Skip to content

hypershunt v1.0.0-rc15

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 13 Jun 14:16
v1.0.0-rc15
5425d2a

What's new in 1.0.0-rc15

Fixes

  • OIDC: username-claim / groups-claim now read claims from
    the ID token. Previously the username silently fell back to sub
    and groups came back empty unless the UserInfo endpoint supplied
    them (#66).
  • OCSP: staple when available; a certificate with no responder
    URL is served unstapled instead of being treated as a fetch
    failure — the normal case for ACME CAs since 2025 (#64).
  • Config: require kdl 6.7.1 (6.5.x mis-parsed a node whose
    inline children block was followed by a trailing comment,
    swallowing the next node); accept the unix-stream: scheme for
    fastcgi / scgi sockets (#65).

Documentation

  • Full correctness review of the docs: corrected wrong defaults,
    stale behaviour, and non-parsing KDL examples across the reference
    and guide (#65).

Features

  • Serving --- static files (range, ETag, try-files), redirects,
    inline responses, custom error pages.
  • Routing --- virtual hosts (literal + regex), request matchers,
    URL rewrites with regex captures.
  • Reverse proxy --- HTTP/1, HTTP/2, HTTP/3 upstreams; load
    balancing, health checks, retries; FastCGI, SCGI, CGI.
  • Layer-4 proxy --- TCP, UDP, and Unix-socket forwarders with
    optional TLS termination.
  • TLS --- ACME (HTTP-01, DNS-01, TLS-ALPN-01), file-based PEM,
    self-signed; OCSP stapling; mTLS with CRLs.
  • Auth & access control --- HTTP Basic (PAM, LDAP, htpasswd),
    JWT sessions, OIDC SSO, firewall-style policy blocks.
  • Operations --- compression, structured access logs, status page,
    health endpoints, hot reload, seamless binary upgrade, .deb /
    .rpm / OCI image.

…and more --- see the configuration reference.

Standards
HTTP/1.1, HTTP/2, HTTP/3 RFC 9112, RFC 9113, RFC 9114
WebSocket; extended CONNECT RFC 6455, RFC 8441
TLS 1.2 / 1.3 RFC 5246, RFC 8446
ACME (HTTP-01, DNS-01, TLS-ALPN-01) RFC 8555, RFC 8737
OCSP stapling RFC 6066 §8
JWT (ES256) / JWS / JWK / JWK thumbprint RFC 7519, RFC 7515, RFC 7517, RFC 7638
OAuth 2.0 PKCE, token revocation, resource indicators, iss param RFC 7636, RFC 7009, RFC 8707, RFC 9207
OpenID Connect 1.0 + back-channel logout OIDC Core, OIDC Back-Channel Logout
HAProxy PROXY protocol v1 / v2 HAProxy spec
CGI / FastCGI / SCGI RFC 3875, FastCGI 1.0, SCGI 1.0
KDL configuration KDL v2

See the README and docs for configuration and usage.

Assets 7
Loading