v3.3.0
๐ฆ haproxyView on GitHub โ
โจ 6 features๐ 14 fixes๐ง 10 symbols
Summary
Version 3.3.0 introduces several improvements to QUIC, fixes bugs in ACME, server, and H3 modules, and enhances logging for HTTPS. It also includes documentation updates and prepares for future development.
Migration Steps
- The revert of "BUG/MEDIUM: server/ssl: Unset the SNI for new server connections if none is set" means the previous behavior regarding SNI is restored. If you relied on the behavior introduced by that reverted change, you may need to adjust your configuration.
โจ New Features
- httpclient: complete the https log
- quic: split global CID tree between FE and BE sides
- quic: use separate global quic_conns FE/BE lists
- quic: add "clo" filter on show quic
- quic: dump backend connections on show quic
- quic: mark backend conns on show quic
๐ Bug Fixes
- acme: better challenge_ready processing
- acme: warning รขยยctxรขยย may be used uninitialized
- server: do not use default SNI if manually set
- freq_ctr: Prevent possible signed overflow in freq_ctr_overshoot_period
- quic: do not prevent sending if no BE token
- quic/server: free quic_retry_token on srv drop
- quic: fix uninit list on show quic handler
- quic: release BE quic_conn on connect failure
- server: fix srv_drop() crash on partially init srv
- h3: do no crash on forwarding multiple chained response
- h3: handle properly buf alloc failure on response forwarding
- server/ssl: Unset the SNI for new server connections if none is set (reverted)
- acme: fix ha_alert() call
- sock-inet: ignore conntrack for transparent sockets on Linux