LiteSpeed Web Server Changelog Archive¶

This archive covers LiteSpeed Web Server 5.2.x and earlier. For the current release log, see the LiteSpeed Web Server changelog.

Version 5.2¶

5.2.8¶

Released: June 6, 2018

[Improvement] Improved mod_security engine to avoid blocking server event looping.
[Improvement] Updated BoringSSL to support TLS 1.3 (draft 23); enable early data processing.
[Improvement] Updated WHM Plugin/Web Cache Manager to v3.0.1.
[Bug fix] Fixed a mod_security crash in transform function.
[Bug fix] Fixed a mod_security audit_log false positive triggered by WHM server status requests.

5.2.7¶

Released: April 23, 2018

[Feature] Restart application server managed by CloudLinux Python/Ruby Selector.
[Bug fix] Adjusted default CloudLinux LVE setting to avoid 503 errors.
[Bug fix] Fixed a bug causing random crashes.

5.2.6¶

Released: March 28, 2018

[Improvement] Improved compatibility with systemd.
[Bug fix] Fixed a bug introduced in 5.2.5 that triggered an OCSP response error in Mozilla Firefox.
[Bug fix] Fixed a bug introduced in 5.2.5 that caused random cPanel webmail login failures.
[Bug fix] Fixed a bug in mod_pagespeed logging.

5.2.5¶

Released: February 28, 2018

[Feature] Added preliminary RequestHeader support through Apache config.
[Feature] Added support for SSL client verification configuration through Apache config.
[Improvement] Improved QUIC engine performance and download speeds.
[Improvement] mod_security engine logging now supports %{PERF_COMBINED} as well as improved meta data logging.

5.2.4¶

Released: January 29, 2018

[Improvement] Improved compatibility with CloudLinux Ruby and Python selectors.
[Improvement] Improved SSL OCSP stapling.
[Bug fix] Fixed QUIC engine bugs that affected QUIC connection stability.
[Bug fix] Fixed asynchronous DNS lookup causing random crashes.
[Bug fix] Trusted IP are no longer denied access when detected by server security features.

5.2.3¶

Released: December 11, 2017

[Feature] Built-in WordPress brute-force protection.
[Feature] Improved cache engine with capability to selectively drop certain query string value pairs.
[Improvement] Updated cPanel and Plesk integration with support for PHP 7.2.
[Improvement] Updated WHM Plugin to v2.2.4.2.
[Bug fix] Fixed a bug in mod_security engine related to RBL lookup.
[Bug fix] Enabled SSL session ticket support for Apache vhost by default.

5.2.2¶

Released: October 17, 2017

[Improvement] Improved compatibility with cPanel v68.
[Bug fix] Fixed bugs in QUIC engine.
[Bug fix] Fixed a bug where a compressed response body could cause cache corruption.

5.2.1¶

Released: September 1, 2017

[Improvement] Improved QUIC stability and performance.
[Improvement] Added support for QUIC versions Q039 and Q040.
[Improvement] Improved cache engine with new cache-control directive and ESI URL fixup.
[Improvement] Improved ETag header to comply with RFC 7232.
[Improvement] Improved overall speed of WebCache Manager.
[Improvement] WebAdmin is now forced HTTPS.
[Improvement] Updated access log format %H flag to log transport protocol — HTTP/SPDY/HTTP2/QUIC.
[Bug fix] Fixed a bug that prevented mod_pagespeed from being enabled through .htaccess.
[Bug fix] Fixed Ruby/Python selector setup script to install more required modules.
[Bug fix] Fixed DirectAdmin shared virtual host suEXEC problem.

5.2¶

Released: July 11, 2017

[Major Feature] Added QUIC (Quick UDP Internet Connections) support.
[Major Feature] Added mod_pagespeed support for 64-bit Linux installs.
[Feature] Switched from OpenSSL to BoringSSL with TLS 1.3 support.
[Feature] Added support for HTTP/2 Server Push.
[Feature] Added support for CloudLinux Ruby/Python Selector.
[Feature] Added support for IP2Location to convert IP to geographic location.
[Feature] Added support for Brotli compression for static files.
[Feature] Added support for SecRemoteRules and improved performance of mod_security engine.
[Improvement] LiteSpeed Web Cache Manager has been vastly improved with the addition of a command line tool (lscmctl).
[Improvement] The LiteSpeed cPanel/WHM plugin has been improved and prepped for the upcoming cPanel 66 release.
[Bug fix] Included all bug fixes in the 5.1 branch.

RC3¶

Released: June 12, 2017

[Major Feature] Added mod_pagespeed support for 64-bit Linux installs.
[Feature] Switched from OpenSSL to BoringSSL with TLS 1.3 support.
[Bug fix] Fixed a bug in LSCache that caused cached objects to expire too soon.
[Bug fix] All bug fixes from 5.1.x releases are included.

RC2¶

Released: February 13, 2017

[Feature] Added support for HTTP/2 Server Push.

RC1¶

Released: January 9, 2017

[Feature] Added support for CloudLinux Ruby/Python Selector.

Version 5.0¶

5.0.19¶

Released: July 18, 2016

[Security] Automatically block HTTPOXY attacks with no configuration needed.
[Feature] Added authentication realm protection for real-time status report's direct query interface.
[Feature] Added CloudLinux mod_proctitle style output in real-time status report.
[Improvement] Updated the default configuration for cPanel installations to make them compatible with EA4 and CloudLinux PHP Selector.
[Improvement] Updated Plesk default configuration to use pre-built lsphp binaries.
[Bug fix] Fixed a bug in serving compressed ESI objects from cache.
[Bug fix] Fixed a bug in SSI engine that caused SSI scripts to hang.
[Bug fix] Fixed a bug where cache would not follow cache-vary updates through rewrite rules.
[Bug fix] Fixed a bug that caused crashing when serving requests from LiteMage Cache.
[Bug fix] Fixed a bug in serving cached objects compressed with the DEFLATE method.

5.0.18¶

Released: June 8, 2016

[Bug fix] Fixed a bug in OpenSSL 1.0.2h that caused server crashes.
[Bug fix] Fixed a bug in Server Side Include engine that caused some SSI scripts to hang.
[Bug fix] Fixed a bug in HTTP/2 that caused some virtual streams to hang under high traffic.
[Bug fix] Fixed a bug in SPDY that caused trouble for Safari 8.

5.0.17¶

Released: May 10, 2016

[Feature] Added support for serving pre-compressed LiteMage pages.
[Feature] Added Apache style configuration directive HtaccessCacheTimeout to control how often .htaccess is checked for updates.
[Improvement] Updated OpenSSL to 1.0.2h.
[Bug fix] Fixed a bug causing file descriptor leaks when cache objects are updated.
[Bug fix] Fixed a bug where configuration broke PHP configuration override in .htaccess.
[Bug fix] Fixed a LiteMage private session bug that broke some test cases in Magento's performance test suite.

5.0.16¶

Released: April 20, 2016

[Improvement] Added logging and importing of cache purge events to restore SHM-based cache manager.
[Bug fix] Fixed a bug in HTTP/2 that caused inaccurate count of active streams.
[Bug fix] Fixed a bug in mod_security engine where a "drop" action could block a trusted IP.
[Improvement] Improved OCSP stapling error handling to avoid repeat error messages.
[Bug fix] Fixed a bug that caused memory corruption.

5.0.15¶

Released: March 24, 2016

[Improvement] Fine-tuned the default cache policy to allow caching for requests with query string and cookie.
[Improvement] Set the LSCACHE_VARY environment variable for the backend when cache vary was set by rewrite rules. This is to work around cache vary problems when multiple web applications run under one domain.
[Bug fix] Fixed a bug where server level cache policy was ignored when server level cache root was not set.
[Bug fix] Fixed a bug that caused the auto-index script to run as the webapps user for DirectAdmin, which caused a failure to index the directory due to permission denied.

5.0.14¶

Released: March 1, 2016

[Feature] Detect and block abusive server IPs through proxy/CDN; added vhost level configuration to adjust connection hard limits.
[Improvement] Improved HTTP/2 streams priority implementation to avoid head-of-line blocking.
[Improvement] Improved handling of regular cache-control response header to enable cache if response is public cacheable.
[Improvement] Improved vhost cache root configuration by allowing vhost level variables: $vh_name, $vh_domain, and $vh_user.
[Bug fix] Fixed bug that prevents vhost cache root from being cleaned automatically.
[Bug fix] Fixed a bug in mod_security engine.

5.0.13¶

Released: February 11, 2016

[Feature] Added support for the lsc-cookie response header which can be used to cache "Set-Cookie" headers.
[Feature] Added an Apache style CacheLookup directive which only turns on cache lookup.
[Improvement] Improved mod_security audit log format to make it compatible with cPanel "ModSecurity Tools".
[Improvement] Improved handling of "Range" requests. LSWS now sends back a 304 response if conditions are met.
[Bug fix] Fixed an Apache compatibility problem where global level contexts were not properly applied to vhosts.
[Bug fix] Re-added the "Connection: keep-alive" response header to satisfy online testing tools.
[Bug fix] Fixed a bug in "Digest" authentication implementation.

5.0.12¶

Released: January 28, 2016

[Security] Updated bundled OpenSSL library to 1.0.2f to address the concern of CVE-2016-0701; older version is not vulnerable as SSL_OP_SINGLE_DH_USE was turned on.
[Improvement] Improved compatibility with cPanel + CentOS 7 setup, preventing Apache from being started by cPanel.

5.0.11¶

Released: January 18, 2016

[Security] Fixed a bug reported by Netsparker that allowed request header injection when mod_userdir was enabled.
[Improvement] Improved handling of REFRESH cached page requests from LiteMage crawler.
[Improvement] Improved handling of requests from Googlebot crawling LiteMage cached pages to reduce server load.
[Improvement] Cleaned up HTTP/2 NPN/ALPN strings which now only use the "h2" signature.
[Bug fix] Fixed a systemd issue affecting server deployment and hosting control panels on CentOS 7.

5.0.10¶

Released: December 24, 2015

[Feature] Added support for the LiteSpeed Cache plugin for WordPress.
[Feature] Added support for the 308 status code.
[Bug fix] Fixed a bug that returned status code 200 for PHP-based custom error pages.
[Bug fix] Fixed a bug that caused incorrect ownership of the access log file of an Apache vhost when "Just In Time Config" was enabled.
[Bug fix] Fixed a bug that caused a net::ERR_INCOMPLETE_CHUNKED_ENCODING error in Chrome.

5.0.9¶

Released: December 1, 2015

[Feature] Added new cache policy configurations for LSCache to enable cache lookup while Public/Private Cache is disabled.
[Improvement] Improved mod_security engine to avoid blocking the server process.
[Bug fix] Fixed a bug introduced in 5.0.8 that broke Apache SSL vhost SNI.

5.0.8¶

Released: November 12, 2015

[Improvement] Improved Apache configuration parser with faster parsing speed and lowered memory usage.
[Feature] Added CHACHA SSL cipher support.
[Bug fix] Fixed vhost level chroot feature.
[Bug fix] Fixed missing ETag header in 304 response.
[Bug fix] Minor bug fixes in mod_security engine.

5.0.7¶

Released: October 6, 2015

[Improvement] Improved LSCache to allow adding cache-vary values with a rewrite rule.
[Improvement] Improved ESI subrequest implementation.
[Feature] Added SIGBUS handler for SIGBUS being triggered during the saving of a response body to cache (running out of disk space).
[Bug fix] Fixed bug in LiteMage ESI implementation that prevented cache-vary on cookie from working properly.
[Bug fix] Fixed bug in mod_security engine that broke the @contains operator.

5.0.6¶

Released: September 23, 2015

[Improvement] HTTP/2 implementation improved to be more strictly compliant with RFC 7540.
[Feature] DisablePhpOverride, an Apache configuration directive, added to turn off PHP configuration override in .htaccess.
[Improvement] Max size of page cache objects increased to 10MB.
[Bug fix] Minor bug fixes.

5.0.5¶

Released: August 17, 2015

[Improvement] Reduced usage of file backed MMAP I/O for buffering large request and response bodies.
[Improvement] Added support for alternative ESI syntax as a workaround for issues in LiteMage.
[Bug fix] Fixed a bug that introduced unnecessary disk I/O synchronization when saving large response bodies to page cache.
[Bug fix] Fixed a bug causing performance issues during a graceful restart.
[Bug fix] Fixed two bugs in the Server Side Includes engine, one causing missing included content, and the other causing failure to execute CGI.
[Bug fix] Other minor bug fixes.

5.0.4¶

Released: August 5, 2015

[Feature] Added Cache Purge-by-URL through a special response header.
[Improvement] Improved mod_security engine to have clear separation of rules belonging to different processing phases. Added support for GEO:XXXX collection.
[Improvement] Improved Page Cache engine to correctly process and cache ESI-injected AJAX responses (used by LiteMage).
[Bug fix] Fixed bug in Server Side Includes engine that did not set original QUERY_STRING environment for the "exec cgi" directive.
[Bug fix] Fixed max dynamic response body size limit, which was previously ignored, causing a server crash when running out of memory.
[Tuning] Changed initial max size limit of .htaccess from 10MB to 2MB to avoid blockage when processing large .htaccess files.

5.0.3¶

Released: July 22, 2015

[Improvement] Improved client IP address updating for Cloudflare-proxied requests. Now using CF-Connecting-IP header instead of X-Forwarded-For.
[Improvement] Improved LiteMage Cache with automatic cache root directory clean up.
[Bug fix] Fixed a regression in rewrite engine that broke some existing rewrite rules when upgrading from LSWS 4.2.x.
[Bug fix] Fixed bug in processing Apache httpd configuration that prevented context defined at server level from being effective for virtual hosts.
[Bug fix] Fixed bug in HTTP Range request processing.
[Bug fix] Added a SIGBUS signal handler to catch and fail affected requests gracefully.

5.0.2¶

Released: July 9, 2015

[Security] Updated OpenSSL to 1.0.2d to address CVE-2015-1793.
[Improvement] Improved HTTP/2 implementation.
[Improvement] Improved mod_security engine to work better with OWASP core rule set.
[Improvement] Improved compatibility with Plesk 12 control panel.
[Bug fix] Fixed a bug in Rewrite engine that may trigger 503 errors by cPanel autoconfig/autodiscover feature.

5.0.1¶

Released: June 26, 2015

[Feature] Added PHP 7 support for PHP suEXEC.
[Improvement] Updated OpenSSL to 1.0.2c.
[Bug fix] Fixed various HTTP/2 and SPDY related bugs.
[Bug fix] Fixed various broken internal features: internal redirect, CloudLinux LVE, cache handler, etc.
[Bug fix] Fixed a few LiteMage related issues.

5.0¶

Released: April 17, 2015

[Major Feature] HTTP/2 support.
[Feature] SPDY/2, 3, and 3.1 support.
[Feature] ESI and LiteMage Cache support.
[Feature] Virtual host-level bandwidth throttling with mod_bw compatibility.
[Feature] WebSocket proxy functionality.
[Feature] CPU affinity setting.
[Improvement] Extra build numbers added onto version numbers and supported through lsup command.

RC3¶

Released: March 11, 2015

[Feature] Added HTTP/2 draft 14-17 implementation.
[Improvement] ESI engine and LSCache improved to better support partial page caching.
[Bug fix] Fixed a bug in bandwidth throttling.
[Bug fix] All improvements and bugs fixed in 4.2.15-4.2.21 releases.

RC2¶

Released: September 23, 2014

[Feature] Added virtual host-level bandwidth throttling.
[Improvement] Improved stability of ESI and SPDY implementation.
[Bug fix] Fixed a bug that turns off gzip compression for Firefox when SPDY is in use.
[Bug fix] All bugs fixed in 4.2.8-4.2.15 releases.

RC1¶

Released: February 18, 2014

[Feature] Added SPDY/2, 3, and 3.1 support.
[Feature] Added ESI support.
[Feature] Added WebSocket proxy functionality.
[Feature] Added CPU affinity setting.

Version 4.2¶

4.2.24¶

Released: July 9, 2015

[Security] Updated OpenSSL to 1.0.1p to address CVE-2015-1793.
[Improvement] Improved mod_security engine to work better with OWASP core rule set.
[Improvement] Improved compatibility with Plesk 12 control panel.
[Bug fix] Fixed a bug in Rewrite engine that may trigger 503 errors by cPanel autoconfig/autodiscover feature.

4.2.23¶

Released: April 17, 2015

[Feature] Added support for Apache directive Allow/Deny env=!env-variable.
[Improvement] mod_security audit logging can log request body now.
[Bug fix] Changes in SSL renegotiation protection broke HTTPS proxy backend.
[Bug fix] Autoindex script used wrong encoding for "&" character in directory name.

4.2.22¶

Released: March 17, 2015

[Improvement] Added option to select default DH key size to avoid SSL handshake error with older Java clients.
[Improvement] Apache configuration compatibility with SuexecUserGroup and SSLInsecureRenegotiation directives.
[Improvement] Avoid parsing bad shtml files that can cause server memory problem.
[Bug fix] <DirectoryMatch...> causes PHP suEXEC malfunction.
[Bug fix] Slow memory leak in mod_security engine.
[Bug fix] Crash caused by long variable value in mod_security engine.
[Misc] Other minor improvements and bug fixes.

4.2.21¶

Released: January 15, 2015

[Improvement] Improved DirectAdmin compatibility — added ability to change user ID inside context of Apache configuration.
[Bug fix] Fixed bugs in Server Side Include engine.
[Bug fix] Fixed a bug causing Apache Header directive to not work properly when used inside a <Limit> directive.
[Bug fix] Fixed a bug in HTTP authentication using Apache htpasswd generated password hash.
[Bug fix] Fixed a bug in handling MIME-type strings with upper-case letters.
[Bug fix] Fixed a bug in AIO logging causing an infinite loop.
[Bug fix] Fixed a bug in Aho-Corasick string search implementation.

4.2.20¶

Released: December 19, 2014

[Feature] Automatically redirect to HTTPS if an HTTPS port is accessed as HTTP.
[Bug fix] Fixed a bug in Apache configuration parsing that disables mod_security engine.
[Bug fix] Fixed Apache httpd wrapper script bug that causes problem with cPanel 11.46 mod_security Tools.
[Bug fix] Fixed a bug that creates swap directory with wrong permission mask.
[Bug fix] Fixed a bug that causes trouble for serving cached gzipped content to Facebook Crawler.

4.2.19¶

Released: November 12, 2014

[Feature] Added features to improve server performance when I/O wait is high: asynchronous logging mode and start external process in asynchronous mode through CGI daemon.
[Improvement] Improved mod_security engine to allow using variables in deprecatevar and expirevar actions.
[Bug fix] Fixed a bug in HTTPS proxy that causes 503 errors.
[Bug fix] Fixed a bug that causes GZIP compression not to be used for certain dynamic pages.
[Bug fix] Fixed a bug in parsing CacheEnable/CacheDisable directives.

4.2.18¶

Released: October 15, 2014

[Security] Upgraded OpenSSL to 1.0.1j to address vulnerabilities in 1.0.1i.
[Security] SSLv3 turned off by default for HTTPS virtual hosts.
[Improvement] Improved bandwidth logging by combining write() system calls.
[Improvement] Improved autoindexing script.
[Bug fix] Fixed systemd unit description script.
[Bug fix] Fixed minor bug in mod_security engine.

4.2.17¶

Released: October 3, 2014

[Feature] Added more CGI environment variables for SSL Client authentication.
[Bug fix] Fixed a bug that breaks "Require user user1 user2" Apache directive.
[Bug fix] Fixed a bug causing 403 error for Server Side Include pages.
[Bug fix] Fixed a bug causing issues when one user misses a </Limit> tag in one .htaccess file.
[Bug fix] Fixed a bug causing Smart Keep-Alive feature to not work for .js files with MIME type application/javascript.
[Bug fix] Fixed a bug in MP4 random seek.
[Bug fix] Removed an OpenSSL patch which broke SSL handshake with some clients.

4.2.16¶

Released: September 25, 2014

[Security] Addresses Shellshock Bash vulnerability (CVE-2014-6271 and CVE-2014-7169).

4.2.15¶

Released: September 23, 2014

[Improvement] Improved Apache configuration parsing speed and memory efficiency.
[Tuning] Default SSL cipher list has been tuned to score an "A" on online SSL tests.
[Feature] Added suffix php6 to available PHP suEXEC suffixes.
[Bug fix] Fixed a bug in OCSP stapling result verification.
[Bug fix] Fixed a bug in HTTP range request handling.
[Misc] Minor bug fixes and fine tunings.

4.2.14¶

Released: August 6, 2014

[Improvement] Added support for Apache mod_env and mod_setenvif.
[Bug fix] Fixed bug causing cPanel account suspension to erroneously apply to accounts partially matching suspended account name.

4.2.13¶

Released: July 28, 2014

[Feature] Rewrite engine can add a local proxy target automatically if called for in rewrite rules. Node.js hosting on a local server no longer requires manual set up.
[Feature] LiteSpeed-specific LSPHP_MaxWaitQ directive added. Specifies PHP external application wait queue limit. Exceeding this limit triggers a 508 "Resource Limit Has Been Reached" error.
[Feature] IndexIgnore directive for directory autoindexing is now supported.
[Feature] SetEnv PHPRC=<path_to_php_runtime_config> can be used to customize php.ini path in Apache vhost configuration files.
[Bug fix] Fixed issues with mod_userdir caused by cPanel 11.44.
[Bug fix] Fixed mod_security bug that caused server crash.

4.2.12¶

Released: June 9, 2014

[Security] Updated statically linked OpenSSL library to 1.0.1h to address newly discovered vulnerability in OpenSSL 1.0.1g.
[Improvement] Improved LSCache module: cache storage directory can be set at vhost level.
[Improvement] Improved compatibility with Apache configuration when Include directive is used inside a <Files...> or <Location...> context.
[Improvement] Improved static file handling in NFS to avoid trouble caused by silly rename.
[Improvement] Improved HTTPS proxy with client SNI support.
[Bug fix] Fixed a bug causing a slow memory leak.
[Bug fix] Fixed a bug in the mod_security engine ipMatchFromFile directive. Comments in IP list configuration file are ignored now.
[Bug fix] Fixed a bug in tracking children processes in FreeBSD when "start through CGI daemon" is used.
[Bug fix] Fixed a bug in HTTPS proxy which failed to properly handle HTTP/1.0 style connection close to end a response.
[Misc] Other minor bug fixes based on isolated bug reports.

4.2.11¶

Released: May 13, 2014

[Bug fix] Fixed a bug with HTTP proxying introduced in 4.2.10 while adding support for HTTPS targets.
[Bug fix] Fixed a bug with Apache AddType directive introduced in 4.2.10.
[Bug fix] Fixed a bug with processing of Apache <IfDefine ...> tag.
[Bug fix] Workaround added for FreeBSD security feature that prevented LSWS server process from checking status of PHP processes when sysctl security.bsd.see_other_uids was turned off.

4.2.10¶

Released: May 5, 2014

[Feature] Added support for HTTPS proxy backend. (cPanel proxy subdomains over HTTPS work.)
[Feature] Added logic to tolerate missing "-" at the beginning or ending of an SSL certificate and key file.
[Feature] Added logic to escape special characters in access log following Apache's method.
[Feature] Added support for <IfDefined> context in Apache httpd.conf.
[Improvement] Improved detection of HTTPS request to an HTTP port. Reduces blocking due to "Bad Request".
[Bug fix] Fixed bug: running LiteSpeed process could not apply new expiration date for an updated license key.
[Bug fix] Fixed bug: Apache and LiteSpeed have different values for SERVER_PORT behind an HTTP proxy.
[Bug fix] Fixed bug: Block Bad Request setting could not be turned off from WebAdmin console.

4.2.9¶

Released: April 8, 2014

[Security] Security patch to fix OpenSSL Heartbleed bug.

4.2.8¶

Released: March 28, 2014

[Feature] Added IP-based licensing.
[Feature] Added ability to purchase LiteSpeed Cache as an add-on.
[Improvement] Enhanced "external application no abort" feature to allow uninterrupted PHP script execution during server restarts.
[Improvement] Updated default error template.
[Bug fix] Fixed minor bugs in rewrite engine.
[Bug fix] Fixed bug: Expires headers could not be added to dynamic response.

4.2.7¶

Released: January 24, 2014

[Improvement] Allow root-owned file in PHP suEXEC mode.
[Improvement] Improved mod_security compatibility.
[Feature] Enabled custom php.ini via PP_CUSTOM_PHP_INI environment variable (used in Plesk PHP-FPM Apache configuration).
[Feature] Added support for VH_USER variable in external application environment variable configuration.
[Improvement] Apache binary wrapper will remove itself if LSWS is uninstalled.
[Improvement] Improved SSI engine.
[Bug fix] Minor Apache .htaccess compatibility fixes.

4.2.6¶

Released: November 22, 2013

[Improvement] Improved handling of resource limits to avoid generating 508 error pages when possible. After resource limits have been reached, requests will instead be re-queued until resources become available.
[Bug fix] Fixed bug: failure to detect all IPv6 addresses.
[Bug fix] Fixed bug: multiple <Files ...> <FilesMatch ...> directives in different .htaccess files along a path were processed in the wrong order.
[Bug fix] Fixed bug: server crash when an .htaccess file has been updated while it is still referenced by a long running request.
[Bug fix] Fixed bug: suEXEC ProcessGroup mode set at the virtual host level fails to override server level suEXEC Daemon mode.

4.2.5¶

Released: October 30, 2013

[Feature] Added just-in-time Apache vhost configuration to improve server startup speed.
[Improvement] Major improvements and bug fixes in mod_security engine: added more transform functions, better variable collection handling, added IP match operators, added MATCHED_VARS support.
[Feature] Added new PHP suEXEC ProcessGroup mode to create per-account process groups using the LiteSpeed-specific Apache-style directives LSPHP_ProcessGroup and LSPHP_Workers. It is PHP selector-compatible and opcode caching friendly.
[Improvement] Improved CloudLinux compatibility — return 508 error page when resource limit has been reached.
[Improvement] Rack/Rails: added per-application environment configurations for Rack/Rails context to better support RVM gemset setup.
[Security] Bundled OpenSSL library has been upgraded to 1.0.1e with support for TLSv1.1 & TLSv1.2 ciphers.
[Improvement] Automatically detect and skip very large .htaccess file that can stall server processes.
[Feature] Enabled skipping "File Not Found" logging in error log via rewrite environment variable dontlog.
[Feature] Added support for "Charset" in Content-Type header for autoindex pages.
[Security] Fixed bug in handling symbolic link race condition when "Strict File Ownership" (equivalent to CloudLinux SecureLink) is enabled. (Special thanks to Rack911.)
[Security] Fixed bug allowing create/overwrite arbitrary file as root user via crafted symbolic link. (Special thanks to Rack911.)
[Bug fix] Fixed bug in handling IPv6 address used in Apache httpd.conf.
[Bug fix] Fixed bug in SSI engine causing LAST_MODIFIED variable to use wrong timestamp.
[Bug fix] Fixed bug in rewrite engine with URL encoding.

4.2.4¶

Released: August 6, 2013

[Feature] Added Python WSGI support (Apache mod_wsgi equivalent).
[Improvement] LSWS will now switch back to Apache automatically when license expires.
[Feature] Added OCSP stapling support for SSL.
[Feature] Added a feature that moves real-time status reports to the RAM disk to avoid blocking lshttpd process in high I/O wait situations.
[Improvement] Automatically restart PHP suEXEC daemon if killed or crashed to avoid 503 errors.
[Improvement] OpenSSL AESNI hardware acceleration enabled for x86_64-Linux platform.
[Improvement] LSAPI STDERR logging is now disabled when STDERR logging is disabled in configuration.
[Improvement] Improved Redirect directive processing to make "Redirect 301/..." work in sub-directory .htaccess files.
[Bug fix] Fixed a bug causing authentication failure when password is blank.
[Bug fix] Fixed a bug in IPv4 Access Control configuration causing the smaller subnet to overshadow the larger subnet when two subnets overlapped.
[Bug fix] Fixed a bug in STDERR logging, which may cause interlocking between lscgid and lshttpd worker processes.
[Bug fix] Fixed a bug causing MIME types such as text/css; charset=... to not be gzipped when GZIP is enabled for text/*.
[Bug fix] Fixed a bug in SecRuleRemoveById directive.
[Bug fix] Fixed a bug in mod_security engine when handling collections directives.
[Bug fix] Fixed a bug in graceful restarting with over 1000 listeners.
[Bug fix] Fixed a bug causing log rotation not to be disabled when rotating limit is set to 0.

4.2.3¶

Released: May 22, 2013

[Feature] Added setting to hide the LiteSpeed signature in the default error pages.
[Feature] Added ability to use sendfile() to send back dynamic responses.
[Improvement] Updated in-GUI settings explanations.
[Feature] Added option (External Application Abort) to stop the server from aborting external application processes even when the client connection has been broken.
[Feature] Added PHP suEXEC daemon ability to kill runaway child processes.
[Improvement] Reserved connections for the WebAdmin console to ensure accessibility regardless of the current number of connections.
[Feature] Added CGI daemon ability to log processes killed by signals to stderr.
[Bug fix] Fixed FileETag directive and rewrite rule incompatibility.
[Bug fix] Fixed FreeBSD real-time stats error.
[Improvement] Updated PHP build utility to support up to PHP 5.3.25 and 5.4.15.
[Misc] Discontinued support for Solaris SPARC.

4.2.2¶

Released: January 30, 2013

[Feature] Added HTTP "PATCH" method support.
[Improvement] FileETag directives have been fully supported.
[Improvement] Added "Cache-Control: no-cache, no-store, must-revalidate" response header to 302 response.
[Improvement] Improved Ruby Rack/Rails support along with new ruby-lsapi 4.1. "RewindableInput" interface has been natively implemented to maximize Rack performance.
[Improvement] LiteSpeed Cache improvement: added max-stale age support, stale cache copy can be served while updating the cache; added "REFRESH" method to serve existing cached copy while updating the cache.
[Improvement] Improved mod_security compatibility with gotroot ruleset.
[Bug fix] Fixed CageFS mount point issue with LiteSpeed.
[Bug fix] Fixed rewrite variable %{TIME} parsing error.
[Improvement] Updated PHP build utility to include PHP 5.4.11 and 5.3.21.

4.2.1¶

Released: November 21, 2012

[Bug fix] PHP suEXEC daemon mode will be auto disabled when different php.ini is required via PHPRC or PHPIniDir due to internal limitation of PHP engine.
[Improvement] Improved error handling in case of LSWS swap directory out of space.
[Bug fix] Fixed a bug in SSI encoding.
[Improvement] Updated PHP build utility to include PHP 5.4.8 and 5.3.18.

4.2¶

Released: September 10, 2012

[Feature] Added support for PHP suEXEC daemon mode to improve performance and memory efficiency (LSAPI 6.0 required).
[Improvement] Improved compatibility of Apache mod_security by adding support for variable collections.
[Improvement] Improved symbolic link security for shared hosting by introducing LiteSpeed-specific directives DisableSymlinkOverride and VhostRestrained.
[Improvement] Updated PHP build utility to include PHP 5.4.6 and 5.3.16.

Version 4.1¶

4.1.13¶

Released: June 27, 2012

[Improvement] Improved compatibility of Apache mod_rewrite.
[Improvement] Improved compatibility of Apache mod_security.
[Bug fix] Fixed a bug that will bypass URL security check when rewrite rule is triggered.
[Security] Enforce RC4 cipher to get around SSL BEAST attack.
[Feature] Added a script tool for cache purge.
[Feature] cPanel WHM plugin: Added a script to build matching PHP from command line.
[Security] Updated OpenSSL to 0.9.8x.
[Improvement] Updated PHP build utility to include PHP 5.4.4 and 5.3.14.

4.1.12¶

Released: March 26, 2012

[Security] Fixed an XSS security issue in Real-time graphs of WebAdmin Console.
[Bug fix] Fixed a bug in .htaccess handling that may cause server crash.
[Bug fix] Fixed a bug in rewrite rules when handling encoding/decoding URL.
[Feature] Added 2 commonly used configurations in cPanel WHM plugin — Configure LiteSpeed.
[Improvement] Improved performance and reduced cost of PHP process start-up.
[Improvement] Improved compatibility/bug fix of mod_security related to skip-after action handling.
[Feature] Added flag B support in rewrite rules.
[Feature] Added no-cache-domains support in cache configuration.
[Improvement] Updated PHP build utility to include PHP 5.4.0.

4.1.11¶

Released: February 22, 2012

[Security] Added a security feature of "Force Strict Ownership Checking", similar to "Secure Link" in CloudLinux.
[Feature] Added version management in cPanel WHM plugin.
[Bug fix] Fixed a bug that may cause frequent crash when trying to detect MIME-type based on file suffix.
[Security] Updated OpenSSL to 0.9.8t.
[Improvement] Updated PHP build utility to include PHP 5.3.10.

4.1.10¶

Released: January 6, 2012

[Bug fix] Fixed WordPress garbage output when SuperCache GZIP compression is enabled.
[Improvement] Lifted the limit for Max Request Body Size for 64-bit OS.
[Security] Updated OpenSSL to 0.9.8s.

4.1.9¶

Released: December 17, 2011

[Bug fix] Fixed a bug that causes random 503 error.
[Improvement] Improved mod_security audit logging.

4.1.8¶

Released: November 18, 2011

[Bug fix] Fixed a bug that causes 100% CPU utilization once connection limit has been reached.
[Feature] Added command line upgrade script admin/misc/lsup.sh.
[Feature] Added license status information in version management page of web console.

4.1.7¶

Released: October 28, 2011

[Bug fix] Fixed a bug that may cause 100% CPU utilization randomly.
[Feature] Added a feature to throttle the number of SSL handshakes that can be made by a client. This is anti-DDoS enhancement against SSL negotiation DDoS attack.

4.1.6¶

Released: October 17, 2011

[Bug fix] Fixed bugs introduced in 4.1.5 release such as 403 error, access log permission issue.
[Security] Security feature of suPHP-like file permission introduced in 4.1.5 has been turned off by default. User can manually turn it on if needed.

4.1.5¶

Released: October 6, 2011

[Security] Added an option to prevent serving unsafe scripts.
[Bug fix] Fixed a bug related to userdir URL and suEXEC.
[Bug fix] Fixed a bug that causes periodic 100% CPU usage by lshttpd.
[Improvement] Improved licensing by accessing a second license server if the primary fails.

4.1.4¶

Released: August 22, 2011

[Bug fix] Fixed a bug that caused LSWS crash when cache is enabled.
[Bug fix] Fixed a bug in SSI engine.
[Improvement] PHP 5.3.8 has been added to PHP build utility.

4.1.3¶

Released: August 2, 2011

[Improvement] Improved IPv6 support when loading Apache httpd.conf.
[Improvement] Improved bad request detection to avoid accidentally blocking IP while accessing non-configured HTTPS web site.
[Bug fix] Fixed a bug that causes problem when uploading a large file.
[Bug fix] Fixed a bug that causes file descriptor leak when page cache is in use.
[Bug fix] Fixed a bug in SSI engine.
[Bug fix] Fixed a bug in tracking HTTPS connections in use.
[Bug fix] Fixed bugs in real-time statistics.

4.1.2¶

Released: July 14, 2011

[Improvement] Improved cache hash algorithm.
[Bug fix] Fixed various bugs reported from 4.1.1 release.

4.1.1¶

Released: May 20, 2011

[Feature] Added private cache support.
[Feature] Display cache related statistics in real-time status report.
[Bug fix] Fixed various bugs reported from 4.1 release.

4.1¶

Released: April 13, 2011

[Feature] Added support for AIO (Asynchronous disk I/O) to greatly improve performance for servers with heavy disk I/O.
[Feature] Added support for HTTPS SNI (Server Name Indication), allowing multiple secured sites sharing one IP.
[Feature] Added support for mod_security 2.5 rule sets.
[Feature] Added connection level detailed status in real-time status page of WebAdmin console.
[Feature] Compatible with upload progress bar.
[Feature] Added support for H.264 streaming.
[Improvement] Reduced memory usage when thousands of virtual hosts configured through Apache httpd.conf.
[Bug fix] All bug fixes in 4.0.x branch have been included.

Version 4.0¶

4.0.20¶

Released: February 24, 2011

[Feature] Added support for CloudLinux SecureLVE.
[Feature] Added a new response header x-litespeed-cache-control to allow a program to control LiteSpeed page cache behavior.
Common cache control values are supported like no-cache, no-store, public, private, max-ages.
[Improvement] Changed the status code of "Request Timeout" from 408 to 500; this is to avoid client retrying automatically.
[Improvement] Retrying requests are limited to 30 seconds to avoid being processed for too long.
[Security] Updated OpenSSL to 0.9.8r.
[Bug fix] Fixed missing download URL of mail header, suhosin patch for latest PHP version in WebAdmin console — phpbuild.

4.0.19¶

Released: January 20, 2011

[Improvement] Improved internal cache feature:
Last-Modified header will be checked and return 304 if it has not changed.
Added response header "X-LiteSpeed-Cache: hit" if content is served from cache.
Added CACHE_HIT=1 environment variable, this can be used in customized access log.
Fixed encoding error related to gzip handling of cached copy.
[Improvement] Improved cPanel WHM EasyApache hooks handling.
[Improvement] Improved compatibility with ISPconfig.
[Improvement] Improved performance under LVE.
[Security] Upgraded OpenSSL to 0.9.8q, PHP build to 5.2.17 and 5.3.5.

4.0.18¶

Released: December 8, 2010

[Improvement] Improved mod_security compatibility.
[Feature] Add timeout option for graceful restart.
[Improvement] Added logic to take care of orphaned PHP processes.
[Improvement] Improved cache functionality.
[Improvement] Improved clean up logic for temporary files.
[Feature] New features in cPanel WHM plugin: Added EasyApache integration — building a new PHP binary through EasyApache will automatically build matching PHP for LiteSpeed, and manual switch between Apache and LiteSpeed while building PHP is no longer needed; fixed directory issues in building matching PHP add-on modules.

4.0.17¶

Released: October 5, 2010

[Feature] Added Apache mod_actions support.
[Feature] Added configurable option "Ignore Apache Modules" to bypass unwanted Apache modules.
[Feature] Added configurable option for turning off ModSecurity directives in .htaccess.
[Improvement] Improved WebAdmin PHP build tool, which can build multiple opcode caches at the same time; also added memcache build option.
[Improvement] Improved rewrite engine.
[Improvement] Improved lswsctrl script.

4.0.16¶

Released: July 30, 2010

[Bug fix] Implemented a fix for cPanel signal 9 problem.
[Improvement] Improved mod_security support.
[Feature] Implemented gzip cache daily cleanup feature.
[Improvement] Improved CloudLinux LVE support, compatible with future CloudLinux releases.
[Misc] There are minor bug fixes and feature enhancements.

4.0.15¶

Released: June 23, 2010

[Security] Security fix for null-byte exploit from script.
[Bug fix] Fixed a bug in SSI engine.
[Bug fix] A bug in WebAdmin has been fixed that occurred when there is only one external app for status page.

4.0.14¶

Released: April 15, 2010

[Feature] CloudLinux Lightweight Virtual Environment (LVE) support has been added.
[Feature] Support for InterWorx hosting control panel has been added.
[Bug fix] A bug in Server Side Include runtime has been fixed.
[Improvement] License management in cPanel WHM plugin has been improved.
[Misc] There are minor bug fixes and tuning.

4.0.13¶

Released: February 19, 2010

[Security] Address CSRF (Cross Site Request Forgery) attack where you are tricked into clicking on an untrusted link while logged in to the WebAdmin console.
[Feature] Added Anti-DDoS blocked IP list in real-time status report page.
[Improvement] Fine tuned graceful restart and lswsctrl script.

4.0.12¶

Released: December 16, 2009

[Security] Updated OpenSSL to 0.9.8l to address TLS man-in-the-middle renegotiation attack.
[Bug fix] Fixed a bug in handling HEAD request.
[Bug fix] Fixed a bug in SSL error handling.
[Bug fix] Fixed a bug that prevents LSWS from reloading Apache httpd.conf when an include file was removed.
[Improvement] Minor improvements in WebAdmin console.
[Bug fix] Fixed a few minor Apache compatibility issues.

4.0.11¶

Released: October 13, 2009

[Bug fix] A bug fixed in PHP-build script in the admin console, which failed to parse config options in certain cases.
[Bug fix] Fixed a bug which causes random 500 error when running some CGI scripts.
[Security] Adding lsadm to the group that the web server runs as. This gives the admin console access to most directories served by the web server.
[Security] Encrypt username/password for the admin console login, so there is no clear text transferred; sniffer proof.
[Improvement] Some changes for version management in the admin console: only notify when there is a new release available, do not automatically download the binary.
[Security] Some validation and security enhancements implemented.

4.0.10¶

Released: August 18, 2009

[Bug fix] Fixed 503 errors and can tolerate PHP crash under certain situations.
[Security] Changed admin console to suEXEC mode, which is more secure and stricter on file permissions.
[Improvement] Improved PHP build script in admin console.
[Bug fix] Fixed a bug that causes 403 access deny when accessing a file containing a symbolic link.
[Bug fix] Fixed a few minor Apache compatibility issues.

4.0.9¶

Released: July 27, 2009

[Bug fix] Fixed a bug which caused random 503 errors in 4.0.7 and 4.0.8.

4.0.8¶

Released: July 26, 2009

[Bug fix] Addressed a few bugs introduced in 4.0.7.

4.0.7¶

Released: July 22, 2009

[Feature] Added support for compressed WordPress Super Cache.
[Bug fix] Fixed a bug in RewriteMap handling.
[Improvement] Improved compatibility with Apache configuration directives AddHandler, SetHandler.

4.0.6¶

Released: July 12, 2009

[Security] Fixed a buffer overflow bug, which was detected by the hacking shield introduced in 4.0.5.

4.0.5¶

Released: June 26, 2009

[Feature] Added support for mod_auth_passthrough to seamlessly integrate with cPanel FrontPage extension.
[Security] Implemented hacking shield to actively defend hacking attempts of buffer overflow.
[Bug fix] Fixed a browser compatibility issue by turning off GZIP compression when there is a custom "Content-Encoding" response header added by CGI script.
[Feature] Added license management in cPanel/WHM plugin.

4.0.4¶

Released: June 8, 2009

[Improvement] Improved handling of external redirect by detecting potential loop condition.
[Improvement] Improved error page handling to avoid extra rewrite processing, which caused problem in authentication.
[Improvement] Improved compatibility of mod_security rules handling.
[Bug fix] Fixed a bug in cPanel/WHM plugin which caused uninstallation not working properly.

4.0.3¶

Released: May 11, 2009

[Bug fix] Fixed a bug in symbolic link checking.
[Improvement] Improved autoindex script on handling special characters.
[Improvement] Improved compatibility of mod_security rules handling.
[Improvement] Improved graceful restart.
[Improvement] www.domain and domain are now treated as different domains.
[Feature] Added a few XML related MIME types to the default configuration.

4.0.2¶

Released: April 22, 2009

[Bug fix] Fixed a bug in SSI implementation that may cause lshttpd crash.
[Bug fix] Fixed a bug in constrained option for virtual host.
[Improvement] Improved Apache config file loading speed.
[Feature] (For suEXEC only) Added support for PHPIniDir directive at virtual host level to allow customized php.ini.
[Feature] (For suEXEC only) Added support for PHPRC environment variable to customize php.ini.
[Feature] Added suEXEC configuration for server level external applications such as FastCGI, LSAPI.

4.0.1¶

Released: April 7, 2009

[Bug fix] Fixed a bug in Process Manager that failed to stop unused processes.
[Bug fix] Fixed a bug that causes crash when accessing certain UserDir URL.
[Improvement] Improved cPanel/WHM plugin.
[Misc] Minor bug fixes and improvements.

4.0¶

Released: March 17, 2009

[Feature] mod_cache support.
[Feature] Server Side Include support.
[Feature] mod_security 2.x rule support.
[Improvement] Improved mod_security audit log, compatible with cPanel mod_security plugin.
[Feature] Large file support for 32-bit Linux.
[Improvement] Reorganized real-time status page.
[Improvement] Improved logging (stderr log control, piped logger, file lock for access logging).
[Feature] Added Rails 2.3 support script using Rack framework.
[Improvement] Improved "Build matching PHP" feature in WHM LSWS plugin.
[Improvement] Improved mod_rewrite compatibilities.
[Misc] Minor bug fixes and improvements.

Version 3.3¶

3.3.24¶

Released: January 11, 2009

[Bug fix] Fixed mailman problem with some cPanel releases.
[Improvement] Improved cPanel Ruby on Rails support.
[Improvement] Improved mod_rewrite compatibilities.
[Misc] Minor bug fixes and improvements.

3.3.23¶

Released: December 10, 2008

[Bug fix] Fixed a bug that may cause lshttpd crash when accessing certain page via UserDir format URL.
[Bug fix] Fixed a bug that caused fixed 256MB memory limit on non-suEXEC lsphp processes when used with cPanel.
[Bug fix] Fixed a bug in RailsRunner.rb that causes compatibility problem with Rails 2.2.1.
[Bug fix] Fixed a bug in virtual host template when referencing $VH_DOMAIN.

3.3.22¶

Released: October 31, 2008

[Bug fix] Fixed a bug introduced in 3.3.21 that may cause lshttpd crash during server shutdown.

3.3.21¶

Released: October 27, 2008

[Improvement] Improved access logging, support for pipe logger setup in Plesk.
[Improvement] Improved memory usage when hosting massive amount of virtual hosts through Apache httpd.conf.

3.3.20¶

Released: October 14, 2008

[Bug fix] Fixed a bug in VMware detection code that causes LSWS crash on mostly x86_64 servers.

3.3.19¶

Released: September 30, 2008

[Improvement] IP to GeoLocation feature has been updated to match new changes in Apache mod_geoip.
[Improvement] Special care has been added to handle 1xx response from proxy back-end web servers.
[Bug fix] Fixed a bug that caused LSWS not to reload license key after the key being updated.
[Bug fix] Fixed a few bugs that may rarely cause LSWS to crash.

3.3.18¶

Released: September 8, 2008

[Feature] Support subdomains for cpanel., webmail., whm.* and webdisk.* newly added by cPanel.
[Improvement] Improved script being used to override cPanel HTTP restart script.
[Bug fix] Fixed a few minor bugs.

3.3.17¶

Released: August 25, 2008

[Improvement] Improved Apache compatibilities for PHP environment variables, PHP_SELF, SCRIPT_NAME, etc.
[Bug fix] Fixed a bug in the default XML configuration file.

3.3.16¶

Released: August 18, 2008

[Feature] Added FLV streaming support.
[Feature] Added support for "Header" directive.
[Feature] Added timestamp for stderr log entries.
[Improvement] Ignore signal SIGXFSZ to avoid core dump when log file reaches 2GB.
[Improvement] Updated PHP to 4.4.9.
[Improvement] Improved AWStats log file handling.
[Bug fix] Fixed a bug in handling IP configuration when server has over 100 IP addresses assigned.

3.3.15¶

Released: July 7, 2008

[Feature] Added cPanel WHM LSWS plugin for cPanel users.
[Feature] Added a feature that allows disabling GZIP compression via URL rewrite.
[Bug fix] Fixed a bug in request filter that may cause LSWS crash.
[Improvement] Improved sorting in version management of web console.
[Improvement] Improved compatibility with Apache configuration for vhost with dedicated IP.

3.3.14¶

Released: June 3, 2008

[Bug fix] Fixed a problem introduced by 3.3.13 that caused LSWS being stopped by control panels.
[Improvement] cPanel compatibility has been improved; cPanel should not kill lshttpd during update or account administration.

3.3.13¶

Released: May 28, 2008

[Bug fix] Fixed a bug introduced by 3.3.12 that crashed lshttpd during server shutdown or graceful restart.
[Improvement] cPanel compatibility has been improved.
[Improvement] Improved graceful restart smoothness when server is under heavy load.

3.3.12¶

Released: May 19, 2008

[Improvement] Improved Unicode support for the web console.
[Improvement] Added PHP 5.2.6 option to the PHP build script.
[Security] SSLv2 has been disabled by default; improved Apache SSL configuration compatibilities.

3.3.11¶

Released: April 25, 2008

[Improvement] Improved cPanel integration by adding a new option to override restart httpd script.
[Bug fix] Fixed a bug introduced by 3.3.10 which affects .htaccess configuration handling.
[Improvement] Increased in-memory buffer limit from 1MB to 10MB.
[Bug fix] Fixed a bug in processing mod_security SecFilter directive.

3.3.10¶

Released: April 15, 2008

[Bug fix] Fixed a few bugs that may cause lshttpd process crash occasionally.
[Bug fix] Fixed access log ownership problem.
[Bug fix] AWStats integration: Fixed a bug which always forwards to HTTPS connection.
[Improvement] Improved mod_expires support.
[Improvement] Improved connection timeout handling during SSL handshake.

3.3.9¶

Released: March 25, 2008

[Bug fix] Fixed a bug in parsing custom access log format string.
[Bug fix] Fixed a bug in generating mod_security compatible audit log.
[Bug fix] Fixed a bug in handling SSLCertificateChainFile configuration.
[Bug fix] Fixed a bug in web console when editing a text field containing some special characters.
[Improvement] Improved 30x custom error page handling.

3.3.8¶

Released: March 13, 2008

[Feature] Due to cPanel changes, an option to replace Apache server-wide with a wrapper script has been added. This solution should work with all control panels.
[Bug fix] Fixed a problem with using a PHP script as custom error page for status code 30x.
[Improvement] Apache configuration compatibilities have been improved.

3.3.7¶

Released: March 3, 2008

[Bug fix] A bug that causes failure in Apache directive Include [dir] has been fixed; it was introduced in 3.3.5 release.

3.3.6¶

Released: February 28, 2008

[Bug fix] A bug that caused inappropriate CPU resource limit applied to PHP/Ruby processes has been fixed.
[Feature] Added a default MIME type for .rar.

3.3.5¶

Released: February 26, 2008

[Security] A dedicated security audit log compatible with csf has been added.
[Feature] Added an option in web console to explicitly enable FrontPage extension.
[Feature] Support for H-Sphere mod_psoft_traffic log file has been added.
[Improvement] Improved Apache compatibilities with Include and DirectoryIndex directives.
[Feature] Apache custom access log format has been fully supported.
[Bug fix] A resource limit problem for PHP suEXEC has been fixed. ATTENTION: if you set Process soft/hard limit for lsphp external app to less than 50, you should increase it.
[Improvement] Minor improvements in web GUI.
[Improvement] Improvements in reducing server load during server start-up.

3.3.4¶

Released: January 24, 2008

[Improvement] PHP build script has been updated to include suhosin and email header patch; PHP 4.4.8 has been added.
[Feature] "staging" has been added to the selectable Rails environment.
[Feature] Experimental support for H-Sphere mod_psoft_traffic log file has been added.
[Bug fix] Broken bytes log for native configured virtual host has been fixed.
[Bug fix] A bug in AJPv13 for processing large POST request has been fixed.

3.3.3¶

Released: December 17, 2007

[Bug fix] A bug related to "Content-Disposition" response header introduced in 3.3.2 has been fixed.
[Bug fix] A bug related to large message logging has been fixed.
[Bug fix] A bug in authentication realm configuration file handling has been fixed.

3.3.2¶

Released: December 11, 2007

[Improvement] The internal process manager has been improved; 503 errors have been addressed.
[Feature] "Content-Disposition" response header pass-through has been added for internal redirect.
[Improvement] Improved control panel compatibilities; support for ISPConfig has been verified.
[Bug fix] A link problem with the update agent in 32-bit Linux package has been fixed; you may have to update from 3.3.1 release manually.
[Improvement] Minor performance tuning for LSAPI/FastCGI applications.
[Bug fix] A bug that uses wrong host name for reverse proxy has been fixed.
[Bug fix] A problem with FrontPage support when Apache mod_frontpage was statically compiled in has been fixed.

3.3.1¶

Released: November 29, 2007

[Bug fix] Fixed a bug in static file GZIP cache.
[Improvement] PHP build script has been improved.
[Tuning] Fine tuning of various parameters.

3.3¶

Released: November 21, 2007

[Feature] SSL client authentication has been added.
[Feature] GUI interface for building PHP has been added to web console.
[Improvement] The process manager for PHP suEXEC has been improved.
[Improvement] Compatibility with control panels has been greatly improved, including cPanel, DirectAdmin, and Plesk.
[Improvement] Installer has been improved to include default configuration for use with hosting control panels.
[Feature] Support for VMware/Xen/UserModeLinux VPS has been added for our VPS license.
[Security] Security of our directory autoindex has been enhanced.
[Misc] There are many minor bug fixes and improvements.

Version 3.2¶

3.2.3¶

Released: September 21, 2007

[Bug fix] Fixed a few minor compatibility issues with cPanel 11.
[Bug fix] Fixed connection limit problem in standard edition.
[Bug fix] Fixed a sendfile() bug for Solaris.
[Bug fix] Fixed a problem with Rails which returns 404 status code instead of 403 when a request was blocked by request filter.

3.2.2¶

Released: September 5, 2007

[Improvement] Default Rails vhost template has been updated with default rewrite rule configuration to support Rails page cache.
[Improvement] YUI has been replaced with a light-weight library in WebAdmin console.
[Bug fix] A bug in handling CGI command line parameter has been fixed.
[Improvement] Performance of rewrite engine has been improved when executing complex rewrite rules.
[Improvement] User-managed LiteSpeed Rails configuration has been improved to work properly with subdomain configuration.
[Improvement] Rewrite rule parser has been improved to ignore trailing comments.
[Improvement] Size limit of XML element in LSWS configuration file has been increased.
[Improvement] Graceful restart procedure has been improved.

3.2.1¶

Released: August 14, 2007

[Improvement] Compatibility with Plesk control panel has been improved.
[Improvement] GZIP compression support has been improved to store compressed static file in its own cache directory; directory write permission is no longer required.
[Feature] REDIRECT_URL and REDIRECT_QUERY_STRING environment variables have been added.
[Improvement] Directory redirect has been improved to give better support of RESTful route of Ruby on Rails.
[Improvement] Directory autoindex script has been improved; direct access to this script is denied.
[Feature] i-node value in ETag can be turned off to better support mirrored sites.
[Bug fix] A bug in security engine that failed to check query string in special format has been fixed.
[Feature] 408 request timeout page is customizable.
[Feature] Restart of individual virtual host can be managed by user with a simple configuration file.

3.2¶

Released: July 16, 2007

[Feature] Implemented Rails shared hosting configuration. Support Rails configuration file generated by cPanel 11 EDGE.
[Improvement] Improved URL rewrite compatibilities with Apache mod_rewrite on value of %{REQUEST_FILENAME} variable.
[Bug fix] Fixed random 404 errors when rewrite is used in .htaccess.
[Improvement] Improved autoindex script with support for FancyIndex off.
[Improvement] Improved compatibility with cPanel 11.
[Feature] Added VPS license support.
[Improvement] Improved license management which allows monthly subscription, license registration, and migration.

Version 3.1¶

3.1.1¶

Released: May 14, 2007

[Improvement] Improved Apache compatibility on redirect and .htaccess handling.
[Bug fix] Fixed a bug in request parser which has problems with large amount of request headers.
[Improvement] Prebuilt PHP binary has been upgraded to 4.4.7.
[Improvement] Improved userdir and .htaccess implementation.
[Feature] Added support for using a string in ErrorDocument.
[Bug fix] A bug in autoindex script has been fixed.

3.1¶

Released: May 2, 2007

[Improvement] Improved request rate throttling algorithm.
[Feature] Added automatic log file rotation for virtual hosts configured through Apache httpd.conf.
[Bug fix] Fixed a bug in AJP Protocol that causes problem with Winstone Servlet Engine.
[Bug fix] Fixed a bug in HTTP Proxy that causes problem when upstream web server does not set Content-Length header.
[Bug fix] Fixed a bug in request parsing which has problems with special values in Connection header.

Version 3.0¶

3.0.3¶

Released: April 19, 2007

[Improvement] Improved Apache mod_rewrite compatibilities.
[Improvement] Updated YUI code to 2.2.1 in web administration console.
[Bug fix] Fixed a bug that causes FreeBSD 64-bit crash.
[Bug fix] Fixed a bug that may cause response corruption when response header is large.
[Bug fix] Made "Force GID" effective for suEXEC PHP.

3.0.2¶

Released: April 16, 2007

[Feature] Added Apache mod_userdir support.
[Bug fix] Fixed a few minor problems in web administration console.
[Bug fix] Fixed an issue of .htaccess file not being processed properly.
[Bug fix] Fixed a few minor Apache interchangeability issues on access control.
[Improvement] Compatibility has been improved for DirectAdmin and cPanel.

3.0.1¶

Released: March 27, 2007

[Bug fix] Fixed tooltips problem in web administration console when used with IE and Opera.
[Bug fix] Fixed an issue with .htaccess file handling for a redirect context.
[Bug fix] Fixed broken update agent and auto-update script.
[Feature] Added "best" event dispatcher as default to use the best available event dispatcher.

3.0¶

Released: March 15, 2007

[Improvement] Completely revamped WebAdmin console: streamlined layout, improved configuration parsing and processing to handle 1000+ virtual hosts.
[Feature] Request Filtering (compatible with Apache mod_security).
[Feature] Complete third-party web hosting control panel support, including cPanel, DirectAdmin, Plesk, etc.
[Feature] Sendfile() support is enabled for standard edition.
[Feature] Max 150 concurrent connections for standard edition.
[Feature] Enterprise: IP to GeoLocation database support (compatible with Apache mod_geoip).
[Feature] Enterprise: customizable access log format.
[Feature] Enterprise: 64-bit optimized binaries available.
[Improvement] Improved external application process manager: better handling of malfunctioning process, especially useful for FCGI application.
[Improvement] Improved Apache interchangeability.
[Improvement] Improved performance and scalability.
[Misc] There are minor bug fixes.

Version 2.2¶

2.2.6¶

Released: November 28, 2006

[Bug fix] Fixed problem loading Apache configuration file containing scriptaliasmatch directive.
[Bug fix] Fixed bug where 302 status code is returned for DELETE request to a Rails application.
[Bug fix] Fixed failure to detect .htaccess change if timestamp on new/updated .htaccess file is older than the one it replaces.

2.2.5¶

Released: November 9, 2006

[Improvement] Better Apache config compatibility with listener entries. LiteSpeed will now work cleanly with httpd.conf generated by cPanel.
[Improvement] Compressed log file archive will now be owned by the LiteSpeed user.
[Bug fix] Fixed matching context problem with vhost level script handler configuration.
[Bug fix] Fixed incorrect value/display of "request in processing" in real-time report due to changes in 2.2.3.
[Bug fix] Fixed Tomcat AJP protocol problem which can cause large POST requests to fail.

2.2.4¶

Released: October 24, 2006

[Bug fix] Fixed blocking problem introduced in 2.2.3 which may halt server processing.

2.2.3¶

Released: October 16, 2006

[Bug fix] Fixed authentication failure with .htaccess when a user name is required.
[Bug fix] Fixed SSL traffic throttling bug.
[Improvement] Updated access log will not log canceled requests which did not receive any response body.

2.2.2¶

Released: September 18, 2006

[Bug fix] Fixed problem with killing external application processes started in suEXEC mode.
[Bug fix] Fixed customized error document handler which was not followed for HEAD request.
[Feature] Updated: added traffic log file rotation.
[Security] Updated: upgraded OpenSSL package to 0.9.7k.

2.2.1¶

Released: September 11, 2006

[Improvement] Real-time report updated to display status of Rails application.
[Improvement] RailsRunner.rb has been updated to deal with DB connection errors.
[Improvement] Support for RedirectMatch, and Redirect directives in .htaccess has been improved.
[Improvement] Admin interface will now allow access of configuration related files under /etc/.
[Bug fix] Fixed PHP suEXEC problem for vhost configured through Apache httpd.conf when both PHP 4 and 5 are configured.

2.2¶

Released: August 24, 2006

[Feature] New: Ruby on Rails integration introduces a simplified method of binding Rails applications.
[Feature] New: Ruby on Rails vhost template available in /lswsinstall/conf/templates/rails.xml.
[Feature] New: Global Force GID option for suEXEC CGI/FCGI/LSAPI.
[Feature] New: PHP suEXEC options for vhosts configured via Apache configuration file.
[Feature] New: SNMPD Bridge + Cacti Templates introduced in /lswsinstall/add-ons/snmp_monitoring/.
[Improvement] New: Updated bundled PHP binary to 4.4.4. Installer will not overwrite PHP binary of existing installation.
[Bug fix] Fixed: AWStats permission problem in suEXEC mode.
[Improvement] Updated: improved documentation.

Version 2.1¶

2.1.20¶

Released: August 17, 2006

[Bug fix] Fixed epoll bug introduced in 2.1.19.
[Bug fix] Fixed possible realm conflict when authentication is used within .htaccess configuration.
[Improvement] Updated web admin interface will now allow "+" character in MIME type definition.

2.1.19¶

Released: August 11, 2006

[Improvement] Custom error handler will now process POST requests. Custom error handler can be used to simplify Ruby Rails configuration.
[Bug fix] Fixed AJP v1.3 protocol compliance bug.
[Improvement] Performance improvements within LiteSpeed event processor.

2.1.18¶

Released: July 13, 2006

[Feature] Added ability to log "host" header within access log.
[Feature] Added IP offset feature when using Apache configuration file.
[Feature] Added ability to turn off access log when using Apache configuration.
[Improvement] Improved epoll reliability under Linux.
[Bug fix] Fixed adherence of application level memory min/max limits.

2.1.17¶

Released: June 19, 2006

[Improvement] Added header X-Forwarded-Proto: https to SSL proxied connections.
[Bug fix] Fixed file upload disconnects over an SSL connection.
[Bug fix] Fixed rewrite engine problem when a non-existing HTTP header was referenced in rule.

2.1.16¶

Released: May 17, 2006

[Improvement] Format of bandwidth logging has been updated to match the latest cPanel format.
[Bug fix] Fixed authentication realm so that when a non-existent file is requested, 403 is returned instead of 404.
[Bug fix] Fixed bytes logging configuration which can cause LSWS to fail on start-up when access log has not been configured.
[Bug fix] Fixed .htaccess support for a virtual host configured through Apache configuration file.
[Bug fix] Fixed a bug in SSL implementation that can cause random connection problem.
[Bug fix] Fixed a Solaris bug where sendfile() usage can cause blocking and high load.
[Bug fix] Fixed installer on-boot start-up script insertion for OS X platform.

2.1.15¶

Released: May 8, 2006

[Improvement] LSAPI 2.0 released for PHP and 1.1 for Ruby. Fixed a bug that can cause header corruption.
[Bug fix] Fixed a bug in CGI parameter handling that can cause core dump.
[Improvement] AWStats (add-on) scheduler will no longer update on every server restart.
[Feature] Added option to start external applications at server start-up instead of on-demand (default).
[Feature] Added option to log cPanel compatible bandwidth usage.

2.1.14¶

Released: April 3, 2006

[Bug fix] A bug introduced in 2.1.13 that caused lshttpd crashes has been fixed.
[Bug fix] A bug in Apache configuration file handling which causes missing vhost to listener mapping has been fixed.
[Feature] GLOBAL::CORE::exit overriding has been added in LiteSpeed Perl daemon to make the Perl process persistent when a Perl CGI script calls "exit".

2.1.13¶

Released: March 28, 2006

[Feature] Ruby's native LSAPI module has been implemented.
[Feature] Adding additional response header has been implemented.
[Improvement] There are minor updates in PHP LSAPI module.

2.1.12¶

Released: February 28, 2006

[Bug fix] A bug that causes "out of swapping space" has been fixed.
[Bug fix] A bug in FCGI/LSAPI suEXEC that causes file descriptor leak has been fixed.
[Bug fix] A bug in Apache configuration parser that causes missing listener to vhost mapping has been fixed.

2.1.11¶

Released: February 15, 2006

[Improvement] Reliability of FreeBSD kqueue event dispatcher has been improved.
[Bug fix] A bug in SSL that causes long delay when request is being redirected to another URL has been fixed.
[Improvement] LiteSpeed PHP SAPI code has been updated.
[Bug fix] There are minor bug fixes in WebAdmin console.

2.1.10¶

Released: February 6, 2006

[Bug fix] A bug in SSL throttling that causes partial response body has been fixed.
[Feature] Binary package for Intel Mac OS X has been added.
[Improvement] PHP binary has been upgraded to 4.4.2.

2.1.9¶

Released: December 29, 2005

[Bug fix] A bug that causes random malfunction or other strange behaviors in .htaccess support has been fixed.

2.1.8¶

Released: December 20, 2005

[Bug fix] A bug introduced in 2.1.7 that prevents AWStats from working properly has been fixed.
[Bug fix] A bug introduced in 2.1.7 that prevents error log file from rotating during server start up has been fixed.
[Bug fix] A bug that prevents matching proxy context from working properly has been fixed.
[Bug fix] The incorrect sort order of context sequence in WebAdmin console has been fixed.
[Bug fix] A bug in access logging which always logs HTTP/1.0 requests as HTTP/1.1 has been fixed.

2.1.7¶

Released: December 8, 2005

[Bug fix] A bug in FastCGI interface that causes compatibility problem with Python FCGI interface has been fixed.
[Bug fix] A bug in rewrite internal functions has been fixed.
[Feature] Authentication of web administration interface has been changed to cookie mode; password can be remembered by browser.
[Improvement] Error logging has been improved to log access-denied hot-linking sites.
[Bug fix] A bug that causes broken zipped dynamically generated pages in IE has been fixed.

2.1.6¶

Released: November 22, 2005

[Security] The ConfMgr.php Cross-Site Scripting Vulnerability has been fixed; it should not cause any problem as administrator's password is required to exploit it.
[Improvement] Reverse proxy has been improved to handle DAV requests properly.
[Bug fix] A bug that causes hanging LSAPI application not being properly stopped by LSWS has been fixed.

2.1.5¶

Released: November 1, 2005

[Bug fix] A bug in LSAPI response header handling has been fixed to remove invalid headers.
[Bug fix] A bug in web administration interface that causes missing context data has been fixed.
[Improvement] Matching contexts defined prior to the first normal context will be given higher priority.

2.1.4¶

Released: October 20, 2005

[Feature] A feature has been added to adjust "Process Limit" automatically for external applications when the limit is too low.
[Improvement] Minimum UID required for web server process has been lowered from 50 to 10.

2.1.3¶

Released: October 17, 2005

[Improvement] External application manager has been improved to adjust connection pool size and stop idle applications automatically.
[Feature] Resource limit configuration has been added at individual external application level.
[Feature] An option to turn off persistent FastCGI connections has been added to work around a bug in Ruby on Rails FastCGI interface.
[Feature] A new feature has been added to apply Apache configuration changes automatically.
[Bug fix] A bug in MIME type definition has been fixed.
[Bug fix] Broken FastCGI authorizer configuration has been fixed.
[Security] OpenSSL library has been upgraded to 0.9.7h.
[Improvement] LiteSpeed PHP library has been updated.

2.1.2¶

Released: October 3, 2005

[Bug fix] A couple of minor bugs in .htaccess support have been fixed.
[Bug fix] A bug that caused leak in external application connection pool has been fixed.
[Improvement] LiteSpeed PHP library has been updated.

2.1.1¶

Released: September 26, 2005

[Bug fix] Incorrect CGI environment variable HTTP_IF_NO_MATCH has been fixed.
[Bug fix] A bug that caused GZIP compression not working in LiteSpeed PHP has been fixed.
[Improvement] LiteSpeed PHP library has been updated.

2.1¶

Released: September 21, 2005

[Feature] Apache configuration support has been added; LiteSpeed Web Server is able to run from an Apache configuration file. Apache compatibilities have been improved.
[Feature] LiteSpeed API, the fastest server API for LiteSpeed Web Server, has been implemented.
[Feature] PHP LiteSpeed SAPI has been implemented with enhanced PHP performance (30% over FastCGI PHP and 100% over Apache mod_php), as well as flexible PHP configuration overridden via .htaccess files.
[Feature] A stateless external application load balancer has been implemented.
[Feature] SSL CA certificate configuration has been added.
[Improvement] Extra protection against 503 errors has been added.
[Misc] Minor bug fixes.

RC3¶

Released: August 31, 2005

[Feature] Apache configuration support has been added; LiteSpeed Web Server is able to run from an Apache configuration file.
[Improvement] LSAPI protocol has been improved.
[Improvement] PHP LiteSpeed API has been improved.
[Feature] SSL CA certificate configuration has been added.
[Bug fix] Minor bug fixes in rewrite engine.

RC2¶

Released: July 25, 2005

[Improvement] Distributed configuration .htaccess support has been re-engineered in order to improve Apache inter-changeability.
[Feature] DirectoryIndex directive support has been added.
[Feature] CGI daemon socket has been made configurable.
[Improvement] Multiple IP addresses will be passed through X-Forwarded-For header.
[Bug fix] There are bug fixes in epoll support.
[Improvement] PHP binary has been upgraded to 4.4.0.
[Improvement] Zlib has been upgraded to 1.2.3.

RC1¶

Released: May 16, 2005

[Feature] LiteSpeed SAPI, the fastest server API for LiteSpeed Web Server, has been implemented.
[Feature] PHP LiteSpeed API has been implemented with enhanced PHP performance (30% over FastCGI PHP and 100% over Apache mod_php), as well as flexible PHP configuration overridden via .htaccess files.
[Feature] A stateless external application load balancer has been implemented.
[Improvement] External application manager has been improved to deal with non-responding external applications.

Version 2.0¶

2.0.7¶

Released: June 15, 2005

[Feature] Configuration for static file cache has been added.
[Bug fix] Bugs in Solaris /dev/poll and sendfile() support have been fixed.
[Bug fix] A bug in FreeBSD kqueue support has been fixed.
[Bug fix] More bug fixes on external application manager.

2.0.6¶

Released: May 24, 2005

[Bug fix] Bug fixes on external application manager.

2.0.5¶

Released: May 23, 2005

[Improvement] TCP_NODELAY flag for a proxy connection has been added to fix a proxy slowdown problem.
[Improvement] External application manager has been improved to handle hanging external applications.

2.0.4¶

Released: April 26, 2005

[Improvement] Distributed configuration (.htaccess) cache has been improved to reduce memory usage.
[Bug fix] An assertion failure has been fixed.
[Improvement] There are minor improvements in URL rewrite engine.
[Bug fix] A bug in FastCGI Authorizer implementation has been fixed.
[Bug fix] A problem in managing FastCGI application with command line parameter has been fixed.

2.0.3¶

Released: April 18, 2005

[Bug fix] Inaccurate real-time report result under heavy load has been fixed.
[Improvement] URL rewrite engine has been improved to be more compatible with Apache's.
[Bug fix] A bug in listener management which failed to release a deleted listener has been fixed.
[Improvement] Bundled PHP binary has been upgraded to 4.3.11.

2.0.2¶

Released: March 31, 2005

[Bug fix] A bug that caused server to dump core when request contains no "Host:" header has been fixed.
[Bug fix] Broken FrontPage Server Extension under chroot environment has been fixed.
[Bug fix] A bug in MIME configuration has been fixed.

2.0.1¶

Released: March 29, 2005

[Bug fix] A couple of minor bugs in WebAdmin interface have been fixed.
[Feature] Support for command line parameters of external application has been added.
[Improvement] Apache Configuration Import Tool has been improved.
[Improvement] Error logging has been improved.

2.0¶

Released: March 10, 2005

[Improvement] Completely re-engineered web administration interface.
[Feature] Automatic software update.
[Feature] Flexible directory index.
[Feature] FastCGI Authorizer.
[Feature] Virtual host configuration template.
[Feature] Apache configuration import tool.
[Feature] Advanced access logging via external piped logger application.
[Feature] IPv6 support.
[Feature] SMP linear performance with Enterprise Edition.
[Feature] High performance event dispatchers: epoll, kqueue and /dev/poll.
[Misc] There are feature improvements in many areas; overall performance has been greatly improved for both Standard and Professional Edition.

RC7¶

Released: February 4, 2005

[Feature] IPv6 support has been added.
[Bug fix] Minor bug fixes in administration interface.

RC6¶

Released: January 24, 2005

[Bug fix] A couple of minor bugs in WebAdmin interface have been fixed.
[Bug fix] A bug that causes virtual hosts loading problem when there is no server level script handler defined has been fixed.
[Bug fix] A bug that prevents CGI handler being used as a script handler has been fixed.
[Bug fix] A bug in epoll event dispatcher has been fixed.

RC5¶

Released: January 19, 2005

[Improvement] WebAdmin interface has been completely re-engineered.
[Feature] Virtual host template configuration has been implemented for mass hosting environment.
[Feature] Advanced access logging via external piped logger application has been implemented.
[Feature] An update agent has been implemented; upgrade/version management can be done via web interface.
[Feature] A Mac OS X release has been added.
[Improvement] Apache configuration import tool has been improved.
[Improvement] Performance of Standard Edition has been greatly improved.
[Bug fix] Minor bug fixes.

RC4¶

Released: December 21, 2004

[Feature] Apache configuration migration tool is available.
[Improvement] Process manager for external application has been improved.
[Feature] Limitation of number of virtual hosts has been removed.
[Feature] High performance event dispatchers: epoll, kqueue and /dev/poll have been implemented.
[Feature] DirectoryIndex directive support in .htaccess has been added.
[Improvement] Bundled PHP binary has been upgraded to 4.3.10.
[Bug fix] Minor bug fixes.

RC3¶

Released: November 2, 2004

[Feature] FastCGI Authorizer support has been implemented.
[Feature] Wildcard domain name is implemented in listener to virtual host mapping.
[Feature] Regular expression can be used to specify allowed domains in hotlink protection.
[Bug fix] Bug fixes in rewrite engine.

RC2¶

Released: September 21, 2004

[Feature] AWStats (log analyzer) has been integrated with LiteSpeed WebAdmin interface; AWStats configuration and statistics updates have been automated.
[Improvement] Server watchdog has been completely re-engineered, which allows 100% up-time during server restarts and even server binary upgrades.
[Bug fix] A bug in rewrite engine has been fixed.
[Improvement] Compatibility with Apache's mod_rewrite has been improved.
[Feature] Rotated access log file can be stored in compressed format.
[Improvement] Reliability and security have been improved for CGI daemon.

RC1¶

Released: August 23, 2004

[Feature] An Apache-compatible rewrite engine has been implemented.
[Feature] Support for Microsoft FrontPage Server Extension 2002 has been added.
[Feature] Flexible directory auto-indexing by using external script to generate index page has been implemented.
[Feature] suEXEC for FastCGI application has been implemented.
[Improvement] Static file compression has been improved by using internal compression routine; suffix for compressed file has been changed from .gz to .lsz.

Version 1.5¶

1.5.11¶

Released: October 28, 2004

[Security] OpenSSL library has been upgraded to 0.9.7e.
[Bug fix] SSL hardware accelerator not working on FreeBSD problem has been fixed.

1.5.10¶

Released: October 20, 2004

[Bug fix] A bug in CGI daemon on Solaris that leaves zombie children processes has been fixed.
[Feature] Request rate throttling can be turned off for trusted IPs.
[Improvement] The accuracy of idle connection count in real-time server status report has been improved.
[Tuning] Default configuration has been fine tuned.

1.5.9¶

Released: September 29, 2004

[Improvement] Pre-built PHP binary has been upgraded to version 4.3.9 with GD and zlib extensions enabled.
[Feature] A persistent Perl CGI daemon equivalent to Apache mod_perl's Apache::Registry has been added.

1.5.8¶

Released: September 9, 2004

[Improvement] Anti-DoS algorithm has been improved.
[Bug fix] A bug that may cause Solaris SPARC version crash has been fixed.
[Bug fix] A bug that may cause corrupted reply on FreeBSD has been fixed.
[Misc] Other minor improvements.

1.5.7¶

Released: August 10, 2004

[Bug fix] A bug that may cause internally redirected requests failure has been fixed.
[Bug fix] A bug in SSL implementation that may cause a blank page displayed in user's web browser has been fixed.
[Improvement] FastCGI process manager has been improved to remove dead UNIX domain sockets automatically.
[Bug fix] A bug in WebAdmin interface has been fixed.

1.5.6¶

Released: July 30, 2004

[Feature] Support of "Satisfy" directive in .htaccess has been added.
[Improvement] CGI header handling has been improved to allow empty header.
[Feature] Session timeout control has been added in WebAdmin interface.
[Improvement] PHP binary has been upgraded to 4.3.8.
[Improvement] Installer has been improved to allow easy version switch.
[Bug fix] A bug in deleting context with special characters has been fixed in WebAdmin interface.
[Bug fix] A bug that causes listener's virtual host map inconsistent during virtual host name change has been fixed in WebAdmin interface.
[Bug fix] A bug that causes reverse proxy to stop working when response buffering is off has been fixed.

1.5.5¶

Released: July 12, 2004

[Feature] IP level request rate throttling has been implemented.
[Feature] Response buffering can be turned off for external applications (FastCGI, CGI, proxy).

1.5¶

Released: June 22, 2004

[Bug fix] Incorrect value of AUTH_USER environment variable for CGI, FastCGI has been fixed.
[Bug fix] A bug that causes LDAP connection error on low speed connection has been fixed.
[Bug fix] A bug in Log ID generation code has been fixed.
[Improvement] Performance of serving static content has been improved slightly.

RC4¶

Released: June 3, 2004

[Improvement] Performance has been improved for non-keep-alive connections.
[Feature] FastCGI priority is configurable now.
[Bug fix] A bug in HTTP authentication with plain file back-end user DB has been fixed.
[Bug fix] Broken CGI daemon on SPARC Solaris has been fixed.

RC3¶

Released: May 24, 2004

[Feature] HTTP authentication with LDAP back-end support has been implemented.
[Feature] SSL hardware acceleration device support has been implemented.
[Feature] Smart keep-alive algorithm which improves keep-alive efficiency on busy web site has been implemented.
[Improvement] FastCGI process manager has been improved; all children processes started by web server will be stopped when web server exits.

RC2¶

Released: April 28, 2004

[Feature] A real-time server usage report viewer has been implemented in WebAdmin interface.
[Bug fix] Various bugs introduced in 1.5RC1 have been fixed.

RC1¶

Released: April 20, 2004

[Feature] A lightweight high performance CGI daemon has been implemented; CGI performance has been improved greatly; CGI can be started in suEXEC and chroot mode.
[Feature] Manipulation of User/Group file for authentication realm has been implemented in WebAdmin interface.
[Improvement] I/O buffering policy has been changed to use in-memory buffer when available.
[Improvement] Logging performance has been improved.
[Feature] Default character set can be customized at context level or in a .htaccess file.
[Feature] MIME type can be customized at context level or in a .htaccess file.
[Feature] ForceType and DefaultType can be set at context level or in a .htaccess file.

Version 1.3¶

1.3.3¶

Released: March 24, 2004

[Improvement] Throttling algorithm has been improved to address long page loading time issue when throttling is enabled.

1.3.2¶

Released: March 19, 2004

[Security] OpenSSL has been upgraded to 0.9.7d to address security issues in 0.9.7c.

1.3.1¶

Released: February 26, 2004

[Bug fix] ETag header has been added into 304 response to fully comply with HTTP specification.

1.3¶

Released: February 18, 2004

[Feature] Installation of PHP accelerator MMCache and APC with pre-built binaries has been implemented.

RC3¶

Released: February 10, 2004

[Feature] Hotlink protection has been implemented.
[Bug fix] Minor bug fixes.

RC2¶

Released: February 2, 2004

[Improvement] Connection accounting/throttling algorithm has been improved.
[Improvement] FastCGI process manager has been improved.
[Tuning] Default value for various timeout configurations has been adjusted.

RC1¶

Released: January 23, 2004

[Feature] Implemented reverse proxy feature; LSWS can be used as a content accelerator, security gateway, or compression proxy running in front of any web server and application server that supports HTTP protocol.
[Feature] Implemented graceful shutdown; all requests in progress will be completed.
[Improvement] Improved installation script.
[Feature] Added an option to hide server version string in response header.
[Feature] Added an option to customize required and restricted permission mask for static files.
[Improvement] Improved process manager for FastCGI applications.
[Bug fix] Minor bug fixes in WebAdmin interface.

Version 1.2¶

1.2.2¶

Released: December 5, 2003

[Bug fix] Fixed minor bugs in SSL, FastCGI interface implementation.
[Bug fix] Fixed a minor bug in Servlet AJP 1.3 interface implementation.

1.2.1¶

Released: December 4, 2003

[Bug fix] Fixed minor bugs in SSL, throttling and FastCGI interface implementation.
[Bug fix] Fixed a minor bug in admin interface.
[Improvement] Improved FastCGI performance.

1.2¶

Released: November 25, 2003

[Bug fix] Minor bug fixes related to SSL and GZIP compression.

RC2¶

Released: November 21, 2003

[Feature] Added URL alias match support which is compatible with Apache's mod_alias.
[Feature] Added expires header support which is compatible with Apache's mod_expires.
[Feature] Added automatic creation and update of compressed static files to save network bandwidth.
[Improvement] Enhanced URL redirect functions.
[Bug fix] Minor bug fixes.
[Misc] Updated documentation.

RC1¶

Released: October 28, 2003

[Feature] Added chroot support with automatic chroot environment setup (Professional Edition only).
[Feature] Added UNIX domain socket support which increases inter-process communication performance between web server and FastCGI.
[Improvement] IP level connection accounting algorithm has been improved.
[Feature] Added CGI standard error output logging.
[Feature] Added CGI resource consumption limits.
[Bug fix] Minor bug fixes.
[Misc] Updated documentation.

Version 1.1¶

1.1.1¶

Released: October 15, 2003

[Bug fix] Fixed a bug that may cause range/multi-range requests to fail.
[Misc] Updated documentation.

1.1¶

Released: October 7, 2003

[Improvement] HTTP authentication has been re-engineered.
[Feature] Added an authentication cache; permissions can now be granted based on user names or group names.
[Feature] Added an Apache-like required directive.
[Feature] Implemented context level access control.
[Feature] Added .htaccess support and an .htaccess cache. Apache-like authentication, access control, and redirect directives are supported in .htaccess.
[Improvement] SSL toolkit has been updated to OpenSSL 0.9.7c.

Version 1.0¶

1.0.3¶

Released: August 15, 2003

[Bug fix] Fixed a bug in pre-built PHP binary that produces warnings under Red Hat 9.
[Feature] Added a configurable entry for maximum concurrent CGI instances.
[Security] Improved security by checking accessibility for symbolic links.
[Feature] Added a configurable entry for external application timeout.
[Improvement] Added an uninstall script and improved installer script.
[Misc] Updated documentation.

1.0.2¶

Released: July 23, 2003

[Improvement] The installation script will now work properly with group names or directory names that contain spaces.
[Feature] A configuration entry has been added to control core file creation when the server process is started by super user.
[Improvement] Automatic bug reporting has been improved.
[Improvement] Minor SSL improvements.

1.0.1¶

Released: July 8, 2003

[Bug fix] Fixed some bugs in the WebAdmin interface.
[Bug fix] Fixed compatibility bugs for FreeBSD/Solaris.
[Feature] Supported Solaris x86 platform.
[Bug fix] Fixed a bug in FastCGI implementation.
[Bug fix] Fixed a bug in basic authentication.
[Misc] Other minor improvements.

1.0¶

Released: July 1, 2003

[Misc] Initial public release. LiteSpeed Web Server came to life as a full-featured web server.