blob: a3e72ee0dea638b44454e434c3628206bee47d14 [file] [log] [blame]
Willy Tarreaubaaee002006-06-26 02:48:02 +02001/*
2 * Health-checks functions.
3 *
Willy Tarreau26c25062009-03-08 09:38:41 +01004 * Copyright 2000-2009 Willy Tarreau <w@1wt.eu>
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +02005 * Copyright 2007-2009 Krzysztof Piotr Oledzki <ole@ans.pl>
Willy Tarreaubaaee002006-06-26 02:48:02 +02006 *
7 * This program is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU General Public License
9 * as published by the Free Software Foundation; either version
10 * 2 of the License, or (at your option) any later version.
11 *
12 */
13
Willy Tarreaub8816082008-01-18 12:18:15 +010014#include <assert.h>
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +020015#include <ctype.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020016#include <errno.h>
17#include <fcntl.h>
Willy Tarreau9b39dc52014-07-08 00:54:10 +020018#include <signal.h>
Simon Horman0ba0e4a2015-01-30 11:23:00 +090019#include <stdarg.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020020#include <stdio.h>
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +020021#include <stdlib.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020022#include <string.h>
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +020023#include <time.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020024#include <unistd.h>
Willy Tarreau9f6dc722019-03-01 11:15:10 +010025#include <sys/resource.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020026#include <sys/socket.h>
Dmitry Sivachenkocaf58982009-08-24 15:11:06 +040027#include <sys/types.h>
Simon Horman98637e52014-06-20 12:30:16 +090028#include <sys/wait.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020029#include <netinet/in.h>
Willy Tarreau1274bc42009-07-15 07:16:31 +020030#include <netinet/tcp.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020031#include <arpa/inet.h>
32
Willy Tarreauc7e42382012-08-24 19:22:53 +020033#include <common/chunk.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020034#include <common/compat.h>
35#include <common/config.h>
36#include <common/mini-clist.h>
Willy Tarreau83749182007-04-15 20:56:27 +020037#include <common/standard.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020038#include <common/time.h>
Christopher Fauletcfda8472017-10-20 15:40:23 +020039#include <common/hathreads.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020040
41#include <types/global.h>
Baptiste Assmanna68ca962015-04-14 01:15:08 +020042#include <types/dns.h>
William Lallemand9ed62032016-11-21 17:49:11 +010043#include <types/stats.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020044
45#include <proto/backend.h>
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +020046#include <proto/checks.h>
William Lallemand9ed62032016-11-21 17:49:11 +010047#include <proto/stats.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020048#include <proto/fd.h>
49#include <proto/log.h>
Willy Tarreau53a47662017-08-28 10:53:00 +020050#include <proto/mux_pt.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020051#include <proto/queue.h>
Willy Tarreauc6f4ce82009-06-10 11:09:37 +020052#include <proto/port_range.h>
Willy Tarreaue8c66af2008-01-13 18:40:14 +010053#include <proto/proto_tcp.h>
Baptiste Assmann69e273f2013-12-11 00:52:19 +010054#include <proto/protocol.h>
Willy Tarreau2b5652f2006-12-31 17:46:05 +010055#include <proto/proxy.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020056#include <proto/server.h>
Willy Tarreau48d6bf22016-06-21 16:27:34 +020057#include <proto/signal.h>
Willy Tarreau9e000c62011-03-10 14:03:36 +010058#include <proto/stream_interface.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020059#include <proto/task.h>
Baptiste Assmanna68ca962015-04-14 01:15:08 +020060#include <proto/log.h>
61#include <proto/dns.h>
62#include <proto/proto_udp.h>
Olivier Houchard9130a962017-10-17 17:33:43 +020063#include <proto/ssl_sock.h>
Olivier Houchard9130a962017-10-17 17:33:43 +020064
Willy Tarreaubd741542010-03-16 18:46:54 +010065static int httpchk_expect(struct server *s, int done);
Simon Hormane16c1b32015-01-30 11:22:57 +090066static int tcpcheck_get_step_id(struct check *);
Christopher Faulet3c29aa62020-03-24 13:31:19 +010067static char *tcpcheck_get_step_comment(struct check *);
Willy Tarreau6bdcab02017-10-04 18:41:00 +020068static int tcpcheck_main(struct check *);
Olivier Houchard910b2bc2018-07-17 18:49:38 +020069static void __event_srv_chk_w(struct conn_stream *cs);
Olivier Houchard4501c3e2018-08-28 19:36:18 +020070static int wake_srv_chk(struct conn_stream *cs);
Olivier Houchardaf4021e2018-08-09 13:06:55 +020071static void __event_srv_chk_r(struct conn_stream *cs);
Willy Tarreaubd741542010-03-16 18:46:54 +010072
Christopher Faulet31c30fd2020-03-26 21:10:03 +010073static int srv_check_healthcheck_port(struct check *chk);
74
Willy Tarreau8ceae722018-11-26 11:58:30 +010075DECLARE_STATIC_POOL(pool_head_email_alert, "email_alert", sizeof(struct email_alert));
76DECLARE_STATIC_POOL(pool_head_tcpcheck_rule, "tcpcheck_rule", sizeof(struct tcpcheck_rule));
Christopher Faulet31dff9b2017-10-23 15:45:20 +020077
78
Simon Horman63a4a822012-03-19 07:24:41 +090079static const struct check_status check_statuses[HCHK_STATUS_SIZE] = {
Willy Tarreau6aaa1b82013-12-11 17:09:34 +010080 [HCHK_STATUS_UNKNOWN] = { CHK_RES_UNKNOWN, "UNK", "Unknown" },
81 [HCHK_STATUS_INI] = { CHK_RES_UNKNOWN, "INI", "Initializing" },
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +020082 [HCHK_STATUS_START] = { /* SPECIAL STATUS*/ },
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +020083
Willy Tarreau23964182014-05-20 20:56:30 +020084 /* Below we have finished checks */
85 [HCHK_STATUS_CHECKED] = { CHK_RES_NEUTRAL, "CHECKED", "No status change" },
Willy Tarreau6aaa1b82013-12-11 17:09:34 +010086 [HCHK_STATUS_HANA] = { CHK_RES_FAILED, "HANA", "Health analyze" },
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +010087
Willy Tarreau6aaa1b82013-12-11 17:09:34 +010088 [HCHK_STATUS_SOCKERR] = { CHK_RES_FAILED, "SOCKERR", "Socket error" },
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +020089
Willy Tarreau6aaa1b82013-12-11 17:09:34 +010090 [HCHK_STATUS_L4OK] = { CHK_RES_PASSED, "L4OK", "Layer4 check passed" },
91 [HCHK_STATUS_L4TOUT] = { CHK_RES_FAILED, "L4TOUT", "Layer4 timeout" },
92 [HCHK_STATUS_L4CON] = { CHK_RES_FAILED, "L4CON", "Layer4 connection problem" },
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +020093
Willy Tarreau6aaa1b82013-12-11 17:09:34 +010094 [HCHK_STATUS_L6OK] = { CHK_RES_PASSED, "L6OK", "Layer6 check passed" },
95 [HCHK_STATUS_L6TOUT] = { CHK_RES_FAILED, "L6TOUT", "Layer6 timeout" },
96 [HCHK_STATUS_L6RSP] = { CHK_RES_FAILED, "L6RSP", "Layer6 invalid response" },
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +020097
Willy Tarreau6aaa1b82013-12-11 17:09:34 +010098 [HCHK_STATUS_L7TOUT] = { CHK_RES_FAILED, "L7TOUT", "Layer7 timeout" },
99 [HCHK_STATUS_L7RSP] = { CHK_RES_FAILED, "L7RSP", "Layer7 invalid response" },
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200100
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200101 [HCHK_STATUS_L57DATA] = { /* DUMMY STATUS */ },
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200102
Willy Tarreau6aaa1b82013-12-11 17:09:34 +0100103 [HCHK_STATUS_L7OKD] = { CHK_RES_PASSED, "L7OK", "Layer7 check passed" },
104 [HCHK_STATUS_L7OKCD] = { CHK_RES_CONDPASS, "L7OKC", "Layer7 check conditionally passed" },
105 [HCHK_STATUS_L7STS] = { CHK_RES_FAILED, "L7STS", "Layer7 wrong status" },
Simon Horman98637e52014-06-20 12:30:16 +0900106
107 [HCHK_STATUS_PROCERR] = { CHK_RES_FAILED, "PROCERR", "External check error" },
108 [HCHK_STATUS_PROCTOUT] = { CHK_RES_FAILED, "PROCTOUT", "External check timeout" },
Cyril Bonté77010d82014-08-07 01:55:37 +0200109 [HCHK_STATUS_PROCOK] = { CHK_RES_PASSED, "PROCOK", "External check passed" },
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200110};
111
Cyril Bontéac92a062014-12-27 22:28:38 +0100112const struct extcheck_env extcheck_envs[EXTCHK_SIZE] = {
113 [EXTCHK_PATH] = { "PATH", EXTCHK_SIZE_EVAL_INIT },
114 [EXTCHK_HAPROXY_PROXY_NAME] = { "HAPROXY_PROXY_NAME", EXTCHK_SIZE_EVAL_INIT },
115 [EXTCHK_HAPROXY_PROXY_ID] = { "HAPROXY_PROXY_ID", EXTCHK_SIZE_EVAL_INIT },
116 [EXTCHK_HAPROXY_PROXY_ADDR] = { "HAPROXY_PROXY_ADDR", EXTCHK_SIZE_EVAL_INIT },
117 [EXTCHK_HAPROXY_PROXY_PORT] = { "HAPROXY_PROXY_PORT", EXTCHK_SIZE_EVAL_INIT },
118 [EXTCHK_HAPROXY_SERVER_NAME] = { "HAPROXY_SERVER_NAME", EXTCHK_SIZE_EVAL_INIT },
119 [EXTCHK_HAPROXY_SERVER_ID] = { "HAPROXY_SERVER_ID", EXTCHK_SIZE_EVAL_INIT },
Christopher Fauletaaae9a02020-04-26 09:50:31 +0200120 [EXTCHK_HAPROXY_SERVER_ADDR] = { "HAPROXY_SERVER_ADDR", EXTCHK_SIZE_ADDR },
121 [EXTCHK_HAPROXY_SERVER_PORT] = { "HAPROXY_SERVER_PORT", EXTCHK_SIZE_UINT },
Cyril Bontéac92a062014-12-27 22:28:38 +0100122 [EXTCHK_HAPROXY_SERVER_MAXCONN] = { "HAPROXY_SERVER_MAXCONN", EXTCHK_SIZE_EVAL_INIT },
123 [EXTCHK_HAPROXY_SERVER_CURCONN] = { "HAPROXY_SERVER_CURCONN", EXTCHK_SIZE_ULONG },
124};
125
Simon Horman63a4a822012-03-19 07:24:41 +0900126static const struct analyze_status analyze_statuses[HANA_STATUS_SIZE] = { /* 0: ignore, 1: error, 2: OK */
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100127 [HANA_STATUS_UNKNOWN] = { "Unknown", { 0, 0 }},
128
129 [HANA_STATUS_L4_OK] = { "L4 successful connection", { 2, 0 }},
130 [HANA_STATUS_L4_ERR] = { "L4 unsuccessful connection", { 1, 1 }},
131
132 [HANA_STATUS_HTTP_OK] = { "Correct http response", { 0, 2 }},
133 [HANA_STATUS_HTTP_STS] = { "Wrong http response", { 0, 1 }},
134 [HANA_STATUS_HTTP_HDRRSP] = { "Invalid http response (headers)", { 0, 1 }},
135 [HANA_STATUS_HTTP_RSP] = { "Invalid http response", { 0, 1 }},
136
137 [HANA_STATUS_HTTP_READ_ERROR] = { "Read error (http)", { 0, 1 }},
138 [HANA_STATUS_HTTP_READ_TIMEOUT] = { "Read timeout (http)", { 0, 1 }},
139 [HANA_STATUS_HTTP_BROKEN_PIPE] = { "Close from server (http)", { 0, 1 }},
140};
141
Willy Tarreauc8dc20a2019-12-27 12:03:27 +0100142/* checks if <err> is a real error for errno or one that can be ignored, and
143 * return 0 for these ones or <err> for real ones.
144 */
145static inline int unclean_errno(int err)
146{
147 if (err == EAGAIN || err == EINPROGRESS ||
148 err == EISCONN || err == EALREADY)
149 return 0;
150 return err;
151}
152
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200153/*
154 * Convert check_status code to description
155 */
156const char *get_check_status_description(short check_status) {
157
158 const char *desc;
159
160 if (check_status < HCHK_STATUS_SIZE)
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200161 desc = check_statuses[check_status].desc;
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200162 else
163 desc = NULL;
164
165 if (desc && *desc)
166 return desc;
167 else
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200168 return check_statuses[HCHK_STATUS_UNKNOWN].desc;
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200169}
170
171/*
172 * Convert check_status code to short info
173 */
174const char *get_check_status_info(short check_status) {
175
176 const char *info;
177
178 if (check_status < HCHK_STATUS_SIZE)
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200179 info = check_statuses[check_status].info;
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200180 else
181 info = NULL;
182
183 if (info && *info)
184 return info;
185 else
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200186 return check_statuses[HCHK_STATUS_UNKNOWN].info;
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200187}
188
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100189const char *get_analyze_status(short analyze_status) {
190
191 const char *desc;
192
193 if (analyze_status < HANA_STATUS_SIZE)
194 desc = analyze_statuses[analyze_status].desc;
195 else
196 desc = NULL;
197
198 if (desc && *desc)
199 return desc;
200 else
201 return analyze_statuses[HANA_STATUS_UNKNOWN].desc;
202}
203
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200204/*
Simon Horman4a741432013-02-23 15:35:38 +0900205 * Set check->status, update check->duration and fill check->result with
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200206 * an adequate CHK_RES_* value. The new check->health is computed based
207 * on the result.
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200208 *
209 * Show information in logs about failed health check if server is UP
210 * or succeeded health checks if server is DOWN.
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200211 */
Simon Horman4a741432013-02-23 15:35:38 +0900212static void set_server_check_status(struct check *check, short status, const char *desc)
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100213{
Simon Horman4a741432013-02-23 15:35:38 +0900214 struct server *s = check->server;
Willy Tarreaubef1b322014-05-13 21:01:39 +0200215 short prev_status = check->status;
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200216 int report = 0;
Simon Horman4a741432013-02-23 15:35:38 +0900217
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200218 if (status == HCHK_STATUS_START) {
Willy Tarreau6aaa1b82013-12-11 17:09:34 +0100219 check->result = CHK_RES_UNKNOWN; /* no result yet */
Simon Horman4a741432013-02-23 15:35:38 +0900220 check->desc[0] = '\0';
221 check->start = now;
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200222 return;
223 }
224
Simon Horman4a741432013-02-23 15:35:38 +0900225 if (!check->status)
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200226 return;
227
Krzysztof Piotr Oledzkif7089f52009-10-10 21:06:49 +0200228 if (desc && *desc) {
Simon Horman4a741432013-02-23 15:35:38 +0900229 strncpy(check->desc, desc, HCHK_DESC_LEN-1);
230 check->desc[HCHK_DESC_LEN-1] = '\0';
Krzysztof Piotr Oledzkif7089f52009-10-10 21:06:49 +0200231 } else
Simon Horman4a741432013-02-23 15:35:38 +0900232 check->desc[0] = '\0';
Krzysztof Piotr Oledzkif7089f52009-10-10 21:06:49 +0200233
Simon Horman4a741432013-02-23 15:35:38 +0900234 check->status = status;
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200235 if (check_statuses[status].result)
Simon Horman4a741432013-02-23 15:35:38 +0900236 check->result = check_statuses[status].result;
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200237
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100238 if (status == HCHK_STATUS_HANA)
Simon Horman4a741432013-02-23 15:35:38 +0900239 check->duration = -1;
240 else if (!tv_iszero(&check->start)) {
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200241 /* set_server_check_status() may be called more than once */
Simon Horman4a741432013-02-23 15:35:38 +0900242 check->duration = tv_ms_elapsed(&check->start, &now);
243 tv_zero(&check->start);
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200244 }
245
Willy Tarreau23964182014-05-20 20:56:30 +0200246 /* no change is expected if no state change occurred */
247 if (check->result == CHK_RES_NEUTRAL)
248 return;
249
Olivier Houchard0923fa42019-01-11 18:43:04 +0100250 /* If the check was really just sending a mail, it won't have an
251 * associated server, so we're done now.
252 */
253 if (!s)
254 return;
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200255 report = 0;
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200256
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200257 switch (check->result) {
258 case CHK_RES_FAILED:
Willy Tarreau12634e12014-05-23 11:32:36 +0200259 /* Failure to connect to the agent as a secondary check should not
260 * cause the server to be marked down.
261 */
262 if ((!(check->state & CHK_ST_AGENT) ||
Simon Hormaneaabd522015-02-26 11:26:17 +0900263 (check->status >= HCHK_STATUS_L57DATA)) &&
Christopher Fauletb119a792018-05-02 12:12:45 +0200264 (check->health > 0)) {
Olivier Houchard7059c552019-03-08 18:49:32 +0100265 _HA_ATOMIC_ADD(&s->counters.failed_checks, 1);
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200266 report = 1;
267 check->health--;
268 if (check->health < check->rise)
269 check->health = 0;
270 }
271 break;
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200272
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200273 case CHK_RES_PASSED:
274 case CHK_RES_CONDPASS: /* "condpass" cannot make the first step but it OK after a "passed" */
275 if ((check->health < check->rise + check->fall - 1) &&
276 (check->result == CHK_RES_PASSED || check->health > 0)) {
277 report = 1;
278 check->health++;
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200279
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200280 if (check->health >= check->rise)
281 check->health = check->rise + check->fall - 1; /* OK now */
282 }
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200283
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200284 /* clear consecutive_errors if observing is enabled */
285 if (s->onerror)
286 s->consecutive_errors = 0;
287 break;
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100288
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200289 default:
290 break;
291 }
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200292
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200293 if (s->proxy->options2 & PR_O2_LOGHCHKS &&
294 (status != prev_status || report)) {
295 chunk_printf(&trash,
Willy Tarreau12634e12014-05-23 11:32:36 +0200296 "%s check for %sserver %s/%s %s%s",
297 (check->state & CHK_ST_AGENT) ? "Agent" : "Health",
Willy Tarreauc93cd162014-05-13 15:54:22 +0200298 s->flags & SRV_F_BACKUP ? "backup " : "",
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100299 s->proxy->id, s->id,
Willy Tarreau6aaa1b82013-12-11 17:09:34 +0100300 (check->result == CHK_RES_CONDPASS) ? "conditionally ":"",
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200301 (check->result >= CHK_RES_PASSED) ? "succeeded" : "failed");
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200302
Emeric Brun5a133512017-10-19 14:42:30 +0200303 srv_append_status(&trash, s, check, -1, 0);
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200304
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100305 chunk_appendf(&trash, ", status: %d/%d %s",
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200306 (check->health >= check->rise) ? check->health - check->rise + 1 : check->health,
307 (check->health >= check->rise) ? check->fall : check->rise,
308 (check->health >= check->rise) ? (s->uweight ? "UP" : "DRAIN") : "DOWN");
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200309
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200310 ha_warning("%s.\n", trash.area);
311 send_log(s->proxy, LOG_NOTICE, "%s.\n", trash.area);
312 send_email_alert(s, LOG_INFO, "%s", trash.area);
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200313 }
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200314}
315
Willy Tarreau4eec5472014-05-20 22:32:27 +0200316/* Marks the check <check>'s server down if the current check is already failed
317 * and the server is not down yet nor in maintenance.
Willy Tarreaubaaee002006-06-26 02:48:02 +0200318 */
Willy Tarreau4eec5472014-05-20 22:32:27 +0200319static void check_notify_failure(struct check *check)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200320{
Simon Horman4a741432013-02-23 15:35:38 +0900321 struct server *s = check->server;
Simon Hormane0d1bfb2011-06-21 14:34:58 +0900322
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200323 /* The agent secondary check should only cause a server to be marked
324 * as down if check->status is HCHK_STATUS_L7STS, which indicates
325 * that the agent returned "fail", "stopped" or "down".
326 * The implication here is that failure to connect to the agent
327 * as a secondary check should not cause the server to be marked
328 * down. */
329 if ((check->state & CHK_ST_AGENT) && check->status != HCHK_STATUS_L7STS)
330 return;
331
Willy Tarreau4eec5472014-05-20 22:32:27 +0200332 if (check->health > 0)
333 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100334
Willy Tarreau4eec5472014-05-20 22:32:27 +0200335 /* We only report a reason for the check if we did not do so previously */
Emeric Brun5a133512017-10-19 14:42:30 +0200336 srv_set_stopped(s, NULL, (!s->track && !(s->proxy->options2 & PR_O2_LOGHCHKS)) ? check : NULL);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200337}
338
Willy Tarreauaf549582014-05-16 17:37:50 +0200339/* Marks the check <check> as valid and tries to set its server up, provided
Willy Tarreau3e048382014-05-21 10:30:54 +0200340 * it isn't in maintenance, it is not tracking a down server and other checks
341 * comply. The rule is simple : by default, a server is up, unless any of the
342 * following conditions is true :
343 * - health check failed (check->health < rise)
344 * - agent check failed (agent->health < rise)
345 * - the server tracks a down server (track && track->state == STOPPED)
346 * Note that if the server has a slowstart, it will switch to STARTING instead
347 * of RUNNING. Also, only the health checks support the nolb mode, so the
348 * agent's success may not take the server out of this mode.
Willy Tarreauaf549582014-05-16 17:37:50 +0200349 */
Willy Tarreau3e048382014-05-21 10:30:54 +0200350static void check_notify_success(struct check *check)
Willy Tarreauaf549582014-05-16 17:37:50 +0200351{
Simon Horman4a741432013-02-23 15:35:38 +0900352 struct server *s = check->server;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100353
Emeric Brun52a91d32017-08-31 14:41:55 +0200354 if (s->next_admin & SRV_ADMF_MAINT)
Willy Tarreauaf549582014-05-16 17:37:50 +0200355 return;
Cyril Bontécd19e512010-01-31 22:34:03 +0100356
Emeric Brun52a91d32017-08-31 14:41:55 +0200357 if (s->track && s->track->next_state == SRV_ST_STOPPED)
Willy Tarreauaf549582014-05-16 17:37:50 +0200358 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100359
Willy Tarreau3e048382014-05-21 10:30:54 +0200360 if ((s->check.state & CHK_ST_ENABLED) && (s->check.health < s->check.rise))
361 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100362
Willy Tarreau3e048382014-05-21 10:30:54 +0200363 if ((s->agent.state & CHK_ST_ENABLED) && (s->agent.health < s->agent.rise))
364 return;
Willy Tarreauaf549582014-05-16 17:37:50 +0200365
Emeric Brun52a91d32017-08-31 14:41:55 +0200366 if ((check->state & CHK_ST_AGENT) && s->next_state == SRV_ST_STOPPING)
Willy Tarreau3e048382014-05-21 10:30:54 +0200367 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100368
Emeric Brun5a133512017-10-19 14:42:30 +0200369 srv_set_running(s, NULL, (!s->track && !(s->proxy->options2 & PR_O2_LOGHCHKS)) ? check : NULL);
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100370}
371
Willy Tarreaudb58b792014-05-21 13:57:23 +0200372/* Marks the check <check> as valid and tries to set its server into stopping mode
373 * if it was running or starting, and provided it isn't in maintenance and other
374 * checks comply. The conditions for the server to be marked in stopping mode are
375 * the same as for it to be turned up. Also, only the health checks support the
376 * nolb mode.
Willy Tarreauaf549582014-05-16 17:37:50 +0200377 */
Willy Tarreaudb58b792014-05-21 13:57:23 +0200378static void check_notify_stopping(struct check *check)
Willy Tarreauaf549582014-05-16 17:37:50 +0200379{
Simon Horman4a741432013-02-23 15:35:38 +0900380 struct server *s = check->server;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100381
Emeric Brun52a91d32017-08-31 14:41:55 +0200382 if (s->next_admin & SRV_ADMF_MAINT)
Willy Tarreauaf549582014-05-16 17:37:50 +0200383 return;
384
Willy Tarreaudb58b792014-05-21 13:57:23 +0200385 if (check->state & CHK_ST_AGENT)
386 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100387
Emeric Brun52a91d32017-08-31 14:41:55 +0200388 if (s->track && s->track->next_state == SRV_ST_STOPPED)
Willy Tarreaudb58b792014-05-21 13:57:23 +0200389 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100390
Willy Tarreaudb58b792014-05-21 13:57:23 +0200391 if ((s->check.state & CHK_ST_ENABLED) && (s->check.health < s->check.rise))
392 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100393
Willy Tarreaudb58b792014-05-21 13:57:23 +0200394 if ((s->agent.state & CHK_ST_ENABLED) && (s->agent.health < s->agent.rise))
395 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100396
Willy Tarreaub26881a2017-12-23 11:16:49 +0100397 srv_set_stopping(s, NULL, (!s->track && !(s->proxy->options2 & PR_O2_LOGHCHKS)) ? check : NULL);
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100398}
Willy Tarreaubaaee002006-06-26 02:48:02 +0200399
Willy Tarreau9fe7aae2013-12-31 23:47:37 +0100400/* note: use health_adjust() only, which first checks that the observe mode is
401 * enabled.
402 */
403void __health_adjust(struct server *s, short status)
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100404{
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100405 int failed;
406 int expire;
407
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100408 if (s->observe >= HANA_OBS_SIZE)
409 return;
410
Willy Tarreaubb956662013-01-24 00:37:39 +0100411 if (status >= HANA_STATUS_SIZE || !analyze_statuses[status].desc)
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100412 return;
413
414 switch (analyze_statuses[status].lr[s->observe - 1]) {
415 case 1:
416 failed = 1;
417 break;
418
419 case 2:
420 failed = 0;
421 break;
422
423 default:
424 return;
425 }
426
427 if (!failed) {
428 /* good: clear consecutive_errors */
429 s->consecutive_errors = 0;
430 return;
431 }
432
Olivier Houchard7059c552019-03-08 18:49:32 +0100433 _HA_ATOMIC_ADD(&s->consecutive_errors, 1);
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100434
435 if (s->consecutive_errors < s->consecutive_errors_limit)
436 return;
437
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100438 chunk_printf(&trash, "Detected %d consecutive errors, last one was: %s",
439 s->consecutive_errors, get_analyze_status(status));
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100440
441 switch (s->onerror) {
442 case HANA_ONERR_FASTINTER:
443 /* force fastinter - nothing to do here as all modes force it */
444 break;
445
446 case HANA_ONERR_SUDDTH:
447 /* simulate a pre-fatal failed health check */
Simon Horman58c32972013-11-25 10:46:38 +0900448 if (s->check.health > s->check.rise)
449 s->check.health = s->check.rise + 1;
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100450
451 /* no break - fall through */
452
453 case HANA_ONERR_FAILCHK:
454 /* simulate a failed health check */
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200455 set_server_check_status(&s->check, HCHK_STATUS_HANA,
456 trash.area);
Willy Tarreau4eec5472014-05-20 22:32:27 +0200457 check_notify_failure(&s->check);
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100458 break;
459
460 case HANA_ONERR_MARKDWN:
461 /* mark server down */
Simon Horman58c32972013-11-25 10:46:38 +0900462 s->check.health = s->check.rise;
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200463 set_server_check_status(&s->check, HCHK_STATUS_HANA,
464 trash.area);
Willy Tarreau4eec5472014-05-20 22:32:27 +0200465 check_notify_failure(&s->check);
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100466 break;
467
468 default:
469 /* write a warning? */
470 break;
471 }
472
473 s->consecutive_errors = 0;
Olivier Houchard7059c552019-03-08 18:49:32 +0100474 _HA_ATOMIC_ADD(&s->counters.failed_hana, 1);
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100475
Simon Horman66183002013-02-23 10:16:43 +0900476 if (s->check.fastinter) {
477 expire = tick_add(now_ms, MS_TO_TICKS(s->check.fastinter));
Sergiy Prykhodko1d57e502013-09-21 12:05:00 +0300478 if (s->check.task->expire > expire) {
Willy Tarreau5b3a2022012-09-28 15:01:02 +0200479 s->check.task->expire = expire;
Sergiy Prykhodko1d57e502013-09-21 12:05:00 +0300480 /* requeue check task with new expire */
481 task_queue(s->check.task);
482 }
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100483 }
484}
485
Willy Tarreaua1dab552014-04-14 15:04:54 +0200486static int httpchk_build_status_header(struct server *s, char *buffer, int size)
Willy Tarreauef781042010-01-27 11:53:01 +0100487{
488 int sv_state;
489 int ratio;
490 int hlen = 0;
Joseph Lynch514061c2015-01-15 17:52:59 -0800491 char addr[46];
492 char port[6];
Willy Tarreauef781042010-01-27 11:53:01 +0100493 const char *srv_hlt_st[7] = { "DOWN", "DOWN %d/%d",
494 "UP %d/%d", "UP",
495 "NOLB %d/%d", "NOLB",
496 "no check" };
497
498 memcpy(buffer + hlen, "X-Haproxy-Server-State: ", 24);
499 hlen += 24;
500
Willy Tarreauff5ae352013-12-11 20:36:34 +0100501 if (!(s->check.state & CHK_ST_ENABLED))
502 sv_state = 6;
Emeric Brun52a91d32017-08-31 14:41:55 +0200503 else if (s->cur_state != SRV_ST_STOPPED) {
Simon Horman58c32972013-11-25 10:46:38 +0900504 if (s->check.health == s->check.rise + s->check.fall - 1)
Willy Tarreauef781042010-01-27 11:53:01 +0100505 sv_state = 3; /* UP */
506 else
507 sv_state = 2; /* going down */
508
Emeric Brun52a91d32017-08-31 14:41:55 +0200509 if (s->cur_state == SRV_ST_STOPPING)
Willy Tarreauef781042010-01-27 11:53:01 +0100510 sv_state += 2;
511 } else {
Simon Horman125d0992013-02-24 17:23:38 +0900512 if (s->check.health)
Willy Tarreauef781042010-01-27 11:53:01 +0100513 sv_state = 1; /* going up */
514 else
515 sv_state = 0; /* DOWN */
516 }
517
Willy Tarreaua1dab552014-04-14 15:04:54 +0200518 hlen += snprintf(buffer + hlen, size - hlen,
Willy Tarreauef781042010-01-27 11:53:01 +0100519 srv_hlt_st[sv_state],
Emeric Brun52a91d32017-08-31 14:41:55 +0200520 (s->cur_state != SRV_ST_STOPPED) ? (s->check.health - s->check.rise + 1) : (s->check.health),
521 (s->cur_state != SRV_ST_STOPPED) ? (s->check.fall) : (s->check.rise));
Willy Tarreauef781042010-01-27 11:53:01 +0100522
Joseph Lynch514061c2015-01-15 17:52:59 -0800523 addr_to_str(&s->addr, addr, sizeof(addr));
Willy Tarreau04276f32017-01-06 17:41:29 +0100524 if (s->addr.ss_family == AF_INET || s->addr.ss_family == AF_INET6)
525 snprintf(port, sizeof(port), "%u", s->svc_port);
526 else
527 *port = 0;
Joseph Lynch514061c2015-01-15 17:52:59 -0800528
529 hlen += snprintf(buffer + hlen, size - hlen, "; address=%s; port=%s; name=%s/%s; node=%s; weight=%d/%d; scur=%d/%d; qcur=%d",
530 addr, port, s->proxy->id, s->id,
Willy Tarreauef781042010-01-27 11:53:01 +0100531 global.node,
Emeric Brun52a91d32017-08-31 14:41:55 +0200532 (s->cur_eweight * s->proxy->lbprm.wmult + s->proxy->lbprm.wdiv - 1) / s->proxy->lbprm.wdiv,
Willy Tarreauef781042010-01-27 11:53:01 +0100533 (s->proxy->lbprm.tot_weight * s->proxy->lbprm.wmult + s->proxy->lbprm.wdiv - 1) / s->proxy->lbprm.wdiv,
534 s->cur_sess, s->proxy->beconn - s->proxy->nbpend,
535 s->nbpend);
536
Emeric Brun52a91d32017-08-31 14:41:55 +0200537 if ((s->cur_state == SRV_ST_STARTING) &&
Willy Tarreauef781042010-01-27 11:53:01 +0100538 now.tv_sec < s->last_change + s->slowstart &&
539 now.tv_sec >= s->last_change) {
540 ratio = MAX(1, 100 * (now.tv_sec - s->last_change) / s->slowstart);
Willy Tarreaua1dab552014-04-14 15:04:54 +0200541 hlen += snprintf(buffer + hlen, size - hlen, "; throttle=%d%%", ratio);
Willy Tarreauef781042010-01-27 11:53:01 +0100542 }
543
544 buffer[hlen++] = '\r';
545 buffer[hlen++] = '\n';
546
547 return hlen;
548}
549
Willy Tarreau20a18342013-12-05 00:31:46 +0100550/* Check the connection. If an error has already been reported or the socket is
551 * closed, keep errno intact as it is supposed to contain the valid error code.
552 * If no error is reported, check the socket's error queue using getsockopt().
553 * Warning, this must be done only once when returning from poll, and never
554 * after an I/O error was attempted, otherwise the error queue might contain
555 * inconsistent errors. If an error is detected, the CO_FL_ERROR is set on the
556 * socket. Returns non-zero if an error was reported, zero if everything is
557 * clean (including a properly closed socket).
558 */
559static int retrieve_errno_from_socket(struct connection *conn)
560{
561 int skerr;
562 socklen_t lskerr = sizeof(skerr);
563
Willy Tarreauc8dc20a2019-12-27 12:03:27 +0100564 if (conn->flags & CO_FL_ERROR && (unclean_errno(errno) || !conn->ctrl))
Willy Tarreau20a18342013-12-05 00:31:46 +0100565 return 1;
566
Willy Tarreau3c728722014-01-23 13:50:42 +0100567 if (!conn_ctrl_ready(conn))
Willy Tarreau20a18342013-12-05 00:31:46 +0100568 return 0;
569
Willy Tarreau585744b2017-08-24 14:31:19 +0200570 if (getsockopt(conn->handle.fd, SOL_SOCKET, SO_ERROR, &skerr, &lskerr) == 0)
Willy Tarreau20a18342013-12-05 00:31:46 +0100571 errno = skerr;
572
Willy Tarreauc8dc20a2019-12-27 12:03:27 +0100573 errno = unclean_errno(errno);
Willy Tarreau20a18342013-12-05 00:31:46 +0100574
575 if (!errno) {
576 /* we could not retrieve an error, that does not mean there is
577 * none. Just don't change anything and only report the prior
578 * error if any.
579 */
580 if (conn->flags & CO_FL_ERROR)
581 return 1;
582 else
583 return 0;
584 }
585
586 conn->flags |= CO_FL_ERROR | CO_FL_SOCK_WR_SH | CO_FL_SOCK_RD_SH;
587 return 1;
588}
589
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100590/* Try to collect as much information as possible on the connection status,
591 * and adjust the server status accordingly. It may make use of <errno_bck>
592 * if non-null when the caller is absolutely certain of its validity (eg:
593 * checked just after a syscall). If the caller doesn't have a valid errno,
594 * it can pass zero, and retrieve_errno_from_socket() will be called to try
595 * to extract errno from the socket. If no error is reported, it will consider
596 * the <expired> flag. This is intended to be used when a connection error was
597 * reported in conn->flags or when a timeout was reported in <expired>. The
598 * function takes care of not updating a server status which was already set.
599 * All situations where at least one of <expired> or CO_FL_ERROR are set
600 * produce a status.
601 */
Willy Tarreaub5259bf2017-10-04 14:47:29 +0200602static void chk_report_conn_err(struct check *check, int errno_bck, int expired)
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100603{
Olivier Houchard9aaf7782017-09-13 18:30:23 +0200604 struct conn_stream *cs = check->cs;
605 struct connection *conn = cs_conn(cs);
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100606 const char *err_msg;
Willy Tarreau83061a82018-07-13 11:56:34 +0200607 struct buffer *chk;
Willy Tarreau213c6782014-10-02 14:51:02 +0200608 int step;
Baptiste Assmann22b09d22015-05-01 08:03:04 +0200609 char *comment;
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100610
Willy Tarreau6aaa1b82013-12-11 17:09:34 +0100611 if (check->result != CHK_RES_UNKNOWN)
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100612 return;
613
Willy Tarreauc8dc20a2019-12-27 12:03:27 +0100614 errno = unclean_errno(errno_bck);
615 if (conn && errno)
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100616 retrieve_errno_from_socket(conn);
617
Willy Tarreau4ff3b892017-10-16 15:17:17 +0200618 if (conn && !(conn->flags & CO_FL_ERROR) &&
619 !(cs->flags & CS_FL_ERROR) && !expired)
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100620 return;
621
622 /* we'll try to build a meaningful error message depending on the
623 * context of the error possibly present in conn->err_code, and the
624 * socket error possibly collected above. This is useful to know the
625 * exact step of the L6 layer (eg: SSL handshake).
626 */
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +0200627 chk = get_trash_chunk();
628
629 if (check->type == PR_O2_TCPCHK_CHK) {
Simon Hormane16c1b32015-01-30 11:22:57 +0900630 step = tcpcheck_get_step_id(check);
Willy Tarreau213c6782014-10-02 14:51:02 +0200631 if (!step)
632 chunk_printf(chk, " at initial connection step of tcp-check");
633 else {
634 chunk_printf(chk, " at step %d of tcp-check", step);
635 /* we were looking for a string */
636 if (check->last_started_step && check->last_started_step->action == TCPCHK_ACT_CONNECT) {
637 if (check->last_started_step->port)
638 chunk_appendf(chk, " (connect port %d)" ,check->last_started_step->port);
639 else
640 chunk_appendf(chk, " (connect)");
641 }
642 else if (check->last_started_step && check->last_started_step->action == TCPCHK_ACT_EXPECT) {
Gaetan Rivetb616add2020-02-07 15:37:17 +0100643 struct tcpcheck_expect *expect = &check->last_started_step->expect;
644
645 switch (expect->type) {
646 case TCPCHK_EXPECT_STRING:
647 chunk_appendf(chk, " (expect string '%s')", expect->string);
648 break;
649 case TCPCHK_EXPECT_BINARY:
650 chunk_appendf(chk, " (expect binary '%s')", expect->string);
651 break;
652 case TCPCHK_EXPECT_REGEX:
Willy Tarreau213c6782014-10-02 14:51:02 +0200653 chunk_appendf(chk, " (expect regex)");
Gaetan Rivetb616add2020-02-07 15:37:17 +0100654 break;
Gaetan Rivetefab6c62020-02-07 15:37:17 +0100655 case TCPCHK_EXPECT_REGEX_BINARY:
656 chunk_appendf(chk, " (expect binary regex)");
657 break;
Gaetan Rivetb616add2020-02-07 15:37:17 +0100658 case TCPCHK_EXPECT_UNDEF:
659 chunk_appendf(chk, " (undefined expect!)");
660 break;
661 }
Willy Tarreau213c6782014-10-02 14:51:02 +0200662 }
663 else if (check->last_started_step && check->last_started_step->action == TCPCHK_ACT_SEND) {
664 chunk_appendf(chk, " (send)");
665 }
Baptiste Assmann22b09d22015-05-01 08:03:04 +0200666
Christopher Faulet3c29aa62020-03-24 13:31:19 +0100667 comment = tcpcheck_get_step_comment(check);
Baptiste Assmann22b09d22015-05-01 08:03:04 +0200668 if (comment)
669 chunk_appendf(chk, " comment: '%s'", comment);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +0200670 }
671 }
672
Willy Tarreau00149122017-10-04 18:05:01 +0200673 if (conn && conn->err_code) {
Willy Tarreauc8dc20a2019-12-27 12:03:27 +0100674 if (unclean_errno(errno))
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200675 chunk_printf(&trash, "%s (%s)%s", conn_err_code_str(conn), strerror(errno),
676 chk->area);
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100677 else
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200678 chunk_printf(&trash, "%s%s", conn_err_code_str(conn),
679 chk->area);
680 err_msg = trash.area;
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100681 }
682 else {
Willy Tarreauc8dc20a2019-12-27 12:03:27 +0100683 if (unclean_errno(errno)) {
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200684 chunk_printf(&trash, "%s%s", strerror(errno),
685 chk->area);
686 err_msg = trash.area;
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100687 }
688 else {
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200689 err_msg = chk->area;
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100690 }
691 }
692
Willy Tarreau00149122017-10-04 18:05:01 +0200693 if (check->state & CHK_ST_PORT_MISS) {
Baptiste Assmann95db2bc2016-06-13 14:15:41 +0200694 /* NOTE: this is reported after <fall> tries */
695 chunk_printf(chk, "No port available for the TCP connection");
696 set_server_check_status(check, HCHK_STATUS_SOCKERR, err_msg);
697 }
698
Willy Tarreau00149122017-10-04 18:05:01 +0200699 if (!conn) {
700 /* connection allocation error before the connection was established */
701 set_server_check_status(check, HCHK_STATUS_SOCKERR, err_msg);
702 }
Willy Tarreauc192b0a2020-01-23 09:11:58 +0100703 else if (conn->flags & CO_FL_WAIT_L4_CONN) {
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100704 /* L4 not established (yet) */
Willy Tarreau4ff3b892017-10-16 15:17:17 +0200705 if (conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR)
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100706 set_server_check_status(check, HCHK_STATUS_L4CON, err_msg);
707 else if (expired)
708 set_server_check_status(check, HCHK_STATUS_L4TOUT, err_msg);
Baptiste Assmanna68ca962015-04-14 01:15:08 +0200709
710 /*
711 * might be due to a server IP change.
712 * Let's trigger a DNS resolution if none are currently running.
713 */
Olivier Houchard0923fa42019-01-11 18:43:04 +0100714 if (check->server)
715 dns_trigger_resolution(check->server->dns_requester);
Baptiste Assmanna68ca962015-04-14 01:15:08 +0200716
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100717 }
Willy Tarreauc192b0a2020-01-23 09:11:58 +0100718 else if (conn->flags & CO_FL_WAIT_L6_CONN) {
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100719 /* L6 not established (yet) */
Willy Tarreau4ff3b892017-10-16 15:17:17 +0200720 if (conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR)
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100721 set_server_check_status(check, HCHK_STATUS_L6RSP, err_msg);
722 else if (expired)
723 set_server_check_status(check, HCHK_STATUS_L6TOUT, err_msg);
724 }
Willy Tarreau4ff3b892017-10-16 15:17:17 +0200725 else if (conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR) {
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100726 /* I/O error after connection was established and before we could diagnose */
727 set_server_check_status(check, HCHK_STATUS_SOCKERR, err_msg);
728 }
729 else if (expired) {
730 /* connection established but expired check */
731 if (check->type == PR_O2_SSL3_CHK)
732 set_server_check_status(check, HCHK_STATUS_L6TOUT, err_msg);
733 else /* HTTP, SMTP, ... */
734 set_server_check_status(check, HCHK_STATUS_L7TOUT, err_msg);
735 }
736
737 return;
738}
739
Olivier Houchard5c110b92018-08-14 17:04:58 +0200740/* This function checks if any I/O is wanted, and if so, attempts to do so */
741static struct task *event_srv_chk_io(struct task *t, void *ctx, unsigned short state)
Olivier Houchard910b2bc2018-07-17 18:49:38 +0200742{
Olivier Houchard26e1a8f2018-09-12 15:15:12 +0200743 struct check *check = ctx;
744 struct conn_stream *cs = check->cs;
Olivier Houchard0923fa42019-01-11 18:43:04 +0100745 struct email_alertq *q = container_of(check, typeof(*q), check);
Olivier Houchardbc89ad82019-07-09 17:28:51 +0200746 int ret = 0;
Olivier Houchard4501c3e2018-08-28 19:36:18 +0200747
Willy Tarreau4f6516d2018-12-19 13:59:17 +0100748 if (!(check->wait_list.events & SUB_RETRY_SEND))
Olivier Houchardbc89ad82019-07-09 17:28:51 +0200749 ret = wake_srv_chk(cs);
750 if (ret == 0 && !(check->wait_list.events & SUB_RETRY_RECV)) {
Olivier Houchard0923fa42019-01-11 18:43:04 +0100751 if (check->server)
752 HA_SPIN_LOCK(SERVER_LOCK, &check->server->lock);
753 else
754 HA_SPIN_LOCK(EMAIL_ALERTS_LOCK, &q->lock);
Olivier Houchardaf4021e2018-08-09 13:06:55 +0200755 __event_srv_chk_r(cs);
Olivier Houchard0923fa42019-01-11 18:43:04 +0100756 if (check->server)
757 HA_SPIN_UNLOCK(SERVER_LOCK, &check->server->lock);
758 else
759 HA_SPIN_UNLOCK(EMAIL_ALERTS_LOCK, &q->lock);
Olivier Houchardaf4021e2018-08-09 13:06:55 +0200760 }
Olivier Houchard910b2bc2018-07-17 18:49:38 +0200761 return NULL;
762}
763
764/* same as above but protected by the server lock.
Willy Tarreau62ac84f2017-11-05 10:11:13 +0100765 *
766 * Please do NOT place any return statement in this function and only leave
Olivier Houchard910b2bc2018-07-17 18:49:38 +0200767 * via the out label. NOTE THAT THIS FUNCTION DOESN'T LOCK, YOU PROBABLY WANT
768 * TO USE event_srv_chk_w() instead.
Willy Tarreaubaaee002006-06-26 02:48:02 +0200769 */
Olivier Houchard910b2bc2018-07-17 18:49:38 +0200770static void __event_srv_chk_w(struct conn_stream *cs)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200771{
Olivier Houchard9aaf7782017-09-13 18:30:23 +0200772 struct connection *conn = cs->conn;
773 struct check *check = cs->data;
Simon Horman4a741432013-02-23 15:35:38 +0900774 struct server *s = check->server;
Simon Horman4a741432013-02-23 15:35:38 +0900775 struct task *t = check->task;
Willy Tarreaufb56aab2012-09-28 14:40:02 +0200776
Willy Tarreau6aaa1b82013-12-11 17:09:34 +0100777 if (unlikely(check->result == CHK_RES_FAILED))
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100778 goto out_wakeup;
779
Willy Tarreau20a18342013-12-05 00:31:46 +0100780 if (retrieve_errno_from_socket(conn)) {
Willy Tarreaub5259bf2017-10-04 14:47:29 +0200781 chk_report_conn_err(check, errno, 0);
Willy Tarreau20a18342013-12-05 00:31:46 +0100782 goto out_wakeup;
783 }
Krzysztof Piotr Oledzki6492db52010-01-02 22:03:01 +0100784
Willy Tarreau06559ac2013-12-05 01:53:08 +0100785 /* here, we know that the connection is established. That's enough for
786 * a pure TCP check.
787 */
788 if (!check->type)
789 goto out_wakeup;
790
Willy Tarreauc09572f2017-10-04 11:58:22 +0200791 /* wake() will take care of calling tcpcheck_main() */
Willy Tarreau62ac84f2017-11-05 10:11:13 +0100792 if (check->type == PR_O2_TCPCHK_CHK)
Olivier Houchard910b2bc2018-07-17 18:49:38 +0200793 goto out;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +0200794
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200795 if (b_data(&check->bo)) {
Olivier Houcharded0f2072018-08-16 15:41:52 +0200796 cs->conn->mux->snd_buf(cs, &check->bo, b_data(&check->bo), 0);
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200797 b_realign_if_empty(&check->bo);
Willy Tarreau4ff3b892017-10-16 15:17:17 +0200798 if (conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR) {
Willy Tarreaub5259bf2017-10-04 14:47:29 +0200799 chk_report_conn_err(check, errno, 0);
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100800 goto out_wakeup;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200801 }
Olivier Houchard910b2bc2018-07-17 18:49:38 +0200802 if (b_data(&check->bo)) {
Willy Tarreau4f6516d2018-12-19 13:59:17 +0100803 conn->mux->subscribe(cs, SUB_RETRY_SEND, &check->wait_list);
Olivier Houchard910b2bc2018-07-17 18:49:38 +0200804 goto out;
805 }
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100806 }
Willy Tarreau6996e152007-04-30 14:37:43 +0200807
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100808 /* full request sent, we allow up to <timeout.check> if nonzero for a response */
809 if (s->proxy->timeout.check) {
810 t->expire = tick_add_ifset(now_ms, s->proxy->timeout.check);
811 task_queue(t);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200812 }
Olivier Houchard53216e72018-10-10 15:46:36 +0200813 goto out;
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100814
Willy Tarreau83749182007-04-15 20:56:27 +0200815 out_wakeup:
Willy Tarreaufdccded2008-08-29 18:19:04 +0200816 task_wakeup(t, TASK_WOKEN_IO);
Olivier Houchard910b2bc2018-07-17 18:49:38 +0200817 out:
818 return;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200819}
820
Willy Tarreaubaaee002006-06-26 02:48:02 +0200821/*
Willy Tarreauf3c69202006-07-09 16:42:34 +0200822 * This function is used only for server health-checks. It handles the server's
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +0200823 * reply to an HTTP request, SSL HELLO or MySQL client Auth. It calls
Simon Horman4a741432013-02-23 15:35:38 +0900824 * set_server_check_status() to update check->status, check->duration
825 * and check->result.
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200826
827 * The set_server_check_status function is called with HCHK_STATUS_L7OKD if
828 * an HTTP server replies HTTP 2xx or 3xx (valid responses), if an SMTP server
829 * returns 2xx, HCHK_STATUS_L6OK if an SSL server returns at least 5 bytes in
830 * response to an SSL HELLO (the principle is that this is enough to
831 * distinguish between an SSL server and a pure TCP relay). All other cases will
832 * call it with a proper error status like HCHK_STATUS_L7STS, HCHK_STATUS_L6RSP,
833 * etc.
Willy Tarreau62ac84f2017-11-05 10:11:13 +0100834 *
835 * Please do NOT place any return statement in this function and only leave
Olivier Houchardaf4021e2018-08-09 13:06:55 +0200836 * via the out label.
837 *
838 * This must be called with the server lock held.
Willy Tarreaubaaee002006-06-26 02:48:02 +0200839 */
Olivier Houchardaf4021e2018-08-09 13:06:55 +0200840static void __event_srv_chk_r(struct conn_stream *cs)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200841{
Olivier Houchard9aaf7782017-09-13 18:30:23 +0200842 struct connection *conn = cs->conn;
843 struct check *check = cs->data;
Simon Horman4a741432013-02-23 15:35:38 +0900844 struct server *s = check->server;
845 struct task *t = check->task;
Krzysztof Piotr Oledzkif7089f52009-10-10 21:06:49 +0200846 char *desc;
Willy Tarreau03938182010-03-17 21:52:07 +0100847 int done;
Gabor Lekenyb4c81e42010-09-29 18:17:05 +0200848 unsigned short msglen;
Willy Tarreau83749182007-04-15 20:56:27 +0200849
Willy Tarreau6aaa1b82013-12-11 17:09:34 +0100850 if (unlikely(check->result == CHK_RES_FAILED))
Willy Tarreau83749182007-04-15 20:56:27 +0200851 goto out_wakeup;
Willy Tarreau83749182007-04-15 20:56:27 +0200852
Willy Tarreauc09572f2017-10-04 11:58:22 +0200853 /* wake() will take care of calling tcpcheck_main() */
Willy Tarreau62ac84f2017-11-05 10:11:13 +0100854 if (check->type == PR_O2_TCPCHK_CHK)
Olivier Houchardaf4021e2018-08-09 13:06:55 +0200855 goto out;
Willy Tarreaufb56aab2012-09-28 14:40:02 +0200856
Willy Tarreau83749182007-04-15 20:56:27 +0200857 /* Warning! Linux returns EAGAIN on SO_ERROR if data are still available
858 * but the connection was closed on the remote end. Fortunately, recv still
859 * works correctly and we don't need to do the getsockopt() on linux.
860 */
Nick Chalk57b1bf72010-03-16 15:50:46 +0000861
862 /* Set buffer to point to the end of the data already read, and check
863 * that there is free space remaining. If the buffer is full, proceed
864 * with running the checks without attempting another socket read.
865 */
Nick Chalk57b1bf72010-03-16 15:50:46 +0000866
Willy Tarreau03938182010-03-17 21:52:07 +0100867 done = 0;
Nick Chalk57b1bf72010-03-16 15:50:46 +0000868
Olivier Houchard511efea2018-08-16 15:30:32 +0200869 cs->conn->mux->rcv_buf(cs, &check->bi, b_size(&check->bi), 0);
Willy Tarreau4ff3b892017-10-16 15:17:17 +0200870 if (conn->flags & (CO_FL_ERROR | CO_FL_SOCK_RD_SH) || cs->flags & CS_FL_ERROR) {
Willy Tarreau03938182010-03-17 21:52:07 +0100871 done = 1;
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200872 if ((conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR) && !b_data(&check->bi)) {
Willy Tarreauf1503172012-09-28 19:39:36 +0200873 /* Report network errors only if we got no other data. Otherwise
874 * we'll let the upper layers decide whether the response is OK
875 * or not. It is very common that an RST sent by the server is
876 * reported as an error just after the last data chunk.
877 */
Willy Tarreaub5259bf2017-10-04 14:47:29 +0200878 chk_report_conn_err(check, errno, 0);
Willy Tarreauc1a07962010-03-16 20:55:43 +0100879 goto out_wakeup;
880 }
Willy Tarreaubaaee002006-06-26 02:48:02 +0200881 }
882
Willy Tarreau0f0393f2019-09-24 10:43:03 +0200883 /* the rest of the code below expects the connection to be ready! */
Willy Tarreau911db9b2020-01-23 16:27:54 +0100884 if (conn->flags & CO_FL_WAIT_XPRT && !done)
Willy Tarreau0f0393f2019-09-24 10:43:03 +0200885 goto wait_more_data;
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100886
Willy Tarreau03938182010-03-17 21:52:07 +0100887 /* Intermediate or complete response received.
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200888 * Terminate string in b_head(&check->bi) buffer.
Willy Tarreau03938182010-03-17 21:52:07 +0100889 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200890 if (b_data(&check->bi) < b_size(&check->bi))
891 b_head(&check->bi)[b_data(&check->bi)] = '\0';
Willy Tarreau03938182010-03-17 21:52:07 +0100892 else {
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200893 b_head(&check->bi)[b_data(&check->bi) - 1] = '\0';
Willy Tarreau03938182010-03-17 21:52:07 +0100894 done = 1; /* buffer full, don't wait for more data */
895 }
Krzysztof Piotr Oledzkif7089f52009-10-10 21:06:49 +0200896
Nick Chalk57b1bf72010-03-16 15:50:46 +0000897 /* Run the checks... */
Simon Horman4a741432013-02-23 15:35:38 +0900898 switch (check->type) {
Willy Tarreau1620ec32011-08-06 17:05:02 +0200899 case PR_O2_HTTP_CHK:
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200900 if (!done && b_data(&check->bi) < strlen("HTTP/1.0 000\r"))
Willy Tarreau03938182010-03-17 21:52:07 +0100901 goto wait_more_data;
902
Willy Tarreauc7dd71a2007-11-30 08:33:21 +0100903 /* Check if the server speaks HTTP 1.X */
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200904 if ((b_data(&check->bi) < strlen("HTTP/1.0 000\r")) ||
905 (memcmp(b_head(&check->bi), "HTTP/1.", 7) != 0 ||
906 (*(b_head(&check->bi) + 12) != ' ' && *(b_head(&check->bi) + 12) != '\r')) ||
907 !isdigit((unsigned char) *(b_head(&check->bi) + 9)) || !isdigit((unsigned char) *(b_head(&check->bi) + 10)) ||
908 !isdigit((unsigned char) *(b_head(&check->bi) + 11))) {
909 cut_crlf(b_head(&check->bi));
910 set_server_check_status(check, HCHK_STATUS_L7RSP, b_head(&check->bi));
Krzysztof Piotr Oledzkif7089f52009-10-10 21:06:49 +0200911
Willy Tarreauc7dd71a2007-11-30 08:33:21 +0100912 goto out_wakeup;
913 }
914
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200915 check->code = str2uic(b_head(&check->bi) + 9);
916 desc = ltrim(b_head(&check->bi) + 12, ' ');
Christopher Fauletc2a89a62017-10-23 15:54:24 +0200917
Willy Tarreaubd741542010-03-16 18:46:54 +0100918 if ((s->proxy->options & PR_O_DISABLE404) &&
Emeric Brun52a91d32017-08-31 14:41:55 +0200919 (s->next_state != SRV_ST_STOPPED) && (check->code == 404)) {
Nick Chalk57b1bf72010-03-16 15:50:46 +0000920 /* 404 may be accepted as "stopping" only if the server was up */
921 cut_crlf(desc);
Simon Horman4a741432013-02-23 15:35:38 +0900922 set_server_check_status(check, HCHK_STATUS_L7OKCD, desc);
Nick Chalk57b1bf72010-03-16 15:50:46 +0000923 }
Willy Tarreaubd741542010-03-16 18:46:54 +0100924 else if (s->proxy->options2 & PR_O2_EXP_TYPE) {
925 /* Run content verification check... We know we have at least 13 chars */
926 if (!httpchk_expect(s, done))
927 goto wait_more_data;
928 }
929 /* check the reply : HTTP/1.X 2xx and 3xx are OK */
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200930 else if (*(b_head(&check->bi) + 9) == '2' || *(b_head(&check->bi) + 9) == '3') {
Willy Tarreaubd741542010-03-16 18:46:54 +0100931 cut_crlf(desc);
Simon Horman4a741432013-02-23 15:35:38 +0900932 set_server_check_status(check, HCHK_STATUS_L7OKD, desc);
Willy Tarreaubd741542010-03-16 18:46:54 +0100933 }
Nick Chalk57b1bf72010-03-16 15:50:46 +0000934 else {
935 cut_crlf(desc);
Simon Horman4a741432013-02-23 15:35:38 +0900936 set_server_check_status(check, HCHK_STATUS_L7STS, desc);
Nick Chalk57b1bf72010-03-16 15:50:46 +0000937 }
Willy Tarreau1620ec32011-08-06 17:05:02 +0200938 break;
939
940 case PR_O2_SSL3_CHK:
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200941 if (!done && b_data(&check->bi) < 5)
Willy Tarreau03938182010-03-17 21:52:07 +0100942 goto wait_more_data;
943
Willy Tarreauc7dd71a2007-11-30 08:33:21 +0100944 /* Check for SSLv3 alert or handshake */
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200945 if ((b_data(&check->bi) >= 5) && (*b_head(&check->bi) == 0x15 || *b_head(&check->bi) == 0x16))
Simon Horman4a741432013-02-23 15:35:38 +0900946 set_server_check_status(check, HCHK_STATUS_L6OK, NULL);
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200947 else
Simon Horman4a741432013-02-23 15:35:38 +0900948 set_server_check_status(check, HCHK_STATUS_L6RSP, NULL);
Willy Tarreau1620ec32011-08-06 17:05:02 +0200949 break;
950
951 case PR_O2_SMTP_CHK:
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200952 if (!done && b_data(&check->bi) < strlen("000\r"))
Willy Tarreau03938182010-03-17 21:52:07 +0100953 goto wait_more_data;
954
Willy Tarreau5488a622019-08-06 16:26:31 +0200955 /* do not reset when closing, servers don't like this */
956 if (conn_ctrl_ready(cs->conn))
957 fdtab[cs->conn->handle.fd].linger_risk = 0;
958
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200959 /* Check if the server speaks SMTP */
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200960 if ((b_data(&check->bi) < strlen("000\r")) ||
961 (*(b_head(&check->bi) + 3) != ' ' && *(b_head(&check->bi) + 3) != '\r') ||
962 !isdigit((unsigned char) *b_head(&check->bi)) || !isdigit((unsigned char) *(b_head(&check->bi) + 1)) ||
963 !isdigit((unsigned char) *(b_head(&check->bi) + 2))) {
964 cut_crlf(b_head(&check->bi));
965 set_server_check_status(check, HCHK_STATUS_L7RSP, b_head(&check->bi));
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200966 goto out_wakeup;
967 }
968
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200969 check->code = str2uic(b_head(&check->bi));
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200970
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200971 desc = ltrim(b_head(&check->bi) + 3, ' ');
Krzysztof Piotr Oledzkif7089f52009-10-10 21:06:49 +0200972 cut_crlf(desc);
973
Willy Tarreauc7dd71a2007-11-30 08:33:21 +0100974 /* Check for SMTP code 2xx (should be 250) */
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200975 if (*b_head(&check->bi) == '2')
Simon Horman4a741432013-02-23 15:35:38 +0900976 set_server_check_status(check, HCHK_STATUS_L7OKD, desc);
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200977 else
Simon Horman4a741432013-02-23 15:35:38 +0900978 set_server_check_status(check, HCHK_STATUS_L7STS, desc);
Willy Tarreau1620ec32011-08-06 17:05:02 +0200979 break;
980
Simon Hormana2b9dad2013-02-12 10:45:54 +0900981 case PR_O2_LB_AGENT_CHK: {
Willy Tarreau81f5d942013-12-09 20:51:51 +0100982 int status = HCHK_STATUS_CHECKED;
983 const char *hs = NULL; /* health status */
984 const char *as = NULL; /* admin status */
985 const char *ps = NULL; /* performance status */
Nenad Merdanovic174dd372016-04-24 23:10:06 +0200986 const char *cs = NULL; /* maxconn */
Willy Tarreau81f5d942013-12-09 20:51:51 +0100987 const char *err = NULL; /* first error to report */
988 const char *wrn = NULL; /* first warning to report */
989 char *cmd, *p;
Simon Hormana2b9dad2013-02-12 10:45:54 +0900990
Willy Tarreau81f5d942013-12-09 20:51:51 +0100991 /* We're getting an agent check response. The agent could
992 * have been disabled in the mean time with a long check
993 * still pending. It is important that we ignore the whole
994 * response.
995 */
996 if (!(check->server->agent.state & CHK_ST_ENABLED))
997 break;
998
999 /* The agent supports strings made of a single line ended by the
1000 * first CR ('\r') or LF ('\n'). This line is composed of words
1001 * delimited by spaces (' '), tabs ('\t'), or commas (','). The
1002 * line may optionally contained a description of a state change
1003 * after a sharp ('#'), which is only considered if a health state
1004 * is announced.
1005 *
1006 * Words may be composed of :
1007 * - a numeric weight suffixed by the percent character ('%').
1008 * - a health status among "up", "down", "stopped", and "fail".
1009 * - an admin status among "ready", "drain", "maint".
1010 *
1011 * These words may appear in any order. If multiple words of the
1012 * same category appear, the last one wins.
1013 */
1014
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001015 p = b_head(&check->bi);
Willy Tarreau9809b782013-12-11 21:40:11 +01001016 while (*p && *p != '\n' && *p != '\r')
1017 p++;
1018
1019 if (!*p) {
1020 if (!done)
1021 goto wait_more_data;
Simon Hormana2b9dad2013-02-12 10:45:54 +09001022
Willy Tarreau9809b782013-12-11 21:40:11 +01001023 /* at least inform the admin that the agent is mis-behaving */
1024 set_server_check_status(check, check->status, "Ignoring incomplete line from agent");
1025 break;
1026 }
Willy Tarreau81f5d942013-12-09 20:51:51 +01001027
Willy Tarreau9809b782013-12-11 21:40:11 +01001028 *p = 0;
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001029 cmd = b_head(&check->bi);
Simon Hormana2b9dad2013-02-12 10:45:54 +09001030
Willy Tarreau81f5d942013-12-09 20:51:51 +01001031 while (*cmd) {
1032 /* look for next word */
1033 if (*cmd == ' ' || *cmd == '\t' || *cmd == ',') {
1034 cmd++;
1035 continue;
1036 }
Simon Horman671b6f02013-11-25 10:46:39 +09001037
Willy Tarreau81f5d942013-12-09 20:51:51 +01001038 if (*cmd == '#') {
1039 /* this is the beginning of a health status description,
1040 * skip the sharp and blanks.
1041 */
1042 cmd++;
1043 while (*cmd == '\t' || *cmd == ' ')
1044 cmd++;
Simon Horman671b6f02013-11-25 10:46:39 +09001045 break;
Simon Hormana2b9dad2013-02-12 10:45:54 +09001046 }
Willy Tarreau81f5d942013-12-09 20:51:51 +01001047
1048 /* find the end of the word so that we have a null-terminated
1049 * word between <cmd> and <p>.
1050 */
1051 p = cmd + 1;
1052 while (*p && *p != '\t' && *p != ' ' && *p != '\n' && *p != ',')
1053 p++;
1054 if (*p)
1055 *p++ = 0;
1056
1057 /* first, health statuses */
1058 if (strcasecmp(cmd, "up") == 0) {
1059 check->health = check->rise + check->fall - 1;
Simon Hormana2b9dad2013-02-12 10:45:54 +09001060 status = HCHK_STATUS_L7OKD;
Willy Tarreau81f5d942013-12-09 20:51:51 +01001061 hs = cmd;
1062 }
1063 else if (strcasecmp(cmd, "down") == 0) {
1064 check->health = 0;
1065 status = HCHK_STATUS_L7STS;
1066 hs = cmd;
Simon Hormana2b9dad2013-02-12 10:45:54 +09001067 }
Willy Tarreau81f5d942013-12-09 20:51:51 +01001068 else if (strcasecmp(cmd, "stopped") == 0) {
1069 check->health = 0;
1070 status = HCHK_STATUS_L7STS;
1071 hs = cmd;
1072 }
1073 else if (strcasecmp(cmd, "fail") == 0) {
1074 check->health = 0;
1075 status = HCHK_STATUS_L7STS;
1076 hs = cmd;
1077 }
1078 /* admin statuses */
1079 else if (strcasecmp(cmd, "ready") == 0) {
1080 as = cmd;
1081 }
1082 else if (strcasecmp(cmd, "drain") == 0) {
1083 as = cmd;
1084 }
1085 else if (strcasecmp(cmd, "maint") == 0) {
1086 as = cmd;
1087 }
Nenad Merdanovic174dd372016-04-24 23:10:06 +02001088 /* try to parse a weight here and keep the last one */
Willy Tarreau81f5d942013-12-09 20:51:51 +01001089 else if (isdigit((unsigned char)*cmd) && strchr(cmd, '%') != NULL) {
1090 ps = cmd;
1091 }
Nenad Merdanovic174dd372016-04-24 23:10:06 +02001092 /* try to parse a maxconn here */
1093 else if (strncasecmp(cmd, "maxconn:", strlen("maxconn:")) == 0) {
1094 cs = cmd;
1095 }
Willy Tarreau81f5d942013-12-09 20:51:51 +01001096 else {
1097 /* keep a copy of the first error */
1098 if (!err)
1099 err = cmd;
1100 }
1101 /* skip to next word */
1102 cmd = p;
1103 }
1104 /* here, cmd points either to \0 or to the beginning of a
1105 * description. Skip possible leading spaces.
1106 */
1107 while (*cmd == ' ' || *cmd == '\n')
1108 cmd++;
1109
1110 /* First, update the admin status so that we avoid sending other
1111 * possibly useless warnings and can also update the health if
1112 * present after going back up.
1113 */
1114 if (as) {
1115 if (strcasecmp(as, "drain") == 0)
1116 srv_adm_set_drain(check->server);
1117 else if (strcasecmp(as, "maint") == 0)
1118 srv_adm_set_maint(check->server);
1119 else
1120 srv_adm_set_ready(check->server);
Simon Hormana2b9dad2013-02-12 10:45:54 +09001121 }
1122
Willy Tarreau81f5d942013-12-09 20:51:51 +01001123 /* now change weights */
1124 if (ps) {
1125 const char *msg;
1126
1127 msg = server_parse_weight_change_request(s, ps);
1128 if (!wrn || !*wrn)
1129 wrn = msg;
1130 }
1131
Nenad Merdanovic174dd372016-04-24 23:10:06 +02001132 if (cs) {
1133 const char *msg;
1134
1135 cs += strlen("maxconn:");
1136
1137 msg = server_parse_maxconn_change_request(s, cs);
1138 if (!wrn || !*wrn)
1139 wrn = msg;
1140 }
1141
Willy Tarreau81f5d942013-12-09 20:51:51 +01001142 /* and finally health status */
1143 if (hs) {
1144 /* We'll report some of the warnings and errors we have
1145 * here. Down reports are critical, we leave them untouched.
1146 * Lack of report, or report of 'UP' leaves the room for
1147 * ERR first, then WARN.
Simon Hormana2b9dad2013-02-12 10:45:54 +09001148 */
Willy Tarreau81f5d942013-12-09 20:51:51 +01001149 const char *msg = cmd;
Willy Tarreau83061a82018-07-13 11:56:34 +02001150 struct buffer *t;
Willy Tarreau81f5d942013-12-09 20:51:51 +01001151
1152 if (!*msg || status == HCHK_STATUS_L7OKD) {
1153 if (err && *err)
1154 msg = err;
1155 else if (wrn && *wrn)
1156 msg = wrn;
Simon Hormana2b9dad2013-02-12 10:45:54 +09001157 }
Willy Tarreau81f5d942013-12-09 20:51:51 +01001158
1159 t = get_trash_chunk();
1160 chunk_printf(t, "via agent : %s%s%s%s",
1161 hs, *msg ? " (" : "",
1162 msg, *msg ? ")" : "");
1163
Willy Tarreau843b7cb2018-07-13 10:54:26 +02001164 set_server_check_status(check, status, t->area);
Simon Hormana2b9dad2013-02-12 10:45:54 +09001165 }
Willy Tarreau81f5d942013-12-09 20:51:51 +01001166 else if (err && *err) {
1167 /* No status change but we'd like to report something odd.
1168 * Just report the current state and copy the message.
1169 */
1170 chunk_printf(&trash, "agent reports an error : %s", err);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02001171 set_server_check_status(check, status/*check->status*/,
1172 trash.area);
Simon Hormana2b9dad2013-02-12 10:45:54 +09001173
Willy Tarreau81f5d942013-12-09 20:51:51 +01001174 }
1175 else if (wrn && *wrn) {
1176 /* No status change but we'd like to report something odd.
1177 * Just report the current state and copy the message.
1178 */
1179 chunk_printf(&trash, "agent warns : %s", wrn);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02001180 set_server_check_status(check, status/*check->status*/,
1181 trash.area);
Willy Tarreau81f5d942013-12-09 20:51:51 +01001182 }
1183 else
1184 set_server_check_status(check, status, NULL);
Simon Hormana2b9dad2013-02-12 10:45:54 +09001185 break;
1186 }
1187
Willy Tarreau1620ec32011-08-06 17:05:02 +02001188 case PR_O2_PGSQL_CHK:
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001189 if (!done && b_data(&check->bi) < 9)
Rauf Kuliyev38b41562011-01-04 15:14:13 +01001190 goto wait_more_data;
1191
Willy Tarreau5488a622019-08-06 16:26:31 +02001192 /* do not reset when closing, servers don't like this */
1193 if (conn_ctrl_ready(cs->conn))
1194 fdtab[cs->conn->handle.fd].linger_risk = 0;
1195
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001196 if (b_head(&check->bi)[0] == 'R') {
Simon Horman4a741432013-02-23 15:35:38 +09001197 set_server_check_status(check, HCHK_STATUS_L7OKD, "PostgreSQL server is ok");
Rauf Kuliyev38b41562011-01-04 15:14:13 +01001198 }
1199 else {
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001200 if ((b_head(&check->bi)[0] == 'E') && (b_head(&check->bi)[5]!=0) && (b_head(&check->bi)[6]!=0))
1201 desc = &b_head(&check->bi)[6];
Rauf Kuliyev38b41562011-01-04 15:14:13 +01001202 else
1203 desc = "PostgreSQL unknown error";
1204
Simon Horman4a741432013-02-23 15:35:38 +09001205 set_server_check_status(check, HCHK_STATUS_L7STS, desc);
Rauf Kuliyev38b41562011-01-04 15:14:13 +01001206 }
Willy Tarreau1620ec32011-08-06 17:05:02 +02001207 break;
1208
1209 case PR_O2_REDIS_CHK:
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001210 if (!done && b_data(&check->bi) < 7)
Hervé COMMOWICKec032d62011-08-05 16:23:48 +02001211 goto wait_more_data;
1212
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001213 if (strcmp(b_head(&check->bi), "+PONG\r\n") == 0) {
Simon Horman4a741432013-02-23 15:35:38 +09001214 set_server_check_status(check, HCHK_STATUS_L7OKD, "Redis server is ok");
Hervé COMMOWICKec032d62011-08-05 16:23:48 +02001215 }
1216 else {
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001217 set_server_check_status(check, HCHK_STATUS_L7STS, b_head(&check->bi));
Hervé COMMOWICKec032d62011-08-05 16:23:48 +02001218 }
Willy Tarreau1620ec32011-08-06 17:05:02 +02001219 break;
1220
1221 case PR_O2_MYSQL_CHK:
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001222 if (!done && b_data(&check->bi) < 5)
Willy Tarreau03938182010-03-17 21:52:07 +01001223 goto wait_more_data;
1224
Willy Tarreau5488a622019-08-06 16:26:31 +02001225 /* do not reset when closing, servers don't like this */
1226 if (conn_ctrl_ready(cs->conn))
1227 fdtab[cs->conn->handle.fd].linger_risk = 0;
1228
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001229 if (s->proxy->check_len == 0) { // old mode
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001230 if (*(b_head(&check->bi) + 4) != '\xff') {
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001231 /* We set the MySQL Version in description for information purpose
1232 * FIXME : it can be cool to use MySQL Version for other purpose,
1233 * like mark as down old MySQL server.
1234 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001235 if (b_data(&check->bi) > 51) {
1236 desc = ltrim(b_head(&check->bi) + 5, ' ');
Simon Horman4a741432013-02-23 15:35:38 +09001237 set_server_check_status(check, HCHK_STATUS_L7OKD, desc);
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001238 }
1239 else {
1240 if (!done)
1241 goto wait_more_data;
Emeric Brun9f0b4582017-10-23 14:39:51 +02001242
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001243 /* it seems we have a OK packet but without a valid length,
1244 * it must be a protocol error
1245 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001246 set_server_check_status(check, HCHK_STATUS_L7RSP, b_head(&check->bi));
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001247 }
Hervé COMMOWICK698ae002010-01-12 09:25:13 +01001248 }
1249 else {
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001250 /* An error message is attached in the Error packet */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001251 desc = ltrim(b_head(&check->bi) + 7, ' ');
Simon Horman4a741432013-02-23 15:35:38 +09001252 set_server_check_status(check, HCHK_STATUS_L7STS, desc);
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001253 }
1254 } else {
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001255 unsigned int first_packet_len = ((unsigned int) *b_head(&check->bi)) +
1256 (((unsigned int) *(b_head(&check->bi) + 1)) << 8) +
1257 (((unsigned int) *(b_head(&check->bi) + 2)) << 16);
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001258
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001259 if (b_data(&check->bi) == first_packet_len + 4) {
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001260 /* MySQL Error packet always begin with field_count = 0xff */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001261 if (*(b_head(&check->bi) + 4) != '\xff') {
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001262 /* We have only one MySQL packet and it is a Handshake Initialization packet
1263 * but we need to have a second packet to know if it is alright
1264 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001265 if (!done && b_data(&check->bi) < first_packet_len + 5)
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001266 goto wait_more_data;
1267 }
1268 else {
1269 /* We have only one packet and it is an Error packet,
1270 * an error message is attached, so we can display it
1271 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001272 desc = &b_head(&check->bi)[7];
Christopher Faulet767a84b2017-11-24 16:50:31 +01001273 //ha_warning("onlyoneERR: %s\n", desc);
Simon Horman4a741432013-02-23 15:35:38 +09001274 set_server_check_status(check, HCHK_STATUS_L7STS, desc);
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001275 }
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001276 } else if (b_data(&check->bi) > first_packet_len + 4) {
1277 unsigned int second_packet_len = ((unsigned int) *(b_head(&check->bi) + first_packet_len + 4)) +
1278 (((unsigned int) *(b_head(&check->bi) + first_packet_len + 5)) << 8) +
1279 (((unsigned int) *(b_head(&check->bi) + first_packet_len + 6)) << 16);
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001280
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001281 if (b_data(&check->bi) == first_packet_len + 4 + second_packet_len + 4 ) {
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001282 /* We have 2 packets and that's good */
1283 /* Check if the second packet is a MySQL Error packet or not */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001284 if (*(b_head(&check->bi) + first_packet_len + 8) != '\xff') {
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001285 /* No error packet */
1286 /* We set the MySQL Version in description for information purpose */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001287 desc = &b_head(&check->bi)[5];
Christopher Faulet767a84b2017-11-24 16:50:31 +01001288 //ha_warning("2packetOK: %s\n", desc);
Simon Horman4a741432013-02-23 15:35:38 +09001289 set_server_check_status(check, HCHK_STATUS_L7OKD, desc);
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001290 }
1291 else {
1292 /* An error message is attached in the Error packet
1293 * so we can display it ! :)
1294 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001295 desc = &b_head(&check->bi)[first_packet_len+11];
Christopher Faulet767a84b2017-11-24 16:50:31 +01001296 //ha_warning("2packetERR: %s\n", desc);
Simon Horman4a741432013-02-23 15:35:38 +09001297 set_server_check_status(check, HCHK_STATUS_L7STS, desc);
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001298 }
1299 }
1300 }
1301 else {
Willy Tarreau03938182010-03-17 21:52:07 +01001302 if (!done)
1303 goto wait_more_data;
Emeric Brun9f0b4582017-10-23 14:39:51 +02001304
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001305 /* it seems we have a Handshake Initialization packet but without a valid length,
Hervé COMMOWICK698ae002010-01-12 09:25:13 +01001306 * it must be a protocol error
1307 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001308 desc = &b_head(&check->bi)[5];
Christopher Faulet767a84b2017-11-24 16:50:31 +01001309 //ha_warning("protoerr: %s\n", desc);
Simon Horman4a741432013-02-23 15:35:38 +09001310 set_server_check_status(check, HCHK_STATUS_L7RSP, desc);
Hervé COMMOWICK698ae002010-01-12 09:25:13 +01001311 }
1312 }
Willy Tarreau1620ec32011-08-06 17:05:02 +02001313 break;
1314
1315 case PR_O2_LDAP_CHK:
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001316 if (!done && b_data(&check->bi) < 14)
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001317 goto wait_more_data;
1318
1319 /* Check if the server speaks LDAP (ASN.1/BER)
1320 * http://en.wikipedia.org/wiki/Basic_Encoding_Rules
1321 * http://tools.ietf.org/html/rfc4511
1322 */
1323
1324 /* http://tools.ietf.org/html/rfc4511#section-4.1.1
1325 * LDAPMessage: 0x30: SEQUENCE
1326 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001327 if ((b_data(&check->bi) < 14) || (*(b_head(&check->bi)) != '\x30')) {
Simon Horman4a741432013-02-23 15:35:38 +09001328 set_server_check_status(check, HCHK_STATUS_L7RSP, "Not LDAPv3 protocol");
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001329 }
1330 else {
1331 /* size of LDAPMessage */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001332 msglen = (*(b_head(&check->bi) + 1) & 0x80) ? (*(b_head(&check->bi) + 1) & 0x7f) : 0;
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001333
1334 /* http://tools.ietf.org/html/rfc4511#section-4.2.2
1335 * messageID: 0x02 0x01 0x01: INTEGER 1
1336 * protocolOp: 0x61: bindResponse
1337 */
1338 if ((msglen > 2) ||
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001339 (memcmp(b_head(&check->bi) + 2 + msglen, "\x02\x01\x01\x61", 4) != 0)) {
Simon Horman4a741432013-02-23 15:35:38 +09001340 set_server_check_status(check, HCHK_STATUS_L7RSP, "Not LDAPv3 protocol");
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001341 goto out_wakeup;
1342 }
1343
1344 /* size of bindResponse */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001345 msglen += (*(b_head(&check->bi) + msglen + 6) & 0x80) ? (*(b_head(&check->bi) + msglen + 6) & 0x7f) : 0;
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001346
1347 /* http://tools.ietf.org/html/rfc4511#section-4.1.9
1348 * ldapResult: 0x0a 0x01: ENUMERATION
1349 */
1350 if ((msglen > 4) ||
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001351 (memcmp(b_head(&check->bi) + 7 + msglen, "\x0a\x01", 2) != 0)) {
Simon Horman4a741432013-02-23 15:35:38 +09001352 set_server_check_status(check, HCHK_STATUS_L7RSP, "Not LDAPv3 protocol");
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001353 goto out_wakeup;
1354 }
1355
1356 /* http://tools.ietf.org/html/rfc4511#section-4.1.9
1357 * resultCode
1358 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001359 check->code = *(b_head(&check->bi) + msglen + 9);
Simon Horman4a741432013-02-23 15:35:38 +09001360 if (check->code) {
1361 set_server_check_status(check, HCHK_STATUS_L7STS, "See RFC: http://tools.ietf.org/html/rfc4511#section-4.1.9");
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001362 } else {
Simon Horman4a741432013-02-23 15:35:38 +09001363 set_server_check_status(check, HCHK_STATUS_L7OKD, "Success");
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001364 }
1365 }
Willy Tarreau1620ec32011-08-06 17:05:02 +02001366 break;
1367
Christopher Fauletba7bc162016-11-07 21:07:38 +01001368 case PR_O2_SPOP_CHK: {
1369 unsigned int framesz;
1370 char err[HCHK_DESC_LEN];
1371
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001372 if (!done && b_data(&check->bi) < 4)
Christopher Fauletba7bc162016-11-07 21:07:38 +01001373 goto wait_more_data;
1374
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001375 memcpy(&framesz, b_head(&check->bi), 4);
Christopher Fauletba7bc162016-11-07 21:07:38 +01001376 framesz = ntohl(framesz);
1377
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001378 if (!done && b_data(&check->bi) < (4+framesz))
Christopher Fauletba7bc162016-11-07 21:07:38 +01001379 goto wait_more_data;
1380
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001381 if (!spoe_handle_healthcheck_response(b_head(&check->bi)+4, framesz, err, HCHK_DESC_LEN-1))
Christopher Fauletba7bc162016-11-07 21:07:38 +01001382 set_server_check_status(check, HCHK_STATUS_L7OKD, "SPOA server is ok");
1383 else
1384 set_server_check_status(check, HCHK_STATUS_L7STS, err);
1385 break;
1386 }
1387
Willy Tarreau1620ec32011-08-06 17:05:02 +02001388 default:
Willy Tarreau4c1a2b32019-09-05 18:43:22 +02001389 /* good connection is enough for pure TCP check */
Willy Tarreau911db9b2020-01-23 16:27:54 +01001390 if (!(conn->flags & CO_FL_WAIT_XPRT) && !check->type) {
Christopher Fauletf61f33a2020-03-27 18:55:49 +01001391 if (check->use_ssl == 1)
Willy Tarreau4c1a2b32019-09-05 18:43:22 +02001392 set_server_check_status(check, HCHK_STATUS_L6OK, NULL);
1393 else
1394 set_server_check_status(check, HCHK_STATUS_L4OK, NULL);
1395 }
Willy Tarreau1620ec32011-08-06 17:05:02 +02001396 break;
1397 } /* switch */
Willy Tarreau83749182007-04-15 20:56:27 +02001398
Willy Tarreauc7dd71a2007-11-30 08:33:21 +01001399 out_wakeup:
Willy Tarreau25e2ab52013-12-04 11:17:05 +01001400 /* collect possible new errors */
Willy Tarreau4ff3b892017-10-16 15:17:17 +02001401 if (conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR)
Willy Tarreaub5259bf2017-10-04 14:47:29 +02001402 chk_report_conn_err(check, 0, 0);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001403
Nick Chalk57b1bf72010-03-16 15:50:46 +00001404 /* Reset the check buffer... */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001405 *b_head(&check->bi) = '\0';
1406 b_reset(&check->bi);
Nick Chalk57b1bf72010-03-16 15:50:46 +00001407
Steven Davidovitz544d4812017-03-08 11:06:20 -08001408 /* Close the connection... We still attempt to nicely close if,
1409 * for instance, SSL needs to send a "close notify." Later, we perform
1410 * a hard close and reset the connection if some data are pending,
1411 * otherwise we end up with many TIME_WAITs and eat all the source port
1412 * range quickly. To avoid sending RSTs all the time, we first try to
1413 * drain pending data.
Willy Tarreaufd29cc52012-11-23 09:18:20 +01001414 */
Olivier Houchard6c7e96a2019-07-02 16:35:18 +02001415 /* Call cs_shutr() first, to add the CO_FL_SOCK_RD_SH flag on the
1416 * connection, to make sure cs_shutw() will not lead to a shutdown()
1417 * that would provoke TIME_WAITs.
1418 */
1419 cs_shutr(cs, CS_SHR_DRAIN);
Willy Tarreauecdb3fe2017-10-05 15:25:48 +02001420 cs_shutw(cs, CS_SHW_NORMAL);
Willy Tarreau2b57cb82013-06-10 19:56:38 +02001421
Willy Tarreau25e2ab52013-12-04 11:17:05 +01001422 /* OK, let's not stay here forever */
Willy Tarreau6aaa1b82013-12-11 17:09:34 +01001423 if (check->result == CHK_RES_FAILED)
Willy Tarreau25e2ab52013-12-04 11:17:05 +01001424 conn->flags |= CO_FL_ERROR;
1425
Willy Tarreaufdccded2008-08-29 18:19:04 +02001426 task_wakeup(t, TASK_WOKEN_IO);
Olivier Houchardaf4021e2018-08-09 13:06:55 +02001427out:
Willy Tarreau3267d362012-08-17 23:53:56 +02001428 return;
Willy Tarreau03938182010-03-17 21:52:07 +01001429
1430 wait_more_data:
Willy Tarreau4f6516d2018-12-19 13:59:17 +01001431 cs->conn->mux->subscribe(cs, SUB_RETRY_RECV, &check->wait_list);
Olivier Houchardaf4021e2018-08-09 13:06:55 +02001432 goto out;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001433}
1434
Willy Tarreaufb56aab2012-09-28 14:40:02 +02001435/*
1436 * This function is used only for server health-checks. It handles connection
1437 * status updates including errors. If necessary, it wakes the check task up.
Willy Tarreau6bdcab02017-10-04 18:41:00 +02001438 * It returns 0 on normal cases, <0 if at least one close() has happened on the
1439 * connection (eg: reconnect).
Willy Tarreaufb56aab2012-09-28 14:40:02 +02001440 */
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001441static int wake_srv_chk(struct conn_stream *cs)
Willy Tarreau20bea422012-07-06 12:00:49 +02001442{
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001443 struct connection *conn = cs->conn;
1444 struct check *check = cs->data;
Olivier Houchard0923fa42019-01-11 18:43:04 +01001445 struct email_alertq *q = container_of(check, typeof(*q), check);
Willy Tarreau6bdcab02017-10-04 18:41:00 +02001446 int ret = 0;
Willy Tarreau20bea422012-07-06 12:00:49 +02001447
Olivier Houchard0923fa42019-01-11 18:43:04 +01001448 if (check->server)
1449 HA_SPIN_LOCK(SERVER_LOCK, &check->server->lock);
1450 else
1451 HA_SPIN_LOCK(EMAIL_ALERTS_LOCK, &q->lock);
Emeric Brunf6ba17d2017-11-02 14:35:27 +01001452
Willy Tarreauc09572f2017-10-04 11:58:22 +02001453 /* we may have to make progress on the TCP checks */
Willy Tarreau6bdcab02017-10-04 18:41:00 +02001454 if (check->type == PR_O2_TCPCHK_CHK) {
1455 ret = tcpcheck_main(check);
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001456 cs = check->cs;
Willy Tarreau543abd42018-09-20 11:25:12 +02001457 conn = cs->conn;
Willy Tarreauc5940392019-09-05 17:38:40 +02001458 } else {
1459 if (!(check->wait_list.events & SUB_RETRY_SEND))
1460 __event_srv_chk_w(cs);
1461 if (!(check->wait_list.events & SUB_RETRY_RECV))
1462 __event_srv_chk_r(cs);
1463 }
Willy Tarreauc09572f2017-10-04 11:58:22 +02001464
Willy Tarreau4ff3b892017-10-16 15:17:17 +02001465 if (unlikely(conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR)) {
Willy Tarreau02b0f582013-12-03 15:42:33 +01001466 /* We may get error reports bypassing the I/O handlers, typically
1467 * the case when sending a pure TCP check which fails, then the I/O
1468 * handlers above are not called. This is completely handled by the
Willy Tarreau25e2ab52013-12-04 11:17:05 +01001469 * main processing task so let's simply wake it up. If we get here,
1470 * we expect errno to still be valid.
1471 */
Willy Tarreaub5259bf2017-10-04 14:47:29 +02001472 chk_report_conn_err(check, errno, 0);
Willy Tarreau2d351b62013-12-05 02:36:25 +01001473 task_wakeup(check->task, TASK_WOKEN_IO);
1474 }
Willy Tarreau911db9b2020-01-23 16:27:54 +01001475 else if (!(conn->flags & CO_FL_WAIT_XPRT) && !check->type) {
Willy Tarreau3be293f2014-02-05 18:31:24 +01001476 /* we may get here if only a connection probe was required : we
1477 * don't have any data to send nor anything expected in response,
1478 * so the completion of the connection establishment is enough.
1479 */
1480 task_wakeup(check->task, TASK_WOKEN_IO);
1481 }
Willy Tarreau2d351b62013-12-05 02:36:25 +01001482
Willy Tarreau6aaa1b82013-12-11 17:09:34 +01001483 if (check->result != CHK_RES_UNKNOWN) {
Christopher Faulet774c4862019-01-21 14:15:50 +01001484 /* Check complete or aborted. If connection not yet closed do it
1485 * now and wake the check task up to be sure the result is
1486 * handled ASAP. */
Willy Tarreaud85c4852015-03-13 00:40:28 +01001487 conn_sock_drain(conn);
Willy Tarreaua553ae92017-10-05 18:52:17 +02001488 cs_close(cs);
Willy Tarreau6bdcab02017-10-04 18:41:00 +02001489 ret = -1;
Olivier Houchardf4949572019-07-02 17:42:22 +02001490 /* We may have been scheduled to run, and the
1491 * I/O handler expects to have a cs, so remove
1492 * the tasklet
1493 */
1494 tasklet_remove_from_tasklet_list(check->wait_list.tasklet);
Christopher Faulet774c4862019-01-21 14:15:50 +01001495 task_wakeup(check->task, TASK_WOKEN_IO);
Willy Tarreau2d351b62013-12-05 02:36:25 +01001496 }
Willy Tarreau6bdcab02017-10-04 18:41:00 +02001497
Olivier Houchard0923fa42019-01-11 18:43:04 +01001498 if (check->server)
1499 HA_SPIN_UNLOCK(SERVER_LOCK, &check->server->lock);
1500 else
1501 HA_SPIN_UNLOCK(EMAIL_ALERTS_LOCK, &q->lock);
Emeric Brunf6ba17d2017-11-02 14:35:27 +01001502
Willy Tarreau6bdcab02017-10-04 18:41:00 +02001503 /* if a connection got replaced, we must absolutely prevent the connection
1504 * handler from touching its fd, and perform the FD polling updates ourselves
1505 */
1506 if (ret < 0)
1507 conn_cond_update_polling(conn);
1508
1509 return ret;
Willy Tarreau20bea422012-07-06 12:00:49 +02001510}
1511
Willy Tarreaufb56aab2012-09-28 14:40:02 +02001512struct data_cb check_conn_cb = {
Willy Tarreaufb56aab2012-09-28 14:40:02 +02001513 .wake = wake_srv_chk,
Willy Tarreau8e0bb0a2016-11-24 16:58:12 +01001514 .name = "CHCK",
Willy Tarreaufb56aab2012-09-28 14:40:02 +02001515};
1516
Willy Tarreaubaaee002006-06-26 02:48:02 +02001517/*
Willy Tarreau2e993902011-10-31 11:53:20 +01001518 * updates the server's weight during a warmup stage. Once the final weight is
1519 * reached, the task automatically stops. Note that any server status change
1520 * must have updated s->last_change accordingly.
1521 */
Olivier Houchard9f6af332018-05-25 14:04:04 +02001522static struct task *server_warmup(struct task *t, void *context, unsigned short state)
Willy Tarreau2e993902011-10-31 11:53:20 +01001523{
Olivier Houchard9f6af332018-05-25 14:04:04 +02001524 struct server *s = context;
Willy Tarreau2e993902011-10-31 11:53:20 +01001525
1526 /* by default, plan on stopping the task */
1527 t->expire = TICK_ETERNITY;
Emeric Brun52a91d32017-08-31 14:41:55 +02001528 if ((s->next_admin & SRV_ADMF_MAINT) ||
1529 (s->next_state != SRV_ST_STARTING))
Willy Tarreau2e993902011-10-31 11:53:20 +01001530 return t;
1531
Willy Tarreau4fc49a92019-05-05 06:54:22 +02001532 HA_SPIN_LOCK(SERVER_LOCK, &s->lock);
1533
Willy Tarreau892337c2014-05-13 23:41:20 +02001534 /* recalculate the weights and update the state */
Willy Tarreau3ff577e2018-08-02 11:48:52 +02001535 server_recalc_eweight(s, 1);
Willy Tarreau2e993902011-10-31 11:53:20 +01001536
1537 /* probably that we can refill this server with a bit more connections */
Willy Tarreau4aac7db2014-05-16 11:48:10 +02001538 pendconn_grab_from_px(s);
Willy Tarreau2e993902011-10-31 11:53:20 +01001539
Willy Tarreau4fc49a92019-05-05 06:54:22 +02001540 HA_SPIN_UNLOCK(SERVER_LOCK, &s->lock);
1541
Willy Tarreau2e993902011-10-31 11:53:20 +01001542 /* get back there in 1 second or 1/20th of the slowstart interval,
1543 * whichever is greater, resulting in small 5% steps.
1544 */
Emeric Brun52a91d32017-08-31 14:41:55 +02001545 if (s->next_state == SRV_ST_STARTING)
Willy Tarreau2e993902011-10-31 11:53:20 +01001546 t->expire = tick_add(now_ms, MS_TO_TICKS(MAX(1000, s->slowstart / 20)));
1547 return t;
1548}
1549
Willy Tarreau894c6422017-10-04 15:58:52 +02001550/* returns the first NON-COMMENT tcp-check rule from list <list> or NULL if
1551 * none was found.
1552 */
1553static struct tcpcheck_rule *get_first_tcpcheck_rule(struct list *list)
1554{
1555 struct tcpcheck_rule *r;
1556
1557 list_for_each_entry(r, list, list) {
1558 if (r->action != TCPCHK_ACT_COMMENT)
1559 return r;
1560 }
1561 return NULL;
1562}
1563
Willy Tarreau2e993902011-10-31 11:53:20 +01001564/*
Simon Horman98637e52014-06-20 12:30:16 +09001565 * establish a server health-check that makes use of a connection.
Simon Hormanb00d17a2014-06-13 16:18:16 +09001566 *
1567 * It can return one of :
Willy Tarreaue7dff022015-04-03 01:14:29 +02001568 * - SF_ERR_NONE if everything's OK and tcpcheck_main() was not called
1569 * - SF_ERR_UP if if everything's OK and tcpcheck_main() was called
1570 * - SF_ERR_SRVTO if there are no more servers
1571 * - SF_ERR_SRVCL if the connection was refused by the server
1572 * - SF_ERR_PRXCOND if the connection has been limited by the proxy (maxconn)
1573 * - SF_ERR_RESOURCE if a system resource is lacking (eg: fd limits, ports, ...)
1574 * - SF_ERR_INTERNAL for any other purely internal errors
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02001575 * - SF_ERR_CHK_PORT if no port could be found to run a health check on an AF_INET* socket
Tim Düsterhus4896c442016-11-29 02:15:19 +01001576 * Additionally, in the case of SF_ERR_RESOURCE, an emergency log will be emitted.
Simon Hormanb00d17a2014-06-13 16:18:16 +09001577 * Note that we try to prevent the network stack from sending the ACK during the
1578 * connect() when a pure TCP check is used (without PROXY protocol).
1579 */
Simon Horman98637e52014-06-20 12:30:16 +09001580static int connect_conn_chk(struct task *t)
Simon Hormanb00d17a2014-06-13 16:18:16 +09001581{
1582 struct check *check = t->context;
1583 struct server *s = check->server;
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001584 struct conn_stream *cs = check->cs;
1585 struct connection *conn = cs_conn(cs);
Simon Hormanb00d17a2014-06-13 16:18:16 +09001586 struct protocol *proto;
Willy Tarreauf411cce2017-10-04 16:21:19 +02001587 struct tcpcheck_rule *tcp_rule = NULL;
Simon Hormanb00d17a2014-06-13 16:18:16 +09001588 int ret;
Olivier Houchardfdcb0072019-05-06 18:32:29 +02001589 int connflags = 0;
Simon Hormanb00d17a2014-06-13 16:18:16 +09001590
Willy Tarreau00149122017-10-04 18:05:01 +02001591 /* we cannot have a connection here */
1592 if (conn)
1593 return SF_ERR_INTERNAL;
1594
Simon Hormanb00d17a2014-06-13 16:18:16 +09001595 /* tcpcheck send/expect initialisation */
Willy Tarreauf411cce2017-10-04 16:21:19 +02001596 if (check->type == PR_O2_TCPCHK_CHK) {
Simon Hormanb00d17a2014-06-13 16:18:16 +09001597 check->current_step = NULL;
Willy Tarreauf411cce2017-10-04 16:21:19 +02001598 tcp_rule = get_first_tcpcheck_rule(check->tcpcheck_rules);
1599 }
Simon Hormanb00d17a2014-06-13 16:18:16 +09001600
1601 /* prepare the check buffer.
1602 * This should not be used if check is the secondary agent check
1603 * of a server as s->proxy->check_req will relate to the
1604 * configuration of the primary check. Similarly, tcp-check uses
1605 * its own strings.
1606 */
1607 if (check->type && check->type != PR_O2_TCPCHK_CHK && !(check->state & CHK_ST_AGENT)) {
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001608 b_putblk(&check->bo, s->proxy->check_req, s->proxy->check_len);
Simon Hormanb00d17a2014-06-13 16:18:16 +09001609
1610 /* we want to check if this host replies to HTTP or SSLv3 requests
1611 * so we'll send the request, and won't wake the checker up now.
1612 */
1613 if ((check->type) == PR_O2_SSL3_CHK) {
1614 /* SSL requires that we put Unix time in the request */
1615 int gmt_time = htonl(date.tv_sec);
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001616 memcpy(b_head(&check->bo) + 11, &gmt_time, 4);
Simon Hormanb00d17a2014-06-13 16:18:16 +09001617 }
1618 else if ((check->type) == PR_O2_HTTP_CHK) {
Cyril Bonté32602d22015-01-30 00:07:07 +01001619 /* prevent HTTP keep-alive when "http-check expect" is used */
1620 if (s->proxy->options2 & PR_O2_EXP_TYPE)
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001621 b_putist(&check->bo, ist("Connection: close\r\n"));
Christopher Faulet8acb1282020-04-09 08:44:06 +02001622
1623 /* If there is a body, add its content-length */
1624 if (s->proxy->check_body_len)
1625 chunk_appendf(&check->bo, "Content-Length: %s\r\n", ultoa(s->proxy->check_body_len));
1626
1627 /* Add configured headers */
1628 if (s->proxy->check_hdrs)
1629 b_putblk(&check->bo, s->proxy->check_hdrs, s->proxy->check_hdrs_len);
1630
1631 /* Add send-state header */
1632 if (s->proxy->options2 & PR_O2_CHK_SNDST)
1633 b_putblk(&check->bo, trash.area,
1634 httpchk_build_status_header(s, trash.area, trash.size));
1635
1636 /* end-of-header */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001637 b_putist(&check->bo, ist("\r\n"));
Christopher Faulet8acb1282020-04-09 08:44:06 +02001638
1639 /* Add the body */
1640 if (s->proxy->check_body)
1641 b_putblk(&check->bo, s->proxy->check_body, s->proxy->check_body_len);
1642
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001643 *b_tail(&check->bo) = '\0'; /* to make gdb output easier to read */
Simon Hormanb00d17a2014-06-13 16:18:16 +09001644 }
1645 }
1646
James Brown55f9ff12015-10-21 18:19:05 -07001647 if ((check->type & PR_O2_LB_AGENT_CHK) && check->send_string_len) {
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001648 b_putblk(&check->bo, check->send_string, check->send_string_len);
James Brown55f9ff12015-10-21 18:19:05 -07001649 }
1650
Willy Tarreauf411cce2017-10-04 16:21:19 +02001651 /* for tcp-checks, the initial connection setup is handled separately as
1652 * it may be sent to a specific port and not to the server's.
1653 */
1654 if (tcp_rule && tcp_rule->action == TCPCHK_ACT_CONNECT) {
1655 tcpcheck_main(check);
1656 return SF_ERR_UP;
1657 }
1658
Simon Hormanb00d17a2014-06-13 16:18:16 +09001659 /* prepare a new connection */
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001660 cs = check->cs = cs_new(NULL);
1661 if (!check->cs)
Willy Tarreau00149122017-10-04 18:05:01 +02001662 return SF_ERR_RESOURCE;
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001663 conn = cs->conn;
Olivier Houchard26e1a8f2018-09-12 15:15:12 +02001664 /* Maybe there were an older connection we were waiting on */
Willy Tarreau4f6516d2018-12-19 13:59:17 +01001665 check->wait_list.events = 0;
Olivier Houchardff1e9f32019-09-20 17:18:35 +02001666 tasklet_set_tid(check->wait_list.tasklet, tid);
1667
Simon Hormanb00d17a2014-06-13 16:18:16 +09001668
Willy Tarreauca79f592019-07-17 19:04:47 +02001669 if (!sockaddr_alloc(&conn->dst))
1670 return SF_ERR_RESOURCE;
1671
Simon Horman41f58762015-01-30 11:22:56 +09001672 if (is_addr(&check->addr)) {
Simon Hormanb00d17a2014-06-13 16:18:16 +09001673 /* we'll connect to the check addr specified on the server */
Willy Tarreaub3c81cb2019-07-17 16:54:52 +02001674 *conn->dst = check->addr;
Simon Hormanb00d17a2014-06-13 16:18:16 +09001675 }
1676 else {
1677 /* we'll connect to the addr on the server */
Willy Tarreaub3c81cb2019-07-17 16:54:52 +02001678 *conn->dst = s->addr;
Simon Hormanb00d17a2014-06-13 16:18:16 +09001679 }
1680
Alexander Liu2a54bb72019-05-22 19:44:48 +08001681 if (s->check.via_socks4 && (s->flags & SRV_F_SOCKS4_PROXY)) {
1682 conn->send_proxy_ofs = 1;
1683 conn->flags |= CO_FL_SOCKS4;
1684 }
1685
Willy Tarreaub3c81cb2019-07-17 16:54:52 +02001686 proto = protocol_by_family(conn->dst->ss_family);
Olivier Houchard6377a002017-12-01 22:04:05 +01001687 conn->target = &s->obj_type;
1688
Willy Tarreaub3c81cb2019-07-17 16:54:52 +02001689 if ((conn->dst->ss_family == AF_INET) || (conn->dst->ss_family == AF_INET6)) {
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02001690 int i = 0;
1691
1692 i = srv_check_healthcheck_port(check);
Olivier Houchard6377a002017-12-01 22:04:05 +01001693 if (i == 0)
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02001694 return SF_ERR_CHK_PORT;
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02001695
Willy Tarreaub3c81cb2019-07-17 16:54:52 +02001696 set_host_port(conn->dst, i);
Simon Hormanb00d17a2014-06-13 16:18:16 +09001697 }
1698
Thierry FOURNIERbb2ae642015-01-14 11:31:49 +01001699 /* no client address */
Thierry FOURNIERbb2ae642015-01-14 11:31:49 +01001700
Willy Tarreaube373152018-09-06 11:45:30 +02001701 conn_prepare(conn, proto, check->xprt);
Olivier Houchardf67be932019-01-29 15:47:43 +01001702 if (conn_install_mux(conn, &mux_pt_ops, cs, s->proxy, NULL) < 0)
1703 return SF_ERR_RESOURCE;
Willy Tarreaube373152018-09-06 11:45:30 +02001704 cs_attach(cs, check, &check_conn_cb);
1705
Willy Tarreauf3d34822014-12-08 12:11:28 +01001706 /* only plain tcp-check supports quick ACK */
Olivier Houchardfdcb0072019-05-06 18:32:29 +02001707 if (check->type != 0)
1708 connflags |= CONNECT_HAS_DATA;
1709 if ((check->type == 0 || check->type == PR_O2_TCPCHK_CHK) &&
1710 (!tcp_rule || tcp_rule->action != TCPCHK_ACT_EXPECT))
1711 connflags |= CONNECT_DELACK_ALWAYS;
Simon Hormanb00d17a2014-06-13 16:18:16 +09001712
Willy Tarreaue7dff022015-04-03 01:14:29 +02001713 ret = SF_ERR_INTERNAL;
Olivier Houchardb68fda42017-08-04 18:39:01 +02001714 if (proto && proto->connect)
Olivier Houchardfdcb0072019-05-06 18:32:29 +02001715 ret = proto->connect(conn, connflags);
Willy Tarreau16257f62017-11-02 15:45:00 +01001716
Willy Tarreau16257f62017-11-02 15:45:00 +01001717
Olivier Houchard9130a962017-10-17 17:33:43 +02001718#ifdef USE_OPENSSL
Olivier Houcharda48437b2019-01-29 16:37:52 +01001719 if (ret == SF_ERR_NONE) {
1720 if (s->check.sni)
1721 ssl_sock_set_servername(conn, s->check.sni);
1722 if (s->check.alpn_str)
1723 ssl_sock_set_alpn(conn, (unsigned char *)s->check.alpn_str,
1724 s->check.alpn_len);
1725 }
Olivier Houchard9130a962017-10-17 17:33:43 +02001726#endif
Willy Tarreauf4949772017-05-06 08:45:28 +02001727 if (s->check.send_proxy && !(check->state & CHK_ST_AGENT)) {
Simon Hormanb00d17a2014-06-13 16:18:16 +09001728 conn->send_proxy_ofs = 1;
1729 conn->flags |= CO_FL_SEND_PROXY;
Olivier Houchard37d78972019-12-30 15:13:42 +01001730 }
1731 if (conn->flags & (CO_FL_SEND_PROXY | CO_FL_SOCKS4) &&
1732 conn_ctrl_ready(conn)) {
Olivier Houchardfe50bfb2019-05-27 12:09:19 +02001733 if (xprt_add_hs(conn) < 0)
1734 ret = SF_ERR_RESOURCE;
Simon Hormanb00d17a2014-06-13 16:18:16 +09001735 }
1736
1737 return ret;
1738}
1739
Simon Horman98637e52014-06-20 12:30:16 +09001740static struct list pid_list = LIST_HEAD_INIT(pid_list);
Willy Tarreaubafbe012017-11-24 17:34:44 +01001741static struct pool_head *pool_head_pid_list;
Willy Tarreau86abe442018-11-25 20:12:18 +01001742__decl_spinlock(pid_list_lock);
Simon Horman98637e52014-06-20 12:30:16 +09001743
1744void block_sigchld(void)
1745{
1746 sigset_t set;
1747 sigemptyset(&set);
1748 sigaddset(&set, SIGCHLD);
William Lallemand6e1796e2018-06-07 11:23:40 +02001749 assert(ha_sigmask(SIG_BLOCK, &set, NULL) == 0);
Simon Horman98637e52014-06-20 12:30:16 +09001750}
1751
1752void unblock_sigchld(void)
1753{
1754 sigset_t set;
1755 sigemptyset(&set);
Willy Tarreauebc92442016-06-21 17:29:46 +02001756 sigaddset(&set, SIGCHLD);
William Lallemand6e1796e2018-06-07 11:23:40 +02001757 assert(ha_sigmask(SIG_UNBLOCK, &set, NULL) == 0);
Simon Horman98637e52014-06-20 12:30:16 +09001758}
1759
Simon Horman98637e52014-06-20 12:30:16 +09001760static struct pid_list *pid_list_add(pid_t pid, struct task *t)
1761{
1762 struct pid_list *elem;
1763 struct check *check = t->context;
1764
Willy Tarreaubafbe012017-11-24 17:34:44 +01001765 elem = pool_alloc(pool_head_pid_list);
Simon Horman98637e52014-06-20 12:30:16 +09001766 if (!elem)
1767 return NULL;
1768 elem->pid = pid;
1769 elem->t = t;
1770 elem->exited = 0;
1771 check->curpid = elem;
1772 LIST_INIT(&elem->list);
Christopher Fauletcfda8472017-10-20 15:40:23 +02001773
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001774 HA_SPIN_LOCK(PID_LIST_LOCK, &pid_list_lock);
Simon Horman98637e52014-06-20 12:30:16 +09001775 LIST_ADD(&pid_list, &elem->list);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001776 HA_SPIN_UNLOCK(PID_LIST_LOCK, &pid_list_lock);
Christopher Fauletcfda8472017-10-20 15:40:23 +02001777
Simon Horman98637e52014-06-20 12:30:16 +09001778 return elem;
1779}
1780
Simon Horman98637e52014-06-20 12:30:16 +09001781static void pid_list_del(struct pid_list *elem)
1782{
1783 struct check *check;
1784
1785 if (!elem)
1786 return;
1787
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001788 HA_SPIN_LOCK(PID_LIST_LOCK, &pid_list_lock);
Simon Horman98637e52014-06-20 12:30:16 +09001789 LIST_DEL(&elem->list);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001790 HA_SPIN_UNLOCK(PID_LIST_LOCK, &pid_list_lock);
Christopher Fauletcfda8472017-10-20 15:40:23 +02001791
Simon Horman98637e52014-06-20 12:30:16 +09001792 if (!elem->exited)
1793 kill(elem->pid, SIGTERM);
1794
1795 check = elem->t->context;
1796 check->curpid = NULL;
Willy Tarreaubafbe012017-11-24 17:34:44 +01001797 pool_free(pool_head_pid_list, elem);
Simon Horman98637e52014-06-20 12:30:16 +09001798}
1799
1800/* Called from inside SIGCHLD handler, SIGCHLD is blocked */
1801static void pid_list_expire(pid_t pid, int status)
1802{
1803 struct pid_list *elem;
1804
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001805 HA_SPIN_LOCK(PID_LIST_LOCK, &pid_list_lock);
Simon Horman98637e52014-06-20 12:30:16 +09001806 list_for_each_entry(elem, &pid_list, list) {
1807 if (elem->pid == pid) {
1808 elem->t->expire = now_ms;
1809 elem->status = status;
1810 elem->exited = 1;
Cyril Bonté9dbcfab2014-08-07 01:55:39 +02001811 task_wakeup(elem->t, TASK_WOKEN_IO);
Christopher Fauletcfda8472017-10-20 15:40:23 +02001812 break;
Simon Horman98637e52014-06-20 12:30:16 +09001813 }
1814 }
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001815 HA_SPIN_UNLOCK(PID_LIST_LOCK, &pid_list_lock);
Simon Horman98637e52014-06-20 12:30:16 +09001816}
1817
Willy Tarreau48d6bf22016-06-21 16:27:34 +02001818static void sigchld_handler(struct sig_handler *sh)
Simon Horman98637e52014-06-20 12:30:16 +09001819{
1820 pid_t pid;
1821 int status;
Willy Tarreau48d6bf22016-06-21 16:27:34 +02001822
Simon Horman98637e52014-06-20 12:30:16 +09001823 while ((pid = waitpid(0, &status, WNOHANG)) > 0)
1824 pid_list_expire(pid, status);
1825}
1826
Willy Tarreau48d6bf22016-06-21 16:27:34 +02001827static int init_pid_list(void)
1828{
Willy Tarreaubafbe012017-11-24 17:34:44 +01001829 if (pool_head_pid_list != NULL)
Simon Horman98637e52014-06-20 12:30:16 +09001830 /* Nothing to do */
1831 return 0;
1832
Willy Tarreau48d6bf22016-06-21 16:27:34 +02001833 if (!signal_register_fct(SIGCHLD, sigchld_handler, SIGCHLD)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001834 ha_alert("Failed to set signal handler for external health checks: %s. Aborting.\n",
1835 strerror(errno));
Simon Horman98637e52014-06-20 12:30:16 +09001836 return 1;
1837 }
1838
Willy Tarreaubafbe012017-11-24 17:34:44 +01001839 pool_head_pid_list = create_pool("pid_list", sizeof(struct pid_list), MEM_F_SHARED);
1840 if (pool_head_pid_list == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001841 ha_alert("Failed to allocate memory pool for external health checks: %s. Aborting.\n",
1842 strerror(errno));
Simon Horman98637e52014-06-20 12:30:16 +09001843 return 1;
1844 }
1845
1846 return 0;
1847}
1848
Cyril Bontéac92a062014-12-27 22:28:38 +01001849/* helper macro to set an environment variable and jump to a specific label on failure. */
1850#define EXTCHK_SETENV(check, envidx, value, fail) { if (extchk_setenv(check, envidx, value)) goto fail; }
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001851
1852/*
Cyril Bontéac92a062014-12-27 22:28:38 +01001853 * helper function to allocate enough memory to store an environment variable.
1854 * It will also check that the environment variable is updatable, and silently
1855 * fail if not.
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001856 */
Cyril Bontéac92a062014-12-27 22:28:38 +01001857static int extchk_setenv(struct check *check, int idx, const char *value)
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001858{
1859 int len, ret;
Cyril Bontéac92a062014-12-27 22:28:38 +01001860 char *envname;
1861 int vmaxlen;
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001862
Cyril Bontéac92a062014-12-27 22:28:38 +01001863 if (idx < 0 || idx >= EXTCHK_SIZE) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001864 ha_alert("Illegal environment variable index %d. Aborting.\n", idx);
Cyril Bontéac92a062014-12-27 22:28:38 +01001865 return 1;
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001866 }
Cyril Bontéac92a062014-12-27 22:28:38 +01001867
1868 envname = extcheck_envs[idx].name;
1869 vmaxlen = extcheck_envs[idx].vmaxlen;
1870
1871 /* Check if the environment variable is already set, and silently reject
1872 * the update if this one is not updatable. */
1873 if ((vmaxlen == EXTCHK_SIZE_EVAL_INIT) && (check->envp[idx]))
1874 return 0;
1875
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001876 /* Instead of sending NOT_USED, sending an empty value is preferable */
1877 if (strcmp(value, "NOT_USED") == 0) {
1878 value = "";
1879 }
Cyril Bontéac92a062014-12-27 22:28:38 +01001880
1881 len = strlen(envname) + 1;
1882 if (vmaxlen == EXTCHK_SIZE_EVAL_INIT)
1883 len += strlen(value);
1884 else
1885 len += vmaxlen;
1886
1887 if (!check->envp[idx])
1888 check->envp[idx] = malloc(len + 1);
1889
1890 if (!check->envp[idx]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001891 ha_alert("Failed to allocate memory for the environment variable '%s'. Aborting.\n", envname);
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001892 return 1;
1893 }
Cyril Bontéac92a062014-12-27 22:28:38 +01001894 ret = snprintf(check->envp[idx], len + 1, "%s=%s", envname, value);
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001895 if (ret < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001896 ha_alert("Failed to store the environment variable '%s'. Reason : %s. Aborting.\n", envname, strerror(errno));
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001897 return 1;
1898 }
Cyril Bontéac92a062014-12-27 22:28:38 +01001899 else if (ret > len) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001900 ha_alert("Environment variable '%s' was truncated. Aborting.\n", envname);
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001901 return 1;
1902 }
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001903 return 0;
1904}
Simon Horman98637e52014-06-20 12:30:16 +09001905
1906static int prepare_external_check(struct check *check)
1907{
1908 struct server *s = check->server;
1909 struct proxy *px = s->proxy;
1910 struct listener *listener = NULL, *l;
1911 int i;
Simon Horman98637e52014-06-20 12:30:16 +09001912 const char *path = px->check_path ? px->check_path : DEF_CHECK_PATH;
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001913 char buf[256];
Simon Horman98637e52014-06-20 12:30:16 +09001914
1915 list_for_each_entry(l, &px->conf.listeners, by_fe)
1916 /* Use the first INET, INET6 or UNIX listener */
1917 if (l->addr.ss_family == AF_INET ||
1918 l->addr.ss_family == AF_INET6 ||
1919 l->addr.ss_family == AF_UNIX) {
1920 listener = l;
1921 break;
1922 }
1923
Simon Horman98637e52014-06-20 12:30:16 +09001924 check->curpid = NULL;
Cyril Bontéac92a062014-12-27 22:28:38 +01001925 check->envp = calloc((EXTCHK_SIZE + 1), sizeof(char *));
1926 if (!check->envp) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001927 ha_alert("Failed to allocate memory for environment variables. Aborting\n");
Cyril Bontéac92a062014-12-27 22:28:38 +01001928 goto err;
1929 }
Simon Horman98637e52014-06-20 12:30:16 +09001930
Cyril Bontéac92a062014-12-27 22:28:38 +01001931 check->argv = calloc(6, sizeof(char *));
1932 if (!check->argv) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001933 ha_alert("Starting [%s:%s] check: out of memory.\n", px->id, s->id);
Simon Horman98637e52014-06-20 12:30:16 +09001934 goto err;
Cyril Bontéac92a062014-12-27 22:28:38 +01001935 }
Simon Horman98637e52014-06-20 12:30:16 +09001936
1937 check->argv[0] = px->check_command;
1938
Cyril Bonté777be862014-12-02 21:21:35 +01001939 if (!listener) {
1940 check->argv[1] = strdup("NOT_USED");
1941 check->argv[2] = strdup("NOT_USED");
1942 }
1943 else if (listener->addr.ss_family == AF_INET ||
Simon Horman98637e52014-06-20 12:30:16 +09001944 listener->addr.ss_family == AF_INET6) {
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001945 addr_to_str(&listener->addr, buf, sizeof(buf));
1946 check->argv[1] = strdup(buf);
1947 port_to_str(&listener->addr, buf, sizeof(buf));
1948 check->argv[2] = strdup(buf);
Cyril Bonté777be862014-12-02 21:21:35 +01001949 }
1950 else if (listener->addr.ss_family == AF_UNIX) {
Simon Horman98637e52014-06-20 12:30:16 +09001951 const struct sockaddr_un *un;
1952
1953 un = (struct sockaddr_un *)&listener->addr;
1954 check->argv[1] = strdup(un->sun_path);
1955 check->argv[2] = strdup("NOT_USED");
Cyril Bonté777be862014-12-02 21:21:35 +01001956 }
1957 else {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001958 ha_alert("Starting [%s:%s] check: unsupported address family.\n", px->id, s->id);
Simon Horman98637e52014-06-20 12:30:16 +09001959 goto err;
1960 }
1961
Christopher Fauletaaae9a02020-04-26 09:50:31 +02001962 if (!check->argv[1] || !check->argv[2]) {
1963 ha_alert("Starting [%s:%s] check: out of memory.\n", px->id, s->id);
1964 goto err;
1965 }
1966
1967 check->argv[3] = calloc(EXTCHK_SIZE_ADDR, sizeof(*check->argv[3]));
1968 check->argv[4] = calloc(EXTCHK_SIZE_UINT, sizeof(*check->argv[4]));
1969 if (!check->argv[3] || !check->argv[4]) {
1970 ha_alert("Starting [%s:%s] check: out of memory.\n", px->id, s->id);
1971 goto err;
1972 }
Willy Tarreau04276f32017-01-06 17:41:29 +01001973
Christopher Fauletaaae9a02020-04-26 09:50:31 +02001974 addr_to_str(&s->addr, check->argv[3], EXTCHK_SIZE_ADDR);
Willy Tarreau04276f32017-01-06 17:41:29 +01001975 if (s->addr.ss_family == AF_INET || s->addr.ss_family == AF_INET6)
Christopher Fauletaaae9a02020-04-26 09:50:31 +02001976 snprintf(check->argv[4], EXTCHK_SIZE_UINT, "%u", s->svc_port);
Simon Horman98637e52014-06-20 12:30:16 +09001977
Cyril Bontéac92a062014-12-27 22:28:38 +01001978 for (i = 0; i < 5; i++) {
1979 if (!check->argv[i]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001980 ha_alert("Starting [%s:%s] check: out of memory.\n", px->id, s->id);
Simon Horman98637e52014-06-20 12:30:16 +09001981 goto err;
Cyril Bontéac92a062014-12-27 22:28:38 +01001982 }
1983 }
Simon Horman98637e52014-06-20 12:30:16 +09001984
Cyril Bontéac92a062014-12-27 22:28:38 +01001985 EXTCHK_SETENV(check, EXTCHK_PATH, path, err);
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001986 /* Add proxy environment variables */
Cyril Bontéac92a062014-12-27 22:28:38 +01001987 EXTCHK_SETENV(check, EXTCHK_HAPROXY_PROXY_NAME, px->id, err);
1988 EXTCHK_SETENV(check, EXTCHK_HAPROXY_PROXY_ID, ultoa_r(px->uuid, buf, sizeof(buf)), err);
1989 EXTCHK_SETENV(check, EXTCHK_HAPROXY_PROXY_ADDR, check->argv[1], err);
1990 EXTCHK_SETENV(check, EXTCHK_HAPROXY_PROXY_PORT, check->argv[2], err);
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001991 /* Add server environment variables */
Cyril Bontéac92a062014-12-27 22:28:38 +01001992 EXTCHK_SETENV(check, EXTCHK_HAPROXY_SERVER_NAME, s->id, err);
1993 EXTCHK_SETENV(check, EXTCHK_HAPROXY_SERVER_ID, ultoa_r(s->puid, buf, sizeof(buf)), err);
1994 EXTCHK_SETENV(check, EXTCHK_HAPROXY_SERVER_ADDR, check->argv[3], err);
1995 EXTCHK_SETENV(check, EXTCHK_HAPROXY_SERVER_PORT, check->argv[4], err);
1996 EXTCHK_SETENV(check, EXTCHK_HAPROXY_SERVER_MAXCONN, ultoa_r(s->maxconn, buf, sizeof(buf)), err);
1997 EXTCHK_SETENV(check, EXTCHK_HAPROXY_SERVER_CURCONN, ultoa_r(s->cur_sess, buf, sizeof(buf)), err);
1998
1999 /* Ensure that we don't leave any hole in check->envp */
2000 for (i = 0; i < EXTCHK_SIZE; i++)
2001 if (!check->envp[i])
2002 EXTCHK_SETENV(check, i, "", err);
Cyril Bonté9ede66b2014-12-02 21:21:36 +01002003
Cyril Bonté99c5bf52014-08-07 01:55:38 +02002004 return 1;
Simon Horman98637e52014-06-20 12:30:16 +09002005err:
2006 if (check->envp) {
Cyril Bontéac92a062014-12-27 22:28:38 +01002007 for (i = 0; i < EXTCHK_SIZE; i++)
Cyril Bonté9ede66b2014-12-02 21:21:36 +01002008 free(check->envp[i]);
Simon Horman98637e52014-06-20 12:30:16 +09002009 free(check->envp);
2010 check->envp = NULL;
2011 }
2012
2013 if (check->argv) {
2014 for (i = 1; i < 5; i++)
2015 free(check->argv[i]);
2016 free(check->argv);
2017 check->argv = NULL;
2018 }
Cyril Bonté99c5bf52014-08-07 01:55:38 +02002019 return 0;
Simon Horman98637e52014-06-20 12:30:16 +09002020}
2021
Simon Hormanb00d17a2014-06-13 16:18:16 +09002022/*
Simon Horman98637e52014-06-20 12:30:16 +09002023 * establish a server health-check that makes use of a process.
2024 *
2025 * It can return one of :
Willy Tarreaue7dff022015-04-03 01:14:29 +02002026 * - SF_ERR_NONE if everything's OK
Willy Tarreaue7dff022015-04-03 01:14:29 +02002027 * - SF_ERR_RESOURCE if a system resource is lacking (eg: fd limits, ports, ...)
Tim Düsterhus4896c442016-11-29 02:15:19 +01002028 * Additionally, in the case of SF_ERR_RESOURCE, an emergency log will be emitted.
Simon Horman98637e52014-06-20 12:30:16 +09002029 *
2030 * Blocks and then unblocks SIGCHLD
2031 */
2032static int connect_proc_chk(struct task *t)
2033{
Cyril Bontéac92a062014-12-27 22:28:38 +01002034 char buf[256];
Simon Horman98637e52014-06-20 12:30:16 +09002035 struct check *check = t->context;
2036 struct server *s = check->server;
2037 struct proxy *px = s->proxy;
2038 int status;
2039 pid_t pid;
2040
Willy Tarreaue7dff022015-04-03 01:14:29 +02002041 status = SF_ERR_RESOURCE;
Simon Horman98637e52014-06-20 12:30:16 +09002042
2043 block_sigchld();
2044
2045 pid = fork();
2046 if (pid < 0) {
Willy Tarreaud96f1122019-12-03 07:07:36 +01002047 ha_alert("Failed to fork process for external health check%s: %s. Aborting.\n",
2048 (global.tune.options & GTUNE_INSECURE_FORK) ?
2049 "" : " (likely caused by missing 'insecure-fork-wanted')",
Christopher Faulet767a84b2017-11-24 16:50:31 +01002050 strerror(errno));
Simon Horman98637e52014-06-20 12:30:16 +09002051 set_server_check_status(check, HCHK_STATUS_SOCKERR, strerror(errno));
2052 goto out;
2053 }
2054 if (pid == 0) {
2055 /* Child */
2056 extern char **environ;
Willy Tarreau9f6dc722019-03-01 11:15:10 +01002057 struct rlimit limit;
Willy Tarreaub7b24782016-06-21 15:32:29 +02002058 int fd;
2059
2060 /* close all FDs. Keep stdin/stdout/stderr in verbose mode */
2061 fd = (global.mode & (MODE_QUIET|MODE_VERBOSE)) == MODE_QUIET ? 0 : 3;
2062
Willy Tarreau2555ccf2019-02-21 22:22:06 +01002063 my_closefrom(fd);
Willy Tarreaub7b24782016-06-21 15:32:29 +02002064
Willy Tarreau9f6dc722019-03-01 11:15:10 +01002065 /* restore the initial FD limits */
2066 limit.rlim_cur = rlim_fd_cur_at_boot;
2067 limit.rlim_max = rlim_fd_max_at_boot;
2068 if (setrlimit(RLIMIT_NOFILE, &limit) == -1) {
2069 getrlimit(RLIMIT_NOFILE, &limit);
2070 ha_warning("External check: failed to restore initial FD limits (cur=%u max=%u), using cur=%u max=%u\n",
2071 rlim_fd_cur_at_boot, rlim_fd_max_at_boot,
2072 (unsigned int)limit.rlim_cur, (unsigned int)limit.rlim_max);
2073 }
2074
Simon Horman98637e52014-06-20 12:30:16 +09002075 environ = check->envp;
Christopher Fauletaaae9a02020-04-26 09:50:31 +02002076
2077 /* Update some environment variables and command args: curconn, server addr and server port */
Cyril Bontéac92a062014-12-27 22:28:38 +01002078 extchk_setenv(check, EXTCHK_HAPROXY_SERVER_CURCONN, ultoa_r(s->cur_sess, buf, sizeof(buf)));
Christopher Fauletaaae9a02020-04-26 09:50:31 +02002079
2080 addr_to_str(&s->addr, check->argv[3], EXTCHK_SIZE_ADDR);
2081 extchk_setenv(check, EXTCHK_HAPROXY_SERVER_ADDR, check->argv[3]);
2082
2083 *check->argv[4] = 0;
2084 if (s->addr.ss_family == AF_INET || s->addr.ss_family == AF_INET6)
2085 snprintf(check->argv[4], EXTCHK_SIZE_UINT, "%u", s->svc_port);
2086 extchk_setenv(check, EXTCHK_HAPROXY_SERVER_PORT, check->argv[4]);
2087
Willy Tarreau2df8cad2019-07-01 07:51:29 +02002088 haproxy_unblock_signals();
Simon Horman98637e52014-06-20 12:30:16 +09002089 execvp(px->check_command, check->argv);
Christopher Faulet767a84b2017-11-24 16:50:31 +01002090 ha_alert("Failed to exec process for external health check: %s. Aborting.\n",
2091 strerror(errno));
Simon Horman98637e52014-06-20 12:30:16 +09002092 exit(-1);
2093 }
2094
2095 /* Parent */
2096 if (check->result == CHK_RES_UNKNOWN) {
2097 if (pid_list_add(pid, t) != NULL) {
2098 t->expire = tick_add(now_ms, MS_TO_TICKS(check->inter));
2099
2100 if (px->timeout.check && px->timeout.connect) {
2101 int t_con = tick_add(now_ms, px->timeout.connect);
2102 t->expire = tick_first(t->expire, t_con);
2103 }
Willy Tarreaue7dff022015-04-03 01:14:29 +02002104 status = SF_ERR_NONE;
Simon Horman98637e52014-06-20 12:30:16 +09002105 goto out;
2106 }
2107 else {
2108 set_server_check_status(check, HCHK_STATUS_SOCKERR, strerror(errno));
2109 }
2110 kill(pid, SIGTERM); /* process creation error */
2111 }
2112 else
2113 set_server_check_status(check, HCHK_STATUS_SOCKERR, strerror(errno));
2114
2115out:
2116 unblock_sigchld();
2117 return status;
2118}
2119
2120/*
Willy Tarreau1e62e2a2017-10-04 15:07:02 +02002121 * manages a server health-check that uses an external process. Returns
Willy Tarreaubaaee002006-06-26 02:48:02 +02002122 * the time the task accepts to wait, or TIME_ETERNITY for infinity.
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002123 *
2124 * Please do NOT place any return statement in this function and only leave
2125 * via the out_unlock label.
Willy Tarreaubaaee002006-06-26 02:48:02 +02002126 */
Olivier Houchard9f6af332018-05-25 14:04:04 +02002127static struct task *process_chk_proc(struct task *t, void *context, unsigned short state)
Simon Horman98637e52014-06-20 12:30:16 +09002128{
Olivier Houchard9f6af332018-05-25 14:04:04 +02002129 struct check *check = context;
Simon Horman98637e52014-06-20 12:30:16 +09002130 struct server *s = check->server;
Simon Horman98637e52014-06-20 12:30:16 +09002131 int rv;
2132 int ret;
2133 int expired = tick_is_expired(t->expire, now_ms);
2134
Christopher Faulet2a944ee2017-11-07 10:42:54 +01002135 HA_SPIN_LOCK(SERVER_LOCK, &check->server->lock);
Simon Horman98637e52014-06-20 12:30:16 +09002136 if (!(check->state & CHK_ST_INPROGRESS)) {
2137 /* no check currently running */
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002138 if (!expired) /* woke up too early */
2139 goto out_unlock;
Simon Horman98637e52014-06-20 12:30:16 +09002140
2141 /* we don't send any health-checks when the proxy is
2142 * stopped, the server should not be checked or the check
2143 * is disabled.
2144 */
2145 if (((check->state & (CHK_ST_ENABLED | CHK_ST_PAUSED)) != CHK_ST_ENABLED) ||
2146 s->proxy->state == PR_STSTOPPED)
2147 goto reschedule;
2148
2149 /* we'll initiate a new check */
2150 set_server_check_status(check, HCHK_STATUS_START, NULL);
2151
2152 check->state |= CHK_ST_INPROGRESS;
2153
Simon Hormandbf70192015-01-30 11:22:53 +09002154 ret = connect_proc_chk(t);
Willy Tarreaud7c3fbd2017-10-04 15:19:26 +02002155 if (ret == SF_ERR_NONE) {
Willy Tarreau1e62e2a2017-10-04 15:07:02 +02002156 /* the process was forked, we allow up to min(inter,
2157 * timeout.connect) for it to report its status, but
2158 * only when timeout.check is set as it may be to short
2159 * for a full check otherwise.
Simon Horman98637e52014-06-20 12:30:16 +09002160 */
2161 t->expire = tick_add(now_ms, MS_TO_TICKS(check->inter));
2162
2163 if (s->proxy->timeout.check && s->proxy->timeout.connect) {
2164 int t_con = tick_add(now_ms, s->proxy->timeout.connect);
2165 t->expire = tick_first(t->expire, t_con);
2166 }
Christopher Faulet88ce5d12017-10-20 15:41:18 +02002167 task_set_affinity(t, tid_bit);
Simon Horman98637e52014-06-20 12:30:16 +09002168 goto reschedule;
Simon Horman98637e52014-06-20 12:30:16 +09002169 }
2170
Willy Tarreau1e62e2a2017-10-04 15:07:02 +02002171 /* here, we failed to start the check */
Simon Horman98637e52014-06-20 12:30:16 +09002172
2173 check->state &= ~CHK_ST_INPROGRESS;
2174 check_notify_failure(check);
2175
2176 /* we allow up to min(inter, timeout.connect) for a connection
2177 * to establish but only when timeout.check is set
2178 * as it may be to short for a full check otherwise
2179 */
2180 while (tick_is_expired(t->expire, now_ms)) {
2181 int t_con;
2182
2183 t_con = tick_add(t->expire, s->proxy->timeout.connect);
2184 t->expire = tick_add(t->expire, MS_TO_TICKS(check->inter));
2185
2186 if (s->proxy->timeout.check)
2187 t->expire = tick_first(t->expire, t_con);
2188 }
2189 }
2190 else {
2191 /* there was a test running.
2192 * First, let's check whether there was an uncaught error,
2193 * which can happen on connect timeout or error.
2194 */
2195 if (check->result == CHK_RES_UNKNOWN) {
2196 /* good connection is enough for pure TCP check */
2197 struct pid_list *elem = check->curpid;
2198 int status = HCHK_STATUS_UNKNOWN;
2199
2200 if (elem->exited) {
2201 status = elem->status; /* Save in case the process exits between use below */
2202 if (!WIFEXITED(status))
2203 check->code = -1;
2204 else
2205 check->code = WEXITSTATUS(status);
2206 if (!WIFEXITED(status) || WEXITSTATUS(status))
2207 status = HCHK_STATUS_PROCERR;
2208 else
2209 status = HCHK_STATUS_PROCOK;
2210 } else if (expired) {
2211 status = HCHK_STATUS_PROCTOUT;
Christopher Faulet767a84b2017-11-24 16:50:31 +01002212 ha_warning("kill %d\n", (int)elem->pid);
Simon Horman98637e52014-06-20 12:30:16 +09002213 kill(elem->pid, SIGTERM);
2214 }
2215 set_server_check_status(check, status, NULL);
2216 }
2217
2218 if (check->result == CHK_RES_FAILED) {
2219 /* a failure or timeout detected */
2220 check_notify_failure(check);
2221 }
2222 else if (check->result == CHK_RES_CONDPASS) {
2223 /* check is OK but asks for stopping mode */
2224 check_notify_stopping(check);
2225 }
2226 else if (check->result == CHK_RES_PASSED) {
2227 /* a success was detected */
2228 check_notify_success(check);
2229 }
Willy Tarreau6dd4ac82019-09-03 18:55:02 +02002230 task_set_affinity(t, 1);
Simon Horman98637e52014-06-20 12:30:16 +09002231 check->state &= ~CHK_ST_INPROGRESS;
2232
2233 pid_list_del(check->curpid);
2234
2235 rv = 0;
2236 if (global.spread_checks > 0) {
2237 rv = srv_getinter(check) * global.spread_checks / 100;
Willy Tarreau5a6d3e72020-03-08 17:53:53 +01002238 rv -= (int) (2 * rv * (ha_random32() / 4294967295.0));
Simon Horman98637e52014-06-20 12:30:16 +09002239 }
2240 t->expire = tick_add(now_ms, MS_TO_TICKS(srv_getinter(check) + rv));
2241 }
2242
2243 reschedule:
2244 while (tick_is_expired(t->expire, now_ms))
2245 t->expire = tick_add(t->expire, MS_TO_TICKS(check->inter));
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002246
2247 out_unlock:
Christopher Faulet2a944ee2017-11-07 10:42:54 +01002248 HA_SPIN_UNLOCK(SERVER_LOCK, &check->server->lock);
Simon Horman98637e52014-06-20 12:30:16 +09002249 return t;
2250}
2251
2252/*
2253 * manages a server health-check that uses a connection. Returns
2254 * the time the task accepts to wait, or TIME_ETERNITY for infinity.
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002255 *
2256 * Please do NOT place any return statement in this function and only leave
2257 * via the out_unlock label.
Simon Horman98637e52014-06-20 12:30:16 +09002258 */
Olivier Houchard9f6af332018-05-25 14:04:04 +02002259static struct task *process_chk_conn(struct task *t, void *context, unsigned short state)
Willy Tarreaubaaee002006-06-26 02:48:02 +02002260{
Olivier Houchard9f6af332018-05-25 14:04:04 +02002261 struct check *check = context;
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01002262 struct proxy *proxy = check->proxy;
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002263 struct conn_stream *cs = check->cs;
2264 struct connection *conn = cs_conn(cs);
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002265 int rv;
Willy Tarreaufb56aab2012-09-28 14:40:02 +02002266 int ret;
Willy Tarreauacbdc7a2012-11-23 14:02:10 +01002267 int expired = tick_is_expired(t->expire, now_ms);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002268
Olivier Houchard0923fa42019-01-11 18:43:04 +01002269 if (check->server)
2270 HA_SPIN_LOCK(SERVER_LOCK, &check->server->lock);
Willy Tarreau2c115e52013-12-11 19:41:16 +01002271 if (!(check->state & CHK_ST_INPROGRESS)) {
Willy Tarreau5a78f362012-11-23 12:47:05 +01002272 /* no check currently running */
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002273 if (!expired) /* woke up too early */
2274 goto out_unlock;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002275
Simon Horman671b6f02013-11-25 10:46:39 +09002276 /* we don't send any health-checks when the proxy is
2277 * stopped, the server should not be checked or the check
2278 * is disabled.
Willy Tarreaubaaee002006-06-26 02:48:02 +02002279 */
Willy Tarreau0d924cc2013-12-11 21:26:24 +01002280 if (((check->state & (CHK_ST_ENABLED | CHK_ST_PAUSED)) != CHK_ST_ENABLED) ||
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01002281 proxy->state == PR_STSTOPPED)
Willy Tarreau5a78f362012-11-23 12:47:05 +01002282 goto reschedule;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002283
2284 /* we'll initiate a new check */
Simon Horman4a741432013-02-23 15:35:38 +09002285 set_server_check_status(check, HCHK_STATUS_START, NULL);
Willy Tarreau1ae1b7b2012-09-28 15:28:30 +02002286
Willy Tarreau2c115e52013-12-11 19:41:16 +01002287 check->state |= CHK_ST_INPROGRESS;
Willy Tarreauc9fa0482018-07-10 17:43:27 +02002288 b_reset(&check->bi);
2289 b_reset(&check->bo);
Willy Tarreau1ae1b7b2012-09-28 15:28:30 +02002290
Olivier Houchardaebeff72019-11-29 16:18:51 +01002291 task_set_affinity(t, tid_bit);
Simon Hormandbf70192015-01-30 11:22:53 +09002292 ret = connect_conn_chk(t);
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002293 cs = check->cs;
2294 conn = cs_conn(cs);
Willy Tarreau00149122017-10-04 18:05:01 +02002295
Willy Tarreaufb56aab2012-09-28 14:40:02 +02002296 switch (ret) {
Willy Tarreaue7dff022015-04-03 01:14:29 +02002297 case SF_ERR_UP:
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002298 goto out_unlock;
2299
Willy Tarreaue7dff022015-04-03 01:14:29 +02002300 case SF_ERR_NONE:
Willy Tarreaufb56aab2012-09-28 14:40:02 +02002301 /* we allow up to min(inter, timeout.connect) for a connection
2302 * to establish but only when timeout.check is set
2303 * as it may be to short for a full check otherwise
2304 */
Simon Horman4a741432013-02-23 15:35:38 +09002305 t->expire = tick_add(now_ms, MS_TO_TICKS(check->inter));
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +02002306
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01002307 if (proxy->timeout.check && proxy->timeout.connect) {
2308 int t_con = tick_add(now_ms, proxy->timeout.connect);
Willy Tarreaufb56aab2012-09-28 14:40:02 +02002309 t->expire = tick_first(t->expire, t_con);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002310 }
Willy Tarreau06559ac2013-12-05 01:53:08 +01002311
Willy Tarreaucc705a62019-09-05 17:51:30 +02002312 if (check->type) {
2313 /* send the request if we have one. We avoid receiving
2314 * if not connected, unless we didn't subscribe for
2315 * sending since otherwise we won't be woken up.
2316 */
2317 __event_srv_chk_w(cs);
Willy Tarreau911db9b2020-01-23 16:27:54 +01002318 if (!(conn->flags & CO_FL_WAIT_XPRT) ||
Willy Tarreauc5940392019-09-05 17:38:40 +02002319 !(check->wait_list.events & SUB_RETRY_SEND))
2320 __event_srv_chk_r(cs);
Willy Tarreaucc705a62019-09-05 17:51:30 +02002321 }
Willy Tarreau06559ac2013-12-05 01:53:08 +01002322
Willy Tarreau5a78f362012-11-23 12:47:05 +01002323 goto reschedule;
2324
Willy Tarreaue7dff022015-04-03 01:14:29 +02002325 case SF_ERR_SRVTO: /* ETIMEDOUT */
2326 case SF_ERR_SRVCL: /* ECONNREFUSED, ENETUNREACH, ... */
Willy Tarreau00149122017-10-04 18:05:01 +02002327 if (conn)
2328 conn->flags |= CO_FL_ERROR;
Willy Tarreaub5259bf2017-10-04 14:47:29 +02002329 chk_report_conn_err(check, errno, 0);
Willy Tarreau5a78f362012-11-23 12:47:05 +01002330 break;
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02002331 /* should share same code than cases below */
2332 case SF_ERR_CHK_PORT:
2333 check->state |= CHK_ST_PORT_MISS;
Willy Tarreaue7dff022015-04-03 01:14:29 +02002334 case SF_ERR_PRXCOND:
2335 case SF_ERR_RESOURCE:
2336 case SF_ERR_INTERNAL:
Willy Tarreau00149122017-10-04 18:05:01 +02002337 if (conn)
2338 conn->flags |= CO_FL_ERROR;
2339 chk_report_conn_err(check, conn ? 0 : ENOMEM, 0);
Willy Tarreau5a78f362012-11-23 12:47:05 +01002340 break;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002341 }
2342
Willy Tarreau5a78f362012-11-23 12:47:05 +01002343 /* here, we have seen a synchronous error, no fd was allocated */
Olivier Houchardaebeff72019-11-29 16:18:51 +01002344 task_set_affinity(t, MAX_THREADS_MASK);
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002345 if (cs) {
Olivier Houchard49065542019-05-31 19:20:36 +02002346 if (check->wait_list.events)
2347 cs->conn->xprt->unsubscribe(cs->conn,
2348 cs->conn->xprt_ctx,
2349 check->wait_list.events,
2350 &check->wait_list);
2351 /* We may have been scheduled to run, and the
2352 * I/O handler expects to have a cs, so remove
2353 * the tasklet
2354 */
Willy Tarreau86eded62019-06-14 14:47:49 +02002355 tasklet_remove_from_tasklet_list(check->wait_list.tasklet);
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002356 cs_destroy(cs);
2357 cs = check->cs = NULL;
2358 conn = NULL;
Olivier Houchard390485a2017-10-24 19:03:30 +02002359 }
Willy Tarreau6b0a8502012-11-23 08:51:32 +01002360
Willy Tarreau2c115e52013-12-11 19:41:16 +01002361 check->state &= ~CHK_ST_INPROGRESS;
Willy Tarreau4eec5472014-05-20 22:32:27 +02002362 check_notify_failure(check);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002363
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +01002364 /* we allow up to min(inter, timeout.connect) for a connection
2365 * to establish but only when timeout.check is set
2366 * as it may be to short for a full check otherwise
2367 */
Willy Tarreau0c303ee2008-07-07 00:09:58 +02002368 while (tick_is_expired(t->expire, now_ms)) {
2369 int t_con;
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +01002370
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01002371 t_con = tick_add(t->expire, proxy->timeout.connect);
Simon Horman4a741432013-02-23 15:35:38 +09002372 t->expire = tick_add(t->expire, MS_TO_TICKS(check->inter));
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +01002373
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01002374 if (proxy->timeout.check)
Willy Tarreau0c303ee2008-07-07 00:09:58 +02002375 t->expire = tick_first(t->expire, t_con);
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +01002376 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002377 }
2378 else {
Willy Tarreauf1503172012-09-28 19:39:36 +02002379 /* there was a test running.
2380 * First, let's check whether there was an uncaught error,
2381 * which can happen on connect timeout or error.
2382 */
Simon Hormanccaabcd2014-06-20 12:29:47 +09002383 if (check->result == CHK_RES_UNKNOWN) {
Willy Tarreau25e2ab52013-12-04 11:17:05 +01002384 /* good connection is enough for pure TCP check */
Willy Tarreau911db9b2020-01-23 16:27:54 +01002385 if (!(conn->flags & CO_FL_WAIT_XPRT) && !check->type) {
Christopher Fauletf61f33a2020-03-27 18:55:49 +01002386 if (check->use_ssl == 1)
Simon Horman4a741432013-02-23 15:35:38 +09002387 set_server_check_status(check, HCHK_STATUS_L6OK, NULL);
Willy Tarreauf1503172012-09-28 19:39:36 +02002388 else
Simon Horman4a741432013-02-23 15:35:38 +09002389 set_server_check_status(check, HCHK_STATUS_L4OK, NULL);
Willy Tarreauacbdc7a2012-11-23 14:02:10 +01002390 }
Willy Tarreau4ff3b892017-10-16 15:17:17 +02002391 else if ((conn->flags & CO_FL_ERROR) || cs->flags & CS_FL_ERROR || expired) {
Willy Tarreaub5259bf2017-10-04 14:47:29 +02002392 chk_report_conn_err(check, 0, expired);
Willy Tarreauf1503172012-09-28 19:39:36 +02002393 }
Willy Tarreau74fa7fb2012-11-23 14:43:49 +01002394 else
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002395 goto out_unlock; /* timeout not reached, wait again */
Willy Tarreauf1503172012-09-28 19:39:36 +02002396 }
2397
Willy Tarreau74fa7fb2012-11-23 14:43:49 +01002398 /* check complete or aborted */
Willy Tarreau00149122017-10-04 18:05:01 +02002399 if (conn && conn->xprt) {
Willy Tarreau5ba04f62013-02-12 15:23:12 +01002400 /* The check was aborted and the connection was not yet closed.
2401 * This can happen upon timeout, or when an external event such
2402 * as a failed response coupled with "observe layer7" caused the
2403 * server state to be suddenly changed.
2404 */
Willy Tarreaud85c4852015-03-13 00:40:28 +01002405 conn_sock_drain(conn);
Willy Tarreaua553ae92017-10-05 18:52:17 +02002406 cs_close(cs);
Willy Tarreau5ba04f62013-02-12 15:23:12 +01002407 }
2408
Willy Tarreauac59f362017-10-08 11:10:19 +02002409 if (cs) {
Olivier Houchard49065542019-05-31 19:20:36 +02002410 if (check->wait_list.events)
2411 cs->conn->xprt->unsubscribe(cs->conn,
2412 cs->conn->xprt_ctx,
2413 check->wait_list.events,
2414 &check->wait_list);
2415 /* We may have been scheduled to run, and the
Willy Tarreau86eded62019-06-14 14:47:49 +02002416 * I/O handler expects to have a cs, so remove
2417 * the tasklet
2418 */
2419 tasklet_remove_from_tasklet_list(check->wait_list.tasklet);
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002420 cs_destroy(cs);
2421 cs = check->cs = NULL;
2422 conn = NULL;
Willy Tarreau00149122017-10-04 18:05:01 +02002423 }
2424
Olivier Houchard0923fa42019-01-11 18:43:04 +01002425 if (check->server) {
2426 if (check->result == CHK_RES_FAILED) {
2427 /* a failure or timeout detected */
2428 check_notify_failure(check);
2429 }
2430 else if (check->result == CHK_RES_CONDPASS) {
2431 /* check is OK but asks for stopping mode */
2432 check_notify_stopping(check);
2433 }
2434 else if (check->result == CHK_RES_PASSED) {
2435 /* a success was detected */
2436 check_notify_success(check);
2437 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002438 }
Christopher Faulet88ce5d12017-10-20 15:41:18 +02002439 task_set_affinity(t, MAX_THREADS_MASK);
Willy Tarreau2c115e52013-12-11 19:41:16 +01002440 check->state &= ~CHK_ST_INPROGRESS;
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002441
Olivier Houchard0923fa42019-01-11 18:43:04 +01002442 if (check->server) {
2443 rv = 0;
2444 if (global.spread_checks > 0) {
2445 rv = srv_getinter(check) * global.spread_checks / 100;
Willy Tarreau5a6d3e72020-03-08 17:53:53 +01002446 rv -= (int) (2 * rv * (ha_random32() / 4294967295.0));
Olivier Houchard0923fa42019-01-11 18:43:04 +01002447 }
2448 t->expire = tick_add(now_ms, MS_TO_TICKS(srv_getinter(check) + rv));
Willy Tarreaubaaee002006-06-26 02:48:02 +02002449 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002450 }
Willy Tarreau5a78f362012-11-23 12:47:05 +01002451
2452 reschedule:
2453 while (tick_is_expired(t->expire, now_ms))
Simon Horman4a741432013-02-23 15:35:38 +09002454 t->expire = tick_add(t->expire, MS_TO_TICKS(check->inter));
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002455 out_unlock:
Olivier Houchard0923fa42019-01-11 18:43:04 +01002456 if (check->server)
2457 HA_SPIN_UNLOCK(SERVER_LOCK, &check->server->lock);
Willy Tarreau26c25062009-03-08 09:38:41 +01002458 return t;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002459}
2460
Simon Horman98637e52014-06-20 12:30:16 +09002461/*
2462 * manages a server health-check. Returns
2463 * the time the task accepts to wait, or TIME_ETERNITY for infinity.
2464 */
Olivier Houchard9f6af332018-05-25 14:04:04 +02002465static struct task *process_chk(struct task *t, void *context, unsigned short state)
Simon Horman98637e52014-06-20 12:30:16 +09002466{
Olivier Houchard9f6af332018-05-25 14:04:04 +02002467 struct check *check = context;
Simon Horman98637e52014-06-20 12:30:16 +09002468
2469 if (check->type == PR_O2_EXT_CHK)
Olivier Houchard9f6af332018-05-25 14:04:04 +02002470 return process_chk_proc(t, context, state);
2471 return process_chk_conn(t, context, state);
Baptiste Assmanna68ca962015-04-14 01:15:08 +02002472
Simon Horman98637e52014-06-20 12:30:16 +09002473}
2474
Simon Horman5c942422013-11-25 10:46:32 +09002475static int start_check_task(struct check *check, int mininter,
2476 int nbcheck, int srvpos)
2477{
2478 struct task *t;
Willy Tarreau6dd4ac82019-09-03 18:55:02 +02002479 unsigned long thread_mask = MAX_THREADS_MASK;
2480
2481 if (check->type == PR_O2_EXT_CHK)
2482 thread_mask = 1;
2483
Simon Horman5c942422013-11-25 10:46:32 +09002484 /* task for the check */
Willy Tarreau6dd4ac82019-09-03 18:55:02 +02002485 if ((t = task_new(thread_mask)) == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002486 ha_alert("Starting [%s:%s] check: out of memory.\n",
2487 check->server->proxy->id, check->server->id);
Simon Horman5c942422013-11-25 10:46:32 +09002488 return 0;
2489 }
2490
2491 check->task = t;
2492 t->process = process_chk;
2493 t->context = check;
2494
Willy Tarreau1746eec2014-04-25 10:46:47 +02002495 if (mininter < srv_getinter(check))
2496 mininter = srv_getinter(check);
2497
2498 if (global.max_spread_checks && mininter > global.max_spread_checks)
2499 mininter = global.max_spread_checks;
2500
Simon Horman5c942422013-11-25 10:46:32 +09002501 /* check this every ms */
Willy Tarreau1746eec2014-04-25 10:46:47 +02002502 t->expire = tick_add(now_ms, MS_TO_TICKS(mininter * srvpos / nbcheck));
Simon Horman5c942422013-11-25 10:46:32 +09002503 check->start = now;
2504 task_queue(t);
2505
2506 return 1;
2507}
2508
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002509/*
2510 * Start health-check.
Willy Tarreau865c5142016-12-21 20:04:48 +01002511 * Returns 0 if OK, ERR_FATAL on error, and prints the error in this case.
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002512 */
Willy Tarreau865c5142016-12-21 20:04:48 +01002513static int start_checks()
2514{
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002515
2516 struct proxy *px;
2517 struct server *s;
2518 struct task *t;
Simon Horman4a741432013-02-23 15:35:38 +09002519 int nbcheck=0, mininter=0, srvpos=0;
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002520
Willy Tarreau2c43a1e2007-10-14 23:05:39 +02002521 /* 1- count the checkers to run simultaneously.
2522 * We also determine the minimum interval among all of those which
2523 * have an interval larger than SRV_CHK_INTER_THRES. This interval
2524 * will be used to spread their start-up date. Those which have
Jamie Gloudon801a0a32012-08-25 00:18:33 -04002525 * a shorter interval will start independently and will not dictate
Willy Tarreau2c43a1e2007-10-14 23:05:39 +02002526 * too short an interval for all others.
2527 */
Olivier Houchardfbc74e82017-11-24 16:54:05 +01002528 for (px = proxies_list; px; px = px->next) {
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002529 for (s = px->srv; s; s = s->next) {
Willy Tarreaue7b73482013-11-21 11:50:50 +01002530 if (s->slowstart) {
Emeric Brunc60def82017-09-27 14:59:38 +02002531 if ((t = task_new(MAX_THREADS_MASK)) == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002532 ha_alert("Starting [%s:%s] check: out of memory.\n", px->id, s->id);
Willy Tarreau865c5142016-12-21 20:04:48 +01002533 return ERR_ALERT | ERR_FATAL;
Willy Tarreaue7b73482013-11-21 11:50:50 +01002534 }
2535 /* We need a warmup task that will be called when the server
2536 * state switches from down to up.
2537 */
2538 s->warmup = t;
2539 t->process = server_warmup;
2540 t->context = s;
Baptiste Assmann6076d1c2015-09-17 22:53:59 +02002541 /* server can be in this state only because of */
Emeric Brun52a91d32017-08-31 14:41:55 +02002542 if (s->next_state == SRV_ST_STARTING)
Baptiste Assmann6076d1c2015-09-17 22:53:59 +02002543 task_schedule(s->warmup, tick_add(now_ms, MS_TO_TICKS(MAX(1000, (now.tv_sec - s->last_change)) / 20)));
Willy Tarreaue7b73482013-11-21 11:50:50 +01002544 }
2545
Willy Tarreaud8514a22013-12-11 21:10:14 +01002546 if (s->check.state & CHK_ST_CONFIGURED) {
2547 nbcheck++;
2548 if ((srv_getinter(&s->check) >= SRV_CHK_INTER_THRES) &&
2549 (!mininter || mininter > srv_getinter(&s->check)))
2550 mininter = srv_getinter(&s->check);
2551 }
Willy Tarreau15f39102013-12-11 20:41:18 +01002552
Willy Tarreaud8514a22013-12-11 21:10:14 +01002553 if (s->agent.state & CHK_ST_CONFIGURED) {
2554 nbcheck++;
2555 if ((srv_getinter(&s->agent) >= SRV_CHK_INTER_THRES) &&
2556 (!mininter || mininter > srv_getinter(&s->agent)))
2557 mininter = srv_getinter(&s->agent);
2558 }
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002559 }
2560 }
2561
Simon Horman4a741432013-02-23 15:35:38 +09002562 if (!nbcheck)
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002563 return 0;
2564
2565 srand((unsigned)time(NULL));
2566
2567 /*
2568 * 2- start them as far as possible from each others. For this, we will
2569 * start them after their interval set to the min interval divided by
2570 * the number of servers, weighted by the server's position in the list.
2571 */
Olivier Houchardfbc74e82017-11-24 16:54:05 +01002572 for (px = proxies_list; px; px = px->next) {
Simon Horman98637e52014-06-20 12:30:16 +09002573 if ((px->options2 & PR_O2_CHK_ANY) == PR_O2_EXT_CHK) {
2574 if (init_pid_list()) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002575 ha_alert("Starting [%s] check: out of memory.\n", px->id);
Willy Tarreau865c5142016-12-21 20:04:48 +01002576 return ERR_ALERT | ERR_FATAL;
Simon Horman98637e52014-06-20 12:30:16 +09002577 }
2578 }
2579
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002580 for (s = px->srv; s; s = s->next) {
Simon Hormand60d6912013-11-25 10:46:36 +09002581 /* A task for the main check */
Willy Tarreauff5ae352013-12-11 20:36:34 +01002582 if (s->check.state & CHK_ST_CONFIGURED) {
Cyril Bonté99c5bf52014-08-07 01:55:38 +02002583 if (s->check.type == PR_O2_EXT_CHK) {
2584 if (!prepare_external_check(&s->check))
Willy Tarreau865c5142016-12-21 20:04:48 +01002585 return ERR_ALERT | ERR_FATAL;
Cyril Bonté99c5bf52014-08-07 01:55:38 +02002586 }
Simon Hormand60d6912013-11-25 10:46:36 +09002587 if (!start_check_task(&s->check, mininter, nbcheck, srvpos))
Willy Tarreau865c5142016-12-21 20:04:48 +01002588 return ERR_ALERT | ERR_FATAL;
Simon Hormand60d6912013-11-25 10:46:36 +09002589 srvpos++;
2590 }
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002591
Simon Hormand60d6912013-11-25 10:46:36 +09002592 /* A task for a auxiliary agent check */
Willy Tarreauff5ae352013-12-11 20:36:34 +01002593 if (s->agent.state & CHK_ST_CONFIGURED) {
Simon Hormand60d6912013-11-25 10:46:36 +09002594 if (!start_check_task(&s->agent, mininter, nbcheck, srvpos)) {
Willy Tarreau865c5142016-12-21 20:04:48 +01002595 return ERR_ALERT | ERR_FATAL;
Simon Hormand60d6912013-11-25 10:46:36 +09002596 }
2597 srvpos++;
2598 }
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002599 }
2600 }
2601 return 0;
2602}
Willy Tarreaubaaee002006-06-26 02:48:02 +02002603
2604/*
Willy Tarreau5b3a2022012-09-28 15:01:02 +02002605 * Perform content verification check on data in s->check.buffer buffer.
Willy Tarreaubd741542010-03-16 18:46:54 +01002606 * The buffer MUST be terminated by a null byte before calling this function.
2607 * Sets server status appropriately. The caller is responsible for ensuring
2608 * that the buffer contains at least 13 characters. If <done> is zero, we may
2609 * return 0 to indicate that data is required to decide of a match.
2610 */
2611static int httpchk_expect(struct server *s, int done)
2612{
Christopher Faulet1bc04c72017-10-29 20:14:08 +01002613 static THREAD_LOCAL char status_msg[] = "HTTP status check returned code <000>";
Willy Tarreaubd741542010-03-16 18:46:54 +01002614 char status_code[] = "000";
2615 char *contentptr;
2616 int crlf;
2617 int ret;
2618
2619 switch (s->proxy->options2 & PR_O2_EXP_TYPE) {
2620 case PR_O2_EXP_STS:
2621 case PR_O2_EXP_RSTS:
Willy Tarreauc9fa0482018-07-10 17:43:27 +02002622 memcpy(status_code, b_head(&s->check.bi) + 9, 3);
2623 memcpy(status_msg + strlen(status_msg) - 4, b_head(&s->check.bi) + 9, 3);
Willy Tarreaubd741542010-03-16 18:46:54 +01002624
2625 if ((s->proxy->options2 & PR_O2_EXP_TYPE) == PR_O2_EXP_STS)
2626 ret = strncmp(s->proxy->expect_str, status_code, 3) == 0;
2627 else
Thierry FOURNIER09af0d62014-06-18 11:35:54 +02002628 ret = regex_exec(s->proxy->expect_regex, status_code);
Willy Tarreaubd741542010-03-16 18:46:54 +01002629
2630 /* we necessarily have the response, so there are no partial failures */
2631 if (s->proxy->options2 & PR_O2_EXP_INV)
2632 ret = !ret;
2633
Simon Horman4a741432013-02-23 15:35:38 +09002634 set_server_check_status(&s->check, ret ? HCHK_STATUS_L7OKD : HCHK_STATUS_L7STS, status_msg);
Willy Tarreaubd741542010-03-16 18:46:54 +01002635 break;
2636
2637 case PR_O2_EXP_STR:
2638 case PR_O2_EXP_RSTR:
2639 /* very simple response parser: ignore CR and only count consecutive LFs,
2640 * stop with contentptr pointing to first char after the double CRLF or
2641 * to '\0' if crlf < 2.
2642 */
2643 crlf = 0;
Willy Tarreauc9fa0482018-07-10 17:43:27 +02002644 for (contentptr = b_head(&s->check.bi); *contentptr; contentptr++) {
Willy Tarreaubd741542010-03-16 18:46:54 +01002645 if (crlf >= 2)
2646 break;
2647 if (*contentptr == '\r')
2648 continue;
2649 else if (*contentptr == '\n')
2650 crlf++;
2651 else
2652 crlf = 0;
2653 }
2654
2655 /* Check that response contains a body... */
2656 if (crlf < 2) {
2657 if (!done)
2658 return 0;
2659
Simon Horman4a741432013-02-23 15:35:38 +09002660 set_server_check_status(&s->check, HCHK_STATUS_L7RSP,
Willy Tarreaubd741542010-03-16 18:46:54 +01002661 "HTTP content check could not find a response body");
2662 return 1;
2663 }
2664
2665 /* Check that response body is not empty... */
2666 if (*contentptr == '\0') {
Willy Tarreaua164fb52011-04-13 09:32:41 +02002667 if (!done)
2668 return 0;
2669
Simon Horman4a741432013-02-23 15:35:38 +09002670 set_server_check_status(&s->check, HCHK_STATUS_L7RSP,
Willy Tarreaubd741542010-03-16 18:46:54 +01002671 "HTTP content check found empty response body");
2672 return 1;
2673 }
2674
2675 /* Check the response content against the supplied string
2676 * or regex... */
2677 if ((s->proxy->options2 & PR_O2_EXP_TYPE) == PR_O2_EXP_STR)
2678 ret = strstr(contentptr, s->proxy->expect_str) != NULL;
2679 else
Thierry FOURNIER09af0d62014-06-18 11:35:54 +02002680 ret = regex_exec(s->proxy->expect_regex, contentptr);
Willy Tarreaubd741542010-03-16 18:46:54 +01002681
2682 /* if we don't match, we may need to wait more */
2683 if (!ret && !done)
2684 return 0;
2685
2686 if (ret) {
2687 /* content matched */
2688 if (s->proxy->options2 & PR_O2_EXP_INV)
Simon Horman4a741432013-02-23 15:35:38 +09002689 set_server_check_status(&s->check, HCHK_STATUS_L7RSP,
Willy Tarreaubd741542010-03-16 18:46:54 +01002690 "HTTP check matched unwanted content");
2691 else
Simon Horman4a741432013-02-23 15:35:38 +09002692 set_server_check_status(&s->check, HCHK_STATUS_L7OKD,
Willy Tarreaubd741542010-03-16 18:46:54 +01002693 "HTTP content check matched");
2694 }
2695 else {
2696 if (s->proxy->options2 & PR_O2_EXP_INV)
Simon Horman4a741432013-02-23 15:35:38 +09002697 set_server_check_status(&s->check, HCHK_STATUS_L7OKD,
Willy Tarreaubd741542010-03-16 18:46:54 +01002698 "HTTP check did not match unwanted content");
2699 else
Simon Horman4a741432013-02-23 15:35:38 +09002700 set_server_check_status(&s->check, HCHK_STATUS_L7RSP,
Willy Tarreaubd741542010-03-16 18:46:54 +01002701 "HTTP content check did not match");
2702 }
2703 break;
2704 }
2705 return 1;
2706}
2707
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002708/*
2709 * return the id of a step in a send/expect session
2710 */
Simon Hormane16c1b32015-01-30 11:22:57 +09002711static int tcpcheck_get_step_id(struct check *check)
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002712{
Christopher Faulet3c29aa62020-03-24 13:31:19 +01002713 struct tcpcheck_rule *cur;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002714 int i = 0;
2715
Willy Tarreau213c6782014-10-02 14:51:02 +02002716 /* not even started anything yet => step 0 = initial connect */
Baptiste Assmannf95bc8e2015-04-25 16:03:06 +02002717 if (!check->current_step)
Willy Tarreau213c6782014-10-02 14:51:02 +02002718 return 0;
2719
Christopher Faulet3c29aa62020-03-24 13:31:19 +01002720 /* no last started step => first step */
2721 if (!check->last_started_step)
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002722 return 1;
2723
Christopher Faulet3c29aa62020-03-24 13:31:19 +01002724 list_for_each_entry(cur, check->tcpcheck_rules, list) {
2725 if (cur->list.p == &check->last_started_step->list)
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002726 break;
Christopher Faulet3c29aa62020-03-24 13:31:19 +01002727 i++;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002728 }
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002729 return i;
2730}
2731
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002732/*
Christopher Faulet3c29aa62020-03-24 13:31:19 +01002733 * return the latest known comment for the current rule, the comment attached to
2734 * it or the COMMENT rule immediately preceedding the expect rule chain, if any.
2735 * returns NULL if no comment found.
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002736 */
Christopher Faulet3c29aa62020-03-24 13:31:19 +01002737static char *tcpcheck_get_step_comment(struct check *check)
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002738{
Christopher Faulet3c29aa62020-03-24 13:31:19 +01002739 struct tcpcheck_rule *cur;
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002740 char *ret = NULL;
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002741
2742 /* not even started anything yet, return latest comment found before any action */
Christopher Faulet3c29aa62020-03-24 13:31:19 +01002743 if (!check->current_step || !check->last_started_step) {
2744 cur = LIST_NEXT(check->tcpcheck_rules, typeof(cur), list);
2745 if (cur->action == TCPCHK_ACT_COMMENT)
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002746 ret = cur->comment;
Christopher Faulet3c29aa62020-03-24 13:31:19 +01002747 goto return_comment;
2748 }
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002749
Christopher Faulet3c29aa62020-03-24 13:31:19 +01002750 if (check->last_started_step->comment) {
2751 ret = check->last_started_step->comment;
2752 goto return_comment;
2753 }
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002754
Christopher Faulet3c29aa62020-03-24 13:31:19 +01002755 cur = LIST_PREV(&check->last_started_step->list, typeof(cur), list);
2756 list_for_each_entry_from_rev(cur, check->tcpcheck_rules, list) {
2757 if (cur->action == TCPCHK_ACT_COMMENT) {
2758 ret = cur->comment;
2759 break;
2760 }
2761 else if (cur->action != TCPCHK_ACT_EXPECT)
2762 break;
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002763 }
2764
2765 return_comment:
2766 return ret;
2767}
2768
Willy Tarreaube74b882017-10-04 16:22:49 +02002769/* proceed with next steps for the TCP checks <check>. Note that this is called
2770 * both from the connection's wake() callback and from the check scheduling task.
Willy Tarreau6bdcab02017-10-04 18:41:00 +02002771 * It returns 0 on normal cases, or <0 if a close() has happened on an existing
2772 * connection, presenting the risk of an fd replacement.
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002773 *
2774 * Please do NOT place any return statement in this function and only leave
Willy Tarreau2ab5c382019-07-17 18:48:07 +02002775 * via the out_end_tcpcheck label after setting retcode.
Willy Tarreaube74b882017-10-04 16:22:49 +02002776 */
Willy Tarreau6bdcab02017-10-04 18:41:00 +02002777static int tcpcheck_main(struct check *check)
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002778{
Willy Tarreauce8c42a2015-05-13 11:23:01 +02002779 struct tcpcheck_rule *next;
Baptiste Assmanncfbd1b82015-05-02 09:00:23 +02002780 int done = 0, ret = 0, step = 0;
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002781 struct conn_stream *cs = check->cs;
2782 struct connection *conn = cs_conn(cs);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002783 struct server *s = check->server;
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01002784 struct proxy *proxy = check->proxy;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002785 struct task *t = check->task;
Simon Hormane16c1b32015-01-30 11:22:57 +09002786 struct list *head = check->tcpcheck_rules;
Gaetan Rivetefab6c62020-02-07 15:37:17 +01002787 char *comment;
Willy Tarreau6bdcab02017-10-04 18:41:00 +02002788 int retcode = 0;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002789
Willy Tarreauef953952014-10-02 14:30:14 +02002790 /* here, we know that the check is complete or that it failed */
2791 if (check->result != CHK_RES_UNKNOWN)
2792 goto out_end_tcpcheck;
2793
2794 /* We have 4 possibilities here :
2795 * 1. we've not yet attempted step 1, and step 1 is a connect, so no
Willy Tarreau00149122017-10-04 18:05:01 +02002796 * connection attempt was made yet ; conn==NULL;current_step==NULL.
Willy Tarreauef953952014-10-02 14:30:14 +02002797 * 2. we've not yet attempted step 1, and step 1 is a not connect or
2798 * does not exist (no rule), so a connection attempt was made
Willy Tarreau00149122017-10-04 18:05:01 +02002799 * before coming here, conn!=NULL.
Willy Tarreauef953952014-10-02 14:30:14 +02002800 * 3. we're coming back after having started with step 1, so we may
Willy Tarreau00149122017-10-04 18:05:01 +02002801 * be waiting for a connection attempt to complete. conn!=NULL.
2802 * 4. the connection + handshake are complete. conn!=NULL.
Willy Tarreauef953952014-10-02 14:30:14 +02002803 *
2804 * #2 and #3 are quite similar, we want both the connection and the
2805 * handshake to complete before going any further. Thus we must always
2806 * wait for a connection to complete unless we're before and existing
2807 * step 1.
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002808 */
Willy Tarreau449f9522015-05-13 15:39:48 +02002809
2810 /* find first rule and skip comments */
2811 next = LIST_NEXT(head, struct tcpcheck_rule *, list);
2812 while (&next->list != head && next->action == TCPCHK_ACT_COMMENT)
2813 next = LIST_NEXT(&next->list, struct tcpcheck_rule *, list);
2814
Willy Tarreau00149122017-10-04 18:05:01 +02002815 if ((check->current_step || &next->list == head) &&
Willy Tarreau911db9b2020-01-23 16:27:54 +01002816 (conn->flags & CO_FL_WAIT_XPRT)) {
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002817 /* we allow up to min(inter, timeout.connect) for a connection
2818 * to establish but only when timeout.check is set
2819 * as it may be to short for a full check otherwise
2820 */
2821 while (tick_is_expired(t->expire, now_ms)) {
2822 int t_con;
2823
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01002824 t_con = tick_add(t->expire, proxy->timeout.connect);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002825 t->expire = tick_add(t->expire, MS_TO_TICKS(check->inter));
2826
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01002827 if (proxy->timeout.check)
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002828 t->expire = tick_first(t->expire, t_con);
2829 }
Christopher Fauletb6102852017-11-28 10:06:29 +01002830 goto out;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002831 }
2832
Willy Tarreauef953952014-10-02 14:30:14 +02002833 /* special case: option tcp-check with no rule, a connect is enough */
Willy Tarreau449f9522015-05-13 15:39:48 +02002834 if (&next->list == head) {
Willy Tarreauef953952014-10-02 14:30:14 +02002835 set_server_check_status(check, HCHK_STATUS_L4OK, NULL);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002836 goto out_end_tcpcheck;
Willy Tarreauef953952014-10-02 14:30:14 +02002837 }
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002838
Willy Tarreau213c6782014-10-02 14:51:02 +02002839 /* no step means first step initialisation */
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002840 if (check->current_step == NULL) {
Willy Tarreau213c6782014-10-02 14:51:02 +02002841 check->last_started_step = NULL;
Willy Tarreauc9fa0482018-07-10 17:43:27 +02002842 b_reset(&check->bo);
2843 b_reset(&check->bi);
Willy Tarreau449f9522015-05-13 15:39:48 +02002844 check->current_step = next;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002845 t->expire = tick_add(now_ms, MS_TO_TICKS(check->inter));
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01002846 if (proxy->timeout.check)
2847 t->expire = tick_add_ifset(now_ms, proxy->timeout.check);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002848 }
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002849
Willy Tarreauabca5b62013-12-06 14:19:25 +01002850 while (1) {
Willy Tarreau263013d2015-05-13 11:59:14 +02002851 /* We have to try to flush the output buffer before reading, at
2852 * the end, or if we're about to send a string that does not fit
2853 * in the remaining space. That explains why we break out of the
Willy Tarreau00149122017-10-04 18:05:01 +02002854 * loop after this control. If we have data, conn is valid.
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002855 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02002856 if (b_data(&check->bo) &&
Willy Tarreauce8c42a2015-05-13 11:23:01 +02002857 (&check->current_step->list == head ||
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002858 check->current_step->action != TCPCHK_ACT_SEND ||
Willy Tarreauc9fa0482018-07-10 17:43:27 +02002859 check->current_step->string_len >= b_room(&check->bo))) {
Willy Tarreaudeccd112018-06-14 18:38:55 +02002860 int ret;
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002861
Olivier Houcharded0f2072018-08-16 15:41:52 +02002862 ret = cs->conn->mux->snd_buf(cs, &check->bo, b_data(&check->bo), 0);
Willy Tarreauc9fa0482018-07-10 17:43:27 +02002863 b_realign_if_empty(&check->bo);
Willy Tarreaudeccd112018-06-14 18:38:55 +02002864
2865 if (ret <= 0) {
Willy Tarreau4ff3b892017-10-16 15:17:17 +02002866 if (conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR) {
Willy Tarreaub5259bf2017-10-04 14:47:29 +02002867 chk_report_conn_err(check, errno, 0);
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002868 goto out_end_tcpcheck;
2869 }
Willy Tarreau263013d2015-05-13 11:59:14 +02002870 break;
Willy Tarreauabca5b62013-12-06 14:19:25 +01002871 }
Olivier Houchard4501c3e2018-08-28 19:36:18 +02002872 if (b_data(&check->bo)) {
Willy Tarreau4f6516d2018-12-19 13:59:17 +01002873 cs->conn->mux->subscribe(cs, SUB_RETRY_SEND, &check->wait_list);
Olivier Houchard4501c3e2018-08-28 19:36:18 +02002874 goto out;
2875 }
Willy Tarreauabca5b62013-12-06 14:19:25 +01002876 }
2877
Willy Tarreau263013d2015-05-13 11:59:14 +02002878 if (&check->current_step->list == head)
Willy Tarreauabca5b62013-12-06 14:19:25 +01002879 break;
2880
Willy Tarreauce8c42a2015-05-13 11:23:01 +02002881 /* have 'next' point to the next rule or NULL if we're on the
2882 * last one, connect() needs this.
2883 */
Willy Tarreau5581c272015-05-13 12:24:53 +02002884 next = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002885
2886 /* bypass all comment rules */
Willy Tarreauf2c87352015-05-13 12:08:21 +02002887 while (&next->list != head && next->action == TCPCHK_ACT_COMMENT)
Willy Tarreau5581c272015-05-13 12:24:53 +02002888 next = LIST_NEXT(&next->list, struct tcpcheck_rule *, list);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002889
2890 /* NULL if we're on the last rule */
Willy Tarreauf3d34822014-12-08 12:11:28 +01002891 if (&next->list == head)
2892 next = NULL;
2893
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002894 if (check->current_step->action == TCPCHK_ACT_CONNECT) {
2895 struct protocol *proto;
2896 struct xprt_ops *xprt;
2897
Willy Tarreau00149122017-10-04 18:05:01 +02002898 /* For a connect action we'll create a new connection.
2899 * We may also have to kill a previous one. But we don't
2900 * want to leave *without* a connection if we came here
2901 * from the connection layer, hence with a connection.
2902 * Thus we'll proceed in the following order :
2903 * 1: close but not release previous connection
2904 * 2: try to get a new connection
2905 * 3: release and replace the old one on success
2906 */
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002907 if (check->cs) {
Willy Tarreaua553ae92017-10-05 18:52:17 +02002908 cs_close(check->cs);
2909 retcode = -1; /* do not reuse the fd in the caller! */
Willy Tarreau00149122017-10-04 18:05:01 +02002910 }
2911
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002912 /* mark the step as started */
2913 check->last_started_step = check->current_step;
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002914
2915 /* prepare new connection */
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002916 cs = cs_new(NULL);
2917 if (!cs) {
Willy Tarreau00149122017-10-04 18:05:01 +02002918 step = tcpcheck_get_step_id(check);
2919 chunk_printf(&trash, "TCPCHK error allocating connection at step %d", step);
Christopher Faulet3c29aa62020-03-24 13:31:19 +01002920 comment = tcpcheck_get_step_comment(check);
Willy Tarreau00149122017-10-04 18:05:01 +02002921 if (comment)
2922 chunk_appendf(&trash, " comment: '%s'", comment);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02002923 set_server_check_status(check, HCHK_STATUS_SOCKERR,
2924 trash.area);
Willy Tarreau00149122017-10-04 18:05:01 +02002925 check->current_step = NULL;
Christopher Fauletb6102852017-11-28 10:06:29 +01002926 goto out;
Willy Tarreau00149122017-10-04 18:05:01 +02002927 }
2928
Olivier Houchard49065542019-05-31 19:20:36 +02002929 if (check->cs) {
2930 if (check->wait_list.events)
2931 cs->conn->xprt->unsubscribe(cs->conn,
2932 cs->conn->xprt_ctx,
2933 check->wait_list.events,
2934 &check->wait_list);
Willy Tarreau86eded62019-06-14 14:47:49 +02002935 /* We may have been scheduled to run, and the
2936 * I/O handler expects to have a cs, so remove
2937 * the tasklet
2938 */
2939 tasklet_remove_from_tasklet_list(check->wait_list.tasklet);
Willy Tarreauac59f362017-10-08 11:10:19 +02002940 cs_destroy(check->cs);
Olivier Houchard49065542019-05-31 19:20:36 +02002941 }
Willy Tarreau00149122017-10-04 18:05:01 +02002942
Olivier Houchardff1e9f32019-09-20 17:18:35 +02002943 tasklet_set_tid(check->wait_list.tasklet, tid);
2944
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002945 check->cs = cs;
2946 conn = cs->conn;
Olivier Houchard26e1a8f2018-09-12 15:15:12 +02002947 /* Maybe there were an older connection we were waiting on */
Willy Tarreau4f6516d2018-12-19 13:59:17 +01002948 check->wait_list.events = 0;
Olivier Houchard0923fa42019-01-11 18:43:04 +01002949 conn->target = s ? &s->obj_type : &proxy->obj_type;
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002950
2951 /* no client address */
Willy Tarreauca79f592019-07-17 19:04:47 +02002952
2953 if (!sockaddr_alloc(&conn->dst)) {
2954 ret = SF_ERR_RESOURCE;
2955 goto fail_check;
2956 }
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002957
Simon Horman41f58762015-01-30 11:22:56 +09002958 if (is_addr(&check->addr)) {
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002959 /* we'll connect to the check addr specified on the server */
Willy Tarreaub3c81cb2019-07-17 16:54:52 +02002960 *conn->dst = check->addr;
Willy Tarreau640556c2014-05-09 23:38:15 +02002961 }
2962 else {
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002963 /* we'll connect to the addr on the server */
Willy Tarreaub3c81cb2019-07-17 16:54:52 +02002964 *conn->dst = s->addr;
Willy Tarreau640556c2014-05-09 23:38:15 +02002965 }
Willy Tarreaub3c81cb2019-07-17 16:54:52 +02002966 proto = protocol_by_family(conn->dst->ss_family);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002967
2968 /* port */
2969 if (check->current_step->port)
Willy Tarreaub3c81cb2019-07-17 16:54:52 +02002970 set_host_port(conn->dst, check->current_step->port);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002971 else if (check->port)
Willy Tarreaub3c81cb2019-07-17 16:54:52 +02002972 set_host_port(conn->dst, check->port);
Baptiste Assmann2f3a56b2018-03-19 12:22:41 +01002973 else if (s->svc_port)
Willy Tarreaub3c81cb2019-07-17 16:54:52 +02002974 set_host_port(conn->dst, s->svc_port);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002975
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002976 if (check->current_step->conn_opts & TCPCHK_OPT_SSL) {
Willy Tarreaua261e9b2016-12-22 20:44:00 +01002977 xprt = xprt_get(XPRT_SSL);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002978 }
2979 else {
Willy Tarreaua261e9b2016-12-22 20:44:00 +01002980 xprt = xprt_get(XPRT_RAW);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002981 }
Willy Tarreaube373152018-09-06 11:45:30 +02002982
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002983 conn_prepare(conn, proto, xprt);
Willy Tarreau2ab5c382019-07-17 18:48:07 +02002984
2985 if (conn_install_mux(conn, &mux_pt_ops, cs, proxy, NULL) < 0) {
2986 ret = SF_ERR_RESOURCE;
2987 goto fail_check;
2988 }
2989
Willy Tarreaube373152018-09-06 11:45:30 +02002990 cs_attach(cs, check, &check_conn_cb);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002991
Willy Tarreaue7dff022015-04-03 01:14:29 +02002992 ret = SF_ERR_INTERNAL;
Gaetan Rivet08fdcb32020-02-28 11:04:21 +01002993 if (proto && proto->connect) {
2994 int flags;
2995
2996 flags = CONNECT_HAS_DATA;
2997 if (next && next->action != TCPCHK_ACT_EXPECT)
2998 flags |= CONNECT_DELACK_ALWAYS;
2999 ret = proto->connect(conn, flags);
3000 }
Olivier Houchard37d78972019-12-30 15:13:42 +01003001 if (conn_ctrl_ready(conn) &&
3002 check->current_step->conn_opts & TCPCHK_OPT_SEND_PROXY) {
Baptiste Assmann69e273f2013-12-11 00:52:19 +01003003 conn->send_proxy_ofs = 1;
3004 conn->flags |= CO_FL_SEND_PROXY;
Olivier Houchardfe50bfb2019-05-27 12:09:19 +02003005 if (xprt_add_hs(conn) < 0)
3006 ret = SF_ERR_RESOURCE;
Baptiste Assmann69e273f2013-12-11 00:52:19 +01003007 }
3008
Gaetan Rivetf8ba6772020-02-07 15:37:17 +01003009 if (conn_ctrl_ready(conn) &&
3010 check->current_step->conn_opts & TCPCHK_OPT_LINGER) {
3011 /* Some servers don't like reset on close */
3012 fdtab[cs->conn->handle.fd].linger_risk = 0;
3013 }
3014
Baptiste Assmann69e273f2013-12-11 00:52:19 +01003015 /* It can return one of :
Willy Tarreaue7dff022015-04-03 01:14:29 +02003016 * - SF_ERR_NONE if everything's OK
3017 * - SF_ERR_SRVTO if there are no more servers
3018 * - SF_ERR_SRVCL if the connection was refused by the server
3019 * - SF_ERR_PRXCOND if the connection has been limited by the proxy (maxconn)
3020 * - SF_ERR_RESOURCE if a system resource is lacking (eg: fd limits, ports, ...)
3021 * - SF_ERR_INTERNAL for any other purely internal errors
Tim Düsterhus4896c442016-11-29 02:15:19 +01003022 * Additionally, in the case of SF_ERR_RESOURCE, an emergency log will be emitted.
Baptiste Assmann69e273f2013-12-11 00:52:19 +01003023 * Note that we try to prevent the network stack from sending the ACK during the
3024 * connect() when a pure TCP check is used (without PROXY protocol).
3025 */
Willy Tarreau2ab5c382019-07-17 18:48:07 +02003026 fail_check:
Baptiste Assmann69e273f2013-12-11 00:52:19 +01003027 switch (ret) {
Willy Tarreaue7dff022015-04-03 01:14:29 +02003028 case SF_ERR_NONE:
Baptiste Assmann69e273f2013-12-11 00:52:19 +01003029 /* we allow up to min(inter, timeout.connect) for a connection
3030 * to establish but only when timeout.check is set
3031 * as it may be to short for a full check otherwise
3032 */
3033 t->expire = tick_add(now_ms, MS_TO_TICKS(check->inter));
3034
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01003035 if (proxy->timeout.check && proxy->timeout.connect) {
3036 int t_con = tick_add(now_ms, proxy->timeout.connect);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01003037 t->expire = tick_first(t->expire, t_con);
3038 }
3039 break;
Willy Tarreaue7dff022015-04-03 01:14:29 +02003040 case SF_ERR_SRVTO: /* ETIMEDOUT */
3041 case SF_ERR_SRVCL: /* ECONNREFUSED, ENETUNREACH, ... */
Baptiste Assmanncfbd1b82015-05-02 09:00:23 +02003042 step = tcpcheck_get_step_id(check);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01003043 chunk_printf(&trash, "TCPCHK error establishing connection at step %d: %s",
Baptiste Assmanncfbd1b82015-05-02 09:00:23 +02003044 step, strerror(errno));
Christopher Faulet3c29aa62020-03-24 13:31:19 +01003045 comment = tcpcheck_get_step_comment(check);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02003046 if (comment)
3047 chunk_appendf(&trash, " comment: '%s'", comment);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003048 set_server_check_status(check, HCHK_STATUS_L4CON,
3049 trash.area);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01003050 goto out_end_tcpcheck;
Willy Tarreaue7dff022015-04-03 01:14:29 +02003051 case SF_ERR_PRXCOND:
3052 case SF_ERR_RESOURCE:
3053 case SF_ERR_INTERNAL:
Baptiste Assmanncfbd1b82015-05-02 09:00:23 +02003054 step = tcpcheck_get_step_id(check);
3055 chunk_printf(&trash, "TCPCHK error establishing connection at step %d", step);
Christopher Faulet3c29aa62020-03-24 13:31:19 +01003056 comment = tcpcheck_get_step_comment(check);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02003057 if (comment)
3058 chunk_appendf(&trash, " comment: '%s'", comment);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003059 set_server_check_status(check, HCHK_STATUS_SOCKERR,
3060 trash.area);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01003061 goto out_end_tcpcheck;
3062 }
3063
3064 /* allow next rule */
Willy Tarreau5581c272015-05-13 12:24:53 +02003065 check->current_step = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02003066
3067 /* bypass all comment rules */
Gaetan Rivetefab6c62020-02-07 15:37:17 +01003068 while (&check->current_step->list != head && check->current_step->action == TCPCHK_ACT_COMMENT)
Willy Tarreau5581c272015-05-13 12:24:53 +02003069 check->current_step = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01003070
Willy Tarreauf2c87352015-05-13 12:08:21 +02003071 if (&check->current_step->list == head)
3072 break;
3073
Willy Tarreau7df8ca62019-07-15 10:57:51 +02003074 /* don't do anything until the connection is established */
Willy Tarreau911db9b2020-01-23 16:27:54 +01003075 if (conn->flags & CO_FL_WAIT_XPRT)
Willy Tarreau7df8ca62019-07-15 10:57:51 +02003076 break;
3077
Baptiste Assmann69e273f2013-12-11 00:52:19 +01003078 } /* end 'connect' */
3079 else if (check->current_step->action == TCPCHK_ACT_SEND) {
3080 /* mark the step as started */
3081 check->last_started_step = check->current_step;
3082
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003083 /* reset the read buffer */
Christopher Faulet21f36952020-03-19 16:59:45 +01003084 b_reset(&check->bi);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003085
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003086 if (check->current_step->string_len >= b_size(&check->bo)) {
Willy Tarreau506a29a2018-07-18 10:07:58 +02003087 chunk_printf(&trash, "tcp-check send : string too large (%d) for buffer size (%u) at step %d",
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003088 check->current_step->string_len, (unsigned int)b_size(&check->bo),
Simon Hormane16c1b32015-01-30 11:22:57 +09003089 tcpcheck_get_step_id(check));
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003090 set_server_check_status(check, HCHK_STATUS_L7RSP,
3091 trash.area);
Willy Tarreauabca5b62013-12-06 14:19:25 +01003092 goto out_end_tcpcheck;
3093 }
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003094
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01003095 /* do not try to send if there is no space */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003096 if (check->current_step->string_len >= b_room(&check->bo))
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01003097 continue;
3098
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003099 b_putblk(&check->bo, check->current_step->string, check->current_step->string_len);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003100
Willy Tarreauabca5b62013-12-06 14:19:25 +01003101 /* go to next rule and try to send */
Willy Tarreau5581c272015-05-13 12:24:53 +02003102 check->current_step = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02003103
3104 /* bypass all comment rules */
Willy Tarreauf2c87352015-05-13 12:08:21 +02003105 while (&check->current_step->list != head &&
3106 check->current_step->action == TCPCHK_ACT_COMMENT)
Willy Tarreau5581c272015-05-13 12:24:53 +02003107 check->current_step = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Willy Tarreauf2c87352015-05-13 12:08:21 +02003108
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003109 } /* end 'send' */
Willy Tarreau98aec9f2013-12-06 16:16:41 +01003110 else if (check->current_step->action == TCPCHK_ACT_EXPECT) {
Gaetan Rivetb616add2020-02-07 15:37:17 +01003111 struct tcpcheck_expect *expect = &check->current_step->expect;
Gaetan Rivet9e47fa42020-02-26 15:59:22 +01003112 char *diag;
3113 int match;
Gaetan Rivetb616add2020-02-07 15:37:17 +01003114
Willy Tarreau6aaa1b82013-12-11 17:09:34 +01003115 if (unlikely(check->result == CHK_RES_FAILED))
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003116 goto out_end_tcpcheck;
3117
Olivier Houchard0ba6c852019-07-18 15:09:08 +02003118 /* If we already subscribed, then we tried to received
3119 * and failed, so there's no point trying again.
3120 */
3121 if (check->wait_list.events & SUB_RETRY_RECV)
3122 break;
Olivier Houchard511efea2018-08-16 15:30:32 +02003123 if (cs->conn->mux->rcv_buf(cs, &check->bi, b_size(&check->bi), 0) <= 0) {
Willy Tarreau4ff3b892017-10-16 15:17:17 +02003124 if (conn->flags & (CO_FL_ERROR | CO_FL_SOCK_RD_SH) || cs->flags & CS_FL_ERROR) {
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01003125 done = 1;
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003126 if ((conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR) && !b_data(&check->bi)) {
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01003127 /* Report network errors only if we got no other data. Otherwise
3128 * we'll let the upper layers decide whether the response is OK
3129 * or not. It is very common that an RST sent by the server is
3130 * reported as an error just after the last data chunk.
3131 */
Willy Tarreaub5259bf2017-10-04 14:47:29 +02003132 chk_report_conn_err(check, errno, 0);
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01003133 goto out_end_tcpcheck;
3134 }
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003135 }
Olivier Houchardaf4021e2018-08-09 13:06:55 +02003136 else {
Willy Tarreau4f6516d2018-12-19 13:59:17 +01003137 conn->mux->subscribe(cs, SUB_RETRY_RECV, &check->wait_list);
Willy Tarreau263013d2015-05-13 11:59:14 +02003138 break;
Olivier Houchardaf4021e2018-08-09 13:06:55 +02003139 }
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003140 }
3141
Gaetan Rivet4038b942020-02-26 16:19:40 +01003142 /* Having received new data, reset the expect chain to its head. */
Gaetan Rivetb616add2020-02-07 15:37:17 +01003143 check->current_step = expect->head;
Gaetan Rivet4038b942020-02-26 16:19:40 +01003144
Baptiste Assmann69e273f2013-12-11 00:52:19 +01003145 /* mark the step as started */
3146 check->last_started_step = check->current_step;
3147
Christopher Faulet21f36952020-03-19 16:59:45 +01003148 /* buffer full, don't wait for more data */
3149 if (b_full(&check->bi))
3150 done = 1;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003151
3152 /* Check that response body is not empty... */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003153 if (!b_data(&check->bi)) {
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003154 if (!done)
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01003155 continue;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003156
3157 /* empty response */
Baptiste Assmanncfbd1b82015-05-02 09:00:23 +02003158 step = tcpcheck_get_step_id(check);
3159 chunk_printf(&trash, "TCPCHK got an empty response at step %d", step);
Christopher Faulet3c29aa62020-03-24 13:31:19 +01003160 comment = tcpcheck_get_step_comment(check);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02003161 if (comment)
3162 chunk_appendf(&trash, " comment: '%s'", comment);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003163 set_server_check_status(check, HCHK_STATUS_L7RSP,
3164 trash.area);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003165
3166 goto out_end_tcpcheck;
3167 }
3168
Gaetan Rivet9e47fa42020-02-26 15:59:22 +01003169 next_tcpcheck_expect:
Gaetan Rivet1afd8262020-02-07 15:37:17 +01003170 /* The current expect might need more data than the previous one, check again
3171 * that the minimum amount data required to match is respected.
3172 */
Gaetan Rivetb616add2020-02-07 15:37:17 +01003173 if (!done) {
3174 if ((expect->type == TCPCHK_EXPECT_STRING || expect->type == TCPCHK_EXPECT_BINARY) &&
3175 (b_data(&check->bi) < expect->length))
3176 continue; /* try to read more */
3177 if (expect->min_recv > 0 && (b_data(&check->bi) < expect->min_recv))
3178 continue; /* try to read more */
3179 }
3180
Gaetan Rivet9e47fa42020-02-26 15:59:22 +01003181 /* Make GCC happy ; initialize match to a failure state. */
3182 match = expect->inverse;
3183
Gaetan Rivetb616add2020-02-07 15:37:17 +01003184 switch (expect->type) {
3185 case TCPCHK_EXPECT_STRING:
3186 case TCPCHK_EXPECT_BINARY:
Christopher Faulet21f36952020-03-19 16:59:45 +01003187 match = my_memmem(b_head(&check->bi), b_data(&check->bi), expect->string, expect->length) != NULL;
Gaetan Rivetb616add2020-02-07 15:37:17 +01003188 break;
3189 case TCPCHK_EXPECT_REGEX:
Christopher Faulet21f36952020-03-19 16:59:45 +01003190 match = regex_exec2(expect->regex, b_head(&check->bi), MIN(b_data(&check->bi), b_size(&check->bi)-1));
Gaetan Rivetb616add2020-02-07 15:37:17 +01003191 break;
Gaetan Rivetefab6c62020-02-07 15:37:17 +01003192
3193 case TCPCHK_EXPECT_REGEX_BINARY:
3194 chunk_reset(&trash);
3195 dump_binary(&trash, b_head(&check->bi), b_data(&check->bi));
3196 match = regex_exec2(expect->regex, b_head(&trash), MIN(b_data(&trash), b_size(&trash)-1));
3197 break;
Gaetan Rivetb616add2020-02-07 15:37:17 +01003198 case TCPCHK_EXPECT_UNDEF:
3199 /* Should never happen. */
3200 retcode = -1;
3201 goto out;
3202 }
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003203
Gaetan Rivet1afd8262020-02-07 15:37:17 +01003204 /* Wait for more data on mismatch only if no minimum is defined (-1),
3205 * otherwise the absence of match is already conclusive.
3206 */
Gaetan Rivet9e47fa42020-02-26 15:59:22 +01003207 if (!match && !done && (expect->min_recv == -1))
Willy Tarreaua970c282013-12-06 12:47:19 +01003208 continue; /* try to read more */
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003209
Gaetan Rivet9e47fa42020-02-26 15:59:22 +01003210 if (match ^ expect->inverse) {
3211 /* Result as expected, next rule. */
3212 check->current_step = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02003213
Gaetan Rivet9e47fa42020-02-26 15:59:22 +01003214 /* bypass all comment rules */
3215 while (&check->current_step->list != head &&
3216 check->current_step->action == TCPCHK_ACT_COMMENT)
3217 check->current_step = LIST_NEXT(&check->current_step->list,
3218 struct tcpcheck_rule *, list);
3219 if (&check->current_step->list == head)
3220 break;
Willy Tarreauf2c87352015-05-13 12:08:21 +02003221
Gaetan Rivet9e47fa42020-02-26 15:59:22 +01003222 if (check->current_step->action == TCPCHK_ACT_EXPECT) {
3223 expect = &check->current_step->expect;
3224 goto next_tcpcheck_expect;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003225 }
Baptiste Assmann22b09d22015-05-01 08:03:04 +02003226
Gaetan Rivet9e47fa42020-02-26 15:59:22 +01003227 continue;
3228 }
Baptiste Assmann22b09d22015-05-01 08:03:04 +02003229
Gaetan Rivet9e47fa42020-02-26 15:59:22 +01003230 /* From this point on, we matched something we did not want, this is an error state. */
Willy Tarreauf2c87352015-05-13 12:08:21 +02003231
Gaetan Rivet9e47fa42020-02-26 15:59:22 +01003232 step = tcpcheck_get_step_id(check);
3233 diag = match ? "matched unwanted content" : "did not match content";
Gaetan Rivetb616add2020-02-07 15:37:17 +01003234
Gaetan Rivet9e47fa42020-02-26 15:59:22 +01003235 switch (expect->type) {
3236 case TCPCHK_EXPECT_STRING:
3237 chunk_printf(&trash, "TCPCHK %s '%s' at step %d",
3238 diag, expect->string, step);
3239 break;
3240 case TCPCHK_EXPECT_BINARY:
3241 chunk_printf(&trash, "TCPCHK %s (binary) at step %d",
3242 diag, step);
3243 break;
3244 case TCPCHK_EXPECT_REGEX:
3245 chunk_printf(&trash, "TCPCHK %s (regex) at step %d",
3246 diag, step);
3247 break;
Gaetan Rivetefab6c62020-02-07 15:37:17 +01003248 case TCPCHK_EXPECT_REGEX_BINARY:
3249 chunk_printf(&trash, "TCPCHK %s (binary regex) at step %d",
3250 diag, step);
3251 break;
Gaetan Rivet9e47fa42020-02-26 15:59:22 +01003252 case TCPCHK_EXPECT_UNDEF:
3253 /* Should never happen. */
3254 retcode = -1;
3255 goto out;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003256 }
Gaetan Rivet9e47fa42020-02-26 15:59:22 +01003257
Christopher Faulet3c29aa62020-03-24 13:31:19 +01003258 comment = tcpcheck_get_step_comment(check);
Gaetan Rivet9e47fa42020-02-26 15:59:22 +01003259 if (comment)
3260 chunk_appendf(&trash, " comment: '%s'", comment);
3261 set_server_check_status(check, HCHK_STATUS_L7RSP,
3262 trash.area);
3263
3264 goto out_end_tcpcheck;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003265 } /* end expect */
3266 } /* end loop over double chained step list */
3267
Baptiste Assmann248f1172018-03-01 21:49:01 +01003268 /* don't do anything until the connection is established */
Willy Tarreau911db9b2020-01-23 16:27:54 +01003269 if (conn->flags & CO_FL_WAIT_XPRT) {
Baptiste Assmann248f1172018-03-01 21:49:01 +01003270 /* update expire time, should be done by process_chk */
3271 /* we allow up to min(inter, timeout.connect) for a connection
3272 * to establish but only when timeout.check is set
3273 * as it may be to short for a full check otherwise
3274 */
3275 while (tick_is_expired(t->expire, now_ms)) {
3276 int t_con;
3277
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01003278 t_con = tick_add(t->expire, proxy->timeout.connect);
Baptiste Assmann248f1172018-03-01 21:49:01 +01003279 t->expire = tick_add(t->expire, MS_TO_TICKS(check->inter));
3280
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01003281 if (proxy->timeout.check)
Baptiste Assmann248f1172018-03-01 21:49:01 +01003282 t->expire = tick_first(t->expire, t_con);
3283 }
3284 goto out;
3285 }
3286
Willy Tarreau263013d2015-05-13 11:59:14 +02003287 /* We're waiting for some I/O to complete, we've reached the end of the
3288 * rules, or both. Do what we have to do, otherwise we're done.
3289 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003290 if (&check->current_step->list == head && !b_data(&check->bo)) {
Willy Tarreau263013d2015-05-13 11:59:14 +02003291 set_server_check_status(check, HCHK_STATUS_L7OKD, "(tcp-check)");
3292 goto out_end_tcpcheck;
3293 }
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003294
Willy Tarreau53c5a042015-05-13 11:38:17 +02003295 if (&check->current_step->list != head &&
Olivier Houchard53216e72018-10-10 15:46:36 +02003296 check->current_step->action == TCPCHK_ACT_EXPECT)
Olivier Houchardaf4021e2018-08-09 13:06:55 +02003297 __event_srv_chk_r(cs);
Christopher Fauletb6102852017-11-28 10:06:29 +01003298 goto out;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003299
3300 out_end_tcpcheck:
3301 /* collect possible new errors */
Willy Tarreauef91c932019-07-23 14:37:47 +02003302 if ((conn && conn->flags & CO_FL_ERROR) || (cs && cs->flags & CS_FL_ERROR))
Willy Tarreaub5259bf2017-10-04 14:47:29 +02003303 chk_report_conn_err(check, 0, 0);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003304
Baptiste Assmann69e273f2013-12-11 00:52:19 +01003305 /* cleanup before leaving */
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003306 check->current_step = NULL;
3307
Willy Tarreau6aaa1b82013-12-11 17:09:34 +01003308 if (check->result == CHK_RES_FAILED)
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003309 conn->flags |= CO_FL_ERROR;
3310
Christopher Fauletb6102852017-11-28 10:06:29 +01003311 out:
Willy Tarreau6bdcab02017-10-04 18:41:00 +02003312 return retcode;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003313}
3314
Christopher Faulet31c30fd2020-03-26 21:10:03 +01003315static const char *init_check(struct check *check, int type)
Simon Hormanb1900d52015-01-30 11:22:54 +09003316{
3317 check->type = type;
3318
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003319 b_reset(&check->bi); check->bi.size = global.tune.chksize;
3320 b_reset(&check->bo); check->bo.size = global.tune.chksize;
Simon Hormanb1900d52015-01-30 11:22:54 +09003321
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003322 check->bi.area = calloc(check->bi.size, sizeof(char));
3323 check->bo.area = calloc(check->bo.size, sizeof(char));
3324
3325 if (!check->bi.area || !check->bo.area)
Simon Hormanb1900d52015-01-30 11:22:54 +09003326 return "out of memory while allocating check buffer";
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003327
Willy Tarreau3c39a7d2019-06-14 14:42:29 +02003328 check->wait_list.tasklet = tasklet_new();
3329 if (!check->wait_list.tasklet)
Ilya Shipitsind4259502020-04-08 01:07:56 +05003330 return "out of memory while allocating check tasklet";
Willy Tarreau4f6516d2018-12-19 13:59:17 +01003331 check->wait_list.events = 0;
Willy Tarreau3c39a7d2019-06-14 14:42:29 +02003332 check->wait_list.tasklet->process = event_srv_chk_io;
3333 check->wait_list.tasklet->context = check;
Simon Hormanb1900d52015-01-30 11:22:54 +09003334 return NULL;
3335}
3336
Simon Hormanbfb5d332015-01-30 11:22:55 +09003337void free_check(struct check *check)
3338{
Christopher Faulet8892e5d2020-03-26 19:48:20 +01003339 task_destroy(check->task);
3340 if (check->wait_list.tasklet)
3341 tasklet_free(check->wait_list.tasklet);
3342
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003343 free(check->bi.area);
3344 free(check->bo.area);
Christopher Faulet23d86d12018-01-25 11:36:35 +01003345 if (check->cs) {
3346 free(check->cs->conn);
3347 check->cs->conn = NULL;
3348 cs_free(check->cs);
3349 check->cs = NULL;
3350 }
Simon Hormanbfb5d332015-01-30 11:22:55 +09003351}
3352
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003353void email_alert_free(struct email_alert *alert)
3354{
3355 struct tcpcheck_rule *rule, *back;
3356
3357 if (!alert)
3358 return;
3359
Christopher Fauletde1a75b2017-10-23 15:38:19 +02003360 list_for_each_entry_safe(rule, back, &alert->tcpcheck_rules, list) {
3361 LIST_DEL(&rule->list);
3362 free(rule->comment);
Gaetan Rivetb616add2020-02-07 15:37:17 +01003363 switch (rule->expect.type) {
3364 case TCPCHK_EXPECT_STRING:
3365 case TCPCHK_EXPECT_BINARY:
3366 free(rule->expect.string);
3367 break;
3368 case TCPCHK_EXPECT_REGEX:
Gaetan Rivetefab6c62020-02-07 15:37:17 +01003369 case TCPCHK_EXPECT_REGEX_BINARY:
Gaetan Rivetb616add2020-02-07 15:37:17 +01003370 regex_free(rule->expect.regex);
3371 break;
3372 case TCPCHK_EXPECT_UNDEF:
3373 break;
3374 }
Willy Tarreaubafbe012017-11-24 17:34:44 +01003375 pool_free(pool_head_tcpcheck_rule, rule);
Christopher Fauletde1a75b2017-10-23 15:38:19 +02003376 }
Willy Tarreaubafbe012017-11-24 17:34:44 +01003377 pool_free(pool_head_email_alert, alert);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003378}
3379
Olivier Houchard9f6af332018-05-25 14:04:04 +02003380static struct task *process_email_alert(struct task *t, void *context, unsigned short state)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003381{
Olivier Houchard9f6af332018-05-25 14:04:04 +02003382 struct check *check = context;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003383 struct email_alertq *q;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003384 struct email_alert *alert;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003385
3386 q = container_of(check, typeof(*q), check);
3387
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003388 HA_SPIN_LOCK(EMAIL_ALERTS_LOCK, &q->lock);
Christopher Faulet0108bb32017-10-20 21:34:32 +02003389 while (1) {
3390 if (!(check->state & CHK_ST_ENABLED)) {
3391 if (LIST_ISEMPTY(&q->email_alerts)) {
3392 /* All alerts processed, queue the task */
3393 t->expire = TICK_ETERNITY;
3394 task_queue(t);
Christopher Fauletc2a89a62017-10-23 15:54:24 +02003395 goto end;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003396 }
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003397
3398 alert = LIST_NEXT(&q->email_alerts, typeof(alert), list);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003399 LIST_DEL(&alert->list);
Christopher Faulet0108bb32017-10-20 21:34:32 +02003400 t->expire = now_ms;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003401 check->tcpcheck_rules = &alert->tcpcheck_rules;
Olivier Houchard0923fa42019-01-11 18:43:04 +01003402 check->status = HCHK_STATUS_INI;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003403 check->state |= CHK_ST_ENABLED;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003404 }
3405
Olivier Houchard9f6af332018-05-25 14:04:04 +02003406 process_chk(t, context, state);
Christopher Faulet0108bb32017-10-20 21:34:32 +02003407 if (check->state & CHK_ST_INPROGRESS)
3408 break;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003409
3410 alert = container_of(check->tcpcheck_rules, typeof(*alert), tcpcheck_rules);
3411 email_alert_free(alert);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003412 check->tcpcheck_rules = NULL;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003413 check->server = NULL;
3414 check->state &= ~CHK_ST_ENABLED;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003415 }
Christopher Fauletc2a89a62017-10-23 15:54:24 +02003416 end:
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003417 HA_SPIN_UNLOCK(EMAIL_ALERTS_LOCK, &q->lock);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003418 return t;
3419}
3420
Christopher Faulet0108bb32017-10-20 21:34:32 +02003421/* Initializes mailer alerts for the proxy <p> using <mls> parameters.
3422 *
3423 * The function returns 1 in success case, otherwise, it returns 0 and err is
3424 * filled.
3425 */
3426int init_email_alert(struct mailers *mls, struct proxy *p, char **err)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003427{
Christopher Faulet0108bb32017-10-20 21:34:32 +02003428 struct mailer *mailer;
3429 struct email_alertq *queues;
3430 const char *err_str;
3431 int i = 0;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003432
Christopher Faulet0108bb32017-10-20 21:34:32 +02003433 if ((queues = calloc(mls->count, sizeof(*queues))) == NULL) {
3434 memprintf(err, "out of memory while allocating mailer alerts queues");
mildis5ab01cb2018-10-02 16:46:34 +02003435 goto fail_no_queue;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003436 }
3437
Christopher Faulet0108bb32017-10-20 21:34:32 +02003438 for (mailer = mls->mailer_list; mailer; i++, mailer = mailer->next) {
3439 struct email_alertq *q = &queues[i];
3440 struct check *check = &q->check;
3441 struct task *t;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003442
3443 LIST_INIT(&q->email_alerts);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003444 HA_SPIN_INIT(&q->lock);
Christopher Faulet0108bb32017-10-20 21:34:32 +02003445 check->inter = mls->timeout.mail;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003446 check->rise = DEF_AGENT_RISETIME;
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01003447 check->proxy = p;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003448 check->fall = DEF_AGENT_FALLTIME;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003449 if ((err_str = init_check(check, PR_O2_TCPCHK_CHK))) {
3450 memprintf(err, "%s", err_str);
3451 goto error;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003452 }
3453
3454 check->xprt = mailer->xprt;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003455 check->addr = mailer->addr;
Christopher Fauletb797ae12018-03-27 15:35:35 +02003456 check->port = get_host_port(&mailer->addr);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003457
Emeric Brunc60def82017-09-27 14:59:38 +02003458 if ((t = task_new(MAX_THREADS_MASK)) == NULL) {
Christopher Faulet0108bb32017-10-20 21:34:32 +02003459 memprintf(err, "out of memory while allocating mailer alerts task");
3460 goto error;
3461 }
3462
3463 check->task = t;
3464 t->process = process_email_alert;
3465 t->context = check;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003466
Christopher Faulet0108bb32017-10-20 21:34:32 +02003467 /* check this in one ms */
3468 t->expire = TICK_ETERNITY;
3469 check->start = now;
3470 task_queue(t);
3471 }
3472
3473 mls->users++;
3474 free(p->email_alert.mailers.name);
3475 p->email_alert.mailers.m = mls;
3476 p->email_alert.queues = queues;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003477 return 0;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003478
3479 error:
3480 for (i = 0; i < mls->count; i++) {
3481 struct email_alertq *q = &queues[i];
3482 struct check *check = &q->check;
3483
Christopher Faulet0108bb32017-10-20 21:34:32 +02003484 free_check(check);
3485 }
3486 free(queues);
mildis5ab01cb2018-10-02 16:46:34 +02003487 fail_no_queue:
Christopher Faulet0108bb32017-10-20 21:34:32 +02003488 return 1;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003489}
3490
3491
3492static int add_tcpcheck_expect_str(struct list *list, const char *str)
3493{
Gaetan Rivet4038b942020-02-26 16:19:40 +01003494 struct tcpcheck_rule *tcpcheck, *prev_check;
Gaetan Rivetb616add2020-02-07 15:37:17 +01003495 struct tcpcheck_expect *expect;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003496
Willy Tarreaubafbe012017-11-24 17:34:44 +01003497 if ((tcpcheck = pool_alloc(pool_head_tcpcheck_rule)) == NULL)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003498 return 0;
Christopher Faulet31dff9b2017-10-23 15:45:20 +02003499 memset(tcpcheck, 0, sizeof(*tcpcheck));
Gaetan Rivetb616add2020-02-07 15:37:17 +01003500 tcpcheck->action = TCPCHK_ACT_EXPECT;
3501
3502 expect = &tcpcheck->expect;
3503 expect->type = TCPCHK_EXPECT_STRING;
3504 expect->string = strdup(str);
3505 if (!expect->string) {
Willy Tarreaubafbe012017-11-24 17:34:44 +01003506 pool_free(pool_head_tcpcheck_rule, tcpcheck);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003507 return 0;
3508 }
Gaetan Rivetb616add2020-02-07 15:37:17 +01003509 expect->length = strlen(expect->string);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003510
Gaetan Rivet4038b942020-02-26 16:19:40 +01003511 /* All tcp-check expect points back to the first inverse expect rule
3512 * in a chain of one or more expect rule, potentially itself.
3513 */
Gaetan Rivetb616add2020-02-07 15:37:17 +01003514 tcpcheck->expect.head = tcpcheck;
Gaetan Rivet4038b942020-02-26 16:19:40 +01003515 list_for_each_entry_rev(prev_check, list, list) {
3516 if (prev_check->action == TCPCHK_ACT_EXPECT) {
Gaetan Rivetb616add2020-02-07 15:37:17 +01003517 if (prev_check->expect.inverse)
3518 tcpcheck->expect.head = prev_check;
Gaetan Rivet4038b942020-02-26 16:19:40 +01003519 continue;
3520 }
3521 if (prev_check->action != TCPCHK_ACT_COMMENT)
3522 break;
3523 }
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003524 LIST_ADDQ(list, &tcpcheck->list);
3525 return 1;
3526}
3527
3528static int add_tcpcheck_send_strs(struct list *list, const char * const *strs)
3529{
3530 struct tcpcheck_rule *tcpcheck;
Willy Tarreau64345aa2016-08-10 19:29:09 +02003531 const char *in;
3532 char *dst;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003533 int i;
3534
Willy Tarreaubafbe012017-11-24 17:34:44 +01003535 if ((tcpcheck = pool_alloc(pool_head_tcpcheck_rule)) == NULL)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003536 return 0;
Christopher Faulet31dff9b2017-10-23 15:45:20 +02003537 memset(tcpcheck, 0, sizeof(*tcpcheck));
3538 tcpcheck->action = TCPCHK_ACT_SEND;
Christopher Faulet31dff9b2017-10-23 15:45:20 +02003539 tcpcheck->comment = NULL;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003540 tcpcheck->string_len = 0;
3541 for (i = 0; strs[i]; i++)
3542 tcpcheck->string_len += strlen(strs[i]);
3543
3544 tcpcheck->string = malloc(tcpcheck->string_len + 1);
3545 if (!tcpcheck->string) {
Willy Tarreaubafbe012017-11-24 17:34:44 +01003546 pool_free(pool_head_tcpcheck_rule, tcpcheck);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003547 return 0;
3548 }
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003549
Willy Tarreau64345aa2016-08-10 19:29:09 +02003550 dst = tcpcheck->string;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003551 for (i = 0; strs[i]; i++)
Willy Tarreau64345aa2016-08-10 19:29:09 +02003552 for (in = strs[i]; (*dst = *in++); dst++);
3553 *dst = 0;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003554
3555 LIST_ADDQ(list, &tcpcheck->list);
3556 return 1;
3557}
3558
Christopher Faulet0108bb32017-10-20 21:34:32 +02003559static int enqueue_one_email_alert(struct proxy *p, struct server *s,
3560 struct email_alertq *q, const char *msg)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003561{
Christopher Faulet31dff9b2017-10-23 15:45:20 +02003562 struct email_alert *alert;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003563 struct tcpcheck_rule *tcpcheck;
3564 struct check *check = &q->check;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003565
Willy Tarreaubafbe012017-11-24 17:34:44 +01003566 if ((alert = pool_alloc(pool_head_email_alert)) == NULL)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003567 goto error;
Christopher Faulet31dff9b2017-10-23 15:45:20 +02003568 LIST_INIT(&alert->list);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003569 LIST_INIT(&alert->tcpcheck_rules);
Christopher Faulet0108bb32017-10-20 21:34:32 +02003570 alert->srv = s;
Christopher Faulet31dff9b2017-10-23 15:45:20 +02003571
Willy Tarreaubafbe012017-11-24 17:34:44 +01003572 if ((tcpcheck = pool_alloc(pool_head_tcpcheck_rule)) == NULL)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003573 goto error;
Christopher Faulet31dff9b2017-10-23 15:45:20 +02003574 memset(tcpcheck, 0, sizeof(*tcpcheck));
3575 tcpcheck->action = TCPCHK_ACT_CONNECT;
3576 tcpcheck->comment = NULL;
3577 tcpcheck->string = NULL;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003578 LIST_ADDQ(&alert->tcpcheck_rules, &tcpcheck->list);
3579
3580 if (!add_tcpcheck_expect_str(&alert->tcpcheck_rules, "220 "))
3581 goto error;
3582
3583 {
3584 const char * const strs[4] = { "EHLO ", p->email_alert.myhostname, "\r\n" };
3585 if (!add_tcpcheck_send_strs(&alert->tcpcheck_rules, strs))
3586 goto error;
3587 }
3588
3589 if (!add_tcpcheck_expect_str(&alert->tcpcheck_rules, "250 "))
3590 goto error;
3591
3592 {
3593 const char * const strs[4] = { "MAIL FROM:<", p->email_alert.from, ">\r\n" };
3594 if (!add_tcpcheck_send_strs(&alert->tcpcheck_rules, strs))
3595 goto error;
3596 }
3597
3598 if (!add_tcpcheck_expect_str(&alert->tcpcheck_rules, "250 "))
3599 goto error;
3600
3601 {
3602 const char * const strs[4] = { "RCPT TO:<", p->email_alert.to, ">\r\n" };
3603 if (!add_tcpcheck_send_strs(&alert->tcpcheck_rules, strs))
3604 goto error;
3605 }
3606
3607 if (!add_tcpcheck_expect_str(&alert->tcpcheck_rules, "250 "))
3608 goto error;
3609
3610 {
3611 const char * const strs[2] = { "DATA\r\n" };
3612 if (!add_tcpcheck_send_strs(&alert->tcpcheck_rules, strs))
3613 goto error;
3614 }
3615
3616 if (!add_tcpcheck_expect_str(&alert->tcpcheck_rules, "354 "))
3617 goto error;
3618
3619 {
3620 struct tm tm;
3621 char datestr[48];
3622 const char * const strs[18] = {
Pieter Baauw5e0964e2016-02-13 16:27:35 +01003623 "From: ", p->email_alert.from, "\r\n",
3624 "To: ", p->email_alert.to, "\r\n",
3625 "Date: ", datestr, "\r\n",
3626 "Subject: [HAproxy Alert] ", msg, "\r\n",
3627 "\r\n",
3628 msg, "\r\n",
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003629 "\r\n",
Pieter Baauwed35c372015-07-22 19:51:54 +02003630 ".\r\n",
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003631 NULL
3632 };
3633
3634 get_localtime(date.tv_sec, &tm);
3635
3636 if (strftime(datestr, sizeof(datestr), "%a, %d %b %Y %T %z (%Z)", &tm) == 0) {
3637 goto error;
3638 }
3639
3640 if (!add_tcpcheck_send_strs(&alert->tcpcheck_rules, strs))
3641 goto error;
3642 }
3643
3644 if (!add_tcpcheck_expect_str(&alert->tcpcheck_rules, "250 "))
3645 goto error;
3646
3647 {
3648 const char * const strs[2] = { "QUIT\r\n" };
3649 if (!add_tcpcheck_send_strs(&alert->tcpcheck_rules, strs))
3650 goto error;
3651 }
3652
3653 if (!add_tcpcheck_expect_str(&alert->tcpcheck_rules, "221 "))
3654 goto error;
3655
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003656 HA_SPIN_LOCK(EMAIL_ALERTS_LOCK, &q->lock);
Christopher Faulet0108bb32017-10-20 21:34:32 +02003657 task_wakeup(check->task, TASK_WOKEN_MSG);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003658 LIST_ADDQ(&q->email_alerts, &alert->list);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003659 HA_SPIN_UNLOCK(EMAIL_ALERTS_LOCK, &q->lock);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003660 return 1;
3661
3662error:
3663 email_alert_free(alert);
3664 return 0;
3665}
3666
Christopher Faulet0108bb32017-10-20 21:34:32 +02003667static void enqueue_email_alert(struct proxy *p, struct server *s, const char *msg)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003668{
3669 int i;
3670 struct mailer *mailer;
3671
3672 for (i = 0, mailer = p->email_alert.mailers.m->mailer_list;
3673 i < p->email_alert.mailers.m->count; i++, mailer = mailer->next) {
Christopher Faulet0108bb32017-10-20 21:34:32 +02003674 if (!enqueue_one_email_alert(p, s, &p->email_alert.queues[i], msg)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003675 ha_alert("Email alert [%s] could not be enqueued: out of memory\n", p->id);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003676 return;
3677 }
3678 }
3679
3680 return;
3681}
3682
3683/*
3684 * Send email alert if configured.
3685 */
Simon Horman64e34162015-02-06 11:11:57 +09003686void send_email_alert(struct server *s, int level, const char *format, ...)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003687{
3688 va_list argp;
3689 char buf[1024];
3690 int len;
3691 struct proxy *p = s->proxy;
3692
Christopher Faulet0108bb32017-10-20 21:34:32 +02003693 if (!p->email_alert.mailers.m || level > p->email_alert.level || format == NULL)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003694 return;
3695
3696 va_start(argp, format);
3697 len = vsnprintf(buf, sizeof(buf), format, argp);
3698 va_end(argp);
3699
Thierry FOURNIER62c8a212017-02-09 12:19:27 +01003700 if (len < 0 || len >= sizeof(buf)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003701 ha_alert("Email alert [%s] could not format message\n", p->id);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003702 return;
3703 }
3704
Christopher Faulet0108bb32017-10-20 21:34:32 +02003705 enqueue_email_alert(p, s, buf);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003706}
3707
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02003708/*
3709 * Return value:
3710 * the port to be used for the health check
3711 * 0 in case no port could be found for the check
3712 */
Christopher Faulet31c30fd2020-03-26 21:10:03 +01003713static int srv_check_healthcheck_port(struct check *chk)
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02003714{
3715 int i = 0;
3716 struct server *srv = NULL;
3717
3718 srv = chk->server;
3719
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02003720 /* by default, we use the health check port ocnfigured */
3721 if (chk->port > 0)
3722 return chk->port;
3723
3724 /* try to get the port from check_core.addr if check.port not set */
3725 i = get_host_port(&chk->addr);
3726 if (i > 0)
3727 return i;
3728
3729 /* try to get the port from server address */
3730 /* prevent MAPPORTS from working at this point, since checks could
3731 * not be performed in such case (MAPPORTS impose a relative ports
3732 * based on live traffic)
3733 */
3734 if (srv->flags & SRV_F_MAPPORTS)
3735 return 0;
Willy Tarreau04276f32017-01-06 17:41:29 +01003736
3737 i = srv->svc_port; /* by default */
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02003738 if (i > 0)
3739 return i;
3740
3741 return 0;
3742}
3743
Willy Tarreau172f5ce2018-11-26 11:21:50 +01003744REGISTER_POST_CHECK(start_checks);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003745
Christopher Faulet8892e5d2020-03-26 19:48:20 +01003746static int init_srv_check(struct server *srv)
3747{
3748 const char *err;
3749 struct tcpcheck_rule *r;
3750 int ret = 0;
3751
3752 if (!srv->do_check)
3753 goto out;
3754
3755
3756 /* If neither a port nor an addr was specified and no check transport
3757 * layer is forced, then the transport layer used by the checks is the
3758 * same as for the production traffic. Otherwise we use raw_sock by
3759 * default, unless one is specified.
3760 */
3761 if (!srv->check.port && !is_addr(&srv->check.addr)) {
3762 if (!srv->check.use_ssl && srv->use_ssl != -1) {
3763 srv->check.use_ssl = srv->use_ssl;
3764 srv->check.xprt = srv->xprt;
3765 }
3766 else if (srv->check.use_ssl == 1)
3767 srv->check.xprt = xprt_get(XPRT_SSL);
3768
3769 srv->check.send_proxy |= (srv->pp_opts);
3770 }
3771
3772 /* validate <srv> server health-check settings */
3773
3774 /* We need at least a service port, a check port or the first tcp-check
3775 * rule must be a 'connect' one when checking an IPv4/IPv6 server.
3776 */
3777 if ((srv_check_healthcheck_port(&srv->check) != 0) ||
3778 (!is_inet_addr(&srv->check.addr) && (is_addr(&srv->check.addr) || !is_inet_addr(&srv->addr))))
3779 goto init;
3780
3781 if (!LIST_ISEMPTY(&srv->proxy->tcpcheck_rules)) {
3782 ha_alert("config: %s '%s': server '%s' has neither service port nor check port.\n",
3783 proxy_type_str(srv->proxy), srv->proxy->id, srv->id);
3784 ret |= ERR_ALERT | ERR_ABORT;
3785 goto out;
3786 }
3787
3788 /* search the first action (connect / send / expect) in the list */
3789 r = get_first_tcpcheck_rule(&srv->proxy->tcpcheck_rules);
3790 if (!r || (r->action != TCPCHK_ACT_CONNECT) || !r->port) {
3791 ha_alert("config: %s '%s': server '%s' has neither service port nor check port "
3792 "nor tcp_check rule 'connect' with port information.\n",
3793 proxy_type_str(srv->proxy), srv->proxy->id, srv->id);
3794 ret |= ERR_ALERT | ERR_ABORT;
3795 goto out;
3796 }
3797
3798 /* scan the tcp-check ruleset to ensure a port has been configured */
3799 list_for_each_entry(r, &srv->proxy->tcpcheck_rules, list) {
3800 if ((r->action == TCPCHK_ACT_CONNECT) && (!r->port)) {
3801 ha_alert("config: %s '%s': server '%s' has neither service port nor check port, "
3802 "and a tcp_check rule 'connect' with no port information.\n",
3803 proxy_type_str(srv->proxy), srv->proxy->id, srv->id);
3804 ret |= ERR_ALERT | ERR_ABORT;
3805 goto out;
3806 }
3807 }
3808
3809 init:
3810 err = init_check(&srv->check, srv->proxy->options2 & PR_O2_CHK_ANY);
3811 if (err) {
3812 ha_alert("config: %s '%s': unable to init check for server '%s' (%s).\n",
3813 proxy_type_str(srv->proxy), srv->proxy->id, srv->id, err);
3814 ret |= ERR_ALERT | ERR_ABORT;
3815 goto out;
3816 }
3817 srv->check.state |= CHK_ST_CONFIGURED | CHK_ST_ENABLED;
3818 global.maxsock++;
3819
3820 out:
3821 return ret;
3822}
3823
3824static int init_srv_agent_check(struct server *srv)
3825{
3826 const char *err;
3827 int ret = 0;
3828
3829 if (!srv->do_agent)
3830 goto out;
3831
3832 err = init_check(&srv->agent, PR_O2_LB_AGENT_CHK);
3833 if (err) {
3834 ha_alert("config: %s '%s': unable to init agent-check for server '%s' (%s).\n",
3835 proxy_type_str(srv->proxy), srv->proxy->id, srv->id, err);
3836 ret |= ERR_ALERT | ERR_ABORT;
3837 goto out;
3838 }
3839
3840 if (!srv->agent.inter)
3841 srv->agent.inter = srv->check.inter;
3842
3843 srv->agent.state |= CHK_ST_CONFIGURED | CHK_ST_ENABLED | CHK_ST_AGENT;
3844 global.maxsock++;
3845
3846 out:
3847 return ret;
3848}
3849
3850static void deinit_srv_check(struct server *srv)
3851{
3852 if (srv->do_check)
3853 free_check(&srv->check);
3854}
3855
3856
3857static void deinit_srv_agent_check(struct server *srv)
3858{
3859 if (srv->do_agent)
3860 free_check(&srv->agent);
3861 free(srv->agent.send_string);
3862}
3863
3864REGISTER_POST_SERVER_CHECK(init_srv_check);
3865REGISTER_POST_SERVER_CHECK(init_srv_agent_check);
3866
3867REGISTER_SERVER_DEINIT(deinit_srv_check);
3868REGISTER_SERVER_DEINIT(deinit_srv_agent_check);
3869
Willy Tarreaubd741542010-03-16 18:46:54 +01003870/*
Willy Tarreaubaaee002006-06-26 02:48:02 +02003871 * Local variables:
3872 * c-indent-level: 8
3873 * c-basic-offset: 8
3874 * End:
3875 */