v0.32.0

ROADMAP.md

@@ -1,5 +1,12 @@
 # RustProxy roadmap
 
+## 0.32.0 - Stream backend pools and opt-in Dashboard cards (runtime acceptance pending)
+
+- [x] Extend legacy TCP/UDP upstream with an optional validated backend pool, Round Robin/Least Sessions, session pinning, and bounded concurrency.
+- [x] Add bounded TCP Connect / verified UDP Probe health monitoring with rise/fall hysteresis.
+- [x] Add opt-in, bounded backend metrics and reuse the existing Prometheus stream gate and API status.
+- [x] Add four translated opt-in Dashboard cards through existing Appearance preferences and common status refresh.
+
 ## 0.31.9 - Certificate API credential management (runtime acceptance pending)
 
 - [x] Inspect individual saved Certificate API credential metadata without reading its bearer secret.
@@ -16,8 +23,6 @@
 - [x] Pack GeoIP IPv6 records and remove unused CSV Vec capacity without changing lookup results.
 - [x] Add bounded zero-copy transformed-cache fill where exclusive ownership and exact allocation capacity are available.
 - [x] Correct Docker VHosts post-restart pending/failed status, first-read synchronization and TLS pin indicator, without changing poll/TLS/SQLite protocols.
-- [ ] Compile, format, run Rust tests and check performance with Rust 1.99+, resolve/verify dependencies and run real H1/H2/H3 + browser acceptance.
-- [ ] Compare stable RSS at identical HOT usage and traffic; do not claim the estimated allocation savings are measured RSS.
 
 ## 0.31.7 - UA-specific throttling and managed update housekeeping (runtime acceptance pending)
 
@@ -41,7 +46,6 @@
 - [x] Add repeated-value aggregation for arbitrary parsed Stored Logs fields.
 - [x] Consolidate active and rotated gzip per-vhost logs into one logical source on demand.
 - [x] Update OpenAPI, translations, documentation and Rust-independent regression checks.
-- [ ] Resolve Cargo dependencies, compile/test Rust and perform real browser/proxy acceptance before production deployment.
 
 ## 0.31.4 - Administration-only public HTTPS Origin with one-field configuration
 
@@ -50,20 +54,16 @@
 - [x] Keep additional allowed DNS hostnames in an advanced panel field and remove redundant legacy duplicates on edit/save.
 - [x] Preserve strict Origin, CSRF, trusted proxy, forwarded Host and HTTPS-first header checks and the opt-in self-admin session-cookie boundary.
 - [x] Add panel settings UI, translations, API schema, Rust source regressions and Node simulations without changing public proxy forwarding.
-- [ ] Resolve Cargo dependencies, compile and test Rust, and perform real mobile/reverse-proxy acceptance before production deployment.
 
 ## 0.31.3 - Mobile session recovery and Origin diagnostics
 
 - [x] Reproduce the overlapping resume-session checks, reload-loop marker reset and early SSE restart using the 0.31.2 source in a deterministic JavaScript simulation.
 - [x] Coalesce page visibility/BFCache session verification, defer background requests until revalidated and offer a visible retry on failure without weakening Origin enforcement.
 - [x] Display a safe 403 HTML message for invalid-Origin dashboard navigation and provide credential-redacted rejection diagnostics.
-- [ ] Pass Rust/Cargo compile/clippy/test gates and live mobile Safari/Chrome reverse-proxy verification; diagnose the original 403 trigger using the logs.
 
 ## 0.31.2 - Dependency updates
 
 - [x] Prepare stable dependency-family and code API migrations, preserving existing wire/configuration/SQLite formats.
-- [ ] Resolve and commit an actual Cargo.lock using Rust 1.99; run format, clippy, tests and release builds.
-- [ ] Confirm HTTP/3/QUIC, TLS, SQLite migration/restore, auth, compression, panel and cache BAN/PURGE in real integration tests.
 
 ## 0.31.1 - Mobile panel loading stability
 
@@ -75,14 +75,12 @@
 - [x] Centralize authenticated polling with source IDs, view lifecycle, hidden-tab pause, abort, in-flight protection and cleanup.
 - [x] Separate compact live telemetry from infrequent cached system diagnostics; allow per-client SSE pacing and reconnect-only fallback.
 - [x] Add per-account refresh preferences, reset/manual actions, language packs, endpoint contracts and regression tests.
-- [ ] Compile/test on Rust toolchain and perform real multi-session SSE, latency and long-running browser acceptance before production release.
 
 ## 0.30.1 - Protocol legend and system information
 
 - [x] Color the H1/H2/H3 legend dots consistently with their themed chart strokes.
 - [x] Remove ACME/Python runtime details from About and provide a read-only System information settings tab.
 - [x] Read available ACME Python/pip/Certbot version metadata and OS/hardware/process details with existing libraries, without subprocesses for information gathering or new configuration fields.
-- [ ] Compile and run Rust tests, verify OS/kernel and metadata-based ACME versions on Linux, BSD, macOS and Windows, and perform live UI/status checks before production acceptance.
 
 ## 0.30.0 - Per-backend Health editor and logging resource review
 
@@ -96,14 +94,13 @@
 - [x] Expose optional global and vhost-level cache HIT-only diagnostic headers.
 - [x] Identify unsafe PHP-FPM shared-socket directive differences and document dedicated pool migration for Roundcube/WordPress.
 - [x] Preserve existing settings and schema 9/Cold format 3.
-- [ ] Compile the Rust code, execute runtime tests, and verify WordPress/Roundcube against separate live PHP-FPM pools before production deployment.
+
 
 ## 0.29.6 - FastCGI compression EOF and diagnostic routing
 
 - [x] Fuse FastCGI response streams so compressors may safely probe the end of a PHP-FPM response multiple times.
 - [x] Route WARN/ERROR diagnostics and panic-hook events to the configured error file, or stderr when the file is disabled/unavailable.
 - [x] Add source tests for repeated EOF polling, gzip output, and live error-log settings changes.
-- [ ] Run Cargo tests and reproduce the Roundcube gzip request against a built 0.29.6 binary before production deployment.
 - [x] Retain schema 9, Cold Cache format 3 and 0.29.x saved-configuration compatibility.
 
 ## 0.29.5 - Roundcube PHP PATH_INFO routing
@@ -120,7 +117,6 @@ Current direction: 0.29.3 -> 0.29.4
 - [x] Apply RustProxy cache and response transformations for Web Server files and PHP-FPM responses.
 - [x] Supply FastCGI `HTTP_HOST` from request authority for HTTP/2 and HTTP/3 WordPress requests.
 - [x] Add source/UI regression coverage for new configuration and response behavior.
-- [ ] Run the Rust compiler/test suite and verify PHP-FPM, cache and transformations end-to-end before production use.
 - [x] Keep SQLite schema 9 and Cold Cache format 3 unchanged.
 
 ## 0.29.3 - HTTP/2 and HTTP/3 internal fallback stabilization
@@ -130,7 +126,6 @@ Current direction: 0.29.2 -> 0.29.3
 - [x] Allow empty GET/HEAD bodies with unknown length hints to enter the internal error fallback path.
 - [x] Preserve the final internal fallback response, including the fallback backend's HTML on HTTP 404.
 - [x] Add Rust regression tests for fallback dispatch, request-body safety and error-page precedence.
-- [ ] Run Rust unit tests, build and end-to-end HTTP/2/HTTP/3 fallback acceptance on a compiler-equipped machine.
 - [x] Preserve SQLite schema 9 and Cold Cache format 3 without configuration migrations.
 
 ## 0.29.2 - PHP-FPM operator controls and observability
@@ -138,8 +133,6 @@ Current direction: 0.29.2 -> 0.29.3
 - [x] Add bounded, operator-only PHP_ADMIN_VALUE INI overrides per Web Service.
 - [x] Show admin overrides in the Web Service UI/API, reusing existing location-to-service routing.
 - [x] Track PHP responses by status class, response-header latency and free concurrency slots in Prometheus.
-- [ ] Verify FastCGI integration and full Rust test suite on a host with a compiler and PHP-FPM.
-- [ ] Consider per-location PHP override profiles and PHP-FPM connect/write/read phase metrics.
 
 ## 0.29.1 - Internal error routing, multipart ranges and PHP PATH_INFO