●Change8

Migrating to HAProxy v3.3-dev10

Version v3.3-dev10 introduces 4 breaking changes. This guide details how to update your code.

Released: 10/18/2025

4
Breaking Changes
2
Migration Steps
31
Affected Symbols

⚠️ Check Your Code

If you use any of these symbols, you need to read this guide:

connectionssinkmjsonhttp-anaacmepatchbotproxyh2_desync_attackshttp-messagingh3/qmuxstconnh1-htxmux-h1mux-fcgimux-h2hlua/http-fetchcachecompressionhtxsslappletjwtregexpcre2poolslb-chashstick-tablesquiccirrus-cimakefiletune.disable-fast-forward

Breaking Changes

●Issue #1

MAJOR: proxy: enable abortonclose by default on HTTP proxies. This change enables the abortonclose feature by default for HTTP proxies, which may affect existing configurations if this behavior is not desired. To revert to the previous behavior, explicitly set 'abortonclose' to 'disabled' in your frontend configuration.

●Issue #2

MAJOR: proxy: enable abortonclose by default on TLS listeners. Similar to HTTP proxies, this change enables abortonclose by default for TLS listeners. To maintain previous behavior, explicitly set 'abortonclose' to 'disabled' in your listener configuration.

●Issue #3

MEDIUM: jwt: Remove certificate support in jwt_verify converter. The `jwt_verify` converter no longer supports certificate verification. Use the new `jwt_verify_cert` converter for this functionality.

●Issue #4

MEDIUM: htx: Remove the HTX extra field. The HTX extra field has been removed. Code relying on this field for data transfer, such as body size or message formatting, needs to be updated to use the `<kip>` or `<kop>` values instead.

Migration Steps

  1. 1
    If your configuration relies on the HTX extra field for data transfer (e.g., body size, message formatting), update your code to use the `<kip>` or `<kop>` values instead.
  2. 2
    If you were explicitly disabling `abortonclose` on HTTP proxies or TLS listeners, you may need to update your configuration to reflect the new default behavior or explicitly re-enable the previous behavior if desired.

Release Summary

This release introduces significant changes to proxy behavior with abortonclose enabled by default for HTTP and TLS listeners. It also includes numerous bug fixes, performance improvements related to data handling, and enhancements to JWT and SSL functionalities.

Need More Details?

View the full release notes and all changes for HAProxy v3.3-dev10.

View Full Changelog