cb436f0a0e
fileserver: Fix tests on Windows
2026-02-20 11:46:45 -07:00
a1081194bf
Merge commit from fork
...
Necessary as otherwise the early-bail in `until =
strings.IndexByte(remaining, nextCh) ... if until == -1` can cause a
case-insensitive mismatch
Co-authored-by: Asim Viladi Oglu Manizada <manizada@users.noreply.github.com>
2026-02-20 10:54:50 -07:00
eec32a0bb5
Merge commit from fork
...
Normalize exact hosts at provisioning and reqHost in the fast path so case-different Host variants can’t bypass host-gated routes.
Co-authored-by: Asim Viladi Oglu Manizada <manizada@users.noreply.github.com>
2026-02-20 10:19:42 -07:00
a2825c5dd9
fileserver: Replace \ with \\ in file matcher paths
2026-02-19 13:18:14 -07:00
95941a71e8
chore: Add nolints to work around haywire linters ( #7493 )
...
* chore: Add nolints to work around haywire linters
* More lint wrangling
2026-02-17 16:52:54 -07:00
bdcdaf77ba
encode: Implement Flush for legacy compatibility
...
(By sponsor request)
2026-02-16 15:59:10 -07:00
68d50020ee
refactor: use strings.Builder to improve performance ( #7364 )
...
* refactor: use strings.Builder to improve performance
Signed-off-by: zjumathcode <pai314159@2980.com>
* refactor: small builder improvements per review (WriteByte / split writes)
also revert builder change in client_test.go
refactor(logging): build IP mask output via join of parts (more efficient)
---------
Signed-off-by: zjumathcode <pai314159@2980.com>
Co-authored-by: Francis Lavoie <lavofr@gmail.com>
2026-02-16 19:30:44 +00:00
23d07ac89d
dep: upgrade cel-go ( #7478 )
...
* dep: upgrade cel-go
Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>
* Try handling `map[any]any`, fix error messages
---------
Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>
Co-authored-by: Francis Lavoie <lavofr@gmail.com>
2026-02-16 18:25:49 +00:00
d64c7e67a4
caddyhttp: Option to disable 0-RTT ( #7485 )
2026-02-16 10:20:47 -07:00
47f3e8f8dc
use math/rand/v2 instead of math/rand ( #7413 )
2026-02-11 09:15:51 -07:00
03e6e439dd
reverseproxy: fix X-Forwarded-* headers for Unix socket requests ( #7463 )
...
When a request arrives via a Unix domain socket (RemoteAddr == "@"),
net.SplitHostPort fails, causing addForwardedHeaders to strip all
X-Forwarded-* headers even when the connection is trusted via
trusted_proxies_unix.
Handle Unix socket connections before parsing RemoteAddr: if untrusted,
strip headers for security; if trusted, let clientIP remain empty (no
peer IP for a Unix socket hop) and fall through to the shared header
logic, preserving the existing XFF chain without appending a spurious
entry.
Amp-Thread-ID: https://ampcode.com/threads/T-019c4225-a0ad-7283-ac56-e2c01eae1103
Co-authored-by: Amp <amp@ampcode.com>
2026-02-10 13:00:20 -07:00
7c28c0c07a
Merge commit from fork
...
* fix: FastCGI split SCRIPT_NAME/PATH_INFO confusion
* fix comment
2026-02-10 11:52:36 -07:00
1f43e8566b
caddyhttp: Use case-insensitive comparison for large Host lists
2026-02-09 14:18:55 -07:00
bd374ca9d7
caddyhttp: Lowercase comparison when matching with escape sequence
2026-02-09 13:12:00 -07:00
2ae0f7af69
reverseproxy: Set `Host` to `{upstream_hostport}` automatically if TLS ( #7454 )
2026-02-09 13:06:19 -07:00
3bb22672f9
reverseproxy: Customizable dial network for SRV upstreams
...
By request of a sponsor
2026-02-02 11:25:51 -07:00
7d24124430
caddyhttp: Reject invalid Host header ( fix #7449 )
2026-01-30 12:24:16 -07:00
565c1c3054
autohttps: deterministic logic and strict bind checking on Linux ( #7435 )
...
* http: fix non-deterministic auto-https and improve Linux bind matching
* docs: restore historical context about Linux bind behavior
2026-01-16 08:51:23 -07:00
e40bd019ff
caddyfile: add `observe_catchall_hosts` option ( #7434 )
...
* caddyfile: add `observe_catchall_hosts` option
Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>
* correct JSON field name and doc comment
Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>
---------
Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>
2026-01-14 00:06:16 +00:00
62134d65af
reverseproxy: fix error when remote address is not an IP ( #7429 )
2026-01-13 19:52:56 +00:00
90972fbebc
chore: Dumb `prealloc` lint fix ( #7430 )
2026-01-13 14:13:43 -05:00
6a57142896
headers: Make ApplyTo nil-safe ( #7426 )
2026-01-06 17:39:58 -05:00
80f2ae92cd
reverseproxy: make error chan bigger when reverse proxying websocket ( #7419 )
2026-01-06 04:55:47 -05:00
1f1be3f4fe
tracing: Add span attributes to tracing module ( #7269 )
...
* WIP tracing span attributes
* better test
* only write attributes after other middleware (and request)
* Fix test to use header response placeholders
2025-12-31 11:33:18 -07:00
decc8a4d6f
logging: `log_append` Early option, Supports `{http.response.body}` ( #7368 )
...
* logging: `log_append` early option
* logging: `log_append` supports `{http.response.body}`
* Convenience auto-early for request body
2025-12-16 23:42:42 -05:00
4037d05760
caddyhttp: {http.request.body_base64} placeholder ( #7367 )
2025-12-13 21:01:12 -07:00
6e0cbd0fa0
caddyhttp: create a placeholder for and log ech status ( #7328 )
...
Co-authored-by: Francis Lavoie <lavofr@gmail.com>
2025-12-07 16:01:58 +00:00
bfdb04912d
docs: add maybe template function documentation ( #7388 )
2025-12-06 06:51:28 -05:00
31960dc998
Introduce packet conn wrappers ( #7180 )
...
* packet_conn_wrappers: Initial changes
* packet_conn_wrappers: Unwrap a packet conn only if there are no wrappers
---------
Co-authored-by: Matt Holt <mholt@users.noreply.github.com>
2025-12-04 14:15:56 -07:00
be5f49fbeb
caddyhttp: Fix logging on wildcard sites when SkipUnmappedHosts is true ( #7372 )
2025-12-03 18:46:11 +00:00
67a9e0657e
reverseproxy: Fix retries for requests with bodies ( #7360 )
...
* capture the buffered body once, then reset clonedReq.Body before each retry
* no copy
* keep receiver name
* set the buf to nil after extraction and only return it to pool if not nil
---------
Co-authored-by: WeidiDeng <weidi_deng@icloud.com>
2025-11-24 12:03:18 -07:00
2cb426776c
encode: modernize, replace HasSuffix+TrimSuffix with CutSuffix ( #7357 )
...
Signed-off-by: ledigang <shuangcui@msn.com>
2025-11-21 15:30:26 -07:00
a6da1acdc8
reverse_proxy: use interfaces to modify the behaviors of the transports ( #7353 )
2025-11-17 09:51:37 -07:00
b3f2db233b
core: custom slog handlers for modules (log contextual data) ( #7346 )
2025-11-12 13:29:47 -07:00
f2199d48b2
chore: update quic-go to v0.56.0, enable qlog for HTTP/3 ( #7345 )
2025-11-08 00:41:15 -05:00
8285eba842
caddyhttp: allow customizing the Server header ( #7338 )
2025-11-03 21:00:27 -07:00
895b56063a
chore: fix golangci-lint error G602 in caddyhttp ( #7334 )
2025-11-03 03:04:55 +00:00
abe0acabb6
reverseproxy: set default values for keepalive if only some of them are set ( #7318 )
2025-10-25 05:15:55 -04:00
b54e870b26
tracing: switch to autoexport for OpenTelemetry span exporter ( #7317 )
2025-10-23 17:54:50 -06:00
57587ed18e
refactor: use reflect.TypeFor ( #7313 )
...
Signed-off-by: wyrapeseed <wyrapeseed@outlook.com>
2025-10-21 13:26:30 -06:00
1e21b660c4
reverseproxy: use http.Protocols to handle h2c requests ( #6990 )
2025-10-21 16:05:43 +00:00
595aab8bc0
metrics: resolve per-host inifinite cardinality ( #7306 )
2025-10-21 06:06:56 +00:00
8aca108d2c
reverseproxy: do not disable keepalive if proxy protocol is used ( #7300 )
2025-10-21 05:09:37 +00:00
a7885aabec
intercept: use already buffered response if possible when intercepting ( #7028 )
2025-10-21 04:48:07 +00:00
1ce2a13ad1
caddyhttp: wrap accepted connection to suppress tls.ConnectionState ( #7247 )
2025-10-16 03:13:40 +00:00
d7185fd002
caddyhttp: Add `trusted_proxies_unix` for trusting unix socket `X-Forwarded-*` headers ( #7265 )
2025-10-16 02:47:32 +00:00
7fb39ec1e5
reverseproxy: Use http1.1 upgrade for websocket for extended connect of http2 and http3 ( #7305 )
...
Co-authored-by: WeidiDeng <weidi_deng@icloud.com>
2025-10-16 02:20:20 +00:00
d115cd1042
chore: fix some comments ( #7303 )
2025-10-15 03:58:53 +00:00
de6b78009b
caddyhttp: Add server options `keepalive_idle` and `keepalive_count` ( #7298 )
...
* Add Server options KeepAliveIdle (keepalive_idle) and KeepAliveCount (keepalive_count)
Signed-off-by: Joshua McBeth <joshua.mcbeth@gmail.com>
* Add Server option KeepAliveDisable (keepalive_disable)
Signed-off-by: Joshua McBeth <joshua.mcbeth@gmail.com>
* Remove Server option KeepAliveDisable (keepalive_disable), disable when interval is negative
Signed-off-by: Joshua McBeth <joshua.mcbeth@gmail.com>
* Add keepalive parameters to caddyfiletest
Signed-off-by: Joshua McBeth <joshua.mcbeth@gmail.com>
---------
Signed-off-by: Joshua McBeth <joshua.mcbeth@gmail.com>
2025-10-14 12:03:23 -06:00
2ec28bca43
reverse_proxy: use http1 for outbound tls requests with placeholder that are likely websockets ( #7296 )
2025-10-09 10:36:49 -06:00
Matthew Holt
Asim Viladi Oglu Manizada
zjumathcode
Mohammed Al Sahaf
Francis Lavoie
WeidiDeng
XYenon
Kévin Dunglas
Paulo Henrique
Tom Paulus
Felix Hildén
Steffen Busch
vnxme
Petr
ledigang
Marten Seemann
Cooper de Nicola
Philipp Keidel
wyrapeseed
Chris Seufert
Anthony Biondo
joshuamcbeth