tree 38ad38022960b884a3e6cbfc58eaaf8a961bd5a1
parent 8dc8aec22132fe4e48285f79e61bf2ddceb37ebe
author Jerome Magnin <jmagnin@haproxy.com> 1579192641 +0100
committer Christopher Faulet <cfaulet@haproxy.com> 1579526373 +0100

BUG/MINOR: stream: don't mistake match rules for store-request rules

In process_sticking_rules() we only want to apply the first store-request
rule for a given table, but when doing so we need to make sure we only
count actual store-request rules when we list the sticking rules.

Failure to do so leads to not being able to write store-request and match
sticking rules in any order as a match rule after a store-request rule
will be ignored.

The following configuration reproduces the issue:

  global
    stats socket /tmp/foobar

  defaults
    mode http

  frontend in
    bind *:8080
    default_backend bar

  backend bar
    server s1 127.0.0.1:21212
    server s2 127.0.0.1:21211
    stick store-request req.hdr(foo)
    stick match req.hdr(foo)
    stick-table type string size 10

  listen foo
    bind *:21212
    bind *:21211
    http-request deny deny_status 200 if { dst_port 21212 }
    http-request deny

This patch fixes issue #448 and should be backported as far as 1.6.

(cherry picked from commit bee00ad080ff9359df8a670e891a6c2bce4acc39)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
(cherry picked from commit 791df6f59a268e432ef7bc675084acaa6f1a2ed8)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>