Fluxheim 1.5.2

Fluxheim 1.5.2 Release Notes

Fluxheim 1.5.2 is the runtime load-balancer weight-control release. It starts
from the stabilized 1.5.1 load-balancer surface and focuses on authenticated
runtime weight overrides for already configured members.

Changed

• Add POST /_fluxheim/load-balancer/member-weight for authenticated runtime
  weight overrides on already configured members.
• Runtime weights are supported for round-robin, least-connections,
  least-sessions, and least-time pools.
• Use weight=default, reset, clear, or configured to remove the runtime
  override and return to the configured upstream weight.
• Load-balancer backend status now reports configured weight,
  effective_weight, runtime_weight_override, and
  runtime_weight_changed_at_unix_secs.
• Runtime member-weight operations emit bounded audit/metrics events:
  member_weight, member_weight_invalid, and member_weight_not_found.
• Successful runtime member-state and member-weight mutations are emitted to
  the fluxheim::audit log target as privileged admin operations.
• privacy-mode builds omit backend addresses from member-state and
  member-weight mutation responses and structured mutation logs.
• Non-privacy metrics keep backend attribution for unaliased member mutations;
  privacy-mode keeps alias-only attribution.
• Static configured load-balancer pools reject backend identity-key collisions
  during config validation.
• Retained runtime override state is bounded, and runtime weight overrides stay
  attached to disabled or forced-down dynamic members across discovery churn.

Test Coverage

• Unit tests cover runtime weight selection behavior, unsupported hash-selector
  rejection, runtime status fields, stale dynamic-backend cleanup, retained
  override bounds, and the authenticated admin endpoint.

Boundaries

The 1.5.2 release should not add managed affinity-cookie insertion,
restart-persistent load-balancer state, cross-node state synchronization,
runtime add/remove-member operations, UDP/GSLB, WAF, VPN/firewall appliance
behavior, or iRules/Lua/Wasm scripting.

Checksums And Signatures

• Commit: cc19b8ce9014d266056dc76ce07a5423b775d388
• Local gate: GitHub CI green before tag; local release metadata checks passed
• CodeQL/code scanning: no open release-blocking alerts before tag
• Source archive checksums:
  • 1195e34ab193153b69b987966139442bd637f8e1a665ad0f1e21b7f962cbb287 fluxheim-1.5.2.tar.gz
  • 08a3a84fb18d22330c52ff293a8e0a22e48a903aa5f513302bf2e6d1111cd19e fluxheim-1.5.2.zip
• Binary checksums:
  • x86_64:
    • 6506e35e8244da2821b6a7cd99f42156b69ed48a210518bc48b9e76ef43561fa fluxheim-1.5.2-full-x86_64-linux.tar.gz
    • 2f104463ad37bf9efba60d7016071348e1571ef60b59e82a0ebcfcb318b3dd5e fluxheim-1.5.2-cache-x86_64-linux.tar.gz
    • ace81ec07f7d75a8c12867d5ab58d1c78e4105eea8e8ec4bd275ba45a99387e4 fluxheim-1.5.2-proxy-x86_64-linux.tar.gz
    • 312ab7e27523f51061fe8059646c8c30d9da5ea2a83b25bae58b7e6087a3278c fluxheim-1.5.2-php-x86_64-linux.tar.gz
    • d1834ce79e86aaf0593c77d6d90b1a016443f947259e67e9291cba7bcdcfe8e1 fluxheim-1.5.2-load-balancer-x86_64-linux.tar.gz
    • 488fda4f901d2e1e4e6a8c98914bcd01fc7715284aa46fd68d2fc13a16aa50c3 fluxheim-1.5.2-config-tester-x86_64-linux.tar.gz
  • aarch64:
    • 5b9924ea5d8b280db2683f9396f8ac88e107b2b9dbde26c4e0d7ac5db2ce6741 fluxheim-1.5.2-full-aarch64-linux.tar.gz
    • b5a7b098264b0164929218394899f08e151bdecd7c986c09e221a54071a86057 fluxheim-1.5.2-cache-aarch64-linux.tar.gz
    • 9ee963b62143217863428654af5197495724d217cfc656a5d46c0820d61ad0b9 fluxheim-1.5.2-proxy-aarch64-linux.tar.gz
    • ef86a51197c1796f129fd64ef2358ea840c9f919e1a137b640248312507940cf fluxheim-1.5.2-php-aarch64-linux.tar.gz
    • b7150fe452e1c0c4b765a372ca5fbc7a046d87894df6bdf2f065a0bbc7766a53 fluxheim-1.5.2-load-balancer-aarch64-linux.tar.gz
    • 0819f59f756ea44938a4391e9de4c2f866101acbf06861ae778518aa067f90e3 fluxheim-1.5.2-config-tester-aarch64-linux.tar.gz
  • macos:
    • 6dcb2d4ba6a1467537ef8ea0ff037fb1223af05c1a89e4e1017f325040af02ea fluxheim-1.5.2-dev-aarch64-macos.tar.gz
• SBOM checksums:
  • 642a2b62531a464f05fbc2e8c8992918de7f759f32a3882b31bf3dbab33b377e fluxheim.spdx.json
  • 0b3761c54470c756dcf3238425922814c3b451e6a7553bc00f362bd2dc68dd8e fluxheim.cyclonedx.json
• Reproducible build:
  • cc52ef0c191685c152b8058b246d6683581205209cdfc9ebdd5e1ace3720869f x86_64
  • c26dcb910161335f5398ce8081bb7e1b2e3d8ae4e447f0e8fa3f55f08df0e1d7 aarch64
  • da57ec87b470a24d6f8e3c62e721332962f183c1bf5e9d4a0ddb72211b793743 macos
• Full Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:0972c2703eb23e33a3d992226085753e34b9263e8d64b85a14cdc219ae6f6ac5
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:2bbaf8ae624236ffb0bcad33f78ad7e7d446ad895b1b188dec0fb3caea519380
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:3197234caed4b9e108269052bffce9dc69088453351323992914fe21e549a010
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:ab93f7389fd140db270b0abba9deac4519eb43bbe34c3f644679f7d6e69128dd
• Cache Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:299805e8d3395252dab421b2e1e272a077e0eb60d3d8520622f9d3874c293981
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:289d810209819208217ac469ff224b10d0bf51ad1a5fa41688377f80011c12f3
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:50a7c06ec95e47b3258e5c794e935fa8ea7d80b9869c0f02fc9e48df13a52c26
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:559e497860e279f02acdd925b610c62969e48a35605daca40bf7fdef2f1d5a9b
• Proxy Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:7cd967c6b4dce97b127274add66362eeac3b0cb87c30a8e331b46c82f7c6667e
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:6e8564c6408ea644669b3322f07cda249f4510a89e62dfc0a8c9ad026985f200
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:b754c89bc62d098265ec024a0911f5a91feaf42e942b52b5d9806063cb720875
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:5284b55314240e089ee1c4d2a96c9c02d505a77a75b644cfc00edde0564b9203
• PHP Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:58e0e6a239bfae6a545dfdfb4f9fb949f96e895de46181344e4c44970594ee30
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:3339ac097dd23294812e602642498b01298ea14dcf2110e93da1131647e526c8
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:a1049047404d9c249cafb8b57cdb085d98dfe604e48abdc05914336d550220f0
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:2947129bbc6f8d398f27b3f494486ec6eb8c18cec8e6c1ec7ceb0c2b5837274a
• Load Balancer Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:9c15c7cdf83414ef68dac43571077448ad0ea2deac17304301fe8c47b646a75b
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:2f79edd56c0a049278356e7de95c06317f13e0e83096539ab733cfa00e8dea1a
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:afb786723de9be8517dd361a4c2276bd596250cdd31284d6df1bec469b7a44bd
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:0027c1365358662714577649783dd9c9bb934dca297f85eb30e288b8e3669428
• Tag signature:
  • Good "git" signature for 1921261+eldryoth@users.noreply.github.com with ED25519 key SHA256:EoLRQ5k4J5pYz3UMFmkrV798gYFNkToGS2xEPvebqB4