Hi,
HAProxy 1.7.0 was released on 2016/11/25. It added 107 new commits
after version 1.7-dev6. Most of them were late minor bug fixes and code
cleanups. Over the last two weeks we finally managed to clean a lot of
historical mess, just by splitting some huge code parts into several
files, or moving them into the appropriate file. It's better done
before than after a release since it will make backports easier for the
maintenance branch. To be honnest there's nothing outstanding compared
to 1.7-dev6 so I won't comment on these very latest changes.
Haproxy 1.7 now is what I would have liked 1.6 to be, and is what I
consider the cleanest version we've ever produced. When 1.6 was released
one year ago, I predicted that we'd face one year worth of bug fixes due
to the important changes that were brought to the connection management,
and it indeed took almost one year to get rid of all of them. Now we
mostly focused on fixes, cleanups and modularity, but not on earth-shaking
changes.
It's interesting to note that among the 706 commits that were produced
between 1.6.0 and 1.7.0, no less than 207 were bug fixes (roughly 1/3),
around 70 were build fixes and code reorganizations, and around 60 were
doc updates, so 1.7 was where the fixes for 1.6 were developped, and that
brings it its current level of maturity. We have almost not observed any
1.7-specific regression during its development for now which is a very
good sign of the code becoming more modular and much less tricky than
what it used to be. We had to emit 1.6.1 only one week after 1.6.0 due
to a major bug, I bet we'll be able to wait longer before requiring such
an update, time will tell.
Despite this it still brings quite some significant improvements over
1.6 :
- significant improvements of the CLI : it is now possible to easily
register new commands without causing some inter-dependencies between
the CLI code and the functional code, so we could already improve a
large number of commands with better help and extra arguments. In
addition to this, the Lua code can also register CLI commands, pushing
the limits as far as your imagination goes.
- typed statistics : will make it easier to aggregate statistics over
multiple processes. Additionally, all the fields that used to be
available in HTML are now also exported in the CSV output, such as
the server's address and port, cookie, average response times, etc.
- SPOE (stream processing offload engine) : ability to delegate some
slow, unreliable or dangerous processing to external processes,
ensuring it will be much less necessary to touch the core parts to
add new features, and that some parts could possibly work across
multiple versions.
- filters : these are a new type of internal hooks to many events and
around most analysers in order to plug code that can manipulate data
and headers. The compression was moved to a filter, and it will be
easy to write new code using filters. SPOE was built entirely as a
filter.
- log-format : the parser now honnors error processing. It's been a
huge source of complaints over the last few years where some log
fields were empty because improperly typed in the config, but the
much more modular architecture now made this possible.
- support of directories for config files : now if the argument to -f
is a directory, all files found there are loaded in alphabetical
order. Additionally, files can be specified after "--" without having
to repeat "-f".
- config : it is now possible to set/unset/preset environment variables
directly in the global section, and even to consult them on the CLI.
- init-addr : it is now possible to decide in which order the FQDN
should be resolved on "server" lines, and even accept to start with
no address, waiting for a run-time resolution.
- server update on the CLI : the CLI makes it possible to change a
server's address, port, maxconn, check address and port so that it
is not required anymore to reload haproxy just to update an address.
In conjunction with init-addr, it even allows to pre-populate some
server pools that are filled at run time.
- state change via the DNS : a valid DNS resolution can now start a
server, and repeated failures can stop it (configurable). This is
another step in the direction of a more dynamic configuration.
- agent-check : an agent can now change the server's maxconn setting. A
server may now take its own load into consideration when deciding what
its connection limit should be.
- support for OpenSSL 1.1.0 : this makes this new version future-proof
given that 1.1.0 is about to ship in some future distros. Compatibility
with older versions was validated on 0.9.8, 1.0.1 and 1.0.2.
- support of multi-certs : different certificates for a same domain so
that the best one can be picked according to browser support. The main
use is to be able to deliver ECDSA certificates to clients supporting
them, without breaking compatibility with older clients.
- updates to support OpenBSD 5.7. This brings accept4() and a few other
features I've totally forgotten.
- WURFL : this is another device detection engine, made by Scientiamobile.
Now we have 3 of them (DeviceAtlas and 51Degrees being the two others),
users will have a broad choice to compare based on their needs. Nothing
technically prevents them from being built in together.
- 51Degrees moved to a new API (v3) which is supposedly faster and cleaner,
it's different from v2 used in haproxy 1.6 so the lib has to be rebuilt
but the databases remain compatible.
- performance improvements : version 1.7 is about 10% faster than 1.6
on large requests or responses thanks to some speed ups in the HTTP
message parser.
- peers v2.1 : a small, backwards compatible, upgrade to the peers
protocol has consisted in transmitting expiration dates so that old
entries are not constantly refreshed upon reloads. This is important
for people who reload often.
- stick-tables : now support automatic type casting on the input sample.
This avoids a useless conversion to a string which can possibly lose
some information sometimes and which is not efficient. Now the tables
use the native sample type. It's also faster to perform lookups.
- hash-balance-factor : the consistent hash can now improve the balancing
to avoid a single node being overloaded. It progressively spreads the
excess load to adjacent nodes when the load difference is above a
configurable threshold. Very useful for large cache farms.
- "tcp-request session" rules : it was often painful not to be able to
track an IP address transferred via the proxy protocol without having
to pollute the "tcp-request content" rules which are called for each
request in case of HTTP keep-alive. This is now possible. It will also
be possible to take early decisions based on SSL layer information.
- a number of new actions, like "set-src", "set-dst", etc... which make
it possible to assign the source and destination addresses to what was
found in a HTTP header for example. This can also be used to build an
explicit (non-resolving) proxy when running in transparent mode.
- on Linux kernels 4.2 and above, IP_BIND_ADDRESS_NO_PORT is used on
outgoing connections so that the kernel knows it can reuse the same
source port. This is useful when dealing with hundreds of thousands
of concurrent connections.
- SO_REUSEPORT is now configurable and can be disabled. Some people
indeed prefer a second bind to fail instead of having two processes.
- a new completely rewritten and much safer DNS response parser. The
original one was fragile and required an extreme care. The new one
fills structures that are exploited by the requester, making it less
likely to do something wrong.
- "%Tq" decomposition : the "%Tq" timer in the logs has became useless
with keep-alive, showing large request times which were in fact idle
time. And with browsers' pre-connect, it has become even worse given
that even the first connection could appear long. Now we have extra
fields to separately report the idle and SSL handshake times so that
logs become accurate again.
- tcp: we now have many new sample fetch functions reporting tcp-level
information on the client-to-haproxy connection. This makes it possible
for example to collect statistics, or to decide to perform a redirect
to another site or to deliver compressed objects when the RTT is too
high.
- http-response track-sc : it's possible to track some information coming
from the response. One example consists in collecting statistics on
content-length or HTTP statuses. Another example is a counter to see if
a client-provided cookie was already seen on the server side.
- accept-netscaler-cip : it's an alternative to the PROXY protocol,
implemented in Citrix's NetScaler load balancers. Thanks to this, both
HAProxy and NetScaler can cooperate.
- Lua: a lot of additions, various classes to access many internal
objects like listeners, servers, proxies and I don't know what else.
- mailers : various improvements such as timeouts and better SMTP protocol
compliance.
- maps : support a new type of maps consisting in regex with replacement
values (a-la "sed").
And that's about all. This work was contributed by 62 different persons,
out of which about 2/3 were new contributors. It's the same progression
as we had in 1.6. Do not hesitate to say "thanks" to them when you meet
them, and particularly if they contributed a feature which made your life
easier. Please see the full log at the bottom of this e-mail for more
information.
Now enough typing, I still have quite a few instances to upgrade, and the
web site to update :-)
Please find the usual URLs below :
Site index : http://www.haproxy.org/
Discourse : http://discourse.haproxy.org/
Sources : http://www.haproxy.org/download/1.7/src/
Git repository : http://git.haproxy.org/git/haproxy-1.7.git/
Git Web browsing : http://git.haproxy.org/?p=haproxy-1.7.git
Changelog : http://www.haproxy.org/download/1.7/src/CHANGELOG
Cyril's HTML doc : http://cbonte.github.io/haproxy-dconv/
Willy
---
Complete changelog since 1.7-dev6 :
- SCRIPTS: make publish-release also copy the new SPOE doc
- BUILD: http: include types/sample.h in proto_http.h
- BUILD: debug/flags: remove test for SF_COMP_READY
- CONTRIB: debug/flags: add check for SF_ERR_CHK_PORT
- MINOR: lua: add function which return true if the channel is full.
- MINOR: lua: add ip addresses and network manipulation function
- CONTRIB: tcploop: scriptable TCP I/O for debugging purposes
- CONTRIB: tcploop: implement fork()
- CONTRIB: tcploop: implement logging when called with -v
- CONTRIB: tcploop: update the usage output
- CONTRIB: tcploop: support sending plain strings
- CONTRIB: tcploop: don't report failed send() or recv()
- CONTRIB: tcploop: add basic loops via a jump instruction
- BUG/MEDIUM: channel: bad unlikely macro
- CLEANUP: lua: move comment
- CLEANUP: lua: control executed twice
- BUG/MEDIUM: ssl: Store certificate filename in a variable
- BUG/MINOR: ssl: Print correct filename when error occurs reading OCSP
- CLEANUP: ssl: Remove goto after return dead code
- CLEANUP: ssl: Fix bind keywords name in comments
- DOC: ssl: Use correct wording for ca-sign-pass
- CLEANUP: lua: avoid directly calling getsockname/getpeername()
- BUG/MINOR: stick-table: handle out-of-memory condition gracefully
- MINOR: cli: add private pointer and release function
- MEDIUM: lua: Add cli handler for Lua
- BUG/MEDIUM: connection: check the control layer before stopping polling
- DEBUG: connection: mark the closed FDs with a value that is easier to detect
- BUG/MEDIUM: stick-table: fix regression caused by recent fix for
out-of-memory
- BUG/MINOR: cli: properly decrement ref count on tables during failed dumps
- BUG/MEDIUM: lua: In some case, the return of sample-fetche is ignored
- MINOR: filters: Add check_timeouts callback to handle timers expiration on
streams
- MINOR: spoe: Add 'timeout processing' option to limit time to process an
event
- MINOR: spoe: Remove useless 'timeout ack' option
- MINOR: spoe: Add 'option continue-on-error' statement in spoe-agent section
- MINOR: spoe: Add "maxconnrate" and "maxerrrate" statements
- MINOR: spoe: Add "option set-on-error" statement
- MINOR: stats: correct documentation of process ID for typed output
- BUILD: contrib: fix ip6range build on Centos 7
- BUILD: fix build on Solaris 10/11
- BUG/MINOR: cli: fix pointer size when reporting data/transport layer name
- BUG/MINOR: cli: dequeue from the proxy when changing a maxconn
- BUG/MINOR: cli: wake up the CLI's task after a timeout update
- MINOR: connection: add a few functions to report the data and xprt layers'
names
- MINOR: connection: add names for transport and data layers
- REORG: cli: split dumpstats.c in src/cli.c and src/stats.c
- REORG: cli: split dumpstats.h in stats.h and cli.h
- REORG: cli: move ssl CLI functions to ssl_sock.c
- REORG: cli: move map and acl code to map.c
- REORG: cli: move show stat resolvers to dns.c
- MINOR: cli: create new function cli_has_level() to validate permissions
- MINOR: server: create new function cli_find_server() to find a server
- MINOR: proxy: create new function cli_find_frontend() to find a frontend
- REORG: cli: move 'set server' to server.c
- REORG: cli: move 'show pools' to memory.c
- REORG: cli: move 'show servers' to proxy.c
- REORG: cli: move 'show sess' to stream.c
- REORG: cli: move 'show backend' to proxy.c
- REORG: cli: move get/set weight to server.c
- REORG: cli: move "show stat" to stats.c
- REORG: cli: move "show info" to stats.c
- REORG: cli: move dump_text(), dump_text_line(), and dump_binary() to
standard.c
- REORG: cli: move table dump/clear/set to stick_table.c
- REORG: cli: move "show errors" out of cli.c
- REORG: cli: make "show env" also use the generic keyword registration
- REORG: cli: move "set timeout" to its own handler
- REORG: cli: move "clear counters" to stats.c
- REORG: cli: move "set maxconn global" to its own handler
- REORG: cli: move "set maxconn server" to server.c
- REORG: cli: move "set maxconn frontend" to proxy.c
- REORG: cli: move "shutdown sessions server" to stream.c
- REORG: cli: move "shutdown session" to stream.c
- REORG: cli: move "shutdown frontend" to proxy.c
- REORG: cli: move "{enable|disable} frontend" to proxy.c
- REORG: cli: move "{enable|disable} server" to server.c
- REORG: cli: move "{enable|disable} health" to server.c
- REORG: cli: move "{enable|disable} agent" to server.c
- REORG: cli: move the "set rate-limit" functions to their own parser
- CLEANUP: cli: rename STAT_CLI_* to CLI_ST_*
- CLEANUP: cli: simplify the request parser a little bit
- CLEANUP: cli: remove assignments to st0 and st2 in keyword parsers
- BUILD: server: remove a build warning introduced by latest series
- BUG/MINOR: log-format: uncatched memory allocation functions
- CLEANUP: log-format: useless file and line in json converter
- CLEANUP/MINOR: log-format: unexport functions parse_logformat_var_args()
and parse_logformat_var()
- CLEANUP: log-format: fix return code of the function parse_logformat_var()
- CLEANUP: log-format: fix return code of function parse_logformat_var_args()
- CLEANUP: log-format: remove unused arguments
- MEDIUM: log-format: strict parsing and enable fail
- MEDIUM: log-format/conf: take into account the parse_logformat_string()
return code
- BUILD: ssl: make the SSL layer build again with openssl 0.9.8
- BUILD: vars: remove a build warning on vars.c
- MINOR: lua: add utility function for check boolean argument
- MINOR: lua: Add tokenize function.
- BUG/MINOR: conf: calloc untested
- MINOR: http/conf: store the use_backend configuration file and line for logs
- MEDIUM: log-format: Use standard HAProxy log system to report errors
- CLEANUP: sample: report "converter" instead of "conv method" in error
messages
- BUG: spoe: Fix parsing of SPOE actions in ACK frames
- MINOR: cli: make "show stat" support a proxy name
- MINOR: cli: make "show errors" support a proxy name
- MINOR: cli: make "show errors" capable of dumping only request or response
- BUG/MINOR: freq-ctr: make swrate_add() support larger values
- CLEANUP: counters: move from 3 types to 2 types
- CLEANUP: cfgparse: cascade the warnif_misplaced_* rules
- REORG: tcp-rules: move tcp rules processing to their own file
- REORG: stkctr: move all the stick counters processing to stick-tables.c
- DOC: update the roadmap file with the latest changes
And full changelog since 1.6.0 :
Andreas Seltenreich (5):
CLEANUP: stats: Avoid computation with uninitialized bits.
CLEANUP: pattern: Ignore unknown samples in pat_match_ip().
CLEANUP: map: Avoid memory leak in out-of-memory condition.
BUG/MINOR: standard: Avoid free of non-allocated pointer
BUG/MINOR: pattern: Avoid memory leak on out-of-memory condition
Andrew Hayworth (2):
MEDIUM: dns: Don't use the ANY query type
MINOR: cli: ability to set per-server maxconn
Andrew Rodland (5):
MINOR: proxy: add 'served' field to proxy, equal to total of all servers'
MINOR: backend: add hash-balance-factor option for hash-type consistent
MINOR: server: compute a "cumulative weight" to allow chash balancing to
hit its target
MEDIUM: server: Implement bounded-load hash algorithm
DOC: fix the entry for hash-balance-factor config option
Baptiste Assmann (53):
BUG/MINOR: dns: parsing error of some DNS response
BUG/MAJOR: dns: first DNS response packet not matching queried hostname
may lead to a loop
BUG/MINOR: dns: unable to parse CNAMEs response
DOC: typo on capture.res.hdr and capture.req.hdr
BUG/MINOR: dns: check for duplicate nameserver id in a resolvers section
was missing
BUG/MINOR: http rule: http capture 'id' rule points to a non existing id
DOC: relation between timeout http-request and option http-buffer-request
BUG/MINOR: tcpcheck: conf parsing error when no port configured on server
and last rule is a CONNECT with no port
BUG/MINOR: tcpcheck: conf parsing error when no port configured on server
and first rule(s) is (are) COMMENT
DOC: mailers: typo in 'hostname' description
DOC: compression: missing mention of libslz for compression algorithm
MINOR: lru: new function to delete <nb> least recently used keys
MINOR: server state: missing LF (\n) on error message printed when
parsing server state file
BUG/MEDIUM: dns: no DNS resolution happens if no ports provided to the
nameserver
BUG/MAJOR: servers state: server port is erased when dns resolution is
enabled on a server
MINOR: cfgparse: warn when uid parameter is not a number
MINOR: cfgparse: warn when gid parameter is not a number
DOC: "addr" parameter applies to both health and agent checks
DOC: timeout client: pointers to timeout http-request
DOC: typo on stick-store response
DOC: stick-table: amend paragraph blaming the loss of table upon reload
DOC: typo: ACL subdir match
DOC: typo: maxconn paragraph is wrong due to a wrong buffer size
DOC: regsub: parser limitation about the inability to use closing square
brackets
DOC: typo: req.uri is now replaced by capture.req.uri
BUG/MINOR: dns: inapropriate way out after a resolution timeout
BUG/MINOR: dns: trigger a DNS query type change on resolution timeout
BUG/MINOR: DNS: resolution structure change
BUILD: make proto_tcp.c compatible with musl library
MINOR: standard.c: ipcmp() function to compare 2 IP addresses stored in 2
struct sockaddr_storage
MINOR: standard.c: ipcpy() function to copy an IP address from a struct
sockaddr_storage into an other one
MAJOR: listen section: don't use first bind port anymore when no server
ports are provided
MINOR: cli: change a server health check port through the stats socket
MAJOR: check: find out which port to use for health check at run time
MINOR: server: introduction of 3 new server flags
MINOR: new update_server_addr_port() function to change both server's
ADDR and service PORT
MINOR: cli: ability to change a server's port
CLEANUP/MINOR dns: comment do not follow up code update
MINOR: chunk: new strncat function
MINOR: dns: wrong DNS_MAX_UDP_MESSAGE value
MINOR: dns: new MAX values
MINOR: dns: new macro to compute DNS header size
MINOR: dns: new DNS structures to store received packets
MEDIUM: dns: new DNS response parser
MINOR: dns: query type change when last record is a CNAME
MINOR: dns: proper domain name validation when receiving DNS response
MINOR: dns: comments in types/dns.h about structures endianness
MINOR: init: move apply_server_state in haproxy.c before MODE_CHECK
MAJOR: server: postpone address resolution
MINOR: new srv_admin flag: SRV_ADMF_RMAINT
MINOR: dns: implement extra 'hold' timers.
MAJOR: dns: runtime resolution can change server admin state
MEDIUM: server: add a new init-addr server line setting
Ben Cabot (1):
BUG/MEDIUM: config: Adding validation to stick-table expire value.
Ben Shillito (8):
DOC: Edited 51Degrees section of README/
DOC: add Ben Shillito as the maintainer of 51d
BUILD/MAJOR:updated 51d Trie implementation to incorperate latest update
to 51Degrees.c
BUG/MINOR: 51d: Ensures a unique domain for each configuration
BUG/MINOR: 51d: Aligns Pattern cache implementation with HAProxy best
practices.
BUG/MINOR: 51d: Releases workset back to pool.
BUG/MINOR: 51d: Aligned const pointers to changes in 51Degrees.
CLEANUP: 51d: Aligned if statements with HAProxy best practices and
removed casts from malloc.
Benoit GARNIER (2):
BUG/MINOR: log: GMT offset not updated when entering/leaving DST
BUG/MINOR: log: Don't use strftime() which can clobber timezone if
chrooted
Bertrand Jacquin (8):
MINOR: listener: add the "accept-netscaler-cip" option to the "bind"
keyword
MINOR: tcp: add "tcp-request connection expect-netscaler-cip layer4"
MINOR: build: Allow linking to device-atlas library file
BUG/MEDIUM: ssl: Store certificate filename in a variable
BUG/MINOR: ssl: Print correct filename when error occurs reading OCSP
CLEANUP: ssl: Remove goto after return dead code
CLEANUP: ssl: Fix bind keywords name in comments
DOC: ssl: Use correct wording for ca-sign-pass
Bertrand Paquet (1):
BUG/MINOR : allow to log cookie for tarpit and denied request
Chad Lavoie (2):
MINOR: cli: allow the semi-colon to be escaped on the CLI
MINOR: stats: Escape equals sign on socket dump
Chris Short (1):
BUG/MINOR: examples: Fixing haproxy.spec to remove references to .cfg
files
Christopher Faulet (58):
BUILD: ssl: fix build error introduced in commit 7969a3 with OpenSSL <
1.0.0
BUG/MINOR: http: Be sure to process all the data received from a server
MINOR: filters/http: Use a wrapper function instead of
stream_int_retnclose
BUG: stream_interface: Reuse connection even if the output channel is
empty
BUG/MINOR: ssl: Be sure to use unique serial for regenerated certificates
MAJOR: filters: Add filters support
MINOR: filters: Do not reset stream analyzers if the client is gone
REORG: filters: Prepare creation of the HTTP compression filter
MAJOR: filters/http: Rewrite the HTTP compression as a filter
MEDIUM: filters: Use macros to call filters callbacks to speed-up
processing
MEDIUM: filters: remove http_start_chunk, http_last_chunk and
http_chunk_end
MEDIUM: filters: Replace filter_http_headers callback by an analyzer
MEDIUM: filters/http: Move body parsing of HTTP messages in dedicated
functions
MINOR: filters: Add stream_filters structure to hide filters info
MAJOR: filters: Require explicit registration to filter HTTP body and TCP
data
MINOR: filters: Remove unused or useless stuff and do small optimizations
MEDIUM: filters: Optimize the HTTP compression for chunk encoded response
MINOR: filters/http: Slightly update the parsing of chunks
MINOR: filters/http: Forward remaining data when a channel has no "data"
filters
MINOR: filters: Add an filter example
MINOR: filters: Extract proxy stuff from the struct filter
MINOR: filters: Print the list of existing filters during HA startup
MINOR: filters: Typo in an error message
MINOR: filters: Filters must define the callbacks struct during config
parsing
DOC: filters: Add filters documentation
BUG/MINOR: dumpstats: Fix the "Total bytes saved" counter in backends
stats
MEDIUM: filters: Move HTTP headers filtering in its own callback
MINOR: filters: Simplify calls to analyzers using 2 new macros
MEDIUM: filters: Add pre and post analyzer callbacks
DOC: filters: Update the filters documentation accordingly to recent
changes
BUG/MEDIUM: filters: Fix data filtering when data are modified
BUG/MINOR: filters: Fix HTTP parsing when a filter loops on data
forwarding
BUG/MINOR: Rework slightly commit 9962f8fc to clean code and avoid
mistakes
BUG/MEDIUM: http/compression: Fix how chunked data are copied during the
HTTP body parsing
BUG: vars: Fix 'set-var' converter because of a typo
CLEANUP: remove last references to 'ruleset' section
MEDIUM: filters: Add attch/detach and stream_set_backend callbacks
MINOR: filters: Update filters documentation accordingly to recent changes
MINOR: filters: Call stream_set_backend callbacks before updating backend
stats
MINOR: filters: Remove backend filters attached to a stream only for HTTP
streams
MINOR: flt_trace: Add hexdump option to dump forwarded data
MINOR: cfgparse: Add functions to backup and restore registered sections
MINOR: cfgparse: Parse scope lines and save the last one parsed
REORG: sample: move code to release a sample expression in sample.c
MINOR: vars: Allow '.' in variable names
MINOR: vars: Add vars_set_by_name_ifexist function
MEDIUM: vars: Add a per-process scope for variables
MINOR: vars: Add 'unset-var' action/converter
MAJOR: spoe: Add an experimental Stream Processing Offload Engine
MINOR: spoe: add random ip-reputation service as SPOA example
MINOR: spoe/checks: Add support for SPOP health checks
MINOR: filters: Add check_timeouts callback to handle timers expiration
on streams
MINOR: spoe: Add 'timeout processing' option to limit time to process an
event
MINOR: spoe: Remove useless 'timeout ack' option
MINOR: spoe: Add 'option continue-on-error' statement in spoe-agent
section
MINOR: spoe: Add "maxconnrate" and "maxerrrate" statements
MINOR: spoe: Add "option set-on-error" statement
BUG: spoe: Fix parsing of SPOE actions in ACK frames
Coen Rosdorff (1):
DOC: fix discrepancy in the example for http-request redirect
Conrad Hoffmann (1):
BUG/MINOR: dumpstats: fix write to global chunk
Cyril Bonté (16):
BUG/MEDIUM: sample: http_date() doesn't provide the right day of the week
DOC: fix a typo for a "deviceatlas" keyword
FIX: small typo in an example using the "Referer" header
BUG/MEDIUM: sample: urlp can't match an empty value
BUG/MEDIUM: checks: email-alert not working when declared in defaults
BUG/MINOR: checks: email-alert causes a segfault when an unknown mailers
section is configured
BUG/MINOR: checks: typo in an email-alert error message
BUG/MEDIUM: stats: stats bind-process doesn't propagate the process mask
correctly
BUG/MEDIUM: cfgparse: wrong argument offset after parsing server "sni"
keyword
BUG/MINOR: fix maxaccept computation according to the frontend process
range
BUG/MEDIUM: stats: show servers state may show an empty or incomplete
result
BUG/MEDIUM: stats: show backend may show an empty or incomplete result
MINOR: stats: fix typo in help messages
MINOR: stats: show stat resolvers missing in the help message
BUG/MEDIUM: stats: show servers state may show an servers from another
backend
DOC: stats: provide state details for show servers state
Dan Lloyd (1):
DOC: spelling fixes
Daniel Jakots (2):
BUILD: check for libressl to be able to build against it
BUILD: Make use of accept4() on OpenBSD.
Daniel Schneller (3):
DOC: Clarify tunes.vars.xxx-max-size settings
MINOR: acl: Add predefined METH_DELETE, METH_PUT
DOC: Clarify IPv4 address / mask notation rules
David Carlier (21):
BUILD: Make deviceatlas require PCRE
CLEANUP: proxy: calloc call inverted arguments
CLEANUP: connection: fix double negation on memcmp()
DOC: deviceatlas: more example use cases.
BUILD: dumpstats: silencing warning for printf format specifier / time_t
MINOR: da: silent logging by default and displaying DeviceAtlas support
if built.
BUG/MEDIUM: da: stop DeviceAtlas processing in the convertor if there is
no input.
CLEANUP: haproxy: using _GNU_SOURCE instead of __USE_GNU macro.
MINOR: sample: Moves ARGS underlying type from 32 to 64 bits.
MINOR: da: Using ARG12 macro for the sample fetch and the convertor.
CLEANUP: chunk: adding NULL check to chunk_dup allocation.
CLEANUP: proto_http: few corrections for gcc warnings.
BUG/MINOR: server: risk of over reading the pref_net array.
BUG/MINOR: cfgparse: couple of small memory leaks.
BUG/MEDIUM: sample: initialize the pointer before parse_binary call.
BUG/MEDIUM: lua: protects the upper boundary of the argument list for
converters/fetches.
MINOR: lua: migrate the argument mask to 64 bits type.
CLEANUP: dumpstats: u64 field is an unsigned type.
CLEANUP: connection: using internal struct to hold source and dest port.
MINOR: cfgparse: few memory leaks fixes.
BUILD: fix build on Solaris 10/11
Dinko Korunic (1):
BUG/MINOR: Fix OSX compilation errors
Dirkjan Bussink (1):
MEDIUM: ssl: Add support for OpenSSL 1.1.0
Dragan Dosen (9):
BUG/MINOR: server: check return value of fgets() in apply_server_state()
MINOR: standard: add function "escape_chunk"
MEDIUM: log: add a new log format flag "E"
MINOR: stream: export the function 'smp_create_src_stkctr'
BUG/MINOR: http: url32+src should use the big endian version of url32
BUG/MINOR: http: url32+src should check cli_conn before using it
DOC: http: add documentation for url32 and url32+src
MINOR: standard: add function "escape_string"
BUG/MEDIUM: log: use function "escape_string" instead of "escape_chunk"
Emeric Brun (4):
BUG/MEDIUM: peers: table entries learned from a remote are pushed to
others after a random delay.
BUG/MEDIUM: peers: old stick table updates could be repushed.
BUG/MINOR: peers: some updates are pushed twice after a resync.
BUG/MINOR: peers: empty chunks after a resync.
Emmanuel Hocdet (2):
MEDIUM: ssl: support SNI filters with multicerts
MINOR: ssl: crt-list parsing factor
Erwan Velu (3):
CLEANUP: proto_http: Removing useless variable assignation
CLEANUP: dumpstats: Removing useless variables allocation
CLEANUP: dns: Removing usless variable & assignation
Frederik Deweerdt (1):
OPTIM/MINOR: session: abort if possible before connecting to the backend
Frédéric Lécaille (2):
BUG/MINOR: peers: Fix peers data decoding issue
MEDIUM: peers: Fix a peer stick-tables synchronization issue.
Godbach (1):
DOC: LUA: fix some typos and syntax errors
Grant (1):
MINOR: examples: Update haproxy.spec URLs to haproxy.org
Herve COMMOWICK (1):
DOC: fix json converter example and error message
Hubert Verstraete (2):
MINOR: new function my_realloc2 = realloc + free upon failure
CLEANUP: fixed some usages of realloc leading to memory leak
Ian Miell (1):
CLEANUP: cfgparse: Very minor spelling correction
James Brown (1):
MINOR: check: add agent-send server parameter
Jerome Duval (2):
BUG/BUILD: replace haproxy-systemd-wrapper with $(EXTRA) in install-bin.
BUILD: add Haiku as supported target.
Joe Williams (1):
MINOR: tcp: add further tcp info fetchers
Jorrit Schippers (1):
DOC: Fix typo in description of `-st` parameter in man page
Kevin Decherf (1):
DOC: specify that stats socket doc (section 9.2) is in management
Lukas Tribus (10):
BUG/MINOR: acl: don't use record layer in req_ssl_ver
BUG/MINOR: lua: don't force-sslv3 LUA's SSL socket
MINOR: unix: don't mention free ports on EAGAIN
DOC: remove old tunnel mode assumptions
BUG/MEDIUM: dns: unbreak DNS resolver after header fix
BUG/MINOR: displayed PCRE version is running release
MINOR: show Built with PCRE version
MINOR: show Running on zlib version
MEDIUM: make SO_REUSEPORT configurable
MINOR: enable IP_BIND_ADDRESS_NO_PORT on backend connections
Mac Browning (1):
DOC: add encoding to json converter example
Marcoen Hirschberg (1):
BUG/MEDIUM: ssl: fix off-by-one in ALPN list allocation
Maxime de Roucy (4):
MINOR: add list_append_word function
MEDIUM: init: use list_append_word in haproxy.c
MEDIUM: init: allow directory as argument of -f
BUG/MEDIUM: init: don't use environment locale
Nenad Merdanovic (8):
BUG/MEDIUM: Fix RFC5077 resumption when more than TLS_TICKETS_NO are
present
BUG/MAJOR: Fix crash in http_get_fhdr with exactly MAX_HDR_HISTORY headers
MINOR: Add ability for agent-check to set server maxconn
CLEANUP: Use server_parse_maxconn_change_request for maxconn CLI updates
BUG/MINOR: log: fix a typo that would cause %HP to log <BADREQ>
DOC: Fix typo so fetch is properly parsed by Cyril's converter
BUG/MINOR: Fix endiness issue in DNS header creation code
MINOR: Add fe_req_rate sample fetch
Olivier Doucet (1):
DOC: minor typo fixes to improve HTML parsing by haproxy-dconv
Panagiotis Panagiotopoulos (1):
DOC: add server name at rate-limit sessions example
Pavlos Parissis (2):
MINOR: systemd: Use variable for config and pidfile paths
MINOR: systemd: Perform sanity check on config before reload
Pieter Baauw (5):
DOC: lua-api/index.rst small example fixes, spelling correction.
MEDIUM: cfgparse: reject incorrect 'timeout retry' keyword spelling in
resolvers
MINOR: mailers: increase default timeout to 10 seconds
MINOR: mailers: use <CRLF> for all line endings
MINOR: mailers: make it possible to configure the connection timeout
Raghu Udiyar (1):
BUG/MINOR: stats: fix missing comma in stats on agent drain
Remi Gacogne (1):
BUG/MINOR: ssl: fix potential memory leak in ssl_sock_load_dh_params()
Roberto Guimaraes (1):
BUG/MINOR: ssl: fix potential memory leak in ssl_sock_load_dh_params()
Ruoshan Huang (3):
DOC: prefer using http-request/response over reqXXX/rspXXX directives
BUG/MINOR: fix http-response set-log-level parsing error
MEDIUM: http: implement http-response track-sc* directive
Simon Horman (1):
MINOR: stats: correct documentation of process ID for typed output
Thiago Farina (2):
MINOR: fix the return type for dns_response_get_query_id() function
DOC: fix "needed" typo
Thierry FOURNIER (100):
CLEANUP: use direction names in place of numeric values
BUG/MEDIUM: lua: sample fetches based on response doesn't work
BUILD: freebsd: double declaration
BUG/MEDIUM: lua: clean output buffer
DOC: lua: architecture and first steps
MINOR: lua: service/applet can have access to the HTTP headers when a
POST is received
REORG/MINOR: lua: convert boolean "int" to bitfield
BUG/MEDIUM: lua: Lua applets must not fetch samples using http_txn
BUG/MINOR: lua: Lua applets must not use http_txn
BUG/MEDIUM: lua: Forbid HTTP applets from being called from tcp rulesets
BUG/MAJOR: lua: Do not force the HTTP analysers in use-services
CLEANUP: lua: bad error messages
DOC: lua: fix lua API
BUILD/MINOR: regex: missing header
BUG/MINOR: stream: bad return code
DOC: lua: fix somme errors and add implicit types
MINOR: lua: add set/get priv for applets
DOC: lua: fix somme errors
BUG/MEDIUM: lua: the function txn_done() from sample fetches can crash
BUG/MEDIUM: lua: the function txn_done() from action wrapper can crash
DOC: lua: remove old functions
BUG/MEDIUM: lua: somme HTTP manipulation functions are called without
valid requests
MEDIUM: log: Decompose %Tq in %Th %Ti %TR
MINOR: ssl: add debug traces
BUILD/CLEANUP: ssl: Check BIO_reset() return code
BUG/MINOR: ssl: Check malloc return code
BUG/MINOR: ssl: prevent multiple entries for the same certificate
MINOR: lua: add function which return true if the channel is full.
MINOR: lua: add ip addresses and network manipulation function
BUG/MEDIUM: channel: bad unlikely macro
CLEANUP: lua: move comment
CLEANUP: lua: control executed twice
MINOR: cli: add private pointer and release function
MEDIUM: lua: Add cli handler for Lua
BUG/MEDIUM: lua: In some case, the return of sample-fetche is ignored
BUG/MINOR: log-format: uncatched memory allocation functions
CLEANUP: log-format: useless file and line in json converter
CLEANUP/MINOR: log-format: unexport functions parse_logformat_var_args()
and parse_logformat_var()
CLEANUP: log-format: fix return code of the function parse_logformat_var()
CLEANUP: log-format: fix return code of function
parse_logformat_var_args()
CLEANUP: log-format: remove unused arguments
MEDIUM: log-format: strict parsing and enable fail
MEDIUM: log-format/conf: take into account the parse_logformat_string()
return code
MINOR: lua: add utility function for check boolean argument
MINOR: lua: Add tokenize function.
BUG/MINOR: conf: calloc untested
MINOR: http/conf: store the use_backend configuration file and line for
logs
MEDIUM: log-format: Use standard HAProxy log system to report errors
MINOR: map: Add regex matching replacement
BUG/MINOR: lua: unsafe initialization
MINOR: lua: file dedicated to unsafe functions
MINOR: lua: add "now" time function
MINOR: standard: add RFC HTTP date parser
MINOR: lua: Add date functions
MINOR: lua: move common function
MINOR: lua: merge function
MINOR: lua: Add concat class
BUG/MAJOR: lua: segfault using Concat object
DOC: lua: copyrights
MINOR: common: mask conversion
MEDIUM: dns: extract options
MEDIUM: dns: add a "resolve-net" option which allow to prefer an ip in a
network
BUG/MAJOR: lua: applets can't sleep.
BUG/MINOR: server: some prototypes are renamed
BUG/MINOR: lua: Useless copy
BUG/MINOR: server: fix the format of the warning on address change
CLEANUP: server: add "const" to some message strings
MINOR: server: generalize the "updater" source
BUG/MINOR: conf: "listener id" expects integer, but its not checked
BUG/MINOR: lua: can't load external libraries
BUG/MINOR: prevent the dump of uninitialized vars
CLEANUP: map: it seems that the map were planed to be chained
MINOR: lua: move class registration facilities
MINOR: lua: remove some useless checks
CLEANUP: lua: Remove two same functions
MINOR: lua: refactor the Lua object registration
MINOR: lua: precise message when a critical error is catched
MINOR: lua: post initialization
MINOR: lua: Add internal function which strip spaces
MINOR: lua: convert field to lua type
DOC: name set-gpt0 mismatch with the expected keyword
MINOR: http: sample fetch which returns unique-id
MINOR: dumpstats: extract stats fields enum and names
MINOR: dumpstats: split stats_dump_info_to_buffer() in two parts
MINOR: dumpstats: split stats_dump_fe_stats() in two parts
MINOR: dumpstats: split stats_dump_li_stats() in two parts
MINOR: dumpstats: split stats_dump_sv_stats() in two parts
MINOR: dumpstats: split stats_dump_be_stats() in two parts
MINOR: lua: dump general info
MINOR: lua: add class proxy
MINOR: lua: add class server
MINOR: lua: add class listener
BUG/MEDIUM: stick-tables: some sample-fetch doesn't work in the
connection state.
DOC: http: rename the unique-id sample and add the documentation
MINOR: filters: add opaque data
BUG/MEDIUM: sticktables: segfault in some configuration error cases
BUG/MEDIUM: lua: converters doesn't work
BUG/MINOR: http: add-header: header name copied twice
BUG/MEDIUM: http: add-header: buffer overwritten
MINOR: tcp: Return TCP statistics like RTT and RTT variance
Vincent Bernat (10):
BUILD: install only relevant and existing documentation
CLEANUP: don't ignore debian/ directory if present
CLEANUP: remove unneeded casts
CLEANUP: uniformize last argument of malloc/calloc
CLEANUP: .gitignore cleanup
BUG/MINOR: dns: fix DNS header definition
BUG/MEDIUM: dns: fix alignment issue when building DNS queries
BUG/MAJOR: fix listening IP address storage for frontends
BUG/MINOR: fix listening IP address storage for frontends (cont)
BUG/MINOR: stick-table: handle out-of-memory condition gracefully
William Lallemand (23):
MINOR: rename master process name in -Ds (systemd mode)
BUG/MEDIUM: trace.c: rdtsc() is defined in two files
BUG/MEDIUM: fix risk of segfault with "show tls-keys"
MEDIUM: dumpstats: 'show tls-keys' is now able to show secrets
DOC: update doc about tls-tickets-keys dump
MEDIUM: tcp: add 'set-src' to 'tcp-request connection'
MINOR: set the CO_FL_ADDR_FROM_SET flags with 'set-src'
MEDIUM: tcp/http: add 'set-src-port' action
MEDIUM: tcp/http: new set-dst/set-dst-port actions
BUG/MEDIUM: dumpstats: undefined behavior in stats_tlskeys_list()
MEDIUM: dumpstats: make stats_tlskeys_list() yield-aware during tls-keys
dump
MEDIUM: cli: register CLI keywords with cli_register_kw()
REORG: cli: split dumpstats.c in src/cli.c and src/stats.c
REORG: cli: split dumpstats.h in stats.h and cli.h
REORG: cli: move ssl CLI functions to ssl_sock.c
REORG: cli: move map and acl code to map.c
REORG: cli: move show stat resolvers to dns.c
REORG: cli: move 'set server' to server.c
REORG: cli: move 'show pools' to memory.c
REORG: cli: move 'show servers' to proxy.c
REORG: cli: move 'show sess' to stream.c
REORG: cli: move 'show backend' to proxy.c
REORG: cli: move get/set weight to server.c
Willy Tarreau (292):
[RELEASE] Released version 1.7-dev0
BUG/MEDIUM: namespaces: don't fail if no namespace is used
BUG/MAJOR: ssl: free the generated SSL_CTX if the LRU cache is disabled
DEBUG/MINOR: memory: add a build option to disable memory pools sharing
DEBUG/MEDIUM: memory: optionally protect free data in pools
DEBUG/MEDIUM: memory: add optional control pool memory operations
MEDIUM: memory: add accounting for failed allocations
BUG/MEDIUM: config: count memory limits on 64 bits, not 32
BUG/MAJOR: http: don't requeue an idle connection that is already queued
BUG/MEDIUM: http: switch the request channel to no-delay once done.
BUILD/MINOR: http: proto_http.h needs sample.h
BUG/MEDIUM: http: don't enable auto-close on the response side
BUG/MEDIUM: stream: fix half-closed timeout handling
CLEANUP: compression: don't allocate DEFAULT_MAXZLIBMEM without USE_ZLIB
BUG/MEDIUM: cli: changing compression rate-limiting must require admin
level
BUG/MEDIUM: http: fix http-reuse when frontend and backend differ
BUILD: ssl: set SSL_SOCK_NUM_KEYTYPES with openssl < 1.0.2
MINOR: config: make tune.recv_enough configurable
BUG/MEDIUM: config: properly adjust maxconn with nbproc when memmax is
forced
CONTRIB: initiate a debugging suite to make debugging easier
[RELEASE] Released version 1.7-dev1
BUG/MINOR: http: fix several off-by-one errors in the url_param parser
BUG/MINOR: chunk: make chunk_dup() always check and set dst->size
MINOR: chunks: ensure that chunk_strcpy() adds a trailing zero
MINOR: chunks: add chunk_strcat() and chunk_newstr()
MINOR: chunk: make chunk_initstr() take a const string
MEDIUM: tools: add csv_enc_append() to preserve the original chunk
MINOR: tools: make csv_enc_append() always start at the first byte of the
chunk
DOC: fix "workaround" spelling
BUG/MEDIUM: servers state: server port is used uninitialized
BUG/MEDIUM: channel: fix miscalculation of available buffer space.
MEDIUM: pools: add a new flag to avoid rounding pool size up
BUG/MEDIUM: buffers: do not round up buffer size during allocation
BUG/MINOR: stream: don't force retries if the server is DOWN
BUG/MINOR: counters: make the sc-inc-gpc0 and sc-set-gpt0 touch the table
BUG/CLEANUP: CLI: report the proper field states in "show sess"
MINOR: stats: send content-length with the redirect to allow keep-alive
BUG/MAJOR: http-reuse: fix risk of orphaned connections
BUG/MEDIUM: http-reuse: do not share private connections across backends
BUG/MEDIUM: ssl: fix off-by-one in NPN list allocation
MINOR: cli: add a new "show env" command
MEDIUM: config: allow to manipulate environment variables in the global
section
BUG/MEDIUM: chunks: always reject negative-length chunks
BUG/MINOR: systemd: ensure we don't miss signals
BUG/MINOR: systemd: report the correct signal in debug message output
BUG/MINOR: systemd: propagate the correct signal to haproxy
MINOR: systemd: ensure a reload doesn't mask a stop
BUG/MINOR: tcpcheck: fix incorrect list usage resulting in failure to
load certain configs
BUG/MAJOR: samples: check smp->strm before using it
MINOR: sample: add a new helper to initialize the owner of a sample
MINOR: sample: always set a new sample's owner before evaluating it
BUG/MAJOR: vars: always retrieve the stream and session from the sample
CLEANUP: payload: remove useless and confusing nullity checks for channel
buffer
BUG/MINOR: ssl: fix usage of the various sample fetch functions
MINOR: stats: create fields types suitable for all CSV output data
MINOR: stats: add all the "show info" fields in a table
MEDIUM: stats: fill all the show info elements prior to displaying them
MINOR: stats: add a function to emit fields into a chunk
MINOR: stats: add stats_dump_info_fields() to dump one field per line
MEDIUM: stats: make use of stats_dump_info_fields() for "show info"
MINOR: stats: add a declaration of all stats fields
MINOR: stats: don't hard-code the CSV fields list anymore
MINOR: stats: create stats fields storage and CSV dump function
MEDIUM: stats: convert stats_dump_fe_stats() to use
stats_dump_fields_csv()
MEDIUM: stats: make stats_dump_fe_stats() use stats fields for HTML dump
MEDIUM: stats: convert stats_dump_li_stats() to use
stats_dump_fields_csv()
MEDIUM: stats: make stats_dump_li_stats() use stats fields for HTML dump
MEDIUM: stats: convert stats_dump_be_stats() to use
stats_dump_fields_csv()
MEDIUM: stats: make stats_dump_be_stats() use stats fields for HTML dump
MEDIUM: stats: convert stats_dump_sv_stats() to use
stats_dump_fields_csv()
MEDIUM: stats: make stats_dump_sv_stats() use the stats field for HTML
MEDIUM: stats: move the server state coloring logic to the server dump
function
MINOR: stats: do not use srv->admin & STATS_ADMF_MAINT in HTML dumps
MINOR: stats: do not check srv->state for SRV_ST_STOPPED in HTML dumps
MINOR: stats: make CSV report server check status only when enabled
MINOR: stats: only report backend's down time if it has servers
MINOR: stats: prepend '*' in front of the check status when in progress
MINOR: stats: make HTML stats dump rely on the table for the check status
MINOR: stats: add agent_status, agent_code, agent_duration to output
MINOR: stats: add check_desc and agent_desc to the output fields
MINOR: stats: add check and agent's health values in the output
MEDIUM: stats: make the HTML server state dump use the CSV states
MEDIUM: stats: only report observe errors when observe is set
MEDIUM: stats: expose the same flags for CLI and HTTP accesses
MEDIUM: stats: report server's address in the CSV output
MEDIUM: stats: report the cookie value in the server & backend CSV dumps
MEDIUM: stats: compute the color code only in the HTML form
MEDIUM: stats: report the listeners' address in the CSV output
MEDIUM: stats: make it possible to report the WAITING state for listeners
REORG: stats: dump the frontend's HTML stats via a generic function
REORG: stats: dump the socket stats via the generic function
REORG: stats: dump the server stats via the generic function
REORG: stats: dump the backend stats via the generic function
MEDIUM: stats: add a new "mode" column to report the proxy mode
MINOR: stats: report the load balancing algorithm in CSV output
MINOR: stats: add 3 fields to report the frontend-specific connection
stats
MINOR: stats: report number of intercepted requests for frontend and
backends
MINOR: stats: introduce stats_dump_one_line() to dump one stats line
CLEANUP: stats: make stats_dump_fields_html() not rely on proxy anymore
MINOR: stats: add ST_SHOWADMIN to pass the admin info in the regular flags
MINOR: stats: make stats_dump_fields_html() not use &trash by default
MINOR: stats: add functions to emit typed fields into a chunk
MEDIUM: stats: support "show info typed" on the CLI
MEDIUM: stats: implement a typed output format for stats
DOC: document the "show info typed" and "show stat typed" output formats
CLEANUP: http: fix a build warning introduced by a recent fix
[RELEASE] Released version 1.7-dev2
BUILD: namespaces: fix a potential build warning in namespaces.c
BUG/MEDIUM: peers: fix incorrect age in frequency counters
MEDIUM: proxy: use dynamic allocation for error dumps
BUG/MEDIUM: ssl: rewind the BIO when reading certificates
BUG/MEDIUM: channel: fix miscalculation of available buffer space (2nd
try)
CLEANUP: fix inconsistency between fd->iocb, proto->accept and accept()
BUG/MEDIUM: fix maxaccept computation on per-process listeners
BUG/MINOR: listener: stop unbound listeners on startup
TESTS: add blocksig.c to run tests with all signals blocked
MEDIUM: unblock signals on startup.
BUG/MEDIUM: channel: don't allow to overwrite the reserve until connected
BUG/MEDIUM: channel: incorrect polling condition may delay event delivery
BUG/MEDIUM: channel: fix miscalculation of available buffer space (3rd
try)
BUG/MEDIUM: log: fix risk of segfault when logging HTTP fields in TCP mode
BUG/MEDIUM: http: fix incorrect reporting of server errors
MINOR: channel: add new function channel_congested()
BUG/MEDIUM: http: fix risk of CPU spikes with pipelined requests from
dead client
BUG/MAJOR: channel: fix miscalculation of available buffer space (4th try)
BUG/MEDIUM: stream: ensure the SI_FL_DONT_WAKE flag is properly cleared
BUG/MEDIUM: channel: fix inconsistent handling of 4GB-1 transfers
CLEANUP: don't ignore scripts in .gitignore
BUILD: add a few release and backport scripts in scripts/
[RELEASE] Released version 1.7-dev3
CLEANUP: config: detect double registration of a config section
MINOR: log: add the %Td log-format specifier
SCRIPTS: teach git-show-backports how to report upstream commits
SCRIPTS: make git-show-backports capable of limiting its history
BUG/MAJOR: http: fix breakage of "reqdeny" causing random crashes
BUG/MEDIUM: stick-tables: fix breakage in table converters
MINOR: stick-table: change all stick-table converters' inputs to SMP_T_ANY
BUILD: fix build on Solaris 11
BUG/MEDIUM: config: fix multiple declaration of section parsers
BUILD/MEDIUM: rebuild everything when an include file is changed
BUILD/MEDIUM: force a full rebuild if some build options change
BUILD: ssl: fix typo causing a build failure in the multicert patch
BUG/MINOR: init: always ensure that global.rlimit_nofile matches actual
limits
BUG/MINOR: init: ensure that FD limit is raised to the max allowed
BUG/MEDIUM: external-checks: close all FDs right after the fork()
BUG/MAJOR: external-checks: use asynchronous signal delivery
BUG/MINOR: external-checks: do not unblock undesired signals
CLEANUP: external-check: don't block/unblock SIGCHLD when manipulating
the list
BUG/MINOR: srv-state: fix incorrect output of state file
BUG/MINOR: http: fix misleading error message for response captures
BUG/BUILD: don't automatically run "make" on "make install"
DOC: add missing doc for http-request deny [deny_status <status>]
BUG/MEDIUM: http: unbreak uri/header/url_param hashing
Revert "BUG/MINOR: ssl: fix potential memory leak in
ssl_sock_load_dh_params()"
BUG/MEDIUM: dns: fix alignment issues in the DNS response parser
BUG/MINOR: peers: don't count track-sc multiple times on errors
BUG/MEDIUM: stream-int: completely detach connection on connect error
BUG/MAJOR: compression: initialize avail_in/next_in even during flush
BUG/MEDIUM: samples: make smp_dup() always duplicate the sample
MINOR: sample: implement smp_is_safe() and smp_make_safe()
MINOR: sample: provide smp_is_rw() and smp_make_rw()
BUG/MAJOR: server: the "sni" directive could randomly cause trouble
BUG/MEDIUM: stick-tables: do not fail on string keys with no allocated
size
BUG/MEDIUM: stick-table: properly convert binary samples to keys
MINOR: sample: use smp_make_rw() in upper/lower converters
MINOR: tcp: add dst_is_local and src_is_local
BUILD: protocol: fix some build errors on OpenBSD
BUILD: log: iovec requires to include sys/uio.h on OpenBSD
BUILD: tcp: do not include netinet/ip.h for IP_TTL
BUILD: connection: fix build breakage on openbsd due to missing in_systm.h
BUILD: checks: remove the last strcat and eliminate a warning on OpenBSD
BUILD: tcp: define SOL_TCP when only IPPROTO_TCP exists
BUILD: compression: remove a warning when no compression lib is used
BUILD: poll: remove unused hap_fd_isset() which causes a warning with
clang
BUG/MAJOR: stick-counters: possible crash when using sc_trackers with
wrong table
[RELEASE] Released version 1.7-dev4
CLEANUP: logs: remove unused log format field definitions
BUG/MAJOR: stream: properly mark the server address as unset on connect
retry
BUG/MINOR: payload: fix SSLv2 version parser
BUG/MINOR: stats: report the correct conn_time in backend's html output
BUG/MEDIUM: dns: don't randomly crash on out-of-memory
MINOR: tcp: make set-src/set-src-port and set-dst/set-dst-port commutative
DOC: fix missed entry for "set-{src,dst}{,-port}"
BUG/MINOR: vars: use sess and not s->sess in action_store()
BUG/MINOR: vars: make smp_fetch_var() more robust against misuses
BUG/MINOR: vars: smp_fetch_var() doesn't depend on HTTP but on the session
MINOR: stats: output dcon
CLEANUP: tcp rules: mention everywhere that tcp-conn rules are L4
MINOR: counters: add new fields for denied_sess
MEDIUM: tcp: add registration and processing of TCP L5 rules
MINOR: stats: emit dses
DOC: document tcp-request session
BUG/MINOR: systemd: make the wrapper return a non-null status code on
error
BUG/MINOR: systemd: always restore signals before execve()
BUG/MINOR: systemd: check return value of calloc()
MINOR: systemd: report it when execve() fails
BUG/MEDIUM: systemd: let the wrapper know that haproxy has completed or
failed
SCRIPTS: make git-show-backports also dump a "git show" command
[RELEASE] Released version 1.7-dev5
BUG/MEDIUM: peers: on shutdown, wake up the appctx, not the stream
BUG/MEDIUM: peers: fix use after free in peer_session_create()
MINOR: peers: make peer_session_forceshutdown() use the appctx and not
the stream
MINOR: peers: remove the pointer to the stream
BUG/MEDIUM: systemd-wrapper: return correct exit codes
MEDIUM: tools: make str2ip2() preserve existing ports
CLEANUP: tools: make ipcpy() preserve the original port
OPTIM: http: move all http character classs tables into a single one
OPTIM: http: improve parsing performance of long header lines
OPTIM: http: improve parsing performance of long URIs
OPTIM: http: optimize lookup of comma and quote in header values
BUG/MEDIUM: srv-state: properly restore the DRAIN state
BUG/MINOR: srv-state: allow to have both CMAINT and FDRAIN flags
MINOR: server: do not emit warnings/logs/alerts on server state changes
at boot
BUG/MEDIUM: servers: properly propagate the maintenance states during
startup
DOC: move the device detection modules documentation to their own files
CLEANUP: wurfl: reduce exposure in the rest of the code
MINOR: stream: make option contstats usable again
MEDIUM: tools: make str2sa_range() return the FQDN even when not resolving
MINOR: server: indicate in the logs when RMAINT is cleared
MINOR: stats: indicate it when a server is down due to resolution
MINOR: server: make srv_set_admin_state() capable of telling why this
happens
MEDIUM: cli: leave the RMAINT state when setting an IP address on the CLI
MEDIUM: server: make use of init-addr
MINOR: server: implement init-addr none
MEDIUM: server: make libc resolution failure non-fatal
MINOR: server: add support for explicit numeric address in init-addr
DOC: add some documentation for the "init-addr" server keyword
MINOR: init: add -dr to ignore server address resolution failures
MEDIUM: server: do not restrict anymore usage of IP address from the
state file
DOC: update ROADMAP file
[RELEASE] Released version 1.7-dev6
SCRIPTS: make publish-release also copy the new SPOE doc
BUILD: http: include types/sample.h in proto_http.h
BUILD: debug/flags: remove test for SF_COMP_READY
CONTRIB: debug/flags: add check for SF_ERR_CHK_PORT
CONTRIB: tcploop: scriptable TCP I/O for debugging purposes
CONTRIB: tcploop: implement fork()
CONTRIB: tcploop: implement logging when called with -v
CONTRIB: tcploop: update the usage output
CONTRIB: tcploop: support sending plain strings
CONTRIB: tcploop: don't report failed send() or recv()
CONTRIB: tcploop: add basic loops via a jump instruction
CLEANUP: lua: avoid directly calling getsockname/getpeername()
BUG/MEDIUM: connection: check the control layer before stopping polling
DEBUG: connection: mark the closed FDs with a value that is easier to
detect
BUG/MEDIUM: stick-table: fix regression caused by recent fix for
out-of-memory
BUG/MINOR: cli: properly decrement ref count on tables during failed dumps
BUILD: contrib: fix ip6range build on Centos 7
BUG/MINOR: cli: fix pointer size when reporting data/transport layer name
BUG/MINOR: cli: dequeue from the proxy when changing a maxconn
BUG/MINOR: cli: wake up the CLI's task after a timeout update
MINOR: connection: add a few functions to report the data and xprt
layers' names
MINOR: connection: add names for transport and data layers
MINOR: cli: create new function cli_has_level() to validate permissions
MINOR: server: create new function cli_find_server() to find a server
MINOR: proxy: create new function cli_find_frontend() to find a frontend
REORG: cli: move "show stat" to stats.c
REORG: cli: move "show info" to stats.c
REORG: cli: move dump_text(), dump_text_line(), and dump_binary() to
standard.c
REORG: cli: move table dump/clear/set to stick_table.c
REORG: cli: move "show errors" out of cli.c
REORG: cli: make "show env" also use the generic keyword registration
REORG: cli: move "set timeout" to its own handler
REORG: cli: move "clear counters" to stats.c
REORG: cli: move "set maxconn global" to its own handler
REORG: cli: move "set maxconn server" to server.c
REORG: cli: move "set maxconn frontend" to proxy.c
REORG: cli: move "shutdown sessions server" to stream.c
REORG: cli: move "shutdown session" to stream.c
REORG: cli: move "shutdown frontend" to proxy.c
REORG: cli: move "{enable|disable} frontend" to proxy.c
REORG: cli: move "{enable|disable} server" to server.c
REORG: cli: move "{enable|disable} health" to server.c
REORG: cli: move "{enable|disable} agent" to server.c
REORG: cli: move the "set rate-limit" functions to their own parser
CLEANUP: cli: rename STAT_CLI_* to CLI_ST_*
CLEANUP: cli: simplify the request parser a little bit
CLEANUP: cli: remove assignments to st0 and st2 in keyword parsers
BUILD: server: remove a build warning introduced by latest series
BUILD: ssl: make the SSL layer build again with openssl 0.9.8
BUILD: vars: remove a build warning on vars.c
CLEANUP: sample: report "converter" instead of "conv method" in error
messages
MINOR: cli: make "show stat" support a proxy name
MINOR: cli: make "show errors" support a proxy name
MINOR: cli: make "show errors" capable of dumping only request or response
BUG/MINOR: freq-ctr: make swrate_add() support larger values
CLEANUP: counters: move from 3 types to 2 types
CLEANUP: cfgparse: cascade the warnif_misplaced_* rules
REORG: tcp-rules: move tcp rules processing to their own file
REORG: stkctr: move all the stick counters processing to stick-tables.c
DOC: update the roadmap file with the latest changes
[RELEASE] Released version 1.7.0
fengpeiyuan (1):
DOC: fix a few spelling mistakes
[email protected] (1):
BUG/MINOR: examples/haproxy.init: missing brace in quiet_check()
lsenta (1):
BUG: http: do not abort keep-alive connections on server timeout
mildis (2):
MINOR: config: allow IPv6 bracketed literals
BUG/MINOR: ssl: close ssl key file on error
scientiamobile (1):
MEDIUM: wurfl: add Scientiamobile WURFL device detection module
yanbzhu (7):
MINOR: ssl: Added cert_key_and_chain struct
MEDIUM: ssl: Added support for creating SSL_CTX with multiple certs
MINOR: ssl: Added multi cert support for crt-list config keyword
MEDIUM: ssl: Added multi cert support for loading crt directories
MEDIUM: ssl: Added support for Multi-Cert OCSP Stapling
DOC: ssl: Adding docs for Multi-Cert bundling
DOC: ssl: fixed some formatting errors in crt tag
---
