Release esb3024-1.22.0

Build date

2025-10-23

Type: production

This release has been tested with the following product versions:

NEW: Add support for UTF-8 to configuration [ESB3024-489]
NEW: Add classifier type for HTTP headers [ESB3024-1177]
NEW: Make Lua hmac_sha256 function return a binary string [ESB3024-1245]
NEW: Limit which headers are forwarded to a host [ESB3024-1387]
NEW: Reload GeoIP databases without restarting the router service [ESB3024-1429]
NEW: [ANSSI-BP-028] System Settings - Network Configuration and Firewalls [ESB3024-1450]
NEW: [ANSSI-BP-028] System Settings - SELinux [ESB3024-1452]
NEW: [ANSSI-BP-028] Services - SSH Server [ESB3024-1456]
NEW: Improved classifiers [ESB3024-1492]
NEW: Improved Selection Input Rest API [ESB3024-1511]
FIXED: trustedProxies does not support CIDR [ESB3024-1136]
FIXED: Some valid configurations are rejected [ESB3024-1191]
FIXED: Lua print() does not behave according to the documentation [ESB3024-1248]
FIXED: Session translation function only applies to initial sessions [ESB3024-1379]
FIXED: It is not possible to change the configuration port [ESB3024-1381]
FIXED: Invalid metrics endpoint response [ESB3024-1388]
FIXED: Slow CDN response can prevent manifest from being downloaded [ESB3024-1424]
FIXED: CORS error in select input handler response [ESB3024-1426]
FIXED: Expired selection input entries are not always deleted [ESB3024-1485]
FIXED: The Director blocks when loading messages from Kafka [ESB3024-1490]

Deprecated since ESB3024-1.18.0:

Lua function epochToTime has been deprecated in favor of epoch_to_time.
Lua function timeToEpoch has been deprecated in favor of time_to_epoch.
The session proxy has been deprecated. Its functionality is replaced by the new “Send HTTP requests from Lua code” function.

See the current system requirements in Getting Started.

When configured to use TLS, acd-telegraf-metrics-database might log the following error message: http: TLS handshake error from <client ip>: client sent an HTTP request to an HTTPS server when receiving metrics from caches even though the Telegraf agents are configured to use TLS. The Telegraf logs on the caches do not show any errors related to this. However, the data is still received over TLS and stored correctly by acd-telegraf-metrics-database. The issue seemingly resolved itself during investigation and is not reproducible. Current hypothesis is a logging bug in Telegraf.
The Telegraf metrics agent might not be able to read all relevant network interface data on ESB2001 releases older than 3.6.2. The predictive load balancing function host_has_bw() and the health check function interfaces_online() might therefore not work as expected.
- The recommended workaround for host_has_bw() is to use host_has_bw_custom(), documented in Built-in Lua functions. host_has_bw_custom() accepts a numeric argument for the host’s network interface capacity which can be used if the data supplied by the Telegraf metrics agents do not contain this information.
- It is not recommended to use interfaces_online() for ESB2001 instances until they are updated to 3.6.2 or later.