Versions Compared

Old Version 1

changes.mady.by.user Leif Hedstrom

Saved on

compared with

New Version Current

changes.mady.by.user Leif Hedstrom

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Migrated to Confluence 5.3

These are the highlights of new features or additions to existing features in v5.0.x and 5.1.x. For the complete list of all changes see this JIRA Release Notes.

Table of Contents

General changes

  • We do no longer require the Boost library to build!

Jira: TS-3068, 

New configuration options

  • You can now force unsatisfiable Range: requests to go to origin even when read-while-writer is in effect. This can help avoid significant latency on large objects. The setting is overloaded on the existing proxy.config.cache.enable_read_while_writer configuration.
  • The option to specify configuration location, proxy.config.config_dir, is now actually implemented.
  • Add option to support SO_LINGER to origin server, via proxy.config.net.sock_option_flag_out.

Jira: TS-2314, TS-3192, TS-3119

TLS

 We continue to improve our TLS (HTTPS) features and support. Noteworthy in 5.2.x is:

  • SSLv3 is now disabled by default!
  • Dynamic TLS record size tuning. According to Ilya, this makes us the first server that is all Green. (smile)
  • Add forward secrecy support with DHE.
  • Add Add ssl_pre_handshake hook  hook for better plugin access to SSL handling.
  • Improved session cache, for better performance and scalability.
  • New configuration for OpenSSL session cache, proxy.config.ssl.session_cache.auto_clear.

 

Jira: TS-3153, TS-2503, TS-2417, TS-2956, TS TS-3080

Minor Changes

 

, TS-3127

traffic_line

...

  • traffic_line

...

Usage:

...

  • -m is now using an unachored regular expression, similar to how diagnostic tracers work.
  • traffic_line

...

  • --backtrace will produce a stack backtrace for all running threads.

Jira: TS-2904

Many potential bugs were fixed by using Co-Verity and clang static checks.

A lot of work was done at a mini-summit during the summer

Jira: TS-1475

3034, TS-3145

traffic_layout

A new command line utility, traffic_layout, is now available. This will show the layout and configuration option for the ATS build tree

...

.

Jira: TS-2995

Log filters on IP fields works

3041

traffic_via

This is a new command line tool, to parse and decipher the Via: header that Traffic Server can produce. This is useful for debugging e.g. cache results etc.Log fields that are IP address can be used for log filters. This can be done per IP address or by range

Jira: TS-698

...

3149

traffic_crashlog

This is a maintenance feature to help preserve the cache when the operating system paths to the storage devices changesthe helper application around the new crash logging feature. For more information, see the documentation.

Jira: TS-30003195

Developer Changes

  • xptr was removed and replaced with ats_scoped_str, ats_scoped_obj and ats_scoped_ptr for temporarily or contingently allocated resources.
  • The Doc header was changed to store per object version information.
  • traffic_manager was moved to the cmd directory.
  • libutils was merged in to libmgmt.
  • WebMgmtUtils moved to libmgmt.

5.1.1 Security Update

Due to security issues in 5.1.0, a possibly incompatible change was made to 5.1.1.

CVE-2014-3566 details a security vulnerability in SSL v3. Traffic Server was updated to disable SSL v3 in the default configuration. Explicit administrator action is required to enable user agents to use SSL v3 to connect to Traffic Server. SSL v3 is a very old protocol and should not be used and Traffic Server recommends leaving SSL v3 disabled.

CVW-2014-3624 details a potential Traffic Server vulnerability due to a change in how remap works This error has been fixed (TS-2677) in version 5.1.1 and requires no action on the part of the administrator beyond installing 5.1.1.

5.1.2 Security Update

Due to security issues in 5.1.1 a 5.1.2 release has been issued. It should require no changes to replace 5.1.1.

Plugin Improvements

The following plugins have new features and improvements.

header_rewrite

  • We now support variable expansion in the set-redirect operator.
  • You can now do matching operators on the port.
  • We do not need Boost.

Jira: TS-2955, TS-3108, TS-3068

stats_over_http

This plugin will now emit JSON numbers.

Jira: TS-3071

background_fetch

  • The plugin behavior and activation can now be controlled per remap-rule.
  • You an control the behavior based on content type.

Jira: TS-2682, TS-2683

Plugin APIs

The following additions were made to the plugin APIs:

  • TSMutexDestroy() was added, for symmetry with the TSMutexCreate() API.
  • TSTextLogObjectRollingSizeMbSet() was added, it as simply missing.
  • TSHttpHdrHostGet() was added.

 

Jira: TS-1432, TS-3059, TS-3101