Sun Java System Web Proxy Server 4.0.11 Release Notes Sun Microsystems, Inc. 4150 Network Circle Santa Clara, CA 95054 U.S.A.
Copyright 2009 Sun Microsystems, Inc. 4150 Network Circle, Santa Clara, CA 95054 U.S.A. All rights reserved. Sun Microsystems, Inc. has intellectual property rights relating to technology embodied in the product that is described in this document. In particular, and without limitation, these intellectual property rights may include one or more U.S. patents or pending patent applications in the U.S. and in other countries. U.S. Government Rights – Commercial software.
Contents Release Notes for Sun Java System Web Proxy Server .....................................................................5 Enhancements in Sun Java System Web Proxy Server Releases .......................................................5 Performance Tuning, Sizing, and Scaling guide ..........................................................................5 Transparent Proxy ..........................................................................................................................
Contents Issues Resolved in 4.0.11 ............................................................................................................. 15 Issues Resolved in 4.0.10 ............................................................................................................. 17 Issues Resolved in 4.0.9 ................................................................................................................ 18 Issues Resolved in 4.0.8 ..........................................................
Release Notes for Sun Java System Web Proxy Server These release notes contain important information available at the time of the release of the Sun JavaTM System Web Proxy Server 4.0.11 product, hereafter referred to as Proxy Server 4.0.11 or just proxy server. Platform summary and known problems are addressed here. Please read this document and associated documents before you begin using the Sun product.
Enhancements in Sun Java System Web Proxy Server Releases Transparent Proxy Proxy Server 4.0 supports transparent proxy for HTTP/1.1 connections. Transparent proxying involves intercepting and processing web requests by using the proxy server, without the knowledge or control of clients. For example, a router for a local network is configured to redirect incoming TCP connections to the local port, in which the proxy server is active.
Enhancements in Sun Java System Web Proxy Server Releases ■ Support and training offerings This feature is supported only on Solaris SPARC, x86 and Linux platforms. To avail this feature on Solaris, you need to install SUNWservicetagr and SUNWservicetagu packages in SPARC and x86 systems. To avail this feature on Linux, you should install the sun-servicetag-1.0.0-1.0.i386.rpm.
Enhancements in Sun Java System Web Proxy Server Releases DNS fn="dns-lookup" server="170.168.10.3" ... In the following example, you can add multiple DNS server IPs to dns-lookup-init, and it will be used in round robin model. In this scenario, do not add DNS server IP to dns-lookup. If DNS server parameters are added to both dns-lookup and dns-lookup-init, the dns-lookup argument will take the precedence. ...
Enhancements in Sun Java System Web Proxy Server Releases TABLE 1 magnus.conf Directives Parameters Valid Values Description ACLCacheMax 1 Specify a configurable limit for the ACL cache. This directive restricts the size of ACL cache, thus removing old entries from the cache which otherwise contributes significantly to memory usage. FtpPoolSize 1 – 65536 Specify the size of the FTP connection pool. The default value is 256.
Enhancements in Sun Java System Web Proxy Server Releases Server: Sun-Java-System-Web-Proxy-Server/4.0 Date: Fri, 26 Oct 2007 08:15:30 GMT Connection: close In the following example, the server returns the value 404. Connection closed by foreign host. bash-2.03$ telnet localhost 8088 Trying 172.9.10.1... Connected to localhost. Escape character is ’^]’. PURGE http://foo.com/ HTTP/1.0 HTTP/1.1 404 Not Found Server: Sun-Java-System-Web-Proxy-Server/4.
Platform Summary Enhanced Hardware Accelerator Encryption Support Proxy Server 4.0.11 provides hardware accelerator support for SunTM Crypto Accelerator 6000, a cryptographic accelerator board that enhances the performance of SSL on the Proxy Server. Platform Summary This section provides information about the supported platform components for Proxy Server 4.0.11.
Hardware and Software Requirements TABLE 2 Platform Requirements for Proxy Server 4.0.11 (Continued) Microsoft Windows 2000 Server Service Pack 4 256 Mbytes 512 Mbytes or higher 512 Mbytes or higher Microsoft Windows 2000 Advanced Server 256 Mbytes 512 Mbytes or higher 512 Mbytes or higher Microsoft Windows 2003 Enterprise Edition 256 Mbytes 512 Mbytes or higher 512 Mbytes or higher HP-UX 11i (11.
Required Patches Required Patches It is recommended that you update your operating system with the latest applicable patches. Required patches are listed by platform. Solaris Patches The following is the required patch level for Proxy Server 4.0.11 in Solaris SPARC and x86.
Impact of US DST Changes 2007 HP-UX Patches ■ ■ ■ ■ ■ ■ ■ ■ ■ HP-UX 11i Operating Environment Component-B.11.11.0412 Required patch bundle for 11i, June 2003–B.11.11.0306.1 Gold Base patches for HP-UX 11i, December 2006–B.11.11.0612.459 Gold Application patches for HP-UX 11i, December 2006–B.11.11.0612.459 Pthread enhancement and fixes-PHCO_29109 Pthread.h fix and new enhancement-PHCO_27633 libc manpage cumulative patch-PHCO_29328 libc cumulative patch-PHCO_29495 Java Out-of-Box-JAVAOOB, 1.0.00.
Resolved Issues Accessing the Documentation The Sun Java System Web Proxy Server 4.0.11 documentation is provided in a number of ways: ■ Manuals – You can view the Proxy Server 4.0.11 manuals and release notes in HTML and in printable PDF formats. ■ Online help – Click the Help button in the graphical interface to launch a context-sensitive help window.
Resolved Issues TABLE 4 16 Issues Resolved in Sun Java System Web Proxy Server 4.0.11 ID Summary 6835885 The ftp subsystem of Proxy Server 4.0 has a bug which leads to memory corruption and server crash. 6837779 A memory leak is observed in Proxy Sever 4.0 ftp subsystem while accessing directories through ftp. 6842576 The caching subsystem of Proxy Server 4.0 has a bug which leads to memory corruption and returns incomplete response headers when served from the cache. 6844188 Proxy Server 4.
Resolved Issues TABLE 4 Issues Resolved in Sun Java System Web Proxy Server 4.0.11 (Continued) 6808135 Proxy Server 4.0.9 has a typo issue while accessing "Server Config Information" panel in both Admin GUI and CLI. 6825292 Proxy Server 4.0 should allow Admin GUI to enable or disable both types of DNS cache; ip-dns-cache-init and host-dns-cache-init. 6840526 Proxy Server 4.0 has potential problems with parray code.
Resolved Issues TABLE 5 Issues Resolved in Sun Java System Web Proxy Server 4.0.10 (Continued) ID Summary 6796045 In Proxy Server's admin interface, the DNS cache information in Monitoring functionality should be updated appropriately. 6754044 Upgrading Proxy Server on a Windows box fails, as only a single installation of Proxy Server 4.0 is allowed on Windows box. 6781259 The Java version information on the Proxy Server installation wizard is not updated.
Resolved Issues TABLE 6 Issues Resolved in Sun Java System Web Proxy Server 4.0.9 (Continued) ID Summary 6725741 Disabling statistics or profiling functionality in Proxy Server 4.0 Admin interface, does not function properly. 6727215 In Proxy Server 4.0, large negative values are seen for xfer-time in access log. 6728447 In Proxy Server 4.0.7, digest authentication used to process an ACL fails when the URI contains a query string with backslashes. 6735228 In Proxy Server 4.
Resolved Issues TABLE 7 Issues Resolved in Sun Java System Web Proxy Server 4.0.8 ID Summary 6648112 Proxy Server 4.0.6 and 4.0.7 does not provide a way to disable EPSV FTP Transfer Mode. 6655221 Increase the maximum timeout for idle connections on the Proxy Socks Server 4.x. 6660265 flexanlg/dpstats log analyzer is unable to deal with large access log files. 6660814 In Proxy Server 4.0, the block/fwd IP character of the most specific object is not enforced correctly.
Resolved Issues TABLE 8 Issues Resolved in Sun Java System Web Proxy Server 4.0.7 (Continued) ID Summary 6261401 URL filter files should be created under config directory instead of the conf_bk directory. 6590476 FTP subsystem is not closing the old connections appropriately. 6591980 The ownership of the URL filter is not set to that of the server instance user. 6592079 Backup files are getting created with wrong ownership.
Resolved Issues Issues Resolved in 4.0.6 The following table lists the issues resolved in Sun Java System Web Proxy Server 4.0.6 TABLE 9 22 Issues Resolved in Sun Java System Web Proxy Server 4.0.6 ID Summary 6224535 Timeout functionality does not work. 6460215 Cannot connect to an IPv6 enabled web site when connecting through proxy server. 6478413 Uninstalling a proxy server instance does not result in the removal of the files corresponding to the instance from the alias and httpacl directories.
Resolved Issues TABLE 9 Issues Resolved in Sun Java System Web Proxy Server 4.0.6 (Continued) ID Summary 6560432 The Proxy Server 4.0.6 Administration Guide and the online help are updated to include description for Source Port Number. 6562122 For a SSL proxy instance an incorrect password entry does not get written to the errors file. 6562165 Proxy Server 4.0.6 Administration Guide is updated to remove references to the file cache functionality. 6562585 Proxy Server 4.0.
Resolved Issues TABLE 9 Issues Resolved in Sun Java System Web Proxy Server 4.0.6 (Continued) ID Summary 6576044 Proxy Server 4.0.6 Configuration File Reference is updated to document the newly added SOCKS configuration parameter SOCKS5_UDPASSOC_TIMEOUT. 6576050 Proxy Server 4.0.6 Online Help is updated to specify the effect of HTTP client's retry functionality. 6576065 Proxy Server 4.0.
Resolved Issues TABLE 10 Issues Resolved in Sun Java System Web Proxy Server 4.0.5 (Continued) ID Summary 6482102 Files cannot be retrieved from certain FTP sites through web browsers when connecting through the proxy server. 6500200 Expired page is not displayed in the administration interface. 6500224 FTP through SOCKS routing does not work. 6500232 Proxy Server 4.0.5 Online Help is updated to mention Cache in the help page for the Monitoring Server Status page.
Resolved Issues TABLE 10 Issues Resolved in Sun Java System Web Proxy Server 4.0.5 (Continued) ID Summary 6537410 Proxy server sometimes waits to receive a new http request until the web server closes the connection. 6537736 Proxy server has a domain buffer overflow vulnerability. The problem specifically exists in the handling of domain name address types within the sockd daemon. 6537745 Proxy server has a domain buffer overflow vulnerability.
Resolved Issues TABLE 11 Issues Resolved in Sun Java System Web Proxy Server 4.0.4 (Continued) ID Summary 6233086 For client credentials forwarding with multi-byte user name, validation check needs to be added. 6243358 A deleted user still appears as part of a group. 6245972 User's permission set through the Administer Access Control page does not get implemented.
Resolved Issues TABLE 11 28 Issues Resolved in Sun Java System Web Proxy Server 4.0.4 (Continued) ID Summary 6371618 Can not change Compression Level to NONE. Documentation should state what to select as the compression level. 6380736 Control does not transfer to Schedule GC page when Explicit GC is selected in the Set GC Preferences page. 6382393 Proxy server is unable to perform FTP uploads. 6382692 During migration, the format string Req->vars.pauth-user in the 3.6 obj.
Resolved Issues TABLE 11 Issues Resolved in Sun Java System Web Proxy Server 4.0.4 (Continued) ID Summary 6425601 The automatic garbage collection does not work in certain conditions. 6425752 There are duplicate headers in a 304 response from the cache. 6426543 Cache iterator leaks memory. 6427137 Proxy server transmits micro version number in responses. 6433285 Some of the proxy core error messages are not localized. 6433776 .sects files are not created when the command cbuild is executed.
Resolved Issues TABLE 11 30 Issues Resolved in Sun Java System Web Proxy Server 4.0.4 (Continued) ID Summary 6446098 On HP-UX, there is an internal error in View URL Database page. 6446349 On HP-UX, stress test results in mmap() failure. 6446933 In the Proxy Server 4.0.4 Configuration File Reference, references to docs directory are removed. 6447423 Proxy server 4.0 leaks memory because the daemon structures are not freed properly. 6447427 Proxy server 4.
Resolved Issues TABLE 11 Issues Resolved in Sun Java System Web Proxy Server 4.0.4 (Continued) ID Summary 6485988 In the Proxy Server 4.0.4 Configuration File Reference, the section on Send-Error in chapter 5 is updated to add a note stating that send-error does not work for Web Server HTTP response. 6505480 In a standalone installation of proxy server on HP-UX, installation fails on HP-UX 11.11. 6519072 In the installer for a standalone installation of proxy server 4.0.
Resolved Issues TABLE 12 32 Issues Resolved in Sun Java System Web Proxy Server 4.0.3 (Continued) ID Summary 6285076 SOCKS server cannot handle both LDAP & password file for user authentication, when both the methods are configured. 6285183 PR_MemUnmap() call results in error in Windows. 6285791 SOCKS server start command line issue for JavaES 4 is resolved in this release, but existing instances created in JavaES 4 installation will have the problem even after upgrading to the latest 4.0.
Resolved Issues TABLE 12 Issues Resolved in Sun Java System Web Proxy Server 4.0.3 (Continued) ID Summary 6313960 In the Proxy Server 4.0.2 Administration Guide, in Chapter 12, the section “To create a batch update” includes step 10 that refers to a “Timing section”. This step is an error. The Set Cache Batch Updates page does not have a Timing section. 6316289 In the Proxy Server 4.0.
Resolved Issues TABLE 12 34 Issues Resolved in Sun Java System Web Proxy Server 4.0.3 (Continued) ID Summary 6373101 Administration server creates invalid parameter for ssl-client-config. 6373622 cache-disable SAF is not documented. 6374279 Response to webdav OPTIONS method not according to RFC2518. 6376065 max-uncheck function does not work as expected. 6376153 Proxy server 4.0.2 does not update cache for ftp/gopher protocols.
Resolved Issues Issues Resolved in 4.0.2 The following table lists the issues resolved in Sun Java System Web Proxy Server 4.0.2 TABLE 13 Issues Resolved in Sun Java System Web Proxy Server 4.0.2 ID Summary 5097664 ssl-tunnel-timeout parameter does not work on Windows. 6225025 ftp-listing-width parameter does not work correctly. 6251805 Changes to archive logs results in a crash. 6262277 Changing the minimum timeout value for ICP from 400 to 50. 6292690 In Proxy Server 4, while using IE 6.
Resolved Issues Issues Resolved in 4.0.1 The following table lists the issues resolved in Sun Java System Web Proxy Server 4.0.1. TABLE 14 36 Issues Resolved in Sun Java System Web Proxy Server 4.0.1 ID Summary 2126143 The same regular expression does not work in URL Filters, but works in Access Control and Routing. 2126380 Memory leak in the ICP process of the proxy server. 6231283 The administration server on Linux Red Hat Advanced Server 3.0, fails to startup.
Known Issues TABLE 14 Issues Resolved in Sun Java System Web Proxy Server 4.0.1 (Continued) 6274186 Unable to delete a server instance. 6276398 Remove the localized online help from the base workspace. 6285078 Entry for authentication failure of SOCKS request missing from log files. 6285779 Unable to start the proxy server instance if the serverID has a white space. 6285788 SOCKS server crashes when authentication is used. 6289242 HTTP smuggling in Proxy Server 4.
Known Issues TABLE 15 Known Issues in Administration 6212701 (Continued) Conflicting error message is displayed when server instance fails to start. The chances of occurrence of this conflicting error message is minimal as the chances of the administration interface writing wrong information in the configuration file is minimal. It can only occur if the user manually writes wrong information into the configuration file.
Known Issues TABLE 16 6229823 Known Issues in Caching (Continued) When a new partition is added a default section s0.0 is also created irrespective of the partition size. Warning messages are logged in the errors file. Workaround Use the cbuild utility to add the new partition or delete the s0.0 folder under the new cache partition, and restart the proxy server. The error messages can be ignored. 6619620 Doc RFE: Proxy Server should not be used with Network Cache Accelerator (NCA).
Known Issues TABLE 18 Known Issues in Internationalization ID Summary 6233080 The Disable Proxying option does not work for the URL with multibyte data (URL encoded) when routing is set through another proxy server. 6233090 A URL with multibyte data (URL encoded) cannot be mapped. 6253844 Proxy server online help does not support the language zh-cn.
How to Report Problems and Provide Feedback TABLE 19 Known Issues in Localization 6828246 (Continued) The Korean characters are not displayed in the Proxy Server installer on RHEL 5.2. SOCKS The following table lists the known issues related to SOCKS. TABLE 20 Known Issues in SOCKS ID Summary 6245453 The Quench Updates feature is shown in the GUI and documented for the Server Manager > SOCKS > Configure SOCKS v5 page, but the feature is not implemented.
Searching Sun Product Documentation Additional Sun Resources Useful Sun Java System information can be found at the following locations: ■ Documentation for Sun Java System Web Proxy Server 4.0.11 http://docs.sun.com/coll/1311.11 ■ Sun Software Products and Service http://www.sun.com/software ■ Sun Developer Information http://developers.sun.com/ ■ Sun Developer Support Services http://developers.sun.com/prodtech/support/ ■ Software Support Services http://www.sun.