44cb804b9e 
								
									
								
							
								 
							
						 
						
							
							
								
								reverse_proxy: Configurable request headers on active health checks  
							
							
 
							
							
							See https://caddy.community/t/health-check-user-agent/6309  
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								c11e3bffd6 
								
									
								
							
								 
							
						 
						
							
							
								
								Add file-server and reverse-proxy subcommands  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								7b4aa108c7 
								
									
								
							
								 
							
						 
						
							
							
								
								caddyhttp: 'not' matcher: Support Caddyfile unmarshaling  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								b249b45d10 
								
									
								
							
								 
							
						 
						
							
							
								
								tls: Change struct fields to pointers, add nil checks; rate.Burst update  
							
							
 
							
							
							Making them pointers makes for cleaner JSON when adapting configs, if
the struct is empty now it will be omitted entirely.
The x/time/rate package was updated to support changing the burst, so
we've incorporated that here and removed a TODO. 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								2f684e42d5 
								
									
								
							
								 
							
						 
						
							
							
								
								reverse_proxy/headers: Expose header replacement ability in Caddyfile  
							
							
 
							
							
							Adds header_up and header_down subdirectives to reverse_proxy 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								ba29f9d41d 
								
									
								
							
								 
							
						 
						
							
							
								
								httpcaddyfile: Global storage configuration ( closes   #2758 )  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								40e05e5a01 
								
									
								
							
								 
							
						 
						
							
							
								
								http: Improve auto HTTP->HTTPS redirects, fix edge cases  
							
							
 
							
							
							See https://caddy.community/t/v2-issues-with-multiple-server-blocks-in-caddyfile-style-config/6206/13?u=matt 
Also print pid when using `caddy start` 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								bc9f944837 
								
									
								
							
								 
							
						 
						
							
							
								
								host matcher: Strip [ ] from IPv6 addresses  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								4c289fc6ad 
								
									
								
							
								 
							
						 
						
							
							
								
								Allow domain fronting with TLS client auth if explicitly configured  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								484cee1ac1 
								
									
								
							
								 
							
						 
						
							
							
								
								fastcgi: Implement / redirect for index.php with php_fastcgi directive ( #2754 )  
							
							
 
							
							
							* fastcgi: Implement / redirect for index.php with php_fastcgi directive
See #2752  and https://caddy.community/t/v2-redirect-path-to-path-index-php-with-assets/6196?u=matt 
* caddyhttp: MatchNegate implements json.Marshaler
* fastcgi: Add /index.php element to try_files matcher
* fastcgi: Make /index.php redirect permanent 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								d030bfdae0 
								
									
								
							
								 
							
						 
						
							
							
								
								httpcaddyfile: static_response -> respond; minor cleanups  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								db4c73dd58 
								
									
								
							
								 
							
						 
						
							
							
								
								reverse_proxy: Close idle connections on module unload  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								f15f0d5839 
								
									
								
							
								 
							
						 
						
							
							
								
								Eliminate some TODOs  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								e73b117332 
								
									
								
							
								 
							
						 
						
							
							
								
								reverse_proxy: Ability to mutate headers; set upstream placeholders  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								2fd22139c6 
								
									
								
							
								 
							
						 
						
							
							
								
								headers: Ability to mutate request headers including http.Request.Host  
							
							
 
							
							
							Also a few bug fixes 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								2ab2d5bf9e 
								
									
								
							
								 
							
						 
						
							
							
								
								Forgot to commit caddyfile.go changes in last commit  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								c09e86fddc 
								
									
								
							
								 
							
						 
						
							
							
								
								headers: Add ability to replace substrings in header fields  
							
							
 
							
							
							This will probably be useful so the proxy can rewrite header values. 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								46aaf02371 
								
									
								
							
								 
							
						 
						
							
							
								
								encode: Fix bug where default status code was being written  
							
							
 
							
							
							for small responses.
See https://caddy.community/t/v2-permanent-redirect-prompt/6190?u=matt  
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								839507e24e 
								
									
								
							
								 
							
						 
						
							
							
								
								http: Consider wildcards when evaluating automatic HTTPS  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								ed40a5dcab 
								
									
								
							
								 
							
						 
						
							
							
								
								tls: Do away with SetDefaults which did nothing useful  
							
							
 
							
							
							CertMagic uses the same defaults for us 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								758269124e 
								
									
								
							
								 
							
						 
						
							
							
								
								reverseproxy: Fix host and port on requests; fix Caddyfile parser  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								fe389fcbd7 
								
									
								
							
								 
							
						 
						
							
							
								
								http: Set Alt-Svc header if experimental HTTP3 server is enabled  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								005a11cf4b 
								
									
								
							
								 
							
						 
						
							
							
								
								headers: New 'request_header' directive; handle Host header specially  
							
							
 
							
							
							Before this change, only response headers could be manipulated with the
Caddyfile's 'header' directive.
Also handle the request Host header specially, since the Go standard
library treats it separately from the other header fields... 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								194df652eb 
								
									
								
							
								 
							
						 
						
							
							
								
								reverseproxy: Add 'tls' option to enable HTTPS with HTTP transport  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								2459c292a4 
								
									
								
							
								 
							
						 
						
							
							
								
								caddyfile: Improve Dispenser.NextBlock() to support nesting  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								0cf592fa2e 
								
									
								
							
								 
							
						 
						
							
							
								
								New 'php_fastcgi' directive for convenient PHP+FastCGI reverse proxy  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								d9136fb0a0 
								
									
								
							
								 
							
						 
						
							
							
								
								rewrite: Caddyfile directive should always invoke a rehandle  
							
							
 
							
							
							This is unless each route's matcher is dynamically executed after
previous handlers... 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								c32b7e8865 
								
									
								
							
								 
							
						 
						
							
							
								
								fastcgi: Make EnvVars a map instead of a slice  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								0c8ad52be1 
								
									
								
							
								 
							
						 
						
							
							
								
								Experimental IETF-standard HTTP/3 support (known issue exists) ( #2727 )  
							
							
 
							
							
							* Begin WIP integration of HTTP/3 support
* http3: Set actual Handler, make fakeClosePacketConn type for UDP sockets
Also use latest quic-go for ALPN fix
* Manually keep track of and close HTTP/3 listeners
* Update quic-go after working through some http3 bugs
* Fix go mod
* Make http3 optional for now 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								d67d8cf5a8 
								
									
								
							
								 
							
						 
						
							
							
								
								Fix build (sigh)  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								b4f4fcd437 
								
									
								
							
								 
							
						 
						
							
							
								
								Migrate some selection policy tests over to v2  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								50e62d06bc 
								
									
								
							
								 
							
						 
						
							
							
								
								reverse_proxy: Caddyfile integration (and fix blocks in Dispenser)  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								9169cd43d4 
								
									
								
							
								 
							
						 
						
							
							
								
								Log when auto HTTPS or auto HTTP->HTTPS redirects are disabled  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								e12c62e60b 
								
									
								
							
								 
							
						 
						
							
							
								
								file_server: Enforce URL canonicalization ( closes   #2741 )  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								3e9e7555ef 
								
							
								 
							
						 
						
							
							
								
								Fix build ( #2740 )  
							
							
 
							
							
							Build was broken with commit 50961ec 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								f6126acf37 
								
									
								
							
								 
							
						 
						
							
							
								
								Header matchers: allow matching presence of header with empty list  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								97ace2a39e 
								
									
								
							
								 
							
						 
						
							
							
								
								File matcher enforces trailing-slash convention to match dirs/files  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								4bd9496525 
								
									
								
							
								 
							
						 
						
							
							
								
								Fix Schrodinger's file existence check in file matcher  
							
							
 
							
							
							See: https://stackoverflow.com/a/12518877/1048862 
For example, trying to check the existence of "/www/index.php/index.php"
fails but not with an os.IsNotExist()-type error. So we have to assume
that a file that cannot be successfully stat'ed at all does not exist. 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								14f9662f9c 
								
									
								
							
								 
							
						 
						
							
							
								
								Various fixes/tweaks to HTTP placeholder variables and file matching  
							
							
 
							
							
							- Rename http.var.* -> http.vars.* to be more consistent
- Prefixing a path matcher with * now invokes simple suffix matching
- Handlers and matchers that need a root path default to {http.vars.root}
- Clean replacer output on the file matcher's file selection suffix 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								21d7b662e7 
								
									
								
							
								 
							
						 
						
							
							
								
								fastcgi: Use request context as base, not a new one  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								d2e46c2be0 
								
									
								
							
								 
							
						 
						
							
							
								
								fastcgi: Set default root path; add interface guards  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								80b54f3b9d 
								
									
								
							
								 
							
						 
						
							
							
								
								Add original URI to request context; implement into fastcgi env  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								0830fbad03 
								
									
								
							
								 
							
						 
						
							
							
								
								Reconcile upstream dial addresses and request host/URL information  
							
							
 
							
							
							My goodness that was complicated
Blessed be request.Context
Sort of 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								a60d54dbfd 
								
									
								
							
								 
							
						 
						
							
							
								
								reverse_proxy: Ignore context.Canceled errors  
							
							
 
							
							
							These happen when downstream clients cancel the request, but that's not
our problem nor a failure in our end 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								acb8f0e0c2 
								
									
								
							
								 
							
						 
						
							
							
								
								Integrate circuit breaker modules with reverse proxy  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								652460e03e 
								
									
								
							
								 
							
						 
						
							
							
								
								Some cleanup and godoc  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								4a1e1649bc 
								
									
								
							
								 
							
						 
						
							
							
								
								reverse_proxy: Implement remaining TLS config for proxy to backend  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								ccfb12347b 
								
									
								
							
								 
							
						 
						
							
							
								
								reverse_proxy: Implement active health checks  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								50961ecc77 
								
							
								 
							
						 
						
							
							
								
								Initial implementation of TLS client authentication ( #2731 )  
							
							
 
							
							
							* Add support for client TLS authentication
Signed-off-by: Alexandre Stein <alexandre_stein@interlab-net.com>
* make and use client authentication struct
* force StrictSNIHost if TLSConnPolicies is not empty
* Implement leafs verification
* Fixes issue when using multiple verification
* applies the comments from maintainers
* Apply comment
* Refactor/cleanup initial TLS client auth implementation 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								026df7c5cb 
								
									
								
							
								 
							
						 
						
							
							
								
								reverse_proxy: WIP refactor and support for FastCGI  
							
							
								
 
							
							
						 
						6 years ago