Skip to content

Releases: MAIF/otoroshi

16.9.1

09 Oct 09:37
Compare
Choose a tag to compare

Otoroshi version 16.9.1

https://github.com/MAIF/otoroshi/milestone/77?closed=1
v16.9.0...v16.9.1
https://github.com/MAIF/otoroshi/releases/tag/v16.9.1

Added

  • make optional Extism runtime for launching the wasm manager (#1727)
  • add button in plugin view to download WASM binaries (#1729)

Fixed

  • bad overhead out computing in case of circuit breaker opening (#1731)

Contributors

16.9.0

29 Sep 10:17
Compare
Choose a tag to compare

Otoroshi version 16.9.0

https://github.com/MAIF/otoroshi/milestone/74?closed=1
v16.8.1...v16.9.0
https://github.com/MAIF/otoroshi/releases/tag/v16.9.0

Major announcements in this release are :

  • support for the Infisical project as secrets vault
  • add JDK21 docker images
  • customization of the ALPN phase to blacklist possible protocols
  • split WASM specific code into a separate library

Added

  • support entity validators per admin api consumer (user or apikey) using opa rules (#1629)
  • support Infisical as secret vault (#1688)
  • add JDK21 docker image (#1705)
  • add support for custom vaults in admin extensions (#1708)
  • restore request size computation if not too sluggish (#1710)
  • ALPN customization per domain name (#1720)
  • remove protocol specific headers when backend target use lower protocol version (#1721)

Changed

  • split wasm runtime into a separate library (#1702)
  • rework on the cluster protocol (#1713)
  • react-select 1.2.1 -> 5.x (#1718)

Fixed

  • WasmManager : it should be launched with pm2 or similar tool (#1698)
  • Wasm manager docker image build warnings (#1699)
  • wasm manager project query param sometimes has bad value (#1703)
  • wasm manager is not built with a version (#1707)
  • Backend : Cannot reach HTTP/1.1 (no SSL) Backend ? (#1711)
  • admin rights sometimes fails when super admin (#1712)

Contributors

16.8.1

07 Sep 13:43
Compare
Choose a tag to compare

Otoroshi version 16.8.1

https://github.com/MAIF/otoroshi/milestone/72?closed=1
v16.8.0...v16.8.1
https://github.com/MAIF/otoroshi/releases/tag/v16.8.1

Changed

  • update coraza to 0.1.2 (#1697)

Fixed

  • force elastic version read from server even if applyTemplate not checked (#1700)
  • update default elastic version in code with 8.0.0 (#1701)

Contributors

16.8.0

31 Aug 15:50
Compare
Choose a tag to compare

Otoroshi version 16.8.0

https://github.com/MAIF/otoroshi/milestone/71?closed=1
v16.7.0...v16.8.0
https://github.com/MAIF/otoroshi/releases/tag/v16.8.0

Major announcements in this release are :

  • fix tls 1.3 handshake that was broken in some cases

Added

  • allow different mutual auth. settings on play server and netty server (#1691)
  • add endpoints to get otoroshi version and cluster infos (#1696)

Fixed

  • tls session issue with first request using TLS 1.3 (#1695)
  • issue when consuming backoffice with the netty backend and tls (#1694)
  • issue in el add on 16.7.0 with this kind of EL '${now.plus_ms(300000).epoch_ms}' (#1689)

Contributors

16.7.0

01 Aug 13:55
Compare
Choose a tag to compare

Otoroshi version 16.7.0

https://github.com/MAIF/otoroshi/milestone/70?closed=1
v16.6.0...v16.7.0
https://github.com/MAIF/otoroshi/releases/tag/v16.7.0

Major features announcements in this release are

  • new kind of data exporter that support OpenTelemetry Logs
  • new kind of data exporter that support OpenTelemetry Metrics
  • full OpenTelemetry compatibility for otoroshi internals
  • date manipulations in expression language
  • better SAMLv2 support

Added

  • X-Forwarded-Prefix not send with other X-Forwarded-* (#1626)
  • new kind of data exporter for opentelemetry metrics (#1637)
  • new kind of data exporter for opentelemetry logs (#1636)
  • integration with opentelemetry logs (#1635)
  • add new endpoint to get one simple admin at a time (#1681)
  • support opentelemetry for internal metrics (#1686)
  • support date manipulation in expression language (#1682)
  • Allow to access script by url (#1670)
  • SAMLv2 improvements (#1685)

Fixed

  • updating admin with api leads to an error because its expected to provide a backoffice user (#1684)
  • Auth module - SAML : Authentication successfull, but loop to login page (#1671)
  • bad SAML2 url composition in some cases (#1683)
  • circuit breaker help labels broken (#1687)

Contributors

16.6.0

19 Jul 09:51
Compare
Choose a tag to compare

Otoroshi version 16.6.0

https://github.com/MAIF/otoroshi/milestone/67?closed=1
v16.5.2...v16.6.0
https://github.com/MAIF/otoroshi/releases/tag/v16.6.0

Major features announcements in this release are

  • complete rewrite of the wasm runtime to dramatically improve performances using double priority queue and vm pools
  • new view to test data exporter expressions
  • new build optimizations in wasm-manager
  • new $jq operator in data exporter projections

Added

  • add generic pooling support for mono-threaded WASM VMs (#1642)
  • add routine to automatically kill unused vm, vm with too much memory consumed, etc (#1649)
  • tweak extism to provide efficient vm instanciation with scoped host functions (#1621)
  • include $jq operator in Projection utils (#1656)
  • documentation fo jsonpath based projections (#1662)
  • documentation for matcher operators (#1631)
  • add the ability to test filtering and projection from data-exporter view (#1675)
  • use wasm-opt in the wasm manager to cleanup produced wasm (#1630)
  • doc: add circuit breaker topic (#1641)

Changed

  • remove lifetime from wasm vm config. (#1654)
  • support wasm vm pool on non wasm plugin configs. (#1652)
  • support coraza calls in wasm vm pools (#1643)
  • support OPA calls in wasm vm pools (#1646)
  • rewrite wasm plugins to use vm pools (#1645)
  • rewrite coraza plugin to avoid blocking (#1644)
  • rewrite wasm data exporters to use vm pools (#1647)
  • rewrite wasm auth plugins to use vm pools (#1653)

Fixed

  • make template update work in multi-thread env. (#1648)
  • handle requests burst on wasm plugin (#1650)
  • auth module - SAML : Using wizard, Single Logout URL is mandatory? (#1663)
  • removing all lines from a file make it impossible to edit (#1673)
  • saml request should be deflated before base64 encoding (#1678)

Contributors

16.5.2

04 Jul 08:06
Compare
Choose a tag to compare

Otoroshi version 16.5.2

https://github.com/MAIF/otoroshi/milestone/69?closed=1
v16.5.1...v16.5.2
https://github.com/MAIF/otoroshi/releases/tag/v16.5.2

Fixed

  • ServiceDescriptor to route conversion does not copy IP whitelist (#1639)
  • fix bad value resolution in cluster config (#1640)

Contributors

16.5.1

03 Jul 08:16
Compare
Choose a tag to compare

Otoroshi version 16.5.1

https://github.com/MAIF/otoroshi/milestone/68?closed=1
v16.5.0...v16.5.1
https://github.com/MAIF/otoroshi/releases/tag/v16.5.1

Fixed

  • Plugins that synchronously transform response are not merged correctly (#1632)
  • Chaos monkey body length related faults does not work propertly (#1634)

Contributors

16.5.0

30 Jun 06:29
Compare
Choose a tag to compare

Otoroshi version 16.5.0

https://github.com/MAIF/otoroshi/milestone/66?closed=1
v16.4.0...v16.5.0
https://github.com/MAIF/otoroshi/releases/tag/v16.5.0

Major features announcements in this release are

  • plugins can now ship their own UI
  • you can add entity validators on users based on Json Path expressions
  • new grpc plugins available

Added

  • support plugins thats ships their own custom UI (#1300)
  • Externals vault - Support getting certificates (#1364)
  • support entity validators per admin api consumer (user or apikey) (#1617)

Changed

  • upgrade netty dependencies (#1620)
  • update coraza version (#1622)

Fixed

  • user rights check is broken on the admin api (#1618)
  • add more validation to avoid data override in the admin api (#1619)
  • fix opa execution crash on second invocation (#1623)
  • play framework add default content-type on response with no content-type (#1624)
  • otoroshi does not support application/json mediatype with open charset (#1625)

Contributors

16.4.0

25 May 15:37
Compare
Choose a tag to compare

Otoroshi version 16.4.0

https://github.com/MAIF/otoroshi/milestone/63?closed=1
v16.3.2...v16.4.0
https://github.com/MAIF/otoroshi/releases/tag/v16.4.0

Major features announcements in this release are

  • a brand new WAF plugin based on OWASP Coraza
  • a brand new Brotli compression plugin
  • now authentication modules are pluggable and can be deployed as third party plugins
  • now you can write data exporter in WASM
  • now you can write authentication modules in WASM

Added

  • provide a Brotli compression plugin (#1289)
  • support OWASP Coraza WAF (#1497)
  • support wasm data exporters (#1565)
  • support wasm auth. modules (#1598)
  • handle ctrl+s shortcut to save route (#1594)
  • enable anonymous reporting (#1595)
  • make authentication modules pluggable (#1285)

Fixed

  • add the ability to extract informations from apikeys as jwt tokens (#1584)
  • avoid creating linear memory instance when non OPA plugin (#1586)
  • discard invitation link expired (#1587)
  • config. validation happens before configuration merge (#1588)
  • better concurrency handling when fetching wasm sources (#1589)
  • better handling of wasm resources to enhance performances at scale (#1590)
  • route events view does not allow filtering (#1591)
  • prohibit creation of new User with empty informations (#1596)
  • Content-Length missing due to akka-http-client model (#1597)
  • bad conversion of service descriptor to route for info. token (#1600)
  • host functions around attributes does not work when lifetime is forever (#1604)
  • data exporter duplication (#1610)
  • regex routing is broken (#1611)
  • handle target from service name and port in kubernetes crds for a route (#1612)
  • add otoroshi.mesh domains on route in kubernetes crds (#1613)

Contributors