v9.7.0

New Features

• Syslog length and format can now be configured via ha_proxy.log_max_length and ha_proxy.log_format.
  Defaults remain unchanged at 1024 bytes, and rfc3164.

• HAProxy can now bind to the default interface on both IPv4 and IPv6 simultaneously, via the ha_proxy.v4v6
  property. When this is set, you must also set the ha_proxy.binding_ip to :: for it to take effect. This
  feature is off by default.

Acknowledgements

Thanks go to @cunnie for the IPv6 binding, and @msahihi for the log customization PRs!

Deployment

releases:
- name: haproxy
  version: 9.7.0
  url: https://github.com/cloudfoundry-incubator/haproxy-boshrelease/releases/download/v9.7.0/haproxy-9.7.0.tgz
  sha1: 8afcfb2d22b244477de5dcba40e9c11d58b376ad

v9.6.2

New Features

• Via backend_prefer_local_az, haproxy can now be configured to prefer sending traffic
  to backend servers in the same BOSH AZ as the haproxy server, to save cross-az traffic.
  This option is currently off by default, but will likely become on by default in a future
  release.

Acknowledgments

Thanks @h0nIg for the new feature!

Deployment

releases:
- name: haproxy
  version: 9.6.2
  url: https://github.com/cloudfoundry-incubator/haproxy-boshrelease/releases/download/v9.6.2/haproxy-9.6.2.tgz
  sha1: f4c80edae5e8655f21501c34f7fe9482b581be64

v9.6.1

Fixes

• Bump haproxy to 1.8.20 to resolve CVEs:
  https://security-tracker.debian.org/tracker/CVE-2018-20615
  https://security-tracker.debian.org/tracker/CVE-2019-11323

Deployment

releases:
- name: haproxy
  version: 9.6.1
  url: https://github.com/cloudfoundry-incubator/haproxy-boshrelease/releases/download/v9.6.1/haproxy-9.6.1.tgz
  sha1: b7e9d428adf2fd13a20b66a55cf1bcc28f2052c5

v9.6.0

Improvements

• ha_proxy.http_request_deny_conditions now supports negations of ACLs thanks to @gdenn
  Simply add the negate: true field to your ACL to negate it.
• ha_proxy.cidrs_in_file has been added to allow users to specify a wide array of ACLs
  that apply to an ACL in the ha_proxy.http_request_deny_conditions ACL list, which
  would otherwise be too long for haproxy to start up properly. Take a look at [the example]
  for more details(https://github.com/cloudfoundry-incubator/haproxy-boshrelease/blob/master/jobs/haproxy/spec#L396-L406).
  Thanks @gdenn for this feature as well!

Bug Fixes

• Resolved an issue where the haproxy stop script would fail if haproxy was already stopped.
  Thanks for the fix @domdom82!

Deployment

releases:
- name: haproxy
  version: 9.6.0
  url: https://github.com/cloudfoundry-incubator/haproxy-boshrelease/releases/download/v9.6.0/haproxy-9.6.0.tgz
  sha1: 2e4715251b9446d4e45818f315ef021c35a7564f

v9.5.2

New Features

• Custom HTTP responses can be configured using ha_proxy.custom_http_error_files. It takes
  a map of status codes to raw http responses to send. This allows operators to customize things
  like the 502/503 errors returned by HA Proxy.

Acknowledgements

Many thanks to @rodolf2488 and @barakyo for implementing this!

Deployment

releases:
- name: haproxy
  version: 9.5.2
  url: https://github.com/cloudfoundry-incubator/haproxy-boshrelease/releases/download/v9.5.2/haproxy-9.5.2.tgz
  sha1: 34e1120cd321dcdb0a359b3c8873b75a7b60575b

v9.5.1

Improvements

• ha_proxy.trusted_domain_cidrs can now be specified as a base64 encoded blob if desired.

Fixes

• Resolved an issue where haproxy failed to start when the ha_proxy.trusted_domain_cidrs value was too long

Acknowledgements

Thanks @Soha-Albaghdady for the fix!

Deployment

releases:
- name: haproxy
  version: 9.5.1
  url: https://github.com/cloudfoundry-incubator/haproxy-boshrelease/releases/download/v9.5.1/haproxy-9.5.1.tgz
  sha1: f56c1b5a7577f480f32c96a4eba5532679f61ecf

v9.5.0

New Features

• haproxy now supports a graceful drain on connections (disabled by default).
  To enable it, use ha_proxy.drain_enable: true. If haproxy does not complete
  its drain within the ha_proxy.drain_timeout perioud (defaults to 30s), it will
  shut off haproxy without waiting for in-flight connections to complete.

  ha_proxy.drain_frontend_grace_time can be used to set a delay between shutdown and
  when the frontends stop accepting connections.

Acknowledgements

Thanks @stefanlay for the new feature!

Deployment

releases:
- name: haproxy
  version: 9.5.0
  url: https://github.com/cloudfoundry-incubator/haproxy-boshrelease/releases/download/v9.5.0/haproxy-9.5.0.tgz
  sha1: 651abdeb879f1b5cd3f59a231cb9102b41ffaafd

v9.4.2

Fixes

• Adds support for a dont_track_primary property for keepalived, to resolve
  a DHCP related issue on OpenStack found in #132
• CI builds + the base manifest for HAProxy now use the latest available copy of BPM on
  the BOSH director

Acknowledgements

Thanks @rkoster for the fix!

Deployment

releases:
- name: haproxy
  version: 9.4.2
  url: https://github.com/cloudfoundry-incubator/haproxy-boshrelease/releases/download/v9.4.2/haproxy-9.4.2.tgz
  sha1: 1232ac3a62f29bf655fef056741571bd14b22146

v9.4.1

Fixes

• Updated the manifest for compatibility with a CI script, no functional changes

Deployment

releases:
- name: haproxy
  version: 9.4.1
  url: https://github.com/cloudfoundry-incubator/haproxy-boshrelease/releases/download/v9.4.1/haproxy-9.4.1.tgz
  sha1: 788305c312f71d70808c452736a1e343b7a48d0a

v9.4.0

Improvements

• Converted HAProxy to start using BPM
• Updated default manifest to use the xenial stemcell
• The default value for the haproxy keep-alive timeout is now 6 seconds, to improve compatibility with
  various HTTP clients.
• The keepalived job now provides a link including the VIP that keepalived uses
• Added configurable ha_proxy.max_connections and ha_proxy.max_open_files properties for controlling
  the number of simultaneous HAProxy connections without creating new boshreleases now.
• Fixed an issue with the ha_proxy.crt_list property not properly detecting mutual tls settings unless
  the verify key was present on every certificate.

Fixes

• Bumps HAProxy to v1.8.17

Acknowledgments

Thanks to @rosenhouse, @mathias-ewald, @Fn0rd1, @dueckminor, and @xoebus for the feature requests/bug reports!

Deployment

releases:
- name: haproxy
  version: 9.4.0
  url: https://github.com/cloudfoundry-incubator/haproxy-boshrelease/releases/download/v9.4.0/haproxy-9.4.0.tgz
  sha1: e873611c1c24a0044130319c3b2799b7068ff734