v14.2.0+2.8.10

New Features

• Strip headers from the frontend (@b1tamara, @hoffmaen)

Upgrades

• Minor version bumps

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.8.10
keepalived	2.2.8
Lua	5.4.7
PCRE	10.44
socat	1.8.0.0

Deployment

releases:
- name: "haproxy"
  version: "14.2.0+2.8.10"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v14.2.0+2.8.10/haproxy-14.2.0+2.8.10.tgz"
  sha1: "4e85dddfdbbeb875031552c5ca1743b63be4bb67"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:23fea6994b59053c54774bb3d763d032dafa55a0e4a7d60dff1cc055a8789fcf"

Deployment (patched)

releases:
- name: "haproxy"
  version: "14.2.0+2.8.10-patched"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v14.2.0+2.8.10/haproxy-14.2.0+2.8.10-patched.tgz"
  sha1: "412abbebc920bd867772a15a5f7a15b27120b611"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:2eda2a445327c60f0b191b1042a13e0363fd0ded60e7804f7315d19e8ac14846"

v14.1.1+2.8.10

Fixes

• Honor the default-off disable_tcp_accept_proxy flag when using accept_proxy with non-SSL backends. (@peanball)

New Features

None.

Upgrades

None.

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.8.10
keepalived	2.2.8
Lua	5.4.6
PCRE	10.44
socat	1.8.0.0

Deployment

releases:
- name: "haproxy"
  version: "14.1.1+2.8.10"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v14.1.1+2.8.10/haproxy-14.1.1+2.8.10.tgz"
  sha1: "6875a60bb75f1bac5604407c07f00cd19cba412c"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:787632a641bbb6d2142d64e3d4a899154fe6f753b067cc8becb8fc19efaa4d2b"

Deployment (patched)

releases:
- name: "haproxy"
  version: "14.1.1+2.8.10-patched"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v14.1.1+2.8.10/haproxy-14.1.1+2.8.10-patched.tgz"
  sha1: "6ab66f86155eb8105b5287a4fe089fd96247a503"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:54a086519fb31d3739a450d2936395fefbb17be25ea0239ae09726a1f9d12411"

v14.1.0+2.8.10

Fixes

No new fixes or functionality.

Upgrades

• haproxy has been upgraded from v2.8.9 to v2.8.10
• PCRE2 has been upgraded from v10.43 to v10.44
• socat has been upgraded from v1.7.4.4 to v1.8.0.0

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.8.10
keepalived	2.2.8
Lua	5.4.6
PCRE	10.44
socat	1.8.0.0

Deployment

releases:
- name: "haproxy"
  version: "14.1.0+2.8.10"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v14.1.0+2.8.10/haproxy-14.1.0+2.8.10.tgz"
  sha1: "35fa841f656c029732f1d1ff3e8626784284061c"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:fbb8253fc2364d9e372cf57aa0043e4de1fc3abd390ef720e9a37cbf39e146c1"

Deployment (patched)

releases:
- name: "haproxy"
  version: "14.1.0+2.8.10-patched"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v14.1.0+2.8.10/haproxy-14.1.0+2.8.10-patched.tgz"
  sha1: "f6011b7a6fd42cac8c62dc1b9b94d0dcc82788e5"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:33ec4840d43187db0010bcd54b98f727f90cbd6839afb3f4e4e652edbed2d813"

v14.0.0+2.8.9

Announcements

• We deprecate support for disable_tls_10, disable_tls_11, disable_tls_12 and disable_tls_13, move to ssl_min_ver and ssl_max_ver instead. The deprecated configuration might be removed with the next major release.

Fixes

• ⚠️ Default health check behavior for Proxy Protocol scenarios was changed: Proxy Protocol is now also enabled for the health check endpoint by default. Use disable_health_check_proxy: true to disable it again, see #633 (thanks @a18e) ⚠️

New Features

• For mTLS scenarios, the root CA DN (ssl_c_r_dn) is now sent besides other client certificate headers, see #659 (thanks @Mrizwanshaik)
• Rate limiting now also works for IPv6 client IP addresses, see #633 (thanks @a18e)
• SSL versions can be properly set via ssl_min_ver and ssl-max-ver as a successor of e.g. no-tlsv10, see #657 (thanks @kinjelom)
• An additional pre-start script can be defined via pre_start_script, see #657 (thanks @kinjelom)
• Authentication for the /stats endpoint can be disabled by defining stats_user empty, see #657 (thanks @kinjelom)
• Well formatted raw config can be appended via raw_blocks as per spec, see #652. Additional config before raw_blocks can be actively switched using config_mode, see #657 (thanks @kinjelom)

Upgrades

• Minor version bumps

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.8.9
keepalived	2.2.8
Lua	5.4.6
PCRE	10.43
socat	1.7.4.4

Deployment

releases:
- name: "haproxy"
  version: "14.0.0+2.8.9"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v14.0.0+2.8.9/haproxy-14.0.0+2.8.9.tgz"
  sha1: "d7c4b82b8cd8f9dcb32610949f2b6084e82d0e4d"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:beae6c34c4aed3b59d6f852f463ea4c13602929fa844201ec5567dacb9d5132c"

Deployment (patched)

releases:
- name: "haproxy"
  version: "14.0.0+2.8.9-patched"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v14.0.0+2.8.9/haproxy-14.0.0+2.8.9-patched.tgz"
  sha1: "24cf797a460bd28d408cfd86c0d3df5480ad9fc1"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:01853783dd2f5f06ae8f2ac0c05a77df3e09694b3d26a1534c4953e555a517f7"

v13.5.0+2.8.9

Upgrades

• HAProxy has been upgraded from v2.8.5 to v2.8.9
• PCRE2 has been upgraded from v10.42 to v10.43

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.8.9
keepalived	2.2.8
Lua	5.4.6
PCRE	10.43
socat	1.7.4.4

Deployment

releases:
- name: "haproxy"
  version: "13.5.0+2.8.9"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v13.5.0+2.8.9/haproxy-13.5.0+2.8.9.tgz"
  sha1: "c87ade925dc0b098b5de9f4e016ad7a7fe448d58"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:ecd584ec35d4c69d48f799dfa6107126129721132e6adfddb103b99a045061bd"

Deployment (patched)

releases:
- name: "haproxy"
  version: "13.5.0+2.8.9-patched"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v13.5.0+2.8.9/haproxy-13.5.0+2.8.9-patched.tgz"
  sha1: "b02eadb07da287c60d7cf672212c6015cb87cdf7"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:d2358e3f0501198eac9176a82c00590a50d898ced9cf552e2a843e3d3aad4c05"

v13.4.0+2.8.5

New Features

• HAProxy now supports retries on failed backend connections. (@domdom82)
• HAProxy now supports redispatching connection retries to different backend servers (@domdom82)

Upgrades

• HAProxy has been upgraded from v2.8.4 to v2.8.5

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.8.5
keepalived	2.2.8
Lua	5.4.6
PCRE	10.42
socat	1.7.4.4

Deployment

releases:
- name: "haproxy"
  version: "13.4.0+2.8.5"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v13.4.0+2.8.5/haproxy-13.4.0+2.8.5.tgz"
  sha1: "6331b5595b1c06e316542a15d371e23f52b2b44d"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:9005616a8c4657e2c4f5040beb6f387c125cd0db5dbe8f5583710d8a0ef4df19"

Deployment (patched)

releases:
- name: "haproxy"
  version: "13.4.0+2.8.5-patched"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v13.4.0+2.8.5/haproxy-13.4.0+2.8.5-patched.tgz"
  sha1: "b1683b679ec45f54886c61076882a4db8944857a"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:ba3cde768157af81dc33e9c54ece7e1bb3847e0fe85a2b8389628fe63a83b1bb"

v12.3.0+2.7.11

New Features

• HAProxy now supports retries on failed backend connections. (@domdom82)
• HAProxy now supports redispatching connection retries to different backend servers (@domdom82)

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.7.11
keepalived	2.2.8
Lua	5.4.6
PCRE	10.42
socat	1.7.4.4

Deployment

releases:
- name: "haproxy"
  version: "12.3.0+2.7.11"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v12.3.0+2.7.11/haproxy-12.3.0+2.7.11.tgz"
  sha1: "3f354adf249841240c71428ba51ddc91c8acca1a"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:8c15f9afe0ef3b3f496f5516544668d7e4d67ae5d345a64bc038a48751a46bf7"

Deployment (patched)

releases:
- name: "haproxy"
  version: "12.3.0+2.7.11-patched"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v12.3.0+2.7.11/haproxy-12.3.0+2.7.11-patched.tgz"
  sha1: "f0259dbe32b959a3b5b1ee13b5b194e114591f91"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:cbbd007a318bedc0f524ee21fe097155e375f0b8f488e9e8c28e00fb024fd877"

v12.2.2+2.7.11

Upgrades

• HAProxy has been upgraded from v2.7.10 to v2.7.11

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.7.11
keepalived	2.2.8
Lua	5.4.6
PCRE	10.42
socat	1.7.4.4

Deployment

releases:
- name: "haproxy"
  version: "12.2.2+2.7.11"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v12.2.2+2.7.11/haproxy-12.2.2+2.7.11.tgz"
  sha1: "b57c1b452c548b41df17c7057402c742edea3167"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:f7c58cd82b0561ea19c51a35cd8972a544d603d878a2d2924b3541aebefd0c01"

Deployment (patched)

releases:
- name: "haproxy"
  version: "12.2.2+2.7.11-patched"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v12.2.2+2.7.11/haproxy-12.2.2+2.7.11-patched.tgz"
  sha1: "1b121afad919fbbbc86bf6d0bf994831dbc68c2a"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:c542d0e7a785c83bed4f08897951a9b78276df5b41a53d23ff1bbe7c54f81f33"

v13.3.0+2.8.4

Fixes

• Fixes sporadic HTTP/2 issues: #571

New Features

• none

Upgrades

• HAProxy has been upgraded from v2.8.3 to v2.8.4

Remarks

• haproxy-boshrelease v13.2.0 was skipped due to issues within the CI
• HTTP/2 requests that would be hit by #571, will be successful but the access log writes SD--

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.8.4
keepalived	2.2.8
Lua	5.4.6
PCRE	10.42
socat	1.7.4.4

Deployment

releases:
- name: "haproxy"
  version: "13.3.0+2.8.4"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v13.3.0+2.8.4/haproxy-13.3.0+2.8.4.tgz"
  sha1: "c329197c77f5cd0917c24f0301bcf32215f1ba9e"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:8adc8e228393a1ece582ef9c02193d0d6ff7116e97a7c21168918623d174c0b0"

Deployment (patched)

releases:
- name: "haproxy"
  version: "13.3.0+2.8.4-patched"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v13.3.0+2.8.4/haproxy-13.3.0+2.8.4-patched.tgz"
  sha1: "26ab24738ce2bea72ae89b64cc3015995545aba2"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:585ef3f69230edcb358e7d893eea6fcb15ba41e23e19d48eb50f382b791036f7"

v13.1.0+2.8.3

🚨 💥❗ Warning: we were observing sporadic 502 errors for parallel H/2 POST/PUT requests after the upgrade to 2.8. Avoid an early adoption (see #571) 🚨 💥❗

Fixes

No fixes. Version bumps may contain fixes.

New Features

• Add an option to enable the HAProxy Prometheus Metrics endpoint (#536), thx @benjaminguttmann-avtq

  ha_proxy.stats_promex_enable:
     description: "If true, haproxy will enable native prometheus exporter."
     default: false
  ha_proxy.stats_promex_path:
    description: "Define prometheus exporter path."
    default: "/metrics"

Upgrades

• Various bumps for the CI environment that did not impact the resulting boshrelease.
• Minor refactoring to use host_only converter, thx @maxmoehl

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.8.3
keepalived	2.2.8
Lua	5.4.6
PCRE	10.42
socat	1.7.4.4

Deployment

releases:
- name: "haproxy"
  version: "13.1.0+2.8.3"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v13.1.0+2.8.3/haproxy-13.1.0+2.8.3.tgz"
  sha1: "2ff2a6f99ffb1e2f807b2bd55631fc0d6cf065de"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:b51a72afeb94409cc50d54d08efa24a86e7e388482c3bd94629491eacbd40579"

Deployment (patched)

releases:
- name: "haproxy"
  version: "13.1.0+2.8.3-patched"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v13.1.0+2.8.3/haproxy-13.1.0+2.8.3-patched.tgz"
  sha1: "ba90339ab54adb74c0e20bdae58a4267d24d15ae"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:c60ef22d1e4431bb20b7186fe1051b0fa95a6e0ea1ea5d0e7b9422b830667912"