HAProxy 3.1-dev7 Release Notes: H2 Zero-Copy Bug Fix, QUIC/MPTCP Updates

From this webpage screenshot, we can extract the following key information about the vulnerability: 1. Vulnerability Type: - H2+zero-copy forwarding bug: This vulnerability affects the H2+ zero-copy forwarding feature, a critical issue mentioned in the 3.0 and 2.9 version announcements. - Frozen connections, crashes: Other bugs have caused connection freezing and crashes. - Rate counters issue: There is also an issue with rate counters, which may become inaccurate during time jumps. 2. Fixes Implemented: - Rate values storage: Fixed the storage of rate values; now stored in 32 bits, limiting measurable rates to approximately 34 Gbps. - Bwlim filter: Fixed the bwlim filter, enabling its use when high limits need to be set. - Init-state patch: Fixed the init-state patch, allowing the server to start immediately after entering or exiting maintenance mode. - Fetch functions: Added several sample fetch functions to retrieve information during SSL handshakes. - Environment variables: Added several environment variables for CLF log format. - Master process: Fixed the environment restoration issue for the master process when switching to wait mode. 3. Other Improvements: - Retry-on 429: Added support for retrying on 429 status codes. - QUIC: Fixed QUIC’s NEW_TOKEN frame support to verify client reachability. - MPTCP: Implemented MPTCP support, enabling the use of multiple IP addresses within a single TCP connection. - Debug info, cleanups, typo fixes: Added extra debug information, cleanups, and typo corrections. 4. Version Information: - haproxy-3.1-dev7: This is the released version, incorporating the above fixes and improvements. This information indicates that the version primarily focuses on fixing critical bugs and enhancing performance, especially in areas such as H2+ zero-copy forwarding, connection freezing, rate counters, and QUIC support.

Goal Reached Thanks to every supporter — we hit 100%!

HAProxy 3.1-dev7 Release Notes: H2 Zero-Copy Bug Fix, QUIC/MPTCP Updates