You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@trafficserver.apache.org by cm...@apache.org on 2025/08/05 01:38:07 UTC
(trafficserver) branch 10.1.x updated (7055283e8a -> 0ee9fb05f2)
This is an automated email from the ASF dual-hosted git repository.
cmcfarlen pushed a change to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/trafficserver.git
from 7055283e8a server.honor_cipher_order: Clarify documentation (#12416) (#12420)
new ae0e2afdff whats-new doc: proxy.config.ssl.session_cache.mode (#12418)
new 9ee6bb86ce Docs: TLS Negotiated Group Metrics (#12415)
new 0ee9fb05f2 Update changelog for rc1
The 3 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
CHANGELOG-10.1.0 | 6 ++
.../monitoring/statistics/core-statistics.en.rst | 1 +
.../monitoring/statistics/core/ssl-group.en.rst | 65 ++++++++++++++++++++++
doc/release-notes/whats-new.en.rst | 11 ++++
4 files changed, 83 insertions(+)
create mode 100644 doc/admin-guide/monitoring/statistics/core/ssl-group.en.rst
(trafficserver) 02/03: Docs: TLS Negotiated Group Metrics (#12415)
Posted by cm...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
cmcfarlen pushed a commit to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/trafficserver.git
commit 9ee6bb86ce07f4d39e4fb4ef38cb6a7d8845aa38
Author: Masaori Koshiba <ma...@apache.org>
AuthorDate: Tue Aug 5 07:09:16 2025 +0900
Docs: TLS Negotiated Group Metrics (#12415)
(cherry picked from commit 9656caaba0d0ae1634f7a6dac660a8d433f06c83)
---
.../monitoring/statistics/core-statistics.en.rst | 1 +
.../monitoring/statistics/core/ssl-group.en.rst | 65 ++++++++++++++++++++++
2 files changed, 66 insertions(+)
diff --git a/doc/admin-guide/monitoring/statistics/core-statistics.en.rst b/doc/admin-guide/monitoring/statistics/core-statistics.en.rst
index 78e5e047ba..1edf0796fd 100644
--- a/doc/admin-guide/monitoring/statistics/core-statistics.en.rst
+++ b/doc/admin-guide/monitoring/statistics/core-statistics.en.rst
@@ -40,6 +40,7 @@ component to which they're related.
core/network-io.en
core/ssl.en
core/ssl-cipher.en
+ core/ssl-group.en
core/http-transaction.en
core/http-response-code.en
core/http-request-method.en
diff --git a/doc/admin-guide/monitoring/statistics/core/ssl-group.en.rst b/doc/admin-guide/monitoring/statistics/core/ssl-group.en.rst
new file mode 100644
index 0000000000..4718db66f0
--- /dev/null
+++ b/doc/admin-guide/monitoring/statistics/core/ssl-group.en.rst
@@ -0,0 +1,65 @@
+.. Licensed to the Apache Software Foundation (ASF) under one
+ or more contributor license agreements. See the NOTICE file
+ distributed with this work for additional information
+ regarding copyright ownership. The ASF licenses this file
+ to you under the Apache License, Version 2.0 (the
+ "License"); you may not use this file except in compliance
+ with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing,
+ software distributed under the License is distributed on an
+ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ KIND, either express or implied. See the License for the
+ specific language governing permissions and limitations
+ under the License.
+
+.. include:: ../../../../common.defs
+
+.. _admin-stats-core-ssl-group:
+
+TLS Negotiated Group
+********************
+
+The following statistics provide individual counters for the number of TLS negotiated group with client.
+Some groups do not appear if linked TLS library doesn't support them.
+
+.. ts:stat:: global proxy.process.ssl.group.user_agent.ffdhe2048 integer integer
+ :type: counter
+
+.. ts:stat:: global proxy.process.ssl.group.user_agent.ffdhe3072 integer integer
+ :type: counter
+
+.. ts:stat:: global proxy.process.ssl.group.user_agent.ffdhe4096 integer integer
+ :type: counter
+
+.. ts:stat:: global proxy.process.ssl.group.user_agent.ffdhe6144 integer integer
+ :type: counter
+
+.. ts:stat:: global proxy.process.ssl.group.user_agent.ffdhe8192 integer integer
+ :type: counter
+
+.. ts:stat:: global proxy.process.ssl.group.user_agent.P-224 integer
+ :type: counter
+
+.. ts:stat:: global proxy.process.ssl.group.user_agent.P-256 integer
+ :type: counter
+
+.. ts:stat:: global proxy.process.ssl.group.user_agent.P-384 integer
+ :type: counter
+
+.. ts:stat:: global proxy.process.ssl.group.user_agent.P-521 integer
+ :type: counter
+
+.. ts:stat:: global proxy.process.ssl.group.user_agent.X448 integer integer
+ :type: counter
+
+.. ts:stat:: global proxy.process.ssl.group.user_agent.X25519 integer
+ :type: counter
+
+.. ts:stat:: global proxy.process.ssl.group.user_agent.X25519MLKEM768 integer
+ :type: counter
+
+.. ts:stat:: global proxy.process.ssl.group.user_agent.OTHER integer
+ :type: counter
(trafficserver) 03/03: Update changelog for rc1
Posted by cm...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
cmcfarlen pushed a commit to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/trafficserver.git
commit 0ee9fb05f2eaa0d8a4e8c021d42c8bed468dc781
Author: Chris McFarlen <ch...@mcfarlen.us>
AuthorDate: Mon Aug 4 20:34:50 2025 -0500
Update changelog for rc1
---
CHANGELOG-10.1.0 | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/CHANGELOG-10.1.0 b/CHANGELOG-10.1.0
index 66ad7a3757..9facfb0f80 100644
--- a/CHANGELOG-10.1.0
+++ b/CHANGELOG-10.1.0
@@ -383,3 +383,9 @@ Changes with Apache Traffic Server 10.1.0
#12367 - Disable read/write_vio in Http2Stream::transaction_done
#12374 - cache_promote: Bugfix, don't repurpose policies without labels
#12386 - Revert "Address HttpSM::attach_server_session crash (#12325)"
+ #12411 - Update what's new page for 10.1
+ #12415 - Docs: TLS Negotiated Group Metrics
+ #12418 - whats-new doc: proxy.config.ssl.session_cache.mode
+ #12419 - 10.1.x: proxy.config.ssl.session_cache.mode (#12414)
+ #12420 - 10.1.x: server.honor_cipher_order: Clarify documentation (#12416)
+ #12421 - 10.1.x: Remove trailing whitespace in Changes-10.1.0
(trafficserver) 01/03: whats-new doc: proxy.config.ssl.session_cache.mode (#12418)
Posted by cm...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
cmcfarlen pushed a commit to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/trafficserver.git
commit ae0e2afdff73ab4bedca532d7b883a5b3d1bb3fd
Author: Brian Neradt <br...@gmail.com>
AuthorDate: Mon Aug 4 14:15:02 2025 -0500
whats-new doc: proxy.config.ssl.session_cache.mode (#12418)
Add the new proxy.config.ssl.session_cache.mode configuration to the
whats-new.en.rst page.
(cherry picked from commit 2d34ce20ad09c4170cce0e1a607c9cf7dee99bc5)
---
doc/release-notes/whats-new.en.rst | 11 +++++++++++
1 file changed, 11 insertions(+)
diff --git a/doc/release-notes/whats-new.en.rst b/doc/release-notes/whats-new.en.rst
index af6233e2ed..f00111e551 100644
--- a/doc/release-notes/whats-new.en.rst
+++ b/doc/release-notes/whats-new.en.rst
@@ -108,6 +108,17 @@ Configuration
* Added :ts:cv:`proxy.config.http.negative_revalidating_list` to configure the
list of status codes that apply to the negative revalidating feature
+* Added :ts:cv:`proxy.config.ssl.session_cache.mode` to control TLS session caching.
+ This is intended to replace the legacy :ts:cv:`proxy.config.ssl.session_cache.enabled` and
+ ``proxy.config.ssl.session_cache.value`` configurations. The
+ :ts:cv:`proxy.config.ssl.session_cache.enabled` setting was documented but
+ never implemented, while ``proxy.config.ssl.session_cache.value`` was
+ implemented but not documented. The new :ts:cv:`proxy.config.ssl.session_cache.mode`
+ functions just like the legacy ``proxy.config.ssl.session_cache.value`` did
+ in the ealier 10.0 release. The :ts:cv:`proxy.config.ssl.session_cache.mode`
+ setting provides a clear and consistent interface going forward. For backward
+ compatibility, ``.enabled`` is now implemented, but both ``.enabled`` and
+ ``.value`` will be removed in ATS 11.x.