All pull requests

Pull requests

• Docs: add traffic shaping page and drop Confluence links

  Documentation
  #13731·bryancall opened Sep 25, 2026Contributor·

  ·

  · 11.0.0

• Honor TLS handshake hook pauses on BoringSSL

  BugTLS
  #13729·maskit opened Sep 24, 2026Member·

  ·

  · 11.0.0
  6

  

• Fix SSL 2.0 version code in JA4 fingerprints

  Bugja4_fingerprintjax_fingerprint
  #13728·maskit opened Sep 23, 2026Member·

  ·

  · 11.0.0
  1

  

• Scale the txn_box multi-ramp autest tolerance to the binomial spread

  TestsTxnBox
  #13726·bryancall opened Sep 23, 2026Contributor·

  ·

  · 11.0.0
  3

  

• Include signature algorithms in JA4 fingerprints

  BugIncompatibleja4_fingerprintjax_fingerprint
  #13725·maskit opened Sep 23, 2026Member·

  ·

  · 11.0.0
  4

  

• txn_box: build the binary comparison type mask from the enum values

  BugTxnBox
  #13724·bryancall opened Sep 23, 2026Contributor·

  ·

  · 11.0.0
  3

  

• tests: drive tls_sni_groups with openssl s_client

  AuTestTLS
  #13723·maskit opened Sep 23, 2026Member·

  ·

  · 11.0.0
  17

  

• Hex-encode non-alphanumeric ALPN bytes in JA4 fingerprints

  Bugja4_fingerprintjax_fingerprint
  #13719·maskit opened Sep 22, 2026Member·

  ·

  · 11.0.0
  7

  

• Fix BoringSSL dual-certificate default selection

  BugTLS
  #13712·moonchen opened Sep 22, 2026Contributor·

  ·
  9

  

• feat(access_control): Implement scope validation for per-resource authorization

  access_controlIncompatibleNew Feature
  #13708·eveniota opened Sep 19, 2026·

  ·

  · 11.0.0
  1

  35

  

• hrw4u: remove the bare operator statement that never compiled

  Bughrw4u
  #13705·masaori335 opened Sep 18, 2026Contributor·

  ·

  · 11.0.0
  1

  1

  

• Fix HTTP flow control policy reload

  BugConfigurationHTTP/2
  #13695·bneradt opened Sep 15, 2026Contributor·

  ·

  · 11.0.0
  1

  1

  

• Document HTTP/2 to origin configuration

  DocumentationHTTP/2
  #13693·bneradt opened Sep 15, 2026Contributor·

  ·

  · 11.0.0
  4

  

• Normalize bare carriage returns in header line endings

  BugHTTP/1.1
  #13691·RajaMuhammadAwais opened Sep 15, 2026Contributor·

  ·

  · 11.0.0
  1

  

• Regex: hold the JIT stack in a pthread key and inherit the shared match context

  AuTestBackportBugCoreThreads
  #13683·bryancall opened Sep 15, 2026Contributor·

  ·

  · 11.0.0
  1

  39

  

• hrw4u: enforce sandbox policy on value functions

  Bughrw4u
  #13674·masaori335 opened Sep 14, 2026Contributor·

  ·

  · 11.0.0
  6

  

• benchmark: measure Regex time and heap allocations

  CoreTests
  #13670·bryancall opened Sep 12, 2026Contributor·

  ·

  · 11.0.0
  34

  

• Add origin server tcp_info logging

  LoggingPerformance
  #13667·moonchen opened Sep 10, 2026Contributor·

  ·

  · 11.0.0
  29

  

• hrw4u: record spans, comments and operand forms in the AST

  Cleanuphrw4u
  #13665·masaori335 opened Sep 10, 2026Contributor·

  ·

  · 11.0.0
  15

  

• rate_limit: reject unknown YAML configuration keys

  ConfigurationIncompatiblePluginsrate_limitWIP
  #13657·moonchen opened Sep 9, 2026Contributor·

  ·

  · 11.0.0
  1

  12

  

• Replace YAPF with Ruff for Python formatting

  BuildCleanup
  #13643·bneradt opened Sep 4, 2026Contributor·

  ·

  · 11.0.0
  1

  

• Credit discarded closed-stream H2 DATA to the connection window

  AuTestBugHTTP/2
  #13641·bneradt opened Sep 3, 2026Contributor·

  ·

  · 11.0.0
  1

  8

  

• QPACK: free arena strings in reverse allocation order

  HTTP/3Leak
  #13636·brbzull0 opened Sep 3, 2026Contributor·

  ·

  · 11.0.0
  34

  

• Traffic ctl plugin list format

  BugJSONRPCPlugins
  #13626·brbzull0 opened Sep 3, 2026Contributor·

  ·

  · 11.0.0
  9

  

• Reject invalid QPACK static indexes

  BugHTTP/3
  #13621·bneradt opened Sep 2, 2026Contributor·

  ·

  · 11.0.0
  25