v0.7.0

What's New

Admin Dashboard

• Standalone admin UI with proxy host management cards
• Session-based authentication with secure cookies
• Analytics dashboard: top paths, status breakdown, total bytes
• Live request rate chart with 30-sample rolling history
• Config viewer with automatic sensitive field redaction
• RBAC enforcement in UI (viewer/operator/admin visibility)

Load Balancing & Proxy

• 7 algorithms: round-robin, least-conn, IP-hash, weighted, random, SIP Call-ID, consistent-hash
• HTTP/1.1, HTTP/2, HTTP/3/QUIC, WebSocket, TCP, UDP/SIP
• TLS/mTLS termination with client certificate validation
• Per-client IP rate limiting with token bucket
• IP allowlist/blocklist via src ACL rules
• Active and passive health checks with rise/fall thresholds
• Static file serving with content-type detection
• CORS preflight handling
• Header manipulation rules (request/response set/add/del)

Security

• Encrypted state file at rest (AES-128-GCM)
• WWW-Authenticate header on 401 responses
• Config write disabled via API (edit on server)
• Sensitive fields redacted in config viewer

Observability

• JSON structured logs with RFC 3339 timestamps
• Prometheus metrics and JSON stats API
• Access log to file via access_log_file directive
• Kubernetes readyz/livez probes
• W3C traceparent propagation (UUID v7)

Configuration

• Environment variable expansion ($VAR, ${VAR})
• Cooperative drain on SIGTERM/SIGINT
• Hot reload via SIGHUP for servers_file changes

Language

• 5-tuple done channels (no more bit-packing)
• for-in loops, f-strings, match expressions throughout
• Written in Mako