v2.2.1 0.9.0

high risk

vxcontrol/pentagiSep 8, 2026 → Sep 9, 20261 day between releases

What's New

Upgrades from ECC 2.2.1 to pingora 0.9.0 with Rust 1.85 MSRV and HTTP parsing hardening.

Breaking Changes

  • Minimum supported Rust version moves to 1.85 (pingora-foundations 1.88).
  • RequestHeader and ResponseHeader no longer implement DerefMut.
  • Removed async_write_vec APIs; use tokio::io::AsyncWriteExt::write_all_buf.
  • Prometheus integration moved to pingora-prometheus crate.
  • Upgraded to boring-rs 5.x API.

New Features

  • Added upstream module system.
  • Add abort-on-close session configurability.
  • Support HTTP/1.1 downstream request pipelining.
  • Add ability to configure an offload thread pool for downstream TLS handshakes.
  • Make HTTP/2 stream and connection windows configurable.

Improvements

  • Reworked connection pooling with sharded storage and global LRU.
  • HTTP ambiguity hardening and hop-by-hop header sanitization.
  • Split Prometheus integration into a separate crate.
  • Improved graceful shutdown and upgrade behavior.

Upgrade Notes

Update Rust to 1.85 (1.88 for pingora-foundations). Migrate Prometheus integration code to the new crate. Replace removed async_write_vec APIs with tokio::io::AsyncWriteExt::write_all_buf.

The Two Releases

v2.2.1

v2.2.1

Sep 8, 2026· 1 month ago

ECC 2.2.1 is a bug and security patch release that maintains the immutability of the v2.2.0 history. It focuses on hardening GateGuard, improving uninstall behavior, and fixing installation conflicts.

Full release notes
0.9.0

Pingora 0.9.0

Sep 9, 2026· 1 month ago

A major release focusing on connection pooling improvements, upstream module support, and HTTP parsing security/hardening. It includes significant refactoring of Prometheus integration and upgrades to Rust and boring-rs.

Full release notes