Skip to content

v3.3.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 13 Dec 11:41
· 44 commits to main since this release
v3.3.0
This tag was signed with the committer’s verified signature.
robvanoostenrijk Rob van Oostenrijk
SSH Key Fingerprint: DH7FqN3JMiZn/nn/Jf01hiCjJqZL9Cz5XfA4rNDzcnE
Verified
Learn about vigilant mode.
4115fcb
This commit was signed with the committer’s verified signature.
robvanoostenrijk Rob van Oostenrijk
SSH Key Fingerprint: DH7FqN3JMiZn/nn/Jf01hiCjJqZL9Cz5XfA4rNDzcnE
Verified
Learn about vigilant mode.

aws-lc v1.66.0

Versions:

  • haproxy-aws-lc

    Version information 
     HAProxy version 3.3.0-http3-aws-lc 2025/11/26 - https://haproxy.org/
 Status: stable branch - will stop receiving fixes around Q1 2027.
 Known bugs: http://www.haproxy.org/bugs/bugs-3.3.0.html
 Running on: Linux 6.11.0-1018-azure #18~24.04.1-Ubuntu SMP Sat Jun 28 04:46:03 UTC 2025 aarch64
 Build options : 
   TARGET  = linux-musl
   CC      = clang
   CFLAGS  = -O2 -g -fwrapv
   OPTIONS = USE_THREAD=1 USE_LIBCRYPT=1 USE_GETADDRINFO=1 USE_OPENSSL=1 USE_OPENSSL_AWSLC=1 USE_LUA=1 USE_SLZ=1 USE_CPU_AFFINITY=1 USE_TFO=1 USE_NS=1 USE_QUIC=1 USE_PCRE2=1 USE_PCRE2_JIT=1
   DEBUG   = 
 
 Feature list : -51DEGREES +ACCEPT4 +BACKTRACE -CLOSEFROM +CPU_AFFINITY +CRYPT_H -DEVICEATLAS +DL -ECH -ENGINE +EPOLL -EVPORTS +GETADDRINFO -KQUEUE +KTLS -LIBATOMIC +LIBCRYPT +LINUX_CAP +LINUX_SPLICE +LINUX_TPROXY +LUA +MATH -MEMORY_PROFILING +NETFILTER +NS -OBSOLETE_LINKER +OPENSSL +OPENSSL_AWSLC -OPENSSL_WOLFSSL -OT -PCRE +PCRE2 +PCRE2_JIT -PCRE_JIT +POLL +PRCTL -PROCCTL -PROMEX -PTHREAD_EMULATION +QUIC -QUIC_OPENSSL_COMPAT +RT +SHM_OPEN +SLZ +SSL -STATIC_PCRE -STATIC_PCRE2 +TFO +THREAD +THREAD_DUMP +TPROXY -WURFL -ZLIB +ACME
 
 Default settings :
   bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
 
 Built with multi-threading support (MAX_TGROUPS=32, MAX_THREADS=1024, default=4).
 Built with SSL library version : OpenSSL 1.1.1 (compatible; AWS-LC 1.66.0)
 Running on SSL library version : AWS-LC 1.66.0
 SSL library supports TLS extensions : yes
 SSL library supports SNI : yes
 SSL library FIPS mode : no
 SSL library supports : TLSv1.0 TLSv1.1 TLSv1.2 TLSv1.3
 QUIC: connection sock-per-conn mode support : yes
 QUIC: GSO emission support : yes
 Built with Lua version : Lua 5.4.8
 Built with network namespace support.
 Built with libslz for stateless compression.
 Compression algorithms supported : identity("identity"), deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
 Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND
 Built with PCRE2 version : 10.47 2025-10-21
 PCRE2 library supports JIT : yes
 Encrypted password support via crypt(3): yes
 Built with clang compiler version 21.1.7 
 
 Available polling systems :
       epoll : pref=300,  test result OK
        poll : pref=200,  test result OK
      select : pref=150,  test result OK
 Total: 3 (3 usable), will use epoll.
 
 Available multiplexer protocols :
 (protocols marked as <default> cannot be specified using 'proto' keyword)
        quic : mode=HTTP  side=FE|BE  mux=QUIC  flags=HTX|NO_UPG|FRAMED
          h2 : mode=HTTP  side=FE|BE  mux=H2    flags=HTX|HOL_RISK|NO_UPG
          h1 : mode=HTTP  side=FE|BE  mux=H1    flags=HTX|NO_UPG
   <default> : mode=HTTP  side=FE|BE  mux=H1    flags=HTX
        fcgi : mode=HTTP  side=BE     mux=FCGI  flags=HTX|HOL_RISK|NO_UPG
        spop : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
   <default> : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
        none : mode=TCP   side=FE|BE  mux=PASS  flags=NO_UPG
   <default> : mode=TCP   side=FE|BE  mux=PASS  flags=
 
 Available services : none
 
 Available filters :
 	[BWLIM] bwlim-in
 	[BWLIM] bwlim-out
 	[CACHE] cache
 	[COMP] compression
 	[FCGI] fcgi-app
 	[SPOE] spoe
 	[TRACE] trace

  • haproxy-libressl

    Version information 
     HAProxy version 3.3.0-http3-libressl 2025/11/26 - https://haproxy.org/
 Status: stable branch - will stop receiving fixes around Q1 2027.
 Known bugs: http://www.haproxy.org/bugs/bugs-3.3.0.html
 Running on: Linux 6.11.0-1018-azure #18~24.04.1-Ubuntu SMP Sat Jun 28 04:46:03 UTC 2025 aarch64
 Build options : 
   TARGET  = linux-musl
   CC      = clang
   CFLAGS  = -O2 -g -fwrapv
   OPTIONS = USE_THREAD=1 USE_LIBCRYPT=1 USE_GETADDRINFO=1 USE_OPENSSL=1 USE_LUA=1 USE_SLZ=1 USE_CPU_AFFINITY=1 USE_TFO=1 USE_NS=1 USE_QUIC=1 USE_PCRE2=1 USE_PCRE2_JIT=1
   DEBUG   = 
 
 Feature list : -51DEGREES +ACCEPT4 +BACKTRACE -CLOSEFROM +CPU_AFFINITY +CRYPT_H -DEVICEATLAS +DL -ECH -ENGINE +EPOLL -EVPORTS +GETADDRINFO -KQUEUE +KTLS -LIBATOMIC +LIBCRYPT +LINUX_CAP +LINUX_SPLICE +LINUX_TPROXY +LUA +MATH -MEMORY_PROFILING +NETFILTER +NS -OBSOLETE_LINKER +OPENSSL -OPENSSL_AWSLC -OPENSSL_WOLFSSL -OT -PCRE +PCRE2 +PCRE2_JIT -PCRE_JIT +POLL +PRCTL -PROCCTL -PROMEX -PTHREAD_EMULATION +QUIC -QUIC_OPENSSL_COMPAT +RT +SHM_OPEN +SLZ +SSL -STATIC_PCRE -STATIC_PCRE2 +TFO +THREAD +THREAD_DUMP +TPROXY -WURFL -ZLIB
 
 Default settings :
   bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
 
 Built with multi-threading support (MAX_TGROUPS=32, MAX_THREADS=1024, default=4).
 Built with SSL library version : LibreSSL 4.2.1
 Running on SSL library version : LibreSSL 4.2.1
 SSL library supports TLS extensions : yes
 SSL library supports SNI : yes
 SSL library FIPS mode : no
 SSL library supports : TLSv1.0 TLSv1.1 TLSv1.2 TLSv1.3
 QUIC: connection sock-per-conn mode support : yes
 QUIC: GSO emission support : yes
 Built with Lua version : Lua 5.4.8
 Built with network namespace support.
 Built with libslz for stateless compression.
 Compression algorithms supported : identity("identity"), deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
 Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND
 Built with PCRE2 version : 10.47 2025-10-21
 PCRE2 library supports JIT : yes
 Encrypted password support via crypt(3): yes
 Built with clang compiler version 21.1.7 
 
 Available polling systems :
       epoll : pref=300,  test result OK
        poll : pref=200,  test result OK
      select : pref=150,  test result OK
 Total: 3 (3 usable), will use epoll.
 
 Available multiplexer protocols :
 (protocols marked as <default> cannot be specified using 'proto' keyword)
        quic : mode=HTTP  side=FE|BE  mux=QUIC  flags=HTX|NO_UPG|FRAMED
          h2 : mode=HTTP  side=FE|BE  mux=H2    flags=HTX|HOL_RISK|NO_UPG
          h1 : mode=HTTP  side=FE|BE  mux=H1    flags=HTX|NO_UPG
   <default> : mode=HTTP  side=FE|BE  mux=H1    flags=HTX
        fcgi : mode=HTTP  side=BE     mux=FCGI  flags=HTX|HOL_RISK|NO_UPG
        spop : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
   <default> : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
        none : mode=TCP   side=FE|BE  mux=PASS  flags=NO_UPG
   <default> : mode=TCP   side=FE|BE  mux=PASS  flags=
 
 Available services : none
 
 Available filters :
 	[BWLIM] bwlim-in
 	[BWLIM] bwlim-out
 	[CACHE] cache
 	[COMP] compression
 	[FCGI] fcgi-app
 	[SPOE] spoe
 	[TRACE] trace

  • haproxy-openssl

    Version information 
     HAProxy version 3.3.0-http3-openssl 2025/11/26 - https://haproxy.org/
 Status: stable branch - will stop receiving fixes around Q1 2027.
 Known bugs: http://www.haproxy.org/bugs/bugs-3.3.0.html
 Running on: Linux 6.11.0-1018-azure #18~24.04.1-Ubuntu SMP Sat Jun 28 04:46:03 UTC 2025 aarch64
 Build options : 
   TARGET  = linux-musl
   CC      = clang
   CFLAGS  = -O2 -g -fwrapv
   OPTIONS = USE_THREAD=1 USE_LIBCRYPT=1 USE_GETADDRINFO=1 USE_OPENSSL=1 USE_LUA=1 USE_SLZ=1 USE_CPU_AFFINITY=1 USE_TFO=1 USE_NS=1 USE_QUIC=1 USE_PCRE2=1 USE_PCRE2_JIT=1 USE_QUIC_OPENSSL_COMPAT=1
   DEBUG   = 
 
 Feature list : -51DEGREES +ACCEPT4 +BACKTRACE -CLOSEFROM +CPU_AFFINITY +CRYPT_H -DEVICEATLAS +DL -ECH -ENGINE +EPOLL -EVPORTS +GETADDRINFO -KQUEUE +KTLS -LIBATOMIC +LIBCRYPT +LINUX_CAP +LINUX_SPLICE +LINUX_TPROXY +LUA +MATH -MEMORY_PROFILING +NETFILTER +NS -OBSOLETE_LINKER +OPENSSL -OPENSSL_AWSLC -OPENSSL_WOLFSSL -OT -PCRE +PCRE2 +PCRE2_JIT -PCRE_JIT +POLL +PRCTL -PROCCTL -PROMEX -PTHREAD_EMULATION +QUIC +QUIC_OPENSSL_COMPAT +RT +SHM_OPEN +SLZ +SSL -STATIC_PCRE -STATIC_PCRE2 +TFO +THREAD +THREAD_DUMP +TPROXY -WURFL -ZLIB +ACME
 
 Default settings :
   bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
 
 Built with multi-threading support (MAX_TGROUPS=32, MAX_THREADS=1024, default=4).
 Built with SSL library version : OpenSSL 3.6.0 1 Oct 2025
 Running on SSL library version : OpenSSL 3.6.0 1 Oct 2025
 SSL library supports TLS extensions : yes
 SSL library supports SNI : yes
 SSL library supports : TLSv1.0 TLSv1.1 TLSv1.2 TLSv1.3
 OpenSSL providers loaded : default
 QUIC: connection sock-per-conn mode support : yes
 QUIC: GSO emission support : yes
 Built with Lua version : Lua 5.4.8
 Built with network namespace support.
 Built with libslz for stateless compression.
 Compression algorithms supported : identity("identity"), deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
 Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND
 Built with PCRE2 version : 10.47 2025-10-21
 PCRE2 library supports JIT : yes
 Encrypted password support via crypt(3): yes
 Built with clang compiler version 21.1.7 
 
 Available polling systems :
       epoll : pref=300,  test result OK
        poll : pref=200,  test result OK
      select : pref=150,  test result OK
 Total: 3 (3 usable), will use epoll.
 
 Available multiplexer protocols :
 (protocols marked as <default> cannot be specified using 'proto' keyword)
        quic : mode=HTTP  side=FE|BE  mux=QUIC  flags=HTX|NO_UPG|FRAMED
          h2 : mode=HTTP  side=FE|BE  mux=H2    flags=HTX|HOL_RISK|NO_UPG
          h1 : mode=HTTP  side=FE|BE  mux=H1    flags=HTX|NO_UPG
   <default> : mode=HTTP  side=FE|BE  mux=H1    flags=HTX
        fcgi : mode=HTTP  side=BE     mux=FCGI  flags=HTX|HOL_RISK|NO_UPG
        spop : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
   <default> : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
        none : mode=TCP   side=FE|BE  mux=PASS  flags=NO_UPG
   <default> : mode=TCP   side=FE|BE  mux=PASS  flags=
 
 Available services : none
 
 Available filters :
 	[BWLIM] bwlim-in
 	[BWLIM] bwlim-out
 	[CACHE] cache
 	[COMP] compression
 	[FCGI] fcgi-app
 	[SPOE] spoe
 	[TRACE] trace

  • haproxy-wolfssl

    Version information 
     HAProxy version 3.3.0-http3-wolfssl 2025/11/26 - https://haproxy.org/
 Status: stable branch - will stop receiving fixes around Q1 2027.
 Known bugs: http://www.haproxy.org/bugs/bugs-3.3.0.html
 Running on: Linux 6.11.0-1018-azure #18~24.04.1-Ubuntu SMP Sat Jun 28 04:46:03 UTC 2025 aarch64
 Build options : 
   TARGET  = linux-musl
   CC      = clang
   CFLAGS  = -O2 -g -fwrapv
   OPTIONS = USE_THREAD=1 USE_LIBCRYPT=1 USE_GETADDRINFO=1 USE_OPENSSL=1 USE_OPENSSL_WOLFSSL=1 USE_LUA=1 USE_SLZ=1 USE_CPU_AFFINITY=1 USE_TFO=1 USE_NS=1 USE_QUIC=1 USE_PCRE2=1 USE_PCRE2_JIT=1
   DEBUG   = 
 
 Feature list : -51DEGREES +ACCEPT4 +BACKTRACE -CLOSEFROM +CPU_AFFINITY +CRYPT_H -DEVICEATLAS +DL -ECH -ENGINE +EPOLL -EVPORTS +GETADDRINFO -KQUEUE +KTLS -LIBATOMIC +LIBCRYPT +LINUX_CAP +LINUX_SPLICE +LINUX_TPROXY +LUA +MATH -MEMORY_PROFILING +NETFILTER +NS -OBSOLETE_LINKER +OPENSSL -OPENSSL_AWSLC +OPENSSL_WOLFSSL -OT -PCRE +PCRE2 +PCRE2_JIT -PCRE_JIT +POLL +PRCTL -PROCCTL -PROMEX -PTHREAD_EMULATION +QUIC -QUIC_OPENSSL_COMPAT +RT +SHM_OPEN +SLZ +SSL -STATIC_PCRE -STATIC_PCRE2 +TFO +THREAD +THREAD_DUMP +TPROXY -WURFL -ZLIB
 
 Default settings :
   bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
 
 Built with multi-threading support (MAX_TGROUPS=32, MAX_THREADS=1024, default=4).
 Built with SSL library version : wolfSSL 5.8.4
 Running on SSL library version : wolfSSL 5.8.4
 SSL library supports TLS extensions : yes
 SSL library supports SNI : yes
 SSL library FIPS mode : no
 SSL library supports : SSLv3 TLSv1.0 TLSv1.1 TLSv1.2 TLSv1.3
 QUIC: connection sock-per-conn mode support : yes
 QUIC: GSO emission support : yes
 Built with Lua version : Lua 5.4.8
 Built with network namespace support.
 Built with libslz for stateless compression.
 Compression algorithms supported : identity("identity"), deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
 Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND
 Built with PCRE2 version : 10.47 2025-10-21
 PCRE2 library supports JIT : yes
 Encrypted password support via crypt(3): yes
 Built with clang compiler version 21.1.7 
 
 Available polling systems :
       epoll : pref=300,  test result OK
        poll : pref=200,  test result OK
      select : pref=150,  test result OK
 Total: 3 (3 usable), will use epoll.
 
 Available multiplexer protocols :
 (protocols marked as <default> cannot be specified using 'proto' keyword)
        quic : mode=HTTP  side=FE|BE  mux=QUIC  flags=HTX|NO_UPG|FRAMED
          h2 : mode=HTTP  side=FE|BE  mux=H2    flags=HTX|HOL_RISK|NO_UPG
          h1 : mode=HTTP  side=FE|BE  mux=H1    flags=HTX|NO_UPG
   <default> : mode=HTTP  side=FE|BE  mux=H1    flags=HTX
        fcgi : mode=HTTP  side=BE     mux=FCGI  flags=HTX|HOL_RISK|NO_UPG
        spop : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
   <default> : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
        none : mode=TCP   side=FE|BE  mux=PASS  flags=NO_UPG
   <default> : mode=TCP   side=FE|BE  mux=PASS  flags=
 
 Available services : none
 
 Available filters :
 	[BWLIM] bwlim-in
 	[BWLIM] bwlim-out
 	[CACHE] cache
 	[COMP] compression
 	[FCGI] fcgi-app
 	[SPOE] spoe
 	[TRACE] trace

SHA256 Checksums:

haproxy-aws-lc-linux-amd64.tar.xz: e47a8aa50ae12832f901e7112686ea73722b700d3c53375a6e6906249ccf7f1a
haproxy-aws-lc-linux-arm64.tar.xz: 9ac816c88af1044bea30c9237be689efbc6aa5f0c2d639fd9ddf57db95d41a3b

haproxy-libressl-linux-amd64.tar.xz: cac9981e46334a862b2a25a1fecc530bc031846f1eeb30067e3c88b3a1c43203
haproxy-libressl-linux-arm64.tar.xz: b78d1f36373be3f5f0c733d726226afb779bc58ec5cd0d6432728e3fa745cb8d

haproxy-openssl-linux-amd64.tar.xz: 549edb6c064e9283a9383fea9979f8641c7bb2d212856b9504e71202d7b3e57f
haproxy-openssl-linux-arm64.tar.xz: 59b444e8c1c6b14559de82d4dc5e6d9a4cd5ef7336e6a72e0111597dccf88b2f

haproxy-wolfssl-linux-amd64.tar.xz: 7b38f05c351ba6bb218722cbefaafb812f8322e1614450aaef8375e5e35b5977
haproxy-wolfssl-linux-arm64.tar.xz: 06ae50aa2d6924ebbc4e8b7140b7394dde534ee08ff06cb5dcfa4da4ffa09e42
Assets 10
Loading