blob: 6aa3e71e9bc5af46024d4be7a747fc7355d70638 [file] [log] [blame]
Willy Tarreaubaaee002006-06-26 02:48:02 +02001/*
2 * HA-Proxy : High Availability-enabled HTTP/TCP proxy
Willy Tarreaud8498662020-02-13 07:58:50 +01003 * Copyright 2000-2020 Willy Tarreau <willy@haproxy.org>.
Willy Tarreaubaaee002006-06-26 02:48:02 +02004 *
5 * This program is free software; you can redistribute it and/or
6 * modify it under the terms of the GNU General Public License
7 * as published by the Free Software Foundation; either version
8 * 2 of the License, or (at your option) any later version.
9 *
Lukas Tribus23953682017-04-28 13:24:30 +000010 * Please refer to RFC7230 - RFC7235 informations about HTTP protocol, and
11 * RFC6265 for informations about cookies usage. More generally, the IETF HTTP
Willy Tarreaubaaee002006-06-26 02:48:02 +020012 * Working Group's web site should be consulted for protocol related changes :
13 *
14 * http://ftp.ics.uci.edu/pub/ietf/http/
15 *
16 * Pending bugs (may be not fixed because never reproduced) :
17 * - solaris only : sometimes, an HTTP proxy with only a dispatch address causes
18 * the proxy to terminate (no core) if the client breaks the connection during
19 * the response. Seen on 1.1.8pre4, but never reproduced. May not be related to
20 * the snprintf() bug since requests were simple (GET / HTTP/1.0), but may be
21 * related to missing setsid() (fixed in 1.1.15)
22 * - a proxy with an invalid config will prevent the startup even if disabled.
23 *
24 * ChangeLog has moved to the CHANGELOG file.
25 *
Willy Tarreaubaaee002006-06-26 02:48:02 +020026 */
27
David Carlier7ece0962015-12-08 21:43:09 +000028#define _GNU_SOURCE
Willy Tarreaubaaee002006-06-26 02:48:02 +020029#include <stdio.h>
30#include <stdlib.h>
31#include <unistd.h>
32#include <string.h>
33#include <ctype.h>
Maxime de Roucy379d9c72016-05-13 23:52:56 +020034#include <dirent.h>
Maxime de Roucy379d9c72016-05-13 23:52:56 +020035#include <sys/stat.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020036#include <sys/time.h>
37#include <sys/types.h>
38#include <sys/socket.h>
39#include <netinet/tcp.h>
40#include <netinet/in.h>
41#include <arpa/inet.h>
Olivier Houchardf73629d2017-04-05 22:33:04 +020042#include <net/if.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020043#include <netdb.h>
44#include <fcntl.h>
45#include <errno.h>
46#include <signal.h>
47#include <stdarg.h>
48#include <sys/resource.h>
Marc-Antoine Perennou992709b2013-02-12 10:53:52 +010049#include <sys/wait.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020050#include <time.h>
51#include <syslog.h>
Michael Schererab012dd2013-01-12 18:35:19 +010052#include <grp.h>
Willy Tarreaufc6c0322012-11-16 16:12:27 +010053#ifdef USE_CPU_AFFINITY
Willy Tarreaufc6c0322012-11-16 16:12:27 +010054#include <sched.h>
David Carlier42d9e5a2018-11-12 16:22:19 +000055#if defined(__FreeBSD__) || defined(__DragonFly__)
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +020056#include <sys/param.h>
David Carlier42d9e5a2018-11-12 16:22:19 +000057#ifdef __FreeBSD__
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +020058#include <sys/cpuset.h>
David Carlier42d9e5a2018-11-12 16:22:19 +000059#endif
David Carlier6d5c8412017-11-29 11:02:32 +000060#include <pthread_np.h>
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +020061#endif
Willy Tarreaufc6c0322012-11-16 16:12:27 +010062#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +020063
Willy Tarreau636848a2019-04-15 19:38:50 +020064#if defined(USE_PRCTL)
65#include <sys/prctl.h>
66#endif
67
Willy Tarreaubaaee002006-06-26 02:48:02 +020068#ifdef DEBUG_FULL
69#include <assert.h>
70#endif
Tim Duesterhusd6942c82017-11-20 15:58:35 +010071#if defined(USE_SYSTEMD)
72#include <systemd/sd-daemon.h>
73#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +020074
Willy Tarreau4ce41952020-03-06 18:57:15 +010075#include <import/sha1.h>
76
Willy Tarreau2dd0d472006-06-29 17:53:05 +020077#include <common/base64.h>
78#include <common/cfgparse.h>
Willy Tarreauc7e42382012-08-24 19:22:53 +020079#include <common/chunk.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020080#include <common/compat.h>
81#include <common/config.h>
82#include <common/defaults.h>
Willy Tarreaud740bab2007-10-28 11:14:07 +010083#include <common/errors.h>
Willy Tarreau5794fb02018-11-25 18:43:29 +010084#include <common/initcall.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020085#include <common/memory.h>
86#include <common/mini-clist.h>
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +010087#include <common/namespace.h>
Willy Tarreau4ce41952020-03-06 18:57:15 +010088#include <common/net_helper.h>
Willy Tarreauc125cef2019-05-10 09:58:43 +020089#include <common/openssl-compat.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020090#include <common/regex.h>
91#include <common/standard.h>
92#include <common/time.h>
93#include <common/uri_auth.h>
94#include <common/version.h>
Christopher Fauletbe0faa22017-08-29 15:37:10 +020095#include <common/hathreads.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020096
97#include <types/capture.h>
William Lallemandce83b4a2018-10-26 14:47:30 +020098#include <types/cli.h>
Christopher Fauletd7c91962015-04-30 11:48:27 +020099#include <types/filters.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200100#include <types/global.h>
Simon Hormanac821422011-07-15 13:14:09 +0900101#include <types/acl.h>
Willy Tarreau3c63fd82011-09-07 18:00:47 +0200102#include <types/peers.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200103
Willy Tarreau0fc45a72007-06-17 00:36:03 +0200104#include <proto/acl.h>
Willy Tarreau609aad92018-11-22 08:31:09 +0100105#include <proto/activity.h>
Willy Tarreau2e845be2012-10-19 19:49:09 +0200106#include <proto/arg.h>
Willy Tarreau3c595ac2015-04-19 09:59:31 +0200107#include <proto/auth.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200108#include <proto/backend.h>
Willy Tarreauc7e42382012-08-24 19:22:53 +0200109#include <proto/channel.h>
Christopher Fauletc6e07702020-03-26 19:48:20 +0100110#include <proto/checks.h>
William Lallemandce83b4a2018-10-26 14:47:30 +0200111#include <proto/cli.h>
Willy Tarreauf2943dc2012-10-26 20:10:28 +0200112#include <proto/connection.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200113#include <proto/fd.h>
Christopher Fauletd7c91962015-04-30 11:48:27 +0200114#include <proto/filters.h>
Willy Tarreau34eb6712011-10-24 18:15:04 +0200115#include <proto/hdr_idx.h>
Thierry FOURNIER6f1fd482015-01-23 14:06:13 +0100116#include <proto/hlua.h>
Willy Tarreau61c112a2018-10-02 16:43:32 +0200117#include <proto/http_rules.h>
Willy Tarreaud1d54542012-09-12 22:58:11 +0200118#include <proto/listener.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200119#include <proto/log.h>
William Lallemand48dfbbd2019-04-01 11:29:53 +0200120#include <proto/mworker.h>
Thierry FOURNIERaf5a29d2014-03-11 14:29:22 +0100121#include <proto/pattern.h>
Willy Tarreaud1d54542012-09-12 22:58:11 +0200122#include <proto/protocol.h>
Willy Tarreau80587432006-12-24 17:47:20 +0100123#include <proto/proto_http.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200124#include <proto/proxy.h>
125#include <proto/queue.h>
126#include <proto/server.h>
Willy Tarreaub1ec8c42015-04-03 13:53:24 +0200127#include <proto/session.h>
Willy Tarreau87b09662015-04-03 00:22:06 +0200128#include <proto/stream.h>
Willy Tarreau29857942009-05-10 09:01:21 +0200129#include <proto/signal.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200130#include <proto/task.h>
Baptiste Assmann325137d2015-04-13 23:40:55 +0200131#include <proto/dns.h>
Christopher Fauletff2613e2016-11-09 11:36:17 +0100132#include <proto/vars.h>
Grant Zhang872f9c22017-01-21 01:10:18 +0000133#include <proto/ssl_sock.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +0200134
Willy Tarreau7b5654f2019-03-29 21:30:17 +0100135/* array of init calls for older platforms */
136DECLARE_INIT_STAGES;
137
Willy Tarreau477ecd82010-01-03 21:12:30 +0100138/* list of config files */
139static struct list cfg_cfgfiles = LIST_HEAD_INIT(cfg_cfgfiles);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200140int pid; /* current process id */
Willy Tarreau28156642007-11-26 16:13:36 +0100141int relative_pid = 1; /* process id starting at 1 */
Willy Tarreau387bd4f2017-11-10 19:08:14 +0100142unsigned long pid_bit = 1; /* bit corresponding to the process id */
Willy Tarreaua38a7172019-02-02 17:11:28 +0100143unsigned long all_proc_mask = 1; /* mask of all processes */
Willy Tarreaubaaee002006-06-26 02:48:02 +0200144
Willy Tarreaub7bd3852020-03-12 17:24:53 +0100145volatile unsigned long sleeping_thread_mask = 0; /* Threads that are about to sleep in poll() */
Willy Tarreauaf6be6f2020-03-12 17:28:01 +0100146volatile unsigned long stopping_thread_mask = 0; /* Threads acknowledged stopping */
Willy Tarreaub7bd3852020-03-12 17:24:53 +0100147
Willy Tarreaubaaee002006-06-26 02:48:02 +0200148/* global options */
149struct global global = {
Cyril Bonté203ec5a2017-03-23 22:44:13 +0100150 .hard_stop_after = TICK_ETERNITY,
Willy Tarreau247a13a2012-11-15 17:38:15 +0100151 .nbproc = 1,
Willy Tarreau149ab772019-01-26 14:27:06 +0100152 .nbthread = 0,
William Lallemand5f232402012-04-05 18:02:55 +0200153 .req_count = 0,
William Lallemand0f99e342011-10-12 17:50:54 +0200154 .logsrvs = LIST_HEAD_INIT(global.logsrvs),
William Lallemand9d5f5482012-11-07 16:12:57 +0100155 .maxzlibmem = 0,
William Lallemandd85f9172012-11-09 17:05:39 +0100156 .comp_rate_lim = 0,
Emeric Brun850efd52014-01-29 12:24:34 +0100157 .ssl_server_verify = SSL_SERVER_VERIFY_REQUIRED,
Emeric Bruned760922010-10-22 17:59:25 +0200158 .unix_bind = {
159 .ux = {
160 .uid = -1,
161 .gid = -1,
162 .mode = 0,
163 }
164 },
Willy Tarreau27a674e2009-08-17 07:23:33 +0200165 .tune = {
Willy Tarreau7ac908b2019-02-27 12:02:18 +0100166 .options = GTUNE_LISTENER_MQ,
Willy Tarreauc77d3642018-12-12 06:19:42 +0100167 .bufsize = (BUFSIZE + 2*sizeof(void *) - 1) & -(2*sizeof(void *)),
Willy Tarreau27097842015-09-28 13:53:23 +0200168 .maxrewrite = -1,
Willy Tarreauc77d3642018-12-12 06:19:42 +0100169 .chksize = (BUFSIZE + 2*sizeof(void *) - 1) & -(2*sizeof(void *)),
Willy Tarreaua24adf02014-11-27 01:11:56 +0100170 .reserved_bufs = RESERVED_BUFS,
Willy Tarreauf3045d22015-04-29 16:24:50 +0200171 .pattern_cache = DEFAULT_PAT_LRU_SIZE,
Olivier Houchard88698d92019-04-16 19:07:22 +0200172 .pool_low_ratio = 20,
173 .pool_high_ratio = 25,
Emeric Brunfc32aca2012-09-03 12:10:29 +0200174#ifdef USE_OPENSSL
Emeric Brun46635772012-11-14 11:32:56 +0100175 .sslcachesize = SSLCACHESIZE,
Emeric Brunfc32aca2012-09-03 12:10:29 +0200176#endif
William Lallemandf3747832012-11-09 12:33:10 +0100177 .comp_maxlevel = 1,
Willy Tarreau7e312732014-02-12 16:35:14 +0100178#ifdef DEFAULT_IDLE_TIMER
179 .idle_timer = DEFAULT_IDLE_TIMER,
180#else
181 .idle_timer = 1000, /* 1 second */
182#endif
Willy Tarreau27a674e2009-08-17 07:23:33 +0200183 },
Emeric Brun76d88952012-10-05 15:47:31 +0200184#ifdef USE_OPENSSL
185#ifdef DEFAULT_MAXSSLCONN
Willy Tarreau403edff2012-09-06 11:58:37 +0200186 .maxsslconn = DEFAULT_MAXSSLCONN,
187#endif
Emeric Brun76d88952012-10-05 15:47:31 +0200188#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +0200189 /* others NULL OK */
190};
191
192/*********************************************************************/
193
194int stopping; /* non zero means stopping in progress */
Cyril Bonté203ec5a2017-03-23 22:44:13 +0100195int killed; /* non zero means a hard-stop is triggered */
Willy Tarreauaf7ad002010-08-31 15:39:26 +0200196int jobs = 0; /* number of active jobs (conns, listeners, active tasks, ...) */
William Lallemanda7199262018-11-16 16:57:20 +0100197int unstoppable_jobs = 0; /* number of active jobs that can't be stopped during a soft stop */
Willy Tarreau199ad242018-11-05 16:31:22 +0100198int active_peers = 0; /* number of active peers (connection attempts and connected) */
Willy Tarreau2d372c22018-11-05 17:12:27 +0100199int connected_peers = 0; /* number of connected peers (verified ones) */
Willy Tarreaubaaee002006-06-26 02:48:02 +0200200
201/* Here we store informations about the pids of the processes we may pause
202 * or kill. We will send them a signal every 10 ms until we can bind to all
203 * our ports. With 200 retries, that's about 2 seconds.
204 */
205#define MAX_START_RETRIES 200
Willy Tarreaubaaee002006-06-26 02:48:02 +0200206static int *oldpids = NULL;
207static int oldpids_sig; /* use USR1 or TERM */
208
Olivier Houchardf73629d2017-04-05 22:33:04 +0200209/* Path to the unix socket we use to retrieve listener sockets from the old process */
210static const char *old_unixsocket;
211
William Lallemand85b0bd92017-06-01 17:38:53 +0200212static char *cur_unixsocket = NULL;
213
William Lallemandcb11fd22017-06-01 17:38:52 +0200214int atexit_flag = 0;
215
Willy Tarreaubb545b42010-08-25 12:58:59 +0200216int nb_oldpids = 0;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200217const int zero = 0;
218const int one = 1;
Alexandre Cassen87ea5482007-10-11 20:48:58 +0200219const struct linger nolinger = { .l_onoff = 1, .l_linger = 0 };
Willy Tarreaubaaee002006-06-26 02:48:02 +0200220
Willy Tarreau1d21e0a2010-03-12 21:58:54 +0100221char hostname[MAX_HOSTNAME_LEN];
Emeric Brun2b920a12010-09-23 18:30:22 +0200222char localpeer[MAX_HOSTNAME_LEN];
Willy Tarreaubaaee002006-06-26 02:48:02 +0200223
Willy Tarreau89efaed2013-12-13 15:14:55 +0100224/* used from everywhere just to drain results we don't want to read and which
225 * recent versions of gcc increasingly and annoyingly complain about.
226 */
227int shut_your_big_mouth_gcc_int = 0;
228
William Lallemand73b85e72017-06-01 17:38:51 +0200229static char **next_argv = NULL;
230
William Lallemandbc193052018-09-11 10:06:26 +0200231struct list proc_list = LIST_HEAD_INIT(proc_list);
232
233int master = 0; /* 1 if in master, 0 if in child */
Willy Tarreaubf696402019-03-01 10:09:28 +0100234unsigned int rlim_fd_cur_at_boot = 0;
235unsigned int rlim_fd_max_at_boot = 0;
William Lallemandbc193052018-09-11 10:06:26 +0200236
Willy Tarreau4ce41952020-03-06 18:57:15 +0100237/* per-boot randomness */
238unsigned char boot_seed[20]; /* per-boot random seed (160 bits initially) */
239
William Lallemand16dd1b32018-11-19 18:46:18 +0100240struct mworker_proc *proc_self = NULL;
William Lallemandbc193052018-09-11 10:06:26 +0200241
Willy Tarreau08ceb102011-07-24 22:58:00 +0200242/* list of the temporarily limited listeners because of lack of resource */
243struct list global_listener_queue = LIST_HEAD_INIT(global_listener_queue);
Willy Tarreaue9b26022011-08-01 20:57:55 +0200244struct task *global_listener_queue_task;
Olivier Houchard9f6af332018-05-25 14:04:04 +0200245static struct task *manage_global_listener_queue(struct task *t, void *context, unsigned short state);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200246
William Lallemandb3f2be32018-09-11 10:06:18 +0200247static void *run_thread_poll_loop(void *data);
248
Willy Tarreauff055502014-04-28 22:27:06 +0200249/* bitfield of a few warnings to emit just once (WARN_*) */
250unsigned int warned = 0;
251
William Lallemande7361152018-10-26 14:47:36 +0200252/* master CLI configuration (-S flag) */
253struct list mworker_cli_conf = LIST_HEAD_INIT(mworker_cli_conf);
Willy Tarreaucdb737e2016-12-21 18:43:10 +0100254
255/* These are strings to be reported in the output of "haproxy -vv". They may
256 * either be constants (in which case must_free must be zero) or dynamically
257 * allocated strings to pass to free() on exit, and in this case must_free
258 * must be non-zero.
259 */
260struct list build_opts_list = LIST_HEAD_INIT(build_opts_list);
261struct build_opts_str {
262 struct list list;
263 const char *str;
264 int must_free;
265};
266
Willy Tarreaue6945732016-12-21 19:57:00 +0100267/* These functions are called just after the point where the program exits
268 * after a config validity check, so they are generally suited for resource
269 * allocation and slow initializations that should be skipped during basic
270 * config checks. The functions must return 0 on success, or a combination
271 * of ERR_* flags (ERR_WARN, ERR_ABORT, ERR_FATAL, ...). The 2 latter cause
272 * and immediate exit, so the function must have emitted any useful error.
273 */
274struct list post_check_list = LIST_HEAD_INIT(post_check_list);
275struct post_check_fct {
276 struct list list;
277 int (*fct)();
278};
279
Willy Tarreau082b6282019-05-22 14:42:12 +0200280/* These functions are called for each thread just after the thread creation
281 * and before running the init functions. They should be used to do per-thread
282 * (re-)allocations that are needed by subsequent functoins. They must return 0
283 * if an error occurred. */
284struct list per_thread_alloc_list = LIST_HEAD_INIT(per_thread_alloc_list);
285struct per_thread_alloc_fct {
Willy Tarreau05554e62016-12-21 20:46:26 +0100286 struct list list;
Willy Tarreau082b6282019-05-22 14:42:12 +0200287 int (*fct)();
Willy Tarreau05554e62016-12-21 20:46:26 +0100288};
289
Christopher Faulet415f6112017-07-25 16:52:58 +0200290/* These functions are called for each thread just after the thread creation
291 * and before running the scheduler. They should be used to do per-thread
292 * initializations. They must return 0 if an error occurred. */
293struct list per_thread_init_list = LIST_HEAD_INIT(per_thread_init_list);
294struct per_thread_init_fct {
295 struct list list;
296 int (*fct)();
297};
298
Willy Tarreau082b6282019-05-22 14:42:12 +0200299/* These functions are called when freeing the global sections at the end of
300 * deinit, after everything is stopped. They don't return anything. They should
301 * not release shared resources that are possibly used by other deinit
302 * functions, only close/release what is private. Use the per_thread_free_list
303 * to release shared resources.
304 */
305struct list post_deinit_list = LIST_HEAD_INIT(post_deinit_list);
306struct post_deinit_fct {
307 struct list list;
308 void (*fct)();
309};
310
311/* These functions are called when freeing the global sections at the end of
312 * deinit, after the thread deinit functions, to release unneeded memory
313 * allocations. They don't return anything, and they work in best effort mode
314 * as their sole goal is to make valgrind mostly happy.
315 */
316struct list per_thread_free_list = LIST_HEAD_INIT(per_thread_free_list);
317struct per_thread_free_fct {
318 struct list list;
319 int (*fct)();
320};
321
Christopher Faulet415f6112017-07-25 16:52:58 +0200322/* These functions are called for each thread just after the scheduler loop and
323 * before exiting the thread. They don't return anything and, as for post-deinit
324 * functions, they work in best effort mode as their sole goal is to make
325 * valgrind mostly happy. */
326struct list per_thread_deinit_list = LIST_HEAD_INIT(per_thread_deinit_list);
327struct per_thread_deinit_fct {
328 struct list list;
329 void (*fct)();
330};
331
Willy Tarreaubaaee002006-06-26 02:48:02 +0200332/*********************************************************************/
333/* general purpose functions ***************************************/
334/*********************************************************************/
335
Willy Tarreaucdb737e2016-12-21 18:43:10 +0100336/* used to register some build option strings at boot. Set must_free to
337 * non-zero if the string must be freed upon exit.
338 */
339void hap_register_build_opts(const char *str, int must_free)
340{
341 struct build_opts_str *b;
342
343 b = calloc(1, sizeof(*b));
344 if (!b) {
345 fprintf(stderr, "out of memory\n");
346 exit(1);
347 }
348 b->str = str;
349 b->must_free = must_free;
350 LIST_ADDQ(&build_opts_list, &b->list);
351}
352
Willy Tarreaue6945732016-12-21 19:57:00 +0100353/* used to register some initialization functions to call after the checks. */
354void hap_register_post_check(int (*fct)())
355{
356 struct post_check_fct *b;
357
358 b = calloc(1, sizeof(*b));
359 if (!b) {
360 fprintf(stderr, "out of memory\n");
361 exit(1);
362 }
363 b->fct = fct;
364 LIST_ADDQ(&post_check_list, &b->list);
365}
366
Willy Tarreau05554e62016-12-21 20:46:26 +0100367/* used to register some de-initialization functions to call after everything
368 * has stopped.
369 */
370void hap_register_post_deinit(void (*fct)())
371{
372 struct post_deinit_fct *b;
373
374 b = calloc(1, sizeof(*b));
375 if (!b) {
376 fprintf(stderr, "out of memory\n");
377 exit(1);
378 }
379 b->fct = fct;
380 LIST_ADDQ(&post_deinit_list, &b->list);
381}
382
Willy Tarreau082b6282019-05-22 14:42:12 +0200383/* used to register some allocation functions to call for each thread. */
384void hap_register_per_thread_alloc(int (*fct)())
385{
386 struct per_thread_alloc_fct *b;
387
388 b = calloc(1, sizeof(*b));
389 if (!b) {
390 fprintf(stderr, "out of memory\n");
391 exit(1);
392 }
393 b->fct = fct;
394 LIST_ADDQ(&per_thread_alloc_list, &b->list);
395}
396
Christopher Faulet415f6112017-07-25 16:52:58 +0200397/* used to register some initialization functions to call for each thread. */
398void hap_register_per_thread_init(int (*fct)())
399{
400 struct per_thread_init_fct *b;
401
402 b = calloc(1, sizeof(*b));
403 if (!b) {
404 fprintf(stderr, "out of memory\n");
405 exit(1);
406 }
407 b->fct = fct;
408 LIST_ADDQ(&per_thread_init_list, &b->list);
409}
410
411/* used to register some de-initialization functions to call for each thread. */
412void hap_register_per_thread_deinit(void (*fct)())
413{
414 struct per_thread_deinit_fct *b;
415
416 b = calloc(1, sizeof(*b));
417 if (!b) {
418 fprintf(stderr, "out of memory\n");
419 exit(1);
420 }
421 b->fct = fct;
422 LIST_ADDQ(&per_thread_deinit_list, &b->list);
423}
424
Willy Tarreau082b6282019-05-22 14:42:12 +0200425/* used to register some free functions to call for each thread. */
426void hap_register_per_thread_free(int (*fct)())
427{
428 struct per_thread_free_fct *b;
429
430 b = calloc(1, sizeof(*b));
431 if (!b) {
432 fprintf(stderr, "out of memory\n");
433 exit(1);
434 }
435 b->fct = fct;
436 LIST_ADDQ(&per_thread_free_list, &b->list);
437}
438
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100439static void display_version()
Willy Tarreaubaaee002006-06-26 02:48:02 +0200440{
Willy Tarreau909b9d82019-01-04 18:20:32 +0100441 printf("HA-Proxy version %s %s - https://haproxy.org/\n", haproxy_version, haproxy_date);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200442}
443
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100444static void display_build_opts()
Willy Tarreau7b066db2007-12-02 11:28:59 +0100445{
Willy Tarreaucdb737e2016-12-21 18:43:10 +0100446 struct build_opts_str *item;
447
Willy Tarreau7b066db2007-12-02 11:28:59 +0100448 printf("Build options :"
449#ifdef BUILD_TARGET
Willy Tarreau9f2b7302008-01-02 20:48:34 +0100450 "\n TARGET = " BUILD_TARGET
Willy Tarreau7b066db2007-12-02 11:28:59 +0100451#endif
452#ifdef BUILD_CPU
Willy Tarreau9f2b7302008-01-02 20:48:34 +0100453 "\n CPU = " BUILD_CPU
Willy Tarreau7b066db2007-12-02 11:28:59 +0100454#endif
455#ifdef BUILD_CC
Willy Tarreau9f2b7302008-01-02 20:48:34 +0100456 "\n CC = " BUILD_CC
457#endif
458#ifdef BUILD_CFLAGS
459 "\n CFLAGS = " BUILD_CFLAGS
Willy Tarreau7b066db2007-12-02 11:28:59 +0100460#endif
Willy Tarreau9f2b7302008-01-02 20:48:34 +0100461#ifdef BUILD_OPTIONS
462 "\n OPTIONS = " BUILD_OPTIONS
Willy Tarreau7b066db2007-12-02 11:28:59 +0100463#endif
Willy Tarreau7728ed32019-03-27 13:20:08 +0100464#ifdef BUILD_FEATURES
465 "\n\nFeature list : " BUILD_FEATURES
466#endif
Willy Tarreau27a674e2009-08-17 07:23:33 +0200467 "\n\nDefault settings :"
Willy Tarreauca783d42019-03-13 10:03:07 +0100468 "\n bufsize = %d, maxrewrite = %d, maxpollevents = %d"
Willy Tarreau27a674e2009-08-17 07:23:33 +0200469 "\n\n",
Willy Tarreauca783d42019-03-13 10:03:07 +0100470 BUFSIZE, MAXREWRITE, MAX_POLL_EVENTS);
Willy Tarreaube5b6852009-10-03 18:57:08 +0200471
Willy Tarreaucdb737e2016-12-21 18:43:10 +0100472 list_for_each_entry(item, &build_opts_list, list) {
473 puts(item->str);
474 }
475
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +0100476 putchar('\n');
477
Willy Tarreaube5b6852009-10-03 18:57:08 +0200478 list_pollers(stdout);
479 putchar('\n');
Christopher Faulet98d9fe22018-04-10 14:37:32 +0200480 list_mux_proto(stdout);
481 putchar('\n');
Willy Tarreau679bba12019-03-19 08:08:10 +0100482 list_services(stdout);
483 putchar('\n');
Christopher Fauletb3f4e142016-03-07 12:46:38 +0100484 list_filters(stdout);
485 putchar('\n');
Willy Tarreau7b066db2007-12-02 11:28:59 +0100486}
487
Willy Tarreaubaaee002006-06-26 02:48:02 +0200488/*
489 * This function prints the command line usage and exits
490 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100491static void usage(char *name)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200492{
493 display_version();
494 fprintf(stderr,
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200495 "Usage : %s [-f <cfgfile|cfgdir>]* [ -vdV"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200496 "D ] [ -n <maxconn> ] [ -N <maxpconn> ]\n"
Willy Tarreaua088d312015-10-08 11:58:48 +0200497 " [ -p <pidfile> ] [ -m <max megs> ] [ -C <dir> ] [-- <cfgfile>*]\n"
Willy Tarreau7b066db2007-12-02 11:28:59 +0100498 " -v displays version ; -vv shows known build options.\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200499 " -d enters debug mode ; -db only disables background mode.\n"
Willy Tarreau6e064432012-05-08 15:40:42 +0200500 " -dM[<byte>] poisons memory with <byte> (defaults to 0x50)\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200501 " -V enters verbose mode (disables quiet mode)\n"
Willy Tarreau576132e2011-09-10 19:26:56 +0200502 " -D goes daemon ; -C changes to <dir> before loading files.\n"
William Lallemand095ba4c2017-06-01 17:38:50 +0200503 " -W master-worker mode.\n"
Tim Duesterhusd6942c82017-11-20 15:58:35 +0100504#if defined(USE_SYSTEMD)
505 " -Ws master-worker mode with systemd notify support.\n"
506#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +0200507 " -q quiet mode : don't display messages\n"
Willy Tarreau5d01a632009-06-22 16:02:30 +0200508 " -c check mode : only check config files and exit\n"
Willy Tarreauca783d42019-03-13 10:03:07 +0100509 " -n sets the maximum total # of connections (uses ulimit -n)\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200510 " -m limits the usable amount of memory (in MB)\n"
511 " -N sets the default, per-proxy maximum # of connections (%d)\n"
Emeric Brun2b920a12010-09-23 18:30:22 +0200512 " -L set local peer name (default to hostname)\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200513 " -p writes pids of all children to this file\n"
Willy Tarreaue5733232019-05-22 19:24:06 +0200514#if defined(USE_EPOLL)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200515 " -de disables epoll() usage even when available\n"
516#endif
Willy Tarreaue5733232019-05-22 19:24:06 +0200517#if defined(USE_KQUEUE)
Willy Tarreau1e63130a2007-04-09 12:03:06 +0200518 " -dk disables kqueue() usage even when available\n"
519#endif
Willy Tarreaue5733232019-05-22 19:24:06 +0200520#if defined(USE_EVPORTS)
Emmanuel Hocdet0ba4f482019-04-08 16:53:32 +0000521 " -dv disables event ports usage even when available\n"
522#endif
Willy Tarreaue5733232019-05-22 19:24:06 +0200523#if defined(USE_POLL)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200524 " -dp disables poll() usage even when available\n"
525#endif
Willy Tarreaue5733232019-05-22 19:24:06 +0200526#if defined(USE_LINUX_SPLICE)
Willy Tarreau3ab68cf2009-01-25 16:03:28 +0100527 " -dS disables splice usage (broken on old kernels)\n"
528#endif
Nenad Merdanovic88afe032014-04-14 15:56:58 +0200529#if defined(USE_GETADDRINFO)
530 " -dG disables getaddrinfo() usage\n"
531#endif
Lukas Tribusa0bcbdc2016-09-12 21:42:20 +0000532#if defined(SO_REUSEPORT)
533 " -dR disables SO_REUSEPORT usage\n"
534#endif
Willy Tarreau3eed10e2016-11-07 21:03:16 +0100535 " -dr ignores server address resolution failures\n"
Emeric Brun850efd52014-01-29 12:24:34 +0100536 " -dV disables SSL verify on servers side\n"
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +0200537 " -sf/-st [pid ]* finishes/terminates old pids.\n"
Olivier Houchardf73629d2017-04-05 22:33:04 +0200538 " -x <unix_socket> get listening sockets from a unix socket\n"
William Lallemand63329e32019-06-13 17:03:37 +0200539 " -S <bind>[,<bind options>...] new master CLI\n"
Willy Tarreaubaaee002006-06-26 02:48:02 +0200540 "\n",
Willy Tarreauca783d42019-03-13 10:03:07 +0100541 name, cfg_maxpconn);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200542 exit(1);
543}
544
545
546
547/*********************************************************************/
548/* more specific functions ***************************************/
549/*********************************************************************/
550
William Lallemand73b85e72017-06-01 17:38:51 +0200551/* sends the signal <sig> to all pids found in <oldpids>. Returns the number of
552 * pids the signal was correctly delivered to.
553 */
William Lallemande25473c2019-04-01 11:29:56 +0200554int tell_old_pids(int sig)
William Lallemand73b85e72017-06-01 17:38:51 +0200555{
556 int p;
557 int ret = 0;
558 for (p = 0; p < nb_oldpids; p++)
559 if (kill(oldpids[p], sig) == 0)
560 ret++;
561 return ret;
562}
563
William Lallemand75ea0a02017-11-15 19:02:58 +0100564/*
William Lallemand73b85e72017-06-01 17:38:51 +0200565 * remove a pid forom the olpid array and decrease nb_oldpids
566 * return 1 pid was found otherwise return 0
567 */
568
569int delete_oldpid(int pid)
570{
571 int i;
572
573 for (i = 0; i < nb_oldpids; i++) {
574 if (oldpids[i] == pid) {
575 oldpids[i] = oldpids[nb_oldpids - 1];
576 oldpids[nb_oldpids - 1] = 0;
577 nb_oldpids--;
578 return 1;
579 }
580 }
581 return 0;
582}
583
William Lallemand85b0bd92017-06-01 17:38:53 +0200584
585static void get_cur_unixsocket()
586{
587 /* if -x was used, try to update the stat socket if not available anymore */
588 if (global.stats_fe) {
589 struct bind_conf *bind_conf;
590
591 /* pass through all stats socket */
592 list_for_each_entry(bind_conf, &global.stats_fe->conf.bind, by_fe) {
593 struct listener *l;
594
595 list_for_each_entry(l, &bind_conf->listeners, by_bind) {
596
597 if (l->addr.ss_family == AF_UNIX &&
598 (bind_conf->level & ACCESS_FD_LISTENERS)) {
599 const struct sockaddr_un *un;
600
601 un = (struct sockaddr_un *)&l->addr;
602 /* priority to old_unixsocket */
603 if (!cur_unixsocket) {
604 cur_unixsocket = strdup(un->sun_path);
605 } else {
606 if (old_unixsocket && !strcmp(un->sun_path, old_unixsocket)) {
607 free(cur_unixsocket);
608 cur_unixsocket = strdup(old_unixsocket);
609 return;
610 }
611 }
612 }
613 }
614 }
615 }
616 if (!cur_unixsocket && old_unixsocket)
617 cur_unixsocket = strdup(old_unixsocket);
618}
619
William Lallemand73b85e72017-06-01 17:38:51 +0200620/*
621 * When called, this function reexec haproxy with -sf followed by current
Joseph Herlant03420902018-11-15 10:41:50 -0800622 * children PIDs and possibly old children PIDs if they didn't leave yet.
William Lallemand73b85e72017-06-01 17:38:51 +0200623 */
William Lallemanda57b7e32018-12-14 21:11:31 +0100624void mworker_reload()
William Lallemand73b85e72017-06-01 17:38:51 +0200625{
626 int next_argc = 0;
William Lallemand73b85e72017-06-01 17:38:51 +0200627 char *msg = NULL;
Willy Tarreau8dca1952019-03-01 10:21:55 +0100628 struct rlimit limit;
William Lallemand7c756a82018-11-26 11:53:40 +0100629 struct per_thread_deinit_fct *ptdf;
William Lallemand73b85e72017-06-01 17:38:51 +0200630
631 mworker_block_signals();
Tim Duesterhusd6942c82017-11-20 15:58:35 +0100632#if defined(USE_SYSTEMD)
633 if (global.tune.options & GTUNE_USE_SYSTEMD)
634 sd_notify(0, "RELOADING=1");
635#endif
William Lallemand73b85e72017-06-01 17:38:51 +0200636 setenv("HAPROXY_MWORKER_REEXEC", "1", 1);
637
William Lallemandbc193052018-09-11 10:06:26 +0200638 mworker_proc_list_to_env(); /* put the children description in the env */
639
William Lallemand7c756a82018-11-26 11:53:40 +0100640 /* during the reload we must ensure that every FDs that can't be
641 * reuse (ie those that are not referenced in the proc_list)
642 * are closed or they will leak. */
643
644 /* close the listeners FD */
645 mworker_cli_proxy_stop();
William Lallemand13b11702019-06-24 17:40:48 +0200646
647 if (getenv("HAPROXY_MWORKER_WAIT_ONLY") == NULL) {
648 /* close the poller FD and the thread waker pipe FD */
649 list_for_each_entry(ptdf, &per_thread_deinit_list, list)
650 ptdf->fct();
651 if (fdtab)
652 deinit_pollers();
653 }
Willy Tarreau5db847a2019-05-09 14:13:35 +0200654#if defined(USE_OPENSSL) && (HA_OPENSSL_VERSION_NUMBER >= 0x10101000L)
William Lallemand1b7c4dc2019-10-15 14:04:08 +0200655 /* close random device FDs */
656 RAND_keep_random_devices_open(0);
Rob Allen56996da2019-05-03 09:11:32 +0100657#endif
William Lallemand7c756a82018-11-26 11:53:40 +0100658
Willy Tarreau8dca1952019-03-01 10:21:55 +0100659 /* restore the initial FD limits */
660 limit.rlim_cur = rlim_fd_cur_at_boot;
661 limit.rlim_max = rlim_fd_max_at_boot;
662 if (setrlimit(RLIMIT_NOFILE, &limit) == -1) {
663 getrlimit(RLIMIT_NOFILE, &limit);
664 ha_warning("Failed to restore initial FD limits (cur=%u max=%u), using cur=%u max=%u\n",
665 rlim_fd_cur_at_boot, rlim_fd_max_at_boot,
666 (unsigned int)limit.rlim_cur, (unsigned int)limit.rlim_max);
667 }
668
William Lallemand73b85e72017-06-01 17:38:51 +0200669 /* compute length */
670 while (next_argv[next_argc])
671 next_argc++;
672
William Lallemand85b0bd92017-06-01 17:38:53 +0200673 /* 1 for haproxy -sf, 2 for -x /socket */
William Lallemand3f128872019-04-01 11:29:59 +0200674 next_argv = realloc(next_argv, (next_argc + 1 + 2 + mworker_child_nb() + nb_oldpids + 1) * sizeof(char *));
William Lallemand73b85e72017-06-01 17:38:51 +0200675 if (next_argv == NULL)
676 goto alloc_error;
677
William Lallemand73b85e72017-06-01 17:38:51 +0200678 /* add -sf <PID>* to argv */
William Lallemand3f128872019-04-01 11:29:59 +0200679 if (mworker_child_nb() > 0) {
680 struct mworker_proc *child;
681
William Lallemand73b85e72017-06-01 17:38:51 +0200682 next_argv[next_argc++] = "-sf";
William Lallemand3f128872019-04-01 11:29:59 +0200683
684 list_for_each_entry(child, &proc_list, list) {
William Lallemand175125e2019-11-19 17:04:18 +0100685 if (!(child->options & (PROC_O_TYPE_WORKER|PROC_O_TYPE_PROG)) || child->pid <= -1 )
William Lallemand3f128872019-04-01 11:29:59 +0200686 continue;
687 next_argv[next_argc] = memprintf(&msg, "%d", child->pid);
William Lallemand73b85e72017-06-01 17:38:51 +0200688 if (next_argv[next_argc] == NULL)
689 goto alloc_error;
690 msg = NULL;
William Lallemand3f128872019-04-01 11:29:59 +0200691 next_argc++;
William Lallemand73b85e72017-06-01 17:38:51 +0200692 }
693 }
William Lallemand3f128872019-04-01 11:29:59 +0200694
William Lallemand73b85e72017-06-01 17:38:51 +0200695 next_argv[next_argc] = NULL;
William Lallemand85b0bd92017-06-01 17:38:53 +0200696
William Lallemand2bf6d622017-06-20 11:20:23 +0200697 /* add the -x option with the stat socket */
William Lallemand85b0bd92017-06-01 17:38:53 +0200698 if (cur_unixsocket) {
699
William Lallemand2bf6d622017-06-20 11:20:23 +0200700 next_argv[next_argc++] = "-x";
701 next_argv[next_argc++] = (char *)cur_unixsocket;
702 next_argv[next_argc++] = NULL;
William Lallemand85b0bd92017-06-01 17:38:53 +0200703 }
704
Christopher Faulet767a84b2017-11-24 16:50:31 +0100705 ha_warning("Reexecuting Master process\n");
Willy Tarreauf259fcc2019-08-26 10:37:39 +0200706 signal(SIGPROF, SIG_IGN);
Tim Duesterhus0436ab72017-11-12 17:39:18 +0100707 execvp(next_argv[0], next_argv);
William Lallemand73b85e72017-06-01 17:38:51 +0200708
Christopher Faulet767a84b2017-11-24 16:50:31 +0100709 ha_warning("Failed to reexecute the master process [%d]: %s\n", pid, strerror(errno));
William Lallemand722d4ca2017-11-15 19:02:55 +0100710 return;
711
William Lallemand73b85e72017-06-01 17:38:51 +0200712alloc_error:
Joseph Herlant07a08342018-11-15 10:43:05 -0800713 ha_warning("Failed to reexecute the master process [%d]: Cannot allocate memory\n", pid);
William Lallemand73b85e72017-06-01 17:38:51 +0200714 return;
715}
716
William Lallemandb3f2be32018-09-11 10:06:18 +0200717static void mworker_loop()
718{
719
720#if defined(USE_SYSTEMD)
721 if (global.tune.options & GTUNE_USE_SYSTEMD)
722 sd_notifyf(0, "READY=1\nMAINPID=%lu", (unsigned long)getpid());
723#endif
Willy Tarreaud83b6c12019-04-18 11:31:36 +0200724 /* Busy polling makes no sense in the master :-) */
725 global.tune.options &= ~GTUNE_BUSY_POLLING;
William Lallemandb3f2be32018-09-11 10:06:18 +0200726
William Lallemandbc193052018-09-11 10:06:26 +0200727 master = 1;
728
Willy Tarreau708c2442019-12-11 14:24:07 +0100729 signal_unregister(SIGTTIN);
730 signal_unregister(SIGTTOU);
William Lallemand0564d412018-11-20 17:36:53 +0100731 signal_unregister(SIGUSR1);
732 signal_unregister(SIGHUP);
733 signal_unregister(SIGQUIT);
734
William Lallemandb3f2be32018-09-11 10:06:18 +0200735 signal_register_fct(SIGTERM, mworker_catch_sigterm, SIGTERM);
736 signal_register_fct(SIGUSR1, mworker_catch_sigterm, SIGUSR1);
Willy Tarreau708c2442019-12-11 14:24:07 +0100737 signal_register_fct(SIGTTIN, mworker_broadcast_signal, SIGTTIN);
738 signal_register_fct(SIGTTOU, mworker_broadcast_signal, SIGTTOU);
William Lallemandb3f2be32018-09-11 10:06:18 +0200739 signal_register_fct(SIGINT, mworker_catch_sigterm, SIGINT);
740 signal_register_fct(SIGHUP, mworker_catch_sighup, SIGHUP);
741 signal_register_fct(SIGUSR2, mworker_catch_sighup, SIGUSR2);
742 signal_register_fct(SIGCHLD, mworker_catch_sigchld, SIGCHLD);
743
744 mworker_unblock_signals();
745 mworker_cleanlisteners();
William Lallemand27f3fa52018-12-06 14:05:20 +0100746 mworker_cleantasks();
William Lallemandb3f2be32018-09-11 10:06:18 +0200747
William Lallemandbc193052018-09-11 10:06:26 +0200748 mworker_catch_sigchld(NULL); /* ensure we clean the children in case
749 some SIGCHLD were lost */
750
William Lallemandb3f2be32018-09-11 10:06:18 +0200751 global.nbthread = 1;
752 relative_pid = 1;
753 pid_bit = 1;
Willy Tarreaua38a7172019-02-02 17:11:28 +0100754 all_proc_mask = 1;
William Lallemandb3f2be32018-09-11 10:06:18 +0200755
William Lallemand2672eb92018-12-14 15:52:39 +0100756#ifdef USE_THREAD
757 tid_bit = 1;
758 all_threads_mask = 1;
759#endif
760
William Lallemandb3f2be32018-09-11 10:06:18 +0200761 jobs++; /* this is the "master" job, we want to take care of the
762 signals even if there is no listener so the poll loop don't
763 leave */
764
765 fork_poller();
Willy Tarreaub4f7cc32019-05-03 09:27:30 +0200766 run_thread_poll_loop(0);
William Lallemandb3f2be32018-09-11 10:06:18 +0200767}
William Lallemandcb11fd22017-06-01 17:38:52 +0200768
769/*
770 * Reexec the process in failure mode, instead of exiting
771 */
772void reexec_on_failure()
773{
774 if (!atexit_flag)
775 return;
776
777 setenv("HAPROXY_MWORKER_WAIT_ONLY", "1", 1);
778
Christopher Faulet767a84b2017-11-24 16:50:31 +0100779 ha_warning("Reexecuting Master process in waitpid mode\n");
William Lallemandcb11fd22017-06-01 17:38:52 +0200780 mworker_reload();
William Lallemandcb11fd22017-06-01 17:38:52 +0200781}
William Lallemand73b85e72017-06-01 17:38:51 +0200782
783
784/*
Willy Tarreaud0807c32010-08-27 18:26:11 +0200785 * upon SIGUSR1, let's have a soft stop. Note that soft_stop() broadcasts
786 * a signal zero to all subscribers. This means that it's as easy as
787 * subscribing to signal 0 to get informed about an imminent shutdown.
Willy Tarreaubaaee002006-06-26 02:48:02 +0200788 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100789static void sig_soft_stop(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200790{
791 soft_stop();
Willy Tarreau24f4efa2010-08-27 17:56:48 +0200792 signal_unregister_handler(sh);
Willy Tarreaubafbe012017-11-24 17:34:44 +0100793 pool_gc(NULL);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200794}
795
796/*
797 * upon SIGTTOU, we pause everything
798 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100799static void sig_pause(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200800{
801 pause_proxies();
Willy Tarreaubafbe012017-11-24 17:34:44 +0100802 pool_gc(NULL);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200803}
804
805/*
806 * upon SIGTTIN, let's have a soft stop.
807 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100808static void sig_listen(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200809{
Willy Tarreaube58c382011-07-24 18:28:10 +0200810 resume_proxies();
Willy Tarreaubaaee002006-06-26 02:48:02 +0200811}
812
813/*
814 * this function dumps every server's state when the process receives SIGHUP.
815 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100816static void sig_dump_state(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200817{
Olivier Houchardfbc74e82017-11-24 16:54:05 +0100818 struct proxy *p = proxies_list;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200819
Christopher Faulet767a84b2017-11-24 16:50:31 +0100820 ha_warning("SIGHUP received, dumping servers states.\n");
Willy Tarreaubaaee002006-06-26 02:48:02 +0200821 while (p) {
822 struct server *s = p->srv;
823
824 send_log(p, LOG_NOTICE, "SIGHUP received, dumping servers states for proxy %s.\n", p->id);
825 while (s) {
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100826 chunk_printf(&trash,
827 "SIGHUP: Server %s/%s is %s. Conn: %d act, %d pend, %lld tot.",
828 p->id, s->id,
Emeric Brun52a91d32017-08-31 14:41:55 +0200829 (s->cur_state != SRV_ST_STOPPED) ? "UP" : "DOWN",
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100830 s->cur_sess, s->nbpend, s->counters.cum_sess);
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200831 ha_warning("%s\n", trash.area);
832 send_log(p, LOG_NOTICE, "%s\n", trash.area);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200833 s = s->next;
834 }
835
Willy Tarreau5fcc8f12007-09-17 11:27:09 +0200836 /* FIXME: those info are a bit outdated. We should be able to distinguish between FE and BE. */
837 if (!p->srv) {
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100838 chunk_printf(&trash,
839 "SIGHUP: Proxy %s has no servers. Conn: act(FE+BE): %d+%d, %d pend (%d unass), tot(FE+BE): %lld+%lld.",
840 p->id,
841 p->feconn, p->beconn, p->totpend, p->nbpend, p->fe_counters.cum_conn, p->be_counters.cum_conn);
Willy Tarreau5fcc8f12007-09-17 11:27:09 +0200842 } else if (p->srv_act == 0) {
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100843 chunk_printf(&trash,
844 "SIGHUP: Proxy %s %s ! Conn: act(FE+BE): %d+%d, %d pend (%d unass), tot(FE+BE): %lld+%lld.",
845 p->id,
846 (p->srv_bck) ? "is running on backup servers" : "has no server available",
847 p->feconn, p->beconn, p->totpend, p->nbpend, p->fe_counters.cum_conn, p->be_counters.cum_conn);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200848 } else {
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100849 chunk_printf(&trash,
850 "SIGHUP: Proxy %s has %d active servers and %d backup servers available."
851 " Conn: act(FE+BE): %d+%d, %d pend (%d unass), tot(FE+BE): %lld+%lld.",
852 p->id, p->srv_act, p->srv_bck,
853 p->feconn, p->beconn, p->totpend, p->nbpend, p->fe_counters.cum_conn, p->be_counters.cum_conn);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200854 }
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200855 ha_warning("%s\n", trash.area);
856 send_log(p, LOG_NOTICE, "%s\n", trash.area);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200857
858 p = p->next;
859 }
Willy Tarreaubaaee002006-06-26 02:48:02 +0200860}
861
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100862static void dump(struct sig_handler *sh)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200863{
Willy Tarreauc6ca1a02007-05-13 19:43:47 +0200864 /* dump memory usage then free everything possible */
865 dump_pools();
Willy Tarreaubafbe012017-11-24 17:34:44 +0100866 pool_gc(NULL);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200867}
868
William Lallemande1340412017-12-28 16:09:36 +0100869/*
870 * This function dup2 the stdio FDs (0,1,2) with <fd>, then closes <fd>
871 * If <fd> < 0, it opens /dev/null and use it to dup
872 *
873 * In the case of chrooting, you have to open /dev/null before the chroot, and
874 * pass the <fd> to this function
875 */
876static void stdio_quiet(int fd)
877{
878 if (fd < 0)
879 fd = open("/dev/null", O_RDWR, 0);
880
881 if (fd > -1) {
882 fclose(stdin);
883 fclose(stdout);
884 fclose(stderr);
885
886 dup2(fd, 0);
887 dup2(fd, 1);
888 dup2(fd, 2);
889 if (fd > 2)
890 close(fd);
891 return;
892 }
893
894 ha_alert("Cannot open /dev/null\n");
895 exit(EXIT_FAILURE);
896}
897
898
Joseph Herlant03420902018-11-15 10:41:50 -0800899/* This function checks if cfg_cfgfiles contains directories.
900 * If it finds one, it adds all the files (and only files) it contains
901 * in cfg_cfgfiles in place of the directory (and removes the directory).
902 * It adds the files in lexical order.
903 * It adds only files with .cfg extension.
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200904 * It doesn't add files with name starting with '.'
905 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +0100906static void cfgfiles_expand_directories(void)
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200907{
908 struct wordlist *wl, *wlb;
909 char *err = NULL;
910
911 list_for_each_entry_safe(wl, wlb, &cfg_cfgfiles, list) {
912 struct stat file_stat;
913 struct dirent **dir_entries = NULL;
914 int dir_entries_nb;
915 int dir_entries_it;
916
917 if (stat(wl->s, &file_stat)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100918 ha_alert("Cannot open configuration file/directory %s : %s\n",
919 wl->s,
920 strerror(errno));
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200921 exit(1);
922 }
923
924 if (!S_ISDIR(file_stat.st_mode))
925 continue;
926
927 /* from this point wl->s is a directory */
928
929 dir_entries_nb = scandir(wl->s, &dir_entries, NULL, alphasort);
930 if (dir_entries_nb < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100931 ha_alert("Cannot open configuration directory %s : %s\n",
932 wl->s,
933 strerror(errno));
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200934 exit(1);
935 }
936
937 /* for each element in the directory wl->s */
938 for (dir_entries_it = 0; dir_entries_it < dir_entries_nb; dir_entries_it++) {
939 struct dirent *dir_entry = dir_entries[dir_entries_it];
940 char *filename = NULL;
941 char *d_name_cfgext = strstr(dir_entry->d_name, ".cfg");
942
943 /* don't add filename that begin with .
Joseph Herlant03420902018-11-15 10:41:50 -0800944 * only add filename with .cfg extension
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200945 */
946 if (dir_entry->d_name[0] == '.' ||
947 !(d_name_cfgext && d_name_cfgext[4] == '\0'))
948 goto next_dir_entry;
949
950 if (!memprintf(&filename, "%s/%s", wl->s, dir_entry->d_name)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100951 ha_alert("Cannot load configuration files %s : out of memory.\n",
952 filename);
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200953 exit(1);
954 }
955
956 if (stat(filename, &file_stat)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100957 ha_alert("Cannot open configuration file %s : %s\n",
958 wl->s,
959 strerror(errno));
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200960 exit(1);
961 }
962
963 /* don't add anything else than regular file in cfg_cfgfiles
964 * this way we avoid loops
965 */
966 if (!S_ISREG(file_stat.st_mode))
967 goto next_dir_entry;
968
969 if (!list_append_word(&wl->list, filename, &err)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100970 ha_alert("Cannot load configuration files %s : %s\n",
971 filename,
972 err);
Maxime de Roucy379d9c72016-05-13 23:52:56 +0200973 exit(1);
974 }
975
976next_dir_entry:
977 free(filename);
978 free(dir_entry);
979 }
980
981 free(dir_entries);
982
983 /* remove the current directory (wl) from cfg_cfgfiles */
984 free(wl->s);
985 LIST_DEL(&wl->list);
986 free(wl);
987 }
988
989 free(err);
990}
991
Olivier Houchardf73629d2017-04-05 22:33:04 +0200992static int get_old_sockets(const char *unixsocket)
993{
994 char *cmsgbuf = NULL, *tmpbuf = NULL;
995 int *tmpfd = NULL;
996 struct sockaddr_un addr;
997 struct cmsghdr *cmsg;
998 struct msghdr msghdr;
999 struct iovec iov;
1000 struct xfer_sock_list *xfer_sock = NULL;
Olivier Houchard54740872017-04-06 14:45:14 +02001001 struct timeval tv = { .tv_sec = 1, .tv_usec = 0 };
Olivier Houchardf73629d2017-04-05 22:33:04 +02001002 int sock = -1;
1003 int ret = -1;
1004 int ret2 = -1;
1005 int fd_nb;
1006 int got_fd = 0;
1007 int i = 0;
1008 size_t maxoff = 0, curoff = 0;
1009
1010 memset(&msghdr, 0, sizeof(msghdr));
1011 cmsgbuf = malloc(CMSG_SPACE(sizeof(int)) * MAX_SEND_FD);
1012 if (!cmsgbuf) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001013 ha_warning("Failed to allocate memory to send sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001014 goto out;
1015 }
1016 sock = socket(PF_UNIX, SOCK_STREAM, 0);
1017 if (sock < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001018 ha_warning("Failed to connect to the old process socket '%s'\n",
1019 unixsocket);
Olivier Houchardf73629d2017-04-05 22:33:04 +02001020 goto out;
1021 }
Willy Tarreaud668dcf2019-12-11 16:29:10 +01001022 strncpy(addr.sun_path, unixsocket, sizeof(addr.sun_path) - 1);
Olivier Houchardf73629d2017-04-05 22:33:04 +02001023 addr.sun_path[sizeof(addr.sun_path) - 1] = 0;
1024 addr.sun_family = PF_UNIX;
1025 ret = connect(sock, (struct sockaddr *)&addr, sizeof(addr));
1026 if (ret < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001027 ha_warning("Failed to connect to the old process socket '%s'\n",
1028 unixsocket);
Olivier Houchardf73629d2017-04-05 22:33:04 +02001029 goto out;
1030 }
Olivier Houchard54740872017-04-06 14:45:14 +02001031 setsockopt(sock, SOL_SOCKET, SO_RCVTIMEO, (void *)&tv, sizeof(tv));
Olivier Houchardf73629d2017-04-05 22:33:04 +02001032 iov.iov_base = &fd_nb;
1033 iov.iov_len = sizeof(fd_nb);
1034 msghdr.msg_iov = &iov;
1035 msghdr.msg_iovlen = 1;
1036 send(sock, "_getsocks\n", strlen("_getsocks\n"), 0);
1037 /* First, get the number of file descriptors to be received */
1038 if (recvmsg(sock, &msghdr, MSG_WAITALL) != sizeof(fd_nb)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001039 ha_warning("Failed to get the number of sockets to be transferred !\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001040 goto out;
1041 }
1042 if (fd_nb == 0) {
1043 ret = 0;
1044 goto out;
1045 }
Olivier Houchardf143b802017-11-04 15:13:01 +01001046 tmpbuf = malloc(fd_nb * (1 + MAXPATHLEN + 1 + IFNAMSIZ + sizeof(int)));
Olivier Houchardf73629d2017-04-05 22:33:04 +02001047 if (tmpbuf == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001048 ha_warning("Failed to allocate memory while receiving sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001049 goto out;
1050 }
1051 tmpfd = malloc(fd_nb * sizeof(int));
1052 if (tmpfd == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001053 ha_warning("Failed to allocate memory while receiving sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001054 goto out;
1055 }
1056 msghdr.msg_control = cmsgbuf;
1057 msghdr.msg_controllen = CMSG_SPACE(sizeof(int)) * MAX_SEND_FD;
Olivier Houchardf143b802017-11-04 15:13:01 +01001058 iov.iov_len = MAX_SEND_FD * (1 + MAXPATHLEN + 1 + IFNAMSIZ + sizeof(int));
Olivier Houchardf73629d2017-04-05 22:33:04 +02001059 do {
1060 int ret3;
1061
1062 iov.iov_base = tmpbuf + curoff;
1063 ret = recvmsg(sock, &msghdr, 0);
1064 if (ret == -1 && errno == EINTR)
1065 continue;
1066 if (ret <= 0)
1067 break;
1068 /* Send an ack to let the sender know we got the sockets
1069 * and it can send some more
1070 */
1071 do {
1072 ret3 = send(sock, &got_fd, sizeof(got_fd), 0);
1073 } while (ret3 == -1 && errno == EINTR);
1074 for (cmsg = CMSG_FIRSTHDR(&msghdr); cmsg != NULL;
1075 cmsg = CMSG_NXTHDR(&msghdr, cmsg)) {
1076 if (cmsg->cmsg_level == SOL_SOCKET &&
1077 cmsg->cmsg_type == SCM_RIGHTS) {
1078 size_t totlen = cmsg->cmsg_len -
1079 CMSG_LEN(0);
1080 if (totlen / sizeof(int) + got_fd > fd_nb) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001081 ha_warning("Got to many sockets !\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001082 goto out;
1083 }
1084 /*
1085 * Be paranoid and use memcpy() to avoid any
1086 * potential alignement issue.
1087 */
1088 memcpy(&tmpfd[got_fd], CMSG_DATA(cmsg), totlen);
1089 got_fd += totlen / sizeof(int);
1090 }
1091 }
1092 curoff += ret;
1093 } while (got_fd < fd_nb);
1094
1095 if (got_fd != fd_nb) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001096 ha_warning("We didn't get the expected number of sockets (expecting %d got %d)\n",
1097 fd_nb, got_fd);
Olivier Houchardf73629d2017-04-05 22:33:04 +02001098 goto out;
1099 }
1100 maxoff = curoff;
1101 curoff = 0;
1102 for (i = 0; i < got_fd; i++) {
1103 int fd = tmpfd[i];
1104 socklen_t socklen;
1105 int len;
1106
1107 xfer_sock = calloc(1, sizeof(*xfer_sock));
1108 if (!xfer_sock) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001109 ha_warning("Failed to allocate memory in get_old_sockets() !\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001110 break;
1111 }
1112 xfer_sock->fd = -1;
1113
1114 socklen = sizeof(xfer_sock->addr);
1115 if (getsockname(fd, (struct sockaddr *)&xfer_sock->addr, &socklen) != 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001116 ha_warning("Failed to get socket address\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001117 free(xfer_sock);
Olivier Houchardbe7b1ce2017-07-17 17:25:33 +02001118 xfer_sock = NULL;
Olivier Houchardf73629d2017-04-05 22:33:04 +02001119 continue;
1120 }
1121 if (curoff >= maxoff) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001122 ha_warning("Inconsistency while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001123 goto out;
1124 }
1125 len = tmpbuf[curoff++];
1126 if (len > 0) {
1127 /* We have a namespace */
1128 if (curoff + len > maxoff) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001129 ha_warning("Inconsistency while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001130 goto out;
1131 }
1132 xfer_sock->namespace = malloc(len + 1);
1133 if (!xfer_sock->namespace) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001134 ha_warning("Failed to allocate memory while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001135 goto out;
1136 }
1137 memcpy(xfer_sock->namespace, &tmpbuf[curoff], len);
1138 xfer_sock->namespace[len] = 0;
1139 curoff += len;
1140 }
1141 if (curoff >= maxoff) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001142 ha_warning("Inconsistency while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001143 goto out;
1144 }
1145 len = tmpbuf[curoff++];
1146 if (len > 0) {
1147 /* We have an interface */
1148 if (curoff + len > maxoff) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001149 ha_warning("Inconsistency while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001150 goto out;
1151 }
1152 xfer_sock->iface = malloc(len + 1);
1153 if (!xfer_sock->iface) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001154 ha_warning("Failed to allocate memory while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001155 goto out;
1156 }
1157 memcpy(xfer_sock->iface, &tmpbuf[curoff], len);
Olivier Houchard33e083c2018-03-15 17:48:49 +01001158 xfer_sock->iface[len] = 0;
Olivier Houchardf73629d2017-04-05 22:33:04 +02001159 curoff += len;
1160 }
1161 if (curoff + sizeof(int) > maxoff) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001162 ha_warning("Inconsistency while transferring sockets\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001163 goto out;
1164 }
1165 memcpy(&xfer_sock->options, &tmpbuf[curoff],
1166 sizeof(xfer_sock->options));
1167 curoff += sizeof(xfer_sock->options);
1168
1169 xfer_sock->fd = fd;
1170 if (xfer_sock_list)
1171 xfer_sock_list->prev = xfer_sock;
1172 xfer_sock->next = xfer_sock_list;
1173 xfer_sock->prev = NULL;
1174 xfer_sock_list = xfer_sock;
1175 xfer_sock = NULL;
1176 }
1177
1178 ret2 = 0;
1179out:
1180 /* If we failed midway make sure to close the remaining
1181 * file descriptors
1182 */
1183 if (tmpfd != NULL && i < got_fd) {
1184 for (; i < got_fd; i++) {
1185 close(tmpfd[i]);
1186 }
1187 }
1188 free(tmpbuf);
1189 free(tmpfd);
1190 free(cmsgbuf);
1191 if (sock != -1)
1192 close(sock);
1193 if (xfer_sock) {
1194 free(xfer_sock->namespace);
1195 free(xfer_sock->iface);
1196 if (xfer_sock->fd != -1)
1197 close(xfer_sock->fd);
1198 free(xfer_sock);
1199 }
1200 return (ret2);
1201}
1202
Willy Tarreaubaaee002006-06-26 02:48:02 +02001203/*
William Lallemand73b85e72017-06-01 17:38:51 +02001204 * copy and cleanup the current argv
1205 * Remove the -sf /-st parameters
1206 * Return an allocated copy of argv
1207 */
1208
1209static char **copy_argv(int argc, char **argv)
1210{
1211 char **newargv;
William Lallemand2bf6d622017-06-20 11:20:23 +02001212 int i = 0, j = 0;
William Lallemand73b85e72017-06-01 17:38:51 +02001213
1214 newargv = calloc(argc + 2, sizeof(char *));
1215 if (newargv == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001216 ha_warning("Cannot allocate memory\n");
William Lallemand73b85e72017-06-01 17:38:51 +02001217 return NULL;
1218 }
1219
William Lallemand2bf6d622017-06-20 11:20:23 +02001220 while (i < argc) {
1221 /* -sf or -st or -x */
William Lallemand29f690c2018-01-09 23:12:27 +01001222 if (i > 0 && argv[i][0] == '-' &&
1223 ((argv[i][1] == 's' && (argv[i][2] == 'f' || argv[i][2] == 't')) || argv[i][1] == 'x' )) {
William Lallemand2bf6d622017-06-20 11:20:23 +02001224 /* list of pids to finish ('f') or terminate ('t') or unix socket (-x) */
William Lallemand73b85e72017-06-01 17:38:51 +02001225 i++;
1226 while (i < argc && argv[i][0] != '-') {
1227 i++;
1228 }
William Lallemand2bf6d622017-06-20 11:20:23 +02001229 continue;
William Lallemand73b85e72017-06-01 17:38:51 +02001230 }
William Lallemand2bf6d622017-06-20 11:20:23 +02001231
1232 newargv[j++] = argv[i++];
William Lallemand73b85e72017-06-01 17:38:51 +02001233 }
William Lallemand2bf6d622017-06-20 11:20:23 +02001234
William Lallemand73b85e72017-06-01 17:38:51 +02001235 return newargv;
1236}
1237
Willy Tarreau4ce41952020-03-06 18:57:15 +01001238
1239/* Performs basic random seed initialization. The main issue with this is that
1240 * srandom_r() only takes 32 bits and purposely provides a reproducible sequence,
1241 * which means that there will only be 4 billion possible random sequences once
1242 * srandom() is called, regardless of the internal state. Not calling it is
1243 * even worse as we'll always produce the same randoms sequences. What we do
1244 * here is to create an initial sequence from various entropy sources, hash it
1245 * using SHA1 and keep the resulting 160 bits available globally.
1246 *
1247 * We initialize the current process with the first 32 bits before starting the
1248 * polling loop, where all this will be changed to have process specific and
1249 * thread specific sequences.
Willy Tarreau861c4ef2020-03-08 00:42:37 +01001250 *
1251 * Before starting threads, it's still possible to call random() as srandom()
1252 * is initialized from this, but after threads and/or processes are started,
1253 * only ha_random() is expected to be used to guarantee distinct sequences.
Willy Tarreau4ce41952020-03-06 18:57:15 +01001254 */
1255static void ha_random_boot(char *const *argv)
1256{
1257 unsigned char message[256];
1258 unsigned char *m = message;
1259 struct timeval tv;
1260 blk_SHA_CTX ctx;
1261 unsigned long l;
1262 int fd;
1263 int i;
1264
1265 /* start with current time as pseudo-random seed */
1266 gettimeofday(&tv, NULL);
1267 write_u32(m, tv.tv_sec); m += 4;
1268 write_u32(m, tv.tv_usec); m += 4;
1269
1270 /* PID and PPID add some OS-based randomness */
1271 write_u16(m, getpid()); m += 2;
1272 write_u16(m, getppid()); m += 2;
1273
1274 /* take up to 160 bits bytes from /dev/urandom if available (non-blocking) */
1275 fd = open("/dev/urandom", O_RDONLY);
1276 if (fd >= 0) {
1277 i = read(fd, m, 20);
1278 if (i > 0)
1279 m += i;
1280 close(fd);
1281 }
1282
1283 /* take up to 160 bits bytes from openssl (non-blocking) */
1284#ifdef USE_OPENSSL
1285 if (RAND_bytes(m, 20) == 1)
1286 m += 20;
1287#endif
1288
1289 /* take 160 bits from existing random in case it was already initialized */
1290 for (i = 0; i < 5; i++) {
1291 write_u32(m, random());
1292 m += 4;
1293 }
1294
1295 /* stack address (benefit form operating system's ASLR) */
1296 l = (unsigned long)&m;
1297 memcpy(m, &l, sizeof(l)); m += sizeof(l);
1298
1299 /* argv address (benefit form operating system's ASLR) */
1300 l = (unsigned long)&argv;
1301 memcpy(m, &l, sizeof(l)); m += sizeof(l);
1302
1303 /* use tv_usec again after all the operations above */
1304 gettimeofday(&tv, NULL);
1305 write_u32(m, tv.tv_usec); m += 4;
1306
1307 /*
1308 * At this point, ~84-92 bytes have been used
1309 */
1310
1311 /* finish with the hostname */
1312 strncpy((char *)m, hostname, message + sizeof(message) - m);
1313 m += strlen(hostname);
1314
1315 /* total message length */
1316 l = m - message;
1317
1318 memset(&ctx, 0, sizeof(ctx));
1319 blk_SHA1_Init(&ctx);
1320 blk_SHA1_Update(&ctx, message, l);
1321 blk_SHA1_Final(boot_seed, &ctx);
1322
1323 srandom(read_u32(boot_seed));
Willy Tarreau861c4ef2020-03-08 00:42:37 +01001324 ha_random_seed(boot_seed, sizeof(boot_seed));
Willy Tarreau4ce41952020-03-06 18:57:15 +01001325}
1326
Willy Tarreau5a023f02019-03-01 14:19:31 +01001327/* considers splicing proxies' maxconn, computes the ideal global.maxpipes
1328 * setting, and returns it. It may return -1 meaning "unlimited" if some
1329 * unlimited proxies have been found and the global.maxconn value is not yet
1330 * set. It may also return a value greater than maxconn if it's not yet set.
1331 * Note that a value of zero means there is no need for pipes. -1 is never
1332 * returned if global.maxconn is valid.
1333 */
1334static int compute_ideal_maxpipes()
1335{
1336 struct proxy *cur;
1337 int nbfe = 0, nbbe = 0;
1338 int unlimited = 0;
1339 int pipes;
1340 int max;
1341
1342 for (cur = proxies_list; cur; cur = cur->next) {
1343 if (cur->options2 & (PR_O2_SPLIC_ANY)) {
1344 if (cur->cap & PR_CAP_FE) {
1345 max = cur->maxconn;
1346 nbfe += max;
1347 if (!max) {
1348 unlimited = 1;
1349 break;
1350 }
1351 }
1352 if (cur->cap & PR_CAP_BE) {
1353 max = cur->fullconn ? cur->fullconn : global.maxconn;
1354 nbbe += max;
1355 if (!max) {
1356 unlimited = 1;
1357 break;
1358 }
1359 }
1360 }
1361 }
1362
1363 pipes = MAX(nbfe, nbbe);
1364 if (global.maxconn) {
1365 if (pipes > global.maxconn || unlimited)
1366 pipes = global.maxconn;
1367 } else if (unlimited) {
1368 pipes = -1;
1369 }
1370
1371 return pipes >= 4 ? pipes / 4 : pipes;
1372}
1373
Willy Tarreauac350932019-03-01 15:43:14 +01001374/* considers global.maxsocks, global.maxpipes, async engines, SSL frontends and
1375 * rlimits and computes an ideal maxconn. It's meant to be called only when
1376 * maxsock contains the sum of listening FDs, before it is updated based on
Willy Tarreaudf23c0c2019-03-13 10:10:49 +01001377 * maxconn and pipes. If there are not enough FDs left, DEFAULT_MAXCONN (by
1378 * default 100) is returned as it is expected that it will even run on tight
1379 * environments, and will maintain compatibility with previous packages that
1380 * used to rely on this value as the default one. The system will emit a
1381 * warning indicating how many FDs are missing anyway if needed.
Willy Tarreauac350932019-03-01 15:43:14 +01001382 */
1383static int compute_ideal_maxconn()
1384{
1385 int ssl_sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
1386 int engine_fds = global.ssl_used_async_engines * ssl_sides;
1387 int pipes = compute_ideal_maxpipes();
Willy Tarreau3477ebe2020-03-06 10:25:31 +01001388 int remain = MAX(rlim_fd_cur_at_boot, rlim_fd_max_at_boot);
Willy Tarreauac350932019-03-01 15:43:14 +01001389 int maxconn;
1390
1391 /* we have to take into account these elements :
1392 * - number of engine_fds, which inflates the number of FD needed per
1393 * connection by this number.
1394 * - number of pipes per connection on average : for the unlimited
1395 * case, this is 0.5 pipe FDs per connection, otherwise it's a
1396 * fixed value of 2*pipes.
1397 * - two FDs per connection
1398 */
1399
1400 /* subtract listeners and checks */
1401 remain -= global.maxsock;
1402
Willy Tarreau3f200852019-03-14 19:13:17 +01001403 /* one epoll_fd/kqueue_fd per thread */
1404 remain -= global.nbthread;
1405
1406 /* one wake-up pipe (2 fd) per thread */
1407 remain -= 2 * global.nbthread;
1408
Willy Tarreauac350932019-03-01 15:43:14 +01001409 /* Fixed pipes values : we only subtract them if they're not larger
1410 * than the remaining FDs because pipes are optional.
1411 */
1412 if (pipes >= 0 && pipes * 2 < remain)
1413 remain -= pipes * 2;
1414
1415 if (pipes < 0) {
1416 /* maxsock = maxconn * 2 + maxconn/4 * 2 + maxconn * engine_fds.
1417 * = maxconn * (2 + 0.5 + engine_fds)
1418 * = maxconn * (4 + 1 + 2*engine_fds) / 2
1419 */
1420 maxconn = 2 * remain / (5 + 2 * engine_fds);
1421 } else {
1422 /* maxsock = maxconn * 2 + maxconn * engine_fds.
1423 * = maxconn * (2 + engine_fds)
1424 */
1425 maxconn = remain / (2 + engine_fds);
1426 }
1427
Willy Tarreaudf23c0c2019-03-13 10:10:49 +01001428 return MAX(maxconn, DEFAULT_MAXCONN);
Willy Tarreauac350932019-03-01 15:43:14 +01001429}
1430
William Lallemand73b85e72017-06-01 17:38:51 +02001431/*
Willy Tarreaubaaee002006-06-26 02:48:02 +02001432 * This function initializes all the necessary variables. It only returns
1433 * if everything is OK. If something fails, it exits.
1434 */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +01001435static void init(int argc, char **argv)
Willy Tarreaubaaee002006-06-26 02:48:02 +02001436{
Willy Tarreaubaaee002006-06-26 02:48:02 +02001437 int arg_mode = 0; /* MODE_DEBUG, ... */
Willy Tarreaubaaee002006-06-26 02:48:02 +02001438 char *tmp;
1439 char *cfg_pidfile = NULL;
Willy Tarreau058e9072009-07-20 09:30:05 +02001440 int err_code = 0;
Maxime de Roucy0f503922016-05-13 23:52:55 +02001441 char *err_msg = NULL;
Willy Tarreau477ecd82010-01-03 21:12:30 +01001442 struct wordlist *wl;
Kevinm48936af2010-12-22 16:08:21 +00001443 char *progname;
Willy Tarreau576132e2011-09-10 19:26:56 +02001444 char *change_dir = NULL;
Christopher Fauletd7c91962015-04-30 11:48:27 +02001445 struct proxy *px;
Willy Tarreaue6945732016-12-21 19:57:00 +01001446 struct post_check_fct *pcf;
Willy Tarreauac350932019-03-01 15:43:14 +01001447 int ideal_maxconn;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001448
Christopher Faulete3a5e352017-10-24 13:53:54 +02001449 global.mode = MODE_STARTING;
William Lallemand73b85e72017-06-01 17:38:51 +02001450 next_argv = copy_argv(argc, argv);
1451
Christopher Fauletcd7879a2017-10-27 13:53:47 +02001452 if (!init_trash_buffers(1)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001453 ha_alert("failed to initialize trash buffers.\n");
Christopher Faulet748919a2017-07-26 14:59:46 +02001454 exit(1);
1455 }
David du Colombier7af46052012-05-16 14:16:48 +02001456
Emeric Brun2b920a12010-09-23 18:30:22 +02001457 /* NB: POSIX does not make it mandatory for gethostname() to NULL-terminate
1458 * the string in case of truncation, and at least FreeBSD appears not to do
1459 * it.
1460 */
1461 memset(hostname, 0, sizeof(hostname));
1462 gethostname(hostname, sizeof(hostname) - 1);
1463 memset(localpeer, 0, sizeof(localpeer));
1464 memcpy(localpeer, hostname, (sizeof(hostname) > sizeof(localpeer) ? sizeof(localpeer) : sizeof(hostname)) - 1);
William Lallemanddaf4cd22018-04-17 16:46:13 +02001465 setenv("HAPROXY_LOCALPEER", localpeer, 1);
Emeric Brun2b920a12010-09-23 18:30:22 +02001466
William Lallemand8e16e7a2020-01-14 17:58:18 +01001467 /* we were in mworker mode, we should restart in mworker mode */
1468 if (getenv("HAPROXY_MWORKER_REEXEC") != NULL)
1469 global.mode |= MODE_MWORKER;
1470
Willy Tarreaubaaee002006-06-26 02:48:02 +02001471 /*
1472 * Initialize the previously static variables.
1473 */
Christopher Fauletcd7879a2017-10-27 13:53:47 +02001474
Willy Tarreau173d9952018-01-26 21:48:23 +01001475 totalconn = actconn = listeners = stopping = 0;
Cyril Bonté203ec5a2017-03-23 22:44:13 +01001476 killed = 0;
Christopher Fauletcd7879a2017-10-27 13:53:47 +02001477
Willy Tarreaubaaee002006-06-26 02:48:02 +02001478
1479#ifdef HAPROXY_MEMMAX
Willy Tarreau70060452015-12-14 12:46:07 +01001480 global.rlimit_memmax_all = HAPROXY_MEMMAX;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001481#endif
1482
Benoit GARNIERb413c2a2016-03-27 11:08:03 +02001483 tzset();
Willy Tarreaub0b37bc2008-06-23 14:00:57 +02001484 tv_update_date(-1,-1);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001485 start_date = now;
1486
Willy Tarreau4ce41952020-03-06 18:57:15 +01001487 ha_random_boot(argv);
Willy Tarreau84310e22014-02-14 11:59:04 +01001488
Willy Tarreau8ed669b2013-01-11 15:49:37 +01001489 if (init_acl() != 0)
1490 exit(1);
Willy Tarreaub6b3df32018-11-26 16:31:20 +01001491
Willy Tarreau8280d642009-09-23 23:37:52 +02001492 /* warning, we init buffers later */
Willy Tarreau04f1e2d2018-09-10 18:04:24 +02001493 if (!init_http(&err_msg)) {
1494 ha_alert("%s. Aborting.\n", err_msg);
1495 free(err_msg);
1496 abort();
1497 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02001498
Thierry FOURNIER6f1fd482015-01-23 14:06:13 +01001499 /* Initialise lua. */
1500 hlua_init();
Thierry FOURNIER6f1fd482015-01-23 14:06:13 +01001501
Christopher Fauletff2613e2016-11-09 11:36:17 +01001502 /* Initialize process vars */
1503 vars_init(&global.vars, SCOPE_PROC);
1504
Willy Tarreau43b78992009-01-25 15:42:27 +01001505 global.tune.options |= GTUNE_USE_SELECT; /* select() is always available */
Willy Tarreaue5733232019-05-22 19:24:06 +02001506#if defined(USE_POLL)
Willy Tarreau43b78992009-01-25 15:42:27 +01001507 global.tune.options |= GTUNE_USE_POLL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001508#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001509#if defined(USE_EPOLL)
Willy Tarreau43b78992009-01-25 15:42:27 +01001510 global.tune.options |= GTUNE_USE_EPOLL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001511#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001512#if defined(USE_KQUEUE)
Willy Tarreau43b78992009-01-25 15:42:27 +01001513 global.tune.options |= GTUNE_USE_KQUEUE;
Willy Tarreau1e63130a2007-04-09 12:03:06 +02001514#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001515#if defined(USE_EVPORTS)
Emmanuel Hocdet0ba4f482019-04-08 16:53:32 +00001516 global.tune.options |= GTUNE_USE_EVPORTS;
1517#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001518#if defined(USE_LINUX_SPLICE)
Willy Tarreau3ab68cf2009-01-25 16:03:28 +01001519 global.tune.options |= GTUNE_USE_SPLICE;
1520#endif
Nenad Merdanovic88afe032014-04-14 15:56:58 +02001521#if defined(USE_GETADDRINFO)
1522 global.tune.options |= GTUNE_USE_GAI;
1523#endif
Lukas Tribusa0bcbdc2016-09-12 21:42:20 +00001524#if defined(SO_REUSEPORT)
1525 global.tune.options |= GTUNE_USE_REUSEPORT;
1526#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +02001527
1528 pid = getpid();
1529 progname = *argv;
1530 while ((tmp = strchr(progname, '/')) != NULL)
1531 progname = tmp + 1;
1532
Kevinm48936af2010-12-22 16:08:21 +00001533 /* the process name is used for the logs only */
Dragan Dosen43885c72015-10-01 13:18:13 +02001534 chunk_initstr(&global.log_tag, strdup(progname));
Kevinm48936af2010-12-22 16:08:21 +00001535
Willy Tarreaubaaee002006-06-26 02:48:02 +02001536 argc--; argv++;
1537 while (argc > 0) {
1538 char *flag;
1539
1540 if (**argv == '-') {
1541 flag = *argv+1;
1542
1543 /* 1 arg */
1544 if (*flag == 'v') {
1545 display_version();
Willy Tarreau7b066db2007-12-02 11:28:59 +01001546 if (flag[1] == 'v') /* -vv */
1547 display_build_opts();
Willy Tarreaubaaee002006-06-26 02:48:02 +02001548 exit(0);
1549 }
Willy Tarreaue5733232019-05-22 19:24:06 +02001550#if defined(USE_EPOLL)
Willy Tarreaubaaee002006-06-26 02:48:02 +02001551 else if (*flag == 'd' && flag[1] == 'e')
Willy Tarreau43b78992009-01-25 15:42:27 +01001552 global.tune.options &= ~GTUNE_USE_EPOLL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001553#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001554#if defined(USE_POLL)
Willy Tarreaubaaee002006-06-26 02:48:02 +02001555 else if (*flag == 'd' && flag[1] == 'p')
Willy Tarreau43b78992009-01-25 15:42:27 +01001556 global.tune.options &= ~GTUNE_USE_POLL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001557#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001558#if defined(USE_KQUEUE)
Willy Tarreau1e63130a2007-04-09 12:03:06 +02001559 else if (*flag == 'd' && flag[1] == 'k')
Willy Tarreau43b78992009-01-25 15:42:27 +01001560 global.tune.options &= ~GTUNE_USE_KQUEUE;
Willy Tarreau1e63130a2007-04-09 12:03:06 +02001561#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001562#if defined(USE_EVPORTS)
Emmanuel Hocdet0ba4f482019-04-08 16:53:32 +00001563 else if (*flag == 'd' && flag[1] == 'v')
1564 global.tune.options &= ~GTUNE_USE_EVPORTS;
1565#endif
Willy Tarreaue5733232019-05-22 19:24:06 +02001566#if defined(USE_LINUX_SPLICE)
Willy Tarreau3ab68cf2009-01-25 16:03:28 +01001567 else if (*flag == 'd' && flag[1] == 'S')
1568 global.tune.options &= ~GTUNE_USE_SPLICE;
1569#endif
Nenad Merdanovic88afe032014-04-14 15:56:58 +02001570#if defined(USE_GETADDRINFO)
1571 else if (*flag == 'd' && flag[1] == 'G')
1572 global.tune.options &= ~GTUNE_USE_GAI;
1573#endif
Lukas Tribusa0bcbdc2016-09-12 21:42:20 +00001574#if defined(SO_REUSEPORT)
1575 else if (*flag == 'd' && flag[1] == 'R')
1576 global.tune.options &= ~GTUNE_USE_REUSEPORT;
1577#endif
Emeric Brun850efd52014-01-29 12:24:34 +01001578 else if (*flag == 'd' && flag[1] == 'V')
1579 global.ssl_server_verify = SSL_SERVER_VERIFY_NONE;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001580 else if (*flag == 'V')
1581 arg_mode |= MODE_VERBOSE;
1582 else if (*flag == 'd' && flag[1] == 'b')
1583 arg_mode |= MODE_FOREGROUND;
Willy Tarreau6e064432012-05-08 15:40:42 +02001584 else if (*flag == 'd' && flag[1] == 'M')
1585 mem_poison_byte = flag[2] ? strtol(flag + 2, NULL, 0) : 'P';
Willy Tarreau3eed10e2016-11-07 21:03:16 +01001586 else if (*flag == 'd' && flag[1] == 'r')
1587 global.tune.options |= GTUNE_RESOLVE_DONTFAIL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001588 else if (*flag == 'd')
1589 arg_mode |= MODE_DEBUG;
1590 else if (*flag == 'c')
1591 arg_mode |= MODE_CHECK;
William Lallemand095ba4c2017-06-01 17:38:50 +02001592 else if (*flag == 'D')
Willy Tarreau6bde87b2009-05-18 16:29:51 +02001593 arg_mode |= MODE_DAEMON;
Tim Duesterhusd6942c82017-11-20 15:58:35 +01001594 else if (*flag == 'W' && flag[1] == 's') {
Lukas Tribusf46bf952017-11-21 12:39:34 +01001595 arg_mode |= MODE_MWORKER | MODE_FOREGROUND;
Tim Duesterhusd6942c82017-11-20 15:58:35 +01001596#if defined(USE_SYSTEMD)
1597 global.tune.options |= GTUNE_USE_SYSTEMD;
1598#else
Christopher Faulet767a84b2017-11-24 16:50:31 +01001599 ha_alert("master-worker mode with systemd support (-Ws) requested, but not compiled. Use master-worker mode (-W) if you are not using Type=notify in your unit file or recompile with USE_SYSTEMD=1.\n\n");
Tim Duesterhusd6942c82017-11-20 15:58:35 +01001600 usage(progname);
1601#endif
1602 }
William Lallemand095ba4c2017-06-01 17:38:50 +02001603 else if (*flag == 'W')
1604 arg_mode |= MODE_MWORKER;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001605 else if (*flag == 'q')
1606 arg_mode |= MODE_QUIET;
Olivier Houchardf73629d2017-04-05 22:33:04 +02001607 else if (*flag == 'x') {
William Lallemand45eff442017-06-19 15:57:55 +02001608 if (argc <= 1 || argv[1][0] == '-') {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001609 ha_alert("Unix socket path expected with the -x flag\n\n");
William Lallemand45eff442017-06-19 15:57:55 +02001610 usage(progname);
Olivier Houchardf73629d2017-04-05 22:33:04 +02001611 }
William Lallemand4fc09692017-06-19 16:37:19 +02001612 if (old_unixsocket)
Christopher Faulet767a84b2017-11-24 16:50:31 +01001613 ha_warning("-x option already set, overwriting the value\n");
Olivier Houchardf73629d2017-04-05 22:33:04 +02001614 old_unixsocket = argv[1];
William Lallemand4fc09692017-06-19 16:37:19 +02001615
Olivier Houchardf73629d2017-04-05 22:33:04 +02001616 argv++;
1617 argc--;
1618 }
William Lallemande7361152018-10-26 14:47:36 +02001619 else if (*flag == 'S') {
1620 struct wordlist *c;
1621
1622 if (argc <= 1 || argv[1][0] == '-') {
1623 ha_alert("Socket and optional bind parameters expected with the -S flag\n");
1624 usage(progname);
1625 }
1626 if ((c = malloc(sizeof(*c))) == NULL || (c->s = strdup(argv[1])) == NULL) {
1627 ha_alert("Cannot allocate memory\n");
1628 exit(EXIT_FAILURE);
1629 }
1630 LIST_ADD(&mworker_cli_conf, &c->list);
1631
1632 argv++;
1633 argc--;
1634 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02001635 else if (*flag == 's' && (flag[1] == 'f' || flag[1] == 't')) {
1636 /* list of pids to finish ('f') or terminate ('t') */
1637
1638 if (flag[1] == 'f')
1639 oldpids_sig = SIGUSR1; /* finish then exit */
1640 else
1641 oldpids_sig = SIGTERM; /* terminate immediately */
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001642 while (argc > 1 && argv[1][0] != '-') {
Chris Lane236062f2018-02-05 23:15:44 +00001643 char * endptr = NULL;
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001644 oldpids = realloc(oldpids, (nb_oldpids + 1) * sizeof(int));
1645 if (!oldpids) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001646 ha_alert("Cannot allocate old pid : out of memory.\n");
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001647 exit(1);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001648 }
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001649 argc--; argv++;
Chris Lane236062f2018-02-05 23:15:44 +00001650 errno = 0;
1651 oldpids[nb_oldpids] = strtol(*argv, &endptr, 10);
1652 if (errno) {
1653 ha_alert("-%2s option: failed to parse {%s}: %s\n",
1654 flag,
1655 *argv, strerror(errno));
1656 exit(1);
1657 } else if (endptr && strlen(endptr)) {
1658 while (isspace(*endptr)) endptr++;
Aurélien Nephtali39b89882018-02-17 20:53:11 +01001659 if (*endptr != 0) {
Chris Lane236062f2018-02-05 23:15:44 +00001660 ha_alert("-%2s option: some bytes unconsumed in PID list {%s}\n",
1661 flag, endptr);
1662 exit(1);
Aurélien Nephtali39b89882018-02-17 20:53:11 +01001663 }
Chris Lane236062f2018-02-05 23:15:44 +00001664 }
Willy Tarreauc6ca1aa2015-10-08 11:32:32 +02001665 if (oldpids[nb_oldpids] <= 0)
1666 usage(progname);
1667 nb_oldpids++;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001668 }
1669 }
Willy Tarreaua088d312015-10-08 11:58:48 +02001670 else if (flag[0] == '-' && flag[1] == 0) { /* "--" */
1671 /* now that's a cfgfile list */
1672 argv++; argc--;
1673 while (argc > 0) {
Maxime de Roucy0f503922016-05-13 23:52:55 +02001674 if (!list_append_word(&cfg_cfgfiles, *argv, &err_msg)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001675 ha_alert("Cannot load configuration file/directory %s : %s\n",
1676 *argv,
1677 err_msg);
Willy Tarreaua088d312015-10-08 11:58:48 +02001678 exit(1);
1679 }
Willy Tarreaua088d312015-10-08 11:58:48 +02001680 argv++; argc--;
1681 }
1682 break;
1683 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02001684 else { /* >=2 args */
1685 argv++; argc--;
1686 if (argc == 0)
Willy Tarreau3bafcdc2011-09-10 19:20:23 +02001687 usage(progname);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001688
1689 switch (*flag) {
Willy Tarreau576132e2011-09-10 19:26:56 +02001690 case 'C' : change_dir = *argv; break;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001691 case 'n' : cfg_maxconn = atol(*argv); break;
Willy Tarreau70060452015-12-14 12:46:07 +01001692 case 'm' : global.rlimit_memmax_all = atol(*argv); break;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001693 case 'N' : cfg_maxpconn = atol(*argv); break;
William Lallemanddaf4cd22018-04-17 16:46:13 +02001694 case 'L' :
1695 strncpy(localpeer, *argv, sizeof(localpeer) - 1);
1696 setenv("HAPROXY_LOCALPEER", localpeer, 1);
1697 break;
Willy Tarreau5d01a632009-06-22 16:02:30 +02001698 case 'f' :
Maxime de Roucy0f503922016-05-13 23:52:55 +02001699 if (!list_append_word(&cfg_cfgfiles, *argv, &err_msg)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001700 ha_alert("Cannot load configuration file/directory %s : %s\n",
1701 *argv,
1702 err_msg);
Willy Tarreau5d01a632009-06-22 16:02:30 +02001703 exit(1);
1704 }
Willy Tarreau5d01a632009-06-22 16:02:30 +02001705 break;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001706 case 'p' : cfg_pidfile = *argv; break;
Willy Tarreau3bafcdc2011-09-10 19:20:23 +02001707 default: usage(progname);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001708 }
1709 }
1710 }
1711 else
Willy Tarreau3bafcdc2011-09-10 19:20:23 +02001712 usage(progname);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001713 argv++; argc--;
1714 }
1715
Christopher Faulete3a5e352017-10-24 13:53:54 +02001716 global.mode |= (arg_mode & (MODE_DAEMON | MODE_MWORKER | MODE_FOREGROUND | MODE_VERBOSE
1717 | MODE_QUIET | MODE_CHECK | MODE_DEBUG));
Willy Tarreaubaaee002006-06-26 02:48:02 +02001718
William Lallemand944e6192018-11-21 15:48:31 +01001719 if (getenv("HAPROXY_MWORKER_WAIT_ONLY")) {
William Lallemandcb11fd22017-06-01 17:38:52 +02001720 unsetenv("HAPROXY_MWORKER_WAIT_ONLY");
William Lallemand944e6192018-11-21 15:48:31 +01001721 global.mode |= MODE_MWORKER_WAIT;
1722 global.mode &= ~MODE_MWORKER;
William Lallemandcb11fd22017-06-01 17:38:52 +02001723 }
1724
1725 if ((global.mode & MODE_MWORKER) && (getenv("HAPROXY_MWORKER_REEXEC") != NULL)) {
1726 atexit_flag = 1;
1727 atexit(reexec_on_failure);
1728 }
1729
Willy Tarreau576132e2011-09-10 19:26:56 +02001730 if (change_dir && chdir(change_dir) < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001731 ha_alert("Could not change to directory %s : %s\n", change_dir, strerror(errno));
Willy Tarreau576132e2011-09-10 19:26:56 +02001732 exit(1);
1733 }
1734
Willy Tarreaubaaee002006-06-26 02:48:02 +02001735 global.maxsock = 10; /* reserve 10 fds ; will be incremented by socket eaters */
Willy Tarreau915e1eb2009-06-22 15:48:36 +02001736
1737 init_default_instance();
1738
William Lallemand944e6192018-11-21 15:48:31 +01001739 /* in wait mode, we don't try to read the configuration files */
1740 if (!(global.mode & MODE_MWORKER_WAIT)) {
William Lallemand7b302d82019-05-20 11:15:37 +02001741 struct buffer *trash = get_trash_chunk();
Willy Tarreauc4382422009-12-06 13:10:44 +01001742
William Lallemand944e6192018-11-21 15:48:31 +01001743 /* handle cfgfiles that are actually directories */
1744 cfgfiles_expand_directories();
1745
1746 if (LIST_ISEMPTY(&cfg_cfgfiles))
1747 usage(progname);
1748
1749
1750 list_for_each_entry(wl, &cfg_cfgfiles, list) {
1751 int ret;
1752
William Lallemand7b302d82019-05-20 11:15:37 +02001753 if (trash->data)
1754 chunk_appendf(trash, ";");
1755
1756 chunk_appendf(trash, "%s", wl->s);
1757
William Lallemand944e6192018-11-21 15:48:31 +01001758 ret = readcfgfile(wl->s);
1759 if (ret == -1) {
1760 ha_alert("Could not open configuration file %s : %s\n",
1761 wl->s, strerror(errno));
1762 exit(1);
1763 }
1764 if (ret & (ERR_ABORT|ERR_FATAL))
1765 ha_alert("Error(s) found in configuration file : %s\n", wl->s);
1766 err_code |= ret;
1767 if (err_code & ERR_ABORT)
1768 exit(1);
Willy Tarreauc4382422009-12-06 13:10:44 +01001769 }
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02001770
William Lallemand944e6192018-11-21 15:48:31 +01001771 /* do not try to resolve arguments nor to spot inconsistencies when
1772 * the configuration contains fatal errors caused by files not found
1773 * or failed memory allocations.
1774 */
1775 if (err_code & (ERR_ABORT|ERR_FATAL)) {
1776 ha_alert("Fatal errors found in configuration.\n");
1777 exit(1);
1778 }
William Lallemand7b302d82019-05-20 11:15:37 +02001779 if (trash->data)
1780 setenv("HAPROXY_CFGFILES", trash->area, 1);
1781
Willy Tarreaub83dc3d2017-04-19 11:24:07 +02001782 }
William Lallemandce83b4a2018-10-26 14:47:30 +02001783 if (global.mode & MODE_MWORKER) {
1784 int proc;
William Lallemand16dd1b32018-11-19 18:46:18 +01001785 struct mworker_proc *tmproc;
1786
William Lallemand482f9a92019-04-12 16:15:00 +02001787 setenv("HAPROXY_MWORKER", "1", 1);
1788
William Lallemand16dd1b32018-11-19 18:46:18 +01001789 if (getenv("HAPROXY_MWORKER_REEXEC") == NULL) {
1790
William Lallemandf3a86832019-04-01 11:29:58 +02001791 tmproc = calloc(1, sizeof(*tmproc));
William Lallemand16dd1b32018-11-19 18:46:18 +01001792 if (!tmproc) {
1793 ha_alert("Cannot allocate process structures.\n");
1794 exit(EXIT_FAILURE);
1795 }
William Lallemand8f7069a2019-04-12 16:09:23 +02001796 tmproc->options |= PROC_O_TYPE_MASTER; /* master */
William Lallemand16dd1b32018-11-19 18:46:18 +01001797 tmproc->reloads = 0;
1798 tmproc->relative_pid = 0;
1799 tmproc->pid = pid;
1800 tmproc->timestamp = start_date.tv_sec;
1801 tmproc->ipc_fd[0] = -1;
1802 tmproc->ipc_fd[1] = -1;
1803
1804 proc_self = tmproc;
1805
1806 LIST_ADDQ(&proc_list, &tmproc->list);
1807 }
William Lallemandce83b4a2018-10-26 14:47:30 +02001808
1809 for (proc = 0; proc < global.nbproc; proc++) {
William Lallemandce83b4a2018-10-26 14:47:30 +02001810
William Lallemandf3a86832019-04-01 11:29:58 +02001811 tmproc = calloc(1, sizeof(*tmproc));
William Lallemandce83b4a2018-10-26 14:47:30 +02001812 if (!tmproc) {
1813 ha_alert("Cannot allocate process structures.\n");
1814 exit(EXIT_FAILURE);
1815 }
1816
William Lallemand8f7069a2019-04-12 16:09:23 +02001817 tmproc->options |= PROC_O_TYPE_WORKER; /* worker */
William Lallemandce83b4a2018-10-26 14:47:30 +02001818 tmproc->pid = -1;
1819 tmproc->reloads = 0;
William Lallemande3683302018-11-19 18:46:17 +01001820 tmproc->timestamp = -1;
William Lallemandce83b4a2018-10-26 14:47:30 +02001821 tmproc->relative_pid = 1 + proc;
William Lallemand550db6d2018-11-06 17:37:12 +01001822 tmproc->ipc_fd[0] = -1;
1823 tmproc->ipc_fd[1] = -1;
William Lallemandce83b4a2018-10-26 14:47:30 +02001824
1825 if (mworker_cli_sockpair_new(tmproc, proc) < 0) {
1826 exit(EXIT_FAILURE);
1827 }
1828
1829 LIST_ADDQ(&proc_list, &tmproc->list);
1830 }
William Lallemand944e6192018-11-21 15:48:31 +01001831 }
1832 if (global.mode & (MODE_MWORKER|MODE_MWORKER_WAIT)) {
1833 struct wordlist *it, *c;
1834
William Lallemand1b663612018-10-26 14:47:33 +02001835 mworker_env_to_proc_list(); /* get the info of the children in the env */
William Lallemand8a022572018-10-26 14:47:35 +02001836
William Lallemande7361152018-10-26 14:47:36 +02001837
William Lallemand550db6d2018-11-06 17:37:12 +01001838 if (!LIST_ISEMPTY(&mworker_cli_conf)) {
William Lallemande7361152018-10-26 14:47:36 +02001839
William Lallemand550db6d2018-11-06 17:37:12 +01001840 if (mworker_cli_proxy_create() < 0) {
William Lallemande7361152018-10-26 14:47:36 +02001841 ha_alert("Can't create the master's CLI.\n");
1842 exit(EXIT_FAILURE);
1843 }
William Lallemande7361152018-10-26 14:47:36 +02001844
William Lallemand550db6d2018-11-06 17:37:12 +01001845 list_for_each_entry_safe(c, it, &mworker_cli_conf, list) {
1846
1847 if (mworker_cli_proxy_new_listener(c->s) < 0) {
1848 ha_alert("Can't create the master's CLI.\n");
1849 exit(EXIT_FAILURE);
1850 }
1851 LIST_DEL(&c->list);
1852 free(c->s);
1853 free(c);
1854 }
1855 }
William Lallemandce83b4a2018-10-26 14:47:30 +02001856 }
1857
Willy Tarreaubb925012009-07-23 13:36:36 +02001858 err_code |= check_config_validity();
1859 if (err_code & (ERR_ABORT|ERR_FATAL)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001860 ha_alert("Fatal errors found in configuration.\n");
Willy Tarreau915e1eb2009-06-22 15:48:36 +02001861 exit(1);
1862 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02001863
Carl Henrik Lunde4944c8c2020-02-27 16:45:50 +01001864 err_code |= pattern_finalize_config();
1865 if (err_code & (ERR_ABORT|ERR_FATAL)) {
1866 ha_alert("Failed to finalize pattern config.\n");
1867 exit(1);
1868 }
Willy Tarreau0f936722019-04-11 14:47:08 +02001869
Willy Tarreau70060452015-12-14 12:46:07 +01001870 /* recompute the amount of per-process memory depending on nbproc and
1871 * the shared SSL cache size (allowed to exist in all processes).
1872 */
1873 if (global.rlimit_memmax_all) {
1874#if defined (USE_OPENSSL) && !defined(USE_PRIVATE_CACHE)
1875 int64_t ssl_cache_bytes = global.tune.sslcachesize * 200LL;
1876
1877 global.rlimit_memmax =
1878 ((((int64_t)global.rlimit_memmax_all * 1048576LL) -
1879 ssl_cache_bytes) / global.nbproc +
1880 ssl_cache_bytes + 1048575LL) / 1048576LL;
1881#else
1882 global.rlimit_memmax = global.rlimit_memmax_all / global.nbproc;
1883#endif
1884 }
1885
Willy Tarreaue5733232019-05-22 19:24:06 +02001886#ifdef USE_NS
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +01001887 err_code |= netns_init();
1888 if (err_code & (ERR_ABORT|ERR_FATAL)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001889 ha_alert("Failed to initialize namespace support.\n");
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +01001890 exit(1);
1891 }
1892#endif
1893
Baptiste Assmann4215d7d2016-11-02 15:33:15 +01001894 /* Apply server states */
1895 apply_server_state();
1896
Olivier Houchardfbc74e82017-11-24 16:54:05 +01001897 for (px = proxies_list; px; px = px->next)
Baptiste Assmann4215d7d2016-11-02 15:33:15 +01001898 srv_compute_all_admin_states(px);
1899
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01001900 /* Apply servers' configured address */
1901 err_code |= srv_init_addr();
1902 if (err_code & (ERR_ABORT|ERR_FATAL)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001903 ha_alert("Failed to initialize server(s) addr.\n");
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01001904 exit(1);
1905 }
1906
Willy Tarreaubaaee002006-06-26 02:48:02 +02001907 if (global.mode & MODE_CHECK) {
Willy Tarreau8b15ba12012-02-02 17:48:18 +01001908 struct peers *pr;
1909 struct proxy *px;
1910
Frédéric Lécailleed2b4a62017-07-13 09:07:09 +02001911 for (pr = cfg_peers; pr; pr = pr->next)
Willy Tarreau8b15ba12012-02-02 17:48:18 +01001912 if (pr->peers_fe)
1913 break;
1914
Olivier Houchardfbc74e82017-11-24 16:54:05 +01001915 for (px = proxies_list; px; px = px->next)
Willy Tarreau4348fad2012-09-20 16:48:07 +02001916 if (px->state == PR_STNEW && !LIST_ISEMPTY(&px->conf.listeners))
Willy Tarreau8b15ba12012-02-02 17:48:18 +01001917 break;
1918
1919 if (pr || px) {
1920 /* At least one peer or one listener has been found */
1921 qfprintf(stdout, "Configuration file is valid\n");
1922 exit(0);
1923 }
1924 qfprintf(stdout, "Configuration file has no error but will not start (no listener) => exit(2).\n");
1925 exit(2);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001926 }
1927
Emeric Brunc60def82017-09-27 14:59:38 +02001928 global_listener_queue_task = task_new(MAX_THREADS_MASK);
Willy Tarreaue9b26022011-08-01 20:57:55 +02001929 if (!global_listener_queue_task) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001930 ha_alert("Out of memory when initializing global task\n");
Willy Tarreaue9b26022011-08-01 20:57:55 +02001931 exit(1);
1932 }
1933 /* very simple initialization, users will queue the task if needed */
1934 global_listener_queue_task->context = NULL; /* not even a context! */
1935 global_listener_queue_task->process = manage_global_listener_queue;
Willy Tarreaue9b26022011-08-01 20:57:55 +02001936
Willy Tarreau8263d2b2012-08-28 00:06:31 +02001937 /* now we know the buffer size, we can initialize the channels and buffers */
Willy Tarreau9b28e032012-10-12 23:49:43 +02001938 init_buffer();
Willy Tarreau8280d642009-09-23 23:37:52 +02001939
Willy Tarreaue6945732016-12-21 19:57:00 +01001940 list_for_each_entry(pcf, &post_check_list, list) {
1941 err_code |= pcf->fct();
1942 if (err_code & (ERR_ABORT|ERR_FATAL))
1943 exit(1);
1944 }
1945
Willy Tarreaubaaee002006-06-26 02:48:02 +02001946 if (cfg_maxconn > 0)
1947 global.maxconn = cfg_maxconn;
1948
Willy Tarreau8d687d82019-03-01 09:39:42 +01001949 if (global.stats_fe)
1950 global.maxsock += global.stats_fe->maxconn;
1951
1952 if (cfg_peers) {
1953 /* peers also need to bypass global maxconn */
1954 struct peers *p = cfg_peers;
1955
1956 for (p = cfg_peers; p; p = p->next)
1957 if (p->peers_fe)
1958 global.maxsock += p->peers_fe->maxconn;
1959 }
1960
Willy Tarreaubaaee002006-06-26 02:48:02 +02001961 if (cfg_pidfile) {
Willy Tarreaua534fea2008-08-03 12:19:50 +02001962 free(global.pidfile);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001963 global.pidfile = strdup(cfg_pidfile);
1964 }
1965
Willy Tarreaud0256482015-01-15 21:45:22 +01001966 /* Now we want to compute the maxconn and possibly maxsslconn values.
Willy Tarreauac350932019-03-01 15:43:14 +01001967 * It's a bit tricky. Maxconn defaults to the pre-computed value based
1968 * on rlim_fd_cur and the number of FDs in use due to the configuration,
1969 * and maxsslconn defaults to DEFAULT_MAXSSLCONN. On top of that we can
1970 * enforce a lower limit based on memmax.
Willy Tarreaud0256482015-01-15 21:45:22 +01001971 *
1972 * If memmax is set, then it depends on which values are set. If
1973 * maxsslconn is set, we use memmax to determine how many cleartext
1974 * connections may be added, and set maxconn to the sum of the two.
1975 * If maxconn is set and not maxsslconn, maxsslconn is computed from
1976 * the remaining amount of memory between memmax and the cleartext
1977 * connections. If neither are set, then it is considered that all
1978 * connections are SSL-capable, and maxconn is computed based on this,
1979 * then maxsslconn accordingly. We need to know if SSL is used on the
1980 * frontends, backends, or both, because when it's used on both sides,
1981 * we need twice the value for maxsslconn, but we only count the
1982 * handshake once since it is not performed on the two sides at the
1983 * same time (frontend-side is terminated before backend-side begins).
1984 * The SSL stack is supposed to have filled ssl_session_cost and
Willy Tarreau474b96a2015-01-28 19:03:21 +01001985 * ssl_handshake_cost during its initialization. In any case, if
1986 * SYSTEM_MAXCONN is set, we still enforce it as an upper limit for
1987 * maxconn in order to protect the system.
Willy Tarreaud0256482015-01-15 21:45:22 +01001988 */
Willy Tarreauac350932019-03-01 15:43:14 +01001989 ideal_maxconn = compute_ideal_maxconn();
1990
Willy Tarreaud0256482015-01-15 21:45:22 +01001991 if (!global.rlimit_memmax) {
1992 if (global.maxconn == 0) {
Willy Tarreauac350932019-03-01 15:43:14 +01001993 global.maxconn = ideal_maxconn;
Willy Tarreaud0256482015-01-15 21:45:22 +01001994 if (global.mode & (MODE_VERBOSE|MODE_DEBUG))
1995 fprintf(stderr, "Note: setting global.maxconn to %d.\n", global.maxconn);
1996 }
1997 }
1998#ifdef USE_OPENSSL
1999 else if (!global.maxconn && !global.maxsslconn &&
2000 (global.ssl_used_frontend || global.ssl_used_backend)) {
2001 /* memmax is set, compute everything automatically. Here we want
2002 * to ensure that all SSL connections will be served. We take
2003 * care of the number of sides where SSL is used, and consider
2004 * the worst case : SSL used on both sides and doing a handshake
2005 * simultaneously. Note that we can't have more than maxconn
2006 * handshakes at a time by definition, so for the worst case of
2007 * two SSL conns per connection, we count a single handshake.
2008 */
2009 int sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
2010 int64_t mem = global.rlimit_memmax * 1048576ULL;
2011
2012 mem -= global.tune.sslcachesize * 200; // about 200 bytes per SSL cache entry
2013 mem -= global.maxzlibmem;
2014 mem = mem * MEM_USABLE_RATIO;
2015
2016 global.maxconn = mem /
Willy Tarreau87b09662015-04-03 00:22:06 +02002017 ((STREAM_MAX_COST + 2 * global.tune.bufsize) + // stream + 2 buffers per stream
Willy Tarreaud0256482015-01-15 21:45:22 +01002018 sides * global.ssl_session_max_cost + // SSL buffers, one per side
2019 global.ssl_handshake_max_cost); // 1 handshake per connection max
2020
Willy Tarreauac350932019-03-01 15:43:14 +01002021 global.maxconn = MIN(global.maxconn, ideal_maxconn);
Willy Tarreaud0256482015-01-15 21:45:22 +01002022 global.maxconn = round_2dig(global.maxconn);
Willy Tarreau474b96a2015-01-28 19:03:21 +01002023#ifdef SYSTEM_MAXCONN
Willy Tarreauca783d42019-03-13 10:03:07 +01002024 if (global.maxconn > SYSTEM_MAXCONN)
2025 global.maxconn = SYSTEM_MAXCONN;
Willy Tarreau474b96a2015-01-28 19:03:21 +01002026#endif /* SYSTEM_MAXCONN */
Willy Tarreaud0256482015-01-15 21:45:22 +01002027 global.maxsslconn = sides * global.maxconn;
2028 if (global.mode & (MODE_VERBOSE|MODE_DEBUG))
2029 fprintf(stderr, "Note: setting global.maxconn to %d and global.maxsslconn to %d.\n",
2030 global.maxconn, global.maxsslconn);
2031 }
2032 else if (!global.maxsslconn &&
2033 (global.ssl_used_frontend || global.ssl_used_backend)) {
2034 /* memmax and maxconn are known, compute maxsslconn automatically.
2035 * maxsslconn being forced, we don't know how many of it will be
2036 * on each side if both sides are being used. The worst case is
2037 * when all connections use only one SSL instance because
2038 * handshakes may be on two sides at the same time.
2039 */
2040 int sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
2041 int64_t mem = global.rlimit_memmax * 1048576ULL;
2042 int64_t sslmem;
2043
2044 mem -= global.tune.sslcachesize * 200; // about 200 bytes per SSL cache entry
2045 mem -= global.maxzlibmem;
2046 mem = mem * MEM_USABLE_RATIO;
2047
Willy Tarreau87b09662015-04-03 00:22:06 +02002048 sslmem = mem - global.maxconn * (int64_t)(STREAM_MAX_COST + 2 * global.tune.bufsize);
Willy Tarreaud0256482015-01-15 21:45:22 +01002049 global.maxsslconn = sslmem / (global.ssl_session_max_cost + global.ssl_handshake_max_cost);
2050 global.maxsslconn = round_2dig(global.maxsslconn);
2051
2052 if (sslmem <= 0 || global.maxsslconn < sides) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002053 ha_alert("Cannot compute the automatic maxsslconn because global.maxconn is already too "
2054 "high for the global.memmax value (%d MB). The absolute maximum possible value "
2055 "without SSL is %d, but %d was found and SSL is in use.\n",
2056 global.rlimit_memmax,
2057 (int)(mem / (STREAM_MAX_COST + 2 * global.tune.bufsize)),
2058 global.maxconn);
Willy Tarreaud0256482015-01-15 21:45:22 +01002059 exit(1);
2060 }
2061
2062 if (global.maxsslconn > sides * global.maxconn)
2063 global.maxsslconn = sides * global.maxconn;
2064
2065 if (global.mode & (MODE_VERBOSE|MODE_DEBUG))
2066 fprintf(stderr, "Note: setting global.maxsslconn to %d\n", global.maxsslconn);
2067 }
2068#endif
2069 else if (!global.maxconn) {
2070 /* memmax and maxsslconn are known/unused, compute maxconn automatically */
2071 int sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
2072 int64_t mem = global.rlimit_memmax * 1048576ULL;
2073 int64_t clearmem;
2074
2075 if (global.ssl_used_frontend || global.ssl_used_backend)
2076 mem -= global.tune.sslcachesize * 200; // about 200 bytes per SSL cache entry
2077
2078 mem -= global.maxzlibmem;
2079 mem = mem * MEM_USABLE_RATIO;
2080
2081 clearmem = mem;
2082 if (sides)
2083 clearmem -= (global.ssl_session_max_cost + global.ssl_handshake_max_cost) * (int64_t)global.maxsslconn;
2084
Willy Tarreau87b09662015-04-03 00:22:06 +02002085 global.maxconn = clearmem / (STREAM_MAX_COST + 2 * global.tune.bufsize);
Willy Tarreauac350932019-03-01 15:43:14 +01002086 global.maxconn = MIN(global.maxconn, ideal_maxconn);
Willy Tarreaud0256482015-01-15 21:45:22 +01002087 global.maxconn = round_2dig(global.maxconn);
Willy Tarreau474b96a2015-01-28 19:03:21 +01002088#ifdef SYSTEM_MAXCONN
Willy Tarreauca783d42019-03-13 10:03:07 +01002089 if (global.maxconn > SYSTEM_MAXCONN)
2090 global.maxconn = SYSTEM_MAXCONN;
Willy Tarreau474b96a2015-01-28 19:03:21 +01002091#endif /* SYSTEM_MAXCONN */
Willy Tarreaud0256482015-01-15 21:45:22 +01002092
2093 if (clearmem <= 0 || !global.maxconn) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002094 ha_alert("Cannot compute the automatic maxconn because global.maxsslconn is already too "
2095 "high for the global.memmax value (%d MB). The absolute maximum possible value "
2096 "is %d, but %d was found.\n",
2097 global.rlimit_memmax,
2098 (int)(mem / (global.ssl_session_max_cost + global.ssl_handshake_max_cost)),
2099 global.maxsslconn);
Willy Tarreaud0256482015-01-15 21:45:22 +01002100 exit(1);
2101 }
2102
2103 if (global.mode & (MODE_VERBOSE|MODE_DEBUG)) {
2104 if (sides && global.maxsslconn > sides * global.maxconn) {
2105 fprintf(stderr, "Note: global.maxsslconn is forced to %d which causes global.maxconn "
2106 "to be limited to %d. Better reduce global.maxsslconn to get more "
2107 "room for extra connections.\n", global.maxsslconn, global.maxconn);
2108 }
2109 fprintf(stderr, "Note: setting global.maxconn to %d\n", global.maxconn);
2110 }
Willy Tarreau66aa61f2009-01-18 21:44:07 +01002111 }
2112
Willy Tarreau5a023f02019-03-01 14:19:31 +01002113 if (!global.maxpipes)
2114 global.maxpipes = compute_ideal_maxpipes();
Willy Tarreau66aa61f2009-01-18 21:44:07 +01002115
Willy Tarreauabacc2c2011-09-07 14:26:33 +02002116 global.hardmaxconn = global.maxconn; /* keep this max value */
Willy Tarreaubaaee002006-06-26 02:48:02 +02002117 global.maxsock += global.maxconn * 2; /* each connection needs two sockets */
Willy Tarreau3ec79b92009-01-18 20:39:42 +01002118 global.maxsock += global.maxpipes * 2; /* each pipe needs two FDs */
Willy Tarreau2c58b412019-03-14 19:10:55 +01002119 global.maxsock += global.nbthread; /* one epoll_fd/kqueue_fd per thread */
2120 global.maxsock += 2 * global.nbthread; /* one wake-up pipe (2 fd) per thread */
2121
Emeric Brunece0c332017-12-06 13:51:49 +01002122 /* compute fd used by async engines */
2123 if (global.ssl_used_async_engines) {
2124 int sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
2125 global.maxsock += global.maxconn * sides * global.ssl_used_async_engines;
2126 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002127
Olivier Houchard88698d92019-04-16 19:07:22 +02002128 /* update connection pool thresholds */
2129 global.tune.pool_low_count = ((long long)global.maxsock * global.tune.pool_low_ratio + 99) / 100;
2130 global.tune.pool_high_count = ((long long)global.maxsock * global.tune.pool_high_ratio + 99) / 100;
2131
Willy Tarreauc8d5b952019-02-27 17:25:52 +01002132 proxy_adjust_all_maxconn();
2133
Willy Tarreau1db37712007-06-03 17:16:49 +02002134 if (global.tune.maxpollevents <= 0)
2135 global.tune.maxpollevents = MAX_POLL_EVENTS;
2136
Olivier Houchard1599b802018-05-24 18:59:04 +02002137 if (global.tune.runqueue_depth <= 0)
2138 global.tune.runqueue_depth = RUNQUEUE_DEPTH;
2139
Willy Tarreau6f4a82c2009-03-21 20:43:57 +01002140 if (global.tune.recv_enough == 0)
2141 global.tune.recv_enough = MIN_RECV_AT_ONCE_ENOUGH;
2142
Willy Tarreau27097842015-09-28 13:53:23 +02002143 if (global.tune.maxrewrite < 0)
2144 global.tune.maxrewrite = MAXREWRITE;
2145
Willy Tarreau27a674e2009-08-17 07:23:33 +02002146 if (global.tune.maxrewrite >= global.tune.bufsize / 2)
2147 global.tune.maxrewrite = global.tune.bufsize / 2;
2148
Willy Tarreaubaaee002006-06-26 02:48:02 +02002149 if (arg_mode & (MODE_DEBUG | MODE_FOREGROUND)) {
2150 /* command line debug mode inhibits configuration mode */
William Lallemand095ba4c2017-06-01 17:38:50 +02002151 global.mode &= ~(MODE_DAEMON | MODE_QUIET);
Willy Tarreau772f0dd2012-10-26 16:04:28 +02002152 global.mode |= (arg_mode & (MODE_DEBUG | MODE_FOREGROUND));
2153 }
2154
William Lallemand095ba4c2017-06-01 17:38:50 +02002155 if (arg_mode & MODE_DAEMON) {
Willy Tarreau772f0dd2012-10-26 16:04:28 +02002156 /* command line daemon mode inhibits foreground and debug modes mode */
2157 global.mode &= ~(MODE_DEBUG | MODE_FOREGROUND);
William Lallemand095ba4c2017-06-01 17:38:50 +02002158 global.mode |= arg_mode & MODE_DAEMON;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002159 }
Willy Tarreau772f0dd2012-10-26 16:04:28 +02002160
2161 global.mode |= (arg_mode & (MODE_QUIET | MODE_VERBOSE));
Willy Tarreaubaaee002006-06-26 02:48:02 +02002162
William Lallemand095ba4c2017-06-01 17:38:50 +02002163 if ((global.mode & MODE_DEBUG) && (global.mode & (MODE_DAEMON | MODE_QUIET))) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002164 ha_warning("<debug> mode incompatible with <quiet> and <daemon>. Keeping <debug> only.\n");
William Lallemand095ba4c2017-06-01 17:38:50 +02002165 global.mode &= ~(MODE_DAEMON | MODE_QUIET);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002166 }
2167
William Lallemand095ba4c2017-06-01 17:38:50 +02002168 if ((global.nbproc > 1) && !(global.mode & (MODE_DAEMON | MODE_MWORKER))) {
Willy Tarreaubaaee002006-06-26 02:48:02 +02002169 if (!(global.mode & (MODE_FOREGROUND | MODE_DEBUG)))
Christopher Faulet767a84b2017-11-24 16:50:31 +01002170 ha_warning("<nbproc> is only meaningful in daemon mode or master-worker mode. Setting limit to 1 process.\n");
Willy Tarreaubaaee002006-06-26 02:48:02 +02002171 global.nbproc = 1;
2172 }
2173
2174 if (global.nbproc < 1)
2175 global.nbproc = 1;
2176
Christopher Fauletbe0faa22017-08-29 15:37:10 +02002177 if (global.nbthread < 1)
2178 global.nbthread = 1;
2179
Christopher Faulet3ef26392017-08-29 16:46:57 +02002180 /* Realloc trash buffers because global.tune.bufsize may have changed */
Christopher Fauletcd7879a2017-10-27 13:53:47 +02002181 if (!init_trash_buffers(0)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002182 ha_alert("failed to initialize trash buffers.\n");
Christopher Faulet3ef26392017-08-29 16:46:57 +02002183 exit(1);
2184 }
2185
Christopher Faulet96d44832017-11-14 22:02:30 +01002186 if (!init_log_buffers()) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002187 ha_alert("failed to initialize log buffers.\n");
Christopher Faulet96d44832017-11-14 22:02:30 +01002188 exit(1);
2189 }
2190
Willy Tarreauef1d1f82007-04-16 00:25:25 +02002191 /*
2192 * Note: we could register external pollers here.
2193 * Built-in pollers have been registered before main().
2194 */
Willy Tarreau4f60f162007-04-08 16:39:58 +02002195
Willy Tarreau43b78992009-01-25 15:42:27 +01002196 if (!(global.tune.options & GTUNE_USE_KQUEUE))
Willy Tarreau1e63130a2007-04-09 12:03:06 +02002197 disable_poller("kqueue");
2198
Emmanuel Hocdet0ba4f482019-04-08 16:53:32 +00002199 if (!(global.tune.options & GTUNE_USE_EVPORTS))
2200 disable_poller("evports");
2201
Willy Tarreau43b78992009-01-25 15:42:27 +01002202 if (!(global.tune.options & GTUNE_USE_EPOLL))
Willy Tarreau4f60f162007-04-08 16:39:58 +02002203 disable_poller("epoll");
2204
Willy Tarreau43b78992009-01-25 15:42:27 +01002205 if (!(global.tune.options & GTUNE_USE_POLL))
Willy Tarreau4f60f162007-04-08 16:39:58 +02002206 disable_poller("poll");
2207
Willy Tarreau43b78992009-01-25 15:42:27 +01002208 if (!(global.tune.options & GTUNE_USE_SELECT))
Willy Tarreau4f60f162007-04-08 16:39:58 +02002209 disable_poller("select");
2210
2211 /* Note: we could disable any poller by name here */
2212
Christopher Fauletb3f4e142016-03-07 12:46:38 +01002213 if (global.mode & (MODE_VERBOSE|MODE_DEBUG)) {
Willy Tarreau2ff76222007-04-09 19:29:56 +02002214 list_pollers(stderr);
Christopher Fauletb3f4e142016-03-07 12:46:38 +01002215 fprintf(stderr, "\n");
2216 list_filters(stderr);
2217 }
Willy Tarreau2ff76222007-04-09 19:29:56 +02002218
Willy Tarreau4f60f162007-04-08 16:39:58 +02002219 if (!init_pollers()) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002220 ha_alert("No polling mechanism available.\n"
2221 " It is likely that haproxy was built with TARGET=generic and that FD_SETSIZE\n"
2222 " is too low on this platform to support maxconn and the number of listeners\n"
2223 " and servers. You should rebuild haproxy specifying your system using TARGET=\n"
2224 " in order to support other polling systems (poll, epoll, kqueue) or reduce the\n"
2225 " global maxconn setting to accommodate the system's limitation. For reference,\n"
2226 " FD_SETSIZE=%d on this system, global.maxconn=%d resulting in a maximum of\n"
2227 " %d file descriptors. You should thus reduce global.maxconn by %d. Also,\n"
2228 " check build settings using 'haproxy -vv'.\n\n",
2229 FD_SETSIZE, global.maxconn, global.maxsock, (global.maxsock + 1 - FD_SETSIZE) / 2);
Willy Tarreau4f60f162007-04-08 16:39:58 +02002230 exit(1);
2231 }
Willy Tarreau2ff76222007-04-09 19:29:56 +02002232 if (global.mode & (MODE_VERBOSE|MODE_DEBUG)) {
2233 printf("Using %s() as the polling mechanism.\n", cur_poller.name);
Willy Tarreau4f60f162007-04-08 16:39:58 +02002234 }
2235
Krzysztof Piotr Oledzki48cb2ae2009-10-02 22:51:14 +02002236 if (!global.node)
2237 global.node = strdup(hostname);
2238
Thierry FOURNIERa4a0f3d2015-01-23 12:08:30 +01002239 if (!hlua_post_init())
2240 exit(1);
Thomas Holmes6abded42015-05-12 16:23:58 +01002241
Maxime de Roucy0f503922016-05-13 23:52:55 +02002242 free(err_msg);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002243}
2244
Simon Horman6fb82592011-07-15 13:14:11 +09002245static void deinit_acl_cond(struct acl_cond *cond)
Simon Hormanac821422011-07-15 13:14:09 +09002246{
Simon Hormanac821422011-07-15 13:14:09 +09002247 struct acl_term_suite *suite, *suiteb;
2248 struct acl_term *term, *termb;
2249
Simon Horman6fb82592011-07-15 13:14:11 +09002250 if (!cond)
2251 return;
2252
2253 list_for_each_entry_safe(suite, suiteb, &cond->suites, list) {
2254 list_for_each_entry_safe(term, termb, &suite->terms, list) {
2255 LIST_DEL(&term->list);
2256 free(term);
Simon Hormanac821422011-07-15 13:14:09 +09002257 }
Simon Horman6fb82592011-07-15 13:14:11 +09002258 LIST_DEL(&suite->list);
2259 free(suite);
2260 }
2261
2262 free(cond);
2263}
2264
Christopher Faulet482c8ec2019-12-17 11:25:46 +01002265static void deinit_act_rules(struct list *rules)
Simon Horman6fb82592011-07-15 13:14:11 +09002266{
Christopher Faulet482c8ec2019-12-17 11:25:46 +01002267 struct act_rule *rule, *ruleb;
Simon Horman6fb82592011-07-15 13:14:11 +09002268
Christopher Faulet482c8ec2019-12-17 11:25:46 +01002269 list_for_each_entry_safe(rule, ruleb, rules, list) {
2270 LIST_DEL(&rule->list);
2271 deinit_acl_cond(rule->cond);
2272 free(rule);
Simon Hormanac821422011-07-15 13:14:09 +09002273 }
2274}
2275
Simon Horman6fb82592011-07-15 13:14:11 +09002276static void deinit_stick_rules(struct list *rules)
2277{
2278 struct sticking_rule *rule, *ruleb;
2279
2280 list_for_each_entry_safe(rule, ruleb, rules, list) {
2281 LIST_DEL(&rule->list);
2282 deinit_acl_cond(rule->cond);
Christopher Faulet476e5d02016-10-26 11:34:47 +02002283 release_sample_expr(rule->expr);
Simon Horman6fb82592011-07-15 13:14:11 +09002284 free(rule);
2285 }
2286}
2287
Cyril Bonté203ec5a2017-03-23 22:44:13 +01002288void deinit(void)
Willy Tarreaubaaee002006-06-26 02:48:02 +02002289{
Olivier Houchardfbc74e82017-11-24 16:54:05 +01002290 struct proxy *p = proxies_list, *p0;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002291 struct cap_hdr *h,*h_next;
2292 struct server *s,*s_next;
2293 struct listener *l,*l_next;
Willy Tarreau0fc45a72007-06-17 00:36:03 +02002294 struct acl_cond *cond, *condb;
2295 struct hdr_exp *exp, *expb;
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002296 struct acl *acl, *aclb;
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002297 struct switching_rule *rule, *ruleb;
Willy Tarreau4a5cade2012-04-05 21:09:48 +02002298 struct server_rule *srule, *sruleb;
Willy Tarreaub463dfb2008-06-07 23:08:56 +02002299 struct redirect_rule *rdr, *rdrb;
Willy Tarreaudeb9ed82010-01-03 21:03:22 +01002300 struct wordlist *wl, *wlb;
Willy Tarreauf4f04122010-01-28 18:10:50 +01002301 struct cond_wordlist *cwl, *cwlb;
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002302 struct uri_auth *uap, *ua = NULL;
William Lallemand0f99e342011-10-12 17:50:54 +02002303 struct logsrv *log, *logb;
William Lallemand723b73a2012-02-08 16:37:49 +01002304 struct logformat_node *lf, *lfb;
Willy Tarreau2a65ff02012-09-13 17:54:29 +02002305 struct bind_conf *bind_conf, *bind_back;
Willy Tarreaucdb737e2016-12-21 18:43:10 +01002306 struct build_opts_str *bol, *bolb;
Willy Tarreau05554e62016-12-21 20:46:26 +01002307 struct post_deinit_fct *pdf;
Willy Tarreau0fc45a72007-06-17 00:36:03 +02002308 int i;
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002309
Willy Tarreau24f4efa2010-08-27 17:56:48 +02002310 deinit_signals();
Willy Tarreaubaaee002006-06-26 02:48:02 +02002311 while (p) {
Willy Tarreau8113a5d2012-10-04 08:01:43 +02002312 free(p->conf.file);
Willy Tarreaua534fea2008-08-03 12:19:50 +02002313 free(p->id);
2314 free(p->check_req);
Christopher Fauletf304ad32020-04-09 08:44:06 +02002315 free(p->check_hdrs);
2316 free(p->check_body);
Willy Tarreaua534fea2008-08-03 12:19:50 +02002317 free(p->cookie_name);
2318 free(p->cookie_domain);
Christopher Fauletdb2cdbb2020-01-21 11:06:48 +01002319 free(p->cookie_attrs);
Willy Tarreau4c03d1c2019-01-14 15:23:54 +01002320 free(p->lbprm.arg_str);
Willy Tarreaua534fea2008-08-03 12:19:50 +02002321 free(p->capture_name);
2322 free(p->monitor_uri);
Simon Hormana31c7f72011-07-15 13:14:08 +09002323 free(p->rdp_cookie_name);
Willy Tarreau62a61232013-04-12 18:13:46 +02002324 if (p->conf.logformat_string != default_http_log_format &&
2325 p->conf.logformat_string != default_tcp_log_format &&
2326 p->conf.logformat_string != clf_http_log_format)
2327 free(p->conf.logformat_string);
Willy Tarreau196729e2012-05-31 19:30:26 +02002328
Willy Tarreau62a61232013-04-12 18:13:46 +02002329 free(p->conf.lfs_file);
2330 free(p->conf.uniqueid_format_string);
2331 free(p->conf.uif_file);
Willy Tarreau0cac26c2019-01-14 16:55:42 +01002332 if ((p->lbprm.algo & BE_LB_LKUP) == BE_LB_LKUP_MAP)
2333 free(p->lbprm.map.srv);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002334
Dragan Dosen0b85ece2015-09-25 19:17:44 +02002335 if (p->conf.logformat_sd_string != default_rfc5424_sd_log_format)
2336 free(p->conf.logformat_sd_string);
2337 free(p->conf.lfsd_file);
2338
Willy Tarreaua534fea2008-08-03 12:19:50 +02002339 for (i = 0; i < HTTP_ERR_SIZE; i++)
Krzysztof Piotr Oledzki78abe612009-09-27 13:23:20 +02002340 chunk_destroy(&p->errmsg[i]);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002341
Willy Tarreauf4f04122010-01-28 18:10:50 +01002342 list_for_each_entry_safe(cwl, cwlb, &p->req_add, list) {
2343 LIST_DEL(&cwl->list);
2344 free(cwl->s);
2345 free(cwl);
Willy Tarreaudeb9ed82010-01-03 21:03:22 +01002346 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002347
Willy Tarreauf4f04122010-01-28 18:10:50 +01002348 list_for_each_entry_safe(cwl, cwlb, &p->rsp_add, list) {
2349 LIST_DEL(&cwl->list);
2350 free(cwl->s);
2351 free(cwl);
Willy Tarreaudeb9ed82010-01-03 21:03:22 +01002352 }
Willy Tarreau0fc45a72007-06-17 00:36:03 +02002353
Willy Tarreaub80c2302007-11-30 20:51:32 +01002354 list_for_each_entry_safe(cond, condb, &p->mon_fail_cond, list) {
2355 LIST_DEL(&cond->list);
2356 prune_acl_cond(cond);
2357 free(cond);
2358 }
2359
Willy Tarreau0fc45a72007-06-17 00:36:03 +02002360 for (exp = p->req_exp; exp != NULL; ) {
Dragan Dosen26743032019-04-30 15:54:36 +02002361 regex_free(exp->preg);
Willy Tarreau98d04852015-05-26 12:18:29 +02002362 free((char *)exp->replace);
Willy Tarreau0fc45a72007-06-17 00:36:03 +02002363 expb = exp;
2364 exp = exp->next;
2365 free(expb);
2366 }
2367
2368 for (exp = p->rsp_exp; exp != NULL; ) {
Dragan Dosen26743032019-04-30 15:54:36 +02002369 regex_free(exp->preg);
Willy Tarreau98d04852015-05-26 12:18:29 +02002370 free((char *)exp->replace);
Willy Tarreau0fc45a72007-06-17 00:36:03 +02002371 expb = exp;
2372 exp = exp->next;
2373 free(expb);
2374 }
2375
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002376 /* build a list of unique uri_auths */
2377 if (!ua)
2378 ua = p->uri_auth;
2379 else {
2380 /* check if p->uri_auth is unique */
2381 for (uap = ua; uap; uap=uap->next)
2382 if (uap == p->uri_auth)
2383 break;
2384
Willy Tarreauaccc4e12008-06-24 11:14:45 +02002385 if (!uap && p->uri_auth) {
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002386 /* add it, if it is */
2387 p->uri_auth->next = ua;
2388 ua = p->uri_auth;
2389 }
2390 }
Willy Tarreau0fc45a72007-06-17 00:36:03 +02002391
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002392 list_for_each_entry_safe(acl, aclb, &p->acl, list) {
2393 LIST_DEL(&acl->list);
2394 prune_acl(acl);
2395 free(acl);
2396 }
2397
Willy Tarreau4a5cade2012-04-05 21:09:48 +02002398 list_for_each_entry_safe(srule, sruleb, &p->server_rules, list) {
2399 LIST_DEL(&srule->list);
2400 prune_acl_cond(srule->cond);
2401 free(srule->cond);
2402 free(srule);
2403 }
2404
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002405 list_for_each_entry_safe(rule, ruleb, &p->switching_rules, list) {
2406 LIST_DEL(&rule->list);
Willy Tarreauf51658d2014-04-23 01:21:56 +02002407 if (rule->cond) {
2408 prune_acl_cond(rule->cond);
2409 free(rule->cond);
2410 }
Dragan Dosen2a7c20f2019-04-30 00:38:36 +02002411 free(rule->file);
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002412 free(rule);
2413 }
2414
Willy Tarreaub463dfb2008-06-07 23:08:56 +02002415 list_for_each_entry_safe(rdr, rdrb, &p->redirect_rules, list) {
2416 LIST_DEL(&rdr->list);
Willy Tarreauf285f542010-01-03 20:03:03 +01002417 if (rdr->cond) {
2418 prune_acl_cond(rdr->cond);
2419 free(rdr->cond);
2420 }
Willy Tarreaub463dfb2008-06-07 23:08:56 +02002421 free(rdr->rdr_str);
Thierry FOURNIERd18cd0f2013-11-29 12:15:45 +01002422 list_for_each_entry_safe(lf, lfb, &rdr->rdr_fmt, list) {
2423 LIST_DEL(&lf->list);
2424 free(lf);
2425 }
Willy Tarreaub463dfb2008-06-07 23:08:56 +02002426 free(rdr);
2427 }
2428
William Lallemand0f99e342011-10-12 17:50:54 +02002429 list_for_each_entry_safe(log, logb, &p->logsrvs, list) {
2430 LIST_DEL(&log->list);
2431 free(log);
2432 }
2433
William Lallemand723b73a2012-02-08 16:37:49 +01002434 list_for_each_entry_safe(lf, lfb, &p->logformat, list) {
2435 LIST_DEL(&lf->list);
Dragan Dosen61302da2019-04-30 00:40:02 +02002436 release_sample_expr(lf->expr);
2437 free(lf->arg);
William Lallemand723b73a2012-02-08 16:37:49 +01002438 free(lf);
2439 }
2440
Dragan Dosen0b85ece2015-09-25 19:17:44 +02002441 list_for_each_entry_safe(lf, lfb, &p->logformat_sd, list) {
2442 LIST_DEL(&lf->list);
Dragan Dosen61302da2019-04-30 00:40:02 +02002443 release_sample_expr(lf->expr);
2444 free(lf->arg);
Dragan Dosen0b85ece2015-09-25 19:17:44 +02002445 free(lf);
2446 }
2447
Christopher Faulet482c8ec2019-12-17 11:25:46 +01002448 deinit_act_rules(&p->tcp_req.inspect_rules);
2449 deinit_act_rules(&p->tcp_rep.inspect_rules);
2450 deinit_act_rules(&p->tcp_req.l4_rules);
2451 deinit_act_rules(&p->tcp_req.l5_rules);
2452 deinit_act_rules(&p->http_req_rules);
2453 deinit_act_rules(&p->http_res_rules);
Simon Hormanac821422011-07-15 13:14:09 +09002454
Simon Horman6fb82592011-07-15 13:14:11 +09002455 deinit_stick_rules(&p->storersp_rules);
2456 deinit_stick_rules(&p->sticking_rules);
2457
Willy Tarreaubaaee002006-06-26 02:48:02 +02002458 h = p->req_cap;
2459 while (h) {
2460 h_next = h->next;
Willy Tarreaua534fea2008-08-03 12:19:50 +02002461 free(h->name);
Willy Tarreaubafbe012017-11-24 17:34:44 +01002462 pool_destroy(h->pool);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002463 free(h);
2464 h = h_next;
2465 }/* end while(h) */
2466
2467 h = p->rsp_cap;
2468 while (h) {
2469 h_next = h->next;
Willy Tarreaua534fea2008-08-03 12:19:50 +02002470 free(h->name);
Willy Tarreaubafbe012017-11-24 17:34:44 +01002471 pool_destroy(h->pool);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002472 free(h);
2473 h = h_next;
2474 }/* end while(h) */
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002475
Willy Tarreaubaaee002006-06-26 02:48:02 +02002476 s = p->srv;
2477 while (s) {
2478 s_next = s->next;
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002479
Dragan Dosen026ef572019-04-30 00:56:20 +02002480
Willy Tarreauf6562792019-05-07 19:05:35 +02002481 task_destroy(s->warmup);
Willy Tarreau2e993902011-10-31 11:53:20 +01002482
Willy Tarreaua534fea2008-08-03 12:19:50 +02002483 free(s->id);
2484 free(s->cookie);
Christopher Faulet67957bd2017-09-27 11:00:59 +02002485 free(s->hostname_dn);
Sárközi, László34c01792014-09-05 10:08:23 +02002486 free((char*)s->conf.file);
Olivier Houchard7fc3be72018-11-22 18:50:54 +01002487 free(s->idle_conns);
2488 free(s->priv_conns);
2489 free(s->safe_conns);
Olivier Houchard0c18a6f2018-12-02 14:11:41 +01002490 free(s->idle_orphan_conns);
Olivier Houchardf1314812019-02-18 16:41:17 +01002491 free(s->curr_idle_thr);
Christopher Fauletc6e07702020-03-26 19:48:20 +01002492 deinit_srv_check(s);
2493 deinit_srv_agent_check(s);
Willy Tarreau17d45382016-12-22 21:16:08 +01002494
Christopher Faulet68d35ae2020-03-27 18:55:49 +01002495 if (s->use_ssl == 1 || s->check.use_ssl == 1 || (s->proxy->options & PR_O_TCPCHK_SSL)) {
Willy Tarreau17d45382016-12-22 21:16:08 +01002496 if (xprt_get(XPRT_SSL) && xprt_get(XPRT_SSL)->destroy_srv)
2497 xprt_get(XPRT_SSL)->destroy_srv(s);
2498 }
Christopher Faulet2a944ee2017-11-07 10:42:54 +01002499 HA_SPIN_DESTROY(&s->lock);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002500 free(s);
2501 s = s_next;
2502 }/* end while(s) */
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002503
Willy Tarreau4348fad2012-09-20 16:48:07 +02002504 list_for_each_entry_safe(l, l_next, &p->conf.listeners, by_fe) {
Olivier Houchard1fc05162017-04-06 01:05:05 +02002505 /*
2506 * Zombie proxy, the listener just pretend to be up
2507 * because they still hold an opened fd.
2508 * Close it and give the listener its real state.
2509 */
2510 if (p->state == PR_STSTOPPED && l->state >= LI_ZOMBIE) {
2511 close(l->fd);
2512 l->state = LI_INIT;
2513 }
Willy Tarreauf6e2cc72010-09-03 10:38:17 +02002514 unbind_listener(l);
2515 delete_listener(l);
Willy Tarreau4348fad2012-09-20 16:48:07 +02002516 LIST_DEL(&l->by_fe);
2517 LIST_DEL(&l->by_bind);
Krzysztof Piotr Oledzkiaff01ea2010-02-05 20:31:44 +01002518 free(l->name);
2519 free(l->counters);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002520 free(l);
Willy Tarreau4348fad2012-09-20 16:48:07 +02002521 }
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002522
Willy Tarreau4348fad2012-09-20 16:48:07 +02002523 /* Release unused SSL configs. */
Willy Tarreau2a65ff02012-09-13 17:54:29 +02002524 list_for_each_entry_safe(bind_conf, bind_back, &p->conf.bind, by_fe) {
Willy Tarreau795cdab2016-12-22 17:30:54 +01002525 if (bind_conf->xprt->destroy_bind_conf)
2526 bind_conf->xprt->destroy_bind_conf(bind_conf);
Willy Tarreau2a65ff02012-09-13 17:54:29 +02002527 free(bind_conf->file);
2528 free(bind_conf->arg);
2529 LIST_DEL(&bind_conf->by_fe);
2530 free(bind_conf);
2531 }
Willy Tarreauf5ae8f72012-09-07 16:58:00 +02002532
Christopher Fauletd7c91962015-04-30 11:48:27 +02002533 flt_deinit(p);
2534
Krzysztof Piotr Oledzkiaff01ea2010-02-05 20:31:44 +01002535 free(p->desc);
2536 free(p->fwdfor_hdr_name);
2537
Olivier Houchard3f795f72019-04-17 22:51:06 +02002538 task_destroy(p->task);
Krzysztof Piotr Oledzki59bb2182010-01-29 17:58:21 +01002539
Willy Tarreaubafbe012017-11-24 17:34:44 +01002540 pool_destroy(p->req_cap_pool);
2541 pool_destroy(p->rsp_cap_pool);
Dragan Dosen7d61a332019-05-07 14:16:18 +02002542 if (p->table)
2543 pool_destroy(p->table->pool);
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01002544
Willy Tarreau4d2d0982007-05-14 00:39:29 +02002545 p0 = p;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002546 p = p->next;
Christopher Faulet2a944ee2017-11-07 10:42:54 +01002547 HA_SPIN_DESTROY(&p0->lbprm.lock);
2548 HA_SPIN_DESTROY(&p0->lock);
Willy Tarreau4d2d0982007-05-14 00:39:29 +02002549 free(p0);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002550 }/* end while(p) */
Willy Tarreaudd815982007-10-16 12:25:14 +02002551
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002552 while (ua) {
2553 uap = ua;
2554 ua = ua->next;
2555
Willy Tarreaua534fea2008-08-03 12:19:50 +02002556 free(uap->uri_prefix);
2557 free(uap->auth_realm);
Krzysztof Piotr Oledzki48cb2ae2009-10-02 22:51:14 +02002558 free(uap->node);
2559 free(uap->desc);
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002560
Krzysztof Piotr Oledzki8c8bd452010-01-29 19:29:32 +01002561 userlist_free(uap->userlist);
Christopher Faulet482c8ec2019-12-17 11:25:46 +01002562 deinit_act_rules(&uap->http_req_rules);
Krzysztof Piotr Oledzki8c8bd452010-01-29 19:29:32 +01002563
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002564 free(uap);
2565 }
2566
Krzysztof Piotr Oledzki96105042010-01-29 17:50:44 +01002567 userlist_free(userlist);
2568
David Carlier834cb2e2015-09-25 12:02:25 +01002569 cfg_unregister_sections();
2570
Christopher Faulet0132d062017-07-26 15:33:35 +02002571 deinit_log_buffers();
David Carlier834cb2e2015-09-25 12:02:25 +01002572
Willy Tarreaudd815982007-10-16 12:25:14 +02002573 protocol_unbind_all();
2574
Willy Tarreau05554e62016-12-21 20:46:26 +01002575 list_for_each_entry(pdf, &post_deinit_list, list)
2576 pdf->fct();
2577
Joe Williamsdf5b38f2010-12-29 17:05:48 +01002578 free(global.log_send_hostname); global.log_send_hostname = NULL;
Dragan Dosen43885c72015-10-01 13:18:13 +02002579 chunk_destroy(&global.log_tag);
Willy Tarreaua534fea2008-08-03 12:19:50 +02002580 free(global.chroot); global.chroot = NULL;
2581 free(global.pidfile); global.pidfile = NULL;
Krzysztof Piotr Oledzki48cb2ae2009-10-02 22:51:14 +02002582 free(global.node); global.node = NULL;
2583 free(global.desc); global.desc = NULL;
Willy Tarreaua534fea2008-08-03 12:19:50 +02002584 free(oldpids); oldpids = NULL;
Olivier Houchard3f795f72019-04-17 22:51:06 +02002585 task_destroy(global_listener_queue_task); global_listener_queue_task = NULL;
2586 task_destroy(idle_conn_task);
Olivier Houchard9ea5d362019-02-14 18:29:09 +01002587 idle_conn_task = NULL;
Krzysztof Piotr Oledzki8001d612008-05-31 13:53:23 +02002588
William Lallemand0f99e342011-10-12 17:50:54 +02002589 list_for_each_entry_safe(log, logb, &global.logsrvs, list) {
2590 LIST_DEL(&log->list);
2591 free(log);
2592 }
Willy Tarreau477ecd82010-01-03 21:12:30 +01002593 list_for_each_entry_safe(wl, wlb, &cfg_cfgfiles, list) {
Maxime de Roucy0f503922016-05-13 23:52:55 +02002594 free(wl->s);
Willy Tarreau477ecd82010-01-03 21:12:30 +01002595 LIST_DEL(&wl->list);
2596 free(wl);
2597 }
2598
Willy Tarreaucdb737e2016-12-21 18:43:10 +01002599 list_for_each_entry_safe(bol, bolb, &build_opts_list, list) {
2600 if (bol->must_free)
2601 free((void *)bol->str);
2602 LIST_DEL(&bol->list);
2603 free(bol);
2604 }
2605
Christopher Fauletff2613e2016-11-09 11:36:17 +01002606 vars_prune(&global.vars, NULL, NULL);
Willy Tarreau2455ceb2018-11-26 15:57:34 +01002607 pool_destroy_all();
Krzysztof Piotr Oledzkia643baf2008-05-29 23:53:44 +02002608 deinit_pollers();
Willy Tarreaubaaee002006-06-26 02:48:02 +02002609} /* end deinit() */
2610
William Lallemand72160322018-11-06 17:37:16 +01002611
Willy Tarreau918ff602011-07-25 16:33:49 +02002612/* Runs the polling loop */
Willy Tarreau1b5af7c2016-12-21 18:19:57 +01002613static void run_poll_loop()
Willy Tarreau4f60f162007-04-08 16:39:58 +02002614{
Willy Tarreau2ae84e42019-05-28 16:44:05 +02002615 int next, wake;
Willy Tarreau4f60f162007-04-08 16:39:58 +02002616
Willy Tarreaub0b37bc2008-06-23 14:00:57 +02002617 tv_update_date(0,1);
Willy Tarreau4f60f162007-04-08 16:39:58 +02002618 while (1) {
Thierry FOURNIER9cf7c4b2014-12-15 13:26:01 +01002619 /* Process a few tasks */
2620 process_runnable_tasks();
2621
William Lallemand1aab50b2018-06-07 09:46:01 +02002622 /* check if we caught some signals and process them in the
2623 first thread */
2624 if (tid == 0)
2625 signal_process_queue();
Willy Tarreau29857942009-05-10 09:01:21 +02002626
Willy Tarreau58b458d2008-06-29 22:40:23 +02002627 /* Check if we can expire some tasks */
Thierry FOURNIER9cf7c4b2014-12-15 13:26:01 +01002628 next = wake_expired_tasks();
Willy Tarreau4f60f162007-04-08 16:39:58 +02002629
Willy Tarreau7067b3a2019-06-02 11:11:29 +02002630 /* also stop if we failed to cleanly stop all tasks */
2631 if (killed > 1)
2632 break;
2633
Willy Tarreau10146c92015-04-13 20:44:19 +02002634 /* expire immediately if events are pending */
Willy Tarreau2ae84e42019-05-28 16:44:05 +02002635 wake = 1;
Christopher Faulet32467fe2018-01-15 12:16:34 +01002636 if (fd_cache_mask & tid_bit)
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01002637 activity[tid].wake_cache++;
Olivier Houchardcfbb3e62019-05-29 19:22:43 +02002638 else if (thread_has_tasks())
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01002639 activity[tid].wake_tasks++;
William Lallemand1aab50b2018-06-07 09:46:01 +02002640 else if (signal_queue_len && tid == 0)
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01002641 activity[tid].wake_signal++;
Olivier Houchard79321b92018-07-26 17:55:11 +02002642 else {
Olivier Houchardb23a61f2019-03-08 18:51:17 +01002643 _HA_ATOMIC_OR(&sleeping_thread_mask, tid_bit);
2644 __ha_barrier_atomic_store();
Olivier Houchardcfbb3e62019-05-29 19:22:43 +02002645 if (global_tasks_mask & tid_bit) {
Olivier Houchard79321b92018-07-26 17:55:11 +02002646 activity[tid].wake_tasks++;
Olivier Houchardb23a61f2019-03-08 18:51:17 +01002647 _HA_ATOMIC_AND(&sleeping_thread_mask, ~tid_bit);
Olivier Houchard79321b92018-07-26 17:55:11 +02002648 } else
Willy Tarreau2ae84e42019-05-28 16:44:05 +02002649 wake = 0;
Olivier Houchard79321b92018-07-26 17:55:11 +02002650 }
Willy Tarreau10146c92015-04-13 20:44:19 +02002651
Willy Tarreau12b0d7b2020-03-23 09:27:28 +01002652 if (!wake) {
Willy Tarreaud1576822020-05-13 13:51:01 +02002653 int i;
2654
2655 if (stopping) {
Willy Tarreau12b0d7b2020-03-23 09:27:28 +01002656 _HA_ATOMIC_OR(&stopping_thread_mask, tid_bit);
Willy Tarreaud1576822020-05-13 13:51:01 +02002657 /* notify all threads that stopping was just set */
2658 for (i = 0; i < global.nbthread; i++)
2659 if (((all_threads_mask & ~stopping_thread_mask) >> i) & 1)
2660 wake_thread(i);
2661 }
Willy Tarreau12b0d7b2020-03-23 09:27:28 +01002662
2663 /* stop when there's nothing left to do */
2664 if ((jobs - unstoppable_jobs) == 0 &&
Willy Tarreaud1576822020-05-13 13:51:01 +02002665 (stopping_thread_mask & all_threads_mask) == all_threads_mask) {
2666 /* wake all threads waiting on jobs==0 */
2667 for (i = 0; i < global.nbthread; i++)
2668 if (((all_threads_mask & ~tid_bit) >> i) & 1)
2669 wake_thread(i);
Willy Tarreau12b0d7b2020-03-23 09:27:28 +01002670 break;
Willy Tarreaud1576822020-05-13 13:51:01 +02002671 }
Willy Tarreau12b0d7b2020-03-23 09:27:28 +01002672 }
2673
Willy Tarreau58b458d2008-06-29 22:40:23 +02002674 /* The poller will ensure it returns around <next> */
Willy Tarreau2ae84e42019-05-28 16:44:05 +02002675 cur_poller.poll(&cur_poller, next, wake);
Olivier Houchard79321b92018-07-26 17:55:11 +02002676 if (sleeping_thread_mask & tid_bit)
Olivier Houchardb23a61f2019-03-08 18:51:17 +01002677 _HA_ATOMIC_AND(&sleeping_thread_mask, ~tid_bit);
Willy Tarreau033cd9d2014-01-25 19:24:15 +01002678 fd_process_cached_events();
Emeric Brun64cc49c2017-10-03 14:46:45 +02002679
Willy Tarreaud80cb4e2018-01-20 19:30:13 +01002680 activity[tid].loops++;
Willy Tarreau4f60f162007-04-08 16:39:58 +02002681 }
2682}
2683
Christopher Faulet1d17c102017-08-29 15:38:48 +02002684static void *run_thread_poll_loop(void *data)
2685{
Willy Tarreau082b6282019-05-22 14:42:12 +02002686 struct per_thread_alloc_fct *ptaf;
Christopher Faulet1d17c102017-08-29 15:38:48 +02002687 struct per_thread_init_fct *ptif;
2688 struct per_thread_deinit_fct *ptdf;
Willy Tarreau082b6282019-05-22 14:42:12 +02002689 struct per_thread_free_fct *ptff;
Willy Tarreau34a150c2019-06-11 09:16:41 +02002690 static int init_left = 0;
2691 __decl_hathreads(static pthread_mutex_t init_mutex = PTHREAD_MUTEX_INITIALIZER);
2692 __decl_hathreads(static pthread_cond_t init_cond = PTHREAD_COND_INITIALIZER);
Christopher Faulet1d17c102017-08-29 15:38:48 +02002693
Willy Tarreaub4f7cc32019-05-03 09:27:30 +02002694 ha_set_tid((unsigned long)data);
Willy Tarreau91e6df02019-05-03 17:21:18 +02002695
Willy Tarreauf6178242019-05-21 19:46:58 +02002696#if (_POSIX_TIMERS > 0) && defined(_POSIX_THREAD_CPUTIME)
Willy Tarreau91e6df02019-05-03 17:21:18 +02002697#ifdef USE_THREAD
Willy Tarreau8323a372019-05-20 18:57:53 +02002698 pthread_getcpuclockid(pthread_self(), &ti->clock_id);
Willy Tarreau624dcbf2019-05-20 20:23:06 +02002699#else
Willy Tarreau8323a372019-05-20 18:57:53 +02002700 ti->clock_id = CLOCK_THREAD_CPUTIME_ID;
Willy Tarreau91e6df02019-05-03 17:21:18 +02002701#endif
Willy Tarreau663fda42019-05-21 15:14:08 +02002702#endif
Willy Tarreau6ec902a2019-06-07 14:41:11 +02002703 /* Now, initialize one thread init at a time. This is better since
2704 * some init code is a bit tricky and may release global resources
2705 * after reallocating them locally. This will also ensure there is
2706 * no race on file descriptors allocation.
2707 */
Willy Tarreau34a150c2019-06-11 09:16:41 +02002708#ifdef USE_THREAD
2709 pthread_mutex_lock(&init_mutex);
2710#endif
2711 /* The first thread must set the number of threads left */
2712 if (!init_left)
2713 init_left = global.nbthread;
2714 init_left--;
Willy Tarreau91e6df02019-05-03 17:21:18 +02002715
Christopher Faulet1d17c102017-08-29 15:38:48 +02002716 tv_update_date(-1,-1);
2717
Willy Tarreau082b6282019-05-22 14:42:12 +02002718 /* per-thread alloc calls performed here are not allowed to snoop on
2719 * other threads, so they are free to initialize at their own rhythm
2720 * as long as they act as if they were alone. None of them may rely
2721 * on resources initialized by the other ones.
2722 */
2723 list_for_each_entry(ptaf, &per_thread_alloc_list, list) {
2724 if (!ptaf->fct()) {
2725 ha_alert("failed to allocate resources for thread %u.\n", tid);
2726 exit(1);
2727 }
2728 }
2729
Willy Tarreau3078e9f2019-05-20 10:50:43 +02002730 /* per-thread init calls performed here are not allowed to snoop on
2731 * other threads, so they are free to initialize at their own rhythm
2732 * as long as they act as if they were alone.
2733 */
Christopher Faulet1d17c102017-08-29 15:38:48 +02002734 list_for_each_entry(ptif, &per_thread_init_list, list) {
2735 if (!ptif->fct()) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002736 ha_alert("failed to initialize thread %u.\n", tid);
Christopher Faulet1d17c102017-08-29 15:38:48 +02002737 exit(1);
2738 }
2739 }
2740
Willy Tarreau71092822019-06-10 09:51:04 +02002741 /* enabling protocols will result in fd_insert() calls to be performed,
2742 * we want all threads to have already allocated their local fd tables
Willy Tarreau34a150c2019-06-11 09:16:41 +02002743 * before doing so, thus only the last thread does it.
Willy Tarreau71092822019-06-10 09:51:04 +02002744 */
Willy Tarreau34a150c2019-06-11 09:16:41 +02002745 if (init_left == 0)
Willy Tarreaue4d7c9d2019-06-10 10:14:52 +02002746 protocol_enable_all();
Willy Tarreau6ec902a2019-06-07 14:41:11 +02002747
Willy Tarreau34a150c2019-06-11 09:16:41 +02002748#ifdef USE_THREAD
2749 pthread_cond_broadcast(&init_cond);
2750 pthread_mutex_unlock(&init_mutex);
2751
2752 /* now wait for other threads to finish starting */
2753 pthread_mutex_lock(&init_mutex);
2754 while (init_left)
2755 pthread_cond_wait(&init_cond, &init_mutex);
2756 pthread_mutex_unlock(&init_mutex);
2757#endif
Willy Tarreau3078e9f2019-05-20 10:50:43 +02002758
Christopher Faulet1d17c102017-08-29 15:38:48 +02002759 run_poll_loop();
2760
2761 list_for_each_entry(ptdf, &per_thread_deinit_list, list)
2762 ptdf->fct();
2763
Willy Tarreau082b6282019-05-22 14:42:12 +02002764 list_for_each_entry(ptff, &per_thread_free_list, list)
2765 ptff->fct();
2766
Christopher Fauletcd7879a2017-10-27 13:53:47 +02002767#ifdef USE_THREAD
Olivier Houchardb23a61f2019-03-08 18:51:17 +01002768 _HA_ATOMIC_AND(&all_threads_mask, ~tid_bit);
Christopher Fauletcd7879a2017-10-27 13:53:47 +02002769 if (tid > 0)
2770 pthread_exit(NULL);
Christopher Faulet1d17c102017-08-29 15:38:48 +02002771#endif
Christopher Fauletcd7879a2017-10-27 13:53:47 +02002772 return NULL;
2773}
Christopher Faulet1d17c102017-08-29 15:38:48 +02002774
Willy Tarreaue9b26022011-08-01 20:57:55 +02002775/* This is the global management task for listeners. It enables listeners waiting
2776 * for global resources when there are enough free resource, or at least once in
2777 * a while. It is designed to be called as a task.
2778 */
Olivier Houchard9f6af332018-05-25 14:04:04 +02002779static struct task *manage_global_listener_queue(struct task *t, void *context, unsigned short state)
Willy Tarreaue9b26022011-08-01 20:57:55 +02002780{
2781 int next = TICK_ETERNITY;
Willy Tarreaue9b26022011-08-01 20:57:55 +02002782 /* queue is empty, nothing to do */
2783 if (LIST_ISEMPTY(&global_listener_queue))
2784 goto out;
2785
2786 /* If there are still too many concurrent connections, let's wait for
2787 * some of them to go away. We don't need to re-arm the timer because
2788 * each of them will scan the queue anyway.
2789 */
2790 if (unlikely(actconn >= global.maxconn))
2791 goto out;
2792
2793 /* We should periodically try to enable listeners waiting for a global
2794 * resource here, because it is possible, though very unlikely, that
2795 * they have been blocked by a temporary lack of global resource such
2796 * as a file descriptor or memory and that the temporary condition has
2797 * disappeared.
2798 */
Willy Tarreauabacc2c2011-09-07 14:26:33 +02002799 dequeue_all_listeners(&global_listener_queue);
Willy Tarreaue9b26022011-08-01 20:57:55 +02002800
2801 out:
2802 t->expire = next;
2803 task_queue(t);
2804 return t;
2805}
Willy Tarreau4f60f162007-04-08 16:39:58 +02002806
Willy Tarreaubaaee002006-06-26 02:48:02 +02002807int main(int argc, char **argv)
2808{
2809 int err, retry;
2810 struct rlimit limit;
Emeric Bruncf20bf12010-10-22 16:06:11 +02002811 char errmsg[100];
Willy Tarreau269ab312012-09-05 08:02:48 +02002812 int pidfd = -1;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002813
Olivier Houchard5fa300d2018-02-03 15:15:21 +01002814 setvbuf(stdout, NULL, _IONBF, 0);
Willy Tarreau5794fb02018-11-25 18:43:29 +01002815
Willy Tarreauff9c9142019-02-07 10:39:36 +01002816 /* this can only safely be done here, though it's optimized away by
2817 * the compiler.
2818 */
2819 if (MAX_PROCS < 1 || MAX_PROCS > LONGBITS) {
2820 ha_alert("MAX_PROCS value must be between 1 and %d inclusive; "
2821 "HAProxy was built with value %d, please fix it and rebuild.\n",
2822 LONGBITS, MAX_PROCS);
2823 exit(1);
2824 }
2825
Willy Tarreaubf696402019-03-01 10:09:28 +01002826 /* take a copy of initial limits before we possibly change them */
2827 getrlimit(RLIMIT_NOFILE, &limit);
2828 rlim_fd_cur_at_boot = limit.rlim_cur;
2829 rlim_fd_max_at_boot = limit.rlim_max;
2830
Willy Tarreau5794fb02018-11-25 18:43:29 +01002831 /* process all initcalls in order of potential dependency */
2832 RUN_INITCALLS(STG_PREPARE);
2833 RUN_INITCALLS(STG_LOCK);
2834 RUN_INITCALLS(STG_ALLOC);
2835 RUN_INITCALLS(STG_POOL);
2836 RUN_INITCALLS(STG_REGISTER);
2837 RUN_INITCALLS(STG_INIT);
2838
Emeric Bruncf20bf12010-10-22 16:06:11 +02002839 init(argc, argv);
Willy Tarreau24f4efa2010-08-27 17:56:48 +02002840 signal_register_fct(SIGQUIT, dump, SIGQUIT);
2841 signal_register_fct(SIGUSR1, sig_soft_stop, SIGUSR1);
2842 signal_register_fct(SIGHUP, sig_dump_state, SIGHUP);
William Lallemand73b85e72017-06-01 17:38:51 +02002843 signal_register_fct(SIGUSR2, NULL, 0);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002844
Willy Tarreaue437c442010-03-17 18:02:46 +01002845 /* Always catch SIGPIPE even on platforms which define MSG_NOSIGNAL.
2846 * Some recent FreeBSD setups report broken pipes, and MSG_NOSIGNAL
2847 * was defined there, so let's stay on the safe side.
Willy Tarreaubaaee002006-06-26 02:48:02 +02002848 */
Willy Tarreau24f4efa2010-08-27 17:56:48 +02002849 signal_register_fct(SIGPIPE, NULL, 0);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002850
Willy Tarreaudc23a922011-02-16 11:10:36 +01002851 /* ulimits */
2852 if (!global.rlimit_nofile)
2853 global.rlimit_nofile = global.maxsock;
2854
2855 if (global.rlimit_nofile) {
Willy Tarreaue5cfdac2019-03-01 10:32:05 +01002856 limit.rlim_cur = global.rlimit_nofile;
2857 limit.rlim_max = MAX(rlim_fd_max_at_boot, limit.rlim_cur);
2858
Willy Tarreaudc23a922011-02-16 11:10:36 +01002859 if (setrlimit(RLIMIT_NOFILE, &limit) == -1) {
Willy Tarreauef635472016-06-21 11:48:18 +02002860 /* try to set it to the max possible at least */
2861 getrlimit(RLIMIT_NOFILE, &limit);
Willy Tarreau164dd0b2016-06-21 11:51:59 +02002862 limit.rlim_cur = limit.rlim_max;
2863 if (setrlimit(RLIMIT_NOFILE, &limit) != -1)
2864 getrlimit(RLIMIT_NOFILE, &limit);
2865
Christopher Faulet767a84b2017-11-24 16:50:31 +01002866 ha_warning("[%s.main()] Cannot raise FD limit to %d, limit is %d.\n", argv[0], global.rlimit_nofile, (int)limit.rlim_cur);
Willy Tarreauef635472016-06-21 11:48:18 +02002867 global.rlimit_nofile = limit.rlim_cur;
Willy Tarreaudc23a922011-02-16 11:10:36 +01002868 }
2869 }
2870
2871 if (global.rlimit_memmax) {
2872 limit.rlim_cur = limit.rlim_max =
Willy Tarreau70060452015-12-14 12:46:07 +01002873 global.rlimit_memmax * 1048576ULL;
Willy Tarreaudc23a922011-02-16 11:10:36 +01002874#ifdef RLIMIT_AS
2875 if (setrlimit(RLIMIT_AS, &limit) == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002876 ha_warning("[%s.main()] Cannot fix MEM limit to %d megs.\n",
2877 argv[0], global.rlimit_memmax);
Willy Tarreaudc23a922011-02-16 11:10:36 +01002878 }
2879#else
2880 if (setrlimit(RLIMIT_DATA, &limit) == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002881 ha_warning("[%s.main()] Cannot fix MEM limit to %d megs.\n",
2882 argv[0], global.rlimit_memmax);
Willy Tarreaudc23a922011-02-16 11:10:36 +01002883 }
2884#endif
2885 }
2886
Olivier Houchardf73629d2017-04-05 22:33:04 +02002887 if (old_unixsocket) {
William Lallemand85b0bd92017-06-01 17:38:53 +02002888 if (strcmp("/dev/null", old_unixsocket) != 0) {
2889 if (get_old_sockets(old_unixsocket) != 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002890 ha_alert("Failed to get the sockets from the old process!\n");
William Lallemand85b0bd92017-06-01 17:38:53 +02002891 if (!(global.mode & MODE_MWORKER))
2892 exit(1);
2893 }
Olivier Houchardf73629d2017-04-05 22:33:04 +02002894 }
2895 }
William Lallemand85b0bd92017-06-01 17:38:53 +02002896 get_cur_unixsocket();
2897
Willy Tarreaubaaee002006-06-26 02:48:02 +02002898 /* We will loop at most 100 times with 10 ms delay each time.
2899 * That's at most 1 second. We only send a signal to old pids
2900 * if we cannot grab at least one port.
2901 */
2902 retry = MAX_START_RETRIES;
2903 err = ERR_NONE;
2904 while (retry >= 0) {
2905 struct timeval w;
2906 err = start_proxies(retry == 0 || nb_oldpids == 0);
Willy Tarreaue13e9252007-12-20 23:05:50 +01002907 /* exit the loop on no error or fatal error */
2908 if ((err & (ERR_RETRYABLE|ERR_FATAL)) != ERR_RETRYABLE)
Willy Tarreaubaaee002006-06-26 02:48:02 +02002909 break;
Willy Tarreaubb545b42010-08-25 12:58:59 +02002910 if (nb_oldpids == 0 || retry == 0)
Willy Tarreaubaaee002006-06-26 02:48:02 +02002911 break;
2912
2913 /* FIXME-20060514: Solaris and OpenBSD do not support shutdown() on
2914 * listening sockets. So on those platforms, it would be wiser to
2915 * simply send SIGUSR1, which will not be undoable.
2916 */
Willy Tarreaubb545b42010-08-25 12:58:59 +02002917 if (tell_old_pids(SIGTTOU) == 0) {
2918 /* no need to wait if we can't contact old pids */
2919 retry = 0;
2920 continue;
2921 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002922 /* give some time to old processes to stop listening */
2923 w.tv_sec = 0;
2924 w.tv_usec = 10*1000;
2925 select(0, NULL, NULL, NULL, &w);
2926 retry--;
2927 }
2928
2929 /* Note: start_proxies() sends an alert when it fails. */
Willy Tarreau0a3b9d92009-02-04 17:05:23 +01002930 if ((err & ~ERR_WARN) != ERR_NONE) {
Willy Tarreauf68da462009-06-09 14:36:00 +02002931 if (retry != MAX_START_RETRIES && nb_oldpids) {
2932 protocol_unbind_all(); /* cleanup everything we can */
Willy Tarreaubaaee002006-06-26 02:48:02 +02002933 tell_old_pids(SIGTTIN);
Willy Tarreauf68da462009-06-09 14:36:00 +02002934 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002935 exit(1);
2936 }
2937
William Lallemand944e6192018-11-21 15:48:31 +01002938 if (!(global.mode & MODE_MWORKER_WAIT) && listeners == 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002939 ha_alert("[%s.main()] No enabled listener found (check for 'bind' directives) ! Exiting.\n", argv[0]);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002940 /* Note: we don't have to send anything to the old pids because we
2941 * never stopped them. */
2942 exit(1);
2943 }
2944
Emeric Bruncf20bf12010-10-22 16:06:11 +02002945 err = protocol_bind_all(errmsg, sizeof(errmsg));
2946 if ((err & ~ERR_WARN) != ERR_NONE) {
2947 if ((err & ERR_ALERT) || (err & ERR_WARN))
Christopher Faulet767a84b2017-11-24 16:50:31 +01002948 ha_alert("[%s.main()] %s.\n", argv[0], errmsg);
Emeric Bruncf20bf12010-10-22 16:06:11 +02002949
Christopher Faulet767a84b2017-11-24 16:50:31 +01002950 ha_alert("[%s.main()] Some protocols failed to start their listeners! Exiting.\n", argv[0]);
Willy Tarreaudd815982007-10-16 12:25:14 +02002951 protocol_unbind_all(); /* cleanup everything we can */
2952 if (nb_oldpids)
2953 tell_old_pids(SIGTTIN);
2954 exit(1);
Emeric Bruncf20bf12010-10-22 16:06:11 +02002955 } else if (err & ERR_WARN) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002956 ha_alert("[%s.main()] %s.\n", argv[0], errmsg);
Willy Tarreaudd815982007-10-16 12:25:14 +02002957 }
Olivier Houchardf73629d2017-04-05 22:33:04 +02002958 /* Ok, all listener should now be bound, close any leftover sockets
2959 * the previous process gave us, we don't need them anymore
2960 */
2961 while (xfer_sock_list != NULL) {
2962 struct xfer_sock_list *tmpxfer = xfer_sock_list->next;
2963 close(xfer_sock_list->fd);
2964 free(xfer_sock_list->iface);
2965 free(xfer_sock_list->namespace);
2966 free(xfer_sock_list);
2967 xfer_sock_list = tmpxfer;
2968 }
Willy Tarreaudd815982007-10-16 12:25:14 +02002969
Willy Tarreaubaaee002006-06-26 02:48:02 +02002970 /* prepare pause/play signals */
Willy Tarreau24f4efa2010-08-27 17:56:48 +02002971 signal_register_fct(SIGTTOU, sig_pause, SIGTTOU);
2972 signal_register_fct(SIGTTIN, sig_listen, SIGTTIN);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002973
Willy Tarreaubaaee002006-06-26 02:48:02 +02002974 /* MODE_QUIET can inhibit alerts and warnings below this line */
2975
PiBa-NL149a81a2017-12-25 21:03:31 +01002976 if (getenv("HAPROXY_MWORKER_REEXEC") != NULL) {
2977 /* either stdin/out/err are already closed or should stay as they are. */
2978 if ((global.mode & MODE_DAEMON)) {
2979 /* daemon mode re-executing, stdin/stdout/stderr are already closed so keep quiet */
2980 global.mode &= ~MODE_VERBOSE;
2981 global.mode |= MODE_QUIET; /* ensure that we won't say anything from now */
2982 }
2983 } else {
2984 if ((global.mode & MODE_QUIET) && !(global.mode & MODE_VERBOSE)) {
2985 /* detach from the tty */
William Lallemande1340412017-12-28 16:09:36 +01002986 stdio_quiet(-1);
PiBa-NL149a81a2017-12-25 21:03:31 +01002987 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002988 }
2989
2990 /* open log & pid files before the chroot */
William Lallemand80293002017-11-06 11:00:03 +01002991 if ((global.mode & MODE_DAEMON || global.mode & MODE_MWORKER) && global.pidfile != NULL) {
Willy Tarreaubaaee002006-06-26 02:48:02 +02002992 unlink(global.pidfile);
2993 pidfd = open(global.pidfile, O_CREAT | O_WRONLY | O_TRUNC, 0644);
2994 if (pidfd < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002995 ha_alert("[%s.main()] Cannot create pidfile %s\n", argv[0], global.pidfile);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002996 if (nb_oldpids)
2997 tell_old_pids(SIGTTIN);
Willy Tarreaudd815982007-10-16 12:25:14 +02002998 protocol_unbind_all();
Willy Tarreaubaaee002006-06-26 02:48:02 +02002999 exit(1);
3000 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02003001 }
3002
Willy Tarreaub38651a2007-03-24 17:24:39 +01003003 if ((global.last_checks & LSTCHK_NETADM) && global.uid) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003004 ha_alert("[%s.main()] Some configuration options require full privileges, so global.uid cannot be changed.\n"
3005 "", argv[0]);
Willy Tarreaudd815982007-10-16 12:25:14 +02003006 protocol_unbind_all();
Willy Tarreaub38651a2007-03-24 17:24:39 +01003007 exit(1);
3008 }
3009
Willy Tarreau4e30ed72009-02-04 18:02:48 +01003010 /* If the user is not root, we'll still let him try the configuration
3011 * but we inform him that unexpected behaviour may occur.
3012 */
3013 if ((global.last_checks & LSTCHK_NETADM) && getuid())
Christopher Faulet767a84b2017-11-24 16:50:31 +01003014 ha_warning("[%s.main()] Some options which require full privileges"
3015 " might not work well.\n"
3016 "", argv[0]);
Willy Tarreau4e30ed72009-02-04 18:02:48 +01003017
William Lallemand095ba4c2017-06-01 17:38:50 +02003018 if ((global.mode & (MODE_MWORKER|MODE_DAEMON)) == 0) {
3019
3020 /* chroot if needed */
3021 if (global.chroot != NULL) {
3022 if (chroot(global.chroot) == -1 || chdir("/") == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003023 ha_alert("[%s.main()] Cannot chroot(%s).\n", argv[0], global.chroot);
William Lallemand095ba4c2017-06-01 17:38:50 +02003024 if (nb_oldpids)
3025 tell_old_pids(SIGTTIN);
3026 protocol_unbind_all();
3027 exit(1);
3028 }
Willy Tarreauf223cc02007-10-15 18:57:08 +02003029 }
Willy Tarreauf223cc02007-10-15 18:57:08 +02003030 }
3031
William Lallemand944e6192018-11-21 15:48:31 +01003032 if (nb_oldpids && !(global.mode & MODE_MWORKER_WAIT))
Willy Tarreaubb545b42010-08-25 12:58:59 +02003033 nb_oldpids = tell_old_pids(oldpids_sig);
Willy Tarreaubaaee002006-06-26 02:48:02 +02003034
William Lallemand27edc4b2019-05-07 17:49:33 +02003035 /* send a SIGTERM to workers who have a too high reloads number */
3036 if ((global.mode & MODE_MWORKER) && !(global.mode & MODE_MWORKER_WAIT))
3037 mworker_kill_max_reloads(SIGTERM);
3038
William Lallemand8a361b52017-06-20 11:20:33 +02003039 if ((getenv("HAPROXY_MWORKER_REEXEC") == NULL)) {
3040 nb_oldpids = 0;
3041 free(oldpids);
3042 oldpids = NULL;
3043 }
3044
3045
Willy Tarreaubaaee002006-06-26 02:48:02 +02003046 /* Note that any error at this stage will be fatal because we will not
3047 * be able to restart the old pids.
3048 */
3049
William Lallemand095ba4c2017-06-01 17:38:50 +02003050 if ((global.mode & (MODE_MWORKER|MODE_DAEMON)) == 0) {
3051 /* setgid / setuid */
3052 if (global.gid) {
3053 if (getgroups(0, NULL) > 0 && setgroups(0, NULL) == -1)
Christopher Faulet767a84b2017-11-24 16:50:31 +01003054 ha_warning("[%s.main()] Failed to drop supplementary groups. Using 'gid'/'group'"
3055 " without 'uid'/'user' is generally useless.\n", argv[0]);
William Lallemand095ba4c2017-06-01 17:38:50 +02003056
3057 if (setgid(global.gid) == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003058 ha_alert("[%s.main()] Cannot set gid %d.\n", argv[0], global.gid);
William Lallemand095ba4c2017-06-01 17:38:50 +02003059 protocol_unbind_all();
3060 exit(1);
3061 }
3062 }
Michael Schererab012dd2013-01-12 18:35:19 +01003063
William Lallemand095ba4c2017-06-01 17:38:50 +02003064 if (global.uid && setuid(global.uid) == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003065 ha_alert("[%s.main()] Cannot set uid %d.\n", argv[0], global.uid);
Michael Schererab012dd2013-01-12 18:35:19 +01003066 protocol_unbind_all();
3067 exit(1);
3068 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02003069 }
Willy Tarreau636848a2019-04-15 19:38:50 +02003070
Willy Tarreaubaaee002006-06-26 02:48:02 +02003071 /* check ulimits */
3072 limit.rlim_cur = limit.rlim_max = 0;
3073 getrlimit(RLIMIT_NOFILE, &limit);
3074 if (limit.rlim_cur < global.maxsock) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003075 ha_warning("[%s.main()] FD limit (%d) too low for maxconn=%d/maxsock=%d. Please raise 'ulimit-n' to %d or more to avoid any trouble.\n",
3076 argv[0], (int)limit.rlim_cur, global.maxconn, global.maxsock, global.maxsock);
Willy Tarreaubaaee002006-06-26 02:48:02 +02003077 }
3078
William Lallemand944e6192018-11-21 15:48:31 +01003079 if (global.mode & (MODE_DAEMON | MODE_MWORKER | MODE_MWORKER_WAIT)) {
Willy Tarreau0b9c02c2009-02-04 22:05:05 +01003080 struct proxy *px;
Willy Tarreauf83d3fe2015-05-01 19:13:41 +02003081 struct peers *curpeers;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003082 int ret = 0;
3083 int proc;
William Lallemande1340412017-12-28 16:09:36 +01003084 int devnullfd = -1;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003085
William Lallemand095ba4c2017-06-01 17:38:50 +02003086 /*
3087 * if daemon + mworker: must fork here to let a master
3088 * process live in background before forking children
3089 */
William Lallemand73b85e72017-06-01 17:38:51 +02003090
3091 if ((getenv("HAPROXY_MWORKER_REEXEC") == NULL)
3092 && (global.mode & MODE_MWORKER)
3093 && (global.mode & MODE_DAEMON)) {
William Lallemand095ba4c2017-06-01 17:38:50 +02003094 ret = fork();
3095 if (ret < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003096 ha_alert("[%s.main()] Cannot fork.\n", argv[0]);
William Lallemand095ba4c2017-06-01 17:38:50 +02003097 protocol_unbind_all();
3098 exit(1); /* there has been an error */
William Lallemandbfd8eb52018-07-04 15:31:23 +02003099 } else if (ret > 0) { /* parent leave to daemonize */
William Lallemand095ba4c2017-06-01 17:38:50 +02003100 exit(0);
William Lallemandbfd8eb52018-07-04 15:31:23 +02003101 } else /* change the process group ID in the child (master process) */
3102 setsid();
William Lallemand095ba4c2017-06-01 17:38:50 +02003103 }
William Lallemande20b6a62017-06-01 17:38:55 +02003104
William Lallemande20b6a62017-06-01 17:38:55 +02003105
William Lallemanddeed7802017-11-06 11:00:04 +01003106 /* if in master-worker mode, write the PID of the father */
3107 if (global.mode & MODE_MWORKER) {
3108 char pidstr[100];
Willy Tarreaueb7f0722019-06-22 07:41:38 +02003109 snprintf(pidstr, sizeof(pidstr), "%d\n", (int)getpid());
Willy Tarreau46ec48b2018-01-23 19:20:19 +01003110 if (pidfd >= 0)
3111 shut_your_big_mouth_gcc(write(pidfd, pidstr, strlen(pidstr)));
William Lallemanddeed7802017-11-06 11:00:04 +01003112 }
3113
Willy Tarreaubaaee002006-06-26 02:48:02 +02003114 /* the father launches the required number of processes */
William Lallemand944e6192018-11-21 15:48:31 +01003115 if (!(global.mode & MODE_MWORKER_WAIT)) {
William Lallemand9a1ee7a2019-04-01 11:30:02 +02003116 if (global.mode & MODE_MWORKER)
3117 mworker_ext_launch_all();
William Lallemand944e6192018-11-21 15:48:31 +01003118 for (proc = 0; proc < global.nbproc; proc++) {
3119 ret = fork();
3120 if (ret < 0) {
3121 ha_alert("[%s.main()] Cannot fork.\n", argv[0]);
3122 protocol_unbind_all();
3123 exit(1); /* there has been an error */
3124 }
Willy Tarreau861c4ef2020-03-08 00:42:37 +01003125 else if (ret == 0) { /* child breaks here */
3126 ha_random_jump96(relative_pid);
William Lallemand944e6192018-11-21 15:48:31 +01003127 break;
Willy Tarreau861c4ef2020-03-08 00:42:37 +01003128 }
William Lallemand944e6192018-11-21 15:48:31 +01003129 if (pidfd >= 0 && !(global.mode & MODE_MWORKER)) {
3130 char pidstr[100];
3131 snprintf(pidstr, sizeof(pidstr), "%d\n", ret);
3132 shut_your_big_mouth_gcc(write(pidfd, pidstr, strlen(pidstr)));
3133 }
3134 if (global.mode & MODE_MWORKER) {
3135 struct mworker_proc *child;
William Lallemandce83b4a2018-10-26 14:47:30 +02003136
William Lallemand220567e2018-11-21 18:04:53 +01003137 ha_notice("New worker #%d (%d) forked\n", relative_pid, ret);
William Lallemand944e6192018-11-21 15:48:31 +01003138 /* find the right mworker_proc */
3139 list_for_each_entry(child, &proc_list, list) {
3140 if (child->relative_pid == relative_pid &&
William Lallemand8f7069a2019-04-12 16:09:23 +02003141 child->reloads == 0 && child->options & PROC_O_TYPE_WORKER) {
William Lallemand944e6192018-11-21 15:48:31 +01003142 child->timestamp = now.tv_sec;
3143 child->pid = ret;
William Lallemand1dc69632019-06-12 19:11:33 +02003144 child->version = strdup(haproxy_version);
William Lallemand944e6192018-11-21 15:48:31 +01003145 break;
3146 }
William Lallemandce83b4a2018-10-26 14:47:30 +02003147 }
3148 }
William Lallemandbc193052018-09-11 10:06:26 +02003149
William Lallemand944e6192018-11-21 15:48:31 +01003150 relative_pid++; /* each child will get a different one */
3151 pid_bit <<= 1;
3152 }
3153 } else {
3154 /* wait mode */
3155 global.nbproc = 1;
3156 proc = 1;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003157 }
Willy Tarreaufc6c0322012-11-16 16:12:27 +01003158
3159#ifdef USE_CPU_AFFINITY
3160 if (proc < global.nbproc && /* child */
Willy Tarreauff9c9142019-02-07 10:39:36 +01003161 proc < MAX_PROCS && /* only the first 32/64 processes may be pinned */
Christopher Fauletcb6a9452017-11-22 16:50:41 +01003162 global.cpu_map.proc[proc]) /* only do this if the process has a CPU map */
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +02003163#ifdef __FreeBSD__
Olivier Houchard97148f62017-08-16 17:29:11 +02003164 {
3165 cpuset_t cpuset;
3166 int i;
Christopher Fauletcb6a9452017-11-22 16:50:41 +01003167 unsigned long cpu_map = global.cpu_map.proc[proc];
Olivier Houchard97148f62017-08-16 17:29:11 +02003168
3169 CPU_ZERO(&cpuset);
3170 while ((i = ffsl(cpu_map)) > 0) {
3171 CPU_SET(i - 1, &cpuset);
Cyril Bontéd400ab32018-03-12 21:47:39 +01003172 cpu_map &= ~(1UL << (i - 1));
Olivier Houchard97148f62017-08-16 17:29:11 +02003173 }
3174 ret = cpuset_setaffinity(CPU_LEVEL_WHICH, CPU_WHICH_PID, -1, sizeof(cpuset), &cpuset);
3175 }
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +02003176#else
Christopher Fauletcb6a9452017-11-22 16:50:41 +01003177 sched_setaffinity(0, sizeof(unsigned long), (void *)&global.cpu_map.proc[proc]);
Willy Tarreaufc6c0322012-11-16 16:12:27 +01003178#endif
Pieter Baauwcaa6a1b2015-09-17 21:26:40 +02003179#endif
Willy Tarreaubaaee002006-06-26 02:48:02 +02003180 /* close the pidfile both in children and father */
Willy Tarreau269ab312012-09-05 08:02:48 +02003181 if (pidfd >= 0) {
3182 //lseek(pidfd, 0, SEEK_SET); /* debug: emulate eglibc bug */
3183 close(pidfd);
3184 }
Willy Tarreaud137dd32010-08-25 12:49:05 +02003185
3186 /* We won't ever use this anymore */
Willy Tarreaud137dd32010-08-25 12:49:05 +02003187 free(global.pidfile); global.pidfile = NULL;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003188
Willy Tarreauedaff0a2015-05-01 17:01:08 +02003189 if (proc == global.nbproc) {
William Lallemand944e6192018-11-21 15:48:31 +01003190 if (global.mode & (MODE_MWORKER|MODE_MWORKER_WAIT)) {
PiBa-NLbaf6ea42017-11-28 23:26:08 +01003191
3192 if ((!(global.mode & MODE_QUIET) || (global.mode & MODE_VERBOSE)) &&
3193 (global.mode & MODE_DAEMON)) {
3194 /* detach from the tty, this is required to properly daemonize. */
William Lallemande1340412017-12-28 16:09:36 +01003195 if ((getenv("HAPROXY_MWORKER_REEXEC") == NULL))
3196 stdio_quiet(-1);
3197
PiBa-NLbaf6ea42017-11-28 23:26:08 +01003198 global.mode &= ~MODE_VERBOSE;
3199 global.mode |= MODE_QUIET; /* ensure that we won't say anything from now */
PiBa-NLbaf6ea42017-11-28 23:26:08 +01003200 }
3201
William Lallemandb3f2be32018-09-11 10:06:18 +02003202 mworker_loop();
William Lallemand1499b9b2017-06-07 15:04:47 +02003203 /* should never get there */
3204 exit(EXIT_FAILURE);
Willy Tarreauedaff0a2015-05-01 17:01:08 +02003205 }
William Lallemandcf4e4962017-06-08 19:05:48 +02003206#if defined(USE_OPENSSL) && !defined(OPENSSL_NO_DH)
Grant Zhang872f9c22017-01-21 01:10:18 +00003207 ssl_free_dh();
3208#endif
William Lallemand1499b9b2017-06-07 15:04:47 +02003209 exit(0); /* parent must leave */
Willy Tarreauedaff0a2015-05-01 17:01:08 +02003210 }
3211
William Lallemandcb11fd22017-06-01 17:38:52 +02003212 /* child must never use the atexit function */
3213 atexit_flag = 0;
3214
William Lallemandbc193052018-09-11 10:06:26 +02003215 /* close useless master sockets */
3216 if (global.mode & MODE_MWORKER) {
3217 struct mworker_proc *child, *it;
3218 master = 0;
3219
William Lallemand309dc9a2018-10-26 14:47:45 +02003220 mworker_cli_proxy_stop();
3221
William Lallemandbc193052018-09-11 10:06:26 +02003222 /* free proc struct of other processes */
3223 list_for_each_entry_safe(child, it, &proc_list, list) {
William Lallemandce83b4a2018-10-26 14:47:30 +02003224 /* close the FD of the master side for all
3225 * workers, we don't need to close the worker
3226 * side of other workers since it's done with
3227 * the bind_proc */
Tim Duesterhus742e0f92018-11-25 20:03:39 +01003228 if (child->ipc_fd[0] >= 0)
3229 close(child->ipc_fd[0]);
William Lallemandce83b4a2018-10-26 14:47:30 +02003230 if (child->relative_pid == relative_pid &&
3231 child->reloads == 0) {
3232 /* keep this struct if this is our pid */
3233 proc_self = child;
William Lallemandbc193052018-09-11 10:06:26 +02003234 continue;
William Lallemandce83b4a2018-10-26 14:47:30 +02003235 }
William Lallemandbc193052018-09-11 10:06:26 +02003236 LIST_DEL(&child->list);
Tim Duesterhus9b7a9762019-05-16 20:23:22 +02003237 mworker_free_child(child);
3238 child = NULL;
William Lallemandbc193052018-09-11 10:06:26 +02003239 }
3240 }
Willy Tarreau1605c7a2018-01-23 19:01:49 +01003241
William Lallemande1340412017-12-28 16:09:36 +01003242 if (!(global.mode & MODE_QUIET) || (global.mode & MODE_VERBOSE)) {
3243 devnullfd = open("/dev/null", O_RDWR, 0);
3244 if (devnullfd < 0) {
3245 ha_alert("Cannot open /dev/null\n");
3246 exit(EXIT_FAILURE);
3247 }
3248 }
3249
William Lallemand095ba4c2017-06-01 17:38:50 +02003250 /* Must chroot and setgid/setuid in the children */
3251 /* chroot if needed */
3252 if (global.chroot != NULL) {
3253 if (chroot(global.chroot) == -1 || chdir("/") == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003254 ha_alert("[%s.main()] Cannot chroot1(%s).\n", argv[0], global.chroot);
William Lallemand095ba4c2017-06-01 17:38:50 +02003255 if (nb_oldpids)
3256 tell_old_pids(SIGTTIN);
3257 protocol_unbind_all();
3258 exit(1);
3259 }
3260 }
3261
3262 free(global.chroot);
3263 global.chroot = NULL;
3264
3265 /* setgid / setuid */
3266 if (global.gid) {
3267 if (getgroups(0, NULL) > 0 && setgroups(0, NULL) == -1)
Christopher Faulet767a84b2017-11-24 16:50:31 +01003268 ha_warning("[%s.main()] Failed to drop supplementary groups. Using 'gid'/'group'"
3269 " without 'uid'/'user' is generally useless.\n", argv[0]);
William Lallemand095ba4c2017-06-01 17:38:50 +02003270
3271 if (setgid(global.gid) == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003272 ha_alert("[%s.main()] Cannot set gid %d.\n", argv[0], global.gid);
William Lallemand095ba4c2017-06-01 17:38:50 +02003273 protocol_unbind_all();
3274 exit(1);
3275 }
3276 }
3277
3278 if (global.uid && setuid(global.uid) == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003279 ha_alert("[%s.main()] Cannot set uid %d.\n", argv[0], global.uid);
William Lallemand095ba4c2017-06-01 17:38:50 +02003280 protocol_unbind_all();
3281 exit(1);
3282 }
3283
William Lallemand7f80eb22017-05-26 18:19:55 +02003284 /* pass through every cli socket, and check if it's bound to
3285 * the current process and if it exposes listeners sockets.
3286 * Caution: the GTUNE_SOCKET_TRANSFER is now set after the fork.
3287 * */
3288
3289 if (global.stats_fe) {
3290 struct bind_conf *bind_conf;
3291
3292 list_for_each_entry(bind_conf, &global.stats_fe->conf.bind, by_fe) {
3293 if (bind_conf->level & ACCESS_FD_LISTENERS) {
3294 if (!bind_conf->bind_proc || bind_conf->bind_proc & (1UL << proc)) {
3295 global.tune.options |= GTUNE_SOCKET_TRANSFER;
3296 break;
3297 }
3298 }
3299 }
3300 }
3301
Willy Tarreau0b9c02c2009-02-04 22:05:05 +01003302 /* we might have to unbind some proxies from some processes */
Olivier Houchardfbc74e82017-11-24 16:54:05 +01003303 px = proxies_list;
Willy Tarreau0b9c02c2009-02-04 22:05:05 +01003304 while (px != NULL) {
3305 if (px->bind_proc && px->state != PR_STSTOPPED) {
Olivier Houchard1fc05162017-04-06 01:05:05 +02003306 if (!(px->bind_proc & (1UL << proc))) {
3307 if (global.tune.options & GTUNE_SOCKET_TRANSFER)
3308 zombify_proxy(px);
3309 else
3310 stop_proxy(px);
3311 }
Willy Tarreau0b9c02c2009-02-04 22:05:05 +01003312 }
3313 px = px->next;
3314 }
3315
Willy Tarreauf83d3fe2015-05-01 19:13:41 +02003316 /* we might have to unbind some peers sections from some processes */
Frédéric Lécailleed2b4a62017-07-13 09:07:09 +02003317 for (curpeers = cfg_peers; curpeers; curpeers = curpeers->next) {
Willy Tarreauf83d3fe2015-05-01 19:13:41 +02003318 if (!curpeers->peers_fe)
3319 continue;
3320
3321 if (curpeers->peers_fe->bind_proc & (1UL << proc))
3322 continue;
3323
3324 stop_proxy(curpeers->peers_fe);
3325 /* disable this peer section so that it kills itself */
Willy Tarreau47c8c022015-09-28 16:39:25 +02003326 signal_unregister_handler(curpeers->sighandler);
Olivier Houchard3f795f72019-04-17 22:51:06 +02003327 task_destroy(curpeers->sync_task);
Willy Tarreau47c8c022015-09-28 16:39:25 +02003328 curpeers->sync_task = NULL;
Olivier Houchard3f795f72019-04-17 22:51:06 +02003329 task_destroy(curpeers->peers_fe->task);
Willy Tarreau47c8c022015-09-28 16:39:25 +02003330 curpeers->peers_fe->task = NULL;
Willy Tarreauf83d3fe2015-05-01 19:13:41 +02003331 curpeers->peers_fe = NULL;
3332 }
3333
William Lallemand2e8fad92018-11-13 16:18:23 +01003334 /*
3335 * This is only done in daemon mode because we might want the
3336 * logs on stdout in mworker mode. If we're NOT in QUIET mode,
3337 * we should now close the 3 first FDs to ensure that we can
3338 * detach from the TTY. We MUST NOT do it in other cases since
3339 * it would have already be done, and 0-2 would have been
3340 * affected to listening sockets
Willy Tarreaubaaee002006-06-26 02:48:02 +02003341 */
William Lallemand2e8fad92018-11-13 16:18:23 +01003342 if ((global.mode & MODE_DAEMON) &&
3343 (!(global.mode & MODE_QUIET) || (global.mode & MODE_VERBOSE))) {
Willy Tarreaubaaee002006-06-26 02:48:02 +02003344 /* detach from the tty */
William Lallemande1340412017-12-28 16:09:36 +01003345 stdio_quiet(devnullfd);
Willy Tarreau106cb762008-11-16 07:40:34 +01003346 global.mode &= ~MODE_VERBOSE;
Willy Tarreaubaaee002006-06-26 02:48:02 +02003347 global.mode |= MODE_QUIET; /* ensure that we won't say anything from now */
3348 }
3349 pid = getpid(); /* update child's pid */
William Lallemandbfd8eb52018-07-04 15:31:23 +02003350 if (!(global.mode & MODE_MWORKER)) /* in mworker mode we don't want a new pgid for the children */
3351 setsid();
Willy Tarreau2ff76222007-04-09 19:29:56 +02003352 fork_poller();
Willy Tarreaubaaee002006-06-26 02:48:02 +02003353 }
3354
William Dauchycaf02112019-11-19 10:11:36 +01003355 /* try our best to re-enable core dumps depending on system capabilities.
3356 * What is addressed here :
3357 * - remove file size limits
3358 * - remove core size limits
3359 * - mark the process dumpable again if it lost it due to user/group
3360 */
3361 if (global.tune.options & GTUNE_SET_DUMPABLE) {
3362 limit.rlim_cur = limit.rlim_max = RLIM_INFINITY;
3363
3364#if defined(RLIMIT_FSIZE)
3365 if (setrlimit(RLIMIT_FSIZE, &limit) == -1)
3366 ha_warning("[%s.main()] Failed to set the raise the maximum file size.\n", argv[0]);
3367#endif
3368
3369#if defined(RLIMIT_CORE)
3370 if (setrlimit(RLIMIT_CORE, &limit) == -1)
3371 ha_warning("[%s.main()] Failed to set the raise the core dump size.\n", argv[0]);
3372#endif
3373
3374#if defined(USE_PRCTL)
3375 if (prctl(PR_SET_DUMPABLE, 1, 0, 0, 0) == -1)
3376 ha_warning("[%s.main()] Failed to set the dumpable flag, no core will be dumped.\n", argv[0]);
3377#endif
3378 }
3379
Christopher Faulete3a5e352017-10-24 13:53:54 +02003380 global.mode &= ~MODE_STARTING;
Willy Tarreau4f60f162007-04-08 16:39:58 +02003381 /*
3382 * That's it : the central polling loop. Run until we stop.
3383 */
Christopher Faulet1d17c102017-08-29 15:38:48 +02003384#ifdef USE_THREAD
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003385 {
William Lallemand1aab50b2018-06-07 09:46:01 +02003386 sigset_t blocked_sig, old_sig;
Willy Tarreauc40efc12019-05-03 09:22:44 +02003387 int i;
3388
William Lallemand1aab50b2018-06-07 09:46:01 +02003389 /* ensure the signals will be blocked in every thread */
3390 sigfillset(&blocked_sig);
3391 sigdelset(&blocked_sig, SIGPROF);
3392 sigdelset(&blocked_sig, SIGBUS);
3393 sigdelset(&blocked_sig, SIGFPE);
3394 sigdelset(&blocked_sig, SIGILL);
3395 sigdelset(&blocked_sig, SIGSEGV);
3396 pthread_sigmask(SIG_SETMASK, &blocked_sig, &old_sig);
3397
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003398 /* Create nbthread-1 thread. The first thread is the current process */
Willy Tarreau522cfbc2019-05-03 10:16:39 +02003399 thread_info[0].pthread = pthread_self();
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003400 for (i = 1; i < global.nbthread; i++)
Willy Tarreau522cfbc2019-05-03 10:16:39 +02003401 pthread_create(&thread_info[i].pthread, NULL, &run_thread_poll_loop, (void *)(long)i);
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003402
Christopher Faulet62519022017-10-16 15:49:32 +02003403#ifdef USE_CPU_AFFINITY
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003404 /* Now the CPU affinity for all threads */
Willy Tarreau47b00ae2019-07-16 15:10:34 +02003405 if (global.cpu_map.proc_t1[relative_pid-1])
3406 global.cpu_map.thread[0] &= global.cpu_map.proc_t1[relative_pid-1];
3407
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003408 for (i = 0; i < global.nbthread; i++) {
Christopher Fauletcb6a9452017-11-22 16:50:41 +01003409 if (global.cpu_map.proc[relative_pid-1])
Willy Tarreau81492c92019-05-03 09:41:23 +02003410 global.cpu_map.thread[i] &= global.cpu_map.proc[relative_pid-1];
Christopher Faulet62519022017-10-16 15:49:32 +02003411
Willy Tarreau421f02e2018-01-20 18:19:22 +01003412 if (i < MAX_THREADS && /* only the first 32/64 threads may be pinned */
Willy Tarreau81492c92019-05-03 09:41:23 +02003413 global.cpu_map.thread[i]) {/* only do this if the thread has a THREAD map */
Olivier Houchard829aa242017-12-01 18:19:43 +01003414#if defined(__FreeBSD__) || defined(__NetBSD__)
3415 cpuset_t cpuset;
3416#else
3417 cpu_set_t cpuset;
3418#endif
3419 int j;
Willy Tarreau81492c92019-05-03 09:41:23 +02003420 unsigned long cpu_map = global.cpu_map.thread[i];
Olivier Houchard829aa242017-12-01 18:19:43 +01003421
3422 CPU_ZERO(&cpuset);
3423
3424 while ((j = ffsl(cpu_map)) > 0) {
3425 CPU_SET(j - 1, &cpuset);
Cyril Bontéd400ab32018-03-12 21:47:39 +01003426 cpu_map &= ~(1UL << (j - 1));
Olivier Houchard829aa242017-12-01 18:19:43 +01003427 }
Willy Tarreau522cfbc2019-05-03 10:16:39 +02003428 pthread_setaffinity_np(thread_info[i].pthread,
Olivier Houchard829aa242017-12-01 18:19:43 +01003429 sizeof(cpuset), &cpuset);
3430 }
Christopher Faulet1d17c102017-08-29 15:38:48 +02003431 }
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003432#endif /* !USE_CPU_AFFINITY */
3433
William Lallemand1aab50b2018-06-07 09:46:01 +02003434 /* when multithreading we need to let only the thread 0 handle the signals */
William Lallemandd3801c12018-09-11 10:06:23 +02003435 haproxy_unblock_signals();
William Lallemand1aab50b2018-06-07 09:46:01 +02003436
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003437 /* Finally, start the poll loop for the first thread */
Willy Tarreaub4f7cc32019-05-03 09:27:30 +02003438 run_thread_poll_loop(0);
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003439
3440 /* Wait the end of other threads */
3441 for (i = 1; i < global.nbthread; i++)
Willy Tarreau522cfbc2019-05-03 10:16:39 +02003442 pthread_join(thread_info[i].pthread, NULL);
Christopher Faulet1d17c102017-08-29 15:38:48 +02003443
Christopher Fauletb79a94c2017-05-30 15:34:30 +02003444#if defined(DEBUG_THREAD) || defined(DEBUG_FULL)
3445 show_lock_stats();
3446#endif
Christopher Faulet1d17c102017-08-29 15:38:48 +02003447 }
Christopher Fauletcd7879a2017-10-27 13:53:47 +02003448#else /* ! USE_THREAD */
William Lallemandd3801c12018-09-11 10:06:23 +02003449 haproxy_unblock_signals();
Willy Tarreaub4f7cc32019-05-03 09:27:30 +02003450 run_thread_poll_loop(0);
Christopher Faulet62519022017-10-16 15:49:32 +02003451#endif
Christopher Faulet1d17c102017-08-29 15:38:48 +02003452
3453 /* Do some cleanup */
Willy Tarreaubaaee002006-06-26 02:48:02 +02003454 deinit();
Christopher Faulet1d17c102017-08-29 15:38:48 +02003455
Willy Tarreaubaaee002006-06-26 02:48:02 +02003456 exit(0);
3457}
3458
3459
3460/*
3461 * Local variables:
3462 * c-indent-level: 8
3463 * c-basic-offset: 8
3464 * End:
3465 */