Hi,

HAProxy 1.8.30 was released on 2021/04/12. It added 8 new commits after
version 1.8.29. The main point of this release is the fix of the
regression on the frequency counters introduced in the latest release.
Thanks to users feedback, the bug was quickly spotted and the fix
validated in higher version before being backported in the 1.8 tree.
Here is the list of the detailed changes.

- As stated, the bug on the frequency counters is fixed. Since the
  previous release, the time period was not properly calculated, so the
  counters were not properly updated. Willy was able to fix the issue
  thanks to quick user reports.

- The hdr_ip sample fetch is now stricter. It will reject a field if
  there is some garbage after a valid IPv4 address. This ensures that
  for example an invalid x-forwared-for header field is not present,
  which is better to detect a non-conformant http proxy in a network.

- The silent-drop action was not functional for IPv6 connections if the
  haproxy process is executed without admin capabilities. It now
  properly set the IPv6 header field hop-limit to 1, as explained in the
  documentation.

Thanks to everyone for this release. Enjoy !

Please find the usual URLs below :
   Site index       : http://www.haproxy.org/
   Discourse        : http://discourse.haproxy.org/
   Slack channel    : https://slack.haproxy.org/
   Issue tracker    : https://github.com/haproxy/haproxy/issues
   Wiki             : https://github.com/haproxy/wiki/wiki
   Sources          : http://www.haproxy.org/download/1.8/src/
   Git repository   : http://git.haproxy.org/git/haproxy-1.8.git/
   Git Web browsing : http://git.haproxy.org/?p=haproxy-1.8.git
   Changelog        : http://www.haproxy.org/download/1.8/src/CHANGELOG
   Cyril's HTML doc : http://cbonte.github.io/haproxy-dconv/

Amaury Denoyelle
---
Complete changelog :
Willy Tarreau (8):
      MINOR: time: also provide a global, monotonic global_now_ms timer
      BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
      BUG/MEDIUM: time: make sure to always initialize the global tick
      MINOR: tools: make url2ipv4 return the exact number of bytes parsed
      BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
      BUG/MINOR: tcp: fix silent-drop workaround for IPv6
      BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
      BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields

---

Reply via email to