blob: ad4e7158b54d2f3b77ba23f110e16c2c46c41d92 [file] [log] [blame]
William Lallemand41db4602017-10-30 11:15:51 +01001/*
2 * Cache management
3 *
4 * Copyright 2017 HAProxy Technologies
5 * William Lallemand <wlallemand@haproxy.com>
6 *
7 * This program is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU General Public License
9 * as published by the Free Software Foundation; either version
10 * 2 of the License, or (at your option) any later version.
11 */
12
Willy Tarreaub2551052020-06-09 09:07:15 +020013#include <import/eb32tree.h>
14#include <import/sha1.h>
15
Willy Tarreau122eba92020-06-04 10:15:32 +020016#include <haproxy/action-t.h>
Willy Tarreau4c7e4b72020-05-27 12:58:42 +020017#include <haproxy/api.h>
Willy Tarreau6be78492020-06-05 00:00:29 +020018#include <haproxy/cfgparse.h>
Willy Tarreauf1d32c42020-06-04 21:07:02 +020019#include <haproxy/channel.h>
Willy Tarreau83487a82020-06-04 20:19:54 +020020#include <haproxy/cli.h>
Willy Tarreau36979d92020-06-05 17:27:29 +020021#include <haproxy/errors.h>
Willy Tarreauc7babd82020-06-04 21:29:29 +020022#include <haproxy/filters.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020023#include <haproxy/hash.h>
Remi Tricot-Le Bretondbb65b52020-10-22 10:40:04 +020024#include <haproxy/http.h>
Willy Tarreauc2b1ff02020-06-04 21:21:03 +020025#include <haproxy/http_ana.h>
Willy Tarreau87735332020-06-04 09:08:41 +020026#include <haproxy/http_htx.h>
Willy Tarreauc761f842020-06-04 11:40:28 +020027#include <haproxy/http_rules.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020028#include <haproxy/htx.h>
29#include <haproxy/net_helper.h>
Willy Tarreaua264d962020-06-04 22:29:18 +020030#include <haproxy/proxy.h>
Remi Tricot-Le Bretonbf971212020-10-27 11:55:57 +010031#include <haproxy/sample.h>
Willy Tarreau334099c2020-06-03 18:38:48 +020032#include <haproxy/shctx.h>
Willy Tarreaudfd3de82020-06-04 23:46:14 +020033#include <haproxy/stream.h>
Willy Tarreau5e539c92020-06-04 20:45:39 +020034#include <haproxy/stream_interface.h>
Willy Tarreauce6700a2021-05-08 13:03:55 +020035#include <haproxy/tools.h>
William Lallemand41db4602017-10-30 11:15:51 +010036
Christopher Faulet27d93c32018-12-15 22:32:02 +010037#define CACHE_FLT_F_IMPLICIT_DECL 0x00000001 /* The cache filtre was implicitly declared (ie without
Christopher Faulet99a17a22018-12-11 09:18:27 +010038 * the filter keyword) */
Tim Duesterhusd7c6e6a2020-09-14 18:01:33 +020039#define CACHE_FLT_INIT 0x00000002 /* Whether the cache name was freed. */
Christopher Fauletafd819c2018-12-11 08:57:45 +010040
Christopher Fauletf4a4ef72018-12-07 17:39:53 +010041const char *cache_store_flt_id = "cache store filter";
William Lallemand41db4602017-10-30 11:15:51 +010042
Willy Tarreau2231b632019-03-29 18:26:52 +010043extern struct applet http_cache_applet;
William Lallemand41db4602017-10-30 11:15:51 +010044
45struct flt_ops cache_ops;
46
47struct cache {
Willy Tarreaufd5efb52017-11-26 08:54:31 +010048 struct list list; /* cache linked list */
William Lallemand41db4602017-10-30 11:15:51 +010049 struct eb_root entries; /* head of cache entries based on keys */
Willy Tarreaufd5efb52017-11-26 08:54:31 +010050 unsigned int maxage; /* max-age */
51 unsigned int maxblocks;
Frédéric Lécaille4eba5442018-10-25 20:29:31 +020052 unsigned int maxobjsz; /* max-object-size (in bytes) */
Remi Tricot-Le Breton5853c0c2020-12-10 17:58:43 +010053 unsigned int max_secondary_entries; /* maximum number of secondary entries with the same primary hash */
Remi Tricot-Le Breton754b2422020-11-16 15:56:10 +010054 uint8_t vary_processing_enabled; /* boolean : manage Vary header (disabled by default) */
Willy Tarreaufd5efb52017-11-26 08:54:31 +010055 char id[33]; /* cache name */
William Lallemand41db4602017-10-30 11:15:51 +010056};
57
Christopher Faulet95220e22018-12-07 17:34:39 +010058/* cache config for filters */
59struct cache_flt_conf {
60 union {
61 struct cache *cache; /* cache used by the filter */
62 char *name; /* cache name used during conf parsing */
63 } c;
64 unsigned int flags; /* CACHE_FLT_F_* */
65};
66
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +010067
68/*
69 * Vary-related structures and functions
70 */
71enum vary_header_bit {
72 VARY_ACCEPT_ENCODING = (1 << 0),
73 VARY_REFERER = (1 << 1),
74 VARY_LAST /* should always be last */
75};
76
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +010077/*
78 * Encoding list extracted from
79 * https://www.iana.org/assignments/http-parameters/http-parameters.xhtml
80 * and RFC7231#5.3.4.
81 */
82enum vary_encoding {
83 VARY_ENCODING_GZIP = (1 << 0),
84 VARY_ENCODING_DEFLATE = (1 << 1),
85 VARY_ENCODING_BR = (1 << 2),
86 VARY_ENCODING_COMPRESS = (1 << 3),
87 VARY_ENCODING_AES128GCM = (1 << 4),
88 VARY_ENCODING_EXI = (1 << 5),
89 VARY_ENCODING_PACK200_GZIP = (1 << 6),
90 VARY_ENCODING_ZSTD = (1 << 7),
91 VARY_ENCODING_IDENTITY = (1 << 8),
92 VARY_ENCODING_STAR = (1 << 9),
93 VARY_ENCODING_OTHER = (1 << 10)
94};
95
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +010096struct vary_hashing_information {
97 struct ist hdr_name; /* Header name */
Ilya Shipitsinf38a0182020-12-21 01:16:17 +050098 enum vary_header_bit value; /* Bit representing the header in a vary signature */
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +010099 unsigned int hash_length; /* Size of the sub hash for this header's value */
Remi Tricot-Le Breton6a34b2b2020-12-23 18:13:47 +0100100 int(*norm_fn)(struct htx*,struct ist hdr_name,char* buf,unsigned int* buf_len); /* Normalization function */
Tim Duesterhused84d842021-01-18 13:41:17 +0100101 int(*cmp_fn)(const void *ref, const void *new, unsigned int len); /* Comparison function, should return 0 if the hashes are alike */
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +0100102};
103
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +0100104static int http_request_prebuild_full_secondary_key(struct stream *s);
105static int http_request_build_secondary_key(struct stream *s, int vary_signature);
106static int http_request_reduce_secondary_key(unsigned int vary_signature,
107 char prebuilt_key[HTTP_CACHE_SEC_KEY_LEN]);
108
109static int parse_encoding_value(struct ist value, unsigned int *encoding_value,
110 unsigned int *has_null_weight);
111
Remi Tricot-Le Bretone4421de2020-12-23 18:13:46 +0100112static int accept_encoding_normalizer(struct htx *htx, struct ist hdr_name,
113 char *buf, unsigned int *buf_len);
114static int default_normalizer(struct htx *htx, struct ist hdr_name,
115 char *buf, unsigned int *buf_len);
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +0100116
Tim Duesterhused84d842021-01-18 13:41:17 +0100117static int accept_encoding_bitmap_cmp(const void *ref, const void *new, unsigned int len);
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +0100118
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +0100119/* Warning : do not forget to update HTTP_CACHE_SEC_KEY_LEN when new items are
120 * added to this array. */
121const struct vary_hashing_information vary_information[] = {
Tim Duesterhused84d842021-01-18 13:41:17 +0100122 { IST("accept-encoding"), VARY_ACCEPT_ENCODING, sizeof(uint32_t), &accept_encoding_normalizer, &accept_encoding_bitmap_cmp },
Remi Tricot-Le Breton6a34b2b2020-12-23 18:13:47 +0100123 { IST("referer"), VARY_REFERER, sizeof(int), &default_normalizer, NULL },
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +0100124};
125
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +0100126
William Lallemand41db4602017-10-30 11:15:51 +0100127/*
128 * cache ctx for filters
129 */
130struct cache_st {
William Lallemand41db4602017-10-30 11:15:51 +0100131 struct shared_block *first_block;
132};
133
Remi Tricot-Le Breton5853c0c2020-12-10 17:58:43 +0100134#define DEFAULT_MAX_SECONDARY_ENTRY 10
Remi Tricot-Le Breton65904e42020-12-10 17:58:41 +0100135
William Lallemand41db4602017-10-30 11:15:51 +0100136struct cache_entry {
Remi Tricot-Le Breton32434472020-11-25 10:09:43 +0100137 unsigned int complete; /* An entry won't be valid until complete is not null. */
William Lallemand41db4602017-10-30 11:15:51 +0100138 unsigned int latest_validation; /* latest validation date */
139 unsigned int expire; /* expiration date */
Frédéric Lécaillee7a770c2018-10-26 14:29:22 +0200140 unsigned int age; /* Origin server "Age" header value */
Christopher Faulet54a8d5a2018-12-07 12:21:11 +0100141
William Lallemand41db4602017-10-30 11:15:51 +0100142 struct eb32_node eb; /* ebtree node used to hold the cache object */
William Lallemandf528fff2017-11-23 19:43:17 +0100143 char hash[20];
Remi Tricot-Le Bretondbb65b52020-10-22 10:40:04 +0200144
Remi Tricot-Le Breton1785f3d2020-11-16 15:56:09 +0100145 char secondary_key[HTTP_CACHE_SEC_KEY_LEN]; /* Optional secondary key. */
146 unsigned int secondary_key_signature; /* Bitfield of the HTTP headers that should be used
147 * to build secondary keys for this cache entry. */
Remi Tricot-Le Breton65904e42020-12-10 17:58:41 +0100148 unsigned int secondary_entries_count; /* Should only be filled in the last entry of a list of dup entries */
Remi Tricot-Le Breton73be7962020-12-10 17:58:42 +0100149 unsigned int last_clear_ts; /* Timestamp of the last call to clear_expired_duplicates. */
Remi Tricot-Le Breton1785f3d2020-11-16 15:56:09 +0100150
Remi Tricot-Le Bretondbb65b52020-10-22 10:40:04 +0200151 unsigned int etag_length; /* Length of the ETag value (if one was found in the response). */
152 unsigned int etag_offset; /* Offset of the ETag value in the data buffer. */
153
Remi Tricot Le Breton27091b42020-10-23 10:51:27 +0200154 time_t last_modified; /* Origin server "Last-Modified" header value converted in
155 * seconds since epoch. If no "Last-Modified"
156 * header is found, use "Date" header value,
157 * otherwise use reception time. This field will
158 * be used in case of an "If-Modified-Since"-based
159 * conditional request. */
160
William Lallemand41db4602017-10-30 11:15:51 +0100161 unsigned char data[0];
162};
163
164#define CACHE_BLOCKSIZE 1024
Willy Tarreau96062a12018-11-11 14:00:28 +0100165#define CACHE_ENTRY_MAX_AGE 2147483648U
William Lallemand41db4602017-10-30 11:15:51 +0100166
167static struct list caches = LIST_HEAD_INIT(caches);
William Lallemandd1d1e222019-08-28 15:22:49 +0200168static struct list caches_config = LIST_HEAD_INIT(caches_config); /* cache config to init */
William Lallemand41db4602017-10-30 11:15:51 +0100169static struct cache *tmp_cache_config = NULL;
170
Willy Tarreau8ceae722018-11-26 11:58:30 +0100171DECLARE_STATIC_POOL(pool_head_cache_st, "cache_st", sizeof(struct cache_st));
172
Remi Tricot-Le Breton65904e42020-12-10 17:58:41 +0100173static struct eb32_node *insert_entry(struct cache *cache, struct cache_entry *new_entry);
174static void delete_entry(struct cache_entry *del_entry);
175
William Lallemandf528fff2017-11-23 19:43:17 +0100176struct cache_entry *entry_exist(struct cache *cache, char *hash)
William Lallemand4da3f8a2017-10-31 14:33:34 +0100177{
178 struct eb32_node *node;
179 struct cache_entry *entry;
180
Willy Tarreau8b507582020-02-25 09:35:07 +0100181 node = eb32_lookup(&cache->entries, read_u32(hash));
William Lallemand4da3f8a2017-10-31 14:33:34 +0100182 if (!node)
183 return NULL;
184
185 entry = eb32_entry(node, struct cache_entry, eb);
William Lallemandf528fff2017-11-23 19:43:17 +0100186
187 /* if that's not the right node */
188 if (memcmp(entry->hash, hash, sizeof(entry->hash)))
189 return NULL;
190
William Lallemand08727662017-11-21 20:01:27 +0100191 if (entry->expire > now.tv_sec) {
William Lallemand4da3f8a2017-10-31 14:33:34 +0100192 return entry;
William Lallemand08727662017-11-21 20:01:27 +0100193 } else {
Remi Tricot-Le Breton65904e42020-12-10 17:58:41 +0100194 delete_entry(entry);
William Lallemand08727662017-11-21 20:01:27 +0100195 entry->eb.key = 0;
196 }
William Lallemand4da3f8a2017-10-31 14:33:34 +0100197 return NULL;
198
199}
200
Remi Tricot-Le Breton6a34b2b2020-12-23 18:13:47 +0100201
202/*
203 * Compare a newly built secondary key to the one found in a cache_entry.
204 * Every sub-part of the key is compared to the reference through the dedicated
205 * comparison function of the sub-part (that might do more than a simple
206 * memcmp).
207 * Returns 0 if the keys are alike.
208 */
209static int secondary_key_cmp(const char *ref_key, const char *new_key)
210{
211 int retval = 0;
Tim Duesterhus5897cfe2021-01-18 13:41:18 +0100212 size_t idx = 0;
213 unsigned int offset = 0;
Remi Tricot-Le Breton6a34b2b2020-12-23 18:13:47 +0100214 const struct vary_hashing_information *info;
215
216 for (idx = 0; idx < sizeof(vary_information)/sizeof(*vary_information) && !retval; ++idx) {
217 info = &vary_information[idx];
218
219 if (info->cmp_fn)
220 retval = info->cmp_fn(&ref_key[offset], &new_key[offset], info->hash_length);
221 else
222 retval = memcmp(&ref_key[offset], &new_key[offset], info->hash_length);
223
224 offset += info->hash_length;
225 }
226
227 return retval;
228}
229
Remi Tricot-Le Breton1785f3d2020-11-16 15:56:09 +0100230/*
231 * There can be multiple entries with the same primary key in the ebtree so in
232 * order to get the proper one out of the list, we use a secondary_key.
233 * This function simply iterates over all the entries with the same primary_key
234 * until it finds the right one.
235 * Returns the cache_entry in case of success, NULL otherwise.
236 */
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +0100237struct cache_entry *secondary_entry_exist(struct cache *cache, struct cache_entry *entry,
Remi Tricot-Le Breton6a34b2b2020-12-23 18:13:47 +0100238 const char *secondary_key)
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +0100239{
240 struct eb32_node *node = &entry->eb;
241
242 if (!entry->secondary_key_signature)
243 return NULL;
244
Remi Tricot-Le Breton6a34b2b2020-12-23 18:13:47 +0100245 while (entry && secondary_key_cmp(entry->secondary_key, secondary_key) != 0) {
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +0100246 node = eb32_next_dup(node);
Remi Tricot-Le Breton65904e42020-12-10 17:58:41 +0100247
248 /* Make the best use of this iteration and clear expired entries
249 * when we find them. Calling delete_entry would be too costly
250 * so we simply call eb32_delete. The secondary_entry count will
251 * be updated when we try to insert a new entry to this list. */
252 if (entry->expire <= now.tv_sec) {
253 eb32_delete(&entry->eb);
254 entry->eb.key = 0;
255 }
256
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +0100257 entry = node ? eb32_entry(node, struct cache_entry, eb) : NULL;
258 }
259
260 /* Expired entry */
261 if (entry && entry->expire <= now.tv_sec) {
262 eb32_delete(&entry->eb);
263 entry->eb.key = 0;
264 entry = NULL;
265 }
266
267 return entry;
268}
269
Remi Tricot-Le Breton65904e42020-12-10 17:58:41 +0100270
Remi Tricot-Le Breton73be7962020-12-10 17:58:42 +0100271/*
272 * Remove all expired entries from a list of duplicates.
273 * Return the number of alive entries in the list and sets dup_tail to the
274 * current last item of the list.
275 */
276static unsigned int clear_expired_duplicates(struct eb32_node **dup_tail)
277{
278 unsigned int entry_count = 0;
279 struct cache_entry *entry = NULL;
280 struct eb32_node *prev = *dup_tail;
281 struct eb32_node *tail = NULL;
282
283 while (prev) {
284 entry = container_of(prev, struct cache_entry, eb);
285 prev = eb32_prev_dup(prev);
286 if (entry->expire <= now.tv_sec) {
287 eb32_delete(&entry->eb);
288 entry->eb.key = 0;
289 }
290 else {
291 if (!tail)
292 tail = &entry->eb;
293 ++entry_count;
294 }
295 }
296
297 *dup_tail = tail;
298
299 return entry_count;
300}
301
Remi Tricot-Le Breton65904e42020-12-10 17:58:41 +0100302
303/*
304 * This function inserts a cache_entry in the cache's ebtree. In case of
305 * duplicate entries (vary), it then checks that the number of entries did not
306 * reach the max number of secondary entries. If this entry should not have been
307 * created, remove it.
308 * In the regular case (unique entries), this function does not do more than a
309 * simple insert. In case of secondary entries, it will at most cost an
310 * insertion+max_sec_entries time checks and entry deletion.
311 * Returns the newly inserted node in case of success, NULL otherwise.
312 */
313static struct eb32_node *insert_entry(struct cache *cache, struct cache_entry *new_entry)
314{
315 struct eb32_node *prev = NULL;
316 struct cache_entry *entry = NULL;
317 unsigned int entry_count = 0;
Remi Tricot-Le Breton73be7962020-12-10 17:58:42 +0100318 unsigned int last_clear_ts = now.tv_sec;
Remi Tricot-Le Breton65904e42020-12-10 17:58:41 +0100319
320 struct eb32_node *node = eb32_insert(&cache->entries, &new_entry->eb);
321
322 /* We should not have multiple entries with the same primary key unless
323 * the entry has a non null vary signature. */
324 if (!new_entry->secondary_key_signature)
325 return node;
326
327 prev = eb32_prev_dup(node);
328 if (prev != NULL) {
329 /* The last entry of a duplicate list should contain the current
330 * number of entries in the list. */
331 entry = container_of(prev, struct cache_entry, eb);
332 entry_count = entry->secondary_entries_count;
Remi Tricot-Le Breton73be7962020-12-10 17:58:42 +0100333 last_clear_ts = entry->last_clear_ts;
Remi Tricot-Le Breton65904e42020-12-10 17:58:41 +0100334
Remi Tricot-Le Breton5853c0c2020-12-10 17:58:43 +0100335 if (entry_count >= cache->max_secondary_entries) {
Remi Tricot-Le Breton73be7962020-12-10 17:58:42 +0100336 /* Some entries of the duplicate list might be expired so
337 * we will iterate over all the items in order to free some
338 * space. In order to avoid going over the same list too
339 * often, we first check the timestamp of the last check
340 * performed. */
341 if (last_clear_ts == now.tv_sec) {
342 /* Too many entries for this primary key, clear the
343 * one that was inserted. */
344 eb32_delete(node);
345 node->key = 0;
346 return NULL;
347 }
348
349 entry_count = clear_expired_duplicates(&prev);
Remi Tricot-Le Breton5853c0c2020-12-10 17:58:43 +0100350 if (entry_count >= cache->max_secondary_entries) {
Remi Tricot-Le Breton73be7962020-12-10 17:58:42 +0100351 /* Still too many entries for this primary key, delete
352 * the newly inserted one. */
353 entry = container_of(prev, struct cache_entry, eb);
354 entry->last_clear_ts = now.tv_sec;
355 eb32_delete(node);
356 node->key = 0;
357 return NULL;
358 }
Remi Tricot-Le Breton65904e42020-12-10 17:58:41 +0100359 }
360 }
361
362 new_entry->secondary_entries_count = entry_count + 1;
Remi Tricot-Le Breton73be7962020-12-10 17:58:42 +0100363 new_entry->last_clear_ts = last_clear_ts;
Remi Tricot-Le Breton65904e42020-12-10 17:58:41 +0100364
365 return node;
366}
367
368
369/*
370 * This function removes an entry from the ebtree. If the entry was a duplicate
371 * (in case of Vary), it updates the secondary entry counter in another
372 * duplicate entry (the last entry of the dup list).
373 */
374static void delete_entry(struct cache_entry *del_entry)
375{
376 struct eb32_node *prev = NULL, *next = NULL;
377 struct cache_entry *entry = NULL;
378 struct eb32_node *last = NULL;
379
380 if (del_entry->secondary_key_signature) {
381 next = &del_entry->eb;
382
383 /* Look for last entry of the duplicates list. */
384 while ((next = eb32_next_dup(next))) {
385 last = next;
386 }
387
388 if (last) {
389 entry = container_of(last, struct cache_entry, eb);
390 --entry->secondary_entries_count;
391 }
392 else {
393 /* The current entry is the last one, look for the
394 * previous one to update its counter. */
395 prev = eb32_prev_dup(&del_entry->eb);
396 if (prev) {
397 entry = container_of(prev, struct cache_entry, eb);
398 entry->secondary_entries_count = del_entry->secondary_entries_count - 1;
399 }
400 }
401 }
402 eb32_delete(&del_entry->eb);
403 del_entry->eb.key = 0;
404}
405
406
William Lallemand4da3f8a2017-10-31 14:33:34 +0100407static inline struct shared_context *shctx_ptr(struct cache *cache)
408{
409 return (struct shared_context *)((unsigned char *)cache - ((struct shared_context *)NULL)->data);
410}
411
William Lallemand77c11972017-10-31 20:43:01 +0100412static inline struct shared_block *block_ptr(struct cache_entry *entry)
413{
414 return (struct shared_block *)((unsigned char *)entry - ((struct shared_block *)NULL)->data);
415}
416
417
418
William Lallemand41db4602017-10-30 11:15:51 +0100419static int
Christopher Faulet54a8d5a2018-12-07 12:21:11 +0100420cache_store_init(struct proxy *px, struct flt_conf *fconf)
William Lallemand41db4602017-10-30 11:15:51 +0100421{
Christopher Faulet54a8d5a2018-12-07 12:21:11 +0100422 fconf->flags |= FLT_CFG_FL_HTX;
William Lallemand41db4602017-10-30 11:15:51 +0100423 return 0;
424}
425
Christopher Faulet95220e22018-12-07 17:34:39 +0100426static void
427cache_store_deinit(struct proxy *px, struct flt_conf *fconf)
428{
429 struct cache_flt_conf *cconf = fconf->conf;
430
Tim Duesterhusd7c6e6a2020-09-14 18:01:33 +0200431 if (!(cconf->flags & CACHE_FLT_INIT))
432 free(cconf->c.name);
Christopher Faulet95220e22018-12-07 17:34:39 +0100433 free(cconf);
434}
435
William Lallemand4da3f8a2017-10-31 14:33:34 +0100436static int
Christopher Faulet95220e22018-12-07 17:34:39 +0100437cache_store_check(struct proxy *px, struct flt_conf *fconf)
438{
439 struct cache_flt_conf *cconf = fconf->conf;
Christopher Fauletafd819c2018-12-11 08:57:45 +0100440 struct flt_conf *f;
Christopher Faulet95220e22018-12-07 17:34:39 +0100441 struct cache *cache;
Christopher Faulet27d93c32018-12-15 22:32:02 +0100442 int comp = 0;
Christopher Faulet95220e22018-12-07 17:34:39 +0100443
William Lallemandd1d1e222019-08-28 15:22:49 +0200444 /* Find the cache corresponding to the name in the filter config. The
445 * cache will not be referenced now in the filter config because it is
446 * not fully allocated. This step will be performed during the cache
447 * post_check.
448 */
449 list_for_each_entry(cache, &caches_config, list) {
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100450 if (strcmp(cache->id, cconf->c.name) == 0)
Christopher Faulet95220e22018-12-07 17:34:39 +0100451 goto found;
Christopher Faulet95220e22018-12-07 17:34:39 +0100452 }
453
454 ha_alert("config: %s '%s': unable to find the cache '%s' referenced by the filter 'cache'.\n",
455 proxy_type_str(px), px->id, (char *)cconf->c.name);
456 return 1;
457
458 found:
Christopher Fauletafd819c2018-12-11 08:57:45 +0100459 /* Here <cache> points on the cache the filter must use and <cconf>
460 * points on the cache filter configuration. */
461
462 /* Check all filters for proxy <px> to know if the compression is
Christopher Faulet27d93c32018-12-15 22:32:02 +0100463 * enabled and if it is after the cache. When the compression is before
464 * the cache, an error is returned. Also check if the cache filter must
465 * be explicitly declaired or not. */
Christopher Fauletafd819c2018-12-11 08:57:45 +0100466 list_for_each_entry(f, &px->filter_configs, list) {
467 if (f == fconf) {
Christopher Faulet27d93c32018-12-15 22:32:02 +0100468 /* The compression filter must be evaluated after the cache. */
469 if (comp) {
470 ha_alert("config: %s '%s': unable to enable the compression filter before "
471 "the cache '%s'.\n", proxy_type_str(px), px->id, cache->id);
472 return 1;
473 }
Christopher Faulet99a17a22018-12-11 09:18:27 +0100474 }
Christopher Faulet8f7fe1c2019-07-15 15:08:25 +0200475 else if (f->id == http_comp_flt_id)
Christopher Faulet27d93c32018-12-15 22:32:02 +0100476 comp = 1;
Christopher Faulet78fbb9f2019-08-11 23:11:03 +0200477 else if (f->id == fcgi_flt_id)
478 continue;
Christopher Faulet27d93c32018-12-15 22:32:02 +0100479 else if ((f->id != fconf->id) && (cconf->flags & CACHE_FLT_F_IMPLICIT_DECL)) {
480 /* Implicit declaration is only allowed with the
Christopher Faulet78fbb9f2019-08-11 23:11:03 +0200481 * compression and fcgi. For other filters, an implicit
Christopher Faulet27d93c32018-12-15 22:32:02 +0100482 * declaration is required. */
483 ha_alert("config: %s '%s': require an explicit filter declaration "
484 "to use the cache '%s'.\n", proxy_type_str(px), px->id, cache->id);
485 return 1;
486 }
487
Christopher Fauletafd819c2018-12-11 08:57:45 +0100488 }
Christopher Faulet95220e22018-12-07 17:34:39 +0100489 return 0;
490}
491
492static int
Christopher Faulet65554e12020-03-06 14:52:06 +0100493cache_store_strm_init(struct stream *s, struct filter *filter)
William Lallemand4da3f8a2017-10-31 14:33:34 +0100494{
Christopher Faulet65554e12020-03-06 14:52:06 +0100495 struct cache_st *st;
William Lallemand4da3f8a2017-10-31 14:33:34 +0100496
Willy Tarreauacc5b012021-03-22 15:00:49 +0100497 st = pool_alloc(pool_head_cache_st);
Christopher Faulet65554e12020-03-06 14:52:06 +0100498 if (st == NULL)
499 return -1;
William Lallemand4da3f8a2017-10-31 14:33:34 +0100500
Christopher Faulet65554e12020-03-06 14:52:06 +0100501 st->first_block = NULL;
502 filter->ctx = st;
Christopher Faulet839791a2019-01-07 16:12:07 +0100503
Christopher Faulet65554e12020-03-06 14:52:06 +0100504 /* Register post-analyzer on AN_RES_WAIT_HTTP */
505 filter->post_analyzers |= AN_RES_WAIT_HTTP;
William Lallemand4da3f8a2017-10-31 14:33:34 +0100506 return 1;
507}
508
Christopher Faulet65554e12020-03-06 14:52:06 +0100509static void
510cache_store_strm_deinit(struct stream *s, struct filter *filter)
William Lallemand49dc0482017-11-24 14:33:54 +0100511{
512 struct cache_st *st = filter->ctx;
Christopher Faulet95220e22018-12-07 17:34:39 +0100513 struct cache_flt_conf *cconf = FLT_CONF(filter);
514 struct cache *cache = cconf->c.cache;
William Lallemand49dc0482017-11-24 14:33:54 +0100515 struct shared_context *shctx = shctx_ptr(cache);
516
William Lallemand49dc0482017-11-24 14:33:54 +0100517 /* Everything should be released in the http_end filter, but we need to do it
518 * there too, in case of errors */
William Lallemand49dc0482017-11-24 14:33:54 +0100519 if (st && st->first_block) {
William Lallemand49dc0482017-11-24 14:33:54 +0100520 shctx_lock(shctx);
521 shctx_row_dec_hot(shctx, st->first_block);
522 shctx_unlock(shctx);
William Lallemand49dc0482017-11-24 14:33:54 +0100523 }
524 if (st) {
Willy Tarreaubafbe012017-11-24 17:34:44 +0100525 pool_free(pool_head_cache_st, st);
William Lallemand49dc0482017-11-24 14:33:54 +0100526 filter->ctx = NULL;
527 }
William Lallemand49dc0482017-11-24 14:33:54 +0100528}
529
Christopher Faulet839791a2019-01-07 16:12:07 +0100530static int
531cache_store_post_analyze(struct stream *s, struct filter *filter, struct channel *chn,
532 unsigned an_bit)
533{
534 struct http_txn *txn = s->txn;
535 struct http_msg *msg = &txn->rsp;
536 struct cache_st *st = filter->ctx;
537
538 if (an_bit != AN_RES_WAIT_HTTP)
539 goto end;
540
541 /* Here we need to check if any compression filter precedes the cache
542 * filter. This is only possible when the compression is configured in
543 * the frontend while the cache filter is configured on the
544 * backend. This case cannot be detected during HAProxy startup. So in
545 * such cases, the cache is disabled.
546 */
547 if (st && (msg->flags & HTTP_MSGF_COMPRESSING)) {
548 pool_free(pool_head_cache_st, st);
549 filter->ctx = NULL;
550 }
551
552 end:
553 return 1;
554}
William Lallemand49dc0482017-11-24 14:33:54 +0100555
556static int
William Lallemand4da3f8a2017-10-31 14:33:34 +0100557cache_store_http_headers(struct stream *s, struct filter *filter, struct http_msg *msg)
558{
559 struct cache_st *st = filter->ctx;
560
William Lallemand4da3f8a2017-10-31 14:33:34 +0100561 if (!(msg->chn->flags & CF_ISRESP) || !st)
562 return 1;
563
Christopher Faulet95e7ea32019-07-15 21:01:29 +0200564 if (st->first_block)
Christopher Faulet67658c92018-12-06 21:59:39 +0100565 register_data_filter(s, msg->chn, filter);
William Lallemand4da3f8a2017-10-31 14:33:34 +0100566 return 1;
567}
568
Frédéric Lécaille8df65ae2018-10-22 18:01:48 +0200569static inline void disable_cache_entry(struct cache_st *st,
570 struct filter *filter, struct shared_context *shctx)
571{
572 struct cache_entry *object;
573
574 object = (struct cache_entry *)st->first_block->data;
575 filter->ctx = NULL; /* disable cache */
576 shctx_lock(shctx);
577 shctx_row_dec_hot(shctx, st->first_block);
Remi Tricot-Le Breton964caaf2020-12-15 14:30:12 +0100578 eb32_delete(&object->eb);
Frédéric Lécaille8df65ae2018-10-22 18:01:48 +0200579 object->eb.key = 0;
580 shctx_unlock(shctx);
581 pool_free(pool_head_cache_st, st);
582}
583
William Lallemand4da3f8a2017-10-31 14:33:34 +0100584static int
Christopher Faulet54a8d5a2018-12-07 12:21:11 +0100585cache_store_http_payload(struct stream *s, struct filter *filter, struct http_msg *msg,
586 unsigned int offset, unsigned int len)
587{
Christopher Faulet95220e22018-12-07 17:34:39 +0100588 struct cache_flt_conf *cconf = FLT_CONF(filter);
589 struct shared_context *shctx = shctx_ptr(cconf->c.cache);
Christopher Faulet54a8d5a2018-12-07 12:21:11 +0100590 struct cache_st *st = filter->ctx;
591 struct htx *htx = htxbuf(&msg->chn->buf);
592 struct htx_blk *blk;
Christopher Faulet8f3c2562019-06-03 22:19:18 +0200593 struct shared_block *fb;
Christopher Faulet497c7592020-03-02 16:19:50 +0100594 struct htx_ret htxret;
Christopher Faulet8f3c2562019-06-03 22:19:18 +0200595 unsigned int orig_len, to_forward;
596 int ret;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +0100597
598 if (!len)
599 return len;
600
601 if (!st->first_block) {
602 unregister_data_filter(s, msg->chn, filter);
603 return len;
604 }
Christopher Faulet54a8d5a2018-12-07 12:21:11 +0100605
Christopher Faulet8f3c2562019-06-03 22:19:18 +0200606 chunk_reset(&trash);
607 orig_len = len;
608 to_forward = 0;
Christopher Faulet497c7592020-03-02 16:19:50 +0100609
610 htxret = htx_find_offset(htx, offset);
611 blk = htxret.blk;
612 offset = htxret.ret;
613 for (; blk && len; blk = htx_get_next_blk(htx, blk)) {
Christopher Faulet54a8d5a2018-12-07 12:21:11 +0100614 enum htx_blk_type type = htx_get_blk_type(blk);
Christopher Faulet8f3c2562019-06-03 22:19:18 +0200615 uint32_t info, sz = htx_get_blksz(blk);
Christopher Faulet54a8d5a2018-12-07 12:21:11 +0100616 struct ist v;
617
618 switch (type) {
619 case HTX_BLK_UNUSED:
620 break;
621
622 case HTX_BLK_DATA:
Christopher Faulet54a8d5a2018-12-07 12:21:11 +0100623 v = htx_get_blk_value(htx, blk);
Tim Duesterhus154374c2021-03-02 18:57:27 +0100624 v = istadv(v, offset);
Christopher Faulet54a8d5a2018-12-07 12:21:11 +0100625 if (v.len > len)
626 v.len = len;
627
Christopher Faulet8f3c2562019-06-03 22:19:18 +0200628 info = (type << 28) + v.len;
629 chunk_memcat(&trash, (char *)&info, sizeof(info));
630 chunk_memcat(&trash, v.ptr, v.len);
Christopher Faulet54a8d5a2018-12-07 12:21:11 +0100631 to_forward += v.len;
632 len -= v.len;
633 break;
634
635 default:
Christopher Faulet8f3c2562019-06-03 22:19:18 +0200636 /* Here offset must always be 0 because only
637 * DATA blocks can be partially transferred. */
638 if (offset)
639 goto no_cache;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +0100640 if (sz > len)
Christopher Faulet8f3c2562019-06-03 22:19:18 +0200641 goto end;
642
643 chunk_memcat(&trash, (char *)&blk->info, sizeof(blk->info));
644 chunk_memcat(&trash, htx_get_blk_ptr(htx, blk), sz);
Christopher Faulet54a8d5a2018-12-07 12:21:11 +0100645 to_forward += sz;
646 len -= sz;
647 break;
648 }
649
650 offset = 0;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +0100651 }
Christopher Faulet8f3c2562019-06-03 22:19:18 +0200652
653 end:
654 shctx_lock(shctx);
655 fb = shctx_row_reserve_hot(shctx, st->first_block, trash.data);
656 if (!fb) {
657 shctx_unlock(shctx);
658 goto no_cache;
659 }
660 shctx_unlock(shctx);
661
662 ret = shctx_row_data_append(shctx, st->first_block, st->first_block->last_append,
663 (unsigned char *)b_head(&trash), b_data(&trash));
664 if (ret < 0)
665 goto no_cache;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +0100666
667 return to_forward;
668
669 no_cache:
670 disable_cache_entry(st, filter, shctx);
671 unregister_data_filter(s, msg->chn, filter);
Christopher Faulet8f3c2562019-06-03 22:19:18 +0200672 return orig_len;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +0100673}
674
675static int
William Lallemand4da3f8a2017-10-31 14:33:34 +0100676cache_store_http_end(struct stream *s, struct filter *filter,
677 struct http_msg *msg)
678{
679 struct cache_st *st = filter->ctx;
Christopher Faulet95220e22018-12-07 17:34:39 +0100680 struct cache_flt_conf *cconf = FLT_CONF(filter);
681 struct cache *cache = cconf->c.cache;
William Lallemand4da3f8a2017-10-31 14:33:34 +0100682 struct shared_context *shctx = shctx_ptr(cache);
683 struct cache_entry *object;
684
685 if (!(msg->chn->flags & CF_ISRESP))
686 return 1;
687
688 if (st && st->first_block) {
689
690 object = (struct cache_entry *)st->first_block->data;
691
William Lallemand4da3f8a2017-10-31 14:33:34 +0100692 shctx_lock(shctx);
Remi Tricot-Le Breton32434472020-11-25 10:09:43 +0100693 /* The whole payload was cached, the entry can now be used. */
694 object->complete = 1;
William Lallemand4da3f8a2017-10-31 14:33:34 +0100695 /* remove from the hotlist */
William Lallemand4da3f8a2017-10-31 14:33:34 +0100696 shctx_row_dec_hot(shctx, st->first_block);
697 shctx_unlock(shctx);
698
699 }
700 if (st) {
Willy Tarreaubafbe012017-11-24 17:34:44 +0100701 pool_free(pool_head_cache_st, st);
William Lallemand4da3f8a2017-10-31 14:33:34 +0100702 filter->ctx = NULL;
703 }
704
705 return 1;
706}
707
708 /*
709 * This intends to be used when checking HTTP headers for some
710 * word=value directive. Return a pointer to the first character of value, if
Willy Tarreau94a01e12021-01-06 17:35:12 +0100711 * the word was not found or if there wasn't any value assigned to it return NULL
William Lallemand4da3f8a2017-10-31 14:33:34 +0100712 */
713char *directive_value(const char *sample, int slen, const char *word, int wlen)
714{
715 int st = 0;
716
717 if (slen < wlen)
718 return 0;
719
720 while (wlen) {
721 char c = *sample ^ *word;
722 if (c && c != ('A' ^ 'a'))
723 return NULL;
724 sample++;
725 word++;
726 slen--;
727 wlen--;
728 }
729
730 while (slen) {
731 if (st == 0) {
732 if (*sample != '=')
733 return NULL;
734 sample++;
735 slen--;
736 st = 1;
737 continue;
738 } else {
739 return (char *)sample;
740 }
741 }
742
743 return NULL;
744}
745
746/*
747 * Return the maxage in seconds of an HTTP response.
Remi Tricot-Le Breton795e1412020-12-03 18:19:29 +0100748 * The returned value will always take the cache's configuration into account
749 * (cache->maxage) but the actual max age of the response will be set in the
750 * true_maxage parameter. It will be used to determine if a response is already
751 * stale or not.
William Lallemand4da3f8a2017-10-31 14:33:34 +0100752 * Compute the maxage using either:
753 * - the assigned max-age of the cache
754 * - the s-maxage directive
755 * - the max-age directive
756 * - (Expires - Data) headers
757 * - the default-max-age of the cache
758 *
759 */
Remi Tricot-Le Breton795e1412020-12-03 18:19:29 +0100760int http_calc_maxage(struct stream *s, struct cache *cache, int *true_maxage)
William Lallemand4da3f8a2017-10-31 14:33:34 +0100761{
Christopher Faulet95e7ea32019-07-15 21:01:29 +0200762 struct htx *htx = htxbuf(&s->res.buf);
763 struct http_hdr_ctx ctx = { .blk = NULL };
Remi Tricot-Le Bretonfcea3742020-12-03 18:19:30 +0100764 long smaxage = -1;
765 long maxage = -1;
Remi Tricot-Le Bretona6476112020-10-28 17:52:53 +0100766 int expires = -1;
767 struct tm tm = {};
768 time_t expires_val = 0;
Remi Tricot-Le Bretonfcea3742020-12-03 18:19:30 +0100769 char *endptr = NULL;
770 int offset = 0;
William Lallemand4da3f8a2017-10-31 14:33:34 +0100771
Remi Tricot-Le Bretonfcea3742020-12-03 18:19:30 +0100772 /* The Cache-Control max-age and s-maxage directives should be followed by
773 * a positive numerical value (see RFC 7234#5.2.1.1). According to the
774 * specs, a sender "should not" generate a quoted-string value but we will
775 * still accept this format since it isn't strictly forbidden. */
Christopher Faulet95e7ea32019-07-15 21:01:29 +0200776 while (http_find_header(htx, ist("cache-control"), &ctx, 0)) {
777 char *value;
William Lallemand4da3f8a2017-10-31 14:33:34 +0100778
Christopher Faulet95e7ea32019-07-15 21:01:29 +0200779 value = directive_value(ctx.value.ptr, ctx.value.len, "s-maxage", 8);
780 if (value) {
781 struct buffer *chk = get_trash_chunk();
William Lallemand4da3f8a2017-10-31 14:33:34 +0100782
Christopher Faulet95e7ea32019-07-15 21:01:29 +0200783 chunk_strncat(chk, value, ctx.value.len - 8 + 1);
784 chunk_strncat(chk, "", 1);
Remi Tricot-Le Bretonfcea3742020-12-03 18:19:30 +0100785 offset = (*chk->area == '"') ? 1 : 0;
786 smaxage = strtol(chk->area + offset, &endptr, 10);
Willy Tarreau79a63b12021-11-08 12:09:27 +0100787 if (unlikely(smaxage < 0 || endptr == chk->area + offset))
Remi Tricot-Le Bretonfcea3742020-12-03 18:19:30 +0100788 return -1;
William Lallemand4da3f8a2017-10-31 14:33:34 +0100789 }
790
Christopher Faulet95e7ea32019-07-15 21:01:29 +0200791 value = directive_value(ctx.value.ptr, ctx.value.len, "max-age", 7);
792 if (value) {
793 struct buffer *chk = get_trash_chunk();
Christopher Faulet5f2c49f2019-07-15 20:49:46 +0200794
Christopher Faulet95e7ea32019-07-15 21:01:29 +0200795 chunk_strncat(chk, value, ctx.value.len - 7 + 1);
796 chunk_strncat(chk, "", 1);
Remi Tricot-Le Bretonfcea3742020-12-03 18:19:30 +0100797 offset = (*chk->area == '"') ? 1 : 0;
798 maxage = strtol(chk->area + offset, &endptr, 10);
Willy Tarreau79a63b12021-11-08 12:09:27 +0100799 if (unlikely(maxage < 0 || endptr == chk->area + offset))
Remi Tricot-Le Bretonfcea3742020-12-03 18:19:30 +0100800 return -1;
William Lallemand4da3f8a2017-10-31 14:33:34 +0100801 }
802 }
803
Remi Tricot-Le Bretona6476112020-10-28 17:52:53 +0100804 /* Look for Expires header if no s-maxage or max-age Cache-Control data
805 * was found. */
806 if (maxage == -1 && smaxage == -1) {
807 ctx.blk = NULL;
808 if (http_find_header(htx, ist("expires"), &ctx, 1)) {
809 if (parse_http_date(istptr(ctx.value), istlen(ctx.value), &tm)) {
810 expires_val = my_timegm(&tm);
811 /* A request having an expiring date earlier
812 * than the current date should be considered as
813 * stale. */
814 expires = (expires_val >= now.tv_sec) ?
815 (expires_val - now.tv_sec) : 0;
816 }
817 else {
818 /* Following RFC 7234#5.3, an invalid date
819 * format must be treated as a date in the past
820 * so the cache entry must be seen as already
821 * expired. */
822 expires = 0;
823 }
824 }
825 }
William Lallemand4da3f8a2017-10-31 14:33:34 +0100826
827
Remi Tricot-Le Breton795e1412020-12-03 18:19:29 +0100828 if (smaxage > 0) {
829 if (true_maxage)
830 *true_maxage = smaxage;
William Lallemand49b44532017-11-24 18:53:43 +0100831 return MIN(smaxage, cache->maxage);
Remi Tricot-Le Breton795e1412020-12-03 18:19:29 +0100832 }
William Lallemand4da3f8a2017-10-31 14:33:34 +0100833
Remi Tricot-Le Breton795e1412020-12-03 18:19:29 +0100834 if (maxage > 0) {
835 if (true_maxage)
836 *true_maxage = maxage;
William Lallemand49b44532017-11-24 18:53:43 +0100837 return MIN(maxage, cache->maxage);
Remi Tricot-Le Breton795e1412020-12-03 18:19:29 +0100838 }
William Lallemand4da3f8a2017-10-31 14:33:34 +0100839
Remi Tricot-Le Breton795e1412020-12-03 18:19:29 +0100840 if (expires >= 0) {
841 if (true_maxage)
842 *true_maxage = expires;
Remi Tricot-Le Bretona6476112020-10-28 17:52:53 +0100843 return MIN(expires, cache->maxage);
Remi Tricot-Le Breton795e1412020-12-03 18:19:29 +0100844 }
Remi Tricot-Le Bretona6476112020-10-28 17:52:53 +0100845
William Lallemand49b44532017-11-24 18:53:43 +0100846 return cache->maxage;
William Lallemand4da3f8a2017-10-31 14:33:34 +0100847
848}
849
850
William Lallemanda400a3a2017-11-20 19:13:12 +0100851static void cache_free_blocks(struct shared_block *first, struct shared_block *block)
852{
Willy Tarreau5bd37fa2018-04-04 20:17:03 +0200853 struct cache_entry *object = (struct cache_entry *)block->data;
854
855 if (first == block && object->eb.key)
Remi Tricot-Le Breton65904e42020-12-10 17:58:41 +0100856 delete_entry(object);
Willy Tarreau5bd37fa2018-04-04 20:17:03 +0200857 object->eb.key = 0;
William Lallemanda400a3a2017-11-20 19:13:12 +0100858}
859
Remi Tricot Le Breton27091b42020-10-23 10:51:27 +0200860
861/* As per RFC 7234#4.3.2, in case of "If-Modified-Since" conditional request, the
862 * date value should be compared to a date determined by in a previous response (for
863 * the same entity). This date could either be the "Last-Modified" value, or the "Date"
864 * value of the response's reception time (by decreasing order of priority). */
865static time_t get_last_modified_time(struct htx *htx)
866{
867 time_t last_modified = 0;
868 struct http_hdr_ctx ctx = { .blk = NULL };
869 struct tm tm = {};
870
871 if (http_find_header(htx, ist("last-modified"), &ctx, 1)) {
872 if (parse_http_date(istptr(ctx.value), istlen(ctx.value), &tm)) {
873 last_modified = my_timegm(&tm);
874 }
875 }
876
877 if (!last_modified) {
878 ctx.blk = NULL;
879 if (http_find_header(htx, ist("date"), &ctx, 1)) {
880 if (parse_http_date(istptr(ctx.value), istlen(ctx.value), &tm)) {
881 last_modified = my_timegm(&tm);
882 }
883 }
884 }
885
886 /* Fallback on the current time if no "Last-Modified" or "Date" header
887 * was found. */
888 if (!last_modified)
889 last_modified = now.tv_sec;
890
891 return last_modified;
892}
893
William Lallemand41db4602017-10-30 11:15:51 +0100894/*
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +0100895 * Checks the vary header's value. The headers on which vary should be applied
Ilya Shipitsinf38a0182020-12-21 01:16:17 +0500896 * must be explicitly supported in the vary_information array (see cache.c). If
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +0100897 * any other header is mentioned, we won't store the response.
898 * Returns 1 if Vary-based storage can work, 0 otherwise.
899 */
900static int http_check_vary_header(struct htx *htx, unsigned int *vary_signature)
901{
902 unsigned int vary_idx;
903 unsigned int vary_info_count;
904 const struct vary_hashing_information *vary_info;
905 struct http_hdr_ctx ctx = { .blk = NULL };
906
907 int retval = 1;
908
909 *vary_signature = 0;
910
911 vary_info_count = sizeof(vary_information)/sizeof(*vary_information);
912 while (retval && http_find_header(htx, ist("Vary"), &ctx, 0)) {
913 for (vary_idx = 0; vary_idx < vary_info_count; ++vary_idx) {
914 vary_info = &vary_information[vary_idx];
915 if (isteqi(ctx.value, vary_info->hdr_name)) {
916 *vary_signature |= vary_info->value;
917 break;
918 }
919 }
920 retval = (vary_idx < vary_info_count);
921 }
922
923 return retval;
924}
925
926
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +0100927/*
928 * Look for the accept-encoding part of the secondary_key and replace the
929 * encoding bitmap part of the hash with the actual encoding of the response,
930 * extracted from the content-encoding header value.
Remi Tricot-Le Breton6ca89162021-01-07 14:50:51 +0100931 * Responses that have an unknown encoding will not be cached if they also
932 * "vary" on the accept-encoding value.
933 * Returns 0 if we found a known encoding in the response, -1 otherwise.
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +0100934 */
Remi Tricot-Le Breton6ca89162021-01-07 14:50:51 +0100935static int set_secondary_key_encoding(struct htx *htx, char *secondary_key)
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +0100936{
937 unsigned int resp_encoding_bitmap = 0;
938 const struct vary_hashing_information *info = vary_information;
939 unsigned int offset = 0;
940 unsigned int count = 0;
941 unsigned int hash_info_count = sizeof(vary_information)/sizeof(*vary_information);
942 unsigned int encoding_value;
943 struct http_hdr_ctx ctx = { .blk = NULL };
944
945 /* Look for the accept-encoding part of the secondary_key. */
946 while (count < hash_info_count && info->value != VARY_ACCEPT_ENCODING) {
947 offset += info->hash_length;
948 ++info;
949 ++count;
950 }
951
952 if (count == hash_info_count)
Remi Tricot-Le Breton6ca89162021-01-07 14:50:51 +0100953 return -1;
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +0100954
955 while (http_find_header(htx, ist("content-encoding"), &ctx, 0)) {
Remi Tricot-Le Breton6ca89162021-01-07 14:50:51 +0100956 if (parse_encoding_value(ctx.value, &encoding_value, NULL))
957 return -1; /* Do not store responses with an unknown encoding */
958 resp_encoding_bitmap |= encoding_value;
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +0100959 }
960
961 if (!resp_encoding_bitmap)
962 resp_encoding_bitmap |= VARY_ENCODING_IDENTITY;
963
964 /* Rewrite the bitmap part of the hash with the new bitmap that only
Ilya Shipitsinb8888ab2021-01-06 21:20:16 +0500965 * corresponds the the response's encoding. */
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +0100966 write_u32(secondary_key + offset, resp_encoding_bitmap);
Remi Tricot-Le Breton6ca89162021-01-07 14:50:51 +0100967
968 return 0;
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +0100969}
970
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +0100971
972/*
Ilya Shipitsin6fb0f212020-04-02 15:25:26 +0500973 * This function will store the headers of the response in a buffer and then
William Lallemand41db4602017-10-30 11:15:51 +0100974 * register a filter to store the data
975 */
976enum act_return http_action_store_cache(struct act_rule *rule, struct proxy *px,
Christopher Faulet8f3c2562019-06-03 22:19:18 +0200977 struct session *sess, struct stream *s, int flags)
William Lallemand41db4602017-10-30 11:15:51 +0100978{
Remi Tricot-Le Breton795e1412020-12-03 18:19:29 +0100979 int effective_maxage = 0;
980 int true_maxage = 0;
William Lallemand4da3f8a2017-10-31 14:33:34 +0100981 struct http_txn *txn = s->txn;
982 struct http_msg *msg = &txn->rsp;
983 struct filter *filter;
William Lallemand4da3f8a2017-10-31 14:33:34 +0100984 struct shared_block *first = NULL;
Christopher Faulet95220e22018-12-07 17:34:39 +0100985 struct cache_flt_conf *cconf = rule->arg.act.p[0];
Remi Tricot-Le Breton754b2422020-11-16 15:56:10 +0100986 struct cache *cache = cconf->c.cache;
987 struct shared_context *shctx = shctx_ptr(cache);
Christopher Faulet839791a2019-01-07 16:12:07 +0100988 struct cache_st *cache_ctx = NULL;
989 struct cache_entry *object, *old;
Willy Tarreau8b507582020-02-25 09:35:07 +0100990 unsigned int key = read_u32(txn->cache_hash);
Christopher Faulet95e7ea32019-07-15 21:01:29 +0200991 struct htx *htx;
992 struct http_hdr_ctx ctx;
Christopher Fauletb0667472019-09-03 22:22:12 +0200993 size_t hdrs_len = 0;
Christopher Faulet95e7ea32019-07-15 21:01:29 +0200994 int32_t pos;
Remi Tricot-Le Breton1785f3d2020-11-16 15:56:09 +0100995 unsigned int vary_signature = 0;
William Lallemand4da3f8a2017-10-31 14:33:34 +0100996
William Lallemand4da3f8a2017-10-31 14:33:34 +0100997 /* Don't cache if the response came from a cache */
998 if ((obj_type(s->target) == OBJ_TYPE_APPLET) &&
999 s->target == &http_cache_applet.obj_type) {
1000 goto out;
1001 }
1002
1003 /* cache only HTTP/1.1 */
1004 if (!(txn->req.flags & HTTP_MSGF_VER_11))
1005 goto out;
1006
Willy Tarreau6905d182019-10-01 17:59:17 +02001007 /* cache only GET method */
Remi Tricot-Le Breton72cffaf2020-12-03 18:19:31 +01001008 if (txn->meth != HTTP_METH_GET) {
1009 /* In case of successful unsafe method on a stored resource, the
1010 * cached entry must be invalidated (see RFC7234#4.4).
1011 * A "non-error response" is one with a 2xx (Successful) or 3xx
1012 * (Redirection) status code. */
1013 if (txn->status >= 200 && txn->status < 400) {
1014 switch (txn->meth) {
1015 case HTTP_METH_OPTIONS:
1016 case HTTP_METH_GET:
1017 case HTTP_METH_HEAD:
1018 case HTTP_METH_TRACE:
1019 break;
1020
1021 default: /* Any unsafe method */
Ilya Shipitsinf38a0182020-12-21 01:16:17 +05001022 /* Discard any corresponding entry in case of successful
Remi Tricot-Le Breton72cffaf2020-12-03 18:19:31 +01001023 * unsafe request (such as PUT, POST or DELETE). */
1024 shctx_lock(shctx);
1025
1026 old = entry_exist(cconf->c.cache, txn->cache_hash);
1027 if (old) {
1028 eb32_delete(&old->eb);
1029 old->eb.key = 0;
1030 }
1031 shctx_unlock(shctx);
1032 }
1033 }
William Lallemand4da3f8a2017-10-31 14:33:34 +01001034 goto out;
Remi Tricot-Le Breton72cffaf2020-12-03 18:19:31 +01001035 }
William Lallemand4da3f8a2017-10-31 14:33:34 +01001036
Willy Tarreauc9036c02019-01-11 19:38:25 +01001037 /* cache key was not computed */
1038 if (!key)
1039 goto out;
1040
William Lallemand4da3f8a2017-10-31 14:33:34 +01001041 /* cache only 200 status code */
1042 if (txn->status != 200)
1043 goto out;
1044
Christopher Faulet839791a2019-01-07 16:12:07 +01001045 /* Find the corresponding filter instance for the current stream */
1046 list_for_each_entry(filter, &s->strm_flt.filters, list) {
1047 if (FLT_ID(filter) == cache_store_flt_id && FLT_CONF(filter) == cconf) {
1048 /* No filter ctx, don't cache anything */
1049 if (!filter->ctx)
1050 goto out;
1051 cache_ctx = filter->ctx;
1052 break;
1053 }
1054 }
1055
1056 /* from there, cache_ctx is always defined */
Christopher Faulet95e7ea32019-07-15 21:01:29 +02001057 htx = htxbuf(&s->res.buf);
William Lallemand4da3f8a2017-10-31 14:33:34 +01001058
Christopher Faulet95e7ea32019-07-15 21:01:29 +02001059 /* Do not cache too big objects. */
1060 if ((msg->flags & HTTP_MSGF_CNT_LEN) && shctx->max_obj_size > 0 &&
1061 htx->data + htx->extra > shctx->max_obj_size)
1062 goto out;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001063
Remi Tricot-Le Breton1785f3d2020-11-16 15:56:09 +01001064 /* Only a subset of headers are supported in our Vary implementation. If
1065 * any other header is present in the Vary header value, we won't be
Remi Tricot-Le Breton754b2422020-11-16 15:56:10 +01001066 * able to use the cache. Likewise, if Vary header support is disabled,
1067 * avoid caching responses that contain such a header. */
1068 ctx.blk = NULL;
1069 if (cache->vary_processing_enabled) {
1070 if (!http_check_vary_header(htx, &vary_signature))
1071 goto out;
Remi Tricot-Le Breton2b5c5cb2020-12-23 18:13:45 +01001072 if (vary_signature) {
1073 /* If something went wrong during the secondary key
1074 * building, do not store the response. */
1075 if (!(txn->flags & TX_CACHE_HAS_SEC_KEY))
1076 goto out;
Remi Tricot-Le Breton32434472020-11-25 10:09:43 +01001077 http_request_reduce_secondary_key(vary_signature, txn->cache_secondary_hash);
Remi Tricot-Le Breton2b5c5cb2020-12-23 18:13:45 +01001078 }
Remi Tricot-Le Breton754b2422020-11-16 15:56:10 +01001079 }
1080 else if (http_find_header(htx, ist("Vary"), &ctx, 0)) {
Christopher Faulet95e7ea32019-07-15 21:01:29 +02001081 goto out;
Remi Tricot-Le Breton1785f3d2020-11-16 15:56:09 +01001082 }
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001083
Christopher Fauletfc9cfe42019-07-16 14:54:53 +02001084 http_check_response_for_cacheability(s, &s->res);
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001085
Remi Tricot-Le Bretoncc9bf2e2020-11-12 11:14:41 +01001086 if (!(txn->flags & TX_CACHEABLE) || !(txn->flags & TX_CACHE_COOK) || (txn->flags & TX_CACHE_IGNORE))
Christopher Faulet95e7ea32019-07-15 21:01:29 +02001087 goto out;
Remi Tricot-Le Breton32434472020-11-25 10:09:43 +01001088
1089 shctx_lock(shctx);
1090 old = entry_exist(cache, txn->cache_hash);
1091 if (old) {
1092 if (vary_signature)
1093 old = secondary_entry_exist(cconf->c.cache, old,
1094 txn->cache_secondary_hash);
1095 if (old) {
1096 if (!old->complete) {
1097 /* An entry with the same primary key is already being
1098 * created, we should not try to store the current
1099 * response because it will waste space in the cache. */
1100 shctx_unlock(shctx);
1101 goto out;
1102 }
Remi Tricot-Le Breton65904e42020-12-10 17:58:41 +01001103 delete_entry(old);
Remi Tricot-Le Breton32434472020-11-25 10:09:43 +01001104 old->eb.key = 0;
1105 }
1106 }
1107 first = shctx_row_reserve_hot(shctx, NULL, sizeof(struct cache_entry));
1108 if (!first) {
1109 shctx_unlock(shctx);
1110 goto out;
1111 }
1112 /* the received memory is not initialized, we need at least to mark
1113 * the object as not indexed yet.
1114 */
1115 object = (struct cache_entry *)first->data;
1116 memset(object, 0, sizeof(*object));
1117 object->eb.key = key;
1118 object->secondary_key_signature = vary_signature;
1119 /* We need to temporarily set a valid expiring time until the actual one
1120 * is set by the end of this function (in case of concurrent accesses to
1121 * the same resource). This way the second access will find an existing
1122 * but not yet usable entry in the tree and will avoid storing its data. */
1123 object->expire = now.tv_sec + 2;
1124
1125 memcpy(object->hash, txn->cache_hash, sizeof(object->hash));
1126 if (vary_signature)
1127 memcpy(object->secondary_key, txn->cache_secondary_hash, HTTP_CACHE_SEC_KEY_LEN);
1128
1129 /* Insert the entry in the tree even if the payload is not cached yet. */
Remi Tricot-Le Breton65904e42020-12-10 17:58:41 +01001130 if (insert_entry(cache, object) != &object->eb) {
Remi Tricot-Le Breton32434472020-11-25 10:09:43 +01001131 object->eb.key = 0;
1132 shctx_unlock(shctx);
1133 goto out;
1134 }
1135 shctx_unlock(shctx);
1136
1137 /* reserve space for the cache_entry structure */
1138 first->len = sizeof(struct cache_entry);
1139 first->last_append = NULL;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001140
Remi Tricot-Le Breton795e1412020-12-03 18:19:29 +01001141 /* Determine the entry's maximum age (taking into account the cache's
1142 * configuration) as well as the response's explicit max age (extracted
1143 * from cache-control directives or the expires header). */
1144 effective_maxage = http_calc_maxage(s, cconf->c.cache, &true_maxage);
1145
Christopher Faulet95e7ea32019-07-15 21:01:29 +02001146 ctx.blk = NULL;
1147 if (http_find_header(htx, ist("Age"), &ctx, 0)) {
Tim Duesterhusc2942842021-01-02 22:47:17 +01001148 long long hdr_age;
Christopher Faulet95e7ea32019-07-15 21:01:29 +02001149 if (!strl2llrc(ctx.value.ptr, ctx.value.len, &hdr_age) && hdr_age > 0) {
1150 if (unlikely(hdr_age > CACHE_ENTRY_MAX_AGE))
1151 hdr_age = CACHE_ENTRY_MAX_AGE;
Remi Tricot-Le Breton795e1412020-12-03 18:19:29 +01001152 /* A response with an Age value greater than its
1153 * announced max age is stale and should not be stored. */
Remi Tricot-Le Breton32434472020-11-25 10:09:43 +01001154 object->age = hdr_age;
Remi Tricot-Le Breton795e1412020-12-03 18:19:29 +01001155 if (unlikely(object->age > true_maxage))
1156 goto out;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001157 }
Remi Tricot-Le Breton51058d62020-12-03 18:19:32 +01001158 else
1159 goto out;
Christopher Faulet95e7ea32019-07-15 21:01:29 +02001160 http_remove_header(htx, &ctx);
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001161 }
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001162
Remi Tricot Le Breton27091b42020-10-23 10:51:27 +02001163 /* Build a last-modified time that will be stored in the cache_entry and
1164 * compared to a future If-Modified-Since client header. */
Remi Tricot-Le Breton32434472020-11-25 10:09:43 +01001165 object->last_modified = get_last_modified_time(htx);
Remi Tricot Le Breton27091b42020-10-23 10:51:27 +02001166
Christopher Faulet95e7ea32019-07-15 21:01:29 +02001167 chunk_reset(&trash);
1168 for (pos = htx_get_first(htx); pos != -1; pos = htx_get_next(htx, pos)) {
1169 struct htx_blk *blk = htx_get_blk(htx, pos);
1170 enum htx_blk_type type = htx_get_blk_type(blk);
1171 uint32_t sz = htx_get_blksz(blk);
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001172
Christopher Fauletb0667472019-09-03 22:22:12 +02001173 hdrs_len += sizeof(*blk) + sz;
Christopher Faulet95e7ea32019-07-15 21:01:29 +02001174 chunk_memcat(&trash, (char *)&blk->info, sizeof(blk->info));
1175 chunk_memcat(&trash, htx_get_blk_ptr(htx, blk), sz);
Remi Tricot-Le Bretondbb65b52020-10-22 10:40:04 +02001176
1177 /* Look for optional ETag header.
1178 * We need to store the offset of the ETag value in order for
1179 * future conditional requests to be able to perform ETag
1180 * comparisons. */
1181 if (type == HTX_BLK_HDR) {
Tim Duesterhuse2fff102021-01-02 22:47:16 +01001182 struct ist header_name = htx_get_blk_name(htx, blk);
Remi Tricot-Le Bretondbb65b52020-10-22 10:40:04 +02001183 if (isteq(header_name, ist("etag"))) {
Remi Tricot-Le Breton32434472020-11-25 10:09:43 +01001184 object->etag_length = sz - istlen(header_name);
1185 object->etag_offset = sizeof(struct cache_entry) + b_data(&trash) - sz + istlen(header_name);
Remi Tricot-Le Bretondbb65b52020-10-22 10:40:04 +02001186 }
1187 }
Christopher Faulet95e7ea32019-07-15 21:01:29 +02001188 if (type == HTX_BLK_EOH)
1189 break;
Frédéric Lécaillee7a770c2018-10-26 14:29:22 +02001190 }
1191
Christopher Fauletb0667472019-09-03 22:22:12 +02001192 /* Do not cache objects if the headers are too big. */
1193 if (hdrs_len > htx->size - global.tune.maxrewrite)
1194 goto out;
1195
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01001196 /* If the response has a secondary_key, fill its key part related to
1197 * encodings with the actual encoding of the response. This way any
1198 * subsequent request having the same primary key will have its accepted
Remi Tricot-Le Breton6ca89162021-01-07 14:50:51 +01001199 * encodings tested upon the cached response's one.
1200 * We will not cache a response that has an unknown encoding (not
Ilya Shipitsin7704b0e2021-01-23 02:11:59 +05001201 * explicitly supported in parse_encoding_value function). */
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01001202 if (cache->vary_processing_enabled && vary_signature)
Remi Tricot-Le Breton6ca89162021-01-07 14:50:51 +01001203 if (set_secondary_key_encoding(htx, object->secondary_key))
1204 goto out;
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01001205
William Lallemand4da3f8a2017-10-31 14:33:34 +01001206 shctx_lock(shctx);
Remi Tricot-Le Breton32434472020-11-25 10:09:43 +01001207 if (!shctx_row_reserve_hot(shctx, first, trash.data)) {
William Lallemand4da3f8a2017-10-31 14:33:34 +01001208 shctx_unlock(shctx);
1209 goto out;
1210 }
1211 shctx_unlock(shctx);
1212
William Lallemand4da3f8a2017-10-31 14:33:34 +01001213 /* cache the headers in a http action because it allows to chose what
1214 * to cache, for example you might want to cache a response before
1215 * modifying some HTTP headers, or on the contrary after modifying
1216 * those headers.
1217 */
William Lallemand4da3f8a2017-10-31 14:33:34 +01001218 /* does not need to be locked because it's in the "hot" list,
1219 * copy the headers */
Christopher Faulet95e7ea32019-07-15 21:01:29 +02001220 if (shctx_row_data_append(shctx, first, NULL, (unsigned char *)trash.area, trash.data) < 0)
1221 goto out;
William Lallemand4da3f8a2017-10-31 14:33:34 +01001222
1223 /* register the buffer in the filter ctx for filling it with data*/
Christopher Faulet839791a2019-01-07 16:12:07 +01001224 if (cache_ctx) {
1225 cache_ctx->first_block = first;
Christopher Faulet839791a2019-01-07 16:12:07 +01001226 /* store latest value and expiration time */
1227 object->latest_validation = now.tv_sec;
Remi Tricot-Le Breton795e1412020-12-03 18:19:29 +01001228 object->expire = now.tv_sec + effective_maxage;
Christopher Faulet839791a2019-01-07 16:12:07 +01001229 return ACT_RET_CONT;
William Lallemand4da3f8a2017-10-31 14:33:34 +01001230 }
1231
1232out:
1233 /* if does not cache */
1234 if (first) {
1235 shctx_lock(shctx);
William Lallemand08727662017-11-21 20:01:27 +01001236 first->len = 0;
Remi Tricot-Le Breton32434472020-11-25 10:09:43 +01001237 if (object->eb.key)
Remi Tricot-Le Breton65904e42020-12-10 17:58:41 +01001238 delete_entry(object);
William Lallemand08727662017-11-21 20:01:27 +01001239 object->eb.key = 0;
William Lallemand4da3f8a2017-10-31 14:33:34 +01001240 shctx_row_dec_hot(shctx, first);
1241 shctx_unlock(shctx);
1242 }
1243
William Lallemand41db4602017-10-30 11:15:51 +01001244 return ACT_RET_CONT;
1245}
1246
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001247#define HTX_CACHE_INIT 0 /* Initial state. */
1248#define HTX_CACHE_HEADER 1 /* Cache entry headers forwarding */
1249#define HTX_CACHE_DATA 2 /* Cache entry data forwarding */
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001250#define HTX_CACHE_EOM 3 /* Cache entry completely forwarded. Finish the HTX message */
1251#define HTX_CACHE_END 4 /* Cache entry treatment terminated */
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001252
William Lallemandecb73b12017-11-24 14:33:55 +01001253static void http_cache_applet_release(struct appctx *appctx)
1254{
Christopher Faulet95220e22018-12-07 17:34:39 +01001255 struct cache_flt_conf *cconf = appctx->rule->arg.act.p[0];
William Lallemandecb73b12017-11-24 14:33:55 +01001256 struct cache_entry *cache_ptr = appctx->ctx.cache.entry;
Christopher Faulet95220e22018-12-07 17:34:39 +01001257 struct cache *cache = cconf->c.cache;
William Lallemandecb73b12017-11-24 14:33:55 +01001258 struct shared_block *first = block_ptr(cache_ptr);
1259
1260 shctx_lock(shctx_ptr(cache));
1261 shctx_row_dec_hot(shctx_ptr(cache), first);
1262 shctx_unlock(shctx_ptr(cache));
1263}
1264
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001265
1266static unsigned int htx_cache_dump_blk(struct appctx *appctx, struct htx *htx, enum htx_blk_type type,
1267 uint32_t info, struct shared_block *shblk, unsigned int offset)
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001268{
Christopher Faulet95220e22018-12-07 17:34:39 +01001269 struct cache_flt_conf *cconf = appctx->rule->arg.act.p[0];
1270 struct shared_context *shctx = shctx_ptr(cconf->c.cache);
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001271 struct htx_blk *blk;
Christopher Faulet15a4ce82019-09-03 22:11:52 +02001272 char *ptr;
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001273 unsigned int max, total;
1274 uint32_t blksz;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001275
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001276 max = htx_get_max_blksz(htx, channel_htx_recv_max(si_ic(appctx->owner), htx));
1277 if (!max)
1278 return 0;
Christopher Faulet2d7c5392019-06-03 10:41:26 +02001279 blksz = ((type == HTX_BLK_HDR || type == HTX_BLK_TLR)
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001280 ? (info & 0xff) + ((info >> 8) & 0xfffff)
1281 : info & 0xfffffff);
1282 if (blksz > max)
1283 return 0;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001284
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001285 blk = htx_add_blk(htx, type, blksz);
1286 if (!blk)
1287 return 0;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001288
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001289 blk->info = info;
1290 total = 4;
Christopher Faulet15a4ce82019-09-03 22:11:52 +02001291 ptr = htx_get_blk_ptr(htx, blk);
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001292 while (blksz) {
1293 max = MIN(blksz, shctx->block_size - offset);
Christopher Faulet15a4ce82019-09-03 22:11:52 +02001294 memcpy(ptr, (const char *)shblk->data + offset, max);
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001295 offset += max;
1296 blksz -= max;
1297 total += max;
Christopher Faulet15a4ce82019-09-03 22:11:52 +02001298 ptr += max;
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001299 if (blksz || offset == shctx->block_size) {
1300 shblk = LIST_NEXT(&shblk->list, typeof(shblk), list);
1301 offset = 0;
1302 }
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001303 }
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001304 appctx->ctx.cache.offset = offset;
1305 appctx->ctx.cache.next = shblk;
1306 appctx->ctx.cache.sent += total;
1307 return total;
1308}
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001309
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001310static unsigned int htx_cache_dump_data_blk(struct appctx *appctx, struct htx *htx,
1311 uint32_t info, struct shared_block *shblk, unsigned int offset)
1312{
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001313
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001314 struct cache_flt_conf *cconf = appctx->rule->arg.act.p[0];
1315 struct shared_context *shctx = shctx_ptr(cconf->c.cache);
1316 unsigned int max, total, rem_data;
1317 uint32_t blksz;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001318
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001319 max = htx_get_max_blksz(htx, channel_htx_recv_max(si_ic(appctx->owner), htx));
1320 if (!max)
1321 return 0;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001322
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001323 rem_data = 0;
Christopher Fauletbda83972019-06-11 09:58:09 +02001324 if (appctx->ctx.cache.rem_data) {
1325 blksz = appctx->ctx.cache.rem_data;
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001326 total = 0;
Christopher Fauletbda83972019-06-11 09:58:09 +02001327 }
1328 else {
1329 blksz = (info & 0xfffffff);
1330 total = 4;
1331 }
1332 if (blksz > max) {
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001333 rem_data = blksz - max;
1334 blksz = max;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001335 }
1336
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001337 while (blksz) {
1338 size_t sz;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001339
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001340 max = MIN(blksz, shctx->block_size - offset);
1341 sz = htx_add_data(htx, ist2(shblk->data + offset, max));
1342 offset += sz;
1343 blksz -= sz;
1344 total += sz;
1345 if (sz < max)
1346 break;
1347 if (blksz || offset == shctx->block_size) {
1348 shblk = LIST_NEXT(&shblk->list, typeof(shblk), list);
1349 offset = 0;
1350 }
1351 }
1352
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001353 appctx->ctx.cache.offset = offset;
1354 appctx->ctx.cache.next = shblk;
1355 appctx->ctx.cache.sent += total;
1356 appctx->ctx.cache.rem_data = rem_data + blksz;
1357 return total;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001358}
1359
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001360static size_t htx_cache_dump_msg(struct appctx *appctx, struct htx *htx, unsigned int len,
1361 enum htx_blk_type mark)
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001362{
Christopher Faulet95220e22018-12-07 17:34:39 +01001363 struct cache_flt_conf *cconf = appctx->rule->arg.act.p[0];
1364 struct shared_context *shctx = shctx_ptr(cconf->c.cache);
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001365 struct shared_block *shblk;
1366 unsigned int offset, sz;
1367 unsigned int ret, total = 0;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001368
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001369 while (len) {
1370 enum htx_blk_type type;
1371 uint32_t info;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001372
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001373 shblk = appctx->ctx.cache.next;
1374 offset = appctx->ctx.cache.offset;
1375 if (appctx->ctx.cache.rem_data) {
1376 type = HTX_BLK_DATA;
1377 info = 0;
1378 goto add_data_blk;
1379 }
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001380
Ilya Shipitsin6fb0f212020-04-02 15:25:26 +05001381 /* Get info of the next HTX block. May be split on 2 shblk */
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001382 sz = MIN(4, shctx->block_size - offset);
1383 memcpy((char *)&info, (const char *)shblk->data + offset, sz);
1384 offset += sz;
1385 if (sz < 4) {
1386 shblk = LIST_NEXT(&shblk->list, typeof(shblk), list);
1387 memcpy(((char *)&info)+sz, (const char *)shblk->data, 4 - sz);
1388 offset = (4 - sz);
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001389 }
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001390
1391 /* Get payload of the next HTX block and insert it. */
1392 type = (info >> 28);
1393 if (type != HTX_BLK_DATA)
1394 ret = htx_cache_dump_blk(appctx, htx, type, info, shblk, offset);
1395 else {
1396 add_data_blk:
1397 ret = htx_cache_dump_data_blk(appctx, htx, info, shblk, offset);
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001398 }
1399
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001400 if (!ret)
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001401 break;
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001402 total += ret;
1403 len -= ret;
1404
1405 if (appctx->ctx.cache.rem_data || type == mark)
1406 break;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001407 }
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001408
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001409 return total;
1410}
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001411
1412static int htx_cache_add_age_hdr(struct appctx *appctx, struct htx *htx)
1413{
1414 struct cache_entry *cache_ptr = appctx->ctx.cache.entry;
1415 unsigned int age;
1416 char *end;
1417
1418 chunk_reset(&trash);
1419 age = MAX(0, (int)(now.tv_sec - cache_ptr->latest_validation)) + cache_ptr->age;
1420 if (unlikely(age > CACHE_ENTRY_MAX_AGE))
1421 age = CACHE_ENTRY_MAX_AGE;
1422 end = ultoa_o(age, b_head(&trash), b_size(&trash));
1423 b_set_data(&trash, end - b_head(&trash));
1424 if (!http_add_header(htx, ist("Age"), ist2(b_head(&trash), b_data(&trash))))
1425 return 0;
1426 return 1;
1427}
1428
Christopher Faulet95e7ea32019-07-15 21:01:29 +02001429static void http_cache_io_handler(struct appctx *appctx)
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001430{
1431 struct cache_entry *cache_ptr = appctx->ctx.cache.entry;
1432 struct shared_block *first = block_ptr(cache_ptr);
1433 struct stream_interface *si = appctx->owner;
1434 struct channel *req = si_oc(si);
1435 struct channel *res = si_ic(si);
1436 struct htx *req_htx, *res_htx;
1437 struct buffer *errmsg;
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001438 unsigned int len;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001439 size_t ret, total = 0;
1440
Christopher Fauleta9169322022-03-07 16:44:30 +01001441 res_htx = htx_from_buf(&res->buf);
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001442 total = res_htx->data;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001443
1444 if (unlikely(si->state == SI_ST_DIS || si->state == SI_ST_CLO))
1445 goto out;
1446
Ilya Shipitsin6fb0f212020-04-02 15:25:26 +05001447 /* Check if the input buffer is available. */
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001448 if (!b_size(&res->buf)) {
1449 si_rx_room_blk(si);
1450 goto out;
1451 }
1452
Willy Tarreauefef3232018-12-16 00:37:45 +01001453 if (res->flags & (CF_SHUTW|CF_SHUTR|CF_SHUTW_NOW))
Willy Tarreau273e9642018-12-16 00:35:15 +01001454 appctx->st0 = HTX_CACHE_END;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001455
1456 if (appctx->st0 == HTX_CACHE_INIT) {
1457 appctx->ctx.cache.next = block_ptr(cache_ptr);
1458 appctx->ctx.cache.offset = sizeof(*cache_ptr);
1459 appctx->ctx.cache.sent = 0;
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001460 appctx->ctx.cache.rem_data = 0;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001461 appctx->st0 = HTX_CACHE_HEADER;
1462 }
1463
1464 if (appctx->st0 == HTX_CACHE_HEADER) {
1465 /* Headers must be dump at once. Otherwise it is an error */
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001466 len = first->len - sizeof(*cache_ptr) - appctx->ctx.cache.sent;
1467 ret = htx_cache_dump_msg(appctx, res_htx, len, HTX_BLK_EOH);
1468 if (!ret || (htx_get_tail_type(res_htx) != HTX_BLK_EOH) ||
1469 !htx_cache_add_age_hdr(appctx, res_htx))
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001470 goto error;
1471
Remi Tricot-Le Breton6cb10382020-10-22 10:40:05 +02001472 /* In case of a conditional request, we might want to send a
1473 * "304 Not Modified" response instead of the stored data. */
Tim Duesterhuse0142342020-10-22 21:15:06 +02001474 if (appctx->ctx.cache.send_notmodified) {
1475 if (!http_replace_res_status(res_htx, ist("304"), ist("Not Modified"))) {
1476 /* If replacing the status code fails we need to send the full response. */
1477 appctx->ctx.cache.send_notmodified = 0;
1478 }
1479 }
Remi Tricot-Le Breton6cb10382020-10-22 10:40:05 +02001480
1481 /* Skip response body for HEAD requests or in case of "304 Not
1482 * Modified" response. */
1483 if (si_strm(si)->txn->meth == HTTP_METH_HEAD || appctx->ctx.cache.send_notmodified)
Christopher Fauletf0dd0372019-02-25 11:08:34 +01001484 appctx->st0 = HTX_CACHE_EOM;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001485 else
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001486 appctx->st0 = HTX_CACHE_DATA;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001487 }
1488
1489 if (appctx->st0 == HTX_CACHE_DATA) {
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001490 len = first->len - sizeof(*cache_ptr) - appctx->ctx.cache.sent;
1491 if (len) {
Christopher Fauletd1ac2b92020-12-02 19:12:22 +01001492 ret = htx_cache_dump_msg(appctx, res_htx, len, HTX_BLK_UNUSED);
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001493 if (ret < len) {
1494 si_rx_room_blk(si);
1495 goto out;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001496 }
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001497 }
Christopher Fauletd1ac2b92020-12-02 19:12:22 +01001498 appctx->st0 = HTX_CACHE_EOM;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001499 }
1500
1501 if (appctx->st0 == HTX_CACHE_EOM) {
Christopher Fauletd1ac2b92020-12-02 19:12:22 +01001502 /* no more data are expected. */
1503 res_htx->flags |= HTX_FL_EOM;
Christopher Fauletba476122022-03-07 15:53:57 +01001504 res->flags |= CF_EOI;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001505 appctx->st0 = HTX_CACHE_END;
1506 }
1507
1508 end:
Christopher Fauletadb36312019-02-25 11:40:49 +01001509 if (!(res->flags & CF_SHUTR) && appctx->st0 == HTX_CACHE_END) {
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001510 res->flags |= CF_READ_NULL;
1511 si_shutr(si);
1512 }
1513
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001514 out:
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001515 total = res_htx->data - total;
Christopher Faulet61123912019-01-02 14:10:01 +01001516 if (total)
1517 channel_add_input(res, total);
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001518 htx_to_buf(res_htx, &res->buf);
Christopher Fauletadb36312019-02-25 11:40:49 +01001519
1520 /* eat the whole request */
1521 if (co_data(req)) {
1522 req_htx = htx_from_buf(&req->buf);
1523 co_htx_skip(req, req_htx, co_data(req));
1524 htx_to_buf(req_htx, &req->buf);
1525 }
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001526 return;
1527
1528 error:
1529 /* Sent and HTTP error 500 */
1530 b_reset(&res->buf);
Christopher Fauletf7346382019-07-17 22:02:08 +02001531 errmsg = &http_err_chunks[HTTP_ERR_500];
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001532 res->buf.data = b_data(errmsg);
1533 memcpy(res->buf.area, b_head(errmsg), b_data(errmsg));
1534 res_htx = htx_from_buf(&res->buf);
1535
Christopher Faulet8f3c2562019-06-03 22:19:18 +02001536 total = 0;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001537 appctx->st0 = HTX_CACHE_END;
1538 goto end;
1539}
1540
1541
Christopher Faulet95220e22018-12-07 17:34:39 +01001542static int parse_cache_rule(struct proxy *proxy, const char *name, struct act_rule *rule, char **err)
William Lallemand41db4602017-10-30 11:15:51 +01001543{
1544 struct flt_conf *fconf;
Christopher Faulet95220e22018-12-07 17:34:39 +01001545 struct cache_flt_conf *cconf = NULL;
William Lallemand41db4602017-10-30 11:15:51 +01001546
Christopher Faulet95220e22018-12-07 17:34:39 +01001547 if (!*name || strcmp(name, "if") == 0 || strcmp(name, "unless") == 0) {
William Lallemand41db4602017-10-30 11:15:51 +01001548 memprintf(err, "expects a cache name");
Christopher Faulet95220e22018-12-07 17:34:39 +01001549 goto err;
William Lallemand41db4602017-10-30 11:15:51 +01001550 }
1551
1552 /* check if a cache filter was already registered with this cache
1553 * name, if that's the case, must use it. */
1554 list_for_each_entry(fconf, &proxy->filter_configs, list) {
Christopher Faulet95220e22018-12-07 17:34:39 +01001555 if (fconf->id == cache_store_flt_id) {
1556 cconf = fconf->conf;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001557 if (cconf && strcmp((char *)cconf->c.name, name) == 0) {
Christopher Faulet95220e22018-12-07 17:34:39 +01001558 rule->arg.act.p[0] = cconf;
1559 return 1;
1560 }
William Lallemand41db4602017-10-30 11:15:51 +01001561 }
1562 }
1563
Christopher Faulet95220e22018-12-07 17:34:39 +01001564 /* Create the filter cache config */
1565 cconf = calloc(1, sizeof(*cconf));
1566 if (!cconf) {
1567 memprintf(err, "out of memory\n");
1568 goto err;
1569 }
Christopher Faulet99a17a22018-12-11 09:18:27 +01001570 cconf->flags = CACHE_FLT_F_IMPLICIT_DECL;
Christopher Faulet95220e22018-12-07 17:34:39 +01001571 cconf->c.name = strdup(name);
1572 if (!cconf->c.name) {
1573 memprintf(err, "out of memory\n");
William Lallemand41db4602017-10-30 11:15:51 +01001574 goto err;
1575 }
Christopher Faulet95220e22018-12-07 17:34:39 +01001576
William Lallemand41db4602017-10-30 11:15:51 +01001577 /* register a filter to fill the cache buffer */
1578 fconf = calloc(1, sizeof(*fconf));
1579 if (!fconf) {
Christopher Faulet95220e22018-12-07 17:34:39 +01001580 memprintf(err, "out of memory\n");
William Lallemand41db4602017-10-30 11:15:51 +01001581 goto err;
1582 }
Christopher Faulet95220e22018-12-07 17:34:39 +01001583 fconf->id = cache_store_flt_id;
1584 fconf->conf = cconf;
William Lallemand41db4602017-10-30 11:15:51 +01001585 fconf->ops = &cache_ops;
Willy Tarreau2b718102021-04-21 07:32:39 +02001586 LIST_APPEND(&proxy->filter_configs, &fconf->list);
William Lallemand41db4602017-10-30 11:15:51 +01001587
Christopher Faulet95220e22018-12-07 17:34:39 +01001588 rule->arg.act.p[0] = cconf;
1589 return 1;
William Lallemand41db4602017-10-30 11:15:51 +01001590
Christopher Faulet95220e22018-12-07 17:34:39 +01001591 err:
1592 free(cconf);
1593 return 0;
1594}
1595
1596enum act_parse_ret parse_cache_store(const char **args, int *orig_arg, struct proxy *proxy,
1597 struct act_rule *rule, char **err)
1598{
1599 rule->action = ACT_CUSTOM;
1600 rule->action_ptr = http_action_store_cache;
1601
1602 if (!parse_cache_rule(proxy, args[*orig_arg], rule, err))
1603 return ACT_RET_PRS_ERR;
William Lallemand41db4602017-10-30 11:15:51 +01001604
Christopher Faulet95220e22018-12-07 17:34:39 +01001605 (*orig_arg)++;
1606 return ACT_RET_PRS_OK;
William Lallemand41db4602017-10-30 11:15:51 +01001607}
1608
Baptiste Assmanndb92a832019-08-05 16:55:32 +02001609/* This produces a sha1 hash of the concatenation of the HTTP method,
1610 * the first occurrence of the Host header followed by the path component
1611 * if it begins with a slash ('/'). */
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001612int sha1_hosturi(struct stream *s)
William Lallemandf528fff2017-11-23 19:43:17 +01001613{
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001614 struct http_txn *txn = s->txn;
Christopher Faulet95e7ea32019-07-15 21:01:29 +02001615 struct htx *htx = htxbuf(&s->req.buf);
1616 struct htx_sl *sl;
1617 struct http_hdr_ctx ctx;
Willy Tarreauccc61d82019-10-17 09:28:28 +02001618 struct ist uri;
William Lallemandf528fff2017-11-23 19:43:17 +01001619 blk_SHA_CTX sha1_ctx;
Willy Tarreau83061a82018-07-13 11:56:34 +02001620 struct buffer *trash;
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001621
William Lallemandf528fff2017-11-23 19:43:17 +01001622 trash = get_trash_chunk();
Christopher Faulet95e7ea32019-07-15 21:01:29 +02001623 ctx.blk = NULL;
Baptiste Assmanndb92a832019-08-05 16:55:32 +02001624
Christopher Faulet95e7ea32019-07-15 21:01:29 +02001625 sl = http_get_stline(htx);
Willy Tarreauccc61d82019-10-17 09:28:28 +02001626 uri = htx_sl_req_uri(sl); // whole uri
1627 if (!uri.len)
Christopher Faulet95e7ea32019-07-15 21:01:29 +02001628 return 0;
Willy Tarreauccc61d82019-10-17 09:28:28 +02001629
1630 /* In HTTP/1, most URIs are seen in origin form ('/path/to/resource'),
1631 * unless haproxy is deployed in front of an outbound cache. In HTTP/2,
1632 * URIs are almost always sent in absolute form with their scheme. In
1633 * this case, the scheme is almost always "https". In order to support
1634 * sharing of cache objects between H1 and H2, we'll hash the absolute
1635 * URI whenever known, or prepend "https://" + the Host header for
1636 * relative URIs. The difference will only appear on absolute HTTP/1
1637 * requests sent to an origin server, which practically is never met in
1638 * the real world so we don't care about the ability to share the same
1639 * key here.URIs are normalized from the absolute URI to an origin form as
1640 * well.
1641 */
1642 if (!(sl->flags & HTX_SL_F_HAS_AUTHORITY)) {
Willy Tarreau20020ae2019-10-29 13:02:15 +01001643 chunk_istcat(trash, ist("https://"));
Willy Tarreauccc61d82019-10-17 09:28:28 +02001644 if (!http_find_header(htx, ist("Host"), &ctx, 0))
1645 return 0;
Willy Tarreau20020ae2019-10-29 13:02:15 +01001646 chunk_istcat(trash, ctx.value);
Willy Tarreauccc61d82019-10-17 09:28:28 +02001647 }
1648
1649 chunk_memcat(trash, uri.ptr, uri.len);
William Lallemandf528fff2017-11-23 19:43:17 +01001650
1651 /* hash everything */
1652 blk_SHA1_Init(&sha1_ctx);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02001653 blk_SHA1_Update(&sha1_ctx, trash->area, trash->data);
William Lallemandf528fff2017-11-23 19:43:17 +01001654 blk_SHA1_Final((unsigned char *)txn->cache_hash, &sha1_ctx);
1655
1656 return 1;
1657}
1658
Remi Tricot-Le Breton6cb10382020-10-22 10:40:05 +02001659/* Looks for "If-None-Match" headers in the request and compares their value
1660 * with the one that might have been stored in the cache_entry. If any of them
1661 * matches, a "304 Not Modified" response should be sent instead of the cached
1662 * data.
1663 * Although unlikely in a GET/HEAD request, the "If-None-Match: *" syntax is
Remi Tricot-Le Breton53161d82020-10-23 10:51:28 +02001664 * valid and should receive a "304 Not Modified" response (RFC 7234#4.3.2).
1665 *
1666 * If no "If-None-Match" header was found, look for an "If-Modified-Since"
1667 * header and compare its value (date) to the one stored in the cache_entry.
1668 * If the request's date is later than the cached one, we also send a
1669 * "304 Not Modified" response (see RFCs 7232#3.3 and 7234#4.3.2).
1670 *
Remi Tricot-Le Breton6cb10382020-10-22 10:40:05 +02001671 * Returns 1 if "304 Not Modified" should be sent, 0 otherwise.
1672 */
1673static int should_send_notmodified_response(struct cache *cache, struct htx *htx,
1674 struct cache_entry *entry)
1675{
1676 int retval = 0;
1677
1678 struct http_hdr_ctx ctx = { .blk = NULL };
1679 struct ist cache_entry_etag = IST_NULL;
1680 struct buffer *etag_buffer = NULL;
Remi Tricot-Le Breton53161d82020-10-23 10:51:28 +02001681 int if_none_match_found = 0;
Remi Tricot-Le Breton6cb10382020-10-22 10:40:05 +02001682
Remi Tricot-Le Breton53161d82020-10-23 10:51:28 +02001683 struct tm tm = {};
1684 time_t if_modified_since = 0;
Remi Tricot-Le Breton6cb10382020-10-22 10:40:05 +02001685
1686 /* If we find a "If-None-Match" header in the request, rebuild the
Remi Tricot-Le Breton53161d82020-10-23 10:51:28 +02001687 * cache_entry's ETag in order to perform comparisons.
1688 * There could be multiple "if-none-match" header lines. */
Remi Tricot-Le Breton6cb10382020-10-22 10:40:05 +02001689 while (http_find_header(htx, ist("if-none-match"), &ctx, 0)) {
Remi Tricot-Le Breton53161d82020-10-23 10:51:28 +02001690 if_none_match_found = 1;
Remi Tricot-Le Breton6cb10382020-10-22 10:40:05 +02001691
1692 /* A '*' matches everything. */
1693 if (isteq(ctx.value, ist("*")) != 0) {
1694 retval = 1;
1695 break;
1696 }
1697
Remi Tricot-Le Breton53161d82020-10-23 10:51:28 +02001698 /* No need to rebuild an etag if none was stored in the cache. */
1699 if (entry->etag_length == 0)
1700 break;
1701
Remi Tricot-Le Breton6cb10382020-10-22 10:40:05 +02001702 /* Rebuild the stored ETag. */
1703 if (etag_buffer == NULL) {
1704 etag_buffer = get_trash_chunk();
1705
1706 if (shctx_row_data_get(shctx_ptr(cache), block_ptr(entry),
1707 (unsigned char*)b_orig(etag_buffer),
1708 entry->etag_offset, entry->etag_length) == 0) {
1709 cache_entry_etag = ist2(b_orig(etag_buffer), entry->etag_length);
1710 } else {
1711 /* We could not rebuild the ETag in one go, we
1712 * won't send a "304 Not Modified" response. */
1713 break;
1714 }
1715 }
1716
1717 if (http_compare_etags(cache_entry_etag, ctx.value) == 1) {
1718 retval = 1;
1719 break;
1720 }
1721 }
1722
Remi Tricot-Le Breton53161d82020-10-23 10:51:28 +02001723 /* If the request did not contain an "If-None-Match" header, we look for
1724 * an "If-Modified-Since" header (see RFC 7232#3.3). */
1725 if (retval == 0 && if_none_match_found == 0) {
1726 ctx.blk = NULL;
1727 if (http_find_header(htx, ist("if-modified-since"), &ctx, 1)) {
1728 if (parse_http_date(istptr(ctx.value), istlen(ctx.value), &tm)) {
1729 if_modified_since = my_timegm(&tm);
1730
1731 /* We send a "304 Not Modified" response if the
1732 * entry's last modified date is earlier than
1733 * the one found in the "If-Modified-Since"
1734 * header. */
1735 retval = (entry->last_modified <= if_modified_since);
1736 }
1737 }
1738 }
1739
Remi Tricot-Le Breton6cb10382020-10-22 10:40:05 +02001740 return retval;
1741}
1742
William Lallemand41db4602017-10-30 11:15:51 +01001743enum act_return http_action_req_cache_use(struct act_rule *rule, struct proxy *px,
1744 struct session *sess, struct stream *s, int flags)
1745{
William Lallemand77c11972017-10-31 20:43:01 +01001746
Christopher Fauletb3d4bca2019-02-25 10:59:33 +01001747 struct http_txn *txn = s->txn;
Remi Tricot-Le Breton1785f3d2020-11-16 15:56:09 +01001748 struct cache_entry *res, *sec_entry = NULL;
Christopher Faulet95220e22018-12-07 17:34:39 +01001749 struct cache_flt_conf *cconf = rule->arg.act.p[0];
1750 struct cache *cache = cconf->c.cache;
Remi Tricot-Le Breton1785f3d2020-11-16 15:56:09 +01001751 struct shared_block *entry_block;
1752
William Lallemand77c11972017-10-31 20:43:01 +01001753
Willy Tarreau6905d182019-10-01 17:59:17 +02001754 /* Ignore cache for HTTP/1.0 requests and for requests other than GET
1755 * and HEAD */
Christopher Fauletb3d4bca2019-02-25 10:59:33 +01001756 if (!(txn->req.flags & HTTP_MSGF_VER_11) ||
Willy Tarreau6905d182019-10-01 17:59:17 +02001757 (txn->meth != HTTP_METH_GET && txn->meth != HTTP_METH_HEAD))
Christopher Fauletb3d4bca2019-02-25 10:59:33 +01001758 txn->flags |= TX_CACHE_IGNORE;
1759
Christopher Fauletfc9cfe42019-07-16 14:54:53 +02001760 http_check_request_for_cacheability(s, &s->req);
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01001761
Remi Tricot-Le Breton72cffaf2020-12-03 18:19:31 +01001762 /* The request's hash has to be calculated for all requests, even POSTs
Ilya Shipitsinf38a0182020-12-21 01:16:17 +05001763 * or PUTs for instance because RFC7234 specifies that a successful
Remi Tricot-Le Breton72cffaf2020-12-03 18:19:31 +01001764 * "unsafe" method on a stored resource must invalidate it
1765 * (see RFC7234#4.4). */
1766 if (!sha1_hosturi(s))
Willy Tarreau504455c2017-12-22 17:47:35 +01001767 return ACT_RET_CONT;
1768
Willy Tarreau504455c2017-12-22 17:47:35 +01001769 if (s->txn->flags & TX_CACHE_IGNORE)
1770 return ACT_RET_CONT;
1771
Willy Tarreaua1214a52018-12-14 14:00:25 +01001772 if (px == strm_fe(s))
Willy Tarreau4781b152021-04-06 13:53:36 +02001773 _HA_ATOMIC_INC(&px->fe_counters.p.http.cache_lookups);
Willy Tarreaua1214a52018-12-14 14:00:25 +01001774 else
Willy Tarreau4781b152021-04-06 13:53:36 +02001775 _HA_ATOMIC_INC(&px->be_counters.p.http.cache_lookups);
Willy Tarreaua1214a52018-12-14 14:00:25 +01001776
William Lallemanda400a3a2017-11-20 19:13:12 +01001777 shctx_lock(shctx_ptr(cache));
William Lallemandf528fff2017-11-23 19:43:17 +01001778 res = entry_exist(cache, s->txn->cache_hash);
Remi Tricot-Le Breton32434472020-11-25 10:09:43 +01001779 /* We must not use an entry that is not complete. */
1780 if (res && res->complete) {
William Lallemand77c11972017-10-31 20:43:01 +01001781 struct appctx *appctx;
Remi Tricot-Le Breton1785f3d2020-11-16 15:56:09 +01001782 entry_block = block_ptr(res);
1783 shctx_row_inc_hot(shctx_ptr(cache), entry_block);
William Lallemanda400a3a2017-11-20 19:13:12 +01001784 shctx_unlock(shctx_ptr(cache));
Remi Tricot-Le Breton1785f3d2020-11-16 15:56:09 +01001785
1786 /* In case of Vary, we could have multiple entries with the same
Remi Tricot-Le Breton2b5c5cb2020-12-23 18:13:45 +01001787 * primary hash. We need to calculate the secondary hash in order
Remi Tricot-Le Breton1785f3d2020-11-16 15:56:09 +01001788 * to find the actual entry we want (if it exists). */
1789 if (res->secondary_key_signature) {
1790 if (!http_request_build_secondary_key(s, res->secondary_key_signature)) {
1791 shctx_lock(shctx_ptr(cache));
1792 sec_entry = secondary_entry_exist(cache, res,
1793 s->txn->cache_secondary_hash);
1794 if (sec_entry && sec_entry != res) {
1795 /* The wrong row was added to the hot list. */
1796 shctx_row_dec_hot(shctx_ptr(cache), entry_block);
1797 entry_block = block_ptr(sec_entry);
1798 shctx_row_inc_hot(shctx_ptr(cache), entry_block);
1799 }
1800 res = sec_entry;
1801 shctx_unlock(shctx_ptr(cache));
1802 }
1803 else
1804 res = NULL;
1805 }
1806
1807 /* We looked for a valid secondary entry and could not find one,
1808 * the request must be forwarded to the server. */
1809 if (!res) {
1810 shctx_lock(shctx_ptr(cache));
1811 shctx_row_dec_hot(shctx_ptr(cache), entry_block);
1812 shctx_unlock(shctx_ptr(cache));
1813 return ACT_RET_CONT;
1814 }
1815
William Lallemand77c11972017-10-31 20:43:01 +01001816 s->target = &http_cache_applet.obj_type;
Willy Tarreau14bfe9a2018-12-19 15:19:27 +01001817 if ((appctx = si_register_handler(&s->si[1], objt_applet(s->target)))) {
Christopher Faulet95e7ea32019-07-15 21:01:29 +02001818 appctx->st0 = HTX_CACHE_INIT;
William Lallemand77c11972017-10-31 20:43:01 +01001819 appctx->rule = rule;
1820 appctx->ctx.cache.entry = res;
Frédéric Lécaille8df65ae2018-10-22 18:01:48 +02001821 appctx->ctx.cache.next = NULL;
1822 appctx->ctx.cache.sent = 0;
Remi Tricot-Le Breton6cb10382020-10-22 10:40:05 +02001823 appctx->ctx.cache.send_notmodified =
1824 should_send_notmodified_response(cache, htxbuf(&s->req.buf), res);
Willy Tarreaua1214a52018-12-14 14:00:25 +01001825
1826 if (px == strm_fe(s))
Willy Tarreau4781b152021-04-06 13:53:36 +02001827 _HA_ATOMIC_INC(&px->fe_counters.p.http.cache_hits);
Willy Tarreaua1214a52018-12-14 14:00:25 +01001828 else
Willy Tarreau4781b152021-04-06 13:53:36 +02001829 _HA_ATOMIC_INC(&px->be_counters.p.http.cache_hits);
Olivier Houchardfccf8402017-11-01 14:04:02 +01001830 return ACT_RET_CONT;
William Lallemand77c11972017-10-31 20:43:01 +01001831 } else {
Christopher Faulet95d7bc52022-04-21 11:30:43 +02001832 s->target = NULL;
William Lallemand55e76742017-11-21 20:01:28 +01001833 shctx_lock(shctx_ptr(cache));
Remi Tricot-Le Breton1785f3d2020-11-16 15:56:09 +01001834 shctx_row_dec_hot(shctx_ptr(cache), entry_block);
William Lallemand55e76742017-11-21 20:01:28 +01001835 shctx_unlock(shctx_ptr(cache));
Christopher Faulet95d7bc52022-04-21 11:30:43 +02001836 return ACT_RET_CONT;
William Lallemand77c11972017-10-31 20:43:01 +01001837 }
1838 }
William Lallemanda400a3a2017-11-20 19:13:12 +01001839 shctx_unlock(shctx_ptr(cache));
Remi Tricot-Le Breton1785f3d2020-11-16 15:56:09 +01001840
1841 /* Shared context does not need to be locked while we calculate the
1842 * secondary hash. */
Remi Tricot-Le Breton754b2422020-11-16 15:56:10 +01001843 if (!res && cache->vary_processing_enabled) {
Remi Tricot-Le Breton1785f3d2020-11-16 15:56:09 +01001844 /* Build a complete secondary hash until the server response
1845 * tells us which fields should be kept (if any). */
1846 http_request_prebuild_full_secondary_key(s);
1847 }
Olivier Houchardfccf8402017-11-01 14:04:02 +01001848 return ACT_RET_CONT;
William Lallemand41db4602017-10-30 11:15:51 +01001849}
1850
1851
1852enum act_parse_ret parse_cache_use(const char **args, int *orig_arg, struct proxy *proxy,
1853 struct act_rule *rule, char **err)
1854{
William Lallemand41db4602017-10-30 11:15:51 +01001855 rule->action = ACT_CUSTOM;
1856 rule->action_ptr = http_action_req_cache_use;
1857
Christopher Faulet95220e22018-12-07 17:34:39 +01001858 if (!parse_cache_rule(proxy, args[*orig_arg], rule, err))
William Lallemand41db4602017-10-30 11:15:51 +01001859 return ACT_RET_PRS_ERR;
William Lallemand41db4602017-10-30 11:15:51 +01001860
1861 (*orig_arg)++;
1862 return ACT_RET_PRS_OK;
William Lallemand41db4602017-10-30 11:15:51 +01001863}
1864
1865int cfg_parse_cache(const char *file, int linenum, char **args, int kwm)
1866{
1867 int err_code = 0;
1868
1869 if (strcmp(args[0], "cache") == 0) { /* new cache section */
1870
1871 if (!*args[1]) {
Tim Duesterhusff4d86b2020-08-18 22:20:27 +02001872 ha_alert("parsing [%s:%d] : '%s' expects a <name> argument\n",
Christopher Faulet767a84b2017-11-24 16:50:31 +01001873 file, linenum, args[0]);
William Lallemand41db4602017-10-30 11:15:51 +01001874 err_code |= ERR_ALERT | ERR_ABORT;
1875 goto out;
1876 }
1877
1878 if (alertif_too_many_args(1, file, linenum, args, &err_code)) {
1879 err_code |= ERR_ABORT;
1880 goto out;
1881 }
1882
1883 if (tmp_cache_config == NULL) {
Tim Duesterhusff4d86b2020-08-18 22:20:27 +02001884 struct cache *cache_config;
1885
William Lallemand41db4602017-10-30 11:15:51 +01001886 tmp_cache_config = calloc(1, sizeof(*tmp_cache_config));
1887 if (!tmp_cache_config) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001888 ha_alert("parsing [%s:%d]: out of memory.\n", file, linenum);
William Lallemand41db4602017-10-30 11:15:51 +01001889 err_code |= ERR_ALERT | ERR_ABORT;
1890 goto out;
1891 }
1892
1893 strlcpy2(tmp_cache_config->id, args[1], 33);
1894 if (strlen(args[1]) > 32) {
Tim Duesterhusff4d86b2020-08-18 22:20:27 +02001895 ha_warning("parsing [%s:%d]: cache name is limited to 32 characters, truncate to '%s'.\n",
Christopher Faulet767a84b2017-11-24 16:50:31 +01001896 file, linenum, tmp_cache_config->id);
William Lallemand41db4602017-10-30 11:15:51 +01001897 err_code |= ERR_WARN;
1898 }
Tim Duesterhusff4d86b2020-08-18 22:20:27 +02001899
1900 list_for_each_entry(cache_config, &caches_config, list) {
1901 if (strcmp(tmp_cache_config->id, cache_config->id) == 0) {
1902 ha_alert("parsing [%s:%d]: Duplicate cache name '%s'.\n",
1903 file, linenum, tmp_cache_config->id);
1904 err_code |= ERR_ALERT | ERR_ABORT;
1905 goto out;
1906 }
1907 }
1908
William Lallemand49b44532017-11-24 18:53:43 +01001909 tmp_cache_config->maxage = 60;
William Lallemand41db4602017-10-30 11:15:51 +01001910 tmp_cache_config->maxblocks = 0;
Frédéric Lécaillea2219f52018-10-22 16:59:13 +02001911 tmp_cache_config->maxobjsz = 0;
Remi Tricot-Le Breton5853c0c2020-12-10 17:58:43 +01001912 tmp_cache_config->max_secondary_entries = DEFAULT_MAX_SECONDARY_ENTRY;
William Lallemand41db4602017-10-30 11:15:51 +01001913 }
1914 } else if (strcmp(args[0], "total-max-size") == 0) {
Frédéric Lécailleb9b8b6b2018-10-25 20:17:45 +02001915 unsigned long int maxsize;
1916 char *err;
William Lallemand41db4602017-10-30 11:15:51 +01001917
1918 if (alertif_too_many_args(1, file, linenum, args, &err_code)) {
1919 err_code |= ERR_ABORT;
1920 goto out;
1921 }
1922
Frédéric Lécailleb9b8b6b2018-10-25 20:17:45 +02001923 maxsize = strtoul(args[1], &err, 10);
1924 if (err == args[1] || *err != '\0') {
1925 ha_warning("parsing [%s:%d]: total-max-size wrong value '%s'\n",
1926 file, linenum, args[1]);
1927 err_code |= ERR_ABORT;
1928 goto out;
1929 }
1930
1931 if (maxsize > (UINT_MAX >> 20)) {
1932 ha_warning("parsing [%s:%d]: \"total-max-size\" (%s) must not be greater than %u\n",
1933 file, linenum, args[1], UINT_MAX >> 20);
1934 err_code |= ERR_ABORT;
1935 goto out;
1936 }
1937
William Lallemand41db4602017-10-30 11:15:51 +01001938 /* size in megabytes */
Frédéric Lécailleb9b8b6b2018-10-25 20:17:45 +02001939 maxsize *= 1024 * 1024 / CACHE_BLOCKSIZE;
William Lallemand41db4602017-10-30 11:15:51 +01001940 tmp_cache_config->maxblocks = maxsize;
William Lallemand49b44532017-11-24 18:53:43 +01001941 } else if (strcmp(args[0], "max-age") == 0) {
1942 if (alertif_too_many_args(1, file, linenum, args, &err_code)) {
1943 err_code |= ERR_ABORT;
1944 goto out;
1945 }
1946
1947 if (!*args[1]) {
1948 ha_warning("parsing [%s:%d]: '%s' expects an age parameter in seconds.\n",
1949 file, linenum, args[0]);
1950 err_code |= ERR_WARN;
1951 }
1952
1953 tmp_cache_config->maxage = atoi(args[1]);
Frédéric Lécaillea2219f52018-10-22 16:59:13 +02001954 } else if (strcmp(args[0], "max-object-size") == 0) {
Frédéric Lécaille4eba5442018-10-25 20:29:31 +02001955 unsigned int maxobjsz;
1956 char *err;
1957
Frédéric Lécaillea2219f52018-10-22 16:59:13 +02001958 if (alertif_too_many_args(1, file, linenum, args, &err_code)) {
1959 err_code |= ERR_ABORT;
1960 goto out;
1961 }
1962
1963 if (!*args[1]) {
1964 ha_warning("parsing [%s:%d]: '%s' expects a maximum file size parameter in bytes.\n",
1965 file, linenum, args[0]);
1966 err_code |= ERR_WARN;
1967 }
1968
Frédéric Lécaille4eba5442018-10-25 20:29:31 +02001969 maxobjsz = strtoul(args[1], &err, 10);
1970 if (err == args[1] || *err != '\0') {
1971 ha_warning("parsing [%s:%d]: max-object-size wrong value '%s'\n",
1972 file, linenum, args[1]);
1973 err_code |= ERR_ABORT;
1974 goto out;
1975 }
1976 tmp_cache_config->maxobjsz = maxobjsz;
Remi Tricot-Le Breton754b2422020-11-16 15:56:10 +01001977 } else if (strcmp(args[0], "process-vary") == 0) {
1978 if (alertif_too_many_args(1, file, linenum, args, &err_code)) {
1979 err_code |= ERR_ABORT;
1980 goto out;
1981 }
1982
1983 if (!*args[1]) {
Remi Tricot-Le Bretone6cc5b52020-12-23 18:13:53 +01001984 ha_warning("parsing [%s:%d]: '%s' expects \"on\" or \"off\" (enable or disable vary processing).\n",
Remi Tricot-Le Breton754b2422020-11-16 15:56:10 +01001985 file, linenum, args[0]);
1986 err_code |= ERR_WARN;
1987 }
Remi Tricot-Le Bretone6cc5b52020-12-23 18:13:53 +01001988 if (strcmp(args[1], "on") == 0)
1989 tmp_cache_config->vary_processing_enabled = 1;
1990 else if (strcmp(args[1], "off") == 0)
1991 tmp_cache_config->vary_processing_enabled = 0;
1992 else {
1993 ha_warning("parsing [%s:%d]: '%s' expects \"on\" or \"off\" (enable or disable vary processing).\n",
1994 file, linenum, args[0]);
1995 err_code |= ERR_WARN;
1996 }
Remi Tricot-Le Breton5853c0c2020-12-10 17:58:43 +01001997 } else if (strcmp(args[0], "max-secondary-entries") == 0) {
1998 unsigned int max_sec_entries;
1999 char *err;
2000
2001 if (alertif_too_many_args(1, file, linenum, args, &err_code)) {
2002 err_code |= ERR_ABORT;
2003 goto out;
2004 }
2005
2006 if (!*args[1]) {
2007 ha_warning("parsing [%s:%d]: '%s' expects a strictly positive number.\n",
2008 file, linenum, args[0]);
2009 err_code |= ERR_WARN;
2010 }
2011
2012 max_sec_entries = strtoul(args[1], &err, 10);
2013 if (err == args[1] || *err != '\0' || max_sec_entries == 0) {
2014 ha_warning("parsing [%s:%d]: max-secondary-entries wrong value '%s'\n",
2015 file, linenum, args[1]);
2016 err_code |= ERR_ABORT;
2017 goto out;
2018 }
2019 tmp_cache_config->max_secondary_entries = max_sec_entries;
Frédéric Lécaillea2219f52018-10-22 16:59:13 +02002020 }
2021 else if (*args[0] != 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002022 ha_alert("parsing [%s:%d] : unknown keyword '%s' in 'cache' section\n", file, linenum, args[0]);
William Lallemand41db4602017-10-30 11:15:51 +01002023 err_code |= ERR_ALERT | ERR_FATAL;
2024 goto out;
2025 }
2026out:
2027 return err_code;
2028}
2029
2030/* once the cache section is parsed */
2031
2032int cfg_post_parse_section_cache()
2033{
William Lallemand41db4602017-10-30 11:15:51 +01002034 int err_code = 0;
William Lallemand41db4602017-10-30 11:15:51 +01002035
2036 if (tmp_cache_config) {
William Lallemand41db4602017-10-30 11:15:51 +01002037
2038 if (tmp_cache_config->maxblocks <= 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002039 ha_alert("Size not specified for cache '%s'\n", tmp_cache_config->id);
William Lallemand41db4602017-10-30 11:15:51 +01002040 err_code |= ERR_FATAL | ERR_ALERT;
2041 goto out;
2042 }
2043
Frédéric Lécaille4eba5442018-10-25 20:29:31 +02002044 if (!tmp_cache_config->maxobjsz) {
Frédéric Lécaillea2219f52018-10-22 16:59:13 +02002045 /* Default max. file size is a 256th of the cache size. */
2046 tmp_cache_config->maxobjsz =
2047 (tmp_cache_config->maxblocks * CACHE_BLOCKSIZE) >> 8;
Frédéric Lécaille4eba5442018-10-25 20:29:31 +02002048 }
2049 else if (tmp_cache_config->maxobjsz > tmp_cache_config->maxblocks * CACHE_BLOCKSIZE / 2) {
2050 ha_alert("\"max-object-size\" is limited to an half of \"total-max-size\" => %u\n", tmp_cache_config->maxblocks * CACHE_BLOCKSIZE / 2);
2051 err_code |= ERR_FATAL | ERR_ALERT;
2052 goto out;
2053 }
Frédéric Lécaillea2219f52018-10-22 16:59:13 +02002054
William Lallemandd1d1e222019-08-28 15:22:49 +02002055 /* add to the list of cache to init and reinit tmp_cache_config
2056 * for next cache section, if any.
2057 */
Willy Tarreau2b718102021-04-21 07:32:39 +02002058 LIST_APPEND(&caches_config, &tmp_cache_config->list);
William Lallemandd1d1e222019-08-28 15:22:49 +02002059 tmp_cache_config = NULL;
2060 return err_code;
2061 }
2062out:
Willy Tarreau61cfdf42021-02-20 10:46:51 +01002063 ha_free(&tmp_cache_config);
William Lallemandd1d1e222019-08-28 15:22:49 +02002064 return err_code;
2065
2066}
2067
2068int post_check_cache()
2069{
2070 struct proxy *px;
2071 struct cache *back, *cache_config, *cache;
2072 struct shared_context *shctx;
2073 int ret_shctx;
Christopher Fauletfc633b62020-11-06 15:24:23 +01002074 int err_code = ERR_NONE;
William Lallemandd1d1e222019-08-28 15:22:49 +02002075
2076 list_for_each_entry_safe(cache_config, back, &caches_config, list) {
2077
2078 ret_shctx = shctx_init(&shctx, cache_config->maxblocks, CACHE_BLOCKSIZE,
2079 cache_config->maxobjsz, sizeof(struct cache), 1);
William Lallemand4da3f8a2017-10-31 14:33:34 +01002080
Frédéric Lécaillebc584492018-10-25 20:18:59 +02002081 if (ret_shctx <= 0) {
William Lallemand41db4602017-10-30 11:15:51 +01002082 if (ret_shctx == SHCTX_E_INIT_LOCK)
Christopher Faulet767a84b2017-11-24 16:50:31 +01002083 ha_alert("Unable to initialize the lock for the cache.\n");
William Lallemand41db4602017-10-30 11:15:51 +01002084 else
Christopher Faulet767a84b2017-11-24 16:50:31 +01002085 ha_alert("Unable to allocate cache.\n");
William Lallemand41db4602017-10-30 11:15:51 +01002086
2087 err_code |= ERR_FATAL | ERR_ALERT;
2088 goto out;
2089 }
William Lallemanda400a3a2017-11-20 19:13:12 +01002090 shctx->free_block = cache_free_blocks;
William Lallemandd1d1e222019-08-28 15:22:49 +02002091 /* the cache structure is stored in the shctx and added to the
2092 * caches list, we can remove the entry from the caches_config
2093 * list */
2094 memcpy(shctx->data, cache_config, sizeof(struct cache));
William Lallemand41db4602017-10-30 11:15:51 +01002095 cache = (struct cache *)shctx->data;
Remi Tricot-Le Breton1785f3d2020-11-16 15:56:09 +01002096 cache->entries = EB_ROOT;
Willy Tarreau2b718102021-04-21 07:32:39 +02002097 LIST_APPEND(&caches, &cache->list);
2098 LIST_DELETE(&cache_config->list);
William Lallemandd1d1e222019-08-28 15:22:49 +02002099 free(cache_config);
2100
2101 /* Find all references for this cache in the existing filters
2102 * (over all proxies) and reference it in matching filters.
2103 */
2104 for (px = proxies_list; px; px = px->next) {
2105 struct flt_conf *fconf;
2106 struct cache_flt_conf *cconf;
2107
2108 list_for_each_entry(fconf, &px->filter_configs, list) {
2109 if (fconf->id != cache_store_flt_id)
2110 continue;
2111
2112 cconf = fconf->conf;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002113 if (strcmp(cache->id, cconf->c.name) == 0) {
William Lallemandd1d1e222019-08-28 15:22:49 +02002114 free(cconf->c.name);
Tim Duesterhusd7c6e6a2020-09-14 18:01:33 +02002115 cconf->flags |= CACHE_FLT_INIT;
William Lallemandd1d1e222019-08-28 15:22:49 +02002116 cconf->c.cache = cache;
2117 break;
2118 }
2119 }
2120 }
William Lallemand41db4602017-10-30 11:15:51 +01002121 }
William Lallemandd1d1e222019-08-28 15:22:49 +02002122
William Lallemand41db4602017-10-30 11:15:51 +01002123out:
William Lallemand41db4602017-10-30 11:15:51 +01002124 return err_code;
2125
William Lallemand41db4602017-10-30 11:15:51 +01002126}
2127
William Lallemand41db4602017-10-30 11:15:51 +01002128struct flt_ops cache_ops = {
2129 .init = cache_store_init,
Christopher Faulet95220e22018-12-07 17:34:39 +01002130 .check = cache_store_check,
2131 .deinit = cache_store_deinit,
William Lallemand41db4602017-10-30 11:15:51 +01002132
Christopher Faulet65554e12020-03-06 14:52:06 +01002133 /* Handle stream init/deinit */
2134 .attach = cache_store_strm_init,
2135 .detach = cache_store_strm_deinit,
2136
William Lallemand4da3f8a2017-10-31 14:33:34 +01002137 /* Handle channels activity */
Christopher Faulet839791a2019-01-07 16:12:07 +01002138 .channel_post_analyze = cache_store_post_analyze,
William Lallemand4da3f8a2017-10-31 14:33:34 +01002139
2140 /* Filter HTTP requests and responses */
2141 .http_headers = cache_store_http_headers,
Christopher Faulet54a8d5a2018-12-07 12:21:11 +01002142 .http_payload = cache_store_http_payload,
William Lallemand4da3f8a2017-10-31 14:33:34 +01002143 .http_end = cache_store_http_end,
William Lallemand41db4602017-10-30 11:15:51 +01002144};
2145
Christopher Faulet99a17a22018-12-11 09:18:27 +01002146
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01002147#define CHECK_ENCODING(str, encoding_name, encoding_value) \
2148 ({ \
2149 int retval = 0; \
2150 if (istmatch(str, (struct ist){ .ptr = encoding_name+1, .len = sizeof(encoding_name) - 2 })) { \
2151 retval = encoding_value; \
2152 encoding = istadv(encoding, sizeof(encoding_name) - 2); \
2153 } \
2154 (retval); \
2155 })
2156
2157/*
2158 * Parse the encoding <encoding> and try to match the encoding part upon an
2159 * encoding list of explicitly supported encodings (which all have a specific
2160 * bit in an encoding bitmap). If a weight is included in the value, find out if
2161 * it is null or not. The bit value will be set in the <encoding_value>
2162 * parameter and the <has_null_weight> will be set to 1 if the weight is strictly
2163 * 0, 1 otherwise.
2164 * The encodings list is extracted from
2165 * https://www.iana.org/assignments/http-parameters/http-parameters.xhtml.
2166 * Returns 0 in case of success and -1 in case of error.
2167 */
2168static int parse_encoding_value(struct ist encoding, unsigned int *encoding_value,
2169 unsigned int *has_null_weight)
2170{
2171 int retval = 0;
2172
2173 if (!encoding_value)
2174 return -1;
2175
2176 if (!istlen(encoding))
2177 return -1; /* Invalid encoding */
2178
2179 *encoding_value = 0;
2180 if (has_null_weight)
2181 *has_null_weight = 0;
2182
2183 switch (*encoding.ptr) {
2184 case 'a':
2185 encoding = istadv(encoding, 1);
2186 *encoding_value = CHECK_ENCODING(encoding, "aes128gcm", VARY_ENCODING_AES128GCM);
2187 break;
2188 case 'b':
2189 encoding = istadv(encoding, 1);
2190 *encoding_value = CHECK_ENCODING(encoding, "br", VARY_ENCODING_BR);
2191 break;
2192 case 'c':
2193 encoding = istadv(encoding, 1);
2194 *encoding_value = CHECK_ENCODING(encoding, "compress", VARY_ENCODING_COMPRESS);
2195 break;
2196 case 'd':
2197 encoding = istadv(encoding, 1);
2198 *encoding_value = CHECK_ENCODING(encoding, "deflate", VARY_ENCODING_DEFLATE);
2199 break;
2200 case 'e':
2201 encoding = istadv(encoding, 1);
2202 *encoding_value = CHECK_ENCODING(encoding, "exi", VARY_ENCODING_EXI);
2203 break;
2204 case 'g':
2205 encoding = istadv(encoding, 1);
2206 *encoding_value = CHECK_ENCODING(encoding, "gzip", VARY_ENCODING_GZIP);
2207 break;
2208 case 'i':
2209 encoding = istadv(encoding, 1);
2210 *encoding_value = CHECK_ENCODING(encoding, "identity", VARY_ENCODING_IDENTITY);
2211 break;
2212 case 'p':
2213 encoding = istadv(encoding, 1);
2214 *encoding_value = CHECK_ENCODING(encoding, "pack200-gzip", VARY_ENCODING_PACK200_GZIP);
2215 break;
2216 case 'x':
2217 encoding = istadv(encoding, 1);
2218 *encoding_value = CHECK_ENCODING(encoding, "x-gzip", VARY_ENCODING_GZIP);
2219 if (!*encoding_value)
2220 *encoding_value = CHECK_ENCODING(encoding, "x-compress", VARY_ENCODING_COMPRESS);
2221 break;
2222 case 'z':
2223 encoding = istadv(encoding, 1);
2224 *encoding_value = CHECK_ENCODING(encoding, "zstd", VARY_ENCODING_ZSTD);
2225 break;
2226 case '*':
2227 encoding = istadv(encoding, 1);
2228 *encoding_value = VARY_ENCODING_STAR;
2229 break;
2230 default:
2231 retval = -1; /* Unmanaged encoding */
2232 break;
2233 }
2234
2235 /* Process the optional weight part of the encoding. */
2236 if (*encoding_value) {
2237 encoding = http_trim_leading_spht(encoding);
2238 if (istlen(encoding)) {
2239 if (*encoding.ptr != ';')
2240 return -1;
2241
2242 if (has_null_weight) {
2243 encoding = istadv(encoding, 1);
2244
2245 encoding = http_trim_leading_spht(encoding);
2246
2247 *has_null_weight = isteq(encoding, ist("q=0"));
2248 }
2249 }
2250 }
2251
2252 return retval;
2253}
2254
Tim Duesterhus23b29452020-11-24 22:22:56 +01002255#define ACCEPT_ENCODING_MAX_ENTRIES 16
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +01002256/*
Tim Duesterhus1d66e392021-01-18 13:41:16 +01002257 * Build a bitmap of the accept-encoding header.
2258 *
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01002259 * The bitmap is built by matching every sub-part of the accept-encoding value
2260 * with a subset of explicitly supported encodings, which all have their own bit
2261 * in the bitmap. This bitmap will be used to determine if a response can be
2262 * served to a client (that is if it has an encoding that is accepted by the
Tim Duesterhus1d66e392021-01-18 13:41:16 +01002263 * client). Any unknown encodings will be indicated by the VARY_ENCODING_OTHER
2264 * bit.
2265 *
2266 * Returns 0 in case of success and -1 in case of error.
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +01002267 */
Remi Tricot-Le Bretone4421de2020-12-23 18:13:46 +01002268static int accept_encoding_normalizer(struct htx *htx, struct ist hdr_name,
2269 char *buf, unsigned int *buf_len)
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +01002270{
Tim Duesterhus23b29452020-11-24 22:22:56 +01002271 size_t count = 0;
Tim Duesterhus1d66e392021-01-18 13:41:16 +01002272 uint32_t encoding_bitmap = 0;
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01002273 unsigned int encoding_bmp_bl = -1;
Remi Tricot-Le Bretone4421de2020-12-23 18:13:46 +01002274 struct http_hdr_ctx ctx = { .blk = NULL };
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01002275 unsigned int encoding_value;
2276 unsigned int rejected_encoding;
2277
Ilya Shipitsinb8888ab2021-01-06 21:20:16 +05002278 /* A user agent always accepts an unencoded value unless it explicitly
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01002279 * refuses it through an "identity;q=0" accept-encoding value. */
Tim Duesterhus1d66e392021-01-18 13:41:16 +01002280 encoding_bitmap |= VARY_ENCODING_IDENTITY;
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +01002281
Remi Tricot-Le Bretone4421de2020-12-23 18:13:46 +01002282 /* Iterate over all the ACCEPT_ENCODING_MAX_ENTRIES first accept-encoding
2283 * values that might span acrosse multiple accept-encoding headers. */
2284 while (http_find_header(htx, hdr_name, &ctx, 0) && count < ACCEPT_ENCODING_MAX_ENTRIES) {
Tim Duesterhusbeec7ea2021-06-18 15:09:28 +02002285 count++;
2286
2287 /* As per RFC7231#5.3.4, "An Accept-Encoding header field with a
2288 * combined field-value that is empty implies that the user agent
2289 * does not want any content-coding in response."
2290 *
2291 * We must (and did) count the existence of this empty header to not
2292 * hit the `count == 0` case below, but must ignore the value to not
2293 * include VARY_ENCODING_OTHER into the final bitmap.
2294 */
2295 if (istlen(ctx.value) == 0)
2296 continue;
2297
Remi Tricot-Le Bretone4421de2020-12-23 18:13:46 +01002298 /* Turn accept-encoding value to lower case */
2299 ist2bin_lc(istptr(ctx.value), ctx.value);
Tim Duesterhus23b29452020-11-24 22:22:56 +01002300
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01002301 /* Try to identify a known encoding and to manage null weights. */
2302 if (!parse_encoding_value(ctx.value, &encoding_value, &rejected_encoding)) {
2303 if (rejected_encoding)
2304 encoding_bmp_bl &= ~encoding_value;
2305 else
Tim Duesterhus1d66e392021-01-18 13:41:16 +01002306 encoding_bitmap |= encoding_value;
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01002307 }
2308 else {
2309 /* Unknown encoding */
Tim Duesterhus1d66e392021-01-18 13:41:16 +01002310 encoding_bitmap |= VARY_ENCODING_OTHER;
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01002311 }
Remi Tricot-Le Breton8bb72aa2020-11-30 17:06:03 +01002312 }
Remi Tricot-Le Bretone4421de2020-12-23 18:13:46 +01002313
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01002314 /* If a "*" was found in the accepted encodings (without a null weight),
Ilya Shipitsinb8888ab2021-01-06 21:20:16 +05002315 * all the encoding are accepted except the ones explicitly rejected. */
Tim Duesterhus1d66e392021-01-18 13:41:16 +01002316 if (encoding_bitmap & VARY_ENCODING_STAR) {
2317 encoding_bitmap = ~0;
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01002318 }
2319
Ilya Shipitsinb8888ab2021-01-06 21:20:16 +05002320 /* Clear explicitly rejected encodings from the bitmap */
Tim Duesterhus1d66e392021-01-18 13:41:16 +01002321 encoding_bitmap &= encoding_bmp_bl;
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01002322
2323 /* As per RFC7231#5.3.4, "If no Accept-Encoding field is in the request,
2324 * any content-coding is considered acceptable by the user agent". */
2325 if (count == 0)
Tim Duesterhus1d66e392021-01-18 13:41:16 +01002326 encoding_bitmap = ~0;
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01002327
Remi Tricot-Le Bretone4421de2020-12-23 18:13:46 +01002328 /* A request with more than ACCEPT_ENCODING_MAX_ENTRIES accepted
2329 * encodings might be illegitimate so we will not use it. */
2330 if (count == ACCEPT_ENCODING_MAX_ENTRIES)
2331 return -1;
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +01002332
Tim Duesterhus1d66e392021-01-18 13:41:16 +01002333 write_u32(buf, encoding_bitmap);
2334 *buf_len = sizeof(encoding_bitmap);
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +01002335
Remi Tricot-Le Bretone4421de2020-12-23 18:13:46 +01002336 /* This function fills the hash buffer correctly even if no header was
2337 * found, hence the 0 return value (success). */
Tim Duesterhus23b29452020-11-24 22:22:56 +01002338 return 0;
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +01002339}
Tim Duesterhus23b29452020-11-24 22:22:56 +01002340#undef ACCEPT_ENCODING_MAX_ENTRIES
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +01002341
2342/*
Remi Tricot-Le Bretone4421de2020-12-23 18:13:46 +01002343 * Normalizer used by default for the Referer header. It only
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +01002344 * calculates a simple crc of the whole value.
Remi Tricot-Le Bretone4421de2020-12-23 18:13:46 +01002345 * Only the first occurrence of the header will be taken into account in the
2346 * hash.
2347 * Returns 0 in case of success, 1 if the hash buffer should be filled with 0s
2348 * and -1 in case of error.
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +01002349 */
Remi Tricot-Le Bretone4421de2020-12-23 18:13:46 +01002350static int default_normalizer(struct htx *htx, struct ist hdr_name,
2351 char *buf, unsigned int *buf_len)
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +01002352{
Remi Tricot-Le Bretone4421de2020-12-23 18:13:46 +01002353 int retval = 1;
2354 struct http_hdr_ctx ctx = { .blk = NULL };
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +01002355
Remi Tricot-Le Bretone4421de2020-12-23 18:13:46 +01002356 if (http_find_header(htx, hdr_name, &ctx, 1)) {
2357 retval = 0;
2358 write_u32(buf, hash_crc32(istptr(ctx.value), istlen(ctx.value)));
2359 *buf_len = sizeof(int);
2360 }
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +01002361
Remi Tricot-Le Bretone4421de2020-12-23 18:13:46 +01002362 return retval;
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +01002363}
2364
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01002365/*
Tim Duesterhused84d842021-01-18 13:41:17 +01002366 * Accept-Encoding bitmap comparison function.
2367 * Returns 0 if the bitmaps are compatible.
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01002368 */
Tim Duesterhused84d842021-01-18 13:41:17 +01002369static int accept_encoding_bitmap_cmp(const void *ref, const void *new, unsigned int len)
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01002370{
Tim Duesterhused84d842021-01-18 13:41:17 +01002371 uint32_t ref_bitmap = read_u32(ref);
2372 uint32_t new_bitmap = read_u32(new);
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01002373
Tim Duesterhused84d842021-01-18 13:41:17 +01002374 if (!(ref_bitmap & VARY_ENCODING_OTHER)) {
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01002375 /* All the bits set in the reference bitmap correspond to the
2376 * stored response' encoding and should all be set in the new
2377 * encoding bitmap in order for the client to be able to manage
Tim Duesterhusdc38bc42020-12-29 12:43:53 +01002378 * the response.
2379 *
2380 * If this is the case the cached response has encodings that
2381 * are accepted by the client. It can be served directly by
2382 * the cache (as far as the accept-encoding part is concerned).
2383 */
2384
Tim Duesterhused84d842021-01-18 13:41:17 +01002385 return (ref_bitmap & new_bitmap) != ref_bitmap;
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01002386 }
Tim Duesterhusdc38bc42020-12-29 12:43:53 +01002387 else {
Tim Duesterhus1d66e392021-01-18 13:41:16 +01002388 return 1;
Tim Duesterhusdc38bc42020-12-29 12:43:53 +01002389 }
Remi Tricot-Le Bretonce9e7b22020-12-23 18:13:49 +01002390}
2391
2392
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +01002393/*
2394 * Pre-calculate the hashes of all the supported headers (in our Vary
2395 * implementation) of a given request. We have to calculate all the hashes
2396 * in advance because the actual Vary signature won't be known until the first
2397 * response.
2398 * Only the first occurrence of every header will be taken into account in the
2399 * hash.
2400 * If the header is not present, the hash portion of the given header will be
2401 * filled with zeros.
2402 * Returns 0 in case of success.
2403 */
2404static int http_request_prebuild_full_secondary_key(struct stream *s)
2405{
Remi Tricot-Le Bretonbba29122020-12-23 18:13:44 +01002406 /* The fake signature (second parameter) will ensure that every part of the
2407 * secondary key is calculated. */
2408 return http_request_build_secondary_key(s, ~0);
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +01002409}
2410
2411
2412/*
2413 * Calculate the secondary key for a request for which we already have a known
2414 * vary signature. The key is made by aggregating hashes calculated for every
2415 * header mentioned in the vary signature.
2416 * Only the first occurrence of every header will be taken into account in the
2417 * hash.
2418 * If the header is not present, the hash portion of the given header will be
2419 * filled with zeros.
2420 * Returns 0 in case of success.
2421 */
2422static int http_request_build_secondary_key(struct stream *s, int vary_signature)
2423{
2424 struct http_txn *txn = s->txn;
2425 struct htx *htx = htxbuf(&s->req.buf);
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +01002426
2427 unsigned int idx;
2428 const struct vary_hashing_information *info = NULL;
2429 unsigned int hash_length = 0;
2430 int retval = 0;
2431 int offset = 0;
2432
Remi Tricot-Le Bretone4421de2020-12-23 18:13:46 +01002433 for (idx = 0; idx < sizeof(vary_information)/sizeof(*vary_information) && retval >= 0; ++idx) {
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +01002434 info = &vary_information[idx];
2435
Remi Tricot-Le Bretone4421de2020-12-23 18:13:46 +01002436 /* The normalizing functions will be in charge of getting the
2437 * header values from the htx. This way they can manage multiple
2438 * occurrences of their processed header. */
2439 if ((vary_signature & info->value) && info->norm_fn != NULL &&
2440 !(retval = info->norm_fn(htx, info->hdr_name, &txn->cache_secondary_hash[offset], &hash_length))) {
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +01002441 offset += hash_length;
2442 }
2443 else {
2444 /* Fill hash with 0s. */
2445 hash_length = info->hash_length;
2446 memset(&txn->cache_secondary_hash[offset], 0, hash_length);
2447 offset += hash_length;
2448 }
2449 }
2450
Remi Tricot-Le Breton2b5c5cb2020-12-23 18:13:45 +01002451 if (retval >= 0)
2452 txn->flags |= TX_CACHE_HAS_SEC_KEY;
2453
2454 return (retval < 0);
Remi Tricot-Le Breton3d082362020-11-16 15:56:08 +01002455}
2456
2457/*
2458 * Build the actual secondary key of a given request out of the prebuilt key and
2459 * the actual vary signature (extracted from the response).
2460 * Returns 0 in case of success.
2461 */
2462static int http_request_reduce_secondary_key(unsigned int vary_signature,
2463 char prebuilt_key[HTTP_CACHE_SEC_KEY_LEN])
2464{
2465 int offset = 0;
2466 int global_offset = 0;
2467 int vary_info_count = 0;
2468 int keep = 0;
2469 unsigned int vary_idx;
2470 const struct vary_hashing_information *vary_info;
2471
2472 vary_info_count = sizeof(vary_information)/sizeof(*vary_information);
2473 for (vary_idx = 0; vary_idx < vary_info_count; ++vary_idx) {
2474 vary_info = &vary_information[vary_idx];
2475 keep = (vary_signature & vary_info->value) ? 0xff : 0;
2476
2477 for (offset = 0; offset < vary_info->hash_length; ++offset,++global_offset) {
2478 prebuilt_key[global_offset] &= keep;
2479 }
2480 }
2481
2482 return 0;
2483}
2484
2485
Christopher Faulet99a17a22018-12-11 09:18:27 +01002486
2487static int
2488parse_cache_flt(char **args, int *cur_arg, struct proxy *px,
2489 struct flt_conf *fconf, char **err, void *private)
2490{
2491 struct flt_conf *f, *back;
Willy Tarreaua73da1e2018-12-14 10:19:28 +01002492 struct cache_flt_conf *cconf = NULL;
Christopher Faulet99a17a22018-12-11 09:18:27 +01002493 char *name = NULL;
2494 int pos = *cur_arg;
2495
Christopher Faulet2a37cdb2020-05-18 11:58:16 +02002496 /* Get the cache filter name. <pos> point on "cache" keyword */
2497 if (!*args[pos + 1]) {
Tim Duesterhusea969f62020-08-18 22:06:51 +02002498 memprintf(err, "%s : expects a <name> argument", args[pos]);
Christopher Faulet2a37cdb2020-05-18 11:58:16 +02002499 goto error;
2500 }
2501 name = strdup(args[pos + 1]);
2502 if (!name) {
2503 memprintf(err, "%s '%s' : out of memory", args[pos], args[pos + 1]);
2504 goto error;
Christopher Faulet99a17a22018-12-11 09:18:27 +01002505 }
Christopher Faulet2a37cdb2020-05-18 11:58:16 +02002506 pos += 2;
Christopher Faulet99a17a22018-12-11 09:18:27 +01002507
2508 /* Check if an implicit filter with the same name already exists. If so,
2509 * we remove the implicit filter to use the explicit one. */
2510 list_for_each_entry_safe(f, back, &px->filter_configs, list) {
2511 if (f->id != cache_store_flt_id)
2512 continue;
2513
2514 cconf = f->conf;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002515 if (strcmp(name, cconf->c.name) != 0) {
Christopher Faulet99a17a22018-12-11 09:18:27 +01002516 cconf = NULL;
2517 continue;
2518 }
2519
2520 if (!(cconf->flags & CACHE_FLT_F_IMPLICIT_DECL)) {
2521 cconf = NULL;
2522 memprintf(err, "%s: multiple explicit declarations of the cache filter '%s'",
2523 px->id, name);
Tim Duesterhusd34b1ce2020-01-18 01:46:18 +01002524 goto error;
Christopher Faulet99a17a22018-12-11 09:18:27 +01002525 }
2526
2527 /* Remove the implicit filter. <cconf> is kept for the explicit one */
Willy Tarreau2b718102021-04-21 07:32:39 +02002528 LIST_DELETE(&f->list);
Christopher Faulet99a17a22018-12-11 09:18:27 +01002529 free(f);
2530 free(name);
2531 break;
2532 }
2533
2534 /* No implicit cache filter found, create configuration for the explicit one */
2535 if (!cconf) {
2536 cconf = calloc(1, sizeof(*cconf));
2537 if (!cconf) {
2538 memprintf(err, "%s: out of memory", args[*cur_arg]);
2539 goto error;
2540 }
2541 cconf->c.name = name;
2542 }
2543
2544 cconf->flags = 0;
2545 fconf->id = cache_store_flt_id;
2546 fconf->conf = cconf;
2547 fconf->ops = &cache_ops;
2548
2549 *cur_arg = pos;
2550 return 0;
2551
2552 error:
2553 free(name);
2554 free(cconf);
2555 return -1;
2556}
2557
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02002558static int cli_parse_show_cache(char **args, char *payload, struct appctx *appctx, void *private)
William Lallemand1f49a362017-11-21 20:01:26 +01002559{
2560 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
2561 return 1;
2562
2563 return 0;
2564}
2565
2566static int cli_io_handler_show_cache(struct appctx *appctx)
2567{
2568 struct cache* cache = appctx->ctx.cli.p0;
2569 struct stream_interface *si = appctx->owner;
2570
William Lallemand1f49a362017-11-21 20:01:26 +01002571 if (cache == NULL) {
2572 cache = LIST_ELEM((caches).n, typeof(struct cache *), list);
2573 }
2574
2575 list_for_each_entry_from(cache, &caches, list) {
2576 struct eb32_node *node = NULL;
2577 unsigned int next_key;
2578 struct cache_entry *entry;
Remi Tricot-Le Bretone3e1e5f2020-11-27 15:48:40 +01002579 unsigned int i;
William Lallemand1f49a362017-11-21 20:01:26 +01002580
William Lallemand1f49a362017-11-21 20:01:26 +01002581 next_key = appctx->ctx.cli.i0;
Willy Tarreauafe1de52018-04-04 11:56:43 +02002582 if (!next_key) {
2583 chunk_printf(&trash, "%p: %s (shctx:%p, available blocks:%d)\n", cache, cache->id, shctx_ptr(cache), shctx_ptr(cache)->nbav);
2584 if (ci_putchk(si_ic(si), &trash) == -1) {
Willy Tarreaudb398432018-11-15 11:08:52 +01002585 si_rx_room_blk(si);
Willy Tarreauafe1de52018-04-04 11:56:43 +02002586 return 0;
2587 }
2588 }
William Lallemand1f49a362017-11-21 20:01:26 +01002589
2590 appctx->ctx.cli.p0 = cache;
2591
2592 while (1) {
2593
2594 shctx_lock(shctx_ptr(cache));
Christopher Fauleteba18d52021-11-23 16:03:05 +01002595 node = eb32_lookup_ge(&cache->entries, next_key);
William Lallemand1f49a362017-11-21 20:01:26 +01002596 if (!node) {
2597 shctx_unlock(shctx_ptr(cache));
Willy Tarreauafe1de52018-04-04 11:56:43 +02002598 appctx->ctx.cli.i0 = 0;
William Lallemand1f49a362017-11-21 20:01:26 +01002599 break;
2600 }
2601
2602 entry = container_of(node, struct cache_entry, eb);
William Lallemand1f49a362017-11-21 20:01:26 +01002603 next_key = node->key + 1;
Willy Tarreaudcce27f2022-04-13 11:21:39 +02002604
2605 if (entry->expire > now.tv_sec) {
2606 chunk_printf(&trash, "%p hash:%u vary:0x", entry, read_u32(entry->hash));
2607 for (i = 0; i < HTTP_CACHE_SEC_KEY_LEN; ++i)
2608 chunk_appendf(&trash, "%02x", (unsigned char)entry->secondary_key[i]);
2609 chunk_appendf(&trash, " size:%u (%u blocks), refcount:%u, expire:%d\n",
2610 block_ptr(entry)->len, block_ptr(entry)->block_count,
2611 block_ptr(entry)->refcount, entry->expire - (int)now.tv_sec);
2612 } else {
2613 /* time to remove that one */
2614 delete_entry(entry);
2615 entry->eb.key = 0;
2616 }
2617
William Lallemand1f49a362017-11-21 20:01:26 +01002618 appctx->ctx.cli.i0 = next_key;
2619
2620 shctx_unlock(shctx_ptr(cache));
2621
2622 if (ci_putchk(si_ic(si), &trash) == -1) {
Willy Tarreaudb398432018-11-15 11:08:52 +01002623 si_rx_room_blk(si);
William Lallemand1f49a362017-11-21 20:01:26 +01002624 return 0;
2625 }
2626 }
2627
2628 }
2629
2630 return 1;
2631
2632}
2633
Remi Tricot-Le Bretonbf971212020-10-27 11:55:57 +01002634
2635/*
2636 * boolean, returns true if response was built out of a cache entry.
2637 */
2638static int
2639smp_fetch_res_cache_hit(const struct arg *args, struct sample *smp,
2640 const char *kw, void *private)
2641{
2642 smp->data.type = SMP_T_BOOL;
2643 smp->data.u.sint = (smp->strm ? (smp->strm->target == &http_cache_applet.obj_type) : 0);
2644
2645 return 1;
2646}
2647
2648/*
2649 * string, returns cache name (if response came from a cache).
2650 */
2651static int
2652smp_fetch_res_cache_name(const struct arg *args, struct sample *smp,
2653 const char *kw, void *private)
2654{
2655 struct appctx *appctx = NULL;
2656
2657 struct cache_flt_conf *cconf = NULL;
2658 struct cache *cache = NULL;
2659
2660 if (!smp->strm || smp->strm->target != &http_cache_applet.obj_type)
2661 return 0;
2662
2663 /* Get appctx from the stream_interface. */
2664 appctx = si_appctx(&smp->strm->si[1]);
2665 if (appctx && appctx->rule) {
2666 cconf = appctx->rule->arg.act.p[0];
2667 if (cconf) {
2668 cache = cconf->c.cache;
2669
2670 smp->data.type = SMP_T_STR;
2671 smp->flags = SMP_F_CONST;
2672 smp->data.u.str.area = cache->id;
2673 smp->data.u.str.data = strlen(cache->id);
2674 return 1;
2675 }
2676 }
2677
2678 return 0;
2679}
2680
Christopher Faulet99a17a22018-12-11 09:18:27 +01002681/* Declare the filter parser for "cache" keyword */
2682static struct flt_kw_list filter_kws = { "CACHE", { }, {
2683 { "cache", parse_cache_flt, NULL },
2684 { NULL, NULL, NULL },
2685 }
2686};
2687
2688INITCALL1(STG_REGISTER, flt_register_keywords, &filter_kws);
2689
William Lallemand1f49a362017-11-21 20:01:26 +01002690static struct cli_kw_list cli_kws = {{},{
Willy Tarreaub205bfd2021-05-07 11:38:37 +02002691 { { "show", "cache", NULL }, "show cache : show cache status", cli_parse_show_cache, cli_io_handler_show_cache, NULL, NULL },
William Lallemande899af82017-11-22 16:41:26 +01002692 {{},}
William Lallemand1f49a362017-11-21 20:01:26 +01002693}};
2694
Willy Tarreau0108d902018-11-25 19:14:37 +01002695INITCALL1(STG_REGISTER, cli_register_kw, &cli_kws);
William Lallemand1f49a362017-11-21 20:01:26 +01002696
William Lallemand41db4602017-10-30 11:15:51 +01002697static struct action_kw_list http_res_actions = {
2698 .kw = {
2699 { "cache-store", parse_cache_store },
2700 { NULL, NULL }
2701 }
2702};
2703
Willy Tarreau0108d902018-11-25 19:14:37 +01002704INITCALL1(STG_REGISTER, http_res_keywords_register, &http_res_actions);
2705
William Lallemand41db4602017-10-30 11:15:51 +01002706static struct action_kw_list http_req_actions = {
2707 .kw = {
2708 { "cache-use", parse_cache_use },
2709 { NULL, NULL }
2710 }
2711};
2712
Willy Tarreau0108d902018-11-25 19:14:37 +01002713INITCALL1(STG_REGISTER, http_req_keywords_register, &http_req_actions);
2714
Willy Tarreau2231b632019-03-29 18:26:52 +01002715struct applet http_cache_applet = {
William Lallemand41db4602017-10-30 11:15:51 +01002716 .obj_type = OBJ_TYPE_APPLET,
2717 .name = "<CACHE>", /* used for logging */
William Lallemand77c11972017-10-31 20:43:01 +01002718 .fct = http_cache_io_handler,
William Lallemandecb73b12017-11-24 14:33:55 +01002719 .release = http_cache_applet_release,
William Lallemand41db4602017-10-30 11:15:51 +01002720};
2721
Willy Tarreaue6552512018-11-26 11:33:13 +01002722/* config parsers for this section */
2723REGISTER_CONFIG_SECTION("cache", cfg_parse_cache, cfg_post_parse_section_cache);
William Lallemandd1d1e222019-08-28 15:22:49 +02002724REGISTER_POST_CHECK(post_check_cache);
Remi Tricot-Le Bretonbf971212020-10-27 11:55:57 +01002725
2726
2727/* Note: must not be declared <const> as its list will be overwritten */
2728static struct sample_fetch_kw_list sample_fetch_keywords = {ILH, {
2729 { "res.cache_hit", smp_fetch_res_cache_hit, 0, NULL, SMP_T_BOOL, SMP_USE_HRSHP, SMP_VAL_RESPONSE },
2730 { "res.cache_name", smp_fetch_res_cache_name, 0, NULL, SMP_T_STR, SMP_USE_HRSHP, SMP_VAL_RESPONSE },
2731 { /* END */ },
2732 }
2733};
2734
2735INITCALL1(STG_REGISTER, sample_register_fetches, &sample_fetch_keywords);