v0.6.4

v0.6.4

• Update go: 1.22.1
• Update go dependencies

Compare with v0.6.3

v0.6.3

v0.6.3

• Reduce lock contention in passkey manager.

Compare with v0.6.2

v0.6.2

v0.6.2

• Update go: 1.22.0
• Log HTTP protocol upgrades.
• Fix bug that prevented PKI admins from revoking certificates.
• Improve heap & lock profiling.
• Reduce lock contention.

Compare with v0.6.1

v0.6.1

v0.6.1

• Fix WebSocket connections when backendProto is set to something other than http/1.1.

Compare with v0.6.0

v0.6.0

v0.6.0

• Starting with v0.6.0, tlsproxy is built with QUIC & HTTP/3 support by default. Binaries without QUIC can still be built with -tags noquic.
• Add support for QUIC datagrams.

Compare with v0.5.2

v0.5.2+quic

v0.5.2

• Report outbound connections on the metrics page.
• Improve how http3 connections are handled.
• Update go dependencies:
  • upgraded github.com/google/pprof v0.0.0-20231229205709-960ae82b1e42 => v0.0.0-20240117000934-35fc243c5815
  • upgraded github.com/onsi/ginkgo/v2 v2.13.2 => v2.14.0
  • upgraded github.com/quic-go/quic-go v0.40.1 => v0.41.0
  • upgraded golang.org/x/exp v0.0.0-20240103183307-be819d1f06fc => v0.0.0-20240112132812-db7319d0e0e3
  • upgraded golang.org/x/tools v0.16.1 => v0.17.0

Built with: -tags quic

Compare with v0.5.1

v0.5.2

v0.5.2

• Report outbound connections on the metrics page.
• Improve how http3 connections are handled.
• Update go dependencies:
  • upgraded github.com/google/pprof v0.0.0-20231229205709-960ae82b1e42 => v0.0.0-20240117000934-35fc243c5815
  • upgraded github.com/onsi/ginkgo/v2 v2.13.2 => v2.14.0
  • upgraded github.com/quic-go/quic-go v0.40.1 => v0.41.0
  • upgraded golang.org/x/exp v0.0.0-20240103183307-be819d1f06fc => v0.0.0-20240112132812-db7319d0e0e3
  • upgraded golang.org/x/tools v0.16.1 => v0.17.0

Compare with v0.5.1

v0.5.1+quic

v0.5.1

• Prevent backend connections from being re-used by other clients when PROXY protocol is enabled.

Built with: -tags quic

Compare with v0.5.0

v0.5.1

v0.5.1

• Prevent backend connections from being re-used by other clients when PROXY protocol is enabled.

Compare with v0.5.0

v0.5.0+quic

v0.5.0

• Add support for the PROXY protocol for incoming connections. See the AcceptProxyHeaderFrom config option.
• Fix bug with the handling of the PROXY protocol header with TLS backends. The header was sent after the TLS handshake instead of before.
• Fix bug that prevented logins with passkeys on non default ports when ForceReAuth is set. (introduced in v0.4.4)
• Log aborted ReverseProxy requests more gracefully.
• Update go: 1.21.6
• Update go dependencies:
  • upgraded github.com/beevik/etree v1.2.0 => v1.3.0
  • upgraded github.com/google/pprof v0.0.0-20231212022811-ec68065c825e => v0.0.0-20231229205709-960ae82b1e42
  • upgraded golang.org/x/crypto v0.17.0 => v0.18.0
  • upgraded golang.org/x/exp v0.0.0-20231226003508-02704c960a9b => v0.0.0-20240103183307-be819d1f06fc
  • upgraded golang.org/x/net v0.19.0 => v0.20.0
  • upgraded golang.org/x/sys v0.15.0 => v0.16.0

Built with: -tags quic

Compare with v0.4.4