From: Amos Jeffries
Date: Mon, 23 Nov 2009 03:01:46 +0000 (+1300)
Subject: Prep 3.1.0.15
X-Git-Tag: SQUID_3_1_0_15~1
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=9b0cc7abbae479cf8c15a04236dd3e3ff7547558;p=thirdparty%2Fsquid.git
Prep 3.1.0.15
---
diff --git a/ChangeLog b/ChangeLog
index 20181c4a8f..463374c33d 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,24 @@
+Changes to squid-3.1.0.15 (23 Nov 2009):
+
+ - Regression Fix: myip ACL not accepted in config
+ - Bug 2795: acl arp lookups including port
+ - Bug 2794: ESI parsing fails on FreeBSD
+ - Bug 2778: fix linking issues using SunCC
+ - Bug 2724: eCAP build failure unless ICAP enabled
+ - Bug 2628: Correct default PID location to PREFIX/var/run/squid.pid
+ - Bug 2617: Performance degradation during processing list of dstdomain ACL's
+ - Bug 2374: Support ICY / ICEcast / SHOUTcast streaming protocol.
+ - Fix: 64-bit filesize issue in squidclient POST of large files
+ - Fix: send correct Connection: header on intercepted replies
+ - Support libtool 2.x
+ - ESI libraries libexpat and libxml2 now optional
+ - ESI support default enabled
+ - Bump libcap minimum requirement to libcap 2.09+
+ - ARP / MAC support fixes for IPv6-mode
+ - Add outstanding IPv6 settings to squid.conf (localnet, localhost)
+ - ... and many additions to the background testing structure
+ - ... and very many minor build and code cleanups for non-GCC compilers.
+
Changes to squid-3.1.0.14 (27 Sep 2009):
- Bug 2777: Various build issues on OpenSolaris
diff --git a/doc/release-notes/release-3.1.html b/doc/release-notes/release-3.1.html
index 65f20f2a3e..37b21f223a 100644
--- a/doc/release-notes/release-3.1.html
+++ b/doc/release-notes/release-3.1.html
@@ -1,11 +1,11 @@
-
- Squid 3.1.0.13 release notes
+
+ Squid 3.1.0.15 release notes
-Squid 3.1.0.13 release notes
+Squid 3.1.0.15 release notes
Squid Developers
@@ -33,6 +33,7 @@ for Applied Network Research and members of the Web Caching community.
2.7 SSL Bump (for HTTPS Filtering and Adaptation)
2.8 eCAP Adaptation Module support
2.9 ICAP Bypass and Retry enhancements
+2.10 ICY streaming protocol support
@@ -81,7 +82,7 @@ for Applied Network Research and members of the Web Caching community.
-The Squid Team are pleased to announce the release of Squid-3.1.0.13 for testing.
+The Squid Team are pleased to announce the release of Squid-3.1.0.15 for testing.
This new release is available for download from
http://www.squid-cache.org/Versions/v3/3.1/ or the
mirrors.
@@ -117,6 +118,7 @@ While this release is not deemed ready for production use, we believe it is read
SSL Bump (for HTTPS Filtering and Adaptation)
eCAP Adaptation Module support
ICAP Bypass and Retry enhancements
+ICY streaming protocol support
Most user-facing changes are reflected in squid.conf (see below).
@@ -218,14 +220,10 @@ software which hard coded the MIB paths needs to be upgraded for this Squid rele
to the IPv4 or IPv6 network that address belongs to. They are not permitted over the
IPv4-IPv6 boundary. Some ACL voodoo can however be applied to explicitly route the
IPv6/IPv4 bound traffic (DIRECT access) out an appropriate interface.
-
- acl toIP6 dst ipv6
- tcp_outgoing_address 2001::1 toIP6
- tcp_outgoing_address 10.0.0.1 !toIP6
-
-
+See the squid.conf documentation for further details.
-WCCP is not available (neither version 1 or 2). It remains built into squid for use with IPv4 traffic but IPv6 cannot use it.
+WCCP is not available (neither version 1 or 2).
+It remains built into squid for use with IPv4 traffic but IPv6 cannot use it.
Transparent Interception is done via NAT at the OS level and is not available in IPv6.
Squid will ensure that any port set with transparent, intercept, or tproxy options be an IPv4-only
@@ -406,6 +404,26 @@ limit is exceeded, the master transaction fails. The default limit of 16
should be large enough to not require an explicit configuration in most
environments yet may be small enough to limit side-effects of loops.
+
+
+Squid-3.1 adds native support for streaming protocol ICY.
+
+This protocol uses port 80 and violates RFC 2616 by using an HTTP/1.1 compliant request and non-HTTP reply
+to start the stream transaction. If the reply is handled according to HTTP/1.1 RFC-compliance requirements
+the audio stream becomes jerky and contains regular 'popping' sounds.
+
+Squid now processes the ICY replies natively according to the ICY requirements, not HTTP/1.1 requirements.
+The streamed data is not cacheable. All processing and access controls may be applied the same as for HTTP.
+
+squid.conf change
+
+Squid-2 contained a hack using the update_http0.9 squid.conf option to work around the
+unusual replies. This option is now obsolete.
+
+The proto ACL type matches ICY once the reply has been received, before that the processing
+is only aware on an HTTP request. So the ACL will match HTTP.
+
@@ -1276,7 +1294,8 @@ DEFAULT: None bypassed.
- acl
-
-
New preset content ipv6 available as a preset type in the src and dst ACL matching all of the public IPv6 network space.
+New preset ipv6 available in the src and dst ACL matching all of the public IPv6 network space.
+New preset ipv4 available in the src and dst ACL matching all of IPv4 network space.
New acl type myportname, matching the name of the http_port or https_port where the request was accepted.
New acl type tag, matching the tag= returned from the external_acl_type helper.
New acl type peername, matching against a named cache_peer entry where the request will be attempted first.
@@ -1284,6 +1303,8 @@ NP: peername currently is limited to only match the first peer possible.
acl aclname dst ipv6 # request for IPv6-enabled site
acl aclname src ipv6 # request from IPv6 address
+ acl aclname dst ipv4 # request for IPv4 site
+ acl aclname src ipv4 # request from IPv4 address
acl aclname myportname 3128 ... # http(s)_port name
acl aclname peername myPeer ... # cache_peer ... name=myPeer
acl aclname tag value ... # tag= option from external ACL
@@ -1725,6 +1746,13 @@ and build with IPv6 when possible.
- --disable-loadable-modules
-
Build without support for loadable modules.
+ - --disable-strict-error-checking
-
+
Build Squid without advanced compiler error checking.
+This only affects the building process, enabling it to complete despite some
+possibly serious issues.
+Please do not use lightly, and please report the build issues which make it needed
+to the squid developers before doing so.
+
- --disable-translation
-
Prevent Squid generating localized error page templates and manuals.
Which is usually tried, but may not be needed.
@@ -1853,6 +1881,9 @@ Use --without-pthreads to disable, but only if you really have to.
- redirector_bypass
-
Replaced by url_rewrite_bypass
+ - upgrade_http0.9
-
+
Obsolete. ICY protocol streaming support added natively.
+
- zph_local
-
Replaced by qos_flows local-hit=
@@ -2065,9 +2096,6 @@ Use --without-pthreads to disable, but only if you really have to.
- update_headers
-
Not yet ported from 2.7
- - upgrade_http0.9
-
-
Not yet ported from 2.7
-
- zero_buffers
-
Not yet ported from 2.7
diff --git a/doc/release-notes/release-3.1.sgml b/doc/release-notes/release-3.1.sgml
index 7356858804..dd2e44f5e5 100644
--- a/doc/release-notes/release-3.1.sgml
+++ b/doc/release-notes/release-3.1.sgml
@@ -1,6 +1,6 @@
-Squid 3.1.0.13 release notes
+Squid 3.1.0.15 release notes
Squid Developers
@@ -13,7 +13,7 @@ for Applied Network Research and members of the Web Caching community.
Notice
-The Squid Team are pleased to announce the release of Squid-3.1.0.13 for testing.
+The Squid Team are pleased to announce the release of Squid-3.1.0.15 for testing.
This new release is available for download from or the .
@@ -46,6 +46,7 @@ The most important of these new features are:
- SSL Bump (for HTTPS Filtering and Adaptation)
- eCAP Adaptation Module support
- ICAP Bypass and Retry enhancements
+
- ICY streaming protocol support
Most user-facing changes are reflected in squid.conf (see below).
@@ -142,13 +143,10 @@ config options provided on a clean install.
to the IPv4 or IPv6 network that address belongs to. They are not permitted over the
IPv4-IPv6 boundary. Some ACL voodoo can however be applied to explicitly route the
IPv6/IPv4 bound traffic (DIRECT access) out an appropriate interface.
-
- acl toIP6 dst ipv6
- tcp_outgoing_address 2001::1 toIP6
- tcp_outgoing_address 10.0.0.1 !toIP6
-
+ See the squid.conf documentation for further details.
-
WCCP is not available (neither version 1 or 2). It remains built into squid for use with IPv4 traffic but IPv6 cannot use it.
+
WCCP is not available (neither version 1 or 2).
+ It remains built into squid for use with IPv4 traffic but IPv6 cannot use it.
Transparent Interception is done via NAT at the OS level and is not available in IPv6.
Squid will ensure that any port set with transparent, intercept, or tproxy options be an IPv4-only
@@ -311,6 +309,23 @@ While decrypted, the traffic can be inspected using ICAP.
should be large enough to not require an explicit configuration in most
environments yet may be small enough to limit side-effects of loops.
+ICY streaming protocol support
+Squid-3.1 adds native support for streaming protocol ICY.
+
+
This protocol uses port 80 and violates RFC 2616 by using an HTTP/1.1 compliant request and non-HTTP reply
+ to start the stream transaction. If the reply is handled according to HTTP/1.1 RFC-compliance requirements
+ the audio stream becomes jerky and contains regular 'popping' sounds.
+
+
Squid now processes the ICY replies natively according to the ICY requirements, not HTTP/1.1 requirements.
+ The streamed data is not cacheable. All processing and access controls may be applied the same as for HTTP.
+
+squid.conf change
+Squid-2 contained a hack using the update_http0.9 squid.conf option to work around the
+ unusual replies. This option is now obsolete.
+
+
The proto ACL type matches ICY once the reply has been received, before that the processing
+ is only aware on an HTTP request. So the ACL will match HTTP.
+
Windows support
This Squid version can run on Windows as a system service using the Cygwin emulation environment,
@@ -1062,7 +1077,8 @@ NOCOMMENT_START
acl
- New preset content ipv6 available as a preset type in the src and dst ACL matching all of the public IPv6 network space.
+
New preset ipv6 available in the src and dst ACL matching all of the public IPv6 network space.
+
New preset ipv4 available in the src and dst ACL matching all of IPv4 network space.
New acl type myportname, matching the name of the http_port or https_port where the request was accepted.
New acl type tag, matching the tag= returned from the external_acl_type helper.
New acl type peername, matching against a named cache_peer entry where the request will be attempted first.
@@ -1070,6 +1086,8 @@ NOCOMMENT_START
acl aclname dst ipv6 # request for IPv6-enabled site
acl aclname src ipv6 # request from IPv6 address
+ acl aclname dst ipv4 # request for IPv4 site
+ acl aclname src ipv4 # request from IPv4 address
acl aclname myportname 3128 ... # http(s)_port name
acl aclname peername myPeer ... # cache_peer ... name=myPeer
acl aclname tag value ... # tag= option from external ACL
@@ -1476,6 +1494,13 @@ This section gives an account of those changes in three categories:
--disable-loadable-modules
Build without support for loadable modules.
+ --disable-strict-error-checking
+
Build Squid without advanced compiler error checking.
+ This only affects the building process, enabling it to complete despite some
+ possibly serious issues.
+ Please do not use lightly, and please report the build issues which make it needed
+ to the squid developers before doing so.
+
--disable-translation
Prevent Squid generating localized error page templates and manuals.
Which is usually tried, but may not be needed.
@@ -1598,7 +1623,7 @@ This section gives an account of those changes in three categories:
Replaced by url_rewrite_bypass
upgrade_http0.9
-
ICY protocol streaming support added natively.
+
Obsolete. ICY protocol streaming support added natively.
zph_local
Replaced by qos_flows local-hit=