289 Commits

Author	SHA1	Message	Date
Willy Tarreau	7f1a3ee5d7	[RELEASE] Released version 2.9-dev7 ... Released version 2.9-dev7 with the following main changes : - MINOR: support for http-request set-timeout client - BUG/MINOR: mux-quic: remove full demux flag on ncbuf release - CLEANUP: freq_ctr: make all freq_ctr readers take a const - CLEANUP: stream: make the dump code not depend on the CLI appctx - MINOR: stream: split stats_dump_full_strm_to_buffer() in two - CLEANUP: stream: use const filters in the dump function - CLEANUP: stream: make strm_dump_to_buffer() take a const stream - MINOR: stream: make strm_dump_to_buffer() take an arbitrary buffer - MINOR: stream: make strm_dump_to_buffer() show the list of filters - MINOR: stream: make stream_dump() always multi-line - MINOR: streams: add support for line prefixes to strm_dump_to_buffer() - MEDIUM: stream: now provide full stream dumps in case of loops - MINOR: debug: use the more detailed stream dump in panics - CLEANUP: stream: remove the now unused stream_dump() function - Revert "BUG/MEDIUM: quic: missing check of dcid for init pkt including a token" - MINOR: stream: fix output alignment of stuck thread dumps - BUG/MINOR: proto_reverse_connect: fix FD leak on connection error - BUG/MINOR: tcp_act: fix attach-srv rule ACL parsing - MINOR: connection: define error for reverse connect - MINOR: connection: define mux flag for reverse support - MINOR: tcp_act: remove limitation on protocol for attach-srv - BUG/MINOR: proto_reverse_connect: fix FD leak upon connect - BUG/MAJOR: plock: fix major bug in pl_take_w() introduced with EBO - Revert "MEDIUM: sample: Small fix in function check_operator for eror reporting" - DOC: sample: Add a comment in 'check_operator' to explain why 'vars_check_arg' should ignore the 'err' buffer - DEV: sslkeylogger: handle file opening error - MINOR: quic: define quic-socket bind setting - MINOR: quic: handle perm error on bind during runtime - MINOR: backend: refactor specific source address allocation - MINOR: proto_reverse_connect: support source address setting - BUILD: pool: Fix GCC error about potential null pointer dereference - MINOR: hlua: Set context's appctx when the lua socket is created - MINOR: hlua: Don't preform operations on a not connected socket - MINOR: hlua: Save the lua socket's timeout in its context - MINOR: hlua: Save the lua socket's server in its context - MINOR: hlua: Test the hlua struct first when the lua socket is connecting - BUG/MEDIUM: hlua: Initialize appctx used by a lua socket on connect only - DEBUG: mux-h1: Fix event label from trace messages about payload formatting - BUG/MINOR: mux-h1: Handle read0 in rcv_pipe() only when data receipt was tried - BUG/MINOR: mux-h1: Ignore C-L when sending H1 messages if T-E is also set - BUG/MEDIUM: h1: Ignore C-L value in the H1 parser if T-E is also set - REGTESTS: filters: Don't set C-L header in the successful response to CONNECT - MINOR: mux-h1: Add flags if outgoing msg contains a header about its payload - MINOR: mux-h1: Rely on H1S_F_HAVE_CHNK to add T-E in outgoing messages - BUG/MEDIUM: mux-h1: Add C-L header in outgoing message if it was removed - BUG/MEDIUM: mux-h1; Ignore headers modifications about payload representation - BUG/MINOR: h1-htx: Keep flags about C-L/T-E during HEAD response parsing - MINOR: h1-htx: Declare successful tunnel establishment as bodyless - BUILD: quic: allow USE_QUIC to work with AWSLC - CI: github: add USE_QUIC=1 to aws-lc build - BUG/MINOR: hq-interop: simplify parser requirement - MEDIUM: cache: Add "Origin" header to secondary cache key - MINOR: haproxy: permit to register features during boot - MINOR: tcp_rules: tcp-{request,response} requires TCP or HTTP mode - MINOR: stktable: "stick" requires TCP or HTTP mode - MINOR: filter: "filter" requires TCP or HTTP mode - MINOR: backend/balance: "balance" requires TCP or HTTP mode - MINOR: flt_http_comp: "compression" requires TCP or HTTP mode - MINOR: http_htx/errors: prevent the use of some keywords when not in tcp/http mode - MINOR: fcgi-app: "use-fcgi-app" requires TCP or HTTP mode - MINOR: cfgparse-listen: "http-send-name-header" requires TCP or HTTP mode - MINOR: cfgparse-listen: "dynamic-cookie-key" requires TCP or HTTP mode - MINOR: proxy: dynamic-cookie CLIs require TCP or HTTP mode - MINOR: cfgparse-listen: "http-reuse" requires TCP or HTTP mode - MINOR: proxy: report a warning for max_ka_queue in proxy_cfg_ensure_no_http() - MINOR: cfgparse-listen: warn when use-server rules is used in wrong mode - DOC: config: unify "log" directive doc - MINOR: sink/log: fix some typos around postparsing logic - MINOR: sink: remove useless check after sink creation - MINOR: sink: don't rely on p->parent in sink appctx - MINOR: sink: don't rely on forward_px to init sink forwarding - MINOR: sink: refine forward_px usage - MINOR: sink: function to add new sink servers - BUG/MEDIUM: stconn: Fix comparison sign in sc_need_room() - BUG/MEDIUM: actions: always apply a longest match on prefix lookup	2023-10-06 22:03:17 +02:00
Willy Tarreau	f75a369009	[RELEASE] Released version 2.9-dev6 ... Released version 2.9-dev6 with the following main changes : - BUG/MINOR: quic: fdtab array underflow access - DEBUG: pools: always record the caller for uncached allocs as well - DEBUG: pools: pass the caller pointer to the check functions and macros - DEBUG: pools: make pool_check_pattern() take a pointer to the pool - DEBUG: pools: inspect pools on fatal error and dump information found - BUG/MEDIUM: quic: quic_cc_conn ->cntrs counters unreachable - DEBUG: pools: also print the item's pointer when crashing - DEBUG: pools: also print the value of the tag when it doesn't match - DEBUG: pools: print the contents surrounding the expected tag location - MEDIUM: pools: refine pool size rounding - BUG/MEDIUM: hlua: don't pass stale nargs argument to lua_resume() - BUG/MINOR: hlua/init: coroutine may not resume itself - BUG/MEDIUM: mux-fcgi: Don't swap trash and dbuf when handling STDERR records - BUG/MINOR: promex: fix backend_agg_check_status - BUG/MEDIUM: master/cli: Pin the master CLI on the first thread of the group 1 - MAJOR: import: update mt_list to support exponential back-off - CLEANUP: pools: simplify the pool expression when no pool was matched in dump - MINOR: samples: implement bytes_in and bytes_out samples - DOC: configuration: add %[req.ver] sample to %HV - BUG/MINOR: quic: Leak of frames to send. - DOC: configuration: add %[query] to %HQ - BUG/MINOR: freq_ctr: fix possible negative rate with the scaled API - BUG/MAJOR: mux-h2: Report a protocol error for any DATA frame before headers - BUILD: quic: fix build on centos 8 and USE_QUIC_OPENSSL_COMPAT - Revert "MAJOR: import: update mt_list to support exponential back-off" - BUG/MINOR: server: add missing free for server->rdr_pfx - REGTESTS: ssl: skip OCSP test w/ WolfSSL - REGTESTS: ssl: skip generate-certificates test w/ wolfSSL - MINOR: logs: clarify the check of the log range - MINOR: log: remove the unused curr_idx in struct smp_log_range - CLEANUP: logs: rename a confusing local variable "curr_rg" to "smp_rg" - MINOR: logs: use a single index to store the current range and index - MEDIUM: logs: atomically check and update the log sample index - CLEANUP: ring: rename the ring lock "RING_LOCK" instead of "LOGSRV_LOCK" - BUG/MEDIUM: http-ana: Try to handle response before handling server abort - MEDIUM: tools/ip: v4tov6() and v6tov4() rework - MINOR: pattern/ip: offload ip conversion logic to helper functions - MINOR: pattern: fix pat_{parse,match}_ip() function comments - MINOR: pattern/ip: simplify pat_match_ip() function - BUG/MEDIUM: server/cli: don't delete a dynamic server that has streams - MINOR: hlua: Add support for the "http-after-res" action - BUG/MINOR: proto_reverse_connect: fix preconnect with startup name resolution - MINOR: proto_reverse_connect: prevent transparent server for pre-connect - CI: cirrus-ci: display gdb bt if any - MEDIUM: sample: Enhances converter "bytes" to take variable names as arguments - MEDIUM: sample: Small fix in function check_operator for eror reporting - MINOR: quic: handle external extra CIDs generator. - BUG/MINOR: proto_reverse_connect: set default maxconn - MINOR: proto_reverse_connect: refactor preconnect failure - MINOR: proto_reverse_connect: remove unneeded wakeup - MINOR: proto_reverse_connect: emit log for preconnect	2023-09-22 23:11:31 +02:00
Willy Tarreau	8b7841ff7a	[RELEASE] Released version 2.9-dev5 ... Released version 2.9-dev5 with the following main changes : - BUG/MEDIUM: mux-h2: fix crash when checking for reverse connection after error - BUILD: import: guard plock.h against multiple inclusion - BUILD: pools: import plock.h to build even without thread support - BUG/MINOR: ssl/cli: can't find ".crt" files when replacing a certificate - BUG/MINOR: stream: protect stream_dump() against incomplete streams - DOC: config: mention uid dependency on the tune.quic.socket-owner option - MEDIUM: capabilities: enable support for Linux capabilities - CLEANUP/MINOR: connection: Improve consistency of PPv2 related constants - MEDIUM: connection: Generic, list-based allocation and look-up of PPv2 TLVs - MEDIUM: sample: Add fetch for arbitrary TLVs - MINOR: sample: Refactor fc_pp_authority by wrapping the generic TLV fetch - MINOR: sample: Refactor fc_pp_unique_id by wrapping the generic TLV fetch - MINOR: sample: Add common TLV types as constants for fc_pp_tlv - MINOR: ssl_sock: avoid iterating realloc(+1) on stored context - DOC: ssl: add some comments about the non-obvious session allocation stuff - CLEANUP: ssl: keep a pointer to the server in ssl_sock_init() - MEDIUM: ssl_sock: always use the SSL's server name, not the one from the tid - MEDIUM: server/ssl: place an rwlock in the per-thread ssl server session - MINOR: server/ssl: maintain an index of the last known valid SSL session - MINOR: server/ssl: clear the shared good session index on failure - MEDIUM: server/ssl: pick another thread's session when we have none yet - MINOR: activity: report the current run queue size - BUG/MINOR: checks: do not queue/wake a bounced check - MINOR: checks: start the checks in sleeping state - MINOR: checks: pin the check to its thread upon wakeup - MINOR: check: remember when we migrate a check - MINOR: check/activity: collect some per-thread check activity stats - MINOR: checks: maintain counters of active checks per thread - MINOR: check: also consider the random other thread's active checks - MEDIUM: checks: search more aggressively for another thread on overload - MEDIUM: checks: implement a queue in order to limit concurrent checks - MINOR: checks: also consider the thread's queue for rebalancing - DEBUG: applet: Properly report opposite SC expiration dates in traces - BUG/MEDIUM: stconn: Update stream expiration date on blocked sends - BUG/MINOR: stconn: Don't report blocked sends during connection establishment - BUG/MEDIUM: stconn: Wake applets on sending path if there is a pending shutdown - BUG/MEDIUM: stconn: Don't block sends if there is a pending shutdown - BUG/MINOR: quic: Possible skipped RTT sampling - MINOR: quic: Add a trace to quic_release_frm() - BUG/MAJOR: quic: Really ignore malformed ACK frames. - BUG/MINOR: quic: Unchecked pointer to packet number space dereferenced - BUG/MEDIUM: connection: fix pool free regression with recent ppv2 TLV patches - BUG/MEDIUM: h1-htx: Ensure chunked parsing with full output buffer - BUG/MINOR: stream: further protect stream_dump() against incomplete sessions - DOC: configuration: update examples for req.ver - MINOR: properly mark the end of the CLI command in error messages - BUILD: ssl: Build with new cryptographic library AWS-LC - REGTESTS: ssl: skip ssl_dh test with AWS-LC - BUILD: bug: make BUG_ON() void to avoid a rare warning - BUILD: checks: shut up yet another stupid gcc warning - MINOR: cpuset: add ha_cpuset_isset() to check for the presence of a CPU in a set - MINOR: cpuset: add ha_cpuset_or() to bitwise-OR two CPU sets - MINOR: cpuset: centralize a reliable bound cpu detection - MEDIUM: threads: detect incomplete CPU bindings - MEDIUM: threads: detect excessive thread counts vs cpu-map - BUILD: quic: Compilation issue on 32-bits systems with quic_may_send_bytes() - BUG/MINOR: quic: Unchecked pointer to Handshake packet number space - MINOR: global: export the display_version() symbol - MEDIUM: mworker: display a more accessible message when a worker crash - MINOR: httpclient: allow to configure the retries - MINOR: httpclient: allow to configure the timeout.connect - BUG/MINOR: quic: Wrong RTT adjusments - BUG/MINOR: quic: Wrong RTT computation (srtt and rrt_var) - BUG/MINOR: stconn: Don't inhibit shutdown on connection on error - BUG/MEDIUM: applet: Fix API for function to push new data in channels buffer - BUG/MEDIUM: stconn: Report read activity when a stream is attached to front SC - BUG/MEDIUM: applet: Report an error if applet request more room on aborted SC - BUG/MEDIUM: stconn/stream: Forward shutdown on write timeout - NUG/MEDIUM: stconn: Always update stream's expiration date after I/O - BUG/MINOR: applet: Always expect data when CLI is waiting for a new command - BUG/MINOR: ring/cli: Don't expect input data when showing events - BUG/MINOR: quic: Dereferenced unchecked pointer to Handshke packet number space - BUG/MINOR: hlua/action: incorrect message on E_YIELD error - MINOR: http_ana: position the FINAL flag for http_after_res execution - CI: scripts: add support to build-ssl.sh to download and build AWS-LC - CI: add support to matrix.py to determine the latest AWS-LC release - CI: Update matrix.py so all code is contained in functions. - CI: github: Add a weekly CI run building with AWS-LC - MINOR: ring: add a function to compute max ring payload - BUG/MEDIUM: ring: adjust maxlen consistency check - MINOR: sink: simplify post_sink_resolve function - MINOR: log/sink: detect when log maxlen exceeds sink size - MINOR: sink: inform the user when logs will be implicitly truncated - MEDIUM: sink: don't perform implicit truncations when maxlen is not set - MINOR: log: move log-forwarders cleanup in log.c - MEDIUM: httpclient/logs: rely on per-proxy post-check instead of global one - MINOR: log: add dup_logsrv() helper function - MEDIUM: log/sink: make logsrv postparsing more generic - MEDIUM: fcgi-app: properly postresolve logsrvs - MEDIUM: spoe-agent: properly postresolve log rings - MINOR: sink: add helper function to deallocate sink struct - MEDIUM: sink/ring: introduce high level ring creation helper function - MEDIUM: sink: add sink_finalize() function - CLEANUP: log: remove unnecessary trim in __do_send_log - MINOR: cache: Change hash function in default normalizer used in case of "vary" - MINOR: tasks/stats: report the number of niced tasks in "show info" - CI: Update to actions/checkout@v4 - MINOR: ssl: add support for 'curves' keyword on server lines - BUG/MINOR: quic: Wrong cluster secret initialization - CLEANUP: quic: Remove useless free_quic_tx_pkts() function. - MEDIUM: init: initialize the trash earlier - MINOR: tools: add function read_line_to_trash() to read a line of a file - MINOR: cfgparse: use read_line_from_trash() to read from /sys - MEDIUM: cfgparse: assign NUMA affinity to cpu-maps - MINOR: cpuset: dynamically allocate cpu_map - REORG: cpuset: move parse_cpu_set() and parse_cpumap() to cpuset.c - CI: musl: highlight section if there are coredumps - CI: musl: drop shopt in workflow invocation	2023-09-08 19:21:45 +02:00
Willy Tarreau	518349f08a	[RELEASE] Released version 2.9-dev4 ... Released version 2.9-dev4 with the following main changes : - DEV: flags/show-sess-to-flags: properly decode fd.state - BUG/MINOR: stktable: allow sc-set-gpt(0) from tcp-request connection - BUG/MINOR: stktable: allow sc-add-gpc from tcp-request connection - DOC: typo: fix sc-set-gpt references - SCRIPTS: git-show-backports: automatic ref and base detection with -m - REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (3) - DOC: jwt: Add explicit list of supported algorithms - BUILD: Makefile: add the USE_QUIC option to make help - BUILD: Makefile: add USE_QUIC_OPENSSL_COMPAT to make help - BUILD: Makefile: realigned USE_* options in make help - DEV: makefile: fix POSIX compatibility for "range" target - IMPORT: plock: also support inlining the int code - IMPORT: plock: always expose the inline version of the lock wait function - IMPORT: lorw: support inlining the wait call - MINOR: threads: inline the wait function for pthread_rwlock emulation - MINOR: atomic: make sure to always relax after a failed CAS - MINOR: pools: use EBO to wait for unlock during pool_flush() - BUILD/IMPORT: fix compilation with PLOCK_DISABLE_EBO=1 - MINOR: quic+openssl_compat: Do not start without "limited-quic" - MINOR: quic+openssl_compat: Emit an alert for "allow-0rtt" option - BUG/MINOR: quic: allow-0rtt warning must only be emitted with quic bind - BUG/MINOR: quic: ssl_quic_initial_ctx() uses error count not error code - MINOR: pattern: do not needlessly lookup the LRU cache for empty lists - IMPORT: xxhash: update xxHash to version 0.8.2 - MINOR: proxy: simplify parsing 'backend/server' - MINOR: connection: centralize init/deinit of backend elements - MEDIUM: connection: implement passive reverse - MEDIUM: h2: reverse connection after SETTINGS reception - MINOR: server: define reverse-connect server - MINOR: backend: only allow reuse for reverse server - MINOR: tcp-act: parse 'tcp-request attach-srv' session rule - REGTESTS: provide a reverse-server test - MINOR: tcp-act: define optional arg name for attach-srv - MINOR: connection: use attach-srv name as SNI reuse parameter on reverse - REGTESTS: provide a reverse-server test with name argument - MINOR: proto: define dedicated protocol for active reverse connect - MINOR: connection: extend conn_reverse() for active reverse - MINOR: proto_reverse_connect: parse rev@ addresses for bind - MINOR: connection: prepare init code paths for active reverse - MEDIUM: proto_reverse_connect: bootstrap active reverse connection - MINOR: proto_reverse_connect: handle early error before reversal - MEDIUM: h2: implement active connection reversal - MEDIUM: h2: prevent stream opening before connection reverse completed - REGTESTS: write a full reverse regtest - BUG/MINOR: h2: fix reverse if no timeout defined - CI: fedora: fix "dnf" invocation syntax - BUG/MINOR: hlua_fcn: potentially unsafe stktable_data_ptr usage - DOC: lua: fix Sphinx warning from core.get_var() - DOC: lua: fix core.register_action typo - BUG/MINOR: ssl_sock: fix possible memory leak on OOM - MEDIUM: map/acl: Improve pat_ref_set() efficiency (for "set-map", "add-acl" action perfs) - MEDIUM: map/acl: Improve pat_ref_set_elt() efficiency (for "set-map", "add-acl"action perfs) - MEDIUM: map/acl: Accelerate several functions using pat_ref_elt struct ->head list - MEDIUM: map/acl: Replace map/acl spin lock by a read/write lock. - DOC: map/acl: Remove the comments about map/acl performance issue - DOC: Explanation of be_name and be_id fetches - MINOR: connection: simplify removal of idle conns from their trees - MINOR: server: move idle tree insert in a dedicated function - MAJOR: connection: purge idle conn by last usage	2023-08-25 17:57:22 +02:00
Willy Tarreau	75028bcba6	[RELEASE] Released version 2.9-dev3 ... Released version 2.9-dev3 with the following main changes : - BUG/MINOR: ssl: OCSP callback only registered for first SSL_CTX - BUG/MEDIUM: h3: Properly report a C-L header was found to the HTX start-line - MINOR: sample: add pid sample - MINOR: sample: implement act_conn sample fetch - MINOR: sample: accept_date / request_date return %Ts / %tr timestamp values - MEDIUM: sample: implement us and ms variant of utime and ltime - BUG/MINOR: sample: check alloc_trash_chunk() in conv_time_common() - DOC: configuration: describe Td in Timing events - MINOR: sample: implement the T* timer tags from the log-format as fetches - DOC: configuration: add sample fetches for timing events - BUG/MINOR: quic: Possible crash when acknowledging Initial v2 packets - MINOR: quic: Export QUIC traces code from quic_conn.c - MINOR: quic: Export QUIC CLI code from quic_conn.c - MINOR: quic: Move TLS related code to quic_tls.c - MINOR: quic: Add new "QUIC over SSL" C module. - MINOR: quic: Add a new quic_ack.c C module for QUIC acknowledgements - CLEANUP: quic: Defined but no more used function (quic_get_tls_enc_levels()) - MINOR: quic: Split QUIC connection code into three parts - CLEANUP: quic: quic_conn struct cleanup - MINOR: quic; Move the QUIC frame pool to its proper location - BUG/MINOR: chunk: fix chunk_appendf() to not write a zero if buffer is full - BUG/MEDIUM: h3: Be sure to handle fin bit on the last DATA frame - DOC: configuration: rework the custom log format table - BUG/MINOR: quic+openssl_compat: Non initialized TLS encryption levels - CLEANUP: acl: remove cache_idx from acl struct - REORG: cfgparse: extract curproxy as a global variable - MINOR: acl: add acl() sample fetch - BUILD: cfgparse: keep a single "curproxy" - BUG/MEDIUM: bwlim: Reset analyse expiration date when then channel analyse ends - MEDIUM: stream: Reset response analyse expiration date if there is no analyzer - BUG/MINOR: htx/mux-h1: Properly handle bodyless responses when splicing is used - BUG/MEDIUM: quic: consume contig space on requeue datagram - BUG/MINOR: http-client: Don't forget to commit changes on HTX message - CLEANUP: stconn: Move comment about sedesc fields on the field line - REGTESTS: http: Create a dedicated script to test spliced bodyless responses - REGTESTS: Test SPLICE feature is enabled to execute script about splicing - BUG/MINOR: quic: reappend rxbuf buffer on fake dgram alloc error - BUILD: quic: fix wrong potential NULL dereference - MINOR: h3: abort request if not completed before full response - BUG/MAJOR: http-ana: Get a fresh trash buffer for each header value replacement - CLEANUP: quic: Remove quic_path_room(). - MINOR: quic: Amplification limit handling sanitization. - MINOR: quic: Move some counters from [rt]x quic_conn anonymous struct - MEDIUM: quic: Send CONNECTION_CLOSE packets from a dedicated buffer. - MINOR: quic: Use a pool for the connection ID tree. - MEDIUM: quic: Allow the quic_conn memory to be asap released. - MINOR: quic: Release asap quic_conn memory (application level) - MINOR: quic: Release asap quic_conn memory from ->close() xprt callback. - MINOR: quic: Warning for OpenSSL wrapper QUIC bindings without "limited-quic" - REORG: http: move has_forbidden_char() from h2.c to http.h - BUG/MAJOR: h3: reject header values containing invalid chars - MINOR: mux-h2/traces: also suggest invalid header upon parsing error - MINOR: ist: add new function ist_find_range() to find a character range - MINOR: http: add new function http_path_has_forbidden_char() - MINOR: h2: pass accept-invalid-http-request down the request parser - REGTESTS: http-rules: add accept-invalid-http-request for normalize-uri tests - BUG/MINOR: h1: do not accept '#' as part of the URI component - BUG/MINOR: h2: reject more chars from the :path pseudo header - BUG/MINOR: h3: reject more chars from the :path pseudo header - REGTESTS: http-rules: verify that we block '#' by default for normalize-uri - DOC: clarify the handling of URL fragments in requests - BUG/MAJOR: http: reject any empty content-length header value - BUG/MINOR: http: skip leading zeroes in content-length values - BUG/MEDIUM: mux-h1: fix incorrect state checking in h1_process_mux() - BUG/MEDIUM: mux-h1: do not forget EOH even when no header is sent - BUILD: mux-h1: shut a build warning on clang from previous commit - DEV: makefile: add a new "range" target to iteratively build all commits - CI: do not use "groupinstall" for Fedora Rawhide builds - CI: get rid of travis-ci wrapper for Coverity scan - BUG/MINOR: quic: mux started when releasing quic_conn - BUG/MINOR: quic: Possible crash in quic_cc_conn_io_cb() traces. - MINOR: quic: Add a trace for QUIC conn fd ready for receive - BUG/MINOR: quic: Possible crash when issuing "show fd/sess" CLI commands - BUG/MINOR: quic: Missing tasklet (quic_cc_conn_io_cb) memory release (leak) - BUG/MEDIUM: quic: fix tasklet_wakeup loop on connection closing - BUG/MINOR: hlua: fix invalid use of lua_pop on error paths - MINOR: hlua: add hlua_stream_ctx_prepare helper function - BUG/MEDIUM: hlua: streams don't support mixing lua-load with lua-load-per-thread - MAJOR: threads/plock: update the embedded library again - MINOR: stick-table: move the task_queue() call outside of the lock - MINOR: stick-table: move the task_wakeup() call outside of the lock - MEDIUM: stick-table: change the ref_cnt atomically - MINOR: stick-table: better organize the struct stktable - MEDIUM: peers: update ->commitupdate out of the lock using a CAS - MEDIUM: peers: drop then re-acquire the wrlock in peer_send_teachmsgs() - MEDIUM: peers: only read-lock peer_send_teachmsgs() - MEDIUM: stick-table: use a distinct lock for the updates tree - MEDIUM: stick-table: touch updates under an upgradable read lock - MEDIUM: peers: drop the stick-table lock before entering peer_send_teachmsgs() - MINOR: stick-table: move the update lock into its own cache line - CLEANUP: stick-table: slightly reorder the stktable struct - BUILD: defaults: use __WORDSIZE not LONGBITS for MAX_THREADS_PER_GROUP - MINOR: tools: make ptr_hash() support 0-bit outputs - MINOR: tools: improve ptr hash distribution on 64 bits - OPTIM: tools: improve hash distribution using a better prime seed - OPTIM: pools: use exponential back-off on shared pool allocation/release - OPTIM: pools: make pool_get_from_os() / pool_put_to_os() not update ->allocated - MINOR: pools: introduce the use of multiple buckets - MEDIUM: pools: spread the allocated counter over a few buckets - MEDIUM: pools: move the used counter over a few buckets - MEDIUM: pools: move the needed_avg counter over a few buckets - MINOR: pools: move the failed allocation counter over a few buckets - MAJOR: pools: move the shared pool's free_list over multiple buckets - MINOR: pools: make pool_evict_last_items() use pool_put_to_os_no_dec() - BUILD: pools: fix build error on clang with inline vs forceinline	2023-08-12 19:59:27 +02:00
Willy Tarreau	80cef0c02d	[RELEASE] Released version 2.9-dev2 ... Released version 2.9-dev2 with the following main changes : - BUG/MINOR: quic: Possible leak when allocating an encryption level - BUG/MINOR: quic: Missing QUIC connection path member initialization - BUILD: quic: Compilation fixes for some gcc warnings with -O1 - DOC: ssl: Fix typo in 'ocsp-update' option - DOC: ssl: Add ocsp-update troubleshooting clues and emphasize on crt-list only aspect - BUG/MINOR: tcp_sample: bc_{dst,src} return IP not INT - MEDIUM: acl/sample: unify sample conv parsing in a single function - MINOR: sample: introduce c_pseudo() conv function - MEDIUM: sample: add missing ADDR=>? compatibility matrix entries - MINOR: sample: fix ipmask sample definition - MEDIUM: tree-wide: fetches that may return IPV4+IPV6 now return ADDR - MEDIUM: sample: introduce 'same' output type - BUG/MINOR: quic: Possible crash in "show quic" dumping packet number spaces - BUG/MINOR: cache: A 'max-age=0' cache-control directive can be overriden by a s-maxage - BUG/MEDIUM: sink: invalid server list in sink_new_from_logsrv() - BUG/MINOR: http_ext: unhandled ERR_ABORT in proxy_http_parse_7239() - BUG/MINOR: sink: missing sft free in sink_deinit() - BUG/MINOR: ring: size warning incorrectly reported as fatal error - BUG/MINOR: ring: maxlen warning reported as alert - BUG/MINOR: log: LF upsets maxlen for UDP targets - MINOR: sink/api: pass explicit maxlen parameter to sink_write() - BUG/MEDIUM: log: improper use of logsrv->maxlen for buffer targets - BUG/MINOR: log: fix missing name error message in cfg_parse_log_forward() - BUG/MINOR: log: fix multiple error paths in cfg_parse_log_forward() - BUG/MINOR: log: free errmsg on error in cfg_parse_log_forward() - BUG/MINOR: sink: invalid sft free in sink_deinit() - BUG/MINOR: sink: fix errors handling in cfg_post_parse_ring() - BUG/MINOR: server: set rid default value in new_server() - MINOR: hlua_fcn/mailers: handle timeout mail from mailers section - BUG/MINOR: sink/log: properly deinit srv in sink_new_from_logsrv() - EXAMPLES: maintain haproxy 2.8 retrocompatibility for lua mailers script - BUG/MINOR: hlua_fcn/queue: use atomic load to fetch queue size - BUG/MINOR: config: Remove final '\n' in error messages - BUG/MINOR: config: Lenient port configuration parsing - BUG/MEDIUM: quic: token IV was not computed using a strong secret - BUG/MINOR: quic: retry token remove one useless intermediate expand - BUG/MEDIUM: quic: missing check of dcid for init pkt including a token - BUG/MEDIUM: quic: timestamp shared in token was using internal time clock - CLEANUP: quic: remove useless parameter 'key' from quic_packet_encrypt - BUG/MINOR: hlua: hlua_yieldk ctx argument should support pointers - BUG/MEDIUM: hlua_fcn/queue: bad pop_wait sequencing - DOC: config: Fix fc_src description to state the source address is returned - BUG/MINOR: sample: Fix wrong overflow detection in add/sub conveters - BUG/MINOR: http: Return the right reason for 302 - MEDIUM: ssl: new sample fetch method to get curve name - CI: add naming convention documentation - CI: explicitely highlight VTest result section if there's something - BUG/MINOR: quic: Unckecked encryption levels availability - BUILD: quic: fix warning during compilation using gcc-6.5 - BUG/MINOR: hlua: add check for lua_newstate - BUG/MINOR: h1-htx: Return the right reason for 302 FCGI responses - MINOR: lua: Allow reading "proc." scoped vars from LUA core. - MINOR: cpuset: add cpu_map_configured() to know if a cpu-map was found - BUG/MINOR: config: do not detect NUMA topology when cpu-map is configured - BUG/MINOR: cpuset: remove the bogus "proc" from the cpu_map struct - BUG/MINOR: init: set process' affinity even in foreground - CLEANUP: cpuset: remove the unused proc_t1 field in cpu_map - CLEANUP: config: make parse_cpu_set() return documented values - BUG/MINOR: server: Don't warn on server resolution failure with init-addr none - MINOR: peers: add peers keyword registration - MINOR: quic: Stop storing the TX encoded transport parameters - MINOR: quic: Dynamic allocation for negotiated Initial TLS cipher context. - MINOR: quic: Release asap the negotiated Initial TLS context. - MINOR: quic: Add traces to qc_may_build_pkt() - MEDIUM: quic: Packet building rework. - CLEANUP: quic: Remove a useless TLS related variable from quic_conn_io_cb(). - MEDIUM: quic: Handshake I/O handler rework. - MINOR: quic: Add traces for qc_frm_free() - MINOR: quic: add trace about pktns packet/frames releasing - BUG/MINOR: quic: Missing parentheses around PTO probe variable. - MINOR: quic: Ping from Initial pktns before reaching anti-amplification limit - BUG/MINOR: server-state: Ignore empty files - BUG/MINOR: server-state: Avoid warning on 'file not found' - BUG/MEDIUM: listener: Acquire proxy's lock in relax_listener() if necessary - MINOR: quic: QUIC openssl wrapper implementation - MINOR: quic: Include QUIC opensssl wrapper header from TLS stacks compatibility header - MINOR: quic: Do not enable O-RTT with USE_QUIC_OPENSSL_COMPAT - MINOR: quic: Set the QUIC connection as extra data before calling SSL_set_quic_method() - MINOR: quic: Do not enable 0RTT with SSL_set_quic_early_data_enabled() - MINOR: quic: Add a compilation option for the QUIC OpenSSL wrapper - MINOR: quic: Export some KDF functions (QUIC-TLS) - MINOR: quic: Make ->set_encryption_secrets() be callable two times - MINOR: quic: Initialize TLS contexts for QUIC openssl wrapper - MINOR: quic: Call the keylog callback for QUIC openssl wrapper from SSL_CTX_keylog() - MINOR: quic: Add a quic_openssl_compat struct to quic_conn struct - MINOR: quic: Useless call to SSL_CTX_set_quic_method() - MINOR: quic: SSL context initialization with QUIC OpenSSL wrapper. - MINOR: quic: Missing encoded transport parameters for QUIC OpenSSL wrapper - MINOR: quic: Add "limited-quic" new tuning setting - DOC: quic: Add "limited-quic" new tuning setting - DOC: install: Document how to build a limited support for QUIC	2023-07-21 20:29:42 +02:00
Willy Tarreau	fdc57c4021	[RELEASE] Released version 2.9-dev1 ... Released version 2.9-dev1 with the following main changes : - BUG/MINOR: stats: Fix Lua's `get_stats` function - MINOR: stats: protect against future stats fields omissions - BUG/MINOR: stream: do not use client-fin/server-fin with HTX - BUG/MINOR: quic: Possible crash when SSL session init fails - CONTRIB: Add vi file extensions to .gitignore - BUG/MINOR: spoe: Only skip sending new frame after a receive attempt - BUG/MINOR: peers: Improve detection of config errors in peers sections - REG-TESTS: stickiness: Delay haproxys start to properly resolv variables - DOC: quic: fix misspelled tune.quic.socket-owner - DOC: config: fix jwt_verify() example using var() - DOC: config: fix rfc7239 converter examples (again) - BUG/MINOR: cfgparse-tcp: leak when re-declaring interface from bind line - BUG/MINOR: proxy: add missing interface bind free in free_proxy - BUG/MINOR: proxy/server: free default-server on deinit - BUG/MEDIUM: hlua: Use front SC to detect EOI in HTTP applets' receive functions - BUG/MINOR: ssl: log message non thread safe in SSL Hanshake failure - BUG/MINOR: quic: Wrong encryption level flags checking - BUG/MINOR: quic: Address inversion in "show quic full" - BUG/MINOR: server: inherit from netns in srv_settings_cpy() - BUG/MINOR: namespace: missing free in netns_sig_stop() - BUG/MINOR: quic: Missing initialization (packet number space probing) - BUG/MINOR: quic: Possible crash in quic_conn_prx_cntrs_update() - BUG/MINOR: quic: Possible endless loop in quic_lstnr_dghdlr() - MINOR: quic: Remove pool_zalloc() from qc_new_conn() - MINOR: quic: Remove pool_zalloc() from qc_conn_alloc_ssl_ctx() - MINOR: quic: Remove pool_zalloc() from quic_dgram_parse() - BUG/MINOR: quic: Missing transport parameters initializations - BUG/MEDIUM: mworker: increase maxsock with each new worker - BUG/MINOR: quic: ticks comparison without ticks API use - BUG/MINOR: quic: Missing TLS secret context initialization - DOC: Add tune.h2.be.* and tune.h2.fe.* options to table of contents - DOC: Add tune.h2.max-frame-size option to table of contents - DOC: Attempt to fix dconv parsing error for tune.h2.fe.initial-window-size - REGTESTS: h1_host_normalization : Add a barrier to not mix up log messages - MEDIUM: mux-h1: Split h1_process_mux() to make code more readable - REORG: mux-h1: Rename functions to emit chunk size/crlf in the output buffer - MINOR: mux-h1: Add function to append the chunk size to the output buffer - MINOR: mux-h1: Add function to prepend the chunk crlf to the output buffer - MEDIUM: filters/htx: Don't rely on HTX extra field if payload is filtered - MEDIIM: mux-h1: Add splicing support for chunked messages - REGTESTS: Add a script to test the kernel splicing with chunked messages - CLEANUP: mux-h1: Remove useless __maybe_unused statement - BUG/MINOR: http_ext: fix if-none regression in forwardfor option - REGTEST: add an extra testcase for ifnone-forwardfor - BUG/MINOR: mworker: leak of a socketpair during startup failure - BUG/MINOR: quic: Prevent deadlock with CID tree lock - MEDIUM: ssl: handle the SSL_ERROR_ZERO_RETURN during the handshake - BUG/MINOR: ssl: SSL_ERROR_ZERO_RETURN returns CO_ER_SSL_EMPTY - BUILD: mux-h1: silence a harmless fallthrough warning - BUG/MEDIUM: quic: error checking buffer large enought to receive the retry tag - MINOR: ssl: allow to change the server signature algorithm on server lines - MINOR: ssl: allow to change the client-sigalgs on server lines - BUG/MINOR: config: fix stick table duplicate name check - BUG/MINOR: quic: Missing random bits in Retry packet header - BUG/MINOR: quic: Wrong Retry paquet version field endianess - BUG/MINOR: quic: Wrong endianess for version field in Retry token - IMPORT: slz: implement a synchronous flush() operation - MINOR: compression/slz: add support for a pure flush of pending bytes - MINOR: quic: Move QUIC TLS encryption level related code (quic_conn_enc_level_init()) - MINOR: quic: Move QUIC encryption level structure definition - MINOR: quic: Implement a packet number space identification function - MINOR: quic: Move packet number space related functions - MEDIUM: quic: Dynamic allocations of packet number spaces - CLEANUP: quic: Remove qc_list_all_rx_pkts() defined but not used - MINOR: quic: Add a pool for the QUIC TLS encryption levels - MEDIUM: quic: Dynamic allocations of QUIC TLS encryption levels - MINOR: quic: Reduce the maximum length of TLS secrets - CLEANUP: quic: Remove two useless pools a low QUIC connection level - MEDIUM: quic: Handle the RX in one pass - MINOR: quic: Remove call to qc_rm_hp_pkts() from I/O callback - CLEANUP: quic: Remove server specific about Initial packet number space - MEDIUM: quic: Release encryption levels and packet number spaces asap - CLEANUP: quic: Remove a useless test about discarded pktns (qc_handle_crypto_frm()) - MINOR: quic: Move the packet number space status at quic_conn level - MINOR: quic: Drop packet with type for discarded packet number space. - BUILD: quic: Add a DISGUISE() to please some compiler to qc_prep_hpkts() 1st parameter - BUILD: debug: avoid a build warning related to epoll_wait() in debug code	2023-07-02 11:13:42 +02:00
Willy Tarreau	cb6a35fdc1	[RELEASE] Released version 2.9-dev0 ... Released version 2.9-dev0 with the following main changes : - MINOR: version: mention that it's development again	2023-05-31 16:29:19 +02:00
Willy Tarreau	fdd8154ed3	[RELEASE] Released version 2.8.0 ... Released version 2.8.0 with the following main changes : - MINOR: compression: Improve the way Vary header is added - BUILD: makefile: search for SSL_INC/wolfssl before SSL_INC - MINOR: init: pre-allocate kernel data structures on init - DOC: install: add details about WolfSSL - BUG/MINOR: ssl_sock: add check for ha_meth - BUG/MINOR: thread: add a check for pthread_create - BUILD: init: print rlim_cur as regular integer - DOC: install: specify the minimum openssl version recommended - CLEANUP: mux-quic: remove unneeded fields in qcc - MINOR: mux-quic: remove nb_streams from qcc - MINOR: quic: fix stats naming for flow control BLOCKED frames - BUG/MEDIUM: mux-quic: only set EOI on FIN - BUG/MEDIUM: threads: fix a tiny race in thread_isolate() - DOC: config: fix rfc7239 converter examples - DOC: quic: remove experimental status for QUIC - CLEANUP: mux-quic: rename functions for mux_ops - CLEANUP: mux-quic: rename internal functions - BUG/MINOR: mux-h2: refresh the idle_timer when the mux is empty - DOC: config: Fix bind/server/peer documentation in the peers section - BUILD: Makefile: use -pthread not -lpthread when threads are enabled - CLEANUP: doc: remove 21 totally obsolete docs - DOC: install: mention the common strict-aliasing warning on older compilers - DOC: install: clarify a few points on the wolfSSL build method - MINOR: quic: Add QUIC connection statistical counters values to "show quic" - EXAMPLES: update the basic-config-edge file for 2.8 - MINOR: quic/cli: clarify the "show quic" help message - MINOR: version: mention that it's LTS now.	2023-05-31 16:24:38 +02:00
Willy Tarreau	c8bb9aeb07	[RELEASE] Released version 2.8-dev13 ... Released version 2.8-dev13 with the following main changes : - DOC: add size format section to manual - CLEANUP: mux-quic/h3: complete BUG_ON with comments - MINOR: quic: remove return val of quic_aead_iv_build() - MINOR: quic: use WARN_ON for encrypt failures - BUG/MINOR: quic: handle Tx packet allocation failure properly - MINOR: quic: fix alignment of oneline show quic - MEDIUM: stconn/applet: Allow SF_SL_EOS flag alone - MEDIUM: stconn: make the SE_FL_ERR_PENDING to ERROR transition systematic - DOC: internal: add a bit of documentation for the stconn closing conditions - DOC/MINOR: config: Fix typo in description for `ssl_bc` in configuration.txt - BUILD: quic: re-enable chacha20_poly1305 for libressl - MINOR: mux-quic: set both EOI EOS for stream fin - MINOR: mux-quic: only set EOS on RESET_STREAM recv - MINOR: mux-quic: report error on stream-endpoint earlier - BUILD: makefile: fix build issue on GNU make < 3.82 - BUG/MINOR: mux-h2: Check H2_SF_BODY_TUNNEL on H2S flags and not demux frame ones - MINOR: mux-h2: Set H2_SF_ES_RCVD flag when decoding the HEADERS frame - MINOR: mux-h2: Add a function to propagate termination flags from h2s to SE - BUG/MEDIUM: mux-h2: Propagate termination flags when frontend SC is created - DEV: add a Lua helper script for SSL keys logging - CLEANUP: makefile: don't display a dummy features list without a target - BUILD: makefile: do not erase build options for some build options - MINOR: quic: Add low level traces (addresses, DCID) - BUG/MINOR: quic: Wrong token length check (quic_generate_retry_token()) - BUG/MINOR: quic: Missing Retry token length on receipt - MINOR: quic: Align "show quic" command help information - CLEANUP: quic: Indentation fix quic_rx_pkt_retrieve_conn() - CLEANUP: quic: Useless tests in qc_rx_pkt_handle() - MINOR: quic: Add some counters at QUIC connection level - MINOR: quic: Add a counter for sent packets - MINOR: hlua: hlua_smp2lua_str() may LJMP - MINOR: hlua: hlua_smp2lua() may LJMP - MINOR: hlua: hlua_arg2lua() may LJMP - DOC: hlua: document hlua_lua2arg() function - DOC: hlua: document hlua_lua2smp() function - BUG/MINOR: hlua: unsafe hlua_lua2smp() usage - BUILD: makefile: commit the tiny FreeBSD makefile stub - BUILD: makefile: fix build options when building tools first - BUILD: ist: do not put a cast in an array declaration - BUILD: ist: use the literal declaration for ist_lc/ist_uc under TCC - BUILD: compiler: systematically set USE_OBSOLETE_LINKER with TCC - DOC: install: update reference to known supported versions - SCRIPTS: publish-release: update the umask to keep group write access	2023-05-24 22:53:55 +02:00
Christopher Faulet	f48b23f5da	[RELEASE] Released version 2.8-dev12 ... Released version 2.8-dev12 with the following main changes : - BUILD: mjson: Fix warning about unused variables - MINOR: spoe: Don't stop disabled proxies - BUG/MEDIUM: filters: Don't deinit filters for disabled proxies during startup - BUG/MINOR: hlua_fcn/queue: fix broken pop_wait() - BUG/MINOR: hlua_fcn/queue: fix reference leak - CLEANUP: hlua_fcn/queue: make queue:push() easier to read - BUG/MINOR: quic: Buggy acknowlegments of acknowlegments function - DEBUG: list: add DEBUG_LIST to purposely corrupt list heads after delete - MINOR: stats: report the total number of warnings issued - MINOR: stats: report the number of times the global maxconn was reached - BUG/MINOR: mux-quic: do not prevent shutw on error - BUG/MINOR: mux-quic: do not free frame already released by quic-conn - BUG/MINOR: mux-quic: no need to subscribe for detach streams - MINOR: mux-quic: add traces for stream wake - MINOR: mux-quic: do not send STREAM frames if already subscribe - MINOR: mux-quic: factorize send subscribing - MINOR: mux-quic: simplify return path of qc_send() - MEDIUM: quic: streamline error notification - MEDIUM: mux-quic: adjust transport layer error handling - MINOR: stats: report the listener's protocol along with the address in stats - BUG/MEDIUM: mux-fcgi: Never set SE_FL_EOS without SE_FL_EOI or SE_FL_ERROR - BUG/MEDIUM: mux-fcgi: Don't request more room if mux is waiting for more data - MINOR: stconn: Add a cross-reference between SE descriptor - BUG/MINOR: proxy: missing free in free_proxy for redirect rules - MINOR: proxy: add http_free_redirect_rule() function - BUG/MINOR: http_rules: fix errors paths in http_parse_redirect_rule() - CLEANUP: http_act: use http_free_redirect_rule() to clean redirect act - MINOR: tree-wide: use free_acl_cond() where relevant - CLEANUP: acl: discard prune_acl_cond() function - BUG/MINOR: cli: don't complain about empty command on empty lines - MINOR: cli: add an option to display the uptime in the CLI's prompt - MINOR: master/cli: also implement the timed prompt on the master CLI - MINOR: cli: make "show fd" identify QUIC connections and listeners - MINOR: httpclient: allow to disable the DNS resolvers of the httpclient - BUILD: debug: fix build issue on 32-bit platforms in "debug dev task" - MINOR: ncbuf: missing malloc checks in standalone code - DOC: lua: fix core.{proxies,frontends,backends} visibility - EXAMPLES: fix race condition in lua mailers script - BUG/MINOR: errors: handle malloc failure in usermsgs_put() - BUG/MINOR: log: fix memory error handling in parse_logsrv() - BUG/MINOR: quic: Wrong redispatch for external data on connection socket - MINOR: htx: add function to set EOM reliably - MINOR: mux-quic: remove dedicated function to handle standalone FIN - BUG/MINOR: mux-quic: properly handle buf alloc failure - BUG/MINOR: mux-quic: handle properly recv ncbuf alloc failure - BUG/MINOR: quic: do not alloc buf count on alloc failure - BUG/MINOR: mux-quic: differentiate failure on qc_stream_desc alloc - BUG/MINOR: mux-quic: free task on qc_init() app ops failure - MEDIUM: session/ssl: return the SSL error string during a SSL handshake error - CI: enable monthly Fedora Rawhide clang builds - MEDIUM: mworker/cli: does not disconnect the master CLI upon error - MINOR: stconn: Remove useless test on sedesc on detach to release the xref - MEDIUM: proxy: stop emitting logs for internal proxies when stopping - MINOR: ssl: add new sample ssl_c_r_dn - BUG/MEDIUM: mux-h2: make sure control frames do not refresh the idle timeout - BUILD: ssl: ssl_c_r_dn fetches uses functiosn only available since 1.1.1 - BUG/MINOR: mux-quic: handle properly Tx buf exhaustion - BUG/MINOR: h3: missing goto on buf alloc failure - BUILD: ssl: get0_verified chain is available on libreSSL - BUG/MINOR: makefile: use USE_LIBATOMIC instead of USE_ATOMIC - MINOR: mux-quic: add trace to stream rcv_buf operation - MINOR: mux-quic: properly report end-of-stream on recv - MINOR: mux-quic: uninline qc_attach_sc() - BUG/MEDIUM: mux-quic: fix EOI for request without payload - MINOR: checks: make sure spread-checks is used also at boot time - BUG/MINOR: tcp-rules: Don't shortened the inspect-delay when EOI is set - REGTESTS: log: Reduce response inspect-delay for last_rule.vtc - DOC: config: Clarify conditions to shorten the inspect-delay for TCP rules - CLEANUP: server: remove useless tmptrash assigments in srv_update_status() - BUG/MINOR: server: memory leak in _srv_update_status_op() on server DOWN - CLEANUP: check; Remove some useless assignments to NULL - CLEANUP: stats: update the trash chunk where it's used - MINOR: clock: measure the total boot time - MINOR: stats: report the boot time in "show info" - BUG/MINOR: checks: postpone the startup of health checks by the boot time - MINOR: clock: provide a function to automatically adjust now_offset - BUG/MINOR: clock: automatically adjust the internal clock with the boot time - CLEANUP: fcgi-app; Remove useless assignment to NULL - REGTESTS: log: Reduce again response inspect-delay for last_rule.vtc - CI: drop Fedora m32 pipeline in favour of cross matrix - MEDIUM: checks: Stop scheduling healthchecks during stopping stage - MEDIUM: resolvers: Stop scheduling resolution during stopping stage - BUG/MINOR: hlua: SET_SAFE_LJMP misuse in hlua_event_runner() - BUG/MINOR: debug: fix pointer check in debug_parse_cli_task()	2023-05-17 17:10:12 +02:00
Willy Tarreau	f0e8e79b3b	[RELEASE] Released version 2.8-dev11 ... Released version 2.8-dev11 with the following main changes : - BUILD: debug: do not check the isolated_thread variable in non-threaded builds - BUILD: quic: fix build warning when threads are disabled - CI: more granular failure on generating build matrix - CLEANUP: quic: No more used q_buf structure - CLEANUP: quic: Rename several <buf> variables in quic_frame.(c|h) - CLEANUP: quic: Typo fix for quic_connection_id pool - BUG/MINOR: quic: Wrong key update cipher context initialization for encryption - BUG/MEDIUM: cache: Don't request more room than the max allowed - MEDIUM: stconn: Be sure to always be able to unblock a SC that needs room - EXAMPLES: fix IPV6 support for lua mailers script - BUILD: ssl: buggy -Werror=dangling-pointer since gcc 13.0 - DOC: stconn: Update comments about ABRT/SHUT for stconn structure - BUG/MEDIUM: stats: Require more room if buffer is almost full - DOC: configuration: add info about ssl-engine for 2.6 - BUG/MINOR: mux-quic: fix transport VS app CONNECTION_CLOSE - BUG/MEDIUM: mux-quic: wakeup tasklet to close on error - DEV: flags: add a script to decode most flags in the "show sess all" output - BUG/MINOR: quic: Possible crash when dumping version information - BUG/MINOR: config: make compression work again in defaults section - BUG/MEDIUM: stream: Forward shutdowns when unhandled errors are caught - MEDIUM: stream: Resync analyzers at the end of process_stream() on change - DEV: flags: add missing stream flags to show-sess-to-flags - DEV: flags/show-sess-to-flags: only retrieve hex digits from hex fields - DEV: flags/show-sess-to-flags: add support for color output - CLEANUP: src/listener.c: remove redundant NULL check	2023-05-11 05:33:21 +02:00
Willy Tarreau	d8cbfa5ad5	[RELEASE] Released version 2.8-dev10 ... Released version 2.8-dev10 with the following main changes : - BUG/MINOR: stats: fix typo in `TotalSplicedBytesOut` field name - REGTESTS: add success test, "set server" via fqdn - MINOR: ssl: disable CRL checks with WolfSSL when no CRL file - BUG/MINOR: stream/cli: fix stream age calculation in "show sess" - MINOR: debug: clarify "debug dev stream" help message - DEBUG: cli: add "debug dev task" to show/wake/expire/kill tasks and tasklets - BUG/MINOR: ssl/sample: x509_v_err_str converter output when not found - REGTESTS: ssl: simplify X509_V code check in ssl_client_auth.vtc - BUILD: cli: fix build on Windows due to isalnum() implemented as a macro - MINOR: activity: use a single macro to iterate over all fields - MINOR: activity: show the line header inside the SHOW_VAL macro - MINOR: activity: iterate over all fields in a main loop for dumping - MINOR: activity: allow "show activity" to restart dumping on any line - MINOR: activity: allow "show activity" to restart in the middle of a line - DEV: haring: automatically disable DEBUG_STRICT - DEV: haring: update readme to suggest using the same build options for haring - BUG/MINOR: debug: fix incorrect profiling status reporting in show threads - MINOR: debug: permit the "debug dev loop" to run under isolation - BUG/MEDIUM: mux-h2: Properly handle end of request to expect data from server - BUG/MINOR: mux-quic: prevent quic_conn error code to be overwritten - MINOR: mux-quic: add trace event for local error - MINOR: mux-quic: wake up after recv only if avail data - MINOR: mux-quic: adjust local error API - MINOR: mux-quic: report local error on stream endpoint asap - MINOR: mux-quic: close connection asap on local error - BUG/MINOR: debug: do not emit empty lines in thread dumps - BUG/MINOR: mux-h2: Also expect data when waiting for a tunnel establishment - BUG/MINOR: time: fix NS_TO_TV macro - MEDIUM: debug: simplify the thread dump mechanism - MINOR: debug: write panic dump to stderr one thread at a time - MINOR: debug: make "show threads" properly iterate over all threads - CLEANUP: debug: remove the now unused ha_thread_dump_all_to_trash() - MINOR: ssl: allow to change the server signature algorithm - MINOR: ssl: allow to change the signature algorithm for client authentication - MINOR: cli: Use applet API to write output message - MINOR: stats: Use the applet API to write data - MINOR: peers: Use the applet API to send message - MINOR: stconn: Add a field to specify the room needed by the SC to progress - MEDIUM: tree-wide: Change sc API to specify required free space to progress - BUG/MEDIUM: stconn: Unblock SC from stream if there is enough room to progrees - MEDIUM: applet: Check room needed to unblock opposite SC when data was consumed - MEDIUM: stconn: Check room needed to unblock SC on fast-forward - MEDIUM: stconn: Check room needed to unblock opposite SC when data was sent - MINOR: hlua_fcn: fix Server.is_draining() return type - MINOR: hlua_fcn: add Server.is_backup() - MINOR: hlua_fcn: add Server.is_dynamic() - MINOR: hlua_fcn: add Server.tracking() - MINOR: hlua_fcn: add Server.get_trackers() - MINOR: hlua_fcn: add Server.get_proxy() - MINOR: hlua_fcn: add Server.get_pend_conn() and Server.get_cur_sess() - MINOR: hlua_fcn: add Proxy.get_srv_act() and Proxy.get_srv_bck() - DOC: lua/event: add ServerEvent class header - MINOR: server/event_hdl: publish macro helper - MINOR: server/event_hdl: add SERVER_STATE event - OPTIM: server: publish UP/DOWN events from STATE change - MINOR: hlua: expose SERVER_STATE event - MINOR: server/event_hdl: add SERVER_ADMIN event - MINOR: hlua: expose SERVER_ADMIN event - MINOR: checks/event_hdl: SERVER_CHECK event - MINOR: hlua/event_hdl: expose SERVER_CHECK event - MINOR: mailers/hlua: disable email sending from lua - MINOR: hlua: expose proxy mailers - EXAMPLES: add lua mailers script to replace tcpcheck mailers - BUG/MINOR: hlua: spinning loop in hlua_socket_handler() - MINOR: server: fix message report when IDRAIN is set and MAINT is cleared - CLEANUP: hlua: hlua_register_task() may longjmp - REGTESTS: use lua mailer script for mailers tests - MINOR: hlua: declare hlua_{ref,pushref,unref} functions - MINOR: hlua: declare hlua_gethlua() function - MINOR: hlua: declare hlua_yieldk() function - MINOR: hlua_fcn: add Queue class - EXAMPLES: mailqueue for lua mailers script - MINOR: quic: add format argument for "show quic" - MINOR: quic: implement oneline format for "show quic" - MINOR: config: allow cpu-map to take commas in lists of ranges - CLEANUP: fix a few reported typos in code comments - DOC: fix a few reported typos in the config and install doc	2023-05-07 07:31:54 +02:00
Willy Tarreau	9de10ce478	[RELEASE] Released version 2.8-dev9 ... Released version 2.8-dev9 with the following main changes : - MINOR: quic: Move traces at proto level - BUG/MINOR: quic: Possible memory leak from TX packets - BUG/MINOR: quic: Possible leak during probing retransmissions - BUG/MINOR: quic: Useless probing retransmission in draining or killing state - BUG/MINOR: quic: Useless I/O handler task wakeups (draining, killing state) - CLEANUP: quic: rename frame types with an explicit prefix - CLEANUP: quic: rename frame variables - CLEANUP: quic: Remove useless parameters passes to qc_purge_tx_buf() - CLEANUP: quic: Rename <buf> variable to <token> in quic_generate_retry_token() - CLEANUP: quic: Rename <buf> variable into quic_padding_check() - CLEANUP: quic: Rename <buf> variable into quic_rx_pkt_parse() - CLEANUP: quic: Rename <buf> variable for several low level functions - CLEANUP: quic: Make qc_build_pkt() be more readable - CLEANUP: quic: Rename quic_get_dgram_dcid() <buf> variable - CLEANUP: quic: Rename several <buf> variables at low level - CLEANUP: quic: Rename <buf> variable into quic_packet_read_long_header() - CLEANUP: quic: Rename <buf> variable into qc_parse_hd_form() - CLEANUP: quic: Rename several <buf> variables into quic_sock.c - DEBUG: crash using an invalid opcode on x86/x86_64 instead of an invalid access - DEBUG: crash using an invalid opcode on aarch64 instead of an invalid access - DEV: h2: add a script "mkhdr" to build h2 frames from scratch - DEV: h2: support reading frame payload from a file - MINOR: acme.sh: add the deploy script for acme.sh in admin directory - BUG/MEDIUM: mux-quic: do not emit RESET_STREAM for unknown length - BUG/MEDIUM: mux-quic: improve streams fairness to prevent early timeout - BUG/MINOR: quic: prevent buggy memcpy for empty STREAM - MINOR: mux-quic: do not set buffer for empty STREAM frame - MINOR: mux-quic: do not allocate Tx buf for empty STREAM frame - MINOR: quic: finalize affinity change as soon as possible - BUG/MINOR: quic: fix race on quic_conns list during affinity rebind - CI: switch to Fastly CDN to download LibreSSL - BUILD: ssl: switch LibreSSL to Fastly CDN - BUG/MINOR: clock: fix a few occurrences of 'now' being used in place of 'date' - BUG/MINOR: spoe: use "date" not "now" in debug messages - BUG/MINOR: activity: show wall-clock date, not internal date in show activity - BUG/MINOR: opentracing: use 'date' instead of 'now' in debug output - Revert "BUG/MINOR: clock: fix a few occurrences of 'now' being used in place of 'date'" - BUG/MINOR: calltrace: fix 'now' being used in place of 'date' - BUG/MINOR: trace: show wall-clock date, not internal date in show activity - BUG/MINOR: hlua: return wall-clock date, not internal date in core.now() - BUG/MEDIUM: spoe: Don't start new applet if there are enough idle ones - BUG/MINOR: stconn: Fix SC flags with same value - BUG/MINOR: resolvers: Use sc_need_room() to wait more room when dumping stats - BUG/MEDIUM: tcpcheck: Don't eval custom expect rule on an empty buffer - BUG/MINOR: stats: report the correct start date in "show info" - MINOR: time: add conversions to/from nanosecond timestamps - MINOR: time: replace calls to tv_ms_elapsed() with a linear subtract - MINOR: spoe: switch the timeval-based timestamps to nanosecond timestamps - MEDIUM: tree-wide: replace timeval with nanoseconds in tv_accept and tv_request - MINOR: stats: use nanoseconds, not timeval to compute uptime - MINOR: activity: use nanoseconds, not timeval to compute uptime - MINOR: checks: use a nanosecond counters instead of timeval for checks->start - MINOR: clock: do not use now.tv_sec anymore - MEDIUM: clock: replace timeval "now" with integer "now_ns" - MINOR: clock: replace the timeval start_time with start_time_ns - MINOR: sample: Add bc_rtt and bc_rttvar - MINOR: quic: use real sending rate measurement - MINOR: proxy: factorize send rate measurement	2023-04-28 21:52:13 +02:00
Willy Tarreau	3b50e5c164	[RELEASE] Released version 2.8-dev8 ... Released version 2.8-dev8 with the following main changes : - BUG/MEDIUM: cli: Set SE_FL_EOI flag for '_getsocks' and 'quit' commands - BUG/MEDIUM: cli: Eat output data when waiting for appctx shutdown - BUG/MEDIUM: http-client: Eat output data when waiting for appctx shutdown - BUG/MEDIUM: stats: Eat output data when waiting for appctx shutdown - BUG/MEDIUM: log: Eat output data when waiting for appctx shutdown - BUG/MEDIUM: dns: Kill idle DNS sessions during stopping stage - BUG/MINOR: resolvers: Wakeup DNS idle task on stopping - BUG/MEDIUM: resolvers: Force the connect timeout for DNS resolutions - MINOR: hlua: Stop to check the SC state when executing a hlua cli command - BUG/MEDIUM: mux-h1: Report EOI when a TCP connection is upgraded to H2 - BUG/MEDIUM: mux-h2: Never set SE_FL_EOS without SE_FL_EOI or SE_FL_ERROR - MINOR: quic: Trace fix in quic_pto_pktns() (handshaske status) - BUG/MINOR: quic: Wrong packet number space probing before confirmed handshake - MINOR: quic: Modify qc_try_rm_hp() traces - MINOR: quic: Dump more information at proto level when building packets - MINOR: quic: Add a trace for packet with an ACK frame - MINOR: activity: add a line reporting the average CPU usage to "show activity" - BUG/MINOR: stick_table: alert when type len has incorrect characters - MINOR: thread: keep a bitmask of enabled groups in thread_set - MINOR: fd: optimize fd_claim_tgid() for use in fd_insert() - MINOR: fd: add a lock bit with the tgid - MINOR: fd: implement fd_migrate_on() to migrate on a non-local thread - MINOR: receiver: reserve special values for "shards" - MINOR: bind-conf: support a new shards value: "by-group" - BUG/MEDIUM: fd: don't wait for tmask to stabilize if we're not in it. - MINOR: quic: Add packet loss and maximum cc window to "show quic" - BUG/MINOR: quic: Ignored less than 1ms RTTs - MINOR: quic: Add connection flags to traces - BUG/MEDIUM: quic: Code sanitization about acknowledgements requirements - BUG/MINOR: quic: Possible wrapped values used as ACK tree purging limit. - BUG/MINOR: quic: SIGFPE in quic_cubic_update() - MINOR: quic: Display the packet number space flags in traces - MINOR: quic: Remove a useless test about probing in qc_prep_pkts() - BUG/MINOR: quic: Wrong Application encryption level selection when probing - CI: bump "actions/checkout" to v3 for cross zoo matrix - CI: enable monthly test on Fedora Rawhide - BUG/MINOR: stream: Fix test on SE_FL_ERROR on the wrong entity - BUG/MEDIUM: stream: Report write timeouts before testing the flags - BUG/MEDIUM: stconn: Do nothing in sc_conn_recv() when the SC needs more room - MINOR: stream: Uninline and export sess_set_term_flags() function - MINOR: filters: Review and simplify errors handling - REGTESTS: fix the race conditions in log_uri.vtc - MINOR: channel: Forwad close to other side on abort - MINOR: stream: Introduce stream_abort() to abort on both sides in same time - MINOR: stconn: Rename SC_FL_SHUTR_NOW in SC_FL_ABRT_WANTED - MINOR: channel/stconn: Replace channel_shutr_now() by sc_schedule_abort() - MINOR: stconn: Rename SC_FL_SHUTW_NOW in SC_FL_SHUT_WANTED - MINOR: channel/stconn: Replace channel_shutw_now() by sc_schedule_shutdown() - MINOR: stconn: Rename SC_FL_SHUTR in SC_FL_ABRT_DONE - MINOR: channel/stconn: Replace sc_shutr() by sc_abort() - MINOR: stconn: Rename SC_FL_SHUTW in SC_FL_SHUT_DONE - MINOR: channel/stconn: Replace sc_shutw() by sc_shutdown() - MINOR: tree-wide: Replace several chn_cons() by the corresponding SC - MINOR: tree-wide: Replace several chn_prod() by the corresponding SC - BUG/MINOR: cli: Don't close when SE_FL_ERR_PENDING is set in cli analyzer - MINOR: stconn: Stop to set SE_FL_ERROR on sending path - MEDIUM: stconn: Forbid applets with more to deliver if EOI was reached - MINOR: stconn: Don't clear SE_FL_ERROR when endpoint is reset - MINOR: stconn: Add a flag to ack endpoint errors at SC level - MINOR: backend: Set SC_FL_ERROR on connection error - MINOR: stream: Set SC_FL_ERROR on channels' buffer allocation error - MINOR: tree-wide: Test SC_FL_ERROR with SE_FL_ERROR from upper layer - MEDIUM: tree-wide: Stop to set SE_FL_ERROR from upper layer - MEDIUM: backend: Stop to use SE flags to detect connection errors - MEDIUM: stream: Stop to use SE flags to detect read errors from analyzers - MEDIUM: stream: Stop to use SE flags to detect endpoint errors - MEDIUM: stconn: Rely on SC flags to handle errors instead of SE flags - BUG/MINOR: stconn: Don't set SE_FL_ERROR at the end of sc_conn_send() - BUG/MINOR: quic: Do not use ack delay during the handshakes - CLEANUP: use "offsetof" where appropriate - MINOR: ssl: remove OpenSSL 1.0.2 mention into certificate loading error - BUG/MEDIUM: http-ana: Properly switch the request in tunnel mode on upgrade - BUG/MEDIUM: log: Properly handle client aborts in syslog applet - MINOR: stconn: Add a flag to report EOS at the stream-connector level - MINOR: stconn: Propagate EOS from a mux to the attached stream-connector - MINOR: stconn: Propagate EOS from an applet to the attached stream-connector - MINOR: mux-h2: make the initial window size configurable per side - MINOR: mux-h2: make the max number of concurrent streams configurable per side - BUG/MINOR: task: allow to use tasklet_wakeup_after with tid -1 - CLEANUP: quic: remove unused QUIC_LOCK label - CLEANUP: quic: remove unused scid_node - CLEANUP: quic: remove unused qc param on stateless reset token - CLEANUP: quic: rename quic_connection_id vars - MINOR: quic: remove uneeded tasklet_wakeup after accept - MINOR: quic: adjust Rx packet type parsing - MINOR: quic: adjust quic CID derive API - MINOR: quic: remove TID ref from quic_conn - MEDIUM: quic: use a global CID trees list - MINOR: quic: remove TID encoding in CID - MEDIUM: quic: handle conn bootstrap/handshake on a random thread - MINOR: quic: do not proceed to accept for closing conn - MINOR: protocol: define new callback set_affinity - MINOR: quic: delay post handshake frames after accept - MEDIUM: quic: implement thread affinity rebinding - BUG/MINOR: quic: transform qc_set_timer() as a reentrant function - MINOR: quic: properly finalize thread rebinding - MAJOR: quic: support thread balancing on accept - MINOR: listener: remove unneeded local accept flag - BUG/MINOR: http-ana: Update analyzers on both sides when switching in TUNNEL mode - CLEANUP: backend: Remove useless debug message in assign_server() - CLEANUP: cli: Remove useless debug message in cli_io_handler() - BUG/MEDIUM: stconn: Propagate error on the SC on sending path - MINOR: config: add "no-alpn" support for bind lines - REGTESTS: add a new "ssl_alpn" test to test ALPN negotiation - DOC: add missing documentation for "no-alpn" on bind lines - MINOR: ssl: do not set ALPN callback with the empty string - MINOR: ssl_crtlist: dump "no-alpn" on "show crtlist" when "no-alpn" was set - MEDIUM: config: set useful ALPN defaults for HTTPS and QUIC - BUG/MEDIUM: quic: prevent crash on Retry sending - BUG/MINOR: cfgparse: make sure to include openssl-compat - MINOR: clock: add now_mono_time_fast() function - MINOR: clock: add now_cpu_time_fast() function - MEDIUM: hlua: reliable timeout detection - MEDIUM: hlua: introduce tune.lua.burst-timeout - CLEANUP: hlua: avoid confusion between internal timers and tick based timers - MINOR: hlua: hook yield on known lua state - MINOR: hlua: safe coroutine.create() - BUG/MINOR: quic: Stop removing ACK ranges when building packets - MINOR: quic: Do not allocate too much ack ranges - BUG/MINOR: quic: Unchecked buffer length when building the token - BUG/MINOR: quic: Wrong Retry token generation timestamp computing - BUG/MINOR: mux-quic: fix crash with app ops install failure - BUG/MINOR: mux-quic: properly handle STREAM frame alloc failure - BUG/MINOR: h3: fix crash on h3s alloc failure - BUG/MINOR: quic: prevent crash on qc_new_conn() failure - BUG/MINOR: quic: consume Rx datagram even on error - CLEANUP: errors: fix obsolete function comments - CLEANUP: server: fix update_status() function comment - MINOR: server/event_hdl: add proxy_uuid to event_hdl_cb_data_server - MINOR: hlua/event_hdl: rely on proxy_uuid instead of proxy_name for lookups - MINOR: hlua/event_hdl: expose proxy_uuid variable in server events - MINOR: hlua/event_hdl: fix return type for hlua_event_hdl_cb_data_push_args - MINOR: server/event_hdl: prepare for upcoming refactors - BUG/MINOR: event_hdl: don't waste 1 event subtype slot - CLEANUP: event_hdl: updating obsolete comment for EVENT_HDL_CB_DATA - CLEANUP: event_hdl: fix comment typo about _sync assertion - MINOR: event_hdl: dynamically allocated event data members - MINOR: event_hdl: provide event->when for advanced handlers - MINOR: hlua/event_hdl: timestamp for events - DOC: lua: restore 80 char limitation - BUG/MINOR: server: incorrect report for tracking servers leaving drain - MINOR: server: explicitly commit state change in srv_update_status() - BUG/MINOR: server: don't miss proxy stats update on server state transitions - BUG/MINOR: server: don't miss server stats update on server state transitions - BUG/MINOR: server: don't use date when restoring last_change from state file - MINOR: server: central update for server counters on state change - MINOR: server: propagate server state change to lb through single function - MINOR: server: propagate lb changes through srv_lb_propagate() - MINOR: server: change adm_st_chg_cause storage type - MINOR: server: srv_append_status refacto - MINOR: server: change srv_op_st_chg_cause storage type - CLEANUP: server: remove unused variables in srv_update_status() - CLEANUP: server: fix srv_set_{running, stopping, stopped} function comment - MINOR: server: pass adm and op cause to srv_update_status() - MEDIUM: server: split srv_update_status() in two functions - MINOR: server/event_hdl: prepare for server event data wrapper - MINOR: quic: support migrating the listener as well - MINOR: quic_sock: index li->per_thr[] on local thread id, not global one - MINOR: listener: support another thread dispatch mode: "fair" - MINOR: receiver: add a struct shard_info to store info about each shard - MINOR: receiver: add RX_F_MUST_DUP to indicate that an rx must be duped - MEDIUM: proto: duplicate receivers marked RX_F_MUST_DUP - MINOR: proto: skip socket setup for duped FDs - MEDIUM: config: permit to start a bind on multiple groups at once - MINOR: listener: make accept_queue index atomic - MEDIUM: listener: rework thread assignment to consider all groups - MINOR: listener: use a common thr_idx from the reference listener - MINOR: listener: resync with the thread index before heavy calculations - MINOR: listener: make sure to avoid ABA updates in per-thread index - MINOR: listener: always compare the local thread as well - MINOR: Make `tasklet_free()` safe to be called with `NULL` - CLEANUP: Stop checking the pointer before calling `tasklet_free()` - CLEANUP: Stop checking the pointer before calling `pool_free()` - CLEANUP: Stop checking the pointer before calling `task_free()` - CLEANUP: Stop checking the pointer before calling `ring_free()` - BUG/MINOR: cli: clarify error message about stats bind-process - CI: cirrus-ci: bump FreeBSD image to 13-1 - REGTESTS: remove unsupported "stats bind-process" keyword - CI: extend spellchecker whitelist, add "clen" as well - CLEANUP: assorted typo fixes in the code and comments - BUG/MINOR: sock_inet: use SO_REUSEPORT_LB where available - BUG/MINOR: tools: check libssl and libcrypto separately - BUG/MINOR: config: fix NUMA topology detection on FreeBSD - BUILD: sock_inet: forward-declare struct receiver - BUILD: proto_tcp: export the correct names for proto_tcpv[46] - CLEANUP: protocol: move the l3_addrlen to plug a hole in proto_fam - CLEANUP: protocol: move the nb_receivers to plug a hole in protocol - REORG: listener: move the bind_conf's thread setup code to listener.c - MINOR: proxy: make proxy_type_str() recognize peers sections - MEDIUM: peers: call bind_complete_thread_setup() to finish the config - MINOR: protocol: add a flags field to store info about protocols - MINOR: protocol: move the global reuseport flag to the protocols - MINOR: listener: automatically adjust shards based on support for SO_REUSEPORT - MINOR: protocol: add a function to check if some features are supported - MINOR: sock: add a function to check for SO_REUSEPORT support at runtime - MINOR: protocol: perform a live check for SO_REUSEPORT support - MINOR: listener: do not restrict CLI to first group anymore - MINOR: listener: add a new global tune.listener.default-shards setting - MEDIUM: listener: switch the default sharding to by-group	2023-04-23 10:21:37 +02:00
Willy Tarreau	768b62857e	[RELEASE] Released version 2.8-dev7 ... Released version 2.8-dev7 with the following main changes : - BUG/MINOR: stats: Don't replace sc_shutr() by SE_FL_EOS flag yet - BUG/MEDIUM: mux-h2: Be able to detect connection error during handshake - BUG/MINOR: quic: Missing padding in very short probe packets - MINOR: proxy/pool: prevent unnecessary calls to pool_gc() - CLEANUP: proxy: remove stop_time related dead code - DOC/MINOR: reformat configuration.txt's "quoting and escaping" table - MINOR: http_fetch: Add support for empty delim in url_param - MINOR: http_fetch: add case insensitive support for smp_fetch_url_param - MINOR: http_fetch: Add case-insensitive argument for url_param/urlp_val - REGTESTS : Add test support for case insentitive for url_param - BUG/MEDIUM: proxy/sktable: prevent watchdog trigger on soft-stop - BUG/MINOR: backend: make be_usable_srv() consistent when stopping - BUG/MINOR: ssl: Remove dead code in cli_parse_update_ocsp_response - BUG/MINOR: ssl: Fix potential leak in cli_parse_update_ocsp_response - BUG/MINOR: ssl: ssl-(min|max)-ver parameter not duplicated for bundles in crt-list - BUG/MINOR: quic: Wrong use of now_ms timestamps (cubic algo) - MINOR: quic: Add recovery related information to "show quic" - BUG/MINOR: quic: Wrong use of now_ms timestamps (newreno algo) - BUG/MINOR: quic: Missing max_idle_timeout initialization for the connection - MINOR: quic: Implement cubic state trace callback - MINOR: quic: Adjustments for generic control congestion traces - MINOR: quic: Traces adjustments at proto level. - MEDIUM: quic: Ack delay implementation - BUG/MINOR: quic: Wrong rtt variance computing - MINOR: cli: support filtering on FD types in "show fd" - MINOR: quic: Add a fake congestion control algorithm named "nocc" - CI: run smoke tests on config syntax to check memory related issues - CLEANUP: assorted typo fixes in the code and comments - CI: exclude doc/{design-thoughts,internals} from spell check - BUG/MINOR: quic: Remaining useless statements in cubic slow start callback - BUG/MINOR: quic: Cubic congestion control window may wrap - MINOR: quic: Add missing traces in cubic algorithm implementation - BUG/MAJOR: quic: Congestion algorithms states shared between the connection - BUG/MINOR: ssl: Undefined reference when building with OPENSSL_NO_DEPRECATED - BUG/MINOR: quic: Remove useless BUG_ON() in newreno and cubic algo implementation - MINOR: http-act: emit a warning when a header field name contains forbidden chars - DOC: config: strict-sni allows to start without certificate - MINOR: quic: Add trace to debug idle timer task issues - BUG/MINOR: quic: Unexpected connection closures upon idle timer task execution - BUG/MINOR: quic: Wrong idle timer expiration (during 20s) - BUILD: quic: 32bits compilation issue in cli_io_handler_dump_quic() - BUG/MINOR: quic: Possible wrong PTO computing - BUG/MINOR: tcpcheck: Be able to expect an empty response - BUG/MEDIUM: stconn: Add a missing return statement in sc_app_shutr() - BUG/MINOR: stream: Fix test on channels flags to set clientfin/serverfin touts - MINOR: applet: Uninline appctx_free() - MEDIUM: applet/trace: Register a new trace source with its events - CLEANUP: stconn: Remove remaining debug messages - BUG/MEDIUM: channel: Improve reports for shut in co_getblk() - BUG/MEDIUM: dns: Properly handle error when a response consumed - MINOR: stconn: Remove unecessary test on SE_FL_EOS before receiving data - MINOR: stconn/channel: Move CF_READ_DONTWAIT into the SC and rename it - MINOR: stconn/channel: Move CF_SEND_DONTWAIT into the SC and rename it - MINOR: stconn/channel: Move CF_NEVER_WAIT into the SC and rename it - MINOR: stconn/channel: Move CF_EXPECT_MORE into the SC and rename it - MINOR: mux-pt: Report end-of-input with the end-of-stream after a read - BUG/MINOR: mux-h1: Properly report EOI/ERROR on read0 in h1_rcv_pipe() - CLEANUP: mux-h1/mux-pt: Remove useless test on SE_FL_SHR/SE_FL_SHW flags - MINOR: mux-h1: Report an error to the SE descriptor on truncated message - MINOR: stconn: Always ack EOS at the end of sc_conn_recv() - MINOR: stconn/applet: Handle EOI in the applet .wake callback function - MINOR: applet: No longer set EOI on the SC - MINOR: stconn/applet: Handle EOS in the applet .wake callback function - MEDIUM: cache: Use the sedesc to report and detect end of processing - MEDIUM: cli: Use the sedesc to report and detect end of processing - MINOR: dns: Remove the test on the opposite SC state to send requests - MEDIUM: dns: Use the sedesc to report and detect end of processing - MEDIUM: spoe: Use the sedesc to report and detect end of processing - MEDIUM: hlua/applet: Use the sedesc to report and detect end of processing - MEDIUM: log: Use the sedesc to report and detect end of processing - MEDIUM: peers: Use the sedesc to report and detect end of processing - MINOR: sink: Remove the tests on the opposite SC state to process messages - MEDIUM: sink: Use the sedesc to report and detect end of processing - MEDIUM: stats: Use the sedesc to report and detect end of processing - MEDIUM: promex: Use the sedesc to report and detect end of processing - MEDIUM: http_client: Use the sedesc to report and detect end of processing - MINOR: stconn/channel: Move CF_EOI into the SC and rename it - MEDIUM: tree-wide: Move flags about shut from the channel to the SC - MINOR: tree-wide: Simplifiy some tests on SHUT flags by accessing SCs directly - MINOR: stconn/applet: Add BUG_ON_HOT() to be sure SE_FL_EOS is never set alone - MINOR: server: add SRV_F_DELETED flag - BUG/MINOR: server/del: fix srv->next pointer consistency - BUG/MINOR: stats: properly handle server stats dumping resumption - BUG/MINOR: sink: free forward_px on deinit() - BUG/MINOR: log: free log forward proxies on deinit() - MINOR: server: always call ssl->destroy_srv when available - MINOR: server: correctly free servers on deinit() - BUG/MINOR: hlua: hook yield does not behave as expected - MINOR: hlua: properly handle hlua_process_task HLUA_E_ETMOUT - BUG/MINOR: hlua: enforce proper running context for register_x functions - MINOR: hlua: Fix two functions that return nothing useful - MEDIUM: hlua: Dynamic list of frontend/backend in Lua - MINOR: hlua_fcn: alternative to old proxy and server attributes - MEDIUM: hlua_fcn: dynamic server iteration and indexing - MEDIUM: hlua_fcn/api: remove some old server and proxy attributes - CLEANUP: hlua: fix conflicting comment in hlua_ctx_destroy() - MINOR: hlua: add simple hlua reference handling API - MINOR: hlua: fix return type for hlua_checkfunction() and hlua_checktable() - BUG/MINOR: hlua: fix reference leak in core.register_task() - BUG/MINOR: hlua: fix reference leak in hlua_post_init_state() - BUG/MINOR: hlua: prevent function and table reference leaks on errors - CLEANUP: hlua: use hlua_ref() instead of luaL_ref() - CLEANUP: hlua: use hlua_pushref() instead of lua_rawgeti() - CLEANUP: hlua: use hlua_unref() instead of luaL_unref() - MINOR: hlua: simplify lua locking - BUG/MEDIUM: hlua: prevent deadlocks with main lua lock - MINOR: hlua_fcn: add server->get_rid() method - MINOR: hlua: support for optional arguments to core.register_task() - DOC: lua: silence "literal block ends without a blank line" Sphinx warnings - DOC: lua: silence "Unexpected indentation" Sphinx warnings - BUG/MINOR: event_hdl: fix rid storage type - BUG/MINOR: event_hdl: make event_hdl_subscribe thread-safe - MINOR: event_hdl: global sublist management clarification - BUG/MEDIUM: event_hdl: clean soft-stop handling - BUG/MEDIUM: event_hdl: fix async data refcount issue - MINOR: event_hdl: normal tasks support for advanced async mode - MINOR: event_hdl: add event_hdl_async_equeue_isempty() function - MINOR: event_hdl: add event_hdl_async_equeue_size() function - MINOR: event_hdl: pause/resume for subscriptions - MINOR: proxy: add findserver_unique_id() and findserver_unique_name() - MEDIUM: hlua/event_hdl: initial support for event handlers - MINOR: hlua/event_hdl: per-server event subscription - EXAMPLES: add basic event_hdl lua example script - MINOR: http-ana: Add a HTTP_MSGF flag to state the Expect header was checked - BUG/MINOR: http-ana: Don't switch message to DATA when waiting for payload - BUG/MINOR: quic: Possible crashes in qc_idle_timer_task() - MINOR: quic: derive first DCID from client ODCID - MINOR: quic: remove ODCID dedicated tree - MINOR: quic: remove address concatenation to ODCID - BUG/MINOR: mworker: unset more internal variables from program section - BUG/MINOR: errors: invalid use of memprintf in startup_logs_init() - MINOR: applet: Use unsafe version to get stream from SC in the trace function - BUG/MUNOR: http-ana: Use an unsigned integer for http_msg flags - MINOR: compression: Make compression offload a flag - MINOR: compression: Prepare compression code for request compression - MINOR: compression: Store algo and type for both request and response - MINOR: compression: Count separately request and response compression - MEDIUM: compression: Make it so we can compress requests as well. - BUG/MINOR: lua: remove incorrect usage of strncat() - CLEANUP: tcpcheck: remove the only occurrence of sprintf() in the code - CLEANUP: ocsp: do no use strpcy() to copy a path! - CLEANUP: tree-wide: remove strpcy() from constant strings - CLEANUP: opentracing: remove the last two occurrences of strncat() - BUILD: compiler: fix __equals_1() on older compilers - MINOR: compiler: define a __attribute__warning() macro - BUILD: bug.h: add a warning in the base API when unsafe functions are used - BUG/MEDIUM: listeners: Use the right parameters for strlcpy2().	2023-04-08 17:38:39 +02:00
Willy Tarreau	4c7588dd22	[RELEASE] Released version 2.8-dev6 ... Released version 2.8-dev6 with the following main changes : - BUG/MEDIUM: mux-pt: Set EOS on error on sending path if read0 was received - MINOR: ssl: Change the ocsp update log-format - MINOR: ssl: Use ocsp update task for "update ssl ocsp-response" command - BUG/MINOR: ssl: Fix double free in ocsp update deinit - MINOR: ssl: Accept certpath as param in "show ssl ocsp-response" CLI command - MINOR: ssl: Add certificate path to 'show ssl ocsp-response' output - BUG/MEDIUM: proxy: properly stop backends on soft-stop - BUG/MEDIUM: resolvers: Properly stop server resolutions on soft-stop - DEBUG: cli/show_fd: Display connection error code - DEBUG: ssl-sock/show_fd: Display SSL error code - BUG/MEDIUM: mux-h1: Don't block SE_FL_ERROR if EOS is not reported on H1C - BUG/MINOR: tcp_sample: fix a bug in fc_dst_port and fc_dst_is_local sample fetches - BUG/MINOR: quic: Missing STREAM frame length updates - BUG/MEDIUM: connection: Preserve flags when a conn is removed from an idle list - BUG/MINOR: mux-h2: make sure the h2c task exists before refreshing it - MINOR: buffer: add br_count() to return the number of allocated bufs - MINOR: buffer: add br_single() to check if a buffer ring has more than one buf - BUG/MEDIUM: mux-h2: only restart sending when mux buffer is decongested - BUG/MINOR: mux-h2: set CO_SFL_STREAMER when sending lots of data - BUG/MINOR: quic: Missing STREAM frame data pointer updates - MINOR: stick-table: add sc-add-gpc() to http-after-response - MINOR: doc: missing entries for sc-add-gpc() - BUG/MAJOR: qpack: fix possible read out of bounds in static table - OPTIM: mux-h1: limit first read size to avoid wrapping - MINOR: mux-h2: set CO_SFL_MSG_MORE when sending multiple buffers - MINOR: ssl-sock: pass the CO_SFL_MSG_MORE info down the stack - MINOR: quic: Stop stressing the acknowledgments process (RX ACK frames) - BUG/MINOR: quic: Dysfunctional 01RTT packet number space probing - BUG/MEDIUM: stream: do not try to free a failed stream-conn - BUG/MEDIUM: mux-h2: do not try to free an unallocated h2s->sd - BUG/MEDIUM: mux-h2: erase h2c->wait_event.tasklet on error path - BUG/MEDIUM: stconn: don't set the type before allocation succeeds - BUG/MINOR: stconn: fix sedesc memory leak on stream allocation failure - MINOR: dynbuf: set POOL_F_NO_FAIL on buffer allocation - MINOR: pools: preset the allocation failure rate to 1% with -dMfail - BUG/MEDIUM: mux-h1: properly destroy a partially allocated h1s - BUG/MEDIUM: applet: only set appctx->sedesc on successful allocation - BUG/MINOR: quic: wake up MUX on probing only for 01RTT - BUG/MINOR: quic: ignore congestion window on probing for MUX wakeup - BUILD: thread: implement thread_harmless_end_sig() for threadless builds - BUILD: thread: silence a build warning when threads are disabled - MINOR: debug: support dumping the libs addresses when running in verbose mode - BUG/MINOR: illegal use of the malloc_trim() function if jemalloc is used - BUG/MINOR: trace: fix hardcoded level for TRACE_PRINTF - BUG/MEDIUM: mux-quic: release data from conn flow-control on qcs reset - MINOR: mux-quic: complete traces for qcs emission - MINOR: mux-quic: adjust trace level for MAX_DATA/MAX_STREAM_DATA recv - MINOR: mux-quic: add flow-control info to minimal trace level - MINOR: pools: make sure 'no-memory-trimming' is always used - MINOR: pools: intercept malloc_trim() instead of trying to plug holes - MEDIUM: pools: move the compat code from trim_all_pools() to malloc_trim() - MINOR: pools: export trim_all_pools() - MINOR: pattern: use trim_all_pools() instead of a conditional malloc_trim() - MINOR: tools: relax dlopen() on malloc/free checks - MEDIUM: tools: further relax dlopen() checks too consider grouped symbols - BUG/MINOR: pools: restore detection of built-in allocator - MINOR: pools: report a replaced memory allocator instead of just malloc_trim() - BUG/MINOR: h3: properly handle incomplete remote uni stream type - BUG/MINOR: mux-quic: prevent CC status to be erased by shutdown - MINOR: mux-quic: interrupt qcc_recv*() operations if CC scheduled - MINOR: mux-quic: ensure CONNECTION_CLOSE is scheduled once per conn - MINOR: mux-quic: close on qcs allocation failure - MINOR: mux-quic: close on frame alloc failure - BUG/MINOR: syslog: Request for more data if message was not fully received - BUG/MEDIUM: stats: Consume the request except when parsing the POST payload - DOC: config: set-var() dconv rendering issues - BUG/MEDIUM: mux-h1: Wakeup H1C on shutw if there is no I/O subscription - BUG/MINOR: applet/new: fix sedesc freeing logic - BUG/MINOR: quic: Missing STREAM frame type updated - BUILD: da: extends CFLAGS to support API v3 from 3.1.7 and onwards. - BUG/MINOR: ssl: Stop leaking `err` in ssl_sock_load_ocsp()	2023-03-28 13:58:56 +02:00
Willy Tarreau	fc0ad29c29	[RELEASE] Released version 2.8-dev5 ... Released version 2.8-dev5 with the following main changes : - MINOR: ssl: rename confusing ssl_bind_kws - BUG/MINOR: config: crt-list keywords mistaken for bind ssl keywords - BUG/MEDIUM: http-ana: Detect closed SC on opposite side during body forwarding - BUG/MEDIUM: stconn: Don't rearm the read expiration date if EOI was reached - MINOR: global: Add an option to disable the data fast-forward - MINOR: haproxy: Add an command option to disable data fast-forward - REGTESTS: Remove unsupported feature command in http_splicing.vtc - BUG/MEDIUM: wdt: fix wrong thread being checked for sleeping - BUG/MINOR: sched: properly report long_rq when tasks remain in the queue - BUG/MEDIUM: sched: allow a bit more TASK_HEAVY to be processed when needed - MINOR: threads: add flags to know if a thread is started and/or running - MINOR: h3/hq-interop: handle no data in decode_qcs() with FIN set - BUG/MINOR: mux-quic: transfer FIN on empty STREAM frame - BUG/MINOR: mworker: prevent incorrect values in uptime - MINOR: h3: add traces on decode_qcs callback - BUG/MINOR: quic: Possible unexpected counter incrementation on send*() errors - MINOR: quic: Add new traces about by connection RX buffer handling - MINOR: quic: Move code to wakeup the timer task to avoid anti-amplication deadlock - BUG/MINOR: quic: Really cancel the connection timer from qc_set_timer() - MINOR: quic: Simplication for qc_set_timer() - MINOR: quic: Kill the connections on ICMP (port unreachable) packet receipt - MINOR: quic: Add traces to qc_kill_conn() - MINOR: quic: Make qc_dgrams_retransmit() return a status. - BUG/MINOR: quic: Missing call to task_queue() in qc_idle_timer_do_rearm() - MINOR: quic: Add a trace to identify connections which sent Initial packet. - MINOR: quic: Add <pto_count> to the traces - BUG/MINOR: quic: Do not probe with too little Initial packets - BUG/MINOR: quic: Wrong initialization for io_cb_wakeup boolean - BUG/MINOR: quic: Do not drop too small datagrams with Initial packets - BUG/MINOR: quic: Missing padding for short packets - MINOR: quic: adjust request reject when MUX is already freed - BUG/MINOR: quic: also send RESET_STREAM if MUX released - BUG/MINOR: quic: acknowledge STREAM frame even if MUX is released - BUG/MINOR: h3: prevent hypothetical demux failure on int overflow - MEDIUM: h3: enforce GOAWAY by resetting higher unhandled stream - MINOR: mux-quic: define qc_shutdown() - MINOR: mux-quic: define qc_process() - MINOR: mux-quic: implement client-fin timeout - MEDIUM: mux-quic: properly implement soft-stop - MINOR: quic: mark quic-conn as jobs on socket allocation - MEDIUM: quic: trigger fast connection closing on process stopping - MINOR: mux-h2/traces: do not log h2s pointer for dummy streams - MINOR: mux-h2/traces: add a missing TRACE_LEAVE() in h2s_frt_handle_headers() - BUG/MEDIUM: quic: Missing TX buffer draining from qc_send_ppkts() - DEBUG: stream: Add a BUG_ON to never exit process_stream with an expired task - DOC: config: Fix description of options about HTTP connection modes - MINOR: proxy: Only consider backend httpclose option for server connections - BUG/MINOR: haproxy: Fix option to disable the fast-forward - DOC: config: Add the missing tune.fail-alloc option from global listing - MINOR: cfgcond: Implement strstr condition expression - MINOR: cfgcond: Implement enabled condition expression - REGTESTS: Skip http_splicing.vtc script if fast-forward is disabled - REGTESTS: Fix ssl_errors.vtc script to wait for connections close - BUG/MINOR: mworker: stop doing strtok directly from the env - BUG/MEDIUM: mworker: prevent inconsistent reload when upgrading from old versions - BUG/MEDIUM: mworker: don't register mworker_accept_wrapper() when master FD is wrong - MINOR: startup: HAPROXY_STARTUP_VERSION contains the version used to start - BUG/MINOR: cache: Cache response even if request has "no-cache" directive - BUG/MINOR: cache: Check cache entry is complete in case of Vary - MINOR: compiler: add a TOSTR() macro to turn a value into a string - BUG/MINOR: lua/httpclient: missing free in hlua_httpclient_send() - BUG/MEDIUM: httpclient/lua: fix a race between lua GC and hlua_ctx_destroy - MEDIUM: channel: Remove CF_READ_NOEXP flag - MAJOR: channel: Remove flags to report READ or WRITE errors - DEBUG: stream/trace: Add sedesc flags in trace messages - MINOR: channel/stconn: Move rto/wto from the channel to the stconn - MEDIUM: channel/stconn: Move rex/wex timer from the channel to the sedesc - MEDIUM: stconn: Don't requeue the stream's task after I/O - MEDIUM: stconn: Replace read and write timeouts by a unique I/O timeout - MEDIUM: stconn: Add two date to track successful reads and blocked sends - MINOR: applet/stconn: Add a SE flag to specify an endpoint does not expect data - MAJOR: stream: Use SE descriptor date to detect read/write timeouts - MINOR: stream: Dump the task expiration date in trace messages - MINOR: stream: Report rex/wex value using the sedesc date in trace messages - MINOR: stream: Use relative expiration date in trace messages - MINOR: stconn: Always report READ/WRITE event on shutr/shutw - CLEANUP: stconn: Remove old read and write expiration dates - MINOR: stconn: Set half-close timeout using proxy settings - MINOR: stconn: Remove half-closed timeout - REGTESTS: cache: Use rxresphdrs to only get headers for 304 responses - MINOR: stconn: Add functions to set/clear SE_FL_EXP_NO_DATA flag from endpoint - BUG/MINOR: proto_ux: report correct error when bind_listener fails - BUG/MINOR: protocol: fix minor memory leak in protocol_bind_all() - MINOR: proto_uxst: add resume method - MINOR: listener/api: add lli hint to listener functions - MINOR: listener: add relax_listener() function - MINOR: listener: workaround for closing a tiny race between resume_listener() and stopping - MINOR: listener: make sure we don't pause/resume bypassed listeners - BUG/MEDIUM: listener: fix pause_listener() suspend return value handling - BUG/MINOR: listener: fix resume_listener() resume return value handling - BUG/MEDIUM: resume from LI_ASSIGNED in default_resume_listener() - MINOR: listener: pause_listener() becomes suspend_listener() - BUG/MEDIUM: listener/proxy: fix listeners notify for proxy resume - BUG/MINOR: sock_unix: match finalname with tempname in sock_unix_addrcmp() - MEDIUM: proto_ux: properly suspend named UNIX listeners - MINOR: proto_ux: ability to dump ABNS names in error messages - MINOR: haproxy: always protocol unbind on startup error path - BUILD: quic: 32-bits compilation issue with %zu in quic_rx_pkts_del() - BUG/MINOR: ring: do not realign ring contents on resize - MEDIUM: ring: make the offset relative to the head/tail instead of absolute - CLEANUP: ring: remove the now unused ring's offset - MINOR: config: add HAPROXY_BRANCH environment variable - BUILD: thead: Fix several 32 bits compilation issues with uint64_t variables - BUG/MEDIUM: fd: avoid infinite loops in fd_add_to_fd_list and fd_rm_from_fd_list - BUG/MEDIUM: h1-htx: Never copy more than the max data allowed during parsing - BUG/MINOR: stream: Remove BUG_ON about the task expiration in process_stream() - MINOR: stream: Handle stream's timeouts in a dedicated function - MEDIUM: stream: Eventually handle stream timeouts when exiting process_stream() - MINOR: stconn: Report a send activity when endpoint is willing to consume data - BUG/MEDIUM: stconn: Report a blocked send if some output data are not consumed - MEDIUM: mux-h1: Don't expect data from server as long as request is unfinished - MEDIUM: mux-h2: Don't expect data from server as long as request is unfinished - MEDIUM: mux-quic: Don't expect data from server as long as request is unfinished - DOC: config: Clarify the meaning of 'hold' in the 'resolvers' section - DOC: config: Replace TABs by spaces - BUG/MINOR: fd: used the update list from the fd's group instead of tgid - BUG/MEDIUM: fd: make fd_delete() support being called from a different group - CLEANUP: listener: only store conn counts for local threads - MINOR: tinfo: make thread_set functions return nth group/mask instead of first - MEDIUM: quic: improve fatal error handling on send - MINOR: quic: consider EBADF as critical on send() - BUG/MEDIUM: connection: Clear flags when a conn is removed from an idle list - BUG/MINOR: mux-h1: Don't report an error on an early response close - BUG/MINOR: http-check: Don't set HTX_SL_F_BODYLESS flag with a log-format body - BUG/MINOR: http-check: Skip C-L header for empty body when it's not mandatory - BUG/MINOR: http-fetch: recognize IPv6 addresses in square brackets in req.hdr_ip() - REGTEST: added tests covering smp_fetch_hdr_ip() - MINOR: quic: simplify return path in send functions - MINOR: quic: implement qc_notify_send() - MINOR: quic: purge txbuf before preparing new packets - MEDIUM: quic: implement poller subscribe on sendto error - MINOR: quic: notify on send ready - BUG/MINOR: http-ana: Don't increment conn_retries counter before the L7 retry - BUG/MINOR: http-ana: Do a L7 retry on read error if there is no response - BUG/MEDIUM: http-ana: Don't close request side when waiting for response - BUG/MINOR: mxu-h1: Report a parsing error on abort with pending data - MINOR: ssl: Destroy ocsp update http_client during cleanup - MINOR: ssl: Reinsert ocsp update entries later in case of unknown error - MINOR: ssl: Add ocsp update success/failure counters - MINOR: ssl: Store specific ocsp update errors in response and update ctx - MINOR: ssl: Add certificate's path to certificate_ocsp structure - MINOR: ssl: Add 'show ssl ocsp-updates' CLI command - MINOR: ssl: Add sample fetches related to OCSP update - MINOR: ssl: Use dedicated proxy and log-format for OCSP update - MINOR: ssl: Reorder struct certificate_ocsp members - MINOR: ssl: Increment OCSP update replay delay in case of failure - MINOR: ssl: Add way to dump ocsp response in base64 - MINOR: ssl: Add global options to modify ocsp update min/max delay - REGTESTS: ssl: Fix ocsp update crt-lists - REGTESTS: ssl: Add test for new ocsp update cli commands - MINOR: ssl: Add ocsp-update information to "show ssl crt-list" - BUG/MINOR: ssl: Fix ocsp-update when using "add ssl crt-list" - MINOR: ssl: Replace now.tv_sec with date.tv_sec in ocsp update task - BUG/MINOR: ssl: Use 'date' instead of 'now' in ocsp stapling callback - BUG/MEDIUM: quic: properly handle duplicated STREAM frames - BUG/MINOR: cli: fix CLI handler "set anon global-key" call - MINOR: http_ext: adding some documentation, forgot to inline function - BUG/MINOR: quic: Do not send too small datagrams (with Initial packets) - MINOR: quic: Add a BUG_ON_HOT() call for too small datagrams - BUG/MINOR: quic: Ensure to be able to build datagrams to be retransmitted - BUG/MINOR: quic: v2 Initial packets decryption failed - MINOR: quic: Add traces about QUIC TLS key update - BUG/MINOR: quic: Remove force_ack for Initial,Handshake packets - BUG/MINOR: quic: Ensure not to retransmit packets with no ack-eliciting frames - BUG/MINOR: quic: Do not resend already acked frames - BUG/MINOR: quic: Missing detections of amplification limit reached - MINOR: quic: Send PING frames when probing Initial packet number space - BUG/MEDIUM: quic: do not crash when handling STREAM on released MUX - BUG/MAJOR: fd/thread: fix race between updates and closing FD - BUG/MEDIUM: dns: ensure ring offset is properly reajusted to head - BUG/MINOR: mux-quic: properly init STREAM frame as not duplicated - MINOR: quic: Do not accept wrong active_connection_id_limit values - MINOR: quic: Store the next connection IDs sequence number in the connection - MINOR: quic: Typo fix for ACK_ECN frame - MINOR: quic: RETIRE_CONNECTION_ID frame handling (RX) - MINOR: quic: Useless TLS context allocations in qc_do_rm_hp() - MINOR: quic: Add spin bit support - MINOR: quic: Add transport parameters to "show quic" - BUG/MEDIUM: sink/forwarder: ensure ring offset is properly readjusted to head - BUG/MINOR: dns: fix ring offset calculation on first read - BUG/MINOR: dns: fix ring offset calculation in dns_resolve_send() - MINOR: jwt: Add support for RSA-PSS signatures (PS256 algorithm) - MINOR: h3: add traces on h3_init_uni_stream() error paths - MINOR: quic: create a global list dedicated for closing QUIC conns - MINOR: quic: handle new closing list in show quic - MEDIUM: quic: release closing connections on stopping - BUG/MINOR: quic: Wrong RETIRE_CONNECTION_ID sequence number check - MINOR: fd/cli: report the polling mask in "show fd" - CLEANUP: sock: always perform last connection updates before wakeup - MINOR: quic: Do not stress the peer during retransmissions of lost packets - BUG/MINOR: init: properly detect NUMA bindings on large systems - BUG/MINOR: thread: report thread and group counts in the correct order - BUG/MAJOR: fd/threads: close a race on closing connections after takeover - MINOR: debug: add random delay injection with "debug dev delay-inj" - BUG/MINOR: mworker: use MASTER_MAXCONN as default maxconn value - BUG/MINOR: quic: Missing listener accept queue tasklet wakeups - MINOR: quic_sock: un-statify quic_conn_sock_fd_iocb() - DOC: config: fix typo "dependeing" in bind thread description - DOC/CLEANUP: fix typos	2023-03-10 16:28:37 +01:00
Willy Tarreau	c80560bae7	[RELEASE] Released version 2.8-dev4 ... Released version 2.8-dev4 with the following main changes : - BUG/MINOR: stats: fix source buffer size for http dump - BUG/MEDIUM: stats: fix resolvers dump - BUG/MINOR: stats: fix ctx->field update in stats_dump_proxy_to_buffer() - BUG/MINOR: stats: fix show stats field ctx for servers - BUG/MINOR: stats: fix STAT_STARTED behavior with full htx - MINOR: quic: Update version_information transport parameter to draft-14 - BUG/MINOR: stats: Prevent HTTP "other sessions" counter underflows - BUG/MEDIUM: thread: fix extraneous shift in the thread_set parser - BUG/MEDIUM: listener/thread: bypass shards setting on failed thread resolution - BUG/MINOR: ssl/crt-list: warn when a line is malformated - BUG/MEDIUM: stick-table: do not leave entries in end of window during purge - BUG/MINOR: clock: do not mix wall-clock and monotonic time in uptime calculation - BUG/MEDIUM: cache: use the correct time reference when comparing dates - MEDIUM: clock: force internal time to wrap early after boot - BUILD: ssl/ocsp: ssl_ocsp-t.h depends on ssl_sock-t.h - MINOR: ssl/ocsp: add a function to check the OCSP update configuration - MINOR: cfgparse/server: move (min/max)conn postparsing logic into dedicated function - BUG/MINOR: server/add: ensure minconn/maxconn consistency when adding server - BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first - BUG/MEDIUM: quic: fix crash when "option nolinger" is set in the frontend - MINOR: quic: implement a basic "show quic" CLI handler - MINOR: quic: display CIDs and state in "show quic" - MINOR: quic: display socket info on "show quic" - MINOR: quic: display infos about various encryption level on "show quic" - MINOR: quic: display Tx stream info on "show quic" - MINOR: quic: filter closing conn on "show quic" - BUG/MINOR: quic: fix filtering of closing connections on "show quic" - BUG/MEDIUM: stconn: Don't needlessly wake the stream on send during fast-forward - BUG/MINOR: quic: fix type bug on "show quic" for 32-bits arch - BUG/MINOR: mworker: fix uptime for master process - BUG/MINOR: clock/stats: also use start_time not start_date in HTML info - BUG/MEDIUM: stconn: stop to enable/disable reads from streams via si_update_rx - BUG/MEDIUM: quic: Buffer overflow when looking through QUIC CLI keyword list - DOC: proxy-protocol: fix wrong byte in provided example - MINOR: ssl-ckch: Stop to test CF_WRITE_ERROR to commit CA/CRL file - MINOR: bwlim: Remove useless test on CF_READ_ERROR to detect the last packet - BUG/MINOR: http-ana: Fix condition to set LAST termination flag - BUG/MINOR: mux-h1: Don't report an H1C error on client timeout - BUG/MEDIUM: spoe: Don't set the default traget for the SPOE agent frontend - BUG/MINOR: quic: Wrong datagram dispatch because of qc_check_dcid() - BUG/CRITICAL: http: properly reject empty http header field names	2023-02-14 16:55:17 +01:00
Willy Tarreau	e74d77b301	[RELEASE] Released version 2.8-dev3 ... Released version 2.8-dev3 with the following main changes : - BUG/MINOR: sink: make sure to always properly unmap a file-backed ring - DEV: haring: add a new option "-r" to automatically repair broken files - BUG/MINOR: ssl: Fix leaks in 'update ssl ocsp-response' CLI command - MINOR: ssl: Remove debug fprintf in 'update ssl ocsp-response' cli command - MINOR: connection: add a BUG_ON() to detect destroying connection in idle list - MINOR: mux-quic/h3: send SETTINGS as soon as transport is ready - BUG/MINOR: h3: fix GOAWAY emission - BUG/MEDIUM: mux-quic: fix crash on H3 SETTINGS emission - BUG/MEDIUM: hpack: fix incorrect huffman decoding of some control chars - BUG/MINOR: log: release global log servers on exit - BUG/MINOR: ring: release the backing store name on exit - BUG/MINOR: sink: free the forwarding task on exit - CLEANUP: trace: remove the QUIC-specific ifdefs - MINOR: trace: add a TRACE_ENABLED() macro to determine if a trace is active - MINOR: trace: add a trace_no_cb() dummy callback for when to use no callback - MINOR: trace: add the long awaited TRACE_PRINTF() - MINOR: h2: add h2_phdr_to_ist() to make ISTs from pseudo headers - MEDIUM: mux-h2/trace: add tracing support for headers - CLEANUP: mux-h2/trace: shorten the name of the header enc/dec functions - DEV: hpack: fix `trash` build regression - MINOR: http_htx: add http_append_header() to append value to header - MINOR: http_htx: add http_prepend_header() to prepend value to header - MINOR: sample: add ARGC_OPT - MINOR: proxy: introduce http only options - MINOR: proxy/http_ext: introduce proxy forwarded option - REGTEST: add ifnone-forwardfor test - MINOR: proxy: move 'forwardfor' option to http_ext - MINOR: proxy: move 'originalto' option to http_ext - MINOR: http_ext: introduce http ext converters - MINOR: http_ext: add rfc7239_is_valid converter - MINOR: http_ext: add rfc7239_field converter - MINOR: http_ext: add rfc7239_n2nn converter - MINOR: http_ext: add rfc7239_n2np converter - REGTEST: add RFC7239 forwarded header tests - OPTIM: http_ext/7239: introduce c_mode to save some space - MINOR: http_ext/7239: warn the user when fetch is not available - MEDIUM: proxy/http_ext: implement dynamic http_ext - MINOR: cfgparse/http_ext: move post-parsing http_ext steps to http_ext - DOC: config: fix option spop-check proxy compatibility - BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section - DOC: config: 'http-send-name-header' option may be used in default section - BUG/MINOR: mux-h2: Fix possible null pointer deref on h2c in _h2_trace_header() - BUG/MINOR: http_ext/7239: ipv6 dumping relies on out of scope variables - BUG/MEDIUM: h3: do not crash if no buf space for trailers - OPTIM: h3: skip buf realign if no trailer to encode - MINOR: mux-quic/h3: define stream close callback - BUG/MEDIUM: h3: handle STOP_SENDING on control stream - BUG/MINOR: h3: reject RESET_STREAM received for control stream - MINOR: h3: add missing traces on closure - BUG/MEDIUM: ssl: wrong eviction from the session cache tree - BUG/MINOR: h3: fix crash due to h3 traces - BUG/MINOR: h3: fix crash due to h3 traces - BUG/MEDIUM: thread: consider secondary threads as idle+harmless during boot - BUG/MINOR: stats: use proper buffer size for http dump - BUILD: makefile: fix PCRE overriding specific lib path - MINOR: quic: remove fin from quic_stream frame type - MINOR: quic: ensure offset is properly set for STREAM frames - MINOR: quic: define new functions for frame alloc - MINOR: quic: refactor frame deallocation - MEDIUM: quic: implement a retransmit limit per frame - MINOR: quic: add config for retransmit limit - OPTIM: htx: inline the most common memcpy(8) - CLEANUP: quic: no need for atomics on packet refcnt - MINOR: stats: add by HTTP version cumulated number of sessions and requests - BUG/MINOR: quic: Possible stream truncations under heavy loss - BUG/MINOR: quic: Too big PTO during handshakes - MINOR: quic: Add a trace about variable states in qc_prep_fast_retrans() - BUG/MINOR: quic: Do not ignore coalesced packets in qc_prep_fast_retrans() - MINOR: quic: When probing Handshake packet number space, also probe the Initial one - BUG/MAJOR: quic: Possible crash when processing 1-RTT during 0-RTT session - MEDIUM: quic: Remove qc_conn_finalize() from the ClientHello TLS callbacks - BUG/MINOR: quic: Unchecked source connection ID - MEDIUM: listener: move the analysers mask to the bind_conf - MINOR: listener: move maxseg and tcp_ut to bind_conf - MINOR: listener: move maxaccept from listener to bind_conf - MINOR: listener: move the backlog setting from listener to bind_conf - MINOR: listener: move the maxconn parameter to the bind_conf - MINOR: listener: move the ->accept callback to the bind_conf - MINOR: listener: remove the useless ->default_target field - MINOR: listener: move the nice field to the bind_conf - MINOR: listener: move the NOLINGER option to the bind_conf - MINOR: listener: move the NOQUICKACK option to the bind_conf - MINOR: listener: move the DEF_ACCEPT option to the bind_conf - MINOR: listener: move TCP_FO to bind_conf - MINOR: listener: move the ACC_PROXY and ACC_CIP options to bind_conf - MINOR: listener: move LI_O_UNLIMITED and LI_O_NOSTOP to bind_conf - MINOR: listener: get rid of LI_O_TCP_L4_RULES and LI_O_TCP_L5_RULES - CLEANUP: listener: remove the now unused options field - MINOR: listener: remove the now useless LI_F_QUIC_LISTENER flag - CLEANUP: config: remove test for impossible case regarding bind thread mask - MINOR: thread: add a simple thread_set API - MEDIUM: listener/config: make the "thread" parser rely on thread_sets - CLEANUP: config: stop using bind_tgroup and bind_thread - CLEANUP: listener/thread: remove now unused bind_conf's bind_tgroup/bind_thread - CLEANUP: listener/config: remove the special case for shards==1 - MEDIUM: config: restrict shards, not bind_conf to one group each - BUG/MEDIUM: quic: do not split STREAM frames if no space - BUILD: thread: fix build warnings with older gcc compilers	2023-02-04 10:51:05 +01:00
Willy Tarreau	0f29b34e0a	[RELEASE] Released version 2.8-dev2 ... Released version 2.8-dev2 with the following main changes : - CLEANUP: htx: fix a typo in an error message of http_str_to_htx - DOC: config: added optional rst-ttl argument to silent-drop in action lists - BUG/MINOR: ssl: Fix crash in 'update ssl ocsp-response' CLI command - BUG/MINOR: ssl: Crash during cleanup because of ocsp structure pointer UAF - MINOR: ssl: Create temp X509_STORE filled with cert chain when checking ocsp response - MINOR: ssl: Only set ocsp->issuer if issuer not in cert chain - MINOR: ssl: Release ssl_ocsp_task_ctx.cur_ocsp when destroying task - MINOR: ssl: Detect more OCSP update inconsistencies - BUG/MINOR: ssl: Fix OCSP_CERTID leak when same certificate is used multiple times - MINOR: ssl: Limit ocsp_uri buffer size to minimum - MINOR: ssl: Remove mention of ckch_store in error message of cli command - MINOR: channel: Don't test CF_READ_NULL while CF_SHUTR is enough - REORG: channel: Rename CF_READ_NULL to CF_READ_EVENT - REORG: channel: Rename CF_WRITE_NULL to CF_WRITE_EVENT - MEDIUM: channel: Use CF_READ_EVENT instead of CF_READ_PARTIAL - MEDIUM: channel: Use CF_WRITE_EVENT instead of CF_WRITE_PARTIAL - MINOR: channel: Remove CF_READ_ACTIVITY - MINOR: channel: Remove CF_WRITE_ACTIVITY - MINOR: channel: Remove CF_ANA_TIMEOUT and report CF_READ_EVENT instead - MEDIUM: channel: Remove CF_READ_ATTACHED and report CF_READ_EVENT instead - MINOR: channel: Stop to test CF_READ_ERROR flag if CF_SHUTR is enough - MINOR: channel/applets: Stop to test CF_WRITE_ERROR flag if CF_SHUTW is enough - DOC: management: add details on "Used" status - DOC: management: add details about @system-ca in "show ssl ca-file" - BUG/MINOR: mux-quic: fix transfer of empty HTTP response - MINOR: mux-quic: add traces for flow-control limit reach - MAJOR: mux-quic: rework stream sending priorization - MEDIUM: h3: send SETTINGS before STREAM frames - MINOR: mux-quic: use send-list for STOP_SENDING/RESET_STREAM emission - MINOR: mux-quic: use send-list for immediate sending retry - BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses - BUG/MINOR: hlua: Fix Channel.line and Channel.data behavior regarding the doc - BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action - BUG/MINOR: ssl: Remove unneeded pointer check in ocsp cli release function - BUG/MINOR: ssl: Missing ssl_conf pointer check when checking ocsp update inconsistencies - DEV: tcploop: add minimal support for unix sockets - BUG/MEDIUM: listener: duplicate inherited FDs if needed - BUG/MINOR: ssl: OCSP minimum update threshold not properly set - MINOR: ssl: Treat ocsp-update inconsistencies as fatal errors - MINOR: ssl: Do not wake ocsp update task if update tree empty - MINOR: ssl: Reinsert updated ocsp response later in tree in case of http error - REGTEST: ssl: Add test for 'update ssl ocsp-response' CLI command - OPTIM: global: move byte counts out of global and per-thread - BUG/MEDIUM: peers: make "show peers" more careful about partial initialization - BUG/MINOR: promex: Don't forget to consume the request on error - MINOR: http-ana: Add a function to set HTTP termination flags - MINOR: http-ana: Use http_set_term_flags() in most of HTTP analyzers - BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body - MINOR: http-ana: Use http_set_term_flags() when waiting the request body - BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state - MAJOR: http-ana: Review error handling during HTTP payload forwarding - CLEANUP: http-ana: Remove HTTP_MSG_ERROR state - BUG/MEDIUM: mux-h2: Don't send CANCEL on shutw when response length is unkown - MINOR: htx: Add an HTX value for the extra field is payload length is unknown - BUG/MINOR: http-ana: make set-status also update txn->status - BUG/MINOR: listeners: fix suspend/resume of inherited FDs - DOC: config: fix wrong section number for "protocol prefixes" - DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@" - DOC: config: mention the missing "quic4@" and "quic6@" in protocol prefixes - MINOR: listener: also support "quic+" as an address prefix - CLEANUP: stconn: always use se_fl_set_error() to set the pending error - BUG/MEDIUM: stconn: also consider SE_FL_EOI to switch to SE_FL_ERROR - MINOR: quic: Useless test about datagram destination addresses - MINOR: quic: Disable the active connection migrations - MINOR: quic: Add "no-quic" global option - MINOR: sample: Add "quic_enabled" sample fetch - MINOR: quic: Replace v2 draft definitions by those of the final 2 version - BUG/MINOR: mux-fcgi: Correctly set pathinfo - DOC: config: fix "Address formats" chapter syntax - BUG/MEDIUM: jwt: Properly process ecdsa signatures (concatenated R and S params) - BUILD: ssl: add ECDSA_SIG_set0() for openssl < 1.1 or libressl < 2.7 - Revert "BUILD: ssl: add ECDSA_SIG_set0() for openssl < 1.1 or libressl < 2.7" - BUG/MINOR: ssl: Fix compilation with OpenSSL 1.0.2 (missing ECDSA_SIG_set0) - BUG/MINOR: listener: close tiny race between resume_listener() and stopping - BUG/MINOR: h3: properly handle connection headers - MINOR: h3: extend function for QUIC varint encoding - MINOR: h3: implement TRAILERS encoding - BUG/MINOR: bwlim: Check scope for period expr for set-bandwitdh-limit actions - MEDIUM: bwlim: Support constants limit or period on set-bandwidth-limit actions - BUG/MINOR: bwlim: Fix parameters check for set-bandwidth-limit actions - MINOR: h3: implement TRAILERS decoding - BUG/MEDIUM: fd/threads: fix again incorrect thread selection in wakeup broadcast - BUG/MINOR: thread: always reload threads_enabled in loops - MINOR: threads: add a thread_harmless_end() version that doesn't wait - BUG/MEDIUM: debug/thread: make the debug handler not wait for !rdv_requests - BUG/MINOR: mux-h2: make sure to produce a log on invalid requests - BUG/MINOR: mux-h2: add missing traces on failed headers decoding - BUILD: hpack: include global.h for the trash that is needed in debug mode - BUG/MINOR: jwt: Wrong return value checked - BUG/MINOR: quic: Do not request h3 clients to close its unidirection streams - MEDIUM: quic-sock: fix udp source address for send on listener socket	2023-01-22 14:20:57 +01:00
Willy Tarreau	40c88f997f	[RELEASE] Released version 2.8-dev1 ... Released version 2.8-dev1 with the following main changes : - MEDIUM: 51d: add support for 51Degrees V4 with Hash algorithm - MINOR: debug: support pool filtering on "debug dev memstats" - MINOR: debug: add a balance of alloc - free at the end of the memstats dump - LICENSE: wurfl: clarify the dummy library license. - MINOR: event_hdl: add event handler base api - DOC/MINOR: api: add documentation for event_hdl feature - MEDIUM: ssl: rename the struct "cert_key_and_chain" to "ckch_data" - MINOR: quic: remove qc from quic_rx_packet - MINOR: quic: complete traces in qc_rx_pkt_handle() - MINOR: quic: extract datagram parsing code - MINOR: tools: add port for ipcmp as optional criteria - MINOR: quic: detect connection migration - MINOR: quic: ignore address migration during handshake - MINOR: quic: startup detect for quic-conn owned socket support - MINOR: quic: test IP_PKTINFO support for quic-conn owned socket - MINOR: quic: define config option for socket per conn - MINOR: quic: allocate a socket per quic-conn - MINOR: quic: use connection socket for emission - MEDIUM: quic: use quic-conn socket for reception - MEDIUM: quic: move receive out of FD handler to quic-conn io-cb - MINOR: mux-quic: rename duplicate function names - MEDIUM: quic: requeue datagrams received on wrong socket - MINOR: quic: reconnect quic-conn socket on address migration - MINOR: quic: activate socket per conn by default - BUG/MINOR: ssl: initialize SSL error before parsing - BUG/MINOR: ssl: initialize WolfSSL before parsing - BUG/MINOR: quic: fix fd leak on startup check quic-conn owned socket - BUG/MEDIIM: stconn: Flush output data before forwarding close to write side - MINOR: server: add srv->rid (revision id) value - MINOR: stats: add server revision id support - MINOR: server/event_hdl: add support for SERVER_ADD and SERVER_DEL events - MINOR: server/event_hdl: add support for SERVER_UP and SERVER_DOWN events - BUG/MEDIUM: checks: do not reschedule a possibly running task on state change - BUG/MINOR: checks: make sure fastinter is used even on forced transitions - CLEANUP: assorted typo fixes in the code and comments - MINOR: mworker: display an alert upon a wait-mode exit - BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers - BUG/MEDIUM: mworker: create the mcli_reload socketpairs in case of upgrade - BUG/MINOR: checks: restore legacy on-error fastinter behavior - MINOR: check: use atomic for s->consecutive_errors - MINOR: stats: properly handle ST_F_CHECK_DURATION metric - MINOR: mworker: remove unused legacy code in mworker_cleanlisteners - MINOR: peers: unused code path in process_peer_sync - BUG/MINOR: init/threads: continue to limit default thread count to max per group - CLEANUP: init: remove useless assignment of nbthread - BUILD: atomic: atomic.h may need compiler.h on ARMv8.2-a - BUILD: makefile/da: also clean Os/ in Device Atlas dummy lib dir - BUG/MEDIUM: httpclient/lua: double LIST_DELETE on end of lua task - CLEANUP: pools: move the write before free to the uaf-only function - CLEANUP: pool: only include pool-os from pool.c not pool.h - REORG: pool: move all the OS specific code to pool-os.h - CLEANUP: pools: get rid of CONFIG_HAP_POOLS - DEBUG: pool: show a few examples in -dMhelp - MINOR: pools: make DEBUG_UAF a runtime setting - BUG/MINOR: promex: create haproxy_backend_agg_server_status - MINOR: promex: introduce haproxy_backend_agg_check_status - DOC: promex: Add missing backend metrics - BUG/MAJOR: fcgi: Fix uninitialized reserved bytes - REGTESTS: fix the race conditions in iff.vtc - CI: github: reintroduce openssl 1.1.1 - BUG/MINOR: quic: properly handle alloc failure in qc_new_conn() - BUG/MINOR: quic: handle alloc failure on qc_new_conn() for owned socket - CLEANUP: mux-quic: remove unused attribute on qcs_is_close_remote() - BUG/MINOR: mux-quic: remove qcs from opening-list on free - BUG/MINOR: mux-quic: handle properly alloc error in qcs_new() - CI: github: split ssl lib selection based on git branch - REGTESTS: startup: check maxconn computation - BUG/MINOR: startup: don't use internal proxies to compute the maxconn - REGTESTS: startup: change the expected maxconn to 11000 - CI: github: set ulimit -n to a greater value - REGTESTS: startup: activate automatic_maxconn.vtc - MINOR: sample: add param converter - CLEANUP: ssl: remove check on srv->proxy - BUG/MEDIUM: freq-ctr: Don't compute overshoot value for empty counters - BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout - REGTESTS: startup: add alternatives values in automatic_maxconn.vtc - BUG/MEDIUM: h3: reject request with invalid header name - BUG/MEDIUM: h3: reject request with invalid pseudo header - MINOR: http: extract content-length parsing from H2 - BUG/MEDIUM: h3: parse content-length and reject invalid messages - CI: github: remove redundant ASAN loop - CI: github: split matrix for development and stable branches - BUG/MEDIUM: mux-h1: Don't release H1 stream upgraded from TCP on error - BUG/MINOR: mux-h1: Fix test instead a BUG_ON() in h1_send_error() - MINOR: http-htx: add BUG_ON to prevent API error on http_cookie_register - BUG/MEDIUM: h3: fix cookie header parsing - BUG/MINOR: h3: fix memleak on HEADERS parsing failure - MINOR: h3: check return values of htx_add_* on headers parsing - MINOR: ssl: Remove unneeded buffer allocation in show ocsp-response - MINOR: ssl: Remove unnecessary alloc'ed trash chunk in show ocsp-response - BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain - MINOR: stats: provide ctx for dumping functions - MINOR: stats: introduce stats field ctx - BUG/MINOR: stats: fix show stat json buffer limitation - MINOR: stats: make show info json future-proof - BUG/MINOR: quic: fix crash on PTO rearm if anti-amplification reset - BUILD: 51d: fix build issue with recent compilers - REGTESTS: startup: disable automatic_maxconn.vtc - BUILD: peers: peers-t.h depends on stick-table-t.h - BUG/MEDIUM: tests: use tmpdir to create UNIX socket - BUG/MINOR: mux-h1: Report EOS on parsing/internal error for not running stream - BUG/MINOR:: mux-h1: Never handle error at mux level for running connection - BUG/MEDIUM: stats: Rely on a local trash buffer to dump the stats - OPTIM: pool: split the read_mostly from read_write parts in pool_head - MINOR: pool: make the thread-local hot cache size configurable - MINOR: freq_ctr: add opportunistic versions of swrate_add() - MINOR: pool: only use opportunistic versions of the swrate_add() functions - REGTESTS: ssl: enable the ssl_reuse.vtc test for WolfSSL - BUG/MEDIUM: mux-quic: fix double delete from qcc.opening_list - BUG/MEDIUM: quic: properly take shards into account on bind lines - BUG/MINOR: quic: do not allocate more rxbufs than necessary - MINOR: ssl: Add a lock to the OCSP response tree - MINOR: httpclient: Make the CLI flags public for future use - MINOR: ssl: Add helper function that extracts an OCSP URI from a certificate - MINOR: ssl: Add OCSP request helper function - MINOR: ssl: Add helper function that checks the validity of an OCSP response - MINOR: ssl: Add "update ssl ocsp-response" cli command - MEDIUM: ssl: Add ocsp_certid in ckch structure and discard ocsp buffer early - MINOR: ssl: Add ocsp_update_tree and helper functions - MINOR: ssl: Add crt-list ocsp-update option - MINOR: ssl: Store 'ocsp-update' mode in the ckch_data and check for inconsistencies - MEDIUM: ssl: Insert ocsp responses in update tree when needed - MEDIUM: ssl: Add ocsp update task main function - MEDIUM: ssl: Start update task if at least one ocsp-update option is set to on - DOC: ssl: Add documentation for ocsp-update option - REGTESTS: ssl: Add tests for ocsp auto update mechanism - MINOR: ssl: Move OCSP code to a dedicated source file - BUG/MINOR: ssl/ocsp: check chunk_strcpy() in ssl_ocsp_get_uri_from_cert() - CLEANUP: ssl/ocsp: add spaces around operators - BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set - BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats - BUG/MINOR: ssl/ocsp: httpclient blocked when doing a GET - MINOR: httpclient: don't add body when istlen is empty - MEDIUM: httpclient: change the default log format to skip duplicate proxy data - BUG/MINOR: httpclient/log: free of invalid ptr with httpclient_log_format - MEDIUM: mux-quic: implement shutw - MINOR: mux-quic: do not count stream flow-control if already closed - MINOR: mux-quic: handle RESET_STREAM reception - MEDIUM: mux-quic: implement STOP_SENDING emission - MINOR: h3: use stream error when needed instead of connection - CI: github: enable github api authentication for OpenSSL tags read - BUG/MINOR: mux-quic: ignore remote unidirectional stream close - CI: github: use the GITHUB_TOKEN instead of a manually generated token - BUILD: makefile: build the features list dynamically - BUILD: makefile: move common options-oriented macros to include/make/options.mk - BUILD: makefile: sort the features list - BUILD: makefile: initialize all build options' variables at once - BUILD: makefile: add a function to collect all options' CFLAGS/LDFLAGS - BUILD: makefile: start to automatically collect CFLAGS/LDFLAGS - BUILD: makefile: ensure that all USE_* handlers appear before CFLAGS are used - BUILD: makefile: clean the wolfssl include and lib generation rules - BUILD: makefile: make sure to also ignore SSL_INC when using wolfssl - BUILD: makefile: reference libdl only once - BUILD: makefile: make sure LUA_INC and LUA_LIB are always initialized - BUILD: makefile: do not restrict Lua's prepend path to empty LUA_LIB_NAME - BUILD: makefile: never force -latomic, set USE_LIBATOMIC instead - BUILD: makefile: add an implicit USE_MATH variable for -lm - BUILD: makefile: properly report USE_PCRE/USE_PCRE2 in features - CLEANUP: makefile: properly indent ifeq/ifneq conditional blocks - BUILD: makefile: rework 51D to split v3/v4 - BUILD: makefile: support LIBCRYPT_LDFLAGS - BUILD: makefile: support RT_LDFLAGS - BUILD: makefile: support THREAD_LDFLAGS - BUILD: makefile: support BACKTRACE_LDFLAGS - BUILD: makefile: support SYSTEMD_LDFLAGS - BUILD: makefile: support ZLIB_CFLAGS and ZLIB_LDFLAGS - BUILD: makefile: support ENGINE_CFLAGS - BUILD: makefile: support OPENSSL_CFLAGS and OPENSSL_LDFLAGS - BUILD: makefile: support WOLFSSL_CFLAGS and WOLFSSL_LDFLAGS - BUILD: makefile: support LUA_CFLAGS and LUA_LDFLAGS - BUILD: makefile: support DEVICEATLAS_CFLAGS and DEVICEATLAS_LDFLAGS - BUILD: makefile: support PCRE[2]_CFLAGS and PCRE[2]_LDFLAGS - BUILD: makefile: refactor support for 51DEGREES v3/v4 - BUILD: makefile: support WURFL_CFLAGS and WURFL_LDFLAGS - BUILD: makefile: make all OpenSSL variants use the same settings - BUILD: makefile: remove the special case of the SSL option - BUILD: makefile: only consider settings from enabled options - BUILD: makefile: also list per-option settings in 'make opts' - BUG/MINOR: debug: don't mask the TH_FL_STUCK flag before dumping threads - MINOR: cfgparse-ssl: avoid a possible crash on OOM in ssl_bind_parse_npn() - BUG/MINOR: ssl: Missing goto in error path in ocsp update code - BUG/MINOR: stick-table: report the correct action name in error message - CI: Improve headline in matrix.py - CI: Add in-memory cache for the latest OpenSSL/LibreSSL - CI: Use proper `if` blocks instead of conditional expressions in matrix.py - CI: Unify the `GITHUB_TOKEN` name across matrix.py and vtest.yml - CI: Explicitly check environment variable against `None` in matrix.py - CI: Reformat `matrix.py` using `black` - MINOR: config: add environment variables for default log format - REGTESTS: Remove REQUIRE_VERSION=1.9 from all tests - REGTESTS: Remove REQUIRE_VERSION=2.0 from all tests - REGTESTS: Remove tests with REQUIRE_VERSION_BELOW=1.9 - BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set - BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned - DOC: config: fix alphabetical ordering of http-after-response rules - MINOR: http-rules: Add missing actions in http-after-response ruleset - DOC: config: remove duplicated "http-response sc-set-gpt0" directive - BUG/MINOR: proxy: free orgto_hdr_name in free_proxy() - REGTEST: fix the race conditions in json_query.vtc - REGTEST: fix the race conditions in add_item.vtc - REGTEST: fix the race conditions in digest.vtc - REGTEST: fix the race conditions in hmac.vtc - BUG/MINOR: fd: avoid bad tgid assertion in fd_delete() from deinit() - BUG/MINOR: http: Memory leak of http redirect rules' format string - MEDIUM: stick-table: set the track-sc limit at boottime via tune.stick-counters - MINOR: stick-table: implement the sc-add-gpc() action	2023-01-07 09:45:17 +01:00
Willy Tarreau	eaded987ee	[RELEASE] Released version 2.8-dev0 ... Released version 2.8-dev0 with the following main changes : - MINOR: version: mention that it's development again	2022-12-01 15:25:34 +01:00
Willy Tarreau	437fd289f2	[RELEASE] Released version 2.7.0 ... Released version 2.7.0 with the following main changes : - MINOR: ssl: forgotten newline in error messages on ca-file - BUG/MINOR: ssl: shut the ca-file errors emitted during httpclient init - DOC: config: provide some configuration hints for "http-reuse" - DOC: config: refer to section about quoting in the "add_item" converter - DOC: halog: explain how to use -ac and -ad in the help message - DOC: config: clarify the fact that SNI should not be used in HTTP scenarios - DOC: config: mention that a single monitor-uri rule is supported - DOC: config: explain how default matching method for ACL works - DOC: config: clarify the fact that "retries" is not just for connections - BUILD: halog: fix missing double-quote at end of help line - DOC: config: clarify the -m dir and -m dom pattern matching methods - MINOR: activity: report uptime in "show activity" - REORG: activity/cli: move the "show activity" handler to activity.c - DEV: poll: add support for epoll - DEV: tcploop: centralize the polling code into wait_for_fd() - DEV: tcploop: add support for POLLRDHUP when supported - DEV: tcploop: do not report an error on POLLERR - DEV: tcploop: add optional support for epoll - SCRIPTS: announce-release: add a link to the data plane API - CLEANUP: stick-table: fill alignment holes in the stktable struct - MINOR: stick-table: store a per-table hash seed and use it - MINOR: stick-table: show the shard number in each entry's "show table" output - CLEANUP: ncbuf: remove ncb_blk args by value - CLEANUP: ncbuf: inline small functions - CLEANUP: ncbuf: use standard BUG_ON with DEBUG_STRICT - BUG/MINOR: quic: Endless loop during retransmissions - MINOR: mux-h2: add the expire task and its expiration date in "show fd" - BUG/MINOR: peers: always initialize the stksess shard value - REGTESTS: fix peers-related regtests regarding "show table" - BUG/MEDIUM: mux-h1: Close client H1C on EOS when there is no output data - MINOR: stick-table: change the API of the function used to calculate the shard - CLEANUP: peers: factor out the key len calculation in received updates - BUG/MINOR: peers: always update the stksess shard number on incoming updates - CLEANUP: assorted typo fixes in the code and comments - MINOR: mux-h1: add the expire task and its expiration date in "show fd" - MINOR: debug: improve error handling on the memstats command parser - BUILD: quic: allow build with USE_QUIC and USE_OPENSSL_WOLFSSL - CLEANUP: anon: clarify the help message on "debug dev hash" - MINOR: debug: relax access restrictions on "debug dev hash" and "memstats" - SCRIPTS: run-regtests: add a version check - MINOR: version: mention that it's stable now	2022-12-01 15:16:46 +01:00
Willy Tarreau	0279df9e82	[RELEASE] Released version 2.7-dev10 ... Released version 2.7-dev10 with the following main changes : - MEDIUM: tcp-act: add parameter rst-ttl to silent-drop - BUG/MAJOR: quic: Crash upon retransmission of dgrams with several packets - MINOR: cli: print parsed command when not found - BUG/MAJOR: quic: Crash after discarding packet number spaces - CLEANUP: quic: replace "choosen" with "chosen" all over the code - MINOR: cli/pools: store "show pools" results into a temporary array - MINOR: cli/pools: add sorting capabilities to "show pools" - MINOR: cli/pools: add pool name filtering capability to "show pools" - DOC: configuration: fix quic prefix typo - MINOR: quic: report error if force-retry without cluster-secret - MINOR: global: generate random cluster.secret if not defined - BUG/MINOR: resolvers: do not run the timeout task when there's no resolution - BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns - MINOR: server/idle: make the next_takeover index per-tgroup - BUILD: listener: fix build warning on global_listener_rwlock without threads - BUG/MAJOR: sched: protect task during removal from wait queue - BUILD: sched: fix build with DEBUG_THREAD with the previous commit - DOC: quic: add note on performance issue with listener contention - BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance - BUG/MINOR: log: fix parse_log_message rfc5424 size check - CLEANUP: arg: remove extra check in make_arg_list arg escaping - CLEANUP: tools: extra check in utoa_pad - MINOR: h1: Consider empty port as invalid in authority for CONNECT - MINOR: http: Considere empty ports as valid default ports - BUG/MINOR: http-htx: Normalized absolute URIs with an empty port - BUG/MINOR: h1: Replace authority validation to conform RFC3986 - REG-TESTS: http: Add more tests about authority/host matching - BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action - BUG/MEDIUM: mux-h1: Don't release H1C on timeout if there is a SC attached - BUG/MEDIUM: mux-h1: Subscribe for reads on error on sending path - BUILD: http-htx: Silent build error about a possible NULL start-line - DOC: configuration.txt: add default_value for table_idle signature - BUILD: ssl-sock: Silent error about NULL deref in ssl_sock_bind_verifycbk() - BUG/MEDIUM: mux-h1: Remove H1C_F_WAIT_NEXT_REQ flag on a next request - BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out - MINOR: mux-h1: Remove H1C_F_WAIT_NEXT_REQ in functions handling errors - MINOR: mux-h1: Avoid useless call to h1_send() if no error is sent - DOC: configuration.txt: fix typo in table_idle signature - BUILD: stick-tables: fix build breakage in xxhash on older compilers - BUILD: compiler: include compiler's definitions before ours - BUILD: quic: global.h is needed in cfgparse-quic - CLEANUP: tools: do not needlessly include xxhash nor cli from tools.h - BUILD: flags: really restrict the cases where flags are exposed - BUILD: makefile: minor reordering of objects by build time - BUILD: quic: silence two invalid build warnings at -O1 with gcc-6.5 - BUILD: quic: use openssl-compat.h instead of openssl/ssl.h - MEDIUM: ssl: add minimal WolfSSL support with OpenSSL compatibility mode - MINOR: sample: make the rand() sample fetch function use the statistical_prng - MINOR: auth: silence null dereference warning in check_user() - CLEANUP: peers: fix format string for status messages (int signedness) - CLEANUP: qpack: fix format string in debugging code (int signedness) - CLEANUP: qpack: properly use the QPACK macros not HPACK ones in debug code - BUG/MEDIUM: quic: fix datagram dropping on queueing failed	2022-11-24 17:13:05 +01:00
Willy Tarreau	a0abec8bc0	[RELEASE] Released version 2.7-dev9 ... Released version 2.7-dev9 with the following main changes : - BUILD: quic: QUIC mux build fix for 32-bit build - BUILD: scripts: disable tests build on QuicTLS build - BUG/MEDIUM: httpclient: segfault when the httpclient parser fails - BUILD: ssl_sock: fix null dereference for QUIC build - BUILD: quic: Fix build for m68k cross-compilation - BUG/MINOR: quic: fix buffer overflow on retry token generation - MINOR: quic: add version field on quic_rx_packet - MINOR: quic: extend pn_offset field from quic_rx_packet - MINOR: quic: define first packet flag - MINOR: quic: extract connection retrieval - MINOR: quic: split and rename qc_lstnr_pkt_rcv() - MINOR: quic: refactor packet drop on reception - MINOR: quic: extend Retry token check function - BUG/MINOR: log: Preserve message facility when the log target is a ring buffer - BUG/MINOR: ring: Properly parse connect timeout - BUG/MEDIUM: httpclient/lua: crash when the lua task timeout before the httpclient - BUG/MEDIUM: httpclient: check if the httpclient was released in the IO handler - REGTESTS: httpclient/lua: test the lua task timeout with the httpclient - CI: github: dump the backtrace of coredumps in the alpine container - BUILD: Makefile: add "USE_SHM_OPEN" on the linux-musl target - DOC: lua: add a note about compression w/ httpclient - CLEANUP: mworker/cli: rename the status function to loadstatus - MINOR: mworker/cli: does no try to dump the startup-logs w/o USE_SHM_OPEN - MINOR: list: fixing typo in MT_LIST_LOCK_ELT - DOC/MINOR: list: fixing MT_LIST_LOCK_ELT macro documentation - MINOR: list: adding MT_LIST_APPEND_LOCKED macro - BUG/MINOR: mux-quic: complete flow-control for uni streams - BUG/MEDIUM: compression: handle rewrite errors when updating response headers - MINOR: quic: do not crash on unhandled sendto error - MINOR: quic: display unknown error sendto counter on stat page - MINOR: peers: Support for peer shards - MINOR: peers: handle multiple resync requests using shards - BUG/MINOR: sink: Only use backend capability for the sink proxies - BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers - MINOR: ssl: add the SSL error string when failing to load a certificate - MINOR: ssl: add the SSL error string before the chain - MEDIUM: ssl: be stricter about chain error - BUG/MAJOR: stick-table: don't process store-response rules for applets - MINOR: quic: remove unnecessary quic_session_accept() - BUG/MINOR: quic: fix subscribe operation - BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting - MINOR: ssl: dump the SSL string error when SSL_CTX_use_PrivateKey() failed. - MINOR: quic: add counter for interrupted reception - BUG/MINOR: quic: fix race condition on datagram purging - CI: add monthly gcc cross compile jobs - CLEANUP: assorted typo fixes in the code and comments - CLEANUP: ssl: remove dead code in ssl_sock_load_pem_into_ckch() - BUG/MINOR: httpclient: fixed memory allocation for the SSL ca_file - BUG/MINOR: ssl: Memory leak of DH BIGNUM fields - BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer - BUG/MINOR: ssl: ocsp structure not freed properly in case of error - CI: switch to the "latest" LibreSSL - CI: enable QUIC for LibreSSL builds - BUG/MEDIUM: ssl: Verify error codes can exceed 63 - MEDIUM: ssl: {ca,crt}-ignore-err can now use error constant name - MINOR: ssl: x509_v_err_str converter transforms an integer to a X509_V_ERR name - CLEANUP: cli: rename dynamic error printing state - MINOR: cli: define usermsgs print context - MINOR: server: clear prefix on stderr logs after add server - BUG/MINOR: ssl: bind_conf is uncorrectly accessed when using QUIC - BUILD: ssl_utils: fix build on gcc versions before 8 - BUILD: debug: remove unnecessary quotes in HA_WEAK() calls - CI: emit the compiler's version in the build reports - IMPORT: xxhash: update xxHash to version 0.8.1 - IMPORT: slz: declare len to fix debug build when optimal match is enabled - IMPORT: slz: mention the potential header in slz_finish() - IMPORT: slz: define and use a __fallthrough statement for switch/case - BUILD: compiler: add a macro to detect if another one is set and equals 1 - BUILD: compiler: add a default definition for __has_attribute() - BUILD: compiler: define a __fallthrough statement for switch/case - BUILD: sample: use __fallthrough in smp_is_rw() and smp_dup() - BUILD: quic: use __fallthrough in quic_connect_server() - BUILD: ssl/crt-list: use __fallthrough in cli_io_handler_add_crtlist() - BUILD: ssl: use __fallthrough in cli_io_handler_commit_{cert,cafile_crlfile}() - BUILD: ssl: use __fallthrough in cli_io_handler_tlskeys_files() - BUILD: hlua: use __fallthrough in hlua_post_init_state() - BUILD: stream: use __fallthrough in stats_dump_full_strm_to_buffer() - BUILD: tcpcheck: use __fallthrough in check_proxy_tcpcheck() - BUILD: stats: use __fallthrough in stats_dump_proxy_to_buffer() - BUILD: peers: use __fallthrough in peer_io_handler() - BUILD: hash: use __fallthrough in hash_djb2() - BUILD: tools: use __fallthrough in url_decode() - BUILD: args: use __fallthrough in make_arg_list() - BUILD: acl: use __fallthrough in parse_acl_expr() - BUILD: spoe: use __fallthrough in spoe_handle_appctx() - BUILD: logs: use __fallthrough in build_log_header() - BUILD: check: use __fallthrough in __health_adjust() - BUILD: http_act: use __fallthrough in parse_http_del_header() - BUILD: h1_htx: use __fallthrough in h1_parse_chunk() - BUILD: vars: use __fallthrough in var_accounting_{diff,add}() - BUILD: map: use __fallthrough in cli_io_handler_*() - BUILD: compression: use __fallthrough in comp_http_payload() - BUILD: stconn: use __fallthrough in various shutw() functions - BUILD: prometheus: use __fallthrough in promex_dump_metrics() and IO handler() - CLEANUP: ssl: remove printf in bind_parse_ignore_err - BUG/MINOR: ssl: crt-ignore-err memory leak with 'all' parameter - BUG/MINOR: ssl: Fix potential overflow - CLEANUP: stick-table: remove the unused table->exp_next - OPTIM: stick-table: avoid atomic ops in stktable_requeue_exp() when possible - BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task - MEDIUM: http-ana: remove set-cookie2 support - BUG/MEDIUM: wdt/clock: properly handle early task hangs - MINOR: deinit: add a "quick-exit" option to bypass the deinit step - OPTIM: ebtree: make ebmb_insert_prefix() keep a copy the new node's pfx - OPTIM: ebtree: make ebmb_insert_prefix() keep a copy the new node's key - MINOR: ssl: ssl_sock_load_cert_chain() display error strings - MINOR: ssl: reintroduce ERR_GET_LIB(ret) == ERR_LIB_PEM in ssl_sock_load_pem_into_ckch() - BUG/MINOR: http-htx: Fix error handling during parsing http replies - BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure - BUG/MINOR: resolvers: Set port before IP address when processing SRV records - BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy - BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once - BUG/MINOR: ssl: SSL_load_error_strings might not be defined - MINOR: pool/debug: create a new pool_alloc_flag() macro - MINOR: dynbuf: switch allocation and release to macros to better track users - BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers - REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses - DOC: config: fix alphabetical ordering of global section - MINOR: trace: split the CLI "trace" parser in CLI vs statement - MEDIUM: trace: create a new "trace" statement in the "global" section - BUG/MEDIUM: ring: fix creation of server in uninitialized ring - BUILD: quic: fix dubious 0-byte overflow on qc_release_lost_pkts - BUILD: makefile: mark poll and tcploop targets as phony - BUILD: makefile: properly pass CC to sub-projects - BUILD: makefile: move default verbosity settings to include/make/verbose.mk - BUILD: makefile: use $(cmd_MAKE) in quiet mode - BUILD: makefile: move the compiler option detection stuff to compiler.mk - DEV: poll: make the connect() step an action as well - DEV: poll: strip the "do_" prefix from reported function names - DEV: poll: indicate the FD's side in front of its value - BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes - MINOR: mux-h1: Remove usless code inside shutr callback - CLEANUP: mux-h1; Rename H1S_F_ERROR flag into H1S_F_ERROR_MASK - REORG: mux-h1: Reorg the H1C structure - CLEANUP: mux-h1: Rename H1C_F_ST_ERROR and H1C_F_ST_SILENT_SHUT flags - MINOR: mux-h1: Add a dedicated enum to deal with H1 connection state - MEDIUM: mux-h1: Handle H1C states via its state field instead of H1C_F_ST_* - MINOR: mux-h1: Don't handle subscribe for reads in h1_process_demux() - CLEANUP: mux-h1: Rename H1C_F_ERR_PENDING into H1C_F_ABRT_PENDING - MINOR: mux-h1: Add flag on H1 stream to deal with internal errors - MEDIUM: mux-h1: Rely on the H1C to deal with shutdown for reads - CLEANUP: mux-h1: Reorder H1 connection flags to avoid holes - MEDIUM: mux-h1: Don't report a final error whe a message is aborted - MEDIUM: mux-pt: Don't always set a final error on SE on the sending path - MEDIUM: mux-h2: Introduce flags to deal with connection read/write errors - CLEANUP: mux-h2: Remove unused fields in h2c structures - MEDIUM: mux-fcgi: Introduce flags to deal with connection read/write errors - MINOR: sconn: Set SE_FL_ERROR only when there is no more data to read - MINOR: mux-h1: Rely on a H1S flag to know a WS key was found or not - DOC: lua-api: Remove warning about the lua filters - BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task - CLEANUP: listener: Remove useless task_queue from manage_global_listener_queue - BUG/MINOR: mux-h1: Fix error handling when H1S allocation failed on client side - DOC: internal: commit notes about polling states and flags - DOC: internal: commit notes about polling states and flags on connect() - CLEANUP: mux-h1: Don't test h1c in h1_shutw_conn() - BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists - BUG/MEDIUM: raw-sock: Don't report connection error if something was received - BUG/MINOR: ssl: don't initialize the keylog callback when not required - BUILD: Makefile: enable USE_SHM_OPEN by default on freebsd - BUG/MEDIUM: peers: messages about unkown tables not correctly ignored - MINOR: cfgparse: Always check the section position - MEDIUM: thread: Restric nbthread/thread-group(s) to very first global sections - BUILD: peers: Remove unused variables - MINOR: ncbuf: complete doc for ncb_advance() - BUG/MEDIUM: quic: fix unsuccessful handshakes on ncb_advance error - BUG/MEDIUM: quic: fix memleak for out-of-order crypto data - MINOR: quic: complete traces/debug for handshake	2022-11-18 17:48:49 +01:00
Willy Tarreau	ea8aebe8c5	[RELEASE] Released version 2.7-dev8 ... Released version 2.7-dev8 with the following main changes : - BUG/MINOR: checks: update pgsql regex on auth packet - DOC: config: Fix pgsql-check documentation to make user param mandatory - CLEANUP: mux-quic: remove usage of non-standard ull type - CLEANUP: quic: remove global var definition in quic_tls header - BUG/MINOR: quic: adjust quic_tls prototypes - CLEANUP: quic: fix headers - CLEANUP: quic: remove unused function prototype - CLEANUP: quic: remove duplicated varint code from xprt_quic.h - CLEANUP: quic: create a dedicated quic_conn module - BUG/MINOR: mux-quic: ignore STOP_SENDING for locally closed stream - BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure - BUG/MEDIUM: lua: handle stick table implicit arguments right. - BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os - MINOR: fd: add a new function to only raise RLIMIT_NOFILE - MINOR: init: do not try to shrink existing RLIMIT_NOFIlE - BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth() - BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os - BUG/MINOR: hlua: hlua_channel_insert_data() behavior conflicts with documentation - MINOR: quic: limit usage of ssl_sock_ctx in favor of quic_conn - MINOR: mux-quic: check quic-conn return code on Tx - CLEANUP: quic: fix indentation - MEDIUM: quic: retrieve frontend destination address - CLEANUP: Reapply ist.cocci (2) - CLEANUP: Reapply strcmp.cocci - CLEANUP: quic/receiver: remove the now unused tx_qring list - BUG/MINOR: quic: set IP_PKTINFO socket option for QUIC receivers only - MINOR: hlua: some luaL_checktype() calls were not guarded with MAY_LJMP - DOC: configuration: missing 'if' in tcp-request content example - MINOR: hlua: removing ambiguous lua_pushvalue with 0 index - BUG/MAJOR: stick-tables: do not try to index a server name for applets - MINOR: plock: support disabling exponential back-off - MINOR: freq_ctr: use the thread's local time whenever possible - MEDIUM: stick-table: switch the table lock to rwlock - MINOR: stick-table: do not take an exclusive lock when downing ref_cnt - MINOR: stick-table: move the write lock inside stktable_touch_with_exp() - MEDIUM: stick-table: only take the lock when needed in stktable_touch_with_exp() - MEDIUM: stick-table: make stksess_kill_if_expired() avoid the exclusive lock - MEDIUM: stick-table: return inserted entry in __stktable_store() - MEDIUM: stick-table: free newly allocated stkess if it couldn't be inserted - MEDIUM: stick-table: switch to rdlock in stktable_lookup() and lookup_key() - MEDIUM: stick-table: make stktable_get_entry() look up under a read lock - MEDIUM: stick-table: do not take a lock to update t->current anymore. - MEDIUM: stick-table: make stktable_set_entry() look up under a read lock - MEDIUM: stick-table: requeue the expiration task out of the exclusive lock - MINOR: stick-table: split stktable_store() between key and requeue - MEDIUM: stick-table: always use atomic ops to requeue the table's task - MEDIUM: stick-table: requeue the wakeup task out of the write lock - BUG/MINOR: stick-table: fix build with DEBUG_THREAD - REORG: mux-fcgi: Extract flags and enums into mux_fcgi-t.h - MINOR: flags/mux-fcgi: Decode FCGI connection and stream flags - BUG/MEDIUM: mux-h1: Add connection error handling when reading/sending on a pipe - BUG/MEDIUM: mux-h1: Handle abort with an incomplete message during parsing - BUG/MINOR: server: make sure "show servers state" hides private bits - MINOR: checks: use the lighter PRNG for spread checks - MEDIUM: checks: spread the checks load over random threads - CI: SSL: use proper version generating when "latest" semantic is used - CI: SSL: temporarily stick to LibreSSL=3.5.3 - MINOR: quic: New quic_cstream object implementation - MINOR: quic: Extract CRYPTO frame parsing from qc_parse_pkt_frms() - MINOR: quic: Use a non-contiguous buffer for RX CRYPTO data - BUG/MINOR: quic: Stalled 0RTT connections with big ClientHello TLS message - MINOR: quic: Split the secrets key allocation in two parts - CLEANUP: quic: remove unused rxbufs member in receiver - CLEANUP: quic: improve naming for rxbuf/datagrams handling - MINOR: quic: implement datagram cleanup for quic_receiver_buf - MINOR: ring: ring_cast_from_area() cast from an allocated area - MINOR: buffers: split b_force_xfer() into b_cpy() and b_force_xfer() - MINOR: logs: startup-logs can use a shm for logging the reload - MINOR: mworker/cli: reload command displays the startup-logs - MEDIUM: quic: respect the threads assigned to a bind line - DOC: management: update the "reload" command of the master CLI - BUILD: ssl_sock: bind_conf uninitialized in ssl_sock_bind_verifycbk() - BUG/MEDIUM: httpclient: Don't set EOM flag on an empty HTX message - MINOR: httpclient/lua: Don't set req_payload callback if body is empty - DOC/CLEANUP: lua-api: some minor corrections - DOC: lua-api: updating toolbox link - DOC/CLEANUP: lua-api: removing duplicate core.proxies attribute - DOC: management: add forgotten "show startup-logs" - DOC: management: "show startup-logs" for master CLI - CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py - CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition	2022-10-14 20:45:23 +02:00
Willy Tarreau	dd4a2a69dc	[RELEASE] Released version 2.7-dev7 ... Released version 2.7-dev7 with the following main changes : - BUG/MEDIUM: mux-quic: fix nb_hreq decrement - CLEANUP: httpclient: deleted unused variables - MINOR: httpclient: enabled the use of SNI presets - OPTIM: hpack-huff: reduce the cache footprint of the huffman decoder - BUG/MINOR: mux-quic: do not keep detached qcs with empty Tx buffers - REORG: mux-quic: extract traces in a dedicated source file - REORG: mux-quic: export HTTP related function in a dedicated file - MINOR: mux-quic: refactor snd_buf - BUG/MEDIUM: mux-quic: properly trim HTX buffer on snd_buf reset - BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error - BUG/MINOR: log: improper behavior when escaping log data - CLEANUP: tools: removing escape_chunk() function - MINOR: clock: split local and global date updates - MINOR: pollers: only update the local date during busy polling - MINOR: clock: do not update the global date too often - REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies - MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands - BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction - MINOR: list: documenting mt_list_for_each_entry_safe() macro - CLEANUP: list: Fix mt_list_for_each_entry_safe indentation - BUG/MINOR: hlua: Remove \n in Lua error message built with memprintf - MINOR: hlua: Allow argument on lua-lod(-per-thread) directives - BUG/MINOR: anon: memory illegal accesses in tools.c with hash_anon and hash_ipanon - MEDIUM: mworker/cli: keep the connection of the FD that ask for a reload - BUG/MINOR: hlua: fixing ambiguous sizeof in hlua_load_per_thread - MINOR: mworker/cli: replace close() by fd_delete() - MINOR: mworker: store and shows loading status - MINOR: mworker: mworker_cli_proxy_new_listener() returns a bind_conf - MINOR: mworker: stores the mcli_reload bind_conf - MINOR: mworker/cli: the mcli_reload bind_conf only send the reload status - DOC: management: describe the new reload command behavior - CLEANUP: list: fix again some style issues in the recent comments - BUG/MINOR: stream: Perform errors handling in right order in stream_new() - BUG/MEDIUM: stconn: Reset SE descriptor when we fail to create a stream - BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree - DOC: management: add timeout on the "reload" command - BUG/MINOR: ring: fix the size check in ring_make_from_area() - BUG/MINOR: config: don't count trailing spaces as empty arg - Revert "BUG/MINOR: config: don't count trailing spaces as empty arg" - BUG/MINOR: hlua: fixing hlua_http_msg_del_data behavior - BUG/MINOR: hlua: fixing hlua_http_msg_insert_data behavior - MINOR: cli: Add anonymization on a missed element for 'show sess all' - MINOR: cli: remove error message with 'set anon on|off' - MINOR: tools: modify hash_ipanon in order to use it in cli - MINOR: cli: use hash_ipanon to anonymized address - MINOR: cli: Add an anonymization on a missed element in 'show server state' - MINOR: config: correct errors about argument number in condition in cfgparse.c - MINOR: config: Add other keywords when dump the anonymized configuration file - MINOR: config: Add option line when the configuration file is dumped - MINOR: cli: correct commentary and replace 'set global-key' name - MINOR: tools: Impprove hash_ipanon to support dgram sockets and port offsets - MINOR: tools: Impprove hash_ipanon to not hash FD-based addresses - BUG/MINOR: hlua: _hlua_http_msg_delete incorrect behavior when offset is used - DOC: management: httpclient can resolve server names in URLs - BUG/MINOR: hlua: prevent crash when loading numerous arguments using lua-load(per-thread) - DOC/CLEANUP: lua-api: removing duplicate date functions doc - MINOR: hlua: ambiguous lua_pushvalue with 0 index - BUG/MINOR: config: don't count trailing spaces as empty arg (v2) - BUG/MEDIUM: config: count line arguments without dereferencing the output - BUG/MAJOR: conn-idle: fix hash indexing issues on idle conns - BUG/MINOR: config: insufficient syntax check of the global "maxconn" value - BUG/MINOR: backend: only enforce turn-around state when not redispatching	2022-10-03 15:20:38 +02:00
Willy Tarreau	4b10a5c439	[RELEASE] Released version 2.7-dev6 ... Released version 2.7-dev6 with the following main changes : - MINOR: Revert part of clarifying samples support per os commit - BUILD: makefile: enable crypt(3) for NetBSD - BUG/MINOR: quic: Retransmitted frames marked as acknowledged - BUG/MINOR: quic: Possible crash with "tls-ticket-keys" on QUIC bind lines - MINOR: http-check: Remove support for headers/body in "option httpchk" version - BUG/MINOR: h1: Support headers case adjustment for TCP proxies - BUG/MINOR: quic: Possible crash when verifying certificates - BUILD: quic: add some ifdef around the SSL_ERROR_* for libressl - BUILD: ssl: fix ssl_sock_switchtx_cbk when no client_hello_cb - BUILD: quic: temporarly ignore chacha20_poly1305 for libressl - BUILD: quic: enable early data only with >= openssl 1.1.1 - BUILD: ssl: fix the ifdef mess in ssl_sock_initial_ctx - BUILD: quic: fix the #ifdef in ssl_quic_initial_ctx() - MINOR: quic: add QUIC support when no client_hello_cb - MINOR: quic: Add traces about sent or resent TX frames - MINOR: quic: No TRACE_LEAVE() in retrieve_qc_conn_from_cid() - BUG/MINOR: quic: Wrong connection ID to thread ID association - BUG/MINOR: task: always reset a new tasklet's call date - BUG/MINOR: task: make task_instant_wakeup() work on a task not a tasklet - MINOR: task: permanently enable latency measurement on tasklets - CLEANUP: task: rename ->call_date to ->wake_date - BUG/MINOR: sched: properly account for the CPU time of dying tasks - MINOR: sched: store the current profile entry in the thread context - BUG/MINOR: stream/sched: take into account CPU profiling for the last call - MINOR: tasks: do not keep cpu and latency times in struct task - MINOR: tools: add generic pointer hashing functions - CLEANUP: activity: make memprof use the generic ptr_hash() function - CLEANUP: activity: make taskprof use ptr_hash() - MINOR: debug: add struct ha_caller to describe a calling location - CLEANUP: debug: use struct ha_caller for memstat - DEBUG: task: define a series of wakeup types for tasks and tasklets - DEBUG: task: use struct ha_caller instead of arrays of file:line - DEBUG: applet: instrument appctx_wakeup() to log the caller's location - DEBUG: task: simplify the caller recording in DEBUG_TASK - CLEANUP: task: move tid and wake_date into the common part - CLEANUP: sched: remove duplicate code in run_tasks_from_list() - CLEANUP: activity: make the number of sched activity entries more configurable - DEBUG: resolvers: unstatify process_resolvers() to make it appear in profiling - DEBUG: quic: export the few task handlers that often appear in task dumps - MEDIUM: tasks/activity: combine the called function with the caller - MINOR: tasks/activity: improve the caller-callee activity hash - MINOR: activity/cli: support aggregating task profiling outputs - MINOR: activity/cli: support sorting task profiling by total CPU time - BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals - BUG/MINOR: quic: Speed up the handshake completion only one time - BUG/MINOR: quic: Trace fix about packet number space information. - BUG/MINOR: h3: Crash when h3 trace verbosity is "minimal" - MINOR: h3: Add the quic_conn object to h3 traces - MINOR: h3: Missing connection argument for a TRACE_LEAVE() argument - MINOR: h3: Send the h3 settings with others streams (requests) - MINOR: dev/udp: Apply the corruption to both directions - BUILD: udp-perturb: Add a make target for udp-perturb tool - BUG/MINOR: signals/poller: ensure wakeup from signals - CI: cirrus-ci: bump FreeBSD image to 13-1 - DEV: flags: fix usage message to reflect available options - DEV: flags: add missing CO_FL_FDLESS connection flag - MINOR: flags: add a new file to host flag dumping macros - MINOR: flags: implement a macro used to dump enums inside masks - MINOR: flags/channel: use flag dumping for channel flags and analysers - MINOR: flags/connection: use flag dumping for connection flags - MINOR: flags/stconn: use flag dumping for stconn and sedesc flags - MINOR: flags/stream: use flag dumping for stream error type - MINOR: flags/stream: use flag dumping for stream flags - MINOR: flags/task: use flag dumping for task state - MINOR: flags/http_ana: use flag dumping for txn flags - DEV: flags: remove the now unused SHOW_FLAG() definition - DEV: flags: remove the now useless intermediary functions - MINOR: flags/htx: use flag dumping to show htx and start-line flags - MINOR: flags/http_ana: use flag dumping to show http msg states - BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK - MINOR: listener: small API change - MINOR: proxy/listener: support for additional PAUSED state - BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN' - BUILD: flags: fix build warning in some macros used by show_flags - BUILD: flags: fix the fallback macros for missing stdio - CLEANUP: pollers: remove dead code in the polling loop - BUG/MINOR: mux-h1: Increment open_streams counter when H1 stream is created - REGTESTS: healthcheckmail: Relax matching on the healthcheck log message - CLEANUP: listener: function comment typo in stop_listener() - BUG/MINOR: listener: null pointer dereference suspected by coverity - MINOR: flags/fd: decode FD flags states - REORG: mux-h2: extract flags and enums into mux_h2-t.h - MINOR: flags/mux-h2: decode H2C and H2S flags - REGTESTS: log: test the log-forward feature - BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring. - REGTESTS: ssl/log: test the log-forward with SSL - MEDIUM: httpclient: httpclient_create_proxy() creates a proxy for httpclient - MEDIUM: httpclient: allow to use another proxy - DOC: fix TOC in starter guide for subsection 3.3.8. Statistics - MINOR: httpclient: export httpclient_create_proxy() - MEDIUM: quic: separate path for rx and tx with set_encryption_secrets - BUG/MEDIUM: mux-quic: fix crash on early app-ops release - REORG: mux-h1: extract flags and enums into mux_h1-t.h - MINOR: flags/mux-h1: decode H1C and H1S flags - CLEANUP: mux-quic: remove stconn usage in h3/hq - BUG/MINOR: mux-quic: do not remotely close stream too early - CLEANUP: exclude udp-perturb with .gitignore - BUG/MEDIUM: server: segv when adding server with hostname from CLI - CLEANUP: quic,ssl: fix tiny typos in C comments - BUG/MEDIUM: captures: free() an error capture out of the proxy lock - BUILD: fd: fix a build warning on the DWCAS - MINOR: anon: add new macros and functions to anonymize contents - MINOR: anon: store the anonymizing key in the global structure - MINOR: anon: store the anonymizing key in the CLI's appctx - MINOR: cli: anonymize commands 'show sess' and 'show sess all' - MINOR: cli: anonymize 'show servers state' and 'show servers conn' - MINOR: config: add command-line -dC to dump the configuration file - SCRIPTS: announce-release: update some URLs to https	2022-09-17 12:24:53 +02:00
Willy Tarreau	3bb2b5db50	[RELEASE] Released version 2.7-dev5 ... Released version 2.7-dev5 with the following main changes : - BUG/MINOR: mux-quic: Fix memleak on QUIC stream buffer for unacknowledged data - BUG/MEDIUM: cpu-map: fix thread 1's affinity affecting all threads - MINOR: cpu-map: remove obsolete diag warning about combined ranges - BUG/MAJOR: mworker: fix infinite loop on master with no proxies. - REGTESTS: launch http_reuse_always in mworker mode - BUG/MINOR: quix: Memleak for non in flight TX packets - BUG/MINOR: quic: Wrong list_for_each_entry() use when building packets from qc_do_build_pkt() - BUG/MINOR: quic: Safer QUIC frame builders - MINOR: quic: Replace MT_LISTs by LISTs for RX packets. - BUG/MEDIUM: applet: fix incorrect check for abnormal return condition from handler - BUG/MINOR: applet: make the call_rate only count the no-progress calls - MEDIUM: peers: limit the number of updates sent at once - BUILD: tcp_sample: fix build of get_tcp_info() on OpenBSD - BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config() - BUG/MINOR: mworker: does not create the "default" resolvers in wait mode - BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect - REGTESTS: Fix prometheus script to perform HTTP health-checks - MINOR: resolvers: shut the warning when "default" resolvers is implicit - Revert "BUG/MINOR: quix: Memleak for non in flight TX packets" - BUG/MINOR: quic: Leak in qc_release_lost_pkts() for non in flight TX packets - BUG/MINOR: quic: Stalled connections (missing I/O handler wakeup) - CLEANUP: quic: No more use ->rx_list MT_LIST entry point (quic_rx_packet) - CLEANUP: quic: Remove a useless check in qc_lstnr_pkt_rcv() - MINOR: quic: Remove useless traces about references to TX packets - Revert "MINOR: quic: Remove useless traces about references to TX packets" - DOC: configuration: do-resolve doesn't work with a port in the string - MINOR: sample: add the host_only and port_only converters - BUG/MINOR: httpclient: fix resolution with port - DOC: configuration.txt: do-resolve must use host_only to remove its port. - BUG/MINOR: quic: Null packet dereferencing from qc_dup_pkt_frms() trace - BUG/MINOR: quic: Frames added to packets even if not built. - BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode - BUG/MEDIUM: peers: Add connect and server timeut to peers proxy - BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress - BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date - BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets - BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input - BUG/MINOR: epoll: do not actively poll for Rx after an error - MINOR: raw-sock: don't try to send if an error was already reported - BUG/MINOR: quic: Missing header protection AES cipher context initialisations (draft-v2) - MINOR: quic: Add a trace to distinguish the datagram from the packets inside - BUG/MINOR: ssl: fix deinit of the ca-file tree - BUG/MINOR: ssl: leak of ckch_inst_link in ckch_inst_free() - BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule) - BUG/MEDIUM: ssl: Fix a UAF when old ckch instances are released - BUG/MINOR: ssl: revert two wrong fixes with ckhi_link - BUG/MINOR: dev/udp: properly preset the rx address size - BUILD: debug: make sure debug macros are never empty - MINOR: quic: Move traces about RX/TX bytes from QUIC_EV_CONN_PRSAFRM event - BUG/MINOR: quic: TX frames memleak - BUG/MINOR: ssl: leak of ckch_inst_link in ckch_inst_free() v2 - MINOR: sink/ring: rotate non-empty file-backed contents only - BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support - REGTESTS: http_request_buffer: Add a barrier to not mix up log messages - BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools - MINOR: backend: always satisfy the first req reuse rule with l7 retries - BUG/MINOR: quic: Do not ack when probing - MINOR: quic: Add TX frames addresses to traces to several trace events - MINOR: quic: Trace typo fix in qc_release_frm() - BUG/MINOR: quic: Frames leak during retransmissions - BUG/MINOR: h2: properly set the direction flag on HTX response - BUG/MEDIUM: httpclient: always detach the caller before self-killing - BUG/MINOR: httpclient: only ask for more room on failed writes - BUG/MINOR: httpclient: keep-alive was accidentely disabled - MEDIUM: httpclient: enable ALPN support on outgoing https connections - BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber - BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber - BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber - DEBUG: stream: minor rearrangement of a few fields in struct stream. - MINOR: debug: report applet pointer and handler in crashes when known - MINOR: mux-h2: extract the stream dump function out of h2_show_fd() - MINOR: mux-h2: extract the connection dump function out of h2_show_fd() - MINOR: muxes: add a "show_sd" helper to complete "show sess" dumps - MINOR: mux-h2: provide a "show_sd" helper to output stream debugging info - MINOR: mux-h2: insert line breaks in "show sess all" output for legibility - MINOR: mux-quic: provide a "show_sd" helper to output stream debugging info - MINOR: mux-h1: split "show_fd" into connection and stream - MINOR: mux-h1: provide a "show_sd" helper to output stream debugging info - BUG/MINOR: http-act: initialize http fmt head earlier	2022-09-02 19:36:50 +02:00
Willy Tarreau	f53201940b	[RELEASE] Released version 2.7-dev4 ... Released version 2.7-dev4 with the following main changes : - BUG/MEDIUM: quic: Wrong packet length check in qc_do_rm_hp() - MINOR: quic: Too much useless traces in qc_build_frms() - BUG/MEDIUM: quic: Missing AEAD TAG check after removing header protection - MINOR: quic: Replace pool_zalloc() by pool_malloc() for fake datagrams - MINOR: debug: make the mem_stats section aligned to void* - MINOR: debug: store and report the pool's name in struct mem_stats - MINOR: debug: also store the function name in struct mem_stats - MINOR: debug/memstats: automatically determine first column size - MINOR: debug/memstats: permit to pass the size to free() - CLEANUP: mux-quic: remove loop on sending frames - MINOR: quic: replace custom buf on Tx by default struct buffer - MINOR: quic: release Tx buffer on each send - MINOR: quic: refactor datagram commit in Tx buffer - MINOR: quic: skip sending if no frame to send in io-cb - BUG/MINOR: mux-quic: open stream on STOP_SENDING - BUG/MINOR: quic: fix crash on handshake io-cb for null next enc level - BUG/MEDIUM: quic: always remove the connection from the accept list on close - BUG/MEDIUM: poller: use fd_delete() to release the poller pipes - BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq() - MEDIUM: quic: xprt traces rework - BUILD: stconn: fix build warning at -O3 about possible null sc - MINOR: quic: Remove useless lock for RX packets - BUG/MINOR: quic: Possible infinite loop in quic_build_post_handshake_frames() - CLEANUP: quic: Remove trailing spaces - MINOR: mux-quic: adjust enter/leave traces - MINOR: mux-quic: define protocol error traces - CLEANUP: mux-quic: adjust traces level - MINOR: mux-quic: define new traces - BUG/MEDIUM: mux-quic: fix crash due to invalid trace arg - BUG/MEDIUM: quic: Possible use of uninitialized <odcid> variable in qc_lstnr_params_init() - BUG/MEDIUM: ring: fix too lax 'size' parser - BUG/MEDIUM: quic: Wrong use of <token_odcid> in qc_lsntr_pkt_rcv() - BUILD: ring: forward-declare struct appctx to avoid a build warning - MINOR: ring: support creating a ring from a linear area - MINOR: ring: add support for a backing-file - DEV: haring: add a simple utility to read file-backed rings - DEV: haring: support remapping LF in contents with CR VT - BUG/MINOR: quic: memleak on wrong datagram receipt - BUILD: sink: replace S_IRUSR, S_IWUSR with their octal value - MINOR: ring: archive a previous file-backed ring on startup - BUG/MINOR: mux-quic: fix crash with traces in qc_detach() - BUG/MINOR: quic: MIssing check when building TX packets - BUG/MINOR: quic: Wrong status returned by qc_pkt_decrypt() - MINOR: memprof: export the minimum definitions for memory profiling - MINOR: pool/memprof: report pool alloc/free in memory profiling - MINOR: pools/memprof: store and report the pool's name in each bin - MINOR: chunk: inline alloc_trash_chunk() - MINOR: stick-table: Add table_expire() and table_idle() new converters - CLEANUP: exclude haring with .gitignore - MINOR: quic: adjust quic_frame flag manipulation - MINOR: h3: report error on control stream close - MINOR: qpack: report error on enc/dec stream close - BUG/MEDIUM: mux-quic: reject uni stream ID exceeding flow control - MINOR: mux-quic: adjust traces on stream init - MINOR: mux-quic: add missing args on some traces - MINOR: quic: refactor application send - BUG/MINOR: quic: do not notify MUX on frame retransmit - BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names - BUG/MINOR: quic: Missing initializations for ducplicated frames. - BUG/MEDIUM: quic: fix crash on MUX send notification - REORG: h2: extract cookies concat function in http_htx - REGTESTS: add test for HTTP/2 cookies concatenation - MEDIUM: h3: concatenate multiple cookie headers - MINOR: applet: add a function to reset the svcctx of an applet - BUG/MEDIUM: cli: always reset the service context between commands - BUG/MEDIUM: mux-h2: do not fiddle with ->dsi to indicate demux is idle - MINOR: mux-h2/traces: report transition to SETTINGS1 before not after - MINOR: mux-h2: make streams know if they need to send more data - BUG/MINOR: mux-h2: send a CANCEL instead of ES on truncated writes - BUG/MINOR: quic: Possible crashes when dereferencing ->pkt quic_frame struct member - MINOR: quic: Add frame addresses to QUIC_EV_CONN_PRSAFRM event traces - BUG/MINOR: quic: Wrong splitted duplicated frames handling - MINOR: quic: Add the QUIC connection to mux traces - MINOR: quic: Trace fix in qc_release_frm() - BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized - BUG/MAJOR: log-forward: Fix ssl layer not initialized on bind even if configured - MINOR: quic: Add reusable cipher contexts for header protection - BUG/MINOR: ssl/cli: error when the ca-file is empty - MINOR: ssl: handle ca-file appending in cafile_entry - MINOR: ssl/cli: implement "add ssl ca-file"	2022-08-20 15:56:31 +02:00
Willy Tarreau	87e95d38a9	[RELEASE] Released version 2.7-dev3 ... Released version 2.7-dev3 with the following main changes : - BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX - BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2) - MINOR: resolvers: resolvers_destroy() deinit and free a resolver - BUG/MINOR: resolvers: shut off the warning for the default resolvers - BUG/MINOR: ssl: allow duplicate certificates in ca-file directories - BUG/MINOR: tools: fix statistical_prng_range()'s output range - BUG/MINOR: quic: do not send CONNECTION_CLOSE_APP in initial/handshake - BUILD: debug: Add braces to if statement calling only CHECK_IF() - BUG/MINOR: fd: Properly init the fd state in fd_insert() - BUG/MEDIUM: fd/threads: fix incorrect thread selection in wakeup broadcast - MINOR: init: load OpenSSL error strings - MINOR: ssl: enhance ca-file error emitting - BUG/MINOR: mworker/cli: relative pid prefix not validated anymore - BUG/MAJOR: mux_quic: fix invalid PROTOCOL_VIOLATION on POST data overlap - BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload - BUILD: add detection for unsupported compiler models - BUG/MEDIUM: stconn: Only reset connect expiration when processing backend side - BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible - BUG/MEDIUM: master: force the thread count earlier - BUG/MAJOR: poller: drop FD's tgid when masks don't match - DEBUG: fd: detect possibly invalid tgid in fd_insert() - BUG/MINOR: sockpair: wrong return value for fd_send_uxst() - MINOR: sockpair: move send_fd_uxst() error message in caller - Revert "BUG/MINOR: peers: set the proxy's name to the peers section name" - DEBUG: fd: split the fd check - MEDIUM: resolvers: continue startup if network is unavailable - BUG/MINOR: fd: always remove late updates when freeing fd_updt[] - MINOR: cli: emit a warning when _getsocks was used more than once - BUG/MINOR: mworker: PROC_O_LEAVING used but not updated - Revert "MINOR: cli: emit a warning when _getsocks was used more than once" - MINOR: cli: warning on _getsocks when socket were closed - BUG/MEDIUM: mux-quic: fix missing EOI flag to prevent streams leaks - MINOR: quic: Congestion control architecture refactoring - MEDIUM: quic: Cubic congestion control algorithm implementation - MINOR: quic: New "quic-cc-algo" bind keyword - BUG/MINOR: quic: loss time limit variable computed but not used - MINOR: quic: Stop looking for packet loss asap - BUG/MAJOR: quic: Useless resource intensive loop qc_ackrng_pkts() - MINOR: quic: Send packets as much as possible from qc_send_app_pkts() - BUG/MEDIUM: queue/threads: limit the number of entries dequeued at once - MAJOR: threads/plock: update the embedded library - MINOR: thread: provide an alternative to pthread's rwlock - DEBUG: tools: provide a tree dump function for ebmbtrees as well - MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups - BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions - BUG/MINOR: mux-quic: prevent crash if conn released during IO callback - CLEANUP: mux-quic: remove useless app_ops is_active callback - BUG/MINOR: mux-quic: do not free conn if attached streams - MINOR: mux-quic: save proxy instance into qcc - MINOR: mux-quic: use timeout server for backend conns - MEDIUM: mux-quic: adjust timeout refresh - MINOR: mux-quic: count in-progress requests - MEDIUM: mux-quic: implement http-keep-alive timeout - MINOR: peers: Add a warning about incompatible SSL config for the local peer - MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer - BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload - BUG/MINOR: peers: Use right channel flag to consider the peer as connected - BUG/MEDIUM: dns: Properly initialize new DNS session - BUG/MINOR: backend: Don't increment conn_retries counter too early - MINOR: server: Constify source server to copy its settings - REORG: server: Export srv_settings_cpy() function - BUG/MEDIUM: proxy: Perform a custom copy for default server settings - BUG/MINOR: quic: Missing in flight ack eliciting packet counter decrement - BUG/MEDIUM: quic: Floating point exception in cubic_root() - MINOR: h3: support HTTP request framing state - MINOR: mux-quic: refresh timeout on frame decoding - MINOR: mux-quic: refactor refresh timeout function - MEDIUM: mux-quic: implement http-request timeout - BUG/MINOR: quic: Avoid sending truncated datagrams - BUG/MINOR: ring/cli: fix a race condition between the writer and the reader - BUG/MEDIUM: sink: Set the sink ref for forwarders created during ring parsing - BUG/MINOR: sink: fix a race condition between the writer and the reader - BUG/MINOR: quic: do not reject datagrams matching minimum permitted size - MINOR: quic: Add two new stats counters for sendto() errors - BUG/MINOR: quic: Missing Initial packet dropping case - MINOR: quic: explicitely ignore sendto error - BUG/MINOR: quic: adjust errno handling on sendto - BUG/MEDIUM: quic: break out of the loop in quic_lstnr_dghdlr - MINOR: threads: report the number of thread groups in build options - MINOR: config: automatically preset MAX_THREADS based on MAX_TGROUPS - BUILD: SSL: allow to pass additional configure args to QUICTLS - CI: enable weekly "m32" builds on x86_64 - CLEANUP: assorted typo fixes in the code and comments - BUG/MEDIUM: fix DH length when EC key is used - REGTESTS: ssl: adopt tests to OpenSSL-3.0.N - REGTESTS: ssl: adopt tests to OpenSSL-3.0.N - REGTESTS: ssl: fix grep invocation to use extended regex in ssl_generate_certificate.vtc - BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h	2022-08-07 17:28:59 +02:00
Willy Tarreau	2200a9caef	[RELEASE] Released version 2.7-dev2 ... Released version 2.7-dev2 with the following main changes : - BUG/MINOR: qpack: fix build with QPACK_DEBUG - MINOR: h3: handle errors on HEADERS parsing/QPACK decoding - BUG/MINOR: qpack: abort on dynamic index field line decoding - MINOR: qpack: properly handle invalid dynamic table references - MINOR: task: Add tasklet_wakeup_after() - BUG/MINOR: quic: Dropped packets not counted (with RX buffers full) - MINOR: quic: Add new stats counter to diagnose RX buffer overrun - MINOR: quic: Duplicated QUIC_RX_BUFSZ definition - MINOR: quic: Improvements for the datagrams receipt - CLEANUP: h2: Typo fix in h2_unsubcribe() traces - MINOR: quic: Increase the QUIC connections RX buffer size (upto 64Kb) - CLEANUP: mux-quic: adjust comment on qcs_consume() - MINOR: ncbuf: implement ncb_is_fragmented() - BUG/MINOR: mux-quic: do not signal FIN if gap in buffer - MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD - BUG/MEDIUM: ssl/fd: unexpected fd close using async engine - MINOR: tinfo: make tid temporarily still reflect global ID - CLEANUP: config: remove unused proc_mask() - MINOR: debug: remove mask support from "debug dev sched" - MEDIUM: task: add and preset a thread ID in the task struct - MEDIUM: task/debug: move the ->thread_mask integrity checks to ->tid - MAJOR: task: use t->tid instead of ffsl(t->thread_mask) to take the thread ID - MAJOR: task: replace t->thread_mask with 1<<t->tid when thread mask is needed - CLEANUP: task: remove thread_mask from the struct task - MEDIUM: applet: only keep appctx_new_*() and drop appctx_new() - MEDIUM: task: only keep task_new_*() and drop task_new() - MINOR: applet: always use task_new_on() on applet creation - MEDIUM: task: remove TASK_SHARED_WQ and only use t->tid - MINOR: task: replace task_set_affinity() with task_set_thread() - CLEANUP: task: remove the unused task_unlink_rq() - CLEANUP: task: remove the now unused TASK_GLOBAL flag - MINOR: task: make rqueue_ticks atomic - MEDIUM: task: move the shared runqueue to one per thread - MEDIUM: task: replace the global rq_lock with a per-rq one - MINOR: task: remove grq_total and use rq_total instead - MINOR: task: replace global_tasks_mask with a check for tree's emptiness - MEDIUM: task: use regular eb32 trees for the run queues - MEDIUM: queue: revert to regular inter-task wakeups - MINOR: thread: make wake_thread() take care of the sleeping threads mask - MINOR: thread: move the flags to the shared cache line - MINOR: thread: only use atomic ops to touch the flags - MINOR: poller: centralize poll return handling - MEDIUM: polling: make update_fd_polling() not care about sleeping threads - MINOR: poller: update_fd_polling: wake a random other thread - MEDIUM: thread: add a new per-thread flag TH_FL_NOTIFIED to remember wakeups - MEDIUM: tasks/fd: replace sleeping_thread_mask with a TH_FL_SLEEPING flag - MINOR: tinfo: add the tgid to the thread_info struct - MINOR: tinfo: replace the tgid with tgid_bit in tgroup_info - MINOR: tinfo: add the mask of enabled threads in each group - MINOR: debug: use ltid_bit in ha_thread_dump() - MINOR: wdt: use ltid_bit in wdt_handler() - MINOR: clock: use ltid_bit in clock_report_idle() - MINOR: thread: use ltid_bit in ha_tkillall() - MINOR: thread: add a new all_tgroups_mask variable to know about active tgroups - CLEANUP: thread: remove thread_sync_release() and thread_sync_mask - MEDIUM: tinfo: add a dynamic thread-group context - MEDIUM: thread: make stopping_threads per-group and add stopping_tgroups - MAJOR: threads: change thread_isolate to support inter-group synchronization - MINOR: thread: add is_thread_harmless() to know if a thread already is harmless - MINOR: debug: mark oneself harmless while waiting for threads to finish - MINOR: wdt: do not rely on threads_to_dump anymore - MEDIUM: debug: make the thread dumper not rely on a thread mask anymore - BUILD: debug: fix build issue on clang with previous commit - BUILD: debug: re-export thread_dump_state - BUG/MEDIUM: threads: fix incorrect thread group being used on soft-stop - BUG/MEDIUM: thread: check stopping thread against local bit and not global one - MINOR: proxy: use tg->threads_enabled in hard_stop() to detect stopped threads - BUILD: Makefile: Add Lua 5.4 autodetect - CI: re-enable gcc asan builds - MEDIUM: mworker: set the iocb of the socketpair without using fd_insert() - MINOR: fd: Add BUG_ON checks on fd_insert() - CLEANUP: mworker: rename mworker_pipe to mworker_sockpair - CLEANUP: mux-quic: do not export qc_get_ncbuf - REORG: mux-quic: reorganize flow-control fields - MINOR: mux-quic: implement accessor for sedesc - MEDIUM: mux-quic: refactor streams opening - MINOR: mux-quic: rename qcs flag FIN_RECV to SIZE_KNOWN - MINOR: mux-quic: emit FINAL_SIZE_ERROR on invalid STREAM size - BUG/MINOR: peers/config: always fill the bind_conf's argument - BUG/MEDIUM: peers/config: properly set the thread mask - CLEANUP: bwlim: Set pointers to NULL when memory is released - BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule - BUG/MINOR: http-act: Properly generate 103 responses when several rules are used - BUG/MEDIUM: thread: mask stopping_threads with threads_enabled when checking it - CLEANUP: thread: also remove a thread's bit from stopping_threads on stop - BUG/MINOR: peers: fix possible NULL dereferences at config parsing - BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo - MINOR: http: Add function to get port part of a host - MINOR: http: Add function to detect default port - BUG/MEDIUM: h1: Improve authority validation for CONNCET request - MINOR: http-htx: Use new HTTP functions for the scheme based normalization - BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream - REGTEESTS: filters: Fix CONNECT request in random-forwarding script - MEDIUM: mworker/systemd: send STATUS over sd_notify - BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer - BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state - BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send - MEDIUM: epoll: don't synchronously delete migrated FDs - BUILD: debug: silence warning on gcc-5 - BUILD: http: silence an uninitialized warning affecting gcc-5 - BUG/MEDIUM: mux-quic: fix server chunked encoding response - REORG: mux-quic: rename stream initialization function - MINOR: mux-quic: rename stream purge function - MINOR: mux-quic: add traces on frame parsing functions - MINOR: mux-quic: implement qcs_alert() - MINOR: mux-quic: filter send/receive-only streams on frame parsing - MINOR: mux-quic: do not ack STREAM frames on unrecoverable error - MINOR: mux-quic: support stream opening via MAX_STREAM_DATA - MINOR: mux-quic: define basic stream states - MINOR: mux-quic: use stream states to mark as detached - MEDIUM: mux-quic: implement RESET_STREAM emission - MEDIUM: mux-quic: implement STOP_SENDING handling - BUG/MEDIUM: debug: fix possible hang when multiple threads dump at once - BUG/MINOR: quic: fix closing state on NO_ERROR code sent - CLEANUP: quic: clean up include on quic_frame-t.h - MINOR: quic: define a generic QUIC error type - MINOR: mux-quic: support app graceful shutdown - MINOR: mux-quic/h3: prepare CONNECTION_CLOSE on release - MEDIUM: quic: send CONNECTION_CLOSE on released MUX - CLEANUP: mux-quic: move qc_release() - MINOR: mux-quic: send one last time before release - MINOR: h3: store control stream in h3c - MINOR: h3: implement graceful shutdown with GOAWAY - BUG/MINOR: threads: produce correct global mask for tgroup > 1 - BUG/MEDIUM: cli/threads: make "show threads" more robust on applets - BUG/MINOR: thread: use the correct thread's group in ha_tkillall() - BUG/MINOR: debug: enter ha_panic() only once - BUG/MEDIUM: debug: fix parallel thread dumps again - MINOR: cli/streams: show a stream's tgid next to its thread ID - DEBUG: cli: add a new "debug dev deadlock" expert command - MINOR: cli/activity: add a thread number argument to "show activity" - CLEANUP: applet: remove the obsolete command context from the appctx - MEDIUM: config: remove deprecated "bind-process" directives from frontends - MEDIUM: config: remove the "process" keyword on "bind" lines - MINOR: listener/config: make "thread" always support up to LONGBITS - CLEANUP: fd: get rid of the __GET_{NEXT,PREV} macros - MEDIUM: debug/threads: make the lock debugging take tgroups into account - MEDIUM: proto: stop protocols under thread isolation during soft stop - MEDIUM: poller: program the update in fd_update_events() for a migrated FD - MEDIUM: poller: disable thread-groups for poll() and select() - MINOR: thread: remove MAX_THREADS limitation - MEDIUM: cpu-map: replace the process number with the thread group number - MINOR: mworker/threads: limit the mworker sockets to group 1 - MINOR: cli/threads: always bind CLI to thread group 1 - MINOR: fd/thread: get rid of thread_mask() - MEDIUM: task/thread: move the task shared wait queues per thread group - MINOR: task: move the niced_tasks counter to the thread group context - DOC: design: add some thoughts about how to handle the update_list - MEDIUM: conn: make conn_backend_get always scan the same group - MAJOR: fd: remove pending updates upon real close - MEDIUM: fd/poller: make the update-list per-group - MINOR: fd: delete unused updates on close() - MINOR: fd: make fd_insert() apply the thread mask itself - MEDIUM: fd: add the tgid to the fd and pass it to fd_insert() - MINOR: cli/fd: show fd's tgid and refcount in "show fd" - MINOR: fd: add functions to manipulate the FD's tgid - MINOR: fd: add fd_get_running() to atomically return the running mask - MAJOR: fd: grab the tgid before manipulating running - MEDIUM: fd/poller: turn polled_mask to group-local IDs - MEDIUM: fd/poller: turn update_mask to group-local IDs - MEDIUM: fd/poller: turn running_mask to group-local IDs - MINOR: fd: make fd_clr_running() return the previous value instead - MEDIUM: fd: make thread_mask now represent group-local IDs - MEDIUM: fd: make fd_insert() take local thread masks - MEDIUM: fd: make fd_insert/fd_delete atomically update fd.tgid - MEDIUM: fd: quit fd_update_events() when FD is closed - MEDIUM: thread: change thread_resolve_group_mask() to return group-local values - MEDIUM: listener: switch bind_thread from global to group-local - MINOR: fd: add fd_reregister_all() to deal with boot-time FDs - MEDIUM: fd: support stopping FDs during starting - MAJOR: pollers: rely on fd_reregister_all() at boot time - MAJOR: poller: only touch/inspect the update_mask under tgid protection - MEDIUM: fd: support broadcasting updates for foreign groups in updt_fd_polling - CLEANUP: threads: remove the now unused all_threads_mask and tid_bit - MINOR: config: change default MAX_TGROUPS to 16 - BUG/MEDIUM: tools: avoid calling dlsym() in static builds	2022-07-16 17:17:22 +02:00
Willy Tarreau	f9de4e9fae	[RELEASE] Released version 2.7-dev1 ... Released version 2.7-dev1 with the following main changes : - BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails - BUG/MINOR: ssl_ckch: Free error msg if commit changes on a CA/CRL entry fails - BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified - BUG/MEDIUM: ssl_ckch: Don't delete CA/CRL entry if it is being modified - BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry - BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a CA/CRL entry - BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases - BUG/MEDIUM: ssl_ckch: Rework 'commit ssl ca-file' to handle full buffer cases - BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases - BUG/MEDIUM: httpclient: Don't remove HTX header blocks before duplicating them - BUG/MEDIUM: httpclient: Rework CLI I/O handler to handle full buffer cases - MEDIUM: httpclient: Don't close CLI applet at the end of a response - MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs - CLEANUP: Re-apply xalloc_size.cocci (2) - REGTESTS: abortonclose: Add a barrier to not mix up log messages - REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients - CLEANUP: ssl_ckch: Use corresponding enum for commit_cacrlfile_ctx.cafile_type - MINOR: ssl_ckch: Simplify I/O handler to commit changes on CA/CRL entry - BUG/MINOR: ssl_ckch: Use right type for old entry in show_crlfile_ctx - BUG/MINOR: ssl_ckch: Dump CRL transaction only once if show command yield - BUG/MINOR: ssl_ckch: Dump CA transaction only once if show command yield - BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield - BUG/MINOR: ssl_ckch: Init right field when parsing "commit ssl crl-file" cmd - CLEANUP: ssl_ckch: Remove unused field in commit_cacrlfile_ctx structure - MINOR: ssl_ckch: Simplify structure used to commit changes on CA/CRL entries - MINOR: ssl_ckch: Remove service context for "set ssl cert" command - MINOR: ssl_ckch: Remove service context for "set ssl ca-file" command - MINOR: ssl_ckch: Remove service context for "set ssl crl-file" command - BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler - BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cafile I/O handler - BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_crlfile I/O handler - BUILD: ssl_ckch: Fix build error about a possible uninitialized value - BUG/MINOR: ssl_ckch: Fix another possible uninitialized value - REGTESTS: http_abortonclose: Extend supported versions - REGTESTS: restrict_req_hdr_names: Extend supported versions - MINOR: connection: support HTTP/3.0 for smp_*_http_major fetch - MINOR: h3: add h3c pointer into h3s instance - MINOR: mux-quic: simplify decode_qcs API - MINOR: mux-quic/h3: adjust demuxing function return values - BUG/MINOR: h3: fix return value on decode_qcs on error - BUILD: quic: fix anonymous union for gcc-4.4 - BUILD: compiler: implement unreachable for older compilers too - DEV: tcploop: reorder options in the usage message - DEV: tcploop: make the current address the default address - DEV: tcploop: make it possible to change the target address of a connect() - DEV: tcploop: factor out the socket creation - DEV: tcploop: permit port 0 to ease handling of default options - DEV: tcploop: add a new "bind" command to bind to ip/port. - DEV: tcploop: add minimal UDP support - BUG/MINOR: trace: Test server existence for health-checks to get proxy - BUG/MINOR: checks: Properly handle email alerts in trace messages - BUG/MEDIUM: mailers: Set the object type for check attached to an email alert - REGTESTS: healthcheckmail: Update the test to be functionnal again - REGTESTS: healthcheckmail: Relax health-check failure condition - BUG/MINOR: h3: fix incorrect BUG_ON assert on SETTINGS parsing - MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames - OPTIM: mux-h2: increase h2_settings_initial_window_size default to 64k - BUG/MINOR: h3: fix frame type definition - BUG/MEDIUM: h3: fix SETTINGS parsing - BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs - BUG/MINOR: server: do not enable DNS resolution on disabled proxies - BUG/MINOR: cli/stats: add missing trailing LF after "show info json" - DOC: design: update the notes on thread groups - BUG/MEDIUM: mux-quic: fix flow control connection Tx level - MINOR: mux-quic: complete BUG_ON on TX flow-control enforcing - BUG/MINOR: mux-quic: fix memleak on frames rejected by transport - BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration - CLEANUP: check: Remove useless tests on check's stream-connector - BUG/MEDIUM: stconn: Don't wakeup applet for send if it won't consume data - BUG/MEDIUM: cli: Notify cli applet won't consume data during request processing - BUG/MEDIUM: mux-quic: fix segfault on flow-control frame cleanup - MINOR: task: move profiling bit to per-thread - CLEANUP: quic: use task_new_on() for single-threaded tasks - MINOR: tinfo: remove the global thread ID bit (tid_bit) - CLEANUP: hlua: check for at least 2 threads on a task - MINOR: thread: get rid of MAX_THREADS_MASK - OPTIM: task: do not consult shared WQ when we're already full - DOC: design: update the task vs thread affinity requirements - MINOR: qpack: add comments and remove a useless trace - MINOR: qpack: reduce dependencies on other modules - BUG/MINOR: qpack: support header litteral name decoding - MINOR: qpack: add ABORT_NOW on unimplemented decoding - BUG/MINOR: h3/qpack: deal with too many headers - MINOR: qpack: improve decoding function - MINOR: qpack: implement standalone decoder tool - BUG/BUILD: h3: fix wrong label name - BUG/MINOR: quic: Stop hardcoding Retry packet Version field - MINOR: quic: Add several nonce and key definitions for Retry tag - BUG/MINOR: quic: Wrong PTO calculation - MINOR: quic: Parse long packet version from qc_parse_hd_form() - CLEANUP: quid: QUIC draft-28 no more supported - MEDIUM: quic: Add QUIC v2 draft support - MINOR: quic: Released QUIC TLS extension for QUIC v2 draft - MEDIUM: quic: Compatible version negotiation implementation (draft-08) - CLEANUP: quic: Remove any reference to boringssl - BUG/MINOR: task: fix thread assignment in tasklet_kill() - BUG/MEDIUM: stream: Properly handle destructive client connection upgrades - MINOR: stream: Rely on stconn flags to abort stream destructive upgrade - CLEANUP: stconn: Don't expect to have no sedesc on detach - BUG/MINOR: log: Properly test connection retries to fix dontlog-normal option - MINOR: hlua: don't dump empty entries in hlua_traceback() - MINOR: hlua: add a new hlua_show_current_location() function - MEDIUM: debug: add a tainted flag when a shared library is loaded - MEDIUM: debug: detect redefinition of symbols upon dlopen() - BUILD: quic: Wrong HKDF label constant variable initializations - BUG/MINOR: quic: Unexpected half open connection counter wrapping - BUG/MINOR: quic_stats: Duplicate "quic_streams_data_blocked_bidi" field name - BUG/MINOR: quic: purge conn Rx packet list on release - BUG/MINOR: quic: free rejected Rx packets - BUG/MINOR: qpack: abort on dynamic index field line decoding - BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list - REGTESTS: ssl: add the same cert for client/server - BUG/MINOR: quic: Acknowledgement must be forced during handshake - MINOR: quic: Dump version_information transport parameter - BUG/MEDIUM: mworker: use default maxconn in wait mode - MINOR: intops: add a function to return a valid bit position from a mask - TESTS: add a unit test for one_among_mask() - BUILD: ssl_ckch: fix "maybe-uninitialized" build error on gcc-9.4 + ARM - BUG/MINOR: ssl: Do not look for key in extra files if already in pem - BUG/MINOR: quic: Missing acknowledgments for trailing packets - BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created - BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch - MINOR: freq_ctr: Add a function to get events excess over the current period - BUG/MINOR: stream: only free the req/res captures when set - CLEANUP: pool/tree-wide: remove suffix "_pool" from certain pool names - MEDIUM: debug: improve DEBUG_MEM_STATS to also report pool alloc/free - BUG/MINOR: quic: Wrong reuse of fulfilled dgram RX buffer - BUG/MAJOR: quic: Big RX dgrams leak when fulfilling a buffer - BUG/MAJOR: quic: Big RX dgrams leak with POST requests - BUILD: quic+h3: 32-bit compilation errors fixes - MEDIUM: bwlim: Add support of bandwith limitation at the stream level	2022-06-24 22:09:05 +02:00
Willy Tarreau	29698e39ed	[RELEASE] Released version 2.7-dev0 ... Released version 2.7-dev0 with the following main changes : - MINOR: version: it's development again	2022-05-31 17:05:27 +02:00
Willy Tarreau	a1efc048bf	[RELEASE] Released version 2.6.0 ... Released version 2.6.0 with the following main changes : - DOC: Fix formatting in configuration.txt to fix dconv - CLEANUP: tcpcheck: Remove useless test on the stream-connector in tcpcheck_main - CLEANUP: muxes: Consider stream's sd as defined in .show_fd callback functions - MINOR: quic: Ignore out of packet padding. - CLEANUP: quic: Useless QUIC_CONN_TX_BUF_SZ definition - CLEANUP: quic: No more used handshake output buffer - MINOR: quic: QUIC transport parameters split. - MINOR: quic: Transport parameters dump - DOC: quic: Update documentation for QUIC Retry - MINOR: quic: Tunable "max_idle_timeout" transport parameter - MINOR: quic: Tunable "initial_max_streams_bidi" transport parameter - MINOR: quic: Clarifications about transport parameters value - MINOIR: quic_stats: add QUIC connection errors counters - BUG/MINOR: quic: Largest RX packet numbers mixing - MINOR: quic_stats: Add transport new counters (lost, stateless reset, drop) - DOC: quic: Documentation update for QUIC - MINOR: quic: Connection TX buffer setting renaming. - MINOR: h3: Add a statistics module for h3 - MINOR: quic: Send STOP_SENDING frames if mux is released - MINOR: quic: Do not drop packets with RESET_STREAM frames - BUG/MINOR: qpack: fix buffer API usage on prefix integer encoding - BUG/MINOR: qpack: support bigger prefix-integer encoding - BUG/MINOR: h3: do not report bug on unknown method - SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs - SCRIPTS: make publish-release try to launch make-releases-json - MINOR: htx: add an unchecked version of htx_get_head_blk() - BUILD: htx: use the unchecked version of htx_get_head_blk() where needed - BUILD: quic: use inttypes.h instead of stdint.h - DOC: internal: remove totally outdated diagrams - DOC: remove the outdated ROADMAP file - DOC: add maintainers for QUIC and HTTP/3 - MINOR: h3: define h3 trace module - MINOR: h3: add traces on frame recv - MINOR: h3: add traces on frame send - MINOR: h3: add traces on h3s init/end - EXAMPLES: remove completely outdated acl-content-sw.cfg - BUILD: makefile: reorder objects by build time - DOC: fix a few spelling mistakes in the docs - BUG/MEDIUM: peers/cli: fix "show peers" crash - CLEANUP: peers/cli: stop misusing the appctx local variable - CLEANUP: peers/cli: make peers_dump_peer() take an appctx instead of an stconn - BUG/MINOR: peers: set the proxy's name to the peers section name - MINOR: server: indicate when no address was expected for a server - BUG/MINOR: peers: detect and warn on init_addr/resolvers/check/agent-check - DOC: peers: indicate that some server settings are not usable - DOC: peers: clarify when entry expiration date is renewed. - DOC: peers: fix port number and addresses on new peers section format - DOC: gpc/gpt: add commments of gpc/gpt array definitions on stick tables. - DOC: install: update supported OpenSSL versions in the INSTALL doc - MINOR: ncbuf: adjust ncb_data with NCBUF_NULL - BUG/MINOR: h3: fix frame demuxing - BUG/MEDIUM: h3: fix H3_EXCESSIVE_LOAD when receiving H3 frame header only - BUG/MINOR: quic: Fix QUIC_EV_CONN_PRSAFRM event traces - CLEANUP: quic: remove useless check on local UNI stream reception - BUG/MINOR: qpack: do not consider empty enc/dec stream as error - DOC: intro: adjust the numbering of paragrams to keep the output ordered - MINOR: version: mention that it's LTS now.	2022-05-31 16:58:21 +02:00
Willy Tarreau	0edb9977b3	[RELEASE] Released version 2.6-dev12 ... Released version 2.6-dev12 with the following main changes : - CLEANUP: tools: Clean up non-QUIC error message handling in str2sa_range() - BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str - CLEANUP: tools: Crash if inet_ntop fails due to ENOSPC in sa2str - BUG/MEDIUM: mux-quic: adjust buggy proxy closing support - Revert "MINOR: quic: activate QUIC traces at compilation" - Revert "MINOR: mux-quic: activate qmux traces on stdout via macro" - CLEANUP: init: address a coverity warning about possible multiply overflow - BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols - MEDIUM: h1: enlarge the scope of accepted version chars with accept-invalid-http-request - BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function - BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections - BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section - BUG/MINOR: task: Don't defer tasks release when HAProxy is stopping - MINOR: h3: mark ncbuf as const on h3_b_dup - MINOR: mux-quic: do not alloc quic_stream_desc for uni remote stream - MINOR: mux-quic: delay cs_endpoint allocation - MINOR: mux-quic: add traces in qc_recv() - MINOR: mux-quic: adjust return value of decode_qcs - CLEANUP: h3: rename struct h3 -> h3c - CLEANUP: h3: rename uni stream type constants - BUG/MINOR: h3: prevent overflow when parsing SETTINGS - MINOR: h3: refactor h3_control_send() - MINOR: quic: support CONNECTION_CLOSE_APP emission - MINOR: mux-quic: disable read on CONNECTION_CLOSE emission - MINOR: h3: reject too big frames - MINOR: mux-quic: emit STREAM_STATE_ERROR in qcc_recv - BUG/MINOR: mux-quic: refactor uni streams TX/send H3 SETTINGS - MINOR: h3/qpack: use qcs as type in decode callbacks - MINOR: h3: define stream type - MINOR: h3: refactor uni streams initialization - MINOR: h3: check if frame is valid for stream type - MINOR: h3: define non-h3 generic parsing function - MEDIUM: quic: refactor uni streams RX - CLEANUP: h3: remove h3 uni tasklet - MINOR: h3: abort read on unknown uni stream - MINOR: h3: refactor SETTINGS parsing/error reporting - Revert "BUG/MINOR: task: Don't defer tasks release when HAProxy is stopping" - DOC: configuration: add a warning for @system-ca on bind - CLEANUP: init: address another coverity warning about a possible multiply overflow - BUG/MINOR: ssl/lua: use correctly cert_ext in CertCache.set() - BUG/MEDIUM: sample: Fix adjusting size in word converter - REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2) - CLEANUP: conn_stream: remove unneeded exclusion of RX_WAIT_EP from RXBLK_ANY - CLEANUP: conn_stream: rename the cs_endpoint's context to "conn" - MINOR: conn_stream: add new sets of functions to set/get endpoint flags - DEV: coccinelle: add cs_endp_flags.cocci - CLEANUP: conn_stream: apply cs_endp_flags.cocci tree-wide - DEV: coccinelle: add endp_flags.cocci - CLEANUP: conn_stream: apply endp_flags.cocci tree-wide - CLEANUP: conn_stream: rename the stream endpoint flags CS_EP_* to SE_FL_* - CLEANUP: conn_stream: rename the cs_endpoint's target to "se" - CLEANUP: conn_stream: rename cs_endpoint to sedesc (stream endpoint descriptor) - CLEANUP: applet: rename the sedesc pointer from "endp" to "sedesc" - CLEANUP: conn_stream: rename the conn_stream's endp to sedesc - CLEANUP: conn_stream: rename cs_app_* to sc_app_* - CLEANUP: conn_stream: tree-wide rename to stconn (stream connector) - CLEANUP: mux-h1: add and use h1s_sc() to retrieve the stream connector - CLEANUP: mux-h2: add and use h2s_sc() to retrieve the stream connector - CLEANUP: mux-fcgi: add and use fcgi_strm_sc() to retrieve the stream connector - CLEANUP: mux-pt: add and use pt_sc() to retrieve the stream connector - CLEANUP: stdesc: rename the stream connector ->cs field to ->sc - CLEANUP: stream: rename "csf" and "csb" to "scf" and "scb" - CLEANUP: stconn: tree-wide rename stream connector flags CS_FL_* to SC_FL_* - CLEANUP: stconn: tree-wide rename stconn states CS_ST/SB_* to SC_ST/SB_* - MINOR: check: export wake_srv_chk() - MINOR: conn_stream: test the various ops functions before calling them - MEDIUM: stconn: merge the app_ops and the data_cb fields - MINOR: applet: add new wrappers to put chk/blk/str/chr to channel from appctx - CLEANUP: applet: use applet_put*() everywhere possible - CLEANUP: stconn: rename cs_{i,o}{b,c} to sc_{i,o}{b,c} - CLEANUP: stconn: rename cs_{check,strm,strm_task} to sc_strm_* - CLEANUP: stconn: rename cs_conn() to sc_conn() - CLEANUP: stconn: rename cs_mux() to sc_mux_strm() - CLEANUP: stconn: rename cs_conn_mux() to sc_mux_ops() - CLEANUP: stconn: rename cs_appctx() to sc_appctx() - CLEANUP: stconn: rename __cs_endp_target() to __sc_endp() - CLEANUP: stconn: rename cs_get_data_name() to sc_get_data_name() - CLEANUP: stconn: rename cs_conn_*() to sc_conn_*() - CLEANUP: stconn: rename cs_conn_get_first() to conn_get_first_sc() - CLEANUP: stconn: rename cs_ep_set_error() to se_fl_set_error() - CLEANUP: stconn: make a few functions take a const argument - CLEANUP: stconn: use a single function to know if SC may send to SE - MINOR: stconn: consider CF_SHUTW for sc_is_send_allowed() - MINOR: stconn: remove calls to cs_done_get() - MEDIUM: stconn: always rely on CF_SHUTR in addition to cs_rx_blocked() - MEDIUM: stconn: remove SE_FL_RXBLK_SHUT - MINOR: stconn: rename SE_FL_RXBLK_CONN to SE_FL_APPLET_NEED_CONN - MEDIUM: stconn: take SE_FL_APPLET_NEED_CONN out of the RXBLK_ANY flags - CLEANUP: stconn: rename cs_rx_room_{blk,rdy} to sc_{need,have}_room() - CLEANUP: stconn: rename cs_rx_chan_{blk,rdy} to sc_{wont,will}_read() - CLEANUP: stconn: rename cs_rx_buff_{blk,rdy} to sc_{need,have}_buff() - MINOR: stconn: start to rename cs_rx_endp_{more,done}() to se_have_{no_,}more_data() - MINOR: stconn: add sc_is_recv_allowed() to check for ability to receive - CLEANUP: stconn: rename SE_FL_RX_WAIT_EP to SE_FL_HAVE_NO_DATA - MEDIUM: stconn: move the RXBLK flags to the stream connector - CLEANUP: stconn: rename SE_FL_WANT_GET to SE_FL_WILL_CONSUME - CLEANUP: stconn: remove cs_tx_blocked() and cs_tx_endp_ready() - CLEANUP: stconn: rename cs_{want,stop}_get() to se_{will,wont}_consume() - CLEANUP: stconn: rename cs_cant_get() to se_need_more_data() - CLEANUP: stconn: rename cs_{new,create,free,destroy}_* to sc_* - CLEANUP: stconn: rename remaining management functions from cs_* to sc_* - CLEANUP: stconn: rename cs{,_get}_{src,dst} to sc_* - CLEANUP: stconn: rename cs_{shut,chk}* to sc_* - CLEANUP: stconn: rename final state manipulation functions from cs_* to sc_* - CLEANUP: quic: drop the name "conn_stream" from the pool variable names - REORG: rename cs_utils.h to sc_strm.h - REORG: stconn: rename conn_stream.{c,h} to stconn.{c,h} - CLEANUP: muxes: rename "get_first_cs" to "get_first_sc" - DEV: flags: use "sc" for stream conns instead of "cs" - CLEANUP: check: rename all occurrences of stconn "cs" to "sc" - CLEANUP: connection: rename all occurrences of stconn "cs" to "sc" - CLEANUP: stconn: rename all occurrences of stconn "cs" to "sc" - CLEANUP: quic/h3: rename all occurrences of stconn "cs" to "sc" - CLEANUP: stream: rename all occurrences of stconn "cs" to "sc" - CLEANUP: promex: rename all occurrences of stconn "cs" to "sc" - CLEANUP: stats: rename all occurrences of stconn "cs" to "sc" - CLEANUP: cli: rename all occurrences of stconn "cs" to "sc" - CLEANUP: applet: rename all occurrences of stconn "cs" to "sc" - CLEANUP: cache: rename all occurrences of stconn "cs" to "sc" - CLEANUP: dns: rename all occurrences of stconn "cs" to "sc" - CLEANUP: spoe: rename all occurrences of stconn "cs" to "sc" - CLEANUP: hlua: rename all occurrences of stconn "cs" to "sc" - CLEANUP: log-forward: rename all occurrences of stconn "cs" to "sc" - CLEANUP: http-client: rename all occurrences of stconn "cs" to "sc" - CLEANUP: mux-fcgi: rename all occurrences of stconn "cs" to "sc" - CLEANUP: mux-h1: rename all occurrences of stconn "cs" to "sc" - CLEANUP: mux-h2: rename all occurrences of stconn "cs" to "sc" - CLEANUP: mux-pt: rename all occurrences of stconn "cs" to "sc" - CLEANUP: peers: rename all occurrences of stconn "cs" to "sc" - CLEANUP: sink: rename all occurrences of stconn "cs" to "sc" - CLEANUP: sslsock: remove only occurrence of local variable "cs" - CLEANUP: applet: rename appctx_cs() to appctx_sc() - CLEANUP: stream: rename stream_upgrade_from_cs() to stream_upgrade_from_sc() - CLEANUP: obj_type: rename OBJ_TYPE_CS to OBJ_TYPE_SC - CLEANUP: stconn: replace a few remaining occurrences of CS in comments or traces - DOC: internal: update the muxes doc to mention the stconn - CLEANUP: mux-quic: rename the "endp" field to "sd" - CLEANUP: mux-h1: rename the "endp" field to "sd" - CLEANUP: mux-h2: rename the "endp" field to "sd" - CLEANUP: mux-fcgi: rename the "endp" field to "sd" - CLEANUP: mux-pt: rename the "endp" field to "sd" - CLEANUP: stconn: rename a few "endp" arguments and variables to "sd" - MINOR: stconn: turn SE_FL_WILL_CONSUME to SE_FL_WONT_CONSUME - CLEANUP: stream: remove unneeded test on appctx during initialization - CLEANUP: stconn: remove the new unneeded SE_FL_APP_MASK - DEV: flags: fix "siet" shortcut name - DEV: flags: rename the "endp" shortcut to "sd" for "stream descriptor" - DEV: flags: reorder a few SC/SE flags - DOC: internal: add a description of the stream connectors and descriptors	2022-05-27 19:49:31 +02:00
Willy Tarreau	137c8fde78	[RELEASE] Released version 2.6-dev11 ... Released version 2.6-dev11 with the following main changes : - CI: determine actual LibreSSL version dynamically - BUG/MEDIUM: ncbuf: fix null buffer usage - MINOR: ncbuf: fix warnings for testing build - MEDIUM: http-ana: Add a proxy option to restrict chars in request header names - MEDIUM: ssl: Delay random generator initialization after config parsing - MINOR: ssl: Add 'ssl-propquery' global option - MINOR: ssl: Add 'ssl-provider' global option - CLEANUP: Add missing header to ssl_utils.c - CLEANUP: Add missing header to hlua_fcn.c - CLEANUP: Remove unused function hlua_get_top_error_string - BUILD: fix build warning on solaris based systems with __maybe_unused. - MINOR: tools: add get_exec_path implementation for solaris based systems. - BUG/MINOR: ssl: Fix crash when no private key is found in pem - CLEANUP: conn-stream: Remove cs_applet_shut declaration from header file - MINOR: applet: Prepare appctx to own the session on frontend side - MINOR: applet: Let the frontend appctx release the session - MINOR: applet: Change return value for .init callback function - MINOR: stream: Export stream_free() - MINOR: applet: Add appctx_init() helper fnuction - MINOR: applet: Add a function to finalize frontend appctx startup - MINOR: applet: Add function to release appctx on error during init stage - MEDIUM: dns: Refactor dns appctx creation - MEDIUM: spoe: Refactor SPOE appctx creation - MEDIUM: lua: Refactor cosocket appctx creation - MEDIUM: httpclient: Refactor http-client appctx creation - MINOR: sink: Add a ref to sink in the sink_forward_target structure - MEDIUM: sink: Refactor sink forwarder appctx creation - MINOR: peers: Add a ref to peers section in the peer structure - MEDIUM: peers: Refactor peer appctx creation - MINOR: applet: Add API to start applet on a thread subset - MEDIUM: applet: Add support for async appctx startup on a thread subset - MINOR: peers: Track number of applets run by thread - MEDIUM: peers: Balance applets across threads - MINOR: conn-stream/applet: Stop setting appctx as the endpoint context - CLEANUP: proxy: Remove dead code when parsing "http-restrict-req-hdr-names" option - REGTESTS: abortonclose: Fix some race conditions - MINOR: ssl: Add 'ssl-provider-path' global option - CLEANUP: http_ana: Make use of the return value of stream_generate_unique_id() - BUG/MINOR: spoe: Fix error handling in spoe_init_appctx() - CLEANUP: peers: Remove unreachable code in peer_session_create() - CLEANUP: httpclient: Remove useless test on ss_dst in httpclient_applet_init() - BUG/MEDIUM: quic: fix Rx buffering - OPTIM: quic: realign empty Rx buffer - BUG/MINOR: ncbuf: fix ncb_is_empty() - MINOR: ncbuf: refactor ncb_advance() - BUG/MINOR: mux-quic: update session's idle delay before stream creation - MINOR: h3: do not wait a complete frame for demuxing - MINOR: h3: flag demux as full on HTX full - MEDIUM: mux-quic: implement recv on io-cb - MINOR: mux-quic: remove qcc_decode_qcs() call in XPRT - MINOR: mux-quic: reorganize flow-control frames emission - MINOR: mux-quic: implement MAX_STREAM_DATA emission - MINOR: mux-quic: implement MAX_DATA emission - BUG/MINOR: mux-quic: support nul buffer with qc_free_ncbuf() - MINOR: mux-quic: free RX buf if empty - BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile() - BUG/MINOR: check: Reinit the buffer wait list at the end of a check - MEDIUM: check: No longer shutdown the connection in .wake callback function - REORG: check: Rename and export I/O callback function - MEDIUM: check: Use the CS to handle subscriptions for read/write events - BUG/MINOR: quic: break for error on sendto - MINOR: quic: abort on unlisted errno on sendto() - MINOR: quic: detect EBADF on sendto() - BUG/MEDIUM: quic: fix initialization for local/remote TPs - CLEANUP: quic: adjust comment/coding style for TPs init - BUG/MINOR: cfgparse: abort earlier in case of allocation error - MINOR: quic: Dump initial derived secrets - MINOR: quic_tls: Add quic_tls_derive_retry_token_secret() - MINOR: quic_tls: Add quic_tls_decrypt2() implementation - MINOR: quic: Retry implementation - MINOR: cfgparse: Update for "cluster-secret" keyword for QUIC Retry - MINOR: quic: Move quic_lstnr_dgram_dispatch() out of xprt_quic.c - BUILD: stats: Missing headers inclusions from stats.h - MINOR: quic_stats: Add a new stats module for QUIC - MINOR: quic: Attach proxy QUIC stats counters to the QUIC connection - BUG/MINOR: quic: Fix potential memory leak during QUIC connection allocations - MINOR: quic: QUIC stats counters handling - MINOR: quic: Add tune.quic.retry-threshold keyword - MINOR: quic: Dynamic Retry implementation - MINOR: quic/mux-quic: define CONNECTION_CLOSE send API - MINOR: mux-quic: emit FLOW_CONTROL_ERROR - MINOR: mux-quic: emit STREAM_LIMIT_ERROR - MINOR: mux-quic: close connection on error if different data at offset - BUG/MINOR: peers: fix error reporting of "bind" lines - CLEANUP: config: improve address parser error report for unmatched protocols - CLEANUP: config: provide cleare hints about unsupported QUIC addresses - MINOR: protocol: replace ctrl_type with xprt_type and clarify it - MINOR: listener: provide a function to process all of a bind_conf's arguments - MINOR: config: use the new bind_parse_args_list() to parse a "bind" line - CLEANUP: listener: add a comment about what the BC_SSL_O_* flags are for - MINOR: listener: add a new "options" entry in bind_conf - CLEANUP: listener: replace all uses of bind_conf->is_ssl with BC_O_USE_SSL - CLEANUP: listener: replace bind_conf->generate_cers with BC_O_GENERATE_CERTS - CLEANUP: listener: replace bind_conf->quic_force_retry with BC_O_QUIC_FORCE_RETRY - CLEANUP: listener: store stream vs dgram at the bind_conf level - MINOR: listener: detect stream vs dgram conflict during parsing - MINOR: listener: set the QUIC xprt layer immediately after parsing the args - MINOR: listener/ssl: set the SSL xprt layer only once the whole config is known - MINOR: connection: add flag MX_FL_FRAMED to mark muxes relying on framed xprt - MINOR: config: detect and report mux and transport incompatibilities - MINOR: listener: automatically select a QUIC mux with a QUIC transport - MINOR: listener: automatically enable SSL if a QUIC transport is found - BUG/MINOR: quic: Fixe a typo in qc_idle_timer_task() - BUG/MINOR: quic: Missing <conn_opening> stats counter decrementation - BUILD/MINOR: cpuset fix build for FreeBSD 13.1 - CI: determine actual OpenSSL version dynamically	2022-05-20 23:31:51 +02:00
Willy Tarreau	370332572b	[RELEASE] Released version 2.6-dev10 ... Released version 2.6-dev10 with the following main changes : - MINOR: ssl: ignore dotfiles when loading a dir w/ ca-file - MEDIUM: ssl: ignore dotfiles when loading a dir w/ crt - BUG/MINOR: ssl: Fix typos in crl-file related CLI commands - MINOR: compiler: add a new macro to set an attribute on an enum when possible - BUILD: stats: conditionally mark obsolete stats states as deprecated - BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation - BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings - BUILD: listener: shut report of possible null-deref in listener_accept() - BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-( - DOC: install: update gcc version requirements - BUILD: makefile: add -Wfatal-errors to the default flags - BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes). - BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket - BUG/MINOR: mux-h2: mark the stream as open before processing it not after - MINOR: mux-h2: report a trace event when failing to create a new stream - DOC: configuration: add the httpclient keywords to the global keywords index - MINOR: quic: Add a debug counter for sendto() errors - BUG/MINOR: quic: Dropped peer transport parameters - BUG/MINOR: quic: Wrong unit for ack delay for incoming ACK frames - MINOR: quic: Congestion controller event trace fix (loss) - MINOR: quic: Add correct ack delay values to ACK frames - MINOR: config: Add "cluster-secret" new global keyword - MINOR: quic-tls: Add quic_hkdf_extract_and_expand() for HKDF - MINOR: quic: new_quic_cid() code moving - MINOR: quic: Initialize stateless reset tokens with HKDF secrets - MINOR: qc_new_conn() rework for stateless reset - MINOR: quic: Stateless reset token copy to transport parameters - MINOR: quic: Send stateless reset tokens - MINOR: quic: Short packets always embed a trailing AEAD TAG - CLEANUP: quic: wrong use of eb*entry() macro - CLEANUP: quic: Useless use of pointer for quic_hkdf_extract() - CLEANUP: quic_tls: QUIC_TLS_IV_LEN defined two times - MINOR: ncbuf: define non-contiguous buffer - MINOR: ncbuf: complete API and define block interal abstraction - MINOR: ncbuf: optimize storage for the last gap - MINOR: ncbuf: implement insertion - MINOR: ncbuf: define various insertion modes - MINOR: ncbuf: implement advance - MINOR: ncbuf: write unit tests - BUG/MEDIUM: lua: fix argument handling in data removal functions - DOC/MINOR: fix typos in the lua-api document - BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized - MINOR: mux-h1: Add global option accpet payload for any HTTP/1.0 requests - CLEANUP: mux-h1: Fix comments and error messages for global options - MINOR: conn_stream: make cs_set_error() work on the endpoint instead - CLEANUP: mux-h1: always take the endp from the h1s not the cs - CLEANUP: mux-h2: always take the endp from the h2s not the cs - CLEANUP: mux-pt: always take the endp from the context not the cs - CLEANUP: mux-fcgi: always take the endp from the fstrm not the cs - CLEANUP: mux-quic: always take the endp from the qcs not the cs - CLEANUP: applet: use the appctx's endp instead of cs->endp - MINOR: conn_stream: add a pointer back to the cs from the endpoint - MINOR: mux-h1: remove the now unneeded h1s->cs - MINOR: mux-h2: make sure any h2s always has an endpoint - MINOR: mux-h2: remove the now unneeded conn_stream from the h2s - MINOR: mux-fcgi: make sure any stream always has an endpoint - MINOR: mux-fcgi: remove the now unneeded conn_stream from the fcgi_strm - MINOR: mux-quic: remove the now unneeded conn_stream from the qcs - MINOR: mux-pt: remove the now unneeded conn_stream from the context - CLEANUP: muxes: make mux->attach/detach take a conn_stream endpoint - MINOR: applet: replace cs_applet_shut() with appctx_shut() - MINOR: applet: add appctx_strm() and appctx_cs() to access common fields - CLEANUP: applet: remove the unneeded appctx->owner - CLEANUP: conn_stream: merge cs_new_from_{mux,applet} into cs_new_from_endp() - MINOR: ext-check: indicate the transport and protocol of a server - BUG/MEDIUM: mux-quic: fix a thinko in the latest cs/endpoint cleanup - MINOR: tools: improve error message accuracy in str2sa_range - MINOR: config: make sure never to mix dgram and stream protocols on a bind line - BUG/MINOR: ncbuf: fix coverity warning on uninit sz_data - MINOR: xprt_quic: adjust flow-control according to bufsize - MEDIUM: mux-quic/h3/hq-interop: use ncbuf for bidir streams - MEDIUM: mux-quic/h3/qpack: use ncbuf for uni streams - CLEANUP: mux-quic: remove unused fields for Rx - CLEANUP: quic: remove unused quic_rx_strm_frm	2022-05-14 16:05:50 +02:00
Willy Tarreau	e979796584	[RELEASE] Released version 2.6-dev9 ... Released version 2.6-dev9 with the following main changes : - MINOR: mux-quic: support full request channel buffer - BUG/MINOR: h3: fix parsing of unknown frame type with null length - CLEANUP: backend: make alloc_{bind,dst}_address() idempotent - MEDIUM: stream: remove the confusing SF_ADDR_SET flag - MINOR: conn_stream: remove the now unused CS_FL_ADDR_*_SET flags - CLEANUP: protocol: make sure the connect_* functions always receive a dst - MINOR: connection: get rid of the CO_FL_ADDR_*_SET flags - MINOR: session: get rid of the now unused SESS_FL_ADDR_*_SET flags - CLEANUP: mux: Useless xprt_quic-t.h inclusion - MINOR: quic: Make the quic_conn be aware of the number of streams - BUG/MINOR: quic: Dropped retransmitted STREAM frames - BUG/MINOR: mux_quic: Dropped packet upon retransmission for closed streams - MEDIUM: httpclient: remove url2sa to use a more flexible parser - MEDIUM: httpclient: http-request rules for resolving - MEDIUM: httpclient: allow address and port change for resolving - CLEANUP: httpclient: remove the comment about resolving - MINOR: httpclient: handle unix and other socket types in dst - MINOR: httpclient: rename dash by dot in global option - MINOR: init: exit() after pre-check upon error - MINOR: httpclient: cleanup the error handling in init - MEDIUM: httpclient: hard-error when SSL is configured - MINOR: httpclient: allow to configure the ca-file - MINOR: httpclient: configure the resolvers section to use - MINOR: httpclient: allow ipv4 or ipv6 preference for resolving - DOC: configuration: httpclient global option - MINOR: conn-stream: Add mask from flags set by endpoint or app layer - BUG/MEDIUM: conn-stream: Only keep app layer flags of the endpoint on reset - BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message - BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified - DOC: config: Update doc for PR/PH session states to warn about rewrite failures - MINOR: resolvers: cleanup alert/warning in parse-resolve-conf - MINOR: resolvers: move the resolv.conf parser in parse_resolv_conf() - MINOR: resolvers: resolvers_new() create a resolvers with default values - BUILD: debug: unify the definition of ha_backtrace_to_stderr() - BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port] - MEDIUM: resolvers: create a "default" resolvers section at startup - DOC: resolvers: default resolvers section - BUG/MINOR: startup: usage() when no -cc arguments - BUG/MEDIUM: resolvers: make "show resolvers" properly yield - BUG/MEDIUM: cli: make "show cli sockets" really yield - BUG/MINOR: proxy/cli: don't enumerate internal proxies on "show backend" - BUG/MINOR: map/cli: protect the backref list during "show map" errors - BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init - BUG/MINOR: ssl/cli: fix "show ssl ca-file/crl-file" not to mix cli+ssl contexts - BUG/MINOR: ssl/cli: fix "show ssl ca-file <name>" not to mix cli+ssl contexts - BUG/MINOR: ssl/cli: fix "show ssl crl-file" not to mix cli+ssl contexts - BUG/MINOR: ssl/cli: fix "show ssl cert" not to mix cli+ssl contexts - CLEANUP: ssl/cli: do not loop on unknown states in "add ssl crt-list" handler - MINOR: applet: reserve some generic storage in the applet's context - CLEANUP: applet: make appctx_new() initialize the whole appctx - CLEANUP: stream/cli: take the "show sess" context definition out of the appctx - CLEANUP: stream/cli: stop using appctx->st2 for the dump state - CLEANUP: stream/cli: remove the unneeded init state from "show sess" - CLEANUP: stream/cli: remove the unneeded STATE_FIN state from "show sess" - CLEANUP: stream/cli: remove the now unneeded dump state from "show sess" - CLEANUP: proxy/cli: take the "show errors" context definition out of the appctx - CLEANUP: stick-table/cli: take the "show table" context definition out of the appctx - CLEANUP: stick-table/cli: stop using appctx->st2 for the dump state - CLEANUP: stick-table/cli: remove the unneeded STATE_INIT for "show table" - CLEANUP: map/cli: take the "show map" context definition out of the appctx - CLEANUP: map/cli: stop using cli.i0/i1 to store the generation numbers - CLEANUP: map/cli: stop using appctx->st2 for the dump state - CLEANUP: map/cli: always detach the backref from the list after "show map" - CLEANUP: peers/cli: take the "show peers" context definition out of the appctx - CLEANUP: peers/cli: stop using appctx->st2 for the dump state - CLEANUP: peers/cli: remove unneeded state STATE_INIT - CLEANUP: cli: initialize the whole appctx->ctx, not just the stats part - CLEANUP: promex: make the applet use its own context - CLEANUP: promex: stop using appctx->st2 - CLEANUP: stats/cli: take the "show stat" context definition out of the appctx - CLEANUP: stats/cli: stop using appctx->st2 - CLEANUP: hlua/cli: take the hlua_cli context definition out of the appctx - CLEANUP: ssl/cli: use a local context for "show cafile" - CLEANUP: ssl/cli: use a local context for "show crlfile" - CLEANUP: ssl/cli: use a local context for "show ssl cert" - CLEANUP: ssl/cli: use a local context for "commit ssl cert" - CLEANUP: ssl/cli: stop using appctx->st2 for "commit ssl cert" - CLEANUP: ssl/cli: use a local context for "set ssl cert" - CLEANUP: ssl/cli: use a local context for "set ssl cafile" - CLEANUP: ssl/cli: use a local context for "set ssl crlfile" - CLEANUP: ssl/cli: use a local context for "commit ssl {ca|crl}file" - CLEANUP: ssl/cli: stop using appctx->st2 for "commit ssl ca/crl" - CLEANUP: ssl/cli: stop using ctx.cli.i0/i1/p0 for "show tls-keys" - CLEANUP: ssl/cli: add a new "dump_entries" field to "show_keys_ref" - CLEANUP: ssl/cli: make "show tlskeys" not use appctx->st2 anymore - CLEANUP: ssl/cli: make "show ssl ocsp-response" not use cli.p0 anymore - CLEANUP: ssl/cli: make "{show|dump} ssl crtlist" use its own context - CLEANUP: ssl/cli: make "add ssl crtlist" use its own context - CLEANUP: ssl/cli: make "add ssl crtlist" not use st2 anymore - CLEANUP: dns: stop abusing the sink forwarder's context - CLEANUP: sink: use the generic context to store the forwarder's context - CLEANUP: activity/cli: make "show profiling" not use ctx.cli anymore - CLEANUP: debug/cli: make "debug dev fd" not use ctx.cli anymore - CLEANUP: debug/cli: make "debug dev memstats" not use ctx.cli anymore - CLEANUP: ring: pass the ring watch flags to ring_attach_cli(), not in ctx.cli - CLEANUP: ring/cli: use a locally-defined context instead of using ctx.cli - CLEANUP: resolvers/cli: make "show resolvers" use a locally-defined context - CLEANUP: resolvers/cli: remove the unneeded appctx->st2 from "show resolvers" - CLEANUP: cache/cli: make use of a locally defined context for "show cache" - CLEANUP: proxy/cli: make use of a locally defined context for "show servers" - CLEANUP: proxy/cli: get rid of appctx->st2 in "show servers" - CLEANUP: proxy/cli: make "show backend" only use the generic context - CLEANUP: cli: make "show fd" use its own context - CLEANUP: cli: make "show env" use its own context - CLEANUP: cli: simplify the "show cli sockets" I/O handler - CLEANUP: cli: make "show cli sockets" use its own context - CLEANUP: httpclient/cli: use a locally-defined context instead of ctx.cli - CLEANUP: httpclient: do not use the appctx.ctx anymore - CLEANUP: peers: do not use appctx.ctx anymore - CLEANUP: spoe: do not use appctx.ctx anymore - BUILD: applet: mark the CLI's generic variables as deprecated - BUILD: applet: mark the appctx's st2 variable as deprecated - CLEANUP: cache: take the context out of appctx.ctx - MEDIUM: lua: move the cosocket storage outside of appctx.ctx - MINOR: lua: move the tcp service storage outside of appctx.ctx - MINOR: lua: move the http service context out of appctx.ctx - CLEANUP: cli: move the status print context into its own context - CLEANUP: stats: rename the stats state values an mark the old ones deprecated - DOC: internal: document the new cleaner approach to the appctx - MINOR: tcp: socket translate TCP_KEEPIDLE for macOs equivalent - DOC: fix typo "ant" for "and" in INSTALL - CI: dynamically determine actual version of h2spec	2022-05-08 11:44:15 +02:00
Willy Tarreau	026fef98a0	[RELEASE] Released version 2.6-dev8 ... Released version 2.6-dev8 with the following main changes : - BUG/MINOR: quic: fix use-after-free with trace on ACK consume - BUG/MINOR: rules: Forbid captures in defaults section if used by a backend - BUG/MEDIUM: rules: Be able to use captures defined in defaults section - BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments - BUG/MINOR: http-act: make release_http_redir() more robust - BUG/MINOR: sample: add missing use_backend/use-server contexts in smp_resolve_args - MINOR: sample: don't needlessly call c_none() in sample_fetch_as_type() - MINOR: sample: make the bool type cast to bin - MEDIUM: backend: add new "balance hash <expr>" algorithm - MINOR: init: add global setting "fd-hard-limit" to bound system limits - BUILD: pollers: use an initcall to register the pollers - BUILD: xprt: use an initcall to register the transport layers - BUILD: thread: use initcall instead of a constructor - BUILD: http: remove the two unused constructors in rules and ana - CLEANUP: compression: move the default setting of maxzlibmem to defaults - MINOR: tree-wide: always consider EWOULDBLOCK in addition to EAGAIN - BUG/MINOR: connection: "connection:close" header added despite 'close-spread-time' - MINOR: fd: add functions to set O_NONBLOCK and FD_CLOEXEC - CLEANUP: tree-wide: use fd_set_nonblock() and fd_set_cloexec() - CLEANUP: tree-wide: remove 25 occurrences of unneeded fcntl.h - REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc - REGTESTS: webstats: remove unused stats socket in /tmp - MEDIUM: httpclient: disable SSL when the ca-file couldn't be loaded - BUG/MINOR: httpclient/lua: error when the httpclient_start() fails - BUG/MINOR: ssl: free the cafile entries on deinit - BUG/MINOR: ssl: memory leak when trying to load a directory with ca-file - MEDIUM: httpclient: re-enable the verify by default - BUG/MEDIUM: ssl/cli: fix yielding in show_cafile_detail - BUILD: compiler: properly distinguish weak and global symbols - MINOR: connection: Add way to disable active connection closing during soft-stop - BUG/MEDIUM: http-ana: Fix memleak in redirect rules with ignore-empty option - CLEANUP: Destroy `http_err_chunks` members during deinit - BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit() - MINOR: Call deinit_and_exit(0) for `haproxy -vv` - BUILD: fd: disguise the fd_set_nonblock/cloexec result - BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all() - MINOR: ssl: add a new global option "tune.ssl.hard-maxrecord" - CLEANUP: errors: also call deinit_errors_buffers() on deinit() - CLEANUP: chunks: release trash also in deinit - CLEANUP: deinit: release the pre-check callbacks - CLEANUP: deinit: release the config postparsers - CLEANUP: listeners/deinit: release accept queue tasklets on deinit - CLEANUP: connections/deinit: destroy the idle_conns tasks - BUG/MINOR: mux-quic: fix build in release mode - MINOR: mux-quic: adjust comment on emission function - MINOR: mux-quic: remove unused bogus qcc_get_stream() - BUG/MINOR: mux-quic: fix leak if cs alloc failure - MINOR: mux-quic: count local flow-control stream limit on reception - BUG/MINOR: h3: fix incomplete POST requests - BUG/MEDIUM: h3: fix use-after-free on mux Rx buffer wrapping - MINOR: mux-quic: partially copy Rx frame if almost full buf - MINOR: h3: change frame demuxing API - MINOR: mux-quic: add a app-layer context in qcs - MINOR: h3: implement h3 stream context - MINOR: h3: support DATA demux if buffer full - MINOR: quic: decode as much STREAM as possible - MINOR: quic: Improve qc_prep_pkts() flexibility - MINOR: quic: Prepare quic_frame struct duplication - MINOR: quic: Do not retransmit frames from coalesced packets - MINOR: quic: Add traces about TX frame memory releasing - MINOR: quic: process_timer() rework - MEDIUM: quic: New functions for probing rework - MEDIUM: quic: Retransmission functions rework - MEDIUM: quic: qc_requeue_nacked_pkt_tx_frms() rework - MINOR: quic: old data distinction for qc_send_app_pkt() - MINOR: quic: Mark packets as probing with old data - MEDIUM: quic: Mark copies of acknowledged frames as acknowledged - MEDIUM: quic: Enable the new datagram probing process - MINOR: quic: Do not send ACK frames when probing - BUG/MINOR: quic: Wrong returned status by qc_build_frms() - BUG/MINOR: quic: Avoid sending useless PADDING frame - BUG/MINOR: quic: Traces fix about remaining frames upon packet build failure - MINOR: quic: Wake up the mux to probe with new data - BUG/MEDIUM: quic: Possible crash on STREAM frame loss - BUG/MINOR: quic: Missing Initial packet length check - CLEANUP: quic: Rely on the packet length set by qc_lstnr_pkt_rcv() - MINOR: quic: Drop 0-RTT packets if not allowed - BUG/MINOR: httpclient/ssl: use the correct verify constant - BUG/MEDIUM: conn-stream: Don't erase endpoint flags on reset - BUG/MEDIUM: httpclient: Fix loop consuming HTX blocks from the response channel - BUG/MINOR: httpclient: Count metadata in size to transfer via htx_xfer_blks() - MINOR: httpclient: Don't use co_set_data() to decrement output - BUG/MINOR: conn_stream: do not confirm a connection from the frontend path - MEDIUM: quic: do not ACK packet with STREAM if MUX not present - MEDIUM: quic: do not ack packet with invalid STREAM - MINOR: quic: Drop 0-RTT packets without secrets - CLEANUP: quic: Remaining fprintf() debug trace - MINOR: quic: moving code for QUIC loss detection - BUG/MINOR: quic: Missing time threshold multiplifier for loss delay computation - CI: github actions: update LibreSSL to 3.5.2 - SCRIPTS: announce-release: add URL of dev packages	2022-04-30 14:17:51 +02:00
Willy Tarreau	3e69fcc240	[RELEASE] Released version 2.6-dev7 ... Released version 2.6-dev7 with the following main changes : - BUILD: calltrace: fix wrong include when building with TRACE=1 - MINOR: ssl: Use DH parameters defined in RFC7919 instead of hard coded ones - MEDIUM: ssl: Disable DHE ciphers by default - BUILD: ssl: Fix compilation with OpenSSL 1.0.2 - MINOR: mux-quic: split xfer and STREAM frames build - REORG: quic: use a dedicated module for qc_stream_desc - MINOR: quic-stream: use distinct tree nodes for quic stream and qcs - MINOR: quic-stream: add qc field - MEDIUM: quic: implement multi-buffered Tx streams - MINOR: quic-stream: refactor ack management - MINOR: quic: limit total stream buffers per connection - MINOR: mux-quic: implement immediate send retry - MINOR: cfg-quic: define tune.quic.conn-buf-limit - MINOR: ssl: Add 'show ssl providers' cli command and providers list in -vv option - REGTESTS: ssl: Update error messages that changed with OpenSSLv3.1.0-dev - BUG/MEDIUM: quic: Possible crash with released mux - BUG/MINOR: mux-quic: unsubscribe on release - BUG/MINOR: mux-quic: handle null timeout - BUG/MEDIUM: logs: fix http-client's log srv initialization - BUG/MINOR: mux-quic: remove dead code in qcs_xfer_data() - DEV: stream: Fix conn-streams dump in full stream message - CLEANUP: conn-stream: Rename cs_conn_close() and cs_conn_drain_and_close() - CLEANUP: conn-stream: Rename cs_applet_release() - MINOR: conn-stream: Rely on endpoint shutdown flags to shutdown an applet - BUG/MINOR: cache: Disable cache if applet creation fails - BUG/MINOR: backend: Don't allow to change backend applet - BUG/MEDIUM: conn-stream: Set back CS to RDY state when the appctx is created - MINOR: stream: Don't needlessly detach server endpoint on early client abort - MINOR: conn-stream: Make cs_detach_* private and use cs_destroy() from outside - MINOR: init: add the pre-check callback - MEDIUM: httpclient: change the init sequence - MEDIUM: httpclient/ssl: verify required - MINOR: httpclient/mworker: disable in the master process - MEDIUM: httpclient/ssl: verify is configurable and disabled by default - BUG/MAJOR: connection: Never remove connection from idle lists outside the lock - BUG/MEDIUM: mux-quic: fix stalled POST requets - BUG/MINOR: mux-quic: fix POST with abortonclose - MINOR: task: add a new task_instant_wakeup() function - MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks - DOC: remove my name from the config doc	2022-04-23 04:38:36 +02:00
Willy Tarreau	a8b1065b6b	[RELEASE] Released version 2.6-dev6 ... Released version 2.6-dev6 with the following main changes : - CLEANUP: connection: reduce the with of the mux dump output - CI: Update to actions/checkout@v3 - CI: Update to actions/cache@v3 - DOC: adjust QUIC instruction in INSTALL - BUG/MINOR: stats: define the description' background color in dark color scheme - BUILD: ssl: add USE_ENGINE and disable the openssl engine by default - BUILD: makefile: pass USE_ENGINE to cflags - BUILD: xprt-quic: replace ERR_func_error_string() with ERR_peek_error_func() - DOC: install: document the fact that SSL engines are not enabled by default - CI: github actions: disable -Wno-deprecated - BUILD: makefile: silence unbearable OpenSSL deprecation warnings - MINOR: sock: check configured limits at the sock layer, not the listener's - MINOR: connection: add a new flag CO_FL_FDLESS on fd-less connections - MINOR: connection: add conn_fd() to retrieve the FD only when it exists - MINOR: stream: only dump connections' FDs when they are valid - MINOR: connection: use conn_fd() when displaying connection errors - MINOR: connection: skip FD-based syscalls for FD-less connections - MEDIUM: connection: panic when calling FD-specific functions on FD-less conns - MINOR: mux-quic: properly set the flags and name fields - MINOR: connection: rearrange conn_get_src/dst to be a bit more extensible - MINOR: protocol: add get_src() and get_dst() at the protocol level - MINOR: quic-sock: provide a pair of get_src/get_dst functions - MEDIUM: ssl: improve retrieval of ssl_sock_ctx and SSL detection - MEDIUM: ssl: stop using conn->xprt_ctx to access the ssl_sock_ctx - MEDIUM: xprt-quic: implement get_ssl_sock_ctx() - MEDIUM: quic: move conn->qc into conn->handle - BUILD: ssl: fix build warning with previous changes to ssl_sock_ctx - BUILD: ssl: add an unchecked version of __conn_get_ssl_sock_ctx() - MINOR: ssl: refine the error testing for fc_err and fc_err_str - BUG/MINOR: sock: do not double-close the accepted socket on the error path - CI: cirrus: switch to FreeBSD-13.0 - MINOR: log: add '~' to frontend when the transport layer provides SSL - BUILD/DEBUG: lru: fix printf format in debug code - BUILD: peers: adjust some printf format to silence cppcheck - BUILD/DEBUG: hpack-tbl: fix format string in standalone debug code - BUILD/DEBUG: hpack: use unsigned int in printf format in debug code - BUILD: halog: fix some incorrect signs in printf formats for integers - BUG/MINOR: h3: fix build with DEBUG_H3 - BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent - BUG/MINOR: cache: do not display expired entries in "show cache" - BUG/MINOR: mux-h1: Don't release unallocated CS on error path - MINOR: applet: Make .init callback more generic - MINOR: conn-stream: Add flags to set the type of the endpoint - MEDIUM: applet: Set the appctx owner during allocation - MAJOR: conn-stream: Invert conn-stream endpoint and its context - REORG: Initialize the conn-stream by hand in cs_init() - MEDIUM: conn-stream: Add an endpoint structure in the conn-stream - MINOR: conn-stream: Move some CS flags to the endpoint - MEDIUM: conn-stream: Be able to pass endpoint to create a conn-stream - MEDIUM: conn-stream: Pre-allocate endpoint to create CS from muxes and applets - REORG: applet: Uninline appctx_new function - MAJOR: conn-stream: Share endpoint struct between the CS and the mux/applet - MEDIUM: conn-stream: Move remaning flags from CS to endpoint - MINOR: mux-pt: Rely on the endpoint instead of the conn-stream when possible - MINOR: conn-stream: Add ISBACK conn-stream flag - MINOR: conn-stream: Add header file with util functions related to conn-streams - MEDIUM: tree-wide: Use CS util functions instead of SI ones - MINOR: stream-int/txn: Move buffer for L7 retries in the HTTP transaction - CLEANUP: http-ana: Remove http_alloc_txn() function - MINOR: stream-int/stream: Move conn_retries counter in the stream - MINOR: stream: Simplify retries counter calculation - MEDIUM: stream-int/conn-stream: Move src/dst addresses in the conn-stream - MINOR: stream-int/conn-stream: Move half-close timeout in the conn-stream - MEDIUM: stream-int/stream: Use connect expiration instead of SI expiration - MINOR: stream-int/conn-stream: Report error to the CS instead of the SI - MEDIUM: conn-stream: Use endpoint error instead of conn-stream error - MINOR: channel: Use conn-streams as channel producer and consumer - MINOR: stream-int: Remove SI_FL_KILL_CON to rely on conn-stream endpoint only - MINOR: mux-h2/mux-fcgi: Fully rely on CS_EP_KILL_CONN - MINOR: stream-int: Remove SI_FL_NOLINGER/NOHALF to rely on CS flags instead - MINOR: stream-int: Remove SI_FL_DONT_WAKE to rely on CS flags instead - MINOR: stream-int: Remove SI_FL_INDEP_STR to rely on CS flags instead - MINOR: stream-int: Remove SI_FL_SRC_ADDR to rely on stream flags instead - CLEANUP: stream-int: Remove unused SI_FL_CLEAN_ABRT flag - MINOR: stream: Only save previous connection state for the server side - MEDIUM: stream-int: Move SI err_type in the stream - MEDIUM: stream-int/conn-stream: Move stream-interface state in the conn-stream - MINOR: stream-int/stream: Move si_retnclose() in the stream scope - MINOR: stream-int/backend: Move si_connect() in the backend scope - MINOR: stream-int/conn-stream: Move si_conn_ready() in the conn-stream scope - MINOR: conn-stream/connection: Move SHR/SHW modes in the connection scope - MEDIUM: conn-stream: Be prepared to fail to attach a cs to a mux - MEDIUM: stream-int/conn-stream: Handle I/O subscriptions in the conn-stream - MINOR: conn-stream: Rename CS functions dedicated to connections - MINOR: stream-int/conn-stream: Move si_shut* and si_chk* in conn-stream scope - MEDIUM: stream-int/conn-stream: Move si_ops in the conn-stream scope - MINOR: applet: Use the CS to register and release applets instead of SI - MINOR: connection: unconst mux's get_fist_cs() callback function - MINOR: stream-int/connection: Move conn_si_send_proxy() in the connection scope - REORG: stream-int: Export si_cs_recv(), si_cs_send() and si_cs_process() - REORG: stream-int: Move si_is_conn_error() in the header file - REORG: conn-stream: Move cs_shut* and cs_chk* in cs_utils - REORG: conn-stream: Move cs_app_ops in conn_stream.c - MINOR: stream-int-conn-stream: Move si_update_* in conn-stream scope - MINOR: stream-int/stream: Move si_update_both in stream scope - MEDIUM: conn-stream/applet: Add a data callback for applets - MINOR: stream-int/conn-stream: Move stream_int_read0() in the conn-stream scope - MINOR: stream-int/conn-stream: Move stream_int_notify() in the conn-stream scope - MINOR: stream-int/conn-stream: Move si_cs_io_cb() in the conn-stream scope - MINOR: stream-int/conn-stream: Move si_sync_recv/send() in conn-stream scope - MINOR: conn-stream: Move si_conn_cb in the conn-stream scope - MINOR: stream-int/conn-stream Move si_is_conn_error() in the conn-stream scope - MINOR: stream-int/conn-stream: Move si_alloc_ibuf() in the conn-stream scope - CLEANUP: stream-int: Remove unused SI functions - MEDIUM: stream-int/conn-stream: Move blocking flags from SI to CS - MEDIUM: stream-int/conn-stream: Move I/O functions to conn-stream - REORG: stream-int/conn-stream: Move remaining functions to conn-stream - MINOR: stream: Use conn-stream to report server error - MINOR: http-ana: Use CS to perform L7 retries - MEDIUM: stream: Don't use the stream-int anymore in process_stream() - MINOR: conn-stream: Remove the stream-interface from the conn-stream - DEV: flags: No longer dump SI flags - CLEANUP: tree-wide: Remove any ref to stream-interfaces - CLEANUP: conn-stream: Don't export internal functions - DOC: conn-stream: Add comments on functions of the new CS api - MEDIUM: check: Use a new conn-stream for each health-check run - CLEANUP: muxes: Remove MX_FL_CLEAN_ABRT flag - MINOR: conn-stream: Use a dedicated function to conditionally remove a CS - CLEANUP: conn-stream: rename cs_register_applet() to cs_applet_create() - MINOR: muxes: Improve show_fd callbacks to dump endpoint flags - MINOR: mux-h1: Rely on the endpoint instead of the conn-stream when possible - BUG/MINOR: quic: Avoid starting the mux if no ALPN sent by the client - BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak - BUILD: initcall: mark the __start_i_* symbols as weak, not global - BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side - BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive - MINOR: muxes: Don't expect to have a mux without connection in destroy callback - MINOR: muxes: Don't handle proto upgrade for muxes not supporting it - MINOR: muxes: Don't expect to call release function with no mux defined - MINOR: conn-stream: Use unsafe functions to get conn/appctx in cs_detach_endp - BUG/MEDIUM: mux-h1: Don't request more room on partial trailers - BUILD: http-client: Avoid dead code when compiled without SSL support - BUG/MINOR: mux-quic: prevent a crash in session_free on mux.destroy - BUG/MINOR: quic-sock: do not double free session on conn init failure - BUG/MINOR: quic: fix return value for error in start - MINOR: quic: emit CONNECTION_CLOSE on app init error - BUILD: sched: workaround crazy and dangerous warning in Clang 14 - BUILD: compiler: use a more portable set of asm(".weak") statements - BUG/MEDIUM: stream: do not abort connection setup too early - CLEANUP: extcheck: do not needlessly preset the server's address/port - MINOR: extcheck: fill in the server's UNIX socket address when known - BUG/MEDIUM: connection: Don't crush context pointer location if it is a CS - BUG/MEDIUM: quic: properly clean frames on stream free - BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added - BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags - MINOR: tcp_sample: clarifying samples support per os, for further expansion. - MINOR: tcp_sample: extend support for get_tcp_info to macOs. - SCRIPTS: announce-release: update the doc's URL - DOC: lua: update a few doc URLs - SCRIPTS: announce-release: add shortened links to pending issues	2022-04-16 12:15:47 +02:00
Willy Tarreau	d3b4cd11f7	[RELEASE] Released version 2.6-dev5 ... Released version 2.6-dev5 with the following main changes : - DOC: reflect H2 timeout changes - BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing - BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing - BUG/MINOR: log: Initialize the list element when allocating a new log server - BUG/MINOR: samples: add missing context names for sample fetch functions - MINOR: management: add some basic keyword dump infrastructure - MINOR: config: add a function to dump all known config keywords - MINOR: filters: extend flt_dump_kws() to dump to stdout - MINOR: services: extend list_services() to dump to stdout - MINOR: cli: add a new keyword dump function - MINOR: acl: add a function to dump the list of known ACL keywords - MINOR: samples: add a function to list register sample fetch keywords - MINOR: sample: list registered sample converter functions - MINOR: tools: add strordered() to check whether strings are ordered - MINOR: action: add a function to dump the list of actions for a ruleset - MINOR: config: alphanumerically sort config keywords output - MINOR: sample: alphanumerically sort sample & conv keyword dumps - MINOR: acl: alphanumerically sort the ACL dump - MINOR: cli: alphanumerically sort the dump of supported commands - MINOR: filters: alphabetically sort the list of filter names - MINOR: services: alphabetically sort service names - MEDIUM: httpclient/lua: be stricter with httpclient parameters - MINOR: ssl: split the cert commit io handler - MINOR: ssl: move the cert_exts and the CERT_TYPE enum - MINOR: ssl: simplify the certificate extensions array - MINOR: ssl: export ckch_inst_rebuild() - MINOR: ssl: add "crt" in the cert_exts array - MINOR: ssl/lua: CertCache.set() allows to update an SSL certificate file - BUILD: ssl/lua: CacheCert needs OpenSSL - DOC: lua: CertCache class documentation - BUG/MEDIUM: quic: do not use qcs from quic_stream on ACK parsing - MINOR: mux-quic: return qcs instance from qcc_get_qcs - MINOR: mux-quic: reorganize qcs free - MINOR: mux-quic: define release app-ops - BUG/MINOR: h3: release resources on close - BUG/MINOR: mux-quic: ensure to free all qcs on MUX release - CLEANUP: quic: complete comment on qcs_try_to_consume - MINOR: quic: implement stream descriptor for transport layer - MEDIUM: quic: move transport fields from qcs to qc_conn_stream - MEDIUM: mux-quic: remove qcs tree node - BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads - DOC: management: add missing dot in 9.4.1 - BUG/MAJOR: mux_pt: always report the connection error to the conn_stream - DOC: remove double blanks in configuration.txt - CI: github actions: update OpenSSL to 3.0.2 - BUG/MEDIUM: quic: Possible crash in ha_quic_set_encryption_secrets() - CLEANUP: quic: Remove all atomic operations on quic_conn struct - CLEANUP: quic: Remove all atomic operations on packet number spaces - MEDIUM: quic: Send ACK frames asap - BUG/MINOR: quic: Missing probing packets when coalescing - BUG/MINOR: quic: Discard Initial packet number space only one time - MINOR: quic: Do not display any timer value from process_timer() - BUG/MINOR: quic: Do not probe from an already probing packet number space - BUG/MINOR: quic: Non duplicated frames upon fast retransmission - BUG/MINOR: quic: Too much prepared retransmissions due to anti-amplification - MINOR: quic: Useless call to SSL_CTX_set_default_verify_paths() - MINOR: quic: Add traces about list of frames - BUG/MINOR: h3: Missing wait event struct field initialization - BUG/MINOR: quic: QUIC TLS secrets memory leak - BUG/MINOR: quic: Missing ACK range deallocations - BUG/MINOR: quic: Missing TX packet deallocations - CLEANUP: hpack: be careful about integer promotion from uint8_t - OPTIM: hpack: read 32 bits at once when possible. - MEDIUM: ssl: allow loading of a directory with the ca-file directive - BUG/MINOR: ssl: continue upon error when opening a directory w/ ca-file - MINOR: ssl: ca-file @system-ca loads the system trusted CA - DOC: configuration: add the ca-file changes - MINOR: sample: converter: Add add_item convertor - BUG/MINOR: ssl: handle X509_get_default_cert_dir() returning NULL - BUG/MINOR: ssl/cli: Remove empty lines from CLI output - MINOR: httpclient: enable request buffering - MEDIUM: httpclient: enable l7-retry - BUG/MINOR: httpclient: end callback in applet release - MINOR: quic: Add draining connection state. - MINOR: quic: Add closing connection state - BUG/MEDIUM: quic: ensure quic-conn survives to the MUX - CLEANUP: quic: use static qualifer on quic_close - CLEANUP: mux-quic: remove unused QC_CF_CC_RECV - BUG/MINOR: fix memleak on quic-conn streams cleaning - MINOR: mux-quic: factorize conn-stream attach - MINOR: mux-quic: adjust timeout to accelerate closing - MINOR: mux-quic: define is_active app-ops - MINOR: mux-quic: centralize send operations in qc_send - MEDIUM: mux-quic: report CO_FL_ERROR on send - MEDIUM: mux-quic: report errors on conn-streams - MEDIUM: quic: report closing state for the MUX - BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests - BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message - BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet - BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message - BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached - BUG/MINOR: http_client: Don't add input data on an empty request buffer - BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples - BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid - CLEANUP: mux-quic: remove uneeded TODO in qc_detach - BUG/MEDIUM: mux-quic: properly release conn-stream on detach - BUG/MINOR: quic: set the source not the destination address on accept() - BUG/MEDIUM: quic: Possible crash from quic_free_arngs() - MINOR: quic_tls: Add reusable cipher contexts to QUIC TLS contexts - MINOR: quic_tls: Stop hardcoding cipher IV lengths - CLEANUP: quic: Do not set any cipher/group from ssl_quic_initial_ctx() - MINOR: quic: Add short packet key phase bit values to traces - MINOR: quic_tls: Make key update use of reusable cipher contexts - BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set() - BUG/BUILD: opentracing: fixed OT_DEFINE variable setting - EXAMPLES: opentracing: refined shell scripts for testing filter performance - DOC: opentracing: corrected comments in function descriptions - CLEANUP: opentracing: removed unused function flt_ot_var_unset() - CLEANUP: opentracing: removed unused function flt_ot_var_get() - Revert "MINOR: opentracing: change the scope of the variable 'ot.uuid' from 'sess' to 'txn'" - MINOR: opentracing: only takes the variables lock on shared entries - CLEANUP: opentracing: added flt_ot_smp_init() function - CLEANUP: opentracing: added variable to store variable length - MINOR: opentracing: improved normalization of context variable names - DEBUG: opentracing: show return values of all functions in the debug output - CLEANUP: opentracing: added FLT_OT_PARSE_INVALID_enum enum - DEBUG: opentracing: display the contents of the err variable after setting - MAJOR: opentracing: reenable usage of vars to transmit opentracing context - Revert "BUILD: opentracing: display warning in case of using OT_USE_VARS at compile time" - MEDIUM: global: Add a "close-spread-time" option to spread soft-stop on time window	2022-04-09 11:31:40 +02:00
Willy Tarreau	0541c2b978	[RELEASE] Released version 2.6-dev4 ... Released version 2.6-dev4 with the following main changes : - BUG/MEDIUM: httpclient: don't consume data before it was analyzed - CLEANUP: htx: remove unused co_htx_remove_blk() - BUG/MINOR: httpclient: consume partly the blocks when necessary - BUG/MINOR: httpclient: remove the UNUSED block when parsing headers - BUG/MEDIUM: httpclient: must manipulate head, not first - REGTESTS: fix the race conditions in be2hex.vtc - BUG/MEDIUM: quic: Blocked STREAM when retransmitted - BUG/MAJOR: quic: Possible crash with full congestion control window - BUG/MINOR: httpclient/lua: stuck when closing without data - BUG/MEDIUM: applet: Don't call .release callback function twice - BUG/MEDIUM: cli/debug: Properly get the stream-int in all debug I/O handlers - BUG/MEDIUM: sink: Properly get the stream-int in appctx callback functions - DEV: udp: switch parser to getopt() instead of positional arguments - DEV: udp: add support for random packet corruption - MINOR: server: export server_parse_sni_expr() function - BUG/MINOR: httpclient: send the SNI using the host header - BUILD: httpclient: fix build without SSL - BUG/MINOR: server/ssl: free the SNI sample expression - BUG/MINOR: logs: fix logsrv leaks on clean exit - MINOR: actions: add new function free_act_rule() to free a single rule - BUG/MINOR: tcp-rules: completely free incorrect TCP rules on error - BUG/MINOR: http-rules: completely free incorrect TCP rules on error - BUG/MINOR: httpclient: only check co_data() instead of HTTP_MSG_DATA - BUG/MINOR: httpclient: process the response when received before the end of the request - BUG/MINOR: httpclient: CF_SHUTW_NOW should be tested with channel_is_empty() - CI: github actions: switch to LibreSSL-3.5.1 - BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf - BUG/MEDIUM: stream-int: do not rely on the connection error once established - BUG/MEDIUM: trace: avoid race condition when retrieving session from conn->owner - MEDIUM: mux-h2: slightly relax timeout management rules - BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts - BUG/MINOR: rules: Initialize the list element when allocating a new rule - BUG/MINOR: http-rules: Don't free new rule on allocation failure - DEV: coccinelle: Fix incorrect replacement in ist.cocci - CLEANUP: Reapply ist.cocci with `--include-headers-for-types --recursive-includes` - DEV: coccinelle: Add a new pattern to ist.cocci - CLEANUP: Reapply ist.cocci - REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ - MINOR: quic: Code factorization (TX buffer reuse) - CLEANUP: quic: "largest_acked_pn" pktns struc member moving - MEDIUM: quic: Limit the number of ACK ranges - MEDIUM: quic: Rework of the TX packets memory handling - BUG/MINOR: quic: Possible crash in parse_retry_token() - BUG/MINOR: quic: Possible leak in quic_build_post_handshake_frames() - BUG/MINOR: quic: Unsent frame because of qc_build_frms() - BUG/MINOR: mux-quic: Access to empty frame list from qc_send_frames() - BUG/MINOR: mux-quic: Missing I/O handler events initialization - BUG/MINOR: quic: Missing TX packet initializations - BUG/MINOR: quic: 1RTT packets ignored after mux was released - BUG/MINOR: quic: Incorrect peer address validation - BUG/MINOR: quic: Non initialized variable in quic_build_post_handshake_frames() - BUG/MINOR: quic: Wrong TX packet related counters handling - MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1 - DOC: config: Explictly add supported MQTT versions - MINOR: quic: Add traces about stream TX buffer consumption - MINOR: quic: Add traces in qc_set_timer() (scheduling) - CLEANUP: mux-quic: change comment style to not mess with git conflict - CLEANUP: mux-quic: adjust comment for coding-style - MINOR: mux-quic: complete trace when stream is not found - MINOR: mux-quic: add comments for send functions - MINOR: mux-quic: use shorter name for flow-control fields - MEDIUM: mux-quic: respect peer bidirectional stream data limit - MEDIUM: mux-quic: respect peer connection data limit - MINOR: mux-quic: support MAX_STREAM_DATA frame parsing - MINOR: mux-quic: support MAX_DATA frame parsing - BUILD: stream-int: avoid a build warning when DEBUG is empty - BUG/MINOR: quic: Wrong buffer length passed to generate_retry_token() - BUG/MINOR: tools: fix url2sa return value with IPv4 - MINOR: mux-quic: convert fin on push-frame as boolean - BUILD: quic: add missing includes - REORG: quic: use a dedicated quic_loss.c - MINOR: mux-quic: declare the qmux trace module - MINOR: mux-quic: replace printfs by traces - MINOR: mux-quic: add trace event for frame sending - MINOR: mux-quic: add trace event for qcs_push_frame - MINOR: mux-quic: activate qmux traces on stdout via macro - BUILD: qpack: fix unused value when not using DEBUG_HPACK - CLEANUP: qpack: suppress by default stdout traces - CLEANUP: h3: suppress by default stdout traces - BUG/MINOR: tools: url2sa reads too far when no port nor path	2022-03-26 08:31:33 +01:00
Willy Tarreau	bc8b7a14ff	[RELEASE] Released version 2.6-dev3 ... Released version 2.6-dev3 with the following main changes : - DEBUG: rename WARN_ON_ONCE() to CHECK_IF() - DEBUG: improve BUG_ON output message accuracy - DEBUG: implement 4 levels of choices between warn and crash. - DEBUG: add two new macros to enable debugging in hot paths - DEBUG: buf: replace some sensitive BUG_ON() with BUG_ON_HOT() - DEBUG: buf: add BUG_ON_HOT() to most buffer management functions - MINOR: channel: don't use co_set_data() to decrement output - DEBUG: channel: add consistency checks using BUG_ON_HOT() in some key functions - MINOR: conn-stream: Improve API to have safe/unsafe accessors - MEDIUM: tree-wide: Use unsafe conn-stream API when it is relevant - CLEANUP: stream-int: Make si_cs_send() function static - REORG: stream-int: Uninline si_sync_recv() and make si_cs_recv() private - BUG/MEDIUM: mux-fcgi: Don't rely on SI src/dst addresses for FCGI health-checks - BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks() - REGTESTS: fix the race conditions in normalize_uri.vtc - DEBUG: stream-int: Fix BUG_ON used to test appctx in si_applet_ops callbacks - BUILD: debug: fix build warning on older compilers around DEBUG_STRICT_ACTION - CLEANUP: connection: Indicate unreachability to the compiler in conn_recv_proxy - MINOR: connection: Transform safety check in PROXYv2 parsing into BUG_ON() - DOC: install: it's DEBUG_CFLAGS, not DEBUG, which is set to -g - DOC: install: describe the DEP variable - DOC: install: describe how to choose options used in the DEBUG variable - MINOR: queue: Replace if() + abort() with BUG_ON() - CLEANUP: adjust indentation in bidir STREAM handling function - MINOR: quic: simplify copy of STREAM frames to RX buffer - MINOR: quic: handle partially received buffered stream frame - MINOR: mux-quic: define flag for last received frame - BUG/MINOR: quic: support FIN on Rx-buffered STREAM frames - MEDIUM: quic: rearchitecture Rx path for bidirectional STREAM frames - REGTESTS: fix the race conditions in secure_memcmp.vtc - CLEANUP: stream: Remove useless tests on conn-stream in stream_dump() - BUILD: ssl: another build warning on LIBRESSL_VERSION_NUMBER - MINOR: quic: Ensure PTO timer is not set in the past - MINOR: quic: Post handshake I/O callback switching - MINOR: quic: Drop the packets of discarded packet number spaces - CLEANUP: quic: Useless tests in qc_try_rm_hp() - CLEANUP: quic: Indentation fix in qc_prep_pkts() - MINOR: quic: Assemble QUIC TLS flags at the same level - BUILD: conn_stream: avoid null-deref warnings on gcc 6 - BUILD: connection: do not declare register_mux_proto() inline - BUILD: http_rules: do not declare http_*_keywords_registre() inline - BUILD: trace: do not declare trace_registre_source() inline - BUILD: tcpcheck: do not declare tcp_check_keywords_register() inline - DEBUG: reduce the footprint of BUG_ON() calls - BUG/MEDIUM: httpclient/lua: infinite appctx loop with POST - BUG/MINOR: pool: always align pool_heads to 64 bytes - DEV: udp: add a tiny UDP proxy for testing - DEV: udp: implement pseudo-random reordering/loss - DEV: udp: add an optional argument to set the prng seed - BUG/MINOR: quic: fix segfault on CC if mux uninitialized - BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed - CLEANUP: tree-wide: remove a few rare non-ASCII chars - CI: coverity: simplify debugging options - CLEANUP: quic: complete ABORT_NOW with a TODO comment - MINOR: quic: qc_prep_app_pkts() implementation - MINOR: quic: Send short packet from a frame list - MINOR: quic: Make qc_build_frms() build ack-eliciting frames from a list - MINOR: quic: Export qc_send_app_pkts() - MINOR: mux-quic: refactor transport parameters init - MINOR: mux-quic: complete functions to detect stream type - MINOR: mux-quic: define new unions for flow-control fields - MEDIUM: mux-quic: use direct send transport API for STREAMs - MINOR: mux-quic: retry send opportunistically for remaining frames - MEDIUM: mux-quic: implement MAX_STREAMS emission for bidir streams - BUILD: fix kFreeBSD build. - MINOR: quic: Retry on qc_build_pkt() failures - BUG/MINOR: quic: Missing recovery start timer reset - CLEANUP: quic: Remove QUIC path manipulations out of the congestion controller - MINOR: quic: Add a "slow start" callback to congestion controller - MINOR: quic: Persistent congestion detection outside of controllers - CLEANUP: quic: Remove useless definitions from quic_cc_event struct - BUG/MINOR: quic: Confusion betwen "in_flight" and "prep_in_flight" in quic_path_prep_data() - MINOR: quic: More precise window update calculation - CLEANUP: quic: Remove window redundant variable from NewReno algorithm state struct - MINOR: quic: Add quic_max_int_by_size() function - BUG/MAJOR: quic: Wrong quic_max_available_room() returned value - MINOR: pools: add a new global option "no-memory-trimming" - BUG/MINOR: add missing modes in proxy_mode_str() - BUG/MINOR: cli: shows correct mode in "show sess" - BUG/MEDIUM: quic: do not drop packet on duplicate stream/decoding error - MINOR: stats: Add dark mode support for socket rows - BUILD: fix recent build breakage of freebsd caused by kFreeBSD build fix - BUG/MINOR: httpclient: Set conn-stream/channel EOI flags at the end of request - BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request - BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request - BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request - BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request - BUG/MEDIUM: stream: Use the front analyzers for new listener-less streams - DEBUG: cache: Update underlying buffer when loading HTX message in cache applet - BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing - DEBUG: stream: Add the missing descriptions for stream trace events - DEBUG: stream: Fix stream trace message to print response buffer state - MINOR: proxy: Store monitor_uri as a `struct ist` - MINOR: proxy: Store fwdfor_hdr_name as a `struct ist` - MINOR: proxy: Store orgto_hdr_name as a `struct ist` - MEDIUM: proxy: Store server_id_hdr_name as a `struct ist` - CLEANUP: fcgi: Replace memcpy() on ist by istcat() - CLEANUP: fcgi: Use `istadv()` in `fcgi_strm_send_params` - BUG/MAJOR: mux-pt: Always destroy the backend connection on detach - DOC: sample fetch methods: move distcc_* to the right locations - MINOR: rules: record the last http/tcp rule that gave a final verdict - MINOR: stream: add "last_rule_file" and "last_rule_line" samples - BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd() - MINOR: quic: Add max_idle_timeout advertisement handling - MEDIUM: quic: Remove the QUIC connection reference counter - BUG/MINOR: quic: ACK_REQUIRED and ACK_RECEIVED flag collision - BUG/MINOR: quic: Missing check when setting the anti-amplification limit as reached - MINOR: quic: Add a function to compute the current PTO - MEDIUM: quic: Implement the idle timeout feature - BUG/MEDIUM: quic: qc_prep_app_pkts() retries on qc_build_pkt() failures - CLEANUP: quic: Comments fix for qc_prep_(app)pkts() functions - MINOR: mux-quic: prevent push frame for unidir streams - MINOR: mux-quic: improve opportunistic retry sending for STREAM frames - MINOR: quic: implement sending confirmation - MEDIUM: mux-quic: improve bidir STREAM frames sending - MEDIUM: check: do not auto configure SSL/PROXY for dynamic servers - REGTESTS: server: test SSL/PROXY with checks for dynamic servers - MEDIUM: server: remove experimental-mode for dynamic servers - BUG/MINOR: buffer: fix debugging condition in b_peek_varint()	2022-03-11 18:09:24 +01:00
Willy Tarreau	3b1d190831	[RELEASE] Released version 2.6-dev2 ... Released version 2.6-dev2 with the following main changes : - DOC: management: rework the Master CLI section - DOC: management: add expert and experimental mode in 9.4.1 - CLEANUP: cleanup a commentary in pcli_parse_request() - BUG/MINOR: mworker/cli: don't display help on master applet - MINOR: mworker/cli: mcli-debug-mode enables every command - MINOR: mworker/cli: add flags in the prompt - BUG/MINOR: httpclient: Revisit HC request and response buffers allocation - BUG/MEDIUM: httpclient: Xfer the request when the stream is created - MINOR: httpclient: Don't limit data transfer to 1024 bytes - BUILD: ssl: adjust guard for X509_get_X509_PUBKEY(x) - REGTESTS: ssl: skip show_ssl_ocspresponse.vtc when BoringSSL is used - MINOR: quic: Do not modify a marked as consumed datagram - MINOR: quic: Wrong datagram buffer passed to quic_lstnr_dgram_dispatch() - MINOR: quic: Remove a useless test in quic_get_dgram_dcid() - BUG/MINOR: ssl: Remove empty lines from "show ssl ocsp-response <id>" output - CLEANUP: ssl: Remove unused ssl_sock_create_cert function - MINOR: ssl: Use high level OpenSSL APIs in sha2 converter - MINOR: ssl: Remove EC_KEY related calls when preparing SSL context - REGTESTS: ssl: Add test for "curves" and "ecdhe" SSL options - MINOR: ssl: Remove EC_KEY related calls when creating a certificate - REGTESTS: ssl: Add test for "generate-certificates" SSL option - MINOR: ssl: Remove call to SSL_CTX_set_tlsext_ticket_key_cb with OpenSSLv3 - MINOR: ssl: Remove call to HMAC_Init_ex with OpenSSLv3 - MINOR: h3: hardcode the stream id of control stream - MINOR: mux-quic: remove quic_transport_params_update - MINOR: quic: rename local tid variable - MINOR: quic: remove unused xprt rcv_buf operation - MINOR: quic: take out xprt snd_buf operation - CI: enable QUIC for Coverity scan - BUG/MINOR: mworker: does not erase the pidfile upon reload - MINOR: ssl: Remove call to ERR_func_error_string with OpenSSLv3 - MINOR: ssl: Remove call to ERR_load_SSL_strings with OpenSSLv3 - REGTESTS: ssl: Add tests for DH related options - MINOR: ssl: Create HASSL_DH wrapper structure - MINOR: ssl: Add ssl_sock_get_dh_from_bio helper function - MINOR: ssl: Factorize ssl_get_tmp_dh and append a cbk to its name - MINOR: ssl: Add ssl_sock_set_tmp_dh helper function - MINOR: ssl: Add ssl_sock_set_tmp_dh_from_pkey helper function - MINOR: ssl: Add ssl_new_dh_fromdata helper function - MINOR: ssl: Build local DH of right size when needed - MINOR: ssl: Set default dh size to 2048 - MEDIUM: ssl: Replace all DH objects by EVP_PKEY on OpenSSLv3 (via HASSL_DH type) - MINOR: ssl: Remove calls to SSL_CTX_set_tmp_dh_callback on OpenSSLv3 - MINOR: quic: Remove an RX buffer useless lock - MINOR: quic: Variable used before being checked in ha_quic_add_handshake_data() - MINOR: quic: EINTR error ignored - MINOR: quic: Potential overflow expression in qc_parse_frm() - MINOR: quic: Possible overflow in qpack_get_varint() - CLEANUP: h3: Unreachable target in h3_uqs_init() - MINOR: quic: Possible memleak in qc_new_conn() - MINOR: quic: Useless statement in quic_crypto_data_cpy() - BUG/MEDIUM: pools: ensure items are always large enough for the pool_cache_item - BUG/MINOR: pools: always flush pools about to be destroyed - CLEANUP: pools: don't needlessly set a call mark during refilling of caches - DEBUG: pools: add extra sanity checks when picking objects from a local cache - DEBUG: pools: let's add reverse mapping from cache heads to thread and pool - DEBUG: pools: replace the link pointer with the caller's address on pool_free() - BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks - MINOR: quic: use a global dghlrs for each thread - BUG/MEDIUM: quic: fix crash on CC if mux not present - MINOR: qpack: fix typo in trace - BUG/MINOR: quic: fix FIN stream signaling - BUG/MINOR: h3: fix the header length for QPACK decoding - MINOR: h3: remove transfer-encoding header - MINOR: h3: add documentation on h3_decode_qcs - MINOR: h3: set properly HTX EOM/BODYLESS on HEADERS parsing - MINOR: mux-quic: implement rcv_buf - MINOR: mux-quic: set EOS on rcv_buf - MINOR: h3: set CS_FL_NOT_FIRST - MINOR: h3: report frames bigger than rx buffer - MINOR: h3: extract HEADERS parsing in a dedicated function - MINOR: h3: implement DATA parsing - MINOR: quic: Wrong smoothed rtt initialization - MINOR: quic: Wrong loss delay computation - MINOR: quic: Code never reached in qc_ssl_sess_init() - MINOR: quic: ha_quic_set_encryption_secrets without server specific code - MINOR: quic: Avoid warning about NULL pointer dereferences - MINOR: quic: Useless test in quic_lstnr_dghdlr() - MINOR: quic: Non checked returned value for cs_new() in hq_interop_decode_qcs() - MINOR: h3: Dead code in h3_uqs_init() - MINOR: quic: Non checked returned value for cs_new() in h3_decode_qcs() - MINOR: quic: Possible frame parsers array overrun - MINOR: quic: Do not retransmit too much packets. - MINOR: quic: Move quic_rxbuf_pool pool out of xprt part - MINOR: h3: report error on HEADERS/DATA parsing - BUG/MINOR: jwt: Double free in deinit function - BUG/MINOR: jwt: Missing pkey free during cleanup - BUG/MINOR: jwt: Memory leak if same key is used in multiple jwt_verify calls - BUG/MINOR: httpclient/cli: display junk characters in vsn - MINOR: h3: remove unused return value on decode_qcs - BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies - BUG/MAJOR: spoe: properly detach all agents when releasing the applet - REGTESTS: server: close an occasional race on dynamic_server_ssl.vtc - REGTESTS: peers: leave a bit more time to peers to synchronize - BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change - BUG/MINOR: mux-h2: update the session's idle delay before creating the stream - BUG/MINOR: httpclient: reinit flags in httpclient_start() - BUG/MINOR: mailers: negotiate SMTP, not ESMTP - MINOR: httpclient: sets an alternative destination - MINOR: httpclient/lua: add 'dst' optionnal field - BUG/MINOR: ssl: Add missing return value check in ssl_ocsp_response_print - BUG/MINOR: ssl: Fix leak in "show ssl ocsp-response" CLI command - BUG/MINOR: ssl: Missing return value check in ssl_ocsp_response_print - CLEANUP: httpclient/cli: fix indentation alignment of the help message - BUG/MINOR: tools: url2sa reads ipv4 too far - BUG/MEDIUM: httpclient: limit transfers to the maximum available room - DEBUG: buffer: check in __b_put_blk() whether the buffer room is respected - MINOR: mux-quic: fix a possible null dereference in qc_timeout_task - BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message - BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer - BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer - DEBUG: stream-int: Check CS_FL_WANT_ROOM is not set with an empty input buffer - MINOR: quic: do not modify offset node if quic_rx_strm_frm in tree - MINOR: h3: fix compiler warning variable set but not used - MINOR: mux-quic: fix uninitialized return on qc_send - MINOR: quic: fix handling of out-of-order received STREAM frames - MINOR: pools: mark most static pool configuration variables as read-mostly - CLEANUP: pools: remove the now unused pool_is_crowded() - REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks - BUG/MEDIUM: stream: Abort processing if response buffer allocation fails - MINOR: httpclient/lua: ability to set a server timeout - BUG/MINOR: httpclient/lua: missing pop for new timeout parameter - DOC: httpclient/lua: fix the type of the dst parameter - CLEANUP: httpclient: initialize the client in stage INIT not REGISTER - CLEANUP: muxes: do not use a dynamic trash in list_mux_protos() - CLEANUP: vars: move the per-process variables initialization to vars.c - CLEANUP: init: remove the ifdef on HAPROXY_MEMMAX - MINOR: pools: disable redundant poisonning on pool_free() - MINOR: pools: introduce a new pool_debugging global variable - MINOR: pools: switch the fail-alloc test to runtime only - MINOR: pools: switch DEBUG_DONT_SHARE_POOLS to runtime - MINOR: pools: add a new debugging flag POOL_DBG_COLD_FIRST - MINOR: pools: add a new debugging flag POOL_DBG_INTEGRITY - MINOR: pools: make the global pools a runtime option. - MEDIUM: pools: replace CONFIG_HAP_POOLS with a runtime "NO_CACHE" flag. - MINOR: pools: store the allocated size for each pool - MINOR: pools: get rid of POOL_EXTRA - MINOR: pools: replace DEBUG_POOL_TRACING with runtime POOL_DBG_CALLER - MINOR: pools: replace DEBUG_MEMORY_POOLS with runtime POOL_DBG_TAG - MINOR: pools: add a debugging flag for memory poisonning option - MEDIUM: initcall: move STG_REGISTER earlier - MEDIUM: init: split the early initialization in its own function - MINOR: init: extract args parsing to their own function - MEDIUM: init: handle arguments earlier - MINOR: pools: delegate parsing of command line option -dM to a new function - MINOR: pools: support setting debugging options using -dM - BUILD: makefile: enable both DEBUG_STRICT and DEBUG_MEMORY_POOLS by default - CI: github: enable pool debugging by default - DOC: Fix usage/examples of deprecated ACLs - DOC: internal: update the pools API to mention boot-time settings - DOC: design: add design thoughts for later simplification of the pools - DOC: design: commit the temporary design notes on thread groups - MINOR: stream-int: Handle appctx case first when releasing the endpoint - MINOR: connection: Be prepared to handle conn-stream with no connection - MINOR: stream: Handle appctx case first when creating a new stream - MINOR: connection: Add a function to detach a conn-stream from the connection - MINOR: stream-int: Add function to reset a SI endpoint - MINOR: stream-int: Add function to attach a connection to a SI - MINOR: stream-int: Be able to allocate a CS without connection - MEDIUM: stream: No longer release backend conn-stream on connection retry - MEDIUM: stream: Allocate backend CS when the stream is created - REORG: conn_stream: move conn-stream stuff in dedicated files - MEDIUM: conn-stream: No longer access connection field directly - MEDIUM: conn-stream: Be prepared to use an appctx as conn-stream endpoint - MAJOR: conn_stream/stream-int: move the appctx to the conn-stream - MEDIUM: applet: Set the conn-stream as appctx owner instead of the stream-int - MEDIUM: conn_stream: Add a pointer to the app object into the conn-stream - MINOR: stream: Add pointer to front/back conn-streams into stream struct - MINOR: stream: Slightly rework stream_new to separate CS/SI initialization - MINOR: stream-int: Always access the stream-int via the conn-stream - MINOR: backend: Always access the stream-int via the conn-stream - MINOR: stream: Always access the stream-int via the conn-stream - MINOR: http-ana: Always access the stream-int via the conn-stream - MINOR: cli: Always access the stream-int via the conn-stream - MINOR: log: Always access the stream-int via the conn-stream - MINOR: frontend: Always access the stream-int via the conn-stream - MINOR: proxy: Always access the stream-int via the conn-stream - MINOR: peers: Always access the stream-int via the conn-stream - MINOR: debug: Always access the stream-int via the conn-stream - MINOR: hlua: Always access the stream-int via the conn-stream - MINOR: cache: Always access the stream-int via the conn-stream - MINOR: dns: Always access the stream-int via the conn-stream - MINOR: http-act: Always access the stream-int via the conn-stream - MINOR: httpclient: Always access the stream-int via the conn-stream - MINOR: tcp-act: Always access the stream-int via the conn-stream - MINOR: sink: Always access the stream-int via the conn-stream - MINOR: conn-stream: Rename cs_detach() to cs_detach_endp() - CLEANUP: conn-stream: Don't export conn-stream pool - MAJOR: stream/conn_stream: Move the stream-interface into the conn-stream - CLEANUP: stream-int: rename si_reset() to si_init() - MINOR: conn-stream: Release a CS when both app and endp are detached - MINOR: stream: Don't destroy conn-streams but detach app and endp - MAJOR: check: Use a persistent conn-stream for health-checks - CLEANUP: conn-stream: Remove cs_destroy() - CLEANUP: backend: Don't export connect_server anymore - BUG/MINOR: h3/hq_interop: Fix CS and stream creation - BUILD: tree-wide: Avoid warnings about undefined entities retrieved from a CS - BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy() - BUG/MEDIUM: quic: fix received ACK stream calculation - BUILD: stream: fix build warning with older compilers - BUG/MINOR: debug: fix get_tainted() to properly read an atomic value - DEBUG: move the tainted stuff to bug.h for easier inclusion - DEBUG: cleanup back trace generation - DEBUG: cleanup BUG_ON() configuration - DEBUG: mark ABORT_NOW() as unreachable - DBEUG: add a new WARN_ON() macro - DEBUG: make the _BUG_ON() macro return the condition - DEBUG: add a new WARN_ON_ONCE() macro - DEBUG: report BUG_ON() and WARN_ON() in the tainted flags - MINOR: quic: adjust buffer handling for STREAM transmission - MINOR: quic: liberate the TX stream buffer after ACK processing - MINOR: quic: add a TODO for a memleak frame on ACK consume	2022-02-25 17:12:11 +01:00
Willy Tarreau	2454d6ef5b	[RELEASE] Released version 2.6-dev1 ... Released version 2.6-dev1 with the following main changes : - BUG/MINOR: cache: Fix loop on cache entries in "show cache" - BUG/MINOR: httpclient: allow to replace the host header - BUG/MINOR: lua: don't expose internal proxies - MEDIUM: mworker: seamless reload use the internal sockpairs - BUG/MINOR: lua: remove loop initial declarations - BUG/MINOR: mworker: does not add the -sf in wait mode - BUG/MEDIUM: mworker: FD leak of the eventpoll in wait mode - MINOR: quic: do not reject PADDING followed by other frames - REORG: quic: add comment on rare thread concurrence during CID alloc - CLEANUP: quic: add comments on CID code - MEDIUM: quic: handle CIDs to rattach received packets to connection - MINOR: qpack: support litteral field line with non-huff name - MINOR: quic: activate QUIC traces at compilation - MINOR: quic: use more verbose QUIC traces set at compile-time - MEDIUM: pool: refactor malloc_trim/glibc and jemalloc api addition detections. - MEDIUM: pool: support purging jemalloc arenas in trim_all_pools() - BUG/MINOR: mworker: deinit of thread poller was called when not initialized - BUILD: pools: only detect link-time jemalloc on ELF platforms - CI: github actions: add the output of $CC -dM -E- - BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time - BUILD: evports: remove a leftover from the dead_fd cleanup - MINOR: quic: Set "no_application_protocol" alert - MINOR: quic: More accurate immediately close. - MINOR: quic: Immediately close if no transport parameters extension found - MINOR: quic: Rename qc_prep_hdshk_pkts() to qc_prep_pkts() - MINOR: quic: Possible crash when inspecting the xprt context - MINOR: quic: Dynamically allocate the secrete keys - MINOR: quic: Add a function to derive the key update secrets - MINOR: quic: Add structures to maintain key phase information - MINOR: quic: Optional header protection key for quic_tls_derive_keys() - MINOR: quic: Add quic_tls_key_update() function for Key Update - MINOR: quic: Enable the Key Update process - MINOR: quic: Delete the ODCIDs asap - BUG/MINOR: vars: Fix the set-var and unset-var converters - MEDIUM: pool: Following up on previous pool trimming update. - BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message - BUG/MINOR: mux-h1: Fix splicing for messages with unknown length - MINOR: mux-h1: Improve H1 traces by adding info about http parsers - MINOR: mux-h1: register a stats module - MINOR: mux-h1: add counters instance to h1c - MINOR: mux-h1: count open connections/streams on stats - MINOR: mux-h1: add stat for total count of connections/streams - MINOR: mux-h1: add stat for total amount of bytes received and sent - REGTESTS: h1: Add a script to validate H1 splicing support - BUG/MINOR: server: Don't rely on last default-server to init server SSL context - BUG/MEDIUM: resolvers: Detach query item on response error - MEDIUM: resolvers: No longer store query items in a list into the response - BUG/MAJOR: segfault using multiple log forward sections. - BUG/MEDIUM: h1: Properly reset h1m flags when headers parsing is restarted - BUG/MINOR: resolvers: Don't overwrite the error for invalid query domain name - BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH - BUG/MEDIUM: sample: Fix memory leak in sample_conv_jwt_member_query - DOC: spoe: Clarify use of the event directive in spoe-message section - DOC: config: Specify %Ta is only available in HTTP mode - BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types - IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode - MINOR: quic: fix segfault on CONNECTION_CLOSE parsing - MINOR: h3: add BUG_ON on control receive function - MEDIUM: xprt-quic: finalize app layer initialization after ALPN nego - MINOR: h3: remove duplicated FIN flag position - MAJOR: mux-quic: implement a simplified mux version - MEDIUM: mux-quic: implement release mux operation - MEDIUM: quic: detect the stream FIN - MINOR: mux-quic: implement subscribe on stream - MEDIUM: mux-quic: subscribe on xprt if remaining data after send - MEDIUM: mux-quic: wake up xprt on data transferred - MEDIUM: mux-quic: handle when sending buffer is full - MINOR: quic: RX buffer full due to wrong CRYPTO data handling - MINOR: quic: Race issue when consuming RX packets buffer - MINOR: quic: QUIC encryption level RX packets race issue - MINOR: quic: Delete remaining RX handshake packets - MINOR: quic: Remove QUIC TX packet length evaluation function - MINOR: hq-interop: fix tx buffering - MINOR: mux-quic: remove uneeded code to check fin on TX - MINOR: quic: add HTX EOM on request end - BUILD: mux-quic: fix compilation with DEBUG_MEM_STATS - MINOR: http-rules: Add capture action to http-after-response ruleset - BUG/MINOR: cli/server: Don't crash when a server is added with a custom id - MINOR: mux-quic: do not release qcs if there is remaining data to send - MINOR: quic: notify the mux on CONNECTION_CLOSE - BUG/MINOR: mux-quic: properly initialize flow control - MINOR: quic: Compilation fix for quic_rx_packet_refinc() - MINOR: h3: fix possible invalid dereference on htx parsing - DOC: config: retry-on list is space-delimited - DOC: config: fix error-log-format example - BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode - MINOR: hq-interop: refix tx buffering - REGTESTS: ssl: use X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY for cert check - MINOR: cli: "show version" displays the current process version - CLEANUP: cfgparse: modify preprocessor guards around numa detection code - MEDIUM: cfgparse: numa detect topology on FreeBSD. - BUILD: ssl: unbreak the build with newer libressl - MINOR: vars: Move UPDATEONLY flag test to vars_set_ifexist - MINOR: vars: Set variable type to ANY upon creation - MINOR: vars: Delay variable content freeing in var_set function - MINOR: vars: Parse optional conditions passed to the set-var converter - MINOR: vars: Parse optional conditions passed to the set-var actions - MEDIUM: vars: Enable optional conditions to set-var converter and actions - DOC: vars: Add documentation about the set-var conditions - REGTESTS: vars: Add new test for conditional set-var - MINOR: quic: Attach timer task to thread for the connection. - CLEANUP: quic_frame: Remove a useless suffix to STOP_SENDING - MINOR: quic: Add traces for STOP_SENDING frame and modify others - CLEANUP: quic: Remove cdata_len from quic_tx_packet struct - MINOR: quic: Enable TLS 0-RTT if needed - MINOR: quic: No TX secret at EARLY_DATA encryption level - MINOR: quic: Add quic_set_app_ops() function - MINOR: ssl_sock: Set the QUIC application from ssl_sock_advertise_alpn_protos. - MINOR: quic: Make xprt support 0-RTT. - MINOR: qpack: Missing check for truncated QPACK fields - CLEANUP: quic: Comment fix for qc_strm_cpy() - MINOR: hq_interop: Stop BUG_ON() truncated streams - MINOR: quic: Do not mix packet number space and connection flags - CLEANUP: quic: Shorten a litte bit the traces in lstnr_rcv_pkt() - MINOR: mux-quic: fix trace on stream creation - CLEANUP: quic: fix spelling mistake in a trace - CLEANUP: quic: rename quic_conn conn to qc in quic_conn_free - MINOR: quic: add missing lock on cid tree - MINOR: quic: rename constant for haproxy CIDs length - MINOR: quic: refactor concat DCID with address for Initial packets - MINOR: quic: compare coalesced packets by DCID - MINOR: quic: refactor DCID lookup - MINOR: quic: simplify the removal from ODCID tree - REGTESTS: vars: Remove useless ssl tunes from conditional set-var test - MINOR: ssl: Remove empty lines from "show ssl ocsp-response" output - MINOR: quic: Increase the RX buffer for each connection - MINOR: quic: Add a function to list remaining RX packets by encryption level - MINOR: quic: Stop emptying the RX buffer asap. - MINOR: quic: Do not expect to receive only one O-RTT packet - MINOR: quic: Do not forget STREAM frames received in disorder - MINOR: quic: Wrong packet refcount handling in qc_pkt_insert() - DOC: fix misspelled keyword "resolve_retries" in resolvers - CLEANUP: quic: rename quic_conn instances to qc - REORG: quic: move mux function outside of xprt - MINOR: quic: add reference to quic_conn in ssl context - MINOR: quic: add const qualifier for traces function - MINOR: trace: add quic_conn argument definition - MINOR: quic: use quic_conn as argument to traces - MINOR: quic: add quic_conn instance in traces for qc_new_conn - MINOR: quic: Add stream IDs to qcs_push_frame() traces - MINOR: quic: unchecked qc_retrieve_conn_from_cid() returned value - MINOR: quic: Wrong dropped packet skipping - MINOR: quic: Handle the cases of overlapping STREAM frames - MINOR: quic: xprt traces fixes - MINOR: quic: Drop asap Retry or Version Negotiation packets - MINOR: pools: work around possibly slow malloc_trim() during gc - DEBUG: ssl: make sure we never change a servername on established connections - MINOR: quic: Add traces for RX frames (flow control related) - MINOR: quic: Add CONNECTION_CLOSE phrase to trace - REORG: quic: remove qc_ prefix on functions which not used it directly - BUG/MINOR: quic: upgrade rdlock to wrlock for ODCID removal - MINOR: quic: remove unnecessary call to free_quic_conn_cids() - MINOR: quic: store ssl_sock_ctx reference into quic_conn - MINOR: quic: remove unnecessary if in qc_pkt_may_rm_hp() - MINOR: quic: replace usage of ssl_sock_ctx by quic_conn - MINOR: quic: delete timer task on quic_close() - MEDIUM: quic: implement refcount for quic_conn - BUG/MINOR: quic: fix potential null dereference - BUG/MINOR: quic: fix potential use of uninit pointer - BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch - BUG/MEDIUM: peers: properly skip conn_cur from incoming messages - CI: Github Actions: do not show VTest failures if build failed - BUILD: opentracing: display warning in case of using OT_USE_VARS at compile time - MINOR: compat: detect support for dl_iterate_phdr() - MINOR: debug: add ability to dump loaded shared libraries - MINOR: debug: add support for -dL to dump library names at boot - BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server - REGTESTS: ssl: fix ssl_default_server.vtc - BUG/MINOR: ssl: free the fields in srv->ssl_ctx - BUG/MEDIUM: ssl: free the ckch instance linked to a server - REGTESTS: ssl: update of a crt with server deletion - BUILD/MINOR: cpuset FreeBSD 14 build fix. - MINOR: pools: always evict oldest objects first in pool_evict_from_local_cache() - DOC: pool: document the purpose of various structures in the code - CLEANUP: pools: do not use the extra pointer to link shared elements - CLEANUP: pools: get rid of the POOL_LINK macro - MINOR: pool: allocate from the shared cache through the local caches - CLEANUP: pools: group list updates in pool_get_from_cache() - MINOR: pool: rely on pool_free_nocache() in pool_put_to_shared_cache() - MINOR: pool: make pool_is_crowded() always true when no shared pools are used - MINOR: pool: check for pool's fullness outside of pool_put_to_shared_cache() - MINOR: pool: introduce pool_item to represent shared pool items - MINOR: pool: add a function to estimate how many may be released at once - MEDIUM: pool: compute the number of evictable entries once per pool - MINOR: pools: prepare pool_item to support chained clusters - MINOR: pools: pass the objects count to pool_put_to_shared_cache() - MEDIUM: pools: centralize cache eviction in a common function - MEDIUM: pools: start to batch eviction from local caches - MEDIUM: pools: release cached objects in batches - OPTIM: pools: reduce local pool cache size to 512kB - CLEANUP: assorted typo fixes in the code and comments This is 29th iteration of typo fixes - CI: github actions: update OpenSSL to 3.0.1 - BUILD/MINOR: tools: solaris build fix on dladdr. - BUG/MINOR: cli: fix _getsocks with musl libc - BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry - MINOR: quic: Wrong traces after rework - MINOR: quic: Add trace about in flight bytes by packet number space - MINOR: quic: Wrong first packet number space computation - MINOR: quic: Wrong packet number space computation for PTO - MINOR: quic: Wrong loss time computation in qc_packet_loss_lookup() - MINOR: quic: Wrong ack_delay compution before calling quic_loss_srtt_update() - MINOR: quic: Remove nb_pto_dgrams quic_conn struct member - MINOR: quic: Wrong packet number space trace in qc_prep_pkts() - MINOR: quic: Useless test in qc_prep_pkts() - MINOR: quic: qc_prep_pkts() code moving - MINOR: quic: Speeding up Handshake Completion - MINOR: quic: Probe Initial packet number space more often - MINOR: quic: Probe several packet number space upon timer expiration - MINOR: quic: Comment fix. - MINOR: quic: Improve qc_prep_pkts() flexibility - MINOR: quic: Do not drop secret key but drop the CRYPTO data - MINOR: quic: Prepare Handshake packets asap after completed handshake - MINOR: quic: Flag asap the connection having reached the anti-amplification limit - MINOR: quic: PTO timer too often reset - MINOR: quic: Re-arm the PTO timer upon datagram receipt - MINOR: proxy: add option idle-close-on-response - MINOR: cpuset: switch to sched_setaffinity for FreeBSD 14 and above. - CI: refactor spelling check - CLEANUP: assorted typo fixes in the code and comments - BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning - MINOR: quic: Only one CRYPTO frame by encryption level - MINOR: quic: Missing retransmission from qc_prep_fast_retrans() - MINOR: quic: Non-optimal use of a TX buffer - BUG/MEDIUM: mworker: don't use _getsocks in wait mode - BUG/MINOR: ssl: Store client SNI in SSL context in case of ClientHello error - BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data - DOC: internals: document the pools architecture and API - CI: github actions: clean default step conditions - BUILD: cpuset: fix build issue on macos introduced by previous change - MINOR: quic: Remaining TRACEs with connection as firt arg - MINOR: quic: Reset ->conn quic_conn struct member when calling qc_release() - MINOR: quic: Flag the connection as being attached to a listener - MINOR: quic: Wrong CRYPTO frame concatenation - MINOR: quid: Add traces quic_close() and quic_conn_io_cb() - REGTESTS: ssl: Fix ssl_errors regtest with OpenSSL 1.0.2 - MINOR: quic: Do not dereference ->conn quic_conn struct member - MINOR: quic: fix return of quic_dgram_read - MINOR: quic: add config parse source file - MINOR: quic: implement Retry TLS AEAD tag generation - MEDIUM: quic: implement Initial token parsing - MINOR: quic: define retry_source_connection_id TP - MEDIUM: quic: implement Retry emission - MINOR: quic: free xprt tasklet on its thread - BUG/MEDIUM: connection: properly leave stopping list on error - MINOR: pools: enable pools with DEBUG_FAIL_ALLOC as well - MINOR: quic: As server, skip 0-RTT packet number space - MINOR: quic: Do not wakeup the I/O handler before the mux is started - BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer - CI: github actions: use cache for OpenTracing - BUG/MINOR: httpclient: don't send an empty body - BUG/MINOR: httpclient: set default Accept and User-Agent headers - BUG/MINOR: httpclient/lua: don't pop the lua stack when getting headers - BUILD/MINOR: fix solaris build with clang. - BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl - CI: refactor OpenTracing build script - DOC: management: mark "set server ssl" as deprecated - MEDIUM: cli: yield between each pipelined command - MINOR: channel: add new function co_getdelim() to support multiple delimiters - BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands - MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change - MINOR: quic: Retransmit the TX frames in the same order - MINOR: quic: Remove the packet number space TX MT_LIST - MINOR: quic: Splice the frames which could not be added to packets - MINOR: quic: Add the number of TX bytes to traces - CLEANUP: quic: Replace <nb_pto_dgrams> by <probe> - MINOR: quic: Send two ack-eliciting packets when probing packet number spaces - MINOR: quic: Probe regardless of the congestion control - MINOR: quic: Speeding up handshake completion - MINOR: quic: Release RX Initial packets asap - MINOR: quic: Release asap TX frames to be transmitted - MINOR: quic: Probe even if coalescing - BUG/MEDIUM: cli: Never wait for more data on client shutdown - BUG/MEDIUM: mcli: do not try to parse empty buffers - BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them - BUG/MINOR: stream: make the call_rate only count the no-progress calls - MINOR: quic: do not use quic_conn after dropping it - MINOR: quic: adjust quic_conn refcount decrement - MINOR: quic: fix race-condition on xprt tasklet free - MINOR: quic: free SSL context on quic_conn free - MINOR: quic: Add QUIC_FT_RETIRE_CONNECTION_ID parsing case - MINOR: quic: Wrong packet number space selection - DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY - MINOR: quic: add missing include in quic_sock - MINOR: quic: fix indentation in qc_send_ppkts - MINOR: quic: remove dereferencement of connection when possible - MINOR: quic: set listener accept cb on parsing - MEDIUM: quic/ssl: add new ex data for quic_conn - MINOR: quic: initialize ssl_sock_ctx alongside the quic_conn - MINOR: ssl: fix build in release mode - MINOR: pools: partially uninline pool_free() - MINOR: pools: partially uninline pool_alloc() - MINOR: pools: prepare POOL_EXTRA to be split into multiple extra fields - MINOR: pools: extend pool_cache API to pass a pointer to a caller - DEBUG: pools: add new build option DEBUG_POOL_TRACING - DEBUG: cli: add a new "debug dev fd" expert command - MINOR: fd: register the write side of the poller pipe as well - CI: github actions: use cache for SSL libs - BUILD: debug/cli: condition test of O_ASYNC to its existence - BUILD: pools: fix build error on DEBUG_POOL_TRACING - MINOR: quic: refactor header protection removal - MINOR: quic: handle app data according to mux/connection layer status - MINOR: quic: refactor app-ops initialization - MINOR: receiver: define a flag for local accept - MEDIUM: quic: flag listener for local accept - MINOR: quic: do not manage connection in xprt snd_buf - MINOR: quic: remove wait handshake/L6 flags on init connection - MINOR: listener: add flags field - MINOR: quic: define QUIC flag on listener - MINOR: quic: create accept queue for QUIC connections - MINOR: listener: define per-thr struct - MAJOR: quic: implement accept queue - CLEANUP: mworker: simplify mworker_free_child() - BUILD/DEBUG: lru: update the standalone code to support the revision - DEBUG: lru: use a xorshift generator in the testing code - BUG/MAJOR: compiler: relax alignment constraints on certain structures - BUG/MEDIUM: fd: always align fdtab[] to 64 bytes - MINOR: quic: No DCID length for datagram context - MINOR: quic: Comment fix about the token found in Initial packets - MINOR: quic: Get rid of a struct buffer in quic_lstnr_dgram_read() - MINOR: quic: Remove the QUIC haproxy server packet parser - MINOR: quic: Add new defintion about DCIDs offsets - MINOR: quic: Add a list to QUIC sock I/O handler RX buffer - MINOR: quic: Allocate QUIC datagrams from sock I/O handler - MINOR: proto_quic: Allocate datagram handlers - MINOR: quic: Pass CID as a buffer to quic_get_cid_tid() - MINOR: quic: Convert quic_dgram_read() into a task - CLEANUP: quic: Remove useless definition - MINOR: proto_quic: Wrong allocations for TX rings and RX bufs - MINOR: quic: Do not consume the RX buffer on QUIC sock i/o handler side - MINOR: quic: Do not reset a full RX buffer - MINOR: quic: Attach all the CIDs to the same connection - MINOR: quic: Make usage of by datagram handler trees - MEDIUM: da: new optional data file download scheduler service. - MEDIUM: da: update doc and build for new scheduler mode service. - MEDIUM: da: update module to handle schedule mode. - MINOR: quic: Drop Initial packets with wrong ODCID - MINOR: quic: Wrong RX buffer tail handling when no more contiguous data - MINOR: quic: Iterate over all received datagrams - MINOR: quic: refactor quic CID association with threads - BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names - DEV: flags: Add missing flags - BUG/MINOR: sink: Use the right field in appctx context in release callback - MINOR: sock: move the unused socket cleaning code into its own function - BUG/MEDIUM: mworker: close unused transferred FDs on load failure - BUILD: atomic: make the old HA_ATOMIC_LOAD() support const pointers - BUILD: cpuset: do not use const on the source of CPU_AND/CPU_ASSIGN - BUILD: checks: fix inlining issue on set_srv_agent_[addr,port} - BUILD: vars: avoid overlapping field initialization - BUILD: server-state: avoid using not-so-portable isblank() - BUILD: mux_fcgi: avoid aliasing of a const struct in traces - BUILD: tree-wide: mark a few numeric constants as explicitly long long - BUILD: tools: fix warning about incorrect cast with dladdr1() - BUILD: task: use list_to_mt_list() instead of casting list to mt_list - BUILD: mworker: include tools.h for platforms without unsetenv() - BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload - MINOR: mworker: set the master side of ipc_fd in the worker to -1 - MINOR: mworker: allocate and initialize a mworker_proc - CI: Consistently use actions/checkout@v2 - REGTESTS: Remove REQUIRE_VERSION=1.8 from all tests - MINOR: mworker: sets used or closed worker FDs to -1 - MINOR: quic: Try to accept 0-RTT connections - MINOR: quic: Do not try to treat 0-RTT packets without started mux - MINOR: quic: Do not try to accept a connection more than one time - MINOR: quic: Initialize the connection timer asap - MINOR: quic: Do not use connection struct xprt_ctx too soon - Revert "MINOR: mworker: sets used or closed worker FDs to -1" - BUILD: makefile: avoid testing all -Wno-* options when not needed - BUILD: makefile: validate support for extra warnings by batches - BUILD: makefile: only compute alternative options if required - DEBUG: fd: make sure we never try to insert/delete an impossible FD number - MINOR: mux-quic: add comment - MINOR: mux-quic: properly initialize qcc flags - MINOR: mux-quic: do not consider CONNECTION_CLOSE for the moment - MINOR: mux-quic: create a timeout task - MEDIUM: mux-quic: delay the closing with the timeout - MINOR: mux-quic: release idle conns on process stopping - MINOR: listener: replace the listener's spinlock with an rwlock - BUG/MEDIUM: listener: read-lock the listener during accept() - MINOR: mworker/cli: set expert/experimental mode from the CLI	2022-02-01 18:06:59 +01:00
Willy Tarreau	73dec76e85	[RELEASE] Released version 2.6-dev0 ... Released version 2.6-dev0 with the following main changes : - MINOR: version: it's development again	2021-11-23 15:50:11 +01:00
Willy Tarreau	f2e0833f16	[RELEASE] Released version 2.5.0 ... Released version 2.5.0 with the following main changes : - BUILD: SSL: add quictls build to scripts/build-ssl.sh - BUILD: SSL: add QUICTLS to build matrix - CLEANUP: sock: Wrap `accept4_broken = 1` into additional parenthesis - BUILD: cli: clear a maybe-unused warning on some older compilers - BUG/MEDIUM: cli: make sure we can report a warning from a bind keyword - BUG/MINOR: ssl: make SSL counters atomic - CLEANUP: assorted typo fixes in the code and comments - BUG/MINOR: ssl: free correctly the sni in the backend SSL cache - MINOR: version: mention that it's stable now	2021-11-23 15:40:21 +01:00