blob: 10f5286401c2e937f6d325bd2147d6d3ab9dfbc2 [file] [log] [blame]
Willy Tarreaubaaee002006-06-26 02:48:02 +02001/*
2 * Server management functions.
3 *
Willy Tarreau21faa912012-10-10 08:27:36 +02004 * Copyright 2000-2012 Willy Tarreau <w@1wt.eu>
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +01005 * Copyright 2007-2008 Krzysztof Piotr Oledzki <ole@ans.pl>
Willy Tarreaubaaee002006-06-26 02:48:02 +02006 *
7 * This program is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU General Public License
9 * as published by the Free Software Foundation; either version
10 * 2 of the License, or (at your option) any later version.
11 *
12 */
13
Willy Tarreau0a4b0ab2020-06-11 11:22:44 +020014#include <sys/types.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020015#include <netinet/tcp.h>
Willy Tarreau272adea2014-03-31 10:39:59 +020016#include <ctype.h>
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +020017#include <errno.h>
Willy Tarreau272adea2014-03-31 10:39:59 +020018
Willy Tarreaub2551052020-06-09 09:07:15 +020019#include <import/ebsttree.h>
Willy Tarreau6be78492020-06-05 00:00:29 +020020#include <import/xxhash.h>
21
Willy Tarreaub2551052020-06-09 09:07:15 +020022#include <haproxy/api.h>
Willy Tarreau3f0f82e2020-06-04 19:42:41 +020023#include <haproxy/applet-t.h>
Willy Tarreau49801602020-06-04 22:50:02 +020024#include <haproxy/backend.h>
Willy Tarreau6be78492020-06-05 00:00:29 +020025#include <haproxy/cfgparse.h>
Willy Tarreau4aa573d2020-06-04 18:21:56 +020026#include <haproxy/check.h>
Willy Tarreau83487a82020-06-04 20:19:54 +020027#include <haproxy/cli.h>
Willy Tarreau7ea393d2020-06-04 18:02:10 +020028#include <haproxy/connection.h>
Willy Tarreau3afc4c42020-06-03 18:23:19 +020029#include <haproxy/dict-t.h>
Willy Tarreaueb92deb2020-06-04 10:53:16 +020030#include <haproxy/dns.h>
Willy Tarreau8d366972020-05-27 16:10:29 +020031#include <haproxy/errors.h>
Willy Tarreauf268ee82020-06-04 17:05:57 +020032#include <haproxy/global.h>
Willy Tarreau36979d92020-06-05 17:27:29 +020033#include <haproxy/log.h>
Willy Tarreaucee013e2020-06-05 11:40:38 +020034#include <haproxy/mailers.h>
Willy Tarreau7a00efb2020-06-02 17:02:59 +020035#include <haproxy/namespace.h>
Willy Tarreaub2551052020-06-09 09:07:15 +020036#include <haproxy/port_range.h>
37#include <haproxy/protocol.h>
Willy Tarreaua55c4542020-06-04 22:59:39 +020038#include <haproxy/queue.h>
Willy Tarreaue6ce10b2020-06-04 15:33:47 +020039#include <haproxy/sample.h>
Willy Tarreau1e56f922020-06-04 23:20:13 +020040#include <haproxy/server.h>
William Dauchyf6370442020-11-14 19:25:33 +010041#include <haproxy/ssl_sock.h>
Willy Tarreau2eec9b52020-06-04 19:58:55 +020042#include <haproxy/stats-t.h>
Willy Tarreaudfd3de82020-06-04 23:46:14 +020043#include <haproxy/stream.h>
Willy Tarreau5e539c92020-06-04 20:45:39 +020044#include <haproxy/stream_interface.h>
Willy Tarreaucea0e1b2020-06-04 17:25:40 +020045#include <haproxy/task.h>
Willy Tarreau51cd5952020-06-05 12:25:38 +020046#include <haproxy/tcpcheck.h>
Willy Tarreau92b4f132020-06-01 11:05:15 +020047#include <haproxy/time.h>
Krzysztof Oledzki85130942007-10-22 16:21:10 +020048
Baptiste Assmannda29fe22019-06-13 13:24:29 +020049
Willy Tarreau3ff577e2018-08-02 11:48:52 +020050static void srv_update_status(struct server *s);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +020051static void srv_update_state(struct server *srv, int version, char **params);
Baptiste Assmann83cbaa52016-11-02 15:34:05 +010052static int srv_apply_lastaddr(struct server *srv, int *err_code);
Olivier Houchardd16bfe62017-10-31 15:21:19 +010053static int srv_set_fqdn(struct server *srv, const char *fqdn, int dns_locked);
Baptiste Assmannda29fe22019-06-13 13:24:29 +020054static void srv_state_parse_line(char *buf, const int version, char **params, char **srv_params);
55static int srv_state_get_version(FILE *f);
William Dauchy6318d332020-05-02 21:52:36 +020056static void srv_cleanup_connections(struct server *srv);
Willy Tarreaubaaee002006-06-26 02:48:02 +020057
Willy Tarreau21faa912012-10-10 08:27:36 +020058/* List head of all known server keywords */
59static struct srv_kw_list srv_keywords = {
60 .list = LIST_HEAD_INIT(srv_keywords.list)
61};
Krzysztof Oledzki85130942007-10-22 16:21:10 +020062
Willy Tarreauaf613e82020-06-05 08:40:51 +020063__decl_thread(HA_SPINLOCK_T idle_conn_srv_lock);
Olivier Houchard9ea5d362019-02-14 18:29:09 +010064struct eb_root idle_conn_srv = EB_ROOT;
65struct task *idle_conn_task = NULL;
Olivier Houchard9ea5d362019-02-14 18:29:09 +010066
Frédéric Lécaille7da71292019-05-20 09:47:07 +020067/* The server names dictionary */
Thayne McCombs92149f92020-11-20 01:28:26 -070068struct dict server_key_dict = {
69 .name = "server keys",
Frédéric Lécaille7da71292019-05-20 09:47:07 +020070 .values = EB_ROOT_UNIQUE,
71};
72
Baptiste Assmannda29fe22019-06-13 13:24:29 +020073/* tree where global state_file is loaded */
Willy Tarreaufd1aa012019-12-20 17:23:40 +010074struct eb_root state_file = EB_ROOT_UNIQUE;
Baptiste Assmannda29fe22019-06-13 13:24:29 +020075
Simon Hormana3608442013-11-01 16:46:15 +090076int srv_downtime(const struct server *s)
Willy Tarreau21faa912012-10-10 08:27:36 +020077{
Amaury Denoyellee6ba7912020-10-29 15:59:05 +010078 if ((s->cur_state != SRV_ST_STOPPED) || s->last_change >= now.tv_sec) // ignore negative time
Krzysztof Oledzki85130942007-10-22 16:21:10 +020079 return s->down_time;
80
81 return now.tv_sec - s->last_change + s->down_time;
82}
Willy Tarreaubaaee002006-06-26 02:48:02 +020083
Bhaskar Maddalaa20cb852014-02-03 16:26:46 -050084int srv_lastsession(const struct server *s)
85{
86 if (s->counters.last_sess)
87 return now.tv_sec - s->counters.last_sess;
88
89 return -1;
90}
91
Simon Horman4a741432013-02-23 15:35:38 +090092int srv_getinter(const struct check *check)
Willy Tarreau21faa912012-10-10 08:27:36 +020093{
Simon Horman4a741432013-02-23 15:35:38 +090094 const struct server *s = check->server;
95
Willy Tarreauff5ae352013-12-11 20:36:34 +010096 if ((check->state & CHK_ST_CONFIGURED) && (check->health == check->rise + check->fall - 1))
Simon Horman4a741432013-02-23 15:35:38 +090097 return check->inter;
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +010098
Emeric Brun52a91d32017-08-31 14:41:55 +020099 if ((s->next_state == SRV_ST_STOPPED) && check->health == 0)
Simon Horman4a741432013-02-23 15:35:38 +0900100 return (check->downinter)?(check->downinter):(check->inter);
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +0100101
Simon Horman4a741432013-02-23 15:35:38 +0900102 return (check->fastinter)?(check->fastinter):(check->inter);
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +0100103}
104
Olivier Houcharde9bad0a2018-01-17 17:39:34 +0100105/*
106 * Check that we did not get a hash collision.
Willy Tarreau595e7672020-10-20 17:30:08 +0200107 * Unlikely, but it can happen. The server's proxy must be at least
108 * read-locked.
Olivier Houcharde9bad0a2018-01-17 17:39:34 +0100109 */
110static inline void srv_check_for_dup_dyncookie(struct server *s)
Olivier Houchard4e694042017-03-14 20:01:29 +0100111{
112 struct proxy *p = s->proxy;
113 struct server *tmpserv;
Olivier Houcharde9bad0a2018-01-17 17:39:34 +0100114
115 for (tmpserv = p->srv; tmpserv != NULL;
116 tmpserv = tmpserv->next) {
117 if (tmpserv == s)
118 continue;
119 if (tmpserv->next_admin & SRV_ADMF_FMAINT)
120 continue;
121 if (tmpserv->cookie &&
122 strcmp(tmpserv->cookie, s->cookie) == 0) {
123 ha_warning("We generated two equal cookies for two different servers.\n"
124 "Please change the secret key for '%s'.\n",
125 s->proxy->id);
126 }
127 }
128
129}
130
Willy Tarreau46b7f532018-08-21 11:54:26 +0200131/*
Willy Tarreau595e7672020-10-20 17:30:08 +0200132 * Must be called with the server lock held, and will read-lock the proxy.
Willy Tarreau46b7f532018-08-21 11:54:26 +0200133 */
Olivier Houcharde9bad0a2018-01-17 17:39:34 +0100134void srv_set_dyncookie(struct server *s)
135{
136 struct proxy *p = s->proxy;
Olivier Houchard4e694042017-03-14 20:01:29 +0100137 char *tmpbuf;
138 unsigned long long hash_value;
Olivier Houchard2cb49eb2017-03-15 15:11:06 +0100139 size_t key_len;
Olivier Houchard4e694042017-03-14 20:01:29 +0100140 size_t buffer_len;
141 int addr_len;
142 int port;
143
Willy Tarreau595e7672020-10-20 17:30:08 +0200144 HA_RWLOCK_RDLOCK(PROXY_LOCK, &p->lock);
Willy Tarreau5e83d992019-07-30 11:59:34 +0200145
Olivier Houchard4e694042017-03-14 20:01:29 +0100146 if ((s->flags & SRV_F_COOKIESET) ||
147 !(s->proxy->ck_opts & PR_CK_DYNAMIC) ||
148 s->proxy->dyncookie_key == NULL)
Willy Tarreau5e83d992019-07-30 11:59:34 +0200149 goto out;
Olivier Houchard2cb49eb2017-03-15 15:11:06 +0100150 key_len = strlen(p->dyncookie_key);
Olivier Houchard4e694042017-03-14 20:01:29 +0100151
152 if (s->addr.ss_family != AF_INET &&
153 s->addr.ss_family != AF_INET6)
Willy Tarreau5e83d992019-07-30 11:59:34 +0200154 goto out;
Olivier Houchard4e694042017-03-14 20:01:29 +0100155 /*
156 * Buffer to calculate the cookie value.
157 * The buffer contains the secret key + the server IP address
158 * + the TCP port.
159 */
160 addr_len = (s->addr.ss_family == AF_INET) ? 4 : 16;
161 /*
162 * The TCP port should use only 2 bytes, but is stored in
163 * an unsigned int in struct server, so let's use 4, to be
164 * on the safe side.
165 */
166 buffer_len = key_len + addr_len + 4;
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200167 tmpbuf = trash.area;
Olivier Houchard4e694042017-03-14 20:01:29 +0100168 memcpy(tmpbuf, p->dyncookie_key, key_len);
169 memcpy(&(tmpbuf[key_len]),
170 s->addr.ss_family == AF_INET ?
171 (void *)&((struct sockaddr_in *)&s->addr)->sin_addr.s_addr :
172 (void *)&(((struct sockaddr_in6 *)&s->addr)->sin6_addr.s6_addr),
173 addr_len);
174 /*
175 * Make sure it's the same across all the load balancers,
176 * no matter their endianness.
177 */
178 port = htonl(s->svc_port);
179 memcpy(&tmpbuf[key_len + addr_len], &port, 4);
180 hash_value = XXH64(tmpbuf, buffer_len, 0);
181 memprintf(&s->cookie, "%016llx", hash_value);
182 if (!s->cookie)
Willy Tarreau5e83d992019-07-30 11:59:34 +0200183 goto out;
Olivier Houchard4e694042017-03-14 20:01:29 +0100184 s->cklen = 16;
Olivier Houcharde9bad0a2018-01-17 17:39:34 +0100185
186 /* Don't bother checking if the dyncookie is duplicated if
187 * the server is marked as "disabled", maybe it doesn't have
188 * its real IP yet, but just a place holder.
Olivier Houchard4e694042017-03-14 20:01:29 +0100189 */
Olivier Houcharde9bad0a2018-01-17 17:39:34 +0100190 if (!(s->next_admin & SRV_ADMF_FMAINT))
191 srv_check_for_dup_dyncookie(s);
Willy Tarreau5e83d992019-07-30 11:59:34 +0200192 out:
Willy Tarreau595e7672020-10-20 17:30:08 +0200193 HA_RWLOCK_RDUNLOCK(PROXY_LOCK, &p->lock);
Olivier Houchard4e694042017-03-14 20:01:29 +0100194}
195
Willy Tarreau21faa912012-10-10 08:27:36 +0200196/*
Thayne McCombs92149f92020-11-20 01:28:26 -0700197 * Must be called with the server lock held, and will write-lock the proxy.
198 */
199static void srv_set_addr_desc(struct server *s)
200{
201 struct proxy *p = s->proxy;
202 char *key;
203
204 key = sa2str(&s->addr, s->svc_port, s->flags & SRV_F_MAPPORTS);
205
206 if (s->addr_node.key) {
Thayne McCombs24da7e12021-01-05 23:10:09 -0700207 if (key && strcmp(key, s->addr_node.key) == 0) {
Thayne McCombs92149f92020-11-20 01:28:26 -0700208 free(key);
209 return;
210 }
211
212 HA_RWLOCK_WRLOCK(PROXY_LOCK, &p->lock);
213 ebpt_delete(&s->addr_node);
214 HA_RWLOCK_WRUNLOCK(PROXY_LOCK, &p->lock);
215
216 free(s->addr_node.key);
217 }
218
219 s->addr_node.key = key;
220
Thayne McCombs24da7e12021-01-05 23:10:09 -0700221 if (s->addr_node.key) {
222 HA_RWLOCK_WRLOCK(PROXY_LOCK, &p->lock);
223 ebis_insert(&p->used_server_addr, &s->addr_node);
224 HA_RWLOCK_WRUNLOCK(PROXY_LOCK, &p->lock);
225 }
Thayne McCombs92149f92020-11-20 01:28:26 -0700226}
227
228/*
Willy Tarreau21faa912012-10-10 08:27:36 +0200229 * Registers the server keyword list <kwl> as a list of valid keywords for next
230 * parsing sessions.
231 */
232void srv_register_keywords(struct srv_kw_list *kwl)
233{
234 LIST_ADDQ(&srv_keywords.list, &kwl->list);
235}
236
237/* Return a pointer to the server keyword <kw>, or NULL if not found. If the
238 * keyword is found with a NULL ->parse() function, then an attempt is made to
239 * find one with a valid ->parse() function. This way it is possible to declare
240 * platform-dependant, known keywords as NULL, then only declare them as valid
241 * if some options are met. Note that if the requested keyword contains an
242 * opening parenthesis, everything from this point is ignored.
243 */
244struct srv_kw *srv_find_kw(const char *kw)
245{
246 int index;
247 const char *kwend;
248 struct srv_kw_list *kwl;
249 struct srv_kw *ret = NULL;
250
251 kwend = strchr(kw, '(');
252 if (!kwend)
253 kwend = kw + strlen(kw);
254
255 list_for_each_entry(kwl, &srv_keywords.list, list) {
256 for (index = 0; kwl->kw[index].kw != NULL; index++) {
257 if ((strncmp(kwl->kw[index].kw, kw, kwend - kw) == 0) &&
258 kwl->kw[index].kw[kwend-kw] == 0) {
259 if (kwl->kw[index].parse)
260 return &kwl->kw[index]; /* found it !*/
261 else
262 ret = &kwl->kw[index]; /* may be OK */
263 }
264 }
265 }
266 return ret;
267}
268
269/* Dumps all registered "server" keywords to the <out> string pointer. The
270 * unsupported keywords are only dumped if their supported form was not
271 * found.
272 */
273void srv_dump_kws(char **out)
274{
275 struct srv_kw_list *kwl;
276 int index;
277
Christopher Faulet784063e2020-05-18 12:14:18 +0200278 if (!out)
279 return;
280
Willy Tarreau21faa912012-10-10 08:27:36 +0200281 *out = NULL;
282 list_for_each_entry(kwl, &srv_keywords.list, list) {
283 for (index = 0; kwl->kw[index].kw != NULL; index++) {
284 if (kwl->kw[index].parse ||
285 srv_find_kw(kwl->kw[index].kw) == &kwl->kw[index]) {
286 memprintf(out, "%s[%4s] %s%s%s%s\n", *out ? *out : "",
287 kwl->scope,
288 kwl->kw[index].kw,
289 kwl->kw[index].skip ? " <arg>" : "",
290 kwl->kw[index].default_ok ? " [dflt_ok]" : "",
291 kwl->kw[index].parse ? "" : " (not supported)");
292 }
293 }
294 }
295}
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +0100296
Frédéric Lécaillef5bf9032017-03-10 11:51:05 +0100297/* Parse the "backup" server keyword */
298static int srv_parse_backup(char **args, int *cur_arg,
299 struct proxy *curproxy, struct server *newsrv, char **err)
300{
301 newsrv->flags |= SRV_F_BACKUP;
302 return 0;
303}
304
Alexander Liu2a54bb72019-05-22 19:44:48 +0800305
Frédéric Lécaille9d1b95b2017-03-15 09:13:33 +0100306/* Parse the "cookie" server keyword */
307static int srv_parse_cookie(char **args, int *cur_arg,
308 struct proxy *curproxy, struct server *newsrv, char **err)
309{
310 char *arg;
311
312 arg = args[*cur_arg + 1];
313 if (!*arg) {
314 memprintf(err, "'%s' expects <value> as argument.\n", args[*cur_arg]);
315 return ERR_ALERT | ERR_FATAL;
316 }
317
318 free(newsrv->cookie);
319 newsrv->cookie = strdup(arg);
320 newsrv->cklen = strlen(arg);
321 newsrv->flags |= SRV_F_COOKIESET;
322 return 0;
323}
324
Frédéric Lécaille2a0d0612017-03-21 11:53:54 +0100325/* Parse the "disabled" server keyword */
326static int srv_parse_disabled(char **args, int *cur_arg,
327 struct proxy *curproxy, struct server *newsrv, char **err)
328{
Emeric Brun52a91d32017-08-31 14:41:55 +0200329 newsrv->next_admin |= SRV_ADMF_CMAINT | SRV_ADMF_FMAINT;
330 newsrv->next_state = SRV_ST_STOPPED;
Frédéric Lécaille2a0d0612017-03-21 11:53:54 +0100331 newsrv->check.state |= CHK_ST_PAUSED;
332 newsrv->check.health = 0;
333 return 0;
334}
335
336/* Parse the "enabled" server keyword */
337static int srv_parse_enabled(char **args, int *cur_arg,
338 struct proxy *curproxy, struct server *newsrv, char **err)
339{
Emeric Brun52a91d32017-08-31 14:41:55 +0200340 newsrv->next_admin &= ~SRV_ADMF_CMAINT & ~SRV_ADMF_FMAINT;
341 newsrv->next_state = SRV_ST_RUNNING;
Frédéric Lécaille2a0d0612017-03-21 11:53:54 +0100342 newsrv->check.state &= ~CHK_ST_PAUSED;
343 newsrv->check.health = newsrv->check.rise;
344 return 0;
345}
346
Willy Tarreau9c538e02019-01-23 10:21:49 +0100347static int srv_parse_max_reuse(char **args, int *cur_arg, struct proxy *curproxy, struct server *newsrv, char **err)
348{
349 char *arg;
350
351 arg = args[*cur_arg + 1];
352 if (!*arg) {
353 memprintf(err, "'%s' expects <value> as argument.\n", args[*cur_arg]);
354 return ERR_ALERT | ERR_FATAL;
355 }
356 newsrv->max_reuse = atoi(arg);
357
358 return 0;
359}
360
Olivier Houchardb7b3faa2018-12-14 18:15:36 +0100361static int srv_parse_pool_purge_delay(char **args, int *cur_arg, struct proxy *curproxy, struct server *newsrv, char **err)
Olivier Houchard0c18a6f2018-12-02 14:11:41 +0100362{
363 const char *res;
364 char *arg;
365 unsigned int time;
366
367 arg = args[*cur_arg + 1];
368 if (!*arg) {
369 memprintf(err, "'%s' expects <value> as argument.\n", args[*cur_arg]);
370 return ERR_ALERT | ERR_FATAL;
371 }
372 res = parse_time_err(arg, &time, TIME_UNIT_MS);
Willy Tarreau9faebe32019-06-07 19:00:37 +0200373 if (res == PARSE_TIME_OVER) {
374 memprintf(err, "timer overflow in argument '%s' to '%s' (maximum value is 2147483647 ms or ~24.8 days)",
375 args[*cur_arg+1], args[*cur_arg]);
376 return ERR_ALERT | ERR_FATAL;
377 }
378 else if (res == PARSE_TIME_UNDER) {
379 memprintf(err, "timer underflow in argument '%s' to '%s' (minimum non-null value is 1 ms)",
380 args[*cur_arg+1], args[*cur_arg]);
381 return ERR_ALERT | ERR_FATAL;
382 }
383 else if (res) {
Olivier Houchard0c18a6f2018-12-02 14:11:41 +0100384 memprintf(err, "unexpected character '%c' in argument to <%s>.\n",
385 *res, args[*cur_arg]);
386 return ERR_ALERT | ERR_FATAL;
387 }
Olivier Houchardb7b3faa2018-12-14 18:15:36 +0100388 newsrv->pool_purge_delay = time;
Olivier Houchard0c18a6f2018-12-02 14:11:41 +0100389
390 return 0;
391}
392
Willy Tarreau2f3f4d32020-07-01 07:43:51 +0200393static int srv_parse_pool_low_conn(char **args, int *cur_arg, struct proxy *curproxy, struct server *newsrv, char **err)
394{
395 char *arg;
396
397 arg = args[*cur_arg + 1];
398 if (!*arg) {
399 memprintf(err, "'%s' expects <value> as argument.\n", args[*cur_arg]);
400 return ERR_ALERT | ERR_FATAL;
401 }
402
403 newsrv->low_idle_conns = atoi(arg);
404 return 0;
405}
406
Olivier Houchard006e3102018-12-10 18:30:32 +0100407static int srv_parse_pool_max_conn(char **args, int *cur_arg, struct proxy *curproxy, struct server *newsrv, char **err)
408{
409 char *arg;
410
411 arg = args[*cur_arg + 1];
412 if (!*arg) {
413 memprintf(err, "'%s' expects <value> as argument.\n", args[*cur_arg]);
414 return ERR_ALERT | ERR_FATAL;
415 }
Willy Tarreaucb923d52019-01-23 10:39:27 +0100416
Olivier Houchard006e3102018-12-10 18:30:32 +0100417 newsrv->max_idle_conns = atoi(arg);
Willy Tarreaucb923d52019-01-23 10:39:27 +0100418 if ((int)newsrv->max_idle_conns < -1) {
419 memprintf(err, "'%s' must be >= -1", args[*cur_arg]);
420 return ERR_ALERT | ERR_FATAL;
421 }
Olivier Houchard006e3102018-12-10 18:30:32 +0100422
423 return 0;
424}
425
Willy Tarreaudff55432012-10-10 17:51:05 +0200426/* parse the "id" server keyword */
427static int srv_parse_id(char **args, int *cur_arg, struct proxy *curproxy, struct server *newsrv, char **err)
428{
429 struct eb32_node *node;
430
431 if (!*args[*cur_arg + 1]) {
432 memprintf(err, "'%s' : expects an integer argument", args[*cur_arg]);
433 return ERR_ALERT | ERR_FATAL;
434 }
435
436 newsrv->puid = atol(args[*cur_arg + 1]);
437 newsrv->conf.id.key = newsrv->puid;
438
439 if (newsrv->puid <= 0) {
440 memprintf(err, "'%s' : custom id has to be > 0", args[*cur_arg]);
441 return ERR_ALERT | ERR_FATAL;
442 }
443
444 node = eb32_lookup(&curproxy->conf.used_server_id, newsrv->puid);
445 if (node) {
446 struct server *target = container_of(node, struct server, conf.id);
447 memprintf(err, "'%s' : custom id %d already used at %s:%d ('server %s')",
448 args[*cur_arg], newsrv->puid, target->conf.file, target->conf.line,
449 target->id);
450 return ERR_ALERT | ERR_FATAL;
451 }
452
453 eb32_insert(&curproxy->conf.used_server_id, &newsrv->conf.id);
Baptiste Assmann7cc419a2015-07-07 22:02:20 +0200454 newsrv->flags |= SRV_F_FORCED_ID;
Willy Tarreaudff55432012-10-10 17:51:05 +0200455 return 0;
456}
457
Frédéric Lécaille22f41a22017-03-16 17:17:36 +0100458/* Parse the "namespace" server keyword */
459static int srv_parse_namespace(char **args, int *cur_arg,
460 struct proxy *curproxy, struct server *newsrv, char **err)
461{
Willy Tarreaue5733232019-05-22 19:24:06 +0200462#ifdef USE_NS
Frédéric Lécaille22f41a22017-03-16 17:17:36 +0100463 char *arg;
464
465 arg = args[*cur_arg + 1];
466 if (!*arg) {
467 memprintf(err, "'%s' : expects <name> as argument", args[*cur_arg]);
468 return ERR_ALERT | ERR_FATAL;
469 }
470
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100471 if (strcmp(arg, "*") == 0) {
Frédéric Lécaille22f41a22017-03-16 17:17:36 +0100472 /* Use the namespace associated with the connection (if present). */
473 newsrv->flags |= SRV_F_USE_NS_FROM_PP;
474 return 0;
475 }
476
477 /*
478 * As this parser may be called several times for the same 'default-server'
479 * object, or for a new 'server' instance deriving from a 'default-server'
480 * one with SRV_F_USE_NS_FROM_PP flag enabled, let's reset it.
481 */
482 newsrv->flags &= ~SRV_F_USE_NS_FROM_PP;
483
484 newsrv->netns = netns_store_lookup(arg, strlen(arg));
485 if (!newsrv->netns)
486 newsrv->netns = netns_store_insert(arg);
487
488 if (!newsrv->netns) {
489 memprintf(err, "Cannot open namespace '%s'", arg);
490 return ERR_ALERT | ERR_FATAL;
491 }
492
493 return 0;
494#else
495 memprintf(err, "'%s': '%s' option not implemented", args[0], args[*cur_arg]);
496 return ERR_ALERT | ERR_FATAL;
497#endif
498}
499
Frédéric Lécaillef5bf9032017-03-10 11:51:05 +0100500/* Parse the "no-backup" server keyword */
501static int srv_parse_no_backup(char **args, int *cur_arg,
502 struct proxy *curproxy, struct server *newsrv, char **err)
503{
504 newsrv->flags &= ~SRV_F_BACKUP;
505 return 0;
506}
507
Frédéric Lécaille25df8902017-03-10 14:04:31 +0100508
Frédéric Lécaille31045e42017-03-10 16:40:00 +0100509/* Disable server PROXY protocol flags. */
Willy Tarreau0e492e22019-04-15 21:25:03 +0200510static inline int srv_disable_pp_flags(struct server *srv, unsigned int flags)
Frédéric Lécaille31045e42017-03-10 16:40:00 +0100511{
512 srv->pp_opts &= ~flags;
513 return 0;
514}
515
516/* Parse the "no-send-proxy" server keyword */
517static int srv_parse_no_send_proxy(char **args, int *cur_arg,
518 struct proxy *curproxy, struct server *newsrv, char **err)
519{
520 return srv_disable_pp_flags(newsrv, SRV_PP_V1);
521}
522
523/* Parse the "no-send-proxy-v2" server keyword */
524static int srv_parse_no_send_proxy_v2(char **args, int *cur_arg,
525 struct proxy *curproxy, struct server *newsrv, char **err)
526{
527 return srv_disable_pp_flags(newsrv, SRV_PP_V2);
528}
529
Frédéric Lécaille1b9423d2019-07-04 14:19:06 +0200530/* Parse the "no-tfo" server keyword */
531static int srv_parse_no_tfo(char **args, int *cur_arg,
532 struct proxy *curproxy, struct server *newsrv, char **err)
533{
534 newsrv->flags &= ~SRV_F_FASTOPEN;
535 return 0;
536}
537
Frédéric Lécaillef9bc1d62017-03-10 15:50:49 +0100538/* Parse the "non-stick" server keyword */
539static int srv_parse_non_stick(char **args, int *cur_arg,
540 struct proxy *curproxy, struct server *newsrv, char **err)
541{
542 newsrv->flags |= SRV_F_NON_STICK;
543 return 0;
544}
545
Frédéric Lécaille31045e42017-03-10 16:40:00 +0100546/* Enable server PROXY protocol flags. */
Willy Tarreau0e492e22019-04-15 21:25:03 +0200547static inline int srv_enable_pp_flags(struct server *srv, unsigned int flags)
Frédéric Lécaille31045e42017-03-10 16:40:00 +0100548{
549 srv->pp_opts |= flags;
550 return 0;
551}
Christopher Faulet8ed0a3e2018-04-10 14:45:45 +0200552/* parse the "proto" server keyword */
553static int srv_parse_proto(char **args, int *cur_arg,
554 struct proxy *px, struct server *newsrv, char **err)
555{
556 struct ist proto;
557
558 if (!*args[*cur_arg + 1]) {
559 memprintf(err, "'%s' : missing value", args[*cur_arg]);
560 return ERR_ALERT | ERR_FATAL;
561 }
562 proto = ist2(args[*cur_arg + 1], strlen(args[*cur_arg + 1]));
563 newsrv->mux_proto = get_mux_proto(proto);
564 if (!newsrv->mux_proto) {
565 memprintf(err, "'%s' : unknown MUX protocol '%s'", args[*cur_arg], args[*cur_arg+1]);
566 return ERR_ALERT | ERR_FATAL;
567 }
Christopher Faulet8ed0a3e2018-04-10 14:45:45 +0200568 return 0;
569}
Frédéric Lécaille31045e42017-03-10 16:40:00 +0100570
Emmanuel Hocdetf643b802018-02-01 15:20:32 +0100571/* parse the "proxy-v2-options" */
572static int srv_parse_proxy_v2_options(char **args, int *cur_arg,
573 struct proxy *px, struct server *newsrv, char **err)
574{
575 char *p, *n;
576 for (p = args[*cur_arg+1]; p; p = n) {
577 n = strchr(p, ',');
578 if (n)
579 *n++ = '\0';
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100580 if (strcmp(p, "ssl") == 0) {
Emmanuel Hocdetf643b802018-02-01 15:20:32 +0100581 newsrv->pp_opts |= SRV_PP_V2_SSL;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100582 } else if (strcmp(p, "cert-cn") == 0) {
Emmanuel Hocdetf643b802018-02-01 15:20:32 +0100583 newsrv->pp_opts |= SRV_PP_V2_SSL;
584 newsrv->pp_opts |= SRV_PP_V2_SSL_CN;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100585 } else if (strcmp(p, "cert-key") == 0) {
Emmanuel Hocdetfa8d0f12018-02-01 15:53:52 +0100586 newsrv->pp_opts |= SRV_PP_V2_SSL;
587 newsrv->pp_opts |= SRV_PP_V2_SSL_KEY_ALG;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100588 } else if (strcmp(p, "cert-sig") == 0) {
Emmanuel Hocdetfa8d0f12018-02-01 15:53:52 +0100589 newsrv->pp_opts |= SRV_PP_V2_SSL;
590 newsrv->pp_opts |= SRV_PP_V2_SSL_SIG_ALG;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100591 } else if (strcmp(p, "ssl-cipher") == 0) {
Emmanuel Hocdetfa8d0f12018-02-01 15:53:52 +0100592 newsrv->pp_opts |= SRV_PP_V2_SSL;
593 newsrv->pp_opts |= SRV_PP_V2_SSL_CIPHER;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100594 } else if (strcmp(p, "authority") == 0) {
Emmanuel Hocdet253c3b72018-02-01 18:29:59 +0100595 newsrv->pp_opts |= SRV_PP_V2_AUTHORITY;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100596 } else if (strcmp(p, "crc32c") == 0) {
Emmanuel Hocdet4399c752018-02-05 15:26:43 +0100597 newsrv->pp_opts |= SRV_PP_V2_CRC32C;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100598 } else if (strcmp(p, "unique-id") == 0) {
Tim Duesterhuscf6e0c82020-03-13 12:34:24 +0100599 newsrv->pp_opts |= SRV_PP_V2_UNIQUE_ID;
Emmanuel Hocdetf643b802018-02-01 15:20:32 +0100600 } else
601 goto fail;
602 }
603 return 0;
604 fail:
605 if (err)
606 memprintf(err, "'%s' : proxy v2 option not implemented", p);
607 return ERR_ALERT | ERR_FATAL;
608}
609
Frédéric Lécaille547356e2017-03-15 08:55:39 +0100610/* Parse the "observe" server keyword */
611static int srv_parse_observe(char **args, int *cur_arg,
612 struct proxy *curproxy, struct server *newsrv, char **err)
613{
614 char *arg;
615
616 arg = args[*cur_arg + 1];
617 if (!*arg) {
618 memprintf(err, "'%s' expects <mode> as argument.\n", args[*cur_arg]);
619 return ERR_ALERT | ERR_FATAL;
620 }
621
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100622 if (strcmp(arg, "none") == 0) {
Frédéric Lécaille547356e2017-03-15 08:55:39 +0100623 newsrv->observe = HANA_OBS_NONE;
624 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100625 else if (strcmp(arg, "layer4") == 0) {
Frédéric Lécaille547356e2017-03-15 08:55:39 +0100626 newsrv->observe = HANA_OBS_LAYER4;
627 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100628 else if (strcmp(arg, "layer7") == 0) {
Frédéric Lécaille547356e2017-03-15 08:55:39 +0100629 if (curproxy->mode != PR_MODE_HTTP) {
630 memprintf(err, "'%s' can only be used in http proxies.\n", arg);
631 return ERR_ALERT;
632 }
633 newsrv->observe = HANA_OBS_LAYER7;
634 }
635 else {
636 memprintf(err, "'%s' expects one of 'none', 'layer4', 'layer7' "
637 "but got '%s'\n", args[*cur_arg], arg);
638 return ERR_ALERT | ERR_FATAL;
639 }
640
641 return 0;
642}
643
Frédéric Lécaille16186232017-03-14 16:42:49 +0100644/* Parse the "redir" server keyword */
645static int srv_parse_redir(char **args, int *cur_arg,
646 struct proxy *curproxy, struct server *newsrv, char **err)
647{
648 char *arg;
649
650 arg = args[*cur_arg + 1];
651 if (!*arg) {
652 memprintf(err, "'%s' expects <prefix> as argument.\n", args[*cur_arg]);
653 return ERR_ALERT | ERR_FATAL;
654 }
655
656 free(newsrv->rdr_pfx);
657 newsrv->rdr_pfx = strdup(arg);
658 newsrv->rdr_len = strlen(arg);
659
660 return 0;
661}
662
Frédéric Lécaille31045e42017-03-10 16:40:00 +0100663/* Parse the "send-proxy" server keyword */
664static int srv_parse_send_proxy(char **args, int *cur_arg,
665 struct proxy *curproxy, struct server *newsrv, char **err)
666{
667 return srv_enable_pp_flags(newsrv, SRV_PP_V1);
668}
669
670/* Parse the "send-proxy-v2" server keyword */
671static int srv_parse_send_proxy_v2(char **args, int *cur_arg,
672 struct proxy *curproxy, struct server *newsrv, char **err)
673{
674 return srv_enable_pp_flags(newsrv, SRV_PP_V2);
675}
676
Frédéric Lécailledba97072017-03-17 15:33:50 +0100677
678/* Parse the "source" server keyword */
679static int srv_parse_source(char **args, int *cur_arg,
680 struct proxy *curproxy, struct server *newsrv, char **err)
681{
682 char *errmsg;
683 int port_low, port_high;
684 struct sockaddr_storage *sk;
Frédéric Lécailledba97072017-03-17 15:33:50 +0100685
686 errmsg = NULL;
687
688 if (!*args[*cur_arg + 1]) {
689 memprintf(err, "'%s' expects <addr>[:<port>[-<port>]], and optionally '%s' <addr>, "
690 "and '%s' <name> as argument.\n", args[*cur_arg], "usesrc", "interface");
691 goto err;
692 }
693
694 /* 'sk' is statically allocated (no need to be freed). */
Willy Tarreau65ec4e32020-09-16 19:17:08 +0200695 sk = str2sa_range(args[*cur_arg + 1], NULL, &port_low, &port_high, NULL, NULL,
696 &errmsg, NULL, NULL,
697 PA_O_RESOLVE | PA_O_PORT_OK | PA_O_PORT_RANGE | PA_O_STREAM | PA_O_CONNECT);
Frédéric Lécailledba97072017-03-17 15:33:50 +0100698 if (!sk) {
699 memprintf(err, "'%s %s' : %s\n", args[*cur_arg], args[*cur_arg + 1], errmsg);
700 goto err;
701 }
702
Frédéric Lécailledba97072017-03-17 15:33:50 +0100703 newsrv->conn_src.opts |= CO_SRC_BIND;
704 newsrv->conn_src.source_addr = *sk;
705
706 if (port_low != port_high) {
707 int i;
708
Frédéric Lécailledba97072017-03-17 15:33:50 +0100709 newsrv->conn_src.sport_range = port_range_alloc_range(port_high - port_low + 1);
710 for (i = 0; i < newsrv->conn_src.sport_range->size; i++)
711 newsrv->conn_src.sport_range->ports[i] = port_low + i;
712 }
713
714 *cur_arg += 2;
715 while (*(args[*cur_arg])) {
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100716 if (strcmp(args[*cur_arg], "usesrc") == 0) { /* address to use outside */
Frédéric Lécailledba97072017-03-17 15:33:50 +0100717#if defined(CONFIG_HAP_TRANSPARENT)
718 if (!*args[*cur_arg + 1]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100719 ha_alert("'usesrc' expects <addr>[:<port>], 'client', 'clientip', "
720 "or 'hdr_ip(name,#)' as argument.\n");
Frédéric Lécailledba97072017-03-17 15:33:50 +0100721 goto err;
722 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100723 if (strcmp(args[*cur_arg + 1], "client") == 0) {
Frédéric Lécailledba97072017-03-17 15:33:50 +0100724 newsrv->conn_src.opts &= ~CO_SRC_TPROXY_MASK;
725 newsrv->conn_src.opts |= CO_SRC_TPROXY_CLI;
726 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100727 else if (strcmp(args[*cur_arg + 1], "clientip") == 0) {
Frédéric Lécailledba97072017-03-17 15:33:50 +0100728 newsrv->conn_src.opts &= ~CO_SRC_TPROXY_MASK;
729 newsrv->conn_src.opts |= CO_SRC_TPROXY_CIP;
730 }
731 else if (!strncmp(args[*cur_arg + 1], "hdr_ip(", 7)) {
732 char *name, *end;
733
734 name = args[*cur_arg + 1] + 7;
Willy Tarreau90807112020-02-25 08:16:33 +0100735 while (isspace((unsigned char)*name))
Frédéric Lécailledba97072017-03-17 15:33:50 +0100736 name++;
737
738 end = name;
Willy Tarreau90807112020-02-25 08:16:33 +0100739 while (*end && !isspace((unsigned char)*end) && *end != ',' && *end != ')')
Frédéric Lécailledba97072017-03-17 15:33:50 +0100740 end++;
741
742 newsrv->conn_src.opts &= ~CO_SRC_TPROXY_MASK;
743 newsrv->conn_src.opts |= CO_SRC_TPROXY_DYN;
744 free(newsrv->conn_src.bind_hdr_name);
745 newsrv->conn_src.bind_hdr_name = calloc(1, end - name + 1);
746 newsrv->conn_src.bind_hdr_len = end - name;
747 memcpy(newsrv->conn_src.bind_hdr_name, name, end - name);
748 newsrv->conn_src.bind_hdr_name[end - name] = '\0';
749 newsrv->conn_src.bind_hdr_occ = -1;
750
751 /* now look for an occurrence number */
Willy Tarreau90807112020-02-25 08:16:33 +0100752 while (isspace((unsigned char)*end))
Frédéric Lécailledba97072017-03-17 15:33:50 +0100753 end++;
754 if (*end == ',') {
755 end++;
756 name = end;
757 if (*end == '-')
758 end++;
Willy Tarreau90807112020-02-25 08:16:33 +0100759 while (isdigit((unsigned char)*end))
Frédéric Lécailledba97072017-03-17 15:33:50 +0100760 end++;
761 newsrv->conn_src.bind_hdr_occ = strl2ic(name, end - name);
762 }
763
764 if (newsrv->conn_src.bind_hdr_occ < -MAX_HDR_HISTORY) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100765 ha_alert("usesrc hdr_ip(name,num) does not support negative"
766 " occurrences values smaller than %d.\n", MAX_HDR_HISTORY);
Frédéric Lécailledba97072017-03-17 15:33:50 +0100767 goto err;
768 }
769 }
770 else {
771 struct sockaddr_storage *sk;
772 int port1, port2;
773
774 /* 'sk' is statically allocated (no need to be freed). */
Willy Tarreau65ec4e32020-09-16 19:17:08 +0200775 sk = str2sa_range(args[*cur_arg + 1], NULL, &port1, &port2, NULL, NULL,
776 &errmsg, NULL, NULL,
777 PA_O_RESOLVE | PA_O_PORT_OK | PA_O_STREAM | PA_O_CONNECT);
Frédéric Lécailledba97072017-03-17 15:33:50 +0100778 if (!sk) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100779 ha_alert("'%s %s' : %s\n", args[*cur_arg], args[*cur_arg + 1], errmsg);
Frédéric Lécailledba97072017-03-17 15:33:50 +0100780 goto err;
781 }
782
Frédéric Lécailledba97072017-03-17 15:33:50 +0100783 newsrv->conn_src.tproxy_addr = *sk;
784 newsrv->conn_src.opts |= CO_SRC_TPROXY_ADDR;
785 }
786 global.last_checks |= LSTCHK_NETADM;
787 *cur_arg += 2;
788 continue;
789#else /* no TPROXY support */
Christopher Faulet767a84b2017-11-24 16:50:31 +0100790 ha_alert("'usesrc' not allowed here because support for TPROXY was not compiled in.\n");
Frédéric Lécailledba97072017-03-17 15:33:50 +0100791 goto err;
792#endif /* defined(CONFIG_HAP_TRANSPARENT) */
793 } /* "usesrc" */
794
Tim Duesterhuse5ff1412021-01-02 22:31:53 +0100795 if (strcmp(args[*cur_arg], "interface") == 0) { /* specifically bind to this interface */
Frédéric Lécailledba97072017-03-17 15:33:50 +0100796#ifdef SO_BINDTODEVICE
797 if (!*args[*cur_arg + 1]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +0100798 ha_alert("'%s' : missing interface name.\n", args[0]);
Frédéric Lécailledba97072017-03-17 15:33:50 +0100799 goto err;
800 }
801 free(newsrv->conn_src.iface_name);
802 newsrv->conn_src.iface_name = strdup(args[*cur_arg + 1]);
803 newsrv->conn_src.iface_len = strlen(newsrv->conn_src.iface_name);
804 global.last_checks |= LSTCHK_NETADM;
805#else
Christopher Faulet767a84b2017-11-24 16:50:31 +0100806 ha_alert("'%s' : '%s' option not implemented.\n", args[0], args[*cur_arg]);
Frédéric Lécailledba97072017-03-17 15:33:50 +0100807 goto err;
808#endif
809 *cur_arg += 2;
810 continue;
811 }
812 /* this keyword in not an option of "source" */
813 break;
814 } /* while */
815
816 return 0;
817
818 err:
819 free(errmsg);
820 return ERR_ALERT | ERR_FATAL;
821}
822
Frédéric Lécaillef9bc1d62017-03-10 15:50:49 +0100823/* Parse the "stick" server keyword */
824static int srv_parse_stick(char **args, int *cur_arg,
825 struct proxy *curproxy, struct server *newsrv, char **err)
826{
827 newsrv->flags &= ~SRV_F_NON_STICK;
828 return 0;
829}
830
Frédéric Lécaille67e0e612017-03-14 15:21:31 +0100831/* Parse the "track" server keyword */
832static int srv_parse_track(char **args, int *cur_arg,
833 struct proxy *curproxy, struct server *newsrv, char **err)
834{
835 char *arg;
836
837 arg = args[*cur_arg + 1];
838 if (!*arg) {
839 memprintf(err, "'track' expects [<proxy>/]<server> as argument.\n");
840 return ERR_ALERT | ERR_FATAL;
841 }
842
843 free(newsrv->trackit);
844 newsrv->trackit = strdup(arg);
845
846 return 0;
Alexander Liu2a54bb72019-05-22 19:44:48 +0800847}
848
849/* Parse the "socks4" server keyword */
850static int srv_parse_socks4(char **args, int *cur_arg,
851 struct proxy *curproxy, struct server *newsrv, char **err)
852{
853 char *errmsg;
854 int port_low, port_high;
855 struct sockaddr_storage *sk;
Alexander Liu2a54bb72019-05-22 19:44:48 +0800856
857 errmsg = NULL;
858
859 if (!*args[*cur_arg + 1]) {
860 memprintf(err, "'%s' expects <addr>:<port> as argument.\n", args[*cur_arg]);
861 goto err;
862 }
863
864 /* 'sk' is statically allocated (no need to be freed). */
Willy Tarreau65ec4e32020-09-16 19:17:08 +0200865 sk = str2sa_range(args[*cur_arg + 1], NULL, &port_low, &port_high, NULL, NULL,
866 &errmsg, NULL, NULL,
867 PA_O_RESOLVE | PA_O_PORT_OK | PA_O_PORT_MAND | PA_O_STREAM | PA_O_CONNECT);
Alexander Liu2a54bb72019-05-22 19:44:48 +0800868 if (!sk) {
869 memprintf(err, "'%s %s' : %s\n", args[*cur_arg], args[*cur_arg + 1], errmsg);
870 goto err;
871 }
872
Alexander Liu2a54bb72019-05-22 19:44:48 +0800873 newsrv->flags |= SRV_F_SOCKS4_PROXY;
874 newsrv->socks4_addr = *sk;
875
Alexander Liu2a54bb72019-05-22 19:44:48 +0800876 return 0;
877
878 err:
879 free(errmsg);
880 return ERR_ALERT | ERR_FATAL;
Frédéric Lécaille67e0e612017-03-14 15:21:31 +0100881}
882
Frédéric Lécailledba97072017-03-17 15:33:50 +0100883
Willy Tarreau034c88c2017-01-23 23:36:45 +0100884/* parse the "tfo" server keyword */
885static int srv_parse_tfo(char **args, int *cur_arg, struct proxy *px, struct server *newsrv, char **err)
886{
887 newsrv->flags |= SRV_F_FASTOPEN;
888 return 0;
889}
890
Willy Tarreau4aac7db2014-05-16 11:48:10 +0200891/* Shutdown all connections of a server. The caller must pass a termination
Willy Tarreaue7dff022015-04-03 01:14:29 +0200892 * code in <why>, which must be one of SF_ERR_* indicating the reason for the
Willy Tarreau4aac7db2014-05-16 11:48:10 +0200893 * shutdown.
Willy Tarreau46b7f532018-08-21 11:54:26 +0200894 *
895 * Must be called with the server lock held.
Willy Tarreau4aac7db2014-05-16 11:48:10 +0200896 */
Willy Tarreau87b09662015-04-03 00:22:06 +0200897void srv_shutdown_streams(struct server *srv, int why)
Willy Tarreau4aac7db2014-05-16 11:48:10 +0200898{
Willy Tarreau87b09662015-04-03 00:22:06 +0200899 struct stream *stream, *stream_bck;
Willy Tarreau4aac7db2014-05-16 11:48:10 +0200900
Willy Tarreau87b09662015-04-03 00:22:06 +0200901 list_for_each_entry_safe(stream, stream_bck, &srv->actconns, by_srv)
902 if (stream->srv_conn == srv)
903 stream_shutdown(stream, why);
Willy Tarreau4aac7db2014-05-16 11:48:10 +0200904}
905
906/* Shutdown all connections of all backup servers of a proxy. The caller must
Willy Tarreaue7dff022015-04-03 01:14:29 +0200907 * pass a termination code in <why>, which must be one of SF_ERR_* indicating
Willy Tarreau4aac7db2014-05-16 11:48:10 +0200908 * the reason for the shutdown.
Willy Tarreau46b7f532018-08-21 11:54:26 +0200909 *
910 * Must be called with the server lock held.
Willy Tarreau4aac7db2014-05-16 11:48:10 +0200911 */
Willy Tarreau87b09662015-04-03 00:22:06 +0200912void srv_shutdown_backup_streams(struct proxy *px, int why)
Willy Tarreau4aac7db2014-05-16 11:48:10 +0200913{
914 struct server *srv;
915
916 for (srv = px->srv; srv != NULL; srv = srv->next)
917 if (srv->flags & SRV_F_BACKUP)
Willy Tarreau87b09662015-04-03 00:22:06 +0200918 srv_shutdown_streams(srv, why);
Willy Tarreau4aac7db2014-05-16 11:48:10 +0200919}
920
Willy Tarreaubda92272014-05-20 21:55:30 +0200921/* Appends some information to a message string related to a server going UP or
922 * DOWN. If both <forced> and <reason> are null and the server tracks another
923 * one, a "via" information will be provided to know where the status came from.
Emeric Brun5a133512017-10-19 14:42:30 +0200924 * If <check> is non-null, an entire string describing the check result will be
925 * appended after a comma and a space (eg: to report some information from the
926 * check that changed the state). In the other case, the string will be built
927 * using the check results stored into the struct server if present.
928 * If <xferred> is non-negative, some information about requeued sessions are
Willy Tarreaubda92272014-05-20 21:55:30 +0200929 * provided.
Willy Tarreau46b7f532018-08-21 11:54:26 +0200930 *
931 * Must be called with the server lock held.
Willy Tarreaua0066dd2014-05-16 11:25:16 +0200932 */
Willy Tarreau83061a82018-07-13 11:56:34 +0200933void srv_append_status(struct buffer *msg, struct server *s,
934 struct check *check, int xferred, int forced)
Willy Tarreaua0066dd2014-05-16 11:25:16 +0200935{
Emeric Brun5a133512017-10-19 14:42:30 +0200936 short status = s->op_st_chg.status;
937 short code = s->op_st_chg.code;
938 long duration = s->op_st_chg.duration;
939 char *desc = s->op_st_chg.reason;
940
941 if (check) {
942 status = check->status;
943 code = check->code;
944 duration = check->duration;
945 desc = check->desc;
946 }
947
948 if (status != -1) {
949 chunk_appendf(msg, ", reason: %s", get_check_status_description(status));
950
951 if (status >= HCHK_STATUS_L57DATA)
952 chunk_appendf(msg, ", code: %d", code);
953
954 if (desc && *desc) {
Willy Tarreau83061a82018-07-13 11:56:34 +0200955 struct buffer src;
Emeric Brun5a133512017-10-19 14:42:30 +0200956
957 chunk_appendf(msg, ", info: \"");
958
959 chunk_initlen(&src, desc, 0, strlen(desc));
960 chunk_asciiencode(msg, &src, '"');
961
962 chunk_appendf(msg, "\"");
963 }
964
965 if (duration >= 0)
966 chunk_appendf(msg, ", check duration: %ldms", duration);
967 }
968 else if (desc && *desc) {
969 chunk_appendf(msg, ", %s", desc);
970 }
971 else if (!forced && s->track) {
Willy Tarreaubda92272014-05-20 21:55:30 +0200972 chunk_appendf(msg, " via %s/%s", s->track->proxy->id, s->track->id);
Emeric Brun5a133512017-10-19 14:42:30 +0200973 }
Willy Tarreaua0066dd2014-05-16 11:25:16 +0200974
975 if (xferred >= 0) {
Emeric Brun52a91d32017-08-31 14:41:55 +0200976 if (s->next_state == SRV_ST_STOPPED)
Willy Tarreaua0066dd2014-05-16 11:25:16 +0200977 chunk_appendf(msg, ". %d active and %d backup servers left.%s"
978 " %d sessions active, %d requeued, %d remaining in queue",
979 s->proxy->srv_act, s->proxy->srv_bck,
980 (s->proxy->srv_bck && !s->proxy->srv_act) ? " Running on backup." : "",
981 s->cur_sess, xferred, s->nbpend);
982 else
983 chunk_appendf(msg, ". %d active and %d backup servers online.%s"
984 " %d sessions requeued, %d total in queue",
985 s->proxy->srv_act, s->proxy->srv_bck,
986 (s->proxy->srv_bck && !s->proxy->srv_act) ? " Running on backup." : "",
987 xferred, s->nbpend);
988 }
989}
990
Emeric Brun5a133512017-10-19 14:42:30 +0200991/* Marks server <s> down, regardless of its checks' statuses. The server is
992 * registered in a list to postpone the counting of the remaining servers on
993 * the proxy and transfers queued streams whenever possible to other servers at
994 * a sync point. Maintenance servers are ignored. It stores the <reason> if
995 * non-null as the reason for going down or the available data from the check
996 * struct to recompute this reason later.
Willy Tarreau46b7f532018-08-21 11:54:26 +0200997 *
998 * Must be called with the server lock held.
Willy Tarreaue7d1ef12014-05-20 22:25:12 +0200999 */
Emeric Brun5a133512017-10-19 14:42:30 +02001000void srv_set_stopped(struct server *s, const char *reason, struct check *check)
Willy Tarreaue7d1ef12014-05-20 22:25:12 +02001001{
1002 struct server *srv;
Willy Tarreaue7d1ef12014-05-20 22:25:12 +02001003
Emeric Brun64cc49c2017-10-03 14:46:45 +02001004 if ((s->cur_admin & SRV_ADMF_MAINT) || s->next_state == SRV_ST_STOPPED)
Willy Tarreaue7d1ef12014-05-20 22:25:12 +02001005 return;
1006
Emeric Brun52a91d32017-08-31 14:41:55 +02001007 s->next_state = SRV_ST_STOPPED;
Emeric Brun5a133512017-10-19 14:42:30 +02001008 *s->op_st_chg.reason = 0;
1009 s->op_st_chg.status = -1;
1010 if (reason) {
1011 strlcpy2(s->op_st_chg.reason, reason, sizeof(s->op_st_chg.reason));
1012 }
1013 else if (check) {
Willy Tarreau358847f2017-11-20 21:33:21 +01001014 strlcpy2(s->op_st_chg.reason, check->desc, sizeof(s->op_st_chg.reason));
Emeric Brun5a133512017-10-19 14:42:30 +02001015 s->op_st_chg.code = check->code;
1016 s->op_st_chg.status = check->status;
1017 s->op_st_chg.duration = check->duration;
1018 }
Willy Tarreaue7d1ef12014-05-20 22:25:12 +02001019
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001020 /* propagate changes */
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001021 srv_update_status(s);
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001022
Emeric Brun9f0b4582017-10-23 14:39:51 +02001023 for (srv = s->trackers; srv; srv = srv->tracknext) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001024 HA_SPIN_LOCK(SERVER_LOCK, &srv->lock);
Emeric Brun5a133512017-10-19 14:42:30 +02001025 srv_set_stopped(srv, NULL, NULL);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001026 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
Emeric Brun9f0b4582017-10-23 14:39:51 +02001027 }
Willy Tarreaue7d1ef12014-05-20 22:25:12 +02001028}
1029
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001030/* Marks server <s> up regardless of its checks' statuses and provided it isn't
Emeric Brun5a133512017-10-19 14:42:30 +02001031 * in maintenance. The server is registered in a list to postpone the counting
1032 * of the remaining servers on the proxy and tries to grab requests from the
1033 * proxy at a sync point. Maintenance servers are ignored. It stores the
1034 * <reason> if non-null as the reason for going down or the available data
1035 * from the check struct to recompute this reason later.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001036 *
1037 * Must be called with the server lock held.
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001038 */
Emeric Brun5a133512017-10-19 14:42:30 +02001039void srv_set_running(struct server *s, const char *reason, struct check *check)
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001040{
1041 struct server *srv;
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001042
Emeric Brun64cc49c2017-10-03 14:46:45 +02001043 if (s->cur_admin & SRV_ADMF_MAINT)
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001044 return;
1045
Emeric Brun52a91d32017-08-31 14:41:55 +02001046 if (s->next_state == SRV_ST_STARTING || s->next_state == SRV_ST_RUNNING)
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001047 return;
1048
Emeric Brun52a91d32017-08-31 14:41:55 +02001049 s->next_state = SRV_ST_STARTING;
Emeric Brun5a133512017-10-19 14:42:30 +02001050 *s->op_st_chg.reason = 0;
1051 s->op_st_chg.status = -1;
1052 if (reason) {
1053 strlcpy2(s->op_st_chg.reason, reason, sizeof(s->op_st_chg.reason));
1054 }
1055 else if (check) {
Willy Tarreau358847f2017-11-20 21:33:21 +01001056 strlcpy2(s->op_st_chg.reason, check->desc, sizeof(s->op_st_chg.reason));
Emeric Brun5a133512017-10-19 14:42:30 +02001057 s->op_st_chg.code = check->code;
1058 s->op_st_chg.status = check->status;
1059 s->op_st_chg.duration = check->duration;
1060 }
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001061
Emeric Brun64cc49c2017-10-03 14:46:45 +02001062 if (s->slowstart <= 0)
1063 s->next_state = SRV_ST_RUNNING;
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001064
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001065 /* propagate changes */
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001066 srv_update_status(s);
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001067
Emeric Brun9f0b4582017-10-23 14:39:51 +02001068 for (srv = s->trackers; srv; srv = srv->tracknext) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001069 HA_SPIN_LOCK(SERVER_LOCK, &srv->lock);
Emeric Brun5a133512017-10-19 14:42:30 +02001070 srv_set_running(srv, NULL, NULL);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001071 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
Emeric Brun9f0b4582017-10-23 14:39:51 +02001072 }
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001073}
1074
Willy Tarreau8eb77842014-05-21 13:54:57 +02001075/* Marks server <s> stopping regardless of its checks' statuses and provided it
Emeric Brun5a133512017-10-19 14:42:30 +02001076 * isn't in maintenance. The server is registered in a list to postpone the
1077 * counting of the remaining servers on the proxy and tries to grab requests
1078 * from the proxy. Maintenance servers are ignored. It stores the
1079 * <reason> if non-null as the reason for going down or the available data
1080 * from the check struct to recompute this reason later.
Willy Tarreau8eb77842014-05-21 13:54:57 +02001081 * up. Note that it makes use of the trash to build the log strings, so <reason>
1082 * must not be placed there.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001083 *
1084 * Must be called with the server lock held.
Willy Tarreau8eb77842014-05-21 13:54:57 +02001085 */
Emeric Brun5a133512017-10-19 14:42:30 +02001086void srv_set_stopping(struct server *s, const char *reason, struct check *check)
Willy Tarreau8eb77842014-05-21 13:54:57 +02001087{
1088 struct server *srv;
Willy Tarreau8eb77842014-05-21 13:54:57 +02001089
Emeric Brun64cc49c2017-10-03 14:46:45 +02001090 if (s->cur_admin & SRV_ADMF_MAINT)
Willy Tarreau8eb77842014-05-21 13:54:57 +02001091 return;
1092
Emeric Brun52a91d32017-08-31 14:41:55 +02001093 if (s->next_state == SRV_ST_STOPPING)
Willy Tarreau8eb77842014-05-21 13:54:57 +02001094 return;
1095
Emeric Brun52a91d32017-08-31 14:41:55 +02001096 s->next_state = SRV_ST_STOPPING;
Emeric Brun5a133512017-10-19 14:42:30 +02001097 *s->op_st_chg.reason = 0;
1098 s->op_st_chg.status = -1;
1099 if (reason) {
1100 strlcpy2(s->op_st_chg.reason, reason, sizeof(s->op_st_chg.reason));
1101 }
1102 else if (check) {
Willy Tarreau358847f2017-11-20 21:33:21 +01001103 strlcpy2(s->op_st_chg.reason, check->desc, sizeof(s->op_st_chg.reason));
Emeric Brun5a133512017-10-19 14:42:30 +02001104 s->op_st_chg.code = check->code;
1105 s->op_st_chg.status = check->status;
1106 s->op_st_chg.duration = check->duration;
1107 }
Willy Tarreau8eb77842014-05-21 13:54:57 +02001108
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001109 /* propagate changes */
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001110 srv_update_status(s);
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001111
Emeric Brun9f0b4582017-10-23 14:39:51 +02001112 for (srv = s->trackers; srv; srv = srv->tracknext) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001113 HA_SPIN_LOCK(SERVER_LOCK, &srv->lock);
Emeric Brun5a133512017-10-19 14:42:30 +02001114 srv_set_stopping(srv, NULL, NULL);
Christopher Faulet8d01fd62018-01-24 21:49:41 +01001115 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
Emeric Brun9f0b4582017-10-23 14:39:51 +02001116 }
Willy Tarreau8eb77842014-05-21 13:54:57 +02001117}
Willy Tarreaudbd5e782014-05-20 22:46:35 +02001118
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001119/* Enables admin flag <mode> (among SRV_ADMF_*) on server <s>. This is used to
1120 * enforce either maint mode or drain mode. It is not allowed to set more than
1121 * one flag at once. The equivalent "inherited" flag is propagated to all
1122 * tracking servers. Maintenance mode disables health checks (but not agent
1123 * checks). When either the flag is already set or no flag is passed, nothing
Willy Tarreau8b428482016-11-07 15:53:43 +01001124 * is done. If <cause> is non-null, it will be displayed at the end of the log
1125 * lines to justify the state change.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001126 *
1127 * Must be called with the server lock held.
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001128 */
Willy Tarreau8b428482016-11-07 15:53:43 +01001129void srv_set_admin_flag(struct server *s, enum srv_admin mode, const char *cause)
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001130{
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001131 struct server *srv;
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001132
1133 if (!mode)
1134 return;
1135
1136 /* stop going down as soon as we meet a server already in the same state */
Emeric Brun52a91d32017-08-31 14:41:55 +02001137 if (s->next_admin & mode)
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001138 return;
1139
Emeric Brun52a91d32017-08-31 14:41:55 +02001140 s->next_admin |= mode;
Emeric Brun64cc49c2017-10-03 14:46:45 +02001141 if (cause)
1142 strlcpy2(s->adm_st_chg_cause, cause, sizeof(s->adm_st_chg_cause));
1143
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001144 /* propagate changes */
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001145 srv_update_status(s);
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001146
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001147 /* stop going down if the equivalent flag was already present (forced or inherited) */
Emeric Brun52a91d32017-08-31 14:41:55 +02001148 if (((mode & SRV_ADMF_MAINT) && (s->next_admin & ~mode & SRV_ADMF_MAINT)) ||
1149 ((mode & SRV_ADMF_DRAIN) && (s->next_admin & ~mode & SRV_ADMF_DRAIN)))
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001150 return;
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001151
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001152 /* compute the inherited flag to propagate */
1153 if (mode & SRV_ADMF_MAINT)
1154 mode = SRV_ADMF_IMAINT;
1155 else if (mode & SRV_ADMF_DRAIN)
1156 mode = SRV_ADMF_IDRAIN;
1157
Emeric Brun9f0b4582017-10-23 14:39:51 +02001158 for (srv = s->trackers; srv; srv = srv->tracknext) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001159 HA_SPIN_LOCK(SERVER_LOCK, &srv->lock);
Willy Tarreau8b428482016-11-07 15:53:43 +01001160 srv_set_admin_flag(srv, mode, cause);
Christopher Faulet8d01fd62018-01-24 21:49:41 +01001161 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
Emeric Brun9f0b4582017-10-23 14:39:51 +02001162 }
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001163}
1164
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001165/* Disables admin flag <mode> (among SRV_ADMF_*) on server <s>. This is used to
1166 * stop enforcing either maint mode or drain mode. It is not allowed to set more
1167 * than one flag at once. The equivalent "inherited" flag is propagated to all
1168 * tracking servers. Leaving maintenance mode re-enables health checks. When
1169 * either the flag is already cleared or no flag is passed, nothing is done.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001170 *
1171 * Must be called with the server lock held.
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001172 */
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001173void srv_clr_admin_flag(struct server *s, enum srv_admin mode)
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001174{
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001175 struct server *srv;
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001176
1177 if (!mode)
1178 return;
1179
1180 /* stop going down as soon as we see the flag is not there anymore */
Emeric Brun52a91d32017-08-31 14:41:55 +02001181 if (!(s->next_admin & mode))
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001182 return;
1183
Emeric Brun52a91d32017-08-31 14:41:55 +02001184 s->next_admin &= ~mode;
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001185
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001186 /* propagate changes */
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001187 srv_update_status(s);
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001188
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001189 /* stop going down if the equivalent flag is still present (forced or inherited) */
Emeric Brun52a91d32017-08-31 14:41:55 +02001190 if (((mode & SRV_ADMF_MAINT) && (s->next_admin & SRV_ADMF_MAINT)) ||
1191 ((mode & SRV_ADMF_DRAIN) && (s->next_admin & SRV_ADMF_DRAIN)))
Willy Tarreaueeba36b2018-08-21 08:22:26 +02001192 return;
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001193
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001194 if (mode & SRV_ADMF_MAINT)
1195 mode = SRV_ADMF_IMAINT;
1196 else if (mode & SRV_ADMF_DRAIN)
1197 mode = SRV_ADMF_IDRAIN;
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001198
Emeric Brun9f0b4582017-10-23 14:39:51 +02001199 for (srv = s->trackers; srv; srv = srv->tracknext) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001200 HA_SPIN_LOCK(SERVER_LOCK, &srv->lock);
Willy Tarreaubfc7b7a2014-05-22 16:14:34 +02001201 srv_clr_admin_flag(srv, mode);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001202 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
Emeric Brun9f0b4582017-10-23 14:39:51 +02001203 }
Willy Tarreaua0066dd2014-05-16 11:25:16 +02001204}
1205
Willy Tarreau757478e2016-11-03 19:22:19 +01001206/* principle: propagate maint and drain to tracking servers. This is useful
1207 * upon startup so that inherited states are correct.
1208 */
1209static void srv_propagate_admin_state(struct server *srv)
1210{
1211 struct server *srv2;
1212
1213 if (!srv->trackers)
1214 return;
1215
1216 for (srv2 = srv->trackers; srv2; srv2 = srv2->tracknext) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001217 HA_SPIN_LOCK(SERVER_LOCK, &srv2->lock);
Emeric Brun52a91d32017-08-31 14:41:55 +02001218 if (srv->next_admin & (SRV_ADMF_MAINT | SRV_ADMF_CMAINT))
Willy Tarreau8b428482016-11-07 15:53:43 +01001219 srv_set_admin_flag(srv2, SRV_ADMF_IMAINT, NULL);
Willy Tarreau757478e2016-11-03 19:22:19 +01001220
Emeric Brun52a91d32017-08-31 14:41:55 +02001221 if (srv->next_admin & SRV_ADMF_DRAIN)
Willy Tarreau8b428482016-11-07 15:53:43 +01001222 srv_set_admin_flag(srv2, SRV_ADMF_IDRAIN, NULL);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001223 HA_SPIN_UNLOCK(SERVER_LOCK, &srv2->lock);
Willy Tarreau757478e2016-11-03 19:22:19 +01001224 }
1225}
1226
1227/* Compute and propagate the admin states for all servers in proxy <px>.
1228 * Only servers *not* tracking another one are considered, because other
1229 * ones will be handled when the server they track is visited.
1230 */
1231void srv_compute_all_admin_states(struct proxy *px)
1232{
1233 struct server *srv;
1234
1235 for (srv = px->srv; srv; srv = srv->next) {
1236 if (srv->track)
1237 continue;
1238 srv_propagate_admin_state(srv);
1239 }
1240}
1241
Willy Tarreaudff55432012-10-10 17:51:05 +02001242/* Note: must not be declared <const> as its list will be overwritten.
1243 * Please take care of keeping this list alphabetically sorted, doing so helps
1244 * all code contributors.
1245 * Optional keywords are also declared with a NULL ->parse() function so that
1246 * the config parser can report an appropriate error when a known keyword was
1247 * not enabled.
Frédéric Lécailledfacd692017-04-16 17:14:14 +02001248 * Note: -1 as ->skip value means that the number of arguments are variable.
Willy Tarreaudff55432012-10-10 17:51:05 +02001249 */
1250static struct srv_kw_list srv_kws = { "ALL", { }, {
Frédéric Lécaille1502cfd2017-03-10 15:36:14 +01001251 { "backup", srv_parse_backup, 0, 1 }, /* Flag as backup server */
Frédéric Lécaille9d1b95b2017-03-15 09:13:33 +01001252 { "cookie", srv_parse_cookie, 1, 1 }, /* Assign a cookie to the server */
Frédéric Lécaille2a0d0612017-03-21 11:53:54 +01001253 { "disabled", srv_parse_disabled, 0, 1 }, /* Start the server in 'disabled' state */
1254 { "enabled", srv_parse_enabled, 0, 1 }, /* Start the server in 'enabled' state */
Frédéric Lécaille1502cfd2017-03-10 15:36:14 +01001255 { "id", srv_parse_id, 1, 0 }, /* set id# of server */
Willy Tarreau9c538e02019-01-23 10:21:49 +01001256 { "max-reuse", srv_parse_max_reuse, 1, 1 }, /* Set the max number of requests on a connection, -1 means unlimited */
Frédéric Lécaille22f41a22017-03-16 17:17:36 +01001257 { "namespace", srv_parse_namespace, 1, 1 }, /* Namespace the server socket belongs to (if supported) */
Frédéric Lécaille1502cfd2017-03-10 15:36:14 +01001258 { "no-backup", srv_parse_no_backup, 0, 1 }, /* Flag as non-backup server */
Frédéric Lécaille31045e42017-03-10 16:40:00 +01001259 { "no-send-proxy", srv_parse_no_send_proxy, 0, 1 }, /* Disable use of PROXY V1 protocol */
1260 { "no-send-proxy-v2", srv_parse_no_send_proxy_v2, 0, 1 }, /* Disable use of PROXY V2 protocol */
Frédéric Lécaille1b9423d2019-07-04 14:19:06 +02001261 { "no-tfo", srv_parse_no_tfo, 0, 1 }, /* Disable use of TCP Fast Open */
Frédéric Lécaillef9bc1d62017-03-10 15:50:49 +01001262 { "non-stick", srv_parse_non_stick, 0, 1 }, /* Disable stick-table persistence */
Frédéric Lécaille547356e2017-03-15 08:55:39 +01001263 { "observe", srv_parse_observe, 1, 1 }, /* Enables health adjusting based on observing communication with the server */
Willy Tarreau2f3f4d32020-07-01 07:43:51 +02001264 { "pool-low-conn", srv_parse_pool_low_conn, 1, 1 }, /* Set the min number of orphan idle connecbefore being allowed to pick from other threads */
Amaury Denoyelle18c68df2021-01-26 14:35:24 +01001265 { "pool-max-conn", srv_parse_pool_max_conn, 1, 1 }, /* Set the max number of orphan idle connections, -1 means unlimited */
Olivier Houchardb7b3faa2018-12-14 18:15:36 +01001266 { "pool-purge-delay", srv_parse_pool_purge_delay, 1, 1 }, /* Set the time before we destroy orphan idle connections, defaults to 1s */
Christopher Faulet8ed0a3e2018-04-10 14:45:45 +02001267 { "proto", srv_parse_proto, 1, 1 }, /* Set the proto to use for all outgoing connections */
Emmanuel Hocdetf643b802018-02-01 15:20:32 +01001268 { "proxy-v2-options", srv_parse_proxy_v2_options, 1, 1 }, /* options for send-proxy-v2 */
Frédéric Lécaille16186232017-03-14 16:42:49 +01001269 { "redir", srv_parse_redir, 1, 1 }, /* Enable redirection mode */
Frédéric Lécaille31045e42017-03-10 16:40:00 +01001270 { "send-proxy", srv_parse_send_proxy, 0, 1 }, /* Enforce use of PROXY V1 protocol */
1271 { "send-proxy-v2", srv_parse_send_proxy_v2, 0, 1 }, /* Enforce use of PROXY V2 protocol */
Frédéric Lécailledfacd692017-04-16 17:14:14 +02001272 { "source", srv_parse_source, -1, 1 }, /* Set the source address to be used to connect to the server */
Frédéric Lécaillef9bc1d62017-03-10 15:50:49 +01001273 { "stick", srv_parse_stick, 0, 1 }, /* Enable stick-table persistence */
Olivier Houchard8d82db72019-07-04 13:34:10 +02001274 { "tfo", srv_parse_tfo, 0, 1 }, /* enable TCP Fast Open of server */
Frédéric Lécaille67e0e612017-03-14 15:21:31 +01001275 { "track", srv_parse_track, 1, 1 }, /* Set the current state of the server, tracking another one */
Alexander Liu2a54bb72019-05-22 19:44:48 +08001276 { "socks4", srv_parse_socks4, 1, 1 }, /* Set the socks4 proxy of the server*/
Willy Tarreaudff55432012-10-10 17:51:05 +02001277 { NULL, NULL, 0 },
1278}};
1279
Willy Tarreau0108d902018-11-25 19:14:37 +01001280INITCALL1(STG_REGISTER, srv_register_keywords, &srv_kws);
Willy Tarreaudff55432012-10-10 17:51:05 +02001281
Willy Tarreau004e0452013-11-21 11:22:01 +01001282/* Recomputes the server's eweight based on its state, uweight, the current time,
Ilya Shipitsinc02a23f2020-05-06 00:53:22 +05001283 * and the proxy's algorithm. To be used after updating sv->uweight. The warmup
Willy Tarreau3ff577e2018-08-02 11:48:52 +02001284 * state is automatically disabled if the time is elapsed. If <must_update> is
1285 * not zero, the update will be propagated immediately.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001286 *
1287 * Must be called with the server lock held.
Willy Tarreau004e0452013-11-21 11:22:01 +01001288 */
Willy Tarreau3ff577e2018-08-02 11:48:52 +02001289void server_recalc_eweight(struct server *sv, int must_update)
Willy Tarreau004e0452013-11-21 11:22:01 +01001290{
1291 struct proxy *px = sv->proxy;
1292 unsigned w;
1293
1294 if (now.tv_sec < sv->last_change || now.tv_sec >= sv->last_change + sv->slowstart) {
1295 /* go to full throttle if the slowstart interval is reached */
Emeric Brun52a91d32017-08-31 14:41:55 +02001296 if (sv->next_state == SRV_ST_STARTING)
1297 sv->next_state = SRV_ST_RUNNING;
Willy Tarreau004e0452013-11-21 11:22:01 +01001298 }
1299
1300 /* We must take care of not pushing the server to full throttle during slow starts.
1301 * It must also start immediately, at least at the minimal step when leaving maintenance.
1302 */
Emeric Brun52a91d32017-08-31 14:41:55 +02001303 if ((sv->next_state == SRV_ST_STARTING) && (px->lbprm.algo & BE_LB_PROP_DYN))
Willy Tarreau004e0452013-11-21 11:22:01 +01001304 w = (px->lbprm.wdiv * (now.tv_sec - sv->last_change) + sv->slowstart) / sv->slowstart;
1305 else
1306 w = px->lbprm.wdiv;
1307
Emeric Brun52a91d32017-08-31 14:41:55 +02001308 sv->next_eweight = (sv->uweight * w + px->lbprm.wmult - 1) / px->lbprm.wmult;
Willy Tarreau004e0452013-11-21 11:22:01 +01001309
Willy Tarreau3ff577e2018-08-02 11:48:52 +02001310 /* propagate changes only if needed (i.e. not recursively) */
Willy Tarreau49725a02018-08-21 19:54:09 +02001311 if (must_update)
Willy Tarreau3ff577e2018-08-02 11:48:52 +02001312 srv_update_status(sv);
Willy Tarreau004e0452013-11-21 11:22:01 +01001313}
1314
Willy Tarreaubaaee002006-06-26 02:48:02 +02001315/*
Simon Horman7d09b9a2013-02-12 10:45:51 +09001316 * Parses weight_str and configures sv accordingly.
1317 * Returns NULL on success, error message string otherwise.
Willy Tarreau46b7f532018-08-21 11:54:26 +02001318 *
1319 * Must be called with the server lock held.
Simon Horman7d09b9a2013-02-12 10:45:51 +09001320 */
1321const char *server_parse_weight_change_request(struct server *sv,
1322 const char *weight_str)
1323{
1324 struct proxy *px;
Simon Hormanb796afa2013-02-12 10:45:53 +09001325 long int w;
1326 char *end;
Simon Horman7d09b9a2013-02-12 10:45:51 +09001327
1328 px = sv->proxy;
1329
1330 /* if the weight is terminated with '%', it is set relative to
1331 * the initial weight, otherwise it is absolute.
1332 */
1333 if (!*weight_str)
1334 return "Require <weight> or <weight%>.\n";
1335
Simon Hormanb796afa2013-02-12 10:45:53 +09001336 w = strtol(weight_str, &end, 10);
1337 if (end == weight_str)
1338 return "Empty weight string empty or preceded by garbage";
1339 else if (end[0] == '%' && end[1] == '\0') {
Simon Horman58b5d292013-02-12 10:45:52 +09001340 if (w < 0)
Simon Horman7d09b9a2013-02-12 10:45:51 +09001341 return "Relative weight must be positive.\n";
Simon Horman58b5d292013-02-12 10:45:52 +09001342 /* Avoid integer overflow */
1343 if (w > 25600)
1344 w = 25600;
Simon Horman7d09b9a2013-02-12 10:45:51 +09001345 w = sv->iweight * w / 100;
Simon Horman58b5d292013-02-12 10:45:52 +09001346 if (w > 256)
1347 w = 256;
Simon Horman7d09b9a2013-02-12 10:45:51 +09001348 }
1349 else if (w < 0 || w > 256)
1350 return "Absolute weight can only be between 0 and 256 inclusive.\n";
Simon Hormanb796afa2013-02-12 10:45:53 +09001351 else if (end[0] != '\0')
1352 return "Trailing garbage in weight string";
Simon Horman7d09b9a2013-02-12 10:45:51 +09001353
1354 if (w && w != sv->iweight && !(px->lbprm.algo & BE_LB_PROP_DYN))
1355 return "Backend is using a static LB algorithm and only accepts weights '0%' and '100%'.\n";
1356
1357 sv->uweight = w;
Willy Tarreau3ff577e2018-08-02 11:48:52 +02001358 server_recalc_eweight(sv, 1);
Simon Horman7d09b9a2013-02-12 10:45:51 +09001359
1360 return NULL;
1361}
1362
Baptiste Assmann3d8f8312015-04-13 22:54:33 +02001363/*
Thierry Fournier09a91782016-02-24 08:25:39 +01001364 * Parses <addr_str> and configures <sv> accordingly. <from> precise
1365 * the source of the change in the associated message log.
Baptiste Assmann3d8f8312015-04-13 22:54:33 +02001366 * Returns:
1367 * - error string on error
1368 * - NULL on success
Willy Tarreau46b7f532018-08-21 11:54:26 +02001369 *
1370 * Must be called with the server lock held.
Baptiste Assmann3d8f8312015-04-13 22:54:33 +02001371 */
1372const char *server_parse_addr_change_request(struct server *sv,
Thierry Fournier09a91782016-02-24 08:25:39 +01001373 const char *addr_str, const char *updater)
Baptiste Assmann3d8f8312015-04-13 22:54:33 +02001374{
1375 unsigned char ip[INET6_ADDRSTRLEN];
1376
1377 if (inet_pton(AF_INET6, addr_str, ip)) {
Thierry Fournier09a91782016-02-24 08:25:39 +01001378 update_server_addr(sv, ip, AF_INET6, updater);
Baptiste Assmann3d8f8312015-04-13 22:54:33 +02001379 return NULL;
1380 }
1381 if (inet_pton(AF_INET, addr_str, ip)) {
Thierry Fournier09a91782016-02-24 08:25:39 +01001382 update_server_addr(sv, ip, AF_INET, updater);
Baptiste Assmann3d8f8312015-04-13 22:54:33 +02001383 return NULL;
1384 }
1385
1386 return "Could not understand IP address format.\n";
1387}
1388
Willy Tarreau46b7f532018-08-21 11:54:26 +02001389/*
1390 * Must be called with the server lock held.
1391 */
Nenad Merdanovic174dd372016-04-24 23:10:06 +02001392const char *server_parse_maxconn_change_request(struct server *sv,
1393 const char *maxconn_str)
1394{
1395 long int v;
1396 char *end;
1397
1398 if (!*maxconn_str)
1399 return "Require <maxconn>.\n";
1400
1401 v = strtol(maxconn_str, &end, 10);
1402 if (end == maxconn_str)
1403 return "maxconn string empty or preceded by garbage";
1404 else if (end[0] != '\0')
1405 return "Trailing garbage in maxconn string";
1406
1407 if (sv->maxconn == sv->minconn) { // static maxconn
1408 sv->maxconn = sv->minconn = v;
1409 } else { // dynamic maxconn
1410 sv->maxconn = v;
1411 }
1412
1413 if (may_dequeue_tasks(sv, sv->proxy))
1414 process_srv_queue(sv);
1415
1416 return NULL;
1417}
1418
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001419#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001420static struct sample_expr *srv_sni_sample_parse_expr(struct server *srv, struct proxy *px,
1421 const char *file, int linenum, char **err)
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001422{
1423 int idx;
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001424 const char *args[] = {
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001425 srv->sni_expr,
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001426 NULL,
1427 };
1428
1429 idx = 0;
Olivier Houchard7d8e6882017-04-20 18:21:17 +02001430 px->conf.args.ctx = ARGC_SRV;
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001431
Willy Tarreaue3b57bf2020-02-14 16:50:14 +01001432 return sample_parse_expr((char **)args, &idx, file, linenum, err, &px->conf.args, NULL);
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001433}
1434
1435static int server_parse_sni_expr(struct server *newsrv, struct proxy *px, char **err)
1436{
1437 struct sample_expr *expr;
1438
1439 expr = srv_sni_sample_parse_expr(newsrv, px, px->conf.file, px->conf.line, err);
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001440 if (!expr) {
1441 memprintf(err, "error detected while parsing sni expression : %s", *err);
1442 return ERR_ALERT | ERR_FATAL;
1443 }
1444
1445 if (!(expr->fetch->val & SMP_VAL_BE_SRV_CON)) {
1446 memprintf(err, "error detected while parsing sni expression : "
1447 " fetch method '%s' extracts information from '%s', "
1448 "none of which is available here.\n",
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001449 newsrv->sni_expr, sample_src_names(expr->fetch->use));
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001450 return ERR_ALERT | ERR_FATAL;
1451 }
1452
1453 px->http_needed |= !!(expr->fetch->use & SMP_USE_HTTP_ANY);
1454 release_sample_expr(newsrv->ssl_ctx.sni);
1455 newsrv->ssl_ctx.sni = expr;
1456
1457 return 0;
1458}
1459#endif
1460
Gaetan Rivet10c4b4a2020-02-11 11:42:38 +01001461static void display_parser_err(const char *file, int linenum, char **args, int cur_arg, int err_code, char **err)
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001462{
Gaetan Rivet10c4b4a2020-02-11 11:42:38 +01001463 char *msg = "error encountered while processing ";
1464 char *quote = "'";
1465 char *token = args[cur_arg];
1466
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001467 if (err && *err) {
1468 indent_msg(err, 2);
Gaetan Rivet10c4b4a2020-02-11 11:42:38 +01001469 msg = *err;
1470 quote = "";
1471 token = "";
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001472 }
Gaetan Rivet10c4b4a2020-02-11 11:42:38 +01001473
1474 if (err_code & ERR_WARN && !(err_code & ERR_ALERT))
1475 ha_warning("parsing [%s:%d] : '%s %s' : %s%s%s%s.\n",
1476 file, linenum, args[0], args[1],
1477 msg, quote, token, quote);
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001478 else
Gaetan Rivet10c4b4a2020-02-11 11:42:38 +01001479 ha_alert("parsing [%s:%d] : '%s %s' : %s%s%s%s.\n",
1480 file, linenum, args[0], args[1],
1481 msg, quote, token, quote);
Frédéric Lécaille9a146de2017-03-20 14:54:41 +01001482}
1483
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001484static void srv_conn_src_sport_range_cpy(struct server *srv,
1485 struct server *src)
1486{
1487 int range_sz;
1488
1489 range_sz = src->conn_src.sport_range->size;
1490 if (range_sz > 0) {
1491 srv->conn_src.sport_range = port_range_alloc_range(range_sz);
1492 if (srv->conn_src.sport_range != NULL) {
1493 int i;
1494
1495 for (i = 0; i < range_sz; i++) {
1496 srv->conn_src.sport_range->ports[i] =
1497 src->conn_src.sport_range->ports[i];
1498 }
1499 }
1500 }
1501}
1502
1503/*
1504 * Copy <src> server connection source settings to <srv> server everything needed.
1505 */
1506static void srv_conn_src_cpy(struct server *srv, struct server *src)
1507{
1508 srv->conn_src.opts = src->conn_src.opts;
1509 srv->conn_src.source_addr = src->conn_src.source_addr;
1510
1511 /* Source port range copy. */
1512 if (src->conn_src.sport_range != NULL)
1513 srv_conn_src_sport_range_cpy(srv, src);
1514
1515#ifdef CONFIG_HAP_TRANSPARENT
1516 if (src->conn_src.bind_hdr_name != NULL) {
1517 srv->conn_src.bind_hdr_name = strdup(src->conn_src.bind_hdr_name);
1518 srv->conn_src.bind_hdr_len = strlen(src->conn_src.bind_hdr_name);
1519 }
1520 srv->conn_src.bind_hdr_occ = src->conn_src.bind_hdr_occ;
1521 srv->conn_src.tproxy_addr = src->conn_src.tproxy_addr;
1522#endif
1523 if (src->conn_src.iface_name != NULL)
1524 srv->conn_src.iface_name = strdup(src->conn_src.iface_name);
1525}
1526
1527/*
1528 * Copy <src> server SSL settings to <srv> server allocating
1529 * everything needed.
1530 */
1531#if defined(USE_OPENSSL)
1532static void srv_ssl_settings_cpy(struct server *srv, struct server *src)
1533{
1534 if (src->ssl_ctx.ca_file != NULL)
1535 srv->ssl_ctx.ca_file = strdup(src->ssl_ctx.ca_file);
1536 if (src->ssl_ctx.crl_file != NULL)
1537 srv->ssl_ctx.crl_file = strdup(src->ssl_ctx.crl_file);
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001538
1539 srv->ssl_ctx.verify = src->ssl_ctx.verify;
1540
1541 if (src->ssl_ctx.verify_host != NULL)
1542 srv->ssl_ctx.verify_host = strdup(src->ssl_ctx.verify_host);
1543 if (src->ssl_ctx.ciphers != NULL)
1544 srv->ssl_ctx.ciphers = strdup(src->ssl_ctx.ciphers);
Jerome Magnin2e8d52f2020-04-22 11:40:18 +02001545 if (src->ssl_ctx.options)
1546 srv->ssl_ctx.options = src->ssl_ctx.options;
1547 if (src->ssl_ctx.methods.flags)
1548 srv->ssl_ctx.methods.flags = src->ssl_ctx.methods.flags;
1549 if (src->ssl_ctx.methods.min)
1550 srv->ssl_ctx.methods.min = src->ssl_ctx.methods.min;
1551 if (src->ssl_ctx.methods.max)
1552 srv->ssl_ctx.methods.max = src->ssl_ctx.methods.max;
1553
Ilya Shipitsin2aa4b3a2021-01-07 11:55:45 +05001554#ifdef HAVE_SSL_CTX_SET_CIPHERSUITES
Dirkjan Bussink415150f2018-09-14 11:14:21 +02001555 if (src->ssl_ctx.ciphersuites != NULL)
1556 srv->ssl_ctx.ciphersuites = strdup(src->ssl_ctx.ciphersuites);
1557#endif
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001558 if (src->sni_expr != NULL)
1559 srv->sni_expr = strdup(src->sni_expr);
Olivier Houchardc7566002018-11-20 23:33:50 +01001560
1561#ifdef TLSEXT_TYPE_application_layer_protocol_negotiation
1562 if (src->ssl_ctx.alpn_str) {
1563 srv->ssl_ctx.alpn_str = malloc(src->ssl_ctx.alpn_len);
1564 if (srv->ssl_ctx.alpn_str) {
1565 memcpy(srv->ssl_ctx.alpn_str, src->ssl_ctx.alpn_str,
1566 src->ssl_ctx.alpn_len);
1567 srv->ssl_ctx.alpn_len = src->ssl_ctx.alpn_len;
1568 }
1569 }
1570#endif
1571#ifdef OPENSSL_NPN_NEGOTIATED
1572 if (src->ssl_ctx.npn_str) {
1573 srv->ssl_ctx.npn_str = malloc(src->ssl_ctx.npn_len);
1574 if (srv->ssl_ctx.npn_str) {
1575 memcpy(srv->ssl_ctx.npn_str, src->ssl_ctx.npn_str,
1576 src->ssl_ctx.npn_len);
1577 srv->ssl_ctx.npn_len = src->ssl_ctx.npn_len;
1578 }
1579 }
1580#endif
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001581}
1582#endif
1583
1584/*
Baptiste Assmann201c07f2017-05-22 15:17:15 +02001585 * Prepare <srv> for hostname resolution.
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001586 * May be safely called with a default server as <src> argument (without hostname).
Frédéric Lécailleb418c122017-04-26 11:24:02 +02001587 * Returns -1 in case of any allocation failure, 0 if not.
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001588 */
Baptiste Assmann201c07f2017-05-22 15:17:15 +02001589static int srv_prepare_for_resolution(struct server *srv, const char *hostname)
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001590{
Christopher Faulet67957bd2017-09-27 11:00:59 +02001591 char *hostname_dn;
1592 int hostname_len, hostname_dn_len;
1593
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001594 if (!hostname)
Frédéric Lécailleb418c122017-04-26 11:24:02 +02001595 return 0;
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001596
Christopher Faulet67957bd2017-09-27 11:00:59 +02001597 hostname_len = strlen(hostname);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02001598 hostname_dn = trash.area;
Christopher Faulet67957bd2017-09-27 11:00:59 +02001599 hostname_dn_len = dns_str_to_dn_label(hostname, hostname_len + 1,
1600 hostname_dn, trash.size);
1601 if (hostname_dn_len == -1)
1602 goto err;
Baptiste Assmann81ed1a02017-05-03 10:11:44 +02001603
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001604
Christopher Faulet67957bd2017-09-27 11:00:59 +02001605 free(srv->hostname);
1606 free(srv->hostname_dn);
1607 srv->hostname = strdup(hostname);
1608 srv->hostname_dn = strdup(hostname_dn);
1609 srv->hostname_dn_len = hostname_dn_len;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02001610 if (!srv->hostname || !srv->hostname_dn)
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001611 goto err;
1612
Frédéric Lécailleb418c122017-04-26 11:24:02 +02001613 return 0;
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001614
1615 err:
Christopher Faulet67957bd2017-09-27 11:00:59 +02001616 free(srv->hostname); srv->hostname = NULL;
1617 free(srv->hostname_dn); srv->hostname_dn = NULL;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02001618 return -1;
1619}
1620
Baptiste Assmann201c07f2017-05-22 15:17:15 +02001621/*
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001622 * Copy <src> server settings to <srv> server allocating
1623 * everything needed.
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001624 * This function is not supposed to be called at any time, but only
1625 * during server settings parsing or during server allocations from
1626 * a server template, and just after having calloc()'ed a new server.
1627 * So, <src> may only be a default server (when parsing server settings)
1628 * or a server template (during server allocations from a server template).
1629 * <srv_tmpl> distinguishes these two cases (must be 1 if <srv> is a template,
1630 * 0 if not).
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001631 */
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001632static void srv_settings_cpy(struct server *srv, struct server *src, int srv_tmpl)
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001633{
1634 /* Connection source settings copy */
1635 srv_conn_src_cpy(srv, src);
1636
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001637 if (srv_tmpl) {
1638 srv->addr = src->addr;
1639 srv->svc_port = src->svc_port;
1640 }
1641
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001642 srv->pp_opts = src->pp_opts;
1643 if (src->rdr_pfx != NULL) {
1644 srv->rdr_pfx = strdup(src->rdr_pfx);
1645 srv->rdr_len = src->rdr_len;
1646 }
1647 if (src->cookie != NULL) {
1648 srv->cookie = strdup(src->cookie);
1649 srv->cklen = src->cklen;
1650 }
1651 srv->use_ssl = src->use_ssl;
Willy Tarreau24441082019-12-11 15:43:45 +01001652 srv->check.addr = src->check.addr;
1653 srv->agent.addr = src->agent.addr;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001654 srv->check.use_ssl = src->check.use_ssl;
1655 srv->check.port = src->check.port;
Olivier Houchard21944012018-12-21 19:42:01 +01001656 srv->check.sni = src->check.sni;
Olivier Houchard92150142018-12-21 19:47:01 +01001657 srv->check.alpn_str = src->check.alpn_str;
Ilya Shipitsin0c50b1e2019-04-30 21:21:28 +05001658 srv->check.alpn_len = src->check.alpn_len;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001659 /* Note: 'flags' field has potentially been already initialized. */
1660 srv->flags |= src->flags;
1661 srv->do_check = src->do_check;
1662 srv->do_agent = src->do_agent;
1663 if (srv->check.port)
1664 srv->flags |= SRV_F_CHECKPORT;
1665 srv->check.inter = src->check.inter;
1666 srv->check.fastinter = src->check.fastinter;
1667 srv->check.downinter = src->check.downinter;
1668 srv->agent.use_ssl = src->agent.use_ssl;
1669 srv->agent.port = src->agent.port;
Christopher Faulet0ae3d1d2020-04-06 17:54:24 +02001670
1671 if (src->agent.tcpcheck_rules) {
1672 srv->agent.tcpcheck_rules = calloc(1, sizeof(*srv->agent.tcpcheck_rules));
1673 if (srv->agent.tcpcheck_rules) {
1674 srv->agent.tcpcheck_rules->flags = src->agent.tcpcheck_rules->flags;
1675 srv->agent.tcpcheck_rules->list = src->agent.tcpcheck_rules->list;
1676 LIST_INIT(&srv->agent.tcpcheck_rules->preset_vars);
1677 dup_tcpcheck_vars(&srv->agent.tcpcheck_rules->preset_vars,
1678 &src->agent.tcpcheck_rules->preset_vars);
1679 }
1680 }
1681
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001682 srv->agent.inter = src->agent.inter;
1683 srv->agent.fastinter = src->agent.fastinter;
1684 srv->agent.downinter = src->agent.downinter;
1685 srv->maxqueue = src->maxqueue;
1686 srv->minconn = src->minconn;
1687 srv->maxconn = src->maxconn;
1688 srv->slowstart = src->slowstart;
1689 srv->observe = src->observe;
1690 srv->onerror = src->onerror;
1691 srv->onmarkeddown = src->onmarkeddown;
1692 srv->onmarkedup = src->onmarkedup;
1693 if (src->trackit != NULL)
1694 srv->trackit = strdup(src->trackit);
1695 srv->consecutive_errors_limit = src->consecutive_errors_limit;
1696 srv->uweight = srv->iweight = src->iweight;
1697
1698 srv->check.send_proxy = src->check.send_proxy;
1699 /* health: up, but will fall down at first failure */
1700 srv->check.rise = srv->check.health = src->check.rise;
1701 srv->check.fall = src->check.fall;
1702
1703 /* Here we check if 'disabled' is the default server state */
Emeric Brun52a91d32017-08-31 14:41:55 +02001704 if (src->next_admin & (SRV_ADMF_CMAINT | SRV_ADMF_FMAINT)) {
1705 srv->next_admin |= SRV_ADMF_CMAINT | SRV_ADMF_FMAINT;
1706 srv->next_state = SRV_ST_STOPPED;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001707 srv->check.state |= CHK_ST_PAUSED;
1708 srv->check.health = 0;
1709 }
1710
1711 /* health: up but will fall down at first failure */
1712 srv->agent.rise = srv->agent.health = src->agent.rise;
1713 srv->agent.fall = src->agent.fall;
1714
1715 if (src->resolvers_id != NULL)
1716 srv->resolvers_id = strdup(src->resolvers_id);
1717 srv->dns_opts.family_prio = src->dns_opts.family_prio;
Baptiste Assmann8e2d9432018-06-22 15:04:43 +02001718 srv->dns_opts.accept_duplicate_ip = src->dns_opts.accept_duplicate_ip;
Daniel Corbettf8716912019-11-17 09:48:56 -05001719 srv->dns_opts.ignore_weight = src->dns_opts.ignore_weight;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001720 if (srv->dns_opts.family_prio == AF_UNSPEC)
1721 srv->dns_opts.family_prio = AF_INET6;
1722 memcpy(srv->dns_opts.pref_net,
1723 src->dns_opts.pref_net,
1724 sizeof srv->dns_opts.pref_net);
1725 srv->dns_opts.pref_net_nb = src->dns_opts.pref_net_nb;
1726
1727 srv->init_addr_methods = src->init_addr_methods;
1728 srv->init_addr = src->init_addr;
1729#if defined(USE_OPENSSL)
1730 srv_ssl_settings_cpy(srv, src);
1731#endif
1732#ifdef TCP_USER_TIMEOUT
1733 srv->tcp_ut = src->tcp_ut;
1734#endif
Christopher Faulet8ed0a3e2018-04-10 14:45:45 +02001735 srv->mux_proto = src->mux_proto;
Olivier Houchardb7b3faa2018-12-14 18:15:36 +01001736 srv->pool_purge_delay = src->pool_purge_delay;
Willy Tarreau2f3f4d32020-07-01 07:43:51 +02001737 srv->low_idle_conns = src->low_idle_conns;
Olivier Houchard006e3102018-12-10 18:30:32 +01001738 srv->max_idle_conns = src->max_idle_conns;
Willy Tarreau9c538e02019-01-23 10:21:49 +01001739 srv->max_reuse = src->max_reuse;
Christopher Faulet8ed0a3e2018-04-10 14:45:45 +02001740
Olivier Houchard8da5f982017-08-04 18:35:36 +02001741 if (srv_tmpl)
1742 srv->srvrq = src->srvrq;
Alexander Liu2a54bb72019-05-22 19:44:48 +08001743
1744 srv->check.via_socks4 = src->check.via_socks4;
1745 srv->socks4_addr = src->socks4_addr;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001746}
1747
William Lallemand313bfd12018-10-26 14:47:32 +02001748struct server *new_server(struct proxy *proxy)
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001749{
1750 struct server *srv;
1751
1752 srv = calloc(1, sizeof *srv);
1753 if (!srv)
1754 return NULL;
1755
1756 srv->obj_type = OBJ_TYPE_SERVER;
1757 srv->proxy = proxy;
1758 LIST_INIT(&srv->actconns);
Patrick Hemmer0355dab2018-05-11 12:52:31 -04001759 srv->pendconns = EB_ROOT;
Christopher Faulet40a007c2017-07-03 15:41:01 +02001760
Emeric Brun52a91d32017-08-31 14:41:55 +02001761 srv->next_state = SRV_ST_RUNNING; /* early server setup */
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001762 srv->last_change = now.tv_sec;
1763
Christopher Faulet38290462020-04-21 11:46:40 +02001764 srv->check.obj_type = OBJ_TYPE_CHECK;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001765 srv->check.status = HCHK_STATUS_INI;
1766 srv->check.server = srv;
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01001767 srv->check.proxy = proxy;
Christopher Faulet5d503fc2020-03-30 20:34:34 +02001768 srv->check.tcpcheck_rules = &proxy->tcpcheck_rules;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001769
Christopher Faulet38290462020-04-21 11:46:40 +02001770 srv->agent.obj_type = OBJ_TYPE_CHECK;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001771 srv->agent.status = HCHK_STATUS_INI;
1772 srv->agent.server = srv;
Willy Tarreau1ba32032019-01-21 07:48:26 +01001773 srv->agent.proxy = proxy;
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001774 srv->xprt = srv->check.xprt = srv->agent.xprt = xprt_get(XPRT_RAW);
Frédéric Lécaillef46c10c2020-11-23 14:29:28 +01001775#if defined(USE_QUIC)
1776 srv->cids = EB_ROOT_UNIQUE;
1777#endif
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001778
Amaury Denoyelle7f8f6cb2020-11-10 14:24:31 +01001779 srv->extra_counters = NULL;
1780
Willy Tarreau975b1552019-06-06 16:25:55 +02001781 /* please don't put default server settings here, they are set in
1782 * init_default_instance().
1783 */
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001784 return srv;
1785}
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001786
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001787#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
1788static int server_sni_expr_init(const char *file, int linenum, char **args, int cur_arg,
1789 struct server *srv, struct proxy *proxy)
1790{
1791 int ret;
1792 char *err = NULL;
1793
1794 if (!srv->sni_expr)
1795 return 0;
1796
1797 ret = server_parse_sni_expr(srv, proxy, &err);
1798 if (!ret)
1799 return 0;
1800
Gaetan Rivet10c4b4a2020-02-11 11:42:38 +01001801 display_parser_err(file, linenum, args, cur_arg, ret, &err);
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001802 free(err);
1803
1804 return ret;
1805}
1806#endif
1807
1808/*
1809 * Server initializations finalization.
1810 * Initialize health check, agent check and SNI expression if enabled.
1811 * Must not be called for a default server instance.
1812 */
1813static int server_finalize_init(const char *file, int linenum, char **args, int cur_arg,
1814 struct server *srv, struct proxy *px)
1815{
Christopher Fauletb3b53522020-04-27 11:17:10 +02001816#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001817 int ret;
Christopher Fauletb3b53522020-04-27 11:17:10 +02001818#endif
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001819
Christopher Faulet8892e5d2020-03-26 19:48:20 +01001820 if (srv->do_check && srv->trackit) {
1821 ha_alert("parsing [%s:%d]: unable to enable checks and tracking at the same time!\n",
1822 file, linenum);
1823 return ERR_ALERT | ERR_FATAL;
1824 }
1825
1826 if (srv->do_agent && !srv->agent.port) {
1827 ha_alert("parsing [%s:%d] : server %s does not have agent port. Agent check has been disabled.\n",
1828 file, linenum, srv->id);
1829 return ERR_ALERT | ERR_FATAL;
Frédéric Lécaille759ea982017-03-30 17:32:36 +02001830 }
1831
1832#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
1833 if ((ret = server_sni_expr_init(file, linenum, args, cur_arg, srv, px)) != 0)
1834 return ret;
1835#endif
1836
1837 if (srv->flags & SRV_F_BACKUP)
1838 px->srv_bck++;
1839 else
1840 px->srv_act++;
1841 srv_lb_commit_status(srv);
1842
1843 return 0;
1844}
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02001845
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001846/*
1847 * Parse as much as possible such a range string argument: low[-high]
1848 * Set <nb_low> and <nb_high> values so that they may be reused by this loop
1849 * for(int i = nb_low; i <= nb_high; i++)... with nb_low >= 1.
1850 * Fails if 'low' < 0 or 'high' is present and not higher than 'low'.
1851 * Returns 0 if succeeded, -1 if not.
1852 */
1853static int srv_tmpl_parse_range(struct server *srv, const char *arg, int *nb_low, int *nb_high)
1854{
1855 char *nb_high_arg;
1856
1857 *nb_high = 0;
1858 chunk_printf(&trash, "%s", arg);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02001859 *nb_low = atoi(trash.area);
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001860
Willy Tarreau843b7cb2018-07-13 10:54:26 +02001861 if ((nb_high_arg = strchr(trash.area, '-'))) {
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001862 *nb_high_arg++ = '\0';
1863 *nb_high = atoi(nb_high_arg);
1864 }
1865 else {
1866 *nb_high += *nb_low;
1867 *nb_low = 1;
1868 }
1869
1870 if (*nb_low < 0 || *nb_high < *nb_low)
1871 return -1;
1872
1873 return 0;
1874}
1875
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001876static inline void srv_set_id_from_prefix(struct server *srv, const char *prefix, int nb)
1877{
1878 chunk_printf(&trash, "%s%d", prefix, nb);
1879 free(srv->id);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02001880 srv->id = strdup(trash.area);
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001881}
1882
1883/*
1884 * Initialize as much as possible servers from <srv> server template.
1885 * Note that a server template is a special server with
1886 * a few different parameters than a server which has
1887 * been parsed mostly the same way as a server.
Joseph Herlant44466822018-11-15 08:57:51 -08001888 * Returns the number of servers successfully allocated,
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001889 * 'srv' template included.
1890 */
1891static int server_template_init(struct server *srv, struct proxy *px)
1892{
1893 int i;
1894 struct server *newsrv;
1895
1896 for (i = srv->tmpl_info.nb_low + 1; i <= srv->tmpl_info.nb_high; i++) {
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001897 newsrv = new_server(px);
1898 if (!newsrv)
1899 goto err;
1900
Christopher Faulet75bef002020-11-02 22:04:55 +01001901 newsrv->conf.file = strdup(srv->conf.file);
1902 newsrv->conf.line = srv->conf.line;
1903
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001904 srv_settings_cpy(newsrv, srv, 1);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02001905 srv_prepare_for_resolution(newsrv, srv->hostname);
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001906#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
1907 if (newsrv->sni_expr) {
1908 newsrv->ssl_ctx.sni = srv_sni_sample_parse_expr(newsrv, px, NULL, 0, NULL);
1909 if (!newsrv->ssl_ctx.sni)
1910 goto err;
1911 }
1912#endif
1913 /* Set this new server ID. */
1914 srv_set_id_from_prefix(newsrv, srv->tmpl_info.prefix, i);
1915
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02001916 /* Linked backwards first. This will be restablished after parsing. */
1917 newsrv->next = px->srv;
1918 px->srv = newsrv;
1919 }
1920 srv_set_id_from_prefix(srv, srv->tmpl_info.prefix, srv->tmpl_info.nb_low);
1921
1922 return i - srv->tmpl_info.nb_low;
1923
1924 err:
1925 srv_set_id_from_prefix(srv, srv->tmpl_info.prefix, srv->tmpl_info.nb_low);
1926 if (newsrv) {
1927#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
1928 release_sample_expr(newsrv->ssl_ctx.sni);
1929#endif
1930 free_check(&newsrv->agent);
1931 free_check(&newsrv->check);
1932 }
1933 free(newsrv);
1934 return i - srv->tmpl_info.nb_low;
1935}
1936
Emeric Brund3db3842020-07-21 16:54:36 +02001937int parse_server(const char *file, int linenum, char **args, struct proxy *curproxy,
1938 struct proxy *defproxy, int parse_addr, int in_peers_section, int initial_resolve)
Willy Tarreau272adea2014-03-31 10:39:59 +02001939{
1940 struct server *newsrv = NULL;
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001941 const char *err = NULL;
Willy Tarreau272adea2014-03-31 10:39:59 +02001942 char *errmsg = NULL;
1943 int err_code = 0;
1944 unsigned val;
Willy Tarreau07101d52015-09-08 16:16:35 +02001945 char *fqdn = NULL;
Willy Tarreau272adea2014-03-31 10:39:59 +02001946
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001947 if (strcmp(args[0], "server") == 0 ||
1948 strcmp(args[0], "peer") == 0 ||
1949 strcmp(args[0], "default-server") == 0 ||
1950 strcmp(args[0], "server-template") == 0) {
Willy Tarreau272adea2014-03-31 10:39:59 +02001951 int cur_arg;
Frédéric Lécaille6e0843c2017-03-21 16:39:15 +01001952 int defsrv = (*args[0] == 'd');
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01001953 int srv = !defsrv && (*args[0] == 'p' || strcmp(args[0], "server") == 0);
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001954 int srv_tmpl = !defsrv && !srv;
1955 int tmpl_range_low = 0, tmpl_range_high = 0;
Willy Tarreau272adea2014-03-31 10:39:59 +02001956
1957 if (!defsrv && curproxy == defproxy) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001958 ha_alert("parsing [%s:%d] : '%s' not allowed in 'defaults' section.\n", file, linenum, args[0]);
Willy Tarreau272adea2014-03-31 10:39:59 +02001959 err_code |= ERR_ALERT | ERR_FATAL;
1960 goto out;
1961 }
Christopher Faulete3bdc812021-01-13 13:14:13 +01001962 else if (failifnotcap(curproxy, PR_CAP_BE, file, linenum, args[0], NULL)) {
1963 err_code |= ERR_ALERT | ERR_FATAL;
1964 goto out;
1965 }
Willy Tarreau272adea2014-03-31 10:39:59 +02001966
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001967 /* There is no mandatory first arguments for default server. */
Frédéric Lécaille355b2032019-01-11 14:06:12 +01001968 if (srv && parse_addr) {
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001969 if (!*args[2]) {
Frédéric Lécaille8ba10fe2020-04-03 09:43:47 +02001970 if (in_peers_section) {
1971 return 0;
1972 }
1973 else {
1974 /* 'server' line number of argument check. */
1975 ha_alert("parsing [%s:%d] : '%s' expects <name> and <addr>[:<port>] as arguments.\n",
1976 file, linenum, args[0]);
1977 err_code |= ERR_ALERT | ERR_FATAL;
1978 goto out;
1979 }
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001980 }
1981
1982 err = invalid_char(args[1]);
1983 }
1984 else if (srv_tmpl) {
1985 if (!*args[3]) {
1986 /* 'server-template' line number of argument check. */
Christopher Faulet767a84b2017-11-24 16:50:31 +01001987 ha_alert("parsing [%s:%d] : '%s' expects <prefix> <nb | range> <addr>[:<port>] as arguments.\n",
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001988 file, linenum, args[0]);
1989 err_code |= ERR_ALERT | ERR_FATAL;
1990 goto out;
1991 }
1992
1993 err = invalid_prefix_char(args[1]);
Willy Tarreau272adea2014-03-31 10:39:59 +02001994 }
1995
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001996 if (err) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001997 ha_alert("parsing [%s:%d] : character '%c' is not permitted in %s %s '%s'.\n",
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02001998 file, linenum, *err, args[0], srv ? "name" : "prefix", args[1]);
Willy Tarreau272adea2014-03-31 10:39:59 +02001999 err_code |= ERR_ALERT | ERR_FATAL;
2000 goto out;
2001 }
2002
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02002003 cur_arg = 2;
2004 if (srv_tmpl) {
2005 /* Parse server-template <nb | range> arg. */
2006 if (srv_tmpl_parse_range(newsrv, args[cur_arg], &tmpl_range_low, &tmpl_range_high) < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002007 ha_alert("parsing [%s:%d] : Wrong %s number or range arg '%s'.\n",
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02002008 file, linenum, args[0], args[cur_arg]);
2009 err_code |= ERR_ALERT | ERR_FATAL;
2010 goto out;
2011 }
2012 cur_arg++;
2013 }
2014
Willy Tarreau272adea2014-03-31 10:39:59 +02002015 if (!defsrv) {
2016 struct sockaddr_storage *sk;
Willy Tarreau6ecb10a2017-01-06 18:36:06 +01002017 int port1, port2, port;
Willy Tarreau272adea2014-03-31 10:39:59 +02002018
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002019 newsrv = new_server(curproxy);
2020 if (!newsrv) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002021 ha_alert("parsing [%s:%d] : out of memory.\n", file, linenum);
Willy Tarreau272adea2014-03-31 10:39:59 +02002022 err_code |= ERR_ALERT | ERR_ABORT;
2023 goto out;
2024 }
2025
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02002026 if (srv_tmpl) {
2027 newsrv->tmpl_info.nb_low = tmpl_range_low;
2028 newsrv->tmpl_info.nb_high = tmpl_range_high;
2029 }
2030
Willy Tarreau272adea2014-03-31 10:39:59 +02002031 /* the servers are linked backwards first */
2032 newsrv->next = curproxy->srv;
2033 curproxy->srv = newsrv;
Willy Tarreau272adea2014-03-31 10:39:59 +02002034 newsrv->conf.file = strdup(file);
2035 newsrv->conf.line = linenum;
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02002036 /* Note: for a server template, its id is its prefix.
2037 * This is a temporary id which will be used for server allocations to come
2038 * after parsing.
2039 */
2040 if (srv)
2041 newsrv->id = strdup(args[1]);
2042 else
2043 newsrv->tmpl_info.prefix = strdup(args[1]);
Willy Tarreau272adea2014-03-31 10:39:59 +02002044
2045 /* several ways to check the port component :
2046 * - IP => port=+0, relative (IPv4 only)
2047 * - IP: => port=+0, relative
2048 * - IP:N => port=N, absolute
2049 * - IP:+N => port=+N, relative
2050 * - IP:-N => port=-N, relative
2051 */
Frédéric Lécaille355b2032019-01-11 14:06:12 +01002052 if (!parse_addr)
2053 goto skip_addr;
2054
Willy Tarreau65ec4e32020-09-16 19:17:08 +02002055 sk = str2sa_range(args[cur_arg], &port, &port1, &port2, NULL, NULL,
2056 &errmsg, NULL, &fqdn,
2057 (initial_resolve ? PA_O_RESOLVE : 0) | PA_O_PORT_OK | PA_O_PORT_OFS | PA_O_STREAM | PA_O_XPRT | PA_O_CONNECT);
Willy Tarreau272adea2014-03-31 10:39:59 +02002058 if (!sk) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002059 ha_alert("parsing [%s:%d] : '%s %s' : %s\n", file, linenum, args[0], args[1], errmsg);
Willy Tarreau272adea2014-03-31 10:39:59 +02002060 err_code |= ERR_ALERT | ERR_FATAL;
2061 goto out;
2062 }
2063
Willy Tarreau272adea2014-03-31 10:39:59 +02002064 if (!port1 || !port2) {
2065 /* no port specified, +offset, -offset */
Willy Tarreauc93cd162014-05-13 15:54:22 +02002066 newsrv->flags |= SRV_F_MAPPORTS;
Willy Tarreau272adea2014-03-31 10:39:59 +02002067 }
Willy Tarreau272adea2014-03-31 10:39:59 +02002068
Baptiste Assmanna68ca962015-04-14 01:15:08 +02002069 /* save hostname and create associated name resolution */
Baptiste Assmann4f91f7e2017-05-03 12:09:54 +02002070 if (fqdn) {
Christopher Faulet67957bd2017-09-27 11:00:59 +02002071 if (fqdn[0] == '_') { /* SRV record */
Olivier Houchard8da5f982017-08-04 18:35:36 +02002072 /* Check if a SRV request already exists, and if not, create it */
Christopher Faulet67957bd2017-09-27 11:00:59 +02002073 if ((newsrv->srvrq = find_srvrq_by_name(fqdn, curproxy)) == NULL)
2074 newsrv->srvrq = new_dns_srvrq(newsrv, fqdn);
2075 if (newsrv->srvrq == NULL) {
Olivier Houchard8da5f982017-08-04 18:35:36 +02002076 err_code |= ERR_ALERT | ERR_FATAL;
2077 goto out;
Christopher Faulet67957bd2017-09-27 11:00:59 +02002078 }
2079 }
2080 else if (srv_prepare_for_resolution(newsrv, fqdn) == -1) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002081 ha_alert("parsing [%s:%d] : Can't create DNS resolution for server '%s'\n",
Christopher Faulet67957bd2017-09-27 11:00:59 +02002082 file, linenum, newsrv->id);
2083 err_code |= ERR_ALERT | ERR_FATAL;
2084 goto out;
Baptiste Assmann4f91f7e2017-05-03 12:09:54 +02002085 }
Baptiste Assmanna68ca962015-04-14 01:15:08 +02002086 }
2087
Willy Tarreau272adea2014-03-31 10:39:59 +02002088 newsrv->addr = *sk;
Willy Tarreau6ecb10a2017-01-06 18:36:06 +01002089 newsrv->svc_port = port;
Thayne McCombs92149f92020-11-20 01:28:26 -07002090 // we don't need to lock the server here, because
2091 // we are in the process of initializing
2092 srv_set_addr_desc(newsrv);
Willy Tarreau272adea2014-03-31 10:39:59 +02002093
Olivier Houchard8da5f982017-08-04 18:35:36 +02002094 if (!newsrv->srvrq && !newsrv->hostname && !protocol_by_family(newsrv->addr.ss_family)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002095 ha_alert("parsing [%s:%d] : Unknown protocol family %d '%s'\n",
Frédéric Lécailleb82f7422017-04-13 18:24:23 +02002096 file, linenum, newsrv->addr.ss_family, args[cur_arg]);
Willy Tarreau272adea2014-03-31 10:39:59 +02002097 err_code |= ERR_ALERT | ERR_FATAL;
2098 goto out;
2099 }
Frédéric Lécaille5c3cd972017-03-15 16:36:09 +01002100
Frédéric Lécaille355b2032019-01-11 14:06:12 +01002101 cur_arg++;
2102 skip_addr:
Frédéric Lécaille58b207c2017-03-30 14:18:30 +02002103 /* Copy default server settings to new server settings. */
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002104 srv_settings_cpy(newsrv, &curproxy->defsrv, 0);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01002105 HA_SPIN_INIT(&newsrv->lock);
Willy Tarreau272adea2014-03-31 10:39:59 +02002106 } else {
2107 newsrv = &curproxy->defsrv;
2108 cur_arg = 1;
Thierry Fournierada34842016-02-17 21:25:09 +01002109 newsrv->dns_opts.family_prio = AF_INET6;
Baptiste Assmann8e2d9432018-06-22 15:04:43 +02002110 newsrv->dns_opts.accept_duplicate_ip = 0;
Willy Tarreau272adea2014-03-31 10:39:59 +02002111 }
2112
2113 while (*args[cur_arg]) {
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002114 if (strcmp(args[cur_arg], "init-addr") == 0) {
Baptiste Assmann25938272016-09-21 20:26:16 +02002115 char *p, *end;
2116 int done;
Willy Tarreau4310d362016-11-02 15:05:56 +01002117 struct sockaddr_storage sa;
Baptiste Assmann25938272016-09-21 20:26:16 +02002118
2119 newsrv->init_addr_methods = 0;
2120 memset(&newsrv->init_addr, 0, sizeof(newsrv->init_addr));
2121
2122 for (p = args[cur_arg + 1]; *p; p = end) {
2123 /* cut on next comma */
2124 for (end = p; *end && *end != ','; end++);
2125 if (*end)
2126 *(end++) = 0;
2127
Willy Tarreau4310d362016-11-02 15:05:56 +01002128 memset(&sa, 0, sizeof(sa));
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002129 if (strcmp(p, "libc") == 0) {
Baptiste Assmann25938272016-09-21 20:26:16 +02002130 done = srv_append_initaddr(&newsrv->init_addr_methods, SRV_IADDR_LIBC);
2131 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002132 else if (strcmp(p, "last") == 0) {
Baptiste Assmann25938272016-09-21 20:26:16 +02002133 done = srv_append_initaddr(&newsrv->init_addr_methods, SRV_IADDR_LAST);
2134 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002135 else if (strcmp(p, "none") == 0) {
Willy Tarreau37ebe122016-11-04 15:17:58 +01002136 done = srv_append_initaddr(&newsrv->init_addr_methods, SRV_IADDR_NONE);
2137 }
Willy Tarreau4310d362016-11-02 15:05:56 +01002138 else if (str2ip2(p, &sa, 0)) {
2139 if (is_addr(&newsrv->init_addr)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002140 ha_alert("parsing [%s:%d]: '%s' : initial address already specified, cannot add '%s'.\n",
Willy Tarreau4310d362016-11-02 15:05:56 +01002141 file, linenum, args[cur_arg], p);
2142 err_code |= ERR_ALERT | ERR_FATAL;
2143 goto out;
2144 }
2145 newsrv->init_addr = sa;
2146 done = srv_append_initaddr(&newsrv->init_addr_methods, SRV_IADDR_IP);
2147 }
Baptiste Assmann25938272016-09-21 20:26:16 +02002148 else {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002149 ha_alert("parsing [%s:%d]: '%s' : unknown init-addr method '%s', supported methods are 'libc', 'last', 'none'.\n",
Baptiste Assmann25938272016-09-21 20:26:16 +02002150 file, linenum, args[cur_arg], p);
2151 err_code |= ERR_ALERT | ERR_FATAL;
2152 goto out;
2153 }
2154 if (!done) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002155 ha_alert("parsing [%s:%d]: '%s' : too many init-addr methods when trying to add '%s'\n",
Baptiste Assmann25938272016-09-21 20:26:16 +02002156 file, linenum, args[cur_arg], p);
2157 err_code |= ERR_ALERT | ERR_FATAL;
2158 goto out;
2159 }
2160 }
2161 cur_arg += 2;
2162 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002163 else if (strcmp(args[cur_arg], "resolvers") == 0) {
Frédéric Lécailledaa2fe62017-04-20 12:17:50 +02002164 free(newsrv->resolvers_id);
Baptiste Assmanna68ca962015-04-14 01:15:08 +02002165 newsrv->resolvers_id = strdup(args[cur_arg + 1]);
2166 cur_arg += 2;
2167 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002168 else if (strcmp(args[cur_arg], "resolve-opts") == 0) {
Baptiste Assmann8e2d9432018-06-22 15:04:43 +02002169 char *p, *end;
2170
2171 for (p = args[cur_arg + 1]; *p; p = end) {
2172 /* cut on next comma */
2173 for (end = p; *end && *end != ','; end++);
2174 if (*end)
2175 *(end++) = 0;
2176
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002177 if (strcmp(p, "allow-dup-ip") == 0) {
Baptiste Assmann8e2d9432018-06-22 15:04:43 +02002178 newsrv->dns_opts.accept_duplicate_ip = 1;
2179 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002180 else if (strcmp(p, "ignore-weight") == 0) {
Daniel Corbettf8716912019-11-17 09:48:56 -05002181 newsrv->dns_opts.ignore_weight = 1;
2182 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002183 else if (strcmp(p, "prevent-dup-ip") == 0) {
Baptiste Assmann8e2d9432018-06-22 15:04:43 +02002184 newsrv->dns_opts.accept_duplicate_ip = 0;
2185 }
2186 else {
Daniel Corbettf8716912019-11-17 09:48:56 -05002187 ha_alert("parsing [%s:%d]: '%s' : unknown resolve-opts option '%s', supported methods are 'allow-dup-ip', 'ignore-weight', and 'prevent-dup-ip'.\n",
Baptiste Assmann8e2d9432018-06-22 15:04:43 +02002188 file, linenum, args[cur_arg], p);
2189 err_code |= ERR_ALERT | ERR_FATAL;
2190 goto out;
2191 }
2192 }
2193
2194 cur_arg += 2;
2195 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002196 else if (strcmp(args[cur_arg], "resolve-prefer") == 0) {
2197 if (strcmp(args[cur_arg + 1], "ipv4") == 0)
Thierry Fournierada34842016-02-17 21:25:09 +01002198 newsrv->dns_opts.family_prio = AF_INET;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002199 else if (strcmp(args[cur_arg + 1], "ipv6") == 0)
Thierry Fournierada34842016-02-17 21:25:09 +01002200 newsrv->dns_opts.family_prio = AF_INET6;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02002201 else {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002202 ha_alert("parsing [%s:%d]: '%s' expects either ipv4 or ipv6 as argument.\n",
Baptiste Assmanna68ca962015-04-14 01:15:08 +02002203 file, linenum, args[cur_arg]);
2204 err_code |= ERR_ALERT | ERR_FATAL;
2205 goto out;
2206 }
2207 cur_arg += 2;
2208 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002209 else if (strcmp(args[cur_arg], "resolve-net") == 0) {
Thierry Fournierac88cfe2016-02-17 22:05:30 +01002210 char *p, *e;
2211 unsigned char mask;
2212 struct dns_options *opt;
2213
2214 if (!args[cur_arg + 1] || args[cur_arg + 1][0] == '\0') {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002215 ha_alert("parsing [%s:%d]: '%s' expects a list of networks.\n",
Thierry Fournierac88cfe2016-02-17 22:05:30 +01002216 file, linenum, args[cur_arg]);
2217 err_code |= ERR_ALERT | ERR_FATAL;
2218 goto out;
2219 }
2220
2221 opt = &newsrv->dns_opts;
2222
2223 /* Split arguments by comma, and convert it from ipv4 or ipv6
2224 * string network in in_addr or in6_addr.
2225 */
2226 p = args[cur_arg + 1];
2227 e = p;
2228 while (*p != '\0') {
Joseph Herlant44466822018-11-15 08:57:51 -08002229 /* If no room available, return error. */
David Carlierd10025c2016-04-08 10:26:44 +01002230 if (opt->pref_net_nb >= SRV_MAX_PREF_NET) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002231 ha_alert("parsing [%s:%d]: '%s' exceed %d networks.\n",
Thierry Fournierac88cfe2016-02-17 22:05:30 +01002232 file, linenum, args[cur_arg], SRV_MAX_PREF_NET);
2233 err_code |= ERR_ALERT | ERR_FATAL;
2234 goto out;
2235 }
2236 /* look for end or comma. */
2237 while (*e != ',' && *e != '\0')
2238 e++;
2239 if (*e == ',') {
2240 *e = '\0';
2241 e++;
2242 }
2243 if (str2net(p, 0, &opt->pref_net[opt->pref_net_nb].addr.in4,
2244 &opt->pref_net[opt->pref_net_nb].mask.in4)) {
2245 /* Try to convert input string from ipv4 or ipv6 network. */
2246 opt->pref_net[opt->pref_net_nb].family = AF_INET;
2247 } else if (str62net(p, &opt->pref_net[opt->pref_net_nb].addr.in6,
2248 &mask)) {
2249 /* Try to convert input string from ipv6 network. */
2250 len2mask6(mask, &opt->pref_net[opt->pref_net_nb].mask.in6);
2251 opt->pref_net[opt->pref_net_nb].family = AF_INET6;
2252 } else {
Ilya Shipitsinc02a23f2020-05-06 00:53:22 +05002253 /* All network conversions fail, return error. */
Christopher Faulet767a84b2017-11-24 16:50:31 +01002254 ha_alert("parsing [%s:%d]: '%s': invalid network '%s'.\n",
Thierry Fournierac88cfe2016-02-17 22:05:30 +01002255 file, linenum, args[cur_arg], p);
2256 err_code |= ERR_ALERT | ERR_FATAL;
2257 goto out;
2258 }
2259 opt->pref_net_nb++;
2260 p = e;
2261 }
2262
2263 cur_arg += 2;
2264 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002265 else if (strcmp(args[cur_arg], "weight") == 0) {
Willy Tarreau272adea2014-03-31 10:39:59 +02002266 int w;
2267 w = atol(args[cur_arg + 1]);
2268 if (w < 0 || w > SRV_UWGHT_MAX) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002269 ha_alert("parsing [%s:%d] : weight of server %s is not within 0 and %d (%d).\n",
Willy Tarreau272adea2014-03-31 10:39:59 +02002270 file, linenum, newsrv->id, SRV_UWGHT_MAX, w);
2271 err_code |= ERR_ALERT | ERR_FATAL;
2272 goto out;
2273 }
2274 newsrv->uweight = newsrv->iweight = w;
2275 cur_arg += 2;
2276 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002277 else if (strcmp(args[cur_arg], "log-proto") == 0) {
2278 if (strcmp(args[cur_arg + 1], "legacy") == 0)
Emeric Brun97556472020-05-30 01:42:45 +02002279 newsrv->log_proto = SRV_LOG_PROTO_LEGACY;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002280 else if (strcmp(args[cur_arg + 1], "octet-count") == 0)
Emeric Brun97556472020-05-30 01:42:45 +02002281 newsrv->log_proto = SRV_LOG_PROTO_OCTET_COUNTING;
2282 else {
2283 ha_alert("parsing [%s:%d]: '%s' expects one of 'legacy' or "
2284 "'octet-count' but got '%s'\n",
2285 file, linenum, args[cur_arg], args[cur_arg + 1]);
2286 err_code |= ERR_ALERT | ERR_FATAL;
2287 goto out;
2288 }
2289 cur_arg += 2;
2290 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002291 else if (strcmp(args[cur_arg], "minconn") == 0) {
Willy Tarreau272adea2014-03-31 10:39:59 +02002292 newsrv->minconn = atol(args[cur_arg + 1]);
2293 cur_arg += 2;
2294 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002295 else if (strcmp(args[cur_arg], "maxconn") == 0) {
Willy Tarreau272adea2014-03-31 10:39:59 +02002296 newsrv->maxconn = atol(args[cur_arg + 1]);
2297 cur_arg += 2;
2298 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002299 else if (strcmp(args[cur_arg], "maxqueue") == 0) {
Willy Tarreau272adea2014-03-31 10:39:59 +02002300 newsrv->maxqueue = atol(args[cur_arg + 1]);
2301 cur_arg += 2;
2302 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002303 else if (strcmp(args[cur_arg], "slowstart") == 0) {
Willy Tarreau272adea2014-03-31 10:39:59 +02002304 /* slowstart is stored in seconds */
2305 const char *err = parse_time_err(args[cur_arg + 1], &val, TIME_UNIT_MS);
Willy Tarreau9faebe32019-06-07 19:00:37 +02002306
2307 if (err == PARSE_TIME_OVER) {
2308 ha_alert("parsing [%s:%d]: timer overflow in argument <%s> to <%s> of server %s, maximum value is 2147483647 ms (~24.8 days).\n",
2309 file, linenum, args[cur_arg+1], args[cur_arg], newsrv->id);
2310 err_code |= ERR_ALERT | ERR_FATAL;
2311 goto out;
2312 }
2313 else if (err == PARSE_TIME_UNDER) {
2314 ha_alert("parsing [%s:%d]: timer underflow in argument <%s> to <%s> of server %s, minimum non-null value is 1 ms.\n",
2315 file, linenum, args[cur_arg+1], args[cur_arg], newsrv->id);
2316 err_code |= ERR_ALERT | ERR_FATAL;
2317 goto out;
2318 }
2319 else if (err) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002320 ha_alert("parsing [%s:%d] : unexpected character '%c' in 'slowstart' argument of server %s.\n",
Willy Tarreau272adea2014-03-31 10:39:59 +02002321 file, linenum, *err, newsrv->id);
2322 err_code |= ERR_ALERT | ERR_FATAL;
2323 goto out;
2324 }
2325 newsrv->slowstart = (val + 999) / 1000;
2326 cur_arg += 2;
2327 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002328 else if (strcmp(args[cur_arg], "on-error") == 0) {
2329 if (strcmp(args[cur_arg + 1], "fastinter") == 0)
Willy Tarreau272adea2014-03-31 10:39:59 +02002330 newsrv->onerror = HANA_ONERR_FASTINTER;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002331 else if (strcmp(args[cur_arg + 1], "fail-check") == 0)
Willy Tarreau272adea2014-03-31 10:39:59 +02002332 newsrv->onerror = HANA_ONERR_FAILCHK;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002333 else if (strcmp(args[cur_arg + 1], "sudden-death") == 0)
Willy Tarreau272adea2014-03-31 10:39:59 +02002334 newsrv->onerror = HANA_ONERR_SUDDTH;
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002335 else if (strcmp(args[cur_arg + 1], "mark-down") == 0)
Willy Tarreau272adea2014-03-31 10:39:59 +02002336 newsrv->onerror = HANA_ONERR_MARKDWN;
2337 else {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002338 ha_alert("parsing [%s:%d]: '%s' expects one of 'fastinter', "
Willy Tarreau272adea2014-03-31 10:39:59 +02002339 "'fail-check', 'sudden-death' or 'mark-down' but got '%s'\n",
2340 file, linenum, args[cur_arg], args[cur_arg + 1]);
2341 err_code |= ERR_ALERT | ERR_FATAL;
2342 goto out;
2343 }
2344
2345 cur_arg += 2;
2346 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002347 else if (strcmp(args[cur_arg], "on-marked-down") == 0) {
2348 if (strcmp(args[cur_arg + 1], "shutdown-sessions") == 0)
Willy Tarreau272adea2014-03-31 10:39:59 +02002349 newsrv->onmarkeddown = HANA_ONMARKEDDOWN_SHUTDOWNSESSIONS;
2350 else {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002351 ha_alert("parsing [%s:%d]: '%s' expects 'shutdown-sessions' but got '%s'\n",
Willy Tarreau272adea2014-03-31 10:39:59 +02002352 file, linenum, args[cur_arg], args[cur_arg + 1]);
2353 err_code |= ERR_ALERT | ERR_FATAL;
2354 goto out;
2355 }
2356
2357 cur_arg += 2;
2358 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002359 else if (strcmp(args[cur_arg], "on-marked-up") == 0) {
2360 if (strcmp(args[cur_arg + 1], "shutdown-backup-sessions") == 0)
Willy Tarreau272adea2014-03-31 10:39:59 +02002361 newsrv->onmarkedup = HANA_ONMARKEDUP_SHUTDOWNBACKUPSESSIONS;
2362 else {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002363 ha_alert("parsing [%s:%d]: '%s' expects 'shutdown-backup-sessions' but got '%s'\n",
Willy Tarreau272adea2014-03-31 10:39:59 +02002364 file, linenum, args[cur_arg], args[cur_arg + 1]);
2365 err_code |= ERR_ALERT | ERR_FATAL;
2366 goto out;
2367 }
2368
2369 cur_arg += 2;
2370 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002371 else if (strcmp(args[cur_arg], "error-limit") == 0) {
Willy Tarreau272adea2014-03-31 10:39:59 +02002372 if (!*args[cur_arg + 1]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002373 ha_alert("parsing [%s:%d]: '%s' expects an integer argument.\n",
Willy Tarreau272adea2014-03-31 10:39:59 +02002374 file, linenum, args[cur_arg]);
2375 err_code |= ERR_ALERT | ERR_FATAL;
2376 goto out;
2377 }
2378
2379 newsrv->consecutive_errors_limit = atoi(args[cur_arg + 1]);
2380
2381 if (newsrv->consecutive_errors_limit <= 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002382 ha_alert("parsing [%s:%d]: %s has to be > 0.\n",
Willy Tarreau272adea2014-03-31 10:39:59 +02002383 file, linenum, args[cur_arg]);
2384 err_code |= ERR_ALERT | ERR_FATAL;
2385 goto out;
2386 }
2387 cur_arg += 2;
2388 }
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002389 else if (strcmp(args[cur_arg], "usesrc") == 0) { /* address to use outside: needs "source" first */
Christopher Faulet767a84b2017-11-24 16:50:31 +01002390 ha_alert("parsing [%s:%d] : '%s' only allowed after a '%s' statement.\n",
Willy Tarreau272adea2014-03-31 10:39:59 +02002391 file, linenum, "usesrc", "source");
2392 err_code |= ERR_ALERT | ERR_FATAL;
2393 goto out;
KOVACS Krisztianb3e54fe2014-11-17 15:11:45 +01002394 }
Willy Tarreau272adea2014-03-31 10:39:59 +02002395 else {
2396 static int srv_dumped;
2397 struct srv_kw *kw;
2398 char *err;
2399
2400 kw = srv_find_kw(args[cur_arg]);
2401 if (kw) {
2402 char *err = NULL;
2403 int code;
2404
2405 if (!kw->parse) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002406 ha_alert("parsing [%s:%d] : '%s %s' : '%s' option is not implemented in this version (check build options).\n",
Willy Tarreau272adea2014-03-31 10:39:59 +02002407 file, linenum, args[0], args[1], args[cur_arg]);
Frédéric Lécailledfacd692017-04-16 17:14:14 +02002408 if (kw->skip != -1)
2409 cur_arg += 1 + kw->skip ;
Willy Tarreau272adea2014-03-31 10:39:59 +02002410 err_code |= ERR_ALERT | ERR_FATAL;
2411 goto out;
2412 }
2413
2414 if (defsrv && !kw->default_ok) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002415 ha_alert("parsing [%s:%d] : '%s %s' : '%s' option is not accepted in default-server sections.\n",
Willy Tarreau272adea2014-03-31 10:39:59 +02002416 file, linenum, args[0], args[1], args[cur_arg]);
Frédéric Lécailledfacd692017-04-16 17:14:14 +02002417 if (kw->skip != -1)
2418 cur_arg += 1 + kw->skip ;
Willy Tarreau272adea2014-03-31 10:39:59 +02002419 err_code |= ERR_ALERT;
2420 continue;
2421 }
2422
2423 code = kw->parse(args, &cur_arg, curproxy, newsrv, &err);
2424 err_code |= code;
2425
2426 if (code) {
Gaetan Rivet10c4b4a2020-02-11 11:42:38 +01002427 display_parser_err(file, linenum, args, cur_arg, code, &err);
Willy Tarreau272adea2014-03-31 10:39:59 +02002428 if (code & ERR_FATAL) {
2429 free(err);
Frédéric Lécailledfacd692017-04-16 17:14:14 +02002430 if (kw->skip != -1)
2431 cur_arg += 1 + kw->skip;
Willy Tarreau272adea2014-03-31 10:39:59 +02002432 goto out;
2433 }
2434 }
2435 free(err);
Frédéric Lécailledfacd692017-04-16 17:14:14 +02002436 if (kw->skip != -1)
2437 cur_arg += 1 + kw->skip;
Willy Tarreau272adea2014-03-31 10:39:59 +02002438 continue;
2439 }
2440
2441 err = NULL;
2442 if (!srv_dumped) {
2443 srv_dump_kws(&err);
2444 indent_msg(&err, 4);
2445 srv_dumped = 1;
2446 }
2447
Christopher Faulet767a84b2017-11-24 16:50:31 +01002448 ha_alert("parsing [%s:%d] : '%s %s' unknown keyword '%s'.%s%s\n",
Willy Tarreau272adea2014-03-31 10:39:59 +02002449 file, linenum, args[0], args[1], args[cur_arg],
2450 err ? " Registered keywords :" : "", err ? err : "");
2451 free(err);
2452
2453 err_code |= ERR_ALERT | ERR_FATAL;
2454 goto out;
2455 }
2456 }
2457
Frédéric Lécaille759ea982017-03-30 17:32:36 +02002458 if (!defsrv)
2459 err_code |= server_finalize_init(file, linenum, args, cur_arg, newsrv, curproxy);
2460 if (err_code & ERR_FATAL)
2461 goto out;
Frédéric Lécaille72ed4752017-04-14 13:28:00 +02002462 if (srv_tmpl)
2463 server_template_init(newsrv, curproxy);
Willy Tarreau272adea2014-03-31 10:39:59 +02002464 }
Willy Tarreau07101d52015-09-08 16:16:35 +02002465 free(fqdn);
Willy Tarreau272adea2014-03-31 10:39:59 +02002466 return 0;
2467
2468 out:
Willy Tarreau07101d52015-09-08 16:16:35 +02002469 free(fqdn);
Willy Tarreau272adea2014-03-31 10:39:59 +02002470 free(errmsg);
2471 return err_code;
2472}
2473
Baptiste Assmann19a106d2015-07-08 22:03:56 +02002474/* Returns a pointer to the first server matching either id <id>.
2475 * NULL is returned if no match is found.
2476 * the lookup is performed in the backend <bk>
2477 */
2478struct server *server_find_by_id(struct proxy *bk, int id)
2479{
2480 struct eb32_node *eb32;
2481 struct server *curserver;
2482
2483 if (!bk || (id ==0))
2484 return NULL;
2485
2486 /* <bk> has no backend capabilities, so it can't have a server */
2487 if (!(bk->cap & PR_CAP_BE))
2488 return NULL;
2489
2490 curserver = NULL;
2491
2492 eb32 = eb32_lookup(&bk->conf.used_server_id, id);
2493 if (eb32)
2494 curserver = container_of(eb32, struct server, conf.id);
2495
2496 return curserver;
2497}
2498
2499/* Returns a pointer to the first server matching either name <name>, or id
2500 * if <name> starts with a '#'. NULL is returned if no match is found.
2501 * the lookup is performed in the backend <bk>
2502 */
2503struct server *server_find_by_name(struct proxy *bk, const char *name)
2504{
2505 struct server *curserver;
2506
2507 if (!bk || !name)
2508 return NULL;
2509
2510 /* <bk> has no backend capabilities, so it can't have a server */
2511 if (!(bk->cap & PR_CAP_BE))
2512 return NULL;
2513
2514 curserver = NULL;
2515 if (*name == '#') {
2516 curserver = server_find_by_id(bk, atoi(name + 1));
2517 if (curserver)
2518 return curserver;
2519 }
2520 else {
2521 curserver = bk->srv;
2522
2523 while (curserver && (strcmp(curserver->id, name) != 0))
2524 curserver = curserver->next;
2525
2526 if (curserver)
2527 return curserver;
2528 }
2529
2530 return NULL;
2531}
2532
2533struct server *server_find_best_match(struct proxy *bk, char *name, int id, int *diff)
2534{
2535 struct server *byname;
2536 struct server *byid;
2537
2538 if (!name && !id)
2539 return NULL;
2540
2541 if (diff)
2542 *diff = 0;
2543
2544 byname = byid = NULL;
2545
2546 if (name) {
2547 byname = server_find_by_name(bk, name);
2548 if (byname && (!id || byname->puid == id))
2549 return byname;
2550 }
2551
2552 /* remaining possibilities :
2553 * - name not set
2554 * - name set but not found
2555 * - name found but ID doesn't match
2556 */
2557 if (id) {
2558 byid = server_find_by_id(bk, id);
2559 if (byid) {
2560 if (byname) {
2561 /* use id only if forced by configuration */
2562 if (byid->flags & SRV_F_FORCED_ID) {
2563 if (diff)
2564 *diff |= 2;
2565 return byid;
2566 }
2567 else {
2568 if (diff)
2569 *diff |= 1;
2570 return byname;
2571 }
2572 }
2573
2574 /* remaining possibilities:
2575 * - name not set
2576 * - name set but not found
2577 */
2578 if (name && diff)
2579 *diff |= 2;
2580 return byid;
2581 }
2582
2583 /* id bot found */
2584 if (byname) {
2585 if (diff)
2586 *diff |= 1;
2587 return byname;
2588 }
2589 }
2590
2591 return NULL;
2592}
2593
Willy Tarreau46b7f532018-08-21 11:54:26 +02002594/* Update a server state using the parameters available in the params list.
2595 *
2596 * Grabs the server lock during operation.
2597 */
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002598static void srv_update_state(struct server *srv, int version, char **params)
2599{
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002600 char *p;
Willy Tarreau83061a82018-07-13 11:56:34 +02002601 struct buffer *msg;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002602
2603 /* fields since version 1
2604 * and common to all other upcoming versions
2605 */
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002606 enum srv_state srv_op_state;
2607 enum srv_admin srv_admin_state;
2608 unsigned srv_uweight, srv_iweight;
2609 unsigned long srv_last_time_change;
2610 short srv_check_status;
2611 enum chk_result srv_check_result;
2612 int srv_check_health;
2613 int srv_check_state, srv_agent_state;
2614 int bk_f_forced_id;
2615 int srv_f_forced_id;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002616 int fqdn_set_by_cli;
2617 const char *fqdn;
Frédéric Lécaille31694712017-08-01 08:47:19 +02002618 const char *port_str;
2619 unsigned int port;
Baptiste Assmann6d0f38f2018-07-02 17:00:54 +02002620 char *srvrecord;
William Dauchyf6370442020-11-14 19:25:33 +01002621#ifdef USE_OPENSSL
2622 int use_ssl;
2623#endif
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002624
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002625 fqdn = NULL;
Frédéric Lécaille31694712017-08-01 08:47:19 +02002626 port = 0;
Willy Tarreau31138fa2015-09-29 18:38:47 +02002627 msg = get_trash_chunk();
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002628 switch (version) {
2629 case 1:
2630 /*
2631 * now we can proceed with server's state update:
2632 * srv_addr: params[0]
2633 * srv_op_state: params[1]
2634 * srv_admin_state: params[2]
2635 * srv_uweight: params[3]
2636 * srv_iweight: params[4]
2637 * srv_last_time_change: params[5]
2638 * srv_check_status: params[6]
2639 * srv_check_result: params[7]
2640 * srv_check_health: params[8]
2641 * srv_check_state: params[9]
2642 * srv_agent_state: params[10]
2643 * bk_f_forced_id: params[11]
2644 * srv_f_forced_id: params[12]
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002645 * srv_fqdn: params[13]
Frédéric Lécaille31694712017-08-01 08:47:19 +02002646 * srv_port: params[14]
Baptiste Assmann6d0f38f2018-07-02 17:00:54 +02002647 * srvrecord: params[15]
William Dauchyf6370442020-11-14 19:25:33 +01002648 * srv_use_ssl: params[16]
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002649 */
2650
2651 /* validating srv_op_state */
2652 p = NULL;
2653 errno = 0;
2654 srv_op_state = strtol(params[1], &p, 10);
2655 if ((p == params[1]) || errno == EINVAL || errno == ERANGE ||
2656 (srv_op_state != SRV_ST_STOPPED &&
2657 srv_op_state != SRV_ST_STARTING &&
2658 srv_op_state != SRV_ST_RUNNING &&
2659 srv_op_state != SRV_ST_STOPPING)) {
2660 chunk_appendf(msg, ", invalid srv_op_state value '%s'", params[1]);
2661 }
2662
2663 /* validating srv_admin_state */
2664 p = NULL;
2665 errno = 0;
2666 srv_admin_state = strtol(params[2], &p, 10);
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002667 fqdn_set_by_cli = !!(srv_admin_state & SRV_ADMF_HMAINT);
Willy Tarreau757478e2016-11-03 19:22:19 +01002668
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002669 /* inherited statuses will be recomputed later.
2670 * Also disable SRV_ADMF_HMAINT flag (set from stats socket fqdn).
2671 */
2672 srv_admin_state &= ~SRV_ADMF_IDRAIN & ~SRV_ADMF_IMAINT & ~SRV_ADMF_HMAINT;
Willy Tarreau757478e2016-11-03 19:22:19 +01002673
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002674 if ((p == params[2]) || errno == EINVAL || errno == ERANGE ||
2675 (srv_admin_state != 0 &&
2676 srv_admin_state != SRV_ADMF_FMAINT &&
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002677 srv_admin_state != SRV_ADMF_CMAINT &&
2678 srv_admin_state != (SRV_ADMF_CMAINT | SRV_ADMF_FMAINT) &&
Willy Tarreaue1bde142016-11-03 18:33:25 +01002679 srv_admin_state != (SRV_ADMF_CMAINT | SRV_ADMF_FDRAIN) &&
Willy Tarreau757478e2016-11-03 19:22:19 +01002680 srv_admin_state != SRV_ADMF_FDRAIN)) {
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002681 chunk_appendf(msg, ", invalid srv_admin_state value '%s'", params[2]);
2682 }
2683
2684 /* validating srv_uweight */
2685 p = NULL;
2686 errno = 0;
2687 srv_uweight = strtol(params[3], &p, 10);
Willy Tarreaue1aebb22015-09-29 18:32:57 +02002688 if ((p == params[3]) || errno == EINVAL || errno == ERANGE || (srv_uweight > SRV_UWGHT_MAX))
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002689 chunk_appendf(msg, ", invalid srv_uweight value '%s'", params[3]);
2690
2691 /* validating srv_iweight */
2692 p = NULL;
2693 errno = 0;
2694 srv_iweight = strtol(params[4], &p, 10);
Willy Tarreaue1aebb22015-09-29 18:32:57 +02002695 if ((p == params[4]) || errno == EINVAL || errno == ERANGE || (srv_iweight > SRV_UWGHT_MAX))
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002696 chunk_appendf(msg, ", invalid srv_iweight value '%s'", params[4]);
2697
2698 /* validating srv_last_time_change */
2699 p = NULL;
2700 errno = 0;
2701 srv_last_time_change = strtol(params[5], &p, 10);
2702 if ((p == params[5]) || errno == EINVAL || errno == ERANGE)
2703 chunk_appendf(msg, ", invalid srv_last_time_change value '%s'", params[5]);
2704
2705 /* validating srv_check_status */
2706 p = NULL;
2707 errno = 0;
2708 srv_check_status = strtol(params[6], &p, 10);
2709 if (p == params[6] || errno == EINVAL || errno == ERANGE ||
2710 (srv_check_status >= HCHK_STATUS_SIZE))
2711 chunk_appendf(msg, ", invalid srv_check_status value '%s'", params[6]);
2712
2713 /* validating srv_check_result */
2714 p = NULL;
2715 errno = 0;
2716 srv_check_result = strtol(params[7], &p, 10);
2717 if ((p == params[7]) || errno == EINVAL || errno == ERANGE ||
2718 (srv_check_result != CHK_RES_UNKNOWN &&
2719 srv_check_result != CHK_RES_NEUTRAL &&
2720 srv_check_result != CHK_RES_FAILED &&
2721 srv_check_result != CHK_RES_PASSED &&
2722 srv_check_result != CHK_RES_CONDPASS)) {
2723 chunk_appendf(msg, ", invalid srv_check_result value '%s'", params[7]);
2724 }
2725
2726 /* validating srv_check_health */
2727 p = NULL;
2728 errno = 0;
2729 srv_check_health = strtol(params[8], &p, 10);
2730 if (p == params[8] || errno == EINVAL || errno == ERANGE)
2731 chunk_appendf(msg, ", invalid srv_check_health value '%s'", params[8]);
2732
2733 /* validating srv_check_state */
2734 p = NULL;
2735 errno = 0;
2736 srv_check_state = strtol(params[9], &p, 10);
2737 if (p == params[9] || errno == EINVAL || errno == ERANGE ||
2738 (srv_check_state & ~(CHK_ST_INPROGRESS | CHK_ST_CONFIGURED | CHK_ST_ENABLED | CHK_ST_PAUSED | CHK_ST_AGENT)))
2739 chunk_appendf(msg, ", invalid srv_check_state value '%s'", params[9]);
2740
2741 /* validating srv_agent_state */
2742 p = NULL;
2743 errno = 0;
2744 srv_agent_state = strtol(params[10], &p, 10);
2745 if (p == params[10] || errno == EINVAL || errno == ERANGE ||
2746 (srv_agent_state & ~(CHK_ST_INPROGRESS | CHK_ST_CONFIGURED | CHK_ST_ENABLED | CHK_ST_PAUSED | CHK_ST_AGENT)))
2747 chunk_appendf(msg, ", invalid srv_agent_state value '%s'", params[10]);
2748
2749 /* validating bk_f_forced_id */
2750 p = NULL;
2751 errno = 0;
2752 bk_f_forced_id = strtol(params[11], &p, 10);
2753 if (p == params[11] || errno == EINVAL || errno == ERANGE || !((bk_f_forced_id == 0) || (bk_f_forced_id == 1)))
2754 chunk_appendf(msg, ", invalid bk_f_forced_id value '%s'", params[11]);
2755
2756 /* validating srv_f_forced_id */
2757 p = NULL;
2758 errno = 0;
2759 srv_f_forced_id = strtol(params[12], &p, 10);
2760 if (p == params[12] || errno == EINVAL || errno == ERANGE || !((srv_f_forced_id == 0) || (srv_f_forced_id == 1)))
2761 chunk_appendf(msg, ", invalid srv_f_forced_id value '%s'", params[12]);
2762
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002763 /* validating srv_fqdn */
2764 fqdn = params[13];
2765 if (fqdn && *fqdn == '-')
2766 fqdn = NULL;
2767 if (fqdn && (strlen(fqdn) > DNS_MAX_NAME_SIZE || invalid_domainchar(fqdn))) {
2768 chunk_appendf(msg, ", invalid srv_fqdn value '%s'", params[13]);
2769 fqdn = NULL;
2770 }
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002771
Frédéric Lécaille31694712017-08-01 08:47:19 +02002772 port_str = params[14];
2773 if (port_str) {
2774 port = strl2uic(port_str, strlen(port_str));
2775 if (port > USHRT_MAX) {
2776 chunk_appendf(msg, ", invalid srv_port value '%s'", port_str);
2777 port_str = NULL;
2778 }
2779 }
2780
Baptiste Assmann6d0f38f2018-07-02 17:00:54 +02002781 /* SRV record
2782 * NOTE: in HAProxy, SRV records must start with an underscore '_'
2783 */
2784 srvrecord = params[15];
2785 if (srvrecord && *srvrecord != '_')
2786 srvrecord = NULL;
2787
William Dauchyf6370442020-11-14 19:25:33 +01002788#ifdef USE_OPENSSL
2789 use_ssl = strtol(params[16], &p, 10);
2790#endif
2791
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002792 /* don't apply anything if one error has been detected */
Willy Tarreau843b7cb2018-07-13 10:54:26 +02002793 if (msg->data)
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002794 goto out;
2795
Christopher Faulet2a944ee2017-11-07 10:42:54 +01002796 HA_SPIN_LOCK(SERVER_LOCK, &srv->lock);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002797 /* recover operational state and apply it to this server
2798 * and all servers tracking this one */
Jérôme Magninf57afa42019-01-20 11:27:40 +01002799 srv->check.health = srv_check_health;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002800 switch (srv_op_state) {
2801 case SRV_ST_STOPPED:
2802 srv->check.health = 0;
Emeric Brun5a133512017-10-19 14:42:30 +02002803 srv_set_stopped(srv, "changed from server-state after a reload", NULL);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002804 break;
2805 case SRV_ST_STARTING:
Jérôme Magninf57afa42019-01-20 11:27:40 +01002806 /* If rise == 1 there is no STARTING state, let's switch to
2807 * RUNNING
2808 */
2809 if (srv->check.rise == 1) {
2810 srv->check.health = srv->check.rise + srv->check.fall - 1;
2811 srv_set_running(srv, "", NULL);
2812 break;
2813 }
2814 if (srv->check.health < 1 || srv->check.health >= srv->check.rise)
2815 srv->check.health = srv->check.rise - 1;
Emeric Brun52a91d32017-08-31 14:41:55 +02002816 srv->next_state = srv_op_state;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002817 break;
2818 case SRV_ST_STOPPING:
Jérôme Magninf57afa42019-01-20 11:27:40 +01002819 /* If fall == 1 there is no STOPPING state, let's switch to
2820 * STOPPED
2821 */
2822 if (srv->check.fall == 1) {
2823 srv->check.health = 0;
2824 srv_set_stopped(srv, "changed from server-state after a reload", NULL);
2825 break;
2826 }
2827 if (srv->check.health < srv->check.rise ||
2828 srv->check.health > srv->check.rise + srv->check.fall - 2)
2829 srv->check.health = srv->check.rise;
Emeric Brun5a133512017-10-19 14:42:30 +02002830 srv_set_stopping(srv, "changed from server-state after a reload", NULL);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002831 break;
2832 case SRV_ST_RUNNING:
2833 srv->check.health = srv->check.rise + srv->check.fall - 1;
Emeric Brun5a133512017-10-19 14:42:30 +02002834 srv_set_running(srv, "", NULL);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002835 break;
2836 }
2837
2838 /* When applying server state, the following rules apply:
2839 * - in case of a configuration change, we apply the setting from the new
2840 * configuration, regardless of old running state
2841 * - if no configuration change, we apply old running state only if old running
2842 * state is different from new configuration state
2843 */
2844 /* configuration has changed */
Emeric Brun52a91d32017-08-31 14:41:55 +02002845 if ((srv_admin_state & SRV_ADMF_CMAINT) != (srv->next_admin & SRV_ADMF_CMAINT)) {
2846 if (srv->next_admin & SRV_ADMF_CMAINT)
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002847 srv_adm_set_maint(srv);
2848 else
2849 srv_adm_set_ready(srv);
2850 }
2851 /* configuration is the same, let's compate old running state and new conf state */
2852 else {
Emeric Brun52a91d32017-08-31 14:41:55 +02002853 if (srv_admin_state & SRV_ADMF_FMAINT && !(srv->next_admin & SRV_ADMF_CMAINT))
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002854 srv_adm_set_maint(srv);
Emeric Brun52a91d32017-08-31 14:41:55 +02002855 else if (!(srv_admin_state & SRV_ADMF_FMAINT) && (srv->next_admin & SRV_ADMF_CMAINT))
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002856 srv_adm_set_ready(srv);
2857 }
2858 /* apply drain mode if server is currently enabled */
Emeric Brun52a91d32017-08-31 14:41:55 +02002859 if (!(srv->next_admin & SRV_ADMF_FMAINT) && (srv_admin_state & SRV_ADMF_FDRAIN)) {
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002860 /* The SRV_ADMF_FDRAIN flag is inherited when srv->iweight is 0
Willy Tarreau22cace22016-11-03 18:19:49 +01002861 * (srv->iweight is the weight set up in configuration).
2862 * There are two possible reasons for FDRAIN to have been present :
2863 * - previous config weight was zero
2864 * - "set server b/s drain" was sent to the CLI
2865 *
2866 * In the first case, we simply want to drop this drain state
2867 * if the new weight is not zero anymore, meaning the administrator
2868 * has intentionally turned the weight back to a positive value to
2869 * enable the server again after an operation. In the second case,
2870 * the drain state was forced on the CLI regardless of the config's
2871 * weight so we don't want a change to the config weight to lose this
2872 * status. What this means is :
2873 * - if previous weight was 0 and new one is >0, drop the DRAIN state.
2874 * - if the previous weight was >0, keep it.
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002875 */
Willy Tarreau22cace22016-11-03 18:19:49 +01002876 if (srv_iweight > 0 || srv->iweight == 0)
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002877 srv_adm_set_drain(srv);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002878 }
2879
2880 srv->last_change = date.tv_sec - srv_last_time_change;
2881 srv->check.status = srv_check_status;
2882 srv->check.result = srv_check_result;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002883
2884 /* Only case we want to apply is removing ENABLED flag which could have been
2885 * done by the "disable health" command over the stats socket
2886 */
2887 if ((srv->check.state & CHK_ST_CONFIGURED) &&
2888 (srv_check_state & CHK_ST_CONFIGURED) &&
2889 !(srv_check_state & CHK_ST_ENABLED))
2890 srv->check.state &= ~CHK_ST_ENABLED;
2891
2892 /* Only case we want to apply is removing ENABLED flag which could have been
2893 * done by the "disable agent" command over the stats socket
2894 */
2895 if ((srv->agent.state & CHK_ST_CONFIGURED) &&
2896 (srv_agent_state & CHK_ST_CONFIGURED) &&
2897 !(srv_agent_state & CHK_ST_ENABLED))
2898 srv->agent.state &= ~CHK_ST_ENABLED;
2899
Baptiste Assmann6076d1c2015-09-17 22:53:59 +02002900 /* We want to apply the previous 'running' weight (srv_uweight) only if there
2901 * was no change in the configuration: both previous and new iweight are equals
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002902 *
Baptiste Assmann6076d1c2015-09-17 22:53:59 +02002903 * It means that a configuration file change has precedence over a unix socket change
2904 * for server's weight
2905 *
2906 * by default, HAProxy applies the following weight when parsing the configuration
2907 * srv->uweight = srv->iweight
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002908 */
Baptiste Assmann6076d1c2015-09-17 22:53:59 +02002909 if (srv_iweight == srv->iweight) {
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002910 srv->uweight = srv_uweight;
2911 }
Willy Tarreau3ff577e2018-08-02 11:48:52 +02002912 server_recalc_eweight(srv, 1);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02002913
Willy Tarreaue5a60682016-11-09 14:54:53 +01002914 /* load server IP address */
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002915 if (strcmp(params[0], "-") != 0)
Daniel Corbett9215ffa2018-05-19 19:43:24 -04002916 srv->lastaddr = strdup(params[0]);
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002917
2918 if (fqdn && srv->hostname) {
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01002919 if (strcmp(srv->hostname, fqdn) == 0) {
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002920 /* Here we reset the 'set from stats socket FQDN' flag
2921 * to support such transitions:
2922 * Let's say initial FQDN value is foo1 (in configuration file).
2923 * - FQDN changed from stats socket, from foo1 to foo2 value,
2924 * - FQDN changed again from file configuration (with the same previous value
2925 set from stats socket, from foo1 to foo2 value),
2926 * - reload for any other reason than a FQDN modification,
2927 * the configuration file FQDN matches the fqdn server state file value.
2928 * So we must reset the 'set from stats socket FQDN' flag to be consistent with
Joseph Herlant44466822018-11-15 08:57:51 -08002929 * any further FQDN modification.
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002930 */
Emeric Brun52a91d32017-08-31 14:41:55 +02002931 srv->next_admin &= ~SRV_ADMF_HMAINT;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002932 }
2933 else {
2934 /* If the FDQN has been changed from stats socket,
2935 * apply fqdn state file value (which is the value set
2936 * from stats socket).
Baptiste Assmann13a92322019-06-07 09:40:55 +02002937 * Also ensure the runtime resolver will process this resolution.
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002938 */
2939 if (fqdn_set_by_cli) {
Olivier Houchardd16bfe62017-10-31 15:21:19 +01002940 srv_set_fqdn(srv, fqdn, 0);
Baptiste Assmann13a92322019-06-07 09:40:55 +02002941 srv->flags &= ~SRV_F_NO_RESOLUTION;
Emeric Brun52a91d32017-08-31 14:41:55 +02002942 srv->next_admin |= SRV_ADMF_HMAINT;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002943 }
2944 }
2945 }
Baptiste Assmann6d0f38f2018-07-02 17:00:54 +02002946 /* If all the conditions below are validated, this means
2947 * we're evaluating a server managed by SRV resolution
2948 */
2949 else if (fqdn && !srv->hostname && srvrecord) {
2950 int res;
2951
2952 /* we can't apply previous state if SRV record has changed */
2953 if (srv->srvrq && strcmp(srv->srvrq->name, srvrecord) != 0) {
2954 chunk_appendf(msg, ", SRV record mismatch between configuration ('%s') and state file ('%s) for server '%s'. Previous state not applied", srv->srvrq->name, srvrecord, srv->id);
2955 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
2956 goto out;
2957 }
2958
2959 /* create or find a SRV resolution for this srv record */
2960 if (srv->srvrq == NULL && (srv->srvrq = find_srvrq_by_name(srvrecord, srv->proxy)) == NULL)
2961 srv->srvrq = new_dns_srvrq(srv, srvrecord);
2962 if (srv->srvrq == NULL) {
2963 chunk_appendf(msg, ", can't create or find SRV resolution '%s' for server '%s'", srvrecord, srv->id);
2964 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
2965 goto out;
2966 }
2967
2968 /* prepare DNS resolution for this server */
2969 res = srv_prepare_for_resolution(srv, fqdn);
2970 if (res == -1) {
2971 chunk_appendf(msg, ", can't allocate memory for DNS resolution for server '%s'", srv->id);
2972 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
2973 goto out;
2974 }
2975
2976 /* configure check.port accordingly */
2977 if ((srv->check.state & CHK_ST_CONFIGURED) &&
2978 !(srv->flags & SRV_F_CHECKPORT))
2979 srv->check.port = port;
2980
2981 /* Unset SRV_F_MAPPORTS for SRV records.
2982 * SRV_F_MAPPORTS is unfortunately set by parse_server()
2983 * because no ports are provided in the configuration file.
2984 * This is because HAProxy will use the port found into the SRV record.
2985 */
2986 srv->flags &= ~SRV_F_MAPPORTS;
2987 }
Frédéric Lécailleb418c122017-04-26 11:24:02 +02002988
Frédéric Lécaille31694712017-08-01 08:47:19 +02002989 if (port_str)
2990 srv->svc_port = port;
William Dauchyf6370442020-11-14 19:25:33 +01002991
2992#ifdef USE_OPENSSL
Ilya Shipitsinf38a0182020-12-21 01:16:17 +05002993 /* configure ssl if connection has been initiated at startup */
William Dauchyf6370442020-11-14 19:25:33 +01002994 if (srv->ssl_ctx.ctx != NULL)
2995 ssl_sock_set_srv(srv, use_ssl);
2996#endif
2997
Christopher Faulet2a944ee2017-11-07 10:42:54 +01002998 HA_SPIN_UNLOCK(SERVER_LOCK, &srv->lock);
Frédéric Lécaille31694712017-08-01 08:47:19 +02002999
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003000 break;
3001 default:
3002 chunk_appendf(msg, ", version '%d' not supported", version);
3003 }
3004
3005 out:
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003006 if (msg->data) {
Baptiste Assmann0821bb92016-01-21 00:20:50 +01003007 chunk_appendf(msg, "\n");
Christopher Faulet767a84b2017-11-24 16:50:31 +01003008 ha_warning("server-state application failed for server '%s/%s'%s",
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003009 srv->proxy->id, srv->id, msg->area);
Baptiste Assmann0821bb92016-01-21 00:20:50 +01003010 }
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003011}
3012
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003013
3014/*
3015 * read next line from file <f> and return the server state version if one found.
3016 * If no version is found, then 0 is returned
3017 * Note that this should be the first read on <f>
3018 */
3019static int srv_state_get_version(FILE *f) {
3020 char buf[2];
3021 int ret;
3022
3023 /* first character of first line of the file must contain the version of the export */
3024 if (fgets(buf, 2, f) == NULL) {
3025 return 0;
3026 }
3027
3028 ret = atoi(buf);
3029 if ((ret < SRV_STATE_FILE_VERSION_MIN) ||
3030 (ret > SRV_STATE_FILE_VERSION_MAX))
3031 return 0;
3032
3033 return ret;
3034}
3035
3036
3037/*
3038 * parses server state line stored in <buf> and supposedly in version <version>.
3039 * Set <params> and <srv_params> accordingly.
3040 * In case of error, params[0] is set to NULL.
3041 */
3042static void srv_state_parse_line(char *buf, const int version, char **params, char **srv_params)
3043{
3044 int buflen, arg, srv_arg;
3045 char *cur, *end;
3046
3047 buflen = strlen(buf);
3048 cur = buf;
3049 end = cur + buflen;
3050
3051 /* we need at least one character */
3052 if (buflen == 0) {
3053 params[0] = NULL;
3054 return;
3055 }
3056
3057 /* ignore blank characters at the beginning of the line */
Willy Tarreau90807112020-02-25 08:16:33 +01003058 while (isspace((unsigned char)*cur))
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003059 ++cur;
3060
3061 /* Ignore empty or commented lines */
3062 if (cur == end || *cur == '#') {
3063 params[0] = NULL;
3064 return;
3065 }
3066
3067 /* truncated lines */
3068 if (buf[buflen - 1] != '\n') {
3069 //ha_warning("server-state file '%s': truncated line\n", filepath);
3070 params[0] = NULL;
3071 return;
3072 }
3073
3074 /* Removes trailing '\n' */
3075 buf[buflen - 1] = '\0';
3076
3077 /* we're now ready to move the line into *srv_params[] */
3078 params[0] = cur;
3079 arg = 1;
3080 srv_arg = 0;
3081 while (*cur && arg < SRV_STATE_FILE_MAX_FIELDS) {
Willy Tarreau90807112020-02-25 08:16:33 +01003082 if (isspace((unsigned char)*cur)) {
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003083 *cur = '\0';
3084 ++cur;
Willy Tarreau90807112020-02-25 08:16:33 +01003085 while (isspace((unsigned char)*cur))
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003086 ++cur;
3087 switch (version) {
3088 case 1:
3089 /*
3090 * srv_addr: params[4] => srv_params[0]
3091 * srv_op_state: params[5] => srv_params[1]
3092 * srv_admin_state: params[6] => srv_params[2]
3093 * srv_uweight: params[7] => srv_params[3]
3094 * srv_iweight: params[8] => srv_params[4]
3095 * srv_last_time_change: params[9] => srv_params[5]
3096 * srv_check_status: params[10] => srv_params[6]
3097 * srv_check_result: params[11] => srv_params[7]
3098 * srv_check_health: params[12] => srv_params[8]
3099 * srv_check_state: params[13] => srv_params[9]
3100 * srv_agent_state: params[14] => srv_params[10]
3101 * bk_f_forced_id: params[15] => srv_params[11]
3102 * srv_f_forced_id: params[16] => srv_params[12]
3103 * srv_fqdn: params[17] => srv_params[13]
3104 * srv_port: params[18] => srv_params[14]
3105 * srvrecord: params[19] => srv_params[15]
3106 */
3107 if (arg >= 4) {
3108 srv_params[srv_arg] = cur;
3109 ++srv_arg;
3110 }
3111 break;
3112 }
3113
3114 params[arg] = cur;
3115 ++arg;
3116 }
3117 else {
3118 ++cur;
3119 }
3120 }
3121
3122 /* if line is incomplete line, then ignore it.
3123 * otherwise, update useful flags */
3124 switch (version) {
3125 case 1:
3126 if (arg < SRV_STATE_FILE_NB_FIELDS_VERSION_1) {
3127 params[0] = NULL;
3128 return;
3129 }
3130 break;
3131 }
3132
3133 return;
3134}
3135
3136
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003137/* This function parses all the proxies and only take care of the backends (since we're looking for server)
3138 * For each proxy, it does the following:
3139 * - opens its server state file (either one or local one)
3140 * - read whole file, line by line
3141 * - analyse each line to check if it matches our current backend:
3142 * - backend name matches
3143 * - backend id matches if id is forced and name doesn't match
3144 * - if the server pointed by the line is found, then state is applied
3145 *
3146 * If the running backend uuid or id differs from the state file, then HAProxy reports
3147 * a warning.
Willy Tarreau46b7f532018-08-21 11:54:26 +02003148 *
3149 * Grabs the server's lock via srv_update_state().
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003150 */
3151void apply_server_state(void)
3152{
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003153 char mybuf[SRV_STATE_LINE_MAXLEN];
Frédéric Lécailleb418c122017-04-26 11:24:02 +02003154 char *params[SRV_STATE_FILE_MAX_FIELDS] = {0};
3155 char *srv_params[SRV_STATE_FILE_MAX_FIELDS] = {0};
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003156 int version, global_file_version;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003157 FILE *f;
3158 char *filepath;
3159 char globalfilepath[MAXPATHLEN + 1];
3160 char localfilepath[MAXPATHLEN + 1];
3161 int len, fileopenerr, globalfilepathlen, localfilepathlen;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003162 struct proxy *curproxy, *bk;
3163 struct server *srv;
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003164 char *line;
3165 char *bkname, *srvname;
3166 struct state_line *st;
3167 struct ebmb_node *node, *next_node;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003168
Willy Tarreau2d067f92020-07-16 06:40:27 +02003169 f = NULL;
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003170 global_file_version = 0;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003171 globalfilepathlen = 0;
3172 /* create the globalfilepath variable */
3173 if (global.server_state_file) {
3174 /* absolute path or no base directory provided */
3175 if ((global.server_state_file[0] == '/') || (!global.server_state_base)) {
3176 len = strlen(global.server_state_file);
3177 if (len > MAXPATHLEN) {
3178 globalfilepathlen = 0;
3179 goto globalfileerror;
3180 }
3181 memcpy(globalfilepath, global.server_state_file, len);
3182 globalfilepath[len] = '\0';
3183 globalfilepathlen = len;
3184 }
3185 else if (global.server_state_base) {
3186 len = strlen(global.server_state_base);
Willy Tarreau5dfb6c42018-10-16 19:26:12 +02003187 if (len > MAXPATHLEN) {
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003188 globalfilepathlen = 0;
3189 goto globalfileerror;
3190 }
Olivier Houchard17f8b902018-10-16 18:35:01 +02003191 memcpy(globalfilepath, global.server_state_base, len);
Willy Tarreau5dfb6c42018-10-16 19:26:12 +02003192 globalfilepath[len] = 0;
3193 globalfilepathlen = len;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003194
3195 /* append a slash if needed */
3196 if (!globalfilepathlen || globalfilepath[globalfilepathlen - 1] != '/') {
3197 if (globalfilepathlen + 1 > MAXPATHLEN) {
3198 globalfilepathlen = 0;
3199 goto globalfileerror;
3200 }
3201 globalfilepath[globalfilepathlen++] = '/';
3202 }
3203
3204 len = strlen(global.server_state_file);
3205 if (globalfilepathlen + len > MAXPATHLEN) {
3206 globalfilepathlen = 0;
3207 goto globalfileerror;
3208 }
3209 memcpy(globalfilepath + globalfilepathlen, global.server_state_file, len);
3210 globalfilepathlen += len;
3211 globalfilepath[globalfilepathlen++] = 0;
3212 }
3213 }
3214 globalfileerror:
3215 if (globalfilepathlen == 0)
3216 globalfilepath[0] = '\0';
3217
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003218 /* Load global server state in a tree */
3219 if (globalfilepathlen > 0) {
3220 errno = 0;
3221 f = fopen(globalfilepath, "r");
3222 if (errno)
3223 ha_warning("Can't open global server state file '%s': %s\n", globalfilepath, strerror(errno));
Vedran Furac5d486272019-10-16 14:49:38 +02003224 if (!f)
3225 goto out_load_server_state_in_tree;
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003226
3227 global_file_version = srv_state_get_version(f);
3228 if (global_file_version == 0)
3229 goto out_load_server_state_in_tree;
3230
3231 while (fgets(mybuf, SRV_STATE_LINE_MAXLEN, f)) {
3232 line = NULL;
3233
3234 line = strdup(mybuf);
3235 if (line == NULL)
3236 continue;
3237
3238 srv_state_parse_line(mybuf, global_file_version, params, srv_params);
3239 if (params[0] == NULL)
Willy Tarreauca7a5af2019-12-20 17:26:27 +01003240 goto nextline;
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003241
3242 /* bkname */
3243 bkname = params[1];
3244 /* srvname */
3245 srvname = params[3];
3246
3247 /* key */
3248 chunk_printf(&trash, "%s %s", bkname, srvname);
3249
3250 /* store line in tree */
Willy Tarreau7d6a1fa2019-12-20 17:18:13 +01003251 st = calloc(1, sizeof(*st) + trash.data + 1);
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003252 if (st == NULL) {
3253 goto nextline;
3254 }
Willy Tarreau7d6a1fa2019-12-20 17:18:13 +01003255 memcpy(st->name_name.key, trash.area, trash.data + 1);
Willy Tarreaufd1aa012019-12-20 17:23:40 +01003256 if (ebst_insert(&state_file, &st->name_name) != &st->name_name) {
3257 /* this is a duplicate key, probably a hand-crafted file,
3258 * drop it!
3259 */
3260 goto nextline;
3261 }
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003262
3263 /* save line */
3264 st->line = line;
3265
3266 continue;
3267
3268 nextline:
3269 /* free up memory in case of error during the processing of the line */
3270 free(line);
3271 }
3272 }
3273 out_load_server_state_in_tree:
3274
Ilya Shipitsindc6e8a92020-07-16 02:02:40 +05003275 if (f) {
3276 fclose(f);
3277 f = NULL;
3278 }
3279
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003280 /* parse all proxies and load states form tree (global file) or from local file */
Olivier Houchardfbc74e82017-11-24 16:54:05 +01003281 for (curproxy = proxies_list; curproxy != NULL; curproxy = curproxy->next) {
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003282 /* servers are only in backends */
3283 if (!(curproxy->cap & PR_CAP_BE))
3284 continue;
3285 fileopenerr = 0;
3286 filepath = NULL;
3287
3288 /* search server state file path and name */
3289 switch (curproxy->load_server_state_from_file) {
3290 /* read servers state from global file */
3291 case PR_SRV_STATE_FILE_GLOBAL:
3292 /* there was an error while generating global server state file path */
3293 if (globalfilepathlen == 0)
3294 continue;
3295 filepath = globalfilepath;
3296 fileopenerr = 1;
3297 break;
3298 /* this backend has its own file */
3299 case PR_SRV_STATE_FILE_LOCAL:
3300 localfilepathlen = 0;
3301 localfilepath[0] = '\0';
3302 len = 0;
3303 /* create the localfilepath variable */
3304 /* absolute path or no base directory provided */
3305 if ((curproxy->server_state_file_name[0] == '/') || (!global.server_state_base)) {
3306 len = strlen(curproxy->server_state_file_name);
3307 if (len > MAXPATHLEN) {
3308 localfilepathlen = 0;
3309 goto localfileerror;
3310 }
3311 memcpy(localfilepath, curproxy->server_state_file_name, len);
3312 localfilepath[len] = '\0';
3313 localfilepathlen = len;
3314 }
3315 else if (global.server_state_base) {
3316 len = strlen(global.server_state_base);
3317 localfilepathlen += len;
3318
3319 if (localfilepathlen > MAXPATHLEN) {
3320 localfilepathlen = 0;
3321 goto localfileerror;
3322 }
Olivier Houchard17f8b902018-10-16 18:35:01 +02003323 memcpy(localfilepath, global.server_state_base, len);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003324 localfilepath[localfilepathlen] = 0;
3325
3326 /* append a slash if needed */
3327 if (!localfilepathlen || localfilepath[localfilepathlen - 1] != '/') {
3328 if (localfilepathlen + 1 > MAXPATHLEN) {
3329 localfilepathlen = 0;
3330 goto localfileerror;
3331 }
3332 localfilepath[localfilepathlen++] = '/';
3333 }
3334
3335 len = strlen(curproxy->server_state_file_name);
3336 if (localfilepathlen + len > MAXPATHLEN) {
3337 localfilepathlen = 0;
3338 goto localfileerror;
3339 }
3340 memcpy(localfilepath + localfilepathlen, curproxy->server_state_file_name, len);
3341 localfilepathlen += len;
3342 localfilepath[localfilepathlen++] = 0;
3343 }
3344 filepath = localfilepath;
3345 localfileerror:
3346 if (localfilepathlen == 0)
3347 localfilepath[0] = '\0';
3348
3349 break;
3350 case PR_SRV_STATE_FILE_NONE:
3351 default:
3352 continue;
3353 }
3354
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003355 /* when global file is used, we get data from the tree
3356 * Note that in such case we don't check backend name neither uuid.
3357 * Backend name can't be wrong since it's used as a key to retrieve the server state
3358 * line from the tree.
3359 */
3360 if (curproxy->load_server_state_from_file == PR_SRV_STATE_FILE_GLOBAL) {
3361 struct server *srv = curproxy->srv;
3362 while (srv) {
3363 struct ebmb_node *node;
3364 struct state_line *st;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003365
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003366 chunk_printf(&trash, "%s %s", curproxy->id, srv->id);
3367 node = ebst_lookup(&state_file, trash.area);
3368 if (!node)
3369 goto next;
Dragan Dosencf4fb032015-11-04 23:03:26 +01003370
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003371 st = container_of(node, struct state_line, name_name);
3372 memcpy(mybuf, st->line, strlen(st->line));
3373 mybuf[strlen(st->line)] = 0;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003374
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003375 srv_state_parse_line(mybuf, global_file_version, params, srv_params);
3376 if (params[0] == NULL)
3377 goto next;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003378
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003379 srv_update_state(srv, global_file_version, srv_params);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003380
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003381 next:
3382 srv = srv->next;
3383 }
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003384
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003385 continue; /* next proxy in list */
3386 }
3387 else {
3388 /* load 'local' state file */
3389 errno = 0;
3390 f = fopen(filepath, "r");
3391 if (errno && fileopenerr)
3392 ha_warning("Can't open server state file '%s': %s\n", filepath, strerror(errno));
3393 if (!f)
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003394 continue;
3395
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003396 mybuf[0] = '\0';
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003397
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003398 /* first character of first line of the file must contain the version of the export */
3399 version = srv_state_get_version(f);
3400 if (version == 0) {
3401 ha_warning("Can't get version of the server state file '%s'\n", filepath);
3402 goto fileclose;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02003403 }
3404
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003405 while (fgets(mybuf, SRV_STATE_LINE_MAXLEN, f)) {
3406 int bk_f_forced_id = 0;
3407 int check_id = 0;
3408 int check_name = 0;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003409
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003410 srv_state_parse_line(mybuf, version, params, srv_params);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003411
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003412 if (params[0] == NULL) {
3413 continue;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003414 }
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003415
3416 /* if line is incomplete line, then ignore it.
3417 * otherwise, update useful flags */
3418 switch (version) {
3419 case 1:
3420 bk_f_forced_id = (atoi(params[15]) & PR_O_FORCED_ID);
3421 check_id = (atoi(params[0]) == curproxy->uuid);
3422 check_name = (strcmp(curproxy->id, params[1]) == 0);
3423 break;
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003424 }
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003425
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003426 bk = curproxy;
3427
3428 /* if backend can't be found, let's continue */
3429 if (!check_id && !check_name)
3430 continue;
3431 else if (!check_id && check_name) {
3432 ha_warning("backend ID mismatch: from server state file: '%s', from running config '%d'\n", params[0], bk->uuid);
3433 send_log(bk, LOG_NOTICE, "backend ID mismatch: from server state file: '%s', from running config '%d'\n", params[0], bk->uuid);
3434 }
3435 else if (check_id && !check_name) {
3436 ha_warning("backend name mismatch: from server state file: '%s', from running config '%s'\n", params[1], bk->id);
3437 send_log(bk, LOG_NOTICE, "backend name mismatch: from server state file: '%s', from running config '%s'\n", params[1], bk->id);
3438 /* if name doesn't match, we still want to update curproxy if the backend id
3439 * was forced in previous the previous configuration */
3440 if (!bk_f_forced_id)
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003441 continue;
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003442 }
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003443
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003444 /* look for the server by its name: param[3] */
3445 srv = server_find_best_match(bk, params[3], 0, NULL);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003446
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003447 if (!srv) {
3448 /* if no server found, then warning and continue with next line */
3449 ha_warning("can't find server '%s' in backend '%s'\n",
3450 params[3], params[1]);
3451 send_log(bk, LOG_NOTICE, "can't find server '%s' in backend '%s'\n",
3452 params[3], params[1]);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003453 continue;
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003454 }
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003455
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003456 /* now we can proceed with server's state update */
3457 srv_update_state(srv, version, srv_params);
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003458 }
Ilya Shipitsindc6e8a92020-07-16 02:02:40 +05003459
3460 fileclose:
3461 fclose(f);
3462
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003463 }
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003464 }
Baptiste Assmannda29fe22019-06-13 13:24:29 +02003465
3466 /* now free memory allocated for the tree */
3467 for (node = ebmb_first(&state_file), next_node = node ? ebmb_next(node) : NULL;
3468 node;
3469 node = next_node, next_node = node ? ebmb_next(node) : NULL) {
3470 st = container_of(node, struct state_line, name_name);
3471 ebmb_delete(&st->name_name);
3472 free(st->line);
3473 free(st);
3474 }
3475
Baptiste Assmanne11cfcd2015-08-19 16:44:03 +02003476}
3477
Simon Horman7d09b9a2013-02-12 10:45:51 +09003478/*
Baptiste Assmann14e40142015-04-14 01:13:07 +02003479 * update a server's current IP address.
3480 * ip is a pointer to the new IP address, whose address family is ip_sin_family.
3481 * ip is in network format.
3482 * updater is a string which contains an information about the requester of the update.
3483 * updater is used if not NULL.
3484 *
3485 * A log line and a stderr warning message is generated based on server's backend options.
Willy Tarreau46b7f532018-08-21 11:54:26 +02003486 *
3487 * Must be called with the server lock held.
Baptiste Assmann14e40142015-04-14 01:13:07 +02003488 */
Thierry Fournierd35b7a62016-02-24 08:23:22 +01003489int update_server_addr(struct server *s, void *ip, int ip_sin_family, const char *updater)
Baptiste Assmann14e40142015-04-14 01:13:07 +02003490{
Christopher Fauletd6c6b5f2020-09-08 10:27:24 +02003491 /* save the new IP family & address if necessary */
3492 switch (ip_sin_family) {
3493 case AF_INET:
3494 if (s->addr.ss_family == ip_sin_family &&
3495 !memcmp(ip, &((struct sockaddr_in *)&s->addr)->sin_addr.s_addr, 4))
3496 return 0;
3497 break;
3498 case AF_INET6:
3499 if (s->addr.ss_family == ip_sin_family &&
3500 !memcmp(ip, &((struct sockaddr_in6 *)&s->addr)->sin6_addr.s6_addr, 16))
3501 return 0;
3502 break;
3503 };
3504
Baptiste Assmann14e40142015-04-14 01:13:07 +02003505 /* generates a log line and a warning on stderr */
3506 if (1) {
3507 /* book enough space for both IPv4 and IPv6 */
3508 char oldip[INET6_ADDRSTRLEN];
3509 char newip[INET6_ADDRSTRLEN];
3510
3511 memset(oldip, '\0', INET6_ADDRSTRLEN);
3512 memset(newip, '\0', INET6_ADDRSTRLEN);
3513
3514 /* copy old IP address in a string */
3515 switch (s->addr.ss_family) {
3516 case AF_INET:
3517 inet_ntop(s->addr.ss_family, &((struct sockaddr_in *)&s->addr)->sin_addr, oldip, INET_ADDRSTRLEN);
3518 break;
3519 case AF_INET6:
3520 inet_ntop(s->addr.ss_family, &((struct sockaddr_in6 *)&s->addr)->sin6_addr, oldip, INET6_ADDRSTRLEN);
3521 break;
Christopher Fauletb0b76072020-09-08 10:38:40 +02003522 default:
3523 strcpy(oldip, "(none)");
3524 break;
Baptiste Assmann14e40142015-04-14 01:13:07 +02003525 };
3526
3527 /* copy new IP address in a string */
3528 switch (ip_sin_family) {
3529 case AF_INET:
3530 inet_ntop(ip_sin_family, ip, newip, INET_ADDRSTRLEN);
3531 break;
3532 case AF_INET6:
3533 inet_ntop(ip_sin_family, ip, newip, INET6_ADDRSTRLEN);
3534 break;
3535 };
3536
3537 /* save log line into a buffer */
3538 chunk_printf(&trash, "%s/%s changed its IP from %s to %s by %s",
3539 s->proxy->id, s->id, oldip, newip, updater);
3540
3541 /* write the buffer on stderr */
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003542 ha_warning("%s.\n", trash.area);
Baptiste Assmann14e40142015-04-14 01:13:07 +02003543
3544 /* send a log */
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003545 send_log(s->proxy, LOG_NOTICE, "%s.\n", trash.area);
Baptiste Assmann14e40142015-04-14 01:13:07 +02003546 }
3547
3548 /* save the new IP family */
3549 s->addr.ss_family = ip_sin_family;
3550 /* save the new IP address */
3551 switch (ip_sin_family) {
3552 case AF_INET:
Willy Tarreaueec1d382016-07-13 11:59:39 +02003553 memcpy(&((struct sockaddr_in *)&s->addr)->sin_addr.s_addr, ip, 4);
Baptiste Assmann14e40142015-04-14 01:13:07 +02003554 break;
3555 case AF_INET6:
3556 memcpy(((struct sockaddr_in6 *)&s->addr)->sin6_addr.s6_addr, ip, 16);
3557 break;
3558 };
Olivier Houchard4e694042017-03-14 20:01:29 +01003559 srv_set_dyncookie(s);
Thayne McCombs92149f92020-11-20 01:28:26 -07003560 srv_set_addr_desc(s);
Baptiste Assmann14e40142015-04-14 01:13:07 +02003561
3562 return 0;
3563}
3564
3565/*
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003566 * This function update a server's addr and port only for AF_INET and AF_INET6 families.
3567 *
3568 * Caller can pass its name through <updater> to get it integrated in the response message
3569 * returned by the function.
3570 *
3571 * The function first does the following, in that order:
3572 * - validates the new addr and/or port
3573 * - checks if an update is required (new IP or port is different than current ones)
3574 * - checks the update is allowed:
3575 * - don't switch from/to a family other than AF_INET4 and AF_INET6
3576 * - allow all changes if no CHECKS are configured
3577 * - if CHECK is configured:
3578 * - if switch to port map (SRV_F_MAPPORTS), ensure health check have their own ports
3579 * - applies required changes to both ADDR and PORT if both 'required' and 'allowed'
3580 * conditions are met
Willy Tarreau46b7f532018-08-21 11:54:26 +02003581 *
3582 * Must be called with the server lock held.
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003583 */
3584const char *update_server_addr_port(struct server *s, const char *addr, const char *port, char *updater)
3585{
3586 struct sockaddr_storage sa;
3587 int ret, port_change_required;
3588 char current_addr[INET6_ADDRSTRLEN];
David Carlier327298c2016-11-20 10:42:38 +00003589 uint16_t current_port, new_port;
Willy Tarreau83061a82018-07-13 11:56:34 +02003590 struct buffer *msg;
Olivier Houchard4e694042017-03-14 20:01:29 +01003591 int changed = 0;
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003592
3593 msg = get_trash_chunk();
3594 chunk_reset(msg);
3595
3596 if (addr) {
3597 memset(&sa, 0, sizeof(struct sockaddr_storage));
3598 if (str2ip2(addr, &sa, 0) == NULL) {
3599 chunk_printf(msg, "Invalid addr '%s'", addr);
3600 goto out;
3601 }
3602
3603 /* changes are allowed on AF_INET* families only */
3604 if ((sa.ss_family != AF_INET) && (sa.ss_family != AF_INET6)) {
3605 chunk_printf(msg, "Update to families other than AF_INET and AF_INET6 supported only through configuration file");
3606 goto out;
3607 }
3608
3609 /* collecting data currently setup */
3610 memset(current_addr, '\0', sizeof(current_addr));
3611 ret = addr_to_str(&s->addr, current_addr, sizeof(current_addr));
3612 /* changes are allowed on AF_INET* families only */
3613 if ((ret != AF_INET) && (ret != AF_INET6)) {
3614 chunk_printf(msg, "Update for the current server address family is only supported through configuration file");
3615 goto out;
3616 }
3617
3618 /* applying ADDR changes if required and allowed
3619 * ipcmp returns 0 when both ADDR are the same
3620 */
3621 if (ipcmp(&s->addr, &sa) == 0) {
3622 chunk_appendf(msg, "no need to change the addr");
3623 goto port;
3624 }
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003625 ipcpy(&sa, &s->addr);
Olivier Houchard4e694042017-03-14 20:01:29 +01003626 changed = 1;
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003627
3628 /* we also need to update check's ADDR only if it uses the server's one */
3629 if ((s->check.state & CHK_ST_CONFIGURED) && (s->flags & SRV_F_CHECKADDR)) {
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003630 ipcpy(&sa, &s->check.addr);
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003631 }
3632
3633 /* we also need to update agent ADDR only if it use the server's one */
3634 if ((s->agent.state & CHK_ST_CONFIGURED) && (s->flags & SRV_F_AGENTADDR)) {
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003635 ipcpy(&sa, &s->agent.addr);
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003636 }
3637
3638 /* update report for caller */
3639 chunk_printf(msg, "IP changed from '%s' to '%s'", current_addr, addr);
3640 }
3641
3642 port:
3643 if (port) {
3644 char sign = '\0';
3645 char *endptr;
3646
3647 if (addr)
3648 chunk_appendf(msg, ", ");
3649
3650 /* collecting data currently setup */
Willy Tarreau04276f32017-01-06 17:41:29 +01003651 current_port = s->svc_port;
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003652
3653 /* check if PORT change is required */
3654 port_change_required = 0;
3655
3656 sign = *port;
Ryabin Sergey77ee7522017-01-11 19:39:55 +04003657 errno = 0;
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003658 new_port = strtol(port, &endptr, 10);
3659 if ((errno != 0) || (port == endptr)) {
3660 chunk_appendf(msg, "problem converting port '%s' to an int", port);
3661 goto out;
3662 }
3663
3664 /* check if caller triggers a port mapped or offset */
3665 if (sign == '-' || (sign == '+')) {
3666 /* check if server currently uses port map */
3667 if (!(s->flags & SRV_F_MAPPORTS)) {
3668 /* switch from fixed port to port map mandatorily triggers
3669 * a port change */
3670 port_change_required = 1;
3671 /* check is configured
3672 * we're switching from a fixed port to a SRV_F_MAPPORTS (mapped) port
3673 * prevent PORT change if check doesn't have it's dedicated port while switching
3674 * to port mapping */
3675 if ((s->check.state & CHK_ST_CONFIGURED) && !(s->flags & SRV_F_CHECKPORT)) {
3676 chunk_appendf(msg, "can't change <port> to port map because it is incompatible with current health check port configuration (use 'port' statement from the 'server' directive.");
3677 goto out;
3678 }
3679 }
3680 /* we're already using port maps */
3681 else {
3682 port_change_required = current_port != new_port;
3683 }
3684 }
3685 /* fixed port */
3686 else {
3687 port_change_required = current_port != new_port;
3688 }
3689
3690 /* applying PORT changes if required and update response message */
3691 if (port_change_required) {
3692 /* apply new port */
Willy Tarreau04276f32017-01-06 17:41:29 +01003693 s->svc_port = new_port;
Olivier Houchard4e694042017-03-14 20:01:29 +01003694 changed = 1;
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003695
3696 /* prepare message */
3697 chunk_appendf(msg, "port changed from '");
3698 if (s->flags & SRV_F_MAPPORTS)
3699 chunk_appendf(msg, "+");
3700 chunk_appendf(msg, "%d' to '", current_port);
3701
3702 if (sign == '-') {
3703 s->flags |= SRV_F_MAPPORTS;
3704 chunk_appendf(msg, "%c", sign);
3705 /* just use for result output */
3706 new_port = -new_port;
3707 }
3708 else if (sign == '+') {
3709 s->flags |= SRV_F_MAPPORTS;
3710 chunk_appendf(msg, "%c", sign);
3711 }
3712 else {
3713 s->flags &= ~SRV_F_MAPPORTS;
3714 }
3715
3716 chunk_appendf(msg, "%d'", new_port);
3717
3718 /* we also need to update health checks port only if it uses server's realport */
3719 if ((s->check.state & CHK_ST_CONFIGURED) && !(s->flags & SRV_F_CHECKPORT)) {
3720 s->check.port = new_port;
3721 }
3722 }
3723 else {
3724 chunk_appendf(msg, "no need to change the port");
3725 }
3726 }
3727
3728out:
William Dauchy6318d332020-05-02 21:52:36 +02003729 if (changed) {
3730 /* force connection cleanup on the given server */
3731 srv_cleanup_connections(s);
Olivier Houchard4e694042017-03-14 20:01:29 +01003732 srv_set_dyncookie(s);
Thayne McCombs92149f92020-11-20 01:28:26 -07003733 srv_set_addr_desc(s);
William Dauchy6318d332020-05-02 21:52:36 +02003734 }
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003735 if (updater)
3736 chunk_appendf(msg, " by '%s'", updater);
3737 chunk_appendf(msg, "\n");
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003738 return msg->area;
Baptiste Assmannd458adc2016-08-02 08:18:55 +02003739}
3740
3741
3742/*
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003743 * update server status based on result of name resolution
3744 * returns:
3745 * 0 if server status is updated
3746 * 1 if server status has not changed
Willy Tarreau46b7f532018-08-21 11:54:26 +02003747 *
3748 * Must be called with the server lock held.
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003749 */
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003750int snr_update_srv_status(struct server *s, int has_no_ip)
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003751{
Christopher Faulet67957bd2017-09-27 11:00:59 +02003752 struct dns_resolvers *resolvers = s->resolvers;
3753 struct dns_resolution *resolution = s->dns_requester->resolution;
3754 int exp;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003755
Jerome Magnin012261a2020-07-28 13:38:22 +02003756 /* If resolution is NULL we're dealing with SRV records Additional records */
3757 if (resolution == NULL) {
Baptiste Assmann87138c32020-08-04 10:57:21 +02003758 /* since this server has an IP, it can go back in production */
3759 if (has_no_ip == 0) {
3760 srv_clr_admin_flag(s, SRV_ADMF_RMAINT);
3761 return 1;
3762 }
3763
Jerome Magnin012261a2020-07-28 13:38:22 +02003764 if (s->next_admin & SRV_ADMF_RMAINT)
3765 return 1;
3766
3767 srv_set_admin_flag(s, SRV_ADMF_RMAINT, "entry removed from SRV record");
3768 return 0;
3769 }
3770
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003771 switch (resolution->status) {
3772 case RSLV_STATUS_NONE:
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003773 /* status when HAProxy has just (re)started.
3774 * Nothing to do, since the task is already automatically started */
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003775 break;
3776
Baptiste Assmann3b9fe9f2016-11-02 22:58:18 +01003777 case RSLV_STATUS_VALID:
3778 /*
3779 * resume health checks
3780 * server will be turned back on if health check is safe
3781 */
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003782 if (has_no_ip) {
Emeric Brun52a91d32017-08-31 14:41:55 +02003783 if (s->next_admin & SRV_ADMF_RMAINT)
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003784 return 1;
3785 srv_set_admin_flag(s, SRV_ADMF_RMAINT,
3786 "No IP for server ");
Christopher Faulet67957bd2017-09-27 11:00:59 +02003787 return 0;
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003788 }
Christopher Faulet67957bd2017-09-27 11:00:59 +02003789
Emeric Brun52a91d32017-08-31 14:41:55 +02003790 if (!(s->next_admin & SRV_ADMF_RMAINT))
Baptiste Assmann3b9fe9f2016-11-02 22:58:18 +01003791 return 1;
3792 srv_clr_admin_flag(s, SRV_ADMF_RMAINT);
3793 chunk_printf(&trash, "Server %s/%s administratively READY thanks to valid DNS answer",
3794 s->proxy->id, s->id);
3795
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003796 ha_warning("%s.\n", trash.area);
3797 send_log(s->proxy, LOG_NOTICE, "%s.\n", trash.area);
Baptiste Assmann3b9fe9f2016-11-02 22:58:18 +01003798 return 0;
3799
3800 case RSLV_STATUS_NX:
3801 /* stop server if resolution is NX for a long enough period */
Christopher Faulet67957bd2017-09-27 11:00:59 +02003802 exp = tick_add(resolution->last_valid, resolvers->hold.nx);
3803 if (!tick_is_expired(exp, now_ms))
3804 break;
3805
3806 if (s->next_admin & SRV_ADMF_RMAINT)
3807 return 1;
3808 srv_set_admin_flag(s, SRV_ADMF_RMAINT, "DNS NX status");
3809 return 0;
Baptiste Assmann3b9fe9f2016-11-02 22:58:18 +01003810
3811 case RSLV_STATUS_TIMEOUT:
3812 /* stop server if resolution is TIMEOUT for a long enough period */
Christopher Faulet67957bd2017-09-27 11:00:59 +02003813 exp = tick_add(resolution->last_valid, resolvers->hold.timeout);
3814 if (!tick_is_expired(exp, now_ms))
3815 break;
3816
3817 if (s->next_admin & SRV_ADMF_RMAINT)
3818 return 1;
3819 srv_set_admin_flag(s, SRV_ADMF_RMAINT, "DNS timeout status");
3820 return 0;
Baptiste Assmann3b9fe9f2016-11-02 22:58:18 +01003821
3822 case RSLV_STATUS_REFUSED:
3823 /* stop server if resolution is REFUSED for a long enough period */
Christopher Faulet67957bd2017-09-27 11:00:59 +02003824 exp = tick_add(resolution->last_valid, resolvers->hold.refused);
3825 if (!tick_is_expired(exp, now_ms))
3826 break;
3827
3828 if (s->next_admin & SRV_ADMF_RMAINT)
3829 return 1;
3830 srv_set_admin_flag(s, SRV_ADMF_RMAINT, "DNS refused status");
3831 return 0;
Baptiste Assmann3b9fe9f2016-11-02 22:58:18 +01003832
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003833 default:
Christopher Faulet67957bd2017-09-27 11:00:59 +02003834 /* stop server if resolution failed for a long enough period */
3835 exp = tick_add(resolution->last_valid, resolvers->hold.other);
3836 if (!tick_is_expired(exp, now_ms))
3837 break;
3838
3839 if (s->next_admin & SRV_ADMF_RMAINT)
3840 return 1;
3841 srv_set_admin_flag(s, SRV_ADMF_RMAINT, "unspecified DNS error");
3842 return 0;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003843 }
3844
3845 return 1;
3846}
3847
3848/*
3849 * Server Name Resolution valid response callback
3850 * It expects:
3851 * - <nameserver>: the name server which answered the valid response
3852 * - <response>: buffer containing a valid DNS response
3853 * - <response_len>: size of <response>
3854 * It performs the following actions:
3855 * - ignore response if current ip found and server family not met
3856 * - update with first new ip found if family is met and current IP is not found
3857 * returns:
3858 * 0 on error
3859 * 1 when no error or safe ignore
Olivier Houchard28381072017-11-06 17:30:28 +01003860 *
3861 * Must be called with server lock held
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003862 */
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003863int snr_resolution_cb(struct dns_requester *requester, struct dns_nameserver *nameserver)
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003864{
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003865 struct server *s = NULL;
3866 struct dns_resolution *resolution = NULL;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003867 void *serverip, *firstip;
3868 short server_sin_family, firstip_sin_family;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003869 int ret;
Willy Tarreau83061a82018-07-13 11:56:34 +02003870 struct buffer *chk = get_trash_chunk();
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003871 int has_no_ip = 0;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003872
Christopher Faulet67957bd2017-09-27 11:00:59 +02003873 s = objt_server(requester->owner);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003874 if (!s)
3875 return 1;
3876
Christopher Faulet67957bd2017-09-27 11:00:59 +02003877 resolution = s->dns_requester->resolution;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003878
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003879 /* initializing variables */
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003880 firstip = NULL; /* pointer to the first valid response found */
3881 /* it will be used as the new IP if a change is required */
3882 firstip_sin_family = AF_UNSPEC;
3883 serverip = NULL; /* current server IP address */
3884
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003885 /* initializing server IP pointer */
3886 server_sin_family = s->addr.ss_family;
3887 switch (server_sin_family) {
3888 case AF_INET:
3889 serverip = &((struct sockaddr_in *)&s->addr)->sin_addr.s_addr;
3890 break;
3891
3892 case AF_INET6:
3893 serverip = &((struct sockaddr_in6 *)&s->addr)->sin6_addr.s6_addr;
3894 break;
3895
Willy Tarreau3acfcd12017-01-06 19:18:32 +01003896 case AF_UNSPEC:
3897 break;
3898
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003899 default:
3900 goto invalid;
3901 }
3902
Baptiste Assmann729c9012017-05-22 15:13:10 +02003903 ret = dns_get_ip_from_response(&resolution->response, &s->dns_opts,
Thierry Fournierada34842016-02-17 21:25:09 +01003904 serverip, server_sin_family, &firstip,
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003905 &firstip_sin_family, s);
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003906
3907 switch (ret) {
3908 case DNS_UPD_NO:
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003909 goto update_status;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003910
3911 case DNS_UPD_SRVIP_NOT_FOUND:
3912 goto save_ip;
3913
3914 case DNS_UPD_CNAME:
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003915 goto invalid;
3916
Baptiste Assmann0453a1d2015-09-09 00:51:08 +02003917 case DNS_UPD_NO_IP_FOUND:
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003918 has_no_ip = 1;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003919 goto update_status;
Baptiste Assmann0453a1d2015-09-09 00:51:08 +02003920
Baptiste Assmannfad03182015-10-28 02:03:32 +01003921 case DNS_UPD_NAME_ERROR:
Baptiste Assmannfad03182015-10-28 02:03:32 +01003922 /* update resolution status to OTHER error type */
Christopher Faulet67957bd2017-09-27 11:00:59 +02003923 resolution->status = RSLV_STATUS_OTHER;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003924 goto update_status;
Baptiste Assmannfad03182015-10-28 02:03:32 +01003925
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003926 default:
3927 goto invalid;
3928
3929 }
3930
3931 save_ip:
Christopher Faulet67957bd2017-09-27 11:00:59 +02003932 if (nameserver) {
Amaury Denoyellefbd0bc92020-10-05 11:49:46 +02003933 nameserver->counters->update++;
Christopher Faulet67957bd2017-09-27 11:00:59 +02003934 /* save the first ip we found */
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003935 chunk_printf(chk, "%s/%s", nameserver->resolvers->id, nameserver->id);
Christopher Faulet67957bd2017-09-27 11:00:59 +02003936 }
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003937 else
3938 chunk_printf(chk, "DNS cache");
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003939 update_server_addr(s, firstip, firstip_sin_family, (char *) chk->area);
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003940
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003941 update_status:
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003942 snr_update_srv_status(s, has_no_ip);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003943 return 1;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003944
3945 invalid:
Christopher Faulet3bbd65b2017-09-15 11:55:45 +02003946 if (nameserver) {
Amaury Denoyellefbd0bc92020-10-05 11:49:46 +02003947 nameserver->counters->invalid++;
Christopher Faulet67957bd2017-09-27 11:00:59 +02003948 goto update_status;
Christopher Faulet3bbd65b2017-09-15 11:55:45 +02003949 }
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003950 snr_update_srv_status(s, has_no_ip);
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003951 return 0;
3952}
3953
3954/*
3955 * Server Name Resolution error management callback
3956 * returns:
3957 * 0 on error
3958 * 1 when no error or safe ignore
Willy Tarreau46b7f532018-08-21 11:54:26 +02003959 *
3960 * Grabs the server's lock.
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003961 */
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003962int snr_resolution_error_cb(struct dns_requester *requester, int error_code)
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003963{
Christopher Faulet67957bd2017-09-27 11:00:59 +02003964 struct server *s;
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003965
Christopher Faulet67957bd2017-09-27 11:00:59 +02003966 s = objt_server(requester->owner);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02003967 if (!s)
3968 return 1;
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003969 HA_SPIN_LOCK(SERVER_LOCK, &s->lock);
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003970 snr_update_srv_status(s, 0);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003971 HA_SPIN_UNLOCK(SERVER_LOCK, &s->lock);
Baptiste Assmanna68ca962015-04-14 01:15:08 +02003972 return 1;
3973}
3974
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003975/*
3976 * Function to check if <ip> is already affected to a server in the backend
Olivier Houcharda8c6db82017-07-06 18:46:47 +02003977 * which owns <srv> and is up.
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003978 * It returns a pointer to the first server found or NULL if <ip> is not yet
3979 * assigned.
Olivier Houchard28381072017-11-06 17:30:28 +01003980 *
3981 * Must be called with server lock held
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003982 */
3983struct server *snr_check_ip_callback(struct server *srv, void *ip, unsigned char *ip_family)
3984{
3985 struct server *tmpsrv;
3986 struct proxy *be;
3987
3988 if (!srv)
3989 return NULL;
3990
3991 be = srv->proxy;
3992 for (tmpsrv = be->srv; tmpsrv; tmpsrv = tmpsrv->next) {
Emeric Brune9fd6b52017-11-02 17:20:39 +01003993 /* we found the current server is the same, ignore it */
3994 if (srv == tmpsrv)
3995 continue;
3996
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02003997 /* We want to compare the IP in the record with the IP of the servers in the
3998 * same backend, only if:
3999 * * DNS resolution is enabled on the server
4000 * * the hostname used for the resolution by our server is the same than the
4001 * one used for the server found in the backend
4002 * * the server found in the backend is not our current server
4003 */
Christopher Faulet2a944ee2017-11-07 10:42:54 +01004004 HA_SPIN_LOCK(SERVER_LOCK, &tmpsrv->lock);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004005 if ((tmpsrv->hostname_dn == NULL) ||
4006 (srv->hostname_dn_len != tmpsrv->hostname_dn_len) ||
4007 (strcmp(srv->hostname_dn, tmpsrv->hostname_dn) != 0) ||
Emeric Brune9fd6b52017-11-02 17:20:39 +01004008 (srv->puid == tmpsrv->puid)) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01004009 HA_SPIN_UNLOCK(SERVER_LOCK, &tmpsrv->lock);
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02004010 continue;
Emeric Brune9fd6b52017-11-02 17:20:39 +01004011 }
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02004012
Olivier Houcharda8c6db82017-07-06 18:46:47 +02004013 /* If the server has been taken down, don't consider it */
Emeric Brune9fd6b52017-11-02 17:20:39 +01004014 if (tmpsrv->next_admin & SRV_ADMF_RMAINT) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01004015 HA_SPIN_UNLOCK(SERVER_LOCK, &tmpsrv->lock);
Olivier Houcharda8c6db82017-07-06 18:46:47 +02004016 continue;
Emeric Brune9fd6b52017-11-02 17:20:39 +01004017 }
Olivier Houcharda8c6db82017-07-06 18:46:47 +02004018
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02004019 /* At this point, we have 2 different servers using the same DNS hostname
4020 * for their respective resolution.
4021 */
4022 if (*ip_family == tmpsrv->addr.ss_family &&
4023 ((tmpsrv->addr.ss_family == AF_INET &&
4024 memcmp(ip, &((struct sockaddr_in *)&tmpsrv->addr)->sin_addr, 4) == 0) ||
4025 (tmpsrv->addr.ss_family == AF_INET6 &&
4026 memcmp(ip, &((struct sockaddr_in6 *)&tmpsrv->addr)->sin6_addr, 16) == 0))) {
Christopher Faulet2a944ee2017-11-07 10:42:54 +01004027 HA_SPIN_UNLOCK(SERVER_LOCK, &tmpsrv->lock);
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02004028 return tmpsrv;
4029 }
Christopher Faulet2a944ee2017-11-07 10:42:54 +01004030 HA_SPIN_UNLOCK(SERVER_LOCK, &tmpsrv->lock);
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02004031 }
4032
Emeric Brune9fd6b52017-11-02 17:20:39 +01004033
Baptiste Assmannfb7091e2017-05-03 15:43:12 +02004034 return NULL;
4035}
4036
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01004037/* Sets the server's address (srv->addr) from srv->hostname using the libc's
4038 * resolver. This is suited for initial address configuration. Returns 0 on
4039 * success otherwise a non-zero error code. In case of error, *err_code, if
4040 * not NULL, is filled up.
4041 */
4042int srv_set_addr_via_libc(struct server *srv, int *err_code)
4043{
4044 if (str2ip2(srv->hostname, &srv->addr, 1) == NULL) {
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01004045 if (err_code)
Willy Tarreau465b6e52016-11-07 19:19:22 +01004046 *err_code |= ERR_WARN;
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01004047 return 1;
4048 }
4049 return 0;
4050}
4051
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004052/* Set the server's FDQN (->hostname) from <hostname>.
4053 * Returns -1 if failed, 0 if not.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004054 *
4055 * Must be called with the server lock held.
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004056 */
Olivier Houchardd16bfe62017-10-31 15:21:19 +01004057int srv_set_fqdn(struct server *srv, const char *hostname, int dns_locked)
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004058{
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004059 struct dns_resolution *resolution;
Christopher Faulet67957bd2017-09-27 11:00:59 +02004060 char *hostname_dn;
4061 int hostname_len, hostname_dn_len;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004062
Frédéric Lécaille5afb3cf2018-08-21 15:04:23 +02004063 /* Note that the server lock is already held. */
4064 if (!srv->resolvers)
4065 return -1;
4066
Olivier Houchardd16bfe62017-10-31 15:21:19 +01004067 if (!dns_locked)
Christopher Faulet2a944ee2017-11-07 10:42:54 +01004068 HA_SPIN_LOCK(DNS_LOCK, &srv->resolvers->lock);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004069 /* run time DNS resolution was not active for this server
4070 * and we can't enable it at run time for now.
4071 */
4072 if (!srv->dns_requester)
Christopher Fauletb2812a62017-10-04 16:17:58 +02004073 goto err;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004074
4075 chunk_reset(&trash);
Christopher Faulet67957bd2017-09-27 11:00:59 +02004076 hostname_len = strlen(hostname);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004077 hostname_dn = trash.area;
Christopher Faulet67957bd2017-09-27 11:00:59 +02004078 hostname_dn_len = dns_str_to_dn_label(hostname, hostname_len + 1,
4079 hostname_dn, trash.size);
4080 if (hostname_dn_len == -1)
Christopher Fauletb2812a62017-10-04 16:17:58 +02004081 goto err;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004082
Christopher Faulet67957bd2017-09-27 11:00:59 +02004083 resolution = srv->dns_requester->resolution;
4084 if (resolution &&
4085 resolution->hostname_dn &&
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01004086 strcmp(resolution->hostname_dn, hostname_dn) == 0)
Christopher Fauletb2812a62017-10-04 16:17:58 +02004087 goto end;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004088
Christopher Faulet67957bd2017-09-27 11:00:59 +02004089 dns_unlink_resolution(srv->dns_requester);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004090
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004091 free(srv->hostname);
4092 free(srv->hostname_dn);
Christopher Faulet67957bd2017-09-27 11:00:59 +02004093 srv->hostname = strdup(hostname);
4094 srv->hostname_dn = strdup(hostname_dn);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004095 srv->hostname_dn_len = hostname_dn_len;
4096 if (!srv->hostname || !srv->hostname_dn)
Christopher Fauletb2812a62017-10-04 16:17:58 +02004097 goto err;
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004098
Baptiste Assmann13a92322019-06-07 09:40:55 +02004099 if (srv->flags & SRV_F_NO_RESOLUTION)
4100 goto end;
4101
Olivier Houchard55dcdf42017-11-06 15:15:04 +01004102 if (dns_link_resolution(srv, OBJ_TYPE_SERVER, 1) == -1)
Christopher Fauletb2812a62017-10-04 16:17:58 +02004103 goto err;
4104
4105 end:
Olivier Houchardd16bfe62017-10-31 15:21:19 +01004106 if (!dns_locked)
Christopher Faulet2a944ee2017-11-07 10:42:54 +01004107 HA_SPIN_UNLOCK(DNS_LOCK, &srv->resolvers->lock);
Baptiste Assmann201c07f2017-05-22 15:17:15 +02004108 return 0;
Christopher Fauletb2812a62017-10-04 16:17:58 +02004109
4110 err:
Olivier Houchardd16bfe62017-10-31 15:21:19 +01004111 if (!dns_locked)
Christopher Faulet2a944ee2017-11-07 10:42:54 +01004112 HA_SPIN_UNLOCK(DNS_LOCK, &srv->resolvers->lock);
Christopher Fauletb2812a62017-10-04 16:17:58 +02004113 return -1;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004114}
4115
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01004116/* Sets the server's address (srv->addr) from srv->lastaddr which was filled
4117 * from the state file. This is suited for initial address configuration.
4118 * Returns 0 on success otherwise a non-zero error code. In case of error,
4119 * *err_code, if not NULL, is filled up.
4120 */
4121static int srv_apply_lastaddr(struct server *srv, int *err_code)
4122{
4123 if (!str2ip2(srv->lastaddr, &srv->addr, 0)) {
4124 if (err_code)
4125 *err_code |= ERR_WARN;
4126 return 1;
4127 }
4128 return 0;
4129}
4130
Willy Tarreau25e51522016-11-04 15:10:17 +01004131/* returns 0 if no error, otherwise a combination of ERR_* flags */
4132static int srv_iterate_initaddr(struct server *srv)
4133{
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01004134 char *name = srv->hostname;
Willy Tarreau25e51522016-11-04 15:10:17 +01004135 int return_code = 0;
4136 int err_code;
4137 unsigned int methods;
4138
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01004139 /* If no addr and no hostname set, get the name from the DNS SRV request */
4140 if (!name && srv->srvrq)
4141 name = srv->srvrq->name;
4142
Willy Tarreau25e51522016-11-04 15:10:17 +01004143 methods = srv->init_addr_methods;
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01004144 if (!methods) {
4145 /* otherwise default to "last,libc" */
Willy Tarreau25e51522016-11-04 15:10:17 +01004146 srv_append_initaddr(&methods, SRV_IADDR_LAST);
4147 srv_append_initaddr(&methods, SRV_IADDR_LIBC);
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01004148 if (srv->resolvers_id) {
4149 /* dns resolution is configured, add "none" to not fail on startup */
4150 srv_append_initaddr(&methods, SRV_IADDR_NONE);
4151 }
Willy Tarreau25e51522016-11-04 15:10:17 +01004152 }
4153
Willy Tarreau3eed10e2016-11-07 21:03:16 +01004154 /* "-dr" : always append "none" so that server addresses resolution
4155 * failures are silently ignored, this is convenient to validate some
4156 * configs out of their environment.
4157 */
4158 if (global.tune.options & GTUNE_RESOLVE_DONTFAIL)
4159 srv_append_initaddr(&methods, SRV_IADDR_NONE);
4160
Willy Tarreau25e51522016-11-04 15:10:17 +01004161 while (methods) {
4162 err_code = 0;
4163 switch (srv_get_next_initaddr(&methods)) {
4164 case SRV_IADDR_LAST:
4165 if (!srv->lastaddr)
4166 continue;
4167 if (srv_apply_lastaddr(srv, &err_code) == 0)
Olivier Houchard4e694042017-03-14 20:01:29 +01004168 goto out;
Willy Tarreau25e51522016-11-04 15:10:17 +01004169 return_code |= err_code;
4170 break;
4171
4172 case SRV_IADDR_LIBC:
4173 if (!srv->hostname)
4174 continue;
4175 if (srv_set_addr_via_libc(srv, &err_code) == 0)
Olivier Houchard4e694042017-03-14 20:01:29 +01004176 goto out;
Willy Tarreau25e51522016-11-04 15:10:17 +01004177 return_code |= err_code;
4178 break;
4179
Willy Tarreau37ebe122016-11-04 15:17:58 +01004180 case SRV_IADDR_NONE:
4181 srv_set_admin_flag(srv, SRV_ADMF_RMAINT, NULL);
Willy Tarreau465b6e52016-11-07 19:19:22 +01004182 if (return_code) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01004183 ha_warning("parsing [%s:%d] : 'server %s' : could not resolve address '%s', disabling server.\n",
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01004184 srv->conf.file, srv->conf.line, srv->id, name);
Willy Tarreau465b6e52016-11-07 19:19:22 +01004185 }
Willy Tarreau37ebe122016-11-04 15:17:58 +01004186 return return_code;
4187
Willy Tarreau4310d362016-11-02 15:05:56 +01004188 case SRV_IADDR_IP:
4189 ipcpy(&srv->init_addr, &srv->addr);
4190 if (return_code) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01004191 ha_warning("parsing [%s:%d] : 'server %s' : could not resolve address '%s', falling back to configured address.\n",
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01004192 srv->conf.file, srv->conf.line, srv->id, name);
Willy Tarreau4310d362016-11-02 15:05:56 +01004193 }
Olivier Houchard4e694042017-03-14 20:01:29 +01004194 goto out;
Willy Tarreau4310d362016-11-02 15:05:56 +01004195
Willy Tarreau25e51522016-11-04 15:10:17 +01004196 default: /* unhandled method */
4197 break;
4198 }
4199 }
4200
4201 if (!return_code) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01004202 ha_alert("parsing [%s:%d] : 'server %s' : no method found to resolve address '%s'\n",
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01004203 srv->conf.file, srv->conf.line, srv->id, name);
Willy Tarreau25e51522016-11-04 15:10:17 +01004204 }
Willy Tarreau465b6e52016-11-07 19:19:22 +01004205 else {
Christopher Faulet767a84b2017-11-24 16:50:31 +01004206 ha_alert("parsing [%s:%d] : 'server %s' : could not resolve address '%s'.\n",
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01004207 srv->conf.file, srv->conf.line, srv->id, name);
Willy Tarreau465b6e52016-11-07 19:19:22 +01004208 }
Willy Tarreau25e51522016-11-04 15:10:17 +01004209
4210 return_code |= ERR_ALERT | ERR_FATAL;
4211 return return_code;
Olivier Houchard4e694042017-03-14 20:01:29 +01004212out:
4213 srv_set_dyncookie(srv);
Thayne McCombs92149f92020-11-20 01:28:26 -07004214 srv_set_addr_desc(srv);
Olivier Houchard4e694042017-03-14 20:01:29 +01004215 return return_code;
Willy Tarreau25e51522016-11-04 15:10:17 +01004216}
4217
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01004218/*
4219 * This function parses all backends and all servers within each backend
4220 * and performs servers' addr resolution based on information provided by:
4221 * - configuration file
4222 * - server-state file (states provided by an 'old' haproxy process)
4223 *
4224 * Returns 0 if no error, otherwise, a combination of ERR_ flags.
4225 */
4226int srv_init_addr(void)
4227{
4228 struct proxy *curproxy;
4229 int return_code = 0;
4230
Olivier Houchardfbc74e82017-11-24 16:54:05 +01004231 curproxy = proxies_list;
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01004232 while (curproxy) {
4233 struct server *srv;
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01004234
4235 /* servers are in backend only */
Amaury Denoyellee3c41922021-01-06 14:28:50 +01004236 if (!(curproxy->cap & PR_CAP_BE) || curproxy->disabled)
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01004237 goto srv_init_addr_next;
4238
Willy Tarreau25e51522016-11-04 15:10:17 +01004239 for (srv = curproxy->srv; srv; srv = srv->next)
Christopher Fauletac1c60fd2020-10-26 10:31:17 +01004240 if (srv->hostname || srv->srvrq)
Willy Tarreau3d609a72017-09-06 14:22:45 +02004241 return_code |= srv_iterate_initaddr(srv);
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01004242
4243 srv_init_addr_next:
4244 curproxy = curproxy->next;
4245 }
4246
4247 return return_code;
4248}
4249
Willy Tarreau46b7f532018-08-21 11:54:26 +02004250/*
4251 * Must be called with the server lock held.
4252 */
Olivier Houchardd16bfe62017-10-31 15:21:19 +01004253const char *update_server_fqdn(struct server *server, const char *fqdn, const char *updater, int dns_locked)
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004254{
4255
Willy Tarreau83061a82018-07-13 11:56:34 +02004256 struct buffer *msg;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004257
4258 msg = get_trash_chunk();
4259 chunk_reset(msg);
4260
Tim Duesterhuse5ff1412021-01-02 22:31:53 +01004261 if (server->hostname && strcmp(fqdn, server->hostname) == 0) {
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004262 chunk_appendf(msg, "no need to change the FDQN");
4263 goto out;
4264 }
4265
4266 if (strlen(fqdn) > DNS_MAX_NAME_SIZE || invalid_domainchar(fqdn)) {
4267 chunk_appendf(msg, "invalid fqdn '%s'", fqdn);
4268 goto out;
4269 }
4270
4271 chunk_appendf(msg, "%s/%s changed its FQDN from %s to %s",
4272 server->proxy->id, server->id, server->hostname, fqdn);
4273
Olivier Houchardd16bfe62017-10-31 15:21:19 +01004274 if (srv_set_fqdn(server, fqdn, dns_locked) < 0) {
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004275 chunk_reset(msg);
4276 chunk_appendf(msg, "could not update %s/%s FQDN",
4277 server->proxy->id, server->id);
4278 goto out;
4279 }
4280
4281 /* Flag as FQDN set from stats socket. */
Emeric Brun52a91d32017-08-31 14:41:55 +02004282 server->next_admin |= SRV_ADMF_HMAINT;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004283
4284 out:
4285 if (updater)
4286 chunk_appendf(msg, " by '%s'", updater);
4287 chunk_appendf(msg, "\n");
4288
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004289 return msg->area;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004290}
4291
4292
Willy Tarreau21b069d2016-11-23 17:15:08 +01004293/* Expects to find a backend and a server in <arg> under the form <backend>/<server>,
4294 * and returns the pointer to the server. Otherwise, display adequate error messages
Willy Tarreau3b6e5472016-11-24 15:53:53 +01004295 * on the CLI, sets the CLI's state to CLI_ST_PRINT and returns NULL. This is only
Willy Tarreau21b069d2016-11-23 17:15:08 +01004296 * used for CLI commands requiring a server name.
4297 * Important: the <arg> is modified to remove the '/'.
4298 */
4299struct server *cli_find_server(struct appctx *appctx, char *arg)
4300{
4301 struct proxy *px;
4302 struct server *sv;
4303 char *line;
4304
4305 /* split "backend/server" and make <line> point to server */
4306 for (line = arg; *line; line++)
4307 if (*line == '/') {
4308 *line++ = '\0';
4309 break;
4310 }
4311
4312 if (!*line || !*arg) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004313 cli_err(appctx, "Require 'backend/server'.\n");
Willy Tarreau21b069d2016-11-23 17:15:08 +01004314 return NULL;
4315 }
4316
4317 if (!get_backend_server(arg, line, &px, &sv)) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004318 cli_err(appctx, px ? "No such server.\n" : "No such backend.\n");
Willy Tarreau21b069d2016-11-23 17:15:08 +01004319 return NULL;
4320 }
4321
Willy Tarreauc3914d42020-09-24 08:39:22 +02004322 if (px->disabled) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004323 cli_err(appctx, "Proxy is disabled.\n");
Willy Tarreau21b069d2016-11-23 17:15:08 +01004324 return NULL;
4325 }
4326
4327 return sv;
4328}
4329
William Lallemand222baf22016-11-19 02:00:33 +01004330
Willy Tarreau46b7f532018-08-21 11:54:26 +02004331/* grabs the server lock */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004332static int cli_parse_set_server(char **args, char *payload, struct appctx *appctx, void *private)
William Lallemand222baf22016-11-19 02:00:33 +01004333{
4334 struct server *sv;
4335 const char *warning;
4336
4337 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4338 return 1;
4339
4340 sv = cli_find_server(appctx, args[2]);
4341 if (!sv)
4342 return 1;
4343
Christopher Faulet2a944ee2017-11-07 10:42:54 +01004344 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Emeric Brun9f0b4582017-10-23 14:39:51 +02004345
William Lallemand222baf22016-11-19 02:00:33 +01004346 if (strcmp(args[3], "weight") == 0) {
4347 warning = server_parse_weight_change_request(sv, args[4]);
Willy Tarreau9d008692019-08-09 11:21:01 +02004348 if (warning)
4349 cli_err(appctx, warning);
William Lallemand222baf22016-11-19 02:00:33 +01004350 }
4351 else if (strcmp(args[3], "state") == 0) {
4352 if (strcmp(args[4], "ready") == 0)
4353 srv_adm_set_ready(sv);
4354 else if (strcmp(args[4], "drain") == 0)
4355 srv_adm_set_drain(sv);
4356 else if (strcmp(args[4], "maint") == 0)
4357 srv_adm_set_maint(sv);
Willy Tarreau9d008692019-08-09 11:21:01 +02004358 else
4359 cli_err(appctx, "'set server <srv> state' expects 'ready', 'drain' and 'maint'.\n");
William Lallemand222baf22016-11-19 02:00:33 +01004360 }
4361 else if (strcmp(args[3], "health") == 0) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004362 if (sv->track)
4363 cli_err(appctx, "cannot change health on a tracking server.\n");
William Lallemand222baf22016-11-19 02:00:33 +01004364 else if (strcmp(args[4], "up") == 0) {
4365 sv->check.health = sv->check.rise + sv->check.fall - 1;
Emeric Brun5a133512017-10-19 14:42:30 +02004366 srv_set_running(sv, "changed from CLI", NULL);
William Lallemand222baf22016-11-19 02:00:33 +01004367 }
4368 else if (strcmp(args[4], "stopping") == 0) {
4369 sv->check.health = sv->check.rise + sv->check.fall - 1;
Emeric Brun5a133512017-10-19 14:42:30 +02004370 srv_set_stopping(sv, "changed from CLI", NULL);
William Lallemand222baf22016-11-19 02:00:33 +01004371 }
4372 else if (strcmp(args[4], "down") == 0) {
4373 sv->check.health = 0;
Emeric Brun5a133512017-10-19 14:42:30 +02004374 srv_set_stopped(sv, "changed from CLI", NULL);
William Lallemand222baf22016-11-19 02:00:33 +01004375 }
Willy Tarreau9d008692019-08-09 11:21:01 +02004376 else
4377 cli_err(appctx, "'set server <srv> health' expects 'up', 'stopping', or 'down'.\n");
William Lallemand222baf22016-11-19 02:00:33 +01004378 }
4379 else if (strcmp(args[3], "agent") == 0) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004380 if (!(sv->agent.state & CHK_ST_ENABLED))
4381 cli_err(appctx, "agent checks are not enabled on this server.\n");
William Lallemand222baf22016-11-19 02:00:33 +01004382 else if (strcmp(args[4], "up") == 0) {
4383 sv->agent.health = sv->agent.rise + sv->agent.fall - 1;
Emeric Brun5a133512017-10-19 14:42:30 +02004384 srv_set_running(sv, "changed from CLI", NULL);
William Lallemand222baf22016-11-19 02:00:33 +01004385 }
4386 else if (strcmp(args[4], "down") == 0) {
4387 sv->agent.health = 0;
Emeric Brun5a133512017-10-19 14:42:30 +02004388 srv_set_stopped(sv, "changed from CLI", NULL);
William Lallemand222baf22016-11-19 02:00:33 +01004389 }
Willy Tarreau9d008692019-08-09 11:21:01 +02004390 else
4391 cli_err(appctx, "'set server <srv> agent' expects 'up' or 'down'.\n");
William Lallemand222baf22016-11-19 02:00:33 +01004392 }
Misiek2da082d2017-01-09 09:40:42 +01004393 else if (strcmp(args[3], "agent-addr") == 0) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004394 if (!(sv->agent.state & CHK_ST_ENABLED))
4395 cli_err(appctx, "agent checks are not enabled on this server.\n");
4396 else if (str2ip(args[4], &sv->agent.addr) == NULL)
4397 cli_err(appctx, "incorrect addr address given for agent.\n");
Misiek2da082d2017-01-09 09:40:42 +01004398 }
4399 else if (strcmp(args[3], "agent-send") == 0) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004400 if (!(sv->agent.state & CHK_ST_ENABLED))
4401 cli_err(appctx, "agent checks are not enabled on this server.\n");
4402 else {
Christopher Faulet0ae3d1d2020-04-06 17:54:24 +02004403 if (!set_srv_agent_send(sv, args[4]))
Willy Tarreau9d008692019-08-09 11:21:01 +02004404 cli_err(appctx, "cannot allocate memory for new string.\n");
Misiek2da082d2017-01-09 09:40:42 +01004405 }
4406 }
William Lallemand222baf22016-11-19 02:00:33 +01004407 else if (strcmp(args[3], "check-port") == 0) {
4408 int i = 0;
4409 if (strl2irc(args[4], strlen(args[4]), &i) != 0) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004410 cli_err(appctx, "'set server <srv> check-port' expects an integer as argument.\n");
Willy Tarreau6ce38f32017-11-05 10:19:23 +01004411 goto out_unlock;
William Lallemand222baf22016-11-19 02:00:33 +01004412 }
4413 if ((i < 0) || (i > 65535)) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004414 cli_err(appctx, "provided port is not valid.\n");
Willy Tarreau6ce38f32017-11-05 10:19:23 +01004415 goto out_unlock;
William Lallemand222baf22016-11-19 02:00:33 +01004416 }
4417 /* prevent the update of port to 0 if MAPPORTS are in use */
4418 if ((sv->flags & SRV_F_MAPPORTS) && (i == 0)) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004419 cli_err(appctx, "can't unset 'port' since MAPPORTS is in use.\n");
Willy Tarreau6ce38f32017-11-05 10:19:23 +01004420 goto out_unlock;
William Lallemand222baf22016-11-19 02:00:33 +01004421 }
4422 sv->check.port = i;
Willy Tarreau9d008692019-08-09 11:21:01 +02004423 cli_msg(appctx, LOG_NOTICE, "health check port updated.\n");
William Lallemand222baf22016-11-19 02:00:33 +01004424 }
4425 else if (strcmp(args[3], "addr") == 0) {
4426 char *addr = NULL;
4427 char *port = NULL;
4428 if (strlen(args[4]) == 0) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004429 cli_err(appctx, "set server <b>/<s> addr requires an address and optionally a port.\n");
Willy Tarreau6ce38f32017-11-05 10:19:23 +01004430 goto out_unlock;
William Lallemand222baf22016-11-19 02:00:33 +01004431 }
4432 else {
4433 addr = args[4];
4434 }
4435 if (strcmp(args[5], "port") == 0) {
4436 port = args[6];
4437 }
4438 warning = update_server_addr_port(sv, addr, port, "stats socket command");
Willy Tarreau9d008692019-08-09 11:21:01 +02004439 if (warning)
4440 cli_msg(appctx, LOG_WARNING, warning);
William Lallemand222baf22016-11-19 02:00:33 +01004441 srv_clr_admin_flag(sv, SRV_ADMF_RMAINT);
4442 }
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004443 else if (strcmp(args[3], "fqdn") == 0) {
4444 if (!*args[4]) {
Willy Tarreau9d008692019-08-09 11:21:01 +02004445 cli_err(appctx, "set server <b>/<s> fqdn requires a FQDN.\n");
Willy Tarreau6ce38f32017-11-05 10:19:23 +01004446 goto out_unlock;
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004447 }
Baptiste Assmann13a92322019-06-07 09:40:55 +02004448 /* ensure runtime resolver will process this new fqdn */
4449 if (sv->flags & SRV_F_NO_RESOLUTION) {
4450 sv->flags &= ~SRV_F_NO_RESOLUTION;
4451 }
Olivier Houchardd16bfe62017-10-31 15:21:19 +01004452 warning = update_server_fqdn(sv, args[4], "stats socket command", 0);
Willy Tarreau9d008692019-08-09 11:21:01 +02004453 if (warning)
4454 cli_msg(appctx, LOG_WARNING, warning);
Frédéric Lécailleb418c122017-04-26 11:24:02 +02004455 }
William Dauchyf6370442020-11-14 19:25:33 +01004456 else if (strcmp(args[3], "ssl") == 0) {
4457#ifdef USE_OPENSSL
4458 if (sv->ssl_ctx.ctx == NULL) {
4459 cli_err(appctx, "'set server <srv> ssl' cannot be set. "
4460 " default-server should define ssl settings\n");
4461 goto out_unlock;
4462 } else if (strcmp(args[4], "on") == 0) {
4463 ssl_sock_set_srv(sv, 1);
4464 } else if (strcmp(args[4], "off") == 0) {
4465 ssl_sock_set_srv(sv, 0);
4466 } else {
4467 cli_err(appctx, "'set server <srv> ssl' expects 'on' or 'off'.\n");
4468 goto out_unlock;
4469 }
4470 srv_cleanup_connections(sv);
4471 cli_msg(appctx, LOG_NOTICE, "server ssl setting updated.\n");
4472#else
4473 cli_msg(appctx, LOG_NOTICE, "server ssl setting not supported.\n");
4474#endif
4475 } else {
Willy Tarreau9d008692019-08-09 11:21:01 +02004476 cli_err(appctx,
4477 "'set server <srv>' only supports 'agent', 'health', 'state',"
William Dauchyf6370442020-11-14 19:25:33 +01004478 " 'weight', 'addr', 'fqdn', 'check-port' and 'ssl'.\n");
William Lallemand222baf22016-11-19 02:00:33 +01004479 }
Willy Tarreau6ce38f32017-11-05 10:19:23 +01004480 out_unlock:
Christopher Faulet2a944ee2017-11-07 10:42:54 +01004481 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
William Lallemand222baf22016-11-19 02:00:33 +01004482 return 1;
4483}
4484
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004485static int cli_parse_get_weight(char **args, char *payload, struct appctx *appctx, void *private)
William Lallemand6b160942016-11-22 12:34:35 +01004486{
4487 struct stream_interface *si = appctx->owner;
4488 struct proxy *px;
4489 struct server *sv;
4490 char *line;
4491
4492
4493 /* split "backend/server" and make <line> point to server */
4494 for (line = args[2]; *line; line++)
4495 if (*line == '/') {
4496 *line++ = '\0';
4497 break;
4498 }
4499
Willy Tarreau9d008692019-08-09 11:21:01 +02004500 if (!*line)
4501 return cli_err(appctx, "Require 'backend/server'.\n");
William Lallemand6b160942016-11-22 12:34:35 +01004502
Willy Tarreau9d008692019-08-09 11:21:01 +02004503 if (!get_backend_server(args[2], line, &px, &sv))
4504 return cli_err(appctx, px ? "No such server.\n" : "No such backend.\n");
William Lallemand6b160942016-11-22 12:34:35 +01004505
4506 /* return server's effective weight at the moment */
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004507 snprintf(trash.area, trash.size, "%d (initial %d)\n", sv->uweight,
4508 sv->iweight);
4509 if (ci_putstr(si_ic(si), trash.area) == -1) {
Willy Tarreaudb398432018-11-15 11:08:52 +01004510 si_rx_room_blk(si);
Christopher Faulet90b5abe2016-12-05 14:25:08 +01004511 return 0;
4512 }
William Lallemand6b160942016-11-22 12:34:35 +01004513 return 1;
4514}
4515
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004516/* Parse a "set weight" command.
4517 *
4518 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004519 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004520static int cli_parse_set_weight(char **args, char *payload, struct appctx *appctx, void *private)
William Lallemand6b160942016-11-22 12:34:35 +01004521{
4522 struct server *sv;
4523 const char *warning;
4524
4525 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4526 return 1;
4527
4528 sv = cli_find_server(appctx, args[2]);
4529 if (!sv)
4530 return 1;
4531
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004532 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
4533
William Lallemand6b160942016-11-22 12:34:35 +01004534 warning = server_parse_weight_change_request(sv, args[3]);
Willy Tarreau9d008692019-08-09 11:21:01 +02004535 if (warning)
4536 cli_err(appctx, warning);
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004537
4538 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
4539
William Lallemand6b160942016-11-22 12:34:35 +01004540 return 1;
4541}
4542
Willy Tarreau46b7f532018-08-21 11:54:26 +02004543/* parse a "set maxconn server" command. It always returns 1.
4544 *
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004545 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004546 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004547static int cli_parse_set_maxconn_server(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreaub8026272016-11-23 11:26:56 +01004548{
4549 struct server *sv;
4550 const char *warning;
4551
4552 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4553 return 1;
4554
4555 sv = cli_find_server(appctx, args[3]);
4556 if (!sv)
4557 return 1;
4558
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004559 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
4560
Willy Tarreaub8026272016-11-23 11:26:56 +01004561 warning = server_parse_maxconn_change_request(sv, args[4]);
Willy Tarreau9d008692019-08-09 11:21:01 +02004562 if (warning)
4563 cli_err(appctx, warning);
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004564
4565 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
4566
Willy Tarreaub8026272016-11-23 11:26:56 +01004567 return 1;
4568}
William Lallemand6b160942016-11-22 12:34:35 +01004569
Willy Tarreau46b7f532018-08-21 11:54:26 +02004570/* parse a "disable agent" command. It always returns 1.
4571 *
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004572 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004573 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004574static int cli_parse_disable_agent(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004575{
4576 struct server *sv;
4577
4578 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4579 return 1;
4580
4581 sv = cli_find_server(appctx, args[2]);
4582 if (!sv)
4583 return 1;
4584
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004585 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004586 sv->agent.state &= ~CHK_ST_ENABLED;
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004587 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004588 return 1;
4589}
4590
Willy Tarreau46b7f532018-08-21 11:54:26 +02004591/* parse a "disable health" command. It always returns 1.
4592 *
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004593 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004594 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004595static int cli_parse_disable_health(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004596{
4597 struct server *sv;
4598
4599 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4600 return 1;
4601
4602 sv = cli_find_server(appctx, args[2]);
4603 if (!sv)
4604 return 1;
4605
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004606 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004607 sv->check.state &= ~CHK_ST_ENABLED;
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004608 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004609 return 1;
4610}
4611
Willy Tarreau46b7f532018-08-21 11:54:26 +02004612/* parse a "disable server" command. It always returns 1.
4613 *
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004614 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004615 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004616static int cli_parse_disable_server(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreauffb4d582016-11-24 12:47:00 +01004617{
4618 struct server *sv;
4619
4620 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4621 return 1;
4622
4623 sv = cli_find_server(appctx, args[2]);
4624 if (!sv)
4625 return 1;
4626
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004627 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Willy Tarreauffb4d582016-11-24 12:47:00 +01004628 srv_adm_set_maint(sv);
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004629 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
Willy Tarreauffb4d582016-11-24 12:47:00 +01004630 return 1;
4631}
4632
Willy Tarreau46b7f532018-08-21 11:54:26 +02004633/* parse a "enable agent" command. It always returns 1.
4634 *
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004635 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004636 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004637static int cli_parse_enable_agent(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004638{
4639 struct server *sv;
4640
4641 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4642 return 1;
4643
4644 sv = cli_find_server(appctx, args[2]);
4645 if (!sv)
4646 return 1;
4647
Willy Tarreau9d008692019-08-09 11:21:01 +02004648 if (!(sv->agent.state & CHK_ST_CONFIGURED))
4649 return cli_err(appctx, "Agent was not configured on this server, cannot enable.\n");
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004650
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004651 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004652 sv->agent.state |= CHK_ST_ENABLED;
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004653 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004654 return 1;
4655}
4656
Willy Tarreau46b7f532018-08-21 11:54:26 +02004657/* parse a "enable health" command. It always returns 1.
4658 *
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004659 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004660 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004661static int cli_parse_enable_health(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004662{
4663 struct server *sv;
4664
4665 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4666 return 1;
4667
4668 sv = cli_find_server(appctx, args[2]);
4669 if (!sv)
4670 return 1;
4671
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004672 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004673 sv->check.state |= CHK_ST_ENABLED;
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004674 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004675 return 1;
4676}
4677
Willy Tarreau46b7f532018-08-21 11:54:26 +02004678/* parse a "enable server" command. It always returns 1.
4679 *
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004680 * Grabs the server lock.
Willy Tarreau46b7f532018-08-21 11:54:26 +02004681 */
Aurélien Nephtaliabbf6072018-04-18 13:26:46 +02004682static int cli_parse_enable_server(char **args, char *payload, struct appctx *appctx, void *private)
Willy Tarreauffb4d582016-11-24 12:47:00 +01004683{
4684 struct server *sv;
4685
4686 if (!cli_has_level(appctx, ACCESS_LVL_ADMIN))
4687 return 1;
4688
4689 sv = cli_find_server(appctx, args[2]);
4690 if (!sv)
4691 return 1;
4692
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004693 HA_SPIN_LOCK(SERVER_LOCK, &sv->lock);
Willy Tarreauffb4d582016-11-24 12:47:00 +01004694 srv_adm_set_ready(sv);
Olivier Houcharde9bad0a2018-01-17 17:39:34 +01004695 if (!(sv->flags & SRV_F_COOKIESET)
4696 && (sv->proxy->ck_opts & PR_CK_DYNAMIC) &&
4697 sv->cookie)
4698 srv_check_for_dup_dyncookie(sv);
Willy Tarreau3bcc2692018-08-21 15:35:31 +02004699 HA_SPIN_UNLOCK(SERVER_LOCK, &sv->lock);
Willy Tarreauffb4d582016-11-24 12:47:00 +01004700 return 1;
4701}
4702
William Lallemand222baf22016-11-19 02:00:33 +01004703/* register cli keywords */
4704static struct cli_kw_list cli_kws = {{ },{
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004705 { { "disable", "agent", NULL }, "disable agent : disable agent checks (use 'set server' instead)", cli_parse_disable_agent, NULL },
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004706 { { "disable", "health", NULL }, "disable health : disable health checks (use 'set server' instead)", cli_parse_disable_health, NULL },
Willy Tarreauffb4d582016-11-24 12:47:00 +01004707 { { "disable", "server", NULL }, "disable server : disable a server for maintenance (use 'set server' instead)", cli_parse_disable_server, NULL },
Willy Tarreau58d9cb72016-11-24 12:56:01 +01004708 { { "enable", "agent", NULL }, "enable agent : enable agent checks (use 'set server' instead)", cli_parse_enable_agent, NULL },
Willy Tarreau2c04eda2016-11-24 12:51:04 +01004709 { { "enable", "health", NULL }, "enable health : enable health checks (use 'set server' instead)", cli_parse_enable_health, NULL },
Willy Tarreauffb4d582016-11-24 12:47:00 +01004710 { { "enable", "server", NULL }, "enable server : enable a disabled server (use 'set server' instead)", cli_parse_enable_server, NULL },
Willy Tarreaub8026272016-11-23 11:26:56 +01004711 { { "set", "maxconn", "server", NULL }, "set maxconn server : change a server's maxconn setting", cli_parse_set_maxconn_server, NULL },
William Dauchyf6370442020-11-14 19:25:33 +01004712 { { "set", "server", NULL }, "set server : change a server's state, weight, address or ssl", cli_parse_set_server },
William Lallemand6b160942016-11-22 12:34:35 +01004713 { { "get", "weight", NULL }, "get weight : report a server's current weight", cli_parse_get_weight },
4714 { { "set", "weight", NULL }, "set weight : change a server's weight (deprecated)", cli_parse_set_weight },
4715
William Lallemand222baf22016-11-19 02:00:33 +01004716 {{},}
4717}};
4718
Willy Tarreau0108d902018-11-25 19:14:37 +01004719INITCALL1(STG_REGISTER, cli_register_kw, &cli_kws);
Baptiste Assmann83cbaa52016-11-02 15:34:05 +01004720
Emeric Brun64cc49c2017-10-03 14:46:45 +02004721/*
4722 * This function applies server's status changes, it is
4723 * is designed to be called asynchronously.
4724 *
Willy Tarreau1e690bb2020-10-22 11:30:59 +02004725 * Must be called with the server lock held. This may also be called at init
4726 * time as the result of parsing the state file, in which case no lock will be
4727 * held, and the server's warmup task can be null.
Emeric Brun64cc49c2017-10-03 14:46:45 +02004728 */
Willy Tarreau3ff577e2018-08-02 11:48:52 +02004729static void srv_update_status(struct server *s)
Emeric Brun64cc49c2017-10-03 14:46:45 +02004730{
4731 struct check *check = &s->check;
4732 int xferred;
4733 struct proxy *px = s->proxy;
4734 int prev_srv_count = s->proxy->srv_bck + s->proxy->srv_act;
4735 int srv_was_stopping = (s->cur_state == SRV_ST_STOPPING) || (s->cur_admin & SRV_ADMF_DRAIN);
4736 int log_level;
Willy Tarreau83061a82018-07-13 11:56:34 +02004737 struct buffer *tmptrash = NULL;
Emeric Brun64cc49c2017-10-03 14:46:45 +02004738
Emeric Brun64cc49c2017-10-03 14:46:45 +02004739 /* If currently main is not set we try to apply pending state changes */
4740 if (!(s->cur_admin & SRV_ADMF_MAINT)) {
4741 int next_admin;
4742
4743 /* Backup next admin */
4744 next_admin = s->next_admin;
4745
4746 /* restore current admin state */
4747 s->next_admin = s->cur_admin;
4748
4749 if ((s->cur_state != SRV_ST_STOPPED) && (s->next_state == SRV_ST_STOPPED)) {
4750 s->last_change = now.tv_sec;
4751 if (s->proxy->lbprm.set_server_status_down)
4752 s->proxy->lbprm.set_server_status_down(s);
4753
4754 if (s->onmarkeddown & HANA_ONMARKEDDOWN_SHUTDOWNSESSIONS)
4755 srv_shutdown_streams(s, SF_ERR_DOWN);
4756
4757 /* we might have streams queued on this server and waiting for
4758 * a connection. Those which are redispatchable will be queued
4759 * to another server or to the proxy itself.
4760 */
4761 xferred = pendconn_redistribute(s);
4762
4763 tmptrash = alloc_trash_chunk();
4764 if (tmptrash) {
4765 chunk_printf(tmptrash,
4766 "%sServer %s/%s is DOWN", s->flags & SRV_F_BACKUP ? "Backup " : "",
4767 s->proxy->id, s->id);
4768
Emeric Brun5a133512017-10-19 14:42:30 +02004769 srv_append_status(tmptrash, s, NULL, xferred, 0);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004770 ha_warning("%s.\n", tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004771
4772 /* we don't send an alert if the server was previously paused */
4773 log_level = srv_was_stopping ? LOG_NOTICE : LOG_ALERT;
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004774 send_log(s->proxy, log_level, "%s.\n",
4775 tmptrash->area);
4776 send_email_alert(s, log_level, "%s",
4777 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004778 free_trash_chunk(tmptrash);
4779 tmptrash = NULL;
4780 }
4781 if (prev_srv_count && s->proxy->srv_bck == 0 && s->proxy->srv_act == 0)
4782 set_backend_down(s->proxy);
4783
4784 s->counters.down_trans++;
4785 }
4786 else if ((s->cur_state != SRV_ST_STOPPING) && (s->next_state == SRV_ST_STOPPING)) {
4787 s->last_change = now.tv_sec;
4788 if (s->proxy->lbprm.set_server_status_down)
4789 s->proxy->lbprm.set_server_status_down(s);
4790
4791 /* we might have streams queued on this server and waiting for
4792 * a connection. Those which are redispatchable will be queued
4793 * to another server or to the proxy itself.
4794 */
4795 xferred = pendconn_redistribute(s);
4796
4797 tmptrash = alloc_trash_chunk();
4798 if (tmptrash) {
4799 chunk_printf(tmptrash,
4800 "%sServer %s/%s is stopping", s->flags & SRV_F_BACKUP ? "Backup " : "",
4801 s->proxy->id, s->id);
4802
Emeric Brun5a133512017-10-19 14:42:30 +02004803 srv_append_status(tmptrash, s, NULL, xferred, 0);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004804
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004805 ha_warning("%s.\n", tmptrash->area);
4806 send_log(s->proxy, LOG_NOTICE, "%s.\n",
4807 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004808 free_trash_chunk(tmptrash);
4809 tmptrash = NULL;
4810 }
4811
4812 if (prev_srv_count && s->proxy->srv_bck == 0 && s->proxy->srv_act == 0)
4813 set_backend_down(s->proxy);
4814 }
4815 else if (((s->cur_state != SRV_ST_RUNNING) && (s->next_state == SRV_ST_RUNNING))
4816 || ((s->cur_state != SRV_ST_STARTING) && (s->next_state == SRV_ST_STARTING))) {
4817 if (s->proxy->srv_bck == 0 && s->proxy->srv_act == 0) {
4818 if (s->proxy->last_change < now.tv_sec) // ignore negative times
4819 s->proxy->down_time += now.tv_sec - s->proxy->last_change;
4820 s->proxy->last_change = now.tv_sec;
4821 }
4822
Amaury Denoyellefe2bf092020-10-29 15:59:04 +01004823 if (s->cur_state == SRV_ST_STOPPED && s->last_change < now.tv_sec) // ignore negative times
Emeric Brun64cc49c2017-10-03 14:46:45 +02004824 s->down_time += now.tv_sec - s->last_change;
4825
4826 s->last_change = now.tv_sec;
Willy Tarreau1e690bb2020-10-22 11:30:59 +02004827 if (s->next_state == SRV_ST_STARTING && s->warmup)
Emeric Brun64cc49c2017-10-03 14:46:45 +02004828 task_schedule(s->warmup, tick_add(now_ms, MS_TO_TICKS(MAX(1000, s->slowstart / 20))));
4829
Willy Tarreau3ff577e2018-08-02 11:48:52 +02004830 server_recalc_eweight(s, 0);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004831 /* now propagate the status change to any LB algorithms */
4832 if (px->lbprm.update_server_eweight)
4833 px->lbprm.update_server_eweight(s);
4834 else if (srv_willbe_usable(s)) {
4835 if (px->lbprm.set_server_status_up)
4836 px->lbprm.set_server_status_up(s);
4837 }
4838 else {
4839 if (px->lbprm.set_server_status_down)
4840 px->lbprm.set_server_status_down(s);
4841 }
4842
4843 /* If the server is set with "on-marked-up shutdown-backup-sessions",
4844 * and it's not a backup server and its effective weight is > 0,
4845 * then it can accept new connections, so we shut down all streams
4846 * on all backup servers.
4847 */
4848 if ((s->onmarkedup & HANA_ONMARKEDUP_SHUTDOWNBACKUPSESSIONS) &&
4849 !(s->flags & SRV_F_BACKUP) && s->next_eweight)
4850 srv_shutdown_backup_streams(s->proxy, SF_ERR_UP);
4851
4852 /* check if we can handle some connections queued at the proxy. We
4853 * will take as many as we can handle.
4854 */
4855 xferred = pendconn_grab_from_px(s);
4856
4857 tmptrash = alloc_trash_chunk();
4858 if (tmptrash) {
4859 chunk_printf(tmptrash,
4860 "%sServer %s/%s is UP", s->flags & SRV_F_BACKUP ? "Backup " : "",
4861 s->proxy->id, s->id);
4862
Emeric Brun5a133512017-10-19 14:42:30 +02004863 srv_append_status(tmptrash, s, NULL, xferred, 0);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004864 ha_warning("%s.\n", tmptrash->area);
4865 send_log(s->proxy, LOG_NOTICE, "%s.\n",
4866 tmptrash->area);
4867 send_email_alert(s, LOG_NOTICE, "%s",
4868 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004869 free_trash_chunk(tmptrash);
4870 tmptrash = NULL;
4871 }
4872
4873 if (prev_srv_count && s->proxy->srv_bck == 0 && s->proxy->srv_act == 0)
4874 set_backend_down(s->proxy);
4875 }
4876 else if (s->cur_eweight != s->next_eweight) {
4877 /* now propagate the status change to any LB algorithms */
4878 if (px->lbprm.update_server_eweight)
4879 px->lbprm.update_server_eweight(s);
4880 else if (srv_willbe_usable(s)) {
4881 if (px->lbprm.set_server_status_up)
4882 px->lbprm.set_server_status_up(s);
4883 }
4884 else {
4885 if (px->lbprm.set_server_status_down)
4886 px->lbprm.set_server_status_down(s);
4887 }
4888
4889 if (prev_srv_count && s->proxy->srv_bck == 0 && s->proxy->srv_act == 0)
4890 set_backend_down(s->proxy);
4891 }
4892
4893 s->next_admin = next_admin;
4894 }
4895
Emeric Brun5a133512017-10-19 14:42:30 +02004896 /* reset operational state change */
4897 *s->op_st_chg.reason = 0;
4898 s->op_st_chg.status = s->op_st_chg.code = -1;
4899 s->op_st_chg.duration = 0;
Emeric Brun64cc49c2017-10-03 14:46:45 +02004900
4901 /* Now we try to apply pending admin changes */
4902
4903 /* Maintenance must also disable health checks */
4904 if (!(s->cur_admin & SRV_ADMF_MAINT) && (s->next_admin & SRV_ADMF_MAINT)) {
4905 if (s->check.state & CHK_ST_ENABLED) {
4906 s->check.state |= CHK_ST_PAUSED;
4907 check->health = 0;
4908 }
4909
4910 if (s->cur_state == SRV_ST_STOPPED) { /* server was already down */
Olivier Houchard796a2b32017-10-24 17:42:47 +02004911 tmptrash = alloc_trash_chunk();
4912 if (tmptrash) {
4913 chunk_printf(tmptrash,
4914 "%sServer %s/%s was DOWN and now enters maintenance%s%s%s",
4915 s->flags & SRV_F_BACKUP ? "Backup " : "", s->proxy->id, s->id,
4916 *(s->adm_st_chg_cause) ? " (" : "", s->adm_st_chg_cause, *(s->adm_st_chg_cause) ? ")" : "");
Emeric Brun64cc49c2017-10-03 14:46:45 +02004917
Olivier Houchard796a2b32017-10-24 17:42:47 +02004918 srv_append_status(tmptrash, s, NULL, -1, (s->next_admin & SRV_ADMF_FMAINT));
Emeric Brun64cc49c2017-10-03 14:46:45 +02004919
Olivier Houchard796a2b32017-10-24 17:42:47 +02004920 if (!(global.mode & MODE_STARTING)) {
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004921 ha_warning("%s.\n", tmptrash->area);
4922 send_log(s->proxy, LOG_NOTICE, "%s.\n",
4923 tmptrash->area);
Olivier Houchard796a2b32017-10-24 17:42:47 +02004924 }
4925 free_trash_chunk(tmptrash);
4926 tmptrash = NULL;
Emeric Brun64cc49c2017-10-03 14:46:45 +02004927 }
Emeric Brun8f298292017-12-06 16:47:17 +01004928 /* commit new admin status */
4929
4930 s->cur_admin = s->next_admin;
Emeric Brun64cc49c2017-10-03 14:46:45 +02004931 }
4932 else { /* server was still running */
4933 check->health = 0; /* failure */
4934 s->last_change = now.tv_sec;
Emeric Brune3114802017-12-21 14:42:26 +01004935
4936 s->next_state = SRV_ST_STOPPED;
Emeric Brun64cc49c2017-10-03 14:46:45 +02004937 if (s->proxy->lbprm.set_server_status_down)
4938 s->proxy->lbprm.set_server_status_down(s);
4939
Emeric Brun64cc49c2017-10-03 14:46:45 +02004940 if (s->onmarkeddown & HANA_ONMARKEDDOWN_SHUTDOWNSESSIONS)
4941 srv_shutdown_streams(s, SF_ERR_DOWN);
4942
William Dauchy6318d332020-05-02 21:52:36 +02004943 /* force connection cleanup on the given server */
4944 srv_cleanup_connections(s);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004945 /* we might have streams queued on this server and waiting for
4946 * a connection. Those which are redispatchable will be queued
4947 * to another server or to the proxy itself.
4948 */
4949 xferred = pendconn_redistribute(s);
4950
4951 tmptrash = alloc_trash_chunk();
4952 if (tmptrash) {
4953 chunk_printf(tmptrash,
4954 "%sServer %s/%s is going DOWN for maintenance%s%s%s",
4955 s->flags & SRV_F_BACKUP ? "Backup " : "",
4956 s->proxy->id, s->id,
4957 *(s->adm_st_chg_cause) ? " (" : "", s->adm_st_chg_cause, *(s->adm_st_chg_cause) ? ")" : "");
4958
4959 srv_append_status(tmptrash, s, NULL, xferred, (s->next_admin & SRV_ADMF_FMAINT));
4960
4961 if (!(global.mode & MODE_STARTING)) {
Willy Tarreau843b7cb2018-07-13 10:54:26 +02004962 ha_warning("%s.\n", tmptrash->area);
4963 send_log(s->proxy, srv_was_stopping ? LOG_NOTICE : LOG_ALERT, "%s.\n",
4964 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02004965 }
4966 free_trash_chunk(tmptrash);
4967 tmptrash = NULL;
4968 }
4969 if (prev_srv_count && s->proxy->srv_bck == 0 && s->proxy->srv_act == 0)
4970 set_backend_down(s->proxy);
4971
4972 s->counters.down_trans++;
4973 }
4974 }
4975 else if ((s->cur_admin & SRV_ADMF_MAINT) && !(s->next_admin & SRV_ADMF_MAINT)) {
4976 /* OK here we're leaving maintenance, we have many things to check,
4977 * because the server might possibly be coming back up depending on
4978 * its state. In practice, leaving maintenance means that we should
4979 * immediately turn to UP (more or less the slowstart) under the
4980 * following conditions :
4981 * - server is neither checked nor tracked
4982 * - server tracks another server which is not checked
4983 * - server tracks another server which is already up
4984 * Which sums up as something simpler :
4985 * "either the tracking server is up or the server's checks are disabled
4986 * or up". Otherwise we only re-enable health checks. There's a special
4987 * case associated to the stopping state which can be inherited. Note
4988 * that the server might still be in drain mode, which is naturally dealt
4989 * with by the lower level functions.
4990 */
4991
4992 if (s->check.state & CHK_ST_ENABLED) {
4993 s->check.state &= ~CHK_ST_PAUSED;
4994 check->health = check->rise; /* start OK but check immediately */
4995 }
4996
4997 if ((!s->track || s->track->next_state != SRV_ST_STOPPED) &&
4998 (!(s->agent.state & CHK_ST_ENABLED) || (s->agent.health >= s->agent.rise)) &&
4999 (!(s->check.state & CHK_ST_ENABLED) || (s->check.health >= s->check.rise))) {
5000 if (s->track && s->track->next_state == SRV_ST_STOPPING) {
5001 s->next_state = SRV_ST_STOPPING;
5002 }
5003 else {
5004 s->next_state = SRV_ST_STARTING;
Willy Tarreau1e690bb2020-10-22 11:30:59 +02005005 if (s->slowstart > 0) {
5006 if (s->warmup)
5007 task_schedule(s->warmup, tick_add(now_ms, MS_TO_TICKS(MAX(1000, s->slowstart / 20))));
5008 }
Emeric Brun64cc49c2017-10-03 14:46:45 +02005009 else
5010 s->next_state = SRV_ST_RUNNING;
5011 }
5012
5013 }
5014
5015 tmptrash = alloc_trash_chunk();
5016 if (tmptrash) {
5017 if (!(s->next_admin & SRV_ADMF_FMAINT) && (s->cur_admin & SRV_ADMF_FMAINT)) {
5018 chunk_printf(tmptrash,
5019 "%sServer %s/%s is %s/%s (leaving forced maintenance)",
5020 s->flags & SRV_F_BACKUP ? "Backup " : "",
5021 s->proxy->id, s->id,
5022 (s->next_state == SRV_ST_STOPPED) ? "DOWN" : "UP",
5023 (s->next_admin & SRV_ADMF_DRAIN) ? "DRAIN" : "READY");
5024 }
5025 if (!(s->next_admin & SRV_ADMF_RMAINT) && (s->cur_admin & SRV_ADMF_RMAINT)) {
5026 chunk_printf(tmptrash,
5027 "%sServer %s/%s ('%s') is %s/%s (resolves again)",
5028 s->flags & SRV_F_BACKUP ? "Backup " : "",
5029 s->proxy->id, s->id, s->hostname,
5030 (s->next_state == SRV_ST_STOPPED) ? "DOWN" : "UP",
5031 (s->next_admin & SRV_ADMF_DRAIN) ? "DRAIN" : "READY");
5032 }
5033 if (!(s->next_admin & SRV_ADMF_IMAINT) && (s->cur_admin & SRV_ADMF_IMAINT)) {
5034 chunk_printf(tmptrash,
5035 "%sServer %s/%s is %s/%s (leaving maintenance)",
5036 s->flags & SRV_F_BACKUP ? "Backup " : "",
5037 s->proxy->id, s->id,
5038 (s->next_state == SRV_ST_STOPPED) ? "DOWN" : "UP",
5039 (s->next_admin & SRV_ADMF_DRAIN) ? "DRAIN" : "READY");
5040 }
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005041 ha_warning("%s.\n", tmptrash->area);
5042 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5043 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005044 free_trash_chunk(tmptrash);
5045 tmptrash = NULL;
5046 }
5047
Willy Tarreau3ff577e2018-08-02 11:48:52 +02005048 server_recalc_eweight(s, 0);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005049 /* now propagate the status change to any LB algorithms */
5050 if (px->lbprm.update_server_eweight)
5051 px->lbprm.update_server_eweight(s);
5052 else if (srv_willbe_usable(s)) {
5053 if (px->lbprm.set_server_status_up)
5054 px->lbprm.set_server_status_up(s);
5055 }
5056 else {
5057 if (px->lbprm.set_server_status_down)
5058 px->lbprm.set_server_status_down(s);
5059 }
5060
5061 if (prev_srv_count && s->proxy->srv_bck == 0 && s->proxy->srv_act == 0)
5062 set_backend_down(s->proxy);
5063
Willy Tarreau6a78e612018-08-07 10:14:53 +02005064 /* If the server is set with "on-marked-up shutdown-backup-sessions",
5065 * and it's not a backup server and its effective weight is > 0,
5066 * then it can accept new connections, so we shut down all streams
5067 * on all backup servers.
5068 */
5069 if ((s->onmarkedup & HANA_ONMARKEDUP_SHUTDOWNBACKUPSESSIONS) &&
5070 !(s->flags & SRV_F_BACKUP) && s->next_eweight)
5071 srv_shutdown_backup_streams(s->proxy, SF_ERR_UP);
5072
5073 /* check if we can handle some connections queued at the proxy. We
5074 * will take as many as we can handle.
5075 */
5076 xferred = pendconn_grab_from_px(s);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005077 }
5078 else if (s->next_admin & SRV_ADMF_MAINT) {
5079 /* remaining in maintenance mode, let's inform precisely about the
5080 * situation.
5081 */
5082 if (!(s->next_admin & SRV_ADMF_FMAINT) && (s->cur_admin & SRV_ADMF_FMAINT)) {
5083 tmptrash = alloc_trash_chunk();
5084 if (tmptrash) {
5085 chunk_printf(tmptrash,
5086 "%sServer %s/%s is leaving forced maintenance but remains in maintenance",
5087 s->flags & SRV_F_BACKUP ? "Backup " : "",
5088 s->proxy->id, s->id);
5089
5090 if (s->track) /* normally it's mandatory here */
5091 chunk_appendf(tmptrash, " via %s/%s",
5092 s->track->proxy->id, s->track->id);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005093 ha_warning("%s.\n", tmptrash->area);
5094 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5095 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005096 free_trash_chunk(tmptrash);
5097 tmptrash = NULL;
5098 }
5099 }
5100 if (!(s->next_admin & SRV_ADMF_RMAINT) && (s->cur_admin & SRV_ADMF_RMAINT)) {
5101 tmptrash = alloc_trash_chunk();
5102 if (tmptrash) {
5103 chunk_printf(tmptrash,
5104 "%sServer %s/%s ('%s') resolves again but remains in maintenance",
5105 s->flags & SRV_F_BACKUP ? "Backup " : "",
5106 s->proxy->id, s->id, s->hostname);
5107
5108 if (s->track) /* normally it's mandatory here */
5109 chunk_appendf(tmptrash, " via %s/%s",
5110 s->track->proxy->id, s->track->id);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005111 ha_warning("%s.\n", tmptrash->area);
5112 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5113 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005114 free_trash_chunk(tmptrash);
5115 tmptrash = NULL;
5116 }
5117 }
5118 else if (!(s->next_admin & SRV_ADMF_IMAINT) && (s->cur_admin & SRV_ADMF_IMAINT)) {
5119 tmptrash = alloc_trash_chunk();
5120 if (tmptrash) {
5121 chunk_printf(tmptrash,
5122 "%sServer %s/%s remains in forced maintenance",
5123 s->flags & SRV_F_BACKUP ? "Backup " : "",
5124 s->proxy->id, s->id);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005125 ha_warning("%s.\n", tmptrash->area);
5126 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5127 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005128 free_trash_chunk(tmptrash);
5129 tmptrash = NULL;
5130 }
5131 }
5132 /* don't report anything when leaving drain mode and remaining in maintenance */
5133
5134 s->cur_admin = s->next_admin;
5135 }
5136
5137 if (!(s->next_admin & SRV_ADMF_MAINT)) {
5138 if (!(s->cur_admin & SRV_ADMF_DRAIN) && (s->next_admin & SRV_ADMF_DRAIN)) {
5139 /* drain state is applied only if not yet in maint */
5140
5141 s->last_change = now.tv_sec;
5142 if (px->lbprm.set_server_status_down)
5143 px->lbprm.set_server_status_down(s);
5144
5145 /* we might have streams queued on this server and waiting for
5146 * a connection. Those which are redispatchable will be queued
5147 * to another server or to the proxy itself.
5148 */
5149 xferred = pendconn_redistribute(s);
5150
5151 tmptrash = alloc_trash_chunk();
5152 if (tmptrash) {
5153 chunk_printf(tmptrash, "%sServer %s/%s enters drain state%s%s%s",
5154 s->flags & SRV_F_BACKUP ? "Backup " : "", s->proxy->id, s->id,
5155 *(s->adm_st_chg_cause) ? " (" : "", s->adm_st_chg_cause, *(s->adm_st_chg_cause) ? ")" : "");
5156
5157 srv_append_status(tmptrash, s, NULL, xferred, (s->next_admin & SRV_ADMF_FDRAIN));
5158
5159 if (!(global.mode & MODE_STARTING)) {
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005160 ha_warning("%s.\n", tmptrash->area);
5161 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5162 tmptrash->area);
5163 send_email_alert(s, LOG_NOTICE, "%s",
5164 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005165 }
5166 free_trash_chunk(tmptrash);
5167 tmptrash = NULL;
5168 }
5169
5170 if (prev_srv_count && s->proxy->srv_bck == 0 && s->proxy->srv_act == 0)
5171 set_backend_down(s->proxy);
5172 }
5173 else if ((s->cur_admin & SRV_ADMF_DRAIN) && !(s->next_admin & SRV_ADMF_DRAIN)) {
5174 /* OK completely leaving drain mode */
5175 if (s->proxy->srv_bck == 0 && s->proxy->srv_act == 0) {
5176 if (s->proxy->last_change < now.tv_sec) // ignore negative times
5177 s->proxy->down_time += now.tv_sec - s->proxy->last_change;
5178 s->proxy->last_change = now.tv_sec;
5179 }
5180
5181 if (s->last_change < now.tv_sec) // ignore negative times
5182 s->down_time += now.tv_sec - s->last_change;
5183 s->last_change = now.tv_sec;
Willy Tarreau3ff577e2018-08-02 11:48:52 +02005184 server_recalc_eweight(s, 0);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005185
5186 tmptrash = alloc_trash_chunk();
5187 if (tmptrash) {
5188 if (!(s->next_admin & SRV_ADMF_FDRAIN)) {
5189 chunk_printf(tmptrash,
5190 "%sServer %s/%s is %s (leaving forced drain)",
5191 s->flags & SRV_F_BACKUP ? "Backup " : "",
5192 s->proxy->id, s->id,
5193 (s->next_state == SRV_ST_STOPPED) ? "DOWN" : "UP");
5194 }
5195 else {
5196 chunk_printf(tmptrash,
5197 "%sServer %s/%s is %s (leaving drain)",
5198 s->flags & SRV_F_BACKUP ? "Backup " : "",
5199 s->proxy->id, s->id,
5200 (s->next_state == SRV_ST_STOPPED) ? "DOWN" : "UP");
5201 if (s->track) /* normally it's mandatory here */
5202 chunk_appendf(tmptrash, " via %s/%s",
5203 s->track->proxy->id, s->track->id);
5204 }
5205
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005206 ha_warning("%s.\n", tmptrash->area);
5207 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5208 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005209 free_trash_chunk(tmptrash);
5210 tmptrash = NULL;
5211 }
5212
5213 /* now propagate the status change to any LB algorithms */
5214 if (px->lbprm.update_server_eweight)
5215 px->lbprm.update_server_eweight(s);
5216 else if (srv_willbe_usable(s)) {
5217 if (px->lbprm.set_server_status_up)
5218 px->lbprm.set_server_status_up(s);
5219 }
5220 else {
5221 if (px->lbprm.set_server_status_down)
5222 px->lbprm.set_server_status_down(s);
5223 }
5224 }
5225 else if ((s->next_admin & SRV_ADMF_DRAIN)) {
5226 /* remaining in drain mode after removing one of its flags */
5227
5228 tmptrash = alloc_trash_chunk();
5229 if (tmptrash) {
5230 if (!(s->next_admin & SRV_ADMF_FDRAIN)) {
5231 chunk_printf(tmptrash,
5232 "%sServer %s/%s is leaving forced drain but remains in drain mode",
5233 s->flags & SRV_F_BACKUP ? "Backup " : "",
5234 s->proxy->id, s->id);
5235
5236 if (s->track) /* normally it's mandatory here */
5237 chunk_appendf(tmptrash, " via %s/%s",
5238 s->track->proxy->id, s->track->id);
5239 }
5240 else {
5241 chunk_printf(tmptrash,
5242 "%sServer %s/%s remains in forced drain mode",
5243 s->flags & SRV_F_BACKUP ? "Backup " : "",
5244 s->proxy->id, s->id);
5245 }
Willy Tarreau843b7cb2018-07-13 10:54:26 +02005246 ha_warning("%s.\n", tmptrash->area);
5247 send_log(s->proxy, LOG_NOTICE, "%s.\n",
5248 tmptrash->area);
Emeric Brun64cc49c2017-10-03 14:46:45 +02005249 free_trash_chunk(tmptrash);
5250 tmptrash = NULL;
5251 }
5252
5253 /* commit new admin status */
5254
5255 s->cur_admin = s->next_admin;
5256 }
5257 }
5258
5259 /* Re-set log strings to empty */
Emeric Brun64cc49c2017-10-03 14:46:45 +02005260 *s->adm_st_chg_cause = 0;
5261}
Emeric Brun64cc49c2017-10-03 14:46:45 +02005262
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005263struct task *srv_cleanup_toremove_connections(struct task *task, void *context, unsigned short state)
5264{
5265 struct connection *conn;
5266
Willy Tarreau4d82bf52020-06-28 00:19:17 +02005267 while ((conn = MT_LIST_POP(&idle_conns[tid].toremove_conns,
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005268 struct connection *, list)) != NULL) {
Christopher Faulet73c12072019-04-08 11:23:22 +02005269 conn->mux->destroy(conn->ctx);
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005270 }
5271
5272 return task;
5273}
5274
Olivier Houchardff1d0922020-06-29 20:15:59 +02005275/* Move toremove_nb connections from idle_list to toremove_list, -1 means
5276 * moving them all.
5277 * Returns the number of connections moved.
5278 */
5279static int srv_migrate_conns_to_remove(struct mt_list *idle_list, struct mt_list *toremove_list, int toremove_nb)
5280{
5281 struct mt_list *elt1, elt2;
5282 struct connection *conn;
5283 int i = 0;
5284
5285 mt_list_for_each_entry_safe(conn, idle_list, list, elt1, elt2) {
5286 if (toremove_nb != -1 && i >= toremove_nb)
5287 break;
5288 MT_LIST_DEL_SAFE_NOINIT(elt1);
Willy Tarreaude4db172020-07-10 08:10:29 +02005289 MT_LIST_ADDQ(toremove_list, &conn->list);
Olivier Houchardff1d0922020-06-29 20:15:59 +02005290 i++;
5291 }
5292 return i;
5293}
William Dauchy6318d332020-05-02 21:52:36 +02005294/* cleanup connections for a given server
5295 * might be useful when going on forced maintenance or live changing ip/port
5296 */
William Dauchy707ad322020-05-04 13:52:40 +02005297static void srv_cleanup_connections(struct server *srv)
William Dauchy6318d332020-05-02 21:52:36 +02005298{
William Dauchy6318d332020-05-02 21:52:36 +02005299 int did_remove;
5300 int i;
William Dauchy6318d332020-05-02 21:52:36 +02005301
Amaury Denoyelle10d5c312021-01-06 14:28:51 +01005302 /* nothing to do if pool-max-conn is null */
5303 if (!srv->max_idle_conns)
5304 return;
5305
Willy Tarreauc35bcfc2020-06-29 14:43:16 +02005306 /* check all threads starting with ours */
Willy Tarreauc35bcfc2020-06-29 14:43:16 +02005307 for (i = tid;;) {
William Dauchy6318d332020-05-02 21:52:36 +02005308 did_remove = 0;
Olivier Houchardff1d0922020-06-29 20:15:59 +02005309 if (srv_migrate_conns_to_remove(&srv->idle_conns[i], &idle_conns[i].toremove_conns, -1) > 0)
William Dauchy6318d332020-05-02 21:52:36 +02005310 did_remove = 1;
Olivier Houchardff1d0922020-06-29 20:15:59 +02005311 if (srv_migrate_conns_to_remove(&srv->safe_conns[i], &idle_conns[i].toremove_conns, -1) > 0)
5312 did_remove = 1;
William Dauchy6318d332020-05-02 21:52:36 +02005313 if (did_remove)
Willy Tarreau4d82bf52020-06-28 00:19:17 +02005314 task_wakeup(idle_conns[i].cleanup_task, TASK_WOKEN_OTHER);
Willy Tarreauc35bcfc2020-06-29 14:43:16 +02005315
5316 if ((i = ((i + 1 == global.nbthread) ? 0 : i + 1)) == tid)
5317 break;
William Dauchy6318d332020-05-02 21:52:36 +02005318 }
William Dauchy6318d332020-05-02 21:52:36 +02005319}
5320
Willy Tarreau980855b2019-02-07 14:59:29 +01005321struct task *srv_cleanup_idle_connections(struct task *task, void *context, unsigned short state)
Olivier Houchard0c18a6f2018-12-02 14:11:41 +01005322{
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005323 struct server *srv;
5324 struct eb32_node *eb;
5325 int i;
5326 unsigned int next_wakeup;
Olivier Houchardb7b3faa2018-12-14 18:15:36 +01005327
Willy Tarreau21b9ff52020-11-05 09:12:20 +01005328 next_wakeup = TICK_ETERNITY;
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005329 HA_SPIN_LOCK(OTHER_LOCK, &idle_conn_srv_lock);
5330 while (1) {
Olivier Houchard079cb9a2020-03-30 00:23:57 +02005331 int exceed_conns;
5332 int to_kill;
5333 int curr_idle;
Olivier Houchardb7b3faa2018-12-14 18:15:36 +01005334
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005335 eb = eb32_lookup_ge(&idle_conn_srv, now_ms - TIMER_LOOK_BACK);
5336 if (!eb) {
5337 /* we might have reached the end of the tree, typically because
5338 * <now_ms> is in the first half and we're first scanning the last
5339 * half. Let's loop back to the beginning of the tree now.
5340 */
Olivier Houchard0c18a6f2018-12-02 14:11:41 +01005341
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005342 eb = eb32_first(&idle_conn_srv);
5343 if (likely(!eb))
5344 break;
5345 }
5346 if (tick_is_lt(now_ms, eb->key)) {
5347 /* timer not expired yet, revisit it later */
5348 next_wakeup = eb->key;
Olivier Houchard0c18a6f2018-12-02 14:11:41 +01005349 break;
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005350 }
5351 srv = eb32_entry(eb, struct server, idle_node);
Olivier Houchard079cb9a2020-03-30 00:23:57 +02005352
5353 /* Calculate how many idle connections we want to kill :
5354 * we want to remove half the difference between the total
5355 * of established connections (used or idle) and the max
5356 * number of used connections.
5357 */
5358 curr_idle = srv->curr_idle_conns;
5359 if (curr_idle == 0)
5360 goto remove;
Willy Tarreaubdb86bd2020-06-29 15:56:35 +02005361 exceed_conns = srv->curr_used_conns + curr_idle - MAX(srv->max_used_conns, srv->est_need_conns);
Olivier Houchard079cb9a2020-03-30 00:23:57 +02005362 exceed_conns = to_kill = exceed_conns / 2 + (exceed_conns & 1);
Willy Tarreaubdb86bd2020-06-29 15:56:35 +02005363
Willy Tarreau21b9ff52020-11-05 09:12:20 +01005364 srv->est_need_conns = (srv->est_need_conns + srv->max_used_conns) / 2;
Willy Tarreaubdb86bd2020-06-29 15:56:35 +02005365 if (srv->est_need_conns < srv->max_used_conns)
5366 srv->est_need_conns = srv->max_used_conns;
5367
Olivier Houchard079cb9a2020-03-30 00:23:57 +02005368 srv->max_used_conns = srv->curr_used_conns;
5369
Willy Tarreau18ed7892020-07-02 19:05:30 +02005370 if (exceed_conns <= 0)
5371 goto remove;
5372
Willy Tarreauc35bcfc2020-06-29 14:43:16 +02005373 /* check all threads starting with ours */
5374 for (i = tid;;) {
Olivier Houchard079cb9a2020-03-30 00:23:57 +02005375 int max_conn;
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005376 int j;
5377 int did_remove = 0;
5378
Olivier Houchard079cb9a2020-03-30 00:23:57 +02005379 max_conn = (exceed_conns * srv->curr_idle_thr[i]) /
5380 curr_idle + 1;
Olivier Houchardff1d0922020-06-29 20:15:59 +02005381
5382 j = srv_migrate_conns_to_remove(&srv->idle_conns[i], &idle_conns[i].toremove_conns, max_conn);
5383 if (j > 0)
5384 did_remove = 1;
5385 if (max_conn - j > 0 &&
5386 srv_migrate_conns_to_remove(&srv->safe_conns[i], &idle_conns[i].toremove_conns, max_conn - j) > 0)
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005387 did_remove = 1;
Olivier Houchardff1d0922020-06-29 20:15:59 +02005388
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005389 if (did_remove)
Willy Tarreau4d82bf52020-06-28 00:19:17 +02005390 task_wakeup(idle_conns[i].cleanup_task, TASK_WOKEN_OTHER);
Willy Tarreauc35bcfc2020-06-29 14:43:16 +02005391
5392 if ((i = ((i + 1 == global.nbthread) ? 0 : i + 1)) == tid)
5393 break;
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005394 }
Olivier Houchard079cb9a2020-03-30 00:23:57 +02005395remove:
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005396 eb32_delete(&srv->idle_node);
Willy Tarreau21b9ff52020-11-05 09:12:20 +01005397
5398 if (srv->curr_idle_conns) {
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005399 /* There are still more idle connections, add the
5400 * server back in the tree.
5401 */
Willy Tarreau21b9ff52020-11-05 09:12:20 +01005402 srv->idle_node.key = tick_add(srv->pool_purge_delay, now_ms);
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005403 eb32_insert(&idle_conn_srv, &srv->idle_node);
Willy Tarreau21b9ff52020-11-05 09:12:20 +01005404 next_wakeup = tick_first(next_wakeup, srv->idle_node.key);
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005405 }
Olivier Houchard0c18a6f2018-12-02 14:11:41 +01005406 }
Olivier Houchard9ea5d362019-02-14 18:29:09 +01005407 HA_SPIN_UNLOCK(OTHER_LOCK, &idle_conn_srv_lock);
5408
Willy Tarreau21b9ff52020-11-05 09:12:20 +01005409 task->expire = next_wakeup;
Olivier Houchard0c18a6f2018-12-02 14:11:41 +01005410 return task;
5411}
Olivier Houchard88698d92019-04-16 19:07:22 +02005412
Willy Tarreau76cc6992020-07-01 18:49:24 +02005413/* config parser for global "tune.idle-pool.shared", accepts "on" or "off" */
5414static int cfg_parse_idle_pool_shared(char **args, int section_type, struct proxy *curpx,
5415 struct proxy *defpx, const char *file, int line,
5416 char **err)
5417{
5418 if (too_many_args(1, args, err, NULL))
5419 return -1;
5420
5421 if (strcmp(args[1], "on") == 0)
5422 global.tune.options |= GTUNE_IDLE_POOL_SHARED;
5423 else if (strcmp(args[1], "off") == 0)
5424 global.tune.options &= ~GTUNE_IDLE_POOL_SHARED;
5425 else {
5426 memprintf(err, "'%s' expects either 'on' or 'off' but got '%s'.", args[0], args[1]);
5427 return -1;
5428 }
5429 return 0;
5430}
5431
Olivier Houchard88698d92019-04-16 19:07:22 +02005432/* config parser for global "tune.pool-{low,high}-fd-ratio" */
5433static int cfg_parse_pool_fd_ratio(char **args, int section_type, struct proxy *curpx,
5434 struct proxy *defpx, const char *file, int line,
5435 char **err)
5436{
5437 int arg = -1;
5438
5439 if (too_many_args(1, args, err, NULL))
5440 return -1;
5441
5442 if (*(args[1]) != 0)
5443 arg = atoi(args[1]);
5444
5445 if (arg < 0 || arg > 100) {
5446 memprintf(err, "'%s' expects an integer argument between 0 and 100.", args[0]);
5447 return -1;
5448 }
5449
5450 if (args[0][10] == 'h')
5451 global.tune.pool_high_ratio = arg;
5452 else
5453 global.tune.pool_low_ratio = arg;
5454 return 0;
5455}
5456
5457/* config keyword parsers */
5458static struct cfg_kw_list cfg_kws = {ILH, {
Willy Tarreau76cc6992020-07-01 18:49:24 +02005459 { CFG_GLOBAL, "tune.idle-pool.shared", cfg_parse_idle_pool_shared },
Olivier Houchard88698d92019-04-16 19:07:22 +02005460 { CFG_GLOBAL, "tune.pool-high-fd-ratio", cfg_parse_pool_fd_ratio },
5461 { CFG_GLOBAL, "tune.pool-low-fd-ratio", cfg_parse_pool_fd_ratio },
5462 { 0, NULL, NULL }
5463}};
5464
5465INITCALL1(STG_REGISTER, cfg_register_keywords, &cfg_kws);
5466
Baptiste Assmanna68ca962015-04-14 01:15:08 +02005467/*
Willy Tarreaubaaee002006-06-26 02:48:02 +02005468 * Local variables:
5469 * c-indent-level: 8
5470 * c-basic-offset: 8
5471 * End:
5472 */