blob: 28094a83d41937fcf30f84c83fff8937c17ce431 [file] [log] [blame]
Willy Tarreaubaaee002006-06-26 02:48:02 +02001/*
2 * Proxy variables and functions.
3 *
Willy Tarreau3a7d2072009-03-05 23:48:25 +01004 * Copyright 2000-2009 Willy Tarreau <w@1wt.eu>
Willy Tarreaubaaee002006-06-26 02:48:02 +02005 *
6 * This program is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU General Public License
8 * as published by the Free Software Foundation; either version
9 * 2 of the License, or (at your option) any later version.
10 *
11 */
12
13#include <fcntl.h>
14#include <unistd.h>
Willy Tarreauc8f24f82007-11-30 18:38:35 +010015#include <string.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020016#include <sys/types.h>
17#include <sys/socket.h>
18#include <sys/stat.h>
19
Willy Tarreau2dd0d472006-06-29 17:53:05 +020020#include <common/defaults.h>
Willy Tarreau9de1bbd2008-07-09 20:34:27 +020021#include <common/cfgparse.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020022#include <common/compat.h>
Willy Tarreaue3ba5f02006-06-29 18:54:54 +020023#include <common/config.h>
Willy Tarreaud740bab2007-10-28 11:14:07 +010024#include <common/errors.h>
Willy Tarreau4d2d0982007-05-14 00:39:29 +020025#include <common/memory.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020026#include <common/time.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020027
28#include <types/global.h>
Emeric Brun5a8c0a92010-09-23 18:44:36 +020029#include <types/peers.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020030
Alexandre Cassen87ea5482007-10-11 20:48:58 +020031#include <proto/backend.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020032#include <proto/fd.h>
Willy Tarreau51aecc72009-07-12 09:47:04 +020033#include <proto/hdr_idx.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020034#include <proto/log.h>
Willy Tarreaue6b98942007-10-29 01:09:36 +010035#include <proto/protocols.h>
36#include <proto/proto_tcp.h>
Willy Tarreau39e4f622010-05-31 17:01:36 +020037#include <proto/proto_http.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020038#include <proto/proxy.h>
Willy Tarreaud0807c32010-08-27 18:26:11 +020039#include <proto/signal.h>
Emeric Brun5a8c0a92010-09-23 18:44:36 +020040#include <proto/task.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020041
42
Willy Tarreau918ff602011-07-25 16:33:49 +020043int listeners; /* # of proxy listeners, set by cfgparse */
Willy Tarreaubaaee002006-06-26 02:48:02 +020044struct proxy *proxy = NULL; /* list of all existing proxies */
Willy Tarreau53fb4ae2009-10-04 23:04:08 +020045struct eb_root used_proxy_id = EB_ROOT; /* list of proxy IDs in use */
Willy Tarreau10479e42010-12-12 14:00:34 +010046unsigned int error_snapshot_id = 0; /* global ID assigned to each error then incremented */
Willy Tarreaubaaee002006-06-26 02:48:02 +020047
Willy Tarreau977b8e42006-12-29 14:19:17 +010048/*
Willy Tarreau816eb542007-11-04 07:04:43 +010049 * This function returns a string containing a name describing capabilities to
50 * report comprehensible error messages. Specifically, it will return the words
51 * "frontend", "backend", "ruleset" when appropriate, or "proxy" for all other
52 * cases including the proxies declared in "listen" mode.
Willy Tarreau977b8e42006-12-29 14:19:17 +010053 */
Willy Tarreau816eb542007-11-04 07:04:43 +010054const char *proxy_cap_str(int cap)
Willy Tarreau977b8e42006-12-29 14:19:17 +010055{
Willy Tarreau816eb542007-11-04 07:04:43 +010056 if ((cap & PR_CAP_LISTEN) != PR_CAP_LISTEN) {
57 if (cap & PR_CAP_FE)
58 return "frontend";
59 else if (cap & PR_CAP_BE)
60 return "backend";
61 else if (cap & PR_CAP_RS)
62 return "ruleset";
63 }
64 return "proxy";
Willy Tarreau977b8e42006-12-29 14:19:17 +010065}
66
Krzysztof Piotr Oledzki6eb730d2007-11-03 23:41:58 +010067/*
68 * This function returns a string containing the mode of the proxy in a format
69 * suitable for error messages.
70 */
Krzysztof Piotr Oledzki6eb730d2007-11-03 23:41:58 +010071const char *proxy_mode_str(int mode) {
72
73 if (mode == PR_MODE_TCP)
74 return "tcp";
75 else if (mode == PR_MODE_HTTP)
76 return "http";
77 else if (mode == PR_MODE_HEALTH)
78 return "health";
79 else
80 return "unknown";
81}
82
Willy Tarreauf3950172009-10-10 18:35:51 +020083/*
84 * This function scans the list of backends and servers to retrieve the first
85 * backend and the first server with the given names, and sets them in both
86 * parameters. It returns zero if either is not found, or non-zero and sets
87 * the ones it did not found to NULL. If a NULL pointer is passed for the
88 * backend, only the pointer to the server will be updated.
89 */
90int get_backend_server(const char *bk_name, const char *sv_name,
91 struct proxy **bk, struct server **sv)
92{
93 struct proxy *p;
94 struct server *s;
Willy Tarreaucfeaa472009-10-10 22:33:08 +020095 int pid, sid;
Willy Tarreauf3950172009-10-10 18:35:51 +020096
97 *sv = NULL;
98
Willy Tarreaucfeaa472009-10-10 22:33:08 +020099 pid = 0;
100 if (*bk_name == '#')
101 pid = atoi(bk_name + 1);
102 sid = 0;
103 if (*sv_name == '#')
104 sid = atoi(sv_name + 1);
105
Willy Tarreauf3950172009-10-10 18:35:51 +0200106 for (p = proxy; p; p = p->next)
Willy Tarreaucfeaa472009-10-10 22:33:08 +0200107 if ((p->cap & PR_CAP_BE) &&
108 ((pid && p->uuid == pid) ||
109 (!pid && strcmp(p->id, bk_name) == 0)))
Willy Tarreauf3950172009-10-10 18:35:51 +0200110 break;
111 if (bk)
112 *bk = p;
113 if (!p)
114 return 0;
115
116 for (s = p->srv; s; s = s->next)
Willy Tarreaucfeaa472009-10-10 22:33:08 +0200117 if ((sid && s->puid == sid) ||
118 (!sid && strcmp(s->id, sv_name) == 0))
Willy Tarreauf3950172009-10-10 18:35:51 +0200119 break;
120 *sv = s;
121 if (!s)
122 return 0;
123 return 1;
124}
125
Willy Tarreaue219db72007-12-03 01:30:13 +0100126/* This function parses a "timeout" statement in a proxy section. It returns
127 * -1 if there is any error, 1 for a warning, otherwise zero. If it does not
128 * return zero, it may write an error message into the <err> buffer, for at
129 * most <errlen> bytes, trailing zero included. The trailing '\n' must not
130 * be written. The function must be called with <args> pointing to the first
Willy Tarreau9de1bbd2008-07-09 20:34:27 +0200131 * command line word, with <proxy> pointing to the proxy being parsed, and
Willy Tarreaue219db72007-12-03 01:30:13 +0100132 * <defpx> to the default proxy or NULL. As a special case for compatibility
133 * with older configs, it also accepts "{cli|srv|con}timeout" in args[0].
134 */
Willy Tarreau9de1bbd2008-07-09 20:34:27 +0200135static int proxy_parse_timeout(char **args, int section, struct proxy *proxy,
136 struct proxy *defpx, char *err, int errlen)
Willy Tarreaue219db72007-12-03 01:30:13 +0100137{
138 unsigned timeout;
139 int retval, cap;
140 const char *res, *name;
Willy Tarreau0c303ee2008-07-07 00:09:58 +0200141 int *tv = NULL;
142 int *td = NULL;
Willy Tarreaue219db72007-12-03 01:30:13 +0100143
144 retval = 0;
Willy Tarreau9de1bbd2008-07-09 20:34:27 +0200145
146 /* simply skip "timeout" but remain compatible with old form */
147 if (strcmp(args[0], "timeout") == 0)
148 args++;
149
Willy Tarreaue219db72007-12-03 01:30:13 +0100150 name = args[0];
151 if (!strcmp(args[0], "client") || !strcmp(args[0], "clitimeout")) {
152 name = "client";
Willy Tarreaud7c30f92007-12-03 01:38:36 +0100153 tv = &proxy->timeout.client;
154 td = &defpx->timeout.client;
Willy Tarreaue219db72007-12-03 01:30:13 +0100155 cap = PR_CAP_FE;
156 } else if (!strcmp(args[0], "tarpit")) {
157 tv = &proxy->timeout.tarpit;
158 td = &defpx->timeout.tarpit;
Willy Tarreau51c9bde2008-01-06 13:40:03 +0100159 cap = PR_CAP_FE | PR_CAP_BE;
Willy Tarreaub16a5742010-01-10 14:46:16 +0100160 } else if (!strcmp(args[0], "http-keep-alive")) {
161 tv = &proxy->timeout.httpka;
162 td = &defpx->timeout.httpka;
163 cap = PR_CAP_FE | PR_CAP_BE;
Willy Tarreau036fae02008-01-06 13:24:40 +0100164 } else if (!strcmp(args[0], "http-request")) {
165 tv = &proxy->timeout.httpreq;
166 td = &defpx->timeout.httpreq;
Willy Tarreaucd7afc02009-07-12 10:03:17 +0200167 cap = PR_CAP_FE | PR_CAP_BE;
Willy Tarreaue219db72007-12-03 01:30:13 +0100168 } else if (!strcmp(args[0], "server") || !strcmp(args[0], "srvtimeout")) {
169 name = "server";
Willy Tarreaud7c30f92007-12-03 01:38:36 +0100170 tv = &proxy->timeout.server;
171 td = &defpx->timeout.server;
Willy Tarreaue219db72007-12-03 01:30:13 +0100172 cap = PR_CAP_BE;
173 } else if (!strcmp(args[0], "connect") || !strcmp(args[0], "contimeout")) {
174 name = "connect";
Willy Tarreaud7c30f92007-12-03 01:38:36 +0100175 tv = &proxy->timeout.connect;
176 td = &defpx->timeout.connect;
Willy Tarreaue219db72007-12-03 01:30:13 +0100177 cap = PR_CAP_BE;
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +0100178 } else if (!strcmp(args[0], "check")) {
179 tv = &proxy->timeout.check;
180 td = &defpx->timeout.check;
181 cap = PR_CAP_BE;
Willy Tarreaue219db72007-12-03 01:30:13 +0100182 } else if (!strcmp(args[0], "queue")) {
183 tv = &proxy->timeout.queue;
184 td = &defpx->timeout.queue;
185 cap = PR_CAP_BE;
186 } else {
Willy Tarreau036fae02008-01-06 13:24:40 +0100187 snprintf(err, errlen,
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +0100188 "timeout '%s': must be 'client', 'server', 'connect', 'check', "
Willy Tarreau76bfc952010-01-10 17:48:11 +0100189 "'queue', 'http-keep-alive', 'http-request' or 'tarpit'",
Willy Tarreaue219db72007-12-03 01:30:13 +0100190 args[0]);
191 return -1;
192 }
193
194 if (*args[1] == 0) {
195 snprintf(err, errlen, "%s timeout expects an integer value (in milliseconds)", name);
196 return -1;
197 }
198
199 res = parse_time_err(args[1], &timeout, TIME_UNIT_MS);
200 if (res) {
Willy Tarreaubb9251e2009-03-06 08:05:40 +0100201 snprintf(err, errlen, "unexpected character '%c' in %s timeout", *res, name);
Willy Tarreaue219db72007-12-03 01:30:13 +0100202 return -1;
203 }
204
205 if (!(proxy->cap & cap)) {
206 snprintf(err, errlen, "%s timeout will be ignored because %s '%s' has no %s capability",
207 name, proxy_type_str(proxy), proxy->id,
208 (cap & PR_CAP_BE) ? "backend" : "frontend");
209 retval = 1;
210 }
Willy Tarreau0c303ee2008-07-07 00:09:58 +0200211 else if (defpx && *tv != *td) {
Willy Tarreaue219db72007-12-03 01:30:13 +0100212 snprintf(err, errlen, "overwriting %s timeout which was already specified", name);
213 retval = 1;
214 }
215
Willy Tarreau0c303ee2008-07-07 00:09:58 +0200216 *tv = MS_TO_TICKS(timeout);
Willy Tarreaue219db72007-12-03 01:30:13 +0100217 return retval;
218}
219
Willy Tarreau3a7d2072009-03-05 23:48:25 +0100220/* This function parses a "rate-limit" statement in a proxy section. It returns
221 * -1 if there is any error, 1 for a warning, otherwise zero. If it does not
222 * return zero, it may write an error message into the <err> buffer, for at
223 * most <errlen> bytes, trailing zero included. The trailing '\n' must not
224 * be written. The function must be called with <args> pointing to the first
225 * command line word, with <proxy> pointing to the proxy being parsed, and
226 * <defpx> to the default proxy or NULL.
227 */
228static int proxy_parse_rate_limit(char **args, int section, struct proxy *proxy,
229 struct proxy *defpx, char *err, int errlen)
230{
231 int retval, cap;
232 char *res, *name;
233 unsigned int *tv = NULL;
234 unsigned int *td = NULL;
235 unsigned int val;
236
237 retval = 0;
238
239 /* simply skip "rate-limit" */
240 if (strcmp(args[0], "rate-limit") == 0)
241 args++;
242
243 name = args[0];
244 if (!strcmp(args[0], "sessions")) {
245 name = "sessions";
Willy Tarreau13a34bd2009-05-10 18:52:49 +0200246 tv = &proxy->fe_sps_lim;
247 td = &defpx->fe_sps_lim;
Willy Tarreau3a7d2072009-03-05 23:48:25 +0100248 cap = PR_CAP_FE;
249 } else {
250 snprintf(err, errlen,
251 "%s '%s': must be 'sessions'",
252 "rate-limit", args[0]);
253 return -1;
254 }
255
256 if (*args[1] == 0) {
257 snprintf(err, errlen, "%s %s expects expects an integer value (in sessions/second)", "rate-limit", name);
258 return -1;
259 }
260
261 val = strtoul(args[1], &res, 0);
262 if (*res) {
263 snprintf(err, errlen, "%s %s: unexpected character '%c' in integer value '%s'", "rate-limit", name, *res, args[1]);
264 return -1;
265 }
266
267 if (!(proxy->cap & cap)) {
268 snprintf(err, errlen, "%s %s will be ignored because %s '%s' has no %s capability",
269 "rate-limit", name, proxy_type_str(proxy), proxy->id,
270 (cap & PR_CAP_BE) ? "backend" : "frontend");
271 retval = 1;
272 }
273 else if (defpx && *tv != *td) {
274 snprintf(err, errlen, "overwriting %s %s which was already specified", "rate-limit", name);
275 retval = 1;
276 }
277
278 *tv = val;
279 return retval;
280}
281
Krzysztof Piotr Oledzki6eb730d2007-11-03 23:41:58 +0100282/*
283 * This function finds a proxy with matching name, mode and with satisfying
284 * capabilities. It also checks if there are more matching proxies with
285 * requested name as this often leads into unexpected situations.
286 */
287
Alex Williams96532db2009-11-01 21:27:13 -0500288struct proxy *findproxy_mode(const char *name, int mode, int cap) {
Krzysztof Piotr Oledzki6eb730d2007-11-03 23:41:58 +0100289
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100290 struct proxy *curproxy, *target = NULL;
Krzysztof Piotr Oledzki6eb730d2007-11-03 23:41:58 +0100291
292 for (curproxy = proxy; curproxy; curproxy = curproxy->next) {
293 if ((curproxy->cap & cap)!=cap || strcmp(curproxy->id, name))
294 continue;
295
Willy Tarreau51aecc72009-07-12 09:47:04 +0200296 if (curproxy->mode != mode &&
297 !(curproxy->mode == PR_MODE_HTTP && mode == PR_MODE_TCP)) {
Krzysztof Piotr Oledzki6eb730d2007-11-03 23:41:58 +0100298 Alert("Unable to use proxy '%s' with wrong mode, required: %s, has: %s.\n",
299 name, proxy_mode_str(mode), proxy_mode_str(curproxy->mode));
300 Alert("You may want to use 'mode %s'.\n", proxy_mode_str(mode));
301 return NULL;
302 }
303
304 if (!target) {
305 target = curproxy;
306 continue;
307 }
308
Willy Tarreau816eb542007-11-04 07:04:43 +0100309 Alert("Refusing to use duplicated proxy '%s' with overlapping capabilities: %s/%s!\n",
Krzysztof Piotr Oledzki6eb730d2007-11-03 23:41:58 +0100310 name, proxy_type_str(curproxy), proxy_type_str(target));
311
312 return NULL;
313 }
314
315 return target;
316}
Willy Tarreaubaaee002006-06-26 02:48:02 +0200317
Willy Tarreaubc216c42011-08-02 11:25:54 +0200318/* Returns a pointer to the proxy matching either name <name>, or id <name> if
319 * <name> begins with a '#'. NULL is returned if no match is found, as well as
320 * if multiple matches are found (eg: too large capabilities mask).
321 */
Alex Williams96532db2009-11-01 21:27:13 -0500322struct proxy *findproxy(const char *name, int cap) {
323
324 struct proxy *curproxy, *target = NULL;
Willy Tarreaubc216c42011-08-02 11:25:54 +0200325 int pid = 0;
326
327 if (*name == '#')
328 pid = atoi(name + 1);
Alex Williams96532db2009-11-01 21:27:13 -0500329
330 for (curproxy = proxy; curproxy; curproxy = curproxy->next) {
Willy Tarreaubc216c42011-08-02 11:25:54 +0200331 if ((curproxy->cap & cap) != cap ||
332 (pid && curproxy->uuid != pid) ||
333 (!pid && strcmp(curproxy->id, name)))
Alex Williams96532db2009-11-01 21:27:13 -0500334 continue;
335
336 if (!target) {
337 target = curproxy;
338 continue;
339 }
340
341 return NULL;
342 }
343
344 return target;
345}
346
Willy Tarreaubaaee002006-06-26 02:48:02 +0200347/*
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100348 * This function finds a server with matching name within selected proxy.
349 * It also checks if there are more matching servers with
350 * requested name as this often leads into unexpected situations.
351 */
352
353struct server *findserver(const struct proxy *px, const char *name) {
354
355 struct server *cursrv, *target = NULL;
356
357 if (!px)
358 return NULL;
359
360 for (cursrv = px->srv; cursrv; cursrv = cursrv->next) {
361 if (strcmp(cursrv->id, name))
362 continue;
363
364 if (!target) {
365 target = cursrv;
366 continue;
367 }
368
369 Alert("Refusing to use duplicated server '%s' fould in proxy: %s!\n",
370 name, px->id);
371
372 return NULL;
373 }
374
375 return target;
376}
377
Willy Tarreauff01a212009-03-15 13:46:16 +0100378/* This function checks that the designated proxy has no http directives
379 * enabled. It will output a warning if there are, and will fix some of them.
380 * It returns the number of fatal errors encountered. This should be called
381 * at the end of the configuration parsing if the proxy is not in http mode.
382 * The <file> argument is used to construct the error message.
383 */
Willy Tarreau915e1eb2009-06-22 15:48:36 +0200384int proxy_cfg_ensure_no_http(struct proxy *curproxy)
Willy Tarreauff01a212009-03-15 13:46:16 +0100385{
386 if (curproxy->cookie_name != NULL) {
Willy Tarreau915e1eb2009-06-22 15:48:36 +0200387 Warning("config : cookie will be ignored for %s '%s' (needs 'mode http').\n",
388 proxy_type_str(curproxy), curproxy->id);
Willy Tarreauff01a212009-03-15 13:46:16 +0100389 }
390 if (curproxy->rsp_exp != NULL) {
Willy Tarreau915e1eb2009-06-22 15:48:36 +0200391 Warning("config : server regular expressions will be ignored for %s '%s' (needs 'mode http').\n",
392 proxy_type_str(curproxy), curproxy->id);
Willy Tarreauff01a212009-03-15 13:46:16 +0100393 }
394 if (curproxy->req_exp != NULL) {
Willy Tarreau915e1eb2009-06-22 15:48:36 +0200395 Warning("config : client regular expressions will be ignored for %s '%s' (needs 'mode http').\n",
396 proxy_type_str(curproxy), curproxy->id);
Willy Tarreauff01a212009-03-15 13:46:16 +0100397 }
398 if (curproxy->monitor_uri != NULL) {
Willy Tarreau915e1eb2009-06-22 15:48:36 +0200399 Warning("config : monitor-uri will be ignored for %s '%s' (needs 'mode http').\n",
400 proxy_type_str(curproxy), curproxy->id);
Willy Tarreauff01a212009-03-15 13:46:16 +0100401 }
Willy Tarreauf3e49f92009-10-03 12:21:20 +0200402 if (curproxy->lbprm.algo & BE_LB_NEED_HTTP) {
Willy Tarreauff01a212009-03-15 13:46:16 +0100403 curproxy->lbprm.algo &= ~BE_LB_ALGO;
404 curproxy->lbprm.algo |= BE_LB_ALGO_RR;
Willy Tarreau915e1eb2009-06-22 15:48:36 +0200405 Warning("config : Layer 7 hash not possible for %s '%s' (needs 'mode http'). Falling back to round robin.\n",
406 proxy_type_str(curproxy), curproxy->id);
Willy Tarreauff01a212009-03-15 13:46:16 +0100407 }
Willy Tarreau17804162009-11-09 21:27:51 +0100408 if (curproxy->to_log & (LW_REQ | LW_RESP)) {
409 curproxy->to_log &= ~(LW_REQ | LW_RESP);
410 Warning("config : 'option httplog' not usable with %s '%s' (needs 'mode http'). Falling back to 'option tcplog'.\n",
411 proxy_type_str(curproxy), curproxy->id);
412 }
Willy Tarreauff01a212009-03-15 13:46:16 +0100413 return 0;
414}
415
Willy Tarreau237250c2011-07-29 01:49:03 +0200416/* Perform the most basic initialization of a proxy :
417 * memset(), list_init(*), reset_timeouts(*).
Willy Tarreaub249e842011-09-07 18:41:08 +0200418 * Any new proxy or peer should be initialized via this function.
Willy Tarreau237250c2011-07-29 01:49:03 +0200419 */
420void init_new_proxy(struct proxy *p)
421{
422 memset(p, 0, sizeof(struct proxy));
423 LIST_INIT(&p->pendconns);
424 LIST_INIT(&p->acl);
425 LIST_INIT(&p->http_req_rules);
426 LIST_INIT(&p->block_cond);
427 LIST_INIT(&p->redirect_rules);
428 LIST_INIT(&p->mon_fail_cond);
429 LIST_INIT(&p->switching_rules);
430 LIST_INIT(&p->persist_rules);
431 LIST_INIT(&p->sticking_rules);
432 LIST_INIT(&p->storersp_rules);
433 LIST_INIT(&p->tcp_req.inspect_rules);
434 LIST_INIT(&p->tcp_rep.inspect_rules);
435 LIST_INIT(&p->tcp_req.l4_rules);
436 LIST_INIT(&p->req_add);
437 LIST_INIT(&p->rsp_add);
438 LIST_INIT(&p->listener_queue);
William Lallemand0f99e342011-10-12 17:50:54 +0200439 LIST_INIT(&p->logsrvs);
Willy Tarreau237250c2011-07-29 01:49:03 +0200440
441 /* Timeouts are defined as -1 */
442 proxy_reset_timeouts(p);
443 p->tcp_rep.inspect_delay = TICK_ETERNITY;
444}
445
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100446/*
Willy Tarreau2ff76222007-04-09 19:29:56 +0200447 * This function creates all proxy sockets. It should be done very early,
448 * typically before privileges are dropped. The sockets will be registered
449 * but not added to any fd_set, in order not to loose them across the fork().
Willy Tarreau562515c2011-07-25 08:11:52 +0200450 * The proxies also start in READY state because they all have their listeners
Willy Tarreauf3f8c702011-07-25 07:37:28 +0200451 * bound.
Willy Tarreau2ff76222007-04-09 19:29:56 +0200452 *
453 * Its return value is composed from ERR_NONE, ERR_RETRYABLE and ERR_FATAL.
454 * Retryable errors will only be printed if <verbose> is not zero.
Willy Tarreaubaaee002006-06-26 02:48:02 +0200455 */
456int start_proxies(int verbose)
457{
458 struct proxy *curproxy;
459 struct listener *listener;
Willy Tarreaue6b98942007-10-29 01:09:36 +0100460 int lerr, err = ERR_NONE;
461 int pxerr;
462 char msg[100];
Willy Tarreaubaaee002006-06-26 02:48:02 +0200463
464 for (curproxy = proxy; curproxy != NULL; curproxy = curproxy->next) {
465 if (curproxy->state != PR_STNEW)
466 continue; /* already initialized */
467
468 pxerr = 0;
469 for (listener = curproxy->listen; listener != NULL; listener = listener->next) {
Willy Tarreaue6b98942007-10-29 01:09:36 +0100470 if (listener->state != LI_ASSIGNED)
471 continue; /* already started */
Willy Tarreaubaaee002006-06-26 02:48:02 +0200472
Emeric Bruncf20bf12010-10-22 16:06:11 +0200473 lerr = listener->proto->bind(listener, msg, sizeof(msg));
Willy Tarreaubaaee002006-06-26 02:48:02 +0200474
Willy Tarreaue6b98942007-10-29 01:09:36 +0100475 /* errors are reported if <verbose> is set or if they are fatal */
476 if (verbose || (lerr & (ERR_FATAL | ERR_ABORT))) {
477 if (lerr & ERR_ALERT)
478 Alert("Starting %s %s: %s\n",
479 proxy_type_str(curproxy), curproxy->id, msg);
480 else if (lerr & ERR_WARN)
481 Warning("Starting %s %s: %s\n",
482 proxy_type_str(curproxy), curproxy->id, msg);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200483 }
484
Willy Tarreaue6b98942007-10-29 01:09:36 +0100485 err |= lerr;
486 if (lerr & (ERR_ABORT | ERR_FATAL)) {
Willy Tarreaubaaee002006-06-26 02:48:02 +0200487 pxerr |= 1;
Willy Tarreaue6b98942007-10-29 01:09:36 +0100488 break;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200489 }
Willy Tarreaue6b98942007-10-29 01:09:36 +0100490 else if (lerr & ERR_CODE) {
Willy Tarreaubaaee002006-06-26 02:48:02 +0200491 pxerr |= 1;
492 continue;
493 }
Willy Tarreaubaaee002006-06-26 02:48:02 +0200494 }
495
496 if (!pxerr) {
Willy Tarreau562515c2011-07-25 08:11:52 +0200497 curproxy->state = PR_STREADY;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200498 send_log(curproxy, LOG_NOTICE, "Proxy %s started.\n", curproxy->id);
499 }
Willy Tarreaue6b98942007-10-29 01:09:36 +0100500
501 if (err & ERR_ABORT)
502 break;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200503 }
504
505 return err;
506}
507
508
509/*
Willy Tarreau918ff602011-07-25 16:33:49 +0200510 * This is the proxy management task. It enables proxies when there are enough
511 * free sessions, or stops them when the table is full. It is designed to be
512 * called as a task which is woken up upon stopping or when rate limiting must
513 * be enforced.
Willy Tarreaubaaee002006-06-26 02:48:02 +0200514 */
Willy Tarreau918ff602011-07-25 16:33:49 +0200515struct task *manage_proxy(struct task *t)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200516{
Willy Tarreau918ff602011-07-25 16:33:49 +0200517 struct proxy *p = t->context;
518 int next = TICK_ETERNITY;
Willy Tarreau79584222009-03-06 09:18:27 +0100519 unsigned int wait;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200520
Willy Tarreau918ff602011-07-25 16:33:49 +0200521 /* We should periodically try to enable listeners waiting for a
522 * global resource here.
523 */
Willy Tarreaubaaee002006-06-26 02:48:02 +0200524
Willy Tarreau918ff602011-07-25 16:33:49 +0200525 /* first, let's check if we need to stop the proxy */
526 if (unlikely(stopping && p->state != PR_STSTOPPED)) {
527 int t;
528 t = tick_remain(now_ms, p->stop_time);
529 if (t == 0) {
530 Warning("Proxy %s stopped (FE: %lld conns, BE: %lld conns).\n",
531 p->id, p->fe_counters.cum_conn, p->be_counters.cum_conn);
532 send_log(p, LOG_WARNING, "Proxy %s stopped (FE: %lld conns, BE: %lld conns).\n",
533 p->id, p->fe_counters.cum_conn, p->be_counters.cum_conn);
534 stop_proxy(p);
535 /* try to free more memory */
536 pool_gc2();
537 }
538 else {
539 next = tick_first(next, p->stop_time);
540 }
541 }
Willy Tarreauf3f8c702011-07-25 07:37:28 +0200542
Willy Tarreau918ff602011-07-25 16:33:49 +0200543 /* the rest below is just for frontends */
544 if (!(p->cap & PR_CAP_FE))
545 goto out;
Willy Tarreauf3f8c702011-07-25 07:37:28 +0200546
Willy Tarreau918ff602011-07-25 16:33:49 +0200547 /* check the various reasons we may find to block the frontend */
548 if (unlikely(p->feconn >= p->maxconn)) {
549 if (p->state == PR_STREADY)
550 p->state = PR_STFULL;
551 goto out;
552 }
Willy Tarreau3a7d2072009-03-05 23:48:25 +0100553
Willy Tarreau918ff602011-07-25 16:33:49 +0200554 /* OK we have no reason to block, so let's unblock if we were blocking */
555 if (p->state == PR_STFULL)
556 p->state = PR_STREADY;
Willy Tarreau3a7d2072009-03-05 23:48:25 +0100557
Willy Tarreau918ff602011-07-25 16:33:49 +0200558 if (p->fe_sps_lim &&
559 (wait = next_event_delay(&p->fe_sess_per_sec, p->fe_sps_lim, 0))) {
560 /* we're blocking because a limit was reached on the number of
561 * requests/s on the frontend. We want to re-check ASAP, which
562 * means in 1 ms before estimated expiration date, because the
563 * timer will have settled down.
564 */
565 next = tick_first(next, tick_add(now_ms, wait));
566 goto out;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200567 }
Willy Tarreau918ff602011-07-25 16:33:49 +0200568
569 /* The proxy is not limited so we can re-enable any waiting listener */
570 if (!LIST_ISEMPTY(&p->listener_queue))
571 dequeue_all_listeners(&p->listener_queue);
572 out:
573 t->expire = next;
574 task_queue(t);
575 return t;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200576}
577
578
579/*
580 * this function disables health-check servers so that the process will quickly be ignored
581 * by load balancers. Note that if a proxy was already in the PAUSED state, then its grace
582 * time will not be used since it would already not listen anymore to the socket.
583 */
584void soft_stop(void)
585{
586 struct proxy *p;
Willy Tarreaubbe11b12011-07-25 11:16:24 +0200587 struct peers *prs;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200588
589 stopping = 1;
590 p = proxy;
Willy Tarreaub0b37bc2008-06-23 14:00:57 +0200591 tv_update_date(0,1); /* else, the old time before select will be used */
Willy Tarreaubaaee002006-06-26 02:48:02 +0200592 while (p) {
593 if (p->state != PR_STSTOPPED) {
Willy Tarreauf8fbcef2008-10-10 17:51:34 +0200594 Warning("Stopping %s %s in %d ms.\n", proxy_cap_str(p->cap), p->id, p->grace);
595 send_log(p, LOG_WARNING, "Stopping %s %s in %d ms.\n", proxy_cap_str(p->cap), p->id, p->grace);
Willy Tarreau0c303ee2008-07-07 00:09:58 +0200596 p->stop_time = tick_add(now_ms, p->grace);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200597 }
Emeric Brun5a8c0a92010-09-23 18:44:36 +0200598 if (p->table.size && p->table.sync_task)
599 task_wakeup(p->table.sync_task, TASK_WOKEN_MSG);
600
Willy Tarreau918ff602011-07-25 16:33:49 +0200601 /* wake every proxy task up so that they can handle the stopping */
602 task_wakeup(p->task, TASK_WOKEN_MSG);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200603 p = p->next;
604 }
Willy Tarreaubbe11b12011-07-25 11:16:24 +0200605
606 prs = peers;
607 while (prs) {
608 stop_proxy((struct proxy *)prs->peers_fe);
609 prs = prs->next;
610 }
Willy Tarreaud0807c32010-08-27 18:26:11 +0200611 /* signal zero is used to broadcast the "stopping" event */
612 signal_handler(0);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200613}
614
615
Willy Tarreaube58c382011-07-24 18:28:10 +0200616/* Temporarily disables listening on all of the proxy's listeners. Upon
617 * success, the proxy enters the PR_PAUSED state. If disabling at least one
618 * listener returns an error, then the proxy state is set to PR_STERROR
Willy Tarreauce8fe252011-09-07 19:14:57 +0200619 * because we don't know how to resume from this. The function returns 0
620 * if it fails, or non-zero on success.
Willy Tarreaubaaee002006-06-26 02:48:02 +0200621 */
Willy Tarreauce8fe252011-09-07 19:14:57 +0200622int pause_proxy(struct proxy *p)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200623{
624 struct listener *l;
Willy Tarreauce8fe252011-09-07 19:14:57 +0200625
626 if (!(p->cap & PR_CAP_FE) || p->state == PR_STERROR ||
627 p->state == PR_STSTOPPED || p->state == PR_STPAUSED)
628 return 1;
629
630 Warning("Pausing %s %s.\n", proxy_cap_str(p->cap), p->id);
631 send_log(p, LOG_WARNING, "Pausing %s %s.\n", proxy_cap_str(p->cap), p->id);
632
Willy Tarreaubaaee002006-06-26 02:48:02 +0200633 for (l = p->listen; l != NULL; l = l->next) {
Willy Tarreaube58c382011-07-24 18:28:10 +0200634 if (!pause_listener(l))
Willy Tarreaubaaee002006-06-26 02:48:02 +0200635 p->state = PR_STERROR;
636 }
Willy Tarreauce8fe252011-09-07 19:14:57 +0200637
638 if (p->state == PR_STERROR) {
639 Warning("%s %s failed to enter pause mode.\n", proxy_cap_str(p->cap), p->id);
640 send_log(p, LOG_WARNING, "%s %s failed to enter pause mode.\n", proxy_cap_str(p->cap), p->id);
641 return 0;
642 }
643
644 p->state = PR_STPAUSED;
645 return 1;
Willy Tarreauda250db2008-10-12 12:07:48 +0200646}
647
648
649/*
650 * This function completely stops a proxy and releases its listeners. It has
651 * to be called when going down in order to release the ports so that another
652 * process may bind to them. It must also be called on disabled proxies at the
653 * end of start-up. When all listeners are closed, the proxy is set to the
654 * PR_STSTOPPED state.
655 */
656void stop_proxy(struct proxy *p)
657{
658 struct listener *l;
659
660 for (l = p->listen; l != NULL; l = l->next) {
661 unbind_listener(l);
662 if (l->state >= LI_ASSIGNED) {
663 delete_listener(l);
664 listeners--;
Willy Tarreauaf7ad002010-08-31 15:39:26 +0200665 jobs--;
Willy Tarreauda250db2008-10-12 12:07:48 +0200666 }
667 }
668 p->state = PR_STSTOPPED;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200669}
670
Willy Tarreauc03ebbf2011-09-07 21:33:14 +0200671/* This function resumes listening on the specified proxy. It scans all of its
672 * listeners and tries to enable them all. If any of them fails, the proxy is
673 * put back to the paused state. It returns 1 upon success, or zero if an error
674 * is encountered.
675 */
676int resume_proxy(struct proxy *p)
677{
678 struct listener *l;
679 int fail;
680
681 if (p->state != PR_STPAUSED)
682 return 1;
683
684 Warning("Enabling %s %s.\n", proxy_cap_str(p->cap), p->id);
685 send_log(p, LOG_WARNING, "Enabling %s %s.\n", proxy_cap_str(p->cap), p->id);
686
687 fail = 0;
688 for (l = p->listen; l != NULL; l = l->next) {
689 if (!resume_listener(l)) {
690 int port;
691
692 port = get_host_port(&l->addr);
693 if (port) {
694 Warning("Port %d busy while trying to enable %s %s.\n",
695 port, proxy_cap_str(p->cap), p->id);
696 send_log(p, LOG_WARNING, "Port %d busy while trying to enable %s %s.\n",
697 port, proxy_cap_str(p->cap), p->id);
698 }
699 else {
700 Warning("Bind on socket %d busy while trying to enable %s %s.\n",
701 l->luid, proxy_cap_str(p->cap), p->id);
702 send_log(p, LOG_WARNING, "Bind on socket %d busy while trying to enable %s %s.\n",
703 l->luid, proxy_cap_str(p->cap), p->id);
704 }
705
706 /* Another port might have been enabled. Let's stop everything. */
707 fail = 1;
708 break;
709 }
710 }
711
712 p->state = PR_STREADY;
713 if (fail) {
714 pause_proxy(p);
715 return 0;
716 }
717 return 1;
718}
719
Willy Tarreaubaaee002006-06-26 02:48:02 +0200720/*
721 * This function temporarily disables listening so that another new instance
722 * can start listening. It is designed to be called upon reception of a
723 * SIGTTOU, after which either a SIGUSR1 can be sent to completely stop
724 * the proxy, or a SIGTTIN can be sent to listen again.
725 */
726void pause_proxies(void)
727{
728 int err;
729 struct proxy *p;
Emeric Brun5a8c0a92010-09-23 18:44:36 +0200730 struct peers *prs;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200731
732 err = 0;
733 p = proxy;
Willy Tarreaub0b37bc2008-06-23 14:00:57 +0200734 tv_update_date(0,1); /* else, the old time before select will be used */
Willy Tarreaubaaee002006-06-26 02:48:02 +0200735 while (p) {
Willy Tarreauce8fe252011-09-07 19:14:57 +0200736 err |= !pause_proxy(p);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200737 p = p->next;
738 }
Emeric Brun5a8c0a92010-09-23 18:44:36 +0200739
740 prs = peers;
741 while (prs) {
742 p = prs->peers_fe;
Willy Tarreauce8fe252011-09-07 19:14:57 +0200743 err |= !pause_proxy(p);
744 prs = prs->next;
Emeric Brun5a8c0a92010-09-23 18:44:36 +0200745 }
746
Willy Tarreaubaaee002006-06-26 02:48:02 +0200747 if (err) {
748 Warning("Some proxies refused to pause, performing soft stop now.\n");
749 send_log(p, LOG_WARNING, "Some proxies refused to pause, performing soft stop now.\n");
750 soft_stop();
751 }
752}
753
754
755/*
756 * This function reactivates listening. This can be used after a call to
757 * sig_pause(), for example when a new instance has failed starting up.
758 * It is designed to be called upon reception of a SIGTTIN.
759 */
Willy Tarreaube58c382011-07-24 18:28:10 +0200760void resume_proxies(void)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200761{
Willy Tarreauc03ebbf2011-09-07 21:33:14 +0200762 int err;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200763 struct proxy *p;
Willy Tarreauc03ebbf2011-09-07 21:33:14 +0200764 struct peers *prs;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200765
Willy Tarreauc03ebbf2011-09-07 21:33:14 +0200766 err = 0;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200767 p = proxy;
Willy Tarreaub0b37bc2008-06-23 14:00:57 +0200768 tv_update_date(0,1); /* else, the old time before select will be used */
Willy Tarreaubaaee002006-06-26 02:48:02 +0200769 while (p) {
Willy Tarreauc03ebbf2011-09-07 21:33:14 +0200770 err |= !resume_proxy(p);
771 p = p->next;
772 }
Willy Tarreaubaaee002006-06-26 02:48:02 +0200773
Willy Tarreauc03ebbf2011-09-07 21:33:14 +0200774 prs = peers;
775 while (prs) {
776 p = prs->peers_fe;
777 err |= !resume_proxy(p);
778 prs = prs->next;
779 }
Willy Tarreaube58c382011-07-24 18:28:10 +0200780
Willy Tarreauc03ebbf2011-09-07 21:33:14 +0200781 if (err) {
782 Warning("Some proxies refused to resume, a restart is probably needed to resume safe operations.\n");
783 send_log(p, LOG_WARNING, "Some proxies refused to resume, a restart is probably needed to resume safe operations.\n");
Willy Tarreaubaaee002006-06-26 02:48:02 +0200784 }
785}
786
Willy Tarreau1d0dfb12009-07-07 15:10:31 +0200787/* Set current session's backend to <be>. Nothing is done if the
788 * session already had a backend assigned, which is indicated by
789 * s->flags & SN_BE_ASSIGNED.
790 * All flags, stats and counters which need be updated are updated.
Willy Tarreaubedb9ba2009-07-12 08:27:39 +0200791 * Returns 1 if done, 0 in case of internal error, eg: lack of resource.
Willy Tarreau1d0dfb12009-07-07 15:10:31 +0200792 */
Willy Tarreaubedb9ba2009-07-12 08:27:39 +0200793int session_set_backend(struct session *s, struct proxy *be)
Willy Tarreau1d0dfb12009-07-07 15:10:31 +0200794{
795 if (s->flags & SN_BE_ASSIGNED)
Willy Tarreaubedb9ba2009-07-12 08:27:39 +0200796 return 1;
Willy Tarreau1d0dfb12009-07-07 15:10:31 +0200797 s->be = be;
798 be->beconn++;
Willy Tarreau7d0aaf32011-03-10 23:25:56 +0100799 if (be->beconn > be->be_counters.conn_max)
800 be->be_counters.conn_max = be->beconn;
Willy Tarreau1d0dfb12009-07-07 15:10:31 +0200801 proxy_inc_be_ctr(be);
802
803 /* assign new parameters to the session from the new backend */
Willy Tarreauf27b5ea2009-10-03 22:01:18 +0200804 s->si[1].flags &= ~SI_FL_INDEP_STR;
805 if (be->options2 & PR_O2_INDEPSTR)
806 s->si[1].flags |= SI_FL_INDEP_STR;
807
Willy Tarreau1d0dfb12009-07-07 15:10:31 +0200808 if (be->options2 & PR_O2_RSPBUG_OK)
809 s->txn.rsp.err_pos = -1; /* let buggy responses pass */
810 s->flags |= SN_BE_ASSIGNED;
Willy Tarreau51aecc72009-07-12 09:47:04 +0200811
812 /* If the target backend requires HTTP processing, we have to allocate
813 * a struct hdr_idx for it if we did not have one.
814 */
815 if (unlikely(!s->txn.hdr_idx.v && (be->acl_requires & ACL_USE_L7_ANY))) {
Willy Tarreau34eb6712011-10-24 18:15:04 +0200816 if ((s->txn.hdr_idx.v = pool_alloc2(pool2_hdr_idx)) == NULL)
Willy Tarreau51aecc72009-07-12 09:47:04 +0200817 return 0; /* not enough memory */
Willy Tarreau39e4f622010-05-31 17:01:36 +0200818
819 /* and now initialize the HTTP transaction state */
820 http_init_txn(s);
821
Willy Tarreauac1932d2011-10-24 19:14:41 +0200822 s->txn.hdr_idx.size = global.tune.max_http_hdr;
Willy Tarreau51aecc72009-07-12 09:47:04 +0200823 hdr_idx_init(&s->txn.hdr_idx);
824 }
825
Willy Tarreau96e31212011-05-30 18:10:30 +0200826 if (be->options2 & PR_O2_NODELAY) {
827 s->req->flags |= BF_NEVER_WAIT;
828 s->rep->flags |= BF_NEVER_WAIT;
829 }
830
Willy Tarreauc1a21672009-08-16 22:37:44 +0200831 /* We want to enable the backend-specific analysers except those which
832 * were already run as part of the frontend/listener. Note that it would
833 * be more reliable to store the list of analysers that have been run,
834 * but what we do here is OK for now.
Emeric Brun647caf12009-06-30 17:57:00 +0200835 */
Willy Tarreauc1a21672009-08-16 22:37:44 +0200836 s->req->analysers |= be->be_req_ana & ~(s->listener->analysers);
Emeric Brun647caf12009-06-30 17:57:00 +0200837
Willy Tarreaubedb9ba2009-07-12 08:27:39 +0200838 return 1;
Willy Tarreau1d0dfb12009-07-07 15:10:31 +0200839}
840
Willy Tarreau9de1bbd2008-07-09 20:34:27 +0200841static struct cfg_kw_list cfg_kws = {{ },{
842 { CFG_LISTEN, "timeout", proxy_parse_timeout },
843 { CFG_LISTEN, "clitimeout", proxy_parse_timeout },
844 { CFG_LISTEN, "contimeout", proxy_parse_timeout },
845 { CFG_LISTEN, "srvtimeout", proxy_parse_timeout },
Willy Tarreau3a7d2072009-03-05 23:48:25 +0100846 { CFG_LISTEN, "rate-limit", proxy_parse_rate_limit },
Willy Tarreau9de1bbd2008-07-09 20:34:27 +0200847 { 0, NULL, NULL },
848}};
849
850__attribute__((constructor))
851static void __proxy_module_init(void)
852{
853 cfg_register_keywords(&cfg_kws);
854}
Willy Tarreaubaaee002006-06-26 02:48:02 +0200855
856/*
857 * Local variables:
858 * c-indent-level: 8
859 * c-basic-offset: 8
860 * End:
861 */