blob: 0e707f5ef4f0a536c492ea62a5ea8421df076535 [file] [log] [blame]
Willy Tarreaubaaee002006-06-26 02:48:02 +02001/*
Willy Tarreaua5357cd2021-05-09 06:14:25 +02002 * HAProxy : High Availability-enabled HTTP/TCP proxy
Willy Tarreau421ed392021-01-06 17:41:32 +01003 * Copyright 2000-2021 Willy Tarreau <willy@haproxy.org>.
Willy Tarreaubaaee002006-06-26 02:48:02 +02004 *
5 * This program is free software; you can redistribute it and/or
6 * modify it under the terms of the GNU General Public License
7 * as published by the Free Software Foundation; either version
8 * 2 of the License, or (at your option) any later version.
9 *
Ilya Shipitsin46a030c2020-07-05 16:36:08 +050010 * Please refer to RFC7230 - RFC7235 information about HTTP protocol, and
11 * RFC6265 for information about cookies usage. More generally, the IETF HTTP
Willy Tarreaubaaee002006-06-26 02:48:02 +020012 * Working Group's web site should be consulted for protocol related changes :
13 *
14 * http://ftp.ics.uci.edu/pub/ietf/http/
15 *
16 * Pending bugs (may be not fixed because never reproduced) :
17 * - solaris only : sometimes, an HTTP proxy with only a dispatch address causes
18 * the proxy to terminate (no core) if the client breaks the connection during
19 * the response. Seen on 1.1.8pre4, but never reproduced. May not be related to
20 * the snprintf() bug since requests were simple (GET / HTTP/1.0), but may be
21 * related to missing setsid() (fixed in 1.1.15)
22 * - a proxy with an invalid config will prevent the startup even if disabled.
23 *
24 * ChangeLog has moved to the CHANGELOG file.
25 *
Willy Tarreaubaaee002006-06-26 02:48:02 +020026 */
27
David Carlier7ece0962015-12-08 21:43:09 +000028#define _GNU_SOURCE
Willy Tarreaubaaee002006-06-26 02:48:02 +020029#include <stdio.h>
30#include <stdlib.h>
31#include <unistd.h>
32#include <string.h>
33#include <ctype.h>
Maxime de Roucy379d9c72016-05-13 23:52:56 +020034#include <dirent.h>
Maxime de Roucy379d9c72016-05-13 23:52:56 +020035#include <sys/stat.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020036#include <sys/time.h>
37#include <sys/types.h>
38#include <sys/socket.h>
39#include <netinet/tcp.h>
40#include <netinet/in.h>
41#include <arpa/inet.h>
42#include <netdb.h>
43#include <fcntl.h>
44#include <errno.h>
45#include <signal.h>
46#include <stdarg.h>
47#include <sys/resource.h>
Tim Duesterhusdfad6a42020-04-18 16:02:47 +020048#include <sys/utsname.h>
Marc-Antoine Perennou992709b2013-02-12 10:53:52 +010049#include <sys/wait.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020050#include <time.h>
51#include <syslog.h>
Michael Schererab012dd2013-01-12 18:35:19 +010052#include <grp.h>
Willy Tarreaufc6c0322012-11-16 16:12:27 +010053#ifdef USE_CPU_AFFINITY
Willy Tarreaufc6c0322012-11-16 16:12:27 +010054#include <sched.h>
David Carlier42d9e5a2018-11-12 16:22:19 +000055#if defined(__FreeBSD__) || defined(__DragonFly__)
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +020056#include <sys/param.h>
David Carlier42d9e5a2018-11-12 16:22:19 +000057#ifdef __FreeBSD__
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +020058#include <sys/cpuset.h>
David Carlier42d9e5a2018-11-12 16:22:19 +000059#endif
David Carlier6d5c8412017-11-29 11:02:32 +000060#include <pthread_np.h>
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +020061#endif
David Carlier5e4c8e22019-09-13 05:12:58 +010062#ifdef __APPLE__
63#include <mach/mach_types.h>
64#include <mach/thread_act.h>
65#include <mach/thread_policy.h>
66#endif
Willy Tarreaufc6c0322012-11-16 16:12:27 +010067#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +020068
Willy Tarreau636848a2019-04-15 19:38:50 +020069#if defined(USE_PRCTL)
70#include <sys/prctl.h>
71#endif
72
Willy Tarreaubaaee002006-06-26 02:48:02 +020073#ifdef DEBUG_FULL
74#include <assert.h>
75#endif
Tim Duesterhusd6942c82017-11-20 15:58:35 +010076#if defined(USE_SYSTEMD)
77#include <systemd/sd-daemon.h>
78#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +020079
Willy Tarreau6c3a6812020-03-06 18:57:15 +010080#include <import/sha1.h>
81
Willy Tarreaub2551052020-06-09 09:07:15 +020082#include <haproxy/acl.h>
Amaury Denoyelle68fd7e42021-03-25 17:15:52 +010083#include <haproxy/action.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020084#include <haproxy/activity.h>
85#include <haproxy/api.h>
86#include <haproxy/arg.h>
87#include <haproxy/auth.h>
Willy Tarreau8d366972020-05-27 16:10:29 +020088#include <haproxy/base64.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020089#include <haproxy/capture-t.h>
Amaury Denoyelle5a6926d2021-03-30 17:34:24 +020090#include <haproxy/cfgdiag.h>
Willy Tarreau6be78492020-06-05 00:00:29 +020091#include <haproxy/cfgparse.h>
Willy Tarreauc13ed532020-06-02 10:22:45 +020092#include <haproxy/chunk.h>
Willy Tarreau83487a82020-06-04 20:19:54 +020093#include <haproxy/cli.h>
Willy Tarreau7ea393d2020-06-04 18:02:10 +020094#include <haproxy/connection.h>
Amaury Denoyellea6f9c5d2021-04-23 16:58:08 +020095#ifdef USE_CPU_AFFINITY
Amaury Denoyelle982fb532021-04-21 18:39:58 +020096#include <haproxy/cpuset.h>
Amaury Denoyellea6f9c5d2021-04-23 16:58:08 +020097#endif
Willy Tarreaueb92deb2020-06-04 10:53:16 +020098#include <haproxy/dns.h>
Willy Tarreau2741c8c2020-06-02 11:28:02 +020099#include <haproxy/dynbuf.h>
Willy Tarreau8d366972020-05-27 16:10:29 +0200100#include <haproxy/errors.h>
Willy Tarreaub2551052020-06-09 09:07:15 +0200101#include <haproxy/fd.h>
Willy Tarreauc7babd82020-06-04 21:29:29 +0200102#include <haproxy/filters.h>
Willy Tarreaub2551052020-06-09 09:07:15 +0200103#include <haproxy/global.h>
Willy Tarreau86416052020-06-04 09:20:54 +0200104#include <haproxy/hlua.h>
Willy Tarreauc761f842020-06-04 11:40:28 +0200105#include <haproxy/http_rules.h>
Willy Tarreau853b2972020-05-27 18:01:47 +0200106#include <haproxy/list.h>
Willy Tarreau213e9902020-06-04 14:58:24 +0200107#include <haproxy/listener.h>
Willy Tarreauaeed4a82020-06-04 22:01:04 +0200108#include <haproxy/log.h>
Willy Tarreaub5abe5b2020-06-04 14:07:37 +0200109#include <haproxy/mworker.h>
Willy Tarreau7a00efb2020-06-02 17:02:59 +0200110#include <haproxy/namespace.h>
Willy Tarreau6131d6a2020-06-02 16:48:09 +0200111#include <haproxy/net_helper.h>
Willy Tarreau6019fab2020-05-27 16:26:00 +0200112#include <haproxy/openssl-compat.h>
Willy Tarreau225a90a2020-06-04 15:06:28 +0200113#include <haproxy/pattern.h>
Willy Tarreau3c2a7c22020-06-04 18:38:21 +0200114#include <haproxy/peers.h>
Willy Tarreaub2551052020-06-09 09:07:15 +0200115#include <haproxy/pool.h>
116#include <haproxy/protocol.h>
Willy Tarreaubf3b06b2020-08-26 10:23:40 +0200117#include <haproxy/proto_tcp.h>
Willy Tarreaua264d962020-06-04 22:29:18 +0200118#include <haproxy/proxy.h>
Willy Tarreau7cd8b6e2020-06-02 17:32:26 +0200119#include <haproxy/regex.h>
Willy Tarreaub2551052020-06-09 09:07:15 +0200120#include <haproxy/sample.h>
Willy Tarreau1e56f922020-06-04 23:20:13 +0200121#include <haproxy/server.h>
Willy Tarreau48d25b32020-06-04 18:58:52 +0200122#include <haproxy/session.h>
Willy Tarreau3727a8a2020-06-04 17:37:26 +0200123#include <haproxy/signal.h>
Willy Tarreau063d47d2020-08-28 16:29:53 +0200124#include <haproxy/sock.h>
Willy Tarreau25140cc2020-08-28 15:40:33 +0200125#include <haproxy/sock_inet.h>
Willy Tarreau209108d2020-06-04 20:30:20 +0200126#include <haproxy/ssl_sock.h>
Amaury Denoyelleee63d4b2020-10-05 11:49:42 +0200127#include <haproxy/stats-t.h>
Willy Tarreaudfd3de82020-06-04 23:46:14 +0200128#include <haproxy/stream.h>
Willy Tarreaucea0e1b2020-06-04 17:25:40 +0200129#include <haproxy/task.h>
Willy Tarreau3f567e42020-05-28 15:29:19 +0200130#include <haproxy/thread.h>
Willy Tarreaub2551052020-06-09 09:07:15 +0200131#include <haproxy/time.h>
132#include <haproxy/tools.h>
133#include <haproxy/uri_auth-t.h>
Willy Tarreaua1718922020-06-04 16:25:31 +0200134#include <haproxy/vars.h>
Willy Tarreaub2551052020-06-09 09:07:15 +0200135#include <haproxy/version.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200136
Willy Tarreaubaaee002006-06-26 02:48:02 +0200137
Willy Tarreau7b5654f2019-03-29 21:30:17 +0100138/* array of init calls for older platforms */
139DECLARE_INIT_STAGES;
140
Willy Tarreauf4596402021-04-10 16:53:05 +0200141/* create a read_mostly section to hold variables which are accessed a lot
142 * but which almost never change. The purpose is to isolate them in their
143 * own cache lines where they don't risk to be perturbated by write accesses
144 * to neighbor variables. We need to create an empty aligned variable for
145 * this. The fact that the variable is of size zero means that it will be
146 * eliminated at link time if no other variable uses it, but alignment will
147 * be respected.
148 */
149empty_t __read_mostly_align HA_SECTION("read_mostly") ALIGNED(64);
150
Willy Tarreauf0d3b732021-05-06 16:30:32 +0200151#ifdef BUILD_FEATURES
152const char *build_features = BUILD_FEATURES;
153#else
154const char *build_features = "";
155#endif
156
Willy Tarreau477ecd82010-01-03 21:12:30 +0100157/* list of config files */
158static struct list cfg_cfgfiles = LIST_HEAD_INIT(cfg_cfgfiles);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200159int pid; /* current process id */
Willy Tarreau28156642007-11-26 16:13:36 +0100160int relative_pid = 1; /* process id starting at 1 */
Willy Tarreau387bd4f2017-11-10 19:08:14 +0100161unsigned long pid_bit = 1; /* bit corresponding to the process id */
Willy Tarreaua38a7172019-02-02 17:11:28 +0100162unsigned long all_proc_mask = 1; /* mask of all processes */
Willy Tarreaubaaee002006-06-26 02:48:02 +0200163
Willy Tarreauf8ea00e2020-03-12 17:24:53 +0100164volatile unsigned long sleeping_thread_mask = 0; /* Threads that are about to sleep in poll() */
Willy Tarreau4b3f27b2020-03-12 17:28:01 +0100165volatile unsigned long stopping_thread_mask = 0; /* Threads acknowledged stopping */
Willy Tarreauf8ea00e2020-03-12 17:24:53 +0100166
Willy Tarreaubaaee002006-06-26 02:48:02 +0200167/* global options */
168struct global global = {
Cyril Bonté203ec5a2017-03-23 22:44:13 +0100169 .hard_stop_after = TICK_ETERNITY,
Willy Tarreau247a13a2012-11-15 17:38:15 +0100170 .nbproc = 1,
Amaury Denoyelle0f50cb92021-03-26 18:50:33 +0100171 .numa_cpu_mapping = 1,
Willy Tarreau149ab772019-01-26 14:27:06 +0100172 .nbthread = 0,
William Lallemand5f232402012-04-05 18:02:55 +0200173 .req_count = 0,
William Lallemand0f99e342011-10-12 17:50:54 +0200174 .logsrvs = LIST_HEAD_INIT(global.logsrvs),
William Lallemand9d5f5482012-11-07 16:12:57 +0100175 .maxzlibmem = 0,
William Lallemandd85f9172012-11-09 17:05:39 +0100176 .comp_rate_lim = 0,
Emeric Brun850efd52014-01-29 12:24:34 +0100177 .ssl_server_verify = SSL_SERVER_VERIFY_REQUIRED,
Emeric Bruned760922010-10-22 17:59:25 +0200178 .unix_bind = {
179 .ux = {
180 .uid = -1,
181 .gid = -1,
182 .mode = 0,
183 }
184 },
Willy Tarreau27a674e2009-08-17 07:23:33 +0200185 .tune = {
Willy Tarreau7ac908b2019-02-27 12:02:18 +0100186 .options = GTUNE_LISTENER_MQ,
Willy Tarreauc77d3642018-12-12 06:19:42 +0100187 .bufsize = (BUFSIZE + 2*sizeof(void *) - 1) & -(2*sizeof(void *)),
Christopher Faulet546c4692020-01-22 14:31:21 +0100188 .maxrewrite = MAXREWRITE,
Willy Tarreaua24adf02014-11-27 01:11:56 +0100189 .reserved_bufs = RESERVED_BUFS,
Willy Tarreauf3045d22015-04-29 16:24:50 +0200190 .pattern_cache = DEFAULT_PAT_LRU_SIZE,
Olivier Houchard88698d92019-04-16 19:07:22 +0200191 .pool_low_ratio = 20,
192 .pool_high_ratio = 25,
Christopher Faulet41ba36f2019-07-19 09:36:45 +0200193 .max_http_hdr = MAX_HTTP_HDR,
Emeric Brunfc32aca2012-09-03 12:10:29 +0200194#ifdef USE_OPENSSL
Emeric Brun46635772012-11-14 11:32:56 +0100195 .sslcachesize = SSLCACHESIZE,
Emeric Brunfc32aca2012-09-03 12:10:29 +0200196#endif
William Lallemandf3747832012-11-09 12:33:10 +0100197 .comp_maxlevel = 1,
Willy Tarreau7e312732014-02-12 16:35:14 +0100198#ifdef DEFAULT_IDLE_TIMER
199 .idle_timer = DEFAULT_IDLE_TIMER,
200#else
201 .idle_timer = 1000, /* 1 second */
202#endif
Willy Tarreau27a674e2009-08-17 07:23:33 +0200203 },
Emeric Brun76d88952012-10-05 15:47:31 +0200204#ifdef USE_OPENSSL
205#ifdef DEFAULT_MAXSSLCONN
Willy Tarreau403edff2012-09-06 11:58:37 +0200206 .maxsslconn = DEFAULT_MAXSSLCONN,
207#endif
Emeric Brun76d88952012-10-05 15:47:31 +0200208#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +0200209 /* others NULL OK */
210};
211
212/*********************************************************************/
213
214int stopping; /* non zero means stopping in progress */
Cyril Bonté203ec5a2017-03-23 22:44:13 +0100215int killed; /* non zero means a hard-stop is triggered */
Willy Tarreauaf7ad002010-08-31 15:39:26 +0200216int jobs = 0; /* number of active jobs (conns, listeners, active tasks, ...) */
William Lallemanda7199262018-11-16 16:57:20 +0100217int unstoppable_jobs = 0; /* number of active jobs that can't be stopped during a soft stop */
Willy Tarreau199ad242018-11-05 16:31:22 +0100218int active_peers = 0; /* number of active peers (connection attempts and connected) */
Willy Tarreau2d372c22018-11-05 17:12:27 +0100219int connected_peers = 0; /* number of connected peers (verified ones) */
Willy Tarreaubaaee002006-06-26 02:48:02 +0200220
Ilya Shipitsin46a030c2020-07-05 16:36:08 +0500221/* Here we store information about the pids of the processes we may pause
Willy Tarreaubaaee002006-06-26 02:48:02 +0200222 * or kill. We will send them a signal every 10 ms until we can bind to all
223 * our ports. With 200 retries, that's about 2 seconds.
224 */
225#define MAX_START_RETRIES 200
Willy Tarreaubaaee002006-06-26 02:48:02 +0200226static int *oldpids = NULL;
227static int oldpids_sig; /* use USR1 or TERM */
228
Olivier Houchardf73629d2017-04-05 22:33:04 +0200229/* Path to the unix socket we use to retrieve listener sockets from the old process */
230static const char *old_unixsocket;
231
William Lallemand85b0bd92017-06-01 17:38:53 +0200232static char *cur_unixsocket = NULL;
233
William Lallemandcb11fd22017-06-01 17:38:52 +0200234int atexit_flag = 0;
235
Willy Tarreaubb545b42010-08-25 12:58:59 +0200236int nb_oldpids = 0;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200237const int zero = 0;
238const int one = 1;
Alexandre Cassen87ea5482007-10-11 20:48:58 +0200239const struct linger nolinger = { .l_onoff = 1, .l_linger = 0 };
Willy Tarreaubaaee002006-06-26 02:48:02 +0200240
Willy Tarreau1d21e0a2010-03-12 21:58:54 +0100241char hostname[MAX_HOSTNAME_LEN];
Dragan Dosen4f014152020-06-18 16:56:47 +0200242char *localpeer = NULL;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200243
William Lallemand00417412020-06-05 14:08:41 +0200244static char **old_argv = NULL; /* previous argv but cleaned up */
William Lallemand73b85e72017-06-01 17:38:51 +0200245
William Lallemandbc193052018-09-11 10:06:26 +0200246struct list proc_list = LIST_HEAD_INIT(proc_list);
247
248int master = 0; /* 1 if in master, 0 if in child */
Willy Tarreaubf696402019-03-01 10:09:28 +0100249unsigned int rlim_fd_cur_at_boot = 0;
250unsigned int rlim_fd_max_at_boot = 0;
William Lallemandbc193052018-09-11 10:06:26 +0200251
Willy Tarreau6c3a6812020-03-06 18:57:15 +0100252/* per-boot randomness */
253unsigned char boot_seed[20]; /* per-boot random seed (160 bits initially) */
254
William Lallemandb3f2be32018-09-11 10:06:18 +0200255static void *run_thread_poll_loop(void *data);
256
Willy Tarreauff055502014-04-28 22:27:06 +0200257/* bitfield of a few warnings to emit just once (WARN_*) */
258unsigned int warned = 0;
259
Amaury Denoyelle484454d2021-05-05 16:18:45 +0200260/* set if experimental features have been used for the current process */
261static unsigned int tainted = 0;
262
Amaury Denoyelled2e53cd2021-05-06 16:21:39 +0200263unsigned int experimental_directives_allowed = 0;
264
265int check_kw_experimental(struct cfg_keyword *kw, const char *file, int linenum,
266 char **errmsg)
267{
268 if (kw->flags & KWF_EXPERIMENTAL) {
269 if (!experimental_directives_allowed) {
Amaury Denoyelle86c1d0f2021-05-07 15:07:21 +0200270 memprintf(errmsg, "parsing [%s:%d] : '%s' directive is experimental, must be allowed via a global 'expose-experimental-directives'",
Amaury Denoyelled2e53cd2021-05-06 16:21:39 +0200271 file, linenum, kw->kw);
272 return 1;
273 }
274 mark_tainted(TAINTED_CONFIG_EXP_KW_DECLARED);
275 }
276
277 return 0;
278}
279
William Lallemande7361152018-10-26 14:47:36 +0200280/* master CLI configuration (-S flag) */
281struct list mworker_cli_conf = LIST_HEAD_INIT(mworker_cli_conf);
Willy Tarreaucdb737e2016-12-21 18:43:10 +0100282
283/* These are strings to be reported in the output of "haproxy -vv". They may
284 * either be constants (in which case must_free must be zero) or dynamically
285 * allocated strings to pass to free() on exit, and in this case must_free
286 * must be non-zero.
287 */
288struct list build_opts_list = LIST_HEAD_INIT(build_opts_list);
289struct build_opts_str {
290 struct list list;
291 const char *str;
292 int must_free;
293};
294
Willy Tarreaubaaee002006-06-26 02:48:02 +0200295/*********************************************************************/
296/* general purpose functions ***************************************/
297/*********************************************************************/
298
Willy Tarreaucdb737e2016-12-21 18:43:10 +0100299/* used to register some build option strings at boot. Set must_free to
300 * non-zero if the string must be freed upon exit.
301 */
302void hap_register_build_opts(const char *str, int must_free)
303{
304 struct build_opts_str *b;
305
306 b = calloc(1, sizeof(*b));
307 if (!b) {
308 fprintf(stderr, "out of memory\n");
309 exit(1);
310 }
311 b->str = str;
312 b->must_free = must_free;
Willy Tarreau2b718102021-04-21 07:32:39 +0200313 LIST_APPEND(&build_opts_list, &b->list);
Willy Tarreaucdb737e2016-12-21 18:43:10 +0100314}
315
Willy Tarreaua43dfda2021-05-06 07:43:35 +0200316#define VERSION_MAX_ELTS 7
317
318/* This function splits an haproxy version string into an array of integers.
319 * The syntax of the supported version string is the following:
320 *
321 * <a>[.<b>[.<c>[.<d>]]][-{dev,pre,rc}<f>][-*][-<g>]
322 *
323 * This validates for example:
324 * 1.2.1-pre2, 1.2.1, 1.2.10.1, 1.3.16-rc1, 1.4-dev3, 1.5-dev18, 1.5-dev18-43
325 * 2.4-dev18-f6818d-20
326 *
327 * The result is set in a array of <VERSION_MAX_ELTS> elements. Each letter has
328 * one fixed place in the array. The tags take a numeric value called <e> which
329 * defaults to 3. "dev" is 1, "rc" and "pre" are 2. Numbers not encountered are
330 * considered as zero (henxe 1.5 and 1.5.0 are the same).
331 *
332 * The resulting values are:
333 * 1.2.1-pre2 1, 2, 1, 0, 2, 2, 0
334 * 1.2.1 1, 2, 1, 0, 3, 0, 0
335 * 1.2.10.1 1, 2, 10, 1, 3, 0, 0
336 * 1.3.16-rc1 1, 3, 16, 0, 2, 1, 0
337 * 1.4-dev3 1, 4, 0, 0, 1, 3, 0
338 * 1.5-dev18 1, 5, 0, 0, 1, 18, 0
339 * 1.5-dev18-43 1, 5, 0, 0, 1, 18, 43
340 * 2.4-dev18-f6818d-20 2, 4, 0, 0, 1, 18, 20
341 *
342 * The function returns non-zero if the conversion succeeded, or zero if it
343 * failed.
344 */
345int split_version(const char *version, unsigned int *value)
346{
347 const char *p, *s;
348 char *error;
349 int nelts;
350
351 /* Initialize array with zeroes */
352 for (nelts = 0; nelts < VERSION_MAX_ELTS; nelts++)
353 value[nelts] = 0;
354 value[4] = 3;
355
356 p = version;
357
358 /* If the version number is empty, return false */
359 if (*p == '\0')
360 return 0;
361
362 /* Convert first number <a> */
363 value[0] = strtol(p, &error, 10);
364 p = error + 1;
365 if (*error == '\0')
366 return 1;
367 if (*error == '-')
368 goto split_version_tag;
369 if (*error != '.')
370 return 0;
371
372 /* Convert first number <b> */
373 value[1] = strtol(p, &error, 10);
374 p = error + 1;
375 if (*error == '\0')
376 return 1;
377 if (*error == '-')
378 goto split_version_tag;
379 if (*error != '.')
380 return 0;
381
382 /* Convert first number <c> */
383 value[2] = strtol(p, &error, 10);
384 p = error + 1;
385 if (*error == '\0')
386 return 1;
387 if (*error == '-')
388 goto split_version_tag;
389 if (*error != '.')
390 return 0;
391
392 /* Convert first number <d> */
393 value[3] = strtol(p, &error, 10);
394 p = error + 1;
395 if (*error == '\0')
396 return 1;
397 if (*error != '-')
398 return 0;
399
400 split_version_tag:
401 /* Check for commit number */
402 if (*p >= '0' && *p <= '9')
403 goto split_version_commit;
404
405 /* Read tag */
406 if (strncmp(p, "dev", 3) == 0) { value[4] = 1; p += 3; }
407 else if (strncmp(p, "rc", 2) == 0) { value[4] = 2; p += 2; }
408 else if (strncmp(p, "pre", 3) == 0) { value[4] = 2; p += 3; }
409 else
410 goto split_version_commit;
411
412 /* Convert tag number */
413 value[5] = strtol(p, &error, 10);
414 p = error + 1;
415 if (*error == '\0')
416 return 1;
417 if (*error != '-')
418 return 0;
419
420 split_version_commit:
421 /* Search the last "-" */
422 s = strrchr(p, '-');
423 if (s) {
424 s++;
425 if (*s == '\0')
426 return 0;
427 value[6] = strtol(s, &error, 10);
428 if (*error != '\0')
429 value[6] = 0;
430 return 1;
431 }
432
433 /* convert the version */
434 value[6] = strtol(p, &error, 10);
435 if (*error != '\0')
436 value[6] = 0;
437
438 return 1;
439}
440
441/* This function compares the current haproxy version with an arbitrary version
442 * string. It returns:
443 * -1 : the version in argument is older than the current haproxy version
444 * 0 : the version in argument is the same as the current haproxy version
445 * 1 : the version in argument is newer than the current haproxy version
446 *
447 * Or some errors:
448 * -2 : the current haproxy version is not parsable
449 * -3 : the version in argument is not parsable
450 */
451int compare_current_version(const char *version)
452{
453 unsigned int loc[VERSION_MAX_ELTS];
454 unsigned int mod[VERSION_MAX_ELTS];
455 int i;
456
457 /* split versions */
458 if (!split_version(haproxy_version, loc))
459 return -2;
460 if (!split_version(version, mod))
461 return -3;
462
463 /* compare versions */
464 for (i = 0; i < VERSION_MAX_ELTS; i++) {
465 if (mod[i] < loc[i])
466 return -1;
467 else if (mod[i] > loc[i])
468 return 1;
469 }
470 return 0;
471}
472
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100473static void display_version()
Willy Tarreaubaaee002006-06-26 02:48:02 +0200474{
Tim Duesterhusdfad6a42020-04-18 16:02:47 +0200475 struct utsname utsname;
476
Willy Tarreaua5357cd2021-05-09 06:14:25 +0200477 printf("HAProxy version %s %s - https://haproxy.org/\n"
Willy Tarreau08dd2022019-11-21 18:07:30 +0100478 PRODUCT_STATUS "\n", haproxy_version, haproxy_date);
Willy Tarreau47479eb2019-11-21 18:48:20 +0100479
480 if (strlen(PRODUCT_URL_BUGS) > 0) {
481 char base_version[20];
482 int dots = 0;
483 char *del;
484
485 /* only retrieve the base version without distro-specific extensions */
486 for (del = haproxy_version; *del; del++) {
487 if (*del == '.')
488 dots++;
489 else if (*del < '0' || *del > '9')
490 break;
491 }
492
493 strlcpy2(base_version, haproxy_version, del - haproxy_version + 1);
494 if (dots < 2)
495 printf("Known bugs: https://github.com/haproxy/haproxy/issues?q=is:issue+is:open\n");
496 else
497 printf("Known bugs: " PRODUCT_URL_BUGS "\n", base_version);
498 }
Tim Duesterhusdfad6a42020-04-18 16:02:47 +0200499
500 if (uname(&utsname) == 0) {
501 printf("Running on: %s %s %s %s\n", utsname.sysname, utsname.release, utsname.version, utsname.machine);
502 }
Willy Tarreaubaaee002006-06-26 02:48:02 +0200503}
504
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100505static void display_build_opts()
Willy Tarreau7b066db2007-12-02 11:28:59 +0100506{
Willy Tarreaucdb737e2016-12-21 18:43:10 +0100507 struct build_opts_str *item;
508
Willy Tarreau7b066db2007-12-02 11:28:59 +0100509 printf("Build options :"
510#ifdef BUILD_TARGET
Willy Tarreau9f2b7302008-01-02 20:48:34 +0100511 "\n TARGET = " BUILD_TARGET
Willy Tarreau7b066db2007-12-02 11:28:59 +0100512#endif
513#ifdef BUILD_CPU
Willy Tarreau9f2b7302008-01-02 20:48:34 +0100514 "\n CPU = " BUILD_CPU
Willy Tarreau7b066db2007-12-02 11:28:59 +0100515#endif
516#ifdef BUILD_CC
Willy Tarreau9f2b7302008-01-02 20:48:34 +0100517 "\n CC = " BUILD_CC
518#endif
519#ifdef BUILD_CFLAGS
520 "\n CFLAGS = " BUILD_CFLAGS
Willy Tarreau7b066db2007-12-02 11:28:59 +0100521#endif
Willy Tarreau9f2b7302008-01-02 20:48:34 +0100522#ifdef BUILD_OPTIONS
523 "\n OPTIONS = " BUILD_OPTIONS
Willy Tarreau7b066db2007-12-02 11:28:59 +0100524#endif
Tim Duesterhusc8d19702020-11-21 18:07:59 +0100525#ifdef BUILD_DEBUG
526 "\n DEBUG = " BUILD_DEBUG
527#endif
Willy Tarreau7728ed32019-03-27 13:20:08 +0100528#ifdef BUILD_FEATURES
529 "\n\nFeature list : " BUILD_FEATURES
530#endif
Willy Tarreau27a674e2009-08-17 07:23:33 +0200531 "\n\nDefault settings :"
Willy Tarreauca783d42019-03-13 10:03:07 +0100532 "\n bufsize = %d, maxrewrite = %d, maxpollevents = %d"
Willy Tarreau27a674e2009-08-17 07:23:33 +0200533 "\n\n",
Willy Tarreauca783d42019-03-13 10:03:07 +0100534 BUFSIZE, MAXREWRITE, MAX_POLL_EVENTS);
Willy Tarreaube5b6852009-10-03 18:57:08 +0200535
Willy Tarreaucdb737e2016-12-21 18:43:10 +0100536 list_for_each_entry(item, &build_opts_list, list) {
537 puts(item->str);
538 }
539
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +0100540 putchar('\n');
541
Willy Tarreaube5b6852009-10-03 18:57:08 +0200542 list_pollers(stdout);
543 putchar('\n');
Christopher Faulet98d9fe22018-04-10 14:37:32 +0200544 list_mux_proto(stdout);
545 putchar('\n');
Willy Tarreau679bba12019-03-19 08:08:10 +0100546 list_services(stdout);
547 putchar('\n');
Christopher Fauletb3f4e142016-03-07 12:46:38 +0100548 list_filters(stdout);
549 putchar('\n');
Willy Tarreau7b066db2007-12-02 11:28:59 +0100550}
551
Willy Tarreaubaaee002006-06-26 02:48:02 +0200552/*
553 * This function prints the command line usage and exits
554 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100555static void usage(char *name)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200556{
557 display_version();
558 fprintf(stderr,
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200559 "Usage : %s [-f <cfgfile|cfgdir>]* [ -vdV"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200560 "D ] [ -n <maxconn> ] [ -N <maxpconn> ]\n"
Willy Tarreaua088d312015-10-08 11:58:48 +0200561 " [ -p <pidfile> ] [ -m <max megs> ] [ -C <dir> ] [-- <cfgfile>*]\n"
Willy Tarreau7b066db2007-12-02 11:28:59 +0100562 " -v displays version ; -vv shows known build options.\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200563 " -d enters debug mode ; -db only disables background mode.\n"
Willy Tarreau6e064432012-05-08 15:40:42 +0200564 " -dM[<byte>] poisons memory with <byte> (defaults to 0x50)\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200565 " -V enters verbose mode (disables quiet mode)\n"
Willy Tarreau576132e2011-09-10 19:26:56 +0200566 " -D goes daemon ; -C changes to <dir> before loading files.\n"
William Lallemand095ba4c2017-06-01 17:38:50 +0200567 " -W master-worker mode.\n"
Tim Duesterhusd6942c82017-11-20 15:58:35 +0100568#if defined(USE_SYSTEMD)
569 " -Ws master-worker mode with systemd notify support.\n"
570#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +0200571 " -q quiet mode : don't display messages\n"
Willy Tarreau5d01a632009-06-22 16:02:30 +0200572 " -c check mode : only check config files and exit\n"
Willy Tarreauca783d42019-03-13 10:03:07 +0100573 " -n sets the maximum total # of connections (uses ulimit -n)\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200574 " -m limits the usable amount of memory (in MB)\n"
575 " -N sets the default, per-proxy maximum # of connections (%d)\n"
Emeric Brun2b920a12010-09-23 18:30:22 +0200576 " -L set local peer name (default to hostname)\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200577 " -p writes pids of all children to this file\n"
Willy Tarreaue5733232019-05-22 19:24:06 +0200578#if defined(USE_EPOLL)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200579 " -de disables epoll() usage even when available\n"
580#endif
Willy Tarreaue5733232019-05-22 19:24:06 +0200581#if defined(USE_KQUEUE)
Willy Tarreau1e63130a2007-04-09 12:03:06 +0200582 " -dk disables kqueue() usage even when available\n"
583#endif
Willy Tarreaue5733232019-05-22 19:24:06 +0200584#if defined(USE_EVPORTS)
Emmanuel Hocdet0ba4f482019-04-08 16:53:32 +0000585 " -dv disables event ports usage even when available\n"
586#endif
Willy Tarreaue5733232019-05-22 19:24:06 +0200587#if defined(USE_POLL)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200588 " -dp disables poll() usage even when available\n"
589#endif
Willy Tarreaue5733232019-05-22 19:24:06 +0200590#if defined(USE_LINUX_SPLICE)
Willy Tarreau3ab68cf2009-01-25 16:03:28 +0100591 " -dS disables splice usage (broken on old kernels)\n"
592#endif
Nenad Merdanovic88afe032014-04-14 15:56:58 +0200593#if defined(USE_GETADDRINFO)
594 " -dG disables getaddrinfo() usage\n"
595#endif
Lukas Tribusa0bcbdc2016-09-12 21:42:20 +0000596#if defined(SO_REUSEPORT)
597 " -dR disables SO_REUSEPORT usage\n"
598#endif
Willy Tarreau3eed10e2016-11-07 21:03:16 +0100599 " -dr ignores server address resolution failures\n"
Emeric Brun850efd52014-01-29 12:24:34 +0100600 " -dV disables SSL verify on servers side\n"
Willy Tarreau3eb10b82020-04-15 16:42:39 +0200601 " -dW fails if any warning is emitted\n"
Amaury Denoyelle7b01a8d2021-03-29 10:29:07 +0200602 " -dD diagnostic mode : warn about suspicious configuration statements\n"
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +0200603 " -sf/-st [pid ]* finishes/terminates old pids.\n"
Olivier Houchardf73629d2017-04-05 22:33:04 +0200604 " -x <unix_socket> get listening sockets from a unix socket\n"
William Lallemand63329e32019-06-13 17:03:37 +0200605 " -S <bind>[,<bind options>...] new master CLI\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200606 "\n",
Willy Tarreauca783d42019-03-13 10:03:07 +0100607 name, cfg_maxpconn);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200608 exit(1);
609}
610
611
612
613/*********************************************************************/
614/* more specific functions ***************************************/
615/*********************************************************************/
616
William Lallemand73b85e72017-06-01 17:38:51 +0200617/* sends the signal <sig> to all pids found in <oldpids>. Returns the number of
618 * pids the signal was correctly delivered to.
619 */
William Lallemande25473c2019-04-01 11:29:56 +0200620int tell_old_pids(int sig)
William Lallemand73b85e72017-06-01 17:38:51 +0200621{
622 int p;
623 int ret = 0;
624 for (p = 0; p < nb_oldpids; p++)
625 if (kill(oldpids[p], sig) == 0)
626 ret++;
627 return ret;
628}
629
William Lallemand75ea0a02017-11-15 19:02:58 +0100630/*
William Lallemand73b85e72017-06-01 17:38:51 +0200631 * remove a pid forom the olpid array and decrease nb_oldpids
632 * return 1 pid was found otherwise return 0
633 */
634
635int delete_oldpid(int pid)
636{
637 int i;
638
639 for (i = 0; i < nb_oldpids; i++) {
640 if (oldpids[i] == pid) {
641 oldpids[i] = oldpids[nb_oldpids - 1];
642 oldpids[nb_oldpids - 1] = 0;
643 nb_oldpids--;
644 return 1;
645 }
646 }
647 return 0;
648}
649
William Lallemand85b0bd92017-06-01 17:38:53 +0200650
651static void get_cur_unixsocket()
652{
653 /* if -x was used, try to update the stat socket if not available anymore */
Willy Tarreau4975d142021-03-13 11:00:33 +0100654 if (global.cli_fe) {
William Lallemand85b0bd92017-06-01 17:38:53 +0200655 struct bind_conf *bind_conf;
656
657 /* pass through all stats socket */
Willy Tarreau4975d142021-03-13 11:00:33 +0100658 list_for_each_entry(bind_conf, &global.cli_fe->conf.bind, by_fe) {
William Lallemand85b0bd92017-06-01 17:38:53 +0200659 struct listener *l;
660
661 list_for_each_entry(l, &bind_conf->listeners, by_bind) {
662
Willy Tarreau37159062020-08-27 07:48:42 +0200663 if (l->rx.addr.ss_family == AF_UNIX &&
William Lallemand85b0bd92017-06-01 17:38:53 +0200664 (bind_conf->level & ACCESS_FD_LISTENERS)) {
665 const struct sockaddr_un *un;
666
Willy Tarreau37159062020-08-27 07:48:42 +0200667 un = (struct sockaddr_un *)&l->rx.addr;
William Lallemand85b0bd92017-06-01 17:38:53 +0200668 /* priority to old_unixsocket */
669 if (!cur_unixsocket) {
670 cur_unixsocket = strdup(un->sun_path);
671 } else {
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100672 if (old_unixsocket && strcmp(un->sun_path, old_unixsocket) == 0) {
William Lallemand85b0bd92017-06-01 17:38:53 +0200673 free(cur_unixsocket);
674 cur_unixsocket = strdup(old_unixsocket);
675 return;
676 }
677 }
678 }
679 }
680 }
681 }
682 if (!cur_unixsocket && old_unixsocket)
683 cur_unixsocket = strdup(old_unixsocket);
684}
685
William Lallemand73b85e72017-06-01 17:38:51 +0200686/*
687 * When called, this function reexec haproxy with -sf followed by current
Joseph Herlant03420902018-11-15 10:41:50 -0800688 * children PIDs and possibly old children PIDs if they didn't leave yet.
William Lallemand73b85e72017-06-01 17:38:51 +0200689 */
William Lallemanda57b7e32018-12-14 21:11:31 +0100690void mworker_reload()
William Lallemand73b85e72017-06-01 17:38:51 +0200691{
William Lallemand00417412020-06-05 14:08:41 +0200692 char **next_argv = NULL;
693 int old_argc = 0; /* previous number of argument */
William Lallemand73b85e72017-06-01 17:38:51 +0200694 int next_argc = 0;
William Lallemand00417412020-06-05 14:08:41 +0200695 int i = 0;
William Lallemand73b85e72017-06-01 17:38:51 +0200696 char *msg = NULL;
Willy Tarreau8dca1952019-03-01 10:21:55 +0100697 struct rlimit limit;
William Lallemand7c756a82018-11-26 11:53:40 +0100698 struct per_thread_deinit_fct *ptdf;
William Lallemand73b85e72017-06-01 17:38:51 +0200699
700 mworker_block_signals();
Tim Duesterhusd6942c82017-11-20 15:58:35 +0100701#if defined(USE_SYSTEMD)
702 if (global.tune.options & GTUNE_USE_SYSTEMD)
703 sd_notify(0, "RELOADING=1");
704#endif
William Lallemand73b85e72017-06-01 17:38:51 +0200705 setenv("HAPROXY_MWORKER_REEXEC", "1", 1);
706
William Lallemandbc193052018-09-11 10:06:26 +0200707 mworker_proc_list_to_env(); /* put the children description in the env */
708
William Lallemand7c756a82018-11-26 11:53:40 +0100709 /* during the reload we must ensure that every FDs that can't be
710 * reuse (ie those that are not referenced in the proc_list)
711 * are closed or they will leak. */
712
713 /* close the listeners FD */
714 mworker_cli_proxy_stop();
William Lallemand16866672019-06-24 17:40:48 +0200715
716 if (getenv("HAPROXY_MWORKER_WAIT_ONLY") == NULL) {
717 /* close the poller FD and the thread waker pipe FD */
718 list_for_each_entry(ptdf, &per_thread_deinit_list, list)
719 ptdf->fct();
720 if (fdtab)
721 deinit_pollers();
722 }
Ilya Shipitsin98a9e1b2021-02-19 23:42:53 +0500723#ifdef HAVE_SSL_RAND_KEEP_RANDOM_DEVICES_OPEN
William Lallemand5fdb5b32019-10-15 14:04:08 +0200724 /* close random device FDs */
725 RAND_keep_random_devices_open(0);
Rob Allen56996da2019-05-03 09:11:32 +0100726#endif
William Lallemand7c756a82018-11-26 11:53:40 +0100727
Willy Tarreau8dca1952019-03-01 10:21:55 +0100728 /* restore the initial FD limits */
729 limit.rlim_cur = rlim_fd_cur_at_boot;
730 limit.rlim_max = rlim_fd_max_at_boot;
731 if (setrlimit(RLIMIT_NOFILE, &limit) == -1) {
732 getrlimit(RLIMIT_NOFILE, &limit);
733 ha_warning("Failed to restore initial FD limits (cur=%u max=%u), using cur=%u max=%u\n",
734 rlim_fd_cur_at_boot, rlim_fd_max_at_boot,
735 (unsigned int)limit.rlim_cur, (unsigned int)limit.rlim_max);
736 }
737
William Lallemand73b85e72017-06-01 17:38:51 +0200738 /* compute length */
William Lallemand00417412020-06-05 14:08:41 +0200739 while (old_argv[old_argc])
740 old_argc++;
William Lallemand73b85e72017-06-01 17:38:51 +0200741
William Lallemand85b0bd92017-06-01 17:38:53 +0200742 /* 1 for haproxy -sf, 2 for -x /socket */
William Lallemandaba7f8b2021-04-21 16:55:34 +0200743 next_argv = calloc(old_argc + 1 + 2 + mworker_child_nb() + 1,
Tim Duesterhuse52b6e52020-09-12 20:26:43 +0200744 sizeof(*next_argv));
William Lallemand73b85e72017-06-01 17:38:51 +0200745 if (next_argv == NULL)
746 goto alloc_error;
747
William Lallemand00417412020-06-05 14:08:41 +0200748 /* copy the program name */
749 next_argv[next_argc++] = old_argv[0];
750
751 /* insert the new options just after argv[0] in case we have a -- */
752
William Lallemand73b85e72017-06-01 17:38:51 +0200753 /* add -sf <PID>* to argv */
William Lallemand3f128872019-04-01 11:29:59 +0200754 if (mworker_child_nb() > 0) {
755 struct mworker_proc *child;
756
William Lallemand73b85e72017-06-01 17:38:51 +0200757 next_argv[next_argc++] = "-sf";
William Lallemand3f128872019-04-01 11:29:59 +0200758
759 list_for_each_entry(child, &proc_list, list) {
William Lallemand677e2f22019-11-19 17:04:18 +0100760 if (!(child->options & (PROC_O_TYPE_WORKER|PROC_O_TYPE_PROG)) || child->pid <= -1 )
William Lallemand3f128872019-04-01 11:29:59 +0200761 continue;
William Lallemand00417412020-06-05 14:08:41 +0200762 if ((next_argv[next_argc++] = memprintf(&msg, "%d", child->pid)) == NULL)
William Lallemand73b85e72017-06-01 17:38:51 +0200763 goto alloc_error;
764 msg = NULL;
765 }
766 }
William Lallemand2bf6d622017-06-20 11:20:23 +0200767 /* add the -x option with the stat socket */
William Lallemand85b0bd92017-06-01 17:38:53 +0200768 if (cur_unixsocket) {
William Lallemand2bf6d622017-06-20 11:20:23 +0200769 next_argv[next_argc++] = "-x";
770 next_argv[next_argc++] = (char *)cur_unixsocket;
William Lallemand85b0bd92017-06-01 17:38:53 +0200771 }
772
William Lallemand00417412020-06-05 14:08:41 +0200773 /* copy the previous options */
774 for (i = 1; i < old_argc; i++)
775 next_argv[next_argc++] = old_argv[i];
776
Christopher Faulet767a84b2017-11-24 16:50:31 +0100777 ha_warning("Reexecuting Master process\n");
Willy Tarreaue0d86e22019-08-26 10:37:39 +0200778 signal(SIGPROF, SIG_IGN);
Tim Duesterhus0436ab72017-11-12 17:39:18 +0100779 execvp(next_argv[0], next_argv);
William Lallemand73b85e72017-06-01 17:38:51 +0200780
Christopher Faulet767a84b2017-11-24 16:50:31 +0100781 ha_warning("Failed to reexecute the master process [%d]: %s\n", pid, strerror(errno));
Willy Tarreau61cfdf42021-02-20 10:46:51 +0100782 ha_free(&next_argv);
William Lallemand722d4ca2017-11-15 19:02:55 +0100783 return;
784
William Lallemand73b85e72017-06-01 17:38:51 +0200785alloc_error:
Willy Tarreau61cfdf42021-02-20 10:46:51 +0100786 ha_free(&next_argv);
Joseph Herlant07a08342018-11-15 10:43:05 -0800787 ha_warning("Failed to reexecute the master process [%d]: Cannot allocate memory\n", pid);
William Lallemand73b85e72017-06-01 17:38:51 +0200788 return;
789}
790
William Lallemandb3f2be32018-09-11 10:06:18 +0200791static void mworker_loop()
792{
793
794#if defined(USE_SYSTEMD)
795 if (global.tune.options & GTUNE_USE_SYSTEMD)
796 sd_notifyf(0, "READY=1\nMAINPID=%lu", (unsigned long)getpid());
797#endif
Willy Tarreaud83b6c12019-04-18 11:31:36 +0200798 /* Busy polling makes no sense in the master :-) */
799 global.tune.options &= ~GTUNE_BUSY_POLLING;
William Lallemandb3f2be32018-09-11 10:06:18 +0200800
William Lallemandbc193052018-09-11 10:06:26 +0200801 master = 1;
802
Willy Tarreaud26c9f92019-12-11 14:24:07 +0100803 signal_unregister(SIGTTIN);
804 signal_unregister(SIGTTOU);
William Lallemand0564d412018-11-20 17:36:53 +0100805 signal_unregister(SIGUSR1);
806 signal_unregister(SIGHUP);
807 signal_unregister(SIGQUIT);
808
William Lallemandb3f2be32018-09-11 10:06:18 +0200809 signal_register_fct(SIGTERM, mworker_catch_sigterm, SIGTERM);
810 signal_register_fct(SIGUSR1, mworker_catch_sigterm, SIGUSR1);
Willy Tarreaud26c9f92019-12-11 14:24:07 +0100811 signal_register_fct(SIGTTIN, mworker_broadcast_signal, SIGTTIN);
812 signal_register_fct(SIGTTOU, mworker_broadcast_signal, SIGTTOU);
William Lallemandb3f2be32018-09-11 10:06:18 +0200813 signal_register_fct(SIGINT, mworker_catch_sigterm, SIGINT);
814 signal_register_fct(SIGHUP, mworker_catch_sighup, SIGHUP);
815 signal_register_fct(SIGUSR2, mworker_catch_sighup, SIGUSR2);
816 signal_register_fct(SIGCHLD, mworker_catch_sigchld, SIGCHLD);
817
818 mworker_unblock_signals();
819 mworker_cleanlisteners();
William Lallemand27f3fa52018-12-06 14:05:20 +0100820 mworker_cleantasks();
William Lallemandb3f2be32018-09-11 10:06:18 +0200821
William Lallemandbc193052018-09-11 10:06:26 +0200822 mworker_catch_sigchld(NULL); /* ensure we clean the children in case
823 some SIGCHLD were lost */
824
William Lallemandb3f2be32018-09-11 10:06:18 +0200825 global.nbthread = 1;
826 relative_pid = 1;
827 pid_bit = 1;
Willy Tarreaua38a7172019-02-02 17:11:28 +0100828 all_proc_mask = 1;
William Lallemandb3f2be32018-09-11 10:06:18 +0200829
William Lallemand2672eb92018-12-14 15:52:39 +0100830#ifdef USE_THREAD
831 tid_bit = 1;
832 all_threads_mask = 1;
833#endif
834
William Lallemandb3f2be32018-09-11 10:06:18 +0200835 jobs++; /* this is the "master" job, we want to take care of the
836 signals even if there is no listener so the poll loop don't
837 leave */
838
839 fork_poller();
Willy Tarreaub4f7cc32019-05-03 09:27:30 +0200840 run_thread_poll_loop(0);
William Lallemandb3f2be32018-09-11 10:06:18 +0200841}
William Lallemandcb11fd22017-06-01 17:38:52 +0200842
843/*
844 * Reexec the process in failure mode, instead of exiting
845 */
846void reexec_on_failure()
847{
848 if (!atexit_flag)
849 return;
850
851 setenv("HAPROXY_MWORKER_WAIT_ONLY", "1", 1);
852
Christopher Faulet767a84b2017-11-24 16:50:31 +0100853 ha_warning("Reexecuting Master process in waitpid mode\n");
William Lallemandcb11fd22017-06-01 17:38:52 +0200854 mworker_reload();
William Lallemandcb11fd22017-06-01 17:38:52 +0200855}
William Lallemand73b85e72017-06-01 17:38:51 +0200856
857
858/*
Willy Tarreaud0807c32010-08-27 18:26:11 +0200859 * upon SIGUSR1, let's have a soft stop. Note that soft_stop() broadcasts
860 * a signal zero to all subscribers. This means that it's as easy as
861 * subscribing to signal 0 to get informed about an imminent shutdown.
Willy Tarreaubaaee002006-06-26 02:48:02 +0200862 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100863static void sig_soft_stop(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200864{
865 soft_stop();
Willy Tarreau24f4efa2010-08-27 17:56:48 +0200866 signal_unregister_handler(sh);
Willy Tarreaubafbe012017-11-24 17:34:44 +0100867 pool_gc(NULL);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200868}
869
870/*
871 * upon SIGTTOU, we pause everything
872 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100873static void sig_pause(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200874{
Willy Tarreau775e0012020-09-24 16:36:26 +0200875 if (protocol_pause_all() & ERR_FATAL) {
876 const char *msg = "Some proxies refused to pause, performing soft stop now.\n";
Willy Tarreau0a002df2020-10-09 19:26:27 +0200877 ha_warning("%s", msg);
878 send_log(NULL, LOG_WARNING, "%s", msg);
Willy Tarreau775e0012020-09-24 16:36:26 +0200879 soft_stop();
880 }
Willy Tarreaubafbe012017-11-24 17:34:44 +0100881 pool_gc(NULL);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200882}
883
884/*
885 * upon SIGTTIN, let's have a soft stop.
886 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100887static void sig_listen(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200888{
Willy Tarreau775e0012020-09-24 16:36:26 +0200889 if (protocol_resume_all() & ERR_FATAL) {
890 const char *msg = "Some proxies refused to resume, probably due to a conflict on a listening port. You may want to try again after the conflicting application is stopped, otherwise a restart might be needed to resume safe operations.\n";
Willy Tarreau0a002df2020-10-09 19:26:27 +0200891 ha_warning("%s", msg);
892 send_log(NULL, LOG_WARNING, "%s", msg);
Willy Tarreau775e0012020-09-24 16:36:26 +0200893 }
Willy Tarreaubaaee002006-06-26 02:48:02 +0200894}
895
896/*
897 * this function dumps every server's state when the process receives SIGHUP.
898 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100899static void sig_dump_state(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200900{
Olivier Houchardfbc74e82017-11-24 16:54:05 +0100901 struct proxy *p = proxies_list;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200902
Christopher Faulet767a84b2017-11-24 16:50:31 +0100903 ha_warning("SIGHUP received, dumping servers states.\n");
Willy Tarreaubaaee002006-06-26 02:48:02 +0200904 while (p) {
905 struct server *s = p->srv;
906
907 send_log(p, LOG_NOTICE, "SIGHUP received, dumping servers states for proxy %s.\n", p->id);
908 while (s) {
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100909 chunk_printf(&trash,
910 "SIGHUP: Server %s/%s is %s. Conn: %d act, %d pend, %lld tot.",
911 p->id, s->id,
Emeric Brun52a91d32017-08-31 14:41:55 +0200912 (s->cur_state != SRV_ST_STOPPED) ? "UP" : "DOWN",
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100913 s->cur_sess, s->nbpend, s->counters.cum_sess);
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200914 ha_warning("%s\n", trash.area);
915 send_log(p, LOG_NOTICE, "%s\n", trash.area);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200916 s = s->next;
917 }
918
Willy Tarreau5fcc8f12007-09-17 11:27:09 +0200919 /* FIXME: those info are a bit outdated. We should be able to distinguish between FE and BE. */
920 if (!p->srv) {
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100921 chunk_printf(&trash,
922 "SIGHUP: Proxy %s has no servers. Conn: act(FE+BE): %d+%d, %d pend (%d unass), tot(FE+BE): %lld+%lld.",
923 p->id,
924 p->feconn, p->beconn, p->totpend, p->nbpend, p->fe_counters.cum_conn, p->be_counters.cum_conn);
Willy Tarreau5fcc8f12007-09-17 11:27:09 +0200925 } else if (p->srv_act == 0) {
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100926 chunk_printf(&trash,
927 "SIGHUP: Proxy %s %s ! Conn: act(FE+BE): %d+%d, %d pend (%d unass), tot(FE+BE): %lld+%lld.",
928 p->id,
929 (p->srv_bck) ? "is running on backup servers" : "has no server available",
930 p->feconn, p->beconn, p->totpend, p->nbpend, p->fe_counters.cum_conn, p->be_counters.cum_conn);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200931 } else {
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100932 chunk_printf(&trash,
933 "SIGHUP: Proxy %s has %d active servers and %d backup servers available."
934 " Conn: act(FE+BE): %d+%d, %d pend (%d unass), tot(FE+BE): %lld+%lld.",
935 p->id, p->srv_act, p->srv_bck,
936 p->feconn, p->beconn, p->totpend, p->nbpend, p->fe_counters.cum_conn, p->be_counters.cum_conn);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200937 }
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200938 ha_warning("%s\n", trash.area);
939 send_log(p, LOG_NOTICE, "%s\n", trash.area);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200940
941 p = p->next;
942 }
Willy Tarreaubaaee002006-06-26 02:48:02 +0200943}
944
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100945static void dump(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200946{
Willy Tarreauc6ca1a02007-05-13 19:43:47 +0200947 /* dump memory usage then free everything possible */
948 dump_pools();
Willy Tarreaubafbe012017-11-24 17:34:44 +0100949 pool_gc(NULL);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200950}
951
William Lallemande1340412017-12-28 16:09:36 +0100952/*
953 * This function dup2 the stdio FDs (0,1,2) with <fd>, then closes <fd>
954 * If <fd> < 0, it opens /dev/null and use it to dup
955 *
956 * In the case of chrooting, you have to open /dev/null before the chroot, and
957 * pass the <fd> to this function
958 */
959static void stdio_quiet(int fd)
960{
961 if (fd < 0)
962 fd = open("/dev/null", O_RDWR, 0);
963
964 if (fd > -1) {
965 fclose(stdin);
966 fclose(stdout);
967 fclose(stderr);
968
969 dup2(fd, 0);
970 dup2(fd, 1);
971 dup2(fd, 2);
972 if (fd > 2)
973 close(fd);
974 return;
975 }
976
977 ha_alert("Cannot open /dev/null\n");
978 exit(EXIT_FAILURE);
979}
980
981
Joseph Herlant03420902018-11-15 10:41:50 -0800982/* This function checks if cfg_cfgfiles contains directories.
983 * If it finds one, it adds all the files (and only files) it contains
984 * in cfg_cfgfiles in place of the directory (and removes the directory).
985 * It adds the files in lexical order.
986 * It adds only files with .cfg extension.
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200987 * It doesn't add files with name starting with '.'
988 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100989static void cfgfiles_expand_directories(void)
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200990{
991 struct wordlist *wl, *wlb;
992 char *err = NULL;
993
994 list_for_each_entry_safe(wl, wlb, &cfg_cfgfiles, list) {
995 struct stat file_stat;
996 struct dirent **dir_entries = NULL;
997 int dir_entries_nb;
998 int dir_entries_it;
999
1000 if (stat(wl->s, &file_stat)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001001 ha_alert("Cannot open configuration file/directory %s : %s\n",
1002 wl->s,
1003 strerror(errno));
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001004 exit(1);
1005 }
1006
1007 if (!S_ISDIR(file_stat.st_mode))
1008 continue;
1009
1010 /* from this point wl->s is a directory */
1011
1012 dir_entries_nb = scandir(wl->s, &dir_entries, NULL, alphasort);
1013 if (dir_entries_nb < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001014 ha_alert("Cannot open configuration directory %s : %s\n",
1015 wl->s,
1016 strerror(errno));
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001017 exit(1);
1018 }
1019
1020 /* for each element in the directory wl->s */
1021 for (dir_entries_it = 0; dir_entries_it < dir_entries_nb; dir_entries_it++) {
1022 struct dirent *dir_entry = dir_entries[dir_entries_it];
1023 char *filename = NULL;
1024 char *d_name_cfgext = strstr(dir_entry->d_name, ".cfg");
1025
1026 /* don't add filename that begin with .
Joseph Herlant03420902018-11-15 10:41:50 -08001027 * only add filename with .cfg extension
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001028 */
1029 if (dir_entry->d_name[0] == '.' ||
1030 !(d_name_cfgext && d_name_cfgext[4] == '\0'))
1031 goto next_dir_entry;
1032
1033 if (!memprintf(&filename, "%s/%s", wl->s, dir_entry->d_name)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001034 ha_alert("Cannot load configuration files %s : out of memory.\n",
1035 filename);
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001036 exit(1);
1037 }
1038
1039 if (stat(filename, &file_stat)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001040 ha_alert("Cannot open configuration file %s : %s\n",
1041 wl->s,
1042 strerror(errno));
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001043 exit(1);
1044 }
1045
1046 /* don't add anything else than regular file in cfg_cfgfiles
1047 * this way we avoid loops
1048 */
1049 if (!S_ISREG(file_stat.st_mode))
1050 goto next_dir_entry;
1051
1052 if (!list_append_word(&wl->list, filename, &err)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001053 ha_alert("Cannot load configuration files %s : %s\n",
1054 filename,
1055 err);
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001056 exit(1);
1057 }
1058
1059next_dir_entry:
1060 free(filename);
1061 free(dir_entry);
1062 }
1063
1064 free(dir_entries);
1065
1066 /* remove the current directory (wl) from cfg_cfgfiles */
1067 free(wl->s);
Willy Tarreau2b718102021-04-21 07:32:39 +02001068 LIST_DELETE(&wl->list);
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001069 free(wl);
1070 }
1071
1072 free(err);
1073}
1074
Willy Tarreaubaaee002006-06-26 02:48:02 +02001075/*
William Lallemand73b85e72017-06-01 17:38:51 +02001076 * copy and cleanup the current argv
William Lallemanddf6c5a82020-06-04 17:40:23 +02001077 * Remove the -sf /-st / -x parameters
William Lallemand73b85e72017-06-01 17:38:51 +02001078 * Return an allocated copy of argv
1079 */
1080
1081static char **copy_argv(int argc, char **argv)
1082{
William Lallemanddf6c5a82020-06-04 17:40:23 +02001083 char **newargv, **retargv;
William Lallemand73b85e72017-06-01 17:38:51 +02001084
Tim Duesterhuse52b6e52020-09-12 20:26:43 +02001085 newargv = calloc(argc + 2, sizeof(*newargv));
William Lallemand73b85e72017-06-01 17:38:51 +02001086 if (newargv == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001087 ha_warning("Cannot allocate memory\n");
William Lallemand73b85e72017-06-01 17:38:51 +02001088 return NULL;
1089 }
William Lallemanddf6c5a82020-06-04 17:40:23 +02001090 retargv = newargv;
William Lallemand73b85e72017-06-01 17:38:51 +02001091
William Lallemanddf6c5a82020-06-04 17:40:23 +02001092 /* first copy argv[0] */
1093 *newargv++ = *argv++;
1094 argc--;
1095
1096 while (argc > 0) {
1097 if (**argv != '-') {
1098 /* non options are copied but will fail in the argument parser */
1099 *newargv++ = *argv++;
1100 argc--;
1101
1102 } else {
1103 char *flag;
1104
1105 flag = *argv + 1;
1106
1107 if (flag[0] == '-' && flag[1] == 0) {
1108 /* "--\0" copy every arguments till the end of argv */
1109 *newargv++ = *argv++;
1110 argc--;
1111
1112 while (argc > 0) {
1113 *newargv++ = *argv++;
1114 argc--;
1115 }
1116 } else {
1117 switch (*flag) {
1118 case 's':
1119 /* -sf / -st and their parameters are ignored */
1120 if (flag[1] == 'f' || flag[1] == 't') {
1121 argc--;
1122 argv++;
1123 /* The list can't contain a negative value since the only
1124 way to know the end of this list is by looking for the
1125 next option or the end of the options */
1126 while (argc > 0 && argv[0][0] != '-') {
1127 argc--;
1128 argv++;
1129 }
William Lallemand398da622020-09-02 16:12:23 +02001130 } else {
1131 argc--;
1132 argv++;
1133
William Lallemanddf6c5a82020-06-04 17:40:23 +02001134 }
1135 break;
1136
1137 case 'x':
1138 /* this option and its parameter are ignored */
1139 argc--;
1140 argv++;
1141 if (argc > 0) {
1142 argc--;
1143 argv++;
1144 }
1145 break;
1146
1147 case 'C':
1148 case 'n':
1149 case 'm':
1150 case 'N':
1151 case 'L':
1152 case 'f':
1153 case 'p':
1154 case 'S':
1155 /* these options have only 1 parameter which must be copied and can start with a '-' */
1156 *newargv++ = *argv++;
1157 argc--;
1158 if (argc == 0)
1159 goto error;
1160 *newargv++ = *argv++;
1161 argc--;
1162 break;
1163 default:
1164 /* for other options just copy them without parameters, this is also done
1165 * for options like "--foo", but this will fail in the argument parser.
1166 * */
1167 *newargv++ = *argv++;
1168 argc--;
1169 break;
1170 }
William Lallemand73b85e72017-06-01 17:38:51 +02001171 }
1172 }
William Lallemand73b85e72017-06-01 17:38:51 +02001173 }
William Lallemand2bf6d622017-06-20 11:20:23 +02001174
William Lallemanddf6c5a82020-06-04 17:40:23 +02001175 return retargv;
1176
1177error:
1178 free(retargv);
1179 return NULL;
William Lallemand73b85e72017-06-01 17:38:51 +02001180}
1181
Willy Tarreau6c3a6812020-03-06 18:57:15 +01001182
1183/* Performs basic random seed initialization. The main issue with this is that
1184 * srandom_r() only takes 32 bits and purposely provides a reproducible sequence,
1185 * which means that there will only be 4 billion possible random sequences once
1186 * srandom() is called, regardless of the internal state. Not calling it is
1187 * even worse as we'll always produce the same randoms sequences. What we do
1188 * here is to create an initial sequence from various entropy sources, hash it
1189 * using SHA1 and keep the resulting 160 bits available globally.
1190 *
1191 * We initialize the current process with the first 32 bits before starting the
1192 * polling loop, where all this will be changed to have process specific and
1193 * thread specific sequences.
Willy Tarreau52bf8392020-03-08 00:42:37 +01001194 *
1195 * Before starting threads, it's still possible to call random() as srandom()
1196 * is initialized from this, but after threads and/or processes are started,
1197 * only ha_random() is expected to be used to guarantee distinct sequences.
Willy Tarreau6c3a6812020-03-06 18:57:15 +01001198 */
1199static void ha_random_boot(char *const *argv)
1200{
1201 unsigned char message[256];
1202 unsigned char *m = message;
1203 struct timeval tv;
1204 blk_SHA_CTX ctx;
1205 unsigned long l;
1206 int fd;
1207 int i;
1208
1209 /* start with current time as pseudo-random seed */
1210 gettimeofday(&tv, NULL);
1211 write_u32(m, tv.tv_sec); m += 4;
1212 write_u32(m, tv.tv_usec); m += 4;
1213
1214 /* PID and PPID add some OS-based randomness */
1215 write_u16(m, getpid()); m += 2;
1216 write_u16(m, getppid()); m += 2;
1217
1218 /* take up to 160 bits bytes from /dev/urandom if available (non-blocking) */
1219 fd = open("/dev/urandom", O_RDONLY);
1220 if (fd >= 0) {
1221 i = read(fd, m, 20);
1222 if (i > 0)
1223 m += i;
1224 close(fd);
1225 }
1226
1227 /* take up to 160 bits bytes from openssl (non-blocking) */
1228#ifdef USE_OPENSSL
1229 if (RAND_bytes(m, 20) == 1)
1230 m += 20;
1231#endif
1232
1233 /* take 160 bits from existing random in case it was already initialized */
1234 for (i = 0; i < 5; i++) {
1235 write_u32(m, random());
1236 m += 4;
1237 }
1238
1239 /* stack address (benefit form operating system's ASLR) */
1240 l = (unsigned long)&m;
1241 memcpy(m, &l, sizeof(l)); m += sizeof(l);
1242
1243 /* argv address (benefit form operating system's ASLR) */
1244 l = (unsigned long)&argv;
1245 memcpy(m, &l, sizeof(l)); m += sizeof(l);
1246
1247 /* use tv_usec again after all the operations above */
1248 gettimeofday(&tv, NULL);
1249 write_u32(m, tv.tv_usec); m += 4;
1250
1251 /*
1252 * At this point, ~84-92 bytes have been used
1253 */
1254
1255 /* finish with the hostname */
1256 strncpy((char *)m, hostname, message + sizeof(message) - m);
1257 m += strlen(hostname);
1258
1259 /* total message length */
1260 l = m - message;
1261
1262 memset(&ctx, 0, sizeof(ctx));
1263 blk_SHA1_Init(&ctx);
1264 blk_SHA1_Update(&ctx, message, l);
1265 blk_SHA1_Final(boot_seed, &ctx);
1266
1267 srandom(read_u32(boot_seed));
Willy Tarreau52bf8392020-03-08 00:42:37 +01001268 ha_random_seed(boot_seed, sizeof(boot_seed));
Willy Tarreau6c3a6812020-03-06 18:57:15 +01001269}
1270
Willy Tarreau5a023f02019-03-01 14:19:31 +01001271/* considers splicing proxies' maxconn, computes the ideal global.maxpipes
1272 * setting, and returns it. It may return -1 meaning "unlimited" if some
1273 * unlimited proxies have been found and the global.maxconn value is not yet
1274 * set. It may also return a value greater than maxconn if it's not yet set.
1275 * Note that a value of zero means there is no need for pipes. -1 is never
1276 * returned if global.maxconn is valid.
1277 */
1278static int compute_ideal_maxpipes()
1279{
1280 struct proxy *cur;
1281 int nbfe = 0, nbbe = 0;
1282 int unlimited = 0;
1283 int pipes;
1284 int max;
1285
1286 for (cur = proxies_list; cur; cur = cur->next) {
1287 if (cur->options2 & (PR_O2_SPLIC_ANY)) {
1288 if (cur->cap & PR_CAP_FE) {
1289 max = cur->maxconn;
1290 nbfe += max;
1291 if (!max) {
1292 unlimited = 1;
1293 break;
1294 }
1295 }
1296 if (cur->cap & PR_CAP_BE) {
1297 max = cur->fullconn ? cur->fullconn : global.maxconn;
1298 nbbe += max;
1299 if (!max) {
1300 unlimited = 1;
1301 break;
1302 }
1303 }
1304 }
1305 }
1306
1307 pipes = MAX(nbfe, nbbe);
1308 if (global.maxconn) {
1309 if (pipes > global.maxconn || unlimited)
1310 pipes = global.maxconn;
1311 } else if (unlimited) {
1312 pipes = -1;
1313 }
1314
1315 return pipes >= 4 ? pipes / 4 : pipes;
1316}
1317
Willy Tarreauac350932019-03-01 15:43:14 +01001318/* considers global.maxsocks, global.maxpipes, async engines, SSL frontends and
1319 * rlimits and computes an ideal maxconn. It's meant to be called only when
1320 * maxsock contains the sum of listening FDs, before it is updated based on
Willy Tarreaudf23c0c2019-03-13 10:10:49 +01001321 * maxconn and pipes. If there are not enough FDs left, DEFAULT_MAXCONN (by
1322 * default 100) is returned as it is expected that it will even run on tight
1323 * environments, and will maintain compatibility with previous packages that
1324 * used to rely on this value as the default one. The system will emit a
1325 * warning indicating how many FDs are missing anyway if needed.
Willy Tarreauac350932019-03-01 15:43:14 +01001326 */
1327static int compute_ideal_maxconn()
1328{
1329 int ssl_sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
1330 int engine_fds = global.ssl_used_async_engines * ssl_sides;
1331 int pipes = compute_ideal_maxpipes();
Willy Tarreaub1beaa32020-03-06 10:25:31 +01001332 int remain = MAX(rlim_fd_cur_at_boot, rlim_fd_max_at_boot);
Willy Tarreauac350932019-03-01 15:43:14 +01001333 int maxconn;
1334
1335 /* we have to take into account these elements :
1336 * - number of engine_fds, which inflates the number of FD needed per
1337 * connection by this number.
1338 * - number of pipes per connection on average : for the unlimited
1339 * case, this is 0.5 pipe FDs per connection, otherwise it's a
1340 * fixed value of 2*pipes.
1341 * - two FDs per connection
1342 */
1343
1344 /* subtract listeners and checks */
1345 remain -= global.maxsock;
1346
Willy Tarreau3f200852019-03-14 19:13:17 +01001347 /* one epoll_fd/kqueue_fd per thread */
1348 remain -= global.nbthread;
1349
1350 /* one wake-up pipe (2 fd) per thread */
1351 remain -= 2 * global.nbthread;
1352
Willy Tarreauac350932019-03-01 15:43:14 +01001353 /* Fixed pipes values : we only subtract them if they're not larger
1354 * than the remaining FDs because pipes are optional.
1355 */
1356 if (pipes >= 0 && pipes * 2 < remain)
1357 remain -= pipes * 2;
1358
1359 if (pipes < 0) {
1360 /* maxsock = maxconn * 2 + maxconn/4 * 2 + maxconn * engine_fds.
1361 * = maxconn * (2 + 0.5 + engine_fds)
1362 * = maxconn * (4 + 1 + 2*engine_fds) / 2
1363 */
1364 maxconn = 2 * remain / (5 + 2 * engine_fds);
1365 } else {
1366 /* maxsock = maxconn * 2 + maxconn * engine_fds.
1367 * = maxconn * (2 + engine_fds)
1368 */
1369 maxconn = remain / (2 + engine_fds);
1370 }
1371
Willy Tarreaudf23c0c2019-03-13 10:10:49 +01001372 return MAX(maxconn, DEFAULT_MAXCONN);
Willy Tarreauac350932019-03-01 15:43:14 +01001373}
1374
Willy Tarreaua409f302020-03-10 17:08:53 +01001375/* computes the estimated maxsock value for the given maxconn based on the
1376 * possibly set global.maxpipes and existing partial global.maxsock. It may
1377 * temporarily change global.maxconn for the time needed to propagate the
1378 * computations, and will reset it.
1379 */
1380static int compute_ideal_maxsock(int maxconn)
1381{
1382 int maxpipes = global.maxpipes;
1383 int maxsock = global.maxsock;
1384
1385
1386 if (!maxpipes) {
1387 int old_maxconn = global.maxconn;
1388
1389 global.maxconn = maxconn;
1390 maxpipes = compute_ideal_maxpipes();
1391 global.maxconn = old_maxconn;
1392 }
1393
1394 maxsock += maxconn * 2; /* each connection needs two sockets */
1395 maxsock += maxpipes * 2; /* each pipe needs two FDs */
1396 maxsock += global.nbthread; /* one epoll_fd/kqueue_fd per thread */
1397 maxsock += 2 * global.nbthread; /* one wake-up pipe (2 fd) per thread */
1398
1399 /* compute fd used by async engines */
1400 if (global.ssl_used_async_engines) {
1401 int sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
1402
1403 maxsock += maxconn * sides * global.ssl_used_async_engines;
1404 }
1405 return maxsock;
1406}
1407
Thayne McCombs8f0cc5c2021-01-07 21:35:52 -07001408/* Tests if it is possible to set the current process's RLIMIT_NOFILE to
Willy Tarreau304e17e2020-03-10 17:54:54 +01001409 * <maxsock>, then sets it back to the previous value. Returns non-zero if the
1410 * value is accepted, non-zero otherwise. This is used to determine if an
1411 * automatic limit may be applied or not. When it is not, the caller knows that
1412 * the highest we can do is the rlim_max at boot. In case of error, we return
1413 * that the setting is possible, so that we defer the error processing to the
1414 * final stage in charge of enforcing this.
1415 */
1416static int check_if_maxsock_permitted(int maxsock)
1417{
1418 struct rlimit orig_limit, test_limit;
1419 int ret;
1420
1421 if (getrlimit(RLIMIT_NOFILE, &orig_limit) != 0)
1422 return 1;
1423
1424 /* don't go further if we can't even set to what we have */
1425 if (setrlimit(RLIMIT_NOFILE, &orig_limit) != 0)
1426 return 1;
1427
1428 test_limit.rlim_max = MAX(maxsock, orig_limit.rlim_max);
1429 test_limit.rlim_cur = test_limit.rlim_max;
1430 ret = setrlimit(RLIMIT_NOFILE, &test_limit);
1431
1432 if (setrlimit(RLIMIT_NOFILE, &orig_limit) != 0)
1433 return 1;
1434
1435 return ret == 0;
1436}
1437
Amaury Denoyelle484454d2021-05-05 16:18:45 +02001438void mark_tainted(const enum tainted_flags flag)
1439{
1440 HA_ATOMIC_OR(&tainted, flag);
1441}
1442
1443unsigned int get_tainted()
1444{
1445 int tainted_state;
1446 HA_ATOMIC_STORE(&tainted_state, tainted);
1447 return tainted_state;
1448}
Willy Tarreau304e17e2020-03-10 17:54:54 +01001449
William Lallemand73b85e72017-06-01 17:38:51 +02001450/*
Willy Tarreaubaaee002006-06-26 02:48:02 +02001451 * This function initializes all the necessary variables. It only returns
1452 * if everything is OK. If something fails, it exits.
1453 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +01001454static void init(int argc, char **argv)
Willy Tarreaubaaee002006-06-26 02:48:02 +02001455{
Willy Tarreaubaaee002006-06-26 02:48:02 +02001456 int arg_mode = 0; /* MODE_DEBUG, ... */
Willy Tarreaubaaee002006-06-26 02:48:02 +02001457 char *tmp;
1458 char *cfg_pidfile = NULL;
Willy Tarreau058e9072009-07-20 09:30:05 +02001459 int err_code = 0;
Maxime de Roucy0f503922016-05-13 23:52:55 +02001460 char *err_msg = NULL;
Willy Tarreau477ecd82010-01-03 21:12:30 +01001461 struct wordlist *wl;
Kevinm48936af2010-12-22 16:08:21 +00001462 char *progname;
Willy Tarreau576132e2011-09-10 19:26:56 +02001463 char *change_dir = NULL;
Christopher Fauletd7c91962015-04-30 11:48:27 +02001464 struct proxy *px;
Willy Tarreaue6945732016-12-21 19:57:00 +01001465 struct post_check_fct *pcf;
Willy Tarreauac350932019-03-01 15:43:14 +01001466 int ideal_maxconn;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001467
Christopher Faulete3a5e352017-10-24 13:53:54 +02001468 global.mode = MODE_STARTING;
William Lallemand00417412020-06-05 14:08:41 +02001469 old_argv = copy_argv(argc, argv);
1470 if (!old_argv) {
William Lallemanddf6c5a82020-06-04 17:40:23 +02001471 ha_alert("failed to copy argv.\n");
1472 exit(1);
1473 }
William Lallemand73b85e72017-06-01 17:38:51 +02001474
Christopher Fauletcd7879a2017-10-27 13:53:47 +02001475 if (!init_trash_buffers(1)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001476 ha_alert("failed to initialize trash buffers.\n");
Christopher Faulet748919a2017-07-26 14:59:46 +02001477 exit(1);
1478 }
David du Colombier7af46052012-05-16 14:16:48 +02001479
Emeric Brun2b920a12010-09-23 18:30:22 +02001480 /* NB: POSIX does not make it mandatory for gethostname() to NULL-terminate
1481 * the string in case of truncation, and at least FreeBSD appears not to do
1482 * it.
1483 */
1484 memset(hostname, 0, sizeof(hostname));
1485 gethostname(hostname, sizeof(hostname) - 1);
Dragan Dosen4f014152020-06-18 16:56:47 +02001486
1487 if ((localpeer = strdup(hostname)) == NULL) {
1488 ha_alert("Cannot allocate memory for local peer.\n");
1489 exit(EXIT_FAILURE);
1490 }
William Lallemanddaf4cd22018-04-17 16:46:13 +02001491 setenv("HAPROXY_LOCALPEER", localpeer, 1);
Emeric Brun2b920a12010-09-23 18:30:22 +02001492
William Lallemand24c928c2020-01-14 17:58:18 +01001493 /* we were in mworker mode, we should restart in mworker mode */
1494 if (getenv("HAPROXY_MWORKER_REEXEC") != NULL)
1495 global.mode |= MODE_MWORKER;
1496
Willy Tarreaubaaee002006-06-26 02:48:02 +02001497 /*
1498 * Initialize the previously static variables.
1499 */
Christopher Fauletcd7879a2017-10-27 13:53:47 +02001500
Willy Tarreau173d9952018-01-26 21:48:23 +01001501 totalconn = actconn = listeners = stopping = 0;
Cyril Bonté203ec5a2017-03-23 22:44:13 +01001502 killed = 0;
Christopher Fauletcd7879a2017-10-27 13:53:47 +02001503
Willy Tarreaubaaee002006-06-26 02:48:02 +02001504
1505#ifdef HAPROXY_MEMMAX
Willy Tarreau70060452015-12-14 12:46:07 +01001506 global.rlimit_memmax_all = HAPROXY_MEMMAX;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001507#endif
1508
Benoit GARNIERb413c2a2016-03-27 11:08:03 +02001509 tzset();
Willy Tarreauc4c80fb2021-04-11 15:00:34 +02001510 tv_init_process_date();
Willy Tarreaubaaee002006-06-26 02:48:02 +02001511 start_date = now;
1512
Willy Tarreau6c3a6812020-03-06 18:57:15 +01001513 ha_random_boot(argv);
Willy Tarreau84310e22014-02-14 11:59:04 +01001514
Willy Tarreau8ed669b2013-01-11 15:49:37 +01001515 if (init_acl() != 0)
1516 exit(1);
Willy Tarreaub6b3df32018-11-26 16:31:20 +01001517
Thierry FOURNIER6f1fd482015-01-23 14:06:13 +01001518 /* Initialise lua. */
1519 hlua_init();
Thierry FOURNIER6f1fd482015-01-23 14:06:13 +01001520
Christopher Fauletff2613e2016-11-09 11:36:17 +01001521 /* Initialize process vars */
Willy Tarreaucfc4f242021-05-08 11:41:28 +02001522 vars_init(&proc_vars, SCOPE_PROC);
Christopher Fauletff2613e2016-11-09 11:36:17 +01001523
Willy Tarreau43b78992009-01-25 15:42:27 +01001524 global.tune.options |= GTUNE_USE_SELECT; /* select() is always available */
Willy Tarreaue5733232019-05-22 19:24:06 +02001525#if defined(USE_POLL)
Willy Tarreau43b78992009-01-25 15:42:27 +01001526 global.tune.options |= GTUNE_USE_POLL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001527#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001528#if defined(USE_EPOLL)
Willy Tarreau43b78992009-01-25 15:42:27 +01001529 global.tune.options |= GTUNE_USE_EPOLL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001530#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001531#if defined(USE_KQUEUE)
Willy Tarreau43b78992009-01-25 15:42:27 +01001532 global.tune.options |= GTUNE_USE_KQUEUE;
Willy Tarreau1e63130a2007-04-09 12:03:06 +02001533#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001534#if defined(USE_EVPORTS)
Emmanuel Hocdet0ba4f482019-04-08 16:53:32 +00001535 global.tune.options |= GTUNE_USE_EVPORTS;
1536#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001537#if defined(USE_LINUX_SPLICE)
Willy Tarreau3ab68cf2009-01-25 16:03:28 +01001538 global.tune.options |= GTUNE_USE_SPLICE;
1539#endif
Nenad Merdanovic88afe032014-04-14 15:56:58 +02001540#if defined(USE_GETADDRINFO)
1541 global.tune.options |= GTUNE_USE_GAI;
1542#endif
Lukas Tribusa0bcbdc2016-09-12 21:42:20 +00001543#if defined(SO_REUSEPORT)
1544 global.tune.options |= GTUNE_USE_REUSEPORT;
1545#endif
Willy Tarreau76cc6992020-07-01 18:49:24 +02001546#ifdef USE_THREAD
1547 global.tune.options |= GTUNE_IDLE_POOL_SHARED;
1548#endif
William Dauchya5194602020-03-28 19:29:58 +01001549 global.tune.options |= GTUNE_STRICT_LIMITS;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001550
1551 pid = getpid();
1552 progname = *argv;
1553 while ((tmp = strchr(progname, '/')) != NULL)
1554 progname = tmp + 1;
1555
Kevinm48936af2010-12-22 16:08:21 +00001556 /* the process name is used for the logs only */
Eric Salama7cea6062020-10-02 11:58:19 +02001557 chunk_initlen(&global.log_tag, strdup(progname), strlen(progname), strlen(progname));
1558 if (b_orig(&global.log_tag) == NULL) {
1559 chunk_destroy(&global.log_tag);
1560 ha_alert("Cannot allocate memory for log_tag.\n");
1561 exit(EXIT_FAILURE);
1562 }
Kevinm48936af2010-12-22 16:08:21 +00001563
Willy Tarreaubaaee002006-06-26 02:48:02 +02001564 argc--; argv++;
1565 while (argc > 0) {
1566 char *flag;
1567
1568 if (**argv == '-') {
1569 flag = *argv+1;
1570
1571 /* 1 arg */
1572 if (*flag == 'v') {
1573 display_version();
Willy Tarreau7b066db2007-12-02 11:28:59 +01001574 if (flag[1] == 'v') /* -vv */
1575 display_build_opts();
Willy Tarreaubaaee002006-06-26 02:48:02 +02001576 exit(0);
1577 }
Willy Tarreaue5733232019-05-22 19:24:06 +02001578#if defined(USE_EPOLL)
Willy Tarreaubaaee002006-06-26 02:48:02 +02001579 else if (*flag == 'd' && flag[1] == 'e')
Willy Tarreau43b78992009-01-25 15:42:27 +01001580 global.tune.options &= ~GTUNE_USE_EPOLL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001581#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001582#if defined(USE_POLL)
Willy Tarreaubaaee002006-06-26 02:48:02 +02001583 else if (*flag == 'd' && flag[1] == 'p')
Willy Tarreau43b78992009-01-25 15:42:27 +01001584 global.tune.options &= ~GTUNE_USE_POLL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001585#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001586#if defined(USE_KQUEUE)
Willy Tarreau1e63130a2007-04-09 12:03:06 +02001587 else if (*flag == 'd' && flag[1] == 'k')
Willy Tarreau43b78992009-01-25 15:42:27 +01001588 global.tune.options &= ~GTUNE_USE_KQUEUE;
Willy Tarreau1e63130a2007-04-09 12:03:06 +02001589#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001590#if defined(USE_EVPORTS)
Emmanuel Hocdet0ba4f482019-04-08 16:53:32 +00001591 else if (*flag == 'd' && flag[1] == 'v')
1592 global.tune.options &= ~GTUNE_USE_EVPORTS;
1593#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001594#if defined(USE_LINUX_SPLICE)
Willy Tarreau3ab68cf2009-01-25 16:03:28 +01001595 else if (*flag == 'd' && flag[1] == 'S')
1596 global.tune.options &= ~GTUNE_USE_SPLICE;
1597#endif
Nenad Merdanovic88afe032014-04-14 15:56:58 +02001598#if defined(USE_GETADDRINFO)
1599 else if (*flag == 'd' && flag[1] == 'G')
1600 global.tune.options &= ~GTUNE_USE_GAI;
1601#endif
Lukas Tribusa0bcbdc2016-09-12 21:42:20 +00001602#if defined(SO_REUSEPORT)
1603 else if (*flag == 'd' && flag[1] == 'R')
1604 global.tune.options &= ~GTUNE_USE_REUSEPORT;
1605#endif
Emeric Brun850efd52014-01-29 12:24:34 +01001606 else if (*flag == 'd' && flag[1] == 'V')
1607 global.ssl_server_verify = SSL_SERVER_VERIFY_NONE;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001608 else if (*flag == 'V')
1609 arg_mode |= MODE_VERBOSE;
1610 else if (*flag == 'd' && flag[1] == 'b')
1611 arg_mode |= MODE_FOREGROUND;
Amaury Denoyelle7b01a8d2021-03-29 10:29:07 +02001612 else if (*flag == 'd' && flag[1] == 'D')
1613 arg_mode |= MODE_DIAG;
Willy Tarreau3eb10b82020-04-15 16:42:39 +02001614 else if (*flag == 'd' && flag[1] == 'W')
1615 arg_mode |= MODE_ZERO_WARNING;
Willy Tarreau6e064432012-05-08 15:40:42 +02001616 else if (*flag == 'd' && flag[1] == 'M')
1617 mem_poison_byte = flag[2] ? strtol(flag + 2, NULL, 0) : 'P';
Willy Tarreau3eed10e2016-11-07 21:03:16 +01001618 else if (*flag == 'd' && flag[1] == 'r')
1619 global.tune.options |= GTUNE_RESOLVE_DONTFAIL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001620 else if (*flag == 'd')
1621 arg_mode |= MODE_DEBUG;
1622 else if (*flag == 'c')
1623 arg_mode |= MODE_CHECK;
William Lallemand095ba4c2017-06-01 17:38:50 +02001624 else if (*flag == 'D')
Willy Tarreau6bde87b2009-05-18 16:29:51 +02001625 arg_mode |= MODE_DAEMON;
Tim Duesterhusd6942c82017-11-20 15:58:35 +01001626 else if (*flag == 'W' && flag[1] == 's') {
Lukas Tribusf46bf952017-11-21 12:39:34 +01001627 arg_mode |= MODE_MWORKER | MODE_FOREGROUND;
Tim Duesterhusd6942c82017-11-20 15:58:35 +01001628#if defined(USE_SYSTEMD)
1629 global.tune.options |= GTUNE_USE_SYSTEMD;
1630#else
Christopher Faulet767a84b2017-11-24 16:50:31 +01001631 ha_alert("master-worker mode with systemd support (-Ws) requested, but not compiled. Use master-worker mode (-W) if you are not using Type=notify in your unit file or recompile with USE_SYSTEMD=1.\n\n");
Tim Duesterhusd6942c82017-11-20 15:58:35 +01001632 usage(progname);
1633#endif
1634 }
William Lallemand095ba4c2017-06-01 17:38:50 +02001635 else if (*flag == 'W')
1636 arg_mode |= MODE_MWORKER;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001637 else if (*flag == 'q')
1638 arg_mode |= MODE_QUIET;
Olivier Houchardf73629d2017-04-05 22:33:04 +02001639 else if (*flag == 'x') {
William Lallemand4f71d302020-06-04 23:41:29 +02001640 if (argc <= 1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001641 ha_alert("Unix socket path expected with the -x flag\n\n");
William Lallemand45eff442017-06-19 15:57:55 +02001642 usage(progname);
Olivier Houchardf73629d2017-04-05 22:33:04 +02001643 }
William Lallemand4fc09692017-06-19 16:37:19 +02001644 if (old_unixsocket)
Christopher Faulet767a84b2017-11-24 16:50:31 +01001645 ha_warning("-x option already set, overwriting the value\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001646 old_unixsocket = argv[1];
William Lallemand4fc09692017-06-19 16:37:19 +02001647
Olivier Houchardf73629d2017-04-05 22:33:04 +02001648 argv++;
1649 argc--;
1650 }
William Lallemande7361152018-10-26 14:47:36 +02001651 else if (*flag == 'S') {
1652 struct wordlist *c;
1653
William Lallemanda6b32492020-06-04 23:49:20 +02001654 if (argc <= 1) {
William Lallemande7361152018-10-26 14:47:36 +02001655 ha_alert("Socket and optional bind parameters expected with the -S flag\n");
1656 usage(progname);
1657 }
1658 if ((c = malloc(sizeof(*c))) == NULL || (c->s = strdup(argv[1])) == NULL) {
1659 ha_alert("Cannot allocate memory\n");
1660 exit(EXIT_FAILURE);
1661 }
Willy Tarreau2b718102021-04-21 07:32:39 +02001662 LIST_INSERT(&mworker_cli_conf, &c->list);
William Lallemande7361152018-10-26 14:47:36 +02001663
1664 argv++;
1665 argc--;
1666 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02001667 else if (*flag == 's' && (flag[1] == 'f' || flag[1] == 't')) {
1668 /* list of pids to finish ('f') or terminate ('t') */
1669
1670 if (flag[1] == 'f')
1671 oldpids_sig = SIGUSR1; /* finish then exit */
1672 else
1673 oldpids_sig = SIGTERM; /* terminate immediately */
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001674 while (argc > 1 && argv[1][0] != '-') {
Chris Lane236062f2018-02-05 23:15:44 +00001675 char * endptr = NULL;
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001676 oldpids = realloc(oldpids, (nb_oldpids + 1) * sizeof(int));
1677 if (!oldpids) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001678 ha_alert("Cannot allocate old pid : out of memory.\n");
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001679 exit(1);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001680 }
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001681 argc--; argv++;
Chris Lane236062f2018-02-05 23:15:44 +00001682 errno = 0;
1683 oldpids[nb_oldpids] = strtol(*argv, &endptr, 10);
1684 if (errno) {
1685 ha_alert("-%2s option: failed to parse {%s}: %s\n",
1686 flag,
1687 *argv, strerror(errno));
1688 exit(1);
1689 } else if (endptr && strlen(endptr)) {
Willy Tarreau90807112020-02-25 08:16:33 +01001690 while (isspace((unsigned char)*endptr)) endptr++;
Aurélien Nephtali39b89882018-02-17 20:53:11 +01001691 if (*endptr != 0) {
Chris Lane236062f2018-02-05 23:15:44 +00001692 ha_alert("-%2s option: some bytes unconsumed in PID list {%s}\n",
1693 flag, endptr);
1694 exit(1);
Aurélien Nephtali39b89882018-02-17 20:53:11 +01001695 }
Chris Lane236062f2018-02-05 23:15:44 +00001696 }
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001697 if (oldpids[nb_oldpids] <= 0)
1698 usage(progname);
1699 nb_oldpids++;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001700 }
1701 }
Willy Tarreaua088d312015-10-08 11:58:48 +02001702 else if (flag[0] == '-' && flag[1] == 0) { /* "--" */
1703 /* now that's a cfgfile list */
1704 argv++; argc--;
1705 while (argc > 0) {
Maxime de Roucy0f503922016-05-13 23:52:55 +02001706 if (!list_append_word(&cfg_cfgfiles, *argv, &err_msg)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001707 ha_alert("Cannot load configuration file/directory %s : %s\n",
1708 *argv,
1709 err_msg);
Willy Tarreaua088d312015-10-08 11:58:48 +02001710 exit(1);
1711 }
Willy Tarreaua088d312015-10-08 11:58:48 +02001712 argv++; argc--;
1713 }
1714 break;
1715 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02001716 else { /* >=2 args */
1717 argv++; argc--;
1718 if (argc == 0)
Willy Tarreau3bafcdc2011-09-10 19:20:23 +02001719 usage(progname);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001720
1721 switch (*flag) {
Willy Tarreau576132e2011-09-10 19:26:56 +02001722 case 'C' : change_dir = *argv; break;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001723 case 'n' : cfg_maxconn = atol(*argv); break;
Willy Tarreau70060452015-12-14 12:46:07 +01001724 case 'm' : global.rlimit_memmax_all = atol(*argv); break;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001725 case 'N' : cfg_maxpconn = atol(*argv); break;
William Lallemanddaf4cd22018-04-17 16:46:13 +02001726 case 'L' :
Dragan Dosen4f014152020-06-18 16:56:47 +02001727 free(localpeer);
1728 if ((localpeer = strdup(*argv)) == NULL) {
1729 ha_alert("Cannot allocate memory for local peer.\n");
1730 exit(EXIT_FAILURE);
1731 }
William Lallemanddaf4cd22018-04-17 16:46:13 +02001732 setenv("HAPROXY_LOCALPEER", localpeer, 1);
Dragan Dosen13cd54c2020-06-18 18:24:05 +02001733 global.localpeer_cmdline = 1;
William Lallemanddaf4cd22018-04-17 16:46:13 +02001734 break;
Willy Tarreau5d01a632009-06-22 16:02:30 +02001735 case 'f' :
Maxime de Roucy0f503922016-05-13 23:52:55 +02001736 if (!list_append_word(&cfg_cfgfiles, *argv, &err_msg)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001737 ha_alert("Cannot load configuration file/directory %s : %s\n",
1738 *argv,
1739 err_msg);
Willy Tarreau5d01a632009-06-22 16:02:30 +02001740 exit(1);
1741 }
Willy Tarreau5d01a632009-06-22 16:02:30 +02001742 break;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001743 case 'p' : cfg_pidfile = *argv; break;
Willy Tarreau3bafcdc2011-09-10 19:20:23 +02001744 default: usage(progname);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001745 }
1746 }
1747 }
1748 else
Willy Tarreau3bafcdc2011-09-10 19:20:23 +02001749 usage(progname);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001750 argv++; argc--;
1751 }
1752
Christopher Faulete3a5e352017-10-24 13:53:54 +02001753 global.mode |= (arg_mode & (MODE_DAEMON | MODE_MWORKER | MODE_FOREGROUND | MODE_VERBOSE
Amaury Denoyelle7b01a8d2021-03-29 10:29:07 +02001754 | MODE_QUIET | MODE_CHECK | MODE_DEBUG | MODE_ZERO_WARNING
1755 | MODE_DIAG));
Willy Tarreaubaaee002006-06-26 02:48:02 +02001756
William Lallemand944e6192018-11-21 15:48:31 +01001757 if (getenv("HAPROXY_MWORKER_WAIT_ONLY")) {
William Lallemandcb11fd22017-06-01 17:38:52 +02001758 unsetenv("HAPROXY_MWORKER_WAIT_ONLY");
William Lallemand944e6192018-11-21 15:48:31 +01001759 global.mode |= MODE_MWORKER_WAIT;
1760 global.mode &= ~MODE_MWORKER;
William Lallemandcb11fd22017-06-01 17:38:52 +02001761 }
1762
1763 if ((global.mode & MODE_MWORKER) && (getenv("HAPROXY_MWORKER_REEXEC") != NULL)) {
1764 atexit_flag = 1;
1765 atexit(reexec_on_failure);
1766 }
1767
Willy Tarreau576132e2011-09-10 19:26:56 +02001768 if (change_dir && chdir(change_dir) < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001769 ha_alert("Could not change to directory %s : %s\n", change_dir, strerror(errno));
Willy Tarreau576132e2011-09-10 19:26:56 +02001770 exit(1);
1771 }
1772
Willy Tarreaubaaee002006-06-26 02:48:02 +02001773 global.maxsock = 10; /* reserve 10 fds ; will be incremented by socket eaters */
Willy Tarreau915e1eb2009-06-22 15:48:36 +02001774
Amaury Denoyellea6f9c5d2021-04-23 16:58:08 +02001775#ifdef USE_CPU_AFFINITY
1776 {
1777 int i;
1778 for (i = 0; i < MAX_PROCS; ++i) {
Amaury Denoyellefc6ac532021-04-27 10:46:36 +02001779 ha_cpuset_zero(&cpu_map.proc[i]);
1780 ha_cpuset_zero(&cpu_map.proc_t1[i]);
Willy Tarreau26f42a02021-05-14 08:26:38 +02001781 }
1782 for (i = 0; i < MAX_THREADS; ++i) {
Amaury Denoyellefc6ac532021-04-27 10:46:36 +02001783 ha_cpuset_zero(&cpu_map.thread[i]);
Amaury Denoyellea6f9c5d2021-04-23 16:58:08 +02001784 }
Amaury Denoyelle982fb532021-04-21 18:39:58 +02001785 }
Amaury Denoyellea6f9c5d2021-04-23 16:58:08 +02001786#endif
Amaury Denoyelle982fb532021-04-21 18:39:58 +02001787
William Lallemand944e6192018-11-21 15:48:31 +01001788 /* in wait mode, we don't try to read the configuration files */
1789 if (!(global.mode & MODE_MWORKER_WAIT)) {
Christopher Faulet4e366822021-01-12 18:57:38 +01001790 char *env_cfgfiles = NULL;
1791 int env_err = 0;
Willy Tarreauc4382422009-12-06 13:10:44 +01001792
William Lallemand944e6192018-11-21 15:48:31 +01001793 /* handle cfgfiles that are actually directories */
1794 cfgfiles_expand_directories();
1795
1796 if (LIST_ISEMPTY(&cfg_cfgfiles))
1797 usage(progname);
1798
1799
1800 list_for_each_entry(wl, &cfg_cfgfiles, list) {
1801 int ret;
1802
Christopher Faulet4e366822021-01-12 18:57:38 +01001803 if (env_err == 0) {
1804 if (!memprintf(&env_cfgfiles, "%s%s%s",
1805 (env_cfgfiles ? env_cfgfiles : ""),
1806 (env_cfgfiles ? ";" : ""), wl->s))
1807 env_err = 1;
1808 }
William Lallemand7b302d82019-05-20 11:15:37 +02001809
William Lallemand944e6192018-11-21 15:48:31 +01001810 ret = readcfgfile(wl->s);
1811 if (ret == -1) {
1812 ha_alert("Could not open configuration file %s : %s\n",
1813 wl->s, strerror(errno));
Christopher Faulet4e366822021-01-12 18:57:38 +01001814 free(env_cfgfiles);
William Lallemand944e6192018-11-21 15:48:31 +01001815 exit(1);
1816 }
1817 if (ret & (ERR_ABORT|ERR_FATAL))
1818 ha_alert("Error(s) found in configuration file : %s\n", wl->s);
1819 err_code |= ret;
Christopher Faulet4e366822021-01-12 18:57:38 +01001820 if (err_code & ERR_ABORT) {
1821 free(env_cfgfiles);
William Lallemand944e6192018-11-21 15:48:31 +01001822 exit(1);
Christopher Faulet4e366822021-01-12 18:57:38 +01001823 }
Willy Tarreauc4382422009-12-06 13:10:44 +01001824 }
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02001825
William Lallemand944e6192018-11-21 15:48:31 +01001826 /* do not try to resolve arguments nor to spot inconsistencies when
1827 * the configuration contains fatal errors caused by files not found
1828 * or failed memory allocations.
1829 */
1830 if (err_code & (ERR_ABORT|ERR_FATAL)) {
1831 ha_alert("Fatal errors found in configuration.\n");
Christopher Faulet4e366822021-01-12 18:57:38 +01001832 free(env_cfgfiles);
William Lallemand944e6192018-11-21 15:48:31 +01001833 exit(1);
1834 }
Christopher Faulet4e366822021-01-12 18:57:38 +01001835 if (env_err) {
1836 ha_alert("Could not allocate memory for HAPROXY_CFGFILES env variable\n");
1837 exit(1);
1838 }
1839 setenv("HAPROXY_CFGFILES", env_cfgfiles, 1);
1840 free(env_cfgfiles);
William Lallemand7b302d82019-05-20 11:15:37 +02001841
Willy Tarreaub83dc3d2017-04-19 11:24:07 +02001842 }
William Lallemandce83b4a2018-10-26 14:47:30 +02001843 if (global.mode & MODE_MWORKER) {
1844 int proc;
William Lallemand16dd1b32018-11-19 18:46:18 +01001845 struct mworker_proc *tmproc;
1846
William Lallemand482f9a92019-04-12 16:15:00 +02001847 setenv("HAPROXY_MWORKER", "1", 1);
1848
William Lallemand16dd1b32018-11-19 18:46:18 +01001849 if (getenv("HAPROXY_MWORKER_REEXEC") == NULL) {
1850
William Lallemandf3a86832019-04-01 11:29:58 +02001851 tmproc = calloc(1, sizeof(*tmproc));
William Lallemand16dd1b32018-11-19 18:46:18 +01001852 if (!tmproc) {
1853 ha_alert("Cannot allocate process structures.\n");
1854 exit(EXIT_FAILURE);
1855 }
William Lallemand8f7069a2019-04-12 16:09:23 +02001856 tmproc->options |= PROC_O_TYPE_MASTER; /* master */
William Lallemand16dd1b32018-11-19 18:46:18 +01001857 tmproc->reloads = 0;
1858 tmproc->relative_pid = 0;
1859 tmproc->pid = pid;
1860 tmproc->timestamp = start_date.tv_sec;
1861 tmproc->ipc_fd[0] = -1;
1862 tmproc->ipc_fd[1] = -1;
1863
1864 proc_self = tmproc;
1865
Willy Tarreau2b718102021-04-21 07:32:39 +02001866 LIST_APPEND(&proc_list, &tmproc->list);
William Lallemand16dd1b32018-11-19 18:46:18 +01001867 }
William Lallemandce83b4a2018-10-26 14:47:30 +02001868
1869 for (proc = 0; proc < global.nbproc; proc++) {
William Lallemandce83b4a2018-10-26 14:47:30 +02001870
William Lallemandf3a86832019-04-01 11:29:58 +02001871 tmproc = calloc(1, sizeof(*tmproc));
William Lallemandce83b4a2018-10-26 14:47:30 +02001872 if (!tmproc) {
1873 ha_alert("Cannot allocate process structures.\n");
1874 exit(EXIT_FAILURE);
1875 }
1876
William Lallemand8f7069a2019-04-12 16:09:23 +02001877 tmproc->options |= PROC_O_TYPE_WORKER; /* worker */
William Lallemandce83b4a2018-10-26 14:47:30 +02001878 tmproc->pid = -1;
1879 tmproc->reloads = 0;
William Lallemande3683302018-11-19 18:46:17 +01001880 tmproc->timestamp = -1;
William Lallemandce83b4a2018-10-26 14:47:30 +02001881 tmproc->relative_pid = 1 + proc;
William Lallemand550db6d2018-11-06 17:37:12 +01001882 tmproc->ipc_fd[0] = -1;
1883 tmproc->ipc_fd[1] = -1;
William Lallemandce83b4a2018-10-26 14:47:30 +02001884
1885 if (mworker_cli_sockpair_new(tmproc, proc) < 0) {
1886 exit(EXIT_FAILURE);
1887 }
1888
Willy Tarreau2b718102021-04-21 07:32:39 +02001889 LIST_APPEND(&proc_list, &tmproc->list);
William Lallemandce83b4a2018-10-26 14:47:30 +02001890 }
William Lallemand944e6192018-11-21 15:48:31 +01001891 }
1892 if (global.mode & (MODE_MWORKER|MODE_MWORKER_WAIT)) {
1893 struct wordlist *it, *c;
1894
Remi Tricot-Le Bretond90aa342021-05-19 10:45:12 +02001895 /* get the info of the children in the env */
1896 if (mworker_env_to_proc_list() < 0) {
1897 exit(EXIT_FAILURE);
1898 }
William Lallemande7361152018-10-26 14:47:36 +02001899
William Lallemand550db6d2018-11-06 17:37:12 +01001900 if (!LIST_ISEMPTY(&mworker_cli_conf)) {
William Lallemande7361152018-10-26 14:47:36 +02001901
William Lallemand550db6d2018-11-06 17:37:12 +01001902 if (mworker_cli_proxy_create() < 0) {
William Lallemande7361152018-10-26 14:47:36 +02001903 ha_alert("Can't create the master's CLI.\n");
1904 exit(EXIT_FAILURE);
1905 }
William Lallemande7361152018-10-26 14:47:36 +02001906
William Lallemand550db6d2018-11-06 17:37:12 +01001907 list_for_each_entry_safe(c, it, &mworker_cli_conf, list) {
1908
1909 if (mworker_cli_proxy_new_listener(c->s) < 0) {
1910 ha_alert("Can't create the master's CLI.\n");
1911 exit(EXIT_FAILURE);
1912 }
Willy Tarreau2b718102021-04-21 07:32:39 +02001913 LIST_DELETE(&c->list);
William Lallemand550db6d2018-11-06 17:37:12 +01001914 free(c->s);
1915 free(c);
1916 }
1917 }
William Lallemandce83b4a2018-10-26 14:47:30 +02001918 }
1919
Eric Salama5ba83352021-03-16 15:11:17 +01001920 if (!LIST_ISEMPTY(&mworker_cli_conf) && !(arg_mode & MODE_MWORKER)) {
1921 ha_warning("a master CLI socket was defined, but master-worker mode (-W) is not enabled.\n");
1922 }
1923
Willy Tarreauf42d7942020-10-20 11:54:49 +02001924 if (global.nbproc > 1 && !global.nbthread) {
1925 ha_warning("nbproc is deprecated!\n"
1926 " | For suffering many limitations, the 'nbproc' directive is now deprecated\n"
1927 " | and scheduled for removal in 2.5. Just comment it out: haproxy will use\n"
1928 " | threads and will run on all allocated processors. You may also switch to\n"
1929 " | 'nbthread %d' to keep the same number of processors. If you absolutely\n"
1930 " | want to run in multi-process mode, you can silence this warning by adding\n"
1931 " | 'nbthread 1', but then please report your use case to developers.\n",
1932 global.nbproc);
1933 }
1934
Willy Tarreaue90904d2021-02-12 14:08:31 +01001935 /* defaults sections are not needed anymore */
1936 proxy_destroy_all_defaults();
1937
Willy Tarreaubb925012009-07-23 13:36:36 +02001938 err_code |= check_config_validity();
Christopher Fauletc1692962019-08-12 09:51:07 +02001939 for (px = proxies_list; px; px = px->next) {
1940 struct server *srv;
1941 struct post_proxy_check_fct *ppcf;
1942 struct post_server_check_fct *pscf;
1943
Christopher Fauletd5bd8242020-11-02 16:20:13 +01001944 if (px->disabled)
1945 continue;
1946
Christopher Fauletc1692962019-08-12 09:51:07 +02001947 list_for_each_entry(pscf, &post_server_check_list, list) {
1948 for (srv = px->srv; srv; srv = srv->next)
1949 err_code |= pscf->fct(srv);
1950 }
1951 list_for_each_entry(ppcf, &post_proxy_check_list, list)
1952 err_code |= ppcf->fct(px);
1953 }
Willy Tarreaubb925012009-07-23 13:36:36 +02001954 if (err_code & (ERR_ABORT|ERR_FATAL)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001955 ha_alert("Fatal errors found in configuration.\n");
Willy Tarreau915e1eb2009-06-22 15:48:36 +02001956 exit(1);
1957 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02001958
Carl Henrik Lundef91ac192020-02-27 16:45:50 +01001959 err_code |= pattern_finalize_config();
1960 if (err_code & (ERR_ABORT|ERR_FATAL)) {
1961 ha_alert("Failed to finalize pattern config.\n");
1962 exit(1);
1963 }
Willy Tarreau0f936722019-04-11 14:47:08 +02001964
Willy Tarreau70060452015-12-14 12:46:07 +01001965 /* recompute the amount of per-process memory depending on nbproc and
1966 * the shared SSL cache size (allowed to exist in all processes).
1967 */
1968 if (global.rlimit_memmax_all) {
1969#if defined (USE_OPENSSL) && !defined(USE_PRIVATE_CACHE)
1970 int64_t ssl_cache_bytes = global.tune.sslcachesize * 200LL;
1971
1972 global.rlimit_memmax =
1973 ((((int64_t)global.rlimit_memmax_all * 1048576LL) -
1974 ssl_cache_bytes) / global.nbproc +
1975 ssl_cache_bytes + 1048575LL) / 1048576LL;
1976#else
1977 global.rlimit_memmax = global.rlimit_memmax_all / global.nbproc;
1978#endif
1979 }
1980
Willy Tarreaue5733232019-05-22 19:24:06 +02001981#ifdef USE_NS
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +01001982 err_code |= netns_init();
1983 if (err_code & (ERR_ABORT|ERR_FATAL)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001984 ha_alert("Failed to initialize namespace support.\n");
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +01001985 exit(1);
1986 }
1987#endif
1988
Baptiste Assmann4215d7d2016-11-02 15:33:15 +01001989 /* Apply server states */
1990 apply_server_state();
1991
Olivier Houchardfbc74e82017-11-24 16:54:05 +01001992 for (px = proxies_list; px; px = px->next)
Baptiste Assmann4215d7d2016-11-02 15:33:15 +01001993 srv_compute_all_admin_states(px);
1994
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01001995 /* Apply servers' configured address */
1996 err_code |= srv_init_addr();
1997 if (err_code & (ERR_ABORT|ERR_FATAL)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001998 ha_alert("Failed to initialize server(s) addr.\n");
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01001999 exit(1);
2000 }
2001
Willy Tarreau3eb10b82020-04-15 16:42:39 +02002002 if (warned & WARN_ANY && global.mode & MODE_ZERO_WARNING) {
2003 ha_alert("Some warnings were found and 'zero-warning' is set. Aborting.\n");
2004 exit(1);
2005 }
2006
Willy Tarreaubaaee002006-06-26 02:48:02 +02002007 if (global.mode & MODE_CHECK) {
Willy Tarreau8b15ba12012-02-02 17:48:18 +01002008 struct peers *pr;
2009 struct proxy *px;
2010
Willy Tarreaubebd2122020-04-15 16:06:11 +02002011 if (warned & WARN_ANY)
2012 qfprintf(stdout, "Warnings were found.\n");
2013
Frédéric Lécailleed2b4a62017-07-13 09:07:09 +02002014 for (pr = cfg_peers; pr; pr = pr->next)
Willy Tarreau8b15ba12012-02-02 17:48:18 +01002015 if (pr->peers_fe)
2016 break;
2017
Olivier Houchardfbc74e82017-11-24 16:54:05 +01002018 for (px = proxies_list; px; px = px->next)
Willy Tarreauc3914d42020-09-24 08:39:22 +02002019 if (!px->disabled && px->li_all)
Willy Tarreau8b15ba12012-02-02 17:48:18 +01002020 break;
2021
2022 if (pr || px) {
2023 /* At least one peer or one listener has been found */
2024 qfprintf(stdout, "Configuration file is valid\n");
Tim Duesterhus0a3b43d2020-06-14 00:37:42 +02002025 deinit_and_exit(0);
Willy Tarreau8b15ba12012-02-02 17:48:18 +01002026 }
2027 qfprintf(stdout, "Configuration file has no error but will not start (no listener) => exit(2).\n");
2028 exit(2);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002029 }
Willy Tarreaue9b26022011-08-01 20:57:55 +02002030
Amaury Denoyelle5a6926d2021-03-30 17:34:24 +02002031 if (global.mode & MODE_DIAG) {
2032 cfg_run_diagnostics();
2033 }
2034
Willy Tarreau8263d2b2012-08-28 00:06:31 +02002035 /* now we know the buffer size, we can initialize the channels and buffers */
Willy Tarreau9b28e032012-10-12 23:49:43 +02002036 init_buffer();
Willy Tarreau8280d642009-09-23 23:37:52 +02002037
Willy Tarreaue6945732016-12-21 19:57:00 +01002038 list_for_each_entry(pcf, &post_check_list, list) {
2039 err_code |= pcf->fct();
2040 if (err_code & (ERR_ABORT|ERR_FATAL))
2041 exit(1);
2042 }
2043
Willy Tarreaubaaee002006-06-26 02:48:02 +02002044 if (cfg_maxconn > 0)
2045 global.maxconn = cfg_maxconn;
2046
Willy Tarreau4975d142021-03-13 11:00:33 +01002047 if (global.cli_fe)
2048 global.maxsock += global.cli_fe->maxconn;
Willy Tarreau8d687d82019-03-01 09:39:42 +01002049
2050 if (cfg_peers) {
2051 /* peers also need to bypass global maxconn */
2052 struct peers *p = cfg_peers;
2053
2054 for (p = cfg_peers; p; p = p->next)
2055 if (p->peers_fe)
2056 global.maxsock += p->peers_fe->maxconn;
2057 }
2058
Willy Tarreaubaaee002006-06-26 02:48:02 +02002059 if (cfg_pidfile) {
Willy Tarreaua534fea2008-08-03 12:19:50 +02002060 free(global.pidfile);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002061 global.pidfile = strdup(cfg_pidfile);
2062 }
2063
Willy Tarreaud0256482015-01-15 21:45:22 +01002064 /* Now we want to compute the maxconn and possibly maxsslconn values.
Willy Tarreauac350932019-03-01 15:43:14 +01002065 * It's a bit tricky. Maxconn defaults to the pre-computed value based
2066 * on rlim_fd_cur and the number of FDs in use due to the configuration,
2067 * and maxsslconn defaults to DEFAULT_MAXSSLCONN. On top of that we can
2068 * enforce a lower limit based on memmax.
Willy Tarreaud0256482015-01-15 21:45:22 +01002069 *
2070 * If memmax is set, then it depends on which values are set. If
2071 * maxsslconn is set, we use memmax to determine how many cleartext
2072 * connections may be added, and set maxconn to the sum of the two.
2073 * If maxconn is set and not maxsslconn, maxsslconn is computed from
2074 * the remaining amount of memory between memmax and the cleartext
2075 * connections. If neither are set, then it is considered that all
2076 * connections are SSL-capable, and maxconn is computed based on this,
2077 * then maxsslconn accordingly. We need to know if SSL is used on the
2078 * frontends, backends, or both, because when it's used on both sides,
2079 * we need twice the value for maxsslconn, but we only count the
2080 * handshake once since it is not performed on the two sides at the
2081 * same time (frontend-side is terminated before backend-side begins).
2082 * The SSL stack is supposed to have filled ssl_session_cost and
Willy Tarreau474b96a2015-01-28 19:03:21 +01002083 * ssl_handshake_cost during its initialization. In any case, if
2084 * SYSTEM_MAXCONN is set, we still enforce it as an upper limit for
2085 * maxconn in order to protect the system.
Willy Tarreaud0256482015-01-15 21:45:22 +01002086 */
Willy Tarreauac350932019-03-01 15:43:14 +01002087 ideal_maxconn = compute_ideal_maxconn();
2088
Willy Tarreaud0256482015-01-15 21:45:22 +01002089 if (!global.rlimit_memmax) {
2090 if (global.maxconn == 0) {
Willy Tarreauac350932019-03-01 15:43:14 +01002091 global.maxconn = ideal_maxconn;
Willy Tarreaud0256482015-01-15 21:45:22 +01002092 if (global.mode & (MODE_VERBOSE|MODE_DEBUG))
2093 fprintf(stderr, "Note: setting global.maxconn to %d.\n", global.maxconn);
2094 }
2095 }
2096#ifdef USE_OPENSSL
2097 else if (!global.maxconn && !global.maxsslconn &&
2098 (global.ssl_used_frontend || global.ssl_used_backend)) {
2099 /* memmax is set, compute everything automatically. Here we want
2100 * to ensure that all SSL connections will be served. We take
2101 * care of the number of sides where SSL is used, and consider
2102 * the worst case : SSL used on both sides and doing a handshake
2103 * simultaneously. Note that we can't have more than maxconn
2104 * handshakes at a time by definition, so for the worst case of
2105 * two SSL conns per connection, we count a single handshake.
2106 */
2107 int sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
2108 int64_t mem = global.rlimit_memmax * 1048576ULL;
Willy Tarreau304e17e2020-03-10 17:54:54 +01002109 int retried = 0;
Willy Tarreaud0256482015-01-15 21:45:22 +01002110
2111 mem -= global.tune.sslcachesize * 200; // about 200 bytes per SSL cache entry
2112 mem -= global.maxzlibmem;
2113 mem = mem * MEM_USABLE_RATIO;
2114
Willy Tarreau304e17e2020-03-10 17:54:54 +01002115 /* Principle: we test once to set maxconn according to the free
2116 * memory. If it results in values the system rejects, we try a
2117 * second time by respecting rlim_fd_max. If it fails again, we
2118 * go back to the initial value and will let the final code
2119 * dealing with rlimit report the error. That's up to 3 attempts.
2120 */
2121 do {
2122 global.maxconn = mem /
2123 ((STREAM_MAX_COST + 2 * global.tune.bufsize) + // stream + 2 buffers per stream
2124 sides * global.ssl_session_max_cost + // SSL buffers, one per side
2125 global.ssl_handshake_max_cost); // 1 handshake per connection max
Willy Tarreaud0256482015-01-15 21:45:22 +01002126
Willy Tarreau304e17e2020-03-10 17:54:54 +01002127 if (retried == 1)
2128 global.maxconn = MIN(global.maxconn, ideal_maxconn);
2129 global.maxconn = round_2dig(global.maxconn);
Willy Tarreau474b96a2015-01-28 19:03:21 +01002130#ifdef SYSTEM_MAXCONN
Willy Tarreau304e17e2020-03-10 17:54:54 +01002131 if (global.maxconn > SYSTEM_MAXCONN)
2132 global.maxconn = SYSTEM_MAXCONN;
Willy Tarreau474b96a2015-01-28 19:03:21 +01002133#endif /* SYSTEM_MAXCONN */
Willy Tarreau304e17e2020-03-10 17:54:54 +01002134 global.maxsslconn = sides * global.maxconn;
2135
2136 if (check_if_maxsock_permitted(compute_ideal_maxsock(global.maxconn)))
2137 break;
2138 } while (retried++ < 2);
2139
Willy Tarreaud0256482015-01-15 21:45:22 +01002140 if (global.mode & (MODE_VERBOSE|MODE_DEBUG))
2141 fprintf(stderr, "Note: setting global.maxconn to %d and global.maxsslconn to %d.\n",
2142 global.maxconn, global.maxsslconn);
2143 }
2144 else if (!global.maxsslconn &&
2145 (global.ssl_used_frontend || global.ssl_used_backend)) {
2146 /* memmax and maxconn are known, compute maxsslconn automatically.
2147 * maxsslconn being forced, we don't know how many of it will be
2148 * on each side if both sides are being used. The worst case is
2149 * when all connections use only one SSL instance because
2150 * handshakes may be on two sides at the same time.
2151 */
2152 int sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
2153 int64_t mem = global.rlimit_memmax * 1048576ULL;
2154 int64_t sslmem;
2155
2156 mem -= global.tune.sslcachesize * 200; // about 200 bytes per SSL cache entry
2157 mem -= global.maxzlibmem;
2158 mem = mem * MEM_USABLE_RATIO;
2159
Willy Tarreau87b09662015-04-03 00:22:06 +02002160 sslmem = mem - global.maxconn * (int64_t)(STREAM_MAX_COST + 2 * global.tune.bufsize);
Willy Tarreaud0256482015-01-15 21:45:22 +01002161 global.maxsslconn = sslmem / (global.ssl_session_max_cost + global.ssl_handshake_max_cost);
2162 global.maxsslconn = round_2dig(global.maxsslconn);
2163
2164 if (sslmem <= 0 || global.maxsslconn < sides) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002165 ha_alert("Cannot compute the automatic maxsslconn because global.maxconn is already too "
2166 "high for the global.memmax value (%d MB). The absolute maximum possible value "
2167 "without SSL is %d, but %d was found and SSL is in use.\n",
2168 global.rlimit_memmax,
2169 (int)(mem / (STREAM_MAX_COST + 2 * global.tune.bufsize)),
2170 global.maxconn);
Willy Tarreaud0256482015-01-15 21:45:22 +01002171 exit(1);
2172 }
2173
2174 if (global.maxsslconn > sides * global.maxconn)
2175 global.maxsslconn = sides * global.maxconn;
2176
2177 if (global.mode & (MODE_VERBOSE|MODE_DEBUG))
2178 fprintf(stderr, "Note: setting global.maxsslconn to %d\n", global.maxsslconn);
2179 }
2180#endif
2181 else if (!global.maxconn) {
2182 /* memmax and maxsslconn are known/unused, compute maxconn automatically */
2183 int sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
2184 int64_t mem = global.rlimit_memmax * 1048576ULL;
2185 int64_t clearmem;
Willy Tarreau304e17e2020-03-10 17:54:54 +01002186 int retried = 0;
Willy Tarreaud0256482015-01-15 21:45:22 +01002187
2188 if (global.ssl_used_frontend || global.ssl_used_backend)
2189 mem -= global.tune.sslcachesize * 200; // about 200 bytes per SSL cache entry
2190
2191 mem -= global.maxzlibmem;
2192 mem = mem * MEM_USABLE_RATIO;
2193
2194 clearmem = mem;
2195 if (sides)
2196 clearmem -= (global.ssl_session_max_cost + global.ssl_handshake_max_cost) * (int64_t)global.maxsslconn;
2197
Willy Tarreau304e17e2020-03-10 17:54:54 +01002198 /* Principle: we test once to set maxconn according to the free
2199 * memory. If it results in values the system rejects, we try a
2200 * second time by respecting rlim_fd_max. If it fails again, we
2201 * go back to the initial value and will let the final code
2202 * dealing with rlimit report the error. That's up to 3 attempts.
2203 */
2204 do {
2205 global.maxconn = clearmem / (STREAM_MAX_COST + 2 * global.tune.bufsize);
2206 if (retried == 1)
2207 global.maxconn = MIN(global.maxconn, ideal_maxconn);
2208 global.maxconn = round_2dig(global.maxconn);
Willy Tarreau474b96a2015-01-28 19:03:21 +01002209#ifdef SYSTEM_MAXCONN
Willy Tarreau304e17e2020-03-10 17:54:54 +01002210 if (global.maxconn > SYSTEM_MAXCONN)
2211 global.maxconn = SYSTEM_MAXCONN;
Willy Tarreau474b96a2015-01-28 19:03:21 +01002212#endif /* SYSTEM_MAXCONN */
Willy Tarreaud0256482015-01-15 21:45:22 +01002213
Willy Tarreau304e17e2020-03-10 17:54:54 +01002214 if (clearmem <= 0 || !global.maxconn) {
2215 ha_alert("Cannot compute the automatic maxconn because global.maxsslconn is already too "
2216 "high for the global.memmax value (%d MB). The absolute maximum possible value "
2217 "is %d, but %d was found.\n",
2218 global.rlimit_memmax,
Christopher Faulet767a84b2017-11-24 16:50:31 +01002219 (int)(mem / (global.ssl_session_max_cost + global.ssl_handshake_max_cost)),
Willy Tarreau304e17e2020-03-10 17:54:54 +01002220 global.maxsslconn);
2221 exit(1);
2222 }
2223
2224 if (check_if_maxsock_permitted(compute_ideal_maxsock(global.maxconn)))
2225 break;
2226 } while (retried++ < 2);
Willy Tarreaud0256482015-01-15 21:45:22 +01002227
2228 if (global.mode & (MODE_VERBOSE|MODE_DEBUG)) {
2229 if (sides && global.maxsslconn > sides * global.maxconn) {
2230 fprintf(stderr, "Note: global.maxsslconn is forced to %d which causes global.maxconn "
2231 "to be limited to %d. Better reduce global.maxsslconn to get more "
2232 "room for extra connections.\n", global.maxsslconn, global.maxconn);
2233 }
2234 fprintf(stderr, "Note: setting global.maxconn to %d\n", global.maxconn);
2235 }
Willy Tarreau66aa61f2009-01-18 21:44:07 +01002236 }
2237
Willy Tarreaua409f302020-03-10 17:08:53 +01002238 global.maxsock = compute_ideal_maxsock(global.maxconn);
2239 global.hardmaxconn = global.maxconn;
Willy Tarreaua4818db2020-06-19 16:20:59 +02002240 if (!global.maxpipes)
2241 global.maxpipes = compute_ideal_maxpipes();
Willy Tarreaubaaee002006-06-26 02:48:02 +02002242
Olivier Houchard88698d92019-04-16 19:07:22 +02002243 /* update connection pool thresholds */
2244 global.tune.pool_low_count = ((long long)global.maxsock * global.tune.pool_low_ratio + 99) / 100;
2245 global.tune.pool_high_count = ((long long)global.maxsock * global.tune.pool_high_ratio + 99) / 100;
2246
Willy Tarreauc8d5b952019-02-27 17:25:52 +01002247 proxy_adjust_all_maxconn();
2248
Willy Tarreau1db37712007-06-03 17:16:49 +02002249 if (global.tune.maxpollevents <= 0)
2250 global.tune.maxpollevents = MAX_POLL_EVENTS;
2251
Willy Tarreau060a7612021-03-10 11:06:26 +01002252 if (global.tune.runqueue_depth <= 0) {
2253 /* tests on various thread counts from 1 to 64 have shown an
2254 * optimal queue depth following roughly 1/sqrt(threads).
2255 */
2256 int s = my_flsl(global.nbthread);
2257 s += (global.nbthread / s); // roughly twice the sqrt.
2258 global.tune.runqueue_depth = RUNQUEUE_DEPTH * 2 / s;
2259 }
Olivier Houchard1599b802018-05-24 18:59:04 +02002260
Willy Tarreau6f4a82c2009-03-21 20:43:57 +01002261 if (global.tune.recv_enough == 0)
2262 global.tune.recv_enough = MIN_RECV_AT_ONCE_ENOUGH;
2263
Willy Tarreau27a674e2009-08-17 07:23:33 +02002264 if (global.tune.maxrewrite >= global.tune.bufsize / 2)
2265 global.tune.maxrewrite = global.tune.bufsize / 2;
2266
Willy Tarreaubaaee002006-06-26 02:48:02 +02002267 if (arg_mode & (MODE_DEBUG | MODE_FOREGROUND)) {
2268 /* command line debug mode inhibits configuration mode */
William Lallemand095ba4c2017-06-01 17:38:50 +02002269 global.mode &= ~(MODE_DAEMON | MODE_QUIET);
Willy Tarreau772f0dd2012-10-26 16:04:28 +02002270 global.mode |= (arg_mode & (MODE_DEBUG | MODE_FOREGROUND));
2271 }
2272
William Lallemand095ba4c2017-06-01 17:38:50 +02002273 if (arg_mode & MODE_DAEMON) {
Willy Tarreau772f0dd2012-10-26 16:04:28 +02002274 /* command line daemon mode inhibits foreground and debug modes mode */
2275 global.mode &= ~(MODE_DEBUG | MODE_FOREGROUND);
William Lallemand095ba4c2017-06-01 17:38:50 +02002276 global.mode |= arg_mode & MODE_DAEMON;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002277 }
Willy Tarreau772f0dd2012-10-26 16:04:28 +02002278
2279 global.mode |= (arg_mode & (MODE_QUIET | MODE_VERBOSE));
Willy Tarreaubaaee002006-06-26 02:48:02 +02002280
William Lallemand095ba4c2017-06-01 17:38:50 +02002281 if ((global.mode & MODE_DEBUG) && (global.mode & (MODE_DAEMON | MODE_QUIET))) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002282 ha_warning("<debug> mode incompatible with <quiet> and <daemon>. Keeping <debug> only.\n");
William Lallemand095ba4c2017-06-01 17:38:50 +02002283 global.mode &= ~(MODE_DAEMON | MODE_QUIET);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002284 }
2285
William Lallemand095ba4c2017-06-01 17:38:50 +02002286 if ((global.nbproc > 1) && !(global.mode & (MODE_DAEMON | MODE_MWORKER))) {
Willy Tarreaubaaee002006-06-26 02:48:02 +02002287 if (!(global.mode & (MODE_FOREGROUND | MODE_DEBUG)))
Christopher Faulet767a84b2017-11-24 16:50:31 +01002288 ha_warning("<nbproc> is only meaningful in daemon mode or master-worker mode. Setting limit to 1 process.\n");
Willy Tarreaubaaee002006-06-26 02:48:02 +02002289 global.nbproc = 1;
2290 }
2291
2292 if (global.nbproc < 1)
2293 global.nbproc = 1;
2294
Christopher Fauletbe0faa22017-08-29 15:37:10 +02002295 if (global.nbthread < 1)
2296 global.nbthread = 1;
2297
Christopher Faulet3ef26392017-08-29 16:46:57 +02002298 /* Realloc trash buffers because global.tune.bufsize may have changed */
Christopher Fauletcd7879a2017-10-27 13:53:47 +02002299 if (!init_trash_buffers(0)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002300 ha_alert("failed to initialize trash buffers.\n");
Christopher Faulet3ef26392017-08-29 16:46:57 +02002301 exit(1);
2302 }
2303
Christopher Faulet96d44832017-11-14 22:02:30 +01002304 if (!init_log_buffers()) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002305 ha_alert("failed to initialize log buffers.\n");
Christopher Faulet96d44832017-11-14 22:02:30 +01002306 exit(1);
2307 }
2308
Willy Tarreauef1d1f82007-04-16 00:25:25 +02002309 /*
2310 * Note: we could register external pollers here.
2311 * Built-in pollers have been registered before main().
2312 */
Willy Tarreau4f60f162007-04-08 16:39:58 +02002313
Willy Tarreau43b78992009-01-25 15:42:27 +01002314 if (!(global.tune.options & GTUNE_USE_KQUEUE))
Willy Tarreau1e63130a2007-04-09 12:03:06 +02002315 disable_poller("kqueue");
2316
Emmanuel Hocdet0ba4f482019-04-08 16:53:32 +00002317 if (!(global.tune.options & GTUNE_USE_EVPORTS))
2318 disable_poller("evports");
2319
Willy Tarreau43b78992009-01-25 15:42:27 +01002320 if (!(global.tune.options & GTUNE_USE_EPOLL))
Willy Tarreau4f60f162007-04-08 16:39:58 +02002321 disable_poller("epoll");
2322
Willy Tarreau43b78992009-01-25 15:42:27 +01002323 if (!(global.tune.options & GTUNE_USE_POLL))
Willy Tarreau4f60f162007-04-08 16:39:58 +02002324 disable_poller("poll");
2325
Willy Tarreau43b78992009-01-25 15:42:27 +01002326 if (!(global.tune.options & GTUNE_USE_SELECT))
Willy Tarreau4f60f162007-04-08 16:39:58 +02002327 disable_poller("select");
2328
2329 /* Note: we could disable any poller by name here */
2330
Christopher Fauletb3f4e142016-03-07 12:46:38 +01002331 if (global.mode & (MODE_VERBOSE|MODE_DEBUG)) {
Willy Tarreau2ff76222007-04-09 19:29:56 +02002332 list_pollers(stderr);
Christopher Fauletb3f4e142016-03-07 12:46:38 +01002333 fprintf(stderr, "\n");
2334 list_filters(stderr);
2335 }
Willy Tarreau2ff76222007-04-09 19:29:56 +02002336
Willy Tarreau4f60f162007-04-08 16:39:58 +02002337 if (!init_pollers()) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002338 ha_alert("No polling mechanism available.\n"
2339 " It is likely that haproxy was built with TARGET=generic and that FD_SETSIZE\n"
2340 " is too low on this platform to support maxconn and the number of listeners\n"
2341 " and servers. You should rebuild haproxy specifying your system using TARGET=\n"
2342 " in order to support other polling systems (poll, epoll, kqueue) or reduce the\n"
2343 " global maxconn setting to accommodate the system's limitation. For reference,\n"
2344 " FD_SETSIZE=%d on this system, global.maxconn=%d resulting in a maximum of\n"
2345 " %d file descriptors. You should thus reduce global.maxconn by %d. Also,\n"
2346 " check build settings using 'haproxy -vv'.\n\n",
2347 FD_SETSIZE, global.maxconn, global.maxsock, (global.maxsock + 1 - FD_SETSIZE) / 2);
Willy Tarreau4f60f162007-04-08 16:39:58 +02002348 exit(1);
2349 }
Willy Tarreau2ff76222007-04-09 19:29:56 +02002350 if (global.mode & (MODE_VERBOSE|MODE_DEBUG)) {
2351 printf("Using %s() as the polling mechanism.\n", cur_poller.name);
Willy Tarreau4f60f162007-04-08 16:39:58 +02002352 }
2353
Krzysztof Piotr Oledzki48cb2ae2009-10-02 22:51:14 +02002354 if (!global.node)
2355 global.node = strdup(hostname);
2356
Willy Tarreau02b092f2020-10-07 18:36:54 +02002357 /* stop disabled proxies */
2358 for (px = proxies_list; px; px = px->next) {
Willy Tarreauc3914d42020-09-24 08:39:22 +02002359 if (px->disabled)
Willy Tarreau02b092f2020-10-07 18:36:54 +02002360 stop_proxy(px);
2361 }
2362
Thierry FOURNIERa4a0f3d2015-01-23 12:08:30 +01002363 if (!hlua_post_init())
2364 exit(1);
Thomas Holmes6abded42015-05-12 16:23:58 +01002365
Maxime de Roucy0f503922016-05-13 23:52:55 +02002366 free(err_msg);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002367}
2368
Cyril Bonté203ec5a2017-03-23 22:44:13 +01002369void deinit(void)
Willy Tarreaubaaee002006-06-26 02:48:02 +02002370{
Olivier Houchardfbc74e82017-11-24 16:54:05 +01002371 struct proxy *p = proxies_list, *p0;
Willy Tarreaudeb9ed82010-01-03 21:03:22 +01002372 struct wordlist *wl, *wlb;
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002373 struct uri_auth *uap, *ua = NULL;
William Lallemand0f99e342011-10-12 17:50:54 +02002374 struct logsrv *log, *logb;
Willy Tarreaucdb737e2016-12-21 18:43:10 +01002375 struct build_opts_str *bol, *bolb;
Tim Duesterhusfdf904a2020-07-04 11:49:48 +02002376 struct post_deinit_fct *pdf, *pdfb;
Tim Duesterhus17e363f2020-07-04 11:49:47 +02002377 struct proxy_deinit_fct *pxdf, *pxdfb;
Tim Duesterhus0837eb12020-07-04 11:49:49 +02002378 struct server_deinit_fct *srvdf, *srvdfb;
Tim Duesterhusf0c25d22020-09-10 19:46:41 +02002379 struct per_thread_init_fct *tif, *tifb;
2380 struct per_thread_deinit_fct *tdf, *tdfb;
2381 struct per_thread_alloc_fct *taf, *tafb;
2382 struct per_thread_free_fct *tff, *tffb;
Tim Duesterhus34bef072020-07-04 11:49:50 +02002383 struct post_server_check_fct *pscf, *pscfb;
Tim Duesterhusfc854942020-09-10 19:46:42 +02002384 struct post_check_fct *pcf, *pcfb;
Tim Duesterhus53508d62020-09-10 19:46:40 +02002385 struct post_proxy_check_fct *ppcf, *ppcfb;
Willy Tarreauae7bc4a2020-09-23 16:46:22 +02002386 int cur_fd;
2387
2388 /* At this point the listeners state is weird:
2389 * - most listeners are still bound and referenced in their protocol
2390 * - some might be zombies that are not in their proto anymore, but
2391 * still appear in their proxy's listeners with a valid FD.
2392 * - some might be stopped and still appear in their proxy as FD #-1
2393 * - among all of them, some might be inherited hence shared and we're
2394 * not allowed to pause them or whatever, we must just close them.
2395 * - finally some are not listeners (pipes, logs, stdout, etc) and
2396 * must be left intact.
2397 *
2398 * The safe way to proceed is to unbind (and close) whatever is not yet
2399 * unbound so that no more receiver/listener remains alive. Then close
2400 * remaining listener FDs, which correspond to zombie listeners (those
2401 * belonging to disabled proxies that were in another process).
2402 * objt_listener() would be cleaner here but not converted yet.
2403 */
2404 protocol_unbind_all();
2405
2406 for (cur_fd = 0; cur_fd < global.maxsock; cur_fd++) {
Willy Tarreau1a3770c2020-10-14 12:13:51 +02002407 if (!fdtab || !fdtab[cur_fd].owner)
Willy Tarreauae7bc4a2020-09-23 16:46:22 +02002408 continue;
2409
Willy Tarreaua74cb382020-10-15 21:29:49 +02002410 if (fdtab[cur_fd].iocb == &sock_accept_iocb) {
Willy Tarreauae7bc4a2020-09-23 16:46:22 +02002411 struct listener *l = fdtab[cur_fd].owner;
2412
2413 BUG_ON(l->state != LI_INIT);
2414 unbind_listener(l);
2415 }
2416 }
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002417
Willy Tarreau24f4efa2010-08-27 17:56:48 +02002418 deinit_signals();
Willy Tarreaubaaee002006-06-26 02:48:02 +02002419 while (p) {
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002420 /* build a list of unique uri_auths */
2421 if (!ua)
2422 ua = p->uri_auth;
2423 else {
2424 /* check if p->uri_auth is unique */
2425 for (uap = ua; uap; uap=uap->next)
2426 if (uap == p->uri_auth)
2427 break;
2428
Willy Tarreauaccc4e12008-06-24 11:14:45 +02002429 if (!uap && p->uri_auth) {
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002430 /* add it, if it is */
2431 p->uri_auth->next = ua;
2432 ua = p->uri_auth;
2433 }
William Lallemand0f99e342011-10-12 17:50:54 +02002434 }
2435
Willy Tarreau4d2d0982007-05-14 00:39:29 +02002436 p0 = p;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002437 p = p->next;
Amaury Denoyelle27fefa12021-03-24 16:13:20 +01002438 free_proxy(p0);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002439 }/* end while(p) */
Willy Tarreaudd815982007-10-16 12:25:14 +02002440
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002441 while (ua) {
Tim Duesterhus00f00cf2020-09-10 19:46:38 +02002442 struct stat_scope *scope, *scopep;
2443
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002444 uap = ua;
2445 ua = ua->next;
2446
Willy Tarreaua534fea2008-08-03 12:19:50 +02002447 free(uap->uri_prefix);
2448 free(uap->auth_realm);
Krzysztof Piotr Oledzki48cb2ae2009-10-02 22:51:14 +02002449 free(uap->node);
2450 free(uap->desc);
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002451
Krzysztof Piotr Oledzki8c8bd452010-01-29 19:29:32 +01002452 userlist_free(uap->userlist);
Amaury Denoyelle68fd7e42021-03-25 17:15:52 +01002453 free_act_rules(&uap->http_req_rules);
Krzysztof Piotr Oledzki8c8bd452010-01-29 19:29:32 +01002454
Tim Duesterhus00f00cf2020-09-10 19:46:38 +02002455 scope = uap->scope;
2456 while (scope) {
2457 scopep = scope;
2458 scope = scope->next;
2459
2460 free(scopep->px_id);
2461 free(scopep);
2462 }
2463
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002464 free(uap);
2465 }
2466
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01002467 userlist_free(userlist);
2468
David Carlier834cb2e2015-09-25 12:02:25 +01002469 cfg_unregister_sections();
2470
Christopher Faulet0132d062017-07-26 15:33:35 +02002471 deinit_log_buffers();
David Carlier834cb2e2015-09-25 12:02:25 +01002472
Willy Tarreau05554e62016-12-21 20:46:26 +01002473 list_for_each_entry(pdf, &post_deinit_list, list)
2474 pdf->fct();
2475
Willy Tarreau61cfdf42021-02-20 10:46:51 +01002476 ha_free(&global.log_send_hostname);
Dragan Dosen43885c72015-10-01 13:18:13 +02002477 chunk_destroy(&global.log_tag);
Willy Tarreau61cfdf42021-02-20 10:46:51 +01002478 ha_free(&global.chroot);
2479 ha_free(&global.pidfile);
2480 ha_free(&global.node);
2481 ha_free(&global.desc);
2482 ha_free(&oldpids);
2483 ha_free(&old_argv);
2484 ha_free(&localpeer);
2485 ha_free(&global.server_state_base);
2486 ha_free(&global.server_state_file);
Olivier Houchard3f795f72019-04-17 22:51:06 +02002487 task_destroy(idle_conn_task);
Olivier Houchard9ea5d362019-02-14 18:29:09 +01002488 idle_conn_task = NULL;
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002489
William Lallemand0f99e342011-10-12 17:50:54 +02002490 list_for_each_entry_safe(log, logb, &global.logsrvs, list) {
Willy Tarreau2b718102021-04-21 07:32:39 +02002491 LIST_DELETE(&log->list);
Amaury Denoyelled688e012021-04-20 17:05:47 +02002492 free(log->conf.file);
William Lallemand0f99e342011-10-12 17:50:54 +02002493 free(log);
2494 }
Willy Tarreau477ecd82010-01-03 21:12:30 +01002495 list_for_each_entry_safe(wl, wlb, &cfg_cfgfiles, list) {
Maxime de Roucy0f503922016-05-13 23:52:55 +02002496 free(wl->s);
Willy Tarreau2b718102021-04-21 07:32:39 +02002497 LIST_DELETE(&wl->list);
Willy Tarreau477ecd82010-01-03 21:12:30 +01002498 free(wl);
2499 }
2500
Willy Tarreaucdb737e2016-12-21 18:43:10 +01002501 list_for_each_entry_safe(bol, bolb, &build_opts_list, list) {
2502 if (bol->must_free)
2503 free((void *)bol->str);
Willy Tarreau2b718102021-04-21 07:32:39 +02002504 LIST_DELETE(&bol->list);
Willy Tarreaucdb737e2016-12-21 18:43:10 +01002505 free(bol);
2506 }
2507
Tim Duesterhus17e363f2020-07-04 11:49:47 +02002508 list_for_each_entry_safe(pxdf, pxdfb, &proxy_deinit_list, list) {
Willy Tarreau2b718102021-04-21 07:32:39 +02002509 LIST_DELETE(&pxdf->list);
Tim Duesterhus17e363f2020-07-04 11:49:47 +02002510 free(pxdf);
2511 }
2512
Tim Duesterhusfdf904a2020-07-04 11:49:48 +02002513 list_for_each_entry_safe(pdf, pdfb, &post_deinit_list, list) {
Willy Tarreau2b718102021-04-21 07:32:39 +02002514 LIST_DELETE(&pdf->list);
Tim Duesterhusfdf904a2020-07-04 11:49:48 +02002515 free(pdf);
2516 }
2517
Tim Duesterhus0837eb12020-07-04 11:49:49 +02002518 list_for_each_entry_safe(srvdf, srvdfb, &server_deinit_list, list) {
Willy Tarreau2b718102021-04-21 07:32:39 +02002519 LIST_DELETE(&srvdf->list);
Tim Duesterhus0837eb12020-07-04 11:49:49 +02002520 free(srvdf);
2521 }
2522
Tim Duesterhusfc854942020-09-10 19:46:42 +02002523 list_for_each_entry_safe(pcf, pcfb, &post_check_list, list) {
Willy Tarreau2b718102021-04-21 07:32:39 +02002524 LIST_DELETE(&pcf->list);
Tim Duesterhusfc854942020-09-10 19:46:42 +02002525 free(pcf);
2526 }
2527
Tim Duesterhus34bef072020-07-04 11:49:50 +02002528 list_for_each_entry_safe(pscf, pscfb, &post_server_check_list, list) {
Willy Tarreau2b718102021-04-21 07:32:39 +02002529 LIST_DELETE(&pscf->list);
Tim Duesterhus34bef072020-07-04 11:49:50 +02002530 free(pscf);
2531 }
2532
Tim Duesterhus53508d62020-09-10 19:46:40 +02002533 list_for_each_entry_safe(ppcf, ppcfb, &post_proxy_check_list, list) {
Willy Tarreau2b718102021-04-21 07:32:39 +02002534 LIST_DELETE(&ppcf->list);
Tim Duesterhus53508d62020-09-10 19:46:40 +02002535 free(ppcf);
2536 }
2537
Tim Duesterhusf0c25d22020-09-10 19:46:41 +02002538 list_for_each_entry_safe(tif, tifb, &per_thread_init_list, list) {
Willy Tarreau2b718102021-04-21 07:32:39 +02002539 LIST_DELETE(&tif->list);
Tim Duesterhusf0c25d22020-09-10 19:46:41 +02002540 free(tif);
2541 }
2542
2543 list_for_each_entry_safe(tdf, tdfb, &per_thread_deinit_list, list) {
Willy Tarreau2b718102021-04-21 07:32:39 +02002544 LIST_DELETE(&tdf->list);
Tim Duesterhusf0c25d22020-09-10 19:46:41 +02002545 free(tdf);
2546 }
2547
2548 list_for_each_entry_safe(taf, tafb, &per_thread_alloc_list, list) {
Willy Tarreau2b718102021-04-21 07:32:39 +02002549 LIST_DELETE(&taf->list);
Tim Duesterhusf0c25d22020-09-10 19:46:41 +02002550 free(taf);
2551 }
2552
2553 list_for_each_entry_safe(tff, tffb, &per_thread_free_list, list) {
Willy Tarreau2b718102021-04-21 07:32:39 +02002554 LIST_DELETE(&tff->list);
Tim Duesterhusf0c25d22020-09-10 19:46:41 +02002555 free(tff);
2556 }
2557
Willy Tarreaucfc4f242021-05-08 11:41:28 +02002558 vars_prune(&proc_vars, NULL, NULL);
Willy Tarreau2455ceb2018-11-26 15:57:34 +01002559 pool_destroy_all();
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002560 deinit_pollers();
Willy Tarreaubaaee002006-06-26 02:48:02 +02002561} /* end deinit() */
2562
Willy Tarreauf3ca5a02020-06-15 18:43:46 +02002563__attribute__((noreturn)) void deinit_and_exit(int status)
Tim Duesterhus26540552020-06-14 00:37:41 +02002564{
2565 deinit();
2566 exit(status);
2567}
William Lallemand72160322018-11-06 17:37:16 +01002568
Amaury Denoyelled3a88c12021-05-03 10:47:51 +02002569/* Handler of the task of mux_stopping_data.
2570 * Called on soft-stop.
2571 */
2572struct task *mux_stopping_process(struct task *t, void *ctx, unsigned int state)
2573{
2574 struct connection *conn, *back;
2575
2576 list_for_each_entry_safe(conn, back, &mux_stopping_data[tid].list, stopping_list) {
2577 if (conn->mux && conn->mux->wake)
2578 conn->mux->wake(conn);
2579 }
2580
2581 return t;
2582}
2583
Willy Tarreau918ff602011-07-25 16:33:49 +02002584/* Runs the polling loop */
Willy Tarreau3ebd55e2020-03-03 14:59:56 +01002585void run_poll_loop()
Willy Tarreau4f60f162007-04-08 16:39:58 +02002586{
Willy Tarreau2ae84e42019-05-28 16:44:05 +02002587 int next, wake;
Willy Tarreau4f60f162007-04-08 16:39:58 +02002588
Amaury Denoyelled3a88c12021-05-03 10:47:51 +02002589 /* allocates the thread bound mux_stopping_data task */
2590 mux_stopping_data[tid].task = task_new(tid_bit);
2591 mux_stopping_data[tid].task->process = mux_stopping_process;
2592 LIST_INIT(&mux_stopping_data[tid].list);
2593
Willy Tarreaub0b37bc2008-06-23 14:00:57 +02002594 tv_update_date(0,1);
Willy Tarreau4f60f162007-04-08 16:39:58 +02002595 while (1) {
Willy Tarreauc49ba522019-12-11 08:12:23 +01002596 wake_expired_tasks();
2597
William Lallemand1aab50b2018-06-07 09:46:01 +02002598 /* check if we caught some signals and process them in the
2599 first thread */
Willy Tarreaua7ad4ae2020-06-19 12:06:34 +02002600 if (signal_queue_len && tid == 0) {
2601 activity[tid].wake_signal++;
William Lallemand1aab50b2018-06-07 09:46:01 +02002602 signal_process_queue();
Willy Tarreaua7ad4ae2020-06-19 12:06:34 +02002603 }
2604
2605 /* Process a few tasks */
2606 process_runnable_tasks();
Willy Tarreau29857942009-05-10 09:01:21 +02002607
Willy Tarreau7067b3a2019-06-02 11:11:29 +02002608 /* also stop if we failed to cleanly stop all tasks */
2609 if (killed > 1)
2610 break;
2611
Willy Tarreau10146c92015-04-13 20:44:19 +02002612 /* expire immediately if events are pending */
Willy Tarreau2ae84e42019-05-28 16:44:05 +02002613 wake = 1;
Olivier Houchard305d5ab2019-07-24 18:07:06 +02002614 if (thread_has_tasks())
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01002615 activity[tid].wake_tasks++;
Olivier Houchard79321b92018-07-26 17:55:11 +02002616 else {
Olivier Houchardb23a61f2019-03-08 18:51:17 +01002617 _HA_ATOMIC_OR(&sleeping_thread_mask, tid_bit);
2618 __ha_barrier_atomic_store();
Willy Tarreau95abd5b2020-03-23 09:33:32 +01002619 if (thread_has_tasks()) {
Olivier Houchard79321b92018-07-26 17:55:11 +02002620 activity[tid].wake_tasks++;
Olivier Houchardb23a61f2019-03-08 18:51:17 +01002621 _HA_ATOMIC_AND(&sleeping_thread_mask, ~tid_bit);
Olivier Houchard79321b92018-07-26 17:55:11 +02002622 } else
Willy Tarreau2ae84e42019-05-28 16:44:05 +02002623 wake = 0;
Olivier Houchard79321b92018-07-26 17:55:11 +02002624 }
Willy Tarreau10146c92015-04-13 20:44:19 +02002625
Willy Tarreau4f46a352020-03-23 09:27:28 +01002626 if (!wake) {
Willy Tarreaud7a6b2f2020-05-13 13:51:01 +02002627 int i;
2628
2629 if (stopping) {
Ilya Shipitsin3df59892021-05-10 12:50:00 +05002630 /* stop muxes before acknowledging stopping */
Amaury Denoyelled3a88c12021-05-03 10:47:51 +02002631 if (!(stopping_thread_mask & tid_bit)) {
2632 task_wakeup(mux_stopping_data[tid].task, TASK_WOKEN_OTHER);
2633 wake = 1;
2634 }
2635
Willy Tarreau1db42732021-04-06 11:44:07 +02002636 if (_HA_ATOMIC_OR_FETCH(&stopping_thread_mask, tid_bit) == tid_bit) {
Willy Tarreaud6455742020-05-13 14:30:25 +02002637 /* notify all threads that stopping was just set */
2638 for (i = 0; i < global.nbthread; i++)
Willy Tarreau369a2ef2020-06-29 19:23:19 +02002639 if (((all_threads_mask & ~stopping_thread_mask) >> i) & 1)
Willy Tarreaud6455742020-05-13 14:30:25 +02002640 wake_thread(i);
2641 }
Willy Tarreaud7a6b2f2020-05-13 13:51:01 +02002642 }
Willy Tarreau4f46a352020-03-23 09:27:28 +01002643
2644 /* stop when there's nothing left to do */
2645 if ((jobs - unstoppable_jobs) == 0 &&
Willy Tarreaud7a6b2f2020-05-13 13:51:01 +02002646 (stopping_thread_mask & all_threads_mask) == all_threads_mask) {
2647 /* wake all threads waiting on jobs==0 */
2648 for (i = 0; i < global.nbthread; i++)
2649 if (((all_threads_mask & ~tid_bit) >> i) & 1)
2650 wake_thread(i);
Willy Tarreau4f46a352020-03-23 09:27:28 +01002651 break;
Willy Tarreaud7a6b2f2020-05-13 13:51:01 +02002652 }
Willy Tarreau4f46a352020-03-23 09:27:28 +01002653 }
2654
Willy Tarreauc49ba522019-12-11 08:12:23 +01002655 /* If we have to sleep, measure how long */
2656 next = wake ? TICK_ETERNITY : next_timer_expiry();
2657
Willy Tarreau58b458d2008-06-29 22:40:23 +02002658 /* The poller will ensure it returns around <next> */
Willy Tarreau2ae84e42019-05-28 16:44:05 +02002659 cur_poller.poll(&cur_poller, next, wake);
Emeric Brun64cc49c2017-10-03 14:46:45 +02002660
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01002661 activity[tid].loops++;
Willy Tarreau4f60f162007-04-08 16:39:58 +02002662 }
Amaury Denoyelled3a88c12021-05-03 10:47:51 +02002663
2664 task_destroy(mux_stopping_data[tid].task);
Willy Tarreau4f60f162007-04-08 16:39:58 +02002665}
2666
Christopher Faulet1d17c102017-08-29 15:38:48 +02002667static void *run_thread_poll_loop(void *data)
2668{
Willy Tarreau082b6282019-05-22 14:42:12 +02002669 struct per_thread_alloc_fct *ptaf;
Christopher Faulet1d17c102017-08-29 15:38:48 +02002670 struct per_thread_init_fct *ptif;
2671 struct per_thread_deinit_fct *ptdf;
Willy Tarreau082b6282019-05-22 14:42:12 +02002672 struct per_thread_free_fct *ptff;
Willy Tarreau34a150c2019-06-11 09:16:41 +02002673 static int init_left = 0;
Willy Tarreauaf613e82020-06-05 08:40:51 +02002674 __decl_thread(static pthread_mutex_t init_mutex = PTHREAD_MUTEX_INITIALIZER);
2675 __decl_thread(static pthread_cond_t init_cond = PTHREAD_COND_INITIALIZER);
Christopher Faulet1d17c102017-08-29 15:38:48 +02002676
Willy Tarreaub4f7cc32019-05-03 09:27:30 +02002677 ha_set_tid((unsigned long)data);
Willy Tarreaud022e9c2019-09-24 08:25:15 +02002678 sched = &task_per_thread[tid];
Willy Tarreau91e6df02019-05-03 17:21:18 +02002679
Willy Tarreauf6178242019-05-21 19:46:58 +02002680#if (_POSIX_TIMERS > 0) && defined(_POSIX_THREAD_CPUTIME)
Willy Tarreau91e6df02019-05-03 17:21:18 +02002681#ifdef USE_THREAD
Willy Tarreau8323a372019-05-20 18:57:53 +02002682 pthread_getcpuclockid(pthread_self(), &ti->clock_id);
Willy Tarreau624dcbf2019-05-20 20:23:06 +02002683#else
Willy Tarreau8323a372019-05-20 18:57:53 +02002684 ti->clock_id = CLOCK_THREAD_CPUTIME_ID;
Willy Tarreau91e6df02019-05-03 17:21:18 +02002685#endif
Willy Tarreau663fda42019-05-21 15:14:08 +02002686#endif
Willy Tarreau6ec902a2019-06-07 14:41:11 +02002687 /* Now, initialize one thread init at a time. This is better since
2688 * some init code is a bit tricky and may release global resources
2689 * after reallocating them locally. This will also ensure there is
2690 * no race on file descriptors allocation.
2691 */
Willy Tarreau34a150c2019-06-11 09:16:41 +02002692#ifdef USE_THREAD
2693 pthread_mutex_lock(&init_mutex);
2694#endif
2695 /* The first thread must set the number of threads left */
2696 if (!init_left)
2697 init_left = global.nbthread;
2698 init_left--;
Willy Tarreau91e6df02019-05-03 17:21:18 +02002699
Willy Tarreauc4c80fb2021-04-11 15:00:34 +02002700 tv_init_thread_date();
Christopher Faulet1d17c102017-08-29 15:38:48 +02002701
Willy Tarreau082b6282019-05-22 14:42:12 +02002702 /* per-thread alloc calls performed here are not allowed to snoop on
2703 * other threads, so they are free to initialize at their own rhythm
2704 * as long as they act as if they were alone. None of them may rely
2705 * on resources initialized by the other ones.
2706 */
2707 list_for_each_entry(ptaf, &per_thread_alloc_list, list) {
2708 if (!ptaf->fct()) {
2709 ha_alert("failed to allocate resources for thread %u.\n", tid);
2710 exit(1);
2711 }
2712 }
2713
Willy Tarreau3078e9f2019-05-20 10:50:43 +02002714 /* per-thread init calls performed here are not allowed to snoop on
2715 * other threads, so they are free to initialize at their own rhythm
2716 * as long as they act as if they were alone.
2717 */
Christopher Faulet1d17c102017-08-29 15:38:48 +02002718 list_for_each_entry(ptif, &per_thread_init_list, list) {
2719 if (!ptif->fct()) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002720 ha_alert("failed to initialize thread %u.\n", tid);
Christopher Faulet1d17c102017-08-29 15:38:48 +02002721 exit(1);
2722 }
2723 }
2724
Willy Tarreau71092822019-06-10 09:51:04 +02002725 /* enabling protocols will result in fd_insert() calls to be performed,
2726 * we want all threads to have already allocated their local fd tables
Willy Tarreau34a150c2019-06-11 09:16:41 +02002727 * before doing so, thus only the last thread does it.
Willy Tarreau71092822019-06-10 09:51:04 +02002728 */
Willy Tarreau34a150c2019-06-11 09:16:41 +02002729 if (init_left == 0)
Willy Tarreaue4d7c9d2019-06-10 10:14:52 +02002730 protocol_enable_all();
Willy Tarreau6ec902a2019-06-07 14:41:11 +02002731
Willy Tarreau34a150c2019-06-11 09:16:41 +02002732#ifdef USE_THREAD
2733 pthread_cond_broadcast(&init_cond);
2734 pthread_mutex_unlock(&init_mutex);
2735
2736 /* now wait for other threads to finish starting */
2737 pthread_mutex_lock(&init_mutex);
2738 while (init_left)
2739 pthread_cond_wait(&init_cond, &init_mutex);
2740 pthread_mutex_unlock(&init_mutex);
2741#endif
Willy Tarreau3078e9f2019-05-20 10:50:43 +02002742
Willy Tarreaua45a8b52019-12-06 16:31:45 +01002743#if defined(PR_SET_NO_NEW_PRIVS) && defined(USE_PRCTL)
2744 /* Let's refrain from using setuid executables. This way the impact of
2745 * an eventual vulnerability in a library remains limited. It may
2746 * impact external checks but who cares about them anyway ? In the
2747 * worst case it's possible to disable the option. Obviously we do this
2748 * in workers only. We can't hard-fail on this one as it really is
2749 * implementation dependent though we're interested in feedback, hence
2750 * the warning.
2751 */
2752 if (!(global.tune.options & GTUNE_INSECURE_SETUID) && !master) {
2753 static int warn_fail;
Willy Tarreau18515722021-04-06 11:57:41 +02002754 if (prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0) == -1 && !_HA_ATOMIC_FETCH_ADD(&warn_fail, 1)) {
Willy Tarreaua45a8b52019-12-06 16:31:45 +01002755 ha_warning("Failed to disable setuid, please report to developers with detailed "
2756 "information about your operating system. You can silence this warning "
2757 "by adding 'insecure-setuid-wanted' in the 'global' section.\n");
2758 }
2759 }
2760#endif
2761
Willy Tarreaud96f1122019-12-03 07:07:36 +01002762#if defined(RLIMIT_NPROC)
2763 /* all threads have started, it's now time to prevent any new thread
2764 * or process from starting. Obviously we do this in workers only. We
2765 * can't hard-fail on this one as it really is implementation dependent
2766 * though we're interested in feedback, hence the warning.
2767 */
2768 if (!(global.tune.options & GTUNE_INSECURE_FORK) && !master) {
2769 struct rlimit limit = { .rlim_cur = 0, .rlim_max = 0 };
2770 static int warn_fail;
2771
Willy Tarreau18515722021-04-06 11:57:41 +02002772 if (setrlimit(RLIMIT_NPROC, &limit) == -1 && !_HA_ATOMIC_FETCH_ADD(&warn_fail, 1)) {
Willy Tarreaud96f1122019-12-03 07:07:36 +01002773 ha_warning("Failed to disable forks, please report to developers with detailed "
2774 "information about your operating system. You can silence this warning "
2775 "by adding 'insecure-fork-wanted' in the 'global' section.\n");
2776 }
2777 }
2778#endif
Christopher Faulet1d17c102017-08-29 15:38:48 +02002779 run_poll_loop();
2780
2781 list_for_each_entry(ptdf, &per_thread_deinit_list, list)
2782 ptdf->fct();
2783
Willy Tarreau082b6282019-05-22 14:42:12 +02002784 list_for_each_entry(ptff, &per_thread_free_list, list)
2785 ptff->fct();
2786
Christopher Fauletcd7879a2017-10-27 13:53:47 +02002787#ifdef USE_THREAD
Olivier Houchardb23a61f2019-03-08 18:51:17 +01002788 _HA_ATOMIC_AND(&all_threads_mask, ~tid_bit);
Christopher Fauletcd7879a2017-10-27 13:53:47 +02002789 if (tid > 0)
2790 pthread_exit(NULL);
Christopher Faulet1d17c102017-08-29 15:38:48 +02002791#endif
Christopher Fauletcd7879a2017-10-27 13:53:47 +02002792 return NULL;
2793}
Christopher Faulet1d17c102017-08-29 15:38:48 +02002794
William Dauchyf9af9d72019-11-17 15:47:16 +01002795/* set uid/gid depending on global settings */
2796static void set_identity(const char *program_name)
2797{
2798 if (global.gid) {
2799 if (getgroups(0, NULL) > 0 && setgroups(0, NULL) == -1)
2800 ha_warning("[%s.main()] Failed to drop supplementary groups. Using 'gid'/'group'"
2801 " without 'uid'/'user' is generally useless.\n", program_name);
2802
2803 if (setgid(global.gid) == -1) {
2804 ha_alert("[%s.main()] Cannot set gid %d.\n", program_name, global.gid);
2805 protocol_unbind_all();
2806 exit(1);
2807 }
2808 }
2809
2810 if (global.uid && setuid(global.uid) == -1) {
2811 ha_alert("[%s.main()] Cannot set uid %d.\n", program_name, global.uid);
2812 protocol_unbind_all();
2813 exit(1);
2814 }
2815}
2816
Willy Tarreaubaaee002006-06-26 02:48:02 +02002817int main(int argc, char **argv)
2818{
2819 int err, retry;
2820 struct rlimit limit;
Willy Tarreau269ab312012-09-05 08:02:48 +02002821 int pidfd = -1;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002822
Olivier Houchard5fa300d2018-02-03 15:15:21 +01002823 setvbuf(stdout, NULL, _IONBF, 0);
Willy Tarreau5794fb02018-11-25 18:43:29 +01002824
Willy Tarreauff9c9142019-02-07 10:39:36 +01002825 /* this can only safely be done here, though it's optimized away by
2826 * the compiler.
2827 */
2828 if (MAX_PROCS < 1 || MAX_PROCS > LONGBITS) {
2829 ha_alert("MAX_PROCS value must be between 1 and %d inclusive; "
2830 "HAProxy was built with value %d, please fix it and rebuild.\n",
2831 LONGBITS, MAX_PROCS);
2832 exit(1);
2833 }
2834
Willy Tarreaubf696402019-03-01 10:09:28 +01002835 /* take a copy of initial limits before we possibly change them */
2836 getrlimit(RLIMIT_NOFILE, &limit);
Willy Tarreau2bd0f812020-10-13 15:36:08 +02002837
2838 if (limit.rlim_max == RLIM_INFINITY)
2839 limit.rlim_max = limit.rlim_cur;
Willy Tarreaubf696402019-03-01 10:09:28 +01002840 rlim_fd_cur_at_boot = limit.rlim_cur;
2841 rlim_fd_max_at_boot = limit.rlim_max;
2842
Willy Tarreau5794fb02018-11-25 18:43:29 +01002843 /* process all initcalls in order of potential dependency */
2844 RUN_INITCALLS(STG_PREPARE);
2845 RUN_INITCALLS(STG_LOCK);
2846 RUN_INITCALLS(STG_ALLOC);
2847 RUN_INITCALLS(STG_POOL);
2848 RUN_INITCALLS(STG_REGISTER);
2849 RUN_INITCALLS(STG_INIT);
2850
Emeric Bruncf20bf12010-10-22 16:06:11 +02002851 init(argc, argv);
Willy Tarreau24f4efa2010-08-27 17:56:48 +02002852 signal_register_fct(SIGQUIT, dump, SIGQUIT);
2853 signal_register_fct(SIGUSR1, sig_soft_stop, SIGUSR1);
2854 signal_register_fct(SIGHUP, sig_dump_state, SIGHUP);
William Lallemand73b85e72017-06-01 17:38:51 +02002855 signal_register_fct(SIGUSR2, NULL, 0);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002856
Willy Tarreaue437c442010-03-17 18:02:46 +01002857 /* Always catch SIGPIPE even on platforms which define MSG_NOSIGNAL.
2858 * Some recent FreeBSD setups report broken pipes, and MSG_NOSIGNAL
2859 * was defined there, so let's stay on the safe side.
Willy Tarreaubaaee002006-06-26 02:48:02 +02002860 */
Willy Tarreau24f4efa2010-08-27 17:56:48 +02002861 signal_register_fct(SIGPIPE, NULL, 0);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002862
Willy Tarreaudc23a922011-02-16 11:10:36 +01002863 /* ulimits */
2864 if (!global.rlimit_nofile)
2865 global.rlimit_nofile = global.maxsock;
2866
2867 if (global.rlimit_nofile) {
Willy Tarreaue5cfdac2019-03-01 10:32:05 +01002868 limit.rlim_cur = global.rlimit_nofile;
2869 limit.rlim_max = MAX(rlim_fd_max_at_boot, limit.rlim_cur);
2870
Willy Tarreaudc23a922011-02-16 11:10:36 +01002871 if (setrlimit(RLIMIT_NOFILE, &limit) == -1) {
Willy Tarreauef635472016-06-21 11:48:18 +02002872 getrlimit(RLIMIT_NOFILE, &limit);
William Dauchy0fec3ab2019-10-27 20:08:11 +01002873 if (global.tune.options & GTUNE_STRICT_LIMITS) {
2874 ha_alert("[%s.main()] Cannot raise FD limit to %d, limit is %d.\n",
2875 argv[0], global.rlimit_nofile, (int)limit.rlim_cur);
Jerome Magnin50f757c2021-01-12 20:19:38 +01002876 exit(1);
William Dauchy0fec3ab2019-10-27 20:08:11 +01002877 }
2878 else {
2879 /* try to set it to the max possible at least */
2880 limit.rlim_cur = limit.rlim_max;
2881 if (setrlimit(RLIMIT_NOFILE, &limit) != -1)
2882 getrlimit(RLIMIT_NOFILE, &limit);
Willy Tarreau164dd0b2016-06-21 11:51:59 +02002883
William Dauchya5194602020-03-28 19:29:58 +01002884 ha_warning("[%s.main()] Cannot raise FD limit to %d, limit is %d.\n",
William Dauchy0fec3ab2019-10-27 20:08:11 +01002885 argv[0], global.rlimit_nofile, (int)limit.rlim_cur);
2886 global.rlimit_nofile = limit.rlim_cur;
2887 }
Willy Tarreaudc23a922011-02-16 11:10:36 +01002888 }
2889 }
2890
2891 if (global.rlimit_memmax) {
2892 limit.rlim_cur = limit.rlim_max =
Willy Tarreau70060452015-12-14 12:46:07 +01002893 global.rlimit_memmax * 1048576ULL;
Willy Tarreaudc23a922011-02-16 11:10:36 +01002894#ifdef RLIMIT_AS
2895 if (setrlimit(RLIMIT_AS, &limit) == -1) {
William Dauchy0fec3ab2019-10-27 20:08:11 +01002896 if (global.tune.options & GTUNE_STRICT_LIMITS) {
2897 ha_alert("[%s.main()] Cannot fix MEM limit to %d megs.\n",
2898 argv[0], global.rlimit_memmax);
Jerome Magnin50f757c2021-01-12 20:19:38 +01002899 exit(1);
William Dauchy0fec3ab2019-10-27 20:08:11 +01002900 }
2901 else
William Dauchya5194602020-03-28 19:29:58 +01002902 ha_warning("[%s.main()] Cannot fix MEM limit to %d megs.\n",
William Dauchy0fec3ab2019-10-27 20:08:11 +01002903 argv[0], global.rlimit_memmax);
Willy Tarreaudc23a922011-02-16 11:10:36 +01002904 }
2905#else
2906 if (setrlimit(RLIMIT_DATA, &limit) == -1) {
William Dauchy0fec3ab2019-10-27 20:08:11 +01002907 if (global.tune.options & GTUNE_STRICT_LIMITS) {
2908 ha_alert("[%s.main()] Cannot fix MEM limit to %d megs.\n",
2909 argv[0], global.rlimit_memmax);
Jerome Magnin50f757c2021-01-12 20:19:38 +01002910 exit(1);
William Dauchy0fec3ab2019-10-27 20:08:11 +01002911 }
2912 else
William Dauchya5194602020-03-28 19:29:58 +01002913 ha_warning("[%s.main()] Cannot fix MEM limit to %d megs.\n",
William Dauchy0fec3ab2019-10-27 20:08:11 +01002914 argv[0], global.rlimit_memmax);
Willy Tarreaudc23a922011-02-16 11:10:36 +01002915 }
2916#endif
2917 }
2918
Olivier Houchardf73629d2017-04-05 22:33:04 +02002919 if (old_unixsocket) {
William Lallemand85b0bd92017-06-01 17:38:53 +02002920 if (strcmp("/dev/null", old_unixsocket) != 0) {
Willy Tarreau42961742020-08-28 18:42:45 +02002921 if (sock_get_old_sockets(old_unixsocket) != 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002922 ha_alert("Failed to get the sockets from the old process!\n");
William Lallemand85b0bd92017-06-01 17:38:53 +02002923 if (!(global.mode & MODE_MWORKER))
2924 exit(1);
2925 }
Olivier Houchardf73629d2017-04-05 22:33:04 +02002926 }
2927 }
William Lallemand85b0bd92017-06-01 17:38:53 +02002928 get_cur_unixsocket();
2929
Willy Tarreaubaaee002006-06-26 02:48:02 +02002930 /* We will loop at most 100 times with 10 ms delay each time.
2931 * That's at most 1 second. We only send a signal to old pids
2932 * if we cannot grab at least one port.
2933 */
2934 retry = MAX_START_RETRIES;
2935 err = ERR_NONE;
2936 while (retry >= 0) {
2937 struct timeval w;
Willy Tarreaue91bff22020-09-02 11:11:43 +02002938 err = protocol_bind_all(retry == 0 || nb_oldpids == 0);
Willy Tarreaue13e9252007-12-20 23:05:50 +01002939 /* exit the loop on no error or fatal error */
2940 if ((err & (ERR_RETRYABLE|ERR_FATAL)) != ERR_RETRYABLE)
Willy Tarreaubaaee002006-06-26 02:48:02 +02002941 break;
Willy Tarreaubb545b42010-08-25 12:58:59 +02002942 if (nb_oldpids == 0 || retry == 0)
Willy Tarreaubaaee002006-06-26 02:48:02 +02002943 break;
2944
2945 /* FIXME-20060514: Solaris and OpenBSD do not support shutdown() on
2946 * listening sockets. So on those platforms, it would be wiser to
2947 * simply send SIGUSR1, which will not be undoable.
2948 */
Willy Tarreaubb545b42010-08-25 12:58:59 +02002949 if (tell_old_pids(SIGTTOU) == 0) {
2950 /* no need to wait if we can't contact old pids */
2951 retry = 0;
2952 continue;
2953 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002954 /* give some time to old processes to stop listening */
2955 w.tv_sec = 0;
2956 w.tv_usec = 10*1000;
2957 select(0, NULL, NULL, NULL, &w);
2958 retry--;
2959 }
2960
Willy Tarreaue91bff22020-09-02 11:11:43 +02002961 /* Note: protocol_bind_all() sends an alert when it fails. */
Willy Tarreau0a3b9d92009-02-04 17:05:23 +01002962 if ((err & ~ERR_WARN) != ERR_NONE) {
Willy Tarreaue91bff22020-09-02 11:11:43 +02002963 ha_alert("[%s.main()] Some protocols failed to start their listeners! Exiting.\n", argv[0]);
Willy Tarreauf68da462009-06-09 14:36:00 +02002964 if (retry != MAX_START_RETRIES && nb_oldpids) {
2965 protocol_unbind_all(); /* cleanup everything we can */
Willy Tarreaubaaee002006-06-26 02:48:02 +02002966 tell_old_pids(SIGTTIN);
Willy Tarreauf68da462009-06-09 14:36:00 +02002967 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002968 exit(1);
2969 }
2970
William Lallemand944e6192018-11-21 15:48:31 +01002971 if (!(global.mode & MODE_MWORKER_WAIT) && listeners == 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002972 ha_alert("[%s.main()] No enabled listener found (check for 'bind' directives) ! Exiting.\n", argv[0]);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002973 /* Note: we don't have to send anything to the old pids because we
2974 * never stopped them. */
2975 exit(1);
2976 }
2977
Willy Tarreaue91bff22020-09-02 11:11:43 +02002978 /* Ok, all listeners should now be bound, close any leftover sockets
Olivier Houchardf73629d2017-04-05 22:33:04 +02002979 * the previous process gave us, we don't need them anymore
2980 */
2981 while (xfer_sock_list != NULL) {
2982 struct xfer_sock_list *tmpxfer = xfer_sock_list->next;
2983 close(xfer_sock_list->fd);
2984 free(xfer_sock_list->iface);
2985 free(xfer_sock_list->namespace);
2986 free(xfer_sock_list);
2987 xfer_sock_list = tmpxfer;
2988 }
Willy Tarreaudd815982007-10-16 12:25:14 +02002989
Willy Tarreaubaaee002006-06-26 02:48:02 +02002990 /* prepare pause/play signals */
Willy Tarreau24f4efa2010-08-27 17:56:48 +02002991 signal_register_fct(SIGTTOU, sig_pause, SIGTTOU);
2992 signal_register_fct(SIGTTIN, sig_listen, SIGTTIN);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002993
Willy Tarreaubaaee002006-06-26 02:48:02 +02002994 /* MODE_QUIET can inhibit alerts and warnings below this line */
2995
PiBa-NL149a81a2017-12-25 21:03:31 +01002996 if (getenv("HAPROXY_MWORKER_REEXEC") != NULL) {
2997 /* either stdin/out/err are already closed or should stay as they are. */
2998 if ((global.mode & MODE_DAEMON)) {
2999 /* daemon mode re-executing, stdin/stdout/stderr are already closed so keep quiet */
3000 global.mode &= ~MODE_VERBOSE;
3001 global.mode |= MODE_QUIET; /* ensure that we won't say anything from now */
3002 }
3003 } else {
3004 if ((global.mode & MODE_QUIET) && !(global.mode & MODE_VERBOSE)) {
3005 /* detach from the tty */
William Lallemande1340412017-12-28 16:09:36 +01003006 stdio_quiet(-1);
PiBa-NL149a81a2017-12-25 21:03:31 +01003007 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02003008 }
3009
3010 /* open log & pid files before the chroot */
William Lallemand80293002017-11-06 11:00:03 +01003011 if ((global.mode & MODE_DAEMON || global.mode & MODE_MWORKER) && global.pidfile != NULL) {
Willy Tarreaubaaee002006-06-26 02:48:02 +02003012 unlink(global.pidfile);
3013 pidfd = open(global.pidfile, O_CREAT | O_WRONLY | O_TRUNC, 0644);
3014 if (pidfd < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003015 ha_alert("[%s.main()] Cannot create pidfile %s\n", argv[0], global.pidfile);
Willy Tarreaubaaee002006-06-26 02:48:02 +02003016 if (nb_oldpids)
3017 tell_old_pids(SIGTTIN);
Willy Tarreaudd815982007-10-16 12:25:14 +02003018 protocol_unbind_all();
Willy Tarreaubaaee002006-06-26 02:48:02 +02003019 exit(1);
3020 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02003021 }
3022
Willy Tarreaub38651a2007-03-24 17:24:39 +01003023 if ((global.last_checks & LSTCHK_NETADM) && global.uid) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003024 ha_alert("[%s.main()] Some configuration options require full privileges, so global.uid cannot be changed.\n"
3025 "", argv[0]);
Willy Tarreaudd815982007-10-16 12:25:14 +02003026 protocol_unbind_all();
Willy Tarreaub38651a2007-03-24 17:24:39 +01003027 exit(1);
3028 }
3029
Jackie Tapia749f74c2020-07-22 18:59:40 -05003030 /* If the user is not root, we'll still let them try the configuration
3031 * but we inform them that unexpected behaviour may occur.
Willy Tarreau4e30ed72009-02-04 18:02:48 +01003032 */
3033 if ((global.last_checks & LSTCHK_NETADM) && getuid())
Christopher Faulet767a84b2017-11-24 16:50:31 +01003034 ha_warning("[%s.main()] Some options which require full privileges"
3035 " might not work well.\n"
3036 "", argv[0]);
Willy Tarreau4e30ed72009-02-04 18:02:48 +01003037
William Lallemand095ba4c2017-06-01 17:38:50 +02003038 if ((global.mode & (MODE_MWORKER|MODE_DAEMON)) == 0) {
3039
3040 /* chroot if needed */
3041 if (global.chroot != NULL) {
3042 if (chroot(global.chroot) == -1 || chdir("/") == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003043 ha_alert("[%s.main()] Cannot chroot(%s).\n", argv[0], global.chroot);
William Lallemand095ba4c2017-06-01 17:38:50 +02003044 if (nb_oldpids)
3045 tell_old_pids(SIGTTIN);
3046 protocol_unbind_all();
3047 exit(1);
3048 }
Willy Tarreauf223cc02007-10-15 18:57:08 +02003049 }
Willy Tarreauf223cc02007-10-15 18:57:08 +02003050 }
3051
William Lallemand944e6192018-11-21 15:48:31 +01003052 if (nb_oldpids && !(global.mode & MODE_MWORKER_WAIT))
Willy Tarreaubb545b42010-08-25 12:58:59 +02003053 nb_oldpids = tell_old_pids(oldpids_sig);
Willy Tarreaubaaee002006-06-26 02:48:02 +02003054
William Lallemand27edc4b2019-05-07 17:49:33 +02003055 /* send a SIGTERM to workers who have a too high reloads number */
3056 if ((global.mode & MODE_MWORKER) && !(global.mode & MODE_MWORKER_WAIT))
3057 mworker_kill_max_reloads(SIGTERM);
3058
Willy Tarreaubaaee002006-06-26 02:48:02 +02003059 /* Note that any error at this stage will be fatal because we will not
3060 * be able to restart the old pids.
3061 */
3062
William Dauchyf9af9d72019-11-17 15:47:16 +01003063 if ((global.mode & (MODE_MWORKER | MODE_DAEMON)) == 0)
3064 set_identity(argv[0]);
Willy Tarreau636848a2019-04-15 19:38:50 +02003065
Willy Tarreaubaaee002006-06-26 02:48:02 +02003066 /* check ulimits */
3067 limit.rlim_cur = limit.rlim_max = 0;
3068 getrlimit(RLIMIT_NOFILE, &limit);
3069 if (limit.rlim_cur < global.maxsock) {
William Dauchy0fec3ab2019-10-27 20:08:11 +01003070 if (global.tune.options & GTUNE_STRICT_LIMITS) {
3071 ha_alert("[%s.main()] FD limit (%d) too low for maxconn=%d/maxsock=%d. "
3072 "Please raise 'ulimit-n' to %d or more to avoid any trouble.\n",
3073 argv[0], (int)limit.rlim_cur, global.maxconn, global.maxsock,
3074 global.maxsock);
Jerome Magnin50f757c2021-01-12 20:19:38 +01003075 exit(1);
William Dauchy0fec3ab2019-10-27 20:08:11 +01003076 }
3077 else
3078 ha_alert("[%s.main()] FD limit (%d) too low for maxconn=%d/maxsock=%d. "
William Dauchya5194602020-03-28 19:29:58 +01003079 "Please raise 'ulimit-n' to %d or more to avoid any trouble.\n",
William Dauchy0fec3ab2019-10-27 20:08:11 +01003080 argv[0], (int)limit.rlim_cur, global.maxconn, global.maxsock,
3081 global.maxsock);
Willy Tarreaubaaee002006-06-26 02:48:02 +02003082 }
3083
William Lallemand944e6192018-11-21 15:48:31 +01003084 if (global.mode & (MODE_DAEMON | MODE_MWORKER | MODE_MWORKER_WAIT)) {
Willy Tarreau0b9c02c2009-02-04 22:05:05 +01003085 struct proxy *px;
Willy Tarreauf83d3fe2015-05-01 19:13:41 +02003086 struct peers *curpeers;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003087 int ret = 0;
3088 int proc;
William Lallemande1340412017-12-28 16:09:36 +01003089 int devnullfd = -1;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003090
William Lallemand095ba4c2017-06-01 17:38:50 +02003091 /*
3092 * if daemon + mworker: must fork here to let a master
3093 * process live in background before forking children
3094 */
William Lallemand73b85e72017-06-01 17:38:51 +02003095
3096 if ((getenv("HAPROXY_MWORKER_REEXEC") == NULL)
3097 && (global.mode & MODE_MWORKER)
3098 && (global.mode & MODE_DAEMON)) {
William Lallemand095ba4c2017-06-01 17:38:50 +02003099 ret = fork();
3100 if (ret < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003101 ha_alert("[%s.main()] Cannot fork.\n", argv[0]);
William Lallemand095ba4c2017-06-01 17:38:50 +02003102 protocol_unbind_all();
3103 exit(1); /* there has been an error */
William Lallemandbfd8eb52018-07-04 15:31:23 +02003104 } else if (ret > 0) { /* parent leave to daemonize */
William Lallemand095ba4c2017-06-01 17:38:50 +02003105 exit(0);
William Lallemandbfd8eb52018-07-04 15:31:23 +02003106 } else /* change the process group ID in the child (master process) */
3107 setsid();
William Lallemand095ba4c2017-06-01 17:38:50 +02003108 }
William Lallemande20b6a62017-06-01 17:38:55 +02003109
William Lallemande20b6a62017-06-01 17:38:55 +02003110
William Lallemanddeed7802017-11-06 11:00:04 +01003111 /* if in master-worker mode, write the PID of the father */
3112 if (global.mode & MODE_MWORKER) {
3113 char pidstr[100];
Willy Tarreau76a80c72019-06-22 07:41:38 +02003114 snprintf(pidstr, sizeof(pidstr), "%d\n", (int)getpid());
Willy Tarreau46ec48b2018-01-23 19:20:19 +01003115 if (pidfd >= 0)
Willy Tarreau2e8ab6b2020-03-14 11:03:20 +01003116 DISGUISE(write(pidfd, pidstr, strlen(pidstr)));
William Lallemanddeed7802017-11-06 11:00:04 +01003117 }
3118
Willy Tarreaubaaee002006-06-26 02:48:02 +02003119 /* the father launches the required number of processes */
William Lallemand944e6192018-11-21 15:48:31 +01003120 if (!(global.mode & MODE_MWORKER_WAIT)) {
William Lallemand9a1ee7a2019-04-01 11:30:02 +02003121 if (global.mode & MODE_MWORKER)
3122 mworker_ext_launch_all();
William Lallemand944e6192018-11-21 15:48:31 +01003123 for (proc = 0; proc < global.nbproc; proc++) {
3124 ret = fork();
3125 if (ret < 0) {
3126 ha_alert("[%s.main()] Cannot fork.\n", argv[0]);
3127 protocol_unbind_all();
3128 exit(1); /* there has been an error */
3129 }
Willy Tarreau52bf8392020-03-08 00:42:37 +01003130 else if (ret == 0) { /* child breaks here */
3131 ha_random_jump96(relative_pid);
William Lallemand944e6192018-11-21 15:48:31 +01003132 break;
Willy Tarreau52bf8392020-03-08 00:42:37 +01003133 }
William Lallemand944e6192018-11-21 15:48:31 +01003134 if (pidfd >= 0 && !(global.mode & MODE_MWORKER)) {
3135 char pidstr[100];
3136 snprintf(pidstr, sizeof(pidstr), "%d\n", ret);
Willy Tarreau2e8ab6b2020-03-14 11:03:20 +01003137 DISGUISE(write(pidfd, pidstr, strlen(pidstr)));
William Lallemand944e6192018-11-21 15:48:31 +01003138 }
3139 if (global.mode & MODE_MWORKER) {
3140 struct mworker_proc *child;
William Lallemandce83b4a2018-10-26 14:47:30 +02003141
William Lallemand220567e2018-11-21 18:04:53 +01003142 ha_notice("New worker #%d (%d) forked\n", relative_pid, ret);
William Lallemand944e6192018-11-21 15:48:31 +01003143 /* find the right mworker_proc */
3144 list_for_each_entry(child, &proc_list, list) {
3145 if (child->relative_pid == relative_pid &&
William Lallemand8f7069a2019-04-12 16:09:23 +02003146 child->reloads == 0 && child->options & PROC_O_TYPE_WORKER) {
William Lallemand944e6192018-11-21 15:48:31 +01003147 child->timestamp = now.tv_sec;
3148 child->pid = ret;
William Lallemand1dc69632019-06-12 19:11:33 +02003149 child->version = strdup(haproxy_version);
William Lallemand944e6192018-11-21 15:48:31 +01003150 break;
3151 }
William Lallemandce83b4a2018-10-26 14:47:30 +02003152 }
3153 }
William Lallemandbc193052018-09-11 10:06:26 +02003154
William Lallemand944e6192018-11-21 15:48:31 +01003155 relative_pid++; /* each child will get a different one */
3156 pid_bit <<= 1;
3157 }
3158 } else {
3159 /* wait mode */
3160 global.nbproc = 1;
3161 proc = 1;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003162 }
Willy Tarreaufc6c0322012-11-16 16:12:27 +01003163
3164#ifdef USE_CPU_AFFINITY
3165 if (proc < global.nbproc && /* child */
Willy Tarreauff9c9142019-02-07 10:39:36 +01003166 proc < MAX_PROCS && /* only the first 32/64 processes may be pinned */
Amaury Denoyellefc6ac532021-04-27 10:46:36 +02003167 ha_cpuset_count(&cpu_map.proc[proc])) { /* only do this if the process has a CPU map */
Olivier Houchard97148f62017-08-16 17:29:11 +02003168
Amaury Denoyelle982fb532021-04-21 18:39:58 +02003169#ifdef __FreeBSD__
Amaury Denoyellefc6ac532021-04-27 10:46:36 +02003170 struct hap_cpuset *set = &cpu_map.proc[proc];
Amaury Denoyelle982fb532021-04-21 18:39:58 +02003171 ret = cpuset_setaffinity(CPU_LEVEL_WHICH, CPU_WHICH_PID, -1, sizeof(set->cpuset), &set->cpuset);
David Carlier2d0493a2020-12-02 21:14:51 +00003172#elif defined(__linux__) || defined(__DragonFly__)
Amaury Denoyellefc6ac532021-04-27 10:46:36 +02003173 struct hap_cpuset *set = &cpu_map.proc[proc];
Amaury Denoyelle982fb532021-04-21 18:39:58 +02003174 sched_setaffinity(0, sizeof(set->cpuset), &set->cpuset);
Willy Tarreaufc6c0322012-11-16 16:12:27 +01003175#endif
Amaury Denoyelle982fb532021-04-21 18:39:58 +02003176 }
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +02003177#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +02003178 /* close the pidfile both in children and father */
Willy Tarreau269ab312012-09-05 08:02:48 +02003179 if (pidfd >= 0) {
3180 //lseek(pidfd, 0, SEEK_SET); /* debug: emulate eglibc bug */
3181 close(pidfd);
3182 }
Willy Tarreaud137dd32010-08-25 12:49:05 +02003183
3184 /* We won't ever use this anymore */
Willy Tarreau61cfdf42021-02-20 10:46:51 +01003185 ha_free(&global.pidfile);
Willy Tarreaubaaee002006-06-26 02:48:02 +02003186
Willy Tarreauedaff0a2015-05-01 17:01:08 +02003187 if (proc == global.nbproc) {
William Lallemand944e6192018-11-21 15:48:31 +01003188 if (global.mode & (MODE_MWORKER|MODE_MWORKER_WAIT)) {
PiBa-NLbaf6ea42017-11-28 23:26:08 +01003189
3190 if ((!(global.mode & MODE_QUIET) || (global.mode & MODE_VERBOSE)) &&
3191 (global.mode & MODE_DAEMON)) {
3192 /* detach from the tty, this is required to properly daemonize. */
William Lallemande1340412017-12-28 16:09:36 +01003193 if ((getenv("HAPROXY_MWORKER_REEXEC") == NULL))
3194 stdio_quiet(-1);
3195
PiBa-NLbaf6ea42017-11-28 23:26:08 +01003196 global.mode &= ~MODE_VERBOSE;
3197 global.mode |= MODE_QUIET; /* ensure that we won't say anything from now */
PiBa-NLbaf6ea42017-11-28 23:26:08 +01003198 }
3199
William Lallemandb3f2be32018-09-11 10:06:18 +02003200 mworker_loop();
William Lallemand1499b9b2017-06-07 15:04:47 +02003201 /* should never get there */
3202 exit(EXIT_FAILURE);
Willy Tarreauedaff0a2015-05-01 17:01:08 +02003203 }
William Lallemandcf4e4962017-06-08 19:05:48 +02003204#if defined(USE_OPENSSL) && !defined(OPENSSL_NO_DH)
Grant Zhang872f9c22017-01-21 01:10:18 +00003205 ssl_free_dh();
3206#endif
William Lallemand1499b9b2017-06-07 15:04:47 +02003207 exit(0); /* parent must leave */
Willy Tarreauedaff0a2015-05-01 17:01:08 +02003208 }
3209
William Lallemandcb11fd22017-06-01 17:38:52 +02003210 /* child must never use the atexit function */
3211 atexit_flag = 0;
3212
William Lallemandbc193052018-09-11 10:06:26 +02003213 /* close useless master sockets */
3214 if (global.mode & MODE_MWORKER) {
3215 struct mworker_proc *child, *it;
3216 master = 0;
3217
William Lallemand309dc9a2018-10-26 14:47:45 +02003218 mworker_cli_proxy_stop();
3219
William Lallemandbc193052018-09-11 10:06:26 +02003220 /* free proc struct of other processes */
3221 list_for_each_entry_safe(child, it, &proc_list, list) {
William Lallemandce83b4a2018-10-26 14:47:30 +02003222 /* close the FD of the master side for all
3223 * workers, we don't need to close the worker
3224 * side of other workers since it's done with
3225 * the bind_proc */
Tim Duesterhus742e0f92018-11-25 20:03:39 +01003226 if (child->ipc_fd[0] >= 0)
3227 close(child->ipc_fd[0]);
William Lallemandce83b4a2018-10-26 14:47:30 +02003228 if (child->relative_pid == relative_pid &&
3229 child->reloads == 0) {
3230 /* keep this struct if this is our pid */
3231 proc_self = child;
William Lallemandbc193052018-09-11 10:06:26 +02003232 continue;
William Lallemandce83b4a2018-10-26 14:47:30 +02003233 }
Willy Tarreau2b718102021-04-21 07:32:39 +02003234 LIST_DELETE(&child->list);
Tim Duesterhus9b7a9762019-05-16 20:23:22 +02003235 mworker_free_child(child);
3236 child = NULL;
William Lallemandbc193052018-09-11 10:06:26 +02003237 }
3238 }
Willy Tarreau1605c7a2018-01-23 19:01:49 +01003239
William Lallemande1340412017-12-28 16:09:36 +01003240 if (!(global.mode & MODE_QUIET) || (global.mode & MODE_VERBOSE)) {
3241 devnullfd = open("/dev/null", O_RDWR, 0);
3242 if (devnullfd < 0) {
3243 ha_alert("Cannot open /dev/null\n");
3244 exit(EXIT_FAILURE);
3245 }
3246 }
3247
William Lallemand095ba4c2017-06-01 17:38:50 +02003248 /* Must chroot and setgid/setuid in the children */
3249 /* chroot if needed */
3250 if (global.chroot != NULL) {
3251 if (chroot(global.chroot) == -1 || chdir("/") == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003252 ha_alert("[%s.main()] Cannot chroot1(%s).\n", argv[0], global.chroot);
William Lallemand095ba4c2017-06-01 17:38:50 +02003253 if (nb_oldpids)
3254 tell_old_pids(SIGTTIN);
3255 protocol_unbind_all();
3256 exit(1);
3257 }
3258 }
3259
Willy Tarreau61cfdf42021-02-20 10:46:51 +01003260 ha_free(&global.chroot);
William Dauchyf9af9d72019-11-17 15:47:16 +01003261 set_identity(argv[0]);
William Lallemand095ba4c2017-06-01 17:38:50 +02003262
William Lallemand7f80eb22017-05-26 18:19:55 +02003263 /* pass through every cli socket, and check if it's bound to
3264 * the current process and if it exposes listeners sockets.
3265 * Caution: the GTUNE_SOCKET_TRANSFER is now set after the fork.
3266 * */
3267
Willy Tarreau4975d142021-03-13 11:00:33 +01003268 if (global.cli_fe) {
William Lallemand7f80eb22017-05-26 18:19:55 +02003269 struct bind_conf *bind_conf;
3270
Willy Tarreau4975d142021-03-13 11:00:33 +01003271 list_for_each_entry(bind_conf, &global.cli_fe->conf.bind, by_fe) {
William Lallemand7f80eb22017-05-26 18:19:55 +02003272 if (bind_conf->level & ACCESS_FD_LISTENERS) {
Willy Tarreaue26993c2020-09-03 07:18:55 +02003273 if (!bind_conf->settings.bind_proc || bind_conf->settings.bind_proc & (1UL << proc)) {
William Lallemand7f80eb22017-05-26 18:19:55 +02003274 global.tune.options |= GTUNE_SOCKET_TRANSFER;
3275 break;
3276 }
3277 }
3278 }
3279 }
3280
Willy Tarreau0b9c02c2009-02-04 22:05:05 +01003281 /* we might have to unbind some proxies from some processes */
Olivier Houchardfbc74e82017-11-24 16:54:05 +01003282 px = proxies_list;
Willy Tarreau0b9c02c2009-02-04 22:05:05 +01003283 while (px != NULL) {
Willy Tarreauc3914d42020-09-24 08:39:22 +02003284 if (px->bind_proc && !px->disabled) {
Willy Tarreau337c8352020-09-24 10:51:29 +02003285 if (!(px->bind_proc & (1UL << proc)))
3286 stop_proxy(px);
Willy Tarreau0b9c02c2009-02-04 22:05:05 +01003287 }
3288 px = px->next;
3289 }
3290
Emeric Brunc47ba592020-10-07 10:13:10 +02003291 /* we might have to unbind some log forward proxies from some processes */
3292 px = cfg_log_forward;
3293 while (px != NULL) {
Willy Tarreauc3914d42020-09-24 08:39:22 +02003294 if (px->bind_proc && !px->disabled) {
Willy Tarreau337c8352020-09-24 10:51:29 +02003295 if (!(px->bind_proc & (1UL << proc)))
3296 stop_proxy(px);
Emeric Brunc47ba592020-10-07 10:13:10 +02003297 }
3298 px = px->next;
3299 }
3300
Willy Tarreauf83d3fe2015-05-01 19:13:41 +02003301 /* we might have to unbind some peers sections from some processes */
Frédéric Lécailleed2b4a62017-07-13 09:07:09 +02003302 for (curpeers = cfg_peers; curpeers; curpeers = curpeers->next) {
Willy Tarreauf83d3fe2015-05-01 19:13:41 +02003303 if (!curpeers->peers_fe)
3304 continue;
3305
3306 if (curpeers->peers_fe->bind_proc & (1UL << proc))
3307 continue;
3308
3309 stop_proxy(curpeers->peers_fe);
3310 /* disable this peer section so that it kills itself */
Willy Tarreau47c8c022015-09-28 16:39:25 +02003311 signal_unregister_handler(curpeers->sighandler);
Olivier Houchard3f795f72019-04-17 22:51:06 +02003312 task_destroy(curpeers->sync_task);
Willy Tarreau47c8c022015-09-28 16:39:25 +02003313 curpeers->sync_task = NULL;
Olivier Houchard3f795f72019-04-17 22:51:06 +02003314 task_destroy(curpeers->peers_fe->task);
Willy Tarreau47c8c022015-09-28 16:39:25 +02003315 curpeers->peers_fe->task = NULL;
Willy Tarreauf83d3fe2015-05-01 19:13:41 +02003316 curpeers->peers_fe = NULL;
3317 }
3318
William Lallemand2e8fad92018-11-13 16:18:23 +01003319 /*
3320 * This is only done in daemon mode because we might want the
3321 * logs on stdout in mworker mode. If we're NOT in QUIET mode,
3322 * we should now close the 3 first FDs to ensure that we can
3323 * detach from the TTY. We MUST NOT do it in other cases since
3324 * it would have already be done, and 0-2 would have been
3325 * affected to listening sockets
Willy Tarreaubaaee002006-06-26 02:48:02 +02003326 */
William Lallemand2e8fad92018-11-13 16:18:23 +01003327 if ((global.mode & MODE_DAEMON) &&
3328 (!(global.mode & MODE_QUIET) || (global.mode & MODE_VERBOSE))) {
Willy Tarreaubaaee002006-06-26 02:48:02 +02003329 /* detach from the tty */
William Lallemande1340412017-12-28 16:09:36 +01003330 stdio_quiet(devnullfd);
Willy Tarreau106cb762008-11-16 07:40:34 +01003331 global.mode &= ~MODE_VERBOSE;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003332 global.mode |= MODE_QUIET; /* ensure that we won't say anything from now */
3333 }
3334 pid = getpid(); /* update child's pid */
William Lallemandbfd8eb52018-07-04 15:31:23 +02003335 if (!(global.mode & MODE_MWORKER)) /* in mworker mode we don't want a new pgid for the children */
3336 setsid();
Willy Tarreau2ff76222007-04-09 19:29:56 +02003337 fork_poller();
Willy Tarreaubaaee002006-06-26 02:48:02 +02003338 }
3339
William Dauchye039f262019-11-17 15:47:15 +01003340 /* try our best to re-enable core dumps depending on system capabilities.
3341 * What is addressed here :
3342 * - remove file size limits
3343 * - remove core size limits
3344 * - mark the process dumpable again if it lost it due to user/group
3345 */
3346 if (global.tune.options & GTUNE_SET_DUMPABLE) {
3347 limit.rlim_cur = limit.rlim_max = RLIM_INFINITY;
3348
3349#if defined(RLIMIT_FSIZE)
3350 if (setrlimit(RLIMIT_FSIZE, &limit) == -1) {
3351 if (global.tune.options & GTUNE_STRICT_LIMITS) {
3352 ha_alert("[%s.main()] Failed to set the raise the maximum "
3353 "file size.\n", argv[0]);
Jerome Magnin50f757c2021-01-12 20:19:38 +01003354 exit(1);
William Dauchye039f262019-11-17 15:47:15 +01003355 }
3356 else
3357 ha_warning("[%s.main()] Failed to set the raise the maximum "
William Dauchya5194602020-03-28 19:29:58 +01003358 "file size.\n", argv[0]);
William Dauchye039f262019-11-17 15:47:15 +01003359 }
3360#endif
3361
3362#if defined(RLIMIT_CORE)
3363 if (setrlimit(RLIMIT_CORE, &limit) == -1) {
3364 if (global.tune.options & GTUNE_STRICT_LIMITS) {
3365 ha_alert("[%s.main()] Failed to set the raise the core "
3366 "dump size.\n", argv[0]);
Jerome Magnin50f757c2021-01-12 20:19:38 +01003367 exit(1);
William Dauchye039f262019-11-17 15:47:15 +01003368 }
3369 else
3370 ha_warning("[%s.main()] Failed to set the raise the core "
William Dauchya5194602020-03-28 19:29:58 +01003371 "dump size.\n", argv[0]);
William Dauchye039f262019-11-17 15:47:15 +01003372 }
3373#endif
3374
3375#if defined(USE_PRCTL)
3376 if (prctl(PR_SET_DUMPABLE, 1, 0, 0, 0) == -1)
3377 ha_warning("[%s.main()] Failed to set the dumpable flag, "
3378 "no core will be dumped.\n", argv[0]);
3379#endif
3380 }
3381
Christopher Faulete3a5e352017-10-24 13:53:54 +02003382 global.mode &= ~MODE_STARTING;
Willy Tarreau4f60f162007-04-08 16:39:58 +02003383 /*
3384 * That's it : the central polling loop. Run until we stop.
3385 */
Christopher Faulet1d17c102017-08-29 15:38:48 +02003386#ifdef USE_THREAD
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003387 {
William Lallemand1aab50b2018-06-07 09:46:01 +02003388 sigset_t blocked_sig, old_sig;
Willy Tarreauc40efc12019-05-03 09:22:44 +02003389 int i;
3390
William Lallemand1aab50b2018-06-07 09:46:01 +02003391 /* ensure the signals will be blocked in every thread */
3392 sigfillset(&blocked_sig);
3393 sigdelset(&blocked_sig, SIGPROF);
3394 sigdelset(&blocked_sig, SIGBUS);
3395 sigdelset(&blocked_sig, SIGFPE);
3396 sigdelset(&blocked_sig, SIGILL);
3397 sigdelset(&blocked_sig, SIGSEGV);
3398 pthread_sigmask(SIG_SETMASK, &blocked_sig, &old_sig);
3399
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003400 /* Create nbthread-1 thread. The first thread is the current process */
David Carliera92c5ce2019-09-13 05:03:12 +01003401 ha_thread_info[0].pthread = pthread_self();
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003402 for (i = 1; i < global.nbthread; i++)
David Carliera92c5ce2019-09-13 05:03:12 +01003403 pthread_create(&ha_thread_info[i].pthread, NULL, &run_thread_poll_loop, (void *)(long)i);
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003404
Christopher Faulet62519022017-10-16 15:49:32 +02003405#ifdef USE_CPU_AFFINITY
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003406 /* Now the CPU affinity for all threads */
Amaury Denoyelleaf02c572021-04-15 16:29:58 +02003407
3408 /* If on multiprocess, use proc_t1 except for the first process.
3409 */
3410 if ((relative_pid - 1) > 0)
Amaury Denoyellefc6ac532021-04-27 10:46:36 +02003411 cpu_map.thread[0] = cpu_map.proc_t1[relative_pid-1];
Willy Tarreau7764a572019-07-16 15:10:34 +02003412
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003413 for (i = 0; i < global.nbthread; i++) {
Amaury Denoyellefc6ac532021-04-27 10:46:36 +02003414 if (ha_cpuset_count(&cpu_map.proc[relative_pid-1]))
3415 ha_cpuset_and(&cpu_map.thread[i], &cpu_map.proc[relative_pid-1]);
Christopher Faulet62519022017-10-16 15:49:32 +02003416
Willy Tarreau421f02e2018-01-20 18:19:22 +01003417 if (i < MAX_THREADS && /* only the first 32/64 threads may be pinned */
Amaury Denoyellefc6ac532021-04-27 10:46:36 +02003418 ha_cpuset_count(&cpu_map.thread[i])) {/* only do this if the thread has a THREAD map */
David Carlier5e4c8e22019-09-13 05:12:58 +01003419#if defined(__APPLE__)
3420 int j;
Amaury Denoyelle8f685c12021-04-27 16:45:29 +02003421 unsigned long set = cpu_map.thread[i].cpuset;
David Carlier5e4c8e22019-09-13 05:12:58 +01003422
Amaury Denoyelle8f685c12021-04-27 16:45:29 +02003423 while ((j = ffsl(set)) > 0) {
David Carlier5e4c8e22019-09-13 05:12:58 +01003424 thread_affinity_policy_data_t cpu_set = { j - 1 };
3425 thread_port_t mthread = pthread_mach_thread_np(ha_thread_info[i].pthread);
3426 thread_policy_set(mthread, THREAD_AFFINITY_POLICY, (thread_policy_t)&cpu_set, 1);
Amaury Denoyelle8f685c12021-04-27 16:45:29 +02003427 set &= ~(1UL << (j - 1));
David Carlier5e4c8e22019-09-13 05:12:58 +01003428 }
3429#else
Amaury Denoyellefc6ac532021-04-27 10:46:36 +02003430 struct hap_cpuset *set = &cpu_map.thread[i];
David Carliera92c5ce2019-09-13 05:03:12 +01003431 pthread_setaffinity_np(ha_thread_info[i].pthread,
Amaury Denoyelle982fb532021-04-21 18:39:58 +02003432 sizeof(set->cpuset), &set->cpuset);
David Carlier5e4c8e22019-09-13 05:12:58 +01003433#endif
Olivier Houchard829aa242017-12-01 18:19:43 +01003434 }
Christopher Faulet1d17c102017-08-29 15:38:48 +02003435 }
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003436#endif /* !USE_CPU_AFFINITY */
3437
William Lallemand1aab50b2018-06-07 09:46:01 +02003438 /* when multithreading we need to let only the thread 0 handle the signals */
William Lallemandd3801c12018-09-11 10:06:23 +02003439 haproxy_unblock_signals();
William Lallemand1aab50b2018-06-07 09:46:01 +02003440
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003441 /* Finally, start the poll loop for the first thread */
Willy Tarreaub4f7cc32019-05-03 09:27:30 +02003442 run_thread_poll_loop(0);
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003443
3444 /* Wait the end of other threads */
3445 for (i = 1; i < global.nbthread; i++)
David Carliera92c5ce2019-09-13 05:03:12 +01003446 pthread_join(ha_thread_info[i].pthread, NULL);
Christopher Faulet1d17c102017-08-29 15:38:48 +02003447
Christopher Fauletb79a94c2017-05-30 15:34:30 +02003448#if defined(DEBUG_THREAD) || defined(DEBUG_FULL)
3449 show_lock_stats();
3450#endif
Christopher Faulet1d17c102017-08-29 15:38:48 +02003451 }
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003452#else /* ! USE_THREAD */
William Lallemandd3801c12018-09-11 10:06:23 +02003453 haproxy_unblock_signals();
Willy Tarreaub4f7cc32019-05-03 09:27:30 +02003454 run_thread_poll_loop(0);
Christopher Faulet62519022017-10-16 15:49:32 +02003455#endif
Christopher Faulet1d17c102017-08-29 15:38:48 +02003456
Tim Duesterhus0a3b43d2020-06-14 00:37:42 +02003457 deinit_and_exit(0);
Willy Tarreaubaaee002006-06-26 02:48:02 +02003458}
3459
Willy Tarreaubaaee002006-06-26 02:48:02 +02003460/*
3461 * Local variables:
3462 * c-indent-level: 8
3463 * c-basic-offset: 8
3464 * End:
3465 */