Release Notes
The ALOHA 8.5 brings the following improvements:
- New Features
-
Powered by HAProxy 1.6r2
TCP layer statistics are available in the form of new sample fetches (
rtt
,rtt variance etc
,retransmits
,losses
, etc.)New
dst_is_local
,src_is_local
sample fetches make it easier to handle locally initiated connections in contrast to remote connectionsThe peers protocol was updated to version 2.1 with support for synchronization of expiration dates
CLI keyword registration to allow modules to plug-in on the command line and receive actions (example:
refresh now
)Ability to disable
SO_REUSEPORT
with a new bind directive:noreuseport
New possibilities for accessing load balancer internals with LUA
Idle time in logs is now ignored by default for time measurements, so that HTTP request time corresponds to the time elapsed between the first character and the full request. The handshake time is also available to measure the time spent in SSL/PROXY handshakes.
Stick-tables now use native types to guarantee better accuracy of tracked information, especially binary keys
Mailers now support a configurable connection timeout
Changing server address, port and checkport is now possible from the CLI
New
tcp-request
session rule-sets makes it possible to track some L5-only information; for instance, anything negotiated in the handshake such as SSL DN or the client's IP address as passed by the PROXY protocol. Previously, it was needed to do it intcp-request content rules
, which would count one new connection event per request.New stats field for denied connections and denied sessions
New
hash-balance-factor
directive forconsis
New
tent
hashing methodNew
http-response
ruletrack-sc
- SSL/TLS
-
SNI filters supported in multi-type certificates
Support of
lb-update
for TLS session ticket keys
- PacketShield and DDOS protection
-
Half-stateful mode for direct server return
ICMP rate limiting
Geolocalization filtering support
- API REST/JSON
-
Support for
tcp-check
rules - Miscellaneous
-
Kernel version Linux 4.4
Review partition sizes on flash
LUA support added to the load-balancer
Support for the LVS sync daemon in the init script
Next up
Changelog