blob: a1fe015df4a41065ad7e2e87941555fc55b85518 [file] [log] [blame]
Willy Tarreaubaaee002006-06-26 02:48:02 +02001/*
2 * Health-checks functions.
3 *
Willy Tarreau26c25062009-03-08 09:38:41 +01004 * Copyright 2000-2009 Willy Tarreau <w@1wt.eu>
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +02005 * Copyright 2007-2009 Krzysztof Piotr Oledzki <ole@ans.pl>
Willy Tarreaubaaee002006-06-26 02:48:02 +02006 *
7 * This program is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU General Public License
9 * as published by the Free Software Foundation; either version
10 * 2 of the License, or (at your option) any later version.
11 *
12 */
13
Willy Tarreaub8816082008-01-18 12:18:15 +010014#include <assert.h>
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +020015#include <ctype.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020016#include <errno.h>
17#include <fcntl.h>
Willy Tarreau9b39dc52014-07-08 00:54:10 +020018#include <signal.h>
Simon Horman0ba0e4a2015-01-30 11:23:00 +090019#include <stdarg.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020020#include <stdio.h>
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +020021#include <stdlib.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020022#include <string.h>
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +020023#include <time.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020024#include <unistd.h>
Willy Tarreau9f6dc722019-03-01 11:15:10 +010025#include <sys/resource.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020026#include <sys/socket.h>
Dmitry Sivachenkocaf58982009-08-24 15:11:06 +040027#include <sys/types.h>
Simon Horman98637e52014-06-20 12:30:16 +090028#include <sys/wait.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020029#include <netinet/in.h>
Willy Tarreau1274bc42009-07-15 07:16:31 +020030#include <netinet/tcp.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020031#include <arpa/inet.h>
32
Willy Tarreauc7e42382012-08-24 19:22:53 +020033#include <common/chunk.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020034#include <common/compat.h>
35#include <common/config.h>
36#include <common/mini-clist.h>
Willy Tarreau83749182007-04-15 20:56:27 +020037#include <common/standard.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020038#include <common/time.h>
Christopher Fauletcfda8472017-10-20 15:40:23 +020039#include <common/hathreads.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020040
41#include <types/global.h>
Baptiste Assmanna68ca962015-04-14 01:15:08 +020042#include <types/dns.h>
William Lallemand9ed62032016-11-21 17:49:11 +010043#include <types/stats.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020044
45#include <proto/backend.h>
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +020046#include <proto/checks.h>
William Lallemand9ed62032016-11-21 17:49:11 +010047#include <proto/stats.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020048#include <proto/fd.h>
49#include <proto/log.h>
Willy Tarreau53a47662017-08-28 10:53:00 +020050#include <proto/mux_pt.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020051#include <proto/queue.h>
Willy Tarreauc6f4ce82009-06-10 11:09:37 +020052#include <proto/port_range.h>
Willy Tarreaue8c66af2008-01-13 18:40:14 +010053#include <proto/proto_tcp.h>
Baptiste Assmann69e273f2013-12-11 00:52:19 +010054#include <proto/protocol.h>
Willy Tarreau2b5652f2006-12-31 17:46:05 +010055#include <proto/proxy.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020056#include <proto/server.h>
Willy Tarreau48d6bf22016-06-21 16:27:34 +020057#include <proto/signal.h>
Willy Tarreau9e000c62011-03-10 14:03:36 +010058#include <proto/stream_interface.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020059#include <proto/task.h>
Baptiste Assmanna68ca962015-04-14 01:15:08 +020060#include <proto/log.h>
61#include <proto/dns.h>
62#include <proto/proto_udp.h>
Olivier Houchard9130a962017-10-17 17:33:43 +020063#include <proto/ssl_sock.h>
Olivier Houchard9130a962017-10-17 17:33:43 +020064
Willy Tarreaubd741542010-03-16 18:46:54 +010065static int httpchk_expect(struct server *s, int done);
Simon Hormane16c1b32015-01-30 11:22:57 +090066static int tcpcheck_get_step_id(struct check *);
Baptiste Assmann22b09d22015-05-01 08:03:04 +020067static char * tcpcheck_get_step_comment(struct check *, int);
Willy Tarreau6bdcab02017-10-04 18:41:00 +020068static int tcpcheck_main(struct check *);
Olivier Houchard910b2bc2018-07-17 18:49:38 +020069static void __event_srv_chk_w(struct conn_stream *cs);
Olivier Houchard4501c3e2018-08-28 19:36:18 +020070static int wake_srv_chk(struct conn_stream *cs);
Olivier Houchardaf4021e2018-08-09 13:06:55 +020071static void __event_srv_chk_r(struct conn_stream *cs);
Willy Tarreaubd741542010-03-16 18:46:54 +010072
Willy Tarreau8ceae722018-11-26 11:58:30 +010073DECLARE_STATIC_POOL(pool_head_email_alert, "email_alert", sizeof(struct email_alert));
74DECLARE_STATIC_POOL(pool_head_tcpcheck_rule, "tcpcheck_rule", sizeof(struct tcpcheck_rule));
Christopher Faulet31dff9b2017-10-23 15:45:20 +020075
76
Simon Horman63a4a822012-03-19 07:24:41 +090077static const struct check_status check_statuses[HCHK_STATUS_SIZE] = {
Willy Tarreau6aaa1b82013-12-11 17:09:34 +010078 [HCHK_STATUS_UNKNOWN] = { CHK_RES_UNKNOWN, "UNK", "Unknown" },
79 [HCHK_STATUS_INI] = { CHK_RES_UNKNOWN, "INI", "Initializing" },
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +020080 [HCHK_STATUS_START] = { /* SPECIAL STATUS*/ },
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +020081
Willy Tarreau23964182014-05-20 20:56:30 +020082 /* Below we have finished checks */
83 [HCHK_STATUS_CHECKED] = { CHK_RES_NEUTRAL, "CHECKED", "No status change" },
Willy Tarreau6aaa1b82013-12-11 17:09:34 +010084 [HCHK_STATUS_HANA] = { CHK_RES_FAILED, "HANA", "Health analyze" },
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +010085
Willy Tarreau6aaa1b82013-12-11 17:09:34 +010086 [HCHK_STATUS_SOCKERR] = { CHK_RES_FAILED, "SOCKERR", "Socket error" },
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +020087
Willy Tarreau6aaa1b82013-12-11 17:09:34 +010088 [HCHK_STATUS_L4OK] = { CHK_RES_PASSED, "L4OK", "Layer4 check passed" },
89 [HCHK_STATUS_L4TOUT] = { CHK_RES_FAILED, "L4TOUT", "Layer4 timeout" },
90 [HCHK_STATUS_L4CON] = { CHK_RES_FAILED, "L4CON", "Layer4 connection problem" },
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +020091
Willy Tarreau6aaa1b82013-12-11 17:09:34 +010092 [HCHK_STATUS_L6OK] = { CHK_RES_PASSED, "L6OK", "Layer6 check passed" },
93 [HCHK_STATUS_L6TOUT] = { CHK_RES_FAILED, "L6TOUT", "Layer6 timeout" },
94 [HCHK_STATUS_L6RSP] = { CHK_RES_FAILED, "L6RSP", "Layer6 invalid response" },
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +020095
Willy Tarreau6aaa1b82013-12-11 17:09:34 +010096 [HCHK_STATUS_L7TOUT] = { CHK_RES_FAILED, "L7TOUT", "Layer7 timeout" },
97 [HCHK_STATUS_L7RSP] = { CHK_RES_FAILED, "L7RSP", "Layer7 invalid response" },
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +020098
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +020099 [HCHK_STATUS_L57DATA] = { /* DUMMY STATUS */ },
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200100
Willy Tarreau6aaa1b82013-12-11 17:09:34 +0100101 [HCHK_STATUS_L7OKD] = { CHK_RES_PASSED, "L7OK", "Layer7 check passed" },
102 [HCHK_STATUS_L7OKCD] = { CHK_RES_CONDPASS, "L7OKC", "Layer7 check conditionally passed" },
103 [HCHK_STATUS_L7STS] = { CHK_RES_FAILED, "L7STS", "Layer7 wrong status" },
Simon Horman98637e52014-06-20 12:30:16 +0900104
105 [HCHK_STATUS_PROCERR] = { CHK_RES_FAILED, "PROCERR", "External check error" },
106 [HCHK_STATUS_PROCTOUT] = { CHK_RES_FAILED, "PROCTOUT", "External check timeout" },
Cyril Bonté77010d82014-08-07 01:55:37 +0200107 [HCHK_STATUS_PROCOK] = { CHK_RES_PASSED, "PROCOK", "External check passed" },
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200108};
109
Cyril Bontéac92a062014-12-27 22:28:38 +0100110const struct extcheck_env extcheck_envs[EXTCHK_SIZE] = {
111 [EXTCHK_PATH] = { "PATH", EXTCHK_SIZE_EVAL_INIT },
112 [EXTCHK_HAPROXY_PROXY_NAME] = { "HAPROXY_PROXY_NAME", EXTCHK_SIZE_EVAL_INIT },
113 [EXTCHK_HAPROXY_PROXY_ID] = { "HAPROXY_PROXY_ID", EXTCHK_SIZE_EVAL_INIT },
114 [EXTCHK_HAPROXY_PROXY_ADDR] = { "HAPROXY_PROXY_ADDR", EXTCHK_SIZE_EVAL_INIT },
115 [EXTCHK_HAPROXY_PROXY_PORT] = { "HAPROXY_PROXY_PORT", EXTCHK_SIZE_EVAL_INIT },
116 [EXTCHK_HAPROXY_SERVER_NAME] = { "HAPROXY_SERVER_NAME", EXTCHK_SIZE_EVAL_INIT },
117 [EXTCHK_HAPROXY_SERVER_ID] = { "HAPROXY_SERVER_ID", EXTCHK_SIZE_EVAL_INIT },
118 [EXTCHK_HAPROXY_SERVER_ADDR] = { "HAPROXY_SERVER_ADDR", EXTCHK_SIZE_EVAL_INIT },
119 [EXTCHK_HAPROXY_SERVER_PORT] = { "HAPROXY_SERVER_PORT", EXTCHK_SIZE_EVAL_INIT },
120 [EXTCHK_HAPROXY_SERVER_MAXCONN] = { "HAPROXY_SERVER_MAXCONN", EXTCHK_SIZE_EVAL_INIT },
121 [EXTCHK_HAPROXY_SERVER_CURCONN] = { "HAPROXY_SERVER_CURCONN", EXTCHK_SIZE_ULONG },
122};
123
Simon Horman63a4a822012-03-19 07:24:41 +0900124static const struct analyze_status analyze_statuses[HANA_STATUS_SIZE] = { /* 0: ignore, 1: error, 2: OK */
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100125 [HANA_STATUS_UNKNOWN] = { "Unknown", { 0, 0 }},
126
127 [HANA_STATUS_L4_OK] = { "L4 successful connection", { 2, 0 }},
128 [HANA_STATUS_L4_ERR] = { "L4 unsuccessful connection", { 1, 1 }},
129
130 [HANA_STATUS_HTTP_OK] = { "Correct http response", { 0, 2 }},
131 [HANA_STATUS_HTTP_STS] = { "Wrong http response", { 0, 1 }},
132 [HANA_STATUS_HTTP_HDRRSP] = { "Invalid http response (headers)", { 0, 1 }},
133 [HANA_STATUS_HTTP_RSP] = { "Invalid http response", { 0, 1 }},
134
135 [HANA_STATUS_HTTP_READ_ERROR] = { "Read error (http)", { 0, 1 }},
136 [HANA_STATUS_HTTP_READ_TIMEOUT] = { "Read timeout (http)", { 0, 1 }},
137 [HANA_STATUS_HTTP_BROKEN_PIPE] = { "Close from server (http)", { 0, 1 }},
138};
139
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200140/*
141 * Convert check_status code to description
142 */
143const char *get_check_status_description(short check_status) {
144
145 const char *desc;
146
147 if (check_status < HCHK_STATUS_SIZE)
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200148 desc = check_statuses[check_status].desc;
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200149 else
150 desc = NULL;
151
152 if (desc && *desc)
153 return desc;
154 else
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200155 return check_statuses[HCHK_STATUS_UNKNOWN].desc;
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200156}
157
158/*
159 * Convert check_status code to short info
160 */
161const char *get_check_status_info(short check_status) {
162
163 const char *info;
164
165 if (check_status < HCHK_STATUS_SIZE)
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200166 info = check_statuses[check_status].info;
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200167 else
168 info = NULL;
169
170 if (info && *info)
171 return info;
172 else
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200173 return check_statuses[HCHK_STATUS_UNKNOWN].info;
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200174}
175
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100176const char *get_analyze_status(short analyze_status) {
177
178 const char *desc;
179
180 if (analyze_status < HANA_STATUS_SIZE)
181 desc = analyze_statuses[analyze_status].desc;
182 else
183 desc = NULL;
184
185 if (desc && *desc)
186 return desc;
187 else
188 return analyze_statuses[HANA_STATUS_UNKNOWN].desc;
189}
190
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200191/*
Simon Horman4a741432013-02-23 15:35:38 +0900192 * Set check->status, update check->duration and fill check->result with
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200193 * an adequate CHK_RES_* value. The new check->health is computed based
194 * on the result.
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200195 *
196 * Show information in logs about failed health check if server is UP
197 * or succeeded health checks if server is DOWN.
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200198 */
Simon Horman4a741432013-02-23 15:35:38 +0900199static void set_server_check_status(struct check *check, short status, const char *desc)
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100200{
Simon Horman4a741432013-02-23 15:35:38 +0900201 struct server *s = check->server;
Willy Tarreaubef1b322014-05-13 21:01:39 +0200202 short prev_status = check->status;
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200203 int report = 0;
Simon Horman4a741432013-02-23 15:35:38 +0900204
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200205 if (status == HCHK_STATUS_START) {
Willy Tarreau6aaa1b82013-12-11 17:09:34 +0100206 check->result = CHK_RES_UNKNOWN; /* no result yet */
Simon Horman4a741432013-02-23 15:35:38 +0900207 check->desc[0] = '\0';
208 check->start = now;
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200209 return;
210 }
211
Simon Horman4a741432013-02-23 15:35:38 +0900212 if (!check->status)
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200213 return;
214
Krzysztof Piotr Oledzkif7089f52009-10-10 21:06:49 +0200215 if (desc && *desc) {
Simon Horman4a741432013-02-23 15:35:38 +0900216 strncpy(check->desc, desc, HCHK_DESC_LEN-1);
217 check->desc[HCHK_DESC_LEN-1] = '\0';
Krzysztof Piotr Oledzkif7089f52009-10-10 21:06:49 +0200218 } else
Simon Horman4a741432013-02-23 15:35:38 +0900219 check->desc[0] = '\0';
Krzysztof Piotr Oledzkif7089f52009-10-10 21:06:49 +0200220
Simon Horman4a741432013-02-23 15:35:38 +0900221 check->status = status;
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200222 if (check_statuses[status].result)
Simon Horman4a741432013-02-23 15:35:38 +0900223 check->result = check_statuses[status].result;
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200224
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100225 if (status == HCHK_STATUS_HANA)
Simon Horman4a741432013-02-23 15:35:38 +0900226 check->duration = -1;
227 else if (!tv_iszero(&check->start)) {
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200228 /* set_server_check_status() may be called more than once */
Simon Horman4a741432013-02-23 15:35:38 +0900229 check->duration = tv_ms_elapsed(&check->start, &now);
230 tv_zero(&check->start);
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200231 }
232
Willy Tarreau23964182014-05-20 20:56:30 +0200233 /* no change is expected if no state change occurred */
234 if (check->result == CHK_RES_NEUTRAL)
235 return;
236
Olivier Houchard0923fa42019-01-11 18:43:04 +0100237 /* If the check was really just sending a mail, it won't have an
238 * associated server, so we're done now.
239 */
240 if (!s)
241 return;
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200242 report = 0;
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200243
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200244 switch (check->result) {
245 case CHK_RES_FAILED:
Willy Tarreau12634e12014-05-23 11:32:36 +0200246 /* Failure to connect to the agent as a secondary check should not
247 * cause the server to be marked down.
248 */
249 if ((!(check->state & CHK_ST_AGENT) ||
Simon Hormaneaabd522015-02-26 11:26:17 +0900250 (check->status >= HCHK_STATUS_L57DATA)) &&
Christopher Fauletb119a792018-05-02 12:12:45 +0200251 (check->health > 0)) {
Olivier Houchard7059c552019-03-08 18:49:32 +0100252 _HA_ATOMIC_ADD(&s->counters.failed_checks, 1);
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200253 report = 1;
254 check->health--;
255 if (check->health < check->rise)
256 check->health = 0;
257 }
258 break;
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200259
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200260 case CHK_RES_PASSED:
261 case CHK_RES_CONDPASS: /* "condpass" cannot make the first step but it OK after a "passed" */
262 if ((check->health < check->rise + check->fall - 1) &&
263 (check->result == CHK_RES_PASSED || check->health > 0)) {
264 report = 1;
265 check->health++;
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200266
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200267 if (check->health >= check->rise)
268 check->health = check->rise + check->fall - 1; /* OK now */
269 }
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200270
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200271 /* clear consecutive_errors if observing is enabled */
272 if (s->onerror)
273 s->consecutive_errors = 0;
274 break;
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100275
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200276 default:
277 break;
278 }
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200279
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200280 if (s->proxy->options2 & PR_O2_LOGHCHKS &&
281 (status != prev_status || report)) {
282 chunk_printf(&trash,
Willy Tarreau12634e12014-05-23 11:32:36 +0200283 "%s check for %sserver %s/%s %s%s",
284 (check->state & CHK_ST_AGENT) ? "Agent" : "Health",
Willy Tarreauc93cd162014-05-13 15:54:22 +0200285 s->flags & SRV_F_BACKUP ? "backup " : "",
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100286 s->proxy->id, s->id,
Willy Tarreau6aaa1b82013-12-11 17:09:34 +0100287 (check->result == CHK_RES_CONDPASS) ? "conditionally ":"",
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200288 (check->result >= CHK_RES_PASSED) ? "succeeded" : "failed");
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200289
Emeric Brun5a133512017-10-19 14:42:30 +0200290 srv_append_status(&trash, s, check, -1, 0);
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200291
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100292 chunk_appendf(&trash, ", status: %d/%d %s",
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200293 (check->health >= check->rise) ? check->health - check->rise + 1 : check->health,
294 (check->health >= check->rise) ? check->fall : check->rise,
295 (check->health >= check->rise) ? (s->uweight ? "UP" : "DRAIN") : "DOWN");
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200296
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200297 ha_warning("%s.\n", trash.area);
298 send_log(s->proxy, LOG_NOTICE, "%s.\n", trash.area);
299 send_email_alert(s, LOG_INFO, "%s", trash.area);
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200300 }
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200301}
302
Willy Tarreau4eec5472014-05-20 22:32:27 +0200303/* Marks the check <check>'s server down if the current check is already failed
304 * and the server is not down yet nor in maintenance.
Willy Tarreaubaaee002006-06-26 02:48:02 +0200305 */
Willy Tarreau4eec5472014-05-20 22:32:27 +0200306static void check_notify_failure(struct check *check)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200307{
Simon Horman4a741432013-02-23 15:35:38 +0900308 struct server *s = check->server;
Simon Hormane0d1bfb2011-06-21 14:34:58 +0900309
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200310 /* The agent secondary check should only cause a server to be marked
311 * as down if check->status is HCHK_STATUS_L7STS, which indicates
312 * that the agent returned "fail", "stopped" or "down".
313 * The implication here is that failure to connect to the agent
314 * as a secondary check should not cause the server to be marked
315 * down. */
316 if ((check->state & CHK_ST_AGENT) && check->status != HCHK_STATUS_L7STS)
317 return;
318
Willy Tarreau4eec5472014-05-20 22:32:27 +0200319 if (check->health > 0)
320 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100321
Willy Tarreau4eec5472014-05-20 22:32:27 +0200322 /* We only report a reason for the check if we did not do so previously */
Emeric Brun5a133512017-10-19 14:42:30 +0200323 srv_set_stopped(s, NULL, (!s->track && !(s->proxy->options2 & PR_O2_LOGHCHKS)) ? check : NULL);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200324}
325
Willy Tarreauaf549582014-05-16 17:37:50 +0200326/* Marks the check <check> as valid and tries to set its server up, provided
Willy Tarreau3e048382014-05-21 10:30:54 +0200327 * it isn't in maintenance, it is not tracking a down server and other checks
328 * comply. The rule is simple : by default, a server is up, unless any of the
329 * following conditions is true :
330 * - health check failed (check->health < rise)
331 * - agent check failed (agent->health < rise)
332 * - the server tracks a down server (track && track->state == STOPPED)
333 * Note that if the server has a slowstart, it will switch to STARTING instead
334 * of RUNNING. Also, only the health checks support the nolb mode, so the
335 * agent's success may not take the server out of this mode.
Willy Tarreauaf549582014-05-16 17:37:50 +0200336 */
Willy Tarreau3e048382014-05-21 10:30:54 +0200337static void check_notify_success(struct check *check)
Willy Tarreauaf549582014-05-16 17:37:50 +0200338{
Simon Horman4a741432013-02-23 15:35:38 +0900339 struct server *s = check->server;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100340
Emeric Brun52a91d32017-08-31 14:41:55 +0200341 if (s->next_admin & SRV_ADMF_MAINT)
Willy Tarreauaf549582014-05-16 17:37:50 +0200342 return;
Cyril Bontécd19e512010-01-31 22:34:03 +0100343
Emeric Brun52a91d32017-08-31 14:41:55 +0200344 if (s->track && s->track->next_state == SRV_ST_STOPPED)
Willy Tarreauaf549582014-05-16 17:37:50 +0200345 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100346
Willy Tarreau3e048382014-05-21 10:30:54 +0200347 if ((s->check.state & CHK_ST_ENABLED) && (s->check.health < s->check.rise))
348 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100349
Willy Tarreau3e048382014-05-21 10:30:54 +0200350 if ((s->agent.state & CHK_ST_ENABLED) && (s->agent.health < s->agent.rise))
351 return;
Willy Tarreauaf549582014-05-16 17:37:50 +0200352
Emeric Brun52a91d32017-08-31 14:41:55 +0200353 if ((check->state & CHK_ST_AGENT) && s->next_state == SRV_ST_STOPPING)
Willy Tarreau3e048382014-05-21 10:30:54 +0200354 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100355
Emeric Brun5a133512017-10-19 14:42:30 +0200356 srv_set_running(s, NULL, (!s->track && !(s->proxy->options2 & PR_O2_LOGHCHKS)) ? check : NULL);
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100357}
358
Willy Tarreaudb58b792014-05-21 13:57:23 +0200359/* Marks the check <check> as valid and tries to set its server into stopping mode
360 * if it was running or starting, and provided it isn't in maintenance and other
361 * checks comply. The conditions for the server to be marked in stopping mode are
362 * the same as for it to be turned up. Also, only the health checks support the
363 * nolb mode.
Willy Tarreauaf549582014-05-16 17:37:50 +0200364 */
Willy Tarreaudb58b792014-05-21 13:57:23 +0200365static void check_notify_stopping(struct check *check)
Willy Tarreauaf549582014-05-16 17:37:50 +0200366{
Simon Horman4a741432013-02-23 15:35:38 +0900367 struct server *s = check->server;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100368
Emeric Brun52a91d32017-08-31 14:41:55 +0200369 if (s->next_admin & SRV_ADMF_MAINT)
Willy Tarreauaf549582014-05-16 17:37:50 +0200370 return;
371
Willy Tarreaudb58b792014-05-21 13:57:23 +0200372 if (check->state & CHK_ST_AGENT)
373 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100374
Emeric Brun52a91d32017-08-31 14:41:55 +0200375 if (s->track && s->track->next_state == SRV_ST_STOPPED)
Willy Tarreaudb58b792014-05-21 13:57:23 +0200376 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100377
Willy Tarreaudb58b792014-05-21 13:57:23 +0200378 if ((s->check.state & CHK_ST_ENABLED) && (s->check.health < s->check.rise))
379 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100380
Willy Tarreaudb58b792014-05-21 13:57:23 +0200381 if ((s->agent.state & CHK_ST_ENABLED) && (s->agent.health < s->agent.rise))
382 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100383
Willy Tarreaub26881a2017-12-23 11:16:49 +0100384 srv_set_stopping(s, NULL, (!s->track && !(s->proxy->options2 & PR_O2_LOGHCHKS)) ? check : NULL);
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100385}
Willy Tarreaubaaee002006-06-26 02:48:02 +0200386
Willy Tarreau9fe7aae2013-12-31 23:47:37 +0100387/* note: use health_adjust() only, which first checks that the observe mode is
388 * enabled.
389 */
390void __health_adjust(struct server *s, short status)
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100391{
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100392 int failed;
393 int expire;
394
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100395 if (s->observe >= HANA_OBS_SIZE)
396 return;
397
Willy Tarreaubb956662013-01-24 00:37:39 +0100398 if (status >= HANA_STATUS_SIZE || !analyze_statuses[status].desc)
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100399 return;
400
401 switch (analyze_statuses[status].lr[s->observe - 1]) {
402 case 1:
403 failed = 1;
404 break;
405
406 case 2:
407 failed = 0;
408 break;
409
410 default:
411 return;
412 }
413
414 if (!failed) {
415 /* good: clear consecutive_errors */
416 s->consecutive_errors = 0;
417 return;
418 }
419
Olivier Houchard7059c552019-03-08 18:49:32 +0100420 _HA_ATOMIC_ADD(&s->consecutive_errors, 1);
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100421
422 if (s->consecutive_errors < s->consecutive_errors_limit)
423 return;
424
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100425 chunk_printf(&trash, "Detected %d consecutive errors, last one was: %s",
426 s->consecutive_errors, get_analyze_status(status));
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100427
428 switch (s->onerror) {
429 case HANA_ONERR_FASTINTER:
430 /* force fastinter - nothing to do here as all modes force it */
431 break;
432
433 case HANA_ONERR_SUDDTH:
434 /* simulate a pre-fatal failed health check */
Simon Horman58c32972013-11-25 10:46:38 +0900435 if (s->check.health > s->check.rise)
436 s->check.health = s->check.rise + 1;
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100437
438 /* no break - fall through */
439
440 case HANA_ONERR_FAILCHK:
441 /* simulate a failed health check */
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200442 set_server_check_status(&s->check, HCHK_STATUS_HANA,
443 trash.area);
Willy Tarreau4eec5472014-05-20 22:32:27 +0200444 check_notify_failure(&s->check);
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100445 break;
446
447 case HANA_ONERR_MARKDWN:
448 /* mark server down */
Simon Horman58c32972013-11-25 10:46:38 +0900449 s->check.health = s->check.rise;
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200450 set_server_check_status(&s->check, HCHK_STATUS_HANA,
451 trash.area);
Willy Tarreau4eec5472014-05-20 22:32:27 +0200452 check_notify_failure(&s->check);
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100453 break;
454
455 default:
456 /* write a warning? */
457 break;
458 }
459
460 s->consecutive_errors = 0;
Olivier Houchard7059c552019-03-08 18:49:32 +0100461 _HA_ATOMIC_ADD(&s->counters.failed_hana, 1);
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100462
Simon Horman66183002013-02-23 10:16:43 +0900463 if (s->check.fastinter) {
464 expire = tick_add(now_ms, MS_TO_TICKS(s->check.fastinter));
Sergiy Prykhodko1d57e502013-09-21 12:05:00 +0300465 if (s->check.task->expire > expire) {
Willy Tarreau5b3a2022012-09-28 15:01:02 +0200466 s->check.task->expire = expire;
Sergiy Prykhodko1d57e502013-09-21 12:05:00 +0300467 /* requeue check task with new expire */
468 task_queue(s->check.task);
469 }
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100470 }
471}
472
Willy Tarreaua1dab552014-04-14 15:04:54 +0200473static int httpchk_build_status_header(struct server *s, char *buffer, int size)
Willy Tarreauef781042010-01-27 11:53:01 +0100474{
475 int sv_state;
476 int ratio;
477 int hlen = 0;
Joseph Lynch514061c2015-01-15 17:52:59 -0800478 char addr[46];
479 char port[6];
Willy Tarreauef781042010-01-27 11:53:01 +0100480 const char *srv_hlt_st[7] = { "DOWN", "DOWN %d/%d",
481 "UP %d/%d", "UP",
482 "NOLB %d/%d", "NOLB",
483 "no check" };
484
485 memcpy(buffer + hlen, "X-Haproxy-Server-State: ", 24);
486 hlen += 24;
487
Willy Tarreauff5ae352013-12-11 20:36:34 +0100488 if (!(s->check.state & CHK_ST_ENABLED))
489 sv_state = 6;
Emeric Brun52a91d32017-08-31 14:41:55 +0200490 else if (s->cur_state != SRV_ST_STOPPED) {
Simon Horman58c32972013-11-25 10:46:38 +0900491 if (s->check.health == s->check.rise + s->check.fall - 1)
Willy Tarreauef781042010-01-27 11:53:01 +0100492 sv_state = 3; /* UP */
493 else
494 sv_state = 2; /* going down */
495
Emeric Brun52a91d32017-08-31 14:41:55 +0200496 if (s->cur_state == SRV_ST_STOPPING)
Willy Tarreauef781042010-01-27 11:53:01 +0100497 sv_state += 2;
498 } else {
Simon Horman125d0992013-02-24 17:23:38 +0900499 if (s->check.health)
Willy Tarreauef781042010-01-27 11:53:01 +0100500 sv_state = 1; /* going up */
501 else
502 sv_state = 0; /* DOWN */
503 }
504
Willy Tarreaua1dab552014-04-14 15:04:54 +0200505 hlen += snprintf(buffer + hlen, size - hlen,
Willy Tarreauef781042010-01-27 11:53:01 +0100506 srv_hlt_st[sv_state],
Emeric Brun52a91d32017-08-31 14:41:55 +0200507 (s->cur_state != SRV_ST_STOPPED) ? (s->check.health - s->check.rise + 1) : (s->check.health),
508 (s->cur_state != SRV_ST_STOPPED) ? (s->check.fall) : (s->check.rise));
Willy Tarreauef781042010-01-27 11:53:01 +0100509
Joseph Lynch514061c2015-01-15 17:52:59 -0800510 addr_to_str(&s->addr, addr, sizeof(addr));
Willy Tarreau04276f32017-01-06 17:41:29 +0100511 if (s->addr.ss_family == AF_INET || s->addr.ss_family == AF_INET6)
512 snprintf(port, sizeof(port), "%u", s->svc_port);
513 else
514 *port = 0;
Joseph Lynch514061c2015-01-15 17:52:59 -0800515
516 hlen += snprintf(buffer + hlen, size - hlen, "; address=%s; port=%s; name=%s/%s; node=%s; weight=%d/%d; scur=%d/%d; qcur=%d",
517 addr, port, s->proxy->id, s->id,
Willy Tarreauef781042010-01-27 11:53:01 +0100518 global.node,
Emeric Brun52a91d32017-08-31 14:41:55 +0200519 (s->cur_eweight * s->proxy->lbprm.wmult + s->proxy->lbprm.wdiv - 1) / s->proxy->lbprm.wdiv,
Willy Tarreauef781042010-01-27 11:53:01 +0100520 (s->proxy->lbprm.tot_weight * s->proxy->lbprm.wmult + s->proxy->lbprm.wdiv - 1) / s->proxy->lbprm.wdiv,
521 s->cur_sess, s->proxy->beconn - s->proxy->nbpend,
522 s->nbpend);
523
Emeric Brun52a91d32017-08-31 14:41:55 +0200524 if ((s->cur_state == SRV_ST_STARTING) &&
Willy Tarreauef781042010-01-27 11:53:01 +0100525 now.tv_sec < s->last_change + s->slowstart &&
526 now.tv_sec >= s->last_change) {
527 ratio = MAX(1, 100 * (now.tv_sec - s->last_change) / s->slowstart);
Willy Tarreaua1dab552014-04-14 15:04:54 +0200528 hlen += snprintf(buffer + hlen, size - hlen, "; throttle=%d%%", ratio);
Willy Tarreauef781042010-01-27 11:53:01 +0100529 }
530
531 buffer[hlen++] = '\r';
532 buffer[hlen++] = '\n';
533
534 return hlen;
535}
536
Willy Tarreau20a18342013-12-05 00:31:46 +0100537/* Check the connection. If an error has already been reported or the socket is
538 * closed, keep errno intact as it is supposed to contain the valid error code.
539 * If no error is reported, check the socket's error queue using getsockopt().
540 * Warning, this must be done only once when returning from poll, and never
541 * after an I/O error was attempted, otherwise the error queue might contain
542 * inconsistent errors. If an error is detected, the CO_FL_ERROR is set on the
543 * socket. Returns non-zero if an error was reported, zero if everything is
544 * clean (including a properly closed socket).
545 */
546static int retrieve_errno_from_socket(struct connection *conn)
547{
548 int skerr;
549 socklen_t lskerr = sizeof(skerr);
550
551 if (conn->flags & CO_FL_ERROR && ((errno && errno != EAGAIN) || !conn->ctrl))
552 return 1;
553
Willy Tarreau3c728722014-01-23 13:50:42 +0100554 if (!conn_ctrl_ready(conn))
Willy Tarreau20a18342013-12-05 00:31:46 +0100555 return 0;
556
Willy Tarreau585744b2017-08-24 14:31:19 +0200557 if (getsockopt(conn->handle.fd, SOL_SOCKET, SO_ERROR, &skerr, &lskerr) == 0)
Willy Tarreau20a18342013-12-05 00:31:46 +0100558 errno = skerr;
559
560 if (errno == EAGAIN)
561 errno = 0;
562
563 if (!errno) {
564 /* we could not retrieve an error, that does not mean there is
565 * none. Just don't change anything and only report the prior
566 * error if any.
567 */
568 if (conn->flags & CO_FL_ERROR)
569 return 1;
570 else
571 return 0;
572 }
573
574 conn->flags |= CO_FL_ERROR | CO_FL_SOCK_WR_SH | CO_FL_SOCK_RD_SH;
575 return 1;
576}
577
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100578/* Try to collect as much information as possible on the connection status,
579 * and adjust the server status accordingly. It may make use of <errno_bck>
580 * if non-null when the caller is absolutely certain of its validity (eg:
581 * checked just after a syscall). If the caller doesn't have a valid errno,
582 * it can pass zero, and retrieve_errno_from_socket() will be called to try
583 * to extract errno from the socket. If no error is reported, it will consider
584 * the <expired> flag. This is intended to be used when a connection error was
585 * reported in conn->flags or when a timeout was reported in <expired>. The
586 * function takes care of not updating a server status which was already set.
587 * All situations where at least one of <expired> or CO_FL_ERROR are set
588 * produce a status.
589 */
Willy Tarreaub5259bf2017-10-04 14:47:29 +0200590static void chk_report_conn_err(struct check *check, int errno_bck, int expired)
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100591{
Olivier Houchard9aaf7782017-09-13 18:30:23 +0200592 struct conn_stream *cs = check->cs;
593 struct connection *conn = cs_conn(cs);
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100594 const char *err_msg;
Willy Tarreau83061a82018-07-13 11:56:34 +0200595 struct buffer *chk;
Willy Tarreau213c6782014-10-02 14:51:02 +0200596 int step;
Baptiste Assmann22b09d22015-05-01 08:03:04 +0200597 char *comment;
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100598
Willy Tarreau6aaa1b82013-12-11 17:09:34 +0100599 if (check->result != CHK_RES_UNKNOWN)
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100600 return;
601
602 errno = errno_bck;
Willy Tarreau00149122017-10-04 18:05:01 +0200603 if (conn && (!errno || errno == EAGAIN))
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100604 retrieve_errno_from_socket(conn);
605
Willy Tarreau4ff3b892017-10-16 15:17:17 +0200606 if (conn && !(conn->flags & CO_FL_ERROR) &&
607 !(cs->flags & CS_FL_ERROR) && !expired)
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100608 return;
609
610 /* we'll try to build a meaningful error message depending on the
611 * context of the error possibly present in conn->err_code, and the
612 * socket error possibly collected above. This is useful to know the
613 * exact step of the L6 layer (eg: SSL handshake).
614 */
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +0200615 chk = get_trash_chunk();
616
617 if (check->type == PR_O2_TCPCHK_CHK) {
Simon Hormane16c1b32015-01-30 11:22:57 +0900618 step = tcpcheck_get_step_id(check);
Willy Tarreau213c6782014-10-02 14:51:02 +0200619 if (!step)
620 chunk_printf(chk, " at initial connection step of tcp-check");
621 else {
622 chunk_printf(chk, " at step %d of tcp-check", step);
623 /* we were looking for a string */
624 if (check->last_started_step && check->last_started_step->action == TCPCHK_ACT_CONNECT) {
625 if (check->last_started_step->port)
626 chunk_appendf(chk, " (connect port %d)" ,check->last_started_step->port);
627 else
628 chunk_appendf(chk, " (connect)");
629 }
630 else if (check->last_started_step && check->last_started_step->action == TCPCHK_ACT_EXPECT) {
631 if (check->last_started_step->string)
Baptiste Assmann96a5c9b2015-05-01 08:09:29 +0200632 chunk_appendf(chk, " (expect string '%s')", check->last_started_step->string);
Willy Tarreau213c6782014-10-02 14:51:02 +0200633 else if (check->last_started_step->expect_regex)
634 chunk_appendf(chk, " (expect regex)");
635 }
636 else if (check->last_started_step && check->last_started_step->action == TCPCHK_ACT_SEND) {
637 chunk_appendf(chk, " (send)");
638 }
Baptiste Assmann22b09d22015-05-01 08:03:04 +0200639
640 comment = tcpcheck_get_step_comment(check, step);
641 if (comment)
642 chunk_appendf(chk, " comment: '%s'", comment);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +0200643 }
644 }
645
Willy Tarreau00149122017-10-04 18:05:01 +0200646 if (conn && conn->err_code) {
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100647 if (errno && errno != EAGAIN)
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200648 chunk_printf(&trash, "%s (%s)%s", conn_err_code_str(conn), strerror(errno),
649 chk->area);
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100650 else
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200651 chunk_printf(&trash, "%s%s", conn_err_code_str(conn),
652 chk->area);
653 err_msg = trash.area;
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100654 }
655 else {
656 if (errno && errno != EAGAIN) {
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200657 chunk_printf(&trash, "%s%s", strerror(errno),
658 chk->area);
659 err_msg = trash.area;
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100660 }
661 else {
Willy Tarreau843b7cb2018-07-13 10:54:26 +0200662 err_msg = chk->area;
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100663 }
664 }
665
Willy Tarreau00149122017-10-04 18:05:01 +0200666 if (check->state & CHK_ST_PORT_MISS) {
Baptiste Assmann95db2bc2016-06-13 14:15:41 +0200667 /* NOTE: this is reported after <fall> tries */
668 chunk_printf(chk, "No port available for the TCP connection");
669 set_server_check_status(check, HCHK_STATUS_SOCKERR, err_msg);
670 }
671
Willy Tarreau00149122017-10-04 18:05:01 +0200672 if (!conn) {
673 /* connection allocation error before the connection was established */
674 set_server_check_status(check, HCHK_STATUS_SOCKERR, err_msg);
675 }
676 else if ((conn->flags & (CO_FL_CONNECTED|CO_FL_WAIT_L4_CONN)) == CO_FL_WAIT_L4_CONN) {
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100677 /* L4 not established (yet) */
Willy Tarreau4ff3b892017-10-16 15:17:17 +0200678 if (conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR)
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100679 set_server_check_status(check, HCHK_STATUS_L4CON, err_msg);
680 else if (expired)
681 set_server_check_status(check, HCHK_STATUS_L4TOUT, err_msg);
Baptiste Assmanna68ca962015-04-14 01:15:08 +0200682
683 /*
684 * might be due to a server IP change.
685 * Let's trigger a DNS resolution if none are currently running.
686 */
Olivier Houchard0923fa42019-01-11 18:43:04 +0100687 if (check->server)
688 dns_trigger_resolution(check->server->dns_requester);
Baptiste Assmanna68ca962015-04-14 01:15:08 +0200689
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100690 }
691 else if ((conn->flags & (CO_FL_CONNECTED|CO_FL_WAIT_L6_CONN)) == CO_FL_WAIT_L6_CONN) {
692 /* L6 not established (yet) */
Willy Tarreau4ff3b892017-10-16 15:17:17 +0200693 if (conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR)
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100694 set_server_check_status(check, HCHK_STATUS_L6RSP, err_msg);
695 else if (expired)
696 set_server_check_status(check, HCHK_STATUS_L6TOUT, err_msg);
697 }
Willy Tarreau4ff3b892017-10-16 15:17:17 +0200698 else if (conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR) {
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100699 /* I/O error after connection was established and before we could diagnose */
700 set_server_check_status(check, HCHK_STATUS_SOCKERR, err_msg);
701 }
702 else if (expired) {
703 /* connection established but expired check */
704 if (check->type == PR_O2_SSL3_CHK)
705 set_server_check_status(check, HCHK_STATUS_L6TOUT, err_msg);
706 else /* HTTP, SMTP, ... */
707 set_server_check_status(check, HCHK_STATUS_L7TOUT, err_msg);
708 }
709
710 return;
711}
712
Olivier Houchard5c110b92018-08-14 17:04:58 +0200713/* This function checks if any I/O is wanted, and if so, attempts to do so */
714static struct task *event_srv_chk_io(struct task *t, void *ctx, unsigned short state)
Olivier Houchard910b2bc2018-07-17 18:49:38 +0200715{
Olivier Houchard26e1a8f2018-09-12 15:15:12 +0200716 struct check *check = ctx;
717 struct conn_stream *cs = check->cs;
Olivier Houchard0923fa42019-01-11 18:43:04 +0100718 struct email_alertq *q = container_of(check, typeof(*q), check);
Olivier Houchard81badc42019-07-09 17:28:51 +0200719 int ret = 0;
Olivier Houchard4501c3e2018-08-28 19:36:18 +0200720
Willy Tarreau4f6516d2018-12-19 13:59:17 +0100721 if (!(check->wait_list.events & SUB_RETRY_SEND))
Olivier Houchard81badc42019-07-09 17:28:51 +0200722 ret = wake_srv_chk(cs);
723 if (ret == 0 && !(check->wait_list.events & SUB_RETRY_RECV)) {
Olivier Houchard0923fa42019-01-11 18:43:04 +0100724 if (check->server)
725 HA_SPIN_LOCK(SERVER_LOCK, &check->server->lock);
726 else
727 HA_SPIN_LOCK(EMAIL_ALERTS_LOCK, &q->lock);
Olivier Houchardaf4021e2018-08-09 13:06:55 +0200728 __event_srv_chk_r(cs);
Olivier Houchard0923fa42019-01-11 18:43:04 +0100729 if (check->server)
730 HA_SPIN_UNLOCK(SERVER_LOCK, &check->server->lock);
731 else
732 HA_SPIN_UNLOCK(EMAIL_ALERTS_LOCK, &q->lock);
Olivier Houchardaf4021e2018-08-09 13:06:55 +0200733 }
Olivier Houchard910b2bc2018-07-17 18:49:38 +0200734 return NULL;
735}
736
737/* same as above but protected by the server lock.
Willy Tarreau62ac84f2017-11-05 10:11:13 +0100738 *
739 * Please do NOT place any return statement in this function and only leave
Olivier Houchard910b2bc2018-07-17 18:49:38 +0200740 * via the out label. NOTE THAT THIS FUNCTION DOESN'T LOCK, YOU PROBABLY WANT
741 * TO USE event_srv_chk_w() instead.
Willy Tarreaubaaee002006-06-26 02:48:02 +0200742 */
Olivier Houchard910b2bc2018-07-17 18:49:38 +0200743static void __event_srv_chk_w(struct conn_stream *cs)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200744{
Olivier Houchard9aaf7782017-09-13 18:30:23 +0200745 struct connection *conn = cs->conn;
746 struct check *check = cs->data;
Simon Horman4a741432013-02-23 15:35:38 +0900747 struct server *s = check->server;
Simon Horman4a741432013-02-23 15:35:38 +0900748 struct task *t = check->task;
Willy Tarreaufb56aab2012-09-28 14:40:02 +0200749
Willy Tarreau6aaa1b82013-12-11 17:09:34 +0100750 if (unlikely(check->result == CHK_RES_FAILED))
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100751 goto out_wakeup;
752
Olivier Houchard910b2bc2018-07-17 18:49:38 +0200753 if (conn->flags & CO_FL_HANDSHAKE) {
Olivier Houchard06f68112019-03-28 17:32:42 +0100754 if (!(conn->flags & CO_FL_ERROR))
755 cs->conn->mux->subscribe(cs, SUB_RETRY_SEND, &check->wait_list);
Olivier Houchard910b2bc2018-07-17 18:49:38 +0200756 goto out;
757 }
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100758
Willy Tarreau20a18342013-12-05 00:31:46 +0100759 if (retrieve_errno_from_socket(conn)) {
Willy Tarreaub5259bf2017-10-04 14:47:29 +0200760 chk_report_conn_err(check, errno, 0);
Willy Tarreau20a18342013-12-05 00:31:46 +0100761 goto out_wakeup;
762 }
Krzysztof Piotr Oledzki6492db52010-01-02 22:03:01 +0100763
Willy Tarreaubbae3f02017-08-30 09:59:52 +0200764 if (conn->flags & CO_FL_SOCK_WR_SH) {
Willy Tarreau20a18342013-12-05 00:31:46 +0100765 /* if the output is closed, we can't do anything */
766 conn->flags |= CO_FL_ERROR;
Willy Tarreaub5259bf2017-10-04 14:47:29 +0200767 chk_report_conn_err(check, 0, 0);
Willy Tarreau20a18342013-12-05 00:31:46 +0100768 goto out_wakeup;
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200769 }
Willy Tarreau6996e152007-04-30 14:37:43 +0200770
Willy Tarreau06559ac2013-12-05 01:53:08 +0100771 /* here, we know that the connection is established. That's enough for
772 * a pure TCP check.
773 */
774 if (!check->type)
775 goto out_wakeup;
776
Willy Tarreauc09572f2017-10-04 11:58:22 +0200777 /* wake() will take care of calling tcpcheck_main() */
Willy Tarreau62ac84f2017-11-05 10:11:13 +0100778 if (check->type == PR_O2_TCPCHK_CHK)
Olivier Houchard910b2bc2018-07-17 18:49:38 +0200779 goto out;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +0200780
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200781 if (b_data(&check->bo)) {
Olivier Houcharded0f2072018-08-16 15:41:52 +0200782 cs->conn->mux->snd_buf(cs, &check->bo, b_data(&check->bo), 0);
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200783 b_realign_if_empty(&check->bo);
Willy Tarreau4ff3b892017-10-16 15:17:17 +0200784 if (conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR) {
Willy Tarreaub5259bf2017-10-04 14:47:29 +0200785 chk_report_conn_err(check, errno, 0);
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100786 goto out_wakeup;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200787 }
Olivier Houchard910b2bc2018-07-17 18:49:38 +0200788 if (b_data(&check->bo)) {
Willy Tarreau4f6516d2018-12-19 13:59:17 +0100789 conn->mux->subscribe(cs, SUB_RETRY_SEND, &check->wait_list);
Olivier Houchard910b2bc2018-07-17 18:49:38 +0200790 goto out;
791 }
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100792 }
Willy Tarreau6996e152007-04-30 14:37:43 +0200793
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100794 /* full request sent, we allow up to <timeout.check> if nonzero for a response */
795 if (s->proxy->timeout.check) {
796 t->expire = tick_add_ifset(now_ms, s->proxy->timeout.check);
797 task_queue(t);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200798 }
Olivier Houchard53216e72018-10-10 15:46:36 +0200799 goto out;
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100800
Willy Tarreau83749182007-04-15 20:56:27 +0200801 out_wakeup:
Willy Tarreaufdccded2008-08-29 18:19:04 +0200802 task_wakeup(t, TASK_WOKEN_IO);
Olivier Houchard910b2bc2018-07-17 18:49:38 +0200803 out:
804 return;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200805}
806
Willy Tarreaubaaee002006-06-26 02:48:02 +0200807/*
Willy Tarreauf3c69202006-07-09 16:42:34 +0200808 * This function is used only for server health-checks. It handles the server's
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +0200809 * reply to an HTTP request, SSL HELLO or MySQL client Auth. It calls
Simon Horman4a741432013-02-23 15:35:38 +0900810 * set_server_check_status() to update check->status, check->duration
811 * and check->result.
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200812
813 * The set_server_check_status function is called with HCHK_STATUS_L7OKD if
814 * an HTTP server replies HTTP 2xx or 3xx (valid responses), if an SMTP server
815 * returns 2xx, HCHK_STATUS_L6OK if an SSL server returns at least 5 bytes in
816 * response to an SSL HELLO (the principle is that this is enough to
817 * distinguish between an SSL server and a pure TCP relay). All other cases will
818 * call it with a proper error status like HCHK_STATUS_L7STS, HCHK_STATUS_L6RSP,
819 * etc.
Willy Tarreau62ac84f2017-11-05 10:11:13 +0100820 *
821 * Please do NOT place any return statement in this function and only leave
Olivier Houchardaf4021e2018-08-09 13:06:55 +0200822 * via the out label.
823 *
824 * This must be called with the server lock held.
Willy Tarreaubaaee002006-06-26 02:48:02 +0200825 */
Olivier Houchardaf4021e2018-08-09 13:06:55 +0200826static void __event_srv_chk_r(struct conn_stream *cs)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200827{
Olivier Houchard9aaf7782017-09-13 18:30:23 +0200828 struct connection *conn = cs->conn;
829 struct check *check = cs->data;
Simon Horman4a741432013-02-23 15:35:38 +0900830 struct server *s = check->server;
831 struct task *t = check->task;
Krzysztof Piotr Oledzkif7089f52009-10-10 21:06:49 +0200832 char *desc;
Willy Tarreau03938182010-03-17 21:52:07 +0100833 int done;
Gabor Lekenyb4c81e42010-09-29 18:17:05 +0200834 unsigned short msglen;
Willy Tarreau83749182007-04-15 20:56:27 +0200835
Willy Tarreau6aaa1b82013-12-11 17:09:34 +0100836 if (unlikely(check->result == CHK_RES_FAILED))
Willy Tarreau83749182007-04-15 20:56:27 +0200837 goto out_wakeup;
Willy Tarreau83749182007-04-15 20:56:27 +0200838
Olivier Houchardaf4021e2018-08-09 13:06:55 +0200839 if (conn->flags & CO_FL_HANDSHAKE) {
Olivier Houchard06f68112019-03-28 17:32:42 +0100840 if (!(conn->flags & CO_FL_ERROR))
841 cs->conn->mux->subscribe(cs, SUB_RETRY_RECV, &check->wait_list);
Olivier Houchardaf4021e2018-08-09 13:06:55 +0200842 goto out;
843 }
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +0200844
Willy Tarreauc09572f2017-10-04 11:58:22 +0200845 /* wake() will take care of calling tcpcheck_main() */
Willy Tarreau62ac84f2017-11-05 10:11:13 +0100846 if (check->type == PR_O2_TCPCHK_CHK)
Olivier Houchardaf4021e2018-08-09 13:06:55 +0200847 goto out;
Willy Tarreaufb56aab2012-09-28 14:40:02 +0200848
Willy Tarreau83749182007-04-15 20:56:27 +0200849 /* Warning! Linux returns EAGAIN on SO_ERROR if data are still available
850 * but the connection was closed on the remote end. Fortunately, recv still
851 * works correctly and we don't need to do the getsockopt() on linux.
852 */
Nick Chalk57b1bf72010-03-16 15:50:46 +0000853
854 /* Set buffer to point to the end of the data already read, and check
855 * that there is free space remaining. If the buffer is full, proceed
856 * with running the checks without attempting another socket read.
857 */
Nick Chalk57b1bf72010-03-16 15:50:46 +0000858
Willy Tarreau03938182010-03-17 21:52:07 +0100859 done = 0;
Nick Chalk57b1bf72010-03-16 15:50:46 +0000860
Olivier Houchard511efea2018-08-16 15:30:32 +0200861 cs->conn->mux->rcv_buf(cs, &check->bi, b_size(&check->bi), 0);
Willy Tarreau4ff3b892017-10-16 15:17:17 +0200862 if (conn->flags & (CO_FL_ERROR | CO_FL_SOCK_RD_SH) || cs->flags & CS_FL_ERROR) {
Willy Tarreau03938182010-03-17 21:52:07 +0100863 done = 1;
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200864 if ((conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR) && !b_data(&check->bi)) {
Willy Tarreauf1503172012-09-28 19:39:36 +0200865 /* Report network errors only if we got no other data. Otherwise
866 * we'll let the upper layers decide whether the response is OK
867 * or not. It is very common that an RST sent by the server is
868 * reported as an error just after the last data chunk.
869 */
Willy Tarreaub5259bf2017-10-04 14:47:29 +0200870 chk_report_conn_err(check, errno, 0);
Willy Tarreauc1a07962010-03-16 20:55:43 +0100871 goto out_wakeup;
872 }
Willy Tarreaubaaee002006-06-26 02:48:02 +0200873 }
874
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100875
Willy Tarreau03938182010-03-17 21:52:07 +0100876 /* Intermediate or complete response received.
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200877 * Terminate string in b_head(&check->bi) buffer.
Willy Tarreau03938182010-03-17 21:52:07 +0100878 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200879 if (b_data(&check->bi) < b_size(&check->bi))
880 b_head(&check->bi)[b_data(&check->bi)] = '\0';
Willy Tarreau03938182010-03-17 21:52:07 +0100881 else {
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200882 b_head(&check->bi)[b_data(&check->bi) - 1] = '\0';
Willy Tarreau03938182010-03-17 21:52:07 +0100883 done = 1; /* buffer full, don't wait for more data */
884 }
Krzysztof Piotr Oledzkif7089f52009-10-10 21:06:49 +0200885
Nick Chalk57b1bf72010-03-16 15:50:46 +0000886 /* Run the checks... */
Simon Horman4a741432013-02-23 15:35:38 +0900887 switch (check->type) {
Willy Tarreau1620ec32011-08-06 17:05:02 +0200888 case PR_O2_HTTP_CHK:
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200889 if (!done && b_data(&check->bi) < strlen("HTTP/1.0 000\r"))
Willy Tarreau03938182010-03-17 21:52:07 +0100890 goto wait_more_data;
891
Willy Tarreauc7dd71a2007-11-30 08:33:21 +0100892 /* Check if the server speaks HTTP 1.X */
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200893 if ((b_data(&check->bi) < strlen("HTTP/1.0 000\r")) ||
894 (memcmp(b_head(&check->bi), "HTTP/1.", 7) != 0 ||
895 (*(b_head(&check->bi) + 12) != ' ' && *(b_head(&check->bi) + 12) != '\r')) ||
896 !isdigit((unsigned char) *(b_head(&check->bi) + 9)) || !isdigit((unsigned char) *(b_head(&check->bi) + 10)) ||
897 !isdigit((unsigned char) *(b_head(&check->bi) + 11))) {
898 cut_crlf(b_head(&check->bi));
899 set_server_check_status(check, HCHK_STATUS_L7RSP, b_head(&check->bi));
Krzysztof Piotr Oledzkif7089f52009-10-10 21:06:49 +0200900
Willy Tarreauc7dd71a2007-11-30 08:33:21 +0100901 goto out_wakeup;
902 }
903
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200904 check->code = str2uic(b_head(&check->bi) + 9);
905 desc = ltrim(b_head(&check->bi) + 12, ' ');
Christopher Fauletc2a89a62017-10-23 15:54:24 +0200906
Willy Tarreaubd741542010-03-16 18:46:54 +0100907 if ((s->proxy->options & PR_O_DISABLE404) &&
Emeric Brun52a91d32017-08-31 14:41:55 +0200908 (s->next_state != SRV_ST_STOPPED) && (check->code == 404)) {
Nick Chalk57b1bf72010-03-16 15:50:46 +0000909 /* 404 may be accepted as "stopping" only if the server was up */
910 cut_crlf(desc);
Simon Horman4a741432013-02-23 15:35:38 +0900911 set_server_check_status(check, HCHK_STATUS_L7OKCD, desc);
Nick Chalk57b1bf72010-03-16 15:50:46 +0000912 }
Willy Tarreaubd741542010-03-16 18:46:54 +0100913 else if (s->proxy->options2 & PR_O2_EXP_TYPE) {
914 /* Run content verification check... We know we have at least 13 chars */
915 if (!httpchk_expect(s, done))
916 goto wait_more_data;
917 }
918 /* check the reply : HTTP/1.X 2xx and 3xx are OK */
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200919 else if (*(b_head(&check->bi) + 9) == '2' || *(b_head(&check->bi) + 9) == '3') {
Willy Tarreaubd741542010-03-16 18:46:54 +0100920 cut_crlf(desc);
Simon Horman4a741432013-02-23 15:35:38 +0900921 set_server_check_status(check, HCHK_STATUS_L7OKD, desc);
Willy Tarreaubd741542010-03-16 18:46:54 +0100922 }
Nick Chalk57b1bf72010-03-16 15:50:46 +0000923 else {
924 cut_crlf(desc);
Simon Horman4a741432013-02-23 15:35:38 +0900925 set_server_check_status(check, HCHK_STATUS_L7STS, desc);
Nick Chalk57b1bf72010-03-16 15:50:46 +0000926 }
Willy Tarreau1620ec32011-08-06 17:05:02 +0200927 break;
928
929 case PR_O2_SSL3_CHK:
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200930 if (!done && b_data(&check->bi) < 5)
Willy Tarreau03938182010-03-17 21:52:07 +0100931 goto wait_more_data;
932
Willy Tarreauc7dd71a2007-11-30 08:33:21 +0100933 /* Check for SSLv3 alert or handshake */
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200934 if ((b_data(&check->bi) >= 5) && (*b_head(&check->bi) == 0x15 || *b_head(&check->bi) == 0x16))
Simon Horman4a741432013-02-23 15:35:38 +0900935 set_server_check_status(check, HCHK_STATUS_L6OK, NULL);
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200936 else
Simon Horman4a741432013-02-23 15:35:38 +0900937 set_server_check_status(check, HCHK_STATUS_L6RSP, NULL);
Willy Tarreau1620ec32011-08-06 17:05:02 +0200938 break;
939
940 case PR_O2_SMTP_CHK:
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200941 if (!done && b_data(&check->bi) < strlen("000\r"))
Willy Tarreau03938182010-03-17 21:52:07 +0100942 goto wait_more_data;
943
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200944 /* Check if the server speaks SMTP */
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200945 if ((b_data(&check->bi) < strlen("000\r")) ||
946 (*(b_head(&check->bi) + 3) != ' ' && *(b_head(&check->bi) + 3) != '\r') ||
947 !isdigit((unsigned char) *b_head(&check->bi)) || !isdigit((unsigned char) *(b_head(&check->bi) + 1)) ||
948 !isdigit((unsigned char) *(b_head(&check->bi) + 2))) {
949 cut_crlf(b_head(&check->bi));
950 set_server_check_status(check, HCHK_STATUS_L7RSP, b_head(&check->bi));
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200951 goto out_wakeup;
952 }
953
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200954 check->code = str2uic(b_head(&check->bi));
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200955
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200956 desc = ltrim(b_head(&check->bi) + 3, ' ');
Krzysztof Piotr Oledzkif7089f52009-10-10 21:06:49 +0200957 cut_crlf(desc);
958
Willy Tarreauc7dd71a2007-11-30 08:33:21 +0100959 /* Check for SMTP code 2xx (should be 250) */
Willy Tarreauc9fa0482018-07-10 17:43:27 +0200960 if (*b_head(&check->bi) == '2')
Simon Horman4a741432013-02-23 15:35:38 +0900961 set_server_check_status(check, HCHK_STATUS_L7OKD, desc);
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200962 else
Simon Horman4a741432013-02-23 15:35:38 +0900963 set_server_check_status(check, HCHK_STATUS_L7STS, desc);
Willy Tarreau1620ec32011-08-06 17:05:02 +0200964 break;
965
Simon Hormana2b9dad2013-02-12 10:45:54 +0900966 case PR_O2_LB_AGENT_CHK: {
Willy Tarreau81f5d942013-12-09 20:51:51 +0100967 int status = HCHK_STATUS_CHECKED;
968 const char *hs = NULL; /* health status */
969 const char *as = NULL; /* admin status */
970 const char *ps = NULL; /* performance status */
Nenad Merdanovic174dd372016-04-24 23:10:06 +0200971 const char *cs = NULL; /* maxconn */
Willy Tarreau81f5d942013-12-09 20:51:51 +0100972 const char *err = NULL; /* first error to report */
973 const char *wrn = NULL; /* first warning to report */
974 char *cmd, *p;
Simon Hormana2b9dad2013-02-12 10:45:54 +0900975
Willy Tarreau81f5d942013-12-09 20:51:51 +0100976 /* We're getting an agent check response. The agent could
977 * have been disabled in the mean time with a long check
978 * still pending. It is important that we ignore the whole
979 * response.
980 */
981 if (!(check->server->agent.state & CHK_ST_ENABLED))
982 break;
983
984 /* The agent supports strings made of a single line ended by the
985 * first CR ('\r') or LF ('\n'). This line is composed of words
986 * delimited by spaces (' '), tabs ('\t'), or commas (','). The
987 * line may optionally contained a description of a state change
988 * after a sharp ('#'), which is only considered if a health state
989 * is announced.
990 *
991 * Words may be composed of :
992 * - a numeric weight suffixed by the percent character ('%').
993 * - a health status among "up", "down", "stopped", and "fail".
994 * - an admin status among "ready", "drain", "maint".
995 *
996 * These words may appear in any order. If multiple words of the
997 * same category appear, the last one wins.
998 */
999
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001000 p = b_head(&check->bi);
Willy Tarreau9809b782013-12-11 21:40:11 +01001001 while (*p && *p != '\n' && *p != '\r')
1002 p++;
1003
1004 if (!*p) {
1005 if (!done)
1006 goto wait_more_data;
Simon Hormana2b9dad2013-02-12 10:45:54 +09001007
Willy Tarreau9809b782013-12-11 21:40:11 +01001008 /* at least inform the admin that the agent is mis-behaving */
1009 set_server_check_status(check, check->status, "Ignoring incomplete line from agent");
1010 break;
1011 }
Willy Tarreau81f5d942013-12-09 20:51:51 +01001012
Willy Tarreau9809b782013-12-11 21:40:11 +01001013 *p = 0;
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001014 cmd = b_head(&check->bi);
Simon Hormana2b9dad2013-02-12 10:45:54 +09001015
Willy Tarreau81f5d942013-12-09 20:51:51 +01001016 while (*cmd) {
1017 /* look for next word */
1018 if (*cmd == ' ' || *cmd == '\t' || *cmd == ',') {
1019 cmd++;
1020 continue;
1021 }
Simon Horman671b6f02013-11-25 10:46:39 +09001022
Willy Tarreau81f5d942013-12-09 20:51:51 +01001023 if (*cmd == '#') {
1024 /* this is the beginning of a health status description,
1025 * skip the sharp and blanks.
1026 */
1027 cmd++;
1028 while (*cmd == '\t' || *cmd == ' ')
1029 cmd++;
Simon Horman671b6f02013-11-25 10:46:39 +09001030 break;
Simon Hormana2b9dad2013-02-12 10:45:54 +09001031 }
Willy Tarreau81f5d942013-12-09 20:51:51 +01001032
1033 /* find the end of the word so that we have a null-terminated
1034 * word between <cmd> and <p>.
1035 */
1036 p = cmd + 1;
1037 while (*p && *p != '\t' && *p != ' ' && *p != '\n' && *p != ',')
1038 p++;
1039 if (*p)
1040 *p++ = 0;
1041
1042 /* first, health statuses */
1043 if (strcasecmp(cmd, "up") == 0) {
1044 check->health = check->rise + check->fall - 1;
Simon Hormana2b9dad2013-02-12 10:45:54 +09001045 status = HCHK_STATUS_L7OKD;
Willy Tarreau81f5d942013-12-09 20:51:51 +01001046 hs = cmd;
1047 }
1048 else if (strcasecmp(cmd, "down") == 0) {
1049 check->health = 0;
1050 status = HCHK_STATUS_L7STS;
1051 hs = cmd;
Simon Hormana2b9dad2013-02-12 10:45:54 +09001052 }
Willy Tarreau81f5d942013-12-09 20:51:51 +01001053 else if (strcasecmp(cmd, "stopped") == 0) {
1054 check->health = 0;
1055 status = HCHK_STATUS_L7STS;
1056 hs = cmd;
1057 }
1058 else if (strcasecmp(cmd, "fail") == 0) {
1059 check->health = 0;
1060 status = HCHK_STATUS_L7STS;
1061 hs = cmd;
1062 }
1063 /* admin statuses */
1064 else if (strcasecmp(cmd, "ready") == 0) {
1065 as = cmd;
1066 }
1067 else if (strcasecmp(cmd, "drain") == 0) {
1068 as = cmd;
1069 }
1070 else if (strcasecmp(cmd, "maint") == 0) {
1071 as = cmd;
1072 }
Nenad Merdanovic174dd372016-04-24 23:10:06 +02001073 /* try to parse a weight here and keep the last one */
Willy Tarreau81f5d942013-12-09 20:51:51 +01001074 else if (isdigit((unsigned char)*cmd) && strchr(cmd, '%') != NULL) {
1075 ps = cmd;
1076 }
Nenad Merdanovic174dd372016-04-24 23:10:06 +02001077 /* try to parse a maxconn here */
1078 else if (strncasecmp(cmd, "maxconn:", strlen("maxconn:")) == 0) {
1079 cs = cmd;
1080 }
Willy Tarreau81f5d942013-12-09 20:51:51 +01001081 else {
1082 /* keep a copy of the first error */
1083 if (!err)
1084 err = cmd;
1085 }
1086 /* skip to next word */
1087 cmd = p;
1088 }
1089 /* here, cmd points either to \0 or to the beginning of a
1090 * description. Skip possible leading spaces.
1091 */
1092 while (*cmd == ' ' || *cmd == '\n')
1093 cmd++;
1094
1095 /* First, update the admin status so that we avoid sending other
1096 * possibly useless warnings and can also update the health if
1097 * present after going back up.
1098 */
1099 if (as) {
1100 if (strcasecmp(as, "drain") == 0)
1101 srv_adm_set_drain(check->server);
1102 else if (strcasecmp(as, "maint") == 0)
1103 srv_adm_set_maint(check->server);
1104 else
1105 srv_adm_set_ready(check->server);
Simon Hormana2b9dad2013-02-12 10:45:54 +09001106 }
1107
Willy Tarreau81f5d942013-12-09 20:51:51 +01001108 /* now change weights */
1109 if (ps) {
1110 const char *msg;
1111
1112 msg = server_parse_weight_change_request(s, ps);
1113 if (!wrn || !*wrn)
1114 wrn = msg;
1115 }
1116
Nenad Merdanovic174dd372016-04-24 23:10:06 +02001117 if (cs) {
1118 const char *msg;
1119
1120 cs += strlen("maxconn:");
1121
1122 msg = server_parse_maxconn_change_request(s, cs);
1123 if (!wrn || !*wrn)
1124 wrn = msg;
1125 }
1126
Willy Tarreau81f5d942013-12-09 20:51:51 +01001127 /* and finally health status */
1128 if (hs) {
1129 /* We'll report some of the warnings and errors we have
1130 * here. Down reports are critical, we leave them untouched.
1131 * Lack of report, or report of 'UP' leaves the room for
1132 * ERR first, then WARN.
Simon Hormana2b9dad2013-02-12 10:45:54 +09001133 */
Willy Tarreau81f5d942013-12-09 20:51:51 +01001134 const char *msg = cmd;
Willy Tarreau83061a82018-07-13 11:56:34 +02001135 struct buffer *t;
Willy Tarreau81f5d942013-12-09 20:51:51 +01001136
1137 if (!*msg || status == HCHK_STATUS_L7OKD) {
1138 if (err && *err)
1139 msg = err;
1140 else if (wrn && *wrn)
1141 msg = wrn;
Simon Hormana2b9dad2013-02-12 10:45:54 +09001142 }
Willy Tarreau81f5d942013-12-09 20:51:51 +01001143
1144 t = get_trash_chunk();
1145 chunk_printf(t, "via agent : %s%s%s%s",
1146 hs, *msg ? " (" : "",
1147 msg, *msg ? ")" : "");
1148
Willy Tarreau843b7cb2018-07-13 10:54:26 +02001149 set_server_check_status(check, status, t->area);
Simon Hormana2b9dad2013-02-12 10:45:54 +09001150 }
Willy Tarreau81f5d942013-12-09 20:51:51 +01001151 else if (err && *err) {
1152 /* No status change but we'd like to report something odd.
1153 * Just report the current state and copy the message.
1154 */
1155 chunk_printf(&trash, "agent reports an error : %s", err);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02001156 set_server_check_status(check, status/*check->status*/,
1157 trash.area);
Simon Hormana2b9dad2013-02-12 10:45:54 +09001158
Willy Tarreau81f5d942013-12-09 20:51:51 +01001159 }
1160 else if (wrn && *wrn) {
1161 /* No status change but we'd like to report something odd.
1162 * Just report the current state and copy the message.
1163 */
1164 chunk_printf(&trash, "agent warns : %s", wrn);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02001165 set_server_check_status(check, status/*check->status*/,
1166 trash.area);
Willy Tarreau81f5d942013-12-09 20:51:51 +01001167 }
1168 else
1169 set_server_check_status(check, status, NULL);
Simon Hormana2b9dad2013-02-12 10:45:54 +09001170 break;
1171 }
1172
Willy Tarreau1620ec32011-08-06 17:05:02 +02001173 case PR_O2_PGSQL_CHK:
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001174 if (!done && b_data(&check->bi) < 9)
Rauf Kuliyev38b41562011-01-04 15:14:13 +01001175 goto wait_more_data;
1176
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001177 if (b_head(&check->bi)[0] == 'R') {
Simon Horman4a741432013-02-23 15:35:38 +09001178 set_server_check_status(check, HCHK_STATUS_L7OKD, "PostgreSQL server is ok");
Rauf Kuliyev38b41562011-01-04 15:14:13 +01001179 }
1180 else {
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001181 if ((b_head(&check->bi)[0] == 'E') && (b_head(&check->bi)[5]!=0) && (b_head(&check->bi)[6]!=0))
1182 desc = &b_head(&check->bi)[6];
Rauf Kuliyev38b41562011-01-04 15:14:13 +01001183 else
1184 desc = "PostgreSQL unknown error";
1185
Simon Horman4a741432013-02-23 15:35:38 +09001186 set_server_check_status(check, HCHK_STATUS_L7STS, desc);
Rauf Kuliyev38b41562011-01-04 15:14:13 +01001187 }
Willy Tarreau1620ec32011-08-06 17:05:02 +02001188 break;
1189
1190 case PR_O2_REDIS_CHK:
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001191 if (!done && b_data(&check->bi) < 7)
Hervé COMMOWICKec032d62011-08-05 16:23:48 +02001192 goto wait_more_data;
1193
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001194 if (strcmp(b_head(&check->bi), "+PONG\r\n") == 0) {
Simon Horman4a741432013-02-23 15:35:38 +09001195 set_server_check_status(check, HCHK_STATUS_L7OKD, "Redis server is ok");
Hervé COMMOWICKec032d62011-08-05 16:23:48 +02001196 }
1197 else {
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001198 set_server_check_status(check, HCHK_STATUS_L7STS, b_head(&check->bi));
Hervé COMMOWICKec032d62011-08-05 16:23:48 +02001199 }
Willy Tarreau1620ec32011-08-06 17:05:02 +02001200 break;
1201
1202 case PR_O2_MYSQL_CHK:
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001203 if (!done && b_data(&check->bi) < 5)
Willy Tarreau03938182010-03-17 21:52:07 +01001204 goto wait_more_data;
1205
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001206 if (s->proxy->check_len == 0) { // old mode
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001207 if (*(b_head(&check->bi) + 4) != '\xff') {
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001208 /* We set the MySQL Version in description for information purpose
1209 * FIXME : it can be cool to use MySQL Version for other purpose,
1210 * like mark as down old MySQL server.
1211 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001212 if (b_data(&check->bi) > 51) {
1213 desc = ltrim(b_head(&check->bi) + 5, ' ');
Simon Horman4a741432013-02-23 15:35:38 +09001214 set_server_check_status(check, HCHK_STATUS_L7OKD, desc);
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001215 }
1216 else {
1217 if (!done)
1218 goto wait_more_data;
Emeric Brun9f0b4582017-10-23 14:39:51 +02001219
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001220 /* it seems we have a OK packet but without a valid length,
1221 * it must be a protocol error
1222 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001223 set_server_check_status(check, HCHK_STATUS_L7RSP, b_head(&check->bi));
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001224 }
Hervé COMMOWICK698ae002010-01-12 09:25:13 +01001225 }
1226 else {
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001227 /* An error message is attached in the Error packet */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001228 desc = ltrim(b_head(&check->bi) + 7, ' ');
Simon Horman4a741432013-02-23 15:35:38 +09001229 set_server_check_status(check, HCHK_STATUS_L7STS, desc);
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001230 }
1231 } else {
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001232 unsigned int first_packet_len = ((unsigned int) *b_head(&check->bi)) +
1233 (((unsigned int) *(b_head(&check->bi) + 1)) << 8) +
1234 (((unsigned int) *(b_head(&check->bi) + 2)) << 16);
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001235
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001236 if (b_data(&check->bi) == first_packet_len + 4) {
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001237 /* MySQL Error packet always begin with field_count = 0xff */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001238 if (*(b_head(&check->bi) + 4) != '\xff') {
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001239 /* We have only one MySQL packet and it is a Handshake Initialization packet
1240 * but we need to have a second packet to know if it is alright
1241 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001242 if (!done && b_data(&check->bi) < first_packet_len + 5)
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001243 goto wait_more_data;
1244 }
1245 else {
1246 /* We have only one packet and it is an Error packet,
1247 * an error message is attached, so we can display it
1248 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001249 desc = &b_head(&check->bi)[7];
Christopher Faulet767a84b2017-11-24 16:50:31 +01001250 //ha_warning("onlyoneERR: %s\n", desc);
Simon Horman4a741432013-02-23 15:35:38 +09001251 set_server_check_status(check, HCHK_STATUS_L7STS, desc);
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001252 }
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001253 } else if (b_data(&check->bi) > first_packet_len + 4) {
1254 unsigned int second_packet_len = ((unsigned int) *(b_head(&check->bi) + first_packet_len + 4)) +
1255 (((unsigned int) *(b_head(&check->bi) + first_packet_len + 5)) << 8) +
1256 (((unsigned int) *(b_head(&check->bi) + first_packet_len + 6)) << 16);
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001257
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001258 if (b_data(&check->bi) == first_packet_len + 4 + second_packet_len + 4 ) {
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001259 /* We have 2 packets and that's good */
1260 /* Check if the second packet is a MySQL Error packet or not */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001261 if (*(b_head(&check->bi) + first_packet_len + 8) != '\xff') {
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001262 /* No error packet */
1263 /* We set the MySQL Version in description for information purpose */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001264 desc = &b_head(&check->bi)[5];
Christopher Faulet767a84b2017-11-24 16:50:31 +01001265 //ha_warning("2packetOK: %s\n", desc);
Simon Horman4a741432013-02-23 15:35:38 +09001266 set_server_check_status(check, HCHK_STATUS_L7OKD, desc);
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001267 }
1268 else {
1269 /* An error message is attached in the Error packet
1270 * so we can display it ! :)
1271 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001272 desc = &b_head(&check->bi)[first_packet_len+11];
Christopher Faulet767a84b2017-11-24 16:50:31 +01001273 //ha_warning("2packetERR: %s\n", desc);
Simon Horman4a741432013-02-23 15:35:38 +09001274 set_server_check_status(check, HCHK_STATUS_L7STS, desc);
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001275 }
1276 }
1277 }
1278 else {
Willy Tarreau03938182010-03-17 21:52:07 +01001279 if (!done)
1280 goto wait_more_data;
Emeric Brun9f0b4582017-10-23 14:39:51 +02001281
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001282 /* it seems we have a Handshake Initialization packet but without a valid length,
Hervé COMMOWICK698ae002010-01-12 09:25:13 +01001283 * it must be a protocol error
1284 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001285 desc = &b_head(&check->bi)[5];
Christopher Faulet767a84b2017-11-24 16:50:31 +01001286 //ha_warning("protoerr: %s\n", desc);
Simon Horman4a741432013-02-23 15:35:38 +09001287 set_server_check_status(check, HCHK_STATUS_L7RSP, desc);
Hervé COMMOWICK698ae002010-01-12 09:25:13 +01001288 }
1289 }
Willy Tarreau1620ec32011-08-06 17:05:02 +02001290 break;
1291
1292 case PR_O2_LDAP_CHK:
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001293 if (!done && b_data(&check->bi) < 14)
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001294 goto wait_more_data;
1295
1296 /* Check if the server speaks LDAP (ASN.1/BER)
1297 * http://en.wikipedia.org/wiki/Basic_Encoding_Rules
1298 * http://tools.ietf.org/html/rfc4511
1299 */
1300
1301 /* http://tools.ietf.org/html/rfc4511#section-4.1.1
1302 * LDAPMessage: 0x30: SEQUENCE
1303 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001304 if ((b_data(&check->bi) < 14) || (*(b_head(&check->bi)) != '\x30')) {
Simon Horman4a741432013-02-23 15:35:38 +09001305 set_server_check_status(check, HCHK_STATUS_L7RSP, "Not LDAPv3 protocol");
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001306 }
1307 else {
1308 /* size of LDAPMessage */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001309 msglen = (*(b_head(&check->bi) + 1) & 0x80) ? (*(b_head(&check->bi) + 1) & 0x7f) : 0;
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001310
1311 /* http://tools.ietf.org/html/rfc4511#section-4.2.2
1312 * messageID: 0x02 0x01 0x01: INTEGER 1
1313 * protocolOp: 0x61: bindResponse
1314 */
1315 if ((msglen > 2) ||
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001316 (memcmp(b_head(&check->bi) + 2 + msglen, "\x02\x01\x01\x61", 4) != 0)) {
Simon Horman4a741432013-02-23 15:35:38 +09001317 set_server_check_status(check, HCHK_STATUS_L7RSP, "Not LDAPv3 protocol");
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001318 goto out_wakeup;
1319 }
1320
1321 /* size of bindResponse */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001322 msglen += (*(b_head(&check->bi) + msglen + 6) & 0x80) ? (*(b_head(&check->bi) + msglen + 6) & 0x7f) : 0;
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001323
1324 /* http://tools.ietf.org/html/rfc4511#section-4.1.9
1325 * ldapResult: 0x0a 0x01: ENUMERATION
1326 */
1327 if ((msglen > 4) ||
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001328 (memcmp(b_head(&check->bi) + 7 + msglen, "\x0a\x01", 2) != 0)) {
Simon Horman4a741432013-02-23 15:35:38 +09001329 set_server_check_status(check, HCHK_STATUS_L7RSP, "Not LDAPv3 protocol");
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001330 goto out_wakeup;
1331 }
1332
1333 /* http://tools.ietf.org/html/rfc4511#section-4.1.9
1334 * resultCode
1335 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001336 check->code = *(b_head(&check->bi) + msglen + 9);
Simon Horman4a741432013-02-23 15:35:38 +09001337 if (check->code) {
1338 set_server_check_status(check, HCHK_STATUS_L7STS, "See RFC: http://tools.ietf.org/html/rfc4511#section-4.1.9");
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001339 } else {
Simon Horman4a741432013-02-23 15:35:38 +09001340 set_server_check_status(check, HCHK_STATUS_L7OKD, "Success");
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001341 }
1342 }
Willy Tarreau1620ec32011-08-06 17:05:02 +02001343 break;
1344
Christopher Fauletba7bc162016-11-07 21:07:38 +01001345 case PR_O2_SPOP_CHK: {
1346 unsigned int framesz;
1347 char err[HCHK_DESC_LEN];
1348
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001349 if (!done && b_data(&check->bi) < 4)
Christopher Fauletba7bc162016-11-07 21:07:38 +01001350 goto wait_more_data;
1351
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001352 memcpy(&framesz, b_head(&check->bi), 4);
Christopher Fauletba7bc162016-11-07 21:07:38 +01001353 framesz = ntohl(framesz);
1354
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001355 if (!done && b_data(&check->bi) < (4+framesz))
Christopher Fauletba7bc162016-11-07 21:07:38 +01001356 goto wait_more_data;
1357
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001358 if (!spoe_handle_healthcheck_response(b_head(&check->bi)+4, framesz, err, HCHK_DESC_LEN-1))
Christopher Fauletba7bc162016-11-07 21:07:38 +01001359 set_server_check_status(check, HCHK_STATUS_L7OKD, "SPOA server is ok");
1360 else
1361 set_server_check_status(check, HCHK_STATUS_L7STS, err);
1362 break;
1363 }
1364
Willy Tarreau1620ec32011-08-06 17:05:02 +02001365 default:
Willy Tarreau06559ac2013-12-05 01:53:08 +01001366 /* for other checks (eg: pure TCP), delegate to the main task */
Willy Tarreau1620ec32011-08-06 17:05:02 +02001367 break;
1368 } /* switch */
Willy Tarreau83749182007-04-15 20:56:27 +02001369
Willy Tarreauc7dd71a2007-11-30 08:33:21 +01001370 out_wakeup:
Willy Tarreau25e2ab52013-12-04 11:17:05 +01001371 /* collect possible new errors */
Willy Tarreau4ff3b892017-10-16 15:17:17 +02001372 if (conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR)
Willy Tarreaub5259bf2017-10-04 14:47:29 +02001373 chk_report_conn_err(check, 0, 0);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001374
Nick Chalk57b1bf72010-03-16 15:50:46 +00001375 /* Reset the check buffer... */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001376 *b_head(&check->bi) = '\0';
1377 b_reset(&check->bi);
Nick Chalk57b1bf72010-03-16 15:50:46 +00001378
Steven Davidovitz544d4812017-03-08 11:06:20 -08001379 /* Close the connection... We still attempt to nicely close if,
1380 * for instance, SSL needs to send a "close notify." Later, we perform
1381 * a hard close and reset the connection if some data are pending,
1382 * otherwise we end up with many TIME_WAITs and eat all the source port
1383 * range quickly. To avoid sending RSTs all the time, we first try to
1384 * drain pending data.
Willy Tarreaufd29cc52012-11-23 09:18:20 +01001385 */
Olivier Houchard8aa445d2019-07-02 16:35:18 +02001386 /* Call cs_shutr() first, to add the CO_FL_SOCK_RD_SH flag on the
1387 * connection, to make sure cs_shutw() will not lead to a shutdown()
1388 * that would provoke TIME_WAITs.
1389 */
1390 cs_shutr(cs, CS_SHR_DRAIN);
Willy Tarreauecdb3fe2017-10-05 15:25:48 +02001391 cs_shutw(cs, CS_SHW_NORMAL);
Willy Tarreau2b57cb82013-06-10 19:56:38 +02001392
Willy Tarreau25e2ab52013-12-04 11:17:05 +01001393 /* OK, let's not stay here forever */
Willy Tarreau6aaa1b82013-12-11 17:09:34 +01001394 if (check->result == CHK_RES_FAILED)
Willy Tarreau25e2ab52013-12-04 11:17:05 +01001395 conn->flags |= CO_FL_ERROR;
1396
Willy Tarreaufdccded2008-08-29 18:19:04 +02001397 task_wakeup(t, TASK_WOKEN_IO);
Olivier Houchardaf4021e2018-08-09 13:06:55 +02001398out:
Willy Tarreau3267d362012-08-17 23:53:56 +02001399 return;
Willy Tarreau03938182010-03-17 21:52:07 +01001400
1401 wait_more_data:
Willy Tarreau4f6516d2018-12-19 13:59:17 +01001402 cs->conn->mux->subscribe(cs, SUB_RETRY_RECV, &check->wait_list);
Olivier Houchardaf4021e2018-08-09 13:06:55 +02001403 goto out;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001404}
1405
Willy Tarreaufb56aab2012-09-28 14:40:02 +02001406/*
1407 * This function is used only for server health-checks. It handles connection
1408 * status updates including errors. If necessary, it wakes the check task up.
Willy Tarreau6bdcab02017-10-04 18:41:00 +02001409 * It returns 0 on normal cases, <0 if at least one close() has happened on the
1410 * connection (eg: reconnect).
Willy Tarreaufb56aab2012-09-28 14:40:02 +02001411 */
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001412static int wake_srv_chk(struct conn_stream *cs)
Willy Tarreau20bea422012-07-06 12:00:49 +02001413{
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001414 struct connection *conn = cs->conn;
1415 struct check *check = cs->data;
Olivier Houchard0923fa42019-01-11 18:43:04 +01001416 struct email_alertq *q = container_of(check, typeof(*q), check);
Willy Tarreau6bdcab02017-10-04 18:41:00 +02001417 int ret = 0;
Willy Tarreau20bea422012-07-06 12:00:49 +02001418
Olivier Houchard0923fa42019-01-11 18:43:04 +01001419 if (check->server)
1420 HA_SPIN_LOCK(SERVER_LOCK, &check->server->lock);
1421 else
1422 HA_SPIN_LOCK(EMAIL_ALERTS_LOCK, &q->lock);
Emeric Brunf6ba17d2017-11-02 14:35:27 +01001423
Willy Tarreauc09572f2017-10-04 11:58:22 +02001424 /* we may have to make progress on the TCP checks */
Willy Tarreau6bdcab02017-10-04 18:41:00 +02001425 if (check->type == PR_O2_TCPCHK_CHK) {
1426 ret = tcpcheck_main(check);
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001427 cs = check->cs;
Willy Tarreau543abd42018-09-20 11:25:12 +02001428 conn = cs->conn;
Willy Tarreau4f6516d2018-12-19 13:59:17 +01001429 } else if (!(check->wait_list.events & SUB_RETRY_SEND))
Olivier Houchard910b2bc2018-07-17 18:49:38 +02001430 __event_srv_chk_w(cs);
Willy Tarreauc09572f2017-10-04 11:58:22 +02001431
Willy Tarreau4ff3b892017-10-16 15:17:17 +02001432 if (unlikely(conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR)) {
Willy Tarreau02b0f582013-12-03 15:42:33 +01001433 /* We may get error reports bypassing the I/O handlers, typically
1434 * the case when sending a pure TCP check which fails, then the I/O
1435 * handlers above are not called. This is completely handled by the
Willy Tarreau25e2ab52013-12-04 11:17:05 +01001436 * main processing task so let's simply wake it up. If we get here,
1437 * we expect errno to still be valid.
1438 */
Willy Tarreaub5259bf2017-10-04 14:47:29 +02001439 chk_report_conn_err(check, errno, 0);
Willy Tarreau2d351b62013-12-05 02:36:25 +01001440 task_wakeup(check->task, TASK_WOKEN_IO);
1441 }
Olivier Houchard53216e72018-10-10 15:46:36 +02001442 else if (!(conn->flags & CO_FL_HANDSHAKE) && !check->type) {
Willy Tarreau3be293f2014-02-05 18:31:24 +01001443 /* we may get here if only a connection probe was required : we
1444 * don't have any data to send nor anything expected in response,
1445 * so the completion of the connection establishment is enough.
1446 */
1447 task_wakeup(check->task, TASK_WOKEN_IO);
1448 }
Willy Tarreau2d351b62013-12-05 02:36:25 +01001449
Willy Tarreau6aaa1b82013-12-11 17:09:34 +01001450 if (check->result != CHK_RES_UNKNOWN) {
Christopher Faulet774c4862019-01-21 14:15:50 +01001451 /* Check complete or aborted. If connection not yet closed do it
1452 * now and wake the check task up to be sure the result is
1453 * handled ASAP. */
Willy Tarreaud85c4852015-03-13 00:40:28 +01001454 conn_sock_drain(conn);
Willy Tarreaua553ae92017-10-05 18:52:17 +02001455 cs_close(cs);
Willy Tarreau6bdcab02017-10-04 18:41:00 +02001456 ret = -1;
Olivier Houchard865ed9b2019-07-02 17:42:22 +02001457 /* We may have been scheduled to run, and the
1458 * I/O handler expects to have a cs, so remove
1459 * the tasklet
1460 */
1461 tasklet_remove_from_tasklet_list(check->wait_list.tasklet);
Christopher Faulet774c4862019-01-21 14:15:50 +01001462 task_wakeup(check->task, TASK_WOKEN_IO);
Willy Tarreau2d351b62013-12-05 02:36:25 +01001463 }
Willy Tarreau6bdcab02017-10-04 18:41:00 +02001464
Olivier Houchard0923fa42019-01-11 18:43:04 +01001465 if (check->server)
1466 HA_SPIN_UNLOCK(SERVER_LOCK, &check->server->lock);
1467 else
1468 HA_SPIN_UNLOCK(EMAIL_ALERTS_LOCK, &q->lock);
Emeric Brunf6ba17d2017-11-02 14:35:27 +01001469
Willy Tarreau6bdcab02017-10-04 18:41:00 +02001470 /* if a connection got replaced, we must absolutely prevent the connection
1471 * handler from touching its fd, and perform the FD polling updates ourselves
1472 */
1473 if (ret < 0)
1474 conn_cond_update_polling(conn);
1475
1476 return ret;
Willy Tarreau20bea422012-07-06 12:00:49 +02001477}
1478
Willy Tarreaufb56aab2012-09-28 14:40:02 +02001479struct data_cb check_conn_cb = {
Willy Tarreaufb56aab2012-09-28 14:40:02 +02001480 .wake = wake_srv_chk,
Willy Tarreau8e0bb0a2016-11-24 16:58:12 +01001481 .name = "CHCK",
Willy Tarreaufb56aab2012-09-28 14:40:02 +02001482};
1483
Willy Tarreaubaaee002006-06-26 02:48:02 +02001484/*
Willy Tarreau2e993902011-10-31 11:53:20 +01001485 * updates the server's weight during a warmup stage. Once the final weight is
1486 * reached, the task automatically stops. Note that any server status change
1487 * must have updated s->last_change accordingly.
1488 */
Olivier Houchard9f6af332018-05-25 14:04:04 +02001489static struct task *server_warmup(struct task *t, void *context, unsigned short state)
Willy Tarreau2e993902011-10-31 11:53:20 +01001490{
Olivier Houchard9f6af332018-05-25 14:04:04 +02001491 struct server *s = context;
Willy Tarreau2e993902011-10-31 11:53:20 +01001492
1493 /* by default, plan on stopping the task */
1494 t->expire = TICK_ETERNITY;
Emeric Brun52a91d32017-08-31 14:41:55 +02001495 if ((s->next_admin & SRV_ADMF_MAINT) ||
1496 (s->next_state != SRV_ST_STARTING))
Willy Tarreau2e993902011-10-31 11:53:20 +01001497 return t;
1498
Willy Tarreau4fc49a92019-05-05 06:54:22 +02001499 HA_SPIN_LOCK(SERVER_LOCK, &s->lock);
1500
Willy Tarreau892337c2014-05-13 23:41:20 +02001501 /* recalculate the weights and update the state */
Willy Tarreau3ff577e2018-08-02 11:48:52 +02001502 server_recalc_eweight(s, 1);
Willy Tarreau2e993902011-10-31 11:53:20 +01001503
1504 /* probably that we can refill this server with a bit more connections */
Willy Tarreau4aac7db2014-05-16 11:48:10 +02001505 pendconn_grab_from_px(s);
Willy Tarreau2e993902011-10-31 11:53:20 +01001506
Willy Tarreau4fc49a92019-05-05 06:54:22 +02001507 HA_SPIN_UNLOCK(SERVER_LOCK, &s->lock);
1508
Willy Tarreau2e993902011-10-31 11:53:20 +01001509 /* get back there in 1 second or 1/20th of the slowstart interval,
1510 * whichever is greater, resulting in small 5% steps.
1511 */
Emeric Brun52a91d32017-08-31 14:41:55 +02001512 if (s->next_state == SRV_ST_STARTING)
Willy Tarreau2e993902011-10-31 11:53:20 +01001513 t->expire = tick_add(now_ms, MS_TO_TICKS(MAX(1000, s->slowstart / 20)));
1514 return t;
1515}
1516
Willy Tarreau894c6422017-10-04 15:58:52 +02001517/* returns the first NON-COMMENT tcp-check rule from list <list> or NULL if
1518 * none was found.
1519 */
1520static struct tcpcheck_rule *get_first_tcpcheck_rule(struct list *list)
1521{
1522 struct tcpcheck_rule *r;
1523
1524 list_for_each_entry(r, list, list) {
1525 if (r->action != TCPCHK_ACT_COMMENT)
1526 return r;
1527 }
1528 return NULL;
1529}
1530
Willy Tarreau2e993902011-10-31 11:53:20 +01001531/*
Simon Horman98637e52014-06-20 12:30:16 +09001532 * establish a server health-check that makes use of a connection.
Simon Hormanb00d17a2014-06-13 16:18:16 +09001533 *
1534 * It can return one of :
Willy Tarreaue7dff022015-04-03 01:14:29 +02001535 * - SF_ERR_NONE if everything's OK and tcpcheck_main() was not called
1536 * - SF_ERR_UP if if everything's OK and tcpcheck_main() was called
1537 * - SF_ERR_SRVTO if there are no more servers
1538 * - SF_ERR_SRVCL if the connection was refused by the server
1539 * - SF_ERR_PRXCOND if the connection has been limited by the proxy (maxconn)
1540 * - SF_ERR_RESOURCE if a system resource is lacking (eg: fd limits, ports, ...)
1541 * - SF_ERR_INTERNAL for any other purely internal errors
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02001542 * - SF_ERR_CHK_PORT if no port could be found to run a health check on an AF_INET* socket
Tim Düsterhus4896c442016-11-29 02:15:19 +01001543 * Additionally, in the case of SF_ERR_RESOURCE, an emergency log will be emitted.
Simon Hormanb00d17a2014-06-13 16:18:16 +09001544 * Note that we try to prevent the network stack from sending the ACK during the
1545 * connect() when a pure TCP check is used (without PROXY protocol).
1546 */
Simon Horman98637e52014-06-20 12:30:16 +09001547static int connect_conn_chk(struct task *t)
Simon Hormanb00d17a2014-06-13 16:18:16 +09001548{
1549 struct check *check = t->context;
1550 struct server *s = check->server;
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001551 struct conn_stream *cs = check->cs;
1552 struct connection *conn = cs_conn(cs);
Simon Hormanb00d17a2014-06-13 16:18:16 +09001553 struct protocol *proto;
Willy Tarreauf411cce2017-10-04 16:21:19 +02001554 struct tcpcheck_rule *tcp_rule = NULL;
Simon Hormanb00d17a2014-06-13 16:18:16 +09001555 int ret;
Olivier Houchardfdcb0072019-05-06 18:32:29 +02001556 int connflags = 0;
Simon Hormanb00d17a2014-06-13 16:18:16 +09001557
Willy Tarreau00149122017-10-04 18:05:01 +02001558 /* we cannot have a connection here */
1559 if (conn)
1560 return SF_ERR_INTERNAL;
1561
Simon Hormanb00d17a2014-06-13 16:18:16 +09001562 /* tcpcheck send/expect initialisation */
Willy Tarreauf411cce2017-10-04 16:21:19 +02001563 if (check->type == PR_O2_TCPCHK_CHK) {
Simon Hormanb00d17a2014-06-13 16:18:16 +09001564 check->current_step = NULL;
Willy Tarreauf411cce2017-10-04 16:21:19 +02001565 tcp_rule = get_first_tcpcheck_rule(check->tcpcheck_rules);
1566 }
Simon Hormanb00d17a2014-06-13 16:18:16 +09001567
1568 /* prepare the check buffer.
1569 * This should not be used if check is the secondary agent check
1570 * of a server as s->proxy->check_req will relate to the
1571 * configuration of the primary check. Similarly, tcp-check uses
1572 * its own strings.
1573 */
1574 if (check->type && check->type != PR_O2_TCPCHK_CHK && !(check->state & CHK_ST_AGENT)) {
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001575 b_putblk(&check->bo, s->proxy->check_req, s->proxy->check_len);
Simon Hormanb00d17a2014-06-13 16:18:16 +09001576
1577 /* we want to check if this host replies to HTTP or SSLv3 requests
1578 * so we'll send the request, and won't wake the checker up now.
1579 */
1580 if ((check->type) == PR_O2_SSL3_CHK) {
1581 /* SSL requires that we put Unix time in the request */
1582 int gmt_time = htonl(date.tv_sec);
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001583 memcpy(b_head(&check->bo) + 11, &gmt_time, 4);
Simon Hormanb00d17a2014-06-13 16:18:16 +09001584 }
1585 else if ((check->type) == PR_O2_HTTP_CHK) {
1586 if (s->proxy->options2 & PR_O2_CHK_SNDST)
Willy Tarreau843b7cb2018-07-13 10:54:26 +02001587 b_putblk(&check->bo, trash.area,
1588 httpchk_build_status_header(s, trash.area, trash.size));
Cyril Bonté32602d22015-01-30 00:07:07 +01001589 /* prevent HTTP keep-alive when "http-check expect" is used */
1590 if (s->proxy->options2 & PR_O2_EXP_TYPE)
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001591 b_putist(&check->bo, ist("Connection: close\r\n"));
1592 b_putist(&check->bo, ist("\r\n"));
1593 *b_tail(&check->bo) = '\0'; /* to make gdb output easier to read */
Simon Hormanb00d17a2014-06-13 16:18:16 +09001594 }
1595 }
1596
James Brown55f9ff12015-10-21 18:19:05 -07001597 if ((check->type & PR_O2_LB_AGENT_CHK) && check->send_string_len) {
Willy Tarreauc9fa0482018-07-10 17:43:27 +02001598 b_putblk(&check->bo, check->send_string, check->send_string_len);
James Brown55f9ff12015-10-21 18:19:05 -07001599 }
1600
Willy Tarreauf411cce2017-10-04 16:21:19 +02001601 /* for tcp-checks, the initial connection setup is handled separately as
1602 * it may be sent to a specific port and not to the server's.
1603 */
1604 if (tcp_rule && tcp_rule->action == TCPCHK_ACT_CONNECT) {
1605 tcpcheck_main(check);
1606 return SF_ERR_UP;
1607 }
1608
Simon Hormanb00d17a2014-06-13 16:18:16 +09001609 /* prepare a new connection */
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001610 cs = check->cs = cs_new(NULL);
1611 if (!check->cs)
Willy Tarreau00149122017-10-04 18:05:01 +02001612 return SF_ERR_RESOURCE;
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001613 conn = cs->conn;
Olivier Houchard26e1a8f2018-09-12 15:15:12 +02001614 /* Maybe there were an older connection we were waiting on */
Willy Tarreau4f6516d2018-12-19 13:59:17 +01001615 check->wait_list.events = 0;
Simon Hormanb00d17a2014-06-13 16:18:16 +09001616
Simon Horman41f58762015-01-30 11:22:56 +09001617 if (is_addr(&check->addr)) {
Simon Hormanb00d17a2014-06-13 16:18:16 +09001618 /* we'll connect to the check addr specified on the server */
Simon Horman41f58762015-01-30 11:22:56 +09001619 conn->addr.to = check->addr;
Simon Hormanb00d17a2014-06-13 16:18:16 +09001620 }
1621 else {
1622 /* we'll connect to the addr on the server */
1623 conn->addr.to = s->addr;
Simon Hormanb00d17a2014-06-13 16:18:16 +09001624 }
1625
Alexander Liu2a54bb72019-05-22 19:44:48 +08001626 if (s->check.via_socks4 && (s->flags & SRV_F_SOCKS4_PROXY)) {
1627 conn->send_proxy_ofs = 1;
1628 conn->flags |= CO_FL_SOCKS4;
1629 }
1630
Olivier Houchard6377a002017-12-01 22:04:05 +01001631 proto = protocol_by_family(conn->addr.to.ss_family);
Olivier Houchard6377a002017-12-01 22:04:05 +01001632 conn->target = &s->obj_type;
1633
Willy Tarreaube373152018-09-06 11:45:30 +02001634 if ((conn->addr.to.ss_family == AF_INET) || (conn->addr.to.ss_family == AF_INET6)) {
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02001635 int i = 0;
1636
1637 i = srv_check_healthcheck_port(check);
Olivier Houchard6377a002017-12-01 22:04:05 +01001638 if (i == 0)
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02001639 return SF_ERR_CHK_PORT;
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02001640
1641 set_host_port(&conn->addr.to, i);
Simon Hormanb00d17a2014-06-13 16:18:16 +09001642 }
1643
Thierry FOURNIERbb2ae642015-01-14 11:31:49 +01001644 /* no client address */
1645 clear_addr(&conn->addr.from);
1646
Willy Tarreaube373152018-09-06 11:45:30 +02001647 conn_prepare(conn, proto, check->xprt);
Olivier Houchardf67be932019-01-29 15:47:43 +01001648 if (conn_install_mux(conn, &mux_pt_ops, cs, s->proxy, NULL) < 0)
1649 return SF_ERR_RESOURCE;
Willy Tarreaube373152018-09-06 11:45:30 +02001650 cs_attach(cs, check, &check_conn_cb);
1651
Willy Tarreauf3d34822014-12-08 12:11:28 +01001652 /* only plain tcp-check supports quick ACK */
Olivier Houchardfdcb0072019-05-06 18:32:29 +02001653 if (check->type != 0)
1654 connflags |= CONNECT_HAS_DATA;
1655 if ((check->type == 0 || check->type == PR_O2_TCPCHK_CHK) &&
1656 (!tcp_rule || tcp_rule->action != TCPCHK_ACT_EXPECT))
1657 connflags |= CONNECT_DELACK_ALWAYS;
Simon Hormanb00d17a2014-06-13 16:18:16 +09001658
Willy Tarreaue7dff022015-04-03 01:14:29 +02001659 ret = SF_ERR_INTERNAL;
Olivier Houchardb68fda42017-08-04 18:39:01 +02001660 if (proto && proto->connect)
Olivier Houchardfdcb0072019-05-06 18:32:29 +02001661 ret = proto->connect(conn, connflags);
Willy Tarreau16257f62017-11-02 15:45:00 +01001662
Willy Tarreau16257f62017-11-02 15:45:00 +01001663
Olivier Houchard9130a962017-10-17 17:33:43 +02001664#ifdef USE_OPENSSL
Olivier Houcharda48437b2019-01-29 16:37:52 +01001665 if (ret == SF_ERR_NONE) {
1666 if (s->check.sni)
1667 ssl_sock_set_servername(conn, s->check.sni);
1668 if (s->check.alpn_str)
1669 ssl_sock_set_alpn(conn, (unsigned char *)s->check.alpn_str,
1670 s->check.alpn_len);
1671 }
Olivier Houchard9130a962017-10-17 17:33:43 +02001672#endif
Willy Tarreauf4949772017-05-06 08:45:28 +02001673 if (s->check.send_proxy && !(check->state & CHK_ST_AGENT)) {
Simon Hormanb00d17a2014-06-13 16:18:16 +09001674 conn->send_proxy_ofs = 1;
1675 conn->flags |= CO_FL_SEND_PROXY;
Olivier Houchardfe50bfb2019-05-27 12:09:19 +02001676 if (xprt_add_hs(conn) < 0)
1677 ret = SF_ERR_RESOURCE;
Simon Hormanb00d17a2014-06-13 16:18:16 +09001678 }
1679
1680 return ret;
1681}
1682
Simon Horman98637e52014-06-20 12:30:16 +09001683static struct list pid_list = LIST_HEAD_INIT(pid_list);
Willy Tarreaubafbe012017-11-24 17:34:44 +01001684static struct pool_head *pool_head_pid_list;
Willy Tarreau86abe442018-11-25 20:12:18 +01001685__decl_spinlock(pid_list_lock);
Simon Horman98637e52014-06-20 12:30:16 +09001686
1687void block_sigchld(void)
1688{
1689 sigset_t set;
1690 sigemptyset(&set);
1691 sigaddset(&set, SIGCHLD);
William Lallemand6e1796e2018-06-07 11:23:40 +02001692 assert(ha_sigmask(SIG_BLOCK, &set, NULL) == 0);
Simon Horman98637e52014-06-20 12:30:16 +09001693}
1694
1695void unblock_sigchld(void)
1696{
1697 sigset_t set;
1698 sigemptyset(&set);
Willy Tarreauebc92442016-06-21 17:29:46 +02001699 sigaddset(&set, SIGCHLD);
William Lallemand6e1796e2018-06-07 11:23:40 +02001700 assert(ha_sigmask(SIG_UNBLOCK, &set, NULL) == 0);
Simon Horman98637e52014-06-20 12:30:16 +09001701}
1702
Simon Horman98637e52014-06-20 12:30:16 +09001703static struct pid_list *pid_list_add(pid_t pid, struct task *t)
1704{
1705 struct pid_list *elem;
1706 struct check *check = t->context;
1707
Willy Tarreaubafbe012017-11-24 17:34:44 +01001708 elem = pool_alloc(pool_head_pid_list);
Simon Horman98637e52014-06-20 12:30:16 +09001709 if (!elem)
1710 return NULL;
1711 elem->pid = pid;
1712 elem->t = t;
1713 elem->exited = 0;
1714 check->curpid = elem;
1715 LIST_INIT(&elem->list);
Christopher Fauletcfda8472017-10-20 15:40:23 +02001716
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001717 HA_SPIN_LOCK(PID_LIST_LOCK, &pid_list_lock);
Simon Horman98637e52014-06-20 12:30:16 +09001718 LIST_ADD(&pid_list, &elem->list);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001719 HA_SPIN_UNLOCK(PID_LIST_LOCK, &pid_list_lock);
Christopher Fauletcfda8472017-10-20 15:40:23 +02001720
Simon Horman98637e52014-06-20 12:30:16 +09001721 return elem;
1722}
1723
Simon Horman98637e52014-06-20 12:30:16 +09001724static void pid_list_del(struct pid_list *elem)
1725{
1726 struct check *check;
1727
1728 if (!elem)
1729 return;
1730
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001731 HA_SPIN_LOCK(PID_LIST_LOCK, &pid_list_lock);
Simon Horman98637e52014-06-20 12:30:16 +09001732 LIST_DEL(&elem->list);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001733 HA_SPIN_UNLOCK(PID_LIST_LOCK, &pid_list_lock);
Christopher Fauletcfda8472017-10-20 15:40:23 +02001734
Simon Horman98637e52014-06-20 12:30:16 +09001735 if (!elem->exited)
1736 kill(elem->pid, SIGTERM);
1737
1738 check = elem->t->context;
1739 check->curpid = NULL;
Willy Tarreaubafbe012017-11-24 17:34:44 +01001740 pool_free(pool_head_pid_list, elem);
Simon Horman98637e52014-06-20 12:30:16 +09001741}
1742
1743/* Called from inside SIGCHLD handler, SIGCHLD is blocked */
1744static void pid_list_expire(pid_t pid, int status)
1745{
1746 struct pid_list *elem;
1747
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001748 HA_SPIN_LOCK(PID_LIST_LOCK, &pid_list_lock);
Simon Horman98637e52014-06-20 12:30:16 +09001749 list_for_each_entry(elem, &pid_list, list) {
1750 if (elem->pid == pid) {
1751 elem->t->expire = now_ms;
1752 elem->status = status;
1753 elem->exited = 1;
Cyril Bonté9dbcfab2014-08-07 01:55:39 +02001754 task_wakeup(elem->t, TASK_WOKEN_IO);
Christopher Fauletcfda8472017-10-20 15:40:23 +02001755 break;
Simon Horman98637e52014-06-20 12:30:16 +09001756 }
1757 }
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001758 HA_SPIN_UNLOCK(PID_LIST_LOCK, &pid_list_lock);
Simon Horman98637e52014-06-20 12:30:16 +09001759}
1760
Willy Tarreau48d6bf22016-06-21 16:27:34 +02001761static void sigchld_handler(struct sig_handler *sh)
Simon Horman98637e52014-06-20 12:30:16 +09001762{
1763 pid_t pid;
1764 int status;
Willy Tarreau48d6bf22016-06-21 16:27:34 +02001765
Simon Horman98637e52014-06-20 12:30:16 +09001766 while ((pid = waitpid(0, &status, WNOHANG)) > 0)
1767 pid_list_expire(pid, status);
1768}
1769
Willy Tarreau48d6bf22016-06-21 16:27:34 +02001770static int init_pid_list(void)
1771{
Willy Tarreaubafbe012017-11-24 17:34:44 +01001772 if (pool_head_pid_list != NULL)
Simon Horman98637e52014-06-20 12:30:16 +09001773 /* Nothing to do */
1774 return 0;
1775
Willy Tarreau48d6bf22016-06-21 16:27:34 +02001776 if (!signal_register_fct(SIGCHLD, sigchld_handler, SIGCHLD)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001777 ha_alert("Failed to set signal handler for external health checks: %s. Aborting.\n",
1778 strerror(errno));
Simon Horman98637e52014-06-20 12:30:16 +09001779 return 1;
1780 }
1781
Willy Tarreaubafbe012017-11-24 17:34:44 +01001782 pool_head_pid_list = create_pool("pid_list", sizeof(struct pid_list), MEM_F_SHARED);
1783 if (pool_head_pid_list == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001784 ha_alert("Failed to allocate memory pool for external health checks: %s. Aborting.\n",
1785 strerror(errno));
Simon Horman98637e52014-06-20 12:30:16 +09001786 return 1;
1787 }
1788
1789 return 0;
1790}
1791
Cyril Bontéac92a062014-12-27 22:28:38 +01001792/* helper macro to set an environment variable and jump to a specific label on failure. */
1793#define EXTCHK_SETENV(check, envidx, value, fail) { if (extchk_setenv(check, envidx, value)) goto fail; }
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001794
1795/*
Cyril Bontéac92a062014-12-27 22:28:38 +01001796 * helper function to allocate enough memory to store an environment variable.
1797 * It will also check that the environment variable is updatable, and silently
1798 * fail if not.
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001799 */
Cyril Bontéac92a062014-12-27 22:28:38 +01001800static int extchk_setenv(struct check *check, int idx, const char *value)
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001801{
1802 int len, ret;
Cyril Bontéac92a062014-12-27 22:28:38 +01001803 char *envname;
1804 int vmaxlen;
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001805
Cyril Bontéac92a062014-12-27 22:28:38 +01001806 if (idx < 0 || idx >= EXTCHK_SIZE) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001807 ha_alert("Illegal environment variable index %d. Aborting.\n", idx);
Cyril Bontéac92a062014-12-27 22:28:38 +01001808 return 1;
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001809 }
Cyril Bontéac92a062014-12-27 22:28:38 +01001810
1811 envname = extcheck_envs[idx].name;
1812 vmaxlen = extcheck_envs[idx].vmaxlen;
1813
1814 /* Check if the environment variable is already set, and silently reject
1815 * the update if this one is not updatable. */
1816 if ((vmaxlen == EXTCHK_SIZE_EVAL_INIT) && (check->envp[idx]))
1817 return 0;
1818
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001819 /* Instead of sending NOT_USED, sending an empty value is preferable */
1820 if (strcmp(value, "NOT_USED") == 0) {
1821 value = "";
1822 }
Cyril Bontéac92a062014-12-27 22:28:38 +01001823
1824 len = strlen(envname) + 1;
1825 if (vmaxlen == EXTCHK_SIZE_EVAL_INIT)
1826 len += strlen(value);
1827 else
1828 len += vmaxlen;
1829
1830 if (!check->envp[idx])
1831 check->envp[idx] = malloc(len + 1);
1832
1833 if (!check->envp[idx]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001834 ha_alert("Failed to allocate memory for the environment variable '%s'. Aborting.\n", envname);
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001835 return 1;
1836 }
Cyril Bontéac92a062014-12-27 22:28:38 +01001837 ret = snprintf(check->envp[idx], len + 1, "%s=%s", envname, value);
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001838 if (ret < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001839 ha_alert("Failed to store the environment variable '%s'. Reason : %s. Aborting.\n", envname, strerror(errno));
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001840 return 1;
1841 }
Cyril Bontéac92a062014-12-27 22:28:38 +01001842 else if (ret > len) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001843 ha_alert("Environment variable '%s' was truncated. Aborting.\n", envname);
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001844 return 1;
1845 }
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001846 return 0;
1847}
Simon Horman98637e52014-06-20 12:30:16 +09001848
1849static int prepare_external_check(struct check *check)
1850{
1851 struct server *s = check->server;
1852 struct proxy *px = s->proxy;
1853 struct listener *listener = NULL, *l;
1854 int i;
Simon Horman98637e52014-06-20 12:30:16 +09001855 const char *path = px->check_path ? px->check_path : DEF_CHECK_PATH;
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001856 char buf[256];
Simon Horman98637e52014-06-20 12:30:16 +09001857
1858 list_for_each_entry(l, &px->conf.listeners, by_fe)
1859 /* Use the first INET, INET6 or UNIX listener */
1860 if (l->addr.ss_family == AF_INET ||
1861 l->addr.ss_family == AF_INET6 ||
1862 l->addr.ss_family == AF_UNIX) {
1863 listener = l;
1864 break;
1865 }
1866
Simon Horman98637e52014-06-20 12:30:16 +09001867 check->curpid = NULL;
Cyril Bontéac92a062014-12-27 22:28:38 +01001868 check->envp = calloc((EXTCHK_SIZE + 1), sizeof(char *));
1869 if (!check->envp) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001870 ha_alert("Failed to allocate memory for environment variables. Aborting\n");
Cyril Bontéac92a062014-12-27 22:28:38 +01001871 goto err;
1872 }
Simon Horman98637e52014-06-20 12:30:16 +09001873
Cyril Bontéac92a062014-12-27 22:28:38 +01001874 check->argv = calloc(6, sizeof(char *));
1875 if (!check->argv) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001876 ha_alert("Starting [%s:%s] check: out of memory.\n", px->id, s->id);
Simon Horman98637e52014-06-20 12:30:16 +09001877 goto err;
Cyril Bontéac92a062014-12-27 22:28:38 +01001878 }
Simon Horman98637e52014-06-20 12:30:16 +09001879
1880 check->argv[0] = px->check_command;
1881
Cyril Bonté777be862014-12-02 21:21:35 +01001882 if (!listener) {
1883 check->argv[1] = strdup("NOT_USED");
1884 check->argv[2] = strdup("NOT_USED");
1885 }
1886 else if (listener->addr.ss_family == AF_INET ||
Simon Horman98637e52014-06-20 12:30:16 +09001887 listener->addr.ss_family == AF_INET6) {
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001888 addr_to_str(&listener->addr, buf, sizeof(buf));
1889 check->argv[1] = strdup(buf);
1890 port_to_str(&listener->addr, buf, sizeof(buf));
1891 check->argv[2] = strdup(buf);
Cyril Bonté777be862014-12-02 21:21:35 +01001892 }
1893 else if (listener->addr.ss_family == AF_UNIX) {
Simon Horman98637e52014-06-20 12:30:16 +09001894 const struct sockaddr_un *un;
1895
1896 un = (struct sockaddr_un *)&listener->addr;
1897 check->argv[1] = strdup(un->sun_path);
1898 check->argv[2] = strdup("NOT_USED");
Cyril Bonté777be862014-12-02 21:21:35 +01001899 }
1900 else {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001901 ha_alert("Starting [%s:%s] check: unsupported address family.\n", px->id, s->id);
Simon Horman98637e52014-06-20 12:30:16 +09001902 goto err;
1903 }
1904
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001905 addr_to_str(&s->addr, buf, sizeof(buf));
1906 check->argv[3] = strdup(buf);
Willy Tarreau04276f32017-01-06 17:41:29 +01001907
1908 if (s->addr.ss_family == AF_INET || s->addr.ss_family == AF_INET6)
1909 snprintf(buf, sizeof(buf), "%u", s->svc_port);
1910 else
1911 *buf = 0;
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001912 check->argv[4] = strdup(buf);
Simon Horman98637e52014-06-20 12:30:16 +09001913
Cyril Bontéac92a062014-12-27 22:28:38 +01001914 for (i = 0; i < 5; i++) {
1915 if (!check->argv[i]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001916 ha_alert("Starting [%s:%s] check: out of memory.\n", px->id, s->id);
Simon Horman98637e52014-06-20 12:30:16 +09001917 goto err;
Cyril Bontéac92a062014-12-27 22:28:38 +01001918 }
1919 }
Simon Horman98637e52014-06-20 12:30:16 +09001920
Cyril Bontéac92a062014-12-27 22:28:38 +01001921 EXTCHK_SETENV(check, EXTCHK_PATH, path, err);
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001922 /* Add proxy environment variables */
Cyril Bontéac92a062014-12-27 22:28:38 +01001923 EXTCHK_SETENV(check, EXTCHK_HAPROXY_PROXY_NAME, px->id, err);
1924 EXTCHK_SETENV(check, EXTCHK_HAPROXY_PROXY_ID, ultoa_r(px->uuid, buf, sizeof(buf)), err);
1925 EXTCHK_SETENV(check, EXTCHK_HAPROXY_PROXY_ADDR, check->argv[1], err);
1926 EXTCHK_SETENV(check, EXTCHK_HAPROXY_PROXY_PORT, check->argv[2], err);
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001927 /* Add server environment variables */
Cyril Bontéac92a062014-12-27 22:28:38 +01001928 EXTCHK_SETENV(check, EXTCHK_HAPROXY_SERVER_NAME, s->id, err);
1929 EXTCHK_SETENV(check, EXTCHK_HAPROXY_SERVER_ID, ultoa_r(s->puid, buf, sizeof(buf)), err);
1930 EXTCHK_SETENV(check, EXTCHK_HAPROXY_SERVER_ADDR, check->argv[3], err);
1931 EXTCHK_SETENV(check, EXTCHK_HAPROXY_SERVER_PORT, check->argv[4], err);
1932 EXTCHK_SETENV(check, EXTCHK_HAPROXY_SERVER_MAXCONN, ultoa_r(s->maxconn, buf, sizeof(buf)), err);
1933 EXTCHK_SETENV(check, EXTCHK_HAPROXY_SERVER_CURCONN, ultoa_r(s->cur_sess, buf, sizeof(buf)), err);
1934
1935 /* Ensure that we don't leave any hole in check->envp */
1936 for (i = 0; i < EXTCHK_SIZE; i++)
1937 if (!check->envp[i])
1938 EXTCHK_SETENV(check, i, "", err);
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001939
Cyril Bonté99c5bf52014-08-07 01:55:38 +02001940 return 1;
Simon Horman98637e52014-06-20 12:30:16 +09001941err:
1942 if (check->envp) {
Cyril Bontéac92a062014-12-27 22:28:38 +01001943 for (i = 0; i < EXTCHK_SIZE; i++)
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001944 free(check->envp[i]);
Simon Horman98637e52014-06-20 12:30:16 +09001945 free(check->envp);
1946 check->envp = NULL;
1947 }
1948
1949 if (check->argv) {
1950 for (i = 1; i < 5; i++)
1951 free(check->argv[i]);
1952 free(check->argv);
1953 check->argv = NULL;
1954 }
Cyril Bonté99c5bf52014-08-07 01:55:38 +02001955 return 0;
Simon Horman98637e52014-06-20 12:30:16 +09001956}
1957
Simon Hormanb00d17a2014-06-13 16:18:16 +09001958/*
Simon Horman98637e52014-06-20 12:30:16 +09001959 * establish a server health-check that makes use of a process.
1960 *
1961 * It can return one of :
Willy Tarreaue7dff022015-04-03 01:14:29 +02001962 * - SF_ERR_NONE if everything's OK
Willy Tarreaue7dff022015-04-03 01:14:29 +02001963 * - SF_ERR_RESOURCE if a system resource is lacking (eg: fd limits, ports, ...)
Tim Düsterhus4896c442016-11-29 02:15:19 +01001964 * Additionally, in the case of SF_ERR_RESOURCE, an emergency log will be emitted.
Simon Horman98637e52014-06-20 12:30:16 +09001965 *
1966 * Blocks and then unblocks SIGCHLD
1967 */
1968static int connect_proc_chk(struct task *t)
1969{
Cyril Bontéac92a062014-12-27 22:28:38 +01001970 char buf[256];
Simon Horman98637e52014-06-20 12:30:16 +09001971 struct check *check = t->context;
1972 struct server *s = check->server;
1973 struct proxy *px = s->proxy;
1974 int status;
1975 pid_t pid;
1976
Willy Tarreaue7dff022015-04-03 01:14:29 +02001977 status = SF_ERR_RESOURCE;
Simon Horman98637e52014-06-20 12:30:16 +09001978
1979 block_sigchld();
1980
1981 pid = fork();
1982 if (pid < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001983 ha_alert("Failed to fork process for external health check: %s. Aborting.\n",
1984 strerror(errno));
Simon Horman98637e52014-06-20 12:30:16 +09001985 set_server_check_status(check, HCHK_STATUS_SOCKERR, strerror(errno));
1986 goto out;
1987 }
1988 if (pid == 0) {
1989 /* Child */
1990 extern char **environ;
Willy Tarreau9f6dc722019-03-01 11:15:10 +01001991 struct rlimit limit;
Willy Tarreaub7b24782016-06-21 15:32:29 +02001992 int fd;
1993
1994 /* close all FDs. Keep stdin/stdout/stderr in verbose mode */
1995 fd = (global.mode & (MODE_QUIET|MODE_VERBOSE)) == MODE_QUIET ? 0 : 3;
1996
Willy Tarreau2555ccf2019-02-21 22:22:06 +01001997 my_closefrom(fd);
Willy Tarreaub7b24782016-06-21 15:32:29 +02001998
Willy Tarreau9f6dc722019-03-01 11:15:10 +01001999 /* restore the initial FD limits */
2000 limit.rlim_cur = rlim_fd_cur_at_boot;
2001 limit.rlim_max = rlim_fd_max_at_boot;
2002 if (setrlimit(RLIMIT_NOFILE, &limit) == -1) {
2003 getrlimit(RLIMIT_NOFILE, &limit);
2004 ha_warning("External check: failed to restore initial FD limits (cur=%u max=%u), using cur=%u max=%u\n",
2005 rlim_fd_cur_at_boot, rlim_fd_max_at_boot,
2006 (unsigned int)limit.rlim_cur, (unsigned int)limit.rlim_max);
2007 }
2008
Simon Horman98637e52014-06-20 12:30:16 +09002009 environ = check->envp;
Cyril Bontéac92a062014-12-27 22:28:38 +01002010 extchk_setenv(check, EXTCHK_HAPROXY_SERVER_CURCONN, ultoa_r(s->cur_sess, buf, sizeof(buf)));
Willy Tarreauafc313e2019-07-01 07:51:29 +02002011 haproxy_unblock_signals();
Simon Horman98637e52014-06-20 12:30:16 +09002012 execvp(px->check_command, check->argv);
Christopher Faulet767a84b2017-11-24 16:50:31 +01002013 ha_alert("Failed to exec process for external health check: %s. Aborting.\n",
2014 strerror(errno));
Simon Horman98637e52014-06-20 12:30:16 +09002015 exit(-1);
2016 }
2017
2018 /* Parent */
2019 if (check->result == CHK_RES_UNKNOWN) {
2020 if (pid_list_add(pid, t) != NULL) {
2021 t->expire = tick_add(now_ms, MS_TO_TICKS(check->inter));
2022
2023 if (px->timeout.check && px->timeout.connect) {
2024 int t_con = tick_add(now_ms, px->timeout.connect);
2025 t->expire = tick_first(t->expire, t_con);
2026 }
Willy Tarreaue7dff022015-04-03 01:14:29 +02002027 status = SF_ERR_NONE;
Simon Horman98637e52014-06-20 12:30:16 +09002028 goto out;
2029 }
2030 else {
2031 set_server_check_status(check, HCHK_STATUS_SOCKERR, strerror(errno));
2032 }
2033 kill(pid, SIGTERM); /* process creation error */
2034 }
2035 else
2036 set_server_check_status(check, HCHK_STATUS_SOCKERR, strerror(errno));
2037
2038out:
2039 unblock_sigchld();
2040 return status;
2041}
2042
2043/*
Willy Tarreau1e62e2a2017-10-04 15:07:02 +02002044 * manages a server health-check that uses an external process. Returns
Willy Tarreaubaaee002006-06-26 02:48:02 +02002045 * the time the task accepts to wait, or TIME_ETERNITY for infinity.
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002046 *
2047 * Please do NOT place any return statement in this function and only leave
2048 * via the out_unlock label.
Willy Tarreaubaaee002006-06-26 02:48:02 +02002049 */
Olivier Houchard9f6af332018-05-25 14:04:04 +02002050static struct task *process_chk_proc(struct task *t, void *context, unsigned short state)
Simon Horman98637e52014-06-20 12:30:16 +09002051{
Olivier Houchard9f6af332018-05-25 14:04:04 +02002052 struct check *check = context;
Simon Horman98637e52014-06-20 12:30:16 +09002053 struct server *s = check->server;
Simon Horman98637e52014-06-20 12:30:16 +09002054 int rv;
2055 int ret;
2056 int expired = tick_is_expired(t->expire, now_ms);
2057
Christopher Faulet2a944ee2017-11-07 10:42:54 +01002058 HA_SPIN_LOCK(SERVER_LOCK, &check->server->lock);
Simon Horman98637e52014-06-20 12:30:16 +09002059 if (!(check->state & CHK_ST_INPROGRESS)) {
2060 /* no check currently running */
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002061 if (!expired) /* woke up too early */
2062 goto out_unlock;
Simon Horman98637e52014-06-20 12:30:16 +09002063
2064 /* we don't send any health-checks when the proxy is
2065 * stopped, the server should not be checked or the check
2066 * is disabled.
2067 */
2068 if (((check->state & (CHK_ST_ENABLED | CHK_ST_PAUSED)) != CHK_ST_ENABLED) ||
2069 s->proxy->state == PR_STSTOPPED)
2070 goto reschedule;
2071
2072 /* we'll initiate a new check */
2073 set_server_check_status(check, HCHK_STATUS_START, NULL);
2074
2075 check->state |= CHK_ST_INPROGRESS;
2076
Simon Hormandbf70192015-01-30 11:22:53 +09002077 ret = connect_proc_chk(t);
Willy Tarreaud7c3fbd2017-10-04 15:19:26 +02002078 if (ret == SF_ERR_NONE) {
Willy Tarreau1e62e2a2017-10-04 15:07:02 +02002079 /* the process was forked, we allow up to min(inter,
2080 * timeout.connect) for it to report its status, but
2081 * only when timeout.check is set as it may be to short
2082 * for a full check otherwise.
Simon Horman98637e52014-06-20 12:30:16 +09002083 */
2084 t->expire = tick_add(now_ms, MS_TO_TICKS(check->inter));
2085
2086 if (s->proxy->timeout.check && s->proxy->timeout.connect) {
2087 int t_con = tick_add(now_ms, s->proxy->timeout.connect);
2088 t->expire = tick_first(t->expire, t_con);
2089 }
Christopher Faulet88ce5d12017-10-20 15:41:18 +02002090 task_set_affinity(t, tid_bit);
Simon Horman98637e52014-06-20 12:30:16 +09002091 goto reschedule;
Simon Horman98637e52014-06-20 12:30:16 +09002092 }
2093
Willy Tarreau1e62e2a2017-10-04 15:07:02 +02002094 /* here, we failed to start the check */
Simon Horman98637e52014-06-20 12:30:16 +09002095
2096 check->state &= ~CHK_ST_INPROGRESS;
2097 check_notify_failure(check);
2098
2099 /* we allow up to min(inter, timeout.connect) for a connection
2100 * to establish but only when timeout.check is set
2101 * as it may be to short for a full check otherwise
2102 */
2103 while (tick_is_expired(t->expire, now_ms)) {
2104 int t_con;
2105
2106 t_con = tick_add(t->expire, s->proxy->timeout.connect);
2107 t->expire = tick_add(t->expire, MS_TO_TICKS(check->inter));
2108
2109 if (s->proxy->timeout.check)
2110 t->expire = tick_first(t->expire, t_con);
2111 }
2112 }
2113 else {
2114 /* there was a test running.
2115 * First, let's check whether there was an uncaught error,
2116 * which can happen on connect timeout or error.
2117 */
2118 if (check->result == CHK_RES_UNKNOWN) {
2119 /* good connection is enough for pure TCP check */
2120 struct pid_list *elem = check->curpid;
2121 int status = HCHK_STATUS_UNKNOWN;
2122
2123 if (elem->exited) {
2124 status = elem->status; /* Save in case the process exits between use below */
2125 if (!WIFEXITED(status))
2126 check->code = -1;
2127 else
2128 check->code = WEXITSTATUS(status);
2129 if (!WIFEXITED(status) || WEXITSTATUS(status))
2130 status = HCHK_STATUS_PROCERR;
2131 else
2132 status = HCHK_STATUS_PROCOK;
2133 } else if (expired) {
2134 status = HCHK_STATUS_PROCTOUT;
Christopher Faulet767a84b2017-11-24 16:50:31 +01002135 ha_warning("kill %d\n", (int)elem->pid);
Simon Horman98637e52014-06-20 12:30:16 +09002136 kill(elem->pid, SIGTERM);
2137 }
2138 set_server_check_status(check, status, NULL);
2139 }
2140
2141 if (check->result == CHK_RES_FAILED) {
2142 /* a failure or timeout detected */
2143 check_notify_failure(check);
2144 }
2145 else if (check->result == CHK_RES_CONDPASS) {
2146 /* check is OK but asks for stopping mode */
2147 check_notify_stopping(check);
2148 }
2149 else if (check->result == CHK_RES_PASSED) {
2150 /* a success was detected */
2151 check_notify_success(check);
2152 }
Christopher Faulet88ce5d12017-10-20 15:41:18 +02002153 task_set_affinity(t, MAX_THREADS_MASK);
Simon Horman98637e52014-06-20 12:30:16 +09002154 check->state &= ~CHK_ST_INPROGRESS;
2155
2156 pid_list_del(check->curpid);
2157
2158 rv = 0;
2159 if (global.spread_checks > 0) {
2160 rv = srv_getinter(check) * global.spread_checks / 100;
2161 rv -= (int) (2 * rv * (rand() / (RAND_MAX + 1.0)));
2162 }
2163 t->expire = tick_add(now_ms, MS_TO_TICKS(srv_getinter(check) + rv));
2164 }
2165
2166 reschedule:
2167 while (tick_is_expired(t->expire, now_ms))
2168 t->expire = tick_add(t->expire, MS_TO_TICKS(check->inter));
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002169
2170 out_unlock:
Christopher Faulet2a944ee2017-11-07 10:42:54 +01002171 HA_SPIN_UNLOCK(SERVER_LOCK, &check->server->lock);
Simon Horman98637e52014-06-20 12:30:16 +09002172 return t;
2173}
2174
2175/*
2176 * manages a server health-check that uses a connection. Returns
2177 * the time the task accepts to wait, or TIME_ETERNITY for infinity.
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002178 *
2179 * Please do NOT place any return statement in this function and only leave
2180 * via the out_unlock label.
Simon Horman98637e52014-06-20 12:30:16 +09002181 */
Olivier Houchard9f6af332018-05-25 14:04:04 +02002182static struct task *process_chk_conn(struct task *t, void *context, unsigned short state)
Willy Tarreaubaaee002006-06-26 02:48:02 +02002183{
Olivier Houchard9f6af332018-05-25 14:04:04 +02002184 struct check *check = context;
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01002185 struct proxy *proxy = check->proxy;
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002186 struct conn_stream *cs = check->cs;
2187 struct connection *conn = cs_conn(cs);
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002188 int rv;
Willy Tarreaufb56aab2012-09-28 14:40:02 +02002189 int ret;
Willy Tarreauacbdc7a2012-11-23 14:02:10 +01002190 int expired = tick_is_expired(t->expire, now_ms);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002191
Olivier Houchard0923fa42019-01-11 18:43:04 +01002192 if (check->server)
2193 HA_SPIN_LOCK(SERVER_LOCK, &check->server->lock);
Willy Tarreau2c115e52013-12-11 19:41:16 +01002194 if (!(check->state & CHK_ST_INPROGRESS)) {
Willy Tarreau5a78f362012-11-23 12:47:05 +01002195 /* no check currently running */
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002196 if (!expired) /* woke up too early */
2197 goto out_unlock;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002198
Simon Horman671b6f02013-11-25 10:46:39 +09002199 /* we don't send any health-checks when the proxy is
2200 * stopped, the server should not be checked or the check
2201 * is disabled.
Willy Tarreaubaaee002006-06-26 02:48:02 +02002202 */
Willy Tarreau0d924cc2013-12-11 21:26:24 +01002203 if (((check->state & (CHK_ST_ENABLED | CHK_ST_PAUSED)) != CHK_ST_ENABLED) ||
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01002204 proxy->state == PR_STSTOPPED)
Willy Tarreau5a78f362012-11-23 12:47:05 +01002205 goto reschedule;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002206
2207 /* we'll initiate a new check */
Simon Horman4a741432013-02-23 15:35:38 +09002208 set_server_check_status(check, HCHK_STATUS_START, NULL);
Willy Tarreau1ae1b7b2012-09-28 15:28:30 +02002209
Willy Tarreau2c115e52013-12-11 19:41:16 +01002210 check->state |= CHK_ST_INPROGRESS;
Willy Tarreauc9fa0482018-07-10 17:43:27 +02002211 b_reset(&check->bi);
2212 b_reset(&check->bo);
Willy Tarreau1ae1b7b2012-09-28 15:28:30 +02002213
Simon Hormandbf70192015-01-30 11:22:53 +09002214 ret = connect_conn_chk(t);
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002215 cs = check->cs;
2216 conn = cs_conn(cs);
Willy Tarreau00149122017-10-04 18:05:01 +02002217
Willy Tarreaufb56aab2012-09-28 14:40:02 +02002218 switch (ret) {
Willy Tarreaue7dff022015-04-03 01:14:29 +02002219 case SF_ERR_UP:
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002220 goto out_unlock;
2221
Willy Tarreaue7dff022015-04-03 01:14:29 +02002222 case SF_ERR_NONE:
Willy Tarreaufb56aab2012-09-28 14:40:02 +02002223 /* we allow up to min(inter, timeout.connect) for a connection
2224 * to establish but only when timeout.check is set
2225 * as it may be to short for a full check otherwise
2226 */
Simon Horman4a741432013-02-23 15:35:38 +09002227 t->expire = tick_add(now_ms, MS_TO_TICKS(check->inter));
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +02002228
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01002229 if (proxy->timeout.check && proxy->timeout.connect) {
2230 int t_con = tick_add(now_ms, proxy->timeout.connect);
Willy Tarreaufb56aab2012-09-28 14:40:02 +02002231 t->expire = tick_first(t->expire, t_con);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002232 }
Willy Tarreau06559ac2013-12-05 01:53:08 +01002233
Olivier Houchard53216e72018-10-10 15:46:36 +02002234 if (check->type)
Olivier Houchardaf4021e2018-08-09 13:06:55 +02002235 __event_srv_chk_r(cs);
Willy Tarreau06559ac2013-12-05 01:53:08 +01002236
Christopher Faulet88ce5d12017-10-20 15:41:18 +02002237 task_set_affinity(t, tid_bit);
Willy Tarreau5a78f362012-11-23 12:47:05 +01002238 goto reschedule;
2239
Willy Tarreaue7dff022015-04-03 01:14:29 +02002240 case SF_ERR_SRVTO: /* ETIMEDOUT */
2241 case SF_ERR_SRVCL: /* ECONNREFUSED, ENETUNREACH, ... */
Willy Tarreau00149122017-10-04 18:05:01 +02002242 if (conn)
2243 conn->flags |= CO_FL_ERROR;
Willy Tarreaub5259bf2017-10-04 14:47:29 +02002244 chk_report_conn_err(check, errno, 0);
Willy Tarreau5a78f362012-11-23 12:47:05 +01002245 break;
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02002246 /* should share same code than cases below */
2247 case SF_ERR_CHK_PORT:
2248 check->state |= CHK_ST_PORT_MISS;
Willy Tarreaue7dff022015-04-03 01:14:29 +02002249 case SF_ERR_PRXCOND:
2250 case SF_ERR_RESOURCE:
2251 case SF_ERR_INTERNAL:
Willy Tarreau00149122017-10-04 18:05:01 +02002252 if (conn)
2253 conn->flags |= CO_FL_ERROR;
2254 chk_report_conn_err(check, conn ? 0 : ENOMEM, 0);
Willy Tarreau5a78f362012-11-23 12:47:05 +01002255 break;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002256 }
2257
Willy Tarreau5a78f362012-11-23 12:47:05 +01002258 /* here, we have seen a synchronous error, no fd was allocated */
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002259 if (cs) {
Olivier Houchard49065542019-05-31 19:20:36 +02002260 if (check->wait_list.events)
2261 cs->conn->xprt->unsubscribe(cs->conn,
2262 cs->conn->xprt_ctx,
2263 check->wait_list.events,
2264 &check->wait_list);
2265 /* We may have been scheduled to run, and the
2266 * I/O handler expects to have a cs, so remove
2267 * the tasklet
2268 */
Willy Tarreau86eded62019-06-14 14:47:49 +02002269 tasklet_remove_from_tasklet_list(check->wait_list.tasklet);
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002270 cs_destroy(cs);
2271 cs = check->cs = NULL;
2272 conn = NULL;
Olivier Houchard390485a2017-10-24 19:03:30 +02002273 }
Willy Tarreau6b0a8502012-11-23 08:51:32 +01002274
Willy Tarreau2c115e52013-12-11 19:41:16 +01002275 check->state &= ~CHK_ST_INPROGRESS;
Willy Tarreau4eec5472014-05-20 22:32:27 +02002276 check_notify_failure(check);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002277
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +01002278 /* we allow up to min(inter, timeout.connect) for a connection
2279 * to establish but only when timeout.check is set
2280 * as it may be to short for a full check otherwise
2281 */
Willy Tarreau0c303ee2008-07-07 00:09:58 +02002282 while (tick_is_expired(t->expire, now_ms)) {
2283 int t_con;
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +01002284
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01002285 t_con = tick_add(t->expire, proxy->timeout.connect);
Simon Horman4a741432013-02-23 15:35:38 +09002286 t->expire = tick_add(t->expire, MS_TO_TICKS(check->inter));
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +01002287
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01002288 if (proxy->timeout.check)
Willy Tarreau0c303ee2008-07-07 00:09:58 +02002289 t->expire = tick_first(t->expire, t_con);
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +01002290 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002291 }
2292 else {
Willy Tarreauf1503172012-09-28 19:39:36 +02002293 /* there was a test running.
2294 * First, let's check whether there was an uncaught error,
2295 * which can happen on connect timeout or error.
2296 */
Simon Hormanccaabcd2014-06-20 12:29:47 +09002297 if (check->result == CHK_RES_UNKNOWN) {
Willy Tarreau25e2ab52013-12-04 11:17:05 +01002298 /* good connection is enough for pure TCP check */
2299 if ((conn->flags & CO_FL_CONNECTED) && !check->type) {
Simon Horman4a741432013-02-23 15:35:38 +09002300 if (check->use_ssl)
2301 set_server_check_status(check, HCHK_STATUS_L6OK, NULL);
Willy Tarreauf1503172012-09-28 19:39:36 +02002302 else
Simon Horman4a741432013-02-23 15:35:38 +09002303 set_server_check_status(check, HCHK_STATUS_L4OK, NULL);
Willy Tarreauacbdc7a2012-11-23 14:02:10 +01002304 }
Willy Tarreau4ff3b892017-10-16 15:17:17 +02002305 else if ((conn->flags & CO_FL_ERROR) || cs->flags & CS_FL_ERROR || expired) {
Willy Tarreaub5259bf2017-10-04 14:47:29 +02002306 chk_report_conn_err(check, 0, expired);
Willy Tarreauf1503172012-09-28 19:39:36 +02002307 }
Willy Tarreau74fa7fb2012-11-23 14:43:49 +01002308 else
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002309 goto out_unlock; /* timeout not reached, wait again */
Willy Tarreauf1503172012-09-28 19:39:36 +02002310 }
2311
Willy Tarreau74fa7fb2012-11-23 14:43:49 +01002312 /* check complete or aborted */
Willy Tarreau00149122017-10-04 18:05:01 +02002313 if (conn && conn->xprt) {
Willy Tarreau5ba04f62013-02-12 15:23:12 +01002314 /* The check was aborted and the connection was not yet closed.
2315 * This can happen upon timeout, or when an external event such
2316 * as a failed response coupled with "observe layer7" caused the
2317 * server state to be suddenly changed.
2318 */
Willy Tarreaud85c4852015-03-13 00:40:28 +01002319 conn_sock_drain(conn);
Willy Tarreaua553ae92017-10-05 18:52:17 +02002320 cs_close(cs);
Willy Tarreau5ba04f62013-02-12 15:23:12 +01002321 }
2322
Willy Tarreauac59f362017-10-08 11:10:19 +02002323 if (cs) {
Olivier Houchard49065542019-05-31 19:20:36 +02002324 if (check->wait_list.events)
2325 cs->conn->xprt->unsubscribe(cs->conn,
2326 cs->conn->xprt_ctx,
2327 check->wait_list.events,
2328 &check->wait_list);
2329 /* We may have been scheduled to run, and the
Willy Tarreau86eded62019-06-14 14:47:49 +02002330 * I/O handler expects to have a cs, so remove
2331 * the tasklet
2332 */
2333 tasklet_remove_from_tasklet_list(check->wait_list.tasklet);
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002334 cs_destroy(cs);
2335 cs = check->cs = NULL;
2336 conn = NULL;
Willy Tarreau00149122017-10-04 18:05:01 +02002337 }
2338
Olivier Houchard0923fa42019-01-11 18:43:04 +01002339 if (check->server) {
2340 if (check->result == CHK_RES_FAILED) {
2341 /* a failure or timeout detected */
2342 check_notify_failure(check);
2343 }
2344 else if (check->result == CHK_RES_CONDPASS) {
2345 /* check is OK but asks for stopping mode */
2346 check_notify_stopping(check);
2347 }
2348 else if (check->result == CHK_RES_PASSED) {
2349 /* a success was detected */
2350 check_notify_success(check);
2351 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002352 }
Christopher Faulet88ce5d12017-10-20 15:41:18 +02002353 task_set_affinity(t, MAX_THREADS_MASK);
Willy Tarreau2c115e52013-12-11 19:41:16 +01002354 check->state &= ~CHK_ST_INPROGRESS;
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002355
Olivier Houchard0923fa42019-01-11 18:43:04 +01002356 if (check->server) {
2357 rv = 0;
2358 if (global.spread_checks > 0) {
2359 rv = srv_getinter(check) * global.spread_checks / 100;
2360 rv -= (int) (2 * rv * (rand() / (RAND_MAX + 1.0)));
2361 }
2362 t->expire = tick_add(now_ms, MS_TO_TICKS(srv_getinter(check) + rv));
Willy Tarreaubaaee002006-06-26 02:48:02 +02002363 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002364 }
Willy Tarreau5a78f362012-11-23 12:47:05 +01002365
2366 reschedule:
2367 while (tick_is_expired(t->expire, now_ms))
Simon Horman4a741432013-02-23 15:35:38 +09002368 t->expire = tick_add(t->expire, MS_TO_TICKS(check->inter));
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002369 out_unlock:
Olivier Houchard0923fa42019-01-11 18:43:04 +01002370 if (check->server)
2371 HA_SPIN_UNLOCK(SERVER_LOCK, &check->server->lock);
Willy Tarreau26c25062009-03-08 09:38:41 +01002372 return t;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002373}
2374
Simon Horman98637e52014-06-20 12:30:16 +09002375/*
2376 * manages a server health-check. Returns
2377 * the time the task accepts to wait, or TIME_ETERNITY for infinity.
2378 */
Olivier Houchard9f6af332018-05-25 14:04:04 +02002379static struct task *process_chk(struct task *t, void *context, unsigned short state)
Simon Horman98637e52014-06-20 12:30:16 +09002380{
Olivier Houchard9f6af332018-05-25 14:04:04 +02002381 struct check *check = context;
Simon Horman98637e52014-06-20 12:30:16 +09002382
2383 if (check->type == PR_O2_EXT_CHK)
Olivier Houchard9f6af332018-05-25 14:04:04 +02002384 return process_chk_proc(t, context, state);
2385 return process_chk_conn(t, context, state);
Baptiste Assmanna68ca962015-04-14 01:15:08 +02002386
Simon Horman98637e52014-06-20 12:30:16 +09002387}
2388
Simon Horman5c942422013-11-25 10:46:32 +09002389static int start_check_task(struct check *check, int mininter,
2390 int nbcheck, int srvpos)
2391{
2392 struct task *t;
2393 /* task for the check */
Emeric Brunc60def82017-09-27 14:59:38 +02002394 if ((t = task_new(MAX_THREADS_MASK)) == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002395 ha_alert("Starting [%s:%s] check: out of memory.\n",
2396 check->server->proxy->id, check->server->id);
Simon Horman5c942422013-11-25 10:46:32 +09002397 return 0;
2398 }
2399
2400 check->task = t;
2401 t->process = process_chk;
2402 t->context = check;
2403
Willy Tarreau1746eec2014-04-25 10:46:47 +02002404 if (mininter < srv_getinter(check))
2405 mininter = srv_getinter(check);
2406
2407 if (global.max_spread_checks && mininter > global.max_spread_checks)
2408 mininter = global.max_spread_checks;
2409
Simon Horman5c942422013-11-25 10:46:32 +09002410 /* check this every ms */
Willy Tarreau1746eec2014-04-25 10:46:47 +02002411 t->expire = tick_add(now_ms, MS_TO_TICKS(mininter * srvpos / nbcheck));
Simon Horman5c942422013-11-25 10:46:32 +09002412 check->start = now;
2413 task_queue(t);
2414
2415 return 1;
2416}
2417
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002418/*
2419 * Start health-check.
Willy Tarreau865c5142016-12-21 20:04:48 +01002420 * Returns 0 if OK, ERR_FATAL on error, and prints the error in this case.
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002421 */
Willy Tarreau865c5142016-12-21 20:04:48 +01002422static int start_checks()
2423{
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002424
2425 struct proxy *px;
2426 struct server *s;
2427 struct task *t;
Simon Horman4a741432013-02-23 15:35:38 +09002428 int nbcheck=0, mininter=0, srvpos=0;
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002429
Willy Tarreau2c43a1e2007-10-14 23:05:39 +02002430 /* 1- count the checkers to run simultaneously.
2431 * We also determine the minimum interval among all of those which
2432 * have an interval larger than SRV_CHK_INTER_THRES. This interval
2433 * will be used to spread their start-up date. Those which have
Jamie Gloudon801a0a32012-08-25 00:18:33 -04002434 * a shorter interval will start independently and will not dictate
Willy Tarreau2c43a1e2007-10-14 23:05:39 +02002435 * too short an interval for all others.
2436 */
Olivier Houchardfbc74e82017-11-24 16:54:05 +01002437 for (px = proxies_list; px; px = px->next) {
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002438 for (s = px->srv; s; s = s->next) {
Willy Tarreaue7b73482013-11-21 11:50:50 +01002439 if (s->slowstart) {
Emeric Brunc60def82017-09-27 14:59:38 +02002440 if ((t = task_new(MAX_THREADS_MASK)) == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002441 ha_alert("Starting [%s:%s] check: out of memory.\n", px->id, s->id);
Willy Tarreau865c5142016-12-21 20:04:48 +01002442 return ERR_ALERT | ERR_FATAL;
Willy Tarreaue7b73482013-11-21 11:50:50 +01002443 }
2444 /* We need a warmup task that will be called when the server
2445 * state switches from down to up.
2446 */
2447 s->warmup = t;
2448 t->process = server_warmup;
2449 t->context = s;
Baptiste Assmann6076d1c2015-09-17 22:53:59 +02002450 /* server can be in this state only because of */
Emeric Brun52a91d32017-08-31 14:41:55 +02002451 if (s->next_state == SRV_ST_STARTING)
Baptiste Assmann6076d1c2015-09-17 22:53:59 +02002452 task_schedule(s->warmup, tick_add(now_ms, MS_TO_TICKS(MAX(1000, (now.tv_sec - s->last_change)) / 20)));
Willy Tarreaue7b73482013-11-21 11:50:50 +01002453 }
2454
Willy Tarreaud8514a22013-12-11 21:10:14 +01002455 if (s->check.state & CHK_ST_CONFIGURED) {
2456 nbcheck++;
2457 if ((srv_getinter(&s->check) >= SRV_CHK_INTER_THRES) &&
2458 (!mininter || mininter > srv_getinter(&s->check)))
2459 mininter = srv_getinter(&s->check);
2460 }
Willy Tarreau15f39102013-12-11 20:41:18 +01002461
Willy Tarreaud8514a22013-12-11 21:10:14 +01002462 if (s->agent.state & CHK_ST_CONFIGURED) {
2463 nbcheck++;
2464 if ((srv_getinter(&s->agent) >= SRV_CHK_INTER_THRES) &&
2465 (!mininter || mininter > srv_getinter(&s->agent)))
2466 mininter = srv_getinter(&s->agent);
2467 }
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002468 }
2469 }
2470
Simon Horman4a741432013-02-23 15:35:38 +09002471 if (!nbcheck)
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002472 return 0;
2473
2474 srand((unsigned)time(NULL));
2475
2476 /*
2477 * 2- start them as far as possible from each others. For this, we will
2478 * start them after their interval set to the min interval divided by
2479 * the number of servers, weighted by the server's position in the list.
2480 */
Olivier Houchardfbc74e82017-11-24 16:54:05 +01002481 for (px = proxies_list; px; px = px->next) {
Simon Horman98637e52014-06-20 12:30:16 +09002482 if ((px->options2 & PR_O2_CHK_ANY) == PR_O2_EXT_CHK) {
2483 if (init_pid_list()) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002484 ha_alert("Starting [%s] check: out of memory.\n", px->id);
Willy Tarreau865c5142016-12-21 20:04:48 +01002485 return ERR_ALERT | ERR_FATAL;
Simon Horman98637e52014-06-20 12:30:16 +09002486 }
2487 }
2488
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002489 for (s = px->srv; s; s = s->next) {
Simon Hormand60d6912013-11-25 10:46:36 +09002490 /* A task for the main check */
Willy Tarreauff5ae352013-12-11 20:36:34 +01002491 if (s->check.state & CHK_ST_CONFIGURED) {
Cyril Bonté99c5bf52014-08-07 01:55:38 +02002492 if (s->check.type == PR_O2_EXT_CHK) {
2493 if (!prepare_external_check(&s->check))
Willy Tarreau865c5142016-12-21 20:04:48 +01002494 return ERR_ALERT | ERR_FATAL;
Cyril Bonté99c5bf52014-08-07 01:55:38 +02002495 }
Simon Hormand60d6912013-11-25 10:46:36 +09002496 if (!start_check_task(&s->check, mininter, nbcheck, srvpos))
Willy Tarreau865c5142016-12-21 20:04:48 +01002497 return ERR_ALERT | ERR_FATAL;
Simon Hormand60d6912013-11-25 10:46:36 +09002498 srvpos++;
2499 }
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002500
Simon Hormand60d6912013-11-25 10:46:36 +09002501 /* A task for a auxiliary agent check */
Willy Tarreauff5ae352013-12-11 20:36:34 +01002502 if (s->agent.state & CHK_ST_CONFIGURED) {
Simon Hormand60d6912013-11-25 10:46:36 +09002503 if (!start_check_task(&s->agent, mininter, nbcheck, srvpos)) {
Willy Tarreau865c5142016-12-21 20:04:48 +01002504 return ERR_ALERT | ERR_FATAL;
Simon Hormand60d6912013-11-25 10:46:36 +09002505 }
2506 srvpos++;
2507 }
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002508 }
2509 }
2510 return 0;
2511}
Willy Tarreaubaaee002006-06-26 02:48:02 +02002512
2513/*
Willy Tarreau5b3a2022012-09-28 15:01:02 +02002514 * Perform content verification check on data in s->check.buffer buffer.
Willy Tarreaubd741542010-03-16 18:46:54 +01002515 * The buffer MUST be terminated by a null byte before calling this function.
2516 * Sets server status appropriately. The caller is responsible for ensuring
2517 * that the buffer contains at least 13 characters. If <done> is zero, we may
2518 * return 0 to indicate that data is required to decide of a match.
2519 */
2520static int httpchk_expect(struct server *s, int done)
2521{
Christopher Faulet1bc04c72017-10-29 20:14:08 +01002522 static THREAD_LOCAL char status_msg[] = "HTTP status check returned code <000>";
Willy Tarreaubd741542010-03-16 18:46:54 +01002523 char status_code[] = "000";
2524 char *contentptr;
2525 int crlf;
2526 int ret;
2527
2528 switch (s->proxy->options2 & PR_O2_EXP_TYPE) {
2529 case PR_O2_EXP_STS:
2530 case PR_O2_EXP_RSTS:
Willy Tarreauc9fa0482018-07-10 17:43:27 +02002531 memcpy(status_code, b_head(&s->check.bi) + 9, 3);
2532 memcpy(status_msg + strlen(status_msg) - 4, b_head(&s->check.bi) + 9, 3);
Willy Tarreaubd741542010-03-16 18:46:54 +01002533
2534 if ((s->proxy->options2 & PR_O2_EXP_TYPE) == PR_O2_EXP_STS)
2535 ret = strncmp(s->proxy->expect_str, status_code, 3) == 0;
2536 else
Thierry FOURNIER09af0d62014-06-18 11:35:54 +02002537 ret = regex_exec(s->proxy->expect_regex, status_code);
Willy Tarreaubd741542010-03-16 18:46:54 +01002538
2539 /* we necessarily have the response, so there are no partial failures */
2540 if (s->proxy->options2 & PR_O2_EXP_INV)
2541 ret = !ret;
2542
Simon Horman4a741432013-02-23 15:35:38 +09002543 set_server_check_status(&s->check, ret ? HCHK_STATUS_L7OKD : HCHK_STATUS_L7STS, status_msg);
Willy Tarreaubd741542010-03-16 18:46:54 +01002544 break;
2545
2546 case PR_O2_EXP_STR:
2547 case PR_O2_EXP_RSTR:
2548 /* very simple response parser: ignore CR and only count consecutive LFs,
2549 * stop with contentptr pointing to first char after the double CRLF or
2550 * to '\0' if crlf < 2.
2551 */
2552 crlf = 0;
Willy Tarreauc9fa0482018-07-10 17:43:27 +02002553 for (contentptr = b_head(&s->check.bi); *contentptr; contentptr++) {
Willy Tarreaubd741542010-03-16 18:46:54 +01002554 if (crlf >= 2)
2555 break;
2556 if (*contentptr == '\r')
2557 continue;
2558 else if (*contentptr == '\n')
2559 crlf++;
2560 else
2561 crlf = 0;
2562 }
2563
2564 /* Check that response contains a body... */
2565 if (crlf < 2) {
2566 if (!done)
2567 return 0;
2568
Simon Horman4a741432013-02-23 15:35:38 +09002569 set_server_check_status(&s->check, HCHK_STATUS_L7RSP,
Willy Tarreaubd741542010-03-16 18:46:54 +01002570 "HTTP content check could not find a response body");
2571 return 1;
2572 }
2573
2574 /* Check that response body is not empty... */
2575 if (*contentptr == '\0') {
Willy Tarreaua164fb52011-04-13 09:32:41 +02002576 if (!done)
2577 return 0;
2578
Simon Horman4a741432013-02-23 15:35:38 +09002579 set_server_check_status(&s->check, HCHK_STATUS_L7RSP,
Willy Tarreaubd741542010-03-16 18:46:54 +01002580 "HTTP content check found empty response body");
2581 return 1;
2582 }
2583
2584 /* Check the response content against the supplied string
2585 * or regex... */
2586 if ((s->proxy->options2 & PR_O2_EXP_TYPE) == PR_O2_EXP_STR)
2587 ret = strstr(contentptr, s->proxy->expect_str) != NULL;
2588 else
Thierry FOURNIER09af0d62014-06-18 11:35:54 +02002589 ret = regex_exec(s->proxy->expect_regex, contentptr);
Willy Tarreaubd741542010-03-16 18:46:54 +01002590
2591 /* if we don't match, we may need to wait more */
2592 if (!ret && !done)
2593 return 0;
2594
2595 if (ret) {
2596 /* content matched */
2597 if (s->proxy->options2 & PR_O2_EXP_INV)
Simon Horman4a741432013-02-23 15:35:38 +09002598 set_server_check_status(&s->check, HCHK_STATUS_L7RSP,
Willy Tarreaubd741542010-03-16 18:46:54 +01002599 "HTTP check matched unwanted content");
2600 else
Simon Horman4a741432013-02-23 15:35:38 +09002601 set_server_check_status(&s->check, HCHK_STATUS_L7OKD,
Willy Tarreaubd741542010-03-16 18:46:54 +01002602 "HTTP content check matched");
2603 }
2604 else {
2605 if (s->proxy->options2 & PR_O2_EXP_INV)
Simon Horman4a741432013-02-23 15:35:38 +09002606 set_server_check_status(&s->check, HCHK_STATUS_L7OKD,
Willy Tarreaubd741542010-03-16 18:46:54 +01002607 "HTTP check did not match unwanted content");
2608 else
Simon Horman4a741432013-02-23 15:35:38 +09002609 set_server_check_status(&s->check, HCHK_STATUS_L7RSP,
Willy Tarreaubd741542010-03-16 18:46:54 +01002610 "HTTP content check did not match");
2611 }
2612 break;
2613 }
2614 return 1;
2615}
2616
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002617/*
2618 * return the id of a step in a send/expect session
2619 */
Simon Hormane16c1b32015-01-30 11:22:57 +09002620static int tcpcheck_get_step_id(struct check *check)
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002621{
2622 struct tcpcheck_rule *cur = NULL, *next = NULL;
2623 int i = 0;
2624
Willy Tarreau213c6782014-10-02 14:51:02 +02002625 /* not even started anything yet => step 0 = initial connect */
Baptiste Assmannf95bc8e2015-04-25 16:03:06 +02002626 if (!check->current_step)
Willy Tarreau213c6782014-10-02 14:51:02 +02002627 return 0;
2628
Simon Hormane16c1b32015-01-30 11:22:57 +09002629 cur = check->last_started_step;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002630
2631 /* no step => first step */
2632 if (cur == NULL)
2633 return 1;
2634
2635 /* increment i until current step */
Simon Hormane16c1b32015-01-30 11:22:57 +09002636 list_for_each_entry(next, check->tcpcheck_rules, list) {
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002637 if (next->list.p == &cur->list)
2638 break;
2639 ++i;
2640 }
2641
2642 return i;
2643}
2644
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002645/*
2646 * return the latest known comment before (including) the given stepid
2647 * returns NULL if no comment found
2648 */
2649static char * tcpcheck_get_step_comment(struct check *check, int stepid)
2650{
2651 struct tcpcheck_rule *cur = NULL;
2652 char *ret = NULL;
2653 int i = 0;
2654
2655 /* not even started anything yet, return latest comment found before any action */
2656 if (!check->current_step) {
2657 list_for_each_entry(cur, check->tcpcheck_rules, list) {
2658 if (cur->action == TCPCHK_ACT_COMMENT)
2659 ret = cur->comment;
2660 else
2661 goto return_comment;
2662 }
2663 }
2664
2665 i = 1;
2666 list_for_each_entry(cur, check->tcpcheck_rules, list) {
2667 if (cur->comment)
2668 ret = cur->comment;
2669
2670 if (i >= stepid)
2671 goto return_comment;
2672
2673 ++i;
2674 }
2675
2676 return_comment:
2677 return ret;
2678}
2679
Willy Tarreaube74b882017-10-04 16:22:49 +02002680/* proceed with next steps for the TCP checks <check>. Note that this is called
2681 * both from the connection's wake() callback and from the check scheduling task.
Willy Tarreau6bdcab02017-10-04 18:41:00 +02002682 * It returns 0 on normal cases, or <0 if a close() has happened on an existing
2683 * connection, presenting the risk of an fd replacement.
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002684 *
2685 * Please do NOT place any return statement in this function and only leave
2686 * via the out_unlock label after setting retcode.
Willy Tarreaube74b882017-10-04 16:22:49 +02002687 */
Willy Tarreau6bdcab02017-10-04 18:41:00 +02002688static int tcpcheck_main(struct check *check)
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002689{
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002690 char *contentptr, *comment;
Willy Tarreauce8c42a2015-05-13 11:23:01 +02002691 struct tcpcheck_rule *next;
Baptiste Assmanncfbd1b82015-05-02 09:00:23 +02002692 int done = 0, ret = 0, step = 0;
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002693 struct conn_stream *cs = check->cs;
2694 struct connection *conn = cs_conn(cs);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002695 struct server *s = check->server;
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01002696 struct proxy *proxy = check->proxy;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002697 struct task *t = check->task;
Simon Hormane16c1b32015-01-30 11:22:57 +09002698 struct list *head = check->tcpcheck_rules;
Willy Tarreau6bdcab02017-10-04 18:41:00 +02002699 int retcode = 0;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002700
Willy Tarreauef953952014-10-02 14:30:14 +02002701 /* here, we know that the check is complete or that it failed */
2702 if (check->result != CHK_RES_UNKNOWN)
2703 goto out_end_tcpcheck;
2704
2705 /* We have 4 possibilities here :
2706 * 1. we've not yet attempted step 1, and step 1 is a connect, so no
Willy Tarreau00149122017-10-04 18:05:01 +02002707 * connection attempt was made yet ; conn==NULL;current_step==NULL.
Willy Tarreauef953952014-10-02 14:30:14 +02002708 * 2. we've not yet attempted step 1, and step 1 is a not connect or
2709 * does not exist (no rule), so a connection attempt was made
Willy Tarreau00149122017-10-04 18:05:01 +02002710 * before coming here, conn!=NULL.
Willy Tarreauef953952014-10-02 14:30:14 +02002711 * 3. we're coming back after having started with step 1, so we may
Willy Tarreau00149122017-10-04 18:05:01 +02002712 * be waiting for a connection attempt to complete. conn!=NULL.
2713 * 4. the connection + handshake are complete. conn!=NULL.
Willy Tarreauef953952014-10-02 14:30:14 +02002714 *
2715 * #2 and #3 are quite similar, we want both the connection and the
2716 * handshake to complete before going any further. Thus we must always
2717 * wait for a connection to complete unless we're before and existing
2718 * step 1.
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002719 */
Willy Tarreau449f9522015-05-13 15:39:48 +02002720
2721 /* find first rule and skip comments */
2722 next = LIST_NEXT(head, struct tcpcheck_rule *, list);
2723 while (&next->list != head && next->action == TCPCHK_ACT_COMMENT)
2724 next = LIST_NEXT(&next->list, struct tcpcheck_rule *, list);
2725
Willy Tarreau00149122017-10-04 18:05:01 +02002726 if ((check->current_step || &next->list == head) &&
2727 (!(conn->flags & CO_FL_CONNECTED) || (conn->flags & CO_FL_HANDSHAKE))) {
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002728 /* we allow up to min(inter, timeout.connect) for a connection
2729 * to establish but only when timeout.check is set
2730 * as it may be to short for a full check otherwise
2731 */
2732 while (tick_is_expired(t->expire, now_ms)) {
2733 int t_con;
2734
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01002735 t_con = tick_add(t->expire, proxy->timeout.connect);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002736 t->expire = tick_add(t->expire, MS_TO_TICKS(check->inter));
2737
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01002738 if (proxy->timeout.check)
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002739 t->expire = tick_first(t->expire, t_con);
2740 }
Christopher Fauletb6102852017-11-28 10:06:29 +01002741 goto out;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002742 }
2743
Willy Tarreauef953952014-10-02 14:30:14 +02002744 /* special case: option tcp-check with no rule, a connect is enough */
Willy Tarreau449f9522015-05-13 15:39:48 +02002745 if (&next->list == head) {
Willy Tarreauef953952014-10-02 14:30:14 +02002746 set_server_check_status(check, HCHK_STATUS_L4OK, NULL);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002747 goto out_end_tcpcheck;
Willy Tarreauef953952014-10-02 14:30:14 +02002748 }
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002749
Willy Tarreau213c6782014-10-02 14:51:02 +02002750 /* no step means first step initialisation */
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002751 if (check->current_step == NULL) {
Willy Tarreau213c6782014-10-02 14:51:02 +02002752 check->last_started_step = NULL;
Willy Tarreauc9fa0482018-07-10 17:43:27 +02002753 b_reset(&check->bo);
2754 b_reset(&check->bi);
Willy Tarreau449f9522015-05-13 15:39:48 +02002755 check->current_step = next;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002756 t->expire = tick_add(now_ms, MS_TO_TICKS(check->inter));
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01002757 if (proxy->timeout.check)
2758 t->expire = tick_add_ifset(now_ms, proxy->timeout.check);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002759 }
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002760
Willy Tarreauabca5b62013-12-06 14:19:25 +01002761 while (1) {
Willy Tarreau263013d2015-05-13 11:59:14 +02002762 /* We have to try to flush the output buffer before reading, at
2763 * the end, or if we're about to send a string that does not fit
2764 * in the remaining space. That explains why we break out of the
Willy Tarreau00149122017-10-04 18:05:01 +02002765 * loop after this control. If we have data, conn is valid.
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002766 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02002767 if (b_data(&check->bo) &&
Willy Tarreauce8c42a2015-05-13 11:23:01 +02002768 (&check->current_step->list == head ||
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002769 check->current_step->action != TCPCHK_ACT_SEND ||
Willy Tarreauc9fa0482018-07-10 17:43:27 +02002770 check->current_step->string_len >= b_room(&check->bo))) {
Willy Tarreaudeccd112018-06-14 18:38:55 +02002771 int ret;
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002772
Olivier Houcharded0f2072018-08-16 15:41:52 +02002773 ret = cs->conn->mux->snd_buf(cs, &check->bo, b_data(&check->bo), 0);
Willy Tarreauc9fa0482018-07-10 17:43:27 +02002774 b_realign_if_empty(&check->bo);
Willy Tarreaudeccd112018-06-14 18:38:55 +02002775
2776 if (ret <= 0) {
Willy Tarreau4ff3b892017-10-16 15:17:17 +02002777 if (conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR) {
Willy Tarreaub5259bf2017-10-04 14:47:29 +02002778 chk_report_conn_err(check, errno, 0);
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002779 goto out_end_tcpcheck;
2780 }
Willy Tarreau263013d2015-05-13 11:59:14 +02002781 break;
Willy Tarreauabca5b62013-12-06 14:19:25 +01002782 }
Olivier Houchard4501c3e2018-08-28 19:36:18 +02002783 if (b_data(&check->bo)) {
Willy Tarreau4f6516d2018-12-19 13:59:17 +01002784 cs->conn->mux->subscribe(cs, SUB_RETRY_SEND, &check->wait_list);
Olivier Houchard4501c3e2018-08-28 19:36:18 +02002785 goto out;
2786 }
Willy Tarreauabca5b62013-12-06 14:19:25 +01002787 }
2788
Willy Tarreau263013d2015-05-13 11:59:14 +02002789 if (&check->current_step->list == head)
Willy Tarreauabca5b62013-12-06 14:19:25 +01002790 break;
2791
Willy Tarreauce8c42a2015-05-13 11:23:01 +02002792 /* have 'next' point to the next rule or NULL if we're on the
2793 * last one, connect() needs this.
2794 */
Willy Tarreau5581c272015-05-13 12:24:53 +02002795 next = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002796
2797 /* bypass all comment rules */
Willy Tarreauf2c87352015-05-13 12:08:21 +02002798 while (&next->list != head && next->action == TCPCHK_ACT_COMMENT)
Willy Tarreau5581c272015-05-13 12:24:53 +02002799 next = LIST_NEXT(&next->list, struct tcpcheck_rule *, list);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002800
2801 /* NULL if we're on the last rule */
Willy Tarreauf3d34822014-12-08 12:11:28 +01002802 if (&next->list == head)
2803 next = NULL;
2804
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002805 if (check->current_step->action == TCPCHK_ACT_CONNECT) {
2806 struct protocol *proto;
2807 struct xprt_ops *xprt;
2808
Willy Tarreau00149122017-10-04 18:05:01 +02002809 /* For a connect action we'll create a new connection.
2810 * We may also have to kill a previous one. But we don't
2811 * want to leave *without* a connection if we came here
2812 * from the connection layer, hence with a connection.
2813 * Thus we'll proceed in the following order :
2814 * 1: close but not release previous connection
2815 * 2: try to get a new connection
2816 * 3: release and replace the old one on success
2817 */
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002818 if (check->cs) {
Willy Tarreaua553ae92017-10-05 18:52:17 +02002819 cs_close(check->cs);
2820 retcode = -1; /* do not reuse the fd in the caller! */
Willy Tarreau00149122017-10-04 18:05:01 +02002821 }
2822
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002823 /* mark the step as started */
2824 check->last_started_step = check->current_step;
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002825
2826 /* prepare new connection */
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002827 cs = cs_new(NULL);
2828 if (!cs) {
Willy Tarreau00149122017-10-04 18:05:01 +02002829 step = tcpcheck_get_step_id(check);
2830 chunk_printf(&trash, "TCPCHK error allocating connection at step %d", step);
2831 comment = tcpcheck_get_step_comment(check, step);
2832 if (comment)
2833 chunk_appendf(&trash, " comment: '%s'", comment);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02002834 set_server_check_status(check, HCHK_STATUS_SOCKERR,
2835 trash.area);
Willy Tarreau00149122017-10-04 18:05:01 +02002836 check->current_step = NULL;
Christopher Fauletb6102852017-11-28 10:06:29 +01002837 goto out;
Willy Tarreau00149122017-10-04 18:05:01 +02002838 }
2839
Olivier Houchard49065542019-05-31 19:20:36 +02002840 if (check->cs) {
2841 if (check->wait_list.events)
2842 cs->conn->xprt->unsubscribe(cs->conn,
2843 cs->conn->xprt_ctx,
2844 check->wait_list.events,
2845 &check->wait_list);
Willy Tarreau86eded62019-06-14 14:47:49 +02002846 /* We may have been scheduled to run, and the
2847 * I/O handler expects to have a cs, so remove
2848 * the tasklet
2849 */
2850 tasklet_remove_from_tasklet_list(check->wait_list.tasklet);
Willy Tarreauac59f362017-10-08 11:10:19 +02002851 cs_destroy(check->cs);
Olivier Houchard49065542019-05-31 19:20:36 +02002852 }
Willy Tarreau00149122017-10-04 18:05:01 +02002853
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002854 check->cs = cs;
2855 conn = cs->conn;
Olivier Houchard26e1a8f2018-09-12 15:15:12 +02002856 /* Maybe there were an older connection we were waiting on */
Willy Tarreau4f6516d2018-12-19 13:59:17 +01002857 check->wait_list.events = 0;
Olivier Houchard0923fa42019-01-11 18:43:04 +01002858 conn->target = s ? &s->obj_type : &proxy->obj_type;
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002859
2860 /* no client address */
2861 clear_addr(&conn->addr.from);
2862
Simon Horman41f58762015-01-30 11:22:56 +09002863 if (is_addr(&check->addr)) {
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002864 /* we'll connect to the check addr specified on the server */
Simon Horman41f58762015-01-30 11:22:56 +09002865 conn->addr.to = check->addr;
Willy Tarreau640556c2014-05-09 23:38:15 +02002866 }
2867 else {
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002868 /* we'll connect to the addr on the server */
2869 conn->addr.to = s->addr;
Willy Tarreau640556c2014-05-09 23:38:15 +02002870 }
Thierry FOURNIERbb2ae642015-01-14 11:31:49 +01002871 proto = protocol_by_family(conn->addr.to.ss_family);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002872
2873 /* port */
2874 if (check->current_step->port)
2875 set_host_port(&conn->addr.to, check->current_step->port);
2876 else if (check->port)
2877 set_host_port(&conn->addr.to, check->port);
Baptiste Assmann2f3a56b2018-03-19 12:22:41 +01002878 else if (s->svc_port)
2879 set_host_port(&conn->addr.to, s->svc_port);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002880
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002881 if (check->current_step->conn_opts & TCPCHK_OPT_SSL) {
Willy Tarreaua261e9b2016-12-22 20:44:00 +01002882 xprt = xprt_get(XPRT_SSL);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002883 }
2884 else {
Willy Tarreaua261e9b2016-12-22 20:44:00 +01002885 xprt = xprt_get(XPRT_RAW);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002886 }
Willy Tarreaube373152018-09-06 11:45:30 +02002887
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002888 conn_prepare(conn, proto, xprt);
Olivier Houchardf67be932019-01-29 15:47:43 +01002889 if (conn_install_mux(conn, &mux_pt_ops, cs, proxy, NULL) < 0)
2890 return SF_ERR_RESOURCE;
Willy Tarreaube373152018-09-06 11:45:30 +02002891 cs_attach(cs, check, &check_conn_cb);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002892
Willy Tarreaue7dff022015-04-03 01:14:29 +02002893 ret = SF_ERR_INTERNAL;
Ricardo Nabinger Sanchez4bccea92019-03-28 21:42:23 -03002894 if (proto && proto->connect)
Willy Tarreauf3d34822014-12-08 12:11:28 +01002895 ret = proto->connect(conn,
Olivier Houchardfdcb0072019-05-06 18:32:29 +02002896 CONNECT_HAS_DATA /* I/O polling is always needed */ | (next && next->action == TCPCHK_ACT_EXPECT) ? 0 : CONNECT_DELACK_ALWAYS);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002897 if (check->current_step->conn_opts & TCPCHK_OPT_SEND_PROXY) {
2898 conn->send_proxy_ofs = 1;
2899 conn->flags |= CO_FL_SEND_PROXY;
Olivier Houchardfe50bfb2019-05-27 12:09:19 +02002900 if (xprt_add_hs(conn) < 0)
2901 ret = SF_ERR_RESOURCE;
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002902 }
2903
2904 /* It can return one of :
Willy Tarreaue7dff022015-04-03 01:14:29 +02002905 * - SF_ERR_NONE if everything's OK
2906 * - SF_ERR_SRVTO if there are no more servers
2907 * - SF_ERR_SRVCL if the connection was refused by the server
2908 * - SF_ERR_PRXCOND if the connection has been limited by the proxy (maxconn)
2909 * - SF_ERR_RESOURCE if a system resource is lacking (eg: fd limits, ports, ...)
2910 * - SF_ERR_INTERNAL for any other purely internal errors
Tim Düsterhus4896c442016-11-29 02:15:19 +01002911 * Additionally, in the case of SF_ERR_RESOURCE, an emergency log will be emitted.
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002912 * Note that we try to prevent the network stack from sending the ACK during the
2913 * connect() when a pure TCP check is used (without PROXY protocol).
2914 */
2915 switch (ret) {
Willy Tarreaue7dff022015-04-03 01:14:29 +02002916 case SF_ERR_NONE:
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002917 /* we allow up to min(inter, timeout.connect) for a connection
2918 * to establish but only when timeout.check is set
2919 * as it may be to short for a full check otherwise
2920 */
2921 t->expire = tick_add(now_ms, MS_TO_TICKS(check->inter));
2922
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01002923 if (proxy->timeout.check && proxy->timeout.connect) {
2924 int t_con = tick_add(now_ms, proxy->timeout.connect);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002925 t->expire = tick_first(t->expire, t_con);
2926 }
2927 break;
Willy Tarreaue7dff022015-04-03 01:14:29 +02002928 case SF_ERR_SRVTO: /* ETIMEDOUT */
2929 case SF_ERR_SRVCL: /* ECONNREFUSED, ENETUNREACH, ... */
Baptiste Assmanncfbd1b82015-05-02 09:00:23 +02002930 step = tcpcheck_get_step_id(check);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002931 chunk_printf(&trash, "TCPCHK error establishing connection at step %d: %s",
Baptiste Assmanncfbd1b82015-05-02 09:00:23 +02002932 step, strerror(errno));
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002933 comment = tcpcheck_get_step_comment(check, step);
2934 if (comment)
2935 chunk_appendf(&trash, " comment: '%s'", comment);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02002936 set_server_check_status(check, HCHK_STATUS_L4CON,
2937 trash.area);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002938 goto out_end_tcpcheck;
Willy Tarreaue7dff022015-04-03 01:14:29 +02002939 case SF_ERR_PRXCOND:
2940 case SF_ERR_RESOURCE:
2941 case SF_ERR_INTERNAL:
Baptiste Assmanncfbd1b82015-05-02 09:00:23 +02002942 step = tcpcheck_get_step_id(check);
2943 chunk_printf(&trash, "TCPCHK error establishing connection at step %d", step);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002944 comment = tcpcheck_get_step_comment(check, step);
2945 if (comment)
2946 chunk_appendf(&trash, " comment: '%s'", comment);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02002947 set_server_check_status(check, HCHK_STATUS_SOCKERR,
2948 trash.area);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002949 goto out_end_tcpcheck;
2950 }
2951
2952 /* allow next rule */
Willy Tarreau5581c272015-05-13 12:24:53 +02002953 check->current_step = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002954
2955 /* bypass all comment rules */
Willy Tarreauf2c87352015-05-13 12:08:21 +02002956 while (&check->current_step->list != head &&
2957 check->current_step->action == TCPCHK_ACT_COMMENT)
Willy Tarreau5581c272015-05-13 12:24:53 +02002958 check->current_step = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002959
Willy Tarreauf2c87352015-05-13 12:08:21 +02002960 if (&check->current_step->list == head)
2961 break;
2962
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002963 } /* end 'connect' */
2964 else if (check->current_step->action == TCPCHK_ACT_SEND) {
2965 /* mark the step as started */
2966 check->last_started_step = check->current_step;
2967
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002968 /* reset the read buffer */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02002969 if (*b_head(&check->bi) != '\0') {
2970 *b_head(&check->bi) = '\0';
2971 b_reset(&check->bi);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002972 }
2973
Willy Tarreaubbae3f02017-08-30 09:59:52 +02002974 if (conn->flags & CO_FL_SOCK_WR_SH) {
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002975 conn->flags |= CO_FL_ERROR;
Willy Tarreaub5259bf2017-10-04 14:47:29 +02002976 chk_report_conn_err(check, 0, 0);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002977 goto out_end_tcpcheck;
2978 }
2979
Willy Tarreauc9fa0482018-07-10 17:43:27 +02002980 if (check->current_step->string_len >= b_size(&check->bo)) {
Willy Tarreau506a29a2018-07-18 10:07:58 +02002981 chunk_printf(&trash, "tcp-check send : string too large (%d) for buffer size (%u) at step %d",
Willy Tarreauc9fa0482018-07-10 17:43:27 +02002982 check->current_step->string_len, (unsigned int)b_size(&check->bo),
Simon Hormane16c1b32015-01-30 11:22:57 +09002983 tcpcheck_get_step_id(check));
Willy Tarreau843b7cb2018-07-13 10:54:26 +02002984 set_server_check_status(check, HCHK_STATUS_L7RSP,
2985 trash.area);
Willy Tarreauabca5b62013-12-06 14:19:25 +01002986 goto out_end_tcpcheck;
2987 }
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002988
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002989 /* do not try to send if there is no space */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02002990 if (check->current_step->string_len >= b_room(&check->bo))
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002991 continue;
2992
Willy Tarreauc9fa0482018-07-10 17:43:27 +02002993 b_putblk(&check->bo, check->current_step->string, check->current_step->string_len);
2994 *b_tail(&check->bo) = '\0'; /* to make gdb output easier to read */
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002995
Willy Tarreauabca5b62013-12-06 14:19:25 +01002996 /* go to next rule and try to send */
Willy Tarreau5581c272015-05-13 12:24:53 +02002997 check->current_step = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002998
2999 /* bypass all comment rules */
Willy Tarreauf2c87352015-05-13 12:08:21 +02003000 while (&check->current_step->list != head &&
3001 check->current_step->action == TCPCHK_ACT_COMMENT)
Willy Tarreau5581c272015-05-13 12:24:53 +02003002 check->current_step = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Willy Tarreauf2c87352015-05-13 12:08:21 +02003003
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003004 } /* end 'send' */
Willy Tarreau98aec9f2013-12-06 16:16:41 +01003005 else if (check->current_step->action == TCPCHK_ACT_EXPECT) {
Willy Tarreau6aaa1b82013-12-11 17:09:34 +01003006 if (unlikely(check->result == CHK_RES_FAILED))
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003007 goto out_end_tcpcheck;
3008
Olivier Houchard511efea2018-08-16 15:30:32 +02003009 if (cs->conn->mux->rcv_buf(cs, &check->bi, b_size(&check->bi), 0) <= 0) {
Willy Tarreau4ff3b892017-10-16 15:17:17 +02003010 if (conn->flags & (CO_FL_ERROR | CO_FL_SOCK_RD_SH) || cs->flags & CS_FL_ERROR) {
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01003011 done = 1;
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003012 if ((conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR) && !b_data(&check->bi)) {
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01003013 /* Report network errors only if we got no other data. Otherwise
3014 * we'll let the upper layers decide whether the response is OK
3015 * or not. It is very common that an RST sent by the server is
3016 * reported as an error just after the last data chunk.
3017 */
Willy Tarreaub5259bf2017-10-04 14:47:29 +02003018 chk_report_conn_err(check, errno, 0);
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01003019 goto out_end_tcpcheck;
3020 }
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003021 }
Olivier Houchardaf4021e2018-08-09 13:06:55 +02003022 else {
Willy Tarreau4f6516d2018-12-19 13:59:17 +01003023 conn->mux->subscribe(cs, SUB_RETRY_RECV, &check->wait_list);
Willy Tarreau263013d2015-05-13 11:59:14 +02003024 break;
Olivier Houchardaf4021e2018-08-09 13:06:55 +02003025 }
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003026 }
3027
Baptiste Assmann69e273f2013-12-11 00:52:19 +01003028 /* mark the step as started */
3029 check->last_started_step = check->current_step;
3030
3031
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003032 /* Intermediate or complete response received.
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003033 * Terminate string in b_head(&check->bi) buffer.
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003034 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003035 if (b_data(&check->bi) < b_size(&check->bi)) {
3036 b_head(&check->bi)[b_data(&check->bi)] = '\0';
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003037 }
3038 else {
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003039 b_head(&check->bi)[b_data(&check->bi) - 1] = '\0';
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003040 done = 1; /* buffer full, don't wait for more data */
3041 }
3042
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003043 contentptr = b_head(&check->bi);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003044
3045 /* Check that response body is not empty... */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003046 if (!b_data(&check->bi)) {
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003047 if (!done)
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01003048 continue;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003049
3050 /* empty response */
Baptiste Assmanncfbd1b82015-05-02 09:00:23 +02003051 step = tcpcheck_get_step_id(check);
3052 chunk_printf(&trash, "TCPCHK got an empty response at step %d", step);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02003053 comment = tcpcheck_get_step_comment(check, step);
3054 if (comment)
3055 chunk_appendf(&trash, " comment: '%s'", comment);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003056 set_server_check_status(check, HCHK_STATUS_L7RSP,
3057 trash.area);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003058
3059 goto out_end_tcpcheck;
3060 }
3061
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003062 if (!done && (check->current_step->string != NULL) && (b_data(&check->bi) < check->current_step->string_len) )
Willy Tarreaua970c282013-12-06 12:47:19 +01003063 continue; /* try to read more */
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003064
Willy Tarreaua970c282013-12-06 12:47:19 +01003065 tcpcheck_expect:
Willy Tarreauce8c42a2015-05-13 11:23:01 +02003066 if (check->current_step->string != NULL)
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003067 ret = my_memmem(contentptr, b_data(&check->bi), check->current_step->string, check->current_step->string_len) != NULL;
Willy Tarreauce8c42a2015-05-13 11:23:01 +02003068 else if (check->current_step->expect_regex != NULL)
3069 ret = regex_exec(check->current_step->expect_regex, contentptr);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003070
3071 if (!ret && !done)
Willy Tarreaua970c282013-12-06 12:47:19 +01003072 continue; /* try to read more */
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003073
3074 /* matched */
Baptiste Assmanncfbd1b82015-05-02 09:00:23 +02003075 step = tcpcheck_get_step_id(check);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003076 if (ret) {
3077 /* matched but we did not want to => ERROR */
Willy Tarreauce8c42a2015-05-13 11:23:01 +02003078 if (check->current_step->inverse) {
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003079 /* we were looking for a string */
Willy Tarreauce8c42a2015-05-13 11:23:01 +02003080 if (check->current_step->string != NULL) {
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003081 chunk_printf(&trash, "TCPCHK matched unwanted content '%s' at step %d",
Willy Tarreauce8c42a2015-05-13 11:23:01 +02003082 check->current_step->string, step);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003083 }
3084 else {
3085 /* we were looking for a regex */
Baptiste Assmanncfbd1b82015-05-02 09:00:23 +02003086 chunk_printf(&trash, "TCPCHK matched unwanted content (regex) at step %d", step);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003087 }
Baptiste Assmann22b09d22015-05-01 08:03:04 +02003088 comment = tcpcheck_get_step_comment(check, step);
3089 if (comment)
3090 chunk_appendf(&trash, " comment: '%s'", comment);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003091 set_server_check_status(check, HCHK_STATUS_L7RSP,
3092 trash.area);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003093 goto out_end_tcpcheck;
3094 }
3095 /* matched and was supposed to => OK, next step */
3096 else {
Baptiste Assmann22b09d22015-05-01 08:03:04 +02003097 /* allow next rule */
Willy Tarreau5581c272015-05-13 12:24:53 +02003098 check->current_step = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02003099
3100 /* bypass all comment rules */
Willy Tarreauf2c87352015-05-13 12:08:21 +02003101 while (&check->current_step->list != head &&
3102 check->current_step->action == TCPCHK_ACT_COMMENT)
Willy Tarreau5581c272015-05-13 12:24:53 +02003103 check->current_step = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02003104
Willy Tarreauf2c87352015-05-13 12:08:21 +02003105 if (&check->current_step->list == head)
3106 break;
3107
Willy Tarreau98aec9f2013-12-06 16:16:41 +01003108 if (check->current_step->action == TCPCHK_ACT_EXPECT)
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003109 goto tcpcheck_expect;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003110 }
3111 }
3112 else {
3113 /* not matched */
3114 /* not matched and was not supposed to => OK, next step */
Willy Tarreauce8c42a2015-05-13 11:23:01 +02003115 if (check->current_step->inverse) {
Baptiste Assmann22b09d22015-05-01 08:03:04 +02003116 /* allow next rule */
Willy Tarreau5581c272015-05-13 12:24:53 +02003117 check->current_step = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02003118
3119 /* bypass all comment rules */
Willy Tarreauf2c87352015-05-13 12:08:21 +02003120 while (&check->current_step->list != head &&
3121 check->current_step->action == TCPCHK_ACT_COMMENT)
Willy Tarreau5581c272015-05-13 12:24:53 +02003122 check->current_step = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02003123
Willy Tarreauf2c87352015-05-13 12:08:21 +02003124 if (&check->current_step->list == head)
3125 break;
3126
Willy Tarreau98aec9f2013-12-06 16:16:41 +01003127 if (check->current_step->action == TCPCHK_ACT_EXPECT)
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003128 goto tcpcheck_expect;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003129 }
3130 /* not matched but was supposed to => ERROR */
3131 else {
3132 /* we were looking for a string */
Willy Tarreauce8c42a2015-05-13 11:23:01 +02003133 if (check->current_step->string != NULL) {
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003134 chunk_printf(&trash, "TCPCHK did not match content '%s' at step %d",
Willy Tarreauce8c42a2015-05-13 11:23:01 +02003135 check->current_step->string, step);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003136 }
3137 else {
3138 /* we were looking for a regex */
3139 chunk_printf(&trash, "TCPCHK did not match content (regex) at step %d",
Baptiste Assmanncfbd1b82015-05-02 09:00:23 +02003140 step);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003141 }
Baptiste Assmann22b09d22015-05-01 08:03:04 +02003142 comment = tcpcheck_get_step_comment(check, step);
3143 if (comment)
3144 chunk_appendf(&trash, " comment: '%s'", comment);
Willy Tarreau843b7cb2018-07-13 10:54:26 +02003145 set_server_check_status(check, HCHK_STATUS_L7RSP,
3146 trash.area);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003147 goto out_end_tcpcheck;
3148 }
3149 }
3150 } /* end expect */
3151 } /* end loop over double chained step list */
3152
Baptiste Assmann248f1172018-03-01 21:49:01 +01003153 /* don't do anything until the connection is established */
3154 if (!(conn->flags & CO_FL_CONNECTED)) {
3155 /* update expire time, should be done by process_chk */
3156 /* we allow up to min(inter, timeout.connect) for a connection
3157 * to establish but only when timeout.check is set
3158 * as it may be to short for a full check otherwise
3159 */
3160 while (tick_is_expired(t->expire, now_ms)) {
3161 int t_con;
3162
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01003163 t_con = tick_add(t->expire, proxy->timeout.connect);
Baptiste Assmann248f1172018-03-01 21:49:01 +01003164 t->expire = tick_add(t->expire, MS_TO_TICKS(check->inter));
3165
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01003166 if (proxy->timeout.check)
Baptiste Assmann248f1172018-03-01 21:49:01 +01003167 t->expire = tick_first(t->expire, t_con);
3168 }
3169 goto out;
3170 }
3171
Willy Tarreau263013d2015-05-13 11:59:14 +02003172 /* We're waiting for some I/O to complete, we've reached the end of the
3173 * rules, or both. Do what we have to do, otherwise we're done.
3174 */
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003175 if (&check->current_step->list == head && !b_data(&check->bo)) {
Willy Tarreau263013d2015-05-13 11:59:14 +02003176 set_server_check_status(check, HCHK_STATUS_L7OKD, "(tcp-check)");
3177 goto out_end_tcpcheck;
3178 }
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003179
Willy Tarreau53c5a042015-05-13 11:38:17 +02003180 if (&check->current_step->list != head &&
Olivier Houchard53216e72018-10-10 15:46:36 +02003181 check->current_step->action == TCPCHK_ACT_EXPECT)
Olivier Houchardaf4021e2018-08-09 13:06:55 +02003182 __event_srv_chk_r(cs);
Christopher Fauletb6102852017-11-28 10:06:29 +01003183 goto out;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003184
3185 out_end_tcpcheck:
3186 /* collect possible new errors */
Willy Tarreau4ff3b892017-10-16 15:17:17 +02003187 if (conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR)
Willy Tarreaub5259bf2017-10-04 14:47:29 +02003188 chk_report_conn_err(check, 0, 0);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003189
Baptiste Assmann69e273f2013-12-11 00:52:19 +01003190 /* cleanup before leaving */
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003191 check->current_step = NULL;
3192
Willy Tarreau6aaa1b82013-12-11 17:09:34 +01003193 if (check->result == CHK_RES_FAILED)
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003194 conn->flags |= CO_FL_ERROR;
3195
Christopher Fauletb6102852017-11-28 10:06:29 +01003196 out:
Willy Tarreau6bdcab02017-10-04 18:41:00 +02003197 return retcode;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003198}
3199
Simon Hormanb1900d52015-01-30 11:22:54 +09003200const char *init_check(struct check *check, int type)
3201{
3202 check->type = type;
3203
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003204 b_reset(&check->bi); check->bi.size = global.tune.chksize;
3205 b_reset(&check->bo); check->bo.size = global.tune.chksize;
Simon Hormanb1900d52015-01-30 11:22:54 +09003206
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003207 check->bi.area = calloc(check->bi.size, sizeof(char));
3208 check->bo.area = calloc(check->bo.size, sizeof(char));
3209
3210 if (!check->bi.area || !check->bo.area)
Simon Hormanb1900d52015-01-30 11:22:54 +09003211 return "out of memory while allocating check buffer";
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003212
Willy Tarreau3c39a7d2019-06-14 14:42:29 +02003213 check->wait_list.tasklet = tasklet_new();
3214 if (!check->wait_list.tasklet)
Olivier Houchard26e1a8f2018-09-12 15:15:12 +02003215 return "out of memroy while allocating check tasklet";
Willy Tarreau4f6516d2018-12-19 13:59:17 +01003216 check->wait_list.events = 0;
Willy Tarreau3c39a7d2019-06-14 14:42:29 +02003217 check->wait_list.tasklet->process = event_srv_chk_io;
3218 check->wait_list.tasklet->context = check;
Simon Hormanb1900d52015-01-30 11:22:54 +09003219 return NULL;
3220}
3221
Simon Hormanbfb5d332015-01-30 11:22:55 +09003222void free_check(struct check *check)
3223{
Willy Tarreauc9fa0482018-07-10 17:43:27 +02003224 free(check->bi.area);
3225 free(check->bo.area);
Christopher Faulet23d86d12018-01-25 11:36:35 +01003226 if (check->cs) {
3227 free(check->cs->conn);
3228 check->cs->conn = NULL;
3229 cs_free(check->cs);
3230 check->cs = NULL;
3231 }
Simon Hormanbfb5d332015-01-30 11:22:55 +09003232}
3233
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003234void email_alert_free(struct email_alert *alert)
3235{
3236 struct tcpcheck_rule *rule, *back;
3237
3238 if (!alert)
3239 return;
3240
Christopher Fauletde1a75b2017-10-23 15:38:19 +02003241 list_for_each_entry_safe(rule, back, &alert->tcpcheck_rules, list) {
3242 LIST_DEL(&rule->list);
3243 free(rule->comment);
3244 free(rule->string);
Dragan Dosen26743032019-04-30 15:54:36 +02003245 regex_free(rule->expect_regex);
Willy Tarreaubafbe012017-11-24 17:34:44 +01003246 pool_free(pool_head_tcpcheck_rule, rule);
Christopher Fauletde1a75b2017-10-23 15:38:19 +02003247 }
Willy Tarreaubafbe012017-11-24 17:34:44 +01003248 pool_free(pool_head_email_alert, alert);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003249}
3250
Olivier Houchard9f6af332018-05-25 14:04:04 +02003251static struct task *process_email_alert(struct task *t, void *context, unsigned short state)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003252{
Olivier Houchard9f6af332018-05-25 14:04:04 +02003253 struct check *check = context;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003254 struct email_alertq *q;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003255 struct email_alert *alert;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003256
3257 q = container_of(check, typeof(*q), check);
3258
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003259 HA_SPIN_LOCK(EMAIL_ALERTS_LOCK, &q->lock);
Christopher Faulet0108bb32017-10-20 21:34:32 +02003260 while (1) {
3261 if (!(check->state & CHK_ST_ENABLED)) {
3262 if (LIST_ISEMPTY(&q->email_alerts)) {
3263 /* All alerts processed, queue the task */
3264 t->expire = TICK_ETERNITY;
3265 task_queue(t);
Christopher Fauletc2a89a62017-10-23 15:54:24 +02003266 goto end;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003267 }
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003268
3269 alert = LIST_NEXT(&q->email_alerts, typeof(alert), list);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003270 LIST_DEL(&alert->list);
Christopher Faulet0108bb32017-10-20 21:34:32 +02003271 t->expire = now_ms;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003272 check->tcpcheck_rules = &alert->tcpcheck_rules;
Olivier Houchard0923fa42019-01-11 18:43:04 +01003273 check->status = HCHK_STATUS_INI;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003274 check->state |= CHK_ST_ENABLED;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003275 }
3276
Olivier Houchard9f6af332018-05-25 14:04:04 +02003277 process_chk(t, context, state);
Christopher Faulet0108bb32017-10-20 21:34:32 +02003278 if (check->state & CHK_ST_INPROGRESS)
3279 break;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003280
3281 alert = container_of(check->tcpcheck_rules, typeof(*alert), tcpcheck_rules);
3282 email_alert_free(alert);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003283 check->tcpcheck_rules = NULL;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003284 check->server = NULL;
3285 check->state &= ~CHK_ST_ENABLED;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003286 }
Christopher Fauletc2a89a62017-10-23 15:54:24 +02003287 end:
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003288 HA_SPIN_UNLOCK(EMAIL_ALERTS_LOCK, &q->lock);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003289 return t;
3290}
3291
Christopher Faulet0108bb32017-10-20 21:34:32 +02003292/* Initializes mailer alerts for the proxy <p> using <mls> parameters.
3293 *
3294 * The function returns 1 in success case, otherwise, it returns 0 and err is
3295 * filled.
3296 */
3297int init_email_alert(struct mailers *mls, struct proxy *p, char **err)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003298{
Christopher Faulet0108bb32017-10-20 21:34:32 +02003299 struct mailer *mailer;
3300 struct email_alertq *queues;
3301 const char *err_str;
3302 int i = 0;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003303
Christopher Faulet0108bb32017-10-20 21:34:32 +02003304 if ((queues = calloc(mls->count, sizeof(*queues))) == NULL) {
3305 memprintf(err, "out of memory while allocating mailer alerts queues");
mildis5ab01cb2018-10-02 16:46:34 +02003306 goto fail_no_queue;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003307 }
3308
Christopher Faulet0108bb32017-10-20 21:34:32 +02003309 for (mailer = mls->mailer_list; mailer; i++, mailer = mailer->next) {
3310 struct email_alertq *q = &queues[i];
3311 struct check *check = &q->check;
3312 struct task *t;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003313
3314 LIST_INIT(&q->email_alerts);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003315 HA_SPIN_INIT(&q->lock);
Christopher Faulet0108bb32017-10-20 21:34:32 +02003316 check->inter = mls->timeout.mail;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003317 check->rise = DEF_AGENT_RISETIME;
Olivier Houchardc98aa1f2019-01-11 18:17:17 +01003318 check->proxy = p;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003319 check->fall = DEF_AGENT_FALLTIME;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003320 if ((err_str = init_check(check, PR_O2_TCPCHK_CHK))) {
3321 memprintf(err, "%s", err_str);
3322 goto error;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003323 }
3324
3325 check->xprt = mailer->xprt;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003326 check->addr = mailer->addr;
Christopher Fauletb797ae12018-03-27 15:35:35 +02003327 check->port = get_host_port(&mailer->addr);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003328
Emeric Brunc60def82017-09-27 14:59:38 +02003329 if ((t = task_new(MAX_THREADS_MASK)) == NULL) {
Christopher Faulet0108bb32017-10-20 21:34:32 +02003330 memprintf(err, "out of memory while allocating mailer alerts task");
3331 goto error;
3332 }
3333
3334 check->task = t;
3335 t->process = process_email_alert;
3336 t->context = check;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003337
Christopher Faulet0108bb32017-10-20 21:34:32 +02003338 /* check this in one ms */
3339 t->expire = TICK_ETERNITY;
3340 check->start = now;
3341 task_queue(t);
3342 }
3343
3344 mls->users++;
3345 free(p->email_alert.mailers.name);
3346 p->email_alert.mailers.m = mls;
3347 p->email_alert.queues = queues;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003348 return 0;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003349
3350 error:
3351 for (i = 0; i < mls->count; i++) {
3352 struct email_alertq *q = &queues[i];
3353 struct check *check = &q->check;
3354
Willy Tarreauf6562792019-05-07 19:05:35 +02003355 task_destroy(check->task);
Christopher Faulet0108bb32017-10-20 21:34:32 +02003356 free_check(check);
3357 }
3358 free(queues);
mildis5ab01cb2018-10-02 16:46:34 +02003359 fail_no_queue:
Christopher Faulet0108bb32017-10-20 21:34:32 +02003360 return 1;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003361}
3362
3363
3364static int add_tcpcheck_expect_str(struct list *list, const char *str)
3365{
3366 struct tcpcheck_rule *tcpcheck;
3367
Willy Tarreaubafbe012017-11-24 17:34:44 +01003368 if ((tcpcheck = pool_alloc(pool_head_tcpcheck_rule)) == NULL)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003369 return 0;
Christopher Faulet31dff9b2017-10-23 15:45:20 +02003370 memset(tcpcheck, 0, sizeof(*tcpcheck));
3371 tcpcheck->action = TCPCHK_ACT_EXPECT;
3372 tcpcheck->string = strdup(str);
3373 tcpcheck->expect_regex = NULL;
3374 tcpcheck->comment = NULL;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003375 if (!tcpcheck->string) {
Willy Tarreaubafbe012017-11-24 17:34:44 +01003376 pool_free(pool_head_tcpcheck_rule, tcpcheck);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003377 return 0;
3378 }
3379
3380 LIST_ADDQ(list, &tcpcheck->list);
3381 return 1;
3382}
3383
3384static int add_tcpcheck_send_strs(struct list *list, const char * const *strs)
3385{
3386 struct tcpcheck_rule *tcpcheck;
Willy Tarreau64345aa2016-08-10 19:29:09 +02003387 const char *in;
3388 char *dst;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003389 int i;
3390
Willy Tarreaubafbe012017-11-24 17:34:44 +01003391 if ((tcpcheck = pool_alloc(pool_head_tcpcheck_rule)) == NULL)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003392 return 0;
Christopher Faulet31dff9b2017-10-23 15:45:20 +02003393 memset(tcpcheck, 0, sizeof(*tcpcheck));
3394 tcpcheck->action = TCPCHK_ACT_SEND;
3395 tcpcheck->expect_regex = NULL;
3396 tcpcheck->comment = NULL;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003397 tcpcheck->string_len = 0;
3398 for (i = 0; strs[i]; i++)
3399 tcpcheck->string_len += strlen(strs[i]);
3400
3401 tcpcheck->string = malloc(tcpcheck->string_len + 1);
3402 if (!tcpcheck->string) {
Willy Tarreaubafbe012017-11-24 17:34:44 +01003403 pool_free(pool_head_tcpcheck_rule, tcpcheck);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003404 return 0;
3405 }
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003406
Willy Tarreau64345aa2016-08-10 19:29:09 +02003407 dst = tcpcheck->string;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003408 for (i = 0; strs[i]; i++)
Willy Tarreau64345aa2016-08-10 19:29:09 +02003409 for (in = strs[i]; (*dst = *in++); dst++);
3410 *dst = 0;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003411
3412 LIST_ADDQ(list, &tcpcheck->list);
3413 return 1;
3414}
3415
Christopher Faulet0108bb32017-10-20 21:34:32 +02003416static int enqueue_one_email_alert(struct proxy *p, struct server *s,
3417 struct email_alertq *q, const char *msg)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003418{
Christopher Faulet31dff9b2017-10-23 15:45:20 +02003419 struct email_alert *alert;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003420 struct tcpcheck_rule *tcpcheck;
3421 struct check *check = &q->check;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003422
Willy Tarreaubafbe012017-11-24 17:34:44 +01003423 if ((alert = pool_alloc(pool_head_email_alert)) == NULL)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003424 goto error;
Christopher Faulet31dff9b2017-10-23 15:45:20 +02003425 LIST_INIT(&alert->list);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003426 LIST_INIT(&alert->tcpcheck_rules);
Christopher Faulet0108bb32017-10-20 21:34:32 +02003427 alert->srv = s;
Christopher Faulet31dff9b2017-10-23 15:45:20 +02003428
Willy Tarreaubafbe012017-11-24 17:34:44 +01003429 if ((tcpcheck = pool_alloc(pool_head_tcpcheck_rule)) == NULL)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003430 goto error;
Christopher Faulet31dff9b2017-10-23 15:45:20 +02003431 memset(tcpcheck, 0, sizeof(*tcpcheck));
3432 tcpcheck->action = TCPCHK_ACT_CONNECT;
3433 tcpcheck->comment = NULL;
3434 tcpcheck->string = NULL;
3435 tcpcheck->expect_regex = NULL;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003436 LIST_ADDQ(&alert->tcpcheck_rules, &tcpcheck->list);
3437
3438 if (!add_tcpcheck_expect_str(&alert->tcpcheck_rules, "220 "))
3439 goto error;
3440
3441 {
3442 const char * const strs[4] = { "EHLO ", p->email_alert.myhostname, "\r\n" };
3443 if (!add_tcpcheck_send_strs(&alert->tcpcheck_rules, strs))
3444 goto error;
3445 }
3446
3447 if (!add_tcpcheck_expect_str(&alert->tcpcheck_rules, "250 "))
3448 goto error;
3449
3450 {
3451 const char * const strs[4] = { "MAIL FROM:<", p->email_alert.from, ">\r\n" };
3452 if (!add_tcpcheck_send_strs(&alert->tcpcheck_rules, strs))
3453 goto error;
3454 }
3455
3456 if (!add_tcpcheck_expect_str(&alert->tcpcheck_rules, "250 "))
3457 goto error;
3458
3459 {
3460 const char * const strs[4] = { "RCPT TO:<", p->email_alert.to, ">\r\n" };
3461 if (!add_tcpcheck_send_strs(&alert->tcpcheck_rules, strs))
3462 goto error;
3463 }
3464
3465 if (!add_tcpcheck_expect_str(&alert->tcpcheck_rules, "250 "))
3466 goto error;
3467
3468 {
3469 const char * const strs[2] = { "DATA\r\n" };
3470 if (!add_tcpcheck_send_strs(&alert->tcpcheck_rules, strs))
3471 goto error;
3472 }
3473
3474 if (!add_tcpcheck_expect_str(&alert->tcpcheck_rules, "354 "))
3475 goto error;
3476
3477 {
3478 struct tm tm;
3479 char datestr[48];
3480 const char * const strs[18] = {
Pieter Baauw5e0964e2016-02-13 16:27:35 +01003481 "From: ", p->email_alert.from, "\r\n",
3482 "To: ", p->email_alert.to, "\r\n",
3483 "Date: ", datestr, "\r\n",
3484 "Subject: [HAproxy Alert] ", msg, "\r\n",
3485 "\r\n",
3486 msg, "\r\n",
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003487 "\r\n",
Pieter Baauwed35c372015-07-22 19:51:54 +02003488 ".\r\n",
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003489 NULL
3490 };
3491
3492 get_localtime(date.tv_sec, &tm);
3493
3494 if (strftime(datestr, sizeof(datestr), "%a, %d %b %Y %T %z (%Z)", &tm) == 0) {
3495 goto error;
3496 }
3497
3498 if (!add_tcpcheck_send_strs(&alert->tcpcheck_rules, strs))
3499 goto error;
3500 }
3501
3502 if (!add_tcpcheck_expect_str(&alert->tcpcheck_rules, "250 "))
3503 goto error;
3504
3505 {
3506 const char * const strs[2] = { "QUIT\r\n" };
3507 if (!add_tcpcheck_send_strs(&alert->tcpcheck_rules, strs))
3508 goto error;
3509 }
3510
3511 if (!add_tcpcheck_expect_str(&alert->tcpcheck_rules, "221 "))
3512 goto error;
3513
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003514 HA_SPIN_LOCK(EMAIL_ALERTS_LOCK, &q->lock);
Christopher Faulet0108bb32017-10-20 21:34:32 +02003515 task_wakeup(check->task, TASK_WOKEN_MSG);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003516 LIST_ADDQ(&q->email_alerts, &alert->list);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003517 HA_SPIN_UNLOCK(EMAIL_ALERTS_LOCK, &q->lock);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003518 return 1;
3519
3520error:
3521 email_alert_free(alert);
3522 return 0;
3523}
3524
Christopher Faulet0108bb32017-10-20 21:34:32 +02003525static void enqueue_email_alert(struct proxy *p, struct server *s, const char *msg)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003526{
3527 int i;
3528 struct mailer *mailer;
3529
3530 for (i = 0, mailer = p->email_alert.mailers.m->mailer_list;
3531 i < p->email_alert.mailers.m->count; i++, mailer = mailer->next) {
Christopher Faulet0108bb32017-10-20 21:34:32 +02003532 if (!enqueue_one_email_alert(p, s, &p->email_alert.queues[i], msg)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003533 ha_alert("Email alert [%s] could not be enqueued: out of memory\n", p->id);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003534 return;
3535 }
3536 }
3537
3538 return;
3539}
3540
3541/*
3542 * Send email alert if configured.
3543 */
Simon Horman64e34162015-02-06 11:11:57 +09003544void send_email_alert(struct server *s, int level, const char *format, ...)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003545{
3546 va_list argp;
3547 char buf[1024];
3548 int len;
3549 struct proxy *p = s->proxy;
3550
Christopher Faulet0108bb32017-10-20 21:34:32 +02003551 if (!p->email_alert.mailers.m || level > p->email_alert.level || format == NULL)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003552 return;
3553
3554 va_start(argp, format);
3555 len = vsnprintf(buf, sizeof(buf), format, argp);
3556 va_end(argp);
3557
Thierry FOURNIER62c8a212017-02-09 12:19:27 +01003558 if (len < 0 || len >= sizeof(buf)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003559 ha_alert("Email alert [%s] could not format message\n", p->id);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003560 return;
3561 }
3562
Christopher Faulet0108bb32017-10-20 21:34:32 +02003563 enqueue_email_alert(p, s, buf);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003564}
3565
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02003566/*
3567 * Return value:
3568 * the port to be used for the health check
3569 * 0 in case no port could be found for the check
3570 */
3571int srv_check_healthcheck_port(struct check *chk)
3572{
3573 int i = 0;
3574 struct server *srv = NULL;
3575
3576 srv = chk->server;
3577
3578 /* If neither a port nor an addr was specified and no check transport
3579 * layer is forced, then the transport layer used by the checks is the
3580 * same as for the production traffic. Otherwise we use raw_sock by
3581 * default, unless one is specified.
3582 */
3583 if (!chk->port && !is_addr(&chk->addr)) {
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02003584 chk->use_ssl |= (srv->use_ssl || (srv->proxy->options & PR_O_TCPCHK_SSL));
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02003585 chk->send_proxy |= (srv->pp_opts);
3586 }
3587
3588 /* by default, we use the health check port ocnfigured */
3589 if (chk->port > 0)
3590 return chk->port;
3591
3592 /* try to get the port from check_core.addr if check.port not set */
3593 i = get_host_port(&chk->addr);
3594 if (i > 0)
3595 return i;
3596
3597 /* try to get the port from server address */
3598 /* prevent MAPPORTS from working at this point, since checks could
3599 * not be performed in such case (MAPPORTS impose a relative ports
3600 * based on live traffic)
3601 */
3602 if (srv->flags & SRV_F_MAPPORTS)
3603 return 0;
Willy Tarreau04276f32017-01-06 17:41:29 +01003604
3605 i = srv->svc_port; /* by default */
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02003606 if (i > 0)
3607 return i;
3608
3609 return 0;
3610}
3611
Willy Tarreau172f5ce2018-11-26 11:21:50 +01003612REGISTER_POST_CHECK(start_checks);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003613
Willy Tarreaubd741542010-03-16 18:46:54 +01003614/*
Willy Tarreaubaaee002006-06-26 02:48:02 +02003615 * Local variables:
3616 * c-indent-level: 8
3617 * c-basic-offset: 8
3618 * End:
3619 */