Hi, HAProxy 1.8.30 was released on 2021/04/12. It added 8 new commits after version 1.8.29. The main point of this release is the fix of the regression on the frequency counters introduced in the latest release. Thanks to users feedback, the bug was quickly spotted and the fix validated in higher version before being backported in the 1.8 tree. Here is the list of the detailed changes.
- As stated, the bug on the frequency counters is fixed. Since the previous release, the time period was not properly calculated, so the counters were not properly updated. Willy was able to fix the issue thanks to quick user reports. - The hdr_ip sample fetch is now stricter. It will reject a field if there is some garbage after a valid IPv4 address. This ensures that for example an invalid x-forwared-for header field is not present, which is better to detect a non-conformant http proxy in a network. - The silent-drop action was not functional for IPv6 connections if the haproxy process is executed without admin capabilities. It now properly set the IPv6 header field hop-limit to 1, as explained in the documentation. Thanks to everyone for this release. Enjoy ! Please find the usual URLs below : Site index : http://www.haproxy.org/ Discourse : http://discourse.haproxy.org/ Slack channel : https://slack.haproxy.org/ Issue tracker : https://github.com/haproxy/haproxy/issues Wiki : https://github.com/haproxy/wiki/wiki Sources : http://www.haproxy.org/download/1.8/src/ Git repository : http://git.haproxy.org/git/haproxy-1.8.git/ Git Web browsing : http://git.haproxy.org/?p=haproxy-1.8.git Changelog : http://www.haproxy.org/download/1.8/src/CHANGELOG Cyril's HTML doc : http://cbonte.github.io/haproxy-dconv/ Amaury Denoyelle --- Complete changelog : Willy Tarreau (8): MINOR: time: also provide a global, monotonic global_now_ms timer BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable BUG/MEDIUM: time: make sure to always initialize the global tick MINOR: tools: make url2ipv4 return the exact number of bytes parsed BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters BUG/MINOR: tcp: fix silent-drop workaround for IPv6 BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields ---