This is a patch release that also adds improvements to the build and test process. A more complete list of changes is below. This is a pre-release version and should not be deployed in production without first understanding the current list of known issues.
This release maintains binary compatibility with the previous release (tag 0.1.1); however, this being a zero-dot version, the current ABI is not guaranteed to remain stable for future releases.
Major Bug Fixes
- Extremely fragmented messages no longer cause poor performance and possible DoS conditions (#16). Thanks Paul Spangler!
Minor Bug Fixes
- The
MaxMessageSizedirective has been renamed toWebSocketMaxMessageSize, to properly namespace it with the other module directives (#25). The prior spelling is deprecated and will be removed in the next compatibility-breaking release. - It is no longer possible to specify a
WebSocketMaxMessageSizegreater thanAPR_SIZE_MAX.
Developer Changes
- CMake builds are now supported on *nix systems. Thanks @toniotelli!
piprequirements for testing have been corrected.- There are several improvements to the test infrastructure, for developer sanity.
Other Important Changes
I am no longer testing against httpd 2.2: it's been out of support for more than two years. However, I will not intentionally remove or break code that was designed to function with httpd 2.2 until the first compatibility-breaking release.
Major Known Issues
Do not deploy mod_websocket in production without first understanding the following issues and deploying appropriate countermeasures:
- A large number of simultaneous connections can DoS the server: #17
Tested Platforms
The following httpd/platform combinations have been tested:
- httpd 2.4.29 (official package: 64-bit, mpm_event) on Ubuntu 18.04 with gcc 7.5.0
- httpd 2.4.43 (64-bit, mpm_event) on Ubuntu 18.04 with gcc 7.5.0
- httpd 2.4.43 (64-bit, mpm_winnt) on Windows 10 with VS2019/UCRT