blob: fe8267968d88fe0cf3fa1903e26418d65690cbba [file] [log] [blame]
Willy Tarreaubaaee002006-06-26 02:48:02 +02001/*
2 * Server management functions.
3 *
Willy Tarreau21faa912012-10-10 08:27:36 +02004 * Copyright 2000-2012 Willy Tarreau <w@1wt.eu>
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +01005 * Copyright 2007-2008 Krzysztof Piotr Oledzki <ole@ans.pl>
Willy Tarreaubaaee002006-06-26 02:48:02 +02006 *
7 * This program is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU General Public License
9 * as published by the Free Software Foundation; either version
10 * 2 of the License, or (at your option) any later version.
11 *
12 */
13
Willy Tarreau0a4b0ab2020-06-11 11:22:44 +020014#include <sys/types.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020015#include <netinet/tcp.h>
Willy Tarreau272adea2014-03-31 10:39:59 +020016#include <ctype.h>
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +020017#include <errno.h>
Willy Tarreau272adea2014-03-31 10:39:59 +020018
Willy Tarreau6be78492020-06-05 00:00:29 +020019#include <import/xxhash.h>
20
Willy Tarreaub2551052020-06-09 09:07:15 +020021#include <haproxy/api.h>
Willy Tarreau3f0f82e2020-06-04 19:42:41 +020022#include <haproxy/applet-t.h>
Willy Tarreau49801602020-06-04 22:50:02 +020023#include <haproxy/backend.h>
Willy Tarreau6be78492020-06-05 00:00:29 +020024#include <haproxy/cfgparse.h>
Willy Tarreau4aa573d2020-06-04 18:21:56 +020025#include <haproxy/check.h>
Willy Tarreau83487a82020-06-04 20:19:54 +020026#include <haproxy/cli.h>
Willy Tarreau7ea393d2020-06-04 18:02:10 +020027#include <haproxy/connection.h>
Willy Tarreau3afc4c42020-06-03 18:23:19 +020028#include <haproxy/dict-t.h>
Willy Tarreau8d366972020-05-27 16:10:29 +020029#include <haproxy/errors.h>
Willy Tarreauf268ee82020-06-04 17:05:57 +020030#include <haproxy/global.h>
Willy Tarreau36979d92020-06-05 17:27:29 +020031#include <haproxy/log.h>
Willy Tarreaucee013e2020-06-05 11:40:38 +020032#include <haproxy/mailers.h>
Willy Tarreau7a00efb2020-06-02 17:02:59 +020033#include <haproxy/namespace.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020034#include <haproxy/port_range.h>
35#include <haproxy/protocol.h>
Willy Tarreaub00a8e32021-05-08 20:18:59 +020036#include <haproxy/proxy.h>
Willy Tarreaua55c4542020-06-04 22:59:39 +020037#include <haproxy/queue.h>
Emeric Brunc9437992021-02-12 19:42:55 +010038#include <haproxy/resolvers.h>
Willy Tarreaue6ce10b2020-06-04 15:33:47 +020039#include <haproxy/sample.h>
Willy Tarreau1e56f922020-06-04 23:20:13 +020040#include <haproxy/server.h>
William Dauchyf6370442020-11-14 19:25:33 +010041#include <haproxy/ssl_sock.h>
Amaury Denoyellef99f77a2021-03-08 17:13:32 +010042#include <haproxy/stats.h>
Willy Tarreaudfd3de82020-06-04 23:46:14 +020043#include <haproxy/stream.h>
Willy Tarreau5e539c92020-06-04 20:45:39 +020044#include <haproxy/stream_interface.h>
Willy Tarreaucea0e1b2020-06-04 17:25:40 +020045#include <haproxy/task.h>
Willy Tarreau51cd5952020-06-05 12:25:38 +020046#include <haproxy/tcpcheck.h>
Willy Tarreau92b4f132020-06-01 11:05:15 +020047#include <haproxy/time.h>
Willy Tarreauba6300e2021-05-08 14:09:40 +020048#include <haproxy/tools.h>
Krzysztof Oledzki85130942007-10-22 16:21:10 +020049
Baptiste Assmannda29fe22019-06-13 13:24:29 +020050
Willy Tarreau3ff577e2018-08-02 11:48:52 +020051static void srv_update_status(struct server *s);
Baptiste Assmann83cbaa52016-11-02 15:34:05 +010052static int srv_apply_lastaddr(struct server *srv, int *err_code);
William Dauchy6318d332020-05-02 21:52:36 +020053static void srv_cleanup_connections(struct server *srv);
Willy Tarreaubaaee002006-06-26 02:48:02 +020054
Amaury Denoyelle587b71e2021-03-10 16:36:02 +010055/* extra keywords used as value for other arguments. They are used as
56 * suggestions for mistyped words.
Willy Tarreau49c2b452021-03-12 09:58:04 +010057 */
Amaury Denoyelle587b71e2021-03-10 16:36:02 +010058static const char *extra_kw_list[] = {
59 "ipv4", "ipv6", "legacy", "octet-count",
Amaury Denoyelle3b89c112021-03-12 16:04:00 +010060 "fail-check", "sudden-death", "mark-down",
Willy Tarreau49c2b452021-03-12 09:58:04 +010061 NULL /* must be last */
62};
63
Willy Tarreau21faa912012-10-10 08:27:36 +020064/* List head of all known server keywords */
65static struct srv_kw_list srv_keywords = {
66 .list = LIST_HEAD_INIT(srv_keywords.list)
67};
Krzysztof Oledzki85130942007-10-22 16:21:10 +020068
Willy Tarreauaf613e82020-06-05 08:40:51 +020069__decl_thread(HA_SPINLOCK_T idle_conn_srv_lock);
Olivier Houchard9ea5d362019-02-14 18:29:09 +010070struct eb_root idle_conn_srv = EB_ROOT;
Willy Tarreau14015b82021-04-10 17:33:15 +020071struct task *idle_conn_task __read_mostly = NULL;
Willy Tarreau198e92a2021-03-05 10:23:32 +010072struct list servers_list = LIST_HEAD_INIT(servers_list);
Olivier Houchard9ea5d362019-02-14 18:29:09 +010073
Frédéric Lécaille7da71292019-05-20 09:47:07 +020074/* The server names dictionary */
Thayne McCombs92149f92020-11-20 01:28:26 -070075struct dict server_key_dict = {
76 .name = "server keys",
Frédéric Lécaille7da71292019-05-20 09:47:07 +020077 .values = EB_ROOT_UNIQUE,
78};
79
Simon Hormana3608442013-11-01 16:46:15 +090080int srv_downtime(const struct server *s)
Willy Tarreau21faa912012-10-10 08:27:36 +020081{
Amaury Denoyellee6ba7912020-10-29 15:59:05 +010082 if ((s->cur_state != SRV_ST_STOPPED) || s->last_change >= now.tv_sec) // ignore negative time
Krzysztof Oledzki85130942007-10-22 16:21:10 +020083 return s->down_time;
84
85 return now.tv_sec - s->last_change + s->down_time;
86}
Willy Tarreaubaaee002006-06-26 02:48:02 +020087
Bhaskar Maddalaa20cb852014-02-03 16:26:46 -050088int srv_lastsession(const struct server *s)
89{
90 if (s->counters.last_sess)
91 return now.tv_sec - s->counters.last_sess;
92
93 return -1;
94}
95
Simon Horman4a741432013-02-23 15:35:38 +090096int srv_getinter(const struct check *check)
Willy Tarreau21faa912012-10-10 08:27:36 +020097{
Simon Horman4a741432013-02-23 15:35:38 +090098 const struct server *s = check->server;
99
Willy Tarreauff5ae352013-12-11 20:36:34 +0100100 if ((check->state & CHK_ST_CONFIGURED) && (check->health == check->rise + check->fall - 1))
Simon Horman4a741432013-02-23 15:35:38 +0900101 return check->inter;
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +0100102
Emeric Brun52a91d32017-08-31 14:41:55 +0200103 if ((s->next_state == SRV_ST_STOPPED) && check->health == 0)
Simon Horman4a741432013-02-23 15:35:38 +0900104 return (check->downinter)?(check->downinter):(check->inter);
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +0100105
Simon Horman4a741432013-02-23 15:35:38 +0900106 return (check->fastinter)?(check->fastinter):(check->inter);
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +0100107}
108
Olivier Houcharde9bad0a2018-01-17 17:39:34 +0100109/*
110 * Check that we did not get a hash collision.
Willy Tarreau595e7672020-10-20 17:30:08 +0200111 * Unlikely, but it can happen. The server's proxy must be at least
112 * read-locked.
Olivier Houcharde9bad0a2018-01-17 17:39:34 +0100113 */
114static inline void srv_check_for_dup_dyncookie(struct server *s)
Olivier Houchard4e694042017-03-14 20:01:29 +0100115{
116 struct proxy *p = s->proxy;
117 struct server *tmpserv;
Olivier Houcharde9bad0a2018-01-17 17:39:34 +0100118
119 for (tmpserv = p->srv; tmpserv != NULL;
120 tmpserv = tmpserv->next) {
121 if (tmpserv == s)
122 continue;
123 if (tmpserv->next_admin & SRV_ADMF_FMAINT)
124 continue;
125 if (tmpserv->cookie &&
126 strcmp(tmpserv->cookie, s->cookie) == 0) {
127 ha_warning("We generated two equal cookies for two different servers.\n"
128 "Please change the secret key for '%s'.\n",
129 s->proxy->id);
130 }
131 }
132
133}
134
Willy Tarreau46b7f532018-08-21 11:54:26 +0200135/*
Willy Tarreau595e7672020-10-20 17:30:08 +0200136 * Must be called with the server lock held, and will read-lock the proxy.
Willy Tarreau46b7f532018-08-21 11:54:26 +0200137 */
Olivier Houcharde9bad0a2018-01-17 17:39:34 +0100138void srv_set_dyncookie(struct server *s)
139{
140 struct proxy *p = s->proxy;
Olivier Houchard4e694042017-03-14 20:01:29 +0100141 char *tmpbuf;
142 unsigned long long hash_value;
Olivier Houchard2cb49eb2017-03-15 15:11:06 +0100143 size_t key_len;
Olivier Houchard4e694042017-03-14 20:01:29 +0100144 size_t buffer_len;
145 int addr_len;
146 int port;
147
Willy Tarreau595e7672020-10-20 17:30:08 +0200148 HA_RWLOCK_RDLOCK(PROXY_LOCK, &p->lock);
Willy Tarreau5e83d992019-07-30 11:59:34 +0200149
Olivier Houchard4e694042017-03-14 20:01:29 +0100150 if ((s->flags & SRV_F_COOKIESET) ||
151 !(s->proxy->ck_opts & PR_CK_DYNAMIC) ||
152 s->proxy->dyncookie_key == NULL)
Willy Tarreau5e83d992019-07-30 11:59:34 +0200153 goto out;
Olivier Houchard2cb49eb2017-03-15 15:11:06 +0100154 key_len = strlen(p->dyncookie_key);
Olivier Houchard4e694042017-03-14 20:01:29 +0100155
156 if (s->addr.ss_family != AF_INET &&
157 s->addr.ss_family != AF_INET6)
Willy Tarreau5e83d992019-07-30 11:59:34 +0200158 goto out;
Olivier Houchard4e694042017-03-14 20:01:29 +0100159 /*
160 * Buffer to calculate the cookie value.
161 * The buffer contains the secret key + the server IP address
162 * + the TCP port.
163 */
164 addr_len = (s->addr.ss_family == AF_INET) ? 4 : 16;
165 /*
166 * The TCP port should use only 2 bytes, but is stored in
167 * an unsigned int in struct server, so let's use 4, to be
168 * on the safe side.
169 */
170 buffer_len = key_len + addr_len + 4;
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200171 tmpbuf = trash.area;
Olivier Houchard4e694042017-03-14 20:01:29 +0100172 memcpy(tmpbuf, p->dyncookie_key, key_len);
173 memcpy(&(tmpbuf[key_len]),
174 s->addr.ss_family == AF_INET ?
175 (void *)&((struct sockaddr_in *)&s->addr)->sin_addr.s_addr :
176 (void *)&(((struct sockaddr_in6 *)&s->addr)->sin6_addr.s6_addr),
177 addr_len);
178 /*
179 * Make sure it's the same across all the load balancers,
180 * no matter their endianness.
181 */
182 port = htonl(s->svc_port);
183 memcpy(&tmpbuf[key_len + addr_len], &port, 4);
184 hash_value = XXH64(tmpbuf, buffer_len, 0);
185 memprintf(&s->cookie, "%016llx", hash_value);
186 if (!s->cookie)
Willy Tarreau5e83d992019-07-30 11:59:34 +0200187 goto out;
Olivier Houchard4e694042017-03-14 20:01:29 +0100188 s->cklen = 16;
Olivier Houcharde9bad0a2018-01-17 17:39:34 +0100189
190 /* Don't bother checking if the dyncookie is duplicated if
191 * the server is marked as "disabled", maybe it doesn't have
192 * its real IP yet, but just a place holder.
Olivier Houchard4e694042017-03-14 20:01:29 +0100193 */
Olivier Houcharde9bad0a2018-01-17 17:39:34 +0100194 if (!(s->next_admin & SRV_ADMF_FMAINT))
195 srv_check_for_dup_dyncookie(s);
Willy Tarreau5e83d992019-07-30 11:59:34 +0200196 out:
Willy Tarreau595e7672020-10-20 17:30:08 +0200197 HA_RWLOCK_RDUNLOCK(PROXY_LOCK, &p->lock);
Olivier Houchard4e694042017-03-14 20:01:29 +0100198}
199
Amaury Denoyelle8e99b842021-10-18 14:39:57 +0200200/* Returns true if it's possible to reuse an idle connection from server <srv>
201 * for a websocket stream. This is the case if server is configured to use the
202 * same protocol for both HTTP and websocket streams. This depends on the value
203 * of "proto", "alpn" and "ws" keywords.
204 */
205int srv_check_reuse_ws(struct server *srv)
206{
Amaury Denoyelleea489aa2021-11-25 10:20:19 +0100207#if defined(USE_OPENSSL) && defined(TLSEXT_TYPE_application_layer_protocol_negotiation)
208 if (!srv->mux_proto && srv->use_ssl && srv->ssl_ctx.alpn_str) {
209 /* ALPN selection.
210 * Based on the assumption that only "h2" and "http/1.1" token
211 * are used on server ALPN.
212 */
213 const struct ist alpn = ist2(srv->ssl_ctx.alpn_str,
214 srv->ssl_ctx.alpn_len);
215
216 switch (srv->ws) {
217 case SRV_WS_AUTO:
218 /* for auto mode, consider reuse as possible if the
219 * server uses a single protocol ALPN
220 */
221 if (!istchr(alpn, ','))
222 return 1;
223 break;
224
225 case SRV_WS_H2:
226 return isteq(alpn, ist("\x02h2"));
227
228 case SRV_WS_H1:
229 return isteq(alpn, ist("\x08http/1.1"));
230 }
231 }
232 else {
233#endif /* defined(OPENSSL) && defined(TLSEXT_TYPE_application_layer_protocol_negotiation) */
Amaury Denoyelle8e99b842021-10-18 14:39:57 +0200234 /* explicit srv.mux_proto or no ALPN : srv.mux_proto is used
235 * for mux selection.
236 */
237 const struct ist srv_mux = srv->mux_proto ?
238 srv->mux_proto->token : IST_NULL;
239
240 switch (srv->ws) {
241 /* "auto" means use the same protocol : reuse is possible. */
242 case SRV_WS_AUTO:
243 return 1;
244
245 /* "h2" means use h2 for websocket : reuse is possible if
246 * server mux is h2.
247 */
248 case SRV_WS_H2:
249 if (srv->mux_proto && isteq(srv_mux, ist("h2")))
250 return 1;
251 break;
252
253 /* "h1" means use h1 for websocket : reuse is possible if
254 * server mux is h1.
255 */
256 case SRV_WS_H1:
257 if (!srv->mux_proto || isteq(srv_mux, ist("h1")))
258 return 1;
259 break;
260 }
Amaury Denoyelleea489aa2021-11-25 10:20:19 +0100261#if defined(USE_OPENSSL) && defined(TLSEXT_TYPE_application_layer_protocol_negotiation)
Amaury Denoyelle8e99b842021-10-18 14:39:57 +0200262 }
Amaury Denoyelleea489aa2021-11-25 10:20:19 +0100263#endif /* defined(OPENSSL) && defined(TLSEXT_TYPE_application_layer_protocol_negotiation) */
Amaury Denoyelle8e99b842021-10-18 14:39:57 +0200264
265 return 0;
266}
267
268/* Return the proto to used for a websocket stream on <srv> without ALPN. NULL
269 * is a valid value indicating to use the fallback mux.
270 */
271const struct mux_ops *srv_get_ws_proto(struct server *srv)
272{
273 const struct mux_proto_list *mux = NULL;
274
275 switch (srv->ws) {
276 case SRV_WS_AUTO:
277 mux = srv->mux_proto;
278 break;
279
280 case SRV_WS_H1:
281 mux = get_mux_proto(ist("h1"));
282 break;
283
284 case SRV_WS_H2:
285 mux = get_mux_proto(ist("h2"));
286 break;
287 }
288
289 return mux ? mux->mux : NULL;
290}
291
Willy Tarreau21faa912012-10-10 08:27:36 +0200292/*
Amaury Denoyelle2f70bb52021-06-08 15:19:51 +0200293 * Must be called with the server lock held. The server is first removed from
294 * the proxy tree if it was already attached. If <reattach> is true, the server
295 * will then be attached in the proxy tree. The proxy lock is held to
296 * manipulate the tree.
Thayne McCombs92149f92020-11-20 01:28:26 -0700297 */
Amaury Denoyelle2f70bb52021-06-08 15:19:51 +0200298static void srv_set_addr_desc(struct server *s, int reattach)
Thayne McCombs92149f92020-11-20 01:28:26 -0700299{
300 struct proxy *p = s->proxy;
301 char *key;
302
303 key = sa2str(&s->addr, s->svc_port, s->flags & SRV_F_MAPPORTS);
304
305 if (s->addr_node.key) {
Thayne McCombs24da7e12021-01-05 23:10:09 -0700306 if (key && strcmp(key, s->addr_node.key) == 0) {
Thayne McCombs92149f92020-11-20 01:28:26 -0700307 free(key);
308 return;
309 }
310
311 HA_RWLOCK_WRLOCK(PROXY_LOCK, &p->lock);
312 ebpt_delete(&s->addr_node);
313 HA_RWLOCK_WRUNLOCK(PROXY_LOCK, &p->lock);
314
315 free(s->addr_node.key);
316 }
317
318 s->addr_node.key = key;
319
Amaury Denoyelle2f70bb52021-06-08 15:19:51 +0200320 if (reattach) {
321 if (s->addr_node.key) {
322 HA_RWLOCK_WRLOCK(PROXY_LOCK, &p->lock);
323 ebis_insert(&p->used_server_addr, &s->addr_node);
324 HA_RWLOCK_WRUNLOCK(PROXY_LOCK, &p->lock);
325 }
Thayne McCombs24da7e12021-01-05 23:10:09 -0700326 }
Thayne McCombs92149f92020-11-20 01:28:26 -0700327}
328
329/*
Willy Tarreau21faa912012-10-10 08:27:36 +0200330 * Registers the server keyword list <kwl> as a list of valid keywords for next
331 * parsing sessions.
332 */
333void srv_register_keywords(struct srv_kw_list *kwl)
334{
Willy Tarreau2b718102021-04-21 07:32:39 +0200335 LIST_APPEND(&srv_keywords.list, &kwl->list);
Willy Tarreau21faa912012-10-10 08:27:36 +0200336}
337
338/* Return a pointer to the server keyword <kw>, or NULL if not found. If the
339 * keyword is found with a NULL ->parse() function, then an attempt is made to
340 * find one with a valid ->parse() function. This way it is possible to declare
341 * platform-dependant, known keywords as NULL, then only declare them as valid
342 * if some options are met. Note that if the requested keyword contains an
343 * opening parenthesis, everything from this point is ignored.
344 */
345struct srv_kw *srv_find_kw(const char *kw)
346{
347 int index;
348 const char *kwend;
349 struct srv_kw_list *kwl;
350 struct srv_kw *ret = NULL;
351
352 kwend = strchr(kw, '(');
353 if (!kwend)
354 kwend = kw + strlen(kw);
355
356 list_for_each_entry(kwl, &srv_keywords.list, list) {
357 for (index = 0; kwl->kw[index].kw != NULL; index++) {
358 if ((strncmp(kwl->kw[index].kw, kw, kwend - kw) == 0) &&
359 kwl->kw[index].kw[kwend-kw] == 0) {
360 if (kwl->kw[index].parse)
361 return &kwl->kw[index]; /* found it !*/
362 else
363 ret = &kwl->kw[index]; /* may be OK */
364 }
365 }
366 }
367 return ret;
368}
369
370/* Dumps all registered "server" keywords to the <out> string pointer. The
371 * unsupported keywords are only dumped if their supported form was not
372 * found.
373 */
374void srv_dump_kws(char **out)
375{
376 struct srv_kw_list *kwl;
377 int index;
378
Christopher Faulet784063e2020-05-18 12:14:18 +0200379 if (!out)
380 return;
381
Willy Tarreau21faa912012-10-10 08:27:36 +0200382 *out = NULL;
383 list_for_each_entry(kwl, &srv_keywords.list, list) {
384 for (index = 0; kwl->kw[index].kw != NULL; index++) {
385 if (kwl->kw[index].parse ||
386 srv_find_kw(kwl->kw[index].kw) == &kwl->kw[index]) {
387 memprintf(out, "%s[%4s] %s%s%s%s\n", *out ? *out : "",
388 kwl->scope,
389 kwl->kw[index].kw,
390 kwl->kw[index].skip ? " <arg>" : "",
391 kwl->kw[index].default_ok ? " [dflt_ok]" : "",
392 kwl->kw[index].parse ? "" : " (not supported)");
393 }
394 }
395 }
Willy Tarreau49c2b452021-03-12 09:58:04 +0100396}
397
398/* Try to find in srv_keyword the word that looks closest to <word> by counting
399 * transitions between letters, digits and other characters. Will return the
400 * best matching word if found, otherwise NULL. An optional array of extra
401 * words to compare may be passed in <extra>, but it must then be terminated
402 * by a NULL entry. If unused it may be NULL.
403 */
404static const char *srv_find_best_kw(const char *word)
405{
406 uint8_t word_sig[1024];
407 uint8_t list_sig[1024];
408 const struct srv_kw_list *kwl;
409 const char *best_ptr = NULL;
410 int dist, best_dist = INT_MAX;
411 const char **extra;
412 int index;
413
414 make_word_fingerprint(word_sig, word);
415 list_for_each_entry(kwl, &srv_keywords.list, list) {
416 for (index = 0; kwl->kw[index].kw != NULL; index++) {
417 make_word_fingerprint(list_sig, kwl->kw[index].kw);
418 dist = word_fingerprint_distance(word_sig, list_sig);
419 if (dist < best_dist) {
420 best_dist = dist;
421 best_ptr = kwl->kw[index].kw;
422 }
423 }
424 }
425
Amaury Denoyelle587b71e2021-03-10 16:36:02 +0100426 for (extra = extra_kw_list; *extra; extra++) {
Willy Tarreau49c2b452021-03-12 09:58:04 +0100427 make_word_fingerprint(list_sig, *extra);
428 dist = word_fingerprint_distance(word_sig, list_sig);
429 if (dist < best_dist) {
430 best_dist = dist;
431 best_ptr = *extra;
432 }
Willy Tarreau49c2b452021-03-12 09:58:04 +0100433 }
434
435 if (best_dist > 2 * strlen(word) || (best_ptr && best_dist > 2 * strlen(best_ptr)))
436 best_ptr = NULL;
437
438 return best_ptr;
Willy Tarreau21faa912012-10-10 08:27:36 +0200439}
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +0100440
Frédéric Lécaillef5bf9032017-03-10 11:51:05 +0100441/* Parse the "backup" server keyword */
442static int srv_parse_backup(char **args, int *cur_arg,
443 struct proxy *curproxy, struct server *newsrv, char **err)
444{
445 newsrv->flags |= SRV_F_BACKUP;
446 return 0;
447}
448
Alexander Liu2a54bb72019-05-22 19:44:48 +0800449
Frédéric Lécaille9d1b95b2017-03-15 09:13:33 +0100450/* Parse the "cookie" server keyword */
451static int srv_parse_cookie(char **args, int *cur_arg,
452 struct proxy *curproxy, struct server *newsrv, char **err)
453{
454 char *arg;
455
456 arg = args[*cur_arg + 1];
457 if (!*arg) {
458 memprintf(err, "'%s' expects <value> as argument.\n", args[*cur_arg]);
459 return ERR_ALERT | ERR_FATAL;
460 }
461
462 free(newsrv->cookie);
463 newsrv->cookie = strdup(arg);
464 newsrv->cklen = strlen(arg);
465 newsrv->flags |= SRV_F_COOKIESET;
466 return 0;
467}
468
Frédéric Lécaille2a0d0612017-03-21 11:53:54 +0100469/* Parse the "disabled" server keyword */
470static int srv_parse_disabled(char **args, int *cur_arg,
471 struct proxy *curproxy, struct server *newsrv, char **err)
472{
Emeric Brun52a91d32017-08-31 14:41:55 +0200473 newsrv->next_admin |= SRV_ADMF_CMAINT | SRV_ADMF_FMAINT;
474 newsrv->next_state = SRV_ST_STOPPED;
Frédéric Lécaille2a0d0612017-03-21 11:53:54 +0100475 newsrv->check.state |= CHK_ST_PAUSED;
476 newsrv->check.health = 0;
477 return 0;
478}
479
480/* Parse the "enabled" server keyword */
481static int srv_parse_enabled(char **args, int *cur_arg,
482 struct proxy *curproxy, struct server *newsrv, char **err)
483{
Emeric Brun52a91d32017-08-31 14:41:55 +0200484 newsrv->next_admin &= ~SRV_ADMF_CMAINT & ~SRV_ADMF_FMAINT;
485 newsrv->next_state = SRV_ST_RUNNING;
Frédéric Lécaille2a0d0612017-03-21 11:53:54 +0100486 newsrv->check.state &= ~CHK_ST_PAUSED;
487 newsrv->check.health = newsrv->check.rise;
488 return 0;
489}
490
Amaury Denoyelle587b71e2021-03-10 16:36:02 +0100491/* Parse the "error-limit" server keyword */
492static int srv_parse_error_limit(char **args, int *cur_arg,
493 struct proxy *curproxy, struct server *newsrv, char **err)
494{
495 if (!*args[*cur_arg + 1]) {
496 memprintf(err, "'%s' expects an integer argument.",
497 args[*cur_arg]);
498 return ERR_ALERT | ERR_FATAL;
499 }
500
501 newsrv->consecutive_errors_limit = atoi(args[*cur_arg + 1]);
502
503 if (newsrv->consecutive_errors_limit <= 0) {
504 memprintf(err, "%s has to be > 0.",
505 args[*cur_arg]);
506 return ERR_ALERT | ERR_FATAL;
507 }
508
509 return 0;
510}
511
Amaury Denoyelle69352ec2021-10-18 14:40:29 +0200512/* Parse the "ws" keyword */
513static int srv_parse_ws(char **args, int *cur_arg,
514 struct proxy *curproxy, struct server *newsrv, char **err)
515{
516 if (!args[*cur_arg + 1]) {
517 memprintf(err, "'%s' expects 'auto', 'h1' or 'h2' value", args[*cur_arg]);
518 return ERR_ALERT | ERR_FATAL;
519 }
520
521 if (strcmp(args[*cur_arg + 1], "h1") == 0) {
522 newsrv->ws = SRV_WS_H1;
523 }
524 else if (strcmp(args[*cur_arg + 1], "h2") == 0) {
525 newsrv->ws = SRV_WS_H2;
526 }
527 else if (strcmp(args[*cur_arg + 1], "auto") == 0) {
528 newsrv->ws = SRV_WS_AUTO;
529 }
530 else {
531 memprintf(err, "'%s' has to be 'auto', 'h1' or 'h2'", args[*cur_arg]);
532 return ERR_ALERT | ERR_FATAL;
533 }
534
535
536 return 0;
537}
538
Amaury Denoyelle587b71e2021-03-10 16:36:02 +0100539/* Parse the "init-addr" server keyword */
540static int srv_parse_init_addr(char **args, int *cur_arg,
541 struct proxy *curproxy, struct server *newsrv, char **err)
542{
543 char *p, *end;
544 int done;
545 struct sockaddr_storage sa;
546
547 newsrv->init_addr_methods = 0;
548 memset(&newsrv->init_addr, 0, sizeof(newsrv->init_addr));
549
550 for (p = args[*cur_arg + 1]; *p; p = end) {
551 /* cut on next comma */
552 for (end = p; *end && *end != ','; end++);
553 if (*end)
554 *(end++) = 0;
555
556 memset(&sa, 0, sizeof(sa));
557 if (strcmp(p, "libc") == 0) {
558 done = srv_append_initaddr(&newsrv->init_addr_methods, SRV_IADDR_LIBC);
559 }
560 else if (strcmp(p, "last") == 0) {
561 done = srv_append_initaddr(&newsrv->init_addr_methods, SRV_IADDR_LAST);
562 }
563 else if (strcmp(p, "none") == 0) {
564 done = srv_append_initaddr(&newsrv->init_addr_methods, SRV_IADDR_NONE);
565 }
566 else if (str2ip2(p, &sa, 0)) {
567 if (is_addr(&newsrv->init_addr)) {
568 memprintf(err, "'%s' : initial address already specified, cannot add '%s'.",
569 args[*cur_arg], p);
570 return ERR_ALERT | ERR_FATAL;
571 }
572 newsrv->init_addr = sa;
573 done = srv_append_initaddr(&newsrv->init_addr_methods, SRV_IADDR_IP);
574 }
575 else {
576 memprintf(err, "'%s' : unknown init-addr method '%s', supported methods are 'libc', 'last', 'none'.",
577 args[*cur_arg], p);
578 return ERR_ALERT | ERR_FATAL;
579 }
580 if (!done) {
581 memprintf(err, "'%s' : too many init-addr methods when trying to add '%s'",
582 args[*cur_arg], p);
583 return ERR_ALERT | ERR_FATAL;
584 }
585 }
586
587 return 0;
588}
589
590/* Parse the "log-proto" server keyword */
591static int srv_parse_log_proto(char **args, int *cur_arg,
592 struct proxy *curproxy, struct server *newsrv, char **err)
593{
594 if (strcmp(args[*cur_arg + 1], "legacy") == 0)
595 newsrv->log_proto = SRV_LOG_PROTO_LEGACY;
596 else if (strcmp(args[*cur_arg + 1], "octet-count") == 0)
597 newsrv->log_proto = SRV_LOG_PROTO_OCTET_COUNTING;
598 else {
599 memprintf(err, "'%s' expects one of 'legacy' or 'octet-count' but got '%s'",
600 args[*cur_arg], args[*cur_arg + 1]);
601 return ERR_ALERT | ERR_FATAL;
602 }
603
604 return 0;
605}
606
607/* Parse the "maxconn" server keyword */
608static int srv_parse_maxconn(char **args, int *cur_arg,
609 struct proxy *curproxy, struct server *newsrv, char **err)
610{
611 newsrv->maxconn = atol(args[*cur_arg + 1]);
612 return 0;
613}
614
615/* Parse the "maxqueue" server keyword */
616static int srv_parse_maxqueue(char **args, int *cur_arg,
617 struct proxy *curproxy, struct server *newsrv, char **err)
618{
619 newsrv->maxqueue = atol(args[*cur_arg + 1]);
620 return 0;
621}
622
623/* Parse the "minconn" server keyword */
624static int srv_parse_minconn(char **args, int *cur_arg,
625 struct proxy *curproxy, struct server *newsrv, char **err)
626{
627 newsrv->minconn = atol(args[*cur_arg + 1]);
628 return 0;
629}
630
Willy Tarreau9c538e02019-01-23 10:21:49 +0100631static int srv_parse_max_reuse(char **args, int *cur_arg, struct proxy *curproxy, struct server *newsrv, char **err)
632{
633 char *arg;
634
635 arg = args[*cur_arg + 1];
636 if (!*arg) {
637 memprintf(err, "'%s' expects <value> as argument.\n", args[*cur_arg]);
638 return ERR_ALERT | ERR_FATAL;
639 }
640 newsrv->max_reuse = atoi(arg);
641
642 return 0;
643}
644
Olivier Houchardb7b3faa2018-12-14 18:15:36 +0100645static int srv_parse_pool_purge_delay(char **args, int *cur_arg, struct proxy *curproxy, struct server *newsrv, char **err)
Olivier Houchard0c18a6f2018-12-02 14:11:41 +0100646{
647 const char *res;
648 char *arg;
649 unsigned int time;
650
651 arg = args[*cur_arg + 1];
652 if (!*arg) {
653 memprintf(err, "'%s' expects <value> as argument.\n", args[*cur_arg]);
654 return ERR_ALERT | ERR_FATAL;
655 }
656 res = parse_time_err(arg, &time, TIME_UNIT_MS);
Willy Tarreau9faebe32019-06-07 19:00:37 +0200657 if (res == PARSE_TIME_OVER) {
658 memprintf(err, "timer overflow in argument '%s' to '%s' (maximum value is 2147483647 ms or ~24.8 days)",
659 args[*cur_arg+1], args[*cur_arg]);
660 return ERR_ALERT | ERR_FATAL;
661 }
662 else if (res == PARSE_TIME_UNDER) {
663 memprintf(err, "timer underflow in argument '%s' to '%s' (minimum non-null value is 1 ms)",
664 args[*cur_arg+1], args[*cur_arg]);
665 return ERR_ALERT | ERR_FATAL;
666 }
667 else if (res) {
Olivier Houchard0c18a6f2018-12-02 14:11:41 +0100668 memprintf(err, "unexpected character '%c' in argument to <%s>.\n",
669 *res, args[*cur_arg]);
670 return ERR_ALERT | ERR_FATAL;
671 }
Olivier Houchardb7b3faa2018-12-14 18:15:36 +0100672 newsrv->pool_purge_delay = time;
Olivier Houchard0c18a6f2018-12-02 14:11:41 +0100673
674 return 0;
675}
676
Willy Tarreau2f3f4d32020-07-01 07:43:51 +0200677static int srv_parse_pool_low_conn(char **args, int *cur_arg, struct proxy *curproxy, struct server *newsrv, char **err)
678{
679 char *arg;
680
681 arg = args[*cur_arg + 1];
682 if (!*arg) {
683 memprintf(err, "'%s' expects <value> as argument.\n", args[*cur_arg]);
684 return ERR_ALERT | ERR_FATAL;
685 }
686
687 newsrv->low_idle_conns = atoi(arg);
688 return 0;
689}
690
Olivier Houchard006e3102018-12-10 18:30:32 +0100691static int srv_parse_pool_max_conn(char **args, int *cur_arg, struct proxy *curproxy, struct server *newsrv, char **err)
692{
693 char *arg;
694
695 arg = args[*cur_arg + 1];
696 if (!*arg) {
697 memprintf(err, "'%s' expects <value> as argument.\n", args[*cur_arg]);
698 return ERR_ALERT | ERR_FATAL;
699 }
Willy Tarreaucb923d52019-01-23 10:39:27 +0100700
Olivier Houchard006e3102018-12-10 18:30:32 +0100701 newsrv->max_idle_conns = atoi(arg);
Willy Tarreaucb923d52019-01-23 10:39:27 +0100702 if ((int)newsrv->max_idle_conns < -1) {
703 memprintf(err, "'%s' must be >= -1", args[*cur_arg]);
704 return ERR_ALERT | ERR_FATAL;
705 }
Olivier Houchard006e3102018-12-10 18:30:32 +0100706
707 return 0;
708}
709
Willy Tarreaudff55432012-10-10 17:51:05 +0200710/* parse the "id" server keyword */
711static int srv_parse_id(char **args, int *cur_arg, struct proxy *curproxy, struct server *newsrv, char **err)
712{
713 struct eb32_node *node;
714
715 if (!*args[*cur_arg + 1]) {
716 memprintf(err, "'%s' : expects an integer argument", args[*cur_arg]);
717 return ERR_ALERT | ERR_FATAL;
718 }
719
720 newsrv->puid = atol(args[*cur_arg + 1]);
721 newsrv->conf.id.key = newsrv->puid;
722
723 if (newsrv->puid <= 0) {
724 memprintf(err, "'%s' : custom id has to be > 0", args[*cur_arg]);
725 return ERR_ALERT | ERR_FATAL;
726 }
727
728 node = eb32_lookup(&curproxy->conf.used_server_id, newsrv->puid);
729 if (node) {
730 struct server *target = container_of(node, struct server, conf.id);
731 memprintf(err, "'%s' : custom id %d already used at %s:%d ('server %s')",
732 args[*cur_arg], newsrv->puid, target->conf.file, target->conf.line,
733 target->id);
734 return ERR_ALERT | ERR_FATAL;
735 }
736
Baptiste Assmann7cc419a2015-07-07 22:02:20 +0200737 newsrv->flags |= SRV_F_FORCED_ID;
Willy Tarreaudff55432012-10-10 17:51:05 +0200738 return 0;
739}
740
Frédéric Lécaille22f41a22017-03-16 17:17:36 +0100741/* Parse the "namespace" server keyword */
742static int srv_parse_namespace(char **args, int *cur_arg,
743 struct proxy *curproxy, struct server *newsrv, char **err)
744{
Willy Tarreaue5733232019-05-22 19:24:06 +0200745#ifdef USE_NS
Frédéric Lécaille22f41a22017-03-16 17:17:36 +0100746 char *arg;
747
748 arg = args[*cur_arg + 1];
749 if (!*arg) {
750 memprintf(err, "'%s' : expects <name> as argument", args[*cur_arg]);
751 return ERR_ALERT | ERR_FATAL;
752 }
753
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100754 if (strcmp(arg, "*") == 0) {
Frédéric Lécaille22f41a22017-03-16 17:17:36 +0100755 /* Use the namespace associated with the connection (if present). */
756 newsrv->flags |= SRV_F_USE_NS_FROM_PP;
757 return 0;
758 }
759
760 /*
761 * As this parser may be called several times for the same 'default-server'
762 * object, or for a new 'server' instance deriving from a 'default-server'
763 * one with SRV_F_USE_NS_FROM_PP flag enabled, let's reset it.
764 */
765 newsrv->flags &= ~SRV_F_USE_NS_FROM_PP;
766
767 newsrv->netns = netns_store_lookup(arg, strlen(arg));
768 if (!newsrv->netns)
769 newsrv->netns = netns_store_insert(arg);
770
771 if (!newsrv->netns) {
772 memprintf(err, "Cannot open namespace '%s'", arg);
773 return ERR_ALERT | ERR_FATAL;
774 }
775
776 return 0;
777#else
778 memprintf(err, "'%s': '%s' option not implemented", args[0], args[*cur_arg]);
779 return ERR_ALERT | ERR_FATAL;
780#endif
781}
782
Frédéric Lécaillef5bf9032017-03-10 11:51:05 +0100783/* Parse the "no-backup" server keyword */
784static int srv_parse_no_backup(char **args, int *cur_arg,
785 struct proxy *curproxy, struct server *newsrv, char **err)
786{
787 newsrv->flags &= ~SRV_F_BACKUP;
788 return 0;
789}
790
Frédéric Lécaille25df8902017-03-10 14:04:31 +0100791
Frédéric Lécaille31045e42017-03-10 16:40:00 +0100792/* Disable server PROXY protocol flags. */
Willy Tarreau0e492e22019-04-15 21:25:03 +0200793static inline int srv_disable_pp_flags(struct server *srv, unsigned int flags)
Frédéric Lécaille31045e42017-03-10 16:40:00 +0100794{
795 srv->pp_opts &= ~flags;
796 return 0;
797}
798
799/* Parse the "no-send-proxy" server keyword */
800static int srv_parse_no_send_proxy(char **args, int *cur_arg,
801 struct proxy *curproxy, struct server *newsrv, char **err)
802{
803 return srv_disable_pp_flags(newsrv, SRV_PP_V1);
804}
805
806/* Parse the "no-send-proxy-v2" server keyword */
807static int srv_parse_no_send_proxy_v2(char **args, int *cur_arg,
808 struct proxy *curproxy, struct server *newsrv, char **err)
809{
810 return srv_disable_pp_flags(newsrv, SRV_PP_V2);
811}
812
Frédéric Lécaille1b9423d2019-07-04 14:19:06 +0200813/* Parse the "no-tfo" server keyword */
814static int srv_parse_no_tfo(char **args, int *cur_arg,
815 struct proxy *curproxy, struct server *newsrv, char **err)
816{
817 newsrv->flags &= ~SRV_F_FASTOPEN;
818 return 0;
819}
820
Frédéric Lécaillef9bc1d62017-03-10 15:50:49 +0100821/* Parse the "non-stick" server keyword */
822static int srv_parse_non_stick(char **args, int *cur_arg,
823 struct proxy *curproxy, struct server *newsrv, char **err)
824{
825 newsrv->flags |= SRV_F_NON_STICK;
826 return 0;
827}
828
Frédéric Lécaille31045e42017-03-10 16:40:00 +0100829/* Enable server PROXY protocol flags. */
Willy Tarreau0e492e22019-04-15 21:25:03 +0200830static inline int srv_enable_pp_flags(struct server *srv, unsigned int flags)
Frédéric Lécaille31045e42017-03-10 16:40:00 +0100831{
832 srv->pp_opts |= flags;
833 return 0;
834}
Christopher Faulet8ed0a3e2018-04-10 14:45:45 +0200835/* parse the "proto" server keyword */
836static int srv_parse_proto(char **args, int *cur_arg,
837 struct proxy *px, struct server *newsrv, char **err)
838{
839 struct ist proto;
840
841 if (!*args[*cur_arg + 1]) {
842 memprintf(err, "'%s' : missing value", args[*cur_arg]);
843 return ERR_ALERT | ERR_FATAL;
844 }
Tim Duesterhusdcf753a2021-03-04 17:31:47 +0100845 proto = ist(args[*cur_arg + 1]);
Christopher Faulet8ed0a3e2018-04-10 14:45:45 +0200846 newsrv->mux_proto = get_mux_proto(proto);
847 if (!newsrv->mux_proto) {
848 memprintf(err, "'%s' : unknown MUX protocol '%s'", args[*cur_arg], args[*cur_arg+1]);
849 return ERR_ALERT | ERR_FATAL;
850 }
Christopher Faulet8ed0a3e2018-04-10 14:45:45 +0200851 return 0;
852}
Frédéric Lécaille31045e42017-03-10 16:40:00 +0100853
Emmanuel Hocdetf643b802018-02-01 15:20:32 +0100854/* parse the "proxy-v2-options" */
855static int srv_parse_proxy_v2_options(char **args, int *cur_arg,
856 struct proxy *px, struct server *newsrv, char **err)
857{
858 char *p, *n;
859 for (p = args[*cur_arg+1]; p; p = n) {
860 n = strchr(p, ',');
861 if (n)
862 *n++ = '\0';
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100863 if (strcmp(p, "ssl") == 0) {
Emmanuel Hocdetf643b802018-02-01 15:20:32 +0100864 newsrv->pp_opts |= SRV_PP_V2_SSL;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100865 } else if (strcmp(p, "cert-cn") == 0) {
Emmanuel Hocdetf643b802018-02-01 15:20:32 +0100866 newsrv->pp_opts |= SRV_PP_V2_SSL;
867 newsrv->pp_opts |= SRV_PP_V2_SSL_CN;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100868 } else if (strcmp(p, "cert-key") == 0) {
Emmanuel Hocdetfa8d0f12018-02-01 15:53:52 +0100869 newsrv->pp_opts |= SRV_PP_V2_SSL;
870 newsrv->pp_opts |= SRV_PP_V2_SSL_KEY_ALG;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100871 } else if (strcmp(p, "cert-sig") == 0) {
Emmanuel Hocdetfa8d0f12018-02-01 15:53:52 +0100872 newsrv->pp_opts |= SRV_PP_V2_SSL;
873 newsrv->pp_opts |= SRV_PP_V2_SSL_SIG_ALG;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100874 } else if (strcmp(p, "ssl-cipher") == 0) {
Emmanuel Hocdetfa8d0f12018-02-01 15:53:52 +0100875 newsrv->pp_opts |= SRV_PP_V2_SSL;
876 newsrv->pp_opts |= SRV_PP_V2_SSL_CIPHER;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100877 } else if (strcmp(p, "authority") == 0) {
Emmanuel Hocdet253c3b72018-02-01 18:29:59 +0100878 newsrv->pp_opts |= SRV_PP_V2_AUTHORITY;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100879 } else if (strcmp(p, "crc32c") == 0) {
Emmanuel Hocdet4399c752018-02-05 15:26:43 +0100880 newsrv->pp_opts |= SRV_PP_V2_CRC32C;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100881 } else if (strcmp(p, "unique-id") == 0) {
Tim Duesterhuscf6e0c82020-03-13 12:34:24 +0100882 newsrv->pp_opts |= SRV_PP_V2_UNIQUE_ID;
Emmanuel Hocdetf643b802018-02-01 15:20:32 +0100883 } else
884 goto fail;
885 }
886 return 0;
887 fail:
888 if (err)
889 memprintf(err, "'%s' : proxy v2 option not implemented", p);
890 return ERR_ALERT | ERR_FATAL;
891}
892
Frédéric Lécaille547356e2017-03-15 08:55:39 +0100893/* Parse the "observe" server keyword */
894static int srv_parse_observe(char **args, int *cur_arg,
895 struct proxy *curproxy, struct server *newsrv, char **err)
896{
897 char *arg;
898
899 arg = args[*cur_arg + 1];
900 if (!*arg) {
901 memprintf(err, "'%s' expects <mode> as argument.\n", args[*cur_arg]);
902 return ERR_ALERT | ERR_FATAL;
903 }
904
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100905 if (strcmp(arg, "none") == 0) {
Frédéric Lécaille547356e2017-03-15 08:55:39 +0100906 newsrv->observe = HANA_OBS_NONE;
907 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100908 else if (strcmp(arg, "layer4") == 0) {
Frédéric Lécaille547356e2017-03-15 08:55:39 +0100909 newsrv->observe = HANA_OBS_LAYER4;
910 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100911 else if (strcmp(arg, "layer7") == 0) {
Frédéric Lécaille547356e2017-03-15 08:55:39 +0100912 if (curproxy->mode != PR_MODE_HTTP) {
913 memprintf(err, "'%s' can only be used in http proxies.\n", arg);
914 return ERR_ALERT;
915 }
916 newsrv->observe = HANA_OBS_LAYER7;
917 }
918 else {
919 memprintf(err, "'%s' expects one of 'none', 'layer4', 'layer7' "
920 "but got '%s'\n", args[*cur_arg], arg);
921 return ERR_ALERT | ERR_FATAL;
922 }
923
924 return 0;
925}
926
Amaury Denoyelle587b71e2021-03-10 16:36:02 +0100927/* Parse the "on-error" server keyword */
928static int srv_parse_on_error(char **args, int *cur_arg,
929 struct proxy *curproxy, struct server *newsrv, char **err)
930{
931 if (strcmp(args[*cur_arg + 1], "fastinter") == 0)
932 newsrv->onerror = HANA_ONERR_FASTINTER;
933 else if (strcmp(args[*cur_arg + 1], "fail-check") == 0)
934 newsrv->onerror = HANA_ONERR_FAILCHK;
935 else if (strcmp(args[*cur_arg + 1], "sudden-death") == 0)
936 newsrv->onerror = HANA_ONERR_SUDDTH;
937 else if (strcmp(args[*cur_arg + 1], "mark-down") == 0)
938 newsrv->onerror = HANA_ONERR_MARKDWN;
939 else {
940 memprintf(err, "'%s' expects one of 'fastinter', "
941 "'fail-check', 'sudden-death' or 'mark-down' but got '%s'",
942 args[*cur_arg], args[*cur_arg + 1]);
943 return ERR_ALERT | ERR_FATAL;
944 }
945
946 return 0;
947}
948
949/* Parse the "on-marked-down" server keyword */
950static int srv_parse_on_marked_down(char **args, int *cur_arg,
951 struct proxy *curproxy, struct server *newsrv, char **err)
952{
953 if (strcmp(args[*cur_arg + 1], "shutdown-sessions") == 0)
954 newsrv->onmarkeddown = HANA_ONMARKEDDOWN_SHUTDOWNSESSIONS;
955 else {
956 memprintf(err, "'%s' expects 'shutdown-sessions' but got '%s'",
957 args[*cur_arg], args[*cur_arg + 1]);
958 return ERR_ALERT | ERR_FATAL;
959 }
960
961 return 0;
962}
963
964/* Parse the "on-marked-up" server keyword */
965static int srv_parse_on_marked_up(char **args, int *cur_arg,
966 struct proxy *curproxy, struct server *newsrv, char **err)
967{
968 if (strcmp(args[*cur_arg + 1], "shutdown-backup-sessions") == 0)
969 newsrv->onmarkedup = HANA_ONMARKEDUP_SHUTDOWNBACKUPSESSIONS;
970 else {
971 memprintf(err, "'%s' expects 'shutdown-backup-sessions' but got '%s'",
972 args[*cur_arg], args[*cur_arg + 1]);
973 return ERR_ALERT | ERR_FATAL;
974 }
975
976 return 0;
977}
978
Frédéric Lécaille16186232017-03-14 16:42:49 +0100979/* Parse the "redir" server keyword */
980static int srv_parse_redir(char **args, int *cur_arg,
981 struct proxy *curproxy, struct server *newsrv, char **err)
982{
983 char *arg;
984
985 arg = args[*cur_arg + 1];
986 if (!*arg) {
987 memprintf(err, "'%s' expects <prefix> as argument.\n", args[*cur_arg]);
988 return ERR_ALERT | ERR_FATAL;
989 }
990
991 free(newsrv->rdr_pfx);
992 newsrv->rdr_pfx = strdup(arg);
993 newsrv->rdr_len = strlen(arg);
994
995 return 0;
996}
997
Amaury Denoyelle587b71e2021-03-10 16:36:02 +0100998/* Parse the "resolvers" server keyword */
999static int srv_parse_resolvers(char **args, int *cur_arg,
1000 struct proxy *curproxy, struct server *newsrv, char **err)
1001{
1002 free(newsrv->resolvers_id);
1003 newsrv->resolvers_id = strdup(args[*cur_arg + 1]);
1004 return 0;
1005}
1006
1007/* Parse the "resolve-net" server keyword */
1008static int srv_parse_resolve_net(char **args, int *cur_arg,
1009 struct proxy *curproxy, struct server *newsrv, char **err)
1010{
1011 char *p, *e;
1012 unsigned char mask;
1013 struct resolv_options *opt;
1014
1015 if (!args[*cur_arg + 1] || args[*cur_arg + 1][0] == '\0') {
1016 memprintf(err, "'%s' expects a list of networks.",
1017 args[*cur_arg]);
1018 return ERR_ALERT | ERR_FATAL;
1019 }
1020
1021 opt = &newsrv->resolv_opts;
1022
1023 /* Split arguments by comma, and convert it from ipv4 or ipv6
1024 * string network in in_addr or in6_addr.
1025 */
1026 p = args[*cur_arg + 1];
1027 e = p;
1028 while (*p != '\0') {
1029 /* If no room available, return error. */
1030 if (opt->pref_net_nb >= SRV_MAX_PREF_NET) {
1031 memprintf(err, "'%s' exceed %d networks.",
1032 args[*cur_arg], SRV_MAX_PREF_NET);
1033 return ERR_ALERT | ERR_FATAL;
1034 }
1035 /* look for end or comma. */
1036 while (*e != ',' && *e != '\0')
1037 e++;
1038 if (*e == ',') {
1039 *e = '\0';
1040 e++;
1041 }
1042 if (str2net(p, 0, &opt->pref_net[opt->pref_net_nb].addr.in4,
1043 &opt->pref_net[opt->pref_net_nb].mask.in4)) {
1044 /* Try to convert input string from ipv4 or ipv6 network. */
1045 opt->pref_net[opt->pref_net_nb].family = AF_INET;
1046 } else if (str62net(p, &opt->pref_net[opt->pref_net_nb].addr.in6,
1047 &mask)) {
1048 /* Try to convert input string from ipv6 network. */
1049 len2mask6(mask, &opt->pref_net[opt->pref_net_nb].mask.in6);
1050 opt->pref_net[opt->pref_net_nb].family = AF_INET6;
1051 } else {
1052 /* All network conversions fail, return error. */
1053 memprintf(err, "'%s' invalid network '%s'.",
1054 args[*cur_arg], p);
1055 return ERR_ALERT | ERR_FATAL;
1056 }
1057 opt->pref_net_nb++;
1058 p = e;
1059 }
1060
1061 return 0;
1062}
1063
1064/* Parse the "resolve-opts" server keyword */
1065static int srv_parse_resolve_opts(char **args, int *cur_arg,
1066 struct proxy *curproxy, struct server *newsrv, char **err)
1067{
1068 char *p, *end;
1069
1070 for (p = args[*cur_arg + 1]; *p; p = end) {
1071 /* cut on next comma */
1072 for (end = p; *end && *end != ','; end++);
1073 if (*end)
1074 *(end++) = 0;
1075
1076 if (strcmp(p, "allow-dup-ip") == 0) {
1077 newsrv->resolv_opts.accept_duplicate_ip = 1;
1078 }
1079 else if (strcmp(p, "ignore-weight") == 0) {
1080 newsrv->resolv_opts.ignore_weight = 1;
1081 }
1082 else if (strcmp(p, "prevent-dup-ip") == 0) {
1083 newsrv->resolv_opts.accept_duplicate_ip = 0;
1084 }
1085 else {
1086 memprintf(err, "'%s' : unknown resolve-opts option '%s', supported methods are 'allow-dup-ip', 'ignore-weight', and 'prevent-dup-ip'.",
1087 args[*cur_arg], p);
1088 return ERR_ALERT | ERR_FATAL;
1089 }
1090 }
1091
1092 return 0;
1093}
1094
1095/* Parse the "resolve-prefer" server keyword */
1096static int srv_parse_resolve_prefer(char **args, int *cur_arg,
1097 struct proxy *curproxy, struct server *newsrv, char **err)
1098{
1099 if (strcmp(args[*cur_arg + 1], "ipv4") == 0)
1100 newsrv->resolv_opts.family_prio = AF_INET;
1101 else if (strcmp(args[*cur_arg + 1], "ipv6") == 0)
1102 newsrv->resolv_opts.family_prio = AF_INET6;
1103 else {
1104 memprintf(err, "'%s' expects either ipv4 or ipv6 as argument.",
1105 args[*cur_arg]);
1106 return ERR_ALERT | ERR_FATAL;
1107 }
1108
1109 return 0;
1110}
1111
Frédéric Lécaille31045e42017-03-10 16:40:00 +01001112/* Parse the "send-proxy" server keyword */
1113static int srv_parse_send_proxy(char **args, int *cur_arg,
1114 struct proxy *curproxy, struct server *newsrv, char **err)
1115{
1116 return srv_enable_pp_flags(newsrv, SRV_PP_V1);
1117}
1118
1119/* Parse the "send-proxy-v2" server keyword */
1120static int srv_parse_send_proxy_v2(char **args, int *cur_arg,
1121 struct proxy *curproxy, struct server *newsrv, char **err)
1122{
1123 return srv_enable_pp_flags(newsrv, SRV_PP_V2);
1124}
1125
Amaury Denoyelle587b71e2021-03-10 16:36:02 +01001126/* Parse the "slowstart" server keyword */
1127static int srv_parse_slowstart(char **args, int *cur_arg,
1128 struct proxy *curproxy, struct server *newsrv, char **err)
1129{
1130 /* slowstart is stored in seconds */
1131 unsigned int val;
1132 const char *time_err = parse_time_err(args[*cur_arg + 1], &val, TIME_UNIT_MS);
1133
1134 if (time_err == PARSE_TIME_OVER) {
1135 memprintf(err, "overflow in argument <%s> to <%s> of server %s, maximum value is 2147483647 ms (~24.8 days).",
1136 args[*cur_arg+1], args[*cur_arg], newsrv->id);
1137 return ERR_ALERT | ERR_FATAL;
1138 }
1139 else if (time_err == PARSE_TIME_UNDER) {
1140 memprintf(err, "underflow in argument <%s> to <%s> of server %s, minimum non-null value is 1 ms.",
1141 args[*cur_arg+1], args[*cur_arg], newsrv->id);
1142 return ERR_ALERT | ERR_FATAL;
1143 }
1144 else if (time_err) {
1145 memprintf(err, "unexpected character '%c' in 'slowstart' argument of server %s.",
1146 *time_err, newsrv->id);
1147 return ERR_ALERT | ERR_FATAL;
1148 }
1149 newsrv->slowstart = (val + 999) / 1000;
1150
1151 return 0;
1152}
Frédéric Lécailledba97072017-03-17 15:33:50 +01001153
1154/* Parse the "source" server keyword */
1155static int srv_parse_source(char **args, int *cur_arg,
1156 struct proxy *curproxy, struct server *newsrv, char **err)
1157{
1158 char *errmsg;
1159 int port_low, port_high;
1160 struct sockaddr_storage *sk;
Frédéric Lécailledba97072017-03-17 15:33:50 +01001161
1162 errmsg = NULL;
1163
1164 if (!*args[*cur_arg + 1]) {
1165 memprintf(err, "'%s' expects <addr>[:<port>[-<port>]], and optionally '%s' <addr>, "
1166 "and '%s' <name> as argument.\n", args[*cur_arg], "usesrc", "interface");
1167 goto err;
1168 }
1169
1170 /* 'sk' is statically allocated (no need to be freed). */
Willy Tarreau65ec4e32020-09-16 19:17:08 +02001171 sk = str2sa_range(args[*cur_arg + 1], NULL, &port_low, &port_high, NULL, NULL,
1172 &errmsg, NULL, NULL,
1173 PA_O_RESOLVE | PA_O_PORT_OK | PA_O_PORT_RANGE | PA_O_STREAM | PA_O_CONNECT);
Frédéric Lécailledba97072017-03-17 15:33:50 +01001174 if (!sk) {
1175 memprintf(err, "'%s %s' : %s\n", args[*cur_arg], args[*cur_arg + 1], errmsg);
1176 goto err;
1177 }
1178
Frédéric Lécailledba97072017-03-17 15:33:50 +01001179 newsrv->conn_src.opts |= CO_SRC_BIND;
1180 newsrv->conn_src.source_addr = *sk;
1181
1182 if (port_low != port_high) {
1183 int i;
1184
Frédéric Lécailledba97072017-03-17 15:33:50 +01001185 newsrv->conn_src.sport_range = port_range_alloc_range(port_high - port_low + 1);
Remi Tricot-Le Bretondc187912021-05-12 09:44:06 +02001186 if (!newsrv->conn_src.sport_range) {
1187 ha_alert("Server '%s': Out of memory (sport_range)\n", args[0]);
1188 goto err;
1189 }
Frédéric Lécailledba97072017-03-17 15:33:50 +01001190 for (i = 0; i < newsrv->conn_src.sport_range->size; i++)
1191 newsrv->conn_src.sport_range->ports[i] = port_low + i;
1192 }
1193
1194 *cur_arg += 2;
1195 while (*(args[*cur_arg])) {
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001196 if (strcmp(args[*cur_arg], "usesrc") == 0) { /* address to use outside */
Frédéric Lécailledba97072017-03-17 15:33:50 +01001197#if defined(CONFIG_HAP_TRANSPARENT)
1198 if (!*args[*cur_arg + 1]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001199 ha_alert("'usesrc' expects <addr>[:<port>], 'client', 'clientip', "
1200 "or 'hdr_ip(name,#)' as argument.\n");
Frédéric Lécailledba97072017-03-17 15:33:50 +01001201 goto err;
1202 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001203 if (strcmp(args[*cur_arg + 1], "client") == 0) {
Frédéric Lécailledba97072017-03-17 15:33:50 +01001204 newsrv->conn_src.opts &= ~CO_SRC_TPROXY_MASK;
1205 newsrv->conn_src.opts |= CO_SRC_TPROXY_CLI;
1206 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001207 else if (strcmp(args[*cur_arg + 1], "clientip") == 0) {
Frédéric Lécailledba97072017-03-17 15:33:50 +01001208 newsrv->conn_src.opts &= ~CO_SRC_TPROXY_MASK;
1209 newsrv->conn_src.opts |= CO_SRC_TPROXY_CIP;
1210 }
1211 else if (!strncmp(args[*cur_arg + 1], "hdr_ip(", 7)) {
1212 char *name, *end;
1213
1214 name = args[*cur_arg + 1] + 7;
Willy Tarreau90807112020-02-25 08:16:33 +01001215 while (isspace((unsigned char)*name))
Frédéric Lécailledba97072017-03-17 15:33:50 +01001216 name++;
1217
1218 end = name;
Willy Tarreau90807112020-02-25 08:16:33 +01001219 while (*end && !isspace((unsigned char)*end) && *end != ',' && *end != ')')
Frédéric Lécailledba97072017-03-17 15:33:50 +01001220 end++;
1221
1222 newsrv->conn_src.opts &= ~CO_SRC_TPROXY_MASK;
1223 newsrv->conn_src.opts |= CO_SRC_TPROXY_DYN;
1224 free(newsrv->conn_src.bind_hdr_name);
1225 newsrv->conn_src.bind_hdr_name = calloc(1, end - name + 1);
Remi Tricot-Le Bretondc187912021-05-12 09:44:06 +02001226 if (!newsrv->conn_src.bind_hdr_name) {
1227 ha_alert("Server '%s': Out of memory (bind_hdr_name)\n", args[0]);
1228 goto err;
1229 }
Frédéric Lécailledba97072017-03-17 15:33:50 +01001230 newsrv->conn_src.bind_hdr_len = end - name;
1231 memcpy(newsrv->conn_src.bind_hdr_name, name, end - name);
1232 newsrv->conn_src.bind_hdr_name[end - name] = '\0';
1233 newsrv->conn_src.bind_hdr_occ = -1;
1234
1235 /* now look for an occurrence number */
Willy Tarreau90807112020-02-25 08:16:33 +01001236 while (isspace((unsigned char)*end))
Frédéric Lécailledba97072017-03-17 15:33:50 +01001237 end++;
1238 if (*end == ',') {
1239 end++;
1240 name = end;
1241 if (*end == '-')
1242 end++;
Willy Tarreau90807112020-02-25 08:16:33 +01001243 while (isdigit((unsigned char)*end))
Frédéric Lécailledba97072017-03-17 15:33:50 +01001244 end++;
1245 newsrv->conn_src.bind_hdr_occ = strl2ic(name, end - name);
1246 }
1247
1248 if (newsrv->conn_src.bind_hdr_occ < -MAX_HDR_HISTORY) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001249 ha_alert("usesrc hdr_ip(name,num) does not support negative"
1250 " occurrences values smaller than %d.\n", MAX_HDR_HISTORY);
Frédéric Lécailledba97072017-03-17 15:33:50 +01001251 goto err;
1252 }
1253 }
1254 else {
1255 struct sockaddr_storage *sk;
1256 int port1, port2;
1257
1258 /* 'sk' is statically allocated (no need to be freed). */
Willy Tarreau65ec4e32020-09-16 19:17:08 +02001259 sk = str2sa_range(args[*cur_arg + 1], NULL, &port1, &port2, NULL, NULL,
1260 &errmsg, NULL, NULL,
1261 PA_O_RESOLVE | PA_O_PORT_OK | PA_O_STREAM | PA_O_CONNECT);
Frédéric Lécailledba97072017-03-17 15:33:50 +01001262 if (!sk) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001263 ha_alert("'%s %s' : %s\n", args[*cur_arg], args[*cur_arg + 1], errmsg);
Frédéric Lécailledba97072017-03-17 15:33:50 +01001264 goto err;
1265 }
1266
Frédéric Lécailledba97072017-03-17 15:33:50 +01001267 newsrv->conn_src.tproxy_addr = *sk;
1268 newsrv->conn_src.opts |= CO_SRC_TPROXY_ADDR;
1269 }
1270 global.last_checks |= LSTCHK_NETADM;
1271 *cur_arg += 2;
1272 continue;
1273#else /* no TPROXY support */
Christopher Faulet767a84b2017-11-24 16:50:31 +01001274 ha_alert("'usesrc' not allowed here because support for TPROXY was not compiled in.\n");
Frédéric Lécailledba97072017-03-17 15:33:50 +01001275 goto err;
1276#endif /* defined(CONFIG_HAP_TRANSPARENT) */
1277 } /* "usesrc" */
1278
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001279 if (strcmp(args[*cur_arg], "interface") == 0) { /* specifically bind to this interface */
Frédéric Lécailledba97072017-03-17 15:33:50 +01001280#ifdef SO_BINDTODEVICE
1281 if (!*args[*cur_arg + 1]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001282 ha_alert("'%s' : missing interface name.\n", args[0]);
Frédéric Lécailledba97072017-03-17 15:33:50 +01001283 goto err;
1284 }
1285 free(newsrv->conn_src.iface_name);
1286 newsrv->conn_src.iface_name = strdup(args[*cur_arg + 1]);
1287 newsrv->conn_src.iface_len = strlen(newsrv->conn_src.iface_name);
1288 global.last_checks |= LSTCHK_NETADM;
1289#else
Christopher Faulet767a84b2017-11-24 16:50:31 +01001290 ha_alert("'%s' : '%s' option not implemented.\n", args[0], args[*cur_arg]);
Frédéric Lécailledba97072017-03-17 15:33:50 +01001291 goto err;
1292#endif
1293 *cur_arg += 2;
1294 continue;
1295 }
1296 /* this keyword in not an option of "source" */
1297 break;
1298 } /* while */
1299
1300 return 0;
1301
1302 err:
1303 free(errmsg);
1304 return ERR_ALERT | ERR_FATAL;
1305}
1306
Frédéric Lécaillef9bc1d62017-03-10 15:50:49 +01001307/* Parse the "stick" server keyword */
1308static int srv_parse_stick(char **args, int *cur_arg,
1309 struct proxy *curproxy, struct server *newsrv, char **err)
1310{
1311 newsrv->flags &= ~SRV_F_NON_STICK;
1312 return 0;
1313}
1314
Frédéric Lécaille67e0e612017-03-14 15:21:31 +01001315/* Parse the "track" server keyword */
1316static int srv_parse_track(char **args, int *cur_arg,
1317 struct proxy *curproxy, struct server *newsrv, char **err)
1318{
1319 char *arg;
1320
1321 arg = args[*cur_arg + 1];
1322 if (!*arg) {
1323 memprintf(err, "'track' expects [<proxy>/]<server> as argument.\n");
1324 return ERR_ALERT | ERR_FATAL;
1325 }
1326
1327 free(newsrv->trackit);
1328 newsrv->trackit = strdup(arg);
1329
1330 return 0;
Alexander Liu2a54bb72019-05-22 19:44:48 +08001331}
1332
1333/* Parse the "socks4" server keyword */
1334static int srv_parse_socks4(char **args, int *cur_arg,
1335 struct proxy *curproxy, struct server *newsrv, char **err)
1336{
1337 char *errmsg;
1338 int port_low, port_high;
1339 struct sockaddr_storage *sk;
Alexander Liu2a54bb72019-05-22 19:44:48 +08001340
1341 errmsg = NULL;
1342
1343 if (!*args[*cur_arg + 1]) {
1344 memprintf(err, "'%s' expects <addr>:<port> as argument.\n", args[*cur_arg]);
1345 goto err;
1346 }
1347
1348 /* 'sk' is statically allocated (no need to be freed). */
Willy Tarreau65ec4e32020-09-16 19:17:08 +02001349 sk = str2sa_range(args[*cur_arg + 1], NULL, &port_low, &port_high, NULL, NULL,
1350 &errmsg, NULL, NULL,
1351 PA_O_RESOLVE | PA_O_PORT_OK | PA_O_PORT_MAND | PA_O_STREAM | PA_O_CONNECT);
Alexander Liu2a54bb72019-05-22 19:44:48 +08001352 if (!sk) {
1353 memprintf(err, "'%s %s' : %s\n", args[*cur_arg], args[*cur_arg + 1], errmsg);
1354 goto err;
1355 }
1356
Alexander Liu2a54bb72019-05-22 19:44:48 +08001357 newsrv->flags |= SRV_F_SOCKS4_PROXY;
1358 newsrv->socks4_addr = *sk;
1359
Alexander Liu2a54bb72019-05-22 19:44:48 +08001360 return 0;
1361
1362 err:
1363 free(errmsg);
1364 return ERR_ALERT | ERR_FATAL;
Frédéric Lécaille67e0e612017-03-14 15:21:31 +01001365}
1366
Frédéric Lécailledba97072017-03-17 15:33:50 +01001367
Willy Tarreau034c88c2017-01-23 23:36:45 +01001368/* parse the "tfo" server keyword */
1369static int srv_parse_tfo(char **args, int *cur_arg, struct proxy *px, struct server *newsrv, char **err)
1370{
1371 newsrv->flags |= SRV_F_FASTOPEN;
1372 return 0;
1373}
1374
Amaury Denoyelle587b71e2021-03-10 16:36:02 +01001375/* parse the "usesrc" server keyword */
1376static int srv_parse_usesrc(char **args, int *cur_arg, struct proxy *px, struct server *newsrv, char **err)
1377{
1378 memprintf(err, "'%s' only allowed after a '%s' statement.",
1379 "usesrc", "source");
1380 return ERR_ALERT | ERR_FATAL;
1381}
1382
1383/* parse the "weight" server keyword */
1384static int srv_parse_weight(char **args, int *cur_arg, struct proxy *px, struct server *newsrv, char **err)
1385{
1386 int w;
1387
1388 w = atol(args[*cur_arg + 1]);
1389 if (w < 0 || w > SRV_UWGHT_MAX) {
1390 memprintf(err, "weight of server %s is not within 0 and %d (%d).",
1391 newsrv->id, SRV_UWGHT_MAX, w);
1392 return ERR_ALERT | ERR_FATAL;
1393 }
1394 newsrv->uweight = newsrv->iweight = w;
1395
1396 return 0;
1397}
1398
Willy Tarreau4aac7db2014-05-16 11:48:10 +02001399/* Shutdown all connections of a server. The caller must pass a termination
Willy Tarreaue7dff022015-04-03 01:14:29 +02001400 * code in <why>, which must be one of SF_ERR_* indicating the reason for the
Willy Tarreau4aac7db2014-05-16 11:48:10 +02001401 * shutdown.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001402 *
1403 * Must be called with the server lock held.
Willy Tarreau4aac7db2014-05-16 11:48:10 +02001404 */
Willy Tarreau87b09662015-04-03 00:22:06 +02001405void srv_shutdown_streams(struct server *srv, int why)
Willy Tarreau4aac7db2014-05-16 11:48:10 +02001406{
Willy Tarreau751153e2021-02-17 13:33:24 +01001407 struct stream *stream;
1408 struct mt_list *elt1, elt2;
Willy Tarreaud4e78d82021-03-04 10:47:54 +01001409 int thr;
Willy Tarreau4aac7db2014-05-16 11:48:10 +02001410
Willy Tarreaud4e78d82021-03-04 10:47:54 +01001411 for (thr = 0; thr < global.nbthread; thr++)
1412 mt_list_for_each_entry_safe(stream, &srv->per_thr[thr].streams, by_srv, elt1, elt2)
1413 if (stream->srv_conn == srv)
1414 stream_shutdown(stream, why);
Willy Tarreau4aac7db2014-05-16 11:48:10 +02001415}
1416
1417/* Shutdown all connections of all backup servers of a proxy. The caller must
Willy Tarreaue7dff022015-04-03 01:14:29 +02001418 * pass a termination code in <why>, which must be one of SF_ERR_* indicating
Willy Tarreau4aac7db2014-05-16 11:48:10 +02001419 * the reason for the shutdown.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001420 *
1421 * Must be called with the server lock held.
Willy Tarreau4aac7db2014-05-16 11:48:10 +02001422 */
Willy Tarreau87b09662015-04-03 00:22:06 +02001423void srv_shutdown_backup_streams(struct proxy *px, int why)
Willy Tarreau4aac7db2014-05-16 11:48:10 +02001424{
1425 struct server *srv;
1426
1427 for (srv = px->srv; srv != NULL; srv = srv->next)
1428 if (srv->flags & SRV_F_BACKUP)
Willy Tarreau87b09662015-04-03 00:22:06 +02001429 srv_shutdown_streams(srv, why);
Willy Tarreau4aac7db2014-05-16 11:48:10 +02001430}
1431
Willy Tarreaubda92272014-05-20 21:55:30 +02001432/* Appends some information to a message string related to a server going UP or
1433 * DOWN. If both <forced> and <reason> are null and the server tracks another
1434 * one, a "via" information will be provided to know where the status came from.
Emeric Brun5a133512017-10-19 14:42:30 +02001435 * If <check> is non-null, an entire string describing the check result will be
1436 * appended after a comma and a space (eg: to report some information from the
1437 * check that changed the state). In the other case, the string will be built
1438 * using the check results stored into the struct server if present.
1439 * If <xferred> is non-negative, some information about requeued sessions are
Willy Tarreaubda92272014-05-20 21:55:30 +02001440 * provided.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001441 *
1442 * Must be called with the server lock held.
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001443 */
Willy Tarreau83061a82018-07-13 11:56:34 +02001444void srv_append_status(struct buffer *msg, struct server *s,
1445 struct check *check, int xferred, int forced)
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001446{
Emeric Brun5a133512017-10-19 14:42:30 +02001447 short status = s->op_st_chg.status;
1448 short code = s->op_st_chg.code;
1449 long duration = s->op_st_chg.duration;
1450 char *desc = s->op_st_chg.reason;
1451
1452 if (check) {
1453 status = check->status;
1454 code = check->code;
1455 duration = check->duration;
1456 desc = check->desc;
1457 }
1458
1459 if (status != -1) {
1460 chunk_appendf(msg, ", reason: %s", get_check_status_description(status));
1461
1462 if (status >= HCHK_STATUS_L57DATA)
1463 chunk_appendf(msg, ", code: %d", code);
1464
1465 if (desc && *desc) {
Willy Tarreau83061a82018-07-13 11:56:34 +02001466 struct buffer src;
Emeric Brun5a133512017-10-19 14:42:30 +02001467
1468 chunk_appendf(msg, ", info: \"");
1469
1470 chunk_initlen(&src, desc, 0, strlen(desc));
1471 chunk_asciiencode(msg, &src, '"');
1472
1473 chunk_appendf(msg, "\"");
1474 }
1475
1476 if (duration >= 0)
1477 chunk_appendf(msg, ", check duration: %ldms", duration);
1478 }
1479 else if (desc && *desc) {
1480 chunk_appendf(msg, ", %s", desc);
1481 }
1482 else if (!forced && s->track) {
Willy Tarreaubda92272014-05-20 21:55:30 +02001483 chunk_appendf(msg, " via %s/%s", s->track->proxy->id, s->track->id);
Emeric Brun5a133512017-10-19 14:42:30 +02001484 }
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001485
1486 if (xferred >= 0) {
Emeric Brun52a91d32017-08-31 14:41:55 +02001487 if (s->next_state == SRV_ST_STOPPED)
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001488 chunk_appendf(msg, ". %d active and %d backup servers left.%s"
1489 " %d sessions active, %d requeued, %d remaining in queue",
1490 s->proxy->srv_act, s->proxy->srv_bck,
1491 (s->proxy->srv_bck && !s->proxy->srv_act) ? " Running on backup." : "",
1492 s->cur_sess, xferred, s->nbpend);
1493 else
1494 chunk_appendf(msg, ". %d active and %d backup servers online.%s"
1495 " %d sessions requeued, %d total in queue",
1496 s->proxy->srv_act, s->proxy->srv_bck,
1497 (s->proxy->srv_bck && !s->proxy->srv_act) ? " Running on backup." : "",
1498 xferred, s->nbpend);
1499 }
1500}
1501
Emeric Brun5a133512017-10-19 14:42:30 +02001502/* Marks server <s> down, regardless of its checks' statuses. The server is
1503 * registered in a list to postpone the counting of the remaining servers on
1504 * the proxy and transfers queued streams whenever possible to other servers at
1505 * a sync point. Maintenance servers are ignored. It stores the <reason> if
1506 * non-null as the reason for going down or the available data from the check
1507 * struct to recompute this reason later.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001508 *
1509 * Must be called with the server lock held.
Willy Tarreaue7d1ef12014-05-20 22:25:12 +02001510 */
Emeric Brun5a133512017-10-19 14:42:30 +02001511void srv_set_stopped(struct server *s, const char *reason, struct check *check)
Willy Tarreaue7d1ef12014-05-20 22:25:12 +02001512{
1513 struct server *srv;
Willy Tarreaue7d1ef12014-05-20 22:25:12 +02001514
Emeric Brun64cc49c2017-10-03 14:46:45 +02001515 if ((s->cur_admin & SRV_ADMF_MAINT) || s->next_state == SRV_ST_STOPPED)
Willy Tarreaue7d1ef12014-05-20 22:25:12 +02001516 return;
1517
Emeric Brun52a91d32017-08-31 14:41:55 +02001518 s->next_state = SRV_ST_STOPPED;
Emeric Brun5a133512017-10-19 14:42:30 +02001519 *s->op_st_chg.reason = 0;
1520 s->op_st_chg.status = -1;
1521 if (reason) {
1522 strlcpy2(s->op_st_chg.reason, reason, sizeof(s->op_st_chg.reason));
1523 }
1524 else if (check) {
Willy Tarreau358847f2017-11-20 21:33:21 +01001525 strlcpy2(s->op_st_chg.reason, check->desc, sizeof(s->op_st_chg.reason));
Emeric Brun5a133512017-10-19 14:42:30 +02001526 s->op_st_chg.code = check->code;
1527 s->op_st_chg.status = check->status;
1528 s->op_st_chg.duration = check->duration;
1529 }
Willy Tarreaue7d1ef12014-05-20 22:25:12 +02001530
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001531 /* propagate changes */
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001532 srv_update_status(s);
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001533
Emeric Brun9f0b4582017-10-23 14:39:51 +02001534 for (srv = s->trackers; srv; srv = srv->tracknext) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001535 HA_SPIN_LOCK(SERVER_LOCK, &srv->lock);
Emeric Brun5a133512017-10-19 14:42:30 +02001536 srv_set_stopped(srv, NULL, NULL);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001537 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
Emeric Brun9f0b4582017-10-23 14:39:51 +02001538 }
Willy Tarreaue7d1ef12014-05-20 22:25:12 +02001539}
1540
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001541/* Marks server <s> up regardless of its checks' statuses and provided it isn't
Emeric Brun5a133512017-10-19 14:42:30 +02001542 * in maintenance. The server is registered in a list to postpone the counting
1543 * of the remaining servers on the proxy and tries to grab requests from the
1544 * proxy at a sync point. Maintenance servers are ignored. It stores the
1545 * <reason> if non-null as the reason for going down or the available data
1546 * from the check struct to recompute this reason later.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001547 *
1548 * Must be called with the server lock held.
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001549 */
Emeric Brun5a133512017-10-19 14:42:30 +02001550void srv_set_running(struct server *s, const char *reason, struct check *check)
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001551{
1552 struct server *srv;
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001553
Emeric Brun64cc49c2017-10-03 14:46:45 +02001554 if (s->cur_admin & SRV_ADMF_MAINT)
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001555 return;
1556
Emeric Brun52a91d32017-08-31 14:41:55 +02001557 if (s->next_state == SRV_ST_STARTING || s->next_state == SRV_ST_RUNNING)
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001558 return;
1559
Emeric Brun52a91d32017-08-31 14:41:55 +02001560 s->next_state = SRV_ST_STARTING;
Emeric Brun5a133512017-10-19 14:42:30 +02001561 *s->op_st_chg.reason = 0;
1562 s->op_st_chg.status = -1;
1563 if (reason) {
1564 strlcpy2(s->op_st_chg.reason, reason, sizeof(s->op_st_chg.reason));
1565 }
1566 else if (check) {
Willy Tarreau358847f2017-11-20 21:33:21 +01001567 strlcpy2(s->op_st_chg.reason, check->desc, sizeof(s->op_st_chg.reason));
Emeric Brun5a133512017-10-19 14:42:30 +02001568 s->op_st_chg.code = check->code;
1569 s->op_st_chg.status = check->status;
1570 s->op_st_chg.duration = check->duration;
1571 }
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001572
Emeric Brun64cc49c2017-10-03 14:46:45 +02001573 if (s->slowstart <= 0)
1574 s->next_state = SRV_ST_RUNNING;
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001575
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001576 /* propagate changes */
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001577 srv_update_status(s);
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001578
Emeric Brun9f0b4582017-10-23 14:39:51 +02001579 for (srv = s->trackers; srv; srv = srv->tracknext) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001580 HA_SPIN_LOCK(SERVER_LOCK, &srv->lock);
Emeric Brun5a133512017-10-19 14:42:30 +02001581 srv_set_running(srv, NULL, NULL);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001582 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
Emeric Brun9f0b4582017-10-23 14:39:51 +02001583 }
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001584}
1585
Willy Tarreau8eb77842014-05-21 13:54:57 +02001586/* Marks server <s> stopping regardless of its checks' statuses and provided it
Emeric Brun5a133512017-10-19 14:42:30 +02001587 * isn't in maintenance. The server is registered in a list to postpone the
1588 * counting of the remaining servers on the proxy and tries to grab requests
1589 * from the proxy. Maintenance servers are ignored. It stores the
1590 * <reason> if non-null as the reason for going down or the available data
1591 * from the check struct to recompute this reason later.
Willy Tarreau8eb77842014-05-21 13:54:57 +02001592 * up. Note that it makes use of the trash to build the log strings, so <reason>
1593 * must not be placed there.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001594 *
1595 * Must be called with the server lock held.
Willy Tarreau8eb77842014-05-21 13:54:57 +02001596 */
Emeric Brun5a133512017-10-19 14:42:30 +02001597void srv_set_stopping(struct server *s, const char *reason, struct check *check)
Willy Tarreau8eb77842014-05-21 13:54:57 +02001598{
1599 struct server *srv;
Willy Tarreau8eb77842014-05-21 13:54:57 +02001600
Emeric Brun64cc49c2017-10-03 14:46:45 +02001601 if (s->cur_admin & SRV_ADMF_MAINT)
Willy Tarreau8eb77842014-05-21 13:54:57 +02001602 return;
1603
Emeric Brun52a91d32017-08-31 14:41:55 +02001604 if (s->next_state == SRV_ST_STOPPING)
Willy Tarreau8eb77842014-05-21 13:54:57 +02001605 return;
1606
Emeric Brun52a91d32017-08-31 14:41:55 +02001607 s->next_state = SRV_ST_STOPPING;
Emeric Brun5a133512017-10-19 14:42:30 +02001608 *s->op_st_chg.reason = 0;
1609 s->op_st_chg.status = -1;
1610 if (reason) {
1611 strlcpy2(s->op_st_chg.reason, reason, sizeof(s->op_st_chg.reason));
1612 }
1613 else if (check) {
Willy Tarreau358847f2017-11-20 21:33:21 +01001614 strlcpy2(s->op_st_chg.reason, check->desc, sizeof(s->op_st_chg.reason));
Emeric Brun5a133512017-10-19 14:42:30 +02001615 s->op_st_chg.code = check->code;
1616 s->op_st_chg.status = check->status;
1617 s->op_st_chg.duration = check->duration;
1618 }
Willy Tarreau8eb77842014-05-21 13:54:57 +02001619
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001620 /* propagate changes */
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001621 srv_update_status(s);
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001622
Emeric Brun9f0b4582017-10-23 14:39:51 +02001623 for (srv = s->trackers; srv; srv = srv->tracknext) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001624 HA_SPIN_LOCK(SERVER_LOCK, &srv->lock);
Emeric Brun5a133512017-10-19 14:42:30 +02001625 srv_set_stopping(srv, NULL, NULL);
Christopher Faulet8d01fd62018-01-24 21:49:41 +01001626 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
Emeric Brun9f0b4582017-10-23 14:39:51 +02001627 }
Willy Tarreau8eb77842014-05-21 13:54:57 +02001628}
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001629
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001630/* Enables admin flag <mode> (among SRV_ADMF_*) on server <s>. This is used to
1631 * enforce either maint mode or drain mode. It is not allowed to set more than
1632 * one flag at once. The equivalent "inherited" flag is propagated to all
1633 * tracking servers. Maintenance mode disables health checks (but not agent
1634 * checks). When either the flag is already set or no flag is passed, nothing
Willy Tarreau8b428482016-11-07 15:53:43 +01001635 * is done. If <cause> is non-null, it will be displayed at the end of the log
1636 * lines to justify the state change.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001637 *
1638 * Must be called with the server lock held.
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001639 */
Willy Tarreau8b428482016-11-07 15:53:43 +01001640void srv_set_admin_flag(struct server *s, enum srv_admin mode, const char *cause)
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001641{
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001642 struct server *srv;
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001643
1644 if (!mode)
1645 return;
1646
1647 /* stop going down as soon as we meet a server already in the same state */
Emeric Brun52a91d32017-08-31 14:41:55 +02001648 if (s->next_admin & mode)
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001649 return;
1650
Emeric Brun52a91d32017-08-31 14:41:55 +02001651 s->next_admin |= mode;
Emeric Brun64cc49c2017-10-03 14:46:45 +02001652 if (cause)
1653 strlcpy2(s->adm_st_chg_cause, cause, sizeof(s->adm_st_chg_cause));
1654
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001655 /* propagate changes */
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001656 srv_update_status(s);
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001657
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001658 /* stop going down if the equivalent flag was already present (forced or inherited) */
Emeric Brun52a91d32017-08-31 14:41:55 +02001659 if (((mode & SRV_ADMF_MAINT) && (s->next_admin & ~mode & SRV_ADMF_MAINT)) ||
1660 ((mode & SRV_ADMF_DRAIN) && (s->next_admin & ~mode & SRV_ADMF_DRAIN)))
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001661 return;
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001662
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001663 /* compute the inherited flag to propagate */
1664 if (mode & SRV_ADMF_MAINT)
1665 mode = SRV_ADMF_IMAINT;
1666 else if (mode & SRV_ADMF_DRAIN)
1667 mode = SRV_ADMF_IDRAIN;
1668
Emeric Brun9f0b4582017-10-23 14:39:51 +02001669 for (srv = s->trackers; srv; srv = srv->tracknext) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001670 HA_SPIN_LOCK(SERVER_LOCK, &srv->lock);
Willy Tarreau8b428482016-11-07 15:53:43 +01001671 srv_set_admin_flag(srv, mode, cause);
Christopher Faulet8d01fd62018-01-24 21:49:41 +01001672 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
Emeric Brun9f0b4582017-10-23 14:39:51 +02001673 }
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001674}
1675
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001676/* Disables admin flag <mode> (among SRV_ADMF_*) on server <s>. This is used to
1677 * stop enforcing either maint mode or drain mode. It is not allowed to set more
1678 * than one flag at once. The equivalent "inherited" flag is propagated to all
1679 * tracking servers. Leaving maintenance mode re-enables health checks. When
1680 * either the flag is already cleared or no flag is passed, nothing is done.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001681 *
1682 * Must be called with the server lock held.
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001683 */
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001684void srv_clr_admin_flag(struct server *s, enum srv_admin mode)
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001685{
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001686 struct server *srv;
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001687
1688 if (!mode)
1689 return;
1690
1691 /* stop going down as soon as we see the flag is not there anymore */
Emeric Brun52a91d32017-08-31 14:41:55 +02001692 if (!(s->next_admin & mode))
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001693 return;
1694
Emeric Brun52a91d32017-08-31 14:41:55 +02001695 s->next_admin &= ~mode;
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001696
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001697 /* propagate changes */
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001698 srv_update_status(s);
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001699
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001700 /* stop going down if the equivalent flag is still present (forced or inherited) */
Emeric Brun52a91d32017-08-31 14:41:55 +02001701 if (((mode & SRV_ADMF_MAINT) && (s->next_admin & SRV_ADMF_MAINT)) ||
1702 ((mode & SRV_ADMF_DRAIN) && (s->next_admin & SRV_ADMF_DRAIN)))
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001703 return;
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001704
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001705 if (mode & SRV_ADMF_MAINT)
1706 mode = SRV_ADMF_IMAINT;
1707 else if (mode & SRV_ADMF_DRAIN)
1708 mode = SRV_ADMF_IDRAIN;
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001709
Emeric Brun9f0b4582017-10-23 14:39:51 +02001710 for (srv = s->trackers; srv; srv = srv->tracknext) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001711 HA_SPIN_LOCK(SERVER_LOCK, &srv->lock);
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001712 srv_clr_admin_flag(srv, mode);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001713 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
Emeric Brun9f0b4582017-10-23 14:39:51 +02001714 }
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001715}
1716
Willy Tarreau757478e2016-11-03 19:22:19 +01001717/* principle: propagate maint and drain to tracking servers. This is useful
1718 * upon startup so that inherited states are correct.
1719 */
1720static void srv_propagate_admin_state(struct server *srv)
1721{
1722 struct server *srv2;
1723
1724 if (!srv->trackers)
1725 return;
1726
1727 for (srv2 = srv->trackers; srv2; srv2 = srv2->tracknext) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001728 HA_SPIN_LOCK(SERVER_LOCK, &srv2->lock);
Emeric Brun52a91d32017-08-31 14:41:55 +02001729 if (srv->next_admin & (SRV_ADMF_MAINT | SRV_ADMF_CMAINT))
Willy Tarreau8b428482016-11-07 15:53:43 +01001730 srv_set_admin_flag(srv2, SRV_ADMF_IMAINT, NULL);
Willy Tarreau757478e2016-11-03 19:22:19 +01001731
Emeric Brun52a91d32017-08-31 14:41:55 +02001732 if (srv->next_admin & SRV_ADMF_DRAIN)
Willy Tarreau8b428482016-11-07 15:53:43 +01001733 srv_set_admin_flag(srv2, SRV_ADMF_IDRAIN, NULL);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001734 HA_SPIN_UNLOCK(SERVER_LOCK, &srv2->lock);
Willy Tarreau757478e2016-11-03 19:22:19 +01001735 }
1736}
1737
1738/* Compute and propagate the admin states for all servers in proxy <px>.
1739 * Only servers *not* tracking another one are considered, because other
1740 * ones will be handled when the server they track is visited.
1741 */
1742void srv_compute_all_admin_states(struct proxy *px)
1743{
1744 struct server *srv;
1745
1746 for (srv = px->srv; srv; srv = srv->next) {
1747 if (srv->track)
1748 continue;
1749 srv_propagate_admin_state(srv);
1750 }
1751}
1752
Willy Tarreaudff55432012-10-10 17:51:05 +02001753/* Note: must not be declared <const> as its list will be overwritten.
1754 * Please take care of keeping this list alphabetically sorted, doing so helps
1755 * all code contributors.
1756 * Optional keywords are also declared with a NULL ->parse() function so that
1757 * the config parser can report an appropriate error when a known keyword was
1758 * not enabled.
Frédéric Lécailledfacd692017-04-16 17:14:14 +02001759 * Note: -1 as ->skip value means that the number of arguments are variable.
Willy Tarreaudff55432012-10-10 17:51:05 +02001760 */
1761static struct srv_kw_list srv_kws = { "ALL", { }, {
Amaury Denoyellefc465a52021-03-09 17:36:23 +01001762 { "backup", srv_parse_backup, 0, 1, 1 }, /* Flag as backup server */
Amaury Denoyelle76e10e72021-03-08 17:08:01 +01001763 { "cookie", srv_parse_cookie, 1, 1, 0 }, /* Assign a cookie to the server */
Amaury Denoyellefc465a52021-03-09 17:36:23 +01001764 { "disabled", srv_parse_disabled, 0, 1, 1 }, /* Start the server in 'disabled' state */
1765 { "enabled", srv_parse_enabled, 0, 1, 1 }, /* Start the server in 'enabled' state */
Amaury Denoyelle76e10e72021-03-08 17:08:01 +01001766 { "error-limit", srv_parse_error_limit, 1, 1, 0 }, /* Configure the consecutive count of check failures to consider a server on error */
Amaury Denoyelle69352ec2021-10-18 14:40:29 +02001767 { "ws", srv_parse_ws, 1, 1, 1 }, /* websocket protocol */
Amaury Denoyellefc465a52021-03-09 17:36:23 +01001768 { "id", srv_parse_id, 1, 0, 1 }, /* set id# of server */
Amaury Denoyelle76e10e72021-03-08 17:08:01 +01001769 { "init-addr", srv_parse_init_addr, 1, 1, 0 }, /* */
1770 { "log-proto", srv_parse_log_proto, 1, 1, 0 }, /* Set the protocol for event messages, only relevant in a ring section */
Amaury Denoyellefc465a52021-03-09 17:36:23 +01001771 { "maxconn", srv_parse_maxconn, 1, 1, 1 }, /* Set the max number of concurrent connection */
1772 { "maxqueue", srv_parse_maxqueue, 1, 1, 1 }, /* Set the max number of connection to put in queue */
Amaury Denoyelle76e10e72021-03-08 17:08:01 +01001773 { "max-reuse", srv_parse_max_reuse, 1, 1, 0 }, /* Set the max number of requests on a connection, -1 means unlimited */
Amaury Denoyellefc465a52021-03-09 17:36:23 +01001774 { "minconn", srv_parse_minconn, 1, 1, 1 }, /* Enable a dynamic maxconn limit */
Amaury Denoyelle76e10e72021-03-08 17:08:01 +01001775 { "namespace", srv_parse_namespace, 1, 1, 0 }, /* Namespace the server socket belongs to (if supported) */
Amaury Denoyellefc465a52021-03-09 17:36:23 +01001776 { "no-backup", srv_parse_no_backup, 0, 1, 1 }, /* Flag as non-backup server */
1777 { "no-send-proxy", srv_parse_no_send_proxy, 0, 1, 1 }, /* Disable use of PROXY V1 protocol */
1778 { "no-send-proxy-v2", srv_parse_no_send_proxy_v2, 0, 1, 1 }, /* Disable use of PROXY V2 protocol */
1779 { "no-tfo", srv_parse_no_tfo, 0, 1, 1 }, /* Disable use of TCP Fast Open */
Amaury Denoyelle76e10e72021-03-08 17:08:01 +01001780 { "non-stick", srv_parse_non_stick, 0, 1, 0 }, /* Disable stick-table persistence */
1781 { "observe", srv_parse_observe, 1, 1, 0 }, /* Enables health adjusting based on observing communication with the server */
1782 { "on-error", srv_parse_on_error, 1, 1, 0 }, /* Configure the action on check failure */
1783 { "on-marked-down", srv_parse_on_marked_down, 1, 1, 0 }, /* Configure the action when a server is marked down */
1784 { "on-marked-up", srv_parse_on_marked_up, 1, 1, 0 }, /* Configure the action when a server is marked up */
Amaury Denoyellefc465a52021-03-09 17:36:23 +01001785 { "pool-low-conn", srv_parse_pool_low_conn, 1, 1, 1 }, /* Set the min number of orphan idle connecbefore being allowed to pick from other threads */
1786 { "pool-max-conn", srv_parse_pool_max_conn, 1, 1, 1 }, /* Set the max number of orphan idle connections, -1 means unlimited */
1787 { "pool-purge-delay", srv_parse_pool_purge_delay, 1, 1, 1 }, /* Set the time before we destroy orphan idle connections, defaults to 1s */
Amaury Denoyelle30467232021-03-12 18:03:27 +01001788 { "proto", srv_parse_proto, 1, 1, 1 }, /* Set the proto to use for all outgoing connections */
Amaury Denoyellefc465a52021-03-09 17:36:23 +01001789 { "proxy-v2-options", srv_parse_proxy_v2_options, 1, 1, 1 }, /* options for send-proxy-v2 */
Amaury Denoyelle76e10e72021-03-08 17:08:01 +01001790 { "redir", srv_parse_redir, 1, 1, 0 }, /* Enable redirection mode */
Ilya Shipitsinba13f162021-03-19 22:21:44 +05001791 { "resolve-net", srv_parse_resolve_net, 1, 1, 0 }, /* Set the preferred network range for name resolution */
Amaury Denoyelle76e10e72021-03-08 17:08:01 +01001792 { "resolve-opts", srv_parse_resolve_opts, 1, 1, 0 }, /* Set options for name resolution */
Ilya Shipitsinba13f162021-03-19 22:21:44 +05001793 { "resolve-prefer", srv_parse_resolve_prefer, 1, 1, 0 }, /* Set the preferred family for name resolution */
Amaury Denoyelle76e10e72021-03-08 17:08:01 +01001794 { "resolvers", srv_parse_resolvers, 1, 1, 0 }, /* Configure the resolver to use for name resolution */
Amaury Denoyellefc465a52021-03-09 17:36:23 +01001795 { "send-proxy", srv_parse_send_proxy, 0, 1, 1 }, /* Enforce use of PROXY V1 protocol */
1796 { "send-proxy-v2", srv_parse_send_proxy_v2, 0, 1, 1 }, /* Enforce use of PROXY V2 protocol */
Amaury Denoyelle76e10e72021-03-08 17:08:01 +01001797 { "slowstart", srv_parse_slowstart, 1, 1, 0 }, /* Set the warm-up timer for a previously failed server */
Amaury Denoyellefc465a52021-03-09 17:36:23 +01001798 { "source", srv_parse_source, -1, 1, 1 }, /* Set the source address to be used to connect to the server */
Amaury Denoyelle76e10e72021-03-08 17:08:01 +01001799 { "stick", srv_parse_stick, 0, 1, 0 }, /* Enable stick-table persistence */
Amaury Denoyellefc465a52021-03-09 17:36:23 +01001800 { "tfo", srv_parse_tfo, 0, 1, 1 }, /* enable TCP Fast Open of server */
Amaury Denoyelle76e10e72021-03-08 17:08:01 +01001801 { "track", srv_parse_track, 1, 1, 0 }, /* Set the current state of the server, tracking another one */
1802 { "socks4", srv_parse_socks4, 1, 1, 0 }, /* Set the socks4 proxy of the server*/
Amaury Denoyellefc465a52021-03-09 17:36:23 +01001803 { "usesrc", srv_parse_usesrc, 0, 1, 1 }, /* safe-guard against usesrc without preceding <source> keyword */
1804 { "weight", srv_parse_weight, 1, 1, 1 }, /* Set the load-balancing weight */
Willy Tarreaudff55432012-10-10 17:51:05 +02001805 { NULL, NULL, 0 },
1806}};
1807
Willy Tarreau0108d902018-11-25 19:14:37 +01001808INITCALL1(STG_REGISTER, srv_register_keywords, &srv_kws);
Willy Tarreaudff55432012-10-10 17:51:05 +02001809
Willy Tarreau004e0452013-11-21 11:22:01 +01001810/* Recomputes the server's eweight based on its state, uweight, the current time,
Ilya Shipitsinc02a23f2020-05-06 00:53:22 +05001811 * and the proxy's algorithm. To be used after updating sv->uweight. The warmup
Willy Tarreau3ff577e2018-08-02 11:48:52 +02001812 * state is automatically disabled if the time is elapsed. If <must_update> is
1813 * not zero, the update will be propagated immediately.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001814 *
1815 * Must be called with the server lock held.
Willy Tarreau004e0452013-11-21 11:22:01 +01001816 */
Willy Tarreau3ff577e2018-08-02 11:48:52 +02001817void server_recalc_eweight(struct server *sv, int must_update)
Willy Tarreau004e0452013-11-21 11:22:01 +01001818{
1819 struct proxy *px = sv->proxy;
1820 unsigned w;
1821
1822 if (now.tv_sec < sv->last_change || now.tv_sec >= sv->last_change + sv->slowstart) {
1823 /* go to full throttle if the slowstart interval is reached */
Emeric Brun52a91d32017-08-31 14:41:55 +02001824 if (sv->next_state == SRV_ST_STARTING)
1825 sv->next_state = SRV_ST_RUNNING;
Willy Tarreau004e0452013-11-21 11:22:01 +01001826 }
1827
1828 /* We must take care of not pushing the server to full throttle during slow starts.
1829 * It must also start immediately, at least at the minimal step when leaving maintenance.
1830 */
Emeric Brun52a91d32017-08-31 14:41:55 +02001831 if ((sv->next_state == SRV_ST_STARTING) && (px->lbprm.algo & BE_LB_PROP_DYN))
Willy Tarreau004e0452013-11-21 11:22:01 +01001832 w = (px->lbprm.wdiv * (now.tv_sec - sv->last_change) + sv->slowstart) / sv->slowstart;
1833 else
1834 w = px->lbprm.wdiv;
1835
Emeric Brun52a91d32017-08-31 14:41:55 +02001836 sv->next_eweight = (sv->uweight * w + px->lbprm.wmult - 1) / px->lbprm.wmult;
Willy Tarreau004e0452013-11-21 11:22:01 +01001837
Willy Tarreau3ff577e2018-08-02 11:48:52 +02001838 /* propagate changes only if needed (i.e. not recursively) */
Willy Tarreau49725a02018-08-21 19:54:09 +02001839 if (must_update)
Willy Tarreau3ff577e2018-08-02 11:48:52 +02001840 srv_update_status(sv);
Willy Tarreau004e0452013-11-21 11:22:01 +01001841}
1842
Willy Tarreaubaaee002006-06-26 02:48:02 +02001843/*
Simon Horman7d09b9a2013-02-12 10:45:51 +09001844 * Parses weight_str and configures sv accordingly.
1845 * Returns NULL on success, error message string otherwise.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001846 *
1847 * Must be called with the server lock held.
Simon Horman7d09b9a2013-02-12 10:45:51 +09001848 */
1849const char *server_parse_weight_change_request(struct server *sv,
1850 const char *weight_str)
1851{
1852 struct proxy *px;
Simon Hormanb796afa2013-02-12 10:45:53 +09001853 long int w;
1854 char *end;
Simon Horman7d09b9a2013-02-12 10:45:51 +09001855
1856 px = sv->proxy;
1857
1858 /* if the weight is terminated with '%', it is set relative to
1859 * the initial weight, otherwise it is absolute.
1860 */
1861 if (!*weight_str)
1862 return "Require <weight> or <weight%>.\n";
1863
Simon Hormanb796afa2013-02-12 10:45:53 +09001864 w = strtol(weight_str, &end, 10);
1865 if (end == weight_str)
1866 return "Empty weight string empty or preceded by garbage";
1867 else if (end[0] == '%' && end[1] == '\0') {
Simon Horman58b5d292013-02-12 10:45:52 +09001868 if (w < 0)
Simon Horman7d09b9a2013-02-12 10:45:51 +09001869 return "Relative weight must be positive.\n";
Simon Horman58b5d292013-02-12 10:45:52 +09001870 /* Avoid integer overflow */
1871 if (w > 25600)
1872 w = 25600;
Simon Horman7d09b9a2013-02-12 10:45:51 +09001873 w = sv->iweight * w / 100;
Simon Horman58b5d292013-02-12 10:45:52 +09001874 if (w > 256)
1875 w = 256;
Simon Horman7d09b9a2013-02-12 10:45:51 +09001876 }
1877 else if (w < 0 || w > 256)
1878 return "Absolute weight can only be between 0 and 256 inclusive.\n";
Simon Hormanb796afa2013-02-12 10:45:53 +09001879 else if (end[0] != '\0')
1880 return "Trailing garbage in weight string";
Simon Horman7d09b9a2013-02-12 10:45:51 +09001881
1882 if (w && w != sv->iweight && !(px->lbprm.algo & BE_LB_PROP_DYN))
1883 return "Backend is using a static LB algorithm and only accepts weights '0%' and '100%'.\n";
1884
1885 sv->uweight = w;
Willy Tarreau3ff577e2018-08-02 11:48:52 +02001886 server_recalc_eweight(sv, 1);
Simon Horman7d09b9a2013-02-12 10:45:51 +09001887
1888 return NULL;
1889}
1890
Baptiste Assmann3d8f8312015-04-13 22:54:33 +02001891/*
Thierry Fournier09a91782016-02-24 08:25:39 +01001892 * Parses <addr_str> and configures <sv> accordingly. <from> precise
1893 * the source of the change in the associated message log.
Baptiste Assmann3d8f8312015-04-13 22:54:33 +02001894 * Returns:
1895 * - error string on error
1896 * - NULL on success
Willy Tarreau46b7f532018-08-21 11:54:26 +02001897 *
1898 * Must be called with the server lock held.
Baptiste Assmann3d8f8312015-04-13 22:54:33 +02001899 */
1900const char *server_parse_addr_change_request(struct server *sv,
Thierry Fournier09a91782016-02-24 08:25:39 +01001901 const char *addr_str, const char *updater)
Baptiste Assmann3d8f8312015-04-13 22:54:33 +02001902{
1903 unsigned char ip[INET6_ADDRSTRLEN];
1904
1905 if (inet_pton(AF_INET6, addr_str, ip)) {
Christopher Faulet69beaa92021-02-16 12:07:47 +01001906 srv_update_addr(sv, ip, AF_INET6, updater);
Baptiste Assmann3d8f8312015-04-13 22:54:33 +02001907 return NULL;
1908 }
1909 if (inet_pton(AF_INET, addr_str, ip)) {
Christopher Faulet69beaa92021-02-16 12:07:47 +01001910 srv_update_addr(sv, ip, AF_INET, updater);
Baptiste Assmann3d8f8312015-04-13 22:54:33 +02001911 return NULL;
1912 }
1913
1914 return "Could not understand IP address format.\n";
1915}
1916
Willy Tarreau46b7f532018-08-21 11:54:26 +02001917/*
1918 * Must be called with the server lock held.
1919 */
Nenad Merdanovic174dd372016-04-24 23:10:06 +02001920const char *server_parse_maxconn_change_request(struct server *sv,
1921 const char *maxconn_str)
1922{
1923 long int v;
1924 char *end;
1925
1926 if (!*maxconn_str)
1927 return "Require <maxconn>.\n";
1928
1929 v = strtol(maxconn_str, &end, 10);
1930 if (end == maxconn_str)
1931 return "maxconn string empty or preceded by garbage";
1932 else if (end[0] != '\0')
1933 return "Trailing garbage in maxconn string";
1934
1935 if (sv->maxconn == sv->minconn) { // static maxconn
1936 sv->maxconn = sv->minconn = v;
1937 } else { // dynamic maxconn
1938 sv->maxconn = v;
1939 }
1940
Amaury Denoyellecaaafd02021-06-18 11:11:36 +02001941 /* server_parse_maxconn_change_request requires the server lock held.
1942 * Specify it to process_srv_queue to prevent a deadlock.
1943 */
Nenad Merdanovic174dd372016-04-24 23:10:06 +02001944 if (may_dequeue_tasks(sv, sv->proxy))
Amaury Denoyellecaaafd02021-06-18 11:11:36 +02001945 process_srv_queue(sv, 1);
Nenad Merdanovic174dd372016-04-24 23:10:06 +02001946
1947 return NULL;
1948}
1949
William Lallemand71048532021-10-20 13:28:41 +02001950#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001951static struct sample_expr *srv_sni_sample_parse_expr(struct server *srv, struct proxy *px,
1952 const char *file, int linenum, char **err)
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001953{
1954 int idx;
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001955 const char *args[] = {
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001956 srv->sni_expr,
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001957 NULL,
1958 };
1959
1960 idx = 0;
Olivier Houchard7d8e6882017-04-20 18:21:17 +02001961 px->conf.args.ctx = ARGC_SRV;
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001962
Willy Tarreaue3b57bf2020-02-14 16:50:14 +01001963 return sample_parse_expr((char **)args, &idx, file, linenum, err, &px->conf.args, NULL);
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001964}
1965
1966static int server_parse_sni_expr(struct server *newsrv, struct proxy *px, char **err)
1967{
1968 struct sample_expr *expr;
1969
1970 expr = srv_sni_sample_parse_expr(newsrv, px, px->conf.file, px->conf.line, err);
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001971 if (!expr) {
1972 memprintf(err, "error detected while parsing sni expression : %s", *err);
1973 return ERR_ALERT | ERR_FATAL;
1974 }
1975
1976 if (!(expr->fetch->val & SMP_VAL_BE_SRV_CON)) {
1977 memprintf(err, "error detected while parsing sni expression : "
1978 " fetch method '%s' extracts information from '%s', "
1979 "none of which is available here.\n",
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001980 newsrv->sni_expr, sample_src_names(expr->fetch->use));
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001981 return ERR_ALERT | ERR_FATAL;
1982 }
1983
1984 px->http_needed |= !!(expr->fetch->use & SMP_USE_HTTP_ANY);
1985 release_sample_expr(newsrv->ssl_ctx.sni);
1986 newsrv->ssl_ctx.sni = expr;
1987
1988 return 0;
1989}
William Lallemand71048532021-10-20 13:28:41 +02001990#endif
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001991
Gaetan Rivet10c4b4a2020-02-11 11:42:38 +01001992static void display_parser_err(const char *file, int linenum, char **args, int cur_arg, int err_code, char **err)
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001993{
Gaetan Rivet10c4b4a2020-02-11 11:42:38 +01001994 char *msg = "error encountered while processing ";
1995 char *quote = "'";
1996 char *token = args[cur_arg];
1997
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001998 if (err && *err) {
1999 indent_msg(err, 2);
Gaetan Rivet10c4b4a2020-02-11 11:42:38 +01002000 msg = *err;
2001 quote = "";
2002 token = "";
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01002003 }
Gaetan Rivet10c4b4a2020-02-11 11:42:38 +01002004
2005 if (err_code & ERR_WARN && !(err_code & ERR_ALERT))
2006 ha_warning("parsing [%s:%d] : '%s %s' : %s%s%s%s.\n",
2007 file, linenum, args[0], args[1],
2008 msg, quote, token, quote);
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01002009 else
Gaetan Rivet10c4b4a2020-02-11 11:42:38 +01002010 ha_alert("parsing [%s:%d] : '%s %s' : %s%s%s%s.\n",
2011 file, linenum, args[0], args[1],
2012 msg, quote, token, quote);
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01002013}
2014
Christopher Faulet5e5675d2022-08-03 11:21:14 +02002015static void srv_conn_src_sport_range_cpy(struct server *srv, const struct server *src)
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002016{
2017 int range_sz;
2018
2019 range_sz = src->conn_src.sport_range->size;
2020 if (range_sz > 0) {
2021 srv->conn_src.sport_range = port_range_alloc_range(range_sz);
2022 if (srv->conn_src.sport_range != NULL) {
2023 int i;
2024
2025 for (i = 0; i < range_sz; i++) {
2026 srv->conn_src.sport_range->ports[i] =
2027 src->conn_src.sport_range->ports[i];
2028 }
2029 }
2030 }
2031}
2032
2033/*
2034 * Copy <src> server connection source settings to <srv> server everything needed.
2035 */
Christopher Faulet5e5675d2022-08-03 11:21:14 +02002036static void srv_conn_src_cpy(struct server *srv, const struct server *src)
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002037{
2038 srv->conn_src.opts = src->conn_src.opts;
2039 srv->conn_src.source_addr = src->conn_src.source_addr;
2040
2041 /* Source port range copy. */
2042 if (src->conn_src.sport_range != NULL)
2043 srv_conn_src_sport_range_cpy(srv, src);
2044
2045#ifdef CONFIG_HAP_TRANSPARENT
2046 if (src->conn_src.bind_hdr_name != NULL) {
2047 srv->conn_src.bind_hdr_name = strdup(src->conn_src.bind_hdr_name);
2048 srv->conn_src.bind_hdr_len = strlen(src->conn_src.bind_hdr_name);
2049 }
2050 srv->conn_src.bind_hdr_occ = src->conn_src.bind_hdr_occ;
2051 srv->conn_src.tproxy_addr = src->conn_src.tproxy_addr;
2052#endif
2053 if (src->conn_src.iface_name != NULL)
2054 srv->conn_src.iface_name = strdup(src->conn_src.iface_name);
2055}
2056
2057/*
2058 * Copy <src> server SSL settings to <srv> server allocating
2059 * everything needed.
2060 */
2061#if defined(USE_OPENSSL)
Christopher Faulet5e5675d2022-08-03 11:21:14 +02002062static void srv_ssl_settings_cpy(struct server *srv, const struct server *src)
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002063{
Christopher Faulet7cbd1562021-12-01 09:50:41 +01002064 /* <src> is the current proxy's default server and SSL is enabled */
William Lallemand6338b7d2021-12-28 18:47:17 +01002065 BUG_ON(src->ssl_ctx.ctx != NULL); /* the SSL_CTX must never be initialized in a default-server */
2066
Christopher Faulet7cbd1562021-12-01 09:50:41 +01002067 if (src == &srv->proxy->defsrv && src->use_ssl == 1)
2068 srv->flags |= SRV_F_DEFSRV_USE_SSL;
2069
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002070 if (src->ssl_ctx.ca_file != NULL)
2071 srv->ssl_ctx.ca_file = strdup(src->ssl_ctx.ca_file);
2072 if (src->ssl_ctx.crl_file != NULL)
2073 srv->ssl_ctx.crl_file = strdup(src->ssl_ctx.crl_file);
William Lallemand6338b7d2021-12-28 18:47:17 +01002074 if (src->ssl_ctx.client_crt != NULL)
2075 srv->ssl_ctx.client_crt = strdup(src->ssl_ctx.client_crt);
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002076
2077 srv->ssl_ctx.verify = src->ssl_ctx.verify;
2078
Remi Tricot-Le Breton3b0f3e02021-07-13 18:28:22 +02002079
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002080 if (src->ssl_ctx.verify_host != NULL)
2081 srv->ssl_ctx.verify_host = strdup(src->ssl_ctx.verify_host);
2082 if (src->ssl_ctx.ciphers != NULL)
2083 srv->ssl_ctx.ciphers = strdup(src->ssl_ctx.ciphers);
Jerome Magnin2e8d52f2020-04-22 11:40:18 +02002084 if (src->ssl_ctx.options)
2085 srv->ssl_ctx.options = src->ssl_ctx.options;
2086 if (src->ssl_ctx.methods.flags)
2087 srv->ssl_ctx.methods.flags = src->ssl_ctx.methods.flags;
2088 if (src->ssl_ctx.methods.min)
2089 srv->ssl_ctx.methods.min = src->ssl_ctx.methods.min;
2090 if (src->ssl_ctx.methods.max)
2091 srv->ssl_ctx.methods.max = src->ssl_ctx.methods.max;
2092
William Lallemand71048532021-10-20 13:28:41 +02002093#ifdef HAVE_SSL_CTX_SET_CIPHERSUITES
Dirkjan Bussink415150f2018-09-14 11:14:21 +02002094 if (src->ssl_ctx.ciphersuites != NULL)
2095 srv->ssl_ctx.ciphersuites = strdup(src->ssl_ctx.ciphersuites);
William Lallemand71048532021-10-20 13:28:41 +02002096#endif
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002097 if (src->sni_expr != NULL)
2098 srv->sni_expr = strdup(src->sni_expr);
Olivier Houchardc7566002018-11-20 23:33:50 +01002099
William Lallemand71048532021-10-20 13:28:41 +02002100#ifdef TLSEXT_TYPE_application_layer_protocol_negotiation
Olivier Houchardc7566002018-11-20 23:33:50 +01002101 if (src->ssl_ctx.alpn_str) {
2102 srv->ssl_ctx.alpn_str = malloc(src->ssl_ctx.alpn_len);
2103 if (srv->ssl_ctx.alpn_str) {
2104 memcpy(srv->ssl_ctx.alpn_str, src->ssl_ctx.alpn_str,
2105 src->ssl_ctx.alpn_len);
2106 srv->ssl_ctx.alpn_len = src->ssl_ctx.alpn_len;
2107 }
2108 }
William Lallemand71048532021-10-20 13:28:41 +02002109#endif
2110#ifdef OPENSSL_NPN_NEGOTIATED
Olivier Houchardc7566002018-11-20 23:33:50 +01002111 if (src->ssl_ctx.npn_str) {
2112 srv->ssl_ctx.npn_str = malloc(src->ssl_ctx.npn_len);
2113 if (srv->ssl_ctx.npn_str) {
2114 memcpy(srv->ssl_ctx.npn_str, src->ssl_ctx.npn_str,
2115 src->ssl_ctx.npn_len);
2116 srv->ssl_ctx.npn_len = src->ssl_ctx.npn_len;
2117 }
2118 }
William Lallemand71048532021-10-20 13:28:41 +02002119#endif
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002120}
2121#endif
2122
2123/*
Baptiste Assmann201c07f2017-05-22 15:17:15 +02002124 * Prepare <srv> for hostname resolution.
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002125 * May be safely called with a default server as <src> argument (without hostname).
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002126 * Returns -1 in case of any allocation failure, 0 if not.
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002127 */
Christopher Faulet69beaa92021-02-16 12:07:47 +01002128int srv_prepare_for_resolution(struct server *srv, const char *hostname)
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002129{
Christopher Faulet67957bd2017-09-27 11:00:59 +02002130 char *hostname_dn;
2131 int hostname_len, hostname_dn_len;
2132
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002133 if (!hostname)
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002134 return 0;
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002135
Christopher Faulet67957bd2017-09-27 11:00:59 +02002136 hostname_len = strlen(hostname);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02002137 hostname_dn = trash.area;
Willy Tarreauc1c765f2021-10-14 07:49:49 +02002138 hostname_dn_len = resolv_str_to_dn_label(hostname, hostname_len,
Emeric Brund30e9a12020-12-23 18:49:16 +01002139 hostname_dn, trash.size);
Christopher Faulet67957bd2017-09-27 11:00:59 +02002140 if (hostname_dn_len == -1)
2141 goto err;
Baptiste Assmann81ed1a02017-05-03 10:11:44 +02002142
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002143
Christopher Faulet67957bd2017-09-27 11:00:59 +02002144 free(srv->hostname);
2145 free(srv->hostname_dn);
2146 srv->hostname = strdup(hostname);
2147 srv->hostname_dn = strdup(hostname_dn);
2148 srv->hostname_dn_len = hostname_dn_len;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02002149 if (!srv->hostname || !srv->hostname_dn)
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002150 goto err;
2151
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002152 return 0;
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002153
2154 err:
Willy Tarreau61cfdf42021-02-20 10:46:51 +01002155 ha_free(&srv->hostname);
2156 ha_free(&srv->hostname_dn);
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002157 return -1;
2158}
2159
Baptiste Assmann201c07f2017-05-22 15:17:15 +02002160/*
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002161 * Copy <src> server settings to <srv> server allocating
2162 * everything needed.
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002163 * This function is not supposed to be called at any time, but only
2164 * during server settings parsing or during server allocations from
2165 * a server template, and just after having calloc()'ed a new server.
2166 * So, <src> may only be a default server (when parsing server settings)
2167 * or a server template (during server allocations from a server template).
2168 * <srv_tmpl> distinguishes these two cases (must be 1 if <srv> is a template,
2169 * 0 if not).
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002170 */
Christopher Faulet29962f72022-08-03 11:28:08 +02002171void srv_settings_cpy(struct server *srv, const struct server *src, int srv_tmpl)
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002172{
2173 /* Connection source settings copy */
2174 srv_conn_src_cpy(srv, src);
2175
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002176 if (srv_tmpl) {
2177 srv->addr = src->addr;
2178 srv->svc_port = src->svc_port;
2179 }
2180
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002181 srv->pp_opts = src->pp_opts;
2182 if (src->rdr_pfx != NULL) {
2183 srv->rdr_pfx = strdup(src->rdr_pfx);
2184 srv->rdr_len = src->rdr_len;
2185 }
2186 if (src->cookie != NULL) {
2187 srv->cookie = strdup(src->cookie);
2188 srv->cklen = src->cklen;
2189 }
2190 srv->use_ssl = src->use_ssl;
Willy Tarreau24441082019-12-11 15:43:45 +01002191 srv->check.addr = src->check.addr;
2192 srv->agent.addr = src->agent.addr;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002193 srv->check.use_ssl = src->check.use_ssl;
2194 srv->check.port = src->check.port;
Olivier Houchard21944012018-12-21 19:42:01 +01002195 srv->check.sni = src->check.sni;
Olivier Houchard92150142018-12-21 19:47:01 +01002196 srv->check.alpn_str = src->check.alpn_str;
Ilya Shipitsin0c50b1e2019-04-30 21:21:28 +05002197 srv->check.alpn_len = src->check.alpn_len;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002198 /* Note: 'flags' field has potentially been already initialized. */
2199 srv->flags |= src->flags;
2200 srv->do_check = src->do_check;
2201 srv->do_agent = src->do_agent;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002202 srv->check.inter = src->check.inter;
2203 srv->check.fastinter = src->check.fastinter;
2204 srv->check.downinter = src->check.downinter;
2205 srv->agent.use_ssl = src->agent.use_ssl;
2206 srv->agent.port = src->agent.port;
Christopher Faulet0ae3d1d2020-04-06 17:54:24 +02002207
2208 if (src->agent.tcpcheck_rules) {
2209 srv->agent.tcpcheck_rules = calloc(1, sizeof(*srv->agent.tcpcheck_rules));
2210 if (srv->agent.tcpcheck_rules) {
2211 srv->agent.tcpcheck_rules->flags = src->agent.tcpcheck_rules->flags;
2212 srv->agent.tcpcheck_rules->list = src->agent.tcpcheck_rules->list;
2213 LIST_INIT(&srv->agent.tcpcheck_rules->preset_vars);
2214 dup_tcpcheck_vars(&srv->agent.tcpcheck_rules->preset_vars,
2215 &src->agent.tcpcheck_rules->preset_vars);
2216 }
2217 }
2218
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002219 srv->agent.inter = src->agent.inter;
2220 srv->agent.fastinter = src->agent.fastinter;
2221 srv->agent.downinter = src->agent.downinter;
2222 srv->maxqueue = src->maxqueue;
Amaury Denoyelle8e99b842021-10-18 14:39:57 +02002223 srv->ws = src->ws;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002224 srv->minconn = src->minconn;
2225 srv->maxconn = src->maxconn;
2226 srv->slowstart = src->slowstart;
2227 srv->observe = src->observe;
2228 srv->onerror = src->onerror;
2229 srv->onmarkeddown = src->onmarkeddown;
2230 srv->onmarkedup = src->onmarkedup;
2231 if (src->trackit != NULL)
2232 srv->trackit = strdup(src->trackit);
2233 srv->consecutive_errors_limit = src->consecutive_errors_limit;
2234 srv->uweight = srv->iweight = src->iweight;
2235
2236 srv->check.send_proxy = src->check.send_proxy;
2237 /* health: up, but will fall down at first failure */
2238 srv->check.rise = srv->check.health = src->check.rise;
2239 srv->check.fall = src->check.fall;
2240
2241 /* Here we check if 'disabled' is the default server state */
Emeric Brun52a91d32017-08-31 14:41:55 +02002242 if (src->next_admin & (SRV_ADMF_CMAINT | SRV_ADMF_FMAINT)) {
2243 srv->next_admin |= SRV_ADMF_CMAINT | SRV_ADMF_FMAINT;
2244 srv->next_state = SRV_ST_STOPPED;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002245 srv->check.state |= CHK_ST_PAUSED;
2246 srv->check.health = 0;
2247 }
2248
2249 /* health: up but will fall down at first failure */
2250 srv->agent.rise = srv->agent.health = src->agent.rise;
2251 srv->agent.fall = src->agent.fall;
2252
2253 if (src->resolvers_id != NULL)
2254 srv->resolvers_id = strdup(src->resolvers_id);
Emeric Brun21fbeed2020-12-23 18:01:04 +01002255 srv->resolv_opts.family_prio = src->resolv_opts.family_prio;
2256 srv->resolv_opts.accept_duplicate_ip = src->resolv_opts.accept_duplicate_ip;
2257 srv->resolv_opts.ignore_weight = src->resolv_opts.ignore_weight;
2258 if (srv->resolv_opts.family_prio == AF_UNSPEC)
2259 srv->resolv_opts.family_prio = AF_INET6;
2260 memcpy(srv->resolv_opts.pref_net,
2261 src->resolv_opts.pref_net,
2262 sizeof srv->resolv_opts.pref_net);
2263 srv->resolv_opts.pref_net_nb = src->resolv_opts.pref_net_nb;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002264
2265 srv->init_addr_methods = src->init_addr_methods;
2266 srv->init_addr = src->init_addr;
2267#if defined(USE_OPENSSL)
2268 srv_ssl_settings_cpy(srv, src);
2269#endif
2270#ifdef TCP_USER_TIMEOUT
2271 srv->tcp_ut = src->tcp_ut;
2272#endif
Christopher Faulet8ed0a3e2018-04-10 14:45:45 +02002273 srv->mux_proto = src->mux_proto;
Olivier Houchardb7b3faa2018-12-14 18:15:36 +01002274 srv->pool_purge_delay = src->pool_purge_delay;
Willy Tarreau2f3f4d32020-07-01 07:43:51 +02002275 srv->low_idle_conns = src->low_idle_conns;
Olivier Houchard006e3102018-12-10 18:30:32 +01002276 srv->max_idle_conns = src->max_idle_conns;
Willy Tarreau9c538e02019-01-23 10:21:49 +01002277 srv->max_reuse = src->max_reuse;
Christopher Faulet8ed0a3e2018-04-10 14:45:45 +02002278
Olivier Houchard8da5f982017-08-04 18:35:36 +02002279 if (srv_tmpl)
2280 srv->srvrq = src->srvrq;
Alexander Liu2a54bb72019-05-22 19:44:48 +08002281
Aurelien DARRAGON9478e5a2023-06-14 09:53:32 +02002282 srv->netns = src->netns;
Alexander Liu2a54bb72019-05-22 19:44:48 +08002283 srv->check.via_socks4 = src->check.via_socks4;
2284 srv->socks4_addr = src->socks4_addr;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002285}
2286
Willy Tarreau198e92a2021-03-05 10:23:32 +01002287/* allocate a server and attach it to the global servers_list. Returns
2288 * the server on success, otherwise NULL.
2289 */
William Lallemand313bfd12018-10-26 14:47:32 +02002290struct server *new_server(struct proxy *proxy)
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002291{
2292 struct server *srv;
2293
2294 srv = calloc(1, sizeof *srv);
2295 if (!srv)
2296 return NULL;
2297
2298 srv->obj_type = OBJ_TYPE_SERVER;
2299 srv->proxy = proxy;
Patrick Hemmer0355dab2018-05-11 12:52:31 -04002300 srv->pendconns = EB_ROOT;
Willy Tarreau2b718102021-04-21 07:32:39 +02002301 LIST_APPEND(&servers_list, &srv->global_list);
Emeric Brun0c4a8a32021-06-11 10:48:45 +02002302 LIST_INIT(&srv->srv_rec_item);
Emeric Brunf9ca5d82021-06-11 10:08:05 +02002303 LIST_INIT(&srv->ip_rec_item);
Christopher Faulet40a007c2017-07-03 15:41:01 +02002304
Emeric Brun52a91d32017-08-31 14:41:55 +02002305 srv->next_state = SRV_ST_RUNNING; /* early server setup */
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002306 srv->last_change = now.tv_sec;
2307
Christopher Faulet38290462020-04-21 11:46:40 +02002308 srv->check.obj_type = OBJ_TYPE_CHECK;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002309 srv->check.status = HCHK_STATUS_INI;
2310 srv->check.server = srv;
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01002311 srv->check.proxy = proxy;
Christopher Faulet5d503fc2020-03-30 20:34:34 +02002312 srv->check.tcpcheck_rules = &proxy->tcpcheck_rules;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002313
Christopher Faulet38290462020-04-21 11:46:40 +02002314 srv->agent.obj_type = OBJ_TYPE_CHECK;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002315 srv->agent.status = HCHK_STATUS_INI;
2316 srv->agent.server = srv;
Willy Tarreau1ba32032019-01-21 07:48:26 +01002317 srv->agent.proxy = proxy;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002318 srv->xprt = srv->check.xprt = srv->agent.xprt = xprt_get(XPRT_RAW);
Frédéric Lécaillef46c10c2020-11-23 14:29:28 +01002319#if defined(USE_QUIC)
2320 srv->cids = EB_ROOT_UNIQUE;
2321#endif
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002322
Amaury Denoyelle7f8f6cb2020-11-10 14:24:31 +01002323 srv->extra_counters = NULL;
William Lallemand3ce6eed2021-02-08 10:43:44 +01002324#ifdef USE_OPENSSL
2325 HA_RWLOCK_INIT(&srv->ssl_ctx.lock);
2326#endif
Amaury Denoyelle7f8f6cb2020-11-10 14:24:31 +01002327
Willy Tarreau975b1552019-06-06 16:25:55 +02002328 /* please don't put default server settings here, they are set in
Willy Tarreau144289b2021-02-12 08:19:01 +01002329 * proxy_preset_defaults().
Willy Tarreau975b1552019-06-06 16:25:55 +02002330 */
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002331 return srv;
2332}
Frédéric Lécaille759ea982017-03-30 17:32:36 +02002333
Amaury Denoyellee3c55c22021-08-02 15:50:00 +02002334/* Increment the dynamic server refcount. */
Amaury Denoyelle4a699422021-08-25 14:39:53 +02002335void srv_use_dynsrv(struct server *srv)
Amaury Denoyellee3c55c22021-08-02 15:50:00 +02002336{
2337 BUG_ON(!(srv->flags & SRV_F_DYNAMIC));
2338 HA_ATOMIC_INC(&srv->refcount_dynsrv);
2339}
2340
2341/* Decrement the dynamic server refcount. */
2342static uint srv_release_dynsrv(struct server *srv)
2343{
2344 BUG_ON(!(srv->flags & SRV_F_DYNAMIC));
2345 return HA_ATOMIC_SUB_FETCH(&srv->refcount_dynsrv, 1);
2346}
2347
Amaury Denoyelleff836742021-08-09 15:08:54 +02002348/* Deallocate a server <srv> and its member. <srv> must be allocated. For
2349 * dynamic servers, its refcount is decremented first. The free operations are
2350 * conducted only if the refcount is nul, unless the process is stopping.
Amaury Denoyellebbe608a2021-08-25 15:03:46 +02002351 *
2352 * As a convenience, <srv.next> is returned if srv is not NULL. It may be useful
2353 * when calling free_server on the list of servers.
Amaury Denoyelle828adf02021-03-16 17:20:15 +01002354 */
Amaury Denoyellebbe608a2021-08-25 15:03:46 +02002355struct server *free_server(struct server *srv)
Amaury Denoyelle828adf02021-03-16 17:20:15 +01002356{
Amaury Denoyellebbe608a2021-08-25 15:03:46 +02002357 struct server *next = NULL;
2358
2359 next = srv->next;
2360
Amaury Denoyellee3c55c22021-08-02 15:50:00 +02002361 /* For dynamic servers, decrement the reference counter. Only free the
2362 * server when reaching zero.
2363 */
Amaury Denoyelleff836742021-08-09 15:08:54 +02002364 if (likely(!(global.mode & MODE_STOPPING))) {
2365 if (srv->flags & SRV_F_DYNAMIC) {
2366 if (srv_release_dynsrv(srv))
Amaury Denoyellebbe608a2021-08-25 15:03:46 +02002367 goto end;
Amaury Denoyelleff836742021-08-09 15:08:54 +02002368 }
Amaury Denoyellee3c55c22021-08-02 15:50:00 +02002369 }
2370
Amaury Denoyelle828adf02021-03-16 17:20:15 +01002371 task_destroy(srv->warmup);
Christopher Faulet2c0f5272021-06-15 16:17:17 +02002372 task_destroy(srv->srvrq_check);
Amaury Denoyelle828adf02021-03-16 17:20:15 +01002373
2374 free(srv->id);
2375 free(srv->cookie);
2376 free(srv->hostname);
2377 free(srv->hostname_dn);
2378 free((char*)srv->conf.file);
2379 free(srv->per_thr);
2380 free(srv->curr_idle_thr);
2381 free(srv->resolvers_id);
2382 free(srv->addr_node.key);
Amaury Denoyellefb247942021-04-20 16:48:22 +02002383 free(srv->lb_nodes);
Amaury Denoyelle828adf02021-03-16 17:20:15 +01002384
2385 if (srv->use_ssl == 1 || srv->check.use_ssl == 1 || (srv->proxy->options & PR_O_TCPCHK_SSL)) {
2386 if (xprt_get(XPRT_SSL) && xprt_get(XPRT_SSL)->destroy_srv)
2387 xprt_get(XPRT_SSL)->destroy_srv(srv);
2388 }
2389 HA_SPIN_DESTROY(&srv->lock);
2390
Willy Tarreau2b718102021-04-21 07:32:39 +02002391 LIST_DELETE(&srv->global_list);
Amaury Denoyelle828adf02021-03-16 17:20:15 +01002392
2393 EXTRA_COUNTERS_FREE(srv->extra_counters);
2394
2395 free(srv);
2396 srv = NULL;
Amaury Denoyellebbe608a2021-08-25 15:03:46 +02002397
2398 end:
2399 return next;
Amaury Denoyelle828adf02021-03-16 17:20:15 +01002400}
2401
Amaury Denoyelle76e10e72021-03-08 17:08:01 +01002402/*
2403 * Parse as much as possible such a range string argument: low[-high]
2404 * Set <nb_low> and <nb_high> values so that they may be reused by this loop
2405 * for(int i = nb_low; i <= nb_high; i++)... with nb_low >= 1.
2406 * Fails if 'low' < 0 or 'high' is present and not higher than 'low'.
2407 * Returns 0 if succeeded, -1 if not.
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02002408 */
Amaury Denoyelle7d27efe2021-03-17 14:25:39 +01002409static int _srv_parse_tmpl_range(struct server *srv, const char *arg,
2410 int *nb_low, int *nb_high)
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02002411{
2412 char *nb_high_arg;
2413
2414 *nb_high = 0;
2415 chunk_printf(&trash, "%s", arg);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02002416 *nb_low = atoi(trash.area);
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02002417
Willy Tarreau843b7cb2018-07-13 10:54:26 +02002418 if ((nb_high_arg = strchr(trash.area, '-'))) {
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02002419 *nb_high_arg++ = '\0';
2420 *nb_high = atoi(nb_high_arg);
2421 }
2422 else {
2423 *nb_high += *nb_low;
2424 *nb_low = 1;
2425 }
2426
2427 if (*nb_low < 0 || *nb_high < *nb_low)
2428 return -1;
2429
2430 return 0;
2431}
2432
Amaury Denoyelle7d27efe2021-03-17 14:25:39 +01002433/* Parse as much as possible such a range string argument: low[-high]
2434 * Set <nb_low> and <nb_high> values so that they may be reused by this loop
2435 * for(int i = nb_low; i <= nb_high; i++)... with nb_low >= 1.
2436 *
Ilya Shipitsinba13f162021-03-19 22:21:44 +05002437 * This function is first intended to be used through parse_server to
Amaury Denoyelle7d27efe2021-03-17 14:25:39 +01002438 * initialize a new server on startup.
2439 *
2440 * Fails if 'low' < 0 or 'high' is present and not higher than 'low'.
2441 * Returns 0 if succeeded, -1 if not.
2442 */
2443static inline void _srv_parse_set_id_from_prefix(struct server *srv,
2444 const char *prefix, int nb)
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002445{
2446 chunk_printf(&trash, "%s%d", prefix, nb);
2447 free(srv->id);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02002448 srv->id = strdup(trash.area);
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002449}
2450
Amaury Denoyelle7d27efe2021-03-17 14:25:39 +01002451/* Initialize as much as possible servers from <srv> server template.
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002452 * Note that a server template is a special server with
2453 * a few different parameters than a server which has
2454 * been parsed mostly the same way as a server.
Amaury Denoyelle7d27efe2021-03-17 14:25:39 +01002455 *
Ilya Shipitsinba13f162021-03-19 22:21:44 +05002456 * This function is first intended to be used through parse_server to
Amaury Denoyelle7d27efe2021-03-17 14:25:39 +01002457 * initialize a new server on startup.
2458 *
Joseph Herlant44466822018-11-15 08:57:51 -08002459 * Returns the number of servers successfully allocated,
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002460 * 'srv' template included.
2461 */
Amaury Denoyelle7d27efe2021-03-17 14:25:39 +01002462static int _srv_parse_tmpl_init(struct server *srv, struct proxy *px)
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002463{
2464 int i;
2465 struct server *newsrv;
2466
2467 for (i = srv->tmpl_info.nb_low + 1; i <= srv->tmpl_info.nb_high; i++) {
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002468 newsrv = new_server(px);
2469 if (!newsrv)
2470 goto err;
2471
Christopher Faulet75bef002020-11-02 22:04:55 +01002472 newsrv->conf.file = strdup(srv->conf.file);
2473 newsrv->conf.line = srv->conf.line;
2474
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002475 srv_settings_cpy(newsrv, srv, 1);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02002476 srv_prepare_for_resolution(newsrv, srv->hostname);
William Lallemand71048532021-10-20 13:28:41 +02002477#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002478 if (newsrv->sni_expr) {
2479 newsrv->ssl_ctx.sni = srv_sni_sample_parse_expr(newsrv, px, NULL, 0, NULL);
2480 if (!newsrv->ssl_ctx.sni)
2481 goto err;
2482 }
William Lallemand71048532021-10-20 13:28:41 +02002483#endif
Emeric Brun0c4a8a32021-06-11 10:48:45 +02002484 /* append to list of servers available to receive an hostname */
Emeric Brun3ecaf532021-06-14 10:02:18 +02002485 if (newsrv->srvrq)
2486 LIST_APPEND(&newsrv->srvrq->attached_servers, &newsrv->srv_rec_item);
Emeric Brun0c4a8a32021-06-11 10:48:45 +02002487
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002488 /* Set this new server ID. */
Amaury Denoyelle7d27efe2021-03-17 14:25:39 +01002489 _srv_parse_set_id_from_prefix(newsrv, srv->tmpl_info.prefix, i);
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002490
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002491 /* Linked backwards first. This will be restablished after parsing. */
2492 newsrv->next = px->srv;
2493 px->srv = newsrv;
2494 }
Amaury Denoyelle7d27efe2021-03-17 14:25:39 +01002495 _srv_parse_set_id_from_prefix(srv, srv->tmpl_info.prefix, srv->tmpl_info.nb_low);
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002496
2497 return i - srv->tmpl_info.nb_low;
2498
2499 err:
Amaury Denoyelle7d27efe2021-03-17 14:25:39 +01002500 _srv_parse_set_id_from_prefix(srv, srv->tmpl_info.prefix, srv->tmpl_info.nb_low);
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002501 if (newsrv) {
William Lallemand71048532021-10-20 13:28:41 +02002502#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002503 release_sample_expr(newsrv->ssl_ctx.sni);
William Lallemand71048532021-10-20 13:28:41 +02002504#endif
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002505 free_check(&newsrv->agent);
2506 free_check(&newsrv->check);
Willy Tarreau2b718102021-04-21 07:32:39 +02002507 LIST_DELETE(&newsrv->global_list);
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002508 }
2509 free(newsrv);
2510 return i - srv->tmpl_info.nb_low;
2511}
2512
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002513/* Allocate a new server pointed by <srv> and try to parse the first arguments
2514 * in <args> as an address for a server or an address-range for a template or
2515 * nothing for a default-server. <cur_arg> is incremented to the next argument.
2516 *
Ilya Shipitsinba13f162021-03-19 22:21:44 +05002517 * This function is first intended to be used through parse_server to
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002518 * initialize a new server on startup.
2519 *
2520 * A mask of errors is returned. On a parsing error, ERR_FATAL is set. In case
2521 * of memory exhaustion, ERR_ABORT is set. If the server cannot be allocated,
2522 * <srv> will be set to NULL.
2523 */
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002524static int _srv_parse_init(struct server **srv, char **args, int *cur_arg,
2525 struct proxy *curproxy,
2526 int parse_flags, char **errmsg)
Willy Tarreau272adea2014-03-31 10:39:59 +02002527{
2528 struct server *newsrv = NULL;
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02002529 const char *err = NULL;
Willy Tarreau272adea2014-03-31 10:39:59 +02002530 int err_code = 0;
Willy Tarreau07101d52015-09-08 16:16:35 +02002531 char *fqdn = NULL;
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002532 int tmpl_range_low = 0, tmpl_range_high = 0;
Willy Tarreau272adea2014-03-31 10:39:59 +02002533
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002534 *srv = NULL;
2535
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002536 /* There is no mandatory first arguments for default server. */
2537 if (parse_flags & SRV_PARSE_PARSE_ADDR) {
2538 if (parse_flags & SRV_PARSE_TEMPLATE) {
2539 if (!*args[3]) {
2540 /* 'server-template' line number of argument check. */
2541 memprintf(errmsg, "'%s' expects <prefix> <nb | range> <addr>[:<port>] as arguments.",
Amaury Denoyelle9394a942021-03-08 11:20:52 +01002542 args[0]);
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002543 err_code |= ERR_ALERT | ERR_FATAL;
2544 goto out;
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02002545 }
2546
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002547 err = invalid_prefix_char(args[1]);
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02002548 }
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002549 else {
2550 if (!*args[2]) {
2551 /* 'server' line number of argument check. */
2552 memprintf(errmsg, "'%s' expects <name> and <addr>[:<port>] as arguments.",
Amaury Denoyelle9394a942021-03-08 11:20:52 +01002553 args[0]);
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02002554 err_code |= ERR_ALERT | ERR_FATAL;
2555 goto out;
2556 }
2557
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002558 err = invalid_char(args[1]);
Willy Tarreau272adea2014-03-31 10:39:59 +02002559 }
2560
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02002561 if (err) {
Amaury Denoyelle9394a942021-03-08 11:20:52 +01002562 memprintf(errmsg, "character '%c' is not permitted in %s %s '%s'.",
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002563 *err, args[0], !(parse_flags & SRV_PARSE_TEMPLATE) ? "name" : "prefix", args[1]);
Willy Tarreau272adea2014-03-31 10:39:59 +02002564 err_code |= ERR_ALERT | ERR_FATAL;
2565 goto out;
2566 }
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002567 }
Willy Tarreau272adea2014-03-31 10:39:59 +02002568
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002569 *cur_arg = 2;
2570 if (parse_flags & SRV_PARSE_TEMPLATE) {
2571 /* Parse server-template <nb | range> arg. */
2572 if (_srv_parse_tmpl_range(newsrv, args[*cur_arg], &tmpl_range_low, &tmpl_range_high) < 0) {
2573 memprintf(errmsg, "Wrong %s number or range arg '%s'.",
2574 args[0], args[*cur_arg]);
2575 err_code |= ERR_ALERT | ERR_FATAL;
2576 goto out;
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02002577 }
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002578 (*cur_arg)++;
2579 }
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02002580
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002581 if (!(parse_flags & SRV_PARSE_DEFAULT_SERVER)) {
2582 struct sockaddr_storage *sk;
2583 int port1, port2, port;
Willy Tarreau272adea2014-03-31 10:39:59 +02002584
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002585 *srv = newsrv = new_server(curproxy);
2586 if (!newsrv) {
2587 memprintf(errmsg, "out of memory.");
2588 err_code |= ERR_ALERT | ERR_ABORT;
2589 goto out;
2590 }
Willy Tarreau272adea2014-03-31 10:39:59 +02002591
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002592 if (parse_flags & SRV_PARSE_TEMPLATE) {
2593 newsrv->tmpl_info.nb_low = tmpl_range_low;
2594 newsrv->tmpl_info.nb_high = tmpl_range_high;
2595 }
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02002596
Amaury Denoyelle76e10e72021-03-08 17:08:01 +01002597 if (parse_flags & SRV_PARSE_DYNAMIC)
2598 newsrv->flags |= SRV_F_DYNAMIC;
2599
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002600 /* Note: for a server template, its id is its prefix.
2601 * This is a temporary id which will be used for server allocations to come
2602 * after parsing.
2603 */
2604 if (!(parse_flags & SRV_PARSE_TEMPLATE))
2605 newsrv->id = strdup(args[1]);
2606 else
2607 newsrv->tmpl_info.prefix = strdup(args[1]);
Willy Tarreau272adea2014-03-31 10:39:59 +02002608
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002609 /* several ways to check the port component :
2610 * - IP => port=+0, relative (IPv4 only)
2611 * - IP: => port=+0, relative
2612 * - IP:N => port=N, absolute
2613 * - IP:+N => port=+N, relative
2614 * - IP:-N => port=-N, relative
2615 */
2616 if (!(parse_flags & SRV_PARSE_PARSE_ADDR))
2617 goto skip_addr;
Frédéric Lécaille355b2032019-01-11 14:06:12 +01002618
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002619 sk = str2sa_range(args[*cur_arg], &port, &port1, &port2, NULL, NULL,
2620 errmsg, NULL, &fqdn,
2621 (parse_flags & SRV_PARSE_INITIAL_RESOLVE ? PA_O_RESOLVE : 0) | PA_O_PORT_OK | PA_O_PORT_OFS | PA_O_STREAM | PA_O_XPRT | PA_O_CONNECT);
2622 if (!sk) {
2623 memprintf(errmsg, "'%s %s' : %s", args[0], args[1], *errmsg);
2624 err_code |= ERR_ALERT | ERR_FATAL;
2625 goto out;
2626 }
Willy Tarreau272adea2014-03-31 10:39:59 +02002627
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002628 if (!port1 || !port2) {
2629 /* no port specified, +offset, -offset */
2630 newsrv->flags |= SRV_F_MAPPORTS;
2631 }
Willy Tarreau272adea2014-03-31 10:39:59 +02002632
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002633 /* save hostname and create associated name resolution */
2634 if (fqdn) {
2635 if (fqdn[0] == '_') { /* SRV record */
2636 /* Check if a SRV request already exists, and if not, create it */
2637 if ((newsrv->srvrq = find_srvrq_by_name(fqdn, curproxy)) == NULL)
2638 newsrv->srvrq = new_resolv_srvrq(newsrv, fqdn);
2639 if (newsrv->srvrq == NULL) {
Christopher Faulet67957bd2017-09-27 11:00:59 +02002640 err_code |= ERR_ALERT | ERR_FATAL;
2641 goto out;
Baptiste Assmann4f91f7e2017-05-03 12:09:54 +02002642 }
Christopher Faulet08736f92021-06-29 20:52:35 +02002643 LIST_APPEND(&newsrv->srvrq->attached_servers, &newsrv->srv_rec_item);
Baptiste Assmanna68ca962015-04-14 01:15:08 +02002644 }
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002645 else if (srv_prepare_for_resolution(newsrv, fqdn) == -1) {
2646 memprintf(errmsg, "Can't create DNS resolution for server '%s'",
2647 newsrv->id);
Willy Tarreau272adea2014-03-31 10:39:59 +02002648 err_code |= ERR_ALERT | ERR_FATAL;
2649 goto out;
2650 }
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002651 }
Frédéric Lécaille5c3cd972017-03-15 16:36:09 +01002652
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002653 newsrv->addr = *sk;
2654 newsrv->svc_port = port;
Amaury Denoyelle2f70bb52021-06-08 15:19:51 +02002655 /*
2656 * we don't need to lock the server here, because
2657 * we are in the process of initializing.
2658 *
2659 * Note that the server is not attached into the proxy tree if
2660 * this is a dynamic server.
2661 */
2662 srv_set_addr_desc(newsrv, !(parse_flags & SRV_PARSE_DYNAMIC));
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002663
2664 if (!newsrv->srvrq && !newsrv->hostname && !protocol_by_family(newsrv->addr.ss_family)) {
2665 memprintf(errmsg, "Unknown protocol family %d '%s'",
2666 newsrv->addr.ss_family, args[*cur_arg]);
2667 err_code |= ERR_ALERT | ERR_FATAL;
2668 goto out;
Willy Tarreau272adea2014-03-31 10:39:59 +02002669 }
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002670
2671 (*cur_arg)++;
2672 skip_addr:
Amaury Denoyelle76e10e72021-03-08 17:08:01 +01002673 if (!(parse_flags & SRV_PARSE_DYNAMIC)) {
2674 /* Copy default server settings to new server */
2675 srv_settings_cpy(newsrv, &curproxy->defsrv, 0);
2676 } else {
2677 /* Initialize dynamic server weight to 1 */
2678 newsrv->uweight = newsrv->iweight = 1;
2679
2680 /* A dynamic server is disabled on startup */
2681 newsrv->next_admin = SRV_ADMF_FMAINT;
2682 newsrv->next_state = SRV_ST_STOPPED;
2683 server_recalc_eweight(newsrv, 0);
2684 }
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002685 HA_SPIN_INIT(&newsrv->lock);
2686 }
2687 else {
2688 *srv = newsrv = &curproxy->defsrv;
2689 *cur_arg = 1;
2690 newsrv->resolv_opts.family_prio = AF_INET6;
2691 newsrv->resolv_opts.accept_duplicate_ip = 0;
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002692 }
Willy Tarreau272adea2014-03-31 10:39:59 +02002693
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002694 free(fqdn);
2695 return 0;
Willy Tarreau9faebe32019-06-07 19:00:37 +02002696
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002697out:
2698 free(fqdn);
2699 return err_code;
2700}
Willy Tarreau272adea2014-03-31 10:39:59 +02002701
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002702/* Parse the server keyword in <args>.
2703 * <cur_arg> is incremented beyond the keyword optional value. Note that this
2704 * might not be the case if an error is reported.
2705 *
Ilya Shipitsinba13f162021-03-19 22:21:44 +05002706 * This function is first intended to be used through parse_server to
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002707 * initialize a new server on startup.
2708 *
2709 * A mask of errors is returned. ERR_FATAL is set if the parsing should be
2710 * interrupted.
2711 */
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002712static int _srv_parse_kw(struct server *srv, char **args, int *cur_arg,
2713 struct proxy *curproxy,
2714 int parse_flags, char **errmsg)
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002715{
2716 int err_code = 0;
2717 struct srv_kw *kw;
2718 const char *best;
Willy Tarreau272adea2014-03-31 10:39:59 +02002719
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002720 kw = srv_find_kw(args[*cur_arg]);
Amaury Denoyelle9394a942021-03-08 11:20:52 +01002721 if (!kw) {
2722 best = srv_find_best_kw(args[*cur_arg]);
2723 if (best)
2724 memprintf(errmsg, "unknown keyword '%s'; did you mean '%s' maybe ?",
2725 args[*cur_arg], best);
2726 else
2727 memprintf(errmsg, "unknown keyword '%s'.",
2728 args[*cur_arg]);
Willy Tarreau272adea2014-03-31 10:39:59 +02002729
Amaury Denoyelle9394a942021-03-08 11:20:52 +01002730 return ERR_ALERT | ERR_FATAL;
2731 }
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002732
Amaury Denoyelle9394a942021-03-08 11:20:52 +01002733 if (!kw->parse) {
2734 memprintf(errmsg, "'%s' option is not implemented in this version (check build options)",
2735 args[*cur_arg]);
2736 err_code = ERR_ALERT | ERR_FATAL;
2737 goto out;
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002738 }
Willy Tarreau272adea2014-03-31 10:39:59 +02002739
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002740 if ((parse_flags & SRV_PARSE_DEFAULT_SERVER) && !kw->default_ok) {
Amaury Denoyelle9394a942021-03-08 11:20:52 +01002741 memprintf(errmsg, "'%s' option is not accepted in default-server sections",
2742 args[*cur_arg]);
2743 err_code = ERR_ALERT;
2744 goto out;
2745 }
Amaury Denoyelle76e10e72021-03-08 17:08:01 +01002746 else if ((parse_flags & SRV_PARSE_DYNAMIC) && !kw->dynamic_ok) {
2747 memprintf(errmsg, "'%s' option is not accepted for dynamic server",
2748 args[*cur_arg]);
2749 err_code |= ERR_ALERT;
2750 goto out;
2751 }
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002752
Amaury Denoyelle9394a942021-03-08 11:20:52 +01002753 err_code = kw->parse(args, cur_arg, curproxy, srv, errmsg);
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002754
2755out:
Amaury Denoyelle9394a942021-03-08 11:20:52 +01002756 if (kw->skip != -1)
2757 *cur_arg += 1 + kw->skip;
2758
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002759 return err_code;
2760}
2761
William Lallemand71048532021-10-20 13:28:41 +02002762#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
Ilya Shipitsinba13f162021-03-19 22:21:44 +05002763/* This function is first intended to be used through parse_server to
Amaury Denoyelle7d27efe2021-03-17 14:25:39 +01002764 * initialize a new server on startup.
2765 */
2766static int _srv_parse_sni_expr_init(char **args, int cur_arg,
2767 struct server *srv, struct proxy *proxy,
2768 char **errmsg)
2769{
2770 int ret;
2771
2772 if (!srv->sni_expr)
2773 return 0;
2774
2775 ret = server_parse_sni_expr(srv, proxy, errmsg);
2776 if (!ret)
2777 return 0;
2778
2779 return ret;
2780}
William Lallemand71048532021-10-20 13:28:41 +02002781#endif
Amaury Denoyelle7d27efe2021-03-17 14:25:39 +01002782
2783/* Server initializations finalization.
2784 * Initialize health check, agent check and SNI expression if enabled.
2785 * Must not be called for a default server instance.
2786 *
Ilya Shipitsinba13f162021-03-19 22:21:44 +05002787 * This function is first intended to be used through parse_server to
Amaury Denoyelle7d27efe2021-03-17 14:25:39 +01002788 * initialize a new server on startup.
2789 */
2790static int _srv_parse_finalize(char **args, int cur_arg,
2791 struct server *srv, struct proxy *px,
Amaury Denoyelle76e10e72021-03-08 17:08:01 +01002792 int parse_flags, char **errmsg)
Amaury Denoyelle7d27efe2021-03-17 14:25:39 +01002793{
William Lallemand71048532021-10-20 13:28:41 +02002794#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
Amaury Denoyelle7d27efe2021-03-17 14:25:39 +01002795 int ret;
William Lallemand71048532021-10-20 13:28:41 +02002796#endif
Amaury Denoyelle7d27efe2021-03-17 14:25:39 +01002797
2798 if (srv->do_check && srv->trackit) {
2799 memprintf(errmsg, "unable to enable checks and tracking at the same time!");
2800 return ERR_ALERT | ERR_FATAL;
2801 }
2802
2803 if (srv->do_agent && !srv->agent.port) {
2804 memprintf(errmsg, "server %s does not have agent port. Agent check has been disabled.",
2805 srv->id);
2806 return ERR_ALERT | ERR_FATAL;
2807 }
2808
William Lallemand71048532021-10-20 13:28:41 +02002809#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
Amaury Denoyelle7d27efe2021-03-17 14:25:39 +01002810 if ((ret = _srv_parse_sni_expr_init(args, cur_arg, srv, px, errmsg)) != 0)
2811 return ret;
William Lallemand71048532021-10-20 13:28:41 +02002812#endif
Amaury Denoyelle7d27efe2021-03-17 14:25:39 +01002813
Amaury Denoyelle76e10e72021-03-08 17:08:01 +01002814 /* A dynamic server is disabled on startup. It must not be counted as
2815 * an active backend entry.
2816 */
2817 if (!(parse_flags & SRV_PARSE_DYNAMIC)) {
2818 if (srv->flags & SRV_F_BACKUP)
2819 px->srv_bck++;
2820 else
2821 px->srv_act++;
2822 }
2823
Amaury Denoyelle7d27efe2021-03-17 14:25:39 +01002824 srv_lb_commit_status(srv);
2825
2826 return 0;
2827}
2828
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002829int parse_server(const char *file, int linenum, char **args,
2830 struct proxy *curproxy, const struct proxy *defproxy,
2831 int parse_flags)
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002832{
2833 struct server *newsrv = NULL;
Amaury Denoyelle9394a942021-03-08 11:20:52 +01002834 char *errmsg = NULL;
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002835 int err_code = 0;
2836
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002837 int cur_arg;
Willy Tarreau272adea2014-03-31 10:39:59 +02002838
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002839 if (!(parse_flags & SRV_PARSE_DEFAULT_SERVER) && curproxy == defproxy) {
2840 ha_alert("parsing [%s:%d] : '%s' not allowed in 'defaults' section.\n", file, linenum, args[0]);
2841 err_code |= ERR_ALERT | ERR_FATAL;
2842 goto out;
2843 }
2844 else if (failifnotcap(curproxy, PR_CAP_BE, file, linenum, args[0], NULL)) {
2845 err_code |= ERR_ALERT | ERR_FATAL;
2846 goto out;
2847 }
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002848
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002849 if ((parse_flags & (SRV_PARSE_IN_PEER_SECTION|SRV_PARSE_PARSE_ADDR)) ==
2850 (SRV_PARSE_IN_PEER_SECTION|SRV_PARSE_PARSE_ADDR)) {
2851 if (!*args[2])
2852 return 0;
2853 }
Amaury Denoyelle9394a942021-03-08 11:20:52 +01002854
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002855 err_code = _srv_parse_init(&newsrv, args, &cur_arg, curproxy,
2856 parse_flags, &errmsg);
2857 if (errmsg) {
2858 ha_alert("parsing [%s:%d] : %s\n", file, linenum, errmsg);
2859 free(errmsg);
2860 }
Amaury Denoyellecf58dd72021-03-08 16:35:54 +01002861
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002862 /* the servers are linked backwards first */
2863 if (newsrv && !(parse_flags & SRV_PARSE_DEFAULT_SERVER)) {
2864 newsrv->next = curproxy->srv;
2865 curproxy->srv = newsrv;
2866 }
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002867
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002868 if (err_code & ERR_CODE)
2869 goto out;
Amaury Denoyelle9394a942021-03-08 11:20:52 +01002870
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002871 newsrv->conf.file = strdup(file);
2872 newsrv->conf.line = linenum;
Amaury Denoyelle9394a942021-03-08 11:20:52 +01002873
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002874 while (*args[cur_arg]) {
2875 errmsg = NULL;
2876 err_code = _srv_parse_kw(newsrv, args, &cur_arg, curproxy,
2877 parse_flags, &errmsg);
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002878
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002879 if (err_code & ERR_ALERT) {
2880 display_parser_err(file, linenum, args, cur_arg, err_code, &errmsg);
2881 free(errmsg);
Amaury Denoyellea8f442e2021-03-08 10:29:33 +01002882 }
Willy Tarreau272adea2014-03-31 10:39:59 +02002883
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002884 if (err_code & ERR_FATAL)
2885 goto out;
2886 }
Amaury Denoyelle9394a942021-03-08 11:20:52 +01002887
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002888 if (!(parse_flags & SRV_PARSE_DEFAULT_SERVER)) {
Amaury Denoyelle76e10e72021-03-08 17:08:01 +01002889 err_code |= _srv_parse_finalize(args, cur_arg, newsrv, curproxy, parse_flags, &errmsg);
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002890 if (err_code) {
2891 display_parser_err(file, linenum, args, cur_arg, err_code, &errmsg);
2892 free(errmsg);
Amaury Denoyelle9394a942021-03-08 11:20:52 +01002893 }
2894
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002895 if (err_code & ERR_FATAL)
2896 goto out;
Willy Tarreau272adea2014-03-31 10:39:59 +02002897 }
Amaury Denoyellecf58dd72021-03-08 16:35:54 +01002898
Amaury Denoyelle30c05372021-03-08 16:36:46 +01002899 if (parse_flags & SRV_PARSE_TEMPLATE)
2900 _srv_parse_tmpl_init(newsrv, curproxy);
2901
Amaury Denoyellef88af882021-06-08 17:00:20 +02002902 /* If the server id is fixed, insert it in the proxy used_id tree.
2903 * This is needed to detect a later duplicate id via srv_parse_id.
2904 *
2905 * If no is specified, a dynamic one is generated in
2906 * check_config_validity.
2907 */
2908 if (newsrv->flags & SRV_F_FORCED_ID)
2909 eb32_insert(&curproxy->conf.used_server_id, &newsrv->conf.id);
2910
Amaury Denoyelle24abb0c2021-05-07 15:13:51 +02002911 HA_DIAG_WARNING_COND((curproxy->cap & PR_CAP_LB) && !newsrv->uweight,
Amaury Denoyelleda0e7f62021-03-30 10:26:27 +02002912 "parsing [%s:%d] : 'server %s' : configured with weight of 0 will never be selected by load balancing algorithms\n",
2913 file, linenum, newsrv->id);
2914
Willy Tarreau272adea2014-03-31 10:39:59 +02002915 return 0;
2916
2917 out:
Willy Tarreau272adea2014-03-31 10:39:59 +02002918 return err_code;
2919}
2920
Baptiste Assmann19a106d2015-07-08 22:03:56 +02002921/* Returns a pointer to the first server matching either id <id>.
2922 * NULL is returned if no match is found.
2923 * the lookup is performed in the backend <bk>
2924 */
2925struct server *server_find_by_id(struct proxy *bk, int id)
2926{
2927 struct eb32_node *eb32;
2928 struct server *curserver;
2929
2930 if (!bk || (id ==0))
2931 return NULL;
2932
2933 /* <bk> has no backend capabilities, so it can't have a server */
2934 if (!(bk->cap & PR_CAP_BE))
2935 return NULL;
2936
2937 curserver = NULL;
2938
2939 eb32 = eb32_lookup(&bk->conf.used_server_id, id);
2940 if (eb32)
2941 curserver = container_of(eb32, struct server, conf.id);
2942
2943 return curserver;
2944}
2945
2946/* Returns a pointer to the first server matching either name <name>, or id
2947 * if <name> starts with a '#'. NULL is returned if no match is found.
2948 * the lookup is performed in the backend <bk>
2949 */
2950struct server *server_find_by_name(struct proxy *bk, const char *name)
2951{
2952 struct server *curserver;
2953
2954 if (!bk || !name)
2955 return NULL;
2956
2957 /* <bk> has no backend capabilities, so it can't have a server */
2958 if (!(bk->cap & PR_CAP_BE))
2959 return NULL;
2960
2961 curserver = NULL;
2962 if (*name == '#') {
2963 curserver = server_find_by_id(bk, atoi(name + 1));
2964 if (curserver)
2965 return curserver;
2966 }
2967 else {
2968 curserver = bk->srv;
2969
2970 while (curserver && (strcmp(curserver->id, name) != 0))
2971 curserver = curserver->next;
2972
2973 if (curserver)
2974 return curserver;
2975 }
2976
2977 return NULL;
2978}
2979
2980struct server *server_find_best_match(struct proxy *bk, char *name, int id, int *diff)
2981{
2982 struct server *byname;
2983 struct server *byid;
2984
2985 if (!name && !id)
2986 return NULL;
2987
2988 if (diff)
2989 *diff = 0;
2990
2991 byname = byid = NULL;
2992
2993 if (name) {
2994 byname = server_find_by_name(bk, name);
2995 if (byname && (!id || byname->puid == id))
2996 return byname;
2997 }
2998
2999 /* remaining possibilities :
3000 * - name not set
3001 * - name set but not found
3002 * - name found but ID doesn't match
3003 */
3004 if (id) {
3005 byid = server_find_by_id(bk, id);
3006 if (byid) {
3007 if (byname) {
3008 /* use id only if forced by configuration */
3009 if (byid->flags & SRV_F_FORCED_ID) {
3010 if (diff)
3011 *diff |= 2;
3012 return byid;
3013 }
3014 else {
3015 if (diff)
3016 *diff |= 1;
3017 return byname;
3018 }
3019 }
3020
3021 /* remaining possibilities:
3022 * - name not set
3023 * - name set but not found
3024 */
3025 if (name && diff)
3026 *diff |= 2;
3027 return byid;
3028 }
3029
3030 /* id bot found */
3031 if (byname) {
3032 if (diff)
3033 *diff |= 1;
3034 return byname;
3035 }
3036 }
3037
3038 return NULL;
3039}
3040
Simon Horman7d09b9a2013-02-12 10:45:51 +09003041/*
Baptiste Assmann14e40142015-04-14 01:13:07 +02003042 * update a server's current IP address.
3043 * ip is a pointer to the new IP address, whose address family is ip_sin_family.
3044 * ip is in network format.
3045 * updater is a string which contains an information about the requester of the update.
3046 * updater is used if not NULL.
3047 *
3048 * A log line and a stderr warning message is generated based on server's backend options.
Willy Tarreau46b7f532018-08-21 11:54:26 +02003049 *
3050 * Must be called with the server lock held.
Baptiste Assmann14e40142015-04-14 01:13:07 +02003051 */
Christopher Faulet69beaa92021-02-16 12:07:47 +01003052int srv_update_addr(struct server *s, void *ip, int ip_sin_family, const char *updater)
Baptiste Assmann14e40142015-04-14 01:13:07 +02003053{
Christopher Fauletd6c6b5f2020-09-08 10:27:24 +02003054 /* save the new IP family & address if necessary */
3055 switch (ip_sin_family) {
3056 case AF_INET:
3057 if (s->addr.ss_family == ip_sin_family &&
3058 !memcmp(ip, &((struct sockaddr_in *)&s->addr)->sin_addr.s_addr, 4))
3059 return 0;
3060 break;
3061 case AF_INET6:
3062 if (s->addr.ss_family == ip_sin_family &&
3063 !memcmp(ip, &((struct sockaddr_in6 *)&s->addr)->sin6_addr.s6_addr, 16))
3064 return 0;
3065 break;
3066 };
3067
Baptiste Assmann14e40142015-04-14 01:13:07 +02003068 /* generates a log line and a warning on stderr */
3069 if (1) {
3070 /* book enough space for both IPv4 and IPv6 */
3071 char oldip[INET6_ADDRSTRLEN];
3072 char newip[INET6_ADDRSTRLEN];
3073
3074 memset(oldip, '\0', INET6_ADDRSTRLEN);
3075 memset(newip, '\0', INET6_ADDRSTRLEN);
3076
3077 /* copy old IP address in a string */
3078 switch (s->addr.ss_family) {
3079 case AF_INET:
3080 inet_ntop(s->addr.ss_family, &((struct sockaddr_in *)&s->addr)->sin_addr, oldip, INET_ADDRSTRLEN);
3081 break;
3082 case AF_INET6:
3083 inet_ntop(s->addr.ss_family, &((struct sockaddr_in6 *)&s->addr)->sin6_addr, oldip, INET6_ADDRSTRLEN);
3084 break;
Christopher Fauletb0b76072020-09-08 10:38:40 +02003085 default:
3086 strcpy(oldip, "(none)");
3087 break;
Baptiste Assmann14e40142015-04-14 01:13:07 +02003088 };
3089
3090 /* copy new IP address in a string */
3091 switch (ip_sin_family) {
3092 case AF_INET:
3093 inet_ntop(ip_sin_family, ip, newip, INET_ADDRSTRLEN);
3094 break;
3095 case AF_INET6:
3096 inet_ntop(ip_sin_family, ip, newip, INET6_ADDRSTRLEN);
3097 break;
3098 };
3099
3100 /* save log line into a buffer */
3101 chunk_printf(&trash, "%s/%s changed its IP from %s to %s by %s",
3102 s->proxy->id, s->id, oldip, newip, updater);
3103
3104 /* write the buffer on stderr */
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003105 ha_warning("%s.\n", trash.area);
Baptiste Assmann14e40142015-04-14 01:13:07 +02003106
3107 /* send a log */
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003108 send_log(s->proxy, LOG_NOTICE, "%s.\n", trash.area);
Baptiste Assmann14e40142015-04-14 01:13:07 +02003109 }
3110
3111 /* save the new IP family */
3112 s->addr.ss_family = ip_sin_family;
3113 /* save the new IP address */
3114 switch (ip_sin_family) {
3115 case AF_INET:
Willy Tarreaueec1d382016-07-13 11:59:39 +02003116 memcpy(&((struct sockaddr_in *)&s->addr)->sin_addr.s_addr, ip, 4);
Baptiste Assmann14e40142015-04-14 01:13:07 +02003117 break;
3118 case AF_INET6:
3119 memcpy(((struct sockaddr_in6 *)&s->addr)->sin6_addr.s6_addr, ip, 16);
3120 break;
3121 };
Olivier Houchard4e694042017-03-14 20:01:29 +01003122 srv_set_dyncookie(s);
Amaury Denoyelle2f70bb52021-06-08 15:19:51 +02003123 srv_set_addr_desc(s, 1);
Baptiste Assmann14e40142015-04-14 01:13:07 +02003124
3125 return 0;
3126}
3127
William Dauchy7cabc062021-02-11 22:51:24 +01003128/* update agent health check address and port
3129 * addr can be ip4/ip6 or a hostname
3130 * if one error occurs, don't apply anything
3131 * must be called with the server lock held.
3132 */
Christopher Faulet69beaa92021-02-16 12:07:47 +01003133const char *srv_update_agent_addr_port(struct server *s, const char *addr, const char *port)
William Dauchy7cabc062021-02-11 22:51:24 +01003134{
3135 struct sockaddr_storage sk;
3136 struct buffer *msg;
3137 int new_port;
3138
3139 msg = get_trash_chunk();
3140 chunk_reset(msg);
3141
3142 if (!(s->agent.state & CHK_ST_ENABLED)) {
3143 chunk_strcat(msg, "agent checks are not enabled on this server");
3144 goto out;
3145 }
3146 if (addr) {
3147 memset(&sk, 0, sizeof(struct sockaddr_storage));
3148 if (str2ip(addr, &sk) == NULL) {
3149 chunk_appendf(msg, "invalid addr '%s'", addr);
3150 goto out;
3151 }
3152 }
3153 if (port) {
3154 if (strl2irc(port, strlen(port), &new_port) != 0) {
3155 chunk_appendf(msg, "provided port is not an integer");
3156 goto out;
3157 }
3158 if (new_port < 0 || new_port > 65535) {
3159 chunk_appendf(msg, "provided port is invalid");
3160 goto out;
3161 }
3162 }
3163out:
3164 if (msg->data)
3165 return msg->area;
3166 else {
3167 if (addr)
3168 set_srv_agent_addr(s, &sk);
3169 if (port)
3170 set_srv_agent_port(s, new_port);
3171 }
3172 return NULL;
3173}
3174
William Dauchyb456e1f2021-02-11 22:51:23 +01003175/* update server health check address and port
3176 * addr must be ip4 or ip6, it won't be resolved
3177 * if one error occurs, don't apply anything
3178 * must be called with the server lock held.
3179 */
Christopher Faulet69beaa92021-02-16 12:07:47 +01003180const char *srv_update_check_addr_port(struct server *s, const char *addr, const char *port)
William Dauchyb456e1f2021-02-11 22:51:23 +01003181{
3182 struct sockaddr_storage sk;
3183 struct buffer *msg;
3184 int new_port;
3185
3186 msg = get_trash_chunk();
3187 chunk_reset(msg);
3188
3189 if (!(s->check.state & CHK_ST_ENABLED)) {
3190 chunk_strcat(msg, "health checks are not enabled on this server");
3191 goto out;
3192 }
3193 if (addr) {
3194 memset(&sk, 0, sizeof(struct sockaddr_storage));
3195 if (str2ip2(addr, &sk, 0) == NULL) {
3196 chunk_appendf(msg, "invalid addr '%s'", addr);
3197 goto out;
3198 }
3199 }
3200 if (port) {
3201 if (strl2irc(port, strlen(port), &new_port) != 0) {
3202 chunk_appendf(msg, "provided port is not an integer");
3203 goto out;
3204 }
3205 if (new_port < 0 || new_port > 65535) {
3206 chunk_appendf(msg, "provided port is invalid");
3207 goto out;
3208 }
3209 /* prevent the update of port to 0 if MAPPORTS are in use */
3210 if ((s->flags & SRV_F_MAPPORTS) && new_port == 0) {
3211 chunk_appendf(msg, "can't unset 'port' since MAPPORTS is in use");
3212 goto out;
3213 }
3214 }
3215out:
3216 if (msg->data)
3217 return msg->area;
3218 else {
3219 if (addr)
3220 s->check.addr = sk;
3221 if (port)
3222 s->check.port = new_port;
3223 }
3224 return NULL;
3225}
3226
Baptiste Assmann14e40142015-04-14 01:13:07 +02003227/*
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003228 * This function update a server's addr and port only for AF_INET and AF_INET6 families.
3229 *
3230 * Caller can pass its name through <updater> to get it integrated in the response message
3231 * returned by the function.
3232 *
3233 * The function first does the following, in that order:
3234 * - validates the new addr and/or port
3235 * - checks if an update is required (new IP or port is different than current ones)
3236 * - checks the update is allowed:
3237 * - don't switch from/to a family other than AF_INET4 and AF_INET6
3238 * - allow all changes if no CHECKS are configured
3239 * - if CHECK is configured:
3240 * - if switch to port map (SRV_F_MAPPORTS), ensure health check have their own ports
3241 * - applies required changes to both ADDR and PORT if both 'required' and 'allowed'
3242 * conditions are met
Willy Tarreau46b7f532018-08-21 11:54:26 +02003243 *
3244 * Must be called with the server lock held.
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003245 */
Christopher Faulet69beaa92021-02-16 12:07:47 +01003246const char *srv_update_addr_port(struct server *s, const char *addr, const char *port, char *updater)
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003247{
3248 struct sockaddr_storage sa;
3249 int ret, port_change_required;
3250 char current_addr[INET6_ADDRSTRLEN];
David Carlier327298c2016-11-20 10:42:38 +00003251 uint16_t current_port, new_port;
Willy Tarreau83061a82018-07-13 11:56:34 +02003252 struct buffer *msg;
Olivier Houchard4e694042017-03-14 20:01:29 +01003253 int changed = 0;
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003254
3255 msg = get_trash_chunk();
3256 chunk_reset(msg);
3257
3258 if (addr) {
3259 memset(&sa, 0, sizeof(struct sockaddr_storage));
3260 if (str2ip2(addr, &sa, 0) == NULL) {
3261 chunk_printf(msg, "Invalid addr '%s'", addr);
3262 goto out;
3263 }
3264
3265 /* changes are allowed on AF_INET* families only */
3266 if ((sa.ss_family != AF_INET) && (sa.ss_family != AF_INET6)) {
3267 chunk_printf(msg, "Update to families other than AF_INET and AF_INET6 supported only through configuration file");
3268 goto out;
3269 }
3270
3271 /* collecting data currently setup */
3272 memset(current_addr, '\0', sizeof(current_addr));
3273 ret = addr_to_str(&s->addr, current_addr, sizeof(current_addr));
3274 /* changes are allowed on AF_INET* families only */
3275 if ((ret != AF_INET) && (ret != AF_INET6)) {
3276 chunk_printf(msg, "Update for the current server address family is only supported through configuration file");
3277 goto out;
3278 }
3279
3280 /* applying ADDR changes if required and allowed
3281 * ipcmp returns 0 when both ADDR are the same
3282 */
3283 if (ipcmp(&s->addr, &sa) == 0) {
3284 chunk_appendf(msg, "no need to change the addr");
3285 goto port;
3286 }
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003287 ipcpy(&sa, &s->addr);
Olivier Houchard4e694042017-03-14 20:01:29 +01003288 changed = 1;
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003289
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003290 /* update report for caller */
3291 chunk_printf(msg, "IP changed from '%s' to '%s'", current_addr, addr);
3292 }
3293
3294 port:
3295 if (port) {
3296 char sign = '\0';
3297 char *endptr;
3298
3299 if (addr)
3300 chunk_appendf(msg, ", ");
3301
3302 /* collecting data currently setup */
Willy Tarreau04276f32017-01-06 17:41:29 +01003303 current_port = s->svc_port;
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003304
3305 /* check if PORT change is required */
3306 port_change_required = 0;
3307
3308 sign = *port;
Ryabin Sergey77ee7522017-01-11 19:39:55 +04003309 errno = 0;
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003310 new_port = strtol(port, &endptr, 10);
3311 if ((errno != 0) || (port == endptr)) {
3312 chunk_appendf(msg, "problem converting port '%s' to an int", port);
3313 goto out;
3314 }
3315
3316 /* check if caller triggers a port mapped or offset */
3317 if (sign == '-' || (sign == '+')) {
3318 /* check if server currently uses port map */
3319 if (!(s->flags & SRV_F_MAPPORTS)) {
3320 /* switch from fixed port to port map mandatorily triggers
3321 * a port change */
3322 port_change_required = 1;
3323 /* check is configured
3324 * we're switching from a fixed port to a SRV_F_MAPPORTS (mapped) port
3325 * prevent PORT change if check doesn't have it's dedicated port while switching
3326 * to port mapping */
William Dauchy69f118d2021-02-03 22:30:07 +01003327 if (!s->check.port) {
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003328 chunk_appendf(msg, "can't change <port> to port map because it is incompatible with current health check port configuration (use 'port' statement from the 'server' directive.");
3329 goto out;
3330 }
3331 }
3332 /* we're already using port maps */
3333 else {
3334 port_change_required = current_port != new_port;
3335 }
3336 }
3337 /* fixed port */
3338 else {
3339 port_change_required = current_port != new_port;
3340 }
3341
3342 /* applying PORT changes if required and update response message */
3343 if (port_change_required) {
3344 /* apply new port */
Willy Tarreau04276f32017-01-06 17:41:29 +01003345 s->svc_port = new_port;
Olivier Houchard4e694042017-03-14 20:01:29 +01003346 changed = 1;
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003347
3348 /* prepare message */
3349 chunk_appendf(msg, "port changed from '");
3350 if (s->flags & SRV_F_MAPPORTS)
3351 chunk_appendf(msg, "+");
3352 chunk_appendf(msg, "%d' to '", current_port);
3353
3354 if (sign == '-') {
3355 s->flags |= SRV_F_MAPPORTS;
3356 chunk_appendf(msg, "%c", sign);
3357 /* just use for result output */
3358 new_port = -new_port;
3359 }
3360 else if (sign == '+') {
3361 s->flags |= SRV_F_MAPPORTS;
3362 chunk_appendf(msg, "%c", sign);
3363 }
3364 else {
3365 s->flags &= ~SRV_F_MAPPORTS;
3366 }
3367
3368 chunk_appendf(msg, "%d'", new_port);
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003369 }
3370 else {
3371 chunk_appendf(msg, "no need to change the port");
3372 }
3373 }
3374
3375out:
William Dauchy6318d332020-05-02 21:52:36 +02003376 if (changed) {
3377 /* force connection cleanup on the given server */
3378 srv_cleanup_connections(s);
Olivier Houchard4e694042017-03-14 20:01:29 +01003379 srv_set_dyncookie(s);
Amaury Denoyelle2f70bb52021-06-08 15:19:51 +02003380 srv_set_addr_desc(s, 1);
William Dauchy6318d332020-05-02 21:52:36 +02003381 }
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003382 if (updater)
3383 chunk_appendf(msg, " by '%s'", updater);
3384 chunk_appendf(msg, "\n");
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003385 return msg->area;
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003386}
3387
Christopher Faulet5efdef22021-03-11 18:03:21 +01003388/*
3389 * update server status based on result of SRV resolution
3390 * returns:
3391 * 0 if server status is updated
3392 * 1 if server status has not changed
3393 *
3394 * Must be called with the server lock held.
3395 */
3396int srvrq_update_srv_status(struct server *s, int has_no_ip)
3397{
3398 if (!s->srvrq)
3399 return 1;
3400
3401 /* since this server has an IP, it can go back in production */
3402 if (has_no_ip == 0) {
3403 srv_clr_admin_flag(s, SRV_ADMF_RMAINT);
3404 return 1;
3405 }
3406
3407 if (s->next_admin & SRV_ADMF_RMAINT)
3408 return 1;
3409
3410 srv_set_admin_flag(s, SRV_ADMF_RMAINT, "entry removed from SRV record");
3411 return 0;
3412}
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003413
3414/*
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003415 * update server status based on result of name resolution
3416 * returns:
3417 * 0 if server status is updated
3418 * 1 if server status has not changed
Willy Tarreau46b7f532018-08-21 11:54:26 +02003419 *
3420 * Must be called with the server lock held.
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003421 */
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003422int snr_update_srv_status(struct server *s, int has_no_ip)
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003423{
Emeric Brun750fe792020-12-23 16:51:12 +01003424 struct resolvers *resolvers = s->resolvers;
Christopher Fauletd83a6df2021-03-12 10:23:05 +01003425 struct resolv_resolution *resolution = (s->resolv_requester ? s->resolv_requester->resolution : NULL);
Christopher Faulet67957bd2017-09-27 11:00:59 +02003426 int exp;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003427
Jerome Magnin012261a2020-07-28 13:38:22 +02003428 /* If resolution is NULL we're dealing with SRV records Additional records */
Christopher Faulet5efdef22021-03-11 18:03:21 +01003429 if (resolution == NULL)
3430 return srvrq_update_srv_status(s, has_no_ip);
Jerome Magnin012261a2020-07-28 13:38:22 +02003431
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003432 switch (resolution->status) {
3433 case RSLV_STATUS_NONE:
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003434 /* status when HAProxy has just (re)started.
3435 * Nothing to do, since the task is already automatically started */
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003436 break;
3437
Baptiste Assmann3b9fe9f2016-11-02 22:58:18 +01003438 case RSLV_STATUS_VALID:
3439 /*
3440 * resume health checks
3441 * server will be turned back on if health check is safe
3442 */
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003443 if (has_no_ip) {
Emeric Brun52a91d32017-08-31 14:41:55 +02003444 if (s->next_admin & SRV_ADMF_RMAINT)
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003445 return 1;
3446 srv_set_admin_flag(s, SRV_ADMF_RMAINT,
3447 "No IP for server ");
Christopher Faulet67957bd2017-09-27 11:00:59 +02003448 return 0;
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003449 }
Christopher Faulet67957bd2017-09-27 11:00:59 +02003450
Emeric Brun52a91d32017-08-31 14:41:55 +02003451 if (!(s->next_admin & SRV_ADMF_RMAINT))
Baptiste Assmann3b9fe9f2016-11-02 22:58:18 +01003452 return 1;
3453 srv_clr_admin_flag(s, SRV_ADMF_RMAINT);
3454 chunk_printf(&trash, "Server %s/%s administratively READY thanks to valid DNS answer",
3455 s->proxy->id, s->id);
3456
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003457 ha_warning("%s.\n", trash.area);
3458 send_log(s->proxy, LOG_NOTICE, "%s.\n", trash.area);
Baptiste Assmann3b9fe9f2016-11-02 22:58:18 +01003459 return 0;
3460
3461 case RSLV_STATUS_NX:
3462 /* stop server if resolution is NX for a long enough period */
Christopher Faulet67957bd2017-09-27 11:00:59 +02003463 exp = tick_add(resolution->last_valid, resolvers->hold.nx);
3464 if (!tick_is_expired(exp, now_ms))
3465 break;
3466
3467 if (s->next_admin & SRV_ADMF_RMAINT)
3468 return 1;
3469 srv_set_admin_flag(s, SRV_ADMF_RMAINT, "DNS NX status");
3470 return 0;
Baptiste Assmann3b9fe9f2016-11-02 22:58:18 +01003471
3472 case RSLV_STATUS_TIMEOUT:
3473 /* stop server if resolution is TIMEOUT for a long enough period */
Christopher Faulet67957bd2017-09-27 11:00:59 +02003474 exp = tick_add(resolution->last_valid, resolvers->hold.timeout);
3475 if (!tick_is_expired(exp, now_ms))
3476 break;
3477
3478 if (s->next_admin & SRV_ADMF_RMAINT)
3479 return 1;
3480 srv_set_admin_flag(s, SRV_ADMF_RMAINT, "DNS timeout status");
3481 return 0;
Baptiste Assmann3b9fe9f2016-11-02 22:58:18 +01003482
3483 case RSLV_STATUS_REFUSED:
3484 /* stop server if resolution is REFUSED for a long enough period */
Christopher Faulet67957bd2017-09-27 11:00:59 +02003485 exp = tick_add(resolution->last_valid, resolvers->hold.refused);
3486 if (!tick_is_expired(exp, now_ms))
3487 break;
3488
3489 if (s->next_admin & SRV_ADMF_RMAINT)
3490 return 1;
3491 srv_set_admin_flag(s, SRV_ADMF_RMAINT, "DNS refused status");
3492 return 0;
Baptiste Assmann3b9fe9f2016-11-02 22:58:18 +01003493
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003494 default:
Christopher Faulet67957bd2017-09-27 11:00:59 +02003495 /* stop server if resolution failed for a long enough period */
3496 exp = tick_add(resolution->last_valid, resolvers->hold.other);
3497 if (!tick_is_expired(exp, now_ms))
3498 break;
3499
3500 if (s->next_admin & SRV_ADMF_RMAINT)
3501 return 1;
3502 srv_set_admin_flag(s, SRV_ADMF_RMAINT, "unspecified DNS error");
3503 return 0;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003504 }
3505
3506 return 1;
3507}
3508
3509/*
3510 * Server Name Resolution valid response callback
3511 * It expects:
3512 * - <nameserver>: the name server which answered the valid response
3513 * - <response>: buffer containing a valid DNS response
3514 * - <response_len>: size of <response>
3515 * It performs the following actions:
3516 * - ignore response if current ip found and server family not met
3517 * - update with first new ip found if family is met and current IP is not found
3518 * returns:
3519 * 0 on error
3520 * 1 when no error or safe ignore
Olivier Houchard28381072017-11-06 17:30:28 +01003521 *
3522 * Must be called with server lock held
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003523 */
Emeric Brun08622d32020-12-23 17:41:43 +01003524int snr_resolution_cb(struct resolv_requester *requester, struct dns_counters *counters)
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003525{
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003526 struct server *s = NULL;
Emeric Brun08622d32020-12-23 17:41:43 +01003527 struct resolv_resolution *resolution = NULL;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003528 void *serverip, *firstip;
3529 short server_sin_family, firstip_sin_family;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003530 int ret;
Willy Tarreau83061a82018-07-13 11:56:34 +02003531 struct buffer *chk = get_trash_chunk();
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003532 int has_no_ip = 0;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003533
Christopher Faulet67957bd2017-09-27 11:00:59 +02003534 s = objt_server(requester->owner);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003535 if (!s)
3536 return 1;
3537
Christopher Faulet49531e82021-03-10 15:07:27 +01003538 if (s->srvrq) {
Emeric Brun0c4a8a32021-06-11 10:48:45 +02003539 /* If DNS resolution is disabled ignore it.
3540 * This is the case if the server was associated to
3541 * a SRV record and this record is now expired.
Christopher Faulet49531e82021-03-10 15:07:27 +01003542 */
Emeric Brun0c4a8a32021-06-11 10:48:45 +02003543 if (s->flags & SRV_F_NO_RESOLUTION)
Christopher Faulet49531e82021-03-10 15:07:27 +01003544 return 1;
3545 }
3546
Christopher Fauletd83a6df2021-03-12 10:23:05 +01003547 resolution = (s->resolv_requester ? s->resolv_requester->resolution : NULL);
Christopher Faulet49531e82021-03-10 15:07:27 +01003548 if (!resolution)
3549 return 1;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003550
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003551 /* initializing variables */
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003552 firstip = NULL; /* pointer to the first valid response found */
3553 /* it will be used as the new IP if a change is required */
3554 firstip_sin_family = AF_UNSPEC;
3555 serverip = NULL; /* current server IP address */
3556
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003557 /* initializing server IP pointer */
3558 server_sin_family = s->addr.ss_family;
3559 switch (server_sin_family) {
3560 case AF_INET:
3561 serverip = &((struct sockaddr_in *)&s->addr)->sin_addr.s_addr;
3562 break;
3563
3564 case AF_INET6:
3565 serverip = &((struct sockaddr_in6 *)&s->addr)->sin6_addr.s6_addr;
3566 break;
3567
Willy Tarreau3acfcd12017-01-06 19:18:32 +01003568 case AF_UNSPEC:
3569 break;
3570
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003571 default:
3572 goto invalid;
3573 }
3574
Emeric Brund30e9a12020-12-23 18:49:16 +01003575 ret = resolv_get_ip_from_response(&resolution->response, &s->resolv_opts,
3576 serverip, server_sin_family, &firstip,
3577 &firstip_sin_family, s);
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003578
3579 switch (ret) {
Emeric Brun456de772020-12-23 18:17:31 +01003580 case RSLV_UPD_NO:
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003581 goto update_status;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003582
Emeric Brun456de772020-12-23 18:17:31 +01003583 case RSLV_UPD_SRVIP_NOT_FOUND:
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003584 goto save_ip;
3585
Emeric Brun456de772020-12-23 18:17:31 +01003586 case RSLV_UPD_NO_IP_FOUND:
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003587 has_no_ip = 1;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003588 goto update_status;
Baptiste Assmann0453a1d2015-09-09 00:51:08 +02003589
Emeric Brun456de772020-12-23 18:17:31 +01003590 case RSLV_UPD_NAME_ERROR:
Baptiste Assmannfad03182015-10-28 02:03:32 +01003591 /* update resolution status to OTHER error type */
Christopher Faulet67957bd2017-09-27 11:00:59 +02003592 resolution->status = RSLV_STATUS_OTHER;
Christopher Fauletb142fb42021-06-24 15:33:52 +02003593 has_no_ip = 1;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003594 goto update_status;
Baptiste Assmannfad03182015-10-28 02:03:32 +01003595
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003596 default:
Christopher Fauletb142fb42021-06-24 15:33:52 +02003597 has_no_ip = 1;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003598 goto invalid;
3599
3600 }
3601
3602 save_ip:
Emeric Brun50c870e2021-01-04 10:40:46 +01003603 if (counters) {
3604 counters->update++;
Christopher Faulet67957bd2017-09-27 11:00:59 +02003605 /* save the first ip we found */
Emeric Brun50c870e2021-01-04 10:40:46 +01003606 chunk_printf(chk, "%s/%s", counters->pid, counters->id);
Christopher Faulet67957bd2017-09-27 11:00:59 +02003607 }
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003608 else
3609 chunk_printf(chk, "DNS cache");
Christopher Faulet69beaa92021-02-16 12:07:47 +01003610 srv_update_addr(s, firstip, firstip_sin_family, (char *) chk->area);
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003611
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003612 update_status:
Christopher Faulet7c129bb2021-06-24 15:26:03 +02003613 if (!snr_update_srv_status(s, has_no_ip) && has_no_ip)
3614 memset(&s->addr, 0, sizeof(s->addr));
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003615 return 1;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003616
3617 invalid:
Emeric Brun50c870e2021-01-04 10:40:46 +01003618 if (counters) {
3619 counters->invalid++;
Christopher Faulet67957bd2017-09-27 11:00:59 +02003620 goto update_status;
Christopher Faulet3bbd65b2017-09-15 11:55:45 +02003621 }
Christopher Fauletb142fb42021-06-24 15:33:52 +02003622 if (!snr_update_srv_status(s, has_no_ip) && has_no_ip)
3623 memset(&s->addr, 0, sizeof(s->addr));
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003624 return 0;
3625}
3626
3627/*
Baptiste Assmannb4badf72020-11-19 22:38:33 +01003628 * SRV record error management callback
3629 * returns:
Emeric Brun43839d02021-06-10 15:25:25 +02003630 * 0 if we can trash answser items.
3631 * 1 when safely ignored and we must kept answer items
Baptiste Assmannb4badf72020-11-19 22:38:33 +01003632 *
3633 * Grabs the server's lock.
3634 */
3635int srvrq_resolution_error_cb(struct resolv_requester *requester, int error_code)
3636{
Baptiste Assmannb4badf72020-11-19 22:38:33 +01003637 struct resolv_srvrq *srvrq;
3638 struct resolv_resolution *res;
3639 struct resolvers *resolvers;
3640 int exp;
3641
3642 /* SRV records */
3643 srvrq = objt_resolv_srvrq(requester->owner);
3644 if (!srvrq)
Emeric Brun43839d02021-06-10 15:25:25 +02003645 return 0;
Baptiste Assmannb4badf72020-11-19 22:38:33 +01003646
3647 resolvers = srvrq->resolvers;
3648 res = requester->resolution;
3649
3650 switch (res->status) {
3651
3652 case RSLV_STATUS_NX:
3653 /* stop server if resolution is NX for a long enough period */
3654 exp = tick_add(res->last_valid, resolvers->hold.nx);
3655 if (!tick_is_expired(exp, now_ms))
3656 return 1;
3657 break;
3658
3659 case RSLV_STATUS_TIMEOUT:
3660 /* stop server if resolution is TIMEOUT for a long enough period */
3661 exp = tick_add(res->last_valid, resolvers->hold.timeout);
3662 if (!tick_is_expired(exp, now_ms))
3663 return 1;
3664 break;
3665
3666 case RSLV_STATUS_REFUSED:
3667 /* stop server if resolution is REFUSED for a long enough period */
3668 exp = tick_add(res->last_valid, resolvers->hold.refused);
3669 if (!tick_is_expired(exp, now_ms))
3670 return 1;
3671 break;
3672
3673 default:
3674 /* stop server if resolution failed for a long enough period */
3675 exp = tick_add(res->last_valid, resolvers->hold.other);
3676 if (!tick_is_expired(exp, now_ms))
3677 return 1;
3678 }
3679
Emeric Brun0c4a8a32021-06-11 10:48:45 +02003680 /* Remove any associated server ref */
Willy Tarreau33360872021-10-20 14:07:31 +02003681 resolv_detach_from_resolution_answer_items(res, requester);
Baptiste Assmannb4badf72020-11-19 22:38:33 +01003682
Emeric Brun43839d02021-06-10 15:25:25 +02003683 return 0;
Baptiste Assmannb4badf72020-11-19 22:38:33 +01003684}
3685
3686/*
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003687 * Server Name Resolution error management callback
3688 * returns:
Emeric Brun43839d02021-06-10 15:25:25 +02003689 * 0 if we can trash answser items.
3690 * 1 when safely ignored and we must kept answer items
Willy Tarreau46b7f532018-08-21 11:54:26 +02003691 *
3692 * Grabs the server's lock.
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003693 */
Emeric Brun08622d32020-12-23 17:41:43 +01003694int snr_resolution_error_cb(struct resolv_requester *requester, int error_code)
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003695{
Christopher Faulet67957bd2017-09-27 11:00:59 +02003696 struct server *s;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003697
Christopher Faulet67957bd2017-09-27 11:00:59 +02003698 s = objt_server(requester->owner);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003699 if (!s)
Emeric Brun43839d02021-06-10 15:25:25 +02003700 return 0;
3701
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003702 HA_SPIN_LOCK(SERVER_LOCK, &s->lock);
Emeric Brun43839d02021-06-10 15:25:25 +02003703 if (!snr_update_srv_status(s, 1)) {
Christopher Faulet5130c212021-03-10 20:31:40 +01003704 memset(&s->addr, 0, sizeof(s->addr));
Emeric Brun43839d02021-06-10 15:25:25 +02003705 HA_SPIN_UNLOCK(SERVER_LOCK, &s->lock);
Willy Tarreau33360872021-10-20 14:07:31 +02003706 resolv_detach_from_resolution_answer_items(requester->resolution, requester);
Emeric Brun43839d02021-06-10 15:25:25 +02003707 return 0;
3708 }
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003709 HA_SPIN_UNLOCK(SERVER_LOCK, &s->lock);
Emeric Brun43839d02021-06-10 15:25:25 +02003710
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003711 return 1;
3712}
3713
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003714/*
3715 * Function to check if <ip> is already affected to a server in the backend
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003716 * which owns <srv> and is up.
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003717 * It returns a pointer to the first server found or NULL if <ip> is not yet
3718 * assigned.
Olivier Houchard28381072017-11-06 17:30:28 +01003719 *
3720 * Must be called with server lock held
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003721 */
3722struct server *snr_check_ip_callback(struct server *srv, void *ip, unsigned char *ip_family)
3723{
3724 struct server *tmpsrv;
3725 struct proxy *be;
3726
3727 if (!srv)
3728 return NULL;
3729
3730 be = srv->proxy;
3731 for (tmpsrv = be->srv; tmpsrv; tmpsrv = tmpsrv->next) {
Emeric Brune9fd6b52017-11-02 17:20:39 +01003732 /* we found the current server is the same, ignore it */
3733 if (srv == tmpsrv)
3734 continue;
3735
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003736 /* We want to compare the IP in the record with the IP of the servers in the
3737 * same backend, only if:
3738 * * DNS resolution is enabled on the server
3739 * * the hostname used for the resolution by our server is the same than the
3740 * one used for the server found in the backend
3741 * * the server found in the backend is not our current server
3742 */
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003743 HA_SPIN_LOCK(SERVER_LOCK, &tmpsrv->lock);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003744 if ((tmpsrv->hostname_dn == NULL) ||
3745 (srv->hostname_dn_len != tmpsrv->hostname_dn_len) ||
Christopher Faulet59b29252021-03-16 11:21:04 +01003746 (strcasecmp(srv->hostname_dn, tmpsrv->hostname_dn) != 0) ||
Emeric Brune9fd6b52017-11-02 17:20:39 +01003747 (srv->puid == tmpsrv->puid)) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003748 HA_SPIN_UNLOCK(SERVER_LOCK, &tmpsrv->lock);
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003749 continue;
Emeric Brune9fd6b52017-11-02 17:20:39 +01003750 }
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003751
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003752 /* If the server has been taken down, don't consider it */
Emeric Brune9fd6b52017-11-02 17:20:39 +01003753 if (tmpsrv->next_admin & SRV_ADMF_RMAINT) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003754 HA_SPIN_UNLOCK(SERVER_LOCK, &tmpsrv->lock);
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003755 continue;
Emeric Brune9fd6b52017-11-02 17:20:39 +01003756 }
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003757
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003758 /* At this point, we have 2 different servers using the same DNS hostname
3759 * for their respective resolution.
3760 */
3761 if (*ip_family == tmpsrv->addr.ss_family &&
3762 ((tmpsrv->addr.ss_family == AF_INET &&
3763 memcmp(ip, &((struct sockaddr_in *)&tmpsrv->addr)->sin_addr, 4) == 0) ||
3764 (tmpsrv->addr.ss_family == AF_INET6 &&
3765 memcmp(ip, &((struct sockaddr_in6 *)&tmpsrv->addr)->sin6_addr, 16) == 0))) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003766 HA_SPIN_UNLOCK(SERVER_LOCK, &tmpsrv->lock);
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003767 return tmpsrv;
3768 }
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003769 HA_SPIN_UNLOCK(SERVER_LOCK, &tmpsrv->lock);
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003770 }
3771
Emeric Brune9fd6b52017-11-02 17:20:39 +01003772
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003773 return NULL;
3774}
3775
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01003776/* Sets the server's address (srv->addr) from srv->hostname using the libc's
3777 * resolver. This is suited for initial address configuration. Returns 0 on
3778 * success otherwise a non-zero error code. In case of error, *err_code, if
3779 * not NULL, is filled up.
3780 */
3781int srv_set_addr_via_libc(struct server *srv, int *err_code)
3782{
3783 if (str2ip2(srv->hostname, &srv->addr, 1) == NULL) {
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01003784 if (err_code)
Willy Tarreau465b6e52016-11-07 19:19:22 +01003785 *err_code |= ERR_WARN;
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01003786 return 1;
3787 }
3788 return 0;
3789}
3790
Frédéric Lécailleb418c122017-04-26 11:24:02 +02003791/* Set the server's FDQN (->hostname) from <hostname>.
3792 * Returns -1 if failed, 0 if not.
Willy Tarreau46b7f532018-08-21 11:54:26 +02003793 *
3794 * Must be called with the server lock held.
Frédéric Lécailleb418c122017-04-26 11:24:02 +02003795 */
Emeric Brun08622d32020-12-23 17:41:43 +01003796int srv_set_fqdn(struct server *srv, const char *hostname, int resolv_locked)
Frédéric Lécailleb418c122017-04-26 11:24:02 +02003797{
Emeric Brun08622d32020-12-23 17:41:43 +01003798 struct resolv_resolution *resolution;
Christopher Faulet67957bd2017-09-27 11:00:59 +02003799 char *hostname_dn;
3800 int hostname_len, hostname_dn_len;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003801
Frédéric Lécaille5afb3cf2018-08-21 15:04:23 +02003802 /* Note that the server lock is already held. */
3803 if (!srv->resolvers)
3804 return -1;
3805
Emeric Brun08622d32020-12-23 17:41:43 +01003806 if (!resolv_locked)
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003807 HA_SPIN_LOCK(DNS_LOCK, &srv->resolvers->lock);
Christopher Fauletd83a6df2021-03-12 10:23:05 +01003808 /* run time DNS/SRV resolution was not active for this server
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003809 * and we can't enable it at run time for now.
3810 */
Christopher Fauletd83a6df2021-03-12 10:23:05 +01003811 if (!srv->resolv_requester && !srv->srvrq)
Christopher Fauletb2812a62017-10-04 16:17:58 +02003812 goto err;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003813
3814 chunk_reset(&trash);
Christopher Faulet67957bd2017-09-27 11:00:59 +02003815 hostname_len = strlen(hostname);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003816 hostname_dn = trash.area;
Willy Tarreauc1c765f2021-10-14 07:49:49 +02003817 hostname_dn_len = resolv_str_to_dn_label(hostname, hostname_len,
Emeric Brund30e9a12020-12-23 18:49:16 +01003818 hostname_dn, trash.size);
Christopher Faulet67957bd2017-09-27 11:00:59 +02003819 if (hostname_dn_len == -1)
Christopher Fauletb2812a62017-10-04 16:17:58 +02003820 goto err;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003821
Christopher Fauletd83a6df2021-03-12 10:23:05 +01003822 resolution = (srv->resolv_requester ? srv->resolv_requester->resolution : NULL);
Christopher Faulet67957bd2017-09-27 11:00:59 +02003823 if (resolution &&
3824 resolution->hostname_dn &&
Christopher Faulet59b29252021-03-16 11:21:04 +01003825 resolution->hostname_dn_len == hostname_dn_len &&
3826 strcasecmp(resolution->hostname_dn, hostname_dn) == 0)
Christopher Fauletb2812a62017-10-04 16:17:58 +02003827 goto end;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003828
Willy Tarreau33360872021-10-20 14:07:31 +02003829 resolv_unlink_resolution(srv->resolv_requester);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003830
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003831 free(srv->hostname);
3832 free(srv->hostname_dn);
Christopher Faulet67957bd2017-09-27 11:00:59 +02003833 srv->hostname = strdup(hostname);
3834 srv->hostname_dn = strdup(hostname_dn);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003835 srv->hostname_dn_len = hostname_dn_len;
3836 if (!srv->hostname || !srv->hostname_dn)
Christopher Fauletb2812a62017-10-04 16:17:58 +02003837 goto err;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003838
Baptiste Assmann13a92322019-06-07 09:40:55 +02003839 if (srv->flags & SRV_F_NO_RESOLUTION)
3840 goto end;
3841
Emeric Brund30e9a12020-12-23 18:49:16 +01003842 if (resolv_link_resolution(srv, OBJ_TYPE_SERVER, 1) == -1)
Christopher Fauletb2812a62017-10-04 16:17:58 +02003843 goto err;
3844
3845 end:
Emeric Brun08622d32020-12-23 17:41:43 +01003846 if (!resolv_locked)
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003847 HA_SPIN_UNLOCK(DNS_LOCK, &srv->resolvers->lock);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003848 return 0;
Christopher Fauletb2812a62017-10-04 16:17:58 +02003849
3850 err:
Emeric Brun08622d32020-12-23 17:41:43 +01003851 if (!resolv_locked)
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003852 HA_SPIN_UNLOCK(DNS_LOCK, &srv->resolvers->lock);
Christopher Fauletb2812a62017-10-04 16:17:58 +02003853 return -1;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02003854}
3855
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01003856/* Sets the server's address (srv->addr) from srv->lastaddr which was filled
3857 * from the state file. This is suited for initial address configuration.
3858 * Returns 0 on success otherwise a non-zero error code. In case of error,
3859 * *err_code, if not NULL, is filled up.
3860 */
3861static int srv_apply_lastaddr(struct server *srv, int *err_code)
3862{
3863 if (!str2ip2(srv->lastaddr, &srv->addr, 0)) {
3864 if (err_code)
3865 *err_code |= ERR_WARN;
3866 return 1;
3867 }
3868 return 0;
3869}
3870
Willy Tarreau25e51522016-11-04 15:10:17 +01003871/* returns 0 if no error, otherwise a combination of ERR_* flags */
3872static int srv_iterate_initaddr(struct server *srv)
3873{
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01003874 char *name = srv->hostname;
Willy Tarreau25e51522016-11-04 15:10:17 +01003875 int return_code = 0;
3876 int err_code;
3877 unsigned int methods;
3878
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01003879 /* If no addr and no hostname set, get the name from the DNS SRV request */
3880 if (!name && srv->srvrq)
3881 name = srv->srvrq->name;
3882
Willy Tarreau25e51522016-11-04 15:10:17 +01003883 methods = srv->init_addr_methods;
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01003884 if (!methods) {
3885 /* otherwise default to "last,libc" */
Willy Tarreau25e51522016-11-04 15:10:17 +01003886 srv_append_initaddr(&methods, SRV_IADDR_LAST);
3887 srv_append_initaddr(&methods, SRV_IADDR_LIBC);
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01003888 if (srv->resolvers_id) {
3889 /* dns resolution is configured, add "none" to not fail on startup */
3890 srv_append_initaddr(&methods, SRV_IADDR_NONE);
3891 }
Willy Tarreau25e51522016-11-04 15:10:17 +01003892 }
3893
Willy Tarreau3eed10e2016-11-07 21:03:16 +01003894 /* "-dr" : always append "none" so that server addresses resolution
3895 * failures are silently ignored, this is convenient to validate some
3896 * configs out of their environment.
3897 */
3898 if (global.tune.options & GTUNE_RESOLVE_DONTFAIL)
3899 srv_append_initaddr(&methods, SRV_IADDR_NONE);
3900
Willy Tarreau25e51522016-11-04 15:10:17 +01003901 while (methods) {
3902 err_code = 0;
3903 switch (srv_get_next_initaddr(&methods)) {
3904 case SRV_IADDR_LAST:
3905 if (!srv->lastaddr)
3906 continue;
3907 if (srv_apply_lastaddr(srv, &err_code) == 0)
Olivier Houchard4e694042017-03-14 20:01:29 +01003908 goto out;
Willy Tarreau25e51522016-11-04 15:10:17 +01003909 return_code |= err_code;
3910 break;
3911
3912 case SRV_IADDR_LIBC:
3913 if (!srv->hostname)
3914 continue;
3915 if (srv_set_addr_via_libc(srv, &err_code) == 0)
Olivier Houchard4e694042017-03-14 20:01:29 +01003916 goto out;
Willy Tarreau25e51522016-11-04 15:10:17 +01003917 return_code |= err_code;
3918 break;
3919
Willy Tarreau37ebe122016-11-04 15:17:58 +01003920 case SRV_IADDR_NONE:
3921 srv_set_admin_flag(srv, SRV_ADMF_RMAINT, NULL);
Willy Tarreau465b6e52016-11-07 19:19:22 +01003922 if (return_code) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003923 ha_warning("parsing [%s:%d] : 'server %s' : could not resolve address '%s', disabling server.\n",
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01003924 srv->conf.file, srv->conf.line, srv->id, name);
Willy Tarreau465b6e52016-11-07 19:19:22 +01003925 }
Willy Tarreau37ebe122016-11-04 15:17:58 +01003926 return return_code;
3927
Willy Tarreau4310d362016-11-02 15:05:56 +01003928 case SRV_IADDR_IP:
3929 ipcpy(&srv->init_addr, &srv->addr);
3930 if (return_code) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003931 ha_warning("parsing [%s:%d] : 'server %s' : could not resolve address '%s', falling back to configured address.\n",
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01003932 srv->conf.file, srv->conf.line, srv->id, name);
Willy Tarreau4310d362016-11-02 15:05:56 +01003933 }
Olivier Houchard4e694042017-03-14 20:01:29 +01003934 goto out;
Willy Tarreau4310d362016-11-02 15:05:56 +01003935
Willy Tarreau25e51522016-11-04 15:10:17 +01003936 default: /* unhandled method */
3937 break;
3938 }
3939 }
3940
3941 if (!return_code) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003942 ha_alert("parsing [%s:%d] : 'server %s' : no method found to resolve address '%s'\n",
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01003943 srv->conf.file, srv->conf.line, srv->id, name);
Willy Tarreau25e51522016-11-04 15:10:17 +01003944 }
Willy Tarreau465b6e52016-11-07 19:19:22 +01003945 else {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003946 ha_alert("parsing [%s:%d] : 'server %s' : could not resolve address '%s'.\n",
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01003947 srv->conf.file, srv->conf.line, srv->id, name);
Willy Tarreau465b6e52016-11-07 19:19:22 +01003948 }
Willy Tarreau25e51522016-11-04 15:10:17 +01003949
3950 return_code |= ERR_ALERT | ERR_FATAL;
3951 return return_code;
Olivier Houchard4e694042017-03-14 20:01:29 +01003952out:
3953 srv_set_dyncookie(srv);
Amaury Denoyelle2f70bb52021-06-08 15:19:51 +02003954 srv_set_addr_desc(srv, 1);
Olivier Houchard4e694042017-03-14 20:01:29 +01003955 return return_code;
Willy Tarreau25e51522016-11-04 15:10:17 +01003956}
3957
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01003958/*
3959 * This function parses all backends and all servers within each backend
3960 * and performs servers' addr resolution based on information provided by:
3961 * - configuration file
3962 * - server-state file (states provided by an 'old' haproxy process)
3963 *
3964 * Returns 0 if no error, otherwise, a combination of ERR_ flags.
3965 */
3966int srv_init_addr(void)
3967{
3968 struct proxy *curproxy;
3969 int return_code = 0;
3970
Olivier Houchardfbc74e82017-11-24 16:54:05 +01003971 curproxy = proxies_list;
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01003972 while (curproxy) {
3973 struct server *srv;
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01003974
3975 /* servers are in backend only */
Amaury Denoyellee3c41922021-01-06 14:28:50 +01003976 if (!(curproxy->cap & PR_CAP_BE) || curproxy->disabled)
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01003977 goto srv_init_addr_next;
3978
Willy Tarreau25e51522016-11-04 15:10:17 +01003979 for (srv = curproxy->srv; srv; srv = srv->next)
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01003980 if (srv->hostname || srv->srvrq)
Willy Tarreau3d609a72017-09-06 14:22:45 +02003981 return_code |= srv_iterate_initaddr(srv);
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01003982
3983 srv_init_addr_next:
3984 curproxy = curproxy->next;
3985 }
3986
3987 return return_code;
3988}
3989
Willy Tarreau46b7f532018-08-21 11:54:26 +02003990/*
3991 * Must be called with the server lock held.
3992 */
Christopher Faulet69beaa92021-02-16 12:07:47 +01003993const char *srv_update_fqdn(struct server *server, const char *fqdn, const char *updater, int resolv_locked)
Frédéric Lécailleb418c122017-04-26 11:24:02 +02003994{
3995
Willy Tarreau83061a82018-07-13 11:56:34 +02003996 struct buffer *msg;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02003997
3998 msg = get_trash_chunk();
3999 chunk_reset(msg);
4000
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01004001 if (server->hostname && strcmp(fqdn, server->hostname) == 0) {
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004002 chunk_appendf(msg, "no need to change the FDQN");
4003 goto out;
4004 }
4005
4006 if (strlen(fqdn) > DNS_MAX_NAME_SIZE || invalid_domainchar(fqdn)) {
4007 chunk_appendf(msg, "invalid fqdn '%s'", fqdn);
4008 goto out;
4009 }
4010
4011 chunk_appendf(msg, "%s/%s changed its FQDN from %s to %s",
4012 server->proxy->id, server->id, server->hostname, fqdn);
4013
Emeric Brun08622d32020-12-23 17:41:43 +01004014 if (srv_set_fqdn(server, fqdn, resolv_locked) < 0) {
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004015 chunk_reset(msg);
4016 chunk_appendf(msg, "could not update %s/%s FQDN",
4017 server->proxy->id, server->id);
4018 goto out;
4019 }
4020
4021 /* Flag as FQDN set from stats socket. */
Emeric Brun52a91d32017-08-31 14:41:55 +02004022 server->next_admin |= SRV_ADMF_HMAINT;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004023
4024 out:
4025 if (updater)
4026 chunk_appendf(msg, " by '%s'", updater);
4027 chunk_appendf(msg, "\n");
4028
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004029 return msg->area;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004030}
4031
4032
Willy Tarreau21b069d2016-11-23 17:15:08 +01004033/* Expects to find a backend and a server in <arg> under the form <backend>/<server>,
4034 * and returns the pointer to the server. Otherwise, display adequate error messages
Willy Tarreau3b6e5472016-11-24 15:53:53 +01004035 * on the CLI, sets the CLI's state to CLI_ST_PRINT and returns NULL. This is only
Willy Tarreau21b069d2016-11-23 17:15:08 +01004036 * used for CLI commands requiring a server name.
4037 * Important: the <arg> is modified to remove the '/'.
4038 */
4039struct server *cli_find_server(struct appctx *appctx, char *arg)
4040{
4041 struct proxy *px;
4042 struct server *sv;
4043 char *line;
4044
4045 /* split "backend/server" and make <line> point to server */
4046 for (line = arg; *line; line++)
4047 if (*line == '/') {
4048 *line++ = '\0';
4049 break;
4050 }
4051
4052 if (!*line || !*arg) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004053 cli_err(appctx, "Require 'backend/server'.\n");
Willy Tarreau21b069d2016-11-23 17:15:08 +01004054 return NULL;
4055 }
4056
4057 if (!get_backend_server(arg, line, &px, &sv)) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004058 cli_err(appctx, px ? "No such server.\n" : "No such backend.\n");
Willy Tarreau21b069d2016-11-23 17:15:08 +01004059 return NULL;
4060 }
4061
Willy Tarreauc3914d42020-09-24 08:39:22 +02004062 if (px->disabled) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004063 cli_err(appctx, "Proxy is disabled.\n");
Willy Tarreau21b069d2016-11-23 17:15:08 +01004064 return NULL;
4065 }
4066
4067 return sv;
4068}
4069
William Lallemand222baf22016-11-19 02:00:33 +01004070
Willy Tarreau46b7f532018-08-21 11:54:26 +02004071/* grabs the server lock */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004072static int cli_parse_set_server(char **args, char *payload, struct appctx *appctx, void *private)
William Lallemand222baf22016-11-19 02:00:33 +01004073{
4074 struct server *sv;
4075 const char *warning;
4076
4077 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4078 return 1;
4079
4080 sv = cli_find_server(appctx, args[2]);
4081 if (!sv)
4082 return 1;
4083
4084 if (strcmp(args[3], "weight") == 0) {
Christopher Faulet77df12c2021-06-15 12:01:29 +02004085 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
William Lallemand222baf22016-11-19 02:00:33 +01004086 warning = server_parse_weight_change_request(sv, args[4]);
Christopher Faulet77df12c2021-06-15 12:01:29 +02004087 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau9d008692019-08-09 11:21:01 +02004088 if (warning)
4089 cli_err(appctx, warning);
William Lallemand222baf22016-11-19 02:00:33 +01004090 }
4091 else if (strcmp(args[3], "state") == 0) {
Christopher Faulet77df12c2021-06-15 12:01:29 +02004092 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
William Lallemand222baf22016-11-19 02:00:33 +01004093 if (strcmp(args[4], "ready") == 0)
4094 srv_adm_set_ready(sv);
4095 else if (strcmp(args[4], "drain") == 0)
4096 srv_adm_set_drain(sv);
4097 else if (strcmp(args[4], "maint") == 0)
4098 srv_adm_set_maint(sv);
Willy Tarreau9d008692019-08-09 11:21:01 +02004099 else
4100 cli_err(appctx, "'set server <srv> state' expects 'ready', 'drain' and 'maint'.\n");
Christopher Faulet77df12c2021-06-15 12:01:29 +02004101 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
William Lallemand222baf22016-11-19 02:00:33 +01004102 }
4103 else if (strcmp(args[3], "health") == 0) {
Christopher Faulet77df12c2021-06-15 12:01:29 +02004104 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau9d008692019-08-09 11:21:01 +02004105 if (sv->track)
4106 cli_err(appctx, "cannot change health on a tracking server.\n");
William Lallemand222baf22016-11-19 02:00:33 +01004107 else if (strcmp(args[4], "up") == 0) {
4108 sv->check.health = sv->check.rise + sv->check.fall - 1;
Emeric Brun5a133512017-10-19 14:42:30 +02004109 srv_set_running(sv, "changed from CLI", NULL);
William Lallemand222baf22016-11-19 02:00:33 +01004110 }
4111 else if (strcmp(args[4], "stopping") == 0) {
4112 sv->check.health = sv->check.rise + sv->check.fall - 1;
Emeric Brun5a133512017-10-19 14:42:30 +02004113 srv_set_stopping(sv, "changed from CLI", NULL);
William Lallemand222baf22016-11-19 02:00:33 +01004114 }
4115 else if (strcmp(args[4], "down") == 0) {
4116 sv->check.health = 0;
Emeric Brun5a133512017-10-19 14:42:30 +02004117 srv_set_stopped(sv, "changed from CLI", NULL);
William Lallemand222baf22016-11-19 02:00:33 +01004118 }
Willy Tarreau9d008692019-08-09 11:21:01 +02004119 else
4120 cli_err(appctx, "'set server <srv> health' expects 'up', 'stopping', or 'down'.\n");
Christopher Faulet77df12c2021-06-15 12:01:29 +02004121 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
William Lallemand222baf22016-11-19 02:00:33 +01004122 }
4123 else if (strcmp(args[3], "agent") == 0) {
Christopher Faulet77df12c2021-06-15 12:01:29 +02004124 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau9d008692019-08-09 11:21:01 +02004125 if (!(sv->agent.state & CHK_ST_ENABLED))
4126 cli_err(appctx, "agent checks are not enabled on this server.\n");
William Lallemand222baf22016-11-19 02:00:33 +01004127 else if (strcmp(args[4], "up") == 0) {
4128 sv->agent.health = sv->agent.rise + sv->agent.fall - 1;
Emeric Brun5a133512017-10-19 14:42:30 +02004129 srv_set_running(sv, "changed from CLI", NULL);
William Lallemand222baf22016-11-19 02:00:33 +01004130 }
4131 else if (strcmp(args[4], "down") == 0) {
4132 sv->agent.health = 0;
Emeric Brun5a133512017-10-19 14:42:30 +02004133 srv_set_stopped(sv, "changed from CLI", NULL);
William Lallemand222baf22016-11-19 02:00:33 +01004134 }
Willy Tarreau9d008692019-08-09 11:21:01 +02004135 else
4136 cli_err(appctx, "'set server <srv> agent' expects 'up' or 'down'.\n");
Christopher Faulet77df12c2021-06-15 12:01:29 +02004137 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
William Lallemand222baf22016-11-19 02:00:33 +01004138 }
Misiek2da082d2017-01-09 09:40:42 +01004139 else if (strcmp(args[3], "agent-addr") == 0) {
William Dauchy7cabc062021-02-11 22:51:24 +01004140 char *addr = NULL;
4141 char *port = NULL;
4142 if (strlen(args[4]) == 0) {
4143 cli_err(appctx, "set server <b>/<s> agent-addr requires"
4144 " an address and optionally a port.\n");
Christopher Faulet77df12c2021-06-15 12:01:29 +02004145 goto out;
William Dauchy7cabc062021-02-11 22:51:24 +01004146 }
4147 addr = args[4];
4148 if (strcmp(args[5], "port") == 0)
4149 port = args[6];
Christopher Faulet77df12c2021-06-15 12:01:29 +02004150 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Christopher Faulet69beaa92021-02-16 12:07:47 +01004151 warning = srv_update_agent_addr_port(sv, addr, port);
Christopher Faulet77df12c2021-06-15 12:01:29 +02004152 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
William Dauchy7cabc062021-02-11 22:51:24 +01004153 if (warning)
4154 cli_msg(appctx, LOG_WARNING, warning);
4155 }
4156 else if (strcmp(args[3], "agent-port") == 0) {
4157 char *port = NULL;
4158 if (strlen(args[4]) == 0) {
4159 cli_err(appctx, "set server <b>/<s> agent-port requires"
4160 " a port.\n");
Christopher Faulet77df12c2021-06-15 12:01:29 +02004161 goto out;
William Dauchy7cabc062021-02-11 22:51:24 +01004162 }
4163 port = args[4];
Christopher Faulet77df12c2021-06-15 12:01:29 +02004164 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Christopher Faulet69beaa92021-02-16 12:07:47 +01004165 warning = srv_update_agent_addr_port(sv, NULL, port);
Christopher Faulet77df12c2021-06-15 12:01:29 +02004166 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
William Dauchy7cabc062021-02-11 22:51:24 +01004167 if (warning)
4168 cli_msg(appctx, LOG_WARNING, warning);
Misiek2da082d2017-01-09 09:40:42 +01004169 }
4170 else if (strcmp(args[3], "agent-send") == 0) {
Christopher Faulet88fca372021-06-18 08:47:14 +02004171 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau9d008692019-08-09 11:21:01 +02004172 if (!(sv->agent.state & CHK_ST_ENABLED))
4173 cli_err(appctx, "agent checks are not enabled on this server.\n");
4174 else {
Christopher Faulet0ae3d1d2020-04-06 17:54:24 +02004175 if (!set_srv_agent_send(sv, args[4]))
Willy Tarreau9d008692019-08-09 11:21:01 +02004176 cli_err(appctx, "cannot allocate memory for new string.\n");
Misiek2da082d2017-01-09 09:40:42 +01004177 }
Christopher Faulet88fca372021-06-18 08:47:14 +02004178 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
Misiek2da082d2017-01-09 09:40:42 +01004179 }
William Dauchyb456e1f2021-02-11 22:51:23 +01004180 else if (strcmp(args[3], "check-addr") == 0) {
4181 char *addr = NULL;
4182 char *port = NULL;
4183 if (strlen(args[4]) == 0) {
4184 cli_err(appctx, "set server <b>/<s> check-addr requires"
4185 " an address and optionally a port.\n");
Christopher Faulet77df12c2021-06-15 12:01:29 +02004186 goto out;
William Lallemand222baf22016-11-19 02:00:33 +01004187 }
William Dauchyb456e1f2021-02-11 22:51:23 +01004188 addr = args[4];
4189 if (strcmp(args[5], "port") == 0)
4190 port = args[6];
Christopher Faulet77df12c2021-06-15 12:01:29 +02004191 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Christopher Faulet69beaa92021-02-16 12:07:47 +01004192 warning = srv_update_check_addr_port(sv, addr, port);
Christopher Faulet77df12c2021-06-15 12:01:29 +02004193 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
William Dauchyb456e1f2021-02-11 22:51:23 +01004194 if (warning)
4195 cli_msg(appctx, LOG_WARNING, warning);
4196 }
4197 else if (strcmp(args[3], "check-port") == 0) {
4198 char *port = NULL;
4199 if (strlen(args[4]) == 0) {
4200 cli_err(appctx, "set server <b>/<s> check-port requires"
4201 " a port.\n");
Christopher Faulet77df12c2021-06-15 12:01:29 +02004202 goto out;
William Lallemand222baf22016-11-19 02:00:33 +01004203 }
William Dauchyb456e1f2021-02-11 22:51:23 +01004204 port = args[4];
Christopher Faulet77df12c2021-06-15 12:01:29 +02004205 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Christopher Faulet69beaa92021-02-16 12:07:47 +01004206 warning = srv_update_check_addr_port(sv, NULL, port);
Christopher Faulet77df12c2021-06-15 12:01:29 +02004207 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
William Dauchyb456e1f2021-02-11 22:51:23 +01004208 if (warning)
4209 cli_msg(appctx, LOG_WARNING, warning);
William Lallemand222baf22016-11-19 02:00:33 +01004210 }
4211 else if (strcmp(args[3], "addr") == 0) {
4212 char *addr = NULL;
4213 char *port = NULL;
4214 if (strlen(args[4]) == 0) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004215 cli_err(appctx, "set server <b>/<s> addr requires an address and optionally a port.\n");
Christopher Faulet77df12c2021-06-15 12:01:29 +02004216 goto out;
William Lallemand222baf22016-11-19 02:00:33 +01004217 }
4218 else {
4219 addr = args[4];
4220 }
4221 if (strcmp(args[5], "port") == 0) {
4222 port = args[6];
4223 }
Christopher Faulet77df12c2021-06-15 12:01:29 +02004224 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Christopher Faulet69beaa92021-02-16 12:07:47 +01004225 warning = srv_update_addr_port(sv, addr, port, "stats socket command");
Willy Tarreau9d008692019-08-09 11:21:01 +02004226 if (warning)
4227 cli_msg(appctx, LOG_WARNING, warning);
William Lallemand222baf22016-11-19 02:00:33 +01004228 srv_clr_admin_flag(sv, SRV_ADMF_RMAINT);
Christopher Faulet77df12c2021-06-15 12:01:29 +02004229 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
William Lallemand222baf22016-11-19 02:00:33 +01004230 }
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004231 else if (strcmp(args[3], "fqdn") == 0) {
4232 if (!*args[4]) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004233 cli_err(appctx, "set server <b>/<s> fqdn requires a FQDN.\n");
Christopher Faulet77df12c2021-06-15 12:01:29 +02004234 goto out;
4235 }
4236 if (!sv->resolvers) {
4237 cli_err(appctx, "set server <b>/<s> fqdn failed because no resolution is configured.\n");
4238 goto out;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004239 }
Christopher Faulet5b04f462021-06-15 11:37:40 +02004240 if (sv->srvrq) {
4241 cli_err(appctx, "set server <b>/<s> fqdn failed because SRV resolution is configured.\n");
Christopher Faulet77df12c2021-06-15 12:01:29 +02004242 goto out;
Christopher Faulet5b04f462021-06-15 11:37:40 +02004243 }
Christopher Faulet77df12c2021-06-15 12:01:29 +02004244 HA_SPIN_LOCK(DNS_LOCK, &sv->resolvers->lock);
4245 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Baptiste Assmann13a92322019-06-07 09:40:55 +02004246 /* ensure runtime resolver will process this new fqdn */
4247 if (sv->flags & SRV_F_NO_RESOLUTION) {
4248 sv->flags &= ~SRV_F_NO_RESOLUTION;
4249 }
Christopher Faulet77df12c2021-06-15 12:01:29 +02004250 warning = srv_update_fqdn(sv, args[4], "stats socket command", 1);
Christopher Faulet88fca372021-06-18 08:47:14 +02004251 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
Christopher Faulet77df12c2021-06-15 12:01:29 +02004252 HA_SPIN_UNLOCK(DNS_LOCK, &sv->resolvers->lock);
Willy Tarreau9d008692019-08-09 11:21:01 +02004253 if (warning)
4254 cli_msg(appctx, LOG_WARNING, warning);
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004255 }
William Dauchyf6370442020-11-14 19:25:33 +01004256 else if (strcmp(args[3], "ssl") == 0) {
4257#ifdef USE_OPENSSL
4258 if (sv->ssl_ctx.ctx == NULL) {
4259 cli_err(appctx, "'set server <srv> ssl' cannot be set. "
4260 " default-server should define ssl settings\n");
Christopher Faulet77df12c2021-06-15 12:01:29 +02004261 goto out;
4262 }
4263
4264 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
4265 if (strcmp(args[4], "on") == 0) {
William Dauchyf6370442020-11-14 19:25:33 +01004266 ssl_sock_set_srv(sv, 1);
4267 } else if (strcmp(args[4], "off") == 0) {
4268 ssl_sock_set_srv(sv, 0);
4269 } else {
Christopher Faulet77df12c2021-06-15 12:01:29 +02004270 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
William Dauchyf6370442020-11-14 19:25:33 +01004271 cli_err(appctx, "'set server <srv> ssl' expects 'on' or 'off'.\n");
Christopher Faulet77df12c2021-06-15 12:01:29 +02004272 goto out;
William Dauchyf6370442020-11-14 19:25:33 +01004273 }
4274 srv_cleanup_connections(sv);
Christopher Faulet77df12c2021-06-15 12:01:29 +02004275 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
William Dauchyf6370442020-11-14 19:25:33 +01004276 cli_msg(appctx, LOG_NOTICE, "server ssl setting updated.\n");
4277#else
4278 cli_msg(appctx, LOG_NOTICE, "server ssl setting not supported.\n");
4279#endif
4280 } else {
Willy Tarreau9d008692019-08-09 11:21:01 +02004281 cli_err(appctx,
William Dauchy3f4ec7d2021-02-15 17:22:16 +01004282 "usage: set server <backend>/<server> "
4283 "addr | agent | agent-addr | agent-port | agent-send | "
4284 "check-addr | check-port | fqdn | health | ssl | "
4285 "state | weight\n");
William Lallemand222baf22016-11-19 02:00:33 +01004286 }
Christopher Faulet77df12c2021-06-15 12:01:29 +02004287 out:
William Lallemand222baf22016-11-19 02:00:33 +01004288 return 1;
4289}
4290
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004291static int cli_parse_get_weight(char **args, char *payload, struct appctx *appctx, void *private)
William Lallemand6b160942016-11-22 12:34:35 +01004292{
4293 struct stream_interface *si = appctx->owner;
4294 struct proxy *px;
4295 struct server *sv;
4296 char *line;
4297
4298
4299 /* split "backend/server" and make <line> point to server */
4300 for (line = args[2]; *line; line++)
4301 if (*line == '/') {
4302 *line++ = '\0';
4303 break;
4304 }
4305
Willy Tarreau9d008692019-08-09 11:21:01 +02004306 if (!*line)
4307 return cli_err(appctx, "Require 'backend/server'.\n");
William Lallemand6b160942016-11-22 12:34:35 +01004308
Willy Tarreau9d008692019-08-09 11:21:01 +02004309 if (!get_backend_server(args[2], line, &px, &sv))
4310 return cli_err(appctx, px ? "No such server.\n" : "No such backend.\n");
William Lallemand6b160942016-11-22 12:34:35 +01004311
4312 /* return server's effective weight at the moment */
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004313 snprintf(trash.area, trash.size, "%d (initial %d)\n", sv->uweight,
4314 sv->iweight);
4315 if (ci_putstr(si_ic(si), trash.area) == -1) {
Willy Tarreaudb398432018-11-15 11:08:52 +01004316 si_rx_room_blk(si);
Christopher Faulet90b5abe2016-12-05 14:25:08 +01004317 return 0;
4318 }
William Lallemand6b160942016-11-22 12:34:35 +01004319 return 1;
4320}
4321
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004322/* Parse a "set weight" command.
4323 *
4324 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004325 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004326static int cli_parse_set_weight(char **args, char *payload, struct appctx *appctx, void *private)
William Lallemand6b160942016-11-22 12:34:35 +01004327{
4328 struct server *sv;
4329 const char *warning;
4330
4331 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4332 return 1;
4333
4334 sv = cli_find_server(appctx, args[2]);
4335 if (!sv)
4336 return 1;
4337
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004338 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
4339
William Lallemand6b160942016-11-22 12:34:35 +01004340 warning = server_parse_weight_change_request(sv, args[3]);
Willy Tarreau9d008692019-08-09 11:21:01 +02004341 if (warning)
4342 cli_err(appctx, warning);
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004343
4344 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
4345
William Lallemand6b160942016-11-22 12:34:35 +01004346 return 1;
4347}
4348
Willy Tarreau46b7f532018-08-21 11:54:26 +02004349/* parse a "set maxconn server" command. It always returns 1.
4350 *
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004351 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004352 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004353static int cli_parse_set_maxconn_server(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreaub8026272016-11-23 11:26:56 +01004354{
4355 struct server *sv;
4356 const char *warning;
4357
4358 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4359 return 1;
4360
4361 sv = cli_find_server(appctx, args[3]);
4362 if (!sv)
4363 return 1;
4364
Amaury Denoyellecaaafd02021-06-18 11:11:36 +02004365 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
4366
Willy Tarreaub8026272016-11-23 11:26:56 +01004367 warning = server_parse_maxconn_change_request(sv, args[4]);
Willy Tarreau9d008692019-08-09 11:21:01 +02004368 if (warning)
4369 cli_err(appctx, warning);
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004370
Amaury Denoyellecaaafd02021-06-18 11:11:36 +02004371 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
4372
Willy Tarreaub8026272016-11-23 11:26:56 +01004373 return 1;
4374}
William Lallemand6b160942016-11-22 12:34:35 +01004375
Willy Tarreau46b7f532018-08-21 11:54:26 +02004376/* parse a "disable agent" command. It always returns 1.
4377 *
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004378 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004379 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004380static int cli_parse_disable_agent(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004381{
4382 struct server *sv;
4383
4384 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4385 return 1;
4386
4387 sv = cli_find_server(appctx, args[2]);
4388 if (!sv)
4389 return 1;
4390
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004391 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004392 sv->agent.state &= ~CHK_ST_ENABLED;
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004393 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004394 return 1;
4395}
4396
Willy Tarreau46b7f532018-08-21 11:54:26 +02004397/* parse a "disable health" command. It always returns 1.
4398 *
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004399 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004400 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004401static int cli_parse_disable_health(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004402{
4403 struct server *sv;
4404
4405 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4406 return 1;
4407
4408 sv = cli_find_server(appctx, args[2]);
4409 if (!sv)
4410 return 1;
4411
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004412 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004413 sv->check.state &= ~CHK_ST_ENABLED;
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004414 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004415 return 1;
4416}
4417
Willy Tarreau46b7f532018-08-21 11:54:26 +02004418/* parse a "disable server" command. It always returns 1.
4419 *
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004420 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004421 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004422static int cli_parse_disable_server(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreauffb4d582016-11-24 12:47:00 +01004423{
4424 struct server *sv;
4425
4426 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4427 return 1;
4428
4429 sv = cli_find_server(appctx, args[2]);
4430 if (!sv)
4431 return 1;
4432
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004433 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Willy Tarreauffb4d582016-11-24 12:47:00 +01004434 srv_adm_set_maint(sv);
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004435 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
Willy Tarreauffb4d582016-11-24 12:47:00 +01004436 return 1;
4437}
4438
Willy Tarreau46b7f532018-08-21 11:54:26 +02004439/* parse a "enable agent" command. It always returns 1.
4440 *
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004441 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004442 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004443static int cli_parse_enable_agent(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004444{
4445 struct server *sv;
4446
4447 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4448 return 1;
4449
4450 sv = cli_find_server(appctx, args[2]);
4451 if (!sv)
4452 return 1;
4453
Willy Tarreau9d008692019-08-09 11:21:01 +02004454 if (!(sv->agent.state & CHK_ST_CONFIGURED))
4455 return cli_err(appctx, "Agent was not configured on this server, cannot enable.\n");
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004456
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004457 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004458 sv->agent.state |= CHK_ST_ENABLED;
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004459 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004460 return 1;
4461}
4462
Willy Tarreau46b7f532018-08-21 11:54:26 +02004463/* parse a "enable health" command. It always returns 1.
4464 *
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004465 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004466 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004467static int cli_parse_enable_health(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004468{
4469 struct server *sv;
4470
4471 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4472 return 1;
4473
4474 sv = cli_find_server(appctx, args[2]);
4475 if (!sv)
4476 return 1;
4477
Amaury Denoyellee636a112021-09-21 10:29:09 +02004478 if (!(sv->check.state & CHK_ST_CONFIGURED))
4479 return cli_err(appctx, "Health check was not configured on this server, cannot enable.\n");
4480
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004481 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004482 sv->check.state |= CHK_ST_ENABLED;
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004483 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004484 return 1;
4485}
4486
Willy Tarreau46b7f532018-08-21 11:54:26 +02004487/* parse a "enable server" command. It always returns 1.
4488 *
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004489 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004490 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004491static int cli_parse_enable_server(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreauffb4d582016-11-24 12:47:00 +01004492{
4493 struct server *sv;
4494
4495 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4496 return 1;
4497
4498 sv = cli_find_server(appctx, args[2]);
4499 if (!sv)
4500 return 1;
4501
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004502 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Willy Tarreauffb4d582016-11-24 12:47:00 +01004503 srv_adm_set_ready(sv);
Olivier Houcharde9bad0a2018-01-17 17:39:34 +01004504 if (!(sv->flags & SRV_F_COOKIESET)
4505 && (sv->proxy->ck_opts & PR_CK_DYNAMIC) &&
4506 sv->cookie)
4507 srv_check_for_dup_dyncookie(sv);
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004508 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
Willy Tarreauffb4d582016-11-24 12:47:00 +01004509 return 1;
4510}
4511
Amaury Denoyellef99f77a2021-03-08 17:13:32 +01004512/* Allocates data structure related to load balancing for the server <sv>. It
4513 * is only required for dynamic servers.
4514 *
4515 * At the moment, the server lock is not used as this function is only called
4516 * for a dynamic server not yet registered.
4517 *
4518 * Returns 1 on success, 0 on allocation failure.
4519 */
4520static int srv_alloc_lb(struct server *sv, struct proxy *be)
4521{
4522 int node;
4523
4524 sv->lb_tree = (sv->flags & SRV_F_BACKUP) ?
4525 &be->lbprm.chash.bck : &be->lbprm.chash.act;
4526 sv->lb_nodes_tot = sv->uweight * BE_WEIGHT_SCALE;
4527 sv->lb_nodes_now = 0;
4528
Willy Tarreaudcb121f2021-04-20 11:37:45 +02004529 if (((be->lbprm.algo & (BE_LB_KIND | BE_LB_PARM)) == (BE_LB_KIND_RR | BE_LB_RR_RANDOM)) ||
4530 ((be->lbprm.algo & (BE_LB_KIND | BE_LB_HASH_TYPE)) == (BE_LB_KIND_HI | BE_LB_HASH_CONS))) {
Amaury Denoyellef99f77a2021-03-08 17:13:32 +01004531 sv->lb_nodes = calloc(sv->lb_nodes_tot, sizeof(*sv->lb_nodes));
4532
4533 if (!sv->lb_nodes)
4534 return 0;
4535
4536 for (node = 0; node < sv->lb_nodes_tot; node++) {
4537 sv->lb_nodes[node].server = sv;
4538 sv->lb_nodes[node].node.key = full_hash(sv->puid * SRV_EWGHT_RANGE + node);
4539 }
4540 }
4541
4542 return 1;
4543}
4544
4545/* Parse a "add server" command
4546 * Returns 0 if the server has been successfully initialized, 1 on failure.
4547 */
4548static int cli_parse_add_server(char **args, char *payload, struct appctx *appctx, void *private)
4549{
4550 struct proxy *be;
4551 struct server *srv;
4552 char *be_name, *sv_name;
4553 char *errmsg = NULL;
4554 int errcode, argc;
Amaury Denoyelle12173562021-06-09 09:58:47 +02004555 int next_id, i;
Amaury Denoyellef99f77a2021-03-08 17:13:32 +01004556 const int parse_flags = SRV_PARSE_DYNAMIC|SRV_PARSE_PARSE_ADDR;
4557
4558 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4559 return 1;
4560
4561 ++args;
4562
4563 sv_name = be_name = args[1];
4564 /* split backend/server arg */
4565 while (*sv_name && *(++sv_name)) {
4566 if (*sv_name == '/') {
4567 *sv_name = '\0';
4568 ++sv_name;
4569 break;
4570 }
4571 }
4572
4573 if (!*sv_name)
4574 return cli_err(appctx, "Require 'backend/server'.");
4575
Amaury Denoyellecece9182021-04-20 17:09:08 +02004576 be = proxy_be_by_name(be_name);
Amaury Denoyellef99f77a2021-03-08 17:13:32 +01004577 if (!be)
4578 return cli_err(appctx, "No such backend.");
4579
4580 if (!(be->lbprm.algo & BE_LB_PROP_DYN)) {
Amaury Denoyelleeafd7012021-04-29 14:59:42 +02004581 cli_err(appctx, "Backend must use a dynamic load balancing to support dynamic servers.");
Amaury Denoyellef99f77a2021-03-08 17:13:32 +01004582 return 1;
4583 }
4584
Amaury Denoyelled50d4bf2021-06-10 15:26:44 +02004585 /* At this point, some operations might not be thread-safe anymore. This
4586 * might be the case for parsing handlers which were designed to run
4587 * only at the starting stage on single-thread mode.
4588 *
4589 * Activate thread isolation to ensure thread-safety.
4590 */
4591 thread_isolate();
4592
Amaury Denoyellef99f77a2021-03-08 17:13:32 +01004593 args[1] = sv_name;
4594 errcode = _srv_parse_init(&srv, args, &argc, be, parse_flags, &errmsg);
Amaury Denoyellee3c55c22021-08-02 15:50:00 +02004595 if (srv)
4596 srv_use_dynsrv(srv);
4597
Amaury Denoyellef99f77a2021-03-08 17:13:32 +01004598 if (errcode) {
4599 if (errmsg)
4600 cli_dynerr(appctx, errmsg);
4601 goto out;
4602 }
4603
4604 while (*args[argc]) {
4605 errcode = _srv_parse_kw(srv, args, &argc, be, parse_flags, &errmsg);
4606
4607 if (errcode) {
4608 if (errmsg)
4609 cli_dynerr(appctx, errmsg);
4610 goto out;
4611 }
4612 }
4613
4614 _srv_parse_finalize(args, argc, srv, be, parse_flags, &errmsg);
4615 if (errmsg) {
4616 cli_dynerr(appctx, errmsg);
4617 goto out;
4618 }
4619
Amaury Denoyellee9bb7fb2021-06-10 17:34:10 +02004620 /* A dynamic server does not currently support resolution.
4621 *
4622 * Initialize it explicitly to the "none" method to ensure no
4623 * resolution will ever be executed.
4624 */
4625 srv->init_addr_methods = SRV_IADDR_NONE;
4626
Amaury Denoyelle30467232021-03-12 18:03:27 +01004627 if (srv->mux_proto) {
4628 if (!conn_get_best_mux_entry(srv->mux_proto->token, PROTO_SIDE_BE, be->mode)) {
4629 cli_err(appctx, "MUX protocol is not usable for server.");
4630 goto out;
4631 }
4632 }
4633
Amaury Denoyellef99f77a2021-03-08 17:13:32 +01004634 srv->per_thr = calloc(global.nbthread, sizeof(*srv->per_thr));
4635 if (!srv->per_thr) {
4636 cli_err(appctx, "failed to allocate per-thread lists for server.");
4637 goto out;
4638 }
4639
4640 for (i = 0; i < global.nbthread; i++) {
4641 srv->per_thr[i].idle_conns = EB_ROOT;
4642 srv->per_thr[i].safe_conns = EB_ROOT;
4643 srv->per_thr[i].avail_conns = EB_ROOT;
4644 MT_LIST_INIT(&srv->per_thr[i].streams);
4645 }
4646
4647 if (srv->max_idle_conns != 0) {
4648 srv->curr_idle_thr = calloc(global.nbthread, sizeof(*srv->curr_idle_thr));
4649 if (!srv->curr_idle_thr) {
4650 cli_err(appctx, "failed to allocate counters for server.");
4651 goto out;
4652 }
4653 }
4654
4655 if (!srv_alloc_lb(srv, be)) {
4656 cli_err(appctx, "Failed to initialize load-balancing data.");
4657 goto out;
4658 }
4659
4660 if (!stats_allocate_proxy_counters_internal(&srv->extra_counters,
4661 COUNTERS_SV,
4662 STATS_PX_CAP_SRV)) {
4663 cli_err(appctx, "failed to allocate extra counters for server.");
4664 goto out;
4665 }
4666
Amaury Denoyelled50d4bf2021-06-10 15:26:44 +02004667 /* Attach the server to the end of the proxy linked list. Note that this
4668 * operation is not thread-safe so this is executed under thread
4669 * isolation.
Amaury Denoyellef99f77a2021-03-08 17:13:32 +01004670 *
Amaury Denoyelled50d4bf2021-06-10 15:26:44 +02004671 * If a server with the same name is found, reject the new one.
Amaury Denoyellef99f77a2021-03-08 17:13:32 +01004672 */
Amaury Denoyellecece9182021-04-20 17:09:08 +02004673
Amaury Denoyellef99f77a2021-03-08 17:13:32 +01004674 /* TODO use a double-linked list for px->srv */
4675 if (be->srv) {
Amaury Denoyellecece9182021-04-20 17:09:08 +02004676 struct server *next = be->srv;
4677
4678 while (1) {
4679 /* check for duplicate server */
4680 if (!strcmp(srv->id, next->id)) {
Amaury Denoyellecece9182021-04-20 17:09:08 +02004681 cli_err(appctx, "Already exists a server with the same name in backend.");
4682 goto out;
4683 }
4684
4685 if (!next->next)
4686 break;
4687
4688 next = next->next;
4689 }
Amaury Denoyellef99f77a2021-03-08 17:13:32 +01004690
4691 next->next = srv;
4692 }
4693 else {
4694 srv->next = be->srv;
4695 be->srv = srv;
4696 }
Amaury Denoyellecece9182021-04-20 17:09:08 +02004697
Amaury Denoyelle12173562021-06-09 09:58:47 +02004698 /* generate the server id if not manually specified */
4699 if (!srv->puid) {
4700 next_id = get_next_id(&be->conf.used_server_id, 1);
4701 if (!next_id) {
4702 ha_alert("Cannot attach server : no id left in proxy\n");
4703 goto out;
4704 }
4705
4706 srv->conf.id.key = srv->puid = next_id;
Amaury Denoyelle12173562021-06-09 09:58:47 +02004707 }
Christopher Faulet2ea1aa52021-12-07 18:49:44 +01004708 srv->conf.name.key = srv->id;
Amaury Denoyelle12173562021-06-09 09:58:47 +02004709
4710 /* insert the server in the backend trees */
Amaury Denoyellef88af882021-06-08 17:00:20 +02004711 eb32_insert(&be->conf.used_server_id, &srv->conf.id);
4712 ebis_insert(&be->conf.used_server_name, &srv->conf.name);
Amaury Denoyelle2f70bb52021-06-08 15:19:51 +02004713 ebis_insert(&be->used_server_addr, &srv->addr_node);
Amaury Denoyelle12173562021-06-09 09:58:47 +02004714
Amaury Denoyellef99f77a2021-03-08 17:13:32 +01004715 thread_release();
4716
Amaury Denoyelled38e7fa2021-04-20 18:35:19 +02004717 ha_notice("New server %s/%s registered.\n", be->id, srv->id);
Amaury Denoyellef99f77a2021-03-08 17:13:32 +01004718 cli_msg(appctx, LOG_INFO, "New server registered.");
4719
4720 return 0;
4721
4722out:
Amaury Denoyelledb130872021-08-04 11:20:05 +02004723 if (srv) {
4724 /* remove the server from the proxy linked list */
4725 if (be->srv == srv) {
4726 be->srv = srv->next;
4727 }
4728 else {
4729 struct server *prev;
4730 for (prev = be->srv; prev && prev->next != srv; prev = prev->next)
4731 ;
4732 if (prev)
4733 prev->next = srv->next;
4734 }
4735
4736 }
4737
Amaury Denoyelled50d4bf2021-06-10 15:26:44 +02004738 thread_release();
Amaury Denoyellef99f77a2021-03-08 17:13:32 +01004739 if (srv)
4740 free_server(srv);
4741 return 1;
4742}
4743
Amaury Denoyellee5580432021-04-15 14:41:20 +02004744/* Parse a "del server" command
4745 * Returns 0 if the server has been successfully initialized, 1 on failure.
4746 */
4747static int cli_parse_delete_server(char **args, char *payload, struct appctx *appctx, void *private)
4748{
4749 struct proxy *be;
4750 struct server *srv;
4751 char *be_name, *sv_name;
4752
4753 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4754 return 1;
4755
4756 ++args;
4757
4758 sv_name = be_name = args[1];
4759 /* split backend/server arg */
4760 while (*sv_name && *(++sv_name)) {
4761 if (*sv_name == '/') {
4762 *sv_name = '\0';
4763 ++sv_name;
4764 break;
4765 }
4766 }
4767
4768 if (!*sv_name)
4769 return cli_err(appctx, "Require 'backend/server'.");
4770
4771 /* The proxy servers list is currently not protected by a lock so this
4772 * requires thread isolation.
4773 */
4774
4775 /* WARNING there is maybe a potential violation of the thread isolation
4776 * mechanism by the pool allocator. The allocator marks the thread as
4777 * harmless before the allocation, but a processing outside of it could
4778 * relies on a particular server triggered at the same time by a
4779 * 'delete server'. Currently, it is unknown if such case is present in
4780 * the current code. If it happens to be, the thread isolation
4781 * mechanism should be improved, maybe with a differentiation between
4782 * read and read+write safe sections.
4783 */
4784 thread_isolate();
4785
4786 get_backend_server(be_name, sv_name, &be, &srv);
4787 if (!be) {
4788 cli_err(appctx, "No such backend.");
4789 goto out;
4790 }
4791
4792 if (!srv) {
4793 cli_err(appctx, "No such server.");
4794 goto out;
4795 }
4796
4797 if (!(srv->flags & SRV_F_DYNAMIC)) {
4798 cli_err(appctx, "Only servers added at runtime via <add server> CLI cmd can be deleted.");
4799 goto out;
4800 }
4801
4802 /* Only servers in maintenance can be deleted. This ensures that the
4803 * server is not present anymore in the lb structures (through
4804 * lbprm.set_server_status_down).
4805 */
4806 if (!(srv->cur_admin & SRV_ADMF_MAINT)) {
4807 cli_err(appctx, "Only servers in maintenance mode can be deleted.");
4808 goto out;
4809 }
4810
4811 /* Ensure that there is no active/idle/pending connection on the server.
4812 *
4813 * TODO idle connections should not prevent server deletion. A proper
4814 * cleanup function should be implemented to be used here.
4815 */
4816 if (srv->cur_sess || srv->curr_idle_conns ||
4817 !eb_is_empty(&srv->pendconns)) {
4818 cli_err(appctx, "Server still has connections attached to it, cannot remove it.");
4819 goto out;
4820 }
4821
4822 /* TODO remove server for check list once 'check' will be implemented for
4823 * dynamic servers
4824 */
4825
4826 /* detach the server from the proxy linked list
4827 * The proxy servers list is currently not protected by a lock, so this
4828 * requires thread_isolate/release.
4829 */
4830
4831 /* be->srv cannot be empty since we have already found the server with
4832 * get_backend_server */
4833 BUG_ON(!be->srv);
4834 if (be->srv == srv) {
4835 be->srv = srv->next;
4836 }
4837 else {
4838 struct server *next;
Amaury Denoyelled6b4b6d2021-04-21 11:50:26 +02004839 for (next = be->srv; srv != next->next; next = next->next) {
4840 /* srv cannot be not found since we have already found
4841 * it with get_backend_server */
4842 BUG_ON(!next);
4843 }
Amaury Denoyellee5580432021-04-15 14:41:20 +02004844
Amaury Denoyellee5580432021-04-15 14:41:20 +02004845 next->next = srv->next;
4846 }
4847
4848 /* remove srv from addr_node tree */
Amaury Denoyelle40ad9f42021-06-09 16:00:43 +02004849 eb32_delete(&srv->conf.id);
4850 ebpt_delete(&srv->conf.name);
Amaury Denoyellee5580432021-04-15 14:41:20 +02004851 ebpt_delete(&srv->addr_node);
4852
4853 /* remove srv from idle_node tree for idle conn cleanup */
4854 eb32_delete(&srv->idle_node);
4855
4856 thread_release();
4857
4858 ha_notice("Server %s/%s deleted.\n", be->id, srv->id);
4859 free_server(srv);
4860
4861 cli_msg(appctx, LOG_INFO, "Server deleted.");
4862
4863 return 0;
4864
4865out:
4866 thread_release();
4867
4868 return 1;
4869}
4870
William Lallemand222baf22016-11-19 02:00:33 +01004871/* register cli keywords */
4872static struct cli_kw_list cli_kws = {{ },{
Amaury Denoyellec59faa52021-08-03 18:05:37 +02004873 { { "disable", "agent", NULL }, "disable agent : disable agent checks", cli_parse_disable_agent, NULL },
4874 { { "disable", "health", NULL }, "disable health : disable health checks", cli_parse_disable_health, NULL },
Willy Tarreaub205bfd2021-05-07 11:38:37 +02004875 { { "disable", "server", NULL }, "disable server (DEPRECATED) : disable a server for maintenance (use 'set server' instead)", cli_parse_disable_server, NULL },
Amaury Denoyellec59faa52021-08-03 18:05:37 +02004876 { { "enable", "agent", NULL }, "enable agent : enable agent checks", cli_parse_enable_agent, NULL },
4877 { { "enable", "health", NULL }, "enable health : enable health checks", cli_parse_enable_health, NULL },
Willy Tarreaub205bfd2021-05-07 11:38:37 +02004878 { { "enable", "server", NULL }, "enable server (DEPRECATED) : enable a disabled server (use 'set server' instead)", cli_parse_enable_server, NULL },
4879 { { "set", "maxconn", "server", NULL }, "set maxconn server <bk>/<srv> : change a server's maxconn setting", cli_parse_set_maxconn_server, NULL },
4880 { { "set", "server", NULL }, "set server <bk>/<srv> [opts] : change a server's state, weight, address or ssl", cli_parse_set_server },
4881 { { "get", "weight", NULL }, "get weight <bk>/<srv> : report a server's current weight", cli_parse_get_weight },
4882 { { "set", "weight", NULL }, "set weight <bk>/<srv> (DEPRECATED) : change a server's weight (use 'set server' instead)", cli_parse_set_weight },
4883 { { "add", "server", NULL }, "add server <bk>/<srv> : create a new server (EXPERIMENTAL)", cli_parse_add_server, NULL, NULL, NULL, ACCESS_EXPERIMENTAL },
4884 { { "del", "server", NULL }, "del server <bk>/<srv> : remove a dynamically added server (EXPERIMENTAL)", cli_parse_delete_server, NULL, NULL, NULL, ACCESS_EXPERIMENTAL },
William Lallemand222baf22016-11-19 02:00:33 +01004885 {{},}
4886}};
4887
Willy Tarreau0108d902018-11-25 19:14:37 +01004888INITCALL1(STG_REGISTER, cli_register_kw, &cli_kws);
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01004889
Emeric Brun64cc49c2017-10-03 14:46:45 +02004890/*
4891 * This function applies server's status changes, it is
4892 * is designed to be called asynchronously.
4893 *
Willy Tarreau1e690bb2020-10-22 11:30:59 +02004894 * Must be called with the server lock held. This may also be called at init
4895 * time as the result of parsing the state file, in which case no lock will be
4896 * held, and the server's warmup task can be null.
Emeric Brun64cc49c2017-10-03 14:46:45 +02004897 */
Willy Tarreau3ff577e2018-08-02 11:48:52 +02004898static void srv_update_status(struct server *s)
Emeric Brun64cc49c2017-10-03 14:46:45 +02004899{
4900 struct check *check = &s->check;
4901 int xferred;
4902 struct proxy *px = s->proxy;
4903 int prev_srv_count = s->proxy->srv_bck + s->proxy->srv_act;
4904 int srv_was_stopping = (s->cur_state == SRV_ST_STOPPING) || (s->cur_admin & SRV_ADMF_DRAIN);
Aurelien DARRAGON37f548d2023-04-18 13:52:27 +02004905 enum srv_state srv_prev_state = s->cur_state;
Emeric Brun64cc49c2017-10-03 14:46:45 +02004906 int log_level;
Willy Tarreau83061a82018-07-13 11:56:34 +02004907 struct buffer *tmptrash = NULL;
Emeric Brun64cc49c2017-10-03 14:46:45 +02004908
Emeric Brun64cc49c2017-10-03 14:46:45 +02004909 /* If currently main is not set we try to apply pending state changes */
4910 if (!(s->cur_admin & SRV_ADMF_MAINT)) {
4911 int next_admin;
4912
4913 /* Backup next admin */
4914 next_admin = s->next_admin;
4915
4916 /* restore current admin state */
4917 s->next_admin = s->cur_admin;
4918
4919 if ((s->cur_state != SRV_ST_STOPPED) && (s->next_state == SRV_ST_STOPPED)) {
Emeric Brun64cc49c2017-10-03 14:46:45 +02004920 if (s->proxy->lbprm.set_server_status_down)
4921 s->proxy->lbprm.set_server_status_down(s);
4922
4923 if (s->onmarkeddown & HANA_ONMARKEDDOWN_SHUTDOWNSESSIONS)
4924 srv_shutdown_streams(s, SF_ERR_DOWN);
4925
4926 /* we might have streams queued on this server and waiting for
4927 * a connection. Those which are redispatchable will be queued
4928 * to another server or to the proxy itself.
4929 */
4930 xferred = pendconn_redistribute(s);
4931
4932 tmptrash = alloc_trash_chunk();
4933 if (tmptrash) {
4934 chunk_printf(tmptrash,
4935 "%sServer %s/%s is DOWN", s->flags & SRV_F_BACKUP ? "Backup " : "",
4936 s->proxy->id, s->id);
4937
Emeric Brun5a133512017-10-19 14:42:30 +02004938 srv_append_status(tmptrash, s, NULL, xferred, 0);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004939 ha_warning("%s.\n", tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004940
4941 /* we don't send an alert if the server was previously paused */
4942 log_level = srv_was_stopping ? LOG_NOTICE : LOG_ALERT;
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004943 send_log(s->proxy, log_level, "%s.\n",
4944 tmptrash->area);
4945 send_email_alert(s, log_level, "%s",
4946 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004947 free_trash_chunk(tmptrash);
4948 tmptrash = NULL;
4949 }
Emeric Brun64cc49c2017-10-03 14:46:45 +02004950 s->counters.down_trans++;
4951 }
4952 else if ((s->cur_state != SRV_ST_STOPPING) && (s->next_state == SRV_ST_STOPPING)) {
Emeric Brun64cc49c2017-10-03 14:46:45 +02004953 if (s->proxy->lbprm.set_server_status_down)
4954 s->proxy->lbprm.set_server_status_down(s);
4955
4956 /* we might have streams queued on this server and waiting for
4957 * a connection. Those which are redispatchable will be queued
4958 * to another server or to the proxy itself.
4959 */
4960 xferred = pendconn_redistribute(s);
4961
4962 tmptrash = alloc_trash_chunk();
4963 if (tmptrash) {
4964 chunk_printf(tmptrash,
4965 "%sServer %s/%s is stopping", s->flags & SRV_F_BACKUP ? "Backup " : "",
4966 s->proxy->id, s->id);
4967
Emeric Brun5a133512017-10-19 14:42:30 +02004968 srv_append_status(tmptrash, s, NULL, xferred, 0);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004969
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004970 ha_warning("%s.\n", tmptrash->area);
4971 send_log(s->proxy, LOG_NOTICE, "%s.\n",
4972 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004973 free_trash_chunk(tmptrash);
4974 tmptrash = NULL;
4975 }
Emeric Brun64cc49c2017-10-03 14:46:45 +02004976 }
4977 else if (((s->cur_state != SRV_ST_RUNNING) && (s->next_state == SRV_ST_RUNNING))
4978 || ((s->cur_state != SRV_ST_STARTING) && (s->next_state == SRV_ST_STARTING))) {
Emeric Brun64cc49c2017-10-03 14:46:45 +02004979
Willy Tarreau1e690bb2020-10-22 11:30:59 +02004980 if (s->next_state == SRV_ST_STARTING && s->warmup)
Emeric Brun64cc49c2017-10-03 14:46:45 +02004981 task_schedule(s->warmup, tick_add(now_ms, MS_TO_TICKS(MAX(1000, s->slowstart / 20))));
4982
Willy Tarreau3ff577e2018-08-02 11:48:52 +02004983 server_recalc_eweight(s, 0);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004984 /* now propagate the status change to any LB algorithms */
4985 if (px->lbprm.update_server_eweight)
4986 px->lbprm.update_server_eweight(s);
4987 else if (srv_willbe_usable(s)) {
4988 if (px->lbprm.set_server_status_up)
4989 px->lbprm.set_server_status_up(s);
4990 }
4991 else {
4992 if (px->lbprm.set_server_status_down)
4993 px->lbprm.set_server_status_down(s);
4994 }
4995
4996 /* If the server is set with "on-marked-up shutdown-backup-sessions",
4997 * and it's not a backup server and its effective weight is > 0,
4998 * then it can accept new connections, so we shut down all streams
4999 * on all backup servers.
5000 */
5001 if ((s->onmarkedup & HANA_ONMARKEDUP_SHUTDOWNBACKUPSESSIONS) &&
5002 !(s->flags & SRV_F_BACKUP) && s->next_eweight)
5003 srv_shutdown_backup_streams(s->proxy, SF_ERR_UP);
5004
5005 /* check if we can handle some connections queued at the proxy. We
5006 * will take as many as we can handle.
5007 */
5008 xferred = pendconn_grab_from_px(s);
5009
5010 tmptrash = alloc_trash_chunk();
5011 if (tmptrash) {
5012 chunk_printf(tmptrash,
5013 "%sServer %s/%s is UP", s->flags & SRV_F_BACKUP ? "Backup " : "",
5014 s->proxy->id, s->id);
5015
Emeric Brun5a133512017-10-19 14:42:30 +02005016 srv_append_status(tmptrash, s, NULL, xferred, 0);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005017 ha_warning("%s.\n", tmptrash->area);
5018 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5019 tmptrash->area);
5020 send_email_alert(s, LOG_NOTICE, "%s",
5021 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005022 free_trash_chunk(tmptrash);
5023 tmptrash = NULL;
5024 }
Emeric Brun64cc49c2017-10-03 14:46:45 +02005025 }
5026 else if (s->cur_eweight != s->next_eweight) {
5027 /* now propagate the status change to any LB algorithms */
5028 if (px->lbprm.update_server_eweight)
5029 px->lbprm.update_server_eweight(s);
5030 else if (srv_willbe_usable(s)) {
5031 if (px->lbprm.set_server_status_up)
5032 px->lbprm.set_server_status_up(s);
5033 }
5034 else {
5035 if (px->lbprm.set_server_status_down)
5036 px->lbprm.set_server_status_down(s);
5037 }
Emeric Brun64cc49c2017-10-03 14:46:45 +02005038 }
5039
5040 s->next_admin = next_admin;
5041 }
5042
Emeric Brun5a133512017-10-19 14:42:30 +02005043 /* reset operational state change */
5044 *s->op_st_chg.reason = 0;
5045 s->op_st_chg.status = s->op_st_chg.code = -1;
5046 s->op_st_chg.duration = 0;
Emeric Brun64cc49c2017-10-03 14:46:45 +02005047
5048 /* Now we try to apply pending admin changes */
5049
5050 /* Maintenance must also disable health checks */
5051 if (!(s->cur_admin & SRV_ADMF_MAINT) && (s->next_admin & SRV_ADMF_MAINT)) {
5052 if (s->check.state & CHK_ST_ENABLED) {
5053 s->check.state |= CHK_ST_PAUSED;
5054 check->health = 0;
5055 }
5056
5057 if (s->cur_state == SRV_ST_STOPPED) { /* server was already down */
Olivier Houchard796a2b32017-10-24 17:42:47 +02005058 tmptrash = alloc_trash_chunk();
5059 if (tmptrash) {
5060 chunk_printf(tmptrash,
5061 "%sServer %s/%s was DOWN and now enters maintenance%s%s%s",
5062 s->flags & SRV_F_BACKUP ? "Backup " : "", s->proxy->id, s->id,
5063 *(s->adm_st_chg_cause) ? " (" : "", s->adm_st_chg_cause, *(s->adm_st_chg_cause) ? ")" : "");
Emeric Brun64cc49c2017-10-03 14:46:45 +02005064
Olivier Houchard796a2b32017-10-24 17:42:47 +02005065 srv_append_status(tmptrash, s, NULL, -1, (s->next_admin & SRV_ADMF_FMAINT));
Emeric Brun64cc49c2017-10-03 14:46:45 +02005066
Olivier Houchard796a2b32017-10-24 17:42:47 +02005067 if (!(global.mode & MODE_STARTING)) {
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005068 ha_warning("%s.\n", tmptrash->area);
5069 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5070 tmptrash->area);
Olivier Houchard796a2b32017-10-24 17:42:47 +02005071 }
5072 free_trash_chunk(tmptrash);
5073 tmptrash = NULL;
Emeric Brun64cc49c2017-10-03 14:46:45 +02005074 }
5075 }
5076 else { /* server was still running */
5077 check->health = 0; /* failure */
Emeric Brune3114802017-12-21 14:42:26 +01005078
5079 s->next_state = SRV_ST_STOPPED;
Emeric Brun64cc49c2017-10-03 14:46:45 +02005080 if (s->proxy->lbprm.set_server_status_down)
5081 s->proxy->lbprm.set_server_status_down(s);
5082
Emeric Brun64cc49c2017-10-03 14:46:45 +02005083 if (s->onmarkeddown & HANA_ONMARKEDDOWN_SHUTDOWNSESSIONS)
5084 srv_shutdown_streams(s, SF_ERR_DOWN);
5085
William Dauchy6318d332020-05-02 21:52:36 +02005086 /* force connection cleanup on the given server */
5087 srv_cleanup_connections(s);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005088 /* we might have streams queued on this server and waiting for
5089 * a connection. Those which are redispatchable will be queued
5090 * to another server or to the proxy itself.
5091 */
5092 xferred = pendconn_redistribute(s);
5093
5094 tmptrash = alloc_trash_chunk();
5095 if (tmptrash) {
5096 chunk_printf(tmptrash,
5097 "%sServer %s/%s is going DOWN for maintenance%s%s%s",
5098 s->flags & SRV_F_BACKUP ? "Backup " : "",
5099 s->proxy->id, s->id,
5100 *(s->adm_st_chg_cause) ? " (" : "", s->adm_st_chg_cause, *(s->adm_st_chg_cause) ? ")" : "");
5101
5102 srv_append_status(tmptrash, s, NULL, xferred, (s->next_admin & SRV_ADMF_FMAINT));
5103
5104 if (!(global.mode & MODE_STARTING)) {
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005105 ha_warning("%s.\n", tmptrash->area);
5106 send_log(s->proxy, srv_was_stopping ? LOG_NOTICE : LOG_ALERT, "%s.\n",
5107 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005108 }
5109 free_trash_chunk(tmptrash);
5110 tmptrash = NULL;
5111 }
Emeric Brun64cc49c2017-10-03 14:46:45 +02005112 s->counters.down_trans++;
5113 }
5114 }
5115 else if ((s->cur_admin & SRV_ADMF_MAINT) && !(s->next_admin & SRV_ADMF_MAINT)) {
5116 /* OK here we're leaving maintenance, we have many things to check,
5117 * because the server might possibly be coming back up depending on
5118 * its state. In practice, leaving maintenance means that we should
5119 * immediately turn to UP (more or less the slowstart) under the
5120 * following conditions :
5121 * - server is neither checked nor tracked
5122 * - server tracks another server which is not checked
5123 * - server tracks another server which is already up
5124 * Which sums up as something simpler :
5125 * "either the tracking server is up or the server's checks are disabled
5126 * or up". Otherwise we only re-enable health checks. There's a special
5127 * case associated to the stopping state which can be inherited. Note
5128 * that the server might still be in drain mode, which is naturally dealt
5129 * with by the lower level functions.
5130 */
Emeric Brun64cc49c2017-10-03 14:46:45 +02005131 if (s->check.state & CHK_ST_ENABLED) {
5132 s->check.state &= ~CHK_ST_PAUSED;
5133 check->health = check->rise; /* start OK but check immediately */
5134 }
5135
5136 if ((!s->track || s->track->next_state != SRV_ST_STOPPED) &&
5137 (!(s->agent.state & CHK_ST_ENABLED) || (s->agent.health >= s->agent.rise)) &&
5138 (!(s->check.state & CHK_ST_ENABLED) || (s->check.health >= s->check.rise))) {
5139 if (s->track && s->track->next_state == SRV_ST_STOPPING) {
5140 s->next_state = SRV_ST_STOPPING;
5141 }
5142 else {
5143 s->next_state = SRV_ST_STARTING;
Willy Tarreau1e690bb2020-10-22 11:30:59 +02005144 if (s->slowstart > 0) {
5145 if (s->warmup)
5146 task_schedule(s->warmup, tick_add(now_ms, MS_TO_TICKS(MAX(1000, s->slowstart / 20))));
5147 }
Emeric Brun64cc49c2017-10-03 14:46:45 +02005148 else
5149 s->next_state = SRV_ST_RUNNING;
5150 }
5151
5152 }
5153
5154 tmptrash = alloc_trash_chunk();
5155 if (tmptrash) {
5156 if (!(s->next_admin & SRV_ADMF_FMAINT) && (s->cur_admin & SRV_ADMF_FMAINT)) {
5157 chunk_printf(tmptrash,
5158 "%sServer %s/%s is %s/%s (leaving forced maintenance)",
5159 s->flags & SRV_F_BACKUP ? "Backup " : "",
5160 s->proxy->id, s->id,
5161 (s->next_state == SRV_ST_STOPPED) ? "DOWN" : "UP",
5162 (s->next_admin & SRV_ADMF_DRAIN) ? "DRAIN" : "READY");
5163 }
5164 if (!(s->next_admin & SRV_ADMF_RMAINT) && (s->cur_admin & SRV_ADMF_RMAINT)) {
5165 chunk_printf(tmptrash,
5166 "%sServer %s/%s ('%s') is %s/%s (resolves again)",
5167 s->flags & SRV_F_BACKUP ? "Backup " : "",
5168 s->proxy->id, s->id, s->hostname,
5169 (s->next_state == SRV_ST_STOPPED) ? "DOWN" : "UP",
5170 (s->next_admin & SRV_ADMF_DRAIN) ? "DRAIN" : "READY");
5171 }
5172 if (!(s->next_admin & SRV_ADMF_IMAINT) && (s->cur_admin & SRV_ADMF_IMAINT)) {
5173 chunk_printf(tmptrash,
5174 "%sServer %s/%s is %s/%s (leaving maintenance)",
5175 s->flags & SRV_F_BACKUP ? "Backup " : "",
5176 s->proxy->id, s->id,
5177 (s->next_state == SRV_ST_STOPPED) ? "DOWN" : "UP",
5178 (s->next_admin & SRV_ADMF_DRAIN) ? "DRAIN" : "READY");
5179 }
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005180 ha_warning("%s.\n", tmptrash->area);
5181 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5182 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005183 free_trash_chunk(tmptrash);
5184 tmptrash = NULL;
5185 }
5186
Willy Tarreau3ff577e2018-08-02 11:48:52 +02005187 server_recalc_eweight(s, 0);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005188 /* now propagate the status change to any LB algorithms */
5189 if (px->lbprm.update_server_eweight)
5190 px->lbprm.update_server_eweight(s);
5191 else if (srv_willbe_usable(s)) {
5192 if (px->lbprm.set_server_status_up)
5193 px->lbprm.set_server_status_up(s);
5194 }
5195 else {
5196 if (px->lbprm.set_server_status_down)
5197 px->lbprm.set_server_status_down(s);
5198 }
5199
Willy Tarreau6a78e612018-08-07 10:14:53 +02005200 /* If the server is set with "on-marked-up shutdown-backup-sessions",
5201 * and it's not a backup server and its effective weight is > 0,
5202 * then it can accept new connections, so we shut down all streams
5203 * on all backup servers.
5204 */
5205 if ((s->onmarkedup & HANA_ONMARKEDUP_SHUTDOWNBACKUPSESSIONS) &&
5206 !(s->flags & SRV_F_BACKUP) && s->next_eweight)
5207 srv_shutdown_backup_streams(s->proxy, SF_ERR_UP);
5208
5209 /* check if we can handle some connections queued at the proxy. We
5210 * will take as many as we can handle.
5211 */
5212 xferred = pendconn_grab_from_px(s);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005213 }
5214 else if (s->next_admin & SRV_ADMF_MAINT) {
5215 /* remaining in maintenance mode, let's inform precisely about the
5216 * situation.
5217 */
5218 if (!(s->next_admin & SRV_ADMF_FMAINT) && (s->cur_admin & SRV_ADMF_FMAINT)) {
5219 tmptrash = alloc_trash_chunk();
5220 if (tmptrash) {
5221 chunk_printf(tmptrash,
5222 "%sServer %s/%s is leaving forced maintenance but remains in maintenance",
5223 s->flags & SRV_F_BACKUP ? "Backup " : "",
5224 s->proxy->id, s->id);
5225
5226 if (s->track) /* normally it's mandatory here */
5227 chunk_appendf(tmptrash, " via %s/%s",
5228 s->track->proxy->id, s->track->id);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005229 ha_warning("%s.\n", tmptrash->area);
5230 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5231 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005232 free_trash_chunk(tmptrash);
5233 tmptrash = NULL;
5234 }
5235 }
5236 if (!(s->next_admin & SRV_ADMF_RMAINT) && (s->cur_admin & SRV_ADMF_RMAINT)) {
5237 tmptrash = alloc_trash_chunk();
5238 if (tmptrash) {
5239 chunk_printf(tmptrash,
5240 "%sServer %s/%s ('%s') resolves again but remains in maintenance",
5241 s->flags & SRV_F_BACKUP ? "Backup " : "",
5242 s->proxy->id, s->id, s->hostname);
5243
5244 if (s->track) /* normally it's mandatory here */
5245 chunk_appendf(tmptrash, " via %s/%s",
5246 s->track->proxy->id, s->track->id);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005247 ha_warning("%s.\n", tmptrash->area);
5248 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5249 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005250 free_trash_chunk(tmptrash);
5251 tmptrash = NULL;
5252 }
5253 }
5254 else if (!(s->next_admin & SRV_ADMF_IMAINT) && (s->cur_admin & SRV_ADMF_IMAINT)) {
5255 tmptrash = alloc_trash_chunk();
5256 if (tmptrash) {
5257 chunk_printf(tmptrash,
5258 "%sServer %s/%s remains in forced maintenance",
5259 s->flags & SRV_F_BACKUP ? "Backup " : "",
5260 s->proxy->id, s->id);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005261 ha_warning("%s.\n", tmptrash->area);
5262 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5263 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005264 free_trash_chunk(tmptrash);
5265 tmptrash = NULL;
5266 }
5267 }
5268 /* don't report anything when leaving drain mode and remaining in maintenance */
Emeric Brun64cc49c2017-10-03 14:46:45 +02005269 }
5270
5271 if (!(s->next_admin & SRV_ADMF_MAINT)) {
5272 if (!(s->cur_admin & SRV_ADMF_DRAIN) && (s->next_admin & SRV_ADMF_DRAIN)) {
5273 /* drain state is applied only if not yet in maint */
5274
Emeric Brun64cc49c2017-10-03 14:46:45 +02005275 if (px->lbprm.set_server_status_down)
5276 px->lbprm.set_server_status_down(s);
5277
5278 /* we might have streams queued on this server and waiting for
5279 * a connection. Those which are redispatchable will be queued
5280 * to another server or to the proxy itself.
5281 */
5282 xferred = pendconn_redistribute(s);
5283
5284 tmptrash = alloc_trash_chunk();
5285 if (tmptrash) {
5286 chunk_printf(tmptrash, "%sServer %s/%s enters drain state%s%s%s",
5287 s->flags & SRV_F_BACKUP ? "Backup " : "", s->proxy->id, s->id,
5288 *(s->adm_st_chg_cause) ? " (" : "", s->adm_st_chg_cause, *(s->adm_st_chg_cause) ? ")" : "");
5289
5290 srv_append_status(tmptrash, s, NULL, xferred, (s->next_admin & SRV_ADMF_FDRAIN));
5291
5292 if (!(global.mode & MODE_STARTING)) {
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005293 ha_warning("%s.\n", tmptrash->area);
5294 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5295 tmptrash->area);
5296 send_email_alert(s, LOG_NOTICE, "%s",
5297 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005298 }
5299 free_trash_chunk(tmptrash);
5300 tmptrash = NULL;
5301 }
Emeric Brun64cc49c2017-10-03 14:46:45 +02005302 }
5303 else if ((s->cur_admin & SRV_ADMF_DRAIN) && !(s->next_admin & SRV_ADMF_DRAIN)) {
5304 /* OK completely leaving drain mode */
Willy Tarreau3ff577e2018-08-02 11:48:52 +02005305 server_recalc_eweight(s, 0);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005306
5307 tmptrash = alloc_trash_chunk();
5308 if (tmptrash) {
Aurelien DARRAGONec4db422023-03-27 10:17:31 +02005309 if (s->cur_admin & SRV_ADMF_FDRAIN) {
Emeric Brun64cc49c2017-10-03 14:46:45 +02005310 chunk_printf(tmptrash,
5311 "%sServer %s/%s is %s (leaving forced drain)",
5312 s->flags & SRV_F_BACKUP ? "Backup " : "",
5313 s->proxy->id, s->id,
5314 (s->next_state == SRV_ST_STOPPED) ? "DOWN" : "UP");
5315 }
5316 else {
5317 chunk_printf(tmptrash,
5318 "%sServer %s/%s is %s (leaving drain)",
5319 s->flags & SRV_F_BACKUP ? "Backup " : "",
5320 s->proxy->id, s->id,
5321 (s->next_state == SRV_ST_STOPPED) ? "DOWN" : "UP");
5322 if (s->track) /* normally it's mandatory here */
5323 chunk_appendf(tmptrash, " via %s/%s",
5324 s->track->proxy->id, s->track->id);
5325 }
5326
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005327 ha_warning("%s.\n", tmptrash->area);
5328 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5329 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005330 free_trash_chunk(tmptrash);
5331 tmptrash = NULL;
5332 }
5333
5334 /* now propagate the status change to any LB algorithms */
5335 if (px->lbprm.update_server_eweight)
5336 px->lbprm.update_server_eweight(s);
5337 else if (srv_willbe_usable(s)) {
5338 if (px->lbprm.set_server_status_up)
5339 px->lbprm.set_server_status_up(s);
5340 }
5341 else {
5342 if (px->lbprm.set_server_status_down)
5343 px->lbprm.set_server_status_down(s);
5344 }
5345 }
5346 else if ((s->next_admin & SRV_ADMF_DRAIN)) {
5347 /* remaining in drain mode after removing one of its flags */
5348
5349 tmptrash = alloc_trash_chunk();
5350 if (tmptrash) {
5351 if (!(s->next_admin & SRV_ADMF_FDRAIN)) {
5352 chunk_printf(tmptrash,
5353 "%sServer %s/%s is leaving forced drain but remains in drain mode",
5354 s->flags & SRV_F_BACKUP ? "Backup " : "",
5355 s->proxy->id, s->id);
5356
5357 if (s->track) /* normally it's mandatory here */
5358 chunk_appendf(tmptrash, " via %s/%s",
5359 s->track->proxy->id, s->track->id);
5360 }
5361 else {
5362 chunk_printf(tmptrash,
5363 "%sServer %s/%s remains in forced drain mode",
5364 s->flags & SRV_F_BACKUP ? "Backup " : "",
5365 s->proxy->id, s->id);
5366 }
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005367 ha_warning("%s.\n", tmptrash->area);
5368 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5369 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005370 free_trash_chunk(tmptrash);
5371 tmptrash = NULL;
5372 }
Emeric Brun64cc49c2017-10-03 14:46:45 +02005373 }
5374 }
5375
5376 /* Re-set log strings to empty */
Emeric Brun64cc49c2017-10-03 14:46:45 +02005377 *s->adm_st_chg_cause = 0;
Aurelien DARRAGON674ba672023-04-17 17:45:58 +02005378
5379 /* explicitly commit state changes (even if it was already applied implicitly
5380 * by some lb state change function), so we don't miss anything
5381 */
5382 srv_lb_commit_status(s);
Aurelien DARRAGON9aba5c02023-04-17 15:30:11 +02005383
Aurelien DARRAGON37f548d2023-04-18 13:52:27 +02005384 /* check if server stats must be updated due the the server state change */
5385 if (srv_prev_state != s->cur_state) {
5386 if (srv_prev_state == SRV_ST_STOPPED) {
5387 /* server was down and no longer is */
5388 if (s->last_change < now.tv_sec) // ignore negative times
5389 s->down_time += now.tv_sec - s->last_change;
5390 }
5391 s->last_change = now.tv_sec;
5392 }
5393
Aurelien DARRAGON9aba5c02023-04-17 15:30:11 +02005394 /* check if backend stats must be updated due to the server state change */
5395 if (prev_srv_count && s->proxy->srv_bck == 0 && s->proxy->srv_act == 0)
5396 set_backend_down(s->proxy); /* backend going down */
5397 else if (!prev_srv_count && (s->proxy->srv_bck || s->proxy->srv_act)) {
5398 /* backend was down and is back up again:
5399 * no helper function, updating last_change and backend downtime stats
5400 */
5401 if (s->proxy->last_change < now.tv_sec) // ignore negative times
5402 s->proxy->down_time += now.tv_sec - s->proxy->last_change;
5403 s->proxy->last_change = now.tv_sec;
5404 }
Emeric Brun64cc49c2017-10-03 14:46:45 +02005405}
Emeric Brun64cc49c2017-10-03 14:46:45 +02005406
Willy Tarreau144f84a2021-03-02 16:09:26 +01005407struct task *srv_cleanup_toremove_conns(struct task *task, void *context, unsigned int state)
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005408{
5409 struct connection *conn;
5410
Willy Tarreau4d82bf52020-06-28 00:19:17 +02005411 while ((conn = MT_LIST_POP(&idle_conns[tid].toremove_conns,
Amaury Denoyellef232cb32021-01-06 16:14:12 +01005412 struct connection *, toremove_list)) != NULL) {
Christopher Faulet73c12072019-04-08 11:23:22 +02005413 conn->mux->destroy(conn->ctx);
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005414 }
5415
5416 return task;
5417}
5418
Amaury Denoyellef232cb32021-01-06 16:14:12 +01005419/* Move toremove_nb connections from idle_tree to toremove_list, -1 means
Olivier Houchardff1d0922020-06-29 20:15:59 +02005420 * moving them all.
5421 * Returns the number of connections moved.
Amaury Denoyelle5c7086f2021-01-11 09:21:52 +01005422 *
5423 * Must be called with idle_conns_lock held.
Olivier Houchardff1d0922020-06-29 20:15:59 +02005424 */
Amaury Denoyellef232cb32021-01-06 16:14:12 +01005425static int srv_migrate_conns_to_remove(struct eb_root *idle_tree, struct mt_list *toremove_list, int toremove_nb)
Olivier Houchardff1d0922020-06-29 20:15:59 +02005426{
Amaury Denoyellef232cb32021-01-06 16:14:12 +01005427 struct eb_node *node, *next;
Amaury Denoyelle8990b012021-02-19 15:29:16 +01005428 struct conn_hash_node *hash_node;
Olivier Houchardff1d0922020-06-29 20:15:59 +02005429 int i = 0;
5430
Amaury Denoyellef232cb32021-01-06 16:14:12 +01005431 node = eb_first(idle_tree);
5432 while (node) {
5433 next = eb_next(node);
Olivier Houchardff1d0922020-06-29 20:15:59 +02005434 if (toremove_nb != -1 && i >= toremove_nb)
5435 break;
Amaury Denoyellef232cb32021-01-06 16:14:12 +01005436
Amaury Denoyelle8990b012021-02-19 15:29:16 +01005437 hash_node = ebmb_entry(node, struct conn_hash_node, node);
Amaury Denoyellef232cb32021-01-06 16:14:12 +01005438 eb_delete(node);
Willy Tarreau2b718102021-04-21 07:32:39 +02005439 MT_LIST_APPEND(toremove_list, &hash_node->conn->toremove_list);
Olivier Houchardff1d0922020-06-29 20:15:59 +02005440 i++;
Amaury Denoyellef232cb32021-01-06 16:14:12 +01005441
5442 node = next;
Olivier Houchardff1d0922020-06-29 20:15:59 +02005443 }
5444 return i;
5445}
William Dauchy6318d332020-05-02 21:52:36 +02005446/* cleanup connections for a given server
5447 * might be useful when going on forced maintenance or live changing ip/port
5448 */
William Dauchy707ad322020-05-04 13:52:40 +02005449static void srv_cleanup_connections(struct server *srv)
William Dauchy6318d332020-05-02 21:52:36 +02005450{
William Dauchy6318d332020-05-02 21:52:36 +02005451 int did_remove;
5452 int i;
William Dauchy6318d332020-05-02 21:52:36 +02005453
Amaury Denoyelle10d5c312021-01-06 14:28:51 +01005454 /* nothing to do if pool-max-conn is null */
5455 if (!srv->max_idle_conns)
5456 return;
5457
Willy Tarreauc35bcfc2020-06-29 14:43:16 +02005458 /* check all threads starting with ours */
Willy Tarreauc35bcfc2020-06-29 14:43:16 +02005459 for (i = tid;;) {
William Dauchy6318d332020-05-02 21:52:36 +02005460 did_remove = 0;
Amaury Denoyelle5c7086f2021-01-11 09:21:52 +01005461 HA_SPIN_LOCK(IDLE_CONNS_LOCK, &idle_conns[i].idle_conns_lock);
Willy Tarreau430bf4a2021-03-04 09:45:32 +01005462 if (srv_migrate_conns_to_remove(&srv->per_thr[i].idle_conns, &idle_conns[i].toremove_conns, -1) > 0)
William Dauchy6318d332020-05-02 21:52:36 +02005463 did_remove = 1;
Willy Tarreau430bf4a2021-03-04 09:45:32 +01005464 if (srv_migrate_conns_to_remove(&srv->per_thr[i].safe_conns, &idle_conns[i].toremove_conns, -1) > 0)
Olivier Houchardff1d0922020-06-29 20:15:59 +02005465 did_remove = 1;
Amaury Denoyelle5c7086f2021-01-11 09:21:52 +01005466 HA_SPIN_UNLOCK(IDLE_CONNS_LOCK, &idle_conns[i].idle_conns_lock);
William Dauchy6318d332020-05-02 21:52:36 +02005467 if (did_remove)
Willy Tarreau4d82bf52020-06-28 00:19:17 +02005468 task_wakeup(idle_conns[i].cleanup_task, TASK_WOKEN_OTHER);
Willy Tarreauc35bcfc2020-06-29 14:43:16 +02005469
5470 if ((i = ((i + 1 == global.nbthread) ? 0 : i + 1)) == tid)
5471 break;
William Dauchy6318d332020-05-02 21:52:36 +02005472 }
William Dauchy6318d332020-05-02 21:52:36 +02005473}
5474
Willy Tarreau144f84a2021-03-02 16:09:26 +01005475struct task *srv_cleanup_idle_conns(struct task *task, void *context, unsigned int state)
Olivier Houchard0c18a6f2018-12-02 14:11:41 +01005476{
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005477 struct server *srv;
5478 struct eb32_node *eb;
5479 int i;
5480 unsigned int next_wakeup;
Olivier Houchardb7b3faa2018-12-14 18:15:36 +01005481
Willy Tarreau21b9ff52020-11-05 09:12:20 +01005482 next_wakeup = TICK_ETERNITY;
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005483 HA_SPIN_LOCK(OTHER_LOCK, &idle_conn_srv_lock);
5484 while (1) {
Olivier Houchard079cb9a2020-03-30 00:23:57 +02005485 int exceed_conns;
5486 int to_kill;
5487 int curr_idle;
Olivier Houchardb7b3faa2018-12-14 18:15:36 +01005488
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005489 eb = eb32_lookup_ge(&idle_conn_srv, now_ms - TIMER_LOOK_BACK);
5490 if (!eb) {
5491 /* we might have reached the end of the tree, typically because
5492 * <now_ms> is in the first half and we're first scanning the last
5493 * half. Let's loop back to the beginning of the tree now.
5494 */
Olivier Houchard0c18a6f2018-12-02 14:11:41 +01005495
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005496 eb = eb32_first(&idle_conn_srv);
5497 if (likely(!eb))
5498 break;
5499 }
5500 if (tick_is_lt(now_ms, eb->key)) {
5501 /* timer not expired yet, revisit it later */
5502 next_wakeup = eb->key;
Olivier Houchard0c18a6f2018-12-02 14:11:41 +01005503 break;
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005504 }
5505 srv = eb32_entry(eb, struct server, idle_node);
Olivier Houchard079cb9a2020-03-30 00:23:57 +02005506
5507 /* Calculate how many idle connections we want to kill :
5508 * we want to remove half the difference between the total
5509 * of established connections (used or idle) and the max
5510 * number of used connections.
5511 */
5512 curr_idle = srv->curr_idle_conns;
5513 if (curr_idle == 0)
5514 goto remove;
Willy Tarreaubdb86bd2020-06-29 15:56:35 +02005515 exceed_conns = srv->curr_used_conns + curr_idle - MAX(srv->max_used_conns, srv->est_need_conns);
Olivier Houchard079cb9a2020-03-30 00:23:57 +02005516 exceed_conns = to_kill = exceed_conns / 2 + (exceed_conns & 1);
Willy Tarreaubdb86bd2020-06-29 15:56:35 +02005517
Willy Tarreau21b9ff52020-11-05 09:12:20 +01005518 srv->est_need_conns = (srv->est_need_conns + srv->max_used_conns) / 2;
Willy Tarreaubdb86bd2020-06-29 15:56:35 +02005519 if (srv->est_need_conns < srv->max_used_conns)
5520 srv->est_need_conns = srv->max_used_conns;
5521
Willy Tarreau41d57422022-11-21 14:32:33 +01005522 HA_ATOMIC_STORE(&srv->max_used_conns, srv->curr_used_conns);
Olivier Houchard079cb9a2020-03-30 00:23:57 +02005523
Willy Tarreau18ed7892020-07-02 19:05:30 +02005524 if (exceed_conns <= 0)
5525 goto remove;
5526
Willy Tarreauc35bcfc2020-06-29 14:43:16 +02005527 /* check all threads starting with ours */
5528 for (i = tid;;) {
Olivier Houchard079cb9a2020-03-30 00:23:57 +02005529 int max_conn;
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005530 int j;
5531 int did_remove = 0;
5532
Olivier Houchard079cb9a2020-03-30 00:23:57 +02005533 max_conn = (exceed_conns * srv->curr_idle_thr[i]) /
5534 curr_idle + 1;
Olivier Houchardff1d0922020-06-29 20:15:59 +02005535
Amaury Denoyelle5c7086f2021-01-11 09:21:52 +01005536 HA_SPIN_LOCK(IDLE_CONNS_LOCK, &idle_conns[i].idle_conns_lock);
Willy Tarreau430bf4a2021-03-04 09:45:32 +01005537 j = srv_migrate_conns_to_remove(&srv->per_thr[i].idle_conns, &idle_conns[i].toremove_conns, max_conn);
Olivier Houchardff1d0922020-06-29 20:15:59 +02005538 if (j > 0)
5539 did_remove = 1;
5540 if (max_conn - j > 0 &&
Willy Tarreau430bf4a2021-03-04 09:45:32 +01005541 srv_migrate_conns_to_remove(&srv->per_thr[i].safe_conns, &idle_conns[i].toremove_conns, max_conn - j) > 0)
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005542 did_remove = 1;
Amaury Denoyelle5c7086f2021-01-11 09:21:52 +01005543 HA_SPIN_UNLOCK(IDLE_CONNS_LOCK, &idle_conns[i].idle_conns_lock);
Olivier Houchardff1d0922020-06-29 20:15:59 +02005544
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005545 if (did_remove)
Willy Tarreau4d82bf52020-06-28 00:19:17 +02005546 task_wakeup(idle_conns[i].cleanup_task, TASK_WOKEN_OTHER);
Willy Tarreauc35bcfc2020-06-29 14:43:16 +02005547
5548 if ((i = ((i + 1 == global.nbthread) ? 0 : i + 1)) == tid)
5549 break;
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005550 }
Olivier Houchard079cb9a2020-03-30 00:23:57 +02005551remove:
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005552 eb32_delete(&srv->idle_node);
Willy Tarreau21b9ff52020-11-05 09:12:20 +01005553
5554 if (srv->curr_idle_conns) {
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005555 /* There are still more idle connections, add the
5556 * server back in the tree.
5557 */
Willy Tarreau21b9ff52020-11-05 09:12:20 +01005558 srv->idle_node.key = tick_add(srv->pool_purge_delay, now_ms);
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005559 eb32_insert(&idle_conn_srv, &srv->idle_node);
Willy Tarreau21b9ff52020-11-05 09:12:20 +01005560 next_wakeup = tick_first(next_wakeup, srv->idle_node.key);
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005561 }
Olivier Houchard0c18a6f2018-12-02 14:11:41 +01005562 }
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005563 HA_SPIN_UNLOCK(OTHER_LOCK, &idle_conn_srv_lock);
5564
Willy Tarreau21b9ff52020-11-05 09:12:20 +01005565 task->expire = next_wakeup;
Olivier Houchard0c18a6f2018-12-02 14:11:41 +01005566 return task;
5567}
Olivier Houchard88698d92019-04-16 19:07:22 +02005568
Amaury Denoyelle3109ccf2021-04-29 17:30:05 +02005569/* Close remaining idle connections. This functions is designed to be run on
5570 * process shutdown. This guarantees a proper socket shutdown to avoid
5571 * TIME_WAIT state. For a quick operation, only ctrl is closed, xprt stack is
5572 * bypassed.
5573 *
5574 * This function is not thread-safe so it must only be called via a global
5575 * deinit function.
5576 */
5577static void srv_close_idle_conns(struct server *srv)
5578{
5579 struct eb_root **cleaned_tree;
5580 int i;
5581
5582 for (i = 0; i < global.nbthread; ++i) {
5583 struct eb_root *conn_trees[] = {
5584 &srv->per_thr[i].idle_conns,
5585 &srv->per_thr[i].safe_conns,
5586 &srv->per_thr[i].avail_conns,
5587 NULL
5588 };
5589
5590 for (cleaned_tree = conn_trees; *cleaned_tree; ++cleaned_tree) {
5591 while (!eb_is_empty(*cleaned_tree)) {
5592 struct ebmb_node *node = ebmb_first(*cleaned_tree);
5593 struct conn_hash_node *conn_hash_node = ebmb_entry(node, struct conn_hash_node, node);
5594 struct connection *conn = conn_hash_node->conn;
5595
5596 if (conn->ctrl->ctrl_close)
5597 conn->ctrl->ctrl_close(conn);
5598 ebmb_delete(node);
5599 }
5600 }
5601 }
5602}
5603
5604REGISTER_SERVER_DEINIT(srv_close_idle_conns);
5605
Willy Tarreau76cc6992020-07-01 18:49:24 +02005606/* config parser for global "tune.idle-pool.shared", accepts "on" or "off" */
5607static int cfg_parse_idle_pool_shared(char **args, int section_type, struct proxy *curpx,
Willy Tarreau01825162021-03-09 09:53:46 +01005608 const struct proxy *defpx, const char *file, int line,
Willy Tarreau76cc6992020-07-01 18:49:24 +02005609 char **err)
5610{
5611 if (too_many_args(1, args, err, NULL))
5612 return -1;
5613
5614 if (strcmp(args[1], "on") == 0)
5615 global.tune.options |= GTUNE_IDLE_POOL_SHARED;
5616 else if (strcmp(args[1], "off") == 0)
5617 global.tune.options &= ~GTUNE_IDLE_POOL_SHARED;
5618 else {
5619 memprintf(err, "'%s' expects either 'on' or 'off' but got '%s'.", args[0], args[1]);
5620 return -1;
5621 }
5622 return 0;
5623}
5624
Olivier Houchard88698d92019-04-16 19:07:22 +02005625/* config parser for global "tune.pool-{low,high}-fd-ratio" */
5626static int cfg_parse_pool_fd_ratio(char **args, int section_type, struct proxy *curpx,
Willy Tarreau01825162021-03-09 09:53:46 +01005627 const struct proxy *defpx, const char *file, int line,
Olivier Houchard88698d92019-04-16 19:07:22 +02005628 char **err)
5629{
5630 int arg = -1;
5631
5632 if (too_many_args(1, args, err, NULL))
5633 return -1;
5634
5635 if (*(args[1]) != 0)
5636 arg = atoi(args[1]);
5637
5638 if (arg < 0 || arg > 100) {
5639 memprintf(err, "'%s' expects an integer argument between 0 and 100.", args[0]);
5640 return -1;
5641 }
5642
5643 if (args[0][10] == 'h')
5644 global.tune.pool_high_ratio = arg;
5645 else
5646 global.tune.pool_low_ratio = arg;
5647 return 0;
5648}
5649
5650/* config keyword parsers */
5651static struct cfg_kw_list cfg_kws = {ILH, {
Willy Tarreau76cc6992020-07-01 18:49:24 +02005652 { CFG_GLOBAL, "tune.idle-pool.shared", cfg_parse_idle_pool_shared },
Olivier Houchard88698d92019-04-16 19:07:22 +02005653 { CFG_GLOBAL, "tune.pool-high-fd-ratio", cfg_parse_pool_fd_ratio },
5654 { CFG_GLOBAL, "tune.pool-low-fd-ratio", cfg_parse_pool_fd_ratio },
5655 { 0, NULL, NULL }
5656}};
5657
5658INITCALL1(STG_REGISTER, cfg_register_keywords, &cfg_kws);
5659
Baptiste Assmanna68ca962015-04-14 01:15:08 +02005660/*
Willy Tarreaubaaee002006-06-26 02:48:02 +02005661 * Local variables:
5662 * c-indent-level: 8
5663 * c-basic-offset: 8
5664 * End:
5665 */