From: Amos Jeffries Date: Sun, 27 Sep 2009 01:30:22 +0000 (+1300) Subject: Prep for 3.1.0.14 X-Git-Tag: SQUID_3_1_0_14~1 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=470531285b9b750cd53e4348eb49621e3904c018;p=thirdparty%2Fsquid.git Prep for 3.1.0.14 --- diff --git a/ChangeLog b/ChangeLog index 122d296c44..9e3b7e275d 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,28 @@ +Changes to squid-3.1.0.14 (27 Sep 2009): + + - Bug 2777: Various build issues on OpenSolaris + - Bug 2773: Segfault in RFC2069 Digest authentication + - Bug 2747: Compile errors on Solaris 10 + - Bug 2735: Incomplete -fhuge-objects detection + - Bug 2722: Fix http_port accel combined with CONNECT + - Bug 2718: FTP sends EPSV2 on IPv4 connection + - Bug 2648: stateful helpers stuck in reserved + - Bug 2570: wccp2 "Here I Am" announcements not sent in memory-ony mode + - Bug 2510: digest_ldap_auth uses incorrect logic with TLS + - Bug 2483: bind() called before connect() + - Bug 2215: config file line length limit (extended to 2 KB) + - Support Accept-Language: * wildcard + - Support autoconf 2.64 + - Support TPROXY for IPv6 traffic (requires kernel support) + - Support TPROXY cache cluster behind WCCPv2 + - Correct ESI support to work in multi-mode Squid + - Add 0.0.0.0 as an to_localhost address + - DiskIO detection fixes and use optimal IO in default build. + - Correct peer connect-fail-limit default of 10 + - Prevent squidclient sending two Accept: headers + - ... all bug fixes from 3.0.STABLE19 + - ... and many more documentation fixes + Changes to squid-3.1.0.13 (04 Aug 2009): - Bug 2723 regression: enable PURGE requests if PURGE method ACL is present. diff --git a/doc/release-notes/release-3.1.html b/doc/release-notes/release-3.1.html index 73a5501094..e1812a1737 100644 --- a/doc/release-notes/release-3.1.html +++ b/doc/release-notes/release-3.1.html @@ -1331,7 +1331,7 @@ see cache_mem and maximum_object_size_in_memory for size parameters.

cache_mem

Default size increased to 256MB.

-
cache_peer htcp-no-clr htcp-no-purge-clr htcp-only-clr htcp-forward-clr connection-auth[=on|off|auto] connect-fail-limit=N
+
cache_peer htcp-no-clr htcp-no-purge-clr htcp-only-clr htcp-forward-clr connection-auth[=on|off|auto] connect-fail-limit=N no-tproxy

New Options. 

         use 'htcp-no-clr' to send HTCP to the neighbor but without
@@ -1357,6 +1357,10 @@ see cache_mem and maximum_object_size_in_memory for size parameters.

         use 'connect-fail-limit=nn' to specify how many times
         connecting to a peer must fail before it is marked as
         down. Default is 10.
+
+        use 'no-tproxy' to specify that requests passed to this peer
+        are not to have the client IP spoofed. For use to prevent
+        packet routing issues with a cluster of peers behind WCCPv2.

@@ -1427,7 +1431,7 @@ format, so all helpers will need to be checked and converted to cope with such i

-
http_port transparent intercept sslbump connection-auth[=on|off]
+
http_port transparent intercept sslbump connection-auth[=on|off] ignore-cc

Option 'transparent' is being deprecated in favour of 'intercept' which more clearly identifies what the option does. For now option 'tproxy' remains with old behaviour meaning fully-invisible proxy using TPROXY support.

New port options @@ -1449,6 +1453,11 @@ For now option 'tproxy' remains with old behaviour meaning fully-invisible proxy the connection, interval how often to probe, and timeout the time before giving up. + ignore-cc Ignore request Cache-Control headers. + + Warning: This option violates HTTP specifications if + used in non-accelerator setups. + sslBump Intercept each CONNECT request matching ssl_bump ACL, establish secure connection with the client and with the server, decrypt HTTP messages as they pass through @@ -1773,6 +1782,14 @@ It also has a new squid.conf name for usage, see auth_param above for d

Better support for Linux using the external DNS helper. The helper will now compile and work with dns_nameservers on more variants of Linux than previously.

+
--with-aio
+

Deprecated. POSIX AIO is now auto-detected and enabled. +Use --without-aio to disable, but only if you really have to.

+ +
--with-pthreads
+

Deprecated. pthreads library is now auto-detected and enabled. +Use --without-pthreads to disable, but only if you really have to.

+

5.3 Removed options diff --git a/doc/release-notes/release-3.1.sgml b/doc/release-notes/release-3.1.sgml index a7d74a7929..0d480f8bb1 100644 --- a/doc/release-notes/release-3.1.sgml +++ b/doc/release-notes/release-3.1.sgml @@ -1113,7 +1113,7 @@ NOCOMMENT_START cache_mem

Default size increased to 256MB. - cache_peer htcp-no-clr htcp-no-purge-clr htcp-only-clr htcp-forward-clr connection-auth[=on|off|auto] connect-fail-limit=N + cache_peer htcp-no-clr htcp-no-purge-clr htcp-only-clr htcp-forward-clr connection-auth[=on|off|auto] connect-fail-limit=N no-tproxy

New Options. use 'htcp-no-clr' to send HTCP to the neighbor but without @@ -1139,6 +1139,10 @@ NOCOMMENT_START use 'connect-fail-limit=nn' to specify how many times connecting to a peer must fail before it is marked as down. Default is 10. + + use 'no-tproxy' to specify that requests passed to this peer + are not to have the client IP spoofed. For use to prevent + packet routing issues with a cluster of peers behind WCCPv2. cache_store_log