Search filters

Type

Section

Actions

Changelog - HAProxy Enterprise 3.0r1

#2025/10/27 : 3.0r1 (1.0.0-346.834)

  • BUG/MEDIUMclido not return ACKs one char at a time
  • MINORclicreate cli_raw_rcv_buf() from the generic applet_raw_rcv_buf()
  • MINORappletdo not put SE_FL_WANT_ROOM on rcv_buf() if the channel is empty
  • BUG/MINORstick-tablesproperly index string-type keys
  • BUG/MEDIUMappletImprove again spinning loops detection with the new API
  • BUG/MEDIUMbuildlimit excessive and counter-productive gcc-15 vectorization
  • BUG/MAJORquicuse ncbmbuf for CRYPTO handling
  • MINORncbmbufadd tests as standalone mode
  • MINORncbmbufimplement advance operation
  • MINORncbmbufimplement ncbmb_data()
  • MINORncbmbufimplement iterator bitmap utilities functions
  • MINORncbmbufimplement add
  • MINORncbmbufdefine new ncbmbuf type
  • MINORncbufextract common types
  • BUG/MEDIUMh3properly encode response after interim one in same buf
  • BUG/MAJORquicuninitialized quic_conn_closed struct members
  • BUG/MINORquiccheck applet_putchk() for 'show quic' first line
  • BUG/MEDIUMstick-tablesDon't forget to dec count on failure.
  • BUG/MINORquicdon't coalesce probing and ACK packet of same type
  • BUG/MEDIUMh3handle interim response properly on FE side
  • MINORqmuxchange API for snd_buf FIN transmission
  • BUG/MINORh3ensure that invalid status code are not encoded (FE side)
  • BUG/MEDIUMh3do not overwrite interim with final response

#2025/10/17 : 3.0r1 (1.0.0-346.810)

  • MINORquicrestore QUIC_HP_SAMPLE_LEN constant
  • BUG/MINORquictoo short PADDING frame for too short packets
  • BUILDsslcan't build when using -DLISTEN_DEFAULT_CIPHERS
  • MINORregexuse a thread-local match pointer for pcre2
  • BUG/MAJORlb-chashfix key calculation when using default hash-key id
  • BUG/MINORsslFree key_base from global_ssl structure during deinit
  • BUG/MINORsslFree global_ssl structure contents during deinit

#2025/10/15 : 3.0r1 (1.0.0-346.803)

  • MINORdebugadd distro name and version in postmortem
  • BUG/MINORsinkretry attempt for sft server may never occur
  • MINORsinkRemove useless test on SE_FL_SHR/SHW flags

#2025/10/10 : 3.0r1 (1.0.0-346.800)

  • BUG/MEDIUMapppetImprove spinning loop detection with the new API
  • BUILDmakefiledisable tail calls optimizations with memory profiling
  • BUG/MINORsslalways clear the remains of the first hello for the second one
  • BUG/MEDIUMssltake care of second client hello
  • BUG/MINOrhluaFix receive from HTTP applet by properly accounting data

#2025/10/03 : 3.0r1 (1.0.0-346.795)

  • BUG/MINORh3forbid 'Z' as well in header field names checks
  • BUG/MINORh2forbid 'Z' as well in header field names checks

#2025/10/02 : 3.0r1 (1.0.0-346.792)

  • BUG/CRITICALmjsonfix possible DoS when parsing numbers
  • DOCconfigclarify some known limitations of the json_query() converter
  • BUG/MEDIUMsslca-file directory mode must read every certificates of a file
  • BUG/MINORpatternFix pattern lookup for map with opt@ prefix
  • BUG/MINORpatternProperly flag virtual maps as using samples
  • MINORssladd the ssl_bc_sni sample fetch function to retrieve backend SNI
  • BUILDhalogmisleading indentation in halog.c
  • BUG/MEDIUMstick-tablesDon't let table_process_entry() handle refcnt
  • OPTIMsinkreduce contention on sink_announce_dropped()
  • BUG/MINORserverUpdate healthcheck when server settings are changed via CLI
  • BUG/MEDIUMserverUse sni as pool connection name for SSL server only
  • MINORserverParse sni and pool-conn-name expressions in a dedicated function
  • BUG/MEDIUMringinvert the length check to avoid an int overflow
  • BUG/MINORresolversalways normalize FQDN from response
  • BUG/MINORocspCrash when updating CA during ocsp updates
  • BUG/MAJORstreamForce channel analysis on successful synchronous send
  • BUG/MAJORstreamRemove READ/WRITE events on channels after analysers eval
  • BUG/MINORactivityfix reporting of task latency
  • BUG/MEDIUMsslcreate the mux immediately on early data
  • BUG/MEDIUMh1Allow reception if we have early data
  • BUG/MEDIUMchecksfix ALPN inheritance from server
  • OPTIMcheckdo not delay MUX for ALPN if SSL not active
  • CLEANUPquicfix typo in quic_tx trace
  • BUG/MINORcpu_topowork around a small bug in musl's CPU_ISSET()
  • BUILDtracesilence a bogus build warning at -Og
  • BUG/MINORlogfix potential memory leak upon error in add_to_logformat_list()
  • BUG/MINORconnectionstreamline conn detach from lists
  • BUG/MEDIUMconnfix UAF on connection after reversal on edge
  • REGTESTSexplicitly use balance roundrobin where RR is needed
  • MINORquicAdd more information about RX packets
  • BUILDaclsilence a possible null deref warning in parse_acl_expr()
  • BUG/MINORhaproxybe sure not to quit too early on soft stop
  • BUG/MINORquicfix padding issue on INITIAL retransmit
  • BUG/MINORquicfix room check if padding requested
  • BUG/MINORquicignore AGAIN ncbuf err when parsing CRYPTO frames
  • BUG/MINORtoolsAdd OOM check for malloc() in indent_msg()
  • BUG/MINORcompressionAdd OOM check for calloc() in parse_compression_options()
  • BUG/MINORcfgparseAdd OOM check for calloc() in cfg_parse_listen()
  • BUG/MINORaclAdd OOM check for calloc() in smp_fetch_acl_parse()
  • BUG/MINORlogAdd OOM checks for calloc() and malloc() in logformat parser and dup_logger()
  • BUG/MINORhalogAdd OOM checks for calloc() in filter_count_srv_status() and filter_count_url()
  • BUG/MEDIUMserverDuplicate healthcheck's alpn inherited from default server
  • REG-TESTSmap_redirectDon't use hdr_dom in ACLs with -m end matching method
  • BUG/MAJORmux-quicfix crash on reload during emission
  • BUG/MEDIUMquicCRYPTO frame freeing without eb_delete()
  • CLEANUPquicremove a useless CRYPTO frame variable assignment
  • MINORdocadd missing statistics column
  • MINORdocadd missing statistics column
  • DOCconfigurationconfuse strict-mode with zero-warning
  • DOCunreliable sockpair@ on macOS
  • BUG/MINORserverdecrement session idle_conns on del server
  • BUG/MINORconnectionremove extra session_unown_conn() on reverse
  • BUG/MINORconnectionrearrange union list members
  • BUG/MINORaclset arg_list->kw to aclkw->kw string literal if aclkw is found
  • BUG/MINORmux-quictrace with non initialized qcc
  • MINORquicremove ->offset qf_crypto struct field
  • BUG/MINORquicreorder fragmented RX CRYPTO frames by their offsets
  • BUG/MEDIUMRemove sync sends from streams to applets
  • BUG/MEDIUMstconnFix conditions to know an applet can get data from stream
  • MINORquiccentralize padding for HP sampling on packet building
  • BUG/MAJORquicfix INITIAL padding with probing packet only
  • BUG/MINORquicdo not emit probe data if CONNECTION_CLOSE requested
  • BUG/MINORmux-h1fix wrong lock label
  • BUG/MEDIUMhttp-clientTest HTX_FL_EOM flag before commiting the HTX buffer
  • DOCconfigrecommend single quoting passwords
  • DOCmanagementfix typo in commit f4f93c56
  • BUG/MINORinitInitialize random seed earlier in the init process
  • BUG/MEDIUMsslfix build with AWS-LC
  • BUG/MEDIUMsslFix 0rtt to the server
  • BUG/MINORstick-tablecap sticky counter idx with tune.nb_stk_ctr instead of MAX_SESS_STKCTR
  • BUILDcompatalways set _POSIX_VERSION to ease comparisons
  • BUILDcompatprovide relaxed versions of the MIN/MAX macros
  • DOClist missing global QUIC settings
  • BUG/MEDIUMthreadsDisable the workaround to load libgcc_s on macOS
  • BUG/MINORhalogexit with error when some output filters are set simultaneosly
  • BUG/MINORappletDon't trigger BUG_ON if the tid is not on appctx init
  • BUG/MINORquicWrong source address use on FreeBSD
  • BUG/MEDIUMhttp-clientNotify applet has more data to deliver until the EOM
  • BUG/MEDIUMhttp-clientDrain the request if an early response is received
  • BUG/MINORhttp-clientReject any 101-switching-protocols response
  • BUG/MINORhttp-clientIgnore 1XX interim responses in non-HTX mode
  • BUG/MEDIUMhttp-clientAsk for more room when request data cannot be xferred
  • BUG/MEDIUMhttp-clientProperly inc input data when HTX blocks are xferred
  • BUG/MEDIUMhttp-clientDon't wake http-client applet if nothing was xferred
  • BUG/MINORlistenerreally assign distinct IDs to shards
  • MEDIUMssl/clirelax crt insertion in crt-list of type directory
  • DOCmanagementclarify usage of -V with -c
  • BUG/MINORhluatake default-path into account with lua-load-per-thread
  • BUG/MEDIUMlogsfix sess_build_logline_orig() recursion with options
  • BUG/MEDIUMdnsReset reconnect tempo when connection is finally established
  • BUG/MEDIUMhluaReport to SC when output data are blocked on a lua socket
  • BUG/MEDIUMhluaReport to SC when data were consumed on a lua socket
  • BUG/MINORhluaSkip headers when a receive is performed on an HTTP applet
  • DOCdeviceatlas build clarifications
  • BUILD/MEDIUMdeviceatlasfix when installed in custom locations.
  • BUG/MINORhttpclientwrongly named httpproxy flag
  • DOCFix 'jwt_verify' converter doc
  • BUG/MINORjwtCopy input and parameters in dedicated buffers in jwt_verify converter
  • BUG/MEDIUMmux-h2Properly handle connection error during preface sending
  • BUG/MEDIUMhluaForbid any L6/L7 sample fetche functions from lua services
  • SCRIPTSdrop the HTML generation from announce-release
  • MINORquicUseless TX buffer size reduction in closing state
  • BUG/MINORquicwrong QUIC_FT_CONNECTION_CLOSE(0x1c) frame encoding
  • DOCconfigurationadd details on prefer-client-ciphers
  • BUG/MINORlogBe able to use %ID alias at anytime of the stream's evaluation
  • BUG/MINORstreamAvoid recursive evaluation for unique-id based on itself
  • BUG/MINORmux-quic/h3properly handle too low peer fctl initial stream
  • DOCconfigprefer-last-server: add notes for non-deterministic algorithms
  • BUG/MEDIUMh1/h2/h3reject forbidden chars in the Host header field
  • BUG/MEDIUMh2/h3reject some forbidden chars in :authority before reassembly
  • MINORhttpadd a function to validate characters of :authority
  • MINORcompileradd __nonstring macro
  • BUG/MEDIUMhlua_fcnensure systematic watcher cleanup for server list iterator
  • BUG/MINORhlua_fcnrestore server pairs iterator pointer consistency
  • BUG/MEDIUMssl/clienthelloECDSA with ssl-max-ver TLSv1.2 and no ECDSA ciphers
  • MEDIUMhapee/51duse '_' instead of '-' in 51d-set-property-vars() names
  • MEDIUMhapee/51dset version and date metadata variables
  • REORGhapee/51dCreate a function for setting property variables
  • MEDIUMhapee/51dadd a new action http-request 51d-set-property-vars

#2025/08/21 : 3.0r1 (1.0.0-345.673)

  • MINORconfigshow HAPROXY_BRANCH in show env output

#2025/06/17 : 3.0r1 (1.0.0-344.672)

  • BUG/MEDIUMcheckSet SOCKERR by default when a connection error is reported
  • MINORclihandle EOS/ERROR first
  • BUG/MEDIUMcliDon't consume data if outbuf is full or not available
  • BUG/MINORconfig/serverreject QUIC addresses
  • BUG/MINIRh1Fix doc of 'accept-unsafe-...-request' about URI parsing
  • BUG/MEDIUMfdUse the provided tgid in fd_insert() to get tgroup_info
  • BUG/MINORquicMissing SSL session object freeing
  • BUG/MEDIUMcheckRequeue healthchecks on I/O events to handle check timeout
  • DOCconfigFix a typo in 2.7 (Name format for maps and ACLs)
  • BUILDtoolsproperly define ha_dump_backtrace() to avoid a build warning
  • BUG/MINORquicensure cwnd limits are always enforced
  • MINORquicrename min/max fields for congestion window algo
  • BUG/MINORmux-quicdo not decode if conn in error
  • BUG/MEDIUMpeersalso limit the number of incoming updates
  • DOChluafix a few typos in HTTPMessage.set_body_len() documentation
  • DOChluaAdd a note to warn user about httpclient object reuse
  • BUG/MEDIUMhttpclientThrow an error if an lua httpclient instance is reused

#2025/05/28 : 3.0r1 (1.0.0-344.655)

  • MINORhapeeUpdate backports and hapee lists
  • BUG/MINORlimitscompute_ideal_maxconn: don't cap remain if fd_hard_limit=0
  • CIvtestFix the build script to properly work on MaOS
  • CIvtestRely on VTest2 to run regression tests
  • REGTESTSExplicitly allow failing shell commands in some scripts
  • REGTESTSMake the script testing conditional set-var compatible with Vtest2
  • BUG/MEDIUMhluaFix getline() for TCP applets to work with applet's buffers
  • BUG/MEDIUMhluaProperly detect shudowns for TCP applets based on the new API
  • BUG/MINORh3Set HTX flags corresponding to the scheme found in the request
  • DOCconfigurationfix the example in crt-store
  • BUG/MAJORcacheCrash because of wrong cache entry deleted
  • BUG/MEDIUMserverfix potential null-deref after previous fix
  • BUG/MEDIUMserverfix crash after duplicate GUID insertion
  • BUILDmakefileenable backtrace by default on musl

#2025/05/22 : 3.0r1 (1.0.0-344.641)

  • MINORsslsupport strict-sni in ssl-default-bind-options
  • BUG/MINORmux-h2Reset streams with NO_ERROR code if full response was already sent
  • BUG/MEDIUMstconnDisable 0-copy forwarding for filters altering the payload
  • MEDIUMhluaAdd function to change the body length of an HTTP Message
  • MINORquicAdd useful error traces about qc_ssl_sess_init() failures
  • CLEANUPquicUseless BIO_METHOD initialization
  • BUG/MINORh3don't insert more than one Host header
  • DOCconfigrecommend disabling libc-based resolution with resolvers
  • DOCconfigrestore default values for resolvers hold directive
  • DOCringrefer to newer RFC5424
  • BUG/MINORsinkdetect and warn when using send-proxy options with ring servers
  • BUG/MINORhluaFix Channel:data() and Channel:line() to respect documentation
  • BUG/MINORthreadsfix soft-stop without multithreading support
  • BUG/MINORssl/ckchalways free() the previous entry during parsing
  • BUG/MINORclifix too many args detection for commands
  • BUG/MEDIUMpeershold the refcnt until updating ts->seen
  • BUG/MINORquicreject invalid max_udp_payload size
  • BUG/MINORquicfix TP reject on invalid max-ack-delay
  • BUG/MINORquicuse proper error code on invalid received TP value
  • BUG/MINORquicreject retry_source_cid TP on server side
  • BUG/MINORquicuse proper error code on invalid server TP
  • BUG/MINORquicuse proper error code on missing CID in TPs
  • MINORquicextend return value during TP parsing
  • BUG/MINORproxyonly use proxy_inc_fe_cum_sess_ver_ctr() with frontends
  • BUG/MINORmux-h1Fix trace message in h1_detroy() to not relay on connection
  • BUG/MINORmux-h1Don't pretend connection was released for TCP>H1>H2 upgrade
  • BUG/MINORdnsprevent ds accumulation within dss
  • CLEANUPdnsremove unused dns_stream_server struct member
  • BUG/MINORdnsadd tempo between 2 connection attempts for dns servers
  • MINORappletadd appctx_schedule() macro
  • BUG/MAJORlistenerstransfer connection accounting when switching listeners
  • BUG/MINORcliIssue an error when too many args are passed for a command
  • MINORhapeeremove r1 from HAPROXY_BRANCH env variable

#2025/05/07 : 3.0r1 (1.0.0-344.608)

  • BUG/MEDIUMmux-fcgiTry to fully fill demux buffer on receive if not empty
  • MINORtoolsalso protect the library name resolution against concurrent accesses
  • BUG/MINORrhttpensure GOAWAY can be emitted after reversal
  • BUG/MINORrhttpfix reconnect if timeout connect unset
  • BUG/MINORmux-h2prevent past scheduling with idle connections
  • IMPORTplockuse cpu_relax() for a shorter time in EBO
  • IMPORTplocklower the slope of the exponential back-off
  • IMPORTplockgive higher precedence to W than S
  • MEDIUMepollskip reports of stale file descriptors
  • DEBUGepollstore and compare the FD's generation count with reported event
  • MINORfdadd a generation number to file descriptors
  • DEBUGfdadd a counter of takeovers of an FD since it was last opened
  • BUG/MEDIUMmux-fcgiProperly handle read0 on partial records
  • BUG/MINORstktableinvalid use of stkctr_set_entry() with mixed table types
  • DEBUGstreamAdd debug counters to track some client/server aborts
  • BUG/MINORquicdo not crash on CRYPTO ncbuf alloc failure

#2025/04/17 : 3.0r1 (1.0.0-344.591)

  • BUG/MEDIUMhluafix hlua_applet_{http,tcp}_fct() yield regression (lost data)
  • BUG/MINORh3reject request URI with invalid characters
  • BUG/MINORh3reject invalid :path in request
  • BUG/MINORh3filter upgrade connection header
  • BUG/MEDIUMh3trim whitespaces in header value prior to QPACK encoding
  • BUG/MEDIUMh3trim whitespaces when parsing headers value
  • BUG/MINORsinkadd tempo between 2 connection attempts for sft servers (2)
  • BUG/MEDIUMhttp-anaReport 502 from req analyzer only during rsp forwarding
  • BUG/MINORhttp-anaProperly detect client abort when forwarding the response
  • DOCconfigadd the missing profiling.memory to the global kw index
  • BUG/MINORhluafix invalid errmsg use in hlua_init()
  • BUG/MINORbackenddo not use the source port when hashing clientip
  • BUG/MEDIUMsamplefix risk of overflow when replacing multiple regex back-refs
  • BUG/MINORlogfix CBOR encoding with LOG_VARTEXT_START() + lf_encode_chunk()
  • CLEANUPlogadjust _lf_cbor_encode_byte() comment
  • BUG/MINORhlua_fcnfix potential UAF with Queue:pop_wait()
  • MINORtaskadd thread safe notification_new and notification_wake variants
  • TESTSFix build for filltab25.c
  • BUG/MEDIUMstreamFix a possible freeze during a forced shut on a stream
  • BUG/MEDIUMbackendfix reuse with set-dst/set-dst-port
  • BUG/MINORbackenddo not overwrite srv dst address on reuse
  • BUG/MINORrhttpfix incorrect dst/dst_port values
  • BUILDcompilerundefine the CONCAT() macro if already defined
  • DOCconfigfix two missing content in tcp-request examples
  • BUG/MINORlogfix gcc warn about truncating NUL terminator while init char arrays
  • BUG/MINORmux-quicremove extra BUG_ON() in _qcc_send_stream()
  • BUG/MEDIUMmux-quicfix crash on RS/SS emission if already close local

#2025/04/03 : 3.0r1 (1.0.0-344.564)

  • BUG/MEDIUMpeersprevent learning expiration too far in futur from unsync node
  • BUG/MINORpeersfix expire learned from a peer not converted from ms to ticks
  • MINORlogsupport raw logformat node typecast

#2025/03/20 : 3.0r1 (1.0.0-344.561)

  • BUILDtoolsavoid a build warning on gcc-4.8 in resolve_sym_name()
  • MINORtoolsteach resolve_sym_name() a few more common symbols
  • MINORtoolsease the declaration of known symbols in resolve_sym_name()
  • MINORtoolsimprove symbol resolution without dl_addr
  • MINORcliexport cli_io_handler() to ease symbol resolution
  • MINORtinfosplit the signal handler report flags into 3
  • BUILDtoolssilence a build warning when USE_THREAD=0
  • MINORtoolsuse only opportunistic symbols resolution
  • MINORtoolsresolve main() only once in resolve_sym_name()
  • MINORcompileradd a new __decl_thread_var() macro to declare local variables
  • MINORcompileradd a simple macro to concatenate resolved strings
  • BUG/MEDIUMstreamdon't use localtime in dumps from a signal handler
  • BUG/MEDIUMhlua/clifix cli applet UAF in hlua_applet_wakeup()
  • BUG/MINORhttp-checkDon't pretend a C-L heeader is set before adding it
  • BUG/MINORssl_crtlisthandle a possible strdup() failure
  • BUG/MINORnamespacehandle a possible strdup() failure
  • BUG/MINORstatsfix capabilities and hide settings for some generic metrics
  • MINORcfgparse/peersprovide more info when ignoring invalid peer or server lines
  • BUG/MINORserverdont return immediately from parse_server() when skipping checks
  • BUG/MINORcfgparse/peersproperly handle ignored local peer case
  • BUG/MINORcfgparse/peersfix inconsistent check for missing peer server
  • BUG/MEIDUMstartupreturn to initial cwd only after check_config_validity()
  • BUG/MINORlogset proper smp size for balance log-hash
  • CLEANUPlogremoving log-balance references
  • BUG/MINORservercheck for either proxy-protocol v1 or v2 to send hedaer
  • CLEANUPh3fix documentation of h3_rcv_buf()
  • BUG/MINORh3do not report transfer as aborted on preemptive response
  • BUG/MINORh2always trim leading and trailing LWS in header values
  • BUG/MEDIUMstreamuse non-blocking freq_ctr calls from the stream dumper
  • MINORfreq_ctrprovide non-blocking read functions
  • BUG/MEDIUMstreamnever allocate connection addresses from signal handler
  • MINORtinfoadd a new thread flag to indicate a call from a sig handler
  • BUG/MINORmux-h1always make sure h1s->sd exists in h1_dump_h1s_info()
  • MINORclockalways use atomic ops for global_now_ms
  • BUG/MINORsinkadd tempo between 2 connection attempts for sft servers
  • BUG/MINORcfgparsefix NULL ptr dereference in cfg_parse_peers
  • BUG/MINORstats-jsonDefine JSON_INT_MAX as a signed integer
  • BUG/MINORflt-traceSupport only one name option
  • BUG/MINORauthFix a leak on error path when parsing user's groups
  • BUG/MINORconfig/userlistSupport one 'users' option for 'group' directive
  • BUG/MINORcliFix a possible infinite loop in _getsocks()
  • BUG/MINORcliFix memory leak on error for _getsocks command
  • BUG/MINORcliDon't set SE flags from the cli applet
  • BUG/MINORtcp-rulesDon't forward close during tcp-response content rules eval
  • BUG/MINORmux-h2Properly handle full or truncated HTX messages on shut
  • BUG/MINORmux-quicprevent crash after MUX init failure
  • BUG/MINORquicprevent crash on conn access after MUX init failure
  • BUG/MINORfcgiDon't set the status to 302 if it is already set
  • BUG/MEDIUMfiltersHandle filters registered on data with no payload callback
  • BUG/MINORcliWait for the last ACK when FDs are xferred from the old worker
  • BUG/MINORssl/clishow ssl crt-list lacks sigals
  • BUG/MINORssl/clishow ssl crt-list lacks client-sigals
  • BUG/MINORquicfix CRYPTO payload size calcul for encoding
  • BUG/MINORquicreserve length field for long header encoding
  • BUG/MEDIUMdebugclose a possible race between thread dump and panic()
  • BUILDsslmore cleaner approach to WolfSSL without renegotiation
  • BUILDsslallow to build without the renegotiation API of WolfSSL
  • BUG/MINORlogprevent saddr NULL deref in syslog_io_handler()

#2025/03/14 : 3.0r1 (1.0.0-344.503)

  • BUG/MINORserverfix the server-template prefix memory leak
  • MINORloghandle log-forward option host
  • MINORlogadd option host log-forward option
  • MINORtoolsonly print address in sa2str() when port == -1
  • MINORlogprovide source address information in syslog_process_message()
  • MINORproxyadd proxy->options3
  • CLEANUPlogadd syslog_process_message() helper
  • MINORlogdetach prepare from parse message

#2025/03/13 : 3.0r1 (1.0.0-344.495)

  • DOCmanagementrename some last occurences from domain dns to resolvers
  • BUG/MEDIUMthreaduse pthread_self() not ha_pthread[tid] in set_affinity
  • MINORstartupadjust alert messages, when capabilities are missed
  • BUG/MINORcfgparse-tcprelax namespace bind check
  • BUG/MINORstreamfix age calculation in show sess output
  • CIgithubfix h2spec.config proxy names
  • TESTSistfix wrong array size
  • BUG/MEDIUMserverproperly initialize PROXY v2 TLVs
  • DOCoption redispatch should mention persist options
  • DOChtxclarify <mark> parameter for htx_xfer_blks()
  • BUG/MEDIUMhtxwrong count computation in htx_xfer_blks()
  • REGTESTSFix truncated.vtc to send 0-CRLF
  • BUG/MEDIUMfdmark FD transferred to another process as FD_CLONED

#2025/02/19 : 3.0r1 (1.0.0-342.482)

  • BUG/MEDIUMspoeDon't wakeup idle applets in loop during stopping
  • BUG/MINORspoeAllow applet creation when closing the last one during stopping
  • BUG/MINORspoeCheck the shared waiting queue to shut applets during stopping
  • BUG/MINORmux-quichandle closure of uni-stream
  • MINORmux-quicchange return value of qcs_attach_sc()
  • BUG/MEDIUMmux-quicdo not attach on already closed stream
  • BUG/MEDIUMsslchosing correct certificate using RSA-PSS with TLSv1.3

#2025/02/17 : 3.0r1 (1.0.0-341.475)

  • HAPEEsslenable USE_ENGINE automatically when OpenSSL < 3.0
  • BUG/MINORstartuphap_register_feature() fix for partial feature name
  • MINORstartupallow hap_register_feature() to enable a feature in the list
  • BUILDmakefilemake ERR apply to build options as well

#2025/01/28 : 3.0r1 (1.0.0-339.471)

  • MINORhapeeUpdate backports list
  • MINORepollpermit to mask certain specific events
  • BUG/MINORstreamProperly handle on-marked-up shutdown-backup-sessions
  • BUG/MINORsslput ssl_sock_load_ca under SSL_NO_GENERATE_CERTIFICATES
  • BUG/MINORquicdo not increase congestion window if app limited

#2025/01/23 : 3.0r1 (1.0.0-339.466)

  • BUG/MEDIUMmux-h1Properly close H1C if an error is reported before sending data
  • BUILDquicMove an ASSUME_NONNULL() for variable which is not null
  • MINORquicAdd a BUG_ON() on quic_tx_packet refcount
  • BUG/MINORquicensure a detached coalesced packet can't access its neighbours
  • BUG/MINORinitset HAPROXY_STARTUP_VERSION from the variable, not the macro
  • BUG/MAJORlog/sinkpossible sink collision in sink_new_from_srv()
  • BUG/MAJORquicreject too large CRYPTO frames
  • BUG/MEDIUMpromexUse right context pointers to dump backends extra-counters
  • BUG/MEDIUMstktablefix missing lock on some table converters
  • BUG/MINORquicreject NEW_TOKEN frames from clients
  • BUG/MINORstktablefix big-endian compatiblity in smp_to_stkey()

#2025/01/09 : 3.0r1 (1.0.0-339.455)

  • BUILDactivity/memprofilefix a build warning in the posix_memalign handler
  • MINORactivity/memprofilemonitor non-portable calls as well
  • MINORactivity/memprofilealso monitor strdup() activity
  • DEVsockAdd a debug counter to track strange flag on fd during connect()
  • MINORdebug/clireplace debug dev counters with debug counters
  • MINORdebugadd debug dev counters to list code counters
  • MINORdebugadd a new debug macro COUNT_IF()
  • MEDIUMdebugadd match counters for BUG_ON/WARN_ON/CHECK_IF
  • CLEANUPdebugmake the BUG_ON() macros check the condition in the outer one
  • MINORsampleextend the when converter to support an ACL
  • MINORaclexport find_acl_default()
  • MINORsampleadd the when converter to condition some expressions
  • MINORmux-h1Add support of the debug string for logs
  • MINORmux-quicmeasure QCS lifetime and its blocking state
  • MINORtimedefine tot_time structure
  • MINORquicdump quic_conn debug string for logs
  • MINORmux-quicimplement debug string for logs
  • MINORmux-quicdefine dump functions for QCC and QCS
  • MINORmux-h2implement the debug string for logs
  • MINORstconnadd a new pair of sf functions {bs,fs}.debug_str
  • BUG/MEDIUMh1-htxProperly handle bodyless messages
  • BUG/MEDIUMpromex/resolversDon't dump metrics if no nameserver is defined
  • MINORconfigAlert about extra arguments for errorfile and errorloc
  • DOCconfigadd missing track-sc0 in action keywords matrix
  • BUG/MINORstatsfix segfault caused by uninitialized value in show schema json
  • BUG/MEDIUMqueueMake process_srv_queue return the number of streams
  • BUG/MINORh2/rhttpfix HTTP2 conn counters on reverse
  • DOCconfigadd tune.lua.burst-timeout to the list of global parameters
  • DOCconfigreorder tune.lua.* keywords by alphabetical order
  • DOCconfigadd example for server track keyword
  • BUG/MEDIUMqueuesDo not use pendconn_grab_from_px().
  • BUG/MEDIUMqueuesMake sure we call process_srv_queue() when leaving
  • BUG/MEDIUMstconnOnly consider I/O timers to update stream's expiration date
  • REGTESTSssladd a PEM with mix of LF and CRLF line endings
  • BUG/MINORclicli_snd_buf: preserve \r\n for payload lines
  • BUG/MEDIUMclockmake sure now_ms cannot be TICK_ETERNITY
  • BUG/MEDIUMstats/serveruse watcher to track server during stats dump
  • MINORlistdefine a watcher type
  • BUG/MINORstatsdecrement srv refcount on stats-file release
  • BUG/MEDIUMstconnDon't forward shut for SC in connecting state

#2024/12/17 : 3.0r1 (1.0.0-339.415)

  • MINORssl/cliadd -A to the 'show ssl sni' command description
  • MINORssl/cliallow to filter expired certificates with 'show ssl sni'
  • MINORssladd utils functions to extract X509 notAfter date
  • MINORssl/cliadd negative filters to show ssl sni
  • CLEANUPsslfix comment in 'show ssl sni'
  • DOCmanagementfix typos and paragraph ordering in 'show ssl sni'
  • MEDIUMssl/clishow ssl sni list the loaded SNI in frontends
  • MINORssladd notBefore and notAfter utility functions
  • MINORhapee/modulesreport the per-stream allocated size for each module
  • BUG/MINORhapee/modulesdo not send trailing LFs on modules list

#2024/12/16 : 3.0r1 (1.0.0-339.405)

  • BUG/MINORserver-stateFix expiration date of srvrq_check tasks
  • CLEANUPmux-h2/tracesreword certain ambiguous traces
  • MINORmux-h2/tracesadd a missing trace on negative initial window size
  • BUG/MINORquicremove startup alert if conn socket-owner unsupported
  • BUG/MINORsignalregister default handler for SIGINT in signal_init()
  • BUG/MINORh1-htxUse default reason if not set when formatting the response
  • BUG/MEDIUMhttp-anaReset request flag about data sent to perform a L7 retry
  • BUG/MEDIUMevent_hdlfix uninitialized value in async mode when no data is provided
  • BUG/MINORlogfix lf_text() behavior with empty string
  • MINORmux-quicDon't send an emtpy H3 DATA frame during zero-copy forwarding

#2024/12/05 : 3.0r1 (1.0.0-339.395)

  • MINORstktableimplement recv-only table option

#2024/11/27 : 3.0r1 (1.0.0-337.394)

  • BUG/MEDIUMsockRemove FD_POLL_HUP during connect() if FD_POLL_ERR is not set
  • BUG/MEDIUMhttp-anaDon't release too early the L7 buffer
  • DEVlags/show-sess-to-flagsProperly handle fd state on server side
  • BUG/MAJORquicfix wrong packet building due to already acked frames

#2024/11/22 : 3.0r1 (1.0.0-337.390)

  • BUG/MAJORmux-h1Properly handle wrapping on obuf when dumping the first-line
  • BUG/MEDIUMpools/memprofilealways clean stale pool info on pool_destroy()
  • MINORactivity/memprofileoffer a function to unregister stale info
  • BUG/MINORactivity/memprofilereinitialize the free calls on DSO summary
  • BUG/MEDIUMwdtfix the stuck detection for warnings
  • BUG/MEDIUMdebugdon't set the STUCK flag from debug_handler()
  • DOCconfigImprove documentation of tune.http.maxhdr directive
  • BUG/MEDIUMh3Increase max number of headers when sending headers
  • BUG/MEDIUMh3Properly limit the number of headers received
  • BUG/MEDIUMmux-h2Check the number of headers in HEADERS frame after decoding
  • BUG/MEDIUMmux-h2Increase max number of headers when encoding HEADERS frames
  • BUG/MINORhttp-anaAdjust the server status before the L7 retries
  • DOCconfigurationwrap long line for strstr() conditional expression
  • DOCconfigurationexplain quotes and spaces in conditional blocks
  • DOCluafix yield-dependent methods expected contexts
  • DOCconfigMove fs.* and bs.* in section about L5 samples
  • DOCconfigMove wait_end in section about internal samples
  • DOCconfigSlightly improve the %Tr documentation
  • BUG/MINORhttp_anaReport -1 for %Tr for invalid response only
  • DOCconfigFix a typo in 1.3.1. The Request line
  • DOCconfigA a space before ':' for {bs,fs}.aborted and {bs,fs}.rst_code
  • BUG/MINORpeersmake sure to always apply offsets to now_ms in expiration
  • BUG/MINORmux_quicmake sure to always apply offsets to now_ms in expiration
  • BUG/MEDIUMmailersmake sure to always apply offsets to now_ms in expiration
  • BUG/MEDIUMchecksmake sure to always apply offsets to now_ms in expiration
  • BUG/MINORDon't report early srv aborts on request forwarding in DONE state
  • BUG/MEDIUMmux-h2Don't send RST_STREAM frame for streams with no ID

#2024/11/13 : 3.0r1 (1.0.0-337.363)

  • BUG/MEDIUMresolversInsert a non-executed resulution in front of the wait list
  • BUG/MINORclidon't show sockpairs in HAPROXY_CLI and HAPROXY_MASTER_CLI
  • BUG/MEDIUMquicprevent crash due to CRYPTO parsing error
  • BUG/MINORguid/serverensure thread-safety on GUID insert/delete
  • CLEANUPguidremove global tree export
  • BUG/MINORquicrepeat packet parsing to deal with fragmented CRYPTO
  • MINORquicextend return value of CRYPTO parsing
  • MINORquicuse dynamically allocated frame on parsing
  • MINORquicsimplify qc_parse_pkt_frms() return path
  • BUG/MEDIUMquicsupport wait-for-handshake
  • BUG/MINORstreamunblock stream on wait-for-handshake completion
  • MINORquicnotify connection layer on handshake completion
  • BUG/MEDIUMpatternprevent uninitialized reads in pat_match_{str,beg}
  • BUG/MINORhapeeMakefile: bad substitution for MODVERSION variable
  • BUG/MINORhapeerelax __vers symbol check
  • MINORdebugmove the recover now warn message after the optional notes
  • BUILDMissing inclusion header for ssize_t type
  • BUILDdebugalso declare strlen() in __ABORT_NOW()
  • DEBUGwdtadd a stats counter BlockedTrafficWarnings in show info
  • DEBUGwdtmake the blocked traffic warning delay configurable
  • DEBUGclimake it possible for debug dev loop to trigger warnings
  • DEBUGwdtbetter detect apparently locked up threads and warn about them
  • MINORdebugadd a function to dump a stuck thread
  • MINORwdtmove the local timers to a struct
  • MINORdebugremove the redundant process.thread_info array from post_mortem
  • MINORdebugalso add fdtab and acitvity to struct post_mortem
  • MINORdebugalso add a pointer to struct global to post_mortem
  • MINORdebugdo not limit backtraces to stuck threads
  • MINORdebugprint gdb hints when crashing
  • MINORconnectionadd new sample fetch functions fc_err_name and bc_err_name
  • MINORrawsockset connection error codes when returning from recv/send/splice
  • MINORconnectionadd more connection error codes to cover common errno
  • BUG/MINORstatsFix the name for the total number of streams created
  • MINORcli/debugshow dev: add cmdline and version
  • MINORtcpcheckAdd support for an option host header value for httpchk option
  • BUG/MINORquicfix malformed probing packet building
  • CLEANUPconnectionproperly name the CO_ER_SSL_FATAL enum entry
  • DOCconfigdocument connection error 44 (reverse connect failure)
  • BUG/MEDIUMpromexFix dump of extra counters
  • MINORstreamSave last evaluated rule on invalid yield
  • BUG/MINORhttp-anaReport internal error if an action yields on a final eval
  • BUG/MEDIUMmux-h1Fix how timeouts are applied on H1 connections
  • DOCconfigadd missing glitch_{cnt,rate} sample definitions
  • DOCconfigadd missing glitch_{cnt,rate} data types
  • BUG/MINORssl/cli'set ssl cert' does not check the transaction name correctly
  • BUG/MINORtracestop rewriting argv with -dt
  • MINORcliremove non-printable characters from 'debug dev fd'
  • MINORdebugstore important pointers in post_mortem
  • MINORdebugplace the post_mortem struct in its own section.
  • MINORdebugplace a magic pattern at the beginning of post_mortem
  • MINORpoolsexport the pools variable
  • BUILDdebugsilence a build warning with threads disabled
  • BUG/MEDIUMserverfix race on servers_list during server deletion
  • BUG/MINORstconnDon't disable 0-copy FF if EOS was reported on consumer side
  • BUG/MINORhttp-anaFix wrong client abort reports during responses forwarding
  • BUG/MEDIUMstconnReport blocked send if sends are blocked by an error
  • BUG/MINORserverfix dynamic server leak with check on failed init
  • MINORactivity/memprofileshow per-DSO stats
  • MEDIUMdebugon panic, make the target thread automatically allocate its buf
  • MINORdebugreplace ha_thread_dump() with its two components
  • MINORdebugmake ha_thread_dump_done() take the pointer to be used
  • MINORdebugslightly change the thread_dump_pointer signification
  • MINORdebugsplit ha_thread_dump() in two parts
  • MINORchunkdrop the global thread_dump_buffer
  • MINORdebugmake mark_tainted() return the previous value
  • MINORactivity/memprofilealways return other bin on NULL return address
  • BUG/MEDIUMconnection/http-reusefix address collision on unhandled address families
  • BUG/MEDIUMmux-h2Remove H2S from send list if data are sent via 0-copy FF
  • BUG/MEDIUMstats-htmlNever dump more data than expected during 0-copy FF
  • BUG/MINORmux-quicdo not close STREAM with empty FIN if no data sent
  • BUG/MINORmworkerfix mworker-max-reloads parser
  • DOCconfigfix rfc7239 forwarded typo in desc
  • BUG/MEDIUMquicavoid freezing 0RTT connections
  • BUG/MINORquicavoid leaking post handshake frames
  • REGTESTSNever reuse server connection in http-messaging/truncated.vtc
  • BUG/MAJORfilters/htxAdd a flag to state the payload is altered by a filter
  • BUG/MEDIUMstconnCheck FF data of SC to perform a shutdown in sc_notify()
  • BUG/MINORhttp-anaDon't report a server abort if response payload is invalid
  • BUG/MEDIUMstconnWait iobuf is empty to shut SE down during a check send
  • BUG/MINORhttpclientreturn NULL when no proxy available during httpclient_new()
  • BUG/MEDIUMqueuemake sure never to queue when there's no more served conns
  • BUG/MEDIUMmux-quicensure timeout server is active for short requests
  • BUG/MEDIUMhluaproperly handle sample func errors in hlua_run_sample_{fetch,conv}()
  • BUG/MEDIUMhluamake hlua_ctx_renew() safe
  • MINORargadd an argument type for identifier
  • BUG/MEDIUMserverserver stuck in maintenance after FQDN change
  • MINORhapee/daalert in case of incorrect data version
  • BUG/MINORhapee/daenabling use of precompiled json database in 'deviceatlas-json-file'
  • MINORhapeeUpdate backports list and hapee commit list
  • BUG/MINORhttp-anaDisable fast-fwd for unfinished req waiting for upgrade
  • BUG/MINORmux-h1Fix condition to set EOI on SE during zero-copy forwarding
  • MEDIUMbwlimUse a read-lock on the sticky session to apply a shared limit
  • MEDIUMstick-tableAdd support of a factor for IN/OUT bytes rates
  • MINORstream/statsExpose the total number of streams ever created in stats
  • MINORstream/statsExpose the current number of streams in stats
  • MINORstreamSupport dynamic changes of the number of connection retries
  • MINORstreamRely on a per-stream max connection retries value
  • MINORactionExport release_expr_int_action() release function
  • BUG/MEDIUMqueuealways dequeue the backend when redistributing the last server
  • MINORservermake srv_shutdown_sessions() call pendconn_redistribute()
  • BUG/MINORqueuemake sure that maintenance redispatches server queue
  • BUG/MEDIUMstreammake stream_shutdown() async-safe
  • MINORtaskdefine two new one-shot events for use with WOKEN_OTHER or MSG
  • MINORtoolsdo not attempt to use backtrace() on linux without glibc
  • BUILDtoolsonly include execinfo.h for the real backtrace() function
  • BUG/MINORcfgparse-globalfix allowed args number for setenv
  • BUG/MINORservermake sure the HMAINT state is part of MAINT
  • BUG/MEDIUMcliDeadlock when setting frontend maxconn
  • BUG/MEDIUMcliBe sure to catch immediate client abort
  • BUG/MINORmux-quicreport glitches to session
  • REGTESTSshorten a bit the delay for the h1/h2 upgrade test
  • REGTESTSh1/h2Update script testing H1/H2 protocol upgrades
  • BUG/MEDIUMmux-h1/mux-h2Reject upgrades with payload on H2 side only
  • MINORmux-h1Set EOI on SE during demux when both side are in DONE state
  • BUG/MINORh2reject extended connect for h2c protocol
  • BUG/MINORh1do not forward h2c upgrade header token
  • MINORconnectionNo longer include stconn type header in connection-t.h
  • BUG/MINORquicprevent freeze after early QCS closure
  • BUG/MEDIUMquichandle retransmit for standalone FIN STREAM
  • MINORquicimplement function to check if STREAM is fully acked
  • MINORquicconvert qc_stream_desc release field to flags
  • BUG/MINORcfgparse-listenfix option httpslog override warning message
  • BUG/MINORfix missing 'option httpslog' overrides previous 'option tcplog clf'... detection
  • BUG/MINORfix missing log-format overrides previous 'option tcplog clf'... detection
  • BUG/MEDIUMpromexWait to have the request before sending the response
  • BUG/MEDIUMcache/statsWait to have the request before sending the response
  • BUG/MEDIUMsc_strm/appletWake applet after a successfull synchronous send
  • DOCconfigExplicitly list relaxing rules for accept-invalid-http-* options
  • BUG/MINORpeerslocal entries updates may not be advertised after resync
  • BUG/MEDIUMqueueimplement a flag to check for the dequeuing
  • BUG/MINORclockvalidate that now_offset still applies to the current date
  • BUG/MINORclockmake time jump corrections a bit more accurate
  • BUG/MINORpollingfix time reporting when using busy polling
  • MEDIUMh1Accept invalid T-E values with accept-invalid-http-response option
  • MEDIUMhapee/51dsupport data reload for 51Degrees V4 engine
  • BUG/MINORpatterndo not leave a leading comma on set error messages
  • BUG/MINORh1-htxDon't flag response as bodyless when a tunnel is established
  • BUG/MAJORmux-h1Wake SC to perform 0-copy forwarding in CLOSING state
  • BUG/MEDIUMpatternprevent UAF on reused pattern expr
  • BUG/MINORpatternprevent const sample from being tampered in pat_match_beg()
  • BUG/MEDIUMclockdetect and cover jumps during execution
  • REGTESTSfix random failures with wrong_ip_port_logging.vtc under load
  • MINORhapeeadd a .hapee directory to list backporting notes
  • DOCconfigurationplace the HAPROXY_HTTP_LOG_FMT example on the correct line
  • MINORconfigCreated env variables for http and tcp clf formats
  • MINORImplements new log format of option tcplog clf
  • BUG/MINORquicToo short datagram during packet building failures (aws-lc only)
  • BUG/MINORquicCrash from trace dumping SSL eary data status (AWS-LC)
  • BUG/MEDIUMquicalways validate sender address on 0-RTT
  • MINORquicAdd trace for QUIC_EV_CONN_IO_CB event.
  • MINORquicImplement qc_ssl_eary_data_accepted().
  • MINORquicModify NEW_TOKEN frame structure (qf_new_token struct)
  • BUG/MINORquicMissing incrementation in NEW_TOKEN frame builder
  • MINORquicToken for future connections implementation.
  • MEDIUMssl/quicimplement quic crypto with EVP_AEAD
  • MINORquicImplement quic_tls_derive_token_secret().
  • MINORtoolsImplement ipaddrcpy().
  • BUG/MEDIUMclockalso update the date offset on time jumps
  • BUILDquic32bits build broken by wrong integer conversions for printf()
  • BUG/MINORcfgparse-globalremove tune.fast-forward from common_kw_list
  • DOCconfigcorrect the table for option tcplog
  • BUG/MINORpatternpat_ref_set: return 0 if err was found
  • BUG/MINORpatternpat_ref_set: fix UAF reported by coverity
  • BUG/MINORh3properly reject too long header responses
  • BUG/MINORproto_uxstdelete fd from fdtab if listen() fails
  • BUG/MINORmux-quicdo not send too big MAX_STREAMS ID
  • REGTESTSmclitest the pipelined commands on master CLI
  • BUG/MEDIUMmworker/clifix pipelined modes on master CLI
  • MINORchannelimplement ci_insert() function
  • BUG/MINORproto_tcpkeep error msg if listen() fails
  • BUG/MINORproto_tcpdelete fd from fdtab if listen() fails
  • BUG/MINORquic/tracemake quic_conn_enc_level_init() emit NEW not CLOSE
  • BUG/MINORtrace/quicmake qconn selectable as a lockon criterion
  • BUG/MINORtraceautomatically start in waiting mode with "start <evt>"
  • BUG/MEDIUMtracefix null deref in lockon mechanism since TRACE_ENABLED()
  • BUG/MINORtrace/quicpermit to lock on frontend/connect/session etc
  • BUG/MINORtrace/quicenable conn/session pointer recovery from quic_conn
  • DOCconfigurationfix alphabetical ordering of {bs,fs}.aborted
  • BUG/MINORfcgi-apphandle a possible strdup() failure
  • BUG/MEDIUMpeerNotify the applet won't consume data when it waits for sync
  • BUG/MEDIUMmux-h2Propagate term flags to SE on error in h2s_wake_one_stream
  • BUG/MEDIUMh2Only report early HTX EOM for tunneled streams
  • BUG/MEDIUMhttp-anaReport error on write error waiting for the response
  • BUG/MEDIUMquicprevent conn freeze on 0RTT undeciphered content
  • BUG/MEDIUMssl0-RTT initialized at the wrong place for AWS-LC
  • BUG/MEDIUMsslreactivate 0-RTT for AWS-LC
  • BUG/MINORstconnbs.id and fs.id had their dependencies incorrect
  • BUILDmux-ptUse the right name for the sedesc variable
  • BUG/MEDIUMmux-pt/mux-h1Release the pipe on connection error on sending path
  • BUG/MEDIUMstconnReport error on SC on send if a previous SE error was set
  • BUG/MEDIUMserver/addrfix tune.events.max-events-at-once event miss and leak
  • BUG/MEDIUMmux-ptFix condition to perform a shutdown for writes in mux_pt_shut()
  • BUG/MINORCrash on O-RTT RX packet after dropping Initial pktns
  • BUG/MINORquicToo shord datagram during O-RTT handshakes (aws-lc only)
  • BUG/MAJORmux-h2always clear MUX_MFULL and DEM_MROOM when clearing the mbuf
  • MINORmux-h2try to clear DEM_MROOM and MUX_MFULL at more places
  • BUG/MEDIUMmux-h1Properly handle empty message when an error is triggered
  • BUG/MINORquicunexploited retransmission cases for Initial pktns.
  • BUG/MEDIUMcliAlways release back endpoint between two commands on the mcli
  • BUG/MEDIUMmux-ptNever fully close the connection on shutdown
  • BUG/MINIRproxyMatch on 429 status when trying to perform a L7 retry
  • BUG/MEDIUMstreamPrevent mux upgrades if client connection is no longer ready
  • BUG/MEDIUMmux-h2Set ES flag when necessary on 0-copy data forwarding
  • MINORproxyAdd support of 429-Too-Many-Requests in retry-on status
  • DOCquicfix default minimal value for max window size
  • MEDIUMlogrelax some checks and emit diag warnings instead in lf_expr_postcheck()
  • BUG/MINORhapee/dafixed bug when using binary version of database
  • BUG/BUILDhapee/daadded preprocessed source code generation for *.cpp files
  • MINORhapee/WURFLtransfer error status from the _wurfl_reload() function
  • MINORhapee/WURFLadded live update database function
  • MINORhapee/WURFLadded custom API log function
  • MINORhapee/WURFLadded function to check correct module initialization
  • BUG/MINORhapee/WURFLcorrected version check of used wurfl library
  • BUILDhapee/darepaired build in case of using old DeviceAtlas library
  • MINORhapee/daadd function that allow data reload
  • MINORhapee/daadd spin locking
  • MINORhapee/daadd support for loading a precompiled json data
  • MEDIUMhapee/daRevert MEDIUM: da: update module to handle schedule mode.
  • MINORhapee/51dadd function that returns path to 51Degrees data file
  • MINORhapee/51dadd function that allow data reload
  • BUG/MINORhapee/51dadd spin locking
  • BUILDhapee/51dfix error when building with 51Degrees enabled
  • BUG/MEDIUMhapee/51dfix a segfault on exit when 51d configuration is not loaded
  • MEDIUMhapee/51duse fiftyoneDegreesProvider to access the pool and dataset
  • BUG/MEDIUMinitfix fd_hard_limit default in compute_ideal_maxconn
  • MEDIUMinitset default for fd_hard_limit via DEFAULT_MAXFD (take #2)
  • BUG/MEDIUMqueuedeal with a rare TOCTOU in assign_server_and_queue()
  • MINORqueueadd a function to check for TOCTOU after queueing
  • MEDIUMh1allow to preserve keep-alive on T-E + C-L
  • MINORquicAdd information to show quic for CUBIC cc.
  • MINORquicDump TX in flight bytes vs window values ratio.
  • BUG/MEDIUMjwtClear SSL error queue on error when checking the signature
  • BUG/MINORquicLack of precision when computing K (cubic only cc)
  • MEDIUMsinkdon't set NOLINGER flag on the outgoing stream interface
  • BUG/MINORquicNon optimal first datagram.
  • BUG/MINORcliAtomically inc the global request counter between CLI commands
  • BUG/MINORserverDon't warn fallback IP is used during init-addr resolution
  • BUG/MINORstick-tablefix crash for src_inc_gpc() without stkcounter
  • DOCconfigimprove the http-keep-alive section
  • DOCconfigurationissuers-chain-path not compatible with OCSP
  • BUG/MAJORmux-h2force a hard error upon short read with pending error
  • BUG/MEDIUMssl_sockfix deadlock in ssl_sock_load_ocsp() on error path
  • DOCinstalldon't reference removed CPU arg
  • BUG/MEDIUMdebug/clifix show threads crashing with low thread counts
  • BUG/MINORsessionEval L4/L5 rules defined in the default section
  • CLEANUPquicrename TID affinity elements
  • CLEANUPprotorename TID affinity callbacks
  • BUG/MEDIUMquicprevent crash on accept queue full
  • BUILDlistenersilence a build warning about unused value without threads
  • MINORprotoextend connection thread rebind API
  • BUG/MEDIUMbwlimBe sure to never set the analyze expiration date in past
  • DEVflags/quicdecode quic_conn flags
  • BUG/MEDIUMspoeBe sure to create a SPOE applet if none on the current thread
  • BUG/MEDIUMh1Reject empty Transfer-encoding header
  • BUG/MINORh1Reject empty coding name as last transfer-encoding value
  • BUG/MINORh1Fail to parse empty transfer coding names
  • BUG/MINORjwtfix variable initialisation
  • BUG/MEDIUMpeersFix crash when syncing learn state of a peer without appctx
  • DOCconfigurationupdate maxconn description
  • MEDIUMinitset default for fd_hard_limit via DEFAULT_MAXFD
  • BUG/MINORjwtdon't try to load files with HMAC algorithm
  • BUG/MEDIUMserverfix race on server_atomic_sync()
  • DOCconfigurationmore details about the master-worker mode
  • BUG/MEDIUMhlua/cliFix lua CLI commands to work with applet's buffers
  • BUG/MINORpromexRemove Help prefix repeated twice for each metric
  • BUG/MEDIUMquicfix possible exit from qc_check_dcid() without unlocking
  • BUG/MINORquicfix race-condition on trace for CID retrieval
  • BUG/MINORquicfix race condition in qc_check_dcid()
  • BUG/MEDIUMquicfix race-condition in quic_get_cid_tid()
  • BUG/MEDIUMh3ensure the :scheme pseudo header is totally valid
  • BUG/MEDIUMh3ensure the :method pseudo header is totally valid
  • BUG/MEDIUMserver/dnsprevent DOWN/UP flap upon resolution timeout or error
  • MINORactivitymake the memory profiling hash size configurable at build time
  • BUG/MINORserverfix first server template name lookup UAF
  • DOCconfigurationadd details about crt-store in bind crt keyword
  • BUG/MEDIUMstick-tableDecrement the ref count inside lock to kill a session
  • BUG/MINORhluareport proper context upon error in hlua_cli_io_handler_fct()
  • DEVflags/show-fd-to-flagsadapt to recent versions
  • BUG/MINORquicfix BUG_ON() on Tx pkt alloc failure
  • BUG/MINORh3fix BUG_ON() crash on control stream alloc failure
  • BUG/MINORmux-quicfix crash on qcs SD alloc failure
  • BUG/MINORh3fix crash on STOP_SENDING receive after GOAWAY emission
  • DOCapi/event_hdlsmall updates, fix an example and add some precisions
  • SCRIPTSgit-show-backportsdo not truncate git-show output
  • BUG/MAJORquicfix padding with short packets
  • DOCmanagementdocument ptr lookup for table commands
  • DOCconfigurationfix alphabetical order of bind options
  • BUG/MEDIUMproxyfix email-alert invalid free
  • REGTESTSsslfix some regtests 'feature cmd' start condition
  • DEBUGhluadistinguish burst timeout errors from exec timeout errors
  • BUG/MINORlogfix broken '+bin' logformat node option
  • DOCmanagementrename show stats domain cli dns to resolvers
  • DOC/MINORmanagementadd -dZ option
  • DOC/MINORmanagementadd missed -dR and -dv options
  • BUG/MINORquicfix padding of INITIAL packets
  • BUG/MAJORmux-h1Prevent any UAF on H1 connection after draining a request
  • CLEANUPlog/proxyfix comment in proxy_free_common()
  • BUG/MEDIUMproxyfix UAF with {tcp,http}checks logformat expressions
  • MINORproxyadd proxy_free_common() helper function
  • BUG/MINORpromexSkip resolvers metrics when there is no resolver section
  • DOCconfigadd missing context hint for new server and proxy keywords
  • DOCconfigadd missing section hint for guid proxy keyword
  • DOCconfigmove hash-key from proxy to server options
  • BUG/MEDIUMlogfix lf_expr_postcheck() behavior with default section
  • BUG/MINORproxyfix header_unique_id leak on deinit()
  • BUG/MINORproxyfix source interface and usesrc leaks on deinit()
  • BUG/MINORproxyfix dyncookie_key leak on deinit()
  • BUG/MINORproxyfix check_{command,path} leak on deinit()
  • BUG/MINORproxyfix email-alert leak on deinit()
  • BUG/MINORproxyfix log_tag leak on deinit()
  • BUG/MINORproxyfix server_id_hdr_name leak on deinit()
  • MINORlogfix http-send-name-header ignore warning message
  • BUG/MINORmux-h1Use the right variable to set NEGO_FF_FL_EXACT_SIZE flag
  • BUG/MAJORmux-h1Properly copy chunked input data during zero-copy nego
  • BUG/MEDIUMstconn/mux-h1Fix suspect change causing timeouts
  • BUG/MINORquicensure Tx buf is always purged
  • BUG/MINORquicfix computed length of emitted STREAM frames
  • BUG/MEDIUMsslbad auth selection with TLS1.2 and WolfSSL
  • BUG/MINORhapeeremove leading \n on __vers error
  • MEDIUMhapeewarn on unsupported initcalls
  • BUG/MINORhapeeforbid to load a module twice
  • BUG/MEDIUMsslwrong priority whem limiting ECDSA ciphers in ECDSA+RSA configuration
  • BUG/MEDIUMmux-quicDon't unblock zero-copy fwding if blocked during nego
  • CLEANUPhluasimplify ambiguous lua_insert() usage in hlua_ctx_resume()
  • BUG/MINORhluafix leak in hlua_ckch_set() error path
  • BUG/MINORhluaprevent LJMP in hlua_traceback()
  • BUG/MINORhluafix unsafe hlua_pusherror() usage
  • BUG/MINORhluadon't use lua_pushfstring() when we don't expect LJMP
  • CLEANUPhluause hlua_pusherror() where relevant
  • BUG/MINORquicprevent crash on qc_kill_conn()
  • BUG/MEDIUMmux-quicUnblock zero-copy forwarding if the txbuf can be released
  • MEDIUMstconnBe able to unblock zero-copy data forwarding from done_fastfwd
  • BUG/MEDIUMh1-htxDon't state interim responses are bodyless
  • BUG/MINORhluause CertCache.set() from various hlua contexts
  • DOCconfigurationadd an example for keywords from crt-store
  • BUG/MINORtoolsfix possible null-deref in env_expand() on out-of-memory
  • BUG/MINORtcpcheckreport correct error in tcp-check rule parser
  • BUG/MINORcfgparseremove the correct option on httpcheck send-state warning
  • HAPEEudpupdate structs and functions required for the UDP module
  • BUILDhapee/addonsfix build without USE_QUIC=1
  • HAPEEmakefileautomatically build objects in addons/hapee_*
  • HAPEEmakefileupdate the cleanup rule to also remove *.i from addons
  • HAPEEaddonsquic CID in -vv
  • HAPEEaddonsadds quic CID generator to interop with packetshield
  • MEDIUMhapeedoes not pass OPTION_LDFLAGS to modules
  • MINORhapee/modulescheck if we generate the API hash correctly
  • BUG/MINORhapee/modulesadjust include match() in gen-modules-config-h.awk
  • BUG/MINORhapee/modulesinitialize the module head list
  • BUILDhapee/modulesselect either md5 or md5sum
  • MEDIUMhapee/modulesload the STG_REGISTER initcalls
  • BUG/MINORhapee/modulesdisplay detailed error message on mod_init() failure
  • MINORhapee/modulesadd a new label MODULES_LOCK to the lock_label enum
  • MINORhapee/modulesadd the ability to register variable and functions.
  • MEDIUMhapee/modules'modules list' on the cli shows currently loaded modules
  • MINORhapee/modulesterminate properly loaded modules if possible
  • MEDIUMhapee/modulesadd memory reservation support for the modules
  • MINORhapeechange URLs for 3.0r1
  • BUILDhapee/modulesupdate HAPEE version macro to 3.0r1
  • BUILDhapee/modulesadd macros to compute numerical value of a HAPEE version
  • BUILDhapee/modulesadd version of the module in the defines
  • MEDIUMhapee/modulesadd modules support
×

About the new layout

For 2025, we're happy to introduce a redesigned HAProxy Configuration Manual!

The new manual enhances the user experience by providing more help for keywords, including more details about context, usage, and syntax. New search filters help you find keywords faster, with separate coverage for each variant.

If you would prefer to use the older layout click here.