haproxy BOSH Release v8.1.1

Link Support

• The haproxy job now supports consuming links for backends.
  You can provide it the http_backend link, to control the default
  http/https backend. You can also give it an additional tcp_backend
  link to add in a tcp-backend that uses links. If your link doesn't
  support providing the port property, the job fails back to ha_proxy.tcp_link_port
  and ha_proxy.backend_port, depending on which link is in play.

Acknowledgements

Many thanks to @rkoster for bringing link support to haproxy-boshrelease!

haproxy BOSH Release v8.1.0

Improvements

• Removed RC4 ciphers from the default cipher suite

• Added HSTS support via the ha_proxy.enable_hsts,
  ha_proxy.hsts_include_subdomains, ha_proxy.hsts_preload,
  and ha_proxy.hsts_max_age properties. HSTS is off by default.

• Added support for disabling TLS tickets to improve Forward
  Secrecy, via ha_proxy.disable_tls_tickets. TLS tickets are
  disabled by default

• Updated haproxy to v1.6.12 (from 1.6.10)

• Updated pcre to v8.40 (from 8.36)

• Updated socat to v1.7.3.2 (from 1.7.3.1)

Acknowledgements

• Many thanks to @lcacciagioni for his work on these SSL
  improvements!

haproxy BOSH Release v8.0.12

New Features

• Added new keepalived job for HA-ification of haproxy (only on infrastructures
  supporting VRRP). See the keepalived docs
  for details on how it works and how to use it.

Acknowledgements

Many thanks to @axelfauvel, @gberche-orange for their work on implementing and testing
this feature!

haproxy BOSH Release v8.0.11

New Features

• Added new keepalived job for HA-ification of haproxy (only on infrastructures
  supporting VRRP). See the keepalived docs
  for details on how it works and how to use it.

Acknowledgements

Many thanks to @axelfauvel, @gberche-orange for their work on implementing and testing
this feature!

haproxy BOSH Release v8.0.10

Fixes

• @brewek resolved an issue with the stats endpoint of haproxy being unable to bind
  to the right interface/port. This is now overridable via ha_proxy.stats_bind.

Thanks @brewek!

haproxy BOSH Release v8.0.9

Fixes

• Fixed an issue with the haproxy stats display
  due to the HAProxy upgrade. Thanks @seongkki for the quick fix!

haproxy BOSH Release v8.0.8

New Features

• Thanks to @seongkki, haproxy stats are now viewable
  at haproxy_ip:9000/haproxy_stats, provided you specify the
  BOSH properties outlined in https://github.com/seongkki/haproxy-boshrelease/blob/e861c1aed3f8f47e78a2015598fdf5951213ceae/jobs/haproxy/spec#L77-L89

  Access is locked down by default, and credentials are required.

• @joek updated HAProxy to v1.6.10, and added support for resolving backend
  servers via DNS. Should be useful when you're hosting HAProxy in front of
  a cluster using Consul DNS to manage HA.

Acknowledgements

Thanks @joek + @seongkki for the contributions!

haproxy BOSH Release v8.0.7

New Features

• Enables the use of accept-proxy in HAProxy

Acknowledgments

• Thanks @patelpu94 for your work on this feature/release!

haproxy BOSH Release v8.0.6

Rename!

This release has been renamed from cf-haproxy-boshrelease to haproxy-boshrelease,
for greater clarity. It can be used completely independently from Cloud Foundry,
or in front of Cloud Foundry.

cf-haproxy BOSH Release v8.0.5

Bug Fixes

• Fixed an issue with the WSS/port 4443 config not using the correct SSL directory.
  Thanks @mvdkleijn!