summary refs log tree commit diff
path: root/pkgs/tools/networking/haproxy
Commit message (Collapse)AuthorAge
* haproxy: 2.5.3 -> 2.5.4R. RyanTM2022-03-07
| | | | | | | | | * haproxy: 2.5.3 -> 2.5.4 (#162666) * haproxy: update meta attributes add meta.changelog URL update meta.license using non-legacy identifiers (GPL-2.0-or-later with some files being LGPL-2.1-only) Co-authored-by: Renaud <c0bw3b@users.noreply.github.com>
* haproxy: 2.5.2 -> 2.5.3R. Ryantm2022-02-25
|
* haproxy: 2.5.1 -> 2.5.2R. Ryantm2022-02-18
|
* haproxy: 2.3.14 -> 2.5.1Thomas Gerbet2022-01-30
| | | | Closes #153262
* haproxy: 2.3.13 -> 2.3.14Thomas Gerbet2021-09-19
| | | | Fixes CVE-2021-40346.
* haproxy: 2.3.10 -> 2.3.13Robert Scott2021-08-24
|
* haproxy: fix lua lib nameJonathan Ringer2021-05-07
|
* haproxy: 2.3.7 -> 2.3.10R. RyanTM2021-04-28
|
* haproxy: 2.3.6 -> 2.3.7R. RyanTM2021-03-20
|
* haproxy: 2.3.5 -> 2.3.6R. RyanTM2021-03-08
|
* treewide: drop conditional makeFlag for darwin when specifiying cross-compilerBen Siraphob2021-02-20
|
* treewide: add targetPrefix to hardcoded references to CC=ccBen Siraphob2021-02-20
|
* haproxy: 2.3.4 -> 2.3.5R. RyanTM2021-02-07
|
* haproxy: 2.3.2 -> 2.3.4R. RyanTM2021-01-30
|
* pkgs/tools: stdenv.lib -> libBen Siraphob2021-01-15
|
* haproxy: 2.3.1 -> 2.3.2R. RyanTM2020-12-02
|
* haproxy: 2.3.0 -> 2.3.1R. RyanTM2020-11-28
|
* haproxy: add passthru.testsMario Rodas2020-11-14
|
* haproxy: 2.2.4 -> 2.3.0R. RyanTM2020-11-13
|
* haproxy: 2.2.2 -> 2.2.4R. RyanTM2020-11-02
|
* haproxy: 2.1.7 -> 2.2.2R. RyanTM2020-08-03
|
* haproxy: 2.1.6 -> 2.1.7R. RyanTM2020-07-03
|
* haproxy: 2.1.4 -> 2.1.6R. RyanTM2020-06-10
|
* haproxy: 2.1.3 -> 2.1.4R. RyanTM2020-04-05
|
* haproxy: 2.1.2 -> 2.1.3R. RyanTM2020-03-05
|
* haproxy: 2.0.10 -> 2.1.2R. RyanTM2020-02-09
|
* haproxy: 2.0.8 -> 2.0.10 (security)Robert Scott2019-12-01
| | | | addressing CVE-2019-19330
* haproxy: 1.9.8 -> 2.0.8Peter Hoeg2019-11-09
|
* treewide: name -> pname (easy cases) (#66585)volth2019-08-15
| | | | | | | | | treewide replacement of stdenv.mkDerivation rec { name = "*-${version}"; version = "*"; to pname
* Remove me (garbas) as maintainer since I don't have much time to maintain ↵Rok Garbas2019-07-03
| | | | anything
* haproxy: 1.9.7 -> 1.9.8R. RyanTM2019-06-01
| | | | | | | Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/haproxy/versions
* haproxy: 1.9.6 -> 1.9.7R. RyanTM2019-05-01
| | | | | | | Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/haproxy/versions
* haproxy: 1.9.3 -> 1.9.6R. RyanTM2019-04-14
| | | | | | | Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/haproxy/versions
* haproxy: 1.9.1 -> 1.9.3R. RyanTM2019-03-03
| | | | | | | Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/haproxy/versions
* haproxy: 1.9.0 -> 1.9.1R. RyanTM2019-01-17
| | | | | | | Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/haproxy/versions
* haproxy: 1.8.15 -> 1.9.0R. RyanTM2019-01-03
| | | | | | | Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/haproxy/versions
* haproxy: 1.8.14 -> 1.8.15R. RyanTM2018-12-17
| | | | | | | Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/haproxy/versions
* haproxy: 1.8.13 -> 1.8.14R. RyanTM2018-10-04
| | | | | | | Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/haproxy/versions
* haproxy: use getaddrinfo() on Linux (#44489)Vincent Bernat2018-08-05
| | | | | | | | | | | | | | | | | | | | As per project's README: > Recent systems can resolve IPv6 host names using getaddrinfo(). This > primitive is not present in all libcs and does not work in all of > them either. Support in glibc was broken before 2.3. Some embedded > libs may not properly work either, thus, support is disabled by > default, meaning that some host names which only resolve as IPv6 > addresses will not resolve and configs might emit an error during > parsing. If you know that your OS libc has reliable support for > getaddrinfo(), you can add USE_GETADDRINFO=1 on the make command > line to enable it. This is the recommended option for most Linux > distro packagers since it's working fine on all recent mainstream > distros. It is automatically enabled on Solaris 8 and above, as it's > known to work. Without this option, it is not possible for HAProxy to solve IPv6-only names. This option is enabled in Debian builds without any notable adverse effect.
* haproxy: 1.8.9 -> 1.8.13 (#44487)Vincent Bernat2018-08-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The patches previously applied have been included upstream. Upstream changelog (only MAJOR/MEDIUM): 2018/07/30 : 1.8.13 - BUG/MEDIUM: h2: don't accept new streams if conn_streams are still in excess - BUG/MEDIUM: h2: never leave pending data in the output buffer on close - BUG/MEDIUM: h2: make sure the last stream closes the connection after a timeout - BUG/MEDIUM: threads: Fix the exit condition of the thread barrier - BUG/MEDIUM: stream-int: don't immediately enable reading when the buffer was reportedly full - BUG/MEDIUM: stats: don't ask for more data as long as we're responding - BUG/MEDIUM: threads/sync: use sched_yield when available - BUG/MEDIUM: h2: prevent orphaned streams from blocking a connection forever - BUG/MEDIUM: threads: properly fix nbthreads == MAX_THREADS - BUG/MEDIUM: threads: unbreak "bind" referencing an incorrect thread number - MEDIUM: proxy_protocol: Convert IPs to v6 when protocols are mixed 2018/06/27 : 1.8.12 - BUG/MAJOR: stick_table: Complete incomplete SEGV fix 2018/06/26 : 1.8.11 - BUG/MAJOR: Stick-tables crash with segfault when the key is not in the stick-table 2018/06/22 : 1.8.10 - BUG/MEDIUM: spoe: Flags are not encoded in network order - BUG/MEDIUM: contrib/mod_defender: Use network order to encode/decode flags - BUG/MEDIUM: contrib/modsecurity: Use network order to encode/decode flags - BUG/MEDIUM: cache: don't cache when an Authorization header is present - BUG/MEDIUM: dns: Delay the attempt to run a DNS resolution on check failure. - BUG/MEDIUM: fd: Only check update_mask against all_threads_mask. - BUG/MEDIUM: servers: Add srv_addr default placeholder to the state file - BUG/MEDIUM: lua/socket: Length required read doesn't work - BUG/MEDIUM: stick-tables: Decrement ref_cnt in table_* converters - BUG/MEDIUM: spoe: Return an error when the wrong ACK is received in sync mode - BUG/MEDIUM: lua/socket: wrong scheduling for sockets - BUG/MAJOR: lua: Dead lock with sockets - BUG/MEDIUM: lua/socket: Notification error - BUG/MEDIUM: lua/socket: Sheduling error on write: may dead-lock - BUG/MEDIUM: lua/socket: Buffer error, may segfault - MAJOR: spoe: upgrade the SPOP version to 2.0 and remove the support for 1.0 - BUG/MEDIUM: threads: handle signal queue only in thread 0 - BUG/MAJOR: map: fix a segfault when using http-request set-map - BUG/MAJOR: ssl: Random crash with cipherlist capture - BUG/MAJOR: ssl: OpenSSL context is stored in non-reserved memory slot - BUG/MEDIUM: fd: Don't modify the update_mask in fd_dodelete(). - BUG/MEDIUM: threads: Use the sync point to check active jobs and exit
* haproxy: fix build on darwinAndreas Rammhold2018-06-08
|
* haproxy: fix CVE-2018-11469Andreas Rammhold2018-06-04
|
* haproxy: 1.8.4 -> 1.8.9Andreas Rammhold2018-06-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes CVE-2018-10184 a potential remote denial of service in the http/2 module. The version bump also includes various other changes that are described in the changelog [1]: 2018/05/18 : 1.8.9 - BUG/MINOR: pattern: Add a missing HA_SPIN_INIT() in pat_ref_newid() - BUG/MAJOR: channel: Fix crash when trying to read from a closed socket - BUG/MINOR: log: t_idle (%Ti) is not set for some requests - BUG/MEDIUM: lua: Fix segmentation fault if a Lua task exits - MINOR: h2: detect presence of CONNECT and/or content-length - BUG/MEDIUM: h2: implement missing support for chunked encoded uploads - BUG/MINOR: lua/threads: Make lua's tasks sticky to the current thread - BUG/MINOR: config: disable http-reuse on TCP proxies - BUG/MINOR: checks: Fix check->health computation for flapping servers - BUG/MEDIUM: threads: Fix the sync point for more than 32 threads - BUG/MINOR: lua: Put tasks to sleep when waiting for data - DOC/MINOR: clean up LUA documentation re: servers & array/table. - BUG/MINOR: map: correctly track reference to the last ref_elt being dumped - BUG/MEDIUM: task: Don't free a task that is about to be run. - BUG/MINOR: lua: schedule socket task upon lua connect() - BUG/MINOR: lua: ensure large proxy IDs can be represented - BUG/MEDIUM: http: don't always abort transfers on CF_SHUTR - BUG/MEDIUM: pollers: Use a global list for fd shared between threads. - BUG/MEDIUM: ssl: properly protect SSL cert generation - BUG/MINOR: spoe: Mistake in error message about SPOE configuration 2018/04/19 : 1.8.8 - BUG/MEDIUM: threads: Fix the max/min calculation because of name clashes - BUG/MEDIUM: connection: Make sure we have a mux before calling detach(). - BUG/MINOR: http: Return an error in proxy mode when url2sa fails - BUG/MEDIUM: kqueue: When adding new events, provide an output to get errors. - BUG/MINOR: cli: Guard against NULL messages when using CLI_ST_PRINT_FREE - MINOR: cli: Ensure the CLI always outputs an error when it should - DOC: lua: update the links to the config and Lua API - BUG/CRITICAL: h2: fix incorrect frame length check 2018/04/07 : 1.8.7 - BUG/MAJOR: cache: always initialize newly created objects - MINOR: servers: Support alphanumeric characters for the server templates names 2018/04/05 : 1.8.6 - BUG/MINOR: lua: the function returns anything - BUG/MINOR: lua funtion hlua_socket_settimeout don't check negative values - BUILD/MINOR: fix build when USE_THREAD is not defined - MINOR: cli/threads: make "show fd" report thread_sync_io_handler instead of "unknown" - MINOR: cli: make "show fd" report the mux and mux_ctx pointers when available - BUILD/MINOR: cli: fix a build warning introduced by last commit - BUG/MINOR: hpack: fix harmless use of uninitialized value in hpack_dht_insert - CLEANUP: h2: rename misleading h2c_stream_close() to h2s_close() - MINOR: h2: provide and use h2s_detach() and h2s_free() - BUG/MAJOR: h2: remove orphaned streams from the send list before closing - MINOR: h2: always call h2s_detach() in h2_detach() - MINOR: h2: fuse h2s_detach() and h2s_free() into h2s_destroy() - BUG/MEDIUM: h2/threads: never release the task outside of the task handler - BUG/MEDIUM: h2: don't consider pending data on detach if connection is in error - BUILD/MINOR: threads: always export thread_sync_io_handler() - BUG/MEDIUM: h2: always add a stream to the send or fctl list when blocked - BUG/MINOR: checks: check the conn_stream's readiness and not the connection - BUG/MINOR: email-alert: Set the mailer port during alert initialization - BUG/MINOR: cache: fix "show cache" output - BUG/MINOR: fd: Don't clear the update_mask in fd_insert. - BUG/MAJOR: cache: fix random crashes caused by incorrect delete() on non-first blocks - BUG/MINOR: spoe: Initialize variables used during conf parsing before any check - BUG/MINOR: spoe: Don't release the context buffer in .check_timeouts callbaclk 2018/03/23 : 1.8.5 - BUG/MINOR: threads: fix missing thread lock labels for 1.8 - BUG/MEDIUM: ssl: Don't always treat SSL_ERROR_SYSCALL as unrecovarable. - BUG/MEDIUM: ssl: Shutdown the connection for reading on SSL_ERROR_SYSCALL - BUG/MINOR: init: Add missing brackets in the code parsing -sf/-st - BUG/MINOR: ssl/threads: Make management of the TLS ticket keys files thread-safe - BUG/MEDIUM: http: Switch the HTTP response in tunnel mode as earlier as possible - BUG/MEDIUM: ssl/sample: ssl_bc_* fetch keywords are broken. - DOC: lua: new prototype for function "register_action()" - DOC: cfgparse: Warn on option (tcp|http)log in backend - BUG/MINOR: debug/pools: properly handle out-of-memory when building with DEBUG_UAF - MINOR: debug/pools: make DEBUG_UAF also detect underflows - BUG/MINOR: h2: Set the target of dbuf_wait to h2c - MINOR: stats: display the number of threads in the statistics. - BUG/MEDIUM: h2: always consume any trailing data after end of output buffers - BUG/MEDIUM: buffer: Fix the wrapping case in bo_putblk - BUG/MEDIUM: buffer: Fix the wrapping case in bi_putblk - Revert "BUG/MINOR: send-proxy-v2: string size must include ('\0')" - MINOR: systemd: Add section for SystemD sandboxing to unit file - MINOR: systemd: Add SystemD's Protect*= options to the unit file - MINOR: systemd: Add SystemD's SystemCallFilter option to the unit file - MINOR/BUILD: fix Lua build on Mac OS X - BUILD/MINOR: fix Lua build on Mac OS X (again) - BUG/MINOR: session: Fix tcp-request session failure if handshake. - CLEANUP: .gitignore: Ignore binaries from the contrib directory - BUG/MINOR: unix: Don't mess up when removing the socket from the xfer_sock_list. - BUG/MEDIUM: h2: also arm the h2 timeout when sending - BUG/MINOR: cli: Fix a crash when passing a negative or too large value to "show fd" - CLEANUP: ssl: Remove a duplicated #include - CLEANUP: cli: Remove a leftover debug message - BUG/MINOR: cli: Fix a typo in the 'set rate-limit' usage - BUG/MEDIUM: fix a 100% cpu usage with cpu-map and nbthread/nbproc - BUG/MINOR: force-persist and ignore-persist only apply to backends - BUG/MEDIUM: spoe: Remove idle applets from idle list when HAProxy is stopping - BUG/MEDIUM: threads/unix: Fix a deadlock when a listener is temporarily disabled - BUG/MAJOR: threads/queue: Fix thread-safety issues on the queues management - BUG/MINOR: dns: don't downgrade DNS accepted payload size automatically - BUG/MINOR: seemless reload: Fix crash when an interface is specified. - BUG/MINOR: cli: Fix a crash when sending a command with too many arguments - BUILD: ssl: Fix build with OpenSSL without NPN capability - BUG/MINOR: spoa-example: unexpected behavior for more than 127 args - BUG/MINOR: lua: return bad error messages - BUG/MEDIUM: tcp-check: single connect rule can't detect DOWN servers - BUG/MINOR: tcp-check: use the server's service port as a fallback - BUG/MEDIUM: threads/queue: wake up other threads upon dequeue - MINOR: log: stop emitting alerts when it's not possible to write on the socket - BUILD/BUG: enable -fno-strict-overflow by default - DOC: log: more than 2 log servers are allowed - DOC: don't suggest using http-server-close - BUG/MEDIUM: h2: properly account for DATA padding in flow control - BUG/MINOR: h2: ensure we can never send an RST_STREAM in response to an RST_STREAM - BUG/MINOR: listener: Don't decrease actconn twice when a new session is rejected [1] https://www.haproxy.org/download/1.8/src/CHANGELOG
* haproxy: 1.7.9 -> 1.8.4Ryan Mulligan2018-03-05
| | | | | | | | | Semi-automatic update. These checks were done: - built on NixOS - ran `/nix/store/vh158gs5y12g1rdd1dhbd1ng2mz1761s-haproxy-1.8.4/bin/haproxy -v` and found version 1.8.4 - found 1.8.4 with grep in /nix/store/vh158gs5y12g1rdd1dhbd1ng2mz1761s-haproxy-1.8.4 - found 1.8.4 in filename of file in /nix/store/vh158gs5y12g1rdd1dhbd1ng2mz1761s-haproxy-1.8.4
* haproxy: use lib.versions.majorMinorRyan Mulligan2018-03-04
|
* haproxy: 1.7.8 -> 1.7.9Thomas Bach2017-09-09
|
* haproxy: haproxy.org is now accessible via httpsThomas Bach2017-09-09
|
* haproxy: 1.7.3 -> 1.7.8Will Dietz2017-07-24
|
* haproxy: added fuzzy-id to the list of maintainersThomas Bach2017-03-29
|
* haproxy: Provide LUA and PCRE support as configurable optionsThomas Bach2017-03-29
| | | | | Both are enabled by default. Except for LUA on Darwin where compilation fails. (See #23901.)