Apache Traffic Server™ is a fast, scalable and extensible HTTP/1.1 and HTTP/2 compliant caching proxy server.

文件	最后提交记录	最后更新时间
.claude	Add ats-build skill for Claude harness (#13451) This is to clean up the CLAUDE.md file and hopefully save context. Most users will have their own custom build instructions, so the skill will not have to be loaded.	1 个月前
.cursor	autest.en.rst: Add dev autest docs (#12693) This commit adds a new documentation page (autests.en.rst) that provides guidance for writing end-to-end tests using the AuTest framework, with a focus on the new ATSReplayTest approach that uses YAML-based replay files for traffic specification and verification. This, hopefully living document, will be helpful for devs and AI tools that could use guidance on how to write autests.	9 个月前
.github	AI agent instruction updates (#13335) AI coding guidance does not fully reflect project conventions, which can lead agents toward inconsistent names and less maintainable tests. This aligns the instructions with established AuTest, Python, and C++ practices. It also documents both private-member prefix styles and the community preference for `_` in new files.	1 个月前
.vscode	Add a per client connection max exempt list cript (#12476) This updates our build system to be able to make pre-compiled cripts. Thus, adding a cript is now as easy as adding a plugin. Simply use add_cript instead of add_atsplugin in CMakeLists.txt, and it will build your cript for you. As a part of this, this adds connection_exempt_list.cript, our first cript plugin that sets the per client exempt list.	8 个月前
ci	Add port descriptor destroy API (#13518) TSPortDescriptorParse allocates an HttpProxyPort that plugins cannot release, so every parsed descriptor leaks for the lifetime of Traffic Server. The API also lacks end-to-end coverage that verifies the accept callback. This patch adds TSPortDescriptorDestroy while preserving the opaque handle ABI, validates unusable descriptors during parsing, and documents the ownership contract. It updates API users and adds an AuTest that opens a dynamically selected port and observes the accept callback. Fixes: #6894	5 天前
cmake	Fall back to the build directory when GIT_COMMON_DIR is unset (#13497) Requiring GIT_COMMON_DIR made configure fatal in trees where git cannot resolve a common directory, such as a source export without .git or a worktree mapped into a container without the paths its .git file points at. Nothing about proxy-verifier needs that directory specifically; it is only a convenient cache shared across worktrees of one clone. Introduce PV_DEST_DIR, set from GIT_COMMON_DIR when available and the build directory otherwise, and use it for the download and extraction.	25 天前
configs	Support JSON error response bodies (#13415) ATS cannot reliably emit JSON error responses through header rewrite: literal bodies cannot select a MIME type, HRW4U treats JSON braces as interpolation, fetched bodies lose their Content-Type, and conditional local files are unavailable. Body factory error pages are also hardcoded to HTML. This adds optional Content-Type arguments to set-body and set-body-from, preserves fetched response types, adds configuration-time local file bodies, and teaches HRW4U literal JSON braces and MIME-aware forms. It also adds body-factory Content-Type metadata and clears stale MIME state for empty fabricated bodies. Network set-body-from remains READ_RESPONSE-only because remap hooks cannot suspend for its asynchronous fetch. This covers remap-time errors with literal or file-backed bodies instead. This incorporates Bryan Call's body-factory work from #12947. Related: #10893 Fixes: #13393 Fixes: #11480 Co-authored-by: Bryan Call <bcall@apache.org>	4 天前
contrib	Add ubuntu/resolute dockerfile for 10.2.0 builds (#13573)	5 天前
doc	Fix client certificate context updates (#13576) TSSslClientCertUpdate has been unable to find normally configured outbound client contexts since 7dbb6cb188 changed the lookup key from certificate-and-key paths to the resolved certificate path. The existing AuTest hid the regression because its lowercase Streams.all assignments did not register assertions. This patch updates every matching CA bucket using the stored certificate path, drops the cached certificate data so that contexts created later do not resurrect the pre-update PEM, preserves working contexts when a replacement cannot be built, and releases the SSL configuration after use. It also corrects the API documentation and strengthens the AuTest to verify every CA bucket and the expected certificate subjects. Fixes: #13575	3 天前
example	Add port descriptor destroy API (#13518) TSPortDescriptorParse allocates an HttpProxyPort that plugins cannot release, so every parsed descriptor leaks for the lifetime of Traffic Server. The API also lacks end-to-end coverage that verifies the accept callback. This patch adds TSPortDescriptorDestroy while preserving the opaque handle ABI, validates unusable descriptors during parsing, and documents the ownership contract. It updates API users and adds an AuTest that opens a dynamically selected port and observes the accept callback. Fixes: #6894	5 天前
ext	Ignore the ext extensions from git (#12833)	6 个月前
include	Remove dead JSONRPC server_shutdown handler (#13578) Never registered nor called since it was added in #7478, and its void(YAML::Node) signature never matched the method handler shape it sat among. Shutdown already syncs the cache dir from the event thread in traffic_server.cc; doing it from an RPC thread would race the dir writers. Dropping it also removes mgmt's relative-path include of iocore's private P_CacheDir.h.	8 小时前
lib	Change libswoc test for undefined errno to a much higher number (#13531) libswoc tests include one that expects errno 134 to be unknown; this is no longer the case in Linux 7.2. This patch increases the errno to one that should be unknown for the forseeable future.	19 天前
plugins	Fix Clang 21 analyzer findings (#13593) Newer Clang releases expose latent ownership and error-handling issues, while the analyzer preset currently produces a GCC compilation database that Clang cannot reliably consume. This patch selects Clang explicitly for the analyzer preset, fixes the reported leaks, unchecked stream calls, and directory scanning under a mutex, and reshapes the remaining flagged code so the analyzer can follow it. That gives ATS a clean diagnostic baseline before the job moves to Ubuntu 26.04. Co-authored-by: Claude Opus 5 <noreply@anthropic.com>	3 天前
rc	Cleanup rc/trafficserver to use layout (#12118) Co-authored-by: Chris McFarlen <cmcfarlen@apple.com>	1 年前
src	Remove dead JSONRPC server_shutdown handler (#13578) Never registered nor called since it was added in #7478, and its void(YAML::Node) signature never matched the method handler shape it sat among. Shutdown already syncs the cache dir from the event thread in traffic_server.cc; doing it from an RPC thread would race the dir writers. Dropping it also removes mgmt's relative-path include of iocore's private P_CacheDir.h.	8 小时前
tests	Fix client certificate context updates (#13576) TSSslClientCertUpdate has been unable to find normally configured outbound client contexts since 7dbb6cb188 changed the lookup key from certificate-and-key paths to the resolved certificate path. The existing AuTest hid the regression because its lowercase Streams.all assignments did not register assertions. This patch updates every matching CA bucket using the stored certificate path, drops the cached certificate data so that contexts created later do not resurrect the pre-update PEM, preserves working contexts when a replacement cannot be built, and releases the SSL configuration after use. It also corrects the API documentation and strengthens the AuTest to verify every CA bucket and the expected certificate subjects. Fixes: #13575	3 天前
tools	Support JSON error response bodies (#13415) ATS cannot reliably emit JSON error responses through header rewrite: literal bodies cannot select a MIME type, HRW4U treats JSON braces as interpolation, fetched bodies lose their Content-Type, and conditional local files are unavailable. Body factory error pages are also hardcoded to HTML. This adds optional Content-Type arguments to set-body and set-body-from, preserves fetched response types, adds configuration-time local file bodies, and teaches HRW4U literal JSON braces and MIME-aware forms. It also adds body-factory Content-Type metadata and clears stale MIME state for empty fabricated bodies. Network set-body-from remains READ_RESPONSE-only because remap hooks cannot suspend for its asynchronous fetch. This covers remap-time errors with literal or file-backed bodies instead. This incorporates Bryan Call's body-factory work from #12947. Related: #10893 Fixes: #13393 Fixes: #11480 Co-authored-by: Bryan Call <bcall@apache.org>	4 天前
.asf.yaml	Revert "Enable rebase button in .asf.yaml (#13434)" (#13449) This reverts commit ccf324bc56c56cc8c02b1addebefd1c873848acf.	1 个月前
.clang-analyzer	Do not attempt clang-analyzer builds on 7.1.x branch	7 年前
.clang-format	clang-format v18 + modified configs (#11285)	2 年前
.clang-tidy	Updated clang-tidy configuration, scripts, and Makefiles	6 年前
.cmake-format.yaml	Use cmake-format for consistent CMakeLists.txt formatting (#10002)	2 年前
.editorconfig	Fix editor config for makefiles. (#10190) Add Makefile.inc and *.mk patterns to the editor config and ensure that they follow standard Make rules - tabs with width 8. Signed-off-by: James Peach <jpeach@apache.org>	2 年前
.git-blame-ignore-revs	Add .git-blame-ignore-revs (#12774) * Add .git-blame-ignore-revs * add license header	7 个月前
.gitignore	Replace storage.config and volume.config with storage.yaml (#13031) * Replace storage.config & volume.config by storage.yaml * Doc: storage.yaml Co-authored-by: Alan M. Carroll <amc@apache.org> * Fix unit tests with ASan * Fix cache_volume_features AuTest * Fix CacheProcessor::diskInitialized * Minor fixes * Configuration Parsing Library Support * Add 'traffic_ctl config convert storage' cmd * Claenup --------- Co-authored-by: Alan M. Carroll <amc@apache.org>	4 个月前
.perltidyrc	Add Perltidy configuration and build target Also does an initial run.	7 年前
.ripgreprc	Improves on the ripgrep .rc file	7 年前
.style.yapf	yapf: use yapf instead of autopep8 (#10860) autopep8 does not support Python 3.12, which is a requirement for moving to fedora:39. The following ticket has been open without comment from the development community for 6 weeks: https://github.com/hhatto/autopep8/issues/712 Transitioning to yapf is easy, and the community behind it seems stronger. I think moving forward it is a better Python formatter for us.	2 年前
.tsan_suppressions	Add ThreadSanitizer suppressions file to ignore data race of freelist (#9171)	3 年前
.vimrc	Change textwidth option to 132 so that it corresponds to the line length used by 'make clang-format'.	9 年前
.yapfignore	yapf: use yapf instead of autopep8 (#10860) autopep8 does not support Python 3.12, which is a requirement for moving to fedora:39. The following ticket has been open without comment from the development community for 6 weeks: https://github.com/hhatto/autopep8/issues/712 Transitioning to yapf is easy, and the community behind it seems stronger. I think moving forward it is a better Python formatter for us.	2 年前
AGENTS.md	AI agent instruction updates (#13335) AI coding guidance does not fully reflect project conventions, which can lead agents toward inconsistent names and less maintainable tests. This aligns the instructions with established AuTest, Python, and C++ practices. It also documents both private-member prefix styles and the community preference for `_` in new files.	1 个月前
CMakeLists.txt	cache: shared-memory-backed Dir for fast restart (#13328) * cache: shared-memory-backed Dir for fast restart Cold-start cache initialization rebuilds each stripe's in-memory directory from disk on every restart, which is multi-minute on large caches. Host the directory in POSIX shared memory so the next process start attaches the existing segment in milliseconds instead of rebuilding it. Recovery stays binary and fail-safe: when the segment cannot be trusted -- crash, reboot, ABI or schema mismatch, storage change, or failed validation -- the start drops it and rebuilds through the existing disk path. Reads still validate Doc magic and key, so a stale entry is a miss and never corruption. A stripe the previous shutdown could not vouch for is marked in the control segment, never in the stripe's own header: that header aliases raw_dir, which is also the source buffer for the on-disk directory write, so a mark there could reach disk and make the next start clear the stripe instead of recovering it. Opt-in behind proxy.config.cache.shm.enabled, default 0, where it is a functional no-op. `traffic_ctl cache shm status` and `clear` inspect and drop segments out of band. The design and the full recovery matrix are in doc/developer-guide/cache-architecture/shm-fast-restart.en.rst. * traffic_ctl: run cache shm subcommands through Command_Execute The status/clear leaves passed their own `[&]() { command->execute(); }` lambda, where every other leaf in the file passes Command_Execute. Reuse it so the null guard applies and the wiring is uniform. No behavior change: `command` is assigned before args.invoke() and a null one throws, so the guard cannot fire today. * cache: fix shm shutdown test where flock is honored The untrusted-entry test simulated a restart by calling initialize() again in one process, which the concurrent-attach guard correctly refuses: the first start still holds LOCK_EX on the control fd, and the second open of the same object conflicts with it. The test only passed where flock is not honored for POSIX shm (macOS, FreeBSD) and failed on Fedora and Debian; the other Linux builds compile the feature out, so the target is not built there at all. Add CacheShm::release_for_test() to drop the process-wide state, standing in for the process exit that releases the flock in production. * cache: always write the on-disk dir at shm shutdown Skipping the write for a shm-backed stripe looked free -- the segment is already current and is attached directly next start -- but the on-disk copy is the only thing the fallback has, and recover_data() cannot always rebuild from it. handle_recover_from_data() returns without scanning the data region when the on-disk header still has sync_serial == 0, so an empty directory is accepted as-is. A stripe filled and cleanly shut down before the first periodic dir sync (60 s by default) is exactly that case: nothing had written the on-disk dir, so the next start that cannot use the segment found an empty directory and lost every object. cache_shm_dir_invalid caught it as a 502 against its deliberately absent origin, once the poked segment was correctly rejected. Only start time is what this feature set out to improve, so the shutdown write costs what it did before and the fallback stays recoverable. * cache: harden the shm trust gates and ownership guard Review of the fast-restart path found four ways a shared-memory segment could be trusted, or cleared, when it should not be. The attach gate bounded directory links but neither a live entry's offset -- which CacheVC::handleRead turns into a negative, so huge unsigned, read length -- nor the free list's structure, where an in-range cycle lets freelist_pop write a link over a live entry's tag bits. Clean shutdown cleared owner_pid while event threads were still writing, which on a platform where flock is a no-op is the only guard against a concurrent attach. And traffic_ctl swept a control segment smaller than this build's before checking for a live owner, so a newer build could unlink a running older build's segments -- the upgrade case the frozen header exists to support. The entry bound is on where an entry starts, not on its extent: dir_approx_size rounds up, so the last object in a stripe legitimately overhangs the stripe end, which is what handleRead's truncation is for. * cache: prove shm segment membership at attach A walk from the free-list head cannot see an entry that Directory::insert unlinked but never filled, so a shutdown torn in that window published a directory whose stale prev/next the next insert would write through. Require every entry to be reached exactly once, as a bucket root, an empty free-list node, or an in-use chain node, and delay the clean-shutdown mark until after the event system is down so fewer tears reach the gate at all. * Include algorithm header	24 天前
CMakePresets.json	Fix Clang 21 analyzer findings (#13593) Newer Clang releases expose latent ownership and error-handling issues, while the analyzer preset currently produces a GCC compilation database that Clang cannot reliably consume. This patch selects Clang explicitly for the analyzer preset, fixes the reported leaks, unchecked stream calls, and directory scanning under a mutex, and reshapes the remaining flagged code so the analyzer can follow it. That gives ATS a clean diagnostic baseline before the job moves to Ubuntu 26.04. Co-authored-by: Claude Opus 5 <noreply@anthropic.com>	3 天前
CONTRIBUTING.md	Remove autopep8 references since we use yapf (#12579) We have long since transitioned to yapf from autopep8. This completes the transition by removing autopep8 references that are still hanging around so that people are not confused by those references.	10 个月前
Findtsapi.cmake.in	Add utility files for building external plugins (#11008) * Add Findtsapi.cmake and ts.pc files * add docs for building a plugin * skip linking libraries by default * mention using both verifies for some plugins --------- Co-authored-by: Chris McFarlen <cmcfarlen@apple.com>	2 年前
INSTALL	remove autotools (#10794) * remove autotools * update docs * More updates * Update autest docs --------- Co-authored-by: Chris McFarlen <cmcfarlen@apple.com>	2 年前
LICENSE	Fixed spelling mistakes in code and other files (#8061)	5 年前
NOTICE	Add in a vendor copy of Google Highway (#13228)	2 个月前
README-EC2	Fixed spelling mistakes in code and other files (#8061)	5 年前
README.md	Add in a vendor copy of Google Highway (#13228)	2 个月前
SECURITY.md	Update AGENTS.md and clarify SECURITY.md plugin scope (#13179) AGENTS.md gains a Security section pointing at SECURITY.md so the policy is discoverable for coding agents. SECURITY.md clarifies that shipped plugins, including those under plugins/experimental/, are in scope for security reporting. The experimental carve-out is narrowed to experimental features and names HTTP/3 / QUIC explicitly.	3 个月前
STATUS	Updated STATUS file (#8223)	4 年前
emacs-style	TS-95: More RAT fixes and additions to the exclude file. git-svn-id: https://svn.apache.org/repos/asf/incubator/trafficserver/traffic/trunk@908287 13f79535-47bb-0310-9956-ffa450edef68	16 年前
setup.cfg	Add settings for autopep8	9 年前
ts.pc.in	Add utility files for building external plugins (#11008) * Add Findtsapi.cmake and ts.pc files * add docs for building a plugin * skip linking libraries by default * mention using both verifies for some plugins --------- Co-authored-by: Chris McFarlen <cmcfarlen@apple.com>	2 年前

自动翻译

Apache Traffic Server

Traffic Server 是一款高性能的云服务基础组件。它不仅是一个缓存代理服务器，还支持通过插件构建大规模 Web 应用程序。

致 ATS 开发者的重要通知

从 10 版本开始，ATS 已将构建系统转换为 cmake。以下是使用 cmake 构建 ATS 的快速入门指南：

步骤 1：配置

使用 cmake 时，强烈建议创建一个源外构建目录。所有 cmake 命令都需要指定该目录。在以下示例中，该目录为 build。

$ cmake -B build

这将使用默认值配置项目。

如果您想自定义构建，可以在命令行中为变量传递值。或者，您可以使用 ccmake 程序交互式地修改这些变量。

$ cmake -B build -DCMAKE_INSTALL_PREFIX=/tmp/ats -DBUILD_EXPERIMENTAL_PLUGINS=ON

-- 或 --

$ ccmake build

指定依赖项的位置

若要指定依赖项的位置（类似于 autotools 构建中的 --with-*），通常需要设置一个带有 ROOT 的变量。不过 openssl 是一个主要例外，其对应的变量名为 OPENSSL_ROOT_DIR。

$ cmake -B build -Djemalloc_ROOT=/opt/jemalloc -DOPENSSL_ROOT_DIR=/opt/boringssl

使用预设配置构建

cmake 具有将配置分组的功能，以简化配置和重现过程。文件 CMakePresets.json 声明了可从命令行使用的预设。您可以提供自己的 CMakeUserPresets.json，并通过继承进一步优化这些预设：

$ cmake --preset dev

您可以通过复制 CMakePresets.json 并删除 configurePresets 中的所有内容来开始创建用户预设。

以下是一个用户预设示例：


    {
      "name": "clang",
      "hidden": true,
      "environment": {
        "LDFLAGS": "-L/opt/homebrew/opt/llvm/lib -L/opt/homebrew/opt/llvm/lib/c++ -Wl,-rpath,/opt/homebrew/opt/llvm/lib/c++ -fuse-ld=/opt/homebrew/opt/llvm/bin/ld64.lld",
        "CPPFLAGS": "-I/opt/homebrew/opt/llvm/include",
        "CXXFLAGS": "-stdlib=libc++",
        "CC": "/opt/homebrew/opt/llvm/bin/clang",
        "CXX": "/opt/homebrew/opt/llvm/bin/clang++"
      }
    },
    {
      "name": "mydev",
      "displayName": "my development",
      "description": "My Development Presets",
      "binaryDir": "${sourceDir}/build-dev-clang",
      "inherits": ["clang", "dev"],
      "cacheVariables": {
        "CMAKE_INSTALL_PREFIX": "/opt/ats-cmake",
        "jemalloc_ROOT": "/opt/homebrew",
        "ENABLE_LUAJIT": false,
        "ENABLE_JEMALLOC": true,
        "ENABLE_MIMALLOC": false,
        "ENABLE_MALLOC_ALLOCATOR": true,
        "BUILD_EXPERIMENTAL_PLUGINS": true,
        "BUILD_REGRESSION_TESTING": true
      }
    },

然后像这样使用：

cmake --preset mydev

构建项目

$ cmake --build build

$ cmake --build build -t traffic_server

运行测试

$ cd build
$ ctest

安装

$ cmake --install build

目录结构

trafficserver ............. Top src dir
├── ci .................... Quality assurance and other CI tools and configs
├── cmake ................. CMake build system files
├── configs ............... Configurations
├── contrib ............... Various contributed auxiliary pieces
├── doc ................... Documentation for Traffic Server
│   ├── admin-guide ....... Admin guide documentations
│   ├── appendices ........ Appendices of Traffic Server
│   ├── developer-guide ... Documentation for developers
│   ├── dot ............... Graphviz source files for docs pictures
│   ├── static ............ Static resources
│   └── uml ............... Documentation in UML
├── example ............... Example plugins
├── ext ................... External dependencies and extensions
├── include ............... Header files
├── lib ................... Third-party libraries
│   ├── Catch2 ............ Unit testing framework
│   ├── fastlz ............ Fast compression library
│   ├── highway ........... Portable SIMD/vector intrinsics
│   ├── ls-hpack .......... HPACK compression for HTTP/2
│   ├── swoc .............. Solid Wall of Code utility library
│   ├── systemtap ......... SystemTap integration
│   └── yamlcpp ........... YAML parser library
├── memory-bank ........... AI assistant context documentation
├── plugins ............... Stable core plugins
│   └── experimental ...... Experimental core plugins
├── rc .................... Installation programs and scripts
├── src ................... Source for all the main binaries / applications
│   ├── api ............... C Plugin API implementation
│   ├── cripts ............ Cripts scripting framework
│   ├── iocore ............ I/O core subsystem
│   │   ├── aio ........... Asynchronous I/O core
│   │   ├── cache ......... Disk and RAM cache
│   │   ├── dns ........... DNS (asynchronous)
│   │   ├── eventsystem ... Event Driven Engine
│   │   ├── hostdb ........ Internal DNS cache
│   │   ├── io_uring ...... io_uring support (Linux)
│   │   ├── net ........... Network I/O
│   │   │   └── quic ...... QUIC implementation
│   │   └── utils ......... I/O utilities
│   ├── mgmt .............. JSONRPC server/management and tools
│   ├── proxy ............. HTTP proxy logic
│   │   ├── hdrs .......... Headers parsing and management
│   │   ├── http .......... HTTP/1.x implementation
│   │   ├── http2 ......... HTTP/2 implementation
│   │   ├── http3 ......... HTTP/3 implementation
│   │   ├── logging ....... Flexible logging
│   │   └── shared ........ Shared proxy files
│   ├── records ........... Configuration records library
│   ├── shared ............ Shared utilities and RPC
│   ├── traffic_cache_tool  Tool to interact with the Traffic Server cache
│   ├── traffic_crashlog .. Helper process that catches Traffic Server crashes
│   ├── traffic_ctl ....... Command line management tool
│   ├── traffic_layout .... Display information on the build and runtime directory structure
│   ├── traffic_logcat .... Convert binary log file to plain text
│   ├── traffic_logstats .. Log parsing and metrics calculation utility
│   ├── traffic_quic ...... QUIC client tool
│   ├── traffic_server .... Main proxy server
│   ├── traffic_top ....... Top like tool for viewing Traffic Server statistics
│   ├── traffic_via ....... Tool for decoding the Traffic Server Via header codes
│   ├── tscore ............ Base / core library
│   ├── tscpp ............. C++ api wrapper for plugin developers
│   └── tsutil ............ Core utilities (metrics, debugging, regex, etc.)
├── tests ................. Different tests for Traffic Server
├── tools ................. Directory of various tools
├── CONTRIBUTING.md ....... How to contribute to the project
├── INSTALL ............... Build and installation guide
├── LICENSE ............... Full license text
├── NOTICE ................ Copyright notices
├── README.md ............. This file: intro, links, build info
├── README-EC2 ............ Info on EC2 support
├── SECURITY.md ........... Security policy and vulnerability reporting
└── STATUS ................ Release history and information

要求

本节概述了不同操作系统发行版的构建要求。与在线要求相比，此处信息可能已过时，在线要求请参见

https://cwiki.apache.org/confluence/display/TS/Building。

从 ATS v9.0.0 及更高版本开始，需要 gcc 7 或更高版本，因为我们现在使用并要求 C++17 标准。

Fedora / CentOS / RHEL：

cmake
ninja
pkgconfig
gcc/g++ or clang/clang++
openssl-devel
pcre2-devel
ncurses-devel and libcurl-devel(optional, needed for traffic_top)
libcap-devel (optional, highly recommended)
hwloc-devel (optional, highly recommended)

Ubuntu / Debian

cmake
ninja
pkg-config
gcc/g++ or clang/clang++
zlib1g-dev
libssl-dev
libpcre2-dev
libcap-dev (optional, highly recommended)
libhwloc-dev (optional, highly recommended)
libncurses5-dev (optional, required for e.g.: traffic_top)
libcurl4-openssl-dev (optional, required for e.g.: traffic_top)

Alpine Linux

build-base
libexecinfo-dev
pcre2-dev
libressl-dev
cmake
ninja
linux-headers

macOS（我们推荐使用 HomeBrew）：

cmake
ninja
pkg-config
openssl
pcre2

FreeBSD

cmake
ninja
devel/gmake
devel/pkgconf
security/openssl
devel/pcre2
textproc/flex (optional, install newer version from ports, fix PATH)
devel/hwloc (optional, highly recommended)

从发行版构建

您可以从 Apache Traffic Server 官方网站下载最新的源代码：

https://trafficserver.apache.org/downloads

（或通过 URL 缩短器：http://s.apache.org/uG）。下载完成后，请按照以下说明操作：

tar jxvf trafficserver-9.1.3.tar.bz2
cd trafficserver-9.1.3
cmake -B build
cmake --build build

这将以 /usr/local 为目标前缀进行构建。您可以通过以下方式完成安装

sudo cmake --install build

从 Git 仓库构建

git clone https://github.com/apache/trafficserver.git   # get the source code from ASF Git repository
cd trafficserver                                        # enter the checkout directory
cmake --preset default                                  # configure the build
cmake --build build-default                             # execute the compile
cmake --build build-default -t test                     # run tests (optional)
cmake --install build-default                           # install

在 EC2 上构建的说明

注意：或者，您可以使用“contrib”目录下的脚本，这些脚本将自动在 EC2 上安装 trafficserver，强烈推荐此方法。有关更多详细信息，请参见“README-EC2”。

使用 Ubuntu 时，以 root 用户身份执行以下操作

mkdir -p /mnt          #EC2 Storage Mount, where storage is located
cd /mnt
git clone ...          # get the source code from ASF Git repo
cd trafficserver       # enter the checkout dir
cmake --preset default                                  # configure the build
cmake --build build-default                                   # execute the compile
cmake --build build-default -t test
cmake --install build-default

使用 Fedora Core 8 内核时，以 root 用户执行以下操作

mkdir -p /mnt                             #EC2 Storage Mount, where storage is located
cd /mnt
git clone ...                             # get the source code from ASF Git repo
cd trafficserver                          # enter the checkout dir
cmake --preset default                    # configure the build
cmake --build build-default               # execute the compile
cmake --build build-default -t test       # run tests (optional)
cmake --install build-default             # install

安装

/usr/local
├── /var/log/trafficserver   log files created at runtime
├── /var/trafficserver       runtime files
├── /etc/trafficserver       configuration files
├── /bin                     executable binaries
└── /libexec/trafficserver   plugins

加密软件声明

本发行版包含加密软件。您当前所在的国家/地区可能对加密软件的进口、拥有、使用和/或向其他国家/地区再出口存在限制。在使用任何加密软件之前，请务必检查您所在国家/地区关于加密软件进口、拥有、使用和再出口的法律、法规和政策，确认是否允许上述行为。更多信息请参见http://www.wassenaar.org/。

美国商务部工业与安全局（BIS）已将本软件归类为出口商品控制编号（ECCN）5D002.C.1，该类别包括使用非对称算法或执行加密功能的信息安全软件。Apache软件基金会的本发行版形式使其有资格根据许可例外ENC技术软件无限制（TSU）例外（参见BIS出口管理条例第740.13节）出口目标代码和源代码。

以下是所包含加密软件的更多详细信息：

本软件的部分功能使用了OpenSSL http://www.openssl.org/ 的功能。

模糊测试

标志

export CC=clang
export CXX=clang++
export CFLAGS="-O1 -fno-omit-frame-pointer -gline-tables-only -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -fsanitize=address -fsanitize-address-use-after-scope -fsanitize=fuzzer-no-link"
export CXXFLAGS="-O1 -fno-omit-frame-pointer -gline-tables-only -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -fsanitize=address -fsanitize-address-use-after-scope -fsanitize=fuzzer-no-link"
export LIB_FUZZING_ENGINE=-fsanitize=fuzzer

编译

cmake -B build -DENABLE_POSIX_CAP=OFF -DENABLE_FUZZING=ON -DYAML_BUILD_SHARED_LIBS=OFF
cmake --build build

补充信息

网页：https://trafficserver.apache.org/
维基：https://cwiki.apache.org/confluence/display/TS/
用户邮件列表：users@trafficserver.apache.org

项目介绍