288 Commits

Author	SHA1	Message	Date
Willy Tarreau	aa259f5b42	[RELEASE] Released version 3.3-dev10 ... Released version 3.3-dev10 with the following main changes : - BUG/MEDIUM: connections: Only avoid creating a mux if we have one - BUG/MINOR: sink: retry attempt for sft server may never occur - CLEANUP: mjson: remove MJSON_ENABLE_RPC code - CLEANUP: mjson: remove MJSON_ENABLE_PRINT code - CLEANUP: mjson: remove MJSON_ENABLE_NEXT code - CLEANUP: mjson: remove MJSON_ENABLE_BASE64 code - CLEANUP: mjson: remove unused defines and math.h - BUG/MINOR: http-ana: Reset analyse_exp date after 'wait-for-body' action - CLEANUP: mjson: remove unused defines from mjson.h - BUG/MINOR: acme: avoid overflow when diff > notAfter - DEV: patchbot: use git reset+checkout instead of pull - MINOR: proxy: explicitly permit abortonclose on frontends and clarify the doc - REGTESTS: fix h2_desync_attacks to wait for the response - REGTESTS: http-messaging: fix the websocket and upgrade tests not to close early - MINOR: proxy: only check abortonclose through a dedicated function - MAJOR: proxy: enable abortonclose by default on HTTP proxies - MINOR: proxy: introduce proxy_abrt_close_def() to pass the desired default - MAJOR: proxy: enable abortonclose by default on TLS listeners - MINOR: h3/qmux: Set QC_SF_UNKNOWN_PL_LENGTH flag on QCS when headers are sent - MINOR: stconn: Add two fields in sedesc to replace the HTX extra value - MINOR: h1-htx: Increment body len when parsing a payload with no xfer length - MINOR: mux-h1: Set known input payload length during demux - MINOR: mux-fcgi: Set known input payload length during demux - MINOR: mux-h2: Use <body_len> H2S field for payload without content-length - MINOR: mux-h2: Set known input payload length of the sedesc - MINOR: h3: Set known input payload length of the sedesc - MINOR: stconn: Move data from kip to kop when data are sent to the consumer - MINOR: filters: Reset knwon input payload length if a data filter is used - MINOR: hlua/http-fetch: Use <kip> instead of HTX extra field to get body size - MINOR: cache: Use the <kip> value to check too big objects - MINOR: compression: Use the <kip> value to check body size - MEDIUM: mux-h1: Stop to use HTX extra value when formatting message - MEDIUM: htx: Remove the HTX extra field - MEDIUM: acme: don't insert acme account key in ckchs_tree - BUG/MINOR: acme: memory leak from the config parser - CI: cirrus-ci: bump FreeBSD image to 14-3 - BUG/MEDIUM: ssl: take care of second client hello - BUG/MINOR: ssl: always clear the remains of the first hello for the second one - BUG/MEDIUM: stconn: Properly forward kip to the opposite SE descriptor - MEDIUM: applet: Forward <kip> to applets - DEBUG: mux-h1: Dump <kip> and <kop> values with sedesc info - BUG/MINOR: ssl: leak in ssl-f-use - BUG/MINOR: ssl: leak crtlist_name in ssl-f-use - BUILD: makefile: disable tail calls optimizations with memory profiling - BUG/MEDIUM: apppet: Improve spinning loop detection with the new API - BUG/MINOR: ssl: Free global_ssl structure contents during deinit - BUG/MINOR: ssl: Free key_base from global_ssl structure during deinit - MEDIUM: jwt: Remove certificate support in jwt_verify converter - MINOR: jwt: Add new jwt_verify_cert converter - MINOR: jwt: Do not look into ckch_store for jwt_verify converter - MINOR: jwt: Add new "jwt" certificate option - MINOR: jwt: Add specific error code for known but unavailable certificate - DOC: jwt: Add doc about "jwt_verify_cert" converter - MINOR: ssl: Dump options in "show ssl cert" - MINOR: jwt: Add new "add/del/show ssl jwt" CLI commands - REGTEST: jwt: Test new CLI commands - BUG/MINOR: ssl: Potential NULL deref in trace macro - MINOR: regex: use a thread-local match pointer for pcre2 - BUG/MEDIUM: pools: fix bad freeing of aligned pools in UAF mode - MEDIUM: pools: detect() when munmap() fails in UAF mode - TESTS: quic: useless param for b_quic_dec_int() - BUG/MEDIUM: pools: fix crash on filtered "show pools" output - BUG/MINOR: pools: don't report "limited to the first X entries" by default - BUG/MAJOR: lb-chash: fix key calculation when using default hash-key id - BUG/MEDIUM: stick-tables: Don't forget to dec count on failure. - BUG/MINOR: quic: check applet_putchk() for 'show quic' first line - TESTS: quic: fix uninit of quic_cc_path const member - BUILD: ssl: can't build when using -DLISTEN_DEFAULT_CIPHERS - BUG/MAJOR: quic: uninitialized quic_conn_closed struct members - BUG/MAJOR: quic: do not reset QUIC backends fds in closing state - BUG/MINOR: quic: SSL counters not handled - DOC: clarify the experimental status for certain features - MINOR: config: remove experimental status on tune.disable-fast-forward - MINOR: tree-wide: add missing TAINTED flags for some experimental directives - MEDIUM: config: warn when expose-experimental-directives is used for no reason - BUG/MEDIUM: threads/config: drop absent threads from thread groups - REGTESTS: remove experimental from quic/retry.vtc	2025-10-18 11:24:05 +02:00
Christopher Faulet	d0084cb873	[RELEASE] Released version 3.3-dev9 ... Released version 3.3-dev9 with the following main changes : - BUG/MINOR: acl: Fix error message about several '-m' parameters - MINOR: server: Parse sni and pool-conn-name expressions in a dedicated function - BUG/MEDIUM: server: Use sni as pool connection name for SSL server only - BUG/MINOR: server: Update healthcheck when server settings are changed via CLI - OPTIM: backend: Don't set SNI for non-ssl connections - OPTIM: proto_rhttp: Don't set SNI for non-ssl connections - OPTIM: tcpcheck: Don't set SNI and ALPN for non-ssl connections - BUG/MINOR: tcpcheck: Don't use sni as pool-conn-name for non-SSL connections - MEDIUM: server/ssl: Base the SNI value to the HTTP host header by default - MEDIUM: httpcheck/ssl: Base the SNI value on the HTTP host header by default - OPTIM: tcpcheck: Reorder tcpchek_connect structure fields to fill holes - REGTESTS: ssl: Add a script to test the automatic SNI selection - MINOR: quic: add useful trace about padding params values - BUG/MINOR: quic: too short PADDING frame for too short packets - BUG/MINOR: cpu_topo: work around a small bug in musl's CPU_ISSET() - BUG/MEDIUM: ssl: Properly initialize msg_controllen. - MINOR: quic: SSL session reuse for QUIC - BUG/MEDIUM: proxy: fix crash with stop_proxy() called during init - MINOR: stats-file: use explicit unsigned integer bitshift for user slots - CLEANUP: quic: fix typo in quic_tx trace - TESTS: quic: add unit-tests for QUIC TX part - MINOR: quic: restore QUIC_HP_SAMPLE_LEN constant - REGTESTS: ssl: Fix the script about automatic SNI selection - BUG/MINOR: pools: Fix the dump of pools info to deal with buffers limitations - MINOR: pools: Don't dump anymore info about pools when purge is forced - BUG/MINOR: quic: properly support GSO on backend side - BUG/MEDIUM: mux-h2: Reset MUX blocking flags when a send error is caught - BUG/MEDIUM: mux-h2; Don't block reveives in H2_CS_ERROR and H2_CS_ERROR2 states - BUG/MEDIUM: mux-h2: Restart reading when mbuf ring is no longer full - BUG/MINOR: mux-h2: Remove H2_CF_DEM_DFULL flags when the demux buffer is reset - BUG/MEDIUM: mux-h2: Report RST/error to app-layer stream during 0-copy fwding - BUG/MEDIUM: mux-h2: Reinforce conditions to report an error to app-layer stream - BUG/MINOR: hq-interop: adjust parsing/encoding on backend side - OPTIM: check: do not delay MUX for ALPN if SSL not active - BUG/MEDIUM: checks: fix ALPN inheritance from server - BUG/MINOR: check: ensure checks are compatible with QUIC servers - MINOR: check: reject invalid check config on a QUIC server - MINOR: debug: report the process id in warnings and panics - DEBUG: stream: count the number of passes in the connect loop - MINOR: debug: report the number of loops and ctxsw for each thread - MINOR: debug: report the time since last wakeup and call - DEBUG: peers: export functions that use locks - MINOR: stick-table: permit stksess_new() to temporarily allocate more entries - MEDIUM: stick-tables: relax stktable_trash_oldest() to only purge what is needed - MEDIUM: stick-tables: give up on lock contention in process_table_expire() - MEDIUM: stick-tables: don't wait indefinitely in stktable_add_pend_updates() - MEDIUM: peers: don't even try to process updates under contention - BUG/MEDIUM: h1: Allow reception if we have early data - BUG/MEDIUM: ssl: create the mux immediately on early data - MINOR: ssl: Add a flag to let it known we have an ALPN negociated - MINOR: ssl: Use the new flag to know when the ALPN has been set. - MEDIUM: server: Introduce the concept of path parameters - CLEANUP: backend: clarify the role of the init_mux variable in connect_server() - CLEANUP: backend: invert the condition to start the mux in connect_server() - CLEANUP: backend: simplify the complex ifdef related to 0RTT in connect_server() - CLEANUP: backend: clarify the cases where we want to use early data - MEDIUM: server: Make use of the stored ALPN stored in the server - BUILD: ssl: address a recent build warning when QUIC is enabled - BUG/MINOR: activity: fix reporting of task latency - MINOR: activity: indicate the number of calls on "show tasks" - MINOR: tools: don't emit "+0" for symbol names which exactly match known ones - BUG/MEDIUM: stick-tables: don't loop on non-expirable entries - DEBUG: stick-tables: export stktable_add_pend_updates() for better reporting - BUG/MEDIUM: ssl: Fix a crash when using QUIC - BUG/MEDIUM: ssl: Fix a crash if we failed to create the mux - MEDIUM: dns: bind the nameserver sockets to the initiating thread - MEDIUM: resolvers: make the process_resolvers() task single-threaded - BUG/MINOR: stick-table: make sure never to miss a process_table_expire update - MEDIUM: stick-table: move process_table_expire() to a single thread - MEDIUM: peers: move process_peer_sync() to a single thread - BUG/MAJOR: stream: Force channel analysis on successful synchronous send - MINOR: quic: get rid of ->target quic_conn struct member - MINOR: quic-be: make SSL/QUIC objects use their own indexes (ssl_qc_app_data_index) - MINOR: quic: display build warning for compat layer on recent OpenSSL - DOC: quic: clarifies limited-quic support - BUG/MINOR: acme: null pointer dereference upon allocation failure - BUG/MEDIUM: jws: return size_t in JWS functions - BUG/MINOR: ssl: Potential NULL deref in trace macro - BUG/MINOR: ssl: Fix potential NULL deref in trace callback - BUG/MINOR: ocsp: prototype inconsistency - MINOR: ocsp: put internal functions as static ones - MINOR: ssl: set functions as static when no protypes in the .h - BUILD: ssl: functions defined but not used - BUG/MEDIUM: resolvers: Properly cache do-resolv resolution - BUG/MINOR: resolvers: Restore round-robin selection on records in DNS answers - MINOR: activity: don't report the lat_tot column for show profiling tasks - MINOR: activity: add a new lkw_avg column to show profiling stats - MINOR: activity: collect time spent waiting on a lock for each task - MINOR: thread: add a lock level information in the thread_ctx - MINOR: activity: add a new lkd_avg column to show profiling stats - MINOR: activity: collect time spent with a lock held for each task - MINOR: activity: add a new mem_avg column to show profiling stats - MINOR: activity: collect CPU time spent on memory allocations for each task - MINOR: activity/memory: count allocations performed under a lock - DOC: proxy-protocol: Add TLS group and sig scheme TLVs - BUG/MEDIUM: resolvers: Test for empty tree when getting a record from DNS answer - BUG/MEDIUM: resolvers: Make resolution owns its hostname_dn value - BUG/MEDIUM: resolvers: Accept to create resolution without hostname - BUG/MEDIUM: resolvers: Wake resolver task up whne unlinking a stream requester - BUG/MINOR: ocsp: Crash when updating CA during ocsp updates - Revert "BUG/MINOR: ocsp: Crash when updating CA during ocsp updates" - BUG/MEDIUM: http_ana: fix potential NULL deref in http_process_req_common() - MEDIUM: log/proxy: store log-steps selection using a bitmask, not an eb tree - BUG/MINOR: ocsp: Crash when updating CA during ocsp updates - BUG/MINOR: resolvers: always normalize FQDN from response - BUILD: makefile: implement support for running a command in range - IMPORT: cebtree: import version 0.5.0 to support duplicates - MEDIUM: migrate the patterns reference to cebs_tree - MEDIUM: guid: switch guid to more compact cebuis_tree - MEDIUM: server: switch addr_node to cebis_tree - MEDIUM: server: switch conf.name to cebis_tree - MEDIUM: server: switch the host_dn member to cebis_tree - MEDIUM: proxy: switch conf.name to cebis_tree - MEDIUM: stktable: index table names using compact trees - MINOR: proxy: add proxy_get_next_id() to find next free proxy ID - MINOR: listener: add listener_get_next_id() to find next free listener ID - MINOR: server: add server_get_next_id() to find next free server ID - CLEANUP: server: use server_find_by_id() when looking for already used IDs - MINOR: server: add server_index_id() to index a server by its ID - MINOR: listener: add listener_index_id() to index a listener by its ID - MINOR: proxy: add proxy_index_id() to index a proxy by its ID - MEDIUM: proxy: index proxy ID using compact trees - MEDIUM: listener: index listener ID using compact trees - MEDIUM: server: index server ID using compact trees - CLEANUP: server: slightly reorder fields in the struct to plug holes - CLEANUP: proxy: slightly reorganize fields to plug some holes - CLEANUP: backend: factor the connection lookup loop - CLEANUP: server: use eb64_entry() not ebmb_entry() to convert an eb64 - MINOR: server: pass the server and thread to srv_migrate_conns_to_remove() - CLEANUP: backend: use a single variable for removed in srv_cleanup_idle_conns() - MINOR: connection: pass the thread number to conn_delete_from_tree() - MEDIUM: connection: move idle connection trees to ceb64 - MEDIUM: connection: reintegrate conn_hash_node into connection - CLEANUP: tools: use the item API for the file names tree - CLEANUP: vars: use the item API for the variables trees - BUG/MEDIUM: pattern: fix possible infinite loops on deletion - CI: scripts: add support for git in openssl builds - CI: github: add an OpenSSL + ECH job - CI: scripts: mkdir BUILDSSL_TMPDIR - Revert "BUG/MEDIUM: pattern: fix possible infinite loops on deletion" - BUG/MEDIUM: pattern: fix possible infinite loops on deletion (try 2) - CLEANUP: log: remove deadcode in px_parse_log_steps() - MINOR: counters: document that tg shared counters are tied to shm-stats-file mapping - DOC: internals: document the shm-stats-file format/mapping - IMPORT: ebtree: delete unusable ebpttree.c - IMPORT: eb32/eb64: reorder the lookup loop for modern CPUs - IMPORT: eb32/eb64: use a more parallelizable check for lack of common bits - IMPORT: eb32: drop the now useless node_bit variable - IMPORT: eb32/eb64: place an unlikely() on the leaf test - IMPORT: ebmb: optimize the lookup for modern CPUs - IMPORT: eb32/64: optimize insert for modern CPUs - IMPORT: ebtree: only use __builtin_prefetch() when supported - IMPORT: ebst: use prefetching in lookup() and insert() - IMPORT: ebtree: Fix UB from clz(0) - IMPORT: ebtree: add a definition of offsetof() - IMPORT: ebtree: replace hand-rolled offsetof to avoid UB - MINOR: listener: add the "cc" bind keyword to set the TCP congestion controller - MINOR: server: add the "cc" keyword to set the TCP congestion controller - BUG/MEDIUM: ring: invert the length check to avoid an int overflow - MINOR: trace: don't call strlen() on the thread-id numeric encoding - MINOR: trace: don't call strlen() on the function's name - OPTIM: sink: reduce contention on sink_announce_dropped() - OPTIM: sink: don't waste time calling sink_announce_dropped() if busy - CLEANUP: ring: rearrange the wait loop in ring_write() - OPTIM: ring: always relax in the ring lock and leader wait loop - OPTIM: ring: check the queue's owner using a CAS on x86 - OPTIM: ring: avoid reloading the tail_ofs value before the CAS in ring_write() - BUG/MEDIUM: sink: fix unexpected double postinit of sink backend - MEDIUM: stats: consider that shared stats pointers may be NULL - BUG/MEDIUM: http-client: Fix the test on the response start-line - MINOR: acme: acme-vars allow to pass data to the dpapi sink - MINOR: acme: check acme-vars allocation during escaping - BUG/MINOR: acme/cli: wrong description for "acme challenge_ready" - CI: move VTest preparation & friends to dedicated composite action - BUG/MEDIUM: stick-tables: Don't let table_process_entry() handle refcnt - BUG/MINOR: compression: Test payload size only if content-length is specified - BUG/MINOR: pattern: Properly flag virtual maps as using samples - BUG/MINOR: acme: possible overflow on scheduling computation - BUG/MINOR: acme: possible overflow in acme_will_expire() - CLEANUP: acme: acme_will_expire() uses acme_schedule_date() - BUG/MINOR: pattern: Fix pattern lookup for map with opt@ prefix - CI: scripts: build curl with ECH support - CI: github: add curl+ech build into openssl-ech job - BUG/MEDIUM: ssl: ca-file directory mode must read every certificates of a file - MINOR: acme: provider-name for dpapi sink - BUILD: acme: fix false positive null pointer dereference - MINOR: backend: srv_queue helper - MINOR: backend: srv_is_up converter - BUILD: halog: misleading indentation in halog.c - CI: github: build halog on the vtest job - BUG/MINOR: acme: don't unlink from acme_ctx_destroy() - BUG/MEDIUM: acme: cfg_postsection_acme() don't init correctly acme sections - MINOR: acme: implement "reuse-key" option - ADMIN: haproxy-dump-certs: implement a certificate dumper - ADMIN: dump-certs: don't update the file if it's up to date - ADMIN: dump-certs: create files in a tmpdir - ADMIN: dump-certs: fix lack of / in -p - ADMIN: dump-certs: use same error format as haproxy - ADMIN: reload: add a synchronous reload helper - BUG/MEDIUM: acme: free() of i2d_X509_REQ() with AWS-LC - ADMIN: reload: introduce verbose and silent mode - ADMIN: reload: introduce -vv mode - MINOR: mt_list: Implement MT_LIST_POP_LOCKED() - BUG/MEDIUM: stick-tables: Make sure not to free a pending entry - MINOR: sched: let's permit to share the local ctx between threads - MINOR: sched: pass the thread number to is_sched_alive() - BUG/MEDIUM: wdt: improve stuck task detection accuracy - MINOR: ssl: add the ssl_bc_sni sample fetch function to retrieve backend SNI - MINOR: rawsock: introduce CO_RFL_TRY_HARDER to detect closures on complete reads - MEDIUM: ssl: don't always process pending handshakes on closed connections - MEDIUM: servers: Schedule the server requeue target on creation - MEDIUM: fwlc: Make it so fwlc_srv_reposition works with unqueued srv - BUG/MEDIUM: fwlc: Handle memory allocation failures. - DOC: config: clarify some known limitations of the json_query() converter - BUG/CRITICAL: mjson: fix possible DoS when parsing numbers - BUG/MINOR: h2: forbid 'Z' as well in header field names checks - BUG/MINOR: h3: forbid 'Z' as well in header field names checks - BUG/MEDIUM: resolvers: break an infinite loop in resolv_get_ip_from_response()	2025-10-03 12:12:51 +02:00
Willy Tarreau	b167d545cf	[RELEASE] Released version 3.3-dev8 ... Released version 3.3-dev8 with the following main changes : - BUG/MEDIUM: mux-h2: fix crash on idle-ping due to unwanted ABORT_NOW - BUG/MINOR: quic-be: missing Initial packet number space discarding - BUG/MEDIUM: quic-be: crash after backend CID allocation failures - BUG/MEDIUM: ssl: apply ssl-f-use on every "ssl" bind - BUG/MAJOR: stream: Remove READ/WRITE events on channels after analysers eval - MINOR: dns: dns_connect_nameserver: fix fd leak at error path - BUG/MEDIUM: quic: reset padding when building GSO datagrams - BUG/MINOR: quic: do not emit probe data if CONNECTION_CLOSE requested - BUG/MAJOR: quic: fix INITIAL padding with probing packet only - BUG/MINOR: quic: don't coalesce probing and ACK packet of same type - MINOR: quic: centralize padding for HP sampling on packet building - MINOR: http_ana: fix typo in http_res_get_intercept_rule - BUG/MEDIUM: http_ana: handle yield for "stats http-request" evaluation - MINOR: applet: Rely on applet flag to detect the new api - MINOR: applet: Add function to test applet flags from the appctx - MINOR: applet: Add a flag to know an applet is using HTX buffers - MINOR: applet: Make some applet functions HTX aware - MEDIUM: applet: Set .rcv_buf and .snd_buf functions on default ones if not set - BUG/MEDIUM: mux-spop: Reject connection attempts from a non-spop frontend - REGTESTS: jwt: create dynamically "cert.ecdsa.pem" - BUG/MEDIUM: spoe: Improve error detection in SPOE applet on client abort - MINOR: haproxy: abort config parsing on fatal errors for post parsing hooks - MEDIUM: server: split srv_init() in srv_preinit() + srv_postinit() - MINOR: proxy: handle shared listener counters preparation from proxy_postcheck() - DOC: configuration: reword 'generate-certificates' - BUG/MEDIUM: quic-be: avoid crashes when releasing Initial pktns - BUG/MINOR: quic: reorder fragmented RX CRYPTO frames by their offsets - MINOR: ssl: diagnostic warning when both 'default-crt' and 'strict-sni' are used - MEDIUM: ssl: convert diag to warning for strict-sni + default-crt - DOC: configuration: clarify 'default-crt' and implicit default certificates - MINOR: quic: remove ->offset qf_crypto struct field - BUG/MINOR: mux-quic: trace with non initialized qcc - BUG/MINOR: acl: set arg_list->kw to aclkw->kw string literal if aclkw is found - BUG/MEDIUM: mworker: fix startup and reload on macOS - BUG/MINOR: connection: rearrange union list members - BUG/MINOR: connection: remove extra session_unown_conn() on reverse - MINOR: cli: display failure reason on wait command - BUG/MINOR: server: decrement session idle_conns on del server - BUG/MINOR: mux-quic: do not access conn after idle list insert - MINOR: session: document explicitely that session_add_conn() is safe - MINOR: session: uninline functions related to BE conns management - MINOR: session: refactor alloc/lookup of sess_conns elements - MEDIUM: session: protect sess conns list by idle_conns_lock - MINOR: server: shard by thread sess_conns member - MEDIUM: server: close new idle conns if server in maintenance - MEDIUM: session: close new idle conns if server in maintenance - MINOR: server: cleanup idle conns for server in maint already stopped - MINOR: muxes: enforce thread-safety for private idle conns - MEDIUM: conn/muxes/ssl: reinsert BE priv conn into sess on IO completion - MEDIUM: conn/muxes/ssl: remove BE priv idle conn from sess on IO - MEDIUM: mux-quic: enforce thread-safety of backend idle conns - MAJOR: server: implement purging of private idle connections - MEDIUM: session: account on server idle conns attached to session - MAJOR: server: do not remove idle conns in del server - BUILD: mworker: fix ignoring return value of ‘read’ - DOC: unreliable sockpair@ on macOS - MINOR: muxes: adjust takeover with buf_wait interaction - OPTIM: backend: set release on takeover for strict maxconn - DOC: configuration: confuse "strict-mode" with "zero-warning" - MINOR: doc: add missing statistics column - MINOR: doc: add missing statistics column - MINOR: stats: display new curr_sess_idle_conns server counter - MINOR: proxy: extend "show servers conn" output - MEDIUM: proxy: Reject some header names for 'http-send-name-header' directive - BUG/BUILD: stats: fix build due to missing stat enum definition - DOC: proxy-protocol: Make example for PP2_SUBTYPE_SSL_SIG_ALG accurate - CLEANUP: quic: remove a useless CRYPTO frame variable assignment - BUG/MEDIUM: quic: CRYPTO frame freeing without eb_delete() - BUG/MAJOR: mux-quic: fix crash on reload during emission - MINOR: conn/muxes/ssl: add ASSUME_NONNULL() prior to _srv_add_idle - REG-TESTS: map_redirect: Don't use hdr_dom in ACLs with "-m end" matching method - MINOR: acl: Only allow one '-m' matching method - MINOR: acl; Warn when matching method based on a suffix is overwritten - BUG/MEDIUM: server: Duplicate healthcheck's alpn inherited from default server - BUG/MINOR: server: Duplicate healthcheck's sni inherited from default server - BUG/MINOR: acl: Properly detect overwritten matching method - BUG/MINOR: halog: Add OOM checks for calloc() in filter_count_srv_status() and filter_count_url() - BUG/MINOR: log: Add OOM checks for calloc() and malloc() in logformat parser and dup_logger() - BUG/MINOR: acl: Add OOM check for calloc() in smp_fetch_acl_parse() - BUG/MINOR: cfgparse: Add OOM check for calloc() in cfg_parse_listen() - BUG/MINOR: compression: Add OOM check for calloc() in parse_compression_options() - BUG/MINOR: tools: Add OOM check for malloc() in indent_msg() - BUG/MINOR: quic: ignore AGAIN ncbuf err when parsing CRYPTO frames - MINOR: quic/flags: complete missing flags - BUG/MINOR: quic: fix room check if padding requested - BUG/MINOR: quic: fix padding issue on INITIAL retransmit - BUG/MINOR: quic: pad Initial pkt with CONNECTION_CLOSE on client - MEDIUM: quic: strengthen BUG_ON() for unpad Initial packet on client - DOC: configuration: rework the jwt_verify keyword documentation - BUG/MINOR: haproxy: be sure not to quit too early on soft stop - BUILD: acl: silence a possible null deref warning in parse_acl_expr() - MINOR: quic: Add more information about RX packets - CI: fix syntax of Quic Interop pipelines - MEDIUM: cfgparse: warn when using user/group when built statically - BUG/MEDIUM: stick-tables: don't leave the expire loop with elements deleted - BUG/MINOR: stick-tables: never leave used entries without expiration - BUG/MEDIUM: peers: don't fail twice to grab the update lock - MINOR: stick-tables: limit the number of visited nodes during expiration - OPTIM: stick-tables: exit expiry faster when the update lock is held - MINOR: counters: retrieve detailed errmsg upon failure with counters_{fe,be}_shared_prepare() - MINOR: stats-file: introduce shm-stats-file directive - MEDIUM: stats-file: processes share the same clock source from shm-stats-file - MINOR: stats-file: add process slot management for shm stats file - MEDIUM: stats-file/counters: store and preload stats counters as shm file objects - DOC: config: document "shm-stats-file" directive - OPTIM: stats-file: don't unnecessarily die hard on shm_stats_file_reuse_object() - MINOR: compiler: add ALWAYS_PAD() macro - BUILD: stats-file: fix aligment issues - MINOR: stats-file: reserve some bytes in exported structs - MEDIUM: stats-file: add some BUG_ON() guards to ensure exported structs are not changed by accident - BUG/MINOR: check: ensure check-reuse is compatible with SSL - BUG/MINOR: check: fix dst address when reusing a connection - REGTESTS: explicitly use "balance roundrobin" where RR is needed - MAJOR: backend: switch the default balancing algo to "random" - BUG/MEDIUM: conn: fix UAF on connection after reversal on edge - BUG/MINOR: connection: streamline conn detach from lists - BUG/MEDIUM: quic-be: too early SSL_SESSION initialization - BUG/MINOR: log: fix potential memory leak upon error in add_to_logformat_list() - MEDIUM: init: always warn when running as root without being asked to - MINOR: sample: Add base2 converter - MINOR: version: add -vq, -vqb, and -vqs flags for concise version output - BUILD: trace: silence a bogus build warning at -Og - MINOR: trace: accept trace spec right after "-dt" on the command line - BUILD: makefile: bump the default minimum linux version to 4.17	2025-09-05 09:54:34 +02:00
Willy Tarreau	82b002a225	[RELEASE] Released version 3.3-dev7 ... Released version 3.3-dev7 with the following main changes : - MINOR: quic: duplicate GSO unsupp status from listener to conn - MINOR: quic: define QUIC_FL_CONN_IS_BACK flag - MINOR: quic: prefer qc_is_back() usage over qc->target - BUG/MINOR: cfgparse: immediately stop after hard error in srv_init() - BUG/MINOR: cfgparse-listen: update err_code for fatal error on proxy directive - BUG/MINOR: proxy: avoid NULL-deref in post_section_px_cleanup() - MINOR: guid: add guid_get() helper - MINOR: guid: add guid_count() function - MINOR: clock: add clock_set_now_offset() helper - MINOR: clock: add clock_get_now_offset() helper - MINOR: init: add REGISTER_POST_DEINIT_MASTER() hook - BUILD: restore USE_SHM_OPEN build option - BUG/MINOR: stick-table: cap sticky counter idx with tune.nb_stk_ctr instead of MAX_SESS_STKCTR - MINOR: sock: update broken accept4 detection for older hardwares. - CI: vtest: add os name to OT cache key - CI: vtest: add Ubuntu arm64 builds - BUG/MEDIUM: ssl: Fix 0rtt to the server - BUG/MEDIUM: ssl: fix build with AWS-LC - MEDIUM: acme: use lowercase for challenge names in configuration - BUG/MINOR: init: Initialize random seed earlier in the init process - DOC: management: clarify usage of -V with -c - MEDIUM: ssl/cli: relax crt insertion in crt-list of type directory - MINOR: tools: implement ha_aligned_zalloc() - CLEANUP: fd: make use of ha_aligned_alloc() for the fdtab - MINOR: pools: distinguish the requested alignment from the type-specific one - MINOR: pools: permit to optionally specify extra size and alignment - MINOR: pools: always check that requested alignment matches the type's - DOC: api: update the pools API with the alignment and typed declarations - MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL - OPTIM: tasks: align task and tasklet pools to 64 - OPTIM: buffers: align the buffer pool to 64 - OPTIM: queue: align the pendconn pools to 64 - OPTIM: connection: align connection pools to 64 - OPTIM: server: start to use aligned allocs in server - DOC: management: fix typo in commit f4f93c56 - DOC: config: recommend single quoting passwords - MINOR: tools: also implement ha_aligned_alloc_typed() - MEDIUM: server: introduce srv_alloc()/srv_free() to alloc/free a server - MINOR: server: align server struct to 64 bytes - MEDIUM: ring: always allocate properly aligned ring structures - CI: Update to actions/checkout@v5 - MINOR: quic: implement qc_ssl_do_hanshake() - BUG/MEDIUM: quic: listener connection stuck during handshakes (OpenSSL 3.5) - BUG/MINOR: mux-h1: fix wrong lock label - MEDIUM: dns: don't call connect to dest socket for AF_INET* - BUG/MINOR: spoe: Properly detect and skip empty NOTIFY frames - BUG/MEDIUM: cli: Report inbuf is no longer full when a line is consumed - BUG/MEDIUM: quic: crash after quic_conn allocation failures - BUG/MEDIUM: quic-be: do not initialize ->conn too early - BUG/MEDIUM: mworker: more verbose error upon loading failure - MINOR: xprt: Add recvmsg() and sendmsg() parameters to rcv_buf() and snd_buf(). - MINOR: ssl: Add a "flags" field to ssl_sock_ctx. - MEDIUM: xprt: Add a "get_capability" method. - MEDIUM: mux_h1/mux_pt: Use XPRT_CAN_SPLICE to decide if we should splice - MINOR: cfgparse: Add a new "ktls" option to bind and server. - MINOR: ssl: Define HAVE_VANILLA_OPENSSL if openssl is used. - MINOR: build: Add a new option, USE_KTLS. - MEDIUM: ssl: Add kTLS support for OpenSSL. - MEDIUM: splice: Don't consider EINVAL to be a fatal error - MEDIUM: ssl: Add splicing with SSL. - MEDIUM: ssl: Add ktls support for AWS-LC. - MEDIUM: ssl: Add support for ktls on TLS 1.3 with AWS-LC - MEDIUM: ssl: Handle non-Application data record with AWS-LC - MINOR: ssl: Add a way to globally disable ktls.	2025-08-20 21:52:39 +02:00
Willy Tarreau	d76ee72d03	[RELEASE] Released version 3.3-dev6 ... Released version 3.3-dev6 with the following main changes : - MINOR: acme: implement traces - BUG/MINOR: hlua: take default-path into account with lua-load-per-thread - CLEANUP: counters: rename counters_be_shared_init to counters_be_shared_prepare - MINOR: clock: make global_now_ms a pointer - MINOR: clock: make global_now_ns a pointer as well - MINOR: mux-quic: release conn after shutdown on BE reuse failure - MINOR: session: strengthen connection attach to session - MINOR: session: remove redundant target argument from session_add_conn() - MINOR: session: strengthen idle conn limit check - MINOR: session: do not release conn in session_check_idle_conn() - MINOR: session: streamline session_check_idle_conn() usage - MINOR: muxes: refactor private connection detach - BUG/MEDIUM: mux-quic: ensure Early-data header is set - BUILD: acme: avoid declaring TRACE_SOURCE in acme-t.h - MINOR: acme: emit a log for DNS-01 challenge response - MINOR: acme: emit the DNS-01 challenge details on the dpapi sink - MEDIUM: acme: allow to wait and restart the task for DNS-01 - MINOR: acme: update the log for DNS-01 - BUG/MINOR: acme: possible integer underflow in acme_txt_record() - BUG/MEDIUM: hlua_fcn: ensure systematic watcher cleanup for server list iterator - MINOR: sample: Add le2dec (little endian to decimal) sample fetch - BUILD: fcgi: fix the struct name of fcgi_flt_ctx - BUILD: compat: provide relaxed versions of the MIN/MAX macros - BUILD: quic: use _MAX() to avoid build issues in pools declarations - BUILD: compat: always set _POSIX_VERSION to ease comparisons - MINOR: implement ha_aligned_alloc() to return aligned memory areas - MINOR: pools: support creating a pool from a pool registration - MINOR: pools: add a new flag to declare static registrations - MINOR: pools: force the name at creation time to be a const. - MEDIUM: pools: change the static pool creation to pass a registration - DEBUG: pools: store the pool registration file name and line number - DEBUG: pools: also retrieve file and line for direct callers of create_pool() - MEDIUM: pools: add an alignment property - MINOR: pools: add macros to register aligned pools - MINOR: pools: add macros to declare pools based on a struct type - MEDIUM: pools: respect pool alignment in allocations	2025-08-06 21:50:00 +02:00
Willy Tarreau	cedb4f0461	[RELEASE] Released version 3.3-dev5 ... Released version 3.3-dev5 with the following main changes : - BUG/MEDIUM: queue/stats: also use stream_set_srv_target() for pendconns - DOC: list missing global QUIC settings	2025-07-28 11:26:22 +02:00
Willy Tarreau	5d4ff9f02e	[RELEASE] Released version 3.3-dev4 ... Released version 3.3-dev4 with the following main changes : - CLEANUP: server: do not check for duplicates anymore in findserver() - REORG: server: move findserver() from proxy.c to server.c - MINOR: server: use the tree to look up the server name in findserver() - CLEANUP: server: rename server_find_by_name() to server_find() - CLEANUP: server: rename findserver() to server_find_by_name() - CLEANUP: server: use server_find_by_name() where relevant - CLEANUP: cfgparse: lookup proxy ID using existing functions - CLEANUP: stream: lookup server ID using standard functions - CLEANUP: server: simplify server_find_by_id() - CLEANUP: server: add server_find_by_addr() - CLEANUP: stream: use server_find_by_addr() in sticking_rule_find_target() - CLEANUP: server: be sure never to compare src against a non-existing defsrv - MEDIUM: proxy: take the defsrv out of the struct proxy - MINOR: proxy: add checks for defsrv's validity - MEDIUM: proxy: no longer allocate the default-server entry by default - MEDIUM: proxy: register a post-section cleanup function - MINOR: debug: report haproxy and operating system info in panic dumps - BUG/MEDIUM: h3: do not overwrite interim with final response - BUG/MINOR: h3: properly realloc buffer after interim response encoding - BUG/MINOR: h3: ensure that invalid status code are not encoded (FE side) - MINOR: qmux: change API for snd_buf FIN transmission - BUG/MEDIUM: h3: handle interim response properly on FE side - BUG/MINOR: h3: properly handle interim response on BE side - BUG/MINOR: quic: Wrong source address use on FreeBSD - MINOR: h3: remove unused outbuf in h3_resp_headers_send() - BUG/MINOR: applet: Don't trigger BUG_ON if the tid is not on appctx init - DEV: gdb: add a memprofile decoder to the debug tools - MINOR: quic: Get rid of qc_is_listener() - DOC: connection: explain the rules for idle/safe/avail connections - BUG/MEDIUM: quic-be: CC buffer released from wrong pool - BUG/MINOR: halog: exit with error when some output filters are set simultaneosly - MINOR: cpu-topo: split cpu_dump_topology() to show its summary in show dev - MINOR: cpu-topo: write thread-cpu bindings into trash buffer - MINOR: debug: align output style of debug_parse_cli_show_dev with cpu_dump_topology - MINOR: debug: add thread-cpu bindings info in 'show dev' output - MINOR: quic: Remove pool_head_quic_be_cc_buf pool - BUILD: debug: add missed guard USE_CPU_AFFINITY to show cpu bindings - BUG/MEDIUM: threads: Disable the workaround to load libgcc_s on macOS - BUG/MINOR: logs: fix log-steps extra log origins selection - BUG/MINOR: hq-interop: fix FIN transmission - MINOR: ssl: Add ciphers in ssl traces - MINOR: ssl: Add curve id to curve name table and mapping functions - MINOR: ssl: Add curves in ssl traces - MINOR: ssl: Dump ciphers and sigalgs details in trace with 'advanced' verbosity - MINOR: ssl: Remove ClientHello specific traces if !HAVE_SSL_CLIENT_HELLO_CB - MINOR: h3: use smallbuf for request header emission - MINOR: h3: add traces to h3_req_headers_send() - BUG/MINOR: h3: fix uninitialized value in h3_req_headers_send() - MINOR: log: explicitly ignore "log-steps" on backends - BUG/MEDIUM: acme: use POST-as-GET instead of GET for resources - BUG/MINOR mux-quic: apply correctly timeout on output pending data - BUG/MINOR: mux-quic: ensure close-spread-time is properly applied - MINOR: mux-quic: refactor timeout code - MINOR: mux-quic: correctly implement backend timeout - MINOR: mux-quic: disable glitch on backend side - MINOR: mux-quic: store session in QCS instance - MEDIUM: mux-quic: implement be connection reuse - MINOR: mux-quic: do not reuse connection if app already shut - MEDIUM: mux-quic: support backend private connection - MINOR: acme: remove acme_req_auth() and use acme_post_as_get() instead - BUG/MINOR: acme: allow "processing" in challenge requests - CLEANUP: acme: fix wrong spelling of "resources" - CLEANUP: ssl: Use only NIDs in curve name to id table - MINOR: acme: add ACME to the haproxy -vv feature list - BUG/MINOR: hlua: Skip headers when a receive is performed on an HTTP applet - BUG/MEDIUM: applet: State inbuf is no longer full if input data are skipped - BUG/MEDIUM: stconn: Fix conditions to know an applet can get data from stream - BUG/MINOR: applet: Fix applet_getword() to not return one extra byte - BUG/MEDIUM: Remove sync sends from streams to applets - MINOR: applet: Add HTX versions for applet_input_data() and applet_output_room() - MINOR: applet: Improve applet API to take care of inbuf/outbuf alloc failures - MEDIUM: hlua: Update the tcp applet to use its own buffers - MINOR: hlua: Fill the request array on the first HTTP applet run - MINOR: hlua: Use the buffer instead of the HTTP message to get HTTP headers - MEDIUM: hlua: Update the http applet to use its own buffers - BUG/MEDIUM: hlua: Report to SC when data were consumed on a lua socket - BUG/MEDIUM: hlua: Report to SC when output data are blocked on a lua socket - MEDIUM: hlua: Update the socket applet to use its own buffers - BUG/MEDIUM: dns: Reset reconnect tempo when connection is finally established - MEDIUM: dns: Update the dns_session applet to use its own buffers - CLEANUP: http-client: Remove useless indentation when sending request body - MINOR: http-client: Try to send request body with headers if possible - MINOR: http-client: Trigger an error if first response block isn't a start-line - BUG/MINOR: httpclient-cli: Don't try to dump raw headers in HTX mode - MINOR: httpclient-cli: Reset httpclient HTX buffer instead of removing blocks - MEDIUM: http-client: Update the http-client applet to use its own buffers - MEDIUM: log: Update the log applet to use its own buffers - MEDIUM: sink: Update the sink applets to use their own buffers - MEDIUM: peers: Update the peer applet to use its own buffers - MEDIUM: promex: Update the promex applet to use their own buffers - MINOR: applet: Add support for flags on applets with a flag about the new API - MEDIUM: applet: Emit a warning when a legacy applet is spawned - BUG/MEDIUM: logs: fix sess_build_logline_orig() recursion with options - MEDIUM: stats: avoid 1 indirection by storing the shared stats directly in counters struct - CLEANUP: compiler: prefer char * over void * for pointer arithmetic - CLEANUP: include: replace hand-rolled offsetof to avoid UB - CLEANUP: peers: remove unused peer_session_target() - OPTIM: stats: store fast sharded counters pointers at session and stream level	2025-07-26 09:55:26 +02:00
Willy Tarreau	d4d72e2303	[RELEASE] Released version 3.3-dev3 ... Released version 3.3-dev3 with the following main changes : - BUG/MINOR: quic-be: Wrong retry_source_connection_id check - MEDIUM: sink: change the sink mode type to PR_MODE_SYSLOG - MEDIUM: server: move _srv_check_proxy_mode() checks from server init to finalize - MINOR: server: move send-proxy* incompatibility check in _srv_check_proxy_mode() - MINOR: mailers: warn if mailers are configured but not actually used - BUG/MEDIUM: counters/server: fix server and proxy last_change mixup - MEDIUM: server: add and use a separate last_change variable for internal use - MEDIUM: proxy: add and use a separate last_change variable for internal use - MINOR: counters: rename last_change counter to last_state_change - MINOR: ssl: check TLS1.3 ciphersuites again in clienthello with recent AWS-LC - BUG/MEDIUM: hlua: Forbid any L6/L7 sample fetche functions from lua services - BUG/MEDIUM: mux-h2: Properly handle connection error during preface sending - BUG/MINOR: jwt: Copy input and parameters in dedicated buffers in jwt_verify converter - DOC: Fix 'jwt_verify' converter doc - MINOR: jwt: Rename pkey to pubkey in jwt_cert_tree_entry struct - MINOR: jwt: Remove unused parameter in convert_ecdsa_sig - MAJOR: jwt: Allow certificate instead of public key in jwt_verify converter - MINOR: ssl: Allow 'commit ssl cert' with no privkey - MINOR: ssl: Prevent delete on certificate used by jwt_verify - REGTESTS: jwt: Add test with actual certificate passed to jwt_verify - REGTESTS: jwt: Test update of certificate used in jwt_verify - DOC: 'jwt_verify' converter now supports certificates - REGTESTS: restrict execution to a single thread group - MINOR: ssl: Introduce new smp_client_hello_parse() function - MEDIUM: stats: add persistent state to typed output format - BUG/MINOR: httpclient: wrongly named httpproxy flag - MINOR: ssl/ocsp: stop using the flags from the httpclient CLI - MEDIUM: httpclient: split the CLI from the actual httpclient API - MEDIUM: httpclient: implement a way to use directly htx data - MINOR: httpclient/cli: add --htx option - BUILD: dev/phash: remove the accidentally committed a.out file - BUG/MINOR: ssl: crash in ssl_sock_io_cb() with SSL traces and idle connections - BUILD/MEDIUM: deviceatlas: fix when installed in custom locations. - DOC: deviceatlas build clarifications - BUG/MINOR: ssl/ocsp: fix definition discrepancies with ocsp_update_init() - MINOR: proto-tcp: Add support for TCP MD5 signature for listeners and servers - BUILD: cfgparse-tcp: Add _GNU_SOURCE for TCP_MD5SIG_MAXKEYLEN - BUG/MINOR: proto-tcp: Take care to initialized tcp_md5sig structure - BUG/MINOR: http-act: Fix parsing of the expression argument for pause action - MEDIUM: httpclient: add a Content-Length when the payload is known - CLEANUP: ssl: Rename ssl_trace-t.h to ssl_trace.h - MINOR: pattern: add a counter of added/freed patterns - CI: set DEBUG_STRICT=2 for coverity scan - CI: enable USE_QUIC=1 for OpenSSL versions >= 3.5.0 - CI: github: add an OpenSSL 3.5.0 job - CI: github: update the stable CI to ubuntu-24.04 - BUG/MEDIUM: quic: SSL/TCP handshake failures with OpenSSL 3.5 - CI: github: update to OpenSSL 3.5.1 - BUG/MINOR: quic: Missing TLS 1.3 QUIC cipher suites and groups inits (OpenSSL 3.5 QUIC API) - BUG/MINOR: quic-be: Malformed coalesced Initial packets - MINOR: quic: Prevent QUIC backend use with the OpenSSL QUIC compatibility module (USE_OPENSS_COMPAT) - MINOR: reg-tests: first QUIC+H3 reg tests (QUIC address validation) - MINOR: quic-be: Set the backend alpn if not set by conf - MINOR: quic-be: TLS version restriction to 1.3 - MINOR: cfgparse: enforce QUIC MUX compat on server line - MINOR: server: support QUIC for dynamic servers - CI: github: skip a ssl library version when latest is already in the list - MEDIUM: resolvers: switch dns-accept-family to "auto" by default - BUG/MINOR: resolvers: don't lower the case of binary DNS format - MINOR: resolvers: do not duplicate the hostname_dn field - MINOR: proto-tcp: Register a feature to report TCP MD5 signature support - BUG/MINOR: listener: really assign distinct IDs to shards - MINOR: quic: Prevent QUIC build with OpenSSL 3.5 new QUIC API version < 3.5.1 - BUG/MEDIUM: quic: Crash after QUIC server callbacks restoration (OpenSSL 3.5) - REGTESTS: use two haproxy instances to distinguish the QUIC traces - BUG/MEDIUM: http-client: Don't wake http-client applet if nothing was xferred - BUG/MEDIUM: http-client: Properly inc input data when HTX blocks are xferred - BUG/MEDIUM: http-client: Ask for more room when request data cannot be xferred - BUG/MEDIUM: http-client: Test HTX_FL_EOM flag before commiting the HTX buffer - BUG/MINOR: http-client: Ignore 1XX interim responses in non-HTX mode - BUG/MINOR: http-client: Reject any 101-switching-protocols response - BUG/MEDIUM: http-client: Drain the request if an early response is received - BUG/MEDIUM: http-client: Notify applet has more data to deliver until the EOM - BUG/MINOR: h3: fix https scheme request encoding for BE side - MINOR: h1-htx: Add function to format an HTX message in its H1 representation - BUG/MINOR: mux-h1: Use configured error files if possible for early H1 errors - BUG/MINOR: h1-htx: Don't forget to init flags in h1_format_htx_msg function - CLEANUP: assorted typo fixes in the code, commits and doc - BUILD: adjust scripts/build-ssl.sh to modern CMake system of QuicTLS - MINOR: debug: add distro name and version in postmortem	2025-07-11 16:45:50 +02:00
Willy Tarreau	299a441110	[RELEASE] Released version 3.3-dev2 ... Released version 3.3-dev2 with the following main changes : - BUG/MINOR: config/server: reject QUIC addresses - MINOR: server: implement helper to identify QUIC servers - MINOR: server: mark QUIC support as experimental - MINOR: mux-quic-be: allow QUIC proto on backend side - MINOR: quic-be: Correct Version Information transp. param encoding - MINOR: quic-be: Version Information transport parameter check - MINOR: quic-be: Call ->prepare_srv() callback at parsing time - MINOR: quic-be: QUIC backend XPRT and transport parameters init during parsing - MINOR: quic-be: QUIC server xprt already set when preparing their CTXs - MINOR: quic-be: Add a function for the TLS context allocations - MINOR: quic-be: Correct the QUIC protocol lookup - MINOR: quic-be: ssl_sock contexts allocation and misc adaptations - MINOR: quic-be: SSL sessions initializations - MINOR: quic-be: Add a function to initialize the QUIC client transport parameters - MINOR: sock: Add protocol and socket types parameters to sock_create_server_socket() - MINOR: quic-be: ->connect() protocol callback adaptations - MINOR: quic-be: QUIC connection allocation adaptation (qc_new_conn()) - MINOR: quic-be: xprt ->init() adapatations - MINOR: quic-be: add field for max_udp_payload_size into quic_conn - MINOR: quic-be: Do not redispatch the datagrams - MINOR: quic-be: Datagrams and packet parsing support - MINOR: quic-be: Handshake packet number space discarding - MINOR: h3-be: Correctly retrieve h3 counters - MINOR: quic-be: Store asap the DCID - MINOR: quic-be: Build post handshake frames - MINOR: quic-be: Add the conn object to the server SSL context - MINOR: quic-be: Initial packet number space discarding. - MINOR: quic-be: I/O handler switch adaptation - MINOR: quic-be: Store the remote transport parameters asap - MINOR: quic-be: Missing callbacks initializations (USE_QUIC_OPENSSL_COMPAT) - MINOR: quic-be: Make the secret derivation works for QUIC backends (USE_QUIC_OPENSSL_COMPAT) - MINOR: quic-be: SSL_get_peer_quic_transport_params() not defined by OpenSSL 3.5 QUIC API - MINOR: quic-be: get rid of ->li quic_conn member - MINOR: quic-be: Prevent the MUX to send/receive data - MINOR: quic: define proper proto on QUIC servers - MEDIUM: quic-be: initialize MUX on handshake completion - BUG/MINOR: hlua: Don't forget the return statement after a hlua_yieldk() - BUILD: hlua: Fix warnings about uninitialized variables - BUILD: listener: fix 'for' loop inline variable declaration - BUILD: hlua: Fix warnings about uninitialized variables (2) - BUG/MEDIUM: mux-quic: adjust wakeup behavior - MEDIUM: backend: delay MUX init with ALPN even if proto is forced - MINOR: quic: mark ctrl layer as ready on quic_connect_server() - MINOR: mux-quic: improve documentation for snd/rcv app-ops - MINOR: mux-quic: define flag for backend side - MINOR: mux-quic: set expect data only on frontend side - MINOR: mux-quic: instantiate first stream on backend side - MINOR: quic: wakeup backend MUX on handshake completed - MINOR: hq-interop: decode response into HTX for backend side support - MINOR: hq-interop: encode request from HTX for backend side support - CLEANUP: quic-be: Add comments about qc_new_conn() usage - BUG/MINOR: quic-be: CID double free upon qc_new_conn() failures - MINOR: quic-be: Avoid SSL context unreachable code without USE_QUIC_OPENSSL_COMPAT - BUG/MINOR: quic: prevent crash on startup with -dt - MINOR: server: reject QUIC servers without explicit SSL - BUG/MINOR: quic: work around NEW_TOKEN parsing error on backend side - BUG/MINOR: http-ana: Properly handle keep-query redirect option if no QS - BUG/MINOR: quic: don't restrict reception on backend privileged ports - MINOR: hq-interop: handle HTX response forward if not enough space - BUG/MINOR: quic: Fix OSSL_FUNC_SSL_QUIC_TLS_got_transport_params_fn callback (OpenSSL3.5) - BUG/MINOR: quic: fix ODCID initialization on frontend side - BUG/MEDIUM: cli: Don't consume data if outbuf is full or not available - MINOR: cli: handle EOS/ERROR first - BUG/MEDIUM: check: Set SOCKERR by default when a connection error is reported - BUG/MINOR: mux-quic: check sc_attach_mux return value - MINOR: h3: support basic HTX start-line conversion into HTTP/3 request - MINOR: h3: encode request headers - MINOR: h3: complete HTTP/3 request method encoding - MINOR: h3: complete HTTP/3 request scheme encoding - MINOR: h3: adjust path request encoding - MINOR: h3: adjust auth request encoding or fallback to host - MINOR: h3: prepare support for response parsing - MINOR: h3: convert HTTP/3 response into HTX for backend side support - MINOR: h3: complete response status transcoding - MINOR: h3: transcode H3 response headers into HTX blocks - MINOR: h3: use BUG_ON() on missing request start-line - MINOR: h3: reject invalid :status in response - DOC: config: prefer-last-server: add notes for non-deterministic algorithms - CLEANUP: connection: remove unused mux-ops dedicated to QUIC - BUG/MINOR: mux-quic/h3: properly handle too low peer fctl initial stream - MINOR: mux-quic: support max bidi streams value set by the peer - MINOR: mux-quic: abort conn if cannot create stream due to fctl - MEDIUM: mux-quic: implement attach for new streams on backend side - BUG/MAJOR: fwlc: Count an avoided server as unusable. - MINOR: fwlc: Factorize code. - BUG/MEDIUM: quic: do not release BE quic-conn prior to upper conn - MAJOR: cfgparse: turn the same proxy name warning to an error - MAJOR: cfgparse: make sure server names are unique within a backend - BUG/MINOR: tools: only reset argument start upon new argument - BUG/MINOR: stream: Avoid recursive evaluation for unique-id based on itself - BUG/MINOR: log: Be able to use %ID alias at anytime of the stream's evaluation - MINOR: hlua: emit a log instead of an alert for aborted actions due to unavailable yield - MAJOR: mailers: remove native mailers support - BUG/MEDIUM: ssl/clienthello: ECDSA with ssl-max-ver TLSv1.2 and no ECDSA ciphers - DOC: configuration: add details on prefer-client-ciphers - MINOR: ssl: Add "renegotiate" server option - DOC: remove the program section from the documentation - MAJOR: mworker: remove program section support - BUG/MINOR: quic: wrong QUIC_FT_CONNECTION_CLOSE(0x1c) frame encoding - MINOR: quic-be: add a "CC connection" backend TX buffer pool - MINOR: quic: Useless TX buffer size reduction in closing state - MINOR: quic-be: Allow sending 1200 bytes Initial datagrams - MINOR: quic-be: address validation support implementation (RETRY) - MEDIUM: proxy: deprecate the "transparent" and "option transparent" directives - REGTESTS: update http_reuse_be_transparent with "transparent" deprecated - REGTESTS: script: also add a line pointing to the log file - DOC: config: explain how to deal with "transparent" deprecation - MEDIUM: proxy: mark the "dispatch" directive as deprecated - DOC: config: crt-list clarify default cert + cert-bundle - MEDIUM: cpu-topo: switch to the "performance" cpu-policy by default - SCRIPTS: drop the HTML generation from announce-release - BUG/MINOR: tools: use my_unsetenv instead of unsetenv - CLEANUP: startup: move comment about nbthread where it's more appropriate - BUILD: qpack: fix a build issue on older compilers	2025-06-26 18:26:45 +02:00
Christopher Faulet	b5525fe759	[RELEASE] Released version 3.3-dev1 ... Released version 3.3-dev1 with the following main changes : - BUILD: tools: properly define ha_dump_backtrace() to avoid a build warning - DOC: config: Fix a typo in 2.7 (Name format for maps and ACLs) - REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (5) - REGTESTS: Remove REQUIRE_VERSION=2.3 from all tests - REGTESTS: Remove REQUIRE_VERSION=2.4 from all tests - REGTESTS: Remove tests with REQUIRE_VERSION_BELOW=2.4 - REGTESTS: Remove support for REQUIRE_VERSION and REQUIRE_VERSION_BELOW - MINOR: server: group postinit server tasks under _srv_postparse() - MINOR: stats: add stat_col flags - MINOR: stats: add ME_NEW_COMMON() helper - MINOR: proxy: collect per-capability stat in proxy_cond_disable() - MINOR: proxy: add a true list containing all proxies - MINOR: log: only run postcheck_log_backend() checks on backend - MEDIUM: proxy: use global proxy list for REGISTER_POST_PROXY_CHECK() hook - MEDIUM: server: automatically add server to proxy list in new_server() - MEDIUM: server: add and use srv_init() function - BUG/MAJOR: leastconn: Protect tree_elt with the lbprm lock - BUG/MEDIUM: check: Requeue healthchecks on I/O events to handle check timeout - CLEANUP: applet: Update comment for applet_put* functions - DEBUG: check: Add the healthcheck's expiration date in the trace messags - BUG/MINOR: mux-spop: Fix null-pointer deref on SPOP stream allocation failure - CLEANUP: sink: remove useless cleanup in sink_new_from_logger() - MAJOR: counters: add shared counters base infrastructure - MINOR: counters: add shared counters helpers to get and drop shared pointers - MINOR: counters: add common struct and flags to {fe,be}_counters_shared - MEDIUM: counters: manage shared counters using dedicated helpers - CLEANUP: counters: merge some common counters between {fe,be}_counters_shared - MINOR: counters: add local-only internal rates to compute some maxes - MAJOR: counters: dispatch counters over thread groups - BUG/MEDIUM: cli: Properly parse empty lines and avoid crashed - BUG/MINOR: config: emit warning for empty args only in discovery mode - BUG/MINOR: config: fix arg number reported on empty arg warning - BUG/MINOR: quic: Missing SSL session object freeing - MINOR: applet: Add API functions to manipulate input and output buffers - MINOR: applet: Add API functions to get data from the input buffer - CLEANUP: applet: Simplify a bit comments for applet_put* functions - MEDIUM: hlua: Update TCP applet functions to use the new applet API - BUG/MEDIUM: fd: Use the provided tgid in fd_insert() to get tgroup_info - BUG/MINIR: h1: Fix doc of 'accept-unsafe-...-request' about URI parsing	2025-06-11 14:31:33 +02:00
Willy Tarreau	9f4cd435d3	[RELEASE] Released version 3.3-dev0 ... Released version 3.3-dev0 with the following main changes : - MINOR: version: mention that it's development again	2025-05-28 16:46:34 +02:00
Willy Tarreau	e134140d28	[RELEASE] Released version 3.2.0 ... Released version 3.2.0 with the following main changes : - MINOR: promex: Add agent check status/code/duration metrics - MINOR: ssl: support strict-sni in ssl-default-bind-options - MINOR: ssl: also provide the "tls-tickets" bind option - MINOR: server: define CLI I/O handler for "add server" - MINOR: server: implement "add server help" - MINOR: server: use stress mode for "add server help" - BUG/MEDIUM: server: fix crash after duplicate GUID insertion - BUG/MEDIUM: server: fix potential null-deref after previous fix - MINOR: config: list recently added sections with -dKcfg - BUG/MAJOR: cache: Crash because of wrong cache entry deleted - DOC: configuration: fix the example in crt-store - DOC: config: clarify the wording around single/double quotes - DOC: config: clarify the legacy cookie and header captures - DOC: config: fix alphabetical ordering of layer 7 sample fetch functions - DOC: config: fix alphabetical ordering of layer 6 sample fetch functions - DOC: config: fix alphabetical ordering of layer 5 sample fetch functions - DOC: config: fix alphabetical ordering of layer 4 sample fetch functions - DOC: config: fix alphabetical ordering of internal sample fetch functions - BUG/MINOR: h3: Set HTX flags corresponding to the scheme found in the request - BUG/MEDIUM: h3: Declare absolute URI as normalized when a :authority is found - DOC: config: mention in bytes_in and bytes_out that they're read on input - DOC: config: clarify the basics of ACLs (call point, multi-valued etc) - REGTESTS: Make the script testing conditional set-var compatible with Vtest2 - REGTESTS: Explicitly allow failing shell commands in some scripts - MINOR: listeners: Add support for a label on bind line - BUG/MEDIUM: cli/ring: Properly handle shutdown in "show event" I/O handler - BUG/MEDIUM: hlua: Properly detect shudowns for TCP applets based on the new API - BUG/MEDIUM: hlua: Fix getline() for TCP applets to work with applet's buffers - BUG/MEDIUM: hlua: Fix receive API for TCP applets to properly handle shutdowns - CI: vtest: Rely on VTest2 to run regression tests - CI: vtest: Fix the build script to properly work on MaOS - CI: combine AWS-LC and AWS-LC-FIPS by template - BUG/MEDIUM: httpclient: Throw an error if an lua httpclient instance is reused - DOC: hlua: Add a note to warn user about httpclient object reuse - DOC: hlua: fix a few typos in HTTPMessage.set_body_len() documentation - DEV: patchbot: prepare for new version 3.3-dev - MINOR: version: mention that it's 3.2 LTS now.	2025-05-28 16:35:14 +02:00
Willy Tarreau	0ac41ff97e	[RELEASE] Released version 3.2-dev17 ... Released version 3.2-dev17 with the following main changes : - DOC: configuration: explicit multi-choice on bind shards option - BUG/MINOR: sink: detect and warn when using "send-proxy" options with ring servers - BUG/MEDIUM: peers: also limit the number of incoming updates - MEDIUM: hlua: Add function to change the body length of an HTTP Message - BUG/MEDIUM: stconn: Disable 0-copy forwarding for filters altering the payload - BUG/MINOR: h3: don't insert more than one Host header - BUG/MEDIUM: h1/h2/h3: reject forbidden chars in the Host header field - DOC: config: properly index "table and "stick-table" in their section - DOC: management: change reference to configuration manual - BUILD: debug: mark ha_crash_now() as attribute(noreturn) - IMPORT: slz: avoid multiple shifts on 64-bits - IMPORT: slz: support crc32c for lookup hash on sse4 but only if requested - IMPORT: slz: use a better hash for machines with a fast multiply - IMPORT: slz: fix header used for empty zlib message - IMPORT: slz: silence a build warning on non-x86 non-arm - BUG/MAJOR: leastconn: do not loop forever when facing saturated servers - BUG/MAJOR: queue: properly keep count of the queue length - BUG/MINOR: quic: fix crash on quic_conn alloc failure - BUG/MAJOR: leastconn: never reuse the node after dropping the lock - MINOR: acme: renewal notification over the dpapi sink - CLEANUP: quic: Useless BIO_METHOD initialization - MINOR: quic: Add useful error traces about qc_ssl_sess_init() failures - MINOR: quic: Allow the use of the new OpenSSL 3.5.0 QUIC TLS API (to be completed) - MINOR: quic: implement all remaining callbacks for OpenSSL 3.5 QUIC API - MINOR: quic: OpenSSL 3.5 internal QUIC custom extension for transport parameters reset - MINOR: quic: OpenSSL 3.5 trick to support 0-RTT - DOC: update INSTALL for QUIC with OpenSSL 3.5 usages - DOC: management: update 'acme status' - BUG/MEDIUM: wdt: always ignore the first watchdog wakeup - CLEANUP: wdt: clarify the comments on the common exit path - BUILD: ssl: avoid possible printf format warning in traces - BUILD: acme: fix build issue on 32-bit archs with 64-bit time_t - DOC: management: precise some of the fields of "show servers conn" - BUG/MEDIUM: mux-quic: fix BUG_ON() on rxbuf alloc error - DOC: watchdog: update the doc to reflect the recent changes - BUG/MEDIUM: acme: check if acme domains are configured - BUG/MINOR: acme: fix formatting issue in error and logs - EXAMPLES: lua: avoid screen refresh effect in "trisdemo" - CLEANUP: quic: remove unused cbuf module - MINOR: quic: move function to check stream type in utils - MINOR: quic: refactor handling of streams after MUX release - MINOR: quic: add some missing includes - MINOR: quic: adjust quic_conn-t.h include list - CLEANUP: cfgparse: alphabetically sort the global keywords - MINOR: glitches: add global setting "tune.glitches.kill.cpu-usage"	2025-05-21 15:56:06 +02:00
Willy Tarreau	17df04ff09	[RELEASE] Released version 3.2-dev16 ... Released version 3.2-dev16 with the following main changes : - BUG/MEDIUM: mux-quic: fix crash on invalid fctl frame dereference - DEBUG: pool: permit per-pool UAF configuration - MINOR: acme: add the global option 'acme.scheduler' - DEBUG: pools: add a new integrity mode "backup" to copy the released area - MEDIUM: sock-inet: re-check IPv6 connectivity every 30s - BUG/MINOR: ssl: doesn't fill conf->crt with first arg - BUG/MINOR: ssl: prevent multiple 'crt' on the same ssl-f-use line - BUG/MINOR: ssl/ckch: always free() the previous entry during parsing - MINOR: tools: ha_freearray() frees an array of string - BUG/MINOR: ssl/ckch: always ha_freearray() the previous entry during parsing - MINOR: ssl/ckch: warn when the same keyword was used twice - BUG/MINOR: threads: fix soft-stop without multithreading support - BUG/MINOR: tools: improve parse_line()'s robustness against empty args - BUG/MINOR: cfgparse: improve the empty arg position report's robustness - BUG/MINOR: server: dont depend on proxy for server cleanup in srv_drop() - BUG/MINOR: server: perform lbprm deinit for dynamic servers - MINOR: http: add a function to validate characters of :authority - BUG/MEDIUM: h2/h3: reject some forbidden chars in :authority before reassembly - MINOR: quic: account Tx data per stream - MINOR: mux-quic: account Rx data per stream - MINOR: quic: add stream format for "show quic" - MINOR: quic: display QCS info on "show quic stream" - MINOR: quic: display stream age - BUG/MINOR: cpu-topo: fix group-by-cluster policy for disordered clusters - MINOR: cpu-topo: add a new "group-by-ccx" CPU policy - MINOR: cpu-topo: provide a function to sort clusters by average capacity - MEDIUM: cpu-topo: change "performance" to consider per-core capacity - MEDIUM: cpu-topo: change "efficiency" to consider per-core capacity - MEDIUM: cpu-topo: prefer grouping by CCX for "performance" and "efficiency" - MEDIUM: config: change default limits to 1024 threads and 32 groups - BUG/MINOR: hlua: Fix Channel:data() and Channel:line() to respect documentation - DOC: config: Fix a typo in the "term_events" definition - BUG/MINOR: spoe: Don't report error on applet release if filter is in DONE state - BUG/MINOR: mux-spop: Don't report error for stream if ACK was already received - BUG/MINOR: mux-spop: Make the demux stream ID a signed integer - BUG/MINOR: mux-spop: Don't open new streams for SPOP connection on error - MINOR: mux-spop: Don't set SPOP connection state to FRAME_H after ACK parsing - BUG/MEDIUM: mux-spop: Remove frame parsing states from the SPOP connection state - BUG/MEDIUM: mux-spop: Properly handle CLOSING state - BUG/MEDIUM: spop-conn: Report short read for partial frames payload - BUG/MEDIUM: mux-spop: Properly detect truncated frames on demux to report error - BUG/MEDIUM: mux-spop; Don't report a read error if there are pending data - DEBUG: mux-spop: Review some trace messages to adjust the message or the level - DOC: config: move address formats definition to section 2 - DOC: config: move stick-tables and peers to their own section - DOC: config: move the extraneous sections out of the "global" definition - CI: AWS-LC(fips): enable unit tests - CI: AWS-LC: enable unit tests - CI: compliance: limit run on forks only to manual + cleanup - CI: musl: enable unit tests - CI: QuicTLS (weekly): limit run on forks only to manual dispatch - CI: WolfSSL: enable unit tests	2025-05-14 17:01:46 +02:00
Willy Tarreau	3f9194bfc9	[RELEASE] Released version 3.2-dev15 ... Released version 3.2-dev15 with the following main changes : - BUG/MEDIUM: stktable: fix sc_*(<ctr>) BUG_ON() regression with ctx > 9 - BUG/MINOR: acme/cli: don't output error on success - BUG/MINOR: tools: do not create an empty arg from trailing spaces - MEDIUM: config: warn about the consequences of empty arguments on a config line - MINOR: tools: make parse_line() provide hints about empty args - MINOR: cfgparse: visually show the input line on empty args - BUG/MINOR: tools: always terminate empty lines - BUG/MINOR: tools: make parseline report the required space for the trailing 0 - DEBUG: threads: don't keep lock label "OTHER" in the per-thread history - DEBUG: threads: merge successive idempotent lock operations in history - DEBUG: threads: display held locks in threads dumps - BUG/MINOR: proxy: only use proxy_inc_fe_cum_sess_ver_ctr() with frontends - Revert "BUG/MEDIUM: mux-spop: Handle CLOSING state and wait for AGENT DISCONNECT frame" - MINOR: acme/cli: 'acme status' show the status acme-configured certificates - MEDIUM: acme/ssl: remove 'acme ps' in favor of 'acme status' - DOC: configuration: add "acme" section to the keywords list - DOC: configuration: add the "crt-store" keyword - BUG/MAJOR: queue: lock around the call to pendconn_process_next_strm() - MINOR: ssl: add filename and linenum for ssl-f-use errors - BUG/MINOR: ssl: can't use crt-store some certificates in ssl-f-use - BUG/MINOR: tools: only fill first empty arg when not out of range - MINOR: debug: bump the dump buffer to 8kB - MINOR: stick-tables: add "ipv4" as an alias for the "ip" type - MINOR: quic: extend return value during TP parsing - BUG/MINOR: quic: use proper error code on missing CID in TPs - BUG/MINOR: quic: use proper error code on invalid server TP - BUG/MINOR: quic: reject retry_source_cid TP on server side - BUG/MINOR: quic: use proper error code on invalid received TP value - BUG/MINOR: quic: fix TP reject on invalid max-ack-delay - BUG/MINOR: quic: reject invalid max_udp_payload size - BUG/MEDIUM: peers: hold the refcnt until updating ts->seen - BUG/MEDIUM: stick-tables: close a tiny race in __stksess_kill() - BUG/MINOR: cli: fix too many args detection for commands - MINOR: server: ensure server postparse tasks are run for dynamic servers - BUG/MEDIUM: stick-table: always remove update before adding a new one - BUG/MEDIUM: quic: free stream_desc on all data acked - BUG/MINOR: cfgparse: consider the special case of empty arg caused by \x00 - DOC: config: recommend disabling libc-based resolution with resolvers	2025-05-09 10:51:30 +02:00
Willy Tarreau	758e0818c3	[RELEASE] Released version 3.2-dev14 ... Released version 3.2-dev14 with the following main changes : - MINOR: acme: retry label always do a request - MINOR: acme: does not leave task for next request - BUG/MINOR: acme: reinit the retries only at next request - MINOR: acme: change the default max retries to 5 - MINOR: acme: allow a delay after a valid response - MINOR: acme: wait 5s before checking the challenges results - MINOR: acme: emit a log when starting - MINOR: acme: delay of 5s after the finalize - BUG/MEDIUM: quic: Let it be known if the tasklet has been released. - BUG/MAJOR: tasks: fix task accounting when killed - CLEANUP: tasks: use the local state, not t->state, to check for tasklets - DOC: acme: external account binding is not supported - MINOR: hlua: ignore "tune.lua.bool-sample-conversion" if set after "lua-load" - MEDIUM: peers: Give up if we fail to take locks in hot path - MEDIUM: stick-tables: defer adding updates to a tasklet - MEDIUM: stick-tables: Limit the number of old entries we remove - MEDIUM: stick-tables: Limit the number of entries we expire - MINOR: cfgparse-global: add explicit error messages in cfg_parse_global_env_opts - MINOR: ssl: add function to extract X509 notBefore date in time_t - BUILD: acme: need HAVE_ASN1_TIME_TO_TM - MINOR: acme: move the acme task init in a dedicated function - MEDIUM: acme: add a basic scheduler - MINOR: acme: emit a log when the scheduler can't start the task	2025-05-02 16:23:28 +02:00
Willy Tarreau	c589964bcc	[RELEASE] Released version 3.2-dev13 ... Released version 3.2-dev13 with the following main changes : - MEDIUM: checks: Make sure we return the tasklet from srv_chk_io_cb - MEDIUM: listener: Make sure w ereturn the tasklet from accept_queue_process - MEDIUM: mux_fcgi: Make sure we return the tasklet from fcgi_deferred_shut - MEDIUM: quic: Make sure we return the tasklet from qcc_io_cb - MEDIUM: quic: Make sure we return NULL in quic_conn_app_io_cb if needed - MEDIUM: quic: Make sure we return the tasklet from quic_accept_run - BUG/MAJOR: tasklets: Make sure he tasklet can't run twice - BUG/MAJOR: listeners: transfer connection accounting when switching listeners - MINOR: ssl/cli: add a '-t' option to 'show ssl sni' - DOC: config: fix ACME paragraph rendering issue - DOC: config: clarify log-forward "host" option - MINOR: promex: expose ST_I_PX_RATE (current_session_rate) - BUILD: acme: use my_strndup() instead of strndup() - BUILD: leastconn: fix build warning when building without threads on old machines - MINOR: threads: prepare DEBUG_THREAD to receive more values - MINOR: threads: turn the full lock debugging to DEBUG_THREAD=2 - MEDIUM: threads: keep history of taken locks with DEBUG_THREAD > 0 - MINOR: threads/cli: display the lock history on "show threads" - MEDIUM: thread: set DEBUG_THREAD to 1 by default - BUG/MINOR: ssl/acme: free EVP_PKEY upon error - MINOR: acme: separate the code generating private keys - MINOR: acme: failure when no directory is specified - MEDIUM: acme: generate the account file when not found - MEDIUM: acme: use 'crt-base' to load the account key - MINOR: compiler: add more macros to detect macro definitions - MINOR: cli: split APPCTX_CLI_ST1_PROMPT into two distinct flags - MEDIUM: cli: make the prompt mode configurable between n/i/p - MEDIUM: mcli: make the prompt mode configurable between i/p - MEDIUM: mcli: replicate the current mode when enterin the worker process - DOC: configuration: acme account key are auto generated - CLEANUP: acme: remove old TODO for account key - DOC: configuration: add quic4 to the ssl-f-use example - BUG/MINOR: acme: does not try to unlock after a failed trylock - BUG/MINOR: mux-h2: fix the offset of the pattern for the ping frame - MINOR: tcp: add support for setting TCP_NOTSENT_LOWAT on both sides - BUG/MINOR: acme: creating an account should not end the task - MINOR: quic: rename min/max fields for congestion window algo - MINOR: quic: refactor BBR API - BUG/MINOR: quic: ensure cwnd limits are always enforced - MINOR: thread: define cshared type - MINOR: quic: account for global congestion window - MEDIUM: quic: limit global Tx memory - MEDIUM: acme: use a map to store tokens and thumbprints - BUG/MINOR: acme: remove references to virt@acme - MINOR: applet: add appctx_schedule() macro - BUG/MINOR: dns: add tempo between 2 connection attempts for dns servers - CLEANUP: dns: remove unused dns_stream_server struct member - BUG/MINOR: dns: prevent ds accumulation within dss - CLEANUP: proxy: mention that px->conn_retries isn't relevant in some cases - DOC: ring: refer to newer RFC5424 - MINOR: tools: make my_strndup() take a size_t len instead of and int - MINOR: Add "sigalg" to "sigalg name" helper function - MINOR: ssl: Add traces to ssl init/close functions - MINOR: ssl: Add traces to recv/send functions - MINOR: ssl: Add traces to ssl_sock_io_cb function - MINOR: ssl: Add traces around SSL_do_handshake call - MINOR: ssl: Add traces to verify callback - MINOR: ssl: Add ocsp stapling callback traces - MINOR: ssl: Add traces to the switchctx callback - MINOR: ssl: Add traces about sigalg extension parsing in clientHello callback - MINOR: Add 'conn' param to ssl_sock_chose_sni_ctx - BUG/MEDIUM: mux-spop: Wait end of handshake to declare a spop connection ready - BUG/MEDIUM: mux-spop: Handle CLOSING state and wait for AGENT DISCONNECT frame - BUG/MINOR: mux-h1: Don't pretend connection was released for TCP>H1>H2 upgrade - BUG/MINOR: mux-h1: Fix trace message in h1_detroy() to not relay on connection - BUILD: ssl: Fix wolfssl build - BUG/MINOR: mux-spop: Use the right bitwise operator in spop_ctl() - MEDIUM: mux-quic: increase flow-control on each bufsize - MINOR: mux-quic: limit emitted MSD frames count per qcs - MINOR: add hlua_yield_asap() helper - MINOR: hlua_fcn: enforce yield after *_get_stats() methods - DOC: config: restore default values for resolvers hold directive - MINOR: ssl/cli: "acme ps" shows the acme tasks - MINOR: acme: acme_ctx_destroy() returns upon NULL - MINOR: acme: use acme_ctx_destroy() upon error - MEDIUM: tasks: Mutualize code between tasks and tasklets. - MEDIUM: tasks: More code factorization - MEDIUM: tasks: Remove TASK_IN_LIST and use TASK_QUEUED instead. - MINOR: tasks: Remove unused tasklet_remove_from_tasklet_list - MEDIUM: tasks: Mutualize the TASK_KILLED code between tasks and tasklets - BUG/MEDIUM: connections: Report connection closing in conn_create_mux() - BUILD/MEDIUM: quic: Make sure we build with recent changes	2025-04-30 18:25:28 +02:00
Willy Tarreau	beb23069c6	[RELEASE] Released version 3.2-dev12 ... Released version 3.2-dev12 with the following main changes : - BUG/MINOR: quic: do not crash on CRYPTO ncbuf alloc failure - BUG/MINOR: proxy: always detach a proxy from the names tree on free() - CLEANUP: proxy: detach the name node in proxy_free_common() instead - CLEANUP: Slightly reorder some proxy option flags to free slots - MINOR: proxy: Add options to drop HTTP trailers during message forwarding - MINOR: h1-htx: Skip C-L and T-E headers for 1xx and 204 messages during parsing - MINOR: mux-h1: Keep custom "Content-Length: 0" header in 1xx and 204 messages - MINOR: hlua/h1: Use http_parse_cont_len_header() to parse content-length value - CLEANUP: h1: Remove now useless h1_parse_cont_len_header() function - BUG/MEDIUM: mux-spop: Respect the negociated max-frame-size value to send frames - MINOR: http-act: Add 'pause' action to temporarily suspend the message analysis - MINOR: acme/cli: add the 'acme renew' command to the help message - MINOR: httpclient: add an "https" log-format - MEDIUM: acme: use a customized proxy - MEDIUM: acme: rename "uri" into "directory" - MEDIUM: acme: rename "account" into "account-key" - MINOR: stick-table: use a separate lock label for updates - MINOR: h3: simplify h3_rcv_buf return path - BUG/MINOR: mux-quic: fix possible infinite loop during decoding - BUG/MINOR: mux-quic: do not decode if conn in error - BUG/MINOR: cli: Issue an error when too many args are passed for a command - MINOR: cli: Use a full prompt command for bidir connections with workers - MAJOR: cli: Refacor parsing and execution of pipelined commands - MINOR: cli: Rename some CLI applet states to reflect recent refactoring - CLEANUP: applet: Update st0/st1 comment in appctx structure - BUG/MINOR: hlua: Fix I/O handler of lua CLI commands to not rely on the SC - BUG/MINOR: ring: Fix I/O handler of "show event" command to not rely on the SC - MINOR: cli/applet: Move appctx fields only used by the CLI in a private context - MINOR: cache: Add a pointer on the cache in the cache applet context - MINOR: hlua: Use the applet name in error messages for lua services - MINOR: applet: Save the "use-service" rule in the stream to init a service applet - CLEANUP: applet: Remove unsued rule pointer in appctx structure - BUG/MINOR: master/cli: properly trim the '@@' process name in error messages - MEDIUM: resolvers: add global "dns-accept-family" directive - MINOR: resolvers: add command-line argument -4 to force IPv4-only DNS - MINOR: sock-inet: detect apparent IPv6 connectivity - MINOR: resolvers: add "dns-accept-family auto" to rely on detected IPv6 - MEDIUM: acme: use Retry-After value for retries - MEDIUM: acme: reset the remaining retries - MEDIUM: acme: better error/retry management of the challenge checks - BUG/MEDIUM: cli: Handle applet shutdown when waiting for a command line - Revert "BUG/MINOR: master/cli: properly trim the '@@' process name in error messages" - BUG/MINOR: master/cli: only parse the '@@' prefix on complete lines - MINOR: resolvers: use the runtime IPv6 status instead of boot time one	2025-04-25 10:19:03 +02:00
Willy Tarreau	acd372d6ac	[RELEASE] Released version 3.2-dev11 ... Released version 3.2-dev11 with the following main changes : - CI: enable weekly QuicTLS build - DOC: management: slightly clarify the prefix role of the '@' command - DOC: management: add a paragraph about the limitations of the '@' prefix - MINOR: master/cli: support bidirectional communications with workers - MEDIUM: ssl/ckch: add filename and linenum argument to crt-store parsing - MINOR: acme: add the acme section in the configuration parser - MINOR: acme: add configuration for the crt-store - MINOR: acme: add private key configuration - MINOR: acme/cli: add the 'acme renew' command - MINOR: acme: the acme section is experimental - MINOR: acme: get the ACME directory - MINOR: acme: handle the nonce - MINOR: acme: check if the account exist - MINOR: acme: generate new account - MINOR: acme: newOrder request retrieve authorizations URLs - MINOR: acme: allow empty payload in acme_jws_payload() - MINOR: acme: get the challenges object from the Auth URL - MINOR: acme: send the request for challenge ready - MINOR: acme: implement a check on the challenge status - MINOR: acme: generate the CSR in a X509_REQ - MINOR: acme: finalize by sending the CSR - MINOR: acme: verify the order status once finalized - MINOR: acme: implement retrieval of the certificate - BUG/MINOR: acme: ckch_conf_acme_init() when no filename - MINOR: ssl/ckch: handle ckch_conf in ckchs_dup() and ckch_conf_clean() - MINOR: acme: copy the original ckch_store - MEDIUM: acme: replace the previous ckch instance with new ones - MINOR: acme: schedule retries with a timer - BUILD: acme: enable the ACME feature when JWS is present - BUG/MINOR: cpu-topo: check the correct variable for NULL after malloc() - BUG/MINOR: acme: key not restored upon error in acme_res_certificate() - BUG/MINOR: thread: protect thread_cpus_enabled_at_boot with USE_THREAD - MINOR: acme: default to 2048bits for RSA - DOC: acme: explain how to configure and run ACME - BUG/MINOR: debug: remove the trailing \n from BUG_ON() statements - DOC: config: add the missing "profiling.memory" to the global kw index - DOC: config: add the missing "force-cfg-parser-pause" to the global kw index - DEBUG: init: report invalid characters in debug description strings - DEBUG: rename DEBUG_GLITCHES to DEBUG_COUNTERS and enable it by default - DEBUG: counters: make COUNT_IF() only appear at DEBUG_COUNTERS>=1 - DEBUG: counters: add the ability to enable/disable updating the COUNT_IF counters - MINOR: tools: let dump_addr_and_bytes() support dumping before the offset - MINOR: debug: in call traces, dump the 8 bytes before the return address, not after - MINOR: debug: detect call instructions and show the branch target in backtraces - BUG/MINOR: acme: fix possible NULL deref - CLEANUP: acme: stored value is overwritten before it can be used - BUILD: incompatible pointer type suspected with -DDEBUG_UNIT - BUG/MINOR: http-ana: Properly detect client abort when forwarding the response - BUG/MEDIUM: http-ana: Report 502 from req analyzer only during rsp forwarding - CI: fedora rawhide: enable unit tests - DOC: configuration: fix a typo in ACME documentation - MEDIUM: sink: add a new dpapi ring buffer - Revert "BUG/MINOR: acme: key not restored upon error in acme_res_certificate()" - BUG/MINOR: acme: key not restored upon error in acme_res_certificate() V2 - BUG/MINOR: acme: fix the exponential backoff of retries - DOC: configuration: specify limitations of ACME for 3.2 - MINOR: acme: emit logs instead of ha_notice - MINOR: acme: add a success message to the logs - BUG/MINOR: acme/cli: fix certificate name in error message - MINOR: acme: register the task in the ckch_store - MINOR: acme: free acme_ctx once the task is done - BUG/MEDIUM: h3: trim whitespaces when parsing headers value - BUG/MEDIUM: h3: trim whitespaces in header value prior to QPACK encoding - BUG/MINOR: h3: filter upgrade connection header - BUG/MINOR: h3: reject invalid :path in request - BUG/MINOR: h3: reject request URI with invalid characters - MEDIUM: h3: use absolute URI form with :authority - BUG/MEDIUM: hlua: fix hlua_applet_{http,tcp}_fct() yield regression (lost data) - BUG/MINOR: mux-h2: prevent past scheduling with idle connections - BUG/MINOR: rhttp: fix reconnect if timeout connect unset - BUG/MINOR: rhttp: ensure GOAWAY can be emitted after reversal - BUG/MINOR: mux-h2: do not apply timer on idle backend connection - MINOR: mux-h2: refactor idle timeout calculation - MINOR: mux-h2: prepare to support PING emission - MEDIUM: server/mux-h2: implement idle-ping on backend side - MEDIUM: listener/mux-h2: implement idle-ping on frontend side - MINOR: mux-h2: do not emit GOAWAY on idle ping expiration - MINOR: mux-h2: handle idle-ping on conn reverse - BUILD: makefile: enable backtrace by default on musl - BUG/MINOR: threads: set threads_idle and threads_harmless even with no threads - BUG/MINOR debug: fix !USE_THREAD_DUMP in ha_thread_dump_fill() - BUG/MINOR: wdt/debug: avoid signal re-entrance between debugger and watchdog - BUG/MINOR: debug: detect and prevent re-entrance in ha_thread_dump_fill() - MINOR: debug: do not statify a few debugging functions often used with wdt/dbg - MINOR: tools: also protect the library name resolution against concurrent accesses - MINOR: tools: protect dladdr() against reentrant calls from the debug handler - MINOR: debug: protect ha_dump_backtrace() against risks of re-entrance - MINOR: tinfo: keep a copy of the pointer to the thread dump buffer - MINOR: debug: always reset the dump pointer when done - MINOR: debug: remove unused case of thr!=tid in ha_thread_dump_one() - MINOR: pass a valid buffer pointer to ha_thread_dump_one() - MEDIUM: wdt: always make the faulty thread report its own warnings - MINOR: debug: make ha_stuck_warning() only work for the current thread - MINOR: debug: make ha_stuck_warning() print the whole message at once - CLEANUP: debug: no longer set nor use TH_FL_DUMPING_OTHERS - MINOR: sched: add a new function is_sched_alive() to report scheduler's health - MINOR: wdt: use is_sched_alive() instead of keeping a local ctxsw copy - MINOR: sample: add 4 new sample fetches for clienthello parsing - REGTEST: add new reg-test for the 4 new clienthello fetches - MINOR: servers: Move the per-thread server initialization earlier - MINOR: proxies: Initialize the per-thread structure earlier. - MINOR: servers: Provide a pointer to the server in srv_per_tgroup. - MINOR: lb_fwrr: Move the next weight out of fwrr_group. - MINOR: proxies: Add a per-thread group lbprm struct. - MEDIUM: lb_fwrr: Use one ebtree per thread group. - MEDIUM: lb_fwrr: Don't start all thread groups on the same server. - MINOR: proxies: Do stage2 initialization for sinks too	2025-04-18 14:19:47 +02:00
Willy Tarreau	a6982a898e	[RELEASE] Released version 3.2-dev10 ... Released version 3.2-dev10 with the following main changes : - REORG: ssl: move curves2nid and nid2nist to ssl_utils - BUG/MEDIUM: stream: Fix a possible freeze during a forced shut on a stream - MEDIUM: stream: Save SC and channel flags earlier in process_steam() - BUG/MINOR: peers: fix expire learned from a peer not converted from ms to ticks - BUG/MEDIUM: peers: prevent learning expiration too far in futur from unsync node - CI: spell check: allow manual trigger - CI: codespell: add "pres" to spellcheck whitelist - CLEANUP: assorted typo fixes in the code, commits and doc - CLEANUP: atomics: remove support for gcc < 4.7 - CLEANUP: atomics: also replace __sync_synchronize() with __atomic_thread_fence() - TESTS: Fix build for filltab25.c - MEDIUM: ssl: replace "crt" lines by "ssl-f-use" lines - DOC: configuration: replace "crt" by "ssl-f-use" in listeners - MINOR: backend: mark srv as nonnull in alloc_dst_address() - BUG/MINOR: server: ensure check-reuse-pool is copied from default-server - MINOR: server: activate automatically check reuse for rhttp@ protocol - MINOR: check/backend: support conn reuse with SNI - MINOR: check: implement check-pool-conn-name srv keyword - MINOR: task: add thread safe notification_new and notification_wake variants - BUG/MINOR: hlua_fcn: fix potential UAF with Queue:pop_wait() - MINOR: hlua_fcn: register queue class using hlua_register_metatable() - MINOR: hlua: add core.wait() - MINOR: hlua: core.wait() takes optional delay paramater - MINOR: hlua: split hlua_applet_tcp_recv_yield() in two functions - MINOR: hlua: add AppletTCP:try_receive() - MINOR: hlua_fcn: add Queue:alarm() - MEDIUM: task: make notification_* API thread safe by default - CLEANUP: log: adjust _lf_cbor_encode_byte() comment - MEDIUM: ssl/crt-list: warn on negative wildcard filters - MEDIUM: ssl/crt-list: warn on negative filters only - BUILD: atomics: fix build issue on non-x86/non-arm systems - BUG/MINOR: log: fix CBOR encoding with LOG_VARTEXT_START() + lf_encode_chunk() - BUG/MEDIUM: sample: fix risk of overflow when replacing multiple regex back-refs - DOC: configuration: rework the crt-list section - MINOR: ring: support arbitrary delimiters through ring_dispatch_messages() - MINOR: ring/cli: support delimiting events with a trailing \0 on "show events" - DEV: h2: fix h2-tracer.lua nil value index - BUG/MINOR: backend: do not use the source port when hashing clientip - BUG/MINOR: hlua: fix invalid errmsg use in hlua_init() - MINOR: proxy: add setup_new_proxy() function - MINOR: checks: mark CHECKS-FE dummy frontend as internal - MINOR: flt_spoe: mark spoe agent frontend as internal - MEDIUM: tree-wide: avoid manually initializing proxies - MINOR: proxy: add deinit_proxy() helper func - MINOR: checks: deinit checks_fe upon deinit - MINOR: flt_spoe: deinit spoe agent proxy upon agent release	2025-04-11 10:04:00 +02:00
Willy Tarreau	a8fab63604	[RELEASE] Released version 3.2-dev9 ... Released version 3.2-dev9 with the following main changes : - MINOR: quic: move global tune options into quic_tune - CLEANUP: quic: reorganize TP flow-control initialization - MINOR: quic: ignore uni-stream for initial max data TP - MINOR: mux-quic: define config for max-data - MINOR: quic: define max-stream-data configuration as a ratio - MEDIUM: lb-chash: add directive hash-preserve-affinity - MEDIUM: pools: be a bit smarter when merging comparable size pools - REGTESTS: disable the test balance/balance-hash-maxqueue - BUG/MINOR: log: fix gcc warn about truncating NUL terminator while init char arrays - CI: fedora rawhide: allow "on: workflow_dispatch" in forks - CI: fedora rawhide: install "awk" as a dependency - CI: spellcheck: allow "on: workflow_dispatch" in forks - CI: coverity scan: allow "on: workflow_dispatch" in forks - CI: cross compile: allow "on: workflow_dispatch" in forks - CI: Illumos: allow "on: workflow_dispatch" in forks - CI: NetBSD: allow "on: workflow_dispatch" in forks - CI: QUIC Interop on AWS-LC: allow "on: workflow_dispatch" in forks - CI: QUIC Interop on LibreSSL: allow "on: workflow_dispatch" in forks - MINOR: compiler: add __nonstring macro - MINOR: thread: dump the CPU topology in thread_map_to_groups() - MINOR: cpu-set: compare two cpu sets with ha_cpuset_isequal() - MINOR: cpu-set: add a new function to print cpu-sets in human-friendly mode - MINOR: cpu-topo: add a dump of thread-to-CPU mapping to -dc - MINOR: cpu-topo: pass an extra argument to ha_cpu_policy - MINOR: cpu-topo: add new cpu-policies "group-by-2-clusters" and above - BUG/MINOR: config: silence .notice/.warning/.alert in discovery mode - EXAMPLES: add "games.cfg" and an example game in Lua - MINOR: jws: emit the JWK thumbprint - TESTS: jws: change the jwk format - MINOR: ssl/ckch: add substring parser for ckch_conf - MINOR: mt_list: Implement mt_list_try_lock_prev(). - MINOR: lbprm: Add method to deinit server and proxy - MINOR: threads: Add HA_RWLOCK_TRYRDTOWR() - MAJOR: leastconn; Revamp the way servers are ordered. - BUG/MINOR: ssl/ckch: leak in error path - BUILD: ssl/ckch: potential null pointer dereference - MINOR: log: support "raw" logformat node typecast - CLEANUP: assorted typo fixes in the code and comments - DOC: config: fix two missing "content" in "tcp-request" examples - MINOR: cpu-topo: cpu_dump_topology() SMT info check little optimisation - BUILD: compiler: undefine the CONCAT() macro if already defined - BUG/MEDIUM: leastconn: Don't try to reposition if the server is down - BUG/MINOR: rhttp: fix incorrect dst/dst_port values - BUG/MINOR: backend: do not overwrite srv dst address on reuse - BUG/MEDIUM: backend: fix reuse with set-dst/set-dst-port - MINOR: sample: define bc_reused fetch - REGTESTS: extend conn reuse test with transparent proxy - MINOR: backend: fix comment when killing idle conns - MINOR: backend: adjust conn_backend_get() API - MINOR: backend: extract conn hash calculation from connect_server() - MINOR: backend: extract conn reuse from connect_server() - MINOR: backend: remove stream usage on connection reuse - MINOR: check define check-reuse-pool server keyword - MEDIUM: check: implement check-reuse-pool - BUILD: backend: silence a build warning when not using ssl - BUILD: quic_sock: address a strict-aliasing build warning with gcc 5 and 6 - BUILD: ssl_ckch: use my_strndup() instead of strndup() - DOC: update INSTALL to reflect the minimum compiler version	2025-04-02 18:12:34 +02:00
Willy Tarreau	119a79f479	[RELEASE] Released version 3.2-dev8 ... Released version 3.2-dev8 with the following main changes : - MINOR: jws: implement JWS signing - TESTS: jws: implement a test for JWS signing - CI: github: add "jose" to apt dependencies - CLEANUP: log-forward: remove useless options2 init - CLEANUP: log: add syslog_process_message() helper - MINOR: proxy: add proxy->options3 - MINOR: log: migrate log-forward options from proxy->options2 to options3 - MINOR: log: provide source address information in syslog_process_message() - MINOR: tools: only print address in sa2str() when port == -1 - MINOR: log: add "option host" log-forward option - MINOR: log: handle log-forward "option host" - MEDIUM: log: change default "host" strategy for log-forward section - BUG/MEDIUM: thread: use pthread_self() not ha_pthread[tid] in set_affinity - MINOR: compiler: add a simple macro to concatenate resolved strings - MINOR: compiler: add a new __decl_thread_var() macro to declare local variables - BUILD: tools: silence a build warning when USE_THREAD=0 - BUILD: backend: silence a build warning when threads are disabled - DOC: management: rename some last occurences from domain "dns" to "resolvers" - BUG/MINOR: stats: fix capabilities and hide settings for some generic metrics - MINOR: cli: export cli_io_handler() to ease symbol resolution - MINOR: tools: improve symbol resolution without dl_addr - MINOR: tools: ease the declaration of known symbols in resolve_sym_name() - MINOR: tools: teach resolve_sym_name() a few more common symbols - BUILD: tools: avoid a build warning on gcc-4.8 in resolve_sym_name() - DEV: ncpu: also emulate sysconf() for _SC_NPROCESSORS_* - DOC: design-thoughts: commit numa-auto.txt - MINOR: cpuset: make the API support negative CPU IDs - MINOR: thread: rely on the cpuset functions to count bound CPUs - MINOR: cpu-topo: add ha_cpu_topo definition - MINOR: cpu-topo: allocate and initialize the ha_cpu_topo array. - MINOR: cpu-topo: rely on _SC_NPROCESSORS_CONF to trim maxcpus - MINOR: cpu-topo: add a function to dump CPU topology - MINOR: cpu-topo: update CPU topology from excluded CPUs at boot - REORG: cpu-topo: move bound cpu detection from cpuset to cpu-topo - MINOR: cpu-topo: add detection of online CPUs on Linux - MINOR: cpu-topo: add detection of online CPUs on FreeBSD - MINOR: cpu-topo: try to detect offline cpus at boot - MINOR: cpu-topo: add CPU topology detection for linux - MINOR: cpu-topo: also store the sibling ID with SMT - MINOR: cpu-topo: add NUMA node identification to CPUs on Linux - MINOR: cpu-topo: add NUMA node identification to CPUs on FreeBSD - MINOR: thread: turn thread_cpu_mask_forced() into an init-time variable - MINOR: cfgparse: move the binding detection into numa_detect_topology() - MINOR: cfgparse: use already known offline CPU information - MINOR: global: add a command-line option to enable CPU binding debugging - MINOR: cpu-topo: add a new "cpu-set" global directive to choose cpus - MINOR: cpu-topo: add "drop-cpu" and "only-cpu" to cpu-set - MEDIUM: thread: start to detect thread groups and threads min/max - MEDIUM: cpu-topo: make sure to properly assign CPUs to threads as a fallback - MEDIUM: thread: reimplement first numa node detection - MEDIUM: cfgparse: remove now unused numa & thread-count detection - MINOR: cpu-topo: refine cpu dump output to better show kept/dropped CPUs - MINOR: cpu-topo: fall back to nominal_perf and scaling_max_freq for the capacity - MINOR: cpu-topo: use cpufreq before acpi cppc - MINOR: cpu-topo: boost the capacity of performance cores with cpufreq - MINOR: cpu-topo: skip CPU detection when /sys/.../cpu does not exist - MINOR: cpu-topo: skip identification of non-existing CPUs - MINOR: cpu-topo: skip CPU properties that we've verified do not exist - MINOR: cpu-topo: implement a sorting mechanism for CPU index - MINOR: cpu-topo: implement a sorting mechanism by CPU locality - MINOR: cpu-topo: implement a CPU sorting mechanism by cluster ID - MINOR: cpu-topo: ignore single-core clusters - MINOR: cpu-topo: assign clusters to cores without and renumber them - MINOR: cpu-topo: make sure we don't leave unassigned IDs in the cpu_topo - MINOR: cpu-topo: assign an L3 cache if more than 2 L2 instances - MINOR: cpu-topo: renumber cores to avoid holes and make them contiguous - MINOR: cpu-topo: add a function to sort by cluster+capacity - MINOR: cpu-topo: consider capacity when forming clusters - MINOR: cpu-topo: create an array of the clusters - MINOR: cpu-topo: ignore excess of too small clusters - MINOR: cpu-topo: add "only-node" and "drop-node" to cpu-set - MINOR: cpu-topo: add "only-thread" and "drop-thread" to cpu-set - MINOR: cpu-topo: add "only-core" and "drop-core" to cpu-set - MINOR: cpu-topo: add "only-cluster" and "drop-cluster" to cpu-set - MINOR: cpu-topo: add a CPU policy setting to the global section - MINOR: cpu-topo: add a 'first-usable-node' cpu policy - MEDIUM: cpu-topo: use the "first-usable-node" cpu-policy by default - CLEANUP: thread: now remove the temporary CPU node binding code - MINOR: cpu-topo: add cpu-policy "group-by-cluster" - MEDIUM: cpu-topo: let the "group-by-cluster" split groups - MINOR: cpu-topo: add a new "performance" cpu-policy - MINOR: cpu-topo: add a new "efficiency" cpu-policy - MINOR: cpu-topo: add a new "resource" cpu-policy - MINOR: jws: add new functions in jws.h - MINOR: cpu-topo: fix unused stack var 'cpu2' reported by coverity - MINOR: hlua: add an optional timeout to AppletTCP:receive() - MINOR: jws: use jwt_alg type instead of a char - BUG/MINOR: log: prevent saddr NULL deref in syslog_io_handler() - MINOR: stream: decrement srv->served after detaching from the list - BUG/MINOR: hlua: fix optional timeout argument index for AppletTCP:receive() - MINOR: server: simplify srv_has_streams() - CLEANUP: server: make it clear that srv_check_for_deletion() is thread-safe - MINOR: cli/server: don't take thread isolation to check for srv-removable - BUG/MINOR: limits: compute_ideal_maxconn: don't cap remain if fd_hard_limit=0 - MINOR: limits: fix check_if_maxsock_permitted description - BUG/MEDIUM: hlua/cli: fix cli applet UAF in hlua_applet_wakeup() - MINOR: tools: path_base() concatenates a path with a base path - MEDIUM: ssl/ckch: make the ckch_conf more generic - BUG/MINOR: mux-h2: Reset streams with NO_ERROR code if full response was already sent - MINOR: stats: add .generic explicit field in stat_col struct - MINOR: stats: STATS_PX_CAP___B_ macro - MINOR: stats: add .cap for some static metrics - MINOR: stats: use stat_col storage stat_cols_info - MEDIUM: promex: switch to using stat_cols_info for global metrics - MINOR: promex: expose ST_I_INF_WARNINGS (AKA total_warnings) metric - MEDIUM: promex: switch to using stat_cols_px for front/back/server metrics - MINOR: stats: explicitly add frontend cap for ST_I_PX_REQ_TOT - CLEANUP: promex: remove unused PROMEX_FL_{INFO,FRONT,BACK,LI,SRV} flags - BUG/MEDIUM: mux-quic: fix crash on RS/SS emission if already close local - BUG/MINOR: mux-quic: remove extra BUG_ON() in _qcc_send_stream() - MEDIUM: mt_list: Reduce the max number of loops with exponential backoff - MINOR: stats: add alt_name field to stat_col struct - MINOR: stats: add alt name info to stat_cols_info where relevant - MINOR: promex: get rid of promex_global_metric array - MINOR: stats-proxy: add alt_name field for ME_NEW_{FE,BE,PX} helpers - MINOR: stats-proxy: add alt name info to stat_cols_px where relevant - MINOR: promex: get rid of promex_st_metrics array - MINOR: pools: rename the "by_what" field of the show pools context to "how" - MINOR: cli/pools: record the list of pool registrations even when merging them	2025-03-21 17:33:36 +01:00
Willy Tarreau	3cbeb6a74b	[RELEASE] Released version 3.2-dev7 ... Released version 3.2-dev7 with the following main changes : - BUG/MEDIUM: applet: Don't handle EOI/EOS/ERROR is applet is waiting for room - BUG/MEDIUM: spoe/mux-spop: Introduce an NOOP action to deal with empty ACK - BUG/MINOR: cfgparse: fix NULL ptr dereference in cfg_parse_peers - BUG/MEDIUM: uxst: fix outgoing abns address family in connect() - REGTESTS: fix reg-tests/server/abnsz.vtc - BUG/MINOR: log: fix outgoing abns address family - BUG/MINOR: sink: add tempo between 2 connection attempts for sft servers - MINOR: clock: always use atomic ops for global_now_ms - CI: QUIC Interop: clean old docker images - BUG/MINOR: stream: do not call co_data() from __strm_dump_to_buffer() - BUG/MINOR: mux-h1: always make sure h1s->sd exists in h1_dump_h1s_info() - MINOR: tinfo: add a new thread flag to indicate a call from a sig handler - BUG/MEDIUM: stream: never allocate connection addresses from signal handler - MINOR: freq_ctr: provide non-blocking read functions - BUG/MEDIUM: stream: use non-blocking freq_ctr calls from the stream dumper - MINOR: tools: use only opportunistic symbols resolution - CLEANUP: task: move the barrier after clearing th_ctx->current - MINOR: compression: Introduce minimum size - BUG/MINOR: h2: always trim leading and trailing LWS in header values - MINOR: tinfo: split the signal handler report flags into 3 - BUG/MEDIUM: stream: don't use localtime in dumps from a signal handler - OPTIM: connection: don't try to kill other threads' connection when !shared - BUILD: add possibility to use different QuicTLS variants - MEDIUM: fd: Wait if locked in fd_grab_tgid() and fd_take_tgid(). - MINOR: fd: Add fd_lock_tgid_cur(). - MEDIUM: epoll: Make sure we can add a new event - MINOR: pollers: Add a fixup_tgid_takeover() method. - MEDIUM: pollers: Drop fd events after a takeover to another tgid. - MEDIUM: connections: Allow taking over connections from other tgroups. - MEDIUM: servers: Add strict-maxconn. - BUG/MEDIUM: server: properly initialize PROXY v2 TLVs - BUG/MINOR: server: fix the "server-template" prefix memory leak - BUG/MINOR: h3: do not report transfer as aborted on preemptive response - CLEANUP: h3: fix documentation of h3_rcv_buf() - MINOR: hq-interop: properly handle incomplete request - BUG/MEDIUM: mux-fcgi: Try to fully fill demux buffer on receive if not empty - MINOR: h1: permit to relax the websocket checks for missing mandatory headers - BUG/MINOR: hq-interop: fix leak in case of rcv_buf early return - BUG/MINOR: server: check for either proxy-protocol v1 or v2 to send hedaer - MINOR: jws: implement a JWK public key converter - DEBUG: init: add a way to register functions for unit tests - TESTS: add a unit test runner in the Makefile - TESTS: jws: register a unittest for jwk - CI: github: run make unit-tests on the CI - TESTS: add config smoke checks in the unit tests - MINOR: jws: conversion to NIST curves name - CI: github: remove smoke tests from vtest.yml - TESTS: ist: fix wrong array size - TESTS: ist: use the exit code to return a verdict - TESTS: ist: add a ist.sh to launch in make unit-tests - CI: github: fix h2spec.config proxy names - DEBUG: init: Add a macro to register unit tests - MINOR: sample: allow custom date format in error-log-format - CLEANUP: log: removing "log-balance" references - BUG/MINOR: log: set proper smp size for balance log-hash - MINOR: log: use __send_log() with exact payload length - MEDIUM: log: postpone the decision to send or not log with empty messages - MINOR: proxy: make pr_mode enum bitfield compatible - MINOR: cfgparse-listen: add and use cfg_parse_listen_match_option() helper - MINOR: log: add options eval for log-forward - MINOR: log: detach prepare from parse message - MINOR: log: add dont-parse-log and assume-rfc6587-ntf options - BUG/MEIDUM: startup: return to initial cwd only after check_config_validity() - TESTS: change the output of run-unittests.sh - TESTS: unit-tests: store sh -x in a result file - CI: github: show results of the Unit tests - BUG/MINOR: cfgparse/peers: fix inconsistent check for missing peer server - BUG/MINOR: cfgparse/peers: properly handle ignored local peer case - BUG/MINOR: server: dont return immediately from parse_server() when skipping checks - MINOR: cfgparse/peers: provide more info when ignoring invalid "peer" or "server" lines - BUG/MINOR: stream: fix age calculation in "show sess" output - MINOR: stream/cli: rework "show sess" to better consider optional arguments - MINOR: stream/cli: make "show sess" support filtering on front/back/server - TESTS: quic: create first quic unittest - MINOR: h3/hq-interop: restore function for standalone FIN receive - MINOR/OPTIM: mux-quic: do not allocate rxbuf on standalone FIN - MINOR: mux-quic: refine reception of standalone STREAM FIN - MINOR: mux-quic: define globally stream rxbuf size - MINOR: mux-quic: define rxbuf wrapper - MINOR: mux-quic: store QCS Rx buf in a single-entry tree - MINOR: mux-quic: adjust Rx data consumption API - MINOR: mux-quic: adapt return value of qcc_decode_qcs() - MAJOR: mux-quic: support multiple QCS RX buffers - MEDIUM: mux-quic: handle too short data splitted on multiple rxbuf - MAJOR: mux-quic: increase stream flow-control for multi-buffer alloc - BUG/MINOR: cfgparse-tcp: relax namespace bind check - MINOR: startup: adjust alert messages, when capabilities are missed	2025-03-07 16:37:57 +01:00
Willy Tarreau	4ef6be4a1f	[RELEASE] Released version 3.2-dev6 ... Released version 3.2-dev6 with the following main changes : - BUG/MEDIUM: debug: close a possible race between thread dump and panic() - DEBUG: thread: report the spin lock counters as seek locks - DEBUG: thread: make lock time computation more consistent - DEBUG: thread: report the wait time buckets for lock classes - DEBUG: thread: don't keep the redundant _locked counter - DEBUG: thread: make lock_stat per operation instead of for all operations - DEBUG: thread: reduce the struct lock_stat to store only 30 buckets - MINOR: lbprm: add a new callback ->server_requeue to the lbprm - MEDIUM: server: allocate a tasklet for asyncronous requeuing - MAJOR: leastconn: postpone the server's repositioning under contention - BUG/MINOR: quic: reserve length field for long header encoding - BUG/MINOR: quic: fix CRYPTO payload size calcul for encoding - MINOR: quic: simplify length calculation for STREAM/CRYPTO frames - BUG/MINOR: mworker: section ignored in discovery after a post_section_parser - BUG/MINOR: mworker: post_section_parser for the last section in discovery - CLEANUP: mworker: "program" section does not have a post_section_parser anymore - MEDIUM: initcall: allow to register mutiple post_section_parser per section - CI: cirrus-ci: bump FreeBSD image to 14-2 - DOC: initcall: name correctly REGISTER_CONFIG_POST_SECTION() - REGTESTS: stop using truncated.vtc on freebsd - MINOR: quic: refactor STREAM encoding and splitting - MINOR: quic: refactor CRYPTO encoding and splitting - BUG/MEDIUM: fd: mark FD transferred to another process as FD_CLONED - BUG/MINOR: ssl/cli: "show ssl crt-list" lacks client-sigals - BUG/MINOR: ssl/cli: "show ssl crt-list" lacks sigals - MINOR: ssl/cli: display more filenames in 'show ssl cert' - DOC: watchdog: document the sequence of the watchdog and panic - MINOR: ssl: store the filenames resulting from a lookup in ckch_conf - MINOR: startup: allow hap_register_feature() to enable a feature in the list - MINOR: quic: support frame type as a varint - BUG/MINOR: startup: leave at first post_section_parser which fails - BUG/MINOR: startup: hap_register_feature() fix for partial feature name - BUG/MEDIUM: cli: Be sure to drop all input data in END state - BUG/MINOR: cli: Wait for the last ACK when FDs are xferred from the old worker - BUG/MEDIUM: filters: Handle filters registered on data with no payload callback - BUG/MINOR: fcgi: Don't set the status to 302 if it is already set - MINOR: ssl/crtlist: split the ckch_conf loading from the crtlist line parsing - MINOR: ssl/crtlist: handle crt_path == cc->crt in crtlist_load_crt() - MINOR: ssl/ckch: return from ckch_conf_clean() when conf is NULL - MEDIUM: ssl/crtlist: "crt" keyword in frontend - DOC: configuration: document the "crt" frontend keyword - DEV: h2: add a Lua-based HTTP/2 connection tracer - BUG/MINOR: quic: prevent crash on conn access after MUX init failure - BUG/MINOR: mux-quic: prevent crash after MUX init failure - DEV: h2: fix flags for the continuation frame - REGTESTS: Fix truncated.vtc to send 0-CRLF - BUG/MINOR: mux-h2: Properly handle full or truncated HTX messages on shut - Revert "REGTESTS: stop using truncated.vtc on freebsd" - MINOR: mux-quic: define a QCC application state member - MINOR: mux-quic/h3: emit SETTINGS via MUX tasklet handler - MINOR: mux-quic/h3: support temporary blocking on control stream sending	2025-02-19 18:39:51 +01:00
Willy Tarreau	37e84676c7	[RELEASE] Released version 3.2-dev5 ... Released version 3.2-dev5 with the following main changes : - BUG/MINOR: ssl: put ssl_sock_load_ca under SSL_NO_GENERATE_CERTIFICATES - CLEANUP: ssl: rename ssl_sock_load_ca to ssl_sock_gencert_load_ca - CLEANUP: ssl: move ssl_sock_gencert_load_ca declaration in ssl_gencert.h - CLEANUP: tree-wide: define and use acl_match_cond() helper - MINOR: epoll: permit to mask certain specific events - MINOR: proxies: Add a per-thread group field to struct proxy. - MINOR: Add fields to the per-thread group field in struct server. - MINOR: proxies/servers: Calculate queueslength and use it. - MEDIUM: servers/proxies: Switch to using per-tgroup queues. - BUG/MINOR: stream: Properly handle "on-marked-up shutdown-backup-sessions" - MEDIUM: stream: Map task wake up reasons to dedicated stream events - MEDIUM: stream: No longer use TASK_F_UEVT* to shut a stream down - BUILD: tools: fix build on BSD by dropping the ETIME check - MINOR: queues: use __ha_cpu_relax() on failed CAS. - BUILD: queues: Use unsigned int when needed - BUILD: ssl: allow to build without the renegotiation API of WolfSSL - BUILD: ssl: more cleaner approach to WolfSSL without renegotiation - BUG/MEDIUM: chunk: make sure to flush the trash pool before resizing - MINOR: quic: remove references to burst in quic-cc-algo parsing - MINOR: quic: allow BBR testing without pacing - MINOR: quic: transform pacing settings into a global option - MAJOR: quic: mark pacing as stable and enable it by default - MINOR: quic: mark BBR as stable - MINOR: quic: define quic_tune - BUILD: quic: fix overflow in global tune - DEBUG: fd: add a counter of takeovers of an FD since it was last opened - MINOR: fd: add a generation number to file descriptors - DEBUG: epoll: store and compare the FD's generation count with reported event - MEDIUM: epoll: skip reports of stale file descriptors - MINOR: mux-h1: Add masks to group H1S DEMUX and MUX errors - BUG/MINOR: mux-h1: Only report a SE error on demux error - MINOR: tevt: Add the termination events log's fundations - MINOR: tevt/stconn: Add a termination events log in the SE descriptor - MINOR: tevt/mux-h1: Report termination events for the H1C and H1S - MINOR: tevt/mux-h2: Report termination events for the H2C - MINOR: tevt/stream/stconn: Report termination events for stream and sc - MINOR: tevt/conn: Report intercepted event for L4 rules - MINOR: tevt/mux-h1/mux-h2: Add termination events log when dumping mux info - MINOR: tevt/muxes: Add CTL and SCTL command to get the termination event logs - MINOR: tevt/mux-pt: Add support for termination event logs - MINOR: tevt/connection: Add dedicated termination events for lower locations - MEDIUM: tevt/muxes: Add dedicated termination events for muxc/se locations - MINOR: tevt/stconn: Be more accurate to report shutw events - MEDIUM: tevt/stconn/stream: Add dedicated termination events for stream location - MINOR: tevt: Don't duplicate termination event during reporting - MINOR: tevt/applet: Add limited support for termination event logs for applets - MINOR: tevt: Add a sample to get termination events for all locations - MINOR: tevt: Improve function to convert a termination events log to string - REORG: tevt/connection: Move enums at the end of the header file - MINOR: tevt/dev: Add term_events tool - MINOR: tevt/connection: Add support for POLL_HUP/POLL_ERR events - MINOR: tevt/dev: Parse tuple of termination events - BUG/MEDIUM: htx: wrong count computation in htx_xfer_blks() - DOC: htx: clarify <mark> parameter for htx_xfer_blks() - BUILD: quic: remove GCC undefined error in qc_release_lost_pkts() - MEDIUM: htx: prevent <mark> to copy incomplete headers in htx_xfer_blks() - BUG/MEDIUM: mux-fcgi: Properly handle read0 on partial records - BUG/MINOR: tevt/http-ana: Remove badly placed event reports - DEBUG: http-ana: Remove debug counters from HTTP analyzers - DEBUG: mux-h1: Remove some debug counters - BUG/MINOR: tcp-rules: Don't forward close during tcp-response content rules eval - MEDIUM: stream: interrupt costly rulesets after too many evaluations - BUG/MINOR: http-check: Don't pretend a C-L heeader is set before adding it - BUILD: ssl: remove a boringssl definition defined by recent boringssl libs - BUG/MINOR: tevt/mux-h2: Set truncated receive/eos events at SE level on error - BUG/MEDIUM: flt-spoe: Set/test applet flags instead of SE flags from I/O handler - BUG/MEDIUM: applet: Don't pretend to have more data to handle EOI/EOS/ERROR - BUG/MEDIUM: flt-spoe: Properly handle end of stream from the SPOE applet - MINOR: flt-spoe: Report end of input immediately after applet init - MINOR: mux-spop: Report EOI on the SE when a ACK is received for a stream - MINOR: mux-spop: Set SPOP_CF_ERROR flag on connection error only - MINOR: tevt/mux-spop: Report termination events for the SPOP connect/stream - CLEANUP: mux-spop: Remove useless comments - MINOR: mux-spop: Dump info about connections and streams in dedicated functions - MINOR: mux-spop: Implement .show_sd callback function - MEDIUM: mux-fcgi: Add a function to propagate termination flags from fstrm to SE - BUG/MEDIUM: mux-fcgi: Propagate flags to SE in fcgi_strm_wake_one_stream - MINOR: tevt/mux-fcgi: Report termination events for the FCGI connect/stream - MINOR: mux-fcgi: Dump info about connections and streams in dedicated functions - MINOR: mux-spop/mux-fcgi: Add support of the debug string for logs - BUG/MINOR: cli: Don't set SE flags from the cli applet - BUG/MINOR: cli: Fix memory leak on error for _getsocks command - BUG/MINOR: cli: Fix a possible infinite loop in _getsocks() - BUG/MINOR: config/userlist: Support one 'users' option for 'group' directive - BUG/MINOR: auth: Fix a leak on error path when parsing user's groups - BUG/MINOR: flt-trace: Support only one name option - MINOR: filters: Improve errors formating during filters parsing - BUG/MINOR: stats-json: Define JSON_INT_MAX as a signed integer - DOC: option redispatch should mention persist options - BUG/MINOR: debug: make "debug dev sched" accept a negative TID - BUG/MINOR: debug: make sure the "debug dev sched" tasks don't block stopping - IMPORT: plock: export the uninlined version of the lock wait function - IMPORT: plock: give higher precedence to W than S - IMPORT: plock: lower the slope of the exponential back-off - IMPORT: plock: use cpu_relax() for a shorter time in EBO - Revert "IMPORT: plock: export the uninlined version of the lock wait function" - BUG/MEDIUM: ssl: chosing correct certificate using RSA-PSS with TLSv1.3	2025-02-08 05:53:40 +01:00
Willy Tarreau	670182bc9e	[RELEASE] Released version 3.2-dev4 ... Released version 3.2-dev4 with the following main changes : - BUG/MINOR: stktable: fix big-endian compatiblity in smp_to_stkey() - MINOR: stktable: add stkey_to_smp() helper - MINOR: stktable: add stksess_getkey() helper - MINOR: stktable: add sc[0-2]_key fetches - BUG/MEDIUM: queues: Adjust the proxy counters when appropriate - MINOR: trace: add help message for -dt argument - MINOR: trace: ensure -dt priority over traces config section - MINOR: trace: support all source alias on -dt - BUG/MINOR: quic: reject NEW_TOKEN frames from clients - MINOR: stktable: fix potential build issue in smp_to_stkey - BUG/MEDIUM: stktable: fix missing lock on some table converters - BUG/MEDIUM: promex: Use right context pointers to dump backends extra-counters - MINOR: stktable: fix potential build issue in smp_to_stkey (2nd try) - MINOR: stktable: add smp_fetch_stksess() helper function - MEDIUM: stktable: split src-based key smp_fetch_sc functions - MEDIUM: stktable: split sc_ and src_ fetch lookup logics - MEDIUM: stktable: leverage smp_fetch_* helpers from sample conv - DOC: config: unify sample conv|fetches optional arguments syntax - DOC: config: stick-table converters support implicit <table> argument - DOC: config: stick-table converter do accept ANY-typed input - DOC: config: clarify return type for some stick-table converters - DOC: config: refer to canonical sticktable converters for src_* fetches - CLEANUP: stktable: move sample_conv_table_bytes_out_rate() - MINOR: stktable: add table_{inc,clr}_gpc* converters - BUG/MAJOR: quic: reject too large CRYPTO frames - BUG/MAJOR: log/sink: possible sink collision in sink_new_from_srv() - BUG/MINOR: init: set HAPROXY_STARTUP_VERSION from the variable, not the macro - REORG: version: move the remaining BUILD_* stuff from haproxy.c to version.c - BUG/MINOR: quic: ensure a detached coalesced packet can't access its neighbours - MINOR: quic: Add a BUG_ON() on quic_tx_packet refcount - BUILD: quic: Move an ASSUME_NONNULL() for variable which is not null - BUG/MEDIUM: mux-h1: Properly close H1C if an error is reported before sending data - CLEANUP: quic: remove unused prototype - MINOR: quic: rename pacing_rate cb to pacing_inter - BUG/MINOR: quic: do not increase congestion window if app limited - MINOR: mux-quic: increment pacing retry counter on expired - MEDIUM: quic: implement credit based pacing - MEDIUM: mux-quic: reduce pacing CPU usage with passive wait - MEDIUM: quic: use dynamic credit for pacing - MINOR: quic: remove unused pacing burst in bind_conf/quic_cc_path - MINOR: quic: adapt credit based pacing to BBR - MINOR: tools: add errname to print errno macro name - MINOR: debug: debug_parse_cli_show_dev: use errname - MINOR: debug: show boot and runtime process settings in table	2025-01-24 11:01:06 +01:00
Willy Tarreau	7be596b35c	[RELEASE] Released version 3.2-dev3 ... Released version 3.2-dev3 with the following main changes : - DOC: config: add missing "track-sc0" in action keywords matrix - BUG/MINOR: stktable: invalid use of stkctr_set_entry() with mixed table types - BUG/MAJOR: mux-quic: fix BUG_ON on empty STREAM emission - BUG/MEDIUM: mux-h2: Count copied data when looping on RX bufs in h2_rcv_buf() - Revert "BUG/MAJOR: mux-quic: fix BUG_ON on empty STREAM emission" - BUG/MAJOR: mux-quic: properly fix BUG_ON on empty STREAM emission - MINOR: mux-quic: add traces on sd attach - BUG/MEDIUM: mux-quic: do not attach on already closed stream - BUG/MINOR: compression: handle a possible strdup() failure - BUG/MINOR: pool: handle a possible strdup() failure - BUG/MINOR: cfgparse-tcp: handle a possible strdup() failure - BUG/MINOR: log: Allow to use if/unless conditionnals for do-log action - MINOR: config: Alert about extra arguments for errorfile and errorloc - BUG/MINOR: mux-quic: fix wakeup on qcc_set_error() - MINOR: mux-quic: change return value of qcs_attach_sc() - BUG/MINOR: mux-quic: handle closure of uni-stream - BUG/MEDIUM: promex/resolvers: Don't dump metrics if no nameserver is defined - BUG/MAJOR: ssl/ocsp: fix NULL conn object dereferencing to access QUIC TLS counters - MEDIUM: errors: get rid of shm_open() - BUILD: makefile: do not clean standalone binaries on a simple "make clean" - BUILD: makefile: add a qinfo macro to pass info in quiet mode - DEV: ncpu: add a simple utility to help with NUMA development - DEV: ncpu: implement a wrapper mode - DEV: ncpu: make the wrapper work both as a lib and executable - BUG/MEDIUM: h1-htx: Properly handle bodyless messages - MINOR: tools: add a few functions to simply check for a file's existence	2025-01-09 09:21:04 +01:00
Willy Tarreau	e148dfd35d	[RELEASE] Released version 3.2-dev2 ... Released version 3.2-dev2 with the following main changes : - MINOR: build: define DEBUG_STRESS - MINOR: applet: define applet_putchk_stress() alternative - MINOR: stats: use stress mode to force reentrant dumps - CI: scripts: add support for AWS-LC-FIPS in build-ssl.sh - MINOR: ssl: add "FIPS" details in haproxy -vv - MEDIUM: ssl: rename 'OpenSSL' by 'SSL library' in haproxy -vv - CI: github: let's add an AWS-LC-FIPS job - MINOR: window_filter: rely on the time to update the filter samples (QUIC/BBR) - BUG/MINOR: quic: wrong logical statement in in_recovery_period() (BBR) - BUG/MINOR: quic: fix BBB max bandwidth oscillation issue. - BUG/MINOR: quic: wrong bbr_target_inflight() implementation - BUG/MINOR: quic: remove max_bw filter from delivery rate sampling - BUG/MINOR: quic: underflow issue for bbr_inflight_hi_from_lost_packet() - BUG/MINOR: quic: reduce packet losses at least during ProbeBW_CRUISE (BBR) - MINOR: quic: reduce the private data size of QUIC cc algos - CLEANUP: quic: remove a wrong comment about ->app_limited (drs) - BUG/MINOR: quic: fix the wrong tracked recovery start time value - BUG/MINOR: quic: too permissive exit condition for high loss detection in Startup (BBR) - BUG/MINOR: cli: cli_snd_buf: preserve \r\n for payload lines - REGTESTS: ssl: add a PEM with mix of LF and CRLF line endings - BUG/MINOR: quic: missing Startup accelerating probing bw states - CLEANUP: quic: Rename some BBR functions in relation with bw probing - REORG: startup: move global.maxconn calculations in limits.c - REORG: startup: move code that applies limits to limits.c - REORG: startup: move nofile limit checks in limits.c - MINOR: ssl: add utils functions to extract X509 notAfter date - MINOR: ssl/cli: allow to filter expired certificates with 'show ssl sni' - MINOR: ssl/cli: add -A to the 'show ssl sni' command description - BUG/MINOR: ssl/cli: 'show ssl cert' escape the first '*' of a filename - BUG/MINOR: ssl/cli: 'show ssl crl-file' escape the first '*' of a filename - BUG/MINOR: ssl/cli: 'show ssl ca-file' escape the first '*' of a filename - BUG/MEDIUM: stconn: Only consider I/O timers to update stream's expiration date - BUG/MEDIUM: queues: Make sure we call process_srv_queue() when leaving - BUG/MEDIUM: queues: Do not use pendconn_grab_from_px(). - CLEANUP: queues: Remove pendconn_grab_from_px(). - BUILD: debug: only dump/reset glitch counters when really defined - MINOR: compiler: add a __has_builtin() macro to detect features more easily - MINOR: compiler: rely on builtin detection for __builtin_unreachable() - MINOR: compiler: add a new "ASSUME" macro to help the compiler - MINOR: compiler: also enable __builtin_assume() for ASSUME() - MINOR: compiler: add ASSUME_NONNULL() to tell the compiler a pointer is valid - MINOR: bug: make BUG_ON() fall back to ASSUME - CLEANUP: cache: use ASSUME_NONNULL() instead of DISGUISE() - CLEANUP: hlua: use ASSUME_NONNULL() instead of ALREADY_CHECKED() - CLEANUP: htx: use ASSUME_NONNULL() to mark the start line as non-null - CLEANUP: mux-fcgi: use ASSUME_NONNULL() to indicate that the first block exists - CLEANUP: stats: use ASSUME_NONNULL() to indicate that the first block exists - CLEANUP: quic: replace ALREADY_CHECKED() with ASSUME_NONNULL() at a few places - CLEANUP: ssl-sock: drop two now unneeded ALREADY_CHECKED() - BUG/MEDIUM: mux-quic: do not mix qcc_io_send() return codes with pacing - CLEANUP: mux-quic: remove unused qcc member send_retry_list - MINOR: quic: add traces - MINOR: mux-quic: refactor wait-for-handshake support - MEDIUM/OPTIM: mux-quic: define a recv_list for demux resumption - MEDIUM/OPTIM: mux-quic: implement purg_list - MINOR: mux-quic: extract code to build STREAM frames list - MINOR: mux-quic: split STREAM and RS/SS emission - MEDIUM/OPTIM: mux-quic: do not rebuild frms list on every send - MEDIUM: mux-quic: remove pacing specific code on qcc_io_cb - MINOR: trace: implement tracing disabling API - MINOR: mux-quic: hide traces when woken up on pacing only - MINOR: ssl/cli: add a 'Uncommitted' status for 'show ssl' commands - MINOR: ssl/ocsp: Add extra details in error logs when possible - BUILD: ssl/ocsp: error: ‘%.*s’ directive argument is null - MEDIUM: ssl/ocsp: OCSP response is expired with OCSP_MAX_RESPONSE_TIME_SKEW - MINOR: ssl: improve HAVE_SSL_OCSP ifdef - DOC: config: add example for server "track" keyword - DOC: config: reorder "tune.lua.*" keywords by alphabetical order - DOC: config: add "tune.lua.burst-timeout" to the list of global parameters - MINOR: hlua: add option to preserve bool type from smp to lua - REGTESTS: fix lua-based regtests using tune.lua.smp-preserve-bool - BUG/MEDIUM: mux-quic: prevent BUG_ON() by refreshing frms on MAX_DATA - CLEANUP: mux-quic: remove dead err label in qcc_build_frms() - BUG/MINOR: h2/rhttp: fix HTTP2 conn counters on reverse - MINOR: hlua: rename "tune.lua.preserve-smp-bool" to "tune.lua.bool-sample-conversion" - MINOR: ssl: change visibility of ssl_stats_module - MINOR: ssl: rework the error management in the OCSP callback - MEDIUM: ssl/ocsp: counters for OCSP stapling - CI: limit aws-lc and libressl Quic Interop to "haproxy" only - BUG/MEDIUM: queue: Make process_srv_queue return the number of streams - CI: github: try to build the latest WolfSSL master weekly - CI: github: activate ASAN on the WolfSSL weekly job - BUG/MINOR: stats: fix segfault caused by uninitialized value in "show schema json" - MINOR: stktable: add stktable_get_data_type_idx() helper function - MINOR: stktable: support optional index for array types in {set, clear, show} table commands - CI: scripts: allow to build wolfssl with --enable-debug - CI: github: activate debug in wolfssl weekly build - BUG/MEDIUM: queues: Stricly respect maxconn for outgoing connections - MEDIUM: queue: Handle the race condition between queue and dequeue differently - CLEANUP: Remove pendconn_must_try_again(). - BUILD: compat: add missing fcntl.h before defining F_SETPIPE_SZ - BUILD: mworker: always initialize the saveptr of strtok_r() - BUILD: limits: make normalize_rlim() take an rlim_t to fix build on m68k - BUG/MINOR: checks: handle a possible strdup() failure - BUG/MINOR: listener: handle a possible strdup() failure - BUG/MINOR: mux_h1: handle a possible strdup() failure - BUG/MINOR: debug: handle a possible strdup() failure	2024-12-25 15:17:01 +01:00
Willy Tarreau	f36ac42274	[RELEASE] Released version 3.2-dev1 ... Released version 3.2-dev1 with the following main changes : - MINOR: pattern: split pat_ref_set() - MINOR: pattern: add pat_ref_gen_set() function - MINOR: pattern: add pat_ref_gen_find_elt() function - MINOR: pattern: add pat_ref_gen_delete() function - MEDIUM: pattern: consider gen_id in pat_ref_set_from_node() - MEDIUM: pattern: always consider gen_id for pat_ref lookup operations - MINOR: version: this is development again (3.2) - DEV: patchbot: prepare for new version 3.2-dev - BUG/MEDIUM: sock: Remove FD_POLL_HUP during connect() if FD_POLL_ERR is not set - MINOR: proxy: Add support of 421-Misdirected-Request in retry-on status - BUG/MINOR: log: fix lf_text() behavior with empty string - MINOR: log: always consider "+M" option in lf_text_len() - BUG/MINOR: improve BBR throughput on very fast links - MINOR: event_hdl: add PAT_REF events - MINOR: pattern: publish event_hdl events on pat_ref updates - MINOR: hlua: add patref class - MINOR: hlua: add core.get_patref method - MINOR: hlua_fcn: implement index and pair metamethods for patref class - MINOR: hlua_fcn: wrap pat_ref struct for patref class - MINOR: pattern: add pat_ref_may_commit() helper function - MINOR: hlua_fcn: add Patref:commit() method - MINOR: hlua_fcn: add Patref:prepare() method - MINOR: hlua_fcn: add Patref:purge() method - MINOR: hlua_fcn: add Patref:giveup() - MINOR: hlua_fcn: add Patref:add() - MINOR: hlua_fcn: add Patref:del() - MINOR: hlua_fcn: add Patref:set() - MINOR: hlua_fcn: add Patref:add_bulk() - MINOR: hlua_fcn: add Patref:event_sub() - DOC: lua: prefer Patref:{set,add}() over legacy methods for acl and maps - BUG/MINOR: hlua_fcn: fix Patref:set() force parameter - BUG/MEDIUM: event_hdl: fix uninitialized value in async mode when no data is provided - BUG/MEDIUM: quic: prevent stream freeze on pacing - BUG/MEDIUM: http-ana: Reset request flag about data sent to perform a L7 retry - BUG/MINOR: h1-htx: Use default reason if not set when formatting the response - BUILD: quic: fix a build error about an non initialized timestamp - CI: github: allow coredumps on aws-lc and wolfssl jobs - BUG/MINOR: listener: fix potential null pointer dereference in listener_release() - MINOR: hlua: fix ambiguous hlua usage in hlua_filter_delete() - BUG/MINOR: signal: register default handler for SIGINT in signal_init() - BUG/MINOR: startup: close pidfd and free global.pidfile in handle_pidfile() - BUG/MINOR: startup: fix pidfile creation - MINOR: tools: add a new macro DEFVAL() to provide a default argument - MINOR: tasklet: set TASK_WOKEN_OTHER on tasklets by default - BUG/MINOR: quic: fix bbr_inflight() calls with wrong gain value - BUG/MEDIUM: init: make sure only daemonized processes change their session - BUG/MINOR: init: do not call fork_poller() for non-forked processes - BUG/MEDIUM: mux-quic: remove pacing status when everything is sent - BUG/MINOR: quic: remove startup alert if conn socket-owner unsupported - BUG/MINOR: quic: remove startup alert if GSO unsupported - MINOR: stktable: implement "recv-only" table option - CLEANUP: stktable: replace nopurge attribute with flag - CLEANUP: stktable: add some stktable flags polishing - BUG/MEDIUM: mux-h2: make sure not to touch dummy streams when sending WU - MINOR: mux-quic: clean up zero-copy done_ff callback - BUG/MINOR: config: Fix parsing of accept-invalid-http-{request,response} - BUG/MINOR: mworker: don't save program PIDs in oldpids - BUG/MINOR: mworker: fix -D -W -sf/-st modes - BUG/MINOR: startup: fix error path for master, if can't open pidfile - CLEANUP: startup: make if condition to kill old pids more readable - DOC: config: fix confusing init-state examples - MINOR: mux-h1: use explicit __objt_server on idle conn reinsert - MINOR: mux-h2: use explicit __objt_server on idle conn reinsert - MINOR: mux-spop: use explicit __objt_server on idle conn reinsert - MINOR: mux-fcgi: use explicit __objt_server on idle conn reinsert - MINOR: quic: convert startup check in a freestanding function - MINOR: quic: split startup check function - MINOR: quic: implement build options report - BUG/MINOR: debug: COUNT_IF() should return true/false - MINOR: mux-h2/traces: add a missing trace on negative initial window size - CLEANUP: mux-h2/traces: reword certain ambiguous traces - MINOR: mux-h2/glitches: add a description to the H2 glitches - BUG/MINOR: mux-h2: fix expression when detecting excess of CONTINUATION frames - BUILD: debug: fix build issues in COUNT_IF() with -Wunused-value - MINOR: tools: make fddebug() automatically emit the location - MINOR: ssl: add notBefore and notAfter utility functions - MEDIUM: ssl/cli: "show ssl sni" list the loaded SNI in frontends - BUG/MEDIUM: startup: don't daemonize if started with -c - BUG/MEDIUM: startup: report status if daemonized process fails - BUG/MEDIUM: mworker: report status, if daemonized master fails - BUG/MINOR: mworker: detach from tty when received READY from worker - BUG/MINOR: namespace: handle a possible strdup() failure - BUG/MINOR: ssl_crtlist: handle a possible strdup() failure - BUG/MINOR: resolvers: handle a possible strdup() failure - CI: use "/tmp" as default value for TMPDIR when searching logs - DOC: management: fix typos and paragraph ordering in 'show ssl sni' - CLEANUP: ssl: fix comment in 'show ssl sni' - MINOR: ssl/cli: add negative filters to "show ssl sni" - BUG/MINOR: stats: decrement srv refcount on stats-file release - MINOR: list: define a watcher type - BUG/MEDIUM: stats/server: use watcher to track server during stats dump - MINOR: server: remove prev_deleted server list - BUG/MINOR: http-fetch: Ignore empty argument string for query() - BUG/MINOR: server-state: Fix expiration date of srvrq_check tasks - BUG/MINOR: hlua_fcn: restore server pairs iterator pointer consistency	2024-12-11 14:17:46 +01:00
Willy Tarreau	4d58f521ee	[RELEASE] Released version 3.2-dev0 ... Released version 3.2-dev0 with the following main changes : - exact copy of 3.1.0	2024-11-26 15:33:57 +01:00
Willy Tarreau	f2b97918e8	[RELEASE] Released version 3.1.0 ... Released version 3.1.0 with the following main changes : - BUG/MAJOR: mux-h1: Properly handle wrapping on obuf when dumping the first-line - BUILD: activity/memprofile: fix a build warning in the posix_memalign handler - BUG/MINOR: quic: Avoid BUG_ON() on ->on_pkt_lost() BBR callback call - CI: update to the latest AWS-LC version - CI: update to the latest WolfSSL version - DOC: ot: mention planned deprecation of the OT filter - Revert "CI: update to the latest WolfSSL version" - CI: github: add a WolfSSL job which tries the latest version - BUILD: systemd: fix usage of reserved name "sun" in the address field - BUILD: init: use the more portable FD_CLOEXEC for /dev/null - CI: github: improve the Wolfssl job - CI: github: improve the AWS-LC job - BUG/MINOR: mux-quic: fix show quic report of QCS prepared bytes - BUG/MEDIUM: quic: fix sending performance due to qc_prep_pkts() return - MINOR: mux-quic: use sched call time for pacing - CI: github: allow to run the Illumos job manually - BUILD: tcp_sample: var_fc_counter defined but not used - CI: github: add 'workflow_dispatch' on remaining build jobs - DOC: config: refine a little bit the text on QUIC pacing - MINOR: proto_sockpair: send_fd_uxst: init iobuf, cmsghdr, cmsgbuf to zeros - MINOR: startup: rename on_new_child_failure to mworker_on_new_child_failure - REORG: startup: move on_new_child_failure in mworker.c - MINOR: startup: prefix prepare_master and run_master with mworker_* - REORG: startup: move mworker_prepare_master in mworker.c - MINOR: startup: keep updating verbosity modes only in haproxy.c - REORG: startup: move mworker_run_master and mworker_loop in mworker.c - REORG: startup: move mworker_reexec and mworker_reload in mworker.c - MINOR: startup: prefix apply_master_worker_mode with mworker_* - REORG: startup: move mworker_apply_master_worker_mode in mworker.c - MINOR: cfgparse-quic: strengthen quic-cc-algo parsing - BUG/MAJOR: quic: fix wrong packet building due to already acked frames - DEV: lags/show-sess-to-flags: Properly handle fd state on server side - BUG/MEDIUM: http-ana: Don't release too early the L7 buffer - MINOR: quic: make bbr consider the max window size setting - DOC: quic: Amend the pacing information about BBR. - BUG/MEDIUM: quic: prevent EMSGSIZE with GSO for larger bufsize - MINOR: cli: Add a "help" keyword to show sess - MINOR: cli/quic: Add a "help" keyword to show quic - DOC: management: mention "show sess help" and "show quic help" - DOC: install: update the list of supported versions - MINOR: version: mention that 3.1 is stable now	2024-11-26 15:24:10 +01:00
Willy Tarreau	c5d0342fa2	[RELEASE] Released version 3.1-dev14 ... Released version 3.1-dev14 with the following main changes : - MINOR: acl: export find_acl_default() - MINOR: sample: extend the "when" converter to support an ACL - MINOR: cfgparse: parse tune.{rcvbuf,sndbuf}.{client,server} as sizes - MINOR: cfgparse: parse tune.{rcvbuf,sndbuf}.{frontend,backend} as sizes - MINOR: cfgparse: parse tune.pipesize as a size - MINOR: cfgparse: parse tune.recv_enough as a size - MINOR: cfgparse: parse tune.bufsize as a size - MINOR: cfgparse: parse tune.bufsize.small as a size - REGTESTS: silence the "log format ignored" warnings - REGTESTS: silence warning "previous 'http-response' action is final" - REGTESTS: make the unit explicit for very short timeouts - REGTESTS: silence warnings about content-type being ignored - REGTESTS: remove a duplicate "option httpslog" in the defaults section - REGTESTS: silence warning "L6 sample fetches ignored" in cond_set_var - REGTESTS: add missing timeouts to 30 tests - REGTESTS: only use tune.ssl.default-dh-param when not using AWS-LC - REGTESTS: enable -dW on almost all tests to fail on warnings - MEDIUM: config: warn on unitless timeouts < 100 ms - MINOR: tools: make parse_size_err() support 32/64 bits - MINOR: ring: support unit suffixes in the size - MINOR: cfgparse-global: parse options to allow non std keywords in discovery mode - BUG/MINOR: mworker-prog: don't warn about deprecated section with expose-deprecated-directives - MINOR: cli: make "show env" accessible via master CLI without enabling debug - MINOR: config: show HAPROXY_BRANCH in "show env" output - MINOR: http-ana: Add option to keep query-string on a localtion-based redirect - MINOR: http-ana: Add support for "set-cookie-fmt" option to redirect rules - MINOR: agent-check: Be able to set absolute weight via an agent - MINOR: stream: Add an option to "show sess" command to dump the captured URI - DOC: config: A a space before ':' for {bs,fs}.aborted and {bs,fs}.rst_code - DOC: config: Fix a typo in "1.3.1. The Request line" - MINOR: http: Add support for HTTP 414/431 status codes - DEV: phash: Update 414 and 431 status codes to phash - MINIR: mux-h1: Return 414 or 431 when appropriate - BUG/MINOR: http_ana: Report -1 for %Tr for invalid response only - DOC: config: Slightly improve the %Tr documentation - DOC: config: Move wait_end in section about internal samples - DOC: config: Move fs.* and bs.* in section about L5 samples - MINOR: stats-file: add the filename in the warning - MEDIUM: stats-file: explicitely ignore comments starting by // - DOC: quic: rename max-window-size as with default prefix - MINOR: mux-quic: add missing values for show flags - MINOR: quic: simplify qc_prep_pkts() exit path - MINOR: quic: support a max number of built packet per send iteration - MINOR: quic: extend qc_send_mux() return type with a dedicated enum - MINOR: quic: define quic_pacing module - MINOR: quic/pacing: implement quic_pacer engine - MINOR: quic/pacing: support pacing emission on quic_conn layer - MINOR: quic/pacing: add burst support - MINOR: mux-quic: define a tx STREAM frame list member - MINOR: mux-quic: encapsulate QCC tasklet wakeup - MAJOR: mux-quic: support pacing emission - MINOR: quic: use dynamic cc_algo on bind_conf - MINOR: quic: extend quic-cc-algo optional parameters - MEDIUM: quic: define cubic-pacing congestion algorithm - MINOR: mux_quic/pacing: display pacing info on show quic - MEDIUM: stats-file: silently ignore be/fe mistmatch - REGTESTS: use -dW by default on every reg-tests - DOC: lua: fix yield-dependent methods expected contexts - DOC: sched: add missing scheduler API documentation for tasklet_wakeup_after() - DOC: sched: document the missing TASK_F_UEVT* flags - CLEANUP: tinfo: move sched_*_date/*_mono_time to the thread-local area - MINOR: stream: don't update s->lat_time when the wakeup date is not set - MINOR: tinfo/clock: turn sched_call_date to 64-bits - MINOR: sched: add TASK_F_WANTS_TIME to make the scheduler update the call date - MINOR: tools: add new macro DEFZERO to provide a default zero argument - MINOR: tasklet: make the low-level tasklet API take a flag - MINOR: tasklet: support an optional set of wakeup flags to tasklet_wakeup_on() - DOC: configuration: explain the rules regarding spaces in arguments - DOC: configuration: explain quotes and spaces in conditional blocks - DOC: configuration: wrap long line for "strstr()" conditional expression - BUG/MINOR: http-ana: Adjust the server status before the L7 retries - MINOR: http-fetch: Add an option to 'query" to get the QS with the '?' - BUG/MINOR: cfgparse-quic: fix renaming of max-window-size - MEDIUM: mworker: remove USE_SYSTEMD requirement for -Ws - CI: vtest: temporarily build from the sd-notify PR - MINOR: systemd: replace SOCK_CLOEXEC by fcntl call to FD_CLOEXEC - BUILD: makefile: make ERR apply to build options as well - MINOR: startup: set HAPROXY_LOCALPEER only once - DOC: configuration: update "Environment variables" chapter - DOC: config: indent the list of environment variables - OPTION: map/hlua: make core.set_map() lookup more efficient - REGTESTS: switch to -Ws for master-worker reg-tests - REGTESTS: disable temporarly mworker test on OSX - MINOR: quic: Add the congestion window initial value to QUIC path - MINOR: window_filter: Implement windowed filter (only max) - MINOR: quic: implement delivery rate sampling algorithm - MINOR: quic: implement BBR congestion control algorithm for QUIC - MINOR: quic: quic_cc modifications to support BBR - MINOR: quic: quic_loss modifications to support BBR - MINOR: quic: RX part modifications to support BBR - MINOR: quic: TX part modifications to support BBR. - MINOR: quic: add "bbr" new "quic-cc-algo" option - BUG/MEDIUM: mux-h2: Increase max number of headers when encoding HEADERS frames - BUG/MEDIUM: mux-h2: Check the number of headers in HEADERS frame after decoding - BUG/MEDIUM: h3: Properly limit the number of headers received - BUG/MEDIUM: h3: Increase max number of headers when sending headers - DOC: config: Improve documentation of tune.http.maxhdr directive - DOC: management: Clearly state "show errors" only reports malformed H1 messages - BUILD: makefile: build flags.c before haproxy to speed up the build - BUILD: makefile: reorder object files by build time - MINOR: config: Improve warnings on misplaced rules by adding an optional arg - CLEANUP: cfgparse: Add direction in functions name that warn on misplaced rules - MINOR: cfgparse: Emit a warning for misplaced "tcp-response content" rules - BUG/MINOR: cfgparse-quic: fix bbr initialization - MINOR: cfgparse-quic: activate pacing only via burst argument - MINOR: quic: Useless rate sample member initialization - BUG/MINOR: cfgparse-quic: fix warning for cc-aglo with 0 burst - MINOR: quic: support pacing for newreno and nocc - BUG/MINOR: quic: Missing application limitations tracking for BBR - MINOR: cfgparse-global: add cfg_parse_global_chroot - MINOR: cfgparse-global: add more checks for "chroot" argument - BUG/MINOR: startup: fix UAF when set the default for log_tag - MINOR: capabilities: rename program_name argument to progname - MINOR: startup: use global progname variable - MINOR: cfgparse-global: add cfg_parse_global_localpeer - BUG/MINOR: config: allow to check HAPROXY_LOCALPEER in config - BUG/MINOR: startup: init_early: remove obsolete comment - BUG/MEDIUM: debug: don't set the STUCK flag from debug_handler() - BUG/MEDIUM: wdt: fix the stuck detection for warnings - BUG/MINOR: activity/memprofile: reinitialize the free calls on DSO summary - MINOR: activity/memprofile: offer a function to unregister stale info - BUG/MEDIUM: pools/memprofile: always clean stale pool info on pool_destroy() - MINOR: activity: better report nil than ffff in unknown callers - CLEANUP: activity: better use a mask to tests freeing methods - MINOR: activity/memprofile: also monitor strdup() activity - MINOR: activity/memprofile: monitor non-portable calls as well - MINOR: activity: interrupt the show profile dump more often - MINOR: tools: resolve main() only once in resolve_sym_name() - MINOR: tools: add a new function "resolve_dso_name" to find a symbol's DSO - MINOR: activity/memprofile: use resolve_dso_name() for the DSO summary - REGTESTS: relax strerror matching to avoid a failure on libmusl - REGTESTS: don't rely on the base64 utility when openssl base64 is already used	2024-11-21 23:26:41 +01:00
Willy Tarreau	9539f2b097	[RELEASE] Released version 3.1-dev13 ... Released version 3.1-dev13 with the following main changes : - MEDIUM: mworker: depreciate the 'program' section - BUILD: ot: use a cebtree instead of a list for variable names - MINOR: startup: replace HAPROXY_LOAD_SUCCESS with global load_status - BUG/MINOR: startup: set HAPROXY_CFGFILES in read_cfg - BUG/MINOR: cli: don't show sockpairs in HAPROXY_CLI and HAPROXY_MASTER_CLI - BUG/MEDIUM: stconn: Don't forward shut for SC in connecting state - BUG/MEDIUM: resolvers: Insert a non-executed resulution in front of the wait list - MINOR: debug: explicitly permit the counter condition to be empty - MINOR: debug: add a new counter type for glitches - MINOR: mux-h2: count glitches when they're reported - BUG/MINOR: deinit: release uri_auth admin rules - MINOR: uri_auth: add stats_uri_auth_free helper - MEDIUM: uri_auth: implement clean uri_auth cleaning - MINOR: mux-quic/h3: count glitches when they're reported - BUG/MEDIUM: mux-h2: Don't send RST_STREAM frame for streams with no ID - BUG/MINOR: Don't report early srv aborts on request forwarding in DONE state - MINOR: promex: Expose the global node and description in process metrics - MINOR: promex: Add global and proxies description as labels to all metrics - OPTIM: pattern: only apply LRU cache for large enough lists - BUG/MEDIUM: checks: make sure to always apply offsets to now_ms in expiration - BUG/MINOR: debug: do not set task expiration to TICK_ETERNITY - BUG/MEDIUM: mailers: make sure to always apply offsets to now_ms in expiration - BUG/MINOR: mux_quic: make sure to always apply offsets to now_ms in expiration - BUG/MINOR: peers: make sure to always apply offsets to now_ms in expiration - BUG/MEDIUM: clock: make sure now_ms cannot be TICK_ETERNITY - MINOR: debug/cli: replace "debug dev counters" with "debug counters" - DOC: config: add tune.h2.{be,fe}.rxbuf to the global keywords index - MINOR: chunk: add a BUG_ON upon the next init_trash_buffer()	2024-11-15 18:42:29 +01:00
Willy Tarreau	0434e87348	[RELEASE] Released version 3.1-dev12 ... Released version 3.1-dev12 with the following main changes : - MINOR: startup: tune.renice.{startup,runtime} allow to change priorities - BUG/MEDIUM: promex: Fix dump of extra counters - BUILD: import/mt_list: support building with TCC - BUILD: compiler: define __builtin_prefetch() for tcc - CLEANUP: quic: Remove the useless directive "tune.quic.backend.max-idle-timeou" - DOC: config: document connection error 44 (reverse connect failure) - CLEANUP: connection: properly name the CO_ER_SSL_FATAL enum entry - DEBUG: cli: support closing "hard" using close() in addition to fd_delete() - MINOR: connection: add more connection error codes to cover common errno - MINOR: rawsock: set connection error codes when returning from recv/send/splice - MINOR: connection: add new sample fetch functions fc_err_name and bc_err_name - MINOR: quic: Help diagnosing malformed probing packets - BUG/MINOR: quic: fix malformed probing packet building - MINOR: listener: Remove useless checks on the receiver protocol existence - MINOR: http-conv: Remove unreachable goto statement in sample_conv_q_preferred - MINOR: http: don't %-encode the payload when not relevant - MINOR: quic: simplify qc_parse_pkt_frms() return path - MINOR: quic: use dynamically allocated frame on parsing - MINOR: quic: extend return value of CRYPTO parsing - BUG/MINOR: quic: repeat packet parsing to deal with fragmented CRYPTO - BUG/MINOR: mworker: do 'program' postparser checks in read_cfg_in_discovery_mode - EXAMPLES: add "traces.cfg" with traces examples - BUG/MEDIUM: quic: do not consider ACK on released stream as error - CLEANUP: stats: fix misleading comment on top of stat_idx_info - MINOR: wdt: move the local timers to a struct - MINOR: debug: add a function to dump a stuck thread - DEBUG: wdt: better detect apparently locked up threads and warn about them - DEBUG: cli: make it possible for "debug dev loop" to trigger warnings - DEBUG: wdt: make the blocked traffic warning delay configurable - DEBUG: wdt: add a stats counter "BlockedTrafficWarnings" in show info - DEBUG: wdt: set the default blocked task delay to 100 ms - MINOR: debug: move the "recover now" warn message after the optional notes - MINOR: event_hdl: add event_hdl_sub_list_empty() helper func - MINOR: pattern: add _pat_ref_new() helper func - OPTIM: pattern: use malloc() to initialize new pat_ref struct - MINOR: pattern: add pat_ref_free() helper func - CLEANUP: guid: remove global tree export - BUG/MINOR: guid/server: ensure thread-safety on GUID insert/delete - DOC: management: explain the change of behavior of the program section - BUG/MEDIUM: mux-h2: try to wait for the peer to read the GOAWAY - BUG/MEDIUM: quic: prevent crash due to CRYPTO parsing error	2024-11-08 15:46:54 +01:00
Willy Tarreau	2092199353	[RELEASE] Released version 3.1-dev11 ... Released version 3.1-dev11 with the following main changes : - BUG/MINOR: httpclient: return NULL when no proxy available during httpclient_new() - BUG/MEDIUM: mworker/httpclient: initialization skipped by accident in mworker mode - BUG/MINOR: resolvers/mworker: missing default resolvers in mworker mode - MINOR: mworker/ocsp: skip ocsp-update proxy init in master - BUG/MEDIUM: stconn: Wait iobuf is empty to shut SE down during a check send - MINOR: mux-h1: Show the SD iobuf in trace messages on stream send events - MINOR: mux-h1: Add a trace on shutdown when keep-alive is not possible - BUG/MINOR: http-ana: Don't report a server abort if response payload is invalid - BUG/MEDIUM: stconn: Check FF data of SC to perform a shutdown in sc_notify() - BUG/MAJOR: filters/htx: Add a flag to state the payload is altered by a filter - REGTESTS: Never reuse server connection in http-messaging/truncated.vtc - BUG/MINOR: quic: avoid leaking post handshake frames - MINOR: quic: send new tokens (NEW_TOKEN) even for 1RTT sessions - BUG/MEDIUM: quic: avoid freezing 0RTT connections - DOC: config: fix rfc7239 forwarded typo in desc - MINOR: http_ext: implement rfc7239_{nn,np} converters - CLEANUP: http_ext: remove useless BUG_ON() in http_handle_xot_header() - BUG/MINOR: sample: free err2 in smp_resolve_args for type ARGT_REG - MINOR: arg: add an argument type for identifier - BUILD: buffers: keep b_getblk_nc() and b_peek_varint() in buf.h - CLEANUP: buffers: simplify b_get_varint() - OPTIM: buffers: avoid a useless wrapping check for ofs == 0 - MINOR: debug: make mark_tainted() return the previous value - MINOR: chunk: drop the global thread_dump_buffer - MINOR: debug: split ha_thread_dump() in two parts - MINOR: debug: slightly change the thread_dump_pointer signification - MINOR: debug: make ha_thread_dump_done() take the pointer to be used - MINOR: debug: replace ha_thread_dump() with its two components - MEDIUM: debug: on panic, make the target thread automatically allocate its buf - BUILD: mux-h2/traces: fix build on 32-bit due to size of the DATA frame - CI: prepare Coverity build for Ubuntu 24 - CI: bump development builds explicitely to Ubuntu 24.04 - CI: modernize macos builds to macos-15 - BUG/MINOR: mworker: fix mworker-max-reloads parser - MINOR: mux-quic: simplify sending of empty STREAM FIN - BUG/MINOR: mux-quic: do not close STREAM with empty FIN if no data sent - CLEANUP: debug: make the BUG_ON() macros check the condition in the outer one - MEDIUM: debug: add match counters for BUG_ON/WARN_ON/CHECK_IF - MINOR: debug: add a new debug macro COUNT_IF() - MINOR: debug: add "debug dev counters" to list code counters - BUG/MEDIUM: stats-html: Never dump more data than expected during 0-copy FF - BUG/MEDIUM: mux-h2: Remove H2S from send list if data are sent via 0-copy FF - BUG/MINOR: stconn: Pretend the SE have more data to deliver on abortonclose - CLEANUP: stream: remove outdated comments - DEBUG: stream: Add debug counters to track some client/server aborts - DEBUG: mux-h1: Add debug counters to track some errors - MINOR: mux-h1: Add support of the debug string for logs - MINOR: stream: maintain per-stream counters of the number of passes on code - MINOR: filters: add per-filter call counters - MINOR: sample: add the "when" converter to condition some expressions - BUG/MEDIUM: connection/http-reuse: fix address collision on unhandled address families - BUILD: spoe: fix build warning on older gcc around sub-struct initialization - Revert "OPTIM: mux-h2: make h2_send() report more accurate wake up conditions" - DEBUG: mux-h1: Add debug counters to track errors with in/out pending data - BUG/MINOR: mux-h1: Fix conditions on pipe in some COUNT_IF() - MINOR: activity/memprofile: show per-DSO stats - BUG/MINOR: mworker/cli: show master startup logs in recovery mode - MINOR: mworker: stop MASTER proxy listener on worker mcli sockpair - MINOR: error: simplify startup_logs_init_shm - BUG/MINOR: mworker: show worker warnings in startup logs - CLEANUP: mworker: clean mworker_reexec - MINOR: mworker/cli: split mworker_cli_proxy_create - BUG/MINOR: server: fix dynamic server leak with check on failed init - BUG/MEDIUM: server: fix race on servers_list during server deletion - BUG/MEDIUM: stconn: Report blocked send if sends are blocked by an error - BUG/MINOR: http-ana: Fix wrong client abort reports during responses forwarding - BUG/MINOR: stconn: Don't disable 0-copy FF if EOS was reported on consumer side - MINOR: mworker/cli: add 'debug' to 'show proc' - MINOR: mworker/cli: remove comment line for program when useless - MINOR: mworker/cli: 'show proc debug' for old workers - BUILD: debug: silence a build warning with threads disabled - CLEANUP: mux-h2: remove the unused "full" variable in h2_frt_transfer_data() - MINOR: pools: export the pools variable - MINOR: debug: place a magic pattern at the beginning of post_mortem - MINOR: debug: place the post_mortem struct in its own section. - MINOR: debug: store important pointers in post_mortem - MINOR: debug: do not limit backtraces to stuck threads - MINOR: cli: remove non-printable characters from 'debug dev fd' - MINOR: cli: add an 'echo' command - MINOR: debug: also add a pointer to struct global to post_mortem - CLEANUP: mworker: make mworker_create_master_cli more readable - BUG/MEIDUM: mworker: fix fd leak from master to worker - BUG/MINOR: mworker/cli: fix mworker_cli_global_proxy_new_listener - MINOR: tools: add strnlen2() helper - CLEANUP: log: use strnlen2() in _lf_text_len() to compute string length - DOC: design: add notes about more detailed error reporting for logs - MINOR: debug: also add fdtab and acitvity to struct post_mortem - MINOR: debug: remove the redundant process.thread_info array from post_mortem - DEV: gdb: add a number of gdb scripts to navigate in core dumps - BUG/MINOR: trace: stop rewriting argv with -dt - MEDIUM: protocol: make abns a custom unix socket address family - MEDIUM: protocol: rely on AF_CUST_ABNS family to recognize ABNS sockets - CLEANUP: tools: rely on address family to detect ABNS sockets - MINOR: protocol: create abnsz socket address family - MINOR: sock: restore effective UNIX family in sock_get_old_sockets() - MEDIUM: sock: also restore effective unix family in get_{src,dst}() - MEDIUM: sock_unix: use per-family addrcmp function - MEDIUM: socket: add zero-terminated ABNS alternative - BUG/MINOR: ssl/cli: 'set ssl cert' does not check the transaction name correctly - BUG/MINOR: mworker: mworker_reexec: unset MODE_STARTING before free startup logs ring - BUG/MINOR: errors: startup_logs_free: set global startup_logs ptr to NULL - BUG/MINOR: errors: print_message: don't allocate startup logs ring - BUG/MINOR: startup: don't fork worker if started with -c -W - BUG/MINOR: startup: dump libs only in worker if started with -W -dL - BUG/MINOR: startup: dump keywords only in worker if started with -W -dKAll - BUG/MINOR: startup: don't dump polling info for master in verbose mode - CI: switch QUIC Interop on AWS-LC to common docker image - CI: switch QUIC Interop on LibreSSL to common docker image - CI: enable chacha20 test on LibreSSL QUIC Interop - DOC: config: add missing glitch_{cnt,rate} data types - DOC: config: add missing glitch_{cnt,rate} sample definitions - CI: LibreSSL QUIC Interop: fix docker context - DEBUG: mux-h1: Add H1C expiration dates in trace messages - BUG/MEDIUM: mux-h1: Fix how timeouts are applied on H1 connections - BUG/MINOR: http-ana: Report internal error if an action yields on a final eval - MINOR: stream: Save last evaluated rule on invalid yield - MINOR: quic: complete trace in qc_may_build_pkt() - MINOR: quic: move qc_send_mux() prototype into quic_tx.h - MINOR: stream: Replace last_rule_file/line fields by a more generic field - MINOR: stream: Save the last filter evaluated interrupting the processing - MINOR: stream: Save the entity waiting to continue its processing - MINOR: stream: Use an enum to identify last and waiting entities for streams - MINOR: stream: Add http-buffer-request option in the waiting entities - DOC: config: Add documentation about last_entity sample fetch - DOC: config: Add documentation about waiting_entity sample fetch	2024-11-01 10:17:02 +01:00
Willy Tarreau	1fb61475f2	[RELEASE] Released version 3.1-dev10 ... Released version 3.1-dev10 with the following main changes : - BUG/MAJOR: mux-quic: do not crash on empty STREAM frame emission - BUG/MINOR: stats: Fix the name for the total number of streams created - MINOR: quic: strengthen qc_release_frm() - MEDIUM: quic: decount acknowledged data for MUX txbuf window - MINOR: quic: implement dedicated type for out-of-order stream ACK - MEDIUM: quic: merge contiguous/overlapping buffered ack stream range - MEDIUM: quic: decount out-of-order ACK data range for MUX txbuf window - MINOR: log: add do_log() logging helper - MINOR: log: add do_log_parse_act() helper func - MINOR: action: add do-log action - REGTESTS: add some tests for 'do-log' action - BUG/MEDIUM: hlua: make hlua_ctx_renew() safe - BUG/MEDIUM: hlua: properly handle sample func errors in hlua_run_sample_{fetch,conv}() - BUG/MINOR: quic: fix discarding of already stored out-of-order ACK - BUG/MEDIUM: quic: properly decount out-of-order ACK on stream release - MINOR: ssl: disable server side default CRL check with WolfSSL - MEDIUM: sink: implement sink_find_early() - MINOR: trace: postresolve sink names - MINOR: sample: postresolve sink names in debug() converter - BUG/MEDIUM: mux-quic: ensure timeout server is active for short requests - MINOR: cfgparse: simulate long configuration parsing with force-cfg-parser-pause - BUILD: cache: silence an uninitialized warning at -Og with gcc-12.2 - BUG/MINOR: mux-h2/traces: present the correct buffer for trailers errors traces - MINOR: mux-h2/traces: print the size of the DATA frames - CLEANUP: muxes: remove useless inclusion of ebmbtree.h - REORG: buffers: move some of the heavy functions from buf.h to buf.c - MINOR: buffer: add a buffer list type with functions - MINOR: mux-h2: split the amount of rx data from the amount to ack - MINOR: mux-h2: create and initialize an rx offset per stream - MEDIUM: mux-h2: start to update stream when sending WU - MEDIUM: mux-h2: start to introduce the window size in the offset calculation - MINOR: mux-h2: count within a connection, how many streams are receiving data - MINOR: mux-h2: allocate the array of shared rx bufs in the h2c - MINOR: mux-h2: add rxbuf head/tail/count management for h2s - MINOR: mux-h2: move H2_CF_WAIT_IN_LIST flag away from the demux flags - MINOR: mux-h2: simplify the exit code in h2_rcv_buf() - MINOR: mux-h2: simplify the wake up code in h2_rcv_buf() - MINOR: mux-h2: clear up H2_CF_DEM_DFULL and H2_CF_DEM_SHORT_READ ambiguity - MAJOR: mux-h2: make streams use the connection's buffers - MAJOR: mux-h2: permit a stream to allocate as many buffers as desired - MAJOR: mux-h2: make the rxbuf allocation algorithm a bit smarter - MINOR: mux-h2: add tune.h2.be.rxbuf and tune.h2.fe.rxbuf global settings - MEDIUM: mux-h2: change the default initial window to 16kB - DOC: design-thoughts: add diagrams illustrating an rx win groth - MEDIUM: mux-h2: rework h2_restart_reading() to differentiate recv and demux - OPTIM: mux-h2: make h2_send() report more accurate wake up conditions - OPTIM: mux-h2: try to continue reading after demuxing when useful - OPTIM: mux-h2: use tasklet_wakeup_after() in h2s_notify_recv() - MINOR: mux-h2/traces: add missing flags and proxy ID in traces - MINOR: mux-h2/traces: add buffer-related info to h2s and h2c - CI: cirrus-ci: bump FreeBSD image to 14-1 - REGTESTS: fix a reload race in abns_socket.vtc - MINOR: activity/memprofile: always return "other" bin on NULL return address - MINOR: quic: notify connection layer on handshake completion - BUG/MINOR: stream: unblock stream on wait-for-handshake completion - BUG/MEDIUM: quic: support wait-for-handshake - BUG/MEDIUM: server: server stuck in maintenance after FQDN change - BUG/MEDIUM: queue: make sure never to queue when there's no more served conns - DEBUG: mux-h2/flags: add H2_CF_DEM_RXBUF & H2_SF_EXPECT_RXDATA for the decoder - REGTESTS: cli: add delay 0.1 before connect to cli - MINOR: startup: add O_CLOEXEC flag to open /dev/null - MEDIUM: startup: move daemonization fork in init - MINOR: startup: refactor "daemonization" fork - MEDIUM: startup: move PID handling in init() - MAJOR: mworker: move master-worker fork in init() - BUG/MINOR: mworker: fix memory leak due to master-worker fork - REORG: mworker: set nbthread=1 for master after fork - MINOR: init: check MODE_MWORKER before creating master CLI - REORG: mworker: move mworker_create_master_cli in master 'case' - MEDIUM: startup: call chroot() if needed in one place - MEDIUM: startup: do set_identity() if needed in one place - MINOR: startup: only worker gets capabilities from bin - CLEANUP: haproxy: rm no longer used mworker_reexec_waitmode - MINOR: startup: rename exit_on_waitmode_failure to exit_on_failure - MINOR: defaults: update MASTER_MAXCONN description - MEDIUM: startup: remove MODE_MWORKER_WAIT - MINOR: global: add MODE_DISCOVERY flag - MEDIUM: cfgparse: add KWF_DISCOVERY keyword flag - MEDIUM: cfgparse: call some parsers only in MODE_DISCOVERY - MEDIUM: cfgparse-global: parse only KWF_DISCOVERY keywords in MODE_DISCOVERY - MEDIUM: cfgparse: parse only "global" section in MODE_DISCOVERY - MEDIUM: startup: introduce load_cfg and read_cfg - MINOR: cfgparse: fix *thread keywords sensitive to global section position - MINOR: mworker/cli: rename mworker_cli_proxy_new_listener - MINOR: mworker/cli: rename and clean mworker_cli_sockpair_new - MINOR: mworker/cli: create master CLI sockpair before fork - MINOR: mworker/cli: create MASTER proxy before mcli listeners - MINOR: mworker: add and set state PROC_O_INIT for new worker - MEDIUM: mworker/cli: close child and parent fds, setup listeners - MINOR: mworker: mworker_catch_sigchld: use fd_delete instead of close - MINOR: startup: rename and adapt reexec_on_failure - MINOR: mworker: add support for case when new worker dies - MINOR: mworker: simplify the code that sets PROC_O_LEAVING - MINOR: mworker/cli: add _send_status to support state transition - MEDIUM: startup: split sending oldpids_sig logic for standalone and mworker modes - MINOR: startup: split init() into separate initialization routines - MINOR: startup: split main: add step_init_3 - MINOR: startup: simplify check for calling sock_get_old_sockets - MINOR: startup: encapsulate sock_get_old_sockets in a function - MINOR: startup: add bind_listeners - MINOR: startup: split main: add step_init_4 - MINOR: startup: encapsulate master's code in run_master - MINOR: startup: add read_cfg_in_discovery_mode - MINOR: mworker: adapt exit_on_failure for master recovery mode - MEDIUM: mworker: add support of master recovery mode - MINOR: startup: add set_verbosity - MEDIUM: mworker: block reloads - MINOR: mworker: slow load status delivery if worker is starting - MINOR: mworker: readapt program support in mworker_catch_sigchld - MINOR: mworker: deserialize process list before read_cfg_in_discovery_mode - MINOR: mworker: parse program only in MODE_DISCOVERY - MINOR: cfgparse: add support for program section - MINOR: startup: reintroduce program support - MINOR: mworker-prog: stop old programs in mworker_ext_launch_all - MINOR: mworker: reintroduce systemd support - MINOR: mworker: report explicitly when worker exits due to max reloads - MINOR: cfgparse-global: parse *env keywords in MODE_DISCOVERY - MINOR: startup: reintroduce *env keywords support - MINOR: startup: close devnullfd, when daemon mode is applied	2024-10-16 22:57:52 +02:00
Willy Tarreau	7cdc9325a1	[RELEASE] Released version 3.1-dev9 ... Released version 3.1-dev9 with the following main changes : - MINOR: tools: add minimal file name management - CLEANUP: stick-table: make the file location point to a global file name - MINOR: proxy: use the global file names for conf->file - CLEANUP: cfgparse: factor proxy vs log-forward collisions - BUG/MINOR: cfgparse: detect another uncaught case of duplicate defaults - MINOR: proxy: add a list of orphaned defaults sections - MEDIUM: cfgparse: drop duplicate named defaults sections after use - OPTIM: cfgparse: speed up duplicate server detection - MEDIUM: cfgparse: warn about deprecated use of duplicate server names - BUG/MINOR: server: shut down streams under thread isolation - BUG/MINOR: proxy: also make the cli and resolvers use the global name - REGTESTS: log: fix log-profile.vtc - MEDIUM: mailers: warn about deprecated legacy mailers - BUG/MEDIUM: cli: Be sure to catch immediate client abort - DEV: flags/applet: decode appctx flags - BUG/MEDIUM: cli: Deadlock when setting frontend maxconn - MINOR: log: fix indent in strm_log() - MINOR: log: introduce extra log profile steps - MINOR: log: handle extra log origins in _process_send_log_override() - MINOR: log: introduce log_orig flags - MINOR: log: explicitly handle extra log origins as error when relevant - MINOR: log: support extra log origins for '%OG' alias - MINOR: proxy: add log_steps struct member - MINOR: log: introduce "log-steps" proxy keyword - MINOR: log: add log_orig_proxy() helper function - MEDIUM: log: consider log-steps proxy setting for existing log origins - DOC: config: document proxy "log-steps" keyword - REGTESTS: add a test for proxy "log-steps" - Revert "BUG/MINOR: server: shut down streams under thread isolation" - MINOR: task: define two new one-shot events for use with WOKEN_OTHER or MSG - BUG/MEDIUM: stream: make stream_shutdown() async-safe - BUG/MINOR: server: make sure the HMAINT state is part of MAINT - BUG/MINOR: queue: make sure that maintenance redispatches server queue - MINOR: server: make srv_shutdown_sessions() call pendconn_redistribute() - BUILD: tools: only include execinfo.h for the real backtrace() function - MINOR: tools: do not attempt to use backtrace() on linux without glibc - OPTIM: channel: speed up co_getline()'s search of the end of line - OPTIM: stconn: Don't pretend mux have more data to deliver on EOI/EOS/ERROR - BUG/MINOR: mcli: Pretend the mux have more data to deliver between two commands - MINOR: action: Export release_expr_int_action() release function - MINOR: stream: Rely on a per-stream max connection retries value - MINOR: stream: Support dynamic changes of the number of connection retries - MINOR: stream/stats: Expose the current number of streams in stats - MINOR: stream/stats: Expose the total number of streams ever created in stats - BUG/MINOR: cfgparse-global: fix allowed args number for setenv - MINOR: cfgparse-global: add dedicated parser for *env keywords - MINOR: mux-quic: complete Tx infos for QCS dump - MINOR: quic: ensure txbuf realloc is only performed on empty buffer - MINOR: mux-quic: strengthen qcs_send_metadata() usage - MINOR: quic: remove unneeded notification of txbuf room - MINOR: quic: refactor MUX send notification - MEDIUM: quic: strengthen MUX send notification - MINOR: quic: refactor STREAM room notification - MINOR: quic: do not remove qc_stream_desc automatically on ACK handling - MINOR: quic: store streambuf in a streamdesc tree - MINOR: quic: move buffered ACK to streambuf - MEDIUM: quic: handle out-of-order ACK at streamdesc layer - MEDIUM: quic: refactor buffered STREAM ACK consuming - BUG/MEDIUM: queue: always dequeue the backend when redistributing the last server - MINOR: config/trace: Add a 'traces' section to declare debug traces - MINOR: trace: Be able to chain commands for a source in one line - MINOR: tcpcheck: Add support for an option host header value for httpchk option - BUG/MINOR: mux-h1: Fix condition to set EOI on SE during zero-copy forwarding - MINOR: mux-h1: Use a dedicated function to conditionnaly set EOI flag on SE - BUG/MINOR: http-ana: Disable fast-fwd for unfinished req waiting for upgrade - BUG/MINOR: mux-quic: fix crash on qcc_init() early return - BUG/MINOR: quic: fix trace on releasing STREAM frame after ack	2024-10-03 17:47:33 +02:00
Willy Tarreau	30a0e93fe6	[RELEASE] Released version 3.1-dev8 ... Released version 3.1-dev8 with the following main changes : - DOC: configuration: place the HAPROXY_HTTP_LOG_FMT example on the correct line - MINOR: mux-h1: Set EOI on SE during demux when both side are in DONE state - BUG/MEDIUM: mux-h1/mux-h2: Reject upgrades with payload on H2 side only - REGTESTS: h1/h2: Update script testing H1/H2 protocol upgrades - BUG/MEDIUM: clock: detect and cover jumps during execution - BUG/MINOR: pattern: prevent const sample from being tampered in pat_match_beg() - BUG/MEDIUM: pattern: prevent uninitialized reads in pat_match_{str,beg} - BUG/MEDIUM: pattern: prevent UAF on reused pattern expr - MEDIUM: ssl/cli: "dump ssl cert" allow to dump a certificate in PEM format - BUG/MAJOR: mux-h1: Wake SC to perform 0-copy forwarding in CLOSING state - BUG/MINOR: h1-htx: Don't flag response as bodyless when a tunnel is established - REGTESTS: fix random failures with wrong_ip_port_logging.vtc under load - BUG/MINOR: pattern: do not leave a leading comma on "set" error messages - REGTESTS: shorten a bit the delay for the h1/h2 upgrade test - MINOR: server: allow init-state for dynamic servers - DOC: server: document what to check for when adding new server keywords - MEDIUM: h1: Accept invalid T-E values with accept-invalid-http-response option - BUG/MINOR: polling: fix time reporting when using busy polling - BUG/MINOR: clock: make time jump corrections a bit more accurate - BUG/MINOR: clock: validate that now_offset still applies to the current date - BUG/MEDIUM: queue: implement a flag to check for the dequeuing - OPTIM: sample: don't check casts for samples of same type - OPTIM: vars: remove the unneeded lock in vars_prune_* - OPTIM: vars: inline vars_prune() to avoid many calls - MINOR: vars: remove the emptiness tests in callers before pruning - IMPORT: import cebtree (compact elastic binary trees) - OPTIM: vars: use a cebtree instead of a list for variable names - OPTIM: vars: use multiple name heads in the vars struct - BUG/MINOR: peers: local entries updates may not be advertised after resync - DOC: config: Explicitly list relaxing rules for accept-invalid-http-* options - MINOR: proxy: Rename accept-invalid-http-* options - DOC: configuration: Remove dangerous directives from the proxy matrix - BUG/MEDIUM: sc_strm/applet: Wake applet after a successfull synchronous send - BUG/MEDIUM: cache/stats: Wait to have the request before sending the response - BUG/MEDIUM: promex: Wait to have the request before sending the response - MINOR: clock: test all clock_gettime() return values - MEDIUM: clock: collect the monotonic time in clock_local_update_date() - MEDIUM: clock: opportunistically use CLOCK_MONOTONIC for the internal time - MEDIUM: clock: use the monotonic clock for idle time calculation - MEDIUM: clock: don't compute before_poll when using monotonic clock - BUG/MINOR: fix missing "log-format overrides previous 'option tcplog clf'..." detection - BUG/MINOR: fix missing "'option httpslog' overrides previous 'option tcplog clf'..." detection - BUG/MINOR: cfgparse-listen: fix option httpslog override warning message - BUG/MINOR: cfgparse: detect incorrect overlap of same backend names - MEDIUM: cfgparse: warn about proxies having the same names - DOC: management: add init-state to add server keywords - BUG/MINOR: mux-quic: report glitches to session - BUILD: cebtree: silence a bogus gcc warning on impossible code paths - MEDIUM: cfgparse: warn about colliding names between defaults and proxies - MEDIUM: cfgparse: detect collisions between defaults and log-forward	2024-09-18 22:29:08 +02:00
Willy Tarreau	a2aea9f573	[RELEASE] Released version 3.1-dev7 ... Released version 3.1-dev7 with the following main changes : - MINOR: config: Created env variables for http and tcp clf formats - MINOR: mux-quic: add buf_in_flight to QCC debug infos - MINOR: mux-quic: correct qcc_bufwnd_full() documentation - MINOR: tools: add helpers to backup/clean/restore env - MINOR: mworker: restore initial env before wait mode - BUG/MINOR: haproxy: free init_env in deinit only if allocated - BUILD: tools: environ is not defined in OS X and BSD - DEV: coccinelle: add a test to detect unchecked malloc() - DEV: coccinelle: add a test to detect unchecked calloc() - CI: QUIC Interop AWS-LC: enable ngtcp2 client - CI: fix missing comma introduced in 956839c0f68a7722acc586ecd91ffefad2ccb303 - CI: QUIC Interop: do not run bandwidth measurement tests - CI: QUIC Interop: use different artifact names for uploading logs - BUILD: quic: 32bits build broken by wrong integer conversions for printf() - CLEANUP: ssl: cleanup the clienthello capture - MEDIUM: ssl: capture the supported_versions extension from Client Hello - MEDIUM: ssl/sample: add ssl_fc_supported_versions_bin sample fetch - MEDIUM: ssl: capture the signature_algorithms extension from Client Hello - MEDIUM: ssl/sample: add ssl_fc_sigalgs_bin sample fetch - MINOR: proxy: Add support of 429-Too-Many-Requests in retry-on status - BUG/MEDIUM: mux-h2: Set ES flag when necessary on 0-copy data forwarding - BUG/MEDIUM: stream: Prevent mux upgrades if client connection is no longer ready - BUG/MINIR: proxy: Match on 429 status when trying to perform a L7 retry - CLEANUP: haproxy: fix typos in code comment - CLEANUP: mqtt: fix typo in MQTT_REMAINING_LENGHT_MAX_SIZE - MINOR: tools: Implement ipaddrcpy(). - MINOR: quic: Implement quic_tls_derive_token_secret(). - MINOR: quic: Token for future connections implementation. - BUG/MINOR: quic: Missing incrementation in NEW_TOKEN frame builder - MINOR: quic: Modify NEW_TOKEN frame structure (qf_new_token struct) - MINOR: quic: Implement qc_ssl_eary_data_accepted(). - MINOR: quic: Add trace for QUIC_EV_CONN_IO_CB event. - BUG/MEDIUM: quic: always validate sender address on 0-RTT - BUILD: quic: fix build errors on FreeBSD since recent GSO changes - MINOR: tools: extend str2sa_range to add an alt parameter - MINOR: server: add a alt_proto field for server - MEDIUM: sock: use protocol when creating socket - MEDIUM: protocol: add MPTCP per address support - BUG/MINOR: quic: Crash from trace dumping SSL eary data status (AWS-LC) - MEDIUM: stick-table: Add support of a factor for IN/OUT bytes rates - MEDIUM: bwlim: Use a read-lock on the sticky session to apply a shared limit - BUG/MEDIUM: mux-pt: Never fully close the connection on shutdown - BUG/MEDIUM: cli: Always release back endpoint between two commands on the mcli - BUG/MINOR: quic: unexploited retransmission cases for Initial pktns. - BUG/MEDIUM: mux-h1: Properly handle empty message when an error is triggered - MINOR: mux-h2: try to clear DEM_MROOM and MUX_MFULL at more places - BUG/MAJOR: mux-h2: always clear MUX_MFULL and DEM_MROOM when clearing the mbuf - BUG/MINOR: mux-spop: always clear MUX_MFULL and DEM_MROOM when clearing the mbuf - BUG/MINOR: Crash on O-RTT RX packet after dropping Initial pktns - BUG/MEDIUM: mux-pt: Fix condition to perform a shutdown for writes in mux_pt_shut() - CLEANUP: assorted typo fixes in the code and comments - DEV: patchbot: count the number of backported/non-backported patches - DEV: patchbot: add direct links to show only specific categories - DEV: patchbot: detect commit IDs starting with 7 chars - BUG/MEDIUM: clock: also update the date offset on time jumps - MEDIUM: server: add init-state	2024-09-05 18:53:54 +02:00
Willy Tarreau	599f043e74	[RELEASE] Released version 3.1-dev6 ... Released version 3.1-dev6 with the following main changes : - BUG/MINOR: proto_tcp: delete fd from fdtab if listen() fails - BUG/MINOR: proto_tcp: keep error msg if listen() fails - MINOR: proto_tcp: tcp_bind_listener: copy errno in errmsg - MINOR: channel: implement ci_insert() function - BUG/MEDIUM: mworker/cli: fix pipelined modes on master CLI - REGTESTS: mcli: test the pipelined commands on master CLI - MINOR: cfgparse: load_cfg_in_mem: fix null ptr dereference reported by coverity - MINOR: startup: fix unused value reported by coverity - BUG/MINOR: mux-quic: do not send too big MAX_STREAMS ID - BUG/MINOR: proto_uxst: delete fd from fdtab if listen() fails - BUG/MINOR: cfgparse: parse_cfg: fix null ptr dereference reported by coverity - MINOR: proto_uxst: copy errno in errmsg for syscalls - MINOR: mux-quic: do not trace error in qcc_send_frames() on empty list - BUG/MINOR: h3: properly reject too long header responses - CLEANUP: mworker/cli: clean up the mode handling - BUG/MINOR: tools: make fgets_from_mem() stop at the end of the input - BUG/MINOR: pattern: pat_ref_set: fix UAF reported by coverity - BUG/MINOR: pattern: pat_ref_set: return 0 if err was found - CI: keep logs for failed QIUC Interop jobs - BUG/MINOR: release-estimator: fix relative scheme in CHANGELOG URL - MINOR: release-estimator: add requirements.txt - MINOR: release-estimator: add installation steps in README.md - MINOR: release-estimator: fix the shebang of the python script - DOC: config: correct the table for option tcplog - MEDIUM: log: relax some checks and emit diag warnings instead in lf_expr_postcheck() - MINOR: log: "drop" support for log-profile steps - CI: QUIC Interop LibreSSL: document chacha20 test status - CI: modernize codespell action, switch to node 16 - CI: QUIC Interop AWS-LC: enable chrome client - DOC: lua: fix incorrect english in lua.txt - MINOR: Implements new log format of option tcplog clf - MINOR: cfgparse: limit file size loaded via /dev/stdin - BUG/MINOR: stats: fix color of input elements in dark mode - CLEANUP: stats: use modern DOCTYPE tag - BUG/MINOR: stats: add lang attribute to html tag - DOC: quic: fix default minimal value for max window size - DOC: quic: document nocc debug congestion algorithm - MINOR: quic: extract config window-size parsing - MINOR: quic: define max-window-size config setting - MINOR: quic: allocate stream txbuf via qc_stream_desc API - MINOR: mux-quic: account stream txbuf in QCC - MEDIUM: mux-quic: implement API to ignore txbuf limit for some streams - MINOR: h3: mark control stream as metadata - MINOR: mux-quic: define buf_in_flight - MAJOR: mux-quic: allocate Tx buffers based on congestion window - MINOR: quic/config: adapt settings to new conn buffer limit - MINOR: quic: define sbuf pool - MINOR: quic: support sbuf allocation in quic_stream - MEDIUM: h3: allocate small buffers for headers frames - MINOR: mux-quic: retry after small buf alloc failure - BUG/MINOR: cfgparse-global: fix err msg in mworker keyword parser - BUG/MINOR: cfgparse-global: clean common_kw_list - BUG/MINOR: cfgparse-global: remove redundant goto - MINOR: cfgparse-global: move 'pidfile' in global keywords list - MINOR: cfgparse-global: move 'expose-*' in global keywords list - MINOR: cfgparse-global: move tune options in global keywords list - MINOR: cfgparse-global: move unsupported keywords in global list - BUG/MINOR: cfgparse-global: remove tune.fast-forward from common_kw_list - MINOR: quic: store the lost packets counter in the quic_cc_event element - MINOR: quic: support a tolerance for spurious losses - MINOR: protocol: properly assign the sock_domain and sock_family - MINOR: protocol: add a family lookup - MEDIUM: socket: always properly use the sock_domain for requested families - MINOR: protocol: add the real address family to the protocol - MINOR: socket: don't ban all custom families from reuseport - MINOR: protocol: always initialize the receivers list on registration - CLEANUP: protocol: no longer initialize .receivers nor .nb_receivers	2024-08-21 17:50:03 +02:00
Willy Tarreau	8427c5b542	[RELEASE] Released version 3.1-dev5 ... Released version 3.1-dev5 with the following main changes : - BUG/MINOR: quic: Lack of precision when computing K (cubic only cc) - MEDIUM: ssl/quic: implement quic crypto with EVP_AEAD - MINOR: quic: rename confusing wording aes to hp - MEDIUM: quic: add key argument to header protection crypto functions - MEDIUM: quic: implement CHACHA20_POLY1305 for AWS-LC - MEDIUM: sink: assume sft appctx stickiness - MINOR: quic: delay Retry emission on quic-force-retry - MEDIUM: quic: implement quic-initial rules - MINOR: quic: support ACL for quic-initial rules - MINOR: quic: pass quic_dgram as obj_type for quic-initial rules - MINOR: quic: implement reject quic-initial action - MINOR: quic: implement send-retry quic-initial rules - BUG/MEDIUM: quic: fix invalid conn reject with CONNECTION_REFUSED - MEDIUM: h1: allow to preserve keep-alive on T-E + C-L - MINOR: quic: Add information to "show quic" for CUBIC cc. - MINOR: quic: Dump TX in flight bytes vs window values ratio. - BUG/MEDIUM: jwt: Clear SSL error queue on error when checking the signature - BUILD: cfgparse-quic: fix build error on Solaris due to missing netinet/in.h - MINOR: queue: add a function to check for TOCTOU after queueing - BUG/MEDIUM: queue: deal with a rare TOCTOU in assign_server_and_queue() - DOC: config: Add documentation about spop mode for backends - BUG/MEDIUM: stconn: Report error on SC on send if a previous SE error was set - BUG/MEDIUM: mux-pt/mux-h1: Release the pipe on connection error on sending path - BUILD: mux-pt: Use the right name for the sedesc variable - BUG/MINOR: stconn: bs.id and fs.id had their dependencies incorrect - BUG/MEDIUM: ssl: reactivate 0-RTT for AWS-LC - BUG/MEDIUM: ssl: 0-RTT initialized at the wrong place for AWS-LC - BUILD: ssl: replace USE_OPENSSL_AWSLC by OPENSSL_IS_AWSLC - BUG/MEDIUM: quic: prevent conn freeze on 0RTT undeciphered content - MINOR: tcp_sample: Move TCP low level sample fetch function to control layer - MINOR: quic: Define ->get_info() control layer callback for QUIC - MINOR: flags/mux-quic: decode qcc and qcs flags - BUG/MINOR: quic: fix fc_rtt/srtt values - BUG/MIONR: quic: fix fc_lost - BUG/MINOR: h1: do not forward h2c upgrade header token - BUG/MINOR: h2: reject extended connect for h2c protocol - BUG/MEDIUM: http-ana: Report error on write error waiting for the response - BUG/MEDIUM: h2: Only report early HTX EOM for tunneled streams - BUG/MEDIUM: mux-h2: Propagate term flags to SE on error in h2s_wake_one_stream - BUG/MEDIUM: peer: Notify the applet won't consume data when it waits for sync - BUG/MINOR: quic: Too shord datagram during O-RTT handshakes (aws-lc only) - CI: add weekly QUIC Interop regression against AWS-LC - CI: harden NetBSD builds by ERR=1 - BUG/MINOR: quic: Too short datagram during packet building failures (aws-lc only) - DEV: coccinelle: add a test to detect unchecked strdup() - BUG/MINOR: fcgi-app: handle a possible strdup() failure - BUG/MEDIUM: server/addr: fix tune.events.max-events-at-once event miss and leak - MINOR: quic: convert qc_stream_desc release field to flags - MINOR: quic: implement function to check if STREAM is fully acked - BUG/MEDIUM: quic: handle retransmit for standalone FIN STREAM - MINOR: quic: enforce ACK reception is handled in order - DOC: configuration: fix alphabetical ordering of {bs,fs}.aborted - MINOR: stconn: add a new pair of sf functions {bs,fs}.debug_str - MINOR: mux-h2: implement the debug string for logs - MINOR: mux-quic: define dump functions for QCC and QCS - MINOR: mux-quic: implement debug string for logs - MINOR: quic: dump quic_conn debug string for logs - MINOR: time: define tot_time structure - MINOR: mux-quic: measure QCS lifetime and its blocking state - BUG/MINOR: trace/quic: enable conn/session pointer recovery from quic_conn - BUG/MINOR: trace/quic: permit to lock on frontend/connect/session etc - BUG/MEDIUM: trace: fix null deref in lockon mechanism since TRACE_ENABLED() - BUG/MINOR: trace: automatically start in waiting mode with "start <evt>" - BUG/MINOR: trace/quic: make "qconn" selectable as a lockon criterion - BUG/MINOR: quic/trace: make quic_conn_enc_level_init() emit NEW not CLOSE - MINOR: trace: support setting the sink and level for all sources at once - MINOR: session/trace: enable very minimal session tracing - MEDIUM: trace: implement a "follow" mechanism - MINOR: trace: move the known trace context into a dedicated struct - MINOR: trace: add a per-source helper to pre-fill the context - MINOR: mux-h2: add a trace context filling helper - MINOR: mux-h1: add a trace context filling helper - MINOR: mux-quic: don't leave dangling pointer after freeing qcs->sd - MINOR: mux-quic: add a trace context filling helper - MINOR: mux-h1/trace: add a state trace on stream creation/upgrade - MINOR: mux-h2/trace: add a state trace on stream creation/destruction - MINOR: mux-h3/trace: add a state trace on stream creation/destruction - BUG/MINOR: quic: prevent freeze after early QCS closure - MINOR: server: ensure max_events_at_once > 0 in server_atomic_sync() - MINOR: cfgparse: add struct cfgfile to represent config in memory - REORG: tools: move list_append_word to cfgparse - MINOR: startup: adapt list_append_word to use cfgfile - MINOR: cfgparse: add load_cfg_in_mem - MINOR: cfgparse: load_cfg_in_mem: take in account file size - MINOR: tools: add fgets_from_mem - MEDIUM: startup: make read_cfg() return immediately on ENOMEM - MEDIUM: startup: load and parse configs from memory - MINOR: startup: rename readcfgfile in parse_cfg	2024-08-07 18:42:33 +02:00
Willy Tarreau	7eca16921b	[RELEASE] Released version 3.1-dev4 ... Released version 3.1-dev4 with the following main changes : - MINOR: limits: prepare to keep limits in one place - REORG: fd: move raise_rlim_nofile to limits - CLEANUP: fd: rm struct rlimit definition - REORG: global: move rlim_fd_*_at_boot in limits - MINOR: haproxy: prepare to move limits-related code - REORG: haproxy: move limits handlers to limits - MINOR: limits: add is_any_limit_configured - CLEANUP: quic: remove obsolete comment on send - MINOR: quic: extend detection of UDP API OS features - MINOR: quic: activate UDP GSO for QUIC if supported - MINOR: quic: define quic_cc_path MTU as constant - MINOR: quic: add GSO parameter on quic_sock send API - MAJOR: quic: support GSO when encoding datagrams - MEDIUM: quic: implement GSO fallback mechanism - MINOR: quic: add counters of sent bytes with and without GSO - BUG/MEDIUM: bwlim: Be sure to never set the analyze expiration date in past - CLEANUP: proto: rename TID affinity callbacks - CLEANUP: quic: rename TID affinity elements - BUG/MINOR: limits: fix license type in limits.h - BUG/MINOR: session: Eval L4/L5 rules defined in the default section - CLEANUP: stconn: Fix a typo in comments for SE_ABRT_SRC_* - MEDIUM: spoe: Remove fragmentation support - MEDIUM: spoe: Remove async mode support - MINOR: spoe: Use only a global engine-id per agent - MINOR: spoe: Remove debugging - MAJOR: spoe: Remove idle applets and pipelining support - MINOR: spoe: Remove the dedicated SPOE applet task - MEDIUM: proxy/spoe: Add a SPOP mode - MEDIUM: applet: Add a .shut callback function for applets - MINOR: connection: No longer include stconn type header in connection-t.h - MINOR: stconn: Use a dedicated function to get the opposite sedesc - MINOR: spoe: Rename some flags and constant to use SPOP prefix - MINOR: spoe: Dynamically alloc the message list per event of an agent - MINOR: spoe: Move all stuff regarding the filter/applet in the C file - MINOR: spoe: Move spoe_str_to_vsn() into the header file - MEDIUM: mux-spop: Introduce the SPOP multiplexer - MEDIUM: check/spoe: Use SPOP multiplexer to perform SPOP health-checks - MAJOR: spoe: Rewrite SPOE applet to use the SPOP mux - CLEANUP: spoe: Uniformize function definitions - MINOR: spoe: Add internal sample fetch to retrieve the SPOE engine ID - MEDIUM: spoe: Set a specific name for the connection pool of SPOP servers - MINOR: backend: Remove test on HTX streams to reuse idle connections on connect - MEDIUM: spoe: Force the reuse 'always' mode for SPOP backends - MINOR: mux-spop: Use a dedicated function to update the SPOP connection timeout - MAJOR: mux-spop: Make the SPOP connections reusable - MINOR: stats-html: Display reuse ratio for spop connections - MEDIUM: spoe: Directly xfer NOTIFY frame when SPOE applet is created - MEDIUM: spoe: Directly receive ACK frame in the SPOE context buffer - MEDIUM: mux-spop/spoe: Save negociated max-frame-size value in the mux - MINOR: spoe: Remove the spop version from the SPOE appctx context - MEDIUM: mux-spop: Add checks on received frames - MEDIUM: mux-spop: Announce the pipeling support if possible - MEDIUM: spoe: Forward SPOE context error to the SPOE applet - MEDIUM: spoe: Make the SPOE applet use its own buffers - DOC: spoe: Update SPOE documentation to reflect recent refactoring - BUILD: mux-spop: fix build failure on gcc 4-10 and clang - MINOR: fd: don't scan the full fdtab on all threads - MINOR: server: better mt_list usage for node migration (prev_deleted handling) - BUG/MINOR: do not close uninit FD in quic_test_socketops() - BUG/MEDIUM: debug/cli: fix "show threads" crashing with low thread counts - MINOR: debug: prepare feed_post_mortem_late - CLEANUP: debug: fix indents in debug_parse_cli_show_dev - MINOR: debug: store runtime uid/gid in postmortem - MINOR: debug: keep runtime capabilities in post_mortem - MINOR: debug: use LIM2A to show limits - MINOR: debug: prepare to show runtime limits - MINOR: debug: keep runtime limits in postmortem - DOC: install: don't reference removed CPU arg - BUG/MEDIUM: ssl_sock: fix deadlock in ssl_sock_load_ocsp() on error path - BUG/MAJOR: mux-h2: force a hard error upon short read with pending error - MEDIUM: sink: start applets asynchronously - OPTIM: sink: balance applets accross threads - MEDIUM: ocsp: fix ocsp when the chain is loaded from 'issuers-chain-path' - MEDIUM: ssl: add extra_chain to ckch_data - MINOR: ssl: change issuers-chain for show_cert_detail() - REGTESTS: ssl: test the issuers-chain-path keyword - DOC: configuration: issuers-chain-path not compatible with OCSP - DOC: configuration: issuers-chain-path is compatible with OCSP - BUG/MEDIUM: startup: fix zero-warning mode - BUILD: tree-wide: cast arguments to tolower/toupper to unsigned char (2) - MINOR: cfgparse-global: move mode's keywords in cfg_kw_list - MINOR: cfgparse-global: move no<poller_name> in cfg_kw_list - DOC: config: improve the http-keep-alive section - BUG/MINOR: stick-table: fix crash for src_inc_gpc() without stkcounter - BUG/MINOR: server: Don't warn fallback IP is used during init-addr resolution - BUG/MINOR: cli: Atomically inc the global request counter between CLI commands - MINOR: stream: Add a pointer to set the parent stream - MINOR: vars: Fill a description instead of hash and scope when a name is parsed - MINOR: vars: Use a description to set/unset a variable instead of its hash and scope - MEDIUM: vars: Be able to parse parent scopes for variables - MINOR: vars: Use a variable description to get variables of a specific scope - MEDIUM: vars: Be able to retrieve variable of the parent stream, if any - MEDIUM: spoe: Set the parent stream for SPOE streams - BUG/MINOR: quic: Non optimal first datagram. - DOC: config: Add a dedicated section about variables - DOC: config: Add info about variable scopes referencing the parent stream - DOC: config: Explicitly state the SPOE streams have a usable parent stream - MINOR: quic: Avoid cc priv buffer overflow. - MINOR: spoe: Add a function to validate a version is supported - MINOR: spoe: export the list of SPOP error reasons - MEDIUM: spoe/tcpcheck: Reintroduce SPOP check as a customized tcp-check - REGTESTS: check/spoe: Re-enable the script performing SPOP health-checks - BUG/MEDIUM: sink: properly init applet under sft lock - MINOR: sink: unify and sink_forward_io_handler() and sink_forward_oc_io_handler() - MINOR: sink: Remove useless test on SE_FL_SHR/SHW flags - MINOR: sink: merge sink_forward_io_handler() with sink_forward_oc_io_handler() - MINOR: sink: add some comments about sft->appctx usage in applet handlers - MINOR: sink: distinguish between hard and soft close in _sink_forward_io_handler() - MEDIUM: sink: don't set NOLINGER flag on the outgoing stream interface - MINOR: ring: count processed messages in ring_dispatch_messages() - MINOR: sink: add processed events counter in sft - MEDIUM: sink: "max-reuse" support for sink servers - OPTIM: sink: consider threads' current load when rebalancing applets	2024-07-24 18:20:24 +02:00
Willy Tarreau	a4bc71a1a3	[RELEASE] Released version 3.1-dev3 ... Released version 3.1-dev3 with the following main changes : - BUG/MINOR: quic: Wrong datagram building when probing. - BUG/MEDIUM: quic: fix possible exit from qc_check_dcid() without unlocking - BUG/MINOR: promex: Remove Help prefix repeated twice for each metric - DOC: configuration: add details about crt-store in bind "crt" keyword - BUG/MEDIUM: hlua/cli: Fix lua CLI commands to work with applet's buffers - DOC: configuration: more details about the master-worker mode - BUG/MEDIUM: server: fix race on server_atomic_sync() - BUG/MINOR: jwt: don't try to load files with HMAC algorithm - CLEANUP: quic: cleanup prototypes related to CIDs handling - CLEANUP: quic: remove non-existing quic_cid_tree definition - MINOR: quic: remove access to CID global tree outside of quic_cid module - REORG: quic: remove quic_cid_trees reference from proto_quic - MINOR: quic: add 2 BUG_ON() on datagram dispatch - MINOR: quic: ensure quic_conn is never removed on thread affinity rebind - MEDIUM: init: set default for fd_hard_limit via DEFAULT_MAXFD - DOC: configuration: update maxconn description - MINOR: proto: extend connection thread rebind API - BUG/MEDIUM: quic: prevent crash on accept queue full - BUG/MEDIUM: peers: Fix crash when syncing learn state of a peer without appctx - CI: add weekly QUIC Interop regression against LibreSSL - DEV: flags/quic: decode quic_conn flags - MINOR: quic: rename "ssl error" trace - BUG/MEDIUM: init: fix fd_hard_limit default in compute_ideal_maxconn - BUG/MINOR: jwt: fix variable initialisation - MINOR: ssl/sample: ssl_c_san returns a comma separated list of SAN - OPTIM: pool: improve needed_avg cache line access pattern - MAJOR: import: update mt_list to support exponential back-off (try #2) - CI: weekly QUIC Interop: try to fix private image - BUG/MINOR: h1: Fail to parse empty transfer coding names - BUG/MINOR: h1: Reject empty coding name as last transfer-encoding value - BUG/MEDIUM: h1: Reject empty Transfer-encoding header - BUG/MEDIUM: spoe: Be sure to create a SPOE applet if none on the current thread - BUILD: listener: silence a build warning about unused value without threads - DOC: architecture: remove the totally outdated architecture manual - SCRIPTS: create-release: no more need to skip architecture.txt	2024-07-10 15:39:36 +02:00
Willy Tarreau	bbc2f043e3	[RELEASE] Released version 3.1-dev2 ... Released version 3.1-dev2 with the following main changes : - BUG/MINOR: log: fix broken '+bin' logformat node option - DEBUG: hlua: distinguish burst timeout errors from exec timeout errors - REGTESTS: ssl: fix some regtests 'feature cmd' start condition - BUG/MEDIUM: ssl: AWS-LC + TLSv1.3 won't do ECDSA in RSA+ECDSA configuration - MINOR: ssl: activate sigalgs feature for AWS-LC - REGTESTS: ssl: activate new SSL reg-tests with AWS-LC - BUG/MEDIUM: proxy: fix email-alert invalid free - REORG: mailers: move free_email_alert() to mailers.c - BUG/MINOR: proxy: fix email-alert leak on deinit() (2nd try) - DOC: configuration: fix alphabetical order of bind options - DOC: management: document ptr lookup for table commands - BUG/MAJOR: quic: fix padding with short packets - BUG/MAJOR: quic: do not loop on emission on closing/draining state - MINOR: sample: date converter takes HTTP date and output an UNIX timestamp - SCRIPTS: git-show-backports: do not truncate git-show output - DOC: api/event_hdl: small updates, fix an example and add some precisions - BUG/MINOR: h3: fix crash on STOP_SENDING receive after GOAWAY emission - BUG/MINOR: mux-quic: fix crash on qcs SD alloc failure - BUG/MINOR: h3: fix BUG_ON() crash on control stream alloc failure - BUG/MINOR: quic: fix BUG_ON() on Tx pkt alloc failure - DEV: flags/show-fd-to-flags: adapt to recent versions - MINOR: capabilities: export capget and __user_cap_header_struct - MINOR: capabilities: prepare support for version 3 - MINOR: capabilities: use _LINUX_CAPABILITY_VERSION_3 - MINOR: cli/debug: show dev: add cmdline and version - MINOR: cli/debug: show dev: show capabilities - MINOR: debug: print gdb hints when crashing - BUILD: debug: also declare strlen() in __ABORT_NOW() - BUILD: Missing inclusion header for ssize_t type - BUG/MINOR: hlua: report proper context upon error in hlua_cli_io_handler_fct() - MINOR: cfgparse/log: remove leftover dead code - BUG/MEDIUM: stick-table: Decrement the ref count inside lock to kill a session - MINOR: stick-table: Always decrement ref count before killing a session - REORG: init: do MODE_CHECK_CONDITION logic first - REORG: init: encapsulate CHECK_CONDITION logic in a func - REORG: init: encapsulate 'reload' sockpair and master CLI listeners creation - REORG: init: encapsulate code that reads cfg files - BUG/MINOR: server: fix first server template name lookup UAF - MINOR: activity: make the memory profiling hash size configurable at build time - BUG/MEDIUM: server/dns: prevent DOWN/UP flap upon resolution timeout or error - BUG/MEDIUM: h3: ensure the ":method" pseudo header is totally valid - BUG/MEDIUM: h3: ensure the ":scheme" pseudo header is totally valid - BUG/MEDIUM: quic: fix race-condition in quic_get_cid_tid() - BUG/MINOR: quic: fix race condition in qc_check_dcid() - BUG/MINOR: quic: fix race-condition on trace for CID retrieval	2024-06-29 11:28:41 +02:00
Christopher Faulet	dc1bca4e9f	[RELEASE] Released version 3.1-dev1 ... Released version 3.1-dev1 with the following main changes : - REGTESTS: Remove REQUIRE_VERSION=2.1 from all tests - REGTESTS: Remove REQUIRE_VERSION=2.2 from all tests - CI: use "--no-install-recommends" for apt-get - CI: switch to lua 5.4 - CI: use USE_PCRE2 instead of USE_PCRE - DOC: replace the README by a markdown version - CI: VTest: accelerate package install a bit - ADMIN: acme.sh: remove the old acme.sh code - BUG/MINOR: cfgparse: remove the correct option on httpcheck send-state warning - BUG/MINOR: tcpcheck: report correct error in tcp-check rule parser - BUG/MINOR: tools: fix possible null-deref in env_expand() on out-of-memory - DOC: configuration: add an example for keywords from crt-store - CI: speedup apt package install - DOC: add the FreeBSD status badge to README.md - DOC: change the link to the FreeBSD CI in README.md - MINOR: stktable: avoid ambiguous stktable_data_ptr() usage in cli_io_handler_table() - BUG/MINOR: hlua: use CertCache.set() from various hlua contexts - CLEANUP: hlua: fix CertCache class comment - CI: FreeBSD: upgrade image, packages - BUG/MEDIUM: h1-htx: Don't state interim responses are bodyless - MEDIUM: stconn: Be able to unblock zero-copy data forwarding from done_fastfwd - BUG/MEDIUM: mux-quic: Unblock zero-copy forwarding if the txbuf can be released - BUG/MINOR: quic: prevent crash on qc_kill_conn() - CLEANUP: hlua: use hlua_pusherror() where relevant - BUG/MINOR: hlua: don't use lua_pushfstring() when we don't expect LJMP - BUG/MINOR: hlua: fix unsafe hlua_pusherror() usage - BUG/MINOR: hlua: prevent LJMP in hlua_traceback() - CLEANUP: hlua: get rid of hlua_traceback() security checks - BUG/MINOR: hlua: fix leak in hlua_ckch_set() error path - CLEANUP: hlua: simplify ambiguous lua_insert() usage in hlua_ctx_resume() - BUG/MEDIUM: mux-quic: Don't unblock zero-copy fwding if blocked during nego - MINOR: mux-quic: Don't send an emtpy H3 DATA frame during zero-copy forwarding - BUG/MEDIUM: ssl: wrong priority whem limiting ECDSA ciphers in ECDSA+RSA configuration - BUG/MEDIUM: ssl: bad auth selection with TLS1.2 and WolfSSL - BUG/MINOR: quic: fix computed length of emitted STREAM frames - BUG/MINOR: quic: ensure Tx buf is always purged - BUG/MEDIUM: stconn/mux-h1: Fix suspect change causing timeouts - BUG/MAJOR: mux-h1: Properly copy chunked input data during zero-copy nego - BUG/MINOR: mux-h1: Use the right variable to set NEGO_FF_FL_EXACT_SIZE flag - DOC: install: remove boringssl from the list of supported libraries - MINOR: log: fix "http-send-name-header" ignore warning message - BUG/MINOR: proxy: fix server_id_hdr_name leak on deinit() - BUG/MINOR: proxy: fix log_tag leak on deinit() - BUG/MINOR: proxy: fix email-alert leak on deinit() - BUG/MINOR: proxy: fix check_{command,path} leak on deinit() - BUG/MINOR: proxy: fix dyncookie_key leak on deinit() - BUG/MINOR: proxy: fix source interface and usesrc leaks on deinit() - BUG/MINOR: proxy: fix header_unique_id leak on deinit() - MINOR: proxy: add proxy_free_common() helper function - BUG/MEDIUM: proxy: fix UAF with {tcp,http}checks logformat expressions - MINOR: log: change wording in lf_expr_postcheck() error message - BUG/MEDIUM: log: fix lf_expr_postcheck() behavior with default section - CLEANUP: log/proxy: fix comment in proxy_free_common() - DOC: config: move "hash-key" from proxy to server options - DOC: config: add missing section hint for "guid" proxy keyword - DOC: config: add missing context hint for new server and proxy keywords - BUG/MINOR: promex: Skip resolvers metrics when there is no resolver section - DOC: internals: add a documentation about the master worker - BUG/MAJOR: mux-h1: Prevent any UAF on H1 connection after draining a request - BUG/MINOR: quic: fix padding of INITIAL packets - OPTIM: quic: fill whole Tx buffer if needed - MINOR: quic: refactor qc_build_pkt() error handling - MINOR: quic: use global datagram headlen definition - MINOR: quic: refactor qc_prep_pkts() loop - DOC/MINOR: management: add missed -dR and -dv options - DOC/MINOR: management: add -dZ option - DOC: management: rename show stats domain cli "dns" to "resolvers" - REORG: log: reorder send log helpers by dependency order - MINOR: session: expose session_embryonic_build_legacy_err() function - MEDIUM: log/session: handle embryonic session log within sess_log() - MINOR: log: provide sending log context to process_send_log() when available - MINOR: log: add log_orig_to_str() function - MINOR: log: provide log origin in logformat expressions using '%OG' - CLEANUP: log: remove ambiguous legacy comment for resolve_logger() - MINOR: log/backend: always free parsing hints in resolve_logger() - MINOR: log: make resolve_logger() static - MINOR: log: provide proxy context to resolve_logger() - MINOR: log: add __send_log_set_metadata_sd helper - MINOR: log: add logger flags - MINOR: log: add log-profile parsing logic - MINOR: log: add log profile buildlines - MEDIUM: log: handle log-profile in process_send_log() - DOC: config: add documentation for log profiles - REGTESTS: log: add a test for log-profile - MINOR: ssl: add ssl_sock_bind_verifycbk() in ssl_sock.h - REORG: ssl: move the SNI selection code in ssl_clienthello.c - BUILD: ssl: fix build with wolfSSL - CI: github: upgrade aws-lc to 1.29.0 - Revert "CI: github: upgrade aws-lc to 1.29.0" - MEDIUM: ssl: support for ECDA+RSA certificate selection with AWS-LC - BUILD: ssl: disable deprecated functions for AWS-LC 1.29.0 - MINOR: ssl: relax the 'ssl.default-dh-param' keyword parsing - CI: github: upgrade aws-lc to 1.29.0 - DOC: INSTALL: minimum AWS-LC version is v1.22.0 - CI: github: do the AWS-LC weekly build with ERR=1	2024-06-14 16:04:18 +02:00
Willy Tarreau	1eb0f22ee1	[RELEASE] Released version 3.1-dev0 ... Released version 3.1-dev0 with the following main changes : - MINOR: version: mention that it's development again	2024-05-29 15:00:02 +02:00
Willy Tarreau	5590ada473	[RELEASE] Released version 3.0.0 ... Released version 3.0.0 with the following main changes : - MINOR: sample: implement the uptime sample fetch - CI: scripts: fix build of vtest regarding option -C - CI: scripts: build vtest using multiple CPUs - MINOR: log: rename 'log-format tag' to 'log-format alias' - DOC: config: document logformat item naming and typecasting features - BUILD: makefile: yearly reordering of objects by build time - BUILD: fd: errno is also needed without poll() - DOC: config: fix two typos "RST_STEAM" vs "RST_STREAM" - DOC: config: refer to the non-deprecated keywords in ocsp-update on/off - DOC: streamline http-reuse and connection naming definition - REGTESTS: complete http-reuse test with pool-conn-name - DOC: config: add %ID logformat alias alternative - CLEANUP: ssl/ocsp: readable ifdef in ssl_sock_load_ocsp - BUG/MINOR: ssl/ocsp: init callback func ptr as NULL - CLEANUP: ssl_sock: move dirty openssl-1.0.2 wrapper to openssl-compat - BUG/MINOR: activity: fix Delta_calls and Delta_bytes count - CI: github: upgrade the WolfSSL job to 5.7.0 - DOC: install: update quick build reminders with some missing options - DOC: install: update the range of tested openssl version to cover 3.3 - DEV: patchbot: prepare for new version 3.1-dev - MINOR: version: mention that it's 3.0 LTS now.	2024-05-29 14:43:38 +02:00
Willy Tarreau	f76e73511a	[RELEASE] Released version 3.0-dev13 ... Released version 3.0-dev13 with the following main changes : - CLEANUP: ssl/cli: remove unused code in dump_crtlist_conf - MINOR: ssl: check parameter in ckch_conf_cmp() - BUG/MINOR: ring: free ring's allocated area not ring's usable area when using maps - DOC: configuration: rework the crt-store load documentation - DEBUG: tools: add vma_set_name() helper - DEBUG: shctx: name shared memory using vma_set_name() - DEBUG: sink: add name hint for memory area used by memory-backed sinks - DEBUG: pollers: add name hint for large memory areas used by pollers - DEBUG: errors: add name hint for startup-logs memory area - DEBUG: fd: add name hint for large memory areas - MEDIUM: ssl: don't load file by discovering them in crt-store - DOC: configuration: update the crt-list documentation - DOC: configuration: add the supported crt-store options in crt-list - BUG/MEDIUM: proto: fix fd leak in <proto>_connect_server - MINOR: sock: set conn->err_code in case of EPERM - BUG/MINOR: http-ana: Don't crush stream termination condition on internal error - MAJOR: spoe: Let the SPOE back into the game - BUG/MINOR: connection: parse PROXY TLV for LOCAL mode - BUG/MINOR: server: free PROXY v2 TLVs on srv drop - MINOR: rhttp: add log on connection allocation failure - BUG/MEDIUM: rhttp: fix preconnect on single-thread - BUG/MINOR: rhttp: prevent listener suspend - BUG/MINOR: rhttp: fix task_wakeup state - MINOR: session: define flag to explicitely release listener on free - MEDIUM: rhttp: create session for active preconnect - MINOR: rhttp: support PROXY emission on preconnect - MINOR: connection: support PROXY v2 TLV emission without stream - MINOR: traces: enumerate the list of levels/verbosities when not found - BUG/MINOR: sock: fix sock_create_server_socket - MINOR: proto: fix coding style - BUG/MAJOR: quic: Crash with TLS_AES_128_CCM_SHA256 (libressl only) - REGTESTS: scripts: allow to change the vtest timeout - BUG/MEDIUM: quic_tls: prevent LibreSSL < 4.0 from negotiating CHACHA20_POLY1305 - CI: scripts/build-ssl.sh: loudly fail on unsupported platforms - BUG/MEDIUM: mux-quic: Create sedesc in same time of the QUIC stream - MINOR: mux-quic: Set abort info for SC-less QCS on STOP_SENDING frame - CI: scripts/build-ssl: add a DESTDIR and TMPDIR variable - CI: scripts/buil-ssl: cleanup the boringssl and quictls build - MINOR: config: add thread-hard-limit to set an upper bound to nbthread - BUILD: quic: fix unused variable warning when threads are disabled - BUG/MEDIUM: stick-tables: Fix race with peers when trashing oldest entries - BUG/MEDIUM: stick-tables: Fix race with peers when killing a sticky session - BUG/MEDIUM: stick-tables: make sure never to create two same remote entries - CLEANUP: stick-tables: remove a few unneeded tests for use_wrlock - MINOR: stick-tables: remove the uneeded read lock in stksess_free() - CLEANUP: tools: fix vma_set_name() function comment - DEBUG: tools: add vma_set_name_id() helper - DEBUG: pollers/fd: add thread id suffix to per-thread memory areas name hints - DOC: config: fix aes_gcm_enc() description text - BUILD: trace: fix warning on null dereference - MEDIUM: config: prevent communication with privileged ports - MAJOR: config: prevent QUIC with clients privileged port by default - BUG/MINOR: quic: adjust restriction for stateless reset emission - MINOR: quic: clarify doc for quic_recv() - MINOR: server: generalize sni expr parsing - MINOR: server: define pool-conn-name keyword - MEDIUM: connection: use pool-conn-name instead of sni on reuse - BUG/MINOR: rhttp: initialize session origin after preconnect reversal - BUG/MEDIUM: server/dns: preserve server's port upon resolution timeout or error - BUG/MINOR: http-htx: Support default path during scheme based normalization - BUG/MINOR: server: Don't reset resolver options on a new default-server line - DOC: quic: specify that connection migration is not supported - DOC: config: fix incorrect section reference about custom log format - DOC: config: uniformize the naming and description of custom log format args - DOC: config: clarify the fact that custom log format is not just for logging - REGTESTS: acl_cli_spaces: avoid a warning caused by undefined logs	2024-05-24 17:57:29 +02:00
Willy Tarreau	d236b43da7	[RELEASE] Released version 3.0-dev12 ... Released version 3.0-dev12 with the following main changes : - CI: drop asan.log umbrella completely - BUG/MINOR: log: fix leak in add_sample_to_logformat_list() error path - BUG/MINOR: log: smp_rgs array issues with inherited global log directives - MINOR: rhttp: Don't require SSL when attach-srv name parsing - REGTESTS: ssl: be more verbose with ocsp_compat_check.vtc - DOC: Update UUID references to RFC 9562 - MINOR: hlua: add hlua_nb_instruction getter - MEDIUM: hlua: take nbthread into account in hlua_get_nb_instruction() - BUG/MEDIUM: server: clear purgeable conns before server deletion - BUG/MINOR: mux-quic: fix error code on shutdown for non HTTP/3 - BUG/MINOR: qpack: fix error code reported on QPACK decoding failure - BUG/MEDIUM: htx: mark htx_sl as packed since it may be realigned - BUG/MEDIUM: stick-tables: properly mark stktable_data as packed - SCRIPTS: run-regtests: fix a few occurrences of extended regexes - BUG/MINOR: ssl_sock: fix xprt_set_used() to properly clear the TASK_F_USR1 bit - MINOR: dynbuf: provide a b_dequeue() variant for multi-thread - BUG/MEDIUM: muxes: enforce buf_wait check in takeover() - BUG/MINOR: h1: Check authority for non-CONNECT methods only if a scheme is found - BUG/MEDIUM: h1: Reject CONNECT request if the target has a scheme - BUG/MAJOR: h1: Be stricter on request target validation during message parsing - MINOR: qpack: prepare error renaming - MINOR: h3/qpack: adjust naming for errors - MINOR: h3: adjust error reporting on sending - MINOR: h3: adjust error reporting on receive - MINOR: mux-quic: support glitches - MINOR: h3: report glitch on RFC violation - BUILD: stick-tables: better mark the stktable_data as 32-bit aligned - MINOR: ssl: rename tune.ssl.ocsp-update.mode in ocsp-update.mode - REGTESTS: update the ocsp-update tests - BUILD: stats: remove non portable getline() usage - MEDIUM: ssl: add ocsp-update.mindelay and ocsp-update.maxdelay - BUILD: log: get rid of non-portable strnlen() func - BUG/MEDIUM: fd: prevent memory waste in fdtab array - CLEANUP: compat: make the MIN/MAX macros more reliable - Revert: MEDIUM: evports: permit to report multiple events at once" - BUG/MINOR: stats: Don't state the 303 redirect response is chunked - MINOR: mux-h1: Add a flag to ignore the request payload - REORG: mux-h1: Group H1S_F_BODYLESS_* flags - CLEANUP: mux-h1: Remove unused H1S_F_ERROR_MASK mask value - MEDIUM: mux-h1: Support C-L/T-E header suppressions when sending messages - MINOR: ssl: ckch_store_new_load_files_conf() loads filenames from ckch_conf - MEDIUM: ssl/crtlist: loading crt-store keywords from a crt-list - CLEANUP: ssl/ocsp: remove the deprecated parsing code for "ocsp-update" - MINOR: ssl: pass ckch_store instead of ckch_data to ssl_sock_load_ocsp() - MEDIUM: ssl: ckch_conf_parse() uses -1/0/1 for off/default/on - MINOR: ssl: handle PARSE_TYPE_INT and PARSE_TYPE_ONOFF in ckch_store_load_files() - MINOR: ssl/ocsp: use 'ocsp-update' in crt-store - MINOR: ssl: ckch_conf_clean() utility function for ckch_conf - MEDIUM: ssl: add ocsp-update.disable global option - MEDIUM: ssl/cli: handle crt-store keywords in crt-list over the CLI - MINOR: ssl: ckch_conf_cmp() compare multiple ckch_conf structures - MEDIUM: ssl: temporarily load files by detecting their presence in crt-store - REGTESTS: ocsp-update: change the reg-test to support the new crt-store mode - DOC: capabilities: fix chapter header rendering	2024-05-18 16:51:23 +02:00
Willy Tarreau	7217a9e9b9	[RELEASE] Released version 3.0-dev11 ... Released version 3.0-dev11 with the following main changes : - BUILD: clock: improve check for pthread_getcpuclockid() - CI: add Illumos scheduled workflow - CI: netbsd: limit scheduled workflow to parent repo only - OPTIM: log: resolve logformat options during postparsing - BUG/MINOR: haproxy: only tid 0 must not sleep if got signal - REGTEST: add tests for acl() sample fetch - BUG/MINOR: acl: support built-in ACLs with acl() sample - BUG/MINOR: cfgparse: use curproxy global var from config post validation - MEDIUM: stconn/muxes: Add an abort reason for SE shutdowns on muxes - MINOR: mux-h2: Set the SE abort reason when a RST_STREAM frame is received - MEDIUM: mux-h2: Forward h2 client cancellations to h2 servers - MINOR: mux-quic: Set tha SE abort reason when a STOP_SENDING frame is received - MINOR: stconn: Add samples to retrieve about stream aborts - MINOR: mux-quic: Add .ctl callback function to get info about a mux connection - MINOR: muxes: Add ctl commands to get info on streams for a connection - MINOR: connection: Add samples to retrieve info on streams for a connection - BUG/MEDIUM: log/ring: broken syslog octet counting - BUG/MEDIUM: mux-quic: fix crash on STOP_SENDING received without SD - DOC: lua: fix filters.txt file location - MINOR: dynbuf: pass a criticality argument to b_alloc() - MINOR: dynbuf: add functions to help queue/requeue buffer_wait fields - MINOR: dynbuf: use the b_queue()/b_requeue() functions everywhere - MEDIUM: dynbuf: make the buffer_wq an array of list heads - CLEANUP: tinfo: better align fields in thread_ctx - MINOR: dynbuf: provide a b_dequeue() function to detach a bw from the queue - MEDIUM: dynbuf: generalize the use of b_dequeue() to detach buffer_wait - MEDIUM: dynbuf/stream: re-enable queueing upon failed buffer allocation - MEDIUM: dynbuf/stream: do not allocate the buffers in the callback - MEDIUM: applet: make appctx_buf_available() only wake the applet up, not allocate - MINOR: applet: set the blocking flag in the buffer allocation function - MINOR: applet: adjust the allocation criticity based on the requested buffer - MINOR: dynbuf/mux-h1: use different criticalities for buffer allocations - MEDIUM: dynbuf/mux-h1: do not allocate the buffers in the callback - MEDIUM: dynbuf: refrain from offering a buffer if more critical ones are waiting - MINOR: stconn: report that a buffer allocation succeeded - MINOR: stream: report that a buffer allocation succeeded - MINOR: applet: report about buffer allocation success - MINOR: mux-h1: report that a buffer allocation succeeded - MEDIUM: stream: allocate without queuing when retrying - MEDIUM: channel: allocate without queuing when retrying - MEDIUM: mux-h1: allocate without queuing when retrying - MEDIUM: dynbuf: implement emergency buffers - MEDIUM: dynbuf: use emergency buffers upon failed memory allocations	2024-05-10 17:39:19 +02:00