Hi there!

We're very proud to announce that HARP 0.12, the HTTP API Runtime Proxy, is out (changelog)!

0.12 makes HARP ready for production on PostgreSQL:

• Streaming responses. Bodies are streamed to clients as they arrive, and recording is capped at 1 MiB per body, so large payloads no longer cost memory or latency.
• A hardened proxy. The dashboard now requires authentication by default, slow clients get a 408 instead of tying up the proxy, upstream cookies are never shared between clients, and the path guard refuses more traversal tricks.
• No more silent data loss. When storage falls behind, HARP now says so: periodic warnings, a Prometheus counter and a /metrics endpoint on the dashboard port.
• A clear database story. PostgreSQL is the production database and SQLite is for development. MySQL and MariaDB still work but are deprecated.

0.12 changes a few defaults, so please read Upgrading to 0.12 first. In particular, database drivers are now extras (harp-proxy[postgresql]), and scripts calling the dashboard must send credentials.

If you can't upgrade yet, HARP 0.11.1 brings the same security fixes to the 0.11 line (changelog): please install it.

Questions or feedback? Just reply to this email, we read every message.

Happy proxying!

HARP Development Team