Re: [VOTE] Release Apache Traffic Server 10.0.5 (RC0)

+1 - Tested on Fedora 41. I did run into a problem when testing on the Mac after updating xocde. Since this is not a regression and is causing build problems with previous versions of ATS, I am voting +1. Here is an issues I created to track the problem: https://github.com/apache/trafficserve

Re: [VOTE] Release Apache Traffic Server 9.2.10 (RC0)

+1 - Tested on MacOS -Bryan > On Apr 1, 2025, at 1:37 PM, Evan Zelkowitz wrote: > > +1 > > Built and tested on Rocky 9 > > On Tue, Apr 1, 2025 at 12:42 PM Evan Zelkowitz > wrote: >> I've prepared a release for 9.2.10. The release notes are available at: >> >

Re: [VOTE] Release Apache Traffic Server 9.2.9 (RC0)

+1 - Built and tested on MacOS 15.3.1 -Bryan > On Mar 4, 2025, at 2:22 PM, Chris McFarlen wrote: > > +1 Built and tested pop-os > > > Sent with Proton Mail secure email. > > On Tuesday, March 4th, 2025 at 2:08 PM, Evan Zelkowitz > wrote: > >> I've prepared a release for 9.2.9. The release

Re: [VOTE] Release Apache Traffic Server 10.0.4 (RC0)

+1 - Built and tested on MacOS 15.3.1 -Bryan > On Mar 4, 2025, at 2:03 PM, Chris McFarlen wrote: > > I've prepared a release for 10.0.4. The release notes are available at: > > https://github.com/apache/trafficserver/milestone/82?closed=1 > https://docs.trafficserver.apache.org/en/latest/rele

Re: [VOTE] Release Apache Traffic Server 9.2.8 (RC0)

+1 - tested on MacOS. -Bryan > On Jan 29, 2025, at 1:39 PM, Evan Zelkowitz wrote: > > I've prepared a release for 9.2.8. The release notes are available at: > > https://github.com/apache/trafficserver/milestone/80?closed=1 > > https://docs.trafficserver.apache.org/en/latest/release-notes/up

Re: [VOTE] Release Apache Traffic Server 10.0.3 (RC0)

+1 - Tested the release on MacOS. -Bryan > On Jan 27, 2025, at 5:59 AM, Chris McFarlen wrote: > > I've prepared a release for 10.0.3. The release notes are available at: > > https://github.com/apache/trafficserver/milestone/81?closed=1 > > https://docs.trafficserver.apache.org/en/latest/

Re: [VOTE] Release Apache Traffic Server 10.0.3 (RC0)

It is on my list to work on converting the rest of the PCRE dependencies to PCRE2. I have been busy with work projects and production issues. I am hoping to complete it this quarter. -Bryan > On Jan 27, 2025, at 9:21 AM, Jered Floyd wrote: > > > This looks good on Fedora rawhide (42). > >

Re: [VOTE] Release Apache Traffic Server 9.2.7 (RC0)

+1 - Tested on Fedora 40 -Bryan > On Nov 21, 2024, at 1:56 PM, Evan Zelkowitz wrote: > > I've prepared a release for 9.2.7. The release notes are available at: > > https://github.com/apache/trafficserver/milestone/79?closed=1 > https://docs.trafficserver.apache.org/en/latest/release-notes/up

Re: [ANNOUNCE] Apache Traffic Server Fall Summit 2024

Please fill out this form if you plan to attend the ATS Fall Summit in person next week. We need to get an accurate headcount. https://forms.gle/CXun3BuaNT5B9Uz1A ATS Fall Summit 2024 forms.gle Thank you, -Bryan > On Sep 23, 2024, at 2:04 PM, bc...@apache.org wrote: > > We will be having

Re: [VOTE] Release Apache Traffic Server 10.0.2 (RC0)

+1 - built and tested on Fedora 40. -Bryan > On Nov 12, 2024, at 12:16 PM, Chris McFarlen wrote: > > I've prepared a release for 10.0.2. The release notes are available at: > > https://github.com/apache/trafficserver/milestone/78?closed=1 > https://docs.trafficserver.apache.org/en/latest/rel

Re: [VOTE] Release Apache Traffic Server 9.2.6 (RC0)

+1 - built and tested on Fedora 40. -Bryan > On Nov 12, 2024, at 12:31 PM, Evan Zelkowitz wrote: > > I've prepared a release for 9.2.6. The release notes are available at: > > https://github.com/apache/trafficserver/milestone/77 > https://docs.trafficserver.apache.org/en/latest/release-notes

Re: [VOTE] Release Apache Traffic Server 10.0.1 (RC1)

+1 - Tested on Fedora 40 -Bryan > On Oct 16, 2024, at 9:13 AM, Chris McFarlen wrote: > > I've prepared a release for 10.0.1. Changes since the last release can be > seen here: > > https://github.com/apache/trafficserver/milestone/73?closed=1 > > or for a brief ChangeLog see: > > https://g

[ANNOUNCE] End of Support for ATS 8

I would like to inform the ATS Community that as of November 1st, we will no longer be supporting ATS 8. To ensure uninterrupted service and access to the latest features and improvements, we recommend that you upgrade to either the latest ATS 9.2 or ATS 10 before this date. Upgrading to a newe

Re: [VOTE] Release Apache Traffic Server 10.0.0 (RC0)

+1 - built and tested on Fedora 40. -Bryan > On Aug 21, 2024, at 7:15 AM, Chris McFarlen wrote: > > I've prepared a release for 10.0.0. The release notes are available at: > > https://github.com/apache/trafficserver/milestone/30?closed=1 > > https://docs.trafficserver.apach

Re: [VOTE] ACL filter action names for 10.x

+1 for 1. Keep the allow/deny action names. -Bryan > On Jul 22, 2024, at 10:44 AM, Brian Neradt wrote: > > Hi dev@trafficserver.apache.org, > > We're processing through ACL filter action names for 10.x. For context, for > 9.x and before, these are how actions behave for ip_allow.yaml rules a

[ANNOUNCE] Apache Traffic Server 9.2.5 and 8.1.11 are released

Apache Traffic Server 9.2.5 and 8.1.11 are released The Apache Software Foundation and the Apache Traffic Server (ATS) Project are pleased to announce the release of Apache Traffic Server 9.2.5 and 8.1.11! ATS is a high performance, scalable HTTP Intermediary and proxy cache. It is used by se

Re: [VOTE] Release Apache Traffic Server 9.2.5 (RC0)

I am calling the vote as passing with 4 +1 binding votes. -Bryan > On Jul 23, 2024, at 3:36 PM, Bryan Call wrote: > > I've prepared a release for 9.2.5. The release notes are available at: > > https://github.com/apache/trafficserver/milestone/75?closed=1 &g

Re: [VOTE] Release Apache Traffic Server 8.1.11 (RC0)

I am calling the vote as passing with 4 +1 binding votes. -Bryan > On Jul 23, 2024, at 3:58 PM, Evan Zelkowitz wrote: > > I've prepared a release for 8.1.11. The release notes are available at: > > https://github.com/apache/trafficserver/milestone/76?closed=1 > > > or for a brief

Re: [VOTE] Release Apache Traffic Server 8.1.11 (RC0)

+1 - tested on Fedora 40 -Bryan > On Jul 23, 2024, at 3:58 PM, Evan Zelkowitz wrote: > > I've prepared a release for 8.1.11. The release notes are available at: > > https://github.com/apache/trafficserver/milestone/76?closed=1 > > > or for a brief ChangeLog: > > https://g

Re: [VOTE] Release Apache Traffic Server 9.2.5 (RC0)

+1 - Built and tested on Fedora 40. -Bryan > On Jul 23, 2024, at 3:36 PM, Bryan Call wrote: > > I've prepared a release for 9.2.5. The release notes are available at: > > https://github.com/apache/trafficserver/milestone/75?closed=1 > > > or for a brie

[VOTE] Release Apache Traffic Server 9.2.5 (RC0)

I've prepared a release for 9.2.5. The release notes are available at: https://github.com/apache/trafficserver/milestone/75?closed=1 or for a brief ChangeLog: https://github.com/apache/trafficserver/blob/9.2.x/CHANGELOG-9.2.5 The artifacts are available for download at:

Re: JTest features not working

+1 on removing JTest. We should do this before the 10.0.0 release that is happening next month. -Bryan > On Jun 18, 2024, at 2:41 PM, josiah_vander...@mediacombb.net wrote: > > Hello, > > As reported in [ https://github.com/apache/trafficserver/issues/11455, | > https://github.com/apache/

[ANNOUNCE] Apache Traffic Server Spring Summit 2024

We will be having our next ATS Spring Summit in Denver, CO. Details will be posted on the wiki (link below). Please register if you are going to be attending in person. The dates are as follow: May 7-9, 2024 and our Summit page is available at: https://cwiki.apache.org/confl

[ANNOUNCE] Apache Traffic Server Fall Summit 2024

We will be having our next ATS Spring Summit in Denver, CO. Details will be posted on the wiki (link below). Please register if you are going to be attending in person. The dates are as follow: May 7-9, 2024 and our Summit page is available at: https://cwiki.apache.org/confl

[ANNOUNCE] ATS is vulnerable to a HTTP/2 CONTINUATION frame flooding attack

Description: ATS is vulnerable to a HTTP/2 CONTINUATION frame flooding attack CVE: CVE-2024-31309 - HTTP/2 CONTINUATION frames can be utilized for DoS attack Reported By: Bartek Nowotarski (CVE-2024-31309) Vendor: The Apache Software Foundation Version Affected: ATS 8.0.0 to 8.1.9 ATS 9.0.0 to

[ANNOUNCE] Apache Traffic Server 9.2.4 and 8.1.10 are released

Apache Traffic Server 9.2.4 and 8.1.10 are released The Apache Software Foundation and the Apache Traffic Server (ATS) Project are pleased to announce the release of Apache Traffic Server 9.2.4 and 8.1.10! ATS is a high performance, scalable HTTP Intermediary and proxy cache. It is used by se

Re: [VOTE] Release Apache Traffic Server 9.2.4 (RC0)

I am calling the vote with 3 +1 votes. -Bryan > On Apr 3, 2024, at 8:54 AM, Bryan Call wrote: > > I've prepared a release for 9.2.4. The release notes are available at: > > https://github.com/apache/trafficserver/milestone/69?closed=1 > > or for a brief C

Re: [VOTE] Release Apache Traffic Server 8.1.10 (RC0)

I am calling the vote with 3 +1 votes. -Bryan > On Apr 3, 2024, at 9:03 AM, Evan Zelkowitz wrote: > > I've prepared a release for 8.1.10. The release notes are available at: > > https://github.com/apache/trafficserver/milestone/71?closed=1 > > or for a brief ChangeLog: > >

Re: [VOTE] Release Apache Traffic Server 9.2.4 (RC0)

+1 - Built and tested on Fedora 39. -Bryan > On Apr 3, 2024, at 8:54 AM, Bryan Call wrote: > > I've prepared a release for 9.2.4. The release notes are available at: > > https://github.com/apache/trafficserver/milestone/69?closed=1 > > or for a brief C

Re: [VOTE] Release Apache Traffic Server 8.1.10 (RC0)

+1 - Build and tested on Fedora 39. -Bryan > On Apr 3, 2024, at 9:03 AM, Evan Zelkowitz wrote: > > I've prepared a release for 8.1.10. The release notes are available at: > > https://github.com/apache/trafficserver/milestone/71?closed=1 > > or for a brief ChangeLog: > > ht

[VOTE] Release Apache Traffic Server 9.2.4 (RC0)

I've prepared a release for 9.2.4. The release notes are available at: https://github.com/apache/trafficserver/milestone/69?closed=1 or for a brief ChangeLog: https://github.com/apache/trafficserver/blob/9.2.x/CHANGELOG-9.2.4 The artifacts are available for download at:

Re: [proposal] Remove support for session id based tls session resumption

Following our discussion in today's ATS 10.0.0 stand-up meeting, we've decided to remove support for TLS session IDs in ATS 11.0.0. -Bryan > On Mar 11, 2024, at 3:02 PM, Bryan Call wrote: > > +1 - What ATS version will this be removed in? > > -Bryan > > &g

Re: [proposal] Remove support for session id based tls session resumption

+1 - What ATS version will this be removed in? -Bryan > On Feb 22, 2024, at 7:59 AM, Fei Deng wrote: > > Hi All, > > I'm proposing to remove the support for session id based tls session > resumption. > > I mentioned this during the last hackathon, since the session id based tls > session re

Re: [POLL] - ATS Spring Summit 2024 Dates

I am calling the vote with May 7th and 9th as the winner. We will be have the ATS Spring 2024 Summit in Denver on those dates. -Bryan > On Feb 8, 2024, at 9:50 AM, Bryan Call wrote: > > Please vote on the dates for the ATS Spring Summit in Denver. > > https://forms.gle/en

[POLL] - ATS Spring Summit 2024 Dates

Please vote on the dates for the ATS Spring Summit in Denver. https://forms.gle/enD1cxhX1o75yxkS9 ATS Spring Summit 2024 Dates forms.gle Thank you, -Bryan

Re: [POLL] - ATS Spring Summit 2024 Locations

I am calling the vote with Denver winning and getting an average score of 4.4. Thank you for voting! Details: Denver: 4.4 Austin: 3.5 Bay Area: 2.9 Remote: 2.5 -Bryan > On Jan 29, 2024, at 9:31 AM, Bryan Call wrote: > > Please vote on the proposed locations for the next A

[ANNOUNCE] ATS 10 Hackathon 2/7 and 2/8

There will be an ATS 10 Hackathon on 2/7 and 2/8 from 8am to 12pm PT. Details: ATS 10 Hackathon Wednesday, February 7 · 8:00am – 12:00pm Time zone: America/Los_Angeles Google Meet joining info Video call link: https://meet.google.com/ynf-ewob-ppg Or dial: ‪(US) +1 317-743-0498‬ PIN: ‪169 379 654‬#

[POLL] - ATS Spring Summit 2024 Locations

Please vote on the proposed locations for the next ATS Summit: https://forms.gle/NBhtmBa8MXitadqy8 ATS Spring Summit Location forms.gle Thank you, -Bryan

Re: Minimum OpenSSL version

+1 -Bryan > On Nov 14, 2023, at 12:24 PM, Masakazu Kitajo wrote: > > Hi all, > > At the weekly ATS 10 meeting, the participants agreed to bump the minimum > OpenSSL version we support on ATS 10, and it's going to be 1.1.1. I'm > sending this email to make that an official decision. > > The

[POLL] - ATS 10 Hackathon dates

Please selected the days you are available to attend: https://doodle.com/meeting/participate/id/b8o1Z0ja -Bryan

Re: [ANNOUNCE] Apache Traffic Server Fall Summit 2023

schedule for the summit! -Bryan > On Nov 7, 2023, at 11:02 AM, Bryan Call wrote: > > We are short on talks for the Fall Summit. If you would like to give a talk > there are still openings. Please try to keep the topic user focused. We are > planning on finalizing the sched

Re: I don't often eat crow in public.....

Thank you for the feedback. I was hesitant to switch to cmake myself. However, after using it and noticing how it can speed up development time (compile and install iterations are much faster) I am a convert. configure —help is still a great feature in autotools. I haven’t tried cmake-gui my

Re: [ANNOUNCE] Apache Traffic Server Fall Summit 2023

We are short on talks for the Fall Summit. If you would like to give a talk there are still openings. Please try to keep the topic user focused. We are planning on finalizing the schedule on Thursday morning. Thank you, -Bryan > On Oct 5, 2023, at 4:56 PM, Bryan Call wrote: > >

Re: Vote: Remove autotools build files from the repository (ATS 10)

+1 on removing autotools on master. It won’t be tested on PRs and will break at sometime. -Bryan > On Oct 19, 2023, at 8:35 AM, Chris McFarlen wrote: > > With each CI job now using cmake, the autotools configuration setup will > quickly become unusable. This is a proposal to go ahead and

ATS is vulnerable to a HTTP/2 and s3 auth plugin attacks

Description: ATS is vulnerable to a HTTP/2 and s3 auth plugin attacks CVE: CVE-2023-44487 - HTTP/2 Rapid Reset CVE-2023-41752 - s3_auth plugin exposes AWSAccessKeyId CVE-2023-39456 - Malformed HTTP/2 frames can cause an abort Reported By: Masakazu Kitajo (CVE-2023-41752) Akshat Parikh (CVE-2023-3

Apache Traffic Server 9.2.3 and 8.1.9 are released

Apache Traffic Server 9.2.3 and 8.1.9 are released The Apache Software Foundation and the Apache Traffic Server (ATS) Project are pleased to announce the release of Apache Traffic Server 9.2.3 and 8.1.9! ATS is a high performance, scalable HTTP Intermediary and proxy cache. It is used by sev

Re: [VOTE] Release Apache Trafficserver 8.1.9 (RC0)

I am calling the vote with 3 +1 votes. -Bryan > On Oct 9, 2023, at 12:17 PM, Evan Zelkowitz wrote: > > I've prepared a release for 8.1.9. The release notes are available at: > > > https://github.com/apache/trafficserver/pulls?q=is:closed+is:pr+milestone:8.1.9 > > or for a brief ChangeLog: >

Re: [VOTE] Release Apache Traffic Server 9.2.3 (RC0)

I am calling the vote with 4 +1 votes. -Bryan > On Oct 9, 2023, at 1:58 PM, Bryan Call wrote: > > I've prepared a release for 9.2.3. The release notes are available at: > > https://github.com/apache/trafficserver/milestone/68?closed=1 > > > or for a brie

Re: [VOTE] Release Apache Traffic Server 9.2.3 (RC0)

+1 - built and tested on Fedora 39 -Bryan > On Oct 9, 2023, at 1:58 PM, Bryan Call wrote: > > I've prepared a release for 9.2.3. The release notes are available at: > > https://github.com/apache/trafficserver/milestone/68?closed=1 > > > or for a brie

Re: [VOTE] Release Apache Trafficserver 8.1.9 (RC0)

+1 - built and tested on Fedora 39 -Bryan > On Oct 9, 2023, at 12:17 PM, Evan Zelkowitz wrote: > > I've prepared a release for 8.1.9. The release notes are available at: > > > https://github.com/apache/trafficserver/pulls?q=is:closed+is:pr+milestone:8.1.9 > > or for a brief ChangeLog: > >

[VOTE] Release Apache Traffic Server 9.2.3 (RC0)

I've prepared a release for 9.2.3. The release notes are available at: https://github.com/apache/trafficserver/milestone/68?closed=1 or for a brief ChangeLog: https://github.com/apache/trafficserver/blob/9.2.x/CHANGELOG-9.2.3 The artifacts are available for download at:

[ANNOUNCE] Apache Traffic Server Fall Summit 2023

We will be having our next ATS Fall Summit remote. Details will be posted on the wiki (link below). The dates are as follow: Tuesday 11/14 and Wednesday 11/15 and our Summit page is available at: https://cwiki.apache.org/confluence/display/TS/Fall+2023+Summit This also opens

Re: Slack Invite Request

I had problem with inviting you into our Slack channel. I created a ticket with Apache Infra to look into the issue: https://issues.apache.org/jira/browse/INFRA-24983 -Bryan > On Sep 12, 2023, at 11:32 AM, Kaivan Sanghvi wrote: > > Would someone please invite me to ASF Slack so that I can j

[POLL] Dates for the ATS Fall Summit 2023

We will have the ATS Fall Summit remotely this year. Some companies are restricting travel due to budget reasons. We will have the summit for 2 half days in the morning between 8 to 12 PT. Please vote for the dates that you would be available: https://doodle.com/meeting/organize/id/e5LOVyZd

[ANNOUNCE] Apache Traffic Server is vulnerable to access control, DOS, and cache poison attacks

Description: ATS is vulnerable to access control, DOS, and cache poison attacks CVE (8.1.x and 9.2.x): CVE-2022-47185 - Invalid Range header causes a crash CVE-2023-33934 - Differential Fuzzing for HTTP Request Parsing Discrepancies Reported By: Katsutoshi Ikenoya (CVE-2022-47185) Bahruz Jabiyev,

[ANNOUNCE] Apache Traffic Server 9.2.2 and 8.1.8 are Released

Apache Traffic Server 9.2.2 and 8.1.8 are Released The Apache Software Foundation and the Apache Traffic Server (ATS) Project are pleased to announce the release of Apache Traffic Server 9.2.2 and 8.1.8! ATS is a high performance, scalable HTTP Intermediary and proxy cache. It is used by sev

[ANNOUNCE] Apache Traffic Server 9.2.1 and 8.1.7 are Released

Apache Traffic Server 9.2.2 and 8.1.8 are Released The Apache Software Foundation and the Apache Traffic Server (ATS) Project are pleased to announce the release of Apache Traffic Server 9.2.2 and 8.1.8! ATS is a high performance, scalable HTTP Intermediary and proxy cache. It is used by sev

Re: [VOTE] Release Apache Trafficserver 8.1.8 (RC1)

The vote passes with 3 +1 votes. -Bryan > On Aug 2, 2023, at 11:44 AM, Evan Zelkowitz wrote: > > I've prepared a release for 8.1.8. The release notes are available at: > > > https://github.com/apache/trafficserver/pulls?q=is:closed+is:pr+milestone:8.1.8 > > or for a brief ChangeLog: > >

Re: [VOTE] Release Apache Traffic Server 9.2.2 (RC0)

The vote passes with 5 +1 votes. -Bryan > On Aug 2, 2023, at 10:09 AM, Bryan Call wrote: > > I've prepared a release for 9.2.2. The release notes are available at: > > > https://github.com/apache/trafficserver/pulls?q=is:closed+is:pr+milestone:9.2.2 >

Re: [VOTE] Release Apache Traffic Server 9.2.2 (RC0)

+1 built and tested on Fedora 38 -Bryan > On Aug 2, 2023, at 12:39 PM, Leif Hedstrom wrote: > > +1 > > — Leif > > >> On Aug 2, 2023, at 11:09 AM, Bryan Call wrote: >> >> I've prepared a release for 9.2.2. The release notes are available a

Re: [VOTE] Release Apache Trafficserver 8.1.8 (RC1)

+1 - built and tested on Fedora 38 -Bryan > On Aug 2, 2023, at 11:44 AM, Evan Zelkowitz wrote: > > I've prepared a release for 8.1.8. The release notes are available at: > > > https://github.com/apache/trafficserver/pulls?q=is:closed+is:pr+milestone:8.1.8 > > or for a brief ChangeLog: > >

[VOTE] Release Apache Traffic Server 9.2.2 (RC0)

I've prepared a release for 9.2.2. The release notes are available at: https://github.com/apache/trafficserver/pulls?q=is:closed+is:pr+milestone:9.2.2 or for a brief ChangeLog: https://github.com/apache/trafficserver/blob/9.2.x/CHANGELOG-9.2.2 For some details as to what’s new

[ANNOUNCE] Apache Traffic Server is vulnerable to information disclose and cache poison attacks

Description: ATS is vulnerable to information disclose and cache poison attacks CVE (8.1.x and 9.2.x): CVE-2022-47184 - The TRACE method can be used to disclose network information CVE-2023-30631 - Configuration option to block the PUSH method in ATS didn't work CVE-2023-33933 - s3_auth plugin pr

[ANNOUNCE] Apache Traffic Server 9.2.1 and 8.1.7 are Released

Apache Traffic Server 9.2.1 and 8.1.7 are Released The Apache Software Foundation and the Apache Traffic Server (ATS) Project are pleased to announce the release of Apache Traffic Server 9.2.1 and 8.1.7! ATS is a high performance, scalable HTTP Intermediary and proxy cache. It is used by sev

Re: [VOTE] Release Apache Traffic Server 9.2.1 (RC0)

The vote passes with 3 +1 binding votes and 1 +1 non-binding vote. -Bryan > On Jun 7, 2023, at 4:59 PM, Bryan Call wrote: > > I've prepared a release for 9.2.1. The release notes are available at: > > > https://github.com/apache/trafficserver/pulls?q=is:close

Re: [VOTE] Release Apache Traffic Server 8.1.7 (RC0)

The vote passing with 3 +1 binding votes. -Bryan > On Jun 12, 2023, at 9:07 AM, Evan Zelkowitz wrote: > > +1 > > On Wed, Jun 7, 2023 at 6:12 PM Evan Zelkowitz > wrote: >> I've prepared a release for 8.1.7. The release notes are available at: >> >> >> https:/

Re: [VOTE] Release Apache Traffic Server 9.2.1 (RC0)

+1 tested on Fedora 38 -Bryan > On Jun 7, 2023, at 4:59 PM, Bryan Call wrote: > > I've prepared a release for 9.2.1. The release notes are available at: > > > https://github.com/apache/trafficserver/pulls?q=is:closed+is:pr+milestone:9.2.1 >

Re: [VOTE] Release Apache Traffic Server 8.1.7 (RC0)

+1 tested on Fedora 38 -Bryan > On Jun 7, 2023, at 5:12 PM, Evan Zelkowitz wrote: > > I've prepared a release for 8.1.7. The release notes are available at: > > > https://github.com/apache/trafficserver/pulls?q=is:closed+is:pr+milestone:8.1.7 > > or for a brief ChangeLog: > >

[VOTE] Release Apache Traffic Server 9.2.1 (RC0)

I've prepared a release for 9.2.1. The release notes are available at: https://github.com/apache/trafficserver/pulls?q=is:closed+is:pr+milestone:9.2.1 or for a brief ChangeLog: https://github.com/apache/trafficserver/blob/9.2.x/CHANGELOG-9.2.1 For some details as to what’s new

[ANNOUNCE] ATS 10 Hackathon 6/8/23

We will have an ATS 10 Hackathon next week on June 8th from 8:00am to 12:00pm PDT online. We will be working on changes needed for the ATS 10 release. Wiki with schedule (TBD) and meeting details: https://cwiki.apache.org/confluence/display/TS/ATS+10+Hackathon Here are the details on the meet

[ANNOUNCE] ATS 10 Hackathon 6/8/23

We will have an ATS 10 Hackathon next week on June 8th from 8:00am to 12:00pm PDT online. We will be working on changes needed for the ATS 10 release. Wiki with schedule (TBD) and meeting details: https://cwiki.apache.org/confluence/display/TS/ATS+10+Hackathon Here are the details on the mee

Re: [ANNOUNCE] Apache Traffic Server Summit Spring 2023

The schedule and meeting details have been published on the wiki: https://cwiki.apache.org/confluence/display/TS/Spring+2023+Summit The summit will be more developer focused with meetings on ATS 10 development and other topics. Thank you, -Bryan > On Apr 13, 2023, at 3:28 PM, Br

Re: Feedback on removing AIO_MODE_NATIVE from iocore/aio

It is an experimental feature that isn’t used to my knowledge. I am ok with removing it for 10.x. If it was a supported feature then we should do the deprecation in one major version and then remove it in the next major version process. -Bryan > On Apr 24, 2023, at 9:28 AM, Chris McFarlen wr

[ANNOUNCE] Apache Traffic Server Summit Spring 2023

We will be having our next ATS Spring Summit remote. Details will be posted not he wiki (link below). We will be having discussions about the next major release of ATS (10.0.0) and the features it will include among other topics. The dates are as follow: Tuesday 5/16 and Wednesday 5/1

[POLL] Dates for the ATS Spring Summit 2023

We are going to hole the ATS Spring Summit remotely. Some companies are restricting travel due to budget reasons. We will have the summit for 2 half days in the morning between 8 to 12am. Please vote for the dates that you would be available: https://doodle.com/meeting/participate/id/bqlZrqka

Re: [VOTE] Release Apache Traffic Server 9.2.0 (RC0)

+1, tested on Fedora 37. -Bryan > On Jan 12, 2023, at 11:01 AM, Leif Hedstrom wrote: > > I've prepared a release for 9.2.0 (RC0), which is a minor release for 9.x, > and is still backwards compatible with all previous 9.x releases. This adds > quite a few new features, performance improvemen

[ANNOUNCE] Apache Traffic Server is vulnerable to smuggle, cache poison, and DOS attacks

Description: ATS is vulnerable to smuggle, cache poison, and DOS attacks. CVE (8.1.x and 9.1.x): CVE-2022-32749 - Improperly handled requests can cause crashes in specific plugins CVE-2022-37392 - Improperly reading the client request body CVE (9.1.x): CVE-2022-40743 - Security issues with the x

[ANNOUNCE] Apache Traffic Server 9.1.4 and 8.1.6 are Released

Apache Traffic Server 9.1.4 and 8.1.6 are Released The Apache Software Foundation and the Apache Traffic Server (ATS) Project are pleased to announce the release of Apache Traffic Server 9.1.4 and 8.1.6! ATS is a high performance, scalable HTTP Intermediary and proxy cache. It is used by sever

Re: [VOTE] Release Apache Traffic Server 8.1.6 (RC0)

rote: > > +1 - tested on Ubuntu 20, checksums, build, checks > > On Thu, Dec 15, 2022 at 10:11 AM Bryan Call wrote: > >> +1 - tested on Fedora 37. Tested checksums, build, unit tests, and >> regression tests. >> >> -Bryan >> >>> On Dec

Re: [VOTE] Release Apache Traffic Server 9.1.4 (RC0)

I am calling the vote with 4 +1 votes. We will publish the final release today. -Bryan > On Dec 14, 2022, at 10:54 AM, Bryan Call wrote: > > I've prepared a release for 9.1.4. The release notes are available at: > > > https://github.com/apache/trafficserver/

Re: [VOTE] Release Apache Traffic Server 8.1.6 (RC0)

+1 - tested on Fedora 37. Tested checksums, build, unit tests, and regression tests. -Bryan > On Dec 14, 2022, at 11:09 AM, Evan Zelkowitz wrote: > > I've prepared a release for 8.1.6. The release notes are available at: > > > https://github.com/apache/trafficserver/pulls?q=is:closed+is:pr

Re: [VOTE] Release Apache Traffic Server 9.1.4 (RC0)

+1 - tested on Fedora 37. Tested checksums, build, unit tests, and regression tests. -Bryan > On Dec 14, 2022, at 10:54 AM, Bryan Call wrote: > > I've prepared a release for 9.1.4. The release notes are available at: > > > https://github.com/apache/traffics

[VOTE] Release Apache Traffic Server 9.1.4 (RC0)

I've prepared a release for 9.1.4. The release notes are available at: https://github.com/apache/trafficserver/pulls?q=is:closed+is:pr+milestone:9.1.4 or for a brief ChangeLog: https://github.com

Re: [ANNOUNCE] Apache Traffic Server Summit Fall 2022

: https://cwiki.apache.org/confluence/display/TS/Fall+2022+Summit -Bryan > On Nov 9, 2022, at 9:21 AM, Bryan Call wrote: > > I posted the schedule on the wiki. If you submitted a talk please verify > that the seclude works for you and that your talk is shown on the schedule. &g

Re: [ANNOUNCE] Apache Traffic Server Summit Fall 2022

of us are staying is also on the wiki. https://cwiki.apache.org/confluence/display/TS/Fall+2022+Summit Thank you, -Bryan > On Sep 26, 2022, at 8:57 PM, Bryan Call wrote: > > Mark the calendar! We’re having our next ATS Summit in Mountain View, CA. > LinkedIn has graciously off

[ANNOUNCE] Apache Traffic Server Summit Fall 2022

Mark the calendar! We’re having our next ATS Summit in Mountain View, CA. LinkedIn has graciously offered to host the event at their office. The dates are as follow: Tuesday 12/6 and Wednesday 12/7 2020 - Summit Thursday 12/8 2029 - Hackathon and our Summit page is available

[POLL] Dates for the ATS Fall Summit

We are going to hold the ATS Fall Summit in the Bay Area in person and remote for those that can’t travel to it. LinkedIn has graciously accepted to host our ATS Fall Summit. Please select the days you can make it and if you can attend in person or not. https://forms.gle/5QCAJheGwqhskC9Z8

ANNOUNCE] Apache Traffic Server is vulnerable to smuggle attack

There was a CVE missing in the announcement yesterday and it is also covered in the 8.1.5 and 9.1.3 releases. Description: ATS is vulnerable to smuggle attacks CVE (8.1.x and 9.1.x): CVE-2022-31779 Improper HTTP/2 scheme and method validation Reported By: Tony Regins (CVE-2022-31779) Vendor: T

ANNOUNCE] Apache Traffic Server is vulnerable to smuggle, cache poison, and possible authorization attacks

Description: ATS is vulnerable to smuggle, cache poison, and possible authorization attacks. CVE (8.1.x and 9.1.x): CVE-2021-37150 Protocol vs scheme mismatch CVE-2022-25763 Improper input validation on HTTP/2 headers CVE-2022-28129 Insufficient Validation of HTTP/1.x Headers CVE-2022-31780 HTTP/

[ANNOUNCE] Apache Traffic Server v9.1.3 is Released!

Apache Traffic Server v9.1.3 Released The Apache Software Foundation and the Apache Traffic Server (ATS) project are pleased to announce the release of Apache Traffic Server v9.1.3! ATS is a high performance, scalable HTTP Intermediary and proxy cache. It is used by several large internet servi

[VOTE] Release Apache Traffic Server 9.1.3 (RC0)

I've prepared a release for 9.1.3. The release notes are available at: https://github.com/apache/trafficserver/pulls?q=is:closed+is:pr+milestone:9.1.3 or for a brief ChangeLog: https://github.com

Re: [ANNOUNCE] Apache Traffic Server Sping 2022 Summit Schedule

<https://tel.meet/pfd-ptzc-eoo?pin=1978018546005> -Bryan > On May 12, 2022, at 2:11 PM, Bryan Call wrote: > > Based on the talk proposals the ATS Spring Summit will be developer focused. > We going to have a couple developer focused presentations and group > discussions on are

[ANNOUNCE] Apache Traffic Server Sping 2022 Summit Schedule

Based on the talk proposals the ATS Spring Summit will be developer focused. We going to have a couple developer focused presentations and group discussions on areas of ATS where development work needs to be done. The time also change to be between 9:00 to 12:00 PDT. Here is the schedule for

[ANNOUNCE] Apache Traffic Server Sping 2022 Summit

We will have the ATS Summit remotely this time. Offices are just opening up and it is not feasible at this time to have it in person. Some companies will be getting together at their own offices and joining the meeting. The dates are as follow: May 24-25th, 2022 (8:00 PDT to 12:00 PDT

Re: [POLL] Dates for the ATS Spring Summit in the Bay Area

There is a bug with the original Doodle and I had to recreate a new one: https://doodle.com/meeting/participate/id/dPNmLQza -Bryan -- Original Message -- From "Bryan Call" To dev@trafficserver.apache.org; us...@trafficserver.apache.org Date 4/6/2022 4:48:02 AM Subject [P

[POLL] Dates for the ATS Spring Summit in the Bay Area

We are planning on having the ATS Spring Summit in the Bay Area this year (in person). Please vote on the dates that you will be available if you plan on attending. The two options are the week of 5/16 or the week of 5/23. We will have the summit on Tuesday and Wednesday and a hackathon on T

[ANNOUNCE] Apache Traffic Server is vulnerable to potential smuggle and MITM attacks

Description: ATS is vulnerable to potential smuggle and MITM attacks CVE (8.1.x and 9.1.x): CVE-2021-44040 HTTP request line fuzzing attacks CVE (8.1.x): CVE-2021-44759 Improper authentication vulnerability in TLS origin verification Reported By: Bahruz Jabiyev, Steven Sprecher and Kaan Onarl

Re[2]: [VOTE] Release Apache Traffic Server 8.1.4 (RC0)

+1 - Tested on Fedora 35 -- Original Message -- From "Eddie ZT" To dev@trafficserver.apache.org Cc "Users" ; "Evan Zelkowitz" Date 3/21/2022 10:25:36 AM Subject Re: [VOTE] Release Apache Traffic Server 8.1.4 (RC0) How can I unsubscribe from this list? Thanks Sent from my iPhone

Re: [VOTE] Release Apache Traffic Server 9.1.2 (RC1)

+1 - Tested on Fedora 35 -Bryan > On Feb 28, 2022, at 4:47 PM, Leif Hedstrom wrote: > > I've prepared a release for 9.1.2 (RC1), which is a bug fix release for 9.1.x > and is backwards compatible. This adds a few fixes that was proposed after > the first RC0 candidate. For a list of all PRs

Monday PR and issue scrub at 4pm PT

I am going on vacation and won’t be back until 1/3/22. Brian Neradt will be hosting the meetings while I am gone. There will not be a PR and issue scrub meeting on 12/27/21. Happy Holidays! -Bryan

  1   2   3   4   5   6   7   8   9   >