Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
  • These are the highlights of new features or additions to existing features in v5.0.x. For the complete list of all changes see this JIRA Release Notes.

Table of Contents

SPDY

SPDY is now implemented in core Traffic Server. SPDY is supported for both TLS (encrypted) and non-TLS access. Protocol sniffing is used to detect SPDY for non-encrypted connections and for TLS connections that do not do NPN negotiations. SPDY versions 3.0 and 3.1 are supported.

...

Sessions with auth headers can be placed in to the server session pool (.

Jira: TS-2902).

Transparency

...

Hardening

The use of Due to security issues the ability to use the client target address for the server address has been changed. The client supplied address is now checked against DNS results and if it does not match the request is not cached. The old (potenially unsafe) behavior can be done restored by setting proxy.config.http.use_client_target_addr to the value ``2``. (

Jira: TS-2954)

TLS

Several improvements for secure transport were made

Handling of ECDSA certificates was improved

Jira: (TS-2893).

The cipher suite and protocol used by ATS as a client are now configurable

Jira: (TS-2924).

SNI can be set for outbound connections from ATS

Jira: (TS-2802)

sslheaders plugin added to inject information about connections in to the HTTP headers

Jira: (TS-2957).

OCSP is now supported

Jira: (TS-2367).

New Plugins

PageSpeed

SSL Headers

Minor Changes

traffic_line can now do VIA string decoding.

Many potential bugs were fixed by using Co-Verity and clang static checks.

Support for TOS

...

setting on TCP sockets.

Jira:

Log filters on IP fields works

...

Log fields that are IP address can be used for log filters. This can be done per IP address or by range

Jira: TS-698

...

Base string for stripe assignment allocation is now configurable (TS-3000).

Developer Changes

  • xptr was removed and replace replaced with ats_scoped_str, ats_scoped_obj and ats_scoped_ptr for temporarily or contingently allocated resources.
  • The Doc header was changed to store per object version information.
  • traffic_manager was moved to the cmd directory.
  • libutils was merged in to libmgmt.
  • WebMgmtUtils moved to libmgmt.