g3proxy-v1.10.4

This is a bug fix release for v1.10 LTS branch.

• correctly handle ICAP null-body response
• fix ICAP connection state when reading modified SMTP/IMAP message
• fix chunked encoding of H2 body stream when sending to ICAP server
• keep control socket open on accept error

g3proxy-v1.10.3

This is a bug fix release for v1.10 LTS branch.

• fix read of trailer for chunked FTP over HTTP upload
• fix idle check in udp copy and udp relay task
• respect Content-Length header when sending ICAP adapted body

g3proxy-v1.10.2

This is a bug fix release for v1.10 LTS branch.

• fix handle of ICAP preview data in HTTP/2 interception
• fix panic when sending H2 stream data if peer gone
• do not send Allow-204 in ICAP preview request

g3proxy-v1.10.1

This is a bug fix release for v1.10 LTS branch.

• fix socket usage on Windows
• set expire info for udp tasks with socks5 proxy peers
• send ppv2 header on http forward connections in divert_tcp escaper
• fix match of TLS ticker name in decryption
• fix global datagram limiter
• fix handle of ICAP Preview data in HTTP/1 interception
• fix DELETE in FTP over HTTP task
• support chunked upload in FTP over HTTP task

g3proxy-v1.10.0

Feature Highlights since v1.8

ICAP

• Support ICAP reqmod service for:
  • H1 CONENCT and Upgrade request
  • H2 (Extended) CONNECT request
  • SMTP DATA Command
  • IMAP APPEND Command
• Support ICAP over TLS

TLS Interception

• Upgraded cert generation protocol to allow to mimic the original cert, this will require g3fcgen >= 0.8
• Allow to use custom TLS client config at user-site level, which can be used to enable mTLS
• Support TLCP protocol

Traffic Redirection

• Added divert_tcp escaper to divert traffic to third party servers
• Added stream_detour feature to allow third party servers to intercept connected streams remotely
• Allow to set inspect policy for each supported protocols separately, which can b based on domain rules
• Added comply_audit escaper to allow select auditors based route rules

Misc

• Support compilation on Windows
• Support Redis over TLS
• Improved capability with non-RFC-compliant socks5 server implementations
• Added support for Socks5 over TLS

See g3proxy/CHANGELOG for detailed changelogs.

Pre-Build packages can be found at cloudsmith g3-stable repo.