From: Amos Jeffries
-
-
-
-
-
- The Squid Team are pleased to announce the release of Squid-4.0.0 for testing. This new release is available for download from
-http://www.squid-cache.org/Versions/v4/ or the
-mirrors. While this release is not deemed ready for production use, we believe it is ready for wider testing by the community. We welcome feedback and bug reports. If you find a bug, please see
-http://wiki.squid-cache.org/SquidFaq/BugReporting
-for how to submit a report with a stack trace. Although this release is deemed good enough for use in many setups, please note the existence of
-open bugs against Squid-4. The Squid-4 change history can be
-viewed here. Squid 4 represents a new feature release above 3.5. The most important of these new features are:
-Squid 4.0.0 release notes
-
-Squid Developers
-
-This document contains the release notes for version 4 of Squid.
-Squid is a WWW Cache application developed by the National Laboratory
-for Applied Network Research and members of the Web Caching community.
-
-1. Notice
-
-
-2. Major new features since Squid-3.5
-
-
-
-3. Changes to squid.conf since Squid-3.5
-
-
-4. Changes to ./configure options since Squid-3.5
-
-
-5. Regressions since Squid-2.7
-
-
-6. Copyright
-
-
-
-1. Notice
-
-1.1 Known issues
-
-
-1.2 Changes since earlier releases of Squid-4
-
-
-2. Major new features since Squid-3.5
-
-
-
-
Most user-facing changes are reflected in squid.conf (see below).
- - -The new queue-size=N option to helpers configuration, allows users -to configure the maximum number of queued requests to busy helpers.
- -helper-mux.pl we have been distributing for the past few years to -encourage use of concurrency is no longer compatible with Squid. If -used it will spawn up to 2^64 helpers and DoS the Squid server.
- -Helpers utilizing arrays to handle fixed amounts of concurrency -channels MUST be re-written to use queues and capable of handling a -64-bit int as index or they will be vulnerable to buffer overrun and -arbitrary memory accesses.
- -32-bit helpers need re-writing to handle the concurrency channel ID -as a 64-bit integer value. If not updated they will cause proxies to -return unexpected results or timeout once crossing the 32-bit wrap -boundary. Leading to undefined behaviour in the client HTTP traffic.
- -Details in -RFC 6176
- -SSLv2 is not fit for purpose. Squid no longer supports being configured with -any settings regarding this protocol. That includes settings manually disabling -its use since it is now forced to disable by default. Also settings enabling -various client/server workarounds specific to SSLv2 are removed.
- - -The basic_msnt_multi_domain_auth helper has been removed. The -basic_smb_lm_auth helper performs the same actions without extra -Perl and Samba dependencies.
- - -There have been changes to Squid's configuration file since Squid-3.5.
-This section gives a thorough account of those changes in three categories:
--
-
New tag to define TLS security context options for outgoing -connections. For example to HTTPS servers.
- -Squid times active requests to redirector. This option sets -the timeout value and the Squid reaction to a timed out -request.
- --
New parameter queue-size= to set the maximum number -of queued requests.
- -All ssloption= and sslversion= values for -SSLv2 configuration or disabling have been removed.
-Manual squid.conf update may be required on upgrade.
- -New parameter queue-size= to set the maximum number -of queued requests.
- -All version= option= values for SSLv2 -configuration or disabling have been removed.
-Manual squid.conf update may be required on upgrade.
- -All version= option= values for SSLv2 -configuration or disabling have been removed.
-Manual squid.conf update may be required on upgrade.
- -New parameter queue-size= to set the maximum number -of queued requests.
- -New parameter queue-size= to set the maximum number -of queued requests.
- -All values for SSLv2 configuration or disabling have been removed.
-Manual squid.conf update may be required on upgrade.
- -Value '2' for SSLv2-only operation is no longer supported.
- -New parameter queue-size= to set the maximum number -of queued requests.
- --
Superceded by cache_peer_access. Use dstdomain ACL -in the access control list to restrict domains requested.
- -Option ignore-auth removed. Its original intent was -to improve caching. HTTP/1.1 permits caching of authenticated -messages under conditions which Squid does check for and obey.
- -Replaced by tls_outgoing_options cafile=.
- -Replaced by tls_outgoing_options capath=.
- -Replaced by tls_outgoing_options cipher=.
- -Replaced by tls_outgoing_options cert=.
- -Replaced by tls_outgoing_options key=.
- -Replaced by tls_outgoing_options flags=.
- -Replaced by tls_outgoing_options options=.
- -Replaced by tls_outgoing_options version=.
- -There have been some changes to Squid's build configuration since Squid-3.5.
-This section gives an account of those changes in three categories:
--
- - - --
-
The MSNT-multi-domain helper has been removed.
- --
Some squid.conf options which were available in Squid-2.7 are not yet available in Squid-4
- -If you need something to do then porting one of these from Squid-2 to Squid-3 is most welcome.
- --
Not yet ported from 2.6
- -monitorinterval= not yet ported from 2.6
-monitorsize= not yet ported from 2.6
-monitortimeout= not yet ported from 2.6
-monitorurl= not yet ported from 2.6
- -Not yet ported from 2.6
- -Not yet ported from 2.6
- -Not yet ported from 2.7
- -Not yet ported from 2.6
- -Not yet ported from 2.6
- -Not yet ported from 2.6
- -Not yet ported from 2.6
- -stale-while-revalidate= not yet ported from 2.7
-ignore-stale-while-revalidate= not yet ported from 2.7
-negative-ttl= not yet ported from 2.7
- -Not yet ported from 2.7
- -Not yet ported from 2.7
- -Copyright (C) 1996-2015 The Squid Software Foundation and contributors
-Squid software is distributed under GPLv2+ license and includes -contributions from numerous individuals and organizations. -Please see the COPYING and CONTRIBUTORS files for details.
- - -