v2.9.0

版本发布时间: 2025-01-01 01:34:20

caddyserver/caddy最新发布版本:v2.9.1(2025-01-08 23:22:53)

Happy New Year! We're pleased to release Caddy 2.9. Aside from some minor new features, this release is mainly focused on refinements and bug fixes in many areas, including:

Config loading
Events
Logging
Placeholders
Reverse proxy and HTTP server performance
Matchers
HTTP (esp. HTTP/3)
Metrics (per-host metrics)
Security
TLS automation & ACME ARI

We realize there is extensive interest in Encrypted Client Hello (ECH) and post-quantum ciphers. These are slated to be supported in Go 1.24, which is scheduled for a stable release in approximately February. We did not want to force users to go through the inconvenience of installing pre-release, non-stock installations of Go, even though the RCs are quite stable and production-ready, in order to even compile Caddy, which is quite common given our plugin ecosystem. We anticipate a Caddy 2.10 release in the near future with these capabilities, built on Go 1.24.

We hope you will enjoy the 2.9 release. Thanks to all contributors, bug reporters, and helpers, and those organizations which deployed pre-release versions to production to help verify patches and features.

Changelog

ef4e0224a8495fc29847d865087febdee8736e3b caddyfile: Fix comma edgecase in address parsing (#6616)
b116dcea3d022cd2b060a978c499ac17e5d0a2e1 caddyhttp: Add {?query} placeholder (#6714)
c216cf551dcbd2de1da1b9fe8a7e179b76827753 caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
197c564f2032becba14aeec0152fe5eeb639d6c1 caddyhttp: Set default ReadHeaderTimeout (1 min)
09b2cbcf4d839adec91b189fea549d64a69e0595 caddyhttp: Add MatchWithError to replace SetVar hack (#6596)
c6f2979986d87d7236b132c687c8887c92248dd8 caddyhttp: Close http3 server gracefully (#6213)
88fd5f3491ab888f69f0be02cea68a49164298eb caddyhttp: Use internal issuer for IPs when no APs configured
5c8dc344181c49bc7feade4a293bb4eed882b838 caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
d7564d632fbed209e81978c5c2c529a7bf1836f7 caddytls: Drop rate_limit and burst, has been deprecated (#6611)
d398898b352a6a7e8ac5c24da01dd948fc334d77 cmd: Allow add-package to select version of package (#6665)
66c80caf236e2d98e61bf1bc8bb062d7b8c25430 cmd: Disable go1.23 tlskyber=1 experiment
fb72793269d419b2b37b5f1db8141c63818be514 cmd: Reject multiple configs for fmt command (#6717)
b3ce260389a88a35c9b0e0a19a93abfe92fb6e9f cmd: ignore missing keys during storage export (#6697)
0182fb87fa7276463086c2360431a1c0dc797edf core: addresses.go funcs renames (#6622)
e76405d55058b0a3e5ba222b44b5ef00516116aa core: Change ListenerFunc signature (#6651)
315715e90ffa25c4ad0d8a96e828dbdf6f638583 core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
d0e209e1da6cd6d7d61e83b851f2913ee31454f8 encode: good defaults (#6737)
5ba1e06fd661aac2cbaab6d4a2ef63a9eb877a46 encode: try to use sendfile when compression is not used (#6749)
bcaa8aaf114629031d10dcef0ca7680ae8163e32 encode: write status immediate for success response for CONNECT requests (#6738)
1d156527ea8fef0a96faa54d7ff61244e4be4094 events: Use WithLazy to prevent eager serialization of the event data (#6671)
6790c0e38abcc534c4b3365b6e438148001fd6df fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
eddbccd298f637c4785c891f5f96dbf103580fa8 fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
efd9251ad38a4fd9f7d900445400ac3c8e564c28 fileserver: Add first_exist_fallback strategy for try_files (#6699)
d0123bd760f6c140f3b935159a55ba64899c84f8 fileserver: Fix policy Validate() oversight (#6727)
290cfea08f2486fb86dbc11eec96d79751180eda fileserver: add a test for precompressed defaults (#6743)
5c2617ebf9303100fc8c6be2a80b966b2c7fb7f1 fileserver: good default for precompressed (#6736)
cc23ad6402e6dace30b04f0d9113530a4d9541a9 fileserver: Add file_limit option for browse (to be experimental) (#6648)
350ad38f63f7a49ceb3821c58d689b85a27ec4e5 fileserver: Fix Caddyfile parsing
9753c4451077d4459ec10cb3df27ab9dc4456290 fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
05cfb121ec3f214c0e45206c188f34bad4d4eb8c forwardauth: Skip copying missing response headers (#6608)
ed1c594cdbddf89829eaf1174f414028577b432d go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
3f3f8b3d5270add46d5fc7d99bdcc705ad2d5df4 go.mod: Upgrade CertMagic to v0.21.5
91e34139a17b8914a62669b275084b5d225e0624 go.mod: upgrade only some otel deps (#6676)
22b9d512687cdcfbf0c574a645fcf0edd23a584f go.mod: Upgrade quic-go to 0.48.2
b129ed6be88e40667a843bfab74abb3e5239bc8f httpcaddyfile: Fixes for prefer_wildcard mode (#6636)
afa778ae05503f563af0d1015cdf7e5e78b1eeec httpcaddyfile: Implement experimental force_automate option (#6712)
b183aec83c2d467706583ad9ea0e4e9c56077c55 httpcaddyfile: Implement log sampling config (#6682)
1d106fa14d7bc150acb1107ea7d034d669f9f80d metrics: add go and process collectors (#6704)
388c7e898c6cbcddd2c59e8a902238a0b4f06857 metrics: move metrics up, outside servers (#6606)
8c3dd3de709040d72bd98a756a044c453d7e871e requestbody: Type-based error handling for MaxBytesError (#6701)
5e6024c48da68492761837af3806be1951fa4c24 reverseproxy: Fix log message
48ce47f1d44da485fbbf6be536a0e3822763f313 reverseproxy: Use correct cases for websocket related headers (#6621)
825fe48e0654dc6e4e065df364a51ea79488e44b reverseproxy: Allow 0 as weights for weighted_round_robin (#6681)
328fb614f0e9996b184f41d59b7092c21dd9c712 reverseproxy: Only handle websocket protocol (#6740)
238f1108e6600049d9041abc88db24526ee4f882 reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
9c0c71e5774593e15a555d5c88de0af011e46394 reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
c864b82ae13f9dc920ebd8782fe7c5b7007a3e1b reverseproxy: Set Content-Length when body is fully buffered (#6638)
fbf0f4c425b23c39dbddd975d36df506cca5f45b reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
5823eccf99d9fc6b4ffba8a78acfdb59c4ec0c97 rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
b443190b66055089d1e112abc992512ca4f6bfba sigtrap: always ignore SIGPIPE (#6645)
f2c17d1f3fc4d9ad6324e05bab0c29aafb23e2e1 testing: sort force-automated hosts (#6756)
669fc41e6321115df554d5f7d8eb55fdfbdaab18 tracing: Add spanID field to access logs and http.vars.span_id placeholder (#6646)

What's Changed

Make it possible to configure the DisableStorageCheck setting for certmagic by @ankon in https://github.com/caddyserver/caddy/pull/6368
caddyhttp: Add test case to corpus by @mholt in https://github.com/caddyserver/caddy/pull/6374
cmd: remove zealous check of Caddyfile auto-detection by @mohammed90 in https://github.com/caddyserver/caddy/pull/6370
ci: upgrade to goreleaser v2 by @mohammed90 in https://github.com/caddyserver/caddy/pull/6376
logging: Allow setting log file permissions by @ririsoft in https://github.com/caddyserver/caddy/pull/6314
Split run into a public BuildContext and a private part by @ankon in https://github.com/caddyserver/caddy/pull/6378
Write the header if none had been written in WriteResponse by @ankon in https://github.com/caddyserver/caddy/pull/6380
fix file mode configuration parsing by @ririsoft in https://github.com/caddyserver/caddy/pull/6383
go.mod: update tscert package by @willnorris in https://github.com/caddyserver/caddy/pull/6384
logging: Customizable zapcore.Core by @kkroo in https://github.com/caddyserver/caddy/pull/6381
logging: set file mode when the file already exist. by @ririsoft in https://github.com/caddyserver/caddy/pull/6391
caddyfile: Pass blocks to import for snippets by @elee1766 in https://github.com/caddyserver/caddy/pull/6130
reverseproxy: add Max-Age option to sticky cookie by @JasonYuan869 in https://github.com/caddyserver/caddy/pull/6398
fileserver: Remove newline characters from precomputed etags by @armadi1809 in https://github.com/caddyserver/caddy/pull/6394
fix: http.intercept.header.* placeholders by @dunglas in https://github.com/caddyserver/caddy/pull/6429
reverseproxy: Only log host is up status on change by @klaxa in https://github.com/caddyserver/caddy/pull/6419
fix: don't compress already compressed fonts by @dunglas in https://github.com/caddyserver/caddy/pull/6432
caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying by @mholt in https://github.com/caddyserver/caddy/pull/6427
reverseproxy: Add placeholder for host in active health check headers by @francislavoie in https://github.com/caddyserver/caddy/pull/6440
browse: add Content-Security-Policy w/ nonce by @steffenbusch in https://github.com/caddyserver/caddy/pull/6425
browse: fix Content-Security-Policy warnings in Firefox by @steffenbusch in https://github.com/caddyserver/caddy/pull/6443
fileserver: Exclude symlink target size from total, show arrow on size by @francislavoie in https://github.com/caddyserver/caddy/pull/6412
reverseproxy: Fix dynamic upstreams ip version by @armadi1809 in https://github.com/caddyserver/caddy/pull/6448
reverseproxy: Add placeholder for networkAddr in active health check headers by @dylanschultzie in https://github.com/caddyserver/caddy/pull/6450
Add option to set which HTTP method to use for active health checks by @jbro in https://github.com/caddyserver/caddy/pull/6453
reverseproxy: Caddyfile support for health_method by @jbro in https://github.com/caddyserver/caddy/pull/6454
reverseproxy: add health_upstream subdirective by @dylanschultzie in https://github.com/caddyserver/caddy/pull/6451
ci: correct -tags nobadger on binary build by @girlbossceo in https://github.com/caddyserver/caddy/pull/6470
Caddyfile support for TLS handshake matchers by @vnxme in https://github.com/caddyserver/caddy/pull/6461
Caddyfile support for TLS connection and certificate selection policies by @vnxme in https://github.com/caddyserver/caddy/pull/6462
chore: update golangci config by @mohammed90 in https://github.com/caddyserver/caddy/pull/6479
encode: flush already compressed data to the stream by @WeidiDeng in https://github.com/caddyserver/caddy/pull/6471
proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol by @pi-prakhar in https://github.com/caddyserver/caddy/pull/6485
fileserver: add sort options by @lollipopkit in https://github.com/caddyserver/caddy/pull/6468
go.mod: update quic-go package by @WeidiDeng in https://github.com/caddyserver/caddy/pull/6498
Runtime placeholders for selected TLS and HTTP matchers by @vnxme in https://github.com/caddyserver/caddy/pull/6480
replacer: {file.*} global placeholder strips trailing newline by @steffenbusch in https://github.com/caddyserver/caddy/pull/6411
go.mod: update update golang/x/net by @WeidiDeng in https://github.com/caddyserver/caddy/pull/6500
reverse_proxy: apply keep-alive setting for h2c requests by @WeidiDeng in https://github.com/caddyserver/caddy/pull/6343
Fix a regression in #6480: the context may have no replacer by @vnxme in https://github.com/caddyserver/caddy/pull/6510
caddyhttp: Export PrivateRangesCIDR() for plugins after #6480 by @vnxme in https://github.com/caddyserver/caddy/pull/6514
ignore exec.ErrDot when starting caddy in background by @WeidiDeng in https://github.com/caddyserver/caddy/pull/6512
ci: don't exit early on error in remote CI machine by @mohammed90 in https://github.com/caddyserver/caddy/pull/6519
reverseproxy: Active health checks request body option by @jbro in https://github.com/caddyserver/caddy/pull/6520
reverseproxy: Change logs for write errors to warn level by @jum in https://github.com/caddyserver/caddy/pull/6532
cmd: Use a factory to create the caddy root command by @elee1766 in https://github.com/caddyserver/caddy/pull/6533
chore: Fix a typo by @sunnyagain in https://github.com/caddyserver/caddy/pull/6534
error: run error (msg) through replacer by @mohammed90 in https://github.com/caddyserver/caddy/pull/6536
reverseproxy: allow user to define source address by @mohammed90 in https://github.com/caddyserver/caddy/pull/6504
chore: build and test with Go 1.23 by @dunglas in https://github.com/caddyserver/caddy/pull/6526
tls: use Go default kex for the moment that include PQC by @bwesterb in https://github.com/caddyserver/caddy/pull/6542
ci: prepare syso files for windows embedding in release by @WeidiDeng in https://github.com/caddyserver/caddy/pull/6406
Performance: Prevents the zap logger from serializing the request in rewrite.go. by @AlliBalliBaba in https://github.com/caddyserver/caddy/pull/6541
fileserver: move sort to browse by @lollipopkit in https://github.com/caddyserver/caddy/pull/6502
reverse_proxy: add placeholder http.reverse_proxy.retries by @steffenbusch in https://github.com/caddyserver/caddy/pull/6553
fix(#6551): Unexpected behaviour if caddyhttp.Route is provisioned twice by @jbro in https://github.com/caddyserver/caddy/pull/6558
caddytls: Add sni_regexp matcher by @vnxme in https://github.com/caddyserver/caddy/pull/6569
rewrite: Avoid panic on bad arg count for uri by @mister-turtle in https://github.com/caddyserver/caddy/pull/6571
perf: use zap's Check() to prevent useless allocs by @dunglas in https://github.com/caddyserver/caddy/pull/6560
ci: update the linter action version by @mohammed90 in https://github.com/caddyserver/caddy/pull/6575
update quic-go to v0.47.0 by @marten-seemann in https://github.com/caddyserver/caddy/pull/6582
quic: enable qlog, controlled by QLOGDIR env by @marten-seemann in https://github.com/caddyserver/caddy/pull/6581
caddytls: Give a better error message when given encrypted private keys by @francislavoie in https://github.com/caddyserver/caddy/pull/6591
chore: Use slices package where possible by @francislavoie in https://github.com/caddyserver/caddy/pull/6585
caddyhttp: Optimize logs using zap's WithLazy() by @AlliBalliBaba in https://github.com/caddyserver/caddy/pull/6590
doc: remove docs of deprecated directives by @mohammed90 in https://github.com/caddyserver/caddy/pull/6566
Implement issue #6296 passing FDs / socket activation by @MayCXC in https://github.com/caddyserver/caddy/pull/6573
caddyhttp: Fix listener wrapper regression from #6573 by @MayCXC in https://github.com/caddyserver/caddy/pull/6599
chore: Adjust incorrect reverse_proxy Caddyfile comment by @francislavoie in https://github.com/caddyserver/caddy/pull/6598
http: ReponseWriter prefer ReadFrom if available by @WeidiDeng in https://github.com/caddyserver/caddy/pull/6565
caddytls: Support new tls.context module by @mholt in https://github.com/caddyserver/caddy/pull/6369
Better errors when reloading by @mholt in https://github.com/caddyserver/caddy/pull/6601
caddyhttp: Escaping placeholders in CEL, add vars and vars_regexp by @francislavoie in https://github.com/caddyserver/caddy/pull/6594
autohttps: Implement auto_https prefer_wildcard option by @francislavoie in https://github.com/caddyserver/caddy/pull/6146
metrics: scope metrics to active config, add optional per-host metrics by @mohammed90 in https://github.com/caddyserver/caddy/pull/6531
ci: install xcaddy to fix release flow by @mohammed90 in https://github.com/caddyserver/caddy/pull/6602
caddytls: Drop rate_limit and burst, has been deprecated by @francislavoie in https://github.com/caddyserver/caddy/pull/6611
tests: Fix adapt test warning by @mohammed90 in https://github.com/caddyserver/caddy/pull/6619
docs: expand proxy protocol docs by @mohammed90 in https://github.com/caddyserver/caddy/pull/6620
caddyfile: Fix comma edgecase in address parsing by @francislavoie in https://github.com/caddyserver/caddy/pull/6616
reverseproxy: Use correct cases for websocket related headers by @WeidiDeng in https://github.com/caddyserver/caddy/pull/6621
chore: update quic-go to v0.48.0 by @marten-seemann in https://github.com/caddyserver/caddy/pull/6627
caddyhttp: Close http3 server gracefully by @WeidiDeng in https://github.com/caddyserver/caddy/pull/6213
metrics: move metrics up, outside servers by @mohammed90 in https://github.com/caddyserver/caddy/pull/6606
fix: always ignore SIGPIPE by @dunglas in https://github.com/caddyserver/caddy/pull/6645
fileserver: fix try_policy when instantiating file matcher from CEL by @effleurager in https://github.com/caddyserver/caddy/pull/6624
chore: fix some function names in comment by @davidwoood in https://github.com/caddyserver/caddy/pull/6650
core: addresses.go funcs renames by @MayCXC in https://github.com/caddyserver/caddy/pull/6622
tracing: Add spanID field to access logs and http.vars.span_id placeholder by @YifanYang6 in https://github.com/caddyserver/caddy/pull/6646
reverseproxy: Sync changes from stdlib for 1xx handling by @francislavoie in https://github.com/caddyserver/caddy/pull/6656
chore: Bump quic-go to 0.48.1, fixing a panic by @francislavoie in https://github.com/caddyserver/caddy/pull/6654
chore: compile without nosql's support for Postgres and MySQL by @dunglas in https://github.com/caddyserver/caddy/pull/6655
cmd: Allow add-package to select version of package by @Botelho31 in https://github.com/caddyserver/caddy/pull/6665
httpcaddyfile: Fixes for prefer_wildcard mode by @francislavoie in https://github.com/caddyserver/caddy/pull/6636
Use WithLazy to prevent eager serialization of the event data by @ankon in https://github.com/caddyserver/caddy/pull/6671
forwardauth: Skip copying missing response headers by @francislavoie in https://github.com/caddyserver/caddy/pull/6608
caddyhttp: Add MatchWithError to replace SetVar hack by @francislavoie in https://github.com/caddyserver/caddy/pull/6596
go.mod: upgrade only some otel deps by @mohammed90 in https://github.com/caddyserver/caddy/pull/6676
fileserver: Add file_limit option for browse by @atakanyenel in https://github.com/caddyserver/caddy/pull/6648
rewrite: Don't add / in Caddyfile, do it after replacer by @francislavoie in https://github.com/caddyserver/caddy/pull/6662
caddytls: Allow disabling storage cleaning, avoids writing two files by @francislavoie in https://github.com/caddyserver/caddy/pull/6593
ci: use commit sha in goreleaser-check by @mohammed90 in https://github.com/caddyserver/caddy/pull/6677
reverseproxy: Allow 0 as weights for weighted_round_robin by @suciptoid in https://github.com/caddyserver/caddy/pull/6681
httpcaddyfile: Implement log sampling config by @nikonhub in https://github.com/caddyserver/caddy/pull/6682
core: Implement FastAbs to avoid repeated os.Getwd calls by @francislavoie in https://github.com/caddyserver/caddy/pull/6687
chore: Add provides to .deb releases by @francislavoie in https://github.com/caddyserver/caddy/pull/6691
chore: make FastAbs comment easier to understand by @WeidiDeng in https://github.com/caddyserver/caddy/pull/6692
cmd: ignore missing keys during storage export by @santhoshTpixler in https://github.com/caddyserver/caddy/pull/6697
perf: remove dir redirection when useless in php_fastcgi by @dunglas in https://github.com/caddyserver/caddy/pull/6698
requestbody: Type-based error handling for MaxBytesError by @rishitashaw in https://github.com/caddyserver/caddy/pull/6701
metrics: add go and process collectors by @mohammed90 in https://github.com/caddyserver/caddy/pull/6704
ci: prevent jobs running on PRs from forks by @mohammed90 in https://github.com/caddyserver/caddy/pull/6720
caddyhttp: Add {?query} placeholder by @francislavoie in https://github.com/caddyserver/caddy/pull/6714
fileserver: Add first_exist_fallback strategy for try_files by @dunglas in https://github.com/caddyserver/caddy/pull/6699
cmd: fmt prevents multiple files passed as args, add support for --config by @armadi1809 in https://github.com/caddyserver/caddy/pull/6717
fileserver: Fix policy Validate() oversight by @francislavoie in https://github.com/caddyserver/caddy/pull/6727
chore: bump golang.org/x/net to v0.32.0 by @WeidiDeng in https://github.com/caddyserver/caddy/pull/6728
reverseproxy: Rewrite requests and responses for websocket over http2 by @WeidiDeng in https://github.com/caddyserver/caddy/pull/6567
chore: fix some typo in HTTPLoader comment by @jpadilla in https://github.com/caddyserver/caddy/pull/6735
feat: good default for file_server.precompressed by @dunglas in https://github.com/caddyserver/caddy/pull/6736
test: add a test for precompressed defaults by @dunglas in https://github.com/caddyserver/caddy/pull/6743
feat: good default for encode by @dunglas in https://github.com/caddyserver/caddy/pull/6737
encode: write status immediate for success response for CONNECT requests by @WeidiDeng in https://github.com/caddyserver/caddy/pull/6738
reverseproxy: Only handle extended connect for websockets by @bt90 in https://github.com/caddyserver/caddy/pull/6740
core: Change getListenerFromPlugin signature by @MayCXC in https://github.com/caddyserver/caddy/pull/6651
reverseproxy: Set Content-Length when body is fully buffered by @WeidiDeng in https://github.com/caddyserver/caddy/pull/6638
fastcgi: check for CONTENT_LENGTH when sending requests by @WeidiDeng in https://github.com/caddyserver/caddy/pull/6661
caddyhttp: Allow matching Transfer-Encoding, add to access logs by @francislavoie in https://github.com/caddyserver/caddy/pull/6629
encode: try to use sendfile when compression is not used by @WeidiDeng in https://github.com/caddyserver/caddy/pull/6749
httpcaddyfile: Implement force_automate by @francislavoie in https://github.com/caddyserver/caddy/pull/6712
testing: sort force-automated hosts by @mohammed90 in https://github.com/caddyserver/caddy/pull/6756