OpenResty - Enterprise solutions

Release Note 24.9.6

Release Date: September 27, 2024

feature

The "Redirect" action in Page Rules now supports returning 307/308 response codes.

feature

Stream applications now support IPv6.

feature

Log Server now supports database failover.

feature

Rate limiting actions now support nodelay option.

feature

Added disk usage display for Edge Admin and Edge Log Server.

feature

Added support for SSL-type applications.

feature

Added status display for Clone Admin.

feature

Added upstream search capability in stream applications.

feature

Added detailed printing of Kubernetes endpoints events.

feature

Added new page rule action "Close Connection".

feature

Added new page rule action "Limit Concurrent Requests".

feature

Added reject action setting in "Limit Request Count" and "Limit Concurrent Requests" page rules.

feature

Added ip-asn and client-asn APIs in Edgelang.

feature

Added ip-org and client-org APIs in Edgelang.

feature

Added enable-otel-trace API in Edgelang.

feature

Added replace-resp-filter API in Edgelang.

feature

Added support for OpenTelemetry.

feature

Added support for user functions in Edgelang replace-resp-filter action.

feature

Added support for setting expiration time for each IP address in IP lists.

change

Added httponly flag for "Encrypt Cookie" action.

change

Added more configuration hints for LDAP settings.

change

Added port validation for Prometheus.

change

Improved display of Edge gateway node status.

change

Modified default content for output response body.

change

Added support for enabling vim mode in Edgelang editor.

change

Improved Edge built-in captcha page.

change

Enhanced Edge captcha generation performance.

change

Added password confirmation when changing passwords.

change

Added Save and Cancel buttons to the top of the Edge editor.

change

Added support for loading application IP lists by name.

change

Added support for using request body variables in page rule conditions.

optimize

JS challenge responses now use gzip compression.

optimize

Reduced DNS query timeout to 1000 milliseconds when trying DNS servers.

bugfix

Resolved issue with Edge gateway nodes failing to start after system reboot.

bugfix

Implemented escaping for proxy URIs.

bugfix

Fixed issue where global Lua module updates might not take effect.

bugfix

Fixed console error when creating new TLS applications.

bugfix

Resolved issues with sticky cookie functionality.

bugfix

Addressed MDB_READERS_FULL related errors.

bugfix

Fixed publish status display in stream applications.

bugfix

Corrected action column visibility in Kubernetes lists.

bugfix

Fixed condition value reset issue when changing operators.

bugfix

Resolved upstream editing issues in page rule lists.

bugfix

Fixed Kubernetes service loading issues.

bugfix

Addressed delay in Edge gateway node version reporting.

bugfix

Fixed Kubernetes upstream search functionality.

bugfix

Corrected links on upstream list search page.

bugfix

Implemented pagination for IP lists.

bugfix

Resolved compatibility issues between "Limit Request Rate" page rule action and old configurations.

bugfix

Improved accuracy of upstream metrics.

bugfix

Fixed issue preventing application deletion.

bugfix

Optimized duration of master-slave database status checks.

Release Note 24.3.9

Release Date: May 15, 2024

feature

Edge Admin supports database failover. For configuration details, please refer to Database Configuration for Edge Admin.

feature

The rate-limiting action for HTTP applications supports specifying multiple key-value pairs as the rate-limiting key.

feature

The IP list feature supports removing specified IPs.

feature

Kubernetes clusters support configuring request timeout parameters.

feature

The upstream management page adds a search function to find upstreams quickly.

feature

Support using OAuth (OpenIDC) authentication to log in to the OpenResty Edge Admin console.

feature

Support the built-in variable SSL Client Hello Message.

feature

Automatically delete invalid Kubernetes gateway nodes.

feature

Applications support setting the default SSL certificate.

feature

Support obtaining the SSL Client Hello message content through Edgelang scripts.

feature

Support calling global actions through Edgelang scripts.

feature

Support filtering WAF logs by rule name.

feature

Support viewing the corresponding Lua and EdgeLang source code by inputting the call stack.

feature

Add a global configuration item to control whether to save the SSL Client Hello message.

feature

Clicking the WAF hit rule bar chart can filter and view related WAF logs.

change

Improve the speed of configuration changes and releases.

change

Optimize the Kubernetes upstream update mechanism to improve performance.

change

Optimize the Kubernetes service event handling process to reduce database operations.

change

Optimize the upstream selector performance to resolve the page freezing issue caused by many upstreams.

change

Optimize configuration synchronization's data encoding and decoding efficiency to improve synchronization performance.

change

The gateway node status switching is now a toggle form, supporting offline operations. Offline nodes are not counted towards the license quantity.

change

Add additional logging for SSL certificate mismatch scenarios.

change

Optimize the internal DNS queries of Edge Admin and Edge Node.

change

Retain the original Server request header after upgrading.

change

When exporting DNS records, support exporting more field information.

change

The block request action supports configuring the rejection action.

change

Support printing Kubernetes Endpoints change events in logs.

change

Adjust the shared memory space size to the rate-limiting action uses.

change

Display the corresponding token.yml configuration based on different Kubernetes versions.

change

Add validation to ensure the rate-limiting rejection threshold is higher than the rate-limiting threshold.

change

Remove the delay option from the rate-limiting rejection action.

change

The rate-limiting rejection action supports returning a custom page template.

change

The delay value of the page rule action supports entering decimals.

change

Use the MaxMind IP address database by default.

bugfix

Fix the error message in the logs related to the GeoIP database.

bugfix

Fix the issue where enabling cluster caching and the WAF feature may cause a 500 error.

bugfix

Fix the issue where some ports in the configuration file did not enable the reuseport option.

bugfix

Resolve the issue where repeatedly deleting Kubernetes upstreams causes the rollback operation to fail.

bugfix

Resolve the issue where the request handshake fails, but processing is not interrupted, and an error is not returned in Kubernetes.

bugfix

Resolve the issue where the Maxmind GeoIP database download fails.

bugfix

Resolve the issue where the reset button in the cache clearing form is unresponsive.

bugfix

Resolve the issue where passing an incorrect exit code causes the stream subsystem to report an exception.

bugfix

Resolve the issue where some page rule actions cannot input the value 0.

bugfix

Resolve several issues related to uploading WAF rules.

bugfix

Resolved the issue where there was no redirection after passing the Hcaptcha verification.

bugfix

Resolved the issue of WebHook not working on the n8n platform.

Release Note 23.12.9

Release Date: January 10, 2024

feature

Support for searching upstream within HTTP applications.

feature

Edge Log Server now supports multiple instances. For detailed configuration methods, please refer to Multiple OpenResty Edge Log Server.

feature

Global general configuration supports batch publishing.

feature

Edge Node servers support forced full sync.

feature

Support for exporting global WAF rule sets.

feature

Support for UDP applications.

feature

Support for standard dynamic indicators of different granularities (condition level, application level).

feature

Support for "Disable Proxy Buffering" page rule action.

feature

Support configuring "Health Check Report" shared memory in global configuration.

feature

HTTP forward proxy supports proxying IPv6.

feature

Support sending ACME certificate issuance requests through HTTP forward proxy.

feature

Support for downloading Geo IP database through HTTP forward proxy.

feature

Support for reporting the CPU count of Edge Node servers to Edge Admin.

feature

Support for maintaining health check results after hot update.

feature

Added interfaces to Edge language: skip-json-values, set-proxy-ignore-no-cache, disable-proxy-buffering, enable-proxy-buffering.

change

Display request status codes in webhook execution history.

change

Optimized MAC address comparison logic of Edge Node servers.

change

Display a warning message when entering a public IP address in the private address box of the Edge Node server.

change

Improve description of retry conditions in page rules.

change

Allow public IP addresses to be entered in the private IP address box of the Edge Node server.

change

Optimized the display of global extension parameters.

change

HTTP forward proxy access logs support more fields, such as uri and url.

optimize

Enhance the performance of the HTTP application configuration update interface.

optimize

Optimized incremental configuration sync to handle version number jumps correctly.

optimize

Optimize the startup time of Kubernetes configuration watcher.

optimize

Extend the default timeout for ACME certificate issuance and allow customization.

optimize

Enable "Allow underscores in request headers" by default.

optimize

Optimized Kubernetes error log messages.

optimize

Added health checks for Edge Admin and optimized configuration sync speed.

optimize

Optimize checks for whether the Edge Node service runs in a container.

bugfix

Add delay action filter in DoS logs.

bugfix

The default timeout for internal requests has been changed from 5 seconds to 60 seconds.

bugfix

Strengthen the verification of "proxy" related fields in page rules to avoid being unable to generate configuration descriptions.

bugfix

Fixed the problem of searching upstream, HTTP applications, and DNS applications.

bugfix

Fixed several issues with uploading WAF rules.

bugfix

Fixed several security issues.

Release Note 23.6.1

Release Date: June 1, 2023

bugfix

Resolved the issue where there was no redirection after passing the Hcaptcha verification.

bugfix

Resolved the issue of WebHook not working on the n8n platform.

bugfix

Resolved the issue of failed Maxmind GeoIP database download.

change

Updated the protocol for downloading IP geolocation databases from MaxMind and IPIP.NET.

optimize

Improved the DNS query process to reduce log entries caused by rate limiting.

optimize

Use TimescaleDB to store alarm information.

feature

Added support for persisting upstream health check results.

optimize

Optimize the implementation of upstream health checks.

change

In Edgelang, the return type of the http-version interface has been changed from Num to Str to return "1.0" instead of "1".

change

Now you can get URI parameters with an empty string as a key, such as ka=va&=vb.

bugfix

Solved several problems with WAF Log and WAF rule uploads.

feature

WAF logs can now record response bodies (only effective under the Log Only action).

feature

Added an error page for a 413 (Content Too Large) error.

bugfix

Solved the problem of IPv6 DNS health check failure.

optimize

Improved WAF Whitelist and deprecated Disable WAF Rules.

feature

Edge language now supports the custom-var interface, which can be used to pass data between the Edge language and the Lua module.

change

Updated the default parameters for uploading files, now by default 1 file is cached, and the file content size is 1MB.

change

The return value of Edge Captcha and hCaptcha verification requests has been changed from 302 to 200.

bugfix

Fixed the issue with the dynamic metrics interface.

feature

Added a Contact Us button at the top.

change

Added a new global configuration item Real IP Source.

change

Added three actions: Log WAF, Set Response Cookie's SameSite, and Enable CSRF token.

bugfix

Fixed the issue of batch deleting the WAF disable rule list.

bugfix

Fixed the issue where unchecking the Use IP Address to Load SSL Certificate and Use IP Address to Load Applications options was ineffective.

change

After selecting a rule set, you can now choose a rule name.

change

The WAF log list no longer displays the ISP field.

change

Other users' 2FA features can now be disabled.

change

A tip about the performance consumption of RSA-4096 has been added to the SSL form.

Release Note 23.3.1

Release Date: March 1, 2023

bugfix

Resolved the issue of failed Maxmind GeoIP database download.

change

Updated the protocol for downloading IP geolocation databases from MaxMind and IPIP.NET.

feature

added Response body filter action to page rules.

feature

added HTTP Version variable to page rule condition.

feature

add variables upload file extensions, upload file contents, whether the upload file extension matches the file content in the page rule condition.

feature

Add The length of the longest request header name, The length of the longest request header value, Number of cookie key-value pairs, Duplicate request headers, Duplicate URI arguments variables to the page rule conditions.

feature

supported SNI(Server Name Indication) variable to the page rule conditions.

feature

Add Set Upload File Parameters action to the page rule action.

feature

added two configuration items for Edge Node: TCP application local listening IP address and SNI Proxy application local listening IP address.

feature

added new global configuration items: Enable Cluster Cache and Cluster Cache Port.

feature

added WAF action Close connection.

feature

added DoS log list page.

feature

added OpenResty Edge Admin metrics configuration to the global metrics configuration.

feature

added response status code field to the WAF Return page template action.

feature

added WAF metrics to the dynamic metrics page.

feature

added DoS metrics to the dynamic metrics page.

feature

added WAF log config to the global configuration.

feature

added DoS log configuration to the global configuration.

feature

added Reset timed out connection configuration to the global configuration.

feature

added Allow TRACE method configuration to the global configuration.

feature

added configuration items in the global configuration: TCP Fast Open, Upstream Keepalive (number of idle connections reserved by upstream keepalive), Upstream Keepalive Requests, Upstream Keepalive timeout, Proxy cache uses temporary path.

feature

added escape option for access log in global configuration.

feature

added Expiration time of DoS protection statistics configuration to the global configuration.

feature

implemented redirect-validate for waf-action and reject-action.

feature

implemented JS-challenge for waf-action and reject-action.

feature

The metrics of Global Config > Global Metrics support obtaining the service status of Edge Node.

feature

the upstream health check results of HTTP applications are supported in the metrics of Global Config > Global Metrics.

feature

added rule configuration to SSL page.

feature

Edgelang supports http-version to get the version number of the HTTP request.

feature

Edgelang supports upload file related primitives.

feature

Edgelang supports req-line for getting HTTP request line.

feature

Edgelang supports req-args-combined-size to get the total size of URL and POST parameters.

change

automatic encryption of sensitive information in the configuration file.

change

automatically update Kubernetes configuration by internal request instead.

change

support configuring MAC addresses of a node.

change

supported for searching and downloading WAF logs.

change

supported batch deletion of gateway clusters.

change

supported for writing WAF logs to files and file rotation.

change

support updating other normal Kubernetes upstream information when Kubernetes namespace or service is deleted.

change

moved the help tab to the end.

change

paginate application’s SSL certificates.

change

improve the built-in WAF ruleset and update to 3.3.4 version.

change

improved access control for Edge Log Server API.

change

jump to the first accessible page if the user cannot access the forward proxy settings page.

change

jump to the first accessible page if the user cannot access the SOCKS5 settings page.

change

can only set health check for dns records with type A or AAAA .

change

modify the log level of cleanup operations in Edge Log Server from warn level to info level.

change

WAF can specify a response status code when returning a page template.

change

Edgelang supports set-ssl-protocols and set-ssl-ciphers, which are used to set SSL protocols and ciphers.

bugfix

hidden edit and delete buttons of Basic Auth created by others if user has no write all permission.

bugfix

do not add pending changes when updating LE and custom SSL certificates.

bugfix

read-only users cannot enable the standard metrics.

bugfix

the reorder feature for global rewrite rules requires write all permission.

bugfix

fixed the issue that a POST request could get 405 status code after setting error pages.

bugfix

fixed the problem of batch delete permission on the Alarm Custom Actions and Rules page.

bugfix

fixed the problem that the IP address of the offline gateway server cannot be copied quickly.

bugfix

fixed the permission problem of Origin Site Certificate Generator.

bugfix

fixed the permission problem of the forward proxy page.

bugfix

fixed the problem that the batch operation button still exists after deleting DNS records in batch.

bugfix

fixed the problem of restoring the application error.

bugfix

fixed frequent retries after a failed IP geography database merge.

bugfix

fixed an issue that proxy rules are still created when proxy rules are disabled when creating an application.

bugfix

fixed the permission problem of the global config.

bugfix

fixed the incorrect pending changes tips in Forward Proxy application detail page.

bugfix

fixed the problem of jumping to the gateway page after pressing the Enter key in domain input.

bugfix

fixed the incorrect pending changes tips in SOCKS5 application detail page.

bugfix

fixed the issue where Kubernetes forms could be submitted on Basic and Pro Edition.

bugfix

fixed the issue that upstream cannot be edited on the Basic and Pro Edition.

bugfix

fixed the read permission of SOCKS5 settings page.

bugfix

fixed the issue with EdgeLang where the regex capture group might be empty in some cases.

Release Note 22.9.1

Release Date: September 1, 2022

bugfix

Resolved the issue of failed Maxmind GeoIP database download.

bugfix

Resolved the issue where the comparison of Resource Version from Kubernetes failed.

bugfix

Resolved an issue where upstream updates failed on Kubernetes without logging.

feature

Added support for enabling Kubernetes Endpoints event logging by configuring endpoint_event_log in the k8s configuration block of OpenResty Edge Node.

bugfix

Resolved the issue where IP addresses in SSL certificates were not correctly recognized.

bugfix

Resolved the issue of failing to add global SSL certificates containing IP addresses.

bugfix

Resolved the issue where cleaning up unreleased changes failed.

bugfix

Resolved the issue where rollback failed.

change

Updated the protocol for downloading IP geolocation databases from MaxMind and IPIP.NET.

bugfix

Addressed the issue where detailed error logs were not printed after handshake failure with Kubernetes cluster.

bugfix

Continued to attempt updates after handshake failure with Kubernetes cluster.

optimize

Enhance the performance of the configuration synchronization interface.

bugfix

Resolved issue with unavailable Kubernetes clusters affected updates across the entire Kubernetes upstream.

bugfix

Ensured continued update attempts for Kubernetes clusters after a failed update.

optimize

Optimized incremental configuration sync to handle version number jumps correctly.

bugfix

resolved the issue where setting the number of retries for proxy in TCP applications to the number of upstream nodes was ineffective.

feature

support skip operation log and skip operation log when K8s upstream auto update.

optimize

optimize the logic of prompting for license synchronization failure.

bugfix

solve the problem that 2FA cannot be added to Microsoft authenticator.

change

support more user configurations.

bugfix

solve the problem that the number of gateway nodes reported is incorrect.

optimize

optimize the speed of obtaining release logs.

feature

support for setting the access log of the stream application.

optimize

optimize the speed of HTTP/Stream app list fetching.

bugfix

fixed an issue with duplicate results for searching HTTP applications.

feature

support for replacing server certificates for communication between OpenResty Edge components (needs to work with openresty-edge-config package).

bugfix

solve the problem that the deleted Kubernetes upstream being released when gray release.

feature

add page rule action to enable limit traffic event.

feature

add page rule action to enable circuit breaker event.

feature

added ssl-client-serial variable.

feature

add the "Capture Response Body" action to print the response body in the access log.

feature

support page rule condition: Time.

feature

support page rule action: Mirror Request.

feature

support page rule action: Circuit Breaker.

feature

support for custom tables.

feature

support cleaning gateway tag.

feature

support enabling Proxy Protocol.

feature

added event page to Dashboard.

change

add dependency openresty-yajl-dev/devel.

change

update the name of the product type.

change

support caching DNS results.

change

support for disabling DNS access log and limiter.

change

changed the text "Maximum request body buffer size" to "Client body buffer size".

change

turn cluster names of gateway partitions to be linked to the clusters page and highlight the cluster.

change

change all tooltips to OpenResty Edge.

change

changed the maximum of worker processes number from 64 to 1024.

change

changed EdgeLang to Edgelang.

change

added validation to ensure that the maximum number of files that open the cache is not greater than the maximum number of open files.

change

more retries for the ACME challenge.

change

change the default proxy timeout from 6s to 60s.

change

changed the order of condition and action of WAF whitelist item.

change

add reuseport to DNS listen line.

bugfix

fixed the data type of the acme_skip_precheck entry in the configuration item, now supporting both boolean and string.

bugfix

fixed the problem of the overview page not being updated after deleting the page rule.

bugfix

fixed the problem of export error logs functions not working.

bugfix

fixed the problem when searching apps and upstreams.

bugfix

fixed the problem of copy to clipboard button not working.

optimize

optimize the tips when deleting the app.

Release Note 22.6.1

Release Date: June 1, 2022

bugfix

Resolved the issue of failed Maxmind GeoIP database download.

change

Updated the protocol for downloading IP geolocation databases from MaxMind and IPIP.NET.

bugfix

solve the problem that the deleted Kubernetes upstream being released when gray release.

change

OpenResty Edge Admin must have internet access to api.openresty.com. (For reporting license usage only)

optimize

improve the performance of WAF rules.

change

support for changing Edge's inter-component communication certificate.

change

more retries for ACME challenge.

bugfix

added rule status and challedge result to acme log.

optimize

reduce the time required for configuration synchronization.

change

removed validation of global certificates.

bugfix

ID change when updating Kubernetes service data.

bugfix

nodes could not be approved when the balance was greater than 0.

change

HTTP2 is enabled by default.

change

show associated App ID when removing "Access Log Format".

bugfix

fixed the bug of checking wildcard-domain DNS records.

optimize

optimize the compilation speed of global variables.

change

the block-req and limit-req-count actions support no "key" argument.

change

improved Webhooks functionality.

optimize

optimize the logic of DNS health check.

change

unify all event types.

change

use the configuration of the default partition when creating a new partition.

optimize

clear pending cert after the failure of certificate issuance (ACME).

change

support for disabling edge default error pages.

bugfix

fixed the bug that user groups cannot be deleted.

change

add a hint if the number of domains of certificate exceeds 100.

change

adjusted texts on page and split tabs layout for DNS details page.

feature

support for searching static files.

feature

support for using Gantt chart to display gateway and upstream health check data.

feature

support ssl_verify option for health check.

change

enable editing partitions in the partition selection drop-down box.

change

enable creating new kubernete clusters in the Kubernetes cluster selection drop-down box.

bugfix

fixed the bug caused by invalid JWS signature generated when issuing Let’s Encrypt certificate.

change

support for adding descriptions to partitions.

feature

support hourly granular billing model.

change

adjusted subtitle texts for dymetrics charts, add GSLB config doc link and adjusted config forms for GSLB.

bugfix

fixed DNS pages permission check.

change

parallel processing of Kubernetes events to avoid accumulation of events.

feature

enable version control for Kubernetes upstreams.

feature

support OAuth2 validate.

change

Kubernetes upstream node update, no longer output error log when query port mapping returns 404.

feature

support for enabling the Edge default error pages.

feature

support staging gateway clusters.

change

rename [log_cluster] to [log_server] in the config.ini.

change

changed the red button on the release page to gray.

change

validate public/private IPv4 and set private IPv4 as required.

bugfix

fixed the static files data not being refreshed because of caching.

bugfix

fixed the bug caused by invalid JWS signature generated when issuing Let’s Encrypt certificate.

bugfix

fixed broken links on the "help center" page.

change

moved Kubernetes, Multi-tier Network, Users & User groups, Gateway Partitions out of Global Config.

feature

added new action "remove request header".

feature

added new action "enable hcaptcha" and "enable edgecaptcha".

bugfix

solve the problem that rollback failure does not return an error.

change

refactoring webhook functionality.

feature

support for uploading license usage using HTTP proxy.

change

disable configuration synchronization when license synchronization has failed for more than 24 hours.

bugfix

cannot use global user variables in access log format.

change

aggregate data for dynamic metrics to speed up queries.

feature

added the non-cross-request mode WAF and supports setting thresholds for WAF rule sets individually. Non-cross-request mode will be - used by default.

bugfix

fixed the bug that the global Let’s Encrypt certificate would be cleaned up by the scheduled task.

change

refactoring static file function and support whole site upload.

bugfix

enhanced access log file name checking to disallow the '/' character.

change

update WAF rules.

change

the number of Kubernetes upstream pods can be 0

bugfix

Kubernetes listens to processes handling ERROR events, optimizing the printing of error log messages.

change

added 1yr option for dynamic metric filter.

feature

support new actions oauth2-jwt-validate and oauth2-introspection-validate.

change

show node info on the dashboard alarms page.

change

added max response headers on application configuration page.

change

move permission control of multi-tier network, Kubernetes, user, gateway partitions out of global permission control.

change

support staging cluster.

change

extracted request ID decoder as a component and use it in all locations where request ID appears.

bugfix

fixed the problem of the button of copy to clipbard on the diff page not working.

bugfix

fixed the problem of searching upstreams by names.

Release Note 22.3.1

Release Date: March 1, 2022

change

Updated the protocol for downloading IP geolocation databases from MaxMind and IPIP.NET.

feature

add log server heart beat check.

feature

delete synchronized data regularly.

feature

support the number of requests intercepted by rate limiting actions such as limit-request-rate in Dynamic Metrics.

bugfix

solve the problem that can not reload under certain circumstances.

change

add retries and alarms after global configuration initialization failure.

feature

support global config partition release.

change

add interface permission restrictions.

bugfix

resolve an error in the rm-resp-cookie action when there is no set-cookie in the return header.

bugfix

solve the problem that when Kubernetes operation exists, the search for unreleased applications returns incorrectly.

bugfix

resolve the problem that the rm-resp-cookie action cannot delete multiple set-cookies with the same name.

feature

support application partition release.

bugfix

solve the problem of multiple releases with multiple release records when there are no changes.

feature

support configuring nginx and lua modules on the partitions level.

bugfix

fixed the problem that node private IP was not saved correctly.

feature

support the option Automatic updates by ACME when uploading certificates manually.

change

allow underscore on domains of DNS record.

bugfix

countries of gateway cluster should not be mandatory.

optimize

strengthen the verification of DNS and DNS records.

bugfix

resolve the problem that HTTP forward proxy does not check the account.

feature

support releasing applications to specified partitions.

feature

support append or remove domain from application.

bugfix

fixed the problem that max_idle_timeout field of pgsql does not take affect.

feature

new interface to search Kubernetes upstream using namespace, service, port.

feature

supported use manual uploaded private key for the ACME issued certificate.

feature

added support for using user uploaded priv key when signing cert in ACME mode.

feature

new interface to search Kubernetes upstream using IP.

feature

add Kubernetes upstream data cache to improve Kubernetes upstream update performance.

feature

Kubernetes upstream new history search interface.

feature

added nodes weight for Kubernetes upstream.

feature

Kubernetes upstream support for named ports.

bugfix

fixed some permission control.

bugfix

when multiple Kubernetes clusters are bound upstream of Kubernetes, the nodes of some clusters can be empty.

bugfix

the corresponding upstream node can be deleted correctly when deleting the deployment object of Kubernetes.

bugfix

Kubernetes upstream update no longer does DNS lookup.

bugfix

Kubernetes upstream updates use a timer mechanism to prevent concurrent operations from causing database locks.

feature

new parameter in or-config.ini to set the time interval of Kubernetes upstream update timer.

feature

the log format supports new variables: $realip_remote_addr and $realip_remote_addr.

bugfix

use the limit parameter if it in the meta.

bugfix

fixed chart redraw after load data.

bugfix

set-upstream-name prints an error log only if all upstream searches have failed.

change

added standard tab for dynamic metrics.

feature

added always_check mode in upstream health check.

feature

added HEAD request method in upstream health check.

Release Note 21.12.2

Release Date: December 2, 2021

bugfix

Resolved the issue of failed Maxmind GeoIP database download.

change

Updated the protocol for downloading IP geolocation databases from MaxMind and IPIP.NET.

bugfix

allow the number of Kubernetes upstream service nodes to be 0.

change

add Kubernetes named port support.

change

add Kubernetes node weight setting.

feature

search Kubernetes upstream with IP.

feature

Kubernetes upstream change history list.

optimize

Kubernetes upstream service information into the cache.

feature

the $internal_request variable is supported in the access log to distinguish between external and internal requests.

feature

supported new action set access-log-off.

feature

support to close the access log of a request individually.

feature

support HTTP/3 (experimental).

feature

record DNS processing time in access log.

feature

dynamic metrics support logging of requests blocked by speed limit actions.

feature

alarm messages support email and webhook notifications.

feature

add heartbeat check for log server.

feature

add Edgelang directive: upstream-has-live-nodes.

change

update WAF rules to 3.3.2.

change

supported global static file name copy.

change

support report MAC address of node.

change

support more sorting fields in HTTP application.

change

Kubernetes add last error message field record.

change

display page rules proxy edgelang content.

change

clean up synchronized data regularly.

change

changed gateway partition HTTP2 Enabled display.

change

added metrics sql template limit_traffic_status.

change

added edit and delete button for Applications Overview Page Rules.

change

added column status to the application audit log list.

change

add the disk usage of the log directory to node status.

bugfix

resolve the 5xx issue caused when modifying upstream within the app.

bugfix

repair the problem of not being able to send down the configuration due to upgrading openresty-plus alone.

bugfix

removed float pane when session expires.

bugfix

Kubernetes Add normal user GET permission.

bugfix

fixed the unit display of node health log disk usage.

bugfix

fixed the problem that the page was refreshed when the hash link was jumped.

bugfix

fixed the app data was not updated after clearing pending change.

Release Note 1.3.0

Release Date: August 25, 2021

bugfix

solve the problem that the deleted Kubernetes upstream being released when gray release.

bugfix

solve the problem that clearing unreleased changes fails.

bugfix

update Kubernetes upstream node weights will delete Kubernetes_services.

bugfix

allow the number of Kubernetes upstream service nodes to be 0.

change

add Kubernetes named port support.

optimize

reduced configuration synchronization latency.

optimize

optimized incremental configuration synchronization.

optimize

optimized database writes for health checks and upstream metrics.

optimize

improvement: move the is_gray flag from gateway cluster level to gateway node level.Make it easier to change one gateway node to gray/main.

feature

the request rate limit supports the use of HTTP request headers as key.

feature

support to config Kubernetes upstream in application and global.

feature

support proxy protocol in tcp and tls applications.

feature

support LMDB backup for edge nodes.

feature

support for the Brotli compression of responses.

feature

support for purge cached resources in mlcache based on prefixes (for scenarios with custom use of mlcache Lua modules).

feature

support for ngx2edge tools.

feature

support for cleaning dynamic metrics data.

feature

support ECC for ACME (i.e. Let’s encrypt).

feature

support batch delete.

feature

support serving static resources.

feature

support global page template.

feature

support DNS global server balancing.

feature

show world map for DNS A/AAAA records.

feature

show blog articles in tab Help.

feature

remind user to refresh current page when new admin version is available.

feature

recompile tool: support for parallel compilation of all HTTP/HTTPS applications.

feature

new hit rule statistics chart in WAF log page.

feature

custom certificate issuers can show account information.

feature

added two builtin dymetrics: request count and Request flow.

feature

added release log to global configuration.

feature

added IP-List for application level.

feature

add sidebar on applications’s config page like in global config page.

feature

add new action enable basic authentication, support creating global basic auth accounts and application basic auth accounts.

feature

add 'IP-address-match' operator to X-Forwarded-For.

change

the host parameter of Kubernetes supports the use of domain names.

change

skip domain match checking for default application.

change

show offline status of application.

change

rest api search_by_name support Kubernetes upstreams.

change

need to delete load SSL certificate by IP addresses and load application by IP addresses configuration before deleting applications.

change

modified the Kubernetes Token field so that it is not required at edit time.

change

Kubernetes upstream node watch thread add caching and concurrent execution capabilities to optimize performance.

change

Kubernetes upstream adds support for binding multiple Kubernetes services.

change

Kubernetes background threads add support for dual admin and grayscale admin.

change

FE: upgrade components to update the functions hints for Edgelang editor.

change

FE: update texts on Global change log page and rename it to Audit Log, also add Audit log table on the application’s release page.

change

FE: lmdb backup page show processing nodes and adjust some wordings.

change

FE: global error log page: filter nodes after selecting a gateway.

change

FE: adjust editor height for Lua module and Lua extension.

change

convert toggle button with negation meaning labels to be affirmative.

change

changes to Kubernetes upstream do not affect release.

change

change the way package_created_time is fetched.

change

apply pan-domain semantic change, multi-level domain matching is no longer supported. For example, *.foo.com will only match a.foo.com and not a.b.foo.com.

change

added operator IP match to first-x-forwarded-addr and last-x-forwarded-addr.

change

added column response status to app waf logs page.

change

add new filters operation, user and keyword to global changelog page.

change

add Kubernetes node weight settings.

change

add interface to search Kubernetes upstream using IP address.

change

add interface to search Kubernetes upstream change history.

change

add an interface to search Kubernetes upstream using namespace, service name, port number.

bugfix

when updating the manually uploaded SSL certificate, the certificate also needs to be verified.

bugfix

when multiple Kubernetes clusters are configured, monitoring one Kubernetes cluster will use the other Kubernetes cluster configuration.

bugfix

value of check_script field of the keepalived configuration should be full-path.

bugfix

the offline HTTP application will no longer automatically renew the certificate issued by ACME.

bugfix

the "Rewrite Proxy URI Prefix" action does not encode the URI and may not be recognized upstream.

bugfix

support new Edgelang actions: set-req-cookie and rm-req-cookie.

bugfix

solve the problem of not being able to add larger page templates.

bugfix

should finally retry the local machine When enabling gateway cluster level cache sharing and all cluster nodes failed.

bugfix

resize upstream health check shared memory.

bugfix

remove the second useless balancer when the interface is reduced to 1 upstream.

bugfix

log Server down cause incorrect sync status display.

bugfix

Kubernetes rest api data return format is not standardized.

bugfix

handling of IPv6 errors in address matching.

bugfix

fixing a mismatch in the results of searching for upstream names.

bugfix

fixed the problem that tag of gateway cluster not shown.

bugfix

fixed the bug when matching multiple IP lists in whitelist mode.

bugfix

fixed failure when uploading certificate by SDK / edge-cli.

bugfix

fixed bad condition of auto renew cert for application.

bugfix

fixed to prevent unnecessary requests with undefined params when routing back to application list page.

bugfix

fixed the problem that the pagination of expired certificates is invalid.

bugfix

fixed the problem that global lua module can not be updated.

bugfix

fixed the problem of missing configuration in application release log description.

bugfix

fixed the problem of failure of adding gateway cluster conditions to global rewrite rules and global custom actions.

bugfix

fixed search and select component error.

bugfix

fixed HTTP response body match error in health check.

bugfix

fixed failure to find pending apps after gray release.

bugfix

fixed DNS runtime error when DNS query for invalid domain.

bugfix

fixed DNS record validation wrong on the web page.

bugfix

fixed creating app with proxy to global upstream but not creating rule automatically.

bugfix

fixed Append-proxy-header-value action submit with validation errors.

bugfix

fixed an error in matching the IP address of X-Forwarded-For request header.

bugfix

added upstream recursive detection to prevent dead loops caused by it.

bugfix

add concurrent locks for application publish/rollback operations to avoid unexpected changes caused by concurrent operations.

bugfix

a later defer resp-body under the same application will overwrite the previous one.

Release Note 0.4.2

Release Date: April 21, 2021

optimize

support filtering error logs by time range.

optimize

optimize most of the GET interfaces. It takes only 100ms now instead of original 1.2 seconds for some interfaces.

optimize

optimize Edgelang compilation speed.

optimize

optimise the concurrency control of health check, fixed “timer is not enough” error when there are many upstreams with health check enabled.

optimize

optimise Application list loading time, the interface time is reduced by about 900ms.

optimize

log up to 3 entries when no IP database token is provided.

optimize

limit the request rate to the configuration update API to avoid multiple nodes doing whole synchronise at the same time.

optimize

limit the frequency of repeated error messages, w hen sending queue is full, each worker print one log entry every 30 seconds at most.

optimize

improved the performance of edge node, the QPS increased 26% in the simple proxy case.

optimize

fixed the problem that the some pages cannot be loaded when log-server crashes.

optimize

add blacklist to global lua module and custom share zone.

feature

upstream binding to service of Kubernetes cluster.

feature

support upstream health check for TCP/TLS applications.

feature

support SRV type records in DNS application.

feature

support per Application configurations of: client-max-body-size, proxy-cache-revalidate, proxy-cache-use-stale, gateway-gzip and enable-websocket.

feature

support node level enabling QAT.

feature

support displaying source code for WAF rule sets.

feature

support decoded_proxy_authorization variable in the HTTP forward proxy access log.

feature

support calling third-party module from a third-party module.

feature

support binding local IP.

feature

support binding local IP when forwarding.

feature

sticky Cookie support.

feature

return details of failed upstream health check.

feature

pick and disable WAF rule WAF ruleset under WAF log page.

feature

keepalived integration, support high-availability on IP layer.

feature

gateway binding to Kubernetes cluster, so as to support edge-node auto approve from Kubernetes cluster.

feature

edgelang source code viewing support of hitting WAF rules in WAF log page.

feature

DNS records management support in the application page.

feature

DNS health check support enabling and configuring ports within independent record.

feature

collect more upstream metrics (such as HTTP status codes).

feature

add WAF rules in v3.3

feature

add the API for certbot plug-in.

feature

add support to specifying customise certificate issuer, with EAB support for ACME services.

feature

add new action sorted-query-string to Edgelang.

feature

add lua-resty-mlcache library to openresty-plus.

change

switch to TimescaleDB for log server database (need to install TimescaleDB extension).

change

split HTTP and stream applications.

change

remove the trusted_client and trusted_uid configurations.

change

rearrange main navigation menu.

change

move entrance of licences page from Gateway Cluster to the upper left corner besides logo in home page.

change

apply pan-domain semantic change, multi-level domain matching is no longer supported. For example, -.foo.com will only match a.foo.com and not a.b.foo.com. (It is still compatible for the current version, but will be deprecated and removed in future versions.).

bugfix

support binding local ipv6 address.

bugfix

forward proxy support multiple ports.

bugfix

fixed the issue of global action modification triggering node binary upgrade.

bugfix

fixed the 500 response code issue when uploading certificate.

bugfix

fixed incorrect remote address in user session on Admin.

bugfix

fixed a failure case when manual uploading application level certificates: when application is wildcard domain and the certificate is non-wildcard domain will cause the failure.

bugfix

do not report health check results repeatedly.

bugfix

after DNS health check failed, the resolution result list will not returning failed IPs.

Release Note 24.9.12

Release Note 24.9.11

Release Note 24.9.10

Release Note 24.9.8

Release Note 24.9.7

Release Note 24.9.6

Release Note 24.3.39

Release Note 24.3.38

Release Note 24.3.37

Release Note 24.3.36

Release Note 24.3.35

Release Note 24.3.34

Release Note 24.3.33

Release Note 24.3.32

Release Note 24.3.31

Release Note 24.3.30

Release Note 24.3.29

Release Note 24.3.28

Release Note 24.3.27

Release Note 24.3.26

Release Note 24.3.25

Release Note 24.3.24

Release Note 24.3.23

Release Note 24.3.22

Release Note 24.3.21

Release Note 24.3.20

Release Note 24.3.19

Release Note 24.3.18

Release Note 24.3.17

Release Note 24.3.16

Release Note 24.3.15

Release Note 24.3.14

Release Note 24.3.13

Release Note 24.3.12

Release Note 24.3.11

Release Note 24.3.10

Release Note 24.3.9

Release Note 23.12.29

Release Note 23.12.28

Release Note 23.12.27

Release Note 23.12.26

Release Note 23.12.25

Release Note 23.12.24

Release Note 23.12.23

Release Note 23.12.22

Release Note 23.12.21

Release Note 23.12.20

Release Note 23.12.19

Release Note 23.12.18

Release Note 23.12.17

Release Note 23.12.16

Release Note 23.12.15

Release Note 23.12.14

Release Note 23.12.13

Release Note 23.12.12

Release Note 23.12.11

Release Note 23.12.10

Release Note 23.12.9

Release Note 23.6.1

Release Note 23.3.1

Release Note 22.12.1

Release Note 22.9.1

Release Note 22.6.1

Release Note 22.3.1

Release Note 21.12.2

Release Note 21.11.7

Release Note 1.3.0

Release Note 1.1.0

Release Note 1.0.1

Release Note 0.4.2

Release Note 1.2.60

Release Note 1.2.59

Release Note 1.2.58

Release Note 1.2.57

Release Note 1.2.56

Release Note 1.2.55

Release Note 1.2.54

Release Note 1.2.53

Release Note 1.2.52

Release Note 1.2.51