blob: ecfa2f14d9a0c44844d7676800c4c36d0b2b0c19 [file] [log] [blame]
Willy Tarreaub1ec8c42015-04-03 13:53:24 +02001/*
Willy Tarreau9903f0e2015-04-04 18:50:31 +02002 * Session management functions.
Willy Tarreaub1ec8c42015-04-03 13:53:24 +02003 *
Willy Tarreau9903f0e2015-04-04 18:50:31 +02004 * Copyright 2000-2015 Willy Tarreau <w@1wt.eu>
Willy Tarreaub1ec8c42015-04-03 13:53:24 +02005 *
6 * This program is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU General Public License
8 * as published by the Free Software Foundation; either version
9 * 2 of the License, or (at your option) any later version.
10 *
11 */
12
13#include <common/config.h>
14#include <common/buffer.h>
15#include <common/debug.h>
16#include <common/memory.h>
17
18#include <types/global.h>
19#include <types/session.h>
20
Willy Tarreau9903f0e2015-04-04 18:50:31 +020021#include <proto/connection.h>
22#include <proto/listener.h>
23#include <proto/log.h>
24#include <proto/proto_http.h>
Willy Tarreau9903f0e2015-04-04 18:50:31 +020025#include <proto/proxy.h>
Willy Tarreaubb2ef122015-04-04 16:31:16 +020026#include <proto/session.h>
Willy Tarreau9903f0e2015-04-04 18:50:31 +020027#include <proto/stream.h>
Willy Tarreau39713102016-11-25 15:49:32 +010028#include <proto/tcp_rules.h>
Willy Tarreauebcd4842015-06-19 11:59:02 +020029#include <proto/vars.h>
Willy Tarreaubb2ef122015-04-04 16:31:16 +020030
Willy Tarreaub1ec8c42015-04-03 13:53:24 +020031struct pool_head *pool2_session;
32
Willy Tarreau9903f0e2015-04-04 18:50:31 +020033static int conn_complete_session(struct connection *conn);
Willy Tarreau9903f0e2015-04-04 18:50:31 +020034static struct task *session_expire_embryonic(struct task *t);
35
Willy Tarreauc38f71c2015-04-05 00:38:48 +020036/* Create a a new session and assign it to frontend <fe>, listener <li>,
37 * origin <origin>, set the current date and clear the stick counters pointers.
38 * Returns the session upon success or NULL. The session may be released using
Willy Tarreau0bf6fa52017-09-15 10:25:14 +020039 * session_free(). Note: <li> may be NULL.
Willy Tarreauc38f71c2015-04-05 00:38:48 +020040 */
41struct session *session_new(struct proxy *fe, struct listener *li, enum obj_type *origin)
42{
43 struct session *sess;
44
45 sess = pool_alloc2(pool2_session);
46 if (sess) {
47 sess->listener = li;
48 sess->fe = fe;
49 sess->origin = origin;
50 sess->accept_date = date; /* user-visible date for logging */
51 sess->tv_accept = now; /* corrected date for internal use */
52 memset(sess->stkctr, 0, sizeof(sess->stkctr));
Willy Tarreauebcd4842015-06-19 11:59:02 +020053 vars_init(&sess->vars, SCOPE_SESS);
Willy Tarreau0b74eae2017-08-28 19:02:51 +020054 sess->task = NULL;
Willy Tarreau0bf6fa52017-09-15 10:25:14 +020055 fe->feconn++;
56 if (fe->feconn > fe->fe_counters.conn_max)
57 fe->fe_counters.conn_max = fe->feconn;
58 if (li)
59 proxy_inc_fe_conn_ctr(li, fe);
60 totalconn++;
Willy Tarreau6f5e4b92017-09-15 09:07:56 +020061 jobs++;
Willy Tarreauc38f71c2015-04-05 00:38:48 +020062 }
63 return sess;
64}
65
Willy Tarreau11c36242015-04-04 15:54:03 +020066void session_free(struct session *sess)
67{
Willy Tarreau0bf6fa52017-09-15 10:25:14 +020068 sess->fe->feconn--;
Willy Tarreaubb2ef122015-04-04 16:31:16 +020069 session_store_counters(sess);
Willy Tarreauebcd4842015-06-19 11:59:02 +020070 vars_prune_per_sess(&sess->vars);
Willy Tarreau11c36242015-04-04 15:54:03 +020071 pool_free2(pool2_session, sess);
Willy Tarreau6f5e4b92017-09-15 09:07:56 +020072 jobs--;
Willy Tarreau11c36242015-04-04 15:54:03 +020073}
74
Willy Tarreaub1ec8c42015-04-03 13:53:24 +020075/* perform minimal intializations, report 0 in case of error, 1 if OK. */
76int init_session()
77{
78 pool2_session = create_pool("session", sizeof(struct session), MEM_F_SHARED);
79 return pool2_session != NULL;
80}
81
Willy Tarreau042cd752015-04-08 18:10:49 +020082/* count a new session to keep frontend, listener and track stats up to date */
83static void session_count_new(struct session *sess)
84{
85 struct stkctr *stkctr;
86 void *ptr;
87 int i;
88
89 proxy_inc_fe_sess_ctr(sess->listener, sess->fe);
90
91 for (i = 0; i < MAX_SESS_STKCTR; i++) {
92 stkctr = &sess->stkctr[i];
93 if (!stkctr_entry(stkctr))
94 continue;
95
96 ptr = stktable_data_ptr(stkctr->table, stkctr_entry(stkctr), STKTABLE_DT_SESS_CNT);
97 if (ptr)
98 stktable_data_cast(ptr, sess_cnt)++;
99
100 ptr = stktable_data_ptr(stkctr->table, stkctr_entry(stkctr), STKTABLE_DT_SESS_RATE);
101 if (ptr)
102 update_freq_ctr_period(&stktable_data_cast(ptr, sess_rate),
103 stkctr->table->data_arg[STKTABLE_DT_SESS_RATE].u, 1);
104 }
105}
106
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200107/* This function is called from the protocol layer accept() in order to
108 * instanciate a new session on behalf of a given listener and frontend. It
109 * returns a positive value upon success, 0 if the connection can be ignored,
110 * or a negative value upon critical failure. The accepted file descriptor is
111 * closed if we return <= 0. If no handshake is needed, it immediately tries
Willy Tarreau0b74eae2017-08-28 19:02:51 +0200112 * to instanciate a new stream. The created connection's owner points to the
113 * new session until the upper layers are created.
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200114 */
115int session_accept_fd(struct listener *l, int cfd, struct sockaddr_storage *addr)
116{
117 struct connection *cli_conn;
Willy Tarreauc95bad52016-12-22 00:13:31 +0100118 struct proxy *p = l->bind_conf->frontend;
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200119 struct session *sess;
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200120 int ret;
121
122
123 ret = -1; /* assume unrecoverable error by default */
124
125 if (unlikely((cli_conn = conn_new()) == NULL))
126 goto out_close;
127
Willy Tarreau71a8c7c2016-12-21 22:04:54 +0100128 conn_prepare(cli_conn, l->proto, l->bind_conf->xprt);
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200129
Willy Tarreau585744b2017-08-24 14:31:19 +0200130 cli_conn->handle.fd = cfd;
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200131 cli_conn->addr.from = *addr;
132 cli_conn->flags |= CO_FL_ADDR_FROM_SET;
133 cli_conn->target = &l->obj_type;
134 cli_conn->proxy_netns = l->netns;
135
136 conn_ctrl_init(cli_conn);
137
138 /* wait for a PROXY protocol header */
139 if (l->options & LI_O_ACC_PROXY) {
140 cli_conn->flags |= CO_FL_ACCEPT_PROXY;
141 conn_sock_want_recv(cli_conn);
142 }
143
Bertrand Jacquin93b227d2016-06-04 15:11:10 +0100144 /* wait for a NetScaler client IP insertion protocol header */
145 if (l->options & LI_O_ACC_CIP) {
146 cli_conn->flags |= CO_FL_ACCEPT_CIP;
147 conn_sock_want_recv(cli_conn);
148 }
149
Olivier Houchard1a0545f2017-09-13 18:30:23 +0200150 conn_xprt_want_recv(cli_conn);
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200151 if (conn_xprt_init(cli_conn) < 0)
152 goto out_free_conn;
153
Willy Tarreau64beab22015-04-05 00:39:16 +0200154 sess = session_new(p, l, &cli_conn->obj_type);
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200155 if (!sess)
156 goto out_free_conn;
157
Willy Tarreau0b74eae2017-08-28 19:02:51 +0200158 conn_set_owner(cli_conn, sess);
159
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200160 /* now evaluate the tcp-request layer4 rules. We only need a session
161 * and no stream for these rules.
162 */
Willy Tarreau7d9736f2016-10-21 16:34:21 +0200163 if ((l->options & LI_O_TCP_L4_RULES) && !tcp_exec_l4_rules(sess)) {
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200164 /* let's do a no-linger now to close with a single RST. */
165 setsockopt(cfd, SOL_SOCKET, SO_LINGER, (struct linger *) &nolinger, sizeof(struct linger));
166 ret = 0; /* successful termination */
167 goto out_free_sess;
168 }
169
170 /* monitor-net and health mode are processed immediately after TCP
171 * connection rules. This way it's possible to block them, but they
172 * never use the lower data layers, they send directly over the socket,
173 * as they were designed for. We first flush the socket receive buffer
174 * in order to avoid emission of an RST by the system. We ignore any
175 * error.
176 */
177 if (unlikely((p->mode == PR_MODE_HEALTH) ||
178 ((l->options & LI_O_CHK_MONNET) &&
179 addr->ss_family == AF_INET &&
180 (((struct sockaddr_in *)addr)->sin_addr.s_addr & p->mon_mask.s_addr) == p->mon_net.s_addr))) {
181 /* we have 4 possibilities here :
182 * - HTTP mode, from monitoring address => send "HTTP/1.0 200 OK"
183 * - HEALTH mode with HTTP check => send "HTTP/1.0 200 OK"
184 * - HEALTH mode without HTTP check => just send "OK"
185 * - TCP mode from monitoring address => just close
186 */
187 if (l->proto->drain)
188 l->proto->drain(cfd);
189 if (p->mode == PR_MODE_HTTP ||
190 (p->mode == PR_MODE_HEALTH && (p->options2 & PR_O2_CHK_ANY) == PR_O2_HTTP_CHK))
191 send(cfd, "HTTP/1.0 200 OK\r\n\r\n", 19, MSG_DONTWAIT|MSG_NOSIGNAL|MSG_MORE);
192 else if (p->mode == PR_MODE_HEALTH)
193 send(cfd, "OK\n", 3, MSG_DONTWAIT|MSG_NOSIGNAL|MSG_MORE);
194 ret = 0;
195 goto out_free_sess;
196 }
197
Willy Tarreauf9d1bc62015-04-05 17:56:47 +0200198 /* Adjust some socket options */
199 if (l->addr.ss_family == AF_INET || l->addr.ss_family == AF_INET6) {
200 setsockopt(cfd, IPPROTO_TCP, TCP_NODELAY, (char *) &one, sizeof(one));
201
202 if (p->options & PR_O_TCP_CLI_KA)
203 setsockopt(cfd, SOL_SOCKET, SO_KEEPALIVE, (char *) &one, sizeof(one));
204
205 if (p->options & PR_O_TCP_NOLING)
206 fdtab[cfd].linger_risk = 1;
207
208#if defined(TCP_MAXSEG)
209 if (l->maxseg < 0) {
210 /* we just want to reduce the current MSS by that value */
211 int mss;
212 socklen_t mss_len = sizeof(mss);
213 if (getsockopt(cfd, IPPROTO_TCP, TCP_MAXSEG, &mss, &mss_len) == 0) {
214 mss += l->maxseg; /* remember, it's < 0 */
215 setsockopt(cfd, IPPROTO_TCP, TCP_MAXSEG, &mss, sizeof(mss));
216 }
217 }
218#endif
219 }
220
221 if (global.tune.client_sndbuf)
222 setsockopt(cfd, SOL_SOCKET, SO_SNDBUF, &global.tune.client_sndbuf, sizeof(global.tune.client_sndbuf));
223
224 if (global.tune.client_rcvbuf)
225 setsockopt(cfd, SOL_SOCKET, SO_RCVBUF, &global.tune.client_rcvbuf, sizeof(global.tune.client_rcvbuf));
226
Willy Tarreau0b74eae2017-08-28 19:02:51 +0200227 /* OK, now either we have a pending handshake to execute with and then
228 * we must return to the I/O layer, or we can proceed with the end of
229 * the stream initialization. In case of handshake, we also set the I/O
230 * timeout to the frontend's client timeout and register a task in the
231 * session for this purpose. The connection's owner is left to the
232 * session during this period.
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200233 *
234 * At this point we set the relation between sess/task/conn this way :
235 *
Willy Tarreau0b74eae2017-08-28 19:02:51 +0200236 * +----------------- task
237 * | |
238 * orig -- sess <-- context |
239 * | ^ | |
240 * v | | |
241 * conn -- owner ---> task <-----+
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200242 */
Olivier Houchardc2aae742017-09-22 18:26:28 +0200243 if (cli_conn->flags & (CO_FL_HANDSHAKE | CO_FL_EARLY_SSL_HS)) {
Willy Tarreau0b74eae2017-08-28 19:02:51 +0200244 if (unlikely((sess->task = task_new()) == NULL))
Willy Tarreau87787ac2017-08-28 16:22:54 +0200245 goto out_free_sess;
246
Willy Tarreau8e3c6ce2017-08-28 15:46:01 +0200247 conn_set_xprt_done_cb(cli_conn, conn_complete_session);
Willy Tarreau87787ac2017-08-28 16:22:54 +0200248
Willy Tarreau0b74eae2017-08-28 19:02:51 +0200249 sess->task->context = sess;
250 sess->task->nice = l->nice;
251 sess->task->process = session_expire_embryonic;
252 sess->task->expire = tick_add_ifset(now_ms, p->timeout.client);
253 task_queue(sess->task);
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200254 return 1;
255 }
256
Willy Tarreau18b95a42015-04-05 01:04:01 +0200257 /* OK let's complete stream initialization since there is no handshake */
258 cli_conn->flags |= CO_FL_CONNECTED;
Willy Tarreau042cd752015-04-08 18:10:49 +0200259
Willy Tarreau0c4ed352017-09-15 10:06:28 +0200260 if (conn_complete_session(cli_conn) >= 0)
261 return 1;
Willy Tarreaud1769b82015-04-06 00:25:48 +0200262
Willy Tarreau0c4ed352017-09-15 10:06:28 +0200263 /* error unrolling */
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200264 out_free_sess:
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200265 session_free(sess);
266 out_free_conn:
Willy Tarreau5b78a9d2017-10-05 18:12:51 +0200267 conn_stop_tracking(cli_conn);
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200268 conn_xprt_close(cli_conn);
269 conn_free(cli_conn);
270 out_close:
Willy Tarreaua261e9b2016-12-22 20:44:00 +0100271 if (ret < 0 && l->bind_conf->xprt == xprt_get(XPRT_RAW) && p->mode == PR_MODE_HTTP) {
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200272 /* critical error, no more memory, try to emit a 500 response */
273 struct chunk *err_msg = &p->errmsg[HTTP_ERR_500];
274 if (!err_msg->str)
275 err_msg = &http_err_chunks[HTTP_ERR_500];
276 send(cfd, err_msg->str, err_msg->len, MSG_DONTWAIT|MSG_NOSIGNAL);
277 }
278
279 if (fdtab[cfd].owner)
280 fd_delete(cfd);
281 else
282 close(cfd);
283 return ret;
284}
285
286
287/* prepare the trash with a log prefix for session <sess>. It only works with
288 * embryonic sessions based on a real connection. This function requires that
289 * at sess->origin points to the incoming connection.
290 */
291static void session_prepare_log_prefix(struct session *sess)
292{
293 struct tm tm;
294 char pn[INET6_ADDRSTRLEN];
295 int ret;
296 char *end;
297 struct connection *cli_conn = __objt_conn(sess->origin);
298
299 ret = addr_to_str(&cli_conn->addr.from, pn, sizeof(pn));
300 if (ret <= 0)
301 chunk_printf(&trash, "unknown [");
302 else if (ret == AF_UNIX)
303 chunk_printf(&trash, "%s:%d [", pn, sess->listener->luid);
304 else
305 chunk_printf(&trash, "%s:%d [", pn, get_host_port(&cli_conn->addr.from));
306
307 get_localtime(sess->accept_date.tv_sec, &tm);
308 end = date2str_log(trash.str + trash.len, &tm, &(sess->accept_date), trash.size - trash.len);
309 trash.len = end - trash.str;
310 if (sess->listener->name)
311 chunk_appendf(&trash, "] %s/%s", sess->fe->id, sess->listener->name);
312 else
313 chunk_appendf(&trash, "] %s/%d", sess->fe->id, sess->listener->luid);
314}
315
316/* This function kills an existing embryonic session. It stops the connection's
317 * transport layer, releases assigned resources, resumes the listener if it was
318 * disabled and finally kills the file descriptor. This function requires that
319 * sess->origin points to the incoming connection.
320 */
Willy Tarreau0b74eae2017-08-28 19:02:51 +0200321static void session_kill_embryonic(struct session *sess)
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200322{
323 int level = LOG_INFO;
324 struct connection *conn = __objt_conn(sess->origin);
Willy Tarreau0b74eae2017-08-28 19:02:51 +0200325 struct task *task = sess->task;
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200326 unsigned int log = sess->fe->to_log;
327 const char *err_msg;
328
329 if (sess->fe->options2 & PR_O2_LOGERRORS)
330 level = LOG_ERR;
331
332 if (log && (sess->fe->options & PR_O_NULLNOLOG)) {
333 /* with "option dontlognull", we don't log connections with no transfer */
334 if (!conn->err_code ||
335 conn->err_code == CO_ER_PRX_EMPTY || conn->err_code == CO_ER_PRX_ABORT ||
Bertrand Jacquin93b227d2016-06-04 15:11:10 +0100336 conn->err_code == CO_ER_CIP_EMPTY || conn->err_code == CO_ER_CIP_ABORT ||
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200337 conn->err_code == CO_ER_SSL_EMPTY || conn->err_code == CO_ER_SSL_ABORT)
338 log = 0;
339 }
340
341 if (log) {
342 if (!conn->err_code && (task->state & TASK_WOKEN_TIMER)) {
343 if (conn->flags & CO_FL_ACCEPT_PROXY)
344 conn->err_code = CO_ER_PRX_TIMEOUT;
Bertrand Jacquin93b227d2016-06-04 15:11:10 +0100345 else if (conn->flags & CO_FL_ACCEPT_CIP)
346 conn->err_code = CO_ER_CIP_TIMEOUT;
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200347 else if (conn->flags & CO_FL_SSL_WAIT_HS)
348 conn->err_code = CO_ER_SSL_TIMEOUT;
349 }
350
351 session_prepare_log_prefix(sess);
352 err_msg = conn_err_code_str(conn);
353 if (err_msg)
354 send_log(sess->fe, level, "%s: %s\n", trash.str, err_msg);
355 else
356 send_log(sess->fe, level, "%s: unknown connection error (code=%d flags=%08x)\n",
357 trash.str, conn->err_code, conn->flags);
358 }
359
360 /* kill the connection now */
Willy Tarreau5b78a9d2017-10-05 18:12:51 +0200361 conn_stop_tracking(conn);
362 conn_full_close(conn);
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200363 conn_free(conn);
364
Willy Tarreau05f50472017-09-15 09:19:58 +0200365 listener_release(sess->listener);
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200366
367 task_delete(task);
368 task_free(task);
369 session_free(sess);
370}
371
372/* Manages the embryonic session timeout. It is only called when the timeout
373 * strikes and performs the required cleanup.
374 */
375static struct task *session_expire_embryonic(struct task *t)
376{
377 struct session *sess = t->context;
378
379 if (!(t->state & TASK_WOKEN_TIMER))
380 return t;
381
Willy Tarreau0b74eae2017-08-28 19:02:51 +0200382 session_kill_embryonic(sess);
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200383 return NULL;
384}
385
386/* Finish initializing a session from a connection, or kills it if the
Willy Tarreau0c4ed352017-09-15 10:06:28 +0200387 * connection shows and error. Returns <0 if the connection was killed. It may
388 * be called either asynchronously as an xprt_done callback with an embryonic
389 * session, or synchronously to finalize the session. The distinction is made
390 * on sess->task which is only set in the embryonic session case.
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200391 */
392static int conn_complete_session(struct connection *conn)
393{
Willy Tarreau0b74eae2017-08-28 19:02:51 +0200394 struct session *sess = conn->owner;
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200395
Willy Tarreau8e3c6ce2017-08-28 15:46:01 +0200396 conn_clear_xprt_done_cb(conn);
397
Willy Tarreaud1769b82015-04-06 00:25:48 +0200398 if (conn->flags & CO_FL_ERROR)
399 goto fail;
400
Willy Tarreau678be622015-04-08 18:18:15 +0200401 /* if logs require transport layer information, note it on the connection */
402 if (sess->fe->to_log & LW_XPRT)
403 conn->flags |= CO_FL_XPRT_TRACKED;
404
Willy Tarreau620408f2016-10-21 16:37:51 +0200405 /* we may have some tcp-request-session rules */
406 if ((sess->listener->options & LI_O_TCP_L5_RULES) && !tcp_exec_l5_rules(sess))
407 goto fail;
408
Willy Tarreau042cd752015-04-08 18:10:49 +0200409 session_count_new(sess);
Willy Tarreau5790eb02017-08-28 17:18:36 +0200410 if (stream_create_from_conn(conn) < 0)
Willy Tarreaud1769b82015-04-06 00:25:48 +0200411 goto fail;
412
Willy Tarreau87787ac2017-08-28 16:22:54 +0200413 /* the embryonic session's task is not needed anymore */
Willy Tarreau0c4ed352017-09-15 10:06:28 +0200414 if (sess->task) {
415 task_delete(sess->task);
416 task_free(sess->task);
417 sess->task = NULL;
418 }
Willy Tarreaud1769b82015-04-06 00:25:48 +0200419 return 0;
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200420
Willy Tarreaud1769b82015-04-06 00:25:48 +0200421 fail:
Willy Tarreau0c4ed352017-09-15 10:06:28 +0200422 if (sess->task)
423 session_kill_embryonic(sess);
Willy Tarreau9903f0e2015-04-04 18:50:31 +0200424 return -1;
425}
426
Willy Tarreaub1ec8c42015-04-03 13:53:24 +0200427/*
428 * Local variables:
429 * c-indent-level: 8
430 * c-basic-offset: 8
431 * End:
432 */