blob: 0c6640e9ba8eacb3d251e93525338f5893483cb5 [file] [log] [blame]
Willy Tarreaubaaee002006-06-26 02:48:02 +02001/*
2 * Proxy variables and functions.
3 *
Willy Tarreau3a7d2072009-03-05 23:48:25 +01004 * Copyright 2000-2009 Willy Tarreau <w@1wt.eu>
Willy Tarreaubaaee002006-06-26 02:48:02 +02005 *
6 * This program is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU General Public License
8 * as published by the Free Software Foundation; either version
9 * 2 of the License, or (at your option) any later version.
10 *
11 */
12
13#include <fcntl.h>
14#include <unistd.h>
Willy Tarreauc8f24f82007-11-30 18:38:35 +010015#include <string.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020016#include <sys/types.h>
17#include <sys/socket.h>
18#include <sys/stat.h>
19
Willy Tarreau2dd0d472006-06-29 17:53:05 +020020#include <common/defaults.h>
Willy Tarreau9de1bbd2008-07-09 20:34:27 +020021#include <common/cfgparse.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020022#include <common/compat.h>
Willy Tarreaue3ba5f02006-06-29 18:54:54 +020023#include <common/config.h>
Willy Tarreaud740bab2007-10-28 11:14:07 +010024#include <common/errors.h>
Willy Tarreau4d2d0982007-05-14 00:39:29 +020025#include <common/memory.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020026#include <common/time.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020027
28#include <types/global.h>
Emeric Brun5a8c0a92010-09-23 18:44:36 +020029#include <types/peers.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020030
Alexandre Cassen87ea5482007-10-11 20:48:58 +020031#include <proto/backend.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020032#include <proto/fd.h>
Willy Tarreau51aecc72009-07-12 09:47:04 +020033#include <proto/hdr_idx.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020034#include <proto/log.h>
Willy Tarreaue6b98942007-10-29 01:09:36 +010035#include <proto/protocols.h>
36#include <proto/proto_tcp.h>
Willy Tarreau39e4f622010-05-31 17:01:36 +020037#include <proto/proto_http.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020038#include <proto/proxy.h>
Willy Tarreaud0807c32010-08-27 18:26:11 +020039#include <proto/signal.h>
Emeric Brun5a8c0a92010-09-23 18:44:36 +020040#include <proto/task.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020041
42
Willy Tarreaue6b98942007-10-29 01:09:36 +010043int listeners; /* # of proxy listeners, set by cfgparse, unset by maintain_proxies */
Willy Tarreaubaaee002006-06-26 02:48:02 +020044struct proxy *proxy = NULL; /* list of all existing proxies */
Willy Tarreau53fb4ae2009-10-04 23:04:08 +020045struct eb_root used_proxy_id = EB_ROOT; /* list of proxy IDs in use */
Willy Tarreau10479e42010-12-12 14:00:34 +010046unsigned int error_snapshot_id = 0; /* global ID assigned to each error then incremented */
Willy Tarreaubaaee002006-06-26 02:48:02 +020047
Willy Tarreau977b8e42006-12-29 14:19:17 +010048/*
Willy Tarreau816eb542007-11-04 07:04:43 +010049 * This function returns a string containing a name describing capabilities to
50 * report comprehensible error messages. Specifically, it will return the words
51 * "frontend", "backend", "ruleset" when appropriate, or "proxy" for all other
52 * cases including the proxies declared in "listen" mode.
Willy Tarreau977b8e42006-12-29 14:19:17 +010053 */
Willy Tarreau816eb542007-11-04 07:04:43 +010054const char *proxy_cap_str(int cap)
Willy Tarreau977b8e42006-12-29 14:19:17 +010055{
Willy Tarreau816eb542007-11-04 07:04:43 +010056 if ((cap & PR_CAP_LISTEN) != PR_CAP_LISTEN) {
57 if (cap & PR_CAP_FE)
58 return "frontend";
59 else if (cap & PR_CAP_BE)
60 return "backend";
61 else if (cap & PR_CAP_RS)
62 return "ruleset";
63 }
64 return "proxy";
Willy Tarreau977b8e42006-12-29 14:19:17 +010065}
66
Krzysztof Piotr Oledzki6eb730d2007-11-03 23:41:58 +010067/*
68 * This function returns a string containing the mode of the proxy in a format
69 * suitable for error messages.
70 */
Krzysztof Piotr Oledzki6eb730d2007-11-03 23:41:58 +010071const char *proxy_mode_str(int mode) {
72
73 if (mode == PR_MODE_TCP)
74 return "tcp";
75 else if (mode == PR_MODE_HTTP)
76 return "http";
77 else if (mode == PR_MODE_HEALTH)
78 return "health";
79 else
80 return "unknown";
81}
82
Willy Tarreauf3950172009-10-10 18:35:51 +020083/*
84 * This function scans the list of backends and servers to retrieve the first
85 * backend and the first server with the given names, and sets them in both
86 * parameters. It returns zero if either is not found, or non-zero and sets
87 * the ones it did not found to NULL. If a NULL pointer is passed for the
88 * backend, only the pointer to the server will be updated.
89 */
90int get_backend_server(const char *bk_name, const char *sv_name,
91 struct proxy **bk, struct server **sv)
92{
93 struct proxy *p;
94 struct server *s;
Willy Tarreaucfeaa472009-10-10 22:33:08 +020095 int pid, sid;
Willy Tarreauf3950172009-10-10 18:35:51 +020096
97 *sv = NULL;
98
Willy Tarreaucfeaa472009-10-10 22:33:08 +020099 pid = 0;
100 if (*bk_name == '#')
101 pid = atoi(bk_name + 1);
102 sid = 0;
103 if (*sv_name == '#')
104 sid = atoi(sv_name + 1);
105
Willy Tarreauf3950172009-10-10 18:35:51 +0200106 for (p = proxy; p; p = p->next)
Willy Tarreaucfeaa472009-10-10 22:33:08 +0200107 if ((p->cap & PR_CAP_BE) &&
108 ((pid && p->uuid == pid) ||
109 (!pid && strcmp(p->id, bk_name) == 0)))
Willy Tarreauf3950172009-10-10 18:35:51 +0200110 break;
111 if (bk)
112 *bk = p;
113 if (!p)
114 return 0;
115
116 for (s = p->srv; s; s = s->next)
Willy Tarreaucfeaa472009-10-10 22:33:08 +0200117 if ((sid && s->puid == sid) ||
118 (!sid && strcmp(s->id, sv_name) == 0))
Willy Tarreauf3950172009-10-10 18:35:51 +0200119 break;
120 *sv = s;
121 if (!s)
122 return 0;
123 return 1;
124}
125
Willy Tarreaue219db72007-12-03 01:30:13 +0100126/* This function parses a "timeout" statement in a proxy section. It returns
127 * -1 if there is any error, 1 for a warning, otherwise zero. If it does not
128 * return zero, it may write an error message into the <err> buffer, for at
129 * most <errlen> bytes, trailing zero included. The trailing '\n' must not
130 * be written. The function must be called with <args> pointing to the first
Willy Tarreau9de1bbd2008-07-09 20:34:27 +0200131 * command line word, with <proxy> pointing to the proxy being parsed, and
Willy Tarreaue219db72007-12-03 01:30:13 +0100132 * <defpx> to the default proxy or NULL. As a special case for compatibility
133 * with older configs, it also accepts "{cli|srv|con}timeout" in args[0].
134 */
Willy Tarreau9de1bbd2008-07-09 20:34:27 +0200135static int proxy_parse_timeout(char **args, int section, struct proxy *proxy,
136 struct proxy *defpx, char *err, int errlen)
Willy Tarreaue219db72007-12-03 01:30:13 +0100137{
138 unsigned timeout;
139 int retval, cap;
140 const char *res, *name;
Willy Tarreau0c303ee2008-07-07 00:09:58 +0200141 int *tv = NULL;
142 int *td = NULL;
Willy Tarreaue219db72007-12-03 01:30:13 +0100143
144 retval = 0;
Willy Tarreau9de1bbd2008-07-09 20:34:27 +0200145
146 /* simply skip "timeout" but remain compatible with old form */
147 if (strcmp(args[0], "timeout") == 0)
148 args++;
149
Willy Tarreaue219db72007-12-03 01:30:13 +0100150 name = args[0];
151 if (!strcmp(args[0], "client") || !strcmp(args[0], "clitimeout")) {
152 name = "client";
Willy Tarreaud7c30f92007-12-03 01:38:36 +0100153 tv = &proxy->timeout.client;
154 td = &defpx->timeout.client;
Willy Tarreaue219db72007-12-03 01:30:13 +0100155 cap = PR_CAP_FE;
156 } else if (!strcmp(args[0], "tarpit")) {
157 tv = &proxy->timeout.tarpit;
158 td = &defpx->timeout.tarpit;
Willy Tarreau51c9bde2008-01-06 13:40:03 +0100159 cap = PR_CAP_FE | PR_CAP_BE;
Willy Tarreaub16a5742010-01-10 14:46:16 +0100160 } else if (!strcmp(args[0], "http-keep-alive")) {
161 tv = &proxy->timeout.httpka;
162 td = &defpx->timeout.httpka;
163 cap = PR_CAP_FE | PR_CAP_BE;
Willy Tarreau036fae02008-01-06 13:24:40 +0100164 } else if (!strcmp(args[0], "http-request")) {
165 tv = &proxy->timeout.httpreq;
166 td = &defpx->timeout.httpreq;
Willy Tarreaucd7afc02009-07-12 10:03:17 +0200167 cap = PR_CAP_FE | PR_CAP_BE;
Willy Tarreaue219db72007-12-03 01:30:13 +0100168 } else if (!strcmp(args[0], "server") || !strcmp(args[0], "srvtimeout")) {
169 name = "server";
Willy Tarreaud7c30f92007-12-03 01:38:36 +0100170 tv = &proxy->timeout.server;
171 td = &defpx->timeout.server;
Willy Tarreaue219db72007-12-03 01:30:13 +0100172 cap = PR_CAP_BE;
173 } else if (!strcmp(args[0], "connect") || !strcmp(args[0], "contimeout")) {
174 name = "connect";
Willy Tarreaud7c30f92007-12-03 01:38:36 +0100175 tv = &proxy->timeout.connect;
176 td = &defpx->timeout.connect;
Willy Tarreaue219db72007-12-03 01:30:13 +0100177 cap = PR_CAP_BE;
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +0100178 } else if (!strcmp(args[0], "check")) {
179 tv = &proxy->timeout.check;
180 td = &defpx->timeout.check;
181 cap = PR_CAP_BE;
Willy Tarreaue219db72007-12-03 01:30:13 +0100182 } else if (!strcmp(args[0], "queue")) {
183 tv = &proxy->timeout.queue;
184 td = &defpx->timeout.queue;
185 cap = PR_CAP_BE;
186 } else {
Willy Tarreau036fae02008-01-06 13:24:40 +0100187 snprintf(err, errlen,
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +0100188 "timeout '%s': must be 'client', 'server', 'connect', 'check', "
Willy Tarreau76bfc952010-01-10 17:48:11 +0100189 "'queue', 'http-keep-alive', 'http-request' or 'tarpit'",
Willy Tarreaue219db72007-12-03 01:30:13 +0100190 args[0]);
191 return -1;
192 }
193
194 if (*args[1] == 0) {
195 snprintf(err, errlen, "%s timeout expects an integer value (in milliseconds)", name);
196 return -1;
197 }
198
199 res = parse_time_err(args[1], &timeout, TIME_UNIT_MS);
200 if (res) {
Willy Tarreaubb9251e2009-03-06 08:05:40 +0100201 snprintf(err, errlen, "unexpected character '%c' in %s timeout", *res, name);
Willy Tarreaue219db72007-12-03 01:30:13 +0100202 return -1;
203 }
204
205 if (!(proxy->cap & cap)) {
206 snprintf(err, errlen, "%s timeout will be ignored because %s '%s' has no %s capability",
207 name, proxy_type_str(proxy), proxy->id,
208 (cap & PR_CAP_BE) ? "backend" : "frontend");
209 retval = 1;
210 }
Willy Tarreau0c303ee2008-07-07 00:09:58 +0200211 else if (defpx && *tv != *td) {
Willy Tarreaue219db72007-12-03 01:30:13 +0100212 snprintf(err, errlen, "overwriting %s timeout which was already specified", name);
213 retval = 1;
214 }
215
Willy Tarreau0c303ee2008-07-07 00:09:58 +0200216 *tv = MS_TO_TICKS(timeout);
Willy Tarreaue219db72007-12-03 01:30:13 +0100217 return retval;
218}
219
Willy Tarreau3a7d2072009-03-05 23:48:25 +0100220/* This function parses a "rate-limit" statement in a proxy section. It returns
221 * -1 if there is any error, 1 for a warning, otherwise zero. If it does not
222 * return zero, it may write an error message into the <err> buffer, for at
223 * most <errlen> bytes, trailing zero included. The trailing '\n' must not
224 * be written. The function must be called with <args> pointing to the first
225 * command line word, with <proxy> pointing to the proxy being parsed, and
226 * <defpx> to the default proxy or NULL.
227 */
228static int proxy_parse_rate_limit(char **args, int section, struct proxy *proxy,
229 struct proxy *defpx, char *err, int errlen)
230{
231 int retval, cap;
232 char *res, *name;
233 unsigned int *tv = NULL;
234 unsigned int *td = NULL;
235 unsigned int val;
236
237 retval = 0;
238
239 /* simply skip "rate-limit" */
240 if (strcmp(args[0], "rate-limit") == 0)
241 args++;
242
243 name = args[0];
244 if (!strcmp(args[0], "sessions")) {
245 name = "sessions";
Willy Tarreau13a34bd2009-05-10 18:52:49 +0200246 tv = &proxy->fe_sps_lim;
247 td = &defpx->fe_sps_lim;
Willy Tarreau3a7d2072009-03-05 23:48:25 +0100248 cap = PR_CAP_FE;
249 } else {
250 snprintf(err, errlen,
251 "%s '%s': must be 'sessions'",
252 "rate-limit", args[0]);
253 return -1;
254 }
255
256 if (*args[1] == 0) {
257 snprintf(err, errlen, "%s %s expects expects an integer value (in sessions/second)", "rate-limit", name);
258 return -1;
259 }
260
261 val = strtoul(args[1], &res, 0);
262 if (*res) {
263 snprintf(err, errlen, "%s %s: unexpected character '%c' in integer value '%s'", "rate-limit", name, *res, args[1]);
264 return -1;
265 }
266
267 if (!(proxy->cap & cap)) {
268 snprintf(err, errlen, "%s %s will be ignored because %s '%s' has no %s capability",
269 "rate-limit", name, proxy_type_str(proxy), proxy->id,
270 (cap & PR_CAP_BE) ? "backend" : "frontend");
271 retval = 1;
272 }
273 else if (defpx && *tv != *td) {
274 snprintf(err, errlen, "overwriting %s %s which was already specified", "rate-limit", name);
275 retval = 1;
276 }
277
278 *tv = val;
279 return retval;
280}
281
Krzysztof Piotr Oledzki6eb730d2007-11-03 23:41:58 +0100282/*
283 * This function finds a proxy with matching name, mode and with satisfying
284 * capabilities. It also checks if there are more matching proxies with
285 * requested name as this often leads into unexpected situations.
286 */
287
Alex Williams96532db2009-11-01 21:27:13 -0500288struct proxy *findproxy_mode(const char *name, int mode, int cap) {
Krzysztof Piotr Oledzki6eb730d2007-11-03 23:41:58 +0100289
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100290 struct proxy *curproxy, *target = NULL;
Krzysztof Piotr Oledzki6eb730d2007-11-03 23:41:58 +0100291
292 for (curproxy = proxy; curproxy; curproxy = curproxy->next) {
293 if ((curproxy->cap & cap)!=cap || strcmp(curproxy->id, name))
294 continue;
295
Willy Tarreau51aecc72009-07-12 09:47:04 +0200296 if (curproxy->mode != mode &&
297 !(curproxy->mode == PR_MODE_HTTP && mode == PR_MODE_TCP)) {
Krzysztof Piotr Oledzki6eb730d2007-11-03 23:41:58 +0100298 Alert("Unable to use proxy '%s' with wrong mode, required: %s, has: %s.\n",
299 name, proxy_mode_str(mode), proxy_mode_str(curproxy->mode));
300 Alert("You may want to use 'mode %s'.\n", proxy_mode_str(mode));
301 return NULL;
302 }
303
304 if (!target) {
305 target = curproxy;
306 continue;
307 }
308
Willy Tarreau816eb542007-11-04 07:04:43 +0100309 Alert("Refusing to use duplicated proxy '%s' with overlapping capabilities: %s/%s!\n",
Krzysztof Piotr Oledzki6eb730d2007-11-03 23:41:58 +0100310 name, proxy_type_str(curproxy), proxy_type_str(target));
311
312 return NULL;
313 }
314
315 return target;
316}
Willy Tarreaubaaee002006-06-26 02:48:02 +0200317
Alex Williams96532db2009-11-01 21:27:13 -0500318struct proxy *findproxy(const char *name, int cap) {
319
320 struct proxy *curproxy, *target = NULL;
321
322 for (curproxy = proxy; curproxy; curproxy = curproxy->next) {
323 if ((curproxy->cap & cap)!=cap || strcmp(curproxy->id, name))
324 continue;
325
326 if (!target) {
327 target = curproxy;
328 continue;
329 }
330
331 return NULL;
332 }
333
334 return target;
335}
336
Willy Tarreaubaaee002006-06-26 02:48:02 +0200337/*
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100338 * This function finds a server with matching name within selected proxy.
339 * It also checks if there are more matching servers with
340 * requested name as this often leads into unexpected situations.
341 */
342
343struct server *findserver(const struct proxy *px, const char *name) {
344
345 struct server *cursrv, *target = NULL;
346
347 if (!px)
348 return NULL;
349
350 for (cursrv = px->srv; cursrv; cursrv = cursrv->next) {
351 if (strcmp(cursrv->id, name))
352 continue;
353
354 if (!target) {
355 target = cursrv;
356 continue;
357 }
358
359 Alert("Refusing to use duplicated server '%s' fould in proxy: %s!\n",
360 name, px->id);
361
362 return NULL;
363 }
364
365 return target;
366}
367
Willy Tarreauff01a212009-03-15 13:46:16 +0100368/* This function checks that the designated proxy has no http directives
369 * enabled. It will output a warning if there are, and will fix some of them.
370 * It returns the number of fatal errors encountered. This should be called
371 * at the end of the configuration parsing if the proxy is not in http mode.
372 * The <file> argument is used to construct the error message.
373 */
Willy Tarreau915e1eb2009-06-22 15:48:36 +0200374int proxy_cfg_ensure_no_http(struct proxy *curproxy)
Willy Tarreauff01a212009-03-15 13:46:16 +0100375{
376 if (curproxy->cookie_name != NULL) {
Willy Tarreau915e1eb2009-06-22 15:48:36 +0200377 Warning("config : cookie will be ignored for %s '%s' (needs 'mode http').\n",
378 proxy_type_str(curproxy), curproxy->id);
Willy Tarreauff01a212009-03-15 13:46:16 +0100379 }
380 if (curproxy->rsp_exp != NULL) {
Willy Tarreau915e1eb2009-06-22 15:48:36 +0200381 Warning("config : server regular expressions will be ignored for %s '%s' (needs 'mode http').\n",
382 proxy_type_str(curproxy), curproxy->id);
Willy Tarreauff01a212009-03-15 13:46:16 +0100383 }
384 if (curproxy->req_exp != NULL) {
Willy Tarreau915e1eb2009-06-22 15:48:36 +0200385 Warning("config : client regular expressions will be ignored for %s '%s' (needs 'mode http').\n",
386 proxy_type_str(curproxy), curproxy->id);
Willy Tarreauff01a212009-03-15 13:46:16 +0100387 }
388 if (curproxy->monitor_uri != NULL) {
Willy Tarreau915e1eb2009-06-22 15:48:36 +0200389 Warning("config : monitor-uri will be ignored for %s '%s' (needs 'mode http').\n",
390 proxy_type_str(curproxy), curproxy->id);
Willy Tarreauff01a212009-03-15 13:46:16 +0100391 }
Willy Tarreauf3e49f92009-10-03 12:21:20 +0200392 if (curproxy->lbprm.algo & BE_LB_NEED_HTTP) {
Willy Tarreauff01a212009-03-15 13:46:16 +0100393 curproxy->lbprm.algo &= ~BE_LB_ALGO;
394 curproxy->lbprm.algo |= BE_LB_ALGO_RR;
Willy Tarreau915e1eb2009-06-22 15:48:36 +0200395 Warning("config : Layer 7 hash not possible for %s '%s' (needs 'mode http'). Falling back to round robin.\n",
396 proxy_type_str(curproxy), curproxy->id);
Willy Tarreauff01a212009-03-15 13:46:16 +0100397 }
Willy Tarreau17804162009-11-09 21:27:51 +0100398 if (curproxy->to_log & (LW_REQ | LW_RESP)) {
399 curproxy->to_log &= ~(LW_REQ | LW_RESP);
400 Warning("config : 'option httplog' not usable with %s '%s' (needs 'mode http'). Falling back to 'option tcplog'.\n",
401 proxy_type_str(curproxy), curproxy->id);
402 }
Willy Tarreauff01a212009-03-15 13:46:16 +0100403 return 0;
404}
405
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100406/*
Willy Tarreau2ff76222007-04-09 19:29:56 +0200407 * This function creates all proxy sockets. It should be done very early,
408 * typically before privileges are dropped. The sockets will be registered
409 * but not added to any fd_set, in order not to loose them across the fork().
410 * The proxies also start in IDLE state, meaning that it will be
411 * maintain_proxies that will finally complete their loading.
412 *
413 * Its return value is composed from ERR_NONE, ERR_RETRYABLE and ERR_FATAL.
414 * Retryable errors will only be printed if <verbose> is not zero.
Willy Tarreaubaaee002006-06-26 02:48:02 +0200415 */
416int start_proxies(int verbose)
417{
418 struct proxy *curproxy;
419 struct listener *listener;
Willy Tarreaue6b98942007-10-29 01:09:36 +0100420 int lerr, err = ERR_NONE;
421 int pxerr;
422 char msg[100];
Willy Tarreaubaaee002006-06-26 02:48:02 +0200423
424 for (curproxy = proxy; curproxy != NULL; curproxy = curproxy->next) {
425 if (curproxy->state != PR_STNEW)
426 continue; /* already initialized */
427
428 pxerr = 0;
429 for (listener = curproxy->listen; listener != NULL; listener = listener->next) {
Willy Tarreaue6b98942007-10-29 01:09:36 +0100430 if (listener->state != LI_ASSIGNED)
431 continue; /* already started */
Willy Tarreaubaaee002006-06-26 02:48:02 +0200432
Emeric Bruncf20bf12010-10-22 16:06:11 +0200433 lerr = listener->proto->bind(listener, msg, sizeof(msg));
Willy Tarreaubaaee002006-06-26 02:48:02 +0200434
Willy Tarreaue6b98942007-10-29 01:09:36 +0100435 /* errors are reported if <verbose> is set or if they are fatal */
436 if (verbose || (lerr & (ERR_FATAL | ERR_ABORT))) {
437 if (lerr & ERR_ALERT)
438 Alert("Starting %s %s: %s\n",
439 proxy_type_str(curproxy), curproxy->id, msg);
440 else if (lerr & ERR_WARN)
441 Warning("Starting %s %s: %s\n",
442 proxy_type_str(curproxy), curproxy->id, msg);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200443 }
444
Willy Tarreaue6b98942007-10-29 01:09:36 +0100445 err |= lerr;
446 if (lerr & (ERR_ABORT | ERR_FATAL)) {
Willy Tarreaubaaee002006-06-26 02:48:02 +0200447 pxerr |= 1;
Willy Tarreaue6b98942007-10-29 01:09:36 +0100448 break;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200449 }
Willy Tarreaue6b98942007-10-29 01:09:36 +0100450 else if (lerr & ERR_CODE) {
Willy Tarreaubaaee002006-06-26 02:48:02 +0200451 pxerr |= 1;
452 continue;
453 }
Willy Tarreaubaaee002006-06-26 02:48:02 +0200454 }
455
456 if (!pxerr) {
Willy Tarreau2ff76222007-04-09 19:29:56 +0200457 curproxy->state = PR_STIDLE;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200458 send_log(curproxy, LOG_NOTICE, "Proxy %s started.\n", curproxy->id);
459 }
Willy Tarreaue6b98942007-10-29 01:09:36 +0100460
461 if (err & ERR_ABORT)
462 break;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200463 }
464
465 return err;
466}
467
468
469/*
470 * this function enables proxies when there are enough free sessions,
471 * or stops them when the table is full. It is designed to be called from the
Willy Tarreau58b458d2008-06-29 22:40:23 +0200472 * select_loop(). It adjusts the date of next expiration event during stop
473 * time if appropriate.
Willy Tarreaubaaee002006-06-26 02:48:02 +0200474 */
Willy Tarreau0c303ee2008-07-07 00:09:58 +0200475void maintain_proxies(int *next)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200476{
477 struct proxy *p;
478 struct listener *l;
Willy Tarreau79584222009-03-06 09:18:27 +0100479 unsigned int wait;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200480
481 p = proxy;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200482
483 /* if there are enough free sessions, we'll activate proxies */
484 if (actconn < global.maxconn) {
Willy Tarreau3a7d2072009-03-05 23:48:25 +0100485 for (; p; p = p->next) {
486 /* check the various reasons we may find to block the frontend */
487 if (p->feconn >= p->maxconn)
488 goto do_block;
489
Willy Tarreau13a34bd2009-05-10 18:52:49 +0200490 if (p->fe_sps_lim &&
Willy Tarreaud9bbe172010-06-07 10:40:48 +0200491 (wait = next_event_delay(&p->fe_sess_per_sec, p->fe_sps_lim, 1))) {
Willy Tarreau3a7d2072009-03-05 23:48:25 +0100492 /* we're blocking because a limit was reached on the number of
493 * requests/s on the frontend. We want to re-check ASAP, which
Willy Tarreauefcbc6e2009-03-06 08:27:10 +0100494 * means in 1 ms before estimated expiration date, because the
495 * timer will have settled down. Note that we may already be in
496 * IDLE state here.
Willy Tarreau3a7d2072009-03-05 23:48:25 +0100497 */
Willy Tarreauefcbc6e2009-03-06 08:27:10 +0100498 *next = tick_first(*next, tick_add(now_ms, wait));
Willy Tarreau3a7d2072009-03-05 23:48:25 +0100499 goto do_block;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200500 }
Willy Tarreau3a7d2072009-03-05 23:48:25 +0100501
502 /* OK we have no reason to block, so let's unblock if we were blocking */
503 if (p->state == PR_STIDLE) {
504 for (l = p->listen; l != NULL; l = l->next)
505 enable_listener(l);
506 p->state = PR_STRUN;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200507 }
Willy Tarreau3a7d2072009-03-05 23:48:25 +0100508 continue;
509
510 do_block:
511 if (p->state == PR_STRUN) {
512 for (l = p->listen; l != NULL; l = l->next)
513 disable_listener(l);
514 p->state = PR_STIDLE;
515 }
Willy Tarreaubaaee002006-06-26 02:48:02 +0200516 }
517 }
518 else { /* block all proxies */
519 while (p) {
520 if (p->state == PR_STRUN) {
Willy Tarreaue6b98942007-10-29 01:09:36 +0100521 for (l = p->listen; l != NULL; l = l->next)
522 disable_listener(l);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200523 p->state = PR_STIDLE;
524 }
525 p = p->next;
526 }
527 }
528
529 if (stopping) {
Emeric Brun5a8c0a92010-09-23 18:44:36 +0200530 struct peers *prs;
531
Willy Tarreaubaaee002006-06-26 02:48:02 +0200532 p = proxy;
533 while (p) {
534 if (p->state != PR_STSTOPPED) {
535 int t;
Willy Tarreau0c303ee2008-07-07 00:09:58 +0200536 t = tick_remain(now_ms, p->stop_time);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200537 if (t == 0) {
Willy Tarreau11046142010-03-04 23:07:28 +0100538 Warning("Proxy %s stopped (FE: %lld conns, BE: %lld conns).\n",
539 p->id, p->counters.cum_feconn, p->counters.cum_beconn);
540 send_log(p, LOG_WARNING, "Proxy %s stopped (FE: %lld conns, BE: %lld conns).\n",
541 p->id, p->counters.cum_feconn, p->counters.cum_beconn);
Willy Tarreauda250db2008-10-12 12:07:48 +0200542 stop_proxy(p);
Willy Tarreau4d2d0982007-05-14 00:39:29 +0200543 /* try to free more memory */
544 pool_gc2();
Willy Tarreaubaaee002006-06-26 02:48:02 +0200545 }
546 else {
Willy Tarreau0c303ee2008-07-07 00:09:58 +0200547 *next = tick_first(*next, p->stop_time);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200548 }
549 }
550 p = p->next;
551 }
Emeric Brun5a8c0a92010-09-23 18:44:36 +0200552
553 prs = peers;
554 while (prs) {
555 stop_proxy((struct proxy *)prs->peers_fe);
556 prs = prs->next;
557 }
558
Willy Tarreaubaaee002006-06-26 02:48:02 +0200559 }
Willy Tarreaud825eef2007-05-12 22:35:00 +0200560 return;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200561}
562
563
564/*
565 * this function disables health-check servers so that the process will quickly be ignored
566 * by load balancers. Note that if a proxy was already in the PAUSED state, then its grace
567 * time will not be used since it would already not listen anymore to the socket.
568 */
569void soft_stop(void)
570{
571 struct proxy *p;
572
573 stopping = 1;
574 p = proxy;
Willy Tarreaub0b37bc2008-06-23 14:00:57 +0200575 tv_update_date(0,1); /* else, the old time before select will be used */
Willy Tarreaubaaee002006-06-26 02:48:02 +0200576 while (p) {
577 if (p->state != PR_STSTOPPED) {
Willy Tarreauf8fbcef2008-10-10 17:51:34 +0200578 Warning("Stopping %s %s in %d ms.\n", proxy_cap_str(p->cap), p->id, p->grace);
579 send_log(p, LOG_WARNING, "Stopping %s %s in %d ms.\n", proxy_cap_str(p->cap), p->id, p->grace);
Willy Tarreau0c303ee2008-07-07 00:09:58 +0200580 p->stop_time = tick_add(now_ms, p->grace);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200581 }
Emeric Brun5a8c0a92010-09-23 18:44:36 +0200582 if (p->table.size && p->table.sync_task)
583 task_wakeup(p->table.sync_task, TASK_WOKEN_MSG);
584
Willy Tarreaubaaee002006-06-26 02:48:02 +0200585 p = p->next;
586 }
Willy Tarreaud0807c32010-08-27 18:26:11 +0200587 /* signal zero is used to broadcast the "stopping" event */
588 signal_handler(0);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200589}
590
591
592/*
593 * Linux unbinds the listen socket after a SHUT_RD, and ignores SHUT_WR.
594 * Solaris refuses either shutdown().
595 * OpenBSD ignores SHUT_RD but closes upon SHUT_WR and refuses to rebind.
596 * So a common validation path involves SHUT_WR && listen && SHUT_RD.
597 * If disabling at least one listener returns an error, then the proxy
598 * state is set to PR_STERROR because we don't know how to resume from this.
599 */
600void pause_proxy(struct proxy *p)
601{
602 struct listener *l;
603 for (l = p->listen; l != NULL; l = l->next) {
604 if (shutdown(l->fd, SHUT_WR) == 0 &&
Willy Tarreauc73ce2b2008-01-06 10:55:10 +0100605 listen(l->fd, p->backlog ? p->backlog : p->maxconn) == 0 &&
Willy Tarreaubaaee002006-06-26 02:48:02 +0200606 shutdown(l->fd, SHUT_RD) == 0) {
Willy Tarreauf161a342007-04-08 16:59:42 +0200607 EV_FD_CLR(l->fd, DIR_RD);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200608 if (p->state != PR_STERROR)
609 p->state = PR_STPAUSED;
610 }
611 else
612 p->state = PR_STERROR;
613 }
Willy Tarreauda250db2008-10-12 12:07:48 +0200614}
615
616
617/*
618 * This function completely stops a proxy and releases its listeners. It has
619 * to be called when going down in order to release the ports so that another
620 * process may bind to them. It must also be called on disabled proxies at the
621 * end of start-up. When all listeners are closed, the proxy is set to the
622 * PR_STSTOPPED state.
623 */
624void stop_proxy(struct proxy *p)
625{
626 struct listener *l;
627
628 for (l = p->listen; l != NULL; l = l->next) {
629 unbind_listener(l);
630 if (l->state >= LI_ASSIGNED) {
631 delete_listener(l);
632 listeners--;
Willy Tarreauaf7ad002010-08-31 15:39:26 +0200633 jobs--;
Willy Tarreauda250db2008-10-12 12:07:48 +0200634 }
635 }
636 p->state = PR_STSTOPPED;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200637}
638
639/*
640 * This function temporarily disables listening so that another new instance
641 * can start listening. It is designed to be called upon reception of a
642 * SIGTTOU, after which either a SIGUSR1 can be sent to completely stop
643 * the proxy, or a SIGTTIN can be sent to listen again.
644 */
645void pause_proxies(void)
646{
647 int err;
648 struct proxy *p;
Emeric Brun5a8c0a92010-09-23 18:44:36 +0200649 struct peers *prs;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200650
651 err = 0;
652 p = proxy;
Willy Tarreaub0b37bc2008-06-23 14:00:57 +0200653 tv_update_date(0,1); /* else, the old time before select will be used */
Willy Tarreaubaaee002006-06-26 02:48:02 +0200654 while (p) {
Willy Tarreauf8fbcef2008-10-10 17:51:34 +0200655 if (p->cap & PR_CAP_FE &&
656 p->state != PR_STERROR &&
Willy Tarreaubaaee002006-06-26 02:48:02 +0200657 p->state != PR_STSTOPPED &&
658 p->state != PR_STPAUSED) {
Willy Tarreauf8fbcef2008-10-10 17:51:34 +0200659 Warning("Pausing %s %s.\n", proxy_cap_str(p->cap), p->id);
660 send_log(p, LOG_WARNING, "Pausing %s %s.\n", proxy_cap_str(p->cap), p->id);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200661 pause_proxy(p);
662 if (p->state != PR_STPAUSED) {
663 err |= 1;
Willy Tarreauf8fbcef2008-10-10 17:51:34 +0200664 Warning("%s %s failed to enter pause mode.\n", proxy_cap_str(p->cap), p->id);
665 send_log(p, LOG_WARNING, "%s %s failed to enter pause mode.\n", proxy_cap_str(p->cap), p->id);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200666 }
667 }
668 p = p->next;
669 }
Emeric Brun5a8c0a92010-09-23 18:44:36 +0200670
671 prs = peers;
672 while (prs) {
673 p = prs->peers_fe;
674 if (p && (p->cap & PR_CAP_FE &&
675 p->state != PR_STERROR &&
676 p->state != PR_STSTOPPED &&
677 p->state != PR_STPAUSED)) {
678 Warning("Pausing %s %s.\n", proxy_cap_str(p->cap), p->id);
679 send_log(p, LOG_WARNING, "Pausing %s %s.\n", proxy_cap_str(p->cap), p->id);
680 pause_proxy(p);
681 if (p->state != PR_STPAUSED) {
682 err |= 1;
683 Warning("%s %s failed to enter pause mode.\n", proxy_cap_str(p->cap), p->id);
684 send_log(p, LOG_WARNING, "%s %s failed to enter pause mode.\n", proxy_cap_str(p->cap), p->id);
685 }
686 }
687 prs = prs->next;
688 }
689
Willy Tarreaubaaee002006-06-26 02:48:02 +0200690 if (err) {
691 Warning("Some proxies refused to pause, performing soft stop now.\n");
692 send_log(p, LOG_WARNING, "Some proxies refused to pause, performing soft stop now.\n");
693 soft_stop();
694 }
695}
696
697
698/*
699 * This function reactivates listening. This can be used after a call to
700 * sig_pause(), for example when a new instance has failed starting up.
701 * It is designed to be called upon reception of a SIGTTIN.
702 */
703void listen_proxies(void)
704{
705 struct proxy *p;
706 struct listener *l;
707
708 p = proxy;
Willy Tarreaub0b37bc2008-06-23 14:00:57 +0200709 tv_update_date(0,1); /* else, the old time before select will be used */
Willy Tarreaubaaee002006-06-26 02:48:02 +0200710 while (p) {
711 if (p->state == PR_STPAUSED) {
Willy Tarreauf8fbcef2008-10-10 17:51:34 +0200712 Warning("Enabling %s %s.\n", proxy_cap_str(p->cap), p->id);
713 send_log(p, LOG_WARNING, "Enabling %s %s.\n", proxy_cap_str(p->cap), p->id);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200714
715 for (l = p->listen; l != NULL; l = l->next) {
Willy Tarreauc73ce2b2008-01-06 10:55:10 +0100716 if (listen(l->fd, p->backlog ? p->backlog : p->maxconn) == 0) {
Willy Tarreauf1221aa2006-12-17 22:14:12 +0100717 if (actconn < global.maxconn && p->feconn < p->maxconn) {
Willy Tarreauf161a342007-04-08 16:59:42 +0200718 EV_FD_SET(l->fd, DIR_RD);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200719 p->state = PR_STRUN;
720 }
721 else
722 p->state = PR_STIDLE;
723 } else {
724 int port;
725
Emeric Brun0aaccf82010-10-22 17:42:55 +0200726 if (l->addr.ss_family == AF_INET6) {
Willy Tarreaubaaee002006-06-26 02:48:02 +0200727 port = ntohs(((struct sockaddr_in6 *)(&l->addr))->sin6_port);
Emeric Brun0aaccf82010-10-22 17:42:55 +0200728 Warning("Port %d busy while trying to enable %s %s.\n",
729 port, proxy_cap_str(p->cap), p->id);
730 send_log(p, LOG_WARNING, "Port %d busy while trying to enable %s %s.\n",
731 port, proxy_cap_str(p->cap), p->id);
732 }
733 else if (l->addr.ss_family == AF_INET) {
Willy Tarreaubaaee002006-06-26 02:48:02 +0200734 port = ntohs(((struct sockaddr_in *)(&l->addr))->sin_port);
Emeric Brun0aaccf82010-10-22 17:42:55 +0200735 Warning("Port %d busy while trying to enable %s %s.\n",
736 port, proxy_cap_str(p->cap), p->id);
737 send_log(p, LOG_WARNING, "Port %d busy while trying to enable %s %s.\n",
738 port, proxy_cap_str(p->cap), p->id);
739 }
740 else {
741 Warning("Bind on socket %d busy while trying to enable %s %s.\n",
742 l->luid, proxy_cap_str(p->cap), p->id);
743 send_log(p, LOG_WARNING, "Bind on socket %d busy while trying to enable %s %s.\n",
744 l->luid, proxy_cap_str(p->cap), p->id);
745 }
Willy Tarreaubaaee002006-06-26 02:48:02 +0200746
Willy Tarreaubaaee002006-06-26 02:48:02 +0200747 /* Another port might have been enabled. Let's stop everything. */
748 pause_proxy(p);
749 break;
750 }
751 }
752 }
753 p = p->next;
754 }
755}
756
Willy Tarreau1d0dfb12009-07-07 15:10:31 +0200757/* Set current session's backend to <be>. Nothing is done if the
758 * session already had a backend assigned, which is indicated by
759 * s->flags & SN_BE_ASSIGNED.
760 * All flags, stats and counters which need be updated are updated.
Willy Tarreaubedb9ba2009-07-12 08:27:39 +0200761 * Returns 1 if done, 0 in case of internal error, eg: lack of resource.
Willy Tarreau1d0dfb12009-07-07 15:10:31 +0200762 */
Willy Tarreaubedb9ba2009-07-12 08:27:39 +0200763int session_set_backend(struct session *s, struct proxy *be)
Willy Tarreau1d0dfb12009-07-07 15:10:31 +0200764{
765 if (s->flags & SN_BE_ASSIGNED)
Willy Tarreaubedb9ba2009-07-12 08:27:39 +0200766 return 1;
Willy Tarreau1d0dfb12009-07-07 15:10:31 +0200767 s->be = be;
768 be->beconn++;
Krzysztof Piotr Oledzki052d4fd2009-10-04 14:52:57 +0200769 if (be->beconn > be->counters.beconn_max)
770 be->counters.beconn_max = be->beconn;
Willy Tarreau1d0dfb12009-07-07 15:10:31 +0200771 proxy_inc_be_ctr(be);
772
773 /* assign new parameters to the session from the new backend */
Willy Tarreauf27b5ea2009-10-03 22:01:18 +0200774 s->si[1].flags &= ~SI_FL_INDEP_STR;
775 if (be->options2 & PR_O2_INDEPSTR)
776 s->si[1].flags |= SI_FL_INDEP_STR;
777
Willy Tarreau1d0dfb12009-07-07 15:10:31 +0200778 if (be->options2 & PR_O2_RSPBUG_OK)
779 s->txn.rsp.err_pos = -1; /* let buggy responses pass */
780 s->flags |= SN_BE_ASSIGNED;
Willy Tarreau51aecc72009-07-12 09:47:04 +0200781
782 /* If the target backend requires HTTP processing, we have to allocate
783 * a struct hdr_idx for it if we did not have one.
784 */
785 if (unlikely(!s->txn.hdr_idx.v && (be->acl_requires & ACL_USE_L7_ANY))) {
786 if ((s->txn.hdr_idx.v = pool_alloc2(s->fe->hdr_idx_pool)) == NULL)
787 return 0; /* not enough memory */
Willy Tarreau39e4f622010-05-31 17:01:36 +0200788
789 /* and now initialize the HTTP transaction state */
790 http_init_txn(s);
791
Willy Tarreau51aecc72009-07-12 09:47:04 +0200792 s->txn.hdr_idx.size = MAX_HTTP_HDR;
793 hdr_idx_init(&s->txn.hdr_idx);
794 }
795
Willy Tarreauc1a21672009-08-16 22:37:44 +0200796 /* We want to enable the backend-specific analysers except those which
797 * were already run as part of the frontend/listener. Note that it would
798 * be more reliable to store the list of analysers that have been run,
799 * but what we do here is OK for now.
Emeric Brun647caf12009-06-30 17:57:00 +0200800 */
Willy Tarreauc1a21672009-08-16 22:37:44 +0200801 s->req->analysers |= be->be_req_ana & ~(s->listener->analysers);
Emeric Brun647caf12009-06-30 17:57:00 +0200802
Willy Tarreaubedb9ba2009-07-12 08:27:39 +0200803 return 1;
Willy Tarreau1d0dfb12009-07-07 15:10:31 +0200804}
805
Willy Tarreau9de1bbd2008-07-09 20:34:27 +0200806static struct cfg_kw_list cfg_kws = {{ },{
807 { CFG_LISTEN, "timeout", proxy_parse_timeout },
808 { CFG_LISTEN, "clitimeout", proxy_parse_timeout },
809 { CFG_LISTEN, "contimeout", proxy_parse_timeout },
810 { CFG_LISTEN, "srvtimeout", proxy_parse_timeout },
Willy Tarreau3a7d2072009-03-05 23:48:25 +0100811 { CFG_LISTEN, "rate-limit", proxy_parse_rate_limit },
Willy Tarreau9de1bbd2008-07-09 20:34:27 +0200812 { 0, NULL, NULL },
813}};
814
815__attribute__((constructor))
816static void __proxy_module_init(void)
817{
818 cfg_register_keywords(&cfg_kws);
819}
Willy Tarreaubaaee002006-06-26 02:48:02 +0200820
821/*
822 * Local variables:
823 * c-indent-level: 8
824 * c-basic-offset: 8
825 * End:
826 */