src/cfgparse-tcp.c - haproxy - Gitiles

 /*
  * Configuration parsing for TCP (bind and server keywords)
  *
  * Copyright 2000-2020 Willy Tarreau <w@1wt.eu>
  *
  * This program is free software; you can redistribute it and/or
  * modify it under the terms of the GNU General Public License
  * as published by the Free Software Foundation; either version
  * 2 of the License, or (at your option) any later version.
  *
  */

 #include <ctype.h>
 #include <errno.h>
 #include <fcntl.h>
 #include <stdio.h>
 #include <stdlib.h>
 #include <string.h>
 #include <time.h>

 #include <sys/param.h>
 #include <sys/socket.h>
 #include <sys/types.h>

 #include <netinet/tcp.h>
 #include <netinet/in.h>

 #include <haproxy/api.h>
 #include <haproxy/arg.h>
 #include <haproxy/errors.h>
 #include <haproxy/list.h>
 #include <haproxy/listener.h>
 #include <haproxy/namespace.h>
 #include <haproxy/proxy-t.h>
 #include <haproxy/server.h>
 #include <haproxy/tools.h>


 #ifdef IPV6_V6ONLY
 /* parse the "v4v6" bind keyword */
 static int bind_parse_v4v6(char **args, int cur_arg, struct proxy *px, struct bind_conf *conf, char **err)
 {
 	struct listener *l;

 	list_for_each_entry(l, &conf->listeners, by_bind) {
 		if (l->addr.ss_family == AF_INET6)
 			l->options |= LI_O_V4V6;
 	}

 	return 0;
 }

 /* parse the "v6only" bind keyword */
 static int bind_parse_v6only(char **args, int cur_arg, struct proxy *px, struct bind_conf *conf, char **err)
 {
 	struct listener *l;

 	list_for_each_entry(l, &conf->listeners, by_bind) {
 		if (l->addr.ss_family == AF_INET6)
 			l->options |= LI_O_V6ONLY;
 	}

 	return 0;
 }
 #endif

 #ifdef CONFIG_HAP_TRANSPARENT
 /* parse the "transparent" bind keyword */
 static int bind_parse_transparent(char **args, int cur_arg, struct proxy *px, struct bind_conf *conf, char **err)
 {
 	struct listener *l;

 	list_for_each_entry(l, &conf->listeners, by_bind) {
 		if (l->addr.ss_family == AF_INET || l->addr.ss_family == AF_INET6)
 			l->options |= LI_O_FOREIGN;
 	}

 	return 0;
 }
 #endif

 #ifdef TCP_DEFER_ACCEPT
 /* parse the "defer-accept" bind keyword */
 static int bind_parse_defer_accept(char **args, int cur_arg, struct proxy *px, struct bind_conf *conf, char **err)
 {
 	struct listener *l;

 	list_for_each_entry(l, &conf->listeners, by_bind) {
 		if (l->addr.ss_family == AF_INET || l->addr.ss_family == AF_INET6)
 			l->options |= LI_O_DEF_ACCEPT;
 	}

 	return 0;
 }
 #endif

 #ifdef TCP_FASTOPEN
 /* parse the "tfo" bind keyword */
 static int bind_parse_tfo(char **args, int cur_arg, struct proxy *px, struct bind_conf *conf, char **err)
 {
 	struct listener *l;

 	list_for_each_entry(l, &conf->listeners, by_bind) {
 		if (l->addr.ss_family == AF_INET || l->addr.ss_family == AF_INET6)
 			l->options |= LI_O_TCP_FO;
 	}

 	return 0;
 }
 #endif

 #ifdef TCP_MAXSEG
 /* parse the "mss" bind keyword */
 static int bind_parse_mss(char **args, int cur_arg, struct proxy *px, struct bind_conf *conf, char **err)
 {
 	struct listener *l;
 	int mss;

 	if (!*args[cur_arg + 1]) {
 		memprintf(err, "'%s' : missing MSS value", args[cur_arg]);
 		return ERR_ALERT | ERR_FATAL;
 	}

 	mss = atoi(args[cur_arg + 1]);
 	if (!mss || abs(mss) > 65535) {
 		memprintf(err, "'%s' : expects an MSS with and absolute value between 1 and 65535", args[cur_arg]);
 		return ERR_ALERT | ERR_FATAL;
 	}

 	list_for_each_entry(l, &conf->listeners, by_bind) {
 		if (l->addr.ss_family == AF_INET || l->addr.ss_family == AF_INET6)
 			l->maxseg = mss;
 	}

 	return 0;
 }
 #endif

 #ifdef TCP_USER_TIMEOUT
 /* parse the "tcp-ut" bind keyword */
 static int bind_parse_tcp_ut(char **args, int cur_arg, struct proxy *px, struct bind_conf *conf, char **err)
 {
 	const char *ptr = NULL;
 	struct listener *l;
 	unsigned int timeout;

 	if (!*args[cur_arg + 1]) {
 		memprintf(err, "'%s' : missing TCP User Timeout value", args[cur_arg]);
 		return ERR_ALERT | ERR_FATAL;
 	}

 	ptr = parse_time_err(args[cur_arg + 1], &timeout, TIME_UNIT_MS);
 	if (ptr == PARSE_TIME_OVER) {
 		memprintf(err, "timer overflow in argument '%s' to '%s' (maximum value is 2147483647 ms or ~24.8 days)",
 			  args[cur_arg+1], args[cur_arg]);
 		return ERR_ALERT | ERR_FATAL;
 	}
 	else if (ptr == PARSE_TIME_UNDER) {
 		memprintf(err, "timer underflow in argument '%s' to '%s' (minimum non-null value is 1 ms)",
 			  args[cur_arg+1], args[cur_arg]);
 		return ERR_ALERT | ERR_FATAL;
 	}
 	else if (ptr) {
 		memprintf(err, "'%s' : expects a positive delay in milliseconds", args[cur_arg]);
 		return ERR_ALERT | ERR_FATAL;
 	}

 	list_for_each_entry(l, &conf->listeners, by_bind) {
 		if (l->addr.ss_family == AF_INET || l->addr.ss_family == AF_INET6)
 			l->tcp_ut = timeout;
 	}

 	return 0;
 }
 #endif

 #ifdef SO_BINDTODEVICE
 /* parse the "interface" bind keyword */
 static int bind_parse_interface(char **args, int cur_arg, struct proxy *px, struct bind_conf *conf, char **err)
 {
 	if (!*args[cur_arg + 1]) {
 		memprintf(err, "'%s' : missing interface name", args[cur_arg]);
 		return ERR_ALERT | ERR_FATAL;
 	}

 	conf->settings.interface = strdup(args[cur_arg + 1]);
 	return 0;
 }
 #endif

 #ifdef USE_NS
 /* parse the "namespace" bind keyword */
 static int bind_parse_namespace(char **args, int cur_arg, struct proxy *px, struct bind_conf *conf, char **err)
 {
 	struct listener *l;
 	char *namespace = NULL;

 	if (!*args[cur_arg + 1]) {
 		memprintf(err, "'%s' : missing namespace id", args[cur_arg]);
 		return ERR_ALERT | ERR_FATAL;
 	}
 	namespace = args[cur_arg + 1];

 	list_for_each_entry(l, &conf->listeners, by_bind) {
 		l->netns = netns_store_lookup(namespace, strlen(namespace));

 		if (l->netns == NULL)
 			l->netns = netns_store_insert(namespace);

 		if (l->netns == NULL) {
 			ha_alert("Cannot open namespace '%s'.\n", args[cur_arg + 1]);
 			return ERR_ALERT | ERR_FATAL;
 		}
 	}
 	return 0;
 }
 #endif

 #ifdef TCP_USER_TIMEOUT
 /* parse the "tcp-ut" server keyword */
 static int srv_parse_tcp_ut(char **args, int *cur_arg, struct proxy *px, struct server *newsrv, char **err)
 {
 	const char *ptr = NULL;
 	unsigned int timeout;

 	if (!*args[*cur_arg + 1]) {
 		memprintf(err, "'%s' : missing TCP User Timeout value", args[*cur_arg]);
 		return ERR_ALERT | ERR_FATAL;
 	}

 	ptr = parse_time_err(args[*cur_arg + 1], &timeout, TIME_UNIT_MS);
 	if (ptr == PARSE_TIME_OVER) {
 		memprintf(err, "timer overflow in argument '%s' to '%s' (maximum value is 2147483647 ms or ~24.8 days)",
 			  args[*cur_arg+1], args[*cur_arg]);
 		return ERR_ALERT | ERR_FATAL;
 	}
 	else if (ptr == PARSE_TIME_UNDER) {
 		memprintf(err, "timer underflow in argument '%s' to '%s' (minimum non-null value is 1 ms)",
 			  args[*cur_arg+1], args[*cur_arg]);
 		return ERR_ALERT | ERR_FATAL;
 	}
 	else if (ptr) {
 		memprintf(err, "'%s' : expects a positive delay in milliseconds", args[*cur_arg]);
 		return ERR_ALERT | ERR_FATAL;
 	}

 	if (newsrv->addr.ss_family == AF_INET || newsrv->addr.ss_family == AF_INET6)
 		newsrv->tcp_ut = timeout;

 	return 0;
 }
 #endif


 /************************************************************************/
 /*           All supported bind keywords must be declared here.         */
 /************************************************************************/

 /* Note: must not be declared <const> as its list will be overwritten.
  * Please take care of keeping this list alphabetically sorted, doing so helps
  * all code contributors.
  * Optional keywords are also declared with a NULL ->parse() function so that
  * the config parser can report an appropriate error when a known keyword was
  * not enabled.
  */
 static struct bind_kw_list bind_kws = { "TCP", { }, {
 #ifdef TCP_DEFER_ACCEPT
 	{ "defer-accept",  bind_parse_defer_accept, 0 }, /* wait for some data for 1 second max before doing accept */
 #endif
 #ifdef SO_BINDTODEVICE
 	{ "interface",     bind_parse_interface,    1 }, /* specifically bind to this interface */
 #endif
 #ifdef TCP_MAXSEG
 	{ "mss",           bind_parse_mss,          1 }, /* set MSS of listening socket */
 #endif
 #ifdef TCP_USER_TIMEOUT
 	{ "tcp-ut",        bind_parse_tcp_ut,       1 }, /* set User Timeout on listening socket */
 #endif
 #ifdef TCP_FASTOPEN
 	{ "tfo",           bind_parse_tfo,          0 }, /* enable TCP_FASTOPEN of listening socket */
 #endif
 #ifdef CONFIG_HAP_TRANSPARENT
 	{ "transparent",   bind_parse_transparent,  0 }, /* transparently bind to the specified addresses */
 #endif
 #ifdef IPV6_V6ONLY
 	{ "v4v6",          bind_parse_v4v6,         0 }, /* force socket to bind to IPv4+IPv6 */
 	{ "v6only",        bind_parse_v6only,       0 }, /* force socket to bind to IPv6 only */
 #endif
 #ifdef USE_NS
 	{ "namespace",     bind_parse_namespace,    1 },
 #endif
 	/* the versions with the NULL parse function*/
 	{ "defer-accept",  NULL,  0 },
 	{ "interface",     NULL,  1 },
 	{ "mss",           NULL,  1 },
 	{ "transparent",   NULL,  0 },
 	{ "v4v6",          NULL,  0 },
 	{ "v6only",        NULL,  0 },
 	{ NULL, NULL, 0 },
 }};

 INITCALL1(STG_REGISTER, bind_register_keywords, &bind_kws);

 static struct srv_kw_list srv_kws = { "TCP", { }, {
 #ifdef TCP_USER_TIMEOUT
 	{ "tcp-ut",        srv_parse_tcp_ut,        1,  1 }, /* set TCP user timeout on server */
 #endif
 	{ NULL, NULL, 0 },
 }};

 INITCALL1(STG_REGISTER, srv_register_keywords, &srv_kws);


 REGISTER_BUILD_OPTS("Built with transparent proxy support using:"
 #if defined(IP_TRANSPARENT)
 		    " IP_TRANSPARENT"
 #endif
 #if defined(IPV6_TRANSPARENT)
 		    " IPV6_TRANSPARENT"
 #endif
 #if defined(IP_FREEBIND)
 		    " IP_FREEBIND"
 #endif
 #if defined(IP_BINDANY)
 		    " IP_BINDANY"
 #endif
 #if defined(IPV6_BINDANY)
 		    " IPV6_BINDANY"
 #endif
 #if defined(SO_BINDANY)
 		    " SO_BINDANY"
 #endif
 		    "");


 /*
  * Local variables:
  *  c-indent-level: 8
  *  c-basic-offset: 8
  * End:
  */
	/*
	* Configuration parsing for TCP (bind and server keywords)
	*
	* Copyright 2000-2020 Willy Tarreau <w@1wt.eu>
	*
	* This program is free software; you can redistribute it and/or
	* modify it under the terms of the GNU General Public License
	* as published by the Free Software Foundation; either version
	* 2 of the License, or (at your option) any later version.
	*
	*/

	#include <ctype.h>
	#include <errno.h>
	#include <fcntl.h>
	#include <stdio.h>
	#include <stdlib.h>
	#include <string.h>
	#include <time.h>

	#include <sys/param.h>
	#include <sys/socket.h>
	#include <sys/types.h>

	#include <netinet/tcp.h>
	#include <netinet/in.h>

	#include <haproxy/api.h>
	#include <haproxy/arg.h>
	#include <haproxy/errors.h>
	#include <haproxy/list.h>
	#include <haproxy/listener.h>
	#include <haproxy/namespace.h>
	#include <haproxy/proxy-t.h>
	#include <haproxy/server.h>
	#include <haproxy/tools.h>


	#ifdef IPV6_V6ONLY
	/* parse the "v4v6" bind keyword */
	static int bind_parse_v4v6(char *args, int cur_arg, struct proxy px, struct bind_conf conf, char *err)
	{
	struct listener *l;

	list_for_each_entry(l, &conf->listeners, by_bind) {
	if (l->addr.ss_family == AF_INET6)
	l->options \|= LI_O_V4V6;
	}

	return 0;
	}

	/* parse the "v6only" bind keyword */
	static int bind_parse_v6only(char *args, int cur_arg, struct proxy px, struct bind_conf conf, char *err)
	{
	struct listener *l;

	list_for_each_entry(l, &conf->listeners, by_bind) {
	if (l->addr.ss_family == AF_INET6)
	l->options \|= LI_O_V6ONLY;
	}

	return 0;
	}
	#endif

	#ifdef CONFIG_HAP_TRANSPARENT
	/* parse the "transparent" bind keyword */
	static int bind_parse_transparent(char *args, int cur_arg, struct proxy px, struct bind_conf conf, char *err)
	{
	struct listener *l;

	list_for_each_entry(l, &conf->listeners, by_bind) {
	if (l->addr.ss_family == AF_INET \|\| l->addr.ss_family == AF_INET6)
	l->options \|= LI_O_FOREIGN;
	}

	return 0;
	}
	#endif

	#ifdef TCP_DEFER_ACCEPT
	/* parse the "defer-accept" bind keyword */
	static int bind_parse_defer_accept(char *args, int cur_arg, struct proxy px, struct bind_conf conf, char *err)
	{
	struct listener *l;

	list_for_each_entry(l, &conf->listeners, by_bind) {
	if (l->addr.ss_family == AF_INET \|\| l->addr.ss_family == AF_INET6)
	l->options \|= LI_O_DEF_ACCEPT;
	}

	return 0;
	}
	#endif

	#ifdef TCP_FASTOPEN
	/* parse the "tfo" bind keyword */
	static int bind_parse_tfo(char *args, int cur_arg, struct proxy px, struct bind_conf conf, char *err)
	{
	struct listener *l;

	list_for_each_entry(l, &conf->listeners, by_bind) {
	if (l->addr.ss_family == AF_INET \|\| l->addr.ss_family == AF_INET6)
	l->options \|= LI_O_TCP_FO;
	}

	return 0;
	}
	#endif

	#ifdef TCP_MAXSEG
	/* parse the "mss" bind keyword */
	static int bind_parse_mss(char *args, int cur_arg, struct proxy px, struct bind_conf conf, char *err)
	{
	struct listener *l;
	int mss;

	if (!*args[cur_arg + 1]) {
	memprintf(err, "'%s' : missing MSS value", args[cur_arg]);
	return ERR_ALERT \| ERR_FATAL;
	}

	mss = atoi(args[cur_arg + 1]);
	if (!mss \|\| abs(mss) > 65535) {
	memprintf(err, "'%s' : expects an MSS with and absolute value between 1 and 65535", args[cur_arg]);
	return ERR_ALERT \| ERR_FATAL;
	}

	list_for_each_entry(l, &conf->listeners, by_bind) {
	if (l->addr.ss_family == AF_INET \|\| l->addr.ss_family == AF_INET6)
	l->maxseg = mss;
	}

	return 0;
	}
	#endif

	#ifdef TCP_USER_TIMEOUT
	/* parse the "tcp-ut" bind keyword */
	static int bind_parse_tcp_ut(char *args, int cur_arg, struct proxy px, struct bind_conf conf, char *err)
	{
	const char *ptr = NULL;
	struct listener *l;
	unsigned int timeout;

	if (!*args[cur_arg + 1]) {
	memprintf(err, "'%s' : missing TCP User Timeout value", args[cur_arg]);
	return ERR_ALERT \| ERR_FATAL;
	}

	ptr = parse_time_err(args[cur_arg + 1], &timeout, TIME_UNIT_MS);
	if (ptr == PARSE_TIME_OVER) {
	memprintf(err, "timer overflow in argument '%s' to '%s' (maximum value is 2147483647 ms or ~24.8 days)",
	args[cur_arg+1], args[cur_arg]);
	return ERR_ALERT \| ERR_FATAL;
	}
	else if (ptr == PARSE_TIME_UNDER) {
	memprintf(err, "timer underflow in argument '%s' to '%s' (minimum non-null value is 1 ms)",
	args[cur_arg+1], args[cur_arg]);
	return ERR_ALERT \| ERR_FATAL;
	}
	else if (ptr) {
	memprintf(err, "'%s' : expects a positive delay in milliseconds", args[cur_arg]);
	return ERR_ALERT \| ERR_FATAL;
	}

	list_for_each_entry(l, &conf->listeners, by_bind) {
	if (l->addr.ss_family == AF_INET \|\| l->addr.ss_family == AF_INET6)
	l->tcp_ut = timeout;
	}

	return 0;
	}
	#endif

	#ifdef SO_BINDTODEVICE
	/* parse the "interface" bind keyword */
	static int bind_parse_interface(char *args, int cur_arg, struct proxy px, struct bind_conf conf, char *err)
	{
	if (!*args[cur_arg + 1]) {
	memprintf(err, "'%s' : missing interface name", args[cur_arg]);
	return ERR_ALERT \| ERR_FATAL;
	}

	conf->settings.interface = strdup(args[cur_arg + 1]);
	return 0;
	}
	#endif

	#ifdef USE_NS
	/* parse the "namespace" bind keyword */
	static int bind_parse_namespace(char *args, int cur_arg, struct proxy px, struct bind_conf conf, char *err)
	{
	struct listener *l;
	char *namespace = NULL;

	if (!*args[cur_arg + 1]) {
	memprintf(err, "'%s' : missing namespace id", args[cur_arg]);
	return ERR_ALERT \| ERR_FATAL;
	}
	namespace = args[cur_arg + 1];

	list_for_each_entry(l, &conf->listeners, by_bind) {
	l->netns = netns_store_lookup(namespace, strlen(namespace));

	if (l->netns == NULL)
	l->netns = netns_store_insert(namespace);

	if (l->netns == NULL) {
	ha_alert("Cannot open namespace '%s'.\n", args[cur_arg + 1]);
	return ERR_ALERT \| ERR_FATAL;
	}
	}
	return 0;
	}
	#endif

	#ifdef TCP_USER_TIMEOUT
	/* parse the "tcp-ut" server keyword */
	static int srv_parse_tcp_ut(char *args, int cur_arg, struct proxy px, struct server newsrv, char **err)
	{
	const char *ptr = NULL;
	unsigned int timeout;

	if (!args[cur_arg + 1]) {
	memprintf(err, "'%s' : missing TCP User Timeout value", args[*cur_arg]);
	return ERR_ALERT \| ERR_FATAL;
	}

	ptr = parse_time_err(args[*cur_arg + 1], &timeout, TIME_UNIT_MS);
	if (ptr == PARSE_TIME_OVER) {
	memprintf(err, "timer overflow in argument '%s' to '%s' (maximum value is 2147483647 ms or ~24.8 days)",
	args[cur_arg+1], args[cur_arg]);
	return ERR_ALERT \| ERR_FATAL;
	}
	else if (ptr == PARSE_TIME_UNDER) {
	memprintf(err, "timer underflow in argument '%s' to '%s' (minimum non-null value is 1 ms)",
	args[cur_arg+1], args[cur_arg]);
	return ERR_ALERT \| ERR_FATAL;
	}
	else if (ptr) {
	memprintf(err, "'%s' : expects a positive delay in milliseconds", args[*cur_arg]);
	return ERR_ALERT \| ERR_FATAL;
	}

	if (newsrv->addr.ss_family == AF_INET \|\| newsrv->addr.ss_family == AF_INET6)
	newsrv->tcp_ut = timeout;

	return 0;
	}
	#endif


	/************************************************************************/
	/* All supported bind keywords must be declared here. */
	/************************************************************************/

	/* Note: must not be declared <const> as its list will be overwritten.
	* Please take care of keeping this list alphabetically sorted, doing so helps
	* all code contributors.
	* Optional keywords are also declared with a NULL ->parse() function so that
	* the config parser can report an appropriate error when a known keyword was
	* not enabled.
	*/
	static struct bind_kw_list bind_kws = { "TCP", { }, {
	#ifdef TCP_DEFER_ACCEPT
	{ "defer-accept", bind_parse_defer_accept, 0 }, /* wait for some data for 1 second max before doing accept */
	#endif
	#ifdef SO_BINDTODEVICE
	{ "interface", bind_parse_interface, 1 }, /* specifically bind to this interface */
	#endif
	#ifdef TCP_MAXSEG
	{ "mss", bind_parse_mss, 1 }, /* set MSS of listening socket */
	#endif
	#ifdef TCP_USER_TIMEOUT
	{ "tcp-ut", bind_parse_tcp_ut, 1 }, /* set User Timeout on listening socket */
	#endif
	#ifdef TCP_FASTOPEN
	{ "tfo", bind_parse_tfo, 0 }, /* enable TCP_FASTOPEN of listening socket */
	#endif
	#ifdef CONFIG_HAP_TRANSPARENT
	{ "transparent", bind_parse_transparent, 0 }, /* transparently bind to the specified addresses */
	#endif
	#ifdef IPV6_V6ONLY
	{ "v4v6", bind_parse_v4v6, 0 }, /* force socket to bind to IPv4+IPv6 */
	{ "v6only", bind_parse_v6only, 0 }, /* force socket to bind to IPv6 only */
	#endif
	#ifdef USE_NS
	{ "namespace", bind_parse_namespace, 1 },
	#endif
	/* the versions with the NULL parse function*/
	{ "defer-accept", NULL, 0 },
	{ "interface", NULL, 1 },
	{ "mss", NULL, 1 },
	{ "transparent", NULL, 0 },
	{ "v4v6", NULL, 0 },
	{ "v6only", NULL, 0 },
	{ NULL, NULL, 0 },
	}};

	INITCALL1(STG_REGISTER, bind_register_keywords, &bind_kws);

	static struct srv_kw_list srv_kws = { "TCP", { }, {
	#ifdef TCP_USER_TIMEOUT
	{ "tcp-ut", srv_parse_tcp_ut, 1, 1 }, /* set TCP user timeout on server */
	#endif
	{ NULL, NULL, 0 },
	}};

	INITCALL1(STG_REGISTER, srv_register_keywords, &srv_kws);


	REGISTER_BUILD_OPTS("Built with transparent proxy support using:"
	#if defined(IP_TRANSPARENT)
	" IP_TRANSPARENT"
	#endif
	#if defined(IPV6_TRANSPARENT)
	" IPV6_TRANSPARENT"
	#endif
	#if defined(IP_FREEBIND)
	" IP_FREEBIND"
	#endif
	#if defined(IP_BINDANY)
	" IP_BINDANY"
	#endif
	#if defined(IPV6_BINDANY)
	" IPV6_BINDANY"
	#endif
	#if defined(SO_BINDANY)
	" SO_BINDANY"
	#endif
	"");


	/*
	* Local variables:
	* c-indent-level: 8
	* c-basic-offset: 8
	* End:
	*/