Hi,
as promise, here comes 1.5.13. It's been 1.5 months already since 1.5.12
and my misleading announce of the backport of peers support for nbproc :-)
There's nothing really critical this time. The most important part is the
replacement of the dh-param groups provided by default in order to avoid
the issues brought with logjam. Some bugs were found in the tcp-checks
rules processing and were fixed. If you use tcp-checks, you'd be safer
with this update. Another one is an issue that was reported in 1.5.12
with peers trying to immediately reconnect upon error and eating a lot
of CPU. An old issue was reported regarding TIME_WAIT sockets on the
server side caused by POST requests terminated with abort-on-close. Now
we apply NOLINGER to avoid this. And there's this backport I announced
but forgot about peers now being usable with nbproc > 1 provided that
each section is referenced by tables from only one process.
Another point I wanted to mention. For a long time now (at least several
years), Cyril Bonté has been spending time reviewing patches pending for
maintenance releases, suggesting backports of fixes that I missed, and
helping to fix complex bugs in older releases (namely 1.4). Given that
maintenance takes a significant portion of my time, I proposed him to
join me in the maintenance task so that we can organize ourselves as a
"stable team" just as is done for the linux kernel and which works pretty
well, and he accepted. So from now on, future stable releases will be
issued by either of us, depending on our respective availabilities. Note
that since last announce of 1.6-dev2, the tags are GPG-signed, so there
will be no problem tracing who does what if anyone has any doubts. That
can be important for distros who need to be sure about what they backport.
With 1.6 coming in a few months and 1.5 being so much used, this help is
quite welcome, so I sincerely want to thank him for accepting this role
given that it's not always fun to deal with backports (though 1.5 has
been way better than 1.4 for now).
We have created a new mail address (stable at haproxy.org) to join both
of us easily, which it is recommended to Cc when you submit a bug fix
that needs to be backported to older versions. That will make the process
even more fluid and ease our task.
The full 1.5.13 changelog follows :
- BUG/MINOR: check: fix tcpcheck error message
- CLEANUP: deinit: remove codes for cleaning p->block_rules
- DOC: Update doc about weight, act and bck fields in the statistics
- MINOR: ssl: add a destructor to free allocated SSL ressources
- BUG/MEDIUM: ssl: fix tune.ssl.default-dh-param value being overwritten
- MEDIUM: ssl: replace standards DH groups with custom ones
- BUG/MINOR: debug: display (null) in place of "meth"
- BUG/MINOR: cfgparse: fix typo in 'option httplog' error message
- BUG/MEDIUM: cfgparse: segfault when userlist is misused
- BUG/MEDIUM: stats: properly initialize the scope before dumping stats
- BUG/MEDIUM: http: don't forward client shutdown without NOLINGER except for tunnels
- CLEANUP: checks: fix double usage of cur / current_step in tcp-checks
- BUG/MEDIUM: checks: do not dereference head of a tcp-check at the end
- CLEANUP: checks: simplify the loop processing of tcp-checks
- BUG/MAJOR: checks: always check for end of list before proceeding
- BUG/MEDIUM: checks: do not dereference a list as a tcpcheck struct
- BUG/MEDIUM: peers: apply a random reconnection timeout
- BUG/MINOR: ssl: fix smp_fetch_ssl_fc_session_id
- MEDIUM: init: don't stop proxies in parent process when exiting
- MINOR: peers: store the pointer to the signal handler
- MEDIUM: peers: unregister peers that were never started
- MEDIUM: config: propagate the table's process list to the peers sections
- MEDIUM: init: stop any peers section not bound to the correct process
- MEDIUM: config: validate that peers sections are bound to exactly one process
- MAJOR: peers: allow peers section to be used with nbproc > 1
- DOC: relax the peers restriction to single-process
- CLEANUP: config: fix misleading information in error message.
- MINOR: config: report the number of processes using a peers section in the error case
- BUG/MEDIUM: config: properly compute the default number of processes for a proxy
Usual URLs below :
Site index : http://www.haproxy.org/
Sources : http://www.haproxy.org/download/1.5/src/
Git repository : http://git.haproxy.org/git/haproxy-1.5.git/
Git Web browsing : http://git.haproxy.org/?p=haproxy-1.5.git
Changelog : http://www.haproxy.org/download/1.5/src/CHANGELOG
Cyril's HTML doc : http://cbonte.github.com/haproxy-dconv/configuration-1.5.html
Regards,
Willy
as promise, here comes 1.5.13. It's been 1.5 months already since 1.5.12
and my misleading announce of the backport of peers support for nbproc :-)
There's nothing really critical this time. The most important part is the
replacement of the dh-param groups provided by default in order to avoid
the issues brought with logjam. Some bugs were found in the tcp-checks
rules processing and were fixed. If you use tcp-checks, you'd be safer
with this update. Another one is an issue that was reported in 1.5.12
with peers trying to immediately reconnect upon error and eating a lot
of CPU. An old issue was reported regarding TIME_WAIT sockets on the
server side caused by POST requests terminated with abort-on-close. Now
we apply NOLINGER to avoid this. And there's this backport I announced
but forgot about peers now being usable with nbproc > 1 provided that
each section is referenced by tables from only one process.
Another point I wanted to mention. For a long time now (at least several
years), Cyril Bonté has been spending time reviewing patches pending for
maintenance releases, suggesting backports of fixes that I missed, and
helping to fix complex bugs in older releases (namely 1.4). Given that
maintenance takes a significant portion of my time, I proposed him to
join me in the maintenance task so that we can organize ourselves as a
"stable team" just as is done for the linux kernel and which works pretty
well, and he accepted. So from now on, future stable releases will be
issued by either of us, depending on our respective availabilities. Note
that since last announce of 1.6-dev2, the tags are GPG-signed, so there
will be no problem tracing who does what if anyone has any doubts. That
can be important for distros who need to be sure about what they backport.
With 1.6 coming in a few months and 1.5 being so much used, this help is
quite welcome, so I sincerely want to thank him for accepting this role
given that it's not always fun to deal with backports (though 1.5 has
been way better than 1.4 for now).
We have created a new mail address (stable at haproxy.org) to join both
of us easily, which it is recommended to Cc when you submit a bug fix
that needs to be backported to older versions. That will make the process
even more fluid and ease our task.
The full 1.5.13 changelog follows :
- BUG/MINOR: check: fix tcpcheck error message
- CLEANUP: deinit: remove codes for cleaning p->block_rules
- DOC: Update doc about weight, act and bck fields in the statistics
- MINOR: ssl: add a destructor to free allocated SSL ressources
- BUG/MEDIUM: ssl: fix tune.ssl.default-dh-param value being overwritten
- MEDIUM: ssl: replace standards DH groups with custom ones
- BUG/MINOR: debug: display (null) in place of "meth"
- BUG/MINOR: cfgparse: fix typo in 'option httplog' error message
- BUG/MEDIUM: cfgparse: segfault when userlist is misused
- BUG/MEDIUM: stats: properly initialize the scope before dumping stats
- BUG/MEDIUM: http: don't forward client shutdown without NOLINGER except for tunnels
- CLEANUP: checks: fix double usage of cur / current_step in tcp-checks
- BUG/MEDIUM: checks: do not dereference head of a tcp-check at the end
- CLEANUP: checks: simplify the loop processing of tcp-checks
- BUG/MAJOR: checks: always check for end of list before proceeding
- BUG/MEDIUM: checks: do not dereference a list as a tcpcheck struct
- BUG/MEDIUM: peers: apply a random reconnection timeout
- BUG/MINOR: ssl: fix smp_fetch_ssl_fc_session_id
- MEDIUM: init: don't stop proxies in parent process when exiting
- MINOR: peers: store the pointer to the signal handler
- MEDIUM: peers: unregister peers that were never started
- MEDIUM: config: propagate the table's process list to the peers sections
- MEDIUM: init: stop any peers section not bound to the correct process
- MEDIUM: config: validate that peers sections are bound to exactly one process
- MAJOR: peers: allow peers section to be used with nbproc > 1
- DOC: relax the peers restriction to single-process
- CLEANUP: config: fix misleading information in error message.
- MINOR: config: report the number of processes using a peers section in the error case
- BUG/MEDIUM: config: properly compute the default number of processes for a proxy
Usual URLs below :
Site index : http://www.haproxy.org/
Sources : http://www.haproxy.org/download/1.5/src/
Git repository : http://git.haproxy.org/git/haproxy-1.5.git/
Git Web browsing : http://git.haproxy.org/?p=haproxy-1.5.git
Changelog : http://www.haproxy.org/download/1.5/src/CHANGELOG
Cyril's HTML doc : http://cbonte.github.com/haproxy-dconv/configuration-1.5.html
Regards,
Willy