Release notes for v6.9.2 (#1205)

Author: FZambia

internal/client/track_signature_test.go

@@ -35,8 +35,15 @@ func TestTrackSignature_InvalidHMAC(t *testing.T) {
 	now := time.Now().Unix()
 	expiry := now + 3600
 	sig := makeTestSignature(testSecret, "test:channel", []string{"key1", "key2"}, "user1", now, expiry)
-	// Tamper with the signature.
-	sig = sig[:len(sig)-2] + "ff"
+	// Tamper with the signature by flipping its last hex character to a
+	// different one. Replacing it with a fixed value would be a no-op when the
+	// signature already happens to end in that value (~1/256 of runs), which made
+	// this test flaky.
+	repl := byte('f')
+	if sig[len(sig)-1] == 'f' {
+		repl = 'e'
+	}
+	sig = sig[:len(sig)-1] + string(repl)
 	require.False(t, verifyTrackSignature(testSecret, "test:channel", sig, []string{"key1", "key2"}, "user1"))
 }
 

misc/release/notes.md

@@ -10,19 +10,27 @@ For details, go to the [Centrifugo documentation site](https://centrifugal.dev).
 
 ### Improvements
 
-* Possibility to choose color accents in admin web UI.
+* Connection runtime stability, consistency, and performance improvements coming from the underlying [Centrifuge](https://github.com/centrifugal/centrifuge) library. Under connection churn and concurrent subscribe/unsubscribe on the same channel, Centrifugo now keeps its internal subscription state consistent, fixes several resource and presence leaks, and avoids possible metric drift. The periodic presence updates also use noticeably less CPU and memory. As part of this work some internal operations became up to 500x faster under certain conditions ([centrifugal/centrifuge#590](https://github.com/centrifugal/centrifuge/pull/590)).
+* Less memory allocation and garbage collection pressure on the message broadcast path. This mostly helps nodes that deliver many messages per second ([centrifugal/centrifuge#598](https://github.com/centrifugal/centrifuge/pull/598)).
+* Kafka consumer: copy fetched records into a compact slice before putting them into the internal partition queue. Previously the queued records could keep the whole underlying fetch buffer in memory, so memory usage grew more than expected when a consumer was lagging behind ([#1195](https://github.com/centrifugal/centrifugo/pull/1195)).
+* Redis: read commands now fail within the expected time when Redis is unreachable, instead of silently retrying until Redis comes back. This makes behavior during a Redis outage predictable and matches how writes already worked ([#1191](https://github.com/centrifugal/centrifugo/pull/1191) and [centrifugal/centrifuge#591](https://github.com/centrifugal/centrifuge/pull/591)).
+* Redis: bound the worst-case time to detect a silently stalled connection (the peer stops replying but the TCP connection stays open) to under 5 seconds by tuning the keepalive ([#1192](https://github.com/centrifugal/centrifugo/pull/1192) and [centrifugal/centrifuge#592](https://github.com/centrifugal/centrifuge/pull/592)).
+* Redis: verify PUB/SUB delivery with liveness probes to detect a broken subscription connection earlier ([centrifugal/centrifuge#594](https://github.com/centrifugal/centrifuge/pull/594)).
+* Add per-IP throttling of failed attempts on the admin password login endpoint (`POST /admin/auth`) to slow down brute-force. A valid login is not affected, even while an attack is in progress. This is best-effort protection only – the admin endpoint should still be protected at the infrastructure level (firewall rules, private network, authenticating reverse proxy) ([#1204](https://github.com/centrifugal/centrifugo/pull/1204)).
+* Harden the binary (Protobuf) protocol frame decoder so that a crafted length prefix can no longer make the server allocate too much memory. The configured message size limit is now always applied when reading client commands ([#1203](https://github.com/centrifugal/centrifugo/pull/1203) and [centrifugal/centrifuge#612](https://github.com/centrifugal/centrifuge/pull/612)).
+* Redis Sentinel: the Sentinel client now periodically refreshes its topology, so changes such as a new master after a failover are picked up more reliably ([#1201](https://github.com/centrifugal/centrifugo/pull/1201) and [centrifugal/centrifuge#611](https://github.com/centrifugal/centrifuge/pull/611)).
+* Redis Sentinel: Centrifugo also inherited several important Redis Sentinel setup stability improvements from the updated `rueidis` client ([v1.0.77 release notes](https://github.com/redis/rueidis/releases/tag/v1.0.77)).
 
 ### Fixes
 
-* Admin web UI: add previously missing API commands to the web UI – map API (`map_publish`, `map_remove`, `map_read_state`, `map_read_stream`, `map_stats`, `map_clear`), shared poll API, etc. – and update the embedded web UI ([#1184](https://github.com/centrifugal/centrifugo/pull/1184), commit [`3fc933d9`](https://github.com/centrifugal/centrifugo/commit/3fc933d9)).
-* Fix a `WARN` log about a missing `dev` key on start – some options and flags left over from the dev page removed in v6.9.0 were not fully cleaned up ([#1185](https://github.com/centrifugal/centrifugo/pull/1185), commit [`8cee857f`](https://github.com/centrifugal/centrifugo/commit/8cee857f)).
-* Admin: drop the undocumented and unused fallback that read the admin auth token from a `token` URL query parameter – the token must be supplied via the `Authorization` header ([#1187](https://github.com/centrifugal/centrifugo/pull/1187), commit [`bc33546f`](https://github.com/centrifugal/centrifugo/commit/bc33546f)).
-* Removed an unused map `ordered` option ([#1186](https://github.com/centrifugal/centrifugo/pull/1186), commit [`8752f242`](https://github.com/centrifugal/centrifugo/commit/8752f242)).
+* Fix a possible server process crash (nil pointer panic) that could happen when a delta publication failed to encode to JSON. The broadcast goroutine could panic and terminate the whole node ([centrifugal/centrifuge#597](https://github.com/centrifugal/centrifuge/pull/597)).
+* Fix a case where a client could end up with several concurrent connections on the server under Redis load. On disconnect the transport is now closed before the per-channel cleanup, so a slow Redis no longer delays the socket teardown of the old connection ([centrifugal/centrifuge#595](https://github.com/centrifugal/centrifuge/pull/595)).
+* Async consumers: do not acknowledge messages that were still being consumed during shutdown, so such messages are re-delivered later instead of being lost ([#1196](https://github.com/centrifugal/centrifugo/pull/1196)).
+* Logging: raise the internal log handler buffer from 64 to 1024 to reduce the chance of blocking on logging under bursts ([#1190](https://github.com/centrifugal/centrifugo/pull/1190)).
 
 ### Miscellaneous
 
-* Docs: expanded the [load balancing](https://centrifugal.dev/docs/server/load_balancing) chapter with configs for Envoy, Caddy, and Traefik (in addition to Nginx and HAProxy) – all validated in a [playground](https://github.com/centrifugal/examples/tree/master/v6/proxy_load_balancing) running two nodes behind each proxy across every transport (WebSocket, HTTP streaming, SSE) over plaintext and TLS, up to 10k connections.
-* Docs: added interactive widgets throughout the documentation to clarify concepts where newcomers get confused most – for example the [connection JWT explorer](https://centrifugal.dev/docs/server/authentication#try-it-connection-jwt-explorer), [subscription JWT explorer](https://centrifugal.dev/docs/server/channel_token_auth#try-it-subscription-jwt-explorer), [channel resolver](https://centrifugal.dev/docs/server/channels#try-it-channel-resolver), [subscribe permission model](https://centrifugal.dev/docs/server/channel_permissions#subscribe-permission-model), and [interactive proxy explorer](https://centrifugal.dev/docs/server/proxy#interactive-proxy-explorer).
-* This release is built with Go 1.26.5
-* Dependency updates
-* See also the corresponding [Centrifugo PRO release](https://github.com/centrifugal/centrifugo-pro/releases/tag/v6.9.1).
+* This release is built with Go 1.26.6.
+* Dependency updates.
+* Base Docker image updated to Alpine 3.24 ([#1194](https://github.com/centrifugal/centrifugo/pull/1194)).
+* See also the corresponding [Centrifugo PRO release](https://github.com/centrifugal/centrifugo-pro/releases/tag/v6.9.2).