Changes since version 3.1-dev4 : Amaury Denoyelle (13): MINOR: quic: delay Retry emission on quic-force-retry MEDIUM: quic: implement quic-initial rules MINOR: quic: support ACL for quic-initial rules MINOR: quic: pass quic_dgram as obj_type for quic-initial rules MINOR: quic: implement reject quic-initial action MINOR: quic: implement send-retry quic-initial rules BUG/MEDIUM: quic: fix invalid conn reject with CONNECTION_REFUSED BUG/MEDIUM: quic: prevent conn freeze on 0RTT undeciphered content MINOR: flags/mux-quic: decode qcc and qcs flags BUG/MINOR: quic: fix fc_rtt/srtt values BUG/MIONR: quic: fix fc_lost BUG/MINOR: h1: do not forward h2c upgrade header token BUG/MINOR: h2: reject extended connect for h2c protocol Aurelien DARRAGON (1): MEDIUM: sink: assume sft appctx stickiness Christopher Faulet (9): BUG/MEDIUM: jwt: Clear SSL error queue on error when checking the signature DOC: config: Add documentation about spop mode for backends BUG/MEDIUM: stconn: Report error on SC on send if a previous SE error was set BUG/MEDIUM: mux-pt/mux-h1: Release the pipe on connection error on sending path BUILD: mux-pt: Use the right name for the sedesc variable BUG/MEDIUM: http-ana: Report error on write error waiting for the response BUG/MEDIUM: h2: Only report early HTX EOM for tunneled streams BUG/MEDIUM: mux-h2: Propagate term flags to SE on error in h2s_wake_one_stream BUG/MEDIUM: peer: Notify the applet won't consume data when it waits for sync Frederic Lecaille (6): BUG/MINOR: quic: Lack of precision when computing K (cubic only cc) MINOR: quic: Add information to "show quic" for CUBIC cc. MINOR: quic: Dump TX in flight bytes vs window values ratio. MINOR: tcp_sample: Move TCP low level sample fetch function to control layer MINOR: quic: Define ->get_info() control layer callback for QUIC BUG/MINOR: quic: Too shord datagram during O-RTT handshakes (aws-lc only) William Lallemand (7): MEDIUM: ssl/quic: implement quic crypto with EVP_AEAD MINOR: quic: rename confusing wording aes to hp MEDIUM: quic: add key argument to header protection crypto functions MEDIUM: quic: implement CHACHA20_POLY1305 for AWS-LC BUG/MEDIUM: ssl: reactivate 0-RTT for AWS-LC BUG/MEDIUM: ssl: 0-RTT initialized at the wrong place for AWS-LC BUILD: ssl: replace USE_OPENSSL_AWSLC by OPENSSL_IS_AWSLC Willy Tarreau (5): MEDIUM: h1: allow to preserve keep-alive on T-E + C-L BUILD: cfgparse-quic: fix build error on Solaris due to missing netinet/in.h MINOR: queue: add a function to check for TOCTOU after queueing BUG/MEDIUM: queue: deal with a rare TOCTOU in assign_server_and_queue() BUG/MINOR: stconn: bs.id and fs.id had their dependencies incorrect