Skip to content

v3.1.7

Choose a tag to compare

View all tags
@github-actions github-actions released this 25 May 14:55
· 76 commits to main since this release
v3.1.7
This tag was signed with the committer’s verified signature.
robvanoostenrijk Rob van Oostenrijk
SSH Key Fingerprint: DH7FqN3JMiZn/nn/Jf01hiCjJqZL9Cz5XfA4rNDzcnE
Verified
Learn about vigilant mode.
b9df7be
This commit was signed with the committer’s verified signature.
robvanoostenrijk Rob van Oostenrijk
SSH Key Fingerprint: DH7FqN3JMiZn/nn/Jf01hiCjJqZL9Cz5XfA4rNDzcnE
Verified
Learn about vigilant mode.

AWS-LC v1.52.0

Versions:

  • haproxy-aws-lc

    Version information 
     HAProxy version 3.1.7-http3-aws-lc 2025/04/17 - https://haproxy.org/
 Status: stable branch - will stop receiving fixes around Q1 2026.
 Known bugs: http://www.haproxy.org/bugs/bugs-3.1.7.html
 Running on: Linux 6.11.0-1014-azure #14~24.04.1-Ubuntu SMP Thu Apr 24 17:41:03 UTC 2025 aarch64
 Build options :
   TARGET  = linux-musl
   CC      = clang
   CFLAGS  = -O2 -g -fwrapv
   OPTIONS = USE_THREAD=1 USE_LIBCRYPT=1 USE_GETADDRINFO=1 USE_OPENSSL=1 USE_OPENSSL_AWSLC=1 USE_LUA=1 USE_CPU_AFFINITY=1 USE_TFO=1 USE_NS=1 USE_QUIC=1 USE_PCRE2=1 USE_PCRE2_JIT=1
   DEBUG   = 
 
 Feature list : -51DEGREES +ACCEPT4 +BACKTRACE -CLOSEFROM +CPU_AFFINITY +CRYPT_H -DEVICEATLAS +DL -ENGINE +EPOLL -EVPORTS +GETADDRINFO -KQUEUE -LIBATOMIC +LIBCRYPT +LINUX_CAP +LINUX_SPLICE +LINUX_TPROXY +LUA +MATH -MEMORY_PROFILING +NETFILTER +NS -OBSOLETE_LINKER +OPENSSL +OPENSSL_AWSLC -OPENSSL_WOLFSSL -OT -PCRE +PCRE2 +PCRE2_JIT -PCRE_JIT +POLL +PRCTL -PROCCTL -PROMEX -PTHREAD_EMULATION +QUIC -QUIC_OPENSSL_COMPAT +RT +SHM_OPEN +SLZ +SSL -STATIC_PCRE -STATIC_PCRE2 +TFO +THREAD +THREAD_DUMP +TPROXY -WURFL -ZLIB
 
 Default settings :
   bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
 
 Built with multi-threading support (MAX_TGROUPS=16, MAX_THREADS=256, default=4).
 Built with OpenSSL version : OpenSSL 1.1.1 (compatible; AWS-LC 1.52.0)
 Running on OpenSSL version : AWS-LC 1.52.0
 OpenSSL library supports TLS extensions : yes
 OpenSSL library supports SNI : yes
 OpenSSL library supports : TLSv1.0 TLSv1.1 TLSv1.2 TLSv1.3
 Built with Lua version : Lua 5.4.7
 Built with network namespace support.
 Built with libslz for stateless compression.
 Compression algorithms supported : identity("identity"), deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
 Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND
 Built with PCRE2 version : 10.43 2024-02-16
 PCRE2 library supports JIT : yes
 Encrypted password support via crypt(3): yes
 Built with clang compiler version 20.1.5 
 
 Available polling systems :
       epoll : pref=300,  test result OK
        poll : pref=200,  test result OK
      select : pref=150,  test result OK
 Total: 3 (3 usable), will use epoll.
 
 Available multiplexer protocols :
 (protocols marked as <default> cannot be specified using 'proto' keyword)
        quic : mode=HTTP  side=FE     mux=QUIC  flags=HTX|NO_UPG|FRAMED
          h2 : mode=HTTP  side=FE|BE  mux=H2    flags=HTX|HOL_RISK|NO_UPG
          h1 : mode=HTTP  side=FE|BE  mux=H1    flags=HTX|NO_UPG
   <default> : mode=HTTP  side=FE|BE  mux=H1    flags=HTX
        fcgi : mode=HTTP  side=BE     mux=FCGI  flags=HTX|HOL_RISK|NO_UPG
        spop : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
   <default> : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
        none : mode=TCP   side=FE|BE  mux=PASS  flags=NO_UPG
   <default> : mode=TCP   side=FE|BE  mux=PASS  flags=
 
 Available services : none
 
 Available filters :
 	[BWLIM] bwlim-in
 	[BWLIM] bwlim-out
 	[CACHE] cache
 	[COMP] compression
 	[FCGI] fcgi-app
 	[SPOE] spoe
 	[TRACE] trace

  • haproxy-libressl

    Version information 
     HAProxy version 3.1.7-http3-libressl 2025/04/17 - https://haproxy.org/
 Status: stable branch - will stop receiving fixes around Q1 2026.
 Known bugs: http://www.haproxy.org/bugs/bugs-3.1.7.html
 Running on: Linux 6.11.0-1014-azure #14~24.04.1-Ubuntu SMP Thu Apr 24 17:41:03 UTC 2025 aarch64
 Build options :
   TARGET  = linux-musl
   CC      = clang
   CFLAGS  = -O2 -g -fwrapv
   OPTIONS = USE_THREAD=1 USE_LIBCRYPT=1 USE_GETADDRINFO=1 USE_OPENSSL=1 USE_LUA=1 USE_CPU_AFFINITY=1 USE_TFO=1 USE_NS=1 USE_QUIC=1 USE_PCRE2=1 USE_PCRE2_JIT=1
   DEBUG   = 
 
 Feature list : -51DEGREES +ACCEPT4 +BACKTRACE -CLOSEFROM +CPU_AFFINITY +CRYPT_H -DEVICEATLAS +DL -ENGINE +EPOLL -EVPORTS +GETADDRINFO -KQUEUE -LIBATOMIC +LIBCRYPT +LINUX_CAP +LINUX_SPLICE +LINUX_TPROXY +LUA +MATH -MEMORY_PROFILING +NETFILTER +NS -OBSOLETE_LINKER +OPENSSL -OPENSSL_AWSLC -OPENSSL_WOLFSSL -OT -PCRE +PCRE2 +PCRE2_JIT -PCRE_JIT +POLL +PRCTL -PROCCTL -PROMEX -PTHREAD_EMULATION +QUIC -QUIC_OPENSSL_COMPAT +RT +SHM_OPEN +SLZ +SSL -STATIC_PCRE -STATIC_PCRE2 +TFO +THREAD +THREAD_DUMP +TPROXY -WURFL -ZLIB
 
 Default settings :
   bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
 
 Built with multi-threading support (MAX_TGROUPS=16, MAX_THREADS=256, default=4).
 Built with OpenSSL version : LibreSSL 4.1.0
 Running on OpenSSL version : LibreSSL 4.1.0
 OpenSSL library supports TLS extensions : yes
 OpenSSL library supports SNI : yes
 OpenSSL library supports : TLSv1.0 TLSv1.1 TLSv1.2 TLSv1.3
 Built with Lua version : Lua 5.4.7
 Built with network namespace support.
 Built with libslz for stateless compression.
 Compression algorithms supported : identity("identity"), deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
 Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND
 Built with PCRE2 version : 10.43 2024-02-16
 PCRE2 library supports JIT : yes
 Encrypted password support via crypt(3): yes
 Built with clang compiler version 20.1.5 
 
 Available polling systems :
       epoll : pref=300,  test result OK
        poll : pref=200,  test result OK
      select : pref=150,  test result OK
 Total: 3 (3 usable), will use epoll.
 
 Available multiplexer protocols :
 (protocols marked as <default> cannot be specified using 'proto' keyword)
        quic : mode=HTTP  side=FE     mux=QUIC  flags=HTX|NO_UPG|FRAMED
          h2 : mode=HTTP  side=FE|BE  mux=H2    flags=HTX|HOL_RISK|NO_UPG
          h1 : mode=HTTP  side=FE|BE  mux=H1    flags=HTX|NO_UPG
   <default> : mode=HTTP  side=FE|BE  mux=H1    flags=HTX
        fcgi : mode=HTTP  side=BE     mux=FCGI  flags=HTX|HOL_RISK|NO_UPG
        spop : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
   <default> : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
        none : mode=TCP   side=FE|BE  mux=PASS  flags=NO_UPG
   <default> : mode=TCP   side=FE|BE  mux=PASS  flags=
 
 Available services : none
 
 Available filters :
 	[BWLIM] bwlim-in
 	[BWLIM] bwlim-out
 	[CACHE] cache
 	[COMP] compression
 	[FCGI] fcgi-app
 	[SPOE] spoe
 	[TRACE] trace

  • haproxy-openssl

    Version information 
     HAProxy version 3.1.7-http3-openssl 2025/04/17 - https://haproxy.org/
 Status: stable branch - will stop receiving fixes around Q1 2026.
 Known bugs: http://www.haproxy.org/bugs/bugs-3.1.7.html
 Running on: Linux 6.11.0-1014-azure #14~24.04.1-Ubuntu SMP Thu Apr 24 17:41:03 UTC 2025 aarch64
 Build options :
   TARGET  = linux-musl
   CC      = clang
   CFLAGS  = -O2 -g -fwrapv
   OPTIONS = USE_THREAD=1 USE_LIBCRYPT=1 USE_GETADDRINFO=1 USE_OPENSSL=1 USE_LUA=1 USE_CPU_AFFINITY=1 USE_TFO=1 USE_NS=1 USE_QUIC=1 USE_PCRE2=1 USE_PCRE2_JIT=1 USE_QUIC_OPENSSL_COMPAT=1
   DEBUG   = 
 
 Feature list : -51DEGREES +ACCEPT4 +BACKTRACE -CLOSEFROM +CPU_AFFINITY +CRYPT_H -DEVICEATLAS +DL -ENGINE +EPOLL -EVPORTS +GETADDRINFO -KQUEUE -LIBATOMIC +LIBCRYPT +LINUX_CAP +LINUX_SPLICE +LINUX_TPROXY +LUA +MATH -MEMORY_PROFILING +NETFILTER +NS -OBSOLETE_LINKER +OPENSSL -OPENSSL_AWSLC -OPENSSL_WOLFSSL -OT -PCRE +PCRE2 +PCRE2_JIT -PCRE_JIT +POLL +PRCTL -PROCCTL -PROMEX -PTHREAD_EMULATION +QUIC +QUIC_OPENSSL_COMPAT +RT +SHM_OPEN +SLZ +SSL -STATIC_PCRE -STATIC_PCRE2 +TFO +THREAD +THREAD_DUMP +TPROXY -WURFL -ZLIB
 
 Default settings :
   bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
 
 Built with multi-threading support (MAX_TGROUPS=16, MAX_THREADS=256, default=4).
 Built with OpenSSL version : OpenSSL 3.5.0 8 Apr 2025
 Running on OpenSSL version : OpenSSL 3.5.0 8 Apr 2025
 OpenSSL library supports TLS extensions : yes
 OpenSSL library supports SNI : yes
 OpenSSL library supports : TLSv1.0 TLSv1.1 TLSv1.2 TLSv1.3
 OpenSSL providers loaded : default
 Built with Lua version : Lua 5.4.7
 Built with network namespace support.
 Built with libslz for stateless compression.
 Compression algorithms supported : identity("identity"), deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
 Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND
 Built with PCRE2 version : 10.43 2024-02-16
 PCRE2 library supports JIT : yes
 Encrypted password support via crypt(3): yes
 Built with clang compiler version 20.1.5 
 
 Available polling systems :
       epoll : pref=300,  test result OK
        poll : pref=200,  test result OK
      select : pref=150,  test result OK
 Total: 3 (3 usable), will use epoll.
 
 Available multiplexer protocols :
 (protocols marked as <default> cannot be specified using 'proto' keyword)
        quic : mode=HTTP  side=FE     mux=QUIC  flags=HTX|NO_UPG|FRAMED
          h2 : mode=HTTP  side=FE|BE  mux=H2    flags=HTX|HOL_RISK|NO_UPG
          h1 : mode=HTTP  side=FE|BE  mux=H1    flags=HTX|NO_UPG
   <default> : mode=HTTP  side=FE|BE  mux=H1    flags=HTX
        fcgi : mode=HTTP  side=BE     mux=FCGI  flags=HTX|HOL_RISK|NO_UPG
        spop : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
   <default> : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
        none : mode=TCP   side=FE|BE  mux=PASS  flags=NO_UPG
   <default> : mode=TCP   side=FE|BE  mux=PASS  flags=
 
 Available services : none
 
 Available filters :
 	[BWLIM] bwlim-in
 	[BWLIM] bwlim-out
 	[CACHE] cache
 	[COMP] compression
 	[FCGI] fcgi-app
 	[SPOE] spoe
 	[TRACE] trace

  • haproxy-wolfssl

    Version information 
     HAProxy version 3.1.7-http3-wolfssl 2025/04/17 - https://haproxy.org/
 Status: stable branch - will stop receiving fixes around Q1 2026.
 Known bugs: http://www.haproxy.org/bugs/bugs-3.1.7.html
 Running on: Linux 6.11.0-1014-azure #14~24.04.1-Ubuntu SMP Thu Apr 24 17:41:03 UTC 2025 aarch64
 Build options :
   TARGET  = linux-musl
   CC      = clang
   CFLAGS  = -O2 -g -fwrapv
   OPTIONS = USE_THREAD=1 USE_LIBCRYPT=1 USE_GETADDRINFO=1 USE_OPENSSL=1 USE_OPENSSL_WOLFSSL=1 USE_LUA=1 USE_CPU_AFFINITY=1 USE_TFO=1 USE_NS=1 USE_QUIC=1 USE_PCRE2=1 USE_PCRE2_JIT=1
   DEBUG   = 
 
 Feature list : -51DEGREES +ACCEPT4 +BACKTRACE -CLOSEFROM +CPU_AFFINITY +CRYPT_H -DEVICEATLAS +DL -ENGINE +EPOLL -EVPORTS +GETADDRINFO -KQUEUE -LIBATOMIC +LIBCRYPT +LINUX_CAP +LINUX_SPLICE +LINUX_TPROXY +LUA +MATH -MEMORY_PROFILING +NETFILTER +NS -OBSOLETE_LINKER +OPENSSL -OPENSSL_AWSLC +OPENSSL_WOLFSSL -OT -PCRE +PCRE2 +PCRE2_JIT -PCRE_JIT +POLL +PRCTL -PROCCTL -PROMEX -PTHREAD_EMULATION +QUIC -QUIC_OPENSSL_COMPAT +RT +SHM_OPEN +SLZ +SSL -STATIC_PCRE -STATIC_PCRE2 +TFO +THREAD +THREAD_DUMP +TPROXY -WURFL -ZLIB
 
 Default settings :
   bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
 
 Built with multi-threading support (MAX_TGROUPS=16, MAX_THREADS=256, default=4).
 Built with OpenSSL version : wolfSSL 5.8.0
 Running on OpenSSL version : wolfSSL 5.8.0
 OpenSSL library supports TLS extensions : yes
 OpenSSL library supports SNI : yes
 OpenSSL library supports : SSLv3 TLSv1.0 TLSv1.1 TLSv1.2 TLSv1.3
 Built with Lua version : Lua 5.4.7
 Built with network namespace support.
 Built with libslz for stateless compression.
 Compression algorithms supported : identity("identity"), deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
 Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND
 Built with PCRE2 version : 10.43 2024-02-16
 PCRE2 library supports JIT : yes
 Encrypted password support via crypt(3): yes
 Built with clang compiler version 20.1.5 
 
 Available polling systems :
       epoll : pref=300,  test result OK
        poll : pref=200,  test result OK
      select : pref=150,  test result OK
 Total: 3 (3 usable), will use epoll.
 
 Available multiplexer protocols :
 (protocols marked as <default> cannot be specified using 'proto' keyword)
        quic : mode=HTTP  side=FE     mux=QUIC  flags=HTX|NO_UPG|FRAMED
          h2 : mode=HTTP  side=FE|BE  mux=H2    flags=HTX|HOL_RISK|NO_UPG
          h1 : mode=HTTP  side=FE|BE  mux=H1    flags=HTX|NO_UPG
   <default> : mode=HTTP  side=FE|BE  mux=H1    flags=HTX
        fcgi : mode=HTTP  side=BE     mux=FCGI  flags=HTX|HOL_RISK|NO_UPG
        spop : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
   <default> : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
        none : mode=TCP   side=FE|BE  mux=PASS  flags=NO_UPG
   <default> : mode=TCP   side=FE|BE  mux=PASS  flags=
 
 Available services : none
 
 Available filters :
 	[BWLIM] bwlim-in
 	[BWLIM] bwlim-out
 	[CACHE] cache
 	[COMP] compression
 	[FCGI] fcgi-app
 	[SPOE] spoe
 	[TRACE] trace

SHA256 Checksums:

haproxy-aws-lc-linux-amd64.tar.xz: 147f375883f3771f4af4d9ff9f4abbcd746cb58acf5acf1c07b839fe560d648c
haproxy-aws-lc-linux-arm64.tar.xz: 9eb0fce1d29f8236cf646ad67de13837371e620c9b79048d4d6e08a90a363205

haproxy-libressl-linux-amd64.tar.xz: 97345a71d0284661d90430affc983068232442c01476ff7089ee958bba3e66c9
haproxy-libressl-linux-arm64.tar.xz: 7a18b25fd78ffff66d5fb491a6d09fcf818b0b625b3beaaa338fa138b9973bcb

haproxy-openssl-linux-amd64.tar.xz: 0c3c1bb5e3ce27ce1564247d8dd745f7d2a64a0dace5a1ba23f61b4cde622501
haproxy-openssl-linux-arm64.tar.xz: 530ed1184f6969beafe55589f59ef0358216431cc760f6a5f73923cda5d955b0

haproxy-wolfssl-linux-amd64.tar.xz: 4258104814c195e232c2a092a5db869f3b14419ff1c90ef2876ef193ab414716
haproxy-wolfssl-linux-arm64.tar.xz: 1195ba76bb8b13d4db4160a1e6f722fa6a1ddff633231cfb5b34cfe8d27520d1
Assets 10
Loading