blob: 81f4e463ef6118e439143f44adf4a9d55b1135d3 [file] [log] [blame]
Willy Tarreaubaaee002006-06-26 02:48:02 +02001/*
2 * Server management functions.
3 *
Willy Tarreau21faa912012-10-10 08:27:36 +02004 * Copyright 2000-2012 Willy Tarreau <w@1wt.eu>
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +01005 * Copyright 2007-2008 Krzysztof Piotr Oledzki <ole@ans.pl>
Willy Tarreaubaaee002006-06-26 02:48:02 +02006 *
7 * This program is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU General Public License
9 * as published by the Free Software Foundation; either version
10 * 2 of the License, or (at your option) any later version.
11 *
12 */
13
Willy Tarreau0a4b0ab2020-06-11 11:22:44 +020014#include <sys/types.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020015#include <netinet/tcp.h>
Willy Tarreau272adea2014-03-31 10:39:59 +020016#include <ctype.h>
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +020017#include <errno.h>
Willy Tarreau272adea2014-03-31 10:39:59 +020018
Willy Tarreaub2551052020-06-09 09:07:15 +020019#include <import/ebsttree.h>
Willy Tarreau6be78492020-06-05 00:00:29 +020020#include <import/xxhash.h>
21
Willy Tarreaub2551052020-06-09 09:07:15 +020022#include <haproxy/api.h>
Willy Tarreau3f0f82e2020-06-04 19:42:41 +020023#include <haproxy/applet-t.h>
Willy Tarreau49801602020-06-04 22:50:02 +020024#include <haproxy/backend.h>
Willy Tarreau6be78492020-06-05 00:00:29 +020025#include <haproxy/cfgparse.h>
Willy Tarreau4aa573d2020-06-04 18:21:56 +020026#include <haproxy/check.h>
Willy Tarreau83487a82020-06-04 20:19:54 +020027#include <haproxy/cli.h>
Willy Tarreau7ea393d2020-06-04 18:02:10 +020028#include <haproxy/connection.h>
Willy Tarreau3afc4c42020-06-03 18:23:19 +020029#include <haproxy/dict-t.h>
Willy Tarreaueb92deb2020-06-04 10:53:16 +020030#include <haproxy/dns.h>
Willy Tarreau8d366972020-05-27 16:10:29 +020031#include <haproxy/errors.h>
Willy Tarreauf268ee82020-06-04 17:05:57 +020032#include <haproxy/global.h>
Willy Tarreau36979d92020-06-05 17:27:29 +020033#include <haproxy/log.h>
Willy Tarreaucee013e2020-06-05 11:40:38 +020034#include <haproxy/mailers.h>
Willy Tarreau7a00efb2020-06-02 17:02:59 +020035#include <haproxy/namespace.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020036#include <haproxy/port_range.h>
37#include <haproxy/protocol.h>
Willy Tarreaua55c4542020-06-04 22:59:39 +020038#include <haproxy/queue.h>
Willy Tarreaue6ce10b2020-06-04 15:33:47 +020039#include <haproxy/sample.h>
Willy Tarreau1e56f922020-06-04 23:20:13 +020040#include <haproxy/server.h>
Willy Tarreau2eec9b52020-06-04 19:58:55 +020041#include <haproxy/stats-t.h>
Willy Tarreaudfd3de82020-06-04 23:46:14 +020042#include <haproxy/stream.h>
Willy Tarreau5e539c92020-06-04 20:45:39 +020043#include <haproxy/stream_interface.h>
Willy Tarreaucea0e1b2020-06-04 17:25:40 +020044#include <haproxy/task.h>
Willy Tarreau51cd5952020-06-05 12:25:38 +020045#include <haproxy/tcpcheck.h>
Willy Tarreau92b4f132020-06-01 11:05:15 +020046#include <haproxy/time.h>
Krzysztof Oledzki85130942007-10-22 16:21:10 +020047
Baptiste Assmannda29fe22019-06-13 13:24:29 +020048
Willy Tarreau3ff577e2018-08-02 11:48:52 +020049static void srv_update_status(struct server *s);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +020050static void srv_update_state(struct server *srv, int version, char **params);
Baptiste Assmann83cbaa52016-11-02 15:34:05 +010051static int srv_apply_lastaddr(struct server *srv, int *err_code);
Olivier Houchardd16bfe62017-10-31 15:21:19 +010052static int srv_set_fqdn(struct server *srv, const char *fqdn, int dns_locked);
Baptiste Assmannda29fe22019-06-13 13:24:29 +020053static void srv_state_parse_line(char *buf, const int version, char **params, char **srv_params);
54static int srv_state_get_version(FILE *f);
William Dauchy6318d332020-05-02 21:52:36 +020055static void srv_cleanup_connections(struct server *srv);
Willy Tarreaubaaee002006-06-26 02:48:02 +020056
Willy Tarreau21faa912012-10-10 08:27:36 +020057/* List head of all known server keywords */
58static struct srv_kw_list srv_keywords = {
59 .list = LIST_HEAD_INIT(srv_keywords.list)
60};
Krzysztof Oledzki85130942007-10-22 16:21:10 +020061
Willy Tarreauaf613e82020-06-05 08:40:51 +020062__decl_thread(HA_SPINLOCK_T idle_conn_srv_lock);
Olivier Houchard9ea5d362019-02-14 18:29:09 +010063struct eb_root idle_conn_srv = EB_ROOT;
64struct task *idle_conn_task = NULL;
Olivier Houchard9ea5d362019-02-14 18:29:09 +010065
Frédéric Lécaille7da71292019-05-20 09:47:07 +020066/* The server names dictionary */
67struct dict server_name_dict = {
68 .name = "server names",
69 .values = EB_ROOT_UNIQUE,
70};
71
Baptiste Assmannda29fe22019-06-13 13:24:29 +020072/* tree where global state_file is loaded */
Willy Tarreaufd1aa012019-12-20 17:23:40 +010073struct eb_root state_file = EB_ROOT_UNIQUE;
Baptiste Assmannda29fe22019-06-13 13:24:29 +020074
Simon Hormana3608442013-11-01 16:46:15 +090075int srv_downtime(const struct server *s)
Willy Tarreau21faa912012-10-10 08:27:36 +020076{
Amaury Denoyellee6ba7912020-10-29 15:59:05 +010077 if ((s->cur_state != SRV_ST_STOPPED) || s->last_change >= now.tv_sec) // ignore negative time
Krzysztof Oledzki85130942007-10-22 16:21:10 +020078 return s->down_time;
79
80 return now.tv_sec - s->last_change + s->down_time;
81}
Willy Tarreaubaaee002006-06-26 02:48:02 +020082
Bhaskar Maddalaa20cb852014-02-03 16:26:46 -050083int srv_lastsession(const struct server *s)
84{
85 if (s->counters.last_sess)
86 return now.tv_sec - s->counters.last_sess;
87
88 return -1;
89}
90
Simon Horman4a741432013-02-23 15:35:38 +090091int srv_getinter(const struct check *check)
Willy Tarreau21faa912012-10-10 08:27:36 +020092{
Simon Horman4a741432013-02-23 15:35:38 +090093 const struct server *s = check->server;
94
Willy Tarreauff5ae352013-12-11 20:36:34 +010095 if ((check->state & CHK_ST_CONFIGURED) && (check->health == check->rise + check->fall - 1))
Simon Horman4a741432013-02-23 15:35:38 +090096 return check->inter;
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +010097
Emeric Brun52a91d32017-08-31 14:41:55 +020098 if ((s->next_state == SRV_ST_STOPPED) && check->health == 0)
Simon Horman4a741432013-02-23 15:35:38 +090099 return (check->downinter)?(check->downinter):(check->inter);
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +0100100
Simon Horman4a741432013-02-23 15:35:38 +0900101 return (check->fastinter)?(check->fastinter):(check->inter);
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +0100102}
103
Olivier Houcharde9bad0a2018-01-17 17:39:34 +0100104/*
105 * Check that we did not get a hash collision.
Willy Tarreau595e7672020-10-20 17:30:08 +0200106 * Unlikely, but it can happen. The server's proxy must be at least
107 * read-locked.
Olivier Houcharde9bad0a2018-01-17 17:39:34 +0100108 */
109static inline void srv_check_for_dup_dyncookie(struct server *s)
Olivier Houchard4e694042017-03-14 20:01:29 +0100110{
111 struct proxy *p = s->proxy;
112 struct server *tmpserv;
Olivier Houcharde9bad0a2018-01-17 17:39:34 +0100113
114 for (tmpserv = p->srv; tmpserv != NULL;
115 tmpserv = tmpserv->next) {
116 if (tmpserv == s)
117 continue;
118 if (tmpserv->next_admin & SRV_ADMF_FMAINT)
119 continue;
120 if (tmpserv->cookie &&
121 strcmp(tmpserv->cookie, s->cookie) == 0) {
122 ha_warning("We generated two equal cookies for two different servers.\n"
123 "Please change the secret key for '%s'.\n",
124 s->proxy->id);
125 }
126 }
127
128}
129
Willy Tarreau46b7f532018-08-21 11:54:26 +0200130/*
Willy Tarreau595e7672020-10-20 17:30:08 +0200131 * Must be called with the server lock held, and will read-lock the proxy.
Willy Tarreau46b7f532018-08-21 11:54:26 +0200132 */
Olivier Houcharde9bad0a2018-01-17 17:39:34 +0100133void srv_set_dyncookie(struct server *s)
134{
135 struct proxy *p = s->proxy;
Olivier Houchard4e694042017-03-14 20:01:29 +0100136 char *tmpbuf;
137 unsigned long long hash_value;
Olivier Houchard2cb49eb2017-03-15 15:11:06 +0100138 size_t key_len;
Olivier Houchard4e694042017-03-14 20:01:29 +0100139 size_t buffer_len;
140 int addr_len;
141 int port;
142
Willy Tarreau595e7672020-10-20 17:30:08 +0200143 HA_RWLOCK_RDLOCK(PROXY_LOCK, &p->lock);
Willy Tarreau5e83d992019-07-30 11:59:34 +0200144
Olivier Houchard4e694042017-03-14 20:01:29 +0100145 if ((s->flags & SRV_F_COOKIESET) ||
146 !(s->proxy->ck_opts & PR_CK_DYNAMIC) ||
147 s->proxy->dyncookie_key == NULL)
Willy Tarreau5e83d992019-07-30 11:59:34 +0200148 goto out;
Olivier Houchard2cb49eb2017-03-15 15:11:06 +0100149 key_len = strlen(p->dyncookie_key);
Olivier Houchard4e694042017-03-14 20:01:29 +0100150
151 if (s->addr.ss_family != AF_INET &&
152 s->addr.ss_family != AF_INET6)
Willy Tarreau5e83d992019-07-30 11:59:34 +0200153 goto out;
Olivier Houchard4e694042017-03-14 20:01:29 +0100154 /*
155 * Buffer to calculate the cookie value.
156 * The buffer contains the secret key + the server IP address
157 * + the TCP port.
158 */
159 addr_len = (s->addr.ss_family == AF_INET) ? 4 : 16;
160 /*
161 * The TCP port should use only 2 bytes, but is stored in
162 * an unsigned int in struct server, so let's use 4, to be
163 * on the safe side.
164 */
165 buffer_len = key_len + addr_len + 4;
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200166 tmpbuf = trash.area;
Olivier Houchard4e694042017-03-14 20:01:29 +0100167 memcpy(tmpbuf, p->dyncookie_key, key_len);
168 memcpy(&(tmpbuf[key_len]),
169 s->addr.ss_family == AF_INET ?
170 (void *)&((struct sockaddr_in *)&s->addr)->sin_addr.s_addr :
171 (void *)&(((struct sockaddr_in6 *)&s->addr)->sin6_addr.s6_addr),
172 addr_len);
173 /*
174 * Make sure it's the same across all the load balancers,
175 * no matter their endianness.
176 */
177 port = htonl(s->svc_port);
178 memcpy(&tmpbuf[key_len + addr_len], &port, 4);
179 hash_value = XXH64(tmpbuf, buffer_len, 0);
180 memprintf(&s->cookie, "%016llx", hash_value);
181 if (!s->cookie)
Willy Tarreau5e83d992019-07-30 11:59:34 +0200182 goto out;
Olivier Houchard4e694042017-03-14 20:01:29 +0100183 s->cklen = 16;
Olivier Houcharde9bad0a2018-01-17 17:39:34 +0100184
185 /* Don't bother checking if the dyncookie is duplicated if
186 * the server is marked as "disabled", maybe it doesn't have
187 * its real IP yet, but just a place holder.
Olivier Houchard4e694042017-03-14 20:01:29 +0100188 */
Olivier Houcharde9bad0a2018-01-17 17:39:34 +0100189 if (!(s->next_admin & SRV_ADMF_FMAINT))
190 srv_check_for_dup_dyncookie(s);
Willy Tarreau5e83d992019-07-30 11:59:34 +0200191 out:
Willy Tarreau595e7672020-10-20 17:30:08 +0200192 HA_RWLOCK_RDUNLOCK(PROXY_LOCK, &p->lock);
Olivier Houchard4e694042017-03-14 20:01:29 +0100193}
194
Willy Tarreau21faa912012-10-10 08:27:36 +0200195/*
196 * Registers the server keyword list <kwl> as a list of valid keywords for next
197 * parsing sessions.
198 */
199void srv_register_keywords(struct srv_kw_list *kwl)
200{
201 LIST_ADDQ(&srv_keywords.list, &kwl->list);
202}
203
204/* Return a pointer to the server keyword <kw>, or NULL if not found. If the
205 * keyword is found with a NULL ->parse() function, then an attempt is made to
206 * find one with a valid ->parse() function. This way it is possible to declare
207 * platform-dependant, known keywords as NULL, then only declare them as valid
208 * if some options are met. Note that if the requested keyword contains an
209 * opening parenthesis, everything from this point is ignored.
210 */
211struct srv_kw *srv_find_kw(const char *kw)
212{
213 int index;
214 const char *kwend;
215 struct srv_kw_list *kwl;
216 struct srv_kw *ret = NULL;
217
218 kwend = strchr(kw, '(');
219 if (!kwend)
220 kwend = kw + strlen(kw);
221
222 list_for_each_entry(kwl, &srv_keywords.list, list) {
223 for (index = 0; kwl->kw[index].kw != NULL; index++) {
224 if ((strncmp(kwl->kw[index].kw, kw, kwend - kw) == 0) &&
225 kwl->kw[index].kw[kwend-kw] == 0) {
226 if (kwl->kw[index].parse)
227 return &kwl->kw[index]; /* found it !*/
228 else
229 ret = &kwl->kw[index]; /* may be OK */
230 }
231 }
232 }
233 return ret;
234}
235
236/* Dumps all registered "server" keywords to the <out> string pointer. The
237 * unsupported keywords are only dumped if their supported form was not
238 * found.
239 */
240void srv_dump_kws(char **out)
241{
242 struct srv_kw_list *kwl;
243 int index;
244
Christopher Faulet784063e2020-05-18 12:14:18 +0200245 if (!out)
246 return;
247
Willy Tarreau21faa912012-10-10 08:27:36 +0200248 *out = NULL;
249 list_for_each_entry(kwl, &srv_keywords.list, list) {
250 for (index = 0; kwl->kw[index].kw != NULL; index++) {
251 if (kwl->kw[index].parse ||
252 srv_find_kw(kwl->kw[index].kw) == &kwl->kw[index]) {
253 memprintf(out, "%s[%4s] %s%s%s%s\n", *out ? *out : "",
254 kwl->scope,
255 kwl->kw[index].kw,
256 kwl->kw[index].skip ? " <arg>" : "",
257 kwl->kw[index].default_ok ? " [dflt_ok]" : "",
258 kwl->kw[index].parse ? "" : " (not supported)");
259 }
260 }
261 }
262}
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +0100263
Frédéric Lécaillef5bf9032017-03-10 11:51:05 +0100264/* Parse the "backup" server keyword */
265static int srv_parse_backup(char **args, int *cur_arg,
266 struct proxy *curproxy, struct server *newsrv, char **err)
267{
268 newsrv->flags |= SRV_F_BACKUP;
269 return 0;
270}
271
Alexander Liu2a54bb72019-05-22 19:44:48 +0800272
Frédéric Lécaille9d1b95b2017-03-15 09:13:33 +0100273/* Parse the "cookie" server keyword */
274static int srv_parse_cookie(char **args, int *cur_arg,
275 struct proxy *curproxy, struct server *newsrv, char **err)
276{
277 char *arg;
278
279 arg = args[*cur_arg + 1];
280 if (!*arg) {
281 memprintf(err, "'%s' expects <value> as argument.\n", args[*cur_arg]);
282 return ERR_ALERT | ERR_FATAL;
283 }
284
285 free(newsrv->cookie);
286 newsrv->cookie = strdup(arg);
287 newsrv->cklen = strlen(arg);
288 newsrv->flags |= SRV_F_COOKIESET;
289 return 0;
290}
291
Frédéric Lécaille2a0d0612017-03-21 11:53:54 +0100292/* Parse the "disabled" server keyword */
293static int srv_parse_disabled(char **args, int *cur_arg,
294 struct proxy *curproxy, struct server *newsrv, char **err)
295{
Emeric Brun52a91d32017-08-31 14:41:55 +0200296 newsrv->next_admin |= SRV_ADMF_CMAINT | SRV_ADMF_FMAINT;
297 newsrv->next_state = SRV_ST_STOPPED;
Frédéric Lécaille2a0d0612017-03-21 11:53:54 +0100298 newsrv->check.state |= CHK_ST_PAUSED;
299 newsrv->check.health = 0;
300 return 0;
301}
302
303/* Parse the "enabled" server keyword */
304static int srv_parse_enabled(char **args, int *cur_arg,
305 struct proxy *curproxy, struct server *newsrv, char **err)
306{
Emeric Brun52a91d32017-08-31 14:41:55 +0200307 newsrv->next_admin &= ~SRV_ADMF_CMAINT & ~SRV_ADMF_FMAINT;
308 newsrv->next_state = SRV_ST_RUNNING;
Frédéric Lécaille2a0d0612017-03-21 11:53:54 +0100309 newsrv->check.state &= ~CHK_ST_PAUSED;
310 newsrv->check.health = newsrv->check.rise;
311 return 0;
312}
313
Willy Tarreau9c538e02019-01-23 10:21:49 +0100314static int srv_parse_max_reuse(char **args, int *cur_arg, struct proxy *curproxy, struct server *newsrv, char **err)
315{
316 char *arg;
317
318 arg = args[*cur_arg + 1];
319 if (!*arg) {
320 memprintf(err, "'%s' expects <value> as argument.\n", args[*cur_arg]);
321 return ERR_ALERT | ERR_FATAL;
322 }
323 newsrv->max_reuse = atoi(arg);
324
325 return 0;
326}
327
Olivier Houchardb7b3faa2018-12-14 18:15:36 +0100328static int srv_parse_pool_purge_delay(char **args, int *cur_arg, struct proxy *curproxy, struct server *newsrv, char **err)
Olivier Houchard0c18a6f2018-12-02 14:11:41 +0100329{
330 const char *res;
331 char *arg;
332 unsigned int time;
333
334 arg = args[*cur_arg + 1];
335 if (!*arg) {
336 memprintf(err, "'%s' expects <value> as argument.\n", args[*cur_arg]);
337 return ERR_ALERT | ERR_FATAL;
338 }
339 res = parse_time_err(arg, &time, TIME_UNIT_MS);
Willy Tarreau9faebe32019-06-07 19:00:37 +0200340 if (res == PARSE_TIME_OVER) {
341 memprintf(err, "timer overflow in argument '%s' to '%s' (maximum value is 2147483647 ms or ~24.8 days)",
342 args[*cur_arg+1], args[*cur_arg]);
343 return ERR_ALERT | ERR_FATAL;
344 }
345 else if (res == PARSE_TIME_UNDER) {
346 memprintf(err, "timer underflow in argument '%s' to '%s' (minimum non-null value is 1 ms)",
347 args[*cur_arg+1], args[*cur_arg]);
348 return ERR_ALERT | ERR_FATAL;
349 }
350 else if (res) {
Olivier Houchard0c18a6f2018-12-02 14:11:41 +0100351 memprintf(err, "unexpected character '%c' in argument to <%s>.\n",
352 *res, args[*cur_arg]);
353 return ERR_ALERT | ERR_FATAL;
354 }
Olivier Houchardb7b3faa2018-12-14 18:15:36 +0100355 newsrv->pool_purge_delay = time;
Olivier Houchard0c18a6f2018-12-02 14:11:41 +0100356
357 return 0;
358}
359
Willy Tarreau2f3f4d32020-07-01 07:43:51 +0200360static int srv_parse_pool_low_conn(char **args, int *cur_arg, struct proxy *curproxy, struct server *newsrv, char **err)
361{
362 char *arg;
363
364 arg = args[*cur_arg + 1];
365 if (!*arg) {
366 memprintf(err, "'%s' expects <value> as argument.\n", args[*cur_arg]);
367 return ERR_ALERT | ERR_FATAL;
368 }
369
370 newsrv->low_idle_conns = atoi(arg);
371 return 0;
372}
373
Olivier Houchard006e3102018-12-10 18:30:32 +0100374static int srv_parse_pool_max_conn(char **args, int *cur_arg, struct proxy *curproxy, struct server *newsrv, char **err)
375{
376 char *arg;
377
378 arg = args[*cur_arg + 1];
379 if (!*arg) {
380 memprintf(err, "'%s' expects <value> as argument.\n", args[*cur_arg]);
381 return ERR_ALERT | ERR_FATAL;
382 }
Willy Tarreaucb923d52019-01-23 10:39:27 +0100383
Olivier Houchard006e3102018-12-10 18:30:32 +0100384 newsrv->max_idle_conns = atoi(arg);
Willy Tarreaucb923d52019-01-23 10:39:27 +0100385 if ((int)newsrv->max_idle_conns < -1) {
386 memprintf(err, "'%s' must be >= -1", args[*cur_arg]);
387 return ERR_ALERT | ERR_FATAL;
388 }
Olivier Houchard006e3102018-12-10 18:30:32 +0100389
390 return 0;
391}
392
Willy Tarreaudff55432012-10-10 17:51:05 +0200393/* parse the "id" server keyword */
394static int srv_parse_id(char **args, int *cur_arg, struct proxy *curproxy, struct server *newsrv, char **err)
395{
396 struct eb32_node *node;
397
398 if (!*args[*cur_arg + 1]) {
399 memprintf(err, "'%s' : expects an integer argument", args[*cur_arg]);
400 return ERR_ALERT | ERR_FATAL;
401 }
402
403 newsrv->puid = atol(args[*cur_arg + 1]);
404 newsrv->conf.id.key = newsrv->puid;
405
406 if (newsrv->puid <= 0) {
407 memprintf(err, "'%s' : custom id has to be > 0", args[*cur_arg]);
408 return ERR_ALERT | ERR_FATAL;
409 }
410
411 node = eb32_lookup(&curproxy->conf.used_server_id, newsrv->puid);
412 if (node) {
413 struct server *target = container_of(node, struct server, conf.id);
414 memprintf(err, "'%s' : custom id %d already used at %s:%d ('server %s')",
415 args[*cur_arg], newsrv->puid, target->conf.file, target->conf.line,
416 target->id);
417 return ERR_ALERT | ERR_FATAL;
418 }
419
420 eb32_insert(&curproxy->conf.used_server_id, &newsrv->conf.id);
Baptiste Assmann7cc419a2015-07-07 22:02:20 +0200421 newsrv->flags |= SRV_F_FORCED_ID;
Willy Tarreaudff55432012-10-10 17:51:05 +0200422 return 0;
423}
424
Frédéric Lécaille22f41a22017-03-16 17:17:36 +0100425/* Parse the "namespace" server keyword */
426static int srv_parse_namespace(char **args, int *cur_arg,
427 struct proxy *curproxy, struct server *newsrv, char **err)
428{
Willy Tarreaue5733232019-05-22 19:24:06 +0200429#ifdef USE_NS
Frédéric Lécaille22f41a22017-03-16 17:17:36 +0100430 char *arg;
431
432 arg = args[*cur_arg + 1];
433 if (!*arg) {
434 memprintf(err, "'%s' : expects <name> as argument", args[*cur_arg]);
435 return ERR_ALERT | ERR_FATAL;
436 }
437
438 if (!strcmp(arg, "*")) {
439 /* Use the namespace associated with the connection (if present). */
440 newsrv->flags |= SRV_F_USE_NS_FROM_PP;
441 return 0;
442 }
443
444 /*
445 * As this parser may be called several times for the same 'default-server'
446 * object, or for a new 'server' instance deriving from a 'default-server'
447 * one with SRV_F_USE_NS_FROM_PP flag enabled, let's reset it.
448 */
449 newsrv->flags &= ~SRV_F_USE_NS_FROM_PP;
450
451 newsrv->netns = netns_store_lookup(arg, strlen(arg));
452 if (!newsrv->netns)
453 newsrv->netns = netns_store_insert(arg);
454
455 if (!newsrv->netns) {
456 memprintf(err, "Cannot open namespace '%s'", arg);
457 return ERR_ALERT | ERR_FATAL;
458 }
459
460 return 0;
461#else
462 memprintf(err, "'%s': '%s' option not implemented", args[0], args[*cur_arg]);
463 return ERR_ALERT | ERR_FATAL;
464#endif
465}
466
Frédéric Lécaillef5bf9032017-03-10 11:51:05 +0100467/* Parse the "no-backup" server keyword */
468static int srv_parse_no_backup(char **args, int *cur_arg,
469 struct proxy *curproxy, struct server *newsrv, char **err)
470{
471 newsrv->flags &= ~SRV_F_BACKUP;
472 return 0;
473}
474
Frédéric Lécaille25df8902017-03-10 14:04:31 +0100475
Frédéric Lécaille31045e42017-03-10 16:40:00 +0100476/* Disable server PROXY protocol flags. */
Willy Tarreau0e492e22019-04-15 21:25:03 +0200477static inline int srv_disable_pp_flags(struct server *srv, unsigned int flags)
Frédéric Lécaille31045e42017-03-10 16:40:00 +0100478{
479 srv->pp_opts &= ~flags;
480 return 0;
481}
482
483/* Parse the "no-send-proxy" server keyword */
484static int srv_parse_no_send_proxy(char **args, int *cur_arg,
485 struct proxy *curproxy, struct server *newsrv, char **err)
486{
487 return srv_disable_pp_flags(newsrv, SRV_PP_V1);
488}
489
490/* Parse the "no-send-proxy-v2" server keyword */
491static int srv_parse_no_send_proxy_v2(char **args, int *cur_arg,
492 struct proxy *curproxy, struct server *newsrv, char **err)
493{
494 return srv_disable_pp_flags(newsrv, SRV_PP_V2);
495}
496
Frédéric Lécaille1b9423d2019-07-04 14:19:06 +0200497/* Parse the "no-tfo" server keyword */
498static int srv_parse_no_tfo(char **args, int *cur_arg,
499 struct proxy *curproxy, struct server *newsrv, char **err)
500{
501 newsrv->flags &= ~SRV_F_FASTOPEN;
502 return 0;
503}
504
Frédéric Lécaillef9bc1d62017-03-10 15:50:49 +0100505/* Parse the "non-stick" server keyword */
506static int srv_parse_non_stick(char **args, int *cur_arg,
507 struct proxy *curproxy, struct server *newsrv, char **err)
508{
509 newsrv->flags |= SRV_F_NON_STICK;
510 return 0;
511}
512
Frédéric Lécaille31045e42017-03-10 16:40:00 +0100513/* Enable server PROXY protocol flags. */
Willy Tarreau0e492e22019-04-15 21:25:03 +0200514static inline int srv_enable_pp_flags(struct server *srv, unsigned int flags)
Frédéric Lécaille31045e42017-03-10 16:40:00 +0100515{
516 srv->pp_opts |= flags;
517 return 0;
518}
Christopher Faulet8ed0a3e2018-04-10 14:45:45 +0200519/* parse the "proto" server keyword */
520static int srv_parse_proto(char **args, int *cur_arg,
521 struct proxy *px, struct server *newsrv, char **err)
522{
523 struct ist proto;
524
525 if (!*args[*cur_arg + 1]) {
526 memprintf(err, "'%s' : missing value", args[*cur_arg]);
527 return ERR_ALERT | ERR_FATAL;
528 }
529 proto = ist2(args[*cur_arg + 1], strlen(args[*cur_arg + 1]));
530 newsrv->mux_proto = get_mux_proto(proto);
531 if (!newsrv->mux_proto) {
532 memprintf(err, "'%s' : unknown MUX protocol '%s'", args[*cur_arg], args[*cur_arg+1]);
533 return ERR_ALERT | ERR_FATAL;
534 }
Christopher Faulet8ed0a3e2018-04-10 14:45:45 +0200535 return 0;
536}
Frédéric Lécaille31045e42017-03-10 16:40:00 +0100537
Emmanuel Hocdetf643b802018-02-01 15:20:32 +0100538/* parse the "proxy-v2-options" */
539static int srv_parse_proxy_v2_options(char **args, int *cur_arg,
540 struct proxy *px, struct server *newsrv, char **err)
541{
542 char *p, *n;
543 for (p = args[*cur_arg+1]; p; p = n) {
544 n = strchr(p, ',');
545 if (n)
546 *n++ = '\0';
547 if (!strcmp(p, "ssl")) {
548 newsrv->pp_opts |= SRV_PP_V2_SSL;
549 } else if (!strcmp(p, "cert-cn")) {
550 newsrv->pp_opts |= SRV_PP_V2_SSL;
551 newsrv->pp_opts |= SRV_PP_V2_SSL_CN;
Emmanuel Hocdetfa8d0f12018-02-01 15:53:52 +0100552 } else if (!strcmp(p, "cert-key")) {
553 newsrv->pp_opts |= SRV_PP_V2_SSL;
554 newsrv->pp_opts |= SRV_PP_V2_SSL_KEY_ALG;
555 } else if (!strcmp(p, "cert-sig")) {
556 newsrv->pp_opts |= SRV_PP_V2_SSL;
557 newsrv->pp_opts |= SRV_PP_V2_SSL_SIG_ALG;
558 } else if (!strcmp(p, "ssl-cipher")) {
559 newsrv->pp_opts |= SRV_PP_V2_SSL;
560 newsrv->pp_opts |= SRV_PP_V2_SSL_CIPHER;
Emmanuel Hocdet253c3b72018-02-01 18:29:59 +0100561 } else if (!strcmp(p, "authority")) {
562 newsrv->pp_opts |= SRV_PP_V2_AUTHORITY;
Emmanuel Hocdet4399c752018-02-05 15:26:43 +0100563 } else if (!strcmp(p, "crc32c")) {
564 newsrv->pp_opts |= SRV_PP_V2_CRC32C;
Tim Duesterhuscf6e0c82020-03-13 12:34:24 +0100565 } else if (!strcmp(p, "unique-id")) {
566 newsrv->pp_opts |= SRV_PP_V2_UNIQUE_ID;
Emmanuel Hocdetf643b802018-02-01 15:20:32 +0100567 } else
568 goto fail;
569 }
570 return 0;
571 fail:
572 if (err)
573 memprintf(err, "'%s' : proxy v2 option not implemented", p);
574 return ERR_ALERT | ERR_FATAL;
575}
576
Frédéric Lécaille547356e2017-03-15 08:55:39 +0100577/* Parse the "observe" server keyword */
578static int srv_parse_observe(char **args, int *cur_arg,
579 struct proxy *curproxy, struct server *newsrv, char **err)
580{
581 char *arg;
582
583 arg = args[*cur_arg + 1];
584 if (!*arg) {
585 memprintf(err, "'%s' expects <mode> as argument.\n", args[*cur_arg]);
586 return ERR_ALERT | ERR_FATAL;
587 }
588
589 if (!strcmp(arg, "none")) {
590 newsrv->observe = HANA_OBS_NONE;
591 }
592 else if (!strcmp(arg, "layer4")) {
593 newsrv->observe = HANA_OBS_LAYER4;
594 }
595 else if (!strcmp(arg, "layer7")) {
596 if (curproxy->mode != PR_MODE_HTTP) {
597 memprintf(err, "'%s' can only be used in http proxies.\n", arg);
598 return ERR_ALERT;
599 }
600 newsrv->observe = HANA_OBS_LAYER7;
601 }
602 else {
603 memprintf(err, "'%s' expects one of 'none', 'layer4', 'layer7' "
604 "but got '%s'\n", args[*cur_arg], arg);
605 return ERR_ALERT | ERR_FATAL;
606 }
607
608 return 0;
609}
610
Frédéric Lécaille16186232017-03-14 16:42:49 +0100611/* Parse the "redir" server keyword */
612static int srv_parse_redir(char **args, int *cur_arg,
613 struct proxy *curproxy, struct server *newsrv, char **err)
614{
615 char *arg;
616
617 arg = args[*cur_arg + 1];
618 if (!*arg) {
619 memprintf(err, "'%s' expects <prefix> as argument.\n", args[*cur_arg]);
620 return ERR_ALERT | ERR_FATAL;
621 }
622
623 free(newsrv->rdr_pfx);
624 newsrv->rdr_pfx = strdup(arg);
625 newsrv->rdr_len = strlen(arg);
626
627 return 0;
628}
629
Frédéric Lécaille31045e42017-03-10 16:40:00 +0100630/* Parse the "send-proxy" server keyword */
631static int srv_parse_send_proxy(char **args, int *cur_arg,
632 struct proxy *curproxy, struct server *newsrv, char **err)
633{
634 return srv_enable_pp_flags(newsrv, SRV_PP_V1);
635}
636
637/* Parse the "send-proxy-v2" server keyword */
638static int srv_parse_send_proxy_v2(char **args, int *cur_arg,
639 struct proxy *curproxy, struct server *newsrv, char **err)
640{
641 return srv_enable_pp_flags(newsrv, SRV_PP_V2);
642}
643
Frédéric Lécailledba97072017-03-17 15:33:50 +0100644
645/* Parse the "source" server keyword */
646static int srv_parse_source(char **args, int *cur_arg,
647 struct proxy *curproxy, struct server *newsrv, char **err)
648{
649 char *errmsg;
650 int port_low, port_high;
651 struct sockaddr_storage *sk;
Frédéric Lécailledba97072017-03-17 15:33:50 +0100652
653 errmsg = NULL;
654
655 if (!*args[*cur_arg + 1]) {
656 memprintf(err, "'%s' expects <addr>[:<port>[-<port>]], and optionally '%s' <addr>, "
657 "and '%s' <name> as argument.\n", args[*cur_arg], "usesrc", "interface");
658 goto err;
659 }
660
661 /* 'sk' is statically allocated (no need to be freed). */
Willy Tarreau65ec4e32020-09-16 19:17:08 +0200662 sk = str2sa_range(args[*cur_arg + 1], NULL, &port_low, &port_high, NULL, NULL,
663 &errmsg, NULL, NULL,
664 PA_O_RESOLVE | PA_O_PORT_OK | PA_O_PORT_RANGE | PA_O_STREAM | PA_O_CONNECT);
Frédéric Lécailledba97072017-03-17 15:33:50 +0100665 if (!sk) {
666 memprintf(err, "'%s %s' : %s\n", args[*cur_arg], args[*cur_arg + 1], errmsg);
667 goto err;
668 }
669
Frédéric Lécailledba97072017-03-17 15:33:50 +0100670 newsrv->conn_src.opts |= CO_SRC_BIND;
671 newsrv->conn_src.source_addr = *sk;
672
673 if (port_low != port_high) {
674 int i;
675
Frédéric Lécailledba97072017-03-17 15:33:50 +0100676 newsrv->conn_src.sport_range = port_range_alloc_range(port_high - port_low + 1);
677 for (i = 0; i < newsrv->conn_src.sport_range->size; i++)
678 newsrv->conn_src.sport_range->ports[i] = port_low + i;
679 }
680
681 *cur_arg += 2;
682 while (*(args[*cur_arg])) {
683 if (!strcmp(args[*cur_arg], "usesrc")) { /* address to use outside */
684#if defined(CONFIG_HAP_TRANSPARENT)
685 if (!*args[*cur_arg + 1]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100686 ha_alert("'usesrc' expects <addr>[:<port>], 'client', 'clientip', "
687 "or 'hdr_ip(name,#)' as argument.\n");
Frédéric Lécailledba97072017-03-17 15:33:50 +0100688 goto err;
689 }
690 if (!strcmp(args[*cur_arg + 1], "client")) {
691 newsrv->conn_src.opts &= ~CO_SRC_TPROXY_MASK;
692 newsrv->conn_src.opts |= CO_SRC_TPROXY_CLI;
693 }
694 else if (!strcmp(args[*cur_arg + 1], "clientip")) {
695 newsrv->conn_src.opts &= ~CO_SRC_TPROXY_MASK;
696 newsrv->conn_src.opts |= CO_SRC_TPROXY_CIP;
697 }
698 else if (!strncmp(args[*cur_arg + 1], "hdr_ip(", 7)) {
699 char *name, *end;
700
701 name = args[*cur_arg + 1] + 7;
Willy Tarreau90807112020-02-25 08:16:33 +0100702 while (isspace((unsigned char)*name))
Frédéric Lécailledba97072017-03-17 15:33:50 +0100703 name++;
704
705 end = name;
Willy Tarreau90807112020-02-25 08:16:33 +0100706 while (*end && !isspace((unsigned char)*end) && *end != ',' && *end != ')')
Frédéric Lécailledba97072017-03-17 15:33:50 +0100707 end++;
708
709 newsrv->conn_src.opts &= ~CO_SRC_TPROXY_MASK;
710 newsrv->conn_src.opts |= CO_SRC_TPROXY_DYN;
711 free(newsrv->conn_src.bind_hdr_name);
712 newsrv->conn_src.bind_hdr_name = calloc(1, end - name + 1);
713 newsrv->conn_src.bind_hdr_len = end - name;
714 memcpy(newsrv->conn_src.bind_hdr_name, name, end - name);
715 newsrv->conn_src.bind_hdr_name[end - name] = '\0';
716 newsrv->conn_src.bind_hdr_occ = -1;
717
718 /* now look for an occurrence number */
Willy Tarreau90807112020-02-25 08:16:33 +0100719 while (isspace((unsigned char)*end))
Frédéric Lécailledba97072017-03-17 15:33:50 +0100720 end++;
721 if (*end == ',') {
722 end++;
723 name = end;
724 if (*end == '-')
725 end++;
Willy Tarreau90807112020-02-25 08:16:33 +0100726 while (isdigit((unsigned char)*end))
Frédéric Lécailledba97072017-03-17 15:33:50 +0100727 end++;
728 newsrv->conn_src.bind_hdr_occ = strl2ic(name, end - name);
729 }
730
731 if (newsrv->conn_src.bind_hdr_occ < -MAX_HDR_HISTORY) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100732 ha_alert("usesrc hdr_ip(name,num) does not support negative"
733 " occurrences values smaller than %d.\n", MAX_HDR_HISTORY);
Frédéric Lécailledba97072017-03-17 15:33:50 +0100734 goto err;
735 }
736 }
737 else {
738 struct sockaddr_storage *sk;
739 int port1, port2;
740
741 /* 'sk' is statically allocated (no need to be freed). */
Willy Tarreau65ec4e32020-09-16 19:17:08 +0200742 sk = str2sa_range(args[*cur_arg + 1], NULL, &port1, &port2, NULL, NULL,
743 &errmsg, NULL, NULL,
744 PA_O_RESOLVE | PA_O_PORT_OK | PA_O_STREAM | PA_O_CONNECT);
Frédéric Lécailledba97072017-03-17 15:33:50 +0100745 if (!sk) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100746 ha_alert("'%s %s' : %s\n", args[*cur_arg], args[*cur_arg + 1], errmsg);
Frédéric Lécailledba97072017-03-17 15:33:50 +0100747 goto err;
748 }
749
Frédéric Lécailledba97072017-03-17 15:33:50 +0100750 newsrv->conn_src.tproxy_addr = *sk;
751 newsrv->conn_src.opts |= CO_SRC_TPROXY_ADDR;
752 }
753 global.last_checks |= LSTCHK_NETADM;
754 *cur_arg += 2;
755 continue;
756#else /* no TPROXY support */
Christopher Faulet767a84b2017-11-24 16:50:31 +0100757 ha_alert("'usesrc' not allowed here because support for TPROXY was not compiled in.\n");
Frédéric Lécailledba97072017-03-17 15:33:50 +0100758 goto err;
759#endif /* defined(CONFIG_HAP_TRANSPARENT) */
760 } /* "usesrc" */
761
762 if (!strcmp(args[*cur_arg], "interface")) { /* specifically bind to this interface */
763#ifdef SO_BINDTODEVICE
764 if (!*args[*cur_arg + 1]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100765 ha_alert("'%s' : missing interface name.\n", args[0]);
Frédéric Lécailledba97072017-03-17 15:33:50 +0100766 goto err;
767 }
768 free(newsrv->conn_src.iface_name);
769 newsrv->conn_src.iface_name = strdup(args[*cur_arg + 1]);
770 newsrv->conn_src.iface_len = strlen(newsrv->conn_src.iface_name);
771 global.last_checks |= LSTCHK_NETADM;
772#else
Christopher Faulet767a84b2017-11-24 16:50:31 +0100773 ha_alert("'%s' : '%s' option not implemented.\n", args[0], args[*cur_arg]);
Frédéric Lécailledba97072017-03-17 15:33:50 +0100774 goto err;
775#endif
776 *cur_arg += 2;
777 continue;
778 }
779 /* this keyword in not an option of "source" */
780 break;
781 } /* while */
782
783 return 0;
784
785 err:
786 free(errmsg);
787 return ERR_ALERT | ERR_FATAL;
788}
789
Frédéric Lécaillef9bc1d62017-03-10 15:50:49 +0100790/* Parse the "stick" server keyword */
791static int srv_parse_stick(char **args, int *cur_arg,
792 struct proxy *curproxy, struct server *newsrv, char **err)
793{
794 newsrv->flags &= ~SRV_F_NON_STICK;
795 return 0;
796}
797
Frédéric Lécaille67e0e612017-03-14 15:21:31 +0100798/* Parse the "track" server keyword */
799static int srv_parse_track(char **args, int *cur_arg,
800 struct proxy *curproxy, struct server *newsrv, char **err)
801{
802 char *arg;
803
804 arg = args[*cur_arg + 1];
805 if (!*arg) {
806 memprintf(err, "'track' expects [<proxy>/]<server> as argument.\n");
807 return ERR_ALERT | ERR_FATAL;
808 }
809
810 free(newsrv->trackit);
811 newsrv->trackit = strdup(arg);
812
813 return 0;
Alexander Liu2a54bb72019-05-22 19:44:48 +0800814}
815
816/* Parse the "socks4" server keyword */
817static int srv_parse_socks4(char **args, int *cur_arg,
818 struct proxy *curproxy, struct server *newsrv, char **err)
819{
820 char *errmsg;
821 int port_low, port_high;
822 struct sockaddr_storage *sk;
Alexander Liu2a54bb72019-05-22 19:44:48 +0800823
824 errmsg = NULL;
825
826 if (!*args[*cur_arg + 1]) {
827 memprintf(err, "'%s' expects <addr>:<port> as argument.\n", args[*cur_arg]);
828 goto err;
829 }
830
831 /* 'sk' is statically allocated (no need to be freed). */
Willy Tarreau65ec4e32020-09-16 19:17:08 +0200832 sk = str2sa_range(args[*cur_arg + 1], NULL, &port_low, &port_high, NULL, NULL,
833 &errmsg, NULL, NULL,
834 PA_O_RESOLVE | PA_O_PORT_OK | PA_O_PORT_MAND | PA_O_STREAM | PA_O_CONNECT);
Alexander Liu2a54bb72019-05-22 19:44:48 +0800835 if (!sk) {
836 memprintf(err, "'%s %s' : %s\n", args[*cur_arg], args[*cur_arg + 1], errmsg);
837 goto err;
838 }
839
Alexander Liu2a54bb72019-05-22 19:44:48 +0800840 newsrv->flags |= SRV_F_SOCKS4_PROXY;
841 newsrv->socks4_addr = *sk;
842
Alexander Liu2a54bb72019-05-22 19:44:48 +0800843 return 0;
844
845 err:
846 free(errmsg);
847 return ERR_ALERT | ERR_FATAL;
Frédéric Lécaille67e0e612017-03-14 15:21:31 +0100848}
849
Frédéric Lécailledba97072017-03-17 15:33:50 +0100850
Willy Tarreau034c88c2017-01-23 23:36:45 +0100851/* parse the "tfo" server keyword */
852static int srv_parse_tfo(char **args, int *cur_arg, struct proxy *px, struct server *newsrv, char **err)
853{
854 newsrv->flags |= SRV_F_FASTOPEN;
855 return 0;
856}
857
Willy Tarreau4aac7db2014-05-16 11:48:10 +0200858/* Shutdown all connections of a server. The caller must pass a termination
Willy Tarreaue7dff022015-04-03 01:14:29 +0200859 * code in <why>, which must be one of SF_ERR_* indicating the reason for the
Willy Tarreau4aac7db2014-05-16 11:48:10 +0200860 * shutdown.
Willy Tarreau46b7f532018-08-21 11:54:26 +0200861 *
862 * Must be called with the server lock held.
Willy Tarreau4aac7db2014-05-16 11:48:10 +0200863 */
Willy Tarreau87b09662015-04-03 00:22:06 +0200864void srv_shutdown_streams(struct server *srv, int why)
Willy Tarreau4aac7db2014-05-16 11:48:10 +0200865{
Willy Tarreau87b09662015-04-03 00:22:06 +0200866 struct stream *stream, *stream_bck;
Willy Tarreau4aac7db2014-05-16 11:48:10 +0200867
Willy Tarreau87b09662015-04-03 00:22:06 +0200868 list_for_each_entry_safe(stream, stream_bck, &srv->actconns, by_srv)
869 if (stream->srv_conn == srv)
870 stream_shutdown(stream, why);
Willy Tarreau4aac7db2014-05-16 11:48:10 +0200871}
872
873/* Shutdown all connections of all backup servers of a proxy. The caller must
Willy Tarreaue7dff022015-04-03 01:14:29 +0200874 * pass a termination code in <why>, which must be one of SF_ERR_* indicating
Willy Tarreau4aac7db2014-05-16 11:48:10 +0200875 * the reason for the shutdown.
Willy Tarreau46b7f532018-08-21 11:54:26 +0200876 *
877 * Must be called with the server lock held.
Willy Tarreau4aac7db2014-05-16 11:48:10 +0200878 */
Willy Tarreau87b09662015-04-03 00:22:06 +0200879void srv_shutdown_backup_streams(struct proxy *px, int why)
Willy Tarreau4aac7db2014-05-16 11:48:10 +0200880{
881 struct server *srv;
882
883 for (srv = px->srv; srv != NULL; srv = srv->next)
884 if (srv->flags & SRV_F_BACKUP)
Willy Tarreau87b09662015-04-03 00:22:06 +0200885 srv_shutdown_streams(srv, why);
Willy Tarreau4aac7db2014-05-16 11:48:10 +0200886}
887
Willy Tarreaubda92272014-05-20 21:55:30 +0200888/* Appends some information to a message string related to a server going UP or
889 * DOWN. If both <forced> and <reason> are null and the server tracks another
890 * one, a "via" information will be provided to know where the status came from.
Emeric Brun5a133512017-10-19 14:42:30 +0200891 * If <check> is non-null, an entire string describing the check result will be
892 * appended after a comma and a space (eg: to report some information from the
893 * check that changed the state). In the other case, the string will be built
894 * using the check results stored into the struct server if present.
895 * If <xferred> is non-negative, some information about requeued sessions are
Willy Tarreaubda92272014-05-20 21:55:30 +0200896 * provided.
Willy Tarreau46b7f532018-08-21 11:54:26 +0200897 *
898 * Must be called with the server lock held.
Willy Tarreaua0066dd2014-05-16 11:25:16 +0200899 */
Willy Tarreau83061a82018-07-13 11:56:34 +0200900void srv_append_status(struct buffer *msg, struct server *s,
901 struct check *check, int xferred, int forced)
Willy Tarreaua0066dd2014-05-16 11:25:16 +0200902{
Emeric Brun5a133512017-10-19 14:42:30 +0200903 short status = s->op_st_chg.status;
904 short code = s->op_st_chg.code;
905 long duration = s->op_st_chg.duration;
906 char *desc = s->op_st_chg.reason;
907
908 if (check) {
909 status = check->status;
910 code = check->code;
911 duration = check->duration;
912 desc = check->desc;
913 }
914
915 if (status != -1) {
916 chunk_appendf(msg, ", reason: %s", get_check_status_description(status));
917
918 if (status >= HCHK_STATUS_L57DATA)
919 chunk_appendf(msg, ", code: %d", code);
920
921 if (desc && *desc) {
Willy Tarreau83061a82018-07-13 11:56:34 +0200922 struct buffer src;
Emeric Brun5a133512017-10-19 14:42:30 +0200923
924 chunk_appendf(msg, ", info: \"");
925
926 chunk_initlen(&src, desc, 0, strlen(desc));
927 chunk_asciiencode(msg, &src, '"');
928
929 chunk_appendf(msg, "\"");
930 }
931
932 if (duration >= 0)
933 chunk_appendf(msg, ", check duration: %ldms", duration);
934 }
935 else if (desc && *desc) {
936 chunk_appendf(msg, ", %s", desc);
937 }
938 else if (!forced && s->track) {
Willy Tarreaubda92272014-05-20 21:55:30 +0200939 chunk_appendf(msg, " via %s/%s", s->track->proxy->id, s->track->id);
Emeric Brun5a133512017-10-19 14:42:30 +0200940 }
Willy Tarreaua0066dd2014-05-16 11:25:16 +0200941
942 if (xferred >= 0) {
Emeric Brun52a91d32017-08-31 14:41:55 +0200943 if (s->next_state == SRV_ST_STOPPED)
Willy Tarreaua0066dd2014-05-16 11:25:16 +0200944 chunk_appendf(msg, ". %d active and %d backup servers left.%s"
945 " %d sessions active, %d requeued, %d remaining in queue",
946 s->proxy->srv_act, s->proxy->srv_bck,
947 (s->proxy->srv_bck && !s->proxy->srv_act) ? " Running on backup." : "",
948 s->cur_sess, xferred, s->nbpend);
949 else
950 chunk_appendf(msg, ". %d active and %d backup servers online.%s"
951 " %d sessions requeued, %d total in queue",
952 s->proxy->srv_act, s->proxy->srv_bck,
953 (s->proxy->srv_bck && !s->proxy->srv_act) ? " Running on backup." : "",
954 xferred, s->nbpend);
955 }
956}
957
Emeric Brun5a133512017-10-19 14:42:30 +0200958/* Marks server <s> down, regardless of its checks' statuses. The server is
959 * registered in a list to postpone the counting of the remaining servers on
960 * the proxy and transfers queued streams whenever possible to other servers at
961 * a sync point. Maintenance servers are ignored. It stores the <reason> if
962 * non-null as the reason for going down or the available data from the check
963 * struct to recompute this reason later.
Willy Tarreau46b7f532018-08-21 11:54:26 +0200964 *
965 * Must be called with the server lock held.
Willy Tarreaue7d1ef12014-05-20 22:25:12 +0200966 */
Emeric Brun5a133512017-10-19 14:42:30 +0200967void srv_set_stopped(struct server *s, const char *reason, struct check *check)
Willy Tarreaue7d1ef12014-05-20 22:25:12 +0200968{
969 struct server *srv;
Willy Tarreaue7d1ef12014-05-20 22:25:12 +0200970
Emeric Brun64cc49c2017-10-03 14:46:45 +0200971 if ((s->cur_admin & SRV_ADMF_MAINT) || s->next_state == SRV_ST_STOPPED)
Willy Tarreaue7d1ef12014-05-20 22:25:12 +0200972 return;
973
Emeric Brun52a91d32017-08-31 14:41:55 +0200974 s->next_state = SRV_ST_STOPPED;
Emeric Brun5a133512017-10-19 14:42:30 +0200975 *s->op_st_chg.reason = 0;
976 s->op_st_chg.status = -1;
977 if (reason) {
978 strlcpy2(s->op_st_chg.reason, reason, sizeof(s->op_st_chg.reason));
979 }
980 else if (check) {
Willy Tarreau358847f2017-11-20 21:33:21 +0100981 strlcpy2(s->op_st_chg.reason, check->desc, sizeof(s->op_st_chg.reason));
Emeric Brun5a133512017-10-19 14:42:30 +0200982 s->op_st_chg.code = check->code;
983 s->op_st_chg.status = check->status;
984 s->op_st_chg.duration = check->duration;
985 }
Willy Tarreaue7d1ef12014-05-20 22:25:12 +0200986
Willy Tarreaueeba36b2018-08-21 08:22:26 +0200987 /* propagate changes */
Willy Tarreaueeba36b2018-08-21 08:22:26 +0200988 srv_update_status(s);
Willy Tarreaueeba36b2018-08-21 08:22:26 +0200989
Emeric Brun9f0b4582017-10-23 14:39:51 +0200990 for (srv = s->trackers; srv; srv = srv->tracknext) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +0100991 HA_SPIN_LOCK(SERVER_LOCK, &srv->lock);
Emeric Brun5a133512017-10-19 14:42:30 +0200992 srv_set_stopped(srv, NULL, NULL);
Christopher Faulet2a944ee2017-11-07 10:42:54 +0100993 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
Emeric Brun9f0b4582017-10-23 14:39:51 +0200994 }
Willy Tarreaue7d1ef12014-05-20 22:25:12 +0200995}
996
Willy Tarreaudbd5e782014-05-20 22:46:35 +0200997/* Marks server <s> up regardless of its checks' statuses and provided it isn't
Emeric Brun5a133512017-10-19 14:42:30 +0200998 * in maintenance. The server is registered in a list to postpone the counting
999 * of the remaining servers on the proxy and tries to grab requests from the
1000 * proxy at a sync point. Maintenance servers are ignored. It stores the
1001 * <reason> if non-null as the reason for going down or the available data
1002 * from the check struct to recompute this reason later.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001003 *
1004 * Must be called with the server lock held.
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001005 */
Emeric Brun5a133512017-10-19 14:42:30 +02001006void srv_set_running(struct server *s, const char *reason, struct check *check)
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001007{
1008 struct server *srv;
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001009
Emeric Brun64cc49c2017-10-03 14:46:45 +02001010 if (s->cur_admin & SRV_ADMF_MAINT)
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001011 return;
1012
Emeric Brun52a91d32017-08-31 14:41:55 +02001013 if (s->next_state == SRV_ST_STARTING || s->next_state == SRV_ST_RUNNING)
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001014 return;
1015
Emeric Brun52a91d32017-08-31 14:41:55 +02001016 s->next_state = SRV_ST_STARTING;
Emeric Brun5a133512017-10-19 14:42:30 +02001017 *s->op_st_chg.reason = 0;
1018 s->op_st_chg.status = -1;
1019 if (reason) {
1020 strlcpy2(s->op_st_chg.reason, reason, sizeof(s->op_st_chg.reason));
1021 }
1022 else if (check) {
Willy Tarreau358847f2017-11-20 21:33:21 +01001023 strlcpy2(s->op_st_chg.reason, check->desc, sizeof(s->op_st_chg.reason));
Emeric Brun5a133512017-10-19 14:42:30 +02001024 s->op_st_chg.code = check->code;
1025 s->op_st_chg.status = check->status;
1026 s->op_st_chg.duration = check->duration;
1027 }
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001028
Emeric Brun64cc49c2017-10-03 14:46:45 +02001029 if (s->slowstart <= 0)
1030 s->next_state = SRV_ST_RUNNING;
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001031
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001032 /* propagate changes */
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001033 srv_update_status(s);
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001034
Emeric Brun9f0b4582017-10-23 14:39:51 +02001035 for (srv = s->trackers; srv; srv = srv->tracknext) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001036 HA_SPIN_LOCK(SERVER_LOCK, &srv->lock);
Emeric Brun5a133512017-10-19 14:42:30 +02001037 srv_set_running(srv, NULL, NULL);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001038 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
Emeric Brun9f0b4582017-10-23 14:39:51 +02001039 }
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001040}
1041
Willy Tarreau8eb77842014-05-21 13:54:57 +02001042/* Marks server <s> stopping regardless of its checks' statuses and provided it
Emeric Brun5a133512017-10-19 14:42:30 +02001043 * isn't in maintenance. The server is registered in a list to postpone the
1044 * counting of the remaining servers on the proxy and tries to grab requests
1045 * from the proxy. Maintenance servers are ignored. It stores the
1046 * <reason> if non-null as the reason for going down or the available data
1047 * from the check struct to recompute this reason later.
Willy Tarreau8eb77842014-05-21 13:54:57 +02001048 * up. Note that it makes use of the trash to build the log strings, so <reason>
1049 * must not be placed there.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001050 *
1051 * Must be called with the server lock held.
Willy Tarreau8eb77842014-05-21 13:54:57 +02001052 */
Emeric Brun5a133512017-10-19 14:42:30 +02001053void srv_set_stopping(struct server *s, const char *reason, struct check *check)
Willy Tarreau8eb77842014-05-21 13:54:57 +02001054{
1055 struct server *srv;
Willy Tarreau8eb77842014-05-21 13:54:57 +02001056
Emeric Brun64cc49c2017-10-03 14:46:45 +02001057 if (s->cur_admin & SRV_ADMF_MAINT)
Willy Tarreau8eb77842014-05-21 13:54:57 +02001058 return;
1059
Emeric Brun52a91d32017-08-31 14:41:55 +02001060 if (s->next_state == SRV_ST_STOPPING)
Willy Tarreau8eb77842014-05-21 13:54:57 +02001061 return;
1062
Emeric Brun52a91d32017-08-31 14:41:55 +02001063 s->next_state = SRV_ST_STOPPING;
Emeric Brun5a133512017-10-19 14:42:30 +02001064 *s->op_st_chg.reason = 0;
1065 s->op_st_chg.status = -1;
1066 if (reason) {
1067 strlcpy2(s->op_st_chg.reason, reason, sizeof(s->op_st_chg.reason));
1068 }
1069 else if (check) {
Willy Tarreau358847f2017-11-20 21:33:21 +01001070 strlcpy2(s->op_st_chg.reason, check->desc, sizeof(s->op_st_chg.reason));
Emeric Brun5a133512017-10-19 14:42:30 +02001071 s->op_st_chg.code = check->code;
1072 s->op_st_chg.status = check->status;
1073 s->op_st_chg.duration = check->duration;
1074 }
Willy Tarreau8eb77842014-05-21 13:54:57 +02001075
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001076 /* propagate changes */
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001077 srv_update_status(s);
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001078
Emeric Brun9f0b4582017-10-23 14:39:51 +02001079 for (srv = s->trackers; srv; srv = srv->tracknext) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001080 HA_SPIN_LOCK(SERVER_LOCK, &srv->lock);
Emeric Brun5a133512017-10-19 14:42:30 +02001081 srv_set_stopping(srv, NULL, NULL);
Christopher Faulet8d01fd62018-01-24 21:49:41 +01001082 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
Emeric Brun9f0b4582017-10-23 14:39:51 +02001083 }
Willy Tarreau8eb77842014-05-21 13:54:57 +02001084}
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001085
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001086/* Enables admin flag <mode> (among SRV_ADMF_*) on server <s>. This is used to
1087 * enforce either maint mode or drain mode. It is not allowed to set more than
1088 * one flag at once. The equivalent "inherited" flag is propagated to all
1089 * tracking servers. Maintenance mode disables health checks (but not agent
1090 * checks). When either the flag is already set or no flag is passed, nothing
Willy Tarreau8b428482016-11-07 15:53:43 +01001091 * is done. If <cause> is non-null, it will be displayed at the end of the log
1092 * lines to justify the state change.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001093 *
1094 * Must be called with the server lock held.
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001095 */
Willy Tarreau8b428482016-11-07 15:53:43 +01001096void srv_set_admin_flag(struct server *s, enum srv_admin mode, const char *cause)
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001097{
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001098 struct server *srv;
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001099
1100 if (!mode)
1101 return;
1102
1103 /* stop going down as soon as we meet a server already in the same state */
Emeric Brun52a91d32017-08-31 14:41:55 +02001104 if (s->next_admin & mode)
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001105 return;
1106
Emeric Brun52a91d32017-08-31 14:41:55 +02001107 s->next_admin |= mode;
Emeric Brun64cc49c2017-10-03 14:46:45 +02001108 if (cause)
1109 strlcpy2(s->adm_st_chg_cause, cause, sizeof(s->adm_st_chg_cause));
1110
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001111 /* propagate changes */
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001112 srv_update_status(s);
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001113
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001114 /* stop going down if the equivalent flag was already present (forced or inherited) */
Emeric Brun52a91d32017-08-31 14:41:55 +02001115 if (((mode & SRV_ADMF_MAINT) && (s->next_admin & ~mode & SRV_ADMF_MAINT)) ||
1116 ((mode & SRV_ADMF_DRAIN) && (s->next_admin & ~mode & SRV_ADMF_DRAIN)))
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001117 return;
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001118
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001119 /* compute the inherited flag to propagate */
1120 if (mode & SRV_ADMF_MAINT)
1121 mode = SRV_ADMF_IMAINT;
1122 else if (mode & SRV_ADMF_DRAIN)
1123 mode = SRV_ADMF_IDRAIN;
1124
Emeric Brun9f0b4582017-10-23 14:39:51 +02001125 for (srv = s->trackers; srv; srv = srv->tracknext) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001126 HA_SPIN_LOCK(SERVER_LOCK, &srv->lock);
Willy Tarreau8b428482016-11-07 15:53:43 +01001127 srv_set_admin_flag(srv, mode, cause);
Christopher Faulet8d01fd62018-01-24 21:49:41 +01001128 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
Emeric Brun9f0b4582017-10-23 14:39:51 +02001129 }
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001130}
1131
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001132/* Disables admin flag <mode> (among SRV_ADMF_*) on server <s>. This is used to
1133 * stop enforcing either maint mode or drain mode. It is not allowed to set more
1134 * than one flag at once. The equivalent "inherited" flag is propagated to all
1135 * tracking servers. Leaving maintenance mode re-enables health checks. When
1136 * either the flag is already cleared or no flag is passed, nothing is done.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001137 *
1138 * Must be called with the server lock held.
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001139 */
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001140void srv_clr_admin_flag(struct server *s, enum srv_admin mode)
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001141{
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001142 struct server *srv;
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001143
1144 if (!mode)
1145 return;
1146
1147 /* stop going down as soon as we see the flag is not there anymore */
Emeric Brun52a91d32017-08-31 14:41:55 +02001148 if (!(s->next_admin & mode))
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001149 return;
1150
Emeric Brun52a91d32017-08-31 14:41:55 +02001151 s->next_admin &= ~mode;
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001152
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001153 /* propagate changes */
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001154 srv_update_status(s);
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001155
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001156 /* stop going down if the equivalent flag is still present (forced or inherited) */
Emeric Brun52a91d32017-08-31 14:41:55 +02001157 if (((mode & SRV_ADMF_MAINT) && (s->next_admin & SRV_ADMF_MAINT)) ||
1158 ((mode & SRV_ADMF_DRAIN) && (s->next_admin & SRV_ADMF_DRAIN)))
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001159 return;
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001160
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001161 if (mode & SRV_ADMF_MAINT)
1162 mode = SRV_ADMF_IMAINT;
1163 else if (mode & SRV_ADMF_DRAIN)
1164 mode = SRV_ADMF_IDRAIN;
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001165
Emeric Brun9f0b4582017-10-23 14:39:51 +02001166 for (srv = s->trackers; srv; srv = srv->tracknext) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001167 HA_SPIN_LOCK(SERVER_LOCK, &srv->lock);
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001168 srv_clr_admin_flag(srv, mode);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001169 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
Emeric Brun9f0b4582017-10-23 14:39:51 +02001170 }
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001171}
1172
Willy Tarreau757478e2016-11-03 19:22:19 +01001173/* principle: propagate maint and drain to tracking servers. This is useful
1174 * upon startup so that inherited states are correct.
1175 */
1176static void srv_propagate_admin_state(struct server *srv)
1177{
1178 struct server *srv2;
1179
1180 if (!srv->trackers)
1181 return;
1182
1183 for (srv2 = srv->trackers; srv2; srv2 = srv2->tracknext) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001184 HA_SPIN_LOCK(SERVER_LOCK, &srv2->lock);
Emeric Brun52a91d32017-08-31 14:41:55 +02001185 if (srv->next_admin & (SRV_ADMF_MAINT | SRV_ADMF_CMAINT))
Willy Tarreau8b428482016-11-07 15:53:43 +01001186 srv_set_admin_flag(srv2, SRV_ADMF_IMAINT, NULL);
Willy Tarreau757478e2016-11-03 19:22:19 +01001187
Emeric Brun52a91d32017-08-31 14:41:55 +02001188 if (srv->next_admin & SRV_ADMF_DRAIN)
Willy Tarreau8b428482016-11-07 15:53:43 +01001189 srv_set_admin_flag(srv2, SRV_ADMF_IDRAIN, NULL);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001190 HA_SPIN_UNLOCK(SERVER_LOCK, &srv2->lock);
Willy Tarreau757478e2016-11-03 19:22:19 +01001191 }
1192}
1193
1194/* Compute and propagate the admin states for all servers in proxy <px>.
1195 * Only servers *not* tracking another one are considered, because other
1196 * ones will be handled when the server they track is visited.
1197 */
1198void srv_compute_all_admin_states(struct proxy *px)
1199{
1200 struct server *srv;
1201
1202 for (srv = px->srv; srv; srv = srv->next) {
1203 if (srv->track)
1204 continue;
1205 srv_propagate_admin_state(srv);
1206 }
1207}
1208
Willy Tarreaudff55432012-10-10 17:51:05 +02001209/* Note: must not be declared <const> as its list will be overwritten.
1210 * Please take care of keeping this list alphabetically sorted, doing so helps
1211 * all code contributors.
1212 * Optional keywords are also declared with a NULL ->parse() function so that
1213 * the config parser can report an appropriate error when a known keyword was
1214 * not enabled.
Frédéric Lécailledfacd692017-04-16 17:14:14 +02001215 * Note: -1 as ->skip value means that the number of arguments are variable.
Willy Tarreaudff55432012-10-10 17:51:05 +02001216 */
1217static struct srv_kw_list srv_kws = { "ALL", { }, {
Frédéric Lécaille1502cfd2017-03-10 15:36:14 +01001218 { "backup", srv_parse_backup, 0, 1 }, /* Flag as backup server */
Frédéric Lécaille9d1b95b2017-03-15 09:13:33 +01001219 { "cookie", srv_parse_cookie, 1, 1 }, /* Assign a cookie to the server */
Frédéric Lécaille2a0d0612017-03-21 11:53:54 +01001220 { "disabled", srv_parse_disabled, 0, 1 }, /* Start the server in 'disabled' state */
1221 { "enabled", srv_parse_enabled, 0, 1 }, /* Start the server in 'enabled' state */
Frédéric Lécaille1502cfd2017-03-10 15:36:14 +01001222 { "id", srv_parse_id, 1, 0 }, /* set id# of server */
Willy Tarreau9c538e02019-01-23 10:21:49 +01001223 { "max-reuse", srv_parse_max_reuse, 1, 1 }, /* Set the max number of requests on a connection, -1 means unlimited */
Frédéric Lécaille22f41a22017-03-16 17:17:36 +01001224 { "namespace", srv_parse_namespace, 1, 1 }, /* Namespace the server socket belongs to (if supported) */
Frédéric Lécaille1502cfd2017-03-10 15:36:14 +01001225 { "no-backup", srv_parse_no_backup, 0, 1 }, /* Flag as non-backup server */
Frédéric Lécaille31045e42017-03-10 16:40:00 +01001226 { "no-send-proxy", srv_parse_no_send_proxy, 0, 1 }, /* Disable use of PROXY V1 protocol */
1227 { "no-send-proxy-v2", srv_parse_no_send_proxy_v2, 0, 1 }, /* Disable use of PROXY V2 protocol */
Frédéric Lécaille1b9423d2019-07-04 14:19:06 +02001228 { "no-tfo", srv_parse_no_tfo, 0, 1 }, /* Disable use of TCP Fast Open */
Frédéric Lécaillef9bc1d62017-03-10 15:50:49 +01001229 { "non-stick", srv_parse_non_stick, 0, 1 }, /* Disable stick-table persistence */
Frédéric Lécaille547356e2017-03-15 08:55:39 +01001230 { "observe", srv_parse_observe, 1, 1 }, /* Enables health adjusting based on observing communication with the server */
Willy Tarreau2f3f4d32020-07-01 07:43:51 +02001231 { "pool-low-conn", srv_parse_pool_low_conn, 1, 1 }, /* Set the min number of orphan idle connecbefore being allowed to pick from other threads */
Olivier Houchard006e3102018-12-10 18:30:32 +01001232 { "pool-max-conn", srv_parse_pool_max_conn, 1, 1 }, /* Set the max number of orphan idle connections, 0 means unlimited */
Olivier Houchardb7b3faa2018-12-14 18:15:36 +01001233 { "pool-purge-delay", srv_parse_pool_purge_delay, 1, 1 }, /* Set the time before we destroy orphan idle connections, defaults to 1s */
Christopher Faulet8ed0a3e2018-04-10 14:45:45 +02001234 { "proto", srv_parse_proto, 1, 1 }, /* Set the proto to use for all outgoing connections */
Emmanuel Hocdetf643b802018-02-01 15:20:32 +01001235 { "proxy-v2-options", srv_parse_proxy_v2_options, 1, 1 }, /* options for send-proxy-v2 */
Frédéric Lécaille16186232017-03-14 16:42:49 +01001236 { "redir", srv_parse_redir, 1, 1 }, /* Enable redirection mode */
Frédéric Lécaille31045e42017-03-10 16:40:00 +01001237 { "send-proxy", srv_parse_send_proxy, 0, 1 }, /* Enforce use of PROXY V1 protocol */
1238 { "send-proxy-v2", srv_parse_send_proxy_v2, 0, 1 }, /* Enforce use of PROXY V2 protocol */
Frédéric Lécailledfacd692017-04-16 17:14:14 +02001239 { "source", srv_parse_source, -1, 1 }, /* Set the source address to be used to connect to the server */
Frédéric Lécaillef9bc1d62017-03-10 15:50:49 +01001240 { "stick", srv_parse_stick, 0, 1 }, /* Enable stick-table persistence */
Olivier Houchard8d82db72019-07-04 13:34:10 +02001241 { "tfo", srv_parse_tfo, 0, 1 }, /* enable TCP Fast Open of server */
Frédéric Lécaille67e0e612017-03-14 15:21:31 +01001242 { "track", srv_parse_track, 1, 1 }, /* Set the current state of the server, tracking another one */
Alexander Liu2a54bb72019-05-22 19:44:48 +08001243 { "socks4", srv_parse_socks4, 1, 1 }, /* Set the socks4 proxy of the server*/
Willy Tarreaudff55432012-10-10 17:51:05 +02001244 { NULL, NULL, 0 },
1245}};
1246
Willy Tarreau0108d902018-11-25 19:14:37 +01001247INITCALL1(STG_REGISTER, srv_register_keywords, &srv_kws);
Willy Tarreaudff55432012-10-10 17:51:05 +02001248
Willy Tarreau004e0452013-11-21 11:22:01 +01001249/* Recomputes the server's eweight based on its state, uweight, the current time,
Ilya Shipitsinc02a23f2020-05-06 00:53:22 +05001250 * and the proxy's algorithm. To be used after updating sv->uweight. The warmup
Willy Tarreau3ff577e2018-08-02 11:48:52 +02001251 * state is automatically disabled if the time is elapsed. If <must_update> is
1252 * not zero, the update will be propagated immediately.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001253 *
1254 * Must be called with the server lock held.
Willy Tarreau004e0452013-11-21 11:22:01 +01001255 */
Willy Tarreau3ff577e2018-08-02 11:48:52 +02001256void server_recalc_eweight(struct server *sv, int must_update)
Willy Tarreau004e0452013-11-21 11:22:01 +01001257{
1258 struct proxy *px = sv->proxy;
1259 unsigned w;
1260
1261 if (now.tv_sec < sv->last_change || now.tv_sec >= sv->last_change + sv->slowstart) {
1262 /* go to full throttle if the slowstart interval is reached */
Emeric Brun52a91d32017-08-31 14:41:55 +02001263 if (sv->next_state == SRV_ST_STARTING)
1264 sv->next_state = SRV_ST_RUNNING;
Willy Tarreau004e0452013-11-21 11:22:01 +01001265 }
1266
1267 /* We must take care of not pushing the server to full throttle during slow starts.
1268 * It must also start immediately, at least at the minimal step when leaving maintenance.
1269 */
Emeric Brun52a91d32017-08-31 14:41:55 +02001270 if ((sv->next_state == SRV_ST_STARTING) && (px->lbprm.algo & BE_LB_PROP_DYN))
Willy Tarreau004e0452013-11-21 11:22:01 +01001271 w = (px->lbprm.wdiv * (now.tv_sec - sv->last_change) + sv->slowstart) / sv->slowstart;
1272 else
1273 w = px->lbprm.wdiv;
1274
Emeric Brun52a91d32017-08-31 14:41:55 +02001275 sv->next_eweight = (sv->uweight * w + px->lbprm.wmult - 1) / px->lbprm.wmult;
Willy Tarreau004e0452013-11-21 11:22:01 +01001276
Willy Tarreau3ff577e2018-08-02 11:48:52 +02001277 /* propagate changes only if needed (i.e. not recursively) */
Willy Tarreau49725a02018-08-21 19:54:09 +02001278 if (must_update)
Willy Tarreau3ff577e2018-08-02 11:48:52 +02001279 srv_update_status(sv);
Willy Tarreau004e0452013-11-21 11:22:01 +01001280}
1281
Willy Tarreaubaaee002006-06-26 02:48:02 +02001282/*
Simon Horman7d09b9a2013-02-12 10:45:51 +09001283 * Parses weight_str and configures sv accordingly.
1284 * Returns NULL on success, error message string otherwise.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001285 *
1286 * Must be called with the server lock held.
Simon Horman7d09b9a2013-02-12 10:45:51 +09001287 */
1288const char *server_parse_weight_change_request(struct server *sv,
1289 const char *weight_str)
1290{
1291 struct proxy *px;
Simon Hormanb796afa2013-02-12 10:45:53 +09001292 long int w;
1293 char *end;
Simon Horman7d09b9a2013-02-12 10:45:51 +09001294
1295 px = sv->proxy;
1296
1297 /* if the weight is terminated with '%', it is set relative to
1298 * the initial weight, otherwise it is absolute.
1299 */
1300 if (!*weight_str)
1301 return "Require <weight> or <weight%>.\n";
1302
Simon Hormanb796afa2013-02-12 10:45:53 +09001303 w = strtol(weight_str, &end, 10);
1304 if (end == weight_str)
1305 return "Empty weight string empty or preceded by garbage";
1306 else if (end[0] == '%' && end[1] == '\0') {
Simon Horman58b5d292013-02-12 10:45:52 +09001307 if (w < 0)
Simon Horman7d09b9a2013-02-12 10:45:51 +09001308 return "Relative weight must be positive.\n";
Simon Horman58b5d292013-02-12 10:45:52 +09001309 /* Avoid integer overflow */
1310 if (w > 25600)
1311 w = 25600;
Simon Horman7d09b9a2013-02-12 10:45:51 +09001312 w = sv->iweight * w / 100;
Simon Horman58b5d292013-02-12 10:45:52 +09001313 if (w > 256)
1314 w = 256;
Simon Horman7d09b9a2013-02-12 10:45:51 +09001315 }
1316 else if (w < 0 || w > 256)
1317 return "Absolute weight can only be between 0 and 256 inclusive.\n";
Simon Hormanb796afa2013-02-12 10:45:53 +09001318 else if (end[0] != '\0')
1319 return "Trailing garbage in weight string";
Simon Horman7d09b9a2013-02-12 10:45:51 +09001320
1321 if (w && w != sv->iweight && !(px->lbprm.algo & BE_LB_PROP_DYN))
1322 return "Backend is using a static LB algorithm and only accepts weights '0%' and '100%'.\n";
1323
1324 sv->uweight = w;
Willy Tarreau3ff577e2018-08-02 11:48:52 +02001325 server_recalc_eweight(sv, 1);
Simon Horman7d09b9a2013-02-12 10:45:51 +09001326
1327 return NULL;
1328}
1329
Baptiste Assmann3d8f8312015-04-13 22:54:33 +02001330/*
Thierry Fournier09a91782016-02-24 08:25:39 +01001331 * Parses <addr_str> and configures <sv> accordingly. <from> precise
1332 * the source of the change in the associated message log.
Baptiste Assmann3d8f8312015-04-13 22:54:33 +02001333 * Returns:
1334 * - error string on error
1335 * - NULL on success
Willy Tarreau46b7f532018-08-21 11:54:26 +02001336 *
1337 * Must be called with the server lock held.
Baptiste Assmann3d8f8312015-04-13 22:54:33 +02001338 */
1339const char *server_parse_addr_change_request(struct server *sv,
Thierry Fournier09a91782016-02-24 08:25:39 +01001340 const char *addr_str, const char *updater)
Baptiste Assmann3d8f8312015-04-13 22:54:33 +02001341{
1342 unsigned char ip[INET6_ADDRSTRLEN];
1343
1344 if (inet_pton(AF_INET6, addr_str, ip)) {
Thierry Fournier09a91782016-02-24 08:25:39 +01001345 update_server_addr(sv, ip, AF_INET6, updater);
Baptiste Assmann3d8f8312015-04-13 22:54:33 +02001346 return NULL;
1347 }
1348 if (inet_pton(AF_INET, addr_str, ip)) {
Thierry Fournier09a91782016-02-24 08:25:39 +01001349 update_server_addr(sv, ip, AF_INET, updater);
Baptiste Assmann3d8f8312015-04-13 22:54:33 +02001350 return NULL;
1351 }
1352
1353 return "Could not understand IP address format.\n";
1354}
1355
Willy Tarreau46b7f532018-08-21 11:54:26 +02001356/*
1357 * Must be called with the server lock held.
1358 */
Nenad Merdanovic174dd372016-04-24 23:10:06 +02001359const char *server_parse_maxconn_change_request(struct server *sv,
1360 const char *maxconn_str)
1361{
1362 long int v;
1363 char *end;
1364
1365 if (!*maxconn_str)
1366 return "Require <maxconn>.\n";
1367
1368 v = strtol(maxconn_str, &end, 10);
1369 if (end == maxconn_str)
1370 return "maxconn string empty or preceded by garbage";
1371 else if (end[0] != '\0')
1372 return "Trailing garbage in maxconn string";
1373
1374 if (sv->maxconn == sv->minconn) { // static maxconn
1375 sv->maxconn = sv->minconn = v;
1376 } else { // dynamic maxconn
1377 sv->maxconn = v;
1378 }
1379
1380 if (may_dequeue_tasks(sv, sv->proxy))
1381 process_srv_queue(sv);
1382
1383 return NULL;
1384}
1385
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001386#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001387static struct sample_expr *srv_sni_sample_parse_expr(struct server *srv, struct proxy *px,
1388 const char *file, int linenum, char **err)
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001389{
1390 int idx;
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001391 const char *args[] = {
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001392 srv->sni_expr,
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001393 NULL,
1394 };
1395
1396 idx = 0;
Olivier Houchard7d8e6882017-04-20 18:21:17 +02001397 px->conf.args.ctx = ARGC_SRV;
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001398
Willy Tarreaue3b57bf2020-02-14 16:50:14 +01001399 return sample_parse_expr((char **)args, &idx, file, linenum, err, &px->conf.args, NULL);
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001400}
1401
1402static int server_parse_sni_expr(struct server *newsrv, struct proxy *px, char **err)
1403{
1404 struct sample_expr *expr;
1405
1406 expr = srv_sni_sample_parse_expr(newsrv, px, px->conf.file, px->conf.line, err);
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001407 if (!expr) {
1408 memprintf(err, "error detected while parsing sni expression : %s", *err);
1409 return ERR_ALERT | ERR_FATAL;
1410 }
1411
1412 if (!(expr->fetch->val & SMP_VAL_BE_SRV_CON)) {
1413 memprintf(err, "error detected while parsing sni expression : "
1414 " fetch method '%s' extracts information from '%s', "
1415 "none of which is available here.\n",
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001416 newsrv->sni_expr, sample_src_names(expr->fetch->use));
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001417 return ERR_ALERT | ERR_FATAL;
1418 }
1419
1420 px->http_needed |= !!(expr->fetch->use & SMP_USE_HTTP_ANY);
1421 release_sample_expr(newsrv->ssl_ctx.sni);
1422 newsrv->ssl_ctx.sni = expr;
1423
1424 return 0;
1425}
1426#endif
1427
Gaetan Rivet10c4b4a2020-02-11 11:42:38 +01001428static void display_parser_err(const char *file, int linenum, char **args, int cur_arg, int err_code, char **err)
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001429{
Gaetan Rivet10c4b4a2020-02-11 11:42:38 +01001430 char *msg = "error encountered while processing ";
1431 char *quote = "'";
1432 char *token = args[cur_arg];
1433
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001434 if (err && *err) {
1435 indent_msg(err, 2);
Gaetan Rivet10c4b4a2020-02-11 11:42:38 +01001436 msg = *err;
1437 quote = "";
1438 token = "";
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001439 }
Gaetan Rivet10c4b4a2020-02-11 11:42:38 +01001440
1441 if (err_code & ERR_WARN && !(err_code & ERR_ALERT))
1442 ha_warning("parsing [%s:%d] : '%s %s' : %s%s%s%s.\n",
1443 file, linenum, args[0], args[1],
1444 msg, quote, token, quote);
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001445 else
Gaetan Rivet10c4b4a2020-02-11 11:42:38 +01001446 ha_alert("parsing [%s:%d] : '%s %s' : %s%s%s%s.\n",
1447 file, linenum, args[0], args[1],
1448 msg, quote, token, quote);
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001449}
1450
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001451static void srv_conn_src_sport_range_cpy(struct server *srv,
1452 struct server *src)
1453{
1454 int range_sz;
1455
1456 range_sz = src->conn_src.sport_range->size;
1457 if (range_sz > 0) {
1458 srv->conn_src.sport_range = port_range_alloc_range(range_sz);
1459 if (srv->conn_src.sport_range != NULL) {
1460 int i;
1461
1462 for (i = 0; i < range_sz; i++) {
1463 srv->conn_src.sport_range->ports[i] =
1464 src->conn_src.sport_range->ports[i];
1465 }
1466 }
1467 }
1468}
1469
1470/*
1471 * Copy <src> server connection source settings to <srv> server everything needed.
1472 */
1473static void srv_conn_src_cpy(struct server *srv, struct server *src)
1474{
1475 srv->conn_src.opts = src->conn_src.opts;
1476 srv->conn_src.source_addr = src->conn_src.source_addr;
1477
1478 /* Source port range copy. */
1479 if (src->conn_src.sport_range != NULL)
1480 srv_conn_src_sport_range_cpy(srv, src);
1481
1482#ifdef CONFIG_HAP_TRANSPARENT
1483 if (src->conn_src.bind_hdr_name != NULL) {
1484 srv->conn_src.bind_hdr_name = strdup(src->conn_src.bind_hdr_name);
1485 srv->conn_src.bind_hdr_len = strlen(src->conn_src.bind_hdr_name);
1486 }
1487 srv->conn_src.bind_hdr_occ = src->conn_src.bind_hdr_occ;
1488 srv->conn_src.tproxy_addr = src->conn_src.tproxy_addr;
1489#endif
1490 if (src->conn_src.iface_name != NULL)
1491 srv->conn_src.iface_name = strdup(src->conn_src.iface_name);
1492}
1493
1494/*
1495 * Copy <src> server SSL settings to <srv> server allocating
1496 * everything needed.
1497 */
1498#if defined(USE_OPENSSL)
1499static void srv_ssl_settings_cpy(struct server *srv, struct server *src)
1500{
1501 if (src->ssl_ctx.ca_file != NULL)
1502 srv->ssl_ctx.ca_file = strdup(src->ssl_ctx.ca_file);
1503 if (src->ssl_ctx.crl_file != NULL)
1504 srv->ssl_ctx.crl_file = strdup(src->ssl_ctx.crl_file);
1505 if (src->ssl_ctx.client_crt != NULL)
1506 srv->ssl_ctx.client_crt = strdup(src->ssl_ctx.client_crt);
1507
1508 srv->ssl_ctx.verify = src->ssl_ctx.verify;
1509
1510 if (src->ssl_ctx.verify_host != NULL)
1511 srv->ssl_ctx.verify_host = strdup(src->ssl_ctx.verify_host);
1512 if (src->ssl_ctx.ciphers != NULL)
1513 srv->ssl_ctx.ciphers = strdup(src->ssl_ctx.ciphers);
Jerome Magnin2e8d52f2020-04-22 11:40:18 +02001514 if (src->ssl_ctx.options)
1515 srv->ssl_ctx.options = src->ssl_ctx.options;
1516 if (src->ssl_ctx.methods.flags)
1517 srv->ssl_ctx.methods.flags = src->ssl_ctx.methods.flags;
1518 if (src->ssl_ctx.methods.min)
1519 srv->ssl_ctx.methods.min = src->ssl_ctx.methods.min;
1520 if (src->ssl_ctx.methods.max)
1521 srv->ssl_ctx.methods.max = src->ssl_ctx.methods.max;
1522
Willy Tarreau5db847a2019-05-09 14:13:35 +02001523#if (HA_OPENSSL_VERSION_NUMBER >= 0x10101000L && !defined OPENSSL_IS_BORINGSSL)
Dirkjan Bussink415150f2018-09-14 11:14:21 +02001524 if (src->ssl_ctx.ciphersuites != NULL)
1525 srv->ssl_ctx.ciphersuites = strdup(src->ssl_ctx.ciphersuites);
1526#endif
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001527 if (src->sni_expr != NULL)
1528 srv->sni_expr = strdup(src->sni_expr);
Olivier Houchardc7566002018-11-20 23:33:50 +01001529
1530#ifdef TLSEXT_TYPE_application_layer_protocol_negotiation
1531 if (src->ssl_ctx.alpn_str) {
1532 srv->ssl_ctx.alpn_str = malloc(src->ssl_ctx.alpn_len);
1533 if (srv->ssl_ctx.alpn_str) {
1534 memcpy(srv->ssl_ctx.alpn_str, src->ssl_ctx.alpn_str,
1535 src->ssl_ctx.alpn_len);
1536 srv->ssl_ctx.alpn_len = src->ssl_ctx.alpn_len;
1537 }
1538 }
1539#endif
1540#ifdef OPENSSL_NPN_NEGOTIATED
1541 if (src->ssl_ctx.npn_str) {
1542 srv->ssl_ctx.npn_str = malloc(src->ssl_ctx.npn_len);
1543 if (srv->ssl_ctx.npn_str) {
1544 memcpy(srv->ssl_ctx.npn_str, src->ssl_ctx.npn_str,
1545 src->ssl_ctx.npn_len);
1546 srv->ssl_ctx.npn_len = src->ssl_ctx.npn_len;
1547 }
1548 }
1549#endif
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001550}
1551#endif
1552
1553/*
Baptiste Assmann201c07f2017-05-22 15:17:15 +02001554 * Prepare <srv> for hostname resolution.
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001555 * May be safely called with a default server as <src> argument (without hostname).
Frédéric Lécailleb418c122017-04-26 11:24:02 +02001556 * Returns -1 in case of any allocation failure, 0 if not.
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001557 */
Baptiste Assmann201c07f2017-05-22 15:17:15 +02001558static int srv_prepare_for_resolution(struct server *srv, const char *hostname)
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001559{
Christopher Faulet67957bd2017-09-27 11:00:59 +02001560 char *hostname_dn;
1561 int hostname_len, hostname_dn_len;
1562
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001563 if (!hostname)
Frédéric Lécailleb418c122017-04-26 11:24:02 +02001564 return 0;
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001565
Christopher Faulet67957bd2017-09-27 11:00:59 +02001566 hostname_len = strlen(hostname);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02001567 hostname_dn = trash.area;
Christopher Faulet67957bd2017-09-27 11:00:59 +02001568 hostname_dn_len = dns_str_to_dn_label(hostname, hostname_len + 1,
1569 hostname_dn, trash.size);
1570 if (hostname_dn_len == -1)
1571 goto err;
Baptiste Assmann81ed1a02017-05-03 10:11:44 +02001572
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001573
Christopher Faulet67957bd2017-09-27 11:00:59 +02001574 free(srv->hostname);
1575 free(srv->hostname_dn);
1576 srv->hostname = strdup(hostname);
1577 srv->hostname_dn = strdup(hostname_dn);
1578 srv->hostname_dn_len = hostname_dn_len;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02001579 if (!srv->hostname || !srv->hostname_dn)
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001580 goto err;
1581
Frédéric Lécailleb418c122017-04-26 11:24:02 +02001582 return 0;
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001583
1584 err:
Christopher Faulet67957bd2017-09-27 11:00:59 +02001585 free(srv->hostname); srv->hostname = NULL;
1586 free(srv->hostname_dn); srv->hostname_dn = NULL;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02001587 return -1;
1588}
1589
Baptiste Assmann201c07f2017-05-22 15:17:15 +02001590/*
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001591 * Copy <src> server settings to <srv> server allocating
1592 * everything needed.
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001593 * This function is not supposed to be called at any time, but only
1594 * during server settings parsing or during server allocations from
1595 * a server template, and just after having calloc()'ed a new server.
1596 * So, <src> may only be a default server (when parsing server settings)
1597 * or a server template (during server allocations from a server template).
1598 * <srv_tmpl> distinguishes these two cases (must be 1 if <srv> is a template,
1599 * 0 if not).
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001600 */
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001601static void srv_settings_cpy(struct server *srv, struct server *src, int srv_tmpl)
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001602{
1603 /* Connection source settings copy */
1604 srv_conn_src_cpy(srv, src);
1605
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001606 if (srv_tmpl) {
1607 srv->addr = src->addr;
1608 srv->svc_port = src->svc_port;
1609 }
1610
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001611 srv->pp_opts = src->pp_opts;
1612 if (src->rdr_pfx != NULL) {
1613 srv->rdr_pfx = strdup(src->rdr_pfx);
1614 srv->rdr_len = src->rdr_len;
1615 }
1616 if (src->cookie != NULL) {
1617 srv->cookie = strdup(src->cookie);
1618 srv->cklen = src->cklen;
1619 }
1620 srv->use_ssl = src->use_ssl;
Willy Tarreau24441082019-12-11 15:43:45 +01001621 srv->check.addr = src->check.addr;
1622 srv->agent.addr = src->agent.addr;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001623 srv->check.use_ssl = src->check.use_ssl;
1624 srv->check.port = src->check.port;
Olivier Houchard21944012018-12-21 19:42:01 +01001625 srv->check.sni = src->check.sni;
Olivier Houchard92150142018-12-21 19:47:01 +01001626 srv->check.alpn_str = src->check.alpn_str;
Ilya Shipitsin0c50b1e2019-04-30 21:21:28 +05001627 srv->check.alpn_len = src->check.alpn_len;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001628 /* Note: 'flags' field has potentially been already initialized. */
1629 srv->flags |= src->flags;
1630 srv->do_check = src->do_check;
1631 srv->do_agent = src->do_agent;
1632 if (srv->check.port)
1633 srv->flags |= SRV_F_CHECKPORT;
1634 srv->check.inter = src->check.inter;
1635 srv->check.fastinter = src->check.fastinter;
1636 srv->check.downinter = src->check.downinter;
1637 srv->agent.use_ssl = src->agent.use_ssl;
1638 srv->agent.port = src->agent.port;
Christopher Faulet0ae3d1d2020-04-06 17:54:24 +02001639
1640 if (src->agent.tcpcheck_rules) {
1641 srv->agent.tcpcheck_rules = calloc(1, sizeof(*srv->agent.tcpcheck_rules));
1642 if (srv->agent.tcpcheck_rules) {
1643 srv->agent.tcpcheck_rules->flags = src->agent.tcpcheck_rules->flags;
1644 srv->agent.tcpcheck_rules->list = src->agent.tcpcheck_rules->list;
1645 LIST_INIT(&srv->agent.tcpcheck_rules->preset_vars);
1646 dup_tcpcheck_vars(&srv->agent.tcpcheck_rules->preset_vars,
1647 &src->agent.tcpcheck_rules->preset_vars);
1648 }
1649 }
1650
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001651 srv->agent.inter = src->agent.inter;
1652 srv->agent.fastinter = src->agent.fastinter;
1653 srv->agent.downinter = src->agent.downinter;
1654 srv->maxqueue = src->maxqueue;
1655 srv->minconn = src->minconn;
1656 srv->maxconn = src->maxconn;
1657 srv->slowstart = src->slowstart;
1658 srv->observe = src->observe;
1659 srv->onerror = src->onerror;
1660 srv->onmarkeddown = src->onmarkeddown;
1661 srv->onmarkedup = src->onmarkedup;
1662 if (src->trackit != NULL)
1663 srv->trackit = strdup(src->trackit);
1664 srv->consecutive_errors_limit = src->consecutive_errors_limit;
1665 srv->uweight = srv->iweight = src->iweight;
1666
1667 srv->check.send_proxy = src->check.send_proxy;
1668 /* health: up, but will fall down at first failure */
1669 srv->check.rise = srv->check.health = src->check.rise;
1670 srv->check.fall = src->check.fall;
1671
1672 /* Here we check if 'disabled' is the default server state */
Emeric Brun52a91d32017-08-31 14:41:55 +02001673 if (src->next_admin & (SRV_ADMF_CMAINT | SRV_ADMF_FMAINT)) {
1674 srv->next_admin |= SRV_ADMF_CMAINT | SRV_ADMF_FMAINT;
1675 srv->next_state = SRV_ST_STOPPED;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001676 srv->check.state |= CHK_ST_PAUSED;
1677 srv->check.health = 0;
1678 }
1679
1680 /* health: up but will fall down at first failure */
1681 srv->agent.rise = srv->agent.health = src->agent.rise;
1682 srv->agent.fall = src->agent.fall;
1683
1684 if (src->resolvers_id != NULL)
1685 srv->resolvers_id = strdup(src->resolvers_id);
1686 srv->dns_opts.family_prio = src->dns_opts.family_prio;
Baptiste Assmann8e2d9432018-06-22 15:04:43 +02001687 srv->dns_opts.accept_duplicate_ip = src->dns_opts.accept_duplicate_ip;
Daniel Corbettf8716912019-11-17 09:48:56 -05001688 srv->dns_opts.ignore_weight = src->dns_opts.ignore_weight;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001689 if (srv->dns_opts.family_prio == AF_UNSPEC)
1690 srv->dns_opts.family_prio = AF_INET6;
1691 memcpy(srv->dns_opts.pref_net,
1692 src->dns_opts.pref_net,
1693 sizeof srv->dns_opts.pref_net);
1694 srv->dns_opts.pref_net_nb = src->dns_opts.pref_net_nb;
1695
1696 srv->init_addr_methods = src->init_addr_methods;
1697 srv->init_addr = src->init_addr;
1698#if defined(USE_OPENSSL)
1699 srv_ssl_settings_cpy(srv, src);
1700#endif
1701#ifdef TCP_USER_TIMEOUT
1702 srv->tcp_ut = src->tcp_ut;
1703#endif
Christopher Faulet8ed0a3e2018-04-10 14:45:45 +02001704 srv->mux_proto = src->mux_proto;
Olivier Houchardb7b3faa2018-12-14 18:15:36 +01001705 srv->pool_purge_delay = src->pool_purge_delay;
Willy Tarreau2f3f4d32020-07-01 07:43:51 +02001706 srv->low_idle_conns = src->low_idle_conns;
Olivier Houchard006e3102018-12-10 18:30:32 +01001707 srv->max_idle_conns = src->max_idle_conns;
Willy Tarreau9c538e02019-01-23 10:21:49 +01001708 srv->max_reuse = src->max_reuse;
Christopher Faulet8ed0a3e2018-04-10 14:45:45 +02001709
Olivier Houchard8da5f982017-08-04 18:35:36 +02001710 if (srv_tmpl)
1711 srv->srvrq = src->srvrq;
Alexander Liu2a54bb72019-05-22 19:44:48 +08001712
1713 srv->check.via_socks4 = src->check.via_socks4;
1714 srv->socks4_addr = src->socks4_addr;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001715}
1716
William Lallemand313bfd12018-10-26 14:47:32 +02001717struct server *new_server(struct proxy *proxy)
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001718{
1719 struct server *srv;
1720
1721 srv = calloc(1, sizeof *srv);
1722 if (!srv)
1723 return NULL;
1724
1725 srv->obj_type = OBJ_TYPE_SERVER;
1726 srv->proxy = proxy;
1727 LIST_INIT(&srv->actconns);
Patrick Hemmer0355dab2018-05-11 12:52:31 -04001728 srv->pendconns = EB_ROOT;
Christopher Faulet40a007c2017-07-03 15:41:01 +02001729
Emeric Brun52a91d32017-08-31 14:41:55 +02001730 srv->next_state = SRV_ST_RUNNING; /* early server setup */
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001731 srv->last_change = now.tv_sec;
1732
Christopher Faulet38290462020-04-21 11:46:40 +02001733 srv->check.obj_type = OBJ_TYPE_CHECK;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001734 srv->check.status = HCHK_STATUS_INI;
1735 srv->check.server = srv;
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01001736 srv->check.proxy = proxy;
Christopher Faulet5d503fc2020-03-30 20:34:34 +02001737 srv->check.tcpcheck_rules = &proxy->tcpcheck_rules;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001738
Christopher Faulet38290462020-04-21 11:46:40 +02001739 srv->agent.obj_type = OBJ_TYPE_CHECK;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001740 srv->agent.status = HCHK_STATUS_INI;
1741 srv->agent.server = srv;
Willy Tarreau1ba32032019-01-21 07:48:26 +01001742 srv->agent.proxy = proxy;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001743 srv->xprt = srv->check.xprt = srv->agent.xprt = xprt_get(XPRT_RAW);
1744
Willy Tarreau975b1552019-06-06 16:25:55 +02001745 /* please don't put default server settings here, they are set in
1746 * init_default_instance().
1747 */
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001748 return srv;
1749}
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001750
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001751#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
1752static int server_sni_expr_init(const char *file, int linenum, char **args, int cur_arg,
1753 struct server *srv, struct proxy *proxy)
1754{
1755 int ret;
1756 char *err = NULL;
1757
1758 if (!srv->sni_expr)
1759 return 0;
1760
1761 ret = server_parse_sni_expr(srv, proxy, &err);
1762 if (!ret)
1763 return 0;
1764
Gaetan Rivet10c4b4a2020-02-11 11:42:38 +01001765 display_parser_err(file, linenum, args, cur_arg, ret, &err);
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001766 free(err);
1767
1768 return ret;
1769}
1770#endif
1771
1772/*
1773 * Server initializations finalization.
1774 * Initialize health check, agent check and SNI expression if enabled.
1775 * Must not be called for a default server instance.
1776 */
1777static int server_finalize_init(const char *file, int linenum, char **args, int cur_arg,
1778 struct server *srv, struct proxy *px)
1779{
Christopher Fauletb3b53522020-04-27 11:17:10 +02001780#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001781 int ret;
Christopher Fauletb3b53522020-04-27 11:17:10 +02001782#endif
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001783
Christopher Faulet8892e5d2020-03-26 19:48:20 +01001784 if (srv->do_check && srv->trackit) {
1785 ha_alert("parsing [%s:%d]: unable to enable checks and tracking at the same time!\n",
1786 file, linenum);
1787 return ERR_ALERT | ERR_FATAL;
1788 }
1789
1790 if (srv->do_agent && !srv->agent.port) {
1791 ha_alert("parsing [%s:%d] : server %s does not have agent port. Agent check has been disabled.\n",
1792 file, linenum, srv->id);
1793 return ERR_ALERT | ERR_FATAL;
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001794 }
1795
1796#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
1797 if ((ret = server_sni_expr_init(file, linenum, args, cur_arg, srv, px)) != 0)
1798 return ret;
1799#endif
1800
1801 if (srv->flags & SRV_F_BACKUP)
1802 px->srv_bck++;
1803 else
1804 px->srv_act++;
1805 srv_lb_commit_status(srv);
1806
1807 return 0;
1808}
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001809
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001810/*
1811 * Parse as much as possible such a range string argument: low[-high]
1812 * Set <nb_low> and <nb_high> values so that they may be reused by this loop
1813 * for(int i = nb_low; i <= nb_high; i++)... with nb_low >= 1.
1814 * Fails if 'low' < 0 or 'high' is present and not higher than 'low'.
1815 * Returns 0 if succeeded, -1 if not.
1816 */
1817static int srv_tmpl_parse_range(struct server *srv, const char *arg, int *nb_low, int *nb_high)
1818{
1819 char *nb_high_arg;
1820
1821 *nb_high = 0;
1822 chunk_printf(&trash, "%s", arg);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02001823 *nb_low = atoi(trash.area);
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001824
Willy Tarreau843b7cb2018-07-13 10:54:26 +02001825 if ((nb_high_arg = strchr(trash.area, '-'))) {
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001826 *nb_high_arg++ = '\0';
1827 *nb_high = atoi(nb_high_arg);
1828 }
1829 else {
1830 *nb_high += *nb_low;
1831 *nb_low = 1;
1832 }
1833
1834 if (*nb_low < 0 || *nb_high < *nb_low)
1835 return -1;
1836
1837 return 0;
1838}
1839
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001840static inline void srv_set_id_from_prefix(struct server *srv, const char *prefix, int nb)
1841{
1842 chunk_printf(&trash, "%s%d", prefix, nb);
1843 free(srv->id);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02001844 srv->id = strdup(trash.area);
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001845}
1846
1847/*
1848 * Initialize as much as possible servers from <srv> server template.
1849 * Note that a server template is a special server with
1850 * a few different parameters than a server which has
1851 * been parsed mostly the same way as a server.
Joseph Herlant44466822018-11-15 08:57:51 -08001852 * Returns the number of servers successfully allocated,
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001853 * 'srv' template included.
1854 */
1855static int server_template_init(struct server *srv, struct proxy *px)
1856{
1857 int i;
1858 struct server *newsrv;
1859
1860 for (i = srv->tmpl_info.nb_low + 1; i <= srv->tmpl_info.nb_high; i++) {
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001861 newsrv = new_server(px);
1862 if (!newsrv)
1863 goto err;
1864
Christopher Faulet75bef002020-11-02 22:04:55 +01001865 newsrv->conf.file = strdup(srv->conf.file);
1866 newsrv->conf.line = srv->conf.line;
1867
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001868 srv_settings_cpy(newsrv, srv, 1);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02001869 srv_prepare_for_resolution(newsrv, srv->hostname);
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001870#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
1871 if (newsrv->sni_expr) {
1872 newsrv->ssl_ctx.sni = srv_sni_sample_parse_expr(newsrv, px, NULL, 0, NULL);
1873 if (!newsrv->ssl_ctx.sni)
1874 goto err;
1875 }
1876#endif
1877 /* Set this new server ID. */
1878 srv_set_id_from_prefix(newsrv, srv->tmpl_info.prefix, i);
1879
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001880 /* Linked backwards first. This will be restablished after parsing. */
1881 newsrv->next = px->srv;
1882 px->srv = newsrv;
1883 }
1884 srv_set_id_from_prefix(srv, srv->tmpl_info.prefix, srv->tmpl_info.nb_low);
1885
1886 return i - srv->tmpl_info.nb_low;
1887
1888 err:
1889 srv_set_id_from_prefix(srv, srv->tmpl_info.prefix, srv->tmpl_info.nb_low);
1890 if (newsrv) {
1891#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
1892 release_sample_expr(newsrv->ssl_ctx.sni);
1893#endif
1894 free_check(&newsrv->agent);
1895 free_check(&newsrv->check);
1896 }
1897 free(newsrv);
1898 return i - srv->tmpl_info.nb_low;
1899}
1900
Emeric Brund3db3842020-07-21 16:54:36 +02001901int parse_server(const char *file, int linenum, char **args, struct proxy *curproxy,
1902 struct proxy *defproxy, int parse_addr, int in_peers_section, int initial_resolve)
Willy Tarreau272adea2014-03-31 10:39:59 +02001903{
1904 struct server *newsrv = NULL;
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001905 const char *err = NULL;
Willy Tarreau272adea2014-03-31 10:39:59 +02001906 char *errmsg = NULL;
1907 int err_code = 0;
1908 unsigned val;
Willy Tarreau07101d52015-09-08 16:16:35 +02001909 char *fqdn = NULL;
Willy Tarreau272adea2014-03-31 10:39:59 +02001910
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001911 if (!strcmp(args[0], "server") ||
Frédéric Lécaillec06b5d42018-04-26 10:06:41 +02001912 !strcmp(args[0], "peer") ||
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001913 !strcmp(args[0], "default-server") ||
1914 !strcmp(args[0], "server-template")) {
Willy Tarreau272adea2014-03-31 10:39:59 +02001915 int cur_arg;
Frédéric Lécaille6e0843c2017-03-21 16:39:15 +01001916 int defsrv = (*args[0] == 'd');
Frédéric Lécaillec06b5d42018-04-26 10:06:41 +02001917 int srv = !defsrv && (*args[0] == 'p' || !strcmp(args[0], "server"));
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001918 int srv_tmpl = !defsrv && !srv;
1919 int tmpl_range_low = 0, tmpl_range_high = 0;
Willy Tarreau272adea2014-03-31 10:39:59 +02001920
1921 if (!defsrv && curproxy == defproxy) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001922 ha_alert("parsing [%s:%d] : '%s' not allowed in 'defaults' section.\n", file, linenum, args[0]);
Willy Tarreau272adea2014-03-31 10:39:59 +02001923 err_code |= ERR_ALERT | ERR_FATAL;
1924 goto out;
1925 }
1926 else if (warnifnotcap(curproxy, PR_CAP_BE, file, linenum, args[0], NULL))
Olivier Houchard306e6532018-07-24 16:48:59 +02001927 err_code |= ERR_WARN;
Willy Tarreau272adea2014-03-31 10:39:59 +02001928
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001929 /* There is no mandatory first arguments for default server. */
Frédéric Lécaille355b2032019-01-11 14:06:12 +01001930 if (srv && parse_addr) {
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001931 if (!*args[2]) {
Frédéric Lécaille8ba10fe2020-04-03 09:43:47 +02001932 if (in_peers_section) {
1933 return 0;
1934 }
1935 else {
1936 /* 'server' line number of argument check. */
1937 ha_alert("parsing [%s:%d] : '%s' expects <name> and <addr>[:<port>] as arguments.\n",
1938 file, linenum, args[0]);
1939 err_code |= ERR_ALERT | ERR_FATAL;
1940 goto out;
1941 }
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001942 }
1943
1944 err = invalid_char(args[1]);
1945 }
1946 else if (srv_tmpl) {
1947 if (!*args[3]) {
1948 /* 'server-template' line number of argument check. */
Christopher Faulet767a84b2017-11-24 16:50:31 +01001949 ha_alert("parsing [%s:%d] : '%s' expects <prefix> <nb | range> <addr>[:<port>] as arguments.\n",
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001950 file, linenum, args[0]);
1951 err_code |= ERR_ALERT | ERR_FATAL;
1952 goto out;
1953 }
1954
1955 err = invalid_prefix_char(args[1]);
Willy Tarreau272adea2014-03-31 10:39:59 +02001956 }
1957
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001958 if (err) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001959 ha_alert("parsing [%s:%d] : character '%c' is not permitted in %s %s '%s'.\n",
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001960 file, linenum, *err, args[0], srv ? "name" : "prefix", args[1]);
Willy Tarreau272adea2014-03-31 10:39:59 +02001961 err_code |= ERR_ALERT | ERR_FATAL;
1962 goto out;
1963 }
1964
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001965 cur_arg = 2;
1966 if (srv_tmpl) {
1967 /* Parse server-template <nb | range> arg. */
1968 if (srv_tmpl_parse_range(newsrv, args[cur_arg], &tmpl_range_low, &tmpl_range_high) < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001969 ha_alert("parsing [%s:%d] : Wrong %s number or range arg '%s'.\n",
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001970 file, linenum, args[0], args[cur_arg]);
1971 err_code |= ERR_ALERT | ERR_FATAL;
1972 goto out;
1973 }
1974 cur_arg++;
1975 }
1976
Willy Tarreau272adea2014-03-31 10:39:59 +02001977 if (!defsrv) {
1978 struct sockaddr_storage *sk;
Willy Tarreau6ecb10a2017-01-06 18:36:06 +01001979 int port1, port2, port;
Willy Tarreau272adea2014-03-31 10:39:59 +02001980
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001981 newsrv = new_server(curproxy);
1982 if (!newsrv) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001983 ha_alert("parsing [%s:%d] : out of memory.\n", file, linenum);
Willy Tarreau272adea2014-03-31 10:39:59 +02001984 err_code |= ERR_ALERT | ERR_ABORT;
1985 goto out;
1986 }
1987
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001988 if (srv_tmpl) {
1989 newsrv->tmpl_info.nb_low = tmpl_range_low;
1990 newsrv->tmpl_info.nb_high = tmpl_range_high;
1991 }
1992
Willy Tarreau272adea2014-03-31 10:39:59 +02001993 /* the servers are linked backwards first */
1994 newsrv->next = curproxy->srv;
1995 curproxy->srv = newsrv;
Willy Tarreau272adea2014-03-31 10:39:59 +02001996 newsrv->conf.file = strdup(file);
1997 newsrv->conf.line = linenum;
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001998 /* Note: for a server template, its id is its prefix.
1999 * This is a temporary id which will be used for server allocations to come
2000 * after parsing.
2001 */
2002 if (srv)
2003 newsrv->id = strdup(args[1]);
2004 else
2005 newsrv->tmpl_info.prefix = strdup(args[1]);
Willy Tarreau272adea2014-03-31 10:39:59 +02002006
2007 /* several ways to check the port component :
2008 * - IP => port=+0, relative (IPv4 only)
2009 * - IP: => port=+0, relative
2010 * - IP:N => port=N, absolute
2011 * - IP:+N => port=+N, relative
2012 * - IP:-N => port=-N, relative
2013 */
Frédéric Lécaille355b2032019-01-11 14:06:12 +01002014 if (!parse_addr)
2015 goto skip_addr;
2016
Willy Tarreau65ec4e32020-09-16 19:17:08 +02002017 sk = str2sa_range(args[cur_arg], &port, &port1, &port2, NULL, NULL,
2018 &errmsg, NULL, &fqdn,
2019 (initial_resolve ? PA_O_RESOLVE : 0) | PA_O_PORT_OK | PA_O_PORT_OFS | PA_O_STREAM | PA_O_XPRT | PA_O_CONNECT);
Willy Tarreau272adea2014-03-31 10:39:59 +02002020 if (!sk) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002021 ha_alert("parsing [%s:%d] : '%s %s' : %s\n", file, linenum, args[0], args[1], errmsg);
Willy Tarreau272adea2014-03-31 10:39:59 +02002022 err_code |= ERR_ALERT | ERR_FATAL;
2023 goto out;
2024 }
2025
Willy Tarreau272adea2014-03-31 10:39:59 +02002026 if (!port1 || !port2) {
2027 /* no port specified, +offset, -offset */
Willy Tarreauc93cd162014-05-13 15:54:22 +02002028 newsrv->flags |= SRV_F_MAPPORTS;
Willy Tarreau272adea2014-03-31 10:39:59 +02002029 }
Willy Tarreau272adea2014-03-31 10:39:59 +02002030
Baptiste Assmanna68ca962015-04-14 01:15:08 +02002031 /* save hostname and create associated name resolution */
Baptiste Assmann4f91f7e2017-05-03 12:09:54 +02002032 if (fqdn) {
Christopher Faulet67957bd2017-09-27 11:00:59 +02002033 if (fqdn[0] == '_') { /* SRV record */
Olivier Houchard8da5f982017-08-04 18:35:36 +02002034 /* Check if a SRV request already exists, and if not, create it */
Christopher Faulet67957bd2017-09-27 11:00:59 +02002035 if ((newsrv->srvrq = find_srvrq_by_name(fqdn, curproxy)) == NULL)
2036 newsrv->srvrq = new_dns_srvrq(newsrv, fqdn);
2037 if (newsrv->srvrq == NULL) {
Olivier Houchard8da5f982017-08-04 18:35:36 +02002038 err_code |= ERR_ALERT | ERR_FATAL;
2039 goto out;
Christopher Faulet67957bd2017-09-27 11:00:59 +02002040 }
2041 }
2042 else if (srv_prepare_for_resolution(newsrv, fqdn) == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002043 ha_alert("parsing [%s:%d] : Can't create DNS resolution for server '%s'\n",
Christopher Faulet67957bd2017-09-27 11:00:59 +02002044 file, linenum, newsrv->id);
2045 err_code |= ERR_ALERT | ERR_FATAL;
2046 goto out;
Baptiste Assmann4f91f7e2017-05-03 12:09:54 +02002047 }
Baptiste Assmanna68ca962015-04-14 01:15:08 +02002048 }
2049
Willy Tarreau272adea2014-03-31 10:39:59 +02002050 newsrv->addr = *sk;
Willy Tarreau6ecb10a2017-01-06 18:36:06 +01002051 newsrv->svc_port = port;
Willy Tarreau272adea2014-03-31 10:39:59 +02002052
Olivier Houchard8da5f982017-08-04 18:35:36 +02002053 if (!newsrv->srvrq && !newsrv->hostname && !protocol_by_family(newsrv->addr.ss_family)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002054 ha_alert("parsing [%s:%d] : Unknown protocol family %d '%s'\n",
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02002055 file, linenum, newsrv->addr.ss_family, args[cur_arg]);
Willy Tarreau272adea2014-03-31 10:39:59 +02002056 err_code |= ERR_ALERT | ERR_FATAL;
2057 goto out;
2058 }
Frédéric Lécaille5c3cd972017-03-15 16:36:09 +01002059
Frédéric Lécaille355b2032019-01-11 14:06:12 +01002060 cur_arg++;
2061 skip_addr:
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002062 /* Copy default server settings to new server settings. */
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002063 srv_settings_cpy(newsrv, &curproxy->defsrv, 0);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01002064 HA_SPIN_INIT(&newsrv->lock);
Willy Tarreau272adea2014-03-31 10:39:59 +02002065 } else {
2066 newsrv = &curproxy->defsrv;
2067 cur_arg = 1;
Thierry Fournierada34842016-02-17 21:25:09 +01002068 newsrv->dns_opts.family_prio = AF_INET6;
Baptiste Assmann8e2d9432018-06-22 15:04:43 +02002069 newsrv->dns_opts.accept_duplicate_ip = 0;
Willy Tarreau272adea2014-03-31 10:39:59 +02002070 }
2071
2072 while (*args[cur_arg]) {
Christopher Fauletcbba66c2020-04-06 14:26:30 +02002073 if (!strcmp(args[cur_arg], "init-addr")) {
Baptiste Assmann25938272016-09-21 20:26:16 +02002074 char *p, *end;
2075 int done;
Willy Tarreau4310d362016-11-02 15:05:56 +01002076 struct sockaddr_storage sa;
Baptiste Assmann25938272016-09-21 20:26:16 +02002077
2078 newsrv->init_addr_methods = 0;
2079 memset(&newsrv->init_addr, 0, sizeof(newsrv->init_addr));
2080
2081 for (p = args[cur_arg + 1]; *p; p = end) {
2082 /* cut on next comma */
2083 for (end = p; *end && *end != ','; end++);
2084 if (*end)
2085 *(end++) = 0;
2086
Willy Tarreau4310d362016-11-02 15:05:56 +01002087 memset(&sa, 0, sizeof(sa));
Baptiste Assmann25938272016-09-21 20:26:16 +02002088 if (!strcmp(p, "libc")) {
2089 done = srv_append_initaddr(&newsrv->init_addr_methods, SRV_IADDR_LIBC);
2090 }
2091 else if (!strcmp(p, "last")) {
2092 done = srv_append_initaddr(&newsrv->init_addr_methods, SRV_IADDR_LAST);
2093 }
Willy Tarreau37ebe122016-11-04 15:17:58 +01002094 else if (!strcmp(p, "none")) {
2095 done = srv_append_initaddr(&newsrv->init_addr_methods, SRV_IADDR_NONE);
2096 }
Willy Tarreau4310d362016-11-02 15:05:56 +01002097 else if (str2ip2(p, &sa, 0)) {
2098 if (is_addr(&newsrv->init_addr)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002099 ha_alert("parsing [%s:%d]: '%s' : initial address already specified, cannot add '%s'.\n",
Willy Tarreau4310d362016-11-02 15:05:56 +01002100 file, linenum, args[cur_arg], p);
2101 err_code |= ERR_ALERT | ERR_FATAL;
2102 goto out;
2103 }
2104 newsrv->init_addr = sa;
2105 done = srv_append_initaddr(&newsrv->init_addr_methods, SRV_IADDR_IP);
2106 }
Baptiste Assmann25938272016-09-21 20:26:16 +02002107 else {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002108 ha_alert("parsing [%s:%d]: '%s' : unknown init-addr method '%s', supported methods are 'libc', 'last', 'none'.\n",
Baptiste Assmann25938272016-09-21 20:26:16 +02002109 file, linenum, args[cur_arg], p);
2110 err_code |= ERR_ALERT | ERR_FATAL;
2111 goto out;
2112 }
2113 if (!done) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002114 ha_alert("parsing [%s:%d]: '%s' : too many init-addr methods when trying to add '%s'\n",
Baptiste Assmann25938272016-09-21 20:26:16 +02002115 file, linenum, args[cur_arg], p);
2116 err_code |= ERR_ALERT | ERR_FATAL;
2117 goto out;
2118 }
2119 }
2120 cur_arg += 2;
2121 }
Baptiste Assmanna68ca962015-04-14 01:15:08 +02002122 else if (!strcmp(args[cur_arg], "resolvers")) {
Frédéric Lécailledaa2fe62017-04-20 12:17:50 +02002123 free(newsrv->resolvers_id);
Baptiste Assmanna68ca962015-04-14 01:15:08 +02002124 newsrv->resolvers_id = strdup(args[cur_arg + 1]);
2125 cur_arg += 2;
2126 }
Baptiste Assmann8e2d9432018-06-22 15:04:43 +02002127 else if (!strcmp(args[cur_arg], "resolve-opts")) {
2128 char *p, *end;
2129
2130 for (p = args[cur_arg + 1]; *p; p = end) {
2131 /* cut on next comma */
2132 for (end = p; *end && *end != ','; end++);
2133 if (*end)
2134 *(end++) = 0;
2135
2136 if (!strcmp(p, "allow-dup-ip")) {
2137 newsrv->dns_opts.accept_duplicate_ip = 1;
2138 }
Daniel Corbettf8716912019-11-17 09:48:56 -05002139 else if (!strcmp(p, "ignore-weight")) {
2140 newsrv->dns_opts.ignore_weight = 1;
2141 }
Baptiste Assmann8e2d9432018-06-22 15:04:43 +02002142 else if (!strcmp(p, "prevent-dup-ip")) {
2143 newsrv->dns_opts.accept_duplicate_ip = 0;
2144 }
2145 else {
Daniel Corbettf8716912019-11-17 09:48:56 -05002146 ha_alert("parsing [%s:%d]: '%s' : unknown resolve-opts option '%s', supported methods are 'allow-dup-ip', 'ignore-weight', and 'prevent-dup-ip'.\n",
Baptiste Assmann8e2d9432018-06-22 15:04:43 +02002147 file, linenum, args[cur_arg], p);
2148 err_code |= ERR_ALERT | ERR_FATAL;
2149 goto out;
2150 }
2151 }
2152
2153 cur_arg += 2;
2154 }
Baptiste Assmanna68ca962015-04-14 01:15:08 +02002155 else if (!strcmp(args[cur_arg], "resolve-prefer")) {
2156 if (!strcmp(args[cur_arg + 1], "ipv4"))
Thierry Fournierada34842016-02-17 21:25:09 +01002157 newsrv->dns_opts.family_prio = AF_INET;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02002158 else if (!strcmp(args[cur_arg + 1], "ipv6"))
Thierry Fournierada34842016-02-17 21:25:09 +01002159 newsrv->dns_opts.family_prio = AF_INET6;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02002160 else {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002161 ha_alert("parsing [%s:%d]: '%s' expects either ipv4 or ipv6 as argument.\n",
Baptiste Assmanna68ca962015-04-14 01:15:08 +02002162 file, linenum, args[cur_arg]);
2163 err_code |= ERR_ALERT | ERR_FATAL;
2164 goto out;
2165 }
2166 cur_arg += 2;
2167 }
Thierry Fournierac88cfe2016-02-17 22:05:30 +01002168 else if (!strcmp(args[cur_arg], "resolve-net")) {
2169 char *p, *e;
2170 unsigned char mask;
2171 struct dns_options *opt;
2172
2173 if (!args[cur_arg + 1] || args[cur_arg + 1][0] == '\0') {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002174 ha_alert("parsing [%s:%d]: '%s' expects a list of networks.\n",
Thierry Fournierac88cfe2016-02-17 22:05:30 +01002175 file, linenum, args[cur_arg]);
2176 err_code |= ERR_ALERT | ERR_FATAL;
2177 goto out;
2178 }
2179
2180 opt = &newsrv->dns_opts;
2181
2182 /* Split arguments by comma, and convert it from ipv4 or ipv6
2183 * string network in in_addr or in6_addr.
2184 */
2185 p = args[cur_arg + 1];
2186 e = p;
2187 while (*p != '\0') {
Joseph Herlant44466822018-11-15 08:57:51 -08002188 /* If no room available, return error. */
David Carlierd10025c2016-04-08 10:26:44 +01002189 if (opt->pref_net_nb >= SRV_MAX_PREF_NET) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002190 ha_alert("parsing [%s:%d]: '%s' exceed %d networks.\n",
Thierry Fournierac88cfe2016-02-17 22:05:30 +01002191 file, linenum, args[cur_arg], SRV_MAX_PREF_NET);
2192 err_code |= ERR_ALERT | ERR_FATAL;
2193 goto out;
2194 }
2195 /* look for end or comma. */
2196 while (*e != ',' && *e != '\0')
2197 e++;
2198 if (*e == ',') {
2199 *e = '\0';
2200 e++;
2201 }
2202 if (str2net(p, 0, &opt->pref_net[opt->pref_net_nb].addr.in4,
2203 &opt->pref_net[opt->pref_net_nb].mask.in4)) {
2204 /* Try to convert input string from ipv4 or ipv6 network. */
2205 opt->pref_net[opt->pref_net_nb].family = AF_INET;
2206 } else if (str62net(p, &opt->pref_net[opt->pref_net_nb].addr.in6,
2207 &mask)) {
2208 /* Try to convert input string from ipv6 network. */
2209 len2mask6(mask, &opt->pref_net[opt->pref_net_nb].mask.in6);
2210 opt->pref_net[opt->pref_net_nb].family = AF_INET6;
2211 } else {
Ilya Shipitsinc02a23f2020-05-06 00:53:22 +05002212 /* All network conversions fail, return error. */
Christopher Faulet767a84b2017-11-24 16:50:31 +01002213 ha_alert("parsing [%s:%d]: '%s': invalid network '%s'.\n",
Thierry Fournierac88cfe2016-02-17 22:05:30 +01002214 file, linenum, args[cur_arg], p);
2215 err_code |= ERR_ALERT | ERR_FATAL;
2216 goto out;
2217 }
2218 opt->pref_net_nb++;
2219 p = e;
2220 }
2221
2222 cur_arg += 2;
2223 }
Willy Tarreau272adea2014-03-31 10:39:59 +02002224 else if (!strcmp(args[cur_arg], "weight")) {
2225 int w;
2226 w = atol(args[cur_arg + 1]);
2227 if (w < 0 || w > SRV_UWGHT_MAX) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002228 ha_alert("parsing [%s:%d] : weight of server %s is not within 0 and %d (%d).\n",
Willy Tarreau272adea2014-03-31 10:39:59 +02002229 file, linenum, newsrv->id, SRV_UWGHT_MAX, w);
2230 err_code |= ERR_ALERT | ERR_FATAL;
2231 goto out;
2232 }
2233 newsrv->uweight = newsrv->iweight = w;
2234 cur_arg += 2;
2235 }
Emeric Brun97556472020-05-30 01:42:45 +02002236 else if (!strcmp(args[cur_arg], "log-proto")) {
2237 if (!strcmp(args[cur_arg + 1], "legacy"))
2238 newsrv->log_proto = SRV_LOG_PROTO_LEGACY;
2239 else if (!strcmp(args[cur_arg + 1], "octet-count"))
2240 newsrv->log_proto = SRV_LOG_PROTO_OCTET_COUNTING;
2241 else {
2242 ha_alert("parsing [%s:%d]: '%s' expects one of 'legacy' or "
2243 "'octet-count' but got '%s'\n",
2244 file, linenum, args[cur_arg], args[cur_arg + 1]);
2245 err_code |= ERR_ALERT | ERR_FATAL;
2246 goto out;
2247 }
2248 cur_arg += 2;
2249 }
Willy Tarreau272adea2014-03-31 10:39:59 +02002250 else if (!strcmp(args[cur_arg], "minconn")) {
2251 newsrv->minconn = atol(args[cur_arg + 1]);
2252 cur_arg += 2;
2253 }
2254 else if (!strcmp(args[cur_arg], "maxconn")) {
2255 newsrv->maxconn = atol(args[cur_arg + 1]);
2256 cur_arg += 2;
2257 }
2258 else if (!strcmp(args[cur_arg], "maxqueue")) {
2259 newsrv->maxqueue = atol(args[cur_arg + 1]);
2260 cur_arg += 2;
2261 }
2262 else if (!strcmp(args[cur_arg], "slowstart")) {
2263 /* slowstart is stored in seconds */
2264 const char *err = parse_time_err(args[cur_arg + 1], &val, TIME_UNIT_MS);
Willy Tarreau9faebe32019-06-07 19:00:37 +02002265
2266 if (err == PARSE_TIME_OVER) {
2267 ha_alert("parsing [%s:%d]: timer overflow in argument <%s> to <%s> of server %s, maximum value is 2147483647 ms (~24.8 days).\n",
2268 file, linenum, args[cur_arg+1], args[cur_arg], newsrv->id);
2269 err_code |= ERR_ALERT | ERR_FATAL;
2270 goto out;
2271 }
2272 else if (err == PARSE_TIME_UNDER) {
2273 ha_alert("parsing [%s:%d]: timer underflow in argument <%s> to <%s> of server %s, minimum non-null value is 1 ms.\n",
2274 file, linenum, args[cur_arg+1], args[cur_arg], newsrv->id);
2275 err_code |= ERR_ALERT | ERR_FATAL;
2276 goto out;
2277 }
2278 else if (err) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002279 ha_alert("parsing [%s:%d] : unexpected character '%c' in 'slowstart' argument of server %s.\n",
Willy Tarreau272adea2014-03-31 10:39:59 +02002280 file, linenum, *err, newsrv->id);
2281 err_code |= ERR_ALERT | ERR_FATAL;
2282 goto out;
2283 }
2284 newsrv->slowstart = (val + 999) / 1000;
2285 cur_arg += 2;
2286 }
Willy Tarreau272adea2014-03-31 10:39:59 +02002287 else if (!strcmp(args[cur_arg], "on-error")) {
2288 if (!strcmp(args[cur_arg + 1], "fastinter"))
2289 newsrv->onerror = HANA_ONERR_FASTINTER;
2290 else if (!strcmp(args[cur_arg + 1], "fail-check"))
2291 newsrv->onerror = HANA_ONERR_FAILCHK;
2292 else if (!strcmp(args[cur_arg + 1], "sudden-death"))
2293 newsrv->onerror = HANA_ONERR_SUDDTH;
2294 else if (!strcmp(args[cur_arg + 1], "mark-down"))
2295 newsrv->onerror = HANA_ONERR_MARKDWN;
2296 else {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002297 ha_alert("parsing [%s:%d]: '%s' expects one of 'fastinter', "
Willy Tarreau272adea2014-03-31 10:39:59 +02002298 "'fail-check', 'sudden-death' or 'mark-down' but got '%s'\n",
2299 file, linenum, args[cur_arg], args[cur_arg + 1]);
2300 err_code |= ERR_ALERT | ERR_FATAL;
2301 goto out;
2302 }
2303
2304 cur_arg += 2;
2305 }
2306 else if (!strcmp(args[cur_arg], "on-marked-down")) {
2307 if (!strcmp(args[cur_arg + 1], "shutdown-sessions"))
2308 newsrv->onmarkeddown = HANA_ONMARKEDDOWN_SHUTDOWNSESSIONS;
2309 else {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002310 ha_alert("parsing [%s:%d]: '%s' expects 'shutdown-sessions' but got '%s'\n",
Willy Tarreau272adea2014-03-31 10:39:59 +02002311 file, linenum, args[cur_arg], args[cur_arg + 1]);
2312 err_code |= ERR_ALERT | ERR_FATAL;
2313 goto out;
2314 }
2315
2316 cur_arg += 2;
2317 }
2318 else if (!strcmp(args[cur_arg], "on-marked-up")) {
2319 if (!strcmp(args[cur_arg + 1], "shutdown-backup-sessions"))
2320 newsrv->onmarkedup = HANA_ONMARKEDUP_SHUTDOWNBACKUPSESSIONS;
2321 else {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002322 ha_alert("parsing [%s:%d]: '%s' expects 'shutdown-backup-sessions' but got '%s'\n",
Willy Tarreau272adea2014-03-31 10:39:59 +02002323 file, linenum, args[cur_arg], args[cur_arg + 1]);
2324 err_code |= ERR_ALERT | ERR_FATAL;
2325 goto out;
2326 }
2327
2328 cur_arg += 2;
2329 }
2330 else if (!strcmp(args[cur_arg], "error-limit")) {
2331 if (!*args[cur_arg + 1]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002332 ha_alert("parsing [%s:%d]: '%s' expects an integer argument.\n",
Willy Tarreau272adea2014-03-31 10:39:59 +02002333 file, linenum, args[cur_arg]);
2334 err_code |= ERR_ALERT | ERR_FATAL;
2335 goto out;
2336 }
2337
2338 newsrv->consecutive_errors_limit = atoi(args[cur_arg + 1]);
2339
2340 if (newsrv->consecutive_errors_limit <= 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002341 ha_alert("parsing [%s:%d]: %s has to be > 0.\n",
Willy Tarreau272adea2014-03-31 10:39:59 +02002342 file, linenum, args[cur_arg]);
2343 err_code |= ERR_ALERT | ERR_FATAL;
2344 goto out;
2345 }
2346 cur_arg += 2;
2347 }
Frédéric Lécaille8d083ed2017-04-14 15:19:56 +02002348 else if (!strcmp(args[cur_arg], "usesrc")) { /* address to use outside: needs "source" first */
Christopher Faulet767a84b2017-11-24 16:50:31 +01002349 ha_alert("parsing [%s:%d] : '%s' only allowed after a '%s' statement.\n",
Willy Tarreau272adea2014-03-31 10:39:59 +02002350 file, linenum, "usesrc", "source");
2351 err_code |= ERR_ALERT | ERR_FATAL;
2352 goto out;
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +01002353 }
Willy Tarreau272adea2014-03-31 10:39:59 +02002354 else {
2355 static int srv_dumped;
2356 struct srv_kw *kw;
2357 char *err;
2358
2359 kw = srv_find_kw(args[cur_arg]);
2360 if (kw) {
2361 char *err = NULL;
2362 int code;
2363
2364 if (!kw->parse) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002365 ha_alert("parsing [%s:%d] : '%s %s' : '%s' option is not implemented in this version (check build options).\n",
Willy Tarreau272adea2014-03-31 10:39:59 +02002366 file, linenum, args[0], args[1], args[cur_arg]);
Frédéric Lécailledfacd692017-04-16 17:14:14 +02002367 if (kw->skip != -1)
2368 cur_arg += 1 + kw->skip ;
Willy Tarreau272adea2014-03-31 10:39:59 +02002369 err_code |= ERR_ALERT | ERR_FATAL;
2370 goto out;
2371 }
2372
2373 if (defsrv && !kw->default_ok) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002374 ha_alert("parsing [%s:%d] : '%s %s' : '%s' option is not accepted in default-server sections.\n",
Willy Tarreau272adea2014-03-31 10:39:59 +02002375 file, linenum, args[0], args[1], args[cur_arg]);
Frédéric Lécailledfacd692017-04-16 17:14:14 +02002376 if (kw->skip != -1)
2377 cur_arg += 1 + kw->skip ;
Willy Tarreau272adea2014-03-31 10:39:59 +02002378 err_code |= ERR_ALERT;
2379 continue;
2380 }
2381
2382 code = kw->parse(args, &cur_arg, curproxy, newsrv, &err);
2383 err_code |= code;
2384
2385 if (code) {
Gaetan Rivet10c4b4a2020-02-11 11:42:38 +01002386 display_parser_err(file, linenum, args, cur_arg, code, &err);
Willy Tarreau272adea2014-03-31 10:39:59 +02002387 if (code & ERR_FATAL) {
2388 free(err);
Frédéric Lécailledfacd692017-04-16 17:14:14 +02002389 if (kw->skip != -1)
2390 cur_arg += 1 + kw->skip;
Willy Tarreau272adea2014-03-31 10:39:59 +02002391 goto out;
2392 }
2393 }
2394 free(err);
Frédéric Lécailledfacd692017-04-16 17:14:14 +02002395 if (kw->skip != -1)
2396 cur_arg += 1 + kw->skip;
Willy Tarreau272adea2014-03-31 10:39:59 +02002397 continue;
2398 }
2399
2400 err = NULL;
2401 if (!srv_dumped) {
2402 srv_dump_kws(&err);
2403 indent_msg(&err, 4);
2404 srv_dumped = 1;
2405 }
2406
Christopher Faulet767a84b2017-11-24 16:50:31 +01002407 ha_alert("parsing [%s:%d] : '%s %s' unknown keyword '%s'.%s%s\n",
Willy Tarreau272adea2014-03-31 10:39:59 +02002408 file, linenum, args[0], args[1], args[cur_arg],
2409 err ? " Registered keywords :" : "", err ? err : "");
2410 free(err);
2411
2412 err_code |= ERR_ALERT | ERR_FATAL;
2413 goto out;
2414 }
2415 }
2416
Frédéric Lécaille759ea982017-03-30 17:32:36 +02002417 if (!defsrv)
2418 err_code |= server_finalize_init(file, linenum, args, cur_arg, newsrv, curproxy);
2419 if (err_code & ERR_FATAL)
2420 goto out;
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002421 if (srv_tmpl)
2422 server_template_init(newsrv, curproxy);
Willy Tarreau272adea2014-03-31 10:39:59 +02002423 }
Willy Tarreau07101d52015-09-08 16:16:35 +02002424 free(fqdn);
Willy Tarreau272adea2014-03-31 10:39:59 +02002425 return 0;
2426
2427 out:
Willy Tarreau07101d52015-09-08 16:16:35 +02002428 free(fqdn);
Willy Tarreau272adea2014-03-31 10:39:59 +02002429 free(errmsg);
2430 return err_code;
2431}
2432
Baptiste Assmann19a106d2015-07-08 22:03:56 +02002433/* Returns a pointer to the first server matching either id <id>.
2434 * NULL is returned if no match is found.
2435 * the lookup is performed in the backend <bk>
2436 */
2437struct server *server_find_by_id(struct proxy *bk, int id)
2438{
2439 struct eb32_node *eb32;
2440 struct server *curserver;
2441
2442 if (!bk || (id ==0))
2443 return NULL;
2444
2445 /* <bk> has no backend capabilities, so it can't have a server */
2446 if (!(bk->cap & PR_CAP_BE))
2447 return NULL;
2448
2449 curserver = NULL;
2450
2451 eb32 = eb32_lookup(&bk->conf.used_server_id, id);
2452 if (eb32)
2453 curserver = container_of(eb32, struct server, conf.id);
2454
2455 return curserver;
2456}
2457
2458/* Returns a pointer to the first server matching either name <name>, or id
2459 * if <name> starts with a '#'. NULL is returned if no match is found.
2460 * the lookup is performed in the backend <bk>
2461 */
2462struct server *server_find_by_name(struct proxy *bk, const char *name)
2463{
2464 struct server *curserver;
2465
2466 if (!bk || !name)
2467 return NULL;
2468
2469 /* <bk> has no backend capabilities, so it can't have a server */
2470 if (!(bk->cap & PR_CAP_BE))
2471 return NULL;
2472
2473 curserver = NULL;
2474 if (*name == '#') {
2475 curserver = server_find_by_id(bk, atoi(name + 1));
2476 if (curserver)
2477 return curserver;
2478 }
2479 else {
2480 curserver = bk->srv;
2481
2482 while (curserver && (strcmp(curserver->id, name) != 0))
2483 curserver = curserver->next;
2484
2485 if (curserver)
2486 return curserver;
2487 }
2488
2489 return NULL;
2490}
2491
2492struct server *server_find_best_match(struct proxy *bk, char *name, int id, int *diff)
2493{
2494 struct server *byname;
2495 struct server *byid;
2496
2497 if (!name && !id)
2498 return NULL;
2499
2500 if (diff)
2501 *diff = 0;
2502
2503 byname = byid = NULL;
2504
2505 if (name) {
2506 byname = server_find_by_name(bk, name);
2507 if (byname && (!id || byname->puid == id))
2508 return byname;
2509 }
2510
2511 /* remaining possibilities :
2512 * - name not set
2513 * - name set but not found
2514 * - name found but ID doesn't match
2515 */
2516 if (id) {
2517 byid = server_find_by_id(bk, id);
2518 if (byid) {
2519 if (byname) {
2520 /* use id only if forced by configuration */
2521 if (byid->flags & SRV_F_FORCED_ID) {
2522 if (diff)
2523 *diff |= 2;
2524 return byid;
2525 }
2526 else {
2527 if (diff)
2528 *diff |= 1;
2529 return byname;
2530 }
2531 }
2532
2533 /* remaining possibilities:
2534 * - name not set
2535 * - name set but not found
2536 */
2537 if (name && diff)
2538 *diff |= 2;
2539 return byid;
2540 }
2541
2542 /* id bot found */
2543 if (byname) {
2544 if (diff)
2545 *diff |= 1;
2546 return byname;
2547 }
2548 }
2549
2550 return NULL;
2551}
2552
Willy Tarreau46b7f532018-08-21 11:54:26 +02002553/* Update a server state using the parameters available in the params list.
2554 *
2555 * Grabs the server lock during operation.
2556 */
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002557static void srv_update_state(struct server *srv, int version, char **params)
2558{
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002559 char *p;
Willy Tarreau83061a82018-07-13 11:56:34 +02002560 struct buffer *msg;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002561
2562 /* fields since version 1
2563 * and common to all other upcoming versions
2564 */
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002565 enum srv_state srv_op_state;
2566 enum srv_admin srv_admin_state;
2567 unsigned srv_uweight, srv_iweight;
2568 unsigned long srv_last_time_change;
2569 short srv_check_status;
2570 enum chk_result srv_check_result;
2571 int srv_check_health;
2572 int srv_check_state, srv_agent_state;
2573 int bk_f_forced_id;
2574 int srv_f_forced_id;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002575 int fqdn_set_by_cli;
2576 const char *fqdn;
Frédéric Lécaille31694712017-08-01 08:47:19 +02002577 const char *port_str;
2578 unsigned int port;
Baptiste Assmann6d0f38f2018-07-02 17:00:54 +02002579 char *srvrecord;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002580
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002581 fqdn = NULL;
Frédéric Lécaille31694712017-08-01 08:47:19 +02002582 port = 0;
Willy Tarreau31138fa2015-09-29 18:38:47 +02002583 msg = get_trash_chunk();
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002584 switch (version) {
2585 case 1:
2586 /*
2587 * now we can proceed with server's state update:
2588 * srv_addr: params[0]
2589 * srv_op_state: params[1]
2590 * srv_admin_state: params[2]
2591 * srv_uweight: params[3]
2592 * srv_iweight: params[4]
2593 * srv_last_time_change: params[5]
2594 * srv_check_status: params[6]
2595 * srv_check_result: params[7]
2596 * srv_check_health: params[8]
2597 * srv_check_state: params[9]
2598 * srv_agent_state: params[10]
2599 * bk_f_forced_id: params[11]
2600 * srv_f_forced_id: params[12]
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002601 * srv_fqdn: params[13]
Frédéric Lécaille31694712017-08-01 08:47:19 +02002602 * srv_port: params[14]
Baptiste Assmann6d0f38f2018-07-02 17:00:54 +02002603 * srvrecord: params[15]
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002604 */
2605
2606 /* validating srv_op_state */
2607 p = NULL;
2608 errno = 0;
2609 srv_op_state = strtol(params[1], &p, 10);
2610 if ((p == params[1]) || errno == EINVAL || errno == ERANGE ||
2611 (srv_op_state != SRV_ST_STOPPED &&
2612 srv_op_state != SRV_ST_STARTING &&
2613 srv_op_state != SRV_ST_RUNNING &&
2614 srv_op_state != SRV_ST_STOPPING)) {
2615 chunk_appendf(msg, ", invalid srv_op_state value '%s'", params[1]);
2616 }
2617
2618 /* validating srv_admin_state */
2619 p = NULL;
2620 errno = 0;
2621 srv_admin_state = strtol(params[2], &p, 10);
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002622 fqdn_set_by_cli = !!(srv_admin_state & SRV_ADMF_HMAINT);
Willy Tarreau757478e2016-11-03 19:22:19 +01002623
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002624 /* inherited statuses will be recomputed later.
2625 * Also disable SRV_ADMF_HMAINT flag (set from stats socket fqdn).
2626 */
2627 srv_admin_state &= ~SRV_ADMF_IDRAIN & ~SRV_ADMF_IMAINT & ~SRV_ADMF_HMAINT;
Willy Tarreau757478e2016-11-03 19:22:19 +01002628
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002629 if ((p == params[2]) || errno == EINVAL || errno == ERANGE ||
2630 (srv_admin_state != 0 &&
2631 srv_admin_state != SRV_ADMF_FMAINT &&
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002632 srv_admin_state != SRV_ADMF_CMAINT &&
2633 srv_admin_state != (SRV_ADMF_CMAINT | SRV_ADMF_FMAINT) &&
Willy Tarreaue1bde142016-11-03 18:33:25 +01002634 srv_admin_state != (SRV_ADMF_CMAINT | SRV_ADMF_FDRAIN) &&
Willy Tarreau757478e2016-11-03 19:22:19 +01002635 srv_admin_state != SRV_ADMF_FDRAIN)) {
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002636 chunk_appendf(msg, ", invalid srv_admin_state value '%s'", params[2]);
2637 }
2638
2639 /* validating srv_uweight */
2640 p = NULL;
2641 errno = 0;
2642 srv_uweight = strtol(params[3], &p, 10);
Willy Tarreaue1aebb22015-09-29 18:32:57 +02002643 if ((p == params[3]) || errno == EINVAL || errno == ERANGE || (srv_uweight > SRV_UWGHT_MAX))
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002644 chunk_appendf(msg, ", invalid srv_uweight value '%s'", params[3]);
2645
2646 /* validating srv_iweight */
2647 p = NULL;
2648 errno = 0;
2649 srv_iweight = strtol(params[4], &p, 10);
Willy Tarreaue1aebb22015-09-29 18:32:57 +02002650 if ((p == params[4]) || errno == EINVAL || errno == ERANGE || (srv_iweight > SRV_UWGHT_MAX))
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002651 chunk_appendf(msg, ", invalid srv_iweight value '%s'", params[4]);
2652
2653 /* validating srv_last_time_change */
2654 p = NULL;
2655 errno = 0;
2656 srv_last_time_change = strtol(params[5], &p, 10);
2657 if ((p == params[5]) || errno == EINVAL || errno == ERANGE)
2658 chunk_appendf(msg, ", invalid srv_last_time_change value '%s'", params[5]);
2659
2660 /* validating srv_check_status */
2661 p = NULL;
2662 errno = 0;
2663 srv_check_status = strtol(params[6], &p, 10);
2664 if (p == params[6] || errno == EINVAL || errno == ERANGE ||
2665 (srv_check_status >= HCHK_STATUS_SIZE))
2666 chunk_appendf(msg, ", invalid srv_check_status value '%s'", params[6]);
2667
2668 /* validating srv_check_result */
2669 p = NULL;
2670 errno = 0;
2671 srv_check_result = strtol(params[7], &p, 10);
2672 if ((p == params[7]) || errno == EINVAL || errno == ERANGE ||
2673 (srv_check_result != CHK_RES_UNKNOWN &&
2674 srv_check_result != CHK_RES_NEUTRAL &&
2675 srv_check_result != CHK_RES_FAILED &&
2676 srv_check_result != CHK_RES_PASSED &&
2677 srv_check_result != CHK_RES_CONDPASS)) {
2678 chunk_appendf(msg, ", invalid srv_check_result value '%s'", params[7]);
2679 }
2680
2681 /* validating srv_check_health */
2682 p = NULL;
2683 errno = 0;
2684 srv_check_health = strtol(params[8], &p, 10);
2685 if (p == params[8] || errno == EINVAL || errno == ERANGE)
2686 chunk_appendf(msg, ", invalid srv_check_health value '%s'", params[8]);
2687
2688 /* validating srv_check_state */
2689 p = NULL;
2690 errno = 0;
2691 srv_check_state = strtol(params[9], &p, 10);
2692 if (p == params[9] || errno == EINVAL || errno == ERANGE ||
2693 (srv_check_state & ~(CHK_ST_INPROGRESS | CHK_ST_CONFIGURED | CHK_ST_ENABLED | CHK_ST_PAUSED | CHK_ST_AGENT)))
2694 chunk_appendf(msg, ", invalid srv_check_state value '%s'", params[9]);
2695
2696 /* validating srv_agent_state */
2697 p = NULL;
2698 errno = 0;
2699 srv_agent_state = strtol(params[10], &p, 10);
2700 if (p == params[10] || errno == EINVAL || errno == ERANGE ||
2701 (srv_agent_state & ~(CHK_ST_INPROGRESS | CHK_ST_CONFIGURED | CHK_ST_ENABLED | CHK_ST_PAUSED | CHK_ST_AGENT)))
2702 chunk_appendf(msg, ", invalid srv_agent_state value '%s'", params[10]);
2703
2704 /* validating bk_f_forced_id */
2705 p = NULL;
2706 errno = 0;
2707 bk_f_forced_id = strtol(params[11], &p, 10);
2708 if (p == params[11] || errno == EINVAL || errno == ERANGE || !((bk_f_forced_id == 0) || (bk_f_forced_id == 1)))
2709 chunk_appendf(msg, ", invalid bk_f_forced_id value '%s'", params[11]);
2710
2711 /* validating srv_f_forced_id */
2712 p = NULL;
2713 errno = 0;
2714 srv_f_forced_id = strtol(params[12], &p, 10);
2715 if (p == params[12] || errno == EINVAL || errno == ERANGE || !((srv_f_forced_id == 0) || (srv_f_forced_id == 1)))
2716 chunk_appendf(msg, ", invalid srv_f_forced_id value '%s'", params[12]);
2717
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002718 /* validating srv_fqdn */
2719 fqdn = params[13];
2720 if (fqdn && *fqdn == '-')
2721 fqdn = NULL;
2722 if (fqdn && (strlen(fqdn) > DNS_MAX_NAME_SIZE || invalid_domainchar(fqdn))) {
2723 chunk_appendf(msg, ", invalid srv_fqdn value '%s'", params[13]);
2724 fqdn = NULL;
2725 }
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002726
Frédéric Lécaille31694712017-08-01 08:47:19 +02002727 port_str = params[14];
2728 if (port_str) {
2729 port = strl2uic(port_str, strlen(port_str));
2730 if (port > USHRT_MAX) {
2731 chunk_appendf(msg, ", invalid srv_port value '%s'", port_str);
2732 port_str = NULL;
2733 }
2734 }
2735
Baptiste Assmann6d0f38f2018-07-02 17:00:54 +02002736 /* SRV record
2737 * NOTE: in HAProxy, SRV records must start with an underscore '_'
2738 */
2739 srvrecord = params[15];
2740 if (srvrecord && *srvrecord != '_')
2741 srvrecord = NULL;
2742
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002743 /* don't apply anything if one error has been detected */
Willy Tarreau843b7cb2018-07-13 10:54:26 +02002744 if (msg->data)
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002745 goto out;
2746
Christopher Faulet2a944ee2017-11-07 10:42:54 +01002747 HA_SPIN_LOCK(SERVER_LOCK, &srv->lock);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002748 /* recover operational state and apply it to this server
2749 * and all servers tracking this one */
Jérôme Magninf57afa42019-01-20 11:27:40 +01002750 srv->check.health = srv_check_health;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002751 switch (srv_op_state) {
2752 case SRV_ST_STOPPED:
2753 srv->check.health = 0;
Emeric Brun5a133512017-10-19 14:42:30 +02002754 srv_set_stopped(srv, "changed from server-state after a reload", NULL);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002755 break;
2756 case SRV_ST_STARTING:
Jérôme Magninf57afa42019-01-20 11:27:40 +01002757 /* If rise == 1 there is no STARTING state, let's switch to
2758 * RUNNING
2759 */
2760 if (srv->check.rise == 1) {
2761 srv->check.health = srv->check.rise + srv->check.fall - 1;
2762 srv_set_running(srv, "", NULL);
2763 break;
2764 }
2765 if (srv->check.health < 1 || srv->check.health >= srv->check.rise)
2766 srv->check.health = srv->check.rise - 1;
Emeric Brun52a91d32017-08-31 14:41:55 +02002767 srv->next_state = srv_op_state;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002768 break;
2769 case SRV_ST_STOPPING:
Jérôme Magninf57afa42019-01-20 11:27:40 +01002770 /* If fall == 1 there is no STOPPING state, let's switch to
2771 * STOPPED
2772 */
2773 if (srv->check.fall == 1) {
2774 srv->check.health = 0;
2775 srv_set_stopped(srv, "changed from server-state after a reload", NULL);
2776 break;
2777 }
2778 if (srv->check.health < srv->check.rise ||
2779 srv->check.health > srv->check.rise + srv->check.fall - 2)
2780 srv->check.health = srv->check.rise;
Emeric Brun5a133512017-10-19 14:42:30 +02002781 srv_set_stopping(srv, "changed from server-state after a reload", NULL);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002782 break;
2783 case SRV_ST_RUNNING:
2784 srv->check.health = srv->check.rise + srv->check.fall - 1;
Emeric Brun5a133512017-10-19 14:42:30 +02002785 srv_set_running(srv, "", NULL);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002786 break;
2787 }
2788
2789 /* When applying server state, the following rules apply:
2790 * - in case of a configuration change, we apply the setting from the new
2791 * configuration, regardless of old running state
2792 * - if no configuration change, we apply old running state only if old running
2793 * state is different from new configuration state
2794 */
2795 /* configuration has changed */
Emeric Brun52a91d32017-08-31 14:41:55 +02002796 if ((srv_admin_state & SRV_ADMF_CMAINT) != (srv->next_admin & SRV_ADMF_CMAINT)) {
2797 if (srv->next_admin & SRV_ADMF_CMAINT)
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002798 srv_adm_set_maint(srv);
2799 else
2800 srv_adm_set_ready(srv);
2801 }
2802 /* configuration is the same, let's compate old running state and new conf state */
2803 else {
Emeric Brun52a91d32017-08-31 14:41:55 +02002804 if (srv_admin_state & SRV_ADMF_FMAINT && !(srv->next_admin & SRV_ADMF_CMAINT))
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002805 srv_adm_set_maint(srv);
Emeric Brun52a91d32017-08-31 14:41:55 +02002806 else if (!(srv_admin_state & SRV_ADMF_FMAINT) && (srv->next_admin & SRV_ADMF_CMAINT))
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002807 srv_adm_set_ready(srv);
2808 }
2809 /* apply drain mode if server is currently enabled */
Emeric Brun52a91d32017-08-31 14:41:55 +02002810 if (!(srv->next_admin & SRV_ADMF_FMAINT) && (srv_admin_state & SRV_ADMF_FDRAIN)) {
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002811 /* The SRV_ADMF_FDRAIN flag is inherited when srv->iweight is 0
Willy Tarreau22cace22016-11-03 18:19:49 +01002812 * (srv->iweight is the weight set up in configuration).
2813 * There are two possible reasons for FDRAIN to have been present :
2814 * - previous config weight was zero
2815 * - "set server b/s drain" was sent to the CLI
2816 *
2817 * In the first case, we simply want to drop this drain state
2818 * if the new weight is not zero anymore, meaning the administrator
2819 * has intentionally turned the weight back to a positive value to
2820 * enable the server again after an operation. In the second case,
2821 * the drain state was forced on the CLI regardless of the config's
2822 * weight so we don't want a change to the config weight to lose this
2823 * status. What this means is :
2824 * - if previous weight was 0 and new one is >0, drop the DRAIN state.
2825 * - if the previous weight was >0, keep it.
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002826 */
Willy Tarreau22cace22016-11-03 18:19:49 +01002827 if (srv_iweight > 0 || srv->iweight == 0)
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002828 srv_adm_set_drain(srv);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002829 }
2830
2831 srv->last_change = date.tv_sec - srv_last_time_change;
2832 srv->check.status = srv_check_status;
2833 srv->check.result = srv_check_result;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002834
2835 /* Only case we want to apply is removing ENABLED flag which could have been
2836 * done by the "disable health" command over the stats socket
2837 */
2838 if ((srv->check.state & CHK_ST_CONFIGURED) &&
2839 (srv_check_state & CHK_ST_CONFIGURED) &&
2840 !(srv_check_state & CHK_ST_ENABLED))
2841 srv->check.state &= ~CHK_ST_ENABLED;
2842
2843 /* Only case we want to apply is removing ENABLED flag which could have been
2844 * done by the "disable agent" command over the stats socket
2845 */
2846 if ((srv->agent.state & CHK_ST_CONFIGURED) &&
2847 (srv_agent_state & CHK_ST_CONFIGURED) &&
2848 !(srv_agent_state & CHK_ST_ENABLED))
2849 srv->agent.state &= ~CHK_ST_ENABLED;
2850
Baptiste Assmann6076d1c2015-09-17 22:53:59 +02002851 /* We want to apply the previous 'running' weight (srv_uweight) only if there
2852 * was no change in the configuration: both previous and new iweight are equals
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002853 *
Baptiste Assmann6076d1c2015-09-17 22:53:59 +02002854 * It means that a configuration file change has precedence over a unix socket change
2855 * for server's weight
2856 *
2857 * by default, HAProxy applies the following weight when parsing the configuration
2858 * srv->uweight = srv->iweight
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002859 */
Baptiste Assmann6076d1c2015-09-17 22:53:59 +02002860 if (srv_iweight == srv->iweight) {
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002861 srv->uweight = srv_uweight;
2862 }
Willy Tarreau3ff577e2018-08-02 11:48:52 +02002863 server_recalc_eweight(srv, 1);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002864
Willy Tarreaue5a60682016-11-09 14:54:53 +01002865 /* load server IP address */
Daniel Corbett9215ffa2018-05-19 19:43:24 -04002866 if (strcmp(params[0], "-"))
2867 srv->lastaddr = strdup(params[0]);
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002868
2869 if (fqdn && srv->hostname) {
2870 if (!strcmp(srv->hostname, fqdn)) {
2871 /* Here we reset the 'set from stats socket FQDN' flag
2872 * to support such transitions:
2873 * Let's say initial FQDN value is foo1 (in configuration file).
2874 * - FQDN changed from stats socket, from foo1 to foo2 value,
2875 * - FQDN changed again from file configuration (with the same previous value
2876 set from stats socket, from foo1 to foo2 value),
2877 * - reload for any other reason than a FQDN modification,
2878 * the configuration file FQDN matches the fqdn server state file value.
2879 * So we must reset the 'set from stats socket FQDN' flag to be consistent with
Joseph Herlant44466822018-11-15 08:57:51 -08002880 * any further FQDN modification.
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002881 */
Emeric Brun52a91d32017-08-31 14:41:55 +02002882 srv->next_admin &= ~SRV_ADMF_HMAINT;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002883 }
2884 else {
2885 /* If the FDQN has been changed from stats socket,
2886 * apply fqdn state file value (which is the value set
2887 * from stats socket).
Baptiste Assmann13a92322019-06-07 09:40:55 +02002888 * Also ensure the runtime resolver will process this resolution.
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002889 */
2890 if (fqdn_set_by_cli) {
Olivier Houchardd16bfe62017-10-31 15:21:19 +01002891 srv_set_fqdn(srv, fqdn, 0);
Baptiste Assmann13a92322019-06-07 09:40:55 +02002892 srv->flags &= ~SRV_F_NO_RESOLUTION;
Emeric Brun52a91d32017-08-31 14:41:55 +02002893 srv->next_admin |= SRV_ADMF_HMAINT;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002894 }
2895 }
2896 }
Baptiste Assmann6d0f38f2018-07-02 17:00:54 +02002897 /* If all the conditions below are validated, this means
2898 * we're evaluating a server managed by SRV resolution
2899 */
2900 else if (fqdn && !srv->hostname && srvrecord) {
2901 int res;
2902
2903 /* we can't apply previous state if SRV record has changed */
2904 if (srv->srvrq && strcmp(srv->srvrq->name, srvrecord) != 0) {
2905 chunk_appendf(msg, ", SRV record mismatch between configuration ('%s') and state file ('%s) for server '%s'. Previous state not applied", srv->srvrq->name, srvrecord, srv->id);
2906 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
2907 goto out;
2908 }
2909
2910 /* create or find a SRV resolution for this srv record */
2911 if (srv->srvrq == NULL && (srv->srvrq = find_srvrq_by_name(srvrecord, srv->proxy)) == NULL)
2912 srv->srvrq = new_dns_srvrq(srv, srvrecord);
2913 if (srv->srvrq == NULL) {
2914 chunk_appendf(msg, ", can't create or find SRV resolution '%s' for server '%s'", srvrecord, srv->id);
2915 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
2916 goto out;
2917 }
2918
2919 /* prepare DNS resolution for this server */
2920 res = srv_prepare_for_resolution(srv, fqdn);
2921 if (res == -1) {
2922 chunk_appendf(msg, ", can't allocate memory for DNS resolution for server '%s'", srv->id);
2923 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
2924 goto out;
2925 }
2926
2927 /* configure check.port accordingly */
2928 if ((srv->check.state & CHK_ST_CONFIGURED) &&
2929 !(srv->flags & SRV_F_CHECKPORT))
2930 srv->check.port = port;
2931
2932 /* Unset SRV_F_MAPPORTS for SRV records.
2933 * SRV_F_MAPPORTS is unfortunately set by parse_server()
2934 * because no ports are provided in the configuration file.
2935 * This is because HAProxy will use the port found into the SRV record.
2936 */
2937 srv->flags &= ~SRV_F_MAPPORTS;
2938 }
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002939
Frédéric Lécaille31694712017-08-01 08:47:19 +02002940 if (port_str)
2941 srv->svc_port = port;
Christopher Faulet2a944ee2017-11-07 10:42:54 +01002942 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
Frédéric Lécaille31694712017-08-01 08:47:19 +02002943
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002944 break;
2945 default:
2946 chunk_appendf(msg, ", version '%d' not supported", version);
2947 }
2948
2949 out:
Willy Tarreau843b7cb2018-07-13 10:54:26 +02002950 if (msg->data) {
Baptiste Assmann0821bb92016-01-21 00:20:50 +01002951 chunk_appendf(msg, "\n");
Christopher Faulet767a84b2017-11-24 16:50:31 +01002952 ha_warning("server-state application failed for server '%s/%s'%s",
Willy Tarreau843b7cb2018-07-13 10:54:26 +02002953 srv->proxy->id, srv->id, msg->area);
Baptiste Assmann0821bb92016-01-21 00:20:50 +01002954 }
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002955}
2956
Baptiste Assmannda29fe22019-06-13 13:24:29 +02002957
2958/*
2959 * read next line from file <f> and return the server state version if one found.
2960 * If no version is found, then 0 is returned
2961 * Note that this should be the first read on <f>
2962 */
2963static int srv_state_get_version(FILE *f) {
2964 char buf[2];
2965 int ret;
2966
2967 /* first character of first line of the file must contain the version of the export */
2968 if (fgets(buf, 2, f) == NULL) {
2969 return 0;
2970 }
2971
2972 ret = atoi(buf);
2973 if ((ret < SRV_STATE_FILE_VERSION_MIN) ||
2974 (ret > SRV_STATE_FILE_VERSION_MAX))
2975 return 0;
2976
2977 return ret;
2978}
2979
2980
2981/*
2982 * parses server state line stored in <buf> and supposedly in version <version>.
2983 * Set <params> and <srv_params> accordingly.
2984 * In case of error, params[0] is set to NULL.
2985 */
2986static void srv_state_parse_line(char *buf, const int version, char **params, char **srv_params)
2987{
2988 int buflen, arg, srv_arg;
2989 char *cur, *end;
2990
2991 buflen = strlen(buf);
2992 cur = buf;
2993 end = cur + buflen;
2994
2995 /* we need at least one character */
2996 if (buflen == 0) {
2997 params[0] = NULL;
2998 return;
2999 }
3000
3001 /* ignore blank characters at the beginning of the line */
Willy Tarreau90807112020-02-25 08:16:33 +01003002 while (isspace((unsigned char)*cur))
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003003 ++cur;
3004
3005 /* Ignore empty or commented lines */
3006 if (cur == end || *cur == '#') {
3007 params[0] = NULL;
3008 return;
3009 }
3010
3011 /* truncated lines */
3012 if (buf[buflen - 1] != '\n') {
3013 //ha_warning("server-state file '%s': truncated line\n", filepath);
3014 params[0] = NULL;
3015 return;
3016 }
3017
3018 /* Removes trailing '\n' */
3019 buf[buflen - 1] = '\0';
3020
3021 /* we're now ready to move the line into *srv_params[] */
3022 params[0] = cur;
3023 arg = 1;
3024 srv_arg = 0;
3025 while (*cur && arg < SRV_STATE_FILE_MAX_FIELDS) {
Willy Tarreau90807112020-02-25 08:16:33 +01003026 if (isspace((unsigned char)*cur)) {
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003027 *cur = '\0';
3028 ++cur;
Willy Tarreau90807112020-02-25 08:16:33 +01003029 while (isspace((unsigned char)*cur))
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003030 ++cur;
3031 switch (version) {
3032 case 1:
3033 /*
3034 * srv_addr: params[4] => srv_params[0]
3035 * srv_op_state: params[5] => srv_params[1]
3036 * srv_admin_state: params[6] => srv_params[2]
3037 * srv_uweight: params[7] => srv_params[3]
3038 * srv_iweight: params[8] => srv_params[4]
3039 * srv_last_time_change: params[9] => srv_params[5]
3040 * srv_check_status: params[10] => srv_params[6]
3041 * srv_check_result: params[11] => srv_params[7]
3042 * srv_check_health: params[12] => srv_params[8]
3043 * srv_check_state: params[13] => srv_params[9]
3044 * srv_agent_state: params[14] => srv_params[10]
3045 * bk_f_forced_id: params[15] => srv_params[11]
3046 * srv_f_forced_id: params[16] => srv_params[12]
3047 * srv_fqdn: params[17] => srv_params[13]
3048 * srv_port: params[18] => srv_params[14]
3049 * srvrecord: params[19] => srv_params[15]
3050 */
3051 if (arg >= 4) {
3052 srv_params[srv_arg] = cur;
3053 ++srv_arg;
3054 }
3055 break;
3056 }
3057
3058 params[arg] = cur;
3059 ++arg;
3060 }
3061 else {
3062 ++cur;
3063 }
3064 }
3065
3066 /* if line is incomplete line, then ignore it.
3067 * otherwise, update useful flags */
3068 switch (version) {
3069 case 1:
3070 if (arg < SRV_STATE_FILE_NB_FIELDS_VERSION_1) {
3071 params[0] = NULL;
3072 return;
3073 }
3074 break;
3075 }
3076
3077 return;
3078}
3079
3080
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003081/* This function parses all the proxies and only take care of the backends (since we're looking for server)
3082 * For each proxy, it does the following:
3083 * - opens its server state file (either one or local one)
3084 * - read whole file, line by line
3085 * - analyse each line to check if it matches our current backend:
3086 * - backend name matches
3087 * - backend id matches if id is forced and name doesn't match
3088 * - if the server pointed by the line is found, then state is applied
3089 *
3090 * If the running backend uuid or id differs from the state file, then HAProxy reports
3091 * a warning.
Willy Tarreau46b7f532018-08-21 11:54:26 +02003092 *
3093 * Grabs the server's lock via srv_update_state().
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003094 */
3095void apply_server_state(void)
3096{
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003097 char mybuf[SRV_STATE_LINE_MAXLEN];
Frédéric Lécailleb418c122017-04-26 11:24:02 +02003098 char *params[SRV_STATE_FILE_MAX_FIELDS] = {0};
3099 char *srv_params[SRV_STATE_FILE_MAX_FIELDS] = {0};
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003100 int version, global_file_version;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003101 FILE *f;
3102 char *filepath;
3103 char globalfilepath[MAXPATHLEN + 1];
3104 char localfilepath[MAXPATHLEN + 1];
3105 int len, fileopenerr, globalfilepathlen, localfilepathlen;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003106 struct proxy *curproxy, *bk;
3107 struct server *srv;
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003108 char *line;
3109 char *bkname, *srvname;
3110 struct state_line *st;
3111 struct ebmb_node *node, *next_node;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003112
Willy Tarreau2d067f92020-07-16 06:40:27 +02003113 f = NULL;
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003114 global_file_version = 0;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003115 globalfilepathlen = 0;
3116 /* create the globalfilepath variable */
3117 if (global.server_state_file) {
3118 /* absolute path or no base directory provided */
3119 if ((global.server_state_file[0] == '/') || (!global.server_state_base)) {
3120 len = strlen(global.server_state_file);
3121 if (len > MAXPATHLEN) {
3122 globalfilepathlen = 0;
3123 goto globalfileerror;
3124 }
3125 memcpy(globalfilepath, global.server_state_file, len);
3126 globalfilepath[len] = '\0';
3127 globalfilepathlen = len;
3128 }
3129 else if (global.server_state_base) {
3130 len = strlen(global.server_state_base);
Willy Tarreau5dfb6c42018-10-16 19:26:12 +02003131 if (len > MAXPATHLEN) {
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003132 globalfilepathlen = 0;
3133 goto globalfileerror;
3134 }
Olivier Houchard17f8b902018-10-16 18:35:01 +02003135 memcpy(globalfilepath, global.server_state_base, len);
Willy Tarreau5dfb6c42018-10-16 19:26:12 +02003136 globalfilepath[len] = 0;
3137 globalfilepathlen = len;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003138
3139 /* append a slash if needed */
3140 if (!globalfilepathlen || globalfilepath[globalfilepathlen - 1] != '/') {
3141 if (globalfilepathlen + 1 > MAXPATHLEN) {
3142 globalfilepathlen = 0;
3143 goto globalfileerror;
3144 }
3145 globalfilepath[globalfilepathlen++] = '/';
3146 }
3147
3148 len = strlen(global.server_state_file);
3149 if (globalfilepathlen + len > MAXPATHLEN) {
3150 globalfilepathlen = 0;
3151 goto globalfileerror;
3152 }
3153 memcpy(globalfilepath + globalfilepathlen, global.server_state_file, len);
3154 globalfilepathlen += len;
3155 globalfilepath[globalfilepathlen++] = 0;
3156 }
3157 }
3158 globalfileerror:
3159 if (globalfilepathlen == 0)
3160 globalfilepath[0] = '\0';
3161
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003162 /* Load global server state in a tree */
3163 if (globalfilepathlen > 0) {
3164 errno = 0;
3165 f = fopen(globalfilepath, "r");
3166 if (errno)
3167 ha_warning("Can't open global server state file '%s': %s\n", globalfilepath, strerror(errno));
Vedran Furac5d486272019-10-16 14:49:38 +02003168 if (!f)
3169 goto out_load_server_state_in_tree;
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003170
3171 global_file_version = srv_state_get_version(f);
3172 if (global_file_version == 0)
3173 goto out_load_server_state_in_tree;
3174
3175 while (fgets(mybuf, SRV_STATE_LINE_MAXLEN, f)) {
3176 line = NULL;
3177
3178 line = strdup(mybuf);
3179 if (line == NULL)
3180 continue;
3181
3182 srv_state_parse_line(mybuf, global_file_version, params, srv_params);
3183 if (params[0] == NULL)
Willy Tarreauca7a5af2019-12-20 17:26:27 +01003184 goto nextline;
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003185
3186 /* bkname */
3187 bkname = params[1];
3188 /* srvname */
3189 srvname = params[3];
3190
3191 /* key */
3192 chunk_printf(&trash, "%s %s", bkname, srvname);
3193
3194 /* store line in tree */
Willy Tarreau7d6a1fa2019-12-20 17:18:13 +01003195 st = calloc(1, sizeof(*st) + trash.data + 1);
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003196 if (st == NULL) {
3197 goto nextline;
3198 }
Willy Tarreau7d6a1fa2019-12-20 17:18:13 +01003199 memcpy(st->name_name.key, trash.area, trash.data + 1);
Willy Tarreaufd1aa012019-12-20 17:23:40 +01003200 if (ebst_insert(&state_file, &st->name_name) != &st->name_name) {
3201 /* this is a duplicate key, probably a hand-crafted file,
3202 * drop it!
3203 */
3204 goto nextline;
3205 }
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003206
3207 /* save line */
3208 st->line = line;
3209
3210 continue;
3211
3212 nextline:
3213 /* free up memory in case of error during the processing of the line */
3214 free(line);
3215 }
3216 }
3217 out_load_server_state_in_tree:
3218
Ilya Shipitsindc6e8a92020-07-16 02:02:40 +05003219 if (f) {
3220 fclose(f);
3221 f = NULL;
3222 }
3223
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003224 /* parse all proxies and load states form tree (global file) or from local file */
Olivier Houchardfbc74e82017-11-24 16:54:05 +01003225 for (curproxy = proxies_list; curproxy != NULL; curproxy = curproxy->next) {
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003226 /* servers are only in backends */
3227 if (!(curproxy->cap & PR_CAP_BE))
3228 continue;
3229 fileopenerr = 0;
3230 filepath = NULL;
3231
3232 /* search server state file path and name */
3233 switch (curproxy->load_server_state_from_file) {
3234 /* read servers state from global file */
3235 case PR_SRV_STATE_FILE_GLOBAL:
3236 /* there was an error while generating global server state file path */
3237 if (globalfilepathlen == 0)
3238 continue;
3239 filepath = globalfilepath;
3240 fileopenerr = 1;
3241 break;
3242 /* this backend has its own file */
3243 case PR_SRV_STATE_FILE_LOCAL:
3244 localfilepathlen = 0;
3245 localfilepath[0] = '\0';
3246 len = 0;
3247 /* create the localfilepath variable */
3248 /* absolute path or no base directory provided */
3249 if ((curproxy->server_state_file_name[0] == '/') || (!global.server_state_base)) {
3250 len = strlen(curproxy->server_state_file_name);
3251 if (len > MAXPATHLEN) {
3252 localfilepathlen = 0;
3253 goto localfileerror;
3254 }
3255 memcpy(localfilepath, curproxy->server_state_file_name, len);
3256 localfilepath[len] = '\0';
3257 localfilepathlen = len;
3258 }
3259 else if (global.server_state_base) {
3260 len = strlen(global.server_state_base);
3261 localfilepathlen += len;
3262
3263 if (localfilepathlen > MAXPATHLEN) {
3264 localfilepathlen = 0;
3265 goto localfileerror;
3266 }
Olivier Houchard17f8b902018-10-16 18:35:01 +02003267 memcpy(localfilepath, global.server_state_base, len);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003268 localfilepath[localfilepathlen] = 0;
3269
3270 /* append a slash if needed */
3271 if (!localfilepathlen || localfilepath[localfilepathlen - 1] != '/') {
3272 if (localfilepathlen + 1 > MAXPATHLEN) {
3273 localfilepathlen = 0;
3274 goto localfileerror;
3275 }
3276 localfilepath[localfilepathlen++] = '/';
3277 }
3278
3279 len = strlen(curproxy->server_state_file_name);
3280 if (localfilepathlen + len > MAXPATHLEN) {
3281 localfilepathlen = 0;
3282 goto localfileerror;
3283 }
3284 memcpy(localfilepath + localfilepathlen, curproxy->server_state_file_name, len);
3285 localfilepathlen += len;
3286 localfilepath[localfilepathlen++] = 0;
3287 }
3288 filepath = localfilepath;
3289 localfileerror:
3290 if (localfilepathlen == 0)
3291 localfilepath[0] = '\0';
3292
3293 break;
3294 case PR_SRV_STATE_FILE_NONE:
3295 default:
3296 continue;
3297 }
3298
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003299 /* when global file is used, we get data from the tree
3300 * Note that in such case we don't check backend name neither uuid.
3301 * Backend name can't be wrong since it's used as a key to retrieve the server state
3302 * line from the tree.
3303 */
3304 if (curproxy->load_server_state_from_file == PR_SRV_STATE_FILE_GLOBAL) {
3305 struct server *srv = curproxy->srv;
3306 while (srv) {
3307 struct ebmb_node *node;
3308 struct state_line *st;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003309
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003310 chunk_printf(&trash, "%s %s", curproxy->id, srv->id);
3311 node = ebst_lookup(&state_file, trash.area);
3312 if (!node)
3313 goto next;
Dragan Dosencf4fb032015-11-04 23:03:26 +01003314
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003315 st = container_of(node, struct state_line, name_name);
3316 memcpy(mybuf, st->line, strlen(st->line));
3317 mybuf[strlen(st->line)] = 0;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003318
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003319 srv_state_parse_line(mybuf, global_file_version, params, srv_params);
3320 if (params[0] == NULL)
3321 goto next;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003322
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003323 srv_update_state(srv, global_file_version, srv_params);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003324
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003325 next:
3326 srv = srv->next;
3327 }
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003328
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003329 continue; /* next proxy in list */
3330 }
3331 else {
3332 /* load 'local' state file */
3333 errno = 0;
3334 f = fopen(filepath, "r");
3335 if (errno && fileopenerr)
3336 ha_warning("Can't open server state file '%s': %s\n", filepath, strerror(errno));
3337 if (!f)
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003338 continue;
3339
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003340 mybuf[0] = '\0';
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003341
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003342 /* first character of first line of the file must contain the version of the export */
3343 version = srv_state_get_version(f);
3344 if (version == 0) {
3345 ha_warning("Can't get version of the server state file '%s'\n", filepath);
3346 goto fileclose;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02003347 }
3348
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003349 while (fgets(mybuf, SRV_STATE_LINE_MAXLEN, f)) {
3350 int bk_f_forced_id = 0;
3351 int check_id = 0;
3352 int check_name = 0;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003353
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003354 srv_state_parse_line(mybuf, version, params, srv_params);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003355
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003356 if (params[0] == NULL) {
3357 continue;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003358 }
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003359
3360 /* if line is incomplete line, then ignore it.
3361 * otherwise, update useful flags */
3362 switch (version) {
3363 case 1:
3364 bk_f_forced_id = (atoi(params[15]) & PR_O_FORCED_ID);
3365 check_id = (atoi(params[0]) == curproxy->uuid);
3366 check_name = (strcmp(curproxy->id, params[1]) == 0);
3367 break;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003368 }
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003369
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003370 bk = curproxy;
3371
3372 /* if backend can't be found, let's continue */
3373 if (!check_id && !check_name)
3374 continue;
3375 else if (!check_id && check_name) {
3376 ha_warning("backend ID mismatch: from server state file: '%s', from running config '%d'\n", params[0], bk->uuid);
3377 send_log(bk, LOG_NOTICE, "backend ID mismatch: from server state file: '%s', from running config '%d'\n", params[0], bk->uuid);
3378 }
3379 else if (check_id && !check_name) {
3380 ha_warning("backend name mismatch: from server state file: '%s', from running config '%s'\n", params[1], bk->id);
3381 send_log(bk, LOG_NOTICE, "backend name mismatch: from server state file: '%s', from running config '%s'\n", params[1], bk->id);
3382 /* if name doesn't match, we still want to update curproxy if the backend id
3383 * was forced in previous the previous configuration */
3384 if (!bk_f_forced_id)
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003385 continue;
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003386 }
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003387
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003388 /* look for the server by its name: param[3] */
3389 srv = server_find_best_match(bk, params[3], 0, NULL);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003390
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003391 if (!srv) {
3392 /* if no server found, then warning and continue with next line */
3393 ha_warning("can't find server '%s' in backend '%s'\n",
3394 params[3], params[1]);
3395 send_log(bk, LOG_NOTICE, "can't find server '%s' in backend '%s'\n",
3396 params[3], params[1]);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003397 continue;
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003398 }
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003399
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003400 /* now we can proceed with server's state update */
3401 srv_update_state(srv, version, srv_params);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003402 }
Ilya Shipitsindc6e8a92020-07-16 02:02:40 +05003403
3404 fileclose:
3405 fclose(f);
3406
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003407 }
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003408 }
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003409
3410 /* now free memory allocated for the tree */
3411 for (node = ebmb_first(&state_file), next_node = node ? ebmb_next(node) : NULL;
3412 node;
3413 node = next_node, next_node = node ? ebmb_next(node) : NULL) {
3414 st = container_of(node, struct state_line, name_name);
3415 ebmb_delete(&st->name_name);
3416 free(st->line);
3417 free(st);
3418 }
3419
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003420}
3421
Simon Horman7d09b9a2013-02-12 10:45:51 +09003422/*
Baptiste Assmann14e40142015-04-14 01:13:07 +02003423 * update a server's current IP address.
3424 * ip is a pointer to the new IP address, whose address family is ip_sin_family.
3425 * ip is in network format.
3426 * updater is a string which contains an information about the requester of the update.
3427 * updater is used if not NULL.
3428 *
3429 * A log line and a stderr warning message is generated based on server's backend options.
Willy Tarreau46b7f532018-08-21 11:54:26 +02003430 *
3431 * Must be called with the server lock held.
Baptiste Assmann14e40142015-04-14 01:13:07 +02003432 */
Thierry Fournierd35b7a62016-02-24 08:23:22 +01003433int update_server_addr(struct server *s, void *ip, int ip_sin_family, const char *updater)
Baptiste Assmann14e40142015-04-14 01:13:07 +02003434{
Christopher Fauletd6c6b5f2020-09-08 10:27:24 +02003435 /* save the new IP family & address if necessary */
3436 switch (ip_sin_family) {
3437 case AF_INET:
3438 if (s->addr.ss_family == ip_sin_family &&
3439 !memcmp(ip, &((struct sockaddr_in *)&s->addr)->sin_addr.s_addr, 4))
3440 return 0;
3441 break;
3442 case AF_INET6:
3443 if (s->addr.ss_family == ip_sin_family &&
3444 !memcmp(ip, &((struct sockaddr_in6 *)&s->addr)->sin6_addr.s6_addr, 16))
3445 return 0;
3446 break;
3447 };
3448
Baptiste Assmann14e40142015-04-14 01:13:07 +02003449 /* generates a log line and a warning on stderr */
3450 if (1) {
3451 /* book enough space for both IPv4 and IPv6 */
3452 char oldip[INET6_ADDRSTRLEN];
3453 char newip[INET6_ADDRSTRLEN];
3454
3455 memset(oldip, '\0', INET6_ADDRSTRLEN);
3456 memset(newip, '\0', INET6_ADDRSTRLEN);
3457
3458 /* copy old IP address in a string */
3459 switch (s->addr.ss_family) {
3460 case AF_INET:
3461 inet_ntop(s->addr.ss_family, &((struct sockaddr_in *)&s->addr)->sin_addr, oldip, INET_ADDRSTRLEN);
3462 break;
3463 case AF_INET6:
3464 inet_ntop(s->addr.ss_family, &((struct sockaddr_in6 *)&s->addr)->sin6_addr, oldip, INET6_ADDRSTRLEN);
3465 break;
Christopher Fauletb0b76072020-09-08 10:38:40 +02003466 default:
3467 strcpy(oldip, "(none)");
3468 break;
Baptiste Assmann14e40142015-04-14 01:13:07 +02003469 };
3470
3471 /* copy new IP address in a string */
3472 switch (ip_sin_family) {
3473 case AF_INET:
3474 inet_ntop(ip_sin_family, ip, newip, INET_ADDRSTRLEN);
3475 break;
3476 case AF_INET6:
3477 inet_ntop(ip_sin_family, ip, newip, INET6_ADDRSTRLEN);
3478 break;
3479 };
3480
3481 /* save log line into a buffer */
3482 chunk_printf(&trash, "%s/%s changed its IP from %s to %s by %s",
3483 s->proxy->id, s->id, oldip, newip, updater);
3484
3485 /* write the buffer on stderr */
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003486 ha_warning("%s.\n", trash.area);
Baptiste Assmann14e40142015-04-14 01:13:07 +02003487
3488 /* send a log */
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003489 send_log(s->proxy, LOG_NOTICE, "%s.\n", trash.area);
Baptiste Assmann14e40142015-04-14 01:13:07 +02003490 }
3491
3492 /* save the new IP family */
3493 s->addr.ss_family = ip_sin_family;
3494 /* save the new IP address */
3495 switch (ip_sin_family) {
3496 case AF_INET:
Willy Tarreaueec1d382016-07-13 11:59:39 +02003497 memcpy(&((struct sockaddr_in *)&s->addr)->sin_addr.s_addr, ip, 4);
Baptiste Assmann14e40142015-04-14 01:13:07 +02003498 break;
3499 case AF_INET6:
3500 memcpy(((struct sockaddr_in6 *)&s->addr)->sin6_addr.s6_addr, ip, 16);
3501 break;
3502 };
Olivier Houchard4e694042017-03-14 20:01:29 +01003503 srv_set_dyncookie(s);
Baptiste Assmann14e40142015-04-14 01:13:07 +02003504
3505 return 0;
3506}
3507
3508/*
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003509 * This function update a server's addr and port only for AF_INET and AF_INET6 families.
3510 *
3511 * Caller can pass its name through <updater> to get it integrated in the response message
3512 * returned by the function.
3513 *
3514 * The function first does the following, in that order:
3515 * - validates the new addr and/or port
3516 * - checks if an update is required (new IP or port is different than current ones)
3517 * - checks the update is allowed:
3518 * - don't switch from/to a family other than AF_INET4 and AF_INET6
3519 * - allow all changes if no CHECKS are configured
3520 * - if CHECK is configured:
3521 * - if switch to port map (SRV_F_MAPPORTS), ensure health check have their own ports
3522 * - applies required changes to both ADDR and PORT if both 'required' and 'allowed'
3523 * conditions are met
Willy Tarreau46b7f532018-08-21 11:54:26 +02003524 *
3525 * Must be called with the server lock held.
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003526 */
3527const char *update_server_addr_port(struct server *s, const char *addr, const char *port, char *updater)
3528{
3529 struct sockaddr_storage sa;
3530 int ret, port_change_required;
3531 char current_addr[INET6_ADDRSTRLEN];
David Carlier327298c2016-11-20 10:42:38 +00003532 uint16_t current_port, new_port;
Willy Tarreau83061a82018-07-13 11:56:34 +02003533 struct buffer *msg;
Olivier Houchard4e694042017-03-14 20:01:29 +01003534 int changed = 0;
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003535
3536 msg = get_trash_chunk();
3537 chunk_reset(msg);
3538
3539 if (addr) {
3540 memset(&sa, 0, sizeof(struct sockaddr_storage));
3541 if (str2ip2(addr, &sa, 0) == NULL) {
3542 chunk_printf(msg, "Invalid addr '%s'", addr);
3543 goto out;
3544 }
3545
3546 /* changes are allowed on AF_INET* families only */
3547 if ((sa.ss_family != AF_INET) && (sa.ss_family != AF_INET6)) {
3548 chunk_printf(msg, "Update to families other than AF_INET and AF_INET6 supported only through configuration file");
3549 goto out;
3550 }
3551
3552 /* collecting data currently setup */
3553 memset(current_addr, '\0', sizeof(current_addr));
3554 ret = addr_to_str(&s->addr, current_addr, sizeof(current_addr));
3555 /* changes are allowed on AF_INET* families only */
3556 if ((ret != AF_INET) && (ret != AF_INET6)) {
3557 chunk_printf(msg, "Update for the current server address family is only supported through configuration file");
3558 goto out;
3559 }
3560
3561 /* applying ADDR changes if required and allowed
3562 * ipcmp returns 0 when both ADDR are the same
3563 */
3564 if (ipcmp(&s->addr, &sa) == 0) {
3565 chunk_appendf(msg, "no need to change the addr");
3566 goto port;
3567 }
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003568 ipcpy(&sa, &s->addr);
Olivier Houchard4e694042017-03-14 20:01:29 +01003569 changed = 1;
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003570
3571 /* we also need to update check's ADDR only if it uses the server's one */
3572 if ((s->check.state & CHK_ST_CONFIGURED) && (s->flags & SRV_F_CHECKADDR)) {
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003573 ipcpy(&sa, &s->check.addr);
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003574 }
3575
3576 /* we also need to update agent ADDR only if it use the server's one */
3577 if ((s->agent.state & CHK_ST_CONFIGURED) && (s->flags & SRV_F_AGENTADDR)) {
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003578 ipcpy(&sa, &s->agent.addr);
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003579 }
3580
3581 /* update report for caller */
3582 chunk_printf(msg, "IP changed from '%s' to '%s'", current_addr, addr);
3583 }
3584
3585 port:
3586 if (port) {
3587 char sign = '\0';
3588 char *endptr;
3589
3590 if (addr)
3591 chunk_appendf(msg, ", ");
3592
3593 /* collecting data currently setup */
Willy Tarreau04276f32017-01-06 17:41:29 +01003594 current_port = s->svc_port;
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003595
3596 /* check if PORT change is required */
3597 port_change_required = 0;
3598
3599 sign = *port;
Ryabin Sergey77ee7522017-01-11 19:39:55 +04003600 errno = 0;
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003601 new_port = strtol(port, &endptr, 10);
3602 if ((errno != 0) || (port == endptr)) {
3603 chunk_appendf(msg, "problem converting port '%s' to an int", port);
3604 goto out;
3605 }
3606
3607 /* check if caller triggers a port mapped or offset */
3608 if (sign == '-' || (sign == '+')) {
3609 /* check if server currently uses port map */
3610 if (!(s->flags & SRV_F_MAPPORTS)) {
3611 /* switch from fixed port to port map mandatorily triggers
3612 * a port change */
3613 port_change_required = 1;
3614 /* check is configured
3615 * we're switching from a fixed port to a SRV_F_MAPPORTS (mapped) port
3616 * prevent PORT change if check doesn't have it's dedicated port while switching
3617 * to port mapping */
3618 if ((s->check.state & CHK_ST_CONFIGURED) && !(s->flags & SRV_F_CHECKPORT)) {
3619 chunk_appendf(msg, "can't change <port> to port map because it is incompatible with current health check port configuration (use 'port' statement from the 'server' directive.");
3620 goto out;
3621 }
3622 }
3623 /* we're already using port maps */
3624 else {
3625 port_change_required = current_port != new_port;
3626 }
3627 }
3628 /* fixed port */
3629 else {
3630 port_change_required = current_port != new_port;
3631 }
3632
3633 /* applying PORT changes if required and update response message */
3634 if (port_change_required) {
3635 /* apply new port */
Willy Tarreau04276f32017-01-06 17:41:29 +01003636 s->svc_port = new_port;
Olivier Houchard4e694042017-03-14 20:01:29 +01003637 changed = 1;
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003638
3639 /* prepare message */
3640 chunk_appendf(msg, "port changed from '");
3641 if (s->flags & SRV_F_MAPPORTS)
3642 chunk_appendf(msg, "+");
3643 chunk_appendf(msg, "%d' to '", current_port);
3644
3645 if (sign == '-') {
3646 s->flags |= SRV_F_MAPPORTS;
3647 chunk_appendf(msg, "%c", sign);
3648 /* just use for result output */
3649 new_port = -new_port;
3650 }
3651 else if (sign == '+') {
3652 s->flags |= SRV_F_MAPPORTS;
3653 chunk_appendf(msg, "%c", sign);
3654 }
3655 else {
3656 s->flags &= ~SRV_F_MAPPORTS;
3657 }
3658
3659 chunk_appendf(msg, "%d'", new_port);
3660
3661 /* we also need to update health checks port only if it uses server's realport */
3662 if ((s->check.state & CHK_ST_CONFIGURED) && !(s->flags & SRV_F_CHECKPORT)) {
3663 s->check.port = new_port;
3664 }
3665 }
3666 else {
3667 chunk_appendf(msg, "no need to change the port");
3668 }
3669 }
3670
3671out:
William Dauchy6318d332020-05-02 21:52:36 +02003672 if (changed) {
3673 /* force connection cleanup on the given server */
3674 srv_cleanup_connections(s);
Olivier Houchard4e694042017-03-14 20:01:29 +01003675 srv_set_dyncookie(s);
William Dauchy6318d332020-05-02 21:52:36 +02003676 }
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003677 if (updater)
3678 chunk_appendf(msg, " by '%s'", updater);
3679 chunk_appendf(msg, "\n");
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003680 return msg->area;
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003681}
3682
3683
3684/*
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003685 * update server status based on result of name resolution
3686 * returns:
3687 * 0 if server status is updated
3688 * 1 if server status has not changed
Willy Tarreau46b7f532018-08-21 11:54:26 +02003689 *
3690 * Must be called with the server lock held.
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003691 */
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003692int snr_update_srv_status(struct server *s, int has_no_ip)
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003693{
Christopher Faulet67957bd2017-09-27 11:00:59 +02003694 struct dns_resolvers *resolvers = s->resolvers;
3695 struct dns_resolution *resolution = s->dns_requester->resolution;
3696 int exp;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003697
Jerome Magnin012261a2020-07-28 13:38:22 +02003698 /* If resolution is NULL we're dealing with SRV records Additional records */
3699 if (resolution == NULL) {
Baptiste Assmann87138c32020-08-04 10:57:21 +02003700 /* since this server has an IP, it can go back in production */
3701 if (has_no_ip == 0) {
3702 srv_clr_admin_flag(s, SRV_ADMF_RMAINT);
3703 return 1;
3704 }
3705
Jerome Magnin012261a2020-07-28 13:38:22 +02003706 if (s->next_admin & SRV_ADMF_RMAINT)
3707 return 1;
3708
3709 srv_set_admin_flag(s, SRV_ADMF_RMAINT, "entry removed from SRV record");
3710 return 0;
3711 }
3712
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003713 switch (resolution->status) {
3714 case RSLV_STATUS_NONE:
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003715 /* status when HAProxy has just (re)started.
3716 * Nothing to do, since the task is already automatically started */
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003717 break;
3718
Baptiste Assmann3b9fe9f2016-11-02 22:58:18 +01003719 case RSLV_STATUS_VALID:
3720 /*
3721 * resume health checks
3722 * server will be turned back on if health check is safe
3723 */
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003724 if (has_no_ip) {
Emeric Brun52a91d32017-08-31 14:41:55 +02003725 if (s->next_admin & SRV_ADMF_RMAINT)
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003726 return 1;
3727 srv_set_admin_flag(s, SRV_ADMF_RMAINT,
3728 "No IP for server ");
Christopher Faulet67957bd2017-09-27 11:00:59 +02003729 return 0;
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003730 }
Christopher Faulet67957bd2017-09-27 11:00:59 +02003731
Emeric Brun52a91d32017-08-31 14:41:55 +02003732 if (!(s->next_admin & SRV_ADMF_RMAINT))
Baptiste Assmann3b9fe9f2016-11-02 22:58:18 +01003733 return 1;
3734 srv_clr_admin_flag(s, SRV_ADMF_RMAINT);
3735 chunk_printf(&trash, "Server %s/%s administratively READY thanks to valid DNS answer",
3736 s->proxy->id, s->id);
3737
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003738 ha_warning("%s.\n", trash.area);
3739 send_log(s->proxy, LOG_NOTICE, "%s.\n", trash.area);
Baptiste Assmann3b9fe9f2016-11-02 22:58:18 +01003740 return 0;
3741
3742 case RSLV_STATUS_NX:
3743 /* stop server if resolution is NX for a long enough period */
Christopher Faulet67957bd2017-09-27 11:00:59 +02003744 exp = tick_add(resolution->last_valid, resolvers->hold.nx);
3745 if (!tick_is_expired(exp, now_ms))
3746 break;
3747
3748 if (s->next_admin & SRV_ADMF_RMAINT)
3749 return 1;
3750 srv_set_admin_flag(s, SRV_ADMF_RMAINT, "DNS NX status");
3751 return 0;
Baptiste Assmann3b9fe9f2016-11-02 22:58:18 +01003752
3753 case RSLV_STATUS_TIMEOUT:
3754 /* stop server if resolution is TIMEOUT for a long enough period */
Christopher Faulet67957bd2017-09-27 11:00:59 +02003755 exp = tick_add(resolution->last_valid, resolvers->hold.timeout);
3756 if (!tick_is_expired(exp, now_ms))
3757 break;
3758
3759 if (s->next_admin & SRV_ADMF_RMAINT)
3760 return 1;
3761 srv_set_admin_flag(s, SRV_ADMF_RMAINT, "DNS timeout status");
3762 return 0;
Baptiste Assmann3b9fe9f2016-11-02 22:58:18 +01003763
3764 case RSLV_STATUS_REFUSED:
3765 /* stop server if resolution is REFUSED for a long enough period */
Christopher Faulet67957bd2017-09-27 11:00:59 +02003766 exp = tick_add(resolution->last_valid, resolvers->hold.refused);
3767 if (!tick_is_expired(exp, now_ms))
3768 break;
3769
3770 if (s->next_admin & SRV_ADMF_RMAINT)
3771 return 1;
3772 srv_set_admin_flag(s, SRV_ADMF_RMAINT, "DNS refused status");
3773 return 0;
Baptiste Assmann3b9fe9f2016-11-02 22:58:18 +01003774
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003775 default:
Christopher Faulet67957bd2017-09-27 11:00:59 +02003776 /* stop server if resolution failed for a long enough period */
3777 exp = tick_add(resolution->last_valid, resolvers->hold.other);
3778 if (!tick_is_expired(exp, now_ms))
3779 break;
3780
3781 if (s->next_admin & SRV_ADMF_RMAINT)
3782 return 1;
3783 srv_set_admin_flag(s, SRV_ADMF_RMAINT, "unspecified DNS error");
3784 return 0;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003785 }
3786
3787 return 1;
3788}
3789
3790/*
3791 * Server Name Resolution valid response callback
3792 * It expects:
3793 * - <nameserver>: the name server which answered the valid response
3794 * - <response>: buffer containing a valid DNS response
3795 * - <response_len>: size of <response>
3796 * It performs the following actions:
3797 * - ignore response if current ip found and server family not met
3798 * - update with first new ip found if family is met and current IP is not found
3799 * returns:
3800 * 0 on error
3801 * 1 when no error or safe ignore
Olivier Houchard28381072017-11-06 17:30:28 +01003802 *
3803 * Must be called with server lock held
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003804 */
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003805int snr_resolution_cb(struct dns_requester *requester, struct dns_nameserver *nameserver)
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003806{
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003807 struct server *s = NULL;
3808 struct dns_resolution *resolution = NULL;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003809 void *serverip, *firstip;
3810 short server_sin_family, firstip_sin_family;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003811 int ret;
Willy Tarreau83061a82018-07-13 11:56:34 +02003812 struct buffer *chk = get_trash_chunk();
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003813 int has_no_ip = 0;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003814
Christopher Faulet67957bd2017-09-27 11:00:59 +02003815 s = objt_server(requester->owner);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003816 if (!s)
3817 return 1;
3818
Christopher Faulet67957bd2017-09-27 11:00:59 +02003819 resolution = s->dns_requester->resolution;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003820
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003821 /* initializing variables */
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003822 firstip = NULL; /* pointer to the first valid response found */
3823 /* it will be used as the new IP if a change is required */
3824 firstip_sin_family = AF_UNSPEC;
3825 serverip = NULL; /* current server IP address */
3826
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003827 /* initializing server IP pointer */
3828 server_sin_family = s->addr.ss_family;
3829 switch (server_sin_family) {
3830 case AF_INET:
3831 serverip = &((struct sockaddr_in *)&s->addr)->sin_addr.s_addr;
3832 break;
3833
3834 case AF_INET6:
3835 serverip = &((struct sockaddr_in6 *)&s->addr)->sin6_addr.s6_addr;
3836 break;
3837
Willy Tarreau3acfcd12017-01-06 19:18:32 +01003838 case AF_UNSPEC:
3839 break;
3840
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003841 default:
3842 goto invalid;
3843 }
3844
Baptiste Assmann729c9012017-05-22 15:13:10 +02003845 ret = dns_get_ip_from_response(&resolution->response, &s->dns_opts,
Thierry Fournierada34842016-02-17 21:25:09 +01003846 serverip, server_sin_family, &firstip,
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003847 &firstip_sin_family, s);
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003848
3849 switch (ret) {
3850 case DNS_UPD_NO:
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003851 goto update_status;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003852
3853 case DNS_UPD_SRVIP_NOT_FOUND:
3854 goto save_ip;
3855
3856 case DNS_UPD_CNAME:
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003857 goto invalid;
3858
Baptiste Assmann0453a1d2015-09-09 00:51:08 +02003859 case DNS_UPD_NO_IP_FOUND:
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003860 has_no_ip = 1;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003861 goto update_status;
Baptiste Assmann0453a1d2015-09-09 00:51:08 +02003862
Baptiste Assmannfad03182015-10-28 02:03:32 +01003863 case DNS_UPD_NAME_ERROR:
Baptiste Assmannfad03182015-10-28 02:03:32 +01003864 /* update resolution status to OTHER error type */
Christopher Faulet67957bd2017-09-27 11:00:59 +02003865 resolution->status = RSLV_STATUS_OTHER;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003866 goto update_status;
Baptiste Assmannfad03182015-10-28 02:03:32 +01003867
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003868 default:
3869 goto invalid;
3870
3871 }
3872
3873 save_ip:
Christopher Faulet67957bd2017-09-27 11:00:59 +02003874 if (nameserver) {
Amaury Denoyellefbd0bc92020-10-05 11:49:46 +02003875 nameserver->counters->update++;
Christopher Faulet67957bd2017-09-27 11:00:59 +02003876 /* save the first ip we found */
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003877 chunk_printf(chk, "%s/%s", nameserver->resolvers->id, nameserver->id);
Christopher Faulet67957bd2017-09-27 11:00:59 +02003878 }
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003879 else
3880 chunk_printf(chk, "DNS cache");
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003881 update_server_addr(s, firstip, firstip_sin_family, (char *) chk->area);
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003882
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003883 update_status:
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003884 snr_update_srv_status(s, has_no_ip);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003885 return 1;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003886
3887 invalid:
Christopher Faulet3bbd65b2017-09-15 11:55:45 +02003888 if (nameserver) {
Amaury Denoyellefbd0bc92020-10-05 11:49:46 +02003889 nameserver->counters->invalid++;
Christopher Faulet67957bd2017-09-27 11:00:59 +02003890 goto update_status;
Christopher Faulet3bbd65b2017-09-15 11:55:45 +02003891 }
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003892 snr_update_srv_status(s, has_no_ip);
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003893 return 0;
3894}
3895
3896/*
3897 * Server Name Resolution error management callback
3898 * returns:
3899 * 0 on error
3900 * 1 when no error or safe ignore
Willy Tarreau46b7f532018-08-21 11:54:26 +02003901 *
3902 * Grabs the server's lock.
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003903 */
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003904int snr_resolution_error_cb(struct dns_requester *requester, int error_code)
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003905{
Christopher Faulet67957bd2017-09-27 11:00:59 +02003906 struct server *s;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003907
Christopher Faulet67957bd2017-09-27 11:00:59 +02003908 s = objt_server(requester->owner);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003909 if (!s)
3910 return 1;
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003911 HA_SPIN_LOCK(SERVER_LOCK, &s->lock);
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003912 snr_update_srv_status(s, 0);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003913 HA_SPIN_UNLOCK(SERVER_LOCK, &s->lock);
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003914 return 1;
3915}
3916
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003917/*
3918 * Function to check if <ip> is already affected to a server in the backend
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003919 * which owns <srv> and is up.
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003920 * It returns a pointer to the first server found or NULL if <ip> is not yet
3921 * assigned.
Olivier Houchard28381072017-11-06 17:30:28 +01003922 *
3923 * Must be called with server lock held
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003924 */
3925struct server *snr_check_ip_callback(struct server *srv, void *ip, unsigned char *ip_family)
3926{
3927 struct server *tmpsrv;
3928 struct proxy *be;
3929
3930 if (!srv)
3931 return NULL;
3932
3933 be = srv->proxy;
3934 for (tmpsrv = be->srv; tmpsrv; tmpsrv = tmpsrv->next) {
Emeric Brune9fd6b52017-11-02 17:20:39 +01003935 /* we found the current server is the same, ignore it */
3936 if (srv == tmpsrv)
3937 continue;
3938
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003939 /* We want to compare the IP in the record with the IP of the servers in the
3940 * same backend, only if:
3941 * * DNS resolution is enabled on the server
3942 * * the hostname used for the resolution by our server is the same than the
3943 * one used for the server found in the backend
3944 * * the server found in the backend is not our current server
3945 */
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003946 HA_SPIN_LOCK(SERVER_LOCK, &tmpsrv->lock);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003947 if ((tmpsrv->hostname_dn == NULL) ||
3948 (srv->hostname_dn_len != tmpsrv->hostname_dn_len) ||
3949 (strcmp(srv->hostname_dn, tmpsrv->hostname_dn) != 0) ||
Emeric Brune9fd6b52017-11-02 17:20:39 +01003950 (srv->puid == tmpsrv->puid)) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003951 HA_SPIN_UNLOCK(SERVER_LOCK, &tmpsrv->lock);
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003952 continue;
Emeric Brune9fd6b52017-11-02 17:20:39 +01003953 }
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003954
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003955 /* If the server has been taken down, don't consider it */
Emeric Brune9fd6b52017-11-02 17:20:39 +01003956 if (tmpsrv->next_admin & SRV_ADMF_RMAINT) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003957 HA_SPIN_UNLOCK(SERVER_LOCK, &tmpsrv->lock);
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003958 continue;
Emeric Brune9fd6b52017-11-02 17:20:39 +01003959 }
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003960
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003961 /* At this point, we have 2 different servers using the same DNS hostname
3962 * for their respective resolution.
3963 */
3964 if (*ip_family == tmpsrv->addr.ss_family &&
3965 ((tmpsrv->addr.ss_family == AF_INET &&
3966 memcmp(ip, &((struct sockaddr_in *)&tmpsrv->addr)->sin_addr, 4) == 0) ||
3967 (tmpsrv->addr.ss_family == AF_INET6 &&
3968 memcmp(ip, &((struct sockaddr_in6 *)&tmpsrv->addr)->sin6_addr, 16) == 0))) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003969 HA_SPIN_UNLOCK(SERVER_LOCK, &tmpsrv->lock);
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003970 return tmpsrv;
3971 }
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003972 HA_SPIN_UNLOCK(SERVER_LOCK, &tmpsrv->lock);
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003973 }
3974
Emeric Brune9fd6b52017-11-02 17:20:39 +01003975
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003976 return NULL;
3977}
3978
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01003979/* Sets the server's address (srv->addr) from srv->hostname using the libc's
3980 * resolver. This is suited for initial address configuration. Returns 0 on
3981 * success otherwise a non-zero error code. In case of error, *err_code, if
3982 * not NULL, is filled up.
3983 */
3984int srv_set_addr_via_libc(struct server *srv, int *err_code)
3985{
3986 if (str2ip2(srv->hostname, &srv->addr, 1) == NULL) {
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01003987 if (err_code)
Willy Tarreau465b6e52016-11-07 19:19:22 +01003988 *err_code |= ERR_WARN;
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01003989 return 1;
3990 }
3991 return 0;
3992}
3993
Frédéric Lécailleb418c122017-04-26 11:24:02 +02003994/* Set the server's FDQN (->hostname) from <hostname>.
3995 * Returns -1 if failed, 0 if not.
Willy Tarreau46b7f532018-08-21 11:54:26 +02003996 *
3997 * Must be called with the server lock held.
Frédéric Lécailleb418c122017-04-26 11:24:02 +02003998 */
Olivier Houchardd16bfe62017-10-31 15:21:19 +01003999int srv_set_fqdn(struct server *srv, const char *hostname, int dns_locked)
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004000{
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004001 struct dns_resolution *resolution;
Christopher Faulet67957bd2017-09-27 11:00:59 +02004002 char *hostname_dn;
4003 int hostname_len, hostname_dn_len;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004004
Frédéric Lécaille5afb3cf2018-08-21 15:04:23 +02004005 /* Note that the server lock is already held. */
4006 if (!srv->resolvers)
4007 return -1;
4008
Olivier Houchardd16bfe62017-10-31 15:21:19 +01004009 if (!dns_locked)
Christopher Faulet2a944ee2017-11-07 10:42:54 +01004010 HA_SPIN_LOCK(DNS_LOCK, &srv->resolvers->lock);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004011 /* run time DNS resolution was not active for this server
4012 * and we can't enable it at run time for now.
4013 */
4014 if (!srv->dns_requester)
Christopher Fauletb2812a62017-10-04 16:17:58 +02004015 goto err;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004016
4017 chunk_reset(&trash);
Christopher Faulet67957bd2017-09-27 11:00:59 +02004018 hostname_len = strlen(hostname);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004019 hostname_dn = trash.area;
Christopher Faulet67957bd2017-09-27 11:00:59 +02004020 hostname_dn_len = dns_str_to_dn_label(hostname, hostname_len + 1,
4021 hostname_dn, trash.size);
4022 if (hostname_dn_len == -1)
Christopher Fauletb2812a62017-10-04 16:17:58 +02004023 goto err;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004024
Christopher Faulet67957bd2017-09-27 11:00:59 +02004025 resolution = srv->dns_requester->resolution;
4026 if (resolution &&
4027 resolution->hostname_dn &&
4028 !strcmp(resolution->hostname_dn, hostname_dn))
Christopher Fauletb2812a62017-10-04 16:17:58 +02004029 goto end;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004030
Christopher Faulet67957bd2017-09-27 11:00:59 +02004031 dns_unlink_resolution(srv->dns_requester);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004032
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004033 free(srv->hostname);
4034 free(srv->hostname_dn);
Christopher Faulet67957bd2017-09-27 11:00:59 +02004035 srv->hostname = strdup(hostname);
4036 srv->hostname_dn = strdup(hostname_dn);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004037 srv->hostname_dn_len = hostname_dn_len;
4038 if (!srv->hostname || !srv->hostname_dn)
Christopher Fauletb2812a62017-10-04 16:17:58 +02004039 goto err;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004040
Baptiste Assmann13a92322019-06-07 09:40:55 +02004041 if (srv->flags & SRV_F_NO_RESOLUTION)
4042 goto end;
4043
Olivier Houchard55dcdf42017-11-06 15:15:04 +01004044 if (dns_link_resolution(srv, OBJ_TYPE_SERVER, 1) == -1)
Christopher Fauletb2812a62017-10-04 16:17:58 +02004045 goto err;
4046
4047 end:
Olivier Houchardd16bfe62017-10-31 15:21:19 +01004048 if (!dns_locked)
Christopher Faulet2a944ee2017-11-07 10:42:54 +01004049 HA_SPIN_UNLOCK(DNS_LOCK, &srv->resolvers->lock);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004050 return 0;
Christopher Fauletb2812a62017-10-04 16:17:58 +02004051
4052 err:
Olivier Houchardd16bfe62017-10-31 15:21:19 +01004053 if (!dns_locked)
Christopher Faulet2a944ee2017-11-07 10:42:54 +01004054 HA_SPIN_UNLOCK(DNS_LOCK, &srv->resolvers->lock);
Christopher Fauletb2812a62017-10-04 16:17:58 +02004055 return -1;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004056}
4057
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01004058/* Sets the server's address (srv->addr) from srv->lastaddr which was filled
4059 * from the state file. This is suited for initial address configuration.
4060 * Returns 0 on success otherwise a non-zero error code. In case of error,
4061 * *err_code, if not NULL, is filled up.
4062 */
4063static int srv_apply_lastaddr(struct server *srv, int *err_code)
4064{
4065 if (!str2ip2(srv->lastaddr, &srv->addr, 0)) {
4066 if (err_code)
4067 *err_code |= ERR_WARN;
4068 return 1;
4069 }
4070 return 0;
4071}
4072
Willy Tarreau25e51522016-11-04 15:10:17 +01004073/* returns 0 if no error, otherwise a combination of ERR_* flags */
4074static int srv_iterate_initaddr(struct server *srv)
4075{
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01004076 char *name = srv->hostname;
Willy Tarreau25e51522016-11-04 15:10:17 +01004077 int return_code = 0;
4078 int err_code;
4079 unsigned int methods;
4080
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01004081 /* If no addr and no hostname set, get the name from the DNS SRV request */
4082 if (!name && srv->srvrq)
4083 name = srv->srvrq->name;
4084
Willy Tarreau25e51522016-11-04 15:10:17 +01004085 methods = srv->init_addr_methods;
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01004086 if (!methods) {
4087 /* otherwise default to "last,libc" */
Willy Tarreau25e51522016-11-04 15:10:17 +01004088 srv_append_initaddr(&methods, SRV_IADDR_LAST);
4089 srv_append_initaddr(&methods, SRV_IADDR_LIBC);
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01004090 if (srv->resolvers_id) {
4091 /* dns resolution is configured, add "none" to not fail on startup */
4092 srv_append_initaddr(&methods, SRV_IADDR_NONE);
4093 }
Willy Tarreau25e51522016-11-04 15:10:17 +01004094 }
4095
Willy Tarreau3eed10e2016-11-07 21:03:16 +01004096 /* "-dr" : always append "none" so that server addresses resolution
4097 * failures are silently ignored, this is convenient to validate some
4098 * configs out of their environment.
4099 */
4100 if (global.tune.options & GTUNE_RESOLVE_DONTFAIL)
4101 srv_append_initaddr(&methods, SRV_IADDR_NONE);
4102
Willy Tarreau25e51522016-11-04 15:10:17 +01004103 while (methods) {
4104 err_code = 0;
4105 switch (srv_get_next_initaddr(&methods)) {
4106 case SRV_IADDR_LAST:
4107 if (!srv->lastaddr)
4108 continue;
4109 if (srv_apply_lastaddr(srv, &err_code) == 0)
Olivier Houchard4e694042017-03-14 20:01:29 +01004110 goto out;
Willy Tarreau25e51522016-11-04 15:10:17 +01004111 return_code |= err_code;
4112 break;
4113
4114 case SRV_IADDR_LIBC:
4115 if (!srv->hostname)
4116 continue;
4117 if (srv_set_addr_via_libc(srv, &err_code) == 0)
Olivier Houchard4e694042017-03-14 20:01:29 +01004118 goto out;
Willy Tarreau25e51522016-11-04 15:10:17 +01004119 return_code |= err_code;
4120 break;
4121
Willy Tarreau37ebe122016-11-04 15:17:58 +01004122 case SRV_IADDR_NONE:
4123 srv_set_admin_flag(srv, SRV_ADMF_RMAINT, NULL);
Willy Tarreau465b6e52016-11-07 19:19:22 +01004124 if (return_code) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01004125 ha_warning("parsing [%s:%d] : 'server %s' : could not resolve address '%s', disabling server.\n",
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01004126 srv->conf.file, srv->conf.line, srv->id, name);
Willy Tarreau465b6e52016-11-07 19:19:22 +01004127 }
Willy Tarreau37ebe122016-11-04 15:17:58 +01004128 return return_code;
4129
Willy Tarreau4310d362016-11-02 15:05:56 +01004130 case SRV_IADDR_IP:
4131 ipcpy(&srv->init_addr, &srv->addr);
4132 if (return_code) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01004133 ha_warning("parsing [%s:%d] : 'server %s' : could not resolve address '%s', falling back to configured address.\n",
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01004134 srv->conf.file, srv->conf.line, srv->id, name);
Willy Tarreau4310d362016-11-02 15:05:56 +01004135 }
Olivier Houchard4e694042017-03-14 20:01:29 +01004136 goto out;
Willy Tarreau4310d362016-11-02 15:05:56 +01004137
Willy Tarreau25e51522016-11-04 15:10:17 +01004138 default: /* unhandled method */
4139 break;
4140 }
4141 }
4142
4143 if (!return_code) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01004144 ha_alert("parsing [%s:%d] : 'server %s' : no method found to resolve address '%s'\n",
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01004145 srv->conf.file, srv->conf.line, srv->id, name);
Willy Tarreau25e51522016-11-04 15:10:17 +01004146 }
Willy Tarreau465b6e52016-11-07 19:19:22 +01004147 else {
Christopher Faulet767a84b2017-11-24 16:50:31 +01004148 ha_alert("parsing [%s:%d] : 'server %s' : could not resolve address '%s'.\n",
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01004149 srv->conf.file, srv->conf.line, srv->id, name);
Willy Tarreau465b6e52016-11-07 19:19:22 +01004150 }
Willy Tarreau25e51522016-11-04 15:10:17 +01004151
4152 return_code |= ERR_ALERT | ERR_FATAL;
4153 return return_code;
Olivier Houchard4e694042017-03-14 20:01:29 +01004154out:
4155 srv_set_dyncookie(srv);
4156 return return_code;
Willy Tarreau25e51522016-11-04 15:10:17 +01004157}
4158
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01004159/*
4160 * This function parses all backends and all servers within each backend
4161 * and performs servers' addr resolution based on information provided by:
4162 * - configuration file
4163 * - server-state file (states provided by an 'old' haproxy process)
4164 *
4165 * Returns 0 if no error, otherwise, a combination of ERR_ flags.
4166 */
4167int srv_init_addr(void)
4168{
4169 struct proxy *curproxy;
4170 int return_code = 0;
4171
Olivier Houchardfbc74e82017-11-24 16:54:05 +01004172 curproxy = proxies_list;
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01004173 while (curproxy) {
4174 struct server *srv;
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01004175
4176 /* servers are in backend only */
4177 if (!(curproxy->cap & PR_CAP_BE))
4178 goto srv_init_addr_next;
4179
Willy Tarreau25e51522016-11-04 15:10:17 +01004180 for (srv = curproxy->srv; srv; srv = srv->next)
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01004181 if (srv->hostname || srv->srvrq)
Willy Tarreau3d609a72017-09-06 14:22:45 +02004182 return_code |= srv_iterate_initaddr(srv);
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01004183
4184 srv_init_addr_next:
4185 curproxy = curproxy->next;
4186 }
4187
4188 return return_code;
4189}
4190
Willy Tarreau46b7f532018-08-21 11:54:26 +02004191/*
4192 * Must be called with the server lock held.
4193 */
Olivier Houchardd16bfe62017-10-31 15:21:19 +01004194const char *update_server_fqdn(struct server *server, const char *fqdn, const char *updater, int dns_locked)
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004195{
4196
Willy Tarreau83061a82018-07-13 11:56:34 +02004197 struct buffer *msg;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004198
4199 msg = get_trash_chunk();
4200 chunk_reset(msg);
4201
Olivier Houchard8da5f982017-08-04 18:35:36 +02004202 if (server->hostname && !strcmp(fqdn, server->hostname)) {
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004203 chunk_appendf(msg, "no need to change the FDQN");
4204 goto out;
4205 }
4206
4207 if (strlen(fqdn) > DNS_MAX_NAME_SIZE || invalid_domainchar(fqdn)) {
4208 chunk_appendf(msg, "invalid fqdn '%s'", fqdn);
4209 goto out;
4210 }
4211
4212 chunk_appendf(msg, "%s/%s changed its FQDN from %s to %s",
4213 server->proxy->id, server->id, server->hostname, fqdn);
4214
Olivier Houchardd16bfe62017-10-31 15:21:19 +01004215 if (srv_set_fqdn(server, fqdn, dns_locked) < 0) {
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004216 chunk_reset(msg);
4217 chunk_appendf(msg, "could not update %s/%s FQDN",
4218 server->proxy->id, server->id);
4219 goto out;
4220 }
4221
4222 /* Flag as FQDN set from stats socket. */
Emeric Brun52a91d32017-08-31 14:41:55 +02004223 server->next_admin |= SRV_ADMF_HMAINT;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004224
4225 out:
4226 if (updater)
4227 chunk_appendf(msg, " by '%s'", updater);
4228 chunk_appendf(msg, "\n");
4229
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004230 return msg->area;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004231}
4232
4233
Willy Tarreau21b069d2016-11-23 17:15:08 +01004234/* Expects to find a backend and a server in <arg> under the form <backend>/<server>,
4235 * and returns the pointer to the server. Otherwise, display adequate error messages
Willy Tarreau3b6e5472016-11-24 15:53:53 +01004236 * on the CLI, sets the CLI's state to CLI_ST_PRINT and returns NULL. This is only
Willy Tarreau21b069d2016-11-23 17:15:08 +01004237 * used for CLI commands requiring a server name.
4238 * Important: the <arg> is modified to remove the '/'.
4239 */
4240struct server *cli_find_server(struct appctx *appctx, char *arg)
4241{
4242 struct proxy *px;
4243 struct server *sv;
4244 char *line;
4245
4246 /* split "backend/server" and make <line> point to server */
4247 for (line = arg; *line; line++)
4248 if (*line == '/') {
4249 *line++ = '\0';
4250 break;
4251 }
4252
4253 if (!*line || !*arg) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004254 cli_err(appctx, "Require 'backend/server'.\n");
Willy Tarreau21b069d2016-11-23 17:15:08 +01004255 return NULL;
4256 }
4257
4258 if (!get_backend_server(arg, line, &px, &sv)) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004259 cli_err(appctx, px ? "No such server.\n" : "No such backend.\n");
Willy Tarreau21b069d2016-11-23 17:15:08 +01004260 return NULL;
4261 }
4262
Willy Tarreauc3914d42020-09-24 08:39:22 +02004263 if (px->disabled) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004264 cli_err(appctx, "Proxy is disabled.\n");
Willy Tarreau21b069d2016-11-23 17:15:08 +01004265 return NULL;
4266 }
4267
4268 return sv;
4269}
4270
William Lallemand222baf22016-11-19 02:00:33 +01004271
Willy Tarreau46b7f532018-08-21 11:54:26 +02004272/* grabs the server lock */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004273static int cli_parse_set_server(char **args, char *payload, struct appctx *appctx, void *private)
William Lallemand222baf22016-11-19 02:00:33 +01004274{
4275 struct server *sv;
4276 const char *warning;
4277
4278 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4279 return 1;
4280
4281 sv = cli_find_server(appctx, args[2]);
4282 if (!sv)
4283 return 1;
4284
Christopher Faulet2a944ee2017-11-07 10:42:54 +01004285 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Emeric Brun9f0b4582017-10-23 14:39:51 +02004286
William Lallemand222baf22016-11-19 02:00:33 +01004287 if (strcmp(args[3], "weight") == 0) {
4288 warning = server_parse_weight_change_request(sv, args[4]);
Willy Tarreau9d008692019-08-09 11:21:01 +02004289 if (warning)
4290 cli_err(appctx, warning);
William Lallemand222baf22016-11-19 02:00:33 +01004291 }
4292 else if (strcmp(args[3], "state") == 0) {
4293 if (strcmp(args[4], "ready") == 0)
4294 srv_adm_set_ready(sv);
4295 else if (strcmp(args[4], "drain") == 0)
4296 srv_adm_set_drain(sv);
4297 else if (strcmp(args[4], "maint") == 0)
4298 srv_adm_set_maint(sv);
Willy Tarreau9d008692019-08-09 11:21:01 +02004299 else
4300 cli_err(appctx, "'set server <srv> state' expects 'ready', 'drain' and 'maint'.\n");
William Lallemand222baf22016-11-19 02:00:33 +01004301 }
4302 else if (strcmp(args[3], "health") == 0) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004303 if (sv->track)
4304 cli_err(appctx, "cannot change health on a tracking server.\n");
William Lallemand222baf22016-11-19 02:00:33 +01004305 else if (strcmp(args[4], "up") == 0) {
4306 sv->check.health = sv->check.rise + sv->check.fall - 1;
Emeric Brun5a133512017-10-19 14:42:30 +02004307 srv_set_running(sv, "changed from CLI", NULL);
William Lallemand222baf22016-11-19 02:00:33 +01004308 }
4309 else if (strcmp(args[4], "stopping") == 0) {
4310 sv->check.health = sv->check.rise + sv->check.fall - 1;
Emeric Brun5a133512017-10-19 14:42:30 +02004311 srv_set_stopping(sv, "changed from CLI", NULL);
William Lallemand222baf22016-11-19 02:00:33 +01004312 }
4313 else if (strcmp(args[4], "down") == 0) {
4314 sv->check.health = 0;
Emeric Brun5a133512017-10-19 14:42:30 +02004315 srv_set_stopped(sv, "changed from CLI", NULL);
William Lallemand222baf22016-11-19 02:00:33 +01004316 }
Willy Tarreau9d008692019-08-09 11:21:01 +02004317 else
4318 cli_err(appctx, "'set server <srv> health' expects 'up', 'stopping', or 'down'.\n");
William Lallemand222baf22016-11-19 02:00:33 +01004319 }
4320 else if (strcmp(args[3], "agent") == 0) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004321 if (!(sv->agent.state & CHK_ST_ENABLED))
4322 cli_err(appctx, "agent checks are not enabled on this server.\n");
William Lallemand222baf22016-11-19 02:00:33 +01004323 else if (strcmp(args[4], "up") == 0) {
4324 sv->agent.health = sv->agent.rise + sv->agent.fall - 1;
Emeric Brun5a133512017-10-19 14:42:30 +02004325 srv_set_running(sv, "changed from CLI", NULL);
William Lallemand222baf22016-11-19 02:00:33 +01004326 }
4327 else if (strcmp(args[4], "down") == 0) {
4328 sv->agent.health = 0;
Emeric Brun5a133512017-10-19 14:42:30 +02004329 srv_set_stopped(sv, "changed from CLI", NULL);
William Lallemand222baf22016-11-19 02:00:33 +01004330 }
Willy Tarreau9d008692019-08-09 11:21:01 +02004331 else
4332 cli_err(appctx, "'set server <srv> agent' expects 'up' or 'down'.\n");
William Lallemand222baf22016-11-19 02:00:33 +01004333 }
Misiek2da082d2017-01-09 09:40:42 +01004334 else if (strcmp(args[3], "agent-addr") == 0) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004335 if (!(sv->agent.state & CHK_ST_ENABLED))
4336 cli_err(appctx, "agent checks are not enabled on this server.\n");
4337 else if (str2ip(args[4], &sv->agent.addr) == NULL)
4338 cli_err(appctx, "incorrect addr address given for agent.\n");
Misiek2da082d2017-01-09 09:40:42 +01004339 }
4340 else if (strcmp(args[3], "agent-send") == 0) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004341 if (!(sv->agent.state & CHK_ST_ENABLED))
4342 cli_err(appctx, "agent checks are not enabled on this server.\n");
4343 else {
Christopher Faulet0ae3d1d2020-04-06 17:54:24 +02004344 if (!set_srv_agent_send(sv, args[4]))
Willy Tarreau9d008692019-08-09 11:21:01 +02004345 cli_err(appctx, "cannot allocate memory for new string.\n");
Misiek2da082d2017-01-09 09:40:42 +01004346 }
4347 }
William Lallemand222baf22016-11-19 02:00:33 +01004348 else if (strcmp(args[3], "check-port") == 0) {
4349 int i = 0;
4350 if (strl2irc(args[4], strlen(args[4]), &i) != 0) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004351 cli_err(appctx, "'set server <srv> check-port' expects an integer as argument.\n");
Willy Tarreau6ce38f32017-11-05 10:19:23 +01004352 goto out_unlock;
William Lallemand222baf22016-11-19 02:00:33 +01004353 }
4354 if ((i < 0) || (i > 65535)) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004355 cli_err(appctx, "provided port is not valid.\n");
Willy Tarreau6ce38f32017-11-05 10:19:23 +01004356 goto out_unlock;
William Lallemand222baf22016-11-19 02:00:33 +01004357 }
4358 /* prevent the update of port to 0 if MAPPORTS are in use */
4359 if ((sv->flags & SRV_F_MAPPORTS) && (i == 0)) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004360 cli_err(appctx, "can't unset 'port' since MAPPORTS is in use.\n");
Willy Tarreau6ce38f32017-11-05 10:19:23 +01004361 goto out_unlock;
William Lallemand222baf22016-11-19 02:00:33 +01004362 }
4363 sv->check.port = i;
Willy Tarreau9d008692019-08-09 11:21:01 +02004364 cli_msg(appctx, LOG_NOTICE, "health check port updated.\n");
William Lallemand222baf22016-11-19 02:00:33 +01004365 }
4366 else if (strcmp(args[3], "addr") == 0) {
4367 char *addr = NULL;
4368 char *port = NULL;
4369 if (strlen(args[4]) == 0) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004370 cli_err(appctx, "set server <b>/<s> addr requires an address and optionally a port.\n");
Willy Tarreau6ce38f32017-11-05 10:19:23 +01004371 goto out_unlock;
William Lallemand222baf22016-11-19 02:00:33 +01004372 }
4373 else {
4374 addr = args[4];
4375 }
4376 if (strcmp(args[5], "port") == 0) {
4377 port = args[6];
4378 }
4379 warning = update_server_addr_port(sv, addr, port, "stats socket command");
Willy Tarreau9d008692019-08-09 11:21:01 +02004380 if (warning)
4381 cli_msg(appctx, LOG_WARNING, warning);
William Lallemand222baf22016-11-19 02:00:33 +01004382 srv_clr_admin_flag(sv, SRV_ADMF_RMAINT);
4383 }
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004384 else if (strcmp(args[3], "fqdn") == 0) {
4385 if (!*args[4]) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004386 cli_err(appctx, "set server <b>/<s> fqdn requires a FQDN.\n");
Willy Tarreau6ce38f32017-11-05 10:19:23 +01004387 goto out_unlock;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004388 }
Baptiste Assmann13a92322019-06-07 09:40:55 +02004389 /* ensure runtime resolver will process this new fqdn */
4390 if (sv->flags & SRV_F_NO_RESOLUTION) {
4391 sv->flags &= ~SRV_F_NO_RESOLUTION;
4392 }
Olivier Houchardd16bfe62017-10-31 15:21:19 +01004393 warning = update_server_fqdn(sv, args[4], "stats socket command", 0);
Willy Tarreau9d008692019-08-09 11:21:01 +02004394 if (warning)
4395 cli_msg(appctx, LOG_WARNING, warning);
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004396 }
William Lallemand222baf22016-11-19 02:00:33 +01004397 else {
Willy Tarreau9d008692019-08-09 11:21:01 +02004398 cli_err(appctx,
4399 "'set server <srv>' only supports 'agent', 'health', 'state',"
4400 " 'weight', 'addr', 'fqdn' and 'check-port'.\n");
William Lallemand222baf22016-11-19 02:00:33 +01004401 }
Willy Tarreau6ce38f32017-11-05 10:19:23 +01004402 out_unlock:
Christopher Faulet2a944ee2017-11-07 10:42:54 +01004403 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
William Lallemand222baf22016-11-19 02:00:33 +01004404 return 1;
4405}
4406
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004407static int cli_parse_get_weight(char **args, char *payload, struct appctx *appctx, void *private)
William Lallemand6b160942016-11-22 12:34:35 +01004408{
4409 struct stream_interface *si = appctx->owner;
4410 struct proxy *px;
4411 struct server *sv;
4412 char *line;
4413
4414
4415 /* split "backend/server" and make <line> point to server */
4416 for (line = args[2]; *line; line++)
4417 if (*line == '/') {
4418 *line++ = '\0';
4419 break;
4420 }
4421
Willy Tarreau9d008692019-08-09 11:21:01 +02004422 if (!*line)
4423 return cli_err(appctx, "Require 'backend/server'.\n");
William Lallemand6b160942016-11-22 12:34:35 +01004424
Willy Tarreau9d008692019-08-09 11:21:01 +02004425 if (!get_backend_server(args[2], line, &px, &sv))
4426 return cli_err(appctx, px ? "No such server.\n" : "No such backend.\n");
William Lallemand6b160942016-11-22 12:34:35 +01004427
4428 /* return server's effective weight at the moment */
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004429 snprintf(trash.area, trash.size, "%d (initial %d)\n", sv->uweight,
4430 sv->iweight);
4431 if (ci_putstr(si_ic(si), trash.area) == -1) {
Willy Tarreaudb398432018-11-15 11:08:52 +01004432 si_rx_room_blk(si);
Christopher Faulet90b5abe2016-12-05 14:25:08 +01004433 return 0;
4434 }
William Lallemand6b160942016-11-22 12:34:35 +01004435 return 1;
4436}
4437
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004438/* Parse a "set weight" command.
4439 *
4440 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004441 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004442static int cli_parse_set_weight(char **args, char *payload, struct appctx *appctx, void *private)
William Lallemand6b160942016-11-22 12:34:35 +01004443{
4444 struct server *sv;
4445 const char *warning;
4446
4447 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4448 return 1;
4449
4450 sv = cli_find_server(appctx, args[2]);
4451 if (!sv)
4452 return 1;
4453
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004454 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
4455
William Lallemand6b160942016-11-22 12:34:35 +01004456 warning = server_parse_weight_change_request(sv, args[3]);
Willy Tarreau9d008692019-08-09 11:21:01 +02004457 if (warning)
4458 cli_err(appctx, warning);
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004459
4460 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
4461
William Lallemand6b160942016-11-22 12:34:35 +01004462 return 1;
4463}
4464
Willy Tarreau46b7f532018-08-21 11:54:26 +02004465/* parse a "set maxconn server" command. It always returns 1.
4466 *
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004467 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004468 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004469static int cli_parse_set_maxconn_server(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreaub8026272016-11-23 11:26:56 +01004470{
4471 struct server *sv;
4472 const char *warning;
4473
4474 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4475 return 1;
4476
4477 sv = cli_find_server(appctx, args[3]);
4478 if (!sv)
4479 return 1;
4480
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004481 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
4482
Willy Tarreaub8026272016-11-23 11:26:56 +01004483 warning = server_parse_maxconn_change_request(sv, args[4]);
Willy Tarreau9d008692019-08-09 11:21:01 +02004484 if (warning)
4485 cli_err(appctx, warning);
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004486
4487 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
4488
Willy Tarreaub8026272016-11-23 11:26:56 +01004489 return 1;
4490}
William Lallemand6b160942016-11-22 12:34:35 +01004491
Willy Tarreau46b7f532018-08-21 11:54:26 +02004492/* parse a "disable agent" command. It always returns 1.
4493 *
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004494 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004495 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004496static int cli_parse_disable_agent(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004497{
4498 struct server *sv;
4499
4500 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4501 return 1;
4502
4503 sv = cli_find_server(appctx, args[2]);
4504 if (!sv)
4505 return 1;
4506
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004507 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004508 sv->agent.state &= ~CHK_ST_ENABLED;
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004509 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004510 return 1;
4511}
4512
Willy Tarreau46b7f532018-08-21 11:54:26 +02004513/* parse a "disable health" command. It always returns 1.
4514 *
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004515 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004516 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004517static int cli_parse_disable_health(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004518{
4519 struct server *sv;
4520
4521 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4522 return 1;
4523
4524 sv = cli_find_server(appctx, args[2]);
4525 if (!sv)
4526 return 1;
4527
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004528 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004529 sv->check.state &= ~CHK_ST_ENABLED;
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004530 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004531 return 1;
4532}
4533
Willy Tarreau46b7f532018-08-21 11:54:26 +02004534/* parse a "disable server" command. It always returns 1.
4535 *
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004536 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004537 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004538static int cli_parse_disable_server(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreauffb4d582016-11-24 12:47:00 +01004539{
4540 struct server *sv;
4541
4542 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4543 return 1;
4544
4545 sv = cli_find_server(appctx, args[2]);
4546 if (!sv)
4547 return 1;
4548
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004549 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Willy Tarreauffb4d582016-11-24 12:47:00 +01004550 srv_adm_set_maint(sv);
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004551 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
Willy Tarreauffb4d582016-11-24 12:47:00 +01004552 return 1;
4553}
4554
Willy Tarreau46b7f532018-08-21 11:54:26 +02004555/* parse a "enable agent" command. It always returns 1.
4556 *
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004557 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004558 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004559static int cli_parse_enable_agent(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004560{
4561 struct server *sv;
4562
4563 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4564 return 1;
4565
4566 sv = cli_find_server(appctx, args[2]);
4567 if (!sv)
4568 return 1;
4569
Willy Tarreau9d008692019-08-09 11:21:01 +02004570 if (!(sv->agent.state & CHK_ST_CONFIGURED))
4571 return cli_err(appctx, "Agent was not configured on this server, cannot enable.\n");
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004572
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004573 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004574 sv->agent.state |= CHK_ST_ENABLED;
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004575 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004576 return 1;
4577}
4578
Willy Tarreau46b7f532018-08-21 11:54:26 +02004579/* parse a "enable health" command. It always returns 1.
4580 *
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004581 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004582 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004583static int cli_parse_enable_health(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004584{
4585 struct server *sv;
4586
4587 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4588 return 1;
4589
4590 sv = cli_find_server(appctx, args[2]);
4591 if (!sv)
4592 return 1;
4593
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004594 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004595 sv->check.state |= CHK_ST_ENABLED;
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004596 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004597 return 1;
4598}
4599
Willy Tarreau46b7f532018-08-21 11:54:26 +02004600/* parse a "enable server" command. It always returns 1.
4601 *
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004602 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004603 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004604static int cli_parse_enable_server(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreauffb4d582016-11-24 12:47:00 +01004605{
4606 struct server *sv;
4607
4608 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4609 return 1;
4610
4611 sv = cli_find_server(appctx, args[2]);
4612 if (!sv)
4613 return 1;
4614
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004615 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Willy Tarreauffb4d582016-11-24 12:47:00 +01004616 srv_adm_set_ready(sv);
Olivier Houcharde9bad0a2018-01-17 17:39:34 +01004617 if (!(sv->flags & SRV_F_COOKIESET)
4618 && (sv->proxy->ck_opts & PR_CK_DYNAMIC) &&
4619 sv->cookie)
4620 srv_check_for_dup_dyncookie(sv);
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004621 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
Willy Tarreauffb4d582016-11-24 12:47:00 +01004622 return 1;
4623}
4624
William Lallemand222baf22016-11-19 02:00:33 +01004625/* register cli keywords */
4626static struct cli_kw_list cli_kws = {{ },{
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004627 { { "disable", "agent", NULL }, "disable agent : disable agent checks (use 'set server' instead)", cli_parse_disable_agent, NULL },
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004628 { { "disable", "health", NULL }, "disable health : disable health checks (use 'set server' instead)", cli_parse_disable_health, NULL },
Willy Tarreauffb4d582016-11-24 12:47:00 +01004629 { { "disable", "server", NULL }, "disable server : disable a server for maintenance (use 'set server' instead)", cli_parse_disable_server, NULL },
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004630 { { "enable", "agent", NULL }, "enable agent : enable agent checks (use 'set server' instead)", cli_parse_enable_agent, NULL },
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004631 { { "enable", "health", NULL }, "enable health : enable health checks (use 'set server' instead)", cli_parse_enable_health, NULL },
Willy Tarreauffb4d582016-11-24 12:47:00 +01004632 { { "enable", "server", NULL }, "enable server : enable a disabled server (use 'set server' instead)", cli_parse_enable_server, NULL },
Willy Tarreaub8026272016-11-23 11:26:56 +01004633 { { "set", "maxconn", "server", NULL }, "set maxconn server : change a server's maxconn setting", cli_parse_set_maxconn_server, NULL },
William Lallemand222baf22016-11-19 02:00:33 +01004634 { { "set", "server", NULL }, "set server : change a server's state, weight or address", cli_parse_set_server },
William Lallemand6b160942016-11-22 12:34:35 +01004635 { { "get", "weight", NULL }, "get weight : report a server's current weight", cli_parse_get_weight },
4636 { { "set", "weight", NULL }, "set weight : change a server's weight (deprecated)", cli_parse_set_weight },
4637
William Lallemand222baf22016-11-19 02:00:33 +01004638 {{},}
4639}};
4640
Willy Tarreau0108d902018-11-25 19:14:37 +01004641INITCALL1(STG_REGISTER, cli_register_kw, &cli_kws);
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01004642
Emeric Brun64cc49c2017-10-03 14:46:45 +02004643/*
4644 * This function applies server's status changes, it is
4645 * is designed to be called asynchronously.
4646 *
Willy Tarreau1e690bb2020-10-22 11:30:59 +02004647 * Must be called with the server lock held. This may also be called at init
4648 * time as the result of parsing the state file, in which case no lock will be
4649 * held, and the server's warmup task can be null.
Emeric Brun64cc49c2017-10-03 14:46:45 +02004650 */
Willy Tarreau3ff577e2018-08-02 11:48:52 +02004651static void srv_update_status(struct server *s)
Emeric Brun64cc49c2017-10-03 14:46:45 +02004652{
4653 struct check *check = &s->check;
4654 int xferred;
4655 struct proxy *px = s->proxy;
4656 int prev_srv_count = s->proxy->srv_bck + s->proxy->srv_act;
4657 int srv_was_stopping = (s->cur_state == SRV_ST_STOPPING) || (s->cur_admin & SRV_ADMF_DRAIN);
4658 int log_level;
Willy Tarreau83061a82018-07-13 11:56:34 +02004659 struct buffer *tmptrash = NULL;
Emeric Brun64cc49c2017-10-03 14:46:45 +02004660
Emeric Brun64cc49c2017-10-03 14:46:45 +02004661 /* If currently main is not set we try to apply pending state changes */
4662 if (!(s->cur_admin & SRV_ADMF_MAINT)) {
4663 int next_admin;
4664
4665 /* Backup next admin */
4666 next_admin = s->next_admin;
4667
4668 /* restore current admin state */
4669 s->next_admin = s->cur_admin;
4670
4671 if ((s->cur_state != SRV_ST_STOPPED) && (s->next_state == SRV_ST_STOPPED)) {
4672 s->last_change = now.tv_sec;
4673 if (s->proxy->lbprm.set_server_status_down)
4674 s->proxy->lbprm.set_server_status_down(s);
4675
4676 if (s->onmarkeddown & HANA_ONMARKEDDOWN_SHUTDOWNSESSIONS)
4677 srv_shutdown_streams(s, SF_ERR_DOWN);
4678
4679 /* we might have streams queued on this server and waiting for
4680 * a connection. Those which are redispatchable will be queued
4681 * to another server or to the proxy itself.
4682 */
4683 xferred = pendconn_redistribute(s);
4684
4685 tmptrash = alloc_trash_chunk();
4686 if (tmptrash) {
4687 chunk_printf(tmptrash,
4688 "%sServer %s/%s is DOWN", s->flags & SRV_F_BACKUP ? "Backup " : "",
4689 s->proxy->id, s->id);
4690
Emeric Brun5a133512017-10-19 14:42:30 +02004691 srv_append_status(tmptrash, s, NULL, xferred, 0);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004692 ha_warning("%s.\n", tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004693
4694 /* we don't send an alert if the server was previously paused */
4695 log_level = srv_was_stopping ? LOG_NOTICE : LOG_ALERT;
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004696 send_log(s->proxy, log_level, "%s.\n",
4697 tmptrash->area);
4698 send_email_alert(s, log_level, "%s",
4699 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004700 free_trash_chunk(tmptrash);
4701 tmptrash = NULL;
4702 }
4703 if (prev_srv_count && s->proxy->srv_bck == 0 && s->proxy->srv_act == 0)
4704 set_backend_down(s->proxy);
4705
4706 s->counters.down_trans++;
4707 }
4708 else if ((s->cur_state != SRV_ST_STOPPING) && (s->next_state == SRV_ST_STOPPING)) {
4709 s->last_change = now.tv_sec;
4710 if (s->proxy->lbprm.set_server_status_down)
4711 s->proxy->lbprm.set_server_status_down(s);
4712
4713 /* we might have streams queued on this server and waiting for
4714 * a connection. Those which are redispatchable will be queued
4715 * to another server or to the proxy itself.
4716 */
4717 xferred = pendconn_redistribute(s);
4718
4719 tmptrash = alloc_trash_chunk();
4720 if (tmptrash) {
4721 chunk_printf(tmptrash,
4722 "%sServer %s/%s is stopping", s->flags & SRV_F_BACKUP ? "Backup " : "",
4723 s->proxy->id, s->id);
4724
Emeric Brun5a133512017-10-19 14:42:30 +02004725 srv_append_status(tmptrash, s, NULL, xferred, 0);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004726
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004727 ha_warning("%s.\n", tmptrash->area);
4728 send_log(s->proxy, LOG_NOTICE, "%s.\n",
4729 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004730 free_trash_chunk(tmptrash);
4731 tmptrash = NULL;
4732 }
4733
4734 if (prev_srv_count && s->proxy->srv_bck == 0 && s->proxy->srv_act == 0)
4735 set_backend_down(s->proxy);
4736 }
4737 else if (((s->cur_state != SRV_ST_RUNNING) && (s->next_state == SRV_ST_RUNNING))
4738 || ((s->cur_state != SRV_ST_STARTING) && (s->next_state == SRV_ST_STARTING))) {
4739 if (s->proxy->srv_bck == 0 && s->proxy->srv_act == 0) {
4740 if (s->proxy->last_change < now.tv_sec) // ignore negative times
4741 s->proxy->down_time += now.tv_sec - s->proxy->last_change;
4742 s->proxy->last_change = now.tv_sec;
4743 }
4744
Amaury Denoyellefe2bf092020-10-29 15:59:04 +01004745 if (s->cur_state == SRV_ST_STOPPED && s->last_change < now.tv_sec) // ignore negative times
Emeric Brun64cc49c2017-10-03 14:46:45 +02004746 s->down_time += now.tv_sec - s->last_change;
4747
4748 s->last_change = now.tv_sec;
Willy Tarreau1e690bb2020-10-22 11:30:59 +02004749 if (s->next_state == SRV_ST_STARTING && s->warmup)
Emeric Brun64cc49c2017-10-03 14:46:45 +02004750 task_schedule(s->warmup, tick_add(now_ms, MS_TO_TICKS(MAX(1000, s->slowstart / 20))));
4751
Willy Tarreau3ff577e2018-08-02 11:48:52 +02004752 server_recalc_eweight(s, 0);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004753 /* now propagate the status change to any LB algorithms */
4754 if (px->lbprm.update_server_eweight)
4755 px->lbprm.update_server_eweight(s);
4756 else if (srv_willbe_usable(s)) {
4757 if (px->lbprm.set_server_status_up)
4758 px->lbprm.set_server_status_up(s);
4759 }
4760 else {
4761 if (px->lbprm.set_server_status_down)
4762 px->lbprm.set_server_status_down(s);
4763 }
4764
4765 /* If the server is set with "on-marked-up shutdown-backup-sessions",
4766 * and it's not a backup server and its effective weight is > 0,
4767 * then it can accept new connections, so we shut down all streams
4768 * on all backup servers.
4769 */
4770 if ((s->onmarkedup & HANA_ONMARKEDUP_SHUTDOWNBACKUPSESSIONS) &&
4771 !(s->flags & SRV_F_BACKUP) && s->next_eweight)
4772 srv_shutdown_backup_streams(s->proxy, SF_ERR_UP);
4773
4774 /* check if we can handle some connections queued at the proxy. We
4775 * will take as many as we can handle.
4776 */
4777 xferred = pendconn_grab_from_px(s);
4778
4779 tmptrash = alloc_trash_chunk();
4780 if (tmptrash) {
4781 chunk_printf(tmptrash,
4782 "%sServer %s/%s is UP", s->flags & SRV_F_BACKUP ? "Backup " : "",
4783 s->proxy->id, s->id);
4784
Emeric Brun5a133512017-10-19 14:42:30 +02004785 srv_append_status(tmptrash, s, NULL, xferred, 0);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004786 ha_warning("%s.\n", tmptrash->area);
4787 send_log(s->proxy, LOG_NOTICE, "%s.\n",
4788 tmptrash->area);
4789 send_email_alert(s, LOG_NOTICE, "%s",
4790 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004791 free_trash_chunk(tmptrash);
4792 tmptrash = NULL;
4793 }
4794
4795 if (prev_srv_count && s->proxy->srv_bck == 0 && s->proxy->srv_act == 0)
4796 set_backend_down(s->proxy);
4797 }
4798 else if (s->cur_eweight != s->next_eweight) {
4799 /* now propagate the status change to any LB algorithms */
4800 if (px->lbprm.update_server_eweight)
4801 px->lbprm.update_server_eweight(s);
4802 else if (srv_willbe_usable(s)) {
4803 if (px->lbprm.set_server_status_up)
4804 px->lbprm.set_server_status_up(s);
4805 }
4806 else {
4807 if (px->lbprm.set_server_status_down)
4808 px->lbprm.set_server_status_down(s);
4809 }
4810
4811 if (prev_srv_count && s->proxy->srv_bck == 0 && s->proxy->srv_act == 0)
4812 set_backend_down(s->proxy);
4813 }
4814
4815 s->next_admin = next_admin;
4816 }
4817
Emeric Brun5a133512017-10-19 14:42:30 +02004818 /* reset operational state change */
4819 *s->op_st_chg.reason = 0;
4820 s->op_st_chg.status = s->op_st_chg.code = -1;
4821 s->op_st_chg.duration = 0;
Emeric Brun64cc49c2017-10-03 14:46:45 +02004822
4823 /* Now we try to apply pending admin changes */
4824
4825 /* Maintenance must also disable health checks */
4826 if (!(s->cur_admin & SRV_ADMF_MAINT) && (s->next_admin & SRV_ADMF_MAINT)) {
4827 if (s->check.state & CHK_ST_ENABLED) {
4828 s->check.state |= CHK_ST_PAUSED;
4829 check->health = 0;
4830 }
4831
4832 if (s->cur_state == SRV_ST_STOPPED) { /* server was already down */
Olivier Houchard796a2b32017-10-24 17:42:47 +02004833 tmptrash = alloc_trash_chunk();
4834 if (tmptrash) {
4835 chunk_printf(tmptrash,
4836 "%sServer %s/%s was DOWN and now enters maintenance%s%s%s",
4837 s->flags & SRV_F_BACKUP ? "Backup " : "", s->proxy->id, s->id,
4838 *(s->adm_st_chg_cause) ? " (" : "", s->adm_st_chg_cause, *(s->adm_st_chg_cause) ? ")" : "");
Emeric Brun64cc49c2017-10-03 14:46:45 +02004839
Olivier Houchard796a2b32017-10-24 17:42:47 +02004840 srv_append_status(tmptrash, s, NULL, -1, (s->next_admin & SRV_ADMF_FMAINT));
Emeric Brun64cc49c2017-10-03 14:46:45 +02004841
Olivier Houchard796a2b32017-10-24 17:42:47 +02004842 if (!(global.mode & MODE_STARTING)) {
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004843 ha_warning("%s.\n", tmptrash->area);
4844 send_log(s->proxy, LOG_NOTICE, "%s.\n",
4845 tmptrash->area);
Olivier Houchard796a2b32017-10-24 17:42:47 +02004846 }
4847 free_trash_chunk(tmptrash);
4848 tmptrash = NULL;
Emeric Brun64cc49c2017-10-03 14:46:45 +02004849 }
Emeric Brun8f298292017-12-06 16:47:17 +01004850 /* commit new admin status */
4851
4852 s->cur_admin = s->next_admin;
Emeric Brun64cc49c2017-10-03 14:46:45 +02004853 }
4854 else { /* server was still running */
4855 check->health = 0; /* failure */
4856 s->last_change = now.tv_sec;
Emeric Brune3114802017-12-21 14:42:26 +01004857
4858 s->next_state = SRV_ST_STOPPED;
Emeric Brun64cc49c2017-10-03 14:46:45 +02004859 if (s->proxy->lbprm.set_server_status_down)
4860 s->proxy->lbprm.set_server_status_down(s);
4861
Emeric Brun64cc49c2017-10-03 14:46:45 +02004862 if (s->onmarkeddown & HANA_ONMARKEDDOWN_SHUTDOWNSESSIONS)
4863 srv_shutdown_streams(s, SF_ERR_DOWN);
4864
William Dauchy6318d332020-05-02 21:52:36 +02004865 /* force connection cleanup on the given server */
4866 srv_cleanup_connections(s);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004867 /* we might have streams queued on this server and waiting for
4868 * a connection. Those which are redispatchable will be queued
4869 * to another server or to the proxy itself.
4870 */
4871 xferred = pendconn_redistribute(s);
4872
4873 tmptrash = alloc_trash_chunk();
4874 if (tmptrash) {
4875 chunk_printf(tmptrash,
4876 "%sServer %s/%s is going DOWN for maintenance%s%s%s",
4877 s->flags & SRV_F_BACKUP ? "Backup " : "",
4878 s->proxy->id, s->id,
4879 *(s->adm_st_chg_cause) ? " (" : "", s->adm_st_chg_cause, *(s->adm_st_chg_cause) ? ")" : "");
4880
4881 srv_append_status(tmptrash, s, NULL, xferred, (s->next_admin & SRV_ADMF_FMAINT));
4882
4883 if (!(global.mode & MODE_STARTING)) {
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004884 ha_warning("%s.\n", tmptrash->area);
4885 send_log(s->proxy, srv_was_stopping ? LOG_NOTICE : LOG_ALERT, "%s.\n",
4886 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004887 }
4888 free_trash_chunk(tmptrash);
4889 tmptrash = NULL;
4890 }
4891 if (prev_srv_count && s->proxy->srv_bck == 0 && s->proxy->srv_act == 0)
4892 set_backend_down(s->proxy);
4893
4894 s->counters.down_trans++;
4895 }
4896 }
4897 else if ((s->cur_admin & SRV_ADMF_MAINT) && !(s->next_admin & SRV_ADMF_MAINT)) {
4898 /* OK here we're leaving maintenance, we have many things to check,
4899 * because the server might possibly be coming back up depending on
4900 * its state. In practice, leaving maintenance means that we should
4901 * immediately turn to UP (more or less the slowstart) under the
4902 * following conditions :
4903 * - server is neither checked nor tracked
4904 * - server tracks another server which is not checked
4905 * - server tracks another server which is already up
4906 * Which sums up as something simpler :
4907 * "either the tracking server is up or the server's checks are disabled
4908 * or up". Otherwise we only re-enable health checks. There's a special
4909 * case associated to the stopping state which can be inherited. Note
4910 * that the server might still be in drain mode, which is naturally dealt
4911 * with by the lower level functions.
4912 */
4913
4914 if (s->check.state & CHK_ST_ENABLED) {
4915 s->check.state &= ~CHK_ST_PAUSED;
4916 check->health = check->rise; /* start OK but check immediately */
4917 }
4918
4919 if ((!s->track || s->track->next_state != SRV_ST_STOPPED) &&
4920 (!(s->agent.state & CHK_ST_ENABLED) || (s->agent.health >= s->agent.rise)) &&
4921 (!(s->check.state & CHK_ST_ENABLED) || (s->check.health >= s->check.rise))) {
4922 if (s->track && s->track->next_state == SRV_ST_STOPPING) {
4923 s->next_state = SRV_ST_STOPPING;
4924 }
4925 else {
4926 s->next_state = SRV_ST_STARTING;
Willy Tarreau1e690bb2020-10-22 11:30:59 +02004927 if (s->slowstart > 0) {
4928 if (s->warmup)
4929 task_schedule(s->warmup, tick_add(now_ms, MS_TO_TICKS(MAX(1000, s->slowstart / 20))));
4930 }
Emeric Brun64cc49c2017-10-03 14:46:45 +02004931 else
4932 s->next_state = SRV_ST_RUNNING;
4933 }
4934
4935 }
4936
4937 tmptrash = alloc_trash_chunk();
4938 if (tmptrash) {
4939 if (!(s->next_admin & SRV_ADMF_FMAINT) && (s->cur_admin & SRV_ADMF_FMAINT)) {
4940 chunk_printf(tmptrash,
4941 "%sServer %s/%s is %s/%s (leaving forced maintenance)",
4942 s->flags & SRV_F_BACKUP ? "Backup " : "",
4943 s->proxy->id, s->id,
4944 (s->next_state == SRV_ST_STOPPED) ? "DOWN" : "UP",
4945 (s->next_admin & SRV_ADMF_DRAIN) ? "DRAIN" : "READY");
4946 }
4947 if (!(s->next_admin & SRV_ADMF_RMAINT) && (s->cur_admin & SRV_ADMF_RMAINT)) {
4948 chunk_printf(tmptrash,
4949 "%sServer %s/%s ('%s') is %s/%s (resolves again)",
4950 s->flags & SRV_F_BACKUP ? "Backup " : "",
4951 s->proxy->id, s->id, s->hostname,
4952 (s->next_state == SRV_ST_STOPPED) ? "DOWN" : "UP",
4953 (s->next_admin & SRV_ADMF_DRAIN) ? "DRAIN" : "READY");
4954 }
4955 if (!(s->next_admin & SRV_ADMF_IMAINT) && (s->cur_admin & SRV_ADMF_IMAINT)) {
4956 chunk_printf(tmptrash,
4957 "%sServer %s/%s is %s/%s (leaving maintenance)",
4958 s->flags & SRV_F_BACKUP ? "Backup " : "",
4959 s->proxy->id, s->id,
4960 (s->next_state == SRV_ST_STOPPED) ? "DOWN" : "UP",
4961 (s->next_admin & SRV_ADMF_DRAIN) ? "DRAIN" : "READY");
4962 }
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004963 ha_warning("%s.\n", tmptrash->area);
4964 send_log(s->proxy, LOG_NOTICE, "%s.\n",
4965 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004966 free_trash_chunk(tmptrash);
4967 tmptrash = NULL;
4968 }
4969
Willy Tarreau3ff577e2018-08-02 11:48:52 +02004970 server_recalc_eweight(s, 0);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004971 /* now propagate the status change to any LB algorithms */
4972 if (px->lbprm.update_server_eweight)
4973 px->lbprm.update_server_eweight(s);
4974 else if (srv_willbe_usable(s)) {
4975 if (px->lbprm.set_server_status_up)
4976 px->lbprm.set_server_status_up(s);
4977 }
4978 else {
4979 if (px->lbprm.set_server_status_down)
4980 px->lbprm.set_server_status_down(s);
4981 }
4982
4983 if (prev_srv_count && s->proxy->srv_bck == 0 && s->proxy->srv_act == 0)
4984 set_backend_down(s->proxy);
4985
Willy Tarreau6a78e612018-08-07 10:14:53 +02004986 /* If the server is set with "on-marked-up shutdown-backup-sessions",
4987 * and it's not a backup server and its effective weight is > 0,
4988 * then it can accept new connections, so we shut down all streams
4989 * on all backup servers.
4990 */
4991 if ((s->onmarkedup & HANA_ONMARKEDUP_SHUTDOWNBACKUPSESSIONS) &&
4992 !(s->flags & SRV_F_BACKUP) && s->next_eweight)
4993 srv_shutdown_backup_streams(s->proxy, SF_ERR_UP);
4994
4995 /* check if we can handle some connections queued at the proxy. We
4996 * will take as many as we can handle.
4997 */
4998 xferred = pendconn_grab_from_px(s);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004999 }
5000 else if (s->next_admin & SRV_ADMF_MAINT) {
5001 /* remaining in maintenance mode, let's inform precisely about the
5002 * situation.
5003 */
5004 if (!(s->next_admin & SRV_ADMF_FMAINT) && (s->cur_admin & SRV_ADMF_FMAINT)) {
5005 tmptrash = alloc_trash_chunk();
5006 if (tmptrash) {
5007 chunk_printf(tmptrash,
5008 "%sServer %s/%s is leaving forced maintenance but remains in maintenance",
5009 s->flags & SRV_F_BACKUP ? "Backup " : "",
5010 s->proxy->id, s->id);
5011
5012 if (s->track) /* normally it's mandatory here */
5013 chunk_appendf(tmptrash, " via %s/%s",
5014 s->track->proxy->id, s->track->id);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005015 ha_warning("%s.\n", tmptrash->area);
5016 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5017 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005018 free_trash_chunk(tmptrash);
5019 tmptrash = NULL;
5020 }
5021 }
5022 if (!(s->next_admin & SRV_ADMF_RMAINT) && (s->cur_admin & SRV_ADMF_RMAINT)) {
5023 tmptrash = alloc_trash_chunk();
5024 if (tmptrash) {
5025 chunk_printf(tmptrash,
5026 "%sServer %s/%s ('%s') resolves again but remains in maintenance",
5027 s->flags & SRV_F_BACKUP ? "Backup " : "",
5028 s->proxy->id, s->id, s->hostname);
5029
5030 if (s->track) /* normally it's mandatory here */
5031 chunk_appendf(tmptrash, " via %s/%s",
5032 s->track->proxy->id, s->track->id);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005033 ha_warning("%s.\n", tmptrash->area);
5034 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5035 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005036 free_trash_chunk(tmptrash);
5037 tmptrash = NULL;
5038 }
5039 }
5040 else if (!(s->next_admin & SRV_ADMF_IMAINT) && (s->cur_admin & SRV_ADMF_IMAINT)) {
5041 tmptrash = alloc_trash_chunk();
5042 if (tmptrash) {
5043 chunk_printf(tmptrash,
5044 "%sServer %s/%s remains in forced maintenance",
5045 s->flags & SRV_F_BACKUP ? "Backup " : "",
5046 s->proxy->id, s->id);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005047 ha_warning("%s.\n", tmptrash->area);
5048 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5049 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005050 free_trash_chunk(tmptrash);
5051 tmptrash = NULL;
5052 }
5053 }
5054 /* don't report anything when leaving drain mode and remaining in maintenance */
5055
5056 s->cur_admin = s->next_admin;
5057 }
5058
5059 if (!(s->next_admin & SRV_ADMF_MAINT)) {
5060 if (!(s->cur_admin & SRV_ADMF_DRAIN) && (s->next_admin & SRV_ADMF_DRAIN)) {
5061 /* drain state is applied only if not yet in maint */
5062
5063 s->last_change = now.tv_sec;
5064 if (px->lbprm.set_server_status_down)
5065 px->lbprm.set_server_status_down(s);
5066
5067 /* we might have streams queued on this server and waiting for
5068 * a connection. Those which are redispatchable will be queued
5069 * to another server or to the proxy itself.
5070 */
5071 xferred = pendconn_redistribute(s);
5072
5073 tmptrash = alloc_trash_chunk();
5074 if (tmptrash) {
5075 chunk_printf(tmptrash, "%sServer %s/%s enters drain state%s%s%s",
5076 s->flags & SRV_F_BACKUP ? "Backup " : "", s->proxy->id, s->id,
5077 *(s->adm_st_chg_cause) ? " (" : "", s->adm_st_chg_cause, *(s->adm_st_chg_cause) ? ")" : "");
5078
5079 srv_append_status(tmptrash, s, NULL, xferred, (s->next_admin & SRV_ADMF_FDRAIN));
5080
5081 if (!(global.mode & MODE_STARTING)) {
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005082 ha_warning("%s.\n", tmptrash->area);
5083 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5084 tmptrash->area);
5085 send_email_alert(s, LOG_NOTICE, "%s",
5086 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005087 }
5088 free_trash_chunk(tmptrash);
5089 tmptrash = NULL;
5090 }
5091
5092 if (prev_srv_count && s->proxy->srv_bck == 0 && s->proxy->srv_act == 0)
5093 set_backend_down(s->proxy);
5094 }
5095 else if ((s->cur_admin & SRV_ADMF_DRAIN) && !(s->next_admin & SRV_ADMF_DRAIN)) {
5096 /* OK completely leaving drain mode */
5097 if (s->proxy->srv_bck == 0 && s->proxy->srv_act == 0) {
5098 if (s->proxy->last_change < now.tv_sec) // ignore negative times
5099 s->proxy->down_time += now.tv_sec - s->proxy->last_change;
5100 s->proxy->last_change = now.tv_sec;
5101 }
5102
5103 if (s->last_change < now.tv_sec) // ignore negative times
5104 s->down_time += now.tv_sec - s->last_change;
5105 s->last_change = now.tv_sec;
Willy Tarreau3ff577e2018-08-02 11:48:52 +02005106 server_recalc_eweight(s, 0);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005107
5108 tmptrash = alloc_trash_chunk();
5109 if (tmptrash) {
5110 if (!(s->next_admin & SRV_ADMF_FDRAIN)) {
5111 chunk_printf(tmptrash,
5112 "%sServer %s/%s is %s (leaving forced drain)",
5113 s->flags & SRV_F_BACKUP ? "Backup " : "",
5114 s->proxy->id, s->id,
5115 (s->next_state == SRV_ST_STOPPED) ? "DOWN" : "UP");
5116 }
5117 else {
5118 chunk_printf(tmptrash,
5119 "%sServer %s/%s is %s (leaving drain)",
5120 s->flags & SRV_F_BACKUP ? "Backup " : "",
5121 s->proxy->id, s->id,
5122 (s->next_state == SRV_ST_STOPPED) ? "DOWN" : "UP");
5123 if (s->track) /* normally it's mandatory here */
5124 chunk_appendf(tmptrash, " via %s/%s",
5125 s->track->proxy->id, s->track->id);
5126 }
5127
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005128 ha_warning("%s.\n", tmptrash->area);
5129 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5130 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005131 free_trash_chunk(tmptrash);
5132 tmptrash = NULL;
5133 }
5134
5135 /* now propagate the status change to any LB algorithms */
5136 if (px->lbprm.update_server_eweight)
5137 px->lbprm.update_server_eweight(s);
5138 else if (srv_willbe_usable(s)) {
5139 if (px->lbprm.set_server_status_up)
5140 px->lbprm.set_server_status_up(s);
5141 }
5142 else {
5143 if (px->lbprm.set_server_status_down)
5144 px->lbprm.set_server_status_down(s);
5145 }
5146 }
5147 else if ((s->next_admin & SRV_ADMF_DRAIN)) {
5148 /* remaining in drain mode after removing one of its flags */
5149
5150 tmptrash = alloc_trash_chunk();
5151 if (tmptrash) {
5152 if (!(s->next_admin & SRV_ADMF_FDRAIN)) {
5153 chunk_printf(tmptrash,
5154 "%sServer %s/%s is leaving forced drain but remains in drain mode",
5155 s->flags & SRV_F_BACKUP ? "Backup " : "",
5156 s->proxy->id, s->id);
5157
5158 if (s->track) /* normally it's mandatory here */
5159 chunk_appendf(tmptrash, " via %s/%s",
5160 s->track->proxy->id, s->track->id);
5161 }
5162 else {
5163 chunk_printf(tmptrash,
5164 "%sServer %s/%s remains in forced drain mode",
5165 s->flags & SRV_F_BACKUP ? "Backup " : "",
5166 s->proxy->id, s->id);
5167 }
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005168 ha_warning("%s.\n", tmptrash->area);
5169 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5170 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005171 free_trash_chunk(tmptrash);
5172 tmptrash = NULL;
5173 }
5174
5175 /* commit new admin status */
5176
5177 s->cur_admin = s->next_admin;
5178 }
5179 }
5180
5181 /* Re-set log strings to empty */
Emeric Brun64cc49c2017-10-03 14:46:45 +02005182 *s->adm_st_chg_cause = 0;
5183}
Emeric Brun64cc49c2017-10-03 14:46:45 +02005184
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005185struct task *srv_cleanup_toremove_connections(struct task *task, void *context, unsigned short state)
5186{
5187 struct connection *conn;
5188
Willy Tarreau4d82bf52020-06-28 00:19:17 +02005189 while ((conn = MT_LIST_POP(&idle_conns[tid].toremove_conns,
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005190 struct connection *, list)) != NULL) {
Christopher Faulet73c12072019-04-08 11:23:22 +02005191 conn->mux->destroy(conn->ctx);
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005192 }
5193
5194 return task;
5195}
5196
Olivier Houchardff1d0922020-06-29 20:15:59 +02005197/* Move toremove_nb connections from idle_list to toremove_list, -1 means
5198 * moving them all.
5199 * Returns the number of connections moved.
5200 */
5201static int srv_migrate_conns_to_remove(struct mt_list *idle_list, struct mt_list *toremove_list, int toremove_nb)
5202{
5203 struct mt_list *elt1, elt2;
5204 struct connection *conn;
5205 int i = 0;
5206
5207 mt_list_for_each_entry_safe(conn, idle_list, list, elt1, elt2) {
5208 if (toremove_nb != -1 && i >= toremove_nb)
5209 break;
5210 MT_LIST_DEL_SAFE_NOINIT(elt1);
Willy Tarreaude4db172020-07-10 08:10:29 +02005211 MT_LIST_ADDQ(toremove_list, &conn->list);
Olivier Houchardff1d0922020-06-29 20:15:59 +02005212 i++;
5213 }
5214 return i;
5215}
William Dauchy6318d332020-05-02 21:52:36 +02005216/* cleanup connections for a given server
5217 * might be useful when going on forced maintenance or live changing ip/port
5218 */
William Dauchy707ad322020-05-04 13:52:40 +02005219static void srv_cleanup_connections(struct server *srv)
William Dauchy6318d332020-05-02 21:52:36 +02005220{
William Dauchy6318d332020-05-02 21:52:36 +02005221 int did_remove;
5222 int i;
William Dauchy6318d332020-05-02 21:52:36 +02005223
Willy Tarreauc35bcfc2020-06-29 14:43:16 +02005224 /* check all threads starting with ours */
William Dauchy6318d332020-05-02 21:52:36 +02005225 HA_SPIN_LOCK(OTHER_LOCK, &idle_conn_srv_lock);
Willy Tarreauc35bcfc2020-06-29 14:43:16 +02005226 for (i = tid;;) {
William Dauchy6318d332020-05-02 21:52:36 +02005227 did_remove = 0;
Olivier Houchardff1d0922020-06-29 20:15:59 +02005228 if (srv_migrate_conns_to_remove(&srv->idle_conns[i], &idle_conns[i].toremove_conns, -1) > 0)
William Dauchy6318d332020-05-02 21:52:36 +02005229 did_remove = 1;
Olivier Houchardff1d0922020-06-29 20:15:59 +02005230 if (srv_migrate_conns_to_remove(&srv->safe_conns[i], &idle_conns[i].toremove_conns, -1) > 0)
5231 did_remove = 1;
William Dauchy6318d332020-05-02 21:52:36 +02005232 if (did_remove)
Willy Tarreau4d82bf52020-06-28 00:19:17 +02005233 task_wakeup(idle_conns[i].cleanup_task, TASK_WOKEN_OTHER);
Willy Tarreauc35bcfc2020-06-29 14:43:16 +02005234
5235 if ((i = ((i + 1 == global.nbthread) ? 0 : i + 1)) == tid)
5236 break;
William Dauchy6318d332020-05-02 21:52:36 +02005237 }
5238 HA_SPIN_UNLOCK(OTHER_LOCK, &idle_conn_srv_lock);
5239}
5240
Willy Tarreau980855b2019-02-07 14:59:29 +01005241struct task *srv_cleanup_idle_connections(struct task *task, void *context, unsigned short state)
Olivier Houchard0c18a6f2018-12-02 14:11:41 +01005242{
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005243 struct server *srv;
5244 struct eb32_node *eb;
5245 int i;
5246 unsigned int next_wakeup;
Olivier Houchardb7b3faa2018-12-14 18:15:36 +01005247
Willy Tarreau21b9ff52020-11-05 09:12:20 +01005248 next_wakeup = TICK_ETERNITY;
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005249 HA_SPIN_LOCK(OTHER_LOCK, &idle_conn_srv_lock);
5250 while (1) {
Olivier Houchard079cb9a2020-03-30 00:23:57 +02005251 int exceed_conns;
5252 int to_kill;
5253 int curr_idle;
Olivier Houchardb7b3faa2018-12-14 18:15:36 +01005254
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005255 eb = eb32_lookup_ge(&idle_conn_srv, now_ms - TIMER_LOOK_BACK);
5256 if (!eb) {
5257 /* we might have reached the end of the tree, typically because
5258 * <now_ms> is in the first half and we're first scanning the last
5259 * half. Let's loop back to the beginning of the tree now.
5260 */
Olivier Houchard0c18a6f2018-12-02 14:11:41 +01005261
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005262 eb = eb32_first(&idle_conn_srv);
5263 if (likely(!eb))
5264 break;
5265 }
5266 if (tick_is_lt(now_ms, eb->key)) {
5267 /* timer not expired yet, revisit it later */
5268 next_wakeup = eb->key;
Olivier Houchard0c18a6f2018-12-02 14:11:41 +01005269 break;
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005270 }
5271 srv = eb32_entry(eb, struct server, idle_node);
Olivier Houchard079cb9a2020-03-30 00:23:57 +02005272
5273 /* Calculate how many idle connections we want to kill :
5274 * we want to remove half the difference between the total
5275 * of established connections (used or idle) and the max
5276 * number of used connections.
5277 */
5278 curr_idle = srv->curr_idle_conns;
5279 if (curr_idle == 0)
5280 goto remove;
Willy Tarreaubdb86bd2020-06-29 15:56:35 +02005281 exceed_conns = srv->curr_used_conns + curr_idle - MAX(srv->max_used_conns, srv->est_need_conns);
Olivier Houchard079cb9a2020-03-30 00:23:57 +02005282 exceed_conns = to_kill = exceed_conns / 2 + (exceed_conns & 1);
Willy Tarreaubdb86bd2020-06-29 15:56:35 +02005283
Willy Tarreau21b9ff52020-11-05 09:12:20 +01005284 srv->est_need_conns = (srv->est_need_conns + srv->max_used_conns) / 2;
Willy Tarreaubdb86bd2020-06-29 15:56:35 +02005285 if (srv->est_need_conns < srv->max_used_conns)
5286 srv->est_need_conns = srv->max_used_conns;
5287
Olivier Houchard079cb9a2020-03-30 00:23:57 +02005288 srv->max_used_conns = srv->curr_used_conns;
5289
Willy Tarreau18ed7892020-07-02 19:05:30 +02005290 if (exceed_conns <= 0)
5291 goto remove;
5292
Willy Tarreauc35bcfc2020-06-29 14:43:16 +02005293 /* check all threads starting with ours */
5294 for (i = tid;;) {
Olivier Houchard079cb9a2020-03-30 00:23:57 +02005295 int max_conn;
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005296 int j;
5297 int did_remove = 0;
5298
Olivier Houchard079cb9a2020-03-30 00:23:57 +02005299 max_conn = (exceed_conns * srv->curr_idle_thr[i]) /
5300 curr_idle + 1;
Olivier Houchardff1d0922020-06-29 20:15:59 +02005301
5302 j = srv_migrate_conns_to_remove(&srv->idle_conns[i], &idle_conns[i].toremove_conns, max_conn);
5303 if (j > 0)
5304 did_remove = 1;
5305 if (max_conn - j > 0 &&
5306 srv_migrate_conns_to_remove(&srv->safe_conns[i], &idle_conns[i].toremove_conns, max_conn - j) > 0)
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005307 did_remove = 1;
Olivier Houchardff1d0922020-06-29 20:15:59 +02005308
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005309 if (did_remove)
Willy Tarreau4d82bf52020-06-28 00:19:17 +02005310 task_wakeup(idle_conns[i].cleanup_task, TASK_WOKEN_OTHER);
Willy Tarreauc35bcfc2020-06-29 14:43:16 +02005311
5312 if ((i = ((i + 1 == global.nbthread) ? 0 : i + 1)) == tid)
5313 break;
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005314 }
Olivier Houchard079cb9a2020-03-30 00:23:57 +02005315remove:
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005316 eb32_delete(&srv->idle_node);
Willy Tarreau21b9ff52020-11-05 09:12:20 +01005317
5318 if (srv->curr_idle_conns) {
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005319 /* There are still more idle connections, add the
5320 * server back in the tree.
5321 */
Willy Tarreau21b9ff52020-11-05 09:12:20 +01005322 srv->idle_node.key = tick_add(srv->pool_purge_delay, now_ms);
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005323 eb32_insert(&idle_conn_srv, &srv->idle_node);
Willy Tarreau21b9ff52020-11-05 09:12:20 +01005324 next_wakeup = tick_first(next_wakeup, srv->idle_node.key);
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005325 }
Olivier Houchard0c18a6f2018-12-02 14:11:41 +01005326 }
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005327 HA_SPIN_UNLOCK(OTHER_LOCK, &idle_conn_srv_lock);
5328
Willy Tarreau21b9ff52020-11-05 09:12:20 +01005329 task->expire = next_wakeup;
Olivier Houchard0c18a6f2018-12-02 14:11:41 +01005330 return task;
5331}
Olivier Houchard88698d92019-04-16 19:07:22 +02005332
Willy Tarreau76cc6992020-07-01 18:49:24 +02005333/* config parser for global "tune.idle-pool.shared", accepts "on" or "off" */
5334static int cfg_parse_idle_pool_shared(char **args, int section_type, struct proxy *curpx,
5335 struct proxy *defpx, const char *file, int line,
5336 char **err)
5337{
5338 if (too_many_args(1, args, err, NULL))
5339 return -1;
5340
5341 if (strcmp(args[1], "on") == 0)
5342 global.tune.options |= GTUNE_IDLE_POOL_SHARED;
5343 else if (strcmp(args[1], "off") == 0)
5344 global.tune.options &= ~GTUNE_IDLE_POOL_SHARED;
5345 else {
5346 memprintf(err, "'%s' expects either 'on' or 'off' but got '%s'.", args[0], args[1]);
5347 return -1;
5348 }
5349 return 0;
5350}
5351
Olivier Houchard88698d92019-04-16 19:07:22 +02005352/* config parser for global "tune.pool-{low,high}-fd-ratio" */
5353static int cfg_parse_pool_fd_ratio(char **args, int section_type, struct proxy *curpx,
5354 struct proxy *defpx, const char *file, int line,
5355 char **err)
5356{
5357 int arg = -1;
5358
5359 if (too_many_args(1, args, err, NULL))
5360 return -1;
5361
5362 if (*(args[1]) != 0)
5363 arg = atoi(args[1]);
5364
5365 if (arg < 0 || arg > 100) {
5366 memprintf(err, "'%s' expects an integer argument between 0 and 100.", args[0]);
5367 return -1;
5368 }
5369
5370 if (args[0][10] == 'h')
5371 global.tune.pool_high_ratio = arg;
5372 else
5373 global.tune.pool_low_ratio = arg;
5374 return 0;
5375}
5376
5377/* config keyword parsers */
5378static struct cfg_kw_list cfg_kws = {ILH, {
Willy Tarreau76cc6992020-07-01 18:49:24 +02005379 { CFG_GLOBAL, "tune.idle-pool.shared", cfg_parse_idle_pool_shared },
Olivier Houchard88698d92019-04-16 19:07:22 +02005380 { CFG_GLOBAL, "tune.pool-high-fd-ratio", cfg_parse_pool_fd_ratio },
5381 { CFG_GLOBAL, "tune.pool-low-fd-ratio", cfg_parse_pool_fd_ratio },
5382 { 0, NULL, NULL }
5383}};
5384
5385INITCALL1(STG_REGISTER, cfg_register_keywords, &cfg_kws);
5386
Baptiste Assmanna68ca962015-04-14 01:15:08 +02005387/*
Willy Tarreaubaaee002006-06-26 02:48:02 +02005388 * Local variables:
5389 * c-indent-level: 8
5390 * c-basic-offset: 8
5391 * End:
5392 */