blob: 85995a5d1995bae4a02dee664f50fd95168c73ee [file] [log] [blame]
Willy Tarreaubaaee002006-06-26 02:48:02 +02001/*
2 * Configuration parser
3 *
Willy Tarreauff011f22011-01-06 17:51:27 +01004 * Copyright 2000-2011 Willy Tarreau <w@1wt.eu>
Willy Tarreaubaaee002006-06-26 02:48:02 +02005 *
6 * This program is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU General Public License
8 * as published by the Free Software Foundation; either version
9 * 2 of the License, or (at your option) any later version.
10 *
11 */
12
Willy Tarreaue5733232019-05-22 19:24:06 +020013#ifdef USE_LIBCRYPT
Cyril Bonté1a0191d2014-08-29 20:20:02 +020014/* This is to have crypt() defined on Linux */
15#define _GNU_SOURCE
16
Willy Tarreaue5733232019-05-22 19:24:06 +020017#ifdef USE_CRYPT_H
Cyril Bonté1a0191d2014-08-29 20:20:02 +020018/* some platforms such as Solaris need this */
19#include <crypt.h>
20#endif
Willy Tarreaue5733232019-05-22 19:24:06 +020021#endif /* USE_LIBCRYPT */
Cyril Bonté1a0191d2014-08-29 20:20:02 +020022
Willy Tarreaubaaee002006-06-26 02:48:02 +020023#include <stdio.h>
24#include <stdlib.h>
25#include <string.h>
26#include <netdb.h>
27#include <ctype.h>
Willy Tarreau95c20ac2007-03-25 15:39:23 +020028#include <pwd.h>
29#include <grp.h>
Willy Tarreau0b4ed902007-03-26 00:18:40 +020030#include <errno.h>
Willy Tarreau3f49b302007-06-11 00:29:26 +020031#include <sys/types.h>
32#include <sys/stat.h>
33#include <fcntl.h>
34#include <unistd.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020035
Willy Tarreaudcc048a2020-06-04 19:11:43 +020036#include <haproxy/acl.h>
Willy Tarreau122eba92020-06-04 10:15:32 +020037#include <haproxy/action-t.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020038#include <haproxy/api.h>
Willy Tarreauac13aea2020-06-04 10:36:03 +020039#include <haproxy/auth.h>
Willy Tarreau49801602020-06-04 22:50:02 +020040#include <haproxy/backend.h>
Willy Tarreau278161c2020-06-04 11:18:28 +020041#include <haproxy/capture.h>
Willy Tarreau6be78492020-06-05 00:00:29 +020042#include <haproxy/cfgparse.h>
Willy Tarreauf1d32c42020-06-04 21:07:02 +020043#include <haproxy/channel.h>
Willy Tarreau4aa573d2020-06-04 18:21:56 +020044#include <haproxy/check.h>
Willy Tarreauc13ed532020-06-02 10:22:45 +020045#include <haproxy/chunk.h>
Willy Tarreau7ea393d2020-06-04 18:02:10 +020046#include <haproxy/connection.h>
Willy Tarreau8d366972020-05-27 16:10:29 +020047#include <haproxy/errors.h>
Willy Tarreauc7babd82020-06-04 21:29:29 +020048#include <haproxy/filters.h>
Willy Tarreau762d7a52020-06-04 11:23:07 +020049#include <haproxy/frontend.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020050#include <haproxy/global.h>
Willy Tarreauc2b1ff02020-06-04 21:21:03 +020051#include <haproxy/http_ana.h>
Willy Tarreauc761f842020-06-04 11:40:28 +020052#include <haproxy/http_rules.h>
Willy Tarreaufbe8da32020-06-04 14:34:27 +020053#include <haproxy/lb_chash.h>
Willy Tarreaub5fc3bf2020-06-04 14:37:38 +020054#include <haproxy/lb_fas.h>
Willy Tarreau02549412020-06-04 14:41:04 +020055#include <haproxy/lb_fwlc.h>
Willy Tarreau546ba422020-06-04 14:45:03 +020056#include <haproxy/lb_fwrr.h>
Willy Tarreau28671592020-06-04 20:22:59 +020057#include <haproxy/lb_map.h>
Willy Tarreau213e9902020-06-04 14:58:24 +020058#include <haproxy/listener.h>
Willy Tarreauaeed4a82020-06-04 22:01:04 +020059#include <haproxy/log.h>
Willy Tarreaucee013e2020-06-05 11:40:38 +020060#include <haproxy/mailers.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020061#include <haproxy/namespace.h>
Willy Tarreau8efbdfb2020-06-04 11:29:21 +020062#include <haproxy/obj_type-t.h>
Willy Tarreau3c2a7c22020-06-04 18:38:21 +020063#include <haproxy/peers-t.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020064#include <haproxy/peers.h>
Willy Tarreaud0ef4392020-06-02 09:38:52 +020065#include <haproxy/pool.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020066#include <haproxy/protocol.h>
Willy Tarreaua264d962020-06-04 22:29:18 +020067#include <haproxy/proxy.h>
Emeric Brunc9437992021-02-12 19:42:55 +010068#include <haproxy/resolvers.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020069#include <haproxy/sample.h>
70#include <haproxy/server.h>
Willy Tarreau48d25b32020-06-04 18:58:52 +020071#include <haproxy/session.h>
Willy Tarreau2eec9b52020-06-04 19:58:55 +020072#include <haproxy/stats-t.h>
Willy Tarreau872f2ea2020-06-04 18:46:44 +020073#include <haproxy/stick_table.h>
Willy Tarreaudfd3de82020-06-04 23:46:14 +020074#include <haproxy/stream.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020075#include <haproxy/task.h>
Willy Tarreau8b550af2020-06-04 17:42:48 +020076#include <haproxy/tcp_rules.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020077#include <haproxy/thread.h>
78#include <haproxy/time.h>
79#include <haproxy/tools.h>
80#include <haproxy/uri_auth-t.h>
Frédéric Lécaille884f2e92020-11-23 14:23:21 +010081#include <haproxy/xprt_quic.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020082
83
Thierry FOURNIERfa45f1d2014-03-18 13:54:18 +010084/* Used to chain configuration sections definitions. This list
85 * stores struct cfg_section
86 */
87struct list sections = LIST_HEAD_INIT(sections);
88
William Lallemand48b4bb42017-10-23 14:36:34 +020089struct list postparsers = LIST_HEAD_INIT(postparsers);
90
Willy Tarreau3a1f5fd2018-11-11 15:40:36 +010091char *cursection = NULL;
Willy Tarreauc8d5b952019-02-27 17:25:52 +010092int cfg_maxpconn = 0; /* # of simultaneous connections per proxy (-N) */
Willy Tarreau5af24ef2009-03-15 15:23:16 +010093int cfg_maxconn = 0; /* # of simultaneous connections, (-n) */
Christopher Faulet79bdef32016-11-04 22:36:15 +010094char *cfg_scope = NULL; /* the current scope during the configuration parsing */
Willy Tarreaubaaee002006-06-26 02:48:02 +020095
Willy Tarreau5b2c3362008-07-09 19:39:06 +020096/* List head of all known configuration keywords */
Willy Tarreau36b9e222018-11-11 15:19:52 +010097struct cfg_kw_list cfg_keywords = {
Willy Tarreau5b2c3362008-07-09 19:39:06 +020098 .list = LIST_HEAD_INIT(cfg_keywords.list)
99};
100
Willy Tarreau4b103022021-02-12 17:59:10 +0100101/* nested if/elif/else/endif block states */
102enum nested_cond_state {
103 NESTED_COND_IF_TAKE, // "if" with a true condition
104 NESTED_COND_IF_DROP, // "if" with a false condition
105 NESTED_COND_IF_SKIP, // "if" masked by an outer false condition
106
107 NESTED_COND_ELIF_TAKE, // "elif" with a true condition from a false one
108 NESTED_COND_ELIF_DROP, // "elif" with a false condition from a false one
109 NESTED_COND_ELIF_SKIP, // "elif" masked by an outer false condition or a previously taken if
110
111 NESTED_COND_ELSE_TAKE, // taken "else" after an if false condition
112 NESTED_COND_ELSE_DROP, // "else" masked by outer false condition or an if true condition
113};
114
115/* 100 levels of nested conditions should already be sufficient */
116#define MAXNESTEDCONDS 100
117
Willy Tarreaubaaee002006-06-26 02:48:02 +0200118/*
119 * converts <str> to a list of listeners which are dynamically allocated.
120 * The format is "{addr|'*'}:port[-end][,{addr|'*'}:port[-end]]*", where :
121 * - <addr> can be empty or "*" to indicate INADDR_ANY ;
122 * - <port> is a numerical port from 1 to 65535 ;
123 * - <end> indicates to use the range from <port> to <end> instead (inclusive).
124 * This can be repeated as many times as necessary, separated by a coma.
Willy Tarreau4fbb2282012-09-20 20:01:39 +0200125 * Function returns 1 for success or 0 if error. In case of errors, if <err> is
126 * not NULL, it must be a valid pointer to either NULL or a freeable area that
127 * will be replaced with an error message.
Willy Tarreaubaaee002006-06-26 02:48:02 +0200128 */
Willy Tarreau4fbb2282012-09-20 20:01:39 +0200129int str2listener(char *str, struct proxy *curproxy, struct bind_conf *bind_conf, const char *file, int line, char **err)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200130{
Willy Tarreau9b3178d2020-09-16 17:58:55 +0200131 struct protocol *proto;
Willy Tarreau2dff0c22011-03-04 15:43:13 +0100132 char *next, *dupstr;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200133 int port, end;
134
135 next = dupstr = strdup(str);
Krzysztof Piotr Oledzkiaeebf9b2009-10-04 15:43:17 +0200136
Willy Tarreaubaaee002006-06-26 02:48:02 +0200137 while (next && *next) {
Willy Tarreau0de59fd2017-09-15 08:10:44 +0200138 struct sockaddr_storage *ss2;
Willy Tarreau40aa0702013-03-10 23:51:38 +0100139 int fd = -1;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200140
141 str = next;
142 /* 1) look for the end of the first address */
Krzysztof Piotr Oledzki52d522b2009-01-27 16:57:08 +0100143 if ((next = strchr(str, ',')) != NULL) {
Willy Tarreaubaaee002006-06-26 02:48:02 +0200144 *next++ = 0;
145 }
146
Willy Tarreau5fc93282020-09-16 18:25:03 +0200147 ss2 = str2sa_range(str, NULL, &port, &end, &fd, &proto, err,
Willy Tarreau72b8c1f2015-09-08 15:50:19 +0200148 curproxy == global.stats_fe ? NULL : global.unix_bind.prefix,
Willy Tarreau32819932020-09-04 15:53:16 +0200149 NULL, PA_O_RESOLVE | PA_O_PORT_OK | PA_O_PORT_MAND | PA_O_PORT_RANGE |
Willy Tarreau5e1779a2020-09-16 16:28:08 +0200150 PA_O_SOCKET_FD | PA_O_STREAM | PA_O_XPRT);
Willy Tarreau12eb2a62013-03-06 15:45:03 +0100151 if (!ss2)
152 goto fail;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200153
Willy Tarreau12eb2a62013-03-06 15:45:03 +0100154 /* OK the address looks correct */
Frédéric Lécaille884f2e92020-11-23 14:23:21 +0100155
156#ifdef USE_QUIC
157 /* The transport layer automatically switches to QUIC when QUIC
158 * is selected, regardless of bind_conf settings. We then need
159 * to initialize QUIC params.
160 */
161 if (proto->sock_type == SOCK_DGRAM && proto->ctrl_type == SOCK_STREAM) {
162 bind_conf->xprt = xprt_get(XPRT_QUIC);
163 quic_transport_params_init(&bind_conf->quic_params, 1);
164 }
165#endif
Willy Tarreau9b3178d2020-09-16 17:58:55 +0200166 if (!create_listeners(bind_conf, ss2, port, end, fd, proto, err)) {
Willy Tarreau0de59fd2017-09-15 08:10:44 +0200167 memprintf(err, "%s for address '%s'.\n", *err, str);
168 goto fail;
169 }
Willy Tarreaubaaee002006-06-26 02:48:02 +0200170 } /* end while(next) */
171 free(dupstr);
Krzysztof Piotr Oledzkiaeebf9b2009-10-04 15:43:17 +0200172 return 1;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200173 fail:
174 free(dupstr);
Krzysztof Piotr Oledzkiaeebf9b2009-10-04 15:43:17 +0200175 return 0;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200176}
177
William Lallemand6e62fb62015-04-28 16:55:23 +0200178/*
Willy Tarreauaa333122020-09-16 15:13:04 +0200179 * converts <str> to a list of datagram-oriented listeners which are dynamically
180 * allocated.
181 * The format is "{addr|'*'}:port[-end][,{addr|'*'}:port[-end]]*", where :
182 * - <addr> can be empty or "*" to indicate INADDR_ANY ;
183 * - <port> is a numerical port from 1 to 65535 ;
184 * - <end> indicates to use the range from <port> to <end> instead (inclusive).
185 * This can be repeated as many times as necessary, separated by a coma.
186 * Function returns 1 for success or 0 if error. In case of errors, if <err> is
187 * not NULL, it must be a valid pointer to either NULL or a freeable area that
188 * will be replaced with an error message.
189 */
190int str2receiver(char *str, struct proxy *curproxy, struct bind_conf *bind_conf, const char *file, int line, char **err)
191{
Willy Tarreau9b3178d2020-09-16 17:58:55 +0200192 struct protocol *proto;
Willy Tarreauaa333122020-09-16 15:13:04 +0200193 char *next, *dupstr;
194 int port, end;
195
196 next = dupstr = strdup(str);
197
198 while (next && *next) {
199 struct sockaddr_storage *ss2;
200 int fd = -1;
201
202 str = next;
203 /* 1) look for the end of the first address */
204 if ((next = strchr(str, ',')) != NULL) {
205 *next++ = 0;
206 }
207
Willy Tarreau5fc93282020-09-16 18:25:03 +0200208 ss2 = str2sa_range(str, NULL, &port, &end, &fd, &proto, err,
Willy Tarreauaa333122020-09-16 15:13:04 +0200209 curproxy == global.stats_fe ? NULL : global.unix_bind.prefix,
210 NULL, PA_O_RESOLVE | PA_O_PORT_OK | PA_O_PORT_MAND | PA_O_PORT_RANGE |
211 PA_O_SOCKET_FD | PA_O_DGRAM | PA_O_XPRT);
212 if (!ss2)
213 goto fail;
214
215 /* OK the address looks correct */
Willy Tarreau9b3178d2020-09-16 17:58:55 +0200216 if (!create_listeners(bind_conf, ss2, port, end, fd, proto, err)) {
Willy Tarreauaa333122020-09-16 15:13:04 +0200217 memprintf(err, "%s for address '%s'.\n", *err, str);
218 goto fail;
219 }
220 } /* end while(next) */
221 free(dupstr);
222 return 1;
223 fail:
224 free(dupstr);
225 return 0;
226}
227
228/*
Willy Tarreauece9b072016-12-21 22:41:44 +0100229 * Report an error in <msg> when there are too many arguments. This version is
230 * intended to be used by keyword parsers so that the message will be included
231 * into the general error message. The index is the current keyword in args.
232 * Return 0 if the number of argument is correct, otherwise build a message and
233 * return 1. Fill err_code with an ERR_ALERT and an ERR_FATAL if not null. The
234 * message may also be null, it will simply not be produced (useful to check only).
235 * <msg> and <err_code> are only affected on error.
236 */
237int too_many_args_idx(int maxarg, int index, char **args, char **msg, int *err_code)
238{
239 int i;
240
241 if (!*args[index + maxarg + 1])
242 return 0;
243
244 if (msg) {
245 *msg = NULL;
246 memprintf(msg, "%s", args[0]);
247 for (i = 1; i <= index; i++)
248 memprintf(msg, "%s %s", *msg, args[i]);
249
250 memprintf(msg, "'%s' cannot handle unexpected argument '%s'.", *msg, args[index + maxarg + 1]);
251 }
252 if (err_code)
253 *err_code |= ERR_ALERT | ERR_FATAL;
254
255 return 1;
256}
257
258/*
259 * same as too_many_args_idx with a 0 index
260 */
261int too_many_args(int maxarg, char **args, char **msg, int *err_code)
262{
263 return too_many_args_idx(maxarg, 0, args, msg, err_code);
264}
265
266/*
William Lallemand6e62fb62015-04-28 16:55:23 +0200267 * Report a fatal Alert when there is too much arguments
268 * The index is the current keyword in args
269 * Return 0 if the number of argument is correct, otherwise emit an alert and return 1
270 * Fill err_code with an ERR_ALERT and an ERR_FATAL
271 */
272int alertif_too_many_args_idx(int maxarg, int index, const char *file, int linenum, char **args, int *err_code)
273{
274 char *kw = NULL;
275 int i;
276
277 if (!*args[index + maxarg + 1])
278 return 0;
279
280 memprintf(&kw, "%s", args[0]);
281 for (i = 1; i <= index; i++) {
282 memprintf(&kw, "%s %s", kw, args[i]);
283 }
284
Christopher Faulet767a84b2017-11-24 16:50:31 +0100285 ha_alert("parsing [%s:%d] : '%s' cannot handle unexpected argument '%s'.\n", file, linenum, kw, args[index + maxarg + 1]);
William Lallemand6e62fb62015-04-28 16:55:23 +0200286 free(kw);
287 *err_code |= ERR_ALERT | ERR_FATAL;
288 return 1;
289}
290
291/*
292 * same as alertif_too_many_args_idx with a 0 index
293 */
294int alertif_too_many_args(int maxarg, const char *file, int linenum, char **args, int *err_code)
295{
296 return alertif_too_many_args_idx(maxarg, 0, file, linenum, args, err_code);
297}
298
Willy Tarreau61d18892009-03-31 10:49:21 +0200299
Willy Tarreaua91d0a52013-03-25 08:12:18 +0100300/* Report it if a request ACL condition uses some keywords that are incompatible
301 * with the place where the ACL is used. It returns either 0 or ERR_WARN so that
302 * its result can be or'ed with err_code. Note that <cond> may be NULL and then
303 * will be ignored.
Willy Tarreauf1e98b82010-01-28 17:59:39 +0100304 */
Willy Tarreau3a1f5fd2018-11-11 15:40:36 +0100305int warnif_cond_conflicts(const struct acl_cond *cond, unsigned int where, const char *file, int line)
Willy Tarreauf1e98b82010-01-28 17:59:39 +0100306{
Willy Tarreaua91d0a52013-03-25 08:12:18 +0100307 const struct acl *acl;
Willy Tarreau93fddf12013-03-31 22:59:32 +0200308 const char *kw;
Willy Tarreauf1e98b82010-01-28 17:59:39 +0100309
Willy Tarreaua91d0a52013-03-25 08:12:18 +0100310 if (!cond)
Willy Tarreauf1e98b82010-01-28 17:59:39 +0100311 return 0;
312
Willy Tarreaua91d0a52013-03-25 08:12:18 +0100313 acl = acl_cond_conflicts(cond, where);
314 if (acl) {
315 if (acl->name && *acl->name)
Christopher Faulet767a84b2017-11-24 16:50:31 +0100316 ha_warning("parsing [%s:%d] : acl '%s' will never match because it only involves keywords that are incompatible with '%s'\n",
317 file, line, acl->name, sample_ckp_names(where));
Willy Tarreaua91d0a52013-03-25 08:12:18 +0100318 else
Christopher Faulet767a84b2017-11-24 16:50:31 +0100319 ha_warning("parsing [%s:%d] : anonymous acl will never match because it uses keyword '%s' which is incompatible with '%s'\n",
320 file, line, LIST_ELEM(acl->expr.n, struct acl_expr *, list)->kw, sample_ckp_names(where));
Willy Tarreaua91d0a52013-03-25 08:12:18 +0100321 return ERR_WARN;
322 }
323 if (!acl_cond_kw_conflicts(cond, where, &acl, &kw))
Willy Tarreaufdb563c2010-01-31 15:43:27 +0100324 return 0;
325
Willy Tarreaua91d0a52013-03-25 08:12:18 +0100326 if (acl->name && *acl->name)
Christopher Faulet767a84b2017-11-24 16:50:31 +0100327 ha_warning("parsing [%s:%d] : acl '%s' involves keywords '%s' which is incompatible with '%s'\n",
328 file, line, acl->name, kw, sample_ckp_names(where));
Willy Tarreaua91d0a52013-03-25 08:12:18 +0100329 else
Christopher Faulet767a84b2017-11-24 16:50:31 +0100330 ha_warning("parsing [%s:%d] : anonymous acl involves keyword '%s' which is incompatible with '%s'\n",
331 file, line, kw, sample_ckp_names(where));
Willy Tarreaufdb563c2010-01-31 15:43:27 +0100332 return ERR_WARN;
333}
334
Christopher Faulet62519022017-10-16 15:49:32 +0200335/* Parse a string representing a process number or a set of processes. It must
Willy Tarreauc9a82e42019-01-26 13:25:14 +0100336 * be "all", "odd", "even", a number between 1 and <max> or a range with
Christopher Faulet5ab51772017-11-22 11:21:58 +0100337 * two such numbers delimited by a dash ('-'). On success, it returns
338 * 0. otherwise it returns 1 with an error message in <err>.
Christopher Faulet62519022017-10-16 15:49:32 +0200339 *
340 * Note: this function can also be used to parse a thread number or a set of
341 * threads.
342 */
Willy Tarreauc9a82e42019-01-26 13:25:14 +0100343int parse_process_number(const char *arg, unsigned long *proc, int max, int *autoinc, char **err)
Christopher Faulet62519022017-10-16 15:49:32 +0200344{
Christopher Faulet26028f62017-11-22 15:01:51 +0100345 if (autoinc) {
346 *autoinc = 0;
347 if (strncmp(arg, "auto:", 5) == 0) {
348 arg += 5;
349 *autoinc = 1;
350 }
351 }
352
Christopher Faulet62519022017-10-16 15:49:32 +0200353 if (strcmp(arg, "all") == 0)
Christopher Faulet5ab51772017-11-22 11:21:58 +0100354 *proc |= ~0UL;
Christopher Faulet62519022017-10-16 15:49:32 +0200355 else if (strcmp(arg, "odd") == 0)
Christopher Faulet5ab51772017-11-22 11:21:58 +0100356 *proc |= ~0UL/3UL; /* 0x555....555 */
Christopher Faulet62519022017-10-16 15:49:32 +0200357 else if (strcmp(arg, "even") == 0)
Christopher Faulet5ab51772017-11-22 11:21:58 +0100358 *proc |= (~0UL/3UL) << 1; /* 0xAAA...AAA */
Christopher Faulet62519022017-10-16 15:49:32 +0200359 else {
Christopher Faulet18cca782019-02-07 16:29:41 +0100360 const char *p, *dash = NULL;
Christopher Faulet1dcb9cb2017-11-22 10:24:40 +0100361 unsigned int low, high;
362
Christopher Faulet18cca782019-02-07 16:29:41 +0100363 for (p = arg; *p; p++) {
364 if (*p == '-' && !dash)
365 dash = p;
Willy Tarreau90807112020-02-25 08:16:33 +0100366 else if (!isdigit((unsigned char)*p)) {
Christopher Faulet18cca782019-02-07 16:29:41 +0100367 memprintf(err, "'%s' is not a valid number/range.", arg);
368 return -1;
369 }
Christopher Faulet5ab51772017-11-22 11:21:58 +0100370 }
Christopher Faulet1dcb9cb2017-11-22 10:24:40 +0100371
372 low = high = str2uic(arg);
Christopher Faulet18cca782019-02-07 16:29:41 +0100373 if (dash)
Willy Tarreauc9a82e42019-01-26 13:25:14 +0100374 high = ((!*(dash+1)) ? max : str2uic(dash + 1));
Christopher Fauletff4121f2017-11-22 16:38:49 +0100375
Christopher Faulet1dcb9cb2017-11-22 10:24:40 +0100376 if (high < low) {
377 unsigned int swap = low;
378 low = high;
379 high = swap;
380 }
381
Willy Tarreauc9a82e42019-01-26 13:25:14 +0100382 if (low < 1 || low > max || high > max) {
Christopher Fauletcb6a9452017-11-22 16:50:41 +0100383 memprintf(err, "'%s' is not a valid number/range."
384 " It supports numbers from 1 to %d.\n",
Willy Tarreauc9a82e42019-01-26 13:25:14 +0100385 arg, max);
Christopher Faulet5ab51772017-11-22 11:21:58 +0100386 return 1;
387 }
Christopher Faulet1dcb9cb2017-11-22 10:24:40 +0100388
389 for (;low <= high; low++)
Christopher Faulet5ab51772017-11-22 11:21:58 +0100390 *proc |= 1UL << (low-1);
Christopher Faulet62519022017-10-16 15:49:32 +0200391 }
Willy Tarreauc9a82e42019-01-26 13:25:14 +0100392 *proc &= ~0UL >> (LONGBITS - max);
Christopher Faulet1dcb9cb2017-11-22 10:24:40 +0100393
Christopher Faulet5ab51772017-11-22 11:21:58 +0100394 return 0;
Christopher Faulet62519022017-10-16 15:49:32 +0200395}
396
David Carlier7e351ee2017-12-01 09:14:02 +0000397#ifdef USE_CPU_AFFINITY
Christopher Faulet62519022017-10-16 15:49:32 +0200398/* Parse cpu sets. Each CPU set is either a unique number between 0 and
399 * <LONGBITS> or a range with two such numbers delimited by a dash
400 * ('-'). Multiple CPU numbers or ranges may be specified. On success, it
401 * returns 0. otherwise it returns 1 with an error message in <err>.
402 */
Willy Tarreau36b9e222018-11-11 15:19:52 +0100403unsigned long parse_cpu_set(const char **args, unsigned long *cpu_set, char **err)
Christopher Faulet62519022017-10-16 15:49:32 +0200404{
405 int cur_arg = 0;
406
407 *cpu_set = 0;
408 while (*args[cur_arg]) {
409 char *dash;
410 unsigned int low, high;
411
Willy Tarreau90807112020-02-25 08:16:33 +0100412 if (!isdigit((unsigned char)*args[cur_arg])) {
Christopher Faulet62519022017-10-16 15:49:32 +0200413 memprintf(err, "'%s' is not a CPU range.\n", args[cur_arg]);
414 return -1;
415 }
416
417 low = high = str2uic(args[cur_arg]);
418 if ((dash = strchr(args[cur_arg], '-')) != NULL)
Christopher Fauletff4121f2017-11-22 16:38:49 +0100419 high = ((!*(dash+1)) ? LONGBITS-1 : str2uic(dash + 1));
Christopher Faulet62519022017-10-16 15:49:32 +0200420
421 if (high < low) {
422 unsigned int swap = low;
423 low = high;
424 high = swap;
425 }
426
427 if (high >= LONGBITS) {
428 memprintf(err, "supports CPU numbers from 0 to %d.\n", LONGBITS - 1);
429 return 1;
430 }
431
432 while (low <= high)
433 *cpu_set |= 1UL << low++;
434
435 cur_arg++;
436 }
437 return 0;
438}
David Carlier7e351ee2017-12-01 09:14:02 +0000439#endif
440
Frédéric Lécaille18251032019-01-11 11:07:15 +0100441/* Allocate and initialize the frontend of a "peers" section found in
442 * file <file> at line <linenum> with <id> as ID.
443 * Return 0 if succeeded, -1 if not.
Frédéric Lécaillec06b5d42018-04-26 10:06:41 +0200444 * Note that this function may be called from "default-server"
445 * or "peer" lines.
Frédéric Lécaille18251032019-01-11 11:07:15 +0100446 */
447static int init_peers_frontend(const char *file, int linenum,
448 const char *id, struct peers *peers)
449{
450 struct proxy *p;
451
Frédéric Lécaillec06b5d42018-04-26 10:06:41 +0200452 if (peers->peers_fe) {
453 p = peers->peers_fe;
454 goto out;
455 }
Frédéric Lécaille9492c4e2019-01-11 11:47:12 +0100456
Frédéric Lécaille18251032019-01-11 11:07:15 +0100457 p = calloc(1, sizeof *p);
458 if (!p) {
459 ha_alert("parsing [%s:%d] : out of memory.\n", file, linenum);
460 return -1;
461 }
462
463 init_new_proxy(p);
Frédéric Lécaillec06b5d42018-04-26 10:06:41 +0200464 peers_setup_frontend(p);
Frédéric Lécaille18251032019-01-11 11:07:15 +0100465 p->parent = peers;
Frédéric Lécaillec06b5d42018-04-26 10:06:41 +0200466 /* Finally store this frontend. */
467 peers->peers_fe = p;
468
469 out:
470 if (id && !p->id)
471 p->id = strdup(id);
Frédéric Lécaille1055e682018-04-26 14:35:21 +0200472 free(p->conf.file);
Frédéric Lécaille18251032019-01-11 11:07:15 +0100473 p->conf.args.file = p->conf.file = strdup(file);
Frédéric Lécaille355b2032019-01-11 14:06:12 +0100474 if (linenum != -1)
475 p->conf.args.line = p->conf.line = linenum;
Frédéric Lécaille18251032019-01-11 11:07:15 +0100476
477 return 0;
478}
Willy Tarreauade5ec42010-01-28 19:33:49 +0100479
Frédéric Lécaille355b2032019-01-11 14:06:12 +0100480/* Only change ->file, ->line and ->arg struct bind_conf member values
481 * if already present.
482 */
483static struct bind_conf *bind_conf_uniq_alloc(struct proxy *p,
484 const char *file, int line,
485 const char *arg, struct xprt_ops *xprt)
486{
487 struct bind_conf *bind_conf;
488
489 if (!LIST_ISEMPTY(&p->conf.bind)) {
490 bind_conf = LIST_ELEM((&p->conf.bind)->n, typeof(bind_conf), by_fe);
491 free(bind_conf->file);
492 bind_conf->file = strdup(file);
493 bind_conf->line = line;
494 if (arg) {
495 free(bind_conf->arg);
496 bind_conf->arg = strdup(arg);
497 }
498 }
499 else {
500 bind_conf = bind_conf_alloc(p, file, line, arg, xprt);
501 }
502
503 return bind_conf;
504}
505
506/*
507 * Allocate a new struct peer parsed at line <linenum> in file <file>
508 * to be added to <peers>.
509 * Returns the new allocated structure if succeeded, NULL if not.
510 */
511static struct peer *cfg_peers_add_peer(struct peers *peers,
512 const char *file, int linenum,
513 const char *id, int local)
514{
515 struct peer *p;
516
517 p = calloc(1, sizeof *p);
518 if (!p) {
519 ha_alert("parsing [%s:%d] : out of memory.\n", file, linenum);
520 return NULL;
521 }
522
523 /* the peers are linked backwards first */
524 peers->count++;
525 p->next = peers->remote;
526 peers->remote = p;
527 p->conf.file = strdup(file);
528 p->conf.line = linenum;
529 p->last_change = now.tv_sec;
530 p->xprt = xprt_get(XPRT_RAW);
531 p->sock_init_arg = NULL;
532 HA_SPIN_INIT(&p->lock);
533 if (id)
534 p->id = strdup(id);
535 if (local) {
536 p->local = 1;
537 peers->local = p;
538 }
539
540 return p;
541}
542
Willy Tarreaubaaee002006-06-26 02:48:02 +0200543/*
William Lallemand51097192015-04-14 16:35:22 +0200544 * Parse a line in a <listen>, <frontend> or <backend> section.
Willy Tarreau93893792009-07-23 13:19:11 +0200545 * Returns the error code, 0 if OK, or any combination of :
546 * - ERR_ABORT: must abort ASAP
547 * - ERR_FATAL: we can continue parsing but not start the service
548 * - ERR_WARN: a warning has been emitted
549 * - ERR_ALERT: an alert has been emitted
550 * Only the two first ones can stop processing, the two others are just
551 * indicators.
Willy Tarreaubaaee002006-06-26 02:48:02 +0200552 */
Emeric Brun32da3c42010-09-23 18:39:19 +0200553int cfg_parse_peers(const char *file, int linenum, char **args, int kwm)
554{
555 static struct peers *curpeers = NULL;
556 struct peer *newpeer = NULL;
557 const char *err;
Willy Tarreau4348fad2012-09-20 16:48:07 +0200558 struct bind_conf *bind_conf;
559 struct listener *l;
Emeric Brun32da3c42010-09-23 18:39:19 +0200560 int err_code = 0;
Willy Tarreau902636f2013-03-10 19:44:48 +0100561 char *errmsg = NULL;
Frédéric Lécaille355b2032019-01-11 14:06:12 +0100562 static int bind_line, peer_line;
563
564 if (strcmp(args[0], "bind") == 0 || strcmp(args[0], "default-bind") == 0) {
565 int cur_arg;
566 static int kws_dumped;
567 struct bind_conf *bind_conf;
568 struct bind_kw *kw;
Emeric Brun32da3c42010-09-23 18:39:19 +0200569
Frédéric Lécaille355b2032019-01-11 14:06:12 +0100570 cur_arg = 1;
571
Frédéric Lécaillec06b5d42018-04-26 10:06:41 +0200572 if (init_peers_frontend(file, linenum, NULL, curpeers) != 0) {
573 err_code |= ERR_ALERT | ERR_ABORT;
574 goto out;
575 }
Frédéric Lécaille355b2032019-01-11 14:06:12 +0100576
577 bind_conf = bind_conf_uniq_alloc(curpeers->peers_fe, file, linenum,
578 NULL, xprt_get(XPRT_RAW));
579 if (*args[0] == 'b') {
580 struct listener *l;
581
582 if (peer_line) {
583 ha_alert("parsing [%s:%d] : mixing \"peer\" and \"bind\" line is forbidden\n", file, linenum);
584 err_code |= ERR_ALERT | ERR_FATAL;
585 goto out;
586 }
587
588 if (!str2listener(args[1], curpeers->peers_fe, bind_conf, file, linenum, &errmsg)) {
589 if (errmsg && *errmsg) {
590 indent_msg(&errmsg, 2);
591 ha_alert("parsing [%s:%d] : '%s %s' : %s\n", file, linenum, args[0], args[1], errmsg);
592 }
593 else
594 ha_alert("parsing [%s:%d] : '%s %s' : error encountered while parsing listening address %s.\n",
595 file, linenum, args[0], args[1], args[2]);
596 err_code |= ERR_FATAL;
597 goto out;
598 }
599 l = LIST_ELEM(bind_conf->listeners.n, typeof(l), by_bind);
600 l->maxaccept = 1;
Frédéric Lécaille355b2032019-01-11 14:06:12 +0100601 l->accept = session_accept_fd;
602 l->analysers |= curpeers->peers_fe->fe_req_ana;
603 l->default_target = curpeers->peers_fe->default_target;
604 l->options |= LI_O_UNLIMITED; /* don't make the peers subject to global limits */
Willy Tarreau18215cb2019-02-27 16:25:28 +0100605 global.maxsock++; /* for the listening socket */
Frédéric Lécaille355b2032019-01-11 14:06:12 +0100606
607 bind_line = 1;
608 if (cfg_peers->local) {
609 newpeer = cfg_peers->local;
610 }
611 else {
612 /* This peer is local.
613 * Note that we do not set the peer ID. This latter is initialized
614 * when parsing "peer" or "server" line.
615 */
616 newpeer = cfg_peers_add_peer(curpeers, file, linenum, NULL, 1);
617 if (!newpeer) {
618 err_code |= ERR_ALERT | ERR_ABORT;
619 goto out;
620 }
621 }
Willy Tarreau37159062020-08-27 07:48:42 +0200622 newpeer->addr = l->rx.addr;
Willy Tarreau5fc93282020-09-16 18:25:03 +0200623 newpeer->proto = l->rx.proto;
Frédéric Lécaille355b2032019-01-11 14:06:12 +0100624 cur_arg++;
625 }
626
627 while (*args[cur_arg] && (kw = bind_find_kw(args[cur_arg]))) {
628 int ret;
629
630 ret = kw->parse(args, cur_arg, curpeers->peers_fe, bind_conf, &errmsg);
631 err_code |= ret;
632 if (ret) {
633 if (errmsg && *errmsg) {
634 indent_msg(&errmsg, 2);
635 ha_alert("parsing [%s:%d] : %s\n", file, linenum, errmsg);
636 }
637 else
638 ha_alert("parsing [%s:%d]: error encountered while processing '%s'\n",
639 file, linenum, args[cur_arg]);
640 if (ret & ERR_FATAL)
641 goto out;
642 }
643 cur_arg += 1 + kw->skip;
644 }
Frédéric Lécaille355b2032019-01-11 14:06:12 +0100645 if (*args[cur_arg] != 0) {
Tim Duesterhus04bcaa12019-05-12 22:54:50 +0200646 char *kws = NULL;
647
648 if (!kws_dumped) {
649 kws_dumped = 1;
650 bind_dump_kws(&kws);
651 indent_msg(&kws, 4);
652 }
Frédéric Lécaille355b2032019-01-11 14:06:12 +0100653 ha_alert("parsing [%s:%d] : unknown keyword '%s' in '%s' section.%s%s\n",
654 file, linenum, args[cur_arg], cursection,
655 kws ? " Registered keywords :" : "", kws ? kws: "");
656 free(kws);
657 err_code |= ERR_ALERT | ERR_FATAL;
658 goto out;
659 }
660 }
661 else if (strcmp(args[0], "default-server") == 0) {
662 if (init_peers_frontend(file, -1, NULL, curpeers) != 0) {
663 err_code |= ERR_ALERT | ERR_ABORT;
664 goto out;
665 }
Emeric Brund3db3842020-07-21 16:54:36 +0200666 err_code |= parse_server(file, linenum, args, curpeers->peers_fe, NULL, 0, 1, 1);
Frédéric Lécaillec06b5d42018-04-26 10:06:41 +0200667 }
Frédéric Lécailleb6f759b2019-11-05 09:57:45 +0100668 else if (strcmp(args[0], "log") == 0) {
669 if (init_peers_frontend(file, linenum, NULL, curpeers) != 0) {
670 err_code |= ERR_ALERT | ERR_ABORT;
671 goto out;
672 }
673 if (!parse_logsrv(args, &curpeers->peers_fe->logsrvs, (kwm == KWM_NO), &errmsg)) {
674 ha_alert("parsing [%s:%d] : %s : %s\n", file, linenum, args[0], errmsg);
675 err_code |= ERR_ALERT | ERR_FATAL;
676 goto out;
677 }
678 }
Frédéric Lécaillec06b5d42018-04-26 10:06:41 +0200679 else if (strcmp(args[0], "peers") == 0) { /* new peers section */
Frédéric Lécaille355b2032019-01-11 14:06:12 +0100680 /* Initialize these static variables when entering a new "peers" section*/
681 bind_line = peer_line = 0;
Willy Tarreau0dbbf312013-03-05 11:31:55 +0100682 if (!*args[1]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100683 ha_alert("parsing [%s:%d] : missing name for peers section.\n", file, linenum);
Willy Tarreau54984722014-02-16 08:20:13 +0100684 err_code |= ERR_ALERT | ERR_ABORT;
Willy Tarreau0dbbf312013-03-05 11:31:55 +0100685 goto out;
686 }
Emeric Brun32da3c42010-09-23 18:39:19 +0200687
William Lallemand6e62fb62015-04-28 16:55:23 +0200688 if (alertif_too_many_args(1, file, linenum, args, &err_code))
689 goto out;
690
Emeric Brun32da3c42010-09-23 18:39:19 +0200691 err = invalid_char(args[1]);
692 if (err) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100693 ha_alert("parsing [%s:%d] : character '%c' is not permitted in '%s' name '%s'.\n",
694 file, linenum, *err, args[0], args[1]);
Willy Tarreau54984722014-02-16 08:20:13 +0100695 err_code |= ERR_ALERT | ERR_ABORT;
Willy Tarreau0dbbf312013-03-05 11:31:55 +0100696 goto out;
Emeric Brun32da3c42010-09-23 18:39:19 +0200697 }
698
Frédéric Lécailleed2b4a62017-07-13 09:07:09 +0200699 for (curpeers = cfg_peers; curpeers != NULL; curpeers = curpeers->next) {
Emeric Brun32da3c42010-09-23 18:39:19 +0200700 /*
701 * If there are two proxies with the same name only following
702 * combinations are allowed:
703 */
704 if (strcmp(curpeers->id, args[1]) == 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100705 ha_alert("Parsing [%s:%d]: peers section '%s' has the same name as another peers section declared at %s:%d.\n",
706 file, linenum, args[1], curpeers->conf.file, curpeers->conf.line);
Willy Tarreau911fa2e2015-05-26 10:35:50 +0200707 err_code |= ERR_ALERT | ERR_FATAL;
Emeric Brun32da3c42010-09-23 18:39:19 +0200708 }
709 }
710
Vincent Bernat02779b62016-04-03 13:48:43 +0200711 if ((curpeers = calloc(1, sizeof(*curpeers))) == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100712 ha_alert("parsing [%s:%d] : out of memory.\n", file, linenum);
Emeric Brun32da3c42010-09-23 18:39:19 +0200713 err_code |= ERR_ALERT | ERR_ABORT;
714 goto out;
715 }
716
Frédéric Lécailleed2b4a62017-07-13 09:07:09 +0200717 curpeers->next = cfg_peers;
718 cfg_peers = curpeers;
Willy Tarreau8113a5d2012-10-04 08:01:43 +0200719 curpeers->conf.file = strdup(file);
Emeric Brun32da3c42010-09-23 18:39:19 +0200720 curpeers->conf.line = linenum;
721 curpeers->last_change = now.tv_sec;
722 curpeers->id = strdup(args[1]);
Willy Tarreau1ad64ac2020-09-24 08:48:08 +0200723 curpeers->disabled = 0;
Emeric Brun32da3c42010-09-23 18:39:19 +0200724 }
Frédéric Lécaillec06b5d42018-04-26 10:06:41 +0200725 else if (strcmp(args[0], "peer") == 0 ||
726 strcmp(args[0], "server") == 0) { /* peer or server definition */
Frédéric Lécaille04636b72019-01-31 06:48:16 +0100727 int local_peer, peer;
Emeric Brun32da3c42010-09-23 18:39:19 +0200728
Frédéric Lécaille04636b72019-01-31 06:48:16 +0100729 peer = *args[0] == 'p';
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100730 local_peer = strcmp(args[1], localpeer) == 0;
Frédéric Lécaille355b2032019-01-11 14:06:12 +0100731 /* The local peer may have already partially been parsed on a "bind" line. */
732 if (*args[0] == 'p') {
733 if (bind_line) {
734 ha_alert("parsing [%s:%d] : mixing \"peer\" and \"bind\" line is forbidden\n", file, linenum);
735 err_code |= ERR_ALERT | ERR_FATAL;
736 goto out;
737 }
738 peer_line = 1;
739 }
740 if (cfg_peers->local && !cfg_peers->local->id && local_peer) {
741 /* The local peer has already been initialized on a "bind" line.
742 * Let's use it and store its ID.
743 */
744 newpeer = cfg_peers->local;
745 newpeer->id = strdup(localpeer);
746 }
747 else {
748 if (local_peer && cfg_peers->local) {
749 ha_alert("parsing [%s:%d] : '%s %s' : local peer name already referenced at %s:%d. %s\n",
750 file, linenum, args[0], args[1],
751 curpeers->peers_fe->conf.file, curpeers->peers_fe->conf.line, cfg_peers->local->id);
752 err_code |= ERR_FATAL;
753 goto out;
754 }
755 newpeer = cfg_peers_add_peer(curpeers, file, linenum, args[1], local_peer);
756 if (!newpeer) {
757 err_code |= ERR_ALERT | ERR_ABORT;
758 goto out;
759 }
760 }
Emeric Brun32da3c42010-09-23 18:39:19 +0200761
Frédéric Lécaille355b2032019-01-11 14:06:12 +0100762 /* Line number and peer ID are updated only if this peer is the local one. */
763 if (init_peers_frontend(file,
764 newpeer->local ? linenum: -1,
765 newpeer->local ? newpeer->id : NULL,
766 curpeers) != 0) {
Frédéric Lécaillec06b5d42018-04-26 10:06:41 +0200767 err_code |= ERR_ALERT | ERR_ABORT;
Willy Tarreaub36487e2013-03-10 18:37:42 +0100768 goto out;
769 }
Willy Tarreau2aa38802013-02-20 19:20:59 +0100770
Frédéric Lécaille76d2cef2019-02-12 19:12:32 +0100771 /* This initializes curpeer->peers->peers_fe->srv.
772 * The server address is parsed only if we are parsing a "peer" line,
773 * or if we are parsing a "server" line and the current peer is not the local one.
774 */
Emeric Brund3db3842020-07-21 16:54:36 +0200775 err_code |= parse_server(file, linenum, args, curpeers->peers_fe, NULL, peer || !local_peer, 1, 1);
Frédéric Lécaille8ba10fe2020-04-03 09:43:47 +0200776 if (!curpeers->peers_fe->srv) {
777 /* Remove the newly allocated peer. */
778 if (newpeer != curpeers->local) {
779 struct peer *p;
780
781 p = curpeers->remote;
782 curpeers->remote = curpeers->remote->next;
783 free(p->id);
784 free(p);
785 }
Emeric Brun32da3c42010-09-23 18:39:19 +0200786 goto out;
Frédéric Lécaille8ba10fe2020-04-03 09:43:47 +0200787 }
Emeric Brun32da3c42010-09-23 18:39:19 +0200788
Frédéric Lécaille76d2cef2019-02-12 19:12:32 +0100789 /* If the peer address has just been parsed, let's copy it to <newpeer>
790 * and initializes ->proto.
791 */
792 if (peer || !local_peer) {
793 newpeer->addr = curpeers->peers_fe->srv->addr;
794 newpeer->proto = protocol_by_family(newpeer->addr.ss_family);
795 }
796
Willy Tarreaua261e9b2016-12-22 20:44:00 +0100797 newpeer->xprt = xprt_get(XPRT_RAW);
Willy Tarreaud02394b2012-05-11 18:32:18 +0200798 newpeer->sock_init_arg = NULL;
Christopher Faulet2a944ee2017-11-07 10:42:54 +0100799 HA_SPIN_INIT(&newpeer->lock);
Willy Tarreau26d8c592012-05-07 18:12:14 +0200800
Frédéric Lécaille76d2cef2019-02-12 19:12:32 +0100801 newpeer->srv = curpeers->peers_fe->srv;
802 if (!newpeer->local)
Frédéric Lécaille6617e762018-04-25 15:13:38 +0200803 goto out;
804
Frédéric Lécaille355b2032019-01-11 14:06:12 +0100805 /* The lines above are reserved to "peer" lines. */
806 if (*args[0] == 's')
Frédéric Lécaille4ba51982018-04-25 15:32:18 +0200807 goto out;
Emeric Brun32da3c42010-09-23 18:39:19 +0200808
Frédéric Lécaille355b2032019-01-11 14:06:12 +0100809 bind_conf = bind_conf_uniq_alloc(curpeers->peers_fe, file, linenum, args[2], xprt_get(XPRT_RAW));
Frédéric Lécaille16e49102019-01-11 11:27:16 +0100810
Frédéric Lécaille91694d52019-01-11 11:43:53 +0100811 if (!str2listener(args[2], curpeers->peers_fe, bind_conf, file, linenum, &errmsg)) {
812 if (errmsg && *errmsg) {
813 indent_msg(&errmsg, 2);
814 ha_alert("parsing [%s:%d] : '%s %s' : %s\n", file, linenum, args[0], args[1], errmsg);
Frédéric Lécaille16e49102019-01-11 11:27:16 +0100815 }
Frédéric Lécaille91694d52019-01-11 11:43:53 +0100816 else
817 ha_alert("parsing [%s:%d] : '%s %s' : error encountered while parsing listening address %s.\n",
818 file, linenum, args[0], args[1], args[2]);
819 err_code |= ERR_FATAL;
820 goto out;
821 }
Frédéric Lécaille355b2032019-01-11 14:06:12 +0100822
823 l = LIST_ELEM(bind_conf->listeners.n, typeof(l), by_bind);
824 l->maxaccept = 1;
Frédéric Lécaille355b2032019-01-11 14:06:12 +0100825 l->accept = session_accept_fd;
826 l->analysers |= curpeers->peers_fe->fe_req_ana;
827 l->default_target = curpeers->peers_fe->default_target;
828 l->options |= LI_O_UNLIMITED; /* don't make the peers subject to global limits */
Willy Tarreau18215cb2019-02-27 16:25:28 +0100829 global.maxsock++; /* for the listening socket */
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +0100830 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100831 else if (strcmp(args[0], "table") == 0) {
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +0100832 struct stktable *t, *other;
833 char *id;
Frédéric Lécaillec02766a2019-03-20 15:06:55 +0100834 size_t prefix_len;
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +0100835
836 /* Line number and peer ID are updated only if this peer is the local one. */
837 if (init_peers_frontend(file, -1, NULL, curpeers) != 0) {
838 err_code |= ERR_ALERT | ERR_ABORT;
839 goto out;
840 }
841
842 other = stktable_find_by_name(args[1]);
843 if (other) {
844 ha_alert("parsing [%s:%d] : stick-table name '%s' conflicts with table declared in %s '%s' at %s:%d.\n",
845 file, linenum, args[1],
846 other->proxy ? proxy_cap_str(other->proxy->cap) : "peers",
847 other->proxy ? other->id : other->peers.p->id,
848 other->conf.file, other->conf.line);
849 err_code |= ERR_ALERT | ERR_FATAL;
850 goto out;
851 }
852
Frédéric Lécaillec02766a2019-03-20 15:06:55 +0100853 /* Build the stick-table name, concatenating the "peers" section name
854 * followed by a '/' character and the table name argument.
855 */
856 chunk_reset(&trash);
Frédéric Lécaille7fcc24d2019-03-20 15:09:45 +0100857 if (!chunk_strcpy(&trash, curpeers->id)) {
Frédéric Lécaillec02766a2019-03-20 15:06:55 +0100858 ha_alert("parsing [%s:%d]: '%s %s' : stick-table name too long.\n",
859 file, linenum, args[0], args[1]);
860 err_code |= ERR_ALERT | ERR_FATAL;
861 goto out;
862 }
863
864 prefix_len = trash.data;
Frédéric Lécaille7fcc24d2019-03-20 15:09:45 +0100865 if (!chunk_memcat(&trash, "/", 1) || !chunk_strcat(&trash, args[1])) {
Frédéric Lécaillec02766a2019-03-20 15:06:55 +0100866 ha_alert("parsing [%s:%d]: '%s %s' : stick-table name too long.\n",
867 file, linenum, args[0], args[1]);
868 err_code |= ERR_ALERT | ERR_FATAL;
869 goto out;
870 }
871
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +0100872 t = calloc(1, sizeof *t);
Frédéric Lécaillec02766a2019-03-20 15:06:55 +0100873 id = strdup(trash.area);
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +0100874 if (!t || !id) {
875 ha_alert("parsing [%s:%d]: '%s %s' : memory allocation failed\n",
876 file, linenum, args[0], args[1]);
Eric Salama1aab9112020-09-18 11:55:17 +0200877 free(t);
878 free(id);
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +0100879 err_code |= ERR_ALERT | ERR_FATAL;
880 goto out;
881 }
882
Frédéric Lécaillec02766a2019-03-20 15:06:55 +0100883 err_code |= parse_stick_table(file, linenum, args, t, id, id + prefix_len, curpeers);
Eric Salama1aab9112020-09-18 11:55:17 +0200884 if (err_code & ERR_FATAL) {
885 free(t);
886 free(id);
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +0100887 goto out;
Eric Salama1aab9112020-09-18 11:55:17 +0200888 }
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +0100889
890 stktable_store_name(t);
891 t->next = stktables_list;
892 stktables_list = t;
893 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100894 else if (strcmp(args[0], "disabled") == 0) { /* disables this peers section */
Willy Tarreau1ad64ac2020-09-24 08:48:08 +0200895 curpeers->disabled = 1;
Willy Tarreau77e4bd12015-05-01 20:02:17 +0200896 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100897 else if (strcmp(args[0], "enabled") == 0) { /* enables this peers section (used to revert a disabled default) */
Willy Tarreau1ad64ac2020-09-24 08:48:08 +0200898 curpeers->disabled = 0;
Willy Tarreau77e4bd12015-05-01 20:02:17 +0200899 }
Emeric Brun32da3c42010-09-23 18:39:19 +0200900 else if (*args[0] != 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100901 ha_alert("parsing [%s:%d] : unknown keyword '%s' in '%s' section\n", file, linenum, args[0], cursection);
Emeric Brun32da3c42010-09-23 18:39:19 +0200902 err_code |= ERR_ALERT | ERR_FATAL;
903 goto out;
904 }
905
906out:
Willy Tarreau902636f2013-03-10 19:44:48 +0100907 free(errmsg);
Emeric Brun32da3c42010-09-23 18:39:19 +0200908 return err_code;
909}
910
Baptiste Assmann325137d2015-04-13 23:40:55 +0200911/*
William Lallemand51097192015-04-14 16:35:22 +0200912 * Parse a line in a <listen>, <frontend> or <backend> section.
Simon Horman0d16a402015-01-30 11:22:58 +0900913 * Returns the error code, 0 if OK, or any combination of :
914 * - ERR_ABORT: must abort ASAP
915 * - ERR_FATAL: we can continue parsing but not start the service
916 * - ERR_WARN: a warning has been emitted
917 * - ERR_ALERT: an alert has been emitted
918 * Only the two first ones can stop processing, the two others are just
919 * indicators.
920 */
921int cfg_parse_mailers(const char *file, int linenum, char **args, int kwm)
922{
923 static struct mailers *curmailers = NULL;
924 struct mailer *newmailer = NULL;
925 const char *err;
926 int err_code = 0;
927 char *errmsg = NULL;
928
929 if (strcmp(args[0], "mailers") == 0) { /* new mailers section */
930 if (!*args[1]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100931 ha_alert("parsing [%s:%d] : missing name for mailers section.\n", file, linenum);
Simon Horman0d16a402015-01-30 11:22:58 +0900932 err_code |= ERR_ALERT | ERR_ABORT;
933 goto out;
934 }
935
936 err = invalid_char(args[1]);
937 if (err) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100938 ha_alert("parsing [%s:%d] : character '%c' is not permitted in '%s' name '%s'.\n",
939 file, linenum, *err, args[0], args[1]);
Simon Horman0d16a402015-01-30 11:22:58 +0900940 err_code |= ERR_ALERT | ERR_ABORT;
941 goto out;
942 }
943
944 for (curmailers = mailers; curmailers != NULL; curmailers = curmailers->next) {
945 /*
946 * If there are two proxies with the same name only following
947 * combinations are allowed:
948 */
949 if (strcmp(curmailers->id, args[1]) == 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100950 ha_alert("Parsing [%s:%d]: mailers section '%s' has the same name as another mailers section declared at %s:%d.\n",
951 file, linenum, args[1], curmailers->conf.file, curmailers->conf.line);
Willy Tarreau911fa2e2015-05-26 10:35:50 +0200952 err_code |= ERR_ALERT | ERR_FATAL;
Simon Horman0d16a402015-01-30 11:22:58 +0900953 }
954 }
955
Vincent Bernat02779b62016-04-03 13:48:43 +0200956 if ((curmailers = calloc(1, sizeof(*curmailers))) == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100957 ha_alert("parsing [%s:%d] : out of memory.\n", file, linenum);
Simon Horman0d16a402015-01-30 11:22:58 +0900958 err_code |= ERR_ALERT | ERR_ABORT;
959 goto out;
960 }
961
962 curmailers->next = mailers;
963 mailers = curmailers;
964 curmailers->conf.file = strdup(file);
965 curmailers->conf.line = linenum;
966 curmailers->id = strdup(args[1]);
Pieter Baauw235fcfc2016-02-13 15:33:40 +0100967 curmailers->timeout.mail = DEF_MAILALERTTIME;/* XXX: Would like to Skip to the next alert, if any, ASAP.
968 * But need enough time so that timeouts don't occur
969 * during tcp procssing. For now just us an arbitrary default. */
Simon Horman0d16a402015-01-30 11:22:58 +0900970 }
971 else if (strcmp(args[0], "mailer") == 0) { /* mailer definition */
972 struct sockaddr_storage *sk;
973 int port1, port2;
974 struct protocol *proto;
975
976 if (!*args[2]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100977 ha_alert("parsing [%s:%d] : '%s' expects <name> and <addr>[:<port>] as arguments.\n",
978 file, linenum, args[0]);
Simon Horman0d16a402015-01-30 11:22:58 +0900979 err_code |= ERR_ALERT | ERR_FATAL;
980 goto out;
981 }
982
983 err = invalid_char(args[1]);
984 if (err) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100985 ha_alert("parsing [%s:%d] : character '%c' is not permitted in server name '%s'.\n",
986 file, linenum, *err, args[1]);
Simon Horman0d16a402015-01-30 11:22:58 +0900987 err_code |= ERR_ALERT | ERR_FATAL;
988 goto out;
989 }
990
Vincent Bernat02779b62016-04-03 13:48:43 +0200991 if ((newmailer = calloc(1, sizeof(*newmailer))) == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100992 ha_alert("parsing [%s:%d] : out of memory.\n", file, linenum);
Simon Horman0d16a402015-01-30 11:22:58 +0900993 err_code |= ERR_ALERT | ERR_ABORT;
994 goto out;
995 }
996
997 /* the mailers are linked backwards first */
998 curmailers->count++;
999 newmailer->next = curmailers->mailer_list;
1000 curmailers->mailer_list = newmailer;
1001 newmailer->mailers = curmailers;
1002 newmailer->conf.file = strdup(file);
1003 newmailer->conf.line = linenum;
1004
1005 newmailer->id = strdup(args[1]);
1006
Willy Tarreau5fc93282020-09-16 18:25:03 +02001007 sk = str2sa_range(args[2], NULL, &port1, &port2, NULL, &proto,
Willy Tarreau65ec4e32020-09-16 19:17:08 +02001008 &errmsg, NULL, NULL,
1009 PA_O_RESOLVE | PA_O_PORT_OK | PA_O_PORT_MAND | PA_O_STREAM | PA_O_XPRT | PA_O_CONNECT);
Simon Horman0d16a402015-01-30 11:22:58 +09001010 if (!sk) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001011 ha_alert("parsing [%s:%d] : '%s %s' : %s\n", file, linenum, args[0], args[1], errmsg);
Simon Horman0d16a402015-01-30 11:22:58 +09001012 err_code |= ERR_ALERT | ERR_FATAL;
1013 goto out;
1014 }
1015
Willy Tarreau65ec4e32020-09-16 19:17:08 +02001016 if (proto->sock_prot != IPPROTO_TCP) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001017 ha_alert("parsing [%s:%d] : '%s %s' : TCP not supported for this address family.\n",
1018 file, linenum, args[0], args[1]);
Simon Horman0d16a402015-01-30 11:22:58 +09001019 err_code |= ERR_ALERT | ERR_FATAL;
1020 goto out;
1021 }
1022
Simon Horman0d16a402015-01-30 11:22:58 +09001023 newmailer->addr = *sk;
1024 newmailer->proto = proto;
Willy Tarreaua261e9b2016-12-22 20:44:00 +01001025 newmailer->xprt = xprt_get(XPRT_RAW);
Simon Horman0d16a402015-01-30 11:22:58 +09001026 newmailer->sock_init_arg = NULL;
Pieter Baauw235fcfc2016-02-13 15:33:40 +01001027 }
1028 else if (strcmp(args[0], "timeout") == 0) {
1029 if (!*args[1]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001030 ha_alert("parsing [%s:%d] : '%s' expects 'mail' and <time> as arguments.\n",
1031 file, linenum, args[0]);
Pieter Baauw235fcfc2016-02-13 15:33:40 +01001032 err_code |= ERR_ALERT | ERR_FATAL;
1033 goto out;
1034 }
1035 else if (strcmp(args[1], "mail") == 0) {
1036 const char *res;
1037 unsigned int timeout_mail;
1038 if (!*args[2]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001039 ha_alert("parsing [%s:%d] : '%s %s' expects <time> as argument.\n",
1040 file, linenum, args[0], args[1]);
Pieter Baauw235fcfc2016-02-13 15:33:40 +01001041 err_code |= ERR_ALERT | ERR_FATAL;
1042 goto out;
1043 }
1044 res = parse_time_err(args[2], &timeout_mail, TIME_UNIT_MS);
Willy Tarreau9faebe32019-06-07 19:00:37 +02001045 if (res == PARSE_TIME_OVER) {
1046 ha_alert("parsing [%s:%d]: timer overflow in argument <%s> to <%s %s>, maximum value is 2147483647 ms (~24.8 days).\n",
1047 file, linenum, args[2], args[0], args[1]);
1048 err_code |= ERR_ALERT | ERR_FATAL;
1049 goto out;
1050 }
1051 else if (res == PARSE_TIME_UNDER) {
1052 ha_alert("parsing [%s:%d]: timer underflow in argument <%s> to <%s %s>, minimum non-null value is 1 ms.\n",
1053 file, linenum, args[2], args[0], args[1]);
Pieter Baauw235fcfc2016-02-13 15:33:40 +01001054 err_code |= ERR_ALERT | ERR_FATAL;
1055 goto out;
1056 }
Willy Tarreau9faebe32019-06-07 19:00:37 +02001057 else if (res) {
1058 ha_alert("parsing [%s:%d]: unexpected character '%c' in argument to <%s %s>.\n",
1059 file, linenum, *res, args[0], args[1]);
Pieter Baauw235fcfc2016-02-13 15:33:40 +01001060 err_code |= ERR_ALERT | ERR_FATAL;
1061 goto out;
1062 }
1063 curmailers->timeout.mail = timeout_mail;
1064 } else {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001065 ha_alert("parsing [%s:%d] : '%s' expects 'mail' and <time> as arguments got '%s'.\n",
Pieter Baauw235fcfc2016-02-13 15:33:40 +01001066 file, linenum, args[0], args[1]);
1067 err_code |= ERR_ALERT | ERR_FATAL;
1068 goto out;
1069 }
1070 }
Simon Horman0d16a402015-01-30 11:22:58 +09001071 else if (*args[0] != 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001072 ha_alert("parsing [%s:%d] : unknown keyword '%s' in '%s' section\n", file, linenum, args[0], cursection);
Simon Horman0d16a402015-01-30 11:22:58 +09001073 err_code |= ERR_ALERT | ERR_FATAL;
1074 goto out;
1075 }
1076
1077out:
1078 free(errmsg);
1079 return err_code;
1080}
1081
Willy Tarreau3a1f5fd2018-11-11 15:40:36 +01001082void free_email_alert(struct proxy *p)
Simon Horman9dc49962015-01-30 11:22:59 +09001083{
Willy Tarreau61cfdf42021-02-20 10:46:51 +01001084 ha_free(&p->email_alert.mailers.name);
1085 ha_free(&p->email_alert.from);
1086 ha_free(&p->email_alert.to);
1087 ha_free(&p->email_alert.myhostname);
Simon Horman9dc49962015-01-30 11:22:59 +09001088}
1089
Willy Tarreaubaaee002006-06-26 02:48:02 +02001090
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001091int
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +01001092cfg_parse_netns(const char *file, int linenum, char **args, int kwm)
1093{
Willy Tarreaue5733232019-05-22 19:24:06 +02001094#ifdef USE_NS
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +01001095 const char *err;
1096 const char *item = args[0];
1097
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001098 if (strcmp(item, "namespace_list") == 0) {
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +01001099 return 0;
1100 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001101 else if (strcmp(item, "namespace") == 0) {
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +01001102 size_t idx = 1;
1103 const char *current;
1104 while (*(current = args[idx++])) {
1105 err = invalid_char(current);
1106 if (err) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001107 ha_alert("parsing [%s:%d]: character '%c' is not permitted in '%s' name '%s'.\n",
1108 file, linenum, *err, item, current);
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +01001109 return ERR_ALERT | ERR_FATAL;
1110 }
1111
1112 if (netns_store_lookup(current, strlen(current))) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001113 ha_alert("parsing [%s:%d]: Namespace '%s' is already added.\n",
1114 file, linenum, current);
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +01001115 return ERR_ALERT | ERR_FATAL;
1116 }
1117 if (!netns_store_insert(current)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001118 ha_alert("parsing [%s:%d]: Cannot open namespace '%s'.\n",
1119 file, linenum, current);
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +01001120 return ERR_ALERT | ERR_FATAL;
1121 }
1122 }
1123 }
1124
1125 return 0;
1126#else
Christopher Faulet767a84b2017-11-24 16:50:31 +01001127 ha_alert("parsing [%s:%d]: namespace support is not compiled in.",
1128 file, linenum);
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +01001129 return ERR_ALERT | ERR_FATAL;
1130#endif
1131}
1132
1133int
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001134cfg_parse_users(const char *file, int linenum, char **args, int kwm)
1135{
1136
1137 int err_code = 0;
1138 const char *err;
1139
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001140 if (strcmp(args[0], "userlist") == 0) { /* new userlist */
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001141 struct userlist *newul;
1142
1143 if (!*args[1]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001144 ha_alert("parsing [%s:%d]: '%s' expects <name> as arguments.\n",
1145 file, linenum, args[0]);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001146 err_code |= ERR_ALERT | ERR_FATAL;
1147 goto out;
1148 }
William Lallemand6e62fb62015-04-28 16:55:23 +02001149 if (alertif_too_many_args(1, file, linenum, args, &err_code))
1150 goto out;
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001151
1152 err = invalid_char(args[1]);
1153 if (err) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001154 ha_alert("parsing [%s:%d]: character '%c' is not permitted in '%s' name '%s'.\n",
1155 file, linenum, *err, args[0], args[1]);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001156 err_code |= ERR_ALERT | ERR_FATAL;
1157 goto out;
1158 }
1159
1160 for (newul = userlist; newul; newul = newul->next)
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001161 if (strcmp(newul->name, args[1]) == 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001162 ha_warning("parsing [%s:%d]: ignoring duplicated userlist '%s'.\n",
1163 file, linenum, args[1]);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001164 err_code |= ERR_WARN;
1165 goto out;
1166 }
1167
Vincent Bernat02779b62016-04-03 13:48:43 +02001168 newul = calloc(1, sizeof(*newul));
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001169 if (!newul) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001170 ha_alert("parsing [%s:%d]: out of memory.\n", file, linenum);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001171 err_code |= ERR_ALERT | ERR_ABORT;
1172 goto out;
1173 }
1174
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001175 newul->name = strdup(args[1]);
Thierry FOURNIER9eec0a62014-01-22 18:38:02 +01001176 if (!newul->name) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001177 ha_alert("parsing [%s:%d]: out of memory.\n", file, linenum);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001178 err_code |= ERR_ALERT | ERR_ABORT;
David Carlier97880bb2016-04-08 10:35:26 +01001179 free(newul);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001180 goto out;
1181 }
1182
1183 newul->next = userlist;
1184 userlist = newul;
1185
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001186 } else if (strcmp(args[0], "group") == 0) { /* new group */
Thierry FOURNIER9eec0a62014-01-22 18:38:02 +01001187 int cur_arg;
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001188 const char *err;
Thierry FOURNIER9eec0a62014-01-22 18:38:02 +01001189 struct auth_groups *ag;
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001190
1191 if (!*args[1]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001192 ha_alert("parsing [%s:%d]: '%s' expects <name> as arguments.\n",
1193 file, linenum, args[0]);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001194 err_code |= ERR_ALERT | ERR_FATAL;
1195 goto out;
1196 }
1197
1198 err = invalid_char(args[1]);
1199 if (err) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001200 ha_alert("parsing [%s:%d]: character '%c' is not permitted in '%s' name '%s'.\n",
1201 file, linenum, *err, args[0], args[1]);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001202 err_code |= ERR_ALERT | ERR_FATAL;
1203 goto out;
1204 }
1205
William Lallemand4ac9f542015-05-28 18:03:51 +02001206 if (!userlist)
1207 goto out;
1208
Thierry FOURNIER9eec0a62014-01-22 18:38:02 +01001209 for (ag = userlist->groups; ag; ag = ag->next)
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001210 if (strcmp(ag->name, args[1]) == 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001211 ha_warning("parsing [%s:%d]: ignoring duplicated group '%s' in userlist '%s'.\n",
1212 file, linenum, args[1], userlist->name);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001213 err_code |= ERR_ALERT;
1214 goto out;
1215 }
1216
Thierry FOURNIER9eec0a62014-01-22 18:38:02 +01001217 ag = calloc(1, sizeof(*ag));
1218 if (!ag) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001219 ha_alert("parsing [%s:%d]: out of memory.\n", file, linenum);
Thierry FOURNIER9eec0a62014-01-22 18:38:02 +01001220 err_code |= ERR_ALERT | ERR_ABORT;
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001221 goto out;
1222 }
1223
Thierry FOURNIER9eec0a62014-01-22 18:38:02 +01001224 ag->name = strdup(args[1]);
David Carlier70d60452016-08-22 23:27:42 +01001225 if (!ag->name) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001226 ha_alert("parsing [%s:%d]: out of memory.\n", file, linenum);
Thierry FOURNIER9eec0a62014-01-22 18:38:02 +01001227 err_code |= ERR_ALERT | ERR_ABORT;
David Carlier70d60452016-08-22 23:27:42 +01001228 free(ag);
Thierry FOURNIER9eec0a62014-01-22 18:38:02 +01001229 goto out;
1230 }
1231
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001232 cur_arg = 2;
1233
1234 while (*args[cur_arg]) {
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001235 if (strcmp(args[cur_arg], "users") == 0) {
Thierry FOURNIER9eec0a62014-01-22 18:38:02 +01001236 ag->groupusers = strdup(args[cur_arg + 1]);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001237 cur_arg += 2;
1238 continue;
1239 } else {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001240 ha_alert("parsing [%s:%d]: '%s' only supports 'users' option.\n",
1241 file, linenum, args[0]);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001242 err_code |= ERR_ALERT | ERR_FATAL;
David Carlier70d60452016-08-22 23:27:42 +01001243 free(ag->groupusers);
1244 free(ag->name);
1245 free(ag);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001246 goto out;
1247 }
1248 }
1249
Thierry FOURNIER9eec0a62014-01-22 18:38:02 +01001250 ag->next = userlist->groups;
1251 userlist->groups = ag;
1252
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001253 } else if (strcmp(args[0], "user") == 0) { /* new user */
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001254 struct auth_users *newuser;
1255 int cur_arg;
1256
1257 if (!*args[1]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001258 ha_alert("parsing [%s:%d]: '%s' expects <name> as arguments.\n",
1259 file, linenum, args[0]);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001260 err_code |= ERR_ALERT | ERR_FATAL;
1261 goto out;
1262 }
William Lallemand4ac9f542015-05-28 18:03:51 +02001263 if (!userlist)
1264 goto out;
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001265
1266 for (newuser = userlist->users; newuser; newuser = newuser->next)
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001267 if (strcmp(newuser->user, args[1]) == 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001268 ha_warning("parsing [%s:%d]: ignoring duplicated user '%s' in userlist '%s'.\n",
1269 file, linenum, args[1], userlist->name);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001270 err_code |= ERR_ALERT;
1271 goto out;
1272 }
1273
Vincent Bernat02779b62016-04-03 13:48:43 +02001274 newuser = calloc(1, sizeof(*newuser));
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001275 if (!newuser) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001276 ha_alert("parsing [%s:%d]: out of memory.\n", file, linenum);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001277 err_code |= ERR_ALERT | ERR_ABORT;
1278 goto out;
1279 }
1280
1281 newuser->user = strdup(args[1]);
1282
1283 newuser->next = userlist->users;
1284 userlist->users = newuser;
1285
1286 cur_arg = 2;
1287
1288 while (*args[cur_arg]) {
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001289 if (strcmp(args[cur_arg], "password") == 0) {
Willy Tarreaue5733232019-05-22 19:24:06 +02001290#ifdef USE_LIBCRYPT
Cyril Bonté1a0191d2014-08-29 20:20:02 +02001291 if (!crypt("", args[cur_arg + 1])) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001292 ha_alert("parsing [%s:%d]: the encrypted password used for user '%s' is not supported by crypt(3).\n",
1293 file, linenum, newuser->user);
Cyril Bonté1a0191d2014-08-29 20:20:02 +02001294 err_code |= ERR_ALERT | ERR_FATAL;
1295 goto out;
1296 }
1297#else
Christopher Faulet767a84b2017-11-24 16:50:31 +01001298 ha_warning("parsing [%s:%d]: no crypt(3) support compiled, encrypted passwords will not work.\n",
1299 file, linenum);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001300 err_code |= ERR_ALERT;
1301#endif
1302 newuser->pass = strdup(args[cur_arg + 1]);
1303 cur_arg += 2;
1304 continue;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001305 } else if (strcmp(args[cur_arg], "insecure-password") == 0) {
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001306 newuser->pass = strdup(args[cur_arg + 1]);
1307 newuser->flags |= AU_O_INSECURE;
1308 cur_arg += 2;
1309 continue;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001310 } else if (strcmp(args[cur_arg], "groups") == 0) {
Thierry FOURNIER9eec0a62014-01-22 18:38:02 +01001311 newuser->u.groups_names = strdup(args[cur_arg + 1]);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001312 cur_arg += 2;
1313 continue;
1314 } else {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001315 ha_alert("parsing [%s:%d]: '%s' only supports 'password', 'insecure-password' and 'groups' options.\n",
1316 file, linenum, args[0]);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001317 err_code |= ERR_ALERT | ERR_FATAL;
1318 goto out;
1319 }
1320 }
1321 } else {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001322 ha_alert("parsing [%s:%d]: unknown keyword '%s' in '%s' section\n", file, linenum, args[0], "users");
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01001323 err_code |= ERR_ALERT | ERR_FATAL;
1324 }
1325
1326out:
1327 return err_code;
1328}
Willy Tarreaubaaee002006-06-26 02:48:02 +02001329
Christopher Faulet79bdef32016-11-04 22:36:15 +01001330int
1331cfg_parse_scope(const char *file, int linenum, char *line)
1332{
1333 char *beg, *end, *scope = NULL;
1334 int err_code = 0;
1335 const char *err;
1336
1337 beg = line + 1;
1338 end = strchr(beg, ']');
1339
1340 /* Detect end of scope declaration */
1341 if (!end || end == beg) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001342 ha_alert("parsing [%s:%d] : empty scope name is forbidden.\n",
1343 file, linenum);
Christopher Faulet79bdef32016-11-04 22:36:15 +01001344 err_code |= ERR_ALERT | ERR_FATAL;
1345 goto out;
1346 }
1347
1348 /* Get scope name and check its validity */
1349 scope = my_strndup(beg, end-beg);
1350 err = invalid_char(scope);
1351 if (err) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001352 ha_alert("parsing [%s:%d] : character '%c' is not permitted in a scope name.\n",
1353 file, linenum, *err);
Christopher Faulet79bdef32016-11-04 22:36:15 +01001354 err_code |= ERR_ALERT | ERR_ABORT;
1355 goto out;
1356 }
1357
1358 /* Be sure to have a scope declaration alone on its line */
1359 line = end+1;
1360 while (isspace((unsigned char)*line))
1361 line++;
1362 if (*line && *line != '#' && *line != '\n' && *line != '\r') {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001363 ha_alert("parsing [%s:%d] : character '%c' is not permitted after scope declaration.\n",
1364 file, linenum, *line);
Christopher Faulet79bdef32016-11-04 22:36:15 +01001365 err_code |= ERR_ALERT | ERR_ABORT;
1366 goto out;
1367 }
1368
1369 /* We have a valid scope declaration, save it */
1370 free(cfg_scope);
1371 cfg_scope = scope;
1372 scope = NULL;
1373
1374 out:
1375 free(scope);
1376 return err_code;
1377}
1378
Frédéric Lécaillea41d5312018-01-29 12:05:07 +01001379int
1380cfg_parse_track_sc_num(unsigned int *track_sc_num,
1381 const char *arg, const char *end, char **errmsg)
1382{
1383 const char *p;
1384 unsigned int num;
1385
1386 p = arg;
1387 num = read_uint64(&arg, end);
1388
1389 if (arg != end) {
1390 memprintf(errmsg, "Wrong track-sc number '%s'", p);
1391 return -1;
1392 }
1393
1394 if (num >= MAX_SESS_STKCTR) {
1395 memprintf(errmsg, "%u track-sc number exceeding "
1396 "%d (MAX_SESS_STKCTR-1) value", num, MAX_SESS_STKCTR - 1);
1397 return -1;
1398 }
1399
1400 *track_sc_num = num;
1401 return 0;
1402}
1403
Willy Tarreaubaaee002006-06-26 02:48:02 +02001404/*
1405 * This function reads and parses the configuration file given in the argument.
Willy Tarreau058e9072009-07-20 09:30:05 +02001406 * Returns the error code, 0 if OK, or any combination of :
1407 * - ERR_ABORT: must abort ASAP
1408 * - ERR_FATAL: we can continue parsing but not start the service
1409 * - ERR_WARN: a warning has been emitted
1410 * - ERR_ALERT: an alert has been emitted
1411 * Only the two first ones can stop processing, the two others are just
1412 * indicators.
Willy Tarreaubaaee002006-06-26 02:48:02 +02001413 */
Willy Tarreaub17916e2006-10-15 15:17:57 +02001414int readcfgfile(const char *file)
Willy Tarreaubaaee002006-06-26 02:48:02 +02001415{
William Lallemand64e84512015-05-12 14:25:37 +02001416 char *thisline;
1417 int linesize = LINESIZE;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001418 FILE *f;
1419 int linenum = 0;
Willy Tarreau058e9072009-07-20 09:30:05 +02001420 int err_code = 0;
William Lallemandd2ff56d2017-10-16 11:06:50 +02001421 struct cfg_section *cs = NULL, *pcs = NULL;
Thierry FOURNIERfa45f1d2014-03-18 13:54:18 +01001422 struct cfg_section *ics;
William Lallemand64e84512015-05-12 14:25:37 +02001423 int readbytes = 0;
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001424 char *outline = NULL;
1425 size_t outlen = 0;
1426 size_t outlinesize = 0;
Willy Tarreau32234e72020-06-16 17:14:33 +02001427 int fatal = 0;
Tim Duesterhus2fd5bdb2020-06-22 22:57:45 +02001428 int missing_lf = -1;
Willy Tarreau4b103022021-02-12 17:59:10 +01001429 int nested_cond_lvl = 0;
1430 enum nested_cond_state nested_conds[MAXNESTEDCONDS];
William Lallemand64e84512015-05-12 14:25:37 +02001431
1432 if ((thisline = malloc(sizeof(*thisline) * linesize)) == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001433 ha_alert("parsing [%s] : out of memory.\n", file);
William Lallemand64e84512015-05-12 14:25:37 +02001434 return -1;
1435 }
Thierry FOURNIERfa45f1d2014-03-18 13:54:18 +01001436
David Carlier97880bb2016-04-08 10:35:26 +01001437 if ((f=fopen(file,"r")) == NULL) {
1438 free(thisline);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001439 return -1;
David Carlier97880bb2016-04-08 10:35:26 +01001440 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02001441
William Lallemandb2f07452015-05-12 14:27:13 +02001442next_line:
William Lallemand64e84512015-05-12 14:25:37 +02001443 while (fgets(thisline + readbytes, linesize - readbytes, f) != NULL) {
Willy Tarreau3842f002009-06-14 11:39:52 +02001444 int arg, kwm = KWM_STD;
Krzysztof Piotr Oledzkie6bbd742007-11-01 00:33:12 +01001445 char *end;
1446 char *args[MAX_LINE_ARGS + 1];
1447 char *line = thisline;
1448
Tim Duesterhus2fd5bdb2020-06-22 22:57:45 +02001449 if (missing_lf != -1) {
Tim Duesterhusf92afb72020-08-18 22:00:04 +02001450 ha_alert("parsing [%s:%d]: Stray NUL character at position %d.\n",
1451 file, linenum, (missing_lf + 1));
1452 err_code |= ERR_ALERT | ERR_FATAL;
Tim Duesterhus2fd5bdb2020-06-22 22:57:45 +02001453 missing_lf = -1;
Tim Duesterhusf92afb72020-08-18 22:00:04 +02001454 break;
Tim Duesterhus2fd5bdb2020-06-22 22:57:45 +02001455 }
1456
Willy Tarreaubaaee002006-06-26 02:48:02 +02001457 linenum++;
1458
Willy Tarreau32234e72020-06-16 17:14:33 +02001459 if (fatal >= 50) {
1460 ha_alert("parsing [%s:%d]: too many fatal errors (%d), stopping now.\n", file, linenum, fatal);
1461 break;
1462 }
1463
Willy Tarreaubaaee002006-06-26 02:48:02 +02001464 end = line + strlen(line);
1465
William Lallemand64e84512015-05-12 14:25:37 +02001466 if (end-line == linesize-1 && *(end-1) != '\n') {
Krzysztof Piotr Oledzkie6bbd742007-11-01 00:33:12 +01001467 /* Check if we reached the limit and the last char is not \n.
1468 * Watch out for the last line without the terminating '\n'!
1469 */
William Lallemand64e84512015-05-12 14:25:37 +02001470 char *newline;
1471 int newlinesize = linesize * 2;
1472
1473 newline = realloc(thisline, sizeof(*thisline) * newlinesize);
1474 if (newline == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001475 ha_alert("parsing [%s:%d]: line too long, cannot allocate memory.\n",
1476 file, linenum);
William Lallemand64e84512015-05-12 14:25:37 +02001477 err_code |= ERR_ALERT | ERR_FATAL;
Willy Tarreau32234e72020-06-16 17:14:33 +02001478 fatal++;
Willy Tarreau40cb26f2020-06-25 09:37:54 +02001479 linenum--;
William Lallemand64e84512015-05-12 14:25:37 +02001480 continue;
1481 }
1482
1483 readbytes = linesize - 1;
1484 linesize = newlinesize;
1485 thisline = newline;
Willy Tarreau40cb26f2020-06-25 09:37:54 +02001486 linenum--;
William Lallemand64e84512015-05-12 14:25:37 +02001487 continue;
Krzysztof Piotr Oledzkie6bbd742007-11-01 00:33:12 +01001488 }
1489
William Lallemand64e84512015-05-12 14:25:37 +02001490 readbytes = 0;
1491
Willy Tarreau08488f62020-06-26 17:24:54 +02001492 if (end > line && *(end-1) == '\n') {
Tim Duesterhus70f58992020-06-22 22:57:44 +02001493 /* kill trailing LF */
1494 *(end - 1) = 0;
1495 }
Tim Duesterhus2fd5bdb2020-06-22 22:57:45 +02001496 else {
1497 /* mark this line as truncated */
1498 missing_lf = end - line;
1499 }
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001500
Willy Tarreaubaaee002006-06-26 02:48:02 +02001501 /* skip leading spaces */
Willy Tarreau8f8e6452007-06-17 21:51:38 +02001502 while (isspace((unsigned char)*line))
Willy Tarreaubaaee002006-06-26 02:48:02 +02001503 line++;
William Lallemandf9873ba2015-05-05 17:37:14 +02001504
Joseph Herlanta14c03e2018-11-15 14:04:19 -08001505 if (*line == '[') {/* This is the beginning if a scope */
Christopher Faulet79bdef32016-11-04 22:36:15 +01001506 err_code |= cfg_parse_scope(file, linenum, line);
1507 goto next_line;
1508 }
1509
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001510 while (1) {
1511 uint32_t err;
1512 char *errptr;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001513
Willy Tarreau61dd44b2020-06-25 07:35:42 +02001514 arg = MAX_LINE_ARGS + 1;
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001515 outlen = outlinesize;
1516 err = parse_line(line, outline, &outlen, args, &arg,
1517 PARSE_OPT_ENV | PARSE_OPT_DQUOTE | PARSE_OPT_SQUOTE |
Amaury Denoyellefa41cb62020-10-01 14:32:35 +02001518 PARSE_OPT_BKSLASH | PARSE_OPT_SHARP | PARSE_OPT_WORD_EXPAND,
1519 &errptr);
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001520
1521 if (err & PARSE_ERR_QUOTE) {
Willy Tarreauc54e5ad2020-06-25 09:15:40 +02001522 size_t newpos = sanitize_for_printing(line, errptr - line, 80);
1523
1524 ha_alert("parsing [%s:%d]: unmatched quote at position %d:\n"
1525 " %s\n %*s\n", file, linenum, (int)(errptr-thisline+1), line, (int)(newpos+1), "^");
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001526 err_code |= ERR_ALERT | ERR_FATAL;
Willy Tarreau32234e72020-06-16 17:14:33 +02001527 fatal++;
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001528 goto next_line;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001529 }
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001530
1531 if (err & PARSE_ERR_BRACE) {
Willy Tarreauc54e5ad2020-06-25 09:15:40 +02001532 size_t newpos = sanitize_for_printing(line, errptr - line, 80);
1533
1534 ha_alert("parsing [%s:%d]: unmatched brace in environment variable name at position %d:\n"
1535 " %s\n %*s\n", file, linenum, (int)(errptr-thisline+1), line, (int)(newpos+1), "^");
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001536 err_code |= ERR_ALERT | ERR_FATAL;
Willy Tarreau32234e72020-06-16 17:14:33 +02001537 fatal++;
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001538 goto next_line;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001539 }
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001540
1541 if (err & PARSE_ERR_VARNAME) {
Willy Tarreauc54e5ad2020-06-25 09:15:40 +02001542 size_t newpos = sanitize_for_printing(line, errptr - line, 80);
1543
1544 ha_alert("parsing [%s:%d]: forbidden first char in environment variable name at position %d:\n"
1545 " %s\n %*s\n", file, linenum, (int)(errptr-thisline+1), line, (int)(newpos+1), "^");
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001546 err_code |= ERR_ALERT | ERR_FATAL;
Willy Tarreau32234e72020-06-16 17:14:33 +02001547 fatal++;
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001548 goto next_line;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001549 }
William Lallemandb2f07452015-05-12 14:27:13 +02001550
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001551 if (err & PARSE_ERR_HEX) {
Willy Tarreauc54e5ad2020-06-25 09:15:40 +02001552 size_t newpos = sanitize_for_printing(line, errptr - line, 80);
1553
1554 ha_alert("parsing [%s:%d]: truncated or invalid hexadecimal sequence at position %d:\n"
1555 " %s\n %*s\n", file, linenum, (int)(errptr-thisline+1), line, (int)(newpos+1), "^");
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001556 err_code |= ERR_ALERT | ERR_FATAL;
Tim Duesterhus9f658a52020-06-16 18:14:21 +02001557 fatal++;
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001558 goto next_line;
1559 }
William Lallemandb2f07452015-05-12 14:27:13 +02001560
Amaury Denoyellefa41cb62020-10-01 14:32:35 +02001561 if (err & PARSE_ERR_WRONG_EXPAND) {
1562 size_t newpos = sanitize_for_printing(line, errptr - line, 80);
1563
1564 ha_alert("parsing [%s:%d]: truncated or invalid word expansion sequence at position %d:\n"
1565 " %s\n %*s\n", file, linenum, (int)(errptr-thisline+1), line, (int)(newpos+1), "^");
1566 err_code |= ERR_ALERT | ERR_FATAL;
1567 fatal++;
1568 goto next_line;
1569 }
1570
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001571 if (err & (PARSE_ERR_TOOLARGE|PARSE_ERR_OVERLAP)) {
1572 outlinesize = (outlen + 1023) & -1024;
Ilya Shipitsin76837bc2021-01-07 22:45:13 +05001573 outline = my_realloc2(outline, outlinesize);
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001574 if (outline == NULL) {
1575 ha_alert("parsing [%s:%d]: line too long, cannot allocate memory.\n",
1576 file, linenum);
William Lallemandb2f07452015-05-12 14:27:13 +02001577 err_code |= ERR_ALERT | ERR_FATAL;
Willy Tarreau32234e72020-06-16 17:14:33 +02001578 fatal++;
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001579 goto next_line;
William Lallemandb2f07452015-05-12 14:27:13 +02001580 }
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001581 /* try again */
1582 continue;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001583 }
Willy Tarreau07d47062020-06-25 07:41:22 +02001584
1585 if (err & PARSE_ERR_TOOMANY) {
1586 /* only check this *after* being sure the output is allocated */
1587 ha_alert("parsing [%s:%d]: too many words, truncating after word %d, position %ld: <%s>.\n",
1588 file, linenum, MAX_LINE_ARGS, (long)(args[MAX_LINE_ARGS-1] - outline + 1), args[MAX_LINE_ARGS-1]);
1589 err_code |= ERR_ALERT | ERR_FATAL;
1590 fatal++;
1591 goto next_line;
1592 }
1593
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001594 /* everything's OK */
1595 break;
William Lallemandf9873ba2015-05-05 17:37:14 +02001596 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02001597
1598 /* empty line */
1599 if (!**args)
1600 continue;
1601
Willy Tarreau4b103022021-02-12 17:59:10 +01001602 /* check for config macros */
1603 if (*args[0] == '.') {
1604 if (strcmp(args[0], ".if") == 0) {
1605 nested_cond_lvl++;
1606 if (nested_cond_lvl >= MAXNESTEDCONDS) {
1607 ha_alert("parsing [%s:%d]: too many nested '.if', max is %d.\n", file, linenum, MAXNESTEDCONDS);
1608 err_code |= ERR_ALERT | ERR_FATAL | ERR_ABORT;
1609 goto err;
1610 }
1611
1612 if (nested_conds[nested_cond_lvl - 1] == NESTED_COND_IF_DROP ||
1613 nested_conds[nested_cond_lvl - 1] == NESTED_COND_IF_SKIP ||
1614 nested_conds[nested_cond_lvl - 1] == NESTED_COND_ELIF_DROP ||
1615 nested_conds[nested_cond_lvl - 1] == NESTED_COND_ELIF_SKIP ||
1616 nested_conds[nested_cond_lvl - 1] == NESTED_COND_ELSE_DROP) {
1617 nested_conds[nested_cond_lvl] = NESTED_COND_IF_SKIP;
1618 } else if (!*args[1] || *args[1] == '0') {
1619 /* empty = false */
1620 nested_conds[nested_cond_lvl] = NESTED_COND_IF_DROP;
1621 } else if (atoi(args[1]) > 0) {
1622 /* true */
1623 nested_conds[nested_cond_lvl] = NESTED_COND_IF_TAKE;
1624 } else {
1625 ha_alert("parsing [%s:%d]: unparsable conditional expression '%s'.\n", file, linenum, args[1]);
1626 err_code |= ERR_ALERT | ERR_FATAL | ERR_ABORT;
1627 goto err;
1628 }
1629 goto next_line;
1630 }
1631 else if (strcmp(args[0], ".elif") == 0) {
1632 if (!nested_cond_lvl) {
1633 ha_alert("parsing [%s:%d]: lone '.elif' with no matching '.if'.\n", file, linenum);
1634 err_code |= ERR_ALERT | ERR_FATAL | ERR_ABORT;
1635 goto err;
1636 }
1637
1638 if (nested_conds[nested_cond_lvl] == NESTED_COND_ELSE_TAKE ||
1639 nested_conds[nested_cond_lvl] == NESTED_COND_ELSE_DROP) {
1640 ha_alert("parsing [%s:%d]: '.elif' after '.else' is not permitted.\n", file, linenum);
1641 err_code |= ERR_ALERT | ERR_FATAL | ERR_ABORT;
1642 goto err;
1643 }
1644
1645 if (nested_conds[nested_cond_lvl] == NESTED_COND_IF_TAKE ||
1646 nested_conds[nested_cond_lvl] == NESTED_COND_IF_SKIP ||
1647 nested_conds[nested_cond_lvl] == NESTED_COND_ELIF_SKIP) {
1648 nested_conds[nested_cond_lvl] = NESTED_COND_ELIF_SKIP;
1649 } else if (!*args[1] || *args[1] == '0') {
1650 /* empty = false */
1651 nested_conds[nested_cond_lvl] = NESTED_COND_ELIF_DROP;
1652 } else if (atoi(args[1]) > 0) {
1653 /* true */
1654 nested_conds[nested_cond_lvl] = NESTED_COND_ELIF_TAKE;
1655 } else {
1656 ha_alert("parsing [%s:%d]: unparsable conditional expression '%s'.\n", file, linenum, args[1]);
1657 err_code |= ERR_ALERT | ERR_FATAL | ERR_ABORT;
1658 goto err;
1659 }
1660 goto next_line;
1661 }
1662 else if (strcmp(args[0], ".else") == 0) {
1663 if (!nested_cond_lvl) {
1664 ha_alert("parsing [%s:%d]: lone '.else' with no matching '.if'.\n", file, linenum);
1665 err_code |= ERR_ALERT | ERR_FATAL | ERR_ABORT;
1666 goto err;
1667 }
1668
1669 if (nested_conds[nested_cond_lvl] == NESTED_COND_ELSE_TAKE ||
1670 nested_conds[nested_cond_lvl] == NESTED_COND_ELSE_DROP) {
1671 ha_alert("parsing [%s:%d]: '.else' after '.else' is not permitted.\n", file, linenum);
1672 err_code |= ERR_ALERT | ERR_FATAL | ERR_ABORT;
1673 goto err;
1674 }
1675
1676 if (nested_conds[nested_cond_lvl] == NESTED_COND_IF_TAKE ||
1677 nested_conds[nested_cond_lvl] == NESTED_COND_IF_SKIP ||
1678 nested_conds[nested_cond_lvl] == NESTED_COND_ELIF_TAKE ||
1679 nested_conds[nested_cond_lvl] == NESTED_COND_ELIF_SKIP) {
1680 nested_conds[nested_cond_lvl] = NESTED_COND_ELSE_DROP;
1681 } else {
1682 /* otherwise we take the "else" */
1683 nested_conds[nested_cond_lvl] = NESTED_COND_ELSE_TAKE;
1684 }
1685 goto next_line;
1686 }
1687 else if (strcmp(args[0], ".endif") == 0) {
1688 if (!nested_cond_lvl) {
1689 ha_alert("parsing [%s:%d]: lone '.endif' with no matching '.if'.\n", file, linenum);
1690 err_code |= ERR_ALERT | ERR_FATAL;
1691 fatal++;
1692 break;
1693 }
1694 nested_cond_lvl--;
1695 goto next_line;
1696 }
1697 }
1698
1699 if (nested_cond_lvl &&
1700 (nested_conds[nested_cond_lvl] == NESTED_COND_IF_DROP ||
1701 nested_conds[nested_cond_lvl] == NESTED_COND_IF_SKIP ||
1702 nested_conds[nested_cond_lvl] == NESTED_COND_ELIF_DROP ||
1703 nested_conds[nested_cond_lvl] == NESTED_COND_ELIF_SKIP ||
1704 nested_conds[nested_cond_lvl] == NESTED_COND_ELSE_DROP)) {
1705 /* The current block is masked out by the conditions */
1706 goto next_line;
1707 }
1708
1709 /* .warning/.error/.notice */
1710 if (*args[0] == '.') {
1711 if (strcmp(args[0], ".alert") == 0) {
1712 ha_alert("parsing [%s:%d]: '%s'.\n", file, linenum, args[1]);
1713 err_code |= ERR_ALERT | ERR_FATAL | ERR_ABORT;
1714 goto err;
1715 }
1716 else if (strcmp(args[0], ".warning") == 0) {
1717 ha_warning("parsing [%s:%d]: '%s'.\n", file, linenum, args[1]);
1718 err_code |= ERR_WARN;
1719 goto next_line;
1720 }
1721 else if (strcmp(args[0], ".notice") == 0) {
1722 ha_notice("parsing [%s:%d]: '%s'.\n", file, linenum, args[1]);
1723 goto next_line;
1724 }
1725 else {
1726 ha_alert("parsing [%s:%d]: unknown directive '%s'.\n", file, linenum, args[0]);
1727 err_code |= ERR_ALERT | ERR_FATAL;
1728 fatal++;
1729 break;
1730 }
1731 }
1732
Willy Tarreau3842f002009-06-14 11:39:52 +02001733 /* check for keyword modifiers "no" and "default" */
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001734 if (strcmp(args[0], "no") == 0) {
William Lallemand0f99e342011-10-12 17:50:54 +02001735 char *tmp;
1736
Willy Tarreau3842f002009-06-14 11:39:52 +02001737 kwm = KWM_NO;
William Lallemand0f99e342011-10-12 17:50:54 +02001738 tmp = args[0];
Krzysztof Oledzki336d4752007-12-25 02:40:22 +01001739 for (arg=0; *args[arg+1]; arg++)
1740 args[arg] = args[arg+1]; // shift args after inversion
William Lallemand0f99e342011-10-12 17:50:54 +02001741 *tmp = '\0'; // fix the next arg to \0
1742 args[arg] = tmp;
Krzysztof Oledzki336d4752007-12-25 02:40:22 +01001743 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001744 else if (strcmp(args[0], "default") == 0) {
Willy Tarreau3842f002009-06-14 11:39:52 +02001745 kwm = KWM_DEF;
1746 for (arg=0; *args[arg+1]; arg++)
1747 args[arg] = args[arg+1]; // shift args after inversion
1748 }
Krzysztof Oledzki336d4752007-12-25 02:40:22 +01001749
William Dauchyec730982019-10-27 20:08:10 +01001750 if (kwm != KWM_STD && strcmp(args[0], "option") != 0 &&
1751 strcmp(args[0], "log") != 0 && strcmp(args[0], "busy-polling") != 0 &&
Willy Tarreaud96f1122019-12-03 07:07:36 +01001752 strcmp(args[0], "set-dumpable") != 0 && strcmp(args[0], "strict-limits") != 0 &&
1753 strcmp(args[0], "insecure-fork-wanted") != 0) {
William Dauchyec730982019-10-27 20:08:10 +01001754 ha_alert("parsing [%s:%d]: negation/default currently "
William Dauchy0fec3ab2019-10-27 20:08:11 +01001755 "supported only for options, log, busy-polling, "
Willy Tarreaud96f1122019-12-03 07:07:36 +01001756 "set-dumpable, strict-limits, and insecure-fork-wanted.\n", file, linenum);
Willy Tarreau058e9072009-07-20 09:30:05 +02001757 err_code |= ERR_ALERT | ERR_FATAL;
Willy Tarreau32234e72020-06-16 17:14:33 +02001758 fatal++;
Krzysztof Oledzki336d4752007-12-25 02:40:22 +01001759 }
1760
Thierry FOURNIERfa45f1d2014-03-18 13:54:18 +01001761 /* detect section start */
1762 list_for_each_entry(ics, &sections, list) {
1763 if (strcmp(args[0], ics->section_name) == 0) {
1764 cursection = ics->section_name;
Christopher Faulet7805e2b2018-11-30 13:50:47 +01001765 pcs = cs;
Thierry FOURNIERfa45f1d2014-03-18 13:54:18 +01001766 cs = ics;
1767 break;
1768 }
Emeric Brun32da3c42010-09-23 18:39:19 +02001769 }
1770
Christopher Faulet7805e2b2018-11-30 13:50:47 +01001771 if (pcs && pcs->post_section_parser) {
Willy Tarreau32234e72020-06-16 17:14:33 +02001772 int status;
1773
1774 status = pcs->post_section_parser();
1775 err_code |= status;
1776 if (status & ERR_FATAL)
1777 fatal++;
1778
Christopher Faulet7805e2b2018-11-30 13:50:47 +01001779 if (err_code & ERR_ABORT)
1780 goto err;
Christopher Faulet7805e2b2018-11-30 13:50:47 +01001781 }
Christopher Fauletbf7a9592018-12-02 09:37:38 +01001782 pcs = NULL;
Christopher Faulet7805e2b2018-11-30 13:50:47 +01001783
William Lallemandd2ff56d2017-10-16 11:06:50 +02001784 if (!cs) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001785 ha_alert("parsing [%s:%d]: unknown keyword '%s' out of section.\n", file, linenum, args[0]);
Willy Tarreau058e9072009-07-20 09:30:05 +02001786 err_code |= ERR_ALERT | ERR_FATAL;
Willy Tarreau32234e72020-06-16 17:14:33 +02001787 fatal++;
William Lallemandd2ff56d2017-10-16 11:06:50 +02001788 } else {
Willy Tarreau32234e72020-06-16 17:14:33 +02001789 int status;
1790
1791 status = cs->section_parser(file, linenum, args, kwm);
1792 err_code |= status;
1793 if (status & ERR_FATAL)
1794 fatal++;
1795
William Lallemandd2ff56d2017-10-16 11:06:50 +02001796 if (err_code & ERR_ABORT)
1797 goto err;
1798 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02001799 }
William Lallemandd2ff56d2017-10-16 11:06:50 +02001800
Tim Duesterhus2fd5bdb2020-06-22 22:57:45 +02001801 if (missing_lf != -1) {
Tim Duesterhusf92afb72020-08-18 22:00:04 +02001802 ha_alert("parsing [%s:%d]: Missing LF on last line, file might have been truncated at position %d.\n",
1803 file, linenum, (missing_lf + 1));
1804 err_code |= ERR_ALERT | ERR_FATAL;
Tim Duesterhus2fd5bdb2020-06-22 22:57:45 +02001805 }
1806
Christopher Fauletbf7a9592018-12-02 09:37:38 +01001807 if (cs && cs->post_section_parser)
Christopher Faulet7805e2b2018-11-30 13:50:47 +01001808 err_code |= cs->post_section_parser();
William Lallemandd2ff56d2017-10-16 11:06:50 +02001809
Willy Tarreau4b103022021-02-12 17:59:10 +01001810 if (nested_cond_lvl) {
1811 ha_alert("parsing [%s:%d]: non-terminated '.if' block.\n", file, linenum);
1812 err_code |= ERR_ALERT | ERR_FATAL | ERR_ABORT;
1813 }
William Lallemandd2ff56d2017-10-16 11:06:50 +02001814err:
Willy Tarreau61cfdf42021-02-20 10:46:51 +01001815 ha_free(&cfg_scope);
Willy Tarreau6daf3432008-01-22 16:44:08 +01001816 cursection = NULL;
William Lallemand64e84512015-05-12 14:25:37 +02001817 free(thisline);
Willy Tarreau9e1758e2020-06-16 16:32:59 +02001818 free(outline);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001819 fclose(f);
Willy Tarreau058e9072009-07-20 09:30:05 +02001820 return err_code;
Willy Tarreau915e1eb2009-06-22 15:48:36 +02001821}
1822
Willy Tarreau64ab6072014-09-16 12:17:36 +02001823/* This function propagates processes from frontend <from> to backend <to> so
1824 * that it is always guaranteed that a backend pointed to by a frontend is
1825 * bound to all of its processes. After that, if the target is a "listen"
1826 * instance, the function recursively descends the target's own targets along
Willy Tarreau98d04852015-05-26 12:18:29 +02001827 * default_backend and use_backend rules. Since the bits are
Willy Tarreau64ab6072014-09-16 12:17:36 +02001828 * checked first to ensure that <to> is already bound to all processes of
1829 * <from>, there is no risk of looping and we ensure to follow the shortest
1830 * path to the destination.
1831 *
1832 * It is possible to set <to> to NULL for the first call so that the function
1833 * takes care of visiting the initial frontend in <from>.
1834 *
1835 * It is important to note that the function relies on the fact that all names
1836 * have already been resolved.
1837 */
1838void propagate_processes(struct proxy *from, struct proxy *to)
1839{
1840 struct switching_rule *rule;
Willy Tarreau64ab6072014-09-16 12:17:36 +02001841
1842 if (to) {
1843 /* check whether we need to go down */
1844 if (from->bind_proc &&
1845 (from->bind_proc & to->bind_proc) == from->bind_proc)
1846 return;
1847
1848 if (!from->bind_proc && !to->bind_proc)
1849 return;
1850
1851 to->bind_proc = from->bind_proc ?
1852 (to->bind_proc | from->bind_proc) : 0;
1853
1854 /* now propagate down */
1855 from = to;
1856 }
1857
Willy Tarreau8a95d8c2014-12-18 13:56:26 +01001858 if (!(from->cap & PR_CAP_FE))
Willy Tarreau64ab6072014-09-16 12:17:36 +02001859 return;
1860
Willy Tarreauc3914d42020-09-24 08:39:22 +02001861 if (from->disabled)
Willy Tarreauf6b70012014-12-18 14:00:43 +01001862 return;
1863
Willy Tarreau64ab6072014-09-16 12:17:36 +02001864 /* default_backend */
1865 if (from->defbe.be)
1866 propagate_processes(from, from->defbe.be);
1867
1868 /* use_backend */
1869 list_for_each_entry(rule, &from->switching_rules, list) {
Cyril Bonté51639692014-10-02 19:56:25 +02001870 if (rule->dynamic)
1871 continue;
Willy Tarreau64ab6072014-09-16 12:17:36 +02001872 to = rule->be.backend;
1873 propagate_processes(from, to);
1874 }
Willy Tarreau64ab6072014-09-16 12:17:36 +02001875}
1876
Willy Tarreaubb925012009-07-23 13:36:36 +02001877/*
1878 * Returns the error code, 0 if OK, or any combination of :
1879 * - ERR_ABORT: must abort ASAP
1880 * - ERR_FATAL: we can continue parsing but not start the service
1881 * - ERR_WARN: a warning has been emitted
1882 * - ERR_ALERT: an alert has been emitted
1883 * Only the two first ones can stop processing, the two others are just
1884 * indicators.
1885 */
Willy Tarreau915e1eb2009-06-22 15:48:36 +02001886int check_config_validity()
1887{
1888 int cfgerr = 0;
1889 struct proxy *curproxy = NULL;
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01001890 struct stktable *t;
Willy Tarreau915e1eb2009-06-22 15:48:36 +02001891 struct server *newsrv = NULL;
Willy Tarreaubb925012009-07-23 13:36:36 +02001892 int err_code = 0;
Willy Tarreau53fb4ae2009-10-04 23:04:08 +02001893 unsigned int next_pxid = 1;
Willy Tarreau2a65ff02012-09-13 17:54:29 +02001894 struct bind_conf *bind_conf;
Thierry FOURNIER / OZON.IO8a4e4422016-11-23 00:41:28 +01001895 char *err;
William Lallemand48b4bb42017-10-23 14:36:34 +02001896 struct cfg_postparser *postparser;
Emeric Brun750fe792020-12-23 16:51:12 +01001897 struct resolvers *curr_resolvers = NULL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001898
Willy Tarreau2a65ff02012-09-13 17:54:29 +02001899 bind_conf = NULL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001900 /*
1901 * Now, check for the integrity of all that we have collected.
1902 */
1903
1904 /* will be needed further to delay some tasks */
Willy Tarreaub0b37bc2008-06-23 14:00:57 +02001905 tv_update_date(0,1);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001906
Willy Tarreau193b8c62012-11-22 00:17:38 +01001907 if (!global.tune.max_http_hdr)
1908 global.tune.max_http_hdr = MAX_HTTP_HDR;
1909
1910 if (!global.tune.cookie_len)
1911 global.tune.cookie_len = CAPTURE_LEN;
1912
Stéphane Cottin23e9e932017-05-18 08:58:41 +02001913 if (!global.tune.requri_len)
1914 global.tune.requri_len = REQURI_LEN;
1915
Willy Tarreau149ab772019-01-26 14:27:06 +01001916 if (!global.nbthread) {
1917 /* nbthread not set, thus automatic. In this case, and only if
1918 * running on a single process, we enable the same number of
1919 * threads as the number of CPUs the process is bound to. This
1920 * allows to easily control the number of threads using taskset.
1921 */
1922 global.nbthread = 1;
1923#if defined(USE_THREAD)
1924 if (global.nbproc == 1)
1925 global.nbthread = thread_cpus_enabled_at_boot;
1926 all_threads_mask = nbits(global.nbthread);
1927#endif
1928 }
1929
Willy Tarreau26f6ae12019-02-02 12:56:15 +01001930 if (global.nbproc > 1 && global.nbthread > 1) {
1931 ha_alert("config : cannot enable multiple processes if multiple threads are configured. Please use either nbproc or nbthread but not both.\n");
1932 err_code |= ERR_ALERT | ERR_FATAL;
1933 goto out;
1934 }
1935
Willy Tarreaubafbe012017-11-24 17:34:44 +01001936 pool_head_requri = create_pool("requri", global.tune.requri_len , MEM_F_SHARED);
Emeric Brun96fd9262017-07-05 13:33:16 +02001937
Willy Tarreaubafbe012017-11-24 17:34:44 +01001938 pool_head_capture = create_pool("capture", global.tune.cookie_len, MEM_F_SHARED);
Willy Tarreau193b8c62012-11-22 00:17:38 +01001939
Thierry FOURNIER9eec0a62014-01-22 18:38:02 +01001940 /* Post initialisation of the users and groups lists. */
1941 err_code = userlist_postinit();
1942 if (err_code != ERR_NONE)
1943 goto out;
1944
Willy Tarreau55bc0f82009-03-15 14:51:53 +01001945 /* first, we will invert the proxy list order */
1946 curproxy = NULL;
Olivier Houchardfbc74e82017-11-24 16:54:05 +01001947 while (proxies_list) {
Willy Tarreau55bc0f82009-03-15 14:51:53 +01001948 struct proxy *next;
1949
Olivier Houchardfbc74e82017-11-24 16:54:05 +01001950 next = proxies_list->next;
1951 proxies_list->next = curproxy;
1952 curproxy = proxies_list;
Willy Tarreau55bc0f82009-03-15 14:51:53 +01001953 if (!next)
1954 break;
Olivier Houchardfbc74e82017-11-24 16:54:05 +01001955 proxies_list = next;
Willy Tarreau55bc0f82009-03-15 14:51:53 +01001956 }
1957
Olivier Houchardfbc74e82017-11-24 16:54:05 +01001958 for (curproxy = proxies_list; curproxy; curproxy = curproxy->next) {
Willy Tarreau55ea7572007-06-17 19:56:27 +02001959 struct switching_rule *rule;
Willy Tarreau4a5cade2012-04-05 21:09:48 +02001960 struct server_rule *srule;
Emeric Brunb982a3d2010-01-04 15:45:53 +01001961 struct sticking_rule *mrule;
Christopher Faulete4e830d2017-09-18 14:51:41 +02001962 struct act_rule *arule;
Dragan Dosen1322d092015-09-22 16:05:32 +02001963 struct logsrv *tmplogsrv;
Willy Tarreau53fb4ae2009-10-04 23:04:08 +02001964 unsigned int next_id;
Willy Tarreau16a21472012-11-19 12:39:59 +01001965 int nbproc;
Willy Tarreau53fb4ae2009-10-04 23:04:08 +02001966
Willy Tarreau050536d2012-10-04 08:47:34 +02001967 if (curproxy->uuid < 0) {
Willy Tarreau53fb4ae2009-10-04 23:04:08 +02001968 /* proxy ID not set, use automatic numbering with first
1969 * spare entry starting with next_pxid.
1970 */
1971 next_pxid = get_next_id(&used_proxy_id, next_pxid);
1972 curproxy->conf.id.key = curproxy->uuid = next_pxid;
1973 eb32_insert(&used_proxy_id, &curproxy->conf.id);
Willy Tarreau53fb4ae2009-10-04 23:04:08 +02001974 }
Krzysztof Piotr Oledzkidf5cb9f2010-02-05 20:58:27 +01001975 next_pxid++;
1976
Willy Tarreau55ea7572007-06-17 19:56:27 +02001977
Willy Tarreauc3914d42020-09-24 08:39:22 +02001978 if (curproxy->disabled) {
Willy Tarreau02b092f2020-10-07 18:36:54 +02001979 /* ensure we don't keep listeners uselessly bound. We
1980 * can't disable their listeners yet (fdtab not
1981 * allocated yet) but let's skip them.
1982 */
Dragan Dosen7d61a332019-05-07 14:16:18 +02001983 if (curproxy->table) {
Willy Tarreau61cfdf42021-02-20 10:46:51 +01001984 ha_free(&curproxy->table->peers.name);
Dragan Dosen7d61a332019-05-07 14:16:18 +02001985 curproxy->table->peers.p = NULL;
1986 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02001987 continue;
1988 }
1989
Willy Tarreau102df612014-05-07 23:56:38 +02001990 /* Check multi-process mode compatibility for the current proxy */
1991
1992 if (curproxy->bind_proc) {
1993 /* an explicit bind-process was specified, let's check how many
1994 * processes remain.
1995 */
David Carliere6c39412015-07-02 07:00:17 +00001996 nbproc = my_popcountl(curproxy->bind_proc);
Willy Tarreau102df612014-05-07 23:56:38 +02001997
Willy Tarreaua38a7172019-02-02 17:11:28 +01001998 curproxy->bind_proc &= all_proc_mask;
Willy Tarreau102df612014-05-07 23:56:38 +02001999 if (!curproxy->bind_proc && nbproc == 1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002000 ha_warning("Proxy '%s': the process specified on the 'bind-process' directive refers to a process number that is higher than global.nbproc. The proxy has been forced to run on process 1 only.\n", curproxy->id);
Willy Tarreau102df612014-05-07 23:56:38 +02002001 curproxy->bind_proc = 1;
2002 }
2003 else if (!curproxy->bind_proc && nbproc > 1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002004 ha_warning("Proxy '%s': all processes specified on the 'bind-process' directive refer to numbers that are all higher than global.nbproc. The directive was ignored and the proxy will run on all processes.\n", curproxy->id);
Willy Tarreau102df612014-05-07 23:56:38 +02002005 curproxy->bind_proc = 0;
2006 }
2007 }
2008
Willy Tarreau3d209582014-05-09 17:06:11 +02002009 /* check and reduce the bind-proc of each listener */
2010 list_for_each_entry(bind_conf, &curproxy->conf.bind, by_fe) {
2011 unsigned long mask;
2012
Willy Tarreau45a66cc2017-11-24 11:28:00 +01002013 /* HTTP frontends with "h2" as ALPN/NPN will work in
2014 * HTTP/2 and absolutely require buffers 16kB or larger.
2015 */
2016#ifdef USE_OPENSSL
2017 if (curproxy->mode == PR_MODE_HTTP && global.tune.bufsize < 16384) {
2018#ifdef OPENSSL_NPN_NEGOTIATED
2019 /* check NPN */
Willy Tarreau4db49c02018-11-11 10:36:25 +01002020 if (bind_conf->ssl_conf.npn_str && strstr(bind_conf->ssl_conf.npn_str, "\002h2")) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002021 ha_alert("config : HTTP frontend '%s' enables HTTP/2 via NPN at [%s:%d], so global.tune.bufsize must be at least 16384 bytes (%d now).\n",
2022 curproxy->id, bind_conf->file, bind_conf->line, global.tune.bufsize);
Willy Tarreau45a66cc2017-11-24 11:28:00 +01002023 cfgerr++;
2024 }
2025#endif
2026#ifdef TLSEXT_TYPE_application_layer_protocol_negotiation
2027 /* check ALPN */
Willy Tarreau4db49c02018-11-11 10:36:25 +01002028 if (bind_conf->ssl_conf.alpn_str && strstr(bind_conf->ssl_conf.alpn_str, "\002h2")) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002029 ha_alert("config : HTTP frontend '%s' enables HTTP/2 via ALPN at [%s:%d], so global.tune.bufsize must be at least 16384 bytes (%d now).\n",
2030 curproxy->id, bind_conf->file, bind_conf->line, global.tune.bufsize);
Willy Tarreau45a66cc2017-11-24 11:28:00 +01002031 cfgerr++;
2032 }
2033#endif
2034 } /* HTTP && bufsize < 16384 */
2035#endif
2036
Willy Tarreauc477b6f2018-07-27 18:07:41 +02002037 /* detect and address thread affinity inconsistencies */
Willy Tarreaue26993c2020-09-03 07:18:55 +02002038 mask = thread_mask(bind_conf->settings.bind_thread);
Willy Tarreau3d957172019-02-02 18:00:17 +01002039 if (!(mask & all_threads_mask)) {
Willy Tarreauc477b6f2018-07-27 18:07:41 +02002040 unsigned long new_mask = 0;
2041
2042 while (mask) {
Willy Tarreau0c026f42018-08-01 19:12:20 +02002043 new_mask |= mask & all_threads_mask;
Willy Tarreauc477b6f2018-07-27 18:07:41 +02002044 mask >>= global.nbthread;
2045 }
2046
Willy Tarreaue26993c2020-09-03 07:18:55 +02002047 bind_conf->settings.bind_thread = new_mask;
Willy Tarreauc477b6f2018-07-27 18:07:41 +02002048 ha_warning("Proxy '%s': the thread range specified on the 'process' directive of 'bind %s' at [%s:%d] only refers to thread numbers out of the range defined by the global 'nbthread' directive. The thread numbers were remapped to existing threads instead (mask 0x%lx).\n",
2049 curproxy->id, bind_conf->arg, bind_conf->file, bind_conf->line, new_mask);
2050 }
2051
2052 /* detect process and nbproc affinity inconsistencies */
Willy Tarreaue26993c2020-09-03 07:18:55 +02002053 mask = proc_mask(bind_conf->settings.bind_proc) & proc_mask(curproxy->bind_proc);
Willy Tarreaua36b3242019-02-02 13:14:34 +01002054 if (!(mask & all_proc_mask)) {
2055 mask = proc_mask(curproxy->bind_proc) & all_proc_mask;
Willy Tarreaue26993c2020-09-03 07:18:55 +02002056 nbproc = my_popcountl(bind_conf->settings.bind_proc);
2057 bind_conf->settings.bind_proc = proc_mask(bind_conf->settings.bind_proc) & mask;
Willy Tarreau3d209582014-05-09 17:06:11 +02002058
Willy Tarreaue26993c2020-09-03 07:18:55 +02002059 if (!bind_conf->settings.bind_proc && nbproc == 1) {
Willy Tarreaua36b3242019-02-02 13:14:34 +01002060 ha_warning("Proxy '%s': the process number specified on the 'process' directive of 'bind %s' at [%s:%d] refers to a process not covered by the proxy. This has been fixed by forcing it to run on the proxy's first process only.\n",
2061 curproxy->id, bind_conf->arg, bind_conf->file, bind_conf->line);
Willy Tarreaue26993c2020-09-03 07:18:55 +02002062 bind_conf->settings.bind_proc = mask & ~(mask - 1);
Willy Tarreaua36b3242019-02-02 13:14:34 +01002063 }
Willy Tarreaue26993c2020-09-03 07:18:55 +02002064 else if (!bind_conf->settings.bind_proc && nbproc > 1) {
Willy Tarreaua36b3242019-02-02 13:14:34 +01002065 ha_warning("Proxy '%s': the process range specified on the 'process' directive of 'bind %s' at [%s:%d] only refers to processes not covered by the proxy. The directive was ignored so that all of the proxy's processes are used.\n",
2066 curproxy->id, bind_conf->arg, bind_conf->file, bind_conf->line);
Willy Tarreaue26993c2020-09-03 07:18:55 +02002067 bind_conf->settings.bind_proc = 0;
Willy Tarreaua36b3242019-02-02 13:14:34 +01002068 }
Willy Tarreau3d209582014-05-09 17:06:11 +02002069 }
2070 }
2071
Willy Tarreauff01a212009-03-15 13:46:16 +01002072 switch (curproxy->mode) {
Willy Tarreauff01a212009-03-15 13:46:16 +01002073 case PR_MODE_TCP:
Willy Tarreau915e1eb2009-06-22 15:48:36 +02002074 cfgerr += proxy_cfg_ensure_no_http(curproxy);
Willy Tarreauff01a212009-03-15 13:46:16 +01002075 break;
2076
2077 case PR_MODE_HTTP:
Willy Tarreau25320b22013-03-24 07:22:08 +01002078 curproxy->http_needed = 1;
Willy Tarreauff01a212009-03-15 13:46:16 +01002079 break;
William Lallemandcf62f7e2018-10-26 14:47:40 +02002080
2081 case PR_MODE_CLI:
2082 cfgerr += proxy_cfg_ensure_no_http(curproxy);
2083 break;
Emeric Brun54932b42020-07-07 09:43:24 +02002084 case PR_MODE_SYSLOG:
Willy Tarreaua389c9e2020-10-07 17:49:42 +02002085 case PR_MODE_PEERS:
Emeric Brun54932b42020-07-07 09:43:24 +02002086 case PR_MODES:
2087 /* should not happen, bug gcc warn missing switch statement */
Willy Tarreaua389c9e2020-10-07 17:49:42 +02002088 ha_alert("config : %s '%s' cannot use peers or syslog mode for this proxy. NOTE: PLEASE REPORT THIS TO DEVELOPERS AS YOU'RE NOT SUPPOSED TO BE ABLE TO CREATE A CONFIGURATION TRIGGERING THIS!\n",
Emeric Brun54932b42020-07-07 09:43:24 +02002089 proxy_type_str(curproxy), curproxy->id);
2090 cfgerr++;
2091 break;
Willy Tarreauff01a212009-03-15 13:46:16 +01002092 }
2093
Willy Tarreau58aa5cc2018-02-08 09:55:09 +01002094 if (curproxy != global.stats_fe && (curproxy->cap & PR_CAP_FE) && LIST_ISEMPTY(&curproxy->conf.listeners)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002095 ha_warning("config : %s '%s' has no 'bind' directive. Please declare it as a backend if this was intended.\n",
2096 proxy_type_str(curproxy), curproxy->id);
Willy Tarreauf3934b82015-08-11 11:36:45 +02002097 err_code |= ERR_WARN;
2098 }
2099
Willy Tarreau77e0dae2020-10-14 15:44:27 +02002100 if (curproxy->cap & PR_CAP_BE) {
Willy Tarreauf3e49f92009-10-03 12:21:20 +02002101 if (curproxy->lbprm.algo & BE_LB_KIND) {
Willy Tarreau3cd9af22009-03-15 14:06:41 +01002102 if (curproxy->options & PR_O_TRANSP) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002103 ha_alert("config : %s '%s' cannot use both transparent and balance mode.\n",
2104 proxy_type_str(curproxy), curproxy->id);
Willy Tarreau3cd9af22009-03-15 14:06:41 +01002105 cfgerr++;
2106 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002107#ifdef WE_DONT_SUPPORT_SERVERLESS_LISTENERS
Willy Tarreau3cd9af22009-03-15 14:06:41 +01002108 else if (curproxy->srv == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002109 ha_alert("config : %s '%s' needs at least 1 server in balance mode.\n",
2110 proxy_type_str(curproxy), curproxy->id);
Willy Tarreau3cd9af22009-03-15 14:06:41 +01002111 cfgerr++;
2112 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002113#endif
Willy Tarreau1620ec32011-08-06 17:05:02 +02002114 else if (curproxy->options & PR_O_DISPATCH) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002115 ha_warning("config : dispatch address of %s '%s' will be ignored in balance mode.\n",
2116 proxy_type_str(curproxy), curproxy->id);
Willy Tarreaubb925012009-07-23 13:36:36 +02002117 err_code |= ERR_WARN;
Willy Tarreau3cd9af22009-03-15 14:06:41 +01002118 }
2119 }
Willy Tarreau1620ec32011-08-06 17:05:02 +02002120 else if (!(curproxy->options & (PR_O_TRANSP | PR_O_DISPATCH | PR_O_HTTP_PROXY))) {
Willy Tarreau3cd9af22009-03-15 14:06:41 +01002121 /* If no LB algo is set in a backend, and we're not in
2122 * transparent mode, dispatch mode nor proxy mode, we
2123 * want to use balance roundrobin by default.
2124 */
2125 curproxy->lbprm.algo &= ~BE_LB_ALGO;
2126 curproxy->lbprm.algo |= BE_LB_ALGO_RR;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002127 }
2128 }
Willy Tarreau193cf932007-09-17 10:17:23 +02002129
Willy Tarreau1620ec32011-08-06 17:05:02 +02002130 if (curproxy->options & PR_O_DISPATCH)
2131 curproxy->options &= ~(PR_O_TRANSP | PR_O_HTTP_PROXY);
2132 else if (curproxy->options & PR_O_HTTP_PROXY)
2133 curproxy->options &= ~(PR_O_DISPATCH | PR_O_TRANSP);
2134 else if (curproxy->options & PR_O_TRANSP)
2135 curproxy->options &= ~(PR_O_DISPATCH | PR_O_HTTP_PROXY);
Willy Tarreau82936582007-11-30 15:20:09 +01002136
Christopher Faulete5870d82020-04-15 11:32:03 +02002137 if ((curproxy->tcpcheck_rules.flags & TCPCHK_RULES_UNUSED_HTTP_RS)) {
2138 ha_warning("config : %s '%s' uses http-check rules without 'option httpchk', so the rules are ignored.\n",
2139 proxy_type_str(curproxy), curproxy->id);
2140 err_code |= ERR_WARN;
2141 }
2142
2143 if ((curproxy->options2 & PR_O2_CHK_ANY) == PR_O2_TCPCHK_CHK &&
Christopher Fauletc0fcbe42020-06-03 19:00:42 +02002144 (curproxy->tcpcheck_rules.flags & TCPCHK_RULES_PROTO_CHK) != TCPCHK_RULES_HTTP_CHK) {
Willy Tarreau1620ec32011-08-06 17:05:02 +02002145 if (curproxy->options & PR_O_DISABLE404) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002146 ha_warning("config : '%s' will be ignored for %s '%s' (requires 'option httpchk').\n",
2147 "disable-on-404", proxy_type_str(curproxy), curproxy->id);
Willy Tarreau1620ec32011-08-06 17:05:02 +02002148 err_code |= ERR_WARN;
2149 curproxy->options &= ~PR_O_DISABLE404;
2150 }
2151 if (curproxy->options2 & PR_O2_CHK_SNDST) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002152 ha_warning("config : '%s' will be ignored for %s '%s' (requires 'option httpchk').\n",
2153 "send-state", proxy_type_str(curproxy), curproxy->id);
Willy Tarreau1620ec32011-08-06 17:05:02 +02002154 err_code |= ERR_WARN;
2155 curproxy->options &= ~PR_O2_CHK_SNDST;
2156 }
Willy Tarreauef781042010-01-27 11:53:01 +01002157 }
2158
Simon Horman98637e52014-06-20 12:30:16 +09002159 if ((curproxy->options2 & PR_O2_CHK_ANY) == PR_O2_EXT_CHK) {
2160 if (!global.external_check) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002161 ha_alert("Proxy '%s' : '%s' unable to find required 'global.external-check'.\n",
2162 curproxy->id, "option external-check");
Simon Horman98637e52014-06-20 12:30:16 +09002163 cfgerr++;
2164 }
2165 if (!curproxy->check_command) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002166 ha_alert("Proxy '%s' : '%s' unable to find required 'external-check command'.\n",
2167 curproxy->id, "option external-check");
Simon Horman98637e52014-06-20 12:30:16 +09002168 cfgerr++;
2169 }
Willy Tarreaud96f1122019-12-03 07:07:36 +01002170 if (!(global.tune.options & GTUNE_INSECURE_FORK)) {
2171 ha_warning("Proxy '%s' : 'insecure-fork-wanted' not enabled in the global section, '%s' will likely fail.\n",
2172 curproxy->id, "option external-check");
2173 err_code |= ERR_WARN;
2174 }
Simon Horman98637e52014-06-20 12:30:16 +09002175 }
2176
Simon Horman64e34162015-02-06 11:11:57 +09002177 if (curproxy->email_alert.set) {
Simon Horman0ba0e4a2015-01-30 11:23:00 +09002178 if (!(curproxy->email_alert.mailers.name && curproxy->email_alert.from && curproxy->email_alert.to)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002179 ha_warning("config : 'email-alert' will be ignored for %s '%s' (the presence any of "
2180 "'email-alert from', 'email-alert level' 'email-alert mailers', "
2181 "'email-alert myhostname', or 'email-alert to' "
2182 "requires each of 'email-alert from', 'email-alert mailers' and 'email-alert to' "
2183 "to be present).\n",
2184 proxy_type_str(curproxy), curproxy->id);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09002185 err_code |= ERR_WARN;
2186 free_email_alert(curproxy);
2187 }
2188 if (!curproxy->email_alert.myhostname)
Cyril Bontée22bfd62015-12-04 03:07:07 +01002189 curproxy->email_alert.myhostname = strdup(hostname);
Simon Horman9dc49962015-01-30 11:22:59 +09002190 }
2191
Simon Horman98637e52014-06-20 12:30:16 +09002192 if (curproxy->check_command) {
2193 int clear = 0;
2194 if ((curproxy->options2 & PR_O2_CHK_ANY) != PR_O2_EXT_CHK) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002195 ha_warning("config : '%s' will be ignored for %s '%s' (requires 'option external-check').\n",
2196 "external-check command", proxy_type_str(curproxy), curproxy->id);
Simon Horman98637e52014-06-20 12:30:16 +09002197 err_code |= ERR_WARN;
2198 clear = 1;
2199 }
2200 if (curproxy->check_command[0] != '/' && !curproxy->check_path) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002201 ha_alert("Proxy '%s': '%s' does not have a leading '/' and 'external-check path' is not set.\n",
2202 curproxy->id, "external-check command");
Simon Horman98637e52014-06-20 12:30:16 +09002203 cfgerr++;
2204 }
2205 if (clear) {
Willy Tarreau61cfdf42021-02-20 10:46:51 +01002206 ha_free(&curproxy->check_command);
Simon Horman98637e52014-06-20 12:30:16 +09002207 }
2208 }
2209
2210 if (curproxy->check_path) {
2211 if ((curproxy->options2 & PR_O2_CHK_ANY) != PR_O2_EXT_CHK) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002212 ha_warning("config : '%s' will be ignored for %s '%s' (requires 'option external-check').\n",
2213 "external-check path", proxy_type_str(curproxy), curproxy->id);
Simon Horman98637e52014-06-20 12:30:16 +09002214 err_code |= ERR_WARN;
Willy Tarreau61cfdf42021-02-20 10:46:51 +01002215 ha_free(&curproxy->check_path);
Simon Horman98637e52014-06-20 12:30:16 +09002216 }
2217 }
2218
Willy Tarreau5fdfb912007-01-01 23:11:07 +01002219 /* if a default backend was specified, let's find it */
2220 if (curproxy->defbe.name) {
2221 struct proxy *target;
2222
Willy Tarreauafb39922015-05-26 12:04:09 +02002223 target = proxy_be_by_name(curproxy->defbe.name);
Krzysztof Piotr Oledzki6eb730d2007-11-03 23:41:58 +01002224 if (!target) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002225 ha_alert("Proxy '%s': unable to find required default_backend: '%s'.\n",
2226 curproxy->id, curproxy->defbe.name);
Willy Tarreau5fdfb912007-01-01 23:11:07 +01002227 cfgerr++;
2228 } else if (target == curproxy) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002229 ha_alert("Proxy '%s': loop detected for default_backend: '%s'.\n",
2230 curproxy->id, curproxy->defbe.name);
Willy Tarreaubb925012009-07-23 13:36:36 +02002231 cfgerr++;
Willy Tarreauafb39922015-05-26 12:04:09 +02002232 } else if (target->mode != curproxy->mode &&
2233 !(curproxy->mode == PR_MODE_TCP && target->mode == PR_MODE_HTTP)) {
2234
Christopher Faulet767a84b2017-11-24 16:50:31 +01002235 ha_alert("%s %s '%s' (%s:%d) tries to use incompatible %s %s '%s' (%s:%d) as its default backend (see 'mode').\n",
2236 proxy_mode_str(curproxy->mode), proxy_type_str(curproxy), curproxy->id,
2237 curproxy->conf.file, curproxy->conf.line,
2238 proxy_mode_str(target->mode), proxy_type_str(target), target->id,
2239 target->conf.file, target->conf.line);
Willy Tarreauafb39922015-05-26 12:04:09 +02002240 cfgerr++;
Willy Tarreau5fdfb912007-01-01 23:11:07 +01002241 } else {
2242 free(curproxy->defbe.name);
2243 curproxy->defbe.be = target;
Willy Tarreauff678132012-02-13 14:32:34 +01002244 /* Emit a warning if this proxy also has some servers */
2245 if (curproxy->srv) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002246 ha_warning("In proxy '%s', the 'default_backend' rule always has precedence over the servers, which will never be used.\n",
2247 curproxy->id);
Willy Tarreauff678132012-02-13 14:32:34 +01002248 err_code |= ERR_WARN;
2249 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002250 }
2251 }
2252
Willy Tarreau55ea7572007-06-17 19:56:27 +02002253 /* find the target proxy for 'use_backend' rules */
2254 list_for_each_entry(rule, &curproxy->switching_rules, list) {
Willy Tarreau55ea7572007-06-17 19:56:27 +02002255 struct proxy *target;
Bertrand Jacquin702d44f2013-11-19 11:43:06 +01002256 struct logformat_node *node;
2257 char *pxname;
2258
2259 /* Try to parse the string as a log format expression. If the result
2260 * of the parsing is only one entry containing a simple string, then
2261 * it's a standard string corresponding to a static rule, thus the
2262 * parsing is cancelled and be.name is restored to be resolved.
2263 */
2264 pxname = rule->be.name;
2265 LIST_INIT(&rule->be.expr);
Thierry FOURNIER / OZON.IO4ed1c952016-11-24 23:57:54 +01002266 curproxy->conf.args.ctx = ARGC_UBK;
2267 curproxy->conf.args.file = rule->file;
2268 curproxy->conf.args.line = rule->line;
Thierry FOURNIER / OZON.IO8a4e4422016-11-23 00:41:28 +01002269 err = NULL;
2270 if (!parse_logformat_string(pxname, curproxy, &rule->be.expr, 0, SMP_VAL_FE_HRQ_HDR, &err)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002271 ha_alert("Parsing [%s:%d]: failed to parse use_backend rule '%s' : %s.\n",
2272 rule->file, rule->line, pxname, err);
Thierry FOURNIER / OZON.IO8a4e4422016-11-23 00:41:28 +01002273 free(err);
Thierry FOURNIER / OZON.IO59fd5112016-11-22 23:50:02 +01002274 cfgerr++;
2275 continue;
2276 }
Bertrand Jacquin702d44f2013-11-19 11:43:06 +01002277 node = LIST_NEXT(&rule->be.expr, struct logformat_node *, list);
2278
2279 if (!LIST_ISEMPTY(&rule->be.expr)) {
2280 if (node->type != LOG_FMT_TEXT || node->list.n != &rule->be.expr) {
2281 rule->dynamic = 1;
2282 free(pxname);
2283 continue;
2284 }
Christopher Fauletf82ea4a2020-05-07 15:59:33 +02002285 /* Only one element in the list, a simple string: free the expression and
2286 * fall back to static rule
2287 */
2288 LIST_DEL(&node->list);
Bertrand Jacquin702d44f2013-11-19 11:43:06 +01002289 free(node->arg);
2290 free(node);
2291 }
2292
2293 rule->dynamic = 0;
2294 rule->be.name = pxname;
Willy Tarreau55ea7572007-06-17 19:56:27 +02002295
Willy Tarreauafb39922015-05-26 12:04:09 +02002296 target = proxy_be_by_name(rule->be.name);
Krzysztof Piotr Oledzki6eb730d2007-11-03 23:41:58 +01002297 if (!target) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002298 ha_alert("Proxy '%s': unable to find required use_backend: '%s'.\n",
2299 curproxy->id, rule->be.name);
Willy Tarreau55ea7572007-06-17 19:56:27 +02002300 cfgerr++;
2301 } else if (target == curproxy) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002302 ha_alert("Proxy '%s': loop detected for use_backend: '%s'.\n",
2303 curproxy->id, rule->be.name);
Willy Tarreau55ea7572007-06-17 19:56:27 +02002304 cfgerr++;
Willy Tarreauafb39922015-05-26 12:04:09 +02002305 } else if (target->mode != curproxy->mode &&
2306 !(curproxy->mode == PR_MODE_TCP && target->mode == PR_MODE_HTTP)) {
2307
Christopher Faulet767a84b2017-11-24 16:50:31 +01002308 ha_alert("%s %s '%s' (%s:%d) tries to use incompatible %s %s '%s' (%s:%d) in a 'use_backend' rule (see 'mode').\n",
2309 proxy_mode_str(curproxy->mode), proxy_type_str(curproxy), curproxy->id,
2310 curproxy->conf.file, curproxy->conf.line,
2311 proxy_mode_str(target->mode), proxy_type_str(target), target->id,
2312 target->conf.file, target->conf.line);
Willy Tarreauafb39922015-05-26 12:04:09 +02002313 cfgerr++;
Willy Tarreau55ea7572007-06-17 19:56:27 +02002314 } else {
Willy Tarreau35cd7342021-02-26 20:51:47 +01002315 ha_free(&rule->be.name);
Willy Tarreau55ea7572007-06-17 19:56:27 +02002316 rule->be.backend = target;
2317 }
Willy Tarreau4a5cade2012-04-05 21:09:48 +02002318 }
2319
Willy Tarreau64ab6072014-09-16 12:17:36 +02002320 /* find the target server for 'use_server' rules */
Willy Tarreau4a5cade2012-04-05 21:09:48 +02002321 list_for_each_entry(srule, &curproxy->server_rules, list) {
Jerome Magnin824186b2020-03-29 09:37:12 +02002322 struct server *target;
2323 struct logformat_node *node;
2324 char *server_name;
2325
2326 /* We try to parse the string as a log format expression. If the result of the parsing
2327 * is only one entry containing a single string, then it's a standard string corresponding
2328 * to a static rule, thus the parsing is cancelled and we fall back to setting srv.ptr.
2329 */
2330 server_name = srule->srv.name;
2331 LIST_INIT(&srule->expr);
2332 curproxy->conf.args.ctx = ARGC_USRV;
2333 err = NULL;
2334 if (!parse_logformat_string(server_name, curproxy, &srule->expr, 0, SMP_VAL_FE_HRQ_HDR, &err)) {
2335 ha_alert("Parsing [%s:%d]; use-server rule failed to parse log-format '%s' : %s.\n",
2336 srule->file, srule->line, server_name, err);
2337 free(err);
2338 cfgerr++;
2339 continue;
2340 }
2341 node = LIST_NEXT(&srule->expr, struct logformat_node *, list);
2342
2343 if (!LIST_ISEMPTY(&srule->expr)) {
2344 if (node->type != LOG_FMT_TEXT || node->list.n != &srule->expr) {
2345 srule->dynamic = 1;
2346 free(server_name);
2347 continue;
2348 }
Christopher Fauletf82ea4a2020-05-07 15:59:33 +02002349 /* Only one element in the list, a simple string: free the expression and
2350 * fall back to static rule
2351 */
2352 LIST_DEL(&node->list);
Jerome Magnin824186b2020-03-29 09:37:12 +02002353 free(node->arg);
2354 free(node);
2355 }
2356
2357 srule->dynamic = 0;
2358 srule->srv.name = server_name;
2359 target = findserver(curproxy, srule->srv.name);
Willy Tarreau4a5cade2012-04-05 21:09:48 +02002360
2361 if (!target) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002362 ha_alert("config : %s '%s' : unable to find server '%s' referenced in a 'use-server' rule.\n",
2363 proxy_type_str(curproxy), curproxy->id, srule->srv.name);
Willy Tarreau4a5cade2012-04-05 21:09:48 +02002364 cfgerr++;
2365 continue;
2366 }
Willy Tarreau35cd7342021-02-26 20:51:47 +01002367 ha_free(&srule->srv.name);
Willy Tarreau4a5cade2012-04-05 21:09:48 +02002368 srule->srv.ptr = target;
Willy Tarreau55ea7572007-06-17 19:56:27 +02002369 }
2370
Emeric Brunb982a3d2010-01-04 15:45:53 +01002371 /* find the target table for 'stick' rules */
2372 list_for_each_entry(mrule, &curproxy->sticking_rules, list) {
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01002373 struct stktable *target;
Emeric Brunb982a3d2010-01-04 15:45:53 +01002374
Emeric Brun1d33b292010-01-04 15:47:17 +01002375 curproxy->be_req_ana |= AN_REQ_STICKING_RULES;
2376 if (mrule->flags & STK_IS_STORE)
2377 curproxy->be_rsp_ana |= AN_RES_STORE_RULES;
2378
Emeric Brunb982a3d2010-01-04 15:45:53 +01002379 if (mrule->table.name)
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01002380 target = stktable_find_by_name(mrule->table.name);
Emeric Brunb982a3d2010-01-04 15:45:53 +01002381 else
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01002382 target = curproxy->table;
Emeric Brunb982a3d2010-01-04 15:45:53 +01002383
2384 if (!target) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002385 ha_alert("Proxy '%s': unable to find stick-table '%s'.\n",
Willy Tarreau508d2322020-01-24 07:19:34 +01002386 curproxy->id, mrule->table.name ? mrule->table.name : curproxy->id);
Emeric Brunb982a3d2010-01-04 15:45:53 +01002387 cfgerr++;
2388 }
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01002389 else if (!stktable_compatible_sample(mrule->expr, target->type)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002390 ha_alert("Proxy '%s': type of fetch not usable with type of stick-table '%s'.\n",
2391 curproxy->id, mrule->table.name ? mrule->table.name : curproxy->id);
Emeric Brunb982a3d2010-01-04 15:45:53 +01002392 cfgerr++;
2393 }
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01002394 else if (target->proxy && curproxy->bind_proc & ~target->proxy->bind_proc) {
Willy Tarreau151e1ca2019-02-05 11:38:38 +01002395 ha_alert("Proxy '%s': stick-table '%s' referenced 'stick-store' rule not present on all processes covered by proxy '%s'.\n",
2396 curproxy->id, target->id, curproxy->id);
Willy Tarreau1a0fe3b2019-02-06 10:25:07 +01002397 cfgerr++;
Willy Tarreau151e1ca2019-02-05 11:38:38 +01002398 }
Emeric Brunb982a3d2010-01-04 15:45:53 +01002399 else {
Willy Tarreau35cd7342021-02-26 20:51:47 +01002400 ha_free(&mrule->table.name);
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01002401 mrule->table.t = target;
2402 stktable_alloc_data_type(target, STKTABLE_DT_SERVER_ID, NULL);
Thayne McCombs92149f92020-11-20 01:28:26 -07002403 stktable_alloc_data_type(target, STKTABLE_DT_SERVER_KEY, NULL);
Frédéric Lécaille9c3a0ce2019-09-02 14:02:28 +02002404 if (!in_proxies_list(target->proxies_list, curproxy)) {
2405 curproxy->next_stkt_ref = target->proxies_list;
2406 target->proxies_list = curproxy;
2407 }
Emeric Brunb982a3d2010-01-04 15:45:53 +01002408 }
2409 }
2410
2411 /* find the target table for 'store response' rules */
2412 list_for_each_entry(mrule, &curproxy->storersp_rules, list) {
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01002413 struct stktable *target;
Emeric Brunb982a3d2010-01-04 15:45:53 +01002414
Emeric Brun1d33b292010-01-04 15:47:17 +01002415 curproxy->be_rsp_ana |= AN_RES_STORE_RULES;
2416
Emeric Brunb982a3d2010-01-04 15:45:53 +01002417 if (mrule->table.name)
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01002418 target = stktable_find_by_name(mrule->table.name);
Emeric Brunb982a3d2010-01-04 15:45:53 +01002419 else
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01002420 target = curproxy->table;
Emeric Brunb982a3d2010-01-04 15:45:53 +01002421
2422 if (!target) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002423 ha_alert("Proxy '%s': unable to find store table '%s'.\n",
Willy Tarreau508d2322020-01-24 07:19:34 +01002424 curproxy->id, mrule->table.name ? mrule->table.name : curproxy->id);
Emeric Brunb982a3d2010-01-04 15:45:53 +01002425 cfgerr++;
2426 }
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01002427 else if (!stktable_compatible_sample(mrule->expr, target->type)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002428 ha_alert("Proxy '%s': type of fetch not usable with type of stick-table '%s'.\n",
2429 curproxy->id, mrule->table.name ? mrule->table.name : curproxy->id);
Emeric Brunb982a3d2010-01-04 15:45:53 +01002430 cfgerr++;
2431 }
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01002432 else if (target->proxy && (curproxy->bind_proc & ~target->proxy->bind_proc)) {
Willy Tarreau151e1ca2019-02-05 11:38:38 +01002433 ha_alert("Proxy '%s': stick-table '%s' referenced 'stick-store' rule not present on all processes covered by proxy '%s'.\n",
2434 curproxy->id, target->id, curproxy->id);
Willy Tarreau1a0fe3b2019-02-06 10:25:07 +01002435 cfgerr++;
Willy Tarreau151e1ca2019-02-05 11:38:38 +01002436 }
Emeric Brunb982a3d2010-01-04 15:45:53 +01002437 else {
Willy Tarreau35cd7342021-02-26 20:51:47 +01002438 ha_free(&mrule->table.name);
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01002439 mrule->table.t = target;
2440 stktable_alloc_data_type(target, STKTABLE_DT_SERVER_ID, NULL);
Thayne McCombs92149f92020-11-20 01:28:26 -07002441 stktable_alloc_data_type(target, STKTABLE_DT_SERVER_KEY, NULL);
Frédéric Lécaille9c3a0ce2019-09-02 14:02:28 +02002442 if (!in_proxies_list(target->proxies_list, curproxy)) {
2443 curproxy->next_stkt_ref = target->proxies_list;
2444 target->proxies_list = curproxy;
2445 }
Emeric Brunb982a3d2010-01-04 15:45:53 +01002446 }
2447 }
2448
Christopher Faulete4e830d2017-09-18 14:51:41 +02002449 /* check validity for 'tcp-request' layer 4 rules */
2450 list_for_each_entry(arule, &curproxy->tcp_req.l4_rules, list) {
2451 err = NULL;
2452 if (arule->check_ptr && !arule->check_ptr(arule, curproxy, &err)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002453 ha_alert("Proxy '%s': %s.\n", curproxy->id, err);
Christopher Faulete4e830d2017-09-18 14:51:41 +02002454 free(err);
Willy Tarreau5f53de72012-12-12 00:25:44 +01002455 cfgerr++;
2456 }
Willy Tarreaud1f96522010-08-03 19:34:32 +02002457 }
2458
Christopher Faulete4e830d2017-09-18 14:51:41 +02002459 /* check validity for 'tcp-request' layer 5 rules */
2460 list_for_each_entry(arule, &curproxy->tcp_req.l5_rules, list) {
2461 err = NULL;
2462 if (arule->check_ptr && !arule->check_ptr(arule, curproxy, &err)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002463 ha_alert("Proxy '%s': %s.\n", curproxy->id, err);
Christopher Faulete4e830d2017-09-18 14:51:41 +02002464 free(err);
Baptiste Assmanne9544932015-11-03 23:31:35 +01002465 cfgerr++;
2466 }
2467 }
2468
Christopher Faulete4e830d2017-09-18 14:51:41 +02002469 /* check validity for 'tcp-request' layer 6 rules */
2470 list_for_each_entry(arule, &curproxy->tcp_req.inspect_rules, list) {
2471 err = NULL;
2472 if (arule->check_ptr && !arule->check_ptr(arule, curproxy, &err)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002473 ha_alert("Proxy '%s': %s.\n", curproxy->id, err);
Christopher Faulete4e830d2017-09-18 14:51:41 +02002474 free(err);
Baptiste Assmanne9544932015-11-03 23:31:35 +01002475 cfgerr++;
2476 }
2477 }
2478
Christopher Faulete4e830d2017-09-18 14:51:41 +02002479 /* check validity for 'http-request' layer 7 rules */
2480 list_for_each_entry(arule, &curproxy->http_req_rules, list) {
2481 err = NULL;
2482 if (arule->check_ptr && !arule->check_ptr(arule, curproxy, &err)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002483 ha_alert("Proxy '%s': %s.\n", curproxy->id, err);
Christopher Faulete4e830d2017-09-18 14:51:41 +02002484 free(err);
Ruoshan Huange4edc6b2016-07-14 15:07:45 +08002485 cfgerr++;
2486 }
Ruoshan Huange4edc6b2016-07-14 15:07:45 +08002487 }
2488
Christopher Faulete4e830d2017-09-18 14:51:41 +02002489 /* check validity for 'http-response' layer 7 rules */
2490 list_for_each_entry(arule, &curproxy->http_res_rules, list) {
2491 err = NULL;
2492 if (arule->check_ptr && !arule->check_ptr(arule, curproxy, &err)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002493 ha_alert("Proxy '%s': %s.\n", curproxy->id, err);
Christopher Faulete4e830d2017-09-18 14:51:41 +02002494 free(err);
Willy Tarreau09448f72014-06-25 18:12:15 +02002495 cfgerr++;
2496 }
Willy Tarreau09448f72014-06-25 18:12:15 +02002497 }
2498
Christopher Faulet6d0c3df2020-01-22 09:26:35 +01002499 /* check validity for 'http-after-response' layer 7 rules */
2500 list_for_each_entry(arule, &curproxy->http_after_res_rules, list) {
2501 err = NULL;
2502 if (arule->check_ptr && !arule->check_ptr(arule, curproxy, &err)) {
2503 ha_alert("Proxy '%s': %s.\n", curproxy->id, err);
2504 free(err);
2505 cfgerr++;
2506 }
2507 }
2508
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01002509 if (curproxy->table && curproxy->table->peers.name) {
Frédéric Lécailleed2b4a62017-07-13 09:07:09 +02002510 struct peers *curpeers;
Emeric Brun32da3c42010-09-23 18:39:19 +02002511
Frédéric Lécailleed2b4a62017-07-13 09:07:09 +02002512 for (curpeers = cfg_peers; curpeers; curpeers = curpeers->next) {
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01002513 if (strcmp(curpeers->id, curproxy->table->peers.name) == 0) {
Willy Tarreau35cd7342021-02-26 20:51:47 +01002514 ha_free(&curproxy->table->peers.name);
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01002515 curproxy->table->peers.p = curpeers;
Emeric Brun32da3c42010-09-23 18:39:19 +02002516 break;
2517 }
2518 }
2519
2520 if (!curpeers) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002521 ha_alert("Proxy '%s': unable to find sync peers '%s'.\n",
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01002522 curproxy->id, curproxy->table->peers.name);
Willy Tarreau35cd7342021-02-26 20:51:47 +01002523 ha_free(&curproxy->table->peers.name);
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01002524 curproxy->table->peers.p = NULL;
Emeric Brun32da3c42010-09-23 18:39:19 +02002525 cfgerr++;
2526 }
Willy Tarreau1ad64ac2020-09-24 08:48:08 +02002527 else if (curpeers->disabled) {
Willy Tarreau77e4bd12015-05-01 20:02:17 +02002528 /* silently disable this peers section */
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01002529 curproxy->table->peers.p = NULL;
Willy Tarreau77e4bd12015-05-01 20:02:17 +02002530 }
Emeric Brun32da3c42010-09-23 18:39:19 +02002531 else if (!curpeers->peers_fe) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002532 ha_alert("Proxy '%s': unable to find local peer '%s' in peers section '%s'.\n",
2533 curproxy->id, localpeer, curpeers->id);
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01002534 curproxy->table->peers.p = NULL;
Emeric Brun32da3c42010-09-23 18:39:19 +02002535 cfgerr++;
2536 }
2537 }
2538
Simon Horman9dc49962015-01-30 11:22:59 +09002539
2540 if (curproxy->email_alert.mailers.name) {
2541 struct mailers *curmailers = mailers;
2542
2543 for (curmailers = mailers; curmailers; curmailers = curmailers->next) {
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002544 if (strcmp(curmailers->id, curproxy->email_alert.mailers.name) == 0)
Simon Horman9dc49962015-01-30 11:22:59 +09002545 break;
Simon Horman9dc49962015-01-30 11:22:59 +09002546 }
Simon Horman9dc49962015-01-30 11:22:59 +09002547 if (!curmailers) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002548 ha_alert("Proxy '%s': unable to find mailers '%s'.\n",
2549 curproxy->id, curproxy->email_alert.mailers.name);
Simon Horman9dc49962015-01-30 11:22:59 +09002550 free_email_alert(curproxy);
2551 cfgerr++;
2552 }
Christopher Faulet0108bb32017-10-20 21:34:32 +02002553 else {
2554 err = NULL;
2555 if (init_email_alert(curmailers, curproxy, &err)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002556 ha_alert("Proxy '%s': %s.\n", curproxy->id, err);
Christopher Faulet0108bb32017-10-20 21:34:32 +02002557 free(err);
2558 cfgerr++;
2559 }
2560 }
Simon Horman9dc49962015-01-30 11:22:59 +09002561 }
2562
Willy Tarreau5bbc6762021-02-12 11:49:25 +01002563 if (curproxy->uri_auth && !(curproxy->uri_auth->flags & STAT_CONVDONE) &&
Willy Tarreauff011f22011-01-06 17:51:27 +01002564 !LIST_ISEMPTY(&curproxy->uri_auth->http_req_rules) &&
Krzysztof Piotr Oledzki8c8bd452010-01-29 19:29:32 +01002565 (curproxy->uri_auth->userlist || curproxy->uri_auth->auth_realm )) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002566 ha_alert("%s '%s': stats 'auth'/'realm' and 'http-request' can't be used at the same time.\n",
2567 "proxy", curproxy->id);
Krzysztof Piotr Oledzki8c8bd452010-01-29 19:29:32 +01002568 cfgerr++;
2569 goto out_uri_auth_compat;
2570 }
2571
Willy Tarreauee4f5f82019-10-09 09:59:22 +02002572 if (curproxy->uri_auth && curproxy->uri_auth->userlist &&
Willy Tarreau5bbc6762021-02-12 11:49:25 +01002573 (!(curproxy->uri_auth->flags & STAT_CONVDONE) ||
Willy Tarreauee4f5f82019-10-09 09:59:22 +02002574 LIST_ISEMPTY(&curproxy->uri_auth->http_req_rules))) {
Willy Tarreau95fa4692010-02-01 13:05:50 +01002575 const char *uri_auth_compat_req[10];
Thierry FOURNIERa28a9422015-08-04 19:35:46 +02002576 struct act_rule *rule;
Willy Tarreau95fa4692010-02-01 13:05:50 +01002577 int i = 0;
Willy Tarreau95fa4692010-02-01 13:05:50 +01002578 /* build the ACL condition from scratch. We're relying on anonymous ACLs for that */
2579 uri_auth_compat_req[i++] = "auth";
Krzysztof Piotr Oledzki8c8bd452010-01-29 19:29:32 +01002580
2581 if (curproxy->uri_auth->auth_realm) {
Willy Tarreau95fa4692010-02-01 13:05:50 +01002582 uri_auth_compat_req[i++] = "realm";
2583 uri_auth_compat_req[i++] = curproxy->uri_auth->auth_realm;
2584 }
Krzysztof Piotr Oledzki8c8bd452010-01-29 19:29:32 +01002585
Willy Tarreau95fa4692010-02-01 13:05:50 +01002586 uri_auth_compat_req[i++] = "unless";
2587 uri_auth_compat_req[i++] = "{";
2588 uri_auth_compat_req[i++] = "http_auth(.internal-stats-userlist)";
2589 uri_auth_compat_req[i++] = "}";
2590 uri_auth_compat_req[i++] = "";
Krzysztof Piotr Oledzki8c8bd452010-01-29 19:29:32 +01002591
Willy Tarreauff011f22011-01-06 17:51:27 +01002592 rule = parse_http_req_cond(uri_auth_compat_req, "internal-stats-auth-compat", 0, curproxy);
2593 if (!rule) {
Willy Tarreau95fa4692010-02-01 13:05:50 +01002594 cfgerr++;
2595 break;
Krzysztof Piotr Oledzki8c8bd452010-01-29 19:29:32 +01002596 }
2597
Willy Tarreauff011f22011-01-06 17:51:27 +01002598 LIST_ADDQ(&curproxy->uri_auth->http_req_rules, &rule->list);
Willy Tarreau95fa4692010-02-01 13:05:50 +01002599
Krzysztof Piotr Oledzki8c8bd452010-01-29 19:29:32 +01002600 if (curproxy->uri_auth->auth_realm) {
Willy Tarreau61cfdf42021-02-20 10:46:51 +01002601 ha_free(&curproxy->uri_auth->auth_realm);
Krzysztof Piotr Oledzki8c8bd452010-01-29 19:29:32 +01002602 }
Willy Tarreau5bbc6762021-02-12 11:49:25 +01002603 curproxy->uri_auth->flags |= STAT_CONVDONE;
Krzysztof Piotr Oledzki8c8bd452010-01-29 19:29:32 +01002604 }
2605out_uri_auth_compat:
2606
Dragan Dosen43885c72015-10-01 13:18:13 +02002607 /* check whether we have a log server that uses RFC5424 log format */
Dragan Dosen1322d092015-09-22 16:05:32 +02002608 list_for_each_entry(tmplogsrv, &curproxy->logsrvs, list) {
Dragan Dosen43885c72015-10-01 13:18:13 +02002609 if (tmplogsrv->format == LOG_FORMAT_RFC5424) {
2610 if (!curproxy->conf.logformat_sd_string) {
2611 /* set the default logformat_sd_string */
2612 curproxy->conf.logformat_sd_string = default_rfc5424_sd_log_format;
2613 }
Dragan Dosen1322d092015-09-22 16:05:32 +02002614 break;
Dragan Dosen1322d092015-09-22 16:05:32 +02002615 }
Dragan Dosen1322d092015-09-22 16:05:32 +02002616 }
Dragan Dosen68d2e3a2015-09-19 22:35:44 +02002617
Willy Tarreaua4312fa2013-04-02 16:34:32 +02002618 /* compile the log format */
2619 if (!(curproxy->cap & PR_CAP_FE)) {
Willy Tarreau62a61232013-04-12 18:13:46 +02002620 if (curproxy->conf.logformat_string != default_http_log_format &&
2621 curproxy->conf.logformat_string != default_tcp_log_format &&
2622 curproxy->conf.logformat_string != clf_http_log_format)
2623 free(curproxy->conf.logformat_string);
2624 curproxy->conf.logformat_string = NULL;
Willy Tarreau61cfdf42021-02-20 10:46:51 +01002625 ha_free(&curproxy->conf.lfs_file);
Willy Tarreau62a61232013-04-12 18:13:46 +02002626 curproxy->conf.lfs_line = 0;
Dragan Dosen0b85ece2015-09-25 19:17:44 +02002627
2628 if (curproxy->conf.logformat_sd_string != default_rfc5424_sd_log_format)
2629 free(curproxy->conf.logformat_sd_string);
2630 curproxy->conf.logformat_sd_string = NULL;
Willy Tarreau61cfdf42021-02-20 10:46:51 +01002631 ha_free(&curproxy->conf.lfsd_file);
Dragan Dosen0b85ece2015-09-25 19:17:44 +02002632 curproxy->conf.lfsd_line = 0;
Willy Tarreaua4312fa2013-04-02 16:34:32 +02002633 }
2634
Willy Tarreau62a61232013-04-12 18:13:46 +02002635 if (curproxy->conf.logformat_string) {
2636 curproxy->conf.args.ctx = ARGC_LOG;
2637 curproxy->conf.args.file = curproxy->conf.lfs_file;
2638 curproxy->conf.args.line = curproxy->conf.lfs_line;
Thierry FOURNIER / OZON.IO8a4e4422016-11-23 00:41:28 +01002639 err = NULL;
Dragan Dosen1e3b16f2020-06-23 18:16:44 +02002640 if (!parse_logformat_string(curproxy->conf.logformat_string, curproxy, &curproxy->logformat,
2641 LOG_OPT_MANDATORY|LOG_OPT_MERGE_SPACES,
Thierry FOURNIER / OZON.IO8a4e4422016-11-23 00:41:28 +01002642 SMP_VAL_FE_LOG_END, &err)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002643 ha_alert("Parsing [%s:%d]: failed to parse log-format : %s.\n",
2644 curproxy->conf.lfs_file, curproxy->conf.lfs_line, err);
Thierry FOURNIER / OZON.IO8a4e4422016-11-23 00:41:28 +01002645 free(err);
Thierry FOURNIER / OZON.IO59fd5112016-11-22 23:50:02 +01002646 cfgerr++;
2647 }
Willy Tarreau62a61232013-04-12 18:13:46 +02002648 curproxy->conf.args.file = NULL;
2649 curproxy->conf.args.line = 0;
2650 }
Willy Tarreaua4312fa2013-04-02 16:34:32 +02002651
Dragan Dosen0b85ece2015-09-25 19:17:44 +02002652 if (curproxy->conf.logformat_sd_string) {
2653 curproxy->conf.args.ctx = ARGC_LOGSD;
2654 curproxy->conf.args.file = curproxy->conf.lfsd_file;
2655 curproxy->conf.args.line = curproxy->conf.lfsd_line;
Thierry FOURNIER / OZON.IO8a4e4422016-11-23 00:41:28 +01002656 err = NULL;
Dragan Dosen1e3b16f2020-06-23 18:16:44 +02002657 if (!parse_logformat_string(curproxy->conf.logformat_sd_string, curproxy, &curproxy->logformat_sd,
2658 LOG_OPT_MANDATORY|LOG_OPT_MERGE_SPACES,
Thierry FOURNIER / OZON.IO8a4e4422016-11-23 00:41:28 +01002659 SMP_VAL_FE_LOG_END, &err)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002660 ha_alert("Parsing [%s:%d]: failed to parse log-format-sd : %s.\n",
2661 curproxy->conf.lfs_file, curproxy->conf.lfs_line, err);
Thierry FOURNIER / OZON.IO8a4e4422016-11-23 00:41:28 +01002662 free(err);
Thierry FOURNIER / OZON.IO59fd5112016-11-22 23:50:02 +01002663 cfgerr++;
Thierry FOURNIER / OZON.IO8a4e4422016-11-23 00:41:28 +01002664 } else if (!add_to_logformat_list(NULL, NULL, LF_SEPARATOR, &curproxy->logformat_sd, &err)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002665 ha_alert("Parsing [%s:%d]: failed to parse log-format-sd : %s.\n",
2666 curproxy->conf.lfs_file, curproxy->conf.lfs_line, err);
Thierry FOURNIER / OZON.IO8a4e4422016-11-23 00:41:28 +01002667 free(err);
Thierry FOURNIER / OZON.IO59fd5112016-11-22 23:50:02 +01002668 cfgerr++;
2669 }
Dragan Dosen0b85ece2015-09-25 19:17:44 +02002670 curproxy->conf.args.file = NULL;
2671 curproxy->conf.args.line = 0;
2672 }
2673
Willy Tarreau62a61232013-04-12 18:13:46 +02002674 if (curproxy->conf.uniqueid_format_string) {
2675 curproxy->conf.args.ctx = ARGC_UIF;
2676 curproxy->conf.args.file = curproxy->conf.uif_file;
2677 curproxy->conf.args.line = curproxy->conf.uif_line;
Thierry FOURNIER / OZON.IO8a4e4422016-11-23 00:41:28 +01002678 err = NULL;
Dragan Dosen1e3b16f2020-06-23 18:16:44 +02002679 if (!parse_logformat_string(curproxy->conf.uniqueid_format_string, curproxy, &curproxy->format_unique_id,
2680 LOG_OPT_HTTP|LOG_OPT_MERGE_SPACES,
2681 (curproxy->cap & PR_CAP_FE) ? SMP_VAL_FE_HRQ_HDR
2682 : SMP_VAL_BE_HRQ_HDR,
2683 &err)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002684 ha_alert("Parsing [%s:%d]: failed to parse unique-id : %s.\n",
2685 curproxy->conf.uif_file, curproxy->conf.uif_line, err);
Thierry FOURNIER / OZON.IO8a4e4422016-11-23 00:41:28 +01002686 free(err);
Thierry FOURNIER / OZON.IO59fd5112016-11-22 23:50:02 +01002687 cfgerr++;
2688 }
Willy Tarreau62a61232013-04-12 18:13:46 +02002689 curproxy->conf.args.file = NULL;
2690 curproxy->conf.args.line = 0;
2691 }
Willy Tarreaua4312fa2013-04-02 16:34:32 +02002692
Thierry FOURNIER9eec0a62014-01-22 18:38:02 +01002693 /* only now we can check if some args remain unresolved.
2694 * This must be done after the users and groups resolution.
2695 */
Willy Tarreaua4312fa2013-04-02 16:34:32 +02002696 cfgerr += smp_resolve_args(curproxy);
2697 if (!cfgerr)
2698 cfgerr += acl_find_targets(curproxy);
Krzysztof Piotr Oledzkif9423ae2010-01-29 19:26:18 +01002699
Willy Tarreau2738a142006-07-08 17:28:09 +02002700 if ((curproxy->mode == PR_MODE_TCP || curproxy->mode == PR_MODE_HTTP) &&
Willy Tarreau0c303ee2008-07-07 00:09:58 +02002701 (((curproxy->cap & PR_CAP_FE) && !curproxy->timeout.client) ||
Willy Tarreaud825eef2007-05-12 22:35:00 +02002702 ((curproxy->cap & PR_CAP_BE) && (curproxy->srv) &&
Willy Tarreauce887fd2012-05-12 12:50:00 +02002703 (!curproxy->timeout.connect ||
2704 (!curproxy->timeout.server && (curproxy->mode == PR_MODE_HTTP || !curproxy->timeout.tunnel)))))) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002705 ha_warning("config : missing timeouts for %s '%s'.\n"
2706 " | While not properly invalid, you will certainly encounter various problems\n"
2707 " | with such a configuration. To fix this, please ensure that all following\n"
2708 " | timeouts are set to a non-zero value: 'client', 'connect', 'server'.\n",
2709 proxy_type_str(curproxy), curproxy->id);
Willy Tarreaubb925012009-07-23 13:36:36 +02002710 err_code |= ERR_WARN;
Willy Tarreau2738a142006-07-08 17:28:09 +02002711 }
Willy Tarreauf3c69202006-07-09 16:42:34 +02002712
Willy Tarreau1fa31262007-12-03 00:36:16 +01002713 /* Historically, the tarpit and queue timeouts were inherited from contimeout.
2714 * We must still support older configurations, so let's find out whether those
2715 * parameters have been set or must be copied from contimeouts.
2716 */
Willy Tarreau937c3ea2021-02-12 11:14:35 +01002717 if (!curproxy->timeout.tarpit)
2718 curproxy->timeout.tarpit = curproxy->timeout.connect;
2719 if ((curproxy->cap & PR_CAP_BE) && !curproxy->timeout.queue)
2720 curproxy->timeout.queue = curproxy->timeout.connect;
Willy Tarreau1fa31262007-12-03 00:36:16 +01002721
Christopher Faulete5870d82020-04-15 11:32:03 +02002722 if ((curproxy->tcpcheck_rules.flags & TCPCHK_RULES_UNUSED_TCP_RS)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002723 ha_warning("config : %s '%s' uses tcp-check rules without 'option tcp-check', so the rules are ignored.\n",
2724 proxy_type_str(curproxy), curproxy->id);
Willy Tarreau215663d2014-06-13 18:30:23 +02002725 err_code |= ERR_WARN;
2726 }
2727
Willy Tarreau193b8c62012-11-22 00:17:38 +01002728 /* ensure that cookie capture length is not too large */
2729 if (curproxy->capture_len >= global.tune.cookie_len) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002730 ha_warning("config : truncating capture length to %d bytes for %s '%s'.\n",
2731 global.tune.cookie_len - 1, proxy_type_str(curproxy), curproxy->id);
Willy Tarreau193b8c62012-11-22 00:17:38 +01002732 err_code |= ERR_WARN;
2733 curproxy->capture_len = global.tune.cookie_len - 1;
2734 }
2735
Willy Tarreaucf7f3202007-05-13 22:46:04 +02002736 /* The small pools required for the capture lists */
Willy Tarreau9a54e132012-03-24 08:33:05 +01002737 if (curproxy->nb_req_cap) {
Willy Tarreaud9ed3d22014-06-13 12:23:06 +02002738 curproxy->req_cap_pool = create_pool("ptrcap",
2739 curproxy->nb_req_cap * sizeof(char *),
2740 MEM_F_SHARED);
Willy Tarreau9a54e132012-03-24 08:33:05 +01002741 }
2742
2743 if (curproxy->nb_rsp_cap) {
Willy Tarreaud9ed3d22014-06-13 12:23:06 +02002744 curproxy->rsp_cap_pool = create_pool("ptrcap",
2745 curproxy->nb_rsp_cap * sizeof(char *),
2746 MEM_F_SHARED);
Willy Tarreau9a54e132012-03-24 08:33:05 +01002747 }
Willy Tarreaucf7f3202007-05-13 22:46:04 +02002748
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002749 switch (curproxy->load_server_state_from_file) {
2750 case PR_SRV_STATE_FILE_UNSPEC:
2751 curproxy->load_server_state_from_file = PR_SRV_STATE_FILE_NONE;
2752 break;
2753 case PR_SRV_STATE_FILE_GLOBAL:
2754 if (!global.server_state_file) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002755 ha_warning("config : backend '%s' configured to load server state file from global section 'server-state-file' directive. Unfortunately, 'server-state-file' is not set!\n",
2756 curproxy->id);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002757 err_code |= ERR_WARN;
2758 }
2759 break;
2760 }
2761
Willy Tarreaubaaee002006-06-26 02:48:02 +02002762 /* first, we will invert the servers list order */
2763 newsrv = NULL;
2764 while (curproxy->srv) {
2765 struct server *next;
2766
2767 next = curproxy->srv->next;
2768 curproxy->srv->next = newsrv;
2769 newsrv = curproxy->srv;
2770 if (!next)
2771 break;
2772 curproxy->srv = next;
2773 }
2774
Willy Tarreau17edc812014-01-03 12:14:34 +01002775 /* Check that no server name conflicts. This causes trouble in the stats.
2776 * We only emit a warning for the first conflict affecting each server,
2777 * in order to avoid combinatory explosion if all servers have the same
2778 * name. We do that only for servers which do not have an explicit ID,
2779 * because these IDs were made also for distinguishing them and we don't
2780 * want to annoy people who correctly manage them.
2781 */
2782 for (newsrv = curproxy->srv; newsrv; newsrv = newsrv->next) {
2783 struct server *other_srv;
2784
2785 if (newsrv->puid)
2786 continue;
2787
2788 for (other_srv = curproxy->srv; other_srv && other_srv != newsrv; other_srv = other_srv->next) {
2789 if (!other_srv->puid && strcmp(other_srv->id, newsrv->id) == 0) {
Willy Tarreaub01302f2019-05-27 19:31:06 +02002790 ha_alert("parsing [%s:%d] : %s '%s', another server named '%s' was already defined at line %d, please use distinct names.\n",
Christopher Faulet767a84b2017-11-24 16:50:31 +01002791 newsrv->conf.file, newsrv->conf.line,
2792 proxy_type_str(curproxy), curproxy->id,
2793 newsrv->id, other_srv->conf.line);
Willy Tarreaub01302f2019-05-27 19:31:06 +02002794 cfgerr++;
Willy Tarreau17edc812014-01-03 12:14:34 +01002795 break;
2796 }
2797 }
2798 }
2799
Willy Tarreaudd701652010-05-25 23:03:02 +02002800 /* assign automatic UIDs to servers which don't have one yet */
2801 next_id = 1;
2802 newsrv = curproxy->srv;
2803 while (newsrv != NULL) {
2804 if (!newsrv->puid) {
2805 /* server ID not set, use automatic numbering with first
2806 * spare entry starting with next_svid.
2807 */
2808 next_id = get_next_id(&curproxy->conf.used_server_id, next_id);
2809 newsrv->conf.id.key = newsrv->puid = next_id;
2810 eb32_insert(&curproxy->conf.used_server_id, &newsrv->conf.id);
Frédéric Lécaille84d60462019-05-17 14:29:15 +02002811 newsrv->conf.name.key = newsrv->id;
2812 ebis_insert(&curproxy->conf.used_server_name, &newsrv->conf.name);
Willy Tarreaudd701652010-05-25 23:03:02 +02002813 }
2814 next_id++;
2815 newsrv = newsrv->next;
2816 }
2817
Willy Tarreau20697042007-11-15 23:26:18 +01002818 curproxy->lbprm.wmult = 1; /* default weight multiplier */
Willy Tarreau5dc2fa62007-11-19 19:10:18 +01002819 curproxy->lbprm.wdiv = 1; /* default weight divider */
Willy Tarreaubaaee002006-06-26 02:48:02 +02002820
Willy Tarreau62c3be22012-01-20 13:12:32 +01002821 /*
2822 * If this server supports a maxconn parameter, it needs a dedicated
2823 * tasks to fill the emptied slots when a connection leaves.
2824 * Also, resolve deferred tracking dependency if needed.
2825 */
2826 newsrv = curproxy->srv;
2827 while (newsrv != NULL) {
2828 if (newsrv->minconn > newsrv->maxconn) {
2829 /* Only 'minconn' was specified, or it was higher than or equal
2830 * to 'maxconn'. Let's turn this into maxconn and clean it, as
2831 * this will avoid further useless expensive computations.
2832 */
2833 newsrv->maxconn = newsrv->minconn;
2834 } else if (newsrv->maxconn && !newsrv->minconn) {
2835 /* minconn was not specified, so we set it to maxconn */
2836 newsrv->minconn = newsrv->maxconn;
2837 }
2838
William Dauchyf6370442020-11-14 19:25:33 +01002839 /* this will also properly set the transport layer for
2840 * prod and checks
2841 * if default-server have use_ssl, prerare ssl init
2842 * without activating it */
2843 if (newsrv->use_ssl == 1 || newsrv->check.use_ssl == 1 ||
2844 (newsrv->proxy->options & PR_O_TCPCHK_SSL) ||
2845 (newsrv->use_ssl != 1 && curproxy->defsrv.use_ssl == 1)) {
Willy Tarreau17d45382016-12-22 21:16:08 +01002846 if (xprt_get(XPRT_SSL) && xprt_get(XPRT_SSL)->prepare_srv)
2847 cfgerr += xprt_get(XPRT_SSL)->prepare_srv(newsrv);
2848 }
Emeric Brun94324a42012-10-11 14:00:19 +02002849
Willy Tarreau034c88c2017-01-23 23:36:45 +01002850 if ((newsrv->flags & SRV_F_FASTOPEN) &&
2851 ((curproxy->retry_type & (PR_RE_DISCONNECTED | PR_RE_TIMEOUT)) !=
2852 (PR_RE_DISCONNECTED | PR_RE_TIMEOUT)))
2853 ha_warning("parsing [%s:%d] : %s '%s': server '%s' has tfo activated, the backend should be configured with at least 'conn-failure', 'empty-response' and 'response-timeout' or we wouldn't be able to retry the connection on failure.\n",
2854 newsrv->conf.file, newsrv->conf.line,
2855 proxy_type_str(curproxy), curproxy->id,
2856 newsrv->id);
2857
Willy Tarreau62c3be22012-01-20 13:12:32 +01002858 if (newsrv->trackit) {
2859 struct proxy *px;
Willy Tarreau32091232014-05-16 13:52:00 +02002860 struct server *srv, *loop;
Willy Tarreau62c3be22012-01-20 13:12:32 +01002861 char *pname, *sname;
2862
2863 pname = newsrv->trackit;
2864 sname = strrchr(pname, '/');
2865
2866 if (sname)
2867 *sname++ = '\0';
2868 else {
2869 sname = pname;
2870 pname = NULL;
2871 }
2872
2873 if (pname) {
Willy Tarreau9e0bb102015-05-26 11:24:42 +02002874 px = proxy_be_by_name(pname);
Willy Tarreau62c3be22012-01-20 13:12:32 +01002875 if (!px) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002876 ha_alert("config : %s '%s', server '%s': unable to find required proxy '%s' for tracking.\n",
2877 proxy_type_str(curproxy), curproxy->id,
2878 newsrv->id, pname);
Willy Tarreau62c3be22012-01-20 13:12:32 +01002879 cfgerr++;
2880 goto next_srv;
2881 }
2882 } else
2883 px = curproxy;
2884
2885 srv = findserver(px, sname);
2886 if (!srv) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002887 ha_alert("config : %s '%s', server '%s': unable to find required server '%s' for tracking.\n",
2888 proxy_type_str(curproxy), curproxy->id,
2889 newsrv->id, sname);
Willy Tarreau62c3be22012-01-20 13:12:32 +01002890 cfgerr++;
2891 goto next_srv;
2892 }
2893
Christopher Faulet8892e5d2020-03-26 19:48:20 +01002894 if (!srv->do_check && !srv->do_agent && !srv->track && !srv->trackit) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002895 ha_alert("config : %s '%s', server '%s': unable to use %s/%s for "
2896 "tracking as it does not have any check nor agent enabled.\n",
2897 proxy_type_str(curproxy), curproxy->id,
2898 newsrv->id, px->id, srv->id);
Willy Tarreau32091232014-05-16 13:52:00 +02002899 cfgerr++;
2900 goto next_srv;
2901 }
2902
2903 for (loop = srv->track; loop && loop != newsrv; loop = loop->track);
2904
Frédéric Lécaille2efc6492017-03-14 14:32:17 +01002905 if (newsrv == srv || loop) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002906 ha_alert("config : %s '%s', server '%s': unable to track %s/%s as it "
2907 "belongs to a tracking chain looping back to %s/%s.\n",
2908 proxy_type_str(curproxy), curproxy->id,
2909 newsrv->id, px->id, srv->id, px->id,
2910 newsrv == srv ? srv->id : loop->id);
Willy Tarreau62c3be22012-01-20 13:12:32 +01002911 cfgerr++;
2912 goto next_srv;
2913 }
2914
2915 if (curproxy != px &&
2916 (curproxy->options & PR_O_DISABLE404) != (px->options & PR_O_DISABLE404)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002917 ha_alert("config : %s '%s', server '%s': unable to use %s/%s for"
2918 "tracking: disable-on-404 option inconsistency.\n",
2919 proxy_type_str(curproxy), curproxy->id,
2920 newsrv->id, px->id, srv->id);
Willy Tarreau62c3be22012-01-20 13:12:32 +01002921 cfgerr++;
2922 goto next_srv;
2923 }
2924
Willy Tarreau62c3be22012-01-20 13:12:32 +01002925 newsrv->track = srv;
Willy Tarreau1a53a3a2013-12-11 15:27:05 +01002926 newsrv->tracknext = srv->trackers;
2927 srv->trackers = newsrv;
Willy Tarreau62c3be22012-01-20 13:12:32 +01002928
Willy Tarreau61cfdf42021-02-20 10:46:51 +01002929 ha_free(&newsrv->trackit);
Willy Tarreau62c3be22012-01-20 13:12:32 +01002930 }
Baptiste Assmanna68ca962015-04-14 01:15:08 +02002931
Willy Tarreau62c3be22012-01-20 13:12:32 +01002932 next_srv:
2933 newsrv = newsrv->next;
2934 }
2935
Olivier Houchard4e694042017-03-14 20:01:29 +01002936 /*
2937 * Try to generate dynamic cookies for servers now.
2938 * It couldn't be done earlier, since at the time we parsed
2939 * the server line, we may not have known yet that we
2940 * should use dynamic cookies, or the secret key may not
2941 * have been provided yet.
2942 */
2943 if (curproxy->ck_opts & PR_CK_DYNAMIC) {
2944 newsrv = curproxy->srv;
2945 while (newsrv != NULL) {
2946 srv_set_dyncookie(newsrv);
2947 newsrv = newsrv->next;
2948 }
2949
2950 }
Willy Tarreauf3e49f92009-10-03 12:21:20 +02002951 /* We have to initialize the server lookup mechanism depending
Joseph Herlanta14c03e2018-11-15 14:04:19 -08002952 * on what LB algorithm was chosen.
Willy Tarreauf3e49f92009-10-03 12:21:20 +02002953 */
2954
2955 curproxy->lbprm.algo &= ~(BE_LB_LKUP | BE_LB_PROP_DYN);
2956 switch (curproxy->lbprm.algo & BE_LB_KIND) {
2957 case BE_LB_KIND_RR:
Willy Tarreau9757a382009-10-03 12:56:50 +02002958 if ((curproxy->lbprm.algo & BE_LB_PARM) == BE_LB_RR_STATIC) {
2959 curproxy->lbprm.algo |= BE_LB_LKUP_MAP;
2960 init_server_map(curproxy);
Willy Tarreau760e81d2018-05-03 07:20:40 +02002961 } else if ((curproxy->lbprm.algo & BE_LB_PARM) == BE_LB_RR_RANDOM) {
2962 curproxy->lbprm.algo |= BE_LB_LKUP_CHTREE | BE_LB_PROP_DYN;
2963 chash_init_server_tree(curproxy);
Willy Tarreau9757a382009-10-03 12:56:50 +02002964 } else {
2965 curproxy->lbprm.algo |= BE_LB_LKUP_RRTREE | BE_LB_PROP_DYN;
2966 fwrr_init_server_groups(curproxy);
2967 }
Willy Tarreauf3e49f92009-10-03 12:21:20 +02002968 break;
Willy Tarreau6b2e11b2009-10-01 07:52:15 +02002969
Willy Tarreau3ebb1162012-02-13 16:57:44 +01002970 case BE_LB_KIND_CB:
Willy Tarreauf09c6602012-02-13 17:12:08 +01002971 if ((curproxy->lbprm.algo & BE_LB_PARM) == BE_LB_CB_LC) {
2972 curproxy->lbprm.algo |= BE_LB_LKUP_LCTREE | BE_LB_PROP_DYN;
2973 fwlc_init_server_tree(curproxy);
2974 } else {
2975 curproxy->lbprm.algo |= BE_LB_LKUP_FSTREE | BE_LB_PROP_DYN;
2976 fas_init_server_tree(curproxy);
2977 }
Willy Tarreauf3e49f92009-10-03 12:21:20 +02002978 break;
Willy Tarreau6b2e11b2009-10-01 07:52:15 +02002979
Willy Tarreauf3e49f92009-10-03 12:21:20 +02002980 case BE_LB_KIND_HI:
Willy Tarreau6b2e11b2009-10-01 07:52:15 +02002981 if ((curproxy->lbprm.algo & BE_LB_HASH_TYPE) == BE_LB_HASH_CONS) {
2982 curproxy->lbprm.algo |= BE_LB_LKUP_CHTREE | BE_LB_PROP_DYN;
2983 chash_init_server_tree(curproxy);
2984 } else {
2985 curproxy->lbprm.algo |= BE_LB_LKUP_MAP;
2986 init_server_map(curproxy);
2987 }
Willy Tarreauf3e49f92009-10-03 12:21:20 +02002988 break;
2989 }
Willy Tarreaucd10def2020-10-17 18:48:47 +02002990 HA_RWLOCK_INIT(&curproxy->lbprm.lock);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002991
2992 if (curproxy->options & PR_O_LOGASAP)
2993 curproxy->to_log &= ~LW_BYTES;
2994
Willy Tarreaue7ded1f2009-08-09 10:11:45 +02002995 if ((curproxy->mode == PR_MODE_TCP || curproxy->mode == PR_MODE_HTTP) &&
Dragan Dosen0b85ece2015-09-25 19:17:44 +02002996 (curproxy->cap & PR_CAP_FE) && LIST_ISEMPTY(&curproxy->logsrvs) &&
2997 (!LIST_ISEMPTY(&curproxy->logformat) || !LIST_ISEMPTY(&curproxy->logformat_sd))) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002998 ha_warning("config : log format ignored for %s '%s' since it has no log address.\n",
2999 proxy_type_str(curproxy), curproxy->id);
Willy Tarreaue7ded1f2009-08-09 10:11:45 +02003000 err_code |= ERR_WARN;
3001 }
3002
Willy Tarreaue24fdfb2010-03-25 07:22:56 +01003003 if (curproxy->mode != PR_MODE_HTTP) {
3004 int optnum;
3005
Willy Tarreaue24fdfb2010-03-25 07:22:56 +01003006 if (curproxy->uri_auth) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003007 ha_warning("config : 'stats' statement ignored for %s '%s' as it requires HTTP mode.\n",
3008 proxy_type_str(curproxy), curproxy->id);
Willy Tarreaue24fdfb2010-03-25 07:22:56 +01003009 err_code |= ERR_WARN;
3010 curproxy->uri_auth = NULL;
3011 }
3012
Willy Tarreaude7dc882017-03-10 11:49:21 +01003013 if (curproxy->capture_name) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003014 ha_warning("config : 'capture' statement ignored for %s '%s' as it requires HTTP mode.\n",
3015 proxy_type_str(curproxy), curproxy->id);
Willy Tarreaude7dc882017-03-10 11:49:21 +01003016 err_code |= ERR_WARN;
3017 }
3018
3019 if (!LIST_ISEMPTY(&curproxy->http_req_rules)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003020 ha_warning("config : 'http-request' rules ignored for %s '%s' as they require HTTP mode.\n",
3021 proxy_type_str(curproxy), curproxy->id);
Willy Tarreaude7dc882017-03-10 11:49:21 +01003022 err_code |= ERR_WARN;
3023 }
3024
3025 if (!LIST_ISEMPTY(&curproxy->http_res_rules)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003026 ha_warning("config : 'http-response' rules ignored for %s '%s' as they require HTTP mode.\n",
3027 proxy_type_str(curproxy), curproxy->id);
Willy Tarreaude7dc882017-03-10 11:49:21 +01003028 err_code |= ERR_WARN;
3029 }
3030
Willy Tarreaude7dc882017-03-10 11:49:21 +01003031 if (!LIST_ISEMPTY(&curproxy->redirect_rules)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003032 ha_warning("config : 'redirect' rules ignored for %s '%s' as they require HTTP mode.\n",
3033 proxy_type_str(curproxy), curproxy->id);
Willy Tarreaude7dc882017-03-10 11:49:21 +01003034 err_code |= ERR_WARN;
3035 }
3036
Willy Tarreau87cf5142011-08-19 22:57:24 +02003037 if (curproxy->options & (PR_O_FWDFOR | PR_O_FF_ALWAYS)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003038 ha_warning("config : 'option %s' ignored for %s '%s' as it requires HTTP mode.\n",
3039 "forwardfor", proxy_type_str(curproxy), curproxy->id);
Willy Tarreaue24fdfb2010-03-25 07:22:56 +01003040 err_code |= ERR_WARN;
Willy Tarreau87cf5142011-08-19 22:57:24 +02003041 curproxy->options &= ~(PR_O_FWDFOR | PR_O_FF_ALWAYS);
Willy Tarreaue24fdfb2010-03-25 07:22:56 +01003042 }
3043
3044 if (curproxy->options & PR_O_ORGTO) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003045 ha_warning("config : 'option %s' ignored for %s '%s' as it requires HTTP mode.\n",
3046 "originalto", proxy_type_str(curproxy), curproxy->id);
Willy Tarreaue24fdfb2010-03-25 07:22:56 +01003047 err_code |= ERR_WARN;
3048 curproxy->options &= ~PR_O_ORGTO;
3049 }
3050
3051 for (optnum = 0; cfg_opts[optnum].name; optnum++) {
3052 if (cfg_opts[optnum].mode == PR_MODE_HTTP &&
3053 (curproxy->cap & cfg_opts[optnum].cap) &&
3054 (curproxy->options & cfg_opts[optnum].val)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003055 ha_warning("config : 'option %s' ignored for %s '%s' as it requires HTTP mode.\n",
3056 cfg_opts[optnum].name, proxy_type_str(curproxy), curproxy->id);
Willy Tarreaue24fdfb2010-03-25 07:22:56 +01003057 err_code |= ERR_WARN;
3058 curproxy->options &= ~cfg_opts[optnum].val;
3059 }
3060 }
3061
3062 for (optnum = 0; cfg_opts2[optnum].name; optnum++) {
3063 if (cfg_opts2[optnum].mode == PR_MODE_HTTP &&
3064 (curproxy->cap & cfg_opts2[optnum].cap) &&
3065 (curproxy->options2 & cfg_opts2[optnum].val)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003066 ha_warning("config : 'option %s' ignored for %s '%s' as it requires HTTP mode.\n",
3067 cfg_opts2[optnum].name, proxy_type_str(curproxy), curproxy->id);
Willy Tarreaue24fdfb2010-03-25 07:22:56 +01003068 err_code |= ERR_WARN;
3069 curproxy->options2 &= ~cfg_opts2[optnum].val;
3070 }
3071 }
Willy Tarreaubce70882009-09-07 11:51:47 +02003072
Willy Tarreau29fbe512015-08-20 19:35:14 +02003073#if defined(CONFIG_HAP_TRANSPARENT)
Willy Tarreauef9a3602012-12-08 22:29:20 +01003074 if (curproxy->conn_src.bind_hdr_occ) {
3075 curproxy->conn_src.bind_hdr_occ = 0;
Christopher Faulet767a84b2017-11-24 16:50:31 +01003076 ha_warning("config : %s '%s' : ignoring use of header %s as source IP in non-HTTP mode.\n",
3077 proxy_type_str(curproxy), curproxy->id, curproxy->conn_src.bind_hdr_name);
Willy Tarreaubce70882009-09-07 11:51:47 +02003078 err_code |= ERR_WARN;
3079 }
Willy Tarreauefa5f512010-03-30 20:13:29 +02003080#endif
Willy Tarreaue24fdfb2010-03-25 07:22:56 +01003081 }
3082
Willy Tarreaubaaee002006-06-26 02:48:02 +02003083 /*
Willy Tarreau21d2af32008-02-14 20:25:24 +01003084 * ensure that we're not cross-dressing a TCP server into HTTP.
3085 */
3086 newsrv = curproxy->srv;
3087 while (newsrv != NULL) {
Willy Tarreau0cec3312011-10-31 13:49:26 +01003088 if ((curproxy->mode != PR_MODE_HTTP) && newsrv->rdr_len) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003089 ha_alert("config : %s '%s' : server cannot have cookie or redirect prefix in non-HTTP mode.\n",
3090 proxy_type_str(curproxy), curproxy->id);
Willy Tarreaubb925012009-07-23 13:36:36 +02003091 cfgerr++;
Willy Tarreau21d2af32008-02-14 20:25:24 +01003092 }
Willy Tarreaubce70882009-09-07 11:51:47 +02003093
Willy Tarreau0cec3312011-10-31 13:49:26 +01003094 if ((curproxy->mode != PR_MODE_HTTP) && newsrv->cklen) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003095 ha_warning("config : %s '%s' : ignoring cookie for server '%s' as HTTP mode is disabled.\n",
3096 proxy_type_str(curproxy), curproxy->id, newsrv->id);
Willy Tarreau0cec3312011-10-31 13:49:26 +01003097 err_code |= ERR_WARN;
3098 }
3099
Willy Tarreauc93cd162014-05-13 15:54:22 +02003100 if ((newsrv->flags & SRV_F_MAPPORTS) && (curproxy->options2 & PR_O2_RDPC_PRST)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003101 ha_warning("config : %s '%s' : RDP cookie persistence will not work for server '%s' because it lacks an explicit port number.\n",
3102 proxy_type_str(curproxy), curproxy->id, newsrv->id);
Willy Tarreau82ffa392013-08-13 17:19:08 +02003103 err_code |= ERR_WARN;
3104 }
3105
Willy Tarreau29fbe512015-08-20 19:35:14 +02003106#if defined(CONFIG_HAP_TRANSPARENT)
Willy Tarreauef9a3602012-12-08 22:29:20 +01003107 if (curproxy->mode != PR_MODE_HTTP && newsrv->conn_src.bind_hdr_occ) {
3108 newsrv->conn_src.bind_hdr_occ = 0;
Christopher Faulet767a84b2017-11-24 16:50:31 +01003109 ha_warning("config : %s '%s' : server %s cannot use header %s as source IP in non-HTTP mode.\n",
3110 proxy_type_str(curproxy), curproxy->id, newsrv->id, newsrv->conn_src.bind_hdr_name);
Willy Tarreaubce70882009-09-07 11:51:47 +02003111 err_code |= ERR_WARN;
3112 }
Willy Tarreauefa5f512010-03-30 20:13:29 +02003113#endif
Willy Tarreau4c183462017-01-06 12:21:38 +01003114
Willy Tarreau46deab62018-04-28 07:18:15 +02003115 if ((curproxy->mode != PR_MODE_HTTP) && (curproxy->options & PR_O_REUSE_MASK) != PR_O_REUSE_NEVR)
3116 curproxy->options &= ~PR_O_REUSE_MASK;
3117
Willy Tarreau21d2af32008-02-14 20:25:24 +01003118 newsrv = newsrv->next;
3119 }
3120
Christopher Fauletd7c91962015-04-30 11:48:27 +02003121 /* Check filter configuration, if any */
3122 cfgerr += flt_check(curproxy);
3123
Willy Tarreauc1a21672009-08-16 22:37:44 +02003124 if (curproxy->cap & PR_CAP_FE) {
Willy Tarreau050536d2012-10-04 08:47:34 +02003125 if (!curproxy->accept)
3126 curproxy->accept = frontend_accept;
Willy Tarreau81f9aa32010-06-01 17:45:26 +02003127
Willy Tarreauc1a21672009-08-16 22:37:44 +02003128 if (curproxy->tcp_req.inspect_delay ||
3129 !LIST_ISEMPTY(&curproxy->tcp_req.inspect_rules))
Willy Tarreaufb356202010-08-03 14:02:05 +02003130 curproxy->fe_req_ana |= AN_REQ_INSPECT_FE;
Willy Tarreauc1a21672009-08-16 22:37:44 +02003131
Willy Tarreau4e5b8282009-08-16 22:57:50 +02003132 if (curproxy->mode == PR_MODE_HTTP) {
Willy Tarreauc1a21672009-08-16 22:37:44 +02003133 curproxy->fe_req_ana |= AN_REQ_WAIT_HTTP | AN_REQ_HTTP_PROCESS_FE;
Willy Tarreaub37c27e2009-10-18 22:53:08 +02003134 curproxy->fe_rsp_ana |= AN_RES_WAIT_HTTP | AN_RES_HTTP_PROCESS_FE;
Willy Tarreau4e5b8282009-08-16 22:57:50 +02003135 }
Willy Tarreauc1a21672009-08-16 22:37:44 +02003136
William Lallemandcf62f7e2018-10-26 14:47:40 +02003137 if (curproxy->mode == PR_MODE_CLI) {
3138 curproxy->fe_req_ana |= AN_REQ_WAIT_CLI;
3139 curproxy->fe_rsp_ana |= AN_RES_WAIT_CLI;
3140 }
3141
Willy Tarreauc1a21672009-08-16 22:37:44 +02003142 /* both TCP and HTTP must check switching rules */
3143 curproxy->fe_req_ana |= AN_REQ_SWITCHING_RULES;
Christopher Fauletd7c91962015-04-30 11:48:27 +02003144
3145 /* Add filters analyzers if needed */
Christopher Faulet443ea1a2016-02-04 13:40:26 +01003146 if (!LIST_ISEMPTY(&curproxy->filter_configs)) {
Christopher Faulet0184ea72017-01-05 14:06:34 +01003147 curproxy->fe_req_ana |= AN_REQ_FLT_START_FE | AN_REQ_FLT_XFER_DATA | AN_REQ_FLT_END;
3148 curproxy->fe_rsp_ana |= AN_RES_FLT_START_FE | AN_RES_FLT_XFER_DATA | AN_RES_FLT_END;
Christopher Faulet309c6412015-12-02 09:57:32 +01003149 if (curproxy->mode == PR_MODE_HTTP) {
Christopher Faulet0184ea72017-01-05 14:06:34 +01003150 curproxy->fe_req_ana |= AN_REQ_FLT_HTTP_HDRS;
3151 curproxy->fe_rsp_ana |= AN_RES_FLT_HTTP_HDRS;
Christopher Faulet309c6412015-12-02 09:57:32 +01003152 }
Christopher Fauletd7c91962015-04-30 11:48:27 +02003153 }
Willy Tarreauc1a21672009-08-16 22:37:44 +02003154 }
3155
3156 if (curproxy->cap & PR_CAP_BE) {
Willy Tarreaufb356202010-08-03 14:02:05 +02003157 if (curproxy->tcp_req.inspect_delay ||
3158 !LIST_ISEMPTY(&curproxy->tcp_req.inspect_rules))
3159 curproxy->be_req_ana |= AN_REQ_INSPECT_BE;
3160
Emeric Brun97679e72010-09-23 17:56:44 +02003161 if (!LIST_ISEMPTY(&curproxy->tcp_rep.inspect_rules))
3162 curproxy->be_rsp_ana |= AN_RES_INSPECT;
3163
Willy Tarreau4e5b8282009-08-16 22:57:50 +02003164 if (curproxy->mode == PR_MODE_HTTP) {
Willy Tarreauc1a21672009-08-16 22:37:44 +02003165 curproxy->be_req_ana |= AN_REQ_WAIT_HTTP | AN_REQ_HTTP_INNER | AN_REQ_HTTP_PROCESS_BE;
Willy Tarreaub37c27e2009-10-18 22:53:08 +02003166 curproxy->be_rsp_ana |= AN_RES_WAIT_HTTP | AN_RES_HTTP_PROCESS_BE;
Willy Tarreau4e5b8282009-08-16 22:57:50 +02003167 }
Willy Tarreauc1a21672009-08-16 22:37:44 +02003168
3169 /* If the backend does requires RDP cookie persistence, we have to
3170 * enable the corresponding analyser.
3171 */
3172 if (curproxy->options2 & PR_O2_RDPC_PRST)
3173 curproxy->be_req_ana |= AN_REQ_PRST_RDP_COOKIE;
Christopher Fauletd7c91962015-04-30 11:48:27 +02003174
3175 /* Add filters analyzers if needed */
Christopher Faulet443ea1a2016-02-04 13:40:26 +01003176 if (!LIST_ISEMPTY(&curproxy->filter_configs)) {
Christopher Faulet0184ea72017-01-05 14:06:34 +01003177 curproxy->be_req_ana |= AN_REQ_FLT_START_BE | AN_REQ_FLT_XFER_DATA | AN_REQ_FLT_END;
3178 curproxy->be_rsp_ana |= AN_RES_FLT_START_BE | AN_RES_FLT_XFER_DATA | AN_RES_FLT_END;
Christopher Faulet309c6412015-12-02 09:57:32 +01003179 if (curproxy->mode == PR_MODE_HTTP) {
Christopher Faulet0184ea72017-01-05 14:06:34 +01003180 curproxy->be_req_ana |= AN_REQ_FLT_HTTP_HDRS;
3181 curproxy->be_rsp_ana |= AN_RES_FLT_HTTP_HDRS;
Christopher Faulet309c6412015-12-02 09:57:32 +01003182 }
Christopher Fauletd7c91962015-04-30 11:48:27 +02003183 }
Willy Tarreauc1a21672009-08-16 22:37:44 +02003184 }
Christopher Fauleta717b992018-04-10 14:43:00 +02003185
Christopher Faulet8ed0a3e2018-04-10 14:45:45 +02003186 /* Check the mux protocols, if any, for each listener and server
Christopher Fauleta717b992018-04-10 14:43:00 +02003187 * attached to the current proxy */
3188 list_for_each_entry(bind_conf, &curproxy->conf.bind, by_fe) {
3189 int mode = (1 << (curproxy->mode == PR_MODE_HTTP));
Willy Tarreau76a551d2018-12-02 13:09:09 +01003190 const struct mux_proto_list *mux_ent;
Christopher Fauleta717b992018-04-10 14:43:00 +02003191
3192 if (!bind_conf->mux_proto)
3193 continue;
Willy Tarreau76a551d2018-12-02 13:09:09 +01003194
3195 /* it is possible that an incorrect mux was referenced
3196 * due to the proxy's mode not being taken into account
3197 * on first pass. Let's adjust it now.
3198 */
3199 mux_ent = conn_get_best_mux_entry(bind_conf->mux_proto->token, PROTO_SIDE_FE, mode);
3200
3201 if (!mux_ent || !isteq(mux_ent->token, bind_conf->mux_proto->token)) {
Christopher Fauleta717b992018-04-10 14:43:00 +02003202 ha_alert("config : %s '%s' : MUX protocol '%.*s' is not usable for 'bind %s' at [%s:%d].\n",
3203 proxy_type_str(curproxy), curproxy->id,
3204 (int)bind_conf->mux_proto->token.len,
3205 bind_conf->mux_proto->token.ptr,
3206 bind_conf->arg, bind_conf->file, bind_conf->line);
3207 cfgerr++;
3208 }
Willy Tarreau76a551d2018-12-02 13:09:09 +01003209
3210 /* update the mux */
3211 bind_conf->mux_proto = mux_ent;
Christopher Fauleta717b992018-04-10 14:43:00 +02003212 }
Christopher Faulet8ed0a3e2018-04-10 14:45:45 +02003213 for (newsrv = curproxy->srv; newsrv; newsrv = newsrv->next) {
3214 int mode = (1 << (curproxy->mode == PR_MODE_HTTP));
Willy Tarreau76a551d2018-12-02 13:09:09 +01003215 const struct mux_proto_list *mux_ent;
Christopher Faulet8ed0a3e2018-04-10 14:45:45 +02003216
3217 if (!newsrv->mux_proto)
3218 continue;
Willy Tarreau76a551d2018-12-02 13:09:09 +01003219
3220 /* it is possible that an incorrect mux was referenced
3221 * due to the proxy's mode not being taken into account
3222 * on first pass. Let's adjust it now.
3223 */
3224 mux_ent = conn_get_best_mux_entry(newsrv->mux_proto->token, PROTO_SIDE_BE, mode);
3225
3226 if (!mux_ent || !isteq(mux_ent->token, newsrv->mux_proto->token)) {
Christopher Faulet8ed0a3e2018-04-10 14:45:45 +02003227 ha_alert("config : %s '%s' : MUX protocol '%.*s' is not usable for server '%s' at [%s:%d].\n",
3228 proxy_type_str(curproxy), curproxy->id,
3229 (int)newsrv->mux_proto->token.len,
3230 newsrv->mux_proto->token.ptr,
3231 newsrv->id, newsrv->conf.file, newsrv->conf.line);
3232 cfgerr++;
3233 }
Willy Tarreau76a551d2018-12-02 13:09:09 +01003234
3235 /* update the mux */
3236 newsrv->mux_proto = mux_ent;
Christopher Faulet8ed0a3e2018-04-10 14:45:45 +02003237 }
Willy Tarreau4cdac162021-03-05 10:48:42 +01003238 }
Willy Tarreau835daa12019-02-07 14:46:29 +01003239
Willy Tarreau4cdac162021-03-05 10:48:42 +01003240 /***********************************************************/
3241 /* At this point, target names have already been resolved. */
3242 /***********************************************************/
Willy Tarreau835daa12019-02-07 14:46:29 +01003243
Willy Tarreau4cdac162021-03-05 10:48:42 +01003244 /* we must finish to initialize certain things on the servers */
Willy Tarreau835daa12019-02-07 14:46:29 +01003245
Willy Tarreau4cdac162021-03-05 10:48:42 +01003246 list_for_each_entry(newsrv, &servers_list, global_list) {
3247 /* initialize idle conns lists */
3248 int i;
Willy Tarreau980855b2019-02-07 14:59:29 +01003249
Willy Tarreau430bf4a2021-03-04 09:45:32 +01003250 newsrv->per_thr = calloc(global.nbthread, sizeof(*newsrv->per_thr));
3251 if (!newsrv->per_thr) {
3252 ha_alert("parsing [%s:%d] : failed to allocate per-thread lists for server '%s'.\n",
3253 newsrv->conf.file, newsrv->conf.line, newsrv->id);
Willy Tarreau4cdac162021-03-05 10:48:42 +01003254 cfgerr++;
3255 continue;
3256 }
Olivier Houcharddc2f2752020-02-13 19:12:07 +01003257
Willy Tarreau430bf4a2021-03-04 09:45:32 +01003258 for (i = 0; i < global.nbthread; i++) {
3259 newsrv->per_thr[i].idle_conns = EB_ROOT;
3260 newsrv->per_thr[i].safe_conns = EB_ROOT;
3261 newsrv->per_thr[i].avail_conns = EB_ROOT;
Willy Tarreaud4e78d82021-03-04 10:47:54 +01003262 MT_LIST_INIT(&newsrv->per_thr[i].streams);
Willy Tarreau430bf4a2021-03-04 09:45:32 +01003263 }
Olivier Houcharddc2f2752020-02-13 19:12:07 +01003264
Willy Tarreau4cdac162021-03-05 10:48:42 +01003265 if (newsrv->max_idle_conns != 0) {
3266 if (idle_conn_task == NULL) {
3267 idle_conn_task = task_new(MAX_THREADS_MASK);
3268 if (!idle_conn_task)
3269 goto err;
Olivier Houcharddc2f2752020-02-13 19:12:07 +01003270
Willy Tarreau4cdac162021-03-05 10:48:42 +01003271 idle_conn_task->process = srv_cleanup_idle_conns;
3272 idle_conn_task->context = NULL;
Olivier Houcharddc2f2752020-02-13 19:12:07 +01003273
Willy Tarreau4cdac162021-03-05 10:48:42 +01003274 for (i = 0; i < global.nbthread; i++) {
3275 idle_conns[i].cleanup_task = task_new(1UL << i);
3276 if (!idle_conns[i].cleanup_task)
3277 goto err;
3278 idle_conns[i].cleanup_task->process = srv_cleanup_toremove_conns;
3279 idle_conns[i].cleanup_task->context = NULL;
3280 HA_SPIN_INIT(&idle_conns[i].idle_conns_lock);
3281 MT_LIST_INIT(&idle_conns[i].toremove_conns);
Olivier Houcharddc2f2752020-02-13 19:12:07 +01003282 }
Willy Tarreau4cdac162021-03-05 10:48:42 +01003283 }
Olivier Houcharddc2f2752020-02-13 19:12:07 +01003284
Willy Tarreau4cdac162021-03-05 10:48:42 +01003285 newsrv->curr_idle_thr = calloc(global.nbthread, sizeof(*newsrv->curr_idle_thr));
3286 if (!newsrv->curr_idle_thr)
3287 goto err;
3288 continue;
3289 err:
3290 ha_alert("parsing [%s:%d] : failed to allocate idle connection tasks for server '%s'.\n",
3291 newsrv->conf.file, newsrv->conf.line, newsrv->id);
3292 cfgerr++;
3293 continue;
Willy Tarreau835daa12019-02-07 14:46:29 +01003294 }
Willy Tarreau419ead82014-09-16 13:41:21 +02003295 }
3296
Willy Tarreau419ead82014-09-16 13:41:21 +02003297
3298 /* Check multi-process mode compatibility */
3299
3300 if (global.nbproc > 1 && global.stats_fe) {
3301 list_for_each_entry(bind_conf, &global.stats_fe->conf.bind, by_fe) {
3302 unsigned long mask;
3303
Willy Tarreau6daac192019-02-02 17:39:53 +01003304 mask = proc_mask(global.stats_fe->bind_proc) && all_proc_mask;
Willy Tarreaue26993c2020-09-03 07:18:55 +02003305 mask &= proc_mask(bind_conf->settings.bind_proc);
Willy Tarreau419ead82014-09-16 13:41:21 +02003306
3307 /* stop here if more than one process is used */
Willy Tarreau9504dd62018-10-15 09:37:03 +02003308 if (atleast2(mask))
Willy Tarreau419ead82014-09-16 13:41:21 +02003309 break;
3310 }
3311 if (&bind_conf->by_fe != &global.stats_fe->conf.bind) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003312 ha_warning("stats socket will not work as expected in multi-process mode (nbproc > 1), you should force process binding globally using 'stats bind-process' or per socket using the 'process' attribute.\n");
Willy Tarreau419ead82014-09-16 13:41:21 +02003313 }
3314 }
3315
3316 /* Make each frontend inherit bind-process from its listeners when not specified. */
Olivier Houchardfbc74e82017-11-24 16:54:05 +01003317 for (curproxy = proxies_list; curproxy; curproxy = curproxy->next) {
Willy Tarreau419ead82014-09-16 13:41:21 +02003318 if (curproxy->bind_proc)
3319 continue;
3320
3321 list_for_each_entry(bind_conf, &curproxy->conf.bind, by_fe) {
3322 unsigned long mask;
3323
Willy Tarreaue26993c2020-09-03 07:18:55 +02003324 mask = proc_mask(bind_conf->settings.bind_proc);
Willy Tarreau419ead82014-09-16 13:41:21 +02003325 curproxy->bind_proc |= mask;
3326 }
Willy Tarreau6daac192019-02-02 17:39:53 +01003327 curproxy->bind_proc = proc_mask(curproxy->bind_proc);
Willy Tarreau419ead82014-09-16 13:41:21 +02003328 }
3329
3330 if (global.stats_fe) {
3331 list_for_each_entry(bind_conf, &global.stats_fe->conf.bind, by_fe) {
3332 unsigned long mask;
3333
Willy Tarreaue26993c2020-09-03 07:18:55 +02003334 mask = bind_conf->settings.bind_proc ? bind_conf->settings.bind_proc : 0;
Willy Tarreau419ead82014-09-16 13:41:21 +02003335 global.stats_fe->bind_proc |= mask;
3336 }
Willy Tarreau6daac192019-02-02 17:39:53 +01003337 global.stats_fe->bind_proc = proc_mask(global.stats_fe->bind_proc);
Willy Tarreau419ead82014-09-16 13:41:21 +02003338 }
3339
Willy Tarreauacbe8ab2014-10-01 20:50:17 +02003340 /* propagate bindings from frontends to backends. Don't do it if there
3341 * are any fatal errors as we must not call it with unresolved proxies.
3342 */
3343 if (!cfgerr) {
Olivier Houchardfbc74e82017-11-24 16:54:05 +01003344 for (curproxy = proxies_list; curproxy; curproxy = curproxy->next) {
Willy Tarreauacbe8ab2014-10-01 20:50:17 +02003345 if (curproxy->cap & PR_CAP_FE)
3346 propagate_processes(curproxy, NULL);
3347 }
Willy Tarreau419ead82014-09-16 13:41:21 +02003348 }
3349
3350 /* Bind each unbound backend to all processes when not specified. */
Willy Tarreau6daac192019-02-02 17:39:53 +01003351 for (curproxy = proxies_list; curproxy; curproxy = curproxy->next)
3352 curproxy->bind_proc = proc_mask(curproxy->bind_proc);
Willy Tarreau419ead82014-09-16 13:41:21 +02003353
3354 /*******************************************************/
3355 /* At this step, all proxies have a non-null bind_proc */
3356 /*******************************************************/
3357
3358 /* perform the final checks before creating tasks */
3359
Olivier Houchardfbc74e82017-11-24 16:54:05 +01003360 for (curproxy = proxies_list; curproxy; curproxy = curproxy->next) {
Willy Tarreau419ead82014-09-16 13:41:21 +02003361 struct listener *listener;
3362 unsigned int next_id;
Willy Tarreauc1a21672009-08-16 22:37:44 +02003363
Willy Tarreauf5ae8f72012-09-07 16:58:00 +02003364 /* Configure SSL for each bind line.
3365 * Note: if configuration fails at some point, the ->ctx member
3366 * remains NULL so that listeners can later detach.
3367 */
Willy Tarreau2a65ff02012-09-13 17:54:29 +02003368 list_for_each_entry(bind_conf, &curproxy->conf.bind, by_fe) {
Willy Tarreau55d37912016-12-21 23:38:39 +01003369 if (bind_conf->xprt->prepare_bind_conf &&
3370 bind_conf->xprt->prepare_bind_conf(bind_conf) < 0)
Willy Tarreauf5ae8f72012-09-07 16:58:00 +02003371 cfgerr++;
Willy Tarreau2a65ff02012-09-13 17:54:29 +02003372 }
Willy Tarreauf5ae8f72012-09-07 16:58:00 +02003373
Willy Tarreaue6b98942007-10-29 01:09:36 +01003374 /* adjust this proxy's listeners */
Willy Tarreau53fb4ae2009-10-04 23:04:08 +02003375 next_id = 1;
Willy Tarreau4348fad2012-09-20 16:48:07 +02003376 list_for_each_entry(listener, &curproxy->conf.listeners, by_fe) {
Willy Tarreau7c0ffd22016-04-14 11:47:38 +02003377 int nbproc;
3378
3379 nbproc = my_popcountl(curproxy->bind_proc &
Willy Tarreaue26993c2020-09-03 07:18:55 +02003380 (listener->bind_conf->settings.bind_proc ? listener->bind_conf->settings.bind_proc : curproxy->bind_proc) &
Willy Tarreaua38a7172019-02-02 17:11:28 +01003381 all_proc_mask);
Willy Tarreau7c0ffd22016-04-14 11:47:38 +02003382
3383 if (!nbproc) /* no intersection between listener and frontend */
3384 nbproc = 1;
3385
Willy Tarreau53fb4ae2009-10-04 23:04:08 +02003386 if (!listener->luid) {
3387 /* listener ID not set, use automatic numbering with first
3388 * spare entry starting with next_luid.
3389 */
3390 next_id = get_next_id(&curproxy->conf.used_listener_id, next_id);
3391 listener->conf.id.key = listener->luid = next_id;
3392 eb32_insert(&curproxy->conf.used_listener_id, &listener->conf.id);
Willy Tarreau53fb4ae2009-10-04 23:04:08 +02003393 }
Krzysztof Piotr Oledzkidf5cb9f2010-02-05 20:58:27 +01003394 next_id++;
Willy Tarreau53fb4ae2009-10-04 23:04:08 +02003395
Krzysztof Piotr Oledzkiaeebf9b2009-10-04 15:43:17 +02003396 /* enable separate counters */
3397 if (curproxy->options2 & PR_O2_SOCKSTAT) {
Willy Tarreauae9bea02016-11-25 14:44:52 +01003398 listener->counters = calloc(1, sizeof(*listener->counters));
Willy Tarreau19d14ef2012-10-29 16:51:55 +01003399 if (!listener->name)
3400 memprintf(&listener->name, "sock-%d", listener->luid);
Krzysztof Piotr Oledzkiaeebf9b2009-10-04 15:43:17 +02003401 }
Willy Tarreau81796be2012-09-22 19:11:47 +02003402
Willy Tarreaue6b98942007-10-29 01:09:36 +01003403 if (curproxy->options & PR_O_TCP_NOLING)
3404 listener->options |= LI_O_NOLINGER;
Willy Tarreau16a21472012-11-19 12:39:59 +01003405 if (!listener->maxaccept)
Willy Tarreau66161322021-02-19 15:50:27 +01003406 listener->maxaccept = global.tune.maxaccept ? global.tune.maxaccept : MAX_ACCEPT;
Willy Tarreau16a21472012-11-19 12:39:59 +01003407
3408 /* we want to have an optimal behaviour on single process mode to
3409 * maximize the work at once, but in multi-process we want to keep
3410 * some fairness between processes, so we target half of the max
3411 * number of events to be balanced over all the processes the proxy
Ilya Shipitsin6fb0f212020-04-02 15:25:26 +05003412 * is bound to. Remember that maxaccept = -1 must be kept as it is
Willy Tarreau16a21472012-11-19 12:39:59 +01003413 * used to disable the limit.
3414 */
Christopher Faulet02f3cf12019-04-30 14:08:41 +02003415 if (listener->maxaccept > 0 && nbproc > 1) {
3416 listener->maxaccept = (listener->maxaccept + 1) / 2;
Willy Tarreau16a21472012-11-19 12:39:59 +01003417 listener->maxaccept = (listener->maxaccept + nbproc - 1) / nbproc;
3418 }
3419
Willy Tarreau9903f0e2015-04-04 18:50:31 +02003420 listener->accept = session_accept_fd;
Willy Tarreauc1a21672009-08-16 22:37:44 +02003421 listener->analysers |= curproxy->fe_req_ana;
Willy Tarreau10b688f2015-03-13 16:43:12 +01003422 listener->default_target = curproxy->default_target;
Willy Tarreau3bc13772008-12-07 11:50:35 +01003423
Willy Tarreaua5c0ab22010-05-31 10:30:33 +02003424 if (!LIST_ISEMPTY(&curproxy->tcp_req.l4_rules))
Willy Tarreau7d9736f2016-10-21 16:34:21 +02003425 listener->options |= LI_O_TCP_L4_RULES;
Willy Tarreaua5c0ab22010-05-31 10:30:33 +02003426
Willy Tarreau620408f2016-10-21 16:37:51 +02003427 if (!LIST_ISEMPTY(&curproxy->tcp_req.l5_rules))
3428 listener->options |= LI_O_TCP_L5_RULES;
3429
Willy Tarreau9ea05a72009-06-14 12:07:01 +02003430 /* smart accept mode is automatic in HTTP mode */
3431 if ((curproxy->options2 & PR_O2_SMARTACC) ||
Willy Tarreau2a65ff02012-09-13 17:54:29 +02003432 ((curproxy->mode == PR_MODE_HTTP || listener->bind_conf->is_ssl) &&
Willy Tarreau9ea05a72009-06-14 12:07:01 +02003433 !(curproxy->no_options2 & PR_O2_SMARTACC)))
3434 listener->options |= LI_O_NOQUICKACK;
Willy Tarreaue6b98942007-10-29 01:09:36 +01003435 }
3436
Willy Tarreau2a65ff02012-09-13 17:54:29 +02003437 /* Release unused SSL configs */
3438 list_for_each_entry(bind_conf, &curproxy->conf.bind, by_fe) {
Willy Tarreau795cdab2016-12-22 17:30:54 +01003439 if (!bind_conf->is_ssl && bind_conf->xprt->destroy_bind_conf)
3440 bind_conf->xprt->destroy_bind_conf(bind_conf);
Willy Tarreau2a65ff02012-09-13 17:54:29 +02003441 }
Willy Tarreauf5ae8f72012-09-07 16:58:00 +02003442
Willy Tarreaua38a7172019-02-02 17:11:28 +01003443 if (atleast2(curproxy->bind_proc & all_proc_mask)) {
Willy Tarreau102df612014-05-07 23:56:38 +02003444 if (curproxy->uri_auth) {
Willy Tarreaueb791e02014-09-16 15:11:04 +02003445 int count, maxproc = 0;
3446
3447 list_for_each_entry(bind_conf, &curproxy->conf.bind, by_fe) {
Willy Tarreaue26993c2020-09-03 07:18:55 +02003448 count = my_popcountl(bind_conf->settings.bind_proc);
Willy Tarreaueb791e02014-09-16 15:11:04 +02003449 if (count > maxproc)
3450 maxproc = count;
3451 }
3452 /* backends have 0, frontends have 1 or more */
3453 if (maxproc != 1)
Christopher Faulet767a84b2017-11-24 16:50:31 +01003454 ha_warning("Proxy '%s': in multi-process mode, stats will be"
3455 " limited to process assigned to the current request.\n",
3456 curproxy->id);
Willy Tarreaueb791e02014-09-16 15:11:04 +02003457
Willy Tarreau102df612014-05-07 23:56:38 +02003458 if (!LIST_ISEMPTY(&curproxy->uri_auth->admin_rules)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003459 ha_warning("Proxy '%s': stats admin will not work correctly in multi-process mode.\n",
3460 curproxy->id);
Cyril Bonté02ff8ef2010-12-14 22:48:49 +01003461 }
Cyril Bonté02ff8ef2010-12-14 22:48:49 +01003462 }
Willy Tarreau102df612014-05-07 23:56:38 +02003463 if (!LIST_ISEMPTY(&curproxy->sticking_rules)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003464 ha_warning("Proxy '%s': sticking rules will not work correctly in multi-process mode.\n",
3465 curproxy->id);
Cyril Bonté02ff8ef2010-12-14 22:48:49 +01003466 }
3467 }
Willy Tarreau918ff602011-07-25 16:33:49 +02003468
3469 /* create the task associated with the proxy */
Emeric Brunc60def82017-09-27 14:59:38 +02003470 curproxy->task = task_new(MAX_THREADS_MASK);
Willy Tarreau918ff602011-07-25 16:33:49 +02003471 if (curproxy->task) {
3472 curproxy->task->context = curproxy;
3473 curproxy->task->process = manage_proxy;
Willy Tarreau918ff602011-07-25 16:33:49 +02003474 } else {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003475 ha_alert("Proxy '%s': no more memory when trying to allocate the management task\n",
3476 curproxy->id);
Willy Tarreau918ff602011-07-25 16:33:49 +02003477 cfgerr++;
3478 }
Willy Tarreaub369a042014-09-16 13:21:03 +02003479 }
3480
Krzysztof Oledzki336d4752007-12-25 02:40:22 +01003481 /*
3482 * Recount currently required checks.
3483 */
3484
Olivier Houchardfbc74e82017-11-24 16:54:05 +01003485 for (curproxy=proxies_list; curproxy; curproxy=curproxy->next) {
Krzysztof Oledzki336d4752007-12-25 02:40:22 +01003486 int optnum;
3487
Willy Tarreau66aa61f2009-01-18 21:44:07 +01003488 for (optnum = 0; cfg_opts[optnum].name; optnum++)
3489 if (curproxy->options & cfg_opts[optnum].val)
3490 global.last_checks |= cfg_opts[optnum].checks;
Krzysztof Oledzki336d4752007-12-25 02:40:22 +01003491
Willy Tarreau66aa61f2009-01-18 21:44:07 +01003492 for (optnum = 0; cfg_opts2[optnum].name; optnum++)
3493 if (curproxy->options2 & cfg_opts2[optnum].val)
3494 global.last_checks |= cfg_opts2[optnum].checks;
Krzysztof Oledzki336d4752007-12-25 02:40:22 +01003495 }
3496
Willy Tarreau0fca4832015-05-01 19:12:05 +02003497 /* compute the required process bindings for the peers */
Olivier Houchardfbc74e82017-11-24 16:54:05 +01003498 for (curproxy = proxies_list; curproxy; curproxy = curproxy->next)
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01003499 if (curproxy->table && curproxy->table->peers.p)
3500 curproxy->table->peers.p->peers_fe->bind_proc |= curproxy->bind_proc;
Willy Tarreau0fca4832015-05-01 19:12:05 +02003501
Frédéric Lécaille015e4d72019-03-19 14:55:01 +01003502 /* compute the required process bindings for the peers from <stktables_list>
3503 * for all the stick-tables, the ones coming with "peers" sections included.
3504 */
3505 for (t = stktables_list; t; t = t->next) {
3506 struct proxy *p;
3507
3508 for (p = t->proxies_list; p; p = p->next_stkt_ref) {
3509 if (t->peers.p && t->peers.p->peers_fe) {
3510 t->peers.p->peers_fe->bind_proc |= p->bind_proc;
3511 }
3512 }
3513 }
3514
Frédéric Lécailleed2b4a62017-07-13 09:07:09 +02003515 if (cfg_peers) {
3516 struct peers *curpeers = cfg_peers, **last;
Willy Tarreau122541c2011-09-07 21:24:49 +02003517 struct peer *p, *pb;
3518
William Lallemanda2cfd7e2020-03-24 16:02:48 +01003519 /* In the case the peers frontend was not initialized by a
3520 stick-table used in the configuration, set its bind_proc
3521 by default to the first process. */
3522 while (curpeers) {
William Lallemand3ef2d562020-03-24 16:42:15 +01003523 if (curpeers->peers_fe) {
3524 if (curpeers->peers_fe->bind_proc == 0)
3525 curpeers->peers_fe->bind_proc = 1;
3526 }
William Lallemanda2cfd7e2020-03-24 16:02:48 +01003527 curpeers = curpeers->next;
3528 }
3529
3530 curpeers = cfg_peers;
Willy Tarreau1e273012015-05-01 19:15:17 +02003531 /* Remove all peers sections which don't have a valid listener,
3532 * which are not used by any table, or which are bound to more
3533 * than one process.
Willy Tarreau122541c2011-09-07 21:24:49 +02003534 */
Frédéric Lécailleed2b4a62017-07-13 09:07:09 +02003535 last = &cfg_peers;
Willy Tarreau122541c2011-09-07 21:24:49 +02003536 while (*last) {
Frédéric Lécaille87eacbb2020-03-24 20:08:30 +01003537 struct stktable *t;
Willy Tarreau122541c2011-09-07 21:24:49 +02003538 curpeers = *last;
Willy Tarreau77e4bd12015-05-01 20:02:17 +02003539
Willy Tarreau1ad64ac2020-09-24 08:48:08 +02003540 if (curpeers->disabled) {
Willy Tarreau77e4bd12015-05-01 20:02:17 +02003541 /* the "disabled" keyword was present */
3542 if (curpeers->peers_fe)
3543 stop_proxy(curpeers->peers_fe);
3544 curpeers->peers_fe = NULL;
3545 }
Frédéric Lécaille5a4fe5a2019-10-04 08:30:04 +02003546 else if (!curpeers->peers_fe || !curpeers->peers_fe->id) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003547 ha_warning("Removing incomplete section 'peers %s' (no peer named '%s').\n",
3548 curpeers->id, localpeer);
Frédéric Lécaille87eacbb2020-03-24 20:08:30 +01003549 if (curpeers->peers_fe)
3550 stop_proxy(curpeers->peers_fe);
3551 curpeers->peers_fe = NULL;
Willy Tarreau77e4bd12015-05-01 20:02:17 +02003552 }
Willy Tarreau9504dd62018-10-15 09:37:03 +02003553 else if (atleast2(curpeers->peers_fe->bind_proc)) {
Willy Tarreau1e273012015-05-01 19:15:17 +02003554 /* either it's totally stopped or too much used */
3555 if (curpeers->peers_fe->bind_proc) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003556 ha_alert("Peers section '%s': peers referenced by sections "
3557 "running in different processes (%d different ones). "
3558 "Check global.nbproc and all tables' bind-process "
3559 "settings.\n", curpeers->id, my_popcountl(curpeers->peers_fe->bind_proc));
Willy Tarreau1e273012015-05-01 19:15:17 +02003560 cfgerr++;
3561 }
3562 stop_proxy(curpeers->peers_fe);
3563 curpeers->peers_fe = NULL;
3564 }
Willy Tarreau77e4bd12015-05-01 20:02:17 +02003565 else {
Frédéric Lécaille76d2cef2019-02-12 19:12:32 +01003566 /* Initializes the transport layer of the server part of all the peers belonging to
3567 * <curpeers> section if required.
3568 * Note that ->srv is used by the local peer of a new process to connect to the local peer
3569 * of an old process.
3570 */
Frédéric Lécaille1055e682018-04-26 14:35:21 +02003571 p = curpeers->remote;
3572 while (p) {
Frédéric Lécaille355b2032019-01-11 14:06:12 +01003573 if (p->srv) {
Christopher Fauletf61f33a2020-03-27 18:55:49 +01003574 if (p->srv->use_ssl == 1 && xprt_get(XPRT_SSL) && xprt_get(XPRT_SSL)->prepare_srv)
Frédéric Lécaille355b2032019-01-11 14:06:12 +01003575 cfgerr += xprt_get(XPRT_SSL)->prepare_srv(p->srv);
3576 }
Frédéric Lécaille1055e682018-04-26 14:35:21 +02003577 p = p->next;
3578 }
Frédéric Lécaille76d2cef2019-02-12 19:12:32 +01003579 /* Configure the SSL bindings of the local peer if required. */
3580 if (!LIST_ISEMPTY(&curpeers->peers_fe->conf.bind)) {
3581 struct list *l;
3582 struct bind_conf *bind_conf;
3583
3584 l = &curpeers->peers_fe->conf.bind;
3585 bind_conf = LIST_ELEM(l->n, typeof(bind_conf), by_fe);
3586 if (bind_conf->xprt->prepare_bind_conf &&
3587 bind_conf->xprt->prepare_bind_conf(bind_conf) < 0)
3588 cfgerr++;
3589 }
Frédéric Lécaille8d78fa72019-05-20 18:22:52 +02003590 if (!peers_init_sync(curpeers) || !peers_alloc_dcache(curpeers)) {
Willy Tarreaud9443442018-10-15 11:18:03 +02003591 ha_alert("Peers section '%s': out of memory, giving up on peers.\n",
3592 curpeers->id);
3593 cfgerr++;
3594 break;
3595 }
Willy Tarreau122541c2011-09-07 21:24:49 +02003596 last = &curpeers->next;
3597 continue;
3598 }
3599
Willy Tarreau77e4bd12015-05-01 20:02:17 +02003600 /* clean what has been detected above */
Willy Tarreau122541c2011-09-07 21:24:49 +02003601 p = curpeers->remote;
3602 while (p) {
3603 pb = p->next;
3604 free(p->id);
3605 free(p);
3606 p = pb;
3607 }
3608
3609 /* Destroy and unlink this curpeers section.
3610 * Note: curpeers is backed up into *last.
3611 */
3612 free(curpeers->id);
3613 curpeers = curpeers->next;
Frédéric Lécaille87eacbb2020-03-24 20:08:30 +01003614 /* Reset any refereance to this peers section in the list of stick-tables */
3615 for (t = stktables_list; t; t = t->next) {
3616 if (t->peers.p && t->peers.p == *last)
3617 t->peers.p = NULL;
3618 }
Willy Tarreau122541c2011-09-07 21:24:49 +02003619 free(*last);
3620 *last = curpeers;
3621 }
3622 }
3623
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01003624 for (t = stktables_list; t; t = t->next) {
3625 if (t->proxy)
3626 continue;
3627 if (!stktable_init(t)) {
3628 ha_alert("Proxy '%s': failed to initialize stick-table.\n", t->id);
3629 cfgerr++;
3630 }
3631 }
3632
Willy Tarreau6866f3f2015-05-01 19:09:08 +02003633 /* initialize stick-tables on backend capable proxies. This must not
3634 * be done earlier because the data size may be discovered while parsing
3635 * other proxies.
3636 */
Olivier Houchardfbc74e82017-11-24 16:54:05 +01003637 for (curproxy = proxies_list; curproxy; curproxy = curproxy->next) {
Willy Tarreauc3914d42020-09-24 08:39:22 +02003638 if (curproxy->disabled || !curproxy->table)
Willy Tarreau6866f3f2015-05-01 19:09:08 +02003639 continue;
3640
Frédéric Lécaille1b8e68e2019-03-14 07:07:41 +01003641 if (!stktable_init(curproxy->table)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003642 ha_alert("Proxy '%s': failed to initialize stick-table.\n", curproxy->id);
Willy Tarreau6866f3f2015-05-01 19:09:08 +02003643 cfgerr++;
3644 }
3645 }
3646
Simon Horman0d16a402015-01-30 11:22:58 +09003647 if (mailers) {
3648 struct mailers *curmailers = mailers, **last;
3649 struct mailer *m, *mb;
3650
3651 /* Remove all mailers sections which don't have a valid listener.
3652 * This can happen when a mailers section is never referenced.
3653 */
3654 last = &mailers;
3655 while (*last) {
3656 curmailers = *last;
3657 if (curmailers->users) {
3658 last = &curmailers->next;
3659 continue;
3660 }
3661
Christopher Faulet767a84b2017-11-24 16:50:31 +01003662 ha_warning("Removing incomplete section 'mailers %s'.\n",
3663 curmailers->id);
Simon Horman0d16a402015-01-30 11:22:58 +09003664
3665 m = curmailers->mailer_list;
3666 while (m) {
3667 mb = m->next;
3668 free(m->id);
3669 free(m);
3670 m = mb;
3671 }
3672
3673 /* Destroy and unlink this curmailers section.
3674 * Note: curmailers is backed up into *last.
3675 */
3676 free(curmailers->id);
3677 curmailers = curmailers->next;
3678 free(*last);
3679 *last = curmailers;
3680 }
3681 }
3682
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003683 /* Update server_state_file_name to backend name if backend is supposed to use
3684 * a server-state file locally defined and none has been provided */
Olivier Houchardfbc74e82017-11-24 16:54:05 +01003685 for (curproxy = proxies_list; curproxy; curproxy = curproxy->next) {
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003686 if (curproxy->load_server_state_from_file == PR_SRV_STATE_FILE_LOCAL &&
3687 curproxy->server_state_file_name == NULL)
3688 curproxy->server_state_file_name = strdup(curproxy->id);
3689 }
3690
Emeric Brun750fe792020-12-23 16:51:12 +01003691 list_for_each_entry(curr_resolvers, &sec_resolvers, list) {
Ben Draut054fbee2018-04-13 15:43:04 -06003692 if (LIST_ISEMPTY(&curr_resolvers->nameservers)) {
3693 ha_warning("config : resolvers '%s' [%s:%d] has no nameservers configured!\n",
3694 curr_resolvers->id, curr_resolvers->conf.file,
3695 curr_resolvers->conf.line);
3696 err_code |= ERR_WARN;
3697 }
3698 }
3699
William Lallemand48b4bb42017-10-23 14:36:34 +02003700 list_for_each_entry(postparser, &postparsers, list) {
3701 if (postparser->func)
3702 cfgerr += postparser->func();
3703 }
3704
Willy Tarreaubb925012009-07-23 13:36:36 +02003705 if (cfgerr > 0)
3706 err_code |= ERR_ALERT | ERR_FATAL;
3707 out:
3708 return err_code;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003709}
3710
Willy Tarreau5b2c3362008-07-09 19:39:06 +02003711/*
3712 * Registers the CFG keyword list <kwl> as a list of valid keywords for next
3713 * parsing sessions.
3714 */
3715void cfg_register_keywords(struct cfg_kw_list *kwl)
3716{
3717 LIST_ADDQ(&cfg_keywords.list, &kwl->list);
3718}
Willy Tarreaubaaee002006-06-26 02:48:02 +02003719
Willy Tarreau5b2c3362008-07-09 19:39:06 +02003720/*
3721 * Unregisters the CFG keyword list <kwl> from the list of valid keywords.
3722 */
3723void cfg_unregister_keywords(struct cfg_kw_list *kwl)
3724{
3725 LIST_DEL(&kwl->list);
3726 LIST_INIT(&kwl->list);
3727}
Willy Tarreaubaaee002006-06-26 02:48:02 +02003728
Thierry FOURNIERfa45f1d2014-03-18 13:54:18 +01003729/* this function register new section in the haproxy configuration file.
3730 * <section_name> is the name of this new section and <section_parser>
3731 * is the called parser. If two section declaration have the same name,
3732 * only the first declared is used.
3733 */
3734int cfg_register_section(char *section_name,
William Lallemandd2ff56d2017-10-16 11:06:50 +02003735 int (*section_parser)(const char *, int, char **, int),
3736 int (*post_section_parser)())
Thierry FOURNIERfa45f1d2014-03-18 13:54:18 +01003737{
3738 struct cfg_section *cs;
3739
Willy Tarreau5e4261b2016-05-17 16:16:09 +02003740 list_for_each_entry(cs, &sections, list) {
3741 if (strcmp(cs->section_name, section_name) == 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003742 ha_alert("register section '%s': already registered.\n", section_name);
Willy Tarreau5e4261b2016-05-17 16:16:09 +02003743 return 0;
3744 }
3745 }
3746
Thierry FOURNIERfa45f1d2014-03-18 13:54:18 +01003747 cs = calloc(1, sizeof(*cs));
3748 if (!cs) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003749 ha_alert("register section '%s': out of memory.\n", section_name);
Thierry FOURNIERfa45f1d2014-03-18 13:54:18 +01003750 return 0;
3751 }
3752
3753 cs->section_name = section_name;
3754 cs->section_parser = section_parser;
William Lallemandd2ff56d2017-10-16 11:06:50 +02003755 cs->post_section_parser = post_section_parser;
Thierry FOURNIERfa45f1d2014-03-18 13:54:18 +01003756
3757 LIST_ADDQ(&sections, &cs->list);
3758
3759 return 1;
3760}
3761
William Lallemand48b4bb42017-10-23 14:36:34 +02003762/* this function register a new function which will be called once the haproxy
3763 * configuration file has been parsed. It's useful to check dependencies
3764 * between sections or to resolve items once everything is parsed.
3765 */
3766int cfg_register_postparser(char *name, int (*func)())
3767{
3768 struct cfg_postparser *cp;
3769
3770 cp = calloc(1, sizeof(*cp));
3771 if (!cp) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003772 ha_alert("register postparser '%s': out of memory.\n", name);
William Lallemand48b4bb42017-10-23 14:36:34 +02003773 return 0;
3774 }
3775 cp->name = name;
3776 cp->func = func;
3777
3778 LIST_ADDQ(&postparsers, &cp->list);
3779
3780 return 1;
3781}
3782
Willy Tarreaubaaee002006-06-26 02:48:02 +02003783/*
David Carlier845efb52015-09-25 11:49:18 +01003784 * free all config section entries
3785 */
3786void cfg_unregister_sections(void)
3787{
3788 struct cfg_section *cs, *ics;
3789
3790 list_for_each_entry_safe(cs, ics, &sections, list) {
3791 LIST_DEL(&cs->list);
3792 free(cs);
3793 }
3794}
3795
Christopher Faulet7110b402016-10-26 11:09:44 +02003796void cfg_backup_sections(struct list *backup_sections)
3797{
3798 struct cfg_section *cs, *ics;
3799
3800 list_for_each_entry_safe(cs, ics, &sections, list) {
3801 LIST_DEL(&cs->list);
3802 LIST_ADDQ(backup_sections, &cs->list);
3803 }
3804}
3805
3806void cfg_restore_sections(struct list *backup_sections)
3807{
3808 struct cfg_section *cs, *ics;
3809
3810 list_for_each_entry_safe(cs, ics, backup_sections, list) {
3811 LIST_DEL(&cs->list);
3812 LIST_ADDQ(&sections, &cs->list);
3813 }
3814}
3815
Willy Tarreaue6552512018-11-26 11:33:13 +01003816/* these are the config sections handled by default */
3817REGISTER_CONFIG_SECTION("listen", cfg_parse_listen, NULL);
3818REGISTER_CONFIG_SECTION("frontend", cfg_parse_listen, NULL);
3819REGISTER_CONFIG_SECTION("backend", cfg_parse_listen, NULL);
3820REGISTER_CONFIG_SECTION("defaults", cfg_parse_listen, NULL);
3821REGISTER_CONFIG_SECTION("global", cfg_parse_global, NULL);
3822REGISTER_CONFIG_SECTION("userlist", cfg_parse_users, NULL);
3823REGISTER_CONFIG_SECTION("peers", cfg_parse_peers, NULL);
3824REGISTER_CONFIG_SECTION("mailers", cfg_parse_mailers, NULL);
3825REGISTER_CONFIG_SECTION("namespace_list", cfg_parse_netns, NULL);
Willy Tarreau659fbf02016-05-26 17:55:28 +02003826
David Carlier845efb52015-09-25 11:49:18 +01003827/*
Willy Tarreaubaaee002006-06-26 02:48:02 +02003828 * Local variables:
3829 * c-indent-level: 8
3830 * c-basic-offset: 8
3831 * End:
3832 */