cloudflare/cloudflared

Public

mirrored from https://github.com/cloudflare/cloudflaredAvailable

CodeCommitsIssuesPull requestsActionsInsightsSecurity
2023.10.0

Branches

Tags

  • No tags available.
0Branches0Tags
Go to file
Add file
Code

Clone

HTTPS

Download ZIP

RELEASE_NOTES

1611lines · modecode

12023.10.0
2- 2023-10-06 TUN-7864: Document cloudflared versions support
3- 2023-10-03 CUSTESC-33731: Make rule match test report rule in 0-index base
4- 2023-09-22 TUN-7824: Fix usage of systemctl status to detect which services are installed
5- 2023-09-20 TUN-7813: Improve tunnel delete command to use cascade delete
6- 2023-09-20 TUN-7787: cloudflared only list ip routes targeted for cfd_tunnel
7- 2023-09-15 TUN-7787: Refactor cloudflared to use new route endpoints based on route IDs
8- 2023-09-08 TUN-7776: Remove warp-routing flag from cloudflared
9- 2023-09-05 TUN-7756: Clarify that QUIC is mandatory to support ICMP proxying
10
112023.8.2
12- 2023-08-25 TUN-7700: Implement feature selector to determine if connections will prefer post quantum cryptography
13- 2023-08-22 TUN-7707: Use X25519Kyber768Draft00 curve when post-quantum feature is enabled
14
152023.8.1
16- 2023-08-23 TUN-7718: Update R2 Token to no longer encode secret
17
182023.8.0
19- 2023-07-26 TUN-7584: Bump go 1.20.6
20
212023.7.3
22- 2023-07-25 TUN-7628: Correct Host parsing for Access
23- 2023-07-24 TUN-7624: Fix flaky TestBackoffGracePeriod test in cloudflared
24
252023.7.2
26- 2023-07-19 TUN-7599: Onboard cloudflared to Software Dashboard
27- 2023-07-19 TUN-7587: Remove junos builds
28- 2023-07-18 TUN-7597: Add flag to disable auto-update services to be installed
29- 2023-07-17 TUN-7594: Add nightly arm64 cloudflared internal deb publishes
30- 2023-07-14 TUN-7586: Upgrade go-jose/go-jose/v3 and core-os/go-oidc/v3
31- 2023-07-14 TUN-7589: Remove legacy golang.org/x/crypto/ssh/terminal package usage
32- 2023-07-14 TUN-7590: Remove usages of ioutil
33- 2023-07-14 TUN-7585: Remove h2mux compression
34- 2023-07-14 TUN-7588: Update package coreos/go-systemd
35
362023.7.1
37- 2023-07-13 TUN-7582: Correct changelog wording for --management-diagnostics
38- 2023-07-12 TUN-7575: Add option to disable PTMU discovery over QUIC
39
402023.7.0
41- 2023-07-06 TUN-7558: Flush on Writes for StreamBasedOriginProxy
42- 2023-07-05 TUN-7553: Add flag to enable management diagnostic services
43- 2023-07-05 TUN-7564: Support cf-trace-id for cloudflared access
44- 2023-07-05 TUN-7477: Decrement UDP sessions on shutdown
45- 2023-07-03 TUN-7545: Add support for full bidirectionally streaming with close signal propagation
46- 2023-06-30 TUN-7549: Add metrics route to management service
47- 2023-06-30 TUN-7551: Complete removal of raven-go to sentry-go
48- 2023-06-30 TUN-7550: Add pprof endpoint to management service
49- 2023-06-29 TUN-7543: Add --debug-stream flag to cloudflared access ssh
50- 2023-06-26 TUN-6011: Remove docker networks from ICMP Proxy test
51- 2023-06-20 AUTH-5328 Pass cloudflared_token_check param when running cloudflared access login
52
532023.6.1
54- 2023-06-19 TUN-7480: Added a timeout for unregisterUDP.
55- 2023-06-16 TUN-7477: Add UDP/TCP session metrics
56- 2023-06-14 TUN-7468: Increase the limit of incoming streams
57
582023.6.0
59- 2023-06-15 TUN-7471: Fixes cloudflared not closing the quic stream on unregister UDP session
60- 2023-06-09 TUN-7463: Add default ingress rule if no ingress rules are provided when updating the configuration
61- 2023-05-31 TUN-7447: Add a cover build to report code coverage
62
632023.5.1
64- 2023-05-16 TUN-7424: Add CORS headers to host_details responses
65- 2023-05-11 TUN-7421: Add *.cloudflare.com to permitted Origins for management WebSocket requests
66- 2023-05-05 TUN-7404: Default configuration version set to -1
67- 2023-05-05 TUN-7227: Migrate to devincarr/quic-go
68
692023.5.0
70- 2023-04-27 TUN-7398: Add support for quic safe stream to set deadline
71- 2023-04-26 TUN-7394: Retry StartFirstTunnel on quic.ApplicationErrors
72- 2023-04-26 TUN-7392: Ignore release checksum upload if asset already uploaded
73- 2023-04-25 TUN-7392: Ignore duplicate artifact uploads for github release
74- 2023-04-25 TUN-7393: Add json output for cloudflared tail
75- 2023-04-24 TUN-7390: Remove Debian stretch builds
76
772023.4.2
78- 2023-04-24 TUN-7133: Add sampling support for streaming logs
79- 2023-04-21 TUN-7141: Add component tests for streaming logs
80- 2023-04-21 TUN-7373: Streaming logs override for same actor
81- 2023-04-20 TUN-7383: Bump requirements.txt
82- 2023-04-19 TUN-7361: Add a label to override hostname
83- 2023-04-19 TUN-7378: Remove RPC debug logs
84- 2023-04-18 TUN-7360: Add Get Host Details handler in management service
85- 2023-04-17 AUTH-3122 Verify that Access tokens are still valid in curl command
86- 2023-04-17 TUN-7129: Categorize TCP logs for streaming logs
87- 2023-04-17 TUN-7130: Categorize UDP logs for streaming logs
88- 2023-04-10 AUTH-4887 Add aud parameter to token transfer url
89
902023.4.1
91- 2023-04-13 TUN-7368: Report destination address for TCP requests in logs
92- 2023-04-12 TUN-7134: Acquire token for cloudflared tail
93- 2023-04-12 TUN-7131: Add cloudflared log event to connection messages and enable streaming logs
94- 2023-04-11 TUN-7132 TUN-7136: Add filter support for streaming logs
95- 2023-04-06 TUN-7354: Don't warn for empty ingress rules when using --token
96- 2023-04-06 TUN-7128: Categorize logs from public hostname locations
97- 2023-04-06 TUN-7351: Add streaming logs session ping and timeout
98- 2023-04-06 TUN-7335: Fix cloudflared update not working in windows
99
1002023.4.0
101- 2023-04-07 TUN-7356: Bump golang.org/x/net package to 0.7.0
102- 2023-04-07 TUN-7357: Bump to go 1.19.6
103- 2023-04-06 TUN-7127: Disconnect logger level requirement for management
104- 2023-04-05 TUN-7332: Remove legacy tunnel force flag
105- 2023-04-05 TUN-7135: Add cloudflared tail
106- 2023-04-04 Add suport for OpenBSD (#916)
107- 2023-04-04 Fix typo (#918)
108- 2023-04-04 TUN-7125: Add management streaming logs WebSocket protocol
109- 2023-03-30 TUN-9999: Remove classic tunnel component tests
110- 2023-03-30 TUN-7126: Add Management logger io.Writer
111- 2023-03-29 TUN-7324: Add http.Hijacker to connection.ResponseWriter
112- 2023-03-29 TUN-7333: Default features checkable at runtime across all packages
113- 2023-03-21 TUN-7124: Add intercept ingress rule for management requests
114
1152023.3.1
116- 2023-03-13 TUN-7271: Return 503 status code when no ingress rules configured
117- 2023-03-10 TUN-7272: Fix cloudflared returning non supported status service which breaks configuration migration
118- 2023-03-09 TUN-7259: Add warning for missing ingress rules
119- 2023-03-09 TUN-7268: Default to Program Files as location for win32
120- 2023-03-07 TUN-7252: Remove h2mux connection
121- 2023-03-07 TUN-7253: Adopt http.ResponseWriter for connection.ResponseWriter
122- 2023-03-06 TUN-7245: Add bastion flag to origin service check
123- 2023-03-06 EDGESTORE-108: Remove deprecated s3v2 signature
124- 2023-03-02 TUN-7226: Fixed a missed rename
125
1262023.3.0
127- 2023-03-01 GH-352: Add Tunnel CLI option "edge-bind-address" (#870)
128- 2023-03-01 Fixed WIX template to allow MSI upgrades (#838)
129- 2023-02-28 TUN-7213: Decode Base64 encoded key before writing it
130- 2023-02-28 check.yaml: update actions to v3 (#876)
131- 2023-02-27 TUN-7213: Debug homebrew-cloudflare build
132- 2023-02-15 RTG-2476 Add qtls override for Go 1.20
133
1342023.2.2
135- 2023-02-22 TUN-7197: Add connIndex tag to debug messages of incoming requests
136- 2023-02-08 TUN-7167: Respect protocol overrides with --token
137- 2023-02-06 TUN-7065: Remove classic tunnel creation
138- 2023-02-06 TUN-6938: Force h2mux protocol to http2 for named tunnels
139- 2023-02-06 TUN-6938: Provide QUIC as first in protocol list
140- 2023-02-03 TUN-7158: Correct TCP tracing propagation
141- 2023-02-01 TUN-7151: Update changes file with latest release notices
142
1432023.2.1
144- 2023-02-01 TUN-7065: Revert Ingress Rule check for named tunnel configurations
145- 2023-02-01 Revert "TUN-7065: Revert Ingress Rule check for named tunnel configurations"
146- 2023-02-01 Revert "TUN-7065: Remove classic tunnel creation"
1472023.1.0
148- 2023-01-10 TUN-7064: RPM digests are now sha256 instead of md5sum
149- 2023-01-04 RTG-2418 Update qtls
150- 2022-12-24 TUN-7057: Remove dependency github.com/gorilla/mux
151- 2022-12-24 TUN-6724: Migrate to sentry-go from raven-go
152
1532022.12.1
154- 2022-12-20 TUN-7021: Fix proxy-dns not starting when cloudflared tunnel is run
155- 2022-12-15 TUN-7010: Changelog for release 2022.12.0
156
1572022.12.0
158- 2022-12-14 TUN-6999: cloudflared should attempt other edge addresses before falling back on protocol
159- 2022-12-13 TUN-7004: Dont show local config dirs for remotely configured tuns
160- 2022-12-12 TUN-7003: Tempoarily disable erroneous notarize-app
161- 2022-12-12 TUN-7003: Add back a missing fi
162- 2022-12-07 TUN-7000: Reduce metric cardinality of closedConnections metric by removing error as tag
163- 2022-12-07 TUN-6994: Improve logging config file not found
164- 2022-12-07 TUN-7002: Randomise first region selection
165- 2022-12-07 TUN-6995: Disable quick-tunnels spin up by default
166- 2022-12-05 TUN-6984: Add bash set x to improve visibility during builds
167- 2022-12-05 TUN-6984: [CI] Ignore security import errors for code_sigining
168- 2022-12-05 TUN-6984: [CI] Don't fail on unset.
169- 2022-11-30 TUN-6984: Set euo pipefile for homebrew builds
170
1712022.11.1
172- 2022-11-29 TUN-6981: We should close UDP socket if failed to connecto to edge
173- 2022-11-25 CUSTESC-23757: Fix a bug where a wildcard ingress rule would match an host without starting with a dot
174- 2022-11-24 TUN-6970: Print newline when printing tunnel token
175- 2022-11-22 TUN-6963: Refactor Metrics service setup
1762022.11.0
177- 2022-11-16 Revert "TUN-6935: Cloudflared should use APIToken instead of serviceKey"
178- 2022-11-16 TUN-6929: Use same protocol for other connections as first one
179- 2022-11-14 TUN-6941: Reduce log level to debug when failing to proxy ICMP reply
180- 2022-11-14 TUN-6935: Cloudflared should use APIToken instead of serviceKey
181- 2022-11-14 TUN-6935: Cloudflared should use APIToken instead of serviceKey
182- 2022-11-11 TUN-6937: Bump golang.org/x/* packages to new release tags
183- 2022-11-10 ZTC-234: macOS tests
184- 2022-11-09 TUN-6927: Refactor validate access configuration to allow empty audTags only
185- 2022-11-08 ZTC-234: Replace ICMP funnels when ingress connection changes
186- 2022-11-04 TUN-6917: Bump go to 1.19.3
187- 2022-11-02 Issue #574: Better ssh config for short-lived cert (#763)
188- 2022-10-28 TUN-6898: Fix bug handling IPv6 based ingresses with missing port
189- 2022-10-28 TUN-6898: Refactor addPortIfMissing
1902022.10.3
191- 2022-10-24 TUN-6871: Add default feature to cloudflared to support EOF on QUIC connections
192- 2022-10-19 TUN-6876: Fix flaky TestTraceICMPRouterEcho by taking account request span can return before reply
193- 2022-10-18 TUN-6867: Clear spans right after they are serialized to avoid returning duplicate spans
1942022.10.2
195- 2022-10-18 TUN-6869: Fix Makefile complaining about missing GO packages
196- 2022-10-18 TUN-6864: Don't reuse port in quic unit tests
197- 2022-10-18 TUN-6868: Return left padded tracing ID when tracing identity is converted to string
198
1992022.10.1
200- 2022-10-16 TUN-6861: Trace ICMP on Windows
201- 2022-10-15 TUN-6860: Send access configuration keys to the edge
202- 2022-10-14 TUN-6858: Trace ICMP reply
203- 2022-10-13 TUN-6855: Add DatagramV2Type for IP packet with trace and tracing spans
204- 2022-10-13 TUN-6856: Refactor to lay foundation for tracing ICMP
205- 2022-10-13 TUN-6604: Trace icmp echo request on Linux and Darwin
206- 2022-10-12 Fix log message (#591)
207- 2022-10-12 TUN-6853: Reuse source port when connecting to the edge for quic connections
208- 2022-10-11 TUN-6829: Allow user of datagramsession to control logging level of errors
209- 2022-10-10 RTG-2276 Update qtls and go mod tidy
210- 2022-10-05 Add post-quantum flag to quick tunnel
211- 2022-10-05 TUN-6823: Update github release message to pull from KV
212- 2022-10-04 TUN-6825: Fix cloudflared:version images require arch hyphens
213- 2022-10-03 TUN-6806: Add ingress rule number to log when filtering due to middlware handler
214- 2022-08-17 Label correct container
215- 2022-08-16 Fix typo in help text for `cloudflared tunnel route lb`
216- 2022-07-18 drop usage of cat when sed is invoked to generate the manpage
217- 2021-03-15 update-build-readme
218- 2021-03-15 fix link
219
2202022.10.0
221- 2022-09-30 TUN-6755: Remove unused publish functions
222- 2022-09-30 TUN-6813: Only proxy ICMP packets when warp-routing is enabled
223- 2022-09-29 TUN-6811: Ping group range should be parsed as int32
224- 2022-09-29 TUN-6812: Drop IP packets if ICMP proxy is not initialized
225- 2022-09-28 TUN-6716: Document limitation of Windows ICMP proxy
226- 2022-09-28 TUN-6810: Add component test for post-quantum
227- 2022-09-27 TUN-6715: Provide suggestion to add cloudflared to ping_group_range if it failed to open ICMP socket
228- 2022-09-22 TUN-6792: Fix brew core release by not auditing the formula
229- 2022-09-22 TUN-6774: Validate OriginRequest.Access to add Ingress.Middleware
230- 2022-09-22 TUN-6775: Add middleware.Handler verification to ProxyHTTP
231- 2022-09-22 TUN-6791: Calculate ICMPv6 checksum
232- 2022-09-22 TUN-6801: Add punycode alternatives for ingress rules
233- 2022-09-21 TUN-6772: Add a JWT Validator as an ingress verifier
234- 2022-09-21 TUN-6772: Add a JWT Validator as an ingress verifier
235- 2022-09-21 TUN-6774: Validate OriginRequest.Access to add Ingress.Middleware
236- 2022-09-21 TUN-6772: Add a JWT Validator as an ingress verifier
237- 2022-09-20 TUN-6741: ICMP proxy tries to listen on specific IPv4 & IPv6 when possible
2382022.9.1
239- 2022-09-20 TUN-6777: Fix race condition in TestFunnelIdleTimeout
240- 2022-09-20 TUN-6595: Enable datagramv2 and icmp proxy by default
241- 2022-09-20 TUN-6773: Add access based configuration to ingress.OriginRequestConfig
242- 2022-09-19 TUN-6778: Cleanup logs about ICMP
243- 2022-09-19 TUN-6779: cloudflared should also use the root CAs from system pool to validate edge certificate
244- 2022-09-19 TUN-6780: Add support for certReload to also include support for client certificates
245- 2022-09-16 TUN-6767: Build ICMP proxy for Windows only when CGO is enabled
246- 2022-09-15 TUN-6590: Use Windows Teamcity agent to build binary
247- 2022-09-13 TUN-6592: Decrement TTL and return ICMP time exceed if it's 0
248- 2022-09-09 TUN-6749: Fix icmp_generic build
249- 2022-09-09 TUN-6744: On posix platforms, assign unique echo ID per (src, dst, echo ID)
250- 2022-09-08 TUN-6743: Support ICMPv6 echo on Windows
251- 2022-09-08 TUN-6689: Utilize new RegisterUDPSession to begin tracing
252- 2022-09-07 TUN-6688: Update RegisterUdpSession capnproto to include trace context
253- 2022-09-06 TUN-6740: Detect no UDP packets allowed and fallback from QUIC in that case
254- 2022-09-06 TUN-6654: Support ICMPv6 on Linux and Darwin
255- 2022-09-02 TUN-6696: Refactor flow into funnel and close idle funnels
256- 2022-09-02 TUN-6718: Bump go and go-boring 1.18.6
257- 2022-08-29 TUN-6531: Implement ICMP proxy for Windows using IcmpSendEcho
258- 2022-08-24 RTG-1339 Support post-quantum hybrid key exchange
259
2602022.9.0
261- 2022-09-05 TUN-6737: Fix datagramV2Type should be declared in its own block so it starts at 0
262- 2022-09-01 TUN-6725: Fix testProxySSEAllData
263- 2022-09-01 TUN-6726: Fix maxDatagramPayloadSize for Windows QUIC datagrams
264- 2022-09-01 TUN-6729: Fix flaky TestClosePreviousProxies
265- 2022-09-01 TUN-6728: Verify http status code ingress rule
266- 2022-08-25 TUN-6695: Implement ICMP proxy for linux
267
2682022.8.4
269- 2022-08-31 TUN-6717: Update Github action to run with Go 1.19
270- 2022-08-31 TUN-6720: Remove forcibly closing connection during reconnect signal
271- 2022-08-29 Release 2022.8.3
272
2732022.8.3
274- 2022-08-26 TUN-6708: Fix replace flow logic
275- 2022-08-25 TUN-6705: Tunnel should retry connections forever
276- 2022-08-25 TUN-6704: Honor protocol flag when edge discovery is unreachable
277- 2022-08-25 TUN-6699: Add metric for packet too big dropped
278- 2022-08-24 TUN-6691: Properly error check for net.ErrClosed
279- 2022-08-22 TUN-6679: Allow client side of quic request to close body
280- 2022-08-22 TUN-6586: Change ICMP proxy to only build for Darwin and use echo ID to track flows
281- 2022-08-18 TUN-6530: Implement ICMPv4 proxy
282- 2022-08-17 TUN-6666: Define packet package
283- 2022-08-17 TUN-6667: DatagramMuxerV2 provides a method to receive RawPacket
284- 2022-08-16 TUN-6657: Ask for Tunnel ID and Configuration on Bug Report
285- 2022-08-16 TUN-6676: Add suport for trailers in http2 connections
286- 2022-08-11 TUN-6575: Consume cf-trace-id from incoming http2 TCP requests
287
2882022.8.2
289- 2022-08-16 TUN-6656: Docker for arm64 should not be deployed in an amd64 container
290
2912022.8.1
292- 2022-08-15 TUN-6617: Updated CHANGES.md for protocol stickiness
293- 2022-08-12 EDGEPLAT-3918: bump go and go-boring to 1.18.5
294- 2022-08-12 TUN-6652: Publish dockerfile for both amd64 and arm64
295- 2022-08-11 TUN-6617: Dont fallback to http2 if QUIC conn was successful.
296- 2022-08-11 TUN-6617: Dont fallback to http2 if QUIC conn was successful.
297- 2022-08-11 Revert "TUN-6617: Dont fallback to http2 if QUIC conn was successful."
298- 2022-08-11 TUN-6617: Dont fallback to http2 if QUIC conn was successful.
299- 2022-08-01 TUN-6584: Define QUIC datagram v2 format to support proxying IP packets
300
3012022.8.0
302- 2022-08-10 TUN-6637: Upgrade quic-go
303- 2022-08-10 TUN-6646: Add support to SafeStreamCloser to close only write side of stream
304- 2022-08-09 TUN-6642: Fix unexpected close of quic stream triggered by upstream origin close
305- 2022-08-09 TUN-6639: Validate cyclic ingress configuration
306- 2022-08-08 TUN-6637: Upgrade go version and quic-go
307- 2022-08-08 TUN-6639: Validate cyclic ingress configuration
308- 2022-08-04 EDGEPLAT-3918: build cloudflared for Bookworm
309- 2022-08-02 Revert "TUN-6576: Consume cf-trace-id from incoming TCP requests to create root span"
310- 2022-07-27 TUN-6601: Update gopkg.in/yaml.v3 references in modules
311- 2022-07-26 TUN-6576: Consume cf-trace-id from incoming TCP requests to create root span
312- 2022-07-26 TUN-6576: Consume cf-trace-id from incoming TCP requests to create root span
313- 2022-07-25 TUN-6598: Remove auto assignees on github issues
314- 2022-07-20 TUN-6583: Remove legacy --ui flag
315- 2022-07-20 cURL supports stdin and uses os pipes directly without copying
316- 2022-07-07 TUN-6517: Use QUIC stream context while proxying HTTP requests and TCP connections
3172022.7.1
318- 2022-07-06 TUN-6503: Fix transport fallback from QUIC in face of dial error "no network activity"
319
3202022.7.0
321- 2022-07-05 TUN-6499: Remove log that is per datagram
322- 2022-06-24 TUN-6460: Rename metric label location to edge_location
323- 2022-06-24 TUN-6459: Add cloudflared user-agent to access calls
324- 2022-06-17 TUN-6427: Differentiate between upstream request closed/canceled and failed origin requests
325- 2022-06-17 TUN-6388: Fix first tunnel connection not retrying
326- 2022-06-13 TUN-6384: Correct duplicate connection error to fetch new IP first
327- 2022-06-13 TUN-6373: Add edge-ip-version to remotely pushed configuration
328- 2022-06-07 TUN-6010: Add component tests for --edge-ip-version
329- 2022-05-20 TUN-6007: Implement new edge discovery algorithm
330- 2022-02-18 Ensure service install directories are created before writing file
331
3322022.6.3
333- 2022-06-20 TUN-6362: Add armhf support to cloudflare packaging
334
3352022.6.2
336- 2022-06-13 TUN-6381: Write error data on QUIC stream when we fail to talk to the origin; separate logging for protocol errors vs. origin errors.
337- 2022-06-17 TUN-6414: Remove go-sumtype from cloudflared build process
338- 2022-06-01 Add Http2Origin option to force HTTP/2 origin connections
339- 2022-06-02 fix ingress rules unit test
340- 2022-06-09 Update remaining OriginRequestConfig functions for Http2Origins
341- 2022-05-31 Add image source label to docker container.
342- 2022-05-10 Warp Private Network link updated
343
3442022.6.1
345- 2022-06-14 TUN-6395: Fix writing RPM repo data
346
3472022.6.0
348- 2022-06-14 Revert "TUN-6010: Add component tests for --edge-ip-version"
349- 2022-06-14 Revert "TUN-6373: Add edge-ip-version to remotely pushed configuration"
350- 2022-06-14 Revert "TUN-6384: Correct duplicate connection error to fetch new IP first"
351- 2022-06-14 Revert "TUN-6007: Implement new edge discovery algorithm"
352- 2022-06-13 TUN-6385: Don't share err between acceptStream loop and per-stream goroutines
353- 2022-06-13 TUN-6384: Correct duplicate connection error to fetch new IP first
354- 2022-06-13 TUN-6373: Add edge-ip-version to remotely pushed configuration
355- 2022-06-13 TUN-6380: Enforce connect and keep-alive timeouts for TCP connections in both WARP routing and websocket based TCP proxy.
356- 2022-06-11 Update issue templates
357- 2022-06-11 Amendment to previous PR
358- 2022-06-09 TUN-6347: Add TCP stream logs with FlowID
359- 2022-06-08 TUN-6361: Add cloudflared arm builds to pkging as well
360- 2022-06-07 TUN-6357: Add connector id to ready check endpoint
361- 2022-06-07 TUN-6010: Add component tests for --edge-ip-version
362- 2022-06-06 TUN-6191: Update quic-go to v0.27.1 and with custom patch to allow keep alive period to be configurable
363- 2022-06-03 TUN-6343: Fix QUIC->HTTP2 fallback
364- 2022-06-02 TUN-6339: Add config for IPv6 support
365- 2022-06-02 TUN-6341: Fix default config value for edge-ip-version
366- 2022-06-01 TUN-6323: Add Xenial and Trusty for Ubuntu pkging
367- 2022-05-31 TUN-6210: Add cloudflared.repo to make it easy for yum installs
368- 2022-05-30 TUN-6293: Update yaml v3 to latest hotfix
369- 2022-05-20 TUN-6007: Implement new edge discovery algorithm
3702022.5.3
371- 2022-05-30 TUN-6308: Add debug logs to see if packets are sent/received from edge
372- 2022-05-30 TUN-6301: Allow to update logger used by UDP session manager
373
3742022.5.2
375- 2022-05-23 TUN-6270: Import gpg keys from environment variables
376- 2022-05-24 TUN-6209: Improve feedback process if release_pkgs to deb and rpm fail
377- 2022-05-24 TUN-6280: Don't wrap qlog connection tracer for gatethering QUIC metrics since we're not writing qlog files.
378- 2022-05-25 TUN-6209: Sign RPM packages
379- 2022-05-25 TUN-6285: Upload pkg assets to repos when cloudflared is released.
380- 2022-05-24 TUN-6282: Upgrade golang to 1.17.10, go-boring to 1.17.9
381- 2022-05-26 TUN-6292: Debug builds for cloudflared
382- 2022-05-28 TUN-6304: Fixed some file permission issues
383- 2022-05-11 TUN-6197: Publish to brew core should not try to open the browser
384- 2022-05-12 TUN-5943: Add RPM support
385- 2022-05-18 TUN-6248: Fix panic in cloudflared during tracing when origin doesn't provide header map
386- 2022-05-18 TUN-6250: Add upstream response status code to tracing span attributes
387
3882022.5.1
389- 2022-05-06 TUN-6146: Release_pkgs is now a generic command line script
390- 2022-05-06 TUN-6185: Fix tcpOverWSOriginService not using original scheme for String representation
391- 2022-05-05 TUN-6175: Simply debian packaging by structural upload
392- 2022-05-05 TUN-5945: Added support for Ubuntu releases
393- 2022-05-04 TUN-6054: Create and upload deb packages to R2
394- 2022-05-03 TUN-6161: Set git user/email for brew core release
395- 2022-05-03 TUN-6166: Fix mocked QUIC transport for UDP proxy manager to return expected error
396- 2022-04-27 TUN-6016: Push local managed tunnels configuration to the edge
3972022.5.0
398- 2022-05-02 TUN-6158: Update golang.org/x/crypto
399- 2022-04-20 VULN-8383 Bump yaml.v2 to yaml.v3
400- 2022-04-21 TUN-6123: For a given connection with edge, close all datagram sessions through this connection when it's closed
401- 2022-04-20 TUN-6015: Add RPC method for pushing local config
402- 2022-04-21 TUN-6130: Fix vendoring due to case sensitive typo in package
403- 2022-04-27 TUN-6142: Add tunnel details support to RPC
404- 2022-04-28 TUN-6014: Add remote config flag as default feature
405- 2022-04-12 TUN-6000: Another fix for publishing to brew core
406- 2022-04-11 TUN-5990: Add otlp span export to response header
407- 2022-04-19 TUN-6070: First connection retries other edge IPs if the error is quic timeout(likely due to firewall blocking UDP)
408- 2022-04-11 TUN-6030: Add ttfb span for origin http request
409
4102022.4.1
411- 2022-04-11 TUN-6035: Reduce buffer size when proxying data
412- 2022-04-11 TUN-6038: Reduce buffer size used for proxying data
413- 2022-04-11 TUN-6043: Allow UI-managed Tunnels to fallback from QUIC but warn about that
414- 2022-04-07 TUN-6000 add version argument to bump-formula-pr
415- 2022-04-06 TUN-5989: Add in-memory otlp exporter
416
4172022.4.0
418- 2022-04-01 TUN-5973: Add backoff for non-recoverable errors as well
419- 2022-04-05 TUN-5992: Use QUIC protocol for remotely managed tunnels when protocol is unspecified
420- 2022-04-06 Update Makefile
421- 2022-04-06 TUN-5995: Update prometheus to 1.12.1 to avoid vulnerabilities
422- 2022-04-07 TUN-5995: Force prometheus v1.12.1 usage
423- 2022-04-07 TUN-4130: cloudflared docker images now have a latest tag
424- 2022-03-30 TUN-5842: Fix flaky TestConcurrentUpdateAndRead by making sure resources are released
425- 2022-03-30 carrier: fix dropped errors
426- 2022-03-25 TUN-5959: tidy go.mod
427- 2022-03-25 TUN-5958: Fix release to homebrew core
428- 2022-03-28 TUN-5960: Do not log the tunnel token or json credentials
429- 2022-03-28 TUN-5956: Add timeout to session manager APIs
430
4312022.3.4
432- 2022-03-22 TUN-5918: Clean up text in cloudflared tunnel --help
433- 2022-03-22 TUN-5895 run brew bump-formula-pr on release
434- 2022-03-22 TUN-5915: New cloudflared command to allow to retrieve the token credentials for a Tunnel
435- 2022-03-24 TUN-5933: Better messaging to help user when installing service if it is already installed
436- 2022-03-25 TUN-5954: Start cloudflared service in Linux too similarly to other OSs
437- 2022-03-14 TUN-5869: Add configuration endpoint in metrics server
438
4392022.3.3
440- 2022-03-17 TUN-5893: Start windows service on install, stop on uninstall. Previously user had to manually start the service after running 'cloudflared tunnel install' and stop the service before running uninstall command.
441- 2022-03-17 Revert "CC-796: Remove dependency on unsupported version of go-oidc"
442- 2022-03-18 TUN-5881: Clarify success (or lack thereof) of (un)installing cloudflared service
443- 2022-03-18 CC-796: Remove dependency on unsupported version of go-oidc
444- 2022-03-18 TUN-5907: Change notes for 2022.3.3
445
4462022.3.2
447- 2022-03-10 TUN-5833: Create constant for allow-remote-config
448- 2022-03-15 TUN-5867: Return error if service was already installed
449- 2022-03-16 TUN-5833: Send feature `allow_remote_config` if Tunnel is run with --token
450- 2022-03-08 TUN-5849: Remove configuration debug log
451- 2022-03-08 TUN-5850: Update CHANGES.md with latest releases
452- 2022-03-08 TUN-5851: Update all references to point to Apache License 2.0
453- 2022-03-07 TUN-5853 Add "install" make target and build package manager info into executable
454- 2022-03-08 TUN-5801: Add custom wrapper for OriginConfig for JSON serde
455- 2022-03-09 TUN-5703: Add prometheus metric for current configuration version
456- 2022-02-05 CC-796: Remove dependency on unsupported version of go-oidc
457
4582022.3.1
459- 2022-03-04 TUN-5837: Log panic recovery in http2 logic with debug level log
460- 2022-03-04 TUN-5696: HTTP/2 Configuration Update
461- 2022-03-04 TUN-5836: Avoid websocket#Stream function from crashing cloudflared with unexpected memory access
462- 2022-03-05 TUN-5836: QUIC transport no longer sets body to nil in any condition
463
4642022.3.0
465- 2022-03-02 TUN-5680: Adapt component tests for new service install based on token
466- 2022-02-21 TUN-5682: Remove name field from credentials
467- 2022-02-21 TUN-5681: Add support for running tunnel using Token
468- 2022-02-28 TUN-5824: Update updater no-update-in-shell link
469- 2022-02-28 TUN-5823: Warn about legacy flags that are ignored when ingress rules are used
470- 2022-02-28 TUN-5737: Support https protocol over unix socket origin
471- 2022-02-23 TUN-5679: Add support for service install using Tunnel Token
472
4732022.2.2
474- 2022-02-22 TUN-5754: Allow ingress validate to take plaintext option
475- 2022-02-17 TUN-5678: Cloudflared uses typed tunnel API
476
4772022.2.1
478- 2022-02-10 TUN-5184: Handle errors in bidrectional streaming (websocket#Stream) gracefully when 1 side has ended
479- 2022-02-14 Update issue templates
480- 2022-02-14 Update issue templates
481- 2022-02-11 TUN-5768: Update cloudflared license file
482- 2022-02-11 TUN-5698: Make ingress rules and warp routing dynamically configurable
483- 2022-02-14 TUN-5678: Adapt cloudflared to use new typed APIs
484- 2022-02-17 Revert "TUN-5678: Adapt cloudflared to use new typed APIs"
485- 2022-02-11 TUN-5697: Listen for UpdateConfiguration RPC in quic transport
486- 2022-02-04 TUN-5744: Add a test to make sure cloudflared uses scheme defined in ingress rule, not X-Forwarded-Proto header
487- 2022-02-07 TUN-5749: Refactor cloudflared to pave way for reconfigurable ingress - Split origin into supervisor and proxy packages - Create configManager to handle dynamic config
488- 2021-10-19 TUN-5184: Make sure outstanding websocket write is finished, and no more writes after shutdown
489
4902022.2.0
491- 2022-02-02 TUN-4947: Use http when talking to Unix sockets origins
492- 2022-02-02 TUN-5695: Define RPC method to update configuration
493- 2022-01-27 TUN-5621: Correctly manage QUIC stream closing
494- 2022-01-28 TUN-5702: Allow to deserialize config from JSON
495
4962022.1.3
497- 2022-01-21 TUN-5477: Unhide vnet commands
498- 2022-01-24 TUN-5669: Change network command to vnet
499- 2022-01-25 TUN-5675: Remove github.com/dgrijalva/jwt-go dependency by upgrading coredns version
500- 2022-01-27 TUN-5719: Re-attempt connection to edge with QUIC despite network error when there is no fallback
501- 2022-01-28 TUN-5724: Fix SSE streaming by guaranteeing we write everything we read
502- 2022-01-17 TUN-5547: Bump golang x/net package to fix http2 transport bugs
503- 2022-01-19 TUN-5659: Proxy UDP with zero-byte payload
504- 2021-10-22 Add X-Forwarded-Host for http proxy
505
5062022.1.2
507- 2022-01-13 TUN-5650: Fix pynacl version to 1.4.0 and pygithub version to 1.55 so release doesn't break unexpectedly
508
5092022.1.1
510- 2022-01-10 TUN-5631: Build everything with go 1.17.5
511- 2022-01-06 TUN-5623: Configure quic max datagram frame size to 1350 bytes for none Windows platforms
512
5132022.1.0
514- 2022-01-03 TUN-5612: Add support for specifying TLS min/max version
515- 2022-01-03 TUN-5612: Make tls min/max version public visible
516- 2022-01-03 TUN-5551: Internally published debian artifacts are now named just cloudflared even though they are FIPS compliant
517- 2022-01-04 TUN-5600: Close QUIC transports as soon as possible while respecting graceful shutdown
518- 2022-01-05 TUN-5616: Never fallback transport if user chooses it on purpose
519- 2022-01-05 TUN-5204: Unregister QUIC transports on disconnect
520- 2022-01-04 TUN-5600: Add coverage to component tests for various transports
521
5222021.12.4
523- 2021-12-27 TUN-5482: Refactor tunnelstore client related packages for more coherent package
524- 2021-12-27 TUN-5551: Change internally published debian package to be FIPS compliant
525- 2021-12-27 TUN-5551: Show whether the binary was built for FIPS compliance
526
5272021.12.3
528- 2021-12-22 TUN-5584: Changes for release 2021.12.2
529- 2021-12-22 TUN-5590: QUIC datagram max user payload is 1217 bytes
530- 2021-12-22 TUN-5593: Read full packet from UDP connection, even if it exceeds MTU of the transport. When packet length is greater than the MTU of the transport, we will silently drop packets (for now).
531- 2021-12-23 TUN-5597: Log session ID when session is terminated by edge
532
5332021.12.2
534- 2021-12-20 TUN-5571: Remove redundant session manager log, it's already logged in origin/tunnel.ServeQUIC
535- 2021-12-20 TUN-5570: Only log RPC server events at error level to reduce noise
536- 2021-12-14 TUN-5494: Send a RPC with terminate reason to edge if the session is closed locally
537- 2021-11-09 TUN-5551: Reintroduce FIPS compliance for linux amd64 now as separate binaries
538
5392021.12.1
540- 2021-12-16 TUN-5549: Revert "TUN-5277: Ensure cloudflared binary is FIPS compliant on linux amd64"
541
5422021.12.0
543- 2021-12-13 TUN-5530: Get current time from ticker
544- 2021-12-15 TUN-5544: Update CHANGES.md for next release
545- 2021-12-07 TUN-5519: Adjust URL for virtual_networks endpoint to match what we will publish
546- 2021-12-02 TUN-5488: Close session after it's idle for a period defined by registerUdpSession RPC
547- 2021-12-09 TUN-5504: Fix upload of packages to public repo
548- 2021-11-30 TUN-5481: Create abstraction for Origin UDP Connection
549- 2021-11-30 TUN-5422: Define RPC to unregister session
550- 2021-11-26 TUN-5361: Commands for managing virtual networks
551- 2021-11-29 TUN-5362: Adjust route ip commands to be aware of virtual networks
552- 2021-11-23 TUN-5301: Separate datagram multiplex and session management logic from quic connection logic
553- 2021-11-10 TUN-5405: Update net package to v0.0.0-20211109214657-ef0fda0de508
554- 2021-11-10 TUN-5408: Update quic package to v0.24.0
555- 2021-11-12 Fix typos
556- 2021-11-13 Fix for Issue #501: Unexpected User-agent insertion when tunneling http request
557- 2021-11-16 TUN-5129: Remove `-dev` suffix when computing version and Git has uncommitted changes
558- 2021-11-18 TUN-5441: Fix message about available protocols
559- 2021-11-12 TUN-5300: Define RPC to register UDP sessions
560- 2021-11-14 TUN-5299: Send/receive QUIC datagram from edge and proxy to origin as UDP
561- 2021-11-04 TUN-5387: Updated CHANGES.md for 2021.11.0
562- 2021-11-08 TUN-5368: Log connection issues with LogLevel that depends on tunnel state
563- 2021-11-09 TUN-5397: Log cloudflared output when it fails to connect tunnel
564- 2021-11-09 TUN-5277: Ensure cloudflared binary is FIPS compliant on linux amd64
565- 2021-11-08 TUN-5393: Content-length is no longer a control header for non-h2mux transports
566
5672021.11.0
568- 2021-11-03 TUN-5285: Fallback to HTTP2 immediately if connection times out with no network activity
569- 2021-09-29 Add flag to 'tunnel create' subcommand to specify a base64-encoded secret
570
5712021.10.5
572- 2021-10-25 Update change log for release 2021.10.4
573- 2021-10-25 Revert "TUN-5184: Make sure outstanding websocket write is finished, and no more writes after shutdown"
574
5752021.10.4
576- 2021-10-21 TUN-5287: Fix misuse of wait group in TestQUICServer that caused the test to exit immediately
577- 2021-10-21 TUN-5286: Upgrade crypto/ssh package to fix CVE-2020-29652
578- 2021-10-18 TUN-5262: Allow to configure max fetch size for listing queries
579- 2021-10-19 TUN-5262: Improvements to `max-fetch-size` that allow to deal with large number of tunnels in account
580- 2021-10-15 TUN-5261: Collect QUIC metrics about RTT, packets and bytes transfered and log events at tracing level
581- 2021-10-19 TUN-5184: Make sure outstanding websocket write is finished, and no more writes after shutdown
582
5832021.10.3
584- 2021-10-14 TUN-5255: Fix potential panic if Cloudflare API fails to respond to GetTunnel(id) during delete command
585- 2021-10-14 TUN-5257: Fix more cfsetup targets that were broken by recent package changes
586
5872021.10.2
588- 2021-10-11 TUN-5138: Switch to QUIC on auto protocol based on threshold
589- 2021-10-14 TUN-5250: Add missing packages for cfsetup to succeed in github release pkgs target
590
5912021.10.1
592- 2021-10-12 TUN-5246: Use protocol: quic for Quick tunnels if one is not already set
593- 2021-10-13 TUN-5249: Revert "TUN-5138: Switch to QUIC on auto protocol based on threshold"
594
5952021.10.0
596- 2021-10-11 TUN-5138: Switch to QUIC on auto protocol based on threshold
597- 2021-10-07 TUN-5195: Do not set empty body if not applicable
598- 2021-10-08 UN-5213: Increase MaxStreams value for QUIC transport
599- 2021-09-28 TUN-5169: Release 2021.9.2 CHANGES.md
600- 2021-09-28 TUN-5164: Update README and clean up references to Argo Tunnel (using Cloudflare Tunnel instead)
601
6022021.9.2
603- 2021-09-21 TUN-5129: Use go 1.17 and copy .git folder to docker build to compute version
604- 2021-09-21 TUN-5128: Enforce maximum grace period
605- 2021-09-22 TUN-5141: Make sure websocket pinger returns before streaming returns
606- 2021-09-24 TUN-5142: Add asynchronous servecontrolstream for QUIC
607- 2021-09-24 TUN-5142: defer close rpcconn inside unregister instead of ServeControlStream
608- 2021-09-27 TUN-5160: Set request.ContentLength when this value is in request header
609
6102021.9.1
611- 2021-09-21 TUN-5118: Quic connection now detects duplicate connections similar to http2
612- 2021-09-15 Fix TryCloudflare link
613
6142021.9.0
615- 2021-09-02 Fix broken TryCloudflare link
616- 2021-09-03 Add support for taking named tunnel credentials from an environment variable
617- 2021-08-30 TUN-5012: Use patched go-sumtype
618- 2021-08-31 TUN-5011: Use the region parameter in fallback SRV lookup
619- 2021-08-31 TUN-5029: Do not strip cf- prefixed headers
620- 2021-08-29 TUN-5009: Updated github action to use go 1.17.x for checks
621- 2021-08-28 TUN-5010: --region should be a string flag
622- 2021-08-10 Allow building on arm64 platforms
623- 2021-06-09 Update README.md
624- 2021-05-31 🖌️ Allow providing TokenID and TokenSecret as env vars when calling cloudflared access
625- 2021-05-31 🎨 Prefix env var parameters with TUNNEL
626
6272021.8.7
628- 2021-08-28 Revert "TUN-4926: Implement --region configuration option"
629
6302021.8.6
631- 2021-08-27 TUN-5000: De-flake logging to dir component test in Windows by increasing to buffer to cope with more logging
632- 2021-08-27 TUN-5003: Fix cfsetup for non-FIPS golang version
633
6342021.8.5
635- 2021-08-27 TUN-4961: Update quic-go to latest
636- 2021-08-27 Release 2021.8.4
637
6382021.8.4
639- 2021-08-26 TUN-4974: Fix regression where we were debug logging by accident
640- 2021-08-26 TUN-4970: Only default to http2 for warp-routing if protocol is h2mux
641- 2021-08-26 TUN-4981: Improve readability of prepareTunnelConfig method
642- 2021-08-26 TUN-4926: Implement --region configuration option
643- 2021-07-09 TUN-4821: Make quick tunnels the default in cloudflared
644
6452021.8.3
646- 2021-08-23 TUN-4889: Add back appendtagheaders function
647- 2021-08-21 TUN-4940: Fix cloudflared not picking up correct NextProtos for quic
648- 2021-08-21 TUN-4613: Add a no-op protocol version slot
649- 2021-08-13 TUN-4922: Downgrade quic-go library to 0.20.0
650- 2021-08-17 TUN-4866: Add Control Stream for QUIC
651- 2021-08-17 TUN-4927: Parameterize region in edge discovery code
652- 2021-08-06 TUN-4602: Added UDP resolves to Edge discovery
653
6542021.8.2
655- 2021-08-03 TUN-4597: Added HTTPProxy for QUIC
656- 2021-08-04 TUN-4795: Remove Equinox releases
657- 2021-08-09 TUN-4911: Append Environment variable to Path instead of overwriting it
658
6592021.8.1
660- 2021-08-02 TUN-4855: Added CHANGES.md for release 2021.8.0
661- 2021-08-03 TUN-4597: Add a QUIC server skeleton
662- 2021-08-03 TUN-4873: Disable unix domain socket test for windows unit tests
663- 2021-08-04 TUN-4875: Added amd64-linux builds back to releases
664
6652021.8.0
666- 2021-07-30 TUN-4847: Allow to list tunnels by prefix name or exclusion prefix name
667- 2021-07-30 TUN-4772: Release built executables with packages
668- 2021-07-30 TUN-4851: Component tests to smoke test that Proxy DNS and Tunnel are only run when expected
669- 2021-07-28 TUN-4811: Publish quick tunnels' hostname in /metrics under `userHostname` for backwards-compatibility
670- 2021-07-29 TUN-4832: Prevent tunnel from running accidentally when only proxy-dns should run
671- 2021-07-28 TUN-4819: Tolerate protocol TXT record lookup failing
672
6732021.7.4
674- 2021-07-28 TUN-4814: Revert "TUN-4699: Make quick tunnels the default in cloudflared"
675- 2021-07-28 TUN-4812: Disable CGO for cloudflared builds
676
6772021.7.3
678- 2021-07-27 TUN-4799: Build deb, msi and rpm packages with fips
679
6802021.7.2
681- 2021-07-27 Fixed a syntax error with python logging.
682
6832021.7.1
684- 2021-07-21 TUN-4755: Add a windows msi release option to Make
685- 2021-07-22 TUN-4761: Added a build-all-packages target to cfsetup
686- 2021-07-26 TUN-4771: Upload deb, rpm and msi packages to github
687- 2021-07-14 TUN-4714: Name nightly package cloudflared-nightly to avoid apt conflict
688- 2021-07-16 TUN-4701: Split Proxy into ProxyHTTP and ProxyTCP
689- 2021-07-08 TUN-4596: Add QUIC application protocol for QUIC stream handshake
690- 2021-07-09 TUN-4699: Make quick tunnels the default in cloudflared
691
6922021.7.0
693- 2021-07-01 TUN-4626: Proxy non-stream based origin websockets with http Roundtrip.
694- 2021-07-01 TUN-4655: ingress.StreamBasedProxy.EstablishConnection takes dest input
695- 2021-07-09 TUN-4698: Add cloudflared metrics endpoint to serve quick tunnel hostname
696- 2021-06-21 TUN-4521: Modify cloudflared to use zoneless-tunnels-worker for free tunnels
697- 2021-04-05 AUTH-3475: Updated GetAppInfo error message
698
6992021.6.0
700- 2021-06-21 TUN-4571: Changelog for 2021.6.0
701- 2021-06-18 TUN-4571: Fix proxying to unix sockets when using HTTP2 transport to Cloudflare Edge
702- 2021-06-07 TUN-4502: Make `cloudflared tunnel route` subcommands described consistently
703- 2021-06-08 TUN-4504: Fix component tests in windows
704- 2021-05-27 TUN-4461: Log resulting DNS hostname if one is received from Cloudflare API
705
7062021.5.10
707- 2021-05-25 TUN-4456: Replaced instances of Tick() with Ticker() in h2mux paths
708
7092021.5.9
710- 2021-05-20 TUN-4426: Fix centos builds
711- 2021-05-20 Update changelog
712- 2021-04-30 AUTH-3426: Point to new transfer service URL and eliminate PUT /ok
713
7142021.5.8
715- 2021-05-14 TUN-4419: Improve error message when cloudflared cannot reach origin
716- 2021-05-19 TUN-4425: --overwrite-dns flag for in adhoc and route dns cmds
717
7182021.5.7
719- 2021-05-17 Fix typo in Changes.md
720- 2021-05-17 TUN-4421: Named Tunnels will automatically select the protocol to connect to Cloudflare's edge network
721
7222021.5.6
723- 2021-05-14 TUN-4418: Downgrade to Go 1.16.3
724
7252021.5.5
726
727
7282021.5.4
729- Fix release pipeline
730
7312021.5.1
732- 2021-05-10 TUN-4342: Fix false positive warning about unused hostname property
733- 2021-05-10 Release 2021.5.0
734
7352021.5.0
736- 2021-05-10 TUN-4384: Silence log from automaxprocs
737- 2021-05-10 AUTH-3537: AUDs in JWTs are now always arrays
738- 2021-05-10 Update changelog for 2021.5.0
739- 2021-05-03 TUN-4343: Fix broken build by setting debug field correctly
740- 2021-05-06 TUN-4356: Set AUTOMAXPROCS to the CPU limit when running in a Linux container
741- 2021-05-06 TUN-4357: Bump Go to 1.16
742- 2021-05-06 TUN-4359: Warn about unused keys in 'tunnel ingress validate'
743- 2021-04-30 debug: log host / path
744- 2021-04-20 AUTH-3513: Checks header for app info in case response is a 403/401 from the edge
745- 2021-04-29 TUN-4000: Release notes for cloudflared replica model
746- 2021-04-09 TUN-2853: rename STDIN-CONTROL env var to STDIN_CONTROL
747- 2021-04-09 TUN-4206: Better error message when user is only using one ingress rule
748
7492021.4.0
750- 2021-04-05 TUN-4178: Fix component test for running as a service in MacOS to not assume a named tunnel
751- 2021-04-05 TUN-4177: Running with proxy-dns should not prevent running Named Tunnels
752- 2021-04-02 TUN-4168: Transparently proxy websocket connections using stdlib HTTP client instead of gorilla/websocket; move websocket client code into carrier package since it's only used by access subcommands now (#345).
753- 2021-04-07 Publish change log for 2021.4.0
754
7552021.3.6
756- 2021-03-30 TUN-4150: Only show the connector table in 'tunnel info' if there are connectors. Don't show rows with zero connections.
757- 2021-03-31 TUN-4153: Revert best-effort HTTP2 usage when talking to origins
758- 2021-03-26 TUN-4141: Better error messages for tunnel info subcommand.
759- 2021-03-29 TUN-4146: Unhide and document grace-period
760- 2021-03-25 TUN-3863: Consolidate header handling logic in the connection package; move headers definitions from h2mux to packages that manage them; cleanup header conversions
761
7622021.3.5
763- 2021-03-26 TUN-3896: http-service and tunnelstore client use http2 transport.
764- 2021-03-25 TUN-4125: Change component tests to run in CI with its own dedicated resources
765- 2021-03-26 Publish change log for 2021.3.5
766
7672021.3.4
768
769
7702021.3.3
771- 2021-03-23 TUN-4111: Warn the user if both properties "tunnel" and "hostname" are used
772- 2021-03-23 TUN-4082: Test logging when running as a service
773- 2021-03-23 TUN-4112: Skip testing graceful shutdown with SIGINT on Windows
774- 2021-03-23 TUN-4116: Ingore credentials-file setting in configuration file during tunnel create and delete opeations.
775- 2021-03-23 TUN-4118: Don't overwrite existing file with tunnel credentials. For ad-hoc tunnels, this means tunnel won't start if there's a file in the way.
776- 2021-03-24 TUN-4123: Don't capture output in reconnect componet test
777- 2021-03-23 TUN-4067: Reformat code for consistent import order, grouping, and fix formatting. Added goimports target to the Makefile to make this easier in the future.
778- 2021-03-24 AUTH-3455: Generate short-lived ssh cert per hostname
779- 2021-03-25 Update changelog 2021.3.3
780
7812021.3.2
782- 2021-03-23 TUN-4042: Capture cloudflared output to debug component tests
783- 2021-03-23 Publish changelog for 2021.3.2
784- 2021-03-16 TUN-4089: Address flakiness in component tests for termination
785- 2021-03-16 TUN-4060: Fix Go Vet warnings (new with go 1.16) where t.Fatalf is called from a test goroutine
786- 2021-03-16 TUN-4091: Use flaky decorator to rerun reconnect component tests when they fail
787- 2021-03-12 TUN-4081: Update log severities to use Zerolog's levels
788- 2021-03-16 TUN-4094: Don't read configuration file for access commands
789- 2021-03-15 TUN-3993: New `cloudflared tunnel info` to obtain details about the active connectors for a tunnel
790- 2021-03-17 TUN-3715: Apply input source to the correct context
791- 2021-03-17 AUTH-3394: Ensure scheme on token command
792- 2021-03-18 TUN-4096: Reduce tunnel not connected assertion backoff to address flaky termination tests
793- 2021-03-19 TUN-3998: Allow to cleanup the connections of a tunnel limited to a single client
794- 2021-02-04 TUN-3715: Only read config file once, right before invoking the command
795
7962021.3.1
797- 2021-03-11 TUN-4051: Add component-tests to test graceful shutdown
798- 2021-03-12 TUN-4052: Add component tests to assert service mode behavior
799
8002021.3.0
801- 2021-03-10 TUN-4075: Dedup test should not compare order of list
802- 2021-03-10 Revert "AUTH-3394: Creates a token per app instead of per path"
803- 2021-03-11 TUN-4066: Remove unnecessary chmod during package publish to CF_PKG_HOSTS
804- 2021-03-11 TUN-4066: Set permissions in build agent before 'scp'-ing to machine hosting package repo
805- 2021-03-11 TUN-4050: Add component tests to assert reconnect behavior
806- 2021-03-10 AUTH-3394: Creates a token per app instead of per path - with fix for free tunnels
807- 2021-03-15 Publish change log for 2021.3.0
808- 2021-03-01 Issue #285 - Makefile does not detect TARGET_ARCH correctly on FreeBSD (#325)
809- 2021-03-01 TUN-3988: Log why it cannot check if origin cert exists
810- 2021-03-02 TUN-3995: Optional --features flag for tunnel run.
811- 2021-03-02 TUN-3994: Log client_id when running a named tunnel
812- 2021-03-04 TUN-4026: Fix regression where HTTP2 edge transport was no longer propagating control plane errors
813- 2021-03-05 TUN-4055: Skeleton for component tests
814- 2021-03-08 TUN-4047: Add cfsetup target to run component test
815- 2021-03-08 TUN-4016: Delegate decision to update for Worker service
816- 2021-03-02 TUN-3905: Cannot run go mod vendor in cloudflared due to fips
817- 2021-03-08 TUN-4063: Cleanup dependencies between packages.
818- 2021-03-09 Allow partial reads from a GorillaConn; add SetDeadline (from net.Conn) (#330)
819- 2021-03-09 TUN-4069: Fix regression on support for websocket over proxy
820- 2021-03-02 AUTH-3394: Creates a token per app instead of per path
821- 2021-03-01 TUN-4017: Add support for using cloudflared as a full socks proxy.
822- 2021-03-08 TUN-4062: Read component tests config from yaml file
823- 2021-03-08 TUN-4049: Add component tests to assert logging behavior when running from terminal
824- 2021-02-23 TUN-3963: Repoint urfave/cli/v2 library at patched branch at github.com/ipostelnik/cli/v2@fixed which correctly handles reading flags declared at multiple levels of subcommands.
825- 2021-02-25 TUN-3970: Route ip show has alias route ip list
826- 2021-02-26 TUN-3978: Unhide teamnet commands and improve their help
827- 2021-02-26 TUN-3983: Renew CA certs in cloudflared
828- 2021-02-28 TUN-3989: Check in with Updater service in more situations and convey messages to user
829- 2021-02-11 TUN-3819: Remove client-side check that deleted tunnels have no connections
830
8312021.2.5
832- 2021-02-23 Publish change notes for 2021.2.5
833- 2021-02-11 TUN-3838: ResponseWriter no longer reads and origin error tests
834- 2021-02-10 TUN-3895: Tests for socks stream handler
835- 2021-02-19 TUN-3939: Add logging that shows that Warp-routing is enabled
836- 2021-02-02 TUN-3817: Adds tests for websocket based streaming regression
837- 2021-02-04 TUN-3799: extended the Stream interface to take a logger and added debug logs for io.Copy errors
838- 2021-02-03 TUN-3855: Add ability to override target of 'access ssh' command to a different host for testing
839- 2021-02-04 TUN-3853: Respond with ws headers from the origin service rather than generating our own
840- 2021-02-08 TUN-3889: Move host header override logic to httpService
841- 2021-02-05 TUN-3868: Refactor singleTCPService and bridgeService to tcpOverWSService and rawTCPService
842- 2021-01-21 TUN-3753: Select http2 protocol when warp routing is enabled
843- 2021-01-26 TUN-3809: Allow routes ip show to output as JSON or YAML
844- 2021-01-11 TUN-3615: added support to proxy tcp streams
845- 2021-01-17 TUN-3725: Warp-routing is independent of ingress
846- 2021-01-15 TUN-3764: Actively flush data for TCP streams
847- 2020-12-09 TUN-3617: Separate service from client, and implement different client for http vs. tcp origins
848
8492021.2.4
850- 2021-02-22 TUN-3948: Log error when retrying connection
851- 2021-02-23 TUN-3964: Revert "TUN-3922: Repoint urfave/cli/v2 library at patched branch at github.com/ipostelnik/cli/v2@fixed which correctly handles reading flags declared at multiple levels of subcommands."
852- 2021-02-23 Publish release notes for 2021.2.4
853
8542021.2.3
855- 2021-02-23 Publish release notes for 2021.2.3
856- 2021-02-10 TUN-3902: Add jitter to backoffhandler
857- 2021-02-11 TUN-3913: Help gives wrong exit code for autoupdate
858- 2021-02-12 Add max upstream connections dns-proxy option (#290)
859- 2021-02-16 TUN-3924: Removed db-connect command. Added a placeholder handler for this command that informs users that command is no longer supported.
860- 2021-02-12 TUN-3922: Repoint urfave/cli/v2 library at patched branch at github.com/ipostelnik/cli/v2@fixed which correctly handles reading flags declared at multiple levels of subcommands.
861- 2021-02-19 Added support for proxy (#318)
862- 2021-02-19 TUN-3945: Fix runApp signature for generic service
863- 2021-02-09 Update README.md
864- 2021-02-09 Update the TryCloudflare link
865
8662021.2.2
867- 2021-02-04 TUN-3864: Users can choose where credentials file is written after creating a tunnel
868- 2021-02-04 TUN-3869: Improve reliability of graceful shutdown.
869- 2021-02-07 TUN-3878: Do not supply -tags when none are specified
870- 2021-02-04 TUN-3635: Send event when unregistering tunnel for gracful shutdown so /ready endpoint reports down status befoe connections finish handling pending requests.
871- 2021-02-08 TUN-3890: Code coverage for cloudflared in CI
872- 2021-02-09 AUTH-3375 exchangeOrgToken deleted cookie fix
873- 2020-11-18 Update error message to use login command
874
8752021.2.1
876- 2021-02-04 TUN-3858: Do not suffix cloudflared version with -fips
877
8782021.2.0
879- 2021-02-01 TUN-3837: Remove automation_email from cloudflared status page test
880- 2021-02-03 TUN-3848: Use transport logger for h2mux
881- 2021-02-03 TUN-3854: cloudflared tunnel list flags to sort output
882- 2021-01-21 TUN-3195: Don't colorize console logs when stderr is not a terminal
883- 2021-01-20 Fixed connection error handling by removing duplicated errors, standardizing on non-pointer error types
884- 2021-01-20 TUN-3118: Changed graceful shutdown to immediately unregister tunnel from the edge, keep the connection open until the edge drops it or grace period expires
885- 2021-01-25 TUN-3165: Add reference to Argo Tunnel documentation in the help output
886- 2021-01-25 TUN-3806: Use a .dockerignore
887- 2021-01-21 TUN-3795: Use RFC-3339 style date format for logs, produce timestamp in UTC
888- 2021-01-26 TUN-3795: Removed errant test
889- 2021-01-25 TUN-3792: Handle graceful shutdown correctly when running as a windows service. Only expose one shutdown channel globally, which now triggers the graceful shutdown sequence across all modes. Removed separate handling of zero-duration grace period, instead it's checked only when we need to wait for exit.
890- 2021-01-27 TUN-3811: Better error reporting on http2 connection termination. Registration errors from control loop are now propagated out of the connection server code. Unified error handling between h2mux and http2 connections so we log and retry errors the same way, regardless of underlying transport.
891- 2021-01-28 TUN-3830: Use Go 1.15.7
892- 2021-01-28 TUN-3826: Use go-fips when building cloudflared for linux/amd64
893- 2021-01-19 TUN-3777: Fix /ready endpoint for classic tunnels
894- 2021-01-19 TUN-3773: Add back pprof endpoints
895
8962021.1.5
897- 2021-01-15 TUN-3594: Log ingress response at debug level
898- 2021-01-15 TUN-3765: Fix doubly nested log output by `logfile` option
899- 2021-01-16 TUN-3767: Tolerate logging errors
900- 2021-01-17 TUN-3768: Reuse file loggers
901- 2021-01-14 TUN-3738: Refactor observer to avoid potential of blocking on tunnel notifications
902- 2021-01-15 TUN-3766: Print flags defined at all levels of command hierarchy, not just locally defined flags for a command. This fixes output of overriden settings for subcommand.
903
9042021.1.4
905- 2021-01-14 TUN-3759: Single file logging output should always append
906
9072021.1.3
908- 2021-01-14 TUN-3756: File logging output must consider the directory
909- 2021-01-14 TUN-3757: Fix legacy Uint flags that are incorrectly handled by ufarve library
910
9112021.1.2
912- 2021-01-13 TUN-3747: Fix logging in Windows
913
9142021.1.1
915- 2021-01-13 TUN-3744: Fix compilation error in windows service
916
9172021.1.0
918- 2021-01-11 TUN-3670: Update Teamnet API gateway prefixes
919- 2021-01-13 TUN-3738: Consume UI events even when UI is disabled
920- 2021-01-06 TUN-3722: Teamnet API paths include /network
921- 2021-01-05 TUN-3688: Subcommand for users to check which route an IP proxies through
922- 2021-01-08 TUN-3691: Edit Teamnet help text
923- 2020-12-30 TUN-3706: Quit if any origin service fails to start
924- 2020-12-31 TUN-3708: Better info message about system root certpool on Windows
925- 2020-12-21 TUN-3669: Teamnet commands to add/show Teamnet routes.
926- 2020-12-29 TUN-3689: Delete routes via cloudflared CLI
927- 2020-12-28 TUN-3471: Add structured log context to logs
928- 2020-12-15 TUN-3650: Remove unused awsuploader package
929- 2020-12-03 Update to add deprecated version note (#271)
930- 2020-12-02 TUN-3472: Set up rolling logger with zerolog and lumberjack
931- 2020-12-08 TUN-3607: Set up single-file logger with zerolog
932- 2020-12-03 Update to add deprecated version note (#271)
933- 2020-11-25 TUN-3470: Replace in-house logger calls with zerolog
934
9352020.12.0
936- 2020-12-04 TUN-3599: improved delete if credentials isnt found.
937- 2020-12-04 TUN-3612: Upgrade to Go 1.15.6
938- 2020-11-30 TUN-3593: /ready endpoint for k8s readiness. Move tunnel events out of UI package, into connection package.
939- 2020-11-27 TUN-3594: Log response status at debug level
940
9412020.11.11
942- 2020-11-20 TUN-3578: cloudflared tunnel route dns should allow wildcard subdomains
943- 2020-11-21 EDGEPLAT-2958 remove deb-compression, defaulting to gzip
944- 2020-11-23 TUN-3581: Tunnels can be run by name using only --credentials-file, no origin cert necessary.
945- 2020-11-15 TUN-3561: Unified logger configuration
946- 2020-11-08 AUTH-3221: Saves org token to disk and uses it to refresh the app token
947
9482020.11.10
949- 2020-11-20 TUN-3562: Fix panic when using bastion mode ingress rule
950- 2020-11-20 EDGEPLAT-2958 build cloudflared for Bullseye
951
9522020.11.9
953- 2020-11-18 TUN-3557: Detect SSE if content-type starts with text/event-stream
954- 2020-11-18 TUN-3559: Share response meta header with other packages
955- 2020-11-18 DEVTOOLS-7936: Remove redundant chgrp from publish
956- 2020-11-18 TUN-3558: cloudflared allows empty config files
957- 2020-11-18 TUN-3544: Upgrade to Go 1.15.5
958
9592020.11.8
960- 2020-11-17 TUN-3555: Single origin service should default to localhost:8080
961
9622020.11.7
963- 2020-11-13 TUN-3514: Stop setting --is-autoupdated flag after autoupdate because it can break named tunnel running in k8s
964- 2020-11-15 TUN-3548, TUN-3547: Bastion mode can be specified as a service, doesn't require URL.
965- 2020-11-16 TUN-3549: Use a separate handler for each websocket proxy
966
9672020.11.6
968- 2020-11-14 TUN-3546: Fix panic in tlsconfig.LoadOriginCA
969
9702020.11.5
971- 2020-11-12 TUN-3540: Better copy in ingress rules error messages
972- 2020-11-12 DEVTOOLS-7936: Set permissions on public packages
973- 2020-11-13 TUN-3543: ProxyAddress not using default in single-origin mode
974
9752020.11.4
976- 2020-11-11 TUN-3534: Specific error message when credentials file is a .pem not .json
977- 2020-11-02 TUN-3500: Integrate replace h2mux by http2 work with multiple origin support
978- 2020-11-09 TUN-3514: Transport logger write to UI when UI is enabled
979- 2020-10-30 TUN-3490: Make sure OriginClient implementation doesn't write after Proxy return
980- 2020-10-20 TUN-3403: Unit test for origin/proxy to test serving HTTP and Websocket
981- 2020-10-23 TUN-3480: Support SSE with http2 connection, and add SSE handler to hello-world server
982- 2020-10-27 TUN-3489: Add unit tests to cover proxy logic in connection package of cloudflared
983- 2020-10-16 TUN-3467: Serialize cf-cloudflared-response-meta during package initialization using jsoniter
984- 2020-10-14 TUN-3456: New protocol option auto to automatically select between http2 and h2mux
985- 2020-10-14 TUN-3458: Upgrade to http2 when available, fallback to h2mux when we reach max retries
986- 2020-10-08 TUN-3449: Use flag to select transport protocol implementation
987- 2020-10-08 TUN-3462: Refactor cloudflared to separate origin from connection
988- 2020-09-21 TUN-3406: Proxy websocket requests over Go http2
989- 2020-09-25 TUN-3420: Establish control plane and send RPC over control plane
990- 2020-09-11 TUN-3400: Use Go HTTP2 library as transport to connect with the edge
991
9922020.11.3
993- 2020-11-11 TUN-3533: Set config for single origin ingress
994
9952020.11.2
996
997
9982020.11.1
999- 2020-11-10 TUN-3527: More specific error for invalid YAML/JSON
1000- 2020-11-06 Update README.md (#256)
1001
10022020.11.0
1003- 2020-11-04 TUN-3484: OriginService that responds with configured HTTP status
1004- 2020-11-05 TUN-3505: Response body for status code origin returns EOF on Read
1005- 2020-11-04 TUN-3503: Matching ingress rule should not take port into account
1006- 2020-11-05 TUN-3506: OriginService needs to set request host and scheme for websocket requests
1007- 2020-11-09 TUN-3516: Better error message when parsing invalid YAML config
1008- 2020-11-09 TUN-3522: ingress validate checks that the config file exists
1009- 2020-11-09 TUN-3524: Don't ignore errors from app-level action handler (#248)
1010- 2020-11-09 TUN-3461: Show all origin services in the UI
1011- 2020-10-30 TUN-3494: Proceed to create tunnel if at least one edge address can be resolved
1012- 2020-10-30 TUN-3492: Refactor OriginService, shrink its interface
1013- 2020-10-22 TUN-3478: Increase download timeout to 60s
1014- 2020-10-15 TUN-2640: Users can configure per-origin config. Unify single-rule CLI flow with multi-rule config file code.
1015
10162020.10.2
1017- 2020-10-21 Release 2020.10.1
1018- 2020-10-21 AUTH-3185 fixed indention error
1019- 2020-10-19 TUN-3459: Make service install on linux use named tunnels
1020
10212020.10.1
1022- 2020-10-20 Split out typed config from legacy command-line switches; refactor ingress commands and fix tests
1023- 2020-10-20 Move raw ingress rules to config package
1024- 2020-10-21 TUN-3476: Fix conversion to string and int slice
1025- 2020-10-12 TUN-3441: Multiple-origin routing via ingress rules
1026- 2020-10-15 TUN-3464: Newtype to wrap []ingress.Rule
1027- 2020-10-15 TUN-3465: Use Go 1.15.3
1028- 2020-10-15 TUN-3463: Let users run a named tunnel via config file setting
1029- 2020-10-19 TUN-3475: Unify config file handling with typed config for new fields
1030- 2020-10-19 TUN-3459: Make service install on linux use named tunnels
1031- 2020-10-06 AUTH-3148 fixed cloudflared copy and match all the files in the checksum upload
1032- 2020-10-06 TUN-3436, TUN-3437: Parse ingress from YAML, ensure last rule catches everything
1033- 2020-10-06 TUN-3446: Use go 1.15.2 and add a step to build cloudflared in the dev Dockerfile
1034- 2020-10-07 TUN-3439: 'tunnel validate' command to check ingress rules
1035- 2020-10-07 TUN-3440: 'tunnel rule' command to test ingress rules
1036- 2020-10-08 TUN-3451: Cloudflared tunnel ingress command
1037- 2020-10-09 TUN-3452: Fix loading of flags from config file for tunnel run subcommand. This change also cleans up building of tunnel subcommand list, hides deprecated subcommands and improves help.
1038- 2020-10-08 TUN-3438: move ingress into own package, read into TunnelConfig
1039
10402020.10.0
1041- 2020-10-02 AUTH-2993 cleaned up worker service tests
1042- 2020-10-02 TUN-3443: Decode as v4api response on non-200 status
1043- 2020-09-24 TRAFFIC-448: allow the user to specify the proxy address and port to bind to, falling back to 127.0.0.1 and random port if not specified
1044- 2020-09-28 TUN-3427: Define a struct that only implements RegistrationServer in tunnelpogs
1045- 2020-09-29 TUN-3430: Copy flags to configure proxy to run subcommand, print relevant tunnel flags in help
1046- 2020-08-12 AUTH-2993 added workers updater logic
1047
10482020.9.3
1049- 2020-09-22 TRAFFIC-448: build cloudflare for junos and publish to s3
1050- 2020-09-22 TUN-3410: Request the v1 Tunnelstore API
1051- 2020-09-23 Release 2020.9.2
1052- 2020-09-17 updater service exit code should be 11
1053- 2020-09-18 AUTH-3109 upload the checksum to workers kv on github releases
1054
10552020.9.2
1056- 2020-09-22 TRAFFIC-448: build cloudflare for junos and publish to s3
1057- 2020-09-22 TUN-3410: Request the v1 Tunnelstore API
1058- 2020-09-17 AUTH-3103 CI build fixes
1059- 2020-09-18 AUTH-3110-use-cfsetup-precache
1060- 2020-09-17 TUN-3295: Show route command results
1061- 2020-09-16 TUN-3291: cloudflared tunnel run -h explains how to use flags from parent command
1062- 2020-09-18 AUTH-3109 upload the checksum to workers kv on github releases
1063- 2020-09-17 updater service exit code should be 11
1064- 2020-09-01 TUN-3216: UI improvements
1065- 2020-08-25 Rebased and passed TunnelEventChan to LogServerInfo in new ReconnectTunnel function
1066- 2020-08-25 TUN-3321: Add box around logs on UI
1067- 2020-08-26 TUN-3328: Filter out free tunnel has started log from UI
1068- 2020-08-27 TUN-3333: Add text to UI explaining how to exit
1069- 2020-08-27 TUN-3335: Dynamically set connection table size for UI
1070- 2020-08-10 TUN-3238: Update UI when connection re-connects
1071- 2020-08-17 TUN-3261: Display connections on UI for free classic tunnels
1072- 2020-07-24 TUN-3201: Create base cloudflared UI structure
1073- 2020-07-29 TUN-3200: Add connection information to UI
1074- 2020-07-24 TUN-3255: Update UI to display URL instead of hostname
1075- 2020-07-29 TUN-3198: Handle errors while running tunnel UI
1076
10772020.9.1
1078- 2020-09-14 TUN-3395: Unhide named tunnel subcommands, tweak help
1079- 2020-09-15 TUN-3395: Improve help for list command
1080- 2020-09-14 TUN-3294: Perform basic validation on arguments of route command; remove default pool name which wasn't valid
1081- 2020-09-15 TUN-3395: Improve help for list command
1082- 2020-09-16 Use Go 1.15.2
1083
10842020.9.0
1085- 2020-09-11 TUN-3293: Try to use error information from the body of a failed tunnelstore reresponse if available
1086- 2020-09-04 AUTH-2653 renabled signing
1087- 2020-09-04 TUN-3377: Tunnel route should check dns/lb before checking tunnel ID
1088- 2020-09-04 AUTH-2653 changed to proper file extension
1089- 2020-09-04 AUTH-2653 handle duplicate key import errors
1090- 2020-09-04 TUN-3345: tunnel run accepts name of tunnel as argument
1091- 2020-09-08 AUTH-2653 disble error pipe to see what is failing
1092- 2020-09-08 AUTH-2653 search for the certificate and not the identity
1093- 2020-09-09 TUN-3284: Use cloudflared/<version> as user agent of tunnelstore client
1094- 2020-09-09 TUN-3375: Upgrade x/text and gorilla websocket deps
1095- 2020-09-09 TUN-3375: Upgrade coredns and prometheus dependencies
1096- 2020-09-09 AUTH-2653 add notarization to mac build
1097- 2020-09-08 TUN-3292: Mention cleanup in tunnel run help.
1098- 2020-08-20 AUTH-2016 fixed variable fail
1099- 2020-08-12 TUN-3352 extra debug logging for websockets
1100
11012020.8.2
1102- 2020-08-20 AUTH-3021 fixed the git version call by using the older flag
1103- 2020-08-18 TUN-3268: Each connection has its own event digest to reconnect
1104
11052020.8.1
1106- 2020-08-14 AUTH-2975 don't check /etc on windows
1107- 2020-08-14 AUTH-2977 log file protection
1108- 2020-08-18 TUN-3286: Use either ID or name in Named Tunnel subcommands.
1109- 2020-08-18 AUTH-2712 fixed the mac build script
1110- 2020-08-19 AUTH-2653 disabling signing until we can get the keys
1111- 2020-08-05 TUN-3233: List tunnels support filtering by deleted, name, existed at and id
1112- 2020-08-05 TUN-3237: By default, don't show connections that are pending reconnect
1113- 2020-08-06 TUN-3242: Build with go 1.14
1114- 2020-08-07 TUN-3243: Refactor tunnel subcommands to allow commands to compose better
1115- 2020-08-07 AUTH-2864 - add macos build to github release
1116- 2020-07-31 AUTH-2857 update homebrew script to use new url
1117- 2020-07-30 TUN-3213: Create, route and run named tunnels in one command
1118- 2020-07-07 AUTH-2712 added MSI build for a windows agent
1119
11202020.8.0
1121- 2020-07-30 TUN-3220: tunnel route reports created route
1122- 2020-07-31 TUN-3221: ConnectionOptions tracks numPreviousAttempts.
1123- 2020-07-20 TUN-3190: Initialize logger using command line flags in tunnels subcommands
1124- 2020-07-21 TUN-3192: Use zone ID in tunnelstore request path; improve debug logging
1125- 2020-07-23 TUN-3194: Don't render log output when level is not enabled
1126- 2020-07-22 AUTH-2016 adds sha256 hashes to releases
1127- 2020-07-27 Removes centos 6 build
1128- 2020-07-27 TUN-3209: Add benchmark for header serialization
1129- 2020-07-24 TUN-3209: improve performance and reduce allocations during user header serialization from h1 to h2
1130- 2020-07-26 TUN-3208: Add benchmark for large response write
1131- 2020-07-27 TUN-3208: Reduce copies and allocations on h2mux write path. Pre-allocate 16KB write buffer on the first write if possible. Use explicit byte array for chunks on write thread to avoid copying through intermediate buffer due to io.CopyN.
1132- 2020-07-28 AUTH-2714: Adds arm64 cloudflared build
1133- 2020-07-29 AUTH-2927 run message update after all github builds are done
1134- 2020-07-17 AUTH-2902 redirect with just the root host on curl commands
1135
11362020.7.4
1137- 2020-07-20 Build cloudflared for arm64 on native agents
1138- 2020-07-10 TUN-3048: Handle error when user tries to delete active tunnel
1139- 2020-07-14 AUTH-2890: adds error handler to cli actions
1140- 2020-07-06 TUN-3156: Add route subcommand under tunnel
1141
11422020.7.3
1143- 2020-07-13 Change scp command to use file glob that matches both cloudflared rpms and debs
1144
11452020.7.2
1146- 2020-07-02 AUTH-2644: Change install location and add man page
1147- 2020-07-02 TUN-3131: Allow user to specify tunnel credentials path, and remove it in tunnel delete command
1148- 2020-07-03 TUN-3008: Implement cloudflared tunnel cleanup command
1149- 2020-07-02 TUN-3150: cloudflared tunnel list's table should use intelligent column width
1150- 2020-07-07 TUN-3169: Move on to the next address when edge returns duplicate connection. There's no point in trying to connect to the same address since it will be hashed to the same metal. Improve logging of errors from serve tunnel loop, hide useless context cancelled error.
1151- 2020-07-08 beautify package meta information generated by fpm (#218)
1152- 2020-07-06 AUTH-2871: fix rpm builds
1153- 2020-07-08 AUTH-2858: Set file to disable autoupdate
1154- 2020-07-09 AUTH-2872: Adds centos-6 build
1155
11562020.7.1
1157- 2020-07-02 DEVTOOLS-7321: Push GitHub homebrew updates to master
1158- 2020-07-06 TUN-3161: Upgrade golang.org/x/ deps
1159- 2020-06-30 AUTH-2854: Create cloudflared RPMs
1160- 2020-06-26 AUTH-2850 log config file path
1161
11622020.7.0
1163- 2020-06-30 TUN-3140: Add timestamps to terminal log entries
1164- 2020-06-30 AUTH-2860: Fix builds
1165- 2020-06-25 TUN-3007: Implement named tunnel connection registration and unregistration.
1166
11672020.6.6
1168- 2020-06-23 AUTH-2685: Adds script to create release
1169- 2020-06-25 AUTH-2652: Update cloudflare repo
1170- 2020-06-26 AUTH-2718: Add target for publishing deb to pkg.cloudflare repo
1171- 2020-06-26 AUTH-2849 all log output to stderr
1172- 2020-06-17 TUN-3106: Pass NamedTunnel config to StartServer
1173- 2020-06-18 TUN-3107: UnregisterConnection shouldn't wrap nil error as RPC error
1174- 2020-06-17 AUTH-2652: Adds .docker-images to push images to docker hub
1175- 2020-06-18 AUTH-2712 mac package build script and better config file handling when started as a service
1176
11772020.6.5
1178- 2020-06-16 DEVTOOLS-7321: Don't skip macOS builds based on tag
1179- 2020-06-16 fix for a flaky test
1180- 2020-06-16 AUTH-2815 flag check was wrong. stupid oversight
1181- 2020-06-16 TUN-3101: Tunnel list command should only show non-deleted, by default
1182- 2020-06-16 TUN-3066: Command line action for tunnel run
1183- 2020-06-16 TUN-3100 make updater report the right text
1184
11852020.6.4
1186- 2020-06-11 TUN-3085: Pass connection authentication information using TunnelAuth struct
1187- 2020-06-15 TUN-3084: Generate and store tunnel_secret value during tunnel creation
1188- 2020-06-16 AUTH-2815 add the log file to support the config.yaml file
1189- 2020-06-02 TUN-3015: Add a new cap'n'proto RPC interface for connection registration as well as matching client and server implementations. The old interface extends the new one for backward compatibility.
1190
11912020.6.3
1192- 2020-06-15 DEVTOOLS-7321: Add openssh-client pkg for missing ssh-keyscan
1193- 2020-06-15 AUTH-2813 adds back a single file support a cloudflared log file
1194
11952020.6.2
1196- 2020-06-11 AUTH-2648 updated usage text
1197- 2020-06-11 AUTH-2763 don't redirect from curl command
1198- 2020-06-12 TUN-3090: Upgrade crypto dep
1199- 2020-06-11 TUN-3038: Add connections to tunnel list table
1200- 2020-06-12 AUTH-2810 added warn for backwards compatibility sake
1201
12022020.6.1
1203- 2020-06-09 AUTH-2796 fixed windows build
1204
12052020.6.0
1206- 2020-06-05 AUTH-2645 protect against user mistaken flag input
1207- 2020-06-05 AUTH-2687 don't copy config unnecessarily
1208- 2020-06-05 AUTH-2169 make access login page more generic
1209- 2020-06-05 AUTH-2729 added log file and level to cmd flags to match config file settings
1210- 2020-06-08 AUTH-2785 service token flag fix and logger fix
1211- 2020-05-20 AUTH-2682: Create buster build
1212- 2020-05-21 TUN-2928, TUN-2929, TUN-2930: Add tunnel subcommands to interact with tunnel store service
1213- 2020-05-29 Adding support for multi-architecture images and binaries (#184)
1214- 2020-05-29 TUN-3019: Remove declarative tunnel entry code
1215- 2020-05-29 TUN-3020: Remove declarative tunnel related RPC code
1216- 2020-05-13 AUTH-2505 added aliases
1217- 2020-05-14 AUTH-2529 added deprecation text to db-connect command
1218- 2020-05-18 AUTH-2686: Added error handling to tunnel subcommand
1219- 2020-05-04 AUTH-2369: RDP Bastion prototype
1220- 2020-04-29 AUTH-2596 added new logger package and replaced logrus
1221- 2020-04-25 DEVTOOLS-7321: Use SSH key from env for pushing to GitHub
1222- 2020-04-25 DEVTOOLS-7321: Push to a test branch instead of to master
1223- 2020-03-30 DEVTOOLS-7321: Add scripts for macOS builds and homebrew uploads
1224
12252020.5.1
1226- 2020-05-07 TUN-2860: Enable quick reconnect feature by default
1227- 2020-05-07 AUTH-2564: error handling and minor fixes
1228- 2020-05-01 AUTH-2588 add DoH to service mode
1229
12302020.5.0
1231- 2020-05-01 TUN-2943: Copy certutil from edge into cloudflared
1232- 2020-05-05 TUN-2955: Fix connection and goroutine leaks when tunnel conection is terminated on error. Only unregister tunnels that had connected successfully. Close edge connection used to unregister the tunnel. Use buffered channels for error channels where receiver may quit early on context cancellation.
1233- 2020-04-30 TUN-2940: Added delay parameter to stdin reconnect command.
1234- 2020-04-27 TUN-2921: Rework address selection logic to avoid corner cases
1235- 2020-04-28 TUN-2872: Exit with non-0 status code when the binary is updated so launchd will restart the service
1236- 2020-04-13 AUTH-2587 add config watcher and reload logic for access client forwarder
1237
12382020.4.0
1239- 2020-04-10 TUN-2881: Parameterize response meta information header name in the generating function
1240- 2020-04-11 TUN-2894: ResponseMetaHeader should be public
1241- 2020-04-09 TUN-2880: Return metadata about source of the response from cloudflared
1242- 2020-04-04 ARES-899: Fixes DoH client as system resolver. Fixes #91
1243- 2020-03-31 AUTH-2394 added socks5 proxy
1244- 2020-02-24 AUTH-2235 GetTokenIfExists now parses JWT payload for json expiry field to detect if the cached access token is expired
1245
12462020.3.2
1247- 2020-03-31 TUN-2854: Quick Reconnects should be an optional supported feature
1248- 2020-03-30 TUN-2850: Tunnel stripping Cloudflare headers
1249
12502020.3.1
1251- 2020-03-27 TUN-2846: Trigger debug reconnects from stdin commands, not SIGUSR1
1252
12532020.3.0
1254- 2020-03-23 AUTH-2394 fixed header for websockets. Added TCP alias
1255- 2020-03-10 TUN-2797: Fix panic in SetConnDigest by making mutexes values.
1256- 2020-03-13 TUN-2807: cloudflared hello-world shouldn't assume it's my first tunnel
1257- 2020-03-13 TUN-2756: Set connection digest after reconnect.
1258- 2020-03-16 TUN-2812: Tunnel proxies and RPCs can share an edge address
1259- 2020-03-18 TUN-2816: cloudflared metrics server should be more discoverable
1260- 2020-03-19 TUN-2820: Serialized headers for Websockets
1261- 2020-03-19 TUN-2819: cloudflared should close its connections when a signal is sent
1262- 2020-03-19 TUN-2823: Bugfix. cloudflared would hang forever if error occurred.
1263- 2020-03-10 TUN-2796: Implement HTTP2 CONTINUATION headers correctly
1264- 2020-03-02 TUN-2779: update sample HTML pages
1265- 2020-03-04 TUN-2785: Use reconnect token by default
1266- 2020-03-05 TUN-2754: Add ConnDigest to cloudflared and its RPCs
1267- 2020-03-06 TUN-2755: ReconnectTunnel RPC now transmits ConnectionDigest
1268- 2020-03-06 TUN-2761: Use the new header management functions in cloudflared
1269- 2020-03-06 TUN-2788: cloudflared should store one ConnDigest per HA connection
1270- 2020-02-26 TUN-2767: Test for large headers
1271- 2020-02-28 do not terminate tunnel if origin is not reachable on start-up (#177)
1272- 2020-02-28 TUN-2776: Add header serialization feature in cloudflared
1273- 2020-02-21 TUN-2748: Insecure randomness vulnerability in github.com/miekg/dns
1274
12752020.2.1
1276- 2020-02-20 TUN-2745: Rename existing header management functions
1277- 2020-02-21 TUN-2746: Add the new header management functions
1278- 2020-02-25 perf(cloudflared): reuse memory from buffer pool to get better throughput (#161)
1279- 2020-02-25 Tweak HTTP host header. Fixes #107 (#168)
1280- 2020-02-25 TUN-2765: Add list of features to tunnelrpc
1281- 2020-02-19 TUN-2725: Specify in code that --edge is for internal testing only
1282- 2020-02-19 TUN-2703: Muxer.Serve terminates when its context is Done
1283- 2020-02-09 TUN-2717: Function to serialize/deserialize HTTP headers
1284- 2020-02-05 TUN-2714: New edge discovery. Connections try to reconnect to the same edge IP.
1285
12862020.2.0
1287- 2020-01-30 TUN-2651: Fix panic in h2mux reader when a stream error is encountered
1288- 2020-01-27 TUN-2645: Revert "TUN-2645: Turn on reconnect tokens"
1289- 2020-01-28 TUN-2693: Metrics for ReconnectTunnel
1290- 2020-01-28 TUN-2696: Add unknown registerRPCName
1291- 2020-01-28 TUN-2699: Metrics for Authenticate RPCs
1292- 2020-01-28 TUN-2690: cloudflared reconnect uses wrong context
1293- 2020-01-29 TUN-2707: Inconsistent cardinality in tunnel error metrics
1294- 2020-01-13 TUN-2645: Turn on reconnect tokens
1295- 2019-12-23 TUN-2646: Make --edge flag work again for local development
1296
12972019.12.0
1298- 2019-12-11 TUN-2631: only notify that activeStreamMap is closed if ignoreNewStreams=true
1299- 2019-12-17 bug(cloudflared): Set the MaxIdleConnsPerHost of http.Transport to proxy-keepalive-connections (#155)
1300- 2019-12-17 refactor(docker): optimize Dockerfile (#126)
1301- 2019-12-19 Fix timer scheduling for systemd update service (#159)
1302- 2019-12-13 TUN-2637: Manage edge IPs in a region-aware manner
1303- 2019-12-03 bug(cloudflared): nil pointer deference on h2DictWriter Close() (#154)
1304- 2019-12-03 TUN-2608: h2mux.Muxer.Shutdown always returns a non-nil channel
1305- 2019-12-04 TUN-2555: origin/supervisor.go calls Authenticate
1306- 2019-12-06 TUN-2554: cloudflared calls ReconnectTunnel
1307- 2019-11-20 TUN-2575: Constructors + simpler conversions for AuthOutcome
1308- 2019-11-22 Fix Docker build failure (#149)
1309- 2019-11-21 TUN-2573: Refactor TunnelRegistration into PermanentRegistrationError, RetryableRegistrationError and SuccessfulTunnelRegistration
1310- 2019-11-22 TUN-2582: EventDigest field in tunnelrpc
1311- 2019-11-22 Fix "happy eyeballs" not being disabled since Golang 1.12 upgrade * The Dialer.DualStack setting is now ignored and deprecated; RFC 6555 Fast Fallback ("Happy Eyeballs") is now enabled by default. To disable, set Dialer.FallbackDelay to a negative value.
1312- 2019-11-25 TUN-2591: ReconnectTunnel now sends EventDigest
1313- 2019-11-21 TUN-2606: add DialEdge helpers
1314- 2019-11-21 TUN-2607: add RPC stream helpers
1315
13162019.11.3
1317- 2019-11-20 TUN-2562: Update Cloudflare Origin CA RSA root
1318
13192019.11.2
1320- 2019-11-18 TUN-2567: AuthOutcome can be turned back into AuthResponse
1321- 2019-11-18 TUN-2563: Exposes config_version metrics
1322
13232019.11.1
1324- 2019-11-12 Add db-connect, a SQL over HTTPS server
1325- 2019-11-12 TUN-2053: Add a /healthcheck endpoint to the metrics server
1326- 2019-11-13 TUN-2178: public API to create new h2mux.MuxedStreamRequest
1327- 2019-11-13 TUN-2490: respect original representation of HTTP request path
1328- 2019-11-18 TUN-2547: TunnelRPC definitions for Authenticate flow
1329- 2019-11-18 TUN-2551: TunnelRPC definitions for ReconnectTunnel flow
1330- 2019-11-05 TUN-2506: Expose active streams metrics
1331
13322019.11.0
1333- 2019-11-04 TUN-2502: Switch to go modules
1334- 2019-11-04 TUN-2500: Don't send client registration errors to Sentry
1335- 2019-11-04 TUN-2489: Delete stream from activestreammap when read and write are both closed
1336- 2019-11-05 TUN-2505: Terminate stream on receipt of RST_STREAM; MuxedStream.CloseWrite() should terminate the MuxedStream.Write() loop
1337- 2019-10-30 TUN-2451: Log inavlid path
1338- 2019-10-22 TUN-2425: Enable cloudflared to serve multiple Hello World servers by having each of them create its own ServeMux
1339- 2019-10-22 AUTH-2173: Prepends access login url with scheme if one doesnt exist
1340- 2019-10-23 TUN-2460: Configure according to the ClientConfig recevied from a successful Connect
1341- 2019-10-23 AUTH-2177: Reads and writes error streams
1342
13432019.10.4
1344- 2019-10-21 TUN-2450: Remove Brew publishing formula
1345
13462019.10.3
1347- 2019-10-18 Fix #129: Excessive memory usage streaming large files (#142)
1348
13492019.10.2
1350- 2019-10-17 AUTH-2167: Adds CLI option for host key directory
1351
13522019.10.1
1353- 2019-10-17 Adds variable to fix windows build
1354
13552019.10.0
1356- 2019-10-11 AUTH-2105: Dont require --destination arg
1357- 2019-10-14 TUN-2344: log more details: http2.Framer.ErrorDetail() if available, connectionID
1358- 2019-10-16 AUTH-2159: Moves shutdownC close into error handling AUTH-2161: Lowers size of preamble length AUTH-2160: Fixes url parsing logic
1359- 2019-10-16 AUTH-2135: Adds support for IPv6 and tests
1360- 2019-10-02 AUTH-2105: Adds support for local forwarding. Refactor auditlogger creation. AUTH-2088: Adds dynamic destination routing
1361- 2019-10-09 AUTH-2114: Uses short lived cert auth for outgoing client connection
1362- 2019-09-30 AUTH-2089: Revise ssh server to function as a proxy
1363
13642019.9.2
1365- 2019-09-26 TUN-2355: Roll back TUN-2276
1366
13672019.9.1
1368- 2019-09-23 TUN-2334: remove tlsConfig.ServerName special case
1369- 2019-09-23 AUTH-2077: Quotes open browser command in windows
1370- 2019-09-11 AUTH-2050: Adds time.sleep to temporarily avoid hitting tunnel muxer dealock issue
1371- 2019-09-10 AUTH-2056: Writes stderr to its own stream for non-pty connections
1372- 2019-09-16 TUN-2307: Capnp is the only serialization format used in tunnelpogs
1373- 2019-09-18 TUN-2315: Replace Scope with IntentLabel
1374- 2019-09-17 TUN-2309: Split ConnectResult into ConnectError and ConnectSuccess, each implementing its own capnp serialization logic
1375- 2019-09-18 AUTH-2052: Adds tests for SSH server
1376- 2019-09-18 AUTH-2067: Log commands correctly
1377- 2019-09-19 AUTH-2055: Verifies token at edge on access login
1378- 2019-09-04 TUN-2201: change SRV records used by cloudflared
1379- 2019-09-06 TUN-2280: Revert "TUN-2260: add name/group to CapnpConnectParameters, remove Scope"
1380- 2019-09-03 AUTH-1943 hooked up uploader to logger, added timestamp to session logs, add tests
1381- 2019-09-04 AUTH-2036: Refactor user retrieval, shutdown after ssh server stops, add custom version string
1382- 2019-09-06 AUTH-1942 added event log to ssh server
1383- 2019-09-04 AUTH-2037: Adds support for ssh port forwarding
1384- 2019-09-05 TUN-2276: Path encoding broken
1385
13862019.9.0
1387- 2019-09-05 TUN-2279: Revert path encoding fix
1388- 2019-08-30 AUTH-2021 - check error for failing tests
1389- 2019-08-29 AUTH-2030: Support both authorized_key and short lived cert authentication simultaniously without specifiying at start time
1390- 2019-08-29 AUTH-2026: Adds support for non-pty sessions and inline command exec
1391- 2019-08-26 AUTH-1943: Adds session logging
1392- 2019-08-26 TUN-2162: Decomplect OpenStream to allow finer-grained timeouts
1393- 2019-08-29 TUN-2260: add name/group to CapnpConnectParameters, remove Scope
1394
13952019.8.4
1396- 2019-08-30 Fix #111: Add support for specifying a specific HTTP Host: header on the origin. (#114)
1397- 2019-08-22 TUN-2165: Add ClientConfig to tunnelrpc.ConnectResult
1398- 2019-08-20 AUTH-2014: Checks users login shell
1399- 2019-08-26 TUN-2243: Revert "STOR-519: Add db-connect, a SQL over HTTPS server"
1400- 2019-08-27 TUN-2244: Add NO_AUTOUPDATE env var
1401- 2019-08-22 AUTH-2018: Adds support for authorized keys and short lived certs
1402- 2019-08-28 AUTH-2022: Adds ssh timeout configuration
1403- 2019-08-28 TUN-1968: Gracefully diff StreamHandler.UpdateConfig
1404- 2019-08-26 AUTH-2021 - s3 bucket uploading for SSH logs
1405- 2019-08-19 AUTH-2004: Adds static host key support
1406- 2019-07-18 AUTH-1941: Adds initial SSH server implementation
1407
14082019.8.3
1409- 2019-08-20 STOR-519: Add db-connect, a SQL over HTTPS server
1410- 2019-08-20 Release 2019.8.2
1411- 2019-08-20 Revert "AUTH-1941: Adds initial SSH server implementation"
1412- 2019-08-11 TUN-2163: Add GrapQLType method to Scope interface
1413- 2019-08-06 TUN-2152: Requests with a query in the URL are erroneously escaped
1414- 2019-07-18 AUTH-1941: Adds initial SSH server implementation
1415
14162019.8.1
1417- 2019-08-05 TUN-2111: Implement custom serialization logic for FallibleConfig and OriginConfig
1418- 2019-08-06 Revert "TUN-1736: Missing headers when passing an invalid path"
1419
14202019.8.0
1421- 2019-07-11 TUN-1956: Go 1.12 update
1422- 2019-07-24 TUN-1736: Missing headers when passing an invalid path
1423- 2019-07-30 TUN-2117: read group/system-name from CLI, send it to edge
1424- 2019-08-02 TUN-2125: Add PostgresType() to Scope
1425- 2019-08-05 TUN-2147: Implemented ScopeUnmarshaler
1426- 2019-07-31 TUN-2110: Implement custom deserialization logic for OriginConfig
1427- 2019-07-31 AUTH-1972: Deletes token lock file if backoff retry attempts exceeded and intercepts signals until lock is released
1428
14292019.7.0
1430- 2019-05-28 TUN-1913: Define OriginService for each type of origin
1431- 2019-04-29 Build a docker container
1432- 2019-06-12 TUN-1952: Group ClientConfig fields by the component that uses the config, and return the part of the config that failed to be applied
1433- 2019-06-05 TUN-1893: Proxy requests to the origin based on tunnel hostname
1434- 2019-06-17 TUN-1961: Create EdgeConnectionManager to maintain outbound connections to the edge
1435- 2019-06-18 TUN-1885: Reconfigure cloudflared on receiving new ClientConfig
1436- 2019-06-19 TUN-1976: Pass tunnel hostname through header
1437- 2019-06-20 TUN-1982: Load custom origin CA when OriginCAPool is specified
1438- 2019-06-26 TUN-2005: Upgrade logrus
1439- 2019-06-20 TUN-1981: Write response header & body on proxy error to notify eyeballs of failure category
1440- 2019-06-20 TUN-1977: Validate OriginConfig has valid URL, and use scheme to determine if a HTTPOriginService is expecting HTTP or Unix
1441- 2019-06-13 DoH: change the media type to application/dns-message
1442- 2019-06-26 AUTH-1736: Better handling of token revocation
1443
14442019.6.0
1445- 2019-05-17 TUN-1828: Update declarative tunnel config struct
1446- 2019-05-29 Handle exit code on err
1447- 2019-05-29 AUTH-1802: Fixed ssh-config templating
1448- 2019-05-30 TUN-1914: Conflate HTTP and Unix OriginConfig, and add TLS config to WebSocketOriginConfig
1449- 2019-06-03 AUTH-1811: ssh-gen config fixes
1450
14512019.5.0
1452- 2019-04-25 TUN-1781: ServeStream should return early on error
1453- 2019-04-30 TUN-1786: Remove low-level Windows service logging
1454- 2019-05-03 TUN-1807: Send cloudflared version in Connect RPC
1455- 2019-01-23 AUTH-1557: Short Lived Certs
1456- 2019-05-13 TUN-1847: Log a distinct message when OpenStream fails while waiting for response headers
1457- 2019-05-13 AUTH-1706: fixes and testing
1458- 2019-05-22 TUN-1880: Save debug and warn level log to logfile
1459- 2019-05-22 AUTH-1781: fixed race condition for short lived certs, doc required config
1460
14612019.4.1
1462- 2019-03-18 TUN-1626: Create new supervisor to establish connection with origintunneld
1463- 2019-04-04 TUN-1619: Add flag to test declarative tunnels.
1464- 2019-04-05 TUN-1577: decompose carrier.StartServer to make TestStartServer less flappy
1465- 2019-03-29 TUN-1606: Define CloudflaredConfig RPC structure, interface for cloudflared's RPC server
1466- 2019-04-02 TUN-1682: Add context to OpenStream to prevent it from blocking indefinitely.
1467- 2019-04-16 TUN-1732: cloudflared metrics should track userHostnames
1468- 2019-04-17 TUN-1734: Pin packages at exact versions
1469- 2019-04-18 TUN-1669: Update license message in help text. Also fix test
1470
14712019.4.0
1472- 2019-03-28 TUN-1648: ConnectionID is now a UUID
1473- 2019-04-01 TUN-1673: Conflate Hello and Connect RPCs
1474
14752019.3.2
1476- 2019-03-22 TUN-1637: Free tunnels shouldn't require cert.pem
1477- 2019-03-18 TUN-1604: Define Connect RPC call
1478
14792019.3.1
1480- 2019-03-09 Add rdp as a supported protocol in URL validation (#76)
1481- 2019-03-15 TUN-1613: improved cloudflared RegisterTunnel fail metrics
1482- 2019-03-17 TUN-1615: revert miekg/dns to last known working revision
1483
14842019.3.0
1485- 2018-12-28 make http transport aware of proxy from envvar
1486- 2019-02-28 TUN-1559: fix nil dereference in TunnelConfig.CloseConnOnce
1487- 2019-03-04 TUN-1451: Make non-interactive, non-service execution possible on Windows
1488- 2019-03-04 TUN-1562: Refactor connectedSignal to be safe to close multiple times
1489- 2019-02-27 TUN-1550: Add validation timeout for non-responsive origins
1490- 2019-03-06 AUTH-1531: Named flags for ssh service tokens
1491- 2019-02-14 Support unix sockets.
1492- 2019-03-08 TUN-1389: Non-scalar flags in a cloudflared config.yml don't get logged
1493- 2019-03-07 TUN-1522: If we can't get SRV from default resolver, get them from 1.1.1.1 DoT
1494
14952019.2.1
1496- 2019-02-14 TUN-1381: should tell you if you're on the latest version rather than just exiting silently
1497- 2019-02-15 TUN-1467: build with Go 1.11
1498- 2019-02-15 AUTH-1519: Added logging
1499- 2019-02-19 TUN-1525: cloudflared metrics for registration success/fail
1500- 2019-02-19 TUN-1510: Wrap the close() in sync.Once.Do
1501
15022019.2.0
1503- 2019-01-24 AUTH-1462: better curl arg parsing
1504- 2019-02-01 TUN-1456: Only make one UUID
1505- 2019-01-30 cloudflared/linux_service: Add missing /etc/init.d shebang
1506- 2019-02-07 AUTH-1511: Add custom headers for ssh command
1507- 2019-02-01 AUTH-1503: Added RDP support
1508- 2019-02-01 AUTH-1403: Print the paths in the ssh-config instructions
1509
15102019.1.0
1511- 2018-12-10 TUN-1231: Horizontal overflow wrapping on the Hello page
1512- 2018-12-17 TUN-1140: Show usage if invoked with no args or config
1513- 2018-11-06 TUN-632 Filter out common network exceptions from going to Sentry on StartServer
1514- 2019-01-07 TUN-1138: Install cloudflared service directory with 755 permissions
1515- 2019-01-07 TUN-1265: Silent exit when failing to parse config
1516- 2019-01-10 TUN-1350: Enhance error messages with cloudflarestatus.com link, if relevant
1517- 2019-01-16 TUN-1358: Close readyList after Muxer.Serve() has stopped running
1518- 2019-01-24 AUTH-1423: move from stdout to stderr
1519- 2019-01-24 AUTH-1404: reauth if the token is about to expire within 15 minutes
1520- 2019-01-24 AUTH-1459: improved ssh streaming error message
1521- 2019-01-24 AUTH-1211: print all the versions
1522- 2019-01-24 AUTH-1337: fix url path
1523- 2019-01-28 TUN-1418: Rename ProtocolLogger to TransportLogger, and use TransportLogger to log RPC events.
1524- 2019-01-28 TUN-1419: Identify request/response headers/content length with ray ID
1525
15262018.12.1
1527- 2018-12-11 TUN-1270: cloudflared panic (HA metrics missing label)
1528
15292018.12.0
1530- 2018-11-15 TUN-1196: Allow TLS config client CA and root CA to be constructed from multiple certificates
1531- 2018-11-20 TUN-1209: TLS Config Certificates and GetCertificate can both be set
1532- 2018-11-26 TUN-1212: Expose tunnel_id in metrics
1533- 2018-11-30 TUN-1204: remove 'cloudflared hello' command
1534- 2018-12-04 Fix license URL typo
1535- 2018-12-07 TUN-1250: ValidateHTTPService shouldn't follow 302s
1536
15372018.11.0
1538- 2018-10-31 AUTH-1282: Fixed an issue where we were receiving as opposed sending on the channel.
1539- 2018-11-06 TUN-1179: Fix log message in cmd/cloudflared/transfer.Run
1540- 2018-11-13 AUTH-1308: get jwt even when you are already logged in
1541- 2018-11-12 TUN-1190: check URL parse error when starting SSH proxy server
1542- 2018-11-15 AUTH-1320: Fixed request issue and unhide the ssh command
1543
15442018.10.5
1545- 2018-10-18 TUN-968: Flow control for large requests/responses
1546- 2018-10-26 TUN-1158: Windows: use process arguments rather than trivial service arguments
1547- 2018-10-20 #30: Fix the Content-Length header for HTTP2->HTTP1
1548- 2018-10-29 TUN-1160: pass Host header during origin url validation
1549
15502018.10.4
1551- 2018-09-21 AUTH-1070: added SSH/protocol forwarding
1552- 2018-10-19 AUTH-1235: fixed packaging of deb dev file
1553- 2018-10-19 TUN-1097: Host missing from WebSocket request
1554- 2018-10-19 AUTH-1188: UX Review and Changes for CLI SSH Access
1555
15562018.10.3
1557- 2018-10-08 TUN-1099: Bring back changes in 2018.10.1
1558- 2018-10-08 TUN-1098: removed deprecation error
1559- 2018-10-08 TUN-1101: False negatives in Cloudflared error reporting
1560
15612018.10.2
1562- 2018-10-06 TUN-1093: Revert cloudflared to 2018.8.0
1563
15642018.10.1
1565- 2018-10-03 TUN-1012: Normalize config filename for Linux services
1566- 2018-10-05 TUN-1081: cloudflared now generates UUIDs
1567- 2018-10-05 TUN-1083: fixed incorrect help menu
1568- 2018-10-05 TUN-1086: fixed config option
1569
15702018.10.0
1571- 2018-08-15 AUTH-910, AUTH-1049, AUTH-1068, AUTH-1056: Generate and store Access tokens with E2EE option, curl/cmd wrapper
1572- 2018-09-11 TUN-890: To support free tunnels, hostname can now be ""
1573- 2018-09-12 TUN-810: Cloudflared should open dash/argotunnel not dash/warp
1574- 2018-09-12 TUN-985: Don't display tunnel ID if it's empty string
1575- 2018-09-11 TUN-881: Display trial zone URL upon successful registration
1576- 2018-09-11 TUN-868: HTTP/HTTPS mismatch should have a better error message
1577- 2018-09-19 TUN-1028: Unhide cloudflared compression flag
1578- 2018-09-20 AUTH-1139: refactored cloudflared help menu
1579- 2018-09-20 TUN-1035: New text for cloudflared tunnel --help
1580- 2018-09-18 AUTH-1136: addressing beta feedback
1581- 2018-09-26 AUTH-1165: hide access command
1582- 2018-09-26 TUN-1046: Document that delta compression is a beta feature
1583- 2018-09-28 TUN-1056: Lint error broke build
1584- 2018-09-27 TUN-1052: Origintunneld can send back an Origincert to Cloudflared
1585- 2018-09-28 TUN-1052: Changing type of OriginCert to :Data
1586- 2018-10-01 TUN-1062: Makefile target for regenerating Capn Proto definitions
1587- 2018-10-02 TUN-1064: Revert OriginCert capnp changes in Cloudflared. Reverts commits a1ee2342e97 and 8c756c45785.
1588- 2018-10-03 TUN-1076: Pin capnproto2 to version 2.17.1
1589- 2018-10-03 AUTH-1199: unhide access command, added beta label
1590
15912018.8.0
1592- 2018-05-01 Initial commit
1593- 2018-05-03 TUN-595: Add License/Readme files to cloudflared
1594- 2018-05-01 TUN-528: Move cloudflared into a separate repo
1595- 2018-07-24 TUN-813: Clean up cloudflared dependencies
1596- 2018-07-25 TUN-814: Handle error in CreateTLSListener before closing listener
1597- 2018-07-24 TUN-804: create Makefile recipe to build cloudflared and run tests
1598- 2018-07-26 TUN-817: Increase the log time precision
1599- 2018-07-30 TUN-828: Added Connection: keep-alive header
1600- 2018-07-30 TUN-829: prefer p256 curve
1601- 2018-07-31 TUN-834: Enable tracing on cloudflared
1602- 2018-08-07 TUN-820: Fix caddyfile gitignore
1603- 2018-07-25 TUN-804: create make recipe for building deb package
1604- 2018-08-07 TUN-861: Disable cloudflared tracing by default; preserve the latest tracefile
1605- 2018-08-07 TUN-857: Pull the brotli-go dependency from Github
1606- 2018-08-14 TUN-897: Bring back missing Brotli files
1607- 2018-07-26 TUN-804: create makefile recipe to release cloudflared using equinox
1608- 2018-08-15 TUN-901: makefile target for homebrew release
1609- 2018-07-30 TUN-801: Rapid SQL Proxy
1610- 2018-08-27 TUN-833: Don't log system root certificate loading failure on Windows
1611
1612