Merge pull request #23 from Geocodio/feature/haproxy-1.8.14

Updated to haproxy 1.8.14

Author: pozgo

CHANGELOG

@@ -1,3 +1,151 @@
+2018/09/20 : 1.8.14
+    - BUG/MEDIUM: servers: check the queues once enabling a server
+    - BUG/MEDIUM: queue: prevent a backup server from draining the proxy's connections
+    - MINOR: dns: fix wrong score computation in dns_get_ip_from_response
+    - MINOR: dns: new DNS options to allow/prevent IP address duplication
+    - BUG/MEDIUM: lua: possible CLOSE-WAIT state with '\n' headers
+    - MINOR: threads: Introduce double-width CAS on x86_64 and arm.
+    - BUG/MEDIUM: threads: fix the double CAS implementation for ARMv7
+    - MINOR: threads: add more consistency between certain variables in no-thread case
+    - BUG/MEDIUM: threads: fix the no-thread case after the change to the sync point
+    - MEDIUM: hathreads: implement a more flexible rendez-vous point
+    - BUG/MEDIUM: cli: make "show fd" thread-safe
+    - BUG/MINOR: ssl: empty connections reported as errors.
+    - BUG/MEDIUM: ssl: fix missing error loading a keytype cert from a bundle.
+    - BUG/MEDIUM: ssl: loading dh param from certifile causes unpredictable error.
+    - BUG/MINOR: map: fix map_regm with backref
+    - DOC: dns: explain set server ... fqdn requires resolver
+    - DOC: ssl: Use consistent naming for TLS protocols
+    - BUG/MEDIUM: lua: socket timeouts are not applied
+    - BUG/MEDIUM: cli/threads: protect all "proxy" commands against concurrent updates
+    - BUG/MEDIUM: cli/threads: protect some server commands against concurrent operations
+    - DOC: Fix spelling error in configuration doc
+    - BUG/MEDIUM: unix: provide a ->drain() function
+    - BUG/MINOR: lua: Bad HTTP client request duration.
+    - BUG/MEDIUM: mux_pt: dereference the connection with care in mux_pt_wake()
+    - BUG/MEDIUM: lua: reset lua transaction between http requests
+    - BUG/MEDIUM: hlua: Make sure we drain the output buffer when done.
+    - BUG/MAJOR: thread: lua: Wrong SSL context initialization.
+    - BUG/MEDIUM: hlua: Don't call RESET_SAFE_LJMP if SET_SAFE_LJMP returns 0.
+    - BUG/MEDIUM: dns/server: fix incomatibility between SRV resolution and server state file
+    - BUG/MEDIUM: ECC cert should work with TLS < v1.2 and openssl >= 1.1.1
+    - MINOR: thread: implement HA_ATOMIC_XADD()
+    - BUG/MINOR: stream: use atomic increments for the request counter
+    - BUG/MEDIUM: session: fix reporting of handshake processing time in the logs
+    - BUG/MEDIUM: h2: fix risk of memory leak on malformated wrapped frames
+    - BUG/MINOR: dns: check and link servers' resolvers right after config parsing
+    - BUG/MINOR: http/threads: atomically increment the error snapshot ID
+    - BUG/MEDIUM: snapshot: take the proxy's lock while dumping errors
+    - BUG/MAJOR: kqueue: Don't reset the changes number by accident.
+    - BUG/MINOR: server: Crash when setting FQDN via CLI.
+    - DOC: Fix typos in lua documentation
+    - BUG/MEDIUM: patterns: fix possible double free when reloading a pattern list
+    - BUG/MINOR: tools: fix set_net_port() / set_host_port() on IPv4
+    - BUG/MINOR: cli: make sure the "getsock" command is only called on connections
+    - BUG/CRITICAL: hpack: fix improper sign check on the header index value
+
+2018/07/30 : 1.8.13
+    - MINOR: systemd: consider exit status 143 as successful
+    - BUG/MINOR: ssl: properly ref-count the tls_keys entries
+    - MINOR: mux: add a "show_fd" function to dump debugging information for "show fd"
+    - MINOR: h2: implement a basic "show_fd" function
+    - BUG/MINOR: h2: remove accidental debug code introduced with show_fd function
+    - MINOR: h2: keep a count of the number of conn_streams attached to the mux
+    - MINOR: h2: add the mux and demux buffer lengths on "show fd"
+    - BUG/MEDIUM: h2: don't accept new streams if conn_streams are still in excess
+    - BUG/MEDIUM: h2: never leave pending data in the output buffer on close
+    - BUG/MEDIUM: h2: make sure the last stream closes the connection after a timeout
+    - BUG/MINOR: http: Set brackets for the unlikely macro at the right place
+    - BUILD: Generate sha256 checksums in publish-release
+    - MINOR: debug: Add check for CO_FL_WILL_UPDATE
+    - MINOR: debug: Add checks for conn_stream flags
+    - BUG/MEDIUM: threads: Fix the exit condition of the thread barrier
+    - MINOR: h2: add the error code and the max/last stream IDs to "show fd"
+    - BUG/MEDIUM: stream-int: don't immediately enable reading when the buffer was reportedly full
+    - BUG/MEDIUM: stats: don't ask for more data as long as we're responding
+    - BUG/MINOR: servers: Don't make "server" in a frontend fatal.
+    - BUG/MEDIUM: threads/sync: use sched_yield when available
+    - BUG/MEDIUM: h2: prevent orphaned streams from blocking a connection forever
+    - BUG/MINOR: config: stick-table is not supported in defaults section
+    - BUG/MINOR: threads: Handle nbthread == MAX_THREADS.
+    - BUG/MEDIUM: threads: properly fix nbthreads == MAX_THREADS
+    - MINOR: threads: move "nbthread" parsing to hathreads.c
+    - BUG/MEDIUM: threads: unbreak "bind" referencing an incorrect thread number
+    - MEDIUM: proxy_protocol: Convert IPs to v6 when protocols are mixed
+    - SCRIPTS: git-show-backports: add missing quotes to "echo"
+
+2018/06/27 : 1.8.12
+    - BUG/MAJOR: stick_table: Complete incomplete SEGV fix
+    - MINOR: stick-tables: make stktable_release() do nothing on NULL
+
+2018/06/26 : 1.8.11
+    - BUG/MAJOR: Stick-tables crash with segfault when the key is not in the stick-table
+    - BUG/BUILD: threads: unbreak build without threads
+
+2018/06/22 : 1.8.10
+    - BUG/MINOR: lua: Socket.send threw runtime error: 'close' needs 1 arguments.
+    - BUG/MEDIUM: spoe: Flags are not encoded in network order
+    - BUG/MEDIUM: contrib/mod_defender: Use network order to encode/decode flags
+    - BUG/MEDIUM: contrib/modsecurity: Use network order to encode/decode flags
+    - BUG/MINOR: ssl/lua: prevent lua from affecting automatic maxconn computation
+    - BUG/MEDIUM: cache: don't cache when an Authorization header is present
+    - BUG/MEDIUM: dns: Delay the attempt to run a DNS resolution on check failure.
+    - BUG/BUILD: threads: unbreak build without threads
+    - BUG/BUILD: fd: fix typo causing a warning when threads are disabled
+    - BUG/MEDIUM: fd: Only check update_mask against all_threads_mask.
+    - BUG/MEDIUM: servers: Add srv_addr default placeholder to the state file
+    - BUG/MEDIUM: lua/socket: Length required read doesn't work
+    - BUG/MEDIUM: stick-tables: Decrement ref_cnt in table_* converters
+    - BUG/MEDIUM: spoe: Return an error when the wrong ACK is received in sync mode
+    - MINOR: task/notification: Is notifications registered ?
+    - BUG/MEDIUM: lua/socket: wrong scheduling for sockets
+    - BUG/MAJOR: lua: Dead lock with sockets
+    - BUG/MEDIUM: lua/socket: Notification error
+    - BUG/MEDIUM: lua/socket: Sheduling error on write: may dead-lock
+    - BUG/MEDIUM: lua/socket: Buffer error, may segfault
+    - MAJOR: spoe: upgrade the SPOP version to 2.0 and remove the support for 1.0
+    - BUG/MINOR: contrib/spoa_example: Don't reset the status code during disconnect
+    - BUG/MINOR: contrib/mod_defender: Don't reset the status code during disconnect
+    - BUG/MINOR: contrib/modsecurity: Don't reset the status code during disconnect
+    - BUG/MINOR: contrib/mod_defender: update pointer on the end of the frame
+    - BUG/MINOR: contrib/modsecurity: update pointer on the end of the frame
+    - DOC: SPOE.txt: fix a typo
+    - DOC: contrib/modsecurity: few typo fixes
+    - BUG/MINOR: unix: Make sure we can transfer abns sockets on seamless reload.
+    - BUG/MEDIUM: threads: handle signal queue only in thread 0
+    - BUG/MINOR: don't ignore SIG{BUS,FPE,ILL,SEGV} during signal processing
+    - BUG/MINOR: signals: ha_sigmask macro for multithreading
+    - MINOR: lua: Increase debug information
+    - BUG/MAJOR: map: fix a segfault when using http-request set-map
+    - BUG/MINOR: lua: Segfaults with wrong usage of types.
+    - BUG/MAJOR: ssl: Random crash with cipherlist capture
+    - BUG/MAJOR: ssl: OpenSSL context is stored in non-reserved memory slot
+    - BUG/MEDIUM: fd: Don't modify the update_mask in fd_dodelete().
+    - BUG/MEDIUM: threads: Use the sync point to check active jobs and exit
+    - MINOR: threads: Be sure to remove threads from all_threads_mask on exit
+
+2018/05/18 : 1.8.9
+    - BUG/MINOR: pattern: Add a missing HA_SPIN_INIT() in pat_ref_newid()
+    - BUG/MAJOR: channel: Fix crash when trying to read from a closed socket
+    - BUG/MINOR: log: t_idle (%Ti) is not set for some requests
+    - BUG/MEDIUM: lua: Fix segmentation fault if a Lua task exits
+    - MINOR: h2: detect presence of CONNECT and/or content-length
+    - BUG/MEDIUM: h2: implement missing support for chunked encoded uploads
+    - BUG/MINOR: lua/threads: Make lua's tasks sticky to the current thread
+    - BUG/MINOR: config: disable http-reuse on TCP proxies
+    - BUG/MINOR: checks: Fix check->health computation for flapping servers
+    - BUG/MEDIUM: threads: Fix the sync point for more than 32 threads
+    - BUG/MINOR: lua: Put tasks to sleep when waiting for data
+    - DOC/MINOR: clean up LUA documentation re: servers & array/table.
+    - BUG/MINOR: map: correctly track reference to the last ref_elt being dumped
+    - BUG/MEDIUM: task: Don't free a task that is about to be run.
+    - BUG/MINOR: lua: schedule socket task upon lua connect()
+    - BUG/MINOR: lua: ensure large proxy IDs can be represented
+    - BUG/MEDIUM: http: don't always abort transfers on CF_SHUTR
+    - BUG/MEDIUM: pollers: Use a global list for fd shared between threads.
+    - BUG/MEDIUM: ssl: properly protect SSL cert generation
+    - BUG/MINOR: spoe: Mistake in error message about SPOE configuration
+    
 2018/04/19 : 1.8.8
     - BUG/MEDIUM: threads: Fix the max/min calculation because of name clashes
     - BUG/MEDIUM: connection: Make sure we have a mux before calling detach().

Dockerfile

@@ -1,7 +1,7 @@
 FROM centos:centos7
 
 ENV   HAPROXY_MJR_VERSION=1.8 \
-      HAPROXY_VERSION=1.8.8 \
+      HAPROXY_VERSION=1.8.14 \
       HAPROXY_CONFIG='/etc/haproxy/haproxy.cfg' \
       HAPROXY_ADDITIONAL_CONFIG='' \
       HAPROXY_PRE_RESTART_CMD='' \