Index mutationum

Editum die 15 Iulii 2026

• +Addit metadata ad libitum secundum normas pro memoria intermedia, procuratore et compendio responsi
• +Comprobat imagines status authenticas sine intermissione recargari et revocari, integritatem examinari atque statum post initium novum permanere
• +Addit documenta reproducibilia subsistematum FIPS atque latam munitionem temporis exsecutionis nativi

Editum die 14 Iulii 2026

• +Addit terminationem conexuum intra tempus definitum sine abruptione atque transitionem sine intermissione, statu promptitudinis comprobato
• +Addit strictam activationem receptaculorum systemd cum exacta validatione receptaculorum auscultantium hereditariorum
• +Munitionem analysatoris HTTP/1 perficit et custodiam ministeriorum in recessu corroborat

Editum die 13 Iulii 2026

• +Addit figuras securitatis responsionum HTTP ad libitum adhibendas atque CORS quod contextum petitionis rite comprobat
• +Stabilit exempla consiliorum Wasm quae exsequi possunt et probationes ad editionem requisitas
• +Firmat capita identitatis transmissae, interpretationem capitum et praecepta de petitionibus repetendis cum fines capacitatis attinguntur

Privatus die 12 Iulii 2026

• +Runnable migrationis exempla addit pro iRules, OpenResty, HAProxy/SPOE, et VCL-style consilium jobs
• +Adiungit limitatum ACME onerariam, ARI scheduling, diagnosticos vitae, et verba explicita acceptatione
• +ACME obdurabiles obdurat rationem ac libellum transactionum, limites repositionis ac publicationem snapshot

Editum die XI mensis Iulii anno MMXXVI

• +Initiat opt-in WASI Preview 1 terminum cum explicitis donis horologiae et randomizationis et importationibus denegandis per praesumptionem
• +Restituit GeoIP clientis fiduciae et supportat bases dati CIRCL combinatas Country et ASN
• +Confortat stream SSRF et copiandi, instantanea authenticatione, TLS, PHP-FPM, staticum servitium, et limites resourcium Wasm

Die 10 Iulii 2026 editum

• +Praevisionem ABI Proxy-Wasm ad libitum addit cum explicita validatione spatii nominum vocationum hospitis
• +Vocationes praevisionis non sustentatas certo modo reicit antequam ad servitorem superiorem perveniant
• +Itinerationem strictam secundum hospitem, admissionem finitam, fidem configurationis, repositorium cache, GeoIP et compressionem corroborat

Editum die 9 Iulii 2026

• +Addit expressas identitates modulorum WebAssembly compositorum per plugin digest, ABI, superficiem facultatum hook et versionem Fluxheim
• +Addit rationes admissionis cache-hook pro singulis vhost sub process-wide cache-hook ceiling
• +Amplificat metricas Wasm finitas, visibilitatem admin status et probationem regressionis cross-family live-chain

Edita die 8 Iulii 2026

• +Addit vocationes host finitas componentium cache-key pro variantibus generis machinae mobilis et desktop
• +Addit TTL, tag et metadata stored-header fixa pro cache-store sine arbitraria mutatione response-header
• +Addit probationem live-listener pro segregatione variantium, range-cache slices, exspiratione TTL et limitibus metadata fail-closed

Editum die 7 Iulii 2026

• +Addit live native HTTP/1 Wasm hooks cache-lookup et cache-store sub preview ABI limitata fluxheim_policy_v1
• +Addit exitus cache pro continue, pass, bypass, skip-store et deny sine ostensione crudorum cache keys, TTL, tags aut metadata servata
• +Separat limites admissionis cache-hook et servat aggregationem cache-store secundum regulam severissima optio vincit

Editum die 6 Iulii 2026

• +Addit vivos native HTTP/1 route-decision Wasm hooks sub limitato fluxheim_policy_v1 preview ABI
• +Addit electionem symbolicam ramorum configuratorum pro itineribus canary et mirror sine accessu upstream dynamico aut shadow-target
• +Servat exsecutionem Fluxheim ACL, rate-limit, concurrency, body-limit, redirect et header-policy post electionem itineris

Editum die 5 Iulii 2026

• +Addit vivos native HTTP/1 Wasm hooks pro request-header et response-header ad vhost et route nexus
• +ABI header-hook symbolicam servat cum mutationibus syntheticis permissis, non cum accessu crudo ad headers aut body
• +Applicat vhost-level Wasm header-hooks et fallback response header policy ad responsa PHP-FPM fallback

Editum die 4 Iulii 2026

• +Coniungit live native HTTP/1 access-decision hooks cum ordine prioritatis, compositione first-deny-wins et more fail-closed
• +Cogit limites admissionis executionis per processum, plugin et attachment

Editum die 3 Iulii 2026

• +Addit crate workspace optionalem fluxheim-wasm pro linea Wasm sandbox
• +feature gates wasm, wasm-proxy-abi et wasm-wasi praedefinite clausae sunt et cum privacy-mode componi non possunt
• +Tabulas plugin Wasm solum ex radicibus absolutis probatis onerat; symlinks, tabulae non regulares et moduli nimis magni reiciuntur
• +Manifesta typata pluginorum Wasm ABI, phasin, fail-mode, viam et limites sandbox ante onerationem probant
• +Addit executionem Wasmtime limitatam terminis fuel, memoriae, tabulae, instantiae, compile-timeout, compile-worker et watchdog per invocationem
• +Addit veram probationem smoke pro Wasm sandbox: executionem felicem, traps, recusationem table-growth et reiectionem manifest fail-open non tuti

Dimissus die 30 mensis Iunii anno 2026

• +Stratum temporarium procuratoris nativi in native_proxy renominat atque veterem reexportationem convenientiae procuratoris e compilationibus ordinariis removet.
• +DTO petitionum eventuumque administrativorum distributoris oneris in crate fluxheim-load-balancer transfert.
• +Accommodatores radicales inertes aetatis Pingora et codicem obsoletum probationum temporis exsecutionis, iam impeditum neque a compilationibus ordinariis adhibitum, delet.
• +Repositorium configurationis procuratoris nativi consolidat, ut renovationes eandem imaginem reficiant qua viae administratoriae cache et distributoris oneris utuntur.
• +Probationem regressionis redundantiae corporis segmentati nativi HTTP/1 addit et imagines probationum observabilitatis ad notas determinatas alligat.

Dimissus die 30 mensis Iunii anno 2026

• +Servat normales runtime in Fluxheim-owned listener, TLS, HTTP/1, HTTP/2, WebSocket, cache, load-balancer, admin, metrics, stream, et gressus background service
• +Movet auth, metrics, OpenBao cache, discovery, load-balancer crustulum, et TLS private-key secret buffers versus sanitization crate.
• +TeCH06X fallback fugat obdurat, indigena disk-cache purgant densis, same-key disk-cache mutatio serialization, et indigena HTTP/2 upstream authority pertractatio
• +peer-fill shared-secret addit firmamentum et requirit pro non-loopback plaintext peer-fill URLs
• +Extenditur privacy, observability, WordPress, load-balancer, smoke-image, randomized-port, et release-gate test coverage pro linea stabilization

Editum die 29 Iunii 2026

• +Removet finalem Pingora runtime/listener/TLS adapter crates a normali Fluxheim build profiles
• +Nativum HTTP/1 et HTTP/2 procuratorem runtime servat ut semitam normalem ad sustentationem route, cache, load-balancer, TLS, WebSocket, admin, et figurarum metrics
• +Fila nativi admin cache purgant, stale disci-cache purgant, objectum cache speculam, et vivunt load-balancer stats/mutationes tractores ad manubria Fluxheim-owned runtime
• +Renovationes dependency-policy portas emittunt tam defaltam normalem, plenam, ora, PHP, secretum, RPM, fontem, et continens aedificationes deficiunt si Pingora crates componunt.
• +Praevius indigena admin cache obdurat et cum adaptatione exercitus normalizato purgat, praevia regex-route, stale seram fuga purgant, fail-closed statum config vivunt, et contextus formas route-proxy aedificant.

Editum die 29 Iunii 2026

• +Adiungit patrium proxy-cache pari memoriae, orbis filesystem, storage-bin, disci encryptatum, OpenBao Transit, et memory+disk tiering.
• +Sustinet Vary et request-header variantes, vetus servientes, crines cella, cache segmentum, peer-fill, et originis tutelae rationes
• +Obdurat cache admissio pro Authorization, HEAD praetermittit, fluminis Age nudans, arithmeticam exitu repressit, et only-if-cached aberrat.
• +Cache nativi adiungit pari purgationem memoriae et indices orbis terrarum plus exacte, mole, praepositione, tag, wildcard, route-scope, et alvum purgat.
• +Cache nativam observationem adiungit pro calculis procuratoribus, memoria/macularum orbis, histogrammata cella speculativa, et spatio IDs traceparent regenerata.

Editum die 28 Iunii 2026

• +Adds native runtime dispatch for proxy, admin, metrics, stream, UDP, and load-balancer refresh tasks
• +Adds metrics token-file loading with zeroizing storage and constant-time bearer-token checks
• +Adds native HTTP/1 proxy runtime startup for plaintext, rustls, OpenSSL, and trusted downstream PROXY protocol listeners
• +Conexus downstream HTTP/2 TLS delectos ad adaptatorem nativum multi-stream dirigit
• +Firmat upgrades WebSocket nativos, errores HTTP/2 intra-stream, rate-limit sharding et conservationem zeroizing corporis petitionis

Editum die 24 Iunii 2026

• +Moves cache request policy and local-static cache keys into the Pingora-independent fluxheim-cache crate
• +Moves PHP-FPM parsing, params, path mapping, static offload, error-page policy, and keep-alive pooling into fluxheim-php-fpm
• +Adds native memory local-static cache adapters for route and vhost static-web serving
• +Adds native upstream PROXY protocol v1/v2 send support and native Host router construction
• +Adds native runtime manifest and launch-plan evidence for services, listeners, background tasks, and policy rows

Editum die 23 Iunii 2026

• +Movet plaintext upstream HTTP/2 forwarding in the HTTP/1 nativum proxy semita pro h2c/prior-knowledge origins
• +Addit pooled nativum upstream H2 connections cum terminatum stream capacity et methodus-tuta retry post pre-responsum pooled-handle failure
• +Sustinet TLS ALPN-negotiated upstream HTTP/2 cum existing upstream TLS/SNI/CA consilium
• +Expressa, debilis-per default h2c lapsus Upgrade addit pro originibus plaintext http1-and-http2
• +Terminat nativum upstream H2 handshakes, stream-slot waits, keepalive pings, et setup timeouts

Editum die 23 Iunii 2026

• +Movet inherited globale/vhost compressio consilium in the HTTP/1 nativum proxy et iter proxy
• +Coniungit root/vhost/iter header-consilium inheritance in nativum iter proxy construction
• +Movet tutum forwarded-client-IP ownership, trusted-chain append, regex rewrites, ACLs, concurrency, et rate limites onto the nativum semita
• +Addit nativum ACME HTTP-01 challenge serviens, traffic mirroring, auth-petitio, et iter-scoped gRPC validation

Editum die 21 Iunii 2026

• +Moves route-level native response compression onto the HTTP/1 route proxy through fluxheim-compression
• +Moves proxy.error_pages onto native HTTP/1 proxy fallback paginae backed by fluxheim-web

Editum die 21 Iunii 2026

• +Adds native HTTP/1 route static-web serving backed by fluxheim-web
• +Adds route request-header mutation, response rewrites, static upstream round-robin, and static upstream weights to the native route proxy

Editum die 21 Iunii 2026

• +Adds native route redirect actions with safe {uri}, {path}, and {query} expansion
• +Moves route body limits and response-header overlays onto native HTTP/1 route proxy responses

Editum die 21 Iunii 2026

• +Adds native HTTP/1 route-proxy execution for exact, prefix, and fallback routes with method filters and safe rewrite handling
• +Adds native-http1-proxy-candidate ordines runtime cutover testimonium reliqua convenientiae blockers sunt expressa

Editum die 20 Iunii 2026

• +Promovet the HTTP/2 nativum downstream safety preview to cutover-ready post focused parity tests
• +Facit the representative runtime nativum cutover report blocker-free pro simple HTTP/1, HTTP/2, admin, metrica, stream, et UDP configurations

Editum die 20 Iunii 2026

• +Cuts stream and UDP proxy service startup over to Fluxheim-owned native task boundaries
• +Adds cancellation-safe native shutdown waiting and abort-on-cancel background task joins

Editum die 20 Iunii 2026

• +Starts native admin and metrics serving behind Fluxheim-owned server primitives
• +Roborat nativum background handles so dropped critical handles abort instead of silently detaching tasks

Editum die 20 Iunii 2026

• +Adds NativeBackgroundSupervisor pro Fluxheim-owned munus posticum orchestration
• +Adds critical task watchdog support and hardens shutdown delivery edge cases

Editum die 20 Iunii 2026

• +Adds native runtime cutover evidence gates and fluxheim-config-tester --runtime-cutover
• +Moves remaining Pingora exception targets to a documented multi-release exit plan while keeping policy gates active

Editum die 19 Iunii 2026

• +Adds explicit pingora-compat feature gating pro the remaining compatibility runtime boundary
• +Moves rustls/OpenSSL downstream TLS SNI, certificate storage, reload, PEM parsing, and native HTTP/1 TLS listener previews into Fluxheim-owned code

Editum die 19 Iunii 2026

• +Continuat the Pingora-exit slice by shrinking the remaining root compatibility surface pro proxy, cache, et runtime semitae
• +Dividit nativum salus probationes in HTTP/gRPC, database, exec, et TCP/TLS transport helper modules cum stricter probe bounds

Editum die 19 Iunii 2026

• +Removet the direct Pingora dependency ex fluxheim-load-balancer
• +Addit Fluxheim-owned terminatum HTTP/1.1 et h2 gRPC salus probationes activa cum consilium coverage to prevent Pingora reintroduction

Editum die 19 Iunii 2026

• +Addit HTTP/1 nativum.1 proxy cutover readiness planning on ServerPlan
• +Deficit closed pro compatibility-tantum proxy features such as auth subrequests, mirroring, redirects, strip/rewrite transforms, et advanced load-balancer consilium

Editum die 18 Iunii 2026

• +Addit a Fluxheim-owned HTTP/2 nativum upstream client primitive cum terminatum capita, bodies, trailers, et deadlines
• +Addit h2 client/server tests pro trailer preservation, oversized responses, stream resets, et flow-regimen timeout behavior

Editum die 18 Iunii 2026

• +Addit nativum rustls/OpenSSL upstream TLS et mTLS support to the staged HTTP/1.1 proxy semita
• +Addit ordered static upstream failover pro methodus tutas plus terminatum no-follow TLS material reads et hostname-consilium coverage

Editum die 18 Iunii 2026

• +Addit terminatum HTTP/1 nativum.1 upstream connection pooling pro tutum content-length et no-body origin responses
• +Addit keepalive pool sizing, upstream idle timeout handling, conservative no-reuse guards, et real socket reuse/expiry tests

Editum die 18 Iunii 2026

• +Addit reusable HTTP/2 nativum connection primitives cum terminatum petitio-body collection et responsum trailer support
• +Roborat HTTP/2 responsum lifetime, handler timeout, DATA capacity handling, prohibited capita/trailers, et petitio-body zeroization

Editum die 17 Iunii 2026

• +Addit the HTTP/2 nativum runtime preview gate et h2 stack probe cum terminatum capita, URI, body, streams, frames, buffers, et rapid reset consilium
• +Addit HTTP/2 preview smoke coverage et extends HTTP/1 nativum behavior coverage pro HTTP/1.0 keep-alive/close semantics

Editum die 17 Iunii 2026

• +Addit the terminatum HTTP/1 nativum upstream client et staged proxy nativum handler pro plain static upstreams
• +Addit proxy nativum candidate inventory, Fluxheim-owned proxy capita, privacy-mode behavior, et fail-closed eligibility pro unsupported consilium layers

Editum die 17 Iunii 2026

• +Addit the HTTP/1 nativum connection/listener runtime over Tokio IO et staged nativum static-fasciculus adapter
• +Mappat server limites in HTTP/1 nativum consilium et adds socket tests pro keep-alive, body framing, shutdown, fasciculus staticuss, slow clients, et connection caps

Editum die 17 Iunii 2026

• +Addit Fluxheim-owned HTTP/1.0/HTTP/1.1 petitio-head parsing, petitio-body framing classification, Host validation, persistence handling, et chunked decoding
• +Addit downstream HTTP/1 consilium defaults et roboratum nativum parser boundaries pro futurum runtime cutover work

Editum die 16 Iunii 2026

• +Moves server bootstrap planning, listener inventory, service intent, background-task intent, HTTP/2 policy, PROXY protocol policy, and private Unix socket planning into fluxheim-server
• +Servat the current runtime as an explicit compatibility adapter dum nativum server/listener work continues

Editum die 16 Iunii 2026

• +Adds fluxheim-tls as the downstream TLS listener planning et provider-consilium boundary
• +Moves TLS listener plans, SNI selection, wildcard matching, ALPN/cipher/curve policy, and rustls/OpenSSL provider checks into the TLS crate
• +Roborat TLS feature gates, SNI fallback behavior, PROXY v2 signature validation, et trusted PROXY CIDR validation

Editum die 16 Iunii 2026

• +Addit the first dedicated fluxheim-headers boundary pro header consilium helpers
• +Movet rewrite algorithms, forwarded-header handling, hop-by-hop petitio consilium, et repeated-header joining in Fluxheim-owned header code
• +Movet stream PROXY protocol byte parsers in fluxheim-protocol and tightens privacy/proxy CIDR validation

Editum die 15 Iunii 2026

• +Movet shared munus posticum lifecycle primitives in fluxheim-runtime
• +Moves OTLP metrics export, ACME certificate reload control, admin snapshot validation state, and rollback decisions into Fluxheim-owned runtime/snapshot code
• +Roborat the locale testimonium reload regimen socket et privatum backend filtering

Editum die 15 Iunii 2026

• +Adds fluxheim-stream as the internal TCP stream proxy runtime boundary
• +Movet stream upstream selection, PROXY protocol parsing/writing, fons consilium, DNS-rebinding guards, byte accounting, et timeout handling behind Fluxheim-owned stream code

Editum die 14 Iunii 2026

• +Moves cache key identity, object envelopes, disk index management, storage-bin helpers, tag handling, and cache storage interfaces into fluxheim-cache
• +Adiungit probationes et portas emissio quae Pingora dependentiae compelleret scuta remotionis in normalibus cargo test decurrit.

Editum die 14 Iunii 2026

• +Incipit the first concrete 1.6.x implementation editio post the foundation tag
• +Removes pingora-load-balancing/pingora-ketama from full and load-balancer image profiles, restores 1.6 load-balancer image builds, and moves TCP health checks plus request-key extraction behind Fluxheim-owned boundaries

Editum die 14 Iunii 2026

• +Incepit 1.6.x Pingora-exit fundamentum versus dum mores runtime non mutatur
• +Additum modularity consilium validation, legacy oversized-fasciculus exceptions, runtime baseline capture, et performance evidence capture
• +Additum editio-gated Pingora dependency exceptions, runtime parity fixtures, et the extraction dependency graph
• +Added initial fluxheim-runtime and fluxheim-server boundary crates plus typed consilium proof primitives

Iunius 2026

• +Introduced the enterprise HTTP/TCP load-balancer line with focused binaries, images, runtime member and weight controls, persistence, health checks, queueing, and migration docs
• +Expanded Fluxheim-owned runtime boundaries across HTTP, stream proxying, load balancing, background tasks, cache interfaces, observability, config, and shared crates
• +Additum administratum affinity cookies, service discovery, active et protocol-aware salus probationes, restart-persistent state, et runtime backend mutation moderamina
• +Added UDP beta guardrails, cache origin-protection budgets, ARM/Linux and macOS developer assets, config tester archives, and broad proxy/cache/PHP-FPM security hardening

Editum die 25 Maii 2026

• +Production proxy parity release with trusted-proxy-aware ACLs, local rate limits, concurrency limits, bounded queues, and edge policy metrics
• +gzip, Zstandard, and Brotli response compression with vhost/route overrides and cache-safe Vary handling
• +Load-balancer resilience, TLS/protocol parity, PROXY protocol v1/v2, upstream mTLS, HTTP/2 moderamina, et gRPC pass-through

Editum die 23 Maii 2026

• +Managed php-fpm process supervision under the existing php-fpm feature, while external php-fpm remains the default
• +Respawn watchdog, terminatum backoff, SIGTERM-ante-SIGKILL teardown, sanitized environment, et privatum generated pool state
• +Auditable [vhosts.php.fpm] mode = "managed" config surface pro privatum sockets, worker numeri, process manager modes, slowlog, temp semitae, et pool fasciculi
• +Expanded WordPress PHP-FPM smoke coverage across external, administratum-static, administratum-dynamic, administratum-ondemand, et administratum-respawn modes
• +Recommended Wolfi PHP image now installs php-8.5-fpm and uses managed php-fpm container config by default

Editum die 23 Maii 2026

• +FIPS/ISO-required configs fail closed for unsupported internal cryptography, managed ACME, and local cache encryption
• +Provider-backed admin auth, numeric-local-loopback OTLP exception, and OpenBao Transit cache encryption evidence boundary
• +New compliance evidence template and release evidence package sections for regulated reviews

Editum die 22 Maii 2026

• +rustls/AWS-LC FIPS candidatus backend capax per tls-rustls-fips
• +FIPS et ISO/IEC 19790 rustls profile aliases, config examples, diagnostics, et validation script

Editum die 21 Maii 2026

• +OpenSSL FIPS / ISO capax TLS sanatio per tls-openssl-fips et provider diagnostics
• +FIPS deployment guide, config fixtures, validation script, editio evidence, et OWASP Top 10 2025 baseline

Editum die 20 Maii 2026

• +PHP-FPM keepalive pooling, upstream retry/failover, et petitio body discus spooling pro safer operation under load
• +WordPress routing/cache preset plus PHP application recipes for common framework and forum deployments
• +PHP metrica et OpenTelemetry attributes, X-Accel-Redirect, X-Sendfile, et X-Accel-Expires support

Editum die 18 Maii 2026

• +fluxheim-acme standalone companion binary pro testimonium renewal, status, et ACME reload socket signalling
• +fluxheim-config-tester standalone binary pro validating configs in CI et vas entrypoints sine starting the gateway
• +ACME reload Unix socket — live testimonium pickup sine gateway restart
• +New profile-php aedificate profile — proxy + web + php-fpm + tls-rustls + security
• +Security hardening improvements across the request pipeline

Editum die 16 Maii 2026

• +Opt-in PHP-FPM FastCGI bridge for WordPress-style front-controller applications
• +Strictum script resolution et terminatum FastCGI petitio/responsum handling
• +Browser-validated WordPress proxy/PHP cookie compatibility fixes
• +PHP-FPM can servire static assets ex same root dum routing PHP to FPM
• +New php-fpm Cargo feature (implies ineundo and web)

Editum die 14 Maii 2026

• +Shared ingress/TLS feature-graph split — focused cache and proxy profiles are now TLS/ACME-capable
• +New profile-cache-edge — cache without static web module
• +New profile-proxy-edge — focused reverse proxy edge
• +Official focused container images for cache and proxy profiles

Maius 2026

2026

• + TLS consilium profile
• + Multi-certificate rustls SNI
• + ACME administratum testimonium issuance et renewal
• + EAB-capable issuers (Actalis et others)
• + File-backed TLS secreta
• + acme-init issuer instrumentum ducti bootstrap
• + Packaged testimonium renewal unit systemds

2026

• + Virtual host routing by Host header cum praedefinitum-vhost fallback
• + Route-level static, proxy, and redirect actions
• + Static file serving with MIME detection, ETag, conditional 304, byte ranges
• + Whole-vhost and route-level reverse proxying
• + rustls TLS with SNI, static/bought certificate support
• + Tutus ACME HTTP-01 provocatione procuret
• + Admin control-plane with bearer-token auth and brute-force throttling
• + Secure petitio/responsum header consilium
• + Optionale HTTP → HTTPS redirect cum tutum Host validation
• + Systemd unitatis, RPM packaging
• + Rootless Podman container images