mirror of
https://github.com/haproxy/haproxy.git
synced 2026-11-04 13:55:20 +00:00
Willy Tarreau
37f3ad8aa3
Released version 3.5-dev9 with the following main changes :
- CLEANUP: sym: move symbol resolution out of tools.c
- MINOR: sym: add an in-process symbol table for backtraces
- MINOR: sym: collect the symbols known to the dynamic linker
- MINOR: sym: add helpers to collect the symbols of an ELF image
- IMPORT: xz: import the xz-embedded decoder
- MEDIUM: sym: store a compressed symbol table in a loadable section
- MINOR: sym: read local symbols and debug info from ELF files
- MINOR: sym: also read the compressed symbol tables from the ELF files
- OPTIM: sym: skip the embedded table when the file provided the symbols
- MINOR: makefile: add CROSS_TOOLCHAIN to prefix the target's tools
- BUG/MINOR: proxy: add PR_CAP_LB for dynamically added backend
- BUG/MINOR: server: fix "del server" description
- BUG/MINOR: cli: update wait help usage
- BUG/MEDIUM: server: remove immediately from GUID tree on delete server
- DOC: server: explicit refcount interaction in "del server"
- MINOR: ocsp: Remove free of main structure from ssl_sock_free_ocsp_data
- MINOR: ocsp: Send OCSP response status back to caller
- MINOR: ocsp: Raise specific ocsp error code in ocsp parsing/verifying functions
- MINOR: ocsp: Dup OCSP_CERTID in ssl_ocsp_create_request_details
- MEDIUM: ocsp: Create new do-ocsp-request action
- MINOR: ocsl: Add 'inapplicable' return code to client certificate ocsp check
- DOC: ocsp: Add doc for the new 'do-ocsp-request' action
- REGTESTS: ocsp: Add 'do-ocsp-request' tests
- BUILD: ssl: fix build without USE_OPENSSL + clear_ocsp_clt_check_ctx
- DEV: sse-latency: add a latency measuring tool for SSE response streams
- MINOR: http-ana: automatically enable http-no-delay for streaming events (SSE)
- REGTESTS: cli: don't check the HAProxy string
- BUILD: Hopefully fix build on FreeBSD
- BUILD: sym: Define HA_HAVE_DL_ITERATE_PHDR on FreeBSD
- BUG/MINOR: log: fix erroneous error message in log-steps parser
- MINOR: log: add "loggers" section
- MINOR: log: support 'to' parameter for "log" directive
- MINOR: log: support explicit <loggers> list for do_log_ctx()
- MINOR: log: support 'to' parameter fo do-log action
- DOC: config: document new "loggers" section and relevant uses
- MINOR: ssl: support curve fetches with AWS-LC API 30
- BUILD: ssl: avoid mixed declarations in the AWS-LC curve fetch
- DEBUG: support reading set-dumpable from HAPROXY_FORCE_DUMPABLE
- BUG/MINOR: hq-interop: prevent double EOM on request with standalone FIN
- BUG/MINOR: ssl: fix trace crash on FE conn release in io cb
- BUG/MINOR: ssl: fix trace crash on BE conn release in io cb
- BUG/MEDIUM: ssl: crt-list ciphers ignored with AWS-LC
- BUG/MEDIUM: ssl: crt-list curves ignored with AWS-LC
- CI: github: test AWS-LC 3.x and 4.x LTS branches
- CI: github: test the latest AWS-LC release on development branches
- CI: github: cache QuicTLS builds
- CI: github: move wolfSSL 5.7.0 testing to a nightly workflow
- BUG/MEDIUM: listener: Consider maxconn before waking listeners
- BUG/MINOR: ssl: don't uppercase the native group name
- DOC: ssl: clarify the NID-based curve fetch branch
- BUG/MINOR: ssl: use standard names for X25519 and X448 groups
- MINOR: ssl: split curve names into ANSI, IANA and NIST columns
- MINOR: ssl: skip unavailable NIDs in curves2nid lookup
- MINOR: ssl: complete registered group names and library NID mappings
- MINOR: ssl: add curve2name converter
- MINOR: ssl: accept integer group IDs in curve2name
- BUG/MAJOR: mux-quic: prevent crash on QCS already set for purging
- BUG/MINOR: mux_quic: prevent purgeable QCS lingering
- BUG/MINOR: mux_quic: extend FINAL_SIZE_ERROR detection on stream
- BUG/MINOR: mux_quic: report conn error on RESET_STREAM fctl violation
- BUG/MEDIUM: mux_quic: account discarded data in connection flow control
- BUG/MINOR: mux_quic: account data in conn fctl on early detach
- BUG/MINOR: h3: reject frames with truncated header
- BUG/MINOR: h3: close connection on GOAWAY frame too long
- BUG/MINOR: h3: reject RS/SS for QPACK uni streams
- BUG/MEDIUM: mux_quic: notify stream on RESET_STREAM reception
- BUG/MINOR: ssl: Fix potential NULL-deref in "dump ssl cert" with AWS-LC
- BUG/MEDIUM: h3: fix end-of-input report on DATA wrapping
- MEDIUM: h3: do not close conn on unaligned non DATA frame
- MINOR: doc: elaborate on diagnostic mode behavior
- BUG/MEDIUM: h3: fix incorrect DATA size block on DEM FULL
- BUG/MAJOR: cfgparse: properly check userlist section when scanning keywords
- BUG/MINOR: cfgparse-global: add missing gotos to error label in max-spread-checks
- BUG/MINOR: cfgparse-global: add missing calloc() check for the global description
- BUG/MINOR: cfgparse-listen: release the previous description of the proxy
- BUG/MINOR: cfgparse-listen: fix the argument checked by "email-alert"
- BUG/MINOR: cfgparse-listen: fix quoting of the condition conflict warning
- BUG/MINOR: cfgparse-global: reject extra arguments to numa-cpu-mapping and anonkey
- BUG/MINOR: cfgparse-listen: always reject extra arguments to "persist"
- BUG/MINOR: cfgparse-listen: don't lose the errors reported while creating a proxy
- BUG/MINOR: cfgparse-listen: properly reject extra args in a backend section
- BUG/MINOR: proxy: also look for the closest option among cfg_opts3
- BUG/MINOR: cfgparse-listen: complete the list of options for the suggestions
- CLEANUP: proxy: adapt the error message for removed "option transparent"
- MINOR: cfgparse: expose the keyword modifier to the keyword parsers
- CLEANUP: cfgparse-global: move the argument-less boolean options to a parser
- CLEANUP: cfgparse-global: move "set-dumpable" to its own parser
- CLEANUP: cfgparse-global: move "uid", "gid", "user" and "group" to its own parser
- CLEANUP: cfgparse-global: move "external-check" to its own parser
- CLEANUP: cfgparse-global: move "cluster-secret" to its own parser
- CLEANUP: cfgparse-global: move the process-wide limits to a single parser
- CLEANUP: cfgparse-global: move the compression limits to a single parser
- CLEANUP: cfgparse-global: move "ssl-server-verify" to its own parser
- CLEANUP: cfgparse-global: move "node" and "description" to their own parser
- CLEANUP: cfgparse-global: move "unix-bind" to its own parser
- CLEANUP: cfgparse-global: move the log keywords to a single parser
- CLEANUP: cfgparse-global: move the state file keywords to their own parser
- CLEANUP: cfgparse-global: move the spread-checks keywords to their own parser
- CLEANUP: cfgparse-global: move "cpu-map" to its own parser
- CLEANUP: cfgparse-global: move "anonkey" to its own parser
- CLEANUP: cfgparse-global: ask not to add new keywords in common_kw_list[]
- CLEANUP: cfgparse-global: simplify cfg_parse_global()
- MINOR: cfgparse-listen: introduce proxy_parse_removed_kw() and use it
- MEDIUM: cfgparse-listen: move removed keywords' help messages into an array
- CLEANUP: cfgparse-listen: move "disabled" and "enabled" to their own parser
- CLEANUP: cfgparse-listen: move the connection limits to thier own parser
- CLEANUP: cfgparse-listen: move the backend one-arg keywords to their own parser
- CLEANUP: cfgparse-listen: move "mode" to its own parser
- CLEANUP: cfgparse-listen: move "id" and "description" to their own parser
- CLEANUP: cfgparse-listen: move "acl" to its own parser
- CLEANUP: cfgparse-listen: move the monitor keywords to their own parser
- CLEANUP: cfgparse-listen: move the persistence keywords to their own parser
- CLEANUP: cfgparse-listen: move "capture" to its own parser
- CLEANUP: cfgparse-listen: move the log format keywords to their own parser
- CLEANUP: cfgparse-listen: add parser for "log", "log-tag" and "unique-id-header"
- CLEANUP: cfgparse-listen: move the load-balancing keywords to their own parser
- CLEANUP: cfgparse-listen: move "source" "usesrc" and "interface" to their own parser
- CLEANUP: cfgparse-listen: add parser for server/backend sekection keywords
- CLEANUP: cfgparse-listen: move the HTTP rule sets to their own parser
- CLEANUP: cfgparse-listen: move "redirect" to its own parser
- CLEANUP: cfgparse-listen: move "stick-table" to its own parser
- CLEANUP: cfgparse-listen: move "stick" to its own parser
- CLEANUP: cfgparse-listen: move "cookie" to its own parser
- CLENAUP: cfgparse-listen: move "email-alert" to its own parser
- CLEANUP: cfgparse-listen: move "stats" to its own parser
- CLENAUP: cfgparse-listen: move the "server" keywords to their own parser
- CLEANUP: cfgparse-listen: move "bind" to its own parser
- MINOR: log: add proxy_logformat_origin() to detect a proxy's log-format type
- CLEANUP: cfgparse-listen: move "option" to its own parser
- CLEANUP: cfgparse-listen: simplify the second half of cfg_parse_listen()
- MINOR: cfgparse: always suggest the section names on an unknown keyword
- CLEANUP: cfgparse: remove the unused common_kw_list[] definitions
- MEDIUM: spoe: add the "on-switching-rules" event
- BUG/MEDIUM: cli: fix the last command detection on a full command line
- REGTESTS: cli: test a command line of exactly tune.bufsize bytes
- BUG/MEDIUM: log: do not ignore the peer's shutdown in the syslog applet
- REGTESTS: log: check that a log-forward TCP session ends on client close
- BUG/MINOR: spoe: Fix the message list splice with an empty list
- BUG/MINOR: flt-decomp: Fix the decompression filter keyword list name
- MEDIUM: flt-http-comp: Enable compression directions from algorithms
- MINOR: flt-http-comp: Use compression options as filter config
- BUG/MINOR: flt-http-comp: Enable implicit filters independently per direction
- MINOR: flt-http-comp: Don't uselessly init a compression filter
- MINOR: flt-decomp: Don't instantiate a filter without applicable direction
- MINOR: bwlim: Use a different filter ID for in/out filters
- MINOR: fcgi: Move application validation to the post-check stages
- MINOR: filters: Introduce filter classes and per-side class ordering
- MINOR: filters: Add per-proxy filter instance storage and lookup
- MINOR: filters: Inherit filter instances from defaults sections
- MINOR: filters: Add instance parsers for the built-in classes
- MEDIUM: filters: Parse and finalize filter-config instances
- MINOR: filters: Add filter-enable and filter-disable directives
- MINOR: filters: Add per-side filter-sequence constraints
- MINOR: filters: Mirror implicit filters as filter instances
- MINOR: filters: Expose classes and instances through the CLI
- MINOR: filters: Reject filter-* directives in anonymous defaults
- MINOR: filters: Restrict defaults inheritance with explicit filter directives
- MINOR: filters: Reject mixing legacy and filter-* directives
- MINOR: filters: Maintain a global instance list per proxy
- MINOR: filters: Use global instance order for startup operations
- MINOR: filters: Support global instance sequencing
- MINOR: filters: Expose global filter ordering through the CLI
- MINOR: filters: Use a proxy flag to detect use of legacy 'filter' directive
- MINOR: filters: Don't finalize filter instances in legacy mode
- MINOR: filters: Add helpers to iterate and find filter configurations
- MINOR: filters: Add flt_has_filter() and use it in proxy_finalize()
- MINOR: filters: Select legacy or instance model in lifecycle callbacks
- MEDIUM: filters: Attach filter instances to streams
- MEDIUM: cache: Resolve cache rules during the check stage
- MINOR: cache: Use the filter helpers for cache checks and post-check
- MINOR: fcgi-app: Use the filter configuration helpers for lookups and checks
- MINOR: bwlim: Look up the bandwidth filter with the filter helpers
- MINOR: flt-decomp: Use the filter helpers for implicit decompression checks
- MINOR: flt-http-comp: Use the filter helpers for implicit compression checks
- MINOR: spoe: Use the filter configuration helpers for lookups and checks
- REGTESTS: filters: Add a test for per-proxy stream filter ordering
- REGTESTS: filters: Exercise Lua inheritance and state selection
- REGTESTS: filters: Exercise stream isolation across backend modes
- REGTESTS: filters: Exercise Lua callback resumption
- REGTESTS: filters: Exercise Lua filters across HTTP retries
- REGTESTS: filters: Exercise Lua probes around mixed built-in filters
- REGTESTS: filters: Exercise TCP Lua payload chains and sequencing
- REGTESTS: filters: Exercise per-thread Lua instance state
- REGTESTS: filters: Record Lua callback waits across backend EOF
- REGTESTS: filters: Check non-HTX Lua filters in HTTP chains
- MINOR: filters: Add a global option to enforce the legacy filter api
- DOC: filters: Document the filter instance mode and the legacy mode
- DOC: lua: Document the filter instance declaration of Lua filters
- CLEANUP: filters: Use the stream filter instance wording in comments
- MINOR: filters: List the filter classes in haproxy -vv
- DOC: config: Review "Supported filters" section
- MINOR: lua: Protect the common Lua state during a runtime filter deinit
- MEDIUM: stream: Hold a reference on the frontend during stream_free()
- MINOR: applet: Add a destroy callback to the applets
- BUG/MEDIUM: spoe: Let an agent outlive its applets during a backend deletion
- MEDIUM: filters: Activate the instances inherited by dynamic backends
- DOC: filters: Document how to port an existing filter
- BUG/MINOR: hlua: assume proxy_find_by_id() may return NULL on previously existing server
- MINOR: event_hdl: add PROXY family events
- MINOR: proxy: add e_sub proxy subscrition list
- MINOR: event_hdl/proxy: publish EVENT_HDL_SUB_PROXY_{ADD,DEL,PUB,UNPUB} events
- MINOR: hlua: expose PROXY event family through Lua
- BUG/MEDIUM: mux-h2: don't return a freed tasklet from h2_deferred_shut()
- BUG/MEDIUM: mux-fcgi: don't return a freed tasklet from fcgi_deferred_shut()
- BUG/MEDIUM: mux-h1: don't pass an upgraded connection to traces in h1s_destroy()
- BUG/MEDIUM: mux-h2: report a dead rhttp connection in h2_wake()
- BUG/MEDIUM: mux-h2: fix a possible crash on rxbuf allocation failure
- MINOR: cache: Remove a useless variable in http_action_req_cache_use
- BUG/MEDIUM: mux-h1: also release the embryonic stream when the error is empty
- BUG/MINOR: http-fetch: don't report pseudo-headers in TCP mode
- BUG/MEDIUM: mux-h1: only accept the H2 preface on the first request
- MINOR: stats: report the SSL library FIPS mode in "show info"
- REGTESTS: http-messaging: Fix http_fail_cnt_body to succeed with small timeouts
- REGTEST: ssl: require OpenSSL 1.1.1 for crt-list ciphersuites tests
- DOC: make: fix EXTRA_MAKE fragment filename
- BUG/MINOR: cfgparse-global: only warn when "localpeer" is set together with -L
- DOC: configuration: document AWS-LC compatibility restrictions
- OPTIM/MINOR: server: restrict <all_servers> list usage
- MINOR: server: rename <all_servers> list to <servers_to_init>
- MINOR: server: refactor cli_find_server()
- MINOR: server: extract unregistering from "delete server" CLI parser
- MINOR: proxy: define purge task and purge servers list
- MEDIUM: server: implement "purge server" CLI
- MINOR: server: set maintenance mode on "purge server"
- MINOR: proxy: yield during servers purge
- MINOR: cli: refactor CLI wait command parser
- MINOR: cli: implement wait srv-unknown
- OPTIM/MINOR: server: remove unnecessary server lookup during purge
- REGTESTS: server: test "purge server" CLI command
- MEDIUM: server: implement "purge all servers" CLI
- MINOR: server: yield during "purge all servers"
- REGTESTS: server: test "purge all servers" CLI command
- MINOR: proxy: extract proxy runtime deletion in a specific function
- MEDIUM: proxy: implement purge backend
- MINOR: cli: implement wait be-unknown
- OPTIM/MINOR: proxy: remove unnecessary lookup during purge
- REGTESTS: proxy: test "purge backend" CLI
- BUG/MAJOR: mux-h2: properly handle short reads on PING frames
- BUG/MAJOR: h1-htx: report an error on a too long chunk-size line
HAProxy
HAProxy is a free, very fast and reliable reverse-proxy offering high availability, load balancing, and proxying for TCP and HTTP-based applications.
Installation
The INSTALL file describes how to build HAProxy. A list of packages is also available on the wiki.
Getting help
The discourse and the mailing-list are available for questions or configuration assistance. You can also use the slack or IRC channel. Please don't use the issue tracker for these.
The issue tracker is only for bug reports or feature requests.
Documentation
The HAProxy documentation has been split into a number of different files for ease of use. It is available in text format as well as HTML. The wiki is also meant to replace the old architecture guide.
Please refer to the following files depending on what you're looking for:
- INSTALL for instructions on how to build and install HAProxy
- BRANCHES to understand the project's life cycle and what version to use
- LICENSE for the project's license
- CONTRIBUTING for the process to follow to submit contributions
- doc/haterm.txt and doc/haload.txt for load generation utilities
The more detailed documentation is located into the doc/ directory:
- doc/intro.txt for a quick introduction on HAProxy
- doc/configuration.txt for the configuration's reference manual
- doc/lua.txt for the Lua's reference manual
- doc/SPOE.txt for how to use the SPOE engine
- doc/network-namespaces.txt for how to use network namespaces under Linux
- doc/management.txt for the management guide
- doc/regression-testing.txt for how to use the regression testing suite
- doc/peers.txt for the peers protocol reference
- doc/coding-style.txt for how to adopt HAProxy's coding style
- doc/internals for developer-specific documentation (not all up to date)
License
HAProxy is licensed under GPL 2 or any later version, the headers under LGPL 2.1. See the LICENSE file for a more detailed explanation.