I had requested some ability to select load balancing policy apart from
priorities, specifically I was hoping for a 'least-connections' policy.
Clustering via multiple includes of the same file is clever. I'd
suggest a note in the man page about that, since I think it's a common
thing.
Re: include_dir - if you sort the files alphabetically, then order is
defined.
-- Dave
On 2/4/2012 11:50 AM, Robert Segall wrote:
So here is a summary of all the feature requests I have seen until now,
as well as some comments on my part:
* protocol selection (SSL v2/v3/TLS)/Martin Meredith
good idea - accepted for 2.7
* thread load instrumentation/Leo
accepted for 2.7
* dynamically growing number of threads/Leo
I don't really see what do you gain by it. Care to clarify?
* detect -Wno-unused-result support/Joe Gooch
already done - will be in 2.7a (slipped out of 2.6 by mistake)
* dynamic back-end address (DNS) or change via poundctl/Rob Moore
we'll need to look at how complex the implementation is
for regular back-ends probably OK, for SSL may be a little tricky
probably OK for 2.7
* SSL Ciphers (BEAST)/Joe Gooch
accepted for 2.7
* Client Renegotiation/Joe Gooch
accepted for 2.7
* SSLv2 should be disabled by default/Joe Gooch
superseded by protocol selection
* CSRF issue w/ invalid tags/et al in redirects/Joe Gooch
accepted for 2.7
* config reload/Erik Hensema
not as easy as it looks - suggestions are welcome
* session cookies by Pound/Francisco Ruiz
needs more discussion. It would break the proxy transparency
* enhanced alive test: 200/503 reply rather than connect/Francisco Ruiz
needs more discussion. Can be easily supported now via external
scripts, so it's not clear we need it
* include file, include dir/Joe Gooch
include file is already supported
include dir is dangerous, as the file inclusion order is unpredictable
- rejected
* ForceHTTP10/ssl unclean shutdown functionality based on user agent/Joe
Gooch
needs more analysis, but looks OK
* Socket ownership and permissions/Joe Gooch
accepted for 2.7
* PCRE-based dynamic redirects/Joe Gooch
needs more analysis
* NoSSL redirect/Joe Gooch
I think it is (mostly ?) supported by existing redirect mechanism
* back-end clusters/Todd Freeman
can be done via multiple includes of same file - rejected
Please feel free to comment on the above, or any other features I
missed.
--
Dave Steinberg
http://www.geekisp.com/
http://www.steinbergcomputing.com/
http://www.redterror.net/
--
To unsubscribe send an email with subject unsubscribe to [email protected].
Please contact [email protected] for questions.
