cloudflare/cloudflared

Public

mirrored from https://github.com/cloudflare/cloudflaredAvailable

CodeCommitsIssuesPull requestsActionsInsightsSecurity
2021.10.5

Branches

Tags

  • No tags available.
0Branches0Tags
Go to file
Add file
Code

Clone

HTTPS

Download ZIP

RELEASE_NOTES

1041lines · modecode

12021.10.5
2- 2021-10-25 Update change log for release 2021.10.4
3- 2021-10-25 Revert "TUN-5184: Make sure outstanding websocket write is finished, and no more writes after shutdown"
4
52021.10.4
6- 2021-10-21 TUN-5287: Fix misuse of wait group in TestQUICServer that caused the test to exit immediately
7- 2021-10-21 TUN-5286: Upgrade crypto/ssh package to fix CVE-2020-29652
8- 2021-10-18 TUN-5262: Allow to configure max fetch size for listing queries
9- 2021-10-19 TUN-5262: Improvements to `max-fetch-size` that allow to deal with large number of tunnels in account
10- 2021-10-15 TUN-5261: Collect QUIC metrics about RTT, packets and bytes transfered and log events at tracing level
11- 2021-10-19 TUN-5184: Make sure outstanding websocket write is finished, and no more writes after shutdown
12
132021.10.3
14- 2021-10-14 TUN-5255: Fix potential panic if Cloudflare API fails to respond to GetTunnel(id) during delete command
15- 2021-10-14 TUN-5257: Fix more cfsetup targets that were broken by recent package changes
16
172021.10.2
18- 2021-10-11 TUN-5138: Switch to QUIC on auto protocol based on threshold
19- 2021-10-14 TUN-5250: Add missing packages for cfsetup to succeed in github release pkgs target
20
212021.10.1
22- 2021-10-12 TUN-5246: Use protocol: quic for Quick tunnels if one is not already set
23- 2021-10-13 TUN-5249: Revert "TUN-5138: Switch to QUIC on auto protocol based on threshold"
24
252021.10.0
26- 2021-10-11 TUN-5138: Switch to QUIC on auto protocol based on threshold
27- 2021-10-07 TUN-5195: Do not set empty body if not applicable
28- 2021-10-08 UN-5213: Increase MaxStreams value for QUIC transport
29- 2021-09-28 TUN-5169: Release 2021.9.2 CHANGES.md
30- 2021-09-28 TUN-5164: Update README and clean up references to Argo Tunnel (using Cloudflare Tunnel instead)
31
322021.9.2
33- 2021-09-21 TUN-5129: Use go 1.17 and copy .git folder to docker build to compute version
34- 2021-09-21 TUN-5128: Enforce maximum grace period
35- 2021-09-22 TUN-5141: Make sure websocket pinger returns before streaming returns
36- 2021-09-24 TUN-5142: Add asynchronous servecontrolstream for QUIC
37- 2021-09-24 TUN-5142: defer close rpcconn inside unregister instead of ServeControlStream
38- 2021-09-27 TUN-5160: Set request.ContentLength when this value is in request header
39
402021.9.1
41- 2021-09-21 TUN-5118: Quic connection now detects duplicate connections similar to http2
42- 2021-09-15 Fix TryCloudflare link
43
442021.9.0
45- 2021-09-02 Fix broken TryCloudflare link
46- 2021-09-03 Add support for taking named tunnel credentials from an environment variable
47- 2021-08-30 TUN-5012: Use patched go-sumtype
48- 2021-08-31 TUN-5011: Use the region parameter in fallback SRV lookup
49- 2021-08-31 TUN-5029: Do not strip cf- prefixed headers
50- 2021-08-29 TUN-5009: Updated github action to use go 1.17.x for checks
51- 2021-08-28 TUN-5010: --region should be a string flag
52- 2021-08-10 Allow building on arm64 platforms
53- 2021-06-09 Update README.md
54- 2021-05-31 🖌️ Allow providing TokenID and TokenSecret as env vars when calling cloudflared access
55- 2021-05-31 🎨 Prefix env var parameters with TUNNEL
56
572021.8.7
58- 2021-08-28 Revert "TUN-4926: Implement --region configuration option"
59
602021.8.6
61- 2021-08-27 TUN-5000: De-flake logging to dir component test in Windows by increasing to buffer to cope with more logging
62- 2021-08-27 TUN-5003: Fix cfsetup for non-FIPS golang version
63
642021.8.5
65- 2021-08-27 TUN-4961: Update quic-go to latest
66- 2021-08-27 Release 2021.8.4
67
682021.8.4
69- 2021-08-26 TUN-4974: Fix regression where we were debug logging by accident
70- 2021-08-26 TUN-4970: Only default to http2 for warp-routing if protocol is h2mux
71- 2021-08-26 TUN-4981: Improve readability of prepareTunnelConfig method
72- 2021-08-26 TUN-4926: Implement --region configuration option
73- 2021-07-09 TUN-4821: Make quick tunnels the default in cloudflared
74
752021.8.3
76- 2021-08-23 TUN-4889: Add back appendtagheaders function
77- 2021-08-21 TUN-4940: Fix cloudflared not picking up correct NextProtos for quic
78- 2021-08-21 TUN-4613: Add a no-op protocol version slot
79- 2021-08-13 TUN-4922: Downgrade quic-go library to 0.20.0
80- 2021-08-17 TUN-4866: Add Control Stream for QUIC
81- 2021-08-17 TUN-4927: Parameterize region in edge discovery code
82- 2021-08-06 TUN-4602: Added UDP resolves to Edge discovery
83
842021.8.2
85- 2021-08-03 TUN-4597: Added HTTPProxy for QUIC
86- 2021-08-04 TUN-4795: Remove Equinox releases
87- 2021-08-09 TUN-4911: Append Environment variable to Path instead of overwriting it
88
892021.8.1
90- 2021-08-02 TUN-4855: Added CHANGES.md for release 2021.8.0
91- 2021-08-03 TUN-4597: Add a QUIC server skeleton
92- 2021-08-03 TUN-4873: Disable unix domain socket test for windows unit tests
93- 2021-08-04 TUN-4875: Added amd64-linux builds back to releases
94
952021.8.0
96- 2021-07-30 TUN-4847: Allow to list tunnels by prefix name or exclusion prefix name
97- 2021-07-30 TUN-4772: Release built executables with packages
98- 2021-07-30 TUN-4851: Component tests to smoke test that Proxy DNS and Tunnel are only run when expected
99- 2021-07-28 TUN-4811: Publish quick tunnels' hostname in /metrics under `userHostname` for backwards-compatibility
100- 2021-07-29 TUN-4832: Prevent tunnel from running accidentally when only proxy-dns should run
101- 2021-07-28 TUN-4819: Tolerate protocol TXT record lookup failing
102
1032021.7.4
104- 2021-07-28 TUN-4814: Revert "TUN-4699: Make quick tunnels the default in cloudflared"
105- 2021-07-28 TUN-4812: Disable CGO for cloudflared builds
106
1072021.7.3
108- 2021-07-27 TUN-4799: Build deb, msi and rpm packages with fips
109
1102021.7.2
111- 2021-07-27 Fixed a syntax error with python logging.
112
1132021.7.1
114- 2021-07-21 TUN-4755: Add a windows msi release option to Make
115- 2021-07-22 TUN-4761: Added a build-all-packages target to cfsetup
116- 2021-07-26 TUN-4771: Upload deb, rpm and msi packages to github
117- 2021-07-14 TUN-4714: Name nightly package cloudflared-nightly to avoid apt conflict
118- 2021-07-16 TUN-4701: Split Proxy into ProxyHTTP and ProxyTCP
119- 2021-07-08 TUN-4596: Add QUIC application protocol for QUIC stream handshake
120- 2021-07-09 TUN-4699: Make quick tunnels the default in cloudflared
121
1222021.7.0
123- 2021-07-01 TUN-4626: Proxy non-stream based origin websockets with http Roundtrip.
124- 2021-07-01 TUN-4655: ingress.StreamBasedProxy.EstablishConnection takes dest input
125- 2021-07-09 TUN-4698: Add cloudflared metrics endpoint to serve quick tunnel hostname
126- 2021-06-21 TUN-4521: Modify cloudflared to use zoneless-tunnels-worker for free tunnels
127- 2021-04-05 AUTH-3475: Updated GetAppInfo error message
128
1292021.6.0
130- 2021-06-21 TUN-4571: Changelog for 2021.6.0
131- 2021-06-18 TUN-4571: Fix proxying to unix sockets when using HTTP2 transport to Cloudflare Edge
132- 2021-06-07 TUN-4502: Make `cloudflared tunnel route` subcommands described consistently
133- 2021-06-08 TUN-4504: Fix component tests in windows
134- 2021-05-27 TUN-4461: Log resulting DNS hostname if one is received from Cloudflare API
135
1362021.5.10
137- 2021-05-25 TUN-4456: Replaced instances of Tick() with Ticker() in h2mux paths
138
1392021.5.9
140- 2021-05-20 TUN-4426: Fix centos builds
141- 2021-05-20 Update changelog
142- 2021-04-30 AUTH-3426: Point to new transfer service URL and eliminate PUT /ok
143
1442021.5.8
145- 2021-05-14 TUN-4419: Improve error message when cloudflared cannot reach origin
146- 2021-05-19 TUN-4425: --overwrite-dns flag for in adhoc and route dns cmds
147
1482021.5.7
149- 2021-05-17 Fix typo in Changes.md
150- 2021-05-17 TUN-4421: Named Tunnels will automatically select the protocol to connect to Cloudflare's edge network
151
1522021.5.6
153- 2021-05-14 TUN-4418: Downgrade to Go 1.16.3
154
1552021.5.5
156
157
1582021.5.4
159- Fix release pipeline
160
1612021.5.1
162- 2021-05-10 TUN-4342: Fix false positive warning about unused hostname property
163- 2021-05-10 Release 2021.5.0
164
1652021.5.0
166- 2021-05-10 TUN-4384: Silence log from automaxprocs
167- 2021-05-10 AUTH-3537: AUDs in JWTs are now always arrays
168- 2021-05-10 Update changelog for 2021.5.0
169- 2021-05-03 TUN-4343: Fix broken build by setting debug field correctly
170- 2021-05-06 TUN-4356: Set AUTOMAXPROCS to the CPU limit when running in a Linux container
171- 2021-05-06 TUN-4357: Bump Go to 1.16
172- 2021-05-06 TUN-4359: Warn about unused keys in 'tunnel ingress validate'
173- 2021-04-30 debug: log host / path
174- 2021-04-20 AUTH-3513: Checks header for app info in case response is a 403/401 from the edge
175- 2021-04-29 TUN-4000: Release notes for cloudflared replica model
176- 2021-04-09 TUN-2853: rename STDIN-CONTROL env var to STDIN_CONTROL
177- 2021-04-09 TUN-4206: Better error message when user is only using one ingress rule
178
1792021.4.0
180- 2021-04-05 TUN-4178: Fix component test for running as a service in MacOS to not assume a named tunnel
181- 2021-04-05 TUN-4177: Running with proxy-dns should not prevent running Named Tunnels
182- 2021-04-02 TUN-4168: Transparently proxy websocket connections using stdlib HTTP client instead of gorilla/websocket; move websocket client code into carrier package since it's only used by access subcommands now (#345).
183- 2021-04-07 Publish change log for 2021.4.0
184
1852021.3.6
186- 2021-03-30 TUN-4150: Only show the connector table in 'tunnel info' if there are connectors. Don't show rows with zero connections.
187- 2021-03-31 TUN-4153: Revert best-effort HTTP2 usage when talking to origins
188- 2021-03-26 TUN-4141: Better error messages for tunnel info subcommand.
189- 2021-03-29 TUN-4146: Unhide and document grace-period
190- 2021-03-25 TUN-3863: Consolidate header handling logic in the connection package; move headers definitions from h2mux to packages that manage them; cleanup header conversions
191
1922021.3.5
193- 2021-03-26 TUN-3896: http-service and tunnelstore client use http2 transport.
194- 2021-03-25 TUN-4125: Change component tests to run in CI with its own dedicated resources
195- 2021-03-26 Publish change log for 2021.3.5
196
1972021.3.4
198
199
2002021.3.3
201- 2021-03-23 TUN-4111: Warn the user if both properties "tunnel" and "hostname" are used
202- 2021-03-23 TUN-4082: Test logging when running as a service
203- 2021-03-23 TUN-4112: Skip testing graceful shutdown with SIGINT on Windows
204- 2021-03-23 TUN-4116: Ingore credentials-file setting in configuration file during tunnel create and delete opeations.
205- 2021-03-23 TUN-4118: Don't overwrite existing file with tunnel credentials. For ad-hoc tunnels, this means tunnel won't start if there's a file in the way.
206- 2021-03-24 TUN-4123: Don't capture output in reconnect componet test
207- 2021-03-23 TUN-4067: Reformat code for consistent import order, grouping, and fix formatting. Added goimports target to the Makefile to make this easier in the future.
208- 2021-03-24 AUTH-3455: Generate short-lived ssh cert per hostname
209- 2021-03-25 Update changelog 2021.3.3
210
2112021.3.2
212- 2021-03-23 TUN-4042: Capture cloudflared output to debug component tests
213- 2021-03-23 Publish changelog for 2021.3.2
214- 2021-03-16 TUN-4089: Address flakiness in component tests for termination
215- 2021-03-16 TUN-4060: Fix Go Vet warnings (new with go 1.16) where t.Fatalf is called from a test goroutine
216- 2021-03-16 TUN-4091: Use flaky decorator to rerun reconnect component tests when they fail
217- 2021-03-12 TUN-4081: Update log severities to use Zerolog's levels
218- 2021-03-16 TUN-4094: Don't read configuration file for access commands
219- 2021-03-15 TUN-3993: New `cloudflared tunnel info` to obtain details about the active connectors for a tunnel
220- 2021-03-17 TUN-3715: Apply input source to the correct context
221- 2021-03-17 AUTH-3394: Ensure scheme on token command
222- 2021-03-18 TUN-4096: Reduce tunnel not connected assertion backoff to address flaky termination tests
223- 2021-03-19 TUN-3998: Allow to cleanup the connections of a tunnel limited to a single client
224- 2021-02-04 TUN-3715: Only read config file once, right before invoking the command
225
2262021.3.1
227- 2021-03-11 TUN-4051: Add component-tests to test graceful shutdown
228- 2021-03-12 TUN-4052: Add component tests to assert service mode behavior
229
2302021.3.0
231- 2021-03-10 TUN-4075: Dedup test should not compare order of list
232- 2021-03-10 Revert "AUTH-3394: Creates a token per app instead of per path"
233- 2021-03-11 TUN-4066: Remove unnecessary chmod during package publish to CF_PKG_HOSTS
234- 2021-03-11 TUN-4066: Set permissions in build agent before 'scp'-ing to machine hosting package repo
235- 2021-03-11 TUN-4050: Add component tests to assert reconnect behavior
236- 2021-03-10 AUTH-3394: Creates a token per app instead of per path - with fix for free tunnels
237- 2021-03-15 Publish change log for 2021.3.0
238- 2021-03-01 Issue #285 - Makefile does not detect TARGET_ARCH correctly on FreeBSD (#325)
239- 2021-03-01 TUN-3988: Log why it cannot check if origin cert exists
240- 2021-03-02 TUN-3995: Optional --features flag for tunnel run.
241- 2021-03-02 TUN-3994: Log client_id when running a named tunnel
242- 2021-03-04 TUN-4026: Fix regression where HTTP2 edge transport was no longer propagating control plane errors
243- 2021-03-05 TUN-4055: Skeleton for component tests
244- 2021-03-08 TUN-4047: Add cfsetup target to run component test
245- 2021-03-08 TUN-4016: Delegate decision to update for Worker service
246- 2021-03-02 TUN-3905: Cannot run go mod vendor in cloudflared due to fips
247- 2021-03-08 TUN-4063: Cleanup dependencies between packages.
248- 2021-03-09 Allow partial reads from a GorillaConn; add SetDeadline (from net.Conn) (#330)
249- 2021-03-09 TUN-4069: Fix regression on support for websocket over proxy
250- 2021-03-02 AUTH-3394: Creates a token per app instead of per path
251- 2021-03-01 TUN-4017: Add support for using cloudflared as a full socks proxy.
252- 2021-03-08 TUN-4062: Read component tests config from yaml file
253- 2021-03-08 TUN-4049: Add component tests to assert logging behavior when running from terminal
254- 2021-02-23 TUN-3963: Repoint urfave/cli/v2 library at patched branch at github.com/ipostelnik/cli/v2@fixed which correctly handles reading flags declared at multiple levels of subcommands.
255- 2021-02-25 TUN-3970: Route ip show has alias route ip list
256- 2021-02-26 TUN-3978: Unhide teamnet commands and improve their help
257- 2021-02-26 TUN-3983: Renew CA certs in cloudflared
258- 2021-02-28 TUN-3989: Check in with Updater service in more situations and convey messages to user
259- 2021-02-11 TUN-3819: Remove client-side check that deleted tunnels have no connections
260
2612021.2.5
262- 2021-02-23 Publish change notes for 2021.2.5
263- 2021-02-11 TUN-3838: ResponseWriter no longer reads and origin error tests
264- 2021-02-10 TUN-3895: Tests for socks stream handler
265- 2021-02-19 TUN-3939: Add logging that shows that Warp-routing is enabled
266- 2021-02-02 TUN-3817: Adds tests for websocket based streaming regression
267- 2021-02-04 TUN-3799: extended the Stream interface to take a logger and added debug logs for io.Copy errors
268- 2021-02-03 TUN-3855: Add ability to override target of 'access ssh' command to a different host for testing
269- 2021-02-04 TUN-3853: Respond with ws headers from the origin service rather than generating our own
270- 2021-02-08 TUN-3889: Move host header override logic to httpService
271- 2021-02-05 TUN-3868: Refactor singleTCPService and bridgeService to tcpOverWSService and rawTCPService
272- 2021-01-21 TUN-3753: Select http2 protocol when warp routing is enabled
273- 2021-01-26 TUN-3809: Allow routes ip show to output as JSON or YAML
274- 2021-01-11 TUN-3615: added support to proxy tcp streams
275- 2021-01-17 TUN-3725: Warp-routing is independent of ingress
276- 2021-01-15 TUN-3764: Actively flush data for TCP streams
277- 2020-12-09 TUN-3617: Separate service from client, and implement different client for http vs. tcp origins
278
2792021.2.4
280- 2021-02-22 TUN-3948: Log error when retrying connection
281- 2021-02-23 TUN-3964: Revert "TUN-3922: Repoint urfave/cli/v2 library at patched branch at github.com/ipostelnik/cli/v2@fixed which correctly handles reading flags declared at multiple levels of subcommands."
282- 2021-02-23 Publish release notes for 2021.2.4
283
2842021.2.3
285- 2021-02-23 Publish release notes for 2021.2.3
286- 2021-02-10 TUN-3902: Add jitter to backoffhandler
287- 2021-02-11 TUN-3913: Help gives wrong exit code for autoupdate
288- 2021-02-12 Add max upstream connections dns-proxy option (#290)
289- 2021-02-16 TUN-3924: Removed db-connect command. Added a placeholder handler for this command that informs users that command is no longer supported.
290- 2021-02-12 TUN-3922: Repoint urfave/cli/v2 library at patched branch at github.com/ipostelnik/cli/v2@fixed which correctly handles reading flags declared at multiple levels of subcommands.
291- 2021-02-19 Added support for proxy (#318)
292- 2021-02-19 TUN-3945: Fix runApp signature for generic service
293- 2021-02-09 Update README.md
294- 2021-02-09 Update the TryCloudflare link
295
2962021.2.2
297- 2021-02-04 TUN-3864: Users can choose where credentials file is written after creating a tunnel
298- 2021-02-04 TUN-3869: Improve reliability of graceful shutdown.
299- 2021-02-07 TUN-3878: Do not supply -tags when none are specified
300- 2021-02-04 TUN-3635: Send event when unregistering tunnel for gracful shutdown so /ready endpoint reports down status befoe connections finish handling pending requests.
301- 2021-02-08 TUN-3890: Code coverage for cloudflared in CI
302- 2021-02-09 AUTH-3375 exchangeOrgToken deleted cookie fix
303- 2020-11-18 Update error message to use login command
304
3052021.2.1
306- 2021-02-04 TUN-3858: Do not suffix cloudflared version with -fips
307
3082021.2.0
309- 2021-02-01 TUN-3837: Remove automation_email from cloudflared status page test
310- 2021-02-03 TUN-3848: Use transport logger for h2mux
311- 2021-02-03 TUN-3854: cloudflared tunnel list flags to sort output
312- 2021-01-21 TUN-3195: Don't colorize console logs when stderr is not a terminal
313- 2021-01-20 Fixed connection error handling by removing duplicated errors, standardizing on non-pointer error types
314- 2021-01-20 TUN-3118: Changed graceful shutdown to immediately unregister tunnel from the edge, keep the connection open until the edge drops it or grace period expires
315- 2021-01-25 TUN-3165: Add reference to Argo Tunnel documentation in the help output
316- 2021-01-25 TUN-3806: Use a .dockerignore
317- 2021-01-21 TUN-3795: Use RFC-3339 style date format for logs, produce timestamp in UTC
318- 2021-01-26 TUN-3795: Removed errant test
319- 2021-01-25 TUN-3792: Handle graceful shutdown correctly when running as a windows service. Only expose one shutdown channel globally, which now triggers the graceful shutdown sequence across all modes. Removed separate handling of zero-duration grace period, instead it's checked only when we need to wait for exit.
320- 2021-01-27 TUN-3811: Better error reporting on http2 connection termination. Registration errors from control loop are now propagated out of the connection server code. Unified error handling between h2mux and http2 connections so we log and retry errors the same way, regardless of underlying transport.
321- 2021-01-28 TUN-3830: Use Go 1.15.7
322- 2021-01-28 TUN-3826: Use go-fips when building cloudflared for linux/amd64
323- 2021-01-19 TUN-3777: Fix /ready endpoint for classic tunnels
324- 2021-01-19 TUN-3773: Add back pprof endpoints
325
3262021.1.5
327- 2021-01-15 TUN-3594: Log ingress response at debug level
328- 2021-01-15 TUN-3765: Fix doubly nested log output by `logfile` option
329- 2021-01-16 TUN-3767: Tolerate logging errors
330- 2021-01-17 TUN-3768: Reuse file loggers
331- 2021-01-14 TUN-3738: Refactor observer to avoid potential of blocking on tunnel notifications
332- 2021-01-15 TUN-3766: Print flags defined at all levels of command hierarchy, not just locally defined flags for a command. This fixes output of overriden settings for subcommand.
333
3342021.1.4
335- 2021-01-14 TUN-3759: Single file logging output should always append
336
3372021.1.3
338- 2021-01-14 TUN-3756: File logging output must consider the directory
339- 2021-01-14 TUN-3757: Fix legacy Uint flags that are incorrectly handled by ufarve library
340
3412021.1.2
342- 2021-01-13 TUN-3747: Fix logging in Windows
343
3442021.1.1
345- 2021-01-13 TUN-3744: Fix compilation error in windows service
346
3472021.1.0
348- 2021-01-11 TUN-3670: Update Teamnet API gateway prefixes
349- 2021-01-13 TUN-3738: Consume UI events even when UI is disabled
350- 2021-01-06 TUN-3722: Teamnet API paths include /network
351- 2021-01-05 TUN-3688: Subcommand for users to check which route an IP proxies through
352- 2021-01-08 TUN-3691: Edit Teamnet help text
353- 2020-12-30 TUN-3706: Quit if any origin service fails to start
354- 2020-12-31 TUN-3708: Better info message about system root certpool on Windows
355- 2020-12-21 TUN-3669: Teamnet commands to add/show Teamnet routes.
356- 2020-12-29 TUN-3689: Delete routes via cloudflared CLI
357- 2020-12-28 TUN-3471: Add structured log context to logs
358- 2020-12-15 TUN-3650: Remove unused awsuploader package
359- 2020-12-03 Update to add deprecated version note (#271)
360- 2020-12-02 TUN-3472: Set up rolling logger with zerolog and lumberjack
361- 2020-12-08 TUN-3607: Set up single-file logger with zerolog
362- 2020-12-03 Update to add deprecated version note (#271)
363- 2020-11-25 TUN-3470: Replace in-house logger calls with zerolog
364
3652020.12.0
366- 2020-12-04 TUN-3599: improved delete if credentials isnt found.
367- 2020-12-04 TUN-3612: Upgrade to Go 1.15.6
368- 2020-11-30 TUN-3593: /ready endpoint for k8s readiness. Move tunnel events out of UI package, into connection package.
369- 2020-11-27 TUN-3594: Log response status at debug level
370
3712020.11.11
372- 2020-11-20 TUN-3578: cloudflared tunnel route dns should allow wildcard subdomains
373- 2020-11-21 EDGEPLAT-2958 remove deb-compression, defaulting to gzip
374- 2020-11-23 TUN-3581: Tunnels can be run by name using only --credentials-file, no origin cert necessary.
375- 2020-11-15 TUN-3561: Unified logger configuration
376- 2020-11-08 AUTH-3221: Saves org token to disk and uses it to refresh the app token
377
3782020.11.10
379- 2020-11-20 TUN-3562: Fix panic when using bastion mode ingress rule
380- 2020-11-20 EDGEPLAT-2958 build cloudflared for Bullseye
381
3822020.11.9
383- 2020-11-18 TUN-3557: Detect SSE if content-type starts with text/event-stream
384- 2020-11-18 TUN-3559: Share response meta header with other packages
385- 2020-11-18 DEVTOOLS-7936: Remove redundant chgrp from publish
386- 2020-11-18 TUN-3558: cloudflared allows empty config files
387- 2020-11-18 TUN-3544: Upgrade to Go 1.15.5
388
3892020.11.8
390- 2020-11-17 TUN-3555: Single origin service should default to localhost:8080
391
3922020.11.7
393- 2020-11-13 TUN-3514: Stop setting --is-autoupdated flag after autoupdate because it can break named tunnel running in k8s
394- 2020-11-15 TUN-3548, TUN-3547: Bastion mode can be specified as a service, doesn't require URL.
395- 2020-11-16 TUN-3549: Use a separate handler for each websocket proxy
396
3972020.11.6
398- 2020-11-14 TUN-3546: Fix panic in tlsconfig.LoadOriginCA
399
4002020.11.5
401- 2020-11-12 TUN-3540: Better copy in ingress rules error messages
402- 2020-11-12 DEVTOOLS-7936: Set permissions on public packages
403- 2020-11-13 TUN-3543: ProxyAddress not using default in single-origin mode
404
4052020.11.4
406- 2020-11-11 TUN-3534: Specific error message when credentials file is a .pem not .json
407- 2020-11-02 TUN-3500: Integrate replace h2mux by http2 work with multiple origin support
408- 2020-11-09 TUN-3514: Transport logger write to UI when UI is enabled
409- 2020-10-30 TUN-3490: Make sure OriginClient implementation doesn't write after Proxy return
410- 2020-10-20 TUN-3403: Unit test for origin/proxy to test serving HTTP and Websocket
411- 2020-10-23 TUN-3480: Support SSE with http2 connection, and add SSE handler to hello-world server
412- 2020-10-27 TUN-3489: Add unit tests to cover proxy logic in connection package of cloudflared
413- 2020-10-16 TUN-3467: Serialize cf-cloudflared-response-meta during package initialization using jsoniter
414- 2020-10-14 TUN-3456: New protocol option auto to automatically select between http2 and h2mux
415- 2020-10-14 TUN-3458: Upgrade to http2 when available, fallback to h2mux when we reach max retries
416- 2020-10-08 TUN-3449: Use flag to select transport protocol implementation
417- 2020-10-08 TUN-3462: Refactor cloudflared to separate origin from connection
418- 2020-09-21 TUN-3406: Proxy websocket requests over Go http2
419- 2020-09-25 TUN-3420: Establish control plane and send RPC over control plane
420- 2020-09-11 TUN-3400: Use Go HTTP2 library as transport to connect with the edge
421
4222020.11.3
423- 2020-11-11 TUN-3533: Set config for single origin ingress
424
4252020.11.2
426
427
4282020.11.1
429- 2020-11-10 TUN-3527: More specific error for invalid YAML/JSON
430- 2020-11-06 Update README.md (#256)
431
4322020.11.0
433- 2020-11-04 TUN-3484: OriginService that responds with configured HTTP status
434- 2020-11-05 TUN-3505: Response body for status code origin returns EOF on Read
435- 2020-11-04 TUN-3503: Matching ingress rule should not take port into account
436- 2020-11-05 TUN-3506: OriginService needs to set request host and scheme for websocket requests
437- 2020-11-09 TUN-3516: Better error message when parsing invalid YAML config
438- 2020-11-09 TUN-3522: ingress validate checks that the config file exists
439- 2020-11-09 TUN-3524: Don't ignore errors from app-level action handler (#248)
440- 2020-11-09 TUN-3461: Show all origin services in the UI
441- 2020-10-30 TUN-3494: Proceed to create tunnel if at least one edge address can be resolved
442- 2020-10-30 TUN-3492: Refactor OriginService, shrink its interface
443- 2020-10-22 TUN-3478: Increase download timeout to 60s
444- 2020-10-15 TUN-2640: Users can configure per-origin config. Unify single-rule CLI flow with multi-rule config file code.
445
4462020.10.2
447- 2020-10-21 Release 2020.10.1
448- 2020-10-21 AUTH-3185 fixed indention error
449- 2020-10-19 TUN-3459: Make service install on linux use named tunnels
450
4512020.10.1
452- 2020-10-20 Split out typed config from legacy command-line switches; refactor ingress commands and fix tests
453- 2020-10-20 Move raw ingress rules to config package
454- 2020-10-21 TUN-3476: Fix conversion to string and int slice
455- 2020-10-12 TUN-3441: Multiple-origin routing via ingress rules
456- 2020-10-15 TUN-3464: Newtype to wrap []ingress.Rule
457- 2020-10-15 TUN-3465: Use Go 1.15.3
458- 2020-10-15 TUN-3463: Let users run a named tunnel via config file setting
459- 2020-10-19 TUN-3475: Unify config file handling with typed config for new fields
460- 2020-10-19 TUN-3459: Make service install on linux use named tunnels
461- 2020-10-06 AUTH-3148 fixed cloudflared copy and match all the files in the checksum upload
462- 2020-10-06 TUN-3436, TUN-3437: Parse ingress from YAML, ensure last rule catches everything
463- 2020-10-06 TUN-3446: Use go 1.15.2 and add a step to build cloudflared in the dev Dockerfile
464- 2020-10-07 TUN-3439: 'tunnel validate' command to check ingress rules
465- 2020-10-07 TUN-3440: 'tunnel rule' command to test ingress rules
466- 2020-10-08 TUN-3451: Cloudflared tunnel ingress command
467- 2020-10-09 TUN-3452: Fix loading of flags from config file for tunnel run subcommand. This change also cleans up building of tunnel subcommand list, hides deprecated subcommands and improves help.
468- 2020-10-08 TUN-3438: move ingress into own package, read into TunnelConfig
469
4702020.10.0
471- 2020-10-02 AUTH-2993 cleaned up worker service tests
472- 2020-10-02 TUN-3443: Decode as v4api response on non-200 status
473- 2020-09-24 TRAFFIC-448: allow the user to specify the proxy address and port to bind to, falling back to 127.0.0.1 and random port if not specified
474- 2020-09-28 TUN-3427: Define a struct that only implements RegistrationServer in tunnelpogs
475- 2020-09-29 TUN-3430: Copy flags to configure proxy to run subcommand, print relevant tunnel flags in help
476- 2020-08-12 AUTH-2993 added workers updater logic
477
4782020.9.3
479- 2020-09-22 TRAFFIC-448: build cloudflare for junos and publish to s3
480- 2020-09-22 TUN-3410: Request the v1 Tunnelstore API
481- 2020-09-23 Release 2020.9.2
482- 2020-09-17 updater service exit code should be 11
483- 2020-09-18 AUTH-3109 upload the checksum to workers kv on github releases
484
4852020.9.2
486- 2020-09-22 TRAFFIC-448: build cloudflare for junos and publish to s3
487- 2020-09-22 TUN-3410: Request the v1 Tunnelstore API
488- 2020-09-17 AUTH-3103 CI build fixes
489- 2020-09-18 AUTH-3110-use-cfsetup-precache
490- 2020-09-17 TUN-3295: Show route command results
491- 2020-09-16 TUN-3291: cloudflared tunnel run -h explains how to use flags from parent command
492- 2020-09-18 AUTH-3109 upload the checksum to workers kv on github releases
493- 2020-09-17 updater service exit code should be 11
494- 2020-09-01 TUN-3216: UI improvements
495- 2020-08-25 Rebased and passed TunnelEventChan to LogServerInfo in new ReconnectTunnel function
496- 2020-08-25 TUN-3321: Add box around logs on UI
497- 2020-08-26 TUN-3328: Filter out free tunnel has started log from UI
498- 2020-08-27 TUN-3333: Add text to UI explaining how to exit
499- 2020-08-27 TUN-3335: Dynamically set connection table size for UI
500- 2020-08-10 TUN-3238: Update UI when connection re-connects
501- 2020-08-17 TUN-3261: Display connections on UI for free classic tunnels
502- 2020-07-24 TUN-3201: Create base cloudflared UI structure
503- 2020-07-29 TUN-3200: Add connection information to UI
504- 2020-07-24 TUN-3255: Update UI to display URL instead of hostname
505- 2020-07-29 TUN-3198: Handle errors while running tunnel UI
506
5072020.9.1
508- 2020-09-14 TUN-3395: Unhide named tunnel subcommands, tweak help
509- 2020-09-15 TUN-3395: Improve help for list command
510- 2020-09-14 TUN-3294: Perform basic validation on arguments of route command; remove default pool name which wasn't valid
511- 2020-09-15 TUN-3395: Improve help for list command
512- 2020-09-16 Use Go 1.15.2
513
5142020.9.0
515- 2020-09-11 TUN-3293: Try to use error information from the body of a failed tunnelstore reresponse if available
516- 2020-09-04 AUTH-2653 renabled signing
517- 2020-09-04 TUN-3377: Tunnel route should check dns/lb before checking tunnel ID
518- 2020-09-04 AUTH-2653 changed to proper file extension
519- 2020-09-04 AUTH-2653 handle duplicate key import errors
520- 2020-09-04 TUN-3345: tunnel run accepts name of tunnel as argument
521- 2020-09-08 AUTH-2653 disble error pipe to see what is failing
522- 2020-09-08 AUTH-2653 search for the certificate and not the identity
523- 2020-09-09 TUN-3284: Use cloudflared/<version> as user agent of tunnelstore client
524- 2020-09-09 TUN-3375: Upgrade x/text and gorilla websocket deps
525- 2020-09-09 TUN-3375: Upgrade coredns and prometheus dependencies
526- 2020-09-09 AUTH-2653 add notarization to mac build
527- 2020-09-08 TUN-3292: Mention cleanup in tunnel run help.
528- 2020-08-20 AUTH-2016 fixed variable fail
529- 2020-08-12 TUN-3352 extra debug logging for websockets
530
5312020.8.2
532- 2020-08-20 AUTH-3021 fixed the git version call by using the older flag
533- 2020-08-18 TUN-3268: Each connection has its own event digest to reconnect
534
5352020.8.1
536- 2020-08-14 AUTH-2975 don't check /etc on windows
537- 2020-08-14 AUTH-2977 log file protection
538- 2020-08-18 TUN-3286: Use either ID or name in Named Tunnel subcommands.
539- 2020-08-18 AUTH-2712 fixed the mac build script
540- 2020-08-19 AUTH-2653 disabling signing until we can get the keys
541- 2020-08-05 TUN-3233: List tunnels support filtering by deleted, name, existed at and id
542- 2020-08-05 TUN-3237: By default, don't show connections that are pending reconnect
543- 2020-08-06 TUN-3242: Build with go 1.14
544- 2020-08-07 TUN-3243: Refactor tunnel subcommands to allow commands to compose better
545- 2020-08-07 AUTH-2864 - add macos build to github release
546- 2020-07-31 AUTH-2857 update homebrew script to use new url
547- 2020-07-30 TUN-3213: Create, route and run named tunnels in one command
548- 2020-07-07 AUTH-2712 added MSI build for a windows agent
549
5502020.8.0
551- 2020-07-30 TUN-3220: tunnel route reports created route
552- 2020-07-31 TUN-3221: ConnectionOptions tracks numPreviousAttempts.
553- 2020-07-20 TUN-3190: Initialize logger using command line flags in tunnels subcommands
554- 2020-07-21 TUN-3192: Use zone ID in tunnelstore request path; improve debug logging
555- 2020-07-23 TUN-3194: Don't render log output when level is not enabled
556- 2020-07-22 AUTH-2016 adds sha256 hashes to releases
557- 2020-07-27 Removes centos 6 build
558- 2020-07-27 TUN-3209: Add benchmark for header serialization
559- 2020-07-24 TUN-3209: improve performance and reduce allocations during user header serialization from h1 to h2
560- 2020-07-26 TUN-3208: Add benchmark for large response write
561- 2020-07-27 TUN-3208: Reduce copies and allocations on h2mux write path. Pre-allocate 16KB write buffer on the first write if possible. Use explicit byte array for chunks on write thread to avoid copying through intermediate buffer due to io.CopyN.
562- 2020-07-28 AUTH-2714: Adds arm64 cloudflared build
563- 2020-07-29 AUTH-2927 run message update after all github builds are done
564- 2020-07-17 AUTH-2902 redirect with just the root host on curl commands
565
5662020.7.4
567- 2020-07-20 Build cloudflared for arm64 on native agents
568- 2020-07-10 TUN-3048: Handle error when user tries to delete active tunnel
569- 2020-07-14 AUTH-2890: adds error handler to cli actions
570- 2020-07-06 TUN-3156: Add route subcommand under tunnel
571
5722020.7.3
573- 2020-07-13 Change scp command to use file glob that matches both cloudflared rpms and debs
574
5752020.7.2
576- 2020-07-02 AUTH-2644: Change install location and add man page
577- 2020-07-02 TUN-3131: Allow user to specify tunnel credentials path, and remove it in tunnel delete command
578- 2020-07-03 TUN-3008: Implement cloudflared tunnel cleanup command
579- 2020-07-02 TUN-3150: cloudflared tunnel list's table should use intelligent column width
580- 2020-07-07 TUN-3169: Move on to the next address when edge returns duplicate connection. There's no point in trying to connect to the same address since it will be hashed to the same metal. Improve logging of errors from serve tunnel loop, hide useless context cancelled error.
581- 2020-07-08 beautify package meta information generated by fpm (#218)
582- 2020-07-06 AUTH-2871: fix rpm builds
583- 2020-07-08 AUTH-2858: Set file to disable autoupdate
584- 2020-07-09 AUTH-2872: Adds centos-6 build
585
5862020.7.1
587- 2020-07-02 DEVTOOLS-7321: Push GitHub homebrew updates to master
588- 2020-07-06 TUN-3161: Upgrade golang.org/x/ deps
589- 2020-06-30 AUTH-2854: Create cloudflared RPMs
590- 2020-06-26 AUTH-2850 log config file path
591
5922020.7.0
593- 2020-06-30 TUN-3140: Add timestamps to terminal log entries
594- 2020-06-30 AUTH-2860: Fix builds
595- 2020-06-25 TUN-3007: Implement named tunnel connection registration and unregistration.
596
5972020.6.6
598- 2020-06-23 AUTH-2685: Adds script to create release
599- 2020-06-25 AUTH-2652: Update cloudflare repo
600- 2020-06-26 AUTH-2718: Add target for publishing deb to pkg.cloudflare repo
601- 2020-06-26 AUTH-2849 all log output to stderr
602- 2020-06-17 TUN-3106: Pass NamedTunnel config to StartServer
603- 2020-06-18 TUN-3107: UnregisterConnection shouldn't wrap nil error as RPC error
604- 2020-06-17 AUTH-2652: Adds .docker-images to push images to docker hub
605- 2020-06-18 AUTH-2712 mac package build script and better config file handling when started as a service
606
6072020.6.5
608- 2020-06-16 DEVTOOLS-7321: Don't skip macOS builds based on tag
609- 2020-06-16 fix for a flaky test
610- 2020-06-16 AUTH-2815 flag check was wrong. stupid oversight
611- 2020-06-16 TUN-3101: Tunnel list command should only show non-deleted, by default
612- 2020-06-16 TUN-3066: Command line action for tunnel run
613- 2020-06-16 TUN-3100 make updater report the right text
614
6152020.6.4
616- 2020-06-11 TUN-3085: Pass connection authentication information using TunnelAuth struct
617- 2020-06-15 TUN-3084: Generate and store tunnel_secret value during tunnel creation
618- 2020-06-16 AUTH-2815 add the log file to support the config.yaml file
619- 2020-06-02 TUN-3015: Add a new cap'n'proto RPC interface for connection registration as well as matching client and server implementations. The old interface extends the new one for backward compatibility.
620
6212020.6.3
622- 2020-06-15 DEVTOOLS-7321: Add openssh-client pkg for missing ssh-keyscan
623- 2020-06-15 AUTH-2813 adds back a single file support a cloudflared log file
624
6252020.6.2
626- 2020-06-11 AUTH-2648 updated usage text
627- 2020-06-11 AUTH-2763 don't redirect from curl command
628- 2020-06-12 TUN-3090: Upgrade crypto dep
629- 2020-06-11 TUN-3038: Add connections to tunnel list table
630- 2020-06-12 AUTH-2810 added warn for backwards compatibility sake
631
6322020.6.1
633- 2020-06-09 AUTH-2796 fixed windows build
634
6352020.6.0
636- 2020-06-05 AUTH-2645 protect against user mistaken flag input
637- 2020-06-05 AUTH-2687 don't copy config unnecessarily
638- 2020-06-05 AUTH-2169 make access login page more generic
639- 2020-06-05 AUTH-2729 added log file and level to cmd flags to match config file settings
640- 2020-06-08 AUTH-2785 service token flag fix and logger fix
641- 2020-05-20 AUTH-2682: Create buster build
642- 2020-05-21 TUN-2928, TUN-2929, TUN-2930: Add tunnel subcommands to interact with tunnel store service
643- 2020-05-29 Adding support for multi-architecture images and binaries (#184)
644- 2020-05-29 TUN-3019: Remove declarative tunnel entry code
645- 2020-05-29 TUN-3020: Remove declarative tunnel related RPC code
646- 2020-05-13 AUTH-2505 added aliases
647- 2020-05-14 AUTH-2529 added deprecation text to db-connect command
648- 2020-05-18 AUTH-2686: Added error handling to tunnel subcommand
649- 2020-05-04 AUTH-2369: RDP Bastion prototype
650- 2020-04-29 AUTH-2596 added new logger package and replaced logrus
651- 2020-04-25 DEVTOOLS-7321: Use SSH key from env for pushing to GitHub
652- 2020-04-25 DEVTOOLS-7321: Push to a test branch instead of to master
653- 2020-03-30 DEVTOOLS-7321: Add scripts for macOS builds and homebrew uploads
654
6552020.5.1
656- 2020-05-07 TUN-2860: Enable quick reconnect feature by default
657- 2020-05-07 AUTH-2564: error handling and minor fixes
658- 2020-05-01 AUTH-2588 add DoH to service mode
659
6602020.5.0
661- 2020-05-01 TUN-2943: Copy certutil from edge into cloudflared
662- 2020-05-05 TUN-2955: Fix connection and goroutine leaks when tunnel conection is terminated on error. Only unregister tunnels that had connected successfully. Close edge connection used to unregister the tunnel. Use buffered channels for error channels where receiver may quit early on context cancellation.
663- 2020-04-30 TUN-2940: Added delay parameter to stdin reconnect command.
664- 2020-04-27 TUN-2921: Rework address selection logic to avoid corner cases
665- 2020-04-28 TUN-2872: Exit with non-0 status code when the binary is updated so launchd will restart the service
666- 2020-04-13 AUTH-2587 add config watcher and reload logic for access client forwarder
667
6682020.4.0
669- 2020-04-10 TUN-2881: Parameterize response meta information header name in the generating function
670- 2020-04-11 TUN-2894: ResponseMetaHeader should be public
671- 2020-04-09 TUN-2880: Return metadata about source of the response from cloudflared
672- 2020-04-04 ARES-899: Fixes DoH client as system resolver. Fixes #91
673- 2020-03-31 AUTH-2394 added socks5 proxy
674- 2020-02-24 AUTH-2235 GetTokenIfExists now parses JWT payload for json expiry field to detect if the cached access token is expired
675
6762020.3.2
677- 2020-03-31 TUN-2854: Quick Reconnects should be an optional supported feature
678- 2020-03-30 TUN-2850: Tunnel stripping Cloudflare headers
679
6802020.3.1
681- 2020-03-27 TUN-2846: Trigger debug reconnects from stdin commands, not SIGUSR1
682
6832020.3.0
684- 2020-03-23 AUTH-2394 fixed header for websockets. Added TCP alias
685- 2020-03-10 TUN-2797: Fix panic in SetConnDigest by making mutexes values.
686- 2020-03-13 TUN-2807: cloudflared hello-world shouldn't assume it's my first tunnel
687- 2020-03-13 TUN-2756: Set connection digest after reconnect.
688- 2020-03-16 TUN-2812: Tunnel proxies and RPCs can share an edge address
689- 2020-03-18 TUN-2816: cloudflared metrics server should be more discoverable
690- 2020-03-19 TUN-2820: Serialized headers for Websockets
691- 2020-03-19 TUN-2819: cloudflared should close its connections when a signal is sent
692- 2020-03-19 TUN-2823: Bugfix. cloudflared would hang forever if error occurred.
693- 2020-03-10 TUN-2796: Implement HTTP2 CONTINUATION headers correctly
694- 2020-03-02 TUN-2779: update sample HTML pages
695- 2020-03-04 TUN-2785: Use reconnect token by default
696- 2020-03-05 TUN-2754: Add ConnDigest to cloudflared and its RPCs
697- 2020-03-06 TUN-2755: ReconnectTunnel RPC now transmits ConnectionDigest
698- 2020-03-06 TUN-2761: Use the new header management functions in cloudflared
699- 2020-03-06 TUN-2788: cloudflared should store one ConnDigest per HA connection
700- 2020-02-26 TUN-2767: Test for large headers
701- 2020-02-28 do not terminate tunnel if origin is not reachable on start-up (#177)
702- 2020-02-28 TUN-2776: Add header serialization feature in cloudflared
703- 2020-02-21 TUN-2748: Insecure randomness vulnerability in github.com/miekg/dns
704
7052020.2.1
706- 2020-02-20 TUN-2745: Rename existing header management functions
707- 2020-02-21 TUN-2746: Add the new header management functions
708- 2020-02-25 perf(cloudflared): reuse memory from buffer pool to get better throughput (#161)
709- 2020-02-25 Tweak HTTP host header. Fixes #107 (#168)
710- 2020-02-25 TUN-2765: Add list of features to tunnelrpc
711- 2020-02-19 TUN-2725: Specify in code that --edge is for internal testing only
712- 2020-02-19 TUN-2703: Muxer.Serve terminates when its context is Done
713- 2020-02-09 TUN-2717: Function to serialize/deserialize HTTP headers
714- 2020-02-05 TUN-2714: New edge discovery. Connections try to reconnect to the same edge IP.
715
7162020.2.0
717- 2020-01-30 TUN-2651: Fix panic in h2mux reader when a stream error is encountered
718- 2020-01-27 TUN-2645: Revert "TUN-2645: Turn on reconnect tokens"
719- 2020-01-28 TUN-2693: Metrics for ReconnectTunnel
720- 2020-01-28 TUN-2696: Add unknown registerRPCName
721- 2020-01-28 TUN-2699: Metrics for Authenticate RPCs
722- 2020-01-28 TUN-2690: cloudflared reconnect uses wrong context
723- 2020-01-29 TUN-2707: Inconsistent cardinality in tunnel error metrics
724- 2020-01-13 TUN-2645: Turn on reconnect tokens
725- 2019-12-23 TUN-2646: Make --edge flag work again for local development
726
7272019.12.0
728- 2019-12-11 TUN-2631: only notify that activeStreamMap is closed if ignoreNewStreams=true
729- 2019-12-17 bug(cloudflared): Set the MaxIdleConnsPerHost of http.Transport to proxy-keepalive-connections (#155)
730- 2019-12-17 refactor(docker): optimize Dockerfile (#126)
731- 2019-12-19 Fix timer scheduling for systemd update service (#159)
732- 2019-12-13 TUN-2637: Manage edge IPs in a region-aware manner
733- 2019-12-03 bug(cloudflared): nil pointer deference on h2DictWriter Close() (#154)
734- 2019-12-03 TUN-2608: h2mux.Muxer.Shutdown always returns a non-nil channel
735- 2019-12-04 TUN-2555: origin/supervisor.go calls Authenticate
736- 2019-12-06 TUN-2554: cloudflared calls ReconnectTunnel
737- 2019-11-20 TUN-2575: Constructors + simpler conversions for AuthOutcome
738- 2019-11-22 Fix Docker build failure (#149)
739- 2019-11-21 TUN-2573: Refactor TunnelRegistration into PermanentRegistrationError, RetryableRegistrationError and SuccessfulTunnelRegistration
740- 2019-11-22 TUN-2582: EventDigest field in tunnelrpc
741- 2019-11-22 Fix "happy eyeballs" not being disabled since Golang 1.12 upgrade * The Dialer.DualStack setting is now ignored and deprecated; RFC 6555 Fast Fallback ("Happy Eyeballs") is now enabled by default. To disable, set Dialer.FallbackDelay to a negative value.
742- 2019-11-25 TUN-2591: ReconnectTunnel now sends EventDigest
743- 2019-11-21 TUN-2606: add DialEdge helpers
744- 2019-11-21 TUN-2607: add RPC stream helpers
745
7462019.11.3
747- 2019-11-20 TUN-2562: Update Cloudflare Origin CA RSA root
748
7492019.11.2
750- 2019-11-18 TUN-2567: AuthOutcome can be turned back into AuthResponse
751- 2019-11-18 TUN-2563: Exposes config_version metrics
752
7532019.11.1
754- 2019-11-12 Add db-connect, a SQL over HTTPS server
755- 2019-11-12 TUN-2053: Add a /healthcheck endpoint to the metrics server
756- 2019-11-13 TUN-2178: public API to create new h2mux.MuxedStreamRequest
757- 2019-11-13 TUN-2490: respect original representation of HTTP request path
758- 2019-11-18 TUN-2547: TunnelRPC definitions for Authenticate flow
759- 2019-11-18 TUN-2551: TunnelRPC definitions for ReconnectTunnel flow
760- 2019-11-05 TUN-2506: Expose active streams metrics
761
7622019.11.0
763- 2019-11-04 TUN-2502: Switch to go modules
764- 2019-11-04 TUN-2500: Don't send client registration errors to Sentry
765- 2019-11-04 TUN-2489: Delete stream from activestreammap when read and write are both closed
766- 2019-11-05 TUN-2505: Terminate stream on receipt of RST_STREAM; MuxedStream.CloseWrite() should terminate the MuxedStream.Write() loop
767- 2019-10-30 TUN-2451: Log inavlid path
768- 2019-10-22 TUN-2425: Enable cloudflared to serve multiple Hello World servers by having each of them create its own ServeMux
769- 2019-10-22 AUTH-2173: Prepends access login url with scheme if one doesnt exist
770- 2019-10-23 TUN-2460: Configure according to the ClientConfig recevied from a successful Connect
771- 2019-10-23 AUTH-2177: Reads and writes error streams
772
7732019.10.4
774- 2019-10-21 TUN-2450: Remove Brew publishing formula
775
7762019.10.3
777- 2019-10-18 Fix #129: Excessive memory usage streaming large files (#142)
778
7792019.10.2
780- 2019-10-17 AUTH-2167: Adds CLI option for host key directory
781
7822019.10.1
783- 2019-10-17 Adds variable to fix windows build
784
7852019.10.0
786- 2019-10-11 AUTH-2105: Dont require --destination arg
787- 2019-10-14 TUN-2344: log more details: http2.Framer.ErrorDetail() if available, connectionID
788- 2019-10-16 AUTH-2159: Moves shutdownC close into error handling AUTH-2161: Lowers size of preamble length AUTH-2160: Fixes url parsing logic
789- 2019-10-16 AUTH-2135: Adds support for IPv6 and tests
790- 2019-10-02 AUTH-2105: Adds support for local forwarding. Refactor auditlogger creation. AUTH-2088: Adds dynamic destination routing
791- 2019-10-09 AUTH-2114: Uses short lived cert auth for outgoing client connection
792- 2019-09-30 AUTH-2089: Revise ssh server to function as a proxy
793
7942019.9.2
795- 2019-09-26 TUN-2355: Roll back TUN-2276
796
7972019.9.1
798- 2019-09-23 TUN-2334: remove tlsConfig.ServerName special case
799- 2019-09-23 AUTH-2077: Quotes open browser command in windows
800- 2019-09-11 AUTH-2050: Adds time.sleep to temporarily avoid hitting tunnel muxer dealock issue
801- 2019-09-10 AUTH-2056: Writes stderr to its own stream for non-pty connections
802- 2019-09-16 TUN-2307: Capnp is the only serialization format used in tunnelpogs
803- 2019-09-18 TUN-2315: Replace Scope with IntentLabel
804- 2019-09-17 TUN-2309: Split ConnectResult into ConnectError and ConnectSuccess, each implementing its own capnp serialization logic
805- 2019-09-18 AUTH-2052: Adds tests for SSH server
806- 2019-09-18 AUTH-2067: Log commands correctly
807- 2019-09-19 AUTH-2055: Verifies token at edge on access login
808- 2019-09-04 TUN-2201: change SRV records used by cloudflared
809- 2019-09-06 TUN-2280: Revert "TUN-2260: add name/group to CapnpConnectParameters, remove Scope"
810- 2019-09-03 AUTH-1943 hooked up uploader to logger, added timestamp to session logs, add tests
811- 2019-09-04 AUTH-2036: Refactor user retrieval, shutdown after ssh server stops, add custom version string
812- 2019-09-06 AUTH-1942 added event log to ssh server
813- 2019-09-04 AUTH-2037: Adds support for ssh port forwarding
814- 2019-09-05 TUN-2276: Path encoding broken
815
8162019.9.0
817- 2019-09-05 TUN-2279: Revert path encoding fix
818- 2019-08-30 AUTH-2021 - check error for failing tests
819- 2019-08-29 AUTH-2030: Support both authorized_key and short lived cert authentication simultaniously without specifiying at start time
820- 2019-08-29 AUTH-2026: Adds support for non-pty sessions and inline command exec
821- 2019-08-26 AUTH-1943: Adds session logging
822- 2019-08-26 TUN-2162: Decomplect OpenStream to allow finer-grained timeouts
823- 2019-08-29 TUN-2260: add name/group to CapnpConnectParameters, remove Scope
824
8252019.8.4
826- 2019-08-30 Fix #111: Add support for specifying a specific HTTP Host: header on the origin. (#114)
827- 2019-08-22 TUN-2165: Add ClientConfig to tunnelrpc.ConnectResult
828- 2019-08-20 AUTH-2014: Checks users login shell
829- 2019-08-26 TUN-2243: Revert "STOR-519: Add db-connect, a SQL over HTTPS server"
830- 2019-08-27 TUN-2244: Add NO_AUTOUPDATE env var
831- 2019-08-22 AUTH-2018: Adds support for authorized keys and short lived certs
832- 2019-08-28 AUTH-2022: Adds ssh timeout configuration
833- 2019-08-28 TUN-1968: Gracefully diff StreamHandler.UpdateConfig
834- 2019-08-26 AUTH-2021 - s3 bucket uploading for SSH logs
835- 2019-08-19 AUTH-2004: Adds static host key support
836- 2019-07-18 AUTH-1941: Adds initial SSH server implementation
837
8382019.8.3
839- 2019-08-20 STOR-519: Add db-connect, a SQL over HTTPS server
840- 2019-08-20 Release 2019.8.2
841- 2019-08-20 Revert "AUTH-1941: Adds initial SSH server implementation"
842- 2019-08-11 TUN-2163: Add GrapQLType method to Scope interface
843- 2019-08-06 TUN-2152: Requests with a query in the URL are erroneously escaped
844- 2019-07-18 AUTH-1941: Adds initial SSH server implementation
845
8462019.8.1
847- 2019-08-05 TUN-2111: Implement custom serialization logic for FallibleConfig and OriginConfig
848- 2019-08-06 Revert "TUN-1736: Missing headers when passing an invalid path"
849
8502019.8.0
851- 2019-07-11 TUN-1956: Go 1.12 update
852- 2019-07-24 TUN-1736: Missing headers when passing an invalid path
853- 2019-07-30 TUN-2117: read group/system-name from CLI, send it to edge
854- 2019-08-02 TUN-2125: Add PostgresType() to Scope
855- 2019-08-05 TUN-2147: Implemented ScopeUnmarshaler
856- 2019-07-31 TUN-2110: Implement custom deserialization logic for OriginConfig
857- 2019-07-31 AUTH-1972: Deletes token lock file if backoff retry attempts exceeded and intercepts signals until lock is released
858
8592019.7.0
860- 2019-05-28 TUN-1913: Define OriginService for each type of origin
861- 2019-04-29 Build a docker container
862- 2019-06-12 TUN-1952: Group ClientConfig fields by the component that uses the config, and return the part of the config that failed to be applied
863- 2019-06-05 TUN-1893: Proxy requests to the origin based on tunnel hostname
864- 2019-06-17 TUN-1961: Create EdgeConnectionManager to maintain outbound connections to the edge
865- 2019-06-18 TUN-1885: Reconfigure cloudflared on receiving new ClientConfig
866- 2019-06-19 TUN-1976: Pass tunnel hostname through header
867- 2019-06-20 TUN-1982: Load custom origin CA when OriginCAPool is specified
868- 2019-06-26 TUN-2005: Upgrade logrus
869- 2019-06-20 TUN-1981: Write response header & body on proxy error to notify eyeballs of failure category
870- 2019-06-20 TUN-1977: Validate OriginConfig has valid URL, and use scheme to determine if a HTTPOriginService is expecting HTTP or Unix
871- 2019-06-13 DoH: change the media type to application/dns-message
872- 2019-06-26 AUTH-1736: Better handling of token revocation
873
8742019.6.0
875- 2019-05-17 TUN-1828: Update declarative tunnel config struct
876- 2019-05-29 Handle exit code on err
877- 2019-05-29 AUTH-1802: Fixed ssh-config templating
878- 2019-05-30 TUN-1914: Conflate HTTP and Unix OriginConfig, and add TLS config to WebSocketOriginConfig
879- 2019-06-03 AUTH-1811: ssh-gen config fixes
880
8812019.5.0
882- 2019-04-25 TUN-1781: ServeStream should return early on error
883- 2019-04-30 TUN-1786: Remove low-level Windows service logging
884- 2019-05-03 TUN-1807: Send cloudflared version in Connect RPC
885- 2019-01-23 AUTH-1557: Short Lived Certs
886- 2019-05-13 TUN-1847: Log a distinct message when OpenStream fails while waiting for response headers
887- 2019-05-13 AUTH-1706: fixes and testing
888- 2019-05-22 TUN-1880: Save debug and warn level log to logfile
889- 2019-05-22 AUTH-1781: fixed race condition for short lived certs, doc required config
890
8912019.4.1
892- 2019-03-18 TUN-1626: Create new supervisor to establish connection with origintunneld
893- 2019-04-04 TUN-1619: Add flag to test declarative tunnels.
894- 2019-04-05 TUN-1577: decompose carrier.StartServer to make TestStartServer less flappy
895- 2019-03-29 TUN-1606: Define CloudflaredConfig RPC structure, interface for cloudflared's RPC server
896- 2019-04-02 TUN-1682: Add context to OpenStream to prevent it from blocking indefinitely.
897- 2019-04-16 TUN-1732: cloudflared metrics should track userHostnames
898- 2019-04-17 TUN-1734: Pin packages at exact versions
899- 2019-04-18 TUN-1669: Update license message in help text. Also fix test
900
9012019.4.0
902- 2019-03-28 TUN-1648: ConnectionID is now a UUID
903- 2019-04-01 TUN-1673: Conflate Hello and Connect RPCs
904
9052019.3.2
906- 2019-03-22 TUN-1637: Free tunnels shouldn't require cert.pem
907- 2019-03-18 TUN-1604: Define Connect RPC call
908
9092019.3.1
910- 2019-03-09 Add rdp as a supported protocol in URL validation (#76)
911- 2019-03-15 TUN-1613: improved cloudflared RegisterTunnel fail metrics
912- 2019-03-17 TUN-1615: revert miekg/dns to last known working revision
913
9142019.3.0
915- 2018-12-28 make http transport aware of proxy from envvar
916- 2019-02-28 TUN-1559: fix nil dereference in TunnelConfig.CloseConnOnce
917- 2019-03-04 TUN-1451: Make non-interactive, non-service execution possible on Windows
918- 2019-03-04 TUN-1562: Refactor connectedSignal to be safe to close multiple times
919- 2019-02-27 TUN-1550: Add validation timeout for non-responsive origins
920- 2019-03-06 AUTH-1531: Named flags for ssh service tokens
921- 2019-02-14 Support unix sockets.
922- 2019-03-08 TUN-1389: Non-scalar flags in a cloudflared config.yml don't get logged
923- 2019-03-07 TUN-1522: If we can't get SRV from default resolver, get them from 1.1.1.1 DoT
924
9252019.2.1
926- 2019-02-14 TUN-1381: should tell you if you're on the latest version rather than just exiting silently
927- 2019-02-15 TUN-1467: build with Go 1.11
928- 2019-02-15 AUTH-1519: Added logging
929- 2019-02-19 TUN-1525: cloudflared metrics for registration success/fail
930- 2019-02-19 TUN-1510: Wrap the close() in sync.Once.Do
931
9322019.2.0
933- 2019-01-24 AUTH-1462: better curl arg parsing
934- 2019-02-01 TUN-1456: Only make one UUID
935- 2019-01-30 cloudflared/linux_service: Add missing /etc/init.d shebang
936- 2019-02-07 AUTH-1511: Add custom headers for ssh command
937- 2019-02-01 AUTH-1503: Added RDP support
938- 2019-02-01 AUTH-1403: Print the paths in the ssh-config instructions
939
9402019.1.0
941- 2018-12-10 TUN-1231: Horizontal overflow wrapping on the Hello page
942- 2018-12-17 TUN-1140: Show usage if invoked with no args or config
943- 2018-11-06 TUN-632 Filter out common network exceptions from going to Sentry on StartServer
944- 2019-01-07 TUN-1138: Install cloudflared service directory with 755 permissions
945- 2019-01-07 TUN-1265: Silent exit when failing to parse config
946- 2019-01-10 TUN-1350: Enhance error messages with cloudflarestatus.com link, if relevant
947- 2019-01-16 TUN-1358: Close readyList after Muxer.Serve() has stopped running
948- 2019-01-24 AUTH-1423: move from stdout to stderr
949- 2019-01-24 AUTH-1404: reauth if the token is about to expire within 15 minutes
950- 2019-01-24 AUTH-1459: improved ssh streaming error message
951- 2019-01-24 AUTH-1211: print all the versions
952- 2019-01-24 AUTH-1337: fix url path
953- 2019-01-28 TUN-1418: Rename ProtocolLogger to TransportLogger, and use TransportLogger to log RPC events.
954- 2019-01-28 TUN-1419: Identify request/response headers/content length with ray ID
955
9562018.12.1
957- 2018-12-11 TUN-1270: cloudflared panic (HA metrics missing label)
958
9592018.12.0
960- 2018-11-15 TUN-1196: Allow TLS config client CA and root CA to be constructed from multiple certificates
961- 2018-11-20 TUN-1209: TLS Config Certificates and GetCertificate can both be set
962- 2018-11-26 TUN-1212: Expose tunnel_id in metrics
963- 2018-11-30 TUN-1204: remove 'cloudflared hello' command
964- 2018-12-04 Fix license URL typo
965- 2018-12-07 TUN-1250: ValidateHTTPService shouldn't follow 302s
966
9672018.11.0
968- 2018-10-31 AUTH-1282: Fixed an issue where we were receiving as opposed sending on the channel.
969- 2018-11-06 TUN-1179: Fix log message in cmd/cloudflared/transfer.Run
970- 2018-11-13 AUTH-1308: get jwt even when you are already logged in
971- 2018-11-12 TUN-1190: check URL parse error when starting SSH proxy server
972- 2018-11-15 AUTH-1320: Fixed request issue and unhide the ssh command
973
9742018.10.5
975- 2018-10-18 TUN-968: Flow control for large requests/responses
976- 2018-10-26 TUN-1158: Windows: use process arguments rather than trivial service arguments
977- 2018-10-20 #30: Fix the Content-Length header for HTTP2->HTTP1
978- 2018-10-29 TUN-1160: pass Host header during origin url validation
979
9802018.10.4
981- 2018-09-21 AUTH-1070: added SSH/protocol forwarding
982- 2018-10-19 AUTH-1235: fixed packaging of deb dev file
983- 2018-10-19 TUN-1097: Host missing from WebSocket request
984- 2018-10-19 AUTH-1188: UX Review and Changes for CLI SSH Access
985
9862018.10.3
987- 2018-10-08 TUN-1099: Bring back changes in 2018.10.1
988- 2018-10-08 TUN-1098: removed deprecation error
989- 2018-10-08 TUN-1101: False negatives in Cloudflared error reporting
990
9912018.10.2
992- 2018-10-06 TUN-1093: Revert cloudflared to 2018.8.0
993
9942018.10.1
995- 2018-10-03 TUN-1012: Normalize config filename for Linux services
996- 2018-10-05 TUN-1081: cloudflared now generates UUIDs
997- 2018-10-05 TUN-1083: fixed incorrect help menu
998- 2018-10-05 TUN-1086: fixed config option
999
10002018.10.0
1001- 2018-08-15 AUTH-910, AUTH-1049, AUTH-1068, AUTH-1056: Generate and store Access tokens with E2EE option, curl/cmd wrapper
1002- 2018-09-11 TUN-890: To support free tunnels, hostname can now be ""
1003- 2018-09-12 TUN-810: Cloudflared should open dash/argotunnel not dash/warp
1004- 2018-09-12 TUN-985: Don't display tunnel ID if it's empty string
1005- 2018-09-11 TUN-881: Display trial zone URL upon successful registration
1006- 2018-09-11 TUN-868: HTTP/HTTPS mismatch should have a better error message
1007- 2018-09-19 TUN-1028: Unhide cloudflared compression flag
1008- 2018-09-20 AUTH-1139: refactored cloudflared help menu
1009- 2018-09-20 TUN-1035: New text for cloudflared tunnel --help
1010- 2018-09-18 AUTH-1136: addressing beta feedback
1011- 2018-09-26 AUTH-1165: hide access command
1012- 2018-09-26 TUN-1046: Document that delta compression is a beta feature
1013- 2018-09-28 TUN-1056: Lint error broke build
1014- 2018-09-27 TUN-1052: Origintunneld can send back an Origincert to Cloudflared
1015- 2018-09-28 TUN-1052: Changing type of OriginCert to :Data
1016- 2018-10-01 TUN-1062: Makefile target for regenerating Capn Proto definitions
1017- 2018-10-02 TUN-1064: Revert OriginCert capnp changes in Cloudflared. Reverts commits a1ee2342e97 and 8c756c45785.
1018- 2018-10-03 TUN-1076: Pin capnproto2 to version 2.17.1
1019- 2018-10-03 AUTH-1199: unhide access command, added beta label
1020
10212018.8.0
1022- 2018-05-01 Initial commit
1023- 2018-05-03 TUN-595: Add License/Readme files to cloudflared
1024- 2018-05-01 TUN-528: Move cloudflared into a separate repo
1025- 2018-07-24 TUN-813: Clean up cloudflared dependencies
1026- 2018-07-25 TUN-814: Handle error in CreateTLSListener before closing listener
1027- 2018-07-24 TUN-804: create Makefile recipe to build cloudflared and run tests
1028- 2018-07-26 TUN-817: Increase the log time precision
1029- 2018-07-30 TUN-828: Added Connection: keep-alive header
1030- 2018-07-30 TUN-829: prefer p256 curve
1031- 2018-07-31 TUN-834: Enable tracing on cloudflared
1032- 2018-08-07 TUN-820: Fix caddyfile gitignore
1033- 2018-07-25 TUN-804: create make recipe for building deb package
1034- 2018-08-07 TUN-861: Disable cloudflared tracing by default; preserve the latest tracefile
1035- 2018-08-07 TUN-857: Pull the brotli-go dependency from Github
1036- 2018-08-14 TUN-897: Bring back missing Brotli files
1037- 2018-07-26 TUN-804: create makefile recipe to release cloudflared using equinox
1038- 2018-08-15 TUN-901: makefile target for homebrew release
1039- 2018-07-30 TUN-801: Rapid SQL Proxy
1040- 2018-08-27 TUN-833: Don't log system root certificate loading failure on Windows