Search filters

Type

Section

Actions

Changelog - HAProxy Enterprise latest

#2025/01/23 : 3.0r1 (1.0.0-339.466)

  • BUG/MEDIUMmux-h1Properly close H1C if an error is reported before sending data
  • BUILDquicMove an ASSUME_NONNULL() for variable which is not null
  • MINORquicAdd a BUG_ON() on quic_tx_packet refcount
  • BUG/MINORquicensure a detached coalesced packet can't access its neighbours
  • BUG/MINORinitset HAPROXY_STARTUP_VERSION from the variable, not the macro
  • BUG/MAJORlog/sinkpossible sink collision in sink_new_from_srv()
  • BUG/MAJORquicreject too large CRYPTO frames
  • BUG/MEDIUMpromexUse right context pointers to dump backends extra-counters
  • BUG/MEDIUMstktablefix missing lock on some table converters
  • BUG/MINORquicreject NEW_TOKEN frames from clients
  • BUG/MINORstktablefix big-endian compatiblity in smp_to_stkey()

#2025/01/09 : 3.0r1 (1.0.0-339.455)

  • BUILDactivity/memprofilefix a build warning in the posix_memalign handler
  • MINORactivity/memprofilemonitor non-portable calls as well
  • MINORactivity/memprofilealso monitor strdup() activity
  • DEVsockAdd a debug counter to track strange flag on fd during connect()
  • MINORdebug/clireplace debug dev counters with debug counters
  • MINORdebugadd debug dev counters to list code counters
  • MINORdebugadd a new debug macro COUNT_IF()
  • MEDIUMdebugadd match counters for BUG_ON/WARN_ON/CHECK_IF
  • CLEANUPdebugmake the BUG_ON() macros check the condition in the outer one
  • MINORsampleextend the when converter to support an ACL
  • MINORaclexport find_acl_default()
  • MINORsampleadd the when converter to condition some expressions
  • MINORmux-h1Add support of the debug string for logs
  • MINORmux-quicmeasure QCS lifetime and its blocking state
  • MINORtimedefine tot_time structure
  • MINORquicdump quic_conn debug string for logs
  • MINORmux-quicimplement debug string for logs
  • MINORmux-quicdefine dump functions for QCC and QCS
  • MINORmux-h2implement the debug string for logs
  • MINORstconnadd a new pair of sf functions {bs,fs}.debug_str
  • BUG/MEDIUMh1-htxProperly handle bodyless messages
  • BUG/MEDIUMpromex/resolversDon't dump metrics if no nameserver is defined
  • MINORconfigAlert about extra arguments for errorfile and errorloc
  • DOCconfigadd missing track-sc0 in action keywords matrix
  • BUG/MINORstatsfix segfault caused by uninitialized value in show schema json
  • BUG/MEDIUMqueueMake process_srv_queue return the number of streams
  • BUG/MINORh2/rhttpfix HTTP2 conn counters on reverse
  • DOCconfigadd tune.lua.burst-timeout to the list of global parameters
  • DOCconfigreorder tune.lua.* keywords by alphabetical order
  • DOCconfigadd example for server track keyword
  • BUG/MEDIUMqueuesDo not use pendconn_grab_from_px().
  • BUG/MEDIUMqueuesMake sure we call process_srv_queue() when leaving
  • BUG/MEDIUMstconnOnly consider I/O timers to update stream's expiration date
  • REGTESTSssladd a PEM with mix of LF and CRLF line endings
  • BUG/MINORclicli_snd_buf: preserve \r\n for payload lines
  • BUG/MEDIUMclockmake sure now_ms cannot be TICK_ETERNITY
  • BUG/MEDIUMstats/serveruse watcher to track server during stats dump
  • MINORlistdefine a watcher type
  • BUG/MINORstatsdecrement srv refcount on stats-file release
  • BUG/MEDIUMstconnDon't forward shut for SC in connecting state

#2024/12/17 : 3.0r1 (1.0.0-339.415)

  • MINORssl/cliadd -A to the 'show ssl sni' command description
  • MINORssl/cliallow to filter expired certificates with 'show ssl sni'
  • MINORssladd utils functions to extract X509 notAfter date
  • MINORssl/cliadd negative filters to show ssl sni
  • CLEANUPsslfix comment in 'show ssl sni'
  • DOCmanagementfix typos and paragraph ordering in 'show ssl sni'
  • MEDIUMssl/clishow ssl sni list the loaded SNI in frontends
  • MINORssladd notBefore and notAfter utility functions
  • MINORhapee/modulesreport the per-stream allocated size for each module
  • BUG/MINORhapee/modulesdo not send trailing LFs on modules list

#2024/12/16 : 3.0r1 (1.0.0-339.405)

  • BUG/MINORserver-stateFix expiration date of srvrq_check tasks
  • CLEANUPmux-h2/tracesreword certain ambiguous traces
  • MINORmux-h2/tracesadd a missing trace on negative initial window size
  • BUG/MINORquicremove startup alert if conn socket-owner unsupported
  • BUG/MINORsignalregister default handler for SIGINT in signal_init()
  • BUG/MINORh1-htxUse default reason if not set when formatting the response
  • BUG/MEDIUMhttp-anaReset request flag about data sent to perform a L7 retry
  • BUG/MEDIUMevent_hdlfix uninitialized value in async mode when no data is provided
  • BUG/MINORlogfix lf_text() behavior with empty string
  • MINORmux-quicDon't send an emtpy H3 DATA frame during zero-copy forwarding

#2024/12/05 : 3.0r1 (1.0.0-339.395)

  • MINORstktableimplement recv-only table option

#2024/11/27 : 3.0r1 (1.0.0-337.394)

  • BUG/MEDIUMsockRemove FD_POLL_HUP during connect() if FD_POLL_ERR is not set
  • BUG/MEDIUMhttp-anaDon't release too early the L7 buffer
  • DEVlags/show-sess-to-flagsProperly handle fd state on server side
  • BUG/MAJORquicfix wrong packet building due to already acked frames

#2024/11/22 : 3.0r1 (1.0.0-337.390)

  • BUG/MAJORmux-h1Properly handle wrapping on obuf when dumping the first-line
  • BUG/MEDIUMpools/memprofilealways clean stale pool info on pool_destroy()
  • MINORactivity/memprofileoffer a function to unregister stale info
  • BUG/MINORactivity/memprofilereinitialize the free calls on DSO summary
  • BUG/MEDIUMwdtfix the stuck detection for warnings
  • BUG/MEDIUMdebugdon't set the STUCK flag from debug_handler()
  • DOCconfigImprove documentation of tune.http.maxhdr directive
  • BUG/MEDIUMh3Increase max number of headers when sending headers
  • BUG/MEDIUMh3Properly limit the number of headers received
  • BUG/MEDIUMmux-h2Check the number of headers in HEADERS frame after decoding
  • BUG/MEDIUMmux-h2Increase max number of headers when encoding HEADERS frames
  • BUG/MINORhttp-anaAdjust the server status before the L7 retries
  • DOCconfigurationwrap long line for strstr() conditional expression
  • DOCconfigurationexplain quotes and spaces in conditional blocks
  • DOCluafix yield-dependent methods expected contexts
  • DOCconfigMove fs.* and bs.* in section about L5 samples
  • DOCconfigMove wait_end in section about internal samples
  • DOCconfigSlightly improve the %Tr documentation
  • BUG/MINORhttp_anaReport -1 for %Tr for invalid response only
  • DOCconfigFix a typo in 1.3.1. The Request line
  • DOCconfigA a space before ':' for {bs,fs}.aborted and {bs,fs}.rst_code
  • BUG/MINORpeersmake sure to always apply offsets to now_ms in expiration
  • BUG/MINORmux_quicmake sure to always apply offsets to now_ms in expiration
  • BUG/MEDIUMmailersmake sure to always apply offsets to now_ms in expiration
  • BUG/MEDIUMchecksmake sure to always apply offsets to now_ms in expiration
  • BUG/MINORDon't report early srv aborts on request forwarding in DONE state
  • BUG/MEDIUMmux-h2Don't send RST_STREAM frame for streams with no ID

#2024/11/13 : 3.0r1 (1.0.0-337.363)

  • BUG/MEDIUMresolversInsert a non-executed resulution in front of the wait list
  • BUG/MINORclidon't show sockpairs in HAPROXY_CLI and HAPROXY_MASTER_CLI
  • BUG/MEDIUMquicprevent crash due to CRYPTO parsing error
  • BUG/MINORguid/serverensure thread-safety on GUID insert/delete
  • CLEANUPguidremove global tree export
  • BUG/MINORquicrepeat packet parsing to deal with fragmented CRYPTO
  • MINORquicextend return value of CRYPTO parsing
  • MINORquicuse dynamically allocated frame on parsing
  • MINORquicsimplify qc_parse_pkt_frms() return path
  • BUG/MEDIUMquicsupport wait-for-handshake
  • BUG/MINORstreamunblock stream on wait-for-handshake completion
  • MINORquicnotify connection layer on handshake completion
  • BUG/MEDIUMpatternprevent uninitialized reads in pat_match_{str,beg}
  • BUG/MINORhapeeMakefile: bad substitution for MODVERSION variable
  • BUG/MINORhapeerelax __vers symbol check
  • MINORdebugmove the recover now warn message after the optional notes
  • BUILDMissing inclusion header for ssize_t type
  • BUILDdebugalso declare strlen() in __ABORT_NOW()
  • DEBUGwdtadd a stats counter BlockedTrafficWarnings in show info
  • DEBUGwdtmake the blocked traffic warning delay configurable
  • DEBUGclimake it possible for debug dev loop to trigger warnings
  • DEBUGwdtbetter detect apparently locked up threads and warn about them
  • MINORdebugadd a function to dump a stuck thread
  • MINORwdtmove the local timers to a struct
  • MINORdebugremove the redundant process.thread_info array from post_mortem
  • MINORdebugalso add fdtab and acitvity to struct post_mortem
  • MINORdebugalso add a pointer to struct global to post_mortem
  • MINORdebugdo not limit backtraces to stuck threads
  • MINORdebugprint gdb hints when crashing
  • MINORconnectionadd new sample fetch functions fc_err_name and bc_err_name
  • MINORrawsockset connection error codes when returning from recv/send/splice
  • MINORconnectionadd more connection error codes to cover common errno
  • BUG/MINORstatsFix the name for the total number of streams created
  • MINORcli/debugshow dev: add cmdline and version
  • MINORtcpcheckAdd support for an option host header value for httpchk option
  • BUG/MINORquicfix malformed probing packet building
  • CLEANUPconnectionproperly name the CO_ER_SSL_FATAL enum entry
  • DOCconfigdocument connection error 44 (reverse connect failure)
  • BUG/MEDIUMpromexFix dump of extra counters
  • MINORstreamSave last evaluated rule on invalid yield
  • BUG/MINORhttp-anaReport internal error if an action yields on a final eval
  • BUG/MEDIUMmux-h1Fix how timeouts are applied on H1 connections
  • DOCconfigadd missing glitch_{cnt,rate} sample definitions
  • DOCconfigadd missing glitch_{cnt,rate} data types
  • BUG/MINORssl/cli'set ssl cert' does not check the transaction name correctly
  • BUG/MINORtracestop rewriting argv with -dt
  • MINORcliremove non-printable characters from 'debug dev fd'
  • MINORdebugstore important pointers in post_mortem
  • MINORdebugplace the post_mortem struct in its own section.
  • MINORdebugplace a magic pattern at the beginning of post_mortem
  • MINORpoolsexport the pools variable
  • BUILDdebugsilence a build warning with threads disabled
  • BUG/MEDIUMserverfix race on servers_list during server deletion
  • BUG/MINORstconnDon't disable 0-copy FF if EOS was reported on consumer side
  • BUG/MINORhttp-anaFix wrong client abort reports during responses forwarding
  • BUG/MEDIUMstconnReport blocked send if sends are blocked by an error
  • BUG/MINORserverfix dynamic server leak with check on failed init
  • MINORactivity/memprofileshow per-DSO stats
  • MEDIUMdebugon panic, make the target thread automatically allocate its buf
  • MINORdebugreplace ha_thread_dump() with its two components
  • MINORdebugmake ha_thread_dump_done() take the pointer to be used
  • MINORdebugslightly change the thread_dump_pointer signification
  • MINORdebugsplit ha_thread_dump() in two parts
  • MINORchunkdrop the global thread_dump_buffer
  • MINORdebugmake mark_tainted() return the previous value
  • MINORactivity/memprofilealways return other bin on NULL return address
  • BUG/MEDIUMconnection/http-reusefix address collision on unhandled address families
  • BUG/MEDIUMmux-h2Remove H2S from send list if data are sent via 0-copy FF
  • BUG/MEDIUMstats-htmlNever dump more data than expected during 0-copy FF
  • BUG/MINORmux-quicdo not close STREAM with empty FIN if no data sent
  • BUG/MINORmworkerfix mworker-max-reloads parser
  • DOCconfigfix rfc7239 forwarded typo in desc
  • BUG/MEDIUMquicavoid freezing 0RTT connections
  • BUG/MINORquicavoid leaking post handshake frames
  • REGTESTSNever reuse server connection in http-messaging/truncated.vtc
  • BUG/MAJORfilters/htxAdd a flag to state the payload is altered by a filter
  • BUG/MEDIUMstconnCheck FF data of SC to perform a shutdown in sc_notify()
  • BUG/MINORhttp-anaDon't report a server abort if response payload is invalid
  • BUG/MEDIUMstconnWait iobuf is empty to shut SE down during a check send
  • BUG/MINORhttpclientreturn NULL when no proxy available during httpclient_new()
  • BUG/MEDIUMqueuemake sure never to queue when there's no more served conns
  • BUG/MEDIUMmux-quicensure timeout server is active for short requests
  • BUG/MEDIUMhluaproperly handle sample func errors in hlua_run_sample_{fetch,conv}()
  • BUG/MEDIUMhluamake hlua_ctx_renew() safe
  • MINORargadd an argument type for identifier
  • BUG/MEDIUMserverserver stuck in maintenance after FQDN change
  • MINORhapee/daalert in case of incorrect data version
  • BUG/MINORhapee/daenabling use of precompiled json database in 'deviceatlas-json-file'
  • MINORhapeeUpdate backports list and hapee commit list
  • BUG/MINORhttp-anaDisable fast-fwd for unfinished req waiting for upgrade
  • BUG/MINORmux-h1Fix condition to set EOI on SE during zero-copy forwarding
  • MEDIUMbwlimUse a read-lock on the sticky session to apply a shared limit
  • MEDIUMstick-tableAdd support of a factor for IN/OUT bytes rates
  • MINORstream/statsExpose the total number of streams ever created in stats
  • MINORstream/statsExpose the current number of streams in stats
  • MINORstreamSupport dynamic changes of the number of connection retries
  • MINORstreamRely on a per-stream max connection retries value
  • MINORactionExport release_expr_int_action() release function
  • BUG/MEDIUMqueuealways dequeue the backend when redistributing the last server
  • MINORservermake srv_shutdown_sessions() call pendconn_redistribute()
  • BUG/MINORqueuemake sure that maintenance redispatches server queue
  • BUG/MEDIUMstreammake stream_shutdown() async-safe
  • MINORtaskdefine two new one-shot events for use with WOKEN_OTHER or MSG
  • MINORtoolsdo not attempt to use backtrace() on linux without glibc
  • BUILDtoolsonly include execinfo.h for the real backtrace() function
  • BUG/MINORcfgparse-globalfix allowed args number for setenv
  • BUG/MINORservermake sure the HMAINT state is part of MAINT
  • BUG/MEDIUMcliDeadlock when setting frontend maxconn
  • BUG/MEDIUMcliBe sure to catch immediate client abort
  • BUG/MINORmux-quicreport glitches to session
  • REGTESTSshorten a bit the delay for the h1/h2 upgrade test
  • REGTESTSh1/h2Update script testing H1/H2 protocol upgrades
  • BUG/MEDIUMmux-h1/mux-h2Reject upgrades with payload on H2 side only
  • MINORmux-h1Set EOI on SE during demux when both side are in DONE state
  • BUG/MINORh2reject extended connect for h2c protocol
  • BUG/MINORh1do not forward h2c upgrade header token
  • MINORconnectionNo longer include stconn type header in connection-t.h
  • BUG/MINORquicprevent freeze after early QCS closure
  • BUG/MEDIUMquichandle retransmit for standalone FIN STREAM
  • MINORquicimplement function to check if STREAM is fully acked
  • MINORquicconvert qc_stream_desc release field to flags
  • BUG/MINORcfgparse-listenfix option httpslog override warning message
  • BUG/MINORfix missing 'option httpslog' overrides previous 'option tcplog clf'... detection
  • BUG/MINORfix missing log-format overrides previous 'option tcplog clf'... detection
  • BUG/MEDIUMpromexWait to have the request before sending the response
  • BUG/MEDIUMcache/statsWait to have the request before sending the response
  • BUG/MEDIUMsc_strm/appletWake applet after a successfull synchronous send
  • DOCconfigExplicitly list relaxing rules for accept-invalid-http-* options
  • BUG/MINORpeerslocal entries updates may not be advertised after resync
  • BUG/MEDIUMqueueimplement a flag to check for the dequeuing
  • BUG/MINORclockvalidate that now_offset still applies to the current date
  • BUG/MINORclockmake time jump corrections a bit more accurate
  • BUG/MINORpollingfix time reporting when using busy polling
  • MEDIUMh1Accept invalid T-E values with accept-invalid-http-response option
  • MEDIUMhapee/51dsupport data reload for 51Degrees V4 engine
  • BUG/MINORpatterndo not leave a leading comma on set error messages
  • BUG/MINORh1-htxDon't flag response as bodyless when a tunnel is established
  • BUG/MAJORmux-h1Wake SC to perform 0-copy forwarding in CLOSING state
  • BUG/MEDIUMpatternprevent UAF on reused pattern expr
  • BUG/MINORpatternprevent const sample from being tampered in pat_match_beg()
  • BUG/MEDIUMclockdetect and cover jumps during execution
  • REGTESTSfix random failures with wrong_ip_port_logging.vtc under load
  • MINORhapeeadd a .hapee directory to list backporting notes
  • DOCconfigurationplace the HAPROXY_HTTP_LOG_FMT example on the correct line
  • MINORconfigCreated env variables for http and tcp clf formats
  • MINORImplements new log format of option tcplog clf
  • BUG/MINORquicToo short datagram during packet building failures (aws-lc only)
  • BUG/MINORquicCrash from trace dumping SSL eary data status (AWS-LC)
  • BUG/MEDIUMquicalways validate sender address on 0-RTT
  • MINORquicAdd trace for QUIC_EV_CONN_IO_CB event.
  • MINORquicImplement qc_ssl_eary_data_accepted().
  • MINORquicModify NEW_TOKEN frame structure (qf_new_token struct)
  • BUG/MINORquicMissing incrementation in NEW_TOKEN frame builder
  • MINORquicToken for future connections implementation.
  • MEDIUMssl/quicimplement quic crypto with EVP_AEAD
  • MINORquicImplement quic_tls_derive_token_secret().
  • MINORtoolsImplement ipaddrcpy().
  • BUG/MEDIUMclockalso update the date offset on time jumps
  • BUILDquic32bits build broken by wrong integer conversions for printf()
  • BUG/MINORcfgparse-globalremove tune.fast-forward from common_kw_list
  • DOCconfigcorrect the table for option tcplog
  • BUG/MINORpatternpat_ref_set: return 0 if err was found
  • BUG/MINORpatternpat_ref_set: fix UAF reported by coverity
  • BUG/MINORh3properly reject too long header responses
  • BUG/MINORproto_uxstdelete fd from fdtab if listen() fails
  • BUG/MINORmux-quicdo not send too big MAX_STREAMS ID
  • REGTESTSmclitest the pipelined commands on master CLI
  • BUG/MEDIUMmworker/clifix pipelined modes on master CLI
  • MINORchannelimplement ci_insert() function
  • BUG/MINORproto_tcpkeep error msg if listen() fails
  • BUG/MINORproto_tcpdelete fd from fdtab if listen() fails
  • BUG/MINORquic/tracemake quic_conn_enc_level_init() emit NEW not CLOSE
  • BUG/MINORtrace/quicmake qconn selectable as a lockon criterion
  • BUG/MINORtraceautomatically start in waiting mode with "start <evt>"
  • BUG/MEDIUMtracefix null deref in lockon mechanism since TRACE_ENABLED()
  • BUG/MINORtrace/quicpermit to lock on frontend/connect/session etc
  • BUG/MINORtrace/quicenable conn/session pointer recovery from quic_conn
  • DOCconfigurationfix alphabetical ordering of {bs,fs}.aborted
  • BUG/MINORfcgi-apphandle a possible strdup() failure
  • BUG/MEDIUMpeerNotify the applet won't consume data when it waits for sync
  • BUG/MEDIUMmux-h2Propagate term flags to SE on error in h2s_wake_one_stream
  • BUG/MEDIUMh2Only report early HTX EOM for tunneled streams
  • BUG/MEDIUMhttp-anaReport error on write error waiting for the response
  • BUG/MEDIUMquicprevent conn freeze on 0RTT undeciphered content
  • BUG/MEDIUMssl0-RTT initialized at the wrong place for AWS-LC
  • BUG/MEDIUMsslreactivate 0-RTT for AWS-LC
  • BUG/MINORstconnbs.id and fs.id had their dependencies incorrect
  • BUILDmux-ptUse the right name for the sedesc variable
  • BUG/MEDIUMmux-pt/mux-h1Release the pipe on connection error on sending path
  • BUG/MEDIUMstconnReport error on SC on send if a previous SE error was set
  • BUG/MEDIUMserver/addrfix tune.events.max-events-at-once event miss and leak
  • BUG/MEDIUMmux-ptFix condition to perform a shutdown for writes in mux_pt_shut()
  • BUG/MINORCrash on O-RTT RX packet after dropping Initial pktns
  • BUG/MINORquicToo shord datagram during O-RTT handshakes (aws-lc only)
  • BUG/MAJORmux-h2always clear MUX_MFULL and DEM_MROOM when clearing the mbuf
  • MINORmux-h2try to clear DEM_MROOM and MUX_MFULL at more places
  • BUG/MEDIUMmux-h1Properly handle empty message when an error is triggered
  • BUG/MINORquicunexploited retransmission cases for Initial pktns.
  • BUG/MEDIUMcliAlways release back endpoint between two commands on the mcli
  • BUG/MEDIUMmux-ptNever fully close the connection on shutdown
  • BUG/MINIRproxyMatch on 429 status when trying to perform a L7 retry
  • BUG/MEDIUMstreamPrevent mux upgrades if client connection is no longer ready
  • BUG/MEDIUMmux-h2Set ES flag when necessary on 0-copy data forwarding
  • MINORproxyAdd support of 429-Too-Many-Requests in retry-on status
  • DOCquicfix default minimal value for max window size
  • MEDIUMlogrelax some checks and emit diag warnings instead in lf_expr_postcheck()
  • BUG/MINORhapee/dafixed bug when using binary version of database
  • BUG/BUILDhapee/daadded preprocessed source code generation for *.cpp files
  • MINORhapee/WURFLtransfer error status from the _wurfl_reload() function
  • MINORhapee/WURFLadded live update database function
  • MINORhapee/WURFLadded custom API log function
  • MINORhapee/WURFLadded function to check correct module initialization
  • BUG/MINORhapee/WURFLcorrected version check of used wurfl library
  • BUILDhapee/darepaired build in case of using old DeviceAtlas library
  • MINORhapee/daadd function that allow data reload
  • MINORhapee/daadd spin locking
  • MINORhapee/daadd support for loading a precompiled json data
  • MEDIUMhapee/daRevert MEDIUM: da: update module to handle schedule mode.
  • MINORhapee/51dadd function that returns path to 51Degrees data file
  • MINORhapee/51dadd function that allow data reload
  • BUG/MINORhapee/51dadd spin locking
  • BUILDhapee/51dfix error when building with 51Degrees enabled
  • BUG/MEDIUMhapee/51dfix a segfault on exit when 51d configuration is not loaded
  • MEDIUMhapee/51duse fiftyoneDegreesProvider to access the pool and dataset
  • BUG/MEDIUMinitfix fd_hard_limit default in compute_ideal_maxconn
  • MEDIUMinitset default for fd_hard_limit via DEFAULT_MAXFD (take #2)
  • BUG/MEDIUMqueuedeal with a rare TOCTOU in assign_server_and_queue()
  • MINORqueueadd a function to check for TOCTOU after queueing
  • MEDIUMh1allow to preserve keep-alive on T-E + C-L
  • MINORquicAdd information to show quic for CUBIC cc.
  • MINORquicDump TX in flight bytes vs window values ratio.
  • BUG/MEDIUMjwtClear SSL error queue on error when checking the signature
  • BUG/MINORquicLack of precision when computing K (cubic only cc)
  • MEDIUMsinkdon't set NOLINGER flag on the outgoing stream interface
  • BUG/MINORquicNon optimal first datagram.
  • BUG/MINORcliAtomically inc the global request counter between CLI commands
  • BUG/MINORserverDon't warn fallback IP is used during init-addr resolution
  • BUG/MINORstick-tablefix crash for src_inc_gpc() without stkcounter
  • DOCconfigimprove the http-keep-alive section
  • DOCconfigurationissuers-chain-path not compatible with OCSP
  • BUG/MAJORmux-h2force a hard error upon short read with pending error
  • BUG/MEDIUMssl_sockfix deadlock in ssl_sock_load_ocsp() on error path
  • DOCinstalldon't reference removed CPU arg
  • BUG/MEDIUMdebug/clifix show threads crashing with low thread counts
  • BUG/MINORsessionEval L4/L5 rules defined in the default section
  • CLEANUPquicrename TID affinity elements
  • CLEANUPprotorename TID affinity callbacks
  • BUG/MEDIUMquicprevent crash on accept queue full
  • BUILDlistenersilence a build warning about unused value without threads
  • MINORprotoextend connection thread rebind API
  • BUG/MEDIUMbwlimBe sure to never set the analyze expiration date in past
  • DEVflags/quicdecode quic_conn flags
  • BUG/MEDIUMspoeBe sure to create a SPOE applet if none on the current thread
  • BUG/MEDIUMh1Reject empty Transfer-encoding header
  • BUG/MINORh1Reject empty coding name as last transfer-encoding value
  • BUG/MINORh1Fail to parse empty transfer coding names
  • BUG/MINORjwtfix variable initialisation
  • BUG/MEDIUMpeersFix crash when syncing learn state of a peer without appctx
  • DOCconfigurationupdate maxconn description
  • MEDIUMinitset default for fd_hard_limit via DEFAULT_MAXFD
  • BUG/MINORjwtdon't try to load files with HMAC algorithm
  • BUG/MEDIUMserverfix race on server_atomic_sync()
  • DOCconfigurationmore details about the master-worker mode
  • BUG/MEDIUMhlua/cliFix lua CLI commands to work with applet's buffers
  • BUG/MINORpromexRemove Help prefix repeated twice for each metric
  • BUG/MEDIUMquicfix possible exit from qc_check_dcid() without unlocking
  • BUG/MINORquicfix race-condition on trace for CID retrieval
  • BUG/MINORquicfix race condition in qc_check_dcid()
  • BUG/MEDIUMquicfix race-condition in quic_get_cid_tid()
  • BUG/MEDIUMh3ensure the :scheme pseudo header is totally valid
  • BUG/MEDIUMh3ensure the :method pseudo header is totally valid
  • BUG/MEDIUMserver/dnsprevent DOWN/UP flap upon resolution timeout or error
  • MINORactivitymake the memory profiling hash size configurable at build time
  • BUG/MINORserverfix first server template name lookup UAF
  • DOCconfigurationadd details about crt-store in bind crt keyword
  • BUG/MEDIUMstick-tableDecrement the ref count inside lock to kill a session
  • BUG/MINORhluareport proper context upon error in hlua_cli_io_handler_fct()
  • DEVflags/show-fd-to-flagsadapt to recent versions
  • BUG/MINORquicfix BUG_ON() on Tx pkt alloc failure
  • BUG/MINORh3fix BUG_ON() crash on control stream alloc failure
  • BUG/MINORmux-quicfix crash on qcs SD alloc failure
  • BUG/MINORh3fix crash on STOP_SENDING receive after GOAWAY emission
  • DOCapi/event_hdlsmall updates, fix an example and add some precisions
  • SCRIPTSgit-show-backportsdo not truncate git-show output
  • BUG/MAJORquicfix padding with short packets
  • DOCmanagementdocument ptr lookup for table commands
  • DOCconfigurationfix alphabetical order of bind options
  • BUG/MEDIUMproxyfix email-alert invalid free
  • REGTESTSsslfix some regtests 'feature cmd' start condition
  • DEBUGhluadistinguish burst timeout errors from exec timeout errors
  • BUG/MINORlogfix broken '+bin' logformat node option
  • DOCmanagementrename show stats domain cli dns to resolvers
  • DOC/MINORmanagementadd -dZ option
  • DOC/MINORmanagementadd missed -dR and -dv options
  • BUG/MINORquicfix padding of INITIAL packets
  • BUG/MAJORmux-h1Prevent any UAF on H1 connection after draining a request
  • CLEANUPlog/proxyfix comment in proxy_free_common()
  • BUG/MEDIUMproxyfix UAF with {tcp,http}checks logformat expressions
  • MINORproxyadd proxy_free_common() helper function
  • BUG/MINORpromexSkip resolvers metrics when there is no resolver section
  • DOCconfigadd missing context hint for new server and proxy keywords
  • DOCconfigadd missing section hint for guid proxy keyword
  • DOCconfigmove hash-key from proxy to server options
  • BUG/MEDIUMlogfix lf_expr_postcheck() behavior with default section
  • BUG/MINORproxyfix header_unique_id leak on deinit()
  • BUG/MINORproxyfix source interface and usesrc leaks on deinit()
  • BUG/MINORproxyfix dyncookie_key leak on deinit()
  • BUG/MINORproxyfix check_{command,path} leak on deinit()
  • BUG/MINORproxyfix email-alert leak on deinit()
  • BUG/MINORproxyfix log_tag leak on deinit()
  • BUG/MINORproxyfix server_id_hdr_name leak on deinit()
  • MINORlogfix http-send-name-header ignore warning message
  • BUG/MINORmux-h1Use the right variable to set NEGO_FF_FL_EXACT_SIZE flag
  • BUG/MAJORmux-h1Properly copy chunked input data during zero-copy nego
  • BUG/MEDIUMstconn/mux-h1Fix suspect change causing timeouts
  • BUG/MINORquicensure Tx buf is always purged
  • BUG/MINORquicfix computed length of emitted STREAM frames
  • BUG/MEDIUMsslbad auth selection with TLS1.2 and WolfSSL
  • BUG/MINORhapeeremove leading \n on __vers error
  • MEDIUMhapeewarn on unsupported initcalls
  • BUG/MINORhapeeforbid to load a module twice
  • BUG/MEDIUMsslwrong priority whem limiting ECDSA ciphers in ECDSA+RSA configuration
  • BUG/MEDIUMmux-quicDon't unblock zero-copy fwding if blocked during nego
  • CLEANUPhluasimplify ambiguous lua_insert() usage in hlua_ctx_resume()
  • BUG/MINORhluafix leak in hlua_ckch_set() error path
  • BUG/MINORhluaprevent LJMP in hlua_traceback()
  • BUG/MINORhluafix unsafe hlua_pusherror() usage
  • BUG/MINORhluadon't use lua_pushfstring() when we don't expect LJMP
  • CLEANUPhluause hlua_pusherror() where relevant
  • BUG/MINORquicprevent crash on qc_kill_conn()
  • BUG/MEDIUMmux-quicUnblock zero-copy forwarding if the txbuf can be released
  • MEDIUMstconnBe able to unblock zero-copy data forwarding from done_fastfwd
  • BUG/MEDIUMh1-htxDon't state interim responses are bodyless
  • BUG/MINORhluause CertCache.set() from various hlua contexts
  • DOCconfigurationadd an example for keywords from crt-store
  • BUG/MINORtoolsfix possible null-deref in env_expand() on out-of-memory
  • BUG/MINORtcpcheckreport correct error in tcp-check rule parser
  • BUG/MINORcfgparseremove the correct option on httpcheck send-state warning
  • HAPEEudpupdate structs and functions required for the UDP module
  • BUILDhapee/addonsfix build without USE_QUIC=1
  • HAPEEmakefileautomatically build objects in addons/hapee_*
  • HAPEEmakefileupdate the cleanup rule to also remove *.i from addons
  • HAPEEaddonsquic CID in -vv
  • HAPEEaddonsadds quic CID generator to interop with packetshield
  • MEDIUMhapeedoes not pass OPTION_LDFLAGS to modules
  • MINORhapee/modulescheck if we generate the API hash correctly
  • BUG/MINORhapee/modulesadjust include match() in gen-modules-config-h.awk
  • BUG/MINORhapee/modulesinitialize the module head list
  • BUILDhapee/modulesselect either md5 or md5sum
  • MEDIUMhapee/modulesload the STG_REGISTER initcalls
  • BUG/MINORhapee/modulesdisplay detailed error message on mod_init() failure
  • MINORhapee/modulesadd a new label MODULES_LOCK to the lock_label enum
  • MINORhapee/modulesadd the ability to register variable and functions.
  • MEDIUMhapee/modules'modules list' on the cli shows currently loaded modules
  • MINORhapee/modulesterminate properly loaded modules if possible
  • MEDIUMhapee/modulesadd memory reservation support for the modules
  • MINORhapeechange URLs for 3.0r1
  • BUILDhapee/modulesupdate HAPEE version macro to 3.0r1
  • BUILDhapee/modulesadd macros to compute numerical value of a HAPEE version
  • BUILDhapee/modulesadd version of the module in the defines
  • MEDIUMhapee/modulesadd modules support
×

About the new layout

For 2025, we're happy to introduce a redesigned HAProxy Configuration Manual!

The new manual enhances the user experience by providing more help for keywords, including more details about context, usage, and syntax. New search filters help you find keywords faster, with separate coverage for each variant.

If you would prefer to use the older layout click here.