blob: c7905a52e4dad4a5bac74bd083c905e84097f8ae [file] [log] [blame]
Willy Tarreaubaaee002006-06-26 02:48:02 +02001/*
2 * HA-Proxy : High Availability-enabled HTTP/TCP proxy
Willy Tarreau71f95fa2020-01-22 10:34:58 +01003 * Copyright 2000-2020 Willy Tarreau <willy@haproxy.org>.
Willy Tarreaubaaee002006-06-26 02:48:02 +02004 *
5 * This program is free software; you can redistribute it and/or
6 * modify it under the terms of the GNU General Public License
7 * as published by the Free Software Foundation; either version
8 * 2 of the License, or (at your option) any later version.
9 *
Lukas Tribus23953682017-04-28 13:24:30 +000010 * Please refer to RFC7230 - RFC7235 informations about HTTP protocol, and
11 * RFC6265 for informations about cookies usage. More generally, the IETF HTTP
Willy Tarreaubaaee002006-06-26 02:48:02 +020012 * Working Group's web site should be consulted for protocol related changes :
13 *
14 * http://ftp.ics.uci.edu/pub/ietf/http/
15 *
16 * Pending bugs (may be not fixed because never reproduced) :
17 * - solaris only : sometimes, an HTTP proxy with only a dispatch address causes
18 * the proxy to terminate (no core) if the client breaks the connection during
19 * the response. Seen on 1.1.8pre4, but never reproduced. May not be related to
20 * the snprintf() bug since requests were simple (GET / HTTP/1.0), but may be
21 * related to missing setsid() (fixed in 1.1.15)
22 * - a proxy with an invalid config will prevent the startup even if disabled.
23 *
24 * ChangeLog has moved to the CHANGELOG file.
25 *
Willy Tarreaubaaee002006-06-26 02:48:02 +020026 */
27
David Carlier7ece0962015-12-08 21:43:09 +000028#define _GNU_SOURCE
Willy Tarreaubaaee002006-06-26 02:48:02 +020029#include <stdio.h>
30#include <stdlib.h>
31#include <unistd.h>
32#include <string.h>
33#include <ctype.h>
Maxime de Roucy379d9c72016-05-13 23:52:56 +020034#include <dirent.h>
Maxime de Roucy379d9c72016-05-13 23:52:56 +020035#include <sys/stat.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020036#include <sys/time.h>
37#include <sys/types.h>
38#include <sys/socket.h>
39#include <netinet/tcp.h>
40#include <netinet/in.h>
41#include <arpa/inet.h>
Olivier Houchardf73629d2017-04-05 22:33:04 +020042#include <net/if.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020043#include <netdb.h>
44#include <fcntl.h>
45#include <errno.h>
46#include <signal.h>
47#include <stdarg.h>
48#include <sys/resource.h>
Marc-Antoine Perennou992709b2013-02-12 10:53:52 +010049#include <sys/wait.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020050#include <time.h>
51#include <syslog.h>
Michael Schererab012dd2013-01-12 18:35:19 +010052#include <grp.h>
Willy Tarreaufc6c0322012-11-16 16:12:27 +010053#ifdef USE_CPU_AFFINITY
Willy Tarreaufc6c0322012-11-16 16:12:27 +010054#include <sched.h>
David Carlier42d9e5a2018-11-12 16:22:19 +000055#if defined(__FreeBSD__) || defined(__DragonFly__)
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +020056#include <sys/param.h>
David Carlier42d9e5a2018-11-12 16:22:19 +000057#ifdef __FreeBSD__
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +020058#include <sys/cpuset.h>
David Carlier42d9e5a2018-11-12 16:22:19 +000059#endif
David Carlier6d5c8412017-11-29 11:02:32 +000060#include <pthread_np.h>
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +020061#endif
David Carlier5e4c8e22019-09-13 05:12:58 +010062#ifdef __APPLE__
63#include <mach/mach_types.h>
64#include <mach/thread_act.h>
65#include <mach/thread_policy.h>
66#endif
Willy Tarreaufc6c0322012-11-16 16:12:27 +010067#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +020068
Willy Tarreau636848a2019-04-15 19:38:50 +020069#if defined(USE_PRCTL)
70#include <sys/prctl.h>
71#endif
72
Willy Tarreaubaaee002006-06-26 02:48:02 +020073#ifdef DEBUG_FULL
74#include <assert.h>
75#endif
Tim Duesterhusd6942c82017-11-20 15:58:35 +010076#if defined(USE_SYSTEMD)
77#include <systemd/sd-daemon.h>
78#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +020079
Willy Tarreau2dd0d472006-06-29 17:53:05 +020080#include <common/base64.h>
81#include <common/cfgparse.h>
Willy Tarreauc7e42382012-08-24 19:22:53 +020082#include <common/chunk.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020083#include <common/compat.h>
84#include <common/config.h>
85#include <common/defaults.h>
Willy Tarreaud740bab2007-10-28 11:14:07 +010086#include <common/errors.h>
Willy Tarreau5794fb02018-11-25 18:43:29 +010087#include <common/initcall.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020088#include <common/memory.h>
89#include <common/mini-clist.h>
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +010090#include <common/namespace.h>
Willy Tarreauc125cef2019-05-10 09:58:43 +020091#include <common/openssl-compat.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020092#include <common/regex.h>
93#include <common/standard.h>
94#include <common/time.h>
95#include <common/uri_auth.h>
96#include <common/version.h>
Christopher Fauletbe0faa22017-08-29 15:37:10 +020097#include <common/hathreads.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020098
99#include <types/capture.h>
William Lallemandce83b4a2018-10-26 14:47:30 +0200100#include <types/cli.h>
Christopher Fauletd7c91962015-04-30 11:48:27 +0200101#include <types/filters.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200102#include <types/global.h>
Simon Hormanac821422011-07-15 13:14:09 +0900103#include <types/acl.h>
Willy Tarreau3c63fd82011-09-07 18:00:47 +0200104#include <types/peers.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200105
Willy Tarreau0fc45a72007-06-17 00:36:03 +0200106#include <proto/acl.h>
Willy Tarreau609aad92018-11-22 08:31:09 +0100107#include <proto/activity.h>
Willy Tarreau2e845be2012-10-19 19:49:09 +0200108#include <proto/arg.h>
Willy Tarreau3c595ac2015-04-19 09:59:31 +0200109#include <proto/auth.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200110#include <proto/backend.h>
Willy Tarreauc7e42382012-08-24 19:22:53 +0200111#include <proto/channel.h>
William Lallemandce83b4a2018-10-26 14:47:30 +0200112#include <proto/cli.h>
Willy Tarreauf2943dc2012-10-26 20:10:28 +0200113#include <proto/connection.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200114#include <proto/fd.h>
Christopher Fauletd7c91962015-04-30 11:48:27 +0200115#include <proto/filters.h>
Thierry FOURNIER6f1fd482015-01-23 14:06:13 +0100116#include <proto/hlua.h>
Willy Tarreau61c112a2018-10-02 16:43:32 +0200117#include <proto/http_rules.h>
Willy Tarreaud1d54542012-09-12 22:58:11 +0200118#include <proto/listener.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200119#include <proto/log.h>
William Lallemand48dfbbd2019-04-01 11:29:53 +0200120#include <proto/mworker.h>
Thierry FOURNIERaf5a29d2014-03-11 14:29:22 +0100121#include <proto/pattern.h>
Willy Tarreaud1d54542012-09-12 22:58:11 +0200122#include <proto/protocol.h>
Christopher Fauletfc9cfe42019-07-16 14:54:53 +0200123#include <proto/http_ana.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200124#include <proto/proxy.h>
125#include <proto/queue.h>
126#include <proto/server.h>
Willy Tarreaub1ec8c42015-04-03 13:53:24 +0200127#include <proto/session.h>
Willy Tarreau87b09662015-04-03 00:22:06 +0200128#include <proto/stream.h>
Willy Tarreau29857942009-05-10 09:01:21 +0200129#include <proto/signal.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200130#include <proto/task.h>
Baptiste Assmann325137d2015-04-13 23:40:55 +0200131#include <proto/dns.h>
Christopher Fauletff2613e2016-11-09 11:36:17 +0100132#include <proto/vars.h>
Grant Zhang872f9c22017-01-21 01:10:18 +0000133#include <proto/ssl_sock.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200134
Willy Tarreau7b5654f2019-03-29 21:30:17 +0100135/* array of init calls for older platforms */
136DECLARE_INIT_STAGES;
137
Willy Tarreau477ecd82010-01-03 21:12:30 +0100138/* list of config files */
139static struct list cfg_cfgfiles = LIST_HEAD_INIT(cfg_cfgfiles);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200140int pid; /* current process id */
Willy Tarreau28156642007-11-26 16:13:36 +0100141int relative_pid = 1; /* process id starting at 1 */
Willy Tarreau387bd4f2017-11-10 19:08:14 +0100142unsigned long pid_bit = 1; /* bit corresponding to the process id */
Willy Tarreaua38a7172019-02-02 17:11:28 +0100143unsigned long all_proc_mask = 1; /* mask of all processes */
Willy Tarreaubaaee002006-06-26 02:48:02 +0200144
Olivier Houchard79321b92018-07-26 17:55:11 +0200145volatile unsigned long sleeping_thread_mask; /* Threads that are about to sleep in poll() */
Willy Tarreaubaaee002006-06-26 02:48:02 +0200146/* global options */
147struct global global = {
Cyril Bonté203ec5a2017-03-23 22:44:13 +0100148 .hard_stop_after = TICK_ETERNITY,
Willy Tarreau247a13a2012-11-15 17:38:15 +0100149 .nbproc = 1,
Willy Tarreau149ab772019-01-26 14:27:06 +0100150 .nbthread = 0,
William Lallemand5f232402012-04-05 18:02:55 +0200151 .req_count = 0,
William Lallemand0f99e342011-10-12 17:50:54 +0200152 .logsrvs = LIST_HEAD_INIT(global.logsrvs),
William Lallemand9d5f5482012-11-07 16:12:57 +0100153 .maxzlibmem = 0,
William Lallemandd85f9172012-11-09 17:05:39 +0100154 .comp_rate_lim = 0,
Emeric Brun850efd52014-01-29 12:24:34 +0100155 .ssl_server_verify = SSL_SERVER_VERIFY_REQUIRED,
Emeric Bruned760922010-10-22 17:59:25 +0200156 .unix_bind = {
157 .ux = {
158 .uid = -1,
159 .gid = -1,
160 .mode = 0,
161 }
162 },
Willy Tarreau27a674e2009-08-17 07:23:33 +0200163 .tune = {
Willy Tarreau7ac908b2019-02-27 12:02:18 +0100164 .options = GTUNE_LISTENER_MQ,
Willy Tarreauc77d3642018-12-12 06:19:42 +0100165 .bufsize = (BUFSIZE + 2*sizeof(void *) - 1) & -(2*sizeof(void *)),
Christopher Faulet546c4692020-01-22 14:31:21 +0100166 .maxrewrite = MAXREWRITE,
Willy Tarreauc77d3642018-12-12 06:19:42 +0100167 .chksize = (BUFSIZE + 2*sizeof(void *) - 1) & -(2*sizeof(void *)),
Willy Tarreaua24adf02014-11-27 01:11:56 +0100168 .reserved_bufs = RESERVED_BUFS,
Willy Tarreauf3045d22015-04-29 16:24:50 +0200169 .pattern_cache = DEFAULT_PAT_LRU_SIZE,
Olivier Houchard88698d92019-04-16 19:07:22 +0200170 .pool_low_ratio = 20,
171 .pool_high_ratio = 25,
Christopher Faulet41ba36f2019-07-19 09:36:45 +0200172 .max_http_hdr = MAX_HTTP_HDR,
Emeric Brunfc32aca2012-09-03 12:10:29 +0200173#ifdef USE_OPENSSL
Emeric Brun46635772012-11-14 11:32:56 +0100174 .sslcachesize = SSLCACHESIZE,
Emeric Brunfc32aca2012-09-03 12:10:29 +0200175#endif
William Lallemandf3747832012-11-09 12:33:10 +0100176 .comp_maxlevel = 1,
Willy Tarreau7e312732014-02-12 16:35:14 +0100177#ifdef DEFAULT_IDLE_TIMER
178 .idle_timer = DEFAULT_IDLE_TIMER,
179#else
180 .idle_timer = 1000, /* 1 second */
181#endif
Willy Tarreau27a674e2009-08-17 07:23:33 +0200182 },
Emeric Brun76d88952012-10-05 15:47:31 +0200183#ifdef USE_OPENSSL
184#ifdef DEFAULT_MAXSSLCONN
Willy Tarreau403edff2012-09-06 11:58:37 +0200185 .maxsslconn = DEFAULT_MAXSSLCONN,
186#endif
Emeric Brun76d88952012-10-05 15:47:31 +0200187#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +0200188 /* others NULL OK */
189};
190
191/*********************************************************************/
192
193int stopping; /* non zero means stopping in progress */
Cyril Bonté203ec5a2017-03-23 22:44:13 +0100194int killed; /* non zero means a hard-stop is triggered */
Willy Tarreauaf7ad002010-08-31 15:39:26 +0200195int jobs = 0; /* number of active jobs (conns, listeners, active tasks, ...) */
William Lallemanda7199262018-11-16 16:57:20 +0100196int unstoppable_jobs = 0; /* number of active jobs that can't be stopped during a soft stop */
Willy Tarreau199ad242018-11-05 16:31:22 +0100197int active_peers = 0; /* number of active peers (connection attempts and connected) */
Willy Tarreau2d372c22018-11-05 17:12:27 +0100198int connected_peers = 0; /* number of connected peers (verified ones) */
Willy Tarreaubaaee002006-06-26 02:48:02 +0200199
200/* Here we store informations about the pids of the processes we may pause
201 * or kill. We will send them a signal every 10 ms until we can bind to all
202 * our ports. With 200 retries, that's about 2 seconds.
203 */
204#define MAX_START_RETRIES 200
Willy Tarreaubaaee002006-06-26 02:48:02 +0200205static int *oldpids = NULL;
206static int oldpids_sig; /* use USR1 or TERM */
207
Olivier Houchardf73629d2017-04-05 22:33:04 +0200208/* Path to the unix socket we use to retrieve listener sockets from the old process */
209static const char *old_unixsocket;
210
William Lallemand85b0bd92017-06-01 17:38:53 +0200211static char *cur_unixsocket = NULL;
212
William Lallemandcb11fd22017-06-01 17:38:52 +0200213int atexit_flag = 0;
214
Willy Tarreaubb545b42010-08-25 12:58:59 +0200215int nb_oldpids = 0;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200216const int zero = 0;
217const int one = 1;
Alexandre Cassen87ea5482007-10-11 20:48:58 +0200218const struct linger nolinger = { .l_onoff = 1, .l_linger = 0 };
Willy Tarreaubaaee002006-06-26 02:48:02 +0200219
Willy Tarreau1d21e0a2010-03-12 21:58:54 +0100220char hostname[MAX_HOSTNAME_LEN];
Emeric Brun2b920a12010-09-23 18:30:22 +0200221char localpeer[MAX_HOSTNAME_LEN];
Willy Tarreaubaaee002006-06-26 02:48:02 +0200222
Willy Tarreau89efaed2013-12-13 15:14:55 +0100223/* used from everywhere just to drain results we don't want to read and which
224 * recent versions of gcc increasingly and annoyingly complain about.
225 */
226int shut_your_big_mouth_gcc_int = 0;
227
William Lallemand73b85e72017-06-01 17:38:51 +0200228static char **next_argv = NULL;
229
William Lallemandbc193052018-09-11 10:06:26 +0200230struct list proc_list = LIST_HEAD_INIT(proc_list);
231
232int master = 0; /* 1 if in master, 0 if in child */
Willy Tarreaubf696402019-03-01 10:09:28 +0100233unsigned int rlim_fd_cur_at_boot = 0;
234unsigned int rlim_fd_max_at_boot = 0;
William Lallemandbc193052018-09-11 10:06:26 +0200235
William Lallemand16dd1b32018-11-19 18:46:18 +0100236struct mworker_proc *proc_self = NULL;
William Lallemandbc193052018-09-11 10:06:26 +0200237
William Lallemandb3f2be32018-09-11 10:06:18 +0200238static void *run_thread_poll_loop(void *data);
239
Willy Tarreauff055502014-04-28 22:27:06 +0200240/* bitfield of a few warnings to emit just once (WARN_*) */
241unsigned int warned = 0;
242
William Lallemande7361152018-10-26 14:47:36 +0200243/* master CLI configuration (-S flag) */
244struct list mworker_cli_conf = LIST_HEAD_INIT(mworker_cli_conf);
Willy Tarreaucdb737e2016-12-21 18:43:10 +0100245
246/* These are strings to be reported in the output of "haproxy -vv". They may
247 * either be constants (in which case must_free must be zero) or dynamically
248 * allocated strings to pass to free() on exit, and in this case must_free
249 * must be non-zero.
250 */
251struct list build_opts_list = LIST_HEAD_INIT(build_opts_list);
252struct build_opts_str {
253 struct list list;
254 const char *str;
255 int must_free;
256};
257
Willy Tarreaue6945732016-12-21 19:57:00 +0100258/* These functions are called just after the point where the program exits
259 * after a config validity check, so they are generally suited for resource
260 * allocation and slow initializations that should be skipped during basic
261 * config checks. The functions must return 0 on success, or a combination
262 * of ERR_* flags (ERR_WARN, ERR_ABORT, ERR_FATAL, ...). The 2 latter cause
263 * and immediate exit, so the function must have emitted any useful error.
264 */
265struct list post_check_list = LIST_HEAD_INIT(post_check_list);
266struct post_check_fct {
267 struct list list;
268 int (*fct)();
269};
270
Christopher Fauletc1692962019-08-12 09:51:07 +0200271/* These functions are called for each proxy just after the config validity
272 * check. The functions must return 0 on success, or a combination of ERR_*
273 * flags (ERR_WARN, ERR_ABORT, ERR_FATAL, ...). The 2 latter cause and immediate
274 * exit, so the function must have emitted any useful error.
275 */
276struct list post_proxy_check_list = LIST_HEAD_INIT(post_proxy_check_list);
277struct post_proxy_check_fct {
278 struct list list;
279 int (*fct)(struct proxy *);
280};
281
282/* These functions are called for each server just after the config validity
283 * check. The functions must return 0 on success, or a combination of ERR_*
284 * flags (ERR_WARN, ERR_ABORT, ERR_FATAL, ...). The 2 latter cause and immediate
285 * exit, so the function must have emitted any useful error.
286 */
287struct list post_server_check_list = LIST_HEAD_INIT(post_server_check_list);
288struct post_server_check_fct {
289 struct list list;
290 int (*fct)(struct server *);
291};
292
Willy Tarreau082b6282019-05-22 14:42:12 +0200293/* These functions are called for each thread just after the thread creation
294 * and before running the init functions. They should be used to do per-thread
295 * (re-)allocations that are needed by subsequent functoins. They must return 0
296 * if an error occurred. */
297struct list per_thread_alloc_list = LIST_HEAD_INIT(per_thread_alloc_list);
298struct per_thread_alloc_fct {
Willy Tarreau05554e62016-12-21 20:46:26 +0100299 struct list list;
Willy Tarreau082b6282019-05-22 14:42:12 +0200300 int (*fct)();
Willy Tarreau05554e62016-12-21 20:46:26 +0100301};
302
Christopher Faulet415f6112017-07-25 16:52:58 +0200303/* These functions are called for each thread just after the thread creation
304 * and before running the scheduler. They should be used to do per-thread
305 * initializations. They must return 0 if an error occurred. */
306struct list per_thread_init_list = LIST_HEAD_INIT(per_thread_init_list);
307struct per_thread_init_fct {
308 struct list list;
309 int (*fct)();
310};
311
Willy Tarreau082b6282019-05-22 14:42:12 +0200312/* These functions are called when freeing the global sections at the end of
313 * deinit, after everything is stopped. They don't return anything. They should
314 * not release shared resources that are possibly used by other deinit
315 * functions, only close/release what is private. Use the per_thread_free_list
316 * to release shared resources.
317 */
318struct list post_deinit_list = LIST_HEAD_INIT(post_deinit_list);
319struct post_deinit_fct {
320 struct list list;
321 void (*fct)();
322};
323
Christopher Faulet3ea5cbe2019-07-31 08:44:12 +0200324/* These functions are called when freeing a proxy during the deinit, after
325 * everything isg stopped. They don't return anything. They should not release
326 * the proxy itself or any shared resources that are possibly used by other
327 * deinit functions, only close/release what is private.
328 */
329struct list proxy_deinit_list = LIST_HEAD_INIT(proxy_deinit_list);
330struct proxy_deinit_fct {
331 struct list list;
332 void (*fct)(struct proxy *);
333};
334
335/* These functions are called when freeing a server during the deinit, after
336 * everything isg stopped. They don't return anything. They should not release
337 * the proxy itself or any shared resources that are possibly used by other
338 * deinit functions, only close/release what is private.
339 */
340struct list server_deinit_list = LIST_HEAD_INIT(server_deinit_list);
341struct server_deinit_fct {
342 struct list list;
343 void (*fct)(struct server *);
344};
345
Willy Tarreau082b6282019-05-22 14:42:12 +0200346/* These functions are called when freeing the global sections at the end of
347 * deinit, after the thread deinit functions, to release unneeded memory
348 * allocations. They don't return anything, and they work in best effort mode
349 * as their sole goal is to make valgrind mostly happy.
350 */
351struct list per_thread_free_list = LIST_HEAD_INIT(per_thread_free_list);
352struct per_thread_free_fct {
353 struct list list;
354 int (*fct)();
355};
356
Christopher Faulet415f6112017-07-25 16:52:58 +0200357/* These functions are called for each thread just after the scheduler loop and
358 * before exiting the thread. They don't return anything and, as for post-deinit
359 * functions, they work in best effort mode as their sole goal is to make
360 * valgrind mostly happy. */
361struct list per_thread_deinit_list = LIST_HEAD_INIT(per_thread_deinit_list);
362struct per_thread_deinit_fct {
363 struct list list;
364 void (*fct)();
365};
366
Willy Tarreaubaaee002006-06-26 02:48:02 +0200367/*********************************************************************/
368/* general purpose functions ***************************************/
369/*********************************************************************/
370
Willy Tarreaucdb737e2016-12-21 18:43:10 +0100371/* used to register some build option strings at boot. Set must_free to
372 * non-zero if the string must be freed upon exit.
373 */
374void hap_register_build_opts(const char *str, int must_free)
375{
376 struct build_opts_str *b;
377
378 b = calloc(1, sizeof(*b));
379 if (!b) {
380 fprintf(stderr, "out of memory\n");
381 exit(1);
382 }
383 b->str = str;
384 b->must_free = must_free;
385 LIST_ADDQ(&build_opts_list, &b->list);
386}
387
Willy Tarreaue6945732016-12-21 19:57:00 +0100388/* used to register some initialization functions to call after the checks. */
389void hap_register_post_check(int (*fct)())
390{
391 struct post_check_fct *b;
392
393 b = calloc(1, sizeof(*b));
394 if (!b) {
395 fprintf(stderr, "out of memory\n");
396 exit(1);
397 }
398 b->fct = fct;
399 LIST_ADDQ(&post_check_list, &b->list);
400}
401
Christopher Fauletc1692962019-08-12 09:51:07 +0200402/* used to register some initialization functions to call for each proxy after
403 * the checks.
404 */
405void hap_register_post_proxy_check(int (*fct)(struct proxy *))
406{
407 struct post_proxy_check_fct *b;
408
409 b = calloc(1, sizeof(*b));
410 if (!b) {
411 fprintf(stderr, "out of memory\n");
412 exit(1);
413 }
414 b->fct = fct;
415 LIST_ADDQ(&post_proxy_check_list, &b->list);
416}
417
418/* used to register some initialization functions to call for each server after
419 * the checks.
420 */
421void hap_register_post_server_check(int (*fct)(struct server *))
422{
423 struct post_server_check_fct *b;
424
425 b = calloc(1, sizeof(*b));
426 if (!b) {
427 fprintf(stderr, "out of memory\n");
428 exit(1);
429 }
430 b->fct = fct;
431 LIST_ADDQ(&post_server_check_list, &b->list);
432}
433
Willy Tarreau05554e62016-12-21 20:46:26 +0100434/* used to register some de-initialization functions to call after everything
435 * has stopped.
436 */
437void hap_register_post_deinit(void (*fct)())
438{
439 struct post_deinit_fct *b;
440
441 b = calloc(1, sizeof(*b));
442 if (!b) {
443 fprintf(stderr, "out of memory\n");
444 exit(1);
445 }
446 b->fct = fct;
447 LIST_ADDQ(&post_deinit_list, &b->list);
448}
449
Christopher Faulet3ea5cbe2019-07-31 08:44:12 +0200450/* used to register some per proxy de-initialization functions to call after
451 * everything has stopped.
452 */
453void hap_register_proxy_deinit(void (*fct)(struct proxy *))
454{
455 struct proxy_deinit_fct *b;
456
457 b = calloc(1, sizeof(*b));
458 if (!b) {
459 fprintf(stderr, "out of memory\n");
460 exit(1);
461 }
462 b->fct = fct;
463 LIST_ADDQ(&proxy_deinit_list, &b->list);
464}
465
466
467/* used to register some per server de-initialization functions to call after
468 * everything has stopped.
469 */
470void hap_register_server_deinit(void (*fct)(struct server *))
471{
472 struct server_deinit_fct *b;
473
474 b = calloc(1, sizeof(*b));
475 if (!b) {
476 fprintf(stderr, "out of memory\n");
477 exit(1);
478 }
479 b->fct = fct;
480 LIST_ADDQ(&server_deinit_list, &b->list);
481}
482
Willy Tarreau082b6282019-05-22 14:42:12 +0200483/* used to register some allocation functions to call for each thread. */
484void hap_register_per_thread_alloc(int (*fct)())
485{
486 struct per_thread_alloc_fct *b;
487
488 b = calloc(1, sizeof(*b));
489 if (!b) {
490 fprintf(stderr, "out of memory\n");
491 exit(1);
492 }
493 b->fct = fct;
494 LIST_ADDQ(&per_thread_alloc_list, &b->list);
495}
496
Christopher Faulet415f6112017-07-25 16:52:58 +0200497/* used to register some initialization functions to call for each thread. */
498void hap_register_per_thread_init(int (*fct)())
499{
500 struct per_thread_init_fct *b;
501
502 b = calloc(1, sizeof(*b));
503 if (!b) {
504 fprintf(stderr, "out of memory\n");
505 exit(1);
506 }
507 b->fct = fct;
508 LIST_ADDQ(&per_thread_init_list, &b->list);
509}
510
511/* used to register some de-initialization functions to call for each thread. */
512void hap_register_per_thread_deinit(void (*fct)())
513{
514 struct per_thread_deinit_fct *b;
515
516 b = calloc(1, sizeof(*b));
517 if (!b) {
518 fprintf(stderr, "out of memory\n");
519 exit(1);
520 }
521 b->fct = fct;
522 LIST_ADDQ(&per_thread_deinit_list, &b->list);
523}
524
Willy Tarreau082b6282019-05-22 14:42:12 +0200525/* used to register some free functions to call for each thread. */
526void hap_register_per_thread_free(int (*fct)())
527{
528 struct per_thread_free_fct *b;
529
530 b = calloc(1, sizeof(*b));
531 if (!b) {
532 fprintf(stderr, "out of memory\n");
533 exit(1);
534 }
535 b->fct = fct;
536 LIST_ADDQ(&per_thread_free_list, &b->list);
537}
538
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100539static void display_version()
Willy Tarreaubaaee002006-06-26 02:48:02 +0200540{
Willy Tarreau08dd2022019-11-21 18:07:30 +0100541 printf("HA-Proxy version %s %s - https://haproxy.org/\n"
542 PRODUCT_STATUS "\n", haproxy_version, haproxy_date);
Willy Tarreau47479eb2019-11-21 18:48:20 +0100543
544 if (strlen(PRODUCT_URL_BUGS) > 0) {
545 char base_version[20];
546 int dots = 0;
547 char *del;
548
549 /* only retrieve the base version without distro-specific extensions */
550 for (del = haproxy_version; *del; del++) {
551 if (*del == '.')
552 dots++;
553 else if (*del < '0' || *del > '9')
554 break;
555 }
556
557 strlcpy2(base_version, haproxy_version, del - haproxy_version + 1);
558 if (dots < 2)
559 printf("Known bugs: https://github.com/haproxy/haproxy/issues?q=is:issue+is:open\n");
560 else
561 printf("Known bugs: " PRODUCT_URL_BUGS "\n", base_version);
562 }
Willy Tarreaubaaee002006-06-26 02:48:02 +0200563}
564
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100565static void display_build_opts()
Willy Tarreau7b066db2007-12-02 11:28:59 +0100566{
Willy Tarreaucdb737e2016-12-21 18:43:10 +0100567 struct build_opts_str *item;
568
Willy Tarreau7b066db2007-12-02 11:28:59 +0100569 printf("Build options :"
570#ifdef BUILD_TARGET
Willy Tarreau9f2b7302008-01-02 20:48:34 +0100571 "\n TARGET = " BUILD_TARGET
Willy Tarreau7b066db2007-12-02 11:28:59 +0100572#endif
573#ifdef BUILD_CPU
Willy Tarreau9f2b7302008-01-02 20:48:34 +0100574 "\n CPU = " BUILD_CPU
Willy Tarreau7b066db2007-12-02 11:28:59 +0100575#endif
576#ifdef BUILD_CC
Willy Tarreau9f2b7302008-01-02 20:48:34 +0100577 "\n CC = " BUILD_CC
578#endif
579#ifdef BUILD_CFLAGS
580 "\n CFLAGS = " BUILD_CFLAGS
Willy Tarreau7b066db2007-12-02 11:28:59 +0100581#endif
Willy Tarreau9f2b7302008-01-02 20:48:34 +0100582#ifdef BUILD_OPTIONS
583 "\n OPTIONS = " BUILD_OPTIONS
Willy Tarreau7b066db2007-12-02 11:28:59 +0100584#endif
Willy Tarreau7728ed32019-03-27 13:20:08 +0100585#ifdef BUILD_FEATURES
586 "\n\nFeature list : " BUILD_FEATURES
587#endif
Willy Tarreau27a674e2009-08-17 07:23:33 +0200588 "\n\nDefault settings :"
Willy Tarreauca783d42019-03-13 10:03:07 +0100589 "\n bufsize = %d, maxrewrite = %d, maxpollevents = %d"
Willy Tarreau27a674e2009-08-17 07:23:33 +0200590 "\n\n",
Willy Tarreauca783d42019-03-13 10:03:07 +0100591 BUFSIZE, MAXREWRITE, MAX_POLL_EVENTS);
Willy Tarreaube5b6852009-10-03 18:57:08 +0200592
Willy Tarreaucdb737e2016-12-21 18:43:10 +0100593 list_for_each_entry(item, &build_opts_list, list) {
594 puts(item->str);
595 }
596
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +0100597 putchar('\n');
598
Willy Tarreaube5b6852009-10-03 18:57:08 +0200599 list_pollers(stdout);
600 putchar('\n');
Christopher Faulet98d9fe22018-04-10 14:37:32 +0200601 list_mux_proto(stdout);
602 putchar('\n');
Willy Tarreau679bba12019-03-19 08:08:10 +0100603 list_services(stdout);
604 putchar('\n');
Christopher Fauletb3f4e142016-03-07 12:46:38 +0100605 list_filters(stdout);
606 putchar('\n');
Willy Tarreau7b066db2007-12-02 11:28:59 +0100607}
608
Willy Tarreaubaaee002006-06-26 02:48:02 +0200609/*
610 * This function prints the command line usage and exits
611 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100612static void usage(char *name)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200613{
614 display_version();
615 fprintf(stderr,
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200616 "Usage : %s [-f <cfgfile|cfgdir>]* [ -vdV"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200617 "D ] [ -n <maxconn> ] [ -N <maxpconn> ]\n"
Willy Tarreaua088d312015-10-08 11:58:48 +0200618 " [ -p <pidfile> ] [ -m <max megs> ] [ -C <dir> ] [-- <cfgfile>*]\n"
Willy Tarreau7b066db2007-12-02 11:28:59 +0100619 " -v displays version ; -vv shows known build options.\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200620 " -d enters debug mode ; -db only disables background mode.\n"
Willy Tarreau6e064432012-05-08 15:40:42 +0200621 " -dM[<byte>] poisons memory with <byte> (defaults to 0x50)\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200622 " -V enters verbose mode (disables quiet mode)\n"
Willy Tarreau576132e2011-09-10 19:26:56 +0200623 " -D goes daemon ; -C changes to <dir> before loading files.\n"
William Lallemand095ba4c2017-06-01 17:38:50 +0200624 " -W master-worker mode.\n"
Tim Duesterhusd6942c82017-11-20 15:58:35 +0100625#if defined(USE_SYSTEMD)
626 " -Ws master-worker mode with systemd notify support.\n"
627#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +0200628 " -q quiet mode : don't display messages\n"
Willy Tarreau5d01a632009-06-22 16:02:30 +0200629 " -c check mode : only check config files and exit\n"
Willy Tarreauca783d42019-03-13 10:03:07 +0100630 " -n sets the maximum total # of connections (uses ulimit -n)\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200631 " -m limits the usable amount of memory (in MB)\n"
632 " -N sets the default, per-proxy maximum # of connections (%d)\n"
Emeric Brun2b920a12010-09-23 18:30:22 +0200633 " -L set local peer name (default to hostname)\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200634 " -p writes pids of all children to this file\n"
Willy Tarreaue5733232019-05-22 19:24:06 +0200635#if defined(USE_EPOLL)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200636 " -de disables epoll() usage even when available\n"
637#endif
Willy Tarreaue5733232019-05-22 19:24:06 +0200638#if defined(USE_KQUEUE)
Willy Tarreau1e63130a2007-04-09 12:03:06 +0200639 " -dk disables kqueue() usage even when available\n"
640#endif
Willy Tarreaue5733232019-05-22 19:24:06 +0200641#if defined(USE_EVPORTS)
Emmanuel Hocdet0ba4f482019-04-08 16:53:32 +0000642 " -dv disables event ports usage even when available\n"
643#endif
Willy Tarreaue5733232019-05-22 19:24:06 +0200644#if defined(USE_POLL)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200645 " -dp disables poll() usage even when available\n"
646#endif
Willy Tarreaue5733232019-05-22 19:24:06 +0200647#if defined(USE_LINUX_SPLICE)
Willy Tarreau3ab68cf2009-01-25 16:03:28 +0100648 " -dS disables splice usage (broken on old kernels)\n"
649#endif
Nenad Merdanovic88afe032014-04-14 15:56:58 +0200650#if defined(USE_GETADDRINFO)
651 " -dG disables getaddrinfo() usage\n"
652#endif
Lukas Tribusa0bcbdc2016-09-12 21:42:20 +0000653#if defined(SO_REUSEPORT)
654 " -dR disables SO_REUSEPORT usage\n"
655#endif
Willy Tarreau3eed10e2016-11-07 21:03:16 +0100656 " -dr ignores server address resolution failures\n"
Emeric Brun850efd52014-01-29 12:24:34 +0100657 " -dV disables SSL verify on servers side\n"
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +0200658 " -sf/-st [pid ]* finishes/terminates old pids.\n"
Olivier Houchardf73629d2017-04-05 22:33:04 +0200659 " -x <unix_socket> get listening sockets from a unix socket\n"
William Lallemand63329e32019-06-13 17:03:37 +0200660 " -S <bind>[,<bind options>...] new master CLI\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200661 "\n",
Willy Tarreauca783d42019-03-13 10:03:07 +0100662 name, cfg_maxpconn);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200663 exit(1);
664}
665
666
667
668/*********************************************************************/
669/* more specific functions ***************************************/
670/*********************************************************************/
671
William Lallemand73b85e72017-06-01 17:38:51 +0200672/* sends the signal <sig> to all pids found in <oldpids>. Returns the number of
673 * pids the signal was correctly delivered to.
674 */
William Lallemande25473c2019-04-01 11:29:56 +0200675int tell_old_pids(int sig)
William Lallemand73b85e72017-06-01 17:38:51 +0200676{
677 int p;
678 int ret = 0;
679 for (p = 0; p < nb_oldpids; p++)
680 if (kill(oldpids[p], sig) == 0)
681 ret++;
682 return ret;
683}
684
William Lallemand75ea0a02017-11-15 19:02:58 +0100685/*
William Lallemand73b85e72017-06-01 17:38:51 +0200686 * remove a pid forom the olpid array and decrease nb_oldpids
687 * return 1 pid was found otherwise return 0
688 */
689
690int delete_oldpid(int pid)
691{
692 int i;
693
694 for (i = 0; i < nb_oldpids; i++) {
695 if (oldpids[i] == pid) {
696 oldpids[i] = oldpids[nb_oldpids - 1];
697 oldpids[nb_oldpids - 1] = 0;
698 nb_oldpids--;
699 return 1;
700 }
701 }
702 return 0;
703}
704
William Lallemand85b0bd92017-06-01 17:38:53 +0200705
706static void get_cur_unixsocket()
707{
708 /* if -x was used, try to update the stat socket if not available anymore */
709 if (global.stats_fe) {
710 struct bind_conf *bind_conf;
711
712 /* pass through all stats socket */
713 list_for_each_entry(bind_conf, &global.stats_fe->conf.bind, by_fe) {
714 struct listener *l;
715
716 list_for_each_entry(l, &bind_conf->listeners, by_bind) {
717
718 if (l->addr.ss_family == AF_UNIX &&
719 (bind_conf->level & ACCESS_FD_LISTENERS)) {
720 const struct sockaddr_un *un;
721
722 un = (struct sockaddr_un *)&l->addr;
723 /* priority to old_unixsocket */
724 if (!cur_unixsocket) {
725 cur_unixsocket = strdup(un->sun_path);
726 } else {
727 if (old_unixsocket && !strcmp(un->sun_path, old_unixsocket)) {
728 free(cur_unixsocket);
729 cur_unixsocket = strdup(old_unixsocket);
730 return;
731 }
732 }
733 }
734 }
735 }
736 }
737 if (!cur_unixsocket && old_unixsocket)
738 cur_unixsocket = strdup(old_unixsocket);
739}
740
William Lallemand73b85e72017-06-01 17:38:51 +0200741/*
742 * When called, this function reexec haproxy with -sf followed by current
Joseph Herlant03420902018-11-15 10:41:50 -0800743 * children PIDs and possibly old children PIDs if they didn't leave yet.
William Lallemand73b85e72017-06-01 17:38:51 +0200744 */
William Lallemanda57b7e32018-12-14 21:11:31 +0100745void mworker_reload()
William Lallemand73b85e72017-06-01 17:38:51 +0200746{
747 int next_argc = 0;
William Lallemand73b85e72017-06-01 17:38:51 +0200748 char *msg = NULL;
Willy Tarreau8dca1952019-03-01 10:21:55 +0100749 struct rlimit limit;
William Lallemand7c756a82018-11-26 11:53:40 +0100750 struct per_thread_deinit_fct *ptdf;
William Lallemand73b85e72017-06-01 17:38:51 +0200751
752 mworker_block_signals();
Tim Duesterhusd6942c82017-11-20 15:58:35 +0100753#if defined(USE_SYSTEMD)
754 if (global.tune.options & GTUNE_USE_SYSTEMD)
755 sd_notify(0, "RELOADING=1");
756#endif
William Lallemand73b85e72017-06-01 17:38:51 +0200757 setenv("HAPROXY_MWORKER_REEXEC", "1", 1);
758
William Lallemandbc193052018-09-11 10:06:26 +0200759 mworker_proc_list_to_env(); /* put the children description in the env */
760
William Lallemand7c756a82018-11-26 11:53:40 +0100761 /* during the reload we must ensure that every FDs that can't be
762 * reuse (ie those that are not referenced in the proc_list)
763 * are closed or they will leak. */
764
765 /* close the listeners FD */
766 mworker_cli_proxy_stop();
William Lallemand16866672019-06-24 17:40:48 +0200767
768 if (getenv("HAPROXY_MWORKER_WAIT_ONLY") == NULL) {
769 /* close the poller FD and the thread waker pipe FD */
770 list_for_each_entry(ptdf, &per_thread_deinit_list, list)
771 ptdf->fct();
772 if (fdtab)
773 deinit_pollers();
774 }
Willy Tarreau5db847a2019-05-09 14:13:35 +0200775#if defined(USE_OPENSSL) && (HA_OPENSSL_VERSION_NUMBER >= 0x10101000L)
William Lallemand5fdb5b32019-10-15 14:04:08 +0200776 /* close random device FDs */
777 RAND_keep_random_devices_open(0);
Rob Allen56996da2019-05-03 09:11:32 +0100778#endif
William Lallemand7c756a82018-11-26 11:53:40 +0100779
Willy Tarreau8dca1952019-03-01 10:21:55 +0100780 /* restore the initial FD limits */
781 limit.rlim_cur = rlim_fd_cur_at_boot;
782 limit.rlim_max = rlim_fd_max_at_boot;
783 if (setrlimit(RLIMIT_NOFILE, &limit) == -1) {
784 getrlimit(RLIMIT_NOFILE, &limit);
785 ha_warning("Failed to restore initial FD limits (cur=%u max=%u), using cur=%u max=%u\n",
786 rlim_fd_cur_at_boot, rlim_fd_max_at_boot,
787 (unsigned int)limit.rlim_cur, (unsigned int)limit.rlim_max);
788 }
789
William Lallemand73b85e72017-06-01 17:38:51 +0200790 /* compute length */
791 while (next_argv[next_argc])
792 next_argc++;
793
William Lallemand85b0bd92017-06-01 17:38:53 +0200794 /* 1 for haproxy -sf, 2 for -x /socket */
William Lallemand3f128872019-04-01 11:29:59 +0200795 next_argv = realloc(next_argv, (next_argc + 1 + 2 + mworker_child_nb() + nb_oldpids + 1) * sizeof(char *));
William Lallemand73b85e72017-06-01 17:38:51 +0200796 if (next_argv == NULL)
797 goto alloc_error;
798
William Lallemand73b85e72017-06-01 17:38:51 +0200799 /* add -sf <PID>* to argv */
William Lallemand3f128872019-04-01 11:29:59 +0200800 if (mworker_child_nb() > 0) {
801 struct mworker_proc *child;
802
William Lallemand73b85e72017-06-01 17:38:51 +0200803 next_argv[next_argc++] = "-sf";
William Lallemand3f128872019-04-01 11:29:59 +0200804
805 list_for_each_entry(child, &proc_list, list) {
William Lallemand677e2f22019-11-19 17:04:18 +0100806 if (!(child->options & (PROC_O_TYPE_WORKER|PROC_O_TYPE_PROG)) || child->pid <= -1 )
William Lallemand3f128872019-04-01 11:29:59 +0200807 continue;
808 next_argv[next_argc] = memprintf(&msg, "%d", child->pid);
William Lallemand73b85e72017-06-01 17:38:51 +0200809 if (next_argv[next_argc] == NULL)
810 goto alloc_error;
811 msg = NULL;
William Lallemand3f128872019-04-01 11:29:59 +0200812 next_argc++;
William Lallemand73b85e72017-06-01 17:38:51 +0200813 }
814 }
William Lallemand3f128872019-04-01 11:29:59 +0200815
William Lallemand73b85e72017-06-01 17:38:51 +0200816 next_argv[next_argc] = NULL;
William Lallemand85b0bd92017-06-01 17:38:53 +0200817
William Lallemand2bf6d622017-06-20 11:20:23 +0200818 /* add the -x option with the stat socket */
William Lallemand85b0bd92017-06-01 17:38:53 +0200819 if (cur_unixsocket) {
820
William Lallemand2bf6d622017-06-20 11:20:23 +0200821 next_argv[next_argc++] = "-x";
822 next_argv[next_argc++] = (char *)cur_unixsocket;
823 next_argv[next_argc++] = NULL;
William Lallemand85b0bd92017-06-01 17:38:53 +0200824 }
825
Christopher Faulet767a84b2017-11-24 16:50:31 +0100826 ha_warning("Reexecuting Master process\n");
Willy Tarreaue0d86e22019-08-26 10:37:39 +0200827 signal(SIGPROF, SIG_IGN);
Tim Duesterhus0436ab72017-11-12 17:39:18 +0100828 execvp(next_argv[0], next_argv);
William Lallemand73b85e72017-06-01 17:38:51 +0200829
Christopher Faulet767a84b2017-11-24 16:50:31 +0100830 ha_warning("Failed to reexecute the master process [%d]: %s\n", pid, strerror(errno));
William Lallemand722d4ca2017-11-15 19:02:55 +0100831 return;
832
William Lallemand73b85e72017-06-01 17:38:51 +0200833alloc_error:
Joseph Herlant07a08342018-11-15 10:43:05 -0800834 ha_warning("Failed to reexecute the master process [%d]: Cannot allocate memory\n", pid);
William Lallemand73b85e72017-06-01 17:38:51 +0200835 return;
836}
837
William Lallemandb3f2be32018-09-11 10:06:18 +0200838static void mworker_loop()
839{
840
841#if defined(USE_SYSTEMD)
842 if (global.tune.options & GTUNE_USE_SYSTEMD)
843 sd_notifyf(0, "READY=1\nMAINPID=%lu", (unsigned long)getpid());
844#endif
Willy Tarreaud83b6c12019-04-18 11:31:36 +0200845 /* Busy polling makes no sense in the master :-) */
846 global.tune.options &= ~GTUNE_BUSY_POLLING;
William Lallemandb3f2be32018-09-11 10:06:18 +0200847
William Lallemandbc193052018-09-11 10:06:26 +0200848 master = 1;
849
Willy Tarreaud26c9f92019-12-11 14:24:07 +0100850 signal_unregister(SIGTTIN);
851 signal_unregister(SIGTTOU);
William Lallemand0564d412018-11-20 17:36:53 +0100852 signal_unregister(SIGUSR1);
853 signal_unregister(SIGHUP);
854 signal_unregister(SIGQUIT);
855
William Lallemandb3f2be32018-09-11 10:06:18 +0200856 signal_register_fct(SIGTERM, mworker_catch_sigterm, SIGTERM);
857 signal_register_fct(SIGUSR1, mworker_catch_sigterm, SIGUSR1);
Willy Tarreaud26c9f92019-12-11 14:24:07 +0100858 signal_register_fct(SIGTTIN, mworker_broadcast_signal, SIGTTIN);
859 signal_register_fct(SIGTTOU, mworker_broadcast_signal, SIGTTOU);
William Lallemandb3f2be32018-09-11 10:06:18 +0200860 signal_register_fct(SIGINT, mworker_catch_sigterm, SIGINT);
861 signal_register_fct(SIGHUP, mworker_catch_sighup, SIGHUP);
862 signal_register_fct(SIGUSR2, mworker_catch_sighup, SIGUSR2);
863 signal_register_fct(SIGCHLD, mworker_catch_sigchld, SIGCHLD);
864
865 mworker_unblock_signals();
866 mworker_cleanlisteners();
William Lallemand27f3fa52018-12-06 14:05:20 +0100867 mworker_cleantasks();
William Lallemandb3f2be32018-09-11 10:06:18 +0200868
William Lallemandbc193052018-09-11 10:06:26 +0200869 mworker_catch_sigchld(NULL); /* ensure we clean the children in case
870 some SIGCHLD were lost */
871
William Lallemandb3f2be32018-09-11 10:06:18 +0200872 global.nbthread = 1;
873 relative_pid = 1;
874 pid_bit = 1;
Willy Tarreaua38a7172019-02-02 17:11:28 +0100875 all_proc_mask = 1;
William Lallemandb3f2be32018-09-11 10:06:18 +0200876
William Lallemand2672eb92018-12-14 15:52:39 +0100877#ifdef USE_THREAD
878 tid_bit = 1;
879 all_threads_mask = 1;
880#endif
881
William Lallemandb3f2be32018-09-11 10:06:18 +0200882 jobs++; /* this is the "master" job, we want to take care of the
883 signals even if there is no listener so the poll loop don't
884 leave */
885
886 fork_poller();
Willy Tarreaub4f7cc32019-05-03 09:27:30 +0200887 run_thread_poll_loop(0);
William Lallemandb3f2be32018-09-11 10:06:18 +0200888}
William Lallemandcb11fd22017-06-01 17:38:52 +0200889
890/*
891 * Reexec the process in failure mode, instead of exiting
892 */
893void reexec_on_failure()
894{
895 if (!atexit_flag)
896 return;
897
898 setenv("HAPROXY_MWORKER_WAIT_ONLY", "1", 1);
899
Christopher Faulet767a84b2017-11-24 16:50:31 +0100900 ha_warning("Reexecuting Master process in waitpid mode\n");
William Lallemandcb11fd22017-06-01 17:38:52 +0200901 mworker_reload();
William Lallemandcb11fd22017-06-01 17:38:52 +0200902}
William Lallemand73b85e72017-06-01 17:38:51 +0200903
904
905/*
Willy Tarreaud0807c32010-08-27 18:26:11 +0200906 * upon SIGUSR1, let's have a soft stop. Note that soft_stop() broadcasts
907 * a signal zero to all subscribers. This means that it's as easy as
908 * subscribing to signal 0 to get informed about an imminent shutdown.
Willy Tarreaubaaee002006-06-26 02:48:02 +0200909 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100910static void sig_soft_stop(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200911{
912 soft_stop();
Willy Tarreau24f4efa2010-08-27 17:56:48 +0200913 signal_unregister_handler(sh);
Willy Tarreaubafbe012017-11-24 17:34:44 +0100914 pool_gc(NULL);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200915}
916
917/*
918 * upon SIGTTOU, we pause everything
919 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100920static void sig_pause(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200921{
922 pause_proxies();
Willy Tarreaubafbe012017-11-24 17:34:44 +0100923 pool_gc(NULL);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200924}
925
926/*
927 * upon SIGTTIN, let's have a soft stop.
928 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100929static void sig_listen(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200930{
Willy Tarreaube58c382011-07-24 18:28:10 +0200931 resume_proxies();
Willy Tarreaubaaee002006-06-26 02:48:02 +0200932}
933
934/*
935 * this function dumps every server's state when the process receives SIGHUP.
936 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100937static void sig_dump_state(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200938{
Olivier Houchardfbc74e82017-11-24 16:54:05 +0100939 struct proxy *p = proxies_list;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200940
Christopher Faulet767a84b2017-11-24 16:50:31 +0100941 ha_warning("SIGHUP received, dumping servers states.\n");
Willy Tarreaubaaee002006-06-26 02:48:02 +0200942 while (p) {
943 struct server *s = p->srv;
944
945 send_log(p, LOG_NOTICE, "SIGHUP received, dumping servers states for proxy %s.\n", p->id);
946 while (s) {
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100947 chunk_printf(&trash,
948 "SIGHUP: Server %s/%s is %s. Conn: %d act, %d pend, %lld tot.",
949 p->id, s->id,
Emeric Brun52a91d32017-08-31 14:41:55 +0200950 (s->cur_state != SRV_ST_STOPPED) ? "UP" : "DOWN",
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100951 s->cur_sess, s->nbpend, s->counters.cum_sess);
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200952 ha_warning("%s\n", trash.area);
953 send_log(p, LOG_NOTICE, "%s\n", trash.area);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200954 s = s->next;
955 }
956
Willy Tarreau5fcc8f12007-09-17 11:27:09 +0200957 /* FIXME: those info are a bit outdated. We should be able to distinguish between FE and BE. */
958 if (!p->srv) {
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100959 chunk_printf(&trash,
960 "SIGHUP: Proxy %s has no servers. Conn: act(FE+BE): %d+%d, %d pend (%d unass), tot(FE+BE): %lld+%lld.",
961 p->id,
962 p->feconn, p->beconn, p->totpend, p->nbpend, p->fe_counters.cum_conn, p->be_counters.cum_conn);
Willy Tarreau5fcc8f12007-09-17 11:27:09 +0200963 } else if (p->srv_act == 0) {
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100964 chunk_printf(&trash,
965 "SIGHUP: Proxy %s %s ! Conn: act(FE+BE): %d+%d, %d pend (%d unass), tot(FE+BE): %lld+%lld.",
966 p->id,
967 (p->srv_bck) ? "is running on backup servers" : "has no server available",
968 p->feconn, p->beconn, p->totpend, p->nbpend, p->fe_counters.cum_conn, p->be_counters.cum_conn);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200969 } else {
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100970 chunk_printf(&trash,
971 "SIGHUP: Proxy %s has %d active servers and %d backup servers available."
972 " Conn: act(FE+BE): %d+%d, %d pend (%d unass), tot(FE+BE): %lld+%lld.",
973 p->id, p->srv_act, p->srv_bck,
974 p->feconn, p->beconn, p->totpend, p->nbpend, p->fe_counters.cum_conn, p->be_counters.cum_conn);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200975 }
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200976 ha_warning("%s\n", trash.area);
977 send_log(p, LOG_NOTICE, "%s\n", trash.area);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200978
979 p = p->next;
980 }
Willy Tarreaubaaee002006-06-26 02:48:02 +0200981}
982
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100983static void dump(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200984{
Willy Tarreauc6ca1a02007-05-13 19:43:47 +0200985 /* dump memory usage then free everything possible */
986 dump_pools();
Willy Tarreaubafbe012017-11-24 17:34:44 +0100987 pool_gc(NULL);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200988}
989
William Lallemande1340412017-12-28 16:09:36 +0100990/*
991 * This function dup2 the stdio FDs (0,1,2) with <fd>, then closes <fd>
992 * If <fd> < 0, it opens /dev/null and use it to dup
993 *
994 * In the case of chrooting, you have to open /dev/null before the chroot, and
995 * pass the <fd> to this function
996 */
997static void stdio_quiet(int fd)
998{
999 if (fd < 0)
1000 fd = open("/dev/null", O_RDWR, 0);
1001
1002 if (fd > -1) {
1003 fclose(stdin);
1004 fclose(stdout);
1005 fclose(stderr);
1006
1007 dup2(fd, 0);
1008 dup2(fd, 1);
1009 dup2(fd, 2);
1010 if (fd > 2)
1011 close(fd);
1012 return;
1013 }
1014
1015 ha_alert("Cannot open /dev/null\n");
1016 exit(EXIT_FAILURE);
1017}
1018
1019
Joseph Herlant03420902018-11-15 10:41:50 -08001020/* This function checks if cfg_cfgfiles contains directories.
1021 * If it finds one, it adds all the files (and only files) it contains
1022 * in cfg_cfgfiles in place of the directory (and removes the directory).
1023 * It adds the files in lexical order.
1024 * It adds only files with .cfg extension.
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001025 * It doesn't add files with name starting with '.'
1026 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +01001027static void cfgfiles_expand_directories(void)
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001028{
1029 struct wordlist *wl, *wlb;
1030 char *err = NULL;
1031
1032 list_for_each_entry_safe(wl, wlb, &cfg_cfgfiles, list) {
1033 struct stat file_stat;
1034 struct dirent **dir_entries = NULL;
1035 int dir_entries_nb;
1036 int dir_entries_it;
1037
1038 if (stat(wl->s, &file_stat)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001039 ha_alert("Cannot open configuration file/directory %s : %s\n",
1040 wl->s,
1041 strerror(errno));
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001042 exit(1);
1043 }
1044
1045 if (!S_ISDIR(file_stat.st_mode))
1046 continue;
1047
1048 /* from this point wl->s is a directory */
1049
1050 dir_entries_nb = scandir(wl->s, &dir_entries, NULL, alphasort);
1051 if (dir_entries_nb < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001052 ha_alert("Cannot open configuration directory %s : %s\n",
1053 wl->s,
1054 strerror(errno));
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001055 exit(1);
1056 }
1057
1058 /* for each element in the directory wl->s */
1059 for (dir_entries_it = 0; dir_entries_it < dir_entries_nb; dir_entries_it++) {
1060 struct dirent *dir_entry = dir_entries[dir_entries_it];
1061 char *filename = NULL;
1062 char *d_name_cfgext = strstr(dir_entry->d_name, ".cfg");
1063
1064 /* don't add filename that begin with .
Joseph Herlant03420902018-11-15 10:41:50 -08001065 * only add filename with .cfg extension
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001066 */
1067 if (dir_entry->d_name[0] == '.' ||
1068 !(d_name_cfgext && d_name_cfgext[4] == '\0'))
1069 goto next_dir_entry;
1070
1071 if (!memprintf(&filename, "%s/%s", wl->s, dir_entry->d_name)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001072 ha_alert("Cannot load configuration files %s : out of memory.\n",
1073 filename);
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001074 exit(1);
1075 }
1076
1077 if (stat(filename, &file_stat)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001078 ha_alert("Cannot open configuration file %s : %s\n",
1079 wl->s,
1080 strerror(errno));
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001081 exit(1);
1082 }
1083
1084 /* don't add anything else than regular file in cfg_cfgfiles
1085 * this way we avoid loops
1086 */
1087 if (!S_ISREG(file_stat.st_mode))
1088 goto next_dir_entry;
1089
1090 if (!list_append_word(&wl->list, filename, &err)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001091 ha_alert("Cannot load configuration files %s : %s\n",
1092 filename,
1093 err);
Maxime de Roucy379d9c72016-05-13 23:52:56 +02001094 exit(1);
1095 }
1096
1097next_dir_entry:
1098 free(filename);
1099 free(dir_entry);
1100 }
1101
1102 free(dir_entries);
1103
1104 /* remove the current directory (wl) from cfg_cfgfiles */
1105 free(wl->s);
1106 LIST_DEL(&wl->list);
1107 free(wl);
1108 }
1109
1110 free(err);
1111}
1112
Olivier Houchardf73629d2017-04-05 22:33:04 +02001113static int get_old_sockets(const char *unixsocket)
1114{
1115 char *cmsgbuf = NULL, *tmpbuf = NULL;
1116 int *tmpfd = NULL;
1117 struct sockaddr_un addr;
1118 struct cmsghdr *cmsg;
1119 struct msghdr msghdr;
1120 struct iovec iov;
1121 struct xfer_sock_list *xfer_sock = NULL;
Olivier Houchard54740872017-04-06 14:45:14 +02001122 struct timeval tv = { .tv_sec = 1, .tv_usec = 0 };
Olivier Houchardf73629d2017-04-05 22:33:04 +02001123 int sock = -1;
1124 int ret = -1;
1125 int ret2 = -1;
1126 int fd_nb;
1127 int got_fd = 0;
1128 int i = 0;
1129 size_t maxoff = 0, curoff = 0;
1130
1131 memset(&msghdr, 0, sizeof(msghdr));
1132 cmsgbuf = malloc(CMSG_SPACE(sizeof(int)) * MAX_SEND_FD);
1133 if (!cmsgbuf) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001134 ha_warning("Failed to allocate memory to send sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001135 goto out;
1136 }
1137 sock = socket(PF_UNIX, SOCK_STREAM, 0);
1138 if (sock < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001139 ha_warning("Failed to connect to the old process socket '%s'\n",
1140 unixsocket);
Olivier Houchardf73629d2017-04-05 22:33:04 +02001141 goto out;
1142 }
Willy Tarreau719e07c2019-12-11 16:29:10 +01001143 strncpy(addr.sun_path, unixsocket, sizeof(addr.sun_path) - 1);
Olivier Houchardf73629d2017-04-05 22:33:04 +02001144 addr.sun_path[sizeof(addr.sun_path) - 1] = 0;
1145 addr.sun_family = PF_UNIX;
1146 ret = connect(sock, (struct sockaddr *)&addr, sizeof(addr));
1147 if (ret < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001148 ha_warning("Failed to connect to the old process socket '%s'\n",
1149 unixsocket);
Olivier Houchardf73629d2017-04-05 22:33:04 +02001150 goto out;
1151 }
Olivier Houchard54740872017-04-06 14:45:14 +02001152 setsockopt(sock, SOL_SOCKET, SO_RCVTIMEO, (void *)&tv, sizeof(tv));
Olivier Houchardf73629d2017-04-05 22:33:04 +02001153 iov.iov_base = &fd_nb;
1154 iov.iov_len = sizeof(fd_nb);
1155 msghdr.msg_iov = &iov;
1156 msghdr.msg_iovlen = 1;
1157 send(sock, "_getsocks\n", strlen("_getsocks\n"), 0);
1158 /* First, get the number of file descriptors to be received */
1159 if (recvmsg(sock, &msghdr, MSG_WAITALL) != sizeof(fd_nb)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001160 ha_warning("Failed to get the number of sockets to be transferred !\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001161 goto out;
1162 }
1163 if (fd_nb == 0) {
1164 ret = 0;
1165 goto out;
1166 }
Olivier Houchardf143b802017-11-04 15:13:01 +01001167 tmpbuf = malloc(fd_nb * (1 + MAXPATHLEN + 1 + IFNAMSIZ + sizeof(int)));
Olivier Houchardf73629d2017-04-05 22:33:04 +02001168 if (tmpbuf == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001169 ha_warning("Failed to allocate memory while receiving sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001170 goto out;
1171 }
1172 tmpfd = malloc(fd_nb * sizeof(int));
1173 if (tmpfd == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001174 ha_warning("Failed to allocate memory while receiving sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001175 goto out;
1176 }
1177 msghdr.msg_control = cmsgbuf;
1178 msghdr.msg_controllen = CMSG_SPACE(sizeof(int)) * MAX_SEND_FD;
Olivier Houchardf143b802017-11-04 15:13:01 +01001179 iov.iov_len = MAX_SEND_FD * (1 + MAXPATHLEN + 1 + IFNAMSIZ + sizeof(int));
Olivier Houchardf73629d2017-04-05 22:33:04 +02001180 do {
1181 int ret3;
1182
1183 iov.iov_base = tmpbuf + curoff;
1184 ret = recvmsg(sock, &msghdr, 0);
1185 if (ret == -1 && errno == EINTR)
1186 continue;
1187 if (ret <= 0)
1188 break;
1189 /* Send an ack to let the sender know we got the sockets
1190 * and it can send some more
1191 */
1192 do {
1193 ret3 = send(sock, &got_fd, sizeof(got_fd), 0);
1194 } while (ret3 == -1 && errno == EINTR);
1195 for (cmsg = CMSG_FIRSTHDR(&msghdr); cmsg != NULL;
1196 cmsg = CMSG_NXTHDR(&msghdr, cmsg)) {
1197 if (cmsg->cmsg_level == SOL_SOCKET &&
1198 cmsg->cmsg_type == SCM_RIGHTS) {
1199 size_t totlen = cmsg->cmsg_len -
1200 CMSG_LEN(0);
1201 if (totlen / sizeof(int) + got_fd > fd_nb) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001202 ha_warning("Got to many sockets !\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001203 goto out;
1204 }
1205 /*
1206 * Be paranoid and use memcpy() to avoid any
1207 * potential alignement issue.
1208 */
1209 memcpy(&tmpfd[got_fd], CMSG_DATA(cmsg), totlen);
1210 got_fd += totlen / sizeof(int);
1211 }
1212 }
1213 curoff += ret;
1214 } while (got_fd < fd_nb);
1215
1216 if (got_fd != fd_nb) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001217 ha_warning("We didn't get the expected number of sockets (expecting %d got %d)\n",
1218 fd_nb, got_fd);
Olivier Houchardf73629d2017-04-05 22:33:04 +02001219 goto out;
1220 }
1221 maxoff = curoff;
1222 curoff = 0;
1223 for (i = 0; i < got_fd; i++) {
1224 int fd = tmpfd[i];
1225 socklen_t socklen;
1226 int len;
1227
1228 xfer_sock = calloc(1, sizeof(*xfer_sock));
1229 if (!xfer_sock) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001230 ha_warning("Failed to allocate memory in get_old_sockets() !\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001231 break;
1232 }
1233 xfer_sock->fd = -1;
1234
1235 socklen = sizeof(xfer_sock->addr);
1236 if (getsockname(fd, (struct sockaddr *)&xfer_sock->addr, &socklen) != 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001237 ha_warning("Failed to get socket address\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001238 free(xfer_sock);
Olivier Houchardbe7b1ce2017-07-17 17:25:33 +02001239 xfer_sock = NULL;
Olivier Houchardf73629d2017-04-05 22:33:04 +02001240 continue;
1241 }
1242 if (curoff >= maxoff) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001243 ha_warning("Inconsistency while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001244 goto out;
1245 }
1246 len = tmpbuf[curoff++];
1247 if (len > 0) {
1248 /* We have a namespace */
1249 if (curoff + len > maxoff) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001250 ha_warning("Inconsistency while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001251 goto out;
1252 }
1253 xfer_sock->namespace = malloc(len + 1);
1254 if (!xfer_sock->namespace) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001255 ha_warning("Failed to allocate memory while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001256 goto out;
1257 }
1258 memcpy(xfer_sock->namespace, &tmpbuf[curoff], len);
1259 xfer_sock->namespace[len] = 0;
1260 curoff += len;
1261 }
1262 if (curoff >= maxoff) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001263 ha_warning("Inconsistency while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001264 goto out;
1265 }
1266 len = tmpbuf[curoff++];
1267 if (len > 0) {
1268 /* We have an interface */
1269 if (curoff + len > maxoff) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001270 ha_warning("Inconsistency while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001271 goto out;
1272 }
1273 xfer_sock->iface = malloc(len + 1);
1274 if (!xfer_sock->iface) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001275 ha_warning("Failed to allocate memory while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001276 goto out;
1277 }
1278 memcpy(xfer_sock->iface, &tmpbuf[curoff], len);
Olivier Houchard33e083c2018-03-15 17:48:49 +01001279 xfer_sock->iface[len] = 0;
Olivier Houchardf73629d2017-04-05 22:33:04 +02001280 curoff += len;
1281 }
1282 if (curoff + sizeof(int) > maxoff) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001283 ha_warning("Inconsistency while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001284 goto out;
1285 }
1286 memcpy(&xfer_sock->options, &tmpbuf[curoff],
1287 sizeof(xfer_sock->options));
1288 curoff += sizeof(xfer_sock->options);
1289
1290 xfer_sock->fd = fd;
1291 if (xfer_sock_list)
1292 xfer_sock_list->prev = xfer_sock;
1293 xfer_sock->next = xfer_sock_list;
1294 xfer_sock->prev = NULL;
1295 xfer_sock_list = xfer_sock;
1296 xfer_sock = NULL;
1297 }
1298
1299 ret2 = 0;
1300out:
1301 /* If we failed midway make sure to close the remaining
1302 * file descriptors
1303 */
1304 if (tmpfd != NULL && i < got_fd) {
1305 for (; i < got_fd; i++) {
1306 close(tmpfd[i]);
1307 }
1308 }
1309 free(tmpbuf);
1310 free(tmpfd);
1311 free(cmsgbuf);
1312 if (sock != -1)
1313 close(sock);
1314 if (xfer_sock) {
1315 free(xfer_sock->namespace);
1316 free(xfer_sock->iface);
1317 if (xfer_sock->fd != -1)
1318 close(xfer_sock->fd);
1319 free(xfer_sock);
1320 }
1321 return (ret2);
1322}
1323
Willy Tarreaubaaee002006-06-26 02:48:02 +02001324/*
William Lallemand73b85e72017-06-01 17:38:51 +02001325 * copy and cleanup the current argv
1326 * Remove the -sf /-st parameters
1327 * Return an allocated copy of argv
1328 */
1329
1330static char **copy_argv(int argc, char **argv)
1331{
1332 char **newargv;
William Lallemand2bf6d622017-06-20 11:20:23 +02001333 int i = 0, j = 0;
William Lallemand73b85e72017-06-01 17:38:51 +02001334
1335 newargv = calloc(argc + 2, sizeof(char *));
1336 if (newargv == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001337 ha_warning("Cannot allocate memory\n");
William Lallemand73b85e72017-06-01 17:38:51 +02001338 return NULL;
1339 }
1340
William Lallemand2bf6d622017-06-20 11:20:23 +02001341 while (i < argc) {
1342 /* -sf or -st or -x */
William Lallemand29f690c2018-01-09 23:12:27 +01001343 if (i > 0 && argv[i][0] == '-' &&
1344 ((argv[i][1] == 's' && (argv[i][2] == 'f' || argv[i][2] == 't')) || argv[i][1] == 'x' )) {
William Lallemand2bf6d622017-06-20 11:20:23 +02001345 /* list of pids to finish ('f') or terminate ('t') or unix socket (-x) */
William Lallemand73b85e72017-06-01 17:38:51 +02001346 i++;
1347 while (i < argc && argv[i][0] != '-') {
1348 i++;
1349 }
William Lallemand2bf6d622017-06-20 11:20:23 +02001350 continue;
William Lallemand73b85e72017-06-01 17:38:51 +02001351 }
William Lallemand2bf6d622017-06-20 11:20:23 +02001352
1353 newargv[j++] = argv[i++];
William Lallemand73b85e72017-06-01 17:38:51 +02001354 }
William Lallemand2bf6d622017-06-20 11:20:23 +02001355
William Lallemand73b85e72017-06-01 17:38:51 +02001356 return newargv;
1357}
1358
Willy Tarreau5a023f02019-03-01 14:19:31 +01001359/* considers splicing proxies' maxconn, computes the ideal global.maxpipes
1360 * setting, and returns it. It may return -1 meaning "unlimited" if some
1361 * unlimited proxies have been found and the global.maxconn value is not yet
1362 * set. It may also return a value greater than maxconn if it's not yet set.
1363 * Note that a value of zero means there is no need for pipes. -1 is never
1364 * returned if global.maxconn is valid.
1365 */
1366static int compute_ideal_maxpipes()
1367{
1368 struct proxy *cur;
1369 int nbfe = 0, nbbe = 0;
1370 int unlimited = 0;
1371 int pipes;
1372 int max;
1373
1374 for (cur = proxies_list; cur; cur = cur->next) {
1375 if (cur->options2 & (PR_O2_SPLIC_ANY)) {
1376 if (cur->cap & PR_CAP_FE) {
1377 max = cur->maxconn;
1378 nbfe += max;
1379 if (!max) {
1380 unlimited = 1;
1381 break;
1382 }
1383 }
1384 if (cur->cap & PR_CAP_BE) {
1385 max = cur->fullconn ? cur->fullconn : global.maxconn;
1386 nbbe += max;
1387 if (!max) {
1388 unlimited = 1;
1389 break;
1390 }
1391 }
1392 }
1393 }
1394
1395 pipes = MAX(nbfe, nbbe);
1396 if (global.maxconn) {
1397 if (pipes > global.maxconn || unlimited)
1398 pipes = global.maxconn;
1399 } else if (unlimited) {
1400 pipes = -1;
1401 }
1402
1403 return pipes >= 4 ? pipes / 4 : pipes;
1404}
1405
Willy Tarreauac350932019-03-01 15:43:14 +01001406/* considers global.maxsocks, global.maxpipes, async engines, SSL frontends and
1407 * rlimits and computes an ideal maxconn. It's meant to be called only when
1408 * maxsock contains the sum of listening FDs, before it is updated based on
Willy Tarreaudf23c0c2019-03-13 10:10:49 +01001409 * maxconn and pipes. If there are not enough FDs left, DEFAULT_MAXCONN (by
1410 * default 100) is returned as it is expected that it will even run on tight
1411 * environments, and will maintain compatibility with previous packages that
1412 * used to rely on this value as the default one. The system will emit a
1413 * warning indicating how many FDs are missing anyway if needed.
Willy Tarreauac350932019-03-01 15:43:14 +01001414 */
1415static int compute_ideal_maxconn()
1416{
1417 int ssl_sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
1418 int engine_fds = global.ssl_used_async_engines * ssl_sides;
1419 int pipes = compute_ideal_maxpipes();
Willy Tarreaub1beaa32020-03-06 10:25:31 +01001420 int remain = MAX(rlim_fd_cur_at_boot, rlim_fd_max_at_boot);
Willy Tarreauac350932019-03-01 15:43:14 +01001421 int maxconn;
1422
1423 /* we have to take into account these elements :
1424 * - number of engine_fds, which inflates the number of FD needed per
1425 * connection by this number.
1426 * - number of pipes per connection on average : for the unlimited
1427 * case, this is 0.5 pipe FDs per connection, otherwise it's a
1428 * fixed value of 2*pipes.
1429 * - two FDs per connection
1430 */
1431
1432 /* subtract listeners and checks */
1433 remain -= global.maxsock;
1434
Willy Tarreau3f200852019-03-14 19:13:17 +01001435 /* one epoll_fd/kqueue_fd per thread */
1436 remain -= global.nbthread;
1437
1438 /* one wake-up pipe (2 fd) per thread */
1439 remain -= 2 * global.nbthread;
1440
Willy Tarreauac350932019-03-01 15:43:14 +01001441 /* Fixed pipes values : we only subtract them if they're not larger
1442 * than the remaining FDs because pipes are optional.
1443 */
1444 if (pipes >= 0 && pipes * 2 < remain)
1445 remain -= pipes * 2;
1446
1447 if (pipes < 0) {
1448 /* maxsock = maxconn * 2 + maxconn/4 * 2 + maxconn * engine_fds.
1449 * = maxconn * (2 + 0.5 + engine_fds)
1450 * = maxconn * (4 + 1 + 2*engine_fds) / 2
1451 */
1452 maxconn = 2 * remain / (5 + 2 * engine_fds);
1453 } else {
1454 /* maxsock = maxconn * 2 + maxconn * engine_fds.
1455 * = maxconn * (2 + engine_fds)
1456 */
1457 maxconn = remain / (2 + engine_fds);
1458 }
1459
Willy Tarreaudf23c0c2019-03-13 10:10:49 +01001460 return MAX(maxconn, DEFAULT_MAXCONN);
Willy Tarreauac350932019-03-01 15:43:14 +01001461}
1462
William Lallemand73b85e72017-06-01 17:38:51 +02001463/*
Willy Tarreaubaaee002006-06-26 02:48:02 +02001464 * This function initializes all the necessary variables. It only returns
1465 * if everything is OK. If something fails, it exits.
1466 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +01001467static void init(int argc, char **argv)
Willy Tarreaubaaee002006-06-26 02:48:02 +02001468{
Willy Tarreaubaaee002006-06-26 02:48:02 +02001469 int arg_mode = 0; /* MODE_DEBUG, ... */
Willy Tarreaubaaee002006-06-26 02:48:02 +02001470 char *tmp;
1471 char *cfg_pidfile = NULL;
Willy Tarreau058e9072009-07-20 09:30:05 +02001472 int err_code = 0;
Maxime de Roucy0f503922016-05-13 23:52:55 +02001473 char *err_msg = NULL;
Willy Tarreau477ecd82010-01-03 21:12:30 +01001474 struct wordlist *wl;
Kevinm48936af2010-12-22 16:08:21 +00001475 char *progname;
Willy Tarreau576132e2011-09-10 19:26:56 +02001476 char *change_dir = NULL;
Christopher Fauletd7c91962015-04-30 11:48:27 +02001477 struct proxy *px;
Willy Tarreaue6945732016-12-21 19:57:00 +01001478 struct post_check_fct *pcf;
Willy Tarreauac350932019-03-01 15:43:14 +01001479 int ideal_maxconn;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001480
Christopher Faulete3a5e352017-10-24 13:53:54 +02001481 global.mode = MODE_STARTING;
William Lallemand73b85e72017-06-01 17:38:51 +02001482 next_argv = copy_argv(argc, argv);
1483
Christopher Fauletcd7879a2017-10-27 13:53:47 +02001484 if (!init_trash_buffers(1)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001485 ha_alert("failed to initialize trash buffers.\n");
Christopher Faulet748919a2017-07-26 14:59:46 +02001486 exit(1);
1487 }
David du Colombier7af46052012-05-16 14:16:48 +02001488
Emeric Brun2b920a12010-09-23 18:30:22 +02001489 /* NB: POSIX does not make it mandatory for gethostname() to NULL-terminate
1490 * the string in case of truncation, and at least FreeBSD appears not to do
1491 * it.
1492 */
1493 memset(hostname, 0, sizeof(hostname));
1494 gethostname(hostname, sizeof(hostname) - 1);
1495 memset(localpeer, 0, sizeof(localpeer));
1496 memcpy(localpeer, hostname, (sizeof(hostname) > sizeof(localpeer) ? sizeof(localpeer) : sizeof(hostname)) - 1);
William Lallemanddaf4cd22018-04-17 16:46:13 +02001497 setenv("HAPROXY_LOCALPEER", localpeer, 1);
Emeric Brun2b920a12010-09-23 18:30:22 +02001498
William Lallemand24c928c2020-01-14 17:58:18 +01001499 /* we were in mworker mode, we should restart in mworker mode */
1500 if (getenv("HAPROXY_MWORKER_REEXEC") != NULL)
1501 global.mode |= MODE_MWORKER;
1502
Willy Tarreaubaaee002006-06-26 02:48:02 +02001503 /*
1504 * Initialize the previously static variables.
1505 */
Christopher Fauletcd7879a2017-10-27 13:53:47 +02001506
Willy Tarreau173d9952018-01-26 21:48:23 +01001507 totalconn = actconn = listeners = stopping = 0;
Cyril Bonté203ec5a2017-03-23 22:44:13 +01001508 killed = 0;
Christopher Fauletcd7879a2017-10-27 13:53:47 +02001509
Willy Tarreaubaaee002006-06-26 02:48:02 +02001510
1511#ifdef HAPROXY_MEMMAX
Willy Tarreau70060452015-12-14 12:46:07 +01001512 global.rlimit_memmax_all = HAPROXY_MEMMAX;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001513#endif
1514
Benoit GARNIERb413c2a2016-03-27 11:08:03 +02001515 tzset();
Willy Tarreaub0b37bc2008-06-23 14:00:57 +02001516 tv_update_date(-1,-1);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001517 start_date = now;
1518
Willy Tarreau84310e22014-02-14 11:59:04 +01001519 srandom(now_ms - getpid());
1520
Willy Tarreau8ed669b2013-01-11 15:49:37 +01001521 if (init_acl() != 0)
1522 exit(1);
Willy Tarreaub6b3df32018-11-26 16:31:20 +01001523
Thierry FOURNIER6f1fd482015-01-23 14:06:13 +01001524 /* Initialise lua. */
1525 hlua_init();
Thierry FOURNIER6f1fd482015-01-23 14:06:13 +01001526
Christopher Fauletff2613e2016-11-09 11:36:17 +01001527 /* Initialize process vars */
1528 vars_init(&global.vars, SCOPE_PROC);
1529
Willy Tarreau43b78992009-01-25 15:42:27 +01001530 global.tune.options |= GTUNE_USE_SELECT; /* select() is always available */
Willy Tarreaue5733232019-05-22 19:24:06 +02001531#if defined(USE_POLL)
Willy Tarreau43b78992009-01-25 15:42:27 +01001532 global.tune.options |= GTUNE_USE_POLL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001533#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001534#if defined(USE_EPOLL)
Willy Tarreau43b78992009-01-25 15:42:27 +01001535 global.tune.options |= GTUNE_USE_EPOLL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001536#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001537#if defined(USE_KQUEUE)
Willy Tarreau43b78992009-01-25 15:42:27 +01001538 global.tune.options |= GTUNE_USE_KQUEUE;
Willy Tarreau1e63130a2007-04-09 12:03:06 +02001539#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001540#if defined(USE_EVPORTS)
Emmanuel Hocdet0ba4f482019-04-08 16:53:32 +00001541 global.tune.options |= GTUNE_USE_EVPORTS;
1542#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001543#if defined(USE_LINUX_SPLICE)
Willy Tarreau3ab68cf2009-01-25 16:03:28 +01001544 global.tune.options |= GTUNE_USE_SPLICE;
1545#endif
Nenad Merdanovic88afe032014-04-14 15:56:58 +02001546#if defined(USE_GETADDRINFO)
1547 global.tune.options |= GTUNE_USE_GAI;
1548#endif
Lukas Tribusa0bcbdc2016-09-12 21:42:20 +00001549#if defined(SO_REUSEPORT)
1550 global.tune.options |= GTUNE_USE_REUSEPORT;
1551#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +02001552
1553 pid = getpid();
1554 progname = *argv;
1555 while ((tmp = strchr(progname, '/')) != NULL)
1556 progname = tmp + 1;
1557
Kevinm48936af2010-12-22 16:08:21 +00001558 /* the process name is used for the logs only */
Dragan Dosen43885c72015-10-01 13:18:13 +02001559 chunk_initstr(&global.log_tag, strdup(progname));
Kevinm48936af2010-12-22 16:08:21 +00001560
Willy Tarreaubaaee002006-06-26 02:48:02 +02001561 argc--; argv++;
1562 while (argc > 0) {
1563 char *flag;
1564
1565 if (**argv == '-') {
1566 flag = *argv+1;
1567
1568 /* 1 arg */
1569 if (*flag == 'v') {
1570 display_version();
Willy Tarreau7b066db2007-12-02 11:28:59 +01001571 if (flag[1] == 'v') /* -vv */
1572 display_build_opts();
Willy Tarreaubaaee002006-06-26 02:48:02 +02001573 exit(0);
1574 }
Willy Tarreaue5733232019-05-22 19:24:06 +02001575#if defined(USE_EPOLL)
Willy Tarreaubaaee002006-06-26 02:48:02 +02001576 else if (*flag == 'd' && flag[1] == 'e')
Willy Tarreau43b78992009-01-25 15:42:27 +01001577 global.tune.options &= ~GTUNE_USE_EPOLL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001578#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001579#if defined(USE_POLL)
Willy Tarreaubaaee002006-06-26 02:48:02 +02001580 else if (*flag == 'd' && flag[1] == 'p')
Willy Tarreau43b78992009-01-25 15:42:27 +01001581 global.tune.options &= ~GTUNE_USE_POLL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001582#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001583#if defined(USE_KQUEUE)
Willy Tarreau1e63130a2007-04-09 12:03:06 +02001584 else if (*flag == 'd' && flag[1] == 'k')
Willy Tarreau43b78992009-01-25 15:42:27 +01001585 global.tune.options &= ~GTUNE_USE_KQUEUE;
Willy Tarreau1e63130a2007-04-09 12:03:06 +02001586#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001587#if defined(USE_EVPORTS)
Emmanuel Hocdet0ba4f482019-04-08 16:53:32 +00001588 else if (*flag == 'd' && flag[1] == 'v')
1589 global.tune.options &= ~GTUNE_USE_EVPORTS;
1590#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001591#if defined(USE_LINUX_SPLICE)
Willy Tarreau3ab68cf2009-01-25 16:03:28 +01001592 else if (*flag == 'd' && flag[1] == 'S')
1593 global.tune.options &= ~GTUNE_USE_SPLICE;
1594#endif
Nenad Merdanovic88afe032014-04-14 15:56:58 +02001595#if defined(USE_GETADDRINFO)
1596 else if (*flag == 'd' && flag[1] == 'G')
1597 global.tune.options &= ~GTUNE_USE_GAI;
1598#endif
Lukas Tribusa0bcbdc2016-09-12 21:42:20 +00001599#if defined(SO_REUSEPORT)
1600 else if (*flag == 'd' && flag[1] == 'R')
1601 global.tune.options &= ~GTUNE_USE_REUSEPORT;
1602#endif
Emeric Brun850efd52014-01-29 12:24:34 +01001603 else if (*flag == 'd' && flag[1] == 'V')
1604 global.ssl_server_verify = SSL_SERVER_VERIFY_NONE;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001605 else if (*flag == 'V')
1606 arg_mode |= MODE_VERBOSE;
1607 else if (*flag == 'd' && flag[1] == 'b')
1608 arg_mode |= MODE_FOREGROUND;
Willy Tarreau6e064432012-05-08 15:40:42 +02001609 else if (*flag == 'd' && flag[1] == 'M')
1610 mem_poison_byte = flag[2] ? strtol(flag + 2, NULL, 0) : 'P';
Willy Tarreau3eed10e2016-11-07 21:03:16 +01001611 else if (*flag == 'd' && flag[1] == 'r')
1612 global.tune.options |= GTUNE_RESOLVE_DONTFAIL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001613 else if (*flag == 'd')
1614 arg_mode |= MODE_DEBUG;
1615 else if (*flag == 'c')
1616 arg_mode |= MODE_CHECK;
William Lallemand095ba4c2017-06-01 17:38:50 +02001617 else if (*flag == 'D')
Willy Tarreau6bde87b2009-05-18 16:29:51 +02001618 arg_mode |= MODE_DAEMON;
Tim Duesterhusd6942c82017-11-20 15:58:35 +01001619 else if (*flag == 'W' && flag[1] == 's') {
Lukas Tribusf46bf952017-11-21 12:39:34 +01001620 arg_mode |= MODE_MWORKER | MODE_FOREGROUND;
Tim Duesterhusd6942c82017-11-20 15:58:35 +01001621#if defined(USE_SYSTEMD)
1622 global.tune.options |= GTUNE_USE_SYSTEMD;
1623#else
Christopher Faulet767a84b2017-11-24 16:50:31 +01001624 ha_alert("master-worker mode with systemd support (-Ws) requested, but not compiled. Use master-worker mode (-W) if you are not using Type=notify in your unit file or recompile with USE_SYSTEMD=1.\n\n");
Tim Duesterhusd6942c82017-11-20 15:58:35 +01001625 usage(progname);
1626#endif
1627 }
William Lallemand095ba4c2017-06-01 17:38:50 +02001628 else if (*flag == 'W')
1629 arg_mode |= MODE_MWORKER;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001630 else if (*flag == 'q')
1631 arg_mode |= MODE_QUIET;
Olivier Houchardf73629d2017-04-05 22:33:04 +02001632 else if (*flag == 'x') {
William Lallemand45eff442017-06-19 15:57:55 +02001633 if (argc <= 1 || argv[1][0] == '-') {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001634 ha_alert("Unix socket path expected with the -x flag\n\n");
William Lallemand45eff442017-06-19 15:57:55 +02001635 usage(progname);
Olivier Houchardf73629d2017-04-05 22:33:04 +02001636 }
William Lallemand4fc09692017-06-19 16:37:19 +02001637 if (old_unixsocket)
Christopher Faulet767a84b2017-11-24 16:50:31 +01001638 ha_warning("-x option already set, overwriting the value\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001639 old_unixsocket = argv[1];
William Lallemand4fc09692017-06-19 16:37:19 +02001640
Olivier Houchardf73629d2017-04-05 22:33:04 +02001641 argv++;
1642 argc--;
1643 }
William Lallemande7361152018-10-26 14:47:36 +02001644 else if (*flag == 'S') {
1645 struct wordlist *c;
1646
1647 if (argc <= 1 || argv[1][0] == '-') {
1648 ha_alert("Socket and optional bind parameters expected with the -S flag\n");
1649 usage(progname);
1650 }
1651 if ((c = malloc(sizeof(*c))) == NULL || (c->s = strdup(argv[1])) == NULL) {
1652 ha_alert("Cannot allocate memory\n");
1653 exit(EXIT_FAILURE);
1654 }
1655 LIST_ADD(&mworker_cli_conf, &c->list);
1656
1657 argv++;
1658 argc--;
1659 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02001660 else if (*flag == 's' && (flag[1] == 'f' || flag[1] == 't')) {
1661 /* list of pids to finish ('f') or terminate ('t') */
1662
1663 if (flag[1] == 'f')
1664 oldpids_sig = SIGUSR1; /* finish then exit */
1665 else
1666 oldpids_sig = SIGTERM; /* terminate immediately */
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001667 while (argc > 1 && argv[1][0] != '-') {
Chris Lane236062f2018-02-05 23:15:44 +00001668 char * endptr = NULL;
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001669 oldpids = realloc(oldpids, (nb_oldpids + 1) * sizeof(int));
1670 if (!oldpids) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001671 ha_alert("Cannot allocate old pid : out of memory.\n");
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001672 exit(1);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001673 }
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001674 argc--; argv++;
Chris Lane236062f2018-02-05 23:15:44 +00001675 errno = 0;
1676 oldpids[nb_oldpids] = strtol(*argv, &endptr, 10);
1677 if (errno) {
1678 ha_alert("-%2s option: failed to parse {%s}: %s\n",
1679 flag,
1680 *argv, strerror(errno));
1681 exit(1);
1682 } else if (endptr && strlen(endptr)) {
Willy Tarreau90807112020-02-25 08:16:33 +01001683 while (isspace((unsigned char)*endptr)) endptr++;
Aurélien Nephtali39b89882018-02-17 20:53:11 +01001684 if (*endptr != 0) {
Chris Lane236062f2018-02-05 23:15:44 +00001685 ha_alert("-%2s option: some bytes unconsumed in PID list {%s}\n",
1686 flag, endptr);
1687 exit(1);
Aurélien Nephtali39b89882018-02-17 20:53:11 +01001688 }
Chris Lane236062f2018-02-05 23:15:44 +00001689 }
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001690 if (oldpids[nb_oldpids] <= 0)
1691 usage(progname);
1692 nb_oldpids++;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001693 }
1694 }
Willy Tarreaua088d312015-10-08 11:58:48 +02001695 else if (flag[0] == '-' && flag[1] == 0) { /* "--" */
1696 /* now that's a cfgfile list */
1697 argv++; argc--;
1698 while (argc > 0) {
Maxime de Roucy0f503922016-05-13 23:52:55 +02001699 if (!list_append_word(&cfg_cfgfiles, *argv, &err_msg)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001700 ha_alert("Cannot load configuration file/directory %s : %s\n",
1701 *argv,
1702 err_msg);
Willy Tarreaua088d312015-10-08 11:58:48 +02001703 exit(1);
1704 }
Willy Tarreaua088d312015-10-08 11:58:48 +02001705 argv++; argc--;
1706 }
1707 break;
1708 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02001709 else { /* >=2 args */
1710 argv++; argc--;
1711 if (argc == 0)
Willy Tarreau3bafcdc2011-09-10 19:20:23 +02001712 usage(progname);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001713
1714 switch (*flag) {
Willy Tarreau576132e2011-09-10 19:26:56 +02001715 case 'C' : change_dir = *argv; break;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001716 case 'n' : cfg_maxconn = atol(*argv); break;
Willy Tarreau70060452015-12-14 12:46:07 +01001717 case 'm' : global.rlimit_memmax_all = atol(*argv); break;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001718 case 'N' : cfg_maxpconn = atol(*argv); break;
William Lallemanddaf4cd22018-04-17 16:46:13 +02001719 case 'L' :
1720 strncpy(localpeer, *argv, sizeof(localpeer) - 1);
1721 setenv("HAPROXY_LOCALPEER", localpeer, 1);
1722 break;
Willy Tarreau5d01a632009-06-22 16:02:30 +02001723 case 'f' :
Maxime de Roucy0f503922016-05-13 23:52:55 +02001724 if (!list_append_word(&cfg_cfgfiles, *argv, &err_msg)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001725 ha_alert("Cannot load configuration file/directory %s : %s\n",
1726 *argv,
1727 err_msg);
Willy Tarreau5d01a632009-06-22 16:02:30 +02001728 exit(1);
1729 }
Willy Tarreau5d01a632009-06-22 16:02:30 +02001730 break;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001731 case 'p' : cfg_pidfile = *argv; break;
Willy Tarreau3bafcdc2011-09-10 19:20:23 +02001732 default: usage(progname);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001733 }
1734 }
1735 }
1736 else
Willy Tarreau3bafcdc2011-09-10 19:20:23 +02001737 usage(progname);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001738 argv++; argc--;
1739 }
1740
Christopher Faulete3a5e352017-10-24 13:53:54 +02001741 global.mode |= (arg_mode & (MODE_DAEMON | MODE_MWORKER | MODE_FOREGROUND | MODE_VERBOSE
1742 | MODE_QUIET | MODE_CHECK | MODE_DEBUG));
Willy Tarreaubaaee002006-06-26 02:48:02 +02001743
William Lallemand944e6192018-11-21 15:48:31 +01001744 if (getenv("HAPROXY_MWORKER_WAIT_ONLY")) {
William Lallemandcb11fd22017-06-01 17:38:52 +02001745 unsetenv("HAPROXY_MWORKER_WAIT_ONLY");
William Lallemand944e6192018-11-21 15:48:31 +01001746 global.mode |= MODE_MWORKER_WAIT;
1747 global.mode &= ~MODE_MWORKER;
William Lallemandcb11fd22017-06-01 17:38:52 +02001748 }
1749
1750 if ((global.mode & MODE_MWORKER) && (getenv("HAPROXY_MWORKER_REEXEC") != NULL)) {
1751 atexit_flag = 1;
1752 atexit(reexec_on_failure);
1753 }
1754
Willy Tarreau576132e2011-09-10 19:26:56 +02001755 if (change_dir && chdir(change_dir) < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001756 ha_alert("Could not change to directory %s : %s\n", change_dir, strerror(errno));
Willy Tarreau576132e2011-09-10 19:26:56 +02001757 exit(1);
1758 }
1759
Willy Tarreaubaaee002006-06-26 02:48:02 +02001760 global.maxsock = 10; /* reserve 10 fds ; will be incremented by socket eaters */
Willy Tarreau915e1eb2009-06-22 15:48:36 +02001761
1762 init_default_instance();
1763
William Lallemand944e6192018-11-21 15:48:31 +01001764 /* in wait mode, we don't try to read the configuration files */
1765 if (!(global.mode & MODE_MWORKER_WAIT)) {
William Lallemand7b302d82019-05-20 11:15:37 +02001766 struct buffer *trash = get_trash_chunk();
Willy Tarreauc4382422009-12-06 13:10:44 +01001767
William Lallemand944e6192018-11-21 15:48:31 +01001768 /* handle cfgfiles that are actually directories */
1769 cfgfiles_expand_directories();
1770
1771 if (LIST_ISEMPTY(&cfg_cfgfiles))
1772 usage(progname);
1773
1774
1775 list_for_each_entry(wl, &cfg_cfgfiles, list) {
1776 int ret;
1777
William Lallemand7b302d82019-05-20 11:15:37 +02001778 if (trash->data)
1779 chunk_appendf(trash, ";");
1780
1781 chunk_appendf(trash, "%s", wl->s);
1782
William Lallemand944e6192018-11-21 15:48:31 +01001783 ret = readcfgfile(wl->s);
1784 if (ret == -1) {
1785 ha_alert("Could not open configuration file %s : %s\n",
1786 wl->s, strerror(errno));
1787 exit(1);
1788 }
1789 if (ret & (ERR_ABORT|ERR_FATAL))
1790 ha_alert("Error(s) found in configuration file : %s\n", wl->s);
1791 err_code |= ret;
1792 if (err_code & ERR_ABORT)
1793 exit(1);
Willy Tarreauc4382422009-12-06 13:10:44 +01001794 }
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02001795
William Lallemand944e6192018-11-21 15:48:31 +01001796 /* do not try to resolve arguments nor to spot inconsistencies when
1797 * the configuration contains fatal errors caused by files not found
1798 * or failed memory allocations.
1799 */
1800 if (err_code & (ERR_ABORT|ERR_FATAL)) {
1801 ha_alert("Fatal errors found in configuration.\n");
1802 exit(1);
1803 }
William Lallemand7b302d82019-05-20 11:15:37 +02001804 if (trash->data)
1805 setenv("HAPROXY_CFGFILES", trash->area, 1);
1806
Willy Tarreaub83dc3d2017-04-19 11:24:07 +02001807 }
William Lallemandce83b4a2018-10-26 14:47:30 +02001808 if (global.mode & MODE_MWORKER) {
1809 int proc;
William Lallemand16dd1b32018-11-19 18:46:18 +01001810 struct mworker_proc *tmproc;
1811
William Lallemand482f9a92019-04-12 16:15:00 +02001812 setenv("HAPROXY_MWORKER", "1", 1);
1813
William Lallemand16dd1b32018-11-19 18:46:18 +01001814 if (getenv("HAPROXY_MWORKER_REEXEC") == NULL) {
1815
William Lallemandf3a86832019-04-01 11:29:58 +02001816 tmproc = calloc(1, sizeof(*tmproc));
William Lallemand16dd1b32018-11-19 18:46:18 +01001817 if (!tmproc) {
1818 ha_alert("Cannot allocate process structures.\n");
1819 exit(EXIT_FAILURE);
1820 }
William Lallemand8f7069a2019-04-12 16:09:23 +02001821 tmproc->options |= PROC_O_TYPE_MASTER; /* master */
William Lallemand16dd1b32018-11-19 18:46:18 +01001822 tmproc->reloads = 0;
1823 tmproc->relative_pid = 0;
1824 tmproc->pid = pid;
1825 tmproc->timestamp = start_date.tv_sec;
1826 tmproc->ipc_fd[0] = -1;
1827 tmproc->ipc_fd[1] = -1;
1828
1829 proc_self = tmproc;
1830
1831 LIST_ADDQ(&proc_list, &tmproc->list);
1832 }
William Lallemandce83b4a2018-10-26 14:47:30 +02001833
1834 for (proc = 0; proc < global.nbproc; proc++) {
William Lallemandce83b4a2018-10-26 14:47:30 +02001835
William Lallemandf3a86832019-04-01 11:29:58 +02001836 tmproc = calloc(1, sizeof(*tmproc));
William Lallemandce83b4a2018-10-26 14:47:30 +02001837 if (!tmproc) {
1838 ha_alert("Cannot allocate process structures.\n");
1839 exit(EXIT_FAILURE);
1840 }
1841
William Lallemand8f7069a2019-04-12 16:09:23 +02001842 tmproc->options |= PROC_O_TYPE_WORKER; /* worker */
William Lallemandce83b4a2018-10-26 14:47:30 +02001843 tmproc->pid = -1;
1844 tmproc->reloads = 0;
William Lallemande3683302018-11-19 18:46:17 +01001845 tmproc->timestamp = -1;
William Lallemandce83b4a2018-10-26 14:47:30 +02001846 tmproc->relative_pid = 1 + proc;
William Lallemand550db6d2018-11-06 17:37:12 +01001847 tmproc->ipc_fd[0] = -1;
1848 tmproc->ipc_fd[1] = -1;
William Lallemandce83b4a2018-10-26 14:47:30 +02001849
1850 if (mworker_cli_sockpair_new(tmproc, proc) < 0) {
1851 exit(EXIT_FAILURE);
1852 }
1853
1854 LIST_ADDQ(&proc_list, &tmproc->list);
1855 }
William Lallemand944e6192018-11-21 15:48:31 +01001856 }
1857 if (global.mode & (MODE_MWORKER|MODE_MWORKER_WAIT)) {
1858 struct wordlist *it, *c;
1859
William Lallemand1b663612018-10-26 14:47:33 +02001860 mworker_env_to_proc_list(); /* get the info of the children in the env */
William Lallemand8a022572018-10-26 14:47:35 +02001861
William Lallemande7361152018-10-26 14:47:36 +02001862
William Lallemand550db6d2018-11-06 17:37:12 +01001863 if (!LIST_ISEMPTY(&mworker_cli_conf)) {
William Lallemande7361152018-10-26 14:47:36 +02001864
William Lallemand550db6d2018-11-06 17:37:12 +01001865 if (mworker_cli_proxy_create() < 0) {
William Lallemande7361152018-10-26 14:47:36 +02001866 ha_alert("Can't create the master's CLI.\n");
1867 exit(EXIT_FAILURE);
1868 }
William Lallemande7361152018-10-26 14:47:36 +02001869
William Lallemand550db6d2018-11-06 17:37:12 +01001870 list_for_each_entry_safe(c, it, &mworker_cli_conf, list) {
1871
1872 if (mworker_cli_proxy_new_listener(c->s) < 0) {
1873 ha_alert("Can't create the master's CLI.\n");
1874 exit(EXIT_FAILURE);
1875 }
1876 LIST_DEL(&c->list);
1877 free(c->s);
1878 free(c);
1879 }
1880 }
William Lallemandce83b4a2018-10-26 14:47:30 +02001881 }
1882
Willy Tarreaubb925012009-07-23 13:36:36 +02001883 err_code |= check_config_validity();
Christopher Fauletc1692962019-08-12 09:51:07 +02001884 for (px = proxies_list; px; px = px->next) {
1885 struct server *srv;
1886 struct post_proxy_check_fct *ppcf;
1887 struct post_server_check_fct *pscf;
1888
1889 list_for_each_entry(pscf, &post_server_check_list, list) {
1890 for (srv = px->srv; srv; srv = srv->next)
1891 err_code |= pscf->fct(srv);
1892 }
1893 list_for_each_entry(ppcf, &post_proxy_check_list, list)
1894 err_code |= ppcf->fct(px);
1895 }
Willy Tarreaubb925012009-07-23 13:36:36 +02001896 if (err_code & (ERR_ABORT|ERR_FATAL)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001897 ha_alert("Fatal errors found in configuration.\n");
Willy Tarreau915e1eb2009-06-22 15:48:36 +02001898 exit(1);
1899 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02001900
Carl Henrik Lundef91ac192020-02-27 16:45:50 +01001901 err_code |= pattern_finalize_config();
1902 if (err_code & (ERR_ABORT|ERR_FATAL)) {
1903 ha_alert("Failed to finalize pattern config.\n");
1904 exit(1);
1905 }
Willy Tarreau0f936722019-04-11 14:47:08 +02001906
Willy Tarreau70060452015-12-14 12:46:07 +01001907 /* recompute the amount of per-process memory depending on nbproc and
1908 * the shared SSL cache size (allowed to exist in all processes).
1909 */
1910 if (global.rlimit_memmax_all) {
1911#if defined (USE_OPENSSL) && !defined(USE_PRIVATE_CACHE)
1912 int64_t ssl_cache_bytes = global.tune.sslcachesize * 200LL;
1913
1914 global.rlimit_memmax =
1915 ((((int64_t)global.rlimit_memmax_all * 1048576LL) -
1916 ssl_cache_bytes) / global.nbproc +
1917 ssl_cache_bytes + 1048575LL) / 1048576LL;
1918#else
1919 global.rlimit_memmax = global.rlimit_memmax_all / global.nbproc;
1920#endif
1921 }
1922
Willy Tarreaue5733232019-05-22 19:24:06 +02001923#ifdef USE_NS
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +01001924 err_code |= netns_init();
1925 if (err_code & (ERR_ABORT|ERR_FATAL)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001926 ha_alert("Failed to initialize namespace support.\n");
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +01001927 exit(1);
1928 }
1929#endif
1930
Baptiste Assmann4215d7d2016-11-02 15:33:15 +01001931 /* Apply server states */
1932 apply_server_state();
1933
Olivier Houchardfbc74e82017-11-24 16:54:05 +01001934 for (px = proxies_list; px; px = px->next)
Baptiste Assmann4215d7d2016-11-02 15:33:15 +01001935 srv_compute_all_admin_states(px);
1936
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01001937 /* Apply servers' configured address */
1938 err_code |= srv_init_addr();
1939 if (err_code & (ERR_ABORT|ERR_FATAL)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001940 ha_alert("Failed to initialize server(s) addr.\n");
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01001941 exit(1);
1942 }
1943
Willy Tarreaubaaee002006-06-26 02:48:02 +02001944 if (global.mode & MODE_CHECK) {
Willy Tarreau8b15ba12012-02-02 17:48:18 +01001945 struct peers *pr;
1946 struct proxy *px;
1947
Frédéric Lécailleed2b4a62017-07-13 09:07:09 +02001948 for (pr = cfg_peers; pr; pr = pr->next)
Willy Tarreau8b15ba12012-02-02 17:48:18 +01001949 if (pr->peers_fe)
1950 break;
1951
Olivier Houchardfbc74e82017-11-24 16:54:05 +01001952 for (px = proxies_list; px; px = px->next)
Willy Tarreau4348fad2012-09-20 16:48:07 +02001953 if (px->state == PR_STNEW && !LIST_ISEMPTY(&px->conf.listeners))
Willy Tarreau8b15ba12012-02-02 17:48:18 +01001954 break;
1955
1956 if (pr || px) {
1957 /* At least one peer or one listener has been found */
1958 qfprintf(stdout, "Configuration file is valid\n");
1959 exit(0);
1960 }
1961 qfprintf(stdout, "Configuration file has no error but will not start (no listener) => exit(2).\n");
1962 exit(2);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001963 }
Willy Tarreaue9b26022011-08-01 20:57:55 +02001964
Willy Tarreau8263d2b2012-08-28 00:06:31 +02001965 /* now we know the buffer size, we can initialize the channels and buffers */
Willy Tarreau9b28e032012-10-12 23:49:43 +02001966 init_buffer();
Willy Tarreau8280d642009-09-23 23:37:52 +02001967
Willy Tarreaue6945732016-12-21 19:57:00 +01001968 list_for_each_entry(pcf, &post_check_list, list) {
1969 err_code |= pcf->fct();
1970 if (err_code & (ERR_ABORT|ERR_FATAL))
1971 exit(1);
1972 }
1973
Willy Tarreaubaaee002006-06-26 02:48:02 +02001974 if (cfg_maxconn > 0)
1975 global.maxconn = cfg_maxconn;
1976
Willy Tarreau8d687d82019-03-01 09:39:42 +01001977 if (global.stats_fe)
1978 global.maxsock += global.stats_fe->maxconn;
1979
1980 if (cfg_peers) {
1981 /* peers also need to bypass global maxconn */
1982 struct peers *p = cfg_peers;
1983
1984 for (p = cfg_peers; p; p = p->next)
1985 if (p->peers_fe)
1986 global.maxsock += p->peers_fe->maxconn;
1987 }
1988
Willy Tarreaubaaee002006-06-26 02:48:02 +02001989 if (cfg_pidfile) {
Willy Tarreaua534fea2008-08-03 12:19:50 +02001990 free(global.pidfile);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001991 global.pidfile = strdup(cfg_pidfile);
1992 }
1993
Willy Tarreaud0256482015-01-15 21:45:22 +01001994 /* Now we want to compute the maxconn and possibly maxsslconn values.
Willy Tarreauac350932019-03-01 15:43:14 +01001995 * It's a bit tricky. Maxconn defaults to the pre-computed value based
1996 * on rlim_fd_cur and the number of FDs in use due to the configuration,
1997 * and maxsslconn defaults to DEFAULT_MAXSSLCONN. On top of that we can
1998 * enforce a lower limit based on memmax.
Willy Tarreaud0256482015-01-15 21:45:22 +01001999 *
2000 * If memmax is set, then it depends on which values are set. If
2001 * maxsslconn is set, we use memmax to determine how many cleartext
2002 * connections may be added, and set maxconn to the sum of the two.
2003 * If maxconn is set and not maxsslconn, maxsslconn is computed from
2004 * the remaining amount of memory between memmax and the cleartext
2005 * connections. If neither are set, then it is considered that all
2006 * connections are SSL-capable, and maxconn is computed based on this,
2007 * then maxsslconn accordingly. We need to know if SSL is used on the
2008 * frontends, backends, or both, because when it's used on both sides,
2009 * we need twice the value for maxsslconn, but we only count the
2010 * handshake once since it is not performed on the two sides at the
2011 * same time (frontend-side is terminated before backend-side begins).
2012 * The SSL stack is supposed to have filled ssl_session_cost and
Willy Tarreau474b96a2015-01-28 19:03:21 +01002013 * ssl_handshake_cost during its initialization. In any case, if
2014 * SYSTEM_MAXCONN is set, we still enforce it as an upper limit for
2015 * maxconn in order to protect the system.
Willy Tarreaud0256482015-01-15 21:45:22 +01002016 */
Willy Tarreauac350932019-03-01 15:43:14 +01002017 ideal_maxconn = compute_ideal_maxconn();
2018
Willy Tarreaud0256482015-01-15 21:45:22 +01002019 if (!global.rlimit_memmax) {
2020 if (global.maxconn == 0) {
Willy Tarreauac350932019-03-01 15:43:14 +01002021 global.maxconn = ideal_maxconn;
Willy Tarreaud0256482015-01-15 21:45:22 +01002022 if (global.mode & (MODE_VERBOSE|MODE_DEBUG))
2023 fprintf(stderr, "Note: setting global.maxconn to %d.\n", global.maxconn);
2024 }
2025 }
2026#ifdef USE_OPENSSL
2027 else if (!global.maxconn && !global.maxsslconn &&
2028 (global.ssl_used_frontend || global.ssl_used_backend)) {
2029 /* memmax is set, compute everything automatically. Here we want
2030 * to ensure that all SSL connections will be served. We take
2031 * care of the number of sides where SSL is used, and consider
2032 * the worst case : SSL used on both sides and doing a handshake
2033 * simultaneously. Note that we can't have more than maxconn
2034 * handshakes at a time by definition, so for the worst case of
2035 * two SSL conns per connection, we count a single handshake.
2036 */
2037 int sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
2038 int64_t mem = global.rlimit_memmax * 1048576ULL;
2039
2040 mem -= global.tune.sslcachesize * 200; // about 200 bytes per SSL cache entry
2041 mem -= global.maxzlibmem;
2042 mem = mem * MEM_USABLE_RATIO;
2043
2044 global.maxconn = mem /
Willy Tarreau87b09662015-04-03 00:22:06 +02002045 ((STREAM_MAX_COST + 2 * global.tune.bufsize) + // stream + 2 buffers per stream
Willy Tarreaud0256482015-01-15 21:45:22 +01002046 sides * global.ssl_session_max_cost + // SSL buffers, one per side
2047 global.ssl_handshake_max_cost); // 1 handshake per connection max
2048
Willy Tarreauac350932019-03-01 15:43:14 +01002049 global.maxconn = MIN(global.maxconn, ideal_maxconn);
Willy Tarreaud0256482015-01-15 21:45:22 +01002050 global.maxconn = round_2dig(global.maxconn);
Willy Tarreau474b96a2015-01-28 19:03:21 +01002051#ifdef SYSTEM_MAXCONN
Willy Tarreauca783d42019-03-13 10:03:07 +01002052 if (global.maxconn > SYSTEM_MAXCONN)
2053 global.maxconn = SYSTEM_MAXCONN;
Willy Tarreau474b96a2015-01-28 19:03:21 +01002054#endif /* SYSTEM_MAXCONN */
Willy Tarreaud0256482015-01-15 21:45:22 +01002055 global.maxsslconn = sides * global.maxconn;
2056 if (global.mode & (MODE_VERBOSE|MODE_DEBUG))
2057 fprintf(stderr, "Note: setting global.maxconn to %d and global.maxsslconn to %d.\n",
2058 global.maxconn, global.maxsslconn);
2059 }
2060 else if (!global.maxsslconn &&
2061 (global.ssl_used_frontend || global.ssl_used_backend)) {
2062 /* memmax and maxconn are known, compute maxsslconn automatically.
2063 * maxsslconn being forced, we don't know how many of it will be
2064 * on each side if both sides are being used. The worst case is
2065 * when all connections use only one SSL instance because
2066 * handshakes may be on two sides at the same time.
2067 */
2068 int sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
2069 int64_t mem = global.rlimit_memmax * 1048576ULL;
2070 int64_t sslmem;
2071
2072 mem -= global.tune.sslcachesize * 200; // about 200 bytes per SSL cache entry
2073 mem -= global.maxzlibmem;
2074 mem = mem * MEM_USABLE_RATIO;
2075
Willy Tarreau87b09662015-04-03 00:22:06 +02002076 sslmem = mem - global.maxconn * (int64_t)(STREAM_MAX_COST + 2 * global.tune.bufsize);
Willy Tarreaud0256482015-01-15 21:45:22 +01002077 global.maxsslconn = sslmem / (global.ssl_session_max_cost + global.ssl_handshake_max_cost);
2078 global.maxsslconn = round_2dig(global.maxsslconn);
2079
2080 if (sslmem <= 0 || global.maxsslconn < sides) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002081 ha_alert("Cannot compute the automatic maxsslconn because global.maxconn is already too "
2082 "high for the global.memmax value (%d MB). The absolute maximum possible value "
2083 "without SSL is %d, but %d was found and SSL is in use.\n",
2084 global.rlimit_memmax,
2085 (int)(mem / (STREAM_MAX_COST + 2 * global.tune.bufsize)),
2086 global.maxconn);
Willy Tarreaud0256482015-01-15 21:45:22 +01002087 exit(1);
2088 }
2089
2090 if (global.maxsslconn > sides * global.maxconn)
2091 global.maxsslconn = sides * global.maxconn;
2092
2093 if (global.mode & (MODE_VERBOSE|MODE_DEBUG))
2094 fprintf(stderr, "Note: setting global.maxsslconn to %d\n", global.maxsslconn);
2095 }
2096#endif
2097 else if (!global.maxconn) {
2098 /* memmax and maxsslconn are known/unused, compute maxconn automatically */
2099 int sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
2100 int64_t mem = global.rlimit_memmax * 1048576ULL;
2101 int64_t clearmem;
2102
2103 if (global.ssl_used_frontend || global.ssl_used_backend)
2104 mem -= global.tune.sslcachesize * 200; // about 200 bytes per SSL cache entry
2105
2106 mem -= global.maxzlibmem;
2107 mem = mem * MEM_USABLE_RATIO;
2108
2109 clearmem = mem;
2110 if (sides)
2111 clearmem -= (global.ssl_session_max_cost + global.ssl_handshake_max_cost) * (int64_t)global.maxsslconn;
2112
Willy Tarreau87b09662015-04-03 00:22:06 +02002113 global.maxconn = clearmem / (STREAM_MAX_COST + 2 * global.tune.bufsize);
Willy Tarreauac350932019-03-01 15:43:14 +01002114 global.maxconn = MIN(global.maxconn, ideal_maxconn);
Willy Tarreaud0256482015-01-15 21:45:22 +01002115 global.maxconn = round_2dig(global.maxconn);
Willy Tarreau474b96a2015-01-28 19:03:21 +01002116#ifdef SYSTEM_MAXCONN
Willy Tarreauca783d42019-03-13 10:03:07 +01002117 if (global.maxconn > SYSTEM_MAXCONN)
2118 global.maxconn = SYSTEM_MAXCONN;
Willy Tarreau474b96a2015-01-28 19:03:21 +01002119#endif /* SYSTEM_MAXCONN */
Willy Tarreaud0256482015-01-15 21:45:22 +01002120
2121 if (clearmem <= 0 || !global.maxconn) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002122 ha_alert("Cannot compute the automatic maxconn because global.maxsslconn is already too "
2123 "high for the global.memmax value (%d MB). The absolute maximum possible value "
2124 "is %d, but %d was found.\n",
2125 global.rlimit_memmax,
2126 (int)(mem / (global.ssl_session_max_cost + global.ssl_handshake_max_cost)),
2127 global.maxsslconn);
Willy Tarreaud0256482015-01-15 21:45:22 +01002128 exit(1);
2129 }
2130
2131 if (global.mode & (MODE_VERBOSE|MODE_DEBUG)) {
2132 if (sides && global.maxsslconn > sides * global.maxconn) {
2133 fprintf(stderr, "Note: global.maxsslconn is forced to %d which causes global.maxconn "
2134 "to be limited to %d. Better reduce global.maxsslconn to get more "
2135 "room for extra connections.\n", global.maxsslconn, global.maxconn);
2136 }
2137 fprintf(stderr, "Note: setting global.maxconn to %d\n", global.maxconn);
2138 }
Willy Tarreau66aa61f2009-01-18 21:44:07 +01002139 }
2140
Willy Tarreau5a023f02019-03-01 14:19:31 +01002141 if (!global.maxpipes)
2142 global.maxpipes = compute_ideal_maxpipes();
Willy Tarreau66aa61f2009-01-18 21:44:07 +01002143
Willy Tarreauabacc2c2011-09-07 14:26:33 +02002144 global.hardmaxconn = global.maxconn; /* keep this max value */
Willy Tarreaubaaee002006-06-26 02:48:02 +02002145 global.maxsock += global.maxconn * 2; /* each connection needs two sockets */
Willy Tarreau3ec79b92009-01-18 20:39:42 +01002146 global.maxsock += global.maxpipes * 2; /* each pipe needs two FDs */
Willy Tarreau2c58b412019-03-14 19:10:55 +01002147 global.maxsock += global.nbthread; /* one epoll_fd/kqueue_fd per thread */
2148 global.maxsock += 2 * global.nbthread; /* one wake-up pipe (2 fd) per thread */
2149
Emeric Brunece0c332017-12-06 13:51:49 +01002150 /* compute fd used by async engines */
2151 if (global.ssl_used_async_engines) {
2152 int sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
2153 global.maxsock += global.maxconn * sides * global.ssl_used_async_engines;
2154 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002155
Olivier Houchard88698d92019-04-16 19:07:22 +02002156 /* update connection pool thresholds */
2157 global.tune.pool_low_count = ((long long)global.maxsock * global.tune.pool_low_ratio + 99) / 100;
2158 global.tune.pool_high_count = ((long long)global.maxsock * global.tune.pool_high_ratio + 99) / 100;
2159
Willy Tarreauc8d5b952019-02-27 17:25:52 +01002160 proxy_adjust_all_maxconn();
2161
Willy Tarreau1db37712007-06-03 17:16:49 +02002162 if (global.tune.maxpollevents <= 0)
2163 global.tune.maxpollevents = MAX_POLL_EVENTS;
2164
Olivier Houchard1599b802018-05-24 18:59:04 +02002165 if (global.tune.runqueue_depth <= 0)
2166 global.tune.runqueue_depth = RUNQUEUE_DEPTH;
2167
Willy Tarreau6f4a82c2009-03-21 20:43:57 +01002168 if (global.tune.recv_enough == 0)
2169 global.tune.recv_enough = MIN_RECV_AT_ONCE_ENOUGH;
2170
Willy Tarreau27a674e2009-08-17 07:23:33 +02002171 if (global.tune.maxrewrite >= global.tune.bufsize / 2)
2172 global.tune.maxrewrite = global.tune.bufsize / 2;
2173
Willy Tarreaubaaee002006-06-26 02:48:02 +02002174 if (arg_mode & (MODE_DEBUG | MODE_FOREGROUND)) {
2175 /* command line debug mode inhibits configuration mode */
William Lallemand095ba4c2017-06-01 17:38:50 +02002176 global.mode &= ~(MODE_DAEMON | MODE_QUIET);
Willy Tarreau772f0dd2012-10-26 16:04:28 +02002177 global.mode |= (arg_mode & (MODE_DEBUG | MODE_FOREGROUND));
2178 }
2179
William Lallemand095ba4c2017-06-01 17:38:50 +02002180 if (arg_mode & MODE_DAEMON) {
Willy Tarreau772f0dd2012-10-26 16:04:28 +02002181 /* command line daemon mode inhibits foreground and debug modes mode */
2182 global.mode &= ~(MODE_DEBUG | MODE_FOREGROUND);
William Lallemand095ba4c2017-06-01 17:38:50 +02002183 global.mode |= arg_mode & MODE_DAEMON;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002184 }
Willy Tarreau772f0dd2012-10-26 16:04:28 +02002185
2186 global.mode |= (arg_mode & (MODE_QUIET | MODE_VERBOSE));
Willy Tarreaubaaee002006-06-26 02:48:02 +02002187
William Lallemand095ba4c2017-06-01 17:38:50 +02002188 if ((global.mode & MODE_DEBUG) && (global.mode & (MODE_DAEMON | MODE_QUIET))) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002189 ha_warning("<debug> mode incompatible with <quiet> and <daemon>. Keeping <debug> only.\n");
William Lallemand095ba4c2017-06-01 17:38:50 +02002190 global.mode &= ~(MODE_DAEMON | MODE_QUIET);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002191 }
2192
William Lallemand095ba4c2017-06-01 17:38:50 +02002193 if ((global.nbproc > 1) && !(global.mode & (MODE_DAEMON | MODE_MWORKER))) {
Willy Tarreaubaaee002006-06-26 02:48:02 +02002194 if (!(global.mode & (MODE_FOREGROUND | MODE_DEBUG)))
Christopher Faulet767a84b2017-11-24 16:50:31 +01002195 ha_warning("<nbproc> is only meaningful in daemon mode or master-worker mode. Setting limit to 1 process.\n");
Willy Tarreaubaaee002006-06-26 02:48:02 +02002196 global.nbproc = 1;
2197 }
2198
2199 if (global.nbproc < 1)
2200 global.nbproc = 1;
2201
Christopher Fauletbe0faa22017-08-29 15:37:10 +02002202 if (global.nbthread < 1)
2203 global.nbthread = 1;
2204
Christopher Faulet3ef26392017-08-29 16:46:57 +02002205 /* Realloc trash buffers because global.tune.bufsize may have changed */
Christopher Fauletcd7879a2017-10-27 13:53:47 +02002206 if (!init_trash_buffers(0)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002207 ha_alert("failed to initialize trash buffers.\n");
Christopher Faulet3ef26392017-08-29 16:46:57 +02002208 exit(1);
2209 }
2210
Christopher Faulet96d44832017-11-14 22:02:30 +01002211 if (!init_log_buffers()) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002212 ha_alert("failed to initialize log buffers.\n");
Christopher Faulet96d44832017-11-14 22:02:30 +01002213 exit(1);
2214 }
2215
Willy Tarreauef1d1f82007-04-16 00:25:25 +02002216 /*
2217 * Note: we could register external pollers here.
2218 * Built-in pollers have been registered before main().
2219 */
Willy Tarreau4f60f162007-04-08 16:39:58 +02002220
Willy Tarreau43b78992009-01-25 15:42:27 +01002221 if (!(global.tune.options & GTUNE_USE_KQUEUE))
Willy Tarreau1e63130a2007-04-09 12:03:06 +02002222 disable_poller("kqueue");
2223
Emmanuel Hocdet0ba4f482019-04-08 16:53:32 +00002224 if (!(global.tune.options & GTUNE_USE_EVPORTS))
2225 disable_poller("evports");
2226
Willy Tarreau43b78992009-01-25 15:42:27 +01002227 if (!(global.tune.options & GTUNE_USE_EPOLL))
Willy Tarreau4f60f162007-04-08 16:39:58 +02002228 disable_poller("epoll");
2229
Willy Tarreau43b78992009-01-25 15:42:27 +01002230 if (!(global.tune.options & GTUNE_USE_POLL))
Willy Tarreau4f60f162007-04-08 16:39:58 +02002231 disable_poller("poll");
2232
Willy Tarreau43b78992009-01-25 15:42:27 +01002233 if (!(global.tune.options & GTUNE_USE_SELECT))
Willy Tarreau4f60f162007-04-08 16:39:58 +02002234 disable_poller("select");
2235
2236 /* Note: we could disable any poller by name here */
2237
Christopher Fauletb3f4e142016-03-07 12:46:38 +01002238 if (global.mode & (MODE_VERBOSE|MODE_DEBUG)) {
Willy Tarreau2ff76222007-04-09 19:29:56 +02002239 list_pollers(stderr);
Christopher Fauletb3f4e142016-03-07 12:46:38 +01002240 fprintf(stderr, "\n");
2241 list_filters(stderr);
2242 }
Willy Tarreau2ff76222007-04-09 19:29:56 +02002243
Willy Tarreau4f60f162007-04-08 16:39:58 +02002244 if (!init_pollers()) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002245 ha_alert("No polling mechanism available.\n"
2246 " It is likely that haproxy was built with TARGET=generic and that FD_SETSIZE\n"
2247 " is too low on this platform to support maxconn and the number of listeners\n"
2248 " and servers. You should rebuild haproxy specifying your system using TARGET=\n"
2249 " in order to support other polling systems (poll, epoll, kqueue) or reduce the\n"
2250 " global maxconn setting to accommodate the system's limitation. For reference,\n"
2251 " FD_SETSIZE=%d on this system, global.maxconn=%d resulting in a maximum of\n"
2252 " %d file descriptors. You should thus reduce global.maxconn by %d. Also,\n"
2253 " check build settings using 'haproxy -vv'.\n\n",
2254 FD_SETSIZE, global.maxconn, global.maxsock, (global.maxsock + 1 - FD_SETSIZE) / 2);
Willy Tarreau4f60f162007-04-08 16:39:58 +02002255 exit(1);
2256 }
Willy Tarreau2ff76222007-04-09 19:29:56 +02002257 if (global.mode & (MODE_VERBOSE|MODE_DEBUG)) {
2258 printf("Using %s() as the polling mechanism.\n", cur_poller.name);
Willy Tarreau4f60f162007-04-08 16:39:58 +02002259 }
2260
Krzysztof Piotr Oledzki48cb2ae2009-10-02 22:51:14 +02002261 if (!global.node)
2262 global.node = strdup(hostname);
2263
Thierry FOURNIERa4a0f3d2015-01-23 12:08:30 +01002264 if (!hlua_post_init())
2265 exit(1);
Thomas Holmes6abded42015-05-12 16:23:58 +01002266
Maxime de Roucy0f503922016-05-13 23:52:55 +02002267 free(err_msg);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002268}
2269
Simon Horman6fb82592011-07-15 13:14:11 +09002270static void deinit_acl_cond(struct acl_cond *cond)
Simon Hormanac821422011-07-15 13:14:09 +09002271{
Simon Hormanac821422011-07-15 13:14:09 +09002272 struct acl_term_suite *suite, *suiteb;
2273 struct acl_term *term, *termb;
2274
Simon Horman6fb82592011-07-15 13:14:11 +09002275 if (!cond)
2276 return;
2277
2278 list_for_each_entry_safe(suite, suiteb, &cond->suites, list) {
2279 list_for_each_entry_safe(term, termb, &suite->terms, list) {
2280 LIST_DEL(&term->list);
2281 free(term);
Simon Hormanac821422011-07-15 13:14:09 +09002282 }
Simon Horman6fb82592011-07-15 13:14:11 +09002283 LIST_DEL(&suite->list);
2284 free(suite);
2285 }
2286
2287 free(cond);
2288}
2289
Christopher Fauletcb550132019-12-17 11:25:46 +01002290static void deinit_act_rules(struct list *rules)
Simon Horman6fb82592011-07-15 13:14:11 +09002291{
Christopher Fauletcb550132019-12-17 11:25:46 +01002292 struct act_rule *rule, *ruleb;
Simon Horman6fb82592011-07-15 13:14:11 +09002293
Christopher Fauletcb550132019-12-17 11:25:46 +01002294 list_for_each_entry_safe(rule, ruleb, rules, list) {
2295 LIST_DEL(&rule->list);
2296 deinit_acl_cond(rule->cond);
Christopher Faulet58b35642019-12-17 11:48:42 +01002297 if (rule->release_ptr)
2298 rule->release_ptr(rule);
Christopher Fauletcb550132019-12-17 11:25:46 +01002299 free(rule);
Simon Hormanac821422011-07-15 13:14:09 +09002300 }
2301}
2302
Simon Horman6fb82592011-07-15 13:14:11 +09002303static void deinit_stick_rules(struct list *rules)
2304{
2305 struct sticking_rule *rule, *ruleb;
2306
2307 list_for_each_entry_safe(rule, ruleb, rules, list) {
2308 LIST_DEL(&rule->list);
2309 deinit_acl_cond(rule->cond);
Christopher Faulet476e5d02016-10-26 11:34:47 +02002310 release_sample_expr(rule->expr);
Simon Horman6fb82592011-07-15 13:14:11 +09002311 free(rule);
2312 }
2313}
2314
Cyril Bonté203ec5a2017-03-23 22:44:13 +01002315void deinit(void)
Willy Tarreaubaaee002006-06-26 02:48:02 +02002316{
Olivier Houchardfbc74e82017-11-24 16:54:05 +01002317 struct proxy *p = proxies_list, *p0;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002318 struct cap_hdr *h,*h_next;
2319 struct server *s,*s_next;
2320 struct listener *l,*l_next;
Willy Tarreau0fc45a72007-06-17 00:36:03 +02002321 struct acl_cond *cond, *condb;
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002322 struct acl *acl, *aclb;
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002323 struct switching_rule *rule, *ruleb;
Willy Tarreau4a5cade2012-04-05 21:09:48 +02002324 struct server_rule *srule, *sruleb;
Willy Tarreaub463dfb2008-06-07 23:08:56 +02002325 struct redirect_rule *rdr, *rdrb;
Willy Tarreaudeb9ed82010-01-03 21:03:22 +01002326 struct wordlist *wl, *wlb;
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002327 struct uri_auth *uap, *ua = NULL;
William Lallemand0f99e342011-10-12 17:50:54 +02002328 struct logsrv *log, *logb;
William Lallemand723b73a2012-02-08 16:37:49 +01002329 struct logformat_node *lf, *lfb;
Willy Tarreau2a65ff02012-09-13 17:54:29 +02002330 struct bind_conf *bind_conf, *bind_back;
Willy Tarreaucdb737e2016-12-21 18:43:10 +01002331 struct build_opts_str *bol, *bolb;
Willy Tarreau05554e62016-12-21 20:46:26 +01002332 struct post_deinit_fct *pdf;
Christopher Faulet3ea5cbe2019-07-31 08:44:12 +02002333 struct proxy_deinit_fct *pxdf;
2334 struct server_deinit_fct *srvdf;
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002335
Willy Tarreau24f4efa2010-08-27 17:56:48 +02002336 deinit_signals();
Willy Tarreaubaaee002006-06-26 02:48:02 +02002337 while (p) {
Willy Tarreau8113a5d2012-10-04 08:01:43 +02002338 free(p->conf.file);
Willy Tarreaua534fea2008-08-03 12:19:50 +02002339 free(p->id);
2340 free(p->check_req);
2341 free(p->cookie_name);
2342 free(p->cookie_domain);
Christopher Faulet2f533902020-01-21 11:06:48 +01002343 free(p->cookie_attrs);
Willy Tarreau4c03d1c2019-01-14 15:23:54 +01002344 free(p->lbprm.arg_str);
Willy Tarreaua534fea2008-08-03 12:19:50 +02002345 free(p->capture_name);
2346 free(p->monitor_uri);
Simon Hormana31c7f72011-07-15 13:14:08 +09002347 free(p->rdp_cookie_name);
Willy Tarreau62a61232013-04-12 18:13:46 +02002348 if (p->conf.logformat_string != default_http_log_format &&
2349 p->conf.logformat_string != default_tcp_log_format &&
2350 p->conf.logformat_string != clf_http_log_format)
2351 free(p->conf.logformat_string);
Willy Tarreau196729e2012-05-31 19:30:26 +02002352
Willy Tarreau62a61232013-04-12 18:13:46 +02002353 free(p->conf.lfs_file);
2354 free(p->conf.uniqueid_format_string);
2355 free(p->conf.uif_file);
Willy Tarreau0cac26c2019-01-14 16:55:42 +01002356 if ((p->lbprm.algo & BE_LB_LKUP) == BE_LB_LKUP_MAP)
2357 free(p->lbprm.map.srv);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002358
Dragan Dosen0b85ece2015-09-25 19:17:44 +02002359 if (p->conf.logformat_sd_string != default_rfc5424_sd_log_format)
2360 free(p->conf.logformat_sd_string);
2361 free(p->conf.lfsd_file);
2362
Willy Tarreaub80c2302007-11-30 20:51:32 +01002363 list_for_each_entry_safe(cond, condb, &p->mon_fail_cond, list) {
2364 LIST_DEL(&cond->list);
2365 prune_acl_cond(cond);
2366 free(cond);
2367 }
2368
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002369 /* build a list of unique uri_auths */
2370 if (!ua)
2371 ua = p->uri_auth;
2372 else {
2373 /* check if p->uri_auth is unique */
2374 for (uap = ua; uap; uap=uap->next)
2375 if (uap == p->uri_auth)
2376 break;
2377
Willy Tarreauaccc4e12008-06-24 11:14:45 +02002378 if (!uap && p->uri_auth) {
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002379 /* add it, if it is */
2380 p->uri_auth->next = ua;
2381 ua = p->uri_auth;
2382 }
2383 }
Willy Tarreau0fc45a72007-06-17 00:36:03 +02002384
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002385 list_for_each_entry_safe(acl, aclb, &p->acl, list) {
2386 LIST_DEL(&acl->list);
2387 prune_acl(acl);
2388 free(acl);
2389 }
2390
Willy Tarreau4a5cade2012-04-05 21:09:48 +02002391 list_for_each_entry_safe(srule, sruleb, &p->server_rules, list) {
2392 LIST_DEL(&srule->list);
2393 prune_acl_cond(srule->cond);
2394 free(srule->cond);
2395 free(srule);
2396 }
2397
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002398 list_for_each_entry_safe(rule, ruleb, &p->switching_rules, list) {
2399 LIST_DEL(&rule->list);
Willy Tarreauf51658d2014-04-23 01:21:56 +02002400 if (rule->cond) {
2401 prune_acl_cond(rule->cond);
2402 free(rule->cond);
2403 }
Dragan Dosen2a7c20f2019-04-30 00:38:36 +02002404 free(rule->file);
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002405 free(rule);
2406 }
2407
Willy Tarreaub463dfb2008-06-07 23:08:56 +02002408 list_for_each_entry_safe(rdr, rdrb, &p->redirect_rules, list) {
2409 LIST_DEL(&rdr->list);
Willy Tarreauf285f542010-01-03 20:03:03 +01002410 if (rdr->cond) {
2411 prune_acl_cond(rdr->cond);
2412 free(rdr->cond);
2413 }
Willy Tarreaub463dfb2008-06-07 23:08:56 +02002414 free(rdr->rdr_str);
Thierry FOURNIERd18cd0f2013-11-29 12:15:45 +01002415 list_for_each_entry_safe(lf, lfb, &rdr->rdr_fmt, list) {
2416 LIST_DEL(&lf->list);
2417 free(lf);
2418 }
Willy Tarreaub463dfb2008-06-07 23:08:56 +02002419 free(rdr);
2420 }
2421
William Lallemand0f99e342011-10-12 17:50:54 +02002422 list_for_each_entry_safe(log, logb, &p->logsrvs, list) {
2423 LIST_DEL(&log->list);
2424 free(log);
2425 }
2426
William Lallemand723b73a2012-02-08 16:37:49 +01002427 list_for_each_entry_safe(lf, lfb, &p->logformat, list) {
2428 LIST_DEL(&lf->list);
Dragan Dosen61302da2019-04-30 00:40:02 +02002429 release_sample_expr(lf->expr);
2430 free(lf->arg);
William Lallemand723b73a2012-02-08 16:37:49 +01002431 free(lf);
2432 }
2433
Dragan Dosen0b85ece2015-09-25 19:17:44 +02002434 list_for_each_entry_safe(lf, lfb, &p->logformat_sd, list) {
2435 LIST_DEL(&lf->list);
Dragan Dosen61302da2019-04-30 00:40:02 +02002436 release_sample_expr(lf->expr);
2437 free(lf->arg);
Dragan Dosen0b85ece2015-09-25 19:17:44 +02002438 free(lf);
2439 }
2440
Christopher Fauletcb550132019-12-17 11:25:46 +01002441 deinit_act_rules(&p->tcp_req.inspect_rules);
2442 deinit_act_rules(&p->tcp_rep.inspect_rules);
2443 deinit_act_rules(&p->tcp_req.l4_rules);
2444 deinit_act_rules(&p->tcp_req.l5_rules);
2445 deinit_act_rules(&p->http_req_rules);
2446 deinit_act_rules(&p->http_res_rules);
Christopher Faulet6d0c3df2020-01-22 09:26:35 +01002447 deinit_act_rules(&p->http_after_res_rules);
Simon Hormanac821422011-07-15 13:14:09 +09002448
Simon Horman6fb82592011-07-15 13:14:11 +09002449 deinit_stick_rules(&p->storersp_rules);
2450 deinit_stick_rules(&p->sticking_rules);
2451
Willy Tarreaubaaee002006-06-26 02:48:02 +02002452 h = p->req_cap;
2453 while (h) {
2454 h_next = h->next;
Willy Tarreaua534fea2008-08-03 12:19:50 +02002455 free(h->name);
Willy Tarreaubafbe012017-11-24 17:34:44 +01002456 pool_destroy(h->pool);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002457 free(h);
2458 h = h_next;
2459 }/* end while(h) */
2460
2461 h = p->rsp_cap;
2462 while (h) {
2463 h_next = h->next;
Willy Tarreaua534fea2008-08-03 12:19:50 +02002464 free(h->name);
Willy Tarreaubafbe012017-11-24 17:34:44 +01002465 pool_destroy(h->pool);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002466 free(h);
2467 h = h_next;
2468 }/* end while(h) */
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002469
Willy Tarreaubaaee002006-06-26 02:48:02 +02002470 s = p->srv;
2471 while (s) {
2472 s_next = s->next;
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002473
Willy Tarreauf6562792019-05-07 19:05:35 +02002474 task_destroy(s->check.task);
2475 task_destroy(s->agent.task);
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002476
Willy Tarreau3c39a7d2019-06-14 14:42:29 +02002477 if (s->check.wait_list.tasklet)
2478 tasklet_free(s->check.wait_list.tasklet);
2479 if (s->agent.wait_list.tasklet)
2480 tasklet_free(s->agent.wait_list.tasklet);
Dragan Dosen026ef572019-04-30 00:56:20 +02002481
Willy Tarreauf6562792019-05-07 19:05:35 +02002482 task_destroy(s->warmup);
Willy Tarreau2e993902011-10-31 11:53:20 +01002483
Willy Tarreaua534fea2008-08-03 12:19:50 +02002484 free(s->id);
2485 free(s->cookie);
Willy Tarreauc9fa0482018-07-10 17:43:27 +02002486 free(s->check.bi.area);
2487 free(s->check.bo.area);
2488 free(s->agent.bi.area);
2489 free(s->agent.bo.area);
James Brown55f9ff12015-10-21 18:19:05 -07002490 free(s->agent.send_string);
Christopher Faulet67957bd2017-09-27 11:00:59 +02002491 free(s->hostname_dn);
Sárközi, László34c01792014-09-05 10:08:23 +02002492 free((char*)s->conf.file);
Olivier Houchard7fc3be72018-11-22 18:50:54 +01002493 free(s->idle_conns);
2494 free(s->priv_conns);
2495 free(s->safe_conns);
Olivier Houchard0c18a6f2018-12-02 14:11:41 +01002496 free(s->idle_orphan_conns);
Olivier Houchardf1314812019-02-18 16:41:17 +01002497 free(s->curr_idle_thr);
Willy Tarreau17d45382016-12-22 21:16:08 +01002498
2499 if (s->use_ssl || s->check.use_ssl) {
2500 if (xprt_get(XPRT_SSL) && xprt_get(XPRT_SSL)->destroy_srv)
2501 xprt_get(XPRT_SSL)->destroy_srv(s);
2502 }
Christopher Faulet2a944ee2017-11-07 10:42:54 +01002503 HA_SPIN_DESTROY(&s->lock);
Christopher Faulet3ea5cbe2019-07-31 08:44:12 +02002504
2505 list_for_each_entry(srvdf, &server_deinit_list, list)
2506 srvdf->fct(s);
2507
Willy Tarreaubaaee002006-06-26 02:48:02 +02002508 free(s);
2509 s = s_next;
2510 }/* end while(s) */
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002511
Willy Tarreau4348fad2012-09-20 16:48:07 +02002512 list_for_each_entry_safe(l, l_next, &p->conf.listeners, by_fe) {
Olivier Houchard1fc05162017-04-06 01:05:05 +02002513 /*
2514 * Zombie proxy, the listener just pretend to be up
2515 * because they still hold an opened fd.
2516 * Close it and give the listener its real state.
2517 */
2518 if (p->state == PR_STSTOPPED && l->state >= LI_ZOMBIE) {
2519 close(l->fd);
2520 l->state = LI_INIT;
2521 }
Willy Tarreauf6e2cc72010-09-03 10:38:17 +02002522 unbind_listener(l);
2523 delete_listener(l);
Willy Tarreau4348fad2012-09-20 16:48:07 +02002524 LIST_DEL(&l->by_fe);
2525 LIST_DEL(&l->by_bind);
Krzysztof Piotr Oledzkiaff01ea2010-02-05 20:31:44 +01002526 free(l->name);
2527 free(l->counters);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002528 free(l);
Willy Tarreau4348fad2012-09-20 16:48:07 +02002529 }
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002530
Willy Tarreau4348fad2012-09-20 16:48:07 +02002531 /* Release unused SSL configs. */
Willy Tarreau2a65ff02012-09-13 17:54:29 +02002532 list_for_each_entry_safe(bind_conf, bind_back, &p->conf.bind, by_fe) {
Willy Tarreau795cdab2016-12-22 17:30:54 +01002533 if (bind_conf->xprt->destroy_bind_conf)
2534 bind_conf->xprt->destroy_bind_conf(bind_conf);
Willy Tarreau2a65ff02012-09-13 17:54:29 +02002535 free(bind_conf->file);
2536 free(bind_conf->arg);
2537 LIST_DEL(&bind_conf->by_fe);
2538 free(bind_conf);
2539 }
Willy Tarreauf5ae8f72012-09-07 16:58:00 +02002540
Christopher Fauletd7c91962015-04-30 11:48:27 +02002541 flt_deinit(p);
2542
Christopher Faulet3ea5cbe2019-07-31 08:44:12 +02002543 list_for_each_entry(pxdf, &proxy_deinit_list, list)
2544 pxdf->fct(p);
2545
Krzysztof Piotr Oledzkiaff01ea2010-02-05 20:31:44 +01002546 free(p->desc);
2547 free(p->fwdfor_hdr_name);
2548
Olivier Houchard3f795f72019-04-17 22:51:06 +02002549 task_destroy(p->task);
Krzysztof Piotr Oledzki59bb2182010-01-29 17:58:21 +01002550
Willy Tarreaubafbe012017-11-24 17:34:44 +01002551 pool_destroy(p->req_cap_pool);
2552 pool_destroy(p->rsp_cap_pool);
Dragan Dosen7d61a332019-05-07 14:16:18 +02002553 if (p->table)
2554 pool_destroy(p->table->pool);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01002555
Willy Tarreau4d2d0982007-05-14 00:39:29 +02002556 p0 = p;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002557 p = p->next;
Christopher Faulet2a944ee2017-11-07 10:42:54 +01002558 HA_SPIN_DESTROY(&p0->lbprm.lock);
2559 HA_SPIN_DESTROY(&p0->lock);
Willy Tarreau4d2d0982007-05-14 00:39:29 +02002560 free(p0);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002561 }/* end while(p) */
Willy Tarreaudd815982007-10-16 12:25:14 +02002562
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002563 while (ua) {
2564 uap = ua;
2565 ua = ua->next;
2566
Willy Tarreaua534fea2008-08-03 12:19:50 +02002567 free(uap->uri_prefix);
2568 free(uap->auth_realm);
Krzysztof Piotr Oledzki48cb2ae2009-10-02 22:51:14 +02002569 free(uap->node);
2570 free(uap->desc);
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002571
Krzysztof Piotr Oledzki8c8bd452010-01-29 19:29:32 +01002572 userlist_free(uap->userlist);
Christopher Fauletcb550132019-12-17 11:25:46 +01002573 deinit_act_rules(&uap->http_req_rules);
Krzysztof Piotr Oledzki8c8bd452010-01-29 19:29:32 +01002574
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002575 free(uap);
2576 }
2577
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01002578 userlist_free(userlist);
2579
David Carlier834cb2e2015-09-25 12:02:25 +01002580 cfg_unregister_sections();
2581
Christopher Faulet0132d062017-07-26 15:33:35 +02002582 deinit_log_buffers();
David Carlier834cb2e2015-09-25 12:02:25 +01002583
Willy Tarreaudd815982007-10-16 12:25:14 +02002584 protocol_unbind_all();
2585
Willy Tarreau05554e62016-12-21 20:46:26 +01002586 list_for_each_entry(pdf, &post_deinit_list, list)
2587 pdf->fct();
2588
Joe Williamsdf5b38f2010-12-29 17:05:48 +01002589 free(global.log_send_hostname); global.log_send_hostname = NULL;
Dragan Dosen43885c72015-10-01 13:18:13 +02002590 chunk_destroy(&global.log_tag);
Willy Tarreaua534fea2008-08-03 12:19:50 +02002591 free(global.chroot); global.chroot = NULL;
2592 free(global.pidfile); global.pidfile = NULL;
Krzysztof Piotr Oledzki48cb2ae2009-10-02 22:51:14 +02002593 free(global.node); global.node = NULL;
2594 free(global.desc); global.desc = NULL;
Willy Tarreaua534fea2008-08-03 12:19:50 +02002595 free(oldpids); oldpids = NULL;
Olivier Houchard3f795f72019-04-17 22:51:06 +02002596 task_destroy(idle_conn_task);
Olivier Houchard9ea5d362019-02-14 18:29:09 +01002597 idle_conn_task = NULL;
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002598
William Lallemand0f99e342011-10-12 17:50:54 +02002599 list_for_each_entry_safe(log, logb, &global.logsrvs, list) {
2600 LIST_DEL(&log->list);
2601 free(log);
2602 }
Willy Tarreau477ecd82010-01-03 21:12:30 +01002603 list_for_each_entry_safe(wl, wlb, &cfg_cfgfiles, list) {
Maxime de Roucy0f503922016-05-13 23:52:55 +02002604 free(wl->s);
Willy Tarreau477ecd82010-01-03 21:12:30 +01002605 LIST_DEL(&wl->list);
2606 free(wl);
2607 }
2608
Willy Tarreaucdb737e2016-12-21 18:43:10 +01002609 list_for_each_entry_safe(bol, bolb, &build_opts_list, list) {
2610 if (bol->must_free)
2611 free((void *)bol->str);
2612 LIST_DEL(&bol->list);
2613 free(bol);
2614 }
2615
Christopher Fauletff2613e2016-11-09 11:36:17 +01002616 vars_prune(&global.vars, NULL, NULL);
Willy Tarreau2455ceb2018-11-26 15:57:34 +01002617 pool_destroy_all();
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002618 deinit_pollers();
Willy Tarreaubaaee002006-06-26 02:48:02 +02002619} /* end deinit() */
2620
William Lallemand72160322018-11-06 17:37:16 +01002621
Willy Tarreau918ff602011-07-25 16:33:49 +02002622/* Runs the polling loop */
Willy Tarreau3ebd55e2020-03-03 14:59:56 +01002623void run_poll_loop()
Willy Tarreau4f60f162007-04-08 16:39:58 +02002624{
Willy Tarreau2ae84e42019-05-28 16:44:05 +02002625 int next, wake;
Willy Tarreau4f60f162007-04-08 16:39:58 +02002626
Willy Tarreaub0b37bc2008-06-23 14:00:57 +02002627 tv_update_date(0,1);
Willy Tarreau4f60f162007-04-08 16:39:58 +02002628 while (1) {
Willy Tarreauc49ba522019-12-11 08:12:23 +01002629 wake_expired_tasks();
2630
Thierry FOURNIER9cf7c4b2014-12-15 13:26:01 +01002631 /* Process a few tasks */
2632 process_runnable_tasks();
2633
William Lallemand1aab50b2018-06-07 09:46:01 +02002634 /* check if we caught some signals and process them in the
2635 first thread */
2636 if (tid == 0)
2637 signal_process_queue();
Willy Tarreau29857942009-05-10 09:01:21 +02002638
Willy Tarreau85c459d2018-08-02 10:54:31 +02002639 /* stop when there's nothing left to do */
William Lallemanda7199262018-11-16 16:57:20 +01002640 if ((jobs - unstoppable_jobs) == 0)
Willy Tarreau85c459d2018-08-02 10:54:31 +02002641 break;
Willy Tarreau4f60f162007-04-08 16:39:58 +02002642
Willy Tarreau7067b3a2019-06-02 11:11:29 +02002643 /* also stop if we failed to cleanly stop all tasks */
2644 if (killed > 1)
2645 break;
2646
Willy Tarreau10146c92015-04-13 20:44:19 +02002647 /* expire immediately if events are pending */
Willy Tarreau2ae84e42019-05-28 16:44:05 +02002648 wake = 1;
Olivier Houchard305d5ab2019-07-24 18:07:06 +02002649 if (thread_has_tasks())
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01002650 activity[tid].wake_tasks++;
William Lallemand1aab50b2018-06-07 09:46:01 +02002651 else if (signal_queue_len && tid == 0)
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01002652 activity[tid].wake_signal++;
Olivier Houchard79321b92018-07-26 17:55:11 +02002653 else {
Olivier Houchardb23a61f2019-03-08 18:51:17 +01002654 _HA_ATOMIC_OR(&sleeping_thread_mask, tid_bit);
2655 __ha_barrier_atomic_store();
Olivier Houchardbba1a262019-09-24 14:55:28 +02002656 if ((global_tasks_mask & tid_bit) || thread_has_tasks()) {
Olivier Houchard79321b92018-07-26 17:55:11 +02002657 activity[tid].wake_tasks++;
Olivier Houchardb23a61f2019-03-08 18:51:17 +01002658 _HA_ATOMIC_AND(&sleeping_thread_mask, ~tid_bit);
Olivier Houchard79321b92018-07-26 17:55:11 +02002659 } else
Willy Tarreau2ae84e42019-05-28 16:44:05 +02002660 wake = 0;
Olivier Houchard79321b92018-07-26 17:55:11 +02002661 }
Willy Tarreau10146c92015-04-13 20:44:19 +02002662
Willy Tarreauc49ba522019-12-11 08:12:23 +01002663 /* If we have to sleep, measure how long */
2664 next = wake ? TICK_ETERNITY : next_timer_expiry();
2665
Willy Tarreau58b458d2008-06-29 22:40:23 +02002666 /* The poller will ensure it returns around <next> */
Willy Tarreau2ae84e42019-05-28 16:44:05 +02002667 cur_poller.poll(&cur_poller, next, wake);
Emeric Brun64cc49c2017-10-03 14:46:45 +02002668
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01002669 activity[tid].loops++;
Willy Tarreau4f60f162007-04-08 16:39:58 +02002670 }
2671}
2672
Christopher Faulet1d17c102017-08-29 15:38:48 +02002673static void *run_thread_poll_loop(void *data)
2674{
Willy Tarreau082b6282019-05-22 14:42:12 +02002675 struct per_thread_alloc_fct *ptaf;
Christopher Faulet1d17c102017-08-29 15:38:48 +02002676 struct per_thread_init_fct *ptif;
2677 struct per_thread_deinit_fct *ptdf;
Willy Tarreau082b6282019-05-22 14:42:12 +02002678 struct per_thread_free_fct *ptff;
Willy Tarreau34a150c2019-06-11 09:16:41 +02002679 static int init_left = 0;
2680 __decl_hathreads(static pthread_mutex_t init_mutex = PTHREAD_MUTEX_INITIALIZER);
2681 __decl_hathreads(static pthread_cond_t init_cond = PTHREAD_COND_INITIALIZER);
Christopher Faulet1d17c102017-08-29 15:38:48 +02002682
Willy Tarreaub4f7cc32019-05-03 09:27:30 +02002683 ha_set_tid((unsigned long)data);
Willy Tarreaud022e9c2019-09-24 08:25:15 +02002684 sched = &task_per_thread[tid];
Willy Tarreau91e6df02019-05-03 17:21:18 +02002685
Willy Tarreauf6178242019-05-21 19:46:58 +02002686#if (_POSIX_TIMERS > 0) && defined(_POSIX_THREAD_CPUTIME)
Willy Tarreau91e6df02019-05-03 17:21:18 +02002687#ifdef USE_THREAD
Willy Tarreau8323a372019-05-20 18:57:53 +02002688 pthread_getcpuclockid(pthread_self(), &ti->clock_id);
Willy Tarreau624dcbf2019-05-20 20:23:06 +02002689#else
Willy Tarreau8323a372019-05-20 18:57:53 +02002690 ti->clock_id = CLOCK_THREAD_CPUTIME_ID;
Willy Tarreau91e6df02019-05-03 17:21:18 +02002691#endif
Willy Tarreau663fda42019-05-21 15:14:08 +02002692#endif
Willy Tarreau6ec902a2019-06-07 14:41:11 +02002693 /* Now, initialize one thread init at a time. This is better since
2694 * some init code is a bit tricky and may release global resources
2695 * after reallocating them locally. This will also ensure there is
2696 * no race on file descriptors allocation.
2697 */
Willy Tarreau34a150c2019-06-11 09:16:41 +02002698#ifdef USE_THREAD
2699 pthread_mutex_lock(&init_mutex);
2700#endif
2701 /* The first thread must set the number of threads left */
2702 if (!init_left)
2703 init_left = global.nbthread;
2704 init_left--;
Willy Tarreau91e6df02019-05-03 17:21:18 +02002705
Christopher Faulet1d17c102017-08-29 15:38:48 +02002706 tv_update_date(-1,-1);
2707
Willy Tarreau082b6282019-05-22 14:42:12 +02002708 /* per-thread alloc calls performed here are not allowed to snoop on
2709 * other threads, so they are free to initialize at their own rhythm
2710 * as long as they act as if they were alone. None of them may rely
2711 * on resources initialized by the other ones.
2712 */
2713 list_for_each_entry(ptaf, &per_thread_alloc_list, list) {
2714 if (!ptaf->fct()) {
2715 ha_alert("failed to allocate resources for thread %u.\n", tid);
2716 exit(1);
2717 }
2718 }
2719
Willy Tarreau3078e9f2019-05-20 10:50:43 +02002720 /* per-thread init calls performed here are not allowed to snoop on
2721 * other threads, so they are free to initialize at their own rhythm
2722 * as long as they act as if they were alone.
2723 */
Christopher Faulet1d17c102017-08-29 15:38:48 +02002724 list_for_each_entry(ptif, &per_thread_init_list, list) {
2725 if (!ptif->fct()) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002726 ha_alert("failed to initialize thread %u.\n", tid);
Christopher Faulet1d17c102017-08-29 15:38:48 +02002727 exit(1);
2728 }
2729 }
2730
Willy Tarreau71092822019-06-10 09:51:04 +02002731 /* enabling protocols will result in fd_insert() calls to be performed,
2732 * we want all threads to have already allocated their local fd tables
Willy Tarreau34a150c2019-06-11 09:16:41 +02002733 * before doing so, thus only the last thread does it.
Willy Tarreau71092822019-06-10 09:51:04 +02002734 */
Willy Tarreau34a150c2019-06-11 09:16:41 +02002735 if (init_left == 0)
Willy Tarreaue4d7c9d2019-06-10 10:14:52 +02002736 protocol_enable_all();
Willy Tarreau6ec902a2019-06-07 14:41:11 +02002737
Willy Tarreau34a150c2019-06-11 09:16:41 +02002738#ifdef USE_THREAD
2739 pthread_cond_broadcast(&init_cond);
2740 pthread_mutex_unlock(&init_mutex);
2741
2742 /* now wait for other threads to finish starting */
2743 pthread_mutex_lock(&init_mutex);
2744 while (init_left)
2745 pthread_cond_wait(&init_cond, &init_mutex);
2746 pthread_mutex_unlock(&init_mutex);
2747#endif
Willy Tarreau3078e9f2019-05-20 10:50:43 +02002748
Willy Tarreaua45a8b52019-12-06 16:31:45 +01002749#if defined(PR_SET_NO_NEW_PRIVS) && defined(USE_PRCTL)
2750 /* Let's refrain from using setuid executables. This way the impact of
2751 * an eventual vulnerability in a library remains limited. It may
2752 * impact external checks but who cares about them anyway ? In the
2753 * worst case it's possible to disable the option. Obviously we do this
2754 * in workers only. We can't hard-fail on this one as it really is
2755 * implementation dependent though we're interested in feedback, hence
2756 * the warning.
2757 */
2758 if (!(global.tune.options & GTUNE_INSECURE_SETUID) && !master) {
2759 static int warn_fail;
2760 if (prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0) == -1 && !_HA_ATOMIC_XADD(&warn_fail, 1)) {
2761 ha_warning("Failed to disable setuid, please report to developers with detailed "
2762 "information about your operating system. You can silence this warning "
2763 "by adding 'insecure-setuid-wanted' in the 'global' section.\n");
2764 }
2765 }
2766#endif
2767
Willy Tarreaud96f1122019-12-03 07:07:36 +01002768#if defined(RLIMIT_NPROC)
2769 /* all threads have started, it's now time to prevent any new thread
2770 * or process from starting. Obviously we do this in workers only. We
2771 * can't hard-fail on this one as it really is implementation dependent
2772 * though we're interested in feedback, hence the warning.
2773 */
2774 if (!(global.tune.options & GTUNE_INSECURE_FORK) && !master) {
2775 struct rlimit limit = { .rlim_cur = 0, .rlim_max = 0 };
2776 static int warn_fail;
2777
2778 if (setrlimit(RLIMIT_NPROC, &limit) == -1 && !_HA_ATOMIC_XADD(&warn_fail, 1)) {
2779 ha_warning("Failed to disable forks, please report to developers with detailed "
2780 "information about your operating system. You can silence this warning "
2781 "by adding 'insecure-fork-wanted' in the 'global' section.\n");
2782 }
2783 }
2784#endif
Christopher Faulet1d17c102017-08-29 15:38:48 +02002785 run_poll_loop();
2786
2787 list_for_each_entry(ptdf, &per_thread_deinit_list, list)
2788 ptdf->fct();
2789
Willy Tarreau082b6282019-05-22 14:42:12 +02002790 list_for_each_entry(ptff, &per_thread_free_list, list)
2791 ptff->fct();
2792
Christopher Fauletcd7879a2017-10-27 13:53:47 +02002793#ifdef USE_THREAD
Olivier Houchardb23a61f2019-03-08 18:51:17 +01002794 _HA_ATOMIC_AND(&all_threads_mask, ~tid_bit);
Christopher Fauletcd7879a2017-10-27 13:53:47 +02002795 if (tid > 0)
2796 pthread_exit(NULL);
Christopher Faulet1d17c102017-08-29 15:38:48 +02002797#endif
Christopher Fauletcd7879a2017-10-27 13:53:47 +02002798 return NULL;
2799}
Christopher Faulet1d17c102017-08-29 15:38:48 +02002800
William Dauchyf9af9d72019-11-17 15:47:16 +01002801/* set uid/gid depending on global settings */
2802static void set_identity(const char *program_name)
2803{
2804 if (global.gid) {
2805 if (getgroups(0, NULL) > 0 && setgroups(0, NULL) == -1)
2806 ha_warning("[%s.main()] Failed to drop supplementary groups. Using 'gid'/'group'"
2807 " without 'uid'/'user' is generally useless.\n", program_name);
2808
2809 if (setgid(global.gid) == -1) {
2810 ha_alert("[%s.main()] Cannot set gid %d.\n", program_name, global.gid);
2811 protocol_unbind_all();
2812 exit(1);
2813 }
2814 }
2815
2816 if (global.uid && setuid(global.uid) == -1) {
2817 ha_alert("[%s.main()] Cannot set uid %d.\n", program_name, global.uid);
2818 protocol_unbind_all();
2819 exit(1);
2820 }
2821}
2822
Willy Tarreaubaaee002006-06-26 02:48:02 +02002823int main(int argc, char **argv)
2824{
2825 int err, retry;
2826 struct rlimit limit;
Emeric Bruncf20bf12010-10-22 16:06:11 +02002827 char errmsg[100];
Willy Tarreau269ab312012-09-05 08:02:48 +02002828 int pidfd = -1;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002829
Olivier Houchard5fa300d2018-02-03 15:15:21 +01002830 setvbuf(stdout, NULL, _IONBF, 0);
Willy Tarreau5794fb02018-11-25 18:43:29 +01002831
Willy Tarreauff9c9142019-02-07 10:39:36 +01002832 /* this can only safely be done here, though it's optimized away by
2833 * the compiler.
2834 */
2835 if (MAX_PROCS < 1 || MAX_PROCS > LONGBITS) {
2836 ha_alert("MAX_PROCS value must be between 1 and %d inclusive; "
2837 "HAProxy was built with value %d, please fix it and rebuild.\n",
2838 LONGBITS, MAX_PROCS);
2839 exit(1);
2840 }
2841
Willy Tarreaubf696402019-03-01 10:09:28 +01002842 /* take a copy of initial limits before we possibly change them */
2843 getrlimit(RLIMIT_NOFILE, &limit);
2844 rlim_fd_cur_at_boot = limit.rlim_cur;
2845 rlim_fd_max_at_boot = limit.rlim_max;
2846
Willy Tarreau5794fb02018-11-25 18:43:29 +01002847 /* process all initcalls in order of potential dependency */
2848 RUN_INITCALLS(STG_PREPARE);
2849 RUN_INITCALLS(STG_LOCK);
2850 RUN_INITCALLS(STG_ALLOC);
2851 RUN_INITCALLS(STG_POOL);
2852 RUN_INITCALLS(STG_REGISTER);
2853 RUN_INITCALLS(STG_INIT);
2854
Emeric Bruncf20bf12010-10-22 16:06:11 +02002855 init(argc, argv);
Willy Tarreau24f4efa2010-08-27 17:56:48 +02002856 signal_register_fct(SIGQUIT, dump, SIGQUIT);
2857 signal_register_fct(SIGUSR1, sig_soft_stop, SIGUSR1);
2858 signal_register_fct(SIGHUP, sig_dump_state, SIGHUP);
William Lallemand73b85e72017-06-01 17:38:51 +02002859 signal_register_fct(SIGUSR2, NULL, 0);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002860
Willy Tarreaue437c442010-03-17 18:02:46 +01002861 /* Always catch SIGPIPE even on platforms which define MSG_NOSIGNAL.
2862 * Some recent FreeBSD setups report broken pipes, and MSG_NOSIGNAL
2863 * was defined there, so let's stay on the safe side.
Willy Tarreaubaaee002006-06-26 02:48:02 +02002864 */
Willy Tarreau24f4efa2010-08-27 17:56:48 +02002865 signal_register_fct(SIGPIPE, NULL, 0);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002866
Willy Tarreaudc23a922011-02-16 11:10:36 +01002867 /* ulimits */
2868 if (!global.rlimit_nofile)
2869 global.rlimit_nofile = global.maxsock;
2870
2871 if (global.rlimit_nofile) {
Willy Tarreaue5cfdac2019-03-01 10:32:05 +01002872 limit.rlim_cur = global.rlimit_nofile;
2873 limit.rlim_max = MAX(rlim_fd_max_at_boot, limit.rlim_cur);
2874
Willy Tarreaudc23a922011-02-16 11:10:36 +01002875 if (setrlimit(RLIMIT_NOFILE, &limit) == -1) {
Willy Tarreauef635472016-06-21 11:48:18 +02002876 getrlimit(RLIMIT_NOFILE, &limit);
William Dauchy0fec3ab2019-10-27 20:08:11 +01002877 if (global.tune.options & GTUNE_STRICT_LIMITS) {
2878 ha_alert("[%s.main()] Cannot raise FD limit to %d, limit is %d.\n",
2879 argv[0], global.rlimit_nofile, (int)limit.rlim_cur);
2880 if (!(global.mode & MODE_MWORKER))
2881 exit(1);
2882 }
2883 else {
2884 /* try to set it to the max possible at least */
2885 limit.rlim_cur = limit.rlim_max;
2886 if (setrlimit(RLIMIT_NOFILE, &limit) != -1)
2887 getrlimit(RLIMIT_NOFILE, &limit);
Willy Tarreau164dd0b2016-06-21 11:51:59 +02002888
William Dauchy0fec3ab2019-10-27 20:08:11 +01002889 ha_warning("[%s.main()] Cannot raise FD limit to %d, limit is %d. "
2890 "This will fail in >= v2.3\n",
2891 argv[0], global.rlimit_nofile, (int)limit.rlim_cur);
2892 global.rlimit_nofile = limit.rlim_cur;
2893 }
Willy Tarreaudc23a922011-02-16 11:10:36 +01002894 }
2895 }
2896
2897 if (global.rlimit_memmax) {
2898 limit.rlim_cur = limit.rlim_max =
Willy Tarreau70060452015-12-14 12:46:07 +01002899 global.rlimit_memmax * 1048576ULL;
Willy Tarreaudc23a922011-02-16 11:10:36 +01002900#ifdef RLIMIT_AS
2901 if (setrlimit(RLIMIT_AS, &limit) == -1) {
William Dauchy0fec3ab2019-10-27 20:08:11 +01002902 if (global.tune.options & GTUNE_STRICT_LIMITS) {
2903 ha_alert("[%s.main()] Cannot fix MEM limit to %d megs.\n",
2904 argv[0], global.rlimit_memmax);
2905 if (!(global.mode & MODE_MWORKER))
2906 exit(1);
2907 }
2908 else
2909 ha_warning("[%s.main()] Cannot fix MEM limit to %d megs."
2910 "This will fail in >= v2.3\n",
2911 argv[0], global.rlimit_memmax);
Willy Tarreaudc23a922011-02-16 11:10:36 +01002912 }
2913#else
2914 if (setrlimit(RLIMIT_DATA, &limit) == -1) {
William Dauchy0fec3ab2019-10-27 20:08:11 +01002915 if (global.tune.options & GTUNE_STRICT_LIMITS) {
2916 ha_alert("[%s.main()] Cannot fix MEM limit to %d megs.\n",
2917 argv[0], global.rlimit_memmax);
2918 if (!(global.mode & MODE_MWORKER))
2919 exit(1);
2920 }
2921 else
2922 ha_warning("[%s.main()] Cannot fix MEM limit to %d megs.",
2923 "This will fail in >= v2.3\n",
2924 argv[0], global.rlimit_memmax);
Willy Tarreaudc23a922011-02-16 11:10:36 +01002925 }
2926#endif
2927 }
2928
Olivier Houchardf73629d2017-04-05 22:33:04 +02002929 if (old_unixsocket) {
William Lallemand85b0bd92017-06-01 17:38:53 +02002930 if (strcmp("/dev/null", old_unixsocket) != 0) {
2931 if (get_old_sockets(old_unixsocket) != 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002932 ha_alert("Failed to get the sockets from the old process!\n");
William Lallemand85b0bd92017-06-01 17:38:53 +02002933 if (!(global.mode & MODE_MWORKER))
2934 exit(1);
2935 }
Olivier Houchardf73629d2017-04-05 22:33:04 +02002936 }
2937 }
William Lallemand85b0bd92017-06-01 17:38:53 +02002938 get_cur_unixsocket();
2939
Willy Tarreaubaaee002006-06-26 02:48:02 +02002940 /* We will loop at most 100 times with 10 ms delay each time.
2941 * That's at most 1 second. We only send a signal to old pids
2942 * if we cannot grab at least one port.
2943 */
2944 retry = MAX_START_RETRIES;
2945 err = ERR_NONE;
2946 while (retry >= 0) {
2947 struct timeval w;
2948 err = start_proxies(retry == 0 || nb_oldpids == 0);
Willy Tarreaue13e9252007-12-20 23:05:50 +01002949 /* exit the loop on no error or fatal error */
2950 if ((err & (ERR_RETRYABLE|ERR_FATAL)) != ERR_RETRYABLE)
Willy Tarreaubaaee002006-06-26 02:48:02 +02002951 break;
Willy Tarreaubb545b42010-08-25 12:58:59 +02002952 if (nb_oldpids == 0 || retry == 0)
Willy Tarreaubaaee002006-06-26 02:48:02 +02002953 break;
2954
2955 /* FIXME-20060514: Solaris and OpenBSD do not support shutdown() on
2956 * listening sockets. So on those platforms, it would be wiser to
2957 * simply send SIGUSR1, which will not be undoable.
2958 */
Willy Tarreaubb545b42010-08-25 12:58:59 +02002959 if (tell_old_pids(SIGTTOU) == 0) {
2960 /* no need to wait if we can't contact old pids */
2961 retry = 0;
2962 continue;
2963 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002964 /* give some time to old processes to stop listening */
2965 w.tv_sec = 0;
2966 w.tv_usec = 10*1000;
2967 select(0, NULL, NULL, NULL, &w);
2968 retry--;
2969 }
2970
2971 /* Note: start_proxies() sends an alert when it fails. */
Willy Tarreau0a3b9d92009-02-04 17:05:23 +01002972 if ((err & ~ERR_WARN) != ERR_NONE) {
Willy Tarreauf68da462009-06-09 14:36:00 +02002973 if (retry != MAX_START_RETRIES && nb_oldpids) {
2974 protocol_unbind_all(); /* cleanup everything we can */
Willy Tarreaubaaee002006-06-26 02:48:02 +02002975 tell_old_pids(SIGTTIN);
Willy Tarreauf68da462009-06-09 14:36:00 +02002976 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002977 exit(1);
2978 }
2979
William Lallemand944e6192018-11-21 15:48:31 +01002980 if (!(global.mode & MODE_MWORKER_WAIT) && listeners == 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002981 ha_alert("[%s.main()] No enabled listener found (check for 'bind' directives) ! Exiting.\n", argv[0]);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002982 /* Note: we don't have to send anything to the old pids because we
2983 * never stopped them. */
2984 exit(1);
2985 }
2986
Emeric Bruncf20bf12010-10-22 16:06:11 +02002987 err = protocol_bind_all(errmsg, sizeof(errmsg));
2988 if ((err & ~ERR_WARN) != ERR_NONE) {
2989 if ((err & ERR_ALERT) || (err & ERR_WARN))
Christopher Faulet767a84b2017-11-24 16:50:31 +01002990 ha_alert("[%s.main()] %s.\n", argv[0], errmsg);
Emeric Bruncf20bf12010-10-22 16:06:11 +02002991
Christopher Faulet767a84b2017-11-24 16:50:31 +01002992 ha_alert("[%s.main()] Some protocols failed to start their listeners! Exiting.\n", argv[0]);
Willy Tarreaudd815982007-10-16 12:25:14 +02002993 protocol_unbind_all(); /* cleanup everything we can */
2994 if (nb_oldpids)
2995 tell_old_pids(SIGTTIN);
2996 exit(1);
Emeric Bruncf20bf12010-10-22 16:06:11 +02002997 } else if (err & ERR_WARN) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002998 ha_alert("[%s.main()] %s.\n", argv[0], errmsg);
Willy Tarreaudd815982007-10-16 12:25:14 +02002999 }
Olivier Houchardf73629d2017-04-05 22:33:04 +02003000 /* Ok, all listener should now be bound, close any leftover sockets
3001 * the previous process gave us, we don't need them anymore
3002 */
3003 while (xfer_sock_list != NULL) {
3004 struct xfer_sock_list *tmpxfer = xfer_sock_list->next;
3005 close(xfer_sock_list->fd);
3006 free(xfer_sock_list->iface);
3007 free(xfer_sock_list->namespace);
3008 free(xfer_sock_list);
3009 xfer_sock_list = tmpxfer;
3010 }
Willy Tarreaudd815982007-10-16 12:25:14 +02003011
Willy Tarreaubaaee002006-06-26 02:48:02 +02003012 /* prepare pause/play signals */
Willy Tarreau24f4efa2010-08-27 17:56:48 +02003013 signal_register_fct(SIGTTOU, sig_pause, SIGTTOU);
3014 signal_register_fct(SIGTTIN, sig_listen, SIGTTIN);
Willy Tarreaubaaee002006-06-26 02:48:02 +02003015
Willy Tarreaubaaee002006-06-26 02:48:02 +02003016 /* MODE_QUIET can inhibit alerts and warnings below this line */
3017
PiBa-NL149a81a2017-12-25 21:03:31 +01003018 if (getenv("HAPROXY_MWORKER_REEXEC") != NULL) {
3019 /* either stdin/out/err are already closed or should stay as they are. */
3020 if ((global.mode & MODE_DAEMON)) {
3021 /* daemon mode re-executing, stdin/stdout/stderr are already closed so keep quiet */
3022 global.mode &= ~MODE_VERBOSE;
3023 global.mode |= MODE_QUIET; /* ensure that we won't say anything from now */
3024 }
3025 } else {
3026 if ((global.mode & MODE_QUIET) && !(global.mode & MODE_VERBOSE)) {
3027 /* detach from the tty */
William Lallemande1340412017-12-28 16:09:36 +01003028 stdio_quiet(-1);
PiBa-NL149a81a2017-12-25 21:03:31 +01003029 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02003030 }
3031
3032 /* open log & pid files before the chroot */
William Lallemand80293002017-11-06 11:00:03 +01003033 if ((global.mode & MODE_DAEMON || global.mode & MODE_MWORKER) && global.pidfile != NULL) {
Willy Tarreaubaaee002006-06-26 02:48:02 +02003034 unlink(global.pidfile);
3035 pidfd = open(global.pidfile, O_CREAT | O_WRONLY | O_TRUNC, 0644);
3036 if (pidfd < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003037 ha_alert("[%s.main()] Cannot create pidfile %s\n", argv[0], global.pidfile);
Willy Tarreaubaaee002006-06-26 02:48:02 +02003038 if (nb_oldpids)
3039 tell_old_pids(SIGTTIN);
Willy Tarreaudd815982007-10-16 12:25:14 +02003040 protocol_unbind_all();
Willy Tarreaubaaee002006-06-26 02:48:02 +02003041 exit(1);
3042 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02003043 }
3044
Willy Tarreaub38651a2007-03-24 17:24:39 +01003045 if ((global.last_checks & LSTCHK_NETADM) && global.uid) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003046 ha_alert("[%s.main()] Some configuration options require full privileges, so global.uid cannot be changed.\n"
3047 "", argv[0]);
Willy Tarreaudd815982007-10-16 12:25:14 +02003048 protocol_unbind_all();
Willy Tarreaub38651a2007-03-24 17:24:39 +01003049 exit(1);
3050 }
3051
Willy Tarreau4e30ed72009-02-04 18:02:48 +01003052 /* If the user is not root, we'll still let him try the configuration
3053 * but we inform him that unexpected behaviour may occur.
3054 */
3055 if ((global.last_checks & LSTCHK_NETADM) && getuid())
Christopher Faulet767a84b2017-11-24 16:50:31 +01003056 ha_warning("[%s.main()] Some options which require full privileges"
3057 " might not work well.\n"
3058 "", argv[0]);
Willy Tarreau4e30ed72009-02-04 18:02:48 +01003059
William Lallemand095ba4c2017-06-01 17:38:50 +02003060 if ((global.mode & (MODE_MWORKER|MODE_DAEMON)) == 0) {
3061
3062 /* chroot if needed */
3063 if (global.chroot != NULL) {
3064 if (chroot(global.chroot) == -1 || chdir("/") == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003065 ha_alert("[%s.main()] Cannot chroot(%s).\n", argv[0], global.chroot);
William Lallemand095ba4c2017-06-01 17:38:50 +02003066 if (nb_oldpids)
3067 tell_old_pids(SIGTTIN);
3068 protocol_unbind_all();
3069 exit(1);
3070 }
Willy Tarreauf223cc02007-10-15 18:57:08 +02003071 }
Willy Tarreauf223cc02007-10-15 18:57:08 +02003072 }
3073
William Lallemand944e6192018-11-21 15:48:31 +01003074 if (nb_oldpids && !(global.mode & MODE_MWORKER_WAIT))
Willy Tarreaubb545b42010-08-25 12:58:59 +02003075 nb_oldpids = tell_old_pids(oldpids_sig);
Willy Tarreaubaaee002006-06-26 02:48:02 +02003076
William Lallemand27edc4b2019-05-07 17:49:33 +02003077 /* send a SIGTERM to workers who have a too high reloads number */
3078 if ((global.mode & MODE_MWORKER) && !(global.mode & MODE_MWORKER_WAIT))
3079 mworker_kill_max_reloads(SIGTERM);
3080
William Lallemand8a361b52017-06-20 11:20:33 +02003081 if ((getenv("HAPROXY_MWORKER_REEXEC") == NULL)) {
3082 nb_oldpids = 0;
3083 free(oldpids);
3084 oldpids = NULL;
3085 }
3086
3087
Willy Tarreaubaaee002006-06-26 02:48:02 +02003088 /* Note that any error at this stage will be fatal because we will not
3089 * be able to restart the old pids.
3090 */
3091
William Dauchyf9af9d72019-11-17 15:47:16 +01003092 if ((global.mode & (MODE_MWORKER | MODE_DAEMON)) == 0)
3093 set_identity(argv[0]);
Willy Tarreau636848a2019-04-15 19:38:50 +02003094
Willy Tarreaubaaee002006-06-26 02:48:02 +02003095 /* check ulimits */
3096 limit.rlim_cur = limit.rlim_max = 0;
3097 getrlimit(RLIMIT_NOFILE, &limit);
3098 if (limit.rlim_cur < global.maxsock) {
William Dauchy0fec3ab2019-10-27 20:08:11 +01003099 if (global.tune.options & GTUNE_STRICT_LIMITS) {
3100 ha_alert("[%s.main()] FD limit (%d) too low for maxconn=%d/maxsock=%d. "
3101 "Please raise 'ulimit-n' to %d or more to avoid any trouble.\n",
3102 argv[0], (int)limit.rlim_cur, global.maxconn, global.maxsock,
3103 global.maxsock);
3104 if (!(global.mode & MODE_MWORKER))
3105 exit(1);
3106 }
3107 else
3108 ha_alert("[%s.main()] FD limit (%d) too low for maxconn=%d/maxsock=%d. "
3109 "Please raise 'ulimit-n' to %d or more to avoid any trouble."
3110 "This will fail in >= v2.3\n",
3111 argv[0], (int)limit.rlim_cur, global.maxconn, global.maxsock,
3112 global.maxsock);
Willy Tarreaubaaee002006-06-26 02:48:02 +02003113 }
3114
William Lallemand944e6192018-11-21 15:48:31 +01003115 if (global.mode & (MODE_DAEMON | MODE_MWORKER | MODE_MWORKER_WAIT)) {
Willy Tarreau0b9c02c2009-02-04 22:05:05 +01003116 struct proxy *px;
Willy Tarreauf83d3fe2015-05-01 19:13:41 +02003117 struct peers *curpeers;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003118 int ret = 0;
3119 int proc;
William Lallemande1340412017-12-28 16:09:36 +01003120 int devnullfd = -1;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003121
William Lallemand095ba4c2017-06-01 17:38:50 +02003122 /*
3123 * if daemon + mworker: must fork here to let a master
3124 * process live in background before forking children
3125 */
William Lallemand73b85e72017-06-01 17:38:51 +02003126
3127 if ((getenv("HAPROXY_MWORKER_REEXEC") == NULL)
3128 && (global.mode & MODE_MWORKER)
3129 && (global.mode & MODE_DAEMON)) {
William Lallemand095ba4c2017-06-01 17:38:50 +02003130 ret = fork();
3131 if (ret < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003132 ha_alert("[%s.main()] Cannot fork.\n", argv[0]);
William Lallemand095ba4c2017-06-01 17:38:50 +02003133 protocol_unbind_all();
3134 exit(1); /* there has been an error */
William Lallemandbfd8eb52018-07-04 15:31:23 +02003135 } else if (ret > 0) { /* parent leave to daemonize */
William Lallemand095ba4c2017-06-01 17:38:50 +02003136 exit(0);
William Lallemandbfd8eb52018-07-04 15:31:23 +02003137 } else /* change the process group ID in the child (master process) */
3138 setsid();
William Lallemand095ba4c2017-06-01 17:38:50 +02003139 }
William Lallemande20b6a62017-06-01 17:38:55 +02003140
William Lallemande20b6a62017-06-01 17:38:55 +02003141
William Lallemanddeed7802017-11-06 11:00:04 +01003142 /* if in master-worker mode, write the PID of the father */
3143 if (global.mode & MODE_MWORKER) {
3144 char pidstr[100];
Willy Tarreau76a80c72019-06-22 07:41:38 +02003145 snprintf(pidstr, sizeof(pidstr), "%d\n", (int)getpid());
Willy Tarreau46ec48b2018-01-23 19:20:19 +01003146 if (pidfd >= 0)
3147 shut_your_big_mouth_gcc(write(pidfd, pidstr, strlen(pidstr)));
William Lallemanddeed7802017-11-06 11:00:04 +01003148 }
3149
Willy Tarreaubaaee002006-06-26 02:48:02 +02003150 /* the father launches the required number of processes */
William Lallemand944e6192018-11-21 15:48:31 +01003151 if (!(global.mode & MODE_MWORKER_WAIT)) {
William Lallemand9a1ee7a2019-04-01 11:30:02 +02003152 if (global.mode & MODE_MWORKER)
3153 mworker_ext_launch_all();
William Lallemand944e6192018-11-21 15:48:31 +01003154 for (proc = 0; proc < global.nbproc; proc++) {
3155 ret = fork();
3156 if (ret < 0) {
3157 ha_alert("[%s.main()] Cannot fork.\n", argv[0]);
3158 protocol_unbind_all();
3159 exit(1); /* there has been an error */
3160 }
3161 else if (ret == 0) /* child breaks here */
3162 break;
William Lallemand944e6192018-11-21 15:48:31 +01003163 if (pidfd >= 0 && !(global.mode & MODE_MWORKER)) {
3164 char pidstr[100];
3165 snprintf(pidstr, sizeof(pidstr), "%d\n", ret);
3166 shut_your_big_mouth_gcc(write(pidfd, pidstr, strlen(pidstr)));
3167 }
3168 if (global.mode & MODE_MWORKER) {
3169 struct mworker_proc *child;
William Lallemandce83b4a2018-10-26 14:47:30 +02003170
William Lallemand220567e2018-11-21 18:04:53 +01003171 ha_notice("New worker #%d (%d) forked\n", relative_pid, ret);
William Lallemand944e6192018-11-21 15:48:31 +01003172 /* find the right mworker_proc */
3173 list_for_each_entry(child, &proc_list, list) {
3174 if (child->relative_pid == relative_pid &&
William Lallemand8f7069a2019-04-12 16:09:23 +02003175 child->reloads == 0 && child->options & PROC_O_TYPE_WORKER) {
William Lallemand944e6192018-11-21 15:48:31 +01003176 child->timestamp = now.tv_sec;
3177 child->pid = ret;
William Lallemand1dc69632019-06-12 19:11:33 +02003178 child->version = strdup(haproxy_version);
William Lallemand944e6192018-11-21 15:48:31 +01003179 break;
3180 }
William Lallemandce83b4a2018-10-26 14:47:30 +02003181 }
3182 }
William Lallemandbc193052018-09-11 10:06:26 +02003183
William Lallemand944e6192018-11-21 15:48:31 +01003184 relative_pid++; /* each child will get a different one */
3185 pid_bit <<= 1;
3186 }
3187 } else {
3188 /* wait mode */
3189 global.nbproc = 1;
3190 proc = 1;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003191 }
Willy Tarreaufc6c0322012-11-16 16:12:27 +01003192
3193#ifdef USE_CPU_AFFINITY
3194 if (proc < global.nbproc && /* child */
Willy Tarreauff9c9142019-02-07 10:39:36 +01003195 proc < MAX_PROCS && /* only the first 32/64 processes may be pinned */
Christopher Fauletcb6a9452017-11-22 16:50:41 +01003196 global.cpu_map.proc[proc]) /* only do this if the process has a CPU map */
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +02003197#ifdef __FreeBSD__
Olivier Houchard97148f62017-08-16 17:29:11 +02003198 {
3199 cpuset_t cpuset;
3200 int i;
Christopher Fauletcb6a9452017-11-22 16:50:41 +01003201 unsigned long cpu_map = global.cpu_map.proc[proc];
Olivier Houchard97148f62017-08-16 17:29:11 +02003202
3203 CPU_ZERO(&cpuset);
3204 while ((i = ffsl(cpu_map)) > 0) {
3205 CPU_SET(i - 1, &cpuset);
Cyril Bontéd400ab32018-03-12 21:47:39 +01003206 cpu_map &= ~(1UL << (i - 1));
Olivier Houchard97148f62017-08-16 17:29:11 +02003207 }
3208 ret = cpuset_setaffinity(CPU_LEVEL_WHICH, CPU_WHICH_PID, -1, sizeof(cpuset), &cpuset);
3209 }
David Carlier5e4c8e22019-09-13 05:12:58 +01003210#elif defined(__linux__)
Christopher Fauletcb6a9452017-11-22 16:50:41 +01003211 sched_setaffinity(0, sizeof(unsigned long), (void *)&global.cpu_map.proc[proc]);
Willy Tarreaufc6c0322012-11-16 16:12:27 +01003212#endif
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +02003213#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +02003214 /* close the pidfile both in children and father */
Willy Tarreau269ab312012-09-05 08:02:48 +02003215 if (pidfd >= 0) {
3216 //lseek(pidfd, 0, SEEK_SET); /* debug: emulate eglibc bug */
3217 close(pidfd);
3218 }
Willy Tarreaud137dd32010-08-25 12:49:05 +02003219
3220 /* We won't ever use this anymore */
Willy Tarreaud137dd32010-08-25 12:49:05 +02003221 free(global.pidfile); global.pidfile = NULL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003222
Willy Tarreauedaff0a2015-05-01 17:01:08 +02003223 if (proc == global.nbproc) {
William Lallemand944e6192018-11-21 15:48:31 +01003224 if (global.mode & (MODE_MWORKER|MODE_MWORKER_WAIT)) {
PiBa-NLbaf6ea42017-11-28 23:26:08 +01003225
3226 if ((!(global.mode & MODE_QUIET) || (global.mode & MODE_VERBOSE)) &&
3227 (global.mode & MODE_DAEMON)) {
3228 /* detach from the tty, this is required to properly daemonize. */
William Lallemande1340412017-12-28 16:09:36 +01003229 if ((getenv("HAPROXY_MWORKER_REEXEC") == NULL))
3230 stdio_quiet(-1);
3231
PiBa-NLbaf6ea42017-11-28 23:26:08 +01003232 global.mode &= ~MODE_VERBOSE;
3233 global.mode |= MODE_QUIET; /* ensure that we won't say anything from now */
PiBa-NLbaf6ea42017-11-28 23:26:08 +01003234 }
3235
William Lallemandb3f2be32018-09-11 10:06:18 +02003236 mworker_loop();
William Lallemand1499b9b2017-06-07 15:04:47 +02003237 /* should never get there */
3238 exit(EXIT_FAILURE);
Willy Tarreauedaff0a2015-05-01 17:01:08 +02003239 }
William Lallemandcf4e4962017-06-08 19:05:48 +02003240#if defined(USE_OPENSSL) && !defined(OPENSSL_NO_DH)
Grant Zhang872f9c22017-01-21 01:10:18 +00003241 ssl_free_dh();
3242#endif
William Lallemand1499b9b2017-06-07 15:04:47 +02003243 exit(0); /* parent must leave */
Willy Tarreauedaff0a2015-05-01 17:01:08 +02003244 }
3245
William Lallemandcb11fd22017-06-01 17:38:52 +02003246 /* child must never use the atexit function */
3247 atexit_flag = 0;
3248
William Lallemandbc193052018-09-11 10:06:26 +02003249 /* close useless master sockets */
3250 if (global.mode & MODE_MWORKER) {
3251 struct mworker_proc *child, *it;
3252 master = 0;
3253
William Lallemand309dc9a2018-10-26 14:47:45 +02003254 mworker_cli_proxy_stop();
3255
William Lallemandbc193052018-09-11 10:06:26 +02003256 /* free proc struct of other processes */
3257 list_for_each_entry_safe(child, it, &proc_list, list) {
William Lallemandce83b4a2018-10-26 14:47:30 +02003258 /* close the FD of the master side for all
3259 * workers, we don't need to close the worker
3260 * side of other workers since it's done with
3261 * the bind_proc */
Tim Duesterhus742e0f92018-11-25 20:03:39 +01003262 if (child->ipc_fd[0] >= 0)
3263 close(child->ipc_fd[0]);
William Lallemandce83b4a2018-10-26 14:47:30 +02003264 if (child->relative_pid == relative_pid &&
3265 child->reloads == 0) {
3266 /* keep this struct if this is our pid */
3267 proc_self = child;
William Lallemandbc193052018-09-11 10:06:26 +02003268 continue;
William Lallemandce83b4a2018-10-26 14:47:30 +02003269 }
William Lallemandbc193052018-09-11 10:06:26 +02003270 LIST_DEL(&child->list);
Tim Duesterhus9b7a9762019-05-16 20:23:22 +02003271 mworker_free_child(child);
3272 child = NULL;
William Lallemandbc193052018-09-11 10:06:26 +02003273 }
3274 }
Willy Tarreau1605c7a2018-01-23 19:01:49 +01003275
William Lallemande1340412017-12-28 16:09:36 +01003276 if (!(global.mode & MODE_QUIET) || (global.mode & MODE_VERBOSE)) {
3277 devnullfd = open("/dev/null", O_RDWR, 0);
3278 if (devnullfd < 0) {
3279 ha_alert("Cannot open /dev/null\n");
3280 exit(EXIT_FAILURE);
3281 }
3282 }
3283
William Lallemand095ba4c2017-06-01 17:38:50 +02003284 /* Must chroot and setgid/setuid in the children */
3285 /* chroot if needed */
3286 if (global.chroot != NULL) {
3287 if (chroot(global.chroot) == -1 || chdir("/") == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003288 ha_alert("[%s.main()] Cannot chroot1(%s).\n", argv[0], global.chroot);
William Lallemand095ba4c2017-06-01 17:38:50 +02003289 if (nb_oldpids)
3290 tell_old_pids(SIGTTIN);
3291 protocol_unbind_all();
3292 exit(1);
3293 }
3294 }
3295
3296 free(global.chroot);
3297 global.chroot = NULL;
William Dauchyf9af9d72019-11-17 15:47:16 +01003298 set_identity(argv[0]);
William Lallemand095ba4c2017-06-01 17:38:50 +02003299
William Lallemand7f80eb22017-05-26 18:19:55 +02003300 /* pass through every cli socket, and check if it's bound to
3301 * the current process and if it exposes listeners sockets.
3302 * Caution: the GTUNE_SOCKET_TRANSFER is now set after the fork.
3303 * */
3304
3305 if (global.stats_fe) {
3306 struct bind_conf *bind_conf;
3307
3308 list_for_each_entry(bind_conf, &global.stats_fe->conf.bind, by_fe) {
3309 if (bind_conf->level & ACCESS_FD_LISTENERS) {
3310 if (!bind_conf->bind_proc || bind_conf->bind_proc & (1UL << proc)) {
3311 global.tune.options |= GTUNE_SOCKET_TRANSFER;
3312 break;
3313 }
3314 }
3315 }
3316 }
3317
Willy Tarreau0b9c02c2009-02-04 22:05:05 +01003318 /* we might have to unbind some proxies from some processes */
Olivier Houchardfbc74e82017-11-24 16:54:05 +01003319 px = proxies_list;
Willy Tarreau0b9c02c2009-02-04 22:05:05 +01003320 while (px != NULL) {
3321 if (px->bind_proc && px->state != PR_STSTOPPED) {
Olivier Houchard1fc05162017-04-06 01:05:05 +02003322 if (!(px->bind_proc & (1UL << proc))) {
3323 if (global.tune.options & GTUNE_SOCKET_TRANSFER)
3324 zombify_proxy(px);
3325 else
3326 stop_proxy(px);
3327 }
Willy Tarreau0b9c02c2009-02-04 22:05:05 +01003328 }
3329 px = px->next;
3330 }
3331
Willy Tarreauf83d3fe2015-05-01 19:13:41 +02003332 /* we might have to unbind some peers sections from some processes */
Frédéric Lécailleed2b4a62017-07-13 09:07:09 +02003333 for (curpeers = cfg_peers; curpeers; curpeers = curpeers->next) {
Willy Tarreauf83d3fe2015-05-01 19:13:41 +02003334 if (!curpeers->peers_fe)
3335 continue;
3336
3337 if (curpeers->peers_fe->bind_proc & (1UL << proc))
3338 continue;
3339
3340 stop_proxy(curpeers->peers_fe);
3341 /* disable this peer section so that it kills itself */
Willy Tarreau47c8c022015-09-28 16:39:25 +02003342 signal_unregister_handler(curpeers->sighandler);
Olivier Houchard3f795f72019-04-17 22:51:06 +02003343 task_destroy(curpeers->sync_task);
Willy Tarreau47c8c022015-09-28 16:39:25 +02003344 curpeers->sync_task = NULL;
Olivier Houchard3f795f72019-04-17 22:51:06 +02003345 task_destroy(curpeers->peers_fe->task);
Willy Tarreau47c8c022015-09-28 16:39:25 +02003346 curpeers->peers_fe->task = NULL;
Willy Tarreauf83d3fe2015-05-01 19:13:41 +02003347 curpeers->peers_fe = NULL;
3348 }
3349
William Lallemand2e8fad92018-11-13 16:18:23 +01003350 /*
3351 * This is only done in daemon mode because we might want the
3352 * logs on stdout in mworker mode. If we're NOT in QUIET mode,
3353 * we should now close the 3 first FDs to ensure that we can
3354 * detach from the TTY. We MUST NOT do it in other cases since
3355 * it would have already be done, and 0-2 would have been
3356 * affected to listening sockets
Willy Tarreaubaaee002006-06-26 02:48:02 +02003357 */
William Lallemand2e8fad92018-11-13 16:18:23 +01003358 if ((global.mode & MODE_DAEMON) &&
3359 (!(global.mode & MODE_QUIET) || (global.mode & MODE_VERBOSE))) {
Willy Tarreaubaaee002006-06-26 02:48:02 +02003360 /* detach from the tty */
William Lallemande1340412017-12-28 16:09:36 +01003361 stdio_quiet(devnullfd);
Willy Tarreau106cb762008-11-16 07:40:34 +01003362 global.mode &= ~MODE_VERBOSE;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003363 global.mode |= MODE_QUIET; /* ensure that we won't say anything from now */
3364 }
3365 pid = getpid(); /* update child's pid */
William Lallemandbfd8eb52018-07-04 15:31:23 +02003366 if (!(global.mode & MODE_MWORKER)) /* in mworker mode we don't want a new pgid for the children */
3367 setsid();
Willy Tarreau2ff76222007-04-09 19:29:56 +02003368 fork_poller();
Willy Tarreaubaaee002006-06-26 02:48:02 +02003369 }
3370
William Dauchye039f262019-11-17 15:47:15 +01003371 /* try our best to re-enable core dumps depending on system capabilities.
3372 * What is addressed here :
3373 * - remove file size limits
3374 * - remove core size limits
3375 * - mark the process dumpable again if it lost it due to user/group
3376 */
3377 if (global.tune.options & GTUNE_SET_DUMPABLE) {
3378 limit.rlim_cur = limit.rlim_max = RLIM_INFINITY;
3379
3380#if defined(RLIMIT_FSIZE)
3381 if (setrlimit(RLIMIT_FSIZE, &limit) == -1) {
3382 if (global.tune.options & GTUNE_STRICT_LIMITS) {
3383 ha_alert("[%s.main()] Failed to set the raise the maximum "
3384 "file size.\n", argv[0]);
3385 if (!(global.mode & MODE_MWORKER))
3386 exit(1);
3387 }
3388 else
3389 ha_warning("[%s.main()] Failed to set the raise the maximum "
3390 "file size. This will fail in >= v2.3\n", argv[0]);
3391 }
3392#endif
3393
3394#if defined(RLIMIT_CORE)
3395 if (setrlimit(RLIMIT_CORE, &limit) == -1) {
3396 if (global.tune.options & GTUNE_STRICT_LIMITS) {
3397 ha_alert("[%s.main()] Failed to set the raise the core "
3398 "dump size.\n", argv[0]);
3399 if (!(global.mode & MODE_MWORKER))
3400 exit(1);
3401 }
3402 else
3403 ha_warning("[%s.main()] Failed to set the raise the core "
3404 "dump size. This will fail in >= v2.3\n", argv[0]);
3405 }
3406#endif
3407
3408#if defined(USE_PRCTL)
3409 if (prctl(PR_SET_DUMPABLE, 1, 0, 0, 0) == -1)
3410 ha_warning("[%s.main()] Failed to set the dumpable flag, "
3411 "no core will be dumped.\n", argv[0]);
3412#endif
3413 }
3414
Christopher Faulete3a5e352017-10-24 13:53:54 +02003415 global.mode &= ~MODE_STARTING;
Willy Tarreau4f60f162007-04-08 16:39:58 +02003416 /*
3417 * That's it : the central polling loop. Run until we stop.
3418 */
Christopher Faulet1d17c102017-08-29 15:38:48 +02003419#ifdef USE_THREAD
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003420 {
William Lallemand1aab50b2018-06-07 09:46:01 +02003421 sigset_t blocked_sig, old_sig;
Willy Tarreauc40efc12019-05-03 09:22:44 +02003422 int i;
3423
William Lallemand1aab50b2018-06-07 09:46:01 +02003424 /* ensure the signals will be blocked in every thread */
3425 sigfillset(&blocked_sig);
3426 sigdelset(&blocked_sig, SIGPROF);
3427 sigdelset(&blocked_sig, SIGBUS);
3428 sigdelset(&blocked_sig, SIGFPE);
3429 sigdelset(&blocked_sig, SIGILL);
3430 sigdelset(&blocked_sig, SIGSEGV);
3431 pthread_sigmask(SIG_SETMASK, &blocked_sig, &old_sig);
3432
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003433 /* Create nbthread-1 thread. The first thread is the current process */
David Carliera92c5ce2019-09-13 05:03:12 +01003434 ha_thread_info[0].pthread = pthread_self();
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003435 for (i = 1; i < global.nbthread; i++)
David Carliera92c5ce2019-09-13 05:03:12 +01003436 pthread_create(&ha_thread_info[i].pthread, NULL, &run_thread_poll_loop, (void *)(long)i);
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003437
Christopher Faulet62519022017-10-16 15:49:32 +02003438#ifdef USE_CPU_AFFINITY
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003439 /* Now the CPU affinity for all threads */
Willy Tarreau7764a572019-07-16 15:10:34 +02003440 if (global.cpu_map.proc_t1[relative_pid-1])
3441 global.cpu_map.thread[0] &= global.cpu_map.proc_t1[relative_pid-1];
3442
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003443 for (i = 0; i < global.nbthread; i++) {
Christopher Fauletcb6a9452017-11-22 16:50:41 +01003444 if (global.cpu_map.proc[relative_pid-1])
Willy Tarreau81492c92019-05-03 09:41:23 +02003445 global.cpu_map.thread[i] &= global.cpu_map.proc[relative_pid-1];
Christopher Faulet62519022017-10-16 15:49:32 +02003446
Willy Tarreau421f02e2018-01-20 18:19:22 +01003447 if (i < MAX_THREADS && /* only the first 32/64 threads may be pinned */
Willy Tarreau81492c92019-05-03 09:41:23 +02003448 global.cpu_map.thread[i]) {/* only do this if the thread has a THREAD map */
David Carlier5e4c8e22019-09-13 05:12:58 +01003449#if defined(__APPLE__)
3450 int j;
3451 unsigned long cpu_map = global.cpu_map.thread[i];
3452
3453 while ((j = ffsl(cpu_map)) > 0) {
3454 thread_affinity_policy_data_t cpu_set = { j - 1 };
3455 thread_port_t mthread = pthread_mach_thread_np(ha_thread_info[i].pthread);
3456 thread_policy_set(mthread, THREAD_AFFINITY_POLICY, (thread_policy_t)&cpu_set, 1);
3457 cpu_map &= ~(1UL << (j - 1));
3458 }
3459#else
Olivier Houchard829aa242017-12-01 18:19:43 +01003460#if defined(__FreeBSD__) || defined(__NetBSD__)
3461 cpuset_t cpuset;
3462#else
3463 cpu_set_t cpuset;
3464#endif
3465 int j;
Willy Tarreau81492c92019-05-03 09:41:23 +02003466 unsigned long cpu_map = global.cpu_map.thread[i];
Olivier Houchard829aa242017-12-01 18:19:43 +01003467
3468 CPU_ZERO(&cpuset);
3469
3470 while ((j = ffsl(cpu_map)) > 0) {
3471 CPU_SET(j - 1, &cpuset);
Cyril Bontéd400ab32018-03-12 21:47:39 +01003472 cpu_map &= ~(1UL << (j - 1));
Olivier Houchard829aa242017-12-01 18:19:43 +01003473 }
David Carliera92c5ce2019-09-13 05:03:12 +01003474 pthread_setaffinity_np(ha_thread_info[i].pthread,
Olivier Houchard829aa242017-12-01 18:19:43 +01003475 sizeof(cpuset), &cpuset);
David Carlier5e4c8e22019-09-13 05:12:58 +01003476#endif
Olivier Houchard829aa242017-12-01 18:19:43 +01003477 }
Christopher Faulet1d17c102017-08-29 15:38:48 +02003478 }
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003479#endif /* !USE_CPU_AFFINITY */
3480
William Lallemand1aab50b2018-06-07 09:46:01 +02003481 /* when multithreading we need to let only the thread 0 handle the signals */
William Lallemandd3801c12018-09-11 10:06:23 +02003482 haproxy_unblock_signals();
William Lallemand1aab50b2018-06-07 09:46:01 +02003483
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003484 /* Finally, start the poll loop for the first thread */
Willy Tarreaub4f7cc32019-05-03 09:27:30 +02003485 run_thread_poll_loop(0);
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003486
3487 /* Wait the end of other threads */
3488 for (i = 1; i < global.nbthread; i++)
David Carliera92c5ce2019-09-13 05:03:12 +01003489 pthread_join(ha_thread_info[i].pthread, NULL);
Christopher Faulet1d17c102017-08-29 15:38:48 +02003490
Christopher Fauletb79a94c2017-05-30 15:34:30 +02003491#if defined(DEBUG_THREAD) || defined(DEBUG_FULL)
3492 show_lock_stats();
3493#endif
Christopher Faulet1d17c102017-08-29 15:38:48 +02003494 }
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003495#else /* ! USE_THREAD */
William Lallemandd3801c12018-09-11 10:06:23 +02003496 haproxy_unblock_signals();
Willy Tarreaub4f7cc32019-05-03 09:27:30 +02003497 run_thread_poll_loop(0);
Christopher Faulet62519022017-10-16 15:49:32 +02003498#endif
Christopher Faulet1d17c102017-08-29 15:38:48 +02003499
3500 /* Do some cleanup */
Willy Tarreaubaaee002006-06-26 02:48:02 +02003501 deinit();
Christopher Faulet1d17c102017-08-29 15:38:48 +02003502
Willy Tarreaubaaee002006-06-26 02:48:02 +02003503 exit(0);
3504}
3505
3506
3507/*
3508 * Local variables:
3509 * c-indent-level: 8
3510 * c-basic-offset: 8
3511 * End:
3512 */