blob: 8b32e76102c51131356918d6c343b8c2f312e3ee [file] [log] [blame]
William Lallemand74c24fb2016-11-21 17:18:36 +01001/*
2 * Functions dedicated to statistics output and the stats socket
3 *
4 * Copyright 2000-2012 Willy Tarreau <w@1wt.eu>
5 * Copyright 2007-2009 Krzysztof Piotr Oledzki <ole@ans.pl>
6 *
7 * This program is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU General Public License
9 * as published by the Free Software Foundation; either version
10 * 2 of the License, or (at your option) any later version.
11 *
12 */
13
14#include <ctype.h>
15#include <errno.h>
16#include <fcntl.h>
17#include <stdio.h>
18#include <stdlib.h>
19#include <string.h>
20#include <pwd.h>
21#include <grp.h>
22
23#include <sys/socket.h>
24#include <sys/stat.h>
25#include <sys/types.h>
26
Olivier Houchardf886e342017-04-05 22:24:59 +020027#include <net/if.h>
28
Willy Tarreaub2551052020-06-09 09:07:15 +020029#include <haproxy/activity.h>
Willy Tarreau4c7e4b72020-05-27 12:58:42 +020030#include <haproxy/api.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020031#include <haproxy/applet-t.h>
32#include <haproxy/base64.h>
Willy Tarreau6be78492020-06-05 00:00:29 +020033#include <haproxy/cfgparse.h>
Willy Tarreauf1d32c42020-06-04 21:07:02 +020034#include <haproxy/channel.h>
Willy Tarreau4aa573d2020-06-04 18:21:56 +020035#include <haproxy/check.h>
Willy Tarreau83487a82020-06-04 20:19:54 +020036#include <haproxy/cli.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020037#include <haproxy/compression.h>
Willy Tarreaueb92deb2020-06-04 10:53:16 +020038#include <haproxy/dns-t.h>
Willy Tarreau36979d92020-06-05 17:27:29 +020039#include <haproxy/errors.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020040#include <haproxy/fd.h>
41#include <haproxy/freq_ctr.h>
Willy Tarreau762d7a52020-06-04 11:23:07 +020042#include <haproxy/frontend.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020043#include <haproxy/global.h>
Willy Tarreau853b2972020-05-27 18:01:47 +020044#include <haproxy/list.h>
Willy Tarreau213e9902020-06-04 14:58:24 +020045#include <haproxy/listener.h>
Willy Tarreauaeed4a82020-06-04 22:01:04 +020046#include <haproxy/log.h>
Willy Tarreaub5abe5b2020-06-04 14:07:37 +020047#include <haproxy/mworker-t.h>
Willy Tarreau225a90a2020-06-04 15:06:28 +020048#include <haproxy/pattern-t.h>
Willy Tarreau3c2a7c22020-06-04 18:38:21 +020049#include <haproxy/peers.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020050#include <haproxy/pipe.h>
51#include <haproxy/protocol.h>
Willy Tarreaua264d962020-06-04 22:29:18 +020052#include <haproxy/proxy.h>
Willy Tarreaue6ce10b2020-06-04 15:33:47 +020053#include <haproxy/sample-t.h>
Willy Tarreau1e56f922020-06-04 23:20:13 +020054#include <haproxy/server.h>
Willy Tarreau48d25b32020-06-04 18:58:52 +020055#include <haproxy/session.h>
Willy Tarreaua74cb382020-10-15 21:29:49 +020056#include <haproxy/sock.h>
Willy Tarreau2eec9b52020-06-04 19:58:55 +020057#include <haproxy/stats-t.h>
Willy Tarreaudfd3de82020-06-04 23:46:14 +020058#include <haproxy/stream.h>
Willy Tarreau5e539c92020-06-04 20:45:39 +020059#include <haproxy/stream_interface.h>
Willy Tarreaucea0e1b2020-06-04 17:25:40 +020060#include <haproxy/task.h>
Willy Tarreauc2f7c582020-06-02 18:15:32 +020061#include <haproxy/ticks.h>
Willy Tarreau92b4f132020-06-01 11:05:15 +020062#include <haproxy/time.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020063#include <haproxy/tools.h>
Willy Tarreaud6788052020-05-27 15:59:00 +020064#include <haproxy/version.h>
William Lallemand74c24fb2016-11-21 17:18:36 +010065
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +020066#define PAYLOAD_PATTERN "<<"
67
William Lallemand74c24fb2016-11-21 17:18:36 +010068static struct applet cli_applet;
William Lallemand99e0bb92020-11-05 10:28:53 +010069static struct applet mcli_applet;
William Lallemand74c24fb2016-11-21 17:18:36 +010070
71static const char stats_sock_usage_msg[] =
72 "Unknown command. Please enter one of the following commands only :\n"
William Lallemand74c24fb2016-11-21 17:18:36 +010073 " help : this message\n"
74 " prompt : toggle interactive mode with prompt\n"
75 " quit : disconnect\n"
William Lallemand74c24fb2016-11-21 17:18:36 +010076 "";
77
78static const char stats_permission_denied_msg[] =
79 "Permission denied\n"
80 "";
81
82
Christopher Faulet1bc04c72017-10-29 20:14:08 +010083static THREAD_LOCAL char *dynamic_usage_msg = NULL;
William Lallemand74c24fb2016-11-21 17:18:36 +010084
85/* List head of cli keywords */
86static struct cli_kw_list cli_keywords = {
87 .list = LIST_HEAD_INIT(cli_keywords.list)
88};
89
90extern const char *stat_status_codes[];
91
William Lallemand8a022572018-10-26 14:47:35 +020092static struct proxy *mworker_proxy; /* CLI proxy of the master */
93
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +020094static char *cli_gen_usage_msg(struct appctx *appctx)
William Lallemand74c24fb2016-11-21 17:18:36 +010095{
96 struct cli_kw_list *kw_list;
97 struct cli_kw *kw;
Willy Tarreau83061a82018-07-13 11:56:34 +020098 struct buffer *tmp = get_trash_chunk();
99 struct buffer out;
William Lallemand74c24fb2016-11-21 17:18:36 +0100100
101 free(dynamic_usage_msg);
102 dynamic_usage_msg = NULL;
103
104 if (LIST_ISEMPTY(&cli_keywords.list))
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200105 goto end;
William Lallemand74c24fb2016-11-21 17:18:36 +0100106
107 chunk_reset(tmp);
108 chunk_strcat(tmp, stats_sock_usage_msg);
109 list_for_each_entry(kw_list, &cli_keywords.list, list) {
110 kw = &kw_list->kw[0];
William Lallemand0154edc2018-05-15 11:50:04 +0200111 while (kw->str_kw[0]) {
William Lallemand14721be2018-10-26 14:47:37 +0200112
113 /* in a worker or normal process, don't display master only commands */
William Lallemand99e0bb92020-11-05 10:28:53 +0100114 if (appctx->applet == &cli_applet && (kw->level & ACCESS_MASTER_ONLY))
William Lallemand14721be2018-10-26 14:47:37 +0200115 goto next_kw;
116
117 /* in master don't displays if we don't have the master bits */
William Lallemand99e0bb92020-11-05 10:28:53 +0100118 if (appctx->applet == &mcli_applet && !(kw->level & (ACCESS_MASTER_ONLY|ACCESS_MASTER)))
William Lallemand14721be2018-10-26 14:47:37 +0200119 goto next_kw;
120
Willy Tarreauabb9f9b2019-10-24 17:55:53 +0200121 /* only show expert commands in expert mode */
122 if ((kw->level & ~appctx->cli_level) & ACCESS_EXPERT)
123 goto next_kw;
124
William Lallemand0154edc2018-05-15 11:50:04 +0200125 if (kw->usage)
126 chunk_appendf(tmp, " %s\n", kw->usage);
William Lallemand14721be2018-10-26 14:47:37 +0200127
128next_kw:
129
William Lallemand74c24fb2016-11-21 17:18:36 +0100130 kw++;
131 }
132 }
133 chunk_init(&out, NULL, 0);
134 chunk_dup(&out, tmp);
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200135 dynamic_usage_msg = out.area;
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200136
137end:
138 if (dynamic_usage_msg) {
139 appctx->ctx.cli.severity = LOG_INFO;
140 appctx->ctx.cli.msg = dynamic_usage_msg;
141 }
142 else {
143 appctx->ctx.cli.severity = LOG_INFO;
144 appctx->ctx.cli.msg = stats_sock_usage_msg;
145 }
146 appctx->st0 = CLI_ST_PRINT;
147
William Lallemand74c24fb2016-11-21 17:18:36 +0100148 return dynamic_usage_msg;
149}
150
151struct cli_kw* cli_find_kw(char **args)
152{
153 struct cli_kw_list *kw_list;
154 struct cli_kw *kw;/* current cli_kw */
155 char **tmp_args;
156 const char **tmp_str_kw;
157 int found = 0;
158
159 if (LIST_ISEMPTY(&cli_keywords.list))
160 return NULL;
161
162 list_for_each_entry(kw_list, &cli_keywords.list, list) {
163 kw = &kw_list->kw[0];
164 while (*kw->str_kw) {
165 tmp_args = args;
166 tmp_str_kw = kw->str_kw;
167 while (*tmp_str_kw) {
168 if (strcmp(*tmp_str_kw, *tmp_args) == 0) {
169 found = 1;
170 } else {
171 found = 0;
172 break;
173 }
174 tmp_args++;
175 tmp_str_kw++;
176 }
177 if (found)
178 return (kw);
179 kw++;
180 }
181 }
182 return NULL;
183}
184
Thierry Fourniera51a1fd2020-11-28 20:10:08 +0100185struct cli_kw* cli_find_kw_exact(char **args)
186{
187 struct cli_kw_list *kw_list;
188 int found = 0;
189 int i;
190 int j;
191
192 if (LIST_ISEMPTY(&cli_keywords.list))
193 return NULL;
194
195 list_for_each_entry(kw_list, &cli_keywords.list, list) {
196 for (i = 0; kw_list->kw[i].str_kw[0]; i++) {
197 found = 1;
198 for (j = 0; j < CLI_PREFIX_KW_NB; j++) {
199 if (args[j] == NULL && kw_list->kw[i].str_kw[j] == NULL) {
200 break;
201 }
202 if (args[j] == NULL || kw_list->kw[i].str_kw[j] == NULL) {
203 found = 0;
204 break;
205 }
206 if (strcmp(args[j], kw_list->kw[i].str_kw[j]) != 0) {
207 found = 0;
208 break;
209 }
210 }
211 if (found)
212 return &kw_list->kw[i];
213 }
214 }
215 return NULL;
216}
217
William Lallemand74c24fb2016-11-21 17:18:36 +0100218void cli_register_kw(struct cli_kw_list *kw_list)
219{
220 LIST_ADDQ(&cli_keywords.list, &kw_list->list);
221}
222
223
224/* allocate a new stats frontend named <name>, and return it
225 * (or NULL in case of lack of memory).
226 */
227static struct proxy *alloc_stats_fe(const char *name, const char *file, int line)
228{
229 struct proxy *fe;
230
231 fe = calloc(1, sizeof(*fe));
232 if (!fe)
233 return NULL;
234
235 init_new_proxy(fe);
Olivier Houchardfbc74e82017-11-24 16:54:05 +0100236 fe->next = proxies_list;
237 proxies_list = fe;
William Lallemand74c24fb2016-11-21 17:18:36 +0100238 fe->last_change = now.tv_sec;
239 fe->id = strdup("GLOBAL");
240 fe->cap = PR_CAP_FE;
241 fe->maxconn = 10; /* default to 10 concurrent connections */
242 fe->timeout.client = MS_TO_TICKS(10000); /* default timeout of 10 seconds */
243 fe->conf.file = strdup(file);
244 fe->conf.line = line;
245 fe->accept = frontend_accept;
246 fe->default_target = &cli_applet.obj_type;
247
248 /* the stats frontend is the only one able to assign ID #0 */
249 fe->conf.id.key = fe->uuid = 0;
250 eb32_insert(&used_proxy_id, &fe->conf.id);
251 return fe;
252}
253
254/* This function parses a "stats" statement in the "global" section. It returns
255 * -1 if there is any error, otherwise zero. If it returns -1, it will write an
256 * error message into the <err> buffer which will be preallocated. The trailing
257 * '\n' must not be written. The function must be called with <args> pointing to
258 * the first word after "stats".
259 */
260static int stats_parse_global(char **args, int section_type, struct proxy *curpx,
261 struct proxy *defpx, const char *file, int line,
262 char **err)
263{
264 struct bind_conf *bind_conf;
265 struct listener *l;
266
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100267 if (strcmp(args[1], "socket") == 0) {
William Lallemand74c24fb2016-11-21 17:18:36 +0100268 int cur_arg;
269
270 if (*args[2] == 0) {
271 memprintf(err, "'%s %s' in global section expects an address or a path to a UNIX socket", args[0], args[1]);
272 return -1;
273 }
274
275 if (!global.stats_fe) {
276 if ((global.stats_fe = alloc_stats_fe("GLOBAL", file, line)) == NULL) {
277 memprintf(err, "'%s %s' : out of memory trying to allocate a frontend", args[0], args[1]);
278 return -1;
279 }
280 }
281
Willy Tarreaua261e9b2016-12-22 20:44:00 +0100282 bind_conf = bind_conf_alloc(global.stats_fe, file, line, args[2], xprt_get(XPRT_RAW));
William Lallemand07a62f72017-05-24 00:57:40 +0200283 bind_conf->level &= ~ACCESS_LVL_MASK;
284 bind_conf->level |= ACCESS_LVL_OPER; /* default access level */
William Lallemand74c24fb2016-11-21 17:18:36 +0100285
286 if (!str2listener(args[2], global.stats_fe, bind_conf, file, line, err)) {
287 memprintf(err, "parsing [%s:%d] : '%s %s' : %s\n",
288 file, line, args[0], args[1], err && *err ? *err : "error");
289 return -1;
290 }
291
292 cur_arg = 3;
293 while (*args[cur_arg]) {
294 static int bind_dumped;
295 struct bind_kw *kw;
296
297 kw = bind_find_kw(args[cur_arg]);
298 if (kw) {
299 if (!kw->parse) {
300 memprintf(err, "'%s %s' : '%s' option is not implemented in this version (check build options).",
301 args[0], args[1], args[cur_arg]);
302 return -1;
303 }
304
305 if (kw->parse(args, cur_arg, global.stats_fe, bind_conf, err) != 0) {
306 if (err && *err)
307 memprintf(err, "'%s %s' : '%s'", args[0], args[1], *err);
308 else
309 memprintf(err, "'%s %s' : error encountered while processing '%s'",
310 args[0], args[1], args[cur_arg]);
311 return -1;
312 }
313
314 cur_arg += 1 + kw->skip;
315 continue;
316 }
317
318 if (!bind_dumped) {
319 bind_dump_kws(err);
320 indent_msg(err, 4);
321 bind_dumped = 1;
322 }
323
324 memprintf(err, "'%s %s' : unknown keyword '%s'.%s%s",
325 args[0], args[1], args[cur_arg],
326 err && *err ? " Registered keywords :" : "", err && *err ? *err : "");
327 return -1;
328 }
329
330 list_for_each_entry(l, &bind_conf->listeners, by_bind) {
William Lallemand74c24fb2016-11-21 17:18:36 +0100331 l->accept = session_accept_fd;
William Lallemand74c24fb2016-11-21 17:18:36 +0100332 l->default_target = global.stats_fe->default_target;
333 l->options |= LI_O_UNLIMITED; /* don't make the peers subject to global limits */
334 l->nice = -64; /* we want to boost priority for local stats */
Willy Tarreau18215cb2019-02-27 16:25:28 +0100335 global.maxsock++; /* for the listening socket */
William Lallemand74c24fb2016-11-21 17:18:36 +0100336 }
337 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100338 else if (strcmp(args[1], "timeout") == 0) {
William Lallemand74c24fb2016-11-21 17:18:36 +0100339 unsigned timeout;
340 const char *res = parse_time_err(args[2], &timeout, TIME_UNIT_MS);
341
Willy Tarreau9faebe32019-06-07 19:00:37 +0200342 if (res == PARSE_TIME_OVER) {
343 memprintf(err, "timer overflow in argument '%s' to '%s %s' (maximum value is 2147483647 ms or ~24.8 days)",
344 args[2], args[0], args[1]);
345 return -1;
346 }
347 else if (res == PARSE_TIME_UNDER) {
348 memprintf(err, "timer underflow in argument '%s' to '%s %s' (minimum non-null value is 1 ms)",
349 args[2], args[0], args[1]);
350 return -1;
351 }
352 else if (res) {
William Lallemand74c24fb2016-11-21 17:18:36 +0100353 memprintf(err, "'%s %s' : unexpected character '%c'", args[0], args[1], *res);
354 return -1;
355 }
356
357 if (!timeout) {
358 memprintf(err, "'%s %s' expects a positive value", args[0], args[1]);
359 return -1;
360 }
361 if (!global.stats_fe) {
362 if ((global.stats_fe = alloc_stats_fe("GLOBAL", file, line)) == NULL) {
363 memprintf(err, "'%s %s' : out of memory trying to allocate a frontend", args[0], args[1]);
364 return -1;
365 }
366 }
367 global.stats_fe->timeout.client = MS_TO_TICKS(timeout);
368 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100369 else if (strcmp(args[1], "maxconn") == 0) {
William Lallemand74c24fb2016-11-21 17:18:36 +0100370 int maxconn = atol(args[2]);
371
372 if (maxconn <= 0) {
373 memprintf(err, "'%s %s' expects a positive value", args[0], args[1]);
374 return -1;
375 }
376
377 if (!global.stats_fe) {
378 if ((global.stats_fe = alloc_stats_fe("GLOBAL", file, line)) == NULL) {
379 memprintf(err, "'%s %s' : out of memory trying to allocate a frontend", args[0], args[1]);
380 return -1;
381 }
382 }
383 global.stats_fe->maxconn = maxconn;
384 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100385 else if (strcmp(args[1], "bind-process") == 0) { /* enable the socket only on some processes */
William Lallemand74c24fb2016-11-21 17:18:36 +0100386 int cur_arg = 2;
387 unsigned long set = 0;
388
389 if (!global.stats_fe) {
390 if ((global.stats_fe = alloc_stats_fe("GLOBAL", file, line)) == NULL) {
391 memprintf(err, "'%s %s' : out of memory trying to allocate a frontend", args[0], args[1]);
392 return -1;
393 }
394 }
395
396 while (*args[cur_arg]) {
William Lallemand74c24fb2016-11-21 17:18:36 +0100397 if (strcmp(args[cur_arg], "all") == 0) {
398 set = 0;
399 break;
400 }
Willy Tarreauff9c9142019-02-07 10:39:36 +0100401 if (parse_process_number(args[cur_arg], &set, MAX_PROCS, NULL, err)) {
Christopher Fauletf1f0c5f2017-11-22 12:06:43 +0100402 memprintf(err, "'%s %s' : %s", args[0], args[1], *err);
William Lallemand74c24fb2016-11-21 17:18:36 +0100403 return -1;
404 }
405 cur_arg++;
406 }
407 global.stats_fe->bind_proc = set;
408 }
409 else {
410 memprintf(err, "'%s' only supports 'socket', 'maxconn', 'bind-process' and 'timeout' (got '%s')", args[0], args[1]);
411 return -1;
412 }
413 return 0;
414}
415
William Lallemand33d29e22019-04-01 11:30:06 +0200416/*
William Lallemand9a37fd02019-04-12 16:09:24 +0200417 * This function exports the bound addresses of a <frontend> in the environment
418 * variable <varname>. Those addresses are separated by semicolons and prefixed
419 * with their type (abns@, unix@, sockpair@ etc)
420 * Return -1 upon error, 0 otherwise
William Lallemand33d29e22019-04-01 11:30:06 +0200421 */
William Lallemand9a37fd02019-04-12 16:09:24 +0200422int listeners_setenv(struct proxy *frontend, const char *varname)
William Lallemand33d29e22019-04-01 11:30:06 +0200423{
424 struct buffer *trash = get_trash_chunk();
425 struct bind_conf *bind_conf;
426
William Lallemand9a37fd02019-04-12 16:09:24 +0200427 if (frontend) {
428 list_for_each_entry(bind_conf, &frontend->conf.bind, by_fe) {
William Lallemand33d29e22019-04-01 11:30:06 +0200429 struct listener *l;
430
431 list_for_each_entry(l, &bind_conf->listeners, by_bind) {
432 char addr[46];
433 char port[6];
434
William Lallemand620072b2019-04-12 16:09:25 +0200435 /* separate listener by semicolons */
436 if (trash->data)
437 chunk_appendf(trash, ";");
438
Willy Tarreau37159062020-08-27 07:48:42 +0200439 if (l->rx.addr.ss_family == AF_UNIX) {
William Lallemand33d29e22019-04-01 11:30:06 +0200440 const struct sockaddr_un *un;
441
Willy Tarreau37159062020-08-27 07:48:42 +0200442 un = (struct sockaddr_un *)&l->rx.addr;
William Lallemand33d29e22019-04-01 11:30:06 +0200443 if (un->sun_path[0] == '\0') {
444 chunk_appendf(trash, "abns@%s", un->sun_path+1);
445 } else {
446 chunk_appendf(trash, "unix@%s", un->sun_path);
447 }
Willy Tarreau37159062020-08-27 07:48:42 +0200448 } else if (l->rx.addr.ss_family == AF_INET) {
449 addr_to_str(&l->rx.addr, addr, sizeof(addr));
450 port_to_str(&l->rx.addr, port, sizeof(port));
William Lallemand33d29e22019-04-01 11:30:06 +0200451 chunk_appendf(trash, "ipv4@%s:%s", addr, port);
Willy Tarreau37159062020-08-27 07:48:42 +0200452 } else if (l->rx.addr.ss_family == AF_INET6) {
453 addr_to_str(&l->rx.addr, addr, sizeof(addr));
454 port_to_str(&l->rx.addr, port, sizeof(port));
William Lallemand33d29e22019-04-01 11:30:06 +0200455 chunk_appendf(trash, "ipv6@[%s]:%s", addr, port);
Willy Tarreau37159062020-08-27 07:48:42 +0200456 } else if (l->rx.addr.ss_family == AF_CUST_SOCKPAIR) {
457 chunk_appendf(trash, "sockpair@%d", ((struct sockaddr_in *)&l->rx.addr)->sin_addr.s_addr);
William Lallemand33d29e22019-04-01 11:30:06 +0200458 }
William Lallemand33d29e22019-04-01 11:30:06 +0200459 }
460 }
461 trash->area[trash->data++] = '\0';
William Lallemand9a37fd02019-04-12 16:09:24 +0200462 if (setenv(varname, trash->area, 1) < 0)
William Lallemand33d29e22019-04-01 11:30:06 +0200463 return -1;
464 }
465
466 return 0;
467}
468
William Lallemand9a37fd02019-04-12 16:09:24 +0200469int cli_socket_setenv()
470{
471 if (listeners_setenv(global.stats_fe, "HAPROXY_CLI") < 0)
472 return -1;
473 if (listeners_setenv(mworker_proxy, "HAPROXY_MASTER_CLI") < 0)
474 return -1;
475
476 return 0;
477}
478
William Lallemand33d29e22019-04-01 11:30:06 +0200479REGISTER_CONFIG_POSTPARSER("cli", cli_socket_setenv);
480
Willy Tarreaude57a572016-11-23 17:01:39 +0100481/* Verifies that the CLI at least has a level at least as high as <level>
482 * (typically ACCESS_LVL_ADMIN). Returns 1 if OK, otherwise 0. In case of
483 * failure, an error message is prepared and the appctx's state is adjusted
484 * to print it so that a return 1 is enough to abort any processing.
485 */
486int cli_has_level(struct appctx *appctx, int level)
487{
Willy Tarreaude57a572016-11-23 17:01:39 +0100488
William Lallemandf630d012018-12-13 09:05:44 +0100489 if ((appctx->cli_level & ACCESS_LVL_MASK) < level) {
Willy Tarreau9d008692019-08-09 11:21:01 +0200490 cli_err(appctx, stats_permission_denied_msg);
Willy Tarreaude57a572016-11-23 17:01:39 +0100491 return 0;
492 }
William Lallemand74c24fb2016-11-21 17:18:36 +0100493 return 1;
494}
495
William Lallemandb7ea1412018-12-13 09:05:47 +0100496/* same as cli_has_level but for the CLI proxy and without error message */
497int pcli_has_level(struct stream *s, int level)
498{
499 if ((s->pcli_flags & ACCESS_LVL_MASK) < level) {
500 return 0;
501 }
502 return 1;
503}
504
Andjelko Iharosc4df59e2017-07-20 11:59:48 +0200505/* Returns severity_output for the current session if set, or default for the socket */
506static int cli_get_severity_output(struct appctx *appctx)
507{
508 if (appctx->cli_severity_output)
509 return appctx->cli_severity_output;
510 return strm_li(si_strm(appctx->owner))->bind_conf->severity_output;
511}
William Lallemand74c24fb2016-11-21 17:18:36 +0100512
Willy Tarreau41908562016-11-24 16:23:38 +0100513/* Processes the CLI interpreter on the stats socket. This function is called
514 * from the CLI's IO handler running in an appctx context. The function returns 1
515 * if the request was understood, otherwise zero. It is called with appctx->st0
516 * set to CLI_ST_GETREQ and presets ->st2 to 0 so that parsers don't have to do
517 * it. It will possilbly leave st0 to CLI_ST_CALLBACK if the keyword needs to
518 * have its own I/O handler called again. Most of the time, parsers will only
519 * set st0 to CLI_ST_PRINT and put their message to be displayed into cli.msg.
Willy Tarreaueaffde32016-12-16 17:59:25 +0100520 * If a keyword parser is NULL and an I/O handler is declared, the I/O handler
521 * will automatically be used.
William Lallemand74c24fb2016-11-21 17:18:36 +0100522 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200523static int cli_parse_request(struct appctx *appctx)
William Lallemand74c24fb2016-11-21 17:18:36 +0100524{
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200525 char *args[MAX_STATS_ARGS + 1], *p, *end, *payload = NULL;
526 int i = 0;
William Lallemand74c24fb2016-11-21 17:18:36 +0100527 struct cli_kw *kw;
William Lallemand74c24fb2016-11-21 17:18:36 +0100528
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200529 appctx->st2 = 0;
530 memset(&appctx->ctx.cli, 0, sizeof(appctx->ctx.cli));
William Lallemand74c24fb2016-11-21 17:18:36 +0100531
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200532 p = appctx->chunk->area;
533 end = p + appctx->chunk->data;
William Lallemand74c24fb2016-11-21 17:18:36 +0100534
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200535 /*
536 * Get the payload start if there is one.
537 * For the sake of simplicity, the payload pattern is looked up
538 * everywhere from the start of the input but it can only be found
539 * at the end of the first line if APPCTX_CLI_ST1_PAYLOAD is set.
540 *
541 * The input string was zero terminated so it is safe to use
542 * the str*() functions throughout the parsing
543 */
544 if (appctx->st1 & APPCTX_CLI_ST1_PAYLOAD) {
545 payload = strstr(p, PAYLOAD_PATTERN);
546 end = payload;
547 /* skip the pattern */
548 payload += strlen(PAYLOAD_PATTERN);
549 }
William Lallemand74c24fb2016-11-21 17:18:36 +0100550
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200551 /*
552 * Get pointers on words.
553 * One extra slot is reserved to store a pointer on a null byte.
554 */
555 while (i < MAX_STATS_ARGS && p < end) {
556 int j, k;
William Lallemand74c24fb2016-11-21 17:18:36 +0100557
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200558 /* skip leading spaces/tabs */
559 p += strspn(p, " \t");
560 if (!*p)
561 break;
William Lallemand74c24fb2016-11-21 17:18:36 +0100562
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200563 args[i] = p;
Yves Lafonb08c6d02020-06-08 16:08:06 +0200564 while (1) {
565 p += strcspn(p, " \t\\");
566 /* escaped chars using backlashes (\) */
567 if (*p == '\\') {
568 if (!*++p)
569 break;
570 if (!*++p)
571 break;
572 } else {
573 break;
574 }
575 }
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200576 *p++ = 0;
William Lallemand74c24fb2016-11-21 17:18:36 +0100577
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200578 /* unescape backslashes (\) */
579 for (j = 0, k = 0; args[i][k]; k++) {
580 if (args[i][k] == '\\') {
581 if (args[i][k + 1] == '\\')
582 k++;
Dragan Dosena1c35ab2016-11-24 11:33:12 +0100583 else
584 continue;
585 }
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200586 args[i][j] = args[i][k];
William Lallemand74c24fb2016-11-21 17:18:36 +0100587 j++;
588 }
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200589 args[i][j] = 0;
William Lallemand74c24fb2016-11-21 17:18:36 +0100590
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200591 i++;
592 }
593 /* fill unused slots */
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200594 p = appctx->chunk->area + appctx->chunk->data;
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200595 for (; i < MAX_STATS_ARGS + 1; i++)
596 args[i] = p;
Willy Tarreau41908562016-11-24 16:23:38 +0100597
598 kw = cli_find_kw(args);
Willy Tarreaueaffde32016-12-16 17:59:25 +0100599 if (!kw)
Willy Tarreau41908562016-11-24 16:23:38 +0100600 return 0;
601
William Lallemand14721be2018-10-26 14:47:37 +0200602 /* in a worker or normal process, don't display master only commands */
William Lallemand99e0bb92020-11-05 10:28:53 +0100603 if (appctx->applet == &cli_applet && (kw->level & ACCESS_MASTER_ONLY))
William Lallemand14721be2018-10-26 14:47:37 +0200604 return 0;
605
606 /* in master don't displays if we don't have the master bits */
William Lallemand99e0bb92020-11-05 10:28:53 +0100607 if (appctx->applet == &mcli_applet && !(kw->level & (ACCESS_MASTER_ONLY|ACCESS_MASTER)))
William Lallemand14721be2018-10-26 14:47:37 +0200608 return 0;
609
Willy Tarreauabb9f9b2019-10-24 17:55:53 +0200610 /* only accept expert commands in expert mode */
611 if ((kw->level & ~appctx->cli_level) & ACCESS_EXPERT)
612 return 0;
613
Willy Tarreau41908562016-11-24 16:23:38 +0100614 appctx->io_handler = kw->io_handler;
Emeric Brund6871f72017-06-29 19:54:13 +0200615 appctx->io_release = kw->io_release;
William Lallemand90b098c2019-10-25 21:10:14 +0200616
617 if (kw->parse && kw->parse(args, payload, appctx, kw->private) != 0)
618 goto fail;
619
620 /* kw->parse could set its own io_handler or io_release handler */
621 if (!appctx->io_handler)
622 goto fail;
623
624 appctx->st0 = CLI_ST_CALLBACK;
625 return 1;
626fail:
627 appctx->io_handler = NULL;
628 appctx->io_release = NULL;
Willy Tarreau41908562016-11-24 16:23:38 +0100629 return 1;
William Lallemand74c24fb2016-11-21 17:18:36 +0100630}
631
Andjelko Iharosc4df59e2017-07-20 11:59:48 +0200632/* prepends then outputs the argument msg with a syslog-type severity depending on severity_output value */
633static int cli_output_msg(struct channel *chn, const char *msg, int severity, int severity_output)
634{
Willy Tarreau83061a82018-07-13 11:56:34 +0200635 struct buffer *tmp;
Andjelko Iharosc4df59e2017-07-20 11:59:48 +0200636
637 if (likely(severity_output == CLI_SEVERITY_NONE))
Willy Tarreau06d80a92017-10-19 14:32:15 +0200638 return ci_putblk(chn, msg, strlen(msg));
Andjelko Iharosc4df59e2017-07-20 11:59:48 +0200639
640 tmp = get_trash_chunk();
641 chunk_reset(tmp);
642
643 if (severity < 0 || severity > 7) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100644 ha_warning("socket command feedback with invalid severity %d", severity);
Andjelko Iharosc4df59e2017-07-20 11:59:48 +0200645 chunk_printf(tmp, "[%d]: ", severity);
646 }
647 else {
648 switch (severity_output) {
649 case CLI_SEVERITY_NUMBER:
650 chunk_printf(tmp, "[%d]: ", severity);
651 break;
652 case CLI_SEVERITY_STRING:
653 chunk_printf(tmp, "[%s]: ", log_levels[severity]);
654 break;
655 default:
Christopher Faulet767a84b2017-11-24 16:50:31 +0100656 ha_warning("Unrecognized severity output %d", severity_output);
Andjelko Iharosc4df59e2017-07-20 11:59:48 +0200657 }
658 }
659 chunk_appendf(tmp, "%s", msg);
660
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200661 return ci_putblk(chn, tmp->area, strlen(tmp->area));
Andjelko Iharosc4df59e2017-07-20 11:59:48 +0200662}
663
William Lallemand74c24fb2016-11-21 17:18:36 +0100664/* This I/O handler runs as an applet embedded in a stream interface. It is
665 * used to processes I/O from/to the stats unix socket. The system relies on a
666 * state machine handling requests and various responses. We read a request,
667 * then we process it and send the response, and we possibly display a prompt.
668 * Then we can read again. The state is stored in appctx->st0 and is one of the
Willy Tarreau3b6e5472016-11-24 15:53:53 +0100669 * CLI_ST_* constants. appctx->st1 is used to indicate whether prompt is enabled
William Lallemand74c24fb2016-11-21 17:18:36 +0100670 * or not.
671 */
672static void cli_io_handler(struct appctx *appctx)
673{
674 struct stream_interface *si = appctx->owner;
675 struct channel *req = si_oc(si);
676 struct channel *res = si_ic(si);
Andjelko Iharosc4df59e2017-07-20 11:59:48 +0200677 struct bind_conf *bind_conf = strm_li(si_strm(si))->bind_conf;
William Lallemand74c24fb2016-11-21 17:18:36 +0100678 int reql;
679 int len;
680
681 if (unlikely(si->state == SI_ST_DIS || si->state == SI_ST_CLO))
682 goto out;
683
Joseph Herlant008b3ce2018-11-25 12:51:45 -0800684 /* Check if the input buffer is available. */
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200685 if (res->buf.size == 0) {
Willy Tarreau4b962a42018-11-15 11:03:21 +0100686 /* buf.size==0 means we failed to get a buffer and were
687 * already subscribed to a wait list to get a buffer.
688 */
Christopher Fauleta73e59b2016-12-09 17:30:18 +0100689 goto out;
690 }
691
William Lallemand74c24fb2016-11-21 17:18:36 +0100692 while (1) {
Willy Tarreau3b6e5472016-11-24 15:53:53 +0100693 if (appctx->st0 == CLI_ST_INIT) {
William Lallemand74c24fb2016-11-21 17:18:36 +0100694 /* Stats output not initialized yet */
695 memset(&appctx->ctx.stats, 0, sizeof(appctx->ctx.stats));
Andjelko Iharosc4df59e2017-07-20 11:59:48 +0200696 /* reset severity to default at init */
697 appctx->cli_severity_output = bind_conf->severity_output;
Willy Tarreau3b6e5472016-11-24 15:53:53 +0100698 appctx->st0 = CLI_ST_GETREQ;
William Lallemandf630d012018-12-13 09:05:44 +0100699 appctx->cli_level = bind_conf->level;
William Lallemand74c24fb2016-11-21 17:18:36 +0100700 }
Willy Tarreau3b6e5472016-11-24 15:53:53 +0100701 else if (appctx->st0 == CLI_ST_END) {
William Lallemand74c24fb2016-11-21 17:18:36 +0100702 /* Let's close for real now. We just close the request
703 * side, the conditions below will complete if needed.
704 */
705 si_shutw(si);
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200706 free_trash_chunk(appctx->chunk);
William Lallemand74c24fb2016-11-21 17:18:36 +0100707 break;
708 }
Willy Tarreau3b6e5472016-11-24 15:53:53 +0100709 else if (appctx->st0 == CLI_ST_GETREQ) {
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200710 char *str;
711
712 /* use a trash chunk to store received data */
713 if (!appctx->chunk) {
714 appctx->chunk = alloc_trash_chunk();
715 if (!appctx->chunk) {
716 appctx->st0 = CLI_ST_END;
717 continue;
718 }
719 }
720
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200721 str = appctx->chunk->area + appctx->chunk->data;
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200722
William Lallemand74c24fb2016-11-21 17:18:36 +0100723 /* ensure we have some output room left in the event we
724 * would want to return some info right after parsing.
725 */
726 if (buffer_almost_full(si_ib(si))) {
Willy Tarreaudb398432018-11-15 11:08:52 +0100727 si_rx_room_blk(si);
William Lallemand74c24fb2016-11-21 17:18:36 +0100728 break;
729 }
730
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200731 /* '- 1' is to ensure a null byte can always be inserted at the end */
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200732 reql = co_getline(si_oc(si), str,
733 appctx->chunk->size - appctx->chunk->data - 1);
William Lallemand74c24fb2016-11-21 17:18:36 +0100734 if (reql <= 0) { /* closed or EOL not found */
735 if (reql == 0)
736 break;
Willy Tarreau3b6e5472016-11-24 15:53:53 +0100737 appctx->st0 = CLI_ST_END;
William Lallemand74c24fb2016-11-21 17:18:36 +0100738 continue;
739 }
740
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200741 if (!(appctx->st1 & APPCTX_CLI_ST1_PAYLOAD)) {
742 /* seek for a possible unescaped semi-colon. If we find
743 * one, we replace it with an LF and skip only this part.
744 */
745 for (len = 0; len < reql; len++) {
746 if (str[len] == '\\') {
747 len++;
748 continue;
749 }
750 if (str[len] == ';') {
751 str[len] = '\n';
752 reql = len + 1;
753 break;
754 }
William Lallemand74c24fb2016-11-21 17:18:36 +0100755 }
756 }
757
758 /* now it is time to check that we have a full line,
759 * remove the trailing \n and possibly \r, then cut the
760 * line.
761 */
762 len = reql - 1;
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200763 if (str[len] != '\n') {
Willy Tarreau3b6e5472016-11-24 15:53:53 +0100764 appctx->st0 = CLI_ST_END;
William Lallemand74c24fb2016-11-21 17:18:36 +0100765 continue;
766 }
767
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200768 if (len && str[len-1] == '\r')
William Lallemand74c24fb2016-11-21 17:18:36 +0100769 len--;
770
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200771 str[len] = '\0';
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200772 appctx->chunk->data += len;
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200773
774 if (appctx->st1 & APPCTX_CLI_ST1_PAYLOAD) {
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200775 appctx->chunk->area[appctx->chunk->data] = '\n';
776 appctx->chunk->area[appctx->chunk->data + 1] = 0;
777 appctx->chunk->data++;
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200778 }
William Lallemand74c24fb2016-11-21 17:18:36 +0100779
Willy Tarreau3b6e5472016-11-24 15:53:53 +0100780 appctx->st0 = CLI_ST_PROMPT;
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200781
782 if (appctx->st1 & APPCTX_CLI_ST1_PAYLOAD) {
783 /* empty line */
784 if (!len) {
785 /* remove the last two \n */
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200786 appctx->chunk->data -= 2;
787 appctx->chunk->area[appctx->chunk->data] = 0;
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200788
789 if (!cli_parse_request(appctx))
790 cli_gen_usage_msg(appctx);
791
792 chunk_reset(appctx->chunk);
793 /* NB: cli_sock_parse_request() may have put
794 * another CLI_ST_O_* into appctx->st0.
795 */
796
797 appctx->st1 &= ~APPCTX_CLI_ST1_PAYLOAD;
William Lallemand74c24fb2016-11-21 17:18:36 +0100798 }
William Lallemand74c24fb2016-11-21 17:18:36 +0100799 }
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200800 else {
801 /*
802 * Look for the "payload start" pattern at the end of a line
803 * Its location is not remembered here, this is just to switch
804 * to a gathering mode.
William Lallemand74c24fb2016-11-21 17:18:36 +0100805 */
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100806 if (strcmp(appctx->chunk->area + appctx->chunk->data - strlen(PAYLOAD_PATTERN), PAYLOAD_PATTERN) == 0)
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200807 appctx->st1 |= APPCTX_CLI_ST1_PAYLOAD;
Andjelko Iharosc3680ec2017-07-20 16:49:14 +0200808 else {
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200809 /* no payload, the command is complete: parse the request */
810 if (!cli_parse_request(appctx))
811 cli_gen_usage_msg(appctx);
812
813 chunk_reset(appctx->chunk);
Andjelko Iharosc3680ec2017-07-20 16:49:14 +0200814 }
William Lallemand74c24fb2016-11-21 17:18:36 +0100815 }
816
817 /* re-adjust req buffer */
Willy Tarreau06d80a92017-10-19 14:32:15 +0200818 co_skip(si_oc(si), reql);
William Lallemand74c24fb2016-11-21 17:18:36 +0100819 req->flags |= CF_READ_DONTWAIT; /* we plan to read small requests */
820 }
821 else { /* output functions */
Willy Tarreaud50c7fe2019-08-09 09:57:36 +0200822 const char *msg;
823 int sev;
824
William Lallemand74c24fb2016-11-21 17:18:36 +0100825 switch (appctx->st0) {
Willy Tarreau3b6e5472016-11-24 15:53:53 +0100826 case CLI_ST_PROMPT:
William Lallemand74c24fb2016-11-21 17:18:36 +0100827 break;
Willy Tarreaud50c7fe2019-08-09 09:57:36 +0200828 case CLI_ST_PRINT: /* print const message in msg */
829 case CLI_ST_PRINT_ERR: /* print const error in msg */
830 case CLI_ST_PRINT_DYN: /* print dyn message in msg, free */
831 case CLI_ST_PRINT_FREE: /* print dyn error in err, free */
832 if (appctx->st0 == CLI_ST_PRINT || appctx->st0 == CLI_ST_PRINT_ERR) {
833 sev = appctx->st0 == CLI_ST_PRINT_ERR ?
834 LOG_ERR : appctx->ctx.cli.severity;
835 msg = appctx->ctx.cli.msg;
836 }
837 else if (appctx->st0 == CLI_ST_PRINT_DYN || appctx->st0 == CLI_ST_PRINT_FREE) {
838 sev = appctx->st0 == CLI_ST_PRINT_FREE ?
839 LOG_ERR : appctx->ctx.cli.severity;
840 msg = appctx->ctx.cli.err;
841 if (!msg) {
842 sev = LOG_ERR;
843 msg = "Out of memory.\n";
844 }
845 }
846 else {
847 sev = LOG_ERR;
848 msg = "Internal error.\n";
849 }
Aurélien Nephtalic511b7c2018-04-16 18:50:19 +0200850
Willy Tarreaud50c7fe2019-08-09 09:57:36 +0200851 if (cli_output_msg(res, msg, sev, cli_get_severity_output(appctx)) != -1) {
852 if (appctx->st0 == CLI_ST_PRINT_FREE ||
853 appctx->st0 == CLI_ST_PRINT_DYN) {
854 free(appctx->ctx.cli.err);
855 appctx->ctx.cli.err = NULL;
856 }
Willy Tarreau3b6e5472016-11-24 15:53:53 +0100857 appctx->st0 = CLI_ST_PROMPT;
William Lallemand74c24fb2016-11-21 17:18:36 +0100858 }
859 else
Willy Tarreaudb398432018-11-15 11:08:52 +0100860 si_rx_room_blk(si);
William Lallemand74c24fb2016-11-21 17:18:36 +0100861 break;
Willy Tarreaud50c7fe2019-08-09 09:57:36 +0200862
Willy Tarreau3b6e5472016-11-24 15:53:53 +0100863 case CLI_ST_CALLBACK: /* use custom pointer */
William Lallemand74c24fb2016-11-21 17:18:36 +0100864 if (appctx->io_handler)
865 if (appctx->io_handler(appctx)) {
Willy Tarreau3b6e5472016-11-24 15:53:53 +0100866 appctx->st0 = CLI_ST_PROMPT;
William Lallemand74c24fb2016-11-21 17:18:36 +0100867 if (appctx->io_release) {
868 appctx->io_release(appctx);
869 appctx->io_release = NULL;
870 }
871 }
872 break;
873 default: /* abnormal state */
874 si->flags |= SI_FL_ERR;
875 break;
876 }
877
878 /* The post-command prompt is either LF alone or LF + '> ' in interactive mode */
Willy Tarreau3b6e5472016-11-24 15:53:53 +0100879 if (appctx->st0 == CLI_ST_PROMPT) {
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200880 const char *prompt = "";
881
882 if (appctx->st1 & APPCTX_CLI_ST1_PROMPT) {
883 /*
884 * when entering a payload with interactive mode, change the prompt
885 * to emphasize that more data can still be sent
886 */
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200887 if (appctx->chunk->data && appctx->st1 & APPCTX_CLI_ST1_PAYLOAD)
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200888 prompt = "+ ";
889 else
890 prompt = "\n> ";
891 }
892 else {
William Lallemandad032882019-07-01 10:56:15 +0200893 if (!(appctx->st1 & (APPCTX_CLI_ST1_PAYLOAD|APPCTX_CLI_ST1_NOLF)))
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +0200894 prompt = "\n";
895 }
896
897 if (ci_putstr(si_ic(si), prompt) != -1)
Willy Tarreau3b6e5472016-11-24 15:53:53 +0100898 appctx->st0 = CLI_ST_GETREQ;
William Lallemand74c24fb2016-11-21 17:18:36 +0100899 else
Willy Tarreaudb398432018-11-15 11:08:52 +0100900 si_rx_room_blk(si);
William Lallemand74c24fb2016-11-21 17:18:36 +0100901 }
902
903 /* If the output functions are still there, it means they require more room. */
Willy Tarreau3b6e5472016-11-24 15:53:53 +0100904 if (appctx->st0 >= CLI_ST_OUTPUT)
William Lallemand74c24fb2016-11-21 17:18:36 +0100905 break;
906
907 /* Now we close the output if one of the writers did so,
908 * or if we're not in interactive mode and the request
909 * buffer is empty. This still allows pipelined requests
910 * to be sent in non-interactive mode.
911 */
William Lallemand3de09d52018-12-11 16:10:56 +0100912 if (((res->flags & (CF_SHUTW|CF_SHUTW_NOW))) ||
913 (!(appctx->st1 & APPCTX_CLI_ST1_PROMPT) && !co_data(req) && (!(appctx->st1 & APPCTX_CLI_ST1_PAYLOAD)))) {
Willy Tarreau3b6e5472016-11-24 15:53:53 +0100914 appctx->st0 = CLI_ST_END;
William Lallemand74c24fb2016-11-21 17:18:36 +0100915 continue;
916 }
917
918 /* switch state back to GETREQ to read next requests */
Willy Tarreau3b6e5472016-11-24 15:53:53 +0100919 appctx->st0 = CLI_ST_GETREQ;
William Lallemandad032882019-07-01 10:56:15 +0200920 /* reactivate the \n at the end of the response for the next command */
921 appctx->st1 &= ~APPCTX_CLI_ST1_NOLF;
William Lallemand74c24fb2016-11-21 17:18:36 +0100922 }
923 }
924
925 if ((res->flags & CF_SHUTR) && (si->state == SI_ST_EST)) {
926 DPRINTF(stderr, "%s@%d: si to buf closed. req=%08x, res=%08x, st=%d\n",
927 __FUNCTION__, __LINE__, req->flags, res->flags, si->state);
928 /* Other side has closed, let's abort if we have no more processing to do
929 * and nothing more to consume. This is comparable to a broken pipe, so
930 * we forward the close to the request side so that it flows upstream to
931 * the client.
932 */
933 si_shutw(si);
934 }
935
Willy Tarreau3b6e5472016-11-24 15:53:53 +0100936 if ((req->flags & CF_SHUTW) && (si->state == SI_ST_EST) && (appctx->st0 < CLI_ST_OUTPUT)) {
William Lallemand74c24fb2016-11-21 17:18:36 +0100937 DPRINTF(stderr, "%s@%d: buf to si closed. req=%08x, res=%08x, st=%d\n",
938 __FUNCTION__, __LINE__, req->flags, res->flags, si->state);
939 /* We have no more processing to do, and nothing more to send, and
940 * the client side has closed. So we'll forward this state downstream
941 * on the response buffer.
942 */
943 si_shutr(si);
944 res->flags |= CF_READ_NULL;
945 }
946
947 out:
Christopher Faulet45073512018-07-20 10:16:29 +0200948 DPRINTF(stderr, "%s@%d: st=%d, rqf=%x, rpf=%x, rqh=%lu, rqs=%lu, rh=%lu, rs=%lu\n",
William Lallemand74c24fb2016-11-21 17:18:36 +0100949 __FUNCTION__, __LINE__,
Christopher Faulet45073512018-07-20 10:16:29 +0200950 si->state, req->flags, res->flags, ci_data(req), co_data(req), ci_data(res), co_data(res));
William Lallemand74c24fb2016-11-21 17:18:36 +0100951}
952
William Lallemand74c24fb2016-11-21 17:18:36 +0100953/* This is called when the stream interface is closed. For instance, upon an
954 * external abort, we won't call the i/o handler anymore so we may need to
955 * remove back references to the stream currently being dumped.
956 */
957static void cli_release_handler(struct appctx *appctx)
958{
959 if (appctx->io_release) {
960 appctx->io_release(appctx);
961 appctx->io_release = NULL;
962 }
Willy Tarreaud50c7fe2019-08-09 09:57:36 +0200963 else if (appctx->st0 == CLI_ST_PRINT_FREE || appctx->st0 == CLI_ST_PRINT_DYN) {
William Lallemand74c24fb2016-11-21 17:18:36 +0100964 free(appctx->ctx.cli.err);
965 appctx->ctx.cli.err = NULL;
966 }
William Lallemand74c24fb2016-11-21 17:18:36 +0100967}
968
969/* This function dumps all environmnent variables to the buffer. It returns 0
970 * if the output buffer is full and it needs to be called again, otherwise
Willy Tarreauf6710f82016-12-16 17:45:44 +0100971 * non-zero. Dumps only one entry if st2 == STAT_ST_END. It uses cli.p0 as the
972 * pointer to the current variable.
William Lallemand74c24fb2016-11-21 17:18:36 +0100973 */
Willy Tarreau0a739292016-11-22 20:21:23 +0100974static int cli_io_handler_show_env(struct appctx *appctx)
William Lallemand74c24fb2016-11-21 17:18:36 +0100975{
Willy Tarreau0a739292016-11-22 20:21:23 +0100976 struct stream_interface *si = appctx->owner;
Willy Tarreauf6710f82016-12-16 17:45:44 +0100977 char **var = appctx->ctx.cli.p0;
William Lallemand74c24fb2016-11-21 17:18:36 +0100978
979 if (unlikely(si_ic(si)->flags & (CF_WRITE_ERROR|CF_SHUTW)))
980 return 1;
981
982 chunk_reset(&trash);
983
984 /* we have two inner loops here, one for the proxy, the other one for
985 * the buffer.
986 */
Willy Tarreauf6710f82016-12-16 17:45:44 +0100987 while (*var) {
988 chunk_printf(&trash, "%s\n", *var);
William Lallemand74c24fb2016-11-21 17:18:36 +0100989
Willy Tarreau06d80a92017-10-19 14:32:15 +0200990 if (ci_putchk(si_ic(si), &trash) == -1) {
Willy Tarreaudb398432018-11-15 11:08:52 +0100991 si_rx_room_blk(si);
William Lallemand74c24fb2016-11-21 17:18:36 +0100992 return 0;
993 }
994 if (appctx->st2 == STAT_ST_END)
995 break;
Willy Tarreauf6710f82016-12-16 17:45:44 +0100996 var++;
997 appctx->ctx.cli.p0 = var;
William Lallemand74c24fb2016-11-21 17:18:36 +0100998 }
999
1000 /* dump complete */
1001 return 1;
1002}
1003
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001004/* This function dumps all file descriptors states (or the requested one) to
1005 * the buffer. It returns 0 if the output buffer is full and it needs to be
1006 * called again, otherwise non-zero. Dumps only one entry if st2 == STAT_ST_END.
1007 * It uses cli.i0 as the fd number to restart from.
1008 */
1009static int cli_io_handler_show_fd(struct appctx *appctx)
1010{
1011 struct stream_interface *si = appctx->owner;
1012 int fd = appctx->ctx.cli.i0;
Willy Tarreauca1b1572018-12-18 15:45:11 +01001013 int ret = 1;
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001014
1015 if (unlikely(si_ic(si)->flags & (CF_WRITE_ERROR|CF_SHUTW)))
Willy Tarreauca1b1572018-12-18 15:45:11 +01001016 goto end;
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001017
1018 chunk_reset(&trash);
1019
Willy Tarreauca1b1572018-12-18 15:45:11 +01001020 /* isolate the threads once per round. We're limited to a buffer worth
1021 * of output anyway, it cannot last very long.
1022 */
1023 thread_isolate();
1024
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001025 /* we have two inner loops here, one for the proxy, the other one for
1026 * the buffer.
1027 */
Aurélien Nephtali498a1152018-03-09 18:51:16 +01001028 while (fd >= 0 && fd < global.maxsock) {
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001029 struct fdtab fdt;
Willy Tarreaueb0595d2021-01-20 14:13:46 +01001030 const struct listener *li = NULL;
1031 const struct server *sv = NULL;
1032 const struct proxy *px = NULL;
1033 const struct connection *conn = NULL;
Willy Tarreaua833cd92018-03-29 13:19:37 +02001034 const struct mux_ops *mux = NULL;
Willy Tarreau37be9532021-01-20 14:40:04 +01001035 const struct xprt_ops *xprt = NULL;
Willy Tarreaueb0595d2021-01-20 14:13:46 +01001036 const void *ctx = NULL;
Willy Tarreau37be9532021-01-20 14:40:04 +01001037 const void *xprt_ctx = NULL;
Willy Tarreau286ec682017-08-09 16:35:44 +02001038 uint32_t conn_flags = 0;
Willy Tarreaue9ca8072018-12-19 18:40:58 +01001039 int is_back = 0;
Willy Tarreau8050efe2021-01-21 08:26:06 +01001040 int suspicious = 0;
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001041
1042 fdt = fdtab[fd];
1043
Willy Tarreau38e8a1c2020-06-23 10:04:54 +02001044 /* When DEBUG_FD is set, we also report closed FDs that have a
1045 * non-null event count to detect stuck ones.
1046 */
Willy Tarreau13c1a012020-06-29 14:23:31 +02001047 if (!fdt.owner) {
Willy Tarreau38e8a1c2020-06-23 10:04:54 +02001048#ifdef DEBUG_FD
Willy Tarreau13c1a012020-06-29 14:23:31 +02001049 if (!fdt.event_count)
Willy Tarreau38e8a1c2020-06-23 10:04:54 +02001050#endif
Willy Tarreau13c1a012020-06-29 14:23:31 +02001051 goto skip; // closed
1052 }
Willy Tarreau586f71b2020-12-11 15:54:36 +01001053 else if (fdt.iocb == sock_conn_iocb) {
Willy Tarreaueb0595d2021-01-20 14:13:46 +01001054 conn = (const struct connection *)fdt.owner;
1055 conn_flags = conn->flags;
1056 mux = conn->mux;
1057 ctx = conn->ctx;
Willy Tarreau37be9532021-01-20 14:40:04 +01001058 xprt = conn->xprt;
1059 xprt_ctx = conn->xprt_ctx;
Willy Tarreaueb0595d2021-01-20 14:13:46 +01001060 li = objt_listener(conn->target);
1061 sv = objt_server(conn->target);
1062 px = objt_proxy(conn->target);
1063 is_back = conn_is_back(conn);
Willy Tarreaudacfde42021-01-21 09:07:29 +01001064 if (atleast2(fdt.thread_mask))
1065 suspicious = 1;
1066 if (conn->handle.fd != fd)
1067 suspicious = 1;
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001068 }
Willy Tarreaua74cb382020-10-15 21:29:49 +02001069 else if (fdt.iocb == sock_accept_iocb)
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001070 li = fdt.owner;
1071
Willy Tarreaudacfde42021-01-21 09:07:29 +01001072 if (!fdt.thread_mask)
1073 suspicious = 1;
1074
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001075 chunk_printf(&trash,
Willy Tarreaucf12f2e2020-03-03 17:29:58 +01001076 " %5d : st=0x%02x(R:%c%c W:%c%c) ev=0x%02x(%c%c%c%c%c) [%c%c] tmask=0x%lx umask=0x%lx owner=%p iocb=%p(",
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001077 fd,
1078 fdt.state,
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001079 (fdt.state & FD_EV_READY_R) ? 'R' : 'r',
1080 (fdt.state & FD_EV_ACTIVE_R) ? 'A' : 'a',
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001081 (fdt.state & FD_EV_READY_W) ? 'R' : 'r',
1082 (fdt.state & FD_EV_ACTIVE_W) ? 'A' : 'a',
1083 fdt.ev,
1084 (fdt.ev & FD_POLL_HUP) ? 'H' : 'h',
1085 (fdt.ev & FD_POLL_ERR) ? 'E' : 'e',
1086 (fdt.ev & FD_POLL_OUT) ? 'O' : 'o',
1087 (fdt.ev & FD_POLL_PRI) ? 'P' : 'p',
1088 (fdt.ev & FD_POLL_IN) ? 'I' : 'i',
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001089 fdt.linger_risk ? 'L' : 'l',
1090 fdt.cloned ? 'C' : 'c',
Willy Tarreauc754b342018-03-30 15:00:15 +02001091 fdt.thread_mask, fdt.update_mask,
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001092 fdt.owner,
Willy Tarreaucf12f2e2020-03-03 17:29:58 +01001093 fdt.iocb);
1094 resolve_sym_name(&trash, NULL, fdt.iocb);
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001095
Willy Tarreau38e8a1c2020-06-23 10:04:54 +02001096 if (!fdt.owner) {
1097 chunk_appendf(&trash, ")");
1098 }
Willy Tarreau586f71b2020-12-11 15:54:36 +01001099 else if (fdt.iocb == sock_conn_iocb) {
Willy Tarreaucf12f2e2020-03-03 17:29:58 +01001100 chunk_appendf(&trash, ") back=%d cflg=0x%08x", is_back, conn_flags);
Willy Tarreaudacfde42021-01-21 09:07:29 +01001101
1102 if (conn->handle.fd != fd) {
1103 chunk_appendf(&trash, " fd=%d(BOGUS)", conn->handle.fd);
1104 suspicious = 1;
Willy Tarreaued989202021-02-05 10:54:52 +01001105 } else {
1106 struct sockaddr_storage sa;
1107 socklen_t salen;
1108
1109 salen = sizeof(sa);
1110 if (getsockname(fd, (struct sockaddr *)&sa, &salen) != -1) {
1111 if (sa.ss_family == AF_INET)
1112 chunk_appendf(&trash, " fam=ipv4 lport=%d", ntohs(((const struct sockaddr_in *)&sa)->sin_port));
1113 else if (sa.ss_family == AF_INET6)
1114 chunk_appendf(&trash, " fam=ipv6 lport=%d", ntohs(((const struct sockaddr_in6 *)&sa)->sin6_port));
1115 else if (sa.ss_family == AF_UNIX)
1116 chunk_appendf(&trash, " fam=unix");
1117 }
1118
1119 salen = sizeof(sa);
1120 if (getpeername(fd, (struct sockaddr *)&sa, &salen) != -1) {
1121 if (sa.ss_family == AF_INET)
1122 chunk_appendf(&trash, " rport=%d", ntohs(((const struct sockaddr_in *)&sa)->sin_port));
1123 else if (sa.ss_family == AF_INET6)
1124 chunk_appendf(&trash, " rport=%d", ntohs(((const struct sockaddr_in6 *)&sa)->sin6_port));
1125 }
Willy Tarreaudacfde42021-01-21 09:07:29 +01001126 }
1127
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001128 if (px)
1129 chunk_appendf(&trash, " px=%s", px->id);
1130 else if (sv)
1131 chunk_appendf(&trash, " sv=%s/%s", sv->id, sv->proxy->id);
1132 else if (li)
1133 chunk_appendf(&trash, " fe=%s", li->bind_conf->frontend->id);
Willy Tarreau35b1b482018-03-28 18:41:30 +02001134
Willy Tarreaub011d8f2018-03-30 14:41:19 +02001135 if (mux) {
Willy Tarreau3d2ee552018-12-19 14:12:10 +01001136 chunk_appendf(&trash, " mux=%s ctx=%p", mux->name, ctx);
Willy Tarreaudacfde42021-01-21 09:07:29 +01001137 if (!ctx)
1138 suspicious = 1;
Willy Tarreaub011d8f2018-03-30 14:41:19 +02001139 if (mux->show_fd)
Willy Tarreau8050efe2021-01-21 08:26:06 +01001140 suspicious |= mux->show_fd(&trash, fdt.owner);
Willy Tarreaub011d8f2018-03-30 14:41:19 +02001141 }
Willy Tarreau35b1b482018-03-28 18:41:30 +02001142 else
1143 chunk_appendf(&trash, " nomux");
Willy Tarreau37be9532021-01-20 14:40:04 +01001144
1145 chunk_appendf(&trash, " xprt=%s", xprt ? xprt->name : "");
Willy Tarreau108a2712021-01-20 15:30:56 +01001146 if (xprt) {
1147 if (xprt_ctx || xprt->show_fd)
1148 chunk_appendf(&trash, " xprt_ctx=%p", xprt_ctx);
1149 if (xprt->show_fd)
Willy Tarreau8050efe2021-01-21 08:26:06 +01001150 suspicious |= xprt->show_fd(&trash, conn, xprt_ctx);
Willy Tarreau108a2712021-01-20 15:30:56 +01001151 }
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001152 }
Willy Tarreaua74cb382020-10-15 21:29:49 +02001153 else if (fdt.iocb == sock_accept_iocb) {
Willy Tarreaued989202021-02-05 10:54:52 +01001154 struct sockaddr_storage sa;
1155 socklen_t salen;
1156
Willy Tarreaucf12f2e2020-03-03 17:29:58 +01001157 chunk_appendf(&trash, ") l.st=%s fe=%s",
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001158 listener_state_str(li),
1159 li->bind_conf->frontend->id);
Willy Tarreaued989202021-02-05 10:54:52 +01001160
1161 salen = sizeof(sa);
1162 if (getsockname(fd, (struct sockaddr *)&sa, &salen) != -1) {
1163 if (sa.ss_family == AF_INET)
1164 chunk_appendf(&trash, " fam=ipv4 lport=%d", ntohs(((const struct sockaddr_in *)&sa)->sin_port));
1165 else if (sa.ss_family == AF_INET6)
1166 chunk_appendf(&trash, " fam=ipv6 lport=%d", ntohs(((const struct sockaddr_in6 *)&sa)->sin6_port));
1167 else if (sa.ss_family == AF_UNIX)
1168 chunk_appendf(&trash, " fam=unix");
1169 }
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001170 }
Willy Tarreaueb0595d2021-01-20 14:13:46 +01001171 else
1172 chunk_appendf(&trash, ")");
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001173
Willy Tarreau38e8a1c2020-06-23 10:04:54 +02001174#ifdef DEBUG_FD
1175 chunk_appendf(&trash, " evcnt=%u", fdtab[fd].event_count);
Willy Tarreaudacfde42021-01-21 09:07:29 +01001176 if (fdtab[fd].event_count >= 1000000)
1177 suspicious = 1;
Willy Tarreau38e8a1c2020-06-23 10:04:54 +02001178#endif
Willy Tarreau8050efe2021-01-21 08:26:06 +01001179 chunk_appendf(&trash, "%s\n", suspicious ? " !" : "");
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001180
Willy Tarreau06d80a92017-10-19 14:32:15 +02001181 if (ci_putchk(si_ic(si), &trash) == -1) {
Willy Tarreaudb398432018-11-15 11:08:52 +01001182 si_rx_room_blk(si);
Willy Tarreauca1b1572018-12-18 15:45:11 +01001183 appctx->ctx.cli.i0 = fd;
1184 ret = 0;
1185 break;
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001186 }
1187 skip:
1188 if (appctx->st2 == STAT_ST_END)
1189 break;
1190
1191 fd++;
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001192 }
1193
Willy Tarreauca1b1572018-12-18 15:45:11 +01001194 end:
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001195 /* dump complete */
Willy Tarreauca1b1572018-12-18 15:45:11 +01001196
1197 thread_release();
1198 return ret;
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001199}
1200
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01001201/* This function dumps some activity counters used by developers and support to
1202 * rule out some hypothesis during bug reports. It returns 0 if the output
1203 * buffer is full and it needs to be called again, otherwise non-zero. It dumps
1204 * everything at once in the buffer and is not designed to do it in multiple
1205 * passes.
1206 */
1207static int cli_io_handler_show_activity(struct appctx *appctx)
1208{
1209 struct stream_interface *si = appctx->owner;
1210 int thr;
1211
1212 if (unlikely(si_ic(si)->flags & (CF_WRITE_ERROR|CF_SHUTW)))
1213 return 1;
1214
1215 chunk_reset(&trash);
1216
Willy Tarreaud78d08f2019-05-28 16:32:06 +02001217#undef SHOW_TOT
1218#define SHOW_TOT(t, x) \
Willy Tarreaua0211b82019-05-28 15:09:08 +02001219 do { \
1220 unsigned int _v[MAX_THREADS]; \
1221 unsigned int _tot; \
1222 const unsigned int _nbt = global.nbthread; \
1223 for (_tot = t = 0; t < _nbt; t++) \
1224 _tot += _v[t] = (x); \
1225 if (_nbt == 1) { \
1226 chunk_appendf(&trash, " %u\n", _tot); \
1227 break; \
1228 } \
1229 chunk_appendf(&trash, " %u [", _tot); \
1230 for (t = 0; t < _nbt; t++) \
1231 chunk_appendf(&trash, " %u", _v[t]); \
1232 chunk_appendf(&trash, " ]\n"); \
1233 } while (0)
1234
Willy Tarreaud78d08f2019-05-28 16:32:06 +02001235#undef SHOW_AVG
1236#define SHOW_AVG(t, x) \
1237 do { \
1238 unsigned int _v[MAX_THREADS]; \
1239 unsigned int _tot; \
1240 const unsigned int _nbt = global.nbthread; \
1241 for (_tot = t = 0; t < _nbt; t++) \
1242 _tot += _v[t] = (x); \
1243 if (_nbt == 1) { \
1244 chunk_appendf(&trash, " %u\n", _tot); \
1245 break; \
1246 } \
1247 chunk_appendf(&trash, " %u [", (_tot + _nbt/2) / _nbt); \
1248 for (t = 0; t < _nbt; t++) \
1249 chunk_appendf(&trash, " %u", _v[t]); \
1250 chunk_appendf(&trash, " ]\n"); \
1251 } while (0)
1252
Willy Tarreaua0211b82019-05-28 15:09:08 +02001253 chunk_appendf(&trash, "thread_id: %u (%u..%u)\n", tid + 1, 1, global.nbthread);
1254 chunk_appendf(&trash, "date_now: %lu.%06lu\n", (long)now.tv_sec, (long)now.tv_usec);
Willy Tarreaua00cf9b2020-06-17 20:44:28 +02001255 chunk_appendf(&trash, "ctxsw:"); SHOW_TOT(thr, activity[thr].ctxsw);
1256 chunk_appendf(&trash, "tasksw:"); SHOW_TOT(thr, activity[thr].tasksw);
1257 chunk_appendf(&trash, "empty_rq:"); SHOW_TOT(thr, activity[thr].empty_rq);
1258 chunk_appendf(&trash, "long_rq:"); SHOW_TOT(thr, activity[thr].long_rq);
Willy Tarreaud78d08f2019-05-28 16:32:06 +02001259 chunk_appendf(&trash, "loops:"); SHOW_TOT(thr, activity[thr].loops);
Willy Tarreaud78d08f2019-05-28 16:32:06 +02001260 chunk_appendf(&trash, "wake_tasks:"); SHOW_TOT(thr, activity[thr].wake_tasks);
1261 chunk_appendf(&trash, "wake_signal:"); SHOW_TOT(thr, activity[thr].wake_signal);
Willy Tarreaue5451532020-06-17 20:25:18 +02001262 chunk_appendf(&trash, "poll_io:"); SHOW_TOT(thr, activity[thr].poll_io);
Willy Tarreaud78d08f2019-05-28 16:32:06 +02001263 chunk_appendf(&trash, "poll_exp:"); SHOW_TOT(thr, activity[thr].poll_exp);
Willy Tarreaue4063862020-06-17 20:35:33 +02001264 chunk_appendf(&trash, "poll_drop_fd:"); SHOW_TOT(thr, activity[thr].poll_drop_fd);
1265 chunk_appendf(&trash, "poll_dead_fd:"); SHOW_TOT(thr, activity[thr].poll_dead_fd);
1266 chunk_appendf(&trash, "poll_skip_fd:"); SHOW_TOT(thr, activity[thr].poll_skip_fd);
Willy Tarreaud78d08f2019-05-28 16:32:06 +02001267 chunk_appendf(&trash, "conn_dead:"); SHOW_TOT(thr, activity[thr].conn_dead);
Willy Tarreau7af4fa92020-06-17 20:49:49 +02001268 chunk_appendf(&trash, "stream_calls:"); SHOW_TOT(thr, activity[thr].stream_calls);
Willy Tarreaua8b2ce02019-05-28 17:04:16 +02001269 chunk_appendf(&trash, "pool_fail:"); SHOW_TOT(thr, activity[thr].pool_fail);
1270 chunk_appendf(&trash, "buf_wait:"); SHOW_TOT(thr, activity[thr].buf_wait);
Willy Tarreaud78d08f2019-05-28 16:32:06 +02001271 chunk_appendf(&trash, "cpust_ms_tot:"); SHOW_TOT(thr, activity[thr].cpust_total / 2);
1272 chunk_appendf(&trash, "cpust_ms_1s:"); SHOW_TOT(thr, read_freq_ctr(&activity[thr].cpust_1s) / 2);
1273 chunk_appendf(&trash, "cpust_ms_15s:"); SHOW_TOT(thr, read_freq_ctr_period(&activity[thr].cpust_15s, 15000) / 2);
1274 chunk_appendf(&trash, "avg_loop_us:"); SHOW_AVG(thr, swrate_avg(activity[thr].avg_loop_us, TIME_STATS_SAMPLES));
1275 chunk_appendf(&trash, "accepted:"); SHOW_TOT(thr, activity[thr].accepted);
1276 chunk_appendf(&trash, "accq_pushed:"); SHOW_TOT(thr, activity[thr].accq_pushed);
1277 chunk_appendf(&trash, "accq_full:"); SHOW_TOT(thr, activity[thr].accq_full);
Willy Tarreaue6182842019-04-15 18:54:10 +02001278#ifdef USE_THREAD
Willy Tarreaud78d08f2019-05-28 16:32:06 +02001279 chunk_appendf(&trash, "accq_ring:"); SHOW_TOT(thr, (accept_queue_rings[thr].tail - accept_queue_rings[thr].head + ACCEPT_QUEUE_SIZE) % ACCEPT_QUEUE_SIZE);
Willy Tarreaub1591322020-06-29 14:17:59 +02001280 chunk_appendf(&trash, "fd_takeover:"); SHOW_TOT(thr, activity[thr].fd_takeover);
Willy Tarreaue6182842019-04-15 18:54:10 +02001281#endif
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01001282
Willy Tarreaud6a78502019-05-27 07:03:38 +02001283#if defined(DEBUG_DEV)
1284 /* keep these ones at the end */
Willy Tarreaud78d08f2019-05-28 16:32:06 +02001285 chunk_appendf(&trash, "ctr0:"); SHOW_TOT(thr, activity[thr].ctr0);
1286 chunk_appendf(&trash, "ctr1:"); SHOW_TOT(thr, activity[thr].ctr1);
1287 chunk_appendf(&trash, "ctr2:"); SHOW_TOT(thr, activity[thr].ctr2);
Willy Tarreaud6a78502019-05-27 07:03:38 +02001288#endif
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01001289
1290 if (ci_putchk(si_ic(si), &trash) == -1) {
1291 chunk_reset(&trash);
1292 chunk_printf(&trash, "[output too large, cannot dump]\n");
Willy Tarreaudb398432018-11-15 11:08:52 +01001293 si_rx_room_blk(si);
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01001294 }
1295
Willy Tarreaud78d08f2019-05-28 16:32:06 +02001296#undef SHOW_AVG
1297#undef SHOW_TOT
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01001298 /* dump complete */
1299 return 1;
1300}
1301
William Lallemandeceddf72016-12-15 18:06:44 +01001302/*
Willy Tarreau3af9d832016-12-16 12:58:09 +01001303 * CLI IO handler for `show cli sockets`.
1304 * Uses ctx.cli.p0 to store the restart pointer.
William Lallemandeceddf72016-12-15 18:06:44 +01001305 */
1306static int cli_io_handler_show_cli_sock(struct appctx *appctx)
1307{
1308 struct bind_conf *bind_conf;
1309 struct stream_interface *si = appctx->owner;
1310
1311 chunk_reset(&trash);
1312
1313 switch (appctx->st2) {
1314 case STAT_ST_INIT:
1315 chunk_printf(&trash, "# socket lvl processes\n");
Willy Tarreau06d80a92017-10-19 14:32:15 +02001316 if (ci_putchk(si_ic(si), &trash) == -1) {
Willy Tarreaudb398432018-11-15 11:08:52 +01001317 si_rx_room_blk(si);
William Lallemandeceddf72016-12-15 18:06:44 +01001318 return 0;
1319 }
William Lallemandeceddf72016-12-15 18:06:44 +01001320 appctx->st2 = STAT_ST_LIST;
Tim Duesterhus588b3142020-05-29 14:35:51 +02001321 /* fall through */
William Lallemandeceddf72016-12-15 18:06:44 +01001322
1323 case STAT_ST_LIST:
1324 if (global.stats_fe) {
1325 list_for_each_entry(bind_conf, &global.stats_fe->conf.bind, by_fe) {
1326 struct listener *l;
1327
1328 /*
Willy Tarreau3af9d832016-12-16 12:58:09 +01001329 * get the latest dumped node in appctx->ctx.cli.p0
William Lallemandeceddf72016-12-15 18:06:44 +01001330 * if the current node is the first of the list
1331 */
1332
Willy Tarreau3af9d832016-12-16 12:58:09 +01001333 if (appctx->ctx.cli.p0 &&
1334 &bind_conf->by_fe == (&global.stats_fe->conf.bind)->n) {
William Lallemandeceddf72016-12-15 18:06:44 +01001335 /* change the current node to the latest dumped and continue the loop */
Willy Tarreau3af9d832016-12-16 12:58:09 +01001336 bind_conf = LIST_ELEM(appctx->ctx.cli.p0, typeof(bind_conf), by_fe);
William Lallemandeceddf72016-12-15 18:06:44 +01001337 continue;
1338 }
1339
1340 list_for_each_entry(l, &bind_conf->listeners, by_bind) {
1341
1342 char addr[46];
1343 char port[6];
1344
Willy Tarreau37159062020-08-27 07:48:42 +02001345 if (l->rx.addr.ss_family == AF_UNIX) {
William Lallemandeceddf72016-12-15 18:06:44 +01001346 const struct sockaddr_un *un;
1347
Willy Tarreau37159062020-08-27 07:48:42 +02001348 un = (struct sockaddr_un *)&l->rx.addr;
William Lallemande58915f2019-04-01 11:30:05 +02001349 if (un->sun_path[0] == '\0') {
William Lallemand75812a72019-04-01 11:30:04 +02001350 chunk_appendf(&trash, "abns@%s ", un->sun_path+1);
William Lallemande58915f2019-04-01 11:30:05 +02001351 } else {
1352 chunk_appendf(&trash, "unix@%s ", un->sun_path);
1353 }
Willy Tarreau37159062020-08-27 07:48:42 +02001354 } else if (l->rx.addr.ss_family == AF_INET) {
1355 addr_to_str(&l->rx.addr, addr, sizeof(addr));
1356 port_to_str(&l->rx.addr, port, sizeof(port));
William Lallemande58915f2019-04-01 11:30:05 +02001357 chunk_appendf(&trash, "ipv4@%s:%s ", addr, port);
Willy Tarreau37159062020-08-27 07:48:42 +02001358 } else if (l->rx.addr.ss_family == AF_INET6) {
1359 addr_to_str(&l->rx.addr, addr, sizeof(addr));
1360 port_to_str(&l->rx.addr, port, sizeof(port));
William Lallemande58915f2019-04-01 11:30:05 +02001361 chunk_appendf(&trash, "ipv6@[%s]:%s ", addr, port);
Willy Tarreau37159062020-08-27 07:48:42 +02001362 } else if (l->rx.addr.ss_family == AF_CUST_SOCKPAIR) {
1363 chunk_appendf(&trash, "sockpair@%d ", ((struct sockaddr_in *)&l->rx.addr)->sin_addr.s_addr);
William Lallemandeceddf72016-12-15 18:06:44 +01001364 } else
William Lallemand26314342018-10-26 14:47:41 +02001365 chunk_appendf(&trash, "unknown ");
William Lallemandeceddf72016-12-15 18:06:44 +01001366
William Lallemand07a62f72017-05-24 00:57:40 +02001367 if ((bind_conf->level & ACCESS_LVL_MASK) == ACCESS_LVL_ADMIN)
William Lallemandeceddf72016-12-15 18:06:44 +01001368 chunk_appendf(&trash, "admin ");
William Lallemand07a62f72017-05-24 00:57:40 +02001369 else if ((bind_conf->level & ACCESS_LVL_MASK) == ACCESS_LVL_OPER)
1370 chunk_appendf(&trash, "operator ");
1371 else if ((bind_conf->level & ACCESS_LVL_MASK) == ACCESS_LVL_USER)
1372 chunk_appendf(&trash, "user ");
William Lallemandeceddf72016-12-15 18:06:44 +01001373 else
1374 chunk_appendf(&trash, " ");
1375
Willy Tarreaue26993c2020-09-03 07:18:55 +02001376 if (bind_conf->settings.bind_proc != 0) {
William Lallemandeceddf72016-12-15 18:06:44 +01001377 int pos;
Willy Tarreaue26993c2020-09-03 07:18:55 +02001378 for (pos = 0; pos < 8 * sizeof(bind_conf->settings.bind_proc); pos++) {
1379 if (bind_conf->settings.bind_proc & (1UL << pos)) {
William Lallemandeceddf72016-12-15 18:06:44 +01001380 chunk_appendf(&trash, "%d,", pos+1);
1381 }
1382 }
1383 /* replace the latest comma by a newline */
Willy Tarreau843b7cb2018-07-13 10:54:26 +02001384 trash.area[trash.data-1] = '\n';
William Lallemandeceddf72016-12-15 18:06:44 +01001385
1386 } else {
1387 chunk_appendf(&trash, "all\n");
1388 }
1389
Willy Tarreau06d80a92017-10-19 14:32:15 +02001390 if (ci_putchk(si_ic(si), &trash) == -1) {
Willy Tarreaudb398432018-11-15 11:08:52 +01001391 si_rx_room_blk(si);
William Lallemandeceddf72016-12-15 18:06:44 +01001392 return 0;
1393 }
1394 }
Willy Tarreau3af9d832016-12-16 12:58:09 +01001395 appctx->ctx.cli.p0 = &bind_conf->by_fe; /* store the latest list node dumped */
William Lallemandeceddf72016-12-15 18:06:44 +01001396 }
1397 }
Tim Duesterhus588b3142020-05-29 14:35:51 +02001398 /* fall through */
William Lallemandeceddf72016-12-15 18:06:44 +01001399 default:
1400 appctx->st2 = STAT_ST_FIN;
1401 return 1;
1402 }
1403}
1404
1405
Willy Tarreau0a739292016-11-22 20:21:23 +01001406/* parse a "show env" CLI request. Returns 0 if it needs to continue, 1 if it
Willy Tarreauf6710f82016-12-16 17:45:44 +01001407 * wants to stop here. It puts the variable to be dumped into cli.p0 if a single
1408 * variable is requested otherwise puts environ there.
Willy Tarreau0a739292016-11-22 20:21:23 +01001409 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02001410static int cli_parse_show_env(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreau0a739292016-11-22 20:21:23 +01001411{
1412 extern char **environ;
Willy Tarreauf6710f82016-12-16 17:45:44 +01001413 char **var;
Willy Tarreau0a739292016-11-22 20:21:23 +01001414
1415 if (!cli_has_level(appctx, ACCESS_LVL_OPER))
1416 return 1;
1417
Willy Tarreauf6710f82016-12-16 17:45:44 +01001418 var = environ;
Willy Tarreau0a739292016-11-22 20:21:23 +01001419
1420 if (*args[2]) {
1421 int len = strlen(args[2]);
1422
Willy Tarreauf6710f82016-12-16 17:45:44 +01001423 for (; *var; var++) {
1424 if (strncmp(*var, args[2], len) == 0 &&
1425 (*var)[len] == '=')
Willy Tarreau0a739292016-11-22 20:21:23 +01001426 break;
1427 }
Willy Tarreau9d008692019-08-09 11:21:01 +02001428 if (!*var)
1429 return cli_err(appctx, "Variable not found\n");
1430
Willy Tarreau0a739292016-11-22 20:21:23 +01001431 appctx->st2 = STAT_ST_END;
1432 }
Willy Tarreauf6710f82016-12-16 17:45:44 +01001433 appctx->ctx.cli.p0 = var;
Willy Tarreau0a739292016-11-22 20:21:23 +01001434 return 0;
1435}
1436
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001437/* parse a "show fd" CLI request. Returns 0 if it needs to continue, 1 if it
1438 * wants to stop here. It puts the FD number into cli.i0 if a specific FD is
1439 * requested and sets st2 to STAT_ST_END, otherwise leaves 0 in i0.
1440 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02001441static int cli_parse_show_fd(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02001442{
1443 if (!cli_has_level(appctx, ACCESS_LVL_OPER))
1444 return 1;
1445
1446 appctx->ctx.cli.i0 = 0;
1447
1448 if (*args[2]) {
1449 appctx->ctx.cli.i0 = atoi(args[2]);
1450 appctx->st2 = STAT_ST_END;
1451 }
1452 return 0;
1453}
1454
Willy Tarreau599852e2016-11-22 20:33:32 +01001455/* parse a "set timeout" CLI request. It always returns 1. */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02001456static int cli_parse_set_timeout(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreau599852e2016-11-22 20:33:32 +01001457{
1458 struct stream_interface *si = appctx->owner;
1459 struct stream *s = si_strm(si);
1460
1461 if (strcmp(args[2], "cli") == 0) {
1462 unsigned timeout;
1463 const char *res;
1464
Willy Tarreau9d008692019-08-09 11:21:01 +02001465 if (!*args[3])
1466 return cli_err(appctx, "Expects an integer value.\n");
Willy Tarreau599852e2016-11-22 20:33:32 +01001467
1468 res = parse_time_err(args[3], &timeout, TIME_UNIT_S);
Willy Tarreau9d008692019-08-09 11:21:01 +02001469 if (res || timeout < 1)
1470 return cli_err(appctx, "Invalid timeout value.\n");
Willy Tarreau599852e2016-11-22 20:33:32 +01001471
1472 s->req.rto = s->res.wto = 1 + MS_TO_TICKS(timeout*1000);
1473 task_wakeup(s->task, TASK_WOKEN_MSG); // recompute timeouts
1474 return 1;
1475 }
Willy Tarreau9d008692019-08-09 11:21:01 +02001476
1477 return cli_err(appctx, "'set timeout' only supports 'cli'.\n");
Willy Tarreau599852e2016-11-22 20:33:32 +01001478}
1479
Willy Tarreau2af99412016-11-23 11:10:59 +01001480/* parse a "set maxconn global" command. It always returns 1. */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02001481static int cli_parse_set_maxconn_global(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreau2af99412016-11-23 11:10:59 +01001482{
1483 int v;
1484
1485 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
1486 return 1;
1487
Willy Tarreau9d008692019-08-09 11:21:01 +02001488 if (!*args[3])
1489 return cli_err(appctx, "Expects an integer value.\n");
Willy Tarreau2af99412016-11-23 11:10:59 +01001490
1491 v = atoi(args[3]);
Willy Tarreau9d008692019-08-09 11:21:01 +02001492 if (v > global.hardmaxconn)
1493 return cli_err(appctx, "Value out of range.\n");
Willy Tarreau2af99412016-11-23 11:10:59 +01001494
1495 /* check for unlimited values */
1496 if (v <= 0)
1497 v = global.hardmaxconn;
1498
1499 global.maxconn = v;
1500
1501 /* Dequeues all of the listeners waiting for a resource */
Willy Tarreau241797a2019-12-10 14:10:52 +01001502 dequeue_all_listeners();
Willy Tarreau2af99412016-11-23 11:10:59 +01001503
1504 return 1;
1505}
1506
Andjelko Iharosc4df59e2017-07-20 11:59:48 +02001507static int set_severity_output(int *target, char *argument)
1508{
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001509 if (strcmp(argument, "none") == 0) {
Andjelko Iharosc4df59e2017-07-20 11:59:48 +02001510 *target = CLI_SEVERITY_NONE;
1511 return 1;
1512 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001513 else if (strcmp(argument, "number") == 0) {
Andjelko Iharosc4df59e2017-07-20 11:59:48 +02001514 *target = CLI_SEVERITY_NUMBER;
1515 return 1;
1516 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001517 else if (strcmp(argument, "string") == 0) {
Andjelko Iharosc4df59e2017-07-20 11:59:48 +02001518 *target = CLI_SEVERITY_STRING;
1519 return 1;
1520 }
1521 return 0;
1522}
1523
1524/* parse a "set severity-output" command. */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02001525static int cli_parse_set_severity_output(char **args, char *payload, struct appctx *appctx, void *private)
Andjelko Iharosc4df59e2017-07-20 11:59:48 +02001526{
1527 if (*args[2] && set_severity_output(&appctx->cli_severity_output, args[2]))
1528 return 0;
1529
Willy Tarreau9d008692019-08-09 11:21:01 +02001530 return cli_err(appctx, "one of 'none', 'number', 'string' is a required argument\n");
Andjelko Iharosc4df59e2017-07-20 11:59:48 +02001531}
William Lallemandeceddf72016-12-15 18:06:44 +01001532
William Lallemand67a234f2018-12-13 09:05:45 +01001533
1534/* show the level of the current CLI session */
1535static int cli_parse_show_lvl(char **args, char *payload, struct appctx *appctx, void *private)
1536{
William Lallemand67a234f2018-12-13 09:05:45 +01001537 if ((appctx->cli_level & ACCESS_LVL_MASK) == ACCESS_LVL_ADMIN)
Willy Tarreau9d008692019-08-09 11:21:01 +02001538 return cli_msg(appctx, LOG_INFO, "admin\n");
William Lallemand67a234f2018-12-13 09:05:45 +01001539 else if ((appctx->cli_level & ACCESS_LVL_MASK) == ACCESS_LVL_OPER)
Willy Tarreau9d008692019-08-09 11:21:01 +02001540 return cli_msg(appctx, LOG_INFO, "operator\n");
William Lallemand67a234f2018-12-13 09:05:45 +01001541 else if ((appctx->cli_level & ACCESS_LVL_MASK) == ACCESS_LVL_USER)
Willy Tarreau9d008692019-08-09 11:21:01 +02001542 return cli_msg(appctx, LOG_INFO, "user\n");
William Lallemand67a234f2018-12-13 09:05:45 +01001543 else
Willy Tarreau9d008692019-08-09 11:21:01 +02001544 return cli_msg(appctx, LOG_INFO, "unknown\n");
William Lallemand67a234f2018-12-13 09:05:45 +01001545}
1546
1547/* parse and set the CLI level dynamically */
1548static int cli_parse_set_lvl(char **args, char *payload, struct appctx *appctx, void *private)
1549{
William Lallemandad032882019-07-01 10:56:15 +02001550 /* this will ask the applet to not output a \n after the command */
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001551 if (strcmp(args[1], "-") == 0)
William Lallemandad032882019-07-01 10:56:15 +02001552 appctx->st1 |= APPCTX_CLI_ST1_NOLF;
1553
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001554 if (strcmp(args[0], "operator") == 0) {
William Lallemand67a234f2018-12-13 09:05:45 +01001555 if (!cli_has_level(appctx, ACCESS_LVL_OPER)) {
1556 return 1;
1557 }
1558 appctx->cli_level &= ~ACCESS_LVL_MASK;
1559 appctx->cli_level |= ACCESS_LVL_OPER;
1560
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001561 } else if (strcmp(args[0], "user") == 0) {
William Lallemand67a234f2018-12-13 09:05:45 +01001562 if (!cli_has_level(appctx, ACCESS_LVL_USER)) {
1563 return 1;
1564 }
1565 appctx->cli_level &= ~ACCESS_LVL_MASK;
1566 appctx->cli_level |= ACCESS_LVL_USER;
1567 }
Willy Tarreauabb9f9b2019-10-24 17:55:53 +02001568 appctx->cli_level &= ~ACCESS_EXPERT;
1569 return 1;
1570}
1571
1572
1573/* parse and set the CLI expert-mode dynamically */
1574static int cli_parse_expert_mode(char **args, char *payload, struct appctx *appctx, void *private)
1575{
1576 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
1577 return 1;
1578
1579 if (!*args[1])
1580 return (appctx->cli_level & ACCESS_EXPERT)
1581 ? cli_msg(appctx, LOG_INFO, "expert-mode is ON\n")
1582 : cli_msg(appctx, LOG_INFO, "expert-mode is OFF\n");
1583
1584 appctx->cli_level &= ~ACCESS_EXPERT;
1585 if (strcmp(args[1], "on") == 0)
1586 appctx->cli_level |= ACCESS_EXPERT;
William Lallemand67a234f2018-12-13 09:05:45 +01001587 return 1;
1588}
1589
William Lallemanda57b7e32018-12-14 21:11:31 +01001590
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02001591int cli_parse_default(char **args, char *payload, struct appctx *appctx, void *private)
William Lallemandeceddf72016-12-15 18:06:44 +01001592{
1593 return 0;
1594}
1595
Willy Tarreau45c742b2016-11-24 14:51:17 +01001596/* parse a "set rate-limit" command. It always returns 1. */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02001597static int cli_parse_set_ratelimit(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreau45c742b2016-11-24 14:51:17 +01001598{
1599 int v;
1600 int *res;
1601 int mul = 1;
1602
1603 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
1604 return 1;
1605
1606 if (strcmp(args[2], "connections") == 0 && strcmp(args[3], "global") == 0)
1607 res = &global.cps_lim;
1608 else if (strcmp(args[2], "sessions") == 0 && strcmp(args[3], "global") == 0)
1609 res = &global.sps_lim;
1610#ifdef USE_OPENSSL
1611 else if (strcmp(args[2], "ssl-sessions") == 0 && strcmp(args[3], "global") == 0)
1612 res = &global.ssl_lim;
1613#endif
1614 else if (strcmp(args[2], "http-compression") == 0 && strcmp(args[3], "global") == 0) {
1615 res = &global.comp_rate_lim;
1616 mul = 1024;
1617 }
1618 else {
Willy Tarreau9d008692019-08-09 11:21:01 +02001619 return cli_err(appctx,
Willy Tarreau45c742b2016-11-24 14:51:17 +01001620 "'set rate-limit' only supports :\n"
1621 " - 'connections global' to set the per-process maximum connection rate\n"
1622 " - 'sessions global' to set the per-process maximum session rate\n"
1623#ifdef USE_OPENSSL
Aurélien Nephtalib53e2082018-03-11 16:55:02 +01001624 " - 'ssl-sessions global' to set the per-process maximum SSL session rate\n"
Willy Tarreau45c742b2016-11-24 14:51:17 +01001625#endif
Willy Tarreau9d008692019-08-09 11:21:01 +02001626 " - 'http-compression global' to set the per-process maximum compression speed in kB/s\n");
Willy Tarreau45c742b2016-11-24 14:51:17 +01001627 }
1628
Willy Tarreau9d008692019-08-09 11:21:01 +02001629 if (!*args[4])
1630 return cli_err(appctx, "Expects an integer value.\n");
Willy Tarreau45c742b2016-11-24 14:51:17 +01001631
1632 v = atoi(args[4]);
Willy Tarreau9d008692019-08-09 11:21:01 +02001633 if (v < 0)
1634 return cli_err(appctx, "Value out of range.\n");
Willy Tarreau45c742b2016-11-24 14:51:17 +01001635
1636 *res = v * mul;
1637
1638 /* Dequeues all of the listeners waiting for a resource */
Willy Tarreau241797a2019-12-10 14:10:52 +01001639 dequeue_all_listeners();
Willy Tarreau45c742b2016-11-24 14:51:17 +01001640
1641 return 1;
1642}
1643
William Lallemandf6975e92017-05-26 17:42:10 +02001644/* parse the "expose-fd" argument on the bind lines */
1645static int bind_parse_expose_fd(char **args, int cur_arg, struct proxy *px, struct bind_conf *conf, char **err)
1646{
1647 if (!*args[cur_arg + 1]) {
1648 memprintf(err, "'%s' : missing fd type", args[cur_arg]);
1649 return ERR_ALERT | ERR_FATAL;
1650 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001651 if (strcmp(args[cur_arg + 1], "listeners") == 0) {
William Lallemandf6975e92017-05-26 17:42:10 +02001652 conf->level |= ACCESS_FD_LISTENERS;
1653 } else {
1654 memprintf(err, "'%s' only supports 'listeners' (got '%s')",
1655 args[cur_arg], args[cur_arg+1]);
1656 return ERR_ALERT | ERR_FATAL;
1657 }
1658
1659 return 0;
1660}
1661
William Lallemand74c24fb2016-11-21 17:18:36 +01001662/* parse the "level" argument on the bind lines */
1663static int bind_parse_level(char **args, int cur_arg, struct proxy *px, struct bind_conf *conf, char **err)
1664{
1665 if (!*args[cur_arg + 1]) {
1666 memprintf(err, "'%s' : missing level", args[cur_arg]);
1667 return ERR_ALERT | ERR_FATAL;
1668 }
1669
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001670 if (strcmp(args[cur_arg + 1], "user") == 0) {
William Lallemand07a62f72017-05-24 00:57:40 +02001671 conf->level &= ~ACCESS_LVL_MASK;
1672 conf->level |= ACCESS_LVL_USER;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001673 } else if (strcmp(args[cur_arg + 1], "operator") == 0) {
William Lallemand07a62f72017-05-24 00:57:40 +02001674 conf->level &= ~ACCESS_LVL_MASK;
1675 conf->level |= ACCESS_LVL_OPER;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001676 } else if (strcmp(args[cur_arg + 1], "admin") == 0) {
William Lallemand07a62f72017-05-24 00:57:40 +02001677 conf->level &= ~ACCESS_LVL_MASK;
1678 conf->level |= ACCESS_LVL_ADMIN;
1679 } else {
William Lallemand74c24fb2016-11-21 17:18:36 +01001680 memprintf(err, "'%s' only supports 'user', 'operator', and 'admin' (got '%s')",
1681 args[cur_arg], args[cur_arg+1]);
1682 return ERR_ALERT | ERR_FATAL;
1683 }
1684
1685 return 0;
1686}
1687
Andjelko Iharosc4df59e2017-07-20 11:59:48 +02001688static int bind_parse_severity_output(char **args, int cur_arg, struct proxy *px, struct bind_conf *conf, char **err)
1689{
1690 if (!*args[cur_arg + 1]) {
1691 memprintf(err, "'%s' : missing severity format", args[cur_arg]);
1692 return ERR_ALERT | ERR_FATAL;
1693 }
1694
1695 if (set_severity_output(&conf->severity_output, args[cur_arg+1]))
1696 return 0;
1697 else {
1698 memprintf(err, "'%s' only supports 'none', 'number', and 'string' (got '%s')",
1699 args[cur_arg], args[cur_arg+1]);
1700 return ERR_ALERT | ERR_FATAL;
1701 }
1702}
1703
Olivier Houchardf886e342017-04-05 22:24:59 +02001704/* Send all the bound sockets, always returns 1 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02001705static int _getsocks(char **args, char *payload, struct appctx *appctx, void *private)
Olivier Houchardf886e342017-04-05 22:24:59 +02001706{
1707 char *cmsgbuf = NULL;
1708 unsigned char *tmpbuf = NULL;
1709 struct cmsghdr *cmsg;
1710 struct stream_interface *si = appctx->owner;
William Lallemandf6975e92017-05-26 17:42:10 +02001711 struct stream *s = si_strm(si);
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001712 struct connection *remote = cs_conn(objt_cs(si_opposite(si)->end));
Olivier Houchardf886e342017-04-05 22:24:59 +02001713 struct msghdr msghdr;
1714 struct iovec iov;
Olivier Houchard54740872017-04-06 14:45:14 +02001715 struct timeval tv = { .tv_sec = 1, .tv_usec = 0 };
Willy Tarreaub5a1f9e2020-08-19 17:03:55 +02001716 const char *ns_name, *if_name;
1717 unsigned char ns_nlen, if_nlen;
1718 int nb_queued;
1719 int cur_fd = 0;
Olivier Houchardf886e342017-04-05 22:24:59 +02001720 int *tmpfd;
1721 int tot_fd_nb = 0;
Willy Tarreauc2b7f802018-09-20 11:22:29 +02001722 int fd = -1;
Olivier Houchardf886e342017-04-05 22:24:59 +02001723 int curoff = 0;
Willy Tarreauc2b7f802018-09-20 11:22:29 +02001724 int old_fcntl = -1;
Olivier Houchardf886e342017-04-05 22:24:59 +02001725 int ret;
1726
Willy Tarreauc2b7f802018-09-20 11:22:29 +02001727 if (!remote) {
1728 ha_warning("Only works on real connections\n");
1729 goto out;
1730 }
1731
1732 fd = remote->handle.fd;
1733
Olivier Houchardf886e342017-04-05 22:24:59 +02001734 /* Temporary set the FD in blocking mode, that will make our life easier */
1735 old_fcntl = fcntl(fd, F_GETFL);
1736 if (old_fcntl < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001737 ha_warning("Couldn't get the flags for the unix socket\n");
Olivier Houchardf886e342017-04-05 22:24:59 +02001738 goto out;
1739 }
1740 cmsgbuf = malloc(CMSG_SPACE(sizeof(int) * MAX_SEND_FD));
1741 if (!cmsgbuf) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001742 ha_warning("Failed to allocate memory to send sockets\n");
Olivier Houchardf886e342017-04-05 22:24:59 +02001743 goto out;
1744 }
1745 if (fcntl(fd, F_SETFL, old_fcntl &~ O_NONBLOCK) == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001746 ha_warning("Cannot make the unix socket blocking\n");
Olivier Houchardf886e342017-04-05 22:24:59 +02001747 goto out;
1748 }
Olivier Houchard54740872017-04-06 14:45:14 +02001749 setsockopt(fd, SOL_SOCKET, SO_RCVTIMEO, (void *)&tv, sizeof(tv));
Olivier Houchardf886e342017-04-05 22:24:59 +02001750 iov.iov_base = &tot_fd_nb;
1751 iov.iov_len = sizeof(tot_fd_nb);
William Lallemandf6975e92017-05-26 17:42:10 +02001752 if (!(strm_li(s)->bind_conf->level & ACCESS_FD_LISTENERS))
Olivier Houchardf886e342017-04-05 22:24:59 +02001753 goto out;
1754 memset(&msghdr, 0, sizeof(msghdr));
1755 /*
1756 * First, calculates the total number of FD, so that we can let
Jackie Tapia749f74c2020-07-22 18:59:40 -05001757 * the caller know how much it should expect.
Olivier Houchardf886e342017-04-05 22:24:59 +02001758 */
Willy Tarreaub5a1f9e2020-08-19 17:03:55 +02001759 for (cur_fd = 0;cur_fd < global.maxsock; cur_fd++)
1760 tot_fd_nb += fdtab[cur_fd].exported;
William Lallemand5fd3b282020-01-16 15:32:08 +01001761
Olivier Houchardf886e342017-04-05 22:24:59 +02001762 if (tot_fd_nb == 0)
1763 goto out;
1764
1765 /* First send the total number of file descriptors, so that the
1766 * receiving end knows what to expect.
1767 */
1768 msghdr.msg_iov = &iov;
1769 msghdr.msg_iovlen = 1;
1770 ret = sendmsg(fd, &msghdr, 0);
1771 if (ret != sizeof(tot_fd_nb)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001772 ha_warning("Failed to send the number of sockets to send\n");
Olivier Houchardf886e342017-04-05 22:24:59 +02001773 goto out;
1774 }
1775
1776 /* Now send the fds */
1777 msghdr.msg_control = cmsgbuf;
1778 msghdr.msg_controllen = CMSG_SPACE(sizeof(int) * MAX_SEND_FD);
1779 cmsg = CMSG_FIRSTHDR(&msghdr);
1780 cmsg->cmsg_len = CMSG_LEN(MAX_SEND_FD * sizeof(int));
1781 cmsg->cmsg_level = SOL_SOCKET;
1782 cmsg->cmsg_type = SCM_RIGHTS;
1783 tmpfd = (int *)CMSG_DATA(cmsg);
1784
Olivier Houchardf886e342017-04-05 22:24:59 +02001785 /* For each socket, e message is sent, containing the following :
1786 * Size of the namespace name (or 0 if none), as an unsigned char.
1787 * The namespace name, if any
1788 * Size of the interface name (or 0 if none), as an unsigned char
1789 * The interface name, if any
Willy Tarreaucf1f1932020-08-26 10:30:09 +02001790 * 32 bits of zeroes (used to be listener options).
Olivier Houchardf886e342017-04-05 22:24:59 +02001791 */
1792 /* We will send sockets MAX_SEND_FD per MAX_SEND_FD, allocate a
Ilya Shipitsind4259502020-04-08 01:07:56 +05001793 * buffer big enough to store the socket information.
Olivier Houchardf886e342017-04-05 22:24:59 +02001794 */
Olivier Houchardf143b802017-11-04 15:13:01 +01001795 tmpbuf = malloc(MAX_SEND_FD * (1 + MAXPATHLEN + 1 + IFNAMSIZ + sizeof(int)));
Olivier Houchardf886e342017-04-05 22:24:59 +02001796 if (tmpbuf == NULL) {
Ilya Shipitsind4259502020-04-08 01:07:56 +05001797 ha_warning("Failed to allocate memory to transfer socket information\n");
Olivier Houchardf886e342017-04-05 22:24:59 +02001798 goto out;
1799 }
Willy Tarreaub5a1f9e2020-08-19 17:03:55 +02001800
1801 nb_queued = 0;
Olivier Houchardf886e342017-04-05 22:24:59 +02001802 iov.iov_base = tmpbuf;
Willy Tarreaub5a1f9e2020-08-19 17:03:55 +02001803 for (cur_fd = 0; cur_fd < global.maxsock; cur_fd++) {
1804 if (!(fdtab[cur_fd].exported))
1805 continue;
1806
1807 ns_name = if_name = "";
1808 ns_nlen = if_nlen = 0;
1809
1810 /* for now we can only retrieve namespaces and interfaces from
1811 * pure listeners.
1812 */
Willy Tarreaua74cb382020-10-15 21:29:49 +02001813 if (fdtab[cur_fd].iocb == sock_accept_iocb) {
Willy Tarreaub5a1f9e2020-08-19 17:03:55 +02001814 const struct listener *l = fdtab[cur_fd].owner;
1815
Willy Tarreau818a92e2020-09-03 07:50:19 +02001816 if (l->rx.settings->interface) {
1817 if_name = l->rx.settings->interface;
Willy Tarreaub5a1f9e2020-08-19 17:03:55 +02001818 if_nlen = strlen(if_name);
1819 }
1820
1821#ifdef USE_NS
Willy Tarreau818a92e2020-09-03 07:50:19 +02001822 if (l->rx.settings->netns) {
1823 ns_name = l->rx.settings->netns->node.key;
1824 ns_nlen = l->rx.settings->netns->name_len;
Willy Tarreaub5a1f9e2020-08-19 17:03:55 +02001825 }
1826#endif
1827 }
1828
1829 /* put the FD into the CMSG_DATA */
1830 tmpfd[nb_queued++] = cur_fd;
1831
1832 /* first block is <ns_name_len> <ns_name> */
1833 tmpbuf[curoff++] = ns_nlen;
1834 if (ns_nlen)
1835 memcpy(tmpbuf + curoff, ns_name, ns_nlen);
1836 curoff += ns_nlen;
1837
1838 /* second block is <if_name_len> <if_name> */
1839 tmpbuf[curoff++] = if_nlen;
1840 if (if_nlen)
1841 memcpy(tmpbuf + curoff, if_name, if_nlen);
1842 curoff += if_nlen;
1843
1844 /* we used to send the listener options here before 2.3 */
1845 memset(tmpbuf + curoff, 0, sizeof(int));
1846 curoff += sizeof(int);
1847
1848 /* there's a limit to how many FDs may be sent at once */
1849 if (nb_queued == MAX_SEND_FD) {
1850 iov.iov_len = curoff;
1851 if (sendmsg(fd, &msghdr, 0) != curoff) {
1852 ha_warning("Failed to transfer sockets\n");
1853 return -1;
1854 }
1855
1856 /* Wait for an ack */
1857 do {
1858 ret = recv(fd, &tot_fd_nb, sizeof(tot_fd_nb), 0);
1859 } while (ret == -1 && errno == EINTR);
1860
1861 if (ret <= 0) {
1862 ha_warning("Unexpected error while transferring sockets\n");
1863 return -1;
1864 }
1865 curoff = 0;
1866 nb_queued = 0;
1867 }
William Lallemand5fd3b282020-01-16 15:32:08 +01001868 }
1869
Willy Tarreaub5a1f9e2020-08-19 17:03:55 +02001870 /* flush pending stuff */
1871 if (nb_queued) {
Olivier Houchardf886e342017-04-05 22:24:59 +02001872 iov.iov_len = curoff;
Willy Tarreaub5a1f9e2020-08-19 17:03:55 +02001873 cmsg->cmsg_len = CMSG_LEN(nb_queued * sizeof(int));
1874 msghdr.msg_controllen = CMSG_SPACE(nb_queued * sizeof(int));
Olivier Houchardf886e342017-04-05 22:24:59 +02001875 if (sendmsg(fd, &msghdr, 0) != curoff) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001876 ha_warning("Failed to transfer sockets\n");
Olivier Houchardf886e342017-04-05 22:24:59 +02001877 goto out;
1878 }
1879 }
1880
1881out:
Willy Tarreauc2b7f802018-09-20 11:22:29 +02001882 if (fd >= 0 && old_fcntl >= 0 && fcntl(fd, F_SETFL, old_fcntl) == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001883 ha_warning("Cannot make the unix socket non-blocking\n");
Olivier Houchardf886e342017-04-05 22:24:59 +02001884 goto out;
1885 }
1886 appctx->st0 = CLI_ST_END;
1887 free(cmsgbuf);
1888 free(tmpbuf);
1889 return 1;
1890}
1891
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02001892static int cli_parse_simple(char **args, char *payload, struct appctx *appctx, void *private)
1893{
1894 if (*args[0] == 'h')
1895 /* help */
1896 cli_gen_usage_msg(appctx);
1897 else if (*args[0] == 'p')
1898 /* prompt */
1899 appctx->st1 ^= APPCTX_CLI_ST1_PROMPT;
1900 else if (*args[0] == 'q')
1901 /* quit */
1902 appctx->st0 = CLI_ST_END;
1903
1904 return 1;
1905}
Olivier Houchardf886e342017-04-05 22:24:59 +02001906
William Lallemand2f4ce202018-10-26 14:47:47 +02001907void pcli_write_prompt(struct stream *s)
1908{
1909 struct buffer *msg = get_trash_chunk();
1910 struct channel *oc = si_oc(&s->si[0]);
1911
William Lallemanddc12c2e2018-12-13 09:05:46 +01001912 if (!(s->pcli_flags & PCLI_F_PROMPT))
William Lallemand5b80fa22018-12-11 16:10:54 +01001913 return;
1914
William Lallemanddc12c2e2018-12-13 09:05:46 +01001915 if (s->pcli_flags & PCLI_F_PAYLOAD) {
William Lallemandebf61802018-12-11 16:10:57 +01001916 chunk_appendf(msg, "+ ");
1917 } else {
1918 if (s->pcli_next_pid == 0)
Willy Tarreau52880f92018-12-15 13:30:03 +01001919 chunk_appendf(msg, "master%s> ",
1920 (global.mode & MODE_MWORKER_WAIT) ? "[ReloadFailed]" : "");
William Lallemandebf61802018-12-11 16:10:57 +01001921 else
1922 chunk_appendf(msg, "%d> ", s->pcli_next_pid);
1923 }
William Lallemand2f4ce202018-10-26 14:47:47 +02001924 co_inject(oc, msg->area, msg->data);
1925}
1926
William Lallemand291810d2018-10-26 14:47:38 +02001927
William Lallemandcf62f7e2018-10-26 14:47:40 +02001928/* The pcli_* functions are used for the CLI proxy in the master */
1929
William Lallemanddeeaa592018-10-26 14:47:48 +02001930void pcli_reply_and_close(struct stream *s, const char *msg)
1931{
1932 struct buffer *buf = get_trash_chunk();
1933
1934 chunk_initstr(buf, msg);
Willy Tarreau14bfe9a2018-12-19 15:19:27 +01001935 si_retnclose(&s->si[0], buf);
William Lallemanddeeaa592018-10-26 14:47:48 +02001936}
1937
William Lallemand291810d2018-10-26 14:47:38 +02001938static enum obj_type *pcli_pid_to_server(int proc_pid)
1939{
1940 struct mworker_proc *child;
1941
William Lallemand99e0bb92020-11-05 10:28:53 +01001942 /* return the mCLI applet of the master */
William Lallemandbddd33a2018-12-11 16:10:53 +01001943 if (proc_pid == 0)
William Lallemand99e0bb92020-11-05 10:28:53 +01001944 return &mcli_applet.obj_type;
William Lallemandbddd33a2018-12-11 16:10:53 +01001945
William Lallemand291810d2018-10-26 14:47:38 +02001946 list_for_each_entry(child, &proc_list, list) {
1947 if (child->pid == proc_pid){
1948 return &child->srv->obj_type;
1949 }
1950 }
1951 return NULL;
1952}
1953
1954/* Take a CLI prefix in argument (eg: @!1234 @master @1)
1955 * Return:
1956 * 0: master
1957 * > 0: pid of a worker
1958 * < 0: didn't find a worker
1959 */
1960static int pcli_prefix_to_pid(const char *prefix)
1961{
1962 int proc_pid;
1963 struct mworker_proc *child;
1964 char *errtol = NULL;
1965
1966 if (*prefix != '@') /* not a prefix, should not happen */
1967 return -1;
1968
1969 prefix++;
1970 if (!*prefix) /* sent @ alone, return the master */
1971 return 0;
1972
1973 if (strcmp("master", prefix) == 0) {
1974 return 0;
1975 } else if (*prefix == '!') {
1976 prefix++;
1977 if (!*prefix)
1978 return -1;
1979
1980 proc_pid = strtol(prefix, &errtol, 10);
1981 if (*errtol != '\0')
1982 return -1;
1983 list_for_each_entry(child, &proc_list, list) {
William Lallemand8f7069a2019-04-12 16:09:23 +02001984 if (!(child->options & PROC_O_TYPE_WORKER))
William Lallemand16dd1b32018-11-19 18:46:18 +01001985 continue;
William Lallemand291810d2018-10-26 14:47:38 +02001986 if (child->pid == proc_pid){
1987 return child->pid;
1988 }
1989 }
1990 } else {
1991 struct mworker_proc *chosen = NULL;
1992 /* this is a relative pid */
1993
1994 proc_pid = strtol(prefix, &errtol, 10);
1995 if (*errtol != '\0')
1996 return -1;
1997
1998 if (proc_pid == 0) /* return the master */
1999 return 0;
2000
2001 /* chose the right process, the current one is the one with the
2002 least number of reloads */
2003 list_for_each_entry(child, &proc_list, list) {
William Lallemand8f7069a2019-04-12 16:09:23 +02002004 if (!(child->options & PROC_O_TYPE_WORKER))
William Lallemand16dd1b32018-11-19 18:46:18 +01002005 continue;
William Lallemand291810d2018-10-26 14:47:38 +02002006 if (child->relative_pid == proc_pid){
2007 if (child->reloads == 0)
2008 return child->pid;
2009 else if (chosen == NULL || child->reloads < chosen->reloads)
2010 chosen = child;
2011 }
2012 }
2013 if (chosen)
2014 return chosen->pid;
2015 }
2016 return -1;
2017}
2018
William Lallemandbddd33a2018-12-11 16:10:53 +01002019/* Return::
2020 * >= 0 : number of words to escape
2021 * = -1 : error
2022 */
2023
2024int pcli_find_and_exec_kw(struct stream *s, char **args, int argl, char **errmsg, int *next_pid)
2025{
2026 if (argl < 1)
2027 return 0;
2028
2029 /* there is a prefix */
2030 if (args[0][0] == '@') {
2031 int target_pid = pcli_prefix_to_pid(args[0]);
2032
2033 if (target_pid == -1) {
2034 memprintf(errmsg, "Can't find the target PID matching the prefix '%s'\n", args[0]);
2035 return -1;
2036 }
2037
2038 /* if the prefix is alone, define a default target */
2039 if (argl == 1)
2040 s->pcli_next_pid = target_pid;
2041 else
2042 *next_pid = target_pid;
2043 return 1;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002044 } else if (strcmp("prompt", args[0]) == 0) {
William Lallemanddc12c2e2018-12-13 09:05:46 +01002045 s->pcli_flags ^= PCLI_F_PROMPT;
William Lallemand5b80fa22018-12-11 16:10:54 +01002046 return argl; /* return the number of elements in the array */
William Lallemand5f610682018-12-11 16:10:55 +01002047
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002048 } else if (strcmp("quit", args[0]) == 0) {
William Lallemand5f610682018-12-11 16:10:55 +01002049 channel_shutr_now(&s->req);
2050 channel_shutw_now(&s->res);
2051 return argl; /* return the number of elements in the array */
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002052 } else if (strcmp(args[0], "operator") == 0) {
William Lallemandb7ea1412018-12-13 09:05:47 +01002053 if (!pcli_has_level(s, ACCESS_LVL_OPER)) {
2054 memprintf(errmsg, "Permission denied!\n");
2055 return -1;
2056 }
2057 s->pcli_flags &= ~ACCESS_LVL_MASK;
2058 s->pcli_flags |= ACCESS_LVL_OPER;
2059 return argl;
2060
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002061 } else if (strcmp(args[0], "user") == 0) {
William Lallemandb7ea1412018-12-13 09:05:47 +01002062 if (!pcli_has_level(s, ACCESS_LVL_USER)) {
2063 memprintf(errmsg, "Permission denied!\n");
2064 return -1;
2065 }
2066 s->pcli_flags &= ~ACCESS_LVL_MASK;
2067 s->pcli_flags |= ACCESS_LVL_USER;
2068 return argl;
William Lallemandbddd33a2018-12-11 16:10:53 +01002069 }
2070
2071 return 0;
2072}
2073
2074/*
2075 * Parse the CLI request:
2076 * - It does basically the same as the cli_io_handler, but as a proxy
2077 * - It can exec a command and strip non forwardable commands
William Lallemandcf62f7e2018-10-26 14:47:40 +02002078 *
2079 * Return:
William Lallemandbddd33a2018-12-11 16:10:53 +01002080 * - the number of characters to forward or
2081 * - 1 if there is an error or not enough data
William Lallemandcf62f7e2018-10-26 14:47:40 +02002082 */
William Lallemandbddd33a2018-12-11 16:10:53 +01002083int pcli_parse_request(struct stream *s, struct channel *req, char **errmsg, int *next_pid)
William Lallemandcf62f7e2018-10-26 14:47:40 +02002084{
William Lallemandbddd33a2018-12-11 16:10:53 +01002085 char *str = (char *)ci_head(req);
2086 char *end = (char *)ci_stop(req);
2087 char *args[MAX_STATS_ARGS + 1]; /* +1 for storing a NULL */
2088 int argl; /* number of args */
2089 char *p;
2090 char *trim = NULL;
William Lallemandebf61802018-12-11 16:10:57 +01002091 char *payload = NULL;
William Lallemandbddd33a2018-12-11 16:10:53 +01002092 int wtrim = 0; /* number of words to trim */
2093 int reql = 0;
William Lallemandb7ea1412018-12-13 09:05:47 +01002094 int ret;
William Lallemandbddd33a2018-12-11 16:10:53 +01002095 int i = 0;
2096
2097 p = str;
William Lallemandcf62f7e2018-10-26 14:47:40 +02002098
William Lallemanddc12c2e2018-12-13 09:05:46 +01002099 if (!(s->pcli_flags & PCLI_F_PAYLOAD)) {
William Lallemandebf61802018-12-11 16:10:57 +01002100
2101 /* Looks for the end of one command */
2102 while (p+reql < end) {
2103 /* handle escaping */
2104 if (p[reql] == '\\') {
William Lallemand02c255e2020-06-18 18:45:04 +02002105 reql+=2;
William Lallemandebf61802018-12-11 16:10:57 +01002106 continue;
2107 }
2108 if (p[reql] == ';' || p[reql] == '\n') {
2109 /* found the end of the command */
2110 p[reql] = '\n';
2111 reql++;
2112 break;
2113 }
William Lallemandbddd33a2018-12-11 16:10:53 +01002114 reql++;
William Lallemandbddd33a2018-12-11 16:10:53 +01002115 }
William Lallemandebf61802018-12-11 16:10:57 +01002116 } else {
2117 while (p+reql < end) {
2118 if (p[reql] == '\n') {
2119 /* found the end of the line */
2120 reql++;
2121 break;
2122 }
William Lallemandbddd33a2018-12-11 16:10:53 +01002123 reql++;
William Lallemandbddd33a2018-12-11 16:10:53 +01002124 }
William Lallemandbddd33a2018-12-11 16:10:53 +01002125 }
William Lallemandcf62f7e2018-10-26 14:47:40 +02002126
William Lallemandbddd33a2018-12-11 16:10:53 +01002127 /* set end to first byte after the end of the command */
2128 end = p + reql;
William Lallemandcf62f7e2018-10-26 14:47:40 +02002129
William Lallemandbddd33a2018-12-11 16:10:53 +01002130 /* there is no end to this command, need more to parse ! */
2131 if (*(end-1) != '\n') {
2132 return -1;
2133 }
William Lallemandcf62f7e2018-10-26 14:47:40 +02002134
William Lallemand3301f3e2018-12-13 09:05:48 +01002135 if (s->pcli_flags & PCLI_F_PAYLOAD) {
2136 if (reql == 1) /* last line of the payload */
2137 s->pcli_flags &= ~PCLI_F_PAYLOAD;
William Lallemandebf61802018-12-11 16:10:57 +01002138 return reql;
2139 }
2140
William Lallemandbddd33a2018-12-11 16:10:53 +01002141 *(end-1) = '\0';
William Lallemandcf62f7e2018-10-26 14:47:40 +02002142
William Lallemandbddd33a2018-12-11 16:10:53 +01002143 /* splits the command in words */
2144 while (i < MAX_STATS_ARGS && p < end) {
William Lallemandbddd33a2018-12-11 16:10:53 +01002145 /* skip leading spaces/tabs */
2146 p += strspn(p, " \t");
2147 if (!*p)
William Lallemandcf62f7e2018-10-26 14:47:40 +02002148 break;
2149
William Lallemandbddd33a2018-12-11 16:10:53 +01002150 args[i] = p;
William Lallemandfe249c32020-06-18 18:03:57 +02002151 while (1) {
2152 p += strcspn(p, " \t\\");
2153 /* escaped chars using backlashes (\) */
2154 if (*p == '\\') {
2155 if (!*++p)
2156 break;
2157 if (!*++p)
2158 break;
2159 } else {
2160 break;
William Lallemandbddd33a2018-12-11 16:10:53 +01002161 }
William Lallemandcf62f7e2018-10-26 14:47:40 +02002162 }
William Lallemandfe249c32020-06-18 18:03:57 +02002163 *p++ = 0;
William Lallemandbddd33a2018-12-11 16:10:53 +01002164 i++;
William Lallemandcf62f7e2018-10-26 14:47:40 +02002165 }
2166
William Lallemandbddd33a2018-12-11 16:10:53 +01002167 argl = i;
William Lallemandcf62f7e2018-10-26 14:47:40 +02002168
William Lallemandbddd33a2018-12-11 16:10:53 +01002169 for (; i < MAX_STATS_ARGS + 1; i++)
2170 args[i] = NULL;
2171
2172 wtrim = pcli_find_and_exec_kw(s, args, argl, errmsg, next_pid);
2173
2174 /* End of words are ending by \0, we need to replace the \0s by spaces
21751 before forwarding them */
2176 p = str;
William Lallemand3301f3e2018-12-13 09:05:48 +01002177 while (p < end-1) {
William Lallemandbddd33a2018-12-11 16:10:53 +01002178 if (*p == '\0')
2179 *p = ' ';
2180 p++;
William Lallemandcf62f7e2018-10-26 14:47:40 +02002181 }
2182
William Lallemand3301f3e2018-12-13 09:05:48 +01002183 payload = strstr(str, PAYLOAD_PATTERN);
2184 if ((end - 1) == (payload + strlen(PAYLOAD_PATTERN))) {
2185 /* if the payload pattern is at the end */
2186 s->pcli_flags |= PCLI_F_PAYLOAD;
William Lallemand3301f3e2018-12-13 09:05:48 +01002187 }
2188
William Lallemandbddd33a2018-12-11 16:10:53 +01002189 *(end-1) = '\n';
William Lallemandcf62f7e2018-10-26 14:47:40 +02002190
William Lallemandbddd33a2018-12-11 16:10:53 +01002191 if (wtrim > 0) {
2192 trim = &args[wtrim][0];
2193 if (trim == NULL) /* if this was the last word in the table */
2194 trim = end;
William Lallemandcf62f7e2018-10-26 14:47:40 +02002195
William Lallemandbddd33a2018-12-11 16:10:53 +01002196 b_del(&req->buf, trim - str);
2197
William Lallemandb7ea1412018-12-13 09:05:47 +01002198 ret = end - trim;
William Lallemandbddd33a2018-12-11 16:10:53 +01002199 } else if (wtrim < 0) {
2200 /* parsing error */
2201 return -1;
William Lallemandb7ea1412018-12-13 09:05:47 +01002202 } else {
2203 /* the whole string */
2204 ret = end - str;
William Lallemandbddd33a2018-12-11 16:10:53 +01002205 }
2206
William Lallemandb7ea1412018-12-13 09:05:47 +01002207 if (ret > 1) {
2208 if (pcli_has_level(s, ACCESS_LVL_ADMIN)) {
2209 goto end;
2210 } else if (pcli_has_level(s, ACCESS_LVL_OPER)) {
William Lallemandad032882019-07-01 10:56:15 +02002211 ci_insert_line2(req, 0, "operator -", strlen("operator -"));
2212 ret += strlen("operator -") + 2;
William Lallemandb7ea1412018-12-13 09:05:47 +01002213 } else if (pcli_has_level(s, ACCESS_LVL_USER)) {
William Lallemandad032882019-07-01 10:56:15 +02002214 ci_insert_line2(req, 0, "user -", strlen("user -"));
2215 ret += strlen("user -") + 2;
William Lallemandb7ea1412018-12-13 09:05:47 +01002216 }
2217 }
2218end:
William Lallemandbddd33a2018-12-11 16:10:53 +01002219
William Lallemandb7ea1412018-12-13 09:05:47 +01002220 return ret;
William Lallemandcf62f7e2018-10-26 14:47:40 +02002221}
2222
2223int pcli_wait_for_request(struct stream *s, struct channel *req, int an_bit)
2224{
William Lallemandbddd33a2018-12-11 16:10:53 +01002225 int next_pid = -1;
William Lallemandcf62f7e2018-10-26 14:47:40 +02002226 int to_forward;
William Lallemandbddd33a2018-12-11 16:10:53 +01002227 char *errmsg = NULL;
William Lallemandcf62f7e2018-10-26 14:47:40 +02002228
William Lallemandb7ea1412018-12-13 09:05:47 +01002229 if ((s->pcli_flags & ACCESS_LVL_MASK) == ACCESS_LVL_NONE)
2230 s->pcli_flags |= strm_li(s)->bind_conf->level & ACCESS_LVL_MASK;
2231
William Lallemandcf62f7e2018-10-26 14:47:40 +02002232read_again:
2233 /* if the channel is closed for read, we won't receive any more data
2234 from the client, but we don't want to forward this close to the
2235 server */
2236 channel_dont_close(req);
2237
2238 /* We don't know yet to which server we will connect */
2239 channel_dont_connect(req);
2240
2241
2242 /* we are not waiting for a response, there is no more request and we
2243 * receive a close from the client, we can leave */
2244 if (!(ci_data(req)) && req->flags & CF_SHUTR) {
2245 channel_shutw_now(&s->res);
2246 s->req.analysers &= ~AN_REQ_WAIT_CLI;
2247 return 1;
2248 }
2249
2250 req->flags |= CF_READ_DONTWAIT;
2251
2252 /* need more data */
2253 if (!ci_data(req))
2254 return 0;
2255
2256 /* If there is data available for analysis, log the end of the idle time. */
2257 if (c_data(req) && s->logs.t_idle == -1)
2258 s->logs.t_idle = tv_ms_elapsed(&s->logs.tv_accept, &now) - s->logs.t_handshake;
2259
William Lallemandbddd33a2018-12-11 16:10:53 +01002260 to_forward = pcli_parse_request(s, req, &errmsg, &next_pid);
William Lallemandcf62f7e2018-10-26 14:47:40 +02002261 if (to_forward > 0) {
William Lallemandbddd33a2018-12-11 16:10:53 +01002262 int target_pid;
William Lallemandcf62f7e2018-10-26 14:47:40 +02002263 /* enough data */
2264
William Lallemandcf62f7e2018-10-26 14:47:40 +02002265 /* forward only 1 command */
2266 channel_forward(req, to_forward);
William Lallemandebf61802018-12-11 16:10:57 +01002267
William Lallemanddc12c2e2018-12-13 09:05:46 +01002268 if (!(s->pcli_flags & PCLI_F_PAYLOAD)) {
William Lallemandebf61802018-12-11 16:10:57 +01002269 /* we send only 1 command per request, and we write close after it */
2270 channel_shutw_now(req);
2271 } else {
2272 pcli_write_prompt(s);
2273 }
2274
2275 s->res.flags |= CF_WAKE_ONCE; /* need to be called again */
William Lallemandcf62f7e2018-10-26 14:47:40 +02002276
2277 /* remove the XFER_DATA analysers, which forwards all
2278 * the data, we don't want to forward the next requests
2279 * We need to add CF_FLT_ANALYZE to abort the forward too.
2280 */
2281 req->analysers &= ~(AN_REQ_FLT_XFER_DATA|AN_REQ_WAIT_CLI);
2282 req->analysers |= AN_REQ_FLT_END|CF_FLT_ANALYZE;
2283 s->res.analysers |= AN_RES_WAIT_CLI;
2284
William Lallemandebf61802018-12-11 16:10:57 +01002285 if (!(s->flags & SF_ASSIGNED)) {
2286 if (next_pid > -1)
2287 target_pid = next_pid;
2288 else
2289 target_pid = s->pcli_next_pid;
2290 /* we can connect now */
2291 s->target = pcli_pid_to_server(target_pid);
William Lallemandcf62f7e2018-10-26 14:47:40 +02002292
William Lallemandebf61802018-12-11 16:10:57 +01002293 s->flags |= (SF_DIRECT | SF_ASSIGNED);
2294 channel_auto_connect(req);
2295 }
William Lallemandcf62f7e2018-10-26 14:47:40 +02002296
2297 } else if (to_forward == 0) {
William Lallemandcf62f7e2018-10-26 14:47:40 +02002298 /* we trimmed things but we might have other commands to consume */
William Lallemandbddd33a2018-12-11 16:10:53 +01002299 pcli_write_prompt(s);
William Lallemandcf62f7e2018-10-26 14:47:40 +02002300 goto read_again;
William Lallemandbddd33a2018-12-11 16:10:53 +01002301 } else if (to_forward == -1 && errmsg) {
2302 /* there was an error during the parsing */
2303 pcli_reply_and_close(s, errmsg);
2304 return 0;
William Lallemandcf62f7e2018-10-26 14:47:40 +02002305 } else if (to_forward == -1 && channel_full(req, global.tune.maxrewrite)) {
2306 /* buffer is full and we didn't catch the end of a command */
2307 goto send_help;
2308 }
2309
2310 return 0;
2311
2312send_help:
2313 b_reset(&req->buf);
2314 b_putblk(&req->buf, "help\n", 5);
2315 goto read_again;
2316}
2317
2318int pcli_wait_for_response(struct stream *s, struct channel *rep, int an_bit)
2319{
2320 struct proxy *fe = strm_fe(s);
2321 struct proxy *be = s->be;
2322
William Lallemand6b7cd0a2018-11-06 17:37:11 +01002323 if (rep->flags & CF_READ_ERROR) {
2324 pcli_reply_and_close(s, "Can't connect to the target CLI!\n");
2325 s->res.analysers &= ~AN_RES_WAIT_CLI;
2326 return 0;
2327 }
William Lallemandcf62f7e2018-10-26 14:47:40 +02002328 rep->flags |= CF_READ_DONTWAIT; /* try to get back here ASAP */
2329 rep->flags |= CF_NEVER_WAIT;
2330
2331 /* don't forward the close */
2332 channel_dont_close(&s->res);
2333 channel_dont_close(&s->req);
2334
William Lallemanddc12c2e2018-12-13 09:05:46 +01002335 if (s->pcli_flags & PCLI_F_PAYLOAD) {
William Lallemandebf61802018-12-11 16:10:57 +01002336 s->req.analysers |= AN_REQ_WAIT_CLI;
2337 s->res.analysers &= ~AN_RES_WAIT_CLI;
2338 s->req.flags |= CF_WAKE_ONCE; /* need to be called again if there is some command left in the request */
2339 return 0;
2340 }
2341
William Lallemandcf62f7e2018-10-26 14:47:40 +02002342 /* forward the data */
2343 if (ci_data(rep)) {
2344 c_adv(rep, ci_data(rep));
2345 return 0;
2346 }
2347
2348 if ((rep->flags & (CF_SHUTR|CF_READ_NULL))) {
2349 /* stream cleanup */
2350
William Lallemand2f4ce202018-10-26 14:47:47 +02002351 pcli_write_prompt(s);
2352
William Lallemandcf62f7e2018-10-26 14:47:40 +02002353 s->si[1].flags |= SI_FL_NOLINGER | SI_FL_NOHALF;
2354 si_shutr(&s->si[1]);
2355 si_shutw(&s->si[1]);
2356
2357 /*
2358 * starting from there this the same code as
2359 * http_end_txn_clean_session().
2360 *
2361 * It allows to do frontend keepalive while reconnecting to a
2362 * new server for each request.
2363 */
2364
2365 if (s->flags & SF_BE_ASSIGNED) {
2366 HA_ATOMIC_SUB(&be->beconn, 1);
2367 if (unlikely(s->srv_conn))
2368 sess_change_server(s, NULL);
2369 }
2370
2371 s->logs.t_close = tv_ms_elapsed(&s->logs.tv_accept, &now);
2372 stream_process_counters(s);
2373
2374 /* don't count other requests' data */
2375 s->logs.bytes_in -= ci_data(&s->req);
2376 s->logs.bytes_out -= ci_data(&s->res);
2377
2378 /* we may need to know the position in the queue */
2379 pendconn_free(s);
2380
2381 /* let's do a final log if we need it */
2382 if (!LIST_ISEMPTY(&fe->logformat) && s->logs.logwait &&
2383 !(s->flags & SF_MONITOR) &&
2384 (!(fe->options & PR_O_NULLNOLOG) || s->req.total)) {
2385 s->do_log(s);
2386 }
2387
2388 /* stop tracking content-based counters */
2389 stream_stop_content_counters(s);
2390 stream_update_time_stats(s);
2391
2392 s->logs.accept_date = date; /* user-visible date for logging */
2393 s->logs.tv_accept = now; /* corrected date for internal use */
2394 s->logs.t_handshake = 0; /* There are no handshake in keep alive connection. */
2395 s->logs.t_idle = -1;
2396 tv_zero(&s->logs.tv_request);
2397 s->logs.t_queue = -1;
2398 s->logs.t_connect = -1;
2399 s->logs.t_data = -1;
2400 s->logs.t_close = 0;
2401 s->logs.prx_queue_pos = 0; /* we get the number of pending conns before us */
2402 s->logs.srv_queue_pos = 0; /* we will get this number soon */
2403
2404 s->logs.bytes_in = s->req.total = ci_data(&s->req);
2405 s->logs.bytes_out = s->res.total = ci_data(&s->res);
2406
2407 stream_del_srv_conn(s);
2408 if (objt_server(s->target)) {
2409 if (s->flags & SF_CURR_SESS) {
2410 s->flags &= ~SF_CURR_SESS;
Willy Tarreaub54c40a2018-12-02 19:28:41 +01002411 HA_ATOMIC_SUB(&__objt_server(s->target)->cur_sess, 1);
William Lallemandcf62f7e2018-10-26 14:47:40 +02002412 }
Willy Tarreaub54c40a2018-12-02 19:28:41 +01002413 if (may_dequeue_tasks(__objt_server(s->target), be))
2414 process_srv_queue(__objt_server(s->target));
William Lallemandcf62f7e2018-10-26 14:47:40 +02002415 }
2416
2417 s->target = NULL;
2418
2419 /* only release our endpoint if we don't intend to reuse the
2420 * connection.
2421 */
2422 if (!si_conn_ready(&s->si[1])) {
2423 si_release_endpoint(&s->si[1]);
2424 s->srv_conn = NULL;
2425 }
2426
Willy Tarreau1c8d32b2019-07-18 15:47:45 +02002427 sockaddr_free(&s->target_addr);
2428
William Lallemandcf62f7e2018-10-26 14:47:40 +02002429 s->si[1].state = s->si[1].prev_state = SI_ST_INI;
2430 s->si[1].err_type = SI_ET_NONE;
2431 s->si[1].conn_retries = 0; /* used for logging too */
2432 s->si[1].exp = TICK_ETERNITY;
2433 s->si[1].flags &= SI_FL_ISBACK | SI_FL_DONT_WAKE; /* we're in the context of process_stream */
Christopher Faulet22dc2482019-07-16 14:43:08 +02002434 s->req.flags &= ~(CF_SHUTW|CF_SHUTW_NOW|CF_AUTO_CONNECT|CF_WRITE_ERROR|CF_STREAMER|CF_STREAMER_FAST|CF_NEVER_WAIT|CF_WROTE_DATA);
William Lallemand19338012019-06-25 18:00:19 +02002435 s->res.flags &= ~(CF_SHUTR|CF_SHUTR_NOW|CF_READ_ATTACHED|CF_READ_ERROR|CF_READ_NOEXP|CF_STREAMER|CF_STREAMER_FAST|CF_WRITE_PARTIAL|CF_NEVER_WAIT|CF_WROTE_DATA|CF_READ_NULL);
William Lallemandcf62f7e2018-10-26 14:47:40 +02002436 s->flags &= ~(SF_DIRECT|SF_ASSIGNED|SF_ADDR_SET|SF_BE_ASSIGNED|SF_FORCE_PRST|SF_IGNORE_PRST);
2437 s->flags &= ~(SF_CURR_SESS|SF_REDIRECTABLE|SF_SRV_REUSED);
2438 s->flags &= ~(SF_ERR_MASK|SF_FINST_MASK|SF_REDISP);
2439 /* reinitialise the current rule list pointer to NULL. We are sure that
2440 * any rulelist match the NULL pointer.
2441 */
2442 s->current_rule_list = NULL;
2443
2444 s->be = strm_fe(s);
2445 s->logs.logwait = strm_fe(s)->to_log;
2446 s->logs.level = 0;
2447 stream_del_srv_conn(s);
2448 s->target = NULL;
2449 /* re-init store persistence */
2450 s->store_count = 0;
2451 s->uniq_id = global.req_count++;
2452
2453 s->req.flags |= CF_READ_DONTWAIT; /* one read is usually enough */
2454
2455 s->req.flags |= CF_WAKE_ONCE; /* need to be called again if there is some command left in the request */
2456
2457 s->req.analysers |= AN_REQ_WAIT_CLI;
2458 s->res.analysers &= ~AN_RES_WAIT_CLI;
2459
2460 /* We must trim any excess data from the response buffer, because we
2461 * may have blocked an invalid response from a server that we don't
Ilya Shipitsind4259502020-04-08 01:07:56 +05002462 * want to accidentally forward once we disable the analysers, nor do
William Lallemandcf62f7e2018-10-26 14:47:40 +02002463 * we want those data to come along with next response. A typical
2464 * example of such data would be from a buggy server responding to
2465 * a HEAD with some data, or sending more than the advertised
2466 * content-length.
2467 */
2468 if (unlikely(ci_data(&s->res)))
2469 b_set_data(&s->res.buf, co_data(&s->res));
2470
2471 /* Now we can realign the response buffer */
2472 c_realign_if_empty(&s->res);
2473
2474 s->req.rto = strm_fe(s)->timeout.client;
2475 s->req.wto = TICK_ETERNITY;
2476
2477 s->res.rto = TICK_ETERNITY;
2478 s->res.wto = strm_fe(s)->timeout.client;
2479
2480 s->req.rex = TICK_ETERNITY;
2481 s->req.wex = TICK_ETERNITY;
2482 s->req.analyse_exp = TICK_ETERNITY;
2483 s->res.rex = TICK_ETERNITY;
2484 s->res.wex = TICK_ETERNITY;
2485 s->res.analyse_exp = TICK_ETERNITY;
2486 s->si[1].hcto = TICK_ETERNITY;
2487
2488 /* we're removing the analysers, we MUST re-enable events detection.
2489 * We don't enable close on the response channel since it's either
2490 * already closed, or in keep-alive with an idle connection handler.
2491 */
2492 channel_auto_read(&s->req);
2493 channel_auto_close(&s->req);
2494 channel_auto_read(&s->res);
2495
2496
2497 return 1;
2498 }
2499 return 0;
2500}
2501
William Lallemand8a022572018-10-26 14:47:35 +02002502/*
2503 * The mworker functions are used to initialize the CLI in the master process
2504 */
2505
William Lallemand309dc9a2018-10-26 14:47:45 +02002506 /*
2507 * Stop the mworker proxy
2508 */
2509void mworker_cli_proxy_stop()
2510{
William Lallemand550db6d2018-11-06 17:37:12 +01002511 if (mworker_proxy)
2512 stop_proxy(mworker_proxy);
William Lallemand309dc9a2018-10-26 14:47:45 +02002513}
2514
William Lallemand8a022572018-10-26 14:47:35 +02002515/*
2516 * Create the mworker CLI proxy
2517 */
2518int mworker_cli_proxy_create()
2519{
2520 struct mworker_proc *child;
William Lallemand744a0892018-11-22 16:46:51 +01002521 char *msg = NULL;
2522 char *errmsg = NULL;
William Lallemand8a022572018-10-26 14:47:35 +02002523
2524 mworker_proxy = calloc(1, sizeof(*mworker_proxy));
2525 if (!mworker_proxy)
2526 return -1;
2527
2528 init_new_proxy(mworker_proxy);
2529 mworker_proxy->next = proxies_list;
2530 proxies_list = mworker_proxy;
2531 mworker_proxy->id = strdup("MASTER");
William Lallemandcf62f7e2018-10-26 14:47:40 +02002532 mworker_proxy->mode = PR_MODE_CLI;
William Lallemand8a022572018-10-26 14:47:35 +02002533 mworker_proxy->last_change = now.tv_sec;
2534 mworker_proxy->cap = PR_CAP_LISTEN; /* this is a listen section */
2535 mworker_proxy->maxconn = 10; /* default to 10 concurrent connections */
2536 mworker_proxy->timeout.client = 0; /* no timeout */
2537 mworker_proxy->conf.file = strdup("MASTER");
2538 mworker_proxy->conf.line = 0;
2539 mworker_proxy->accept = frontend_accept;
2540 mworker_proxy-> lbprm.algo = BE_LB_ALGO_NONE;
2541
2542 /* Does not init the default target the CLI applet, but must be done in
2543 * the request parsing code */
2544 mworker_proxy->default_target = NULL;
2545
2546 /* the check_config_validity() will get an ID for the proxy */
2547 mworker_proxy->uuid = -1;
2548
2549 proxy_store_name(mworker_proxy);
2550
2551 /* create all servers using the mworker_proc list */
2552 list_for_each_entry(child, &proc_list, list) {
William Lallemand8a022572018-10-26 14:47:35 +02002553 struct server *newsrv = NULL;
2554 struct sockaddr_storage *sk;
2555 int port1, port2, port;
2556 struct protocol *proto;
William Lallemand8a022572018-10-26 14:47:35 +02002557
William Lallemanda31b09e2020-01-14 15:25:02 +01002558 /* only the workers support the master CLI */
2559 if (!(child->options & PROC_O_TYPE_WORKER))
2560 continue;
2561
William Lallemand8a022572018-10-26 14:47:35 +02002562 newsrv = new_server(mworker_proxy);
2563 if (!newsrv)
William Lallemand744a0892018-11-22 16:46:51 +01002564 goto error;
William Lallemand8a022572018-10-26 14:47:35 +02002565
2566 /* we don't know the new pid yet */
2567 if (child->pid == -1)
2568 memprintf(&msg, "cur-%d", child->relative_pid);
2569 else
2570 memprintf(&msg, "old-%d", child->pid);
2571
2572 newsrv->next = mworker_proxy->srv;
2573 mworker_proxy->srv = newsrv;
2574 newsrv->conf.file = strdup(msg);
2575 newsrv->id = strdup(msg);
2576 newsrv->conf.line = 0;
2577
2578 memprintf(&msg, "sockpair@%d", child->ipc_fd[0]);
Willy Tarreau5fc93282020-09-16 18:25:03 +02002579 if ((sk = str2sa_range(msg, &port, &port1, &port2, NULL, &proto,
Willy Tarreaua93e5c72020-09-15 14:01:16 +02002580 &errmsg, NULL, NULL, PA_O_STREAM)) == 0) {
William Lallemand744a0892018-11-22 16:46:51 +01002581 goto error;
Tim Duesterhus4cae3b22018-11-22 16:46:50 +01002582 }
2583 free(msg);
2584 msg = NULL;
William Lallemand8a022572018-10-26 14:47:35 +02002585
Willy Tarreau5fc93282020-09-16 18:25:03 +02002586 if (!proto->connect) {
William Lallemand744a0892018-11-22 16:46:51 +01002587 goto error;
William Lallemand8a022572018-10-26 14:47:35 +02002588 }
2589
2590 /* no port specified */
2591 newsrv->flags |= SRV_F_MAPPORTS;
2592 newsrv->addr = *sk;
William Lallemandcf62f7e2018-10-26 14:47:40 +02002593 /* don't let the server participate to load balancing */
2594 newsrv->iweight = 0;
2595 newsrv->uweight = 0;
William Lallemand8a022572018-10-26 14:47:35 +02002596 srv_lb_commit_status(newsrv);
William Lallemand291810d2018-10-26 14:47:38 +02002597
2598 child->srv = newsrv;
William Lallemand8a022572018-10-26 14:47:35 +02002599 }
2600 return 0;
William Lallemand744a0892018-11-22 16:46:51 +01002601
2602error:
2603 ha_alert("%s\n", errmsg);
2604
2605 list_for_each_entry(child, &proc_list, list) {
2606 free((char *)child->srv->conf.file); /* cast because of const char * */
2607 free(child->srv->id);
2608 free(child->srv);
2609 child->srv = NULL;
2610 }
2611 free(mworker_proxy->id);
2612 free(mworker_proxy->conf.file);
2613 free(mworker_proxy);
2614 mworker_proxy = NULL;
2615 free(errmsg);
2616 free(msg);
2617
2618 return -1;
William Lallemand8a022572018-10-26 14:47:35 +02002619}
Olivier Houchardf886e342017-04-05 22:24:59 +02002620
William Lallemandce83b4a2018-10-26 14:47:30 +02002621/*
William Lallemande7361152018-10-26 14:47:36 +02002622 * Create a new listener for the master CLI proxy
2623 */
2624int mworker_cli_proxy_new_listener(char *line)
2625{
2626 struct bind_conf *bind_conf;
2627 struct listener *l;
2628 char *err = NULL;
2629 char *args[MAX_LINE_ARGS + 1];
2630 int arg;
2631 int cur_arg;
2632
William Lallemand2e945c82019-11-25 09:58:37 +01002633 arg = 1;
William Lallemande7361152018-10-26 14:47:36 +02002634 args[0] = line;
2635
2636 /* args is a bind configuration with spaces replaced by commas */
2637 while (*line && arg < MAX_LINE_ARGS) {
2638
2639 if (*line == ',') {
2640 *line++ = '\0';
2641 while (*line == ',')
2642 line++;
William Lallemand2e945c82019-11-25 09:58:37 +01002643 args[arg++] = line;
William Lallemande7361152018-10-26 14:47:36 +02002644 }
2645 line++;
2646 }
2647
William Lallemand2e945c82019-11-25 09:58:37 +01002648 args[arg] = "\0";
William Lallemande7361152018-10-26 14:47:36 +02002649
2650 bind_conf = bind_conf_alloc(mworker_proxy, "master-socket", 0, "", xprt_get(XPRT_RAW));
William Lallemand744a0892018-11-22 16:46:51 +01002651 if (!bind_conf)
2652 goto err;
William Lallemande7361152018-10-26 14:47:36 +02002653
2654 bind_conf->level &= ~ACCESS_LVL_MASK;
2655 bind_conf->level |= ACCESS_LVL_ADMIN;
2656
2657 if (!str2listener(args[0], mworker_proxy, bind_conf, "master-socket", 0, &err)) {
2658 ha_alert("Cannot create the listener of the master CLI\n");
William Lallemand744a0892018-11-22 16:46:51 +01002659 goto err;
William Lallemande7361152018-10-26 14:47:36 +02002660 }
2661
2662 cur_arg = 1;
2663
2664 while (*args[cur_arg]) {
2665 static int bind_dumped;
2666 struct bind_kw *kw;
2667
2668 kw = bind_find_kw(args[cur_arg]);
2669 if (kw) {
2670 if (!kw->parse) {
2671 memprintf(&err, "'%s %s' : '%s' option is not implemented in this version (check build options).",
2672 args[0], args[1], args[cur_arg]);
2673 goto err;
2674 }
2675
2676 if (kw->parse(args, cur_arg, global.stats_fe, bind_conf, &err) != 0) {
2677 if (err)
2678 memprintf(&err, "'%s %s' : '%s'", args[0], args[1], err);
2679 else
2680 memprintf(&err, "'%s %s' : error encountered while processing '%s'",
2681 args[0], args[1], args[cur_arg]);
2682 goto err;
2683 }
2684
2685 cur_arg += 1 + kw->skip;
2686 continue;
2687 }
2688
2689 if (!bind_dumped) {
2690 bind_dump_kws(&err);
2691 indent_msg(&err, 4);
2692 bind_dumped = 1;
2693 }
2694
2695 memprintf(&err, "'%s %s' : unknown keyword '%s'.%s%s",
2696 args[0], args[1], args[cur_arg],
2697 err ? " Registered keywords :" : "", err ? err : "");
2698 goto err;
2699 }
2700
2701
2702 list_for_each_entry(l, &bind_conf->listeners, by_bind) {
William Lallemande7361152018-10-26 14:47:36 +02002703 l->accept = session_accept_fd;
2704 l->default_target = mworker_proxy->default_target;
2705 /* don't make the peers subject to global limits and don't close it in the master */
Willy Tarreau18c20d22020-10-09 16:11:46 +02002706 l->options |= LI_O_UNLIMITED;
2707 l->rx.flags |= RX_F_MWORKER; /* we are keeping this FD in the master */
William Lallemande7361152018-10-26 14:47:36 +02002708 l->nice = -64; /* we want to boost priority for local stats */
Willy Tarreau18215cb2019-02-27 16:25:28 +01002709 global.maxsock++; /* for the listening socket */
William Lallemande7361152018-10-26 14:47:36 +02002710 }
Willy Tarreau18215cb2019-02-27 16:25:28 +01002711 global.maxsock += mworker_proxy->maxconn;
William Lallemande7361152018-10-26 14:47:36 +02002712
2713 return 0;
2714
2715err:
2716 ha_alert("%s\n", err);
William Lallemand744a0892018-11-22 16:46:51 +01002717 free(err);
2718 free(bind_conf);
William Lallemande7361152018-10-26 14:47:36 +02002719 return -1;
2720
2721}
2722
2723/*
William Lallemandce83b4a2018-10-26 14:47:30 +02002724 * Create a new CLI socket using a socketpair for a worker process
2725 * <mworker_proc> is the process structure, and <proc> is the process number
2726 */
2727int mworker_cli_sockpair_new(struct mworker_proc *mworker_proc, int proc)
2728{
2729 struct bind_conf *bind_conf;
2730 struct listener *l;
2731 char *path = NULL;
2732 char *err = NULL;
2733
2734 /* master pipe to ensure the master is still alive */
2735 if (socketpair(AF_UNIX, SOCK_STREAM, 0, mworker_proc->ipc_fd) < 0) {
2736 ha_alert("Cannot create worker socketpair.\n");
2737 return -1;
2738 }
2739
2740 /* XXX: we might want to use a separate frontend at some point */
2741 if (!global.stats_fe) {
2742 if ((global.stats_fe = alloc_stats_fe("GLOBAL", "master-socket", 0)) == NULL) {
2743 ha_alert("out of memory trying to allocate the stats frontend");
William Lallemand744a0892018-11-22 16:46:51 +01002744 goto error;
William Lallemandce83b4a2018-10-26 14:47:30 +02002745 }
2746 }
2747
2748 bind_conf = bind_conf_alloc(global.stats_fe, "master-socket", 0, "", xprt_get(XPRT_RAW));
William Lallemand744a0892018-11-22 16:46:51 +01002749 if (!bind_conf)
2750 goto error;
2751
William Lallemandce83b4a2018-10-26 14:47:30 +02002752 bind_conf->level &= ~ACCESS_LVL_MASK;
2753 bind_conf->level |= ACCESS_LVL_ADMIN; /* TODO: need to lower the rights with a CLI keyword*/
2754
Willy Tarreaue26993c2020-09-03 07:18:55 +02002755 bind_conf->settings.bind_proc = 1UL << proc;
William Lallemandce83b4a2018-10-26 14:47:30 +02002756 global.stats_fe->bind_proc = 0; /* XXX: we should be careful with that, it can be removed by configuration */
2757
2758 if (!memprintf(&path, "sockpair@%d", mworker_proc->ipc_fd[1])) {
2759 ha_alert("Cannot allocate listener.\n");
William Lallemand744a0892018-11-22 16:46:51 +01002760 goto error;
William Lallemandce83b4a2018-10-26 14:47:30 +02002761 }
2762
2763 if (!str2listener(path, global.stats_fe, bind_conf, "master-socket", 0, &err)) {
Tim Duesterhus4cae3b22018-11-22 16:46:50 +01002764 free(path);
William Lallemandce83b4a2018-10-26 14:47:30 +02002765 ha_alert("Cannot create a CLI sockpair listener for process #%d\n", proc);
William Lallemand744a0892018-11-22 16:46:51 +01002766 goto error;
William Lallemandce83b4a2018-10-26 14:47:30 +02002767 }
Tim Duesterhus4cae3b22018-11-22 16:46:50 +01002768 free(path);
2769 path = NULL;
William Lallemandce83b4a2018-10-26 14:47:30 +02002770
2771 list_for_each_entry(l, &bind_conf->listeners, by_bind) {
William Lallemandce83b4a2018-10-26 14:47:30 +02002772 l->accept = session_accept_fd;
2773 l->default_target = global.stats_fe->default_target;
William Lallemanda3372292018-11-16 16:57:22 +01002774 l->options |= (LI_O_UNLIMITED | LI_O_NOSTOP);
Willy Tarreau455585e2020-10-09 18:25:14 +02002775 HA_ATOMIC_ADD(&unstoppable_jobs, 1);
William Lallemandce83b4a2018-10-26 14:47:30 +02002776 /* it's a sockpair but we don't want to keep the fd in the master */
Willy Tarreau43046fa2020-09-01 15:41:59 +02002777 l->rx.flags &= ~RX_F_INHERITED;
William Lallemandce83b4a2018-10-26 14:47:30 +02002778 l->nice = -64; /* we want to boost priority for local stats */
Willy Tarreau18215cb2019-02-27 16:25:28 +01002779 global.maxsock++; /* for the listening socket */
William Lallemandce83b4a2018-10-26 14:47:30 +02002780 }
2781
2782 return 0;
William Lallemand744a0892018-11-22 16:46:51 +01002783
2784error:
2785 close(mworker_proc->ipc_fd[0]);
2786 close(mworker_proc->ipc_fd[1]);
2787 free(err);
2788
2789 return -1;
William Lallemandce83b4a2018-10-26 14:47:30 +02002790}
2791
William Lallemand74c24fb2016-11-21 17:18:36 +01002792static struct applet cli_applet = {
2793 .obj_type = OBJ_TYPE_APPLET,
2794 .name = "<CLI>", /* used for logging */
2795 .fct = cli_io_handler,
2796 .release = cli_release_handler,
2797};
2798
William Lallemand99e0bb92020-11-05 10:28:53 +01002799/* master CLI */
2800static struct applet mcli_applet = {
2801 .obj_type = OBJ_TYPE_APPLET,
2802 .name = "<MCLI>", /* used for logging */
2803 .fct = cli_io_handler,
2804 .release = cli_release_handler,
2805};
2806
Willy Tarreau0a739292016-11-22 20:21:23 +01002807/* register cli keywords */
2808static struct cli_kw_list cli_kws = {{ },{
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02002809 { { "help", NULL }, NULL, cli_parse_simple, NULL },
2810 { { "prompt", NULL }, NULL, cli_parse_simple, NULL },
2811 { { "quit", NULL }, NULL, cli_parse_simple, NULL },
Willy Tarreau2af99412016-11-23 11:10:59 +01002812 { { "set", "maxconn", "global", NULL }, "set maxconn global : change the per-process maxconn setting", cli_parse_set_maxconn_global, NULL },
Willy Tarreau45c742b2016-11-24 14:51:17 +01002813 { { "set", "rate-limit", NULL }, "set rate-limit : change a rate limiting value", cli_parse_set_ratelimit, NULL },
Andjelko Iharosc4df59e2017-07-20 11:59:48 +02002814 { { "set", "severity-output", NULL }, "set severity-output [none|number|string] : set presence of severity level in feedback information", cli_parse_set_severity_output, NULL, NULL },
Willy Tarreau599852e2016-11-22 20:33:32 +01002815 { { "set", "timeout", NULL }, "set timeout : change a timeout setting", cli_parse_set_timeout, NULL, NULL },
Willy Tarreau0a739292016-11-22 20:21:23 +01002816 { { "show", "env", NULL }, "show env [var] : dump environment variables known to the process", cli_parse_show_env, cli_io_handler_show_env, NULL },
William Lallemand35851fb2018-10-26 14:47:42 +02002817 { { "show", "cli", "sockets", NULL }, "show cli sockets : dump list of cli sockets", cli_parse_default, cli_io_handler_show_cli_sock, NULL, NULL, ACCESS_MASTER },
William Lallemand67a234f2018-12-13 09:05:45 +01002818 { { "show", "cli", "level", NULL }, "show cli level : display the level of the current CLI session", cli_parse_show_lvl, NULL, NULL, NULL, ACCESS_MASTER},
Willy Tarreau7a4a0ac2017-07-25 19:32:50 +02002819 { { "show", "fd", NULL }, "show fd [num] : dump list of file descriptors in use", cli_parse_show_fd, cli_io_handler_show_fd, NULL },
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01002820 { { "show", "activity", NULL }, "show activity : show per-thread activity stats (for support/developers)", cli_parse_default, cli_io_handler_show_activity, NULL },
William Lallemand67a234f2018-12-13 09:05:45 +01002821 { { "operator", NULL }, "operator : lower the level of the current CLI session to operator", cli_parse_set_lvl, NULL, NULL, NULL, ACCESS_MASTER},
2822 { { "user", NULL }, "user : lower the level of the current CLI session to user", cli_parse_set_lvl, NULL, NULL, NULL, ACCESS_MASTER},
Olivier Houchardf886e342017-04-05 22:24:59 +02002823 { { "_getsocks", NULL }, NULL, _getsocks, NULL },
Willy Tarreauabb9f9b2019-10-24 17:55:53 +02002824 { { "expert-mode", NULL }, NULL, cli_parse_expert_mode, NULL }, // not listed
Willy Tarreau0a739292016-11-22 20:21:23 +01002825 {{},}
2826}};
2827
Willy Tarreau0108d902018-11-25 19:14:37 +01002828INITCALL1(STG_REGISTER, cli_register_kw, &cli_kws);
2829
William Lallemand74c24fb2016-11-21 17:18:36 +01002830static struct cfg_kw_list cfg_kws = {ILH, {
2831 { CFG_GLOBAL, "stats", stats_parse_global },
2832 { 0, NULL, NULL },
2833}};
2834
Willy Tarreau0108d902018-11-25 19:14:37 +01002835INITCALL1(STG_REGISTER, cfg_register_keywords, &cfg_kws);
2836
William Lallemand74c24fb2016-11-21 17:18:36 +01002837static struct bind_kw_list bind_kws = { "STAT", { }, {
William Lallemandf6975e92017-05-26 17:42:10 +02002838 { "level", bind_parse_level, 1 }, /* set the unix socket admin level */
2839 { "expose-fd", bind_parse_expose_fd, 1 }, /* set the unix socket expose fd rights */
Andjelko Iharosc4df59e2017-07-20 11:59:48 +02002840 { "severity-output", bind_parse_severity_output, 1 }, /* set the severity output format */
William Lallemand74c24fb2016-11-21 17:18:36 +01002841 { NULL, NULL, 0 },
2842}};
2843
Willy Tarreau0108d902018-11-25 19:14:37 +01002844INITCALL1(STG_REGISTER, bind_register_keywords, &bind_kws);
William Lallemand74c24fb2016-11-21 17:18:36 +01002845
2846/*
2847 * Local variables:
2848 * c-indent-level: 8
2849 * c-basic-offset: 8
2850 * End:
2851 */