<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<HTML>
<HEAD>
- <META NAME="GENERATOR" CONTENT="LinuxDoc-Tools 0.9.21">
- <TITLE>Squid 3.1.0.7 release notes</TITLE>
+ <META NAME="GENERATOR" CONTENT="LinuxDoc-Tools 0.9.50">
+ <TITLE>Squid 3.1.0.9 release notes</TITLE>
</HEAD>
<BODY>
-<H1>Squid 3.1.0.7 release notes</H1>
+<H1>Squid 3.1.0.9 release notes</H1>
<H2>Squid Developers</H2>
<HR>
<HR>
<H2><A NAME="s1">1.</A> <A HREF="#toc1">Notice</A></H2>
-<P>The Squid Team are pleased to announce the release of Squid-3.1.0.7 for testing.</P>
+<P>The Squid Team are pleased to announce the release of Squid-3.1.0.9 for testing.</P>
<P>This new release is available for download from
<A HREF="http://www.squid-cache.org/Versions/v3/3.1/">http://www.squid-cache.org/Versions/v3/3.1/</A> or the
<A HREF="http://www.squid-cache.org/Mirrors/http-mirrors.html">mirrors</A>.</P>
</PRE>
</P>
+<DT><B>ftp_epsv</B><DD>
+<P>
+<PRE>
+ FTP Protocol extensions permit the use of a special "EPSV" command.
+
+ NATs may be able to put the connection on a "fast path" through the
+ translator using EPSV, as the EPRT command will never be used and therefore,
+ translation of the data portion of the segments will never be needed.
+
+ Turning this OFF will prevent EPSV being attempted.
+
+ WARNING: Doing so will convert Squid back to the old behavior with all
+ the related problems with external NAT devices/layers.
+
+ Requires ftp_passive to be ON (default) for any effect.
+
+</PRE>
+</P>
+
<DT><B>ftp_epsv_all</B><DD>
<P>
<PRE>
</PRE>
</P>
+<DT><B>forward_max_tries</B><DD>
+<P>Controls how many different forward paths Squid will try
+before giving up. Default: 10</P>
+
<DT><B>include</B><DD>
<P>New option to import entire secondary configuration files into squid.conf.
<PRE>
<P>
<DL>
-<DT><B>acl dst ipv6</B><DD>
+<DT><B>acl</B><DD>
<P>New preset content <EM>ipv6</EM> available as a preset type in the src and dst ACL matching all of the public IPv6 network space.</P>
<P>New acl type myportname, matching the name of the http_port or https_port where the request was accepted.</P>
+<P>New acl type tag, matching the tag= returned from the external_acl_type helper.</P>
<P>New acl type peername, matching against a named cache_peer entry where the request will be attempted first.
NP: peername currently is limited to only match the first peer possible.
<PRE>
acl aclname src ipv6 # request from IPv6 address
acl aclname myportname 3128 ... # http(s)_port name
acl aclname peername myPeer ... # cache_peer ... name=myPeer
+ acl aclname tag value ... # tag= option from external ACL
</PRE>
</P>
<DT><B>cache_mem</B><DD>
<P>Default size increased to 256MB.</P>
-<DT><B>cache_peer htcp-no-clr htcp-no-purge-clr htcp-only-clr htcp-forward-clr connection-auth[=on|off|auto]</B><DD>
+<DT><B>cache_peer htcp-no-clr htcp-no-purge-clr htcp-only-clr htcp-forward-clr connection-auth[=on|off|auto] connect-fail-limit=N</B><DD>
<P>New Options.
<PRE>
use 'htcp-no-clr' to send HTCP to the neighbor but without
and any such challenges received from there should be
ignored. Default is 'auto' to automatically determine the
status of the peer.
+
+ use 'connect-fail-limit=nn' to specify how many times
+ connecting to a peer must fail before it is marked as
+ down. Default is 10.
</PRE>
</P>
</PRE>
</P>
+<DT><B>debug_options rotate=</B><DD>
+<P>New parameter rotate=N to control number of cache.log rotations independent of other logs.</P>
+
+
<DT><B>external_acl_type</B><DD>
<P>New options 'ipv4' and 'ipv6' are added to set the IPv4/v6 protocol between squid and its helpers.
Please be aware of some limits to these options. These options only affet the transport protocol used
<PRE>
ipv4 / ipv6 IP-mode used to communicate to this helper.
For compatability with older configurations and helpers
- 'ipv4' is the default unless --with-localhost-ipv6 is used.
- --with-localhost-ipv6 changes the default to 'ipv6'.
- SPECIAL NOTE: explicit use of these options override --with-localhost-ipv6
+ the default is 'ipv4'.
</PRE>
</P>
<DT><B>https_port intercept sslbump connection-auth[=on|off]</B><DD>
<P>New port options. see http_port.</P>
+<DT><B>logfile_rotate</B><DD>
+<P>No longer controls cache.log rotation. Use debug_options rotate=N instead.</P>
+
<DT><B>maximum_object_size_in_memory</B><DD>
<P>Default size limit increased to 512KB.</P>
<P>Changing this is an RFC 2616 violation and now requires --enable-http-violations</P>
<DT><B>refresh_pattern</B><DD>
-<P>New set of basic patterns. These should always be listed after any custom ptterns.
+<P>New option 'ignore-must-revalidate'.
+<PRE>
+ ignore-must-revalidate ignores any ``Cache-Control: must-revalidate``
+ headers received from a server. Doing this VIOLATES
+ the HTTP standard. Enabling this feature could make you
+ liable for problems which it causes.
+
+</PRE>
+</P>
+<P>New set of basic patterns. These should always be listed after any custom patterns.
They ensure RFC compliance with certain protocol and request handling in the absence
of accurate Cache-Control: and Expires: information.
<PRE>
<P>Method names now accepted. Replacing the old magic numbers.
'1' becomes 'gre' and '2' becomes 'l2'</P>
-
</DL>
</P>
<P>If it produces ongoing serious problems the external helper may be needed
but please report the bugs anyway.</P>
-<DT><B>--with-localhost-ipv6</B><DD>
-<P>Build support for squid to map all 127.0.0.1 traffic onto ::1.
-The default is to build with 127.0.0.1 and ::1 being considered seperate IP.
-see the IPv6 details above for a better description.</P>
-<P>WARNING: This is an RFC violation. Use is discouraged.</P>
-
<DT><B>--with-logdir=PATH</B><DD>
<P>Allow build-time configuration of Default location for squid logs.</P>
<P>Enable special additions for IPv6 support in Windows XP.
see the IPv6 details above for a better description.</P>
+<DT><B>--with-pidfile=PATH</B><DD>
+<P>Allow build-time configuration of Default location and name of squid.pid file.</P>
+
<DT><B>--with-po2html=PATH</B><DD>
<P>Absolute path to po2html executable.
Default is to automatically detect the binary.</P>
<DT><B>http_port</B><DD>
<P><EM>no-connection-auth</EM> replaced by <EM>connection-auth=[on|off]</EM>. Default is ON.</P>
-<P><EM>tcpkeepalive=</EM> replaced by <EM>keepalive=</EM></P>
<P><EM>transparent</EM> option replaced by <EM>intercept</EM></P>
<DT><B>httpd_accel_no_pmtu_disc</B><DD>