Welcome! Log In Create A New Profile

Advanced

[ANNOUNCE] haproxy-1.8.1

Posted by Willy Tarreau 
Willy Tarreau
[ANNOUNCE] haproxy-1.8.1
December 03, 2017 10:50PM
Subject: [ANNOUNCE] haproxy-1.8.1
To: haproxy@formilux.org

Hi,

HAProxy 1.8.1 was released on 2017/12/03. It added 39 new commits
after version 1.8.0.

This version addresses several remaining thread locking issues, one bug
in the HTTP/2 to HTTP/1 gateway affecting stability, an object size issue
in the cache, some small problems with the master-worker and a number of
small glitches reported in the H2 gateway by h2spec (we're now down from
31 to 12 issues and the remaining ones are either known limitations or
harmless issues that will be addressed later).

Overall that's not bad. There have been more issues than I would have
expected but that's not much given the nature of the changes having
introduced them.

While upgrading haproxy.org I noticed two extra issues that we'll have
to investigate : the old process will not quit as long as some checks
are running, and it seems that there's an issue with the peers teaching
mechanism at boot, which never quits during a reload, keeping the old
process hooked. We'll also have to investigate this one (maybe the two
are related).

Many thanks to all the bug reporters, keep up the good work, your deep
checks are quite useful!

Please find the usual URLs below :
Site index : http://www.haproxy.org/
Discourse : http://discourse.haproxy.org/
Sources : http://www.haproxy.org/download/1.8/src/
Git repository : http://git.haproxy.org/git/haproxy-1.8.git/
Git Web browsing : http://git.haproxy.org/?p=haproxy-1.8.git
Changelog : http://www.haproxy.org/download/1.8/src/CHANGELOG
Cyril's HTML doc : http://cbonte.github.io/haproxy-dconv/

Willy
---
Complete changelog :
Christian Ruppert (1):
BUILD: Fix LDFLAGS vs. LIBS re linking order in various makefiles

Christopher Faulet (2):
BUG/MEDIUM: tcp-check: Don't lock the server in tcpcheck_main
BUG/MAJOR: thread: Be sure to request a sync between threads only once at a time

Cyril Bonté (1):
DOC: cache: update sections and fix some typos

David Carlier (3):
BUILD/MINOR: deviceatlas: enable thread support
BUILD/MINOR: haproxy : FreeBSD/cpu affinity needs pthread_np header
BUILD/MINOR: haproxy: compiling config cpu parsing handling when needed

Emeric Brun (2):
BUG/MEDIUM: peers: fix some track counter rules dont register entries for sync.
BUG/MAJOR: thread/peers: fix deadlock on peers sync.

Emmanuel Hocdet (1):
BUG/MINOR: ssl: CO_FL_EARLY_DATA removal is managed by stream

Olivier Houchard (3):
BUG/MEDIUM: kqueue: Don't bother closing the kqueue after fork.
MINOR: threads: Fix pthread_setaffinity_np on FreeBSD.
BUG/MEDIUM: checks: Be sure we have a mux if we created a cs.

PiBa-NL (2):
BUG/MINOR: mworker: fix validity check for the pipe FDs
BUG/MINOR: mworker: detach from tty when in daemon mode

William Lallemand (2):
BUG/MEDIUM: ssl: don't allocate shctx several time
BUG/MEDIUM: cache: bad computation of the remaining size

Willy Tarreau (22):
BUILD: checks: don't include server.h
BUG/MEDIUM: stream: fix session leak on applet-initiated connections
BUG/MEDIUM: threads/peers: decrement, not increment jobs on quitting
BUG/MEDIUM: h2: don't report an error after parsing a 100-continue response
BUG/MINOR: hpack: fix debugging output of pseudo header names
BUG/MINOR: hpack: must reject huffman literals padded with more than 7 bits
BUG/MINOR: hpack: reject invalid header index
BUG/MINOR: hpack: dynamic table size updates are only allowed before headers
BUG/MAJOR: h2: correctly check the request length when building an H1 request
BUG/MINOR: h2: immediately close if receiving GOAWAY after the last stream
BUG/MINOR: h2: try to abort closed streams as soon as possible
BUG/MINOR: h2: ":path" must not be empty
BUG/MINOR: h2: fix a typo causing PING/ACK to be responded to
BUG/MINOR: h2: the TE header if present may only contain trailers
BUG/MEDIUM: h2: enforce the per-connection stream limit
BUG/MINOR: h2: do not accept SETTINGS_ENABLE_PUSH other than 0 or 1
BUG/MINOR: h2: reject incorrect stream dependencies on HEADERS frame
BUG/MINOR: h2: properly check PRIORITY frames
BUG/MINOR: h2: reject response pseudo-headers from requests
BUG/MEDIUM: h2: remove connection-specific headers from request
BUG/MEDIUM: h2: do not accept upper case letters in request header names
BUG/MINOR: h2: use the H2_F_DATA_* macros for DATA frames

---
Aleksandar Lazic
Re: [ANNOUNCE] haproxy-1.8.1
December 05, 2017 01:30AM
------ Originalnachricht ------
Von: "Willy Tarreau" <[email protected]>
An: haproxy@formilux.org
Gesendet: 03.12.2017 22:43:00
Betreff: [ANNOUNCE] haproxy-1.8.1

>Subject: [ANNOUNCE] haproxy-1.8.1
>To: haproxy@formilux.org
>
>Hi,
>
>HAProxy 1.8.1 was released on 2017/12/03. It added 39 new commits
>after version 1.8.0.
Docker images updated to 1.8.1

https://hub.docker.com/r/me2digital/haproxy18/
https://hub.docker.com/r/me2digital/openshift-ocp-router-hap18/

Regards
Aleks

>This version addresses several remaining thread locking issues, one bug
>in the HTTP/2 to HTTP/1 gateway affecting stability, an object size
>issue
>in the cache, some small problems with the master-worker and a number
>of
>small glitches reported in the H2 gateway by h2spec (we're now down
>from
>31 to 12 issues and the remaining ones are either known limitations or
>harmless issues that will be addressed later).
>
>Overall that's not bad. There have been more issues than I would have
>expected but that's not much given the nature of the changes having
>introduced them.
>
>While upgrading haproxy.org I noticed two extra issues that we'll have
>to investigate : the old process will not quit as long as some checks
>are running, and it seems that there's an issue with the peers teaching
>mechanism at boot, which never quits during a reload, keeping the old
>process hooked. We'll also have to investigate this one (maybe the two
>are related).
>
>Many thanks to all the bug reporters, keep up the good work, your deep
>checks are quite useful!
>
>Please find the usual URLs below :
> Site index : http://www.haproxy.org/
> Discourse : http://discourse.haproxy.org/
> Sources : http://www.haproxy.org/download/1.8/src/
> Git repository : http://git.haproxy.org/git/haproxy-1.8.git/
> Git Web browsing : http://git.haproxy.org/?p=haproxy-1.8.git
> Changelog : http://www.haproxy.org/download/1.8/src/CHANGELOG
> Cyril's HTML doc : http://cbonte.github.io/haproxy-dconv/
>
>Willy
>---
>Complete changelog :
>Christian Ruppert (1):
> BUILD: Fix LDFLAGS vs. LIBS re linking order in various makefiles
>
>Christopher Faulet (2):
> BUG/MEDIUM: tcp-check: Don't lock the server in tcpcheck_main
> BUG/MAJOR: thread: Be sure to request a sync between threads only
>once at a time
>
>Cyril Bonté (1):
> DOC: cache: update sections and fix some typos
>
>David Carlier (3):
> BUILD/MINOR: deviceatlas: enable thread support
> BUILD/MINOR: haproxy : FreeBSD/cpu affinity needs pthread_np
>header
> BUILD/MINOR: haproxy: compiling config cpu parsing handling when
>needed
>
>Emeric Brun (2):
> BUG/MEDIUM: peers: fix some track counter rules dont register
>entries for sync.
> BUG/MAJOR: thread/peers: fix deadlock on peers sync.
>
>Emmanuel Hocdet (1):
> BUG/MINOR: ssl: CO_FL_EARLY_DATA removal is managed by stream
>
>Olivier Houchard (3):
> BUG/MEDIUM: kqueue: Don't bother closing the kqueue after fork.
> MINOR: threads: Fix pthread_setaffinity_np on FreeBSD.
> BUG/MEDIUM: checks: Be sure we have a mux if we created a cs.
>
>PiBa-NL (2):
> BUG/MINOR: mworker: fix validity check for the pipe FDs
> BUG/MINOR: mworker: detach from tty when in daemon mode
>
>William Lallemand (2):
> BUG/MEDIUM: ssl: don't allocate shctx several time
> BUG/MEDIUM: cache: bad computation of the remaining size
>
>Willy Tarreau (22):
> BUILD: checks: don't include server.h
> BUG/MEDIUM: stream: fix session leak on applet-initiated
>connections
> BUG/MEDIUM: threads/peers: decrement, not increment jobs on
>quitting
> BUG/MEDIUM: h2: don't report an error after parsing a 100-continue
>response
> BUG/MINOR: hpack: fix debugging output of pseudo header names
> BUG/MINOR: hpack: must reject huffman literals padded with more
>than 7 bits
> BUG/MINOR: hpack: reject invalid header index
> BUG/MINOR: hpack: dynamic table size updates are only allowed
>before headers
> BUG/MAJOR: h2: correctly check the request length when building an
>H1 request
> BUG/MINOR: h2: immediately close if receiving GOAWAY after the
>last stream
> BUG/MINOR: h2: try to abort closed streams as soon as possible
> BUG/MINOR: h2: ":path" must not be empty
> BUG/MINOR: h2: fix a typo causing PING/ACK to be responded to
> BUG/MINOR: h2: the TE header if present may only contain trailers
> BUG/MEDIUM: h2: enforce the per-connection stream limit
> BUG/MINOR: h2: do not accept SETTINGS_ENABLE_PUSH other than 0 or
>1
> BUG/MINOR: h2: reject incorrect stream dependencies on HEADERS
>frame
> BUG/MINOR: h2: properly check PRIORITY frames
> BUG/MINOR: h2: reject response pseudo-headers from requests
> BUG/MEDIUM: h2: remove connection-specific headers from request
> BUG/MEDIUM: h2: do not accept upper case letters in request header
>names
> BUG/MINOR: h2: use the H2_F_DATA_* macros for DATA frames
>
>---
>
Sorry, only registered users may post in this forum.

Click here to login