proftpd-mod_proxy

Fixed loading of mod_proxy when built as a shared module.

Implemented "strict KEX" support for proxied SFTP connections, to mitigate CVE-2023-48795.

New in 0.9.2:

• FTP forward proxy based on TLS SNI
• Support for more PROXY protocol V2 values, including certificates

Fixed in 0.9.2:

• Use of SSH -etm algorithms for frontend sessions would leak/break backend SSH connections
• More efficient disk IO when reading SSH hostkeys
• Better handling of FTP backend 4xx/5xx responses for failed data transfer commands when TLS is used

New in mod_proxy-0.9:

• Reverse proxying of SSH/SFTP connections

Fixed in mod_proxy-0.9:

• Random timeouts after FTP data transfers

Fixed in mod_proxy-0.8:

• Memory leak for each data transfer

New in mod_proxy-0.8:

• Discovery backend servers via DNS SRV or TXT records

New in mod_proxy-0.7:

• Support for implicit FTPS
• Support proxying of FTP data transfer aborts
• Fixed TLS session truncation for FTPS uploads

New in mod_proxy-0.6:

• Support MLSD/LIST directory list conversions
• PROXY protocol V2 support
• Multiple bugfixes

New in mod_proxy-0.5:

• Support for TLSv1.3, SNI
• Multiple bugfixes

New in mod_proxy-0.4:

• Support for using Redis rather than SQLite, using ProxyDatastore
• Reduced SQLite contention under load
• Better support for mixed address families (IPv4/IPv6) across frontend/backend connections

New in mod_proxy-0.3:

• New load balancing policies: LeastResponseTime, PerGroup
• Direct data transfers, akin to DSR ("Direct Service Return")
• Support for mod_ban rules
• Support for the TransferRate directive, for data transfer throttling

New in mod_proxy-0.2:

• SSL/TLS support: FTPS supported for frontend and backend connections
• SSL/TLS client session caching
• Sticky load balancing policies: PerUser, PerHost ProxyReverseConnectPolicy
• Optional proxy authentication for reverse proxy connections
• Ability to override the user credentials for backend servers for reverse proxy connections

Initial public release of the mod_proxy module for ProFTPD. See the mod_proxy.html file for documentation.