v0.15.0

Leba 0.15.0 — Let's Encrypt + auto SSL + full test matrix

v0.14.1

v0.14.1: production harden free-alias and lean hot path

v0.14.0 — enterprise ops and platform quality

Leba 0.14.0

Enterprise ops (0.13)

• Stick-table runtime API + admin UI (GET/DELETE /admin/stick-tables…)
• Peers metrics (hello, auth fail, upserts, reconnects)
• WAF mode toggle, blocked/detect counters, sample rules
• Server CRUD, doctor / explain / preview-reload
• Turnkey HA package under deploy/ha/

Platform quality (0.14)

• make test-soak — admin plane + proxy serial + concurrent load
• Body/streaming policy (docs/LIMITS.md) + doctor warnings
• TLS reload H3 strategy fields (h3_strategy=recreate)
• CI + release workflows (checksums, SBOM, multi-arch images)
• Production runbook (docs/PRODUCTION.md)

Stability

• Mako ownership fixes so multi-request proxy and reload survive soak

Verify

make test
make test-soak
./leba version   # 0.14.0

v0.10.0

v0.10.0 — hitless reload, OIDC SSO, peers, H3 stick

Complete the enterprise control-plane arc on Mako 0.2.3:

• Full config reload rebinds HTTP/TCP/UDP/H3/stats/peers and live-applies OIDC discovery
• Admin OIDC with verified https_* / oidc_* plus jwt_verify_jwks / RS256
• Multi-cert SNI: add/update/remove in place
• Stick tables for HTTP/1–3 (H3 via XFF or cookie) with optional peer UPSERT sync
• Non-secret OIDC/peers status on GET /stats
• Prometheus gauges for stick, TLS/SNI, and SSO readiness

v0.9.0

Enterprise path foundations and NPM parity.

v0.7.1

v0.7.1

• Security tab in admin dashboard: RBAC permissions matrix, TLS status per frontend, ACL rules summary, rate limiting status
• Current session info with user/role and permission description

v0.7.0

What's New

Admin Dashboard

• Standalone admin UI with proxy host management cards
• Session-based authentication with secure cookies
• Analytics dashboard: top paths, status breakdown, total bytes
• Live request rate chart with 30-sample rolling history
• Config viewer with automatic sensitive field redaction
• RBAC enforcement in UI (viewer/operator/admin visibility)

Load Balancing & Proxy

• 7 algorithms: round-robin, least-conn, IP-hash, weighted, random, SIP Call-ID, consistent-hash
• HTTP/1.1, HTTP/2, HTTP/3/QUIC, WebSocket, TCP, UDP/SIP
• TLS/mTLS termination with client certificate validation
• Per-client IP rate limiting with token bucket
• IP allowlist/blocklist via src ACL rules
• Active and passive health checks with rise/fall thresholds
• Static file serving with content-type detection
• CORS preflight handling
• Header manipulation rules (request/response set/add/del)

Security

• Encrypted state file at rest (AES-128-GCM)
• WWW-Authenticate header on 401 responses
• Config write disabled via API (edit on server)
• Sensitive fields redacted in config viewer

Observability

• JSON structured logs with RFC 3339 timestamps
• Prometheus metrics and JSON stats API
• Access log to file via access_log_file directive
• Kubernetes readyz/livez probes
• W3C traceparent propagation (UUID v7)

Configuration

• Environment variable expansion ($VAR, ${VAR})
• Cooperative drain on SIGTERM/SIGINT
• Hot reload via SIGHUP for servers_file changes

Language

• 5-tuple done channels (no more bit-packing)
• for-in loops, f-strings, match expressions throughout
• Written in Mako