v11.17.1

Fixes

Move request rate limit stick table counting to the HTTP level (#352)

New Features

None.

Upgrades

The haproxy-boshrelease blobstore is now moved to GCP / GCS (#353)

Acknowledgements

Thanks @peanball for the request rate capturing fix and blobstore move!

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.7.2
keepalived	2.2.7
Lua	5.4.4
PCRE	10.42
socat	1.7.4.4

Deployment

releases:
- name: "haproxy"
  version: "11.17.1"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v11.17.1/haproxy-11.17.1.tgz"
  sha1: "c051d7ea8aafd35bc2ec2cb3b78449eb22c98702"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:1b4a71de0030d3cdc412862cf48df74ce2bc67f8119299c60b7c9a85b64108e4"

Deployment (patched)

releases:
- name: "haproxy"
  version: "11.17.1"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v11.17.1/haproxy_patched-11.17.1.tgz"
  sha1: "0eae7337594aad75fdffa5fc0e59c9b9eb7729cf"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:8497b7aaefd40a705f439a8889697744267d926b4481974836f261b5726f1a37"

v11.17.0

Upgrades

• haproxy has been upgraded from 2.6.7 to 2.7.2 in #348 and #350

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.7.2
keepalived	2.2.7
Lua	5.4.4
PCRE	10.42
socat	1.7.4.4

Deployment

releases:
- name: "haproxy"
  version: "11.17.0"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v11.17.0/haproxy-11.17.0.tgz"
  sha1: "d72c6cb9b96f83786fd419c44b2366eb69fa072d"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:93aa608e1d827882836296277c388aa06c3932313d9544e125a2dfd32aa80345"

v11.16.1

Fixes

• Fixed a problem with Azure load balancer health checks not recognizing a draining HAproxy as unhealthy. PR

Acknowledgements

Thanks @domdom82 for the PR / fixes!

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.6.6
keepalived	2.2.7
Lua	5.4.4
PCRE	10.40
socat	1.7.4.4

Deployment

releases:
- name: "haproxy"
  version: "11.16.1"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v11.16.1/haproxy-11.16.1.tgz"
  sha1: "306350e1ba7b64b1636688cc8ea881d97447b211"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:5921c395a1b550e772e7fc1bc1edf5fec45c076260250f681c331a034412840c"

v11.16.0

Fixes

• Idle connections will no longer be cut immediately during restarts or reloads. HAproxy will instead try to close them gracefully via connection: close PR
• HAproxy will no longer restart accidentally during draining. This could happen if HAproxy drained and closed itself before BOSH issued a monit stop, giving monit a time window to restart HAproxy again. PR

New Features

• HAproxy is now tested with Ubuntu Jammy stemcell that supports OpenSSL 3.0 PR

Upgrades

• ginkgo has been upgraded from v1.16.2 to v2.2.0 PR

Acknowledgements

Thanks @domdom82 for the PR / fixes!

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.6.6
keepalived	2.2.7
Lua	5.4.4
PCRE	10.40
socat	1.7.4.3

Deployment

releases:
- name: "haproxy"
  version: "11.16.0"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v11.16.0/haproxy-11.16.0.tgz"
  sha1: "41ee9bc4e0bbfc8add7f148b84161bd29ad18cde"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:839e70a04e4bb83a9a8a76e12c9ba455a8a4ca1d72e05d156bf4e60424737abd"

v11.15.0

Fixes

• HAproxy drain script no longer fails if HAproxy pid doesn't exist anymore. PR
• Autobumper now creates nicer release notes. PR

New Features

• HAProxy Rate-Limiting is now configurable! See docs/rate_limiting.md. PR

Upgrades

Acknowledgements

Thanks @maxmoehl, @a18e, @peanball and @kecirlotfi for the PR / fixes!

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.6.5
keepalived	2.2.7
Lua	5.4.4
PCRE	10.40
socat	1.7.4.3

Deployment

releases:
- name: "haproxy"
  version: "11.15.0"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v11.15.0/haproxy-11.15.0.tgz"
  sha1: "4b7a4e68b937b3742776f79fbd89d43cf910de03"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:b58ea90e9ed86a0f21524e5627d4c02717db449473e3740a574ceeb4d0d883a8"

v11.14.0

Fixes

• Fix local docker mac acceptance #318

New Features

• Add a lua test - #313

Upgrades

• haproxy has been upgraded from v2.5.8 to v2.6.5
• Update autobumper to create pull requests for HAProxy 2.6.x - #317
• Bumped rubocop used for config template tests #319

Acknowledgements

Thanks @peanball, @b1tamara and @domdom82 for your contributions

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.6.5
keepalived	2.2.7
Lua	5.4.4
PCRE	10.40
socat	1.7.4.3

Deployment

releases:
- name: "haproxy"
  version: "11.14.0"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v11.14.0/haproxy-11.14.0.tgz"
  sha1: "4ac5442e569bdcca23f864b969d639aae496a405"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:7ea7b545749d428700eaa57fac00fc8f022588fcf391f55905d4a2e2f298c488"

v11.13.0

Fixes

• Fix infinite sleep after reload. Watch for pid instead PR
• Remove nbproc keyword as it is no longer supported in HAproxy 2.5 PR

New Features

• Replace grace keyword with a better solution as grace creates problems with reloading HAproxy PR (See docs on grace in 2.5)
• HAproxy dependencies are now auto-bumped! PR

Upgrades

• HAproxy has been upgraded from v2.5.7 to v2.5.8
• socat has been upgraded from v1.7.4.1 to v1.7.4.3
• hatop has been upgraded from v0.8.0 to v0.8.2
• lua has been upgraded from v5.4.3 to v5.4.4

Acknowledgements

Thanks @peanball and @a18e for the autobumping feature!
Thanks @maxmoehl for removing the nbproc keyword!
Thanks @domdom82 for improving the grace period handling!

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.5.8
keepalived	2.2.7
Lua	5.4.4
PCRE	10.40
socat	1.7.4.3

Deployment

releases:
- name: "haproxy"
  version: "11.13.0"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v11.13.0/haproxy-11.13.0.tgz"
  sha1: "abbf22780d03f21304e2aff74a6ad762e1f225eb"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:606742de6d964ceb7ad0f3bdd3815056387de0ae3989a0da9de6b6480d04d03f"

v11.12.0

Fixes

• None

New Features

• socat is directly executable due to a symlink
• expose h1-accept-payload-with-any-method as ha_proxy.always_allow_body_http10

Upgrades

• HAProxy 2.5.4 -> 2.5.7

Acknowledgements

Thanks @maxmoehl for the PR / fixes!

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.5.7
keepalived	2.2.7
Lua	5.4.3
PCRE	10.40
socat	1.7.4.1

Deployment

releases:
- name: "haproxy"
  version: "11.12.0"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v11.12.0/haproxy-11.12.0.tgz"
  sha1: "fb5f76f9e088317725621996b68033172fc1d737"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:343ed9ec6abe0854470201cb4b06fb97227c7fd8602f96f0f8e4812c57862a1d"

v11.11.0

Fixes

• PCRE2 bumped to 10.40, resolving CVEs CVE-2022-1586 and CVE-2022-1587

New Features

None.

Upgrades

• PCRE2 has been upgraded to v10.40 from v10.37

Acknowledgements

Thanks @peanball for the PR / fixes!

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.5.4
keepalived	2.2.7
Lua	5.4.3
PCRE	10.40
socat	1.7.4.1

Deployment

releases:
- name: "haproxy"
  version: "11.11.0"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v11.11.0/haproxy-11.11.0.tgz"
  sha1: "1857fe4fbb1c9f0f9f739851d11aa22b9adc679e"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:d7fa684104c69207b9df3af83924c2e51de3cc99c12c070d7d10e3f4a9214b35"

v11.10.3

Fixes

• (patched only) Disable HTTP/1.0 check for body in GET/OPTION/DELETE (#288)

Acknowledgements

Thanks @domdom82 for the PR / fixes!

Deployment

releases:
- name: "haproxy"
  version: "11.10.3"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v11.10.3/haproxy-11.10.3.tgz"
  sha1: "a1655c1992b911fef3ad0b46c5abb8a0217ef0a2"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:bd2650047ccc24bb1f21ee9f91418a7e0f473718601b52a3b7c94597b8b1c6e0"

Upstream HAProxy Version: 2.5.4