- [NEW] Add
TLS_[MIN|MAX]_VERSION
environment variables for setting allowed TLS version (thanks @koshatul) - [NEW] Add
TLS_CIPHER_SUITE
environment variable for setting allowed TLS cipher suites (thanks @koshatul)
- [NEW] Added support for H2C (non-TLS HTTP/2) upstream endpoints (requires
honeycomb.tls=h2c
label)
- [FIXED] Allow "overlapping" wildcard domains by always using the longest match
- [FIXED] Surpress
Can not route to '<service>'
error message for unexposed services
- [IMPROVED] Use a more descriptive user agent when contacting the Docker API
- [IMPROVED] Use a separate timeout for the healthcheck execution and the healtcheck itself
- [IMPROVED] Don't require a
honeycomb.match
label on every service (honeycomb.match.<whatever>
) is sufficient - [NEW] Add support for "insecure" upstream hosts by setting
honeycomb.tls
toinsecure
- [FIX] Generated certificates now include the issuer CA certificate in the chain (thanks @koshatul)
- [NEW] Add support for parsing the client's remote address from PROXY protocol headers (thanks @koshatul)
- [NEW] Add
CA_PATH
environment variable for specifying the location of CA bundles
- [NEW] Add Comodo and GoDaddy intermediate certificates to the CA bundle (thanks @koshatul)
- [NEW] Allow specification of static routes via environment variables
- [FIX] Send
X-Forwarded-Proto
andX-Forwarded-SSL
headers
- [NEW] Add support for multiple match labels
- [BC] Remove support for loading certificates from S3, in favour of Docker secrets
- [NEW] Add file-based certificate provider
- [FIXED] Fix PKCS#8 private key loading
- [IMPROVED] Add HSTS headers
- Initial release