blob: c6e022a4f7b9e4da3f6041609e4407cbd2d5f292 [file] [log] [blame]
Willy Tarreaubaaee002006-06-26 02:48:02 +02001/*
2 * HA-Proxy : High Availability-enabled HTTP/TCP proxy
Willy Tarreaud8498662020-02-13 07:58:50 +01003 * Copyright 2000-2020 Willy Tarreau <willy@haproxy.org>.
Willy Tarreaubaaee002006-06-26 02:48:02 +02004 *
5 * This program is free software; you can redistribute it and/or
6 * modify it under the terms of the GNU General Public License
7 * as published by the Free Software Foundation; either version
8 * 2 of the License, or (at your option) any later version.
9 *
Lukas Tribus23953682017-04-28 13:24:30 +000010 * Please refer to RFC7230 - RFC7235 informations about HTTP protocol, and
11 * RFC6265 for informations about cookies usage. More generally, the IETF HTTP
Willy Tarreaubaaee002006-06-26 02:48:02 +020012 * Working Group's web site should be consulted for protocol related changes :
13 *
14 * http://ftp.ics.uci.edu/pub/ietf/http/
15 *
16 * Pending bugs (may be not fixed because never reproduced) :
17 * - solaris only : sometimes, an HTTP proxy with only a dispatch address causes
18 * the proxy to terminate (no core) if the client breaks the connection during
19 * the response. Seen on 1.1.8pre4, but never reproduced. May not be related to
20 * the snprintf() bug since requests were simple (GET / HTTP/1.0), but may be
21 * related to missing setsid() (fixed in 1.1.15)
22 * - a proxy with an invalid config will prevent the startup even if disabled.
23 *
24 * ChangeLog has moved to the CHANGELOG file.
25 *
Willy Tarreaubaaee002006-06-26 02:48:02 +020026 */
27
David Carlier7ece0962015-12-08 21:43:09 +000028#define _GNU_SOURCE
Willy Tarreaubaaee002006-06-26 02:48:02 +020029#include <stdio.h>
30#include <stdlib.h>
31#include <unistd.h>
32#include <string.h>
33#include <ctype.h>
Maxime de Roucy379d9c72016-05-13 23:52:56 +020034#include <dirent.h>
Maxime de Roucy379d9c72016-05-13 23:52:56 +020035#include <sys/stat.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020036#include <sys/time.h>
37#include <sys/types.h>
38#include <sys/socket.h>
39#include <netinet/tcp.h>
40#include <netinet/in.h>
41#include <arpa/inet.h>
Olivier Houchardf73629d2017-04-05 22:33:04 +020042#include <net/if.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020043#include <netdb.h>
44#include <fcntl.h>
45#include <errno.h>
46#include <signal.h>
47#include <stdarg.h>
48#include <sys/resource.h>
Marc-Antoine Perennou992709b2013-02-12 10:53:52 +010049#include <sys/wait.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020050#include <time.h>
51#include <syslog.h>
Michael Schererab012dd2013-01-12 18:35:19 +010052#include <grp.h>
Willy Tarreaufc6c0322012-11-16 16:12:27 +010053#ifdef USE_CPU_AFFINITY
Willy Tarreaufc6c0322012-11-16 16:12:27 +010054#include <sched.h>
David Carlier42d9e5a2018-11-12 16:22:19 +000055#if defined(__FreeBSD__) || defined(__DragonFly__)
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +020056#include <sys/param.h>
David Carlier42d9e5a2018-11-12 16:22:19 +000057#ifdef __FreeBSD__
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +020058#include <sys/cpuset.h>
David Carlier42d9e5a2018-11-12 16:22:19 +000059#endif
David Carlier6d5c8412017-11-29 11:02:32 +000060#include <pthread_np.h>
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +020061#endif
Willy Tarreaufc6c0322012-11-16 16:12:27 +010062#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +020063
Willy Tarreau636848a2019-04-15 19:38:50 +020064#if defined(USE_PRCTL)
65#include <sys/prctl.h>
66#endif
67
Willy Tarreaubaaee002006-06-26 02:48:02 +020068#ifdef DEBUG_FULL
69#include <assert.h>
70#endif
Tim Duesterhusd6942c82017-11-20 15:58:35 +010071#if defined(USE_SYSTEMD)
72#include <systemd/sd-daemon.h>
73#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +020074
Willy Tarreau4ce41952020-03-06 18:57:15 +010075#include <import/sha1.h>
76
Willy Tarreau2dd0d472006-06-29 17:53:05 +020077#include <common/base64.h>
78#include <common/cfgparse.h>
Willy Tarreauc7e42382012-08-24 19:22:53 +020079#include <common/chunk.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020080#include <common/compat.h>
81#include <common/config.h>
82#include <common/defaults.h>
Willy Tarreaud740bab2007-10-28 11:14:07 +010083#include <common/errors.h>
Willy Tarreau5794fb02018-11-25 18:43:29 +010084#include <common/initcall.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020085#include <common/memory.h>
86#include <common/mini-clist.h>
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +010087#include <common/namespace.h>
Willy Tarreau4ce41952020-03-06 18:57:15 +010088#include <common/net_helper.h>
Willy Tarreauc125cef2019-05-10 09:58:43 +020089#include <common/openssl-compat.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020090#include <common/regex.h>
91#include <common/standard.h>
92#include <common/time.h>
93#include <common/uri_auth.h>
94#include <common/version.h>
Christopher Fauletbe0faa22017-08-29 15:37:10 +020095#include <common/hathreads.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020096
97#include <types/capture.h>
William Lallemandce83b4a2018-10-26 14:47:30 +020098#include <types/cli.h>
Christopher Fauletd7c91962015-04-30 11:48:27 +020099#include <types/filters.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200100#include <types/global.h>
Simon Hormanac821422011-07-15 13:14:09 +0900101#include <types/acl.h>
Willy Tarreau3c63fd82011-09-07 18:00:47 +0200102#include <types/peers.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200103
Willy Tarreau0fc45a72007-06-17 00:36:03 +0200104#include <proto/acl.h>
Willy Tarreau609aad92018-11-22 08:31:09 +0100105#include <proto/activity.h>
Willy Tarreau2e845be2012-10-19 19:49:09 +0200106#include <proto/arg.h>
Willy Tarreau3c595ac2015-04-19 09:59:31 +0200107#include <proto/auth.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200108#include <proto/backend.h>
Willy Tarreauc7e42382012-08-24 19:22:53 +0200109#include <proto/channel.h>
William Lallemandce83b4a2018-10-26 14:47:30 +0200110#include <proto/cli.h>
Willy Tarreauf2943dc2012-10-26 20:10:28 +0200111#include <proto/connection.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200112#include <proto/fd.h>
Christopher Fauletd7c91962015-04-30 11:48:27 +0200113#include <proto/filters.h>
Willy Tarreau34eb6712011-10-24 18:15:04 +0200114#include <proto/hdr_idx.h>
Thierry FOURNIER6f1fd482015-01-23 14:06:13 +0100115#include <proto/hlua.h>
Willy Tarreau61c112a2018-10-02 16:43:32 +0200116#include <proto/http_rules.h>
Willy Tarreaud1d54542012-09-12 22:58:11 +0200117#include <proto/listener.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200118#include <proto/log.h>
William Lallemand48dfbbd2019-04-01 11:29:53 +0200119#include <proto/mworker.h>
Thierry FOURNIERaf5a29d2014-03-11 14:29:22 +0100120#include <proto/pattern.h>
Willy Tarreaud1d54542012-09-12 22:58:11 +0200121#include <proto/protocol.h>
Willy Tarreau80587432006-12-24 17:47:20 +0100122#include <proto/proto_http.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200123#include <proto/proxy.h>
124#include <proto/queue.h>
125#include <proto/server.h>
Willy Tarreaub1ec8c42015-04-03 13:53:24 +0200126#include <proto/session.h>
Willy Tarreau87b09662015-04-03 00:22:06 +0200127#include <proto/stream.h>
Willy Tarreau29857942009-05-10 09:01:21 +0200128#include <proto/signal.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200129#include <proto/task.h>
Baptiste Assmann325137d2015-04-13 23:40:55 +0200130#include <proto/dns.h>
Christopher Fauletff2613e2016-11-09 11:36:17 +0100131#include <proto/vars.h>
Grant Zhang872f9c22017-01-21 01:10:18 +0000132#include <proto/ssl_sock.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200133
Willy Tarreau7b5654f2019-03-29 21:30:17 +0100134/* array of init calls for older platforms */
135DECLARE_INIT_STAGES;
136
Willy Tarreau477ecd82010-01-03 21:12:30 +0100137/* list of config files */
138static struct list cfg_cfgfiles = LIST_HEAD_INIT(cfg_cfgfiles);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200139int pid; /* current process id */
Willy Tarreau28156642007-11-26 16:13:36 +0100140int relative_pid = 1; /* process id starting at 1 */
Willy Tarreau387bd4f2017-11-10 19:08:14 +0100141unsigned long pid_bit = 1; /* bit corresponding to the process id */
Willy Tarreaua38a7172019-02-02 17:11:28 +0100142unsigned long all_proc_mask = 1; /* mask of all processes */
Willy Tarreaubaaee002006-06-26 02:48:02 +0200143
Willy Tarreaub7bd3852020-03-12 17:24:53 +0100144volatile unsigned long sleeping_thread_mask = 0; /* Threads that are about to sleep in poll() */
Willy Tarreauaf6be6f2020-03-12 17:28:01 +0100145volatile unsigned long stopping_thread_mask = 0; /* Threads acknowledged stopping */
Willy Tarreaub7bd3852020-03-12 17:24:53 +0100146
Willy Tarreaubaaee002006-06-26 02:48:02 +0200147/* global options */
148struct global global = {
Cyril Bonté203ec5a2017-03-23 22:44:13 +0100149 .hard_stop_after = TICK_ETERNITY,
Willy Tarreau247a13a2012-11-15 17:38:15 +0100150 .nbproc = 1,
Willy Tarreau149ab772019-01-26 14:27:06 +0100151 .nbthread = 0,
William Lallemand5f232402012-04-05 18:02:55 +0200152 .req_count = 0,
William Lallemand0f99e342011-10-12 17:50:54 +0200153 .logsrvs = LIST_HEAD_INIT(global.logsrvs),
William Lallemand9d5f5482012-11-07 16:12:57 +0100154 .maxzlibmem = 0,
William Lallemandd85f9172012-11-09 17:05:39 +0100155 .comp_rate_lim = 0,
Emeric Brun850efd52014-01-29 12:24:34 +0100156 .ssl_server_verify = SSL_SERVER_VERIFY_REQUIRED,
Emeric Bruned760922010-10-22 17:59:25 +0200157 .unix_bind = {
158 .ux = {
159 .uid = -1,
160 .gid = -1,
161 .mode = 0,
162 }
163 },
Willy Tarreau27a674e2009-08-17 07:23:33 +0200164 .tune = {
Willy Tarreau7ac908b2019-02-27 12:02:18 +0100165 .options = GTUNE_LISTENER_MQ,
Willy Tarreauc77d3642018-12-12 06:19:42 +0100166 .bufsize = (BUFSIZE + 2*sizeof(void *) - 1) & -(2*sizeof(void *)),
Willy Tarreau27097842015-09-28 13:53:23 +0200167 .maxrewrite = -1,
Willy Tarreauc77d3642018-12-12 06:19:42 +0100168 .chksize = (BUFSIZE + 2*sizeof(void *) - 1) & -(2*sizeof(void *)),
Willy Tarreaua24adf02014-11-27 01:11:56 +0100169 .reserved_bufs = RESERVED_BUFS,
Willy Tarreauf3045d22015-04-29 16:24:50 +0200170 .pattern_cache = DEFAULT_PAT_LRU_SIZE,
Olivier Houchard88698d92019-04-16 19:07:22 +0200171 .pool_low_ratio = 20,
172 .pool_high_ratio = 25,
Emeric Brunfc32aca2012-09-03 12:10:29 +0200173#ifdef USE_OPENSSL
Emeric Brun46635772012-11-14 11:32:56 +0100174 .sslcachesize = SSLCACHESIZE,
Emeric Brunfc32aca2012-09-03 12:10:29 +0200175#endif
William Lallemandf3747832012-11-09 12:33:10 +0100176 .comp_maxlevel = 1,
Willy Tarreau7e312732014-02-12 16:35:14 +0100177#ifdef DEFAULT_IDLE_TIMER
178 .idle_timer = DEFAULT_IDLE_TIMER,
179#else
180 .idle_timer = 1000, /* 1 second */
181#endif
Willy Tarreau27a674e2009-08-17 07:23:33 +0200182 },
Emeric Brun76d88952012-10-05 15:47:31 +0200183#ifdef USE_OPENSSL
184#ifdef DEFAULT_MAXSSLCONN
Willy Tarreau403edff2012-09-06 11:58:37 +0200185 .maxsslconn = DEFAULT_MAXSSLCONN,
186#endif
Emeric Brun76d88952012-10-05 15:47:31 +0200187#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +0200188 /* others NULL OK */
189};
190
191/*********************************************************************/
192
193int stopping; /* non zero means stopping in progress */
Cyril Bonté203ec5a2017-03-23 22:44:13 +0100194int killed; /* non zero means a hard-stop is triggered */
Willy Tarreauaf7ad002010-08-31 15:39:26 +0200195int jobs = 0; /* number of active jobs (conns, listeners, active tasks, ...) */
William Lallemanda7199262018-11-16 16:57:20 +0100196int unstoppable_jobs = 0; /* number of active jobs that can't be stopped during a soft stop */
Willy Tarreau199ad242018-11-05 16:31:22 +0100197int active_peers = 0; /* number of active peers (connection attempts and connected) */
Willy Tarreau2d372c22018-11-05 17:12:27 +0100198int connected_peers = 0; /* number of connected peers (verified ones) */
Willy Tarreaubaaee002006-06-26 02:48:02 +0200199
200/* Here we store informations about the pids of the processes we may pause
201 * or kill. We will send them a signal every 10 ms until we can bind to all
202 * our ports. With 200 retries, that's about 2 seconds.
203 */
204#define MAX_START_RETRIES 200
Willy Tarreaubaaee002006-06-26 02:48:02 +0200205static int *oldpids = NULL;
206static int oldpids_sig; /* use USR1 or TERM */
207
Olivier Houchardf73629d2017-04-05 22:33:04 +0200208/* Path to the unix socket we use to retrieve listener sockets from the old process */
209static const char *old_unixsocket;
210
William Lallemand85b0bd92017-06-01 17:38:53 +0200211static char *cur_unixsocket = NULL;
212
William Lallemandcb11fd22017-06-01 17:38:52 +0200213int atexit_flag = 0;
214
Willy Tarreaubb545b42010-08-25 12:58:59 +0200215int nb_oldpids = 0;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200216const int zero = 0;
217const int one = 1;
Alexandre Cassen87ea5482007-10-11 20:48:58 +0200218const struct linger nolinger = { .l_onoff = 1, .l_linger = 0 };
Willy Tarreaubaaee002006-06-26 02:48:02 +0200219
Willy Tarreau1d21e0a2010-03-12 21:58:54 +0100220char hostname[MAX_HOSTNAME_LEN];
Emeric Brun2b920a12010-09-23 18:30:22 +0200221char localpeer[MAX_HOSTNAME_LEN];
Willy Tarreaubaaee002006-06-26 02:48:02 +0200222
Willy Tarreau89efaed2013-12-13 15:14:55 +0100223/* used from everywhere just to drain results we don't want to read and which
224 * recent versions of gcc increasingly and annoyingly complain about.
225 */
226int shut_your_big_mouth_gcc_int = 0;
227
William Lallemand73b85e72017-06-01 17:38:51 +0200228static char **next_argv = NULL;
229
William Lallemandbc193052018-09-11 10:06:26 +0200230struct list proc_list = LIST_HEAD_INIT(proc_list);
231
232int master = 0; /* 1 if in master, 0 if in child */
Willy Tarreaubf696402019-03-01 10:09:28 +0100233unsigned int rlim_fd_cur_at_boot = 0;
234unsigned int rlim_fd_max_at_boot = 0;
William Lallemandbc193052018-09-11 10:06:26 +0200235
Willy Tarreau4ce41952020-03-06 18:57:15 +0100236/* per-boot randomness */
237unsigned char boot_seed[20]; /* per-boot random seed (160 bits initially) */
238
William Lallemand16dd1b32018-11-19 18:46:18 +0100239struct mworker_proc *proc_self = NULL;
William Lallemandbc193052018-09-11 10:06:26 +0200240
Willy Tarreau08ceb102011-07-24 22:58:00 +0200241/* list of the temporarily limited listeners because of lack of resource */
242struct list global_listener_queue = LIST_HEAD_INIT(global_listener_queue);
Willy Tarreaue9b26022011-08-01 20:57:55 +0200243struct task *global_listener_queue_task;
Olivier Houchard9f6af332018-05-25 14:04:04 +0200244static struct task *manage_global_listener_queue(struct task *t, void *context, unsigned short state);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200245
William Lallemandb3f2be32018-09-11 10:06:18 +0200246static void *run_thread_poll_loop(void *data);
247
Willy Tarreauff055502014-04-28 22:27:06 +0200248/* bitfield of a few warnings to emit just once (WARN_*) */
249unsigned int warned = 0;
250
William Lallemande7361152018-10-26 14:47:36 +0200251/* master CLI configuration (-S flag) */
252struct list mworker_cli_conf = LIST_HEAD_INIT(mworker_cli_conf);
Willy Tarreaucdb737e2016-12-21 18:43:10 +0100253
254/* These are strings to be reported in the output of "haproxy -vv". They may
255 * either be constants (in which case must_free must be zero) or dynamically
256 * allocated strings to pass to free() on exit, and in this case must_free
257 * must be non-zero.
258 */
259struct list build_opts_list = LIST_HEAD_INIT(build_opts_list);
260struct build_opts_str {
261 struct list list;
262 const char *str;
263 int must_free;
264};
265
Willy Tarreaue6945732016-12-21 19:57:00 +0100266/* These functions are called just after the point where the program exits
267 * after a config validity check, so they are generally suited for resource
268 * allocation and slow initializations that should be skipped during basic
269 * config checks. The functions must return 0 on success, or a combination
270 * of ERR_* flags (ERR_WARN, ERR_ABORT, ERR_FATAL, ...). The 2 latter cause
271 * and immediate exit, so the function must have emitted any useful error.
272 */
273struct list post_check_list = LIST_HEAD_INIT(post_check_list);
274struct post_check_fct {
275 struct list list;
276 int (*fct)();
277};
278
Willy Tarreau082b6282019-05-22 14:42:12 +0200279/* These functions are called for each thread just after the thread creation
280 * and before running the init functions. They should be used to do per-thread
281 * (re-)allocations that are needed by subsequent functoins. They must return 0
282 * if an error occurred. */
283struct list per_thread_alloc_list = LIST_HEAD_INIT(per_thread_alloc_list);
284struct per_thread_alloc_fct {
Willy Tarreau05554e62016-12-21 20:46:26 +0100285 struct list list;
Willy Tarreau082b6282019-05-22 14:42:12 +0200286 int (*fct)();
Willy Tarreau05554e62016-12-21 20:46:26 +0100287};
288
Christopher Faulet415f6112017-07-25 16:52:58 +0200289/* These functions are called for each thread just after the thread creation
290 * and before running the scheduler. They should be used to do per-thread
291 * initializations. They must return 0 if an error occurred. */
292struct list per_thread_init_list = LIST_HEAD_INIT(per_thread_init_list);
293struct per_thread_init_fct {
294 struct list list;
295 int (*fct)();
296};
297
Willy Tarreau082b6282019-05-22 14:42:12 +0200298/* These functions are called when freeing the global sections at the end of
299 * deinit, after everything is stopped. They don't return anything. They should
300 * not release shared resources that are possibly used by other deinit
301 * functions, only close/release what is private. Use the per_thread_free_list
302 * to release shared resources.
303 */
304struct list post_deinit_list = LIST_HEAD_INIT(post_deinit_list);
305struct post_deinit_fct {
306 struct list list;
307 void (*fct)();
308};
309
310/* These functions are called when freeing the global sections at the end of
311 * deinit, after the thread deinit functions, to release unneeded memory
312 * allocations. They don't return anything, and they work in best effort mode
313 * as their sole goal is to make valgrind mostly happy.
314 */
315struct list per_thread_free_list = LIST_HEAD_INIT(per_thread_free_list);
316struct per_thread_free_fct {
317 struct list list;
318 int (*fct)();
319};
320
Christopher Faulet415f6112017-07-25 16:52:58 +0200321/* These functions are called for each thread just after the scheduler loop and
322 * before exiting the thread. They don't return anything and, as for post-deinit
323 * functions, they work in best effort mode as their sole goal is to make
324 * valgrind mostly happy. */
325struct list per_thread_deinit_list = LIST_HEAD_INIT(per_thread_deinit_list);
326struct per_thread_deinit_fct {
327 struct list list;
328 void (*fct)();
329};
330
Willy Tarreaubaaee002006-06-26 02:48:02 +0200331/*********************************************************************/
332/* general purpose functions ***************************************/
333/*********************************************************************/
334
Willy Tarreaucdb737e2016-12-21 18:43:10 +0100335/* used to register some build option strings at boot. Set must_free to
336 * non-zero if the string must be freed upon exit.
337 */
338void hap_register_build_opts(const char *str, int must_free)
339{
340 struct build_opts_str *b;
341
342 b = calloc(1, sizeof(*b));
343 if (!b) {
344 fprintf(stderr, "out of memory\n");
345 exit(1);
346 }
347 b->str = str;
348 b->must_free = must_free;
349 LIST_ADDQ(&build_opts_list, &b->list);
350}
351
Willy Tarreaue6945732016-12-21 19:57:00 +0100352/* used to register some initialization functions to call after the checks. */
353void hap_register_post_check(int (*fct)())
354{
355 struct post_check_fct *b;
356
357 b = calloc(1, sizeof(*b));
358 if (!b) {
359 fprintf(stderr, "out of memory\n");
360 exit(1);
361 }
362 b->fct = fct;
363 LIST_ADDQ(&post_check_list, &b->list);
364}
365
Willy Tarreau05554e62016-12-21 20:46:26 +0100366/* used to register some de-initialization functions to call after everything
367 * has stopped.
368 */
369void hap_register_post_deinit(void (*fct)())
370{
371 struct post_deinit_fct *b;
372
373 b = calloc(1, sizeof(*b));
374 if (!b) {
375 fprintf(stderr, "out of memory\n");
376 exit(1);
377 }
378 b->fct = fct;
379 LIST_ADDQ(&post_deinit_list, &b->list);
380}
381
Willy Tarreau082b6282019-05-22 14:42:12 +0200382/* used to register some allocation functions to call for each thread. */
383void hap_register_per_thread_alloc(int (*fct)())
384{
385 struct per_thread_alloc_fct *b;
386
387 b = calloc(1, sizeof(*b));
388 if (!b) {
389 fprintf(stderr, "out of memory\n");
390 exit(1);
391 }
392 b->fct = fct;
393 LIST_ADDQ(&per_thread_alloc_list, &b->list);
394}
395
Christopher Faulet415f6112017-07-25 16:52:58 +0200396/* used to register some initialization functions to call for each thread. */
397void hap_register_per_thread_init(int (*fct)())
398{
399 struct per_thread_init_fct *b;
400
401 b = calloc(1, sizeof(*b));
402 if (!b) {
403 fprintf(stderr, "out of memory\n");
404 exit(1);
405 }
406 b->fct = fct;
407 LIST_ADDQ(&per_thread_init_list, &b->list);
408}
409
410/* used to register some de-initialization functions to call for each thread. */
411void hap_register_per_thread_deinit(void (*fct)())
412{
413 struct per_thread_deinit_fct *b;
414
415 b = calloc(1, sizeof(*b));
416 if (!b) {
417 fprintf(stderr, "out of memory\n");
418 exit(1);
419 }
420 b->fct = fct;
421 LIST_ADDQ(&per_thread_deinit_list, &b->list);
422}
423
Willy Tarreau082b6282019-05-22 14:42:12 +0200424/* used to register some free functions to call for each thread. */
425void hap_register_per_thread_free(int (*fct)())
426{
427 struct per_thread_free_fct *b;
428
429 b = calloc(1, sizeof(*b));
430 if (!b) {
431 fprintf(stderr, "out of memory\n");
432 exit(1);
433 }
434 b->fct = fct;
435 LIST_ADDQ(&per_thread_free_list, &b->list);
436}
437
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100438static void display_version()
Willy Tarreaubaaee002006-06-26 02:48:02 +0200439{
Willy Tarreau909b9d82019-01-04 18:20:32 +0100440 printf("HA-Proxy version %s %s - https://haproxy.org/\n", haproxy_version, haproxy_date);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200441}
442
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100443static void display_build_opts()
Willy Tarreau7b066db2007-12-02 11:28:59 +0100444{
Willy Tarreaucdb737e2016-12-21 18:43:10 +0100445 struct build_opts_str *item;
446
Willy Tarreau7b066db2007-12-02 11:28:59 +0100447 printf("Build options :"
448#ifdef BUILD_TARGET
Willy Tarreau9f2b7302008-01-02 20:48:34 +0100449 "\n TARGET = " BUILD_TARGET
Willy Tarreau7b066db2007-12-02 11:28:59 +0100450#endif
451#ifdef BUILD_CPU
Willy Tarreau9f2b7302008-01-02 20:48:34 +0100452 "\n CPU = " BUILD_CPU
Willy Tarreau7b066db2007-12-02 11:28:59 +0100453#endif
454#ifdef BUILD_CC
Willy Tarreau9f2b7302008-01-02 20:48:34 +0100455 "\n CC = " BUILD_CC
456#endif
457#ifdef BUILD_CFLAGS
458 "\n CFLAGS = " BUILD_CFLAGS
Willy Tarreau7b066db2007-12-02 11:28:59 +0100459#endif
Willy Tarreau9f2b7302008-01-02 20:48:34 +0100460#ifdef BUILD_OPTIONS
461 "\n OPTIONS = " BUILD_OPTIONS
Willy Tarreau7b066db2007-12-02 11:28:59 +0100462#endif
Willy Tarreau7728ed32019-03-27 13:20:08 +0100463#ifdef BUILD_FEATURES
464 "\n\nFeature list : " BUILD_FEATURES
465#endif
Willy Tarreau27a674e2009-08-17 07:23:33 +0200466 "\n\nDefault settings :"
Willy Tarreauca783d42019-03-13 10:03:07 +0100467 "\n bufsize = %d, maxrewrite = %d, maxpollevents = %d"
Willy Tarreau27a674e2009-08-17 07:23:33 +0200468 "\n\n",
Willy Tarreauca783d42019-03-13 10:03:07 +0100469 BUFSIZE, MAXREWRITE, MAX_POLL_EVENTS);
Willy Tarreaube5b6852009-10-03 18:57:08 +0200470
Willy Tarreaucdb737e2016-12-21 18:43:10 +0100471 list_for_each_entry(item, &build_opts_list, list) {
472 puts(item->str);
473 }
474
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +0100475 putchar('\n');
476
Willy Tarreaube5b6852009-10-03 18:57:08 +0200477 list_pollers(stdout);
478 putchar('\n');
Christopher Faulet98d9fe22018-04-10 14:37:32 +0200479 list_mux_proto(stdout);
480 putchar('\n');
Willy Tarreau679bba12019-03-19 08:08:10 +0100481 list_services(stdout);
482 putchar('\n');
Christopher Fauletb3f4e142016-03-07 12:46:38 +0100483 list_filters(stdout);
484 putchar('\n');
Willy Tarreau7b066db2007-12-02 11:28:59 +0100485}
486
Willy Tarreaubaaee002006-06-26 02:48:02 +0200487/*
488 * This function prints the command line usage and exits
489 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100490static void usage(char *name)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200491{
492 display_version();
493 fprintf(stderr,
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200494 "Usage : %s [-f <cfgfile|cfgdir>]* [ -vdV"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200495 "D ] [ -n <maxconn> ] [ -N <maxpconn> ]\n"
Willy Tarreaua088d312015-10-08 11:58:48 +0200496 " [ -p <pidfile> ] [ -m <max megs> ] [ -C <dir> ] [-- <cfgfile>*]\n"
Willy Tarreau7b066db2007-12-02 11:28:59 +0100497 " -v displays version ; -vv shows known build options.\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200498 " -d enters debug mode ; -db only disables background mode.\n"
Willy Tarreau6e064432012-05-08 15:40:42 +0200499 " -dM[<byte>] poisons memory with <byte> (defaults to 0x50)\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200500 " -V enters verbose mode (disables quiet mode)\n"
Willy Tarreau576132e2011-09-10 19:26:56 +0200501 " -D goes daemon ; -C changes to <dir> before loading files.\n"
William Lallemand095ba4c2017-06-01 17:38:50 +0200502 " -W master-worker mode.\n"
Tim Duesterhusd6942c82017-11-20 15:58:35 +0100503#if defined(USE_SYSTEMD)
504 " -Ws master-worker mode with systemd notify support.\n"
505#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +0200506 " -q quiet mode : don't display messages\n"
Willy Tarreau5d01a632009-06-22 16:02:30 +0200507 " -c check mode : only check config files and exit\n"
Willy Tarreauca783d42019-03-13 10:03:07 +0100508 " -n sets the maximum total # of connections (uses ulimit -n)\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200509 " -m limits the usable amount of memory (in MB)\n"
510 " -N sets the default, per-proxy maximum # of connections (%d)\n"
Emeric Brun2b920a12010-09-23 18:30:22 +0200511 " -L set local peer name (default to hostname)\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200512 " -p writes pids of all children to this file\n"
Willy Tarreaue5733232019-05-22 19:24:06 +0200513#if defined(USE_EPOLL)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200514 " -de disables epoll() usage even when available\n"
515#endif
Willy Tarreaue5733232019-05-22 19:24:06 +0200516#if defined(USE_KQUEUE)
Willy Tarreau1e63130a2007-04-09 12:03:06 +0200517 " -dk disables kqueue() usage even when available\n"
518#endif
Willy Tarreaue5733232019-05-22 19:24:06 +0200519#if defined(USE_EVPORTS)
Emmanuel Hocdet0ba4f482019-04-08 16:53:32 +0000520 " -dv disables event ports usage even when available\n"
521#endif
Willy Tarreaue5733232019-05-22 19:24:06 +0200522#if defined(USE_POLL)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200523 " -dp disables poll() usage even when available\n"
524#endif
Willy Tarreaue5733232019-05-22 19:24:06 +0200525#if defined(USE_LINUX_SPLICE)
Willy Tarreau3ab68cf2009-01-25 16:03:28 +0100526 " -dS disables splice usage (broken on old kernels)\n"
527#endif
Nenad Merdanovic88afe032014-04-14 15:56:58 +0200528#if defined(USE_GETADDRINFO)
529 " -dG disables getaddrinfo() usage\n"
530#endif
Lukas Tribusa0bcbdc2016-09-12 21:42:20 +0000531#if defined(SO_REUSEPORT)
532 " -dR disables SO_REUSEPORT usage\n"
533#endif
Willy Tarreau3eed10e2016-11-07 21:03:16 +0100534 " -dr ignores server address resolution failures\n"
Emeric Brun850efd52014-01-29 12:24:34 +0100535 " -dV disables SSL verify on servers side\n"
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +0200536 " -sf/-st [pid ]* finishes/terminates old pids.\n"
Olivier Houchardf73629d2017-04-05 22:33:04 +0200537 " -x <unix_socket> get listening sockets from a unix socket\n"
William Lallemand63329e32019-06-13 17:03:37 +0200538 " -S <bind>[,<bind options>...] new master CLI\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200539 "\n",
Willy Tarreauca783d42019-03-13 10:03:07 +0100540 name, cfg_maxpconn);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200541 exit(1);
542}
543
544
545
546/*********************************************************************/
547/* more specific functions ***************************************/
548/*********************************************************************/
549
William Lallemand73b85e72017-06-01 17:38:51 +0200550/* sends the signal <sig> to all pids found in <oldpids>. Returns the number of
551 * pids the signal was correctly delivered to.
552 */
William Lallemande25473c2019-04-01 11:29:56 +0200553int tell_old_pids(int sig)
William Lallemand73b85e72017-06-01 17:38:51 +0200554{
555 int p;
556 int ret = 0;
557 for (p = 0; p < nb_oldpids; p++)
558 if (kill(oldpids[p], sig) == 0)
559 ret++;
560 return ret;
561}
562
William Lallemand75ea0a02017-11-15 19:02:58 +0100563/*
William Lallemand73b85e72017-06-01 17:38:51 +0200564 * remove a pid forom the olpid array and decrease nb_oldpids
565 * return 1 pid was found otherwise return 0
566 */
567
568int delete_oldpid(int pid)
569{
570 int i;
571
572 for (i = 0; i < nb_oldpids; i++) {
573 if (oldpids[i] == pid) {
574 oldpids[i] = oldpids[nb_oldpids - 1];
575 oldpids[nb_oldpids - 1] = 0;
576 nb_oldpids--;
577 return 1;
578 }
579 }
580 return 0;
581}
582
William Lallemand85b0bd92017-06-01 17:38:53 +0200583
584static void get_cur_unixsocket()
585{
586 /* if -x was used, try to update the stat socket if not available anymore */
587 if (global.stats_fe) {
588 struct bind_conf *bind_conf;
589
590 /* pass through all stats socket */
591 list_for_each_entry(bind_conf, &global.stats_fe->conf.bind, by_fe) {
592 struct listener *l;
593
594 list_for_each_entry(l, &bind_conf->listeners, by_bind) {
595
596 if (l->addr.ss_family == AF_UNIX &&
597 (bind_conf->level & ACCESS_FD_LISTENERS)) {
598 const struct sockaddr_un *un;
599
600 un = (struct sockaddr_un *)&l->addr;
601 /* priority to old_unixsocket */
602 if (!cur_unixsocket) {
603 cur_unixsocket = strdup(un->sun_path);
604 } else {
605 if (old_unixsocket && !strcmp(un->sun_path, old_unixsocket)) {
606 free(cur_unixsocket);
607 cur_unixsocket = strdup(old_unixsocket);
608 return;
609 }
610 }
611 }
612 }
613 }
614 }
615 if (!cur_unixsocket && old_unixsocket)
616 cur_unixsocket = strdup(old_unixsocket);
617}
618
William Lallemand73b85e72017-06-01 17:38:51 +0200619/*
620 * When called, this function reexec haproxy with -sf followed by current
Joseph Herlant03420902018-11-15 10:41:50 -0800621 * children PIDs and possibly old children PIDs if they didn't leave yet.
William Lallemand73b85e72017-06-01 17:38:51 +0200622 */
William Lallemanda57b7e32018-12-14 21:11:31 +0100623void mworker_reload()
William Lallemand73b85e72017-06-01 17:38:51 +0200624{
625 int next_argc = 0;
William Lallemand73b85e72017-06-01 17:38:51 +0200626 char *msg = NULL;
Willy Tarreau8dca1952019-03-01 10:21:55 +0100627 struct rlimit limit;
William Lallemand7c756a82018-11-26 11:53:40 +0100628 struct per_thread_deinit_fct *ptdf;
William Lallemand73b85e72017-06-01 17:38:51 +0200629
630 mworker_block_signals();
Tim Duesterhusd6942c82017-11-20 15:58:35 +0100631#if defined(USE_SYSTEMD)
632 if (global.tune.options & GTUNE_USE_SYSTEMD)
633 sd_notify(0, "RELOADING=1");
634#endif
William Lallemand73b85e72017-06-01 17:38:51 +0200635 setenv("HAPROXY_MWORKER_REEXEC", "1", 1);
636
William Lallemandbc193052018-09-11 10:06:26 +0200637 mworker_proc_list_to_env(); /* put the children description in the env */
638
William Lallemand7c756a82018-11-26 11:53:40 +0100639 /* during the reload we must ensure that every FDs that can't be
640 * reuse (ie those that are not referenced in the proc_list)
641 * are closed or they will leak. */
642
643 /* close the listeners FD */
644 mworker_cli_proxy_stop();
William Lallemand13b11702019-06-24 17:40:48 +0200645
646 if (getenv("HAPROXY_MWORKER_WAIT_ONLY") == NULL) {
647 /* close the poller FD and the thread waker pipe FD */
648 list_for_each_entry(ptdf, &per_thread_deinit_list, list)
649 ptdf->fct();
650 if (fdtab)
651 deinit_pollers();
652 }
Willy Tarreau5db847a2019-05-09 14:13:35 +0200653#if defined(USE_OPENSSL) && (HA_OPENSSL_VERSION_NUMBER >= 0x10101000L)
William Lallemand1b7c4dc2019-10-15 14:04:08 +0200654 /* close random device FDs */
655 RAND_keep_random_devices_open(0);
Rob Allen56996da2019-05-03 09:11:32 +0100656#endif
William Lallemand7c756a82018-11-26 11:53:40 +0100657
Willy Tarreau8dca1952019-03-01 10:21:55 +0100658 /* restore the initial FD limits */
659 limit.rlim_cur = rlim_fd_cur_at_boot;
660 limit.rlim_max = rlim_fd_max_at_boot;
661 if (setrlimit(RLIMIT_NOFILE, &limit) == -1) {
662 getrlimit(RLIMIT_NOFILE, &limit);
663 ha_warning("Failed to restore initial FD limits (cur=%u max=%u), using cur=%u max=%u\n",
664 rlim_fd_cur_at_boot, rlim_fd_max_at_boot,
665 (unsigned int)limit.rlim_cur, (unsigned int)limit.rlim_max);
666 }
667
William Lallemand73b85e72017-06-01 17:38:51 +0200668 /* compute length */
669 while (next_argv[next_argc])
670 next_argc++;
671
William Lallemand85b0bd92017-06-01 17:38:53 +0200672 /* 1 for haproxy -sf, 2 for -x /socket */
William Lallemand3f128872019-04-01 11:29:59 +0200673 next_argv = realloc(next_argv, (next_argc + 1 + 2 + mworker_child_nb() + nb_oldpids + 1) * sizeof(char *));
William Lallemand73b85e72017-06-01 17:38:51 +0200674 if (next_argv == NULL)
675 goto alloc_error;
676
William Lallemand73b85e72017-06-01 17:38:51 +0200677 /* add -sf <PID>* to argv */
William Lallemand3f128872019-04-01 11:29:59 +0200678 if (mworker_child_nb() > 0) {
679 struct mworker_proc *child;
680
William Lallemand73b85e72017-06-01 17:38:51 +0200681 next_argv[next_argc++] = "-sf";
William Lallemand3f128872019-04-01 11:29:59 +0200682
683 list_for_each_entry(child, &proc_list, list) {
William Lallemand175125e2019-11-19 17:04:18 +0100684 if (!(child->options & (PROC_O_TYPE_WORKER|PROC_O_TYPE_PROG)) || child->pid <= -1 )
William Lallemand3f128872019-04-01 11:29:59 +0200685 continue;
686 next_argv[next_argc] = memprintf(&msg, "%d", child->pid);
William Lallemand73b85e72017-06-01 17:38:51 +0200687 if (next_argv[next_argc] == NULL)
688 goto alloc_error;
689 msg = NULL;
William Lallemand3f128872019-04-01 11:29:59 +0200690 next_argc++;
William Lallemand73b85e72017-06-01 17:38:51 +0200691 }
692 }
William Lallemand3f128872019-04-01 11:29:59 +0200693
William Lallemand73b85e72017-06-01 17:38:51 +0200694 next_argv[next_argc] = NULL;
William Lallemand85b0bd92017-06-01 17:38:53 +0200695
William Lallemand2bf6d622017-06-20 11:20:23 +0200696 /* add the -x option with the stat socket */
William Lallemand85b0bd92017-06-01 17:38:53 +0200697 if (cur_unixsocket) {
698
William Lallemand2bf6d622017-06-20 11:20:23 +0200699 next_argv[next_argc++] = "-x";
700 next_argv[next_argc++] = (char *)cur_unixsocket;
701 next_argv[next_argc++] = NULL;
William Lallemand85b0bd92017-06-01 17:38:53 +0200702 }
703
Christopher Faulet767a84b2017-11-24 16:50:31 +0100704 ha_warning("Reexecuting Master process\n");
Willy Tarreauf259fcc2019-08-26 10:37:39 +0200705 signal(SIGPROF, SIG_IGN);
Tim Duesterhus0436ab72017-11-12 17:39:18 +0100706 execvp(next_argv[0], next_argv);
William Lallemand73b85e72017-06-01 17:38:51 +0200707
Christopher Faulet767a84b2017-11-24 16:50:31 +0100708 ha_warning("Failed to reexecute the master process [%d]: %s\n", pid, strerror(errno));
William Lallemand722d4ca2017-11-15 19:02:55 +0100709 return;
710
William Lallemand73b85e72017-06-01 17:38:51 +0200711alloc_error:
Joseph Herlant07a08342018-11-15 10:43:05 -0800712 ha_warning("Failed to reexecute the master process [%d]: Cannot allocate memory\n", pid);
William Lallemand73b85e72017-06-01 17:38:51 +0200713 return;
714}
715
William Lallemandb3f2be32018-09-11 10:06:18 +0200716static void mworker_loop()
717{
718
719#if defined(USE_SYSTEMD)
720 if (global.tune.options & GTUNE_USE_SYSTEMD)
721 sd_notifyf(0, "READY=1\nMAINPID=%lu", (unsigned long)getpid());
722#endif
Willy Tarreaud83b6c12019-04-18 11:31:36 +0200723 /* Busy polling makes no sense in the master :-) */
724 global.tune.options &= ~GTUNE_BUSY_POLLING;
William Lallemandb3f2be32018-09-11 10:06:18 +0200725
William Lallemandbc193052018-09-11 10:06:26 +0200726 master = 1;
727
Willy Tarreau708c2442019-12-11 14:24:07 +0100728 signal_unregister(SIGTTIN);
729 signal_unregister(SIGTTOU);
William Lallemand0564d412018-11-20 17:36:53 +0100730 signal_unregister(SIGUSR1);
731 signal_unregister(SIGHUP);
732 signal_unregister(SIGQUIT);
733
William Lallemandb3f2be32018-09-11 10:06:18 +0200734 signal_register_fct(SIGTERM, mworker_catch_sigterm, SIGTERM);
735 signal_register_fct(SIGUSR1, mworker_catch_sigterm, SIGUSR1);
Willy Tarreau708c2442019-12-11 14:24:07 +0100736 signal_register_fct(SIGTTIN, mworker_broadcast_signal, SIGTTIN);
737 signal_register_fct(SIGTTOU, mworker_broadcast_signal, SIGTTOU);
William Lallemandb3f2be32018-09-11 10:06:18 +0200738 signal_register_fct(SIGINT, mworker_catch_sigterm, SIGINT);
739 signal_register_fct(SIGHUP, mworker_catch_sighup, SIGHUP);
740 signal_register_fct(SIGUSR2, mworker_catch_sighup, SIGUSR2);
741 signal_register_fct(SIGCHLD, mworker_catch_sigchld, SIGCHLD);
742
743 mworker_unblock_signals();
744 mworker_cleanlisteners();
William Lallemand27f3fa52018-12-06 14:05:20 +0100745 mworker_cleantasks();
William Lallemandb3f2be32018-09-11 10:06:18 +0200746
William Lallemandbc193052018-09-11 10:06:26 +0200747 mworker_catch_sigchld(NULL); /* ensure we clean the children in case
748 some SIGCHLD were lost */
749
William Lallemandb3f2be32018-09-11 10:06:18 +0200750 global.nbthread = 1;
751 relative_pid = 1;
752 pid_bit = 1;
Willy Tarreaua38a7172019-02-02 17:11:28 +0100753 all_proc_mask = 1;
William Lallemandb3f2be32018-09-11 10:06:18 +0200754
William Lallemand2672eb92018-12-14 15:52:39 +0100755#ifdef USE_THREAD
756 tid_bit = 1;
757 all_threads_mask = 1;
758#endif
759
William Lallemandb3f2be32018-09-11 10:06:18 +0200760 jobs++; /* this is the "master" job, we want to take care of the
761 signals even if there is no listener so the poll loop don't
762 leave */
763
764 fork_poller();
Willy Tarreaub4f7cc32019-05-03 09:27:30 +0200765 run_thread_poll_loop(0);
William Lallemandb3f2be32018-09-11 10:06:18 +0200766}
William Lallemandcb11fd22017-06-01 17:38:52 +0200767
768/*
769 * Reexec the process in failure mode, instead of exiting
770 */
771void reexec_on_failure()
772{
773 if (!atexit_flag)
774 return;
775
776 setenv("HAPROXY_MWORKER_WAIT_ONLY", "1", 1);
777
Christopher Faulet767a84b2017-11-24 16:50:31 +0100778 ha_warning("Reexecuting Master process in waitpid mode\n");
William Lallemandcb11fd22017-06-01 17:38:52 +0200779 mworker_reload();
William Lallemandcb11fd22017-06-01 17:38:52 +0200780}
William Lallemand73b85e72017-06-01 17:38:51 +0200781
782
783/*
Willy Tarreaud0807c32010-08-27 18:26:11 +0200784 * upon SIGUSR1, let's have a soft stop. Note that soft_stop() broadcasts
785 * a signal zero to all subscribers. This means that it's as easy as
786 * subscribing to signal 0 to get informed about an imminent shutdown.
Willy Tarreaubaaee002006-06-26 02:48:02 +0200787 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100788static void sig_soft_stop(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200789{
790 soft_stop();
Willy Tarreau24f4efa2010-08-27 17:56:48 +0200791 signal_unregister_handler(sh);
Willy Tarreaubafbe012017-11-24 17:34:44 +0100792 pool_gc(NULL);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200793}
794
795/*
796 * upon SIGTTOU, we pause everything
797 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100798static void sig_pause(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200799{
800 pause_proxies();
Willy Tarreaubafbe012017-11-24 17:34:44 +0100801 pool_gc(NULL);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200802}
803
804/*
805 * upon SIGTTIN, let's have a soft stop.
806 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100807static void sig_listen(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200808{
Willy Tarreaube58c382011-07-24 18:28:10 +0200809 resume_proxies();
Willy Tarreaubaaee002006-06-26 02:48:02 +0200810}
811
812/*
813 * this function dumps every server's state when the process receives SIGHUP.
814 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100815static void sig_dump_state(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200816{
Olivier Houchardfbc74e82017-11-24 16:54:05 +0100817 struct proxy *p = proxies_list;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200818
Christopher Faulet767a84b2017-11-24 16:50:31 +0100819 ha_warning("SIGHUP received, dumping servers states.\n");
Willy Tarreaubaaee002006-06-26 02:48:02 +0200820 while (p) {
821 struct server *s = p->srv;
822
823 send_log(p, LOG_NOTICE, "SIGHUP received, dumping servers states for proxy %s.\n", p->id);
824 while (s) {
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100825 chunk_printf(&trash,
826 "SIGHUP: Server %s/%s is %s. Conn: %d act, %d pend, %lld tot.",
827 p->id, s->id,
Emeric Brun52a91d32017-08-31 14:41:55 +0200828 (s->cur_state != SRV_ST_STOPPED) ? "UP" : "DOWN",
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100829 s->cur_sess, s->nbpend, s->counters.cum_sess);
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200830 ha_warning("%s\n", trash.area);
831 send_log(p, LOG_NOTICE, "%s\n", trash.area);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200832 s = s->next;
833 }
834
Willy Tarreau5fcc8f12007-09-17 11:27:09 +0200835 /* FIXME: those info are a bit outdated. We should be able to distinguish between FE and BE. */
836 if (!p->srv) {
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100837 chunk_printf(&trash,
838 "SIGHUP: Proxy %s has no servers. Conn: act(FE+BE): %d+%d, %d pend (%d unass), tot(FE+BE): %lld+%lld.",
839 p->id,
840 p->feconn, p->beconn, p->totpend, p->nbpend, p->fe_counters.cum_conn, p->be_counters.cum_conn);
Willy Tarreau5fcc8f12007-09-17 11:27:09 +0200841 } else if (p->srv_act == 0) {
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100842 chunk_printf(&trash,
843 "SIGHUP: Proxy %s %s ! Conn: act(FE+BE): %d+%d, %d pend (%d unass), tot(FE+BE): %lld+%lld.",
844 p->id,
845 (p->srv_bck) ? "is running on backup servers" : "has no server available",
846 p->feconn, p->beconn, p->totpend, p->nbpend, p->fe_counters.cum_conn, p->be_counters.cum_conn);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200847 } else {
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100848 chunk_printf(&trash,
849 "SIGHUP: Proxy %s has %d active servers and %d backup servers available."
850 " Conn: act(FE+BE): %d+%d, %d pend (%d unass), tot(FE+BE): %lld+%lld.",
851 p->id, p->srv_act, p->srv_bck,
852 p->feconn, p->beconn, p->totpend, p->nbpend, p->fe_counters.cum_conn, p->be_counters.cum_conn);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200853 }
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200854 ha_warning("%s\n", trash.area);
855 send_log(p, LOG_NOTICE, "%s\n", trash.area);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200856
857 p = p->next;
858 }
Willy Tarreaubaaee002006-06-26 02:48:02 +0200859}
860
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100861static void dump(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200862{
Willy Tarreauc6ca1a02007-05-13 19:43:47 +0200863 /* dump memory usage then free everything possible */
864 dump_pools();
Willy Tarreaubafbe012017-11-24 17:34:44 +0100865 pool_gc(NULL);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200866}
867
William Lallemande1340412017-12-28 16:09:36 +0100868/*
869 * This function dup2 the stdio FDs (0,1,2) with <fd>, then closes <fd>
870 * If <fd> < 0, it opens /dev/null and use it to dup
871 *
872 * In the case of chrooting, you have to open /dev/null before the chroot, and
873 * pass the <fd> to this function
874 */
875static void stdio_quiet(int fd)
876{
877 if (fd < 0)
878 fd = open("/dev/null", O_RDWR, 0);
879
880 if (fd > -1) {
881 fclose(stdin);
882 fclose(stdout);
883 fclose(stderr);
884
885 dup2(fd, 0);
886 dup2(fd, 1);
887 dup2(fd, 2);
888 if (fd > 2)
889 close(fd);
890 return;
891 }
892
893 ha_alert("Cannot open /dev/null\n");
894 exit(EXIT_FAILURE);
895}
896
897
Joseph Herlant03420902018-11-15 10:41:50 -0800898/* This function checks if cfg_cfgfiles contains directories.
899 * If it finds one, it adds all the files (and only files) it contains
900 * in cfg_cfgfiles in place of the directory (and removes the directory).
901 * It adds the files in lexical order.
902 * It adds only files with .cfg extension.
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200903 * It doesn't add files with name starting with '.'
904 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100905static void cfgfiles_expand_directories(void)
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200906{
907 struct wordlist *wl, *wlb;
908 char *err = NULL;
909
910 list_for_each_entry_safe(wl, wlb, &cfg_cfgfiles, list) {
911 struct stat file_stat;
912 struct dirent **dir_entries = NULL;
913 int dir_entries_nb;
914 int dir_entries_it;
915
916 if (stat(wl->s, &file_stat)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100917 ha_alert("Cannot open configuration file/directory %s : %s\n",
918 wl->s,
919 strerror(errno));
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200920 exit(1);
921 }
922
923 if (!S_ISDIR(file_stat.st_mode))
924 continue;
925
926 /* from this point wl->s is a directory */
927
928 dir_entries_nb = scandir(wl->s, &dir_entries, NULL, alphasort);
929 if (dir_entries_nb < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100930 ha_alert("Cannot open configuration directory %s : %s\n",
931 wl->s,
932 strerror(errno));
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200933 exit(1);
934 }
935
936 /* for each element in the directory wl->s */
937 for (dir_entries_it = 0; dir_entries_it < dir_entries_nb; dir_entries_it++) {
938 struct dirent *dir_entry = dir_entries[dir_entries_it];
939 char *filename = NULL;
940 char *d_name_cfgext = strstr(dir_entry->d_name, ".cfg");
941
942 /* don't add filename that begin with .
Joseph Herlant03420902018-11-15 10:41:50 -0800943 * only add filename with .cfg extension
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200944 */
945 if (dir_entry->d_name[0] == '.' ||
946 !(d_name_cfgext && d_name_cfgext[4] == '\0'))
947 goto next_dir_entry;
948
949 if (!memprintf(&filename, "%s/%s", wl->s, dir_entry->d_name)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100950 ha_alert("Cannot load configuration files %s : out of memory.\n",
951 filename);
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200952 exit(1);
953 }
954
955 if (stat(filename, &file_stat)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100956 ha_alert("Cannot open configuration file %s : %s\n",
957 wl->s,
958 strerror(errno));
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200959 exit(1);
960 }
961
962 /* don't add anything else than regular file in cfg_cfgfiles
963 * this way we avoid loops
964 */
965 if (!S_ISREG(file_stat.st_mode))
966 goto next_dir_entry;
967
968 if (!list_append_word(&wl->list, filename, &err)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100969 ha_alert("Cannot load configuration files %s : %s\n",
970 filename,
971 err);
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200972 exit(1);
973 }
974
975next_dir_entry:
976 free(filename);
977 free(dir_entry);
978 }
979
980 free(dir_entries);
981
982 /* remove the current directory (wl) from cfg_cfgfiles */
983 free(wl->s);
984 LIST_DEL(&wl->list);
985 free(wl);
986 }
987
988 free(err);
989}
990
Olivier Houchardf73629d2017-04-05 22:33:04 +0200991static int get_old_sockets(const char *unixsocket)
992{
993 char *cmsgbuf = NULL, *tmpbuf = NULL;
994 int *tmpfd = NULL;
995 struct sockaddr_un addr;
996 struct cmsghdr *cmsg;
997 struct msghdr msghdr;
998 struct iovec iov;
999 struct xfer_sock_list *xfer_sock = NULL;
Olivier Houchard54740872017-04-06 14:45:14 +02001000 struct timeval tv = { .tv_sec = 1, .tv_usec = 0 };
Olivier Houchardf73629d2017-04-05 22:33:04 +02001001 int sock = -1;
1002 int ret = -1;
1003 int ret2 = -1;
1004 int fd_nb;
1005 int got_fd = 0;
1006 int i = 0;
1007 size_t maxoff = 0, curoff = 0;
1008
1009 memset(&msghdr, 0, sizeof(msghdr));
1010 cmsgbuf = malloc(CMSG_SPACE(sizeof(int)) * MAX_SEND_FD);
1011 if (!cmsgbuf) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001012 ha_warning("Failed to allocate memory to send sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001013 goto out;
1014 }
1015 sock = socket(PF_UNIX, SOCK_STREAM, 0);
1016 if (sock < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001017 ha_warning("Failed to connect to the old process socket '%s'\n",
1018 unixsocket);
Olivier Houchardf73629d2017-04-05 22:33:04 +02001019 goto out;
1020 }
Willy Tarreaud668dcf2019-12-11 16:29:10 +01001021 strncpy(addr.sun_path, unixsocket, sizeof(addr.sun_path) - 1);
Olivier Houchardf73629d2017-04-05 22:33:04 +02001022 addr.sun_path[sizeof(addr.sun_path) - 1] = 0;
1023 addr.sun_family = PF_UNIX;
1024 ret = connect(sock, (struct sockaddr *)&addr, sizeof(addr));
1025 if (ret < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001026 ha_warning("Failed to connect to the old process socket '%s'\n",
1027 unixsocket);
Olivier Houchardf73629d2017-04-05 22:33:04 +02001028 goto out;
1029 }
Olivier Houchard54740872017-04-06 14:45:14 +02001030 setsockopt(sock, SOL_SOCKET, SO_RCVTIMEO, (void *)&tv, sizeof(tv));
Olivier Houchardf73629d2017-04-05 22:33:04 +02001031 iov.iov_base = &fd_nb;
1032 iov.iov_len = sizeof(fd_nb);
1033 msghdr.msg_iov = &iov;
1034 msghdr.msg_iovlen = 1;
1035 send(sock, "_getsocks\n", strlen("_getsocks\n"), 0);
1036 /* First, get the number of file descriptors to be received */
1037 if (recvmsg(sock, &msghdr, MSG_WAITALL) != sizeof(fd_nb)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001038 ha_warning("Failed to get the number of sockets to be transferred !\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001039 goto out;
1040 }
1041 if (fd_nb == 0) {
1042 ret = 0;
1043 goto out;
1044 }
Olivier Houchardf143b802017-11-04 15:13:01 +01001045 tmpbuf = malloc(fd_nb * (1 + MAXPATHLEN + 1 + IFNAMSIZ + sizeof(int)));
Olivier Houchardf73629d2017-04-05 22:33:04 +02001046 if (tmpbuf == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001047 ha_warning("Failed to allocate memory while receiving sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001048 goto out;
1049 }
1050 tmpfd = malloc(fd_nb * sizeof(int));
1051 if (tmpfd == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001052 ha_warning("Failed to allocate memory while receiving sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001053 goto out;
1054 }
1055 msghdr.msg_control = cmsgbuf;
1056 msghdr.msg_controllen = CMSG_SPACE(sizeof(int)) * MAX_SEND_FD;
Olivier Houchardf143b802017-11-04 15:13:01 +01001057 iov.iov_len = MAX_SEND_FD * (1 + MAXPATHLEN + 1 + IFNAMSIZ + sizeof(int));
Olivier Houchardf73629d2017-04-05 22:33:04 +02001058 do {
1059 int ret3;
1060
1061 iov.iov_base = tmpbuf + curoff;
1062 ret = recvmsg(sock, &msghdr, 0);
1063 if (ret == -1 && errno == EINTR)
1064 continue;
1065 if (ret <= 0)
1066 break;
1067 /* Send an ack to let the sender know we got the sockets
1068 * and it can send some more
1069 */
1070 do {
1071 ret3 = send(sock, &got_fd, sizeof(got_fd), 0);
1072 } while (ret3 == -1 && errno == EINTR);
1073 for (cmsg = CMSG_FIRSTHDR(&msghdr); cmsg != NULL;
1074 cmsg = CMSG_NXTHDR(&msghdr, cmsg)) {
1075 if (cmsg->cmsg_level == SOL_SOCKET &&
1076 cmsg->cmsg_type == SCM_RIGHTS) {
1077 size_t totlen = cmsg->cmsg_len -
1078 CMSG_LEN(0);
1079 if (totlen / sizeof(int) + got_fd > fd_nb) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001080 ha_warning("Got to many sockets !\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001081 goto out;
1082 }
1083 /*
1084 * Be paranoid and use memcpy() to avoid any
1085 * potential alignement issue.
1086 */
1087 memcpy(&tmpfd[got_fd], CMSG_DATA(cmsg), totlen);
1088 got_fd += totlen / sizeof(int);
1089 }
1090 }
1091 curoff += ret;
1092 } while (got_fd < fd_nb);
1093
1094 if (got_fd != fd_nb) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001095 ha_warning("We didn't get the expected number of sockets (expecting %d got %d)\n",
1096 fd_nb, got_fd);
Olivier Houchardf73629d2017-04-05 22:33:04 +02001097 goto out;
1098 }
1099 maxoff = curoff;
1100 curoff = 0;
1101 for (i = 0; i < got_fd; i++) {
1102 int fd = tmpfd[i];
1103 socklen_t socklen;
1104 int len;
1105
1106 xfer_sock = calloc(1, sizeof(*xfer_sock));
1107 if (!xfer_sock) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001108 ha_warning("Failed to allocate memory in get_old_sockets() !\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001109 break;
1110 }
1111 xfer_sock->fd = -1;
1112
1113 socklen = sizeof(xfer_sock->addr);
1114 if (getsockname(fd, (struct sockaddr *)&xfer_sock->addr, &socklen) != 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001115 ha_warning("Failed to get socket address\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001116 free(xfer_sock);
Olivier Houchardbe7b1ce2017-07-17 17:25:33 +02001117 xfer_sock = NULL;
Olivier Houchardf73629d2017-04-05 22:33:04 +02001118 continue;
1119 }
1120 if (curoff >= maxoff) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001121 ha_warning("Inconsistency while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001122 goto out;
1123 }
1124 len = tmpbuf[curoff++];
1125 if (len > 0) {
1126 /* We have a namespace */
1127 if (curoff + len > maxoff) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001128 ha_warning("Inconsistency while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001129 goto out;
1130 }
1131 xfer_sock->namespace = malloc(len + 1);
1132 if (!xfer_sock->namespace) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001133 ha_warning("Failed to allocate memory while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001134 goto out;
1135 }
1136 memcpy(xfer_sock->namespace, &tmpbuf[curoff], len);
1137 xfer_sock->namespace[len] = 0;
1138 curoff += len;
1139 }
1140 if (curoff >= maxoff) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001141 ha_warning("Inconsistency while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001142 goto out;
1143 }
1144 len = tmpbuf[curoff++];
1145 if (len > 0) {
1146 /* We have an interface */
1147 if (curoff + len > maxoff) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001148 ha_warning("Inconsistency while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001149 goto out;
1150 }
1151 xfer_sock->iface = malloc(len + 1);
1152 if (!xfer_sock->iface) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001153 ha_warning("Failed to allocate memory while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001154 goto out;
1155 }
1156 memcpy(xfer_sock->iface, &tmpbuf[curoff], len);
Olivier Houchard33e083c2018-03-15 17:48:49 +01001157 xfer_sock->iface[len] = 0;
Olivier Houchardf73629d2017-04-05 22:33:04 +02001158 curoff += len;
1159 }
1160 if (curoff + sizeof(int) > maxoff) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001161 ha_warning("Inconsistency while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001162 goto out;
1163 }
1164 memcpy(&xfer_sock->options, &tmpbuf[curoff],
1165 sizeof(xfer_sock->options));
1166 curoff += sizeof(xfer_sock->options);
1167
1168 xfer_sock->fd = fd;
1169 if (xfer_sock_list)
1170 xfer_sock_list->prev = xfer_sock;
1171 xfer_sock->next = xfer_sock_list;
1172 xfer_sock->prev = NULL;
1173 xfer_sock_list = xfer_sock;
1174 xfer_sock = NULL;
1175 }
1176
1177 ret2 = 0;
1178out:
1179 /* If we failed midway make sure to close the remaining
1180 * file descriptors
1181 */
1182 if (tmpfd != NULL && i < got_fd) {
1183 for (; i < got_fd; i++) {
1184 close(tmpfd[i]);
1185 }
1186 }
1187 free(tmpbuf);
1188 free(tmpfd);
1189 free(cmsgbuf);
1190 if (sock != -1)
1191 close(sock);
1192 if (xfer_sock) {
1193 free(xfer_sock->namespace);
1194 free(xfer_sock->iface);
1195 if (xfer_sock->fd != -1)
1196 close(xfer_sock->fd);
1197 free(xfer_sock);
1198 }
1199 return (ret2);
1200}
1201
Willy Tarreaubaaee002006-06-26 02:48:02 +02001202/*
William Lallemand73b85e72017-06-01 17:38:51 +02001203 * copy and cleanup the current argv
1204 * Remove the -sf /-st parameters
1205 * Return an allocated copy of argv
1206 */
1207
1208static char **copy_argv(int argc, char **argv)
1209{
1210 char **newargv;
William Lallemand2bf6d622017-06-20 11:20:23 +02001211 int i = 0, j = 0;
William Lallemand73b85e72017-06-01 17:38:51 +02001212
1213 newargv = calloc(argc + 2, sizeof(char *));
1214 if (newargv == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001215 ha_warning("Cannot allocate memory\n");
William Lallemand73b85e72017-06-01 17:38:51 +02001216 return NULL;
1217 }
1218
William Lallemand2bf6d622017-06-20 11:20:23 +02001219 while (i < argc) {
1220 /* -sf or -st or -x */
William Lallemand29f690c2018-01-09 23:12:27 +01001221 if (i > 0 && argv[i][0] == '-' &&
1222 ((argv[i][1] == 's' && (argv[i][2] == 'f' || argv[i][2] == 't')) || argv[i][1] == 'x' )) {
William Lallemand2bf6d622017-06-20 11:20:23 +02001223 /* list of pids to finish ('f') or terminate ('t') or unix socket (-x) */
William Lallemand73b85e72017-06-01 17:38:51 +02001224 i++;
1225 while (i < argc && argv[i][0] != '-') {
1226 i++;
1227 }
William Lallemand2bf6d622017-06-20 11:20:23 +02001228 continue;
William Lallemand73b85e72017-06-01 17:38:51 +02001229 }
William Lallemand2bf6d622017-06-20 11:20:23 +02001230
1231 newargv[j++] = argv[i++];
William Lallemand73b85e72017-06-01 17:38:51 +02001232 }
William Lallemand2bf6d622017-06-20 11:20:23 +02001233
William Lallemand73b85e72017-06-01 17:38:51 +02001234 return newargv;
1235}
1236
Willy Tarreau4ce41952020-03-06 18:57:15 +01001237
1238/* Performs basic random seed initialization. The main issue with this is that
1239 * srandom_r() only takes 32 bits and purposely provides a reproducible sequence,
1240 * which means that there will only be 4 billion possible random sequences once
1241 * srandom() is called, regardless of the internal state. Not calling it is
1242 * even worse as we'll always produce the same randoms sequences. What we do
1243 * here is to create an initial sequence from various entropy sources, hash it
1244 * using SHA1 and keep the resulting 160 bits available globally.
1245 *
1246 * We initialize the current process with the first 32 bits before starting the
1247 * polling loop, where all this will be changed to have process specific and
1248 * thread specific sequences.
Willy Tarreau861c4ef2020-03-08 00:42:37 +01001249 *
1250 * Before starting threads, it's still possible to call random() as srandom()
1251 * is initialized from this, but after threads and/or processes are started,
1252 * only ha_random() is expected to be used to guarantee distinct sequences.
Willy Tarreau4ce41952020-03-06 18:57:15 +01001253 */
1254static void ha_random_boot(char *const *argv)
1255{
1256 unsigned char message[256];
1257 unsigned char *m = message;
1258 struct timeval tv;
1259 blk_SHA_CTX ctx;
1260 unsigned long l;
1261 int fd;
1262 int i;
1263
1264 /* start with current time as pseudo-random seed */
1265 gettimeofday(&tv, NULL);
1266 write_u32(m, tv.tv_sec); m += 4;
1267 write_u32(m, tv.tv_usec); m += 4;
1268
1269 /* PID and PPID add some OS-based randomness */
1270 write_u16(m, getpid()); m += 2;
1271 write_u16(m, getppid()); m += 2;
1272
1273 /* take up to 160 bits bytes from /dev/urandom if available (non-blocking) */
1274 fd = open("/dev/urandom", O_RDONLY);
1275 if (fd >= 0) {
1276 i = read(fd, m, 20);
1277 if (i > 0)
1278 m += i;
1279 close(fd);
1280 }
1281
1282 /* take up to 160 bits bytes from openssl (non-blocking) */
1283#ifdef USE_OPENSSL
1284 if (RAND_bytes(m, 20) == 1)
1285 m += 20;
1286#endif
1287
1288 /* take 160 bits from existing random in case it was already initialized */
1289 for (i = 0; i < 5; i++) {
1290 write_u32(m, random());
1291 m += 4;
1292 }
1293
1294 /* stack address (benefit form operating system's ASLR) */
1295 l = (unsigned long)&m;
1296 memcpy(m, &l, sizeof(l)); m += sizeof(l);
1297
1298 /* argv address (benefit form operating system's ASLR) */
1299 l = (unsigned long)&argv;
1300 memcpy(m, &l, sizeof(l)); m += sizeof(l);
1301
1302 /* use tv_usec again after all the operations above */
1303 gettimeofday(&tv, NULL);
1304 write_u32(m, tv.tv_usec); m += 4;
1305
1306 /*
1307 * At this point, ~84-92 bytes have been used
1308 */
1309
1310 /* finish with the hostname */
1311 strncpy((char *)m, hostname, message + sizeof(message) - m);
1312 m += strlen(hostname);
1313
1314 /* total message length */
1315 l = m - message;
1316
1317 memset(&ctx, 0, sizeof(ctx));
1318 blk_SHA1_Init(&ctx);
1319 blk_SHA1_Update(&ctx, message, l);
1320 blk_SHA1_Final(boot_seed, &ctx);
1321
1322 srandom(read_u32(boot_seed));
Willy Tarreau861c4ef2020-03-08 00:42:37 +01001323 ha_random_seed(boot_seed, sizeof(boot_seed));
Willy Tarreau4ce41952020-03-06 18:57:15 +01001324}
1325
Willy Tarreau5a023f02019-03-01 14:19:31 +01001326/* considers splicing proxies' maxconn, computes the ideal global.maxpipes
1327 * setting, and returns it. It may return -1 meaning "unlimited" if some
1328 * unlimited proxies have been found and the global.maxconn value is not yet
1329 * set. It may also return a value greater than maxconn if it's not yet set.
1330 * Note that a value of zero means there is no need for pipes. -1 is never
1331 * returned if global.maxconn is valid.
1332 */
1333static int compute_ideal_maxpipes()
1334{
1335 struct proxy *cur;
1336 int nbfe = 0, nbbe = 0;
1337 int unlimited = 0;
1338 int pipes;
1339 int max;
1340
1341 for (cur = proxies_list; cur; cur = cur->next) {
1342 if (cur->options2 & (PR_O2_SPLIC_ANY)) {
1343 if (cur->cap & PR_CAP_FE) {
1344 max = cur->maxconn;
1345 nbfe += max;
1346 if (!max) {
1347 unlimited = 1;
1348 break;
1349 }
1350 }
1351 if (cur->cap & PR_CAP_BE) {
1352 max = cur->fullconn ? cur->fullconn : global.maxconn;
1353 nbbe += max;
1354 if (!max) {
1355 unlimited = 1;
1356 break;
1357 }
1358 }
1359 }
1360 }
1361
1362 pipes = MAX(nbfe, nbbe);
1363 if (global.maxconn) {
1364 if (pipes > global.maxconn || unlimited)
1365 pipes = global.maxconn;
1366 } else if (unlimited) {
1367 pipes = -1;
1368 }
1369
1370 return pipes >= 4 ? pipes / 4 : pipes;
1371}
1372
Willy Tarreauac350932019-03-01 15:43:14 +01001373/* considers global.maxsocks, global.maxpipes, async engines, SSL frontends and
1374 * rlimits and computes an ideal maxconn. It's meant to be called only when
1375 * maxsock contains the sum of listening FDs, before it is updated based on
Willy Tarreaudf23c0c2019-03-13 10:10:49 +01001376 * maxconn and pipes. If there are not enough FDs left, DEFAULT_MAXCONN (by
1377 * default 100) is returned as it is expected that it will even run on tight
1378 * environments, and will maintain compatibility with previous packages that
1379 * used to rely on this value as the default one. The system will emit a
1380 * warning indicating how many FDs are missing anyway if needed.
Willy Tarreauac350932019-03-01 15:43:14 +01001381 */
1382static int compute_ideal_maxconn()
1383{
1384 int ssl_sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
1385 int engine_fds = global.ssl_used_async_engines * ssl_sides;
1386 int pipes = compute_ideal_maxpipes();
Willy Tarreau3477ebe2020-03-06 10:25:31 +01001387 int remain = MAX(rlim_fd_cur_at_boot, rlim_fd_max_at_boot);
Willy Tarreauac350932019-03-01 15:43:14 +01001388 int maxconn;
1389
1390 /* we have to take into account these elements :
1391 * - number of engine_fds, which inflates the number of FD needed per
1392 * connection by this number.
1393 * - number of pipes per connection on average : for the unlimited
1394 * case, this is 0.5 pipe FDs per connection, otherwise it's a
1395 * fixed value of 2*pipes.
1396 * - two FDs per connection
1397 */
1398
1399 /* subtract listeners and checks */
1400 remain -= global.maxsock;
1401
Willy Tarreau3f200852019-03-14 19:13:17 +01001402 /* one epoll_fd/kqueue_fd per thread */
1403 remain -= global.nbthread;
1404
1405 /* one wake-up pipe (2 fd) per thread */
1406 remain -= 2 * global.nbthread;
1407
Willy Tarreauac350932019-03-01 15:43:14 +01001408 /* Fixed pipes values : we only subtract them if they're not larger
1409 * than the remaining FDs because pipes are optional.
1410 */
1411 if (pipes >= 0 && pipes * 2 < remain)
1412 remain -= pipes * 2;
1413
1414 if (pipes < 0) {
1415 /* maxsock = maxconn * 2 + maxconn/4 * 2 + maxconn * engine_fds.
1416 * = maxconn * (2 + 0.5 + engine_fds)
1417 * = maxconn * (4 + 1 + 2*engine_fds) / 2
1418 */
1419 maxconn = 2 * remain / (5 + 2 * engine_fds);
1420 } else {
1421 /* maxsock = maxconn * 2 + maxconn * engine_fds.
1422 * = maxconn * (2 + engine_fds)
1423 */
1424 maxconn = remain / (2 + engine_fds);
1425 }
1426
Willy Tarreaudf23c0c2019-03-13 10:10:49 +01001427 return MAX(maxconn, DEFAULT_MAXCONN);
Willy Tarreauac350932019-03-01 15:43:14 +01001428}
1429
William Lallemand73b85e72017-06-01 17:38:51 +02001430/*
Willy Tarreaubaaee002006-06-26 02:48:02 +02001431 * This function initializes all the necessary variables. It only returns
1432 * if everything is OK. If something fails, it exits.
1433 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +01001434static void init(int argc, char **argv)
Willy Tarreaubaaee002006-06-26 02:48:02 +02001435{
Willy Tarreaubaaee002006-06-26 02:48:02 +02001436 int arg_mode = 0; /* MODE_DEBUG, ... */
Willy Tarreaubaaee002006-06-26 02:48:02 +02001437 char *tmp;
1438 char *cfg_pidfile = NULL;
Willy Tarreau058e9072009-07-20 09:30:05 +02001439 int err_code = 0;
Maxime de Roucy0f503922016-05-13 23:52:55 +02001440 char *err_msg = NULL;
Willy Tarreau477ecd82010-01-03 21:12:30 +01001441 struct wordlist *wl;
Kevinm48936af2010-12-22 16:08:21 +00001442 char *progname;
Willy Tarreau576132e2011-09-10 19:26:56 +02001443 char *change_dir = NULL;
Christopher Fauletd7c91962015-04-30 11:48:27 +02001444 struct proxy *px;
Willy Tarreaue6945732016-12-21 19:57:00 +01001445 struct post_check_fct *pcf;
Willy Tarreauac350932019-03-01 15:43:14 +01001446 int ideal_maxconn;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001447
Christopher Faulete3a5e352017-10-24 13:53:54 +02001448 global.mode = MODE_STARTING;
William Lallemand73b85e72017-06-01 17:38:51 +02001449 next_argv = copy_argv(argc, argv);
1450
Christopher Fauletcd7879a2017-10-27 13:53:47 +02001451 if (!init_trash_buffers(1)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001452 ha_alert("failed to initialize trash buffers.\n");
Christopher Faulet748919a2017-07-26 14:59:46 +02001453 exit(1);
1454 }
David du Colombier7af46052012-05-16 14:16:48 +02001455
Emeric Brun2b920a12010-09-23 18:30:22 +02001456 /* NB: POSIX does not make it mandatory for gethostname() to NULL-terminate
1457 * the string in case of truncation, and at least FreeBSD appears not to do
1458 * it.
1459 */
1460 memset(hostname, 0, sizeof(hostname));
1461 gethostname(hostname, sizeof(hostname) - 1);
1462 memset(localpeer, 0, sizeof(localpeer));
1463 memcpy(localpeer, hostname, (sizeof(hostname) > sizeof(localpeer) ? sizeof(localpeer) : sizeof(hostname)) - 1);
William Lallemanddaf4cd22018-04-17 16:46:13 +02001464 setenv("HAPROXY_LOCALPEER", localpeer, 1);
Emeric Brun2b920a12010-09-23 18:30:22 +02001465
William Lallemand8e16e7a2020-01-14 17:58:18 +01001466 /* we were in mworker mode, we should restart in mworker mode */
1467 if (getenv("HAPROXY_MWORKER_REEXEC") != NULL)
1468 global.mode |= MODE_MWORKER;
1469
Willy Tarreaubaaee002006-06-26 02:48:02 +02001470 /*
1471 * Initialize the previously static variables.
1472 */
Christopher Fauletcd7879a2017-10-27 13:53:47 +02001473
Willy Tarreau173d9952018-01-26 21:48:23 +01001474 totalconn = actconn = listeners = stopping = 0;
Cyril Bonté203ec5a2017-03-23 22:44:13 +01001475 killed = 0;
Christopher Fauletcd7879a2017-10-27 13:53:47 +02001476
Willy Tarreaubaaee002006-06-26 02:48:02 +02001477
1478#ifdef HAPROXY_MEMMAX
Willy Tarreau70060452015-12-14 12:46:07 +01001479 global.rlimit_memmax_all = HAPROXY_MEMMAX;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001480#endif
1481
Benoit GARNIERb413c2a2016-03-27 11:08:03 +02001482 tzset();
Willy Tarreaub0b37bc2008-06-23 14:00:57 +02001483 tv_update_date(-1,-1);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001484 start_date = now;
1485
Willy Tarreau4ce41952020-03-06 18:57:15 +01001486 ha_random_boot(argv);
Willy Tarreau84310e22014-02-14 11:59:04 +01001487
Willy Tarreau8ed669b2013-01-11 15:49:37 +01001488 if (init_acl() != 0)
1489 exit(1);
Willy Tarreaub6b3df32018-11-26 16:31:20 +01001490
Willy Tarreau8280d642009-09-23 23:37:52 +02001491 /* warning, we init buffers later */
Willy Tarreau04f1e2d2018-09-10 18:04:24 +02001492 if (!init_http(&err_msg)) {
1493 ha_alert("%s. Aborting.\n", err_msg);
1494 free(err_msg);
1495 abort();
1496 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02001497
Thierry FOURNIER6f1fd482015-01-23 14:06:13 +01001498 /* Initialise lua. */
1499 hlua_init();
Thierry FOURNIER6f1fd482015-01-23 14:06:13 +01001500
Christopher Fauletff2613e2016-11-09 11:36:17 +01001501 /* Initialize process vars */
1502 vars_init(&global.vars, SCOPE_PROC);
1503
Willy Tarreau43b78992009-01-25 15:42:27 +01001504 global.tune.options |= GTUNE_USE_SELECT; /* select() is always available */
Willy Tarreaue5733232019-05-22 19:24:06 +02001505#if defined(USE_POLL)
Willy Tarreau43b78992009-01-25 15:42:27 +01001506 global.tune.options |= GTUNE_USE_POLL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001507#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001508#if defined(USE_EPOLL)
Willy Tarreau43b78992009-01-25 15:42:27 +01001509 global.tune.options |= GTUNE_USE_EPOLL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001510#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001511#if defined(USE_KQUEUE)
Willy Tarreau43b78992009-01-25 15:42:27 +01001512 global.tune.options |= GTUNE_USE_KQUEUE;
Willy Tarreau1e63130a2007-04-09 12:03:06 +02001513#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001514#if defined(USE_EVPORTS)
Emmanuel Hocdet0ba4f482019-04-08 16:53:32 +00001515 global.tune.options |= GTUNE_USE_EVPORTS;
1516#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001517#if defined(USE_LINUX_SPLICE)
Willy Tarreau3ab68cf2009-01-25 16:03:28 +01001518 global.tune.options |= GTUNE_USE_SPLICE;
1519#endif
Nenad Merdanovic88afe032014-04-14 15:56:58 +02001520#if defined(USE_GETADDRINFO)
1521 global.tune.options |= GTUNE_USE_GAI;
1522#endif
Lukas Tribusa0bcbdc2016-09-12 21:42:20 +00001523#if defined(SO_REUSEPORT)
1524 global.tune.options |= GTUNE_USE_REUSEPORT;
1525#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +02001526
1527 pid = getpid();
1528 progname = *argv;
1529 while ((tmp = strchr(progname, '/')) != NULL)
1530 progname = tmp + 1;
1531
Kevinm48936af2010-12-22 16:08:21 +00001532 /* the process name is used for the logs only */
Dragan Dosen43885c72015-10-01 13:18:13 +02001533 chunk_initstr(&global.log_tag, strdup(progname));
Kevinm48936af2010-12-22 16:08:21 +00001534
Willy Tarreaubaaee002006-06-26 02:48:02 +02001535 argc--; argv++;
1536 while (argc > 0) {
1537 char *flag;
1538
1539 if (**argv == '-') {
1540 flag = *argv+1;
1541
1542 /* 1 arg */
1543 if (*flag == 'v') {
1544 display_version();
Willy Tarreau7b066db2007-12-02 11:28:59 +01001545 if (flag[1] == 'v') /* -vv */
1546 display_build_opts();
Willy Tarreaubaaee002006-06-26 02:48:02 +02001547 exit(0);
1548 }
Willy Tarreaue5733232019-05-22 19:24:06 +02001549#if defined(USE_EPOLL)
Willy Tarreaubaaee002006-06-26 02:48:02 +02001550 else if (*flag == 'd' && flag[1] == 'e')
Willy Tarreau43b78992009-01-25 15:42:27 +01001551 global.tune.options &= ~GTUNE_USE_EPOLL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001552#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001553#if defined(USE_POLL)
Willy Tarreaubaaee002006-06-26 02:48:02 +02001554 else if (*flag == 'd' && flag[1] == 'p')
Willy Tarreau43b78992009-01-25 15:42:27 +01001555 global.tune.options &= ~GTUNE_USE_POLL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001556#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001557#if defined(USE_KQUEUE)
Willy Tarreau1e63130a2007-04-09 12:03:06 +02001558 else if (*flag == 'd' && flag[1] == 'k')
Willy Tarreau43b78992009-01-25 15:42:27 +01001559 global.tune.options &= ~GTUNE_USE_KQUEUE;
Willy Tarreau1e63130a2007-04-09 12:03:06 +02001560#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001561#if defined(USE_EVPORTS)
Emmanuel Hocdet0ba4f482019-04-08 16:53:32 +00001562 else if (*flag == 'd' && flag[1] == 'v')
1563 global.tune.options &= ~GTUNE_USE_EVPORTS;
1564#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001565#if defined(USE_LINUX_SPLICE)
Willy Tarreau3ab68cf2009-01-25 16:03:28 +01001566 else if (*flag == 'd' && flag[1] == 'S')
1567 global.tune.options &= ~GTUNE_USE_SPLICE;
1568#endif
Nenad Merdanovic88afe032014-04-14 15:56:58 +02001569#if defined(USE_GETADDRINFO)
1570 else if (*flag == 'd' && flag[1] == 'G')
1571 global.tune.options &= ~GTUNE_USE_GAI;
1572#endif
Lukas Tribusa0bcbdc2016-09-12 21:42:20 +00001573#if defined(SO_REUSEPORT)
1574 else if (*flag == 'd' && flag[1] == 'R')
1575 global.tune.options &= ~GTUNE_USE_REUSEPORT;
1576#endif
Emeric Brun850efd52014-01-29 12:24:34 +01001577 else if (*flag == 'd' && flag[1] == 'V')
1578 global.ssl_server_verify = SSL_SERVER_VERIFY_NONE;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001579 else if (*flag == 'V')
1580 arg_mode |= MODE_VERBOSE;
1581 else if (*flag == 'd' && flag[1] == 'b')
1582 arg_mode |= MODE_FOREGROUND;
Willy Tarreau6e064432012-05-08 15:40:42 +02001583 else if (*flag == 'd' && flag[1] == 'M')
1584 mem_poison_byte = flag[2] ? strtol(flag + 2, NULL, 0) : 'P';
Willy Tarreau3eed10e2016-11-07 21:03:16 +01001585 else if (*flag == 'd' && flag[1] == 'r')
1586 global.tune.options |= GTUNE_RESOLVE_DONTFAIL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001587 else if (*flag == 'd')
1588 arg_mode |= MODE_DEBUG;
1589 else if (*flag == 'c')
1590 arg_mode |= MODE_CHECK;
William Lallemand095ba4c2017-06-01 17:38:50 +02001591 else if (*flag == 'D')
Willy Tarreau6bde87b2009-05-18 16:29:51 +02001592 arg_mode |= MODE_DAEMON;
Tim Duesterhusd6942c82017-11-20 15:58:35 +01001593 else if (*flag == 'W' && flag[1] == 's') {
Lukas Tribusf46bf952017-11-21 12:39:34 +01001594 arg_mode |= MODE_MWORKER | MODE_FOREGROUND;
Tim Duesterhusd6942c82017-11-20 15:58:35 +01001595#if defined(USE_SYSTEMD)
1596 global.tune.options |= GTUNE_USE_SYSTEMD;
1597#else
Christopher Faulet767a84b2017-11-24 16:50:31 +01001598 ha_alert("master-worker mode with systemd support (-Ws) requested, but not compiled. Use master-worker mode (-W) if you are not using Type=notify in your unit file or recompile with USE_SYSTEMD=1.\n\n");
Tim Duesterhusd6942c82017-11-20 15:58:35 +01001599 usage(progname);
1600#endif
1601 }
William Lallemand095ba4c2017-06-01 17:38:50 +02001602 else if (*flag == 'W')
1603 arg_mode |= MODE_MWORKER;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001604 else if (*flag == 'q')
1605 arg_mode |= MODE_QUIET;
Olivier Houchardf73629d2017-04-05 22:33:04 +02001606 else if (*flag == 'x') {
William Lallemand45eff442017-06-19 15:57:55 +02001607 if (argc <= 1 || argv[1][0] == '-') {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001608 ha_alert("Unix socket path expected with the -x flag\n\n");
William Lallemand45eff442017-06-19 15:57:55 +02001609 usage(progname);
Olivier Houchardf73629d2017-04-05 22:33:04 +02001610 }
William Lallemand4fc09692017-06-19 16:37:19 +02001611 if (old_unixsocket)
Christopher Faulet767a84b2017-11-24 16:50:31 +01001612 ha_warning("-x option already set, overwriting the value\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001613 old_unixsocket = argv[1];
William Lallemand4fc09692017-06-19 16:37:19 +02001614
Olivier Houchardf73629d2017-04-05 22:33:04 +02001615 argv++;
1616 argc--;
1617 }
William Lallemande7361152018-10-26 14:47:36 +02001618 else if (*flag == 'S') {
1619 struct wordlist *c;
1620
1621 if (argc <= 1 || argv[1][0] == '-') {
1622 ha_alert("Socket and optional bind parameters expected with the -S flag\n");
1623 usage(progname);
1624 }
1625 if ((c = malloc(sizeof(*c))) == NULL || (c->s = strdup(argv[1])) == NULL) {
1626 ha_alert("Cannot allocate memory\n");
1627 exit(EXIT_FAILURE);
1628 }
1629 LIST_ADD(&mworker_cli_conf, &c->list);
1630
1631 argv++;
1632 argc--;
1633 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02001634 else if (*flag == 's' && (flag[1] == 'f' || flag[1] == 't')) {
1635 /* list of pids to finish ('f') or terminate ('t') */
1636
1637 if (flag[1] == 'f')
1638 oldpids_sig = SIGUSR1; /* finish then exit */
1639 else
1640 oldpids_sig = SIGTERM; /* terminate immediately */
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001641 while (argc > 1 && argv[1][0] != '-') {
Chris Lane236062f2018-02-05 23:15:44 +00001642 char * endptr = NULL;
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001643 oldpids = realloc(oldpids, (nb_oldpids + 1) * sizeof(int));
1644 if (!oldpids) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001645 ha_alert("Cannot allocate old pid : out of memory.\n");
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001646 exit(1);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001647 }
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001648 argc--; argv++;
Chris Lane236062f2018-02-05 23:15:44 +00001649 errno = 0;
1650 oldpids[nb_oldpids] = strtol(*argv, &endptr, 10);
1651 if (errno) {
1652 ha_alert("-%2s option: failed to parse {%s}: %s\n",
1653 flag,
1654 *argv, strerror(errno));
1655 exit(1);
1656 } else if (endptr && strlen(endptr)) {
1657 while (isspace(*endptr)) endptr++;
Aurélien Nephtali39b89882018-02-17 20:53:11 +01001658 if (*endptr != 0) {
Chris Lane236062f2018-02-05 23:15:44 +00001659 ha_alert("-%2s option: some bytes unconsumed in PID list {%s}\n",
1660 flag, endptr);
1661 exit(1);
Aurélien Nephtali39b89882018-02-17 20:53:11 +01001662 }
Chris Lane236062f2018-02-05 23:15:44 +00001663 }
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001664 if (oldpids[nb_oldpids] <= 0)
1665 usage(progname);
1666 nb_oldpids++;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001667 }
1668 }
Willy Tarreaua088d312015-10-08 11:58:48 +02001669 else if (flag[0] == '-' && flag[1] == 0) { /* "--" */
1670 /* now that's a cfgfile list */
1671 argv++; argc--;
1672 while (argc > 0) {
Maxime de Roucy0f503922016-05-13 23:52:55 +02001673 if (!list_append_word(&cfg_cfgfiles, *argv, &err_msg)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001674 ha_alert("Cannot load configuration file/directory %s : %s\n",
1675 *argv,
1676 err_msg);
Willy Tarreaua088d312015-10-08 11:58:48 +02001677 exit(1);
1678 }
Willy Tarreaua088d312015-10-08 11:58:48 +02001679 argv++; argc--;
1680 }
1681 break;
1682 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02001683 else { /* >=2 args */
1684 argv++; argc--;
1685 if (argc == 0)
Willy Tarreau3bafcdc2011-09-10 19:20:23 +02001686 usage(progname);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001687
1688 switch (*flag) {
Willy Tarreau576132e2011-09-10 19:26:56 +02001689 case 'C' : change_dir = *argv; break;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001690 case 'n' : cfg_maxconn = atol(*argv); break;
Willy Tarreau70060452015-12-14 12:46:07 +01001691 case 'm' : global.rlimit_memmax_all = atol(*argv); break;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001692 case 'N' : cfg_maxpconn = atol(*argv); break;
William Lallemanddaf4cd22018-04-17 16:46:13 +02001693 case 'L' :
1694 strncpy(localpeer, *argv, sizeof(localpeer) - 1);
1695 setenv("HAPROXY_LOCALPEER", localpeer, 1);
1696 break;
Willy Tarreau5d01a632009-06-22 16:02:30 +02001697 case 'f' :
Maxime de Roucy0f503922016-05-13 23:52:55 +02001698 if (!list_append_word(&cfg_cfgfiles, *argv, &err_msg)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001699 ha_alert("Cannot load configuration file/directory %s : %s\n",
1700 *argv,
1701 err_msg);
Willy Tarreau5d01a632009-06-22 16:02:30 +02001702 exit(1);
1703 }
Willy Tarreau5d01a632009-06-22 16:02:30 +02001704 break;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001705 case 'p' : cfg_pidfile = *argv; break;
Willy Tarreau3bafcdc2011-09-10 19:20:23 +02001706 default: usage(progname);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001707 }
1708 }
1709 }
1710 else
Willy Tarreau3bafcdc2011-09-10 19:20:23 +02001711 usage(progname);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001712 argv++; argc--;
1713 }
1714
Christopher Faulete3a5e352017-10-24 13:53:54 +02001715 global.mode |= (arg_mode & (MODE_DAEMON | MODE_MWORKER | MODE_FOREGROUND | MODE_VERBOSE
1716 | MODE_QUIET | MODE_CHECK | MODE_DEBUG));
Willy Tarreaubaaee002006-06-26 02:48:02 +02001717
William Lallemand944e6192018-11-21 15:48:31 +01001718 if (getenv("HAPROXY_MWORKER_WAIT_ONLY")) {
William Lallemandcb11fd22017-06-01 17:38:52 +02001719 unsetenv("HAPROXY_MWORKER_WAIT_ONLY");
William Lallemand944e6192018-11-21 15:48:31 +01001720 global.mode |= MODE_MWORKER_WAIT;
1721 global.mode &= ~MODE_MWORKER;
William Lallemandcb11fd22017-06-01 17:38:52 +02001722 }
1723
1724 if ((global.mode & MODE_MWORKER) && (getenv("HAPROXY_MWORKER_REEXEC") != NULL)) {
1725 atexit_flag = 1;
1726 atexit(reexec_on_failure);
1727 }
1728
Willy Tarreau576132e2011-09-10 19:26:56 +02001729 if (change_dir && chdir(change_dir) < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001730 ha_alert("Could not change to directory %s : %s\n", change_dir, strerror(errno));
Willy Tarreau576132e2011-09-10 19:26:56 +02001731 exit(1);
1732 }
1733
Willy Tarreaubaaee002006-06-26 02:48:02 +02001734 global.maxsock = 10; /* reserve 10 fds ; will be incremented by socket eaters */
Willy Tarreau915e1eb2009-06-22 15:48:36 +02001735
1736 init_default_instance();
1737
William Lallemand944e6192018-11-21 15:48:31 +01001738 /* in wait mode, we don't try to read the configuration files */
1739 if (!(global.mode & MODE_MWORKER_WAIT)) {
William Lallemand7b302d82019-05-20 11:15:37 +02001740 struct buffer *trash = get_trash_chunk();
Willy Tarreauc4382422009-12-06 13:10:44 +01001741
William Lallemand944e6192018-11-21 15:48:31 +01001742 /* handle cfgfiles that are actually directories */
1743 cfgfiles_expand_directories();
1744
1745 if (LIST_ISEMPTY(&cfg_cfgfiles))
1746 usage(progname);
1747
1748
1749 list_for_each_entry(wl, &cfg_cfgfiles, list) {
1750 int ret;
1751
William Lallemand7b302d82019-05-20 11:15:37 +02001752 if (trash->data)
1753 chunk_appendf(trash, ";");
1754
1755 chunk_appendf(trash, "%s", wl->s);
1756
William Lallemand944e6192018-11-21 15:48:31 +01001757 ret = readcfgfile(wl->s);
1758 if (ret == -1) {
1759 ha_alert("Could not open configuration file %s : %s\n",
1760 wl->s, strerror(errno));
1761 exit(1);
1762 }
1763 if (ret & (ERR_ABORT|ERR_FATAL))
1764 ha_alert("Error(s) found in configuration file : %s\n", wl->s);
1765 err_code |= ret;
1766 if (err_code & ERR_ABORT)
1767 exit(1);
Willy Tarreauc4382422009-12-06 13:10:44 +01001768 }
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02001769
William Lallemand944e6192018-11-21 15:48:31 +01001770 /* do not try to resolve arguments nor to spot inconsistencies when
1771 * the configuration contains fatal errors caused by files not found
1772 * or failed memory allocations.
1773 */
1774 if (err_code & (ERR_ABORT|ERR_FATAL)) {
1775 ha_alert("Fatal errors found in configuration.\n");
1776 exit(1);
1777 }
William Lallemand7b302d82019-05-20 11:15:37 +02001778 if (trash->data)
1779 setenv("HAPROXY_CFGFILES", trash->area, 1);
1780
Willy Tarreaub83dc3d2017-04-19 11:24:07 +02001781 }
William Lallemandce83b4a2018-10-26 14:47:30 +02001782 if (global.mode & MODE_MWORKER) {
1783 int proc;
William Lallemand16dd1b32018-11-19 18:46:18 +01001784 struct mworker_proc *tmproc;
1785
William Lallemand482f9a92019-04-12 16:15:00 +02001786 setenv("HAPROXY_MWORKER", "1", 1);
1787
William Lallemand16dd1b32018-11-19 18:46:18 +01001788 if (getenv("HAPROXY_MWORKER_REEXEC") == NULL) {
1789
William Lallemandf3a86832019-04-01 11:29:58 +02001790 tmproc = calloc(1, sizeof(*tmproc));
William Lallemand16dd1b32018-11-19 18:46:18 +01001791 if (!tmproc) {
1792 ha_alert("Cannot allocate process structures.\n");
1793 exit(EXIT_FAILURE);
1794 }
William Lallemand8f7069a2019-04-12 16:09:23 +02001795 tmproc->options |= PROC_O_TYPE_MASTER; /* master */
William Lallemand16dd1b32018-11-19 18:46:18 +01001796 tmproc->reloads = 0;
1797 tmproc->relative_pid = 0;
1798 tmproc->pid = pid;
1799 tmproc->timestamp = start_date.tv_sec;
1800 tmproc->ipc_fd[0] = -1;
1801 tmproc->ipc_fd[1] = -1;
1802
1803 proc_self = tmproc;
1804
1805 LIST_ADDQ(&proc_list, &tmproc->list);
1806 }
William Lallemandce83b4a2018-10-26 14:47:30 +02001807
1808 for (proc = 0; proc < global.nbproc; proc++) {
William Lallemandce83b4a2018-10-26 14:47:30 +02001809
William Lallemandf3a86832019-04-01 11:29:58 +02001810 tmproc = calloc(1, sizeof(*tmproc));
William Lallemandce83b4a2018-10-26 14:47:30 +02001811 if (!tmproc) {
1812 ha_alert("Cannot allocate process structures.\n");
1813 exit(EXIT_FAILURE);
1814 }
1815
William Lallemand8f7069a2019-04-12 16:09:23 +02001816 tmproc->options |= PROC_O_TYPE_WORKER; /* worker */
William Lallemandce83b4a2018-10-26 14:47:30 +02001817 tmproc->pid = -1;
1818 tmproc->reloads = 0;
William Lallemande3683302018-11-19 18:46:17 +01001819 tmproc->timestamp = -1;
William Lallemandce83b4a2018-10-26 14:47:30 +02001820 tmproc->relative_pid = 1 + proc;
William Lallemand550db6d2018-11-06 17:37:12 +01001821 tmproc->ipc_fd[0] = -1;
1822 tmproc->ipc_fd[1] = -1;
William Lallemandce83b4a2018-10-26 14:47:30 +02001823
1824 if (mworker_cli_sockpair_new(tmproc, proc) < 0) {
1825 exit(EXIT_FAILURE);
1826 }
1827
1828 LIST_ADDQ(&proc_list, &tmproc->list);
1829 }
William Lallemand944e6192018-11-21 15:48:31 +01001830 }
1831 if (global.mode & (MODE_MWORKER|MODE_MWORKER_WAIT)) {
1832 struct wordlist *it, *c;
1833
William Lallemand1b663612018-10-26 14:47:33 +02001834 mworker_env_to_proc_list(); /* get the info of the children in the env */
William Lallemand8a022572018-10-26 14:47:35 +02001835
William Lallemande7361152018-10-26 14:47:36 +02001836
William Lallemand550db6d2018-11-06 17:37:12 +01001837 if (!LIST_ISEMPTY(&mworker_cli_conf)) {
William Lallemande7361152018-10-26 14:47:36 +02001838
William Lallemand550db6d2018-11-06 17:37:12 +01001839 if (mworker_cli_proxy_create() < 0) {
William Lallemande7361152018-10-26 14:47:36 +02001840 ha_alert("Can't create the master's CLI.\n");
1841 exit(EXIT_FAILURE);
1842 }
William Lallemande7361152018-10-26 14:47:36 +02001843
William Lallemand550db6d2018-11-06 17:37:12 +01001844 list_for_each_entry_safe(c, it, &mworker_cli_conf, list) {
1845
1846 if (mworker_cli_proxy_new_listener(c->s) < 0) {
1847 ha_alert("Can't create the master's CLI.\n");
1848 exit(EXIT_FAILURE);
1849 }
1850 LIST_DEL(&c->list);
1851 free(c->s);
1852 free(c);
1853 }
1854 }
William Lallemandce83b4a2018-10-26 14:47:30 +02001855 }
1856
Willy Tarreaubb925012009-07-23 13:36:36 +02001857 err_code |= check_config_validity();
1858 if (err_code & (ERR_ABORT|ERR_FATAL)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001859 ha_alert("Fatal errors found in configuration.\n");
Willy Tarreau915e1eb2009-06-22 15:48:36 +02001860 exit(1);
1861 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02001862
Carl Henrik Lunde4944c8c2020-02-27 16:45:50 +01001863 err_code |= pattern_finalize_config();
1864 if (err_code & (ERR_ABORT|ERR_FATAL)) {
1865 ha_alert("Failed to finalize pattern config.\n");
1866 exit(1);
1867 }
Willy Tarreau0f936722019-04-11 14:47:08 +02001868
Willy Tarreau70060452015-12-14 12:46:07 +01001869 /* recompute the amount of per-process memory depending on nbproc and
1870 * the shared SSL cache size (allowed to exist in all processes).
1871 */
1872 if (global.rlimit_memmax_all) {
1873#if defined (USE_OPENSSL) && !defined(USE_PRIVATE_CACHE)
1874 int64_t ssl_cache_bytes = global.tune.sslcachesize * 200LL;
1875
1876 global.rlimit_memmax =
1877 ((((int64_t)global.rlimit_memmax_all * 1048576LL) -
1878 ssl_cache_bytes) / global.nbproc +
1879 ssl_cache_bytes + 1048575LL) / 1048576LL;
1880#else
1881 global.rlimit_memmax = global.rlimit_memmax_all / global.nbproc;
1882#endif
1883 }
1884
Willy Tarreaue5733232019-05-22 19:24:06 +02001885#ifdef USE_NS
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +01001886 err_code |= netns_init();
1887 if (err_code & (ERR_ABORT|ERR_FATAL)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001888 ha_alert("Failed to initialize namespace support.\n");
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +01001889 exit(1);
1890 }
1891#endif
1892
Baptiste Assmann4215d7d2016-11-02 15:33:15 +01001893 /* Apply server states */
1894 apply_server_state();
1895
Olivier Houchardfbc74e82017-11-24 16:54:05 +01001896 for (px = proxies_list; px; px = px->next)
Baptiste Assmann4215d7d2016-11-02 15:33:15 +01001897 srv_compute_all_admin_states(px);
1898
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01001899 /* Apply servers' configured address */
1900 err_code |= srv_init_addr();
1901 if (err_code & (ERR_ABORT|ERR_FATAL)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001902 ha_alert("Failed to initialize server(s) addr.\n");
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01001903 exit(1);
1904 }
1905
Willy Tarreaubaaee002006-06-26 02:48:02 +02001906 if (global.mode & MODE_CHECK) {
Willy Tarreau8b15ba12012-02-02 17:48:18 +01001907 struct peers *pr;
1908 struct proxy *px;
1909
Frédéric Lécailleed2b4a62017-07-13 09:07:09 +02001910 for (pr = cfg_peers; pr; pr = pr->next)
Willy Tarreau8b15ba12012-02-02 17:48:18 +01001911 if (pr->peers_fe)
1912 break;
1913
Olivier Houchardfbc74e82017-11-24 16:54:05 +01001914 for (px = proxies_list; px; px = px->next)
Willy Tarreau4348fad2012-09-20 16:48:07 +02001915 if (px->state == PR_STNEW && !LIST_ISEMPTY(&px->conf.listeners))
Willy Tarreau8b15ba12012-02-02 17:48:18 +01001916 break;
1917
1918 if (pr || px) {
1919 /* At least one peer or one listener has been found */
1920 qfprintf(stdout, "Configuration file is valid\n");
1921 exit(0);
1922 }
1923 qfprintf(stdout, "Configuration file has no error but will not start (no listener) => exit(2).\n");
1924 exit(2);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001925 }
1926
Emeric Brunc60def82017-09-27 14:59:38 +02001927 global_listener_queue_task = task_new(MAX_THREADS_MASK);
Willy Tarreaue9b26022011-08-01 20:57:55 +02001928 if (!global_listener_queue_task) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001929 ha_alert("Out of memory when initializing global task\n");
Willy Tarreaue9b26022011-08-01 20:57:55 +02001930 exit(1);
1931 }
1932 /* very simple initialization, users will queue the task if needed */
1933 global_listener_queue_task->context = NULL; /* not even a context! */
1934 global_listener_queue_task->process = manage_global_listener_queue;
Willy Tarreaue9b26022011-08-01 20:57:55 +02001935
Willy Tarreau8263d2b2012-08-28 00:06:31 +02001936 /* now we know the buffer size, we can initialize the channels and buffers */
Willy Tarreau9b28e032012-10-12 23:49:43 +02001937 init_buffer();
Willy Tarreau8280d642009-09-23 23:37:52 +02001938
Willy Tarreaue6945732016-12-21 19:57:00 +01001939 list_for_each_entry(pcf, &post_check_list, list) {
1940 err_code |= pcf->fct();
1941 if (err_code & (ERR_ABORT|ERR_FATAL))
1942 exit(1);
1943 }
1944
Willy Tarreaubaaee002006-06-26 02:48:02 +02001945 if (cfg_maxconn > 0)
1946 global.maxconn = cfg_maxconn;
1947
Willy Tarreau8d687d82019-03-01 09:39:42 +01001948 if (global.stats_fe)
1949 global.maxsock += global.stats_fe->maxconn;
1950
1951 if (cfg_peers) {
1952 /* peers also need to bypass global maxconn */
1953 struct peers *p = cfg_peers;
1954
1955 for (p = cfg_peers; p; p = p->next)
1956 if (p->peers_fe)
1957 global.maxsock += p->peers_fe->maxconn;
1958 }
1959
Willy Tarreaubaaee002006-06-26 02:48:02 +02001960 if (cfg_pidfile) {
Willy Tarreaua534fea2008-08-03 12:19:50 +02001961 free(global.pidfile);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001962 global.pidfile = strdup(cfg_pidfile);
1963 }
1964
Willy Tarreaud0256482015-01-15 21:45:22 +01001965 /* Now we want to compute the maxconn and possibly maxsslconn values.
Willy Tarreauac350932019-03-01 15:43:14 +01001966 * It's a bit tricky. Maxconn defaults to the pre-computed value based
1967 * on rlim_fd_cur and the number of FDs in use due to the configuration,
1968 * and maxsslconn defaults to DEFAULT_MAXSSLCONN. On top of that we can
1969 * enforce a lower limit based on memmax.
Willy Tarreaud0256482015-01-15 21:45:22 +01001970 *
1971 * If memmax is set, then it depends on which values are set. If
1972 * maxsslconn is set, we use memmax to determine how many cleartext
1973 * connections may be added, and set maxconn to the sum of the two.
1974 * If maxconn is set and not maxsslconn, maxsslconn is computed from
1975 * the remaining amount of memory between memmax and the cleartext
1976 * connections. If neither are set, then it is considered that all
1977 * connections are SSL-capable, and maxconn is computed based on this,
1978 * then maxsslconn accordingly. We need to know if SSL is used on the
1979 * frontends, backends, or both, because when it's used on both sides,
1980 * we need twice the value for maxsslconn, but we only count the
1981 * handshake once since it is not performed on the two sides at the
1982 * same time (frontend-side is terminated before backend-side begins).
1983 * The SSL stack is supposed to have filled ssl_session_cost and
Willy Tarreau474b96a2015-01-28 19:03:21 +01001984 * ssl_handshake_cost during its initialization. In any case, if
1985 * SYSTEM_MAXCONN is set, we still enforce it as an upper limit for
1986 * maxconn in order to protect the system.
Willy Tarreaud0256482015-01-15 21:45:22 +01001987 */
Willy Tarreauac350932019-03-01 15:43:14 +01001988 ideal_maxconn = compute_ideal_maxconn();
1989
Willy Tarreaud0256482015-01-15 21:45:22 +01001990 if (!global.rlimit_memmax) {
1991 if (global.maxconn == 0) {
Willy Tarreauac350932019-03-01 15:43:14 +01001992 global.maxconn = ideal_maxconn;
Willy Tarreaud0256482015-01-15 21:45:22 +01001993 if (global.mode & (MODE_VERBOSE|MODE_DEBUG))
1994 fprintf(stderr, "Note: setting global.maxconn to %d.\n", global.maxconn);
1995 }
1996 }
1997#ifdef USE_OPENSSL
1998 else if (!global.maxconn && !global.maxsslconn &&
1999 (global.ssl_used_frontend || global.ssl_used_backend)) {
2000 /* memmax is set, compute everything automatically. Here we want
2001 * to ensure that all SSL connections will be served. We take
2002 * care of the number of sides where SSL is used, and consider
2003 * the worst case : SSL used on both sides and doing a handshake
2004 * simultaneously. Note that we can't have more than maxconn
2005 * handshakes at a time by definition, so for the worst case of
2006 * two SSL conns per connection, we count a single handshake.
2007 */
2008 int sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
2009 int64_t mem = global.rlimit_memmax * 1048576ULL;
2010
2011 mem -= global.tune.sslcachesize * 200; // about 200 bytes per SSL cache entry
2012 mem -= global.maxzlibmem;
2013 mem = mem * MEM_USABLE_RATIO;
2014
2015 global.maxconn = mem /
Willy Tarreau87b09662015-04-03 00:22:06 +02002016 ((STREAM_MAX_COST + 2 * global.tune.bufsize) + // stream + 2 buffers per stream
Willy Tarreaud0256482015-01-15 21:45:22 +01002017 sides * global.ssl_session_max_cost + // SSL buffers, one per side
2018 global.ssl_handshake_max_cost); // 1 handshake per connection max
2019
Willy Tarreauac350932019-03-01 15:43:14 +01002020 global.maxconn = MIN(global.maxconn, ideal_maxconn);
Willy Tarreaud0256482015-01-15 21:45:22 +01002021 global.maxconn = round_2dig(global.maxconn);
Willy Tarreau474b96a2015-01-28 19:03:21 +01002022#ifdef SYSTEM_MAXCONN
Willy Tarreauca783d42019-03-13 10:03:07 +01002023 if (global.maxconn > SYSTEM_MAXCONN)
2024 global.maxconn = SYSTEM_MAXCONN;
Willy Tarreau474b96a2015-01-28 19:03:21 +01002025#endif /* SYSTEM_MAXCONN */
Willy Tarreaud0256482015-01-15 21:45:22 +01002026 global.maxsslconn = sides * global.maxconn;
2027 if (global.mode & (MODE_VERBOSE|MODE_DEBUG))
2028 fprintf(stderr, "Note: setting global.maxconn to %d and global.maxsslconn to %d.\n",
2029 global.maxconn, global.maxsslconn);
2030 }
2031 else if (!global.maxsslconn &&
2032 (global.ssl_used_frontend || global.ssl_used_backend)) {
2033 /* memmax and maxconn are known, compute maxsslconn automatically.
2034 * maxsslconn being forced, we don't know how many of it will be
2035 * on each side if both sides are being used. The worst case is
2036 * when all connections use only one SSL instance because
2037 * handshakes may be on two sides at the same time.
2038 */
2039 int sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
2040 int64_t mem = global.rlimit_memmax * 1048576ULL;
2041 int64_t sslmem;
2042
2043 mem -= global.tune.sslcachesize * 200; // about 200 bytes per SSL cache entry
2044 mem -= global.maxzlibmem;
2045 mem = mem * MEM_USABLE_RATIO;
2046
Willy Tarreau87b09662015-04-03 00:22:06 +02002047 sslmem = mem - global.maxconn * (int64_t)(STREAM_MAX_COST + 2 * global.tune.bufsize);
Willy Tarreaud0256482015-01-15 21:45:22 +01002048 global.maxsslconn = sslmem / (global.ssl_session_max_cost + global.ssl_handshake_max_cost);
2049 global.maxsslconn = round_2dig(global.maxsslconn);
2050
2051 if (sslmem <= 0 || global.maxsslconn < sides) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002052 ha_alert("Cannot compute the automatic maxsslconn because global.maxconn is already too "
2053 "high for the global.memmax value (%d MB). The absolute maximum possible value "
2054 "without SSL is %d, but %d was found and SSL is in use.\n",
2055 global.rlimit_memmax,
2056 (int)(mem / (STREAM_MAX_COST + 2 * global.tune.bufsize)),
2057 global.maxconn);
Willy Tarreaud0256482015-01-15 21:45:22 +01002058 exit(1);
2059 }
2060
2061 if (global.maxsslconn > sides * global.maxconn)
2062 global.maxsslconn = sides * global.maxconn;
2063
2064 if (global.mode & (MODE_VERBOSE|MODE_DEBUG))
2065 fprintf(stderr, "Note: setting global.maxsslconn to %d\n", global.maxsslconn);
2066 }
2067#endif
2068 else if (!global.maxconn) {
2069 /* memmax and maxsslconn are known/unused, compute maxconn automatically */
2070 int sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
2071 int64_t mem = global.rlimit_memmax * 1048576ULL;
2072 int64_t clearmem;
2073
2074 if (global.ssl_used_frontend || global.ssl_used_backend)
2075 mem -= global.tune.sslcachesize * 200; // about 200 bytes per SSL cache entry
2076
2077 mem -= global.maxzlibmem;
2078 mem = mem * MEM_USABLE_RATIO;
2079
2080 clearmem = mem;
2081 if (sides)
2082 clearmem -= (global.ssl_session_max_cost + global.ssl_handshake_max_cost) * (int64_t)global.maxsslconn;
2083
Willy Tarreau87b09662015-04-03 00:22:06 +02002084 global.maxconn = clearmem / (STREAM_MAX_COST + 2 * global.tune.bufsize);
Willy Tarreauac350932019-03-01 15:43:14 +01002085 global.maxconn = MIN(global.maxconn, ideal_maxconn);
Willy Tarreaud0256482015-01-15 21:45:22 +01002086 global.maxconn = round_2dig(global.maxconn);
Willy Tarreau474b96a2015-01-28 19:03:21 +01002087#ifdef SYSTEM_MAXCONN
Willy Tarreauca783d42019-03-13 10:03:07 +01002088 if (global.maxconn > SYSTEM_MAXCONN)
2089 global.maxconn = SYSTEM_MAXCONN;
Willy Tarreau474b96a2015-01-28 19:03:21 +01002090#endif /* SYSTEM_MAXCONN */
Willy Tarreaud0256482015-01-15 21:45:22 +01002091
2092 if (clearmem <= 0 || !global.maxconn) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002093 ha_alert("Cannot compute the automatic maxconn because global.maxsslconn is already too "
2094 "high for the global.memmax value (%d MB). The absolute maximum possible value "
2095 "is %d, but %d was found.\n",
2096 global.rlimit_memmax,
2097 (int)(mem / (global.ssl_session_max_cost + global.ssl_handshake_max_cost)),
2098 global.maxsslconn);
Willy Tarreaud0256482015-01-15 21:45:22 +01002099 exit(1);
2100 }
2101
2102 if (global.mode & (MODE_VERBOSE|MODE_DEBUG)) {
2103 if (sides && global.maxsslconn > sides * global.maxconn) {
2104 fprintf(stderr, "Note: global.maxsslconn is forced to %d which causes global.maxconn "
2105 "to be limited to %d. Better reduce global.maxsslconn to get more "
2106 "room for extra connections.\n", global.maxsslconn, global.maxconn);
2107 }
2108 fprintf(stderr, "Note: setting global.maxconn to %d\n", global.maxconn);
2109 }
Willy Tarreau66aa61f2009-01-18 21:44:07 +01002110 }
2111
Willy Tarreau5a023f02019-03-01 14:19:31 +01002112 if (!global.maxpipes)
2113 global.maxpipes = compute_ideal_maxpipes();
Willy Tarreau66aa61f2009-01-18 21:44:07 +01002114
Willy Tarreauabacc2c2011-09-07 14:26:33 +02002115 global.hardmaxconn = global.maxconn; /* keep this max value */
Willy Tarreaubaaee002006-06-26 02:48:02 +02002116 global.maxsock += global.maxconn * 2; /* each connection needs two sockets */
Willy Tarreau3ec79b92009-01-18 20:39:42 +01002117 global.maxsock += global.maxpipes * 2; /* each pipe needs two FDs */
Willy Tarreau2c58b412019-03-14 19:10:55 +01002118 global.maxsock += global.nbthread; /* one epoll_fd/kqueue_fd per thread */
2119 global.maxsock += 2 * global.nbthread; /* one wake-up pipe (2 fd) per thread */
2120
Emeric Brunece0c332017-12-06 13:51:49 +01002121 /* compute fd used by async engines */
2122 if (global.ssl_used_async_engines) {
2123 int sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
2124 global.maxsock += global.maxconn * sides * global.ssl_used_async_engines;
2125 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002126
Olivier Houchard88698d92019-04-16 19:07:22 +02002127 /* update connection pool thresholds */
2128 global.tune.pool_low_count = ((long long)global.maxsock * global.tune.pool_low_ratio + 99) / 100;
2129 global.tune.pool_high_count = ((long long)global.maxsock * global.tune.pool_high_ratio + 99) / 100;
2130
Willy Tarreauc8d5b952019-02-27 17:25:52 +01002131 proxy_adjust_all_maxconn();
2132
Willy Tarreau1db37712007-06-03 17:16:49 +02002133 if (global.tune.maxpollevents <= 0)
2134 global.tune.maxpollevents = MAX_POLL_EVENTS;
2135
Olivier Houchard1599b802018-05-24 18:59:04 +02002136 if (global.tune.runqueue_depth <= 0)
2137 global.tune.runqueue_depth = RUNQUEUE_DEPTH;
2138
Willy Tarreau6f4a82c2009-03-21 20:43:57 +01002139 if (global.tune.recv_enough == 0)
2140 global.tune.recv_enough = MIN_RECV_AT_ONCE_ENOUGH;
2141
Willy Tarreau27097842015-09-28 13:53:23 +02002142 if (global.tune.maxrewrite < 0)
2143 global.tune.maxrewrite = MAXREWRITE;
2144
Willy Tarreau27a674e2009-08-17 07:23:33 +02002145 if (global.tune.maxrewrite >= global.tune.bufsize / 2)
2146 global.tune.maxrewrite = global.tune.bufsize / 2;
2147
Willy Tarreaubaaee002006-06-26 02:48:02 +02002148 if (arg_mode & (MODE_DEBUG | MODE_FOREGROUND)) {
2149 /* command line debug mode inhibits configuration mode */
William Lallemand095ba4c2017-06-01 17:38:50 +02002150 global.mode &= ~(MODE_DAEMON | MODE_QUIET);
Willy Tarreau772f0dd2012-10-26 16:04:28 +02002151 global.mode |= (arg_mode & (MODE_DEBUG | MODE_FOREGROUND));
2152 }
2153
William Lallemand095ba4c2017-06-01 17:38:50 +02002154 if (arg_mode & MODE_DAEMON) {
Willy Tarreau772f0dd2012-10-26 16:04:28 +02002155 /* command line daemon mode inhibits foreground and debug modes mode */
2156 global.mode &= ~(MODE_DEBUG | MODE_FOREGROUND);
William Lallemand095ba4c2017-06-01 17:38:50 +02002157 global.mode |= arg_mode & MODE_DAEMON;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002158 }
Willy Tarreau772f0dd2012-10-26 16:04:28 +02002159
2160 global.mode |= (arg_mode & (MODE_QUIET | MODE_VERBOSE));
Willy Tarreaubaaee002006-06-26 02:48:02 +02002161
William Lallemand095ba4c2017-06-01 17:38:50 +02002162 if ((global.mode & MODE_DEBUG) && (global.mode & (MODE_DAEMON | MODE_QUIET))) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002163 ha_warning("<debug> mode incompatible with <quiet> and <daemon>. Keeping <debug> only.\n");
William Lallemand095ba4c2017-06-01 17:38:50 +02002164 global.mode &= ~(MODE_DAEMON | MODE_QUIET);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002165 }
2166
William Lallemand095ba4c2017-06-01 17:38:50 +02002167 if ((global.nbproc > 1) && !(global.mode & (MODE_DAEMON | MODE_MWORKER))) {
Willy Tarreaubaaee002006-06-26 02:48:02 +02002168 if (!(global.mode & (MODE_FOREGROUND | MODE_DEBUG)))
Christopher Faulet767a84b2017-11-24 16:50:31 +01002169 ha_warning("<nbproc> is only meaningful in daemon mode or master-worker mode. Setting limit to 1 process.\n");
Willy Tarreaubaaee002006-06-26 02:48:02 +02002170 global.nbproc = 1;
2171 }
2172
2173 if (global.nbproc < 1)
2174 global.nbproc = 1;
2175
Christopher Fauletbe0faa22017-08-29 15:37:10 +02002176 if (global.nbthread < 1)
2177 global.nbthread = 1;
2178
Christopher Faulet3ef26392017-08-29 16:46:57 +02002179 /* Realloc trash buffers because global.tune.bufsize may have changed */
Christopher Fauletcd7879a2017-10-27 13:53:47 +02002180 if (!init_trash_buffers(0)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002181 ha_alert("failed to initialize trash buffers.\n");
Christopher Faulet3ef26392017-08-29 16:46:57 +02002182 exit(1);
2183 }
2184
Christopher Faulet96d44832017-11-14 22:02:30 +01002185 if (!init_log_buffers()) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002186 ha_alert("failed to initialize log buffers.\n");
Christopher Faulet96d44832017-11-14 22:02:30 +01002187 exit(1);
2188 }
2189
Willy Tarreauef1d1f82007-04-16 00:25:25 +02002190 /*
2191 * Note: we could register external pollers here.
2192 * Built-in pollers have been registered before main().
2193 */
Willy Tarreau4f60f162007-04-08 16:39:58 +02002194
Willy Tarreau43b78992009-01-25 15:42:27 +01002195 if (!(global.tune.options & GTUNE_USE_KQUEUE))
Willy Tarreau1e63130a2007-04-09 12:03:06 +02002196 disable_poller("kqueue");
2197
Emmanuel Hocdet0ba4f482019-04-08 16:53:32 +00002198 if (!(global.tune.options & GTUNE_USE_EVPORTS))
2199 disable_poller("evports");
2200
Willy Tarreau43b78992009-01-25 15:42:27 +01002201 if (!(global.tune.options & GTUNE_USE_EPOLL))
Willy Tarreau4f60f162007-04-08 16:39:58 +02002202 disable_poller("epoll");
2203
Willy Tarreau43b78992009-01-25 15:42:27 +01002204 if (!(global.tune.options & GTUNE_USE_POLL))
Willy Tarreau4f60f162007-04-08 16:39:58 +02002205 disable_poller("poll");
2206
Willy Tarreau43b78992009-01-25 15:42:27 +01002207 if (!(global.tune.options & GTUNE_USE_SELECT))
Willy Tarreau4f60f162007-04-08 16:39:58 +02002208 disable_poller("select");
2209
2210 /* Note: we could disable any poller by name here */
2211
Christopher Fauletb3f4e142016-03-07 12:46:38 +01002212 if (global.mode & (MODE_VERBOSE|MODE_DEBUG)) {
Willy Tarreau2ff76222007-04-09 19:29:56 +02002213 list_pollers(stderr);
Christopher Fauletb3f4e142016-03-07 12:46:38 +01002214 fprintf(stderr, "\n");
2215 list_filters(stderr);
2216 }
Willy Tarreau2ff76222007-04-09 19:29:56 +02002217
Willy Tarreau4f60f162007-04-08 16:39:58 +02002218 if (!init_pollers()) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002219 ha_alert("No polling mechanism available.\n"
2220 " It is likely that haproxy was built with TARGET=generic and that FD_SETSIZE\n"
2221 " is too low on this platform to support maxconn and the number of listeners\n"
2222 " and servers. You should rebuild haproxy specifying your system using TARGET=\n"
2223 " in order to support other polling systems (poll, epoll, kqueue) or reduce the\n"
2224 " global maxconn setting to accommodate the system's limitation. For reference,\n"
2225 " FD_SETSIZE=%d on this system, global.maxconn=%d resulting in a maximum of\n"
2226 " %d file descriptors. You should thus reduce global.maxconn by %d. Also,\n"
2227 " check build settings using 'haproxy -vv'.\n\n",
2228 FD_SETSIZE, global.maxconn, global.maxsock, (global.maxsock + 1 - FD_SETSIZE) / 2);
Willy Tarreau4f60f162007-04-08 16:39:58 +02002229 exit(1);
2230 }
Willy Tarreau2ff76222007-04-09 19:29:56 +02002231 if (global.mode & (MODE_VERBOSE|MODE_DEBUG)) {
2232 printf("Using %s() as the polling mechanism.\n", cur_poller.name);
Willy Tarreau4f60f162007-04-08 16:39:58 +02002233 }
2234
Krzysztof Piotr Oledzki48cb2ae2009-10-02 22:51:14 +02002235 if (!global.node)
2236 global.node = strdup(hostname);
2237
Thierry FOURNIERa4a0f3d2015-01-23 12:08:30 +01002238 if (!hlua_post_init())
2239 exit(1);
Thomas Holmes6abded42015-05-12 16:23:58 +01002240
Maxime de Roucy0f503922016-05-13 23:52:55 +02002241 free(err_msg);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002242}
2243
Simon Horman6fb82592011-07-15 13:14:11 +09002244static void deinit_acl_cond(struct acl_cond *cond)
Simon Hormanac821422011-07-15 13:14:09 +09002245{
Simon Hormanac821422011-07-15 13:14:09 +09002246 struct acl_term_suite *suite, *suiteb;
2247 struct acl_term *term, *termb;
2248
Simon Horman6fb82592011-07-15 13:14:11 +09002249 if (!cond)
2250 return;
2251
2252 list_for_each_entry_safe(suite, suiteb, &cond->suites, list) {
2253 list_for_each_entry_safe(term, termb, &suite->terms, list) {
2254 LIST_DEL(&term->list);
2255 free(term);
Simon Hormanac821422011-07-15 13:14:09 +09002256 }
Simon Horman6fb82592011-07-15 13:14:11 +09002257 LIST_DEL(&suite->list);
2258 free(suite);
2259 }
2260
2261 free(cond);
2262}
2263
Christopher Faulet482c8ec2019-12-17 11:25:46 +01002264static void deinit_act_rules(struct list *rules)
Simon Horman6fb82592011-07-15 13:14:11 +09002265{
Christopher Faulet482c8ec2019-12-17 11:25:46 +01002266 struct act_rule *rule, *ruleb;
Simon Horman6fb82592011-07-15 13:14:11 +09002267
Christopher Faulet482c8ec2019-12-17 11:25:46 +01002268 list_for_each_entry_safe(rule, ruleb, rules, list) {
2269 LIST_DEL(&rule->list);
2270 deinit_acl_cond(rule->cond);
2271 free(rule);
Simon Hormanac821422011-07-15 13:14:09 +09002272 }
2273}
2274
Simon Horman6fb82592011-07-15 13:14:11 +09002275static void deinit_stick_rules(struct list *rules)
2276{
2277 struct sticking_rule *rule, *ruleb;
2278
2279 list_for_each_entry_safe(rule, ruleb, rules, list) {
2280 LIST_DEL(&rule->list);
2281 deinit_acl_cond(rule->cond);
Christopher Faulet476e5d02016-10-26 11:34:47 +02002282 release_sample_expr(rule->expr);
Simon Horman6fb82592011-07-15 13:14:11 +09002283 free(rule);
2284 }
2285}
2286
Cyril Bonté203ec5a2017-03-23 22:44:13 +01002287void deinit(void)
Willy Tarreaubaaee002006-06-26 02:48:02 +02002288{
Olivier Houchardfbc74e82017-11-24 16:54:05 +01002289 struct proxy *p = proxies_list, *p0;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002290 struct cap_hdr *h,*h_next;
2291 struct server *s,*s_next;
2292 struct listener *l,*l_next;
Willy Tarreau0fc45a72007-06-17 00:36:03 +02002293 struct acl_cond *cond, *condb;
2294 struct hdr_exp *exp, *expb;
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002295 struct acl *acl, *aclb;
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002296 struct switching_rule *rule, *ruleb;
Willy Tarreau4a5cade2012-04-05 21:09:48 +02002297 struct server_rule *srule, *sruleb;
Willy Tarreaub463dfb2008-06-07 23:08:56 +02002298 struct redirect_rule *rdr, *rdrb;
Willy Tarreaudeb9ed82010-01-03 21:03:22 +01002299 struct wordlist *wl, *wlb;
Willy Tarreauf4f04122010-01-28 18:10:50 +01002300 struct cond_wordlist *cwl, *cwlb;
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002301 struct uri_auth *uap, *ua = NULL;
William Lallemand0f99e342011-10-12 17:50:54 +02002302 struct logsrv *log, *logb;
William Lallemand723b73a2012-02-08 16:37:49 +01002303 struct logformat_node *lf, *lfb;
Willy Tarreau2a65ff02012-09-13 17:54:29 +02002304 struct bind_conf *bind_conf, *bind_back;
Willy Tarreaucdb737e2016-12-21 18:43:10 +01002305 struct build_opts_str *bol, *bolb;
Willy Tarreau05554e62016-12-21 20:46:26 +01002306 struct post_deinit_fct *pdf;
Willy Tarreau0fc45a72007-06-17 00:36:03 +02002307 int i;
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002308
Willy Tarreau24f4efa2010-08-27 17:56:48 +02002309 deinit_signals();
Willy Tarreaubaaee002006-06-26 02:48:02 +02002310 while (p) {
Willy Tarreau8113a5d2012-10-04 08:01:43 +02002311 free(p->conf.file);
Willy Tarreaua534fea2008-08-03 12:19:50 +02002312 free(p->id);
2313 free(p->check_req);
2314 free(p->cookie_name);
2315 free(p->cookie_domain);
Christopher Fauletdb2cdbb2020-01-21 11:06:48 +01002316 free(p->cookie_attrs);
Willy Tarreau4c03d1c2019-01-14 15:23:54 +01002317 free(p->lbprm.arg_str);
Willy Tarreaua534fea2008-08-03 12:19:50 +02002318 free(p->capture_name);
2319 free(p->monitor_uri);
Simon Hormana31c7f72011-07-15 13:14:08 +09002320 free(p->rdp_cookie_name);
Willy Tarreau62a61232013-04-12 18:13:46 +02002321 if (p->conf.logformat_string != default_http_log_format &&
2322 p->conf.logformat_string != default_tcp_log_format &&
2323 p->conf.logformat_string != clf_http_log_format)
2324 free(p->conf.logformat_string);
Willy Tarreau196729e2012-05-31 19:30:26 +02002325
Willy Tarreau62a61232013-04-12 18:13:46 +02002326 free(p->conf.lfs_file);
2327 free(p->conf.uniqueid_format_string);
2328 free(p->conf.uif_file);
Willy Tarreau0cac26c2019-01-14 16:55:42 +01002329 if ((p->lbprm.algo & BE_LB_LKUP) == BE_LB_LKUP_MAP)
2330 free(p->lbprm.map.srv);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002331
Dragan Dosen0b85ece2015-09-25 19:17:44 +02002332 if (p->conf.logformat_sd_string != default_rfc5424_sd_log_format)
2333 free(p->conf.logformat_sd_string);
2334 free(p->conf.lfsd_file);
2335
Willy Tarreaua534fea2008-08-03 12:19:50 +02002336 for (i = 0; i < HTTP_ERR_SIZE; i++)
Krzysztof Piotr Oledzki78abe612009-09-27 13:23:20 +02002337 chunk_destroy(&p->errmsg[i]);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002338
Willy Tarreauf4f04122010-01-28 18:10:50 +01002339 list_for_each_entry_safe(cwl, cwlb, &p->req_add, list) {
2340 LIST_DEL(&cwl->list);
2341 free(cwl->s);
2342 free(cwl);
Willy Tarreaudeb9ed82010-01-03 21:03:22 +01002343 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002344
Willy Tarreauf4f04122010-01-28 18:10:50 +01002345 list_for_each_entry_safe(cwl, cwlb, &p->rsp_add, list) {
2346 LIST_DEL(&cwl->list);
2347 free(cwl->s);
2348 free(cwl);
Willy Tarreaudeb9ed82010-01-03 21:03:22 +01002349 }
Willy Tarreau0fc45a72007-06-17 00:36:03 +02002350
Willy Tarreaub80c2302007-11-30 20:51:32 +01002351 list_for_each_entry_safe(cond, condb, &p->mon_fail_cond, list) {
2352 LIST_DEL(&cond->list);
2353 prune_acl_cond(cond);
2354 free(cond);
2355 }
2356
Willy Tarreau0fc45a72007-06-17 00:36:03 +02002357 for (exp = p->req_exp; exp != NULL; ) {
Dragan Dosen26743032019-04-30 15:54:36 +02002358 regex_free(exp->preg);
Willy Tarreau98d04852015-05-26 12:18:29 +02002359 free((char *)exp->replace);
Willy Tarreau0fc45a72007-06-17 00:36:03 +02002360 expb = exp;
2361 exp = exp->next;
2362 free(expb);
2363 }
2364
2365 for (exp = p->rsp_exp; exp != NULL; ) {
Dragan Dosen26743032019-04-30 15:54:36 +02002366 regex_free(exp->preg);
Willy Tarreau98d04852015-05-26 12:18:29 +02002367 free((char *)exp->replace);
Willy Tarreau0fc45a72007-06-17 00:36:03 +02002368 expb = exp;
2369 exp = exp->next;
2370 free(expb);
2371 }
2372
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002373 /* build a list of unique uri_auths */
2374 if (!ua)
2375 ua = p->uri_auth;
2376 else {
2377 /* check if p->uri_auth is unique */
2378 for (uap = ua; uap; uap=uap->next)
2379 if (uap == p->uri_auth)
2380 break;
2381
Willy Tarreauaccc4e12008-06-24 11:14:45 +02002382 if (!uap && p->uri_auth) {
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002383 /* add it, if it is */
2384 p->uri_auth->next = ua;
2385 ua = p->uri_auth;
2386 }
2387 }
Willy Tarreau0fc45a72007-06-17 00:36:03 +02002388
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002389 list_for_each_entry_safe(acl, aclb, &p->acl, list) {
2390 LIST_DEL(&acl->list);
2391 prune_acl(acl);
2392 free(acl);
2393 }
2394
Willy Tarreau4a5cade2012-04-05 21:09:48 +02002395 list_for_each_entry_safe(srule, sruleb, &p->server_rules, list) {
2396 LIST_DEL(&srule->list);
2397 prune_acl_cond(srule->cond);
2398 free(srule->cond);
2399 free(srule);
2400 }
2401
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002402 list_for_each_entry_safe(rule, ruleb, &p->switching_rules, list) {
2403 LIST_DEL(&rule->list);
Willy Tarreauf51658d2014-04-23 01:21:56 +02002404 if (rule->cond) {
2405 prune_acl_cond(rule->cond);
2406 free(rule->cond);
2407 }
Dragan Dosen2a7c20f2019-04-30 00:38:36 +02002408 free(rule->file);
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002409 free(rule);
2410 }
2411
Willy Tarreaub463dfb2008-06-07 23:08:56 +02002412 list_for_each_entry_safe(rdr, rdrb, &p->redirect_rules, list) {
2413 LIST_DEL(&rdr->list);
Willy Tarreauf285f542010-01-03 20:03:03 +01002414 if (rdr->cond) {
2415 prune_acl_cond(rdr->cond);
2416 free(rdr->cond);
2417 }
Willy Tarreaub463dfb2008-06-07 23:08:56 +02002418 free(rdr->rdr_str);
Thierry FOURNIERd18cd0f2013-11-29 12:15:45 +01002419 list_for_each_entry_safe(lf, lfb, &rdr->rdr_fmt, list) {
2420 LIST_DEL(&lf->list);
2421 free(lf);
2422 }
Willy Tarreaub463dfb2008-06-07 23:08:56 +02002423 free(rdr);
2424 }
2425
William Lallemand0f99e342011-10-12 17:50:54 +02002426 list_for_each_entry_safe(log, logb, &p->logsrvs, list) {
2427 LIST_DEL(&log->list);
2428 free(log);
2429 }
2430
William Lallemand723b73a2012-02-08 16:37:49 +01002431 list_for_each_entry_safe(lf, lfb, &p->logformat, list) {
2432 LIST_DEL(&lf->list);
Dragan Dosen61302da2019-04-30 00:40:02 +02002433 release_sample_expr(lf->expr);
2434 free(lf->arg);
William Lallemand723b73a2012-02-08 16:37:49 +01002435 free(lf);
2436 }
2437
Dragan Dosen0b85ece2015-09-25 19:17:44 +02002438 list_for_each_entry_safe(lf, lfb, &p->logformat_sd, list) {
2439 LIST_DEL(&lf->list);
Dragan Dosen61302da2019-04-30 00:40:02 +02002440 release_sample_expr(lf->expr);
2441 free(lf->arg);
Dragan Dosen0b85ece2015-09-25 19:17:44 +02002442 free(lf);
2443 }
2444
Christopher Faulet482c8ec2019-12-17 11:25:46 +01002445 deinit_act_rules(&p->tcp_req.inspect_rules);
2446 deinit_act_rules(&p->tcp_rep.inspect_rules);
2447 deinit_act_rules(&p->tcp_req.l4_rules);
2448 deinit_act_rules(&p->tcp_req.l5_rules);
2449 deinit_act_rules(&p->http_req_rules);
2450 deinit_act_rules(&p->http_res_rules);
Simon Hormanac821422011-07-15 13:14:09 +09002451
Simon Horman6fb82592011-07-15 13:14:11 +09002452 deinit_stick_rules(&p->storersp_rules);
2453 deinit_stick_rules(&p->sticking_rules);
2454
Willy Tarreaubaaee002006-06-26 02:48:02 +02002455 h = p->req_cap;
2456 while (h) {
2457 h_next = h->next;
Willy Tarreaua534fea2008-08-03 12:19:50 +02002458 free(h->name);
Willy Tarreaubafbe012017-11-24 17:34:44 +01002459 pool_destroy(h->pool);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002460 free(h);
2461 h = h_next;
2462 }/* end while(h) */
2463
2464 h = p->rsp_cap;
2465 while (h) {
2466 h_next = h->next;
Willy Tarreaua534fea2008-08-03 12:19:50 +02002467 free(h->name);
Willy Tarreaubafbe012017-11-24 17:34:44 +01002468 pool_destroy(h->pool);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002469 free(h);
2470 h = h_next;
2471 }/* end while(h) */
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002472
Willy Tarreaubaaee002006-06-26 02:48:02 +02002473 s = p->srv;
2474 while (s) {
2475 s_next = s->next;
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002476
Willy Tarreauf6562792019-05-07 19:05:35 +02002477 task_destroy(s->check.task);
2478 task_destroy(s->agent.task);
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002479
Willy Tarreau3c39a7d2019-06-14 14:42:29 +02002480 if (s->check.wait_list.tasklet)
2481 tasklet_free(s->check.wait_list.tasklet);
2482 if (s->agent.wait_list.tasklet)
2483 tasklet_free(s->agent.wait_list.tasklet);
Dragan Dosen026ef572019-04-30 00:56:20 +02002484
Willy Tarreauf6562792019-05-07 19:05:35 +02002485 task_destroy(s->warmup);
Willy Tarreau2e993902011-10-31 11:53:20 +01002486
Willy Tarreaua534fea2008-08-03 12:19:50 +02002487 free(s->id);
2488 free(s->cookie);
Willy Tarreauc9fa0482018-07-10 17:43:27 +02002489 free(s->check.bi.area);
2490 free(s->check.bo.area);
2491 free(s->agent.bi.area);
2492 free(s->agent.bo.area);
James Brown55f9ff12015-10-21 18:19:05 -07002493 free(s->agent.send_string);
Christopher Faulet67957bd2017-09-27 11:00:59 +02002494 free(s->hostname_dn);
Sárközi, László34c01792014-09-05 10:08:23 +02002495 free((char*)s->conf.file);
Olivier Houchard7fc3be72018-11-22 18:50:54 +01002496 free(s->idle_conns);
2497 free(s->priv_conns);
2498 free(s->safe_conns);
Olivier Houchard0c18a6f2018-12-02 14:11:41 +01002499 free(s->idle_orphan_conns);
Olivier Houchardf1314812019-02-18 16:41:17 +01002500 free(s->curr_idle_thr);
Willy Tarreau17d45382016-12-22 21:16:08 +01002501
2502 if (s->use_ssl || s->check.use_ssl) {
2503 if (xprt_get(XPRT_SSL) && xprt_get(XPRT_SSL)->destroy_srv)
2504 xprt_get(XPRT_SSL)->destroy_srv(s);
2505 }
Christopher Faulet2a944ee2017-11-07 10:42:54 +01002506 HA_SPIN_DESTROY(&s->lock);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002507 free(s);
2508 s = s_next;
2509 }/* end while(s) */
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002510
Willy Tarreau4348fad2012-09-20 16:48:07 +02002511 list_for_each_entry_safe(l, l_next, &p->conf.listeners, by_fe) {
Olivier Houchard1fc05162017-04-06 01:05:05 +02002512 /*
2513 * Zombie proxy, the listener just pretend to be up
2514 * because they still hold an opened fd.
2515 * Close it and give the listener its real state.
2516 */
2517 if (p->state == PR_STSTOPPED && l->state >= LI_ZOMBIE) {
2518 close(l->fd);
2519 l->state = LI_INIT;
2520 }
Willy Tarreauf6e2cc72010-09-03 10:38:17 +02002521 unbind_listener(l);
2522 delete_listener(l);
Willy Tarreau4348fad2012-09-20 16:48:07 +02002523 LIST_DEL(&l->by_fe);
2524 LIST_DEL(&l->by_bind);
Krzysztof Piotr Oledzkiaff01ea2010-02-05 20:31:44 +01002525 free(l->name);
2526 free(l->counters);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002527 free(l);
Willy Tarreau4348fad2012-09-20 16:48:07 +02002528 }
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002529
Willy Tarreau4348fad2012-09-20 16:48:07 +02002530 /* Release unused SSL configs. */
Willy Tarreau2a65ff02012-09-13 17:54:29 +02002531 list_for_each_entry_safe(bind_conf, bind_back, &p->conf.bind, by_fe) {
Willy Tarreau795cdab2016-12-22 17:30:54 +01002532 if (bind_conf->xprt->destroy_bind_conf)
2533 bind_conf->xprt->destroy_bind_conf(bind_conf);
Willy Tarreau2a65ff02012-09-13 17:54:29 +02002534 free(bind_conf->file);
2535 free(bind_conf->arg);
2536 LIST_DEL(&bind_conf->by_fe);
2537 free(bind_conf);
2538 }
Willy Tarreauf5ae8f72012-09-07 16:58:00 +02002539
Christopher Fauletd7c91962015-04-30 11:48:27 +02002540 flt_deinit(p);
2541
Krzysztof Piotr Oledzkiaff01ea2010-02-05 20:31:44 +01002542 free(p->desc);
2543 free(p->fwdfor_hdr_name);
2544
Olivier Houchard3f795f72019-04-17 22:51:06 +02002545 task_destroy(p->task);
Krzysztof Piotr Oledzki59bb2182010-01-29 17:58:21 +01002546
Willy Tarreaubafbe012017-11-24 17:34:44 +01002547 pool_destroy(p->req_cap_pool);
2548 pool_destroy(p->rsp_cap_pool);
Dragan Dosen7d61a332019-05-07 14:16:18 +02002549 if (p->table)
2550 pool_destroy(p->table->pool);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01002551
Willy Tarreau4d2d0982007-05-14 00:39:29 +02002552 p0 = p;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002553 p = p->next;
Christopher Faulet2a944ee2017-11-07 10:42:54 +01002554 HA_SPIN_DESTROY(&p0->lbprm.lock);
2555 HA_SPIN_DESTROY(&p0->lock);
Willy Tarreau4d2d0982007-05-14 00:39:29 +02002556 free(p0);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002557 }/* end while(p) */
Willy Tarreaudd815982007-10-16 12:25:14 +02002558
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002559 while (ua) {
2560 uap = ua;
2561 ua = ua->next;
2562
Willy Tarreaua534fea2008-08-03 12:19:50 +02002563 free(uap->uri_prefix);
2564 free(uap->auth_realm);
Krzysztof Piotr Oledzki48cb2ae2009-10-02 22:51:14 +02002565 free(uap->node);
2566 free(uap->desc);
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002567
Krzysztof Piotr Oledzki8c8bd452010-01-29 19:29:32 +01002568 userlist_free(uap->userlist);
Christopher Faulet482c8ec2019-12-17 11:25:46 +01002569 deinit_act_rules(&uap->http_req_rules);
Krzysztof Piotr Oledzki8c8bd452010-01-29 19:29:32 +01002570
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002571 free(uap);
2572 }
2573
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01002574 userlist_free(userlist);
2575
David Carlier834cb2e2015-09-25 12:02:25 +01002576 cfg_unregister_sections();
2577
Christopher Faulet0132d062017-07-26 15:33:35 +02002578 deinit_log_buffers();
David Carlier834cb2e2015-09-25 12:02:25 +01002579
Willy Tarreaudd815982007-10-16 12:25:14 +02002580 protocol_unbind_all();
2581
Willy Tarreau05554e62016-12-21 20:46:26 +01002582 list_for_each_entry(pdf, &post_deinit_list, list)
2583 pdf->fct();
2584
Joe Williamsdf5b38f2010-12-29 17:05:48 +01002585 free(global.log_send_hostname); global.log_send_hostname = NULL;
Dragan Dosen43885c72015-10-01 13:18:13 +02002586 chunk_destroy(&global.log_tag);
Willy Tarreaua534fea2008-08-03 12:19:50 +02002587 free(global.chroot); global.chroot = NULL;
2588 free(global.pidfile); global.pidfile = NULL;
Krzysztof Piotr Oledzki48cb2ae2009-10-02 22:51:14 +02002589 free(global.node); global.node = NULL;
2590 free(global.desc); global.desc = NULL;
Willy Tarreaua534fea2008-08-03 12:19:50 +02002591 free(oldpids); oldpids = NULL;
Olivier Houchard3f795f72019-04-17 22:51:06 +02002592 task_destroy(global_listener_queue_task); global_listener_queue_task = NULL;
2593 task_destroy(idle_conn_task);
Olivier Houchard9ea5d362019-02-14 18:29:09 +01002594 idle_conn_task = NULL;
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002595
William Lallemand0f99e342011-10-12 17:50:54 +02002596 list_for_each_entry_safe(log, logb, &global.logsrvs, list) {
2597 LIST_DEL(&log->list);
2598 free(log);
2599 }
Willy Tarreau477ecd82010-01-03 21:12:30 +01002600 list_for_each_entry_safe(wl, wlb, &cfg_cfgfiles, list) {
Maxime de Roucy0f503922016-05-13 23:52:55 +02002601 free(wl->s);
Willy Tarreau477ecd82010-01-03 21:12:30 +01002602 LIST_DEL(&wl->list);
2603 free(wl);
2604 }
2605
Willy Tarreaucdb737e2016-12-21 18:43:10 +01002606 list_for_each_entry_safe(bol, bolb, &build_opts_list, list) {
2607 if (bol->must_free)
2608 free((void *)bol->str);
2609 LIST_DEL(&bol->list);
2610 free(bol);
2611 }
2612
Christopher Fauletff2613e2016-11-09 11:36:17 +01002613 vars_prune(&global.vars, NULL, NULL);
Willy Tarreau2455ceb2018-11-26 15:57:34 +01002614 pool_destroy_all();
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002615 deinit_pollers();
Willy Tarreaubaaee002006-06-26 02:48:02 +02002616} /* end deinit() */
2617
William Lallemand72160322018-11-06 17:37:16 +01002618
Willy Tarreau918ff602011-07-25 16:33:49 +02002619/* Runs the polling loop */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +01002620static void run_poll_loop()
Willy Tarreau4f60f162007-04-08 16:39:58 +02002621{
Willy Tarreau2ae84e42019-05-28 16:44:05 +02002622 int next, wake;
Willy Tarreau4f60f162007-04-08 16:39:58 +02002623
Willy Tarreaub0b37bc2008-06-23 14:00:57 +02002624 tv_update_date(0,1);
Willy Tarreau4f60f162007-04-08 16:39:58 +02002625 while (1) {
Thierry FOURNIER9cf7c4b2014-12-15 13:26:01 +01002626 /* Process a few tasks */
2627 process_runnable_tasks();
2628
William Lallemand1aab50b2018-06-07 09:46:01 +02002629 /* check if we caught some signals and process them in the
2630 first thread */
2631 if (tid == 0)
2632 signal_process_queue();
Willy Tarreau29857942009-05-10 09:01:21 +02002633
Willy Tarreau58b458d2008-06-29 22:40:23 +02002634 /* Check if we can expire some tasks */
Thierry FOURNIER9cf7c4b2014-12-15 13:26:01 +01002635 next = wake_expired_tasks();
Willy Tarreau4f60f162007-04-08 16:39:58 +02002636
Willy Tarreau7067b3a2019-06-02 11:11:29 +02002637 /* also stop if we failed to cleanly stop all tasks */
2638 if (killed > 1)
2639 break;
2640
Willy Tarreau10146c92015-04-13 20:44:19 +02002641 /* expire immediately if events are pending */
Willy Tarreau2ae84e42019-05-28 16:44:05 +02002642 wake = 1;
Christopher Faulet32467fe2018-01-15 12:16:34 +01002643 if (fd_cache_mask & tid_bit)
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01002644 activity[tid].wake_cache++;
Olivier Houchardcfbb3e62019-05-29 19:22:43 +02002645 else if (thread_has_tasks())
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01002646 activity[tid].wake_tasks++;
William Lallemand1aab50b2018-06-07 09:46:01 +02002647 else if (signal_queue_len && tid == 0)
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01002648 activity[tid].wake_signal++;
Olivier Houchard79321b92018-07-26 17:55:11 +02002649 else {
Olivier Houchardb23a61f2019-03-08 18:51:17 +01002650 _HA_ATOMIC_OR(&sleeping_thread_mask, tid_bit);
2651 __ha_barrier_atomic_store();
Olivier Houchardcfbb3e62019-05-29 19:22:43 +02002652 if (global_tasks_mask & tid_bit) {
Olivier Houchard79321b92018-07-26 17:55:11 +02002653 activity[tid].wake_tasks++;
Olivier Houchardb23a61f2019-03-08 18:51:17 +01002654 _HA_ATOMIC_AND(&sleeping_thread_mask, ~tid_bit);
Olivier Houchard79321b92018-07-26 17:55:11 +02002655 } else
Willy Tarreau2ae84e42019-05-28 16:44:05 +02002656 wake = 0;
Olivier Houchard79321b92018-07-26 17:55:11 +02002657 }
Willy Tarreau10146c92015-04-13 20:44:19 +02002658
Willy Tarreau12b0d7b2020-03-23 09:27:28 +01002659 if (!wake) {
2660 if (stopping)
2661 _HA_ATOMIC_OR(&stopping_thread_mask, tid_bit);
2662
2663 /* stop when there's nothing left to do */
2664 if ((jobs - unstoppable_jobs) == 0 &&
2665 (stopping_thread_mask & all_threads_mask) == all_threads_mask)
2666 break;
2667 }
2668
Willy Tarreau58b458d2008-06-29 22:40:23 +02002669 /* The poller will ensure it returns around <next> */
Willy Tarreau2ae84e42019-05-28 16:44:05 +02002670 cur_poller.poll(&cur_poller, next, wake);
Olivier Houchard79321b92018-07-26 17:55:11 +02002671 if (sleeping_thread_mask & tid_bit)
Olivier Houchardb23a61f2019-03-08 18:51:17 +01002672 _HA_ATOMIC_AND(&sleeping_thread_mask, ~tid_bit);
Willy Tarreau033cd9d2014-01-25 19:24:15 +01002673 fd_process_cached_events();
Emeric Brun64cc49c2017-10-03 14:46:45 +02002674
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01002675 activity[tid].loops++;
Willy Tarreau4f60f162007-04-08 16:39:58 +02002676 }
2677}
2678
Christopher Faulet1d17c102017-08-29 15:38:48 +02002679static void *run_thread_poll_loop(void *data)
2680{
Willy Tarreau082b6282019-05-22 14:42:12 +02002681 struct per_thread_alloc_fct *ptaf;
Christopher Faulet1d17c102017-08-29 15:38:48 +02002682 struct per_thread_init_fct *ptif;
2683 struct per_thread_deinit_fct *ptdf;
Willy Tarreau082b6282019-05-22 14:42:12 +02002684 struct per_thread_free_fct *ptff;
Willy Tarreau34a150c2019-06-11 09:16:41 +02002685 static int init_left = 0;
2686 __decl_hathreads(static pthread_mutex_t init_mutex = PTHREAD_MUTEX_INITIALIZER);
2687 __decl_hathreads(static pthread_cond_t init_cond = PTHREAD_COND_INITIALIZER);
Christopher Faulet1d17c102017-08-29 15:38:48 +02002688
Willy Tarreaub4f7cc32019-05-03 09:27:30 +02002689 ha_set_tid((unsigned long)data);
Willy Tarreau91e6df02019-05-03 17:21:18 +02002690
Willy Tarreauf6178242019-05-21 19:46:58 +02002691#if (_POSIX_TIMERS > 0) && defined(_POSIX_THREAD_CPUTIME)
Willy Tarreau91e6df02019-05-03 17:21:18 +02002692#ifdef USE_THREAD
Willy Tarreau8323a372019-05-20 18:57:53 +02002693 pthread_getcpuclockid(pthread_self(), &ti->clock_id);
Willy Tarreau624dcbf2019-05-20 20:23:06 +02002694#else
Willy Tarreau8323a372019-05-20 18:57:53 +02002695 ti->clock_id = CLOCK_THREAD_CPUTIME_ID;
Willy Tarreau91e6df02019-05-03 17:21:18 +02002696#endif
Willy Tarreau663fda42019-05-21 15:14:08 +02002697#endif
Willy Tarreau6ec902a2019-06-07 14:41:11 +02002698 /* Now, initialize one thread init at a time. This is better since
2699 * some init code is a bit tricky and may release global resources
2700 * after reallocating them locally. This will also ensure there is
2701 * no race on file descriptors allocation.
2702 */
Willy Tarreau34a150c2019-06-11 09:16:41 +02002703#ifdef USE_THREAD
2704 pthread_mutex_lock(&init_mutex);
2705#endif
2706 /* The first thread must set the number of threads left */
2707 if (!init_left)
2708 init_left = global.nbthread;
2709 init_left--;
Willy Tarreau91e6df02019-05-03 17:21:18 +02002710
Christopher Faulet1d17c102017-08-29 15:38:48 +02002711 tv_update_date(-1,-1);
2712
Willy Tarreau082b6282019-05-22 14:42:12 +02002713 /* per-thread alloc calls performed here are not allowed to snoop on
2714 * other threads, so they are free to initialize at their own rhythm
2715 * as long as they act as if they were alone. None of them may rely
2716 * on resources initialized by the other ones.
2717 */
2718 list_for_each_entry(ptaf, &per_thread_alloc_list, list) {
2719 if (!ptaf->fct()) {
2720 ha_alert("failed to allocate resources for thread %u.\n", tid);
2721 exit(1);
2722 }
2723 }
2724
Willy Tarreau3078e9f2019-05-20 10:50:43 +02002725 /* per-thread init calls performed here are not allowed to snoop on
2726 * other threads, so they are free to initialize at their own rhythm
2727 * as long as they act as if they were alone.
2728 */
Christopher Faulet1d17c102017-08-29 15:38:48 +02002729 list_for_each_entry(ptif, &per_thread_init_list, list) {
2730 if (!ptif->fct()) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002731 ha_alert("failed to initialize thread %u.\n", tid);
Christopher Faulet1d17c102017-08-29 15:38:48 +02002732 exit(1);
2733 }
2734 }
2735
Willy Tarreau71092822019-06-10 09:51:04 +02002736 /* enabling protocols will result in fd_insert() calls to be performed,
2737 * we want all threads to have already allocated their local fd tables
Willy Tarreau34a150c2019-06-11 09:16:41 +02002738 * before doing so, thus only the last thread does it.
Willy Tarreau71092822019-06-10 09:51:04 +02002739 */
Willy Tarreau34a150c2019-06-11 09:16:41 +02002740 if (init_left == 0)
Willy Tarreaue4d7c9d2019-06-10 10:14:52 +02002741 protocol_enable_all();
Willy Tarreau6ec902a2019-06-07 14:41:11 +02002742
Willy Tarreau34a150c2019-06-11 09:16:41 +02002743#ifdef USE_THREAD
2744 pthread_cond_broadcast(&init_cond);
2745 pthread_mutex_unlock(&init_mutex);
2746
2747 /* now wait for other threads to finish starting */
2748 pthread_mutex_lock(&init_mutex);
2749 while (init_left)
2750 pthread_cond_wait(&init_cond, &init_mutex);
2751 pthread_mutex_unlock(&init_mutex);
2752#endif
Willy Tarreau3078e9f2019-05-20 10:50:43 +02002753
Christopher Faulet1d17c102017-08-29 15:38:48 +02002754 run_poll_loop();
2755
2756 list_for_each_entry(ptdf, &per_thread_deinit_list, list)
2757 ptdf->fct();
2758
Willy Tarreau082b6282019-05-22 14:42:12 +02002759 list_for_each_entry(ptff, &per_thread_free_list, list)
2760 ptff->fct();
2761
Christopher Fauletcd7879a2017-10-27 13:53:47 +02002762#ifdef USE_THREAD
Olivier Houchardb23a61f2019-03-08 18:51:17 +01002763 _HA_ATOMIC_AND(&all_threads_mask, ~tid_bit);
Christopher Fauletcd7879a2017-10-27 13:53:47 +02002764 if (tid > 0)
2765 pthread_exit(NULL);
Christopher Faulet1d17c102017-08-29 15:38:48 +02002766#endif
Christopher Fauletcd7879a2017-10-27 13:53:47 +02002767 return NULL;
2768}
Christopher Faulet1d17c102017-08-29 15:38:48 +02002769
Willy Tarreaue9b26022011-08-01 20:57:55 +02002770/* This is the global management task for listeners. It enables listeners waiting
2771 * for global resources when there are enough free resource, or at least once in
2772 * a while. It is designed to be called as a task.
2773 */
Olivier Houchard9f6af332018-05-25 14:04:04 +02002774static struct task *manage_global_listener_queue(struct task *t, void *context, unsigned short state)
Willy Tarreaue9b26022011-08-01 20:57:55 +02002775{
2776 int next = TICK_ETERNITY;
Willy Tarreaue9b26022011-08-01 20:57:55 +02002777 /* queue is empty, nothing to do */
2778 if (LIST_ISEMPTY(&global_listener_queue))
2779 goto out;
2780
2781 /* If there are still too many concurrent connections, let's wait for
2782 * some of them to go away. We don't need to re-arm the timer because
2783 * each of them will scan the queue anyway.
2784 */
2785 if (unlikely(actconn >= global.maxconn))
2786 goto out;
2787
2788 /* We should periodically try to enable listeners waiting for a global
2789 * resource here, because it is possible, though very unlikely, that
2790 * they have been blocked by a temporary lack of global resource such
2791 * as a file descriptor or memory and that the temporary condition has
2792 * disappeared.
2793 */
Willy Tarreauabacc2c2011-09-07 14:26:33 +02002794 dequeue_all_listeners(&global_listener_queue);
Willy Tarreaue9b26022011-08-01 20:57:55 +02002795
2796 out:
2797 t->expire = next;
2798 task_queue(t);
2799 return t;
2800}
Willy Tarreau4f60f162007-04-08 16:39:58 +02002801
Willy Tarreaubaaee002006-06-26 02:48:02 +02002802int main(int argc, char **argv)
2803{
2804 int err, retry;
2805 struct rlimit limit;
Emeric Bruncf20bf12010-10-22 16:06:11 +02002806 char errmsg[100];
Willy Tarreau269ab312012-09-05 08:02:48 +02002807 int pidfd = -1;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002808
Olivier Houchard5fa300d2018-02-03 15:15:21 +01002809 setvbuf(stdout, NULL, _IONBF, 0);
Willy Tarreau5794fb02018-11-25 18:43:29 +01002810
Willy Tarreauff9c9142019-02-07 10:39:36 +01002811 /* this can only safely be done here, though it's optimized away by
2812 * the compiler.
2813 */
2814 if (MAX_PROCS < 1 || MAX_PROCS > LONGBITS) {
2815 ha_alert("MAX_PROCS value must be between 1 and %d inclusive; "
2816 "HAProxy was built with value %d, please fix it and rebuild.\n",
2817 LONGBITS, MAX_PROCS);
2818 exit(1);
2819 }
2820
Willy Tarreaubf696402019-03-01 10:09:28 +01002821 /* take a copy of initial limits before we possibly change them */
2822 getrlimit(RLIMIT_NOFILE, &limit);
2823 rlim_fd_cur_at_boot = limit.rlim_cur;
2824 rlim_fd_max_at_boot = limit.rlim_max;
2825
Willy Tarreau5794fb02018-11-25 18:43:29 +01002826 /* process all initcalls in order of potential dependency */
2827 RUN_INITCALLS(STG_PREPARE);
2828 RUN_INITCALLS(STG_LOCK);
2829 RUN_INITCALLS(STG_ALLOC);
2830 RUN_INITCALLS(STG_POOL);
2831 RUN_INITCALLS(STG_REGISTER);
2832 RUN_INITCALLS(STG_INIT);
2833
Emeric Bruncf20bf12010-10-22 16:06:11 +02002834 init(argc, argv);
Willy Tarreau24f4efa2010-08-27 17:56:48 +02002835 signal_register_fct(SIGQUIT, dump, SIGQUIT);
2836 signal_register_fct(SIGUSR1, sig_soft_stop, SIGUSR1);
2837 signal_register_fct(SIGHUP, sig_dump_state, SIGHUP);
William Lallemand73b85e72017-06-01 17:38:51 +02002838 signal_register_fct(SIGUSR2, NULL, 0);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002839
Willy Tarreaue437c442010-03-17 18:02:46 +01002840 /* Always catch SIGPIPE even on platforms which define MSG_NOSIGNAL.
2841 * Some recent FreeBSD setups report broken pipes, and MSG_NOSIGNAL
2842 * was defined there, so let's stay on the safe side.
Willy Tarreaubaaee002006-06-26 02:48:02 +02002843 */
Willy Tarreau24f4efa2010-08-27 17:56:48 +02002844 signal_register_fct(SIGPIPE, NULL, 0);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002845
Willy Tarreaudc23a922011-02-16 11:10:36 +01002846 /* ulimits */
2847 if (!global.rlimit_nofile)
2848 global.rlimit_nofile = global.maxsock;
2849
2850 if (global.rlimit_nofile) {
Willy Tarreaue5cfdac2019-03-01 10:32:05 +01002851 limit.rlim_cur = global.rlimit_nofile;
2852 limit.rlim_max = MAX(rlim_fd_max_at_boot, limit.rlim_cur);
2853
Willy Tarreaudc23a922011-02-16 11:10:36 +01002854 if (setrlimit(RLIMIT_NOFILE, &limit) == -1) {
Willy Tarreauef635472016-06-21 11:48:18 +02002855 /* try to set it to the max possible at least */
2856 getrlimit(RLIMIT_NOFILE, &limit);
Willy Tarreau164dd0b2016-06-21 11:51:59 +02002857 limit.rlim_cur = limit.rlim_max;
2858 if (setrlimit(RLIMIT_NOFILE, &limit) != -1)
2859 getrlimit(RLIMIT_NOFILE, &limit);
2860
Christopher Faulet767a84b2017-11-24 16:50:31 +01002861 ha_warning("[%s.main()] Cannot raise FD limit to %d, limit is %d.\n", argv[0], global.rlimit_nofile, (int)limit.rlim_cur);
Willy Tarreauef635472016-06-21 11:48:18 +02002862 global.rlimit_nofile = limit.rlim_cur;
Willy Tarreaudc23a922011-02-16 11:10:36 +01002863 }
2864 }
2865
2866 if (global.rlimit_memmax) {
2867 limit.rlim_cur = limit.rlim_max =
Willy Tarreau70060452015-12-14 12:46:07 +01002868 global.rlimit_memmax * 1048576ULL;
Willy Tarreaudc23a922011-02-16 11:10:36 +01002869#ifdef RLIMIT_AS
2870 if (setrlimit(RLIMIT_AS, &limit) == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002871 ha_warning("[%s.main()] Cannot fix MEM limit to %d megs.\n",
2872 argv[0], global.rlimit_memmax);
Willy Tarreaudc23a922011-02-16 11:10:36 +01002873 }
2874#else
2875 if (setrlimit(RLIMIT_DATA, &limit) == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002876 ha_warning("[%s.main()] Cannot fix MEM limit to %d megs.\n",
2877 argv[0], global.rlimit_memmax);
Willy Tarreaudc23a922011-02-16 11:10:36 +01002878 }
2879#endif
2880 }
2881
Olivier Houchardf73629d2017-04-05 22:33:04 +02002882 if (old_unixsocket) {
William Lallemand85b0bd92017-06-01 17:38:53 +02002883 if (strcmp("/dev/null", old_unixsocket) != 0) {
2884 if (get_old_sockets(old_unixsocket) != 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002885 ha_alert("Failed to get the sockets from the old process!\n");
William Lallemand85b0bd92017-06-01 17:38:53 +02002886 if (!(global.mode & MODE_MWORKER))
2887 exit(1);
2888 }
Olivier Houchardf73629d2017-04-05 22:33:04 +02002889 }
2890 }
William Lallemand85b0bd92017-06-01 17:38:53 +02002891 get_cur_unixsocket();
2892
Willy Tarreaubaaee002006-06-26 02:48:02 +02002893 /* We will loop at most 100 times with 10 ms delay each time.
2894 * That's at most 1 second. We only send a signal to old pids
2895 * if we cannot grab at least one port.
2896 */
2897 retry = MAX_START_RETRIES;
2898 err = ERR_NONE;
2899 while (retry >= 0) {
2900 struct timeval w;
2901 err = start_proxies(retry == 0 || nb_oldpids == 0);
Willy Tarreaue13e9252007-12-20 23:05:50 +01002902 /* exit the loop on no error or fatal error */
2903 if ((err & (ERR_RETRYABLE|ERR_FATAL)) != ERR_RETRYABLE)
Willy Tarreaubaaee002006-06-26 02:48:02 +02002904 break;
Willy Tarreaubb545b42010-08-25 12:58:59 +02002905 if (nb_oldpids == 0 || retry == 0)
Willy Tarreaubaaee002006-06-26 02:48:02 +02002906 break;
2907
2908 /* FIXME-20060514: Solaris and OpenBSD do not support shutdown() on
2909 * listening sockets. So on those platforms, it would be wiser to
2910 * simply send SIGUSR1, which will not be undoable.
2911 */
Willy Tarreaubb545b42010-08-25 12:58:59 +02002912 if (tell_old_pids(SIGTTOU) == 0) {
2913 /* no need to wait if we can't contact old pids */
2914 retry = 0;
2915 continue;
2916 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002917 /* give some time to old processes to stop listening */
2918 w.tv_sec = 0;
2919 w.tv_usec = 10*1000;
2920 select(0, NULL, NULL, NULL, &w);
2921 retry--;
2922 }
2923
2924 /* Note: start_proxies() sends an alert when it fails. */
Willy Tarreau0a3b9d92009-02-04 17:05:23 +01002925 if ((err & ~ERR_WARN) != ERR_NONE) {
Willy Tarreauf68da462009-06-09 14:36:00 +02002926 if (retry != MAX_START_RETRIES && nb_oldpids) {
2927 protocol_unbind_all(); /* cleanup everything we can */
Willy Tarreaubaaee002006-06-26 02:48:02 +02002928 tell_old_pids(SIGTTIN);
Willy Tarreauf68da462009-06-09 14:36:00 +02002929 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002930 exit(1);
2931 }
2932
William Lallemand944e6192018-11-21 15:48:31 +01002933 if (!(global.mode & MODE_MWORKER_WAIT) && listeners == 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002934 ha_alert("[%s.main()] No enabled listener found (check for 'bind' directives) ! Exiting.\n", argv[0]);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002935 /* Note: we don't have to send anything to the old pids because we
2936 * never stopped them. */
2937 exit(1);
2938 }
2939
Emeric Bruncf20bf12010-10-22 16:06:11 +02002940 err = protocol_bind_all(errmsg, sizeof(errmsg));
2941 if ((err & ~ERR_WARN) != ERR_NONE) {
2942 if ((err & ERR_ALERT) || (err & ERR_WARN))
Christopher Faulet767a84b2017-11-24 16:50:31 +01002943 ha_alert("[%s.main()] %s.\n", argv[0], errmsg);
Emeric Bruncf20bf12010-10-22 16:06:11 +02002944
Christopher Faulet767a84b2017-11-24 16:50:31 +01002945 ha_alert("[%s.main()] Some protocols failed to start their listeners! Exiting.\n", argv[0]);
Willy Tarreaudd815982007-10-16 12:25:14 +02002946 protocol_unbind_all(); /* cleanup everything we can */
2947 if (nb_oldpids)
2948 tell_old_pids(SIGTTIN);
2949 exit(1);
Emeric Bruncf20bf12010-10-22 16:06:11 +02002950 } else if (err & ERR_WARN) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002951 ha_alert("[%s.main()] %s.\n", argv[0], errmsg);
Willy Tarreaudd815982007-10-16 12:25:14 +02002952 }
Olivier Houchardf73629d2017-04-05 22:33:04 +02002953 /* Ok, all listener should now be bound, close any leftover sockets
2954 * the previous process gave us, we don't need them anymore
2955 */
2956 while (xfer_sock_list != NULL) {
2957 struct xfer_sock_list *tmpxfer = xfer_sock_list->next;
2958 close(xfer_sock_list->fd);
2959 free(xfer_sock_list->iface);
2960 free(xfer_sock_list->namespace);
2961 free(xfer_sock_list);
2962 xfer_sock_list = tmpxfer;
2963 }
Willy Tarreaudd815982007-10-16 12:25:14 +02002964
Willy Tarreaubaaee002006-06-26 02:48:02 +02002965 /* prepare pause/play signals */
Willy Tarreau24f4efa2010-08-27 17:56:48 +02002966 signal_register_fct(SIGTTOU, sig_pause, SIGTTOU);
2967 signal_register_fct(SIGTTIN, sig_listen, SIGTTIN);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002968
Willy Tarreaubaaee002006-06-26 02:48:02 +02002969 /* MODE_QUIET can inhibit alerts and warnings below this line */
2970
PiBa-NL149a81a2017-12-25 21:03:31 +01002971 if (getenv("HAPROXY_MWORKER_REEXEC") != NULL) {
2972 /* either stdin/out/err are already closed or should stay as they are. */
2973 if ((global.mode & MODE_DAEMON)) {
2974 /* daemon mode re-executing, stdin/stdout/stderr are already closed so keep quiet */
2975 global.mode &= ~MODE_VERBOSE;
2976 global.mode |= MODE_QUIET; /* ensure that we won't say anything from now */
2977 }
2978 } else {
2979 if ((global.mode & MODE_QUIET) && !(global.mode & MODE_VERBOSE)) {
2980 /* detach from the tty */
William Lallemande1340412017-12-28 16:09:36 +01002981 stdio_quiet(-1);
PiBa-NL149a81a2017-12-25 21:03:31 +01002982 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002983 }
2984
2985 /* open log & pid files before the chroot */
William Lallemand80293002017-11-06 11:00:03 +01002986 if ((global.mode & MODE_DAEMON || global.mode & MODE_MWORKER) && global.pidfile != NULL) {
Willy Tarreaubaaee002006-06-26 02:48:02 +02002987 unlink(global.pidfile);
2988 pidfd = open(global.pidfile, O_CREAT | O_WRONLY | O_TRUNC, 0644);
2989 if (pidfd < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002990 ha_alert("[%s.main()] Cannot create pidfile %s\n", argv[0], global.pidfile);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002991 if (nb_oldpids)
2992 tell_old_pids(SIGTTIN);
Willy Tarreaudd815982007-10-16 12:25:14 +02002993 protocol_unbind_all();
Willy Tarreaubaaee002006-06-26 02:48:02 +02002994 exit(1);
2995 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002996 }
2997
Willy Tarreaub38651a2007-03-24 17:24:39 +01002998 if ((global.last_checks & LSTCHK_NETADM) && global.uid) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002999 ha_alert("[%s.main()] Some configuration options require full privileges, so global.uid cannot be changed.\n"
3000 "", argv[0]);
Willy Tarreaudd815982007-10-16 12:25:14 +02003001 protocol_unbind_all();
Willy Tarreaub38651a2007-03-24 17:24:39 +01003002 exit(1);
3003 }
3004
Willy Tarreau4e30ed72009-02-04 18:02:48 +01003005 /* If the user is not root, we'll still let him try the configuration
3006 * but we inform him that unexpected behaviour may occur.
3007 */
3008 if ((global.last_checks & LSTCHK_NETADM) && getuid())
Christopher Faulet767a84b2017-11-24 16:50:31 +01003009 ha_warning("[%s.main()] Some options which require full privileges"
3010 " might not work well.\n"
3011 "", argv[0]);
Willy Tarreau4e30ed72009-02-04 18:02:48 +01003012
William Lallemand095ba4c2017-06-01 17:38:50 +02003013 if ((global.mode & (MODE_MWORKER|MODE_DAEMON)) == 0) {
3014
3015 /* chroot if needed */
3016 if (global.chroot != NULL) {
3017 if (chroot(global.chroot) == -1 || chdir("/") == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003018 ha_alert("[%s.main()] Cannot chroot(%s).\n", argv[0], global.chroot);
William Lallemand095ba4c2017-06-01 17:38:50 +02003019 if (nb_oldpids)
3020 tell_old_pids(SIGTTIN);
3021 protocol_unbind_all();
3022 exit(1);
3023 }
Willy Tarreauf223cc02007-10-15 18:57:08 +02003024 }
Willy Tarreauf223cc02007-10-15 18:57:08 +02003025 }
3026
William Lallemand944e6192018-11-21 15:48:31 +01003027 if (nb_oldpids && !(global.mode & MODE_MWORKER_WAIT))
Willy Tarreaubb545b42010-08-25 12:58:59 +02003028 nb_oldpids = tell_old_pids(oldpids_sig);
Willy Tarreaubaaee002006-06-26 02:48:02 +02003029
William Lallemand27edc4b2019-05-07 17:49:33 +02003030 /* send a SIGTERM to workers who have a too high reloads number */
3031 if ((global.mode & MODE_MWORKER) && !(global.mode & MODE_MWORKER_WAIT))
3032 mworker_kill_max_reloads(SIGTERM);
3033
William Lallemand8a361b52017-06-20 11:20:33 +02003034 if ((getenv("HAPROXY_MWORKER_REEXEC") == NULL)) {
3035 nb_oldpids = 0;
3036 free(oldpids);
3037 oldpids = NULL;
3038 }
3039
3040
Willy Tarreaubaaee002006-06-26 02:48:02 +02003041 /* Note that any error at this stage will be fatal because we will not
3042 * be able to restart the old pids.
3043 */
3044
William Lallemand095ba4c2017-06-01 17:38:50 +02003045 if ((global.mode & (MODE_MWORKER|MODE_DAEMON)) == 0) {
3046 /* setgid / setuid */
3047 if (global.gid) {
3048 if (getgroups(0, NULL) > 0 && setgroups(0, NULL) == -1)
Christopher Faulet767a84b2017-11-24 16:50:31 +01003049 ha_warning("[%s.main()] Failed to drop supplementary groups. Using 'gid'/'group'"
3050 " without 'uid'/'user' is generally useless.\n", argv[0]);
William Lallemand095ba4c2017-06-01 17:38:50 +02003051
3052 if (setgid(global.gid) == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003053 ha_alert("[%s.main()] Cannot set gid %d.\n", argv[0], global.gid);
William Lallemand095ba4c2017-06-01 17:38:50 +02003054 protocol_unbind_all();
3055 exit(1);
3056 }
3057 }
Michael Schererab012dd2013-01-12 18:35:19 +01003058
William Lallemand095ba4c2017-06-01 17:38:50 +02003059 if (global.uid && setuid(global.uid) == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003060 ha_alert("[%s.main()] Cannot set uid %d.\n", argv[0], global.uid);
Michael Schererab012dd2013-01-12 18:35:19 +01003061 protocol_unbind_all();
3062 exit(1);
3063 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02003064 }
Willy Tarreau636848a2019-04-15 19:38:50 +02003065
Willy Tarreaubaaee002006-06-26 02:48:02 +02003066 /* check ulimits */
3067 limit.rlim_cur = limit.rlim_max = 0;
3068 getrlimit(RLIMIT_NOFILE, &limit);
3069 if (limit.rlim_cur < global.maxsock) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003070 ha_warning("[%s.main()] FD limit (%d) too low for maxconn=%d/maxsock=%d. Please raise 'ulimit-n' to %d or more to avoid any trouble.\n",
3071 argv[0], (int)limit.rlim_cur, global.maxconn, global.maxsock, global.maxsock);
Willy Tarreaubaaee002006-06-26 02:48:02 +02003072 }
3073
William Lallemand944e6192018-11-21 15:48:31 +01003074 if (global.mode & (MODE_DAEMON | MODE_MWORKER | MODE_MWORKER_WAIT)) {
Willy Tarreau0b9c02c2009-02-04 22:05:05 +01003075 struct proxy *px;
Willy Tarreauf83d3fe2015-05-01 19:13:41 +02003076 struct peers *curpeers;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003077 int ret = 0;
3078 int proc;
William Lallemande1340412017-12-28 16:09:36 +01003079 int devnullfd = -1;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003080
William Lallemand095ba4c2017-06-01 17:38:50 +02003081 /*
3082 * if daemon + mworker: must fork here to let a master
3083 * process live in background before forking children
3084 */
William Lallemand73b85e72017-06-01 17:38:51 +02003085
3086 if ((getenv("HAPROXY_MWORKER_REEXEC") == NULL)
3087 && (global.mode & MODE_MWORKER)
3088 && (global.mode & MODE_DAEMON)) {
William Lallemand095ba4c2017-06-01 17:38:50 +02003089 ret = fork();
3090 if (ret < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003091 ha_alert("[%s.main()] Cannot fork.\n", argv[0]);
William Lallemand095ba4c2017-06-01 17:38:50 +02003092 protocol_unbind_all();
3093 exit(1); /* there has been an error */
William Lallemandbfd8eb52018-07-04 15:31:23 +02003094 } else if (ret > 0) { /* parent leave to daemonize */
William Lallemand095ba4c2017-06-01 17:38:50 +02003095 exit(0);
William Lallemandbfd8eb52018-07-04 15:31:23 +02003096 } else /* change the process group ID in the child (master process) */
3097 setsid();
William Lallemand095ba4c2017-06-01 17:38:50 +02003098 }
William Lallemande20b6a62017-06-01 17:38:55 +02003099
William Lallemande20b6a62017-06-01 17:38:55 +02003100
William Lallemanddeed7802017-11-06 11:00:04 +01003101 /* if in master-worker mode, write the PID of the father */
3102 if (global.mode & MODE_MWORKER) {
3103 char pidstr[100];
Willy Tarreaueb7f0722019-06-22 07:41:38 +02003104 snprintf(pidstr, sizeof(pidstr), "%d\n", (int)getpid());
Willy Tarreau46ec48b2018-01-23 19:20:19 +01003105 if (pidfd >= 0)
3106 shut_your_big_mouth_gcc(write(pidfd, pidstr, strlen(pidstr)));
William Lallemanddeed7802017-11-06 11:00:04 +01003107 }
3108
Willy Tarreaubaaee002006-06-26 02:48:02 +02003109 /* the father launches the required number of processes */
William Lallemand944e6192018-11-21 15:48:31 +01003110 if (!(global.mode & MODE_MWORKER_WAIT)) {
William Lallemand9a1ee7a2019-04-01 11:30:02 +02003111 if (global.mode & MODE_MWORKER)
3112 mworker_ext_launch_all();
William Lallemand944e6192018-11-21 15:48:31 +01003113 for (proc = 0; proc < global.nbproc; proc++) {
3114 ret = fork();
3115 if (ret < 0) {
3116 ha_alert("[%s.main()] Cannot fork.\n", argv[0]);
3117 protocol_unbind_all();
3118 exit(1); /* there has been an error */
3119 }
Willy Tarreau861c4ef2020-03-08 00:42:37 +01003120 else if (ret == 0) { /* child breaks here */
3121 ha_random_jump96(relative_pid);
William Lallemand944e6192018-11-21 15:48:31 +01003122 break;
Willy Tarreau861c4ef2020-03-08 00:42:37 +01003123 }
William Lallemand944e6192018-11-21 15:48:31 +01003124 if (pidfd >= 0 && !(global.mode & MODE_MWORKER)) {
3125 char pidstr[100];
3126 snprintf(pidstr, sizeof(pidstr), "%d\n", ret);
3127 shut_your_big_mouth_gcc(write(pidfd, pidstr, strlen(pidstr)));
3128 }
3129 if (global.mode & MODE_MWORKER) {
3130 struct mworker_proc *child;
William Lallemandce83b4a2018-10-26 14:47:30 +02003131
William Lallemand220567e2018-11-21 18:04:53 +01003132 ha_notice("New worker #%d (%d) forked\n", relative_pid, ret);
William Lallemand944e6192018-11-21 15:48:31 +01003133 /* find the right mworker_proc */
3134 list_for_each_entry(child, &proc_list, list) {
3135 if (child->relative_pid == relative_pid &&
William Lallemand8f7069a2019-04-12 16:09:23 +02003136 child->reloads == 0 && child->options & PROC_O_TYPE_WORKER) {
William Lallemand944e6192018-11-21 15:48:31 +01003137 child->timestamp = now.tv_sec;
3138 child->pid = ret;
William Lallemand1dc69632019-06-12 19:11:33 +02003139 child->version = strdup(haproxy_version);
William Lallemand944e6192018-11-21 15:48:31 +01003140 break;
3141 }
William Lallemandce83b4a2018-10-26 14:47:30 +02003142 }
3143 }
William Lallemandbc193052018-09-11 10:06:26 +02003144
William Lallemand944e6192018-11-21 15:48:31 +01003145 relative_pid++; /* each child will get a different one */
3146 pid_bit <<= 1;
3147 }
3148 } else {
3149 /* wait mode */
3150 global.nbproc = 1;
3151 proc = 1;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003152 }
Willy Tarreaufc6c0322012-11-16 16:12:27 +01003153
3154#ifdef USE_CPU_AFFINITY
3155 if (proc < global.nbproc && /* child */
Willy Tarreauff9c9142019-02-07 10:39:36 +01003156 proc < MAX_PROCS && /* only the first 32/64 processes may be pinned */
Christopher Fauletcb6a9452017-11-22 16:50:41 +01003157 global.cpu_map.proc[proc]) /* only do this if the process has a CPU map */
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +02003158#ifdef __FreeBSD__
Olivier Houchard97148f62017-08-16 17:29:11 +02003159 {
3160 cpuset_t cpuset;
3161 int i;
Christopher Fauletcb6a9452017-11-22 16:50:41 +01003162 unsigned long cpu_map = global.cpu_map.proc[proc];
Olivier Houchard97148f62017-08-16 17:29:11 +02003163
3164 CPU_ZERO(&cpuset);
3165 while ((i = ffsl(cpu_map)) > 0) {
3166 CPU_SET(i - 1, &cpuset);
Cyril Bontéd400ab32018-03-12 21:47:39 +01003167 cpu_map &= ~(1UL << (i - 1));
Olivier Houchard97148f62017-08-16 17:29:11 +02003168 }
3169 ret = cpuset_setaffinity(CPU_LEVEL_WHICH, CPU_WHICH_PID, -1, sizeof(cpuset), &cpuset);
3170 }
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +02003171#else
Christopher Fauletcb6a9452017-11-22 16:50:41 +01003172 sched_setaffinity(0, sizeof(unsigned long), (void *)&global.cpu_map.proc[proc]);
Willy Tarreaufc6c0322012-11-16 16:12:27 +01003173#endif
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +02003174#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +02003175 /* close the pidfile both in children and father */
Willy Tarreau269ab312012-09-05 08:02:48 +02003176 if (pidfd >= 0) {
3177 //lseek(pidfd, 0, SEEK_SET); /* debug: emulate eglibc bug */
3178 close(pidfd);
3179 }
Willy Tarreaud137dd32010-08-25 12:49:05 +02003180
3181 /* We won't ever use this anymore */
Willy Tarreaud137dd32010-08-25 12:49:05 +02003182 free(global.pidfile); global.pidfile = NULL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003183
Willy Tarreauedaff0a2015-05-01 17:01:08 +02003184 if (proc == global.nbproc) {
William Lallemand944e6192018-11-21 15:48:31 +01003185 if (global.mode & (MODE_MWORKER|MODE_MWORKER_WAIT)) {
PiBa-NLbaf6ea42017-11-28 23:26:08 +01003186
3187 if ((!(global.mode & MODE_QUIET) || (global.mode & MODE_VERBOSE)) &&
3188 (global.mode & MODE_DAEMON)) {
3189 /* detach from the tty, this is required to properly daemonize. */
William Lallemande1340412017-12-28 16:09:36 +01003190 if ((getenv("HAPROXY_MWORKER_REEXEC") == NULL))
3191 stdio_quiet(-1);
3192
PiBa-NLbaf6ea42017-11-28 23:26:08 +01003193 global.mode &= ~MODE_VERBOSE;
3194 global.mode |= MODE_QUIET; /* ensure that we won't say anything from now */
PiBa-NLbaf6ea42017-11-28 23:26:08 +01003195 }
3196
William Lallemandb3f2be32018-09-11 10:06:18 +02003197 mworker_loop();
William Lallemand1499b9b2017-06-07 15:04:47 +02003198 /* should never get there */
3199 exit(EXIT_FAILURE);
Willy Tarreauedaff0a2015-05-01 17:01:08 +02003200 }
William Lallemandcf4e4962017-06-08 19:05:48 +02003201#if defined(USE_OPENSSL) && !defined(OPENSSL_NO_DH)
Grant Zhang872f9c22017-01-21 01:10:18 +00003202 ssl_free_dh();
3203#endif
William Lallemand1499b9b2017-06-07 15:04:47 +02003204 exit(0); /* parent must leave */
Willy Tarreauedaff0a2015-05-01 17:01:08 +02003205 }
3206
William Lallemandcb11fd22017-06-01 17:38:52 +02003207 /* child must never use the atexit function */
3208 atexit_flag = 0;
3209
William Lallemandbc193052018-09-11 10:06:26 +02003210 /* close useless master sockets */
3211 if (global.mode & MODE_MWORKER) {
3212 struct mworker_proc *child, *it;
3213 master = 0;
3214
William Lallemand309dc9a2018-10-26 14:47:45 +02003215 mworker_cli_proxy_stop();
3216
William Lallemandbc193052018-09-11 10:06:26 +02003217 /* free proc struct of other processes */
3218 list_for_each_entry_safe(child, it, &proc_list, list) {
William Lallemandce83b4a2018-10-26 14:47:30 +02003219 /* close the FD of the master side for all
3220 * workers, we don't need to close the worker
3221 * side of other workers since it's done with
3222 * the bind_proc */
Tim Duesterhus742e0f92018-11-25 20:03:39 +01003223 if (child->ipc_fd[0] >= 0)
3224 close(child->ipc_fd[0]);
William Lallemandce83b4a2018-10-26 14:47:30 +02003225 if (child->relative_pid == relative_pid &&
3226 child->reloads == 0) {
3227 /* keep this struct if this is our pid */
3228 proc_self = child;
William Lallemandbc193052018-09-11 10:06:26 +02003229 continue;
William Lallemandce83b4a2018-10-26 14:47:30 +02003230 }
William Lallemandbc193052018-09-11 10:06:26 +02003231 LIST_DEL(&child->list);
Tim Duesterhus9b7a9762019-05-16 20:23:22 +02003232 mworker_free_child(child);
3233 child = NULL;
William Lallemandbc193052018-09-11 10:06:26 +02003234 }
3235 }
Willy Tarreau1605c7a2018-01-23 19:01:49 +01003236
William Lallemande1340412017-12-28 16:09:36 +01003237 if (!(global.mode & MODE_QUIET) || (global.mode & MODE_VERBOSE)) {
3238 devnullfd = open("/dev/null", O_RDWR, 0);
3239 if (devnullfd < 0) {
3240 ha_alert("Cannot open /dev/null\n");
3241 exit(EXIT_FAILURE);
3242 }
3243 }
3244
William Lallemand095ba4c2017-06-01 17:38:50 +02003245 /* Must chroot and setgid/setuid in the children */
3246 /* chroot if needed */
3247 if (global.chroot != NULL) {
3248 if (chroot(global.chroot) == -1 || chdir("/") == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003249 ha_alert("[%s.main()] Cannot chroot1(%s).\n", argv[0], global.chroot);
William Lallemand095ba4c2017-06-01 17:38:50 +02003250 if (nb_oldpids)
3251 tell_old_pids(SIGTTIN);
3252 protocol_unbind_all();
3253 exit(1);
3254 }
3255 }
3256
3257 free(global.chroot);
3258 global.chroot = NULL;
3259
3260 /* setgid / setuid */
3261 if (global.gid) {
3262 if (getgroups(0, NULL) > 0 && setgroups(0, NULL) == -1)
Christopher Faulet767a84b2017-11-24 16:50:31 +01003263 ha_warning("[%s.main()] Failed to drop supplementary groups. Using 'gid'/'group'"
3264 " without 'uid'/'user' is generally useless.\n", argv[0]);
William Lallemand095ba4c2017-06-01 17:38:50 +02003265
3266 if (setgid(global.gid) == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003267 ha_alert("[%s.main()] Cannot set gid %d.\n", argv[0], global.gid);
William Lallemand095ba4c2017-06-01 17:38:50 +02003268 protocol_unbind_all();
3269 exit(1);
3270 }
3271 }
3272
3273 if (global.uid && setuid(global.uid) == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003274 ha_alert("[%s.main()] Cannot set uid %d.\n", argv[0], global.uid);
William Lallemand095ba4c2017-06-01 17:38:50 +02003275 protocol_unbind_all();
3276 exit(1);
3277 }
3278
William Lallemand7f80eb22017-05-26 18:19:55 +02003279 /* pass through every cli socket, and check if it's bound to
3280 * the current process and if it exposes listeners sockets.
3281 * Caution: the GTUNE_SOCKET_TRANSFER is now set after the fork.
3282 * */
3283
3284 if (global.stats_fe) {
3285 struct bind_conf *bind_conf;
3286
3287 list_for_each_entry(bind_conf, &global.stats_fe->conf.bind, by_fe) {
3288 if (bind_conf->level & ACCESS_FD_LISTENERS) {
3289 if (!bind_conf->bind_proc || bind_conf->bind_proc & (1UL << proc)) {
3290 global.tune.options |= GTUNE_SOCKET_TRANSFER;
3291 break;
3292 }
3293 }
3294 }
3295 }
3296
Willy Tarreau0b9c02c2009-02-04 22:05:05 +01003297 /* we might have to unbind some proxies from some processes */
Olivier Houchardfbc74e82017-11-24 16:54:05 +01003298 px = proxies_list;
Willy Tarreau0b9c02c2009-02-04 22:05:05 +01003299 while (px != NULL) {
3300 if (px->bind_proc && px->state != PR_STSTOPPED) {
Olivier Houchard1fc05162017-04-06 01:05:05 +02003301 if (!(px->bind_proc & (1UL << proc))) {
3302 if (global.tune.options & GTUNE_SOCKET_TRANSFER)
3303 zombify_proxy(px);
3304 else
3305 stop_proxy(px);
3306 }
Willy Tarreau0b9c02c2009-02-04 22:05:05 +01003307 }
3308 px = px->next;
3309 }
3310
Willy Tarreauf83d3fe2015-05-01 19:13:41 +02003311 /* we might have to unbind some peers sections from some processes */
Frédéric Lécailleed2b4a62017-07-13 09:07:09 +02003312 for (curpeers = cfg_peers; curpeers; curpeers = curpeers->next) {
Willy Tarreauf83d3fe2015-05-01 19:13:41 +02003313 if (!curpeers->peers_fe)
3314 continue;
3315
3316 if (curpeers->peers_fe->bind_proc & (1UL << proc))
3317 continue;
3318
3319 stop_proxy(curpeers->peers_fe);
3320 /* disable this peer section so that it kills itself */
Willy Tarreau47c8c022015-09-28 16:39:25 +02003321 signal_unregister_handler(curpeers->sighandler);
Olivier Houchard3f795f72019-04-17 22:51:06 +02003322 task_destroy(curpeers->sync_task);
Willy Tarreau47c8c022015-09-28 16:39:25 +02003323 curpeers->sync_task = NULL;
Olivier Houchard3f795f72019-04-17 22:51:06 +02003324 task_destroy(curpeers->peers_fe->task);
Willy Tarreau47c8c022015-09-28 16:39:25 +02003325 curpeers->peers_fe->task = NULL;
Willy Tarreauf83d3fe2015-05-01 19:13:41 +02003326 curpeers->peers_fe = NULL;
3327 }
3328
William Lallemand2e8fad92018-11-13 16:18:23 +01003329 /*
3330 * This is only done in daemon mode because we might want the
3331 * logs on stdout in mworker mode. If we're NOT in QUIET mode,
3332 * we should now close the 3 first FDs to ensure that we can
3333 * detach from the TTY. We MUST NOT do it in other cases since
3334 * it would have already be done, and 0-2 would have been
3335 * affected to listening sockets
Willy Tarreaubaaee002006-06-26 02:48:02 +02003336 */
William Lallemand2e8fad92018-11-13 16:18:23 +01003337 if ((global.mode & MODE_DAEMON) &&
3338 (!(global.mode & MODE_QUIET) || (global.mode & MODE_VERBOSE))) {
Willy Tarreaubaaee002006-06-26 02:48:02 +02003339 /* detach from the tty */
William Lallemande1340412017-12-28 16:09:36 +01003340 stdio_quiet(devnullfd);
Willy Tarreau106cb762008-11-16 07:40:34 +01003341 global.mode &= ~MODE_VERBOSE;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003342 global.mode |= MODE_QUIET; /* ensure that we won't say anything from now */
3343 }
3344 pid = getpid(); /* update child's pid */
William Lallemandbfd8eb52018-07-04 15:31:23 +02003345 if (!(global.mode & MODE_MWORKER)) /* in mworker mode we don't want a new pgid for the children */
3346 setsid();
Willy Tarreau2ff76222007-04-09 19:29:56 +02003347 fork_poller();
Willy Tarreaubaaee002006-06-26 02:48:02 +02003348 }
3349
William Dauchycaf02112019-11-19 10:11:36 +01003350 /* try our best to re-enable core dumps depending on system capabilities.
3351 * What is addressed here :
3352 * - remove file size limits
3353 * - remove core size limits
3354 * - mark the process dumpable again if it lost it due to user/group
3355 */
3356 if (global.tune.options & GTUNE_SET_DUMPABLE) {
3357 limit.rlim_cur = limit.rlim_max = RLIM_INFINITY;
3358
3359#if defined(RLIMIT_FSIZE)
3360 if (setrlimit(RLIMIT_FSIZE, &limit) == -1)
3361 ha_warning("[%s.main()] Failed to set the raise the maximum file size.\n", argv[0]);
3362#endif
3363
3364#if defined(RLIMIT_CORE)
3365 if (setrlimit(RLIMIT_CORE, &limit) == -1)
3366 ha_warning("[%s.main()] Failed to set the raise the core dump size.\n", argv[0]);
3367#endif
3368
3369#if defined(USE_PRCTL)
3370 if (prctl(PR_SET_DUMPABLE, 1, 0, 0, 0) == -1)
3371 ha_warning("[%s.main()] Failed to set the dumpable flag, no core will be dumped.\n", argv[0]);
3372#endif
3373 }
3374
Christopher Faulete3a5e352017-10-24 13:53:54 +02003375 global.mode &= ~MODE_STARTING;
Willy Tarreau4f60f162007-04-08 16:39:58 +02003376 /*
3377 * That's it : the central polling loop. Run until we stop.
3378 */
Christopher Faulet1d17c102017-08-29 15:38:48 +02003379#ifdef USE_THREAD
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003380 {
William Lallemand1aab50b2018-06-07 09:46:01 +02003381 sigset_t blocked_sig, old_sig;
Willy Tarreauc40efc12019-05-03 09:22:44 +02003382 int i;
3383
William Lallemand1aab50b2018-06-07 09:46:01 +02003384 /* ensure the signals will be blocked in every thread */
3385 sigfillset(&blocked_sig);
3386 sigdelset(&blocked_sig, SIGPROF);
3387 sigdelset(&blocked_sig, SIGBUS);
3388 sigdelset(&blocked_sig, SIGFPE);
3389 sigdelset(&blocked_sig, SIGILL);
3390 sigdelset(&blocked_sig, SIGSEGV);
3391 pthread_sigmask(SIG_SETMASK, &blocked_sig, &old_sig);
3392
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003393 /* Create nbthread-1 thread. The first thread is the current process */
Willy Tarreau522cfbc2019-05-03 10:16:39 +02003394 thread_info[0].pthread = pthread_self();
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003395 for (i = 1; i < global.nbthread; i++)
Willy Tarreau522cfbc2019-05-03 10:16:39 +02003396 pthread_create(&thread_info[i].pthread, NULL, &run_thread_poll_loop, (void *)(long)i);
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003397
Christopher Faulet62519022017-10-16 15:49:32 +02003398#ifdef USE_CPU_AFFINITY
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003399 /* Now the CPU affinity for all threads */
Willy Tarreau47b00ae2019-07-16 15:10:34 +02003400 if (global.cpu_map.proc_t1[relative_pid-1])
3401 global.cpu_map.thread[0] &= global.cpu_map.proc_t1[relative_pid-1];
3402
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003403 for (i = 0; i < global.nbthread; i++) {
Christopher Fauletcb6a9452017-11-22 16:50:41 +01003404 if (global.cpu_map.proc[relative_pid-1])
Willy Tarreau81492c92019-05-03 09:41:23 +02003405 global.cpu_map.thread[i] &= global.cpu_map.proc[relative_pid-1];
Christopher Faulet62519022017-10-16 15:49:32 +02003406
Willy Tarreau421f02e2018-01-20 18:19:22 +01003407 if (i < MAX_THREADS && /* only the first 32/64 threads may be pinned */
Willy Tarreau81492c92019-05-03 09:41:23 +02003408 global.cpu_map.thread[i]) {/* only do this if the thread has a THREAD map */
Olivier Houchard829aa242017-12-01 18:19:43 +01003409#if defined(__FreeBSD__) || defined(__NetBSD__)
3410 cpuset_t cpuset;
3411#else
3412 cpu_set_t cpuset;
3413#endif
3414 int j;
Willy Tarreau81492c92019-05-03 09:41:23 +02003415 unsigned long cpu_map = global.cpu_map.thread[i];
Olivier Houchard829aa242017-12-01 18:19:43 +01003416
3417 CPU_ZERO(&cpuset);
3418
3419 while ((j = ffsl(cpu_map)) > 0) {
3420 CPU_SET(j - 1, &cpuset);
Cyril Bontéd400ab32018-03-12 21:47:39 +01003421 cpu_map &= ~(1UL << (j - 1));
Olivier Houchard829aa242017-12-01 18:19:43 +01003422 }
Willy Tarreau522cfbc2019-05-03 10:16:39 +02003423 pthread_setaffinity_np(thread_info[i].pthread,
Olivier Houchard829aa242017-12-01 18:19:43 +01003424 sizeof(cpuset), &cpuset);
3425 }
Christopher Faulet1d17c102017-08-29 15:38:48 +02003426 }
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003427#endif /* !USE_CPU_AFFINITY */
3428
William Lallemand1aab50b2018-06-07 09:46:01 +02003429 /* when multithreading we need to let only the thread 0 handle the signals */
William Lallemandd3801c12018-09-11 10:06:23 +02003430 haproxy_unblock_signals();
William Lallemand1aab50b2018-06-07 09:46:01 +02003431
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003432 /* Finally, start the poll loop for the first thread */
Willy Tarreaub4f7cc32019-05-03 09:27:30 +02003433 run_thread_poll_loop(0);
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003434
3435 /* Wait the end of other threads */
3436 for (i = 1; i < global.nbthread; i++)
Willy Tarreau522cfbc2019-05-03 10:16:39 +02003437 pthread_join(thread_info[i].pthread, NULL);
Christopher Faulet1d17c102017-08-29 15:38:48 +02003438
Christopher Fauletb79a94c2017-05-30 15:34:30 +02003439#if defined(DEBUG_THREAD) || defined(DEBUG_FULL)
3440 show_lock_stats();
3441#endif
Christopher Faulet1d17c102017-08-29 15:38:48 +02003442 }
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003443#else /* ! USE_THREAD */
William Lallemandd3801c12018-09-11 10:06:23 +02003444 haproxy_unblock_signals();
Willy Tarreaub4f7cc32019-05-03 09:27:30 +02003445 run_thread_poll_loop(0);
Christopher Faulet62519022017-10-16 15:49:32 +02003446#endif
Christopher Faulet1d17c102017-08-29 15:38:48 +02003447
3448 /* Do some cleanup */
Willy Tarreaubaaee002006-06-26 02:48:02 +02003449 deinit();
Christopher Faulet1d17c102017-08-29 15:38:48 +02003450
Willy Tarreaubaaee002006-06-26 02:48:02 +02003451 exit(0);
3452}
3453
3454
3455/*
3456 * Local variables:
3457 * c-indent-level: 8
3458 * c-basic-offset: 8
3459 * End:
3460 */