175 Commits

Author	SHA1	Message	Date
Willy Tarreau	3b1d190831	[RELEASE] Released version 2.6-dev2 ... Released version 2.6-dev2 with the following main changes : - DOC: management: rework the Master CLI section - DOC: management: add expert and experimental mode in 9.4.1 - CLEANUP: cleanup a commentary in pcli_parse_request() - BUG/MINOR: mworker/cli: don't display help on master applet - MINOR: mworker/cli: mcli-debug-mode enables every command - MINOR: mworker/cli: add flags in the prompt - BUG/MINOR: httpclient: Revisit HC request and response buffers allocation - BUG/MEDIUM: httpclient: Xfer the request when the stream is created - MINOR: httpclient: Don't limit data transfer to 1024 bytes - BUILD: ssl: adjust guard for X509_get_X509_PUBKEY(x) - REGTESTS: ssl: skip show_ssl_ocspresponse.vtc when BoringSSL is used - MINOR: quic: Do not modify a marked as consumed datagram - MINOR: quic: Wrong datagram buffer passed to quic_lstnr_dgram_dispatch() - MINOR: quic: Remove a useless test in quic_get_dgram_dcid() - BUG/MINOR: ssl: Remove empty lines from "show ssl ocsp-response <id>" output - CLEANUP: ssl: Remove unused ssl_sock_create_cert function - MINOR: ssl: Use high level OpenSSL APIs in sha2 converter - MINOR: ssl: Remove EC_KEY related calls when preparing SSL context - REGTESTS: ssl: Add test for "curves" and "ecdhe" SSL options - MINOR: ssl: Remove EC_KEY related calls when creating a certificate - REGTESTS: ssl: Add test for "generate-certificates" SSL option - MINOR: ssl: Remove call to SSL_CTX_set_tlsext_ticket_key_cb with OpenSSLv3 - MINOR: ssl: Remove call to HMAC_Init_ex with OpenSSLv3 - MINOR: h3: hardcode the stream id of control stream - MINOR: mux-quic: remove quic_transport_params_update - MINOR: quic: rename local tid variable - MINOR: quic: remove unused xprt rcv_buf operation - MINOR: quic: take out xprt snd_buf operation - CI: enable QUIC for Coverity scan - BUG/MINOR: mworker: does not erase the pidfile upon reload - MINOR: ssl: Remove call to ERR_func_error_string with OpenSSLv3 - MINOR: ssl: Remove call to ERR_load_SSL_strings with OpenSSLv3 - REGTESTS: ssl: Add tests for DH related options - MINOR: ssl: Create HASSL_DH wrapper structure - MINOR: ssl: Add ssl_sock_get_dh_from_bio helper function - MINOR: ssl: Factorize ssl_get_tmp_dh and append a cbk to its name - MINOR: ssl: Add ssl_sock_set_tmp_dh helper function - MINOR: ssl: Add ssl_sock_set_tmp_dh_from_pkey helper function - MINOR: ssl: Add ssl_new_dh_fromdata helper function - MINOR: ssl: Build local DH of right size when needed - MINOR: ssl: Set default dh size to 2048 - MEDIUM: ssl: Replace all DH objects by EVP_PKEY on OpenSSLv3 (via HASSL_DH type) - MINOR: ssl: Remove calls to SSL_CTX_set_tmp_dh_callback on OpenSSLv3 - MINOR: quic: Remove an RX buffer useless lock - MINOR: quic: Variable used before being checked in ha_quic_add_handshake_data() - MINOR: quic: EINTR error ignored - MINOR: quic: Potential overflow expression in qc_parse_frm() - MINOR: quic: Possible overflow in qpack_get_varint() - CLEANUP: h3: Unreachable target in h3_uqs_init() - MINOR: quic: Possible memleak in qc_new_conn() - MINOR: quic: Useless statement in quic_crypto_data_cpy() - BUG/MEDIUM: pools: ensure items are always large enough for the pool_cache_item - BUG/MINOR: pools: always flush pools about to be destroyed - CLEANUP: pools: don't needlessly set a call mark during refilling of caches - DEBUG: pools: add extra sanity checks when picking objects from a local cache - DEBUG: pools: let's add reverse mapping from cache heads to thread and pool - DEBUG: pools: replace the link pointer with the caller's address on pool_free() - BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks - MINOR: quic: use a global dghlrs for each thread - BUG/MEDIUM: quic: fix crash on CC if mux not present - MINOR: qpack: fix typo in trace - BUG/MINOR: quic: fix FIN stream signaling - BUG/MINOR: h3: fix the header length for QPACK decoding - MINOR: h3: remove transfer-encoding header - MINOR: h3: add documentation on h3_decode_qcs - MINOR: h3: set properly HTX EOM/BODYLESS on HEADERS parsing - MINOR: mux-quic: implement rcv_buf - MINOR: mux-quic: set EOS on rcv_buf - MINOR: h3: set CS_FL_NOT_FIRST - MINOR: h3: report frames bigger than rx buffer - MINOR: h3: extract HEADERS parsing in a dedicated function - MINOR: h3: implement DATA parsing - MINOR: quic: Wrong smoothed rtt initialization - MINOR: quic: Wrong loss delay computation - MINOR: quic: Code never reached in qc_ssl_sess_init() - MINOR: quic: ha_quic_set_encryption_secrets without server specific code - MINOR: quic: Avoid warning about NULL pointer dereferences - MINOR: quic: Useless test in quic_lstnr_dghdlr() - MINOR: quic: Non checked returned value for cs_new() in hq_interop_decode_qcs() - MINOR: h3: Dead code in h3_uqs_init() - MINOR: quic: Non checked returned value for cs_new() in h3_decode_qcs() - MINOR: quic: Possible frame parsers array overrun - MINOR: quic: Do not retransmit too much packets. - MINOR: quic: Move quic_rxbuf_pool pool out of xprt part - MINOR: h3: report error on HEADERS/DATA parsing - BUG/MINOR: jwt: Double free in deinit function - BUG/MINOR: jwt: Missing pkey free during cleanup - BUG/MINOR: jwt: Memory leak if same key is used in multiple jwt_verify calls - BUG/MINOR: httpclient/cli: display junk characters in vsn - MINOR: h3: remove unused return value on decode_qcs - BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies - BUG/MAJOR: spoe: properly detach all agents when releasing the applet - REGTESTS: server: close an occasional race on dynamic_server_ssl.vtc - REGTESTS: peers: leave a bit more time to peers to synchronize - BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change - BUG/MINOR: mux-h2: update the session's idle delay before creating the stream - BUG/MINOR: httpclient: reinit flags in httpclient_start() - BUG/MINOR: mailers: negotiate SMTP, not ESMTP - MINOR: httpclient: sets an alternative destination - MINOR: httpclient/lua: add 'dst' optionnal field - BUG/MINOR: ssl: Add missing return value check in ssl_ocsp_response_print - BUG/MINOR: ssl: Fix leak in "show ssl ocsp-response" CLI command - BUG/MINOR: ssl: Missing return value check in ssl_ocsp_response_print - CLEANUP: httpclient/cli: fix indentation alignment of the help message - BUG/MINOR: tools: url2sa reads ipv4 too far - BUG/MEDIUM: httpclient: limit transfers to the maximum available room - DEBUG: buffer: check in __b_put_blk() whether the buffer room is respected - MINOR: mux-quic: fix a possible null dereference in qc_timeout_task - BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message - BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer - BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer - DEBUG: stream-int: Check CS_FL_WANT_ROOM is not set with an empty input buffer - MINOR: quic: do not modify offset node if quic_rx_strm_frm in tree - MINOR: h3: fix compiler warning variable set but not used - MINOR: mux-quic: fix uninitialized return on qc_send - MINOR: quic: fix handling of out-of-order received STREAM frames - MINOR: pools: mark most static pool configuration variables as read-mostly - CLEANUP: pools: remove the now unused pool_is_crowded() - REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks - BUG/MEDIUM: stream: Abort processing if response buffer allocation fails - MINOR: httpclient/lua: ability to set a server timeout - BUG/MINOR: httpclient/lua: missing pop for new timeout parameter - DOC: httpclient/lua: fix the type of the dst parameter - CLEANUP: httpclient: initialize the client in stage INIT not REGISTER - CLEANUP: muxes: do not use a dynamic trash in list_mux_protos() - CLEANUP: vars: move the per-process variables initialization to vars.c - CLEANUP: init: remove the ifdef on HAPROXY_MEMMAX - MINOR: pools: disable redundant poisonning on pool_free() - MINOR: pools: introduce a new pool_debugging global variable - MINOR: pools: switch the fail-alloc test to runtime only - MINOR: pools: switch DEBUG_DONT_SHARE_POOLS to runtime - MINOR: pools: add a new debugging flag POOL_DBG_COLD_FIRST - MINOR: pools: add a new debugging flag POOL_DBG_INTEGRITY - MINOR: pools: make the global pools a runtime option. - MEDIUM: pools: replace CONFIG_HAP_POOLS with a runtime "NO_CACHE" flag. - MINOR: pools: store the allocated size for each pool - MINOR: pools: get rid of POOL_EXTRA - MINOR: pools: replace DEBUG_POOL_TRACING with runtime POOL_DBG_CALLER - MINOR: pools: replace DEBUG_MEMORY_POOLS with runtime POOL_DBG_TAG - MINOR: pools: add a debugging flag for memory poisonning option - MEDIUM: initcall: move STG_REGISTER earlier - MEDIUM: init: split the early initialization in its own function - MINOR: init: extract args parsing to their own function - MEDIUM: init: handle arguments earlier - MINOR: pools: delegate parsing of command line option -dM to a new function - MINOR: pools: support setting debugging options using -dM - BUILD: makefile: enable both DEBUG_STRICT and DEBUG_MEMORY_POOLS by default - CI: github: enable pool debugging by default - DOC: Fix usage/examples of deprecated ACLs - DOC: internal: update the pools API to mention boot-time settings - DOC: design: add design thoughts for later simplification of the pools - DOC: design: commit the temporary design notes on thread groups - MINOR: stream-int: Handle appctx case first when releasing the endpoint - MINOR: connection: Be prepared to handle conn-stream with no connection - MINOR: stream: Handle appctx case first when creating a new stream - MINOR: connection: Add a function to detach a conn-stream from the connection - MINOR: stream-int: Add function to reset a SI endpoint - MINOR: stream-int: Add function to attach a connection to a SI - MINOR: stream-int: Be able to allocate a CS without connection - MEDIUM: stream: No longer release backend conn-stream on connection retry - MEDIUM: stream: Allocate backend CS when the stream is created - REORG: conn_stream: move conn-stream stuff in dedicated files - MEDIUM: conn-stream: No longer access connection field directly - MEDIUM: conn-stream: Be prepared to use an appctx as conn-stream endpoint - MAJOR: conn_stream/stream-int: move the appctx to the conn-stream - MEDIUM: applet: Set the conn-stream as appctx owner instead of the stream-int - MEDIUM: conn_stream: Add a pointer to the app object into the conn-stream - MINOR: stream: Add pointer to front/back conn-streams into stream struct - MINOR: stream: Slightly rework stream_new to separate CS/SI initialization - MINOR: stream-int: Always access the stream-int via the conn-stream - MINOR: backend: Always access the stream-int via the conn-stream - MINOR: stream: Always access the stream-int via the conn-stream - MINOR: http-ana: Always access the stream-int via the conn-stream - MINOR: cli: Always access the stream-int via the conn-stream - MINOR: log: Always access the stream-int via the conn-stream - MINOR: frontend: Always access the stream-int via the conn-stream - MINOR: proxy: Always access the stream-int via the conn-stream - MINOR: peers: Always access the stream-int via the conn-stream - MINOR: debug: Always access the stream-int via the conn-stream - MINOR: hlua: Always access the stream-int via the conn-stream - MINOR: cache: Always access the stream-int via the conn-stream - MINOR: dns: Always access the stream-int via the conn-stream - MINOR: http-act: Always access the stream-int via the conn-stream - MINOR: httpclient: Always access the stream-int via the conn-stream - MINOR: tcp-act: Always access the stream-int via the conn-stream - MINOR: sink: Always access the stream-int via the conn-stream - MINOR: conn-stream: Rename cs_detach() to cs_detach_endp() - CLEANUP: conn-stream: Don't export conn-stream pool - MAJOR: stream/conn_stream: Move the stream-interface into the conn-stream - CLEANUP: stream-int: rename si_reset() to si_init() - MINOR: conn-stream: Release a CS when both app and endp are detached - MINOR: stream: Don't destroy conn-streams but detach app and endp - MAJOR: check: Use a persistent conn-stream for health-checks - CLEANUP: conn-stream: Remove cs_destroy() - CLEANUP: backend: Don't export connect_server anymore - BUG/MINOR: h3/hq_interop: Fix CS and stream creation - BUILD: tree-wide: Avoid warnings about undefined entities retrieved from a CS - BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy() - BUG/MEDIUM: quic: fix received ACK stream calculation - BUILD: stream: fix build warning with older compilers - BUG/MINOR: debug: fix get_tainted() to properly read an atomic value - DEBUG: move the tainted stuff to bug.h for easier inclusion - DEBUG: cleanup back trace generation - DEBUG: cleanup BUG_ON() configuration - DEBUG: mark ABORT_NOW() as unreachable - DBEUG: add a new WARN_ON() macro - DEBUG: make the _BUG_ON() macro return the condition - DEBUG: add a new WARN_ON_ONCE() macro - DEBUG: report BUG_ON() and WARN_ON() in the tainted flags - MINOR: quic: adjust buffer handling for STREAM transmission - MINOR: quic: liberate the TX stream buffer after ACK processing - MINOR: quic: add a TODO for a memleak frame on ACK consume	2022-02-25 17:12:11 +01:00
Willy Tarreau	2454d6ef5b	[RELEASE] Released version 2.6-dev1 ... Released version 2.6-dev1 with the following main changes : - BUG/MINOR: cache: Fix loop on cache entries in "show cache" - BUG/MINOR: httpclient: allow to replace the host header - BUG/MINOR: lua: don't expose internal proxies - MEDIUM: mworker: seamless reload use the internal sockpairs - BUG/MINOR: lua: remove loop initial declarations - BUG/MINOR: mworker: does not add the -sf in wait mode - BUG/MEDIUM: mworker: FD leak of the eventpoll in wait mode - MINOR: quic: do not reject PADDING followed by other frames - REORG: quic: add comment on rare thread concurrence during CID alloc - CLEANUP: quic: add comments on CID code - MEDIUM: quic: handle CIDs to rattach received packets to connection - MINOR: qpack: support litteral field line with non-huff name - MINOR: quic: activate QUIC traces at compilation - MINOR: quic: use more verbose QUIC traces set at compile-time - MEDIUM: pool: refactor malloc_trim/glibc and jemalloc api addition detections. - MEDIUM: pool: support purging jemalloc arenas in trim_all_pools() - BUG/MINOR: mworker: deinit of thread poller was called when not initialized - BUILD: pools: only detect link-time jemalloc on ELF platforms - CI: github actions: add the output of $CC -dM -E- - BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time - BUILD: evports: remove a leftover from the dead_fd cleanup - MINOR: quic: Set "no_application_protocol" alert - MINOR: quic: More accurate immediately close. - MINOR: quic: Immediately close if no transport parameters extension found - MINOR: quic: Rename qc_prep_hdshk_pkts() to qc_prep_pkts() - MINOR: quic: Possible crash when inspecting the xprt context - MINOR: quic: Dynamically allocate the secrete keys - MINOR: quic: Add a function to derive the key update secrets - MINOR: quic: Add structures to maintain key phase information - MINOR: quic: Optional header protection key for quic_tls_derive_keys() - MINOR: quic: Add quic_tls_key_update() function for Key Update - MINOR: quic: Enable the Key Update process - MINOR: quic: Delete the ODCIDs asap - BUG/MINOR: vars: Fix the set-var and unset-var converters - MEDIUM: pool: Following up on previous pool trimming update. - BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message - BUG/MINOR: mux-h1: Fix splicing for messages with unknown length - MINOR: mux-h1: Improve H1 traces by adding info about http parsers - MINOR: mux-h1: register a stats module - MINOR: mux-h1: add counters instance to h1c - MINOR: mux-h1: count open connections/streams on stats - MINOR: mux-h1: add stat for total count of connections/streams - MINOR: mux-h1: add stat for total amount of bytes received and sent - REGTESTS: h1: Add a script to validate H1 splicing support - BUG/MINOR: server: Don't rely on last default-server to init server SSL context - BUG/MEDIUM: resolvers: Detach query item on response error - MEDIUM: resolvers: No longer store query items in a list into the response - BUG/MAJOR: segfault using multiple log forward sections. - BUG/MEDIUM: h1: Properly reset h1m flags when headers parsing is restarted - BUG/MINOR: resolvers: Don't overwrite the error for invalid query domain name - BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH - BUG/MEDIUM: sample: Fix memory leak in sample_conv_jwt_member_query - DOC: spoe: Clarify use of the event directive in spoe-message section - DOC: config: Specify %Ta is only available in HTTP mode - BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types - IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode - MINOR: quic: fix segfault on CONNECTION_CLOSE parsing - MINOR: h3: add BUG_ON on control receive function - MEDIUM: xprt-quic: finalize app layer initialization after ALPN nego - MINOR: h3: remove duplicated FIN flag position - MAJOR: mux-quic: implement a simplified mux version - MEDIUM: mux-quic: implement release mux operation - MEDIUM: quic: detect the stream FIN - MINOR: mux-quic: implement subscribe on stream - MEDIUM: mux-quic: subscribe on xprt if remaining data after send - MEDIUM: mux-quic: wake up xprt on data transferred - MEDIUM: mux-quic: handle when sending buffer is full - MINOR: quic: RX buffer full due to wrong CRYPTO data handling - MINOR: quic: Race issue when consuming RX packets buffer - MINOR: quic: QUIC encryption level RX packets race issue - MINOR: quic: Delete remaining RX handshake packets - MINOR: quic: Remove QUIC TX packet length evaluation function - MINOR: hq-interop: fix tx buffering - MINOR: mux-quic: remove uneeded code to check fin on TX - MINOR: quic: add HTX EOM on request end - BUILD: mux-quic: fix compilation with DEBUG_MEM_STATS - MINOR: http-rules: Add capture action to http-after-response ruleset - BUG/MINOR: cli/server: Don't crash when a server is added with a custom id - MINOR: mux-quic: do not release qcs if there is remaining data to send - MINOR: quic: notify the mux on CONNECTION_CLOSE - BUG/MINOR: mux-quic: properly initialize flow control - MINOR: quic: Compilation fix for quic_rx_packet_refinc() - MINOR: h3: fix possible invalid dereference on htx parsing - DOC: config: retry-on list is space-delimited - DOC: config: fix error-log-format example - BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode - MINOR: hq-interop: refix tx buffering - REGTESTS: ssl: use X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY for cert check - MINOR: cli: "show version" displays the current process version - CLEANUP: cfgparse: modify preprocessor guards around numa detection code - MEDIUM: cfgparse: numa detect topology on FreeBSD. - BUILD: ssl: unbreak the build with newer libressl - MINOR: vars: Move UPDATEONLY flag test to vars_set_ifexist - MINOR: vars: Set variable type to ANY upon creation - MINOR: vars: Delay variable content freeing in var_set function - MINOR: vars: Parse optional conditions passed to the set-var converter - MINOR: vars: Parse optional conditions passed to the set-var actions - MEDIUM: vars: Enable optional conditions to set-var converter and actions - DOC: vars: Add documentation about the set-var conditions - REGTESTS: vars: Add new test for conditional set-var - MINOR: quic: Attach timer task to thread for the connection. - CLEANUP: quic_frame: Remove a useless suffix to STOP_SENDING - MINOR: quic: Add traces for STOP_SENDING frame and modify others - CLEANUP: quic: Remove cdata_len from quic_tx_packet struct - MINOR: quic: Enable TLS 0-RTT if needed - MINOR: quic: No TX secret at EARLY_DATA encryption level - MINOR: quic: Add quic_set_app_ops() function - MINOR: ssl_sock: Set the QUIC application from ssl_sock_advertise_alpn_protos. - MINOR: quic: Make xprt support 0-RTT. - MINOR: qpack: Missing check for truncated QPACK fields - CLEANUP: quic: Comment fix for qc_strm_cpy() - MINOR: hq_interop: Stop BUG_ON() truncated streams - MINOR: quic: Do not mix packet number space and connection flags - CLEANUP: quic: Shorten a litte bit the traces in lstnr_rcv_pkt() - MINOR: mux-quic: fix trace on stream creation - CLEANUP: quic: fix spelling mistake in a trace - CLEANUP: quic: rename quic_conn conn to qc in quic_conn_free - MINOR: quic: add missing lock on cid tree - MINOR: quic: rename constant for haproxy CIDs length - MINOR: quic: refactor concat DCID with address for Initial packets - MINOR: quic: compare coalesced packets by DCID - MINOR: quic: refactor DCID lookup - MINOR: quic: simplify the removal from ODCID tree - REGTESTS: vars: Remove useless ssl tunes from conditional set-var test - MINOR: ssl: Remove empty lines from "show ssl ocsp-response" output - MINOR: quic: Increase the RX buffer for each connection - MINOR: quic: Add a function to list remaining RX packets by encryption level - MINOR: quic: Stop emptying the RX buffer asap. - MINOR: quic: Do not expect to receive only one O-RTT packet - MINOR: quic: Do not forget STREAM frames received in disorder - MINOR: quic: Wrong packet refcount handling in qc_pkt_insert() - DOC: fix misspelled keyword "resolve_retries" in resolvers - CLEANUP: quic: rename quic_conn instances to qc - REORG: quic: move mux function outside of xprt - MINOR: quic: add reference to quic_conn in ssl context - MINOR: quic: add const qualifier for traces function - MINOR: trace: add quic_conn argument definition - MINOR: quic: use quic_conn as argument to traces - MINOR: quic: add quic_conn instance in traces for qc_new_conn - MINOR: quic: Add stream IDs to qcs_push_frame() traces - MINOR: quic: unchecked qc_retrieve_conn_from_cid() returned value - MINOR: quic: Wrong dropped packet skipping - MINOR: quic: Handle the cases of overlapping STREAM frames - MINOR: quic: xprt traces fixes - MINOR: quic: Drop asap Retry or Version Negotiation packets - MINOR: pools: work around possibly slow malloc_trim() during gc - DEBUG: ssl: make sure we never change a servername on established connections - MINOR: quic: Add traces for RX frames (flow control related) - MINOR: quic: Add CONNECTION_CLOSE phrase to trace - REORG: quic: remove qc_ prefix on functions which not used it directly - BUG/MINOR: quic: upgrade rdlock to wrlock for ODCID removal - MINOR: quic: remove unnecessary call to free_quic_conn_cids() - MINOR: quic: store ssl_sock_ctx reference into quic_conn - MINOR: quic: remove unnecessary if in qc_pkt_may_rm_hp() - MINOR: quic: replace usage of ssl_sock_ctx by quic_conn - MINOR: quic: delete timer task on quic_close() - MEDIUM: quic: implement refcount for quic_conn - BUG/MINOR: quic: fix potential null dereference - BUG/MINOR: quic: fix potential use of uninit pointer - BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch - BUG/MEDIUM: peers: properly skip conn_cur from incoming messages - CI: Github Actions: do not show VTest failures if build failed - BUILD: opentracing: display warning in case of using OT_USE_VARS at compile time - MINOR: compat: detect support for dl_iterate_phdr() - MINOR: debug: add ability to dump loaded shared libraries - MINOR: debug: add support for -dL to dump library names at boot - BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server - REGTESTS: ssl: fix ssl_default_server.vtc - BUG/MINOR: ssl: free the fields in srv->ssl_ctx - BUG/MEDIUM: ssl: free the ckch instance linked to a server - REGTESTS: ssl: update of a crt with server deletion - BUILD/MINOR: cpuset FreeBSD 14 build fix. - MINOR: pools: always evict oldest objects first in pool_evict_from_local_cache() - DOC: pool: document the purpose of various structures in the code - CLEANUP: pools: do not use the extra pointer to link shared elements - CLEANUP: pools: get rid of the POOL_LINK macro - MINOR: pool: allocate from the shared cache through the local caches - CLEANUP: pools: group list updates in pool_get_from_cache() - MINOR: pool: rely on pool_free_nocache() in pool_put_to_shared_cache() - MINOR: pool: make pool_is_crowded() always true when no shared pools are used - MINOR: pool: check for pool's fullness outside of pool_put_to_shared_cache() - MINOR: pool: introduce pool_item to represent shared pool items - MINOR: pool: add a function to estimate how many may be released at once - MEDIUM: pool: compute the number of evictable entries once per pool - MINOR: pools: prepare pool_item to support chained clusters - MINOR: pools: pass the objects count to pool_put_to_shared_cache() - MEDIUM: pools: centralize cache eviction in a common function - MEDIUM: pools: start to batch eviction from local caches - MEDIUM: pools: release cached objects in batches - OPTIM: pools: reduce local pool cache size to 512kB - CLEANUP: assorted typo fixes in the code and comments This is 29th iteration of typo fixes - CI: github actions: update OpenSSL to 3.0.1 - BUILD/MINOR: tools: solaris build fix on dladdr. - BUG/MINOR: cli: fix _getsocks with musl libc - BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry - MINOR: quic: Wrong traces after rework - MINOR: quic: Add trace about in flight bytes by packet number space - MINOR: quic: Wrong first packet number space computation - MINOR: quic: Wrong packet number space computation for PTO - MINOR: quic: Wrong loss time computation in qc_packet_loss_lookup() - MINOR: quic: Wrong ack_delay compution before calling quic_loss_srtt_update() - MINOR: quic: Remove nb_pto_dgrams quic_conn struct member - MINOR: quic: Wrong packet number space trace in qc_prep_pkts() - MINOR: quic: Useless test in qc_prep_pkts() - MINOR: quic: qc_prep_pkts() code moving - MINOR: quic: Speeding up Handshake Completion - MINOR: quic: Probe Initial packet number space more often - MINOR: quic: Probe several packet number space upon timer expiration - MINOR: quic: Comment fix. - MINOR: quic: Improve qc_prep_pkts() flexibility - MINOR: quic: Do not drop secret key but drop the CRYPTO data - MINOR: quic: Prepare Handshake packets asap after completed handshake - MINOR: quic: Flag asap the connection having reached the anti-amplification limit - MINOR: quic: PTO timer too often reset - MINOR: quic: Re-arm the PTO timer upon datagram receipt - MINOR: proxy: add option idle-close-on-response - MINOR: cpuset: switch to sched_setaffinity for FreeBSD 14 and above. - CI: refactor spelling check - CLEANUP: assorted typo fixes in the code and comments - BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning - MINOR: quic: Only one CRYPTO frame by encryption level - MINOR: quic: Missing retransmission from qc_prep_fast_retrans() - MINOR: quic: Non-optimal use of a TX buffer - BUG/MEDIUM: mworker: don't use _getsocks in wait mode - BUG/MINOR: ssl: Store client SNI in SSL context in case of ClientHello error - BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data - DOC: internals: document the pools architecture and API - CI: github actions: clean default step conditions - BUILD: cpuset: fix build issue on macos introduced by previous change - MINOR: quic: Remaining TRACEs with connection as firt arg - MINOR: quic: Reset ->conn quic_conn struct member when calling qc_release() - MINOR: quic: Flag the connection as being attached to a listener - MINOR: quic: Wrong CRYPTO frame concatenation - MINOR: quid: Add traces quic_close() and quic_conn_io_cb() - REGTESTS: ssl: Fix ssl_errors regtest with OpenSSL 1.0.2 - MINOR: quic: Do not dereference ->conn quic_conn struct member - MINOR: quic: fix return of quic_dgram_read - MINOR: quic: add config parse source file - MINOR: quic: implement Retry TLS AEAD tag generation - MEDIUM: quic: implement Initial token parsing - MINOR: quic: define retry_source_connection_id TP - MEDIUM: quic: implement Retry emission - MINOR: quic: free xprt tasklet on its thread - BUG/MEDIUM: connection: properly leave stopping list on error - MINOR: pools: enable pools with DEBUG_FAIL_ALLOC as well - MINOR: quic: As server, skip 0-RTT packet number space - MINOR: quic: Do not wakeup the I/O handler before the mux is started - BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer - CI: github actions: use cache for OpenTracing - BUG/MINOR: httpclient: don't send an empty body - BUG/MINOR: httpclient: set default Accept and User-Agent headers - BUG/MINOR: httpclient/lua: don't pop the lua stack when getting headers - BUILD/MINOR: fix solaris build with clang. - BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl - CI: refactor OpenTracing build script - DOC: management: mark "set server ssl" as deprecated - MEDIUM: cli: yield between each pipelined command - MINOR: channel: add new function co_getdelim() to support multiple delimiters - BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands - MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change - MINOR: quic: Retransmit the TX frames in the same order - MINOR: quic: Remove the packet number space TX MT_LIST - MINOR: quic: Splice the frames which could not be added to packets - MINOR: quic: Add the number of TX bytes to traces - CLEANUP: quic: Replace <nb_pto_dgrams> by <probe> - MINOR: quic: Send two ack-eliciting packets when probing packet number spaces - MINOR: quic: Probe regardless of the congestion control - MINOR: quic: Speeding up handshake completion - MINOR: quic: Release RX Initial packets asap - MINOR: quic: Release asap TX frames to be transmitted - MINOR: quic: Probe even if coalescing - BUG/MEDIUM: cli: Never wait for more data on client shutdown - BUG/MEDIUM: mcli: do not try to parse empty buffers - BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them - BUG/MINOR: stream: make the call_rate only count the no-progress calls - MINOR: quic: do not use quic_conn after dropping it - MINOR: quic: adjust quic_conn refcount decrement - MINOR: quic: fix race-condition on xprt tasklet free - MINOR: quic: free SSL context on quic_conn free - MINOR: quic: Add QUIC_FT_RETIRE_CONNECTION_ID parsing case - MINOR: quic: Wrong packet number space selection - DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY - MINOR: quic: add missing include in quic_sock - MINOR: quic: fix indentation in qc_send_ppkts - MINOR: quic: remove dereferencement of connection when possible - MINOR: quic: set listener accept cb on parsing - MEDIUM: quic/ssl: add new ex data for quic_conn - MINOR: quic: initialize ssl_sock_ctx alongside the quic_conn - MINOR: ssl: fix build in release mode - MINOR: pools: partially uninline pool_free() - MINOR: pools: partially uninline pool_alloc() - MINOR: pools: prepare POOL_EXTRA to be split into multiple extra fields - MINOR: pools: extend pool_cache API to pass a pointer to a caller - DEBUG: pools: add new build option DEBUG_POOL_TRACING - DEBUG: cli: add a new "debug dev fd" expert command - MINOR: fd: register the write side of the poller pipe as well - CI: github actions: use cache for SSL libs - BUILD: debug/cli: condition test of O_ASYNC to its existence - BUILD: pools: fix build error on DEBUG_POOL_TRACING - MINOR: quic: refactor header protection removal - MINOR: quic: handle app data according to mux/connection layer status - MINOR: quic: refactor app-ops initialization - MINOR: receiver: define a flag for local accept - MEDIUM: quic: flag listener for local accept - MINOR: quic: do not manage connection in xprt snd_buf - MINOR: quic: remove wait handshake/L6 flags on init connection - MINOR: listener: add flags field - MINOR: quic: define QUIC flag on listener - MINOR: quic: create accept queue for QUIC connections - MINOR: listener: define per-thr struct - MAJOR: quic: implement accept queue - CLEANUP: mworker: simplify mworker_free_child() - BUILD/DEBUG: lru: update the standalone code to support the revision - DEBUG: lru: use a xorshift generator in the testing code - BUG/MAJOR: compiler: relax alignment constraints on certain structures - BUG/MEDIUM: fd: always align fdtab[] to 64 bytes - MINOR: quic: No DCID length for datagram context - MINOR: quic: Comment fix about the token found in Initial packets - MINOR: quic: Get rid of a struct buffer in quic_lstnr_dgram_read() - MINOR: quic: Remove the QUIC haproxy server packet parser - MINOR: quic: Add new defintion about DCIDs offsets - MINOR: quic: Add a list to QUIC sock I/O handler RX buffer - MINOR: quic: Allocate QUIC datagrams from sock I/O handler - MINOR: proto_quic: Allocate datagram handlers - MINOR: quic: Pass CID as a buffer to quic_get_cid_tid() - MINOR: quic: Convert quic_dgram_read() into a task - CLEANUP: quic: Remove useless definition - MINOR: proto_quic: Wrong allocations for TX rings and RX bufs - MINOR: quic: Do not consume the RX buffer on QUIC sock i/o handler side - MINOR: quic: Do not reset a full RX buffer - MINOR: quic: Attach all the CIDs to the same connection - MINOR: quic: Make usage of by datagram handler trees - MEDIUM: da: new optional data file download scheduler service. - MEDIUM: da: update doc and build for new scheduler mode service. - MEDIUM: da: update module to handle schedule mode. - MINOR: quic: Drop Initial packets with wrong ODCID - MINOR: quic: Wrong RX buffer tail handling when no more contiguous data - MINOR: quic: Iterate over all received datagrams - MINOR: quic: refactor quic CID association with threads - BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names - DEV: flags: Add missing flags - BUG/MINOR: sink: Use the right field in appctx context in release callback - MINOR: sock: move the unused socket cleaning code into its own function - BUG/MEDIUM: mworker: close unused transferred FDs on load failure - BUILD: atomic: make the old HA_ATOMIC_LOAD() support const pointers - BUILD: cpuset: do not use const on the source of CPU_AND/CPU_ASSIGN - BUILD: checks: fix inlining issue on set_srv_agent_[addr,port} - BUILD: vars: avoid overlapping field initialization - BUILD: server-state: avoid using not-so-portable isblank() - BUILD: mux_fcgi: avoid aliasing of a const struct in traces - BUILD: tree-wide: mark a few numeric constants as explicitly long long - BUILD: tools: fix warning about incorrect cast with dladdr1() - BUILD: task: use list_to_mt_list() instead of casting list to mt_list - BUILD: mworker: include tools.h for platforms without unsetenv() - BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload - MINOR: mworker: set the master side of ipc_fd in the worker to -1 - MINOR: mworker: allocate and initialize a mworker_proc - CI: Consistently use actions/checkout@v2 - REGTESTS: Remove REQUIRE_VERSION=1.8 from all tests - MINOR: mworker: sets used or closed worker FDs to -1 - MINOR: quic: Try to accept 0-RTT connections - MINOR: quic: Do not try to treat 0-RTT packets without started mux - MINOR: quic: Do not try to accept a connection more than one time - MINOR: quic: Initialize the connection timer asap - MINOR: quic: Do not use connection struct xprt_ctx too soon - Revert "MINOR: mworker: sets used or closed worker FDs to -1" - BUILD: makefile: avoid testing all -Wno-* options when not needed - BUILD: makefile: validate support for extra warnings by batches - BUILD: makefile: only compute alternative options if required - DEBUG: fd: make sure we never try to insert/delete an impossible FD number - MINOR: mux-quic: add comment - MINOR: mux-quic: properly initialize qcc flags - MINOR: mux-quic: do not consider CONNECTION_CLOSE for the moment - MINOR: mux-quic: create a timeout task - MEDIUM: mux-quic: delay the closing with the timeout - MINOR: mux-quic: release idle conns on process stopping - MINOR: listener: replace the listener's spinlock with an rwlock - BUG/MEDIUM: listener: read-lock the listener during accept() - MINOR: mworker/cli: set expert/experimental mode from the CLI	2022-02-01 18:06:59 +01:00
Willy Tarreau	73dec76e85	[RELEASE] Released version 2.6-dev0 ... Released version 2.6-dev0 with the following main changes : - MINOR: version: it's development again	2021-11-23 15:50:11 +01:00
Willy Tarreau	f2e0833f16	[RELEASE] Released version 2.5.0 ... Released version 2.5.0 with the following main changes : - BUILD: SSL: add quictls build to scripts/build-ssl.sh - BUILD: SSL: add QUICTLS to build matrix - CLEANUP: sock: Wrap `accept4_broken = 1` into additional parenthesis - BUILD: cli: clear a maybe-unused warning on some older compilers - BUG/MEDIUM: cli: make sure we can report a warning from a bind keyword - BUG/MINOR: ssl: make SSL counters atomic - CLEANUP: assorted typo fixes in the code and comments - BUG/MINOR: ssl: free correctly the sni in the backend SSL cache - MINOR: version: mention that it's stable now	2021-11-23 15:40:21 +01:00
Willy Tarreau	a99cdfb531	[RELEASE] Released version 2.5-dev15 ... Released version 2.5-dev15 with the following main changes : - BUG/MINOR: stick-table/cli: Check for invalid ipv6 key - CLEANUP: peers: Remove useless test on peer variable in peer_trace() - DOC: log: Add comments to specify when session's listener is defined or not - BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C - REGTESTS: ssl_crt-list_filters: feature cmd incorrectly set - DOC: internals: document the list API - BUG/MINOR: h3: ignore unknown frame types - MINOR: quic: redirect app_ops snd_buf through mux - MEDIUM: quic: inspect ALPN to install app_ops - MINOR: quic: support hq-interop - MEDIUM: quic: send version negotiation packet on unknown version - BUG/MEDIUM: mworker: cleanup the listeners when reexecuting - DOC: internals: document the scheduler API - BUG/MINOR: quic: fix version negotiation packet generation - CLEANUP: ssl: fix wrong #else commentary - MINOR: config: support default values for environment variables - SCRIPTS: run-regtests: reduce the number of processes needed to check options - SCRIPT: run-regtests: avoid several calls to grep to test for features - SCRIPT: run-regtests: avoid calling awk to compute the version - REGTEST: set retries count to zero for all tests that expect at 503 - REGTESTS: make tcp-check_min-recv fail fast - REGTESTS: extend the default I/O timeouts and make them overridable - BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3 - BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found - REGTESTS: ssl: test the TLS resumption - BUILD: makefile: stop opening sub-shells for each and every command - BUILD: makefile: reorder objects by build time - BUG/MEDIUM: mux-h2: always process a pending shut read - MINOR: quic_sock: missing CO_FL_ADDR_TO_SET flag - MINOR: quic: Possible wrong connection identification - MINOR: quic: Correctly pad UDP datagrams - MINOR: quic: Support transport parameters draft TLS extension - MINOR: quic: Anti-amplification implementation - MINOR: quic: Wrong Initial packet connection initialization - MINOR: quic: Wrong ACK range building - MINOR: quic: Update some QUIC protocol errors - MINOR: quic: Send CONNECTION_CLOSE frame upon TLS alert - MINOR: quic: Wrong largest acked packet number parsing - MINOR: quic: Add minimalistic support for stream flow control frames - MINOR: quic: Wrong value for version negotiation packet 'Unused' field - MINOR: quic: Support draft-29 QUIC version - BUG/MINOR: quic: fix segfault on trace for version negotiation - BUG/MINOR: hq-interop: fix potential NULL dereference - BUILD: quic: fix potential NULL dereference on xprt_quic - DOC: lua: documentation about the httpclient API - BUG/MEDIUM: cache/cli: make "show cache" thread-safe - BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found - BUG/MINOR: shctx: do not look for available blocks when the first one is enough - MINOR: shctx: add a few BUG_ON() for consistency checks	2021-11-19 19:30:04 +01:00
Willy Tarreau	d83f6e6224	[RELEASE] Released version 2.5-dev14 ... Released version 2.5-dev14 with the following main changes : - DEV: coccinelle: Remove unused `expression e` - DEV: coccinelle: Add rule to use `istend()` where possible - CLEANUP: Apply ist.cocci - CLEANUP: Re-apply xalloc_size.cocci - CLEANUP: halog: make the default usage message fit in small screens - MINOR: h3/qpack: fix gcc11 warnings - MINOR: mux-quic: fix gcc11 warning - MINOR: h3: fix potential NULL dereference - MINOR: quic: Fix potential null pointer dereference - CLEANUP: halog: remove unused strl2ui() - OPTIM: halog: improve field parser speed for modern compilers - OPTIM: halog: skip fields 64 bits at a time when supported - DEV: coccinelle: Add rule to use `isttrim()` where possible - CLEANUP: Apply ist.cocci - DEV: coccinelle: Add rule to use `chunk_istcat()` instead of `chunk_memcat()` - DEV: coccinelle: Add rule to use `chunk_istcat()` instead of `chunk_strncat()` - CLEANUP: Apply ist.cocci - CLEANUP: chunk: Remove duplicated chunk_Xcat implementation - CLEANUP: chunk: remove misleading chunk_strncat() function - BUG/MINOR: cache: properly ignore unparsable max-age in quotes - Revert "DEV: coccinelle: Add rule to use `chunk_istcat()` instead of `chunk_strncat()`" - DOC: stats: fix location of the text representation - DOC: internals: document the IST API - BUG/MINOR: httpclient/lua: rcv freeze when no request payload - BUG/MEDIUM: httpclient: channel_add_input() must use htx->data - MINOR: promex: backend aggregated server check status - DOC: config: Fix typo in ssl_fc_unique_id description - BUG/MINOR: http-ana: Apply stop to the current section for http-response rules - Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back" - DOC: config: Be more explicit in "allow" actions description - DOC: lua: Be explicit with the Reply object limits - MINOR: mux-h1: Slightly Improve H1 traces - BUG/MEDIUM: conn-stream: Don't reset CS flags on close - CLEANUP: mworker: remove any relative PID reference - MEDIUM: mworker: reexec in waitpid mode after successful loading - MINOR: mworker: clarify starting/failure messages - MINOR: mworker: only increment the number of reload in wait mode - MINOR: mworker: implement a reload failure counter - MINOR: mworker: ReloadFailed shown depending on failedreload - MINOR: mworker: change the way we set PROC_O_LEAVING - BUG/MINOR: mworker: doesn't launch the program postparser - DOC: management: edit the "show proc" example to show the current output - BUG/MEDIUM: httpclient/cli: free of unallocated hc->req.uri - REGTESTS: httpclient/lua: add greater body values - BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value - BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode - BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent - BUILD: makefile: simplify detection of libatomic	2021-11-14 16:04:57 +01:00
Willy Tarreau	08d3220de5	[RELEASE] Released version 2.5-dev13 ... Released version 2.5-dev13 with the following main changes : - SCRIPTS: git-show-backports: re-enable file-based filtering - MINOR: jwt: Make invalid static JWT algorithms an error in `jwt_verify` converter - MINOR: mux-h2: add trace on extended connect usage - BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support - MINOR: stream/mux: implement websocket stream flag - MINOR: connection: implement function to update ALPN - MINOR: connection: add alternative mux_ops param for conn_install_mux_be - MEDIUM: server/backend: implement websocket protocol selection - MINOR: server: add ws keyword - BUG/MINOR: resolvers: fix sent messages were counted twice - BUG/MINOR: resolvers: throw log message if trash not large enough for query - MINOR: resolvers/dns: split dns and resolver counters in dns_counter struct - MEDIUM: resolvers: rename dns extra counters to resolvers extra counters - BUG/MINOR: jwt: Fix jwt_parse_alg incorrectly returning JWS_ALG_NONE - DOC: add QUIC instruction in INSTALL - CLEANUP: halog: Remove dead stores - DEV: coccinelle: Add ha_free.cocci - CLEANUP: Apply ha_free.cocci - DEV: coccinelle: Add rule to use `istnext()` where possible - CLEANUP: Apply ist.cocci - REGTESTS: Use `feature cmd` for 2.5+ tests (2) - DOC: internals: move some API definitions to an "api" subdirectory - MINOR: quic: Allocate listener RX buffers - CLEANUP: quic: Remove useless code - MINOR: quic: Enhance the listener RX buffering part - MINOR: quic: Remove a useless lock for CRYPTO frames - MINOR: quic: Use QUIC_LOCK QUIC specific lock label. - MINOR: backend: Get client dst address to set the server's one only if needful - MINOR: compression: Warn for 'compression offload' in defaults sections - MEDIUM: connection: rename fc_conn_err and bc_conn_err to fc_err and bc_err - DOC: configuration: move the default log formats to their own section - MINOR: ssl: make the ssl_fc_sni() sample-fetch function always available - MEDIUM: log: add the client's SNI to the default HTTPS log format - DOC: config: add an example of reasonably complete error-log-format - DOC: config: move error-log-format before custom log format	2021-11-06 09:25:57 +01:00
Willy Tarreau	35dc13f224	[RELEASE] Released version 2.5-dev12 ... Released version 2.5-dev12 with the following main changes : - MINOR: httpclient: support payload within a buffer - MINOR: httpclient/lua: support more HTTP methods - MINOR: httpclient/lua: return an error when it can't generate the request - CLEANUP: lua: Remove any ambiguities about lua txn execution context flags - BUG/MEDIUM: lua: fix invalid return types in hlua_http_msg_get_body - CLEANUP: connection: No longer export make_proxy_line_v1/v2 functions - CLEANUP: tools: Use const address for get_net_port() and get_host_port() - CLEANUP: lua: Use a const address to retrieve info about a connection - MINOR: connection: Add function to get src/dst without updating the connection - MINOR: session: Add src and dst addresses to the session - MINOR: stream-int: Add src and dst addresses to the stream-interface - MINOR: frontend: Rely on client src and dst addresses at stream level - MINOR: log: Rely on client addresses at the appropriate level to log messages - MINOR: session: Rely on client source address at session level to log error - MINOR: http-ana: Rely on addresses at stream level to set xff and xot headers - MINOR: http-fetch: Rely on addresses at stream level in HTTP sample fetches - MINOR: mux-fcgi: Rely on client addresses at stream level to set default params - MEDIUM: tcp-sample: Rely on addresses at the appropriate level in tcp samples - MEDIUM: connection: Rely on addresses at stream level to make proxy line - MEDIUM: backend: Rely on addresses at stream level to init server connection - MEDIUM: connection: Assign session addresses when PROXY line is received - MEDIUM: connection: Assign session addresses when NetScaler CIP proto is parsed - MEDIUM: tcp-act: Set addresses at the apprioriate level in set-(src/dst) actions - MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules - DOC: config: Fix alphabetical order of fc_* samples - MINOR: tcp-sample: Add samples to get original info about client connection - REGTESTS: Add script to test client src/dst manipulation at different levels - MINOR: stream: Use backend stream-interface dst address instead of target_addr - BUILD: log: Fix compilation without SSL support - DEBUG: protocol: yell loudly during registration of invalid sock_domain - MINOR: protocols: add a new protocol type selector - MINOR: protocols: make use of the protocol type to select the protocol - MINOR: protocols: replace protocol_by_family() with protocol_lookup() - MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX - CLEANUP: jwt: Remove the use of a trash buffer in jwt_jwsverify_hmac() - CLEANUP: jwt: Remove the use of a trash buffer in jwt_jwsverify_rsa_ecdsa() - DEV: coccinelle: Add realloc_leak.cocci - CLEANUP: hlua: Remove obsolete branch in `hlua_alloc()` - BUILD: atomic: prefer __atomic_compare_exchange_n() for __ha_cas_dw() - BUILD: atomic: fix build on mac/arm64 - MINOR: atomic: remove the memcpy() call and dependency on string.h - MINOR: httpclient: request streaming with a callback - MINOR: httpclient/lua: handle the streaming into the lua applet - REGTESTS: lua: test httpclient with body streaming - DOC: halog: Move the `-qry` parameter into the correct section in help text - MINOR: halog: Rename -qry to -query - CLEANUP: halog: Use consistent indentation in help() - BUG/MINOR: halog: Add missing newlines in die() messages - MINOR: halog: Add support for extracting captures using -hdr - DOC: Typo fixed "it" should be "is" - BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed - BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released - BUG/MEDIUM: resolvers: Don't recursively perform requester unlink - BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration - BUG/MINOR: http: Authorization value can have multiple spaces after the scheme - BUG/MINOR: http: http_auth_bearer fetch does not work on custom header name - BUG/MINOR: httpclient/lua: misplaced luaL_buffinit() - BUILD/MINOR: cpuset freebsd build fix - BUG/MINOR: httpclient: use a placeholder value for Host header - BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data - BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions - MINOR: stream: Improve dump of bogus streams - DOC/peers: some grammar fixes for peers 2.1 spec - MEDIUM: vars: make the var() sample fetch function really return type ANY - MINOR: vars: add "set-var" for "tcp-request connection" rules.	2021-11-02 18:05:41 +01:00
Willy Tarreau	b4d0cd02c1	[RELEASE] Released version 2.5-dev11 ... Released version 2.5-dev11 with the following main changes : - DEV: coccinelle: Add strcmp.cocci - CLEANUP: Apply strcmp.cocci - CI: Add `permissions` to GitHub Actions - CI: Clean up formatting in GitHub Action definitions - MINOR: add ::1 to predefined LOCALHOST acl - CLEANUP: assorted typo fixes in the code and comments - CLEANUP: Consistently `unsigned int` for bitfields - MEDIUM: resolvers: lower-case labels when converting from/to DNS names - MEDIUM: resolvers: replace bogus resolv_hostname_cmp() with memcmp() - MINOR: jwt: Empty the certificate tree during deinit - MINOR: jwt: jwt_verify returns negative values in case of error - MINOR: jwt: Do not rely on enum order anymore - BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error - MINOR: httpclient/cli: access should be only done from expert mode - DOC: management: doc about the CLI httpclient - BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors - BUG/MAJOR: dns: tcp session can remain attached to a list after a free - BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier - CLEANUP: dns: always detach the appctx from the dns session on release - DEBUG: dns: add a few more BUG_ON at sensitive places - BUG/MAJOR: resolvers: add other missing references during resolution removal - CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records() - BUILD: resolvers: avoid a possible warning on null-deref - BUG/MEDIUM: resolvers: always check a valid item in query_list - CLEANUP: always initialize the answer_list - CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters - CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT - MEDIUM: resolvers: use a kill list to preserve the list consistency - MEDIUM: resolvers: remove the last occurrences of the "safe" argument - BUG/MEDIUM: checks: fix the starting thread for external checks - MEDIUM: resolvers: replace the answer_list with a (flat) tree - MEDIUM: resolvers: hash the records before inserting them into the tree - BUG/MAJOR: buf: fix varint API post- vs pre- increment - OPTIM: resolvers: move the eb32 node before the data in the answer_item - MINOR: list: add new macro LIST_INLIST_ATOMIC() - OPTIM: dns: use an atomic check for the list membership - BUG/MINOR: task: do not set TASK_F_USR1 for no reason - BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame - MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close - MINOR: mux-h2: perform a full cycle shutdown+drain on close - CLEANUP: resolvers: get rid of single-iteration loop in resolv_get_ip_from_response() - MINOR: quic: Increase the size of handshake RX UDP datagrams - BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems - MINOR: memprof: report the delta between alloc and free on realloc() - MINOR: memprof: add one pointer size to the size of allocations - BUILD: fix compilation on NetBSD - MINOR: backend: add traces for idle connections reuse - BUG/MINOR: backend: fix improper insert in avail tree for always reuse - MINOR: backend: improve perf with tcp proxies skipping idle conns - MINOR: connection: remove unneeded memset 0 for idle conns	2021-10-22 19:40:44 +02:00
Willy Tarreau	f2b1b4dd14	[RELEASE] Released version 2.5-dev10 ... Released version 2.5-dev10 with the following main changes : - MINOR: initcall: Rename __GLOBL and __GLOBL1. - MINOR: rules: add a new function new_act_rule() to allocate act_rules - MINOR: rules: add a file name and line number to act_rules - MINOR: stream: report the current rule in "show sess all" when known - MINOR: stream: report the current filter in "show sess all" when known - CLEANUP: stream: Properly indent current_rule line in "show sess all" - BUG/MINOR: lua: Fix lua error handling in `hlua_config_prepend_path()` - CI: github: switch to OpenSSL 3.0.0 - REGTESTS: ssl: Fix references to removed option in test description - MINOR: ssl: Add ssllib_name_startswith precondition - REGTESTS: ssl: Fix ssl_errors test for OpenSSL v3 - REGTESTS: ssl: Reenable ssl_errors test for OpenSSL only - REGTESTS: ssl: Use mostly TLSv1.2 in ssl_errors test - MEDIUM: mux-quic: rationalize tx buffers between qcc/qcs - MEDIUM: h3: properly manage tx buffers for large data - MINOR: mux-quic: standardize h3 settings sending - CLEANUP: h3: remove dead code - MINOR: mux-quic: implement standard method to detect if qcc is dead - MEDIUM: mux-quic: defer stream shut if remaining tx data - MINOR: mux: remove last occurences of qcc ring buffer - MINOR: quic: handle CONNECTION_CLOSE frame - REGTESTS: ssl: re-enable set_ssl_cert_bundle.vtc - MINOR: ssl: add ssl_fc_is_resumed to "option httpslog" - MINOR: http: Add http_auth_bearer sample fetch - MINOR: jwt: Parse JWT alg field - MINOR: jwt: JWT tokenizing helper function - MINOR: jwt: Insert public certificates into dedicated JWT tree - MINOR: jwt: jwt_header_query and jwt_payload_query converters - MEDIUM: jwt: Add jwt_verify converter to verify JWT integrity - REGTESTS: jwt: Add tests for the jwt_verify converter - BUILD: jwt: fix declaration of EVP_KEY in jwt-h.h - MINOR: proto_tcp: use chunk_appendf() to ouput socket setup errors - MINOR: proto_tcp: also report the attempted MSS values in error message - MINOR: inet: report the faulty interface name in "bind" errors - MINOR: protocol: report the file and line number for binding/listening errors - MINOR: protocol: uniformize protocol errors - MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero - BUG/MEDIUM: resolver: make sure to always use the correct hostname length - BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records - MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero - MEDIUM: listeners: split the thread mask between receiver and bind_conf - MINOR: listeners: add clone_listener() to duplicate listeners at boot time - MEDIUM: listener: add the "shards" bind keyword - BUG/MEDIUM: resolvers: use correct storage for the target address - MINOR: resolvers: merge address and target into a union "data" - BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix - BUG/MEDIUM: jwt: fix base64 decoding error detection - BUG/MINOR: jwt: use CRYPTO_memcmp() to compare HMACs - DOC: jwt: fix a typo in the jwt_verify() keyword description - BUG/MEDIUM: sample/jwt: fix another instance of base64 error detection - BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back - BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data - DOC: config: Move 'tcp-response content' at the right place - BUG/MINOR: proxy: Use .disabled field as a bitfield as documented - MINOR: proxy: Introduce proxy flags to replace disabled bitfield - MINOR: sample/arg: Be able to resolve args found in defaults sections - MEDIUM: proxy: Warn about ambiguous use of named defaults sections - MINOR: proxy: Be able to reference the defaults section used by a proxy - MINOR: proxy: Add PR_FL_READY flag on fully configured and usable proxies - MINOR: config: Finish configuration for referenced default proxies - MINOR: config: No longer remove previous anonymous defaults section - MINOR: tcpcheck: Support 2-steps args resolution in defaults sections - MEDIUM: rules/acl: Parse TCP/HTTP rules and acls defined in defaults sections - MEDIUM: tcp-rules: Eval TCP rules defined in defaults sections - MEDIUM: http-ana: Eval HTTP rules defined in defaults sections - BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags - REGTESTS: Add scripts to test support of TCP/HTTP rules in defaults sections - DOC: config: Add documentation about TCP/HTTP rules in defaults section - DOC: config: Rework and uniformize how TCP/HTTP rules are documented - BUG/MINOR: proxy: Release ACLs and TCP/HTTP rules of default proxies - BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD - BUG/MINOR: sample: fix backend direction flags consecutive to last fix - BUG/MINOR: listener: fix incorrect return on out-of-memory - BUG/MINOR: listener: add an error check for unallocatable trash - CLEANUP: listeners: remove unreachable code in clone_listener()	2021-10-16 15:24:22 +02:00
Willy Tarreau	4c67bd6a06	[RELEASE] Released version 2.5-dev9 ... Released version 2.5-dev9 with the following main changes : - head-truc - REGTESTS: lua: test the httpclient:get() feature - Revert "head-truc" - BUG/MEDIUM: httpclient: replace ist0 by istptr - MINOR: config: use a standard parser for the "nbthread" keyword - CLEANUP: init: remove useless test against MAX_THREADS in affinity loop - MEDIUM: init: de-uglify the per-thread affinity setting - MINOR: init: extract the setup and end of threads to their own functions - MINOR: log: Try to get the status code when MUX_EXIT_STATUS is retrieved - MINOR: mux-h1: Set error code if possible when MUX_EXIT_STATUS is returned - MINOR: mux-h1: Be able to set custom status code on parsing error - MEDIUM: mux-h1: Reject HTTP/1.0 GET/HEAD/DELETE requests with a payload - MEDIUM: h1: Force close mode for invalid uses of T-E header - BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers" - MINOR: http: Add 422-Unprocessable-Content error message - MINOR: h1: Change T-E header parsing to fail if chunked encoding is found twice - BUG/MEDIUM: mux-h1/mux-fcgi: Reject messages with unknown transfer encoding - REGTESTS: Add script to validate T-E header parsing - REORG: pools: move default settings to defaults.h - DOC: peers: fix doc "enable" statement on "peers" sections - MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options - MINOR: ssl: Set connection error code in case of SSL read or write fatal failure - MINOR: ssl: Rename ssl_bc_hsk_err to ssl_bc_err - MINOR: ssl: Store the last SSL error code in case of read or write failure - REGTESTS: ssl: enable show_ssl_ocspresponse.vtc again - REGTESTS: ssl: enable ssl_crt-list_filters.vtc again - BUG/MEDIUM: lua: fix wakeup condition from sleep() - BUG/MAJOR: lua: use task_wakeup() to properly run a task once - MINOR: arg: Be able to forbid unresolved args when building an argument list - BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing - BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input - MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue() - REGTESTS: ssl: show_ssl_ocspresponse w/ freebsd won't use base64 - REGTESTS: ssl: wrong feature cmd in show_ssl_ocspresponse.vtc - CLEANUP: tasks: remove the long-unused work_lists - MINOR: task: provide 3 task_new_* wrappers to simplify the API - MINOR: time: uninline report_idle() and move it to task.c - REORG: sched: move idle time calculation from time.h to task.h - REORG: sched: move the stolen CPU time detection to sched_entering_poll() - BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release - BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule - MINOR: httpclient: destroy() must free the headers and the ists - MINOR: httpclient: set HTTPCLIENT_F_ENDED only in release - MINOR: httpclient: stop_and_destroy() ask the applet to autokill - MINOR: httpclient: test if started during stop_and_destroy() - MINOR: httpclient/lua: implement garbage collection - BUG/MEDIUM: httpclient/lua: crash because of b_xfer and get_trash_chunk() - MINOR: httpclient: destroy checks if a client was started but not stopped - BUG/MINOR: httpclient/lua: does not process headers when failed - MINOR: httpclient/lua: supports headers via named arguments - CLEANUP: server: always include the storage for SSL settings - CLEANUP: sample: rename sample_conv_var2smp() to *_sint - CLEANUP: sample: uninline sample_conv_var2smp_str() - MINOR: sample: provide a generic var-to-sample conversion function - BUG/MEDIUM: sample: properly verify that variables cast to sample - BUILD: action: add the relevant structures for function arguments - BUILD: extcheck: needs to include stream-t.h - BUILD: hlua: needs to include stream-t.h - BUILD: stats: define several missing structures in stats.h - BUILD: resolvers: define missing types in resolvers.h - BUILD: httpclient: include missing ssl_sock-t - BUILD: sample: include openssl-compat - BUILD: http_ana: need to include proxy-t to get redirect_rule - BUILD: http_rules: requires http_ana-t.h for REDIRECT_* - BUILD: vars: need to include xxhash - BUILD: peers: need to include eb{32/mb/pt}tree.h - BUILD: ssl_ckch: include ebpttree.h in ssl_ckch.c - BUILD: compiler: add the container_of() and container_of_safe() macros - BUILD: idleconns: include missing ebmbtree.h at several places - BUILD: connection: connection.h needs list.h and server.h - BUILD: tree-wide: add missing http_ana.h from many places - BUILD: cfgparse-ssl: add missing errors.h - BUILD: tcp_sample: include missing errors.h and session-t.h - BUILD: mworker: mworker-prog needs time.h for the 'now' variable - BUILD: tree-wide: add several missing activity.h - BUILD: compat: fix -Wundef on SO_REUSEADDR - CLEANUP: pools: pools-t.h doesn't need to include thread-t.h - REORG: pools: uninline the UAF allocator and force-inline the rest - REORG: thread: uninline the lock-debugging code - MINOR: thread/debug: replace nsec_now() with now_mono_time() - CLEANUP: remove some unneeded includes from applet-t.h - REORG: listener: move bind_conf_alloc() and listener_state_str() to listener.c - CLEANUP: listeners: do not include openssl-compat - CLEANUP: servers: do not include openssl-compat - REORG: ssl: move ssl_sock_is_ssl() to connection.h and rename it - CLEANUP: mux_fcgi: remove dependency on ssl_sock - CLEANUP: ssl/server: move ssl_sock_set_srv() to srv_set_ssl() in server.c - REORG: ssl-sock: move the sslconns/totalsslconns counters to global - REORG: sample: move the crypto samples to ssl_sample.c - REORG: sched: moved samp_time and idle_time to task.c as well - REORG: time/ticks: move now_ms and global_now_ms definitions to ticks.h - CLEANUP: tree-wide: remove unneeded include time.h in ~20 files - REORG: activity: uninline activity_count_runtime() - REORG: acitvity: uninline sched_activity_entry() - CLEANUP: stream: remove many unneeded includes from stream-t.h - CLEANUP: stick-table: no need to include socket nor in.h - MINOR: connection: use uint64_t for the hashes - REORG: connection: move the hash-related stuff to connection.c - REORG: connection: uninline conn_notify_mux() and conn_delete_from_tree() - REORG: server: uninline the idle conns management functions - REORG: ebtree: split structures into their own file ebtree-t.h - CLEANUP: tree-wide: only include ebtree-t from type files - REORG: connection: move the largest inlines from connection.h to connection.c - CLEANUP: connection: do not include http_ana! - CLEANUP: connection: remove unneeded tcpcheck-t.h and use only session-t.h - REORG: connection: uninline the rest of the alloc/free stuff - REORG: task: uninline the loop time measurement code - CLEANUP: time: move a few configurable defines to defaults.h - CLEANUP: fd: do not include time.h - REORG: fd: uninline compute_poll_timeout() - CLENAUP: wdt: use ha_tkill() instead of accessing pthread directly - REORG: thread: move the thread init/affinity/stop to thread.c - REORG: thread: move ha_get_pthread_id() to thread.c - MINOR: thread: use a dedicated static pthread_t array in thread.c - CLEANUP: thread: uninline ha_tkill/ha_tkillall/ha_cpu_relax() - DOC: configuration: add clarification on escaping in keyword arguments - BUG/MINOR: task: fix missing include with DEBUG_TASK - MINOR: pools: report the amount used by thread caches in "show pools" - MINOR: quic: Distinguish packet and SSL read enc. level in traces - MINOR: quic: Add a function to dump SSL stack errors - MINOR: quic: BUG_ON() SSL errors. - MINOR: quic: Fix SSL error issues (do not use ssl_bio_and_sess_init()) - BUG/MEDIUM: mux-quic: reinsert all streams in by_id tree - BUG/MAJOR: xprt-quic: do not queue qc timer if not set - MINOR: mux-quic: release connection if no more bidir streams - BUG/MAJOR: quic: remove qc from receiver cids tree on free - BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames - MINOR: qpack: do not encode invalid http status code - MINOR: qpack: support non-indexed http status code encoding - MINOR: qpack: fix memory leak on huffman decoding - CLEANUP: mux-quic: remove unused code - BUG/MINOR: quic: fix includes for compilation - BUILD: connection: avoid a build warning on FreeBSD with SO_USER_COOKIE - BUILD: init: avoid a build warning on FreeBSD with USE_PROCCTL - REORG: time: move time-keeping code and variables to clock.c - REORG: clock: move the updates of cpu/mono time to clock.c - MINOR: activity: get the run_time from the clock updates - CLEANUP: clock: stop exporting before_poll and after_poll - REORG: clock: move the clock_id initialization to clock.c - REORG: clock/wdt: move wdt timer initialization to clock.c - MINOR: clock: move the clock_ids to clock.c - MINOR: wdt: move wd_timer to wdt.c - CLEANUP: wdt: do not remap SI_TKILL to SI_LWP, test the values directly - REORG: thread/sched: move the task_per_thread stuff to thread_ctx - REORG: thread/clock: move the clock parts of thread_info to thread_ctx - REORG: thread/sched: move the thread_info flags to the thread_ctx - REORG: thread/sched: move the last dynamic thread_info to thread_ctx - MINOR: thread: make "ti" a const pointer and clean up thread_info a bit - MINOR: threads: introduce a minimalistic notion of thread-group - MINOR: global: add a new "thread-groups" directive - MINOR: global: add a new "thread-group" directive - MINOR: threads: make tg point to the current thread's group - MEDIUM: threads: automatically assign threads to groups - MINOR: threads: set the group ID and its bit in the thread group - MINOR: threads: set the tid, ltid and their bit in thread_cfg - MEDIUM: threads: replace ha_set_tid() with ha_set_thread() - MINOR: threads: add the current group ID in thread-local "tgid" variable - MINOR: debug: report the group and thread ID in the thread dumps - MEDIUM: listeners: support the definition of thread groups on bind lines - MINOR: threads: add a new function to resolve config groups and masks - MEDIUM: config: resolve relative threads on bind lines to absolute ones - MEDIUM: stick-table: never learn the "conn_cur" value from peers	2021-10-08 18:22:24 +02:00
Willy Tarreau	538f3e04b5	[RELEASE] Released version 2.5-dev8 ... Released version 2.5-dev8 with the following main changes : - BUILD: compiler: fixed a missing test on defined(__GNUC__) - BUILD: halog: fix a -Wundef warning on non-glibc systems - BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl - BUG/MINOR: compat: make sure __WORDSIZE is always defined - BUILD: sample: fix format warning on 32-bit archs in sample_conv_be2dec_check() - CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools() - MINOR: pools: automatically disable malloc_trim() with external allocators - MINOR: pools: report it when malloc_trim() is enabled - DOC: Add .mailmap - CLEANUP: tree-wide: fix prototypes for functions taking no arguments. - CLEANUP: Remove prototype for non-existent thread_get_default_count() - CLEANUP: acl: Remove unused variable when releasing an acl expression - BUG/MAJOR: mux-h1: Don't eval input data if an error was reported - DOC: update Tim's address in .mailmap - MINOR: pools: use mallinfo2() when available instead of mallinfo() - BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check - DOC: management: certificate files must be sanitized before injection - BUG/MINOR: connection: prevent null deref on mux cleanup task allocation - BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc - BUG/MINOR: cli/payload: do not search for args inside payload - BUILD: sockpair: do not set unused flag - BUILD: proto_uxst: do not set unused flag - BUILD: fd: remove unused variable totlen in fd_write_frag_line() - MINOR: applet: remove the thread mask from appctx_new() - REORG: threads: move ha_get_pthread_id() to tinfo.h - CLEANUP: Apply ist.cocci - DEV: coccinelle: Add ist.cocci - CLEANUP: Apply bug_on.cocci - DEV: coccinelle: Add xalloc_size.cocci - DEV: coccinelle: Add bug_on.cocci - CLEANUP: Apply xalloc_size.cocci - DEV: coccinelle: Add xalloc_cast.cocci - BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set - MINOR: httpclient: add the EOH when no headers where provided - CLEANUP: Include check.h in flt_spoe.c - CLEANUP: Remove unreachable `break` from parse_time_err() - BUG/MINOR: server: allow 'enable health' only if check configured - BUG/MINOR: server: alloc dynamic srv ssl ctx if proxy uses ssl chk rule - MINOR: server: enable more keywords for ssl checks for dynamic servers - MINOR: server: enable more check related keywords for dynamic servers - REORG: server: move slowstart init outside of checks - MINOR: server: enable slowstart for dynamic server - MEDIUM: listener: deprecate "process" in favor of "thread" on bind lines - BUG/MEDIUM: leastconn: fix rare possibility of divide by zero - BUG/MINOR: quic: Possible NULL pointer dereferencing when dumping streams. - MINOR: quic: Move transport parmaters to anynomous struct. - MINOR: mux_quic: Add QUIC mux layer. - MINOR: connection: Add callbacks definitions for QUIC. - MINOR: quic: Attach QUIC mux connection objet to QUIC connection. - MINOR: quic: Add a new definition to store STREAM frames. - MINOR: h3: Add HTTP/3 definitions. - MINOR: qpack: Add QPACK compression. - MINOR: quic_sock: Finalize the QUIC connections. - MINOR: quic: Disable the action of ->rcv_buf() xprt callback - MINOR: quic: Add callbacks for (un)scribing to QUIC xprt. - MINOR: quic: Variable-length integer encoding/decoding into/from buffer struct. - BUG/MINOR: quic: Wrong ->accept() error handling - MINOR: quic: Add a wrapper function to update transport parameters. - MINOR: quic: Update the streams transport parameters. - MINOR: quic: Avoid header collisions - MINOR: quic: Replace max_packet_size by max_udp_payload size. - MINOR: quic: Enable some quic, h3 and qpack modules compilation. - MINOR: quic: Move an SSL func call from QUIC I/O handler to the xprt init. - MINOR: quic: Initialize the session before starting the xprt. - BUG/MINOR: quic: Do not check the acception of a new conn from I/O handler. - MINOR: quic: QUIC conn initialization from I/O handler - MINOR: quic: Remove header protection for conn with context - MINOR: quic: Derive the initial secrets asap - MINOR: quic: Remove header protection also for Initial packets - BUG/MINOR: quic: Wrong memory free in quic_update_ack_ranges_list() - MINOR: quic: quic_update_ack_ranges_list() code factorization - MINOR: quic: Useless test in quic_update_ack_ranges_list() - MINOR: quic: Remove a useless variable in quic_update_ack_ranges_list() - BUG/MINOR: quic: Missing cases treatement when updating ACK ranges - CLEAUNUP: quic: Usage of a useless variable in qc_treat_rx_pkts() - BUG/MINOR: quic: Wrong RX packet reference counter usage - MINOR: quic: Do not stop the packet parsing too early in qc_treat_rx_packets() - MINOR: quic: Add a lock for RX packets - MINOR: quic: Move the connection state - MINOR: quic: Replace quic_conn_ctx struct by ssl_sock_ctx struct - MINOR: quic: Replace the RX list of packet by a thread safety one. - MINOR: quic: Replace the RX unprotected packet list by a thread safety one. - MINOR: quic: Add useful traces for I/O dgram handler - MINOR: quic: Do not wakeup the xprt task on ACK receipt - MINOR: quic: Connection allocations rework - MINOR: quic: Move conn_prepare() to ->accept_conn() callback - MINOR: quic: Make qc_lstnr_pkt_rcv() be thread safe. - MINOR: quic: Add a ring buffer implementation for QUIC - MINOR: quic: Prefer x25519 as ECDH preferred parametes. - MINOR: quic: Add the QUIC v1 initial salt. - BUG/MINOR: quic: Too much reduced computed space to build handshake packets - MINOR: net_helper: add functions for pointers - MINOR: quic: Add ring buffer definition (struct qring) for QUIC - MINOR: proto_quic: Allocate TX ring buffers for listeners - MINOR: quic: Initialize pointers to TX ring buffer list - MINOR: quic: Make use of TX ring buffers to send QUIC packets - MINOR: quic_tls: Make use of the QUIC V1 salt. - MINOR: quic: Remove old TX buffer implementation - MINOR: Add function for TX packets reference counting - MINOR: quic: Add TX packets at the very last time to their tree. - MINOR: quic: Unitialized mux context upon Client Hello message receipt. - MINOR: quic: Missing encryption level rx.crypto member initialization and lock. - MINOR: quic: Rename ->rx.rwlock of quic_enc_level struct to ->rx.pkts_rwlock - MINOR: quic: Make qc_treat_rx_pkts() be thread safe. - MINOR: quic: Make ->tx.frms quic_pktns struct member be thread safe - MINOR: quic: Replace quic_tx_frm struct by quic_frame struct - MINOR: quic: Add a mask for TX frame builders and their authorized packet types - MINOR: quic: Add a useful function to compute any frame length. - MINOR: quic: Add the QUIC connection state to traces - MINOR: quic: Store post handshake frame in ->pktns.tx.frms MT_LIST - MINOR: quic: Add the packet type to quic_tx_packet struct - MINOR: quic: Modify qc_do_build_hdshk_pkt() to accept any packet type - MINOR: quic: Atomically handle packet number space ->largest_acked_pn variable - MINOR: quic: Modify qc_build_cfrms() to support any frame - MINOR: quic: quic_conn_io_cb() task rework - MINOR: quic: Make qc_build_hdshk_pkt() atomically consume a packet number - MINOR: quic: qc_do_build_hdshk_pkt() does not need to pass a copy of CRYPTO frame - MINOR: quic: Remove Application level related functions - MINOR: quic: Rename functions which do not build only Handshake packets - MINOR: quic: Make circular buffer internal buffers be variable-sized. - MINOR: quic: Add a pool for TX ring buffer internal buffer - MINOR: quic: Make use of the last cbuf API when initializing TX ring buffers - MINOR: quic: Missing acks encoded size updates. - MINOR: quic: Evaluate the packet lengths in advance - MINOR: quic: Update the TLS extension for QUIC transport parameters - MINOR: quic: Fix handshake state debug strings - MINOR: quic: Atomically get/set the connection state - MINOR: quic: Missing QUIC encryption level for qc_build_pkt() - MINOR: quic: Coalesce Application level packets with Handshake packets. - MINOR: quic: Wrong flags handling for acks - MINOR: quic: Missing case when discarding HANDSHAKE secrets - MINOR: quic: Post handshake packet building improvements - MINOR: quic: Prepare Application level packet asap. - MINOR: h3: Send h3 settings asap - MINOR: quic: Wrong STREAM frame length computing - MINOR: quic: Wrong short packet minimum length - MINOR: quic: Prepare STREAM frames to fill QUIC packets - MINOR: h3: change default settings - MINOR: quic-enc: fix varint encoding - MINOR: qpack: fix wrong comment - MINOR: qpack: generate headers list on decoder - MINOR: h3: parse headers to htx - MINOR: h3: allocate stream on headers - MEDIUM: mux-quic: implement ring buffer on stream tx - MINOR: mux-quic: send SETTINGS on uni stream - MINOR: h3: define snd_buf callback and divert mux ops - MINOR: mux-quic: define FIN stream flag - MINOR: qpack: create qpack-enc module - MINOR: qpack: encode headers functions - MINOR: h3: encode htx headers to QPACK - MINOR: h3: send htx data - MINOR: h3/mux: detect fin on last h3 frame of the stream - MINOR: quic: Shorten some handshakes - MINOR: quic: Make QUIC-TLS support at least two initial salts - MINOR: quic: Attach the QUIC connection to a thread. - MINOR: quic: Missing active_connection_id_limit default value - MINOR: quic_sock: Do not flag QUIC connections as being set - MINOR: buf: Add b_force_xfer() function - MINOR: quic: Make use of buffer structs to handle STREAM frames - MINOR: mux_quic: move qc_process() code to qc_send() - MINOR: quic: Add a typedef for unsigned long long - MINOR: quic: Confusion between TX/RX for the frame builders - MINOR: quic: Wrong packet flags settings during frame building - MINOR: quic: Constantness fixes for frame builders/parsers. - MINOR: quic_tls: Client/serveur state reordering - MINOR: quic: Wrong packet loss detection due to wrong pktns order - MINOR: quic: Wrong packet number space selection in quic_loss_pktns() - MINOR: quic: Initial packet number spaced not discarded - MINOR: quic: Add useful trace about pktns discarding - MINOR: mux_quic: Export the mux related flags - MINOR: quic: Implement quic_conn_subscribe() - MINOR: quic: Wake up the mux upon ACK receipt - MINOR: quic: Stream FIN bit fix in qcs_push_frame() - MINOR: quic: Implement qc_process_mux() - MINOR: quic: Wake up the xprt from mux - CLEANUP: quic: Remove useless inline functions - MINOR: quic: RX packets memory leak - MINOR: quic: Possible endless loop in qc_treat_rx_pkts() - MINOR: quic: Crash upon too big packets receipt - MINOR: quic: define close handler - MEDIUM: quic: implement mux release/conn free - MINOR: quic: fix qcc subs initialization - BUG/MINOR: h1-htx: Fix a typo when request parser is reset - BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer - BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data - BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM - MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv() - MINOR: htx: Add an HTX flag to know when a message is fragmented - MINOR: htx: Add a function to know if the free space wraps - BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary - MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf - BUG/MINOR: http-ana: increment internal_errors counter on response error - MINOR: stats: Enable dark mode on stat web page - CLEANUP: stats: Fix some alignment mistakes - MINOR: httpclient: httpclient_data() returns the available data - MINOR: httpclient: httpclient_ended() returns 1 if the client ended - MINOR: httpclient/lua: httpclient:get() API in lua - MINOR: httpclient/lua: implement the headers in the response object - BUG/MINOR: httpclient/lua: return an error on argument check - CLEANUP: slz: Mark `reset_refs` as static	2021-09-24 15:52:17 +02:00
Willy Tarreau	4b3a9fefab	[RELEASE] Released version 2.5-dev7 ... Released version 2.5-dev7 with the following main changes : - BUG/MINOR: config: reject configs using HTTP with bufsize >= 256 MB - CLEANUP: htx: remove comments about "must be < 256 MB" - BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer - Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive" - MINOR: proxy: add a global "grace" directive to postpone soft-stop - MINOR: vars: rename vars_init() to vars_init_head() - CLEANUP: vars: rename sample_clear_stream() to var_unset() - REORG: vars: remerge sample_store{,_stream}() into var_set() - MEDIUM: vars: make the ifexist variant of set-var only apply to the proc scope - MINOR: vars: add a VF_CREATEONLY flag for creation - MINOR: vars: support storing empty sample data with a variable - MINOR: vars: store flags into variables and add VF_PERMANENT - MEDIUM: vars: make var_clear() only reset VF_PERMANENT variables - MEDIUM: vars: pre-create parsed SCOPE_PROC variables as permanent ones - MINOR: vars: preset a random seed to hash variables names - MEDIUM: vars: replace the global name index with a hash - CLEANUP: vars: remove the now unused var_names array - MINOR: vars: centralize the lock/unlock into static inlines - OPTIM: vars: only takes the variables lock on shared entries - OPTIM: vars: remove internal bookkeeping for vars_global_size - OPTIM: vars: do not keep variables usage stats if no limit is set - BUILD: fix dragonfly build again on __read_mostly - CI: Github Actions: temporarily disable Opentracing - BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload - MINOR: htx: Skip headers with no value when adding a header list to a message - CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload - BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached - BUG/MEDIUM: http-ana: Reset channels analysers when returning an error - BUG/MINOR: filters: Set right FLT_END analyser depending on channel - CLEANUP: Add haproxy/xxhash.h to avoid modifying import/xxhash.h - CLEANUP: ebmbtree: Replace always-taken elseif by else - CLEANUP: Move XXH3 macro from haproxy/compat.h to haproxy/xxhash.h - BUILD: opentracing: exclude the use of haproxy variables for the OpenTracing context - BUG/MINOR: opentracing: enable the use of http headers without a set value - CLEANUP: opentracing: use the haproxy function to generate uuid - MINOR: opentracing: change the scope of the variable 'ot.uuid' from 'sess' to 'txn' - CI: Github Actions: re-enable Opentracing - CLEANUP: opentracing: simplify the condition on the empty header - BUG/MEDIUM lua: Add missing call to RESET_SAFE_LJMP in hlua_filter_new()	2021-09-12 11:36:38 +02:00
Willy Tarreau	f653e83064	[RELEASE] Released version 2.5-dev6 ... Released version 2.5-dev6 with the following main changes : - BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time - BUG/MINOR: tools: Fix loop condition in dump_text() - BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER - BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL - BUILD: tools: properly guard __GLIBC__ with defined() - BUILD: globally enable -Wundef - MINOR: log: Remove log-error-via-logformat option - MINOR: log: Add new "error-log-format" option - BUG/MAJOR: queue: better protect a pendconn being picked from the proxy - CLEANUP: Add missing include guard to signal.h - MINOR: ssl: Add new ssl_bc_hsk_err sample fetch - MINOR: connection: Add a connection error code sample fetch for backend side - REGTESTS: ssl: Add tests for bc_conn_err and ssl_bc_hsk_err sample fetches - MINOR: http-rules: add a new "ignore-empty" option to redirects. - CI: Github Actions: temporarily disable BoringSSL builds - BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser - BUG/MINOR: vars: improve accuracy of the rules used to check expression validity - MINOR: sample: add missing ARGC_ entries - BUG/MINOR: vars: properly set the argument parsing context in the expression - DOC: configuration: remove wrong tcp-request examples in tcp-response - MEDIUM: vars: add a new "set-var-fmt" action - BUG/MEDIUM: vars: run over the correct list in release_store_rules() - BUG/MINOR: vars: truncate the variable name in error reports about scope. - BUG/MINOR: vars: do not talk about global section in CLI errors for set-var - CLEANUP: vars: name the temporary proxy "CFG" instead of "CLI" for global vars - MINOR: log: make log-format expressions completely usable outside of req/resp - MINOR: vars: add a "set-var-fmt" directive to the global section - MEDIUM: vars: also support format strings in CLI's "set var" command - CLEANUP: vars: factor out common code from vars_get_by_{desc,name} - MINOR: vars: make vars_get_by_* support an optional default value - MINOR: vars: make the vars() sample fetch function support a default value - BUILD: ot: add argument for default value to vars_get_by_name()	2021-09-03 15:19:56 +02:00
Willy Tarreau	446344ccef	[RELEASE] Released version 2.5-dev5 ... Released version 2.5-dev5 with the following main changes : - MINOR: httpclient: initialize the proxy - MINOR: httpclient: implement a simple HTTP Client API - MINOR: httpclient/cli: implement a simple client over the CLI - MINOR: httpclient/cli: change the User-Agent to "HAProxy" - MEDIUM: ssl: Keep a reference to the client's certificate for use in logs - BUG/MEDIUM: h2: match absolute-path not path-absolute for :path - BUILD/MINOR: ssl: Fix compilation with OpenSSL 1.0.2 - MINOR: server: check if srv is NULL in free_server() - MINOR: proxy: check if p is NULL in free_proxy() - BUG/MEDIUM: cfgparse: do not allocate IDs to automatic internal proxies - BUG/MINOR: http_client: make sure to preset the proxy's default settings - REGTESTS: http_upgrade: fix incorrect expectation on TCP->H1->H2 - REGTESTS: abortonclose: after retries, 503 is expected, not close - REGTESTS: server: fix agent-check syntax and expectation - BUG/MINOR: httpclient: fix uninitialized sl variable - BUG/MINOR: httpclient/cli: change the appctx test in the callbacks - BUG/MINOR: httpclient: check if hdr_num is not 0 - MINOR: httpclient: cleanup the include files - MINOR: hlua: take the global Lua lock inside a global function - MINOR: tools: add FreeBSD support to get_exec_path() - BUG/MINOR: systemd: ExecStartPre must use -Ws - MINOR: systemd: remove the ExecStartPre line in the unit file - MINOR: ssl: add an openssl version string parser - MINOR: cfgcond: implements openssl_version_atleast and openssl_version_before - CLEANUP: ssl: remove useless check on p in openssl_version_parser() - BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions - BUG/MINOR: httpclient: remove deinit of the httpclient - BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec} - MINOR: httpclient: set verify none on the https server - MINOR: httpclient: add the server to the proxy - BUG/MINOR: httpclient: fix Host header - BUILD: httpclient: fix build without OpenSSL - CI: github-actions: remove obsolete options - CLEANUP: assorted typo fixes in the code and comments - MINOR: proc: setting the process to produce a core dump on FreeBSD. - BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2 - MINOR: server: return the next srv instance on free_server - BUG/MINOR: stats: use refcount to protect dynamic server on dump - MEDIUM: server: extend refcount for all servers - MINOR: server: define non purgeable server flag - MINOR: server: mark referenced servers as non purgeable - MINOR: server: mark servers referenced by LUA script as non purgeable - MEDIUM: server: allow to remove servers at runtime except non purgeable - BUG/MINOR: base64: base64urldec() ignores padding in output size check - REGTEST: add missing lua requirements on server removal test - REGTEST: fix haproxy required version for server removal test - BUG/MINOR: proxy: don't dump servers of internal proxies - REGTESTS: Use `feature cmd` for 2.5+ tests - REGTESTS: Remove REQUIRE_VERSION=1.5 from all tests - BUG/MINOR: resolvers: mark servers with name-resolution as non purgeable - MINOR: compiler: implement an ONLY_ONCE() macro - BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords - MEDIUM: ssl: Capture more info from Client Hello - MINOR: sample: Expose SSL captures using new fetchers - MINOR: sample: Add be2dec converter - MINOR: sample: Add be2hex converter - MEDIUM: config: Deprecate tune.ssl.capture-cipherlist-size - BUG/MINOR: time: fix idle time computation for long sleeps - MINOR: time: add report_idle() to report process-wide idle time - BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long - BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING - BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef - BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef - IMPORT: slz: silence a build warning with -Wundef - BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef	2021-08-28 13:46:11 +02:00
Willy Tarreau	08d0f23138	[RELEASE] Released version 2.5-dev4 ... Released version 2.5-dev4 with the following main changes : - MINOR: log: rename 'dontloglegacyconnerr' to 'log-error-via-logformat' - MINOR: doc: rename conn_status in `option httsplog` - MINOR: proxy: disabled takes a stopping and a disabled state - MINOR: stats: shows proxy in a stopped state - BUG/MINOR: server: fix race on error path of 'add server' CLI if track - CLEANUP: thread: fix fantaisist indentation of thread_harmless_till_end() - MINOR: threads: make thread_release() not wait for other ones to complete - MEDIUM: threads: add a stronger thread_isolate_full() call - MEDIUM: servers: make the server deletion code run under full thread isolation - BUG/MINOR: server: remove srv from px list on CLI 'add server' error - MINOR: activity/fd: remove the dead_fd counter - MAJOR: fd: get rid of the DWCAS when setting the running_mask - CLEANUP: fd: remove the now unused fd_set_running() - CLEANUP: fd: remove the now unneeded fd_mig_lock - BUG/MINOR: server: update last_change on maint->ready transitions too - MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure - BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released - BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued - MINOR: server: unmark deprecated on enable health/agent cli - MEDIUM: task: implement tasklet kill - MINOR: server: initialize fields for dynamic server check - MINOR: check: allocate default check ruleset for every backends - MINOR: check: export check init functions - MINOR: check: do not increment global maxsock at runtime - MINOR: server: implement a refcount for dynamic servers - MEDIUM: check: implement check deletion for dynamic servers - MINOR: check: enable safe keywords for dynamic servers - MEDIUM: server: implement check for dynamic servers - MEDIUM: server: implement agent check for dynamic servers - REGTESTS: server: add dynamic check server test - MINOR: doc: specify ulimit-n usage for dynamic servers - REGTESTS: server: fix dynamic server with checks test - CI: travis-ci: temporarily disable arm64 builds - BUG/MINOR: check: test if server is not null in purge - MINOR: global: define MODE_STOPPING - BUG/MINOR: server: do not use refcount in free_server in stopping mode - ADMIN: dyncookie: implement a simple dynamic cookie calculator - BUG/MINOR: check: do not reset check flags on purge - BUG/MINOR: check: fix leak on add dynamic server with agent-check error - BUG/MEDIUM: check: fix leak on agent-check purge - BUG/MEDIUM: server: support both check/agent-check on a dynamic instance - BUG/MINOR: buffer: fix buffer_dump() formatting - MINOR: channel: remove an htx block from a channel - BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer - BUG/MINOR: stream: Don't release a stream if FLT_END is still registered - MINOR: lua: Add a flag on lua context to know the yield capability at run time - BUG/MINOR: lua: Yield in channel functions only if lua context can yield - BUG/MINOR: lua: Don't yield in channel.append() and channel.set() - MINOR: filters/lua: Release filters before the lua context - MINOR: lua: Add a function to get a reference on a table in the stack - MEDIUM: lua: Process buffer data using an offset and a length - MEDIUM: lua: Improve/revisit the lua api to manipulate channels - DOC: Improve the lua documentation - MEDIUM: filters/lua: Add support for dummy filters written in lua - MINOR: lua: Add a function to get a filter attached to a channel class - MINOR: lua: Add flags on the lua TXN to know the execution context - MEDIUM: filters/lua: Be prepared to filter TCP payloads - MEDIUM: filters/lua: Support declaration of some filter callback functions in lua - MEDIUM: filters/lua: Add HTTPMessage class to help HTTP filtering - MINOR: filters/lua: Add request and response HTTP messages in the lua TXN - MINOR: filters/lua: Support the HTTP filtering from filters written in lua - DOC: config: Fix 'http-response send-spoe-group' documentation - BUG/MINOR: lua: Properly check negative offset in Channel/HttpMessage functions - BUG/MINOR: lua: Properly catch alloc errors when parsing lua filter directives - BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check - MINOR: cli: delare the CLI frontend as an internal proxy - MINOR: proxy: disable warnings for internal proxies - BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set - BUG/MINOR: lua/filters: Return right code when txn:done() is called - DOC: lua-api: Add documentation about lua filters - CI: Remove obsolete USE_SLZ=1 CI job - CLEANUP: assorted typo fixes in the code and comments - CI: github actions: relax OpenSSL-3.0.0 version comparision - BUILD: tools: get the absolute path of the current binary on NetBSD. - DOC: Minor typo fix - 'question mark' -> 'exclamation mark' - DOC/MINOR: fix typo in management document - MINOR: http: add a new function http_validate_scheme() to validate a scheme - BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax - BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it - BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header - BUG/MEDIUM: h2: give :authority precedence over Host - REGTESTS: add a test to prevent h2 desync attacks	2021-08-17 14:08:55 +02:00
Willy Tarreau	8441deb1e2	[RELEASE] Released version 2.5-dev3 ... Released version 2.5-dev3 with the following main changes : - BUG/MINOR: arg: free all args on make_arg_list()'s error path - BUG/MINOR: cfgcond: revisit the condition freeing mechanism to avoid a leak - MEDIUM: proxy: remove long-broken 'option http_proxy' - CLEANUP: http_ana: Remove now unused label from http_process_request() - MINOR: deinit: always deinit the init_mutex on failed initialization - BUG/MEDIUM: cfgcond: limit recursion level in the condition expression parser - BUG/MEDIUM: mworker: do not register an exit handler if exit is expected - BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs - BUILD/MINOR: memprof fix macOs build. - BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request - BUG/MINOR: stats: Add missing agent stats on servers - BUG/MINOR: check: fix the condition to validate a port-less server - BUILD: threads: fix pthread_mutex_unlock when !USE_THREAD - BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree - MINOR: ssl: use __objt_* variant when retrieving counters - BUG/MINOR: systemd: must check the configuration using -Ws - BUG/MINOR: mux-h1: Obey dontlognull option for empty requests - BUG/MINOR: mux-h2: Obey dontlognull option during the preface - BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called - BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames - MINOR: proxy: rename PR_CAP_LUA to PR_CAP_INT - MINOR: mworker: the mworker CLI proxy is internal - MINOR: stats: don't output internal proxies (PR_CAP_INT) - CLEANUP: mworker: use the proxy helper functions in mworker_cli_proxy_create() - CLEANUP: mworker: PR_CAP already initialized with alloc_new_proxy() - BUG/MINOR: connection: Add missing error labels to conn_err_code_str - MINOR: connection: Add a connection error code sample fetch - MINOR: ssl: Enable error fetches in case of handshake error - MINOR: ssl: Add new ssl_fc_hsk_err sample fetch - MINOR: ssl: Define a default https log format - MEDIUM: connection: Add option to disable legacy error log - REGTESTS: ssl: Add tests for the connection and SSL error fetches - REGTESTS: ssl: ssl_errors.vtc does not work with old openssl version - BUG/MEDIUM: connection: close a rare race between idle conn close and takeover - BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before - BUG/MINOR: select: fix excess number of dead/skip reported - BUG/MINOR: poll: fix abnormally high skip_fd counter - BUG/MINOR: pollers: always program an update for migrated FDs - BUG/MINOR: fd: protect fd state harder against a concurrent takeover - DOC: internals: document the FD takeover process - MINOR: fd: update flags only once in fd_update_events() - MINOR: poll/epoll: move detection of RDHUP support earlier - REORG: fd: uninline fd_update_events() - MEDIUM: fd: rely more on fd_update_events() to detect changes - BUG/MINOR: freq_ctr: use stricter barriers between updates and readings - MEDIUM: atomic: simplify the atomic load/store/exchange operations - MEDIUM: atomic: relax the load/store barriers on x86_64 - BUILD: opentracing: fixed build when using pkg-config utility	2021-08-01 18:19:51 +02:00
Willy Tarreau	bccc91d33e	[RELEASE] Released version 2.5-dev2 ... Released version 2.5-dev2 with the following main changes : - BUILD/MEDIUM: tcp: set-mark support for OpenBSD - DOC: config: use CREATE USER for mysql-check - BUG/MINOR: stick-table: fix several printf sign errors dumping tables - BUG/MINOR: peers: fix data_type bit computation more than 32 data_types - MINOR: stick-table: make skttable_data_cast to use only std types - MEDIUM: stick-table: handle arrays of standard types into stick-tables - MEDIUM: peers: handle arrays of std types in peers protocol - DOC: stick-table: add missing documentation about gpt0 stored type - MEDIUM: stick-table: add the new array of gpt data_type - MEDIUM: stick-table: make the use of 'gpt' excluding the use of 'gpt0' - MEDIUM: stick-table: add the new arrays of gpc and gpc_rate - MEDIUM: stick-table: make the use of 'gpc' excluding the use of 'gpc0/1'' - BUG/MEDIUM: sock: make sure to never miss early connection failures - BUG/MINOR: cli: fix server name output in "show fd" - Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules" - MEDIUM: stats: include disabled proxies that hold active sessions to stats - BUILD: stick-table: shut up invalid "uninitialized" warning in gcc 8.3 - MINOR: http: implement http_get_scheme - MEDIUM: http: implement scheme-based normalization - MEDIUM: h1-htx: apply scheme-based normalization on h1 requests - MEDIUM: h2: apply scheme-based normalization on h2 requests - REGTESTS: add http scheme-based normalization test - BUILD: http_htx: fix ci compilation error with isdigit for Windows - MINOR: http: implement http uri parser - MINOR: http: use http uri parser for scheme - MINOR: http: use http uri parser for authority - REORG: http_ana: split conditions for monitor-uri in wait for request - MINOR: http: use http uri parser for path - BUG/MEDIUM: http_ana: fix crash for http_proxy mode during uri rewrite - MINOR: mux_h2: define config to disable h2 websocket support - CLEANUP: applet: remove unused thread_mask - BUG/MINOR: ssl: Default-server configuration ignored by server - BUILD: add detection of missing important CFLAGS - BUILD: lua: silence a build warning with TCC - MINOR: srv: extract tracking server config function - MINOR: srv: do not allow to track a dynamic server - MEDIUM: server: support track keyword for dynamic servers - REGTESTS: test track support for dynamic servers - MINOR: init: verify that there is a single word on "-cc" - MINOR: init: make -cc support environment variables expansion - MINOR: arg: add a free_args() function to free an args array - CLEANUP: config: use free_args() to release args array in cfg_eval_condition() - CLEANUP: hlua: use free_args() to release args arrays - REORG: config: move the condition preprocessing code to its own file - MINOR: cfgcond: start to split the condition parser to introduce terms - MEDIUM: cfgcond: report invalid trailing chars after expressions - MINOR: cfgcond: remerge all arguments into a single line - MINOR: cfgcond: support negating conditional expressions - MINOR: cfgcond: make the conditional term parser automatically allocate nodes - MINOR: cfgcond: insert an expression between the condition and the term - MINOR: cfgcond: support terms made of parenthesis around expressions - REGTEST: make check_condition.vtc fail as soon as possible - REGTESTS: add more complex check conditions to check_conditions.vtc - BUG/MEDIUM: init: restore behavior of command-line "-m" for memory limitation	2021-07-17 12:35:11 +02:00
Willy Tarreau	96a2f50b51	[RELEASE] Released version 2.5-dev1 ... Released version 2.5-dev1 with the following main changes : - CLEANUP: ssl: Move ssl_store related code to ssl_ckch.c - MINOR: ssl: Allow duplicated entries in the cafile_tree - MEDIUM: ssl: Chain ckch instances in ca-file entries - MINOR: ssl: Add reference to default ckch instance in bind_conf - MINOR: ssl: Add helper functions to create/delete cafile entries - MEDIUM: ssl: Add a way to load a ca-file content from memory - MINOR: ssl: Add helper function to add cafile entries - MINOR: ssl: Ckch instance rebuild and cleanup factorization in CLI handler - MEDIUM: ssl: Add "set+commit ssl ca-file" CLI commands - REGTESTS: ssl: Add new ca-file update tests - MINOR: ssl: Add "abort ssl ca-file" CLI command - MINOR: ssl: Add a cafile_entry type field - MINOR: ssl: Refactorize the "show certificate details" code - MEDIUM: ssl: Add "show ssl ca-file" CLI command - MEDIUM: ssl: Add "new ssl ca-file" CLI command - MINOR: ssl: Add "del ssl ca-file" CLI command - REGTESTS: ssl: Add "new/del ssl ca-file" tests - DOC: ssl: Add documentation about CA file hot update commands - DOC: internals: update the SSL architecture schema - MINOR: ssl: Chain instances in ca-file entries - MEDIUM: ssl: Add "set+commit ssl crl-file" CLI commands - MEDIUM: ssl: Add "new+del crl-file" CLI commands - MINOR: ssl: Add "abort ssl crl-file" CLI command - MEDIUM: ssl: Add "show ssl crl-file" CLI command - REGTESTS: ssl: Add "new/del ssl crl-file" tests - REGTESTS: ssl: Add "set/commit ssl crl-file" test - DOC: ssl: Add documentation about CRL file hot update commands - BUILD/MINOR: ssl: Fix compilation with SSL enabled - BUILD/MINOR: ssl: Fix compilation with OpenSSL 1.0.2 - CI: introduce scripts/build-vtest.sh for installing VTest - CLEANUP: ssl: Fix coverity issues found in CA file hot update code - CI: github actions: add OpenTracing builds - BUG/MEDIUM: ebtree: Invalid read when looking for dup entry - BUG/MAJOR: server: prevent deadlock when using 'set maxconn server' - BUILD/MINOR: opentracing: fixed build when using clang - BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter - BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response - MINOR: map/acl: print the count of all the map/acl entries in "show map/acl" - CLEANUP: pattern: remove export of non-existent function pattern_delete() - MINOR: h1-htx: Update h1 parsing functions to return result as a size_t - MEDIUM: h1-htx: Adapt H1 data parsing to copy wrapping data in one call - MINOR: mux-h1/mux-fcgi: Don't needlessly loop on data parsing - MINOR: h1-htx: Move HTTP chunks parsing into a dedicated function - MEDIUM: h1-htx: Split function to parse a chunk and the loop on the buffer - MEDIUM: h1-htx: Add a function to parse contiguous small chunks - MINOR: h1-htx: Use a correlation table to speed-up small chunks parsing - MINOR: buf: Add function to realign a buffer with a specific head position - MINOR: muxes/h1-htx: Realign input buffer using b_slow_realign_ofs() - CLEANUP: mux-h1: Rename functions parsing input buf and filling output buf - Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers" - BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry - BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts - MINOR: http-ana: Perform L7 retries because of status codes in response analyser - MINOR: cfgparse: Fail when encountering extra arguments in macro - DOC: intro: Fix typo in starter guide - BUG/MINOR: server: Missing calloc return value check in srv_parse_source - BUG/MINOR: peers: Missing calloc return value check in peers_register_table - BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine - BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture - BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare - BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy - BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response - BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule - BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo - BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list - BUG/MINOR: http: Missing calloc return value check while parsing redirect rule - BUG/MINOR: http: Missing calloc return value check in make_arg_list - BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree - CLEANUP: http-ana: Remove useless if statement about L7 retries - BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry - MINOR: backend: Don't release SI endpoint anymore in connect_server() - BUG/MINOR: vars: Be sure to have a session to get checks variables - DOC/MINOR: move uuid in the configuration to the right alphabetical order - CLEANUP: mux-fcgi: Don't needlessly store result of data/trailers parsing - BUILD: fix compilation for OpenSSL-3.0.0-alpha17 - MINOR: http-ana: Use -1 status for client aborts during queuing and connect - REGTESTS: Fix http_abortonclose.vtc to support -1 status for some client aborts - CLEANUP: backend: fix incorrect comments on locking conditions for lb functions - CLEANUP: reg-tests: Remove obsolete no-htx parameter for reg-tests - CI: github actions: add OpenSSL-3.0.0 builds - CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0 - MINOR: errors: allow empty va_args for diag variadic macro - REORG: errors: split errors reporting function from log.c - CLEANUP: server: fix cosmetic of error message on sni parsing - MEDIUM: errors: implement user messages buffer - MINOR: log: do not discard stderr when starting is over - MEDIUM: errors: implement parsing context type - MINOR: errors: use user messages context in print_message - MINOR: log: display exec path on first warning - MINOR: errors: specify prefix "config" for parsing output - MINOR: log: define server user message format - REORG: server: use parsing ctx for server parsing - REORG: config: use parsing ctx for server config check - MINOR: server: use parsing ctx for server init addr - MINOR: server: use ha_alert in server parsing functions - DOC: use the req.ssl_sni in examples - CLEANUP: cfgparse: Remove duplication of `MAX_LINE_ARGS + 1` - CLEANUP: tools: Make errptr const in `parse_line()` - MINOR: haproxy: Add `-cc` argument - BUG: errors: remove printf positional args for user messages context - CI: Make matrix.py executable and add shebang - BUILD: make tune.ssl.keylog available again - BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future - Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode" - BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode - SCRIPTS: opentracing: enable parallel builds in build-ot.sh - BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block - BUG/MEDIUM: compression: Properly get the next block to iterate on payload - BUG/MEDIUM: compression: Add a flag to know the filter is still processing data - MINOR: ssl: Keep the actual key length in the certificate_ocsp structure - MINOR: ssl: Add new "show ssl ocsp-response" CLI command - MINOR: ssl: Add the OCSP entry key when displaying the details of a certificate - MINOR: ssl: Add the "show ssl cert foo.pem.ocsp" CLI command - REGTESTS: ssl: Add "show ssl ocsp-response" test - BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers - BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush() - BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location - MINOR: pools: do not maintain the lock during pool_flush() - MINOR: pools: call malloc_trim() under thread isolation - MEDIUM: pools: use a single pool_gc() function for locked and lockless - BUG/MAJOR: pools: fix possible race with free() in the lockless variant - CLEANUP: pools: remove now unused seq and pool_free_list - MEDIUM: pools: remove the locked pools implementation - BUILD: ssl: Fix compilation with BoringSSL - BUG/MEDIUM: errors: include missing obj_type file - REGTESTS: ssl: show_ssl_ocspresponce.vtc is broken with BoringSSL - BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded - BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default - BUG/MINOR: h1-htx: Fix a signess bug with char data type when parsing chunk size - CLEANUP: l7-retries: do not test the buffer before calling b_alloc() - BUG/MINOR: resolvers: answser item list was randomly purged or errors - MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item - MEDIUM: resolvers: add a ref between servers and srv request or used SRV record - BUG/MINOR: server-state: load SRV resolution only if params match the config - MINOR: config: remove support for deprecated option "tune.chksize" - MINOR: config: completely remove support for "no option http-use-htx" - MINOR: log: remove the long-deprecated early log-format tags - MINOR: http: remove the long deprecated "set-cookie()" sample fetch function - MINOR: config: reject long-deprecated "option forceclose" - MINOR: config: remove deprecated option "http-tunnel" - MEDIUM: proxy: remove the deprecated "grace" keyword - MAJOR: config: remove parsing of the global "nbproc" directive - BUILD: init: remove initialization of multi-process thread mappings - BUILD: log: remove unused fmt_directive() - REGTESTS: Remove REQUIRE_VERSION=1.6 from all tests - REGTESTS: Remove REQUIRE_VERSION=1.7 from all tests - CI: github actions: enable alpine/musl builds - BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs - DOC: lua: Add a warning about buffers modification in HTTP - MINOR: ssl: Use OpenSSL's ASN1_TIME convertor when available - BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id - BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server' - BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees - BUG/MEDIUM: server: do not forget to generate the dynamic servers ids - BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree - BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node - BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE - BUG/MINOR: ssl: use atomic ops to update global shctx stats - BUG/MINOR: mworker: fix typo in chroot error message - CLEANUP: global: remove unused definition of stopping_task[] - MEDIUM: init: remove the loop over processes during init - MINOR: mworker: remove the initialization loop over processes - CLEANUP: global: remove the nbproc field from the global structure - CLEANUP: global: remove pid_bit and all_proc_mask - MEDIUM: global: remove dead code from nbproc/bind_proc removal - MEDIUM: config: simplify cpu-map handling - MEDIUM: cpu-set: make the proc a single bit field and not an array - CLEANUP: global: remove unused definition of MAX_PROCS - MEDIUM: global: remove the relative_pid from global and mworker - DOC: update references to process numbers in cpu-map and bind-process - MEDIUM: config: warn about "bind-process" deprecation - CLEANUP: shctx: remove the different inter-process locking techniques - BUG/MAJOR: queue: set SF_ASSIGNED when setting strm->target on dequeue - MINOR: backend: only skip LB when there are actual connections - BUG/MINOR: mux-h1: do not skip the error response on bad requests - MINOR: connection: add helper conn_append_debug_info() - MINOR: mux-h2/trace: report a few connection-level info during h2_init() - CLEANUP: mux-h2/traces: better align user messages - BUG/MINOR: stats: make "show stat typed desc" work again - MINOR: mux-h2: obey http-ignore-probes during the preface - BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace - BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces - CLEANUP: assorted typo fixes in the code and comments - CI: Replace the requirement for 'sudo' with a call to 'ulimit -n' - REGTESTS: Replace REQUIRE_VERSION=2.5 with 'haproxy -cc' - REGTESTS: Replace REQUIRE_OPTIONS with 'haproxy -cc' for 2.5+ tests - REGTESTS: Replace REQUIRE_BINARIES with 'command -v' - REGTESTS: Remove support for REQUIRE_BINARIES - CI: ssl: enable parallel builds for OpenSSL on Linux - CI: ssl: do not needlessly build the OpenSSL docs - CI: ssl: keep the old method for ancient OpenSSL versions - CLEANUP: server: a separate function for initializing the per_thr field - BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled - BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI - MINOR: resolvers: Clean server in a dedicated function when removing a SRV item - MINOR: resolvers: Remove server from named_servers tree when removing a SRV item - BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status - BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose - BUG/MINOR: backend: do not set sni on connection reuse - BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task() - BUG/MINOR: server/cli: Fix locking in function processing "set server" command - BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header - MINOR: ssl: fix typo in usage for 'new ssl ca-file' - MINOR: ssl: always initialize random generator - MINOR: ssl: check allocation in ssl_sock_init_srv - MINOR: ssl: check allocation in parse ciphers/ciphersuites/verifyhost - MINOR: ssl: check allocation in parse npn/sni - MINOR: server: disable CLI 'set server ssl' for dynamic servers - MINOR: ssl: render file-access optional on server crt loading - MINOR: ssl: split parse functions for alpn/check-alpn - MINOR: ssl: support ca-file arg for dynamic servers - MINOR: ssl: support crt arg for dynamic servers - MINOR: ssl: support crl arg for dynamic servers - MINOR: ssl: enable a series of ssl keywords for dynamic servers - MINOR: ssl: support ssl keyword for dynamic servers - REGTESTS: server: test ssl support for dynamic servers - MINOR: queue: update the stream's pend_pos before queuing it - CLEANUP: Prevent channel-t.h from being detected as C++ by GitHub - BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check - REGTESTS: fix maxconn update with agent-check - MEDIUM: queue: make pendconn_process_next_strm() only return the pendconn - MINOR: queue: update proxy->served once out of the loop - MEDIUM: queue: refine the locking in process_srv_queue() - MINOR: lb/api: remove the locked argument from take_conn/drop_conn - MINOR: queue: create a new structure type "queue" - MINOR: proxy: replace the pendconns-related stuff with a struct queue - MINOR: server: replace the pendconns-related stuff with a struct queue - MEDIUM: queue: use a dedicated lock for the queues - MEDIUM: queue: simplify again the process_srv_queue() API - MINOR: queue: factor out the proxy/server queuing code - MINOR: queue: use atomic-ops to update the queue's index - MEDIUM: queue: determine in process_srv_queue() if the proxy is usable - MEDIUM: queue: move the queue lock manipulation to pendconn_process_next_strm() - MEDIUM: queue: unlock as soon as possible - MINOR: queue: make pendconn_first() take the lock by itself - CLEANUP: backend: remove impossible case of round-robin + consistent hash - MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules - DOC: config: Add missing actions in "tcp-request session" documentation - CLEANUP: dns: Remove a forgotten debug message - DOC: Replace issue templates by issue forms - Revert "MINOR: queue: make pendconn_first() take the lock by itself" - Revert "MEDIUM: queue: unlock as soon as possible" - Revert "MEDIUM: queue: move the queue lock manipulation to pendconn_process_next_strm()" - Revert "MEDIUM: queue: determine in process_srv_queue() if the proxy is usable" - Revert "MINOR: queue: use atomic-ops to update the queue's index" - Revert "MINOR: queue: factor out the proxy/server queuing code" - Revert "MEDIUM: queue: simplify again the process_srv_queue() API" - Revert "MEDIUM: queue: use a dedicated lock for the queues" - Revert "MEDIUM: queue: refine the locking in process_srv_queue()" - Revert "MINOR: queue: update proxy->served once out of the loop" - Revert "MEDIUM: queue: make pendconn_process_next_strm() only return the pendconn" - MEDIUM: queue: update px->served and lb's take_conn once per loop - MEDIUM: queue: use a dedicated lock for the queues (v2) - MEDIUM: queue: simplify again the process_srv_queue() API (v2) - MEDIUM: queue: determine in process_srv_queue() if the proxy is usable (v2) - MINOR: queue: factor out the proxy/server queuing code (v2) - MINOR: queue: use atomic-ops to update the queue's index (v2) - MEDIUM: queue: take the proxy lock only during the px queue accesses - MEDIUM: queue: use a trylock on the server's queue - MINOR: queue: add queue_init() to initialize a queue - MINOR: queue: add a pointer to the server and the proxy in the queue - MINOR: queue: store a pointer to the queue into the pendconn - MINOR: queue: remove the px/srv fields from pendconn - MINOR: queue: simplify pendconn_unlink() regarding srv vs px - BUG: backend: stop looking for queued connections once there's no more - BUG/MINOR: queue/debug: use the correct lock labels on the queue lock - BUG/MINOR: resolvers: Always attach server on matching record on resolution - BUG/MINOR: resolvers: Reset server IP when no ip is found in the response - MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response() - BUG/MINOR: checks: return correct error code for srv_parse_agent_check - BUILD: Makefile: fix linkage for Haiku. - BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules - MINOR: http-act/tcp-act: Add "set-log-level" for tcp content rules - MINOR: http-act/tcp-act: Add "set-nice" for tcp content rules - MINOR: http-act/tcp-act: Add "set-mark" and "set-tos" for tcp content rules - CLEANUP: tcp-act: Sort action lists - BUILD/MEDIUM: tcp: set-mark setting support for FreeBSD. - BUILD: tcp-act: avoid warning when set-mark / set-tos are not supported - BUG/MINOR: mqtt: Fix parser for string with more than 127 characters - BUG/MINOR: mqtt: Support empty client ID in CONNECT message - BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution - CLEANUP: peers: re-write intdecode function comment.	2021-06-30 16:16:14 +02:00
Willy Tarreau	1f97306ecc	[RELEASE] Released version 2.5-dev0 ... Released version 2.5-dev0 with the following main changes : - MINOR: version: it's development again	2021-05-14 09:36:37 +02:00
Willy Tarreau	6cbbecf097	[RELEASE] Released version 2.4.0 ... Released version 2.4.0 with the following main changes : - BUG/MINOR: http_fetch: fix possible uninit sockaddr in fetch_url_ip/port - CLEANUP: cli/activity: Remove double spacing in set profiling command - CI: Build VTest with clang - CI: extend spellchecker whitelist, add "ists" as well - CLEANUP: assorted typo fixes in the code and comments - BUG/MINOR: memprof: properly account for differences for realloc() - MINOR: memprof: also report the method used by each call - MINOR: memprof: also report the totals and delta alloc-free - CLEANUP: pattern: remove the unused and dangerous pat_ref_reload() - BUG/MINOR: http_act: Fix normalizer names in error messages - MINOR: uri_normalizer: Add `fragment-strip` normalizer - MINOR: uri_normalizer: Add `fragment-encode` normalizer - IMPORT: slz: use the generic function for the last bytes of the crc32 - IMPORT: slz: do not produce the crc32_fast table when CRC is natively supported - BUILD/MINOR: opentracing: fixed compilation with filter enabled - BUILD: makefile: add a few popular ARMv8 CPU targets - BUG/MEDIUM: stick_table: fix crash when using tcp smp_fetch_src - REGTESTS: stick-table: add src_conn_rate test - CLEANUP: stick-table: remove a leftover of an old keyword declaration - BUG/MINOR: stats: fix lastchk metric that got accidently lost - EXAMPLES: add a "basic-config-edge" example config - EXAMPLES: add a trivial config for quick testing - DOC: management: Correct example reload command in the document - Revert "CI: Build VTest with clang" - MINOR: activity/cli: optionally support sorting by address on "show profiling" - DEBUG: ssl: export ssl_sock_close() to see its symbol resolved in profiling - BUG/MINOR: lua/vars: prevent get_var() from allocating a new name - DOC: config: Fix configuration example for mqtt - BUG/MAJOR: config: properly initialize cpu_map.thread[] up to MAX_THREADS - BUILD: config: avoid a build warning on numa_detect_topology() without threads - DOC: update min requirements in INSTALL - IMPORT: slz: use inttypes.h instead of stdint.h - BUILD: sample: use strtoll() instead of atoll() - MINOR: version: mention that it's LTS now.	2021-05-14 09:03:30 +02:00
Willy Tarreau	46b93afdb3	[RELEASE] Released version 2.4-dev19 ... Released version 2.4-dev19 with the following main changes : - BUG/MINOR: hlua: Don't rely on top of the stack when using Lua buffers - BUG/MEDIUM: cli: prevent memory leak on write errors - BUG/MINOR: ssl/cli: fix a lock leak when no memory available - MINOR: debug: add a new "debug dev sym" command in expert mode - MINOR: pools/debug: slightly relax DEBUG_DONT_SHARE_POOLS - CI: Github Actions: switch to LibreSSL-3.3.3 - MINOR: srv: close all idle connections on shutdown - MINOR: connection: move session_list member in a union - MEDIUM: mux_h1: release idling frontend conns on soft-stop - MEDIUM: connection: close front idling connection on soft-stop - MINOR: tools: add functions to retrieve the address of a symbol - CLEANUP: activity: mark the profiling and task_profiling_mask __read_mostly - MINOR: activity: add a "memory" entry to "profiling" - MINOR: activity: declare the storage for memory usage statistics - MEDIUM: activity: collect memory allocator statistics with USE_MEMORY_PROFILING - MINOR: activity: clean up the show profiling io_handler a little bit - MINOR: activity: make "show profiling" support a few arguments - MINOR: activity: make "show profiling" also dump the memoery usage - MINOR: activity: add the profiling.memory global setting - BUILD: makefile: add new option USE_MEMORY_PROFILING - MINOR: channel: Rely on HTX version if appropriate in channel_may_recv() - BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive - MINOR: conn-stream: Force mux to wait for read events if abortonclose is set - MEDIUM: mux-h1: Don't block reads when waiting for the other side - BUG/MEDIUM: mux-h1: Properly report client close if abortonclose option is set - REGTESTS: Add script to test abortonclose option - MINOR: mux-h1: clean up conditions to enabled and disabled splicing - MINOR: mux-h1: Subscribe for sends if output buffer is not empty in h1_snd_pipe - MINOR: mux-h1: Always subscribe for reads when splicing is disabled - MEDIUM: mux-h1: Wake H1 stream when both sides a synchronized - CLEANUP: mux-h1: rename WAIT_INPUT/WAIT_OUTPUT flags - MINOR: mux-h1: Manage processing blocking flags on the H1 stream - BUG/MINOR: stream: Decrement server current session counter on L7 retry - BUG/MINOR: config: fix uninitialized initial state in ".if" block evaluator - BUG/MINOR: config: add a missing "ELIF_TAKE" test for ".elif" condition evaluator - BUG/MINOR: config: .if/.elif should also accept negative integers - MINOR: config: centralize the ".if"/".elif" condition parser and evaluator - MINOR: config: keep up-to-date current file/line/section in the global struct - MINOR: config: support some pseudo-variables for file/line/section - BUILD: activity: do not include malloc.h - MINOR: arg: improve the error message on missing closing parenthesis - MINOR: global: export the build features string list - MINOR: global: add version comparison functions - MINOR: config: improve .if condition error reporting - MINOR: config: make cfg_eval_condition() support predicates with arguments - MINOR: config: add predicate "defined()" to conditional expression blocks - MINOR: config: add predicates "streq()" and "strneq()" to conditional expressions - MINOR: config: add predicate "feature" to detect certain built-in features - MINOR: config: add predicates "version_atleast" and "version_before" to cond blocks - BUG/MINOR: activity: use the new pointer to calculate the new size in realloc() - BUG/MINOR: stream: properly clear the previous error mask on L7 retries - MEDIUM: log: slightly refine the output format of alerts/warnings/etc - MINOR: config: add a new message directive: .diag - CLEANUP: cli/tree-wide: properly re-align the CLI commands' help messages - BUG/MINOR: stream: Reset stream final state and si error type on L7 retry - BUG/MINOR: checks: Handle synchronous connect when a tcpcheck is started - BUG/MINOR: checks: Reschedule check on observe mode only if fastinter is set - MINOR: global: define tainted flag - MINOR: cfgparse: add a new field flags in cfg_keyword - MINOR: cfgparse: implement experimental config keywords - MINOR: action: replace match_pfx by a keyword flags field - MINOR: action: implement experimental actions - MINOR: cli: set tainted when using CLI expert/experimental mode - MINOR: stats: report tainted on show info - MINOR: http_act: mark normalize-uri as experimental - BUILD: fix usage of ha_alert without format string - MINOR: proxy: define PR_CAP_LB - BUG/MINOR: server: do not report diag for peer servers with null weight - DOC: ssl: Extra files loading now works for backends too - ADDONS: make addons/ discoverable by git via .gitignore - DOC: ssl: Add information about crl-file option - MINOR: sample: improve error reporting on missing arg to strcmp() converter - DOC: management: mention that some fields may be emitted as floats - MINOR: tools: implement trimming of floating point numbers - MINOR: tools: add a float-to-ascii conversion function - MINOR: freq_ctr: add new functions to report float measurements - MINOR: stats: avoid excessive padding of float values with trailing zeroes - MINOR: stats: add the HTML conversion for float types - MINOR: stats: pass the appctx flags to stats_fill_info() - MINOR: stats: support an optional "float" option to "show info" - MINOR: stats: use tv_remain() to precisely compute the uptime - MINOR: stats: report uptime and start time as floats with subsecond resolution - MINOR: stats: make "show info" able to report rates as floats when asked - MINOR: config: mark tune.fd.edge-triggered as experimental - REORG: vars: move the "proc" scope variables out of the global struct - REORG: threads: move all_thread_mask() to thread.h - BUILD: wdt: include signal-t.h - BUILD: auth: include missing list.h - REORG: mworker: move proc_self from global to mworker - BUILD: ssl: ssl_utils requires chunk.h - BUILD: config: cfgparse-ssl.c needs tools.h - BUILD: wurfl: wurfl.c needs tools.h - BUILD: spoe: flt_spoe.c needs tools.h - BUILD: promex: service-prometheus.c needs tools.h - BUILD: resolvers: include tools.h - BUILD: config: include tools.h in cfgparse-listen.c - BUILD: htx: include tools.h in http_htx.c - BUILD: proxy: include tools.h in proxy.c - BUILD: session: include tools.h in session.c - BUILD: cache: include tools.h in cache.c - BUILD: sink: include tools.h in sink.c - BUILD: connection: include tools.h in connection.c - BUILD: server-state: include tools.h from server_state.c - BUILD: dns: include tools.h in dns.c - BUILD: payload: include tools.h in payload.c - BUILD: vars: include tools.h in vars.c - BUILD: compression: include tools.h in compression.c - BUILD: mworker: include tools.h from mworker.c - BUILD: queue: include tools.h from queue.c - BUILD: udp: include tools.h from proto_udp.c - BUILD: stick-table: include freq_ctr.h from stick_table.h - BUILD: server: include tools.h from server.c - BUILD: server: include missing proxy.h in server.c - BUILD: sink: include proxy.h in sink.c - BUILD: mworker: include proxy.h in mworker.c - BUILD: filters: include proxy.h in filters.c - BUILD: fcgi-app: include proxy.h in fcgi-app.c - BUILD: connection: move list_mux_proto() to connection.c - REORG: stick-table: uninline stktable_alloc_data_type() - REORG: stick-table: move composite address functions to stick_table.h - REORG: config: uninline warnifnotcap() and failifnotcap() - BUILD: task: remove unused includes from task.c - MINOR: task: stop including stream.h from task.c - BUILD: connection: stop including listener-t.h - BUILD: hlua: include proxy.h from hlua.c - BUILD: mux-h1: include proxy.h from mux-h1.c - BUILD: mux-fcgi: include proxy.h from mux-fcgi.c - BUILD: listener: include proxy.h from listener.c - BUILD: http-rules: include proxy.h from http_rules.c - BUILD: thread: include log.h from thread.c - BUILD: comp: include proxy.h from flt_http_comp.c - BUILD: fd: include log.h from fd.c - BUILD: config: do not include proxy.h nor errors.h anymore in cfgparse.h - BUILD: makefile: reorder object files by build time - DOC: Fix a few grammar/spelling issues and casing of HAProxy - REGTESTS: run-regtests: match both "HAProxy" and "HA-Proxy" in the version - MINOR: version: report "HAProxy" not "HA-Proxy" in the version output - DOC: remove last occurrences of "HA-Proxy" syntax - DOC: peers: fix the protocol tag name in the doc - ADMIN: netsnmp: report "HAProxy" and not "Haproxy" in output descriptions - MEDIUM: mailers: use "HAProxy" nor "HAproxy" in the subject of messages - DOC: fix a few remainig cases of "Haproxy" and "HAproxy" in doc and comments - MINOR: tools/rnd: compute the result outside of the CAS loop - BUILD: http_fetch: address a few aliasing warnings with older compilers - BUILD: ssl: define HAVE_CRYPTO_memcmp() based on the library version - BUILD: errors: include stdarg in errors.h - REGTESTS: disable inter-thread idle connection sharing on sensitive tests - MINOR: cli: make "help" support a command in argument - MINOR: cli: sort the output of the "help" keywords - CLEANUP: cli/mworker: properly align the help messages - BUILD: memprof: make the old caller pointer a const in get_prof_bin() - BUILD: compat: include malloc_np.h for USE_MEMORY_PROFILING on FreeBSD - CI: Github Actions: enable USE_QUIC=1 for BoringSSL builds - BUG/MEDIUM: quic: fix null deref on error path in qc_conn_init() - BUILD: cli: appease a null-deref warning in cli_gen_usage_msg()	2021-05-10 07:50:26 +02:00
Willy Tarreau	080347fe2a	[RELEASE] Released version 2.4-dev18 ... Released version 2.4-dev18 with the following main changes : - DOC: Fix indentation for `path-strip-dot` normalizer - DOC: Fix RFC reference for the percent-to-uppercase normalizer - DOC: Add RFC references for the path-strip-dot(dot)? normalizers - MINOR: uri_normalizer: Add a `percent-decode-unreserved` normalizer - BUG/MINOR: mux-fcgi: Don't send normalized uri to FCGI application - REORG: htx: Inline htx functions to add HTX blocks in a message - CLEANUP: assorted typo fixes in the code and comments - DOC: general: fix white spaces for HTML converter - BUG/MINOR: ssl: ssl_sock_prepare_ssl_ctx does not return an error code - BUG/MINOR: cpuset: move include guard at the very beginning - BUG/MAJOR: fix build on musl with cpu_set_t support - BUG/MEDIUM: cpuset: fix build on MacOS - BUG/MINOR: htx: Preserve HTX flags when draining data from an HTX message - MEDIUM: htx: Refactor htx_xfer_blks() to not rely on hdrs_bytes field - CLEANUP: htx: Remove unsued hdrs_bytes field from the HTX start-line - BUG/MINOR: mux-h2: Don't encroach on the reserve when decoding headers - MEDIUM: http-ana: handle read error on server side if waiting for response - MINOR: htx: Limit length of headers name/value when a HTX message is dumped - BUG/MINOR: applet: Notify the other side if data were consumed by an applet - BUG/MINOR: hlua: Don't consume headers when starting an HTTP lua service - BUG/MEDIUM: mux-h2: Handle EOM flag when sending a DATA frame with zero-copy - CLEANUP: channel: No longer notify the producer in co_skip()/co_htx_skip() - DOC: general: fix example in set-timeout - CLEANUP: cfgparse: de-uglify early file error handling in readcfgfile() - MINOR: config: add a new "default-path" global directive - BUG/MEDIUM: peers: initialize resync timer to get an initial full resync - BUG/MEDIUM: peers: register last acked value as origin receiving a resync req - BUG/MEDIUM: peers: stop considering ack messages teaching a full resync - BUG/MEDIUM: peers: reset starting point if peers appears longly disconnected - BUG/MEDIUM: peers: reset commitupdate value in new conns - BUG/MEDIUM: peers: re-work updates lookup during the sync on the fly - BUG/MEDIUM: peers: reset tables stage flags stages on new conns - MINOR: peers: add informative flags about resync process for debugging - BUG/MEDIUM: time: fix updating of global_now upon clock drift - CLEANUP: freq_ctr: make arguments of freq_ctr_total() const - CLEANUP: hlua: rename hlua_appctx* appctx to luactx - MINOR: server: fix doc/trace on lb algo for dynamic server creation - REGTESTS: server: fix cli_add_server due to previous trace update - REGTESTS: add minimal CLI "add map" tests - DOC: management: move "set var" to the proper place - CLEANUP: map: slightly reorder the add map function - MINOR: map: get rid of map_add_key_value() - MINOR: map: show the current and next pattern version in "show map" - MINOR: map/acl: add the possibility to specify the version in "show map/acl" - MINOR: pattern: support purging arbitrary ranges of generations - MINOR: map/acl: add the possibility to specify the version in "clear map/acl" - MINOR: map/acl: add the "prepare map/acl" CLI command - MINOR: map/acl: add the "commit map/acl" CLI command - MINOR: map/acl: make "add map/acl" support an optional version number - CLEANUP: map/cli: properly align the map/acl help - BUILD: compiler: do not use already defined __read_mostly on dragonfly	2021-05-01 08:25:15 +02:00
Willy Tarreau	bfd19d68f0	[RELEASE] Released version 2.4-dev17 ... Released version 2.4-dev17 with the following main changes : - MINOIR: mux-pt/trace: Register a new trace source with its events - BUG/MINOR: mux-pt: Fix a possible UAF because of traces in mux_pt_io_cb - CI: travis: Drastically clean up .travis.yml - CLEANUP: pattern: make all pattern tables read-only - MINOR: trace: replace the trace() inline function with an equivalent macro - MINOR: initcall: uniformize the section names between MacOS and other unixes - CLEANUP: initcall: rename HA_SECTION to HA_INIT_SECTION - MINOR: compiler: add macros to declare section names - CLEANUP: initcall: rely on HA_SECTION_* instead of defining its own - MINOR: global: declare a read_mostly section - MINOR: fd: move a few read-mostly variables to their own section - MINOR: epoll: move epoll_fd to read_mostly - MINOR: kqueue: move kqueue_fd to read_mostly - MINOR: pool: move pool declarations to read_mostly - MINOR: threads: mark all_threads_mask as read_mostly - MINOR: server: move idle_conn_task to read_mostly - MINOR: protocol: move __protocol_by_family to read_mostly - MINOR: pattern: make the pat_lru_seed read_mostly - MINOR: trace: make trace sources read_mostly - MINOR: freq_ctr: add a generic function to report the total value - MEDIUM: freq_ctr: make read_freq_ctr_period() use freq_ctr_total() - MEDIUM: freq_ctr: reimplement freq_ctr_remain_period() from freq_ctr_total() - MINOR: freq_ctr: add the missing next_event_delay_period() - MINOR: freq_ctr: unify freq_ctr and freq_ctr_period into freq_ctr - MEDIUM: freq_ctr: replace the per-second counters with the generic ones - MINOR: freq_ctr: add cpu_relax in the rotation loop of update_freq_ctr_period() - MINOR: freq_ctr: simplify and improve the update function - CLEANUP: time: remove the now unused ms_left_scaled - MINOR: time: move the time initialization out of tv_update_date() - MINOR: time: remove useless variable copies in tv_update_date() - MINOR: time: change the global timeval and the the global tick at once - MEDIUM: time: make the clock offset global and no per-thread - MINOR: atomic: reimplement the relaxed version of x86 BTS/BTR - MINOR: trace: Add the checks as a possible trace source - MINOIR: checks/trace: Register a new trace source with its events - MINOR: hlua: Add function to release a lua function - BUG/MINOR: hlua: Fix memory leaks on error path when registering a task - BUG/MINOR: hlua: Fix memory leaks on error path when registering a converter - BUG/MINOR: hlua: Fix memory leaks on error path when registering a fetch - BUG/MINOR: hlua: Fix memory leaks on error path when parsing a lua action - BUG/MINOR: hlua: Fix memory leaks on error path when registering an action - BUG/MINOR: hlua: Fix memory leaks on error path when registering a service - BUG/MINOR: hlua: Fix memory leaks on error path when registering a cli keyword - BUG/MINOR: cfgparse/proxy: Fix some leaks during proxy section parsing - BUG/MINOR: listener: Handle allocation error when allocating a new bind_conf - BUG/MINOR: cfgparse/proxy: Hande allocation errors during proxy section parsing - MINOR: cfgparse/proxy: Group alloc error handling during proxy section parsing - DOC: internals: update the SSL architecture schema - BUG/MEDIUM: sample: Fix adjusting size in field converter - MINOR: sample: add ub64dec and ub64enc converters - CLEANUP: sample: align samples list in sample.c - MINOR: ist: Add `istclear(struct ist*)` - CI: cirrus: install "pcre" package - MINOR: opentracing: correct calculation of the number of arguments in the args[] - MINOR: opentracing: transfer of context names without prefix - MINOR: sample: converter: Add mjson library. - MINOR: sample: converter: Add json_query converter - CI: travis-ci: enable weekly graviton2 builds - DOC: ssl: Certificate hot update only works on fronted certificates - DOC: ssl: Certificate hot update works on server certificates - BUG/MEDIUM: threads: Ignore current thread to end its harmless period - MINOR: threads: Only consider running threads to end a thread harmeless period - BUG/MINOR: checks: Set missing id to the dummy checks frontend - MINOR: logs: Add support of checks as session origin to format lf strings - BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections - MINOR: connection: Make bc_http_major compatible with tcp-checks - BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check - BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded - MINOR: tcp_samples: Add samples to get src/dst info of the backend connection - MINOR: tcp_samples: Be able to call bc_src/bc_dst from the health-checks - BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function - BUG/MINOR: logs: Report the true number of retries if there was no connection - BUILD: makefile: Redirect stderr to /dev/null when probing options - MINOR: uri_normalizer: Add uri_normalizer module - MINOR: uri_normalizer: Add `enum uri_normalizer_err` - MINOR: uri_normalizer: Add `http-request normalize-uri` - MINOR: uri_normalizer: Add a `merge-slashes` normalizer to http-request normalize-uri - MINOR: uri_normalizer: Add a `dotdot` normalizer to http-request normalize-uri - MINOR: uri_normalizer: Add support for supressing leading `../` for dotdot normalizer - MINOR: uri_normalizer: Add a `sort-query` normalizer - MINOR: uri_normalizer: Add a `percent-upper` normalizer - MEDIUM: http_act: Rename uri-normalizers - DOC: Add introduction to http-request normalize-uri - DOC: Note that URI normalization is experimental - BUG/MINOR: pools: maintain consistent ->allocated count on alloc failures - BUG/MINOR: pools/buffers: make sure to always reserve the required buffers - MINOR: pools: drop the unused static history of artificially failed allocs - CLEANUP: pools: remove unused arguments to pool_evict_from_cache() - MEDIUM: pools: move the cache into the pool header - MINOR: pool: remove the size field from pool_cache_head - MINOR: pools: rename CONFIG_HAP_LOCAL_POOLS to CONFIG_HAP_POOLS - MINOR: pools: enable the fault injector in all allocation modes - MINOR: pools: make the basic pool_refill_alloc()/pool_free() update needed_avg - MEDIUM: pools: unify pool_refill_alloc() across all models - CLEANUP: pools: re-merge pool_refill_alloc() and __pool_refill_alloc() - MINOR: pools: call pool_alloc_nocache() out of the pool's lock - CLEANUP: pools: move the lock to the only __pool_get_first() that needs it - CLEANUP: pools: rename __pool_get_first() to pool_get_from_shared_cache() - CLEANUP: pools: rename pool_*_{from,to}_cache() to *_local_cache() - CLEANUP: pools: rename __pool_free() to pool_put_to_shared_cache() - MINOR: tools: add statistical_prng_range() to get a random number over a range - MINOR: pools: use cheaper randoms for fault injections - MINOR: pools: move the fault injector to __pool_alloc() - MINOR: pools: split the OS-based allocator in two - MINOR: pools: always use atomic ops to maintain counters - MINOR: pools: move pool_free_area() out of the lock in the locked version - MINOR: pools: factor the release code into pool_put_to_os() - MEDIUM: pools: make CONFIG_HAP_POOLS control both local and shared pools - MINOR: pools: create unified pool_{get_from,put_to}_cache() - MINOR: pools: evict excess objects using pool_evict_from_local_cache() - MEDIUM: pools: make pool_put_to_cache() always call pool_put_to_local_cache() - CLEANUP: pools: make the local cache allocator fall back to the shared cache - CLEANUP: pools: merge pool_{get_from,put_to}_local_caches with generic ones - CLEANUP: pools: uninline pool_put_to_cache() - CLEANUP: pools: declare dummy pool functions to remove some ifdefs - BUILD: pools: fix build with DEBUG_FAIL_ALLOC - BUG/MINOR: server: make srv_alloc_lb() allocate lb_nodes for consistent hash - CONTRIB: mod_defender: import the minimal number of includes - CONTRIB: mod_defender: make the code build with the embedded includes - CONTRIB: modsecurity: import the minimal number of includes - CONTRIB: modsecurity: make the code build with the embedded includes - CLEANUP: sample: Improve local variables in sample_conv_json_query - CLEANUP: sample: Explicitly handle all possible enum values from mjson - CLEANUP: sample: Use explicit return for successful `json_query`s - CLEANUP: lists/tree-wide: rename some list operations to avoid some confusion - CONTRIB: move spoa_example out of the tree - BUG/MINOR: server: free srv.lb_nodes in free_server - BUG/MINOR: logs: free logsrv.conf.file on exit - BUG/MEDIUM: server: ensure thread-safety of server runtime creation - MINOR: server: add log on dynamic server creation - MINOR: server: implement delete server cli command - CONTRIB: move spoa_server out of the tree - CONTRIB: move modsecurity out of the tree - BUG/MINOR: server: fix potential null gcc error in delete server - BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers - BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames - BUG/MINOR: uri_normalizer: Use delim parameter when building the sorted query in uri_normalizer_query_sort - CLEANUP: uri_normalizer: Remove trailing whitespace - MINOR: uri_normalizer: Add a `strip-dot` normalizer - CONTRIB: move mod_defender out of the tree - CLEANUP: contrib: remove the last references to the now dead contrib/ directory - BUG/MEDIUM: config: fix cpu-map notation with both process and threads - MINOR: config: add a diag for invalid cpu-map statement - BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases - BUG/MINOR: mworker: don't use oldpids[] anymore for reload - BUILD: makefile: fix the "make clean" target on strict bourne shells - IMPORT: slz: import slz into the tree - BUILD: compression: switch SLZ from out-of-tree to in-tree - CI: github: do not build libslz any more - CLEANUP: compression: remove calls to SLZ init functions - BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data - MINOR: cpuset: define a platform-independent cpuset type - MINOR: cfgparse: use hap_cpuset for parse_cpu_set - MEDIUM: config: use platform independent type hap_cpuset for cpu-map - MINOR: thread: implement the detection of forced cpu affinity - MINOR: cfgparse: support the comma separator on parse_cpu_set - MEDIUM: cfgparse: detect numa and set affinity if needed - MINOR: global: add option to disable numa detection - BUG/MINOR: haproxy: fix compilation on macOS - BUG/MINOR: cpuset: fix compilation on platform without cpu affinity - MINOR: time: avoid unneeded updates to now_offset - MINOR: time: avoid overwriting the same values of global_now - CLEANUP: time: use __tv_to_ms() in tv_update_date() instead of open-coding - MINOR: time: avoid u64 needlessly expensive computations for the 32-bit now_ms - BUG/MINOR: peers: remove useless table check if initial resync is finished - BUG/MEDIUM: peers: re-work connection to new process during reload. - BUG/MEDIUM: peers: re-work refcnt on table to protect against flush - BUG/MEDIUM: config: fix missing initialization in numa_detect_topology()	2021-04-23 19:11:10 +02:00
Willy Tarreau	86512dd152	[RELEASE] Released version 2.4-dev16 ... Released version 2.4-dev16 with the following main changes : - CLEANUP: dev/flags: remove useless test in the stdin number parser - MINOR: No longer rely on deprecated sample fetches for predefined ACLs - MINOR: acl: Add HTTP_2.0 predefined macro - BUG/MINOR: hlua: Detect end of request when reading data for an HTTP applet - BUG/MINOR: tools: fix parsing "us" unit for timers - MINOR: server/bind: add support of new prefixes for addresses. - MINOR: log: register config file and line number on log servers. - MEDIUM: log: support tcp or stream addresses on log lines. - BUG/MEDIUM: log: fix config parse error logging on stdout/stderr or any raw fd - CLEANUP: fd: remove FD_POLL_DATA and FD_POLL_STICKY - MEDIUM: fd: prepare FD_POLL_* to move to bits 8-15 - MEDIUM: fd: merge fdtab[].ev and state for FD_EV_* and FD_POLL_* into state - MINOR: fd: move .linger_risk into fdtab[].state - MINOR: fd: move .cloned into fdtab[].state - MINOR: fd: move .initialized into fdtab[].state - MINOR: fd: move .et_possible into fdtab[].state - MINOR: fd: move .exported into fdtab[].state - MINOR: fd: implement an exclusive syscall bit to remove the ugly "log" lock - MINOR: cli/show-fd: slightly reorganize the FD status flags - MINOR: atomic/arm64: detect and use builtins for the double-word CAS - CLEANUP: atomic: add an explicit _FETCH variant for add/sub/and/or - CLEANUP: atomic: make all standard add/or/and/sub operations return void - CLEANUP: atomic: add a fetch-and-xxx variant for common operations - CLEANUP: atomic: add HA_ATOMIC_INC/DEC for unit increments - CLEANUP: atomic/tree-wide: replace single increments/decrements with inc/dec - CLEANUP: atomic: use the __atomic variant of BTS/BTR on modern compilers - MINOR: atomic: implement native BTS/BTR for x86 - MINOR: ist: Add `istappend(struct ist, char)` - MINOR: ist: Add `istshift(struct ist*)` - MINOR: ist: Add `istsplit(struct ist*, char)` - BUG/MAJOR: fd: switch temp values to uint in fd_stop_both() - MINOR: opentracing: register config file and line number on log servers - MEDIUM: resolvers: add support of tcp address on nameserver line. - MINOR: ist: Rename istappend() to __istappend() - CLEANUP: htx: Make http_get_stline take a `const struct` - CLEANUP: ist: Remove unused `count` argument from `ist2str*` - CLEANUP: Remove useless malloc() casts	2021-04-09 17:10:39 +02:00
Willy Tarreau	59fa1d1414	[RELEASE] Released version 2.4-dev15 ... Released version 2.4-dev15 with the following main changes : - BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv - BUG/MINOR: stats: Apply proper styles in HTML status page. - BUG/MEDIUM: time: make sure to always initialize the global tick - BUG/MINOR: tcp: fix silent-drop workaround for IPv6 - BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS - CLEANUP: socket: replace SOL_IP/IPV6/TCP with IPPROTO_IP/IPV6/TCP - BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields - BUG/MINOR: mux-h2: Don't emit log twice if an error occurred on the preface - MINOR: stream: Don't trigger errors on destructive HTTP upgrades - MINOR: frontend: Create HTTP txn for HTX streams - MINOR: stream: Be sure to set HTTP analysers when creating an HTX stream - BUG/MINOR: stream: Properly handle TCP>H1>H2 upgrades in http_wait_for_request - BUG/MINOR: config: Add warning for http-after-response rules in TCP mode - MINOR: muxes: Add a flag to notify a mux does not support any upgrade - MINOR: mux-h1: Don't perform implicit HTTP/2 upgrade if not supported by mux - MINOR: mux-pt: Don't perform implicit HTTP upgrade if not supported by mux - MEDIUM: mux-h1: Expose h1 in the list of supported mux protocols - MEDIUM: mux-pt: Expose passthrough in the list of supported mux protocols - MINOR: muxes: Show muxes flags when the mux list is displayed - DOC: config: Improve documentation about proto/check-proto keywords - MINOR: stream: Use stream type instead of proxy mode when appropriate - MINOR: filters/http-ana: Decide to filter HTTP headers in HTTP analysers - MINOR: http-ana: Simplify creation/destruction of HTTP transactions - MINOR: stream: Handle stream HTTP upgrade in a dedicated function - MEDIUM: Add tcp-request switch-mode action to perform HTTP upgrade - MINOR: config/proxy: Don't warn for HTTP rules in TCP if 'switch-mode http' set - MINOR: config/proxy: Warn if a TCP proxy without backend is upgradable to HTTP - DOC: config: Add documentation about TCP to HTTP upgrades - REGTESTS: Add script to tests TCP to HTTP upgrades - BUG/MINOR: payload/htx: Ingore L6 sample fetches for HTX streams/checks - MINOR: htx: Make internal.strm.is_htx an internal sample fetch - MINOR: action: Use a generic function to check validity of an action rule list - MINOR: payload/config: Warn if a L6 sample fetch is used from an HTTP proxy - MEDIUM: http-rules: Add wait-for-body action on request and response side - REGTESTS: Add script to tests the wait-for-body HTTP action - BUG/MINOR: http-fetch: Fix test on message state to capture the version - CLEANUP: vars: always pre-initialize smp in vars_parse_cli_get_var() - MINOR: global: define diagnostic mode of execution - MINOR: cfgparse: diag for multiple nbthread statements - MINOR: server: diag for 0 weight server - MINOR: diag: create cfgdiag module - MINOR: diag: diag if servers use the same cookie value - MINOR: config: diag if global section after non-global - TESTS: slightly reorganize the code in the tests/ directory - TESTS: move tests/*.cfg to tests/config - REGTESTS: ssl: "set ssl cert" and multi-certificates bundle - REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken - CONTRIB: halog: fix issue with array of type char - CONTRIB: tcploop: add a shutr command - CONTRIB: debug: add the show-fd-to-flags script - CONTRIB: debug: split poll from flags - CONTRIB: move some dev-specific tools to dev/ - BUILD: makefile: always build the flags utility - DEV: flags: replace the unneeded makefile with a README - BUILD: makefile: integrate the hpack tools - CONTRIB: merge ip6range with iprange - CONTRIB: move some admin-related sub-projects to admin/ - CONTRIB: move halog to admin/ - ADMIN: halog: automatically enable USE_MEMCHR on the right glibc version - BUILD: makefile: build halog with the correct flags - BUILD: makefile: add a "USE_PROMEX" variable to ease building prometheus-exporter - CONTRIB: move prometheus-exporter to addons/promex - DOC: add a few words about USE_* and the addons directory - CONTRIB: move 51Degrees to addons/51degrees - CONTRIB: move src/da.c and contrib/deviceatlas to addons/deviceatlas - CONTRIB: move src/wurfl.c and contrib/wurfl to addons/wurfl - CONTRIB: move contrib/opentracing to addons/ot - BUG/MINOR: opentracing: initialization after establishing daemon mode - DOC: clarify that compression works for HTTP/2	2021-04-02 19:16:32 +02:00
Willy Tarreau	af6d88b359	[RELEASE] Released version 2.4-dev14 ... Released version 2.4-dev14 with the following main changes : - MEDIUM: quic: Fix build. - MEDIUM: quic: Fix build. - CI: codespell: whitelist "Dragan Dosen" - CLEANUP: assorted typo fixes in the code and comments - CI: github actions: update LibreSSL to 3.2.5 - REGTESTS: revert workaround for a crash with recent libressl on http-reuse sni - CLEANUP: mark defproxy as const on parse tune.fail-alloc - REGTESTS: remove unneeded experimental-mode in cli add server test - REGTESTS: wait for proper return of enable server in cli add server test - MINOR: compression: use pool_alloc(), not pool_alloc_dirty() - MINOR: spoe: use pool_alloc(), not pool_alloc_dirty() - MINOR: fcgi-app: use pool_alloc(), not pool_alloc_dirty() - MINOR: cache: use pool_alloc(), not pool_alloc_dirty() - MINOR: ssl: use pool_alloc(), not pool_alloc_dirty() - MINOR: opentracing: use pool_alloc(), not pool_alloc_dirty() - MINOR: dynbuf: make b_alloc() always check if the buffer is allocated - CLEANUP: compression: do not test for buffer before calling b_alloc() - CLEANUP: l7-retries: do not test the buffer before calling b_alloc() - MINOR: channel: simplify the channel's buffer allocation - MEDIUM: dynbuf: remove last usages of b_alloc_margin() - CLEANUP: dynbuf: remove b_alloc_margin() - CLEANUP: dynbuf: remove the unused b_alloc_fast() function - CLEANUP: pools: remove the unused pool_get_first() function - MINOR: pools: make the pool allocator support a few flags - MINOR: pools: add pool_zalloc() to return a zeroed area - CLEANUP: connection: use pool_zalloc() in conn_alloc_hash_node() - CLEANUP: filters: use pool_zalloc() in flt_stream_add_filter() - CLEANUP: spoe: use pool_zalloc() instead of pool_alloc+memset - CLEANUP: frontend: use pool_zalloc() in frontend_accept() - CLEANUP: mailers: use pool_zalloc() in enqueue_one_email_alert() - CLEANUP: resolvers: use pool_zalloc() in resolv_link_resolution() - CLEANUP: ssl: use pool_zalloc() in ssl_init_keylog() - CLEANUP: tcpcheck: use pool_zalloc() instead of pool_alloc+memset - CLEANUP: quic: use pool_zalloc() instead of pool_alloc+memset - MINOR: time: also provide a global, monotonic global_now_ms timer - BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable - MINOR: tools: introduce new option PA_O_DEFAULT_DGRAM on str2sa_range. - BUILD: tools: fix build error with new PA_O_DEFAULT_DGRAM - BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list" - CLEANUP: ssl: remove unused definitions - BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro - MINOR: lua: Slightly improve function dumping the lua traceback - BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback - BUG/MEDIUM: lua: Always init the lua stack before referencing the context - MINOR: fd: make fd_clr_running() return the remaining running mask - MINOR: fd: remove the unneeded running bit from fd_insert() - BUG/MEDIUM: fd: do not wait on FD removal in fd_delete() - CLEANUP: fd: remove unused fd_set_running_excl() - CLEANUP: fd: slightly simplify up _fd_delete_orphan() - BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available. - BUG/MEDIUM: release lock on idle conn killing on reached pool high count - BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless - MINOR: tools: make url2ipv4 return the exact number of bytes parsed - BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters - BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent - BUG/MINOR: ssl: Fix update of default certificate - BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one - BUILD: ssl: introduce fine guard for ssl random extraction functions - REORG: global: move initcall register code in a dedicated file - REORG: global: move free acl/action in their related source files - REORG: split proxy allocation functions - MINOR: proxy: implement a free_proxy function - MINOR: proxy: define cap PR_CAP_LUA - MINOR: lua: properly allocate the lua Socket proxy - MINOR: lua: properly allocate the lua Socket servers - MINOR: vars: make get_vars() allow the session to be null - MINOR: vars: make the var() sample fetch keyword depend on nothing - CLEANUP: sample: remove duplicate "stopping" sample fetch keyword - MINOR: sample: make smp_resolve_args() return an allocate error message - MINOR: sample: add a new SMP_SRC_CONST sample capability - MINOR: sample: mark the truly constant sample fetch keywords as such - MINOR: sample: add a new CFG_PARSER context for samples - MINOR: action: add a new ACT_F_CFG_PARSER origin designation - MEDIUM: vars: add support for a "set-var" global directive - REGTESTS: add a basic reg-test for some "set-var" commands - MINOR: sample: add a new CLI_PARSER context for samples - MINOR: action: add a new ACT_F_CLI_PARSER origin designation - MINOR: vars/cli: add a "get var" CLI command to retrieve global variables - MEDIUM: cli: add a new experimental "set var" command - MINOR: compat: add short aliases for a few very commonly used types - BUILD: ssl: use EVP_CIPH_GCM_MODE macro instead of HA_OPENSSL_VERSION - MEDIUM: backend: use a trylock to grab a connection on high FD counts as well	2021-03-27 09:42:09 +01:00
Willy Tarreau	09cc669afb	[RELEASE] Released version 2.4-dev13 ... Released version 2.4-dev13 with the following main changes : - BUG/MEDIUM: cli: fix "help" crashing since recent spelling fixes - BUG/MINOR: cfgparse: use the GLOBAL not LISTEN keywords list for spell checking - MINOR: tools: improve word fingerprinting by counting presence - MINOR: tools: do not sum squares of differences for word fingerprints - MINOR: cli: improve fuzzy matching to work on all remaining words at once - MINOR: cli: sort the suggestions by order of relevance - MINOR: cli: limit spelling suggestions to 5 - MINOR: cfgparse/proxy: also support spelling fixes on options - BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames - MINOR: time: export the global_now variable - BUG/MINOR: freq_ctr/threads: make use of the last updated global time - MINOR: freq_ctr/threads: relax when failing to update a sliding window value - MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket - MINOR: mworker/cli: alert the user if we enabled a master CLI but not the master-worker mode - MINOR: cli: implement experimental-mode - REORG: server: add a free server function - MINOR: cfgparse: always alloc idle conns task - REORG: server: move keywords in srv_kws - MINOR: server: remove fastinter from mistyped kw list - REORG: server: split parse_server - REORG: server: move alert traces in parse_server - REORG: server: rename internal functions from parse_server - REORG: server: attach servers in parse_server - REORG: server: use flags for parse_server - MINOR: server: prepare parsing for dynamic servers - MINOR: stats: export function to allocate extra proxy counters - MEDIUM: server: implement 'add server' cli command - REGTESTS: implement test for 'add server' cli - MINOR: server: enable standard options for dynamic servers - MINOR: server: support keyword proto in 'add server' cli - BUG/MINOR: protocol: add missing support of dgram unix socket. - CLEANUP: Fix a typo in fix_is_valid description - MINOR: raw_sock: Add a close method. - MEDIUM: connections: Introduce a new XPRT method, start(). - MEDIUM: connections: Implement a start() method for xprt_handshake. - MEDIUM: connections: Implement a start() method in ssl_sock. - MINOR: muxes: garbage collect the reset() method. - CLEANUP: tcp-rules: Fix a typo in error messages about expect-netscaler-cip - MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua - BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable	2021-03-19 17:16:18 +01:00
Willy Tarreau	acdd47db9d	[RELEASE] Released version 2.4-dev12 ... Released version 2.4-dev12 with the following main changes : - CLEANUP: connection: Use `VAR_ARRAY` in `struct tlv` definition - CLEANUP: connection: Remove useless test for NULL before calling `pool_free()` - CLEANUP: connection: Use istptr / istlen for proxy_unique_id - MINOR: connection: Use a `struct ist` to store proxy_authority - CLEANUP: connection: Consistently use `struct ist` to process all TLV types - BUILD: task: fix build at -O0 with threads disabled - BUILD: bug: refine HA_LINK_ERROR() to only be used on gcc and derivatives - CLEANUP: config: make the cfg_keyword parsers take a const for the defproxy - BUILD: connection: do not use VAR_ARRAY in struct tlv - BUG/MEDIUM: session: NULL dereference possible when accessing the listener - MINOR: build: force CC to set a return code when probing options - CLEANUP: stream: rename a few remaining occurrences of "stream *sess" - BUG/MEDIUM: resolvers: handle huge responses over tcp servers. - CLEANUP: config: also address the cfg_keyword API change in the compression code - BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake - BUG/MINOR: sample: Rename SenderComID/TargetComID to SenderCompID/TargetCompID - MINOR: task: give the scheduler a bit more flexibility in the runqueue size - OPTIM: task: automatically adjust the default runqueue-depth to the threads - BUG/MINOR: connection: Missing QUIC initialization - BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc. - BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw() - BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached - BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check - BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters - BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check - BUG/MINOR: server-state: properly handle the case where the base is not set - BUG/MINOR: server-state: use the argument, not the global state - CLEANUP: tcp-rules: add missing actions in the tcp-request error message - CLEANUP: vars: make the error message clearer on missing arguments for set-var - CLEANUP: http-rules: remove the unexpected comma before the list of action keywords - CLEANUP: actions: the keyword must always be const from the rule - MINOR: tools: add simple word fingerprinting to find similar-looking words - MINOR: cfgparse: add cfg_find_best_match() to suggest an existing word - MINOR: cfgparse: suggest correct spelling for unknown words in proxy sections - MINOR: cfgparse: suggest correct spelling for unknown words in global section - MINOR: cfgparse/server: try to fix spelling mistakes on server lines - MINOR: cfgparse/bind: suggest correct spelling for unknown bind keywords - MINOR: actions: add a function to suggest an action ressembling a given word - MINOR: http-rules: suggest approaching action names on mismatch - MINOR: tcp-rules: suggest approaching action names on mismatch - BUG/MINOR: cfgparse/server: increment the extra keyword counter one at a time - Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record" - BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error - BUG/MINOR: resolvers: Reset server address on DNS error only on status change - BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution - BUG/MEDIUM: resolvers: Don't set an address-less server as UP - BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item - MINOR: resolvers: new function find_srvrq_answer_record() - BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item - BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete - MINOR: resolvers: Use a function to remove answers attached to a resolution - MINOR: resolvers: Purge answer items when a SRV resolution triggers an error - MINOR: resolvers: Add function to change the srv status based on SRV resolution - MINOR: resolvers: Directly call srvrq_update_srv_state() when possible - BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks - BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set - MINOR: resolvers: Use milliseconds for cached items in resolver responses - MINOR: resolvers: Don't try to match immediatly renewed ADD items - CLEANUP: resolvers: Use ha_free() in srvrq_resolution_error_cb() - CLEANUP: resolvers: Perform unsafe loop on requester list when possible - BUG/MINOR: cli: make sure "help", "prompt", "quit" are enabled at master level - CLEANUP: cli: fix misleading comment and better indent the access level flags - MINOR: cli: set the ACCESS_MASTER* bits on the master bind_conf - MINOR: cli: test the appctx level for master access instead of comparing pointers - MINOR: cli: print the error message in the parser function itself - MINOR: cli: filter the list of commands to the matching part - MEDIUM: cli: apply spelling fixes for known commands before listing them - MINOR: tools: add the ability to update a word fingerprint - MINOR: cli: apply the fuzzy matching on the whole command instead of words - CLEANUP: cli: rename MAX_STATS_ARGS to MAX_CLI_ARGS - CLEANUP: cli: rename the last few "stats_" to "cli_" - CLEANUP: task: make sure tasklet handlers always indicate their statuses - CLEANUP: assorted typo fixes in the code and comments	2021-03-13 11:48:28 +01:00
Willy Tarreau	7bbc6c9ac3	[RELEASE] Released version 2.4-dev11 ... Released version 2.4-dev11 with the following main changes : - CI: codespell: skip Makefile for spell check - CLEANUP: assorted typo fixes in the code and comments - BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule - BUG/MINOR: connection: Use the client's dst family for adressless servers - BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread > 1 - CLEANUP: Use ist2(const void*, size_t) whenever possible - CLEANUP: Use IST_NULL whenever possible - BUILD: proxy: Missing header inclusion for quic_transport_params_init() - BUILD: quic: Implicit conversion between SSL related enums. - DOC: spoe: Add a note about fragmentation support in HAProxy - MINOR: contrib: add support for heartbeat control messages. - MINOR: contrib: Enhance peers dissector heuristic. - BUG/MINOR: mux-h2: Fix typo in scheme adjustment - CLEANUP: Reapply the ist2() replacement patch - CLEANUP: Use istadv(const struct ist, const size_t) whenever possible - CLEANUP: Use isttest(const struct ist) whenever possible - Revert "CI: Pin VTest to a known good commit" - CLEANUP: backend: fix a wrong comment - BUG/MINOR: backend: free allocated bind_addr if reuse conn - MINOR: backend: handle reuse for conns with no server as target - REGTESTS: test http-reuse if no server target - BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring() - BUG/MINOR: server-state: Don't load server-state file for disabled backends - CLEANUP: dns: Use DISGUISE() on a never-failing ring_attach() call - CLEANUP: dns: Remove useless test on ns->dgram in dns_connect_nameserver() - DOC: fix originalto except clause on destination address - CLEANUP: Use the ist() macro whenever possible - CLEANUP: Replace for loop with only a condition by while - REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h - BUG/MINOR: mt-list: always perform a cpu_relax call on failure - MINOR: atomic: add armv8.1-a atomics variant for cas-dw - MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs - BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode - MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS - MINOR: pools: double the local pool cache size to 1 MB - MINOR: stream: use ABORT_NOW() and not abort() in stream_dump_and_crash() - CLEANUP: stream: explain why we queue the stream at the head of the server list - MEDIUM: backend: use a trylock when trying to grab an idle connection - REORG: tools: promote the debug PRNG to more general use as a statistical one - OPTIM: lb-random: use a cheaper PRNG to pick a server - MINOR: task: stop abusing the nice field to detect a tasklet - MINOR: task: move the nice field to the struct task only - MEDIUM: task: extend the state field to 32 bits - MINOR: task: add an application specific flag to the state: TASK_F_USR1 - MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1 - MINOR: xprt: add new xprt_set_idle and xprt_set_used methods - MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks - MINOR: server: don't read curr_used_conns multiple times - CLEANUP: global: reorder some fields to respect cache lines - CLEANUP: sockpair: silence a coverity check about fcntl() - CLEANUP: lua: set a dummy file name and line number on the dummy servers - MINOR: server: add a global list of all known servers - MINOR: cfgparse: finish to set up servers outside of the proxy setup loop - MINOR: server: allocate a per-thread struct for the per-thread connections stuff - MINOR: server: move actconns to the per-thread structure - CLEANUP: server: reorder some fields in the server struct to respect cache lines - MINOR: backend: add a BUG_ON if conn mux NULL in connect_server - BUG/MINOR: backend: fix condition for reuse on mode HTTP - BUILD: Fix build when using clang without optimizing. - CLEANUP: assorted typo fixes in the code and comments	2021-03-05 21:24:23 +01:00
Willy Tarreau	8ab65c201a	[RELEASE] Released version 2.4-dev10 ... Released version 2.4-dev10 with the following main changes : - BUILD: SSL: introduce fine guard for RAND_keep_random_devices_open - MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes - BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert" - BUG/MINOR: sample: secure convs that accept base64 string and var name as args - BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe - CLEANUP: vars: make smp_fetch_var() to reuse vars_get_by_desc() - DOC: muxes: add a diagram of the exchanges between muxes and outer world - BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop - BUG/MEDIUM: cli/shutdown sessions: make it thread-safe - BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal - MINOR: stream: add an "epoch" to figure which streams appeared when - MINOR: cli/streams: make "show sess" dump all streams till the new epoch - MINOR: streams: use one list per stream instead of a global one - MEDIUM: streams: do not use the streams lock anymore - BUILD: dns: avoid a build warning when threads are disabled (dss unused) - MEDIUM: task: remove the tasks_run_queue counter and have one per thread - MINOR: tasks: do not maintain the rqueue_size counter anymore - CLEANUP: tasks: use a less confusing name for task_list_size - CLEANUP: task: move the tree root detection from __task_wakeup() to task_wakeup() - MINOR: task: limit the remote thread wakeup to the global runqueue only - MINOR: task: move the allocated tasks counter to the per-thread struct - CLEANUP: task: split the large tasklet_wakeup_on() function in two - BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl() - BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned - BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record - BUG/MINOR: resolvers: new callback to properly handle SRV record errors - BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records - BUG/MEDIUM: resolvers: Reset address for unresolved servers - DOC: Update the module list in MAINTAINERS file - MINOR: htx: Add function to reserve the max possible size for an HTX DATA block - DOC: Update the HTX API documentation - DOC: Update the filters guide - BUG/MEDIUM: contrib/prometheus-exporter: fix segfault in listener name dump - MINOR: task: split the counts of local and global tasks picked - MINOR: task: do not use __task_unlink_rq() from process_runnable_tasks() - MINOR: task: don't decrement then increment the local run queue - CLEANUP: task: re-merge __task_unlink_rq() with task_unlink_rq() - MINOR: task: make grq_total atomic to move it outside of the grq_lock - MINOR: tasks: also compute the tasklet latency when DEBUG_TASK is set - MINOR: task: make tasklet wakeup latency measurements more accurate - MINOR: server: Be more strict on the server-state line parsing - MINOR: server: Only fill one array when parsing a server-state line - MEDIUM: server: Refactor apply_server_state() to make it more readable - CLEANUP: server: Rename state_line node to node instead of name_name - CLEANUP: server: Rename state_line structure into server_state_line - CLEANUP: server: Use a local eb-tree to store lines of the global server-state file - MINOR: server: Be more strict when reading the version of a server-state file - MEDIUM: server: Store parsed params of a server-state line in the tree - MINOR: server: Remove cached line from global server-state tree when found - MINOR: server: Move loading state of servers in a dedicated function - MEDIUM: server: Use a tree to store local server-state lines - MINOR: server: Parse and store server-state lines in a dedicated function - MEDIUM: server: Don't load server-state file if a line is corrupted - REORG: server: Export and rename some functions updating server info - REORG: server-state: Move functions to deal with server-state in its own file - MINOR: server-state: Don't load server-state file for serverless proxies - CLEANUP: muxes: Remove useless if condition in show_fd function - BUG/MINOR: stats: fix compare of no-maint url suffix - MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY - MINOR: ssl: mark the SSL handshake tasklet as heavy - CLEANUP: server: rename srv_cleanup_{idle,toremove}_connections() - BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup() - MINOR: task: add one extra tasklet class: TL_HEAVY - MINOR: task: place the heavy elements in TL_HEAVY - MINOR: task: only limit TL_HEAVY tasks but not others - BUG/MINOR: http-ana: Only consider dst address to process originalto option - MINOR: tools: Add net_addr structure describing a network addess - MINOR: tools: Add function to compare an address to a network address - MEDIUM: http-ana: Add IPv6 support for forwardfor and orignialto options - CLEANUP: hlua: Use net_addr structure internally to parse and compare addresses - REGTESTS: Add script to test except param for fowardedfor/originalto options - DOC: scheduler: add a diagram showing the different queues and their usages - CLEANUP: tree-wide: replace free(x);x=NULL with ha_free(&x) - CLEANUP: config: replace a few free() with ha_free() - CLEANUP: vars: always zero the pointers after a free() - CLEANUP: ssl: remove a useless "if" before freeing an error message - CLEANUP: ssl: make ssl_sock_free_srv_ctx() zero the pointers after free - CLEANUP: ssl: use realloc() instead of free()+malloc()	2021-02-26 22:49:10 +01:00
Willy Tarreau	31dd393da0	[RELEASE] Released version 2.4-dev9 ... Released version 2.4-dev9 with the following main changes : - BUG/MINOR: server: Remove RMAINT from admin state when loading server state - CLEANUP: check: fix get_check_status_info declaration - CLEANUP: contrib/prometheus-exporter: align for with srv status case - MEDIUM: stats: allow to select one field in `stats_fill_li_stats` - MINOR: stats: add helper to get status string - MEDIUM: contrib/prometheus-exporter: add listen stats - BUG/MINOR: dns: add test on result getting value from buffer into ring. - BUG/MINOR: dns: dns_connect_server must return -1 unsupported nameserver's type - BUG/MINOR: dns: missing test writing in output channel in session handler - BUG/MINOR: dns: fix ring attach control on dns_session_new - BUG/MEDIUM: dns: fix multiple double close on fd in dns.c - BUG/MAJOR: connection: prevent double free if conn selected for removal - BUG/MINOR: session: atomically increment the tracked sessions counter - REGTESTS: fix http_reuse_conn_hash proxy test - BUG/MINOR: backend: do not call smp_make_safe for sni conn hash - MINOR: connection: remove pointers for prehash in conn_hash_params - BUG/MINOR: checks: properly handle wrapping time in __health_adjust() - BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust() - DEBUG: thread: add 5 extra lock labels for statistics and debugging - OPTIM: server: switch the actconn list to an mt-list - Revert "MINOR: threads: change lock_t to an unsigned int" - MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock - OPTIM: lb-first: do not take the server lock on take_conn/drop_conn - OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn - OPTIM: lb-leastconn: do not unlink the server if it did not change - MINOR: tasks: add DEBUG_TASK to report caller info in a task - MINOR: tasks/debug: add some extra controls of use-after-free in DEBUG_TASK - BUG/MINOR: sample: Always consider zero size string samples as unsafe - MINOR: cli: add missing agent commands for set server - BUILD/MEDIUM: da Adding pcre2 support. - BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions - REGTESTS: reorder reuse conn proxy protocol test - DOC: explain the relation between pool-low-conn and tune.idle-pool.shared - MINOR: tasks: refine the default run queue depth - MINOR: listener: refine the default MAX_ACCEPT from 64 to 4 - MINOR: mux_h2: do not try to remove front conn from idle trees - REGTESTS: workaround for a crash with recent libressl on http-reuse sni - BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ(). - MINOR: connection: allocate dynamically hash node for backend conns - DOC: DeviceAtlas documentation typo fix. - BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer - BUG/MINOR: http-rules: Always replace the response status on a return action - BUG/MINOR: server: Init params before parsing a new server-state line - BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line - MEDIUM: server: Don't introduce a new server-state file version - DOC: contrib/prometheus-exporter: remove htx reference - REGTESTS: contrib/prometheus-exporter: test NaN values - REGTESTS: contrib/prometheus-exporter: test well known labels - CI: github actions: switch to stable LibreSSL release - BUG/MINOR: server: Fix test on number of fields allowed in a server-state line - MINOR: dynbuf: make the buffer wait queue per thread - MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait - MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold - MINOR: sched: have one runqueue ticks counter per thread	2021-02-20 13:30:31 +01:00
Willy Tarreau	dc626ecdd2	[RELEASE] Released version 2.4-dev8 ... Released version 2.4-dev8 with the following main changes : - BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro - BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro - BUG/MINOR: mux-h1: Don't emit extra CRLF for empty chunked messages - MINOR: contrib/prometheus-exporter: use stats desc when possible followup - MEDIUM: contrib/prometheus-exporter: export base stick table stats - CLEANUP: assorted typo fixes in the code and comments - CLEANUP: check: fix some typo in comments - CLEANUP: tools: typo in `strl2irc` mention - BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro - MEDIUM: ssl: add a rwlock for SSL server session cache - BUG/MINOR: intops: fix mul32hi()'s off-by-one - BUG/MINOR: freq_ctr: fix a wrong delay calculation in next_event_delay() - MINOR: stick-tables/counters: add http_fail_cnt and http_fail_rate data types - MINOR: ssl: add SSL_SERVER_LOCK label in threads.h - BUG/MINOR: mux-h1: Don't increment HTTP error counter for 408/500/501 errors - BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors - BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state - BUG/MINOR: mux-h1: Fix data skipping for bodyless responses - BUG/MINOR: mux-h1: Don't blindly skip EOT block for non-chunked messages - BUG/MEDIUM: mux-h2: Add EOT block when EOM flag is set on an empty HTX message - MINOR: mux-h1: Be sure EOM flag is set when processing end of outgoing message - REGTESTS: Add a script to test payload skipping for bodyless HTTP responses - BUG/MINOR: server: re-align state file fields number - CLEANUP: muxes: Remove useless calls to b_realign_if_empty() - BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints() - CLEANUP: remove unused variable assigned found by Coverity - CLEANUP: queue: Remove useless tests on p or pp in pendconn_process_next_strm() - BUG/MINOR: backend: hold correctly lock when killing idle conn - MEDIUM: connection: protect idle conn lists with locks - MEDIUM: connection: replace idle conn lists by eb trees - MINOR: backend: search conn in idle/safe trees after available - MINOR: backend: search conn in idle tree after safe on always reuse - MINOR: connection: prepare hash calcul for server conns - MINOR: connection: use the srv pointer for the srv conn hash - MINOR: backend: compare conn hash for session conn reuse - MINOR: connection: use sni as parameter for srv conn hash - MINOR: reg-tests: test http-reuse with sni - MINOR: backend: rewrite alloc of stream target address - MINOR: connection: use dst addr as parameter for srv conn hash - MINOR: reg-test: test http-reuse with specific dst addr - MINOR: backend: rewrite alloc of connection src address - MINOR: connection: use src addr as parameter for srv conn hash - MINOR: connection: use proxy protocol as parameter for srv conn hash - MINOR: reg-tests: test http-reuse with proxy protocol - MINOR: doc: update http reuse for new eligilible connections - BUG/MINOR: backend: fix compilation without ssl - REGTESTS: adjust http_reuse_conn_hash requirements - REGTESTS: deactivate a failed test on CI in http_reuse_conn_hash - REGTESTS: fix sni used in http_reuse_conn_hash for libressl 3.3.0 - CI: cirrus: update FreeBSD image to 12.2 - MEDIUM: cli: add check-addr command - MEDIUM: cli: add agent-port command - MEDIUM: server: add server-states version 2 - MEDIUM: server: support {check,agent}_addr, agent_port in server state - MINOR: server: enhance error precision when applying server state - BUG/MINOR: server: Fix server-state-file-name directive - CLEANUP: deinit: release global and per-proxy server-state variables on deinit - BUG/MEDIUM: config: don't pick unset values from last defaults section - BUG/MINOR: stats: revert the change on ST_CONVDONE - BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines - BUG/MINOR: http-htx: defpx must be a const in proxy_dup_default_conf_errors() - BUG/MINOR: tcpheck: the source list must be a const in dup_tcpcheck_var() - BUILD: proxy: add missing compression-t.h to proxy-t.h - REORG: move init_default_instance() to proxy.c and pass it the defproxy pointer - REORG: proxy: centralize the proxy allocation code into alloc_new_proxy() - MEDIUM: proxy: only take defaults when a default proxy is passed. - MINOR: proxy: move the defproxy freeing code to proxy.c - MINOR: proxy: always properly reset the just freed default instance pointers - BUG/MINOR: extcheck: proxy_parse_extcheck() must take a const for the defproxy - BUG/MINOR: tcpcheck: proxy_parse_*check*() must take a const for the defproxy - BUG/MINOR: server: parse_server() must take a const for the defproxy - MINOR: cfgparse: move defproxy to cfgparse-listen as a static - MINOR: proxy: add a new capability PR_CAP_DEF - MINOR: cfgparse: check PR_CAP_DEF instead of comparing poiner against defproxy - MINOR: cfgparse: use a pointer to the current default proxy - MINOR: proxy: also store the name for a defaults section - MINOR: proxy: support storing defaults sections into their own tree - MEDIUM: proxy: store the default proxies in a tree by name - MEDIUM: cfgparse: allow a proxy to designate the defaults section to use - MINOR: http: add baseq sample fetch - CLEANUP: tcpcheck: Remove a useless test on port variable - BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL - CLEANUP: server: Remove useless "filepath" variable in apply_server_state() - MINOR: peers/cli: do not dump the peers dictionaries by default on "show peers" - MINOR: cfgparse: implement a simple if/elif/else/endif macro block handler - DOC: tune: explain the origin of block size for ssl.cachesize - MINOR: tcp: add support for defer-accept on FreeBSD. - MINOR: ring: adds new ring_init function. - CLEANUP: channel: fix comment in ci_putblk. - BUG/MINOR: dns: add missing sent counter and parent id to dns counters. - BUG/MINOR: resolvers: fix attribute packed struct for dns - MINOR: resolvers: renames some resolvers internal types and removes dns prefix - MINOR: resolvers: renames type dns_resolvers to resolvers. - MINOR: resolvers: renames some resolvers specific types to not use dns prefix - MINOR: resolvers: renames some dns prefixed types using resolv prefix. - MINOR: resolvers: renames resolvers DNS_RESP_* errcodes RSLV_RESP_* - MINOR: resolvers: renames resolvers DNS_UPD_* returncodes to RSLV_UPD_* - MINOR: resolvers: rework prototype suffixes to split resolving and dns. - MEDIUM: resolvers: move resolvers section parsing from cfgparse.c to dns.c - MINOR: resolvers: replace nameserver's resolver ref by generic parent pointer - MINOR: resolvers: rework dns stats prototype because specific to resolvers - MEDIUM: resolvers: split resolving and dns message exchange layers. - MEDIUM: resolvers/dns: split dns.c into dns.c and resolvers.c - MEDIUM: dns: adds code to support pipelined DNS requests over TCP. - MEDIUM: resolvers: add supports of TCP nameservers in resolvers.	2021-02-13 10:17:27 +01:00
Willy Tarreau	5d46fbddb1	[RELEASE] Released version 2.4-dev7 ... Released version 2.4-dev7 with the following main changes : - BUG/MINOR: stats: Continue to fill frontend stats on unimplemented metric - BUILD: ssl: guard Client Hello callbacks with HAVE_SSL_CLIENT_HELLO_CB macro instead of openssl version - BUG/MINOR: stats: Init the metric variable when frontend stats are filled - MINOR: contrib/prometheus-exporter: better output of Not-a-Number - CLEANUP: stats: improve field selection for frontend http fields - CLEANUP: assorted typo fixes in the code and comments - DOC: Improve documentation of the various hdr() fetches - MEDIUM: stats: allow to select one field in `stats_fill_be_stats` - MINOR: contrib/prometheus-exporter: use fill_be_stats for backend dump - MEDIUM: stats: allow to select one field in `stats_fill_sv_stats` - MINOR: contrib/prometheus-exporter: use fill_sv_stats for server dump - MINOR: abort() on my_unreachable() when DEBUG_USE_ABORT is set. - BUG/MEDIUM: filters/htx: Fix data forwarding when payload length is unknown - BUG/MINOR: config: fix leak on proxy.conn_src.bind_hdr_name - MINOR: reg-tests: add http-reuse test - CLEANUP: srv: fix comment for pool-max-conn - CLEANUP: backend: remove an obsolete comment on conn_backend_get - REORG: backend: simplify conn_backend_get - MINOR: ssl: Server ssl context prepare function refactoring - MINOR: ssl: Certificate chain loading refactorization - MEDIUM: ssl: Load client certificates in a ckch for backend servers - MEDIUM: ssl: Enable backend certificate hot update - MINOR: ssl: Remove client_crt member of the server's ssl context - CLEANUP: ssl/cli: rework free in cli_io_handler_commit_cert() - CLEANUP: ssl: remove SSL_CTX function parameter - CLEANUP: ssl: make load_srv_{ckchs,cert} match their bind counterpart - BUILD: Include stdlib.h in compiler.h if DEBUG_USE_ABORT is set - CI: Fix DEBUG_STRICT definition for Coverity - BUG/MINOR: stats: Remove a break preventing ST_F_QCUR to be set for servers - BUG/MINOR: stats: Add a break after filling ST_F_MODE field for servers - CLEANUP: ssl: remove dead code in ckch_inst_new_load_srv_store() - BUG/MINOR: ssl: init tmp chunk correctly in ssl_sock_load_sctl_from_file() - BUG/MEDIUM: session: only retrieve ready idle conn from session - BUG/MEDIUM: backend: never reuse a connection for tcp mode - REGTESTS: set_ssl_server_cert.vtc: remove the abort command - REGTESTS: set_ssl_server_cert.vtc: check the Sha1 Fingerprint - REGTESTS: set_ssl_server_cert.vtc: check the sha1 from the server - MEDIUM: stream-int: Take care of EOS if the SI wake callback function - MINOR: mux-h1: Try to wake up data layer first before calling its wake callback - MINOR: mux-h1: Wake up H1C after its creation if input buffer is not empty - MEDIUM: mux-h1: Add ST_READY state for the H1 connections - MINOR: stream: Add a function to validate TCP to H1 upgrades - MEDIUM: http-ana: Do nothing in wait-for-request analyzer if not htx - BUG/MEDIUM: stream: Don't immediatly ack the TCP to H1 upgrades - BUG/MAJOR: mux-h1: Properly handle TCP to H1 upgrades - MINOR: htx/http-ana: Save info about Upgrade option in the Connection header - MEDIUM: http-ana: Refuse invalid 101-switching-protocols responses - BUG/MINOR: h2/mux-h2: Reject 101 responses with a PROTOCOL_ERROR h2s error - MINOR: mux-h1/mux-fcgi: Don't set TUNNEL mode if payload length is unknown - MINOR: mux-h1: Split H1C_F_WAIT_OPPOSITE flag to separate input/output sides - MINOR: mux-h2: Add 2 flags to help to properly handle tunnel mode - MEDIUM: mux-h2: Block client data on server side waiting tunnel establishment - MEDIUM: mux-h2: Close streams when processing data for an aborted tunnel - MEDIUM: mux-h1: Properly handle tunnel establishments and aborts - BUG/MAJOR: mux-h1/mux-h2/htx: Fix HTTP tunnel management at the mux level - MINOR: htx: Rename HTX_FL_EOI flag into HTX_FL_EOM - REGTESTS: Don't run http_msg_full_on_eom script on the 2.4 anymore - MINOR: htx: Add a function to know if a block is the only one in a message - MAJOR: htx: Remove the EOM block type and use HTX_FL_EOM instead - MINOR: mux-h1: Add a flag on H1 streams with a response known to be bodyless - MEDIUM: mux-h1: Don't emit any payload for bodyless responses - MINOR: mux-h1: Don't emit C-L and T-E headers for 204 and 1xx responses - MINOR: mux-h1: Don't add Connection close/keep-alive header for 1xx messages - MINOR: h2/mux-h2: Add flags to notify the response is known to have no body - MEDIUM: mux-h2: Don't emit DATA frame for bodyless responses - MEDIUM: http-ana: Deal with L7 retries in HTTP analysers - MINOR: h1: reject websocket handshake if missing key - MEDIUM: h1: generate WebSocket key on response if needed - MINOR: mux_h2: define H2_SF_EXT_CONNECT_SENT stream flag - MEDIUM: h2: parse Extended CONNECT reponse to htx - MEDIUM: mux_h2: generate Extended CONNECT from htx upgrade - MEDIUM: h1: add a WebSocket key on handshake if needed - MEDIUM: mux_h2: generate Extended CONNECT response - MEDIUM: h2: parse Extended CONNECT request to htx - MEDIUM: h2: send connect protocol h2 settings - MINOR: vtc: add test for h1/h2 protocol upgrade translation - MINOR: vtc: add websocket test - REGTESTS: Fix required versions for several scripts - REGTEST: Don't use the websocket to validate http-check - MINOR: mux-h1/trace: add traces at level ERROR for all kind of errors - MINOR: mux-fcgi/trace: add traces at level ERROR for all kind of errors - MINOR: h1: Raise the chunk size limit up to (2^52 - 1) - BUG/MEDIUM: listener: do not accept connections faster than we can process them - REGTESTS: set_ssl_server_cert.vtc: set as broken - Revert "BUG/MEDIUM: listener: do not accept connections faster than we can process them" - BUG/MINOR: backend: check available list allocation for reuse - CI: Fix the coverity builds - DOC: management: fix "show resolvers" alphabetical ordering - MINOR: tools: add print_time_short() to print a condensed duration value - MINOR: activity: make profiling more manageable - MINOR: activity: declare a new structure to collect per-function activity - MEDIUM: tasks/activity: collect per-task statistics when profiling is enabled - MINOR: activity: also report collected tasks stats in "show profiling" - MINOR: activity: flush scheduler stats on "set profiling tasks on" - MINOR: activity: add a new "show tasks" command to list currently active tasks - MINOR: listener: export accept_queue_process - MINOR: session: export session_expire_embryonic() - MINOR: muxes: export the timeout and shutr task handlers - MINOR: checks: export a few functions that appear often in trace dumps - MINOR: peers: export process_peer_sync() to improve traces - MINOR: stick-tables: export process_table_expire() - MINOR: mux-h1: Remove first useless test on count in h1_process_output() - BUG/MINOR: stick-table: Always call smp_fetch_src() with a valid arg list - MINOR: http-fetch: Don't check if argument list is set in sample fetches - MINOR: http-conv: Don't check if argument list is set in sample converters - MINOR: sample: Don't check if argument list is set in sample fetches - MINOR: ssl-sample: Don't check if argument list is set in sample fetches - MINOR: mux-h2: Don't tests the start-line when sending HEADERS frame - MINOR: mux-h2: Slightly improve request HEADERS frames sending - MINOR: contrib/prometheus-exporter: declare states for objects - MAJOR: contrib/prometheus-exporter: move ftd/bkd/srv states to labels - MEDIUM: contrib/prometheus-exporter: Use dynamic labels instead of static ones - MINOR: listener: export manage_global_listener_queue() - BUG/MINOR: activity: take care of late wakeups in "show tasks" - REGTESTS: set_ssl_server_cert.vtc: remove SSL caching and set as working - REGTESTS: set_ssl_server_cert: cleanup the SSL caching option - MINOR: checks: Add function to get the result code corresponding to a status - MAJOR: contrib/prometheus-exporter: move health check status to labels - MINOR: contrib/prometheus-exporter: improve service status description field - MINOR: stats: improve pending connections description - MINOR: stats: improve max stats descriptions - MINOR: contrib/prometheus-exporter: use stats desc when possible - MINOR: contrib/prometheus-exporter: add uweight field - MINOR: contrib/prometheus-exporter: add recv logs_logs_total field - CLEANUP: contrib/prometheus-exporter: remove unused includes - CLEANUP: contrib/prometheus-exporter: align and reorder fields - CLEANUP: contrib/prometheus-exporter: remove description in README - DOC: contrib/prometheus-exporter: Add missing metrics in README - BUG/MINOR: contrib/prometheus-exporter: Add missing label for ST_F_HRSP_1XX - BUG/MINOR: contrib/prometheus-exporter: Restart labels dump at the right pos - BUG/MEDIUM: ssl/cli: abort ssl cert is freeing the old store - BUG/MEDIUM: ssl: check a connection's status before computing a handshake - BUG/MINOR: mux_h2: fix incorrect stat titles - MINOR: ssl/cli: flush the server session cache upon 'commit ssl cert' - BUG/MINOR: cli: fix set server addr/port coherency with health checks - MINOR: server: Don't set the check port during the update from a state file - MINOR: dns: Don't set the check port during a server dns resolution - MEDIUM: check: remove checkport checkaddr flag - MEDIUM: server: adding support for check_port in server state - BUG/MINOR: check: consitent way to set agentaddr - MEDIUM: check: align agentaddr and agentport behaviour - DOC: server: Add missing params in comment of the server state line parsing - BUG/MINOR: xxhash: make sure armv6 uses memcpy() - REGTESTS: mark http-check-send.vtc as 2.4-only - REGTESTS: mark sample_fetches/hashes.vtc as 2.4-only - BUG/MINOR: ssl: do not try to use early data if not configured - REGTESTS: unbreak http-check-send.vtc - MINOR: cli/show_fd: report local and report ports when known - BUILD: Makefile: move REGTESTST_TYPE default setting - BUG/MEDIUM: mux-h2: handle remaining read0 cases - CLEANUP: http-htx: Set buffer area to NULL instead of malloc(0) - BUG/MINOR: sock: Unclosed fd in case of connection allocation failure - BUG/MEDIUM: mux-h2: do not quit the demux loop before setting END_REACHED	2021-02-05 15:17:33 +01:00
Willy Tarreau	24c41d55bd	[RELEASE] Released version 2.4-dev6 ... Released version 2.4-dev6 with the following main changes : - MINOR: converter: adding support for url_enc - BUILD: SSL: guard TLS13 ciphersuites with HAVE_SSL_CTX_SET_CIPHERSUITES - BUILD: ssl: guard EVP_PKEY_get_default_digest_nid with ASN1_PKEY_CTRL_DEFAULT_MD_NID - BUILD: ssl: guard openssl specific with SSL_READ_EARLY_DATA_SUCCESS - BUILD: Makefile: exclude broken tests by default - CLEANUP: cfgparse: replace "realloc" with "my_realloc2" to fix to memory leak on error - BUG/MINOR: hlua: Fix memory leak in hlua_alloc - MINOR: contrib/prometheus-exporter: export build_info - DOC: fix some spelling issues over multiple files - CLEANUP: Fix spelling errors in comments - SCRIPTS: announce-release: fix typo in help message - CI: github: add a few more words to the codespell ignore list - DOC: Add maintainers for the Prometheus exporter - BUG/MINOR: sample: fix concat() converter's corruption with non-string variables - BUG/MINOR: server: Memory leak of proxy.used_server_addr during deinit - CLEANUP: sample: remove uneeded check in json validation - MINOR: reg-tests: add a way to add service dependency - BUG/MINOR: sample: check alloc_trash_chunk return value in concat() - BUG/MINOR: reg-tests: fix service dependency script - MINOR: reg-tests: add base prometheus test - Revert "BUG/MINOR: dns: SRV records ignores duplicated AR records" - BUG/MINOR: sample: Memory leak of sample_expr structure in case of error - BUG/MINOR: check: Don't perform any check on servers defined in a frontend - BUG/MINOR: init: enforce strict-limits when using master-worker - MINOR: contrib/prometheus-exporter: avoid connection close header - MINOR: contrib/prometheus-exporter: use fill_info for process dump - BUG/MINOR: init: Use a dynamic buffer to set HAPROXY_CFGFILES env variable - MINOR: config: Add failifnotcap() to emit an alert on proxy capabilities - MINOR: server: Forbid server definitions in frontend sections - BUG/MINOR: threads: Fixes the number of possible cpus report for Mac. - CLEANUP: pattern: rename pat_ref_commit() to pat_ref_commit_elt() - MINOR: pattern: add the missing generation ID manipulation functions - MINOR: peers: Add traces for peer control messages. - BUG/MINOR: dns: SRV records ignores duplicated AR records (v2) - BUILD: peers: fix build warning about unused variable - BUG/MEDIUM: stats: add missing INF_BUILD_INFO definition - MINOR: cache: Do not store responses with an unknown encoding - BUG/MINOR: peers: Possible appctx pointer dereference. - MINOR: build: discard echoing in help target - MINOR: cache: Remove the `hash` part of the accept-encoding secondary key - CLEANUP: cache: Use proper data types in secondary_key_cmp() - CLEANUP: Rename accept_encoding_hash_cmp to accept_encoding_bitmap_cmp - BUG/MINOR: peers: Wrong "new_conn" value for "show peers" CLI command. - MINOR: contrib: Make the wireshark peers dissector compile for more distribs. - BUG/MINOR: mux_h2: missing space between "st" and ".flg" in the "show fd" helper - CLEANUP: tools: make resolve_sym_name() take a const pointer - CLEANUP: cli: make "show fd" use a const connection to access other fields - MINOR: cli: make "show fd" also report the xprt and xprt_ctx - MINOR: xprt: add a new show_fd() helper to complete some "show fd" dumps. - MINOR: ssl: provide a "show fd" helper to report important SSL information - MINOR: xprt/mux: export all *_io_cb functions so that "show fd" resolves them - MINOR: mux-h2: make the "show fd" helper also decode the h2s subscriber when known - MINOR: mux-h1: make the "show fd" helper also decode the h1s subscriber when known - MINOR: mux-fcgi: make the "show fd" helper also decode the fstrm subscriber when known - CI: Pin VTest to a known good commit - MINOR: cli: give the show_fd helpers the ability to report a suspicious entry - MINOR: cli/show_fd: report some easily detectable suspicious states - MINOR: ssl/show_fd: report some FDs as suspicious when possible - MINOR: mux-h2/show_fd: report as suspicious an entry with too many calls - MINOR: mux-h1/show_fd: report as suspicious an entry with too many calls - BUG/MINOR: mworker: define _GNU_SOURCE for strsignal() - BUG/MEDIUM: tcpcheck: Don't destroy connection in the wake callback context - BUG/MEDIUM: mux-h2: Xfer rxbuf to the upper layer when creating a front stream - MINOR: http: Add HTTP 501-not-implemented error message - MINOR: muxes: Add exit status for errors about not implemented features - MINOR: mux-h1: Be prepared to return 501-not-implemented error during parsing - MEDIUM: mux-h1: Return a 501-not-implemented for upgrade requests with a body - DOC: Remove space after comma in converter signature - DOC: Rename '<var name>' to '<var>' in converter signature - MINOR: stats: duplicate 3 fields in bytes in info - MINOR: stats: add new start time field - MINOR: contrib/prometheus-exporter: merge info description from stats - MEDIUM: stats: allow to select one field in `stats_fill_fe_stats` - MINOR: contrib/prometheus-exporter: use fill_fe_stats for frontend dump - MINOR: contrib/prometheus-exporter: Don't needlessly set empty label for metrics - MINOR: contrib/prometheus-exporter: Split the PROMEX_FL_STATS_METRIC flag - MINOR: contrib/prometheus-exporter: Add promex_metric struct defining a metric - MEDIUM: contrib/prometheus-exporter: Rework matrices defining Promex metrics - BUG/MINOR: stream: Don't update counters when TCP to H2 upgrades are performed - BUG/MEDIUM: mux-h2: fix read0 handling on partial frames - MINOR: debug: always export the my_backtrace function - MINOR: debug: extract the backtrace dumping code to its own function - MINOR: debug: create ha_backtrace_to_stderr() to dump an instant backtrace - MEDIUM: debug: now always print a backtrace on CRASH_NOW() and friends - MINOR: debug: let ha_dump_backtrace() dump a bit further for some callers - BUILD: debug: fix build warning by consuming the write() result - MINOR: lua: remove unused variable - BUILD/MINOR: lua: define _GNU_SOURCE for LLONG_MAX	2021-01-22 16:19:46 +01:00
Willy Tarreau	421ed3952d	[RELEASE] Released version 2.4-dev5 ... Released version 2.4-dev5 with the following main changes : - BUG/MEDIUM: mux_h2: Add missing braces in h2_snd_buf()around trace+wakeup - BUILD: hpack: hpack-tbl-t.h uses VAR_ARRAY but does not include compiler.h - MINOR: time: increase the minimum wakeup interval to 60s - MINOR: check: do not ignore a connection header for http-check send - REGTESTS: complete http-check test - CI: travis-ci: drop coverity scan builds - MINOR: atomic: don't use ; to separate instruction on aarch64. - IMPORT: xxhash: update to v0.8.0 that introduces stable XXH3 variant - MEDIUM: xxhash: use the XXH3 functions to generate 64-bit hashes - MEDIUM: xxhash: use the XXH_INLINE_ALL macro to inline all functions - CLEANUP: xxhash: remove the unused src/xxhash.c - MINOR: sample: add the xxh3 converter - REGTESTS: add tests for the xxh3 converter - MINOR: protocol: Create proto_quic QUIC protocol layer. - MINOR: connection: Attach a "quic_conn" struct to "connection" struct. - MINOR: quic: Redefine control layer callbacks which are QUIC specific. - MINOR: ssl_sock: Initialize BIO and SSL objects outside of ssl_sock_init() - MINOR: connection: Add a new xprt to connection. - MINOR: ssl: Export definitions required by QUIC. - MINOR: cfgparse: Do not modify the QUIC xprt when parsing "ssl". - MINOR: tools: Add support for QUIC addresses parsing. - MINOR: quic: Add definitions for QUIC protocol. - MINOR: quic: Import C source code files for QUIC protocol. - MINOR: listener: Add QUIC info to listeners and receivers. - MINOR: server: Add QUIC definitions to servers. - MINOR: ssl: SSL CTX initialization modifications for QUIC. - MINOR: ssl: QUIC transport parameters parsing. - MINOR: quic: QUIC socket management finalization. - MINOR: cfgparse: QUIC default server transport parameters init. - MINOR: quic: Enable the compilation of QUIC modules. - MAJOR: quic: Make usage of ebtrees to store QUIC ACK ranges. - MINOR: quic: Attempt to make trace more readable - MINOR: quic: Make usage of the congestion control window. - MINOR: quic: Flag RX packet as ack-eliciting from the generic parser. - MINOR: quic: Code reordering to help in reviewing/modifying. - MINOR: quic: Add traces to congestion avoidance NewReno callback. - MINOR: quic: Display the SSL alert in ->ssl_send_alert() callback. - MINOR: quic: Update the initial salt to that of draft-29. - MINOR: quic: Add traces for in flght ack-eliciting packet counter. - MINOR: quic: make a packet build fails when qc_build_frm() fails. - MINOR: quic: Add traces for quic_packet_encrypt(). - MINOR: cache: Refactoring of secondary_key building functions - MINOR: cache: Avoid storing responses whose secondary key was not correctly calculated - BUG/MINOR: cache: Manage multiple headers in accept-encoding normalization - MINOR: cache: Add specific secondary key comparison mechanism - MINOR: http: Add helper functions to trim spaces and tabs - MEDIUM: cache: Manage a subset of encodings in accept-encoding normalizer - REGTESTS: cache: Simplify vary.vtc file - REGTESTS: cache: Add a specific test for the accept-encoding normalizer - MINOR: cache: Remove redundant test in http_action_req_cache_use - MINOR: cache: Replace the "process-vary" option's expected values - CI: GitHub Actions: enable daily Coverity scan - BUG/MEDIUM: cache: Fix hash collision in `accept-encoding` handling for `Vary` - MEDIUM: stick-tables: Add srvkey option to stick-table - REGTESTS: add test for stickiness using "srvkey addr" - BUILD: Makefile: disable -Warray-bounds until it's fixed in gcc 11 - BUG/MINOR: sink: Return an allocation failure in __sink_new if strdup() fails - BUG/MINOR: lua: Fix memory leak error cases in hlua_config_prepend_path - MINOR: lua: Use consistent error message 'memory allocation failed' - CLEANUP: Compare the return value of `XXXcmp()` functions with zero - CLEANUP: Apply the coccinelle patch for `XXXcmp()` on include/ - CLEANUP: Apply the coccinelle patch for `XXXcmp()` on contrib/ - MINOR: qpack: Add static header table definitions for QPACK. - CLEANUP: qpack: Wrong comment about the draft for QPACK static header table. - CLEANUP: quic: Remove useless QUIC event trace definitions. - BUG/MINOR: quic: Possible CRYPTO frame building errors. - MINOR: quic: Pass quic_conn struct to frame parsers. - BUG/MINOR: quic: Wrong STREAM frames parsing. - MINOR: quic: Drop packets with STREAM frames with wrong direction. - CLEANUP: ssl: Remove useless loop in tlskeys_list_get_next() - CLEANUP: ssl: Remove useless local variable in tlskeys_list_get_next() - MINOR: ssl: make tlskeys_list_get_next() take a list element - Revert "BUILD: Makefile: disable -Warray-bounds until it's fixed in gcc 11" - BUG/MINOR: cfgparse: Fail if the strdup() for `rule->be.name` for `use_backend` fails - CLEANUP: mworker: remove duplicate pointer tests in cfg_parse_program() - CLEANUP: Reduce scope of `header_name` in http_action_store_cache() - CLEANUP: Reduce scope of `hdr_age` in http_action_store_cache() - CLEANUP: spoe: fix typo on `var_check_arg` comment - BUG/MINOR: tcpcheck: Report a L7OK if the last evaluated rule is a send rule - CI: github actions: build several popular "contrib" tools - DOC: Improve the message printed when running `make` w/o `TARGET` - BUG/MEDIUM: server: srv_set_addr_desc() crashes when a server has no address - REGTESTS: add unresolvable servers to srvkey-addr - BUG/MINOR: stats: Make stat_l variable used to dump a stat line thread local - BUG/MINOR: quic: NULL pointer dereferences when building post handshake frames. - SCRIPTS: improve announce-release to support different tag and versions - SCRIPTS: make announce release support preparing announces before tag exists - CLEANUP: assorted typo fixes in the code and comments - BUG/MINOR: srv: do not init address if backend is disabled - BUG/MINOR: srv: do not cleanup idle conns if pool max is null - CLEANUP: assorted typo fixes in the code and comments - CLEANUP: few extra typo and fixes over last one ("ot" -> "to")	2021-01-06 17:41:32 +01:00
Willy Tarreau	4d711760de	[RELEASE] Released version 2.4-dev4 ... Released version 2.4-dev4 with the following main changes : - BUG/MEDIUM: lb-leastconn: Reposition a server using the right eweight - BUG/MEDIUM: mux-h1: Fix a deadlock when a 408 error is pending for a client - BUG/MEDIUM: ssl/crt-list: bad behavior with "commit ssl cert" - BUG/MAJOR: cache: Crash because of disabled entry not removed from the tree - BUILD: SSL: fine guard for SSL_CTX_add_server_custom_ext call - MEDIUM: cache: Add a secondary entry counter and insertion limitation - MEDIUM: cache: Avoid going over duplicates lists too often - MINOR: cache: Add a max-secondary-entries cache option - CI: cirrus: drop CentOS 6 builds - BUILD: Makefile: have "make clean" destroy .o/.a/.s in contrib subdirs as well - MINOR: vars: replace static functions with global ones - MINOR: opentracing: add ARGC_OT enum - CONTRIB: opentracing: add the OpenTracing filter - DOC: opentracing: add the OpenTracing filter section - REGTESTS: make use of HAPROXY_ARGS and pass -dM by default - BUG/MINOR: http: Establish a tunnel for all 2xx responses to a CONNECT - BUG/MINOR: mux-h1: Don't set CS_FL_EOI too early for protocol upgrade requests - BUG/MEDIUM: http-ana: Never for sending data in TUNNEL mode - CLEANUP: mux-h2: Rename h2s_frt_make_resp_data() to be generic - CLEANUP: mux-h2: Rename h2c_frt_handle_data() to be generic - BUG/MEDIUM: mux-h1: Handle h1_process() failures on a pipelined request - CLEANUP: debug: mark the RNG's seed as unsigned - CONTRIB: halog: fix build issue caused by %L printf format - CONTRIB: halog: mark the has_zero* functions unused - CONTRIB: halog: fix signed/unsigned build warnings on counts and timestamps - CONTRIB: debug: address "poll" utility build on non-linux platforms - BUILD: plock: remove dead code that causes a warning in gcc 11 - BUILD: ssl: fine guard for SSL_CTX_get0_privatekey call - BUG/MINOR: dns: SRV records ignores duplicated AR records - DOC: fix "smp_size" vs "sample_size" in "log" directive arguments - CLEANUP: assorted typo fixes in the code and comments - DOC: assorted typo fixes in the documentation - CI: codespell: whitelist "te" and "nd" words	2020-12-21 11:54:56 +01:00
Willy Tarreau	a786c41f1f	[RELEASE] Released version 2.4-dev3 ... Released version 2.4-dev3 with the following main changes : - MINOR: log: Logging HTTP path only with %HPO - BUG/MINOR: mux-h2/stats: make stream/connection proto errors more accurate - MINOR: traces: add a new level "error" below the "user" level - MINOR: mux-h2/trace: add traces at level ERROR for protocol errors - BUG/MINOR: mux-h2/stats: not all GOAWAY frames are errors - BUG/MINOR: lua: missing "\n" in error message - BUG/MINOR: lua: lua-load doesn't check its parameters - BUG/MINOR: lua: Post init register function are not executed beyond the first one - BUG/MINOR: lua: Some lua init operation are processed unsafe - MINOR: actions: Export actions lookup functions - MINOR: actions: add a function returning a service pointer from its name - MINOR: cli: add a function to look up a CLI service description - BUG/MINOR: lua: warn when registering action, conv, sf, cli or applet multiple times - MINOR: cache: Improve accept_encoding_normalizer - MINOR: cache: Add entry to the tree as soon as possible - BUG/MINOR: trace: Wrong displayed trace level - BUG/MAJOR: ring: tcp forward on ring can break the reader counter. - MINOR: lua: simplify hlua_alloc() to only rely on realloc() - MEDIUM: lua-thread: use atomics for memory accounting - MINOR: lua-thread: remove struct hlua from function hlua_prepend_path() - MEDIUM: lua-thread: make hlua_post_init() no longer use the runtime execution function - MINOR: lua-thread: hlua_ctx_renew() is never called with main gL lua state - MINOR: lua-thread: Use NULL context for main lua state - MINOR: lua-thread: Stop usage of struct hlua for the global lua state - MINOR: lua-thread: Replace embedded struct hlua_function by a pointer - MINOR: lua-thread: Split hlua_init() function in two parts - MINOR: lua-thread: make hlua_ctx_init() get L from its caller - MINOR: lua-thread: Split hlua_load function in two parts - MINOR: lua-thread: Split hlua_post_init() function in two parts - MINOR: lua-thread: Add the "thread" core variable - MEDIUM: lua-thread: No longer use locked context in initialization parts - MEDIUM: lua-thread: Apply lock only if the parent state is the main thread - MINOR: lua-thread: Replace global gL var with an array of states - MINOR: lua-thread: Replace "struct hlua_function" allocation by dedicated function - MINOR: lua-thread: Replace state_from by state_id - MINOR: lua-thread: Store each function reference and init reference in array - MEDIUM: lua-thread: Add the lua-load-per-thread directive - MINOR: lua-thread: Add verbosity in errors - REGTESTS: add a test for the threaded Lua code - BUILD/MINOR: haproxy DragonFlyBSD affinity build update. - DOC/MINOR: Fix formatting in Management Guide - MINOR: cache: Do not store stale entry - MINOR: cache: Add extra "cache-control" value checks - MEDIUM: cache: Remove cache entry in case of POST on the same resource - MINOR: cache: Consider invalid Age values as stale - BUG/MEDIUM: lua-thread: some parts must be initialized once - BUG/MINOR: lua-thread: close all states on deinit - BUG/MINOR: listener: use sockaddr_in6 for IPv6 - BUG/MINOR: mux-h1: Handle keep-alive timeout for idle frontend connections - MINOR: session: Add the idle duration field into the session - MINOR: mux-h1: Update session idle duration when data are received - MINOR: mux-h1: Reset session dates and durations info when the CS is detached - MINOR: logs: Use session idle duration when no stream is provided - MINOR: stream: Always get idle duration from the session - MINOR: stream: Don't retrieve anymore timing info from the mux csinfo - MINOR: mux-h1: Don't provide anymore timing info using cs_info structure - MINOR: muxes: Remove get_cs_info callback function now useless - MINOR: stream: Pass an optional input buffer when a stream is created - MINOR: mux-h1: Add a flag to disable reads to wait opposite side - MEDIUM: mux-h1: Use a h1c flag to block reads when splicing is in-progress - MINOR: mux-h1: Introduce H1C_F_IS_BACK flag on the H1 connection - MINOR: mux-h1: Separate parsing and formatting errors at H1 stream level - MINOR: mux-h1: Split front/back h1 stream creation in 2 functions - MINOR: mux-h1: Add a rxbuf into the H1 stream - MINOR: mux-h1: Don't set CS flags in internal parsing functions - MINOR: mux-h1: Add embryonic and attached states on the H1 connection - MINOR: mux-h1: rework the h1_timeout_task() function - MINOR: mux-h1: Reset more H1C flags when a H1 stream is destroyed - MINOR: mux-h1: Disable reads if an error was reported on the H1 stream - MINOR: mux-h1: Rework how shutdowns are handled - MINOR: mux-h1: Rework h1_refresh_timeout to be easier to read - MINOR: mux-h1: Process next request for IDLE connection only - MINOR: mux-h1: Add a idle expiration date on the H1 connection - MINOR: stick-tables: Add functions to update some values of a tracked counter - MINOR: session: Add functions to increase http values of tracked counters - MINOR: mux: Add a ctl parameter to get the exit status of the multiplexers - MINOR: logs: Get the multiplexer exist status when no stream is provided - MINOR: mux-h1: Add functions to send HTTP errors from the mux - MAJOR: mux-h1: Create the client stream as later as possible - DOC: config: Add notes about errors emitted by H1 mux - CLEANUP: mux-h1: Rename H1C_F_CS_* flags and reorder H1C flags - MINOR: http-ana: Remove useless update of t_idle duration of the stream - CLEANUP: htx: Remove HTX_FL_UPGRADE unsued flag - MEDIUM: http-ana: Don't process partial or empty request anymore - CLEANUP: http-ana: Remove TX_WAIT_NEXT_RQ unsued flag - CLEANUP: connection: Remove CS_FL_READ_PARTIAL flag - REGTESTS: Fix proxy_protocol_tlv_validation - MINOR: http-ana: Properly set message flags from the start-line flags - MINOR: h1-htx/http-ana: Set BODYLESS flag on message in TUNNEL state - MINOR: protocol: add a ->set_port() helper to address families - MINOR: listener: automatically set the port when creating listeners - MINOR: listener: now use a generic add_listener() function - MEDIUM: ssl: fatal error with bundle + openssl < 1.1.1 - BUG/MEDIUM: stream: Xfer the input buffer to a fully created stream - BUG/MINOR: stream: Don't use input buffer after the ownership xfer - MINOR: protocol: remove the redundant ->sock_domain field - MINOR: protocol: export protocol definitions - CLEANUP: protocol: group protocol struct members by usage - MINOR: protocol: add a set of ctrl_init/ctrl_close methods for setup/teardown - MINOR: connection: use the control layer's init/close - MINOR: udp: export udp_suspend_receiver() and udp_resume_receiver() - BUG/MAJOR: spoa/python: Fixing return None - DOC: spoa/python: Fixing typo in IP related error messages - DOC: spoa/python: Rephrasing memory related error messages - DOC: spoa/python: Fixing typos in comments - BUG/MINOR: spoa/python: Cleanup references for failed Module Addobject operations - BUG/MINOR: spoa/python: Cleanup ipaddress objects if initialization fails - BUG/MEDIUM: spoa/python: Fixing PyObject_Call positional arguments - BUG/MEDIUM: spoa/python: Fixing references to None - DOC: email change of the DeviceAtlas maintainer - MINOR: cache: Dump secondary entries in "show cache" - CLEANUP: connection: use fd_stop_both() instead of conn_stop_polling() - MINOR: stream-int: don't touch polling anymore on shutdown - MINOR: connection: implement cs_drain_and_close() - MINOR: mux-pt: take care of CS_SHR_DRAIN in shutr() - MINOR: checks: use cs_drain_and_close() instead of draining the connection - MINOR: checks: don't call conn_cond_update_polling() anymore - CLEANUP: connection: open-code conn_cond_update_polling() and update the comment - CLEANUP: connection: remove the unused conn_{stop,cond_update}_polling() - BUG/MINOR: http-check: Use right condition to consider HTX message as full - BUG/MINOR: tcpcheck: Don't rearm the check timeout on each read - MINOR: tcpcheck: Only wait for more payload data on HTTP expect rules - BUG/MINOR: tools: make parse_time_err() more strict on the timer validity - BUG/MINOR: tools: Reject size format not starting by a digit - MINOR: action: define enum for timeout type of the set-timeout rule - MINOR: stream: prepare the hot refresh of timeouts - MEDIUM: stream: support a dynamic server timeout - MEDIUM: stream: support a dynamic tunnel timeout - MEDIUM: http_act: define set-timeout server/tunnel action - MINOR: frontend: add client timeout sample fetch - MINOR: backend: add timeout sample fetches - MINOR: stream: add sample fetches - MINOR: stream: add timeout sample fetches - REGTESTS: add regtest for http-request set-timeout - CLEANUP: remove the unused fd_stop_send() in conn_xprt_shutw{,_hard}() - CLEANUP: connection: remove the unneeded fd_stop_{recv,send} on read0/shutw - MINOR: connection: remove sock-specific code from conn_sock_send() - REORG: connection: move the socket iocb (conn_fd_handler) to sock.c - MINOR: protocol: add a ->drain() function at the connection control layer - MINOR: connection: make conn_sock_drain() use the control layer's ->drain() - MINOR: protocol: add a pair of check_events/ignore_events functions at the ctrl layer - MEDIUM: connection: make use of the control layer check_events/ignore_events	2020-12-11 17:22:51 +01:00
Willy Tarreau	c94431b308	[RELEASE] Released version 2.4-dev2 ... Released version 2.4-dev2 with the following main changes : - BUILD: Make DEBUG part of .build_opts - BUILD: Show the value of DEBUG= in haproxy -vv - CI: Set DEBUG=-DDEBUG_STRICT=1 in GitHub Actions - MINOR: stream: Add level 7 retries on http error 401, 403 - CLEANUP: remove unused function "ssl_sock_is_ckch_valid" - BUILD: SSL: add BoringSSL guarding to "RAND_keep_random_devices_open" - BUILD: SSL: do not "update" BoringSSL version equivalent anymore - BUG/MEDIUM: http_act: Restore init of log-format list - DOC: better describes how to configure a fallback crt - BUG/MAJOR: filters: Always keep all offsets up to date during data filtering - MINOR: cache: Prepare helper functions for Vary support - MEDIUM: cache: Add the Vary header support - MINOR: cache: Add a process-vary option that can enable/disable Vary processing - BUG/CRITICAL: cache: Fix trivial crash by sending accept-encoding header - BUG/MAJOR: peers: fix partial message decoding - DOC: cache: Add new caching limitation information - DOC: cache: Add information about Vary support - DOC: better document the config file format and escaping/quoting rules - DOC: Clarify %HP description in log-format - CI: github actions: update LibreSSL to 3.3.0 - CI: github actions: enable 51degrees feature - MINOR: fd/threads: silence a build warning with threads disabled - BUG/MINOR: tcpcheck: Don't forget to reset tcp-check flags on new kind of check - MINOR: tcpcheck: Don't handle anymore in-progress send rules in tcpcheck_main - BUG/MAJOR: tcpcheck: Allocate input and output buffers from the buffer pool - MINOR: tcpcheck: Don't handle anymore in-progress connect rules in tcpcheck_main - MINOR: config: Deprecate and ignore tune.chksize global option - MINOR: config: Add a warning if tune.chksize is used - REORG: tcpcheck: Move check option parsing functions based on tcp-check - MINOR: check: Always increment check health counter on CONPASS - MINOR: tcpcheck: Add support of L7OKC on expect rules error-status argument - DOC: config: Make disable-on-404 option clearer on transition conditions - DOC: config: Move req.hdrs and req.hdrs_bin in L7 samples fetches section - BUG/MINOR: http-fetch: Fix smp_fetch_body() when called from a health-check - MINOR: plock: use an ARMv8 instruction barrier for the pause instruction - MINOR: debug: add "debug dev sched" to stress the scheduler. - MINOR: debug: add a trivial PRNG for scheduler stress-tests - BUG/MEDIUM: lists: Lock the element while we check if it is in a list. - MINOR: task: remove tasklet_insert_into_tasklet_list() - MINOR: task: perform atomic counter increments only once per wakeup - MINOR: task: remove __tasklet_remove_from_tasklet_list() - BUG/MEDIUM: task: close a possible data race condition on a tasklet's list link - BUG/MEDIUM: local log format regression.	2020-12-01 08:15:26 +01:00
Willy Tarreau	1a38ffcb0f	[RELEASE] Released version 2.4-dev1 ... Released version 2.4-dev1 with the following main changes : - MINOR: ist: Add istend() function to return a pointer to the end of the string - MINOR: sample: Add converters to parse FIX messages - REGTEST: converter: Add a regtest for fix converters - MINOR: sample: Add converts to parses MQTT messages - REGTEST: converter: Add a regtest for MQTT converters - MINOR: compat: automatically include malloc.h on glibc - MEDIUM: pools: call malloc_trim() from pool_gc() - MEDIUM: pattern: call malloc_trim() on pat_ref_reload() - MINOR: pattern: move the update revision to the pat_ref, not the expression - CLEANUP: pattern: delete the back refs at once during pat_ref_reload() - MINOR: pattern: new sflag PAT_SF_REGFREE indicates regex_free() is needed - MINOR: pattern: make the delete and prune functions more generic - MEDIUM: pattern: link all final elements from the reference - MEDIUM: pattern: change the pat_del_* functions to delete from the references - MINOR: pattern: remerge the list and tree deletion functions - MINOR: pattern: perform a single call to pat_delete_gen() under the expression - CLEANUP: acl: don't reference the generic pattern deletion function anymore - CLEANUP: pattern: remove pat_delete_fcts[] and pattern_head->delete() - MINOR: pattern: introduce pat_ref_delete_by_ptr() to delete a valid reference - MINOR: pattern: store a generation number in the reference patterns - MEDIUM: pattern: only match patterns that match the current generation - MINOR: pattern: add pat_ref_commit() to commit a previously inserted element - MINOR: pattern: implement pat_ref_load() to load a pattern at a given generation - MINOR: pattern: add pat_ref_purge_older() to purge old entries - MEDIUM: pattern: make pat_ref_prune() rely on pat_ref_purge_older() - MINOR: pattern: during reload, delete elements frem the ref, not the expression - MINOR: pattern: prepare removal of a pattern from the list head - MEDIUM: pattern: turn the pattern chaining to single-linked list - CLEANUP: cfgparse: remove duplicate registration for transparent build options - BUG/MINOR: ssl: don't report 1024 bits DH param load error when it's higher - MINOR: http-htx: Add understandable errors for the errorfiles parsing - MINOR: ssl: instantiate stats module - MINOR: ssl: count client hello for stats - MINOR: ssl: add counters for ssl sessions - DOC: config: Fix a typo on ssl_c_chain_der - MINOR: server: remove idle lock in srv_cleanup_connections - BUILD: ssl: silence build warning on uninitialised counters - BUILD: http-htx: fix build warning regarding long type in printf - REGTEST: ssl: test wildcard and multi-type + exclusions - BUG/MEDIUM: ssl/crt-list: correctly insert crt-list line if crt already loaded - CI: Expand use of GitHub Actions for CI - REGTEST: ssl: mark reg-tests/ssl/ssl_crt-list_filters.vtc as broken - BUG/MINOR: pattern: a sample marked as const could be written - BUG/MINOR: lua: set buffer size during map lookups - MEDIUM: cache: Change caching conditions - BUG/MINOR: stats: free dynamically stats fields/lines on shutdown - BUG/MEDIUM: stats: prevent crash if counters not alloc with dummy one - MINOR: peers: Add traces to peer_treat_updatemsg(). - BUG/MINOR: peers: Do not ignore a protocol error for dictionary entries. - BUG/MINOR: peers: Missing TX cache entries reset. - BUG/MEDIUM: peers: fix decoding of multi-byte length in stick-table messages - BUG/MINOR: http-fetch: Extract cookie value even when no cookie name - BUG/MINOR: http-fetch: Fix calls w/o parentheses of the cookie sample fetches - BUG/MEDIUM: check: reuse srv proto only if using same mode - MINOR: check: report error on incompatible proto - MINOR: check: report error on incompatible connect proto - BUG/MINOR: http-htx: Handle warnings when parsing http-error and http-errors - BUG/MAJOR: spoe: Be sure to remove all references on a released spoe applet - MINOR: spoe: Don't close connection in sync mode on processing timeout - BUG/MINOR: tcpcheck: Don't warn on unused rules if check option is after - MINOR: init: Fix the prototype for per-thread free callbacks - MINOR: config/mux-h2: Return ERR_ flags from init_h2() instead of a status - CLEANUP: config: Return ERR_NONE from config callbacks instead of 0 - MINOR: cfgparse: tighten the scope of newnameserver variable, free it on error. - REGTEST: make ssl_client_samples and ssl_server_samples require to 2.2 - REGTESTS: Add sample_fetches/cook.vtc - BUG/MEDIUM: filters: Forward all filtered data at the end of http filtering - BUG/MINOR: http-ana: Don't wait for the body of CONNECT requests - CLEANUP: flt-trace: Remove unused random-parsing option - MINOR: flt-trace: Add an option to inhibits trace messages - MINOR: flt-trace: Use a bitfield for the trace options - REGTESTS: Add a script to test the random forwarding with several filters - REGTESTS: mark the abns test as broken again - REGTESTS: converter: add url_dec test - CI: Stop hijacking the hosts file - CI: Make the h2spec workflow more consistent with the VTest workflow - CI: travis-ci: remove amd64, osx builds - CI: travis-ci: arm64 are not allowed to fail anymore - DOC: add missing 3.10 in the summary - MINOR: ssl: remove client hello counters - MEDIUM: stats: add counters for failed handshake - MINOR: ssl: create common ssl_ctx init - MEDIUM: cli/ssl: configure ssl on server at runtime - REGTEST: server/cli_set_ssl.vtc requires OpenSSL - DOC: coding-style: update a few rules about pointers - BUG/MINOR: ssl: segv on startup when AKID but no keyid - BUILD: ssl: use SSL_MODE_ASYNC macro instead of OPENSSL_VERSION - BUG/MEDIUM: http-ana: Don't eval http-after-response ruleset on empty messages - BUG/MEDIUM: ssl/crt-list: bundle support broken in crt-list - BUG/MEDIUM: ssl: error when no certificate are found - BUG/MINOR: ssl/crt-list: load bundle in crt-list only if activated - BUG/MEDIUM: ssl/crt-list: fix error when no file found - CI: Github Actions: enable prometheus exporter - CI: Github Actions: remove LibreSSL-3.0.2 builds - CI: Github Actions: enable BoringSSL builds - CI: travis-ci: remove builds migrated to GH actions - BUILD: makefile: enable crypt(3) for OpenBSD - CI: Github Action: run "apt-get update" before packages restore - BUILD: SSL: guard TLS13 ciphersuites with HAVE_SSL_CTX_SET_CIPHERSUITES - CI: Pass the github.event_name to matrix.py - CI: Clean up Windows CI - DOC: clarify how to create a fallback crt - CLEANUP: connection: do not use conn->owner when the session is known - BUG/MAJOR: connection: reset conn->owner when detaching from session list - REGTESTS: mark proxy_protocol_random_fail as broken - BUG/MINOR: http_htx: Fix searching headers by substring - MINOR: http_act: Add -m flag for del-header name matching method	2020-11-21 16:00:40 +01:00
Willy Tarreau	1db5579bf8	[RELEASE] Released version 2.4-dev0 ... Released version 2.4-dev0 with the following main changes : - MINOR: version: it's development again. - DOC: mention in INSTALL that it's development again	2020-11-05 17:20:35 +01:00
Willy Tarreau	1c0a722a83	[RELEASE] Released version 2.3.0 ... Released version 2.3.0 with the following main changes : - CLEANUP: pattern: remove unused entry "tree" in pattern.val - BUILD: ssl: use SSL_CTRL_GET_RAW_CIPHERLIST instead of OpenSSL versions - BUG/MEDIUM: filters: Don't try to init filters for disabled proxies - BUG/MINOR: proxy/server: Skip per-proxy/server post-check for disabled proxies - BUG/MINOR: checks: Report a socket error before any connection attempt - BUG/MINOR: server: Set server without addr but with dns in RMAINT on startup - MINOR: server: Copy configuration file and line for server templates - BUG/MEDIUM: mux-pt: Release the tasklet during an HTTP upgrade - BUILD: ssl: use HAVE_OPENSSL_KEYLOG instead of OpenSSL versions - MINOR: debug: don't count free(NULL) in memstats - BUG/MINOR: filters: Skip disabled proxies during startup only - MINOR: mux_h2: capitalize frame type in stats - MINOR: mux_h2: add stat for total count of connections/streams - MINOR: stats: do not display empty stat module title on html - BUG/MEDIUM: stick-table: limit the time spent purging old entries - BUG/MEDIUM: listener: only enable a listening listener if needed - BUG/MEDIUM: listener: never suspend inherited sockets - BUG/MEDIUM: listener: make the master also keep workers' inherited FDs - MINOR: fd: add fd_want_recv_safe() - MEDIUM: listeners: make use of fd_want_recv_safe() to enable early receivers - REGTESTS: mark abns_socket as working now - CLEANUP: mux-h2: Remove the h1 parser state from the h2 stream - MINOR: sock: add a check against cross worker<->master socket activities - CI: github actions: limit OpenSSL no-deprecated builds to "default,bug,devel" reg-tests - BUG/MEDIUM: server: make it possible to kill last idle connections - MINOR: mworker/cli: the master CLI use its own applet - MINOR: ssl: define SSL_CTX_set1_curves_list to itself on BoringSSL - BUILD: ssl: use feature macros for detecting ec curves manipulation support - DOC: Add dns as an available domain to show stat - BUILD: makefile: usual reorder of objects for faster builds - DOC: update INSTALL to mention that TCC is supported - DOC: mention in INSTALL that haproxy 2.3 is a stable version - MINOR: version: mention that it's stable now	2020-11-05 17:04:53 +01:00
Willy Tarreau	bd703e5650	[RELEASE] Released version 2.3-dev9 ... Released version 2.3-dev9 with the following main changes : - CLEANUP: http_ana: remove unused assignation of `att_beg` - BUG/MEDIUM: ssl: OCSP must work with BoringSSL - BUG/MINOR: log: fix memory leak on logsrv parse error - BUG/MINOR: log: fix risk of null deref on error path - BUILD: ssl: more elegant OpenSSL early data support check - CI: github actions: update h2spec to 2.6.0 - BUG/MINOR: cache: Check the return value of http_replace_res_status - MINOR: cache: Store the "Last-Modified" date in the cache_entry - MINOR: cache: Process the If-Modified-Since header in conditional requests - MINOR: cache: Create res.cache_hit and res.cache_name sample fetches - MINOR: mux-h2: register a stats module - MINOR: mux-h2: add counters instance to h2c - MINOR: mux-h2: add stats for received frame types - MINOR: mux-h2: report detected error on stats - MINOR: mux-h2: count open connections/streams on stats - BUG/MINOR: server: fix srv downtime calcul on starting - BUG/MINOR: server: fix down_time report for stats - BUG/MINOR: lua: initialize sample before using it - MINOR: cache: Add Expires header value parsing - MINOR: ist: Add a case insensitive istmatch function - BUG/MINOR: cache: Manage multiple values in cache-control header value - BUG/MINOR: cache: Inverted variables in http_calc_maxage function - MINOR: pattern: make pat_ref_append() return the newly added element - MINOR: pattern: make pat_ref_add() rely on pat_ref_append() - MINOR: pattern: export pat_ref_push() - CLEANUP: pattern: use calloc() rather than malloc for structures - CLEANUP: pattern: fix spelling/grammatical/copy-paste in comments	2020-10-31 13:17:06 +01:00
Willy Tarreau	fb1b9e3dec	[RELEASE] Released version 2.3-dev8 ... Released version 2.3-dev8 with the following main changes : - MINOR: backend: replace the lbprm lock with an rwlock - MINOR: lb/map: use seek lock and read locks where appropriate - MINOR: lb/leastconn: only take a read lock in fwlc_get_next_server() - MINOR: lb/first: use a read lock in fas_get_next_server() - MINOR: lb/chash: use a read lock in chash_get_server_hash() - BUG/MINOR: disable dynamic OCSP load with BoringSSL - BUILD: ssl: make BoringSSL use its own version numbers - CLEANUP: threads: don't register an initcall when not debugging - MINOR: threads: change lock_t to an unsigned int - CLEANUP: tree-wide: reorder a few structures to plug some holes around locks - CLEANUP: task: remove the unused and mishandled global_rqueue_size - BUG/MEDIUM: connection: Never cleanup server lists when freeing private conns - MEDIUM: config: report that "nbproc" is deprecated - BUG/MINOR: listener: close before free in `listener_accept` - MINOR: ssl: 'ssl-load-extra-del-ext' removes the certificate extension - BUG/MINOR: queue: properly report redistributed connections - CONTRIB: tcploop: remove unused local variables in tcp_pause() - BUILD: makefile: add entries to build common debugging tools - BUG/MEDIUM: server: support changing the slowstart value from state-file - MINOR: http: Add `enum etag_type http_get_etag_type(const struct ist)` - MINOR: http: Add etag comparison function - MEDIUM: cache: Store the ETag information in the cache_entry - MEDIUM: cache: Add support for 'If-None-Match' request header - REGTEST: cache: Add if-none-match test case - CLEANUP: compression: Make use of http_get_etag_type() - BUG/MINOR: http-ana: Don't send payload for internal responses to HEAD requests - BUG/MAJOR: mux-h2: Don't try to send data if we know it is no longer possible - MINOR: threads/debug: only report used lock stats - MINOR: threads/debug: only report lock stats for used operations - MINOR: proxy; replace the spinlock with an rwlock - MINOR: server: read-lock the cookie during srv_set_dyncookie() - MINOR: proxy/cli: only take a read lock in "show errors" - OPTIM: queue: don't call pendconn_unlink() when the pendconn is not queued - MINOR: queue: split __pendconn_unlink() in per-srv and per-prx - MINOR: queue: reduce the locked area in pendconn_add() - OPTIM: queue: make the nbpend counters atomic - OPTIM: queue: decrement the nbpend and totpend counters outside of the lock - MINOR: leastconn: take the queue length into account when queuing servers - MEDIUM: fwlc: re-enable per-server queuing up to maxqueue - Revert "OPTIM: queue: don't call pendconn_unlink() when the pendconn is not queued" - MINOR: stats: support the "up" output modifier for "show stat" - MINOR: stats: also support a "no-maint" show stat modifier - MINOR: stats: indicate the number of servers in a backend's status - MEDIUM: ssl: ssl-load-extra-del-ext work only with .crt - REGTEST: ssl: test "set ssl cert" with separate key / crt - DOC: management: apply the "show stat" modifiers to "show stat", not "show info" - MINOR: stats: report server's user-configured weight next to effective weight - CI: travis-ci: switch to Ubuntu 20.04 - CONTRIB: release-estimator: Add release estimating tool - BUG/MEDIUM: queue: fix unsafe proxy pointer when counting nbpend - BUG/MINOR: extcheck: add missing checks on extchk_setenv()	2020-10-24 13:14:31 +02:00
Willy Tarreau	9d58c9b251	[RELEASE] Released version 2.3-dev7 ... Released version 2.3-dev7 with the following main changes : - CI: travis-ci: replace not defined SSL_LIB, SSL_INC for BotringSSL builds - BUG/MINOR: init: only keep rlim_fd_cur if max is unlimited - BUG/MINOR: mux-h2: do not stop outgoing connections on stopping - MINOR: fd: report an error message when failing initial allocations - MINOR: proto-tcp: make use of connect(AF_UNSPEC) for the pause - MINOR: sock: add sock_accept_conn() to test a listening socket - MINOR: protocol: make proto_tcp & proto_uxst report listening sockets - MINOR: sockpair: implement the .rx_listening function - CLEANUP: tcp: make use of sock_accept_conn() where relevant - CLEANUP: unix: make use of sock_accept_conn() where relevant - BUG/MINOR: listener: detect and handle shared sockets stopped in other processes - CONTRIB: tcploop: implement a disconnect operation 'D' - CLEANUP: protocol: intitialize all of the sockaddr when disconnecting - BUG/MEDIUM: deinit: check fdtab before fdtab[fd].owner - BUG/MINOR: connection: fix loop iter on connection takeover - BUG/MEDIUM: connection: fix srv idle count on conn takeover - MINOR: connection: improve list api usage - MINOR: mux/connection: add a new mux flag for HOL risk - MINOR: connection: don't check priv flag on free - MEDIUM: backend: add new conn to session if mux marked as HOL blocking - MEDIUM: backend: add reused conn to sess if mux marked as HOL blocking - MEDIUM: h2: remove conn from session on detach - MEDIUM: fcgi: remove conn from session on detach - DOC: Describe reuse safe for HOL handling - MEDIUM: proxy: remove obsolete "mode health" - MEDIUM: proxy: remove obsolete "monitor-net" - CLEANUP: protocol: remove the ->drain() function - CLEANUP: fd: finally get rid of fd_done_recv() - MINOR: connection: make sockaddr_alloc() take the address to be copied - MEDIUM: listener: allocate the connection before queuing a new connection - MINOR: session: simplify error path in session_accept_fd() - MINOR: connection: add new error codes for accept_conn() - MINOR: sock: rename sock_accept_conn() to sock_accepting_conn() - MINOR: protocol: add a new function accept_conn() - MINOR: sock: implement sock_accept_conn() to accept a connection - MINOR: sockpair: implement sockpair_accept_conn() to accept a connection - MEDIUM: listener: use protocol->accept_conn() to accept a connection - MEDIUM: listener: remove the second pass of fd manipulation at the end - MINOR: protocol: add a default I/O callback and put it into the receiver - MINOR: log: set the UDP receiver's I/O handler in the receiver - MINOR: protocol: register the receiver's I/O handler and not the protocol's - CLEANUP: protocol: remove the now unused <handler> field of proto_fam->bind() - DOC: improve the documentation for "option nolinger" - BUG/MEDIUM: proxy: properly stop backends - BUG/MEDIUM: task: bound the number of tasks picked from the wait queue at once - MINOR: threads: augment rwlock debugging stats to report seek lock stats - MINOR: threads: add the transitions to/from the seek state - MEDIUM: task: use an upgradable seek lock when scanning the wait queue - BUILD: listener: avoir a build warning when threads are disabled - BUG/MINOR: peers: Possible unexpected peer seesion reset after collisions. - MINOR: ssl: add volatile flags to ssl samples - MEDIUM: backend: reuse connection if using a static sni - BUG/MEDIUM: spoe: Unset variable instead of set it if no data provided - BUG/MEDIUM: mux-h1: Get the session from the H1S when capturing bad messages - BUG/MEDIUM: lb: Always lock the server when calling server_{take,drop}_conn - DOC: fix typo in MAX_SESS_STKCTR	2020-10-17 10:31:50 +02:00
Willy Tarreau	b7ffe1975a	[RELEASE] Released version 2.3-dev6 ... Released version 2.3-dev6 with the following main changes : - REGTESTS: use "command" instead of "which" for better POSIX compatibility - BUILD: makefile: Update feature flags for OpenBSD - DOC: agent-check: fix typo in "fail" word expected reply - DOC: crt: advise to move away from cert bundle - BUG/MINOR: ssl/crt-list: exit on warning out of crtlist_parse_line() - REGTEST: fix host part in balance-uri-path-only.vtc - REGTEST: make ssl_client_samples and ssl_server_samples requiret to 2.3 - REGTEST: the iif converter test requires 2.3 - REGTEST: make agent-check.vtc require 1.8 - REGTEST: make abns_socket.vtc require 1.8 - REGTEST: make map_regm_with_backref require 1.7 - BUILD: makefile: Update feature flags for FreeBSD - OPTIM: backend/random: never queue on the server, always on the backend - OPTIM: backend: skip LB when we know the backend is full - BUILD: makefile: Fix building with closefrom() support enabled - BUILD: makefile: add an EXTRAVERSION variable to ease local naming - MINOR: tools: support for word expansion of environment in parse_line - BUILD: tools: fix minor build issue on isspace() - BUILD: makefile: Enable closefrom() support on Solaris - CLEANUP: ssl: Use structured format for error line report during crt-list parsing - MINOR: ssl: Add error if a crt-list might be truncated - MINOR: ssl: remove uneeded check in crtlist_parse_file - BUG/MINOR: Fix several leaks of 'log_tag' in init(). - DOC: tcp-rules: Refresh details about L7 matching for tcp-request content rules - MEDIUM: tcp-rules: Warn if a track-sc* content rule doesn't depend on content - BUG/MINOR: tcpcheck: Set socks4 and send-proxy flags before the connect call - DOC: ssl: new "cert bundle" behavior - BUG/MEDIUM: queue: make pendconn_cond_unlink() really thread-safe - CLEANUP: ssl: "bundle" is not an OpenSSL wording - MINOR: counters: fix a typo in comment - BUG/MINOR: stats: fix validity of the json schema - REORG: stats: export some functions - MINOR: stats: add stats size as a parameter for csv/json dump - MINOR: stats: hide px/sv/li fields in applet struct - REORG: stats: extract proxy json dump - REORG: stats: extract proxies dump loop in a function - MINOR: hlua: Display debug messages on stderr only in debug mode - MINOR: stats: define the concept of domain for statistics - MINOR: stats: define additional flag px cap on domain - MEDIUM: stats: add delimiter for static proxy stats on csv - MEDIUM: stats: define an API to register stat modules - MEDIUM: stats: add abstract type to store counters - MEDIUM: stats: integrate static proxies stats in new stats - MINOR: stats: support clear counters for dynamic stats - MINOR: stats: display extra proxy stats on the html page - MINOR: stats: add config "stats show modules" - MINOR: dns/stats: integrate dns counters in stats - MINOR: stats: remove for loop declaration - DOC: ssl: fix typo about ocsp files - BUG/MINOR: peers: Inconsistency when dumping peer status codes. - DOC: update INSTALL with supported OpenBSD / FreeBSD versions - BUG/MINOR: proto_tcp: Report warning messages when listeners are bound - CLEANUP: cache: Fix leak of cconf->c.name during config check - CLEANUP: ssl: Release cached SSL sessions on deinit - BUG/MINOR: mux-h1: Be sure to only set CO_RFL_READ_ONCE for the first read - BUG/MINOR: mux-h1: Always set the session on frontend h1 stream - MINOR: mux-h1: Don't wakeup the H1C when output buffer become available - CLEANUP: sock-unix: Remove an unreachable goto clause - BUG/MINOR: proxy: inc req counter on new syslog messages. - BUG/MEDIUM: log: old processes with log foward section don't die on soft stop. - MINOR: stats: inc req counter on listeners. - MINOR: channel: new getword and getchar functions on channel. - MEDIUM: log: syslog TCP support on log forward section. - BUG/MINOR: proxy/log: frontend/backend and log forward names must differ - DOC: re-work log forward bind statement documentation. - DOC: fix a confusing typo on a regsub example - BUILD: Add a DragonFlyBSD target - BUG/MINOR: makefile: fix a tiny typo in the target list - BUILD: makefile: Update feature flags for NetBSD - CI: travis-ci: help Coverity to detect BUG_ON() as a real stop - DOC: Add missing stats fields in the management doc - BUG/MEDIUM: mux-fcgi: Don't handle pending read0 too early on streams - BUG/MEDIUM: mux-h2: Don't handle pending read0 too early on streams - DOC: Fix typos in configuration.txt - BUG/MINOR: http: Fix content-length of the default 500 error - BUG/MINOR: http-htx: Expect no body for 204/304 internal HTTP responses - REGTESTS: mark abns_socket as broken - MEDIUM: fd: always wake up one thread when enabling a foreing FD - MEDIUM: listeners: don't bounce listeners management between queues - MEDIUM: init: stop disabled proxies after initializing fdtab - MEDIUM: listeners: make unbind_listener() converge if needed - MEDIUM: deinit: close all receivers/listeners before scanning proxies - MEDIUM: listeners: remove the now unused ZOMBIE state - MINOR: listeners: do not uselessly try to close zombie listeners in soft_stop() - CLEANUP: proxy: remove the first_to_listen hack in zombify_proxy() - MINOR: listeners: introduce listener_set_state() - MINOR: proxy: maintain per-state counters of listeners - MEDIUM: proxy: remove the unused PR_STFULL state - MEDIUM: proxy: remove the PR_STERROR state - MEDIUM: proxy: remove state PR_STPAUSED - MINOR: startup: don't rely on PR_STNEW to check for listeners - CLEANUP: peers: don't use the PR_ST* states to mark enabled/disabled - MEDIUM: proxy: replace proxy->state with proxy->disabled - MEDIUM: proxy: remove start_proxies() - MEDIUM: proxy: merge zombify_proxy() with stop_proxy() - MINOR: listeners: check the current listener state in pause_listener() - MINOR: listeners: check the current listener earlier state in resume_listener() - MEDIUM: listener/proxy: make the listeners notify about proxy pause/resume - MINOR: protocol: introduce protocol_{pause,resume}_all() - MAJOR: signals: use protocol_pause_all() and protocol_resume_all() - CLEANUP: proxy: remove the now unused pause_proxies() and resume_proxies() - MEDIUM: proto_tcp: make the pause() more robust in multi-process - BUG/MEDIUM: listeners: correctly report pause() errors - MINOR: listeners: move fd_stop_recv() to the receiver's socket code - CLEANUP: protocol: remove the ->disable_all method - CLEANUP: listeners: remove unused disable_listener and disable_all_listeners - MINOR: listeners: export enable_listener() - MINOR: protocol: directly call enable_listener() from protocol_enable_all() - CLEANUP: protocol: remove the ->enable_all method - CLEANUP: listeners: remove the now unused enable_all_listeners() - MINOR: protocol: rename the ->listeners field to ->receivers - MINOR: protocol: replace ->pause(listener) with ->rx_suspend(receiver) - MINOR: protocol: implement an ->rx_resume() method - MINOR: listener: use the protocol's ->rx_resume() method when available - MINOR: sock: provide a set of generic enable/disable functions - MINOR: protocol: add a new pair of rx_enable/rx_disable methods - MINOR: protocol: add a new pair of enable/disable methods for listeners - MEDIUM: listeners: now use the listener's ->enable/disable - MINOR: listeners: split delete_listener() in two versions - MINOR: listeners: count unstoppable jobs on creation, not deletion - MINOR: listeners: add a new stop_listener() function - MEDIUM: proxy: make stop_proxy() now use stop_listener() - MEDIUM: proxy: add mode PR_MODE_PEERS to flag peers frontends - MEDIUM: proxy: centralize proxy status update and reporting - MINOR: protocol: add protocol_stop_now() to instant-stop listeners - MEDIUM: proxy: make soft_stop() stop most listeners using protocol_stop_now() - MEDIUM: udp: implement udp_suspend() and udp_resume() - MINOR: listener: add a few BUG_ON() statements to detect inconsistencies - MEDIUM: listeners: always close master vs worker listeners - BROKEN/MEDIUM: listeners: rework the unbind logic to make it idempotent - MEDIUM: listener: let do_unbind_listener() decide whether to close or not - CLEANUP: listeners: remove the do_close argument to unbind_listener() - MINOR: listeners: move the LI_O_MWORKER flag to the receiver - MEDIUM: receivers: add an rx_unbind() method in the protocols - MINOR: listeners: split do_unbind_listener() in two - MEDIUM: listeners: implement protocol level ->suspend/resume() calls - MEDIUM: config: mark "grace" as deprecated - MEDIUM: config: remove the deprecated and dangerous global "debug" directive - BUG/MINOR: proxy: respect the proper format string in sig_pause/sig_listen - MINOR: peers: heartbeat, collisions and handshake information for "show peers" command. - BUILD: makefile: Enable getaddrinfo() on OS/X	2020-10-10 10:45:13 +02:00
Christopher Faulet	05f0188943	[RELEASE] Released version 2.3-dev5 ... Released version 2.3-dev5 with the following main changes : - DOC: Fix typo in iif() example - CLEANUP: Update .gitignore - BUILD: introduce possibility to define ABORT_NOW() conditionally - CI: travis-ci: help Coverity to recognize abort() - BUG/MINOR: Fix type passed of sizeof() for calloc() - CLEANUP: Do not use a fixed type for 'sizeof' in 'calloc' - CLEANUP: tree-wide: use VAR_ARRAY instead of [0] in various definitions - BUILD: connection: fix build on clang after the VAR_ARRAY cleanup - BUG/MINOR: ssl: verifyhost is case sensitive - BUILD: makefile: change default value of CC from gcc to cc - CI: travis-ci: split asan step out of running tests - BUG/MINOR: server: report correct error message for invalid port on "socks4" - BUG/MEDIUM: ssl: Don't call ssl_sock_io_cb() directly. - BUG/MINOR: ssl/crt-list: crt-list could end without a \n - BUG/MINOR: log-forward: fail on unknown keywords - MEDIUM: log-forward: use "dgram-bind" instead of "bind" for the listener - BUG/MEDIUM: log-forward: always quit on parsing errors - MEDIUM: ssl: remove bundle support in crt-list and directories - MEDIUM: ssl/cli: remove support for multi certificates bundle - MINOR: ssl: crtlist_dup_ssl_conf() duplicates a ssl_bind_conf - MINOR: ssl: crtlist_entry_dup() duplicates a crtlist_entry - MEDIUM: ssl: emulates the multi-cert bundles in the crtlist - MEDIUM: ssl: emulate multi-cert bundles loading in standard loading - CLEANUP: ssl: remove test on "multi" variable in ckch functions - CLEANUP: ssl/cli: remove test on 'multi' variable in CLI functions - CLEANUP: ssl: remove utility functions for bundle - DOC: explain bundle emulation in configuration.txt - BUILD: fix build with openssl < 1.0.2 since bundle removal - BUG/MINOR: log: gracefully handle the "udp@" address format for log servers - BUG/MINOR: dns: gracefully handle the "udp@" address format for nameservers - MINOR: listener: create a new struct "settings" in bind_conf - MINOR: listener: move bind_proc and bind_thread to struct settings - MINOR: listener: move the interface to the struct settings - MINOR: listener: move the network namespace to the struct settings - REORG: listener: create a new struct receiver - REORG: listener: move the listening address to a struct receiver - REORG: listener: move the receiving FD to struct receiver - REORG: listener: move the listener's proto to the receiver - MINOR: listener: make sock_find_compatible_fd() check the socket type - REORG: listener: move the receiver part to a new file - MINOR: receiver: link the receiver to its settings - MINOR: receiver: link the receiver to its owner - MINOR: listener: prefer to retrieve the socket's settings via the receiver - MINOR: receiver: add a receiver-specific flag to indicate the socket is bound - MINOR: listener: move the INHERITED flag down to the receiver - MINOR: receiver: move the FOREIGN and V6ONLY options from listener to settings - MINOR: sock: make sock_find_compatible_fd() only take a receiver - MINOR: protocol: rename the ->bind field to ->listen - MINOR: protocol: add a new ->bind() entry to bind the receiver - MEDIUM: sock_inet: implement sock_inet_bind_receiver() - MEDIUM: tcp: make use of sock_inet_bind_receiver() - MEDIUM: udp: make use of sock_inet_bind_receiver() - MEDIUM: sock_unix: implement sock_unix_bind_receiver() - MEDIUM: uxst: make use of sock_unix_bind_receiver() - MEDIUM: sockpair: implement sockpair_bind_receiver() - MEDIUM: proto_sockpair: make use of sockpair_bind_receiver() - MEDIUM: protocol: explicitly start the receiver before the listener - MEDIUM: protocol: do not call proto->bind() anymore from bind_listener() - MINOR: protocol: add a new proto_fam structure for protocol families - MINOR: protocol: retrieve the family-specific fields from the family - CLEANUP: protocol: remove family-specific fields from struct protocol - MINOR: protocol: add a real family for existing FDs - CLEANUP: tools: make str2sa_range() less awful for fd@ and sockpair@ - MINOR: tools: make str2sa_range() take more options than just resolve - MINOR: tools: add several PA_O_PORT_* flags in str2sa_range() callers - MEDIUM: tools: make str2sa_range() validate callers' port specifications - MEDIUM: config: remove all checks for missing/invalid ports/ranges - MINOR: tools: add several PA_O_* flags in str2sa_range() callers - MINOR: listener: remove the inherited arg to create_listener() - MINOR: tools: make str2sa_range() optionally return the fd - MINOR: log: detect LOG_TARGET_FD from the fd and not from the syntax - MEDIUM: tools: make str2sa_range() resolve pre-bound listeners - MINOR: config: do not test an inherited socket again - MEDIUM: tools: make str2sa_range() check for the sockpair's FD usability - MINOR: tools: start to distinguish stream and dgram in str2sa_range() - MEDIUM: tools: make str2sa_range() only report AF_CUST_UDP on listeners - MINOR: tools: remove the central test for "udp" in str2sa_range() - MINOR: cfgparse: add str2receiver() to parse dgram receivers - MINOR: log-forward: use str2receiver() to parse the dgram-bind address - MEDIUM: config: make str2listener() not accept datagram sockets anymore - MINOR: listener: pass the chosen protocol to create_listeners() - MINOR: tools: make str2sa_range() directly return the protocol - MEDIUM: tools: make str2sa_range() check that the protocol has ->connect() - MINOR: protocol: add the control layer type in the protocol struct - MEDIUM: protocol: store the socket and control type in the protocol array - MEDIUM: tools: make str2sa_range() use protocol_lookup() - MEDIUM: proto_udp: replace last AF_CUST_UDP* with AF_INET* - MINOR: tools: drop listener detection hack from str2sa_range() - BUILD: sock_unix: add missing errno.h - MINOR: sock_inet: report the errno string in binding errors - MINOR: sock_unix: report the errno string in binding errors - BUILD: sock_inet: include errno.h - MINOR: h2/trace: also display the remaining frame length in traces - BUG/MINOR: h2/trace: do not display "stream error" after a frame ACK - BUG/MEDIUM: h2: report frame bits only for handled types - BUG/MINOR: http-fetch: Don't set the sample type during the htx prefetch - BUG/MINOR: Fix memory leaks cfg_parse_peers - BUG/MINOR: config: Fix memory leak on config parse listen - MINOR: backend: make the "whole" option of balance uri take only one bit - MINOR: backend: add a new "path-only" option to "balance uri" - REGTESTS: add a few load balancing tests - BUG/MEDIUM: listeners: do not pause foreign listeners - BUG/MINOR: listeners: properly close listener FDs - BUILD: trace: include tools.h	2020-09-25 18:40:47 +02:00
Willy Tarreau	253c4dc200	[RELEASE] Released version 2.3-dev4 ... Released version 2.3-dev4 with the following main changes : - MINOR: hlua: Add error message relative to the Channel manipulation and HTTP mode - BUG/MEDIUM: ssl: crt-list negative filters don't work - DOC: overhauling github issue templates - MEDIUM: cfgparse: Emit hard error on truncated lines - DOC: cache: Use '<name>' instead of '<id>' in error message - MINOR: cache: Reject duplicate cache names - REGTEST: remove stray leading spaces in converteers_ref_cnt_never_dec.vtc - MINOR: stats: prevent favicon.ico requests for stats page - BUILD: tools: include auxv a bit later - BUILD: task: work around a bogus warning in gcc 4.7/4.8 at -O1 - MEDIUM: ssl: Support certificate chaining for certificate generation - MINOR: ssl: Support SAN extension for certificate generation - MINOR: tcp: don't try to set/clear v6only on inherited sockets - BUG/MINOR: reload: detect the OS's v6only status before choosing an old socket - MINOR: reload: determine the foreing binding status from the socket - MEDIUM: reload: stop passing listener options along with FDs - BUG/MEDIUM: ssl: fix ssl_bind_conf double free w/ wildcards - MEDIUM: fd: replace usages of fd_remove() with fd_stop_both() - CLEANUP: fd: remove fd_remove() and rename fd_dodelete() to fd_delete() - MINOR: fd: add a new "exported" flag and use it for all regular listeners - MEDIUM: reload: pass all exportable FDs, not just listeners - DOC: add description of pidfile in master-worker mode - BUG/MINOR: reload: do not fail when no socket is sent - REORG: tcp: move TCP actions from proto_tcp.c to tcp_act.c - CLEANUP: tcp: stop exporting smp_fetch_src() - REORG: tcp: move TCP sample fetches from proto_tcp.c to tcp_sample.c - REORG: tcp: move TCP bind/server keywords from proto_tcp.c to cfgparse-tcp.c - REORG: unix: move UNIX bind/server keywords from proto_uxst.c to cfgparse-unix.c - REORG: sock: start to move some generic socket code to sock.c - MINOR: sock: introduce sock_inet and sock_unix - MINOR: tcp/udp/unix: make use of proto->addrcmp() to compare addresses - MINOR: sock_inet: implement sock_inet_get_dst() - REORG: inet: replace tcp_is_foreign() with sock_inet_is_foreign() - REORG: sock_inet: move v6only_default from proto_tcp.c to sock_inet.c - REORG: sock_inet: move default_tcp_maxseg from proto_tcp.c - REORG: listener: move xfer_sock_list to sock.{c,h}. - MINOR: sock: add interface and namespace length to xfer_sock_list - MINOR: sock: implement sock_find_compatible_fd() - MINOR: sock_inet: move the IPv4/v6 transparent mode code to sock_inet - REORG: sock: move get_old_sockets() from haproxy.c - MINOR: sock: do not use LI_O_* in xfer_sock_list anymore - MINOR: sock: distinguish dgram from stream types when retrieving old sockets - BUILD: sock_unix: fix build issue with isdigit() - BUG/MEDIUM: http-ana: Don't wait to send 1xx responses received from servers - MINOR: http-htx: Add an option to eval query-string when the path is replaced - BUG/MINOR: http-rules: Replace path and query-string in "replace-path" action - MINOR: http-htx: Handle an optional reason when replacing the response status - MINOR: contrib/spoa-server: allow MAX_FRAME_SIZE override - BUG/MAJOR: contrib/spoa-server: Fix unhandled python call leading to memory leak - BUG/MINOR: contrib/spoa-server: Ensure ip address references are freed - BUG/MINOR: contrib/spoa-server: Do not free reference to NULL - BUG/MINOR: contrib/spoa-server: Updating references to free in case of failure - BUG/MEDIUM: contrib/spoa-server: Fix ipv4_address used instead of ipv6_address - CLEANUP: http: silence a cppcheck warning in get_http_auth() - REGTEST: increase some short timeouts to make tests more reliable - BUG/MINOR: threads: work around a libgcc_s issue with chrooting - BUILD: thread: limit the libgcc_s workaround to glibc only - MINOR: protocol: do not call proto->bind_all() anymore - MINOR: protocol: do not call proto->unbind_all() anymore - CLEANUP: protocol: remove all ->bind_all() and ->unbind_all() functions - MAJOR: init: start all listeners via protocols and not via proxies anymore - BUG/MINOR: startup: haproxy -s cause 100% cpu - Revert "BUG/MINOR: http-rules: Replace path and query-string in "replace-path" action" - BUG/MEDIUM: doc: Fix replace-path action description - MINOR: http-rules: Add set-pathq and replace-pathq actions - MINOR: http-fetch: Add pathq sample fetch - REGTEST: Add a test for request path manipulations, with and without the QS - MINOR: Commit .gitattributes - CLEANUP: Update .gitignore - BUG/MEDIUM: dns: Don't store additional records in a linked-list - BUG/MEDIUM: dns: Be sure to renew IP address for already known servers - MINOR: server: Improve log message sent when server address is updated - DOC: ssl-load-extra-files only applies to certificates on bind lines - BUG/MINOR: auth: report valid crypto(3) support depending on build options - BUG/MEDIUM: mux-h1: always apply the timeout on half-closed connections - BUILD: threads: better workaround for late loading of libgcc_s - BUILD: compiler: reserve the gcc version checks to the gcc compiler - BUILD: compiler: workaround a glibc madness around __attribute__() - BUILD: intops: on x86_64, the bswap instruction is called bswapq - BUILD: trace: always have an argument before variadic args in macros - BUILD: traces: don't pass an empty argument for missing ones - BUG/MINOR: haproxy: Free uri_auth->scope during deinit - CLEANUP: Free old_argv on deinit - CLEANUP: haproxy: Free post_proxy_check_list in deinit() - CLEANUP: haproxy: Free per_thread_*_list in deinit() - CLEANUP: haproxy: Free post_check_list in deinit() - BUG/MEDIUM: pattern: Renew the pattern expression revision when it is pruned - REORG: tools: move PARSE_OPT_* from tools.h to tools-t.h - MINOR: sample: Add iif(<true>,<false>) converter	2020-09-11 17:05:59 +02:00
Willy Tarreau	f104b530e2	[RELEASE] Released version 2.3-dev3 ... Released version 2.3-dev3 with the following main changes : - SCRIPTS: git-show-backports: make -m most only show the left branch - SCRIPTS: git-show-backports: emit the shell command to backport a commit - BUILD: Makefile: require SSL_LIB, SSL_INC to be explicitly set - CI: travis-ci: specify SLZ_LIB, SLZ_INC for travis builds - BUG/MEDIUM: mux-h1: Refresh H1 connection timeout after a synchronous send - CLEANUP: dns: typo in reported error message - BUG/MAJOR: dns: disabled servers through SRV records never recover - BUG/MINOR: spoa-server: fix size_t format printing - DOC: spoa-server: fix false friends `actually` - BUG/MINOR: ssl: fix memory leak at OCSP loading - BUG/MEDIUM: ssl: memory leak of ocsp data at SSL_CTX_free() - BUG/MEDIUM: map/lua: Return an error if a map is loaded during runtime - MINOR: arg: Add an argument type to keep a reference on opaque data - BUG/MINOR: converters: Store the sink in an arg pointer for debug() converter - BUG/MINOR: lua: Duplicate map name to load it when a new Map object is created - BUG/MINOR: arg: Fix leaks during arguments validation for fetches/converters - BUG/MINOR: lua: Check argument type to convert it to IPv4/IPv6 arg validation - BUG/MINOR: lua: Check argument type to convert it to IP mask in arg validation - MINOR: hlua: Don't needlessly copy lua strings in trash during args validation - BUG/MINOR: lua: Duplicate lua strings in sample fetches/converters arg array - MEDIUM: lua: Don't filter exported fetches and converters - MINOR: lua: Add support for userlist as fetches and converters arguments - MINOR: lua: Add support for regex as fetches and converters arguments - MINOR: arg: Use chunk_destroy() to release string arguments - BUG/MINOR: snapshots: leak of snapshots on deinit() - CLEANUP: ssl: ssl_sock_crt2der semicolon and spaces - MINOR: ssl: add ssl_{c,s}_chain_der fetch methods - CLEANUP: fix all duplicated semicolons - BUG/MEDIUM: ssl: fix the ssl-skip-self-issued-ca option - BUG/MINOR: ssl: ssl-skip-self-issued-ca requires >= 1.0.2 - BUG/MINOR: stats: use strncmp() instead of memcmp() on health states - BUILD: makefile: don't disable -Wstringop-overflow anymore - BUG/MINOR: ssl: double free w/ smp_fetch_ssl_x_chain_der() - BUG/MEDIUM: htx: smp_prefetch_htx() must always validate the direction - BUG/MEDIUM: ssl: never generates the chain from the verify store - OPTIM: regex: PCRE2 use JIT match when JIT optimisation occured. - BUG/MEDIUM: ssl: does not look for all SNIs before chosing a certificate - CLEANUP: ssl: remove poorly readable nested ternary	2020-08-14 18:54:05 +02:00
Willy Tarreau	3f3cc8c8c7	[RELEASE] Released version 2.3-dev2 ... Released version 2.3-dev2 with the following main changes : - DOC: ssl: req_ssl_sni needs implicit TLS - BUG/MEDIUM: arg: empty args list must be dropped - BUG/MEDIUM: resolve: fix init resolving for ring and peers section. - BUG/MAJOR: tasks: don't requeue global tasks into the local queue - MINOR: tasks/debug: make the thread affinity BUG_ON check a bit stricter - MINOR: tasks/debug: add a few BUG_ON() to detect use of wrong timer queue - MINOR: tasks/debug: add a BUG_ON() check to detect requeued task on free - BUG/MAJOR: dns: Make the do-resolve action thread-safe - BUG/MEDIUM: dns: Release answer items when a DNS resolution is freed - MEDIUM: htx: Add a flag on a HTX message when no more data are expected - BUG/MEDIUM: stream-int: Don't set MSG_MORE flag if no more data are expected - BUG/MEDIUM: http-ana: Only set CF_EXPECT_MORE flag on data filtering - CLEANUP: dns: remove 45 "return" statements from dns_validate_dns_response() - BUG/MINOR: htx: add two missing HTX_FL_EOI and remove an unexpected one - BUG/MINOR: mux-fcgi: Don't url-decode the QUERY_STRING parameter anymore - BUILD: tools: fix build with static only toolchains - DOC: Use gender neutral language - BUG/MINOR: debug: Don't dump the lua stack if it is not initialized - BUG/MAJOR: dns: fix null pointer dereference in snr_update_srv_status - BUG/MAJOR: dns: don't treat Authority records as an error - CI : travis-ci : prepare for using stock OpenSSL - CI: travis-ci : switch to stock openssl when openssl-1.1.1 is used - MEDIUM: lua: Add support for the Lua 5.4 - BUG/MEDIUM: dns: Don't yield in do-resolve action on a final evaluation - BUG/MINOR: lua: Abort execution of actions that yield on a final evaluation - MINOR: tcp-rules: Return an internal error if an action yields on a final eval - BUG/MINOR: tcp-rules: Preserve the right filter analyser on content eval abort - BUG/MINOR: tcp-rules: Set the inspect-delay when a tcp-response action yields - MEDIUM: tcp-rules: Use a dedicated expiration date for tcp ruleset - MEDIUM: lua: Set the analyse expiration date with smaller wake_time only - BUG/MEDIUM: connection: Be sure to always install a mux for sync connect - MINOR: connection: Preinstall the mux for non-ssl connect - MINOR: stream-int: Be sure to have a mux to do sends and receives - BUG/MINOR: lua: Fix a possible null pointer deref on lua ctx - SCRIPTS: announce-release: add the link to the wiki in the announce messages - CI: travis-ci: use better name for Coverity scan job - CI: travis-ci: use proper linking flags for SLZ build - BUG/MEDIUM: backend: always attach the transport before installing the mux - BUG/MEDIUM: tcp-checks: always attach the transport before installing the mux - MINOR: connection: avoid a useless recvfrom() on outgoing connections - MINOR: mux-h1: do not even try to receive if the connection is not fully set up - MINOR: mux-h1: do not try to receive on backend before sending a request - CLEANUP: assorted typo fixes in the code and comments - BUG/MEDIUM: ssl: check OCSP calloc in ssl_sock_load_ocsp()	2020-07-31 14:48:32 +02:00