cloudflare/cloudflared

Public

mirrored from https://github.com/cloudflare/cloudflaredAvailable

CodeCommitsIssuesPull requestsActionsInsightsSecurity
2023.7.3

Branches

Tags

  • No tags available.
0Branches0Tags
Go to file
Add file
Code

Clone

HTTPS

Download ZIP

RELEASE_NOTES

1591lines · modecode

12023.7.3
2- 2023-07-25 TUN-7628: Correct Host parsing for Access
3- 2023-07-24 TUN-7624: Fix flaky TestBackoffGracePeriod test in cloudflared
4
52023.7.2
6- 2023-07-19 TUN-7599: Onboard cloudflared to Software Dashboard
7- 2023-07-19 TUN-7587: Remove junos builds
8- 2023-07-18 TUN-7597: Add flag to disable auto-update services to be installed
9- 2023-07-17 TUN-7594: Add nightly arm64 cloudflared internal deb publishes
10- 2023-07-14 TUN-7586: Upgrade go-jose/go-jose/v3 and core-os/go-oidc/v3
11- 2023-07-14 TUN-7589: Remove legacy golang.org/x/crypto/ssh/terminal package usage
12- 2023-07-14 TUN-7590: Remove usages of ioutil
13- 2023-07-14 TUN-7585: Remove h2mux compression
14- 2023-07-14 TUN-7588: Update package coreos/go-systemd
15
162023.7.1
17- 2023-07-13 TUN-7582: Correct changelog wording for --management-diagnostics
18- 2023-07-12 TUN-7575: Add option to disable PTMU discovery over QUIC
19
202023.7.0
21- 2023-07-06 TUN-7558: Flush on Writes for StreamBasedOriginProxy
22- 2023-07-05 TUN-7553: Add flag to enable management diagnostic services
23- 2023-07-05 TUN-7564: Support cf-trace-id for cloudflared access
24- 2023-07-05 TUN-7477: Decrement UDP sessions on shutdown
25- 2023-07-03 TUN-7545: Add support for full bidirectionally streaming with close signal propagation
26- 2023-06-30 TUN-7549: Add metrics route to management service
27- 2023-06-30 TUN-7551: Complete removal of raven-go to sentry-go
28- 2023-06-30 TUN-7550: Add pprof endpoint to management service
29- 2023-06-29 TUN-7543: Add --debug-stream flag to cloudflared access ssh
30- 2023-06-26 TUN-6011: Remove docker networks from ICMP Proxy test
31- 2023-06-20 AUTH-5328 Pass cloudflared_token_check param when running cloudflared access login
32
332023.6.1
34- 2023-06-19 TUN-7480: Added a timeout for unregisterUDP.
35- 2023-06-16 TUN-7477: Add UDP/TCP session metrics
36- 2023-06-14 TUN-7468: Increase the limit of incoming streams
37
382023.6.0
39- 2023-06-15 TUN-7471: Fixes cloudflared not closing the quic stream on unregister UDP session
40- 2023-06-09 TUN-7463: Add default ingress rule if no ingress rules are provided when updating the configuration
41- 2023-05-31 TUN-7447: Add a cover build to report code coverage
42
432023.5.1
44- 2023-05-16 TUN-7424: Add CORS headers to host_details responses
45- 2023-05-11 TUN-7421: Add *.cloudflare.com to permitted Origins for management WebSocket requests
46- 2023-05-05 TUN-7404: Default configuration version set to -1
47- 2023-05-05 TUN-7227: Migrate to devincarr/quic-go
48
492023.5.0
50- 2023-04-27 TUN-7398: Add support for quic safe stream to set deadline
51- 2023-04-26 TUN-7394: Retry StartFirstTunnel on quic.ApplicationErrors
52- 2023-04-26 TUN-7392: Ignore release checksum upload if asset already uploaded
53- 2023-04-25 TUN-7392: Ignore duplicate artifact uploads for github release
54- 2023-04-25 TUN-7393: Add json output for cloudflared tail
55- 2023-04-24 TUN-7390: Remove Debian stretch builds
56
572023.4.2
58- 2023-04-24 TUN-7133: Add sampling support for streaming logs
59- 2023-04-21 TUN-7141: Add component tests for streaming logs
60- 2023-04-21 TUN-7373: Streaming logs override for same actor
61- 2023-04-20 TUN-7383: Bump requirements.txt
62- 2023-04-19 TUN-7361: Add a label to override hostname
63- 2023-04-19 TUN-7378: Remove RPC debug logs
64- 2023-04-18 TUN-7360: Add Get Host Details handler in management service
65- 2023-04-17 AUTH-3122 Verify that Access tokens are still valid in curl command
66- 2023-04-17 TUN-7129: Categorize TCP logs for streaming logs
67- 2023-04-17 TUN-7130: Categorize UDP logs for streaming logs
68- 2023-04-10 AUTH-4887 Add aud parameter to token transfer url
69
702023.4.1
71- 2023-04-13 TUN-7368: Report destination address for TCP requests in logs
72- 2023-04-12 TUN-7134: Acquire token for cloudflared tail
73- 2023-04-12 TUN-7131: Add cloudflared log event to connection messages and enable streaming logs
74- 2023-04-11 TUN-7132 TUN-7136: Add filter support for streaming logs
75- 2023-04-06 TUN-7354: Don't warn for empty ingress rules when using --token
76- 2023-04-06 TUN-7128: Categorize logs from public hostname locations
77- 2023-04-06 TUN-7351: Add streaming logs session ping and timeout
78- 2023-04-06 TUN-7335: Fix cloudflared update not working in windows
79
802023.4.0
81- 2023-04-07 TUN-7356: Bump golang.org/x/net package to 0.7.0
82- 2023-04-07 TUN-7357: Bump to go 1.19.6
83- 2023-04-06 TUN-7127: Disconnect logger level requirement for management
84- 2023-04-05 TUN-7332: Remove legacy tunnel force flag
85- 2023-04-05 TUN-7135: Add cloudflared tail
86- 2023-04-04 Add suport for OpenBSD (#916)
87- 2023-04-04 Fix typo (#918)
88- 2023-04-04 TUN-7125: Add management streaming logs WebSocket protocol
89- 2023-03-30 TUN-9999: Remove classic tunnel component tests
90- 2023-03-30 TUN-7126: Add Management logger io.Writer
91- 2023-03-29 TUN-7324: Add http.Hijacker to connection.ResponseWriter
92- 2023-03-29 TUN-7333: Default features checkable at runtime across all packages
93- 2023-03-21 TUN-7124: Add intercept ingress rule for management requests
94
952023.3.1
96- 2023-03-13 TUN-7271: Return 503 status code when no ingress rules configured
97- 2023-03-10 TUN-7272: Fix cloudflared returning non supported status service which breaks configuration migration
98- 2023-03-09 TUN-7259: Add warning for missing ingress rules
99- 2023-03-09 TUN-7268: Default to Program Files as location for win32
100- 2023-03-07 TUN-7252: Remove h2mux connection
101- 2023-03-07 TUN-7253: Adopt http.ResponseWriter for connection.ResponseWriter
102- 2023-03-06 TUN-7245: Add bastion flag to origin service check
103- 2023-03-06 EDGESTORE-108: Remove deprecated s3v2 signature
104- 2023-03-02 TUN-7226: Fixed a missed rename
105
1062023.3.0
107- 2023-03-01 GH-352: Add Tunnel CLI option "edge-bind-address" (#870)
108- 2023-03-01 Fixed WIX template to allow MSI upgrades (#838)
109- 2023-02-28 TUN-7213: Decode Base64 encoded key before writing it
110- 2023-02-28 check.yaml: update actions to v3 (#876)
111- 2023-02-27 TUN-7213: Debug homebrew-cloudflare build
112- 2023-02-15 RTG-2476 Add qtls override for Go 1.20
113
1142023.2.2
115- 2023-02-22 TUN-7197: Add connIndex tag to debug messages of incoming requests
116- 2023-02-08 TUN-7167: Respect protocol overrides with --token
117- 2023-02-06 TUN-7065: Remove classic tunnel creation
118- 2023-02-06 TUN-6938: Force h2mux protocol to http2 for named tunnels
119- 2023-02-06 TUN-6938: Provide QUIC as first in protocol list
120- 2023-02-03 TUN-7158: Correct TCP tracing propagation
121- 2023-02-01 TUN-7151: Update changes file with latest release notices
122
1232023.2.1
124- 2023-02-01 TUN-7065: Revert Ingress Rule check for named tunnel configurations
125- 2023-02-01 Revert "TUN-7065: Revert Ingress Rule check for named tunnel configurations"
126- 2023-02-01 Revert "TUN-7065: Remove classic tunnel creation"
1272023.1.0
128- 2023-01-10 TUN-7064: RPM digests are now sha256 instead of md5sum
129- 2023-01-04 RTG-2418 Update qtls
130- 2022-12-24 TUN-7057: Remove dependency github.com/gorilla/mux
131- 2022-12-24 TUN-6724: Migrate to sentry-go from raven-go
132
1332022.12.1
134- 2022-12-20 TUN-7021: Fix proxy-dns not starting when cloudflared tunnel is run
135- 2022-12-15 TUN-7010: Changelog for release 2022.12.0
136
1372022.12.0
138- 2022-12-14 TUN-6999: cloudflared should attempt other edge addresses before falling back on protocol
139- 2022-12-13 TUN-7004: Dont show local config dirs for remotely configured tuns
140- 2022-12-12 TUN-7003: Tempoarily disable erroneous notarize-app
141- 2022-12-12 TUN-7003: Add back a missing fi
142- 2022-12-07 TUN-7000: Reduce metric cardinality of closedConnections metric by removing error as tag
143- 2022-12-07 TUN-6994: Improve logging config file not found
144- 2022-12-07 TUN-7002: Randomise first region selection
145- 2022-12-07 TUN-6995: Disable quick-tunnels spin up by default
146- 2022-12-05 TUN-6984: Add bash set x to improve visibility during builds
147- 2022-12-05 TUN-6984: [CI] Ignore security import errors for code_sigining
148- 2022-12-05 TUN-6984: [CI] Don't fail on unset.
149- 2022-11-30 TUN-6984: Set euo pipefile for homebrew builds
150
1512022.11.1
152- 2022-11-29 TUN-6981: We should close UDP socket if failed to connecto to edge
153- 2022-11-25 CUSTESC-23757: Fix a bug where a wildcard ingress rule would match an host without starting with a dot
154- 2022-11-24 TUN-6970: Print newline when printing tunnel token
155- 2022-11-22 TUN-6963: Refactor Metrics service setup
1562022.11.0
157- 2022-11-16 Revert "TUN-6935: Cloudflared should use APIToken instead of serviceKey"
158- 2022-11-16 TUN-6929: Use same protocol for other connections as first one
159- 2022-11-14 TUN-6941: Reduce log level to debug when failing to proxy ICMP reply
160- 2022-11-14 TUN-6935: Cloudflared should use APIToken instead of serviceKey
161- 2022-11-14 TUN-6935: Cloudflared should use APIToken instead of serviceKey
162- 2022-11-11 TUN-6937: Bump golang.org/x/* packages to new release tags
163- 2022-11-10 ZTC-234: macOS tests
164- 2022-11-09 TUN-6927: Refactor validate access configuration to allow empty audTags only
165- 2022-11-08 ZTC-234: Replace ICMP funnels when ingress connection changes
166- 2022-11-04 TUN-6917: Bump go to 1.19.3
167- 2022-11-02 Issue #574: Better ssh config for short-lived cert (#763)
168- 2022-10-28 TUN-6898: Fix bug handling IPv6 based ingresses with missing port
169- 2022-10-28 TUN-6898: Refactor addPortIfMissing
1702022.10.3
171- 2022-10-24 TUN-6871: Add default feature to cloudflared to support EOF on QUIC connections
172- 2022-10-19 TUN-6876: Fix flaky TestTraceICMPRouterEcho by taking account request span can return before reply
173- 2022-10-18 TUN-6867: Clear spans right after they are serialized to avoid returning duplicate spans
1742022.10.2
175- 2022-10-18 TUN-6869: Fix Makefile complaining about missing GO packages
176- 2022-10-18 TUN-6864: Don't reuse port in quic unit tests
177- 2022-10-18 TUN-6868: Return left padded tracing ID when tracing identity is converted to string
178
1792022.10.1
180- 2022-10-16 TUN-6861: Trace ICMP on Windows
181- 2022-10-15 TUN-6860: Send access configuration keys to the edge
182- 2022-10-14 TUN-6858: Trace ICMP reply
183- 2022-10-13 TUN-6855: Add DatagramV2Type for IP packet with trace and tracing spans
184- 2022-10-13 TUN-6856: Refactor to lay foundation for tracing ICMP
185- 2022-10-13 TUN-6604: Trace icmp echo request on Linux and Darwin
186- 2022-10-12 Fix log message (#591)
187- 2022-10-12 TUN-6853: Reuse source port when connecting to the edge for quic connections
188- 2022-10-11 TUN-6829: Allow user of datagramsession to control logging level of errors
189- 2022-10-10 RTG-2276 Update qtls and go mod tidy
190- 2022-10-05 Add post-quantum flag to quick tunnel
191- 2022-10-05 TUN-6823: Update github release message to pull from KV
192- 2022-10-04 TUN-6825: Fix cloudflared:version images require arch hyphens
193- 2022-10-03 TUN-6806: Add ingress rule number to log when filtering due to middlware handler
194- 2022-08-17 Label correct container
195- 2022-08-16 Fix typo in help text for `cloudflared tunnel route lb`
196- 2022-07-18 drop usage of cat when sed is invoked to generate the manpage
197- 2021-03-15 update-build-readme
198- 2021-03-15 fix link
199
2002022.10.0
201- 2022-09-30 TUN-6755: Remove unused publish functions
202- 2022-09-30 TUN-6813: Only proxy ICMP packets when warp-routing is enabled
203- 2022-09-29 TUN-6811: Ping group range should be parsed as int32
204- 2022-09-29 TUN-6812: Drop IP packets if ICMP proxy is not initialized
205- 2022-09-28 TUN-6716: Document limitation of Windows ICMP proxy
206- 2022-09-28 TUN-6810: Add component test for post-quantum
207- 2022-09-27 TUN-6715: Provide suggestion to add cloudflared to ping_group_range if it failed to open ICMP socket
208- 2022-09-22 TUN-6792: Fix brew core release by not auditing the formula
209- 2022-09-22 TUN-6774: Validate OriginRequest.Access to add Ingress.Middleware
210- 2022-09-22 TUN-6775: Add middleware.Handler verification to ProxyHTTP
211- 2022-09-22 TUN-6791: Calculate ICMPv6 checksum
212- 2022-09-22 TUN-6801: Add punycode alternatives for ingress rules
213- 2022-09-21 TUN-6772: Add a JWT Validator as an ingress verifier
214- 2022-09-21 TUN-6772: Add a JWT Validator as an ingress verifier
215- 2022-09-21 TUN-6774: Validate OriginRequest.Access to add Ingress.Middleware
216- 2022-09-21 TUN-6772: Add a JWT Validator as an ingress verifier
217- 2022-09-20 TUN-6741: ICMP proxy tries to listen on specific IPv4 & IPv6 when possible
2182022.9.1
219- 2022-09-20 TUN-6777: Fix race condition in TestFunnelIdleTimeout
220- 2022-09-20 TUN-6595: Enable datagramv2 and icmp proxy by default
221- 2022-09-20 TUN-6773: Add access based configuration to ingress.OriginRequestConfig
222- 2022-09-19 TUN-6778: Cleanup logs about ICMP
223- 2022-09-19 TUN-6779: cloudflared should also use the root CAs from system pool to validate edge certificate
224- 2022-09-19 TUN-6780: Add support for certReload to also include support for client certificates
225- 2022-09-16 TUN-6767: Build ICMP proxy for Windows only when CGO is enabled
226- 2022-09-15 TUN-6590: Use Windows Teamcity agent to build binary
227- 2022-09-13 TUN-6592: Decrement TTL and return ICMP time exceed if it's 0
228- 2022-09-09 TUN-6749: Fix icmp_generic build
229- 2022-09-09 TUN-6744: On posix platforms, assign unique echo ID per (src, dst, echo ID)
230- 2022-09-08 TUN-6743: Support ICMPv6 echo on Windows
231- 2022-09-08 TUN-6689: Utilize new RegisterUDPSession to begin tracing
232- 2022-09-07 TUN-6688: Update RegisterUdpSession capnproto to include trace context
233- 2022-09-06 TUN-6740: Detect no UDP packets allowed and fallback from QUIC in that case
234- 2022-09-06 TUN-6654: Support ICMPv6 on Linux and Darwin
235- 2022-09-02 TUN-6696: Refactor flow into funnel and close idle funnels
236- 2022-09-02 TUN-6718: Bump go and go-boring 1.18.6
237- 2022-08-29 TUN-6531: Implement ICMP proxy for Windows using IcmpSendEcho
238- 2022-08-24 RTG-1339 Support post-quantum hybrid key exchange
239
2402022.9.0
241- 2022-09-05 TUN-6737: Fix datagramV2Type should be declared in its own block so it starts at 0
242- 2022-09-01 TUN-6725: Fix testProxySSEAllData
243- 2022-09-01 TUN-6726: Fix maxDatagramPayloadSize for Windows QUIC datagrams
244- 2022-09-01 TUN-6729: Fix flaky TestClosePreviousProxies
245- 2022-09-01 TUN-6728: Verify http status code ingress rule
246- 2022-08-25 TUN-6695: Implement ICMP proxy for linux
247
2482022.8.4
249- 2022-08-31 TUN-6717: Update Github action to run with Go 1.19
250- 2022-08-31 TUN-6720: Remove forcibly closing connection during reconnect signal
251- 2022-08-29 Release 2022.8.3
252
2532022.8.3
254- 2022-08-26 TUN-6708: Fix replace flow logic
255- 2022-08-25 TUN-6705: Tunnel should retry connections forever
256- 2022-08-25 TUN-6704: Honor protocol flag when edge discovery is unreachable
257- 2022-08-25 TUN-6699: Add metric for packet too big dropped
258- 2022-08-24 TUN-6691: Properly error check for net.ErrClosed
259- 2022-08-22 TUN-6679: Allow client side of quic request to close body
260- 2022-08-22 TUN-6586: Change ICMP proxy to only build for Darwin and use echo ID to track flows
261- 2022-08-18 TUN-6530: Implement ICMPv4 proxy
262- 2022-08-17 TUN-6666: Define packet package
263- 2022-08-17 TUN-6667: DatagramMuxerV2 provides a method to receive RawPacket
264- 2022-08-16 TUN-6657: Ask for Tunnel ID and Configuration on Bug Report
265- 2022-08-16 TUN-6676: Add suport for trailers in http2 connections
266- 2022-08-11 TUN-6575: Consume cf-trace-id from incoming http2 TCP requests
267
2682022.8.2
269- 2022-08-16 TUN-6656: Docker for arm64 should not be deployed in an amd64 container
270
2712022.8.1
272- 2022-08-15 TUN-6617: Updated CHANGES.md for protocol stickiness
273- 2022-08-12 EDGEPLAT-3918: bump go and go-boring to 1.18.5
274- 2022-08-12 TUN-6652: Publish dockerfile for both amd64 and arm64
275- 2022-08-11 TUN-6617: Dont fallback to http2 if QUIC conn was successful.
276- 2022-08-11 TUN-6617: Dont fallback to http2 if QUIC conn was successful.
277- 2022-08-11 Revert "TUN-6617: Dont fallback to http2 if QUIC conn was successful."
278- 2022-08-11 TUN-6617: Dont fallback to http2 if QUIC conn was successful.
279- 2022-08-01 TUN-6584: Define QUIC datagram v2 format to support proxying IP packets
280
2812022.8.0
282- 2022-08-10 TUN-6637: Upgrade quic-go
283- 2022-08-10 TUN-6646: Add support to SafeStreamCloser to close only write side of stream
284- 2022-08-09 TUN-6642: Fix unexpected close of quic stream triggered by upstream origin close
285- 2022-08-09 TUN-6639: Validate cyclic ingress configuration
286- 2022-08-08 TUN-6637: Upgrade go version and quic-go
287- 2022-08-08 TUN-6639: Validate cyclic ingress configuration
288- 2022-08-04 EDGEPLAT-3918: build cloudflared for Bookworm
289- 2022-08-02 Revert "TUN-6576: Consume cf-trace-id from incoming TCP requests to create root span"
290- 2022-07-27 TUN-6601: Update gopkg.in/yaml.v3 references in modules
291- 2022-07-26 TUN-6576: Consume cf-trace-id from incoming TCP requests to create root span
292- 2022-07-26 TUN-6576: Consume cf-trace-id from incoming TCP requests to create root span
293- 2022-07-25 TUN-6598: Remove auto assignees on github issues
294- 2022-07-20 TUN-6583: Remove legacy --ui flag
295- 2022-07-20 cURL supports stdin and uses os pipes directly without copying
296- 2022-07-07 TUN-6517: Use QUIC stream context while proxying HTTP requests and TCP connections
2972022.7.1
298- 2022-07-06 TUN-6503: Fix transport fallback from QUIC in face of dial error "no network activity"
299
3002022.7.0
301- 2022-07-05 TUN-6499: Remove log that is per datagram
302- 2022-06-24 TUN-6460: Rename metric label location to edge_location
303- 2022-06-24 TUN-6459: Add cloudflared user-agent to access calls
304- 2022-06-17 TUN-6427: Differentiate between upstream request closed/canceled and failed origin requests
305- 2022-06-17 TUN-6388: Fix first tunnel connection not retrying
306- 2022-06-13 TUN-6384: Correct duplicate connection error to fetch new IP first
307- 2022-06-13 TUN-6373: Add edge-ip-version to remotely pushed configuration
308- 2022-06-07 TUN-6010: Add component tests for --edge-ip-version
309- 2022-05-20 TUN-6007: Implement new edge discovery algorithm
310- 2022-02-18 Ensure service install directories are created before writing file
311
3122022.6.3
313- 2022-06-20 TUN-6362: Add armhf support to cloudflare packaging
314
3152022.6.2
316- 2022-06-13 TUN-6381: Write error data on QUIC stream when we fail to talk to the origin; separate logging for protocol errors vs. origin errors.
317- 2022-06-17 TUN-6414: Remove go-sumtype from cloudflared build process
318- 2022-06-01 Add Http2Origin option to force HTTP/2 origin connections
319- 2022-06-02 fix ingress rules unit test
320- 2022-06-09 Update remaining OriginRequestConfig functions for Http2Origins
321- 2022-05-31 Add image source label to docker container.
322- 2022-05-10 Warp Private Network link updated
323
3242022.6.1
325- 2022-06-14 TUN-6395: Fix writing RPM repo data
326
3272022.6.0
328- 2022-06-14 Revert "TUN-6010: Add component tests for --edge-ip-version"
329- 2022-06-14 Revert "TUN-6373: Add edge-ip-version to remotely pushed configuration"
330- 2022-06-14 Revert "TUN-6384: Correct duplicate connection error to fetch new IP first"
331- 2022-06-14 Revert "TUN-6007: Implement new edge discovery algorithm"
332- 2022-06-13 TUN-6385: Don't share err between acceptStream loop and per-stream goroutines
333- 2022-06-13 TUN-6384: Correct duplicate connection error to fetch new IP first
334- 2022-06-13 TUN-6373: Add edge-ip-version to remotely pushed configuration
335- 2022-06-13 TUN-6380: Enforce connect and keep-alive timeouts for TCP connections in both WARP routing and websocket based TCP proxy.
336- 2022-06-11 Update issue templates
337- 2022-06-11 Amendment to previous PR
338- 2022-06-09 TUN-6347: Add TCP stream logs with FlowID
339- 2022-06-08 TUN-6361: Add cloudflared arm builds to pkging as well
340- 2022-06-07 TUN-6357: Add connector id to ready check endpoint
341- 2022-06-07 TUN-6010: Add component tests for --edge-ip-version
342- 2022-06-06 TUN-6191: Update quic-go to v0.27.1 and with custom patch to allow keep alive period to be configurable
343- 2022-06-03 TUN-6343: Fix QUIC->HTTP2 fallback
344- 2022-06-02 TUN-6339: Add config for IPv6 support
345- 2022-06-02 TUN-6341: Fix default config value for edge-ip-version
346- 2022-06-01 TUN-6323: Add Xenial and Trusty for Ubuntu pkging
347- 2022-05-31 TUN-6210: Add cloudflared.repo to make it easy for yum installs
348- 2022-05-30 TUN-6293: Update yaml v3 to latest hotfix
349- 2022-05-20 TUN-6007: Implement new edge discovery algorithm
3502022.5.3
351- 2022-05-30 TUN-6308: Add debug logs to see if packets are sent/received from edge
352- 2022-05-30 TUN-6301: Allow to update logger used by UDP session manager
353
3542022.5.2
355- 2022-05-23 TUN-6270: Import gpg keys from environment variables
356- 2022-05-24 TUN-6209: Improve feedback process if release_pkgs to deb and rpm fail
357- 2022-05-24 TUN-6280: Don't wrap qlog connection tracer for gatethering QUIC metrics since we're not writing qlog files.
358- 2022-05-25 TUN-6209: Sign RPM packages
359- 2022-05-25 TUN-6285: Upload pkg assets to repos when cloudflared is released.
360- 2022-05-24 TUN-6282: Upgrade golang to 1.17.10, go-boring to 1.17.9
361- 2022-05-26 TUN-6292: Debug builds for cloudflared
362- 2022-05-28 TUN-6304: Fixed some file permission issues
363- 2022-05-11 TUN-6197: Publish to brew core should not try to open the browser
364- 2022-05-12 TUN-5943: Add RPM support
365- 2022-05-18 TUN-6248: Fix panic in cloudflared during tracing when origin doesn't provide header map
366- 2022-05-18 TUN-6250: Add upstream response status code to tracing span attributes
367
3682022.5.1
369- 2022-05-06 TUN-6146: Release_pkgs is now a generic command line script
370- 2022-05-06 TUN-6185: Fix tcpOverWSOriginService not using original scheme for String representation
371- 2022-05-05 TUN-6175: Simply debian packaging by structural upload
372- 2022-05-05 TUN-5945: Added support for Ubuntu releases
373- 2022-05-04 TUN-6054: Create and upload deb packages to R2
374- 2022-05-03 TUN-6161: Set git user/email for brew core release
375- 2022-05-03 TUN-6166: Fix mocked QUIC transport for UDP proxy manager to return expected error
376- 2022-04-27 TUN-6016: Push local managed tunnels configuration to the edge
3772022.5.0
378- 2022-05-02 TUN-6158: Update golang.org/x/crypto
379- 2022-04-20 VULN-8383 Bump yaml.v2 to yaml.v3
380- 2022-04-21 TUN-6123: For a given connection with edge, close all datagram sessions through this connection when it's closed
381- 2022-04-20 TUN-6015: Add RPC method for pushing local config
382- 2022-04-21 TUN-6130: Fix vendoring due to case sensitive typo in package
383- 2022-04-27 TUN-6142: Add tunnel details support to RPC
384- 2022-04-28 TUN-6014: Add remote config flag as default feature
385- 2022-04-12 TUN-6000: Another fix for publishing to brew core
386- 2022-04-11 TUN-5990: Add otlp span export to response header
387- 2022-04-19 TUN-6070: First connection retries other edge IPs if the error is quic timeout(likely due to firewall blocking UDP)
388- 2022-04-11 TUN-6030: Add ttfb span for origin http request
389
3902022.4.1
391- 2022-04-11 TUN-6035: Reduce buffer size when proxying data
392- 2022-04-11 TUN-6038: Reduce buffer size used for proxying data
393- 2022-04-11 TUN-6043: Allow UI-managed Tunnels to fallback from QUIC but warn about that
394- 2022-04-07 TUN-6000 add version argument to bump-formula-pr
395- 2022-04-06 TUN-5989: Add in-memory otlp exporter
396
3972022.4.0
398- 2022-04-01 TUN-5973: Add backoff for non-recoverable errors as well
399- 2022-04-05 TUN-5992: Use QUIC protocol for remotely managed tunnels when protocol is unspecified
400- 2022-04-06 Update Makefile
401- 2022-04-06 TUN-5995: Update prometheus to 1.12.1 to avoid vulnerabilities
402- 2022-04-07 TUN-5995: Force prometheus v1.12.1 usage
403- 2022-04-07 TUN-4130: cloudflared docker images now have a latest tag
404- 2022-03-30 TUN-5842: Fix flaky TestConcurrentUpdateAndRead by making sure resources are released
405- 2022-03-30 carrier: fix dropped errors
406- 2022-03-25 TUN-5959: tidy go.mod
407- 2022-03-25 TUN-5958: Fix release to homebrew core
408- 2022-03-28 TUN-5960: Do not log the tunnel token or json credentials
409- 2022-03-28 TUN-5956: Add timeout to session manager APIs
410
4112022.3.4
412- 2022-03-22 TUN-5918: Clean up text in cloudflared tunnel --help
413- 2022-03-22 TUN-5895 run brew bump-formula-pr on release
414- 2022-03-22 TUN-5915: New cloudflared command to allow to retrieve the token credentials for a Tunnel
415- 2022-03-24 TUN-5933: Better messaging to help user when installing service if it is already installed
416- 2022-03-25 TUN-5954: Start cloudflared service in Linux too similarly to other OSs
417- 2022-03-14 TUN-5869: Add configuration endpoint in metrics server
418
4192022.3.3
420- 2022-03-17 TUN-5893: Start windows service on install, stop on uninstall. Previously user had to manually start the service after running 'cloudflared tunnel install' and stop the service before running uninstall command.
421- 2022-03-17 Revert "CC-796: Remove dependency on unsupported version of go-oidc"
422- 2022-03-18 TUN-5881: Clarify success (or lack thereof) of (un)installing cloudflared service
423- 2022-03-18 CC-796: Remove dependency on unsupported version of go-oidc
424- 2022-03-18 TUN-5907: Change notes for 2022.3.3
425
4262022.3.2
427- 2022-03-10 TUN-5833: Create constant for allow-remote-config
428- 2022-03-15 TUN-5867: Return error if service was already installed
429- 2022-03-16 TUN-5833: Send feature `allow_remote_config` if Tunnel is run with --token
430- 2022-03-08 TUN-5849: Remove configuration debug log
431- 2022-03-08 TUN-5850: Update CHANGES.md with latest releases
432- 2022-03-08 TUN-5851: Update all references to point to Apache License 2.0
433- 2022-03-07 TUN-5853 Add "install" make target and build package manager info into executable
434- 2022-03-08 TUN-5801: Add custom wrapper for OriginConfig for JSON serde
435- 2022-03-09 TUN-5703: Add prometheus metric for current configuration version
436- 2022-02-05 CC-796: Remove dependency on unsupported version of go-oidc
437
4382022.3.1
439- 2022-03-04 TUN-5837: Log panic recovery in http2 logic with debug level log
440- 2022-03-04 TUN-5696: HTTP/2 Configuration Update
441- 2022-03-04 TUN-5836: Avoid websocket#Stream function from crashing cloudflared with unexpected memory access
442- 2022-03-05 TUN-5836: QUIC transport no longer sets body to nil in any condition
443
4442022.3.0
445- 2022-03-02 TUN-5680: Adapt component tests for new service install based on token
446- 2022-02-21 TUN-5682: Remove name field from credentials
447- 2022-02-21 TUN-5681: Add support for running tunnel using Token
448- 2022-02-28 TUN-5824: Update updater no-update-in-shell link
449- 2022-02-28 TUN-5823: Warn about legacy flags that are ignored when ingress rules are used
450- 2022-02-28 TUN-5737: Support https protocol over unix socket origin
451- 2022-02-23 TUN-5679: Add support for service install using Tunnel Token
452
4532022.2.2
454- 2022-02-22 TUN-5754: Allow ingress validate to take plaintext option
455- 2022-02-17 TUN-5678: Cloudflared uses typed tunnel API
456
4572022.2.1
458- 2022-02-10 TUN-5184: Handle errors in bidrectional streaming (websocket#Stream) gracefully when 1 side has ended
459- 2022-02-14 Update issue templates
460- 2022-02-14 Update issue templates
461- 2022-02-11 TUN-5768: Update cloudflared license file
462- 2022-02-11 TUN-5698: Make ingress rules and warp routing dynamically configurable
463- 2022-02-14 TUN-5678: Adapt cloudflared to use new typed APIs
464- 2022-02-17 Revert "TUN-5678: Adapt cloudflared to use new typed APIs"
465- 2022-02-11 TUN-5697: Listen for UpdateConfiguration RPC in quic transport
466- 2022-02-04 TUN-5744: Add a test to make sure cloudflared uses scheme defined in ingress rule, not X-Forwarded-Proto header
467- 2022-02-07 TUN-5749: Refactor cloudflared to pave way for reconfigurable ingress - Split origin into supervisor and proxy packages - Create configManager to handle dynamic config
468- 2021-10-19 TUN-5184: Make sure outstanding websocket write is finished, and no more writes after shutdown
469
4702022.2.0
471- 2022-02-02 TUN-4947: Use http when talking to Unix sockets origins
472- 2022-02-02 TUN-5695: Define RPC method to update configuration
473- 2022-01-27 TUN-5621: Correctly manage QUIC stream closing
474- 2022-01-28 TUN-5702: Allow to deserialize config from JSON
475
4762022.1.3
477- 2022-01-21 TUN-5477: Unhide vnet commands
478- 2022-01-24 TUN-5669: Change network command to vnet
479- 2022-01-25 TUN-5675: Remove github.com/dgrijalva/jwt-go dependency by upgrading coredns version
480- 2022-01-27 TUN-5719: Re-attempt connection to edge with QUIC despite network error when there is no fallback
481- 2022-01-28 TUN-5724: Fix SSE streaming by guaranteeing we write everything we read
482- 2022-01-17 TUN-5547: Bump golang x/net package to fix http2 transport bugs
483- 2022-01-19 TUN-5659: Proxy UDP with zero-byte payload
484- 2021-10-22 Add X-Forwarded-Host for http proxy
485
4862022.1.2
487- 2022-01-13 TUN-5650: Fix pynacl version to 1.4.0 and pygithub version to 1.55 so release doesn't break unexpectedly
488
4892022.1.1
490- 2022-01-10 TUN-5631: Build everything with go 1.17.5
491- 2022-01-06 TUN-5623: Configure quic max datagram frame size to 1350 bytes for none Windows platforms
492
4932022.1.0
494- 2022-01-03 TUN-5612: Add support for specifying TLS min/max version
495- 2022-01-03 TUN-5612: Make tls min/max version public visible
496- 2022-01-03 TUN-5551: Internally published debian artifacts are now named just cloudflared even though they are FIPS compliant
497- 2022-01-04 TUN-5600: Close QUIC transports as soon as possible while respecting graceful shutdown
498- 2022-01-05 TUN-5616: Never fallback transport if user chooses it on purpose
499- 2022-01-05 TUN-5204: Unregister QUIC transports on disconnect
500- 2022-01-04 TUN-5600: Add coverage to component tests for various transports
501
5022021.12.4
503- 2021-12-27 TUN-5482: Refactor tunnelstore client related packages for more coherent package
504- 2021-12-27 TUN-5551: Change internally published debian package to be FIPS compliant
505- 2021-12-27 TUN-5551: Show whether the binary was built for FIPS compliance
506
5072021.12.3
508- 2021-12-22 TUN-5584: Changes for release 2021.12.2
509- 2021-12-22 TUN-5590: QUIC datagram max user payload is 1217 bytes
510- 2021-12-22 TUN-5593: Read full packet from UDP connection, even if it exceeds MTU of the transport. When packet length is greater than the MTU of the transport, we will silently drop packets (for now).
511- 2021-12-23 TUN-5597: Log session ID when session is terminated by edge
512
5132021.12.2
514- 2021-12-20 TUN-5571: Remove redundant session manager log, it's already logged in origin/tunnel.ServeQUIC
515- 2021-12-20 TUN-5570: Only log RPC server events at error level to reduce noise
516- 2021-12-14 TUN-5494: Send a RPC with terminate reason to edge if the session is closed locally
517- 2021-11-09 TUN-5551: Reintroduce FIPS compliance for linux amd64 now as separate binaries
518
5192021.12.1
520- 2021-12-16 TUN-5549: Revert "TUN-5277: Ensure cloudflared binary is FIPS compliant on linux amd64"
521
5222021.12.0
523- 2021-12-13 TUN-5530: Get current time from ticker
524- 2021-12-15 TUN-5544: Update CHANGES.md for next release
525- 2021-12-07 TUN-5519: Adjust URL for virtual_networks endpoint to match what we will publish
526- 2021-12-02 TUN-5488: Close session after it's idle for a period defined by registerUdpSession RPC
527- 2021-12-09 TUN-5504: Fix upload of packages to public repo
528- 2021-11-30 TUN-5481: Create abstraction for Origin UDP Connection
529- 2021-11-30 TUN-5422: Define RPC to unregister session
530- 2021-11-26 TUN-5361: Commands for managing virtual networks
531- 2021-11-29 TUN-5362: Adjust route ip commands to be aware of virtual networks
532- 2021-11-23 TUN-5301: Separate datagram multiplex and session management logic from quic connection logic
533- 2021-11-10 TUN-5405: Update net package to v0.0.0-20211109214657-ef0fda0de508
534- 2021-11-10 TUN-5408: Update quic package to v0.24.0
535- 2021-11-12 Fix typos
536- 2021-11-13 Fix for Issue #501: Unexpected User-agent insertion when tunneling http request
537- 2021-11-16 TUN-5129: Remove `-dev` suffix when computing version and Git has uncommitted changes
538- 2021-11-18 TUN-5441: Fix message about available protocols
539- 2021-11-12 TUN-5300: Define RPC to register UDP sessions
540- 2021-11-14 TUN-5299: Send/receive QUIC datagram from edge and proxy to origin as UDP
541- 2021-11-04 TUN-5387: Updated CHANGES.md for 2021.11.0
542- 2021-11-08 TUN-5368: Log connection issues with LogLevel that depends on tunnel state
543- 2021-11-09 TUN-5397: Log cloudflared output when it fails to connect tunnel
544- 2021-11-09 TUN-5277: Ensure cloudflared binary is FIPS compliant on linux amd64
545- 2021-11-08 TUN-5393: Content-length is no longer a control header for non-h2mux transports
546
5472021.11.0
548- 2021-11-03 TUN-5285: Fallback to HTTP2 immediately if connection times out with no network activity
549- 2021-09-29 Add flag to 'tunnel create' subcommand to specify a base64-encoded secret
550
5512021.10.5
552- 2021-10-25 Update change log for release 2021.10.4
553- 2021-10-25 Revert "TUN-5184: Make sure outstanding websocket write is finished, and no more writes after shutdown"
554
5552021.10.4
556- 2021-10-21 TUN-5287: Fix misuse of wait group in TestQUICServer that caused the test to exit immediately
557- 2021-10-21 TUN-5286: Upgrade crypto/ssh package to fix CVE-2020-29652
558- 2021-10-18 TUN-5262: Allow to configure max fetch size for listing queries
559- 2021-10-19 TUN-5262: Improvements to `max-fetch-size` that allow to deal with large number of tunnels in account
560- 2021-10-15 TUN-5261: Collect QUIC metrics about RTT, packets and bytes transfered and log events at tracing level
561- 2021-10-19 TUN-5184: Make sure outstanding websocket write is finished, and no more writes after shutdown
562
5632021.10.3
564- 2021-10-14 TUN-5255: Fix potential panic if Cloudflare API fails to respond to GetTunnel(id) during delete command
565- 2021-10-14 TUN-5257: Fix more cfsetup targets that were broken by recent package changes
566
5672021.10.2
568- 2021-10-11 TUN-5138: Switch to QUIC on auto protocol based on threshold
569- 2021-10-14 TUN-5250: Add missing packages for cfsetup to succeed in github release pkgs target
570
5712021.10.1
572- 2021-10-12 TUN-5246: Use protocol: quic for Quick tunnels if one is not already set
573- 2021-10-13 TUN-5249: Revert "TUN-5138: Switch to QUIC on auto protocol based on threshold"
574
5752021.10.0
576- 2021-10-11 TUN-5138: Switch to QUIC on auto protocol based on threshold
577- 2021-10-07 TUN-5195: Do not set empty body if not applicable
578- 2021-10-08 UN-5213: Increase MaxStreams value for QUIC transport
579- 2021-09-28 TUN-5169: Release 2021.9.2 CHANGES.md
580- 2021-09-28 TUN-5164: Update README and clean up references to Argo Tunnel (using Cloudflare Tunnel instead)
581
5822021.9.2
583- 2021-09-21 TUN-5129: Use go 1.17 and copy .git folder to docker build to compute version
584- 2021-09-21 TUN-5128: Enforce maximum grace period
585- 2021-09-22 TUN-5141: Make sure websocket pinger returns before streaming returns
586- 2021-09-24 TUN-5142: Add asynchronous servecontrolstream for QUIC
587- 2021-09-24 TUN-5142: defer close rpcconn inside unregister instead of ServeControlStream
588- 2021-09-27 TUN-5160: Set request.ContentLength when this value is in request header
589
5902021.9.1
591- 2021-09-21 TUN-5118: Quic connection now detects duplicate connections similar to http2
592- 2021-09-15 Fix TryCloudflare link
593
5942021.9.0
595- 2021-09-02 Fix broken TryCloudflare link
596- 2021-09-03 Add support for taking named tunnel credentials from an environment variable
597- 2021-08-30 TUN-5012: Use patched go-sumtype
598- 2021-08-31 TUN-5011: Use the region parameter in fallback SRV lookup
599- 2021-08-31 TUN-5029: Do not strip cf- prefixed headers
600- 2021-08-29 TUN-5009: Updated github action to use go 1.17.x for checks
601- 2021-08-28 TUN-5010: --region should be a string flag
602- 2021-08-10 Allow building on arm64 platforms
603- 2021-06-09 Update README.md
604- 2021-05-31 🖌️ Allow providing TokenID and TokenSecret as env vars when calling cloudflared access
605- 2021-05-31 🎨 Prefix env var parameters with TUNNEL
606
6072021.8.7
608- 2021-08-28 Revert "TUN-4926: Implement --region configuration option"
609
6102021.8.6
611- 2021-08-27 TUN-5000: De-flake logging to dir component test in Windows by increasing to buffer to cope with more logging
612- 2021-08-27 TUN-5003: Fix cfsetup for non-FIPS golang version
613
6142021.8.5
615- 2021-08-27 TUN-4961: Update quic-go to latest
616- 2021-08-27 Release 2021.8.4
617
6182021.8.4
619- 2021-08-26 TUN-4974: Fix regression where we were debug logging by accident
620- 2021-08-26 TUN-4970: Only default to http2 for warp-routing if protocol is h2mux
621- 2021-08-26 TUN-4981: Improve readability of prepareTunnelConfig method
622- 2021-08-26 TUN-4926: Implement --region configuration option
623- 2021-07-09 TUN-4821: Make quick tunnels the default in cloudflared
624
6252021.8.3
626- 2021-08-23 TUN-4889: Add back appendtagheaders function
627- 2021-08-21 TUN-4940: Fix cloudflared not picking up correct NextProtos for quic
628- 2021-08-21 TUN-4613: Add a no-op protocol version slot
629- 2021-08-13 TUN-4922: Downgrade quic-go library to 0.20.0
630- 2021-08-17 TUN-4866: Add Control Stream for QUIC
631- 2021-08-17 TUN-4927: Parameterize region in edge discovery code
632- 2021-08-06 TUN-4602: Added UDP resolves to Edge discovery
633
6342021.8.2
635- 2021-08-03 TUN-4597: Added HTTPProxy for QUIC
636- 2021-08-04 TUN-4795: Remove Equinox releases
637- 2021-08-09 TUN-4911: Append Environment variable to Path instead of overwriting it
638
6392021.8.1
640- 2021-08-02 TUN-4855: Added CHANGES.md for release 2021.8.0
641- 2021-08-03 TUN-4597: Add a QUIC server skeleton
642- 2021-08-03 TUN-4873: Disable unix domain socket test for windows unit tests
643- 2021-08-04 TUN-4875: Added amd64-linux builds back to releases
644
6452021.8.0
646- 2021-07-30 TUN-4847: Allow to list tunnels by prefix name or exclusion prefix name
647- 2021-07-30 TUN-4772: Release built executables with packages
648- 2021-07-30 TUN-4851: Component tests to smoke test that Proxy DNS and Tunnel are only run when expected
649- 2021-07-28 TUN-4811: Publish quick tunnels' hostname in /metrics under `userHostname` for backwards-compatibility
650- 2021-07-29 TUN-4832: Prevent tunnel from running accidentally when only proxy-dns should run
651- 2021-07-28 TUN-4819: Tolerate protocol TXT record lookup failing
652
6532021.7.4
654- 2021-07-28 TUN-4814: Revert "TUN-4699: Make quick tunnels the default in cloudflared"
655- 2021-07-28 TUN-4812: Disable CGO for cloudflared builds
656
6572021.7.3
658- 2021-07-27 TUN-4799: Build deb, msi and rpm packages with fips
659
6602021.7.2
661- 2021-07-27 Fixed a syntax error with python logging.
662
6632021.7.1
664- 2021-07-21 TUN-4755: Add a windows msi release option to Make
665- 2021-07-22 TUN-4761: Added a build-all-packages target to cfsetup
666- 2021-07-26 TUN-4771: Upload deb, rpm and msi packages to github
667- 2021-07-14 TUN-4714: Name nightly package cloudflared-nightly to avoid apt conflict
668- 2021-07-16 TUN-4701: Split Proxy into ProxyHTTP and ProxyTCP
669- 2021-07-08 TUN-4596: Add QUIC application protocol for QUIC stream handshake
670- 2021-07-09 TUN-4699: Make quick tunnels the default in cloudflared
671
6722021.7.0
673- 2021-07-01 TUN-4626: Proxy non-stream based origin websockets with http Roundtrip.
674- 2021-07-01 TUN-4655: ingress.StreamBasedProxy.EstablishConnection takes dest input
675- 2021-07-09 TUN-4698: Add cloudflared metrics endpoint to serve quick tunnel hostname
676- 2021-06-21 TUN-4521: Modify cloudflared to use zoneless-tunnels-worker for free tunnels
677- 2021-04-05 AUTH-3475: Updated GetAppInfo error message
678
6792021.6.0
680- 2021-06-21 TUN-4571: Changelog for 2021.6.0
681- 2021-06-18 TUN-4571: Fix proxying to unix sockets when using HTTP2 transport to Cloudflare Edge
682- 2021-06-07 TUN-4502: Make `cloudflared tunnel route` subcommands described consistently
683- 2021-06-08 TUN-4504: Fix component tests in windows
684- 2021-05-27 TUN-4461: Log resulting DNS hostname if one is received from Cloudflare API
685
6862021.5.10
687- 2021-05-25 TUN-4456: Replaced instances of Tick() with Ticker() in h2mux paths
688
6892021.5.9
690- 2021-05-20 TUN-4426: Fix centos builds
691- 2021-05-20 Update changelog
692- 2021-04-30 AUTH-3426: Point to new transfer service URL and eliminate PUT /ok
693
6942021.5.8
695- 2021-05-14 TUN-4419: Improve error message when cloudflared cannot reach origin
696- 2021-05-19 TUN-4425: --overwrite-dns flag for in adhoc and route dns cmds
697
6982021.5.7
699- 2021-05-17 Fix typo in Changes.md
700- 2021-05-17 TUN-4421: Named Tunnels will automatically select the protocol to connect to Cloudflare's edge network
701
7022021.5.6
703- 2021-05-14 TUN-4418: Downgrade to Go 1.16.3
704
7052021.5.5
706
707
7082021.5.4
709- Fix release pipeline
710
7112021.5.1
712- 2021-05-10 TUN-4342: Fix false positive warning about unused hostname property
713- 2021-05-10 Release 2021.5.0
714
7152021.5.0
716- 2021-05-10 TUN-4384: Silence log from automaxprocs
717- 2021-05-10 AUTH-3537: AUDs in JWTs are now always arrays
718- 2021-05-10 Update changelog for 2021.5.0
719- 2021-05-03 TUN-4343: Fix broken build by setting debug field correctly
720- 2021-05-06 TUN-4356: Set AUTOMAXPROCS to the CPU limit when running in a Linux container
721- 2021-05-06 TUN-4357: Bump Go to 1.16
722- 2021-05-06 TUN-4359: Warn about unused keys in 'tunnel ingress validate'
723- 2021-04-30 debug: log host / path
724- 2021-04-20 AUTH-3513: Checks header for app info in case response is a 403/401 from the edge
725- 2021-04-29 TUN-4000: Release notes for cloudflared replica model
726- 2021-04-09 TUN-2853: rename STDIN-CONTROL env var to STDIN_CONTROL
727- 2021-04-09 TUN-4206: Better error message when user is only using one ingress rule
728
7292021.4.0
730- 2021-04-05 TUN-4178: Fix component test for running as a service in MacOS to not assume a named tunnel
731- 2021-04-05 TUN-4177: Running with proxy-dns should not prevent running Named Tunnels
732- 2021-04-02 TUN-4168: Transparently proxy websocket connections using stdlib HTTP client instead of gorilla/websocket; move websocket client code into carrier package since it's only used by access subcommands now (#345).
733- 2021-04-07 Publish change log for 2021.4.0
734
7352021.3.6
736- 2021-03-30 TUN-4150: Only show the connector table in 'tunnel info' if there are connectors. Don't show rows with zero connections.
737- 2021-03-31 TUN-4153: Revert best-effort HTTP2 usage when talking to origins
738- 2021-03-26 TUN-4141: Better error messages for tunnel info subcommand.
739- 2021-03-29 TUN-4146: Unhide and document grace-period
740- 2021-03-25 TUN-3863: Consolidate header handling logic in the connection package; move headers definitions from h2mux to packages that manage them; cleanup header conversions
741
7422021.3.5
743- 2021-03-26 TUN-3896: http-service and tunnelstore client use http2 transport.
744- 2021-03-25 TUN-4125: Change component tests to run in CI with its own dedicated resources
745- 2021-03-26 Publish change log for 2021.3.5
746
7472021.3.4
748
749
7502021.3.3
751- 2021-03-23 TUN-4111: Warn the user if both properties "tunnel" and "hostname" are used
752- 2021-03-23 TUN-4082: Test logging when running as a service
753- 2021-03-23 TUN-4112: Skip testing graceful shutdown with SIGINT on Windows
754- 2021-03-23 TUN-4116: Ingore credentials-file setting in configuration file during tunnel create and delete opeations.
755- 2021-03-23 TUN-4118: Don't overwrite existing file with tunnel credentials. For ad-hoc tunnels, this means tunnel won't start if there's a file in the way.
756- 2021-03-24 TUN-4123: Don't capture output in reconnect componet test
757- 2021-03-23 TUN-4067: Reformat code for consistent import order, grouping, and fix formatting. Added goimports target to the Makefile to make this easier in the future.
758- 2021-03-24 AUTH-3455: Generate short-lived ssh cert per hostname
759- 2021-03-25 Update changelog 2021.3.3
760
7612021.3.2
762- 2021-03-23 TUN-4042: Capture cloudflared output to debug component tests
763- 2021-03-23 Publish changelog for 2021.3.2
764- 2021-03-16 TUN-4089: Address flakiness in component tests for termination
765- 2021-03-16 TUN-4060: Fix Go Vet warnings (new with go 1.16) where t.Fatalf is called from a test goroutine
766- 2021-03-16 TUN-4091: Use flaky decorator to rerun reconnect component tests when they fail
767- 2021-03-12 TUN-4081: Update log severities to use Zerolog's levels
768- 2021-03-16 TUN-4094: Don't read configuration file for access commands
769- 2021-03-15 TUN-3993: New `cloudflared tunnel info` to obtain details about the active connectors for a tunnel
770- 2021-03-17 TUN-3715: Apply input source to the correct context
771- 2021-03-17 AUTH-3394: Ensure scheme on token command
772- 2021-03-18 TUN-4096: Reduce tunnel not connected assertion backoff to address flaky termination tests
773- 2021-03-19 TUN-3998: Allow to cleanup the connections of a tunnel limited to a single client
774- 2021-02-04 TUN-3715: Only read config file once, right before invoking the command
775
7762021.3.1
777- 2021-03-11 TUN-4051: Add component-tests to test graceful shutdown
778- 2021-03-12 TUN-4052: Add component tests to assert service mode behavior
779
7802021.3.0
781- 2021-03-10 TUN-4075: Dedup test should not compare order of list
782- 2021-03-10 Revert "AUTH-3394: Creates a token per app instead of per path"
783- 2021-03-11 TUN-4066: Remove unnecessary chmod during package publish to CF_PKG_HOSTS
784- 2021-03-11 TUN-4066: Set permissions in build agent before 'scp'-ing to machine hosting package repo
785- 2021-03-11 TUN-4050: Add component tests to assert reconnect behavior
786- 2021-03-10 AUTH-3394: Creates a token per app instead of per path - with fix for free tunnels
787- 2021-03-15 Publish change log for 2021.3.0
788- 2021-03-01 Issue #285 - Makefile does not detect TARGET_ARCH correctly on FreeBSD (#325)
789- 2021-03-01 TUN-3988: Log why it cannot check if origin cert exists
790- 2021-03-02 TUN-3995: Optional --features flag for tunnel run.
791- 2021-03-02 TUN-3994: Log client_id when running a named tunnel
792- 2021-03-04 TUN-4026: Fix regression where HTTP2 edge transport was no longer propagating control plane errors
793- 2021-03-05 TUN-4055: Skeleton for component tests
794- 2021-03-08 TUN-4047: Add cfsetup target to run component test
795- 2021-03-08 TUN-4016: Delegate decision to update for Worker service
796- 2021-03-02 TUN-3905: Cannot run go mod vendor in cloudflared due to fips
797- 2021-03-08 TUN-4063: Cleanup dependencies between packages.
798- 2021-03-09 Allow partial reads from a GorillaConn; add SetDeadline (from net.Conn) (#330)
799- 2021-03-09 TUN-4069: Fix regression on support for websocket over proxy
800- 2021-03-02 AUTH-3394: Creates a token per app instead of per path
801- 2021-03-01 TUN-4017: Add support for using cloudflared as a full socks proxy.
802- 2021-03-08 TUN-4062: Read component tests config from yaml file
803- 2021-03-08 TUN-4049: Add component tests to assert logging behavior when running from terminal
804- 2021-02-23 TUN-3963: Repoint urfave/cli/v2 library at patched branch at github.com/ipostelnik/cli/v2@fixed which correctly handles reading flags declared at multiple levels of subcommands.
805- 2021-02-25 TUN-3970: Route ip show has alias route ip list
806- 2021-02-26 TUN-3978: Unhide teamnet commands and improve their help
807- 2021-02-26 TUN-3983: Renew CA certs in cloudflared
808- 2021-02-28 TUN-3989: Check in with Updater service in more situations and convey messages to user
809- 2021-02-11 TUN-3819: Remove client-side check that deleted tunnels have no connections
810
8112021.2.5
812- 2021-02-23 Publish change notes for 2021.2.5
813- 2021-02-11 TUN-3838: ResponseWriter no longer reads and origin error tests
814- 2021-02-10 TUN-3895: Tests for socks stream handler
815- 2021-02-19 TUN-3939: Add logging that shows that Warp-routing is enabled
816- 2021-02-02 TUN-3817: Adds tests for websocket based streaming regression
817- 2021-02-04 TUN-3799: extended the Stream interface to take a logger and added debug logs for io.Copy errors
818- 2021-02-03 TUN-3855: Add ability to override target of 'access ssh' command to a different host for testing
819- 2021-02-04 TUN-3853: Respond with ws headers from the origin service rather than generating our own
820- 2021-02-08 TUN-3889: Move host header override logic to httpService
821- 2021-02-05 TUN-3868: Refactor singleTCPService and bridgeService to tcpOverWSService and rawTCPService
822- 2021-01-21 TUN-3753: Select http2 protocol when warp routing is enabled
823- 2021-01-26 TUN-3809: Allow routes ip show to output as JSON or YAML
824- 2021-01-11 TUN-3615: added support to proxy tcp streams
825- 2021-01-17 TUN-3725: Warp-routing is independent of ingress
826- 2021-01-15 TUN-3764: Actively flush data for TCP streams
827- 2020-12-09 TUN-3617: Separate service from client, and implement different client for http vs. tcp origins
828
8292021.2.4
830- 2021-02-22 TUN-3948: Log error when retrying connection
831- 2021-02-23 TUN-3964: Revert "TUN-3922: Repoint urfave/cli/v2 library at patched branch at github.com/ipostelnik/cli/v2@fixed which correctly handles reading flags declared at multiple levels of subcommands."
832- 2021-02-23 Publish release notes for 2021.2.4
833
8342021.2.3
835- 2021-02-23 Publish release notes for 2021.2.3
836- 2021-02-10 TUN-3902: Add jitter to backoffhandler
837- 2021-02-11 TUN-3913: Help gives wrong exit code for autoupdate
838- 2021-02-12 Add max upstream connections dns-proxy option (#290)
839- 2021-02-16 TUN-3924: Removed db-connect command. Added a placeholder handler for this command that informs users that command is no longer supported.
840- 2021-02-12 TUN-3922: Repoint urfave/cli/v2 library at patched branch at github.com/ipostelnik/cli/v2@fixed which correctly handles reading flags declared at multiple levels of subcommands.
841- 2021-02-19 Added support for proxy (#318)
842- 2021-02-19 TUN-3945: Fix runApp signature for generic service
843- 2021-02-09 Update README.md
844- 2021-02-09 Update the TryCloudflare link
845
8462021.2.2
847- 2021-02-04 TUN-3864: Users can choose where credentials file is written after creating a tunnel
848- 2021-02-04 TUN-3869: Improve reliability of graceful shutdown.
849- 2021-02-07 TUN-3878: Do not supply -tags when none are specified
850- 2021-02-04 TUN-3635: Send event when unregistering tunnel for gracful shutdown so /ready endpoint reports down status befoe connections finish handling pending requests.
851- 2021-02-08 TUN-3890: Code coverage for cloudflared in CI
852- 2021-02-09 AUTH-3375 exchangeOrgToken deleted cookie fix
853- 2020-11-18 Update error message to use login command
854
8552021.2.1
856- 2021-02-04 TUN-3858: Do not suffix cloudflared version with -fips
857
8582021.2.0
859- 2021-02-01 TUN-3837: Remove automation_email from cloudflared status page test
860- 2021-02-03 TUN-3848: Use transport logger for h2mux
861- 2021-02-03 TUN-3854: cloudflared tunnel list flags to sort output
862- 2021-01-21 TUN-3195: Don't colorize console logs when stderr is not a terminal
863- 2021-01-20 Fixed connection error handling by removing duplicated errors, standardizing on non-pointer error types
864- 2021-01-20 TUN-3118: Changed graceful shutdown to immediately unregister tunnel from the edge, keep the connection open until the edge drops it or grace period expires
865- 2021-01-25 TUN-3165: Add reference to Argo Tunnel documentation in the help output
866- 2021-01-25 TUN-3806: Use a .dockerignore
867- 2021-01-21 TUN-3795: Use RFC-3339 style date format for logs, produce timestamp in UTC
868- 2021-01-26 TUN-3795: Removed errant test
869- 2021-01-25 TUN-3792: Handle graceful shutdown correctly when running as a windows service. Only expose one shutdown channel globally, which now triggers the graceful shutdown sequence across all modes. Removed separate handling of zero-duration grace period, instead it's checked only when we need to wait for exit.
870- 2021-01-27 TUN-3811: Better error reporting on http2 connection termination. Registration errors from control loop are now propagated out of the connection server code. Unified error handling between h2mux and http2 connections so we log and retry errors the same way, regardless of underlying transport.
871- 2021-01-28 TUN-3830: Use Go 1.15.7
872- 2021-01-28 TUN-3826: Use go-fips when building cloudflared for linux/amd64
873- 2021-01-19 TUN-3777: Fix /ready endpoint for classic tunnels
874- 2021-01-19 TUN-3773: Add back pprof endpoints
875
8762021.1.5
877- 2021-01-15 TUN-3594: Log ingress response at debug level
878- 2021-01-15 TUN-3765: Fix doubly nested log output by `logfile` option
879- 2021-01-16 TUN-3767: Tolerate logging errors
880- 2021-01-17 TUN-3768: Reuse file loggers
881- 2021-01-14 TUN-3738: Refactor observer to avoid potential of blocking on tunnel notifications
882- 2021-01-15 TUN-3766: Print flags defined at all levels of command hierarchy, not just locally defined flags for a command. This fixes output of overriden settings for subcommand.
883
8842021.1.4
885- 2021-01-14 TUN-3759: Single file logging output should always append
886
8872021.1.3
888- 2021-01-14 TUN-3756: File logging output must consider the directory
889- 2021-01-14 TUN-3757: Fix legacy Uint flags that are incorrectly handled by ufarve library
890
8912021.1.2
892- 2021-01-13 TUN-3747: Fix logging in Windows
893
8942021.1.1
895- 2021-01-13 TUN-3744: Fix compilation error in windows service
896
8972021.1.0
898- 2021-01-11 TUN-3670: Update Teamnet API gateway prefixes
899- 2021-01-13 TUN-3738: Consume UI events even when UI is disabled
900- 2021-01-06 TUN-3722: Teamnet API paths include /network
901- 2021-01-05 TUN-3688: Subcommand for users to check which route an IP proxies through
902- 2021-01-08 TUN-3691: Edit Teamnet help text
903- 2020-12-30 TUN-3706: Quit if any origin service fails to start
904- 2020-12-31 TUN-3708: Better info message about system root certpool on Windows
905- 2020-12-21 TUN-3669: Teamnet commands to add/show Teamnet routes.
906- 2020-12-29 TUN-3689: Delete routes via cloudflared CLI
907- 2020-12-28 TUN-3471: Add structured log context to logs
908- 2020-12-15 TUN-3650: Remove unused awsuploader package
909- 2020-12-03 Update to add deprecated version note (#271)
910- 2020-12-02 TUN-3472: Set up rolling logger with zerolog and lumberjack
911- 2020-12-08 TUN-3607: Set up single-file logger with zerolog
912- 2020-12-03 Update to add deprecated version note (#271)
913- 2020-11-25 TUN-3470: Replace in-house logger calls with zerolog
914
9152020.12.0
916- 2020-12-04 TUN-3599: improved delete if credentials isnt found.
917- 2020-12-04 TUN-3612: Upgrade to Go 1.15.6
918- 2020-11-30 TUN-3593: /ready endpoint for k8s readiness. Move tunnel events out of UI package, into connection package.
919- 2020-11-27 TUN-3594: Log response status at debug level
920
9212020.11.11
922- 2020-11-20 TUN-3578: cloudflared tunnel route dns should allow wildcard subdomains
923- 2020-11-21 EDGEPLAT-2958 remove deb-compression, defaulting to gzip
924- 2020-11-23 TUN-3581: Tunnels can be run by name using only --credentials-file, no origin cert necessary.
925- 2020-11-15 TUN-3561: Unified logger configuration
926- 2020-11-08 AUTH-3221: Saves org token to disk and uses it to refresh the app token
927
9282020.11.10
929- 2020-11-20 TUN-3562: Fix panic when using bastion mode ingress rule
930- 2020-11-20 EDGEPLAT-2958 build cloudflared for Bullseye
931
9322020.11.9
933- 2020-11-18 TUN-3557: Detect SSE if content-type starts with text/event-stream
934- 2020-11-18 TUN-3559: Share response meta header with other packages
935- 2020-11-18 DEVTOOLS-7936: Remove redundant chgrp from publish
936- 2020-11-18 TUN-3558: cloudflared allows empty config files
937- 2020-11-18 TUN-3544: Upgrade to Go 1.15.5
938
9392020.11.8
940- 2020-11-17 TUN-3555: Single origin service should default to localhost:8080
941
9422020.11.7
943- 2020-11-13 TUN-3514: Stop setting --is-autoupdated flag after autoupdate because it can break named tunnel running in k8s
944- 2020-11-15 TUN-3548, TUN-3547: Bastion mode can be specified as a service, doesn't require URL.
945- 2020-11-16 TUN-3549: Use a separate handler for each websocket proxy
946
9472020.11.6
948- 2020-11-14 TUN-3546: Fix panic in tlsconfig.LoadOriginCA
949
9502020.11.5
951- 2020-11-12 TUN-3540: Better copy in ingress rules error messages
952- 2020-11-12 DEVTOOLS-7936: Set permissions on public packages
953- 2020-11-13 TUN-3543: ProxyAddress not using default in single-origin mode
954
9552020.11.4
956- 2020-11-11 TUN-3534: Specific error message when credentials file is a .pem not .json
957- 2020-11-02 TUN-3500: Integrate replace h2mux by http2 work with multiple origin support
958- 2020-11-09 TUN-3514: Transport logger write to UI when UI is enabled
959- 2020-10-30 TUN-3490: Make sure OriginClient implementation doesn't write after Proxy return
960- 2020-10-20 TUN-3403: Unit test for origin/proxy to test serving HTTP and Websocket
961- 2020-10-23 TUN-3480: Support SSE with http2 connection, and add SSE handler to hello-world server
962- 2020-10-27 TUN-3489: Add unit tests to cover proxy logic in connection package of cloudflared
963- 2020-10-16 TUN-3467: Serialize cf-cloudflared-response-meta during package initialization using jsoniter
964- 2020-10-14 TUN-3456: New protocol option auto to automatically select between http2 and h2mux
965- 2020-10-14 TUN-3458: Upgrade to http2 when available, fallback to h2mux when we reach max retries
966- 2020-10-08 TUN-3449: Use flag to select transport protocol implementation
967- 2020-10-08 TUN-3462: Refactor cloudflared to separate origin from connection
968- 2020-09-21 TUN-3406: Proxy websocket requests over Go http2
969- 2020-09-25 TUN-3420: Establish control plane and send RPC over control plane
970- 2020-09-11 TUN-3400: Use Go HTTP2 library as transport to connect with the edge
971
9722020.11.3
973- 2020-11-11 TUN-3533: Set config for single origin ingress
974
9752020.11.2
976
977
9782020.11.1
979- 2020-11-10 TUN-3527: More specific error for invalid YAML/JSON
980- 2020-11-06 Update README.md (#256)
981
9822020.11.0
983- 2020-11-04 TUN-3484: OriginService that responds with configured HTTP status
984- 2020-11-05 TUN-3505: Response body for status code origin returns EOF on Read
985- 2020-11-04 TUN-3503: Matching ingress rule should not take port into account
986- 2020-11-05 TUN-3506: OriginService needs to set request host and scheme for websocket requests
987- 2020-11-09 TUN-3516: Better error message when parsing invalid YAML config
988- 2020-11-09 TUN-3522: ingress validate checks that the config file exists
989- 2020-11-09 TUN-3524: Don't ignore errors from app-level action handler (#248)
990- 2020-11-09 TUN-3461: Show all origin services in the UI
991- 2020-10-30 TUN-3494: Proceed to create tunnel if at least one edge address can be resolved
992- 2020-10-30 TUN-3492: Refactor OriginService, shrink its interface
993- 2020-10-22 TUN-3478: Increase download timeout to 60s
994- 2020-10-15 TUN-2640: Users can configure per-origin config. Unify single-rule CLI flow with multi-rule config file code.
995
9962020.10.2
997- 2020-10-21 Release 2020.10.1
998- 2020-10-21 AUTH-3185 fixed indention error
999- 2020-10-19 TUN-3459: Make service install on linux use named tunnels
1000
10012020.10.1
1002- 2020-10-20 Split out typed config from legacy command-line switches; refactor ingress commands and fix tests
1003- 2020-10-20 Move raw ingress rules to config package
1004- 2020-10-21 TUN-3476: Fix conversion to string and int slice
1005- 2020-10-12 TUN-3441: Multiple-origin routing via ingress rules
1006- 2020-10-15 TUN-3464: Newtype to wrap []ingress.Rule
1007- 2020-10-15 TUN-3465: Use Go 1.15.3
1008- 2020-10-15 TUN-3463: Let users run a named tunnel via config file setting
1009- 2020-10-19 TUN-3475: Unify config file handling with typed config for new fields
1010- 2020-10-19 TUN-3459: Make service install on linux use named tunnels
1011- 2020-10-06 AUTH-3148 fixed cloudflared copy and match all the files in the checksum upload
1012- 2020-10-06 TUN-3436, TUN-3437: Parse ingress from YAML, ensure last rule catches everything
1013- 2020-10-06 TUN-3446: Use go 1.15.2 and add a step to build cloudflared in the dev Dockerfile
1014- 2020-10-07 TUN-3439: 'tunnel validate' command to check ingress rules
1015- 2020-10-07 TUN-3440: 'tunnel rule' command to test ingress rules
1016- 2020-10-08 TUN-3451: Cloudflared tunnel ingress command
1017- 2020-10-09 TUN-3452: Fix loading of flags from config file for tunnel run subcommand. This change also cleans up building of tunnel subcommand list, hides deprecated subcommands and improves help.
1018- 2020-10-08 TUN-3438: move ingress into own package, read into TunnelConfig
1019
10202020.10.0
1021- 2020-10-02 AUTH-2993 cleaned up worker service tests
1022- 2020-10-02 TUN-3443: Decode as v4api response on non-200 status
1023- 2020-09-24 TRAFFIC-448: allow the user to specify the proxy address and port to bind to, falling back to 127.0.0.1 and random port if not specified
1024- 2020-09-28 TUN-3427: Define a struct that only implements RegistrationServer in tunnelpogs
1025- 2020-09-29 TUN-3430: Copy flags to configure proxy to run subcommand, print relevant tunnel flags in help
1026- 2020-08-12 AUTH-2993 added workers updater logic
1027
10282020.9.3
1029- 2020-09-22 TRAFFIC-448: build cloudflare for junos and publish to s3
1030- 2020-09-22 TUN-3410: Request the v1 Tunnelstore API
1031- 2020-09-23 Release 2020.9.2
1032- 2020-09-17 updater service exit code should be 11
1033- 2020-09-18 AUTH-3109 upload the checksum to workers kv on github releases
1034
10352020.9.2
1036- 2020-09-22 TRAFFIC-448: build cloudflare for junos and publish to s3
1037- 2020-09-22 TUN-3410: Request the v1 Tunnelstore API
1038- 2020-09-17 AUTH-3103 CI build fixes
1039- 2020-09-18 AUTH-3110-use-cfsetup-precache
1040- 2020-09-17 TUN-3295: Show route command results
1041- 2020-09-16 TUN-3291: cloudflared tunnel run -h explains how to use flags from parent command
1042- 2020-09-18 AUTH-3109 upload the checksum to workers kv on github releases
1043- 2020-09-17 updater service exit code should be 11
1044- 2020-09-01 TUN-3216: UI improvements
1045- 2020-08-25 Rebased and passed TunnelEventChan to LogServerInfo in new ReconnectTunnel function
1046- 2020-08-25 TUN-3321: Add box around logs on UI
1047- 2020-08-26 TUN-3328: Filter out free tunnel has started log from UI
1048- 2020-08-27 TUN-3333: Add text to UI explaining how to exit
1049- 2020-08-27 TUN-3335: Dynamically set connection table size for UI
1050- 2020-08-10 TUN-3238: Update UI when connection re-connects
1051- 2020-08-17 TUN-3261: Display connections on UI for free classic tunnels
1052- 2020-07-24 TUN-3201: Create base cloudflared UI structure
1053- 2020-07-29 TUN-3200: Add connection information to UI
1054- 2020-07-24 TUN-3255: Update UI to display URL instead of hostname
1055- 2020-07-29 TUN-3198: Handle errors while running tunnel UI
1056
10572020.9.1
1058- 2020-09-14 TUN-3395: Unhide named tunnel subcommands, tweak help
1059- 2020-09-15 TUN-3395: Improve help for list command
1060- 2020-09-14 TUN-3294: Perform basic validation on arguments of route command; remove default pool name which wasn't valid
1061- 2020-09-15 TUN-3395: Improve help for list command
1062- 2020-09-16 Use Go 1.15.2
1063
10642020.9.0
1065- 2020-09-11 TUN-3293: Try to use error information from the body of a failed tunnelstore reresponse if available
1066- 2020-09-04 AUTH-2653 renabled signing
1067- 2020-09-04 TUN-3377: Tunnel route should check dns/lb before checking tunnel ID
1068- 2020-09-04 AUTH-2653 changed to proper file extension
1069- 2020-09-04 AUTH-2653 handle duplicate key import errors
1070- 2020-09-04 TUN-3345: tunnel run accepts name of tunnel as argument
1071- 2020-09-08 AUTH-2653 disble error pipe to see what is failing
1072- 2020-09-08 AUTH-2653 search for the certificate and not the identity
1073- 2020-09-09 TUN-3284: Use cloudflared/<version> as user agent of tunnelstore client
1074- 2020-09-09 TUN-3375: Upgrade x/text and gorilla websocket deps
1075- 2020-09-09 TUN-3375: Upgrade coredns and prometheus dependencies
1076- 2020-09-09 AUTH-2653 add notarization to mac build
1077- 2020-09-08 TUN-3292: Mention cleanup in tunnel run help.
1078- 2020-08-20 AUTH-2016 fixed variable fail
1079- 2020-08-12 TUN-3352 extra debug logging for websockets
1080
10812020.8.2
1082- 2020-08-20 AUTH-3021 fixed the git version call by using the older flag
1083- 2020-08-18 TUN-3268: Each connection has its own event digest to reconnect
1084
10852020.8.1
1086- 2020-08-14 AUTH-2975 don't check /etc on windows
1087- 2020-08-14 AUTH-2977 log file protection
1088- 2020-08-18 TUN-3286: Use either ID or name in Named Tunnel subcommands.
1089- 2020-08-18 AUTH-2712 fixed the mac build script
1090- 2020-08-19 AUTH-2653 disabling signing until we can get the keys
1091- 2020-08-05 TUN-3233: List tunnels support filtering by deleted, name, existed at and id
1092- 2020-08-05 TUN-3237: By default, don't show connections that are pending reconnect
1093- 2020-08-06 TUN-3242: Build with go 1.14
1094- 2020-08-07 TUN-3243: Refactor tunnel subcommands to allow commands to compose better
1095- 2020-08-07 AUTH-2864 - add macos build to github release
1096- 2020-07-31 AUTH-2857 update homebrew script to use new url
1097- 2020-07-30 TUN-3213: Create, route and run named tunnels in one command
1098- 2020-07-07 AUTH-2712 added MSI build for a windows agent
1099
11002020.8.0
1101- 2020-07-30 TUN-3220: tunnel route reports created route
1102- 2020-07-31 TUN-3221: ConnectionOptions tracks numPreviousAttempts.
1103- 2020-07-20 TUN-3190: Initialize logger using command line flags in tunnels subcommands
1104- 2020-07-21 TUN-3192: Use zone ID in tunnelstore request path; improve debug logging
1105- 2020-07-23 TUN-3194: Don't render log output when level is not enabled
1106- 2020-07-22 AUTH-2016 adds sha256 hashes to releases
1107- 2020-07-27 Removes centos 6 build
1108- 2020-07-27 TUN-3209: Add benchmark for header serialization
1109- 2020-07-24 TUN-3209: improve performance and reduce allocations during user header serialization from h1 to h2
1110- 2020-07-26 TUN-3208: Add benchmark for large response write
1111- 2020-07-27 TUN-3208: Reduce copies and allocations on h2mux write path. Pre-allocate 16KB write buffer on the first write if possible. Use explicit byte array for chunks on write thread to avoid copying through intermediate buffer due to io.CopyN.
1112- 2020-07-28 AUTH-2714: Adds arm64 cloudflared build
1113- 2020-07-29 AUTH-2927 run message update after all github builds are done
1114- 2020-07-17 AUTH-2902 redirect with just the root host on curl commands
1115
11162020.7.4
1117- 2020-07-20 Build cloudflared for arm64 on native agents
1118- 2020-07-10 TUN-3048: Handle error when user tries to delete active tunnel
1119- 2020-07-14 AUTH-2890: adds error handler to cli actions
1120- 2020-07-06 TUN-3156: Add route subcommand under tunnel
1121
11222020.7.3
1123- 2020-07-13 Change scp command to use file glob that matches both cloudflared rpms and debs
1124
11252020.7.2
1126- 2020-07-02 AUTH-2644: Change install location and add man page
1127- 2020-07-02 TUN-3131: Allow user to specify tunnel credentials path, and remove it in tunnel delete command
1128- 2020-07-03 TUN-3008: Implement cloudflared tunnel cleanup command
1129- 2020-07-02 TUN-3150: cloudflared tunnel list's table should use intelligent column width
1130- 2020-07-07 TUN-3169: Move on to the next address when edge returns duplicate connection. There's no point in trying to connect to the same address since it will be hashed to the same metal. Improve logging of errors from serve tunnel loop, hide useless context cancelled error.
1131- 2020-07-08 beautify package meta information generated by fpm (#218)
1132- 2020-07-06 AUTH-2871: fix rpm builds
1133- 2020-07-08 AUTH-2858: Set file to disable autoupdate
1134- 2020-07-09 AUTH-2872: Adds centos-6 build
1135
11362020.7.1
1137- 2020-07-02 DEVTOOLS-7321: Push GitHub homebrew updates to master
1138- 2020-07-06 TUN-3161: Upgrade golang.org/x/ deps
1139- 2020-06-30 AUTH-2854: Create cloudflared RPMs
1140- 2020-06-26 AUTH-2850 log config file path
1141
11422020.7.0
1143- 2020-06-30 TUN-3140: Add timestamps to terminal log entries
1144- 2020-06-30 AUTH-2860: Fix builds
1145- 2020-06-25 TUN-3007: Implement named tunnel connection registration and unregistration.
1146
11472020.6.6
1148- 2020-06-23 AUTH-2685: Adds script to create release
1149- 2020-06-25 AUTH-2652: Update cloudflare repo
1150- 2020-06-26 AUTH-2718: Add target for publishing deb to pkg.cloudflare repo
1151- 2020-06-26 AUTH-2849 all log output to stderr
1152- 2020-06-17 TUN-3106: Pass NamedTunnel config to StartServer
1153- 2020-06-18 TUN-3107: UnregisterConnection shouldn't wrap nil error as RPC error
1154- 2020-06-17 AUTH-2652: Adds .docker-images to push images to docker hub
1155- 2020-06-18 AUTH-2712 mac package build script and better config file handling when started as a service
1156
11572020.6.5
1158- 2020-06-16 DEVTOOLS-7321: Don't skip macOS builds based on tag
1159- 2020-06-16 fix for a flaky test
1160- 2020-06-16 AUTH-2815 flag check was wrong. stupid oversight
1161- 2020-06-16 TUN-3101: Tunnel list command should only show non-deleted, by default
1162- 2020-06-16 TUN-3066: Command line action for tunnel run
1163- 2020-06-16 TUN-3100 make updater report the right text
1164
11652020.6.4
1166- 2020-06-11 TUN-3085: Pass connection authentication information using TunnelAuth struct
1167- 2020-06-15 TUN-3084: Generate and store tunnel_secret value during tunnel creation
1168- 2020-06-16 AUTH-2815 add the log file to support the config.yaml file
1169- 2020-06-02 TUN-3015: Add a new cap'n'proto RPC interface for connection registration as well as matching client and server implementations. The old interface extends the new one for backward compatibility.
1170
11712020.6.3
1172- 2020-06-15 DEVTOOLS-7321: Add openssh-client pkg for missing ssh-keyscan
1173- 2020-06-15 AUTH-2813 adds back a single file support a cloudflared log file
1174
11752020.6.2
1176- 2020-06-11 AUTH-2648 updated usage text
1177- 2020-06-11 AUTH-2763 don't redirect from curl command
1178- 2020-06-12 TUN-3090: Upgrade crypto dep
1179- 2020-06-11 TUN-3038: Add connections to tunnel list table
1180- 2020-06-12 AUTH-2810 added warn for backwards compatibility sake
1181
11822020.6.1
1183- 2020-06-09 AUTH-2796 fixed windows build
1184
11852020.6.0
1186- 2020-06-05 AUTH-2645 protect against user mistaken flag input
1187- 2020-06-05 AUTH-2687 don't copy config unnecessarily
1188- 2020-06-05 AUTH-2169 make access login page more generic
1189- 2020-06-05 AUTH-2729 added log file and level to cmd flags to match config file settings
1190- 2020-06-08 AUTH-2785 service token flag fix and logger fix
1191- 2020-05-20 AUTH-2682: Create buster build
1192- 2020-05-21 TUN-2928, TUN-2929, TUN-2930: Add tunnel subcommands to interact with tunnel store service
1193- 2020-05-29 Adding support for multi-architecture images and binaries (#184)
1194- 2020-05-29 TUN-3019: Remove declarative tunnel entry code
1195- 2020-05-29 TUN-3020: Remove declarative tunnel related RPC code
1196- 2020-05-13 AUTH-2505 added aliases
1197- 2020-05-14 AUTH-2529 added deprecation text to db-connect command
1198- 2020-05-18 AUTH-2686: Added error handling to tunnel subcommand
1199- 2020-05-04 AUTH-2369: RDP Bastion prototype
1200- 2020-04-29 AUTH-2596 added new logger package and replaced logrus
1201- 2020-04-25 DEVTOOLS-7321: Use SSH key from env for pushing to GitHub
1202- 2020-04-25 DEVTOOLS-7321: Push to a test branch instead of to master
1203- 2020-03-30 DEVTOOLS-7321: Add scripts for macOS builds and homebrew uploads
1204
12052020.5.1
1206- 2020-05-07 TUN-2860: Enable quick reconnect feature by default
1207- 2020-05-07 AUTH-2564: error handling and minor fixes
1208- 2020-05-01 AUTH-2588 add DoH to service mode
1209
12102020.5.0
1211- 2020-05-01 TUN-2943: Copy certutil from edge into cloudflared
1212- 2020-05-05 TUN-2955: Fix connection and goroutine leaks when tunnel conection is terminated on error. Only unregister tunnels that had connected successfully. Close edge connection used to unregister the tunnel. Use buffered channels for error channels where receiver may quit early on context cancellation.
1213- 2020-04-30 TUN-2940: Added delay parameter to stdin reconnect command.
1214- 2020-04-27 TUN-2921: Rework address selection logic to avoid corner cases
1215- 2020-04-28 TUN-2872: Exit with non-0 status code when the binary is updated so launchd will restart the service
1216- 2020-04-13 AUTH-2587 add config watcher and reload logic for access client forwarder
1217
12182020.4.0
1219- 2020-04-10 TUN-2881: Parameterize response meta information header name in the generating function
1220- 2020-04-11 TUN-2894: ResponseMetaHeader should be public
1221- 2020-04-09 TUN-2880: Return metadata about source of the response from cloudflared
1222- 2020-04-04 ARES-899: Fixes DoH client as system resolver. Fixes #91
1223- 2020-03-31 AUTH-2394 added socks5 proxy
1224- 2020-02-24 AUTH-2235 GetTokenIfExists now parses JWT payload for json expiry field to detect if the cached access token is expired
1225
12262020.3.2
1227- 2020-03-31 TUN-2854: Quick Reconnects should be an optional supported feature
1228- 2020-03-30 TUN-2850: Tunnel stripping Cloudflare headers
1229
12302020.3.1
1231- 2020-03-27 TUN-2846: Trigger debug reconnects from stdin commands, not SIGUSR1
1232
12332020.3.0
1234- 2020-03-23 AUTH-2394 fixed header for websockets. Added TCP alias
1235- 2020-03-10 TUN-2797: Fix panic in SetConnDigest by making mutexes values.
1236- 2020-03-13 TUN-2807: cloudflared hello-world shouldn't assume it's my first tunnel
1237- 2020-03-13 TUN-2756: Set connection digest after reconnect.
1238- 2020-03-16 TUN-2812: Tunnel proxies and RPCs can share an edge address
1239- 2020-03-18 TUN-2816: cloudflared metrics server should be more discoverable
1240- 2020-03-19 TUN-2820: Serialized headers for Websockets
1241- 2020-03-19 TUN-2819: cloudflared should close its connections when a signal is sent
1242- 2020-03-19 TUN-2823: Bugfix. cloudflared would hang forever if error occurred.
1243- 2020-03-10 TUN-2796: Implement HTTP2 CONTINUATION headers correctly
1244- 2020-03-02 TUN-2779: update sample HTML pages
1245- 2020-03-04 TUN-2785: Use reconnect token by default
1246- 2020-03-05 TUN-2754: Add ConnDigest to cloudflared and its RPCs
1247- 2020-03-06 TUN-2755: ReconnectTunnel RPC now transmits ConnectionDigest
1248- 2020-03-06 TUN-2761: Use the new header management functions in cloudflared
1249- 2020-03-06 TUN-2788: cloudflared should store one ConnDigest per HA connection
1250- 2020-02-26 TUN-2767: Test for large headers
1251- 2020-02-28 do not terminate tunnel if origin is not reachable on start-up (#177)
1252- 2020-02-28 TUN-2776: Add header serialization feature in cloudflared
1253- 2020-02-21 TUN-2748: Insecure randomness vulnerability in github.com/miekg/dns
1254
12552020.2.1
1256- 2020-02-20 TUN-2745: Rename existing header management functions
1257- 2020-02-21 TUN-2746: Add the new header management functions
1258- 2020-02-25 perf(cloudflared): reuse memory from buffer pool to get better throughput (#161)
1259- 2020-02-25 Tweak HTTP host header. Fixes #107 (#168)
1260- 2020-02-25 TUN-2765: Add list of features to tunnelrpc
1261- 2020-02-19 TUN-2725: Specify in code that --edge is for internal testing only
1262- 2020-02-19 TUN-2703: Muxer.Serve terminates when its context is Done
1263- 2020-02-09 TUN-2717: Function to serialize/deserialize HTTP headers
1264- 2020-02-05 TUN-2714: New edge discovery. Connections try to reconnect to the same edge IP.
1265
12662020.2.0
1267- 2020-01-30 TUN-2651: Fix panic in h2mux reader when a stream error is encountered
1268- 2020-01-27 TUN-2645: Revert "TUN-2645: Turn on reconnect tokens"
1269- 2020-01-28 TUN-2693: Metrics for ReconnectTunnel
1270- 2020-01-28 TUN-2696: Add unknown registerRPCName
1271- 2020-01-28 TUN-2699: Metrics for Authenticate RPCs
1272- 2020-01-28 TUN-2690: cloudflared reconnect uses wrong context
1273- 2020-01-29 TUN-2707: Inconsistent cardinality in tunnel error metrics
1274- 2020-01-13 TUN-2645: Turn on reconnect tokens
1275- 2019-12-23 TUN-2646: Make --edge flag work again for local development
1276
12772019.12.0
1278- 2019-12-11 TUN-2631: only notify that activeStreamMap is closed if ignoreNewStreams=true
1279- 2019-12-17 bug(cloudflared): Set the MaxIdleConnsPerHost of http.Transport to proxy-keepalive-connections (#155)
1280- 2019-12-17 refactor(docker): optimize Dockerfile (#126)
1281- 2019-12-19 Fix timer scheduling for systemd update service (#159)
1282- 2019-12-13 TUN-2637: Manage edge IPs in a region-aware manner
1283- 2019-12-03 bug(cloudflared): nil pointer deference on h2DictWriter Close() (#154)
1284- 2019-12-03 TUN-2608: h2mux.Muxer.Shutdown always returns a non-nil channel
1285- 2019-12-04 TUN-2555: origin/supervisor.go calls Authenticate
1286- 2019-12-06 TUN-2554: cloudflared calls ReconnectTunnel
1287- 2019-11-20 TUN-2575: Constructors + simpler conversions for AuthOutcome
1288- 2019-11-22 Fix Docker build failure (#149)
1289- 2019-11-21 TUN-2573: Refactor TunnelRegistration into PermanentRegistrationError, RetryableRegistrationError and SuccessfulTunnelRegistration
1290- 2019-11-22 TUN-2582: EventDigest field in tunnelrpc
1291- 2019-11-22 Fix "happy eyeballs" not being disabled since Golang 1.12 upgrade * The Dialer.DualStack setting is now ignored and deprecated; RFC 6555 Fast Fallback ("Happy Eyeballs") is now enabled by default. To disable, set Dialer.FallbackDelay to a negative value.
1292- 2019-11-25 TUN-2591: ReconnectTunnel now sends EventDigest
1293- 2019-11-21 TUN-2606: add DialEdge helpers
1294- 2019-11-21 TUN-2607: add RPC stream helpers
1295
12962019.11.3
1297- 2019-11-20 TUN-2562: Update Cloudflare Origin CA RSA root
1298
12992019.11.2
1300- 2019-11-18 TUN-2567: AuthOutcome can be turned back into AuthResponse
1301- 2019-11-18 TUN-2563: Exposes config_version metrics
1302
13032019.11.1
1304- 2019-11-12 Add db-connect, a SQL over HTTPS server
1305- 2019-11-12 TUN-2053: Add a /healthcheck endpoint to the metrics server
1306- 2019-11-13 TUN-2178: public API to create new h2mux.MuxedStreamRequest
1307- 2019-11-13 TUN-2490: respect original representation of HTTP request path
1308- 2019-11-18 TUN-2547: TunnelRPC definitions for Authenticate flow
1309- 2019-11-18 TUN-2551: TunnelRPC definitions for ReconnectTunnel flow
1310- 2019-11-05 TUN-2506: Expose active streams metrics
1311
13122019.11.0
1313- 2019-11-04 TUN-2502: Switch to go modules
1314- 2019-11-04 TUN-2500: Don't send client registration errors to Sentry
1315- 2019-11-04 TUN-2489: Delete stream from activestreammap when read and write are both closed
1316- 2019-11-05 TUN-2505: Terminate stream on receipt of RST_STREAM; MuxedStream.CloseWrite() should terminate the MuxedStream.Write() loop
1317- 2019-10-30 TUN-2451: Log inavlid path
1318- 2019-10-22 TUN-2425: Enable cloudflared to serve multiple Hello World servers by having each of them create its own ServeMux
1319- 2019-10-22 AUTH-2173: Prepends access login url with scheme if one doesnt exist
1320- 2019-10-23 TUN-2460: Configure according to the ClientConfig recevied from a successful Connect
1321- 2019-10-23 AUTH-2177: Reads and writes error streams
1322
13232019.10.4
1324- 2019-10-21 TUN-2450: Remove Brew publishing formula
1325
13262019.10.3
1327- 2019-10-18 Fix #129: Excessive memory usage streaming large files (#142)
1328
13292019.10.2
1330- 2019-10-17 AUTH-2167: Adds CLI option for host key directory
1331
13322019.10.1
1333- 2019-10-17 Adds variable to fix windows build
1334
13352019.10.0
1336- 2019-10-11 AUTH-2105: Dont require --destination arg
1337- 2019-10-14 TUN-2344: log more details: http2.Framer.ErrorDetail() if available, connectionID
1338- 2019-10-16 AUTH-2159: Moves shutdownC close into error handling AUTH-2161: Lowers size of preamble length AUTH-2160: Fixes url parsing logic
1339- 2019-10-16 AUTH-2135: Adds support for IPv6 and tests
1340- 2019-10-02 AUTH-2105: Adds support for local forwarding. Refactor auditlogger creation. AUTH-2088: Adds dynamic destination routing
1341- 2019-10-09 AUTH-2114: Uses short lived cert auth for outgoing client connection
1342- 2019-09-30 AUTH-2089: Revise ssh server to function as a proxy
1343
13442019.9.2
1345- 2019-09-26 TUN-2355: Roll back TUN-2276
1346
13472019.9.1
1348- 2019-09-23 TUN-2334: remove tlsConfig.ServerName special case
1349- 2019-09-23 AUTH-2077: Quotes open browser command in windows
1350- 2019-09-11 AUTH-2050: Adds time.sleep to temporarily avoid hitting tunnel muxer dealock issue
1351- 2019-09-10 AUTH-2056: Writes stderr to its own stream for non-pty connections
1352- 2019-09-16 TUN-2307: Capnp is the only serialization format used in tunnelpogs
1353- 2019-09-18 TUN-2315: Replace Scope with IntentLabel
1354- 2019-09-17 TUN-2309: Split ConnectResult into ConnectError and ConnectSuccess, each implementing its own capnp serialization logic
1355- 2019-09-18 AUTH-2052: Adds tests for SSH server
1356- 2019-09-18 AUTH-2067: Log commands correctly
1357- 2019-09-19 AUTH-2055: Verifies token at edge on access login
1358- 2019-09-04 TUN-2201: change SRV records used by cloudflared
1359- 2019-09-06 TUN-2280: Revert "TUN-2260: add name/group to CapnpConnectParameters, remove Scope"
1360- 2019-09-03 AUTH-1943 hooked up uploader to logger, added timestamp to session logs, add tests
1361- 2019-09-04 AUTH-2036: Refactor user retrieval, shutdown after ssh server stops, add custom version string
1362- 2019-09-06 AUTH-1942 added event log to ssh server
1363- 2019-09-04 AUTH-2037: Adds support for ssh port forwarding
1364- 2019-09-05 TUN-2276: Path encoding broken
1365
13662019.9.0
1367- 2019-09-05 TUN-2279: Revert path encoding fix
1368- 2019-08-30 AUTH-2021 - check error for failing tests
1369- 2019-08-29 AUTH-2030: Support both authorized_key and short lived cert authentication simultaniously without specifiying at start time
1370- 2019-08-29 AUTH-2026: Adds support for non-pty sessions and inline command exec
1371- 2019-08-26 AUTH-1943: Adds session logging
1372- 2019-08-26 TUN-2162: Decomplect OpenStream to allow finer-grained timeouts
1373- 2019-08-29 TUN-2260: add name/group to CapnpConnectParameters, remove Scope
1374
13752019.8.4
1376- 2019-08-30 Fix #111: Add support for specifying a specific HTTP Host: header on the origin. (#114)
1377- 2019-08-22 TUN-2165: Add ClientConfig to tunnelrpc.ConnectResult
1378- 2019-08-20 AUTH-2014: Checks users login shell
1379- 2019-08-26 TUN-2243: Revert "STOR-519: Add db-connect, a SQL over HTTPS server"
1380- 2019-08-27 TUN-2244: Add NO_AUTOUPDATE env var
1381- 2019-08-22 AUTH-2018: Adds support for authorized keys and short lived certs
1382- 2019-08-28 AUTH-2022: Adds ssh timeout configuration
1383- 2019-08-28 TUN-1968: Gracefully diff StreamHandler.UpdateConfig
1384- 2019-08-26 AUTH-2021 - s3 bucket uploading for SSH logs
1385- 2019-08-19 AUTH-2004: Adds static host key support
1386- 2019-07-18 AUTH-1941: Adds initial SSH server implementation
1387
13882019.8.3
1389- 2019-08-20 STOR-519: Add db-connect, a SQL over HTTPS server
1390- 2019-08-20 Release 2019.8.2
1391- 2019-08-20 Revert "AUTH-1941: Adds initial SSH server implementation"
1392- 2019-08-11 TUN-2163: Add GrapQLType method to Scope interface
1393- 2019-08-06 TUN-2152: Requests with a query in the URL are erroneously escaped
1394- 2019-07-18 AUTH-1941: Adds initial SSH server implementation
1395
13962019.8.1
1397- 2019-08-05 TUN-2111: Implement custom serialization logic for FallibleConfig and OriginConfig
1398- 2019-08-06 Revert "TUN-1736: Missing headers when passing an invalid path"
1399
14002019.8.0
1401- 2019-07-11 TUN-1956: Go 1.12 update
1402- 2019-07-24 TUN-1736: Missing headers when passing an invalid path
1403- 2019-07-30 TUN-2117: read group/system-name from CLI, send it to edge
1404- 2019-08-02 TUN-2125: Add PostgresType() to Scope
1405- 2019-08-05 TUN-2147: Implemented ScopeUnmarshaler
1406- 2019-07-31 TUN-2110: Implement custom deserialization logic for OriginConfig
1407- 2019-07-31 AUTH-1972: Deletes token lock file if backoff retry attempts exceeded and intercepts signals until lock is released
1408
14092019.7.0
1410- 2019-05-28 TUN-1913: Define OriginService for each type of origin
1411- 2019-04-29 Build a docker container
1412- 2019-06-12 TUN-1952: Group ClientConfig fields by the component that uses the config, and return the part of the config that failed to be applied
1413- 2019-06-05 TUN-1893: Proxy requests to the origin based on tunnel hostname
1414- 2019-06-17 TUN-1961: Create EdgeConnectionManager to maintain outbound connections to the edge
1415- 2019-06-18 TUN-1885: Reconfigure cloudflared on receiving new ClientConfig
1416- 2019-06-19 TUN-1976: Pass tunnel hostname through header
1417- 2019-06-20 TUN-1982: Load custom origin CA when OriginCAPool is specified
1418- 2019-06-26 TUN-2005: Upgrade logrus
1419- 2019-06-20 TUN-1981: Write response header & body on proxy error to notify eyeballs of failure category
1420- 2019-06-20 TUN-1977: Validate OriginConfig has valid URL, and use scheme to determine if a HTTPOriginService is expecting HTTP or Unix
1421- 2019-06-13 DoH: change the media type to application/dns-message
1422- 2019-06-26 AUTH-1736: Better handling of token revocation
1423
14242019.6.0
1425- 2019-05-17 TUN-1828: Update declarative tunnel config struct
1426- 2019-05-29 Handle exit code on err
1427- 2019-05-29 AUTH-1802: Fixed ssh-config templating
1428- 2019-05-30 TUN-1914: Conflate HTTP and Unix OriginConfig, and add TLS config to WebSocketOriginConfig
1429- 2019-06-03 AUTH-1811: ssh-gen config fixes
1430
14312019.5.0
1432- 2019-04-25 TUN-1781: ServeStream should return early on error
1433- 2019-04-30 TUN-1786: Remove low-level Windows service logging
1434- 2019-05-03 TUN-1807: Send cloudflared version in Connect RPC
1435- 2019-01-23 AUTH-1557: Short Lived Certs
1436- 2019-05-13 TUN-1847: Log a distinct message when OpenStream fails while waiting for response headers
1437- 2019-05-13 AUTH-1706: fixes and testing
1438- 2019-05-22 TUN-1880: Save debug and warn level log to logfile
1439- 2019-05-22 AUTH-1781: fixed race condition for short lived certs, doc required config
1440
14412019.4.1
1442- 2019-03-18 TUN-1626: Create new supervisor to establish connection with origintunneld
1443- 2019-04-04 TUN-1619: Add flag to test declarative tunnels.
1444- 2019-04-05 TUN-1577: decompose carrier.StartServer to make TestStartServer less flappy
1445- 2019-03-29 TUN-1606: Define CloudflaredConfig RPC structure, interface for cloudflared's RPC server
1446- 2019-04-02 TUN-1682: Add context to OpenStream to prevent it from blocking indefinitely.
1447- 2019-04-16 TUN-1732: cloudflared metrics should track userHostnames
1448- 2019-04-17 TUN-1734: Pin packages at exact versions
1449- 2019-04-18 TUN-1669: Update license message in help text. Also fix test
1450
14512019.4.0
1452- 2019-03-28 TUN-1648: ConnectionID is now a UUID
1453- 2019-04-01 TUN-1673: Conflate Hello and Connect RPCs
1454
14552019.3.2
1456- 2019-03-22 TUN-1637: Free tunnels shouldn't require cert.pem
1457- 2019-03-18 TUN-1604: Define Connect RPC call
1458
14592019.3.1
1460- 2019-03-09 Add rdp as a supported protocol in URL validation (#76)
1461- 2019-03-15 TUN-1613: improved cloudflared RegisterTunnel fail metrics
1462- 2019-03-17 TUN-1615: revert miekg/dns to last known working revision
1463
14642019.3.0
1465- 2018-12-28 make http transport aware of proxy from envvar
1466- 2019-02-28 TUN-1559: fix nil dereference in TunnelConfig.CloseConnOnce
1467- 2019-03-04 TUN-1451: Make non-interactive, non-service execution possible on Windows
1468- 2019-03-04 TUN-1562: Refactor connectedSignal to be safe to close multiple times
1469- 2019-02-27 TUN-1550: Add validation timeout for non-responsive origins
1470- 2019-03-06 AUTH-1531: Named flags for ssh service tokens
1471- 2019-02-14 Support unix sockets.
1472- 2019-03-08 TUN-1389: Non-scalar flags in a cloudflared config.yml don't get logged
1473- 2019-03-07 TUN-1522: If we can't get SRV from default resolver, get them from 1.1.1.1 DoT
1474
14752019.2.1
1476- 2019-02-14 TUN-1381: should tell you if you're on the latest version rather than just exiting silently
1477- 2019-02-15 TUN-1467: build with Go 1.11
1478- 2019-02-15 AUTH-1519: Added logging
1479- 2019-02-19 TUN-1525: cloudflared metrics for registration success/fail
1480- 2019-02-19 TUN-1510: Wrap the close() in sync.Once.Do
1481
14822019.2.0
1483- 2019-01-24 AUTH-1462: better curl arg parsing
1484- 2019-02-01 TUN-1456: Only make one UUID
1485- 2019-01-30 cloudflared/linux_service: Add missing /etc/init.d shebang
1486- 2019-02-07 AUTH-1511: Add custom headers for ssh command
1487- 2019-02-01 AUTH-1503: Added RDP support
1488- 2019-02-01 AUTH-1403: Print the paths in the ssh-config instructions
1489
14902019.1.0
1491- 2018-12-10 TUN-1231: Horizontal overflow wrapping on the Hello page
1492- 2018-12-17 TUN-1140: Show usage if invoked with no args or config
1493- 2018-11-06 TUN-632 Filter out common network exceptions from going to Sentry on StartServer
1494- 2019-01-07 TUN-1138: Install cloudflared service directory with 755 permissions
1495- 2019-01-07 TUN-1265: Silent exit when failing to parse config
1496- 2019-01-10 TUN-1350: Enhance error messages with cloudflarestatus.com link, if relevant
1497- 2019-01-16 TUN-1358: Close readyList after Muxer.Serve() has stopped running
1498- 2019-01-24 AUTH-1423: move from stdout to stderr
1499- 2019-01-24 AUTH-1404: reauth if the token is about to expire within 15 minutes
1500- 2019-01-24 AUTH-1459: improved ssh streaming error message
1501- 2019-01-24 AUTH-1211: print all the versions
1502- 2019-01-24 AUTH-1337: fix url path
1503- 2019-01-28 TUN-1418: Rename ProtocolLogger to TransportLogger, and use TransportLogger to log RPC events.
1504- 2019-01-28 TUN-1419: Identify request/response headers/content length with ray ID
1505
15062018.12.1
1507- 2018-12-11 TUN-1270: cloudflared panic (HA metrics missing label)
1508
15092018.12.0
1510- 2018-11-15 TUN-1196: Allow TLS config client CA and root CA to be constructed from multiple certificates
1511- 2018-11-20 TUN-1209: TLS Config Certificates and GetCertificate can both be set
1512- 2018-11-26 TUN-1212: Expose tunnel_id in metrics
1513- 2018-11-30 TUN-1204: remove 'cloudflared hello' command
1514- 2018-12-04 Fix license URL typo
1515- 2018-12-07 TUN-1250: ValidateHTTPService shouldn't follow 302s
1516
15172018.11.0
1518- 2018-10-31 AUTH-1282: Fixed an issue where we were receiving as opposed sending on the channel.
1519- 2018-11-06 TUN-1179: Fix log message in cmd/cloudflared/transfer.Run
1520- 2018-11-13 AUTH-1308: get jwt even when you are already logged in
1521- 2018-11-12 TUN-1190: check URL parse error when starting SSH proxy server
1522- 2018-11-15 AUTH-1320: Fixed request issue and unhide the ssh command
1523
15242018.10.5
1525- 2018-10-18 TUN-968: Flow control for large requests/responses
1526- 2018-10-26 TUN-1158: Windows: use process arguments rather than trivial service arguments
1527- 2018-10-20 #30: Fix the Content-Length header for HTTP2->HTTP1
1528- 2018-10-29 TUN-1160: pass Host header during origin url validation
1529
15302018.10.4
1531- 2018-09-21 AUTH-1070: added SSH/protocol forwarding
1532- 2018-10-19 AUTH-1235: fixed packaging of deb dev file
1533- 2018-10-19 TUN-1097: Host missing from WebSocket request
1534- 2018-10-19 AUTH-1188: UX Review and Changes for CLI SSH Access
1535
15362018.10.3
1537- 2018-10-08 TUN-1099: Bring back changes in 2018.10.1
1538- 2018-10-08 TUN-1098: removed deprecation error
1539- 2018-10-08 TUN-1101: False negatives in Cloudflared error reporting
1540
15412018.10.2
1542- 2018-10-06 TUN-1093: Revert cloudflared to 2018.8.0
1543
15442018.10.1
1545- 2018-10-03 TUN-1012: Normalize config filename for Linux services
1546- 2018-10-05 TUN-1081: cloudflared now generates UUIDs
1547- 2018-10-05 TUN-1083: fixed incorrect help menu
1548- 2018-10-05 TUN-1086: fixed config option
1549
15502018.10.0
1551- 2018-08-15 AUTH-910, AUTH-1049, AUTH-1068, AUTH-1056: Generate and store Access tokens with E2EE option, curl/cmd wrapper
1552- 2018-09-11 TUN-890: To support free tunnels, hostname can now be ""
1553- 2018-09-12 TUN-810: Cloudflared should open dash/argotunnel not dash/warp
1554- 2018-09-12 TUN-985: Don't display tunnel ID if it's empty string
1555- 2018-09-11 TUN-881: Display trial zone URL upon successful registration
1556- 2018-09-11 TUN-868: HTTP/HTTPS mismatch should have a better error message
1557- 2018-09-19 TUN-1028: Unhide cloudflared compression flag
1558- 2018-09-20 AUTH-1139: refactored cloudflared help menu
1559- 2018-09-20 TUN-1035: New text for cloudflared tunnel --help
1560- 2018-09-18 AUTH-1136: addressing beta feedback
1561- 2018-09-26 AUTH-1165: hide access command
1562- 2018-09-26 TUN-1046: Document that delta compression is a beta feature
1563- 2018-09-28 TUN-1056: Lint error broke build
1564- 2018-09-27 TUN-1052: Origintunneld can send back an Origincert to Cloudflared
1565- 2018-09-28 TUN-1052: Changing type of OriginCert to :Data
1566- 2018-10-01 TUN-1062: Makefile target for regenerating Capn Proto definitions
1567- 2018-10-02 TUN-1064: Revert OriginCert capnp changes in Cloudflared. Reverts commits a1ee2342e97 and 8c756c45785.
1568- 2018-10-03 TUN-1076: Pin capnproto2 to version 2.17.1
1569- 2018-10-03 AUTH-1199: unhide access command, added beta label
1570
15712018.8.0
1572- 2018-05-01 Initial commit
1573- 2018-05-03 TUN-595: Add License/Readme files to cloudflared
1574- 2018-05-01 TUN-528: Move cloudflared into a separate repo
1575- 2018-07-24 TUN-813: Clean up cloudflared dependencies
1576- 2018-07-25 TUN-814: Handle error in CreateTLSListener before closing listener
1577- 2018-07-24 TUN-804: create Makefile recipe to build cloudflared and run tests
1578- 2018-07-26 TUN-817: Increase the log time precision
1579- 2018-07-30 TUN-828: Added Connection: keep-alive header
1580- 2018-07-30 TUN-829: prefer p256 curve
1581- 2018-07-31 TUN-834: Enable tracing on cloudflared
1582- 2018-08-07 TUN-820: Fix caddyfile gitignore
1583- 2018-07-25 TUN-804: create make recipe for building deb package
1584- 2018-08-07 TUN-861: Disable cloudflared tracing by default; preserve the latest tracefile
1585- 2018-08-07 TUN-857: Pull the brotli-go dependency from Github
1586- 2018-08-14 TUN-897: Bring back missing Brotli files
1587- 2018-07-26 TUN-804: create makefile recipe to release cloudflared using equinox
1588- 2018-08-15 TUN-901: makefile target for homebrew release
1589- 2018-07-30 TUN-801: Rapid SQL Proxy
1590- 2018-08-27 TUN-833: Don't log system root certificate loading failure on Windows
1591
1592