blob: 22c2fe54513a2344e38a5c2e512e18a3dda052f7 [file] [log] [blame]
Willy Tarreaubaaee002006-06-26 02:48:02 +02001/*
2 * HA-Proxy : High Availability-enabled HTTP/TCP proxy
Willy Tarreau71f95fa2020-01-22 10:34:58 +01003 * Copyright 2000-2020 Willy Tarreau <willy@haproxy.org>.
Willy Tarreaubaaee002006-06-26 02:48:02 +02004 *
5 * This program is free software; you can redistribute it and/or
6 * modify it under the terms of the GNU General Public License
7 * as published by the Free Software Foundation; either version
8 * 2 of the License, or (at your option) any later version.
9 *
Lukas Tribus23953682017-04-28 13:24:30 +000010 * Please refer to RFC7230 - RFC7235 informations about HTTP protocol, and
11 * RFC6265 for informations about cookies usage. More generally, the IETF HTTP
Willy Tarreaubaaee002006-06-26 02:48:02 +020012 * Working Group's web site should be consulted for protocol related changes :
13 *
14 * http://ftp.ics.uci.edu/pub/ietf/http/
15 *
16 * Pending bugs (may be not fixed because never reproduced) :
17 * - solaris only : sometimes, an HTTP proxy with only a dispatch address causes
18 * the proxy to terminate (no core) if the client breaks the connection during
19 * the response. Seen on 1.1.8pre4, but never reproduced. May not be related to
20 * the snprintf() bug since requests were simple (GET / HTTP/1.0), but may be
21 * related to missing setsid() (fixed in 1.1.15)
22 * - a proxy with an invalid config will prevent the startup even if disabled.
23 *
24 * ChangeLog has moved to the CHANGELOG file.
25 *
Willy Tarreaubaaee002006-06-26 02:48:02 +020026 */
27
David Carlier7ece0962015-12-08 21:43:09 +000028#define _GNU_SOURCE
Willy Tarreaubaaee002006-06-26 02:48:02 +020029#include <stdio.h>
30#include <stdlib.h>
31#include <unistd.h>
32#include <string.h>
33#include <ctype.h>
Maxime de Roucy379d9c72016-05-13 23:52:56 +020034#include <dirent.h>
Maxime de Roucy379d9c72016-05-13 23:52:56 +020035#include <sys/stat.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020036#include <sys/time.h>
37#include <sys/types.h>
38#include <sys/socket.h>
39#include <netinet/tcp.h>
40#include <netinet/in.h>
41#include <arpa/inet.h>
Olivier Houchardf73629d2017-04-05 22:33:04 +020042#include <net/if.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020043#include <netdb.h>
44#include <fcntl.h>
45#include <errno.h>
46#include <signal.h>
47#include <stdarg.h>
48#include <sys/resource.h>
Tim Duesterhusdfad6a42020-04-18 16:02:47 +020049#include <sys/utsname.h>
Marc-Antoine Perennou992709b2013-02-12 10:53:52 +010050#include <sys/wait.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020051#include <time.h>
52#include <syslog.h>
Michael Schererab012dd2013-01-12 18:35:19 +010053#include <grp.h>
Willy Tarreaufc6c0322012-11-16 16:12:27 +010054#ifdef USE_CPU_AFFINITY
Willy Tarreaufc6c0322012-11-16 16:12:27 +010055#include <sched.h>
David Carlier42d9e5a2018-11-12 16:22:19 +000056#if defined(__FreeBSD__) || defined(__DragonFly__)
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +020057#include <sys/param.h>
David Carlier42d9e5a2018-11-12 16:22:19 +000058#ifdef __FreeBSD__
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +020059#include <sys/cpuset.h>
David Carlier42d9e5a2018-11-12 16:22:19 +000060#endif
David Carlier6d5c8412017-11-29 11:02:32 +000061#include <pthread_np.h>
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +020062#endif
David Carlier5e4c8e22019-09-13 05:12:58 +010063#ifdef __APPLE__
64#include <mach/mach_types.h>
65#include <mach/thread_act.h>
66#include <mach/thread_policy.h>
67#endif
Willy Tarreaufc6c0322012-11-16 16:12:27 +010068#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +020069
Willy Tarreau636848a2019-04-15 19:38:50 +020070#if defined(USE_PRCTL)
71#include <sys/prctl.h>
72#endif
73
Willy Tarreaubaaee002006-06-26 02:48:02 +020074#ifdef DEBUG_FULL
75#include <assert.h>
76#endif
Tim Duesterhusd6942c82017-11-20 15:58:35 +010077#if defined(USE_SYSTEMD)
78#include <systemd/sd-daemon.h>
79#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +020080
Willy Tarreau6c3a6812020-03-06 18:57:15 +010081#include <import/sha1.h>
82
Willy Tarreaub2551052020-06-09 09:07:15 +020083#include <haproxy/acl.h>
84#include <haproxy/activity.h>
85#include <haproxy/api.h>
86#include <haproxy/arg.h>
87#include <haproxy/auth.h>
Willy Tarreau8d366972020-05-27 16:10:29 +020088#include <haproxy/base64.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020089#include <haproxy/capture-t.h>
Willy Tarreau6be78492020-06-05 00:00:29 +020090#include <haproxy/cfgparse.h>
Willy Tarreauc13ed532020-06-02 10:22:45 +020091#include <haproxy/chunk.h>
Willy Tarreau83487a82020-06-04 20:19:54 +020092#include <haproxy/cli.h>
Willy Tarreau7ea393d2020-06-04 18:02:10 +020093#include <haproxy/connection.h>
Willy Tarreaueb92deb2020-06-04 10:53:16 +020094#include <haproxy/dns.h>
Willy Tarreau2741c8c2020-06-02 11:28:02 +020095#include <haproxy/dynbuf.h>
Willy Tarreau8d366972020-05-27 16:10:29 +020096#include <haproxy/errors.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020097#include <haproxy/fd.h>
Willy Tarreauc7babd82020-06-04 21:29:29 +020098#include <haproxy/filters.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020099#include <haproxy/global.h>
Willy Tarreau86416052020-06-04 09:20:54 +0200100#include <haproxy/hlua.h>
Willy Tarreauc761f842020-06-04 11:40:28 +0200101#include <haproxy/http_rules.h>
Willy Tarreau853b2972020-05-27 18:01:47 +0200102#include <haproxy/list.h>
Willy Tarreau213e9902020-06-04 14:58:24 +0200103#include <haproxy/listener.h>
Willy Tarreauaeed4a82020-06-04 22:01:04 +0200104#include <haproxy/log.h>
Willy Tarreaub5abe5b2020-06-04 14:07:37 +0200105#include <haproxy/mworker.h>
Willy Tarreau7a00efb2020-06-02 17:02:59 +0200106#include <haproxy/namespace.h>
Willy Tarreau6131d6a2020-06-02 16:48:09 +0200107#include <haproxy/net_helper.h>
Willy Tarreau6019fab2020-05-27 16:26:00 +0200108#include <haproxy/openssl-compat.h>
Willy Tarreau225a90a2020-06-04 15:06:28 +0200109#include <haproxy/pattern.h>
Willy Tarreau3c2a7c22020-06-04 18:38:21 +0200110#include <haproxy/peers.h>
Willy Tarreaub2551052020-06-09 09:07:15 +0200111#include <haproxy/pool.h>
112#include <haproxy/protocol.h>
Willy Tarreaua264d962020-06-04 22:29:18 +0200113#include <haproxy/proxy.h>
Willy Tarreau7cd8b6e2020-06-02 17:32:26 +0200114#include <haproxy/regex.h>
Willy Tarreaub2551052020-06-09 09:07:15 +0200115#include <haproxy/sample.h>
Willy Tarreau1e56f922020-06-04 23:20:13 +0200116#include <haproxy/server.h>
Willy Tarreau48d25b32020-06-04 18:58:52 +0200117#include <haproxy/session.h>
Willy Tarreau3727a8a2020-06-04 17:37:26 +0200118#include <haproxy/signal.h>
Willy Tarreau209108d2020-06-04 20:30:20 +0200119#include <haproxy/ssl_sock.h>
Willy Tarreaudfd3de82020-06-04 23:46:14 +0200120#include <haproxy/stream.h>
Willy Tarreaucea0e1b2020-06-04 17:25:40 +0200121#include <haproxy/task.h>
Willy Tarreau3f567e42020-05-28 15:29:19 +0200122#include <haproxy/thread.h>
Willy Tarreaub2551052020-06-09 09:07:15 +0200123#include <haproxy/time.h>
124#include <haproxy/tools.h>
125#include <haproxy/uri_auth-t.h>
Willy Tarreaua1718922020-06-04 16:25:31 +0200126#include <haproxy/vars.h>
Willy Tarreaub2551052020-06-09 09:07:15 +0200127#include <haproxy/version.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200128
Willy Tarreaubaaee002006-06-26 02:48:02 +0200129
Willy Tarreau7b5654f2019-03-29 21:30:17 +0100130/* array of init calls for older platforms */
131DECLARE_INIT_STAGES;
132
Willy Tarreau477ecd82010-01-03 21:12:30 +0100133/* list of config files */
134static struct list cfg_cfgfiles = LIST_HEAD_INIT(cfg_cfgfiles);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200135int pid; /* current process id */
Willy Tarreau28156642007-11-26 16:13:36 +0100136int relative_pid = 1; /* process id starting at 1 */
Willy Tarreau387bd4f2017-11-10 19:08:14 +0100137unsigned long pid_bit = 1; /* bit corresponding to the process id */
Willy Tarreaua38a7172019-02-02 17:11:28 +0100138unsigned long all_proc_mask = 1; /* mask of all processes */
Willy Tarreaubaaee002006-06-26 02:48:02 +0200139
Willy Tarreauf8ea00e2020-03-12 17:24:53 +0100140volatile unsigned long sleeping_thread_mask = 0; /* Threads that are about to sleep in poll() */
Willy Tarreau4b3f27b2020-03-12 17:28:01 +0100141volatile unsigned long stopping_thread_mask = 0; /* Threads acknowledged stopping */
Willy Tarreauf8ea00e2020-03-12 17:24:53 +0100142
Willy Tarreaubaaee002006-06-26 02:48:02 +0200143/* global options */
144struct global global = {
Cyril Bonté203ec5a2017-03-23 22:44:13 +0100145 .hard_stop_after = TICK_ETERNITY,
Willy Tarreau247a13a2012-11-15 17:38:15 +0100146 .nbproc = 1,
Willy Tarreau149ab772019-01-26 14:27:06 +0100147 .nbthread = 0,
William Lallemand5f232402012-04-05 18:02:55 +0200148 .req_count = 0,
William Lallemand0f99e342011-10-12 17:50:54 +0200149 .logsrvs = LIST_HEAD_INIT(global.logsrvs),
William Lallemand9d5f5482012-11-07 16:12:57 +0100150 .maxzlibmem = 0,
William Lallemandd85f9172012-11-09 17:05:39 +0100151 .comp_rate_lim = 0,
Emeric Brun850efd52014-01-29 12:24:34 +0100152 .ssl_server_verify = SSL_SERVER_VERIFY_REQUIRED,
Emeric Bruned760922010-10-22 17:59:25 +0200153 .unix_bind = {
154 .ux = {
155 .uid = -1,
156 .gid = -1,
157 .mode = 0,
158 }
159 },
Willy Tarreau27a674e2009-08-17 07:23:33 +0200160 .tune = {
Willy Tarreau7ac908b2019-02-27 12:02:18 +0100161 .options = GTUNE_LISTENER_MQ,
Willy Tarreauc77d3642018-12-12 06:19:42 +0100162 .bufsize = (BUFSIZE + 2*sizeof(void *) - 1) & -(2*sizeof(void *)),
Christopher Faulet546c4692020-01-22 14:31:21 +0100163 .maxrewrite = MAXREWRITE,
Willy Tarreauc77d3642018-12-12 06:19:42 +0100164 .chksize = (BUFSIZE + 2*sizeof(void *) - 1) & -(2*sizeof(void *)),
Willy Tarreaua24adf02014-11-27 01:11:56 +0100165 .reserved_bufs = RESERVED_BUFS,
Willy Tarreauf3045d22015-04-29 16:24:50 +0200166 .pattern_cache = DEFAULT_PAT_LRU_SIZE,
Olivier Houchard88698d92019-04-16 19:07:22 +0200167 .pool_low_ratio = 20,
168 .pool_high_ratio = 25,
Christopher Faulet41ba36f2019-07-19 09:36:45 +0200169 .max_http_hdr = MAX_HTTP_HDR,
Emeric Brunfc32aca2012-09-03 12:10:29 +0200170#ifdef USE_OPENSSL
Emeric Brun46635772012-11-14 11:32:56 +0100171 .sslcachesize = SSLCACHESIZE,
Emeric Brunfc32aca2012-09-03 12:10:29 +0200172#endif
William Lallemandf3747832012-11-09 12:33:10 +0100173 .comp_maxlevel = 1,
Willy Tarreau7e312732014-02-12 16:35:14 +0100174#ifdef DEFAULT_IDLE_TIMER
175 .idle_timer = DEFAULT_IDLE_TIMER,
176#else
177 .idle_timer = 1000, /* 1 second */
178#endif
Willy Tarreau27a674e2009-08-17 07:23:33 +0200179 },
Emeric Brun76d88952012-10-05 15:47:31 +0200180#ifdef USE_OPENSSL
181#ifdef DEFAULT_MAXSSLCONN
Willy Tarreau403edff2012-09-06 11:58:37 +0200182 .maxsslconn = DEFAULT_MAXSSLCONN,
183#endif
Emeric Brun76d88952012-10-05 15:47:31 +0200184#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +0200185 /* others NULL OK */
186};
187
188/*********************************************************************/
189
190int stopping; /* non zero means stopping in progress */
Cyril Bonté203ec5a2017-03-23 22:44:13 +0100191int killed; /* non zero means a hard-stop is triggered */
Willy Tarreauaf7ad002010-08-31 15:39:26 +0200192int jobs = 0; /* number of active jobs (conns, listeners, active tasks, ...) */
William Lallemanda7199262018-11-16 16:57:20 +0100193int unstoppable_jobs = 0; /* number of active jobs that can't be stopped during a soft stop */
Willy Tarreau199ad242018-11-05 16:31:22 +0100194int active_peers = 0; /* number of active peers (connection attempts and connected) */
Willy Tarreau2d372c22018-11-05 17:12:27 +0100195int connected_peers = 0; /* number of connected peers (verified ones) */
Willy Tarreaubaaee002006-06-26 02:48:02 +0200196
197/* Here we store informations about the pids of the processes we may pause
198 * or kill. We will send them a signal every 10 ms until we can bind to all
199 * our ports. With 200 retries, that's about 2 seconds.
200 */
201#define MAX_START_RETRIES 200
Willy Tarreaubaaee002006-06-26 02:48:02 +0200202static int *oldpids = NULL;
203static int oldpids_sig; /* use USR1 or TERM */
204
Olivier Houchardf73629d2017-04-05 22:33:04 +0200205/* Path to the unix socket we use to retrieve listener sockets from the old process */
206static const char *old_unixsocket;
207
William Lallemand85b0bd92017-06-01 17:38:53 +0200208static char *cur_unixsocket = NULL;
209
William Lallemandcb11fd22017-06-01 17:38:52 +0200210int atexit_flag = 0;
211
Willy Tarreaubb545b42010-08-25 12:58:59 +0200212int nb_oldpids = 0;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200213const int zero = 0;
214const int one = 1;
Alexandre Cassen87ea5482007-10-11 20:48:58 +0200215const struct linger nolinger = { .l_onoff = 1, .l_linger = 0 };
Willy Tarreaubaaee002006-06-26 02:48:02 +0200216
Willy Tarreau1d21e0a2010-03-12 21:58:54 +0100217char hostname[MAX_HOSTNAME_LEN];
Emeric Brun2b920a12010-09-23 18:30:22 +0200218char localpeer[MAX_HOSTNAME_LEN];
Willy Tarreaubaaee002006-06-26 02:48:02 +0200219
William Lallemand00417412020-06-05 14:08:41 +0200220static char **old_argv = NULL; /* previous argv but cleaned up */
William Lallemand73b85e72017-06-01 17:38:51 +0200221
William Lallemandbc193052018-09-11 10:06:26 +0200222struct list proc_list = LIST_HEAD_INIT(proc_list);
223
224int master = 0; /* 1 if in master, 0 if in child */
Willy Tarreaubf696402019-03-01 10:09:28 +0100225unsigned int rlim_fd_cur_at_boot = 0;
226unsigned int rlim_fd_max_at_boot = 0;
William Lallemandbc193052018-09-11 10:06:26 +0200227
Willy Tarreau6c3a6812020-03-06 18:57:15 +0100228/* per-boot randomness */
229unsigned char boot_seed[20]; /* per-boot random seed (160 bits initially) */
230
William Lallemand16dd1b32018-11-19 18:46:18 +0100231struct mworker_proc *proc_self = NULL;
William Lallemandbc193052018-09-11 10:06:26 +0200232
William Lallemandb3f2be32018-09-11 10:06:18 +0200233static void *run_thread_poll_loop(void *data);
234
Willy Tarreauff055502014-04-28 22:27:06 +0200235/* bitfield of a few warnings to emit just once (WARN_*) */
236unsigned int warned = 0;
237
William Lallemande7361152018-10-26 14:47:36 +0200238/* master CLI configuration (-S flag) */
239struct list mworker_cli_conf = LIST_HEAD_INIT(mworker_cli_conf);
Willy Tarreaucdb737e2016-12-21 18:43:10 +0100240
241/* These are strings to be reported in the output of "haproxy -vv". They may
242 * either be constants (in which case must_free must be zero) or dynamically
243 * allocated strings to pass to free() on exit, and in this case must_free
244 * must be non-zero.
245 */
246struct list build_opts_list = LIST_HEAD_INIT(build_opts_list);
247struct build_opts_str {
248 struct list list;
249 const char *str;
250 int must_free;
251};
252
Willy Tarreaue6945732016-12-21 19:57:00 +0100253/* These functions are called just after the point where the program exits
254 * after a config validity check, so they are generally suited for resource
255 * allocation and slow initializations that should be skipped during basic
256 * config checks. The functions must return 0 on success, or a combination
257 * of ERR_* flags (ERR_WARN, ERR_ABORT, ERR_FATAL, ...). The 2 latter cause
258 * and immediate exit, so the function must have emitted any useful error.
259 */
260struct list post_check_list = LIST_HEAD_INIT(post_check_list);
261struct post_check_fct {
262 struct list list;
263 int (*fct)();
264};
265
Christopher Fauletc1692962019-08-12 09:51:07 +0200266/* These functions are called for each proxy just after the config validity
267 * check. The functions must return 0 on success, or a combination of ERR_*
268 * flags (ERR_WARN, ERR_ABORT, ERR_FATAL, ...). The 2 latter cause and immediate
269 * exit, so the function must have emitted any useful error.
270 */
271struct list post_proxy_check_list = LIST_HEAD_INIT(post_proxy_check_list);
272struct post_proxy_check_fct {
273 struct list list;
274 int (*fct)(struct proxy *);
275};
276
277/* These functions are called for each server just after the config validity
278 * check. The functions must return 0 on success, or a combination of ERR_*
279 * flags (ERR_WARN, ERR_ABORT, ERR_FATAL, ...). The 2 latter cause and immediate
280 * exit, so the function must have emitted any useful error.
281 */
282struct list post_server_check_list = LIST_HEAD_INIT(post_server_check_list);
283struct post_server_check_fct {
284 struct list list;
285 int (*fct)(struct server *);
286};
287
Willy Tarreau082b6282019-05-22 14:42:12 +0200288/* These functions are called for each thread just after the thread creation
289 * and before running the init functions. They should be used to do per-thread
290 * (re-)allocations that are needed by subsequent functoins. They must return 0
291 * if an error occurred. */
292struct list per_thread_alloc_list = LIST_HEAD_INIT(per_thread_alloc_list);
293struct per_thread_alloc_fct {
Willy Tarreau05554e62016-12-21 20:46:26 +0100294 struct list list;
Willy Tarreau082b6282019-05-22 14:42:12 +0200295 int (*fct)();
Willy Tarreau05554e62016-12-21 20:46:26 +0100296};
297
Christopher Faulet415f6112017-07-25 16:52:58 +0200298/* These functions are called for each thread just after the thread creation
299 * and before running the scheduler. They should be used to do per-thread
300 * initializations. They must return 0 if an error occurred. */
301struct list per_thread_init_list = LIST_HEAD_INIT(per_thread_init_list);
302struct per_thread_init_fct {
303 struct list list;
304 int (*fct)();
305};
306
Willy Tarreau082b6282019-05-22 14:42:12 +0200307/* These functions are called when freeing the global sections at the end of
308 * deinit, after everything is stopped. They don't return anything. They should
309 * not release shared resources that are possibly used by other deinit
310 * functions, only close/release what is private. Use the per_thread_free_list
311 * to release shared resources.
312 */
313struct list post_deinit_list = LIST_HEAD_INIT(post_deinit_list);
314struct post_deinit_fct {
315 struct list list;
316 void (*fct)();
317};
318
Christopher Faulet3ea5cbe2019-07-31 08:44:12 +0200319/* These functions are called when freeing a proxy during the deinit, after
320 * everything isg stopped. They don't return anything. They should not release
321 * the proxy itself or any shared resources that are possibly used by other
322 * deinit functions, only close/release what is private.
323 */
324struct list proxy_deinit_list = LIST_HEAD_INIT(proxy_deinit_list);
325struct proxy_deinit_fct {
326 struct list list;
327 void (*fct)(struct proxy *);
328};
329
330/* These functions are called when freeing a server during the deinit, after
331 * everything isg stopped. They don't return anything. They should not release
332 * the proxy itself or any shared resources that are possibly used by other
333 * deinit functions, only close/release what is private.
334 */
335struct list server_deinit_list = LIST_HEAD_INIT(server_deinit_list);
336struct server_deinit_fct {
337 struct list list;
338 void (*fct)(struct server *);
339};
340
Willy Tarreau082b6282019-05-22 14:42:12 +0200341/* These functions are called when freeing the global sections at the end of
342 * deinit, after the thread deinit functions, to release unneeded memory
343 * allocations. They don't return anything, and they work in best effort mode
344 * as their sole goal is to make valgrind mostly happy.
345 */
346struct list per_thread_free_list = LIST_HEAD_INIT(per_thread_free_list);
347struct per_thread_free_fct {
348 struct list list;
349 int (*fct)();
350};
351
Christopher Faulet415f6112017-07-25 16:52:58 +0200352/* These functions are called for each thread just after the scheduler loop and
353 * before exiting the thread. They don't return anything and, as for post-deinit
354 * functions, they work in best effort mode as their sole goal is to make
355 * valgrind mostly happy. */
356struct list per_thread_deinit_list = LIST_HEAD_INIT(per_thread_deinit_list);
357struct per_thread_deinit_fct {
358 struct list list;
359 void (*fct)();
360};
361
Willy Tarreaubaaee002006-06-26 02:48:02 +0200362/*********************************************************************/
363/* general purpose functions ***************************************/
364/*********************************************************************/
365
Willy Tarreaucdb737e2016-12-21 18:43:10 +0100366/* used to register some build option strings at boot. Set must_free to
367 * non-zero if the string must be freed upon exit.
368 */
369void hap_register_build_opts(const char *str, int must_free)
370{
371 struct build_opts_str *b;
372
373 b = calloc(1, sizeof(*b));
374 if (!b) {
375 fprintf(stderr, "out of memory\n");
376 exit(1);
377 }
378 b->str = str;
379 b->must_free = must_free;
380 LIST_ADDQ(&build_opts_list, &b->list);
381}
382
Willy Tarreaue6945732016-12-21 19:57:00 +0100383/* used to register some initialization functions to call after the checks. */
384void hap_register_post_check(int (*fct)())
385{
386 struct post_check_fct *b;
387
388 b = calloc(1, sizeof(*b));
389 if (!b) {
390 fprintf(stderr, "out of memory\n");
391 exit(1);
392 }
393 b->fct = fct;
394 LIST_ADDQ(&post_check_list, &b->list);
395}
396
Christopher Fauletc1692962019-08-12 09:51:07 +0200397/* used to register some initialization functions to call for each proxy after
398 * the checks.
399 */
400void hap_register_post_proxy_check(int (*fct)(struct proxy *))
401{
402 struct post_proxy_check_fct *b;
403
404 b = calloc(1, sizeof(*b));
405 if (!b) {
406 fprintf(stderr, "out of memory\n");
407 exit(1);
408 }
409 b->fct = fct;
410 LIST_ADDQ(&post_proxy_check_list, &b->list);
411}
412
413/* used to register some initialization functions to call for each server after
414 * the checks.
415 */
416void hap_register_post_server_check(int (*fct)(struct server *))
417{
418 struct post_server_check_fct *b;
419
420 b = calloc(1, sizeof(*b));
421 if (!b) {
422 fprintf(stderr, "out of memory\n");
423 exit(1);
424 }
425 b->fct = fct;
426 LIST_ADDQ(&post_server_check_list, &b->list);
427}
428
Willy Tarreau05554e62016-12-21 20:46:26 +0100429/* used to register some de-initialization functions to call after everything
430 * has stopped.
431 */
432void hap_register_post_deinit(void (*fct)())
433{
434 struct post_deinit_fct *b;
435
436 b = calloc(1, sizeof(*b));
437 if (!b) {
438 fprintf(stderr, "out of memory\n");
439 exit(1);
440 }
441 b->fct = fct;
442 LIST_ADDQ(&post_deinit_list, &b->list);
443}
444
Christopher Faulet3ea5cbe2019-07-31 08:44:12 +0200445/* used to register some per proxy de-initialization functions to call after
446 * everything has stopped.
447 */
448void hap_register_proxy_deinit(void (*fct)(struct proxy *))
449{
450 struct proxy_deinit_fct *b;
451
452 b = calloc(1, sizeof(*b));
453 if (!b) {
454 fprintf(stderr, "out of memory\n");
455 exit(1);
456 }
457 b->fct = fct;
458 LIST_ADDQ(&proxy_deinit_list, &b->list);
459}
460
461
462/* used to register some per server de-initialization functions to call after
463 * everything has stopped.
464 */
465void hap_register_server_deinit(void (*fct)(struct server *))
466{
467 struct server_deinit_fct *b;
468
469 b = calloc(1, sizeof(*b));
470 if (!b) {
471 fprintf(stderr, "out of memory\n");
472 exit(1);
473 }
474 b->fct = fct;
475 LIST_ADDQ(&server_deinit_list, &b->list);
476}
477
Willy Tarreau082b6282019-05-22 14:42:12 +0200478/* used to register some allocation functions to call for each thread. */
479void hap_register_per_thread_alloc(int (*fct)())
480{
481 struct per_thread_alloc_fct *b;
482
483 b = calloc(1, sizeof(*b));
484 if (!b) {
485 fprintf(stderr, "out of memory\n");
486 exit(1);
487 }
488 b->fct = fct;
489 LIST_ADDQ(&per_thread_alloc_list, &b->list);
490}
491
Christopher Faulet415f6112017-07-25 16:52:58 +0200492/* used to register some initialization functions to call for each thread. */
493void hap_register_per_thread_init(int (*fct)())
494{
495 struct per_thread_init_fct *b;
496
497 b = calloc(1, sizeof(*b));
498 if (!b) {
499 fprintf(stderr, "out of memory\n");
500 exit(1);
501 }
502 b->fct = fct;
503 LIST_ADDQ(&per_thread_init_list, &b->list);
504}
505
506/* used to register some de-initialization functions to call for each thread. */
507void hap_register_per_thread_deinit(void (*fct)())
508{
509 struct per_thread_deinit_fct *b;
510
511 b = calloc(1, sizeof(*b));
512 if (!b) {
513 fprintf(stderr, "out of memory\n");
514 exit(1);
515 }
516 b->fct = fct;
517 LIST_ADDQ(&per_thread_deinit_list, &b->list);
518}
519
Willy Tarreau082b6282019-05-22 14:42:12 +0200520/* used to register some free functions to call for each thread. */
521void hap_register_per_thread_free(int (*fct)())
522{
523 struct per_thread_free_fct *b;
524
525 b = calloc(1, sizeof(*b));
526 if (!b) {
527 fprintf(stderr, "out of memory\n");
528 exit(1);
529 }
530 b->fct = fct;
531 LIST_ADDQ(&per_thread_free_list, &b->list);
532}
533
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100534static void display_version()
Willy Tarreaubaaee002006-06-26 02:48:02 +0200535{
Tim Duesterhusdfad6a42020-04-18 16:02:47 +0200536 struct utsname utsname;
537
Willy Tarreau08dd2022019-11-21 18:07:30 +0100538 printf("HA-Proxy version %s %s - https://haproxy.org/\n"
539 PRODUCT_STATUS "\n", haproxy_version, haproxy_date);
Willy Tarreau47479eb2019-11-21 18:48:20 +0100540
541 if (strlen(PRODUCT_URL_BUGS) > 0) {
542 char base_version[20];
543 int dots = 0;
544 char *del;
545
546 /* only retrieve the base version without distro-specific extensions */
547 for (del = haproxy_version; *del; del++) {
548 if (*del == '.')
549 dots++;
550 else if (*del < '0' || *del > '9')
551 break;
552 }
553
554 strlcpy2(base_version, haproxy_version, del - haproxy_version + 1);
555 if (dots < 2)
556 printf("Known bugs: https://github.com/haproxy/haproxy/issues?q=is:issue+is:open\n");
557 else
558 printf("Known bugs: " PRODUCT_URL_BUGS "\n", base_version);
559 }
Tim Duesterhusdfad6a42020-04-18 16:02:47 +0200560
561 if (uname(&utsname) == 0) {
562 printf("Running on: %s %s %s %s\n", utsname.sysname, utsname.release, utsname.version, utsname.machine);
563 }
Willy Tarreaubaaee002006-06-26 02:48:02 +0200564}
565
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100566static void display_build_opts()
Willy Tarreau7b066db2007-12-02 11:28:59 +0100567{
Willy Tarreaucdb737e2016-12-21 18:43:10 +0100568 struct build_opts_str *item;
569
Willy Tarreau7b066db2007-12-02 11:28:59 +0100570 printf("Build options :"
571#ifdef BUILD_TARGET
Willy Tarreau9f2b7302008-01-02 20:48:34 +0100572 "\n TARGET = " BUILD_TARGET
Willy Tarreau7b066db2007-12-02 11:28:59 +0100573#endif
574#ifdef BUILD_CPU
Willy Tarreau9f2b7302008-01-02 20:48:34 +0100575 "\n CPU = " BUILD_CPU
Willy Tarreau7b066db2007-12-02 11:28:59 +0100576#endif
577#ifdef BUILD_CC
Willy Tarreau9f2b7302008-01-02 20:48:34 +0100578 "\n CC = " BUILD_CC
579#endif
580#ifdef BUILD_CFLAGS
581 "\n CFLAGS = " BUILD_CFLAGS
Willy Tarreau7b066db2007-12-02 11:28:59 +0100582#endif
Willy Tarreau9f2b7302008-01-02 20:48:34 +0100583#ifdef BUILD_OPTIONS
584 "\n OPTIONS = " BUILD_OPTIONS
Willy Tarreau7b066db2007-12-02 11:28:59 +0100585#endif
Willy Tarreau7728ed32019-03-27 13:20:08 +0100586#ifdef BUILD_FEATURES
587 "\n\nFeature list : " BUILD_FEATURES
588#endif
Willy Tarreau27a674e2009-08-17 07:23:33 +0200589 "\n\nDefault settings :"
Willy Tarreauca783d42019-03-13 10:03:07 +0100590 "\n bufsize = %d, maxrewrite = %d, maxpollevents = %d"
Willy Tarreau27a674e2009-08-17 07:23:33 +0200591 "\n\n",
Willy Tarreauca783d42019-03-13 10:03:07 +0100592 BUFSIZE, MAXREWRITE, MAX_POLL_EVENTS);
Willy Tarreaube5b6852009-10-03 18:57:08 +0200593
Willy Tarreaucdb737e2016-12-21 18:43:10 +0100594 list_for_each_entry(item, &build_opts_list, list) {
595 puts(item->str);
596 }
597
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +0100598 putchar('\n');
599
Willy Tarreaube5b6852009-10-03 18:57:08 +0200600 list_pollers(stdout);
601 putchar('\n');
Christopher Faulet98d9fe22018-04-10 14:37:32 +0200602 list_mux_proto(stdout);
603 putchar('\n');
Willy Tarreau679bba12019-03-19 08:08:10 +0100604 list_services(stdout);
605 putchar('\n');
Christopher Fauletb3f4e142016-03-07 12:46:38 +0100606 list_filters(stdout);
607 putchar('\n');
Willy Tarreau7b066db2007-12-02 11:28:59 +0100608}
609
Willy Tarreaubaaee002006-06-26 02:48:02 +0200610/*
611 * This function prints the command line usage and exits
612 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100613static void usage(char *name)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200614{
615 display_version();
616 fprintf(stderr,
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200617 "Usage : %s [-f <cfgfile|cfgdir>]* [ -vdV"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200618 "D ] [ -n <maxconn> ] [ -N <maxpconn> ]\n"
Willy Tarreaua088d312015-10-08 11:58:48 +0200619 " [ -p <pidfile> ] [ -m <max megs> ] [ -C <dir> ] [-- <cfgfile>*]\n"
Willy Tarreau7b066db2007-12-02 11:28:59 +0100620 " -v displays version ; -vv shows known build options.\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200621 " -d enters debug mode ; -db only disables background mode.\n"
Willy Tarreau6e064432012-05-08 15:40:42 +0200622 " -dM[<byte>] poisons memory with <byte> (defaults to 0x50)\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200623 " -V enters verbose mode (disables quiet mode)\n"
Willy Tarreau576132e2011-09-10 19:26:56 +0200624 " -D goes daemon ; -C changes to <dir> before loading files.\n"
William Lallemand095ba4c2017-06-01 17:38:50 +0200625 " -W master-worker mode.\n"
Tim Duesterhusd6942c82017-11-20 15:58:35 +0100626#if defined(USE_SYSTEMD)
627 " -Ws master-worker mode with systemd notify support.\n"
628#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +0200629 " -q quiet mode : don't display messages\n"
Willy Tarreau5d01a632009-06-22 16:02:30 +0200630 " -c check mode : only check config files and exit\n"
Willy Tarreauca783d42019-03-13 10:03:07 +0100631 " -n sets the maximum total # of connections (uses ulimit -n)\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200632 " -m limits the usable amount of memory (in MB)\n"
633 " -N sets the default, per-proxy maximum # of connections (%d)\n"
Emeric Brun2b920a12010-09-23 18:30:22 +0200634 " -L set local peer name (default to hostname)\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200635 " -p writes pids of all children to this file\n"
Willy Tarreaue5733232019-05-22 19:24:06 +0200636#if defined(USE_EPOLL)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200637 " -de disables epoll() usage even when available\n"
638#endif
Willy Tarreaue5733232019-05-22 19:24:06 +0200639#if defined(USE_KQUEUE)
Willy Tarreau1e63130a2007-04-09 12:03:06 +0200640 " -dk disables kqueue() usage even when available\n"
641#endif
Willy Tarreaue5733232019-05-22 19:24:06 +0200642#if defined(USE_EVPORTS)
Emmanuel Hocdet0ba4f482019-04-08 16:53:32 +0000643 " -dv disables event ports usage even when available\n"
644#endif
Willy Tarreaue5733232019-05-22 19:24:06 +0200645#if defined(USE_POLL)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200646 " -dp disables poll() usage even when available\n"
647#endif
Willy Tarreaue5733232019-05-22 19:24:06 +0200648#if defined(USE_LINUX_SPLICE)
Willy Tarreau3ab68cf2009-01-25 16:03:28 +0100649 " -dS disables splice usage (broken on old kernels)\n"
650#endif
Nenad Merdanovic88afe032014-04-14 15:56:58 +0200651#if defined(USE_GETADDRINFO)
652 " -dG disables getaddrinfo() usage\n"
653#endif
Lukas Tribusa0bcbdc2016-09-12 21:42:20 +0000654#if defined(SO_REUSEPORT)
655 " -dR disables SO_REUSEPORT usage\n"
656#endif
Willy Tarreau3eed10e2016-11-07 21:03:16 +0100657 " -dr ignores server address resolution failures\n"
Emeric Brun850efd52014-01-29 12:24:34 +0100658 " -dV disables SSL verify on servers side\n"
Willy Tarreau3eb10b82020-04-15 16:42:39 +0200659 " -dW fails if any warning is emitted\n"
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +0200660 " -sf/-st [pid ]* finishes/terminates old pids.\n"
Olivier Houchardf73629d2017-04-05 22:33:04 +0200661 " -x <unix_socket> get listening sockets from a unix socket\n"
William Lallemand63329e32019-06-13 17:03:37 +0200662 " -S <bind>[,<bind options>...] new master CLI\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200663 "\n",
Willy Tarreauca783d42019-03-13 10:03:07 +0100664 name, cfg_maxpconn);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200665 exit(1);
666}
667
668
669
670/*********************************************************************/
671/* more specific functions ***************************************/
672/*********************************************************************/
673
William Lallemand73b85e72017-06-01 17:38:51 +0200674/* sends the signal <sig> to all pids found in <oldpids>. Returns the number of
675 * pids the signal was correctly delivered to.
676 */
William Lallemande25473c2019-04-01 11:29:56 +0200677int tell_old_pids(int sig)
William Lallemand73b85e72017-06-01 17:38:51 +0200678{
679 int p;
680 int ret = 0;
681 for (p = 0; p < nb_oldpids; p++)
682 if (kill(oldpids[p], sig) == 0)
683 ret++;
684 return ret;
685}
686
William Lallemand75ea0a02017-11-15 19:02:58 +0100687/*
William Lallemand73b85e72017-06-01 17:38:51 +0200688 * remove a pid forom the olpid array and decrease nb_oldpids
689 * return 1 pid was found otherwise return 0
690 */
691
692int delete_oldpid(int pid)
693{
694 int i;
695
696 for (i = 0; i < nb_oldpids; i++) {
697 if (oldpids[i] == pid) {
698 oldpids[i] = oldpids[nb_oldpids - 1];
699 oldpids[nb_oldpids - 1] = 0;
700 nb_oldpids--;
701 return 1;
702 }
703 }
704 return 0;
705}
706
William Lallemand85b0bd92017-06-01 17:38:53 +0200707
708static void get_cur_unixsocket()
709{
710 /* if -x was used, try to update the stat socket if not available anymore */
711 if (global.stats_fe) {
712 struct bind_conf *bind_conf;
713
714 /* pass through all stats socket */
715 list_for_each_entry(bind_conf, &global.stats_fe->conf.bind, by_fe) {
716 struct listener *l;
717
718 list_for_each_entry(l, &bind_conf->listeners, by_bind) {
719
720 if (l->addr.ss_family == AF_UNIX &&
721 (bind_conf->level & ACCESS_FD_LISTENERS)) {
722 const struct sockaddr_un *un;
723
724 un = (struct sockaddr_un *)&l->addr;
725 /* priority to old_unixsocket */
726 if (!cur_unixsocket) {
727 cur_unixsocket = strdup(un->sun_path);
728 } else {
729 if (old_unixsocket && !strcmp(un->sun_path, old_unixsocket)) {
730 free(cur_unixsocket);
731 cur_unixsocket = strdup(old_unixsocket);
732 return;
733 }
734 }
735 }
736 }
737 }
738 }
739 if (!cur_unixsocket && old_unixsocket)
740 cur_unixsocket = strdup(old_unixsocket);
741}
742
William Lallemand73b85e72017-06-01 17:38:51 +0200743/*
744 * When called, this function reexec haproxy with -sf followed by current
Joseph Herlant03420902018-11-15 10:41:50 -0800745 * children PIDs and possibly old children PIDs if they didn't leave yet.
William Lallemand73b85e72017-06-01 17:38:51 +0200746 */
William Lallemanda57b7e32018-12-14 21:11:31 +0100747void mworker_reload()
William Lallemand73b85e72017-06-01 17:38:51 +0200748{
William Lallemand00417412020-06-05 14:08:41 +0200749 char **next_argv = NULL;
750 int old_argc = 0; /* previous number of argument */
William Lallemand73b85e72017-06-01 17:38:51 +0200751 int next_argc = 0;
William Lallemand00417412020-06-05 14:08:41 +0200752 int i = 0;
William Lallemand73b85e72017-06-01 17:38:51 +0200753 char *msg = NULL;
Willy Tarreau8dca1952019-03-01 10:21:55 +0100754 struct rlimit limit;
William Lallemand7c756a82018-11-26 11:53:40 +0100755 struct per_thread_deinit_fct *ptdf;
William Lallemand73b85e72017-06-01 17:38:51 +0200756
757 mworker_block_signals();
Tim Duesterhusd6942c82017-11-20 15:58:35 +0100758#if defined(USE_SYSTEMD)
759 if (global.tune.options & GTUNE_USE_SYSTEMD)
760 sd_notify(0, "RELOADING=1");
761#endif
William Lallemand73b85e72017-06-01 17:38:51 +0200762 setenv("HAPROXY_MWORKER_REEXEC", "1", 1);
763
William Lallemandbc193052018-09-11 10:06:26 +0200764 mworker_proc_list_to_env(); /* put the children description in the env */
765
William Lallemand7c756a82018-11-26 11:53:40 +0100766 /* during the reload we must ensure that every FDs that can't be
767 * reuse (ie those that are not referenced in the proc_list)
768 * are closed or they will leak. */
769
770 /* close the listeners FD */
771 mworker_cli_proxy_stop();
William Lallemand16866672019-06-24 17:40:48 +0200772
773 if (getenv("HAPROXY_MWORKER_WAIT_ONLY") == NULL) {
774 /* close the poller FD and the thread waker pipe FD */
775 list_for_each_entry(ptdf, &per_thread_deinit_list, list)
776 ptdf->fct();
777 if (fdtab)
778 deinit_pollers();
779 }
Willy Tarreau5db847a2019-05-09 14:13:35 +0200780#if defined(USE_OPENSSL) && (HA_OPENSSL_VERSION_NUMBER >= 0x10101000L)
William Lallemand5fdb5b32019-10-15 14:04:08 +0200781 /* close random device FDs */
782 RAND_keep_random_devices_open(0);
Rob Allen56996da2019-05-03 09:11:32 +0100783#endif
William Lallemand7c756a82018-11-26 11:53:40 +0100784
Willy Tarreau8dca1952019-03-01 10:21:55 +0100785 /* restore the initial FD limits */
786 limit.rlim_cur = rlim_fd_cur_at_boot;
787 limit.rlim_max = rlim_fd_max_at_boot;
788 if (setrlimit(RLIMIT_NOFILE, &limit) == -1) {
789 getrlimit(RLIMIT_NOFILE, &limit);
790 ha_warning("Failed to restore initial FD limits (cur=%u max=%u), using cur=%u max=%u\n",
791 rlim_fd_cur_at_boot, rlim_fd_max_at_boot,
792 (unsigned int)limit.rlim_cur, (unsigned int)limit.rlim_max);
793 }
794
William Lallemand73b85e72017-06-01 17:38:51 +0200795 /* compute length */
William Lallemand00417412020-06-05 14:08:41 +0200796 while (old_argv[old_argc])
797 old_argc++;
William Lallemand73b85e72017-06-01 17:38:51 +0200798
William Lallemand85b0bd92017-06-01 17:38:53 +0200799 /* 1 for haproxy -sf, 2 for -x /socket */
William Lallemand00417412020-06-05 14:08:41 +0200800 next_argv = calloc(old_argc + 1 + 2 + mworker_child_nb() + nb_oldpids + 1, sizeof(char *));
William Lallemand73b85e72017-06-01 17:38:51 +0200801 if (next_argv == NULL)
802 goto alloc_error;
803
William Lallemand00417412020-06-05 14:08:41 +0200804 /* copy the program name */
805 next_argv[next_argc++] = old_argv[0];
806
807 /* insert the new options just after argv[0] in case we have a -- */
808
William Lallemand73b85e72017-06-01 17:38:51 +0200809 /* add -sf <PID>* to argv */
William Lallemand3f128872019-04-01 11:29:59 +0200810 if (mworker_child_nb() > 0) {
811 struct mworker_proc *child;
812
William Lallemand73b85e72017-06-01 17:38:51 +0200813 next_argv[next_argc++] = "-sf";
William Lallemand3f128872019-04-01 11:29:59 +0200814
815 list_for_each_entry(child, &proc_list, list) {
William Lallemand677e2f22019-11-19 17:04:18 +0100816 if (!(child->options & (PROC_O_TYPE_WORKER|PROC_O_TYPE_PROG)) || child->pid <= -1 )
William Lallemand3f128872019-04-01 11:29:59 +0200817 continue;
William Lallemand00417412020-06-05 14:08:41 +0200818 if ((next_argv[next_argc++] = memprintf(&msg, "%d", child->pid)) == NULL)
William Lallemand73b85e72017-06-01 17:38:51 +0200819 goto alloc_error;
820 msg = NULL;
821 }
822 }
William Lallemand2bf6d622017-06-20 11:20:23 +0200823 /* add the -x option with the stat socket */
William Lallemand85b0bd92017-06-01 17:38:53 +0200824 if (cur_unixsocket) {
William Lallemand2bf6d622017-06-20 11:20:23 +0200825 next_argv[next_argc++] = "-x";
826 next_argv[next_argc++] = (char *)cur_unixsocket;
William Lallemand85b0bd92017-06-01 17:38:53 +0200827 }
828
William Lallemand00417412020-06-05 14:08:41 +0200829 /* copy the previous options */
830 for (i = 1; i < old_argc; i++)
831 next_argv[next_argc++] = old_argv[i];
832
Christopher Faulet767a84b2017-11-24 16:50:31 +0100833 ha_warning("Reexecuting Master process\n");
Willy Tarreaue0d86e22019-08-26 10:37:39 +0200834 signal(SIGPROF, SIG_IGN);
Tim Duesterhus0436ab72017-11-12 17:39:18 +0100835 execvp(next_argv[0], next_argv);
William Lallemand73b85e72017-06-01 17:38:51 +0200836
Christopher Faulet767a84b2017-11-24 16:50:31 +0100837 ha_warning("Failed to reexecute the master process [%d]: %s\n", pid, strerror(errno));
William Lallemand9fc6c972020-06-08 10:01:13 +0200838 free(next_argv);
839 next_argv = NULL;
William Lallemand722d4ca2017-11-15 19:02:55 +0100840 return;
841
William Lallemand73b85e72017-06-01 17:38:51 +0200842alloc_error:
William Lallemand00417412020-06-05 14:08:41 +0200843 free(next_argv);
844 next_argv = NULL;
Joseph Herlant07a08342018-11-15 10:43:05 -0800845 ha_warning("Failed to reexecute the master process [%d]: Cannot allocate memory\n", pid);
William Lallemand73b85e72017-06-01 17:38:51 +0200846 return;
847}
848
William Lallemandb3f2be32018-09-11 10:06:18 +0200849static void mworker_loop()
850{
851
852#if defined(USE_SYSTEMD)
853 if (global.tune.options & GTUNE_USE_SYSTEMD)
854 sd_notifyf(0, "READY=1\nMAINPID=%lu", (unsigned long)getpid());
855#endif
Willy Tarreaud83b6c12019-04-18 11:31:36 +0200856 /* Busy polling makes no sense in the master :-) */
857 global.tune.options &= ~GTUNE_BUSY_POLLING;
William Lallemandb3f2be32018-09-11 10:06:18 +0200858
William Lallemandbc193052018-09-11 10:06:26 +0200859 master = 1;
860
Willy Tarreaud26c9f92019-12-11 14:24:07 +0100861 signal_unregister(SIGTTIN);
862 signal_unregister(SIGTTOU);
William Lallemand0564d412018-11-20 17:36:53 +0100863 signal_unregister(SIGUSR1);
864 signal_unregister(SIGHUP);
865 signal_unregister(SIGQUIT);
866
William Lallemandb3f2be32018-09-11 10:06:18 +0200867 signal_register_fct(SIGTERM, mworker_catch_sigterm, SIGTERM);
868 signal_register_fct(SIGUSR1, mworker_catch_sigterm, SIGUSR1);
Willy Tarreaud26c9f92019-12-11 14:24:07 +0100869 signal_register_fct(SIGTTIN, mworker_broadcast_signal, SIGTTIN);
870 signal_register_fct(SIGTTOU, mworker_broadcast_signal, SIGTTOU);
William Lallemandb3f2be32018-09-11 10:06:18 +0200871 signal_register_fct(SIGINT, mworker_catch_sigterm, SIGINT);
872 signal_register_fct(SIGHUP, mworker_catch_sighup, SIGHUP);
873 signal_register_fct(SIGUSR2, mworker_catch_sighup, SIGUSR2);
874 signal_register_fct(SIGCHLD, mworker_catch_sigchld, SIGCHLD);
875
876 mworker_unblock_signals();
877 mworker_cleanlisteners();
William Lallemand27f3fa52018-12-06 14:05:20 +0100878 mworker_cleantasks();
William Lallemandb3f2be32018-09-11 10:06:18 +0200879
William Lallemandbc193052018-09-11 10:06:26 +0200880 mworker_catch_sigchld(NULL); /* ensure we clean the children in case
881 some SIGCHLD were lost */
882
William Lallemandb3f2be32018-09-11 10:06:18 +0200883 global.nbthread = 1;
884 relative_pid = 1;
885 pid_bit = 1;
Willy Tarreaua38a7172019-02-02 17:11:28 +0100886 all_proc_mask = 1;
William Lallemandb3f2be32018-09-11 10:06:18 +0200887
William Lallemand2672eb92018-12-14 15:52:39 +0100888#ifdef USE_THREAD
889 tid_bit = 1;
890 all_threads_mask = 1;
891#endif
892
William Lallemandb3f2be32018-09-11 10:06:18 +0200893 jobs++; /* this is the "master" job, we want to take care of the
894 signals even if there is no listener so the poll loop don't
895 leave */
896
897 fork_poller();
Willy Tarreaub4f7cc32019-05-03 09:27:30 +0200898 run_thread_poll_loop(0);
William Lallemandb3f2be32018-09-11 10:06:18 +0200899}
William Lallemandcb11fd22017-06-01 17:38:52 +0200900
901/*
902 * Reexec the process in failure mode, instead of exiting
903 */
904void reexec_on_failure()
905{
906 if (!atexit_flag)
907 return;
908
909 setenv("HAPROXY_MWORKER_WAIT_ONLY", "1", 1);
910
Christopher Faulet767a84b2017-11-24 16:50:31 +0100911 ha_warning("Reexecuting Master process in waitpid mode\n");
William Lallemandcb11fd22017-06-01 17:38:52 +0200912 mworker_reload();
William Lallemandcb11fd22017-06-01 17:38:52 +0200913}
William Lallemand73b85e72017-06-01 17:38:51 +0200914
915
916/*
Willy Tarreaud0807c32010-08-27 18:26:11 +0200917 * upon SIGUSR1, let's have a soft stop. Note that soft_stop() broadcasts
918 * a signal zero to all subscribers. This means that it's as easy as
919 * subscribing to signal 0 to get informed about an imminent shutdown.
Willy Tarreaubaaee002006-06-26 02:48:02 +0200920 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100921static void sig_soft_stop(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200922{
923 soft_stop();
Willy Tarreau24f4efa2010-08-27 17:56:48 +0200924 signal_unregister_handler(sh);
Willy Tarreaubafbe012017-11-24 17:34:44 +0100925 pool_gc(NULL);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200926}
927
928/*
929 * upon SIGTTOU, we pause everything
930 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100931static void sig_pause(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200932{
933 pause_proxies();
Willy Tarreaubafbe012017-11-24 17:34:44 +0100934 pool_gc(NULL);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200935}
936
937/*
938 * upon SIGTTIN, let's have a soft stop.
939 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100940static void sig_listen(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200941{
Willy Tarreaube58c382011-07-24 18:28:10 +0200942 resume_proxies();
Willy Tarreaubaaee002006-06-26 02:48:02 +0200943}
944
945/*
946 * this function dumps every server's state when the process receives SIGHUP.
947 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100948static void sig_dump_state(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200949{
Olivier Houchardfbc74e82017-11-24 16:54:05 +0100950 struct proxy *p = proxies_list;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200951
Christopher Faulet767a84b2017-11-24 16:50:31 +0100952 ha_warning("SIGHUP received, dumping servers states.\n");
Willy Tarreaubaaee002006-06-26 02:48:02 +0200953 while (p) {
954 struct server *s = p->srv;
955
956 send_log(p, LOG_NOTICE, "SIGHUP received, dumping servers states for proxy %s.\n", p->id);
957 while (s) {
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100958 chunk_printf(&trash,
959 "SIGHUP: Server %s/%s is %s. Conn: %d act, %d pend, %lld tot.",
960 p->id, s->id,
Emeric Brun52a91d32017-08-31 14:41:55 +0200961 (s->cur_state != SRV_ST_STOPPED) ? "UP" : "DOWN",
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100962 s->cur_sess, s->nbpend, s->counters.cum_sess);
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200963 ha_warning("%s\n", trash.area);
964 send_log(p, LOG_NOTICE, "%s\n", trash.area);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200965 s = s->next;
966 }
967
Willy Tarreau5fcc8f12007-09-17 11:27:09 +0200968 /* FIXME: those info are a bit outdated. We should be able to distinguish between FE and BE. */
969 if (!p->srv) {
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100970 chunk_printf(&trash,
971 "SIGHUP: Proxy %s has no servers. Conn: act(FE+BE): %d+%d, %d pend (%d unass), tot(FE+BE): %lld+%lld.",
972 p->id,
973 p->feconn, p->beconn, p->totpend, p->nbpend, p->fe_counters.cum_conn, p->be_counters.cum_conn);
Willy Tarreau5fcc8f12007-09-17 11:27:09 +0200974 } else if (p->srv_act == 0) {
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100975 chunk_printf(&trash,
976 "SIGHUP: Proxy %s %s ! Conn: act(FE+BE): %d+%d, %d pend (%d unass), tot(FE+BE): %lld+%lld.",
977 p->id,
978 (p->srv_bck) ? "is running on backup servers" : "has no server available",
979 p->feconn, p->beconn, p->totpend, p->nbpend, p->fe_counters.cum_conn, p->be_counters.cum_conn);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200980 } else {
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100981 chunk_printf(&trash,
982 "SIGHUP: Proxy %s has %d active servers and %d backup servers available."
983 " Conn: act(FE+BE): %d+%d, %d pend (%d unass), tot(FE+BE): %lld+%lld.",
984 p->id, p->srv_act, p->srv_bck,
985 p->feconn, p->beconn, p->totpend, p->nbpend, p->fe_counters.cum_conn, p->be_counters.cum_conn);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200986 }
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200987 ha_warning("%s\n", trash.area);
988 send_log(p, LOG_NOTICE, "%s\n", trash.area);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200989
990 p = p->next;
991 }
Willy Tarreaubaaee002006-06-26 02:48:02 +0200992}
993
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100994static void dump(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200995{
Willy Tarreauc6ca1a02007-05-13 19:43:47 +0200996 /* dump memory usage then free everything possible */
997 dump_pools();
Willy Tarreaubafbe012017-11-24 17:34:44 +0100998 pool_gc(NULL);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200999}
1000
William Lallemande1340412017-12-28 16:09:36 +01001001/*
1002 * This function dup2 the stdio FDs (0,1,2) with <fd>, then closes <fd>
1003 * If <fd> < 0, it opens /dev/null and use it to dup
1004 *
1005 * In the case of chrooting, you have to open /dev/null before the chroot, and
1006 * pass the <fd> to this function
1007 */
1008static void stdio_quiet(int fd)
1009{
1010 if (fd < 0)
1011 fd = open("/dev/null", O_RDWR, 0);
1012
1013 if (fd > -1) {
1014 fclose(stdin);
1015 fclose(stdout);
1016 fclose(stderr);
1017
1018 dup2(fd, 0);
1019 dup2(fd, 1);
1020 dup2(fd, 2);
1021 if (fd > 2)
1022 close(fd);
1023 return;
1024 }
1025
1026 ha_alert("Cannot open /dev/null\n");
1027 exit(EXIT_FAILURE);
1028}
1029
1030
Joseph Herlant03420902018-11-15 10:41:50 -08001031/* This function checks if cfg_cfgfiles contains directories.
1032 * If it finds one, it adds all the files (and only files) it contains
1033 * in cfg_cfgfiles in place of the directory (and removes the directory).
1034 * It adds the files in lexical order.
1035 * It adds only files with .cfg extension.
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001036 * It doesn't add files with name starting with '.'
1037 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +01001038static void cfgfiles_expand_directories(void)
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001039{
1040 struct wordlist *wl, *wlb;
1041 char *err = NULL;
1042
1043 list_for_each_entry_safe(wl, wlb, &cfg_cfgfiles, list) {
1044 struct stat file_stat;
1045 struct dirent **dir_entries = NULL;
1046 int dir_entries_nb;
1047 int dir_entries_it;
1048
1049 if (stat(wl->s, &file_stat)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001050 ha_alert("Cannot open configuration file/directory %s : %s\n",
1051 wl->s,
1052 strerror(errno));
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001053 exit(1);
1054 }
1055
1056 if (!S_ISDIR(file_stat.st_mode))
1057 continue;
1058
1059 /* from this point wl->s is a directory */
1060
1061 dir_entries_nb = scandir(wl->s, &dir_entries, NULL, alphasort);
1062 if (dir_entries_nb < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001063 ha_alert("Cannot open configuration directory %s : %s\n",
1064 wl->s,
1065 strerror(errno));
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001066 exit(1);
1067 }
1068
1069 /* for each element in the directory wl->s */
1070 for (dir_entries_it = 0; dir_entries_it < dir_entries_nb; dir_entries_it++) {
1071 struct dirent *dir_entry = dir_entries[dir_entries_it];
1072 char *filename = NULL;
1073 char *d_name_cfgext = strstr(dir_entry->d_name, ".cfg");
1074
1075 /* don't add filename that begin with .
Joseph Herlant03420902018-11-15 10:41:50 -08001076 * only add filename with .cfg extension
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001077 */
1078 if (dir_entry->d_name[0] == '.' ||
1079 !(d_name_cfgext && d_name_cfgext[4] == '\0'))
1080 goto next_dir_entry;
1081
1082 if (!memprintf(&filename, "%s/%s", wl->s, dir_entry->d_name)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001083 ha_alert("Cannot load configuration files %s : out of memory.\n",
1084 filename);
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001085 exit(1);
1086 }
1087
1088 if (stat(filename, &file_stat)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001089 ha_alert("Cannot open configuration file %s : %s\n",
1090 wl->s,
1091 strerror(errno));
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001092 exit(1);
1093 }
1094
1095 /* don't add anything else than regular file in cfg_cfgfiles
1096 * this way we avoid loops
1097 */
1098 if (!S_ISREG(file_stat.st_mode))
1099 goto next_dir_entry;
1100
1101 if (!list_append_word(&wl->list, filename, &err)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001102 ha_alert("Cannot load configuration files %s : %s\n",
1103 filename,
1104 err);
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001105 exit(1);
1106 }
1107
1108next_dir_entry:
1109 free(filename);
1110 free(dir_entry);
1111 }
1112
1113 free(dir_entries);
1114
1115 /* remove the current directory (wl) from cfg_cfgfiles */
1116 free(wl->s);
1117 LIST_DEL(&wl->list);
1118 free(wl);
1119 }
1120
1121 free(err);
1122}
1123
Olivier Houchardf73629d2017-04-05 22:33:04 +02001124static int get_old_sockets(const char *unixsocket)
1125{
1126 char *cmsgbuf = NULL, *tmpbuf = NULL;
1127 int *tmpfd = NULL;
1128 struct sockaddr_un addr;
1129 struct cmsghdr *cmsg;
1130 struct msghdr msghdr;
1131 struct iovec iov;
1132 struct xfer_sock_list *xfer_sock = NULL;
Olivier Houchard54740872017-04-06 14:45:14 +02001133 struct timeval tv = { .tv_sec = 1, .tv_usec = 0 };
Olivier Houchardf73629d2017-04-05 22:33:04 +02001134 int sock = -1;
1135 int ret = -1;
1136 int ret2 = -1;
1137 int fd_nb;
1138 int got_fd = 0;
1139 int i = 0;
1140 size_t maxoff = 0, curoff = 0;
1141
1142 memset(&msghdr, 0, sizeof(msghdr));
1143 cmsgbuf = malloc(CMSG_SPACE(sizeof(int)) * MAX_SEND_FD);
1144 if (!cmsgbuf) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001145 ha_warning("Failed to allocate memory to send sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001146 goto out;
1147 }
1148 sock = socket(PF_UNIX, SOCK_STREAM, 0);
1149 if (sock < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001150 ha_warning("Failed to connect to the old process socket '%s'\n",
1151 unixsocket);
Olivier Houchardf73629d2017-04-05 22:33:04 +02001152 goto out;
1153 }
Willy Tarreau719e07c2019-12-11 16:29:10 +01001154 strncpy(addr.sun_path, unixsocket, sizeof(addr.sun_path) - 1);
Olivier Houchardf73629d2017-04-05 22:33:04 +02001155 addr.sun_path[sizeof(addr.sun_path) - 1] = 0;
1156 addr.sun_family = PF_UNIX;
1157 ret = connect(sock, (struct sockaddr *)&addr, sizeof(addr));
1158 if (ret < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001159 ha_warning("Failed to connect to the old process socket '%s'\n",
1160 unixsocket);
Olivier Houchardf73629d2017-04-05 22:33:04 +02001161 goto out;
1162 }
Olivier Houchard54740872017-04-06 14:45:14 +02001163 setsockopt(sock, SOL_SOCKET, SO_RCVTIMEO, (void *)&tv, sizeof(tv));
Olivier Houchardf73629d2017-04-05 22:33:04 +02001164 iov.iov_base = &fd_nb;
1165 iov.iov_len = sizeof(fd_nb);
1166 msghdr.msg_iov = &iov;
1167 msghdr.msg_iovlen = 1;
1168 send(sock, "_getsocks\n", strlen("_getsocks\n"), 0);
1169 /* First, get the number of file descriptors to be received */
1170 if (recvmsg(sock, &msghdr, MSG_WAITALL) != sizeof(fd_nb)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001171 ha_warning("Failed to get the number of sockets to be transferred !\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001172 goto out;
1173 }
1174 if (fd_nb == 0) {
1175 ret = 0;
1176 goto out;
1177 }
Olivier Houchardf143b802017-11-04 15:13:01 +01001178 tmpbuf = malloc(fd_nb * (1 + MAXPATHLEN + 1 + IFNAMSIZ + sizeof(int)));
Olivier Houchardf73629d2017-04-05 22:33:04 +02001179 if (tmpbuf == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001180 ha_warning("Failed to allocate memory while receiving sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001181 goto out;
1182 }
1183 tmpfd = malloc(fd_nb * sizeof(int));
1184 if (tmpfd == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001185 ha_warning("Failed to allocate memory while receiving sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001186 goto out;
1187 }
1188 msghdr.msg_control = cmsgbuf;
1189 msghdr.msg_controllen = CMSG_SPACE(sizeof(int)) * MAX_SEND_FD;
Olivier Houchardf143b802017-11-04 15:13:01 +01001190 iov.iov_len = MAX_SEND_FD * (1 + MAXPATHLEN + 1 + IFNAMSIZ + sizeof(int));
Olivier Houchardf73629d2017-04-05 22:33:04 +02001191 do {
1192 int ret3;
1193
1194 iov.iov_base = tmpbuf + curoff;
1195 ret = recvmsg(sock, &msghdr, 0);
1196 if (ret == -1 && errno == EINTR)
1197 continue;
1198 if (ret <= 0)
1199 break;
1200 /* Send an ack to let the sender know we got the sockets
1201 * and it can send some more
1202 */
1203 do {
1204 ret3 = send(sock, &got_fd, sizeof(got_fd), 0);
1205 } while (ret3 == -1 && errno == EINTR);
1206 for (cmsg = CMSG_FIRSTHDR(&msghdr); cmsg != NULL;
1207 cmsg = CMSG_NXTHDR(&msghdr, cmsg)) {
1208 if (cmsg->cmsg_level == SOL_SOCKET &&
1209 cmsg->cmsg_type == SCM_RIGHTS) {
1210 size_t totlen = cmsg->cmsg_len -
1211 CMSG_LEN(0);
1212 if (totlen / sizeof(int) + got_fd > fd_nb) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001213 ha_warning("Got to many sockets !\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001214 goto out;
1215 }
1216 /*
1217 * Be paranoid and use memcpy() to avoid any
1218 * potential alignement issue.
1219 */
1220 memcpy(&tmpfd[got_fd], CMSG_DATA(cmsg), totlen);
1221 got_fd += totlen / sizeof(int);
1222 }
1223 }
1224 curoff += ret;
1225 } while (got_fd < fd_nb);
1226
1227 if (got_fd != fd_nb) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001228 ha_warning("We didn't get the expected number of sockets (expecting %d got %d)\n",
1229 fd_nb, got_fd);
Olivier Houchardf73629d2017-04-05 22:33:04 +02001230 goto out;
1231 }
1232 maxoff = curoff;
1233 curoff = 0;
1234 for (i = 0; i < got_fd; i++) {
1235 int fd = tmpfd[i];
1236 socklen_t socklen;
1237 int len;
1238
1239 xfer_sock = calloc(1, sizeof(*xfer_sock));
1240 if (!xfer_sock) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001241 ha_warning("Failed to allocate memory in get_old_sockets() !\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001242 break;
1243 }
1244 xfer_sock->fd = -1;
1245
1246 socklen = sizeof(xfer_sock->addr);
1247 if (getsockname(fd, (struct sockaddr *)&xfer_sock->addr, &socklen) != 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001248 ha_warning("Failed to get socket address\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001249 free(xfer_sock);
Olivier Houchardbe7b1ce2017-07-17 17:25:33 +02001250 xfer_sock = NULL;
Olivier Houchardf73629d2017-04-05 22:33:04 +02001251 continue;
1252 }
1253 if (curoff >= maxoff) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001254 ha_warning("Inconsistency while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001255 goto out;
1256 }
1257 len = tmpbuf[curoff++];
1258 if (len > 0) {
1259 /* We have a namespace */
1260 if (curoff + len > maxoff) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001261 ha_warning("Inconsistency while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001262 goto out;
1263 }
1264 xfer_sock->namespace = malloc(len + 1);
1265 if (!xfer_sock->namespace) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001266 ha_warning("Failed to allocate memory while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001267 goto out;
1268 }
1269 memcpy(xfer_sock->namespace, &tmpbuf[curoff], len);
1270 xfer_sock->namespace[len] = 0;
1271 curoff += len;
1272 }
1273 if (curoff >= maxoff) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001274 ha_warning("Inconsistency while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001275 goto out;
1276 }
1277 len = tmpbuf[curoff++];
1278 if (len > 0) {
1279 /* We have an interface */
1280 if (curoff + len > maxoff) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001281 ha_warning("Inconsistency while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001282 goto out;
1283 }
1284 xfer_sock->iface = malloc(len + 1);
1285 if (!xfer_sock->iface) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001286 ha_warning("Failed to allocate memory while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001287 goto out;
1288 }
1289 memcpy(xfer_sock->iface, &tmpbuf[curoff], len);
Olivier Houchard33e083c2018-03-15 17:48:49 +01001290 xfer_sock->iface[len] = 0;
Olivier Houchardf73629d2017-04-05 22:33:04 +02001291 curoff += len;
1292 }
1293 if (curoff + sizeof(int) > maxoff) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001294 ha_warning("Inconsistency while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001295 goto out;
1296 }
1297 memcpy(&xfer_sock->options, &tmpbuf[curoff],
1298 sizeof(xfer_sock->options));
1299 curoff += sizeof(xfer_sock->options);
1300
1301 xfer_sock->fd = fd;
1302 if (xfer_sock_list)
1303 xfer_sock_list->prev = xfer_sock;
1304 xfer_sock->next = xfer_sock_list;
1305 xfer_sock->prev = NULL;
1306 xfer_sock_list = xfer_sock;
1307 xfer_sock = NULL;
1308 }
1309
1310 ret2 = 0;
1311out:
1312 /* If we failed midway make sure to close the remaining
1313 * file descriptors
1314 */
1315 if (tmpfd != NULL && i < got_fd) {
1316 for (; i < got_fd; i++) {
1317 close(tmpfd[i]);
1318 }
1319 }
1320 free(tmpbuf);
1321 free(tmpfd);
1322 free(cmsgbuf);
1323 if (sock != -1)
1324 close(sock);
1325 if (xfer_sock) {
1326 free(xfer_sock->namespace);
1327 free(xfer_sock->iface);
1328 if (xfer_sock->fd != -1)
1329 close(xfer_sock->fd);
1330 free(xfer_sock);
1331 }
1332 return (ret2);
1333}
1334
Willy Tarreaubaaee002006-06-26 02:48:02 +02001335/*
William Lallemand73b85e72017-06-01 17:38:51 +02001336 * copy and cleanup the current argv
William Lallemanddf6c5a82020-06-04 17:40:23 +02001337 * Remove the -sf /-st / -x parameters
William Lallemand73b85e72017-06-01 17:38:51 +02001338 * Return an allocated copy of argv
1339 */
1340
1341static char **copy_argv(int argc, char **argv)
1342{
William Lallemanddf6c5a82020-06-04 17:40:23 +02001343 char **newargv, **retargv;
William Lallemand73b85e72017-06-01 17:38:51 +02001344
1345 newargv = calloc(argc + 2, sizeof(char *));
1346 if (newargv == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001347 ha_warning("Cannot allocate memory\n");
William Lallemand73b85e72017-06-01 17:38:51 +02001348 return NULL;
1349 }
William Lallemanddf6c5a82020-06-04 17:40:23 +02001350 retargv = newargv;
William Lallemand73b85e72017-06-01 17:38:51 +02001351
William Lallemanddf6c5a82020-06-04 17:40:23 +02001352 /* first copy argv[0] */
1353 *newargv++ = *argv++;
1354 argc--;
1355
1356 while (argc > 0) {
1357 if (**argv != '-') {
1358 /* non options are copied but will fail in the argument parser */
1359 *newargv++ = *argv++;
1360 argc--;
1361
1362 } else {
1363 char *flag;
1364
1365 flag = *argv + 1;
1366
1367 if (flag[0] == '-' && flag[1] == 0) {
1368 /* "--\0" copy every arguments till the end of argv */
1369 *newargv++ = *argv++;
1370 argc--;
1371
1372 while (argc > 0) {
1373 *newargv++ = *argv++;
1374 argc--;
1375 }
1376 } else {
1377 switch (*flag) {
1378 case 's':
1379 /* -sf / -st and their parameters are ignored */
1380 if (flag[1] == 'f' || flag[1] == 't') {
1381 argc--;
1382 argv++;
1383 /* The list can't contain a negative value since the only
1384 way to know the end of this list is by looking for the
1385 next option or the end of the options */
1386 while (argc > 0 && argv[0][0] != '-') {
1387 argc--;
1388 argv++;
1389 }
1390 }
1391 break;
1392
1393 case 'x':
1394 /* this option and its parameter are ignored */
1395 argc--;
1396 argv++;
1397 if (argc > 0) {
1398 argc--;
1399 argv++;
1400 }
1401 break;
1402
1403 case 'C':
1404 case 'n':
1405 case 'm':
1406 case 'N':
1407 case 'L':
1408 case 'f':
1409 case 'p':
1410 case 'S':
1411 /* these options have only 1 parameter which must be copied and can start with a '-' */
1412 *newargv++ = *argv++;
1413 argc--;
1414 if (argc == 0)
1415 goto error;
1416 *newargv++ = *argv++;
1417 argc--;
1418 break;
1419 default:
1420 /* for other options just copy them without parameters, this is also done
1421 * for options like "--foo", but this will fail in the argument parser.
1422 * */
1423 *newargv++ = *argv++;
1424 argc--;
1425 break;
1426 }
William Lallemand73b85e72017-06-01 17:38:51 +02001427 }
1428 }
William Lallemand73b85e72017-06-01 17:38:51 +02001429 }
William Lallemand2bf6d622017-06-20 11:20:23 +02001430
William Lallemanddf6c5a82020-06-04 17:40:23 +02001431 return retargv;
1432
1433error:
1434 free(retargv);
1435 return NULL;
William Lallemand73b85e72017-06-01 17:38:51 +02001436}
1437
Willy Tarreau6c3a6812020-03-06 18:57:15 +01001438
1439/* Performs basic random seed initialization. The main issue with this is that
1440 * srandom_r() only takes 32 bits and purposely provides a reproducible sequence,
1441 * which means that there will only be 4 billion possible random sequences once
1442 * srandom() is called, regardless of the internal state. Not calling it is
1443 * even worse as we'll always produce the same randoms sequences. What we do
1444 * here is to create an initial sequence from various entropy sources, hash it
1445 * using SHA1 and keep the resulting 160 bits available globally.
1446 *
1447 * We initialize the current process with the first 32 bits before starting the
1448 * polling loop, where all this will be changed to have process specific and
1449 * thread specific sequences.
Willy Tarreau52bf8392020-03-08 00:42:37 +01001450 *
1451 * Before starting threads, it's still possible to call random() as srandom()
1452 * is initialized from this, but after threads and/or processes are started,
1453 * only ha_random() is expected to be used to guarantee distinct sequences.
Willy Tarreau6c3a6812020-03-06 18:57:15 +01001454 */
1455static void ha_random_boot(char *const *argv)
1456{
1457 unsigned char message[256];
1458 unsigned char *m = message;
1459 struct timeval tv;
1460 blk_SHA_CTX ctx;
1461 unsigned long l;
1462 int fd;
1463 int i;
1464
1465 /* start with current time as pseudo-random seed */
1466 gettimeofday(&tv, NULL);
1467 write_u32(m, tv.tv_sec); m += 4;
1468 write_u32(m, tv.tv_usec); m += 4;
1469
1470 /* PID and PPID add some OS-based randomness */
1471 write_u16(m, getpid()); m += 2;
1472 write_u16(m, getppid()); m += 2;
1473
1474 /* take up to 160 bits bytes from /dev/urandom if available (non-blocking) */
1475 fd = open("/dev/urandom", O_RDONLY);
1476 if (fd >= 0) {
1477 i = read(fd, m, 20);
1478 if (i > 0)
1479 m += i;
1480 close(fd);
1481 }
1482
1483 /* take up to 160 bits bytes from openssl (non-blocking) */
1484#ifdef USE_OPENSSL
1485 if (RAND_bytes(m, 20) == 1)
1486 m += 20;
1487#endif
1488
1489 /* take 160 bits from existing random in case it was already initialized */
1490 for (i = 0; i < 5; i++) {
1491 write_u32(m, random());
1492 m += 4;
1493 }
1494
1495 /* stack address (benefit form operating system's ASLR) */
1496 l = (unsigned long)&m;
1497 memcpy(m, &l, sizeof(l)); m += sizeof(l);
1498
1499 /* argv address (benefit form operating system's ASLR) */
1500 l = (unsigned long)&argv;
1501 memcpy(m, &l, sizeof(l)); m += sizeof(l);
1502
1503 /* use tv_usec again after all the operations above */
1504 gettimeofday(&tv, NULL);
1505 write_u32(m, tv.tv_usec); m += 4;
1506
1507 /*
1508 * At this point, ~84-92 bytes have been used
1509 */
1510
1511 /* finish with the hostname */
1512 strncpy((char *)m, hostname, message + sizeof(message) - m);
1513 m += strlen(hostname);
1514
1515 /* total message length */
1516 l = m - message;
1517
1518 memset(&ctx, 0, sizeof(ctx));
1519 blk_SHA1_Init(&ctx);
1520 blk_SHA1_Update(&ctx, message, l);
1521 blk_SHA1_Final(boot_seed, &ctx);
1522
1523 srandom(read_u32(boot_seed));
Willy Tarreau52bf8392020-03-08 00:42:37 +01001524 ha_random_seed(boot_seed, sizeof(boot_seed));
Willy Tarreau6c3a6812020-03-06 18:57:15 +01001525}
1526
Willy Tarreau5a023f02019-03-01 14:19:31 +01001527/* considers splicing proxies' maxconn, computes the ideal global.maxpipes
1528 * setting, and returns it. It may return -1 meaning "unlimited" if some
1529 * unlimited proxies have been found and the global.maxconn value is not yet
1530 * set. It may also return a value greater than maxconn if it's not yet set.
1531 * Note that a value of zero means there is no need for pipes. -1 is never
1532 * returned if global.maxconn is valid.
1533 */
1534static int compute_ideal_maxpipes()
1535{
1536 struct proxy *cur;
1537 int nbfe = 0, nbbe = 0;
1538 int unlimited = 0;
1539 int pipes;
1540 int max;
1541
1542 for (cur = proxies_list; cur; cur = cur->next) {
1543 if (cur->options2 & (PR_O2_SPLIC_ANY)) {
1544 if (cur->cap & PR_CAP_FE) {
1545 max = cur->maxconn;
1546 nbfe += max;
1547 if (!max) {
1548 unlimited = 1;
1549 break;
1550 }
1551 }
1552 if (cur->cap & PR_CAP_BE) {
1553 max = cur->fullconn ? cur->fullconn : global.maxconn;
1554 nbbe += max;
1555 if (!max) {
1556 unlimited = 1;
1557 break;
1558 }
1559 }
1560 }
1561 }
1562
1563 pipes = MAX(nbfe, nbbe);
1564 if (global.maxconn) {
1565 if (pipes > global.maxconn || unlimited)
1566 pipes = global.maxconn;
1567 } else if (unlimited) {
1568 pipes = -1;
1569 }
1570
1571 return pipes >= 4 ? pipes / 4 : pipes;
1572}
1573
Willy Tarreauac350932019-03-01 15:43:14 +01001574/* considers global.maxsocks, global.maxpipes, async engines, SSL frontends and
1575 * rlimits and computes an ideal maxconn. It's meant to be called only when
1576 * maxsock contains the sum of listening FDs, before it is updated based on
Willy Tarreaudf23c0c2019-03-13 10:10:49 +01001577 * maxconn and pipes. If there are not enough FDs left, DEFAULT_MAXCONN (by
1578 * default 100) is returned as it is expected that it will even run on tight
1579 * environments, and will maintain compatibility with previous packages that
1580 * used to rely on this value as the default one. The system will emit a
1581 * warning indicating how many FDs are missing anyway if needed.
Willy Tarreauac350932019-03-01 15:43:14 +01001582 */
1583static int compute_ideal_maxconn()
1584{
1585 int ssl_sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
1586 int engine_fds = global.ssl_used_async_engines * ssl_sides;
1587 int pipes = compute_ideal_maxpipes();
Willy Tarreaub1beaa32020-03-06 10:25:31 +01001588 int remain = MAX(rlim_fd_cur_at_boot, rlim_fd_max_at_boot);
Willy Tarreauac350932019-03-01 15:43:14 +01001589 int maxconn;
1590
1591 /* we have to take into account these elements :
1592 * - number of engine_fds, which inflates the number of FD needed per
1593 * connection by this number.
1594 * - number of pipes per connection on average : for the unlimited
1595 * case, this is 0.5 pipe FDs per connection, otherwise it's a
1596 * fixed value of 2*pipes.
1597 * - two FDs per connection
1598 */
1599
1600 /* subtract listeners and checks */
1601 remain -= global.maxsock;
1602
Willy Tarreau3f200852019-03-14 19:13:17 +01001603 /* one epoll_fd/kqueue_fd per thread */
1604 remain -= global.nbthread;
1605
1606 /* one wake-up pipe (2 fd) per thread */
1607 remain -= 2 * global.nbthread;
1608
Willy Tarreauac350932019-03-01 15:43:14 +01001609 /* Fixed pipes values : we only subtract them if they're not larger
1610 * than the remaining FDs because pipes are optional.
1611 */
1612 if (pipes >= 0 && pipes * 2 < remain)
1613 remain -= pipes * 2;
1614
1615 if (pipes < 0) {
1616 /* maxsock = maxconn * 2 + maxconn/4 * 2 + maxconn * engine_fds.
1617 * = maxconn * (2 + 0.5 + engine_fds)
1618 * = maxconn * (4 + 1 + 2*engine_fds) / 2
1619 */
1620 maxconn = 2 * remain / (5 + 2 * engine_fds);
1621 } else {
1622 /* maxsock = maxconn * 2 + maxconn * engine_fds.
1623 * = maxconn * (2 + engine_fds)
1624 */
1625 maxconn = remain / (2 + engine_fds);
1626 }
1627
Willy Tarreaudf23c0c2019-03-13 10:10:49 +01001628 return MAX(maxconn, DEFAULT_MAXCONN);
Willy Tarreauac350932019-03-01 15:43:14 +01001629}
1630
Willy Tarreaua409f302020-03-10 17:08:53 +01001631/* computes the estimated maxsock value for the given maxconn based on the
1632 * possibly set global.maxpipes and existing partial global.maxsock. It may
1633 * temporarily change global.maxconn for the time needed to propagate the
1634 * computations, and will reset it.
1635 */
1636static int compute_ideal_maxsock(int maxconn)
1637{
1638 int maxpipes = global.maxpipes;
1639 int maxsock = global.maxsock;
1640
1641
1642 if (!maxpipes) {
1643 int old_maxconn = global.maxconn;
1644
1645 global.maxconn = maxconn;
1646 maxpipes = compute_ideal_maxpipes();
1647 global.maxconn = old_maxconn;
1648 }
1649
1650 maxsock += maxconn * 2; /* each connection needs two sockets */
1651 maxsock += maxpipes * 2; /* each pipe needs two FDs */
1652 maxsock += global.nbthread; /* one epoll_fd/kqueue_fd per thread */
1653 maxsock += 2 * global.nbthread; /* one wake-up pipe (2 fd) per thread */
1654
1655 /* compute fd used by async engines */
1656 if (global.ssl_used_async_engines) {
1657 int sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
1658
1659 maxsock += maxconn * sides * global.ssl_used_async_engines;
1660 }
1661 return maxsock;
1662}
1663
Willy Tarreau304e17e2020-03-10 17:54:54 +01001664/* Tests if it is possible to set the current process' RLIMIT_NOFILE to
1665 * <maxsock>, then sets it back to the previous value. Returns non-zero if the
1666 * value is accepted, non-zero otherwise. This is used to determine if an
1667 * automatic limit may be applied or not. When it is not, the caller knows that
1668 * the highest we can do is the rlim_max at boot. In case of error, we return
1669 * that the setting is possible, so that we defer the error processing to the
1670 * final stage in charge of enforcing this.
1671 */
1672static int check_if_maxsock_permitted(int maxsock)
1673{
1674 struct rlimit orig_limit, test_limit;
1675 int ret;
1676
1677 if (getrlimit(RLIMIT_NOFILE, &orig_limit) != 0)
1678 return 1;
1679
1680 /* don't go further if we can't even set to what we have */
1681 if (setrlimit(RLIMIT_NOFILE, &orig_limit) != 0)
1682 return 1;
1683
1684 test_limit.rlim_max = MAX(maxsock, orig_limit.rlim_max);
1685 test_limit.rlim_cur = test_limit.rlim_max;
1686 ret = setrlimit(RLIMIT_NOFILE, &test_limit);
1687
1688 if (setrlimit(RLIMIT_NOFILE, &orig_limit) != 0)
1689 return 1;
1690
1691 return ret == 0;
1692}
1693
1694
William Lallemand73b85e72017-06-01 17:38:51 +02001695/*
Willy Tarreaubaaee002006-06-26 02:48:02 +02001696 * This function initializes all the necessary variables. It only returns
1697 * if everything is OK. If something fails, it exits.
1698 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +01001699static void init(int argc, char **argv)
Willy Tarreaubaaee002006-06-26 02:48:02 +02001700{
Willy Tarreaubaaee002006-06-26 02:48:02 +02001701 int arg_mode = 0; /* MODE_DEBUG, ... */
Willy Tarreaubaaee002006-06-26 02:48:02 +02001702 char *tmp;
1703 char *cfg_pidfile = NULL;
Willy Tarreau058e9072009-07-20 09:30:05 +02001704 int err_code = 0;
Maxime de Roucy0f503922016-05-13 23:52:55 +02001705 char *err_msg = NULL;
Willy Tarreau477ecd82010-01-03 21:12:30 +01001706 struct wordlist *wl;
Kevinm48936af2010-12-22 16:08:21 +00001707 char *progname;
Willy Tarreau576132e2011-09-10 19:26:56 +02001708 char *change_dir = NULL;
Christopher Fauletd7c91962015-04-30 11:48:27 +02001709 struct proxy *px;
Willy Tarreaue6945732016-12-21 19:57:00 +01001710 struct post_check_fct *pcf;
Willy Tarreauac350932019-03-01 15:43:14 +01001711 int ideal_maxconn;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001712
Christopher Faulete3a5e352017-10-24 13:53:54 +02001713 global.mode = MODE_STARTING;
William Lallemand00417412020-06-05 14:08:41 +02001714 old_argv = copy_argv(argc, argv);
1715 if (!old_argv) {
William Lallemanddf6c5a82020-06-04 17:40:23 +02001716 ha_alert("failed to copy argv.\n");
1717 exit(1);
1718 }
William Lallemand73b85e72017-06-01 17:38:51 +02001719
Christopher Fauletcd7879a2017-10-27 13:53:47 +02001720 if (!init_trash_buffers(1)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001721 ha_alert("failed to initialize trash buffers.\n");
Christopher Faulet748919a2017-07-26 14:59:46 +02001722 exit(1);
1723 }
David du Colombier7af46052012-05-16 14:16:48 +02001724
Emeric Brun2b920a12010-09-23 18:30:22 +02001725 /* NB: POSIX does not make it mandatory for gethostname() to NULL-terminate
1726 * the string in case of truncation, and at least FreeBSD appears not to do
1727 * it.
1728 */
1729 memset(hostname, 0, sizeof(hostname));
1730 gethostname(hostname, sizeof(hostname) - 1);
1731 memset(localpeer, 0, sizeof(localpeer));
1732 memcpy(localpeer, hostname, (sizeof(hostname) > sizeof(localpeer) ? sizeof(localpeer) : sizeof(hostname)) - 1);
William Lallemanddaf4cd22018-04-17 16:46:13 +02001733 setenv("HAPROXY_LOCALPEER", localpeer, 1);
Emeric Brun2b920a12010-09-23 18:30:22 +02001734
William Lallemand24c928c2020-01-14 17:58:18 +01001735 /* we were in mworker mode, we should restart in mworker mode */
1736 if (getenv("HAPROXY_MWORKER_REEXEC") != NULL)
1737 global.mode |= MODE_MWORKER;
1738
Willy Tarreaubaaee002006-06-26 02:48:02 +02001739 /*
1740 * Initialize the previously static variables.
1741 */
Christopher Fauletcd7879a2017-10-27 13:53:47 +02001742
Willy Tarreau173d9952018-01-26 21:48:23 +01001743 totalconn = actconn = listeners = stopping = 0;
Cyril Bonté203ec5a2017-03-23 22:44:13 +01001744 killed = 0;
Christopher Fauletcd7879a2017-10-27 13:53:47 +02001745
Willy Tarreaubaaee002006-06-26 02:48:02 +02001746
1747#ifdef HAPROXY_MEMMAX
Willy Tarreau70060452015-12-14 12:46:07 +01001748 global.rlimit_memmax_all = HAPROXY_MEMMAX;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001749#endif
1750
Benoit GARNIERb413c2a2016-03-27 11:08:03 +02001751 tzset();
Willy Tarreaub0b37bc2008-06-23 14:00:57 +02001752 tv_update_date(-1,-1);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001753 start_date = now;
1754
Willy Tarreau6c3a6812020-03-06 18:57:15 +01001755 ha_random_boot(argv);
Willy Tarreau84310e22014-02-14 11:59:04 +01001756
Willy Tarreau8ed669b2013-01-11 15:49:37 +01001757 if (init_acl() != 0)
1758 exit(1);
Willy Tarreaub6b3df32018-11-26 16:31:20 +01001759
Thierry FOURNIER6f1fd482015-01-23 14:06:13 +01001760 /* Initialise lua. */
1761 hlua_init();
Thierry FOURNIER6f1fd482015-01-23 14:06:13 +01001762
Christopher Fauletff2613e2016-11-09 11:36:17 +01001763 /* Initialize process vars */
1764 vars_init(&global.vars, SCOPE_PROC);
1765
Willy Tarreau43b78992009-01-25 15:42:27 +01001766 global.tune.options |= GTUNE_USE_SELECT; /* select() is always available */
Willy Tarreaue5733232019-05-22 19:24:06 +02001767#if defined(USE_POLL)
Willy Tarreau43b78992009-01-25 15:42:27 +01001768 global.tune.options |= GTUNE_USE_POLL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001769#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001770#if defined(USE_EPOLL)
Willy Tarreau43b78992009-01-25 15:42:27 +01001771 global.tune.options |= GTUNE_USE_EPOLL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001772#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001773#if defined(USE_KQUEUE)
Willy Tarreau43b78992009-01-25 15:42:27 +01001774 global.tune.options |= GTUNE_USE_KQUEUE;
Willy Tarreau1e63130a2007-04-09 12:03:06 +02001775#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001776#if defined(USE_EVPORTS)
Emmanuel Hocdet0ba4f482019-04-08 16:53:32 +00001777 global.tune.options |= GTUNE_USE_EVPORTS;
1778#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001779#if defined(USE_LINUX_SPLICE)
Willy Tarreau3ab68cf2009-01-25 16:03:28 +01001780 global.tune.options |= GTUNE_USE_SPLICE;
1781#endif
Nenad Merdanovic88afe032014-04-14 15:56:58 +02001782#if defined(USE_GETADDRINFO)
1783 global.tune.options |= GTUNE_USE_GAI;
1784#endif
Lukas Tribusa0bcbdc2016-09-12 21:42:20 +00001785#if defined(SO_REUSEPORT)
1786 global.tune.options |= GTUNE_USE_REUSEPORT;
1787#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +02001788
1789 pid = getpid();
1790 progname = *argv;
1791 while ((tmp = strchr(progname, '/')) != NULL)
1792 progname = tmp + 1;
1793
Kevinm48936af2010-12-22 16:08:21 +00001794 /* the process name is used for the logs only */
Dragan Dosen43885c72015-10-01 13:18:13 +02001795 chunk_initstr(&global.log_tag, strdup(progname));
Kevinm48936af2010-12-22 16:08:21 +00001796
Willy Tarreaubaaee002006-06-26 02:48:02 +02001797 argc--; argv++;
1798 while (argc > 0) {
1799 char *flag;
1800
1801 if (**argv == '-') {
1802 flag = *argv+1;
1803
1804 /* 1 arg */
1805 if (*flag == 'v') {
1806 display_version();
Willy Tarreau7b066db2007-12-02 11:28:59 +01001807 if (flag[1] == 'v') /* -vv */
1808 display_build_opts();
Willy Tarreaubaaee002006-06-26 02:48:02 +02001809 exit(0);
1810 }
Willy Tarreaue5733232019-05-22 19:24:06 +02001811#if defined(USE_EPOLL)
Willy Tarreaubaaee002006-06-26 02:48:02 +02001812 else if (*flag == 'd' && flag[1] == 'e')
Willy Tarreau43b78992009-01-25 15:42:27 +01001813 global.tune.options &= ~GTUNE_USE_EPOLL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001814#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001815#if defined(USE_POLL)
Willy Tarreaubaaee002006-06-26 02:48:02 +02001816 else if (*flag == 'd' && flag[1] == 'p')
Willy Tarreau43b78992009-01-25 15:42:27 +01001817 global.tune.options &= ~GTUNE_USE_POLL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001818#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001819#if defined(USE_KQUEUE)
Willy Tarreau1e63130a2007-04-09 12:03:06 +02001820 else if (*flag == 'd' && flag[1] == 'k')
Willy Tarreau43b78992009-01-25 15:42:27 +01001821 global.tune.options &= ~GTUNE_USE_KQUEUE;
Willy Tarreau1e63130a2007-04-09 12:03:06 +02001822#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001823#if defined(USE_EVPORTS)
Emmanuel Hocdet0ba4f482019-04-08 16:53:32 +00001824 else if (*flag == 'd' && flag[1] == 'v')
1825 global.tune.options &= ~GTUNE_USE_EVPORTS;
1826#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001827#if defined(USE_LINUX_SPLICE)
Willy Tarreau3ab68cf2009-01-25 16:03:28 +01001828 else if (*flag == 'd' && flag[1] == 'S')
1829 global.tune.options &= ~GTUNE_USE_SPLICE;
1830#endif
Nenad Merdanovic88afe032014-04-14 15:56:58 +02001831#if defined(USE_GETADDRINFO)
1832 else if (*flag == 'd' && flag[1] == 'G')
1833 global.tune.options &= ~GTUNE_USE_GAI;
1834#endif
Lukas Tribusa0bcbdc2016-09-12 21:42:20 +00001835#if defined(SO_REUSEPORT)
1836 else if (*flag == 'd' && flag[1] == 'R')
1837 global.tune.options &= ~GTUNE_USE_REUSEPORT;
1838#endif
Emeric Brun850efd52014-01-29 12:24:34 +01001839 else if (*flag == 'd' && flag[1] == 'V')
1840 global.ssl_server_verify = SSL_SERVER_VERIFY_NONE;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001841 else if (*flag == 'V')
1842 arg_mode |= MODE_VERBOSE;
1843 else if (*flag == 'd' && flag[1] == 'b')
1844 arg_mode |= MODE_FOREGROUND;
Willy Tarreau3eb10b82020-04-15 16:42:39 +02001845 else if (*flag == 'd' && flag[1] == 'W')
1846 arg_mode |= MODE_ZERO_WARNING;
Willy Tarreau6e064432012-05-08 15:40:42 +02001847 else if (*flag == 'd' && flag[1] == 'M')
1848 mem_poison_byte = flag[2] ? strtol(flag + 2, NULL, 0) : 'P';
Willy Tarreau3eed10e2016-11-07 21:03:16 +01001849 else if (*flag == 'd' && flag[1] == 'r')
1850 global.tune.options |= GTUNE_RESOLVE_DONTFAIL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001851 else if (*flag == 'd')
1852 arg_mode |= MODE_DEBUG;
1853 else if (*flag == 'c')
1854 arg_mode |= MODE_CHECK;
William Lallemand095ba4c2017-06-01 17:38:50 +02001855 else if (*flag == 'D')
Willy Tarreau6bde87b2009-05-18 16:29:51 +02001856 arg_mode |= MODE_DAEMON;
Tim Duesterhusd6942c82017-11-20 15:58:35 +01001857 else if (*flag == 'W' && flag[1] == 's') {
Lukas Tribusf46bf952017-11-21 12:39:34 +01001858 arg_mode |= MODE_MWORKER | MODE_FOREGROUND;
Tim Duesterhusd6942c82017-11-20 15:58:35 +01001859#if defined(USE_SYSTEMD)
1860 global.tune.options |= GTUNE_USE_SYSTEMD;
1861#else
Christopher Faulet767a84b2017-11-24 16:50:31 +01001862 ha_alert("master-worker mode with systemd support (-Ws) requested, but not compiled. Use master-worker mode (-W) if you are not using Type=notify in your unit file or recompile with USE_SYSTEMD=1.\n\n");
Tim Duesterhusd6942c82017-11-20 15:58:35 +01001863 usage(progname);
1864#endif
1865 }
William Lallemand095ba4c2017-06-01 17:38:50 +02001866 else if (*flag == 'W')
1867 arg_mode |= MODE_MWORKER;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001868 else if (*flag == 'q')
1869 arg_mode |= MODE_QUIET;
Olivier Houchardf73629d2017-04-05 22:33:04 +02001870 else if (*flag == 'x') {
William Lallemand4f71d302020-06-04 23:41:29 +02001871 if (argc <= 1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001872 ha_alert("Unix socket path expected with the -x flag\n\n");
William Lallemand45eff442017-06-19 15:57:55 +02001873 usage(progname);
Olivier Houchardf73629d2017-04-05 22:33:04 +02001874 }
William Lallemand4fc09692017-06-19 16:37:19 +02001875 if (old_unixsocket)
Christopher Faulet767a84b2017-11-24 16:50:31 +01001876 ha_warning("-x option already set, overwriting the value\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001877 old_unixsocket = argv[1];
William Lallemand4fc09692017-06-19 16:37:19 +02001878
Olivier Houchardf73629d2017-04-05 22:33:04 +02001879 argv++;
1880 argc--;
1881 }
William Lallemande7361152018-10-26 14:47:36 +02001882 else if (*flag == 'S') {
1883 struct wordlist *c;
1884
William Lallemanda6b32492020-06-04 23:49:20 +02001885 if (argc <= 1) {
William Lallemande7361152018-10-26 14:47:36 +02001886 ha_alert("Socket and optional bind parameters expected with the -S flag\n");
1887 usage(progname);
1888 }
1889 if ((c = malloc(sizeof(*c))) == NULL || (c->s = strdup(argv[1])) == NULL) {
1890 ha_alert("Cannot allocate memory\n");
1891 exit(EXIT_FAILURE);
1892 }
1893 LIST_ADD(&mworker_cli_conf, &c->list);
1894
1895 argv++;
1896 argc--;
1897 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02001898 else if (*flag == 's' && (flag[1] == 'f' || flag[1] == 't')) {
1899 /* list of pids to finish ('f') or terminate ('t') */
1900
1901 if (flag[1] == 'f')
1902 oldpids_sig = SIGUSR1; /* finish then exit */
1903 else
1904 oldpids_sig = SIGTERM; /* terminate immediately */
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001905 while (argc > 1 && argv[1][0] != '-') {
Chris Lane236062f2018-02-05 23:15:44 +00001906 char * endptr = NULL;
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001907 oldpids = realloc(oldpids, (nb_oldpids + 1) * sizeof(int));
1908 if (!oldpids) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001909 ha_alert("Cannot allocate old pid : out of memory.\n");
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001910 exit(1);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001911 }
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001912 argc--; argv++;
Chris Lane236062f2018-02-05 23:15:44 +00001913 errno = 0;
1914 oldpids[nb_oldpids] = strtol(*argv, &endptr, 10);
1915 if (errno) {
1916 ha_alert("-%2s option: failed to parse {%s}: %s\n",
1917 flag,
1918 *argv, strerror(errno));
1919 exit(1);
1920 } else if (endptr && strlen(endptr)) {
Willy Tarreau90807112020-02-25 08:16:33 +01001921 while (isspace((unsigned char)*endptr)) endptr++;
Aurélien Nephtali39b89882018-02-17 20:53:11 +01001922 if (*endptr != 0) {
Chris Lane236062f2018-02-05 23:15:44 +00001923 ha_alert("-%2s option: some bytes unconsumed in PID list {%s}\n",
1924 flag, endptr);
1925 exit(1);
Aurélien Nephtali39b89882018-02-17 20:53:11 +01001926 }
Chris Lane236062f2018-02-05 23:15:44 +00001927 }
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001928 if (oldpids[nb_oldpids] <= 0)
1929 usage(progname);
1930 nb_oldpids++;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001931 }
1932 }
Willy Tarreaua088d312015-10-08 11:58:48 +02001933 else if (flag[0] == '-' && flag[1] == 0) { /* "--" */
1934 /* now that's a cfgfile list */
1935 argv++; argc--;
1936 while (argc > 0) {
Maxime de Roucy0f503922016-05-13 23:52:55 +02001937 if (!list_append_word(&cfg_cfgfiles, *argv, &err_msg)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001938 ha_alert("Cannot load configuration file/directory %s : %s\n",
1939 *argv,
1940 err_msg);
Willy Tarreaua088d312015-10-08 11:58:48 +02001941 exit(1);
1942 }
Willy Tarreaua088d312015-10-08 11:58:48 +02001943 argv++; argc--;
1944 }
1945 break;
1946 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02001947 else { /* >=2 args */
1948 argv++; argc--;
1949 if (argc == 0)
Willy Tarreau3bafcdc2011-09-10 19:20:23 +02001950 usage(progname);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001951
1952 switch (*flag) {
Willy Tarreau576132e2011-09-10 19:26:56 +02001953 case 'C' : change_dir = *argv; break;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001954 case 'n' : cfg_maxconn = atol(*argv); break;
Willy Tarreau70060452015-12-14 12:46:07 +01001955 case 'm' : global.rlimit_memmax_all = atol(*argv); break;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001956 case 'N' : cfg_maxpconn = atol(*argv); break;
William Lallemanddaf4cd22018-04-17 16:46:13 +02001957 case 'L' :
1958 strncpy(localpeer, *argv, sizeof(localpeer) - 1);
1959 setenv("HAPROXY_LOCALPEER", localpeer, 1);
1960 break;
Willy Tarreau5d01a632009-06-22 16:02:30 +02001961 case 'f' :
Maxime de Roucy0f503922016-05-13 23:52:55 +02001962 if (!list_append_word(&cfg_cfgfiles, *argv, &err_msg)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001963 ha_alert("Cannot load configuration file/directory %s : %s\n",
1964 *argv,
1965 err_msg);
Willy Tarreau5d01a632009-06-22 16:02:30 +02001966 exit(1);
1967 }
Willy Tarreau5d01a632009-06-22 16:02:30 +02001968 break;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001969 case 'p' : cfg_pidfile = *argv; break;
Willy Tarreau3bafcdc2011-09-10 19:20:23 +02001970 default: usage(progname);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001971 }
1972 }
1973 }
1974 else
Willy Tarreau3bafcdc2011-09-10 19:20:23 +02001975 usage(progname);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001976 argv++; argc--;
1977 }
1978
Christopher Faulete3a5e352017-10-24 13:53:54 +02001979 global.mode |= (arg_mode & (MODE_DAEMON | MODE_MWORKER | MODE_FOREGROUND | MODE_VERBOSE
Willy Tarreau3eb10b82020-04-15 16:42:39 +02001980 | MODE_QUIET | MODE_CHECK | MODE_DEBUG | MODE_ZERO_WARNING));
Willy Tarreaubaaee002006-06-26 02:48:02 +02001981
William Lallemand944e6192018-11-21 15:48:31 +01001982 if (getenv("HAPROXY_MWORKER_WAIT_ONLY")) {
William Lallemandcb11fd22017-06-01 17:38:52 +02001983 unsetenv("HAPROXY_MWORKER_WAIT_ONLY");
William Lallemand944e6192018-11-21 15:48:31 +01001984 global.mode |= MODE_MWORKER_WAIT;
1985 global.mode &= ~MODE_MWORKER;
William Lallemandcb11fd22017-06-01 17:38:52 +02001986 }
1987
1988 if ((global.mode & MODE_MWORKER) && (getenv("HAPROXY_MWORKER_REEXEC") != NULL)) {
1989 atexit_flag = 1;
1990 atexit(reexec_on_failure);
1991 }
1992
Willy Tarreau576132e2011-09-10 19:26:56 +02001993 if (change_dir && chdir(change_dir) < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001994 ha_alert("Could not change to directory %s : %s\n", change_dir, strerror(errno));
Willy Tarreau576132e2011-09-10 19:26:56 +02001995 exit(1);
1996 }
1997
Willy Tarreaubaaee002006-06-26 02:48:02 +02001998 global.maxsock = 10; /* reserve 10 fds ; will be incremented by socket eaters */
Willy Tarreau915e1eb2009-06-22 15:48:36 +02001999
2000 init_default_instance();
2001
William Lallemand944e6192018-11-21 15:48:31 +01002002 /* in wait mode, we don't try to read the configuration files */
2003 if (!(global.mode & MODE_MWORKER_WAIT)) {
William Lallemand7b302d82019-05-20 11:15:37 +02002004 struct buffer *trash = get_trash_chunk();
Willy Tarreauc4382422009-12-06 13:10:44 +01002005
William Lallemand944e6192018-11-21 15:48:31 +01002006 /* handle cfgfiles that are actually directories */
2007 cfgfiles_expand_directories();
2008
2009 if (LIST_ISEMPTY(&cfg_cfgfiles))
2010 usage(progname);
2011
2012
2013 list_for_each_entry(wl, &cfg_cfgfiles, list) {
2014 int ret;
2015
William Lallemand7b302d82019-05-20 11:15:37 +02002016 if (trash->data)
2017 chunk_appendf(trash, ";");
2018
2019 chunk_appendf(trash, "%s", wl->s);
2020
William Lallemand944e6192018-11-21 15:48:31 +01002021 ret = readcfgfile(wl->s);
2022 if (ret == -1) {
2023 ha_alert("Could not open configuration file %s : %s\n",
2024 wl->s, strerror(errno));
2025 exit(1);
2026 }
2027 if (ret & (ERR_ABORT|ERR_FATAL))
2028 ha_alert("Error(s) found in configuration file : %s\n", wl->s);
2029 err_code |= ret;
2030 if (err_code & ERR_ABORT)
2031 exit(1);
Willy Tarreauc4382422009-12-06 13:10:44 +01002032 }
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002033
William Lallemand944e6192018-11-21 15:48:31 +01002034 /* do not try to resolve arguments nor to spot inconsistencies when
2035 * the configuration contains fatal errors caused by files not found
2036 * or failed memory allocations.
2037 */
2038 if (err_code & (ERR_ABORT|ERR_FATAL)) {
2039 ha_alert("Fatal errors found in configuration.\n");
2040 exit(1);
2041 }
William Lallemand7b302d82019-05-20 11:15:37 +02002042 if (trash->data)
2043 setenv("HAPROXY_CFGFILES", trash->area, 1);
2044
Willy Tarreaub83dc3d2017-04-19 11:24:07 +02002045 }
William Lallemandce83b4a2018-10-26 14:47:30 +02002046 if (global.mode & MODE_MWORKER) {
2047 int proc;
William Lallemand16dd1b32018-11-19 18:46:18 +01002048 struct mworker_proc *tmproc;
2049
William Lallemand482f9a92019-04-12 16:15:00 +02002050 setenv("HAPROXY_MWORKER", "1", 1);
2051
William Lallemand16dd1b32018-11-19 18:46:18 +01002052 if (getenv("HAPROXY_MWORKER_REEXEC") == NULL) {
2053
William Lallemandf3a86832019-04-01 11:29:58 +02002054 tmproc = calloc(1, sizeof(*tmproc));
William Lallemand16dd1b32018-11-19 18:46:18 +01002055 if (!tmproc) {
2056 ha_alert("Cannot allocate process structures.\n");
2057 exit(EXIT_FAILURE);
2058 }
William Lallemand8f7069a2019-04-12 16:09:23 +02002059 tmproc->options |= PROC_O_TYPE_MASTER; /* master */
William Lallemand16dd1b32018-11-19 18:46:18 +01002060 tmproc->reloads = 0;
2061 tmproc->relative_pid = 0;
2062 tmproc->pid = pid;
2063 tmproc->timestamp = start_date.tv_sec;
2064 tmproc->ipc_fd[0] = -1;
2065 tmproc->ipc_fd[1] = -1;
2066
2067 proc_self = tmproc;
2068
2069 LIST_ADDQ(&proc_list, &tmproc->list);
2070 }
William Lallemandce83b4a2018-10-26 14:47:30 +02002071
2072 for (proc = 0; proc < global.nbproc; proc++) {
William Lallemandce83b4a2018-10-26 14:47:30 +02002073
William Lallemandf3a86832019-04-01 11:29:58 +02002074 tmproc = calloc(1, sizeof(*tmproc));
William Lallemandce83b4a2018-10-26 14:47:30 +02002075 if (!tmproc) {
2076 ha_alert("Cannot allocate process structures.\n");
2077 exit(EXIT_FAILURE);
2078 }
2079
William Lallemand8f7069a2019-04-12 16:09:23 +02002080 tmproc->options |= PROC_O_TYPE_WORKER; /* worker */
William Lallemandce83b4a2018-10-26 14:47:30 +02002081 tmproc->pid = -1;
2082 tmproc->reloads = 0;
William Lallemande3683302018-11-19 18:46:17 +01002083 tmproc->timestamp = -1;
William Lallemandce83b4a2018-10-26 14:47:30 +02002084 tmproc->relative_pid = 1 + proc;
William Lallemand550db6d2018-11-06 17:37:12 +01002085 tmproc->ipc_fd[0] = -1;
2086 tmproc->ipc_fd[1] = -1;
William Lallemandce83b4a2018-10-26 14:47:30 +02002087
2088 if (mworker_cli_sockpair_new(tmproc, proc) < 0) {
2089 exit(EXIT_FAILURE);
2090 }
2091
2092 LIST_ADDQ(&proc_list, &tmproc->list);
2093 }
William Lallemand944e6192018-11-21 15:48:31 +01002094 }
2095 if (global.mode & (MODE_MWORKER|MODE_MWORKER_WAIT)) {
2096 struct wordlist *it, *c;
2097
William Lallemand1b663612018-10-26 14:47:33 +02002098 mworker_env_to_proc_list(); /* get the info of the children in the env */
William Lallemand8a022572018-10-26 14:47:35 +02002099
William Lallemande7361152018-10-26 14:47:36 +02002100
William Lallemand550db6d2018-11-06 17:37:12 +01002101 if (!LIST_ISEMPTY(&mworker_cli_conf)) {
William Lallemande7361152018-10-26 14:47:36 +02002102
William Lallemand550db6d2018-11-06 17:37:12 +01002103 if (mworker_cli_proxy_create() < 0) {
William Lallemande7361152018-10-26 14:47:36 +02002104 ha_alert("Can't create the master's CLI.\n");
2105 exit(EXIT_FAILURE);
2106 }
William Lallemande7361152018-10-26 14:47:36 +02002107
William Lallemand550db6d2018-11-06 17:37:12 +01002108 list_for_each_entry_safe(c, it, &mworker_cli_conf, list) {
2109
2110 if (mworker_cli_proxy_new_listener(c->s) < 0) {
2111 ha_alert("Can't create the master's CLI.\n");
2112 exit(EXIT_FAILURE);
2113 }
2114 LIST_DEL(&c->list);
2115 free(c->s);
2116 free(c);
2117 }
2118 }
William Lallemandce83b4a2018-10-26 14:47:30 +02002119 }
2120
Willy Tarreaubb925012009-07-23 13:36:36 +02002121 err_code |= check_config_validity();
Christopher Fauletc1692962019-08-12 09:51:07 +02002122 for (px = proxies_list; px; px = px->next) {
2123 struct server *srv;
2124 struct post_proxy_check_fct *ppcf;
2125 struct post_server_check_fct *pscf;
2126
2127 list_for_each_entry(pscf, &post_server_check_list, list) {
2128 for (srv = px->srv; srv; srv = srv->next)
2129 err_code |= pscf->fct(srv);
2130 }
2131 list_for_each_entry(ppcf, &post_proxy_check_list, list)
2132 err_code |= ppcf->fct(px);
2133 }
Willy Tarreaubb925012009-07-23 13:36:36 +02002134 if (err_code & (ERR_ABORT|ERR_FATAL)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002135 ha_alert("Fatal errors found in configuration.\n");
Willy Tarreau915e1eb2009-06-22 15:48:36 +02002136 exit(1);
2137 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002138
Carl Henrik Lundef91ac192020-02-27 16:45:50 +01002139 err_code |= pattern_finalize_config();
2140 if (err_code & (ERR_ABORT|ERR_FATAL)) {
2141 ha_alert("Failed to finalize pattern config.\n");
2142 exit(1);
2143 }
Willy Tarreau0f936722019-04-11 14:47:08 +02002144
Willy Tarreau70060452015-12-14 12:46:07 +01002145 /* recompute the amount of per-process memory depending on nbproc and
2146 * the shared SSL cache size (allowed to exist in all processes).
2147 */
2148 if (global.rlimit_memmax_all) {
2149#if defined (USE_OPENSSL) && !defined(USE_PRIVATE_CACHE)
2150 int64_t ssl_cache_bytes = global.tune.sslcachesize * 200LL;
2151
2152 global.rlimit_memmax =
2153 ((((int64_t)global.rlimit_memmax_all * 1048576LL) -
2154 ssl_cache_bytes) / global.nbproc +
2155 ssl_cache_bytes + 1048575LL) / 1048576LL;
2156#else
2157 global.rlimit_memmax = global.rlimit_memmax_all / global.nbproc;
2158#endif
2159 }
2160
Willy Tarreaue5733232019-05-22 19:24:06 +02002161#ifdef USE_NS
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +01002162 err_code |= netns_init();
2163 if (err_code & (ERR_ABORT|ERR_FATAL)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002164 ha_alert("Failed to initialize namespace support.\n");
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +01002165 exit(1);
2166 }
2167#endif
2168
Baptiste Assmann4215d7d2016-11-02 15:33:15 +01002169 /* Apply server states */
2170 apply_server_state();
2171
Olivier Houchardfbc74e82017-11-24 16:54:05 +01002172 for (px = proxies_list; px; px = px->next)
Baptiste Assmann4215d7d2016-11-02 15:33:15 +01002173 srv_compute_all_admin_states(px);
2174
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01002175 /* Apply servers' configured address */
2176 err_code |= srv_init_addr();
2177 if (err_code & (ERR_ABORT|ERR_FATAL)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002178 ha_alert("Failed to initialize server(s) addr.\n");
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01002179 exit(1);
2180 }
2181
Willy Tarreau3eb10b82020-04-15 16:42:39 +02002182 if (warned & WARN_ANY && global.mode & MODE_ZERO_WARNING) {
2183 ha_alert("Some warnings were found and 'zero-warning' is set. Aborting.\n");
2184 exit(1);
2185 }
2186
Willy Tarreaubaaee002006-06-26 02:48:02 +02002187 if (global.mode & MODE_CHECK) {
Willy Tarreau8b15ba12012-02-02 17:48:18 +01002188 struct peers *pr;
2189 struct proxy *px;
2190
Willy Tarreaubebd2122020-04-15 16:06:11 +02002191 if (warned & WARN_ANY)
2192 qfprintf(stdout, "Warnings were found.\n");
2193
Frédéric Lécailleed2b4a62017-07-13 09:07:09 +02002194 for (pr = cfg_peers; pr; pr = pr->next)
Willy Tarreau8b15ba12012-02-02 17:48:18 +01002195 if (pr->peers_fe)
2196 break;
2197
Olivier Houchardfbc74e82017-11-24 16:54:05 +01002198 for (px = proxies_list; px; px = px->next)
Willy Tarreau4348fad2012-09-20 16:48:07 +02002199 if (px->state == PR_STNEW && !LIST_ISEMPTY(&px->conf.listeners))
Willy Tarreau8b15ba12012-02-02 17:48:18 +01002200 break;
2201
2202 if (pr || px) {
2203 /* At least one peer or one listener has been found */
2204 qfprintf(stdout, "Configuration file is valid\n");
Tim Duesterhus0a3b43d2020-06-14 00:37:42 +02002205 deinit_and_exit(0);
Willy Tarreau8b15ba12012-02-02 17:48:18 +01002206 }
2207 qfprintf(stdout, "Configuration file has no error but will not start (no listener) => exit(2).\n");
2208 exit(2);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002209 }
Willy Tarreaue9b26022011-08-01 20:57:55 +02002210
Willy Tarreau8263d2b2012-08-28 00:06:31 +02002211 /* now we know the buffer size, we can initialize the channels and buffers */
Willy Tarreau9b28e032012-10-12 23:49:43 +02002212 init_buffer();
Willy Tarreau8280d642009-09-23 23:37:52 +02002213
Willy Tarreaue6945732016-12-21 19:57:00 +01002214 list_for_each_entry(pcf, &post_check_list, list) {
2215 err_code |= pcf->fct();
2216 if (err_code & (ERR_ABORT|ERR_FATAL))
2217 exit(1);
2218 }
2219
Willy Tarreaubaaee002006-06-26 02:48:02 +02002220 if (cfg_maxconn > 0)
2221 global.maxconn = cfg_maxconn;
2222
Willy Tarreau8d687d82019-03-01 09:39:42 +01002223 if (global.stats_fe)
2224 global.maxsock += global.stats_fe->maxconn;
2225
2226 if (cfg_peers) {
2227 /* peers also need to bypass global maxconn */
2228 struct peers *p = cfg_peers;
2229
2230 for (p = cfg_peers; p; p = p->next)
2231 if (p->peers_fe)
2232 global.maxsock += p->peers_fe->maxconn;
2233 }
2234
Willy Tarreaubaaee002006-06-26 02:48:02 +02002235 if (cfg_pidfile) {
Willy Tarreaua534fea2008-08-03 12:19:50 +02002236 free(global.pidfile);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002237 global.pidfile = strdup(cfg_pidfile);
2238 }
2239
Willy Tarreaud0256482015-01-15 21:45:22 +01002240 /* Now we want to compute the maxconn and possibly maxsslconn values.
Willy Tarreauac350932019-03-01 15:43:14 +01002241 * It's a bit tricky. Maxconn defaults to the pre-computed value based
2242 * on rlim_fd_cur and the number of FDs in use due to the configuration,
2243 * and maxsslconn defaults to DEFAULT_MAXSSLCONN. On top of that we can
2244 * enforce a lower limit based on memmax.
Willy Tarreaud0256482015-01-15 21:45:22 +01002245 *
2246 * If memmax is set, then it depends on which values are set. If
2247 * maxsslconn is set, we use memmax to determine how many cleartext
2248 * connections may be added, and set maxconn to the sum of the two.
2249 * If maxconn is set and not maxsslconn, maxsslconn is computed from
2250 * the remaining amount of memory between memmax and the cleartext
2251 * connections. If neither are set, then it is considered that all
2252 * connections are SSL-capable, and maxconn is computed based on this,
2253 * then maxsslconn accordingly. We need to know if SSL is used on the
2254 * frontends, backends, or both, because when it's used on both sides,
2255 * we need twice the value for maxsslconn, but we only count the
2256 * handshake once since it is not performed on the two sides at the
2257 * same time (frontend-side is terminated before backend-side begins).
2258 * The SSL stack is supposed to have filled ssl_session_cost and
Willy Tarreau474b96a2015-01-28 19:03:21 +01002259 * ssl_handshake_cost during its initialization. In any case, if
2260 * SYSTEM_MAXCONN is set, we still enforce it as an upper limit for
2261 * maxconn in order to protect the system.
Willy Tarreaud0256482015-01-15 21:45:22 +01002262 */
Willy Tarreauac350932019-03-01 15:43:14 +01002263 ideal_maxconn = compute_ideal_maxconn();
2264
Willy Tarreaud0256482015-01-15 21:45:22 +01002265 if (!global.rlimit_memmax) {
2266 if (global.maxconn == 0) {
Willy Tarreauac350932019-03-01 15:43:14 +01002267 global.maxconn = ideal_maxconn;
Willy Tarreaud0256482015-01-15 21:45:22 +01002268 if (global.mode & (MODE_VERBOSE|MODE_DEBUG))
2269 fprintf(stderr, "Note: setting global.maxconn to %d.\n", global.maxconn);
2270 }
2271 }
2272#ifdef USE_OPENSSL
2273 else if (!global.maxconn && !global.maxsslconn &&
2274 (global.ssl_used_frontend || global.ssl_used_backend)) {
2275 /* memmax is set, compute everything automatically. Here we want
2276 * to ensure that all SSL connections will be served. We take
2277 * care of the number of sides where SSL is used, and consider
2278 * the worst case : SSL used on both sides and doing a handshake
2279 * simultaneously. Note that we can't have more than maxconn
2280 * handshakes at a time by definition, so for the worst case of
2281 * two SSL conns per connection, we count a single handshake.
2282 */
2283 int sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
2284 int64_t mem = global.rlimit_memmax * 1048576ULL;
Willy Tarreau304e17e2020-03-10 17:54:54 +01002285 int retried = 0;
Willy Tarreaud0256482015-01-15 21:45:22 +01002286
2287 mem -= global.tune.sslcachesize * 200; // about 200 bytes per SSL cache entry
2288 mem -= global.maxzlibmem;
2289 mem = mem * MEM_USABLE_RATIO;
2290
Willy Tarreau304e17e2020-03-10 17:54:54 +01002291 /* Principle: we test once to set maxconn according to the free
2292 * memory. If it results in values the system rejects, we try a
2293 * second time by respecting rlim_fd_max. If it fails again, we
2294 * go back to the initial value and will let the final code
2295 * dealing with rlimit report the error. That's up to 3 attempts.
2296 */
2297 do {
2298 global.maxconn = mem /
2299 ((STREAM_MAX_COST + 2 * global.tune.bufsize) + // stream + 2 buffers per stream
2300 sides * global.ssl_session_max_cost + // SSL buffers, one per side
2301 global.ssl_handshake_max_cost); // 1 handshake per connection max
Willy Tarreaud0256482015-01-15 21:45:22 +01002302
Willy Tarreau304e17e2020-03-10 17:54:54 +01002303 if (retried == 1)
2304 global.maxconn = MIN(global.maxconn, ideal_maxconn);
2305 global.maxconn = round_2dig(global.maxconn);
Willy Tarreau474b96a2015-01-28 19:03:21 +01002306#ifdef SYSTEM_MAXCONN
Willy Tarreau304e17e2020-03-10 17:54:54 +01002307 if (global.maxconn > SYSTEM_MAXCONN)
2308 global.maxconn = SYSTEM_MAXCONN;
Willy Tarreau474b96a2015-01-28 19:03:21 +01002309#endif /* SYSTEM_MAXCONN */
Willy Tarreau304e17e2020-03-10 17:54:54 +01002310 global.maxsslconn = sides * global.maxconn;
2311
2312 if (check_if_maxsock_permitted(compute_ideal_maxsock(global.maxconn)))
2313 break;
2314 } while (retried++ < 2);
2315
Willy Tarreaud0256482015-01-15 21:45:22 +01002316 if (global.mode & (MODE_VERBOSE|MODE_DEBUG))
2317 fprintf(stderr, "Note: setting global.maxconn to %d and global.maxsslconn to %d.\n",
2318 global.maxconn, global.maxsslconn);
2319 }
2320 else if (!global.maxsslconn &&
2321 (global.ssl_used_frontend || global.ssl_used_backend)) {
2322 /* memmax and maxconn are known, compute maxsslconn automatically.
2323 * maxsslconn being forced, we don't know how many of it will be
2324 * on each side if both sides are being used. The worst case is
2325 * when all connections use only one SSL instance because
2326 * handshakes may be on two sides at the same time.
2327 */
2328 int sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
2329 int64_t mem = global.rlimit_memmax * 1048576ULL;
2330 int64_t sslmem;
2331
2332 mem -= global.tune.sslcachesize * 200; // about 200 bytes per SSL cache entry
2333 mem -= global.maxzlibmem;
2334 mem = mem * MEM_USABLE_RATIO;
2335
Willy Tarreau87b09662015-04-03 00:22:06 +02002336 sslmem = mem - global.maxconn * (int64_t)(STREAM_MAX_COST + 2 * global.tune.bufsize);
Willy Tarreaud0256482015-01-15 21:45:22 +01002337 global.maxsslconn = sslmem / (global.ssl_session_max_cost + global.ssl_handshake_max_cost);
2338 global.maxsslconn = round_2dig(global.maxsslconn);
2339
2340 if (sslmem <= 0 || global.maxsslconn < sides) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002341 ha_alert("Cannot compute the automatic maxsslconn because global.maxconn is already too "
2342 "high for the global.memmax value (%d MB). The absolute maximum possible value "
2343 "without SSL is %d, but %d was found and SSL is in use.\n",
2344 global.rlimit_memmax,
2345 (int)(mem / (STREAM_MAX_COST + 2 * global.tune.bufsize)),
2346 global.maxconn);
Willy Tarreaud0256482015-01-15 21:45:22 +01002347 exit(1);
2348 }
2349
2350 if (global.maxsslconn > sides * global.maxconn)
2351 global.maxsslconn = sides * global.maxconn;
2352
2353 if (global.mode & (MODE_VERBOSE|MODE_DEBUG))
2354 fprintf(stderr, "Note: setting global.maxsslconn to %d\n", global.maxsslconn);
2355 }
2356#endif
2357 else if (!global.maxconn) {
2358 /* memmax and maxsslconn are known/unused, compute maxconn automatically */
2359 int sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
2360 int64_t mem = global.rlimit_memmax * 1048576ULL;
2361 int64_t clearmem;
Willy Tarreau304e17e2020-03-10 17:54:54 +01002362 int retried = 0;
Willy Tarreaud0256482015-01-15 21:45:22 +01002363
2364 if (global.ssl_used_frontend || global.ssl_used_backend)
2365 mem -= global.tune.sslcachesize * 200; // about 200 bytes per SSL cache entry
2366
2367 mem -= global.maxzlibmem;
2368 mem = mem * MEM_USABLE_RATIO;
2369
2370 clearmem = mem;
2371 if (sides)
2372 clearmem -= (global.ssl_session_max_cost + global.ssl_handshake_max_cost) * (int64_t)global.maxsslconn;
2373
Willy Tarreau304e17e2020-03-10 17:54:54 +01002374 /* Principle: we test once to set maxconn according to the free
2375 * memory. If it results in values the system rejects, we try a
2376 * second time by respecting rlim_fd_max. If it fails again, we
2377 * go back to the initial value and will let the final code
2378 * dealing with rlimit report the error. That's up to 3 attempts.
2379 */
2380 do {
2381 global.maxconn = clearmem / (STREAM_MAX_COST + 2 * global.tune.bufsize);
2382 if (retried == 1)
2383 global.maxconn = MIN(global.maxconn, ideal_maxconn);
2384 global.maxconn = round_2dig(global.maxconn);
Willy Tarreau474b96a2015-01-28 19:03:21 +01002385#ifdef SYSTEM_MAXCONN
Willy Tarreau304e17e2020-03-10 17:54:54 +01002386 if (global.maxconn > SYSTEM_MAXCONN)
2387 global.maxconn = SYSTEM_MAXCONN;
Willy Tarreau474b96a2015-01-28 19:03:21 +01002388#endif /* SYSTEM_MAXCONN */
Willy Tarreaud0256482015-01-15 21:45:22 +01002389
Willy Tarreau304e17e2020-03-10 17:54:54 +01002390 if (clearmem <= 0 || !global.maxconn) {
2391 ha_alert("Cannot compute the automatic maxconn because global.maxsslconn is already too "
2392 "high for the global.memmax value (%d MB). The absolute maximum possible value "
2393 "is %d, but %d was found.\n",
2394 global.rlimit_memmax,
Christopher Faulet767a84b2017-11-24 16:50:31 +01002395 (int)(mem / (global.ssl_session_max_cost + global.ssl_handshake_max_cost)),
Willy Tarreau304e17e2020-03-10 17:54:54 +01002396 global.maxsslconn);
2397 exit(1);
2398 }
2399
2400 if (check_if_maxsock_permitted(compute_ideal_maxsock(global.maxconn)))
2401 break;
2402 } while (retried++ < 2);
Willy Tarreaud0256482015-01-15 21:45:22 +01002403
2404 if (global.mode & (MODE_VERBOSE|MODE_DEBUG)) {
2405 if (sides && global.maxsslconn > sides * global.maxconn) {
2406 fprintf(stderr, "Note: global.maxsslconn is forced to %d which causes global.maxconn "
2407 "to be limited to %d. Better reduce global.maxsslconn to get more "
2408 "room for extra connections.\n", global.maxsslconn, global.maxconn);
2409 }
2410 fprintf(stderr, "Note: setting global.maxconn to %d\n", global.maxconn);
2411 }
Willy Tarreau66aa61f2009-01-18 21:44:07 +01002412 }
2413
Willy Tarreaua409f302020-03-10 17:08:53 +01002414 global.maxsock = compute_ideal_maxsock(global.maxconn);
2415 global.hardmaxconn = global.maxconn;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002416
Olivier Houchard88698d92019-04-16 19:07:22 +02002417 /* update connection pool thresholds */
2418 global.tune.pool_low_count = ((long long)global.maxsock * global.tune.pool_low_ratio + 99) / 100;
2419 global.tune.pool_high_count = ((long long)global.maxsock * global.tune.pool_high_ratio + 99) / 100;
2420
Willy Tarreauc8d5b952019-02-27 17:25:52 +01002421 proxy_adjust_all_maxconn();
2422
Willy Tarreau1db37712007-06-03 17:16:49 +02002423 if (global.tune.maxpollevents <= 0)
2424 global.tune.maxpollevents = MAX_POLL_EVENTS;
2425
Olivier Houchard1599b802018-05-24 18:59:04 +02002426 if (global.tune.runqueue_depth <= 0)
2427 global.tune.runqueue_depth = RUNQUEUE_DEPTH;
2428
Willy Tarreau6f4a82c2009-03-21 20:43:57 +01002429 if (global.tune.recv_enough == 0)
2430 global.tune.recv_enough = MIN_RECV_AT_ONCE_ENOUGH;
2431
Willy Tarreau27a674e2009-08-17 07:23:33 +02002432 if (global.tune.maxrewrite >= global.tune.bufsize / 2)
2433 global.tune.maxrewrite = global.tune.bufsize / 2;
2434
Willy Tarreaubaaee002006-06-26 02:48:02 +02002435 if (arg_mode & (MODE_DEBUG | MODE_FOREGROUND)) {
2436 /* command line debug mode inhibits configuration mode */
William Lallemand095ba4c2017-06-01 17:38:50 +02002437 global.mode &= ~(MODE_DAEMON | MODE_QUIET);
Willy Tarreau772f0dd2012-10-26 16:04:28 +02002438 global.mode |= (arg_mode & (MODE_DEBUG | MODE_FOREGROUND));
2439 }
2440
William Lallemand095ba4c2017-06-01 17:38:50 +02002441 if (arg_mode & MODE_DAEMON) {
Willy Tarreau772f0dd2012-10-26 16:04:28 +02002442 /* command line daemon mode inhibits foreground and debug modes mode */
2443 global.mode &= ~(MODE_DEBUG | MODE_FOREGROUND);
William Lallemand095ba4c2017-06-01 17:38:50 +02002444 global.mode |= arg_mode & MODE_DAEMON;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002445 }
Willy Tarreau772f0dd2012-10-26 16:04:28 +02002446
2447 global.mode |= (arg_mode & (MODE_QUIET | MODE_VERBOSE));
Willy Tarreaubaaee002006-06-26 02:48:02 +02002448
William Lallemand095ba4c2017-06-01 17:38:50 +02002449 if ((global.mode & MODE_DEBUG) && (global.mode & (MODE_DAEMON | MODE_QUIET))) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002450 ha_warning("<debug> mode incompatible with <quiet> and <daemon>. Keeping <debug> only.\n");
William Lallemand095ba4c2017-06-01 17:38:50 +02002451 global.mode &= ~(MODE_DAEMON | MODE_QUIET);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002452 }
2453
William Lallemand095ba4c2017-06-01 17:38:50 +02002454 if ((global.nbproc > 1) && !(global.mode & (MODE_DAEMON | MODE_MWORKER))) {
Willy Tarreaubaaee002006-06-26 02:48:02 +02002455 if (!(global.mode & (MODE_FOREGROUND | MODE_DEBUG)))
Christopher Faulet767a84b2017-11-24 16:50:31 +01002456 ha_warning("<nbproc> is only meaningful in daemon mode or master-worker mode. Setting limit to 1 process.\n");
Willy Tarreaubaaee002006-06-26 02:48:02 +02002457 global.nbproc = 1;
2458 }
2459
2460 if (global.nbproc < 1)
2461 global.nbproc = 1;
2462
Christopher Fauletbe0faa22017-08-29 15:37:10 +02002463 if (global.nbthread < 1)
2464 global.nbthread = 1;
2465
Christopher Faulet3ef26392017-08-29 16:46:57 +02002466 /* Realloc trash buffers because global.tune.bufsize may have changed */
Christopher Fauletcd7879a2017-10-27 13:53:47 +02002467 if (!init_trash_buffers(0)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002468 ha_alert("failed to initialize trash buffers.\n");
Christopher Faulet3ef26392017-08-29 16:46:57 +02002469 exit(1);
2470 }
2471
Christopher Faulet96d44832017-11-14 22:02:30 +01002472 if (!init_log_buffers()) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002473 ha_alert("failed to initialize log buffers.\n");
Christopher Faulet96d44832017-11-14 22:02:30 +01002474 exit(1);
2475 }
2476
Willy Tarreauef1d1f82007-04-16 00:25:25 +02002477 /*
2478 * Note: we could register external pollers here.
2479 * Built-in pollers have been registered before main().
2480 */
Willy Tarreau4f60f162007-04-08 16:39:58 +02002481
Willy Tarreau43b78992009-01-25 15:42:27 +01002482 if (!(global.tune.options & GTUNE_USE_KQUEUE))
Willy Tarreau1e63130a2007-04-09 12:03:06 +02002483 disable_poller("kqueue");
2484
Emmanuel Hocdet0ba4f482019-04-08 16:53:32 +00002485 if (!(global.tune.options & GTUNE_USE_EVPORTS))
2486 disable_poller("evports");
2487
Willy Tarreau43b78992009-01-25 15:42:27 +01002488 if (!(global.tune.options & GTUNE_USE_EPOLL))
Willy Tarreau4f60f162007-04-08 16:39:58 +02002489 disable_poller("epoll");
2490
Willy Tarreau43b78992009-01-25 15:42:27 +01002491 if (!(global.tune.options & GTUNE_USE_POLL))
Willy Tarreau4f60f162007-04-08 16:39:58 +02002492 disable_poller("poll");
2493
Willy Tarreau43b78992009-01-25 15:42:27 +01002494 if (!(global.tune.options & GTUNE_USE_SELECT))
Willy Tarreau4f60f162007-04-08 16:39:58 +02002495 disable_poller("select");
2496
2497 /* Note: we could disable any poller by name here */
2498
Christopher Fauletb3f4e142016-03-07 12:46:38 +01002499 if (global.mode & (MODE_VERBOSE|MODE_DEBUG)) {
Willy Tarreau2ff76222007-04-09 19:29:56 +02002500 list_pollers(stderr);
Christopher Fauletb3f4e142016-03-07 12:46:38 +01002501 fprintf(stderr, "\n");
2502 list_filters(stderr);
2503 }
Willy Tarreau2ff76222007-04-09 19:29:56 +02002504
Willy Tarreau4f60f162007-04-08 16:39:58 +02002505 if (!init_pollers()) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002506 ha_alert("No polling mechanism available.\n"
2507 " It is likely that haproxy was built with TARGET=generic and that FD_SETSIZE\n"
2508 " is too low on this platform to support maxconn and the number of listeners\n"
2509 " and servers. You should rebuild haproxy specifying your system using TARGET=\n"
2510 " in order to support other polling systems (poll, epoll, kqueue) or reduce the\n"
2511 " global maxconn setting to accommodate the system's limitation. For reference,\n"
2512 " FD_SETSIZE=%d on this system, global.maxconn=%d resulting in a maximum of\n"
2513 " %d file descriptors. You should thus reduce global.maxconn by %d. Also,\n"
2514 " check build settings using 'haproxy -vv'.\n\n",
2515 FD_SETSIZE, global.maxconn, global.maxsock, (global.maxsock + 1 - FD_SETSIZE) / 2);
Willy Tarreau4f60f162007-04-08 16:39:58 +02002516 exit(1);
2517 }
Willy Tarreau2ff76222007-04-09 19:29:56 +02002518 if (global.mode & (MODE_VERBOSE|MODE_DEBUG)) {
2519 printf("Using %s() as the polling mechanism.\n", cur_poller.name);
Willy Tarreau4f60f162007-04-08 16:39:58 +02002520 }
2521
Krzysztof Piotr Oledzki48cb2ae2009-10-02 22:51:14 +02002522 if (!global.node)
2523 global.node = strdup(hostname);
2524
Thierry FOURNIERa4a0f3d2015-01-23 12:08:30 +01002525 if (!hlua_post_init())
2526 exit(1);
Thomas Holmes6abded42015-05-12 16:23:58 +01002527
Maxime de Roucy0f503922016-05-13 23:52:55 +02002528 free(err_msg);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002529}
2530
Simon Horman6fb82592011-07-15 13:14:11 +09002531static void deinit_acl_cond(struct acl_cond *cond)
Simon Hormanac821422011-07-15 13:14:09 +09002532{
Simon Hormanac821422011-07-15 13:14:09 +09002533 struct acl_term_suite *suite, *suiteb;
2534 struct acl_term *term, *termb;
2535
Simon Horman6fb82592011-07-15 13:14:11 +09002536 if (!cond)
2537 return;
2538
2539 list_for_each_entry_safe(suite, suiteb, &cond->suites, list) {
2540 list_for_each_entry_safe(term, termb, &suite->terms, list) {
2541 LIST_DEL(&term->list);
2542 free(term);
Simon Hormanac821422011-07-15 13:14:09 +09002543 }
Simon Horman6fb82592011-07-15 13:14:11 +09002544 LIST_DEL(&suite->list);
2545 free(suite);
2546 }
2547
2548 free(cond);
2549}
2550
Christopher Fauletcb550132019-12-17 11:25:46 +01002551static void deinit_act_rules(struct list *rules)
Simon Horman6fb82592011-07-15 13:14:11 +09002552{
Christopher Fauletcb550132019-12-17 11:25:46 +01002553 struct act_rule *rule, *ruleb;
Simon Horman6fb82592011-07-15 13:14:11 +09002554
Christopher Fauletcb550132019-12-17 11:25:46 +01002555 list_for_each_entry_safe(rule, ruleb, rules, list) {
2556 LIST_DEL(&rule->list);
2557 deinit_acl_cond(rule->cond);
Christopher Faulet58b35642019-12-17 11:48:42 +01002558 if (rule->release_ptr)
2559 rule->release_ptr(rule);
Christopher Fauletcb550132019-12-17 11:25:46 +01002560 free(rule);
Simon Hormanac821422011-07-15 13:14:09 +09002561 }
2562}
2563
Simon Horman6fb82592011-07-15 13:14:11 +09002564static void deinit_stick_rules(struct list *rules)
2565{
2566 struct sticking_rule *rule, *ruleb;
2567
2568 list_for_each_entry_safe(rule, ruleb, rules, list) {
2569 LIST_DEL(&rule->list);
2570 deinit_acl_cond(rule->cond);
Christopher Faulet476e5d02016-10-26 11:34:47 +02002571 release_sample_expr(rule->expr);
Simon Horman6fb82592011-07-15 13:14:11 +09002572 free(rule);
2573 }
2574}
2575
Cyril Bonté203ec5a2017-03-23 22:44:13 +01002576void deinit(void)
Willy Tarreaubaaee002006-06-26 02:48:02 +02002577{
Olivier Houchardfbc74e82017-11-24 16:54:05 +01002578 struct proxy *p = proxies_list, *p0;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002579 struct cap_hdr *h,*h_next;
2580 struct server *s,*s_next;
2581 struct listener *l,*l_next;
Willy Tarreau0fc45a72007-06-17 00:36:03 +02002582 struct acl_cond *cond, *condb;
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002583 struct acl *acl, *aclb;
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002584 struct switching_rule *rule, *ruleb;
Willy Tarreau4a5cade2012-04-05 21:09:48 +02002585 struct server_rule *srule, *sruleb;
Willy Tarreaub463dfb2008-06-07 23:08:56 +02002586 struct redirect_rule *rdr, *rdrb;
Willy Tarreaudeb9ed82010-01-03 21:03:22 +01002587 struct wordlist *wl, *wlb;
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002588 struct uri_auth *uap, *ua = NULL;
William Lallemand0f99e342011-10-12 17:50:54 +02002589 struct logsrv *log, *logb;
William Lallemand723b73a2012-02-08 16:37:49 +01002590 struct logformat_node *lf, *lfb;
Willy Tarreau2a65ff02012-09-13 17:54:29 +02002591 struct bind_conf *bind_conf, *bind_back;
Willy Tarreaucdb737e2016-12-21 18:43:10 +01002592 struct build_opts_str *bol, *bolb;
Willy Tarreau05554e62016-12-21 20:46:26 +01002593 struct post_deinit_fct *pdf;
Christopher Faulet3ea5cbe2019-07-31 08:44:12 +02002594 struct proxy_deinit_fct *pxdf;
2595 struct server_deinit_fct *srvdf;
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002596
Willy Tarreau24f4efa2010-08-27 17:56:48 +02002597 deinit_signals();
Willy Tarreaubaaee002006-06-26 02:48:02 +02002598 while (p) {
Willy Tarreau8113a5d2012-10-04 08:01:43 +02002599 free(p->conf.file);
Willy Tarreaua534fea2008-08-03 12:19:50 +02002600 free(p->id);
Willy Tarreaua534fea2008-08-03 12:19:50 +02002601 free(p->cookie_name);
2602 free(p->cookie_domain);
Christopher Faulet2f533902020-01-21 11:06:48 +01002603 free(p->cookie_attrs);
Willy Tarreau4c03d1c2019-01-14 15:23:54 +01002604 free(p->lbprm.arg_str);
Willy Tarreaua534fea2008-08-03 12:19:50 +02002605 free(p->capture_name);
2606 free(p->monitor_uri);
Simon Hormana31c7f72011-07-15 13:14:08 +09002607 free(p->rdp_cookie_name);
Willy Tarreau62a61232013-04-12 18:13:46 +02002608 if (p->conf.logformat_string != default_http_log_format &&
2609 p->conf.logformat_string != default_tcp_log_format &&
2610 p->conf.logformat_string != clf_http_log_format)
2611 free(p->conf.logformat_string);
Willy Tarreau196729e2012-05-31 19:30:26 +02002612
Willy Tarreau62a61232013-04-12 18:13:46 +02002613 free(p->conf.lfs_file);
2614 free(p->conf.uniqueid_format_string);
2615 free(p->conf.uif_file);
Willy Tarreau0cac26c2019-01-14 16:55:42 +01002616 if ((p->lbprm.algo & BE_LB_LKUP) == BE_LB_LKUP_MAP)
2617 free(p->lbprm.map.srv);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002618
Dragan Dosen0b85ece2015-09-25 19:17:44 +02002619 if (p->conf.logformat_sd_string != default_rfc5424_sd_log_format)
2620 free(p->conf.logformat_sd_string);
2621 free(p->conf.lfsd_file);
2622
Willy Tarreaub80c2302007-11-30 20:51:32 +01002623 list_for_each_entry_safe(cond, condb, &p->mon_fail_cond, list) {
2624 LIST_DEL(&cond->list);
2625 prune_acl_cond(cond);
2626 free(cond);
2627 }
2628
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002629 /* build a list of unique uri_auths */
2630 if (!ua)
2631 ua = p->uri_auth;
2632 else {
2633 /* check if p->uri_auth is unique */
2634 for (uap = ua; uap; uap=uap->next)
2635 if (uap == p->uri_auth)
2636 break;
2637
Willy Tarreauaccc4e12008-06-24 11:14:45 +02002638 if (!uap && p->uri_auth) {
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002639 /* add it, if it is */
2640 p->uri_auth->next = ua;
2641 ua = p->uri_auth;
2642 }
2643 }
Willy Tarreau0fc45a72007-06-17 00:36:03 +02002644
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002645 list_for_each_entry_safe(acl, aclb, &p->acl, list) {
2646 LIST_DEL(&acl->list);
2647 prune_acl(acl);
2648 free(acl);
2649 }
2650
Willy Tarreau4a5cade2012-04-05 21:09:48 +02002651 list_for_each_entry_safe(srule, sruleb, &p->server_rules, list) {
2652 LIST_DEL(&srule->list);
2653 prune_acl_cond(srule->cond);
2654 free(srule->cond);
2655 free(srule);
2656 }
2657
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002658 list_for_each_entry_safe(rule, ruleb, &p->switching_rules, list) {
2659 LIST_DEL(&rule->list);
Willy Tarreauf51658d2014-04-23 01:21:56 +02002660 if (rule->cond) {
2661 prune_acl_cond(rule->cond);
2662 free(rule->cond);
2663 }
Dragan Dosen2a7c20f2019-04-30 00:38:36 +02002664 free(rule->file);
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002665 free(rule);
2666 }
2667
Willy Tarreaub463dfb2008-06-07 23:08:56 +02002668 list_for_each_entry_safe(rdr, rdrb, &p->redirect_rules, list) {
2669 LIST_DEL(&rdr->list);
Willy Tarreauf285f542010-01-03 20:03:03 +01002670 if (rdr->cond) {
2671 prune_acl_cond(rdr->cond);
2672 free(rdr->cond);
2673 }
Willy Tarreaub463dfb2008-06-07 23:08:56 +02002674 free(rdr->rdr_str);
Thierry FOURNIERd18cd0f2013-11-29 12:15:45 +01002675 list_for_each_entry_safe(lf, lfb, &rdr->rdr_fmt, list) {
2676 LIST_DEL(&lf->list);
2677 free(lf);
2678 }
Willy Tarreaub463dfb2008-06-07 23:08:56 +02002679 free(rdr);
2680 }
2681
William Lallemand0f99e342011-10-12 17:50:54 +02002682 list_for_each_entry_safe(log, logb, &p->logsrvs, list) {
2683 LIST_DEL(&log->list);
2684 free(log);
2685 }
2686
William Lallemand723b73a2012-02-08 16:37:49 +01002687 list_for_each_entry_safe(lf, lfb, &p->logformat, list) {
2688 LIST_DEL(&lf->list);
Dragan Dosen61302da2019-04-30 00:40:02 +02002689 release_sample_expr(lf->expr);
2690 free(lf->arg);
William Lallemand723b73a2012-02-08 16:37:49 +01002691 free(lf);
2692 }
2693
Dragan Dosen0b85ece2015-09-25 19:17:44 +02002694 list_for_each_entry_safe(lf, lfb, &p->logformat_sd, list) {
2695 LIST_DEL(&lf->list);
Dragan Dosen61302da2019-04-30 00:40:02 +02002696 release_sample_expr(lf->expr);
2697 free(lf->arg);
Dragan Dosen0b85ece2015-09-25 19:17:44 +02002698 free(lf);
2699 }
2700
Christopher Fauletcb550132019-12-17 11:25:46 +01002701 deinit_act_rules(&p->tcp_req.inspect_rules);
2702 deinit_act_rules(&p->tcp_rep.inspect_rules);
2703 deinit_act_rules(&p->tcp_req.l4_rules);
2704 deinit_act_rules(&p->tcp_req.l5_rules);
2705 deinit_act_rules(&p->http_req_rules);
2706 deinit_act_rules(&p->http_res_rules);
Christopher Faulet6d0c3df2020-01-22 09:26:35 +01002707 deinit_act_rules(&p->http_after_res_rules);
Simon Hormanac821422011-07-15 13:14:09 +09002708
Simon Horman6fb82592011-07-15 13:14:11 +09002709 deinit_stick_rules(&p->storersp_rules);
2710 deinit_stick_rules(&p->sticking_rules);
2711
Willy Tarreaubaaee002006-06-26 02:48:02 +02002712 h = p->req_cap;
2713 while (h) {
2714 h_next = h->next;
Willy Tarreaua534fea2008-08-03 12:19:50 +02002715 free(h->name);
Willy Tarreaubafbe012017-11-24 17:34:44 +01002716 pool_destroy(h->pool);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002717 free(h);
2718 h = h_next;
2719 }/* end while(h) */
2720
2721 h = p->rsp_cap;
2722 while (h) {
2723 h_next = h->next;
Willy Tarreaua534fea2008-08-03 12:19:50 +02002724 free(h->name);
Willy Tarreaubafbe012017-11-24 17:34:44 +01002725 pool_destroy(h->pool);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002726 free(h);
2727 h = h_next;
2728 }/* end while(h) */
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002729
Willy Tarreaubaaee002006-06-26 02:48:02 +02002730 s = p->srv;
2731 while (s) {
2732 s_next = s->next;
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002733
Dragan Dosen026ef572019-04-30 00:56:20 +02002734
Willy Tarreauf6562792019-05-07 19:05:35 +02002735 task_destroy(s->warmup);
Willy Tarreau2e993902011-10-31 11:53:20 +01002736
Willy Tarreaua534fea2008-08-03 12:19:50 +02002737 free(s->id);
2738 free(s->cookie);
Christopher Faulet67957bd2017-09-27 11:00:59 +02002739 free(s->hostname_dn);
Sárközi, László34c01792014-09-05 10:08:23 +02002740 free((char*)s->conf.file);
Olivier Houchard7fc3be72018-11-22 18:50:54 +01002741 free(s->idle_conns);
Olivier Houchard7fc3be72018-11-22 18:50:54 +01002742 free(s->safe_conns);
Olivier Houcharddc2f2752020-02-13 19:12:07 +01002743 free(s->available_conns);
Olivier Houchardf1314812019-02-18 16:41:17 +01002744 free(s->curr_idle_thr);
Willy Tarreau17d45382016-12-22 21:16:08 +01002745
Christopher Fauletf61f33a2020-03-27 18:55:49 +01002746 if (s->use_ssl == 1 || s->check.use_ssl == 1 || (s->proxy->options & PR_O_TCPCHK_SSL)) {
Willy Tarreau17d45382016-12-22 21:16:08 +01002747 if (xprt_get(XPRT_SSL) && xprt_get(XPRT_SSL)->destroy_srv)
2748 xprt_get(XPRT_SSL)->destroy_srv(s);
2749 }
Christopher Faulet2a944ee2017-11-07 10:42:54 +01002750 HA_SPIN_DESTROY(&s->lock);
Christopher Faulet3ea5cbe2019-07-31 08:44:12 +02002751
2752 list_for_each_entry(srvdf, &server_deinit_list, list)
2753 srvdf->fct(s);
2754
Willy Tarreaubaaee002006-06-26 02:48:02 +02002755 free(s);
2756 s = s_next;
2757 }/* end while(s) */
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002758
Willy Tarreau4348fad2012-09-20 16:48:07 +02002759 list_for_each_entry_safe(l, l_next, &p->conf.listeners, by_fe) {
Olivier Houchard1fc05162017-04-06 01:05:05 +02002760 /*
2761 * Zombie proxy, the listener just pretend to be up
2762 * because they still hold an opened fd.
2763 * Close it and give the listener its real state.
2764 */
2765 if (p->state == PR_STSTOPPED && l->state >= LI_ZOMBIE) {
2766 close(l->fd);
2767 l->state = LI_INIT;
2768 }
Willy Tarreauf6e2cc72010-09-03 10:38:17 +02002769 unbind_listener(l);
2770 delete_listener(l);
Willy Tarreau4348fad2012-09-20 16:48:07 +02002771 LIST_DEL(&l->by_fe);
2772 LIST_DEL(&l->by_bind);
Krzysztof Piotr Oledzkiaff01ea2010-02-05 20:31:44 +01002773 free(l->name);
2774 free(l->counters);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002775 free(l);
Willy Tarreau4348fad2012-09-20 16:48:07 +02002776 }
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002777
Willy Tarreau4348fad2012-09-20 16:48:07 +02002778 /* Release unused SSL configs. */
Willy Tarreau2a65ff02012-09-13 17:54:29 +02002779 list_for_each_entry_safe(bind_conf, bind_back, &p->conf.bind, by_fe) {
Willy Tarreau795cdab2016-12-22 17:30:54 +01002780 if (bind_conf->xprt->destroy_bind_conf)
2781 bind_conf->xprt->destroy_bind_conf(bind_conf);
Willy Tarreau2a65ff02012-09-13 17:54:29 +02002782 free(bind_conf->file);
2783 free(bind_conf->arg);
2784 LIST_DEL(&bind_conf->by_fe);
2785 free(bind_conf);
2786 }
Willy Tarreauf5ae8f72012-09-07 16:58:00 +02002787
Christopher Fauletd7c91962015-04-30 11:48:27 +02002788 flt_deinit(p);
2789
Christopher Faulet3ea5cbe2019-07-31 08:44:12 +02002790 list_for_each_entry(pxdf, &proxy_deinit_list, list)
2791 pxdf->fct(p);
2792
Krzysztof Piotr Oledzkiaff01ea2010-02-05 20:31:44 +01002793 free(p->desc);
2794 free(p->fwdfor_hdr_name);
2795
Olivier Houchard3f795f72019-04-17 22:51:06 +02002796 task_destroy(p->task);
Krzysztof Piotr Oledzki59bb2182010-01-29 17:58:21 +01002797
Willy Tarreaubafbe012017-11-24 17:34:44 +01002798 pool_destroy(p->req_cap_pool);
2799 pool_destroy(p->rsp_cap_pool);
Dragan Dosen7d61a332019-05-07 14:16:18 +02002800 if (p->table)
2801 pool_destroy(p->table->pool);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01002802
Willy Tarreau4d2d0982007-05-14 00:39:29 +02002803 p0 = p;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002804 p = p->next;
Christopher Faulet2a944ee2017-11-07 10:42:54 +01002805 HA_SPIN_DESTROY(&p0->lbprm.lock);
2806 HA_SPIN_DESTROY(&p0->lock);
Willy Tarreau4d2d0982007-05-14 00:39:29 +02002807 free(p0);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002808 }/* end while(p) */
Willy Tarreaudd815982007-10-16 12:25:14 +02002809
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002810 while (ua) {
2811 uap = ua;
2812 ua = ua->next;
2813
Willy Tarreaua534fea2008-08-03 12:19:50 +02002814 free(uap->uri_prefix);
2815 free(uap->auth_realm);
Krzysztof Piotr Oledzki48cb2ae2009-10-02 22:51:14 +02002816 free(uap->node);
2817 free(uap->desc);
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002818
Krzysztof Piotr Oledzki8c8bd452010-01-29 19:29:32 +01002819 userlist_free(uap->userlist);
Christopher Fauletcb550132019-12-17 11:25:46 +01002820 deinit_act_rules(&uap->http_req_rules);
Krzysztof Piotr Oledzki8c8bd452010-01-29 19:29:32 +01002821
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002822 free(uap);
2823 }
2824
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01002825 userlist_free(userlist);
2826
David Carlier834cb2e2015-09-25 12:02:25 +01002827 cfg_unregister_sections();
2828
Christopher Faulet0132d062017-07-26 15:33:35 +02002829 deinit_log_buffers();
David Carlier834cb2e2015-09-25 12:02:25 +01002830
Willy Tarreaudd815982007-10-16 12:25:14 +02002831 protocol_unbind_all();
2832
Willy Tarreau05554e62016-12-21 20:46:26 +01002833 list_for_each_entry(pdf, &post_deinit_list, list)
2834 pdf->fct();
2835
Joe Williamsdf5b38f2010-12-29 17:05:48 +01002836 free(global.log_send_hostname); global.log_send_hostname = NULL;
Dragan Dosen43885c72015-10-01 13:18:13 +02002837 chunk_destroy(&global.log_tag);
Willy Tarreaua534fea2008-08-03 12:19:50 +02002838 free(global.chroot); global.chroot = NULL;
2839 free(global.pidfile); global.pidfile = NULL;
Krzysztof Piotr Oledzki48cb2ae2009-10-02 22:51:14 +02002840 free(global.node); global.node = NULL;
2841 free(global.desc); global.desc = NULL;
Willy Tarreaua534fea2008-08-03 12:19:50 +02002842 free(oldpids); oldpids = NULL;
Olivier Houchard3f795f72019-04-17 22:51:06 +02002843 task_destroy(idle_conn_task);
Olivier Houchard9ea5d362019-02-14 18:29:09 +01002844 idle_conn_task = NULL;
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002845
William Lallemand0f99e342011-10-12 17:50:54 +02002846 list_for_each_entry_safe(log, logb, &global.logsrvs, list) {
2847 LIST_DEL(&log->list);
2848 free(log);
2849 }
Willy Tarreau477ecd82010-01-03 21:12:30 +01002850 list_for_each_entry_safe(wl, wlb, &cfg_cfgfiles, list) {
Maxime de Roucy0f503922016-05-13 23:52:55 +02002851 free(wl->s);
Willy Tarreau477ecd82010-01-03 21:12:30 +01002852 LIST_DEL(&wl->list);
2853 free(wl);
2854 }
2855
Willy Tarreaucdb737e2016-12-21 18:43:10 +01002856 list_for_each_entry_safe(bol, bolb, &build_opts_list, list) {
2857 if (bol->must_free)
2858 free((void *)bol->str);
2859 LIST_DEL(&bol->list);
2860 free(bol);
2861 }
2862
Christopher Fauletff2613e2016-11-09 11:36:17 +01002863 vars_prune(&global.vars, NULL, NULL);
Willy Tarreau2455ceb2018-11-26 15:57:34 +01002864 pool_destroy_all();
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002865 deinit_pollers();
Willy Tarreaubaaee002006-06-26 02:48:02 +02002866} /* end deinit() */
2867
Willy Tarreauf3ca5a02020-06-15 18:43:46 +02002868__attribute__((noreturn)) void deinit_and_exit(int status)
Tim Duesterhus26540552020-06-14 00:37:41 +02002869{
2870 deinit();
2871 exit(status);
2872}
William Lallemand72160322018-11-06 17:37:16 +01002873
Willy Tarreau918ff602011-07-25 16:33:49 +02002874/* Runs the polling loop */
Willy Tarreau3ebd55e2020-03-03 14:59:56 +01002875void run_poll_loop()
Willy Tarreau4f60f162007-04-08 16:39:58 +02002876{
Willy Tarreau2ae84e42019-05-28 16:44:05 +02002877 int next, wake;
Willy Tarreau4f60f162007-04-08 16:39:58 +02002878
Willy Tarreaub0b37bc2008-06-23 14:00:57 +02002879 tv_update_date(0,1);
Willy Tarreau4f60f162007-04-08 16:39:58 +02002880 while (1) {
Willy Tarreauc49ba522019-12-11 08:12:23 +01002881 wake_expired_tasks();
2882
Thierry FOURNIER9cf7c4b2014-12-15 13:26:01 +01002883 /* Process a few tasks */
2884 process_runnable_tasks();
2885
William Lallemand1aab50b2018-06-07 09:46:01 +02002886 /* check if we caught some signals and process them in the
2887 first thread */
2888 if (tid == 0)
2889 signal_process_queue();
Willy Tarreau29857942009-05-10 09:01:21 +02002890
Willy Tarreau7067b3a2019-06-02 11:11:29 +02002891 /* also stop if we failed to cleanly stop all tasks */
2892 if (killed > 1)
2893 break;
2894
Willy Tarreau10146c92015-04-13 20:44:19 +02002895 /* expire immediately if events are pending */
Willy Tarreau2ae84e42019-05-28 16:44:05 +02002896 wake = 1;
Olivier Houchard305d5ab2019-07-24 18:07:06 +02002897 if (thread_has_tasks())
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01002898 activity[tid].wake_tasks++;
William Lallemand1aab50b2018-06-07 09:46:01 +02002899 else if (signal_queue_len && tid == 0)
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01002900 activity[tid].wake_signal++;
Olivier Houchard79321b92018-07-26 17:55:11 +02002901 else {
Olivier Houchardb23a61f2019-03-08 18:51:17 +01002902 _HA_ATOMIC_OR(&sleeping_thread_mask, tid_bit);
2903 __ha_barrier_atomic_store();
Willy Tarreau95abd5b2020-03-23 09:33:32 +01002904 if (thread_has_tasks()) {
Olivier Houchard79321b92018-07-26 17:55:11 +02002905 activity[tid].wake_tasks++;
Olivier Houchardb23a61f2019-03-08 18:51:17 +01002906 _HA_ATOMIC_AND(&sleeping_thread_mask, ~tid_bit);
Olivier Houchard79321b92018-07-26 17:55:11 +02002907 } else
Willy Tarreau2ae84e42019-05-28 16:44:05 +02002908 wake = 0;
Olivier Houchard79321b92018-07-26 17:55:11 +02002909 }
Willy Tarreau10146c92015-04-13 20:44:19 +02002910
Willy Tarreau4f46a352020-03-23 09:27:28 +01002911 if (!wake) {
Willy Tarreaud7a6b2f2020-05-13 13:51:01 +02002912 int i;
2913
2914 if (stopping) {
Willy Tarreaud6455742020-05-13 14:30:25 +02002915 if (_HA_ATOMIC_OR(&stopping_thread_mask, tid_bit) == tid_bit) {
2916 /* notify all threads that stopping was just set */
2917 for (i = 0; i < global.nbthread; i++)
2918 if ((all_threads_mask >> i) & 1)
2919 wake_thread(i);
2920 }
Willy Tarreaud7a6b2f2020-05-13 13:51:01 +02002921 }
Willy Tarreau4f46a352020-03-23 09:27:28 +01002922
2923 /* stop when there's nothing left to do */
2924 if ((jobs - unstoppable_jobs) == 0 &&
Willy Tarreaud7a6b2f2020-05-13 13:51:01 +02002925 (stopping_thread_mask & all_threads_mask) == all_threads_mask) {
2926 /* wake all threads waiting on jobs==0 */
2927 for (i = 0; i < global.nbthread; i++)
2928 if (((all_threads_mask & ~tid_bit) >> i) & 1)
2929 wake_thread(i);
Willy Tarreau4f46a352020-03-23 09:27:28 +01002930 break;
Willy Tarreaud7a6b2f2020-05-13 13:51:01 +02002931 }
Willy Tarreau4f46a352020-03-23 09:27:28 +01002932 }
2933
Willy Tarreauc49ba522019-12-11 08:12:23 +01002934 /* If we have to sleep, measure how long */
2935 next = wake ? TICK_ETERNITY : next_timer_expiry();
2936
Willy Tarreau58b458d2008-06-29 22:40:23 +02002937 /* The poller will ensure it returns around <next> */
Willy Tarreau2ae84e42019-05-28 16:44:05 +02002938 cur_poller.poll(&cur_poller, next, wake);
Emeric Brun64cc49c2017-10-03 14:46:45 +02002939
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01002940 activity[tid].loops++;
Willy Tarreau4f60f162007-04-08 16:39:58 +02002941 }
2942}
2943
Christopher Faulet1d17c102017-08-29 15:38:48 +02002944static void *run_thread_poll_loop(void *data)
2945{
Willy Tarreau082b6282019-05-22 14:42:12 +02002946 struct per_thread_alloc_fct *ptaf;
Christopher Faulet1d17c102017-08-29 15:38:48 +02002947 struct per_thread_init_fct *ptif;
2948 struct per_thread_deinit_fct *ptdf;
Willy Tarreau082b6282019-05-22 14:42:12 +02002949 struct per_thread_free_fct *ptff;
Willy Tarreau34a150c2019-06-11 09:16:41 +02002950 static int init_left = 0;
Willy Tarreauaf613e82020-06-05 08:40:51 +02002951 __decl_thread(static pthread_mutex_t init_mutex = PTHREAD_MUTEX_INITIALIZER);
2952 __decl_thread(static pthread_cond_t init_cond = PTHREAD_COND_INITIALIZER);
Christopher Faulet1d17c102017-08-29 15:38:48 +02002953
Willy Tarreaub4f7cc32019-05-03 09:27:30 +02002954 ha_set_tid((unsigned long)data);
Willy Tarreaud022e9c2019-09-24 08:25:15 +02002955 sched = &task_per_thread[tid];
Willy Tarreau91e6df02019-05-03 17:21:18 +02002956
Willy Tarreauf6178242019-05-21 19:46:58 +02002957#if (_POSIX_TIMERS > 0) && defined(_POSIX_THREAD_CPUTIME)
Willy Tarreau91e6df02019-05-03 17:21:18 +02002958#ifdef USE_THREAD
Willy Tarreau8323a372019-05-20 18:57:53 +02002959 pthread_getcpuclockid(pthread_self(), &ti->clock_id);
Willy Tarreau624dcbf2019-05-20 20:23:06 +02002960#else
Willy Tarreau8323a372019-05-20 18:57:53 +02002961 ti->clock_id = CLOCK_THREAD_CPUTIME_ID;
Willy Tarreau91e6df02019-05-03 17:21:18 +02002962#endif
Willy Tarreau663fda42019-05-21 15:14:08 +02002963#endif
Willy Tarreau6ec902a2019-06-07 14:41:11 +02002964 /* Now, initialize one thread init at a time. This is better since
2965 * some init code is a bit tricky and may release global resources
2966 * after reallocating them locally. This will also ensure there is
2967 * no race on file descriptors allocation.
2968 */
Willy Tarreau34a150c2019-06-11 09:16:41 +02002969#ifdef USE_THREAD
2970 pthread_mutex_lock(&init_mutex);
2971#endif
2972 /* The first thread must set the number of threads left */
2973 if (!init_left)
2974 init_left = global.nbthread;
2975 init_left--;
Willy Tarreau91e6df02019-05-03 17:21:18 +02002976
Christopher Faulet1d17c102017-08-29 15:38:48 +02002977 tv_update_date(-1,-1);
2978
Willy Tarreau082b6282019-05-22 14:42:12 +02002979 /* per-thread alloc calls performed here are not allowed to snoop on
2980 * other threads, so they are free to initialize at their own rhythm
2981 * as long as they act as if they were alone. None of them may rely
2982 * on resources initialized by the other ones.
2983 */
2984 list_for_each_entry(ptaf, &per_thread_alloc_list, list) {
2985 if (!ptaf->fct()) {
2986 ha_alert("failed to allocate resources for thread %u.\n", tid);
2987 exit(1);
2988 }
2989 }
2990
Willy Tarreau3078e9f2019-05-20 10:50:43 +02002991 /* per-thread init calls performed here are not allowed to snoop on
2992 * other threads, so they are free to initialize at their own rhythm
2993 * as long as they act as if they were alone.
2994 */
Christopher Faulet1d17c102017-08-29 15:38:48 +02002995 list_for_each_entry(ptif, &per_thread_init_list, list) {
2996 if (!ptif->fct()) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002997 ha_alert("failed to initialize thread %u.\n", tid);
Christopher Faulet1d17c102017-08-29 15:38:48 +02002998 exit(1);
2999 }
3000 }
3001
Willy Tarreau71092822019-06-10 09:51:04 +02003002 /* enabling protocols will result in fd_insert() calls to be performed,
3003 * we want all threads to have already allocated their local fd tables
Willy Tarreau34a150c2019-06-11 09:16:41 +02003004 * before doing so, thus only the last thread does it.
Willy Tarreau71092822019-06-10 09:51:04 +02003005 */
Willy Tarreau34a150c2019-06-11 09:16:41 +02003006 if (init_left == 0)
Willy Tarreaue4d7c9d2019-06-10 10:14:52 +02003007 protocol_enable_all();
Willy Tarreau6ec902a2019-06-07 14:41:11 +02003008
Willy Tarreau34a150c2019-06-11 09:16:41 +02003009#ifdef USE_THREAD
3010 pthread_cond_broadcast(&init_cond);
3011 pthread_mutex_unlock(&init_mutex);
3012
3013 /* now wait for other threads to finish starting */
3014 pthread_mutex_lock(&init_mutex);
3015 while (init_left)
3016 pthread_cond_wait(&init_cond, &init_mutex);
3017 pthread_mutex_unlock(&init_mutex);
3018#endif
Willy Tarreau3078e9f2019-05-20 10:50:43 +02003019
Willy Tarreaua45a8b52019-12-06 16:31:45 +01003020#if defined(PR_SET_NO_NEW_PRIVS) && defined(USE_PRCTL)
3021 /* Let's refrain from using setuid executables. This way the impact of
3022 * an eventual vulnerability in a library remains limited. It may
3023 * impact external checks but who cares about them anyway ? In the
3024 * worst case it's possible to disable the option. Obviously we do this
3025 * in workers only. We can't hard-fail on this one as it really is
3026 * implementation dependent though we're interested in feedback, hence
3027 * the warning.
3028 */
3029 if (!(global.tune.options & GTUNE_INSECURE_SETUID) && !master) {
3030 static int warn_fail;
3031 if (prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0) == -1 && !_HA_ATOMIC_XADD(&warn_fail, 1)) {
3032 ha_warning("Failed to disable setuid, please report to developers with detailed "
3033 "information about your operating system. You can silence this warning "
3034 "by adding 'insecure-setuid-wanted' in the 'global' section.\n");
3035 }
3036 }
3037#endif
3038
Willy Tarreaud96f1122019-12-03 07:07:36 +01003039#if defined(RLIMIT_NPROC)
3040 /* all threads have started, it's now time to prevent any new thread
3041 * or process from starting. Obviously we do this in workers only. We
3042 * can't hard-fail on this one as it really is implementation dependent
3043 * though we're interested in feedback, hence the warning.
3044 */
3045 if (!(global.tune.options & GTUNE_INSECURE_FORK) && !master) {
3046 struct rlimit limit = { .rlim_cur = 0, .rlim_max = 0 };
3047 static int warn_fail;
3048
3049 if (setrlimit(RLIMIT_NPROC, &limit) == -1 && !_HA_ATOMIC_XADD(&warn_fail, 1)) {
3050 ha_warning("Failed to disable forks, please report to developers with detailed "
3051 "information about your operating system. You can silence this warning "
3052 "by adding 'insecure-fork-wanted' in the 'global' section.\n");
3053 }
3054 }
3055#endif
Christopher Faulet1d17c102017-08-29 15:38:48 +02003056 run_poll_loop();
3057
3058 list_for_each_entry(ptdf, &per_thread_deinit_list, list)
3059 ptdf->fct();
3060
Willy Tarreau082b6282019-05-22 14:42:12 +02003061 list_for_each_entry(ptff, &per_thread_free_list, list)
3062 ptff->fct();
3063
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003064#ifdef USE_THREAD
Olivier Houchardb23a61f2019-03-08 18:51:17 +01003065 _HA_ATOMIC_AND(&all_threads_mask, ~tid_bit);
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003066 if (tid > 0)
3067 pthread_exit(NULL);
Christopher Faulet1d17c102017-08-29 15:38:48 +02003068#endif
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003069 return NULL;
3070}
Christopher Faulet1d17c102017-08-29 15:38:48 +02003071
William Dauchyf9af9d72019-11-17 15:47:16 +01003072/* set uid/gid depending on global settings */
3073static void set_identity(const char *program_name)
3074{
3075 if (global.gid) {
3076 if (getgroups(0, NULL) > 0 && setgroups(0, NULL) == -1)
3077 ha_warning("[%s.main()] Failed to drop supplementary groups. Using 'gid'/'group'"
3078 " without 'uid'/'user' is generally useless.\n", program_name);
3079
3080 if (setgid(global.gid) == -1) {
3081 ha_alert("[%s.main()] Cannot set gid %d.\n", program_name, global.gid);
3082 protocol_unbind_all();
3083 exit(1);
3084 }
3085 }
3086
3087 if (global.uid && setuid(global.uid) == -1) {
3088 ha_alert("[%s.main()] Cannot set uid %d.\n", program_name, global.uid);
3089 protocol_unbind_all();
3090 exit(1);
3091 }
3092}
3093
Willy Tarreaubaaee002006-06-26 02:48:02 +02003094int main(int argc, char **argv)
3095{
3096 int err, retry;
3097 struct rlimit limit;
Emeric Bruncf20bf12010-10-22 16:06:11 +02003098 char errmsg[100];
Willy Tarreau269ab312012-09-05 08:02:48 +02003099 int pidfd = -1;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003100
Olivier Houchard5fa300d2018-02-03 15:15:21 +01003101 setvbuf(stdout, NULL, _IONBF, 0);
Willy Tarreau5794fb02018-11-25 18:43:29 +01003102
Willy Tarreauff9c9142019-02-07 10:39:36 +01003103 /* this can only safely be done here, though it's optimized away by
3104 * the compiler.
3105 */
3106 if (MAX_PROCS < 1 || MAX_PROCS > LONGBITS) {
3107 ha_alert("MAX_PROCS value must be between 1 and %d inclusive; "
3108 "HAProxy was built with value %d, please fix it and rebuild.\n",
3109 LONGBITS, MAX_PROCS);
3110 exit(1);
3111 }
3112
Willy Tarreaubf696402019-03-01 10:09:28 +01003113 /* take a copy of initial limits before we possibly change them */
3114 getrlimit(RLIMIT_NOFILE, &limit);
3115 rlim_fd_cur_at_boot = limit.rlim_cur;
3116 rlim_fd_max_at_boot = limit.rlim_max;
3117
Willy Tarreau5794fb02018-11-25 18:43:29 +01003118 /* process all initcalls in order of potential dependency */
3119 RUN_INITCALLS(STG_PREPARE);
3120 RUN_INITCALLS(STG_LOCK);
3121 RUN_INITCALLS(STG_ALLOC);
3122 RUN_INITCALLS(STG_POOL);
3123 RUN_INITCALLS(STG_REGISTER);
3124 RUN_INITCALLS(STG_INIT);
3125
Emeric Bruncf20bf12010-10-22 16:06:11 +02003126 init(argc, argv);
Willy Tarreau24f4efa2010-08-27 17:56:48 +02003127 signal_register_fct(SIGQUIT, dump, SIGQUIT);
3128 signal_register_fct(SIGUSR1, sig_soft_stop, SIGUSR1);
3129 signal_register_fct(SIGHUP, sig_dump_state, SIGHUP);
William Lallemand73b85e72017-06-01 17:38:51 +02003130 signal_register_fct(SIGUSR2, NULL, 0);
Willy Tarreaubaaee002006-06-26 02:48:02 +02003131
Willy Tarreaue437c442010-03-17 18:02:46 +01003132 /* Always catch SIGPIPE even on platforms which define MSG_NOSIGNAL.
3133 * Some recent FreeBSD setups report broken pipes, and MSG_NOSIGNAL
3134 * was defined there, so let's stay on the safe side.
Willy Tarreaubaaee002006-06-26 02:48:02 +02003135 */
Willy Tarreau24f4efa2010-08-27 17:56:48 +02003136 signal_register_fct(SIGPIPE, NULL, 0);
Willy Tarreaubaaee002006-06-26 02:48:02 +02003137
Willy Tarreaudc23a922011-02-16 11:10:36 +01003138 /* ulimits */
3139 if (!global.rlimit_nofile)
3140 global.rlimit_nofile = global.maxsock;
3141
3142 if (global.rlimit_nofile) {
Willy Tarreaue5cfdac2019-03-01 10:32:05 +01003143 limit.rlim_cur = global.rlimit_nofile;
3144 limit.rlim_max = MAX(rlim_fd_max_at_boot, limit.rlim_cur);
3145
Willy Tarreaudc23a922011-02-16 11:10:36 +01003146 if (setrlimit(RLIMIT_NOFILE, &limit) == -1) {
Willy Tarreauef635472016-06-21 11:48:18 +02003147 getrlimit(RLIMIT_NOFILE, &limit);
William Dauchy0fec3ab2019-10-27 20:08:11 +01003148 if (global.tune.options & GTUNE_STRICT_LIMITS) {
3149 ha_alert("[%s.main()] Cannot raise FD limit to %d, limit is %d.\n",
3150 argv[0], global.rlimit_nofile, (int)limit.rlim_cur);
3151 if (!(global.mode & MODE_MWORKER))
3152 exit(1);
3153 }
3154 else {
3155 /* try to set it to the max possible at least */
3156 limit.rlim_cur = limit.rlim_max;
3157 if (setrlimit(RLIMIT_NOFILE, &limit) != -1)
3158 getrlimit(RLIMIT_NOFILE, &limit);
Willy Tarreau164dd0b2016-06-21 11:51:59 +02003159
William Dauchy0fec3ab2019-10-27 20:08:11 +01003160 ha_warning("[%s.main()] Cannot raise FD limit to %d, limit is %d. "
3161 "This will fail in >= v2.3\n",
3162 argv[0], global.rlimit_nofile, (int)limit.rlim_cur);
3163 global.rlimit_nofile = limit.rlim_cur;
3164 }
Willy Tarreaudc23a922011-02-16 11:10:36 +01003165 }
3166 }
3167
3168 if (global.rlimit_memmax) {
3169 limit.rlim_cur = limit.rlim_max =
Willy Tarreau70060452015-12-14 12:46:07 +01003170 global.rlimit_memmax * 1048576ULL;
Willy Tarreaudc23a922011-02-16 11:10:36 +01003171#ifdef RLIMIT_AS
3172 if (setrlimit(RLIMIT_AS, &limit) == -1) {
William Dauchy0fec3ab2019-10-27 20:08:11 +01003173 if (global.tune.options & GTUNE_STRICT_LIMITS) {
3174 ha_alert("[%s.main()] Cannot fix MEM limit to %d megs.\n",
3175 argv[0], global.rlimit_memmax);
3176 if (!(global.mode & MODE_MWORKER))
3177 exit(1);
3178 }
3179 else
3180 ha_warning("[%s.main()] Cannot fix MEM limit to %d megs."
3181 "This will fail in >= v2.3\n",
3182 argv[0], global.rlimit_memmax);
Willy Tarreaudc23a922011-02-16 11:10:36 +01003183 }
3184#else
3185 if (setrlimit(RLIMIT_DATA, &limit) == -1) {
William Dauchy0fec3ab2019-10-27 20:08:11 +01003186 if (global.tune.options & GTUNE_STRICT_LIMITS) {
3187 ha_alert("[%s.main()] Cannot fix MEM limit to %d megs.\n",
3188 argv[0], global.rlimit_memmax);
3189 if (!(global.mode & MODE_MWORKER))
3190 exit(1);
3191 }
3192 else
3193 ha_warning("[%s.main()] Cannot fix MEM limit to %d megs.",
3194 "This will fail in >= v2.3\n",
3195 argv[0], global.rlimit_memmax);
Willy Tarreaudc23a922011-02-16 11:10:36 +01003196 }
3197#endif
3198 }
3199
Olivier Houchardf73629d2017-04-05 22:33:04 +02003200 if (old_unixsocket) {
William Lallemand85b0bd92017-06-01 17:38:53 +02003201 if (strcmp("/dev/null", old_unixsocket) != 0) {
3202 if (get_old_sockets(old_unixsocket) != 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003203 ha_alert("Failed to get the sockets from the old process!\n");
William Lallemand85b0bd92017-06-01 17:38:53 +02003204 if (!(global.mode & MODE_MWORKER))
3205 exit(1);
3206 }
Olivier Houchardf73629d2017-04-05 22:33:04 +02003207 }
3208 }
William Lallemand85b0bd92017-06-01 17:38:53 +02003209 get_cur_unixsocket();
3210
Willy Tarreaubaaee002006-06-26 02:48:02 +02003211 /* We will loop at most 100 times with 10 ms delay each time.
3212 * That's at most 1 second. We only send a signal to old pids
3213 * if we cannot grab at least one port.
3214 */
3215 retry = MAX_START_RETRIES;
3216 err = ERR_NONE;
3217 while (retry >= 0) {
3218 struct timeval w;
3219 err = start_proxies(retry == 0 || nb_oldpids == 0);
Willy Tarreaue13e9252007-12-20 23:05:50 +01003220 /* exit the loop on no error or fatal error */
3221 if ((err & (ERR_RETRYABLE|ERR_FATAL)) != ERR_RETRYABLE)
Willy Tarreaubaaee002006-06-26 02:48:02 +02003222 break;
Willy Tarreaubb545b42010-08-25 12:58:59 +02003223 if (nb_oldpids == 0 || retry == 0)
Willy Tarreaubaaee002006-06-26 02:48:02 +02003224 break;
3225
3226 /* FIXME-20060514: Solaris and OpenBSD do not support shutdown() on
3227 * listening sockets. So on those platforms, it would be wiser to
3228 * simply send SIGUSR1, which will not be undoable.
3229 */
Willy Tarreaubb545b42010-08-25 12:58:59 +02003230 if (tell_old_pids(SIGTTOU) == 0) {
3231 /* no need to wait if we can't contact old pids */
3232 retry = 0;
3233 continue;
3234 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02003235 /* give some time to old processes to stop listening */
3236 w.tv_sec = 0;
3237 w.tv_usec = 10*1000;
3238 select(0, NULL, NULL, NULL, &w);
3239 retry--;
3240 }
3241
3242 /* Note: start_proxies() sends an alert when it fails. */
Willy Tarreau0a3b9d92009-02-04 17:05:23 +01003243 if ((err & ~ERR_WARN) != ERR_NONE) {
Willy Tarreauf68da462009-06-09 14:36:00 +02003244 if (retry != MAX_START_RETRIES && nb_oldpids) {
3245 protocol_unbind_all(); /* cleanup everything we can */
Willy Tarreaubaaee002006-06-26 02:48:02 +02003246 tell_old_pids(SIGTTIN);
Willy Tarreauf68da462009-06-09 14:36:00 +02003247 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02003248 exit(1);
3249 }
3250
William Lallemand944e6192018-11-21 15:48:31 +01003251 if (!(global.mode & MODE_MWORKER_WAIT) && listeners == 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003252 ha_alert("[%s.main()] No enabled listener found (check for 'bind' directives) ! Exiting.\n", argv[0]);
Willy Tarreaubaaee002006-06-26 02:48:02 +02003253 /* Note: we don't have to send anything to the old pids because we
3254 * never stopped them. */
3255 exit(1);
3256 }
3257
Emeric Bruncf20bf12010-10-22 16:06:11 +02003258 err = protocol_bind_all(errmsg, sizeof(errmsg));
3259 if ((err & ~ERR_WARN) != ERR_NONE) {
3260 if ((err & ERR_ALERT) || (err & ERR_WARN))
Christopher Faulet767a84b2017-11-24 16:50:31 +01003261 ha_alert("[%s.main()] %s.\n", argv[0], errmsg);
Emeric Bruncf20bf12010-10-22 16:06:11 +02003262
Christopher Faulet767a84b2017-11-24 16:50:31 +01003263 ha_alert("[%s.main()] Some protocols failed to start their listeners! Exiting.\n", argv[0]);
Willy Tarreaudd815982007-10-16 12:25:14 +02003264 protocol_unbind_all(); /* cleanup everything we can */
3265 if (nb_oldpids)
3266 tell_old_pids(SIGTTIN);
3267 exit(1);
Emeric Bruncf20bf12010-10-22 16:06:11 +02003268 } else if (err & ERR_WARN) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003269 ha_alert("[%s.main()] %s.\n", argv[0], errmsg);
Willy Tarreaudd815982007-10-16 12:25:14 +02003270 }
Olivier Houchardf73629d2017-04-05 22:33:04 +02003271 /* Ok, all listener should now be bound, close any leftover sockets
3272 * the previous process gave us, we don't need them anymore
3273 */
3274 while (xfer_sock_list != NULL) {
3275 struct xfer_sock_list *tmpxfer = xfer_sock_list->next;
3276 close(xfer_sock_list->fd);
3277 free(xfer_sock_list->iface);
3278 free(xfer_sock_list->namespace);
3279 free(xfer_sock_list);
3280 xfer_sock_list = tmpxfer;
3281 }
Willy Tarreaudd815982007-10-16 12:25:14 +02003282
Willy Tarreaubaaee002006-06-26 02:48:02 +02003283 /* prepare pause/play signals */
Willy Tarreau24f4efa2010-08-27 17:56:48 +02003284 signal_register_fct(SIGTTOU, sig_pause, SIGTTOU);
3285 signal_register_fct(SIGTTIN, sig_listen, SIGTTIN);
Willy Tarreaubaaee002006-06-26 02:48:02 +02003286
Willy Tarreaubaaee002006-06-26 02:48:02 +02003287 /* MODE_QUIET can inhibit alerts and warnings below this line */
3288
PiBa-NL149a81a2017-12-25 21:03:31 +01003289 if (getenv("HAPROXY_MWORKER_REEXEC") != NULL) {
3290 /* either stdin/out/err are already closed or should stay as they are. */
3291 if ((global.mode & MODE_DAEMON)) {
3292 /* daemon mode re-executing, stdin/stdout/stderr are already closed so keep quiet */
3293 global.mode &= ~MODE_VERBOSE;
3294 global.mode |= MODE_QUIET; /* ensure that we won't say anything from now */
3295 }
3296 } else {
3297 if ((global.mode & MODE_QUIET) && !(global.mode & MODE_VERBOSE)) {
3298 /* detach from the tty */
William Lallemande1340412017-12-28 16:09:36 +01003299 stdio_quiet(-1);
PiBa-NL149a81a2017-12-25 21:03:31 +01003300 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02003301 }
3302
3303 /* open log & pid files before the chroot */
William Lallemand80293002017-11-06 11:00:03 +01003304 if ((global.mode & MODE_DAEMON || global.mode & MODE_MWORKER) && global.pidfile != NULL) {
Willy Tarreaubaaee002006-06-26 02:48:02 +02003305 unlink(global.pidfile);
3306 pidfd = open(global.pidfile, O_CREAT | O_WRONLY | O_TRUNC, 0644);
3307 if (pidfd < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003308 ha_alert("[%s.main()] Cannot create pidfile %s\n", argv[0], global.pidfile);
Willy Tarreaubaaee002006-06-26 02:48:02 +02003309 if (nb_oldpids)
3310 tell_old_pids(SIGTTIN);
Willy Tarreaudd815982007-10-16 12:25:14 +02003311 protocol_unbind_all();
Willy Tarreaubaaee002006-06-26 02:48:02 +02003312 exit(1);
3313 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02003314 }
3315
Willy Tarreaub38651a2007-03-24 17:24:39 +01003316 if ((global.last_checks & LSTCHK_NETADM) && global.uid) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003317 ha_alert("[%s.main()] Some configuration options require full privileges, so global.uid cannot be changed.\n"
3318 "", argv[0]);
Willy Tarreaudd815982007-10-16 12:25:14 +02003319 protocol_unbind_all();
Willy Tarreaub38651a2007-03-24 17:24:39 +01003320 exit(1);
3321 }
3322
Willy Tarreau4e30ed72009-02-04 18:02:48 +01003323 /* If the user is not root, we'll still let him try the configuration
3324 * but we inform him that unexpected behaviour may occur.
3325 */
3326 if ((global.last_checks & LSTCHK_NETADM) && getuid())
Christopher Faulet767a84b2017-11-24 16:50:31 +01003327 ha_warning("[%s.main()] Some options which require full privileges"
3328 " might not work well.\n"
3329 "", argv[0]);
Willy Tarreau4e30ed72009-02-04 18:02:48 +01003330
William Lallemand095ba4c2017-06-01 17:38:50 +02003331 if ((global.mode & (MODE_MWORKER|MODE_DAEMON)) == 0) {
3332
3333 /* chroot if needed */
3334 if (global.chroot != NULL) {
3335 if (chroot(global.chroot) == -1 || chdir("/") == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003336 ha_alert("[%s.main()] Cannot chroot(%s).\n", argv[0], global.chroot);
William Lallemand095ba4c2017-06-01 17:38:50 +02003337 if (nb_oldpids)
3338 tell_old_pids(SIGTTIN);
3339 protocol_unbind_all();
3340 exit(1);
3341 }
Willy Tarreauf223cc02007-10-15 18:57:08 +02003342 }
Willy Tarreauf223cc02007-10-15 18:57:08 +02003343 }
3344
William Lallemand944e6192018-11-21 15:48:31 +01003345 if (nb_oldpids && !(global.mode & MODE_MWORKER_WAIT))
Willy Tarreaubb545b42010-08-25 12:58:59 +02003346 nb_oldpids = tell_old_pids(oldpids_sig);
Willy Tarreaubaaee002006-06-26 02:48:02 +02003347
William Lallemand27edc4b2019-05-07 17:49:33 +02003348 /* send a SIGTERM to workers who have a too high reloads number */
3349 if ((global.mode & MODE_MWORKER) && !(global.mode & MODE_MWORKER_WAIT))
3350 mworker_kill_max_reloads(SIGTERM);
3351
William Lallemand8a361b52017-06-20 11:20:33 +02003352 if ((getenv("HAPROXY_MWORKER_REEXEC") == NULL)) {
3353 nb_oldpids = 0;
3354 free(oldpids);
3355 oldpids = NULL;
3356 }
3357
3358
Willy Tarreaubaaee002006-06-26 02:48:02 +02003359 /* Note that any error at this stage will be fatal because we will not
3360 * be able to restart the old pids.
3361 */
3362
William Dauchyf9af9d72019-11-17 15:47:16 +01003363 if ((global.mode & (MODE_MWORKER | MODE_DAEMON)) == 0)
3364 set_identity(argv[0]);
Willy Tarreau636848a2019-04-15 19:38:50 +02003365
Willy Tarreaubaaee002006-06-26 02:48:02 +02003366 /* check ulimits */
3367 limit.rlim_cur = limit.rlim_max = 0;
3368 getrlimit(RLIMIT_NOFILE, &limit);
3369 if (limit.rlim_cur < global.maxsock) {
William Dauchy0fec3ab2019-10-27 20:08:11 +01003370 if (global.tune.options & GTUNE_STRICT_LIMITS) {
3371 ha_alert("[%s.main()] FD limit (%d) too low for maxconn=%d/maxsock=%d. "
3372 "Please raise 'ulimit-n' to %d or more to avoid any trouble.\n",
3373 argv[0], (int)limit.rlim_cur, global.maxconn, global.maxsock,
3374 global.maxsock);
3375 if (!(global.mode & MODE_MWORKER))
3376 exit(1);
3377 }
3378 else
3379 ha_alert("[%s.main()] FD limit (%d) too low for maxconn=%d/maxsock=%d. "
3380 "Please raise 'ulimit-n' to %d or more to avoid any trouble."
3381 "This will fail in >= v2.3\n",
3382 argv[0], (int)limit.rlim_cur, global.maxconn, global.maxsock,
3383 global.maxsock);
Willy Tarreaubaaee002006-06-26 02:48:02 +02003384 }
3385
William Lallemand944e6192018-11-21 15:48:31 +01003386 if (global.mode & (MODE_DAEMON | MODE_MWORKER | MODE_MWORKER_WAIT)) {
Willy Tarreau0b9c02c2009-02-04 22:05:05 +01003387 struct proxy *px;
Willy Tarreauf83d3fe2015-05-01 19:13:41 +02003388 struct peers *curpeers;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003389 int ret = 0;
3390 int proc;
William Lallemande1340412017-12-28 16:09:36 +01003391 int devnullfd = -1;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003392
William Lallemand095ba4c2017-06-01 17:38:50 +02003393 /*
3394 * if daemon + mworker: must fork here to let a master
3395 * process live in background before forking children
3396 */
William Lallemand73b85e72017-06-01 17:38:51 +02003397
3398 if ((getenv("HAPROXY_MWORKER_REEXEC") == NULL)
3399 && (global.mode & MODE_MWORKER)
3400 && (global.mode & MODE_DAEMON)) {
William Lallemand095ba4c2017-06-01 17:38:50 +02003401 ret = fork();
3402 if (ret < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003403 ha_alert("[%s.main()] Cannot fork.\n", argv[0]);
William Lallemand095ba4c2017-06-01 17:38:50 +02003404 protocol_unbind_all();
3405 exit(1); /* there has been an error */
William Lallemandbfd8eb52018-07-04 15:31:23 +02003406 } else if (ret > 0) { /* parent leave to daemonize */
William Lallemand095ba4c2017-06-01 17:38:50 +02003407 exit(0);
William Lallemandbfd8eb52018-07-04 15:31:23 +02003408 } else /* change the process group ID in the child (master process) */
3409 setsid();
William Lallemand095ba4c2017-06-01 17:38:50 +02003410 }
William Lallemande20b6a62017-06-01 17:38:55 +02003411
William Lallemande20b6a62017-06-01 17:38:55 +02003412
William Lallemanddeed7802017-11-06 11:00:04 +01003413 /* if in master-worker mode, write the PID of the father */
3414 if (global.mode & MODE_MWORKER) {
3415 char pidstr[100];
Willy Tarreau76a80c72019-06-22 07:41:38 +02003416 snprintf(pidstr, sizeof(pidstr), "%d\n", (int)getpid());
Willy Tarreau46ec48b2018-01-23 19:20:19 +01003417 if (pidfd >= 0)
Willy Tarreau2e8ab6b2020-03-14 11:03:20 +01003418 DISGUISE(write(pidfd, pidstr, strlen(pidstr)));
William Lallemanddeed7802017-11-06 11:00:04 +01003419 }
3420
Willy Tarreaubaaee002006-06-26 02:48:02 +02003421 /* the father launches the required number of processes */
William Lallemand944e6192018-11-21 15:48:31 +01003422 if (!(global.mode & MODE_MWORKER_WAIT)) {
William Lallemand9a1ee7a2019-04-01 11:30:02 +02003423 if (global.mode & MODE_MWORKER)
3424 mworker_ext_launch_all();
William Lallemand944e6192018-11-21 15:48:31 +01003425 for (proc = 0; proc < global.nbproc; proc++) {
3426 ret = fork();
3427 if (ret < 0) {
3428 ha_alert("[%s.main()] Cannot fork.\n", argv[0]);
3429 protocol_unbind_all();
3430 exit(1); /* there has been an error */
3431 }
Willy Tarreau52bf8392020-03-08 00:42:37 +01003432 else if (ret == 0) { /* child breaks here */
3433 ha_random_jump96(relative_pid);
William Lallemand944e6192018-11-21 15:48:31 +01003434 break;
Willy Tarreau52bf8392020-03-08 00:42:37 +01003435 }
William Lallemand944e6192018-11-21 15:48:31 +01003436 if (pidfd >= 0 && !(global.mode & MODE_MWORKER)) {
3437 char pidstr[100];
3438 snprintf(pidstr, sizeof(pidstr), "%d\n", ret);
Willy Tarreau2e8ab6b2020-03-14 11:03:20 +01003439 DISGUISE(write(pidfd, pidstr, strlen(pidstr)));
William Lallemand944e6192018-11-21 15:48:31 +01003440 }
3441 if (global.mode & MODE_MWORKER) {
3442 struct mworker_proc *child;
William Lallemandce83b4a2018-10-26 14:47:30 +02003443
William Lallemand220567e2018-11-21 18:04:53 +01003444 ha_notice("New worker #%d (%d) forked\n", relative_pid, ret);
William Lallemand944e6192018-11-21 15:48:31 +01003445 /* find the right mworker_proc */
3446 list_for_each_entry(child, &proc_list, list) {
3447 if (child->relative_pid == relative_pid &&
William Lallemand8f7069a2019-04-12 16:09:23 +02003448 child->reloads == 0 && child->options & PROC_O_TYPE_WORKER) {
William Lallemand944e6192018-11-21 15:48:31 +01003449 child->timestamp = now.tv_sec;
3450 child->pid = ret;
William Lallemand1dc69632019-06-12 19:11:33 +02003451 child->version = strdup(haproxy_version);
William Lallemand944e6192018-11-21 15:48:31 +01003452 break;
3453 }
William Lallemandce83b4a2018-10-26 14:47:30 +02003454 }
3455 }
William Lallemandbc193052018-09-11 10:06:26 +02003456
William Lallemand944e6192018-11-21 15:48:31 +01003457 relative_pid++; /* each child will get a different one */
3458 pid_bit <<= 1;
3459 }
3460 } else {
3461 /* wait mode */
3462 global.nbproc = 1;
3463 proc = 1;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003464 }
Willy Tarreaufc6c0322012-11-16 16:12:27 +01003465
3466#ifdef USE_CPU_AFFINITY
3467 if (proc < global.nbproc && /* child */
Willy Tarreauff9c9142019-02-07 10:39:36 +01003468 proc < MAX_PROCS && /* only the first 32/64 processes may be pinned */
Christopher Fauletcb6a9452017-11-22 16:50:41 +01003469 global.cpu_map.proc[proc]) /* only do this if the process has a CPU map */
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +02003470#ifdef __FreeBSD__
Olivier Houchard97148f62017-08-16 17:29:11 +02003471 {
3472 cpuset_t cpuset;
3473 int i;
Christopher Fauletcb6a9452017-11-22 16:50:41 +01003474 unsigned long cpu_map = global.cpu_map.proc[proc];
Olivier Houchard97148f62017-08-16 17:29:11 +02003475
3476 CPU_ZERO(&cpuset);
3477 while ((i = ffsl(cpu_map)) > 0) {
3478 CPU_SET(i - 1, &cpuset);
Cyril Bontéd400ab32018-03-12 21:47:39 +01003479 cpu_map &= ~(1UL << (i - 1));
Olivier Houchard97148f62017-08-16 17:29:11 +02003480 }
3481 ret = cpuset_setaffinity(CPU_LEVEL_WHICH, CPU_WHICH_PID, -1, sizeof(cpuset), &cpuset);
3482 }
David Carlier5e4c8e22019-09-13 05:12:58 +01003483#elif defined(__linux__)
Christopher Fauletcb6a9452017-11-22 16:50:41 +01003484 sched_setaffinity(0, sizeof(unsigned long), (void *)&global.cpu_map.proc[proc]);
Willy Tarreaufc6c0322012-11-16 16:12:27 +01003485#endif
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +02003486#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +02003487 /* close the pidfile both in children and father */
Willy Tarreau269ab312012-09-05 08:02:48 +02003488 if (pidfd >= 0) {
3489 //lseek(pidfd, 0, SEEK_SET); /* debug: emulate eglibc bug */
3490 close(pidfd);
3491 }
Willy Tarreaud137dd32010-08-25 12:49:05 +02003492
3493 /* We won't ever use this anymore */
Willy Tarreaud137dd32010-08-25 12:49:05 +02003494 free(global.pidfile); global.pidfile = NULL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003495
Willy Tarreauedaff0a2015-05-01 17:01:08 +02003496 if (proc == global.nbproc) {
William Lallemand944e6192018-11-21 15:48:31 +01003497 if (global.mode & (MODE_MWORKER|MODE_MWORKER_WAIT)) {
PiBa-NLbaf6ea42017-11-28 23:26:08 +01003498
3499 if ((!(global.mode & MODE_QUIET) || (global.mode & MODE_VERBOSE)) &&
3500 (global.mode & MODE_DAEMON)) {
3501 /* detach from the tty, this is required to properly daemonize. */
William Lallemande1340412017-12-28 16:09:36 +01003502 if ((getenv("HAPROXY_MWORKER_REEXEC") == NULL))
3503 stdio_quiet(-1);
3504
PiBa-NLbaf6ea42017-11-28 23:26:08 +01003505 global.mode &= ~MODE_VERBOSE;
3506 global.mode |= MODE_QUIET; /* ensure that we won't say anything from now */
PiBa-NLbaf6ea42017-11-28 23:26:08 +01003507 }
3508
William Lallemandb3f2be32018-09-11 10:06:18 +02003509 mworker_loop();
William Lallemand1499b9b2017-06-07 15:04:47 +02003510 /* should never get there */
3511 exit(EXIT_FAILURE);
Willy Tarreauedaff0a2015-05-01 17:01:08 +02003512 }
William Lallemandcf4e4962017-06-08 19:05:48 +02003513#if defined(USE_OPENSSL) && !defined(OPENSSL_NO_DH)
Grant Zhang872f9c22017-01-21 01:10:18 +00003514 ssl_free_dh();
3515#endif
William Lallemand1499b9b2017-06-07 15:04:47 +02003516 exit(0); /* parent must leave */
Willy Tarreauedaff0a2015-05-01 17:01:08 +02003517 }
3518
William Lallemandcb11fd22017-06-01 17:38:52 +02003519 /* child must never use the atexit function */
3520 atexit_flag = 0;
3521
William Lallemandbc193052018-09-11 10:06:26 +02003522 /* close useless master sockets */
3523 if (global.mode & MODE_MWORKER) {
3524 struct mworker_proc *child, *it;
3525 master = 0;
3526
William Lallemand309dc9a2018-10-26 14:47:45 +02003527 mworker_cli_proxy_stop();
3528
William Lallemandbc193052018-09-11 10:06:26 +02003529 /* free proc struct of other processes */
3530 list_for_each_entry_safe(child, it, &proc_list, list) {
William Lallemandce83b4a2018-10-26 14:47:30 +02003531 /* close the FD of the master side for all
3532 * workers, we don't need to close the worker
3533 * side of other workers since it's done with
3534 * the bind_proc */
Tim Duesterhus742e0f92018-11-25 20:03:39 +01003535 if (child->ipc_fd[0] >= 0)
3536 close(child->ipc_fd[0]);
William Lallemandce83b4a2018-10-26 14:47:30 +02003537 if (child->relative_pid == relative_pid &&
3538 child->reloads == 0) {
3539 /* keep this struct if this is our pid */
3540 proc_self = child;
William Lallemandbc193052018-09-11 10:06:26 +02003541 continue;
William Lallemandce83b4a2018-10-26 14:47:30 +02003542 }
William Lallemandbc193052018-09-11 10:06:26 +02003543 LIST_DEL(&child->list);
Tim Duesterhus9b7a9762019-05-16 20:23:22 +02003544 mworker_free_child(child);
3545 child = NULL;
William Lallemandbc193052018-09-11 10:06:26 +02003546 }
3547 }
Willy Tarreau1605c7a2018-01-23 19:01:49 +01003548
William Lallemande1340412017-12-28 16:09:36 +01003549 if (!(global.mode & MODE_QUIET) || (global.mode & MODE_VERBOSE)) {
3550 devnullfd = open("/dev/null", O_RDWR, 0);
3551 if (devnullfd < 0) {
3552 ha_alert("Cannot open /dev/null\n");
3553 exit(EXIT_FAILURE);
3554 }
3555 }
3556
William Lallemand095ba4c2017-06-01 17:38:50 +02003557 /* Must chroot and setgid/setuid in the children */
3558 /* chroot if needed */
3559 if (global.chroot != NULL) {
3560 if (chroot(global.chroot) == -1 || chdir("/") == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003561 ha_alert("[%s.main()] Cannot chroot1(%s).\n", argv[0], global.chroot);
William Lallemand095ba4c2017-06-01 17:38:50 +02003562 if (nb_oldpids)
3563 tell_old_pids(SIGTTIN);
3564 protocol_unbind_all();
3565 exit(1);
3566 }
3567 }
3568
3569 free(global.chroot);
3570 global.chroot = NULL;
William Dauchyf9af9d72019-11-17 15:47:16 +01003571 set_identity(argv[0]);
William Lallemand095ba4c2017-06-01 17:38:50 +02003572
William Lallemand7f80eb22017-05-26 18:19:55 +02003573 /* pass through every cli socket, and check if it's bound to
3574 * the current process and if it exposes listeners sockets.
3575 * Caution: the GTUNE_SOCKET_TRANSFER is now set after the fork.
3576 * */
3577
3578 if (global.stats_fe) {
3579 struct bind_conf *bind_conf;
3580
3581 list_for_each_entry(bind_conf, &global.stats_fe->conf.bind, by_fe) {
3582 if (bind_conf->level & ACCESS_FD_LISTENERS) {
3583 if (!bind_conf->bind_proc || bind_conf->bind_proc & (1UL << proc)) {
3584 global.tune.options |= GTUNE_SOCKET_TRANSFER;
3585 break;
3586 }
3587 }
3588 }
3589 }
3590
Willy Tarreau0b9c02c2009-02-04 22:05:05 +01003591 /* we might have to unbind some proxies from some processes */
Olivier Houchardfbc74e82017-11-24 16:54:05 +01003592 px = proxies_list;
Willy Tarreau0b9c02c2009-02-04 22:05:05 +01003593 while (px != NULL) {
3594 if (px->bind_proc && px->state != PR_STSTOPPED) {
Olivier Houchard1fc05162017-04-06 01:05:05 +02003595 if (!(px->bind_proc & (1UL << proc))) {
3596 if (global.tune.options & GTUNE_SOCKET_TRANSFER)
3597 zombify_proxy(px);
3598 else
3599 stop_proxy(px);
3600 }
Willy Tarreau0b9c02c2009-02-04 22:05:05 +01003601 }
3602 px = px->next;
3603 }
3604
Willy Tarreauf83d3fe2015-05-01 19:13:41 +02003605 /* we might have to unbind some peers sections from some processes */
Frédéric Lécailleed2b4a62017-07-13 09:07:09 +02003606 for (curpeers = cfg_peers; curpeers; curpeers = curpeers->next) {
Willy Tarreauf83d3fe2015-05-01 19:13:41 +02003607 if (!curpeers->peers_fe)
3608 continue;
3609
3610 if (curpeers->peers_fe->bind_proc & (1UL << proc))
3611 continue;
3612
3613 stop_proxy(curpeers->peers_fe);
3614 /* disable this peer section so that it kills itself */
Willy Tarreau47c8c022015-09-28 16:39:25 +02003615 signal_unregister_handler(curpeers->sighandler);
Olivier Houchard3f795f72019-04-17 22:51:06 +02003616 task_destroy(curpeers->sync_task);
Willy Tarreau47c8c022015-09-28 16:39:25 +02003617 curpeers->sync_task = NULL;
Olivier Houchard3f795f72019-04-17 22:51:06 +02003618 task_destroy(curpeers->peers_fe->task);
Willy Tarreau47c8c022015-09-28 16:39:25 +02003619 curpeers->peers_fe->task = NULL;
Willy Tarreauf83d3fe2015-05-01 19:13:41 +02003620 curpeers->peers_fe = NULL;
3621 }
3622
William Lallemand2e8fad92018-11-13 16:18:23 +01003623 /*
3624 * This is only done in daemon mode because we might want the
3625 * logs on stdout in mworker mode. If we're NOT in QUIET mode,
3626 * we should now close the 3 first FDs to ensure that we can
3627 * detach from the TTY. We MUST NOT do it in other cases since
3628 * it would have already be done, and 0-2 would have been
3629 * affected to listening sockets
Willy Tarreaubaaee002006-06-26 02:48:02 +02003630 */
William Lallemand2e8fad92018-11-13 16:18:23 +01003631 if ((global.mode & MODE_DAEMON) &&
3632 (!(global.mode & MODE_QUIET) || (global.mode & MODE_VERBOSE))) {
Willy Tarreaubaaee002006-06-26 02:48:02 +02003633 /* detach from the tty */
William Lallemande1340412017-12-28 16:09:36 +01003634 stdio_quiet(devnullfd);
Willy Tarreau106cb762008-11-16 07:40:34 +01003635 global.mode &= ~MODE_VERBOSE;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003636 global.mode |= MODE_QUIET; /* ensure that we won't say anything from now */
3637 }
3638 pid = getpid(); /* update child's pid */
William Lallemandbfd8eb52018-07-04 15:31:23 +02003639 if (!(global.mode & MODE_MWORKER)) /* in mworker mode we don't want a new pgid for the children */
3640 setsid();
Willy Tarreau2ff76222007-04-09 19:29:56 +02003641 fork_poller();
Willy Tarreaubaaee002006-06-26 02:48:02 +02003642 }
3643
William Dauchye039f262019-11-17 15:47:15 +01003644 /* try our best to re-enable core dumps depending on system capabilities.
3645 * What is addressed here :
3646 * - remove file size limits
3647 * - remove core size limits
3648 * - mark the process dumpable again if it lost it due to user/group
3649 */
3650 if (global.tune.options & GTUNE_SET_DUMPABLE) {
3651 limit.rlim_cur = limit.rlim_max = RLIM_INFINITY;
3652
3653#if defined(RLIMIT_FSIZE)
3654 if (setrlimit(RLIMIT_FSIZE, &limit) == -1) {
3655 if (global.tune.options & GTUNE_STRICT_LIMITS) {
3656 ha_alert("[%s.main()] Failed to set the raise the maximum "
3657 "file size.\n", argv[0]);
3658 if (!(global.mode & MODE_MWORKER))
3659 exit(1);
3660 }
3661 else
3662 ha_warning("[%s.main()] Failed to set the raise the maximum "
3663 "file size. This will fail in >= v2.3\n", argv[0]);
3664 }
3665#endif
3666
3667#if defined(RLIMIT_CORE)
3668 if (setrlimit(RLIMIT_CORE, &limit) == -1) {
3669 if (global.tune.options & GTUNE_STRICT_LIMITS) {
3670 ha_alert("[%s.main()] Failed to set the raise the core "
3671 "dump size.\n", argv[0]);
3672 if (!(global.mode & MODE_MWORKER))
3673 exit(1);
3674 }
3675 else
3676 ha_warning("[%s.main()] Failed to set the raise the core "
3677 "dump size. This will fail in >= v2.3\n", argv[0]);
3678 }
3679#endif
3680
3681#if defined(USE_PRCTL)
3682 if (prctl(PR_SET_DUMPABLE, 1, 0, 0, 0) == -1)
3683 ha_warning("[%s.main()] Failed to set the dumpable flag, "
3684 "no core will be dumped.\n", argv[0]);
3685#endif
3686 }
3687
Christopher Faulete3a5e352017-10-24 13:53:54 +02003688 global.mode &= ~MODE_STARTING;
Willy Tarreau4f60f162007-04-08 16:39:58 +02003689 /*
3690 * That's it : the central polling loop. Run until we stop.
3691 */
Christopher Faulet1d17c102017-08-29 15:38:48 +02003692#ifdef USE_THREAD
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003693 {
William Lallemand1aab50b2018-06-07 09:46:01 +02003694 sigset_t blocked_sig, old_sig;
Willy Tarreauc40efc12019-05-03 09:22:44 +02003695 int i;
3696
William Lallemand1aab50b2018-06-07 09:46:01 +02003697 /* ensure the signals will be blocked in every thread */
3698 sigfillset(&blocked_sig);
3699 sigdelset(&blocked_sig, SIGPROF);
3700 sigdelset(&blocked_sig, SIGBUS);
3701 sigdelset(&blocked_sig, SIGFPE);
3702 sigdelset(&blocked_sig, SIGILL);
3703 sigdelset(&blocked_sig, SIGSEGV);
3704 pthread_sigmask(SIG_SETMASK, &blocked_sig, &old_sig);
3705
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003706 /* Create nbthread-1 thread. The first thread is the current process */
David Carliera92c5ce2019-09-13 05:03:12 +01003707 ha_thread_info[0].pthread = pthread_self();
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003708 for (i = 1; i < global.nbthread; i++)
David Carliera92c5ce2019-09-13 05:03:12 +01003709 pthread_create(&ha_thread_info[i].pthread, NULL, &run_thread_poll_loop, (void *)(long)i);
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003710
Christopher Faulet62519022017-10-16 15:49:32 +02003711#ifdef USE_CPU_AFFINITY
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003712 /* Now the CPU affinity for all threads */
Willy Tarreau7764a572019-07-16 15:10:34 +02003713 if (global.cpu_map.proc_t1[relative_pid-1])
3714 global.cpu_map.thread[0] &= global.cpu_map.proc_t1[relative_pid-1];
3715
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003716 for (i = 0; i < global.nbthread; i++) {
Christopher Fauletcb6a9452017-11-22 16:50:41 +01003717 if (global.cpu_map.proc[relative_pid-1])
Willy Tarreau81492c92019-05-03 09:41:23 +02003718 global.cpu_map.thread[i] &= global.cpu_map.proc[relative_pid-1];
Christopher Faulet62519022017-10-16 15:49:32 +02003719
Willy Tarreau421f02e2018-01-20 18:19:22 +01003720 if (i < MAX_THREADS && /* only the first 32/64 threads may be pinned */
Willy Tarreau81492c92019-05-03 09:41:23 +02003721 global.cpu_map.thread[i]) {/* only do this if the thread has a THREAD map */
David Carlier5e4c8e22019-09-13 05:12:58 +01003722#if defined(__APPLE__)
3723 int j;
3724 unsigned long cpu_map = global.cpu_map.thread[i];
3725
3726 while ((j = ffsl(cpu_map)) > 0) {
3727 thread_affinity_policy_data_t cpu_set = { j - 1 };
3728 thread_port_t mthread = pthread_mach_thread_np(ha_thread_info[i].pthread);
3729 thread_policy_set(mthread, THREAD_AFFINITY_POLICY, (thread_policy_t)&cpu_set, 1);
3730 cpu_map &= ~(1UL << (j - 1));
3731 }
3732#else
Olivier Houchard829aa242017-12-01 18:19:43 +01003733#if defined(__FreeBSD__) || defined(__NetBSD__)
3734 cpuset_t cpuset;
3735#else
3736 cpu_set_t cpuset;
3737#endif
3738 int j;
Willy Tarreau81492c92019-05-03 09:41:23 +02003739 unsigned long cpu_map = global.cpu_map.thread[i];
Olivier Houchard829aa242017-12-01 18:19:43 +01003740
3741 CPU_ZERO(&cpuset);
3742
3743 while ((j = ffsl(cpu_map)) > 0) {
3744 CPU_SET(j - 1, &cpuset);
Cyril Bontéd400ab32018-03-12 21:47:39 +01003745 cpu_map &= ~(1UL << (j - 1));
Olivier Houchard829aa242017-12-01 18:19:43 +01003746 }
David Carliera92c5ce2019-09-13 05:03:12 +01003747 pthread_setaffinity_np(ha_thread_info[i].pthread,
Olivier Houchard829aa242017-12-01 18:19:43 +01003748 sizeof(cpuset), &cpuset);
David Carlier5e4c8e22019-09-13 05:12:58 +01003749#endif
Olivier Houchard829aa242017-12-01 18:19:43 +01003750 }
Christopher Faulet1d17c102017-08-29 15:38:48 +02003751 }
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003752#endif /* !USE_CPU_AFFINITY */
3753
William Lallemand1aab50b2018-06-07 09:46:01 +02003754 /* when multithreading we need to let only the thread 0 handle the signals */
William Lallemandd3801c12018-09-11 10:06:23 +02003755 haproxy_unblock_signals();
William Lallemand1aab50b2018-06-07 09:46:01 +02003756
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003757 /* Finally, start the poll loop for the first thread */
Willy Tarreaub4f7cc32019-05-03 09:27:30 +02003758 run_thread_poll_loop(0);
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003759
3760 /* Wait the end of other threads */
3761 for (i = 1; i < global.nbthread; i++)
David Carliera92c5ce2019-09-13 05:03:12 +01003762 pthread_join(ha_thread_info[i].pthread, NULL);
Christopher Faulet1d17c102017-08-29 15:38:48 +02003763
Christopher Fauletb79a94c2017-05-30 15:34:30 +02003764#if defined(DEBUG_THREAD) || defined(DEBUG_FULL)
3765 show_lock_stats();
3766#endif
Christopher Faulet1d17c102017-08-29 15:38:48 +02003767 }
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003768#else /* ! USE_THREAD */
William Lallemandd3801c12018-09-11 10:06:23 +02003769 haproxy_unblock_signals();
Willy Tarreaub4f7cc32019-05-03 09:27:30 +02003770 run_thread_poll_loop(0);
Christopher Faulet62519022017-10-16 15:49:32 +02003771#endif
Christopher Faulet1d17c102017-08-29 15:38:48 +02003772
Tim Duesterhus0a3b43d2020-06-14 00:37:42 +02003773 deinit_and_exit(0);
Willy Tarreaubaaee002006-06-26 02:48:02 +02003774}
3775
Willy Tarreaubaaee002006-06-26 02:48:02 +02003776/*
3777 * Local variables:
3778 * c-indent-level: 8
3779 * c-basic-offset: 8
3780 * End:
3781 */