Skip to content

v3.2.0

Choose a tag to compare

@github-actions github-actions released this 02 Jun 09:46
· 73 commits to main since this release
v3.2.0
e800970

haproxy v3.2.0

Versions:

  • haproxy-aws-lc

    Version information
     HAProxy version 3.2.0-http3-aws-lc 2025/05/28 - https://haproxy.org/
     Status: long-term supported branch - will stop receiving fixes around Q2 2030.
     Known bugs: http://www.haproxy.org/bugs/bugs-3.2.0.html
     Running on: Linux 6.11.0-1014-azure #14~24.04.1-Ubuntu SMP Thu Apr 24 17:41:03 UTC 2025 aarch64
     Build options : 
       TARGET  = linux-musl
       CC      = clang
       CFLAGS  = -O2 -g -fwrapv
       OPTIONS = USE_THREAD=1 USE_LIBCRYPT=1 USE_GETADDRINFO=1 USE_OPENSSL=1 USE_OPENSSL_AWSLC=1 USE_LUA=1 USE_CPU_AFFINITY=1 USE_TFO=1 USE_NS=1 USE_QUIC=1 USE_PCRE2=1 USE_PCRE2_JIT=1
       DEBUG   = 
     
     Feature list : -51DEGREES +ACCEPT4 +BACKTRACE -CLOSEFROM +CPU_AFFINITY +CRYPT_H -DEVICEATLAS +DL -ENGINE +EPOLL -EVPORTS +GETADDRINFO -KQUEUE -LIBATOMIC +LIBCRYPT +LINUX_CAP +LINUX_SPLICE +LINUX_TPROXY +LUA +MATH -MEMORY_PROFILING +NETFILTER +NS -OBSOLETE_LINKER +OPENSSL +OPENSSL_AWSLC -OPENSSL_WOLFSSL -OT -PCRE +PCRE2 +PCRE2_JIT -PCRE_JIT +POLL +PRCTL -PROCCTL -PROMEX -PTHREAD_EMULATION +QUIC -QUIC_OPENSSL_COMPAT +RT +SLZ +SSL -STATIC_PCRE -STATIC_PCRE2 +TFO +THREAD +THREAD_DUMP +TPROXY -WURFL -ZLIB
     
     Default settings :
       bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
     
     Built with multi-threading support (MAX_TGROUPS=32, MAX_THREADS=1024, default=4).
     Built with SSL library version : OpenSSL 1.1.1 (compatible; AWS-LC 1.52.1)
     Running on SSL library version : AWS-LC 1.52.1
     SSL library supports TLS extensions : yes
     SSL library supports SNI : yes
     SSL library FIPS mode : no
     SSL library supports : TLSv1.0 TLSv1.1 TLSv1.2 TLSv1.3
     QUIC: connection socket-owner mode support : yes
     QUIC: GSO emission support : yes
     Built with Lua version : Lua 5.4.7
     Built with network namespace support.
     Built with libslz for stateless compression.
     Compression algorithms supported : identity("identity"), deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
     Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND
     Built with PCRE2 version : 10.43 2024-02-16
     PCRE2 library supports JIT : yes
     Encrypted password support via crypt(3): yes
     Built with clang compiler version 20.1.6 
     
     Available polling systems :
           epoll : pref=300,  test result OK
            poll : pref=200,  test result OK
          select : pref=150,  test result OK
     Total: 3 (3 usable), will use epoll.
     
     Available multiplexer protocols :
     (protocols marked as <default> cannot be specified using 'proto' keyword)
            quic : mode=HTTP  side=FE     mux=QUIC  flags=HTX|NO_UPG|FRAMED
              h2 : mode=HTTP  side=FE|BE  mux=H2    flags=HTX|HOL_RISK|NO_UPG
              h1 : mode=HTTP  side=FE|BE  mux=H1    flags=HTX|NO_UPG
       <default> : mode=HTTP  side=FE|BE  mux=H1    flags=HTX
            fcgi : mode=HTTP  side=BE     mux=FCGI  flags=HTX|HOL_RISK|NO_UPG
            spop : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
       <default> : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
            none : mode=TCP   side=FE|BE  mux=PASS  flags=NO_UPG
       <default> : mode=TCP   side=FE|BE  mux=PASS  flags=
     
     Available services : none
     
     Available filters :
     	[BWLIM] bwlim-in
     	[BWLIM] bwlim-out
     	[CACHE] cache
     	[COMP] compression
     	[FCGI] fcgi-app
     	[SPOE] spoe
     	[TRACE] trace
    
  • haproxy-libressl

    Version information
     HAProxy version 3.2.0-http3-libressl 2025/05/28 - https://haproxy.org/
     Status: long-term supported branch - will stop receiving fixes around Q2 2030.
     Known bugs: http://www.haproxy.org/bugs/bugs-3.2.0.html
     Running on: Linux 6.11.0-1014-azure #14~24.04.1-Ubuntu SMP Thu Apr 24 17:41:03 UTC 2025 aarch64
     Build options : 
       TARGET  = linux-musl
       CC      = clang
       CFLAGS  = -O2 -g -fwrapv
       OPTIONS = USE_THREAD=1 USE_LIBCRYPT=1 USE_GETADDRINFO=1 USE_OPENSSL=1 USE_LUA=1 USE_CPU_AFFINITY=1 USE_TFO=1 USE_NS=1 USE_QUIC=1 USE_PCRE2=1 USE_PCRE2_JIT=1
       DEBUG   = 
     
     Feature list : -51DEGREES +ACCEPT4 +BACKTRACE -CLOSEFROM +CPU_AFFINITY +CRYPT_H -DEVICEATLAS +DL -ENGINE +EPOLL -EVPORTS +GETADDRINFO -KQUEUE -LIBATOMIC +LIBCRYPT +LINUX_CAP +LINUX_SPLICE +LINUX_TPROXY +LUA +MATH -MEMORY_PROFILING +NETFILTER +NS -OBSOLETE_LINKER +OPENSSL -OPENSSL_AWSLC -OPENSSL_WOLFSSL -OT -PCRE +PCRE2 +PCRE2_JIT -PCRE_JIT +POLL +PRCTL -PROCCTL -PROMEX -PTHREAD_EMULATION +QUIC -QUIC_OPENSSL_COMPAT +RT +SLZ +SSL -STATIC_PCRE -STATIC_PCRE2 +TFO +THREAD +THREAD_DUMP +TPROXY -WURFL -ZLIB
     
     Default settings :
       bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
     
     Built with multi-threading support (MAX_TGROUPS=32, MAX_THREADS=1024, default=4).
     Built with SSL library version : LibreSSL 4.1.0
     Running on SSL library version : LibreSSL 4.1.0
     SSL library supports TLS extensions : yes
     SSL library supports SNI : yes
     SSL library FIPS mode : no
     SSL library supports : TLSv1.0 TLSv1.1 TLSv1.2 TLSv1.3
     QUIC: connection socket-owner mode support : yes
     QUIC: GSO emission support : yes
     Built with Lua version : Lua 5.4.7
     Built with network namespace support.
     Built with libslz for stateless compression.
     Compression algorithms supported : identity("identity"), deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
     Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND
     Built with PCRE2 version : 10.43 2024-02-16
     PCRE2 library supports JIT : yes
     Encrypted password support via crypt(3): yes
     Built with clang compiler version 20.1.6 
     
     Available polling systems :
           epoll : pref=300,  test result OK
            poll : pref=200,  test result OK
          select : pref=150,  test result OK
     Total: 3 (3 usable), will use epoll.
     
     Available multiplexer protocols :
     (protocols marked as <default> cannot be specified using 'proto' keyword)
            quic : mode=HTTP  side=FE     mux=QUIC  flags=HTX|NO_UPG|FRAMED
              h2 : mode=HTTP  side=FE|BE  mux=H2    flags=HTX|HOL_RISK|NO_UPG
              h1 : mode=HTTP  side=FE|BE  mux=H1    flags=HTX|NO_UPG
       <default> : mode=HTTP  side=FE|BE  mux=H1    flags=HTX
            fcgi : mode=HTTP  side=BE     mux=FCGI  flags=HTX|HOL_RISK|NO_UPG
            spop : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
       <default> : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
            none : mode=TCP   side=FE|BE  mux=PASS  flags=NO_UPG
       <default> : mode=TCP   side=FE|BE  mux=PASS  flags=
     
     Available services : none
     
     Available filters :
     	[BWLIM] bwlim-in
     	[BWLIM] bwlim-out
     	[CACHE] cache
     	[COMP] compression
     	[FCGI] fcgi-app
     	[SPOE] spoe
     	[TRACE] trace
    
  • haproxy-openssl

    Version information
     HAProxy version 3.2.0-http3-openssl 2025/05/28 - https://haproxy.org/
     Status: long-term supported branch - will stop receiving fixes around Q2 2030.
     Known bugs: http://www.haproxy.org/bugs/bugs-3.2.0.html
     Running on: Linux 6.11.0-1014-azure #14~24.04.1-Ubuntu SMP Thu Apr 24 17:41:03 UTC 2025 aarch64
     Build options : 
       TARGET  = linux-musl
       CC      = clang
       CFLAGS  = -O2 -g -fwrapv
       OPTIONS = USE_THREAD=1 USE_LIBCRYPT=1 USE_GETADDRINFO=1 USE_OPENSSL=1 USE_LUA=1 USE_CPU_AFFINITY=1 USE_TFO=1 USE_NS=1 USE_QUIC=1 USE_PCRE2=1 USE_PCRE2_JIT=1 USE_QUIC_OPENSSL_COMPAT=1
       DEBUG   = 
     
     Feature list : -51DEGREES +ACCEPT4 +BACKTRACE -CLOSEFROM +CPU_AFFINITY +CRYPT_H -DEVICEATLAS +DL -ENGINE +EPOLL -EVPORTS +GETADDRINFO -KQUEUE -LIBATOMIC +LIBCRYPT +LINUX_CAP +LINUX_SPLICE +LINUX_TPROXY +LUA +MATH -MEMORY_PROFILING +NETFILTER +NS -OBSOLETE_LINKER +OPENSSL -OPENSSL_AWSLC -OPENSSL_WOLFSSL -OT -PCRE +PCRE2 +PCRE2_JIT -PCRE_JIT +POLL +PRCTL -PROCCTL -PROMEX -PTHREAD_EMULATION +QUIC +QUIC_OPENSSL_COMPAT +RT +SLZ +SSL -STATIC_PCRE -STATIC_PCRE2 +TFO +THREAD +THREAD_DUMP +TPROXY -WURFL -ZLIB
     
     Default settings :
       bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
     
     Built with multi-threading support (MAX_TGROUPS=32, MAX_THREADS=1024, default=4).
     Built with SSL library version : OpenSSL 3.5.0 8 Apr 2025
     Running on SSL library version : OpenSSL 3.5.0 8 Apr 2025
     SSL library supports TLS extensions : yes
     SSL library supports SNI : yes
     SSL library supports : TLSv1.0 TLSv1.1 TLSv1.2 TLSv1.3
     OpenSSL providers loaded : default
     QUIC: connection socket-owner mode support : yes
     QUIC: GSO emission support : yes
     Built with Lua version : Lua 5.4.7
     Built with network namespace support.
     Built with libslz for stateless compression.
     Compression algorithms supported : identity("identity"), deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
     Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND
     Built with PCRE2 version : 10.43 2024-02-16
     PCRE2 library supports JIT : yes
     Encrypted password support via crypt(3): yes
     Built with clang compiler version 20.1.6 
     
     Available polling systems :
           epoll : pref=300,  test result OK
            poll : pref=200,  test result OK
          select : pref=150,  test result OK
     Total: 3 (3 usable), will use epoll.
     
     Available multiplexer protocols :
     (protocols marked as <default> cannot be specified using 'proto' keyword)
            quic : mode=HTTP  side=FE     mux=QUIC  flags=HTX|NO_UPG|FRAMED
              h2 : mode=HTTP  side=FE|BE  mux=H2    flags=HTX|HOL_RISK|NO_UPG
              h1 : mode=HTTP  side=FE|BE  mux=H1    flags=HTX|NO_UPG
       <default> : mode=HTTP  side=FE|BE  mux=H1    flags=HTX
            fcgi : mode=HTTP  side=BE     mux=FCGI  flags=HTX|HOL_RISK|NO_UPG
            spop : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
       <default> : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
            none : mode=TCP   side=FE|BE  mux=PASS  flags=NO_UPG
       <default> : mode=TCP   side=FE|BE  mux=PASS  flags=
     
     Available services : none
     
     Available filters :
     	[BWLIM] bwlim-in
     	[BWLIM] bwlim-out
     	[CACHE] cache
     	[COMP] compression
     	[FCGI] fcgi-app
     	[SPOE] spoe
     	[TRACE] trace
    
  • haproxy-wolfssl

    Version information
     HAProxy version 3.2.0-http3-wolfssl 2025/05/28 - https://haproxy.org/
     Status: long-term supported branch - will stop receiving fixes around Q2 2030.
     Known bugs: http://www.haproxy.org/bugs/bugs-3.2.0.html
     Running on: Linux 6.11.0-1014-azure #14~24.04.1-Ubuntu SMP Thu Apr 24 17:41:03 UTC 2025 aarch64
     Build options : 
       TARGET  = linux-musl
       CC      = clang
       CFLAGS  = -O2 -g -fwrapv
       OPTIONS = USE_THREAD=1 USE_LIBCRYPT=1 USE_GETADDRINFO=1 USE_OPENSSL=1 USE_OPENSSL_WOLFSSL=1 USE_LUA=1 USE_CPU_AFFINITY=1 USE_TFO=1 USE_NS=1 USE_QUIC=1 USE_PCRE2=1 USE_PCRE2_JIT=1
       DEBUG   = 
     
     Feature list : -51DEGREES +ACCEPT4 +BACKTRACE -CLOSEFROM +CPU_AFFINITY +CRYPT_H -DEVICEATLAS +DL -ENGINE +EPOLL -EVPORTS +GETADDRINFO -KQUEUE -LIBATOMIC +LIBCRYPT +LINUX_CAP +LINUX_SPLICE +LINUX_TPROXY +LUA +MATH -MEMORY_PROFILING +NETFILTER +NS -OBSOLETE_LINKER +OPENSSL -OPENSSL_AWSLC +OPENSSL_WOLFSSL -OT -PCRE +PCRE2 +PCRE2_JIT -PCRE_JIT +POLL +PRCTL -PROCCTL -PROMEX -PTHREAD_EMULATION +QUIC -QUIC_OPENSSL_COMPAT +RT +SLZ +SSL -STATIC_PCRE -STATIC_PCRE2 +TFO +THREAD +THREAD_DUMP +TPROXY -WURFL -ZLIB
     
     Default settings :
       bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
     
     Built with multi-threading support (MAX_TGROUPS=32, MAX_THREADS=1024, default=4).
     Built with SSL library version : wolfSSL 5.8.0
     Running on SSL library version : wolfSSL 5.8.0
     SSL library supports TLS extensions : yes
     SSL library supports SNI : yes
     SSL library FIPS mode : no
     SSL library supports : SSLv3 TLSv1.0 TLSv1.1 TLSv1.2 TLSv1.3
     QUIC: connection socket-owner mode support : yes
     QUIC: GSO emission support : yes
     Built with Lua version : Lua 5.4.7
     Built with network namespace support.
     Built with libslz for stateless compression.
     Compression algorithms supported : identity("identity"), deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
     Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND
     Built with PCRE2 version : 10.43 2024-02-16
     PCRE2 library supports JIT : yes
     Encrypted password support via crypt(3): yes
     Built with clang compiler version 20.1.6 
     
     Available polling systems :
           epoll : pref=300,  test result OK
            poll : pref=200,  test result OK
          select : pref=150,  test result OK
     Total: 3 (3 usable), will use epoll.
     
     Available multiplexer protocols :
     (protocols marked as <default> cannot be specified using 'proto' keyword)
            quic : mode=HTTP  side=FE     mux=QUIC  flags=HTX|NO_UPG|FRAMED
              h2 : mode=HTTP  side=FE|BE  mux=H2    flags=HTX|HOL_RISK|NO_UPG
              h1 : mode=HTTP  side=FE|BE  mux=H1    flags=HTX|NO_UPG
       <default> : mode=HTTP  side=FE|BE  mux=H1    flags=HTX
            fcgi : mode=HTTP  side=BE     mux=FCGI  flags=HTX|HOL_RISK|NO_UPG
            spop : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
       <default> : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
            none : mode=TCP   side=FE|BE  mux=PASS  flags=NO_UPG
       <default> : mode=TCP   side=FE|BE  mux=PASS  flags=
     
     Available services : none
     
     Available filters :
     	[BWLIM] bwlim-in
     	[BWLIM] bwlim-out
     	[CACHE] cache
     	[COMP] compression
     	[FCGI] fcgi-app
     	[SPOE] spoe
     	[TRACE] trace
    

SHA256 Checksums:

haproxy-aws-lc-linux-amd64.tar.xz: 2b0935a4317bc0c46ca7ad4210d7ee0f20e514303c9e1c60a1d9706e3d53873a
haproxy-aws-lc-linux-arm64.tar.xz: 84d139b2ba19d19476d77cf9ef479b5ddb8272a2463de928575afe97e3804577

haproxy-libressl-linux-amd64.tar.xz: 0b20ee4b180544b5c453733974c351cdfd104b07235e82481743942e42cacc11
haproxy-libressl-linux-arm64.tar.xz: 305ea7d32e8bb5abb6e3326296e9bf31ee79b00ab5460d1d9181cd24a600452f

haproxy-openssl-linux-amd64.tar.xz: 1367a858bcc8cc606d140daa5a508277183c25dbeba409ab12eaeca5af0d2761
haproxy-openssl-linux-arm64.tar.xz: 9fa2bd301c48a42d702c5f2966bb9fcaec7e685486ccd8c13e366c093911a12d

haproxy-wolfssl-linux-amd64.tar.xz: 54c3f8a3db2a97961be598d8a2ebf6035b2422f81f3af9eb408788a1b965febf
haproxy-wolfssl-linux-arm64.tar.xz: 2430b50f839646d4e41612f1753093e7bef90a5fbc0b66156976241e4cf043c1