for a silent-drop
  • BUG/MINORrulesPreserve FLT_END analyzers on silent-drop action
  • BUG/MINORhttp-rulesFix a typo in the reject action function
  • BUG/MINORhttp-rulesPreserve FLT_END analyzers on reject action
  • BUG/MINORluaIgnore the reserve to know if a channel is full or not
  • REGTESTmake the PROXY TLV validation depend on version 2.2
  • BUG/MAJORproxy_protocolProperly validate TLV lengths
  • DOCfix incorrect indentation of http_auth_*
  • BUG/MAJORlistfix invalid element address calculation
  • BUG/MINORsampleMake sure to return stable IDs in the unique-id fetch
  • BUG/MINORsamplefix the json converter's endian-sensitivity
  • BUILDebtreeimprove architecture-specific alignment
  • MINORcompileradd new alignment macros
  • BUILDfix recent build failure on unaligned archs
  • BUG/MEDIUMebtreedon't set attribute packed without unaligned access support
  • MINORcompilermove CPU capabilities definition from config.h and complete them
  • BUG/MEDIUMshctxmake sure to keep all blocks aligned
  • CONTRIBdebugalso support reading values from stdin
  • CONTRIBdebugsupport reporting multiple values at once
  • CONTRIBdebugadd the possibility to decode the value as certain types only
  • SCRIPTSannounce-releaseuse mutt -H instead of -i to include the draft
  • BUG/MINORnamespaceavoid closing fd when socket failed in my_socketat
  • SCRIPTSmake announce-release executable again
  • BUG/MINORtcpdon't try to set defaultmss when value is negative
  • BUG/MINORtcpavoid closing fd when socket failed in tcp_bind_listener
  • BUG/MEDIUMlisteneronly consider running threads when resuming listeners
  • BUG/MINORdnsallow 63 char in hostname
  • BUG/MINORunixbetter catch situations where the unix socket path length is close to the limit
  • SCRIPTSannounce-releaseallow the user to force to overwrite old files
  • SCRIPTSannounce-releaseplace the send command in the mail's header
  • MINORaclWarn when an ACL is named 'or'
  • BUG/MINORconnectionfix ip6 dst_port copy in make_proxy_line_v2
  • BUG/MEDIUMpipefix a use-after-free in case of pipe creation error

#2020/03/18 : 1.8r2 (2.0.0-205.1000)

  • BUG/MINORdnsallow srv record weight set to 0
  • BUG/MINORhttp_actdon't check capture id in backend
  • MINORproxy/http-anaAdd support of extra attributes for the cookie directive
  • BUG/MINORtcp-rulesFix memory releases on error path during action parsing
  • BUG/MINORstick-tableUse MAX_SESS_STKCTR as the max track ID during parsing
  • BUG/MINORhttp-rulesRemove buggy deinit functions for HTTP rules
  • BUG/MINORdnsMake dns_query_id_seed unsigned
  • BUG/MINORpatternhandle errors from fgets when trying to load patterns
  • BUG/MINORstreamdon't mistake match rules for store-request rules
  • BUG/MEDIUMcli_getsocks must send the peers sockets
  • BUG/MAJORhashesfix the signedness of the hash inputs
  • BUG/MEDIUMmworkerremain in mworker mode during reload
  • BUG/MEDIUMsessiondo not report a failure when rejecting a session

#2019/12/20 : 1.8r2 (2.0.0-200.987)

  • BUG/MEDIUMfd/threadsfix a concurrency issue between add and rm on the same fd
  • MINORfd/threadsmake _GET_NEXT()/_GET_PREV() use the volatile attribute
  • BUG/MEDIUMsslDon't set the max early data we can receive too early.
  • BUG/MINORsamplealways check converters' arguments
  • BUG/MINORsamplefix the closing bracket and LF in the debug converter
  • DOCclarify matching strings on binary fetches

#2019/12/12 : 1.8r2 (2.0.0-200.981)

  • BUILD/MINORunix sockets: silence an absurd gcc warning about strncpy()
  • BUG/MINORlistenerfix off-by-one in state name check
  • BUG/MINORservermake agent-addr work on default-server line
  • BUG/MINORlistenerdo not immediately resume on transient error
  • BUG/MINORmworkerproperly pass SIGTTOU/SIGTTIN to workers
  • BUG/MINORlogfix minor resource leaks on logformat error path
  • DOCremove references to the outdated architecture.txt
  • BUILDdo not disable -Wformat-truncation anymore
  • BUILD/MINORtoolsshut up the format truncation warning in get_gmt_offset()
  • BUILD/MINORsslshut up a build warning about format truncation
  • DOClistenersadd a few missing transitions
  • BUG/MEDIUMkqueueMake sure we report read events even when no data.
  • BUG/MEDIUMproto_udp/threadsrecv() and send() must not be exclusive.
  • BUG/MAJORdnsadd minimalist error processing on the Rx path
  • DOCdocument the listener state transitions
  • BUG/MEDIUMlistener/threadsfix a remaining race in the listener's accept()
  • BUG/MINORlisteneralso clear the error flag on a paused listener
  • BUG/MINORlistener/threadsalways use atomic ops to clear the FD events
  • BUG/MINORproxymake soft_stop() also close FDs in LI_PAUSED state
  • BUG/MINORsslcertificate choice can be unexpected with openssl >= 1.1.1
  • BUG/MEDIUMlistener/threadfix a race when pausing a listener
  • SCRIPTSgit-show-backportsadd -s to proposed cherry-pick commands
  • SCRIPTScreate-releaseshow the correct origin name in suggested commands
  • BUG/MAJORh2make header field name filtering stronger
  • BUG/MAJORh2reject header values containing invalid chars
  • MINORistadd ist_find_ctl()
  • BUILD/MINORsslfix compiler warning about useless statement
  • BUG/MINORsslfix crt-list neg filter for openssl < 1.1.1

#2019/11/15 : 1.8r2 (2.0.0-198.953)

  • BUG/MEDIUMlistenersalways pause a listener on out-of-resource condition
  • BUGdnstimeout resolve not applied for valid resolutions
  • BUG/MEDIUMstreamBe sure to release allocated captures for TCP streams
  • BUG/MEDIUMstreamBe sure to support splicing at the mux level to enable it
  • BUG/MINORconfigUpdate cookie domain warn to RFC6265
  • BUG/MINORclidon't call the kw->io_release if kw->parse failed
  • MINORtcpavoid confusion in time parsing init

#2019/10/23 : 1.8r2 (2.0.0-197.946)

  • BUG/MEDIUMpatternmake the pattern LRU cache thread-local and lockless
  • BUG/MINORstick-tablefix an incorrect 32 to 64 bit key conversion

#2019/10/22 : 1.8r2 (2.0.0-197.944)

  • BUG/MINORsslfix memcpy overlap without consequences.
  • MINORsampleAdd UUID-fetch
  • BUG/MINORsslFix fd leak on error path when a TLS ticket keys file is parsed
  • BUG/MINORmworker/sslclose openssl FDs unconditionally
  • BUILDsslfix again a libressl build failure after the openssl FD leak fix
  • BUG/MINORmworker/sslclose OpenSSL FDs on reload
  • BUG/MINORsampleMake the `field` converter compatible with `-m found`
  • BUG/MINORstick-tableNever exceed (MAX_SESS_STKCTR-1) when fetching a stkctr
  • BUG/MEDIUMssl'tune.ssl.default-dh-param' value ignored with openssl > 1.1.1
  • CLEANUPbindhandle warning label on bind keywords parsing.
  • CLEANUPsslmake ssl_sock_load_dh_params handle errcode/warn
  • CLEANUPsslmake ssl_sock_put_ckch_into_ctx handle errcode/warn
  • CLEANUPsslmake ssl_sock_load_cert*() return real error codes
  • BUG/MINORsslabort on sni_keytypes allocation failure
  • BUG/MINORsslabort on sni allocation failure
  • BUG/MINORtcpDon't alter counters returned by tcp info fetchers
  • BUG/MINORWURFLfix send_log() function arguments
  • BUG/MINORchunkFix tests on the chunk size in functions copying data
  • BUG/MINORsslfree the sni_keytype nodes
  • MINORstatsmention in the help message support for json and typed
  • DOCclarify some points around http-send-name-header's behavior
  • BUG/MEDIUMcachemake sure not to cache requests with absolute-uri
  • BUG/MINORluaProperly initialize the buffer's fields for string samples in hlua_lua2(smp|arg)
  • BUG/MEDIUMnamespacefix fd leak in master-worker mode
  • DOCFix documentation about the cli command to get resolver stats
  • BUG/MEDIUMspoeUse a different engine-id per process
  • MINORtoolsimplement my_flsl()
  • BUG/MAJORmux_h2Don't consume more payload than received for skipped frames
  • BUG/MEDIUMnamespaceclose open namespaces during soft shutdown
  • BUG/MEDIUMcheck/threadsmake external checks run exclusively on thread 1
  • BUG/MINORaclFix memory leaks when an ACL expression is parsed
  • BUG/MINORfiltersProperly set the HTTP status code on analysis error
  • BUG/MEDIUMhttpalso reject messages where chunked is missing from transfer-enoding
  • BUG/MEDIUMproto-httpAlways start the parsing if there is no outgoing data

#2019/09/05 : 1.8r2 (2.0.0-196.910)

  • BUG/MEDIUMlistener/threadsfix an AB/BA locking issue in delete_listener()
  • BUG/MINORmworkerdisable SIGPROF on re-exec
  • DOCfixed typo in management.txt
  • MINORdocDocument allow-0rtt on the server line.
  • BUG/MINORlogs/threadsproperly split the log area upon startup
  • BUG/MEDIUMchecksmake sure the warmup task takes the server lock
  • BUG/MEDIUMsslUse the early_data API the right way.
  • MINORconnectionadd new function conn_is_back()
  • BUG/MINORhaproxyfix rule->file memory leak
  • BUILD/MINORstreamavoid a build warning with threads disabled

#2019/08/16 : 1.8r2 (2.0.0-195.900)

  • BUG/MEDIUMluaFix test on the direction to set the channel exp timeout
  • MINORsslssl_fc_has_early should work for BoringSSL
  • BUG/MINORsslfix 0-RTT for BoringSSL
  • MINORbuildDisable -Wstringop-overflow.
  • BUG/MINORmux-h2always reset rcvd_s when switching to a new frame
  • BUG/MINORmux-h2always send stream window update before connection's
  • BUG/MEDIUMmux-h2do not recheck a frame type after a state transition
  • BUG/MINORmux-h2use CANCEL, not STREAM_CLOSED in h2c_frt_handle_data()
  • BUG/MINORmux-h2don't refrain from sending an RST_STREAM after another one
  • BUG/MEDIUMfdAlways reset the polled_mask bits in fd_dodelete().
  • BUG/MEDIUMmux-h2split the stream's and connection's window sizes
  • BUG/MINORstream-intalso update analysers timeouts on activity
  • BUG/MEDIUMlb-chashEnsure the tree integrity when server weight is increased

#2019/07/30 : 1.8r2 (2.0.0-195.887)

  • BUG/MAJORqueue/threadsavoid an AB/BA locking issue in process_srv_queue()
  • BUG/MINORhluaOnly execute functions of HTTP class if the txn is HTTP ready
  • MINORhluaAdd a flag on the lua txn to know in which context it can be used
  • MINORhluaDon't set request analyzers on response channel for lua actions
  • BUG/MEDIUMhluaCheck the calling direction in lua functions of the HTTP class
  • BUG/MINORluaSet right direction and flags on new HTTP objects
  • DOCimprove the wording in CONTRIBUTING about how to document a bug fix
  • BUG/MINORlogmake sure writev() is not interrupted on a file output
  • BUILDlog/threadsimplement the logsrv lock
  • BUG/MEDIUMlb-chashFix the realloc() when the number of nodes is increased
  • BUG/MINORproxyalways lock stop_proxy()
  • BUG/MEDIUMprotocolsproperly initialize the proto_lock in 1.8
  • BUG/MEDIUMprotocolsadd a global lock for the init/deinit stuff
  • BUILDthreadsadd the definition of PROTO_LOCK
  • BUG/MEDIUMtcp-checksdo not dereference inexisting conn_stream
  • BUG/MEDIUMhttp/htxunbreak option http_proxy

#2019/07/15 : 1.8r2 (2.0.0-195.871)

  • BUG/MEDIUMtcp-checkunbreak multiple connect rules again

#2019/07/12 : 1.8r2 (2.0.0-195.870)

  • BUG/MAJORlistenerfix thread safety in resume_listener()
  • MINORtaskintroduce work lists
  • BUG/MEDIUMdacast the chunk to string.
  • BUG/MEDIUMlb_fasDon't test the server's lb_tree from outside the lock
  • BUILDmakefiledo not rely on shell substitutions to determine git version
  • BUILDmakefileuse :space: instead of digits to count commits

#2019/06/26 : 1.8r2 (2.0.0-195.864)

  • BUG/MEDIUMlb_fwlcDon't test the server's lb_tree from outside the lock
  • BUG/MEDIUMcompressionSet Vary: Accept-Encoding for compressed responses
  • MINORdocadd master-worker in the man page
  • MINORdocRemove -Ds option in man page
  • BUG/MINORhttp-rulesmention deny_status for deny in the error message
  • BUG/MEDIUMmux-h2make sure the connection timeout is always set
  • BUG/MEDIUMvarsmake the tcp/http unset-var() action support conditions
  • BUG/MEDIUMvarsmake sure the scope is always valid when accessing vars
  • BUG/MEDIUMconnectionfix multiple handshake polling issues
  • BUG/MINORdeinit/threadsmake hard-stop-after perform a clean exit
  • BUG/MEDIUMhttpfix http-request reject when not final

#2019/06/06 : 1.8r2 (2.0.0-195.853)

  • BUG/MEDIUMspoeBe sure the sample is found before setting its context

#2019/05/27 : 1.8r2 (2.0.0-195.852)

  • BUG/MEDIUMqueuefix the tree walk in pendconn_redistribute.
  • BUG/MAJORlb/threadsmake sure the avoided server is not full on second pass
  • BUILDsslfix latest LibreSSL reg-test error
  • BUG/MINORssl_sockFix memory leak when disabling compression
  • DOCfix typos

#2019/05/24 : 1.8r2 (2.0.0-195.847)

  • BUG/MEDIUMspoeDon't use the SPOE applet after releasing it
  • BUG/MEDIUMdnsmake the port numbers unsigned
  • BUG/MINORhttp_fetchRely on the smp direction for cookie() and hdr()

#2019/05/15 : 1.8r2 (2.0.0-195.844)

  • BUG/MINORsslFix 48 byte TLS ticket key rotation
  • BUG/MEDIUMspoeReturn an error if nothing is encoded for fragmented messages
  • BUG/MEDIUMspoeQueue message only if no SPOE applet is attached to the stream
  • BUG/MEDIUMport_rangeMake the ring buffer lock-free.
  • MINORthreadsImplement HA_ATOMIC_LOAD().
  • CLEANUPconfigDon't alter listener->maxaccept when nbproc is set to 1
  • MINORconfigTest validity of tune.maxaccept during the config parsing
  • BUG/MEDIUMlistenerFix how unlimited number of consecutive accepts is handled
  • BUG/MAJORmap/aclreal fix segfault during show map/acl on CLI
  • BUG/MEDIUMcontrib/modsecurityIf host header is NULL, don't try to strdup it
  • DOCcontrib/modsecurityTypos and fix the reject example
  • MINORspoeUse the sample context to pass frag_ctx info during encoding
  • BUG/MEDIUMspoearg len encoded in previous frag frame but len changed
  • BUG/MINORhttpCall stream_inc_be_http_req_ctr() only one time per request
  • BUG/MINORspoeDon't systematically wakeup SPOE stream in the applet handler
  • BUG/MINORdaGet the request channel to call CHECK_HTTP_MESSAGE_FIRST()
  • BUG/MINOR51dGet the request channel to call CHECK_HTTP_MESSAGE_FIRST()
  • BUG/MEDIUMthread/httpAdd missing locks in set-map and add-acl HTTP rules
  • BUG/MINORaclproperly detect pattern type SMP_T_ADDR
  • BUG/MEDIUMmapsonly try to parse the default value when it's present
  • BUG/MAJORhttp_fetchGet the channel depending on the keyword used
  • MINORskip get_gmtime where tm is unused
  • BUILD/MINORlistenerSilent a few signedness warnings.
  • BUG/MEDIUMlistenermake sure the listener never accepts too many conns
  • BUG/MEDIUMlisteneruse a self-locked list for the dequeue lists
  • MAJORlistenerdo not hold the listener lock in listener_accept()
  • BUG/MEDIUMlistfix incorrect pointer unlocking in LIST_DEL_LOCKED()
  • BUG/MEDIUMlistfix again LIST_ADDQ_LOCKED
  • BUG/MEDIUMlistcorrect fix for LIST_POP_LOCKED's removal of last element
  • MINORlistmake the delete and pop operations idempotent
  • BUG/MEDIUMlistadd missing store barriers when updating elements and head
  • BUG/MEDIUMlistfix LIST_POP_LOCKED's removal of the last pointer
  • BUG/MEDIUMlistfix the rollback on addq in the locked liss
  • BUG/MEDIUMlistsProperly handle the case we're removing the first elt.
  • MINORlistsImplement locked variations.
  • BUG/MINORthreadsfix the process range of thread masks
  • BUG/MEDIUMpatternassign pattern IDs after checking the config validity
  • BUILDconnectionfix naming of ip_v field
  • BUILDuse inttypes.h instead of stdint.h
  • BUG/MEDIUMpeersfix a case where peer session is not cleanly reset on release.
  • MINORclistart addresses by a prefix in 'show cli sockets'
  • BUG/MINORclicorrectly handle abns in 'show cli sockets'

#2019/04/01 : 1.8r2 (2.0.0-195.802)

  • MINORsslAdd aes_gcm_dec converter
  • MINORtoolsmake memvprintf() never pass a NULL target to vsnprintf()
  • BUILDmakefilework around an old bug in GNU make-3.80
  • BUG/MAJORcheckssegfault during tcpcheck_main
  • DOCThe option httplog is no longer valid in a backend.
  • BUG/MINORlogproperly format IPv6 address when LOG_OPT_HEXA modifier is used.
  • BUG/MEDIUMsslability to set TLS 1.3 ciphers using ssl-default-server-ciphersuites
  • BUG/MINORhttp/countersfix missing increment of fe->srv_aborts
  • BUG/MAJORstatsFix how huge POST data are read from the channel

#2019/03/19 : 1.8r2 (2.0.0-195.793)

  • BUG/MAJORspoeFix initialization of thread-dependent fields
  • BUG/MEDIUMthreads/fddo not forget to take into account epoll_fd/pipes
  • MEDIUMthreadsUse __ATOMIC_SEQ_CST when using the newer atomic API.

#2019/03/12 : 1.8r2 (2.0.0-193.790)

  • BUG/MINORthreadsmove declaration of capabilities to config.h
  • BUG/MINORsslfix warning about ssl-min/max-ver support
  • BUG/MEDIUMlogsOnly attempt to free startup_logs once.
  • BUG/MINORlistenerkeep accept rate counters accurate under saturation
  • BUG/MAJORlistenerMake sure the listener exist before using it.
  • BUG/MEDIUMhapee/51dfix a segfault on exit when 51d configuration is not loaded

#2019/02/15 : 1.8r2 (2.0.0-193.784)

  • MINORdnsImplement `parse-resolv-conf` directive
  • BUG/MEDIUMspoeinitialization depending on nbthread must be done last
  • BUG/MINORconfigReinforce validity check when a process number is parsed
  • BUG/MAJORstreamavoid double free on unique_id
  • BUG/MAJORspoeDon't try to get agent config during SPOP healthcheck
  • BUG/MEDIUMserverinitialize the idle conns list after parsing the config
  • BUG/MINORluainitialize the correct idle conn lists for the SSL sockets
  • BUG/MINORspoedo not assume agent->rt is valid on exit
  • DOCsslStop documenting ciphers example to use
  • DOCsslClarify when pre TLSv1.3 cipher can be used
  • BUG/MINORconfigmake sure to count the error on incorrect track-sc/stick rules

#2019/02/05 : 1.8r2 (2.0.0-193.773)

  • BUILD/MINORcompilerfix offsetof() on older compilers
  • MINORcompilerintroduce offsetoff().
  • BUG/MAJORspoeverify that backends used by SPOE cover all their callers' processes
  • BUG/MAJORconfigverify that targets of track-sc and stick rules are present
  • BUG/MINORconfigfix bind line thread mask validation
  • BUG/MEDIUMstreamDon't forget to free s->unique_id in stream_free().
  • BUG/MEDIUMmux-h2do not close the connection on aborted streams
  • MINORconnstreamhave a new flag CS_FL_KILL_CONN to kill a connection
  • MINORstream-intadd a new flag to mention that we want the connection to be killed
  • MINORstream-intexpand the flags to 32-bit
  • BUG/MEDIUMmux-h2wait for the mux buffer to be empty before closing the connection
  • BUG/MEDIUMmux-h2make sure never to send GOAWAY on too old streams
  • BUG/MEDIUMmux-h2fix two half-closed to closed transitions
  • BUG/MEDIUMmux-h2wake up flow-controlled streams on initial window update
  • MINORxrefAdd missing barriers.
  • BUG/MINORstreamdon't close the front connection when facing a backend error
  • SCRIPTSadd the issue tracker URL to the announce script
  • SCRIPTSadd the slack channel URL to the announce script
  • BUG/MINORdeinittcp_rep.inspect_rules not deinit, add to deinit
  • BUG/MINORspoecorrected fragmentation string size
  • DOCnbthread is no longer experimental.
  • BUG/MINORhpackreturn a compression error on invalid table size updates
  • BUG/MINORmux-h2make it possible to set the error code on an already closed stream
  • BUG/MINORmux-h2headers-type frames in HREM are always a connection error
  • BUG/MINORmux-h2CONTINUATION in closed state must always return GOAWAY
  • MINORh2declare new sets of frame types
  • MINORh2add a bit-based frame type representation

#2019/01/28 : 1.8r2 (2.0.0-191.746)

  • DOCmention the effect of nf_conntrack_tcp_loose on src/dst
  • BUG/MEDIUMsslFix handling of TLS 1.3 KeyUpdate messages
  • BUG/MINORcheckWake the check task if the check is finished in wake_srv_chk()
  • BUG/MINORserverdon't always trust srv_check_health when loading a server state
  • BUG/MINORstick_tablePrevent conn_cur from underflowing
  • BUG/MINORbackendBE_LB_LKUP_CHTREE is a value, not a bit
  • BUG/MINORbackendbalance uri specific options were lost across defaults
  • BUG/MINORbackenddon't use url_param_name as a hint for BE_LB_ALGO_PH
  • DOCBe a bit more explicit about allow-0rtt security implications.
  • BUG/MEDIUMsslDisable anti-replay protection and set max data with 0RTT.
  • BUG/MAJORcachefix confusion between zero and uninitialized cache key
  • DOChttp-request cache-use / http-response cache-store expects cache name

#2019/01/15 : 1.8r2 (2.0.0-191.734)

  • MINORssladd support of aes256 bits ticket keys on file and cli.
  • BUG/MEDIUMsslmissing allocation failure checks loading tls key file
  • BUG/MINORbase64dec func ignores padding for output size checking

#2019/01/08 : 1.8r2 (2.0.0-191.731)

  • BUG/CRITICALmux-h2re-check the frame length when PRIORITY is used
  • BUG/MEDIUMlogdon't mark log FDs as non-blocking on terminals
  • BUG/MINORlogfix logging to both FD and IP
  • BUG/MEDIUMluadead lock when Lua tasks are trigerred
  • BUG/MINORluabad args are returned for Lua actions
  • BUG/MINORluaReturn an error if a legacy HTTP applet doesn't send anything
  • BUG/MEDIUMclimake show sess really thread-safe
  • MINORstream/clireport more info about the HTTP messages on show sess all
  • MINORstream/clifix the location of the waiting flag in show sess all
  • MINORlballow redispatch when using consistent hash
  • BUG/MEDIUMserverAlso copy check-sni for server templates.
  • BUG/MEDIUMmux-h2mark that we have too many CS once we have more than the max
  • MINORmux-h2only increase the connection window with the first update
  • BUG/MAJORstream-intUpdate the stream expiration date in stream_int_notify()

#2018/12/21 : 1.8r2 (2.0.0-190.717)

  • BUG/MEDIUMdnsoverflowed dns name start position causing invalid dns error
  • BUG/MEDIUMdnsDon't prevent reading the last byte of the payload in dns_validate_response()
  • BUG/MINORlogsleave startup-logs global and not per-thread

#2018/12/17 : 1.8r2 (2.0.0-190.714)

  • MINORcliimplements 'reload' on master CLI
  • MINORmworker/cliindicate in the master prompt when a reload failed
  • BUG/MINORmworkerdon't use unitialized mworker_proc struct
  • BUG/MEDIUMclihandle correctly prefix and payload
  • MEDIUMclihandle CLI level from the master CLI
  • CLEANUPcliuse dedicated define instead of appctx ones
  • MEDIUMclishow and change CLI permissions
  • MEDIUMclistore CLI level in the appctx
  • MINORclichange 'show proc' output of old processes
  • DOCmaster CLI documentation in management.txt
  • MINORcliuse pcli_flags for prompt activation
  • MEDIUMclihandle payload in CLI proxy
  • MINORcliimplements 'quit' in the CLI proxy
  • MINORcliparse prompt command in the CLI proxy
  • MEDIUMclirework the CLI proxy parser
  • BUG/MINORcliwait for payload data even without prompt
  • DOCfix a few typos in the documentation
  • DOCFix typos in different subsections of the documentation
  • DOCFix typos in README and CONTRIBUTING
  • DOCrestore note about independant typo
  • DOCUpdate configuration doc about the maximum number of stick counters.
  • BUGdnsFix off-by-one write in dns_validate_dns_response()
  • BUGdnsFix out-of-bounds read via signedness error in dns_validate_dns_response()
  • BUGdnsPrevent out-of-bounds read in dns_validate_dns_response()
  • BUGdnsPrevent out-of-bounds read in dns_read_name()
  • BUGdnsPrevent stack-exhaustion via recursion loop in dns_read_name
  • DOCrefer to check-sni in the documentation of sni
  • DOCclarify that check-sni needs an argument.
  • MINORserversFree [idle|safe|priv]_conns on exit.
  • BUILDthreadsfix minor build warnings when threads are disabled
  • BUILDcompressionfix build error with DEFAULT_MAXZLIBMEM
  • BUG/MINORmux-h2advertise a larger connection window size
  • BUG/MINORmux-h2refrain from muxing during the preface
  • BUG/MINORhpackfix off-by-one in header name encoding length calculation
  • BUG/MEDIUMsampleDon't treat SMP_T_METH as SMP_T_STR.
  • BUG/MINORlb-mapfix unprotected update to server's score
  • BUG/MINORcfgparseFix the call to post parser of the last sections parsed
  • BUG/MINORcfgparseFix transition between 2 sections with the same name
  • BUG/MINORsslssl_sock_parse_clienthello ignores session id
  • BUG/MEDIUMmworkerfix several typos in mworker_cleantasks()
  • BUG/MEDIUMmworkerstop every tasks in the master
  • BUG/MEDIUMmworkerstop proxies which have no listener in the master
  • BUILDmodulesupdate HAPEE version macro to 1.8r2
  • MEDIUMmodulesprototype change for CLI parser
  • BUILDMakefilefix undefined TARGET
  • BUILDMakefileswitch to quiet mode by default for CC/LD/AR
  • BUILDMakefileadd $(Q) to clean, tags and cscope targets
  • BUILDMakefileadd the quiet mode to a few more targets
  • BUILDMakefilemake V=1 show some of the commands that are executed
  • MEDIUMthreadsclose the thread-waker pipe during deinit
  • BUG/MEDIUMhapee/mworkerinit the thread_sync_pipe
  • MEDIUMhapee/threadsimplement a deinit for the sync pipe
  • MINORmworkeronly close std{in,out,err} in daemon mode
  • BUG/MEDIUMmworkerdoes not abort() in mworker_pipe_register()
  • BUG/MINORcliforward the whole command on master CLI
  • BUG/MEDIUMlistenersCLOEXEC flag is not correctly set
  • BUG/MEDIUMmworkeravoid leak of client socket
  • REORGmworkerdeclare master variable in global.h
  • BUG/MEDIUMmworkerfix FD leak upon reload
  • BUG/MINORmworkerDo not attempt to close(2) fd -1
  • BUG/MINORmworkerfix FD leak and memory leak in error path
  • BUG/MINORcliFix memory leak
  • MINORcliadd a few missing includes in proto/cli.h
  • BUG/MEDIUMmworkerunregister the signals of main()
  • MEDIUMsignalsignal_unregister() removes every handlers
  • MINORcliadd mworker_accept_wrapper to 'show fd'
  • MINORmworkeruse ha_notice to announce a new worker
  • MINORlogintroduce ha_notice()
  • MEDIUMmworkerwait mode use standard init code path
  • MINORclishow master information in 'show proc'
  • MINORclidisplays uptime in `show proc`
  • MINORcliformat `show proc` to be more readable
  • MEDIUMlistenerssupport unstoppable listener
  • MEDIUMjobssupport unstoppable jobs for soft stop
  • BUG/MEDIUMclicrash when trying to access a worker
  • MEDIUMmworkerleave when the master die
  • MINORmworkerdisplays a message when a worker is forked
  • MEDIUMmworkerexit with the incriminated exit code
  • MINORmworkerdisplays more information when leaving
  • MEDIUMmworkerdoes not create the CLI proxy when no listener
  • MINORclican't connect to the target CLI
  • MINORclishow the number of reload in 'show proc'
  • MEDIUMcliworker socketpair is unstoppable
  • MINORstatsreport the number of active jobs and listeners in show info
  • MEDIUMcliwrite a prompt for the CLI proxy of the master
  • MEDIUMchannelreorder the channel analyzers for the cli
  • MEDIUMmworkerstop the master proxy in the workers
  • MEDIUMlistenersset O_CLOEXEC on the accepted FDs
  • MINORcliput @master @<relative pid> @!<pid> in the help
  • MEDIUMclienable show cli sockets for the master
  • MINORclidisplays sockpair@ in show cli sockets
  • MINORclihelper to write an response message and close
  • MEDIUMcliimplement 'mode cli' proxy analyzers
  • MEDIUMcli'show proc' displays processus
  • MEDIUMmworkerfind the server ptr using a CLI prefix
  • MEDIUMclidisable some keywords in the master
  • MEDIUMmworkercreate CLI listeners from argv[]
  • MEDIUMmworkerproxy for the master CLI
  • MEDIUMmworkeradd proc_list in global.h
  • MEDIUMmworkermove proc_list gen before proxies startup
  • MINORserverexport new_server() function
  • REORGmworkermove struct mworker_proc to global.h
  • MEDIUMmworkereach worker socketpair is a CLI listener
  • MINORmworkernumber of reload in the life of a worker
  • BUG/MEDIUMmworkerdon't poll on LI_O_INHERITED listeners
  • CLEANUPhaproxyRemove unused variable
  • BUILDsockpairsilence a build warning at -Wextra
  • TESTSadd a python wrapper for sockpair@
  • MEDIUMprotocolsockpair protocol
  • MEDIUMprotocoluse a custom AF_MAX to help protocol parser
  • MEDIUMmworkercall per_thread deinit in mworker_reload()
  • MINORmworkerdon't deinit the poller fd when in wait mode
  • MINORmworkerkeep and clean the listeners
  • MEDIUMmworkerreplace the master pipe by socketpairs
  • MEDIUMmworkermaster wait mode use its own initialization
  • MEDIUMstartupunify signal init between daemon and mworker mode
  • MEDIUMmworkernever block SIG{TERM,INT} during reload
  • MEDIUMmworkerblock SIGCHLD until the master is ready
  • MINORmworkermworker_cleanlisteners() delete the listeners
  • BUG/MINORmworkerno need to stop peers for each proxy
  • MEDIUMmworkeruse the haproxy poll loop
  • MEDIUMmworkerremove register/unregister signal functions
  • MINORstartupchange session/process group settings
  • BUG/MINORclidon't stop cli_gen_usage_msg() when kw->usage == NULL
  • MINORbackendimplement random-based load balancing
  • MINORhttpAdd support for 421 Misdirected Request
  • MINORsampleAdd strcmp sample converter
  • MINORexport localpeer as an environment variable
  • BUG/MEDIUMhpackfix encoding of accept-ranges field
  • BUG/MINORconfigCopy default error messages when parsing of a backend starts
  • BUG/MEDIUMMake sure stksess is properly aligned.
  • BUG/MINORconfigbetter detect the presence of the h2 pattern in npn/alpn
  • REGTESTadd a test for connections to a dispatch address
  • REGTESTadd the option to test only a specific set of files
  • CLEANUPfix typos in reg-tests
  • REGTESTfix scripts 1 and 3 to accept development version
  • REGTESTmake the IP+port logging test more reliable
  • REGTEST/MINORluaAdd reg testing files for 70d318c.
  • REGTEST/MINORAdd a reg testing file for 3e60b11.
  • REGEST/MINORAdd reg testing files.
  • REGTEST/MINORAdd a new class of regression testing files.
  • REGTEST/MINORMissing mandatory ignore_unknown_macro.
  • DOCregression testing: Add a short starting guide.
  • REGTEST/MINORUnexpected curl URL globling.
  • REGTEST/MINORWrong URI syntax.
  • REGTEST/MINORWrong URI in a reg test for SSL/TLS.
  • DOCAdd new REGTEST tag info about reg testing.
  • MINORreg-testsAdd a few regression testing files.
  • MINORreg-testsAdd reg-tests/README file.
  • REGTEST/MINORAdd levels to reg-tests target.
  • REGTEST/MINORSet HAPROXY_PROGRAM default value.
  • MINORtestsFirst regression testing file.
  • DOCadd documentation for prio_class and prio_offset sample fetches.
  • DOCupdate the roadmap about priority queues
  • MEDIUMqueueadjust position based on priority-class and priority-offset
  • MEDIUMadd set-priority-class and set-priority-offset
  • MINORqueuereplace the linked list with a tree
  • MINORqueuestore the queue index in the stream when enqueuing
  • MINORstreamrename {srv,prx}_queue_size to *_queue_pos
  • MINORqueuemake sure the pendconn is released before logging
  • MINORthreads/queueGet rid of THREAD_WANT_SYNC in the queue code.
  • MEDIUMqueueget rid of the pendconn lock
  • MINORqueueimplement pendconn queue locking functions
  • MINORqueueuse a distinct variable for the assigned server and the queue
  • MINORqueuemake sure pendconn->strm->pend_pos is always valid
  • DOCqueuedocument the expected locking model for the server's queue
  • MEDIUMqueuemake pendconn_free() work on the stream instead
  • MINORqueuecentralize dequeuing code a bit better
  • MINORdocAdd information about early-hint http-request action.
  • MINORhttpImplement early-hint http request rules.
  • MINORhttpMake new early-hint http-request action really be parsed.
  • MINORhttpAdd new early-hint http-request action.
  • MINORcacheAdd Age header.
  • DOCcacheMissing information about total-max-size and max-object-size
  • MINORshctxChange max. object size type to unsigned int.
  • MINORcacheAvoid usage of atoi() when parsing max-object-size.
  • DOCUpdate about the cache support for big objects.
  • MINORcacheAdd max-object-size option.
  • MINORshctxAdd a maximum object size parameter.
  • MINORcacheLarger HTTP objects caching.
  • MINORshctxShared objects block by block allocation.
  • MEDIUMlogadd a new raw format
  • MEDIUMlogsupport a new short format
  • MEDIUMlogadd support for logging to existing file descriptors
  • MINORlogreport the number of dropped logs in the stats
  • DOClogsthe format directive was missing from the second log part
  • MINORlogslightly improve error message syntax on log failure
  • BUG/MEDIUMlogdon't CLOEXEC the inherited FDs
  • MINORsslAdd payload support to set ssl ocsp-response
  • MINORmapAdd payload support to add map
  • MEDIUMcliAdd payload support
  • MINORsslset SSL_OP_PRIORITIZE_CHACHA
  • MINORssladd fetch 'ssl_fc_session_key' and 'ssl_bc_session_key'
  • MINORssldisable SSL sample fetches when unsupported
  • BUG/MEDIUMauth/threadsuse of crypt() is not thread-safe
  • BUG/MAJORhttphttp_txn_get_path() may deference an inexisting buffer
  • BUG/MINORonly auto-prefer last server if lb-alg is non-deterministic
  • BUG/MINORonly mark connections private if NTLM is detected
  • DOCcacheMissing information about total-max-size
  • BUG/MINORsslWrong usage of shctx_init().
  • BUG/MINORcacheWrong usage of shctx_init().
  • BUG/MINORcacheCrashes with total-max-size > 2047(MB).
  • BUILDMakefileadd the new ERR variable to force -Werror
  • BUG/MEDIUMh2Close connection if no stream is left an GOAWAY was sent.
  • BUG/MEDIUMpoolsFix the usage of mmap()) with DEBUG_UAF.
  • BUILDcompilerrename __unreachable() to my_unreachable()
  • DOCfix reference to map files in MAINTAINERS
  • MINORpeersuse defines instead of enums to appease clang.
  • MINORcfgparseWrite 130 as 128 as 0x82 and 0x80.
  • MINORserverUse memcpy() instead of strncpy().
  • BUILDMakefilesilence an option conflict warning with clang
  • BUILDMakefilespeed up compiler options detection
  • CLEANUPstick-tablesRemove unneeded double (()) around conditional clause
  • BUILDluasilence some compiler warnings after WILL_LJMP
  • BUILDluasilence some compiler warnings about potential null derefs (#2)
  • MINORluaall functions calling lua_yieldk() may return
  • BUILDcompileradd a new statement __unreachable()
  • BUILDpeerscheck allocation error during peers_init_sync()
  • BUILDstick-tablemake sure not to fail on task_new() during initialization
  • BUILDsslfix another null-deref warning in ssl_sock_switchctx_cbk()
  • BUILDsslfix null-deref warning in ssl_fc_cipherlist_str sample fetch
  • BUG/MINORclimake sure the getsock command is only called on connections
  • BUG/MINORtoolsfix set_net_port() / set_host_port() on IPv4
  • BUG/MEDIUMthreadsmake sure threads_want_sync is marked volatile
  • BUG/MEDIUMthreadsfix thread_release() at the end of the rendez-vous point
  • DOCFix a few typos
  • BUG/MEDIUMstreamdon't crash on out-of-memory
  • BUG/MEDIUMmworkersegfault receiving SIGUSR1 followed by SIGTERM.
  • BUG/MINORchecksqueues null-deref
  • BUG/MEDIUMCur/CumSslConns counters not threadsafe.
  • MEDIUMssladd support for ciphersuites option for TLSv1.3
  • BUG/MEDIUMbuffersMake sure we don't wrap in buffer_insert_line2/replace2.
  • BUG/MINORbackendcheck that the mux installed properly
  • BUG/MINORconnectionavoid null pointer dereference in send-proxy-v2
  • DOCclarify force-private-cache is an option
  • MINORthreadsMake sure threads_sync_pipe is initialized before using it.
  • MEDIUMluaAdd stick table support for Lua.
  • BUG/CRITICALhpackfix improper sign check on the header index value
  • MINORAdd srv_conn_free sample fetch
  • MINORadd be_conn_free sample fetch
  • BUG/MEDIUMpatternsfix possible double free when reloading a pattern list
  • DOCFix typos in lua documentation
  • BUG/MINORserverCrash when setting FQDN via CLI.
  • BUG/MAJORkqueueDon't reset the changes number by accident.
  • BUG/MEDIUMsnapshottake the proxy's lock while dumping errors
  • BUG/MINORhttp/threadsatomically increment the error snapshot ID
  • BUG/MINORdnscheck and link servers' resolvers right after config parsing
  • BUG/MEDIUMh2fix risk of memory leak on malformated wrapped frames
  • BUG/MEDIUMsessionfix reporting of handshake processing time in the logs
  • BUG/MINORstreamuse atomic increments for the request counter
  • MINORthreadimplement HA_ATOMIC_XADD()
  • BUG/MEDIUMECC cert should work with TLS < v1.2 and openssl >= 1.1.1
  • BUG/MEDIUMdns/serverfix incomatibility between SRV resolution and server state file
  • BUG/MEDIUMhluaDon't call RESET_SAFE_LJMP if SET_SAFE_LJMP returns 0.
  • BUG/MAJORthreadlua: Wrong SSL context initialization.
  • BUG/MEDIUMhluaMake sure we drain the output buffer when done.
  • BUG/MEDIUMluareset lua transaction between http requests
  • MINORfd cache: And the thread_mask with all_threads_mask.
  • BUG/MEDIUMmux_ptdereference the connection with care in mux_pt_wake()
  • BUG/MINORluaBad HTTP client request duration.
  • BUG/MEDIUMunixprovide a ->drain() function
  • DOCFix spelling error in configuration doc
  • BUG/MEDIUMcli/threadsprotect some server commands against concurrent operations
  • BUG/MEDIUMcli/threadsprotect all proxy commands against concurrent updates
  • BUG/MEDIUMluasocket timeouts are not applied
  • DOCsslUse consistent naming for TLS protocols
  • DOCdnsexplain set server ... fqdn requires resolver
  • BUG/MINORmapfix map_regm with backref
  • BUG/MEDIUMsslloading dh param from certifile causes unpredictable error.
  • BUG/MEDIUMsslfix missing error loading a keytype cert from a bundle.
  • BUG/MINORsslempty connections reported as errors.
  • BUG/MEDIUMclimake show fd thread-safe
  • MEDIUMhathreadsimplement a more flexible rendez-vous point
  • BUG/MEDIUMthreadsfix the no-thread case after the change to the sync point
  • MINORthreadsadd more consistency between certain variables in no-thread case
  • BUG/MEDIUMluapossible CLOSE-WAIT state with '\n' headers
  • MINORdnsnew DNS options to allow/prevent IP address duplication
  • MINORdnsfix wrong score computation in dns_get_ip_from_response
  • BUG/MEDIUMqueueprevent a backup server from draining the proxy's connections
  • BUG/MEDIUMserverscheck the queues once enabling a server
  • BUG/MEDIUMfdDon't modify the update_mask in fd_dodelete().
  • SCRIPTSgit-show-backportsadd missing quotes to echo
  • MEDIUMproxy_protocolConvert IPs to v6 when protocols are mixed
  • BUG/MEDIUMthreadsunbreak bind referencing an incorrect thread number
  • MINORthreadsmove nbthread parsing to hathreads.c
  • BUG/MEDIUMthreadsproperly fix nbthreads == MAX_THREADS
  • BUG/MINORthreadsHandle nbthread == MAX_THREADS.
  • BUG/MINORconfigstick-table is not supported in defaults section
  • BUG/MEDIUMh2prevent orphaned streams from blocking a connection forever
  • BUG/MEDIUMthreads/syncuse sched_yield when available
  • BUG/MINORserversDon't make server in a frontend fatal.
  • BUG/MEDIUMstatsdon't ask for more data as long as we're responding
  • BUG/MEDIUMstream-intdon't immediately enable reading when the buffer was reportedly full
  • MINORh2add the error code and the max/last stream IDs to show fd
  • BUG/MINORhttpSet brackets for the unlikely macro at the right place
  • BUG/MEDIUMthreadsFix the exit condition of the thread barrier
  • MINORdebugAdd checks for conn_stream flags
  • MINORdebugAdd check for CO_FL_WILL_UPDATE
  • BUILDGenerate sha256 checksums in publish-release
  • BUG/MINORunixMake sure we can transfer abns sockets on seamless reload.
  • BUG/MEDIUMh2make sure the last stream closes the connection after a timeout
  • BUG/MEDIUMh2never leave pending data in the output buffer on close
  • BUG/MEDIUMh2don't accept new streams if conn_streams are still in excess
  • MINORh2add the mux and demux buffer lengths on show fd
  • MINORh2keep a count of the number of conn_streams attached to the mux
  • BUG/MINORh2remove accidental debug code introduced with show_fd function
  • MINORh2implement a basic show_fd function
  • MINORmuxadd a show_fd function to dump debugging information for show fd
  • BUG/MINORsslproperly ref-count the tls_keys entries
  • MINORsystemdconsider exit status 143 as successful
  • MINORstick-tablesmake stktable_release() do nothing on NULL
  • BUG/MAJORstick_tableComplete incomplete SEGV fix
  • BUG/BUILDthreadsunbreak build without threads
  • BUG/MAJORStick-tables crash with segfault when the key is not in the stick-table
  • MINORthreadsBe sure to remove threads from all_threads_mask on exit
  • BUG/MEDIUMthreadsUse the sync point to check active jobs and exit
  • BUG/MAJORsslOpenSSL context is stored in non-reserved memory slot
  • BUG/MAJORsslRandom crash with cipherlist capture
  • BUG/MINORluaSegfaults with wrong usage of types.
  • BUG/MINORsignalsha_sigmask macro for multithreading
  • BUG/MINORdon't ignore SIG{BUS,FPE,ILL,SEGV} during signal processing
  • BUG/MEDIUMthreadshandle signal queue only in thread 0
  • MINORluaIncrease debug information
  • BUG/MAJORmapfix a segfault when using http-request set-map
  • MAJORhapee/spoeReintroduce the support of SPOP 1.0
  • DOCcontrib/modsecurityfew typo fixes
  • DOCSPOE.txtfix a typo
  • BUG/MINORcontrib/modsecurityupdate pointer on the end of the frame
  • BUG/MINORcontrib/mod_defenderupdate pointer on the end of the frame
  • BUG/MINORcontrib/modsecurityDon't reset the status code during disconnect
  • BUG/MINORcontrib/mod_defenderDon't reset the status code during disconnect
  • BUG/MINORcontrib/spoa_exampleDon't reset the status code during disconnect
  • MAJORspoeupgrade the SPOP version to 2.0 and remove the support for 1.0
  • BUG/MEDIUMlua/socketBuffer error, may segfault
  • BUG/MEDIUMlua/socketSheduling error on write: may dead-lock
  • BUG/MEDIUMlua/socketNotification error
  • BUG/MAJORluaDead lock with sockets
  • BUG/MEDIUMlua/socketwrong scheduling for sockets
  • MINORtask/notificationIs notifications registered ?
  • BUG/MEDIUMspoeReturn an error when the wrong ACK is received in sync mode
  • BUG/MEDIUMstick-tablesDecrement ref_cnt in table_* converters
  • BUG/MEDIUMlua/socketLength required read doesn't work
  • BUG/MEDIUMserversAdd srv_addr default placeholder to the state file
  • BUG/BUILDthreadsunbreak build without threads
  • BUG/MEDIUMdnsDelay the attempt to run a DNS resolution on check failure.
  • BUG/MEDIUMcachedon't cache when an Authorization header is present
  • BUG/MINORssl/luaprevent lua from affecting automatic maxconn computation
  • BUG/MEDIUMcontrib/modsecurityUse network order to encode/decode flags
  • BUG/MEDIUMcontrib/mod_defenderUse network order to encode/decode flags
  • BUG/MEDIUMspoeFlags are not encoded in network order
  • BUG/MINORluaSocket.send threw runtime error: 'close' needs 1 arguments.
  • BUG/MINORspoeMistake in error message about SPOE configuration
  • BUG/MEDIUMsslproperly protect SSL cert generation
  • BUG/MEDIUMhttpdon't always abort transfers on CF_SHUTR
  • BUG/MEDIUMpollersUse a global list for fd shared between threads.
  • MINORfdMake the lockless fd list work with multiple lists.
  • BUG/MINORluaensure large proxy IDs can be represented
  • BUG/MINORluaschedule socket task upon lua connect()
  • BUG/MEDIUMtaskDon't free a task that is about to be run.
  • BUG/MINORmapcorrectly track reference to the last ref_elt being dumped
  • DOC/MINORclean up LUA documentation re: servers & array/table.
  • BUG/MINORluaPut tasks to sleep when waiting for data
  • BUG/MEDIUMthreadsFix the sync point for more than 32 threads
  • BUG/MINORchecksFix check->health computation for flapping servers
  • BUG/MINORspoeFix parsing of dontlog-normal option
  • BUG/MINORspoeFix counters update when processing is interrupted
  • BUG/MINORconfigdisable http-reuse on TCP proxies
  • BUG/MINORlua/threadsMake lua's tasks sticky to the current thread
  • BUG/MEDIUMh2implement missing support for chunked encoded uploads
  • MINORh2detect presence of CONNECT and/or content-length
  • BUG/MEDIUMluaFix segmentation fault if a Lua task exits
  • BUG/MINORlogt_idle (%Ti) is not set for some requests
  • BUG/MAJORchannelFix crash when trying to read from a closed socket
  • BUG/MINORpatternAdd a missing HA_SPIN_INIT() in pat_ref_newid()
  • BUG/CRITICALh2fix incorrect frame length check
  • DOCluaupdate the links to the config and Lua API
  • BUILDsampleavoid build warning in sample.c
  • MEDIUMsampleExtend functionality for field/word converters
  • MINORproxyAdd fe_defbe fetcher
  • BUG/MEDIUMkqueueWhen adding new events, provide an output to get errors.
  • MINORcliEnsure the CLI always outputs an error when it should
  • BUG/MINORcliGuard against NULL messages when using CLI_ST_PRINT_FREE
  • BUG/MINORhttpReturn an error in proxy mode when url2sa fails
  • BUG/MEDIUMconnectionMake sure we have a mux before calling detach().
  • BUG/MEDIUMthreadsFix the max/min calculation because of name clashes
  • MINORserversSupport alphanumeric characters for the server templates names
  • BUG/MAJORcachealways initialize newly created objects
  • MINORspoeAdd counters to log info about SPOE agents
  • MINORspoeuse agent's logger to log SPOE messages
  • MINORspoeAdd support for option dontlog-normal in the SPOE agent section
  • MINORspoeAdd loggers dedicated to the SPOE agent
  • MINORspoeAdd options to store processing times in variables
  • MINORspoeAdd metrics in to know time spent in the SPOE
  • BUG/MINORspoeDon't forget to decrement fpa when a processing is interrupted
  • BUG/MINORspoeRegister the variable to set when an error occurred
  • BUG/MINORspoeDon't release the context buffer in .check_timeouts callbaclk
  • BUG/MINORspoeInitialize variables used during conf parsing before any check
  • CLEANUPspoeRemove unused label retry
  • MINORlogKeep the ref when a log server is copied to avoid duplicate entries
  • MINORlogmove 'log' keyword parsing in dedicated function
  • BUG/MAJORcachefix random crashes caused by incorrect delete() on non-first blocks
  • BUG/MINORfdDon't clear the update_mask in fd_insert.
  • BUG/MINORcachefix show cache output
  • BUG/MINORemail-alertSet the mailer port during alert initialization
  • BUG/MINORcheckscheck the conn_stream's readiness and not the connection
  • BUG/MEDIUMh2always add a stream to the send or fctl list when blocked
  • BUILD/MINORthreadsalways export thread_sync_io_handler()
  • BUG/MEDIUMh2don't consider pending data on detach if connection is in error
  • BUG/MEDIUMh2/threadsnever release the task outside of the task handler
  • MINORh2fuse h2s_detach() and h2s_free() into h2s_destroy()
  • MINORh2always call h2s_detach() in h2_detach()
  • BUG/MAJORh2remove orphaned streams from the send list before closing
  • MINORh2provide and use h2s_detach() and h2s_free()
  • CLEANUPh2rename misleading h2c_stream_close() to h2s_close()
  • BUG/MINORhpackfix harmless use of uninitialized value in hpack_dht_insert
  • BUILD/MINORclifix a build warning introduced by last commit
  • MINORclimake show fd report the mux and mux_ctx pointers when available
  • MINORcli/threadsmake show fd report thread_sync_io_handler instead of unknown
  • BUILD/MINORfix build when USE_THREAD is not defined
  • BUG/MINORlua funtion hlua_socket_settimeout don't check negative values
  • BUG/MINORluathe function returns anything
  • BUG/MINORlistenerDon't decrease actconn twice when a new session is rejected
  • BUG/MINORh2ensure we can never send an RST_STREAM in response to an RST_STREAM
  • BUG/MEDIUMh2properly account for DATA padding in flow control
  • BUG/MINORcliEnsure all command outputs end with a LF
  • BUG/MINORpools/threadsdon't ignore DEBUG_UAF on double-word CAS capable archs
  • DOCdon't suggest using http-server-close
  • BUG/MEDIUMfd/threadsensure the fdcache_mask always reflects the cache contents
  • DOClogmore than 2 log servers are allowed
  • BUILD/BUGenable -fno-strict-overflow by default
  • MINORlogstop emitting alerts when it's not possible to write on the socket
  • BUG/MEDIUMthreads/queuewake up other threads upon dequeue
  • BUG/MINORtcp-checkuse the server's service port as a fallback
  • BUG/MEDIUMtcp-checksingle connect rule can't detect DOWN servers
  • BUG/MINORluareturn bad error messages
  • BUG/MINORspoa-exampleunexpected behavior for more than 127 args
  • BUILDsslFix build with OpenSSL without NPN capability
  • BUG/MINORcliFix a crash when sending a command with too many arguments
  • BUG/MINORseemless reload: Fix crash when an interface is specified.
  • BUG/MINORdnsdon't downgrade DNS accepted payload size automatically
  • BUG/MAJORthreads/queueFix thread-safety issues on the queues management
  • BUG/MEDIUMthreads/unixFix a deadlock when a listener is temporarily disabled
  • BUG/MINORforce-persist and ignore-persist only apply to backends
  • BUG/MEDIUMfix a 100% cpu usage with cpu-map and nbthread/nbproc
  • BUG/MINORcliFix a typo in the 'set rate-limit' usage
  • CLEANUPcliRemove a leftover debug message
  • CLEANUPsslRemove a duplicated #include
  • BUG/MINORcliFix a crash when passing a negative or too large value to show fd
  • BUG/MEDIUMh2also arm the h2 timeout when sending
  • BUG/MINORunixDon't mess up when removing the socket from the xfer_sock_list.
  • CLEANUP.gitignoreIgnore binaries from the contrib directory
  • BUG/MINORsessionFix tcp-request session failure if handshake.
  • BUILD/MINORfix Lua build on Mac OS X (again)
  • MINOR/BUILDfix Lua build on Mac OS X
  • MINORsystemdAdd SystemD's SystemCallFilter option to the unit file
  • MINORsystemdAdd SystemD's Protect*= options to the unit file
  • MINORsystemdAdd section for SystemD sandboxing to unit file
  • BUG/MEDIUMbufferFix the wrapping case in bi_putblk
  • BUG/MEDIUMbufferFix the wrapping case in bo_putblk
  • BUG/MEDIUMh2always consume any trailing data after end of output buffers
  • MINORstatsdisplay the number of threads in the statistics.
  • MINORmodulesadd a new label MODULES_LOCK to the lock_label enum
  • BUG/MINORh2Set the target of dbuf_wait to h2c
  • MINORdebug/poolsmake DEBUG_UAF also detect underflows
  • BUG/MINORdebug/poolsproperly handle out-of-memory when building with DEBUG_UAF
  • DOCcfgparseWarn on option (tcp|http)log in backend
  • DOCluanew prototype for function register_action()
  • BUG/MEDIUMssl/samplessl_bc_* fetch keywords are broken.
  • BUG/MEDIUMhttpSwitch the HTTP response in tunnel mode as earlier as possible
  • BUG/MINORssl/threadsMake management of the TLS ticket keys files thread-safe
  • BUG/MEDIUMsslShutdown the connection for reading on SSL_ERROR_SYSCALL
  • BUG/MEDIUMsslDon't always treat SSL_ERROR_SYSCALL as unrecovarable.
  • BUG/MINORthreadsfix missing thread lock labels for 1.8
  • BUG/MEDIUMspoeRemove idle applets from idle list when HAProxy is stopping
  • BUG/MINORinitAdd missing brackets in the code parsing -sf/-st
  • BUG/MEDIUMthreadsfix the double CAS implementation for ARMv7
  • BUG/MINORfd/threadsproperly lock the FD before adding it to the fd cache.
  • BUILDfd/threadsfix breakage build breakage without threads
  • MINORfdreorder fd_add_to_fd_list()
  • MINORfdremove the unneeded last CAS when adding an fd to the list
  • BUG/MINORfd/threadsproperly dereference fdcache as volatile
  • MINORfdmove the fd_{add_to,rm_from}_fdlist functions to fd.c
  • MEDIUMpolleruse atomic ops to update the fdtab mask
  • MEDIUMfdmake updt_fd_polling() use atomics
  • CLEANUPfdremove the now unused fd_compute_new_polled_status() function
  • MINORselectget rid of the now useless fd_compute_new_polled_status()
  • MINORpollget rid of the now useless fd_compute_new_polled_status()
  • MINORkqueueget rid of the now useless fd_compute_new_polled_status()
  • MINORepollget rid of the now useless fd_compute_new_polled_status()
  • MAJORfdcompute the new fd polling state out of the fd lock
  • MEDIUMfd/threadsMake sure we don't miss a fd cache entry.
  • MAJORfd/threadsMake the fdcache mostly lockless.
  • MINORpools/threadsImplement lockless memory pools.
  • MINORthreadsadd test and set/reset operations
  • MINORthreadsIntroduce double-width CAS on x86_64 and arm.
  • MINORfdpass the iocb and owner to fd_insert()
  • MEDIUMpolldon't use the old FD state anymore
  • MEDIUMselectdon't use the old FD state anymore
  • MEDIUMfduse atomic ops for hap_fd_{clr,set} and remove poll_lock
  • MEDIUMselectmake use of hap_fd_* functions
  • MINORfdmove the hap_fd_{clr,set,isset} functions to fd.h
  • CLEANUPfdremove the unused new field
  • MINORpollmore accurately compute the new maxfd in the loop
  • CLEANUPfd/threadsremove the now unused fdtab_lock
  • MEDIUMpollingstart to move maxfd computation to the pollers
  • MINORfddon't report maxfd in alert messages
  • MINORpollingmake epoll and kqueue not depend on maxfd anymore
  • MINORssl/sampleadds ssl_bc_is_resumed fetch keyword.
  • MINORsampleadd a new concat converter
  • MINORconfigAdd support for ARGT_MSK6
  • MINORstandardAdd str2mask6 function
  • CLEANUPstandardUse len2mask4 in str2mask
  • MINORconfigEnable tracking of up to MAX_SESS_STKCTR stick counters.
  • MINORstick-tablesAdds support for new gpc1 and gpc1_rate counters.
  • MEDIUMsampleAdd IPv6 support to the ipmask converter
  • MINORsampleadd date_us sample
  • MINORsamplerename the len converter to length
  • MINORsampleadd len converter
  • MINORspoeAdd max-waiting-frames directive in spoe-agent configuration
  • MEDIUMspoeUse an ebtree to manage idle applets
  • MINORspoeCount the number of frames waiting for an ack for each applet
  • MINORspoeReplace sending_rate by a frequency counter
  • MINORspoeAlways link a SPOE context with the applet processing it
  • MINORspoeRemove check on min_applets number when a SPOE context is queued
  • MINORspoeDon't queue a SPOE context if nothing is sent
  • MINORspoeadd register-var-names directive in spoe-agent configuration
  • MINORspoeadd force-set-var option in spoe-agent configuration
  • MEDIUM51duse fiftyoneDegreesProvider to access the pool and dataset
  • MINORconfigreport when monitor fail rules are misplaced
  • BUILDmodulesupdate HAPEE version macro to 1.8r1
  • MINORmodulesAdd the ability to register variable and functions.
  • MINORmodulesreport more precise errors about module API mismatch
  • MINORmodulesRemove Gcc warnings about unused variables
  • BUILDmodulesRemove modules-config.h from DEP variable to generate .i file
  • BUILDmodulesAdd macors to compute numerical value of a HAPEE version
  • BUILDmodulesOnly define the all target if MODULES isn't defined.
  • MEDIUMmodules'modules list' on the cli shows currently loaded modules
  • BUILDmodulesstrip the MODULE_COPTS before hashing them
  • BUILDmodulesadd make module-copts to show module options
  • BUILDmodulestake pkg-config out of install-inc
  • MINORmodulesfix incorrect API HASH generation with certain awk versions
  • MODULESBUILDmodules: Add version of the module in the defines
  • BUILDmodulesuse gawk insteads of awk
  • BUILDmodulesmake modules support optional
  • MINORmodulesDon't use constructor/destructor anymore...
  • MINORmodulesTerminate properly loaded modules if possible
  • MINORmodulesKeep a list of loaded modules to unload them when HAProxy is stopped
  • MINORmodulesRegister function called after the main config check
  • MEDIUMmodulesmodules: Add memory reservation support for the modules
  • MEDIUMmodulesmodules: Add modules support
  • BUG/MINORconfigdon't emit a warning when global stats is incompletely configured
  • DOCMention -Ws in the list of available options
  • DOCDescribe routing impact of using interface keyword on bind lines
  • MINORinitemit warning when -sf/-sd cannot parse argument
  • BUG/MEDIUMstandardFix memory leak in str2ip2()
  • BUG/MINORtime/threadsensure the adjusted time is always correct
  • BUG/MEDIUMspoeAllow producer to read and to forward shutdown on request side
  • BUG/MEDIUMspoeAlways try to receive or send the frame to detect shutdowns
  • BUG/MINORepoll/threadsonly call epoll_ctl(DEL) on polled FDs
  • BUG/MINORthreadsUpdate labels array because of changes in lock_label enum
  • BUG/MINORcliuse global.maxsock and not maxfd to list all FDs
  • CLEANUPFix typo in ARGT_MSK6 comment
  • BUG/MINORsampleFix output type of c_ipv62ip
  • CLEANUPsampleFix outdated comment about sample casts functions
  • CLEANUPsampleFix comment encoding of sample.c
  • BUILDkqueue/threadsAdd test on MAX_THREADS to avoid warnings when complied without threads
  • BUILDepoll/threadsAdd test on MAX_THREADS to avoid warnings when complied without threads
  • MINORthreadsUse __decl_hathreads instead of #ifdef/#endif
  • BUG/MINORkqueue/threadsDon't forget to close kqueue_fd[tid] on each thread
  • BUG/MEDIUMchecksDon't try to release undefined conn_stream when a check is freed
  • BUG/MEDIUMthreads/serverFix deadlock in srv_set_stopping/srv_set_admin_flag
  • BUG/MINORthreadsalways set an owner to the thread_sync pipe
  • MINORthreadsFix build when we're not compiling with threads.
  • BUG/MINORmworkeronly write to pidfile if it exists
  • BUG/MEDIUMthreads/mworkerfix a race on startup
  • BUG/MEDIUMkqueue/threadsuse one kqueue_fd per thread
  • BUG/MEDIUMepoll/threadsuse one epoll_fd per thread
  • MINORfdadd a bitmask to indicate that an FD is known by the poller
  • BUG/MEDIUMfdmaintain a per-thread update mask
  • BUG/MEDIUMthreads/pollingUse fd_cache_mask instead of fd_cache_num
  • MINORthreads/fdUse a bitfield to know if there are FDs for a thread in the FD cache
  • MINORglobaladd some global activity counters to help debugging
  • MINORthreadsadd a MAX_THREADS define instead of LONGBITS
  • MINORglobal/threadsmove cpu_map at the end of the global struct
  • MINORserversDon't report duplicate dyncookies for disabled servers.
  • BUG/MEDIUMpeersfix expire date wasn't updated if entry is modified remotely.
  • BUG/MINORpolltoo large size allocation for FD events
  • CONTRIBdebugfix a few flags definitions
  • DOCclarify the scope of ssl_fc_is_resumed
  • BUG/MEDIUMstreamproperly handle client aborts during redispatch
  • BUILD/MINORancient gcc versions atomic fix
  • MINORhathreadsadd support for gcc < 4.7
  • BUG/MEDIUMmworkerexecvp failure depending on argv[0]
  • MINORdnsHandle SRV record weight correctly.
  • BUG/MINORluaFix return value of Socket.settimeout
  • BUG/MEDIUMluaFix IPv6 with separate port support for Socket.connect
  • DOCluaFix typos in comments of hlua_socket_receive
  • BUG/MINORluaFix default value for pattern in Socket.receive
  • BUG/MEDIUMsslcache doesn't release shctx blocks
  • BUILDsslsilence a warning when building without NPN nor ALPN support
  • BUG/MEDIUMh2properly handle the END_STREAM flag on empty DATA frames
  • MEDIUMh2prepare a graceful shutdown when the frontend is stopped
  • BUG/MAJORhpackdon't return direct references to the dynamic headers table
  • BUG/MEDIUMhttpdon't automatically forward request close
  • MINORdon't close stdio anymore
  • BUG/MEDIUMmworkerdon't close stdio several time
  • BUG/MEDIUMh2ensure we always know the stream before sending a reset
  • DOC/MINORconfigurationtypo, formatting fixes
  • BUG/MEDIUMh2improve handling of frames received on closed streams
  • BUG/MEDIUMh2properly handle and report some stream errors
  • BUG/MEDIUMchecksproperly set servers to stopping state on 404
  • BUG/MAJORconnectionrefine the situations where we don't send shutw()
  • BUG/MEDIUMcachedon't cache the response on no-cache=set-cookie
  • BUG/MEDIUMcacherespect the request cache-control header
  • BUG/MEDIUMcachereplace old object on store
  • BUG/MEDIUMcachedo not try to retrieve host-less requests from the cache
  • MINORhttpadd a function to check request's cache-control header field
  • BUG/MINORcachedo not force the TX_CACHEABLE flag before checking cacheability
  • BUG/MINORhttpproperly detect max-age=0 and s-maxage=0 in responses
  • BUG/MINORhttpdo not ignore cache-control: public
  • MINORhttpstart to compute the transaction's cacheability from the request
  • MINORhttpupdate the list of cacheable status codes as per RFC7231
  • MINORhttpadjust the list of supposedly cacheable methods
  • BUG/MEDIUMluafix crash when using bogus mode in register_service()
  • BUG/MEDIUMchecksa server passed in maint state was not forced down.
  • MEDIUMnetscaleradd support for standard NetScaler CIP protocol
  • MEDIUMnetscalerdo not analyze original IP packet size
  • MINORnetscalercheck in one-shot if buffer is large enough for IP and TCP header
  • BUG/MEDIUMstreamdon't consider abortonclose on muxes which close cleanly
  • MINORstream-intset flag SI_FL_CLEAN_ABRT when mux supports clean aborts
  • MINORmuxadd flags to describe a mux's capabilities
  • BUG/MINORh2properly report a stream error on RST_STREAM
  • CONTRIBhalogFix compiler warnings in halog.c
  • CONTRIBiprangeFix compiler warning in iprange.c
  • BUG/MAJORnetscaleraddress truncated CIP header detection
  • BUG/MEDIUMnetscaleruse the appropriate IPv6 header size
  • MINORnetscalerrename cip_len to clarify its uage
  • MINORnetscalerremove the use of cip_magic only used once
  • MINORnetscalerrespect syntax
  • DOC/MINORintrotypo, wording, formatting fixes
  • BUG/MEDIUMmworkerSet FD_CLOEXEC flag on log fd
  • BUILD/MINORMakefile : enabling USE_CPU_AFFINITY
  • BUGMINORhttp: don't check http-request capture id when len is provided
  • BUGMAJORlb_map: server map calculation broken
  • BUG/MINORstream-intdon't try to receive again after receiving an EOS
  • BUG/MEDIUMh2fix stream limit enforcement
  • BUG/MEDIUMhttpdon't disable lingering on requests with tunnelled responses
  • BUG/MEDIUMh2don't close after the first DATA frame on tunnelled responses
  • BUG/MEDIUMh2don't switch the state to HREM before end of DATA frame
  • MINORh2don't demand that a DATA frame is complete before processing it
  • BUG/MEDIUMh2support uploading partial DATA frames
  • MINORh2store the demux padding length in the h2c struct
  • BUG/MEDIUMh2debug incoming traffic in h2_wake()
  • BUG/MEDIUMh2work around a connection API limitation
  • BUG/MEDIUMh2enable recv polling whenever demuxing is possible
  • BUG/MEDIUMh2automatically set CS_FL_RCV_MORE when the output buffer is full
  • BUG/MEDIUMstream-intalways set SI_FL_WAIT_ROOM on CS_FL_RCV_MORE
  • MINORconn_streamadd new flag CS_FL_RCV_MORE to indicate pending data
  • BUG/MEDIUMlua/notificationmemory leak
  • DOCnotificationsadd precisions about thread usage
  • MINORsystemdremove comment about HAPROXY_STATS_SOCKET
  • BUG/MEDIUMthreads/varsFix deadlock in register_name
  • BUG/MEDIUMemail-alertdon't set server check status from a email-alert task
  • CONTRIBhalogAdd help text for -s switch in halog program
  • MINORmworkerImprove wording in `void mworker_wait()`
  • MINORmworkerUpdate messages referencing exit-on-failure
  • BUG/MEDIUMh2fix handling of end of stream again
  • BUG/MEDIUMpeersset NOLINGER on the outgoing stream interface
  • BUG/MEDIUMchecksa down server going to maint remains definitely stucked on down state.
  • BUG/MEDIUMssl engines: Fix async engines fds were not considered to fix fd limit automatically.
  • BUG/MEDIUMmworkeralso close peers sockets in the master
  • BUG/MINORsslsupport tune.ssl.cachesize 0 again
  • BUG/MAJORhpackdon't pretend large headers fit in empty table
  • BUG/MINORactionDon't check http capture rules when no id is defined
  • BUG/MINORh2use the H2_F_DATA_* macros for DATA frames
  • BUG/MEDIUMh2do not accept upper case letters in request header names
  • BUG/MEDIUMh2remove connection-specific headers from request
  • BUG/MINORh2reject response pseudo-headers from requests
  • BUG/MINORh2properly check PRIORITY frames
  • BUG/MINORh2reject incorrect stream dependencies on HEADERS frame
  • BUG/MINORh2do not accept SETTINGS_ENABLE_PUSH other than 0 or 1
  • BUG/MEDIUMh2enforce the per-connection stream limit
  • BUG/MINORh2the TE header if present may only contain trailers
  • BUG/MINORh2fix a typo causing PING/ACK to be responded to
  • BUG/MINORh2:path must not be empty
  • BUG/MINORh2try to abort closed streams as soon as possible
  • BUG/MINORh2immediately close if receiving GOAWAY after the last stream
  • BUG/MAJORh2correctly check the request length when building an H1 request
  • BUG/MINORhpackdynamic table size updates are only allowed before headers
  • BUG/MINORhpackreject invalid header index
  • BUG/MINORhpackmust reject huffman literals padded with more than 7 bits
  • BUG/MINORhpackfix debugging output of pseudo header names
  • BUG/MEDIUMchecksBe sure we have a mux if we created a cs.
  • BUILDFix LDFLAGS vs. LIBS re linking order in various makefiles
  • BUG/MAJORthreadBe sure to request a sync between threads only once at a time
  • MINORthreadsFix pthread_setaffinity_np on FreeBSD.
  • BUG/MINORmworkerdetach from tty when in daemon mode
  • BUG/MINORmworkerfix validity check for the pipe FDs
  • BUILD/MINORhaproxycompiling config cpu parsing handling when needed
  • BUG/MAJORthread/peersfix deadlock on peers sync.
  • BUG/MEDIUMpeersfix some track counter rules dont register entries for sync.
  • BUG/MEDIUMh2don't report an error after parsing a 100-continue response
  • BUG/MEDIUMthreads/peersdecrement, not increment jobs on quitting
  • BUG/MINORsslCO_FL_EARLY_DATA removal is managed by stream
  • BUILD/MINORhaproxy : FreeBSD/cpu affinity needs pthread_np header
  • BUG/MEDIUMstreamfix session leak on applet-initiated connections
  • BUILDchecksdon't include server.h
  • BUG/MEDIUMcachebad computation of the remaining size
  • BUG/MEDIUMssldon't allocate shctx several time
  • BUG/MEDIUMtcp-checkDon't lock the server in tcpcheck_main
  • BUILD/MINORdeviceatlasenable thread support
  • DOCcacheupdate sections and fix some typos
  • BUG/MEDIUMkqueueDon't bother closing the kqueue after fork.
×

About the new layout

For 2025, we're happy to introduce a redesigned HAProxy Configuration Manual!

The new manual enhances the user experience by providing more help for keywords, including more details about context, usage, and syntax. New search filters help you find keywords faster, with separate coverage for each variant.

If you would prefer to use the older layout click here.