| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
Support JSON error response bodies (#13415) ATS cannot reliably emit JSON error responses through header rewrite: literal bodies cannot select a MIME type, HRW4U treats JSON braces as interpolation, fetched bodies lose their Content-Type, and conditional local files are unavailable. Body factory error pages are also hardcoded to HTML. This adds optional Content-Type arguments to set-body and set-body-from, preserves fetched response types, adds configuration-time local file bodies, and teaches HRW4U literal JSON braces and MIME-aware forms. It also adds body-factory Content-Type metadata and clears stale MIME state for empty fabricated bodies. Network set-body-from remains READ_RESPONSE-only because remap hooks cannot suspend for its asynchronous fetch. This covers remap-time errors with literal or file-backed bodies instead. This incorporates Bryan Call's body-factory work from #12947. Related: #10893 Fixes: #13393 Fixes: #11480 Co-authored-by: Bryan Call <bcall@apache.org> | 9 天前 | |
cmake: resolve install prefix later to pickup prefix override (#10693) * cmake: resolve install prefix later to pickup prefix override at install time * quote destination directory for config install * fix slashes --------- Co-authored-by: Chris McFarlen <cmcfarlen@apple.com> | 2 年前 | |
Relocates proxy/config to configs | 8 年前 | |
Relocates proxy/config to configs | 8 年前 | |
Core implementation of IP categories for ip_allow.yaml (#11004) Adds the ip_category feature for ip_allow.yaml so that users can specify arbitrary IP descriptions like the following: ```yaml ip_allow: - apply: in ip_category: ACME_INTERNAL action: allow methods: - GET - HEAD - POST - PUSH - DELETE ``` IP categories are defined via an `ip_categories` root node or through a file configured via proxy.config.cache.ip_categories.filename. | 2 年前 | |
ip_allow: add default CONNECT destination rules CONNECT destinations to loopback or private services need an explicit destination policy in addition to port allowlisting to protect them. Operators already have that control through outbound ip_allow rules, but the default files and coverage did not fully show how to protect local resources, alternate unspecified or IPv4-mapped address forms, or how to opt in to intentional local tunnels. This is a default configuration, documentation, and test change only; it does not add new core CONNECT validation code. It adds CONNECT-only outbound denies for unspecified, loopback, private, link-local, and IPv4-mapped IPv6 destination ranges, while keeping intentional deployments overrideable with earlier outbound allow rules. | 1 个月前 | |
Make jsonrcp restricted_api false by default. (#9415) Making restricted_api false by default will cause ATS to enforce socket permissions rather than relying upon the DAC of the socket. With this change, ATS will restrict access to privileged users for write operations while allowing broader access for read-only options. Thus `traffic_ctl config get` will be generally accessible since it is a read-only operation, while `traffic_ctl config set` will require privilege since it modifies the configuration. This default should be reasonable since that is how 9.0 used to behave. | 3 年前 | |
Cleanup log filter code, and add supports for LT and GT filters. (#11768) * Cleanup of the wipe field filters * Removes remants of m_does_conjunction * Adds LT/GT filter logic for integer fields * Cleanup the actual wipe functionality * Eliminate the malloc and string copy for uppercase * Fix milestones type and filter copy ctor * Adds an example log format and filter for slowlog * Fix issue with strstrcase string lengths | 1 年前 | |
Relocates proxy/config to configs | 8 年前 | |
Relocates proxy/config to configs | 8 年前 | |
Replace storage.config and volume.config with storage.yaml (#13031) * Replace storage.config & volume.config by storage.yaml * Doc: storage.yaml Co-authored-by: Alan M. Carroll <amc@apache.org> * Fix unit tests with ASan * Fix cache_volume_features AuTest * Fix CacheProcessor::diskInitialized * Minor fixes * Configuration Parsing Library Support * Add 'traffic_ctl config convert storage' cmd * Claenup --------- Co-authored-by: Alan M. Carroll <amc@apache.org> | 5 个月前 | |
records.yaml - Rename 'ts' yaml tag to 'records'. (#11454) | 2 年前 | |
Add sni.yaml session ticket overrides (#13006) Add ssl_ticket_enabled and ssl_ticket_number as sni.yaml overrides, apply them during SNI handling so they affect TLS 1.2 resumption and TLS 1.3 ticket issuance, and add unit and AuTest coverage plus docs and sample config updates. Fixes #12953 | 5 个月前 | |
Relocates proxy/config to configs | 8 年前 | |
Relocates proxy/config to configs | 8 年前 | |
ssl_multicert.config -> ssl_multicert.yaml (#12755) Replace the ssl_multicert.config format with YAML format, following the pattern established by sni.yaml. The new ssl_multicert.yaml uses a top-level 'ssl_multicert' key containing a sequence of certificate entries. This also supports config conversion via: traffic_ctl config ssl_multicert <old_config> <new_config> | 6 个月前 | |
Replace storage.config and volume.config with storage.yaml (#13031) * Replace storage.config & volume.config by storage.yaml * Doc: storage.yaml Co-authored-by: Alan M. Carroll <amc@apache.org> * Fix unit tests with ASan * Fix cache_volume_features AuTest * Fix CacheProcessor::diskInitialized * Minor fixes * Configuration Parsing Library Support * Add 'traffic_ctl config convert storage' cmd * Claenup --------- Co-authored-by: Alan M. Carroll <amc@apache.org> | 5 个月前 | |
Configurable Hash Algorithm and Parameters for Consistent Hash Parent Selection (#12567) * Make Parent Selection Hash configurable and add SipHash-1-3 and Wyhash v4.1. * Remove WyHash and add more configs. * Remove redundancy. | 9 个月前 | |
Fixed spelling mistakes in code and other files (#8061) | 5 年前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 9 天前 | ||
| 2 年前 | ||
| 8 年前 | ||
| 8 年前 | ||
| 2 年前 | ||
| 1 个月前 | ||
| 3 年前 | ||
| 1 年前 | ||
| 8 年前 | ||
| 8 年前 | ||
| 5 个月前 | ||
| 2 年前 | ||
| 5 个月前 | ||
| 8 年前 | ||
| 8 年前 | ||
| 6 个月前 | ||
| 5 个月前 | ||
| 9 个月前 | ||
| 5 年前 |