chore: bump apisix-runtime to 1.3.11#13697
Open
nic-6443 wants to merge 4 commits into
Open
Conversation
dosubot
Bot
added
size:XS
apisix-runtime 1.3.10 (apisix-nginx-module 1.19.8) logs the keepalive pool by its readable name instead of a crc32 of that name, and fixes a crc32-collision bug where distinct pools could be merged. The pool lifecycle is unchanged; only the debug-log label changed from 'crc32: <hash>' to 'name: <pool-name>'. Update the grep_error_log assertions accordingly.
dosubot
Bot
added
size:S
Now that the pool is logged by its readable name, assert the pool identity directly instead of only matching that some name is present: - upstream-keepalive-pool.t TEST 5: the freed pool and the recreated pool must carry the same name (backreference), verifying pool recycling reuses the same identity. - TEST 13 / TEST 15: distinct-SNI (and http vs https) upstreams must get distinct pool names, verifying keepalive pools are partitioned by SNI/scheme rather than merged.
AlinsRan
previously approved these changes
Jul 16, 2026
1.3.11 adds `--with-stream_realip_module` on top of 1.3.10. The module is inert unless `set_real_ip_from` is configured, so it changes nothing for existing deployments.
nic-6443
changed the title
5 tasks
shreemaan-abhishek
approved these changes
Jul 17, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Bump apisix-runtime from 1.3.9 to 1.3.11.
1.3.10 picks up apisix-nginx-module 1.19.8, which fixes several long-standing defects in the runtime patches:
set_current_peer(addr, port, host)accepts the documented host argument again;ngx.socket.stream():sslhandshake()no longer fails with an undefined FFI symbol, andtlshandshake()no longer mutates the caller's options table (reusing the same file-based mTLS options across connections works now);move()/reset_read_buf()reject a source socket with a pending read instead of corrupting the in-flight data, and the reset recycles the whole receive chain instead of leaking middle nodes into the request pool;enable_process=privileged_agent, used by the status API server) are now opened and owned by the master process: a bind conflict fails startup loudly instead of leaving a healthy-looking nginx without the listener, reloads no longer have a no-listener window, socket options on those listeners actually take effect, and the address-conflict error reports the actual owner role.1.3.11 adds
--with-stream_realip_module. nginx does not build this module by default, soset_real_ip_fromis currently unusable in thestreamblock. The module is inert unlessset_real_ip_fromis configured — its post-accept handler returnsNGX_DECLINEDwhen no trusted address is set — so it changes nothing for existing deployments.The runtime-debug checksums in
ci/linux-install-openresty.share updated from the published release artifacts.Checklist
Note on the test change: the runtime bump changes the keepalive pool debug log from
crc32: <hash>toname: <pool-name>(the pool is now keyed by its full name string, which also fixes a crc32-collision bug where distinct pools could be merged). The pool lifecycle is unchanged — only the log label differs — sot/node/upstream-keepalive-pool.t'sgrep_error_logassertions are updated fromcrc32: \S+toname: \S+.