mirror of
https://github.com/haproxy/haproxy.git
synced 2026-11-04 14:59:44 +00:00
Willy Tarreau
06e2d6ffbd
Released version 3.5-dev4 with the following main changes :
- CLEANUP: mux_quic: remove unused prototype
- BUG/MEDIUM: proxy: protect "show errors" against backend deletion
- MINOR: proxy: stress "show errors" handler
- BUG/MINOR: haload: fix use-after-free upon updating task expiration
- BUG/MINOR: haload: set default thread count to 1
- BUG/MINOR: haload: fix display glitches by flushing stdout in summary
- MINOR: haload: add rate limiting support using -R option
- MINOR: log: use curproxy during config parsing
- MINOR: config: define wrapper for proxies loop during check config
- MINOR: log: convert list to standard doubly linked one
- MINOR: sink: convert list to standard doubly linked one
- MINOR: proxy: centralize proxies_list insert during config parsing
- MINOR: proxy: define proxies_list iteration functions
- MAJOR: proxy: convert proxies_list to a doubly linked struct list
- OPTIM/MEDIUM: proxy: avoid main proxies list reordering on startup
- CLEANUP: proxy/config: clean up after proxies list conversion
- MINOR: proxy: rename proxies list to all_proxies
- BUG/MEDIUM: ssl: Spell HAVE_VANILLA_OPENSSL correctly
- BUG/MEDIUM: ssl: Handle non-application data record while splicing
- MEDIUM: ssl: Add a way to rate-limit TLSv1.3 KeyUpdate
- DOC: ssl: Document tune.ssl.keyupdate-rate-limit
- BUG/MEDIUM: ssl: Put CO_ER_SSL_KEYUPDATE at the right place
- BUILD: ssl: Do not use SSL3_MT_KEY_UPDATE, hardcode 24 instead
- MINOR: server: rename global servers_list to all_servers
- MINOR: server: do not return next server on srv_drop()
- MINOR: proxy: define server list iteration functions
- MAJOR: proxy: convert server list to a doubly linked struct list
- OPTIM/MEDIUM: proxy/server: avoid server list reordering on startup
- OPTIM: tools: keep a cache of recent localtime() and gmtime()
- DEBUG: fd: catch access attempts to closed FDs
- MINOR: halog: Add reusable function to extract the value of header captures
- CLEANUP: halog: Clean up naming for variables related to `-hdr` processing
- MINOR: halog: Add support filtering on header capture values using -hdr-match
- REORG: h1-htx: Move h1 headers map in h1-htx
- BUG/MEDIUM: mux-h1: Always adjust case for all outgoing headers as expected
- MINOR: mux-h1: Lower the case for Sec-Websocket-* headers when manually added
- MINOR: mux-h1: Use htx version to send default low-level errors
- BUG/MINOR: haload: fix CPU topology detection by omitting forced "nbthread"
- CLEANUP: haload: use <arg_thrd> instead of <global.nbthread> where applicable
- BUG/MINOR: http-htx: fix the length moved when removing a header value
- BUG/MEDIUM: http-fetch: don't parse a non-HTTP check buffer as an HTX message
- BUG/MEDIUM: http-fetch: reject a negative capture id in capture.{req,res}.hdr
- BUG/MINOR: http-fetch: fix a NULL channel dereference in smp_fetch_body()
- BUG/MINOR: http: fix an out-of-bounds read in http_get_host_port() on empty host
- BUG/MINOR: http-htx: check the trash allocation in http_scheme_based_normalize()
- BUG/MINOR: h1: report the right error position on authority/host mismatch
- BUG/MINOR: h2: don't use a block pointer to roll back a partial HTX conversion
- BUG/MINOR: h3: don't use a block pointer to roll back a partial HTX conversion
- BUG/MINOR: http-ana: fix a one-byte over-read in the client-side cookie parser
- CLEANUP: htx: remove the unreachable "append_data" label in htx_reserve_max_data()
- CLEANUP: flt-comp: remove a no-op http_remove_header() call
- BUG/MINOR: http-act: fix a double free of the regex on a rule parsing error
- BUG/MINOR: http-act: fix a double free of the map reference on a parsing error
- BUG/MINOR: http-act: restore the response buffer state in the early-hint action
- BUG/MINOR: http-act: work on a copy of the sample in del-headers-bin
- BUG/MINOR: http-act: reject a negative capture id in the capture actions
- CLEANUP: http-conv: index the captures array with hdr->index in the converters
- BUG/MINOR: http-htx: check the strdup() of the "lf-string" http reply argument
- BUG/MEDIUM: tools: make string encoding possible to fail instead of truncating
- CLEANUP: http-conv: Remove useless enc_type init to ENC_QUERY
- CLEANUP: http-conf: rename local trash variable
- BUG/MINOR: htx: Perform raw copy for messages of same size in htx_copy_msg()
- BUG/MINOR: htx: Transfer HTX_FL_EOM flag on success in htx_append_msg()
- BUG/MINOR: http-rules: fix release of a failed "set-cookie-fmt" redirect rule
- BUG/MINOR: slz: do not read past the end of the input around the match loop
- CLEANUP: slz: fix the documented worst case size of flush() and finish()
- BUG/MINOR: slz: use the exact switch cost for the last literals of a block
- BUG/MEDIUM: slz: bound the bits wasted by the 9-bit literals
- BUG/MINOR: slz: do not append a block to an already finished stream
- BUG/MINOR: slz: fix the adler32 accumulators signedness on 32-bit
- BUG/MINOR: slz: avoid undefined shifts when building the word byte by byte
- CLEANUP: slz: clarify that the size promise applies to the stream, not to a call
- BUG/MEDIUM: peers: check the available room before encoding dict values
- BUG/MEDIUM: sample: reject the deprecated protobuf group wire types
- BUG/MAJOR: ssl/ocsp: lock the OCSP response around reads in the stapling callback
- MINOR: server: improve parsing error for server-template
- BUG/MINOR: server: fix QUIC on server-template
- BUG/MINOR: server: duplicate server alt_proto in srv_settings_cpy()
- MINOR: server: ensure check-reuse-pool is init in srv_settings_init()
- BUG/MINOR: server: fix check reuse-pool in srv_settings_cpy()
- IMPORT: cebtree: private: fix the duplicate detection in the lookup shortcut
- BUG/MINOR: cli: use the current argument to parse the FD spec in "show fd"
- BUG/MINOR: cli: do not reject the "/<fd>" form of "show fd"
- CLEANUP: haload: embed rate_task into hld_thr_info structure
- CLEANUP: haload: factor out user scheduling into hld_usr_schedule()
- BUG/MINOR: haload: fix rate limit bypass during stream errors
- MEDIUM: fd: Remove fdinfo
- MEDIUM: fd: Make it possible to have one fdtab per thread-group
- MEDIUM: pollers: Allow one polled_mask per thread group
- MEDIUM: pollers: Create the poller pipes before we create the thread
- MEDIUM: listeners: Don't always balance connections across thread groups
- MEDIUM: backend: Do not always allow takeover across thread groups
- MEDIUM: listener: Properly handle unshared fd tables between tgroups
- MEDIUM: cli: Transfer sockets with unshared file descriptor tables
- MEDIUM: pollers: Only allow epoll when each tgroup has its fd table
- MEDIUM: pipes: Have one pool of free pipes per thread group
- MINOR: cli: Make "show fd" aware of per-thread-group FD tables
- MINOR: debug: Report the current tgid in "debug dev fd"
- MINOR: cli: Report the tgid along the FD in "show sess"
- MEDIUM: dns: Stick the TCP nameserver tasks to the resolvers' thread
- MEDIUM: server: Do not close other thread groups' connections at deinit
- MEDIUM: resolvers: Do not close another thread group's socket at deinit
- MEDIUM: quic: Do not use another thread group's listener FD
- MINOR: connection: Do not retrieve src/dst on another thread group's FD
- MEDIUM: fd: Add the tune.fd.tables option
- BUILD: listener: Fix the build on platforms without MSG_CMSG_CLOEXEC
- DOC: config: Document the tune.fd.tables option
- BUG/MINOR: ech: propagate error from load_echkeys()
- BUG/MINOR: ech: reject an ECH store with no usable private key
- BUG/MEDIUM: counters: preserve shared.tg pointer on 'clear counters all'
- MINOR: counters: add max-only reset helpers and use them for clear counters
- MINOR: server: add 'clear counters server <backend>/<server>' CLI command
- REGTESTS: stats: add test for 'clear counters server'
- DOC: management: document 'clear counters server'
- BUG/MEDIUM: filter: Disable auto-close on channel during TCP payload filtering
- CLEANUP: haload: drop unused flags field from struct hld_url
- BUG/MINOR: haload: fix stale global variables affecting URL allocations
- MINOR: haload: support HTTP status code by version
- DEV: patchbot: add an "O" filter to hide original lines without new notes
- DEV: patchbot: retrieve the shared state on page load, with a timeout
- DEV: patchbot: support passing the page settings in the URL fragment
- OPTIM: pattern: try literal IPv6 parsing before DNS resolution in pat_parse_ip
- OPTIM: tools/str2net: only duplicate the string when a slash is present
- BUILD: tools: fix C23 incompatible strrchr usage
- CLEANUP: server: remove wrong comments about server-template ID
- MINOR: errors: further improve parsing error for server-template
- BUG/MINOR: server: check strdup return value on server ID
- MINOR: server: do not ignore errors during server-template init
- BUG/MINOR: server: check strdup return on server-template ID generation
- MINOR: server: detect name conflict earlier during parsing
- MINOR: server: treat proxy server tree as without duplicate
- BUG/MINOR: ech: fix label at end of compound statement
- MINOR: ech: introduce an ech_store type and helpers in load_echkeys()
- MEDIUM: ech: implement a lighter ECH feature for AWS-LC
- CI: github: add USE_ECH=1 in OpenSSL and AWS-LC jobs
- DOC: stop supporting OpenSSL version < 1.1.1
- CI: github: remove OpenSSL 1.0.2 job
- BUG/MINOR: proxy: fix default-server leak on post-parsing cleanup
- MINOR: proxy: implement unpublished backend keyword
- MINOR: server: define _srv_parse_from() for server "from" keyword
- MINOR: server: implement "from none"
- MINOR: proxy: keep default-server unless empty setting
- MINOR: proxy: extend global tune.defaults.purge for default-server
- MEDIUM: server: implement from be:
- MINOR: server: set default-server id to NULL
- MEDIUM: proxy: implement named default-server
- MINOR: server: prevent name collision with a default-server
- MEDIUM: server: implement "from srv:"
- CLEANUP: xprt_quic: remove dead callbacks prepare_srv/destroy_srv
- MINOR: sample: make the param converter support control characters
- DOC: explain better that named defaults are preserved
- DOC: better explain that default-server are now preserved
- BUG/MINOR: proxy: fix "show backend"
- MINOR: list: define watcher_is_attached()
- MINOR: proxy: implement "show default-server"
- MINOR: proxy: complete "add backend" reg-test
- MINOR: proxy: implement "show defaults"
HAProxy
HAProxy is a free, very fast and reliable reverse-proxy offering high availability, load balancing, and proxying for TCP and HTTP-based applications.
Installation
The INSTALL file describes how to build HAProxy. A list of packages is also available on the wiki.
Getting help
The discourse and the mailing-list are available for questions or configuration assistance. You can also use the slack or IRC channel. Please don't use the issue tracker for these.
The issue tracker is only for bug reports or feature requests.
Documentation
The HAProxy documentation has been split into a number of different files for ease of use. It is available in text format as well as HTML. The wiki is also meant to replace the old architecture guide.
Please refer to the following files depending on what you're looking for:
- INSTALL for instructions on how to build and install HAProxy
- BRANCHES to understand the project's life cycle and what version to use
- LICENSE for the project's license
- CONTRIBUTING for the process to follow to submit contributions
- doc/haterm.txt and doc/haload.txt for load generation utilities
The more detailed documentation is located into the doc/ directory:
- doc/intro.txt for a quick introduction on HAProxy
- doc/configuration.txt for the configuration's reference manual
- doc/lua.txt for the Lua's reference manual
- doc/SPOE.txt for how to use the SPOE engine
- doc/network-namespaces.txt for how to use network namespaces under Linux
- doc/management.txt for the management guide
- doc/regression-testing.txt for how to use the regression testing suite
- doc/peers.txt for the peers protocol reference
- doc/coding-style.txt for how to adopt HAProxy's coding style
- doc/internals for developer-specific documentation (not all up to date)
License
HAProxy is licensed under GPL 2 or any later version, the headers under LGPL 2.1. See the LICENSE file for a more detailed explanation.