routing-release

routing-release copied to clipboard

### Current behavior The `missing_content_length_header` metric is too aggressive. It is intended to catch the new, more strict behavior of Go 1.22, where empty `Content-Length` headers will be rejected. The...

peanball

[gorouter] Add property to restrict header count and size

5

We deploy gorouter behind HAProxy which limits the amount of headers and the size of each header for requests and responses. For requests towards CF this isn't much of an...

maxmoehl

Allow Route Services to be used with Web Sockets

3

### Proposed Change **As a** developer **I want** to attach a route service to my web socket app **So that** I can rate-limit it using the route service We currently...

domdom82

Gorouter: Websockets over HTTP/2 - invalid pseudo-header ":protocol"

7

## Is this a security vulnerability? no ## Issue Gorouter is not able to handle HTTP/2 Websockets requests ([RFC 8441](https://datatracker.ietf.org/doc/html/rfc8441)). ## Affected Versions latest version when http2 is enabled ##...

thomas-kaltenbach

Session Affinity not working

8

## Issue Session Affinity/Sticky sessions are not working. ## Context I have added the following section `sticky_session_cookie_names` to the manifest file which looks something like: ``` applications: - name: myapp...

sterankin

Rework gorouter error classifiers and retry logic

9

## Is this a security vulnerability? No. ## Issue The current classifiers are misleading because they seem to represent relations between different sets of errors which should be completely distinct...

maxmoehl

Proposal: Lock Down App Container Ports without Breaking TCP Routes

1

### Proposed Change App containers currently have 4 ports exposed to the diego cell's IP and local network: - Direct access to the app process's :8080 - Direct access to...

geofffranks

Gorouter does not count 404s (route not found) as requests in metrics

6

## Is this a security vulnerability? No ## Issue Gorouter ignores [unknown_route](https://github.com/cloudfoundry/gorouter/blob/main/handlers/lookup.go#L140) errors for the purpose of metrics. It does handle the request and returns a 404 to the client...

domdom82

[gorouter] Syslog writer sends empty logs

2

### Current behavior When configuring gorouter to send access logs via syslog, every log will be followed by an empty log. This is due to the access log record writing...

maxmoehl

Outdated version of the `zap` logger, with multiple wrappers within Gorouter, used in Routing Release

4

No. I couldn't find CVEs for zap. ## Issue The version of the zap logger used in `routing-release` and thus Gorouter is pinned to a version from 2016. The API...

peanball