v11.14.0

Fixes

• Fix local docker mac acceptance #318

New Features

• Add a lua test - #313

Upgrades

• haproxy has been upgraded from v2.5.8 to v2.6.5
• Update autobumper to create pull requests for HAProxy 2.6.x - #317
• Bumped rubocop used for config template tests #319

Acknowledgements

Thanks @peanball, @b1tamara and @domdom82 for your contributions

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.6.5
keepalived	2.2.7
Lua	5.4.4
PCRE	10.40
socat	1.7.4.3

Deployment

releases:
- name: "haproxy"
  version: "11.14.0"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v11.14.0/haproxy-11.14.0.tgz"
  sha1: "4ac5442e569bdcca23f864b969d639aae496a405"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:7ea7b545749d428700eaa57fac00fc8f022588fcf391f55905d4a2e2f298c488"

v11.13.0

Fixes

• Fix infinite sleep after reload. Watch for pid instead PR
• Remove nbproc keyword as it is no longer supported in HAproxy 2.5 PR

New Features

• Replace grace keyword with a better solution as grace creates problems with reloading HAproxy PR (See docs on grace in 2.5)
• HAproxy dependencies are now auto-bumped! PR

Upgrades

• HAproxy has been upgraded from v2.5.7 to v2.5.8
• socat has been upgraded from v1.7.4.1 to v1.7.4.3
• hatop has been upgraded from v0.8.0 to v0.8.2
• lua has been upgraded from v5.4.3 to v5.4.4

Acknowledgements

Thanks @peanball and @a18e for the autobumping feature!
Thanks @maxmoehl for removing the nbproc keyword!
Thanks @domdom82 for improving the grace period handling!

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.5.8
keepalived	2.2.7
Lua	5.4.4
PCRE	10.40
socat	1.7.4.3

Deployment

releases:
- name: "haproxy"
  version: "11.13.0"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v11.13.0/haproxy-11.13.0.tgz"
  sha1: "abbf22780d03f21304e2aff74a6ad762e1f225eb"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:606742de6d964ceb7ad0f3bdd3815056387de0ae3989a0da9de6b6480d04d03f"

v11.12.0

Fixes

• None

New Features

• socat is directly executable due to a symlink
• expose h1-accept-payload-with-any-method as ha_proxy.always_allow_body_http10

Upgrades

• HAProxy 2.5.4 -> 2.5.7

Acknowledgements

Thanks @maxmoehl for the PR / fixes!

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.5.7
keepalived	2.2.7
Lua	5.4.3
PCRE	10.40
socat	1.7.4.1

Deployment

releases:
- name: "haproxy"
  version: "11.12.0"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v11.12.0/haproxy-11.12.0.tgz"
  sha1: "fb5f76f9e088317725621996b68033172fc1d737"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:343ed9ec6abe0854470201cb4b06fb97227c7fd8602f96f0f8e4812c57862a1d"

v11.11.0

Fixes

• PCRE2 bumped to 10.40, resolving CVEs CVE-2022-1586 and CVE-2022-1587

New Features

None.

Upgrades

• PCRE2 has been upgraded to v10.40 from v10.37

Acknowledgements

Thanks @peanball for the PR / fixes!

Versions

The following versions of upstream components are included in this haproxy-boshrelease:

Component	Version
HAProxy	2.5.4
keepalived	2.2.7
Lua	5.4.3
PCRE	10.40
socat	1.7.4.1

Deployment

releases:
- name: "haproxy"
  version: "11.11.0"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v11.11.0/haproxy-11.11.0.tgz"
  sha1: "1857fe4fbb1c9f0f9f739851d11aa22b9adc679e"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:d7fa684104c69207b9df3af83924c2e51de3cc99c12c070d7d10e3f4a9214b35"

v11.10.3

Fixes

• (patched only) Disable HTTP/1.0 check for body in GET/OPTION/DELETE (#288)

Acknowledgements

Thanks @domdom82 for the PR / fixes!

Deployment

releases:
- name: "haproxy"
  version: "11.10.3"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v11.10.3/haproxy-11.10.3.tgz"
  sha1: "a1655c1992b911fef3ad0b46c5abb8a0217ef0a2"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:bd2650047ccc24bb1f21ee9f91418a7e0f473718601b52a3b7c94597b8b1c6e0"

Upstream HAProxy Version: 2.5.4

v11.10.2

Fixes

• Wait for the main HAProxy process in daemon mode. This fixes monit not restarting crashed HAproxy processes.
• Resolve the null bytes in log file after rotation. This fixes issue #284

Acknowledgements

Thanks @peanball for the pid wait PR!
Thanks @mariash for the null byte fix!

Deployment

releases:
- name: "haproxy"
  version: "11.10.2"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v11.10.2/haproxy-11.10.2.tgz"
  sha1: "2bcfd51a693001e5c3fd140bb4e6dc244b098115"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:b8bef662e35c3312f0ab5b3a42a7cd627f0b150b3fbe56e4d9e1f26b4e4137ca"

v11.10.1

Upgrades

• keepalived has been upgraded to v2.2.7 from v2.2.2

Deployment

releases:
- name: "haproxy"
  version: "11.10.1"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v11.10.1/haproxy-11.10.1.tgz"
  sha1: "dee8fa53bac58f40a85ae82ecd79543d142a4c49"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:f2309bf7e1bf8134ce8fd31bc955e38ca0e021f8b4924eb0e591a81544319d8d"

v11.10.0

Upgrades

• haproxy has been upgraded to v2.5.4 from v2.4.4

Acknowledgements

Thanks Alexander Nicke for the Contributions!

Deployment

releases:
- name: "haproxy"
  version: "11.10.0"
  url: "https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v11.10.0/haproxy-11.10.0.tgz"
  sha1: "27b6a21d0326008172575bfd94e727057d5bffff"

# for deployments with sha256, use the following line instead:
# sha1: "sha256:3b831618400b7dd7d6de76dcbbc723dc68ce15b60dc4add1186c2015a6ecd93b"

v11.9.3

Fixes

• Fix PCRE-based regex support

Deployment

releases:
- name: haproxy
  version: 11.9.3
  url: https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v11.9.3/haproxy-11.9.3.tgz
  sha1: c488d5ded92dd2d841295c8df2cd919f8c8a1805

v11.9.2

Fixes

• We reverted the X-Forwarded-Client-Chain feature released in https://github.com/cloudfoundry/haproxy-boshrelease/releases/tag/v11.9.1
  This increased the header size of some requests which caused backend servers for users to hit header limits

Deployment

releases:
- name: haproxy
  version: 11.9.2
  url: https://github.com/cloudfoundry/haproxy-boshrelease/releases/download/v11.9.2/haproxy-11.9.2.tgz
  sha1: 5597103c88eb1f6715f1a11ac9db66a7c3cc346a