Hephy Router v2.19.0

v2.18.1 -> v2.19.0

Maintenance

• 713ad1d charts: regenerate dhparams for router
• 199cfd8 rootfs: upgrade to openssl 1.1.1k

Hephy Router v2.18.1

v2.18.0 -> v2.18.1

Maintenance

• 735d905 Makefile: v1.28.3 image

Hephy Router v2.18.0

v2.17.0 -> v2.18.0

Features

• 6ddeac0 k8s.io: upgrade to using appv1, corev1, metav1 in router

Fixes

• a5b22ca Dockerfile: add missing libyajl2 runtime dependency

Maintenance

• 2df4300 router: permit umbrella override api group
• cac151d charts: define APIVersion template
• 21a8fdb chart: update to use hephy docker hub org
• 142e0f1 charts: remove quay.io from deployment chart
• 10d96c6 glide: upgrade to k8s.io/client-go release-14.0
• 5ce91b9 charts: update the charts to reflect new api/v1

Hephy Router v2.17.0

v2.16.3 -> v2.17.0

Features

• b0686d7 model: add chacha draft to default ciphers
• a836ede model: support equal preference ciphers
• f75fdc2 model: let clients prefer aes128 ciphers
• addb06a model: enable TLSv1.3 in nginx by default
• 9e70a6d nginx: enable tls 1.3 0-rtt for safe http methods

Fixes

• fa24e70 model: fix(model) allow enabling TLSv1.3 protocol
• 406f0bb model: fix advanced ciphers validation
• 492abc3 model: allow tls 1.3 cipher suite names
• 35ac8c3 model: add missing tls 1.3 default ciphers
• 94e77ae readme: escape pipe characters in table cells

Maintenance

• c66187b rootfs: nginx 1.18.0, openssl 1.1.1g
• 3b3fd71 rootfs: use cloudflare zlib for nginx
• 63e6a35 model: remove redundant !DSS cipher rule
• 4bec8bd build: chore(build) update to latest go-dev image
• ae978f8 Dockerfile: switch to bionic lts hephy/base:v0.4.0
• 8418aee Dockerfile: switch to bionic lts hephy/base:v0.4.0
• 29e3c65 scripts: ensure get scripts fail when errors
• b75142d rootfs: update to hephy/base:v0.4.1 image
• 8338d41 rootfs: build custom openssl debs for nginx

Hephy Router v2.16.3

v2.16.2 -> v2.16.3

Maintenance

• d05ce54 go-dev: upgrading go-dev container to v1.25.1
• 4870d62 go-dev: move to image hephy/go-dev:v1.25.1
• b57af74 go: new repo location for teamhephy/router

Hephy Router v2.16.2

v2.16.1 -> v2.16.2

Features

• 6016a3d router: Add ability to set X-Request-Start header per app #42

Hephy Router v2.16.1

v2.16.0 -> v2.16.1

Refactors

• d253929 tcell: DEPRECATION - removing Tcell module security option in nginx

Maintenance

• 32d7fd3 nginx: upgrading nginx to latest stable release v1.16.1
• 322a0a8 nginx: upgrading nginx to latest stable release v1.16.1

Hephy Router v2.16.0

v2.15.1 -> v2.16.0

Features

• 7313ef9 router: Add ability to set MaxHeaderSize and MaxFieldSize globally

Fixes

• 16b5d8e rootfs: fix(rootfs) don't bake Dockerfile into image
• b276068 router: fix(router) add missing ssl config in default host

Maintenance

• 3c0c1a1 rootfs: update to nginx 1.14.2 / vts 0.1.18
• 6b55e4b Makefile: update to go-dev v1.10.0
• 8c75726 Dockerfile: remove external binaries

Hephy Router v2.15.1

v2.15.0 -> v2.15.1

Hephy Router v2.15.0

v2.14.0 -> v2.15.0

Features

• 4caaef7 router: Adding large_client_header_buffers annotations to hephy-router
• 81b1153 router: adding application regex domain defined per app
• 7c8636d router: adding tcell dynamic module as option for waf security
• 59d5441 router: adding modsecurity module with OWASP core rule set as sec option
• 0394da8 router: updating tcell dynamic module to version 1.0.8
• 9539f58 router: updating tcell dynamic module to version 1.1.0
• ad4c992 charts: switching nginx dhparam to 4096 bits
• d079bac model: support locations

Fixes

• 3fa159a charts: int cast in version comparison
• ad6ed1b charts: set rbac apiVersion without casting

Documentation

• e5ce9b7 router: scaling concern update in docs
• 8c0d07d config: add example to readme

Maintenance

• c18fc2a Dockerfile: upgrade libmodsecurity to newest v3.0.3