blob: e9b531839d0143f71e8c544e7efab54e097e2a04 [file] [log] [blame]
Willy Tarreaubaaee002006-06-26 02:48:02 +02001/*
2 * Health-checks functions.
3 *
Willy Tarreau26c25062009-03-08 09:38:41 +01004 * Copyright 2000-2009 Willy Tarreau <w@1wt.eu>
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +02005 * Copyright 2007-2009 Krzysztof Piotr Oledzki <ole@ans.pl>
Willy Tarreaubaaee002006-06-26 02:48:02 +02006 *
7 * This program is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU General Public License
9 * as published by the Free Software Foundation; either version
10 * 2 of the License, or (at your option) any later version.
11 *
12 */
13
Willy Tarreaub8816082008-01-18 12:18:15 +010014#include <assert.h>
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +020015#include <ctype.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020016#include <errno.h>
17#include <fcntl.h>
Willy Tarreau9b39dc52014-07-08 00:54:10 +020018#include <signal.h>
Simon Horman0ba0e4a2015-01-30 11:23:00 +090019#include <stdarg.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020020#include <stdio.h>
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +020021#include <stdlib.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020022#include <string.h>
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +020023#include <time.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020024#include <unistd.h>
25#include <sys/socket.h>
Dmitry Sivachenkocaf58982009-08-24 15:11:06 +040026#include <sys/types.h>
Simon Horman98637e52014-06-20 12:30:16 +090027#include <sys/wait.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020028#include <netinet/in.h>
Willy Tarreau1274bc42009-07-15 07:16:31 +020029#include <netinet/tcp.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020030#include <arpa/inet.h>
31
Willy Tarreauc7e42382012-08-24 19:22:53 +020032#include <common/chunk.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020033#include <common/compat.h>
34#include <common/config.h>
35#include <common/mini-clist.h>
Willy Tarreau83749182007-04-15 20:56:27 +020036#include <common/standard.h>
Willy Tarreau2dd0d472006-06-29 17:53:05 +020037#include <common/time.h>
Christopher Fauletcfda8472017-10-20 15:40:23 +020038#include <common/hathreads.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020039
40#include <types/global.h>
Baptiste Assmanna68ca962015-04-14 01:15:08 +020041#include <types/dns.h>
William Lallemand9ed62032016-11-21 17:49:11 +010042#include <types/stats.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020043
44#include <proto/backend.h>
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +020045#include <proto/checks.h>
William Lallemand9ed62032016-11-21 17:49:11 +010046#include <proto/stats.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020047#include <proto/fd.h>
48#include <proto/log.h>
Willy Tarreau53a47662017-08-28 10:53:00 +020049#include <proto/mux_pt.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020050#include <proto/queue.h>
Willy Tarreauc6f4ce82009-06-10 11:09:37 +020051#include <proto/port_range.h>
Willy Tarreau3d300592007-03-18 18:34:41 +010052#include <proto/proto_http.h>
Willy Tarreaue8c66af2008-01-13 18:40:14 +010053#include <proto/proto_tcp.h>
Baptiste Assmann69e273f2013-12-11 00:52:19 +010054#include <proto/protocol.h>
Willy Tarreau2b5652f2006-12-31 17:46:05 +010055#include <proto/proxy.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020056#include <proto/server.h>
Willy Tarreau48d6bf22016-06-21 16:27:34 +020057#include <proto/signal.h>
Willy Tarreau9e000c62011-03-10 14:03:36 +010058#include <proto/stream_interface.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020059#include <proto/task.h>
Baptiste Assmanna68ca962015-04-14 01:15:08 +020060#include <proto/log.h>
61#include <proto/dns.h>
62#include <proto/proto_udp.h>
Willy Tarreaubaaee002006-06-26 02:48:02 +020063
Olivier Houchard9130a962017-10-17 17:33:43 +020064#ifdef USE_OPENSSL
65#include <proto/ssl_sock.h>
66#endif /* USE_OPENSSL */
67
Willy Tarreaubd741542010-03-16 18:46:54 +010068static int httpchk_expect(struct server *s, int done);
Simon Hormane16c1b32015-01-30 11:22:57 +090069static int tcpcheck_get_step_id(struct check *);
Baptiste Assmann22b09d22015-05-01 08:03:04 +020070static char * tcpcheck_get_step_comment(struct check *, int);
Willy Tarreau6bdcab02017-10-04 18:41:00 +020071static int tcpcheck_main(struct check *);
Willy Tarreaubd741542010-03-16 18:46:54 +010072
Willy Tarreaubafbe012017-11-24 17:34:44 +010073static struct pool_head *pool_head_email_alert = NULL;
74static struct pool_head *pool_head_tcpcheck_rule = NULL;
Christopher Faulet31dff9b2017-10-23 15:45:20 +020075
76
Simon Horman63a4a822012-03-19 07:24:41 +090077static const struct check_status check_statuses[HCHK_STATUS_SIZE] = {
Willy Tarreau6aaa1b82013-12-11 17:09:34 +010078 [HCHK_STATUS_UNKNOWN] = { CHK_RES_UNKNOWN, "UNK", "Unknown" },
79 [HCHK_STATUS_INI] = { CHK_RES_UNKNOWN, "INI", "Initializing" },
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +020080 [HCHK_STATUS_START] = { /* SPECIAL STATUS*/ },
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +020081
Willy Tarreau23964182014-05-20 20:56:30 +020082 /* Below we have finished checks */
83 [HCHK_STATUS_CHECKED] = { CHK_RES_NEUTRAL, "CHECKED", "No status change" },
Willy Tarreau6aaa1b82013-12-11 17:09:34 +010084 [HCHK_STATUS_HANA] = { CHK_RES_FAILED, "HANA", "Health analyze" },
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +010085
Willy Tarreau6aaa1b82013-12-11 17:09:34 +010086 [HCHK_STATUS_SOCKERR] = { CHK_RES_FAILED, "SOCKERR", "Socket error" },
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +020087
Willy Tarreau6aaa1b82013-12-11 17:09:34 +010088 [HCHK_STATUS_L4OK] = { CHK_RES_PASSED, "L4OK", "Layer4 check passed" },
89 [HCHK_STATUS_L4TOUT] = { CHK_RES_FAILED, "L4TOUT", "Layer4 timeout" },
90 [HCHK_STATUS_L4CON] = { CHK_RES_FAILED, "L4CON", "Layer4 connection problem" },
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +020091
Willy Tarreau6aaa1b82013-12-11 17:09:34 +010092 [HCHK_STATUS_L6OK] = { CHK_RES_PASSED, "L6OK", "Layer6 check passed" },
93 [HCHK_STATUS_L6TOUT] = { CHK_RES_FAILED, "L6TOUT", "Layer6 timeout" },
94 [HCHK_STATUS_L6RSP] = { CHK_RES_FAILED, "L6RSP", "Layer6 invalid response" },
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +020095
Willy Tarreau6aaa1b82013-12-11 17:09:34 +010096 [HCHK_STATUS_L7TOUT] = { CHK_RES_FAILED, "L7TOUT", "Layer7 timeout" },
97 [HCHK_STATUS_L7RSP] = { CHK_RES_FAILED, "L7RSP", "Layer7 invalid response" },
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +020098
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +020099 [HCHK_STATUS_L57DATA] = { /* DUMMY STATUS */ },
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200100
Willy Tarreau6aaa1b82013-12-11 17:09:34 +0100101 [HCHK_STATUS_L7OKD] = { CHK_RES_PASSED, "L7OK", "Layer7 check passed" },
102 [HCHK_STATUS_L7OKCD] = { CHK_RES_CONDPASS, "L7OKC", "Layer7 check conditionally passed" },
103 [HCHK_STATUS_L7STS] = { CHK_RES_FAILED, "L7STS", "Layer7 wrong status" },
Simon Horman98637e52014-06-20 12:30:16 +0900104
105 [HCHK_STATUS_PROCERR] = { CHK_RES_FAILED, "PROCERR", "External check error" },
106 [HCHK_STATUS_PROCTOUT] = { CHK_RES_FAILED, "PROCTOUT", "External check timeout" },
Cyril Bonté77010d82014-08-07 01:55:37 +0200107 [HCHK_STATUS_PROCOK] = { CHK_RES_PASSED, "PROCOK", "External check passed" },
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200108};
109
Cyril Bontéac92a062014-12-27 22:28:38 +0100110const struct extcheck_env extcheck_envs[EXTCHK_SIZE] = {
111 [EXTCHK_PATH] = { "PATH", EXTCHK_SIZE_EVAL_INIT },
112 [EXTCHK_HAPROXY_PROXY_NAME] = { "HAPROXY_PROXY_NAME", EXTCHK_SIZE_EVAL_INIT },
113 [EXTCHK_HAPROXY_PROXY_ID] = { "HAPROXY_PROXY_ID", EXTCHK_SIZE_EVAL_INIT },
114 [EXTCHK_HAPROXY_PROXY_ADDR] = { "HAPROXY_PROXY_ADDR", EXTCHK_SIZE_EVAL_INIT },
115 [EXTCHK_HAPROXY_PROXY_PORT] = { "HAPROXY_PROXY_PORT", EXTCHK_SIZE_EVAL_INIT },
116 [EXTCHK_HAPROXY_SERVER_NAME] = { "HAPROXY_SERVER_NAME", EXTCHK_SIZE_EVAL_INIT },
117 [EXTCHK_HAPROXY_SERVER_ID] = { "HAPROXY_SERVER_ID", EXTCHK_SIZE_EVAL_INIT },
118 [EXTCHK_HAPROXY_SERVER_ADDR] = { "HAPROXY_SERVER_ADDR", EXTCHK_SIZE_EVAL_INIT },
119 [EXTCHK_HAPROXY_SERVER_PORT] = { "HAPROXY_SERVER_PORT", EXTCHK_SIZE_EVAL_INIT },
120 [EXTCHK_HAPROXY_SERVER_MAXCONN] = { "HAPROXY_SERVER_MAXCONN", EXTCHK_SIZE_EVAL_INIT },
121 [EXTCHK_HAPROXY_SERVER_CURCONN] = { "HAPROXY_SERVER_CURCONN", EXTCHK_SIZE_ULONG },
122};
123
Simon Horman63a4a822012-03-19 07:24:41 +0900124static const struct analyze_status analyze_statuses[HANA_STATUS_SIZE] = { /* 0: ignore, 1: error, 2: OK */
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100125 [HANA_STATUS_UNKNOWN] = { "Unknown", { 0, 0 }},
126
127 [HANA_STATUS_L4_OK] = { "L4 successful connection", { 2, 0 }},
128 [HANA_STATUS_L4_ERR] = { "L4 unsuccessful connection", { 1, 1 }},
129
130 [HANA_STATUS_HTTP_OK] = { "Correct http response", { 0, 2 }},
131 [HANA_STATUS_HTTP_STS] = { "Wrong http response", { 0, 1 }},
132 [HANA_STATUS_HTTP_HDRRSP] = { "Invalid http response (headers)", { 0, 1 }},
133 [HANA_STATUS_HTTP_RSP] = { "Invalid http response", { 0, 1 }},
134
135 [HANA_STATUS_HTTP_READ_ERROR] = { "Read error (http)", { 0, 1 }},
136 [HANA_STATUS_HTTP_READ_TIMEOUT] = { "Read timeout (http)", { 0, 1 }},
137 [HANA_STATUS_HTTP_BROKEN_PIPE] = { "Close from server (http)", { 0, 1 }},
138};
139
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200140/*
141 * Convert check_status code to description
142 */
143const char *get_check_status_description(short check_status) {
144
145 const char *desc;
146
147 if (check_status < HCHK_STATUS_SIZE)
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200148 desc = check_statuses[check_status].desc;
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200149 else
150 desc = NULL;
151
152 if (desc && *desc)
153 return desc;
154 else
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200155 return check_statuses[HCHK_STATUS_UNKNOWN].desc;
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200156}
157
158/*
159 * Convert check_status code to short info
160 */
161const char *get_check_status_info(short check_status) {
162
163 const char *info;
164
165 if (check_status < HCHK_STATUS_SIZE)
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200166 info = check_statuses[check_status].info;
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200167 else
168 info = NULL;
169
170 if (info && *info)
171 return info;
172 else
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200173 return check_statuses[HCHK_STATUS_UNKNOWN].info;
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200174}
175
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100176const char *get_analyze_status(short analyze_status) {
177
178 const char *desc;
179
180 if (analyze_status < HANA_STATUS_SIZE)
181 desc = analyze_statuses[analyze_status].desc;
182 else
183 desc = NULL;
184
185 if (desc && *desc)
186 return desc;
187 else
188 return analyze_statuses[HANA_STATUS_UNKNOWN].desc;
189}
190
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200191/*
Simon Horman4a741432013-02-23 15:35:38 +0900192 * Set check->status, update check->duration and fill check->result with
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200193 * an adequate CHK_RES_* value. The new check->health is computed based
194 * on the result.
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200195 *
196 * Show information in logs about failed health check if server is UP
197 * or succeeded health checks if server is DOWN.
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200198 */
Simon Horman4a741432013-02-23 15:35:38 +0900199static void set_server_check_status(struct check *check, short status, const char *desc)
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100200{
Simon Horman4a741432013-02-23 15:35:38 +0900201 struct server *s = check->server;
Willy Tarreaubef1b322014-05-13 21:01:39 +0200202 short prev_status = check->status;
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200203 int report = 0;
Simon Horman4a741432013-02-23 15:35:38 +0900204
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200205 if (status == HCHK_STATUS_START) {
Willy Tarreau6aaa1b82013-12-11 17:09:34 +0100206 check->result = CHK_RES_UNKNOWN; /* no result yet */
Simon Horman4a741432013-02-23 15:35:38 +0900207 check->desc[0] = '\0';
208 check->start = now;
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200209 return;
210 }
211
Simon Horman4a741432013-02-23 15:35:38 +0900212 if (!check->status)
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200213 return;
214
Krzysztof Piotr Oledzkif7089f52009-10-10 21:06:49 +0200215 if (desc && *desc) {
Simon Horman4a741432013-02-23 15:35:38 +0900216 strncpy(check->desc, desc, HCHK_DESC_LEN-1);
217 check->desc[HCHK_DESC_LEN-1] = '\0';
Krzysztof Piotr Oledzkif7089f52009-10-10 21:06:49 +0200218 } else
Simon Horman4a741432013-02-23 15:35:38 +0900219 check->desc[0] = '\0';
Krzysztof Piotr Oledzkif7089f52009-10-10 21:06:49 +0200220
Simon Horman4a741432013-02-23 15:35:38 +0900221 check->status = status;
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200222 if (check_statuses[status].result)
Simon Horman4a741432013-02-23 15:35:38 +0900223 check->result = check_statuses[status].result;
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200224
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100225 if (status == HCHK_STATUS_HANA)
Simon Horman4a741432013-02-23 15:35:38 +0900226 check->duration = -1;
227 else if (!tv_iszero(&check->start)) {
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200228 /* set_server_check_status() may be called more than once */
Simon Horman4a741432013-02-23 15:35:38 +0900229 check->duration = tv_ms_elapsed(&check->start, &now);
230 tv_zero(&check->start);
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200231 }
232
Willy Tarreau23964182014-05-20 20:56:30 +0200233 /* no change is expected if no state change occurred */
234 if (check->result == CHK_RES_NEUTRAL)
235 return;
236
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200237 report = 0;
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200238
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200239 switch (check->result) {
240 case CHK_RES_FAILED:
Willy Tarreau12634e12014-05-23 11:32:36 +0200241 /* Failure to connect to the agent as a secondary check should not
242 * cause the server to be marked down.
243 */
244 if ((!(check->state & CHK_ST_AGENT) ||
Simon Hormaneaabd522015-02-26 11:26:17 +0900245 (check->status >= HCHK_STATUS_L57DATA)) &&
Christopher Fauletb119a792018-05-02 12:12:45 +0200246 (check->health > 0)) {
Christopher Faulet29f77e82017-06-08 14:04:45 +0200247 HA_ATOMIC_ADD(&s->counters.failed_checks, 1);
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200248 report = 1;
249 check->health--;
250 if (check->health < check->rise)
251 check->health = 0;
252 }
253 break;
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200254
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200255 case CHK_RES_PASSED:
256 case CHK_RES_CONDPASS: /* "condpass" cannot make the first step but it OK after a "passed" */
257 if ((check->health < check->rise + check->fall - 1) &&
258 (check->result == CHK_RES_PASSED || check->health > 0)) {
259 report = 1;
260 check->health++;
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200261
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200262 if (check->health >= check->rise)
263 check->health = check->rise + check->fall - 1; /* OK now */
264 }
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200265
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200266 /* clear consecutive_errors if observing is enabled */
267 if (s->onerror)
268 s->consecutive_errors = 0;
269 break;
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100270
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200271 default:
272 break;
273 }
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200274
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200275 if (s->proxy->options2 & PR_O2_LOGHCHKS &&
276 (status != prev_status || report)) {
277 chunk_printf(&trash,
Willy Tarreau12634e12014-05-23 11:32:36 +0200278 "%s check for %sserver %s/%s %s%s",
279 (check->state & CHK_ST_AGENT) ? "Agent" : "Health",
Willy Tarreauc93cd162014-05-13 15:54:22 +0200280 s->flags & SRV_F_BACKUP ? "backup " : "",
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100281 s->proxy->id, s->id,
Willy Tarreau6aaa1b82013-12-11 17:09:34 +0100282 (check->result == CHK_RES_CONDPASS) ? "conditionally ":"",
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200283 (check->result >= CHK_RES_PASSED) ? "succeeded" : "failed");
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200284
Emeric Brun5a133512017-10-19 14:42:30 +0200285 srv_append_status(&trash, s, check, -1, 0);
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200286
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100287 chunk_appendf(&trash, ", status: %d/%d %s",
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200288 (check->health >= check->rise) ? check->health - check->rise + 1 : check->health,
289 (check->health >= check->rise) ? check->fall : check->rise,
290 (check->health >= check->rise) ? (s->uweight ? "UP" : "DRAIN") : "DOWN");
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200291
Christopher Faulet767a84b2017-11-24 16:50:31 +0100292 ha_warning("%s.\n", trash.str);
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100293 send_log(s->proxy, LOG_NOTICE, "%s.\n", trash.str);
Simon Horman7ea9be02015-04-30 13:10:33 +0900294 send_email_alert(s, LOG_INFO, "%s", trash.str);
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200295 }
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200296}
297
Willy Tarreau4eec5472014-05-20 22:32:27 +0200298/* Marks the check <check>'s server down if the current check is already failed
299 * and the server is not down yet nor in maintenance.
Willy Tarreaubaaee002006-06-26 02:48:02 +0200300 */
Willy Tarreau4eec5472014-05-20 22:32:27 +0200301static void check_notify_failure(struct check *check)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200302{
Simon Horman4a741432013-02-23 15:35:38 +0900303 struct server *s = check->server;
Simon Hormane0d1bfb2011-06-21 14:34:58 +0900304
Willy Tarreau7b1d47c2014-05-20 14:55:13 +0200305 /* The agent secondary check should only cause a server to be marked
306 * as down if check->status is HCHK_STATUS_L7STS, which indicates
307 * that the agent returned "fail", "stopped" or "down".
308 * The implication here is that failure to connect to the agent
309 * as a secondary check should not cause the server to be marked
310 * down. */
311 if ((check->state & CHK_ST_AGENT) && check->status != HCHK_STATUS_L7STS)
312 return;
313
Willy Tarreau4eec5472014-05-20 22:32:27 +0200314 if (check->health > 0)
315 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100316
Willy Tarreau4eec5472014-05-20 22:32:27 +0200317 /* We only report a reason for the check if we did not do so previously */
Emeric Brun5a133512017-10-19 14:42:30 +0200318 srv_set_stopped(s, NULL, (!s->track && !(s->proxy->options2 & PR_O2_LOGHCHKS)) ? check : NULL);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200319}
320
Willy Tarreauaf549582014-05-16 17:37:50 +0200321/* Marks the check <check> as valid and tries to set its server up, provided
Willy Tarreau3e048382014-05-21 10:30:54 +0200322 * it isn't in maintenance, it is not tracking a down server and other checks
323 * comply. The rule is simple : by default, a server is up, unless any of the
324 * following conditions is true :
325 * - health check failed (check->health < rise)
326 * - agent check failed (agent->health < rise)
327 * - the server tracks a down server (track && track->state == STOPPED)
328 * Note that if the server has a slowstart, it will switch to STARTING instead
329 * of RUNNING. Also, only the health checks support the nolb mode, so the
330 * agent's success may not take the server out of this mode.
Willy Tarreauaf549582014-05-16 17:37:50 +0200331 */
Willy Tarreau3e048382014-05-21 10:30:54 +0200332static void check_notify_success(struct check *check)
Willy Tarreauaf549582014-05-16 17:37:50 +0200333{
Simon Horman4a741432013-02-23 15:35:38 +0900334 struct server *s = check->server;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100335
Emeric Brun52a91d32017-08-31 14:41:55 +0200336 if (s->next_admin & SRV_ADMF_MAINT)
Willy Tarreauaf549582014-05-16 17:37:50 +0200337 return;
Cyril Bontécd19e512010-01-31 22:34:03 +0100338
Emeric Brun52a91d32017-08-31 14:41:55 +0200339 if (s->track && s->track->next_state == SRV_ST_STOPPED)
Willy Tarreauaf549582014-05-16 17:37:50 +0200340 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100341
Willy Tarreau3e048382014-05-21 10:30:54 +0200342 if ((s->check.state & CHK_ST_ENABLED) && (s->check.health < s->check.rise))
343 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100344
Willy Tarreau3e048382014-05-21 10:30:54 +0200345 if ((s->agent.state & CHK_ST_ENABLED) && (s->agent.health < s->agent.rise))
346 return;
Willy Tarreauaf549582014-05-16 17:37:50 +0200347
Emeric Brun52a91d32017-08-31 14:41:55 +0200348 if ((check->state & CHK_ST_AGENT) && s->next_state == SRV_ST_STOPPING)
Willy Tarreau3e048382014-05-21 10:30:54 +0200349 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100350
Emeric Brun5a133512017-10-19 14:42:30 +0200351 srv_set_running(s, NULL, (!s->track && !(s->proxy->options2 & PR_O2_LOGHCHKS)) ? check : NULL);
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100352}
353
Willy Tarreaudb58b792014-05-21 13:57:23 +0200354/* Marks the check <check> as valid and tries to set its server into stopping mode
355 * if it was running or starting, and provided it isn't in maintenance and other
356 * checks comply. The conditions for the server to be marked in stopping mode are
357 * the same as for it to be turned up. Also, only the health checks support the
358 * nolb mode.
Willy Tarreauaf549582014-05-16 17:37:50 +0200359 */
Willy Tarreaudb58b792014-05-21 13:57:23 +0200360static void check_notify_stopping(struct check *check)
Willy Tarreauaf549582014-05-16 17:37:50 +0200361{
Simon Horman4a741432013-02-23 15:35:38 +0900362 struct server *s = check->server;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100363
Emeric Brun52a91d32017-08-31 14:41:55 +0200364 if (s->next_admin & SRV_ADMF_MAINT)
Willy Tarreauaf549582014-05-16 17:37:50 +0200365 return;
366
Willy Tarreaudb58b792014-05-21 13:57:23 +0200367 if (check->state & CHK_ST_AGENT)
368 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100369
Emeric Brun52a91d32017-08-31 14:41:55 +0200370 if (s->track && s->track->next_state == SRV_ST_STOPPED)
Willy Tarreaudb58b792014-05-21 13:57:23 +0200371 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100372
Willy Tarreaudb58b792014-05-21 13:57:23 +0200373 if ((s->check.state & CHK_ST_ENABLED) && (s->check.health < s->check.rise))
374 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100375
Willy Tarreaudb58b792014-05-21 13:57:23 +0200376 if ((s->agent.state & CHK_ST_ENABLED) && (s->agent.health < s->agent.rise))
377 return;
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100378
Willy Tarreaub26881a2017-12-23 11:16:49 +0100379 srv_set_stopping(s, NULL, (!s->track && !(s->proxy->options2 & PR_O2_LOGHCHKS)) ? check : NULL);
Krzysztof Piotr Oledzkic8b16fc2008-02-18 01:26:35 +0100380}
Willy Tarreaubaaee002006-06-26 02:48:02 +0200381
Willy Tarreau9fe7aae2013-12-31 23:47:37 +0100382/* note: use health_adjust() only, which first checks that the observe mode is
383 * enabled.
384 */
385void __health_adjust(struct server *s, short status)
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100386{
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100387 int failed;
388 int expire;
389
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100390 if (s->observe >= HANA_OBS_SIZE)
391 return;
392
Willy Tarreaubb956662013-01-24 00:37:39 +0100393 if (status >= HANA_STATUS_SIZE || !analyze_statuses[status].desc)
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100394 return;
395
396 switch (analyze_statuses[status].lr[s->observe - 1]) {
397 case 1:
398 failed = 1;
399 break;
400
401 case 2:
402 failed = 0;
403 break;
404
405 default:
406 return;
407 }
408
409 if (!failed) {
410 /* good: clear consecutive_errors */
411 s->consecutive_errors = 0;
412 return;
413 }
414
Christopher Faulet29f77e82017-06-08 14:04:45 +0200415 HA_ATOMIC_ADD(&s->consecutive_errors, 1);
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100416
417 if (s->consecutive_errors < s->consecutive_errors_limit)
418 return;
419
Willy Tarreau19d14ef2012-10-29 16:51:55 +0100420 chunk_printf(&trash, "Detected %d consecutive errors, last one was: %s",
421 s->consecutive_errors, get_analyze_status(status));
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100422
423 switch (s->onerror) {
424 case HANA_ONERR_FASTINTER:
425 /* force fastinter - nothing to do here as all modes force it */
426 break;
427
428 case HANA_ONERR_SUDDTH:
429 /* simulate a pre-fatal failed health check */
Simon Horman58c32972013-11-25 10:46:38 +0900430 if (s->check.health > s->check.rise)
431 s->check.health = s->check.rise + 1;
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100432
433 /* no break - fall through */
434
435 case HANA_ONERR_FAILCHK:
436 /* simulate a failed health check */
Simon Horman4a741432013-02-23 15:35:38 +0900437 set_server_check_status(&s->check, HCHK_STATUS_HANA, trash.str);
Willy Tarreau4eec5472014-05-20 22:32:27 +0200438 check_notify_failure(&s->check);
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100439 break;
440
441 case HANA_ONERR_MARKDWN:
442 /* mark server down */
Simon Horman58c32972013-11-25 10:46:38 +0900443 s->check.health = s->check.rise;
Simon Horman4a741432013-02-23 15:35:38 +0900444 set_server_check_status(&s->check, HCHK_STATUS_HANA, trash.str);
Willy Tarreau4eec5472014-05-20 22:32:27 +0200445 check_notify_failure(&s->check);
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100446 break;
447
448 default:
449 /* write a warning? */
450 break;
451 }
452
453 s->consecutive_errors = 0;
Christopher Faulet29f77e82017-06-08 14:04:45 +0200454 HA_ATOMIC_ADD(&s->counters.failed_hana, 1);
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100455
Simon Horman66183002013-02-23 10:16:43 +0900456 if (s->check.fastinter) {
457 expire = tick_add(now_ms, MS_TO_TICKS(s->check.fastinter));
Sergiy Prykhodko1d57e502013-09-21 12:05:00 +0300458 if (s->check.task->expire > expire) {
Willy Tarreau5b3a2022012-09-28 15:01:02 +0200459 s->check.task->expire = expire;
Sergiy Prykhodko1d57e502013-09-21 12:05:00 +0300460 /* requeue check task with new expire */
461 task_queue(s->check.task);
462 }
Krzysztof Piotr Oledzki97f07b82009-12-15 22:31:24 +0100463 }
464}
465
Willy Tarreaua1dab552014-04-14 15:04:54 +0200466static int httpchk_build_status_header(struct server *s, char *buffer, int size)
Willy Tarreauef781042010-01-27 11:53:01 +0100467{
468 int sv_state;
469 int ratio;
470 int hlen = 0;
Joseph Lynch514061c2015-01-15 17:52:59 -0800471 char addr[46];
472 char port[6];
Willy Tarreauef781042010-01-27 11:53:01 +0100473 const char *srv_hlt_st[7] = { "DOWN", "DOWN %d/%d",
474 "UP %d/%d", "UP",
475 "NOLB %d/%d", "NOLB",
476 "no check" };
477
478 memcpy(buffer + hlen, "X-Haproxy-Server-State: ", 24);
479 hlen += 24;
480
Willy Tarreauff5ae352013-12-11 20:36:34 +0100481 if (!(s->check.state & CHK_ST_ENABLED))
482 sv_state = 6;
Emeric Brun52a91d32017-08-31 14:41:55 +0200483 else if (s->cur_state != SRV_ST_STOPPED) {
Simon Horman58c32972013-11-25 10:46:38 +0900484 if (s->check.health == s->check.rise + s->check.fall - 1)
Willy Tarreauef781042010-01-27 11:53:01 +0100485 sv_state = 3; /* UP */
486 else
487 sv_state = 2; /* going down */
488
Emeric Brun52a91d32017-08-31 14:41:55 +0200489 if (s->cur_state == SRV_ST_STOPPING)
Willy Tarreauef781042010-01-27 11:53:01 +0100490 sv_state += 2;
491 } else {
Simon Horman125d0992013-02-24 17:23:38 +0900492 if (s->check.health)
Willy Tarreauef781042010-01-27 11:53:01 +0100493 sv_state = 1; /* going up */
494 else
495 sv_state = 0; /* DOWN */
496 }
497
Willy Tarreaua1dab552014-04-14 15:04:54 +0200498 hlen += snprintf(buffer + hlen, size - hlen,
Willy Tarreauef781042010-01-27 11:53:01 +0100499 srv_hlt_st[sv_state],
Emeric Brun52a91d32017-08-31 14:41:55 +0200500 (s->cur_state != SRV_ST_STOPPED) ? (s->check.health - s->check.rise + 1) : (s->check.health),
501 (s->cur_state != SRV_ST_STOPPED) ? (s->check.fall) : (s->check.rise));
Willy Tarreauef781042010-01-27 11:53:01 +0100502
Joseph Lynch514061c2015-01-15 17:52:59 -0800503 addr_to_str(&s->addr, addr, sizeof(addr));
Willy Tarreau04276f32017-01-06 17:41:29 +0100504 if (s->addr.ss_family == AF_INET || s->addr.ss_family == AF_INET6)
505 snprintf(port, sizeof(port), "%u", s->svc_port);
506 else
507 *port = 0;
Joseph Lynch514061c2015-01-15 17:52:59 -0800508
509 hlen += snprintf(buffer + hlen, size - hlen, "; address=%s; port=%s; name=%s/%s; node=%s; weight=%d/%d; scur=%d/%d; qcur=%d",
510 addr, port, s->proxy->id, s->id,
Willy Tarreauef781042010-01-27 11:53:01 +0100511 global.node,
Emeric Brun52a91d32017-08-31 14:41:55 +0200512 (s->cur_eweight * s->proxy->lbprm.wmult + s->proxy->lbprm.wdiv - 1) / s->proxy->lbprm.wdiv,
Willy Tarreauef781042010-01-27 11:53:01 +0100513 (s->proxy->lbprm.tot_weight * s->proxy->lbprm.wmult + s->proxy->lbprm.wdiv - 1) / s->proxy->lbprm.wdiv,
514 s->cur_sess, s->proxy->beconn - s->proxy->nbpend,
515 s->nbpend);
516
Emeric Brun52a91d32017-08-31 14:41:55 +0200517 if ((s->cur_state == SRV_ST_STARTING) &&
Willy Tarreauef781042010-01-27 11:53:01 +0100518 now.tv_sec < s->last_change + s->slowstart &&
519 now.tv_sec >= s->last_change) {
520 ratio = MAX(1, 100 * (now.tv_sec - s->last_change) / s->slowstart);
Willy Tarreaua1dab552014-04-14 15:04:54 +0200521 hlen += snprintf(buffer + hlen, size - hlen, "; throttle=%d%%", ratio);
Willy Tarreauef781042010-01-27 11:53:01 +0100522 }
523
524 buffer[hlen++] = '\r';
525 buffer[hlen++] = '\n';
526
527 return hlen;
528}
529
Willy Tarreau20a18342013-12-05 00:31:46 +0100530/* Check the connection. If an error has already been reported or the socket is
531 * closed, keep errno intact as it is supposed to contain the valid error code.
532 * If no error is reported, check the socket's error queue using getsockopt().
533 * Warning, this must be done only once when returning from poll, and never
534 * after an I/O error was attempted, otherwise the error queue might contain
535 * inconsistent errors. If an error is detected, the CO_FL_ERROR is set on the
536 * socket. Returns non-zero if an error was reported, zero if everything is
537 * clean (including a properly closed socket).
538 */
539static int retrieve_errno_from_socket(struct connection *conn)
540{
541 int skerr;
542 socklen_t lskerr = sizeof(skerr);
543
544 if (conn->flags & CO_FL_ERROR && ((errno && errno != EAGAIN) || !conn->ctrl))
545 return 1;
546
Willy Tarreau3c728722014-01-23 13:50:42 +0100547 if (!conn_ctrl_ready(conn))
Willy Tarreau20a18342013-12-05 00:31:46 +0100548 return 0;
549
Willy Tarreau585744b2017-08-24 14:31:19 +0200550 if (getsockopt(conn->handle.fd, SOL_SOCKET, SO_ERROR, &skerr, &lskerr) == 0)
Willy Tarreau20a18342013-12-05 00:31:46 +0100551 errno = skerr;
552
553 if (errno == EAGAIN)
554 errno = 0;
555
556 if (!errno) {
557 /* we could not retrieve an error, that does not mean there is
558 * none. Just don't change anything and only report the prior
559 * error if any.
560 */
561 if (conn->flags & CO_FL_ERROR)
562 return 1;
563 else
564 return 0;
565 }
566
567 conn->flags |= CO_FL_ERROR | CO_FL_SOCK_WR_SH | CO_FL_SOCK_RD_SH;
568 return 1;
569}
570
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100571/* Try to collect as much information as possible on the connection status,
572 * and adjust the server status accordingly. It may make use of <errno_bck>
573 * if non-null when the caller is absolutely certain of its validity (eg:
574 * checked just after a syscall). If the caller doesn't have a valid errno,
575 * it can pass zero, and retrieve_errno_from_socket() will be called to try
576 * to extract errno from the socket. If no error is reported, it will consider
577 * the <expired> flag. This is intended to be used when a connection error was
578 * reported in conn->flags or when a timeout was reported in <expired>. The
579 * function takes care of not updating a server status which was already set.
580 * All situations where at least one of <expired> or CO_FL_ERROR are set
581 * produce a status.
582 */
Willy Tarreaub5259bf2017-10-04 14:47:29 +0200583static void chk_report_conn_err(struct check *check, int errno_bck, int expired)
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100584{
Olivier Houchard9aaf7782017-09-13 18:30:23 +0200585 struct conn_stream *cs = check->cs;
586 struct connection *conn = cs_conn(cs);
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100587 const char *err_msg;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +0200588 struct chunk *chk;
Willy Tarreau213c6782014-10-02 14:51:02 +0200589 int step;
Baptiste Assmann22b09d22015-05-01 08:03:04 +0200590 char *comment;
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100591
Willy Tarreau6aaa1b82013-12-11 17:09:34 +0100592 if (check->result != CHK_RES_UNKNOWN)
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100593 return;
594
595 errno = errno_bck;
Willy Tarreau00149122017-10-04 18:05:01 +0200596 if (conn && (!errno || errno == EAGAIN))
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100597 retrieve_errno_from_socket(conn);
598
Willy Tarreau4ff3b892017-10-16 15:17:17 +0200599 if (conn && !(conn->flags & CO_FL_ERROR) &&
600 !(cs->flags & CS_FL_ERROR) && !expired)
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100601 return;
602
603 /* we'll try to build a meaningful error message depending on the
604 * context of the error possibly present in conn->err_code, and the
605 * socket error possibly collected above. This is useful to know the
606 * exact step of the L6 layer (eg: SSL handshake).
607 */
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +0200608 chk = get_trash_chunk();
609
610 if (check->type == PR_O2_TCPCHK_CHK) {
Simon Hormane16c1b32015-01-30 11:22:57 +0900611 step = tcpcheck_get_step_id(check);
Willy Tarreau213c6782014-10-02 14:51:02 +0200612 if (!step)
613 chunk_printf(chk, " at initial connection step of tcp-check");
614 else {
615 chunk_printf(chk, " at step %d of tcp-check", step);
616 /* we were looking for a string */
617 if (check->last_started_step && check->last_started_step->action == TCPCHK_ACT_CONNECT) {
618 if (check->last_started_step->port)
619 chunk_appendf(chk, " (connect port %d)" ,check->last_started_step->port);
620 else
621 chunk_appendf(chk, " (connect)");
622 }
623 else if (check->last_started_step && check->last_started_step->action == TCPCHK_ACT_EXPECT) {
624 if (check->last_started_step->string)
Baptiste Assmann96a5c9b2015-05-01 08:09:29 +0200625 chunk_appendf(chk, " (expect string '%s')", check->last_started_step->string);
Willy Tarreau213c6782014-10-02 14:51:02 +0200626 else if (check->last_started_step->expect_regex)
627 chunk_appendf(chk, " (expect regex)");
628 }
629 else if (check->last_started_step && check->last_started_step->action == TCPCHK_ACT_SEND) {
630 chunk_appendf(chk, " (send)");
631 }
Baptiste Assmann22b09d22015-05-01 08:03:04 +0200632
633 comment = tcpcheck_get_step_comment(check, step);
634 if (comment)
635 chunk_appendf(chk, " comment: '%s'", comment);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +0200636 }
637 }
638
Willy Tarreau00149122017-10-04 18:05:01 +0200639 if (conn && conn->err_code) {
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100640 if (errno && errno != EAGAIN)
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +0200641 chunk_printf(&trash, "%s (%s)%s", conn_err_code_str(conn), strerror(errno), chk->str);
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100642 else
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +0200643 chunk_printf(&trash, "%s%s", conn_err_code_str(conn), chk->str);
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100644 err_msg = trash.str;
645 }
646 else {
647 if (errno && errno != EAGAIN) {
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +0200648 chunk_printf(&trash, "%s%s", strerror(errno), chk->str);
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100649 err_msg = trash.str;
650 }
651 else {
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +0200652 err_msg = chk->str;
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100653 }
654 }
655
Willy Tarreau00149122017-10-04 18:05:01 +0200656 if (check->state & CHK_ST_PORT_MISS) {
Baptiste Assmann95db2bc2016-06-13 14:15:41 +0200657 /* NOTE: this is reported after <fall> tries */
658 chunk_printf(chk, "No port available for the TCP connection");
659 set_server_check_status(check, HCHK_STATUS_SOCKERR, err_msg);
660 }
661
Willy Tarreau00149122017-10-04 18:05:01 +0200662 if (!conn) {
663 /* connection allocation error before the connection was established */
664 set_server_check_status(check, HCHK_STATUS_SOCKERR, err_msg);
665 }
666 else if ((conn->flags & (CO_FL_CONNECTED|CO_FL_WAIT_L4_CONN)) == CO_FL_WAIT_L4_CONN) {
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100667 /* L4 not established (yet) */
Willy Tarreau4ff3b892017-10-16 15:17:17 +0200668 if (conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR)
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100669 set_server_check_status(check, HCHK_STATUS_L4CON, err_msg);
670 else if (expired)
671 set_server_check_status(check, HCHK_STATUS_L4TOUT, err_msg);
Baptiste Assmanna68ca962015-04-14 01:15:08 +0200672
673 /*
674 * might be due to a server IP change.
675 * Let's trigger a DNS resolution if none are currently running.
676 */
Christopher Faulet67957bd2017-09-27 11:00:59 +0200677 dns_trigger_resolution(check->server->dns_requester);
Baptiste Assmanna68ca962015-04-14 01:15:08 +0200678
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100679 }
680 else if ((conn->flags & (CO_FL_CONNECTED|CO_FL_WAIT_L6_CONN)) == CO_FL_WAIT_L6_CONN) {
681 /* L6 not established (yet) */
Willy Tarreau4ff3b892017-10-16 15:17:17 +0200682 if (conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR)
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100683 set_server_check_status(check, HCHK_STATUS_L6RSP, err_msg);
684 else if (expired)
685 set_server_check_status(check, HCHK_STATUS_L6TOUT, err_msg);
686 }
Willy Tarreau4ff3b892017-10-16 15:17:17 +0200687 else if (conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR) {
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100688 /* I/O error after connection was established and before we could diagnose */
689 set_server_check_status(check, HCHK_STATUS_SOCKERR, err_msg);
690 }
691 else if (expired) {
692 /* connection established but expired check */
693 if (check->type == PR_O2_SSL3_CHK)
694 set_server_check_status(check, HCHK_STATUS_L6TOUT, err_msg);
695 else /* HTTP, SMTP, ... */
696 set_server_check_status(check, HCHK_STATUS_L7TOUT, err_msg);
697 }
698
699 return;
700}
701
Willy Tarreaubaaee002006-06-26 02:48:02 +0200702/*
703 * This function is used only for server health-checks. It handles
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200704 * the connection acknowledgement. If the proxy requires L7 health-checks,
705 * it sends the request. In other cases, it calls set_server_check_status()
Simon Horman4a741432013-02-23 15:35:38 +0900706 * to set check->status, check->duration and check->result.
Willy Tarreau62ac84f2017-11-05 10:11:13 +0100707 *
708 * Please do NOT place any return statement in this function and only leave
709 * via the out_unlock label.
Willy Tarreaubaaee002006-06-26 02:48:02 +0200710 */
Olivier Houchard9aaf7782017-09-13 18:30:23 +0200711static void event_srv_chk_w(struct conn_stream *cs)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200712{
Olivier Houchard9aaf7782017-09-13 18:30:23 +0200713 struct connection *conn = cs->conn;
714 struct check *check = cs->data;
Simon Horman4a741432013-02-23 15:35:38 +0900715 struct server *s = check->server;
Simon Horman4a741432013-02-23 15:35:38 +0900716 struct task *t = check->task;
Willy Tarreaufb56aab2012-09-28 14:40:02 +0200717
Christopher Faulet2a944ee2017-11-07 10:42:54 +0100718 HA_SPIN_LOCK(SERVER_LOCK, &check->server->lock);
Willy Tarreau6aaa1b82013-12-11 17:09:34 +0100719 if (unlikely(check->result == CHK_RES_FAILED))
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100720 goto out_wakeup;
721
Willy Tarreau62ac84f2017-11-05 10:11:13 +0100722 if (conn->flags & CO_FL_HANDSHAKE)
723 goto out_unlock;
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100724
Willy Tarreau20a18342013-12-05 00:31:46 +0100725 if (retrieve_errno_from_socket(conn)) {
Willy Tarreaub5259bf2017-10-04 14:47:29 +0200726 chk_report_conn_err(check, errno, 0);
Olivier Houchard9aaf7782017-09-13 18:30:23 +0200727 __cs_stop_both(cs);
Willy Tarreau20a18342013-12-05 00:31:46 +0100728 goto out_wakeup;
729 }
Krzysztof Piotr Oledzki6492db52010-01-02 22:03:01 +0100730
Willy Tarreaubbae3f02017-08-30 09:59:52 +0200731 if (conn->flags & CO_FL_SOCK_WR_SH) {
Willy Tarreau20a18342013-12-05 00:31:46 +0100732 /* if the output is closed, we can't do anything */
733 conn->flags |= CO_FL_ERROR;
Willy Tarreaub5259bf2017-10-04 14:47:29 +0200734 chk_report_conn_err(check, 0, 0);
Willy Tarreau20a18342013-12-05 00:31:46 +0100735 goto out_wakeup;
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200736 }
Willy Tarreau6996e152007-04-30 14:37:43 +0200737
Willy Tarreau06559ac2013-12-05 01:53:08 +0100738 /* here, we know that the connection is established. That's enough for
739 * a pure TCP check.
740 */
741 if (!check->type)
742 goto out_wakeup;
743
Willy Tarreauc09572f2017-10-04 11:58:22 +0200744 /* wake() will take care of calling tcpcheck_main() */
Willy Tarreau62ac84f2017-11-05 10:11:13 +0100745 if (check->type == PR_O2_TCPCHK_CHK)
746 goto out_unlock;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +0200747
Willy Tarreau876171e2018-06-18 11:11:07 +0200748 if (b_data(check->bo)) {
749 b_del(check->bo, conn->mux->snd_buf(cs, check->bo, b_data(check->bo), 0));
Willy Tarreaudeccd112018-06-14 18:38:55 +0200750 b_realign_if_empty(check->bo);
751
Willy Tarreau4ff3b892017-10-16 15:17:17 +0200752 if (conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR) {
Willy Tarreaub5259bf2017-10-04 14:47:29 +0200753 chk_report_conn_err(check, errno, 0);
Olivier Houchard9aaf7782017-09-13 18:30:23 +0200754 __cs_stop_both(cs);
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100755 goto out_wakeup;
Willy Tarreaubaaee002006-06-26 02:48:02 +0200756 }
Willy Tarreau876171e2018-06-18 11:11:07 +0200757 if (b_data(check->bo))
Willy Tarreau62ac84f2017-11-05 10:11:13 +0100758 goto out_unlock;
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100759 }
Willy Tarreau6996e152007-04-30 14:37:43 +0200760
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100761 /* full request sent, we allow up to <timeout.check> if nonzero for a response */
762 if (s->proxy->timeout.check) {
763 t->expire = tick_add_ifset(now_ms, s->proxy->timeout.check);
764 task_queue(t);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200765 }
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100766 goto out_nowake;
767
Willy Tarreau83749182007-04-15 20:56:27 +0200768 out_wakeup:
Willy Tarreaufdccded2008-08-29 18:19:04 +0200769 task_wakeup(t, TASK_WOKEN_IO);
Willy Tarreau83749182007-04-15 20:56:27 +0200770 out_nowake:
Olivier Houchard9aaf7782017-09-13 18:30:23 +0200771 __cs_stop_send(cs); /* nothing more to write */
Willy Tarreau62ac84f2017-11-05 10:11:13 +0100772 out_unlock:
Christopher Faulet2a944ee2017-11-07 10:42:54 +0100773 HA_SPIN_UNLOCK(SERVER_LOCK, &check->server->lock);
Willy Tarreaubaaee002006-06-26 02:48:02 +0200774}
775
Willy Tarreaubaaee002006-06-26 02:48:02 +0200776/*
Willy Tarreauf3c69202006-07-09 16:42:34 +0200777 * This function is used only for server health-checks. It handles the server's
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +0200778 * reply to an HTTP request, SSL HELLO or MySQL client Auth. It calls
Simon Horman4a741432013-02-23 15:35:38 +0900779 * set_server_check_status() to update check->status, check->duration
780 * and check->result.
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200781
782 * The set_server_check_status function is called with HCHK_STATUS_L7OKD if
783 * an HTTP server replies HTTP 2xx or 3xx (valid responses), if an SMTP server
784 * returns 2xx, HCHK_STATUS_L6OK if an SSL server returns at least 5 bytes in
785 * response to an SSL HELLO (the principle is that this is enough to
786 * distinguish between an SSL server and a pure TCP relay). All other cases will
787 * call it with a proper error status like HCHK_STATUS_L7STS, HCHK_STATUS_L6RSP,
788 * etc.
Willy Tarreau62ac84f2017-11-05 10:11:13 +0100789 *
790 * Please do NOT place any return statement in this function and only leave
791 * via the out_unlock label.
Willy Tarreaubaaee002006-06-26 02:48:02 +0200792 */
Olivier Houchard9aaf7782017-09-13 18:30:23 +0200793static void event_srv_chk_r(struct conn_stream *cs)
Willy Tarreaubaaee002006-06-26 02:48:02 +0200794{
Olivier Houchard9aaf7782017-09-13 18:30:23 +0200795 struct connection *conn = cs->conn;
796 struct check *check = cs->data;
Simon Horman4a741432013-02-23 15:35:38 +0900797 struct server *s = check->server;
798 struct task *t = check->task;
Krzysztof Piotr Oledzkif7089f52009-10-10 21:06:49 +0200799 char *desc;
Willy Tarreau03938182010-03-17 21:52:07 +0100800 int done;
Gabor Lekenyb4c81e42010-09-29 18:17:05 +0200801 unsigned short msglen;
Willy Tarreau83749182007-04-15 20:56:27 +0200802
Christopher Faulet2a944ee2017-11-07 10:42:54 +0100803 HA_SPIN_LOCK(SERVER_LOCK, &check->server->lock);
Emeric Brun9f0b4582017-10-23 14:39:51 +0200804
Willy Tarreau6aaa1b82013-12-11 17:09:34 +0100805 if (unlikely(check->result == CHK_RES_FAILED))
Willy Tarreau83749182007-04-15 20:56:27 +0200806 goto out_wakeup;
Willy Tarreau83749182007-04-15 20:56:27 +0200807
Willy Tarreau62ac84f2017-11-05 10:11:13 +0100808 if (conn->flags & CO_FL_HANDSHAKE)
809 goto out_unlock;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +0200810
Willy Tarreauc09572f2017-10-04 11:58:22 +0200811 /* wake() will take care of calling tcpcheck_main() */
Willy Tarreau62ac84f2017-11-05 10:11:13 +0100812 if (check->type == PR_O2_TCPCHK_CHK)
813 goto out_unlock;
Willy Tarreaufb56aab2012-09-28 14:40:02 +0200814
Willy Tarreau83749182007-04-15 20:56:27 +0200815 /* Warning! Linux returns EAGAIN on SO_ERROR if data are still available
816 * but the connection was closed on the remote end. Fortunately, recv still
817 * works correctly and we don't need to do the getsockopt() on linux.
818 */
Nick Chalk57b1bf72010-03-16 15:50:46 +0000819
820 /* Set buffer to point to the end of the data already read, and check
821 * that there is free space remaining. If the buffer is full, proceed
822 * with running the checks without attempting another socket read.
823 */
Nick Chalk57b1bf72010-03-16 15:50:46 +0000824
Willy Tarreau03938182010-03-17 21:52:07 +0100825 done = 0;
Nick Chalk57b1bf72010-03-16 15:50:46 +0000826
Willy Tarreau7f3225f2018-06-19 06:15:17 +0200827 conn->mux->rcv_buf(cs, check->bi, check->bi->size, 0);
Willy Tarreau4ff3b892017-10-16 15:17:17 +0200828 if (conn->flags & (CO_FL_ERROR | CO_FL_SOCK_RD_SH) || cs->flags & CS_FL_ERROR) {
Willy Tarreau03938182010-03-17 21:52:07 +0100829 done = 1;
Willy Tarreau876171e2018-06-18 11:11:07 +0200830 if ((conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR) && !b_data(check->bi)) {
Willy Tarreauf1503172012-09-28 19:39:36 +0200831 /* Report network errors only if we got no other data. Otherwise
832 * we'll let the upper layers decide whether the response is OK
833 * or not. It is very common that an RST sent by the server is
834 * reported as an error just after the last data chunk.
835 */
Willy Tarreaub5259bf2017-10-04 14:47:29 +0200836 chk_report_conn_err(check, errno, 0);
Willy Tarreauc1a07962010-03-16 20:55:43 +0100837 goto out_wakeup;
838 }
Willy Tarreaubaaee002006-06-26 02:48:02 +0200839 }
840
Willy Tarreau25e2ab52013-12-04 11:17:05 +0100841
Willy Tarreau03938182010-03-17 21:52:07 +0100842 /* Intermediate or complete response received.
Willy Tarreau876171e2018-06-18 11:11:07 +0200843 * Terminate string in b_head(check->bi) buffer.
Willy Tarreau03938182010-03-17 21:52:07 +0100844 */
Willy Tarreau876171e2018-06-18 11:11:07 +0200845 if (b_data(check->bi) < check->bi->size)
846 b_head(check->bi)[b_data(check->bi)] = '\0';
Willy Tarreau03938182010-03-17 21:52:07 +0100847 else {
Willy Tarreau876171e2018-06-18 11:11:07 +0200848 b_head(check->bi)[b_data(check->bi) - 1] = '\0';
Willy Tarreau03938182010-03-17 21:52:07 +0100849 done = 1; /* buffer full, don't wait for more data */
850 }
Krzysztof Piotr Oledzkif7089f52009-10-10 21:06:49 +0200851
Nick Chalk57b1bf72010-03-16 15:50:46 +0000852 /* Run the checks... */
Simon Horman4a741432013-02-23 15:35:38 +0900853 switch (check->type) {
Willy Tarreau1620ec32011-08-06 17:05:02 +0200854 case PR_O2_HTTP_CHK:
Willy Tarreau876171e2018-06-18 11:11:07 +0200855 if (!done && b_data(check->bi) < strlen("HTTP/1.0 000\r"))
Willy Tarreau03938182010-03-17 21:52:07 +0100856 goto wait_more_data;
857
Willy Tarreauc7dd71a2007-11-30 08:33:21 +0100858 /* Check if the server speaks HTTP 1.X */
Willy Tarreau876171e2018-06-18 11:11:07 +0200859 if ((b_data(check->bi) < strlen("HTTP/1.0 000\r")) ||
860 (memcmp(b_head(check->bi), "HTTP/1.", 7) != 0 ||
861 (*(b_head(check->bi) + 12) != ' ' && *(b_head(check->bi) + 12) != '\r')) ||
862 !isdigit((unsigned char) *(b_head(check->bi) + 9)) || !isdigit((unsigned char) *(b_head(check->bi) + 10)) ||
863 !isdigit((unsigned char) *(b_head(check->bi) + 11))) {
864 cut_crlf(b_head(check->bi));
865 set_server_check_status(check, HCHK_STATUS_L7RSP, b_head(check->bi));
Krzysztof Piotr Oledzkif7089f52009-10-10 21:06:49 +0200866
Willy Tarreauc7dd71a2007-11-30 08:33:21 +0100867 goto out_wakeup;
868 }
869
Willy Tarreau876171e2018-06-18 11:11:07 +0200870 check->code = str2uic(b_head(check->bi) + 9);
871 desc = ltrim(b_head(check->bi) + 12, ' ');
Christopher Fauletc2a89a62017-10-23 15:54:24 +0200872
Willy Tarreaubd741542010-03-16 18:46:54 +0100873 if ((s->proxy->options & PR_O_DISABLE404) &&
Emeric Brun52a91d32017-08-31 14:41:55 +0200874 (s->next_state != SRV_ST_STOPPED) && (check->code == 404)) {
Nick Chalk57b1bf72010-03-16 15:50:46 +0000875 /* 404 may be accepted as "stopping" only if the server was up */
876 cut_crlf(desc);
Simon Horman4a741432013-02-23 15:35:38 +0900877 set_server_check_status(check, HCHK_STATUS_L7OKCD, desc);
Nick Chalk57b1bf72010-03-16 15:50:46 +0000878 }
Willy Tarreaubd741542010-03-16 18:46:54 +0100879 else if (s->proxy->options2 & PR_O2_EXP_TYPE) {
880 /* Run content verification check... We know we have at least 13 chars */
881 if (!httpchk_expect(s, done))
882 goto wait_more_data;
883 }
884 /* check the reply : HTTP/1.X 2xx and 3xx are OK */
Willy Tarreau876171e2018-06-18 11:11:07 +0200885 else if (*(b_head(check->bi) + 9) == '2' || *(b_head(check->bi) + 9) == '3') {
Willy Tarreaubd741542010-03-16 18:46:54 +0100886 cut_crlf(desc);
Simon Horman4a741432013-02-23 15:35:38 +0900887 set_server_check_status(check, HCHK_STATUS_L7OKD, desc);
Willy Tarreaubd741542010-03-16 18:46:54 +0100888 }
Nick Chalk57b1bf72010-03-16 15:50:46 +0000889 else {
890 cut_crlf(desc);
Simon Horman4a741432013-02-23 15:35:38 +0900891 set_server_check_status(check, HCHK_STATUS_L7STS, desc);
Nick Chalk57b1bf72010-03-16 15:50:46 +0000892 }
Willy Tarreau1620ec32011-08-06 17:05:02 +0200893 break;
894
895 case PR_O2_SSL3_CHK:
Willy Tarreau876171e2018-06-18 11:11:07 +0200896 if (!done && b_data(check->bi) < 5)
Willy Tarreau03938182010-03-17 21:52:07 +0100897 goto wait_more_data;
898
Willy Tarreauc7dd71a2007-11-30 08:33:21 +0100899 /* Check for SSLv3 alert or handshake */
Willy Tarreau876171e2018-06-18 11:11:07 +0200900 if ((b_data(check->bi) >= 5) && (*b_head(check->bi) == 0x15 || *b_head(check->bi) == 0x16))
Simon Horman4a741432013-02-23 15:35:38 +0900901 set_server_check_status(check, HCHK_STATUS_L6OK, NULL);
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200902 else
Simon Horman4a741432013-02-23 15:35:38 +0900903 set_server_check_status(check, HCHK_STATUS_L6RSP, NULL);
Willy Tarreau1620ec32011-08-06 17:05:02 +0200904 break;
905
906 case PR_O2_SMTP_CHK:
Willy Tarreau876171e2018-06-18 11:11:07 +0200907 if (!done && b_data(check->bi) < strlen("000\r"))
Willy Tarreau03938182010-03-17 21:52:07 +0100908 goto wait_more_data;
909
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200910 /* Check if the server speaks SMTP */
Willy Tarreau876171e2018-06-18 11:11:07 +0200911 if ((b_data(check->bi) < strlen("000\r")) ||
912 (*(b_head(check->bi) + 3) != ' ' && *(b_head(check->bi) + 3) != '\r') ||
913 !isdigit((unsigned char) *b_head(check->bi)) || !isdigit((unsigned char) *(b_head(check->bi) + 1)) ||
914 !isdigit((unsigned char) *(b_head(check->bi) + 2))) {
915 cut_crlf(b_head(check->bi));
916 set_server_check_status(check, HCHK_STATUS_L7RSP, b_head(check->bi));
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200917 goto out_wakeup;
918 }
919
Willy Tarreau876171e2018-06-18 11:11:07 +0200920 check->code = str2uic(b_head(check->bi));
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +0200921
Willy Tarreau876171e2018-06-18 11:11:07 +0200922 desc = ltrim(b_head(check->bi) + 3, ' ');
Krzysztof Piotr Oledzkif7089f52009-10-10 21:06:49 +0200923 cut_crlf(desc);
924
Willy Tarreauc7dd71a2007-11-30 08:33:21 +0100925 /* Check for SMTP code 2xx (should be 250) */
Willy Tarreau876171e2018-06-18 11:11:07 +0200926 if (*b_head(check->bi) == '2')
Simon Horman4a741432013-02-23 15:35:38 +0900927 set_server_check_status(check, HCHK_STATUS_L7OKD, desc);
Krzysztof Piotr Oledzki213014e2009-09-27 15:50:02 +0200928 else
Simon Horman4a741432013-02-23 15:35:38 +0900929 set_server_check_status(check, HCHK_STATUS_L7STS, desc);
Willy Tarreau1620ec32011-08-06 17:05:02 +0200930 break;
931
Simon Hormana2b9dad2013-02-12 10:45:54 +0900932 case PR_O2_LB_AGENT_CHK: {
Willy Tarreau81f5d942013-12-09 20:51:51 +0100933 int status = HCHK_STATUS_CHECKED;
934 const char *hs = NULL; /* health status */
935 const char *as = NULL; /* admin status */
936 const char *ps = NULL; /* performance status */
Nenad Merdanovic174dd372016-04-24 23:10:06 +0200937 const char *cs = NULL; /* maxconn */
Willy Tarreau81f5d942013-12-09 20:51:51 +0100938 const char *err = NULL; /* first error to report */
939 const char *wrn = NULL; /* first warning to report */
940 char *cmd, *p;
Simon Hormana2b9dad2013-02-12 10:45:54 +0900941
Willy Tarreau81f5d942013-12-09 20:51:51 +0100942 /* We're getting an agent check response. The agent could
943 * have been disabled in the mean time with a long check
944 * still pending. It is important that we ignore the whole
945 * response.
946 */
947 if (!(check->server->agent.state & CHK_ST_ENABLED))
948 break;
949
950 /* The agent supports strings made of a single line ended by the
951 * first CR ('\r') or LF ('\n'). This line is composed of words
952 * delimited by spaces (' '), tabs ('\t'), or commas (','). The
953 * line may optionally contained a description of a state change
954 * after a sharp ('#'), which is only considered if a health state
955 * is announced.
956 *
957 * Words may be composed of :
958 * - a numeric weight suffixed by the percent character ('%').
959 * - a health status among "up", "down", "stopped", and "fail".
960 * - an admin status among "ready", "drain", "maint".
961 *
962 * These words may appear in any order. If multiple words of the
963 * same category appear, the last one wins.
964 */
965
Willy Tarreau876171e2018-06-18 11:11:07 +0200966 p = b_head(check->bi);
Willy Tarreau9809b782013-12-11 21:40:11 +0100967 while (*p && *p != '\n' && *p != '\r')
968 p++;
969
970 if (!*p) {
971 if (!done)
972 goto wait_more_data;
Simon Hormana2b9dad2013-02-12 10:45:54 +0900973
Willy Tarreau9809b782013-12-11 21:40:11 +0100974 /* at least inform the admin that the agent is mis-behaving */
975 set_server_check_status(check, check->status, "Ignoring incomplete line from agent");
976 break;
977 }
Willy Tarreau81f5d942013-12-09 20:51:51 +0100978
Willy Tarreau9809b782013-12-11 21:40:11 +0100979 *p = 0;
Willy Tarreau876171e2018-06-18 11:11:07 +0200980 cmd = b_head(check->bi);
Simon Hormana2b9dad2013-02-12 10:45:54 +0900981
Willy Tarreau81f5d942013-12-09 20:51:51 +0100982 while (*cmd) {
983 /* look for next word */
984 if (*cmd == ' ' || *cmd == '\t' || *cmd == ',') {
985 cmd++;
986 continue;
987 }
Simon Horman671b6f02013-11-25 10:46:39 +0900988
Willy Tarreau81f5d942013-12-09 20:51:51 +0100989 if (*cmd == '#') {
990 /* this is the beginning of a health status description,
991 * skip the sharp and blanks.
992 */
993 cmd++;
994 while (*cmd == '\t' || *cmd == ' ')
995 cmd++;
Simon Horman671b6f02013-11-25 10:46:39 +0900996 break;
Simon Hormana2b9dad2013-02-12 10:45:54 +0900997 }
Willy Tarreau81f5d942013-12-09 20:51:51 +0100998
999 /* find the end of the word so that we have a null-terminated
1000 * word between <cmd> and <p>.
1001 */
1002 p = cmd + 1;
1003 while (*p && *p != '\t' && *p != ' ' && *p != '\n' && *p != ',')
1004 p++;
1005 if (*p)
1006 *p++ = 0;
1007
1008 /* first, health statuses */
1009 if (strcasecmp(cmd, "up") == 0) {
1010 check->health = check->rise + check->fall - 1;
Simon Hormana2b9dad2013-02-12 10:45:54 +09001011 status = HCHK_STATUS_L7OKD;
Willy Tarreau81f5d942013-12-09 20:51:51 +01001012 hs = cmd;
1013 }
1014 else if (strcasecmp(cmd, "down") == 0) {
1015 check->health = 0;
1016 status = HCHK_STATUS_L7STS;
1017 hs = cmd;
Simon Hormana2b9dad2013-02-12 10:45:54 +09001018 }
Willy Tarreau81f5d942013-12-09 20:51:51 +01001019 else if (strcasecmp(cmd, "stopped") == 0) {
1020 check->health = 0;
1021 status = HCHK_STATUS_L7STS;
1022 hs = cmd;
1023 }
1024 else if (strcasecmp(cmd, "fail") == 0) {
1025 check->health = 0;
1026 status = HCHK_STATUS_L7STS;
1027 hs = cmd;
1028 }
1029 /* admin statuses */
1030 else if (strcasecmp(cmd, "ready") == 0) {
1031 as = cmd;
1032 }
1033 else if (strcasecmp(cmd, "drain") == 0) {
1034 as = cmd;
1035 }
1036 else if (strcasecmp(cmd, "maint") == 0) {
1037 as = cmd;
1038 }
Nenad Merdanovic174dd372016-04-24 23:10:06 +02001039 /* try to parse a weight here and keep the last one */
Willy Tarreau81f5d942013-12-09 20:51:51 +01001040 else if (isdigit((unsigned char)*cmd) && strchr(cmd, '%') != NULL) {
1041 ps = cmd;
1042 }
Nenad Merdanovic174dd372016-04-24 23:10:06 +02001043 /* try to parse a maxconn here */
1044 else if (strncasecmp(cmd, "maxconn:", strlen("maxconn:")) == 0) {
1045 cs = cmd;
1046 }
Willy Tarreau81f5d942013-12-09 20:51:51 +01001047 else {
1048 /* keep a copy of the first error */
1049 if (!err)
1050 err = cmd;
1051 }
1052 /* skip to next word */
1053 cmd = p;
1054 }
1055 /* here, cmd points either to \0 or to the beginning of a
1056 * description. Skip possible leading spaces.
1057 */
1058 while (*cmd == ' ' || *cmd == '\n')
1059 cmd++;
1060
1061 /* First, update the admin status so that we avoid sending other
1062 * possibly useless warnings and can also update the health if
1063 * present after going back up.
1064 */
1065 if (as) {
1066 if (strcasecmp(as, "drain") == 0)
1067 srv_adm_set_drain(check->server);
1068 else if (strcasecmp(as, "maint") == 0)
1069 srv_adm_set_maint(check->server);
1070 else
1071 srv_adm_set_ready(check->server);
Simon Hormana2b9dad2013-02-12 10:45:54 +09001072 }
1073
Willy Tarreau81f5d942013-12-09 20:51:51 +01001074 /* now change weights */
1075 if (ps) {
1076 const char *msg;
1077
1078 msg = server_parse_weight_change_request(s, ps);
1079 if (!wrn || !*wrn)
1080 wrn = msg;
1081 }
1082
Nenad Merdanovic174dd372016-04-24 23:10:06 +02001083 if (cs) {
1084 const char *msg;
1085
1086 cs += strlen("maxconn:");
1087
1088 msg = server_parse_maxconn_change_request(s, cs);
1089 if (!wrn || !*wrn)
1090 wrn = msg;
1091 }
1092
Willy Tarreau81f5d942013-12-09 20:51:51 +01001093 /* and finally health status */
1094 if (hs) {
1095 /* We'll report some of the warnings and errors we have
1096 * here. Down reports are critical, we leave them untouched.
1097 * Lack of report, or report of 'UP' leaves the room for
1098 * ERR first, then WARN.
Simon Hormana2b9dad2013-02-12 10:45:54 +09001099 */
Willy Tarreau81f5d942013-12-09 20:51:51 +01001100 const char *msg = cmd;
1101 struct chunk *t;
1102
1103 if (!*msg || status == HCHK_STATUS_L7OKD) {
1104 if (err && *err)
1105 msg = err;
1106 else if (wrn && *wrn)
1107 msg = wrn;
Simon Hormana2b9dad2013-02-12 10:45:54 +09001108 }
Willy Tarreau81f5d942013-12-09 20:51:51 +01001109
1110 t = get_trash_chunk();
1111 chunk_printf(t, "via agent : %s%s%s%s",
1112 hs, *msg ? " (" : "",
1113 msg, *msg ? ")" : "");
1114
1115 set_server_check_status(check, status, t->str);
Simon Hormana2b9dad2013-02-12 10:45:54 +09001116 }
Willy Tarreau81f5d942013-12-09 20:51:51 +01001117 else if (err && *err) {
1118 /* No status change but we'd like to report something odd.
1119 * Just report the current state and copy the message.
1120 */
1121 chunk_printf(&trash, "agent reports an error : %s", err);
1122 set_server_check_status(check, status/*check->status*/, trash.str);
Simon Hormana2b9dad2013-02-12 10:45:54 +09001123
Willy Tarreau81f5d942013-12-09 20:51:51 +01001124 }
1125 else if (wrn && *wrn) {
1126 /* No status change but we'd like to report something odd.
1127 * Just report the current state and copy the message.
1128 */
1129 chunk_printf(&trash, "agent warns : %s", wrn);
1130 set_server_check_status(check, status/*check->status*/, trash.str);
1131 }
1132 else
1133 set_server_check_status(check, status, NULL);
Simon Hormana2b9dad2013-02-12 10:45:54 +09001134 break;
1135 }
1136
Willy Tarreau1620ec32011-08-06 17:05:02 +02001137 case PR_O2_PGSQL_CHK:
Willy Tarreau876171e2018-06-18 11:11:07 +02001138 if (!done && b_data(check->bi) < 9)
Rauf Kuliyev38b41562011-01-04 15:14:13 +01001139 goto wait_more_data;
1140
Willy Tarreau876171e2018-06-18 11:11:07 +02001141 if (b_head(check->bi)[0] == 'R') {
Simon Horman4a741432013-02-23 15:35:38 +09001142 set_server_check_status(check, HCHK_STATUS_L7OKD, "PostgreSQL server is ok");
Rauf Kuliyev38b41562011-01-04 15:14:13 +01001143 }
1144 else {
Willy Tarreau876171e2018-06-18 11:11:07 +02001145 if ((b_head(check->bi)[0] == 'E') && (b_head(check->bi)[5]!=0) && (b_head(check->bi)[6]!=0))
1146 desc = &b_head(check->bi)[6];
Rauf Kuliyev38b41562011-01-04 15:14:13 +01001147 else
1148 desc = "PostgreSQL unknown error";
1149
Simon Horman4a741432013-02-23 15:35:38 +09001150 set_server_check_status(check, HCHK_STATUS_L7STS, desc);
Rauf Kuliyev38b41562011-01-04 15:14:13 +01001151 }
Willy Tarreau1620ec32011-08-06 17:05:02 +02001152 break;
1153
1154 case PR_O2_REDIS_CHK:
Willy Tarreau876171e2018-06-18 11:11:07 +02001155 if (!done && b_data(check->bi) < 7)
Hervé COMMOWICKec032d62011-08-05 16:23:48 +02001156 goto wait_more_data;
1157
Willy Tarreau876171e2018-06-18 11:11:07 +02001158 if (strcmp(b_head(check->bi), "+PONG\r\n") == 0) {
Simon Horman4a741432013-02-23 15:35:38 +09001159 set_server_check_status(check, HCHK_STATUS_L7OKD, "Redis server is ok");
Hervé COMMOWICKec032d62011-08-05 16:23:48 +02001160 }
1161 else {
Willy Tarreau876171e2018-06-18 11:11:07 +02001162 set_server_check_status(check, HCHK_STATUS_L7STS, b_head(check->bi));
Hervé COMMOWICKec032d62011-08-05 16:23:48 +02001163 }
Willy Tarreau1620ec32011-08-06 17:05:02 +02001164 break;
1165
1166 case PR_O2_MYSQL_CHK:
Willy Tarreau876171e2018-06-18 11:11:07 +02001167 if (!done && b_data(check->bi) < 5)
Willy Tarreau03938182010-03-17 21:52:07 +01001168 goto wait_more_data;
1169
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001170 if (s->proxy->check_len == 0) { // old mode
Willy Tarreau876171e2018-06-18 11:11:07 +02001171 if (*(b_head(check->bi) + 4) != '\xff') {
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001172 /* We set the MySQL Version in description for information purpose
1173 * FIXME : it can be cool to use MySQL Version for other purpose,
1174 * like mark as down old MySQL server.
1175 */
Willy Tarreau876171e2018-06-18 11:11:07 +02001176 if (b_data(check->bi) > 51) {
1177 desc = ltrim(b_head(check->bi) + 5, ' ');
Simon Horman4a741432013-02-23 15:35:38 +09001178 set_server_check_status(check, HCHK_STATUS_L7OKD, desc);
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001179 }
1180 else {
1181 if (!done)
1182 goto wait_more_data;
Emeric Brun9f0b4582017-10-23 14:39:51 +02001183
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001184 /* it seems we have a OK packet but without a valid length,
1185 * it must be a protocol error
1186 */
Willy Tarreau876171e2018-06-18 11:11:07 +02001187 set_server_check_status(check, HCHK_STATUS_L7RSP, b_head(check->bi));
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001188 }
Hervé COMMOWICK698ae002010-01-12 09:25:13 +01001189 }
1190 else {
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001191 /* An error message is attached in the Error packet */
Willy Tarreau876171e2018-06-18 11:11:07 +02001192 desc = ltrim(b_head(check->bi) + 7, ' ');
Simon Horman4a741432013-02-23 15:35:38 +09001193 set_server_check_status(check, HCHK_STATUS_L7STS, desc);
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001194 }
1195 } else {
Willy Tarreau876171e2018-06-18 11:11:07 +02001196 unsigned int first_packet_len = ((unsigned int) *b_head(check->bi)) +
1197 (((unsigned int) *(b_head(check->bi) + 1)) << 8) +
1198 (((unsigned int) *(b_head(check->bi) + 2)) << 16);
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001199
Willy Tarreau876171e2018-06-18 11:11:07 +02001200 if (b_data(check->bi) == first_packet_len + 4) {
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001201 /* MySQL Error packet always begin with field_count = 0xff */
Willy Tarreau876171e2018-06-18 11:11:07 +02001202 if (*(b_head(check->bi) + 4) != '\xff') {
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001203 /* We have only one MySQL packet and it is a Handshake Initialization packet
1204 * but we need to have a second packet to know if it is alright
1205 */
Willy Tarreau876171e2018-06-18 11:11:07 +02001206 if (!done && b_data(check->bi) < first_packet_len + 5)
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001207 goto wait_more_data;
1208 }
1209 else {
1210 /* We have only one packet and it is an Error packet,
1211 * an error message is attached, so we can display it
1212 */
Willy Tarreau876171e2018-06-18 11:11:07 +02001213 desc = &b_head(check->bi)[7];
Christopher Faulet767a84b2017-11-24 16:50:31 +01001214 //ha_warning("onlyoneERR: %s\n", desc);
Simon Horman4a741432013-02-23 15:35:38 +09001215 set_server_check_status(check, HCHK_STATUS_L7STS, desc);
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001216 }
Willy Tarreau876171e2018-06-18 11:11:07 +02001217 } else if (b_data(check->bi) > first_packet_len + 4) {
1218 unsigned int second_packet_len = ((unsigned int) *(b_head(check->bi) + first_packet_len + 4)) +
1219 (((unsigned int) *(b_head(check->bi) + first_packet_len + 5)) << 8) +
1220 (((unsigned int) *(b_head(check->bi) + first_packet_len + 6)) << 16);
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001221
Willy Tarreau876171e2018-06-18 11:11:07 +02001222 if (b_data(check->bi) == first_packet_len + 4 + second_packet_len + 4 ) {
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001223 /* We have 2 packets and that's good */
1224 /* Check if the second packet is a MySQL Error packet or not */
Willy Tarreau876171e2018-06-18 11:11:07 +02001225 if (*(b_head(check->bi) + first_packet_len + 8) != '\xff') {
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001226 /* No error packet */
1227 /* We set the MySQL Version in description for information purpose */
Willy Tarreau876171e2018-06-18 11:11:07 +02001228 desc = &b_head(check->bi)[5];
Christopher Faulet767a84b2017-11-24 16:50:31 +01001229 //ha_warning("2packetOK: %s\n", desc);
Simon Horman4a741432013-02-23 15:35:38 +09001230 set_server_check_status(check, HCHK_STATUS_L7OKD, desc);
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001231 }
1232 else {
1233 /* An error message is attached in the Error packet
1234 * so we can display it ! :)
1235 */
Willy Tarreau876171e2018-06-18 11:11:07 +02001236 desc = &b_head(check->bi)[first_packet_len+11];
Christopher Faulet767a84b2017-11-24 16:50:31 +01001237 //ha_warning("2packetERR: %s\n", desc);
Simon Horman4a741432013-02-23 15:35:38 +09001238 set_server_check_status(check, HCHK_STATUS_L7STS, desc);
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001239 }
1240 }
1241 }
1242 else {
Willy Tarreau03938182010-03-17 21:52:07 +01001243 if (!done)
1244 goto wait_more_data;
Emeric Brun9f0b4582017-10-23 14:39:51 +02001245
Hervé COMMOWICK8776f1b2010-10-18 15:58:36 +02001246 /* it seems we have a Handshake Initialization packet but without a valid length,
Hervé COMMOWICK698ae002010-01-12 09:25:13 +01001247 * it must be a protocol error
1248 */
Willy Tarreau876171e2018-06-18 11:11:07 +02001249 desc = &b_head(check->bi)[5];
Christopher Faulet767a84b2017-11-24 16:50:31 +01001250 //ha_warning("protoerr: %s\n", desc);
Simon Horman4a741432013-02-23 15:35:38 +09001251 set_server_check_status(check, HCHK_STATUS_L7RSP, desc);
Hervé COMMOWICK698ae002010-01-12 09:25:13 +01001252 }
1253 }
Willy Tarreau1620ec32011-08-06 17:05:02 +02001254 break;
1255
1256 case PR_O2_LDAP_CHK:
Willy Tarreau876171e2018-06-18 11:11:07 +02001257 if (!done && b_data(check->bi) < 14)
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001258 goto wait_more_data;
1259
1260 /* Check if the server speaks LDAP (ASN.1/BER)
1261 * http://en.wikipedia.org/wiki/Basic_Encoding_Rules
1262 * http://tools.ietf.org/html/rfc4511
1263 */
1264
1265 /* http://tools.ietf.org/html/rfc4511#section-4.1.1
1266 * LDAPMessage: 0x30: SEQUENCE
1267 */
Willy Tarreau876171e2018-06-18 11:11:07 +02001268 if ((b_data(check->bi) < 14) || (*(b_head(check->bi)) != '\x30')) {
Simon Horman4a741432013-02-23 15:35:38 +09001269 set_server_check_status(check, HCHK_STATUS_L7RSP, "Not LDAPv3 protocol");
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001270 }
1271 else {
1272 /* size of LDAPMessage */
Willy Tarreau876171e2018-06-18 11:11:07 +02001273 msglen = (*(b_head(check->bi) + 1) & 0x80) ? (*(b_head(check->bi) + 1) & 0x7f) : 0;
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001274
1275 /* http://tools.ietf.org/html/rfc4511#section-4.2.2
1276 * messageID: 0x02 0x01 0x01: INTEGER 1
1277 * protocolOp: 0x61: bindResponse
1278 */
1279 if ((msglen > 2) ||
Willy Tarreau876171e2018-06-18 11:11:07 +02001280 (memcmp(b_head(check->bi) + 2 + msglen, "\x02\x01\x01\x61", 4) != 0)) {
Simon Horman4a741432013-02-23 15:35:38 +09001281 set_server_check_status(check, HCHK_STATUS_L7RSP, "Not LDAPv3 protocol");
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001282 goto out_wakeup;
1283 }
1284
1285 /* size of bindResponse */
Willy Tarreau876171e2018-06-18 11:11:07 +02001286 msglen += (*(b_head(check->bi) + msglen + 6) & 0x80) ? (*(b_head(check->bi) + msglen + 6) & 0x7f) : 0;
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001287
1288 /* http://tools.ietf.org/html/rfc4511#section-4.1.9
1289 * ldapResult: 0x0a 0x01: ENUMERATION
1290 */
1291 if ((msglen > 4) ||
Willy Tarreau876171e2018-06-18 11:11:07 +02001292 (memcmp(b_head(check->bi) + 7 + msglen, "\x0a\x01", 2) != 0)) {
Simon Horman4a741432013-02-23 15:35:38 +09001293 set_server_check_status(check, HCHK_STATUS_L7RSP, "Not LDAPv3 protocol");
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001294 goto out_wakeup;
1295 }
1296
1297 /* http://tools.ietf.org/html/rfc4511#section-4.1.9
1298 * resultCode
1299 */
Willy Tarreau876171e2018-06-18 11:11:07 +02001300 check->code = *(b_head(check->bi) + msglen + 9);
Simon Horman4a741432013-02-23 15:35:38 +09001301 if (check->code) {
1302 set_server_check_status(check, HCHK_STATUS_L7STS, "See RFC: http://tools.ietf.org/html/rfc4511#section-4.1.9");
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001303 } else {
Simon Horman4a741432013-02-23 15:35:38 +09001304 set_server_check_status(check, HCHK_STATUS_L7OKD, "Success");
Gabor Lekenyb4c81e42010-09-29 18:17:05 +02001305 }
1306 }
Willy Tarreau1620ec32011-08-06 17:05:02 +02001307 break;
1308
Christopher Fauletba7bc162016-11-07 21:07:38 +01001309 case PR_O2_SPOP_CHK: {
1310 unsigned int framesz;
1311 char err[HCHK_DESC_LEN];
1312
Willy Tarreau876171e2018-06-18 11:11:07 +02001313 if (!done && b_data(check->bi) < 4)
Christopher Fauletba7bc162016-11-07 21:07:38 +01001314 goto wait_more_data;
1315
Willy Tarreau876171e2018-06-18 11:11:07 +02001316 memcpy(&framesz, b_head(check->bi), 4);
Christopher Fauletba7bc162016-11-07 21:07:38 +01001317 framesz = ntohl(framesz);
1318
Willy Tarreau876171e2018-06-18 11:11:07 +02001319 if (!done && b_data(check->bi) < (4+framesz))
Christopher Fauletba7bc162016-11-07 21:07:38 +01001320 goto wait_more_data;
1321
Willy Tarreau876171e2018-06-18 11:11:07 +02001322 if (!spoe_handle_healthcheck_response(b_head(check->bi)+4, framesz, err, HCHK_DESC_LEN-1))
Christopher Fauletba7bc162016-11-07 21:07:38 +01001323 set_server_check_status(check, HCHK_STATUS_L7OKD, "SPOA server is ok");
1324 else
1325 set_server_check_status(check, HCHK_STATUS_L7STS, err);
1326 break;
1327 }
1328
Willy Tarreau1620ec32011-08-06 17:05:02 +02001329 default:
Willy Tarreau06559ac2013-12-05 01:53:08 +01001330 /* for other checks (eg: pure TCP), delegate to the main task */
Willy Tarreau1620ec32011-08-06 17:05:02 +02001331 break;
1332 } /* switch */
Willy Tarreau83749182007-04-15 20:56:27 +02001333
Willy Tarreauc7dd71a2007-11-30 08:33:21 +01001334 out_wakeup:
Willy Tarreau25e2ab52013-12-04 11:17:05 +01001335 /* collect possible new errors */
Willy Tarreau4ff3b892017-10-16 15:17:17 +02001336 if (conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR)
Willy Tarreaub5259bf2017-10-04 14:47:29 +02001337 chk_report_conn_err(check, 0, 0);
Willy Tarreaubaaee002006-06-26 02:48:02 +02001338
Nick Chalk57b1bf72010-03-16 15:50:46 +00001339 /* Reset the check buffer... */
Willy Tarreau876171e2018-06-18 11:11:07 +02001340 *b_head(check->bi) = '\0';
1341 b_reset(check->bi);
Nick Chalk57b1bf72010-03-16 15:50:46 +00001342
Steven Davidovitz544d4812017-03-08 11:06:20 -08001343 /* Close the connection... We still attempt to nicely close if,
1344 * for instance, SSL needs to send a "close notify." Later, we perform
1345 * a hard close and reset the connection if some data are pending,
1346 * otherwise we end up with many TIME_WAITs and eat all the source port
1347 * range quickly. To avoid sending RSTs all the time, we first try to
1348 * drain pending data.
Willy Tarreaufd29cc52012-11-23 09:18:20 +01001349 */
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001350 __cs_stop_both(cs);
Willy Tarreauecdb3fe2017-10-05 15:25:48 +02001351 cs_shutw(cs, CS_SHW_NORMAL);
Willy Tarreau2b57cb82013-06-10 19:56:38 +02001352
Willy Tarreau25e2ab52013-12-04 11:17:05 +01001353 /* OK, let's not stay here forever */
Willy Tarreau6aaa1b82013-12-11 17:09:34 +01001354 if (check->result == CHK_RES_FAILED)
Willy Tarreau25e2ab52013-12-04 11:17:05 +01001355 conn->flags |= CO_FL_ERROR;
1356
Willy Tarreaufdccded2008-08-29 18:19:04 +02001357 task_wakeup(t, TASK_WOKEN_IO);
Willy Tarreau62ac84f2017-11-05 10:11:13 +01001358 out_unlock:
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001359 HA_SPIN_UNLOCK(SERVER_LOCK, &check->server->lock);
Willy Tarreau3267d362012-08-17 23:53:56 +02001360 return;
Willy Tarreau03938182010-03-17 21:52:07 +01001361
1362 wait_more_data:
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001363 __cs_want_recv(cs);
Willy Tarreau62ac84f2017-11-05 10:11:13 +01001364 goto out_unlock;
Willy Tarreaubaaee002006-06-26 02:48:02 +02001365}
1366
Willy Tarreaufb56aab2012-09-28 14:40:02 +02001367/*
1368 * This function is used only for server health-checks. It handles connection
1369 * status updates including errors. If necessary, it wakes the check task up.
Willy Tarreau6bdcab02017-10-04 18:41:00 +02001370 * It returns 0 on normal cases, <0 if at least one close() has happened on the
1371 * connection (eg: reconnect).
Willy Tarreaufb56aab2012-09-28 14:40:02 +02001372 */
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001373static int wake_srv_chk(struct conn_stream *cs)
Willy Tarreau20bea422012-07-06 12:00:49 +02001374{
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001375 struct connection *conn = cs->conn;
1376 struct check *check = cs->data;
Willy Tarreau6bdcab02017-10-04 18:41:00 +02001377 int ret = 0;
Willy Tarreau20bea422012-07-06 12:00:49 +02001378
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001379 HA_SPIN_LOCK(SERVER_LOCK, &check->server->lock);
Emeric Brunf6ba17d2017-11-02 14:35:27 +01001380
Willy Tarreauc09572f2017-10-04 11:58:22 +02001381 /* we may have to make progress on the TCP checks */
Willy Tarreau6bdcab02017-10-04 18:41:00 +02001382 if (check->type == PR_O2_TCPCHK_CHK) {
1383 ret = tcpcheck_main(check);
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001384 cs = check->cs;
1385 conn = cs_conn(cs);
Willy Tarreau6bdcab02017-10-04 18:41:00 +02001386 }
Willy Tarreauc09572f2017-10-04 11:58:22 +02001387
Willy Tarreau4ff3b892017-10-16 15:17:17 +02001388 if (unlikely(conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR)) {
Willy Tarreau02b0f582013-12-03 15:42:33 +01001389 /* We may get error reports bypassing the I/O handlers, typically
1390 * the case when sending a pure TCP check which fails, then the I/O
1391 * handlers above are not called. This is completely handled by the
Willy Tarreau25e2ab52013-12-04 11:17:05 +01001392 * main processing task so let's simply wake it up. If we get here,
1393 * we expect errno to still be valid.
1394 */
Willy Tarreaub5259bf2017-10-04 14:47:29 +02001395 chk_report_conn_err(check, errno, 0);
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001396 __cs_stop_both(cs);
Willy Tarreau2d351b62013-12-05 02:36:25 +01001397 task_wakeup(check->task, TASK_WOKEN_IO);
1398 }
Willy Tarreau2500fc22018-04-03 19:31:38 +02001399 else if (!(conn->flags & CO_FL_HANDSHAKE) && !(cs->flags & (CS_FL_DATA_RD_ENA|CS_FL_DATA_WR_ENA))) {
Willy Tarreau3be293f2014-02-05 18:31:24 +01001400 /* we may get here if only a connection probe was required : we
1401 * don't have any data to send nor anything expected in response,
1402 * so the completion of the connection establishment is enough.
1403 */
1404 task_wakeup(check->task, TASK_WOKEN_IO);
1405 }
Willy Tarreau2d351b62013-12-05 02:36:25 +01001406
Willy Tarreau6aaa1b82013-12-11 17:09:34 +01001407 if (check->result != CHK_RES_UNKNOWN) {
Willy Tarreau25e2ab52013-12-04 11:17:05 +01001408 /* We're here because nobody wants to handle the error, so we
1409 * sure want to abort the hard way.
Willy Tarreau02b0f582013-12-03 15:42:33 +01001410 */
Willy Tarreaud85c4852015-03-13 00:40:28 +01001411 conn_sock_drain(conn);
Willy Tarreaua553ae92017-10-05 18:52:17 +02001412 cs_close(cs);
Willy Tarreau6bdcab02017-10-04 18:41:00 +02001413 ret = -1;
Willy Tarreau2d351b62013-12-05 02:36:25 +01001414 }
Willy Tarreau6bdcab02017-10-04 18:41:00 +02001415
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001416 HA_SPIN_UNLOCK(SERVER_LOCK, &check->server->lock);
Emeric Brunf6ba17d2017-11-02 14:35:27 +01001417
Willy Tarreau6bdcab02017-10-04 18:41:00 +02001418 /* if a connection got replaced, we must absolutely prevent the connection
1419 * handler from touching its fd, and perform the FD polling updates ourselves
1420 */
1421 if (ret < 0)
1422 conn_cond_update_polling(conn);
1423
1424 return ret;
Willy Tarreau20bea422012-07-06 12:00:49 +02001425}
1426
Willy Tarreaufb56aab2012-09-28 14:40:02 +02001427struct data_cb check_conn_cb = {
1428 .recv = event_srv_chk_r,
1429 .send = event_srv_chk_w,
1430 .wake = wake_srv_chk,
Willy Tarreau8e0bb0a2016-11-24 16:58:12 +01001431 .name = "CHCK",
Willy Tarreaufb56aab2012-09-28 14:40:02 +02001432};
1433
Willy Tarreaubaaee002006-06-26 02:48:02 +02001434/*
Willy Tarreau2e993902011-10-31 11:53:20 +01001435 * updates the server's weight during a warmup stage. Once the final weight is
1436 * reached, the task automatically stops. Note that any server status change
1437 * must have updated s->last_change accordingly.
1438 */
Olivier Houchard9f6af332018-05-25 14:04:04 +02001439static struct task *server_warmup(struct task *t, void *context, unsigned short state)
Willy Tarreau2e993902011-10-31 11:53:20 +01001440{
Olivier Houchard9f6af332018-05-25 14:04:04 +02001441 struct server *s = context;
Willy Tarreau2e993902011-10-31 11:53:20 +01001442
1443 /* by default, plan on stopping the task */
1444 t->expire = TICK_ETERNITY;
Emeric Brun52a91d32017-08-31 14:41:55 +02001445 if ((s->next_admin & SRV_ADMF_MAINT) ||
1446 (s->next_state != SRV_ST_STARTING))
Willy Tarreau2e993902011-10-31 11:53:20 +01001447 return t;
1448
Willy Tarreau892337c2014-05-13 23:41:20 +02001449 /* recalculate the weights and update the state */
Willy Tarreau004e0452013-11-21 11:22:01 +01001450 server_recalc_eweight(s);
Willy Tarreau2e993902011-10-31 11:53:20 +01001451
1452 /* probably that we can refill this server with a bit more connections */
Willy Tarreau4aac7db2014-05-16 11:48:10 +02001453 pendconn_grab_from_px(s);
Willy Tarreau2e993902011-10-31 11:53:20 +01001454
1455 /* get back there in 1 second or 1/20th of the slowstart interval,
1456 * whichever is greater, resulting in small 5% steps.
1457 */
Emeric Brun52a91d32017-08-31 14:41:55 +02001458 if (s->next_state == SRV_ST_STARTING)
Willy Tarreau2e993902011-10-31 11:53:20 +01001459 t->expire = tick_add(now_ms, MS_TO_TICKS(MAX(1000, s->slowstart / 20)));
1460 return t;
1461}
1462
Willy Tarreau894c6422017-10-04 15:58:52 +02001463/* returns the first NON-COMMENT tcp-check rule from list <list> or NULL if
1464 * none was found.
1465 */
1466static struct tcpcheck_rule *get_first_tcpcheck_rule(struct list *list)
1467{
1468 struct tcpcheck_rule *r;
1469
1470 list_for_each_entry(r, list, list) {
1471 if (r->action != TCPCHK_ACT_COMMENT)
1472 return r;
1473 }
1474 return NULL;
1475}
1476
Willy Tarreau2e993902011-10-31 11:53:20 +01001477/*
Simon Horman98637e52014-06-20 12:30:16 +09001478 * establish a server health-check that makes use of a connection.
Simon Hormanb00d17a2014-06-13 16:18:16 +09001479 *
1480 * It can return one of :
Willy Tarreaue7dff022015-04-03 01:14:29 +02001481 * - SF_ERR_NONE if everything's OK and tcpcheck_main() was not called
1482 * - SF_ERR_UP if if everything's OK and tcpcheck_main() was called
1483 * - SF_ERR_SRVTO if there are no more servers
1484 * - SF_ERR_SRVCL if the connection was refused by the server
1485 * - SF_ERR_PRXCOND if the connection has been limited by the proxy (maxconn)
1486 * - SF_ERR_RESOURCE if a system resource is lacking (eg: fd limits, ports, ...)
1487 * - SF_ERR_INTERNAL for any other purely internal errors
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02001488 * - SF_ERR_CHK_PORT if no port could be found to run a health check on an AF_INET* socket
Tim Düsterhus4896c442016-11-29 02:15:19 +01001489 * Additionally, in the case of SF_ERR_RESOURCE, an emergency log will be emitted.
Simon Hormanb00d17a2014-06-13 16:18:16 +09001490 * Note that we try to prevent the network stack from sending the ACK during the
1491 * connect() when a pure TCP check is used (without PROXY protocol).
1492 */
Simon Horman98637e52014-06-20 12:30:16 +09001493static int connect_conn_chk(struct task *t)
Simon Hormanb00d17a2014-06-13 16:18:16 +09001494{
1495 struct check *check = t->context;
1496 struct server *s = check->server;
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001497 struct conn_stream *cs = check->cs;
1498 struct connection *conn = cs_conn(cs);
Simon Hormanb00d17a2014-06-13 16:18:16 +09001499 struct protocol *proto;
Willy Tarreauf411cce2017-10-04 16:21:19 +02001500 struct tcpcheck_rule *tcp_rule = NULL;
Simon Hormanb00d17a2014-06-13 16:18:16 +09001501 int ret;
Willy Tarreauf3d34822014-12-08 12:11:28 +01001502 int quickack;
Simon Hormanb00d17a2014-06-13 16:18:16 +09001503
Willy Tarreau00149122017-10-04 18:05:01 +02001504 /* we cannot have a connection here */
1505 if (conn)
1506 return SF_ERR_INTERNAL;
1507
Simon Hormanb00d17a2014-06-13 16:18:16 +09001508 /* tcpcheck send/expect initialisation */
Willy Tarreauf411cce2017-10-04 16:21:19 +02001509 if (check->type == PR_O2_TCPCHK_CHK) {
Simon Hormanb00d17a2014-06-13 16:18:16 +09001510 check->current_step = NULL;
Willy Tarreauf411cce2017-10-04 16:21:19 +02001511 tcp_rule = get_first_tcpcheck_rule(check->tcpcheck_rules);
1512 }
Simon Hormanb00d17a2014-06-13 16:18:16 +09001513
1514 /* prepare the check buffer.
1515 * This should not be used if check is the secondary agent check
1516 * of a server as s->proxy->check_req will relate to the
1517 * configuration of the primary check. Similarly, tcp-check uses
1518 * its own strings.
1519 */
1520 if (check->type && check->type != PR_O2_TCPCHK_CHK && !(check->state & CHK_ST_AGENT)) {
1521 bo_putblk(check->bo, s->proxy->check_req, s->proxy->check_len);
1522
1523 /* we want to check if this host replies to HTTP or SSLv3 requests
1524 * so we'll send the request, and won't wake the checker up now.
1525 */
1526 if ((check->type) == PR_O2_SSL3_CHK) {
1527 /* SSL requires that we put Unix time in the request */
1528 int gmt_time = htonl(date.tv_sec);
Willy Tarreau876171e2018-06-18 11:11:07 +02001529 memcpy(b_head(check->bo) + 11, &gmt_time, 4);
Simon Hormanb00d17a2014-06-13 16:18:16 +09001530 }
1531 else if ((check->type) == PR_O2_HTTP_CHK) {
1532 if (s->proxy->options2 & PR_O2_CHK_SNDST)
1533 bo_putblk(check->bo, trash.str, httpchk_build_status_header(s, trash.str, trash.size));
Cyril Bonté32602d22015-01-30 00:07:07 +01001534 /* prevent HTTP keep-alive when "http-check expect" is used */
1535 if (s->proxy->options2 & PR_O2_EXP_TYPE)
1536 bo_putstr(check->bo, "Connection: close\r\n");
Simon Hormanb00d17a2014-06-13 16:18:16 +09001537 bo_putstr(check->bo, "\r\n");
Willy Tarreau876171e2018-06-18 11:11:07 +02001538 *b_tail(check->bo) = '\0'; /* to make gdb output easier to read */
Simon Hormanb00d17a2014-06-13 16:18:16 +09001539 }
1540 }
1541
James Brown55f9ff12015-10-21 18:19:05 -07001542 if ((check->type & PR_O2_LB_AGENT_CHK) && check->send_string_len) {
1543 bo_putblk(check->bo, check->send_string, check->send_string_len);
1544 }
1545
Willy Tarreauf411cce2017-10-04 16:21:19 +02001546 /* for tcp-checks, the initial connection setup is handled separately as
1547 * it may be sent to a specific port and not to the server's.
1548 */
1549 if (tcp_rule && tcp_rule->action == TCPCHK_ACT_CONNECT) {
1550 tcpcheck_main(check);
1551 return SF_ERR_UP;
1552 }
1553
Simon Hormanb00d17a2014-06-13 16:18:16 +09001554 /* prepare a new connection */
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001555 cs = check->cs = cs_new(NULL);
1556 if (!check->cs)
Willy Tarreau00149122017-10-04 18:05:01 +02001557 return SF_ERR_RESOURCE;
Olivier Houchard9aaf7782017-09-13 18:30:23 +02001558 conn = cs->conn;
Simon Hormanb00d17a2014-06-13 16:18:16 +09001559
Simon Horman41f58762015-01-30 11:22:56 +09001560 if (is_addr(&check->addr)) {
Simon Hormanb00d17a2014-06-13 16:18:16 +09001561 /* we'll connect to the check addr specified on the server */
Simon Horman41f58762015-01-30 11:22:56 +09001562 conn->addr.to = check->addr;
Simon Hormanb00d17a2014-06-13 16:18:16 +09001563 }
1564 else {
1565 /* we'll connect to the addr on the server */
1566 conn->addr.to = s->addr;
Simon Hormanb00d17a2014-06-13 16:18:16 +09001567 }
1568
Olivier Houchard6377a002017-12-01 22:04:05 +01001569 proto = protocol_by_family(conn->addr.to.ss_family);
1570
1571 conn_prepare(conn, proto, check->xprt);
1572 conn_install_mux(conn, &mux_pt_ops, cs);
1573 cs_attach(cs, check, &check_conn_cb);
1574 conn->target = &s->obj_type;
1575
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02001576 if ((conn->addr.to.ss_family == AF_INET) || (conn->addr.to.ss_family == AF_INET6)) {
1577 int i = 0;
1578
1579 i = srv_check_healthcheck_port(check);
Olivier Houchard6377a002017-12-01 22:04:05 +01001580 if (i == 0)
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02001581 return SF_ERR_CHK_PORT;
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02001582
1583 set_host_port(&conn->addr.to, i);
Simon Hormanb00d17a2014-06-13 16:18:16 +09001584 }
1585
Thierry FOURNIERbb2ae642015-01-14 11:31:49 +01001586 /* no client address */
1587 clear_addr(&conn->addr.from);
1588
Willy Tarreauf3d34822014-12-08 12:11:28 +01001589 /* only plain tcp-check supports quick ACK */
1590 quickack = check->type == 0 || check->type == PR_O2_TCPCHK_CHK;
1591
Willy Tarreauf411cce2017-10-04 16:21:19 +02001592 if (tcp_rule && tcp_rule->action == TCPCHK_ACT_EXPECT)
1593 quickack = 0;
Simon Hormanb00d17a2014-06-13 16:18:16 +09001594
Willy Tarreaue7dff022015-04-03 01:14:29 +02001595 ret = SF_ERR_INTERNAL;
Olivier Houchardb68fda42017-08-04 18:39:01 +02001596 if (proto && proto->connect)
Willy Tarreauf3d34822014-12-08 12:11:28 +01001597 ret = proto->connect(conn, check->type, quickack ? 2 : 0);
Willy Tarreau16257f62017-11-02 15:45:00 +01001598
1599 if (check->type)
1600 cs_want_send(cs);
1601
Olivier Houchard9130a962017-10-17 17:33:43 +02001602#ifdef USE_OPENSSL
1603 if (s->check.sni)
1604 ssl_sock_set_servername(conn, s->check.sni);
1605#endif
Willy Tarreauf4949772017-05-06 08:45:28 +02001606 if (s->check.send_proxy && !(check->state & CHK_ST_AGENT)) {
Simon Hormanb00d17a2014-06-13 16:18:16 +09001607 conn->send_proxy_ofs = 1;
1608 conn->flags |= CO_FL_SEND_PROXY;
1609 }
1610
1611 return ret;
1612}
1613
Simon Horman98637e52014-06-20 12:30:16 +09001614static struct list pid_list = LIST_HEAD_INIT(pid_list);
Willy Tarreaubafbe012017-11-24 17:34:44 +01001615static struct pool_head *pool_head_pid_list;
Christopher Faulet9dcf9b62017-11-13 10:34:01 +01001616__decl_hathreads(HA_SPINLOCK_T pid_list_lock);
Simon Horman98637e52014-06-20 12:30:16 +09001617
1618void block_sigchld(void)
1619{
1620 sigset_t set;
1621 sigemptyset(&set);
1622 sigaddset(&set, SIGCHLD);
William Lallemand6e1796e2018-06-07 11:23:40 +02001623 assert(ha_sigmask(SIG_BLOCK, &set, NULL) == 0);
Simon Horman98637e52014-06-20 12:30:16 +09001624}
1625
1626void unblock_sigchld(void)
1627{
1628 sigset_t set;
1629 sigemptyset(&set);
Willy Tarreauebc92442016-06-21 17:29:46 +02001630 sigaddset(&set, SIGCHLD);
William Lallemand6e1796e2018-06-07 11:23:40 +02001631 assert(ha_sigmask(SIG_UNBLOCK, &set, NULL) == 0);
Simon Horman98637e52014-06-20 12:30:16 +09001632}
1633
Simon Horman98637e52014-06-20 12:30:16 +09001634static struct pid_list *pid_list_add(pid_t pid, struct task *t)
1635{
1636 struct pid_list *elem;
1637 struct check *check = t->context;
1638
Willy Tarreaubafbe012017-11-24 17:34:44 +01001639 elem = pool_alloc(pool_head_pid_list);
Simon Horman98637e52014-06-20 12:30:16 +09001640 if (!elem)
1641 return NULL;
1642 elem->pid = pid;
1643 elem->t = t;
1644 elem->exited = 0;
1645 check->curpid = elem;
1646 LIST_INIT(&elem->list);
Christopher Fauletcfda8472017-10-20 15:40:23 +02001647
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001648 HA_SPIN_LOCK(PID_LIST_LOCK, &pid_list_lock);
Simon Horman98637e52014-06-20 12:30:16 +09001649 LIST_ADD(&pid_list, &elem->list);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001650 HA_SPIN_UNLOCK(PID_LIST_LOCK, &pid_list_lock);
Christopher Fauletcfda8472017-10-20 15:40:23 +02001651
Simon Horman98637e52014-06-20 12:30:16 +09001652 return elem;
1653}
1654
Simon Horman98637e52014-06-20 12:30:16 +09001655static void pid_list_del(struct pid_list *elem)
1656{
1657 struct check *check;
1658
1659 if (!elem)
1660 return;
1661
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001662 HA_SPIN_LOCK(PID_LIST_LOCK, &pid_list_lock);
Simon Horman98637e52014-06-20 12:30:16 +09001663 LIST_DEL(&elem->list);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001664 HA_SPIN_UNLOCK(PID_LIST_LOCK, &pid_list_lock);
Christopher Fauletcfda8472017-10-20 15:40:23 +02001665
Simon Horman98637e52014-06-20 12:30:16 +09001666 if (!elem->exited)
1667 kill(elem->pid, SIGTERM);
1668
1669 check = elem->t->context;
1670 check->curpid = NULL;
Willy Tarreaubafbe012017-11-24 17:34:44 +01001671 pool_free(pool_head_pid_list, elem);
Simon Horman98637e52014-06-20 12:30:16 +09001672}
1673
1674/* Called from inside SIGCHLD handler, SIGCHLD is blocked */
1675static void pid_list_expire(pid_t pid, int status)
1676{
1677 struct pid_list *elem;
1678
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001679 HA_SPIN_LOCK(PID_LIST_LOCK, &pid_list_lock);
Simon Horman98637e52014-06-20 12:30:16 +09001680 list_for_each_entry(elem, &pid_list, list) {
1681 if (elem->pid == pid) {
1682 elem->t->expire = now_ms;
1683 elem->status = status;
1684 elem->exited = 1;
Cyril Bonté9dbcfab2014-08-07 01:55:39 +02001685 task_wakeup(elem->t, TASK_WOKEN_IO);
Christopher Fauletcfda8472017-10-20 15:40:23 +02001686 break;
Simon Horman98637e52014-06-20 12:30:16 +09001687 }
1688 }
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001689 HA_SPIN_UNLOCK(PID_LIST_LOCK, &pid_list_lock);
Simon Horman98637e52014-06-20 12:30:16 +09001690}
1691
Willy Tarreau48d6bf22016-06-21 16:27:34 +02001692static void sigchld_handler(struct sig_handler *sh)
Simon Horman98637e52014-06-20 12:30:16 +09001693{
1694 pid_t pid;
1695 int status;
Willy Tarreau48d6bf22016-06-21 16:27:34 +02001696
Simon Horman98637e52014-06-20 12:30:16 +09001697 while ((pid = waitpid(0, &status, WNOHANG)) > 0)
1698 pid_list_expire(pid, status);
1699}
1700
Willy Tarreau48d6bf22016-06-21 16:27:34 +02001701static int init_pid_list(void)
1702{
Willy Tarreaubafbe012017-11-24 17:34:44 +01001703 if (pool_head_pid_list != NULL)
Simon Horman98637e52014-06-20 12:30:16 +09001704 /* Nothing to do */
1705 return 0;
1706
Willy Tarreau48d6bf22016-06-21 16:27:34 +02001707 if (!signal_register_fct(SIGCHLD, sigchld_handler, SIGCHLD)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001708 ha_alert("Failed to set signal handler for external health checks: %s. Aborting.\n",
1709 strerror(errno));
Simon Horman98637e52014-06-20 12:30:16 +09001710 return 1;
1711 }
1712
Willy Tarreaubafbe012017-11-24 17:34:44 +01001713 pool_head_pid_list = create_pool("pid_list", sizeof(struct pid_list), MEM_F_SHARED);
1714 if (pool_head_pid_list == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001715 ha_alert("Failed to allocate memory pool for external health checks: %s. Aborting.\n",
1716 strerror(errno));
Simon Horman98637e52014-06-20 12:30:16 +09001717 return 1;
1718 }
1719
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001720 HA_SPIN_INIT(&pid_list_lock);
Christopher Fauletcfda8472017-10-20 15:40:23 +02001721
Simon Horman98637e52014-06-20 12:30:16 +09001722 return 0;
1723}
1724
Cyril Bontéac92a062014-12-27 22:28:38 +01001725/* helper macro to set an environment variable and jump to a specific label on failure. */
1726#define EXTCHK_SETENV(check, envidx, value, fail) { if (extchk_setenv(check, envidx, value)) goto fail; }
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001727
1728/*
Cyril Bontéac92a062014-12-27 22:28:38 +01001729 * helper function to allocate enough memory to store an environment variable.
1730 * It will also check that the environment variable is updatable, and silently
1731 * fail if not.
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001732 */
Cyril Bontéac92a062014-12-27 22:28:38 +01001733static int extchk_setenv(struct check *check, int idx, const char *value)
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001734{
1735 int len, ret;
Cyril Bontéac92a062014-12-27 22:28:38 +01001736 char *envname;
1737 int vmaxlen;
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001738
Cyril Bontéac92a062014-12-27 22:28:38 +01001739 if (idx < 0 || idx >= EXTCHK_SIZE) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001740 ha_alert("Illegal environment variable index %d. Aborting.\n", idx);
Cyril Bontéac92a062014-12-27 22:28:38 +01001741 return 1;
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001742 }
Cyril Bontéac92a062014-12-27 22:28:38 +01001743
1744 envname = extcheck_envs[idx].name;
1745 vmaxlen = extcheck_envs[idx].vmaxlen;
1746
1747 /* Check if the environment variable is already set, and silently reject
1748 * the update if this one is not updatable. */
1749 if ((vmaxlen == EXTCHK_SIZE_EVAL_INIT) && (check->envp[idx]))
1750 return 0;
1751
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001752 /* Instead of sending NOT_USED, sending an empty value is preferable */
1753 if (strcmp(value, "NOT_USED") == 0) {
1754 value = "";
1755 }
Cyril Bontéac92a062014-12-27 22:28:38 +01001756
1757 len = strlen(envname) + 1;
1758 if (vmaxlen == EXTCHK_SIZE_EVAL_INIT)
1759 len += strlen(value);
1760 else
1761 len += vmaxlen;
1762
1763 if (!check->envp[idx])
1764 check->envp[idx] = malloc(len + 1);
1765
1766 if (!check->envp[idx]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001767 ha_alert("Failed to allocate memory for the environment variable '%s'. Aborting.\n", envname);
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001768 return 1;
1769 }
Cyril Bontéac92a062014-12-27 22:28:38 +01001770 ret = snprintf(check->envp[idx], len + 1, "%s=%s", envname, value);
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001771 if (ret < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001772 ha_alert("Failed to store the environment variable '%s'. Reason : %s. Aborting.\n", envname, strerror(errno));
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001773 return 1;
1774 }
Cyril Bontéac92a062014-12-27 22:28:38 +01001775 else if (ret > len) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001776 ha_alert("Environment variable '%s' was truncated. Aborting.\n", envname);
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001777 return 1;
1778 }
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001779 return 0;
1780}
Simon Horman98637e52014-06-20 12:30:16 +09001781
1782static int prepare_external_check(struct check *check)
1783{
1784 struct server *s = check->server;
1785 struct proxy *px = s->proxy;
1786 struct listener *listener = NULL, *l;
1787 int i;
Simon Horman98637e52014-06-20 12:30:16 +09001788 const char *path = px->check_path ? px->check_path : DEF_CHECK_PATH;
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001789 char buf[256];
Simon Horman98637e52014-06-20 12:30:16 +09001790
1791 list_for_each_entry(l, &px->conf.listeners, by_fe)
1792 /* Use the first INET, INET6 or UNIX listener */
1793 if (l->addr.ss_family == AF_INET ||
1794 l->addr.ss_family == AF_INET6 ||
1795 l->addr.ss_family == AF_UNIX) {
1796 listener = l;
1797 break;
1798 }
1799
Simon Horman98637e52014-06-20 12:30:16 +09001800 check->curpid = NULL;
Cyril Bontéac92a062014-12-27 22:28:38 +01001801 check->envp = calloc((EXTCHK_SIZE + 1), sizeof(char *));
1802 if (!check->envp) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001803 ha_alert("Failed to allocate memory for environment variables. Aborting\n");
Cyril Bontéac92a062014-12-27 22:28:38 +01001804 goto err;
1805 }
Simon Horman98637e52014-06-20 12:30:16 +09001806
Cyril Bontéac92a062014-12-27 22:28:38 +01001807 check->argv = calloc(6, sizeof(char *));
1808 if (!check->argv) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001809 ha_alert("Starting [%s:%s] check: out of memory.\n", px->id, s->id);
Simon Horman98637e52014-06-20 12:30:16 +09001810 goto err;
Cyril Bontéac92a062014-12-27 22:28:38 +01001811 }
Simon Horman98637e52014-06-20 12:30:16 +09001812
1813 check->argv[0] = px->check_command;
1814
Cyril Bonté777be862014-12-02 21:21:35 +01001815 if (!listener) {
1816 check->argv[1] = strdup("NOT_USED");
1817 check->argv[2] = strdup("NOT_USED");
1818 }
1819 else if (listener->addr.ss_family == AF_INET ||
Simon Horman98637e52014-06-20 12:30:16 +09001820 listener->addr.ss_family == AF_INET6) {
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001821 addr_to_str(&listener->addr, buf, sizeof(buf));
1822 check->argv[1] = strdup(buf);
1823 port_to_str(&listener->addr, buf, sizeof(buf));
1824 check->argv[2] = strdup(buf);
Cyril Bonté777be862014-12-02 21:21:35 +01001825 }
1826 else if (listener->addr.ss_family == AF_UNIX) {
Simon Horman98637e52014-06-20 12:30:16 +09001827 const struct sockaddr_un *un;
1828
1829 un = (struct sockaddr_un *)&listener->addr;
1830 check->argv[1] = strdup(un->sun_path);
1831 check->argv[2] = strdup("NOT_USED");
Cyril Bonté777be862014-12-02 21:21:35 +01001832 }
1833 else {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001834 ha_alert("Starting [%s:%s] check: unsupported address family.\n", px->id, s->id);
Simon Horman98637e52014-06-20 12:30:16 +09001835 goto err;
1836 }
1837
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001838 addr_to_str(&s->addr, buf, sizeof(buf));
1839 check->argv[3] = strdup(buf);
Willy Tarreau04276f32017-01-06 17:41:29 +01001840
1841 if (s->addr.ss_family == AF_INET || s->addr.ss_family == AF_INET6)
1842 snprintf(buf, sizeof(buf), "%u", s->svc_port);
1843 else
1844 *buf = 0;
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001845 check->argv[4] = strdup(buf);
Simon Horman98637e52014-06-20 12:30:16 +09001846
Cyril Bontéac92a062014-12-27 22:28:38 +01001847 for (i = 0; i < 5; i++) {
1848 if (!check->argv[i]) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001849 ha_alert("Starting [%s:%s] check: out of memory.\n", px->id, s->id);
Simon Horman98637e52014-06-20 12:30:16 +09001850 goto err;
Cyril Bontéac92a062014-12-27 22:28:38 +01001851 }
1852 }
Simon Horman98637e52014-06-20 12:30:16 +09001853
Cyril Bontéac92a062014-12-27 22:28:38 +01001854 EXTCHK_SETENV(check, EXTCHK_PATH, path, err);
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001855 /* Add proxy environment variables */
Cyril Bontéac92a062014-12-27 22:28:38 +01001856 EXTCHK_SETENV(check, EXTCHK_HAPROXY_PROXY_NAME, px->id, err);
1857 EXTCHK_SETENV(check, EXTCHK_HAPROXY_PROXY_ID, ultoa_r(px->uuid, buf, sizeof(buf)), err);
1858 EXTCHK_SETENV(check, EXTCHK_HAPROXY_PROXY_ADDR, check->argv[1], err);
1859 EXTCHK_SETENV(check, EXTCHK_HAPROXY_PROXY_PORT, check->argv[2], err);
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001860 /* Add server environment variables */
Cyril Bontéac92a062014-12-27 22:28:38 +01001861 EXTCHK_SETENV(check, EXTCHK_HAPROXY_SERVER_NAME, s->id, err);
1862 EXTCHK_SETENV(check, EXTCHK_HAPROXY_SERVER_ID, ultoa_r(s->puid, buf, sizeof(buf)), err);
1863 EXTCHK_SETENV(check, EXTCHK_HAPROXY_SERVER_ADDR, check->argv[3], err);
1864 EXTCHK_SETENV(check, EXTCHK_HAPROXY_SERVER_PORT, check->argv[4], err);
1865 EXTCHK_SETENV(check, EXTCHK_HAPROXY_SERVER_MAXCONN, ultoa_r(s->maxconn, buf, sizeof(buf)), err);
1866 EXTCHK_SETENV(check, EXTCHK_HAPROXY_SERVER_CURCONN, ultoa_r(s->cur_sess, buf, sizeof(buf)), err);
1867
1868 /* Ensure that we don't leave any hole in check->envp */
1869 for (i = 0; i < EXTCHK_SIZE; i++)
1870 if (!check->envp[i])
1871 EXTCHK_SETENV(check, i, "", err);
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001872
Cyril Bonté99c5bf52014-08-07 01:55:38 +02001873 return 1;
Simon Horman98637e52014-06-20 12:30:16 +09001874err:
1875 if (check->envp) {
Cyril Bontéac92a062014-12-27 22:28:38 +01001876 for (i = 0; i < EXTCHK_SIZE; i++)
Cyril Bonté9ede66b2014-12-02 21:21:36 +01001877 free(check->envp[i]);
Simon Horman98637e52014-06-20 12:30:16 +09001878 free(check->envp);
1879 check->envp = NULL;
1880 }
1881
1882 if (check->argv) {
1883 for (i = 1; i < 5; i++)
1884 free(check->argv[i]);
1885 free(check->argv);
1886 check->argv = NULL;
1887 }
Cyril Bonté99c5bf52014-08-07 01:55:38 +02001888 return 0;
Simon Horman98637e52014-06-20 12:30:16 +09001889}
1890
Simon Hormanb00d17a2014-06-13 16:18:16 +09001891/*
Simon Horman98637e52014-06-20 12:30:16 +09001892 * establish a server health-check that makes use of a process.
1893 *
1894 * It can return one of :
Willy Tarreaue7dff022015-04-03 01:14:29 +02001895 * - SF_ERR_NONE if everything's OK
Willy Tarreaue7dff022015-04-03 01:14:29 +02001896 * - SF_ERR_RESOURCE if a system resource is lacking (eg: fd limits, ports, ...)
Tim Düsterhus4896c442016-11-29 02:15:19 +01001897 * Additionally, in the case of SF_ERR_RESOURCE, an emergency log will be emitted.
Simon Horman98637e52014-06-20 12:30:16 +09001898 *
1899 * Blocks and then unblocks SIGCHLD
1900 */
1901static int connect_proc_chk(struct task *t)
1902{
Cyril Bontéac92a062014-12-27 22:28:38 +01001903 char buf[256];
Simon Horman98637e52014-06-20 12:30:16 +09001904 struct check *check = t->context;
1905 struct server *s = check->server;
1906 struct proxy *px = s->proxy;
1907 int status;
1908 pid_t pid;
1909
Willy Tarreaue7dff022015-04-03 01:14:29 +02001910 status = SF_ERR_RESOURCE;
Simon Horman98637e52014-06-20 12:30:16 +09001911
1912 block_sigchld();
1913
1914 pid = fork();
1915 if (pid < 0) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01001916 ha_alert("Failed to fork process for external health check: %s. Aborting.\n",
1917 strerror(errno));
Simon Horman98637e52014-06-20 12:30:16 +09001918 set_server_check_status(check, HCHK_STATUS_SOCKERR, strerror(errno));
1919 goto out;
1920 }
1921 if (pid == 0) {
1922 /* Child */
1923 extern char **environ;
Willy Tarreaub7b24782016-06-21 15:32:29 +02001924 int fd;
1925
1926 /* close all FDs. Keep stdin/stdout/stderr in verbose mode */
1927 fd = (global.mode & (MODE_QUIET|MODE_VERBOSE)) == MODE_QUIET ? 0 : 3;
1928
1929 while (fd < global.rlimit_nofile)
1930 close(fd++);
1931
Simon Horman98637e52014-06-20 12:30:16 +09001932 environ = check->envp;
Cyril Bontéac92a062014-12-27 22:28:38 +01001933 extchk_setenv(check, EXTCHK_HAPROXY_SERVER_CURCONN, ultoa_r(s->cur_sess, buf, sizeof(buf)));
Simon Horman98637e52014-06-20 12:30:16 +09001934 execvp(px->check_command, check->argv);
Christopher Faulet767a84b2017-11-24 16:50:31 +01001935 ha_alert("Failed to exec process for external health check: %s. Aborting.\n",
1936 strerror(errno));
Simon Horman98637e52014-06-20 12:30:16 +09001937 exit(-1);
1938 }
1939
1940 /* Parent */
1941 if (check->result == CHK_RES_UNKNOWN) {
1942 if (pid_list_add(pid, t) != NULL) {
1943 t->expire = tick_add(now_ms, MS_TO_TICKS(check->inter));
1944
1945 if (px->timeout.check && px->timeout.connect) {
1946 int t_con = tick_add(now_ms, px->timeout.connect);
1947 t->expire = tick_first(t->expire, t_con);
1948 }
Willy Tarreaue7dff022015-04-03 01:14:29 +02001949 status = SF_ERR_NONE;
Simon Horman98637e52014-06-20 12:30:16 +09001950 goto out;
1951 }
1952 else {
1953 set_server_check_status(check, HCHK_STATUS_SOCKERR, strerror(errno));
1954 }
1955 kill(pid, SIGTERM); /* process creation error */
1956 }
1957 else
1958 set_server_check_status(check, HCHK_STATUS_SOCKERR, strerror(errno));
1959
1960out:
1961 unblock_sigchld();
1962 return status;
1963}
1964
1965/*
Willy Tarreau1e62e2a2017-10-04 15:07:02 +02001966 * manages a server health-check that uses an external process. Returns
Willy Tarreaubaaee002006-06-26 02:48:02 +02001967 * the time the task accepts to wait, or TIME_ETERNITY for infinity.
Willy Tarreau62ac84f2017-11-05 10:11:13 +01001968 *
1969 * Please do NOT place any return statement in this function and only leave
1970 * via the out_unlock label.
Willy Tarreaubaaee002006-06-26 02:48:02 +02001971 */
Olivier Houchard9f6af332018-05-25 14:04:04 +02001972static struct task *process_chk_proc(struct task *t, void *context, unsigned short state)
Simon Horman98637e52014-06-20 12:30:16 +09001973{
Olivier Houchard9f6af332018-05-25 14:04:04 +02001974 struct check *check = context;
Simon Horman98637e52014-06-20 12:30:16 +09001975 struct server *s = check->server;
Simon Horman98637e52014-06-20 12:30:16 +09001976 int rv;
1977 int ret;
1978 int expired = tick_is_expired(t->expire, now_ms);
1979
Christopher Faulet2a944ee2017-11-07 10:42:54 +01001980 HA_SPIN_LOCK(SERVER_LOCK, &check->server->lock);
Simon Horman98637e52014-06-20 12:30:16 +09001981 if (!(check->state & CHK_ST_INPROGRESS)) {
1982 /* no check currently running */
Willy Tarreau62ac84f2017-11-05 10:11:13 +01001983 if (!expired) /* woke up too early */
1984 goto out_unlock;
Simon Horman98637e52014-06-20 12:30:16 +09001985
1986 /* we don't send any health-checks when the proxy is
1987 * stopped, the server should not be checked or the check
1988 * is disabled.
1989 */
1990 if (((check->state & (CHK_ST_ENABLED | CHK_ST_PAUSED)) != CHK_ST_ENABLED) ||
1991 s->proxy->state == PR_STSTOPPED)
1992 goto reschedule;
1993
1994 /* we'll initiate a new check */
1995 set_server_check_status(check, HCHK_STATUS_START, NULL);
1996
1997 check->state |= CHK_ST_INPROGRESS;
1998
Simon Hormandbf70192015-01-30 11:22:53 +09001999 ret = connect_proc_chk(t);
Willy Tarreaud7c3fbd2017-10-04 15:19:26 +02002000 if (ret == SF_ERR_NONE) {
Willy Tarreau1e62e2a2017-10-04 15:07:02 +02002001 /* the process was forked, we allow up to min(inter,
2002 * timeout.connect) for it to report its status, but
2003 * only when timeout.check is set as it may be to short
2004 * for a full check otherwise.
Simon Horman98637e52014-06-20 12:30:16 +09002005 */
2006 t->expire = tick_add(now_ms, MS_TO_TICKS(check->inter));
2007
2008 if (s->proxy->timeout.check && s->proxy->timeout.connect) {
2009 int t_con = tick_add(now_ms, s->proxy->timeout.connect);
2010 t->expire = tick_first(t->expire, t_con);
2011 }
Christopher Faulet88ce5d12017-10-20 15:41:18 +02002012 task_set_affinity(t, tid_bit);
Simon Horman98637e52014-06-20 12:30:16 +09002013 goto reschedule;
Simon Horman98637e52014-06-20 12:30:16 +09002014 }
2015
Willy Tarreau1e62e2a2017-10-04 15:07:02 +02002016 /* here, we failed to start the check */
Simon Horman98637e52014-06-20 12:30:16 +09002017
2018 check->state &= ~CHK_ST_INPROGRESS;
2019 check_notify_failure(check);
2020
2021 /* we allow up to min(inter, timeout.connect) for a connection
2022 * to establish but only when timeout.check is set
2023 * as it may be to short for a full check otherwise
2024 */
2025 while (tick_is_expired(t->expire, now_ms)) {
2026 int t_con;
2027
2028 t_con = tick_add(t->expire, s->proxy->timeout.connect);
2029 t->expire = tick_add(t->expire, MS_TO_TICKS(check->inter));
2030
2031 if (s->proxy->timeout.check)
2032 t->expire = tick_first(t->expire, t_con);
2033 }
2034 }
2035 else {
2036 /* there was a test running.
2037 * First, let's check whether there was an uncaught error,
2038 * which can happen on connect timeout or error.
2039 */
2040 if (check->result == CHK_RES_UNKNOWN) {
2041 /* good connection is enough for pure TCP check */
2042 struct pid_list *elem = check->curpid;
2043 int status = HCHK_STATUS_UNKNOWN;
2044
2045 if (elem->exited) {
2046 status = elem->status; /* Save in case the process exits between use below */
2047 if (!WIFEXITED(status))
2048 check->code = -1;
2049 else
2050 check->code = WEXITSTATUS(status);
2051 if (!WIFEXITED(status) || WEXITSTATUS(status))
2052 status = HCHK_STATUS_PROCERR;
2053 else
2054 status = HCHK_STATUS_PROCOK;
2055 } else if (expired) {
2056 status = HCHK_STATUS_PROCTOUT;
Christopher Faulet767a84b2017-11-24 16:50:31 +01002057 ha_warning("kill %d\n", (int)elem->pid);
Simon Horman98637e52014-06-20 12:30:16 +09002058 kill(elem->pid, SIGTERM);
2059 }
2060 set_server_check_status(check, status, NULL);
2061 }
2062
2063 if (check->result == CHK_RES_FAILED) {
2064 /* a failure or timeout detected */
2065 check_notify_failure(check);
2066 }
2067 else if (check->result == CHK_RES_CONDPASS) {
2068 /* check is OK but asks for stopping mode */
2069 check_notify_stopping(check);
2070 }
2071 else if (check->result == CHK_RES_PASSED) {
2072 /* a success was detected */
2073 check_notify_success(check);
2074 }
Christopher Faulet88ce5d12017-10-20 15:41:18 +02002075 task_set_affinity(t, MAX_THREADS_MASK);
Simon Horman98637e52014-06-20 12:30:16 +09002076 check->state &= ~CHK_ST_INPROGRESS;
2077
2078 pid_list_del(check->curpid);
2079
2080 rv = 0;
2081 if (global.spread_checks > 0) {
2082 rv = srv_getinter(check) * global.spread_checks / 100;
2083 rv -= (int) (2 * rv * (rand() / (RAND_MAX + 1.0)));
2084 }
2085 t->expire = tick_add(now_ms, MS_TO_TICKS(srv_getinter(check) + rv));
2086 }
2087
2088 reschedule:
2089 while (tick_is_expired(t->expire, now_ms))
2090 t->expire = tick_add(t->expire, MS_TO_TICKS(check->inter));
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002091
2092 out_unlock:
Christopher Faulet2a944ee2017-11-07 10:42:54 +01002093 HA_SPIN_UNLOCK(SERVER_LOCK, &check->server->lock);
Simon Horman98637e52014-06-20 12:30:16 +09002094 return t;
2095}
2096
2097/*
2098 * manages a server health-check that uses a connection. Returns
2099 * the time the task accepts to wait, or TIME_ETERNITY for infinity.
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002100 *
2101 * Please do NOT place any return statement in this function and only leave
2102 * via the out_unlock label.
Simon Horman98637e52014-06-20 12:30:16 +09002103 */
Olivier Houchard9f6af332018-05-25 14:04:04 +02002104static struct task *process_chk_conn(struct task *t, void *context, unsigned short state)
Willy Tarreaubaaee002006-06-26 02:48:02 +02002105{
Olivier Houchard9f6af332018-05-25 14:04:04 +02002106 struct check *check = context;
Simon Horman4a741432013-02-23 15:35:38 +09002107 struct server *s = check->server;
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002108 struct conn_stream *cs = check->cs;
2109 struct connection *conn = cs_conn(cs);
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002110 int rv;
Willy Tarreaufb56aab2012-09-28 14:40:02 +02002111 int ret;
Willy Tarreauacbdc7a2012-11-23 14:02:10 +01002112 int expired = tick_is_expired(t->expire, now_ms);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002113
Christopher Faulet2a944ee2017-11-07 10:42:54 +01002114 HA_SPIN_LOCK(SERVER_LOCK, &check->server->lock);
Willy Tarreau2c115e52013-12-11 19:41:16 +01002115 if (!(check->state & CHK_ST_INPROGRESS)) {
Willy Tarreau5a78f362012-11-23 12:47:05 +01002116 /* no check currently running */
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002117 if (!expired) /* woke up too early */
2118 goto out_unlock;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002119
Simon Horman671b6f02013-11-25 10:46:39 +09002120 /* we don't send any health-checks when the proxy is
2121 * stopped, the server should not be checked or the check
2122 * is disabled.
Willy Tarreaubaaee002006-06-26 02:48:02 +02002123 */
Willy Tarreau0d924cc2013-12-11 21:26:24 +01002124 if (((check->state & (CHK_ST_ENABLED | CHK_ST_PAUSED)) != CHK_ST_ENABLED) ||
Willy Tarreau33a08db2013-12-11 21:03:31 +01002125 s->proxy->state == PR_STSTOPPED)
Willy Tarreau5a78f362012-11-23 12:47:05 +01002126 goto reschedule;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002127
2128 /* we'll initiate a new check */
Simon Horman4a741432013-02-23 15:35:38 +09002129 set_server_check_status(check, HCHK_STATUS_START, NULL);
Willy Tarreau1ae1b7b2012-09-28 15:28:30 +02002130
Willy Tarreau2c115e52013-12-11 19:41:16 +01002131 check->state |= CHK_ST_INPROGRESS;
Willy Tarreau876171e2018-06-18 11:11:07 +02002132 b_reset(check->bi);
2133 b_reset(check->bo);
Willy Tarreau1ae1b7b2012-09-28 15:28:30 +02002134
Simon Hormandbf70192015-01-30 11:22:53 +09002135 ret = connect_conn_chk(t);
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002136 cs = check->cs;
2137 conn = cs_conn(cs);
Willy Tarreau00149122017-10-04 18:05:01 +02002138
Willy Tarreaufb56aab2012-09-28 14:40:02 +02002139 switch (ret) {
Willy Tarreaue7dff022015-04-03 01:14:29 +02002140 case SF_ERR_UP:
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002141 goto out_unlock;
2142
Willy Tarreaue7dff022015-04-03 01:14:29 +02002143 case SF_ERR_NONE:
Willy Tarreaufb56aab2012-09-28 14:40:02 +02002144 /* we allow up to min(inter, timeout.connect) for a connection
2145 * to establish but only when timeout.check is set
2146 * as it may be to short for a full check otherwise
2147 */
Simon Horman4a741432013-02-23 15:35:38 +09002148 t->expire = tick_add(now_ms, MS_TO_TICKS(check->inter));
Krzysztof Piotr Oledzki09605412009-09-23 22:09:24 +02002149
Willy Tarreaufb56aab2012-09-28 14:40:02 +02002150 if (s->proxy->timeout.check && s->proxy->timeout.connect) {
2151 int t_con = tick_add(now_ms, s->proxy->timeout.connect);
2152 t->expire = tick_first(t->expire, t_con);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002153 }
Willy Tarreau06559ac2013-12-05 01:53:08 +01002154
2155 if (check->type)
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002156 cs_want_recv(cs); /* prepare for reading a possible reply */
Willy Tarreau06559ac2013-12-05 01:53:08 +01002157
Christopher Faulet88ce5d12017-10-20 15:41:18 +02002158 task_set_affinity(t, tid_bit);
Willy Tarreau5a78f362012-11-23 12:47:05 +01002159 goto reschedule;
2160
Willy Tarreaue7dff022015-04-03 01:14:29 +02002161 case SF_ERR_SRVTO: /* ETIMEDOUT */
2162 case SF_ERR_SRVCL: /* ECONNREFUSED, ENETUNREACH, ... */
Willy Tarreau00149122017-10-04 18:05:01 +02002163 if (conn)
2164 conn->flags |= CO_FL_ERROR;
Willy Tarreaub5259bf2017-10-04 14:47:29 +02002165 chk_report_conn_err(check, errno, 0);
Willy Tarreau5a78f362012-11-23 12:47:05 +01002166 break;
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02002167 /* should share same code than cases below */
2168 case SF_ERR_CHK_PORT:
2169 check->state |= CHK_ST_PORT_MISS;
Willy Tarreaue7dff022015-04-03 01:14:29 +02002170 case SF_ERR_PRXCOND:
2171 case SF_ERR_RESOURCE:
2172 case SF_ERR_INTERNAL:
Willy Tarreau00149122017-10-04 18:05:01 +02002173 if (conn)
2174 conn->flags |= CO_FL_ERROR;
2175 chk_report_conn_err(check, conn ? 0 : ENOMEM, 0);
Willy Tarreau5a78f362012-11-23 12:47:05 +01002176 break;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002177 }
2178
Willy Tarreau5a78f362012-11-23 12:47:05 +01002179 /* here, we have seen a synchronous error, no fd was allocated */
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002180 if (cs) {
2181 cs_destroy(cs);
2182 cs = check->cs = NULL;
2183 conn = NULL;
Olivier Houchard390485a2017-10-24 19:03:30 +02002184 }
Willy Tarreau6b0a8502012-11-23 08:51:32 +01002185
Willy Tarreau2c115e52013-12-11 19:41:16 +01002186 check->state &= ~CHK_ST_INPROGRESS;
Willy Tarreau4eec5472014-05-20 22:32:27 +02002187 check_notify_failure(check);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002188
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +01002189 /* we allow up to min(inter, timeout.connect) for a connection
2190 * to establish but only when timeout.check is set
2191 * as it may be to short for a full check otherwise
2192 */
Willy Tarreau0c303ee2008-07-07 00:09:58 +02002193 while (tick_is_expired(t->expire, now_ms)) {
2194 int t_con;
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +01002195
Willy Tarreau0c303ee2008-07-07 00:09:58 +02002196 t_con = tick_add(t->expire, s->proxy->timeout.connect);
Simon Horman4a741432013-02-23 15:35:38 +09002197 t->expire = tick_add(t->expire, MS_TO_TICKS(check->inter));
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +01002198
Willy Tarreau0c303ee2008-07-07 00:09:58 +02002199 if (s->proxy->timeout.check)
2200 t->expire = tick_first(t->expire, t_con);
Krzysztof Piotr Oledzki5259dfe2008-01-21 01:54:06 +01002201 }
Willy Tarreaubaaee002006-06-26 02:48:02 +02002202 }
2203 else {
Willy Tarreauf1503172012-09-28 19:39:36 +02002204 /* there was a test running.
2205 * First, let's check whether there was an uncaught error,
2206 * which can happen on connect timeout or error.
2207 */
Simon Hormanccaabcd2014-06-20 12:29:47 +09002208 if (check->result == CHK_RES_UNKNOWN) {
Willy Tarreau25e2ab52013-12-04 11:17:05 +01002209 /* good connection is enough for pure TCP check */
2210 if ((conn->flags & CO_FL_CONNECTED) && !check->type) {
Simon Horman4a741432013-02-23 15:35:38 +09002211 if (check->use_ssl)
2212 set_server_check_status(check, HCHK_STATUS_L6OK, NULL);
Willy Tarreauf1503172012-09-28 19:39:36 +02002213 else
Simon Horman4a741432013-02-23 15:35:38 +09002214 set_server_check_status(check, HCHK_STATUS_L4OK, NULL);
Willy Tarreauacbdc7a2012-11-23 14:02:10 +01002215 }
Willy Tarreau4ff3b892017-10-16 15:17:17 +02002216 else if ((conn->flags & CO_FL_ERROR) || cs->flags & CS_FL_ERROR || expired) {
Willy Tarreaub5259bf2017-10-04 14:47:29 +02002217 chk_report_conn_err(check, 0, expired);
Willy Tarreauf1503172012-09-28 19:39:36 +02002218 }
Willy Tarreau74fa7fb2012-11-23 14:43:49 +01002219 else
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002220 goto out_unlock; /* timeout not reached, wait again */
Willy Tarreauf1503172012-09-28 19:39:36 +02002221 }
2222
Willy Tarreau74fa7fb2012-11-23 14:43:49 +01002223 /* check complete or aborted */
Willy Tarreau00149122017-10-04 18:05:01 +02002224 if (conn && conn->xprt) {
Willy Tarreau5ba04f62013-02-12 15:23:12 +01002225 /* The check was aborted and the connection was not yet closed.
2226 * This can happen upon timeout, or when an external event such
2227 * as a failed response coupled with "observe layer7" caused the
2228 * server state to be suddenly changed.
2229 */
Willy Tarreaud85c4852015-03-13 00:40:28 +01002230 conn_sock_drain(conn);
Willy Tarreaua553ae92017-10-05 18:52:17 +02002231 cs_close(cs);
Willy Tarreau5ba04f62013-02-12 15:23:12 +01002232 }
2233
Willy Tarreauac59f362017-10-08 11:10:19 +02002234 if (cs) {
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002235 cs_destroy(cs);
2236 cs = check->cs = NULL;
2237 conn = NULL;
Willy Tarreau00149122017-10-04 18:05:01 +02002238 }
2239
Willy Tarreauaf549582014-05-16 17:37:50 +02002240 if (check->result == CHK_RES_FAILED) {
2241 /* a failure or timeout detected */
Willy Tarreau4eec5472014-05-20 22:32:27 +02002242 check_notify_failure(check);
Willy Tarreauaf549582014-05-16 17:37:50 +02002243 }
Willy Tarreaudb58b792014-05-21 13:57:23 +02002244 else if (check->result == CHK_RES_CONDPASS) {
2245 /* check is OK but asks for stopping mode */
2246 check_notify_stopping(check);
Willy Tarreauaf549582014-05-16 17:37:50 +02002247 }
Willy Tarreau3e048382014-05-21 10:30:54 +02002248 else if (check->result == CHK_RES_PASSED) {
2249 /* a success was detected */
2250 check_notify_success(check);
Willy Tarreaubaaee002006-06-26 02:48:02 +02002251 }
Christopher Faulet88ce5d12017-10-20 15:41:18 +02002252 task_set_affinity(t, MAX_THREADS_MASK);
Willy Tarreau2c115e52013-12-11 19:41:16 +01002253 check->state &= ~CHK_ST_INPROGRESS;
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002254
Willy Tarreau74fa7fb2012-11-23 14:43:49 +01002255 rv = 0;
2256 if (global.spread_checks > 0) {
Simon Horman4a741432013-02-23 15:35:38 +09002257 rv = srv_getinter(check) * global.spread_checks / 100;
Willy Tarreau74fa7fb2012-11-23 14:43:49 +01002258 rv -= (int) (2 * rv * (rand() / (RAND_MAX + 1.0)));
Willy Tarreaubaaee002006-06-26 02:48:02 +02002259 }
Simon Horman4a741432013-02-23 15:35:38 +09002260 t->expire = tick_add(now_ms, MS_TO_TICKS(srv_getinter(check) + rv));
Willy Tarreaubaaee002006-06-26 02:48:02 +02002261 }
Willy Tarreau5a78f362012-11-23 12:47:05 +01002262
2263 reschedule:
2264 while (tick_is_expired(t->expire, now_ms))
Simon Horman4a741432013-02-23 15:35:38 +09002265 t->expire = tick_add(t->expire, MS_TO_TICKS(check->inter));
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002266 out_unlock:
Christopher Faulet2a944ee2017-11-07 10:42:54 +01002267 HA_SPIN_UNLOCK(SERVER_LOCK, &check->server->lock);
Willy Tarreau26c25062009-03-08 09:38:41 +01002268 return t;
Willy Tarreaubaaee002006-06-26 02:48:02 +02002269}
2270
Simon Horman98637e52014-06-20 12:30:16 +09002271/*
2272 * manages a server health-check. Returns
2273 * the time the task accepts to wait, or TIME_ETERNITY for infinity.
2274 */
Olivier Houchard9f6af332018-05-25 14:04:04 +02002275static struct task *process_chk(struct task *t, void *context, unsigned short state)
Simon Horman98637e52014-06-20 12:30:16 +09002276{
Olivier Houchard9f6af332018-05-25 14:04:04 +02002277 struct check *check = context;
Simon Horman98637e52014-06-20 12:30:16 +09002278
2279 if (check->type == PR_O2_EXT_CHK)
Olivier Houchard9f6af332018-05-25 14:04:04 +02002280 return process_chk_proc(t, context, state);
2281 return process_chk_conn(t, context, state);
Baptiste Assmanna68ca962015-04-14 01:15:08 +02002282
Simon Horman98637e52014-06-20 12:30:16 +09002283}
2284
Simon Horman5c942422013-11-25 10:46:32 +09002285static int start_check_task(struct check *check, int mininter,
2286 int nbcheck, int srvpos)
2287{
2288 struct task *t;
2289 /* task for the check */
Emeric Brunc60def82017-09-27 14:59:38 +02002290 if ((t = task_new(MAX_THREADS_MASK)) == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002291 ha_alert("Starting [%s:%s] check: out of memory.\n",
2292 check->server->proxy->id, check->server->id);
Simon Horman5c942422013-11-25 10:46:32 +09002293 return 0;
2294 }
2295
2296 check->task = t;
2297 t->process = process_chk;
2298 t->context = check;
2299
Willy Tarreau1746eec2014-04-25 10:46:47 +02002300 if (mininter < srv_getinter(check))
2301 mininter = srv_getinter(check);
2302
2303 if (global.max_spread_checks && mininter > global.max_spread_checks)
2304 mininter = global.max_spread_checks;
2305
Simon Horman5c942422013-11-25 10:46:32 +09002306 /* check this every ms */
Willy Tarreau1746eec2014-04-25 10:46:47 +02002307 t->expire = tick_add(now_ms, MS_TO_TICKS(mininter * srvpos / nbcheck));
Simon Horman5c942422013-11-25 10:46:32 +09002308 check->start = now;
2309 task_queue(t);
2310
2311 return 1;
2312}
2313
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002314/*
2315 * Start health-check.
Willy Tarreau865c5142016-12-21 20:04:48 +01002316 * Returns 0 if OK, ERR_FATAL on error, and prints the error in this case.
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002317 */
Willy Tarreau865c5142016-12-21 20:04:48 +01002318static int start_checks()
2319{
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002320
2321 struct proxy *px;
2322 struct server *s;
2323 struct task *t;
Simon Horman4a741432013-02-23 15:35:38 +09002324 int nbcheck=0, mininter=0, srvpos=0;
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002325
Willy Tarreau2c43a1e2007-10-14 23:05:39 +02002326 /* 1- count the checkers to run simultaneously.
2327 * We also determine the minimum interval among all of those which
2328 * have an interval larger than SRV_CHK_INTER_THRES. This interval
2329 * will be used to spread their start-up date. Those which have
Jamie Gloudon801a0a32012-08-25 00:18:33 -04002330 * a shorter interval will start independently and will not dictate
Willy Tarreau2c43a1e2007-10-14 23:05:39 +02002331 * too short an interval for all others.
2332 */
Olivier Houchardfbc74e82017-11-24 16:54:05 +01002333 for (px = proxies_list; px; px = px->next) {
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002334 for (s = px->srv; s; s = s->next) {
Willy Tarreaue7b73482013-11-21 11:50:50 +01002335 if (s->slowstart) {
Emeric Brunc60def82017-09-27 14:59:38 +02002336 if ((t = task_new(MAX_THREADS_MASK)) == NULL) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002337 ha_alert("Starting [%s:%s] check: out of memory.\n", px->id, s->id);
Willy Tarreau865c5142016-12-21 20:04:48 +01002338 return ERR_ALERT | ERR_FATAL;
Willy Tarreaue7b73482013-11-21 11:50:50 +01002339 }
2340 /* We need a warmup task that will be called when the server
2341 * state switches from down to up.
2342 */
2343 s->warmup = t;
2344 t->process = server_warmup;
2345 t->context = s;
Baptiste Assmann6076d1c2015-09-17 22:53:59 +02002346 /* server can be in this state only because of */
Emeric Brun52a91d32017-08-31 14:41:55 +02002347 if (s->next_state == SRV_ST_STARTING)
Baptiste Assmann6076d1c2015-09-17 22:53:59 +02002348 task_schedule(s->warmup, tick_add(now_ms, MS_TO_TICKS(MAX(1000, (now.tv_sec - s->last_change)) / 20)));
Willy Tarreaue7b73482013-11-21 11:50:50 +01002349 }
2350
Willy Tarreaud8514a22013-12-11 21:10:14 +01002351 if (s->check.state & CHK_ST_CONFIGURED) {
2352 nbcheck++;
2353 if ((srv_getinter(&s->check) >= SRV_CHK_INTER_THRES) &&
2354 (!mininter || mininter > srv_getinter(&s->check)))
2355 mininter = srv_getinter(&s->check);
2356 }
Willy Tarreau15f39102013-12-11 20:41:18 +01002357
Willy Tarreaud8514a22013-12-11 21:10:14 +01002358 if (s->agent.state & CHK_ST_CONFIGURED) {
2359 nbcheck++;
2360 if ((srv_getinter(&s->agent) >= SRV_CHK_INTER_THRES) &&
2361 (!mininter || mininter > srv_getinter(&s->agent)))
2362 mininter = srv_getinter(&s->agent);
2363 }
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002364 }
2365 }
2366
Simon Horman4a741432013-02-23 15:35:38 +09002367 if (!nbcheck)
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002368 return 0;
2369
2370 srand((unsigned)time(NULL));
2371
2372 /*
2373 * 2- start them as far as possible from each others. For this, we will
2374 * start them after their interval set to the min interval divided by
2375 * the number of servers, weighted by the server's position in the list.
2376 */
Olivier Houchardfbc74e82017-11-24 16:54:05 +01002377 for (px = proxies_list; px; px = px->next) {
Simon Horman98637e52014-06-20 12:30:16 +09002378 if ((px->options2 & PR_O2_CHK_ANY) == PR_O2_EXT_CHK) {
2379 if (init_pid_list()) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01002380 ha_alert("Starting [%s] check: out of memory.\n", px->id);
Willy Tarreau865c5142016-12-21 20:04:48 +01002381 return ERR_ALERT | ERR_FATAL;
Simon Horman98637e52014-06-20 12:30:16 +09002382 }
2383 }
2384
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002385 for (s = px->srv; s; s = s->next) {
Simon Hormand60d6912013-11-25 10:46:36 +09002386 /* A task for the main check */
Willy Tarreauff5ae352013-12-11 20:36:34 +01002387 if (s->check.state & CHK_ST_CONFIGURED) {
Cyril Bonté99c5bf52014-08-07 01:55:38 +02002388 if (s->check.type == PR_O2_EXT_CHK) {
2389 if (!prepare_external_check(&s->check))
Willy Tarreau865c5142016-12-21 20:04:48 +01002390 return ERR_ALERT | ERR_FATAL;
Cyril Bonté99c5bf52014-08-07 01:55:38 +02002391 }
Simon Hormand60d6912013-11-25 10:46:36 +09002392 if (!start_check_task(&s->check, mininter, nbcheck, srvpos))
Willy Tarreau865c5142016-12-21 20:04:48 +01002393 return ERR_ALERT | ERR_FATAL;
Simon Hormand60d6912013-11-25 10:46:36 +09002394 srvpos++;
2395 }
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002396
Simon Hormand60d6912013-11-25 10:46:36 +09002397 /* A task for a auxiliary agent check */
Willy Tarreauff5ae352013-12-11 20:36:34 +01002398 if (s->agent.state & CHK_ST_CONFIGURED) {
Simon Hormand60d6912013-11-25 10:46:36 +09002399 if (!start_check_task(&s->agent, mininter, nbcheck, srvpos)) {
Willy Tarreau865c5142016-12-21 20:04:48 +01002400 return ERR_ALERT | ERR_FATAL;
Simon Hormand60d6912013-11-25 10:46:36 +09002401 }
2402 srvpos++;
2403 }
Krzysztof Oledzkib304dc72007-10-14 23:40:01 +02002404 }
2405 }
2406 return 0;
2407}
Willy Tarreaubaaee002006-06-26 02:48:02 +02002408
2409/*
Willy Tarreau5b3a2022012-09-28 15:01:02 +02002410 * Perform content verification check on data in s->check.buffer buffer.
Willy Tarreaubd741542010-03-16 18:46:54 +01002411 * The buffer MUST be terminated by a null byte before calling this function.
2412 * Sets server status appropriately. The caller is responsible for ensuring
2413 * that the buffer contains at least 13 characters. If <done> is zero, we may
2414 * return 0 to indicate that data is required to decide of a match.
2415 */
2416static int httpchk_expect(struct server *s, int done)
2417{
Christopher Faulet1bc04c72017-10-29 20:14:08 +01002418 static THREAD_LOCAL char status_msg[] = "HTTP status check returned code <000>";
Willy Tarreaubd741542010-03-16 18:46:54 +01002419 char status_code[] = "000";
2420 char *contentptr;
2421 int crlf;
2422 int ret;
2423
2424 switch (s->proxy->options2 & PR_O2_EXP_TYPE) {
2425 case PR_O2_EXP_STS:
2426 case PR_O2_EXP_RSTS:
Willy Tarreau876171e2018-06-18 11:11:07 +02002427 memcpy(status_code, b_head(s->check.bi) + 9, 3);
2428 memcpy(status_msg + strlen(status_msg) - 4, b_head(s->check.bi) + 9, 3);
Willy Tarreaubd741542010-03-16 18:46:54 +01002429
2430 if ((s->proxy->options2 & PR_O2_EXP_TYPE) == PR_O2_EXP_STS)
2431 ret = strncmp(s->proxy->expect_str, status_code, 3) == 0;
2432 else
Thierry FOURNIER09af0d62014-06-18 11:35:54 +02002433 ret = regex_exec(s->proxy->expect_regex, status_code);
Willy Tarreaubd741542010-03-16 18:46:54 +01002434
2435 /* we necessarily have the response, so there are no partial failures */
2436 if (s->proxy->options2 & PR_O2_EXP_INV)
2437 ret = !ret;
2438
Simon Horman4a741432013-02-23 15:35:38 +09002439 set_server_check_status(&s->check, ret ? HCHK_STATUS_L7OKD : HCHK_STATUS_L7STS, status_msg);
Willy Tarreaubd741542010-03-16 18:46:54 +01002440 break;
2441
2442 case PR_O2_EXP_STR:
2443 case PR_O2_EXP_RSTR:
2444 /* very simple response parser: ignore CR and only count consecutive LFs,
2445 * stop with contentptr pointing to first char after the double CRLF or
2446 * to '\0' if crlf < 2.
2447 */
2448 crlf = 0;
Willy Tarreau876171e2018-06-18 11:11:07 +02002449 for (contentptr = b_head(s->check.bi); *contentptr; contentptr++) {
Willy Tarreaubd741542010-03-16 18:46:54 +01002450 if (crlf >= 2)
2451 break;
2452 if (*contentptr == '\r')
2453 continue;
2454 else if (*contentptr == '\n')
2455 crlf++;
2456 else
2457 crlf = 0;
2458 }
2459
2460 /* Check that response contains a body... */
2461 if (crlf < 2) {
2462 if (!done)
2463 return 0;
2464
Simon Horman4a741432013-02-23 15:35:38 +09002465 set_server_check_status(&s->check, HCHK_STATUS_L7RSP,
Willy Tarreaubd741542010-03-16 18:46:54 +01002466 "HTTP content check could not find a response body");
2467 return 1;
2468 }
2469
2470 /* Check that response body is not empty... */
2471 if (*contentptr == '\0') {
Willy Tarreaua164fb52011-04-13 09:32:41 +02002472 if (!done)
2473 return 0;
2474
Simon Horman4a741432013-02-23 15:35:38 +09002475 set_server_check_status(&s->check, HCHK_STATUS_L7RSP,
Willy Tarreaubd741542010-03-16 18:46:54 +01002476 "HTTP content check found empty response body");
2477 return 1;
2478 }
2479
2480 /* Check the response content against the supplied string
2481 * or regex... */
2482 if ((s->proxy->options2 & PR_O2_EXP_TYPE) == PR_O2_EXP_STR)
2483 ret = strstr(contentptr, s->proxy->expect_str) != NULL;
2484 else
Thierry FOURNIER09af0d62014-06-18 11:35:54 +02002485 ret = regex_exec(s->proxy->expect_regex, contentptr);
Willy Tarreaubd741542010-03-16 18:46:54 +01002486
2487 /* if we don't match, we may need to wait more */
2488 if (!ret && !done)
2489 return 0;
2490
2491 if (ret) {
2492 /* content matched */
2493 if (s->proxy->options2 & PR_O2_EXP_INV)
Simon Horman4a741432013-02-23 15:35:38 +09002494 set_server_check_status(&s->check, HCHK_STATUS_L7RSP,
Willy Tarreaubd741542010-03-16 18:46:54 +01002495 "HTTP check matched unwanted content");
2496 else
Simon Horman4a741432013-02-23 15:35:38 +09002497 set_server_check_status(&s->check, HCHK_STATUS_L7OKD,
Willy Tarreaubd741542010-03-16 18:46:54 +01002498 "HTTP content check matched");
2499 }
2500 else {
2501 if (s->proxy->options2 & PR_O2_EXP_INV)
Simon Horman4a741432013-02-23 15:35:38 +09002502 set_server_check_status(&s->check, HCHK_STATUS_L7OKD,
Willy Tarreaubd741542010-03-16 18:46:54 +01002503 "HTTP check did not match unwanted content");
2504 else
Simon Horman4a741432013-02-23 15:35:38 +09002505 set_server_check_status(&s->check, HCHK_STATUS_L7RSP,
Willy Tarreaubd741542010-03-16 18:46:54 +01002506 "HTTP content check did not match");
2507 }
2508 break;
2509 }
2510 return 1;
2511}
2512
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002513/*
2514 * return the id of a step in a send/expect session
2515 */
Simon Hormane16c1b32015-01-30 11:22:57 +09002516static int tcpcheck_get_step_id(struct check *check)
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002517{
2518 struct tcpcheck_rule *cur = NULL, *next = NULL;
2519 int i = 0;
2520
Willy Tarreau213c6782014-10-02 14:51:02 +02002521 /* not even started anything yet => step 0 = initial connect */
Baptiste Assmannf95bc8e2015-04-25 16:03:06 +02002522 if (!check->current_step)
Willy Tarreau213c6782014-10-02 14:51:02 +02002523 return 0;
2524
Simon Hormane16c1b32015-01-30 11:22:57 +09002525 cur = check->last_started_step;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002526
2527 /* no step => first step */
2528 if (cur == NULL)
2529 return 1;
2530
2531 /* increment i until current step */
Simon Hormane16c1b32015-01-30 11:22:57 +09002532 list_for_each_entry(next, check->tcpcheck_rules, list) {
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002533 if (next->list.p == &cur->list)
2534 break;
2535 ++i;
2536 }
2537
2538 return i;
2539}
2540
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002541/*
2542 * return the latest known comment before (including) the given stepid
2543 * returns NULL if no comment found
2544 */
2545static char * tcpcheck_get_step_comment(struct check *check, int stepid)
2546{
2547 struct tcpcheck_rule *cur = NULL;
2548 char *ret = NULL;
2549 int i = 0;
2550
2551 /* not even started anything yet, return latest comment found before any action */
2552 if (!check->current_step) {
2553 list_for_each_entry(cur, check->tcpcheck_rules, list) {
2554 if (cur->action == TCPCHK_ACT_COMMENT)
2555 ret = cur->comment;
2556 else
2557 goto return_comment;
2558 }
2559 }
2560
2561 i = 1;
2562 list_for_each_entry(cur, check->tcpcheck_rules, list) {
2563 if (cur->comment)
2564 ret = cur->comment;
2565
2566 if (i >= stepid)
2567 goto return_comment;
2568
2569 ++i;
2570 }
2571
2572 return_comment:
2573 return ret;
2574}
2575
Willy Tarreaube74b882017-10-04 16:22:49 +02002576/* proceed with next steps for the TCP checks <check>. Note that this is called
2577 * both from the connection's wake() callback and from the check scheduling task.
Willy Tarreau6bdcab02017-10-04 18:41:00 +02002578 * It returns 0 on normal cases, or <0 if a close() has happened on an existing
2579 * connection, presenting the risk of an fd replacement.
Willy Tarreau62ac84f2017-11-05 10:11:13 +01002580 *
2581 * Please do NOT place any return statement in this function and only leave
2582 * via the out_unlock label after setting retcode.
Willy Tarreaube74b882017-10-04 16:22:49 +02002583 */
Willy Tarreau6bdcab02017-10-04 18:41:00 +02002584static int tcpcheck_main(struct check *check)
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002585{
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002586 char *contentptr, *comment;
Willy Tarreauce8c42a2015-05-13 11:23:01 +02002587 struct tcpcheck_rule *next;
Baptiste Assmanncfbd1b82015-05-02 09:00:23 +02002588 int done = 0, ret = 0, step = 0;
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002589 struct conn_stream *cs = check->cs;
2590 struct connection *conn = cs_conn(cs);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002591 struct server *s = check->server;
2592 struct task *t = check->task;
Simon Hormane16c1b32015-01-30 11:22:57 +09002593 struct list *head = check->tcpcheck_rules;
Willy Tarreau6bdcab02017-10-04 18:41:00 +02002594 int retcode = 0;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002595
Willy Tarreauef953952014-10-02 14:30:14 +02002596 /* here, we know that the check is complete or that it failed */
2597 if (check->result != CHK_RES_UNKNOWN)
2598 goto out_end_tcpcheck;
2599
2600 /* We have 4 possibilities here :
2601 * 1. we've not yet attempted step 1, and step 1 is a connect, so no
Willy Tarreau00149122017-10-04 18:05:01 +02002602 * connection attempt was made yet ; conn==NULL;current_step==NULL.
Willy Tarreauef953952014-10-02 14:30:14 +02002603 * 2. we've not yet attempted step 1, and step 1 is a not connect or
2604 * does not exist (no rule), so a connection attempt was made
Willy Tarreau00149122017-10-04 18:05:01 +02002605 * before coming here, conn!=NULL.
Willy Tarreauef953952014-10-02 14:30:14 +02002606 * 3. we're coming back after having started with step 1, so we may
Willy Tarreau00149122017-10-04 18:05:01 +02002607 * be waiting for a connection attempt to complete. conn!=NULL.
2608 * 4. the connection + handshake are complete. conn!=NULL.
Willy Tarreauef953952014-10-02 14:30:14 +02002609 *
2610 * #2 and #3 are quite similar, we want both the connection and the
2611 * handshake to complete before going any further. Thus we must always
2612 * wait for a connection to complete unless we're before and existing
2613 * step 1.
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002614 */
Willy Tarreau449f9522015-05-13 15:39:48 +02002615
2616 /* find first rule and skip comments */
2617 next = LIST_NEXT(head, struct tcpcheck_rule *, list);
2618 while (&next->list != head && next->action == TCPCHK_ACT_COMMENT)
2619 next = LIST_NEXT(&next->list, struct tcpcheck_rule *, list);
2620
Willy Tarreau00149122017-10-04 18:05:01 +02002621 if ((check->current_step || &next->list == head) &&
2622 (!(conn->flags & CO_FL_CONNECTED) || (conn->flags & CO_FL_HANDSHAKE))) {
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002623 /* we allow up to min(inter, timeout.connect) for a connection
2624 * to establish but only when timeout.check is set
2625 * as it may be to short for a full check otherwise
2626 */
2627 while (tick_is_expired(t->expire, now_ms)) {
2628 int t_con;
2629
2630 t_con = tick_add(t->expire, s->proxy->timeout.connect);
2631 t->expire = tick_add(t->expire, MS_TO_TICKS(check->inter));
2632
2633 if (s->proxy->timeout.check)
2634 t->expire = tick_first(t->expire, t_con);
2635 }
Christopher Fauletb6102852017-11-28 10:06:29 +01002636 goto out;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002637 }
2638
Willy Tarreauef953952014-10-02 14:30:14 +02002639 /* special case: option tcp-check with no rule, a connect is enough */
Willy Tarreau449f9522015-05-13 15:39:48 +02002640 if (&next->list == head) {
Willy Tarreauef953952014-10-02 14:30:14 +02002641 set_server_check_status(check, HCHK_STATUS_L4OK, NULL);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002642 goto out_end_tcpcheck;
Willy Tarreauef953952014-10-02 14:30:14 +02002643 }
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002644
Willy Tarreau213c6782014-10-02 14:51:02 +02002645 /* no step means first step initialisation */
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002646 if (check->current_step == NULL) {
Willy Tarreau213c6782014-10-02 14:51:02 +02002647 check->last_started_step = NULL;
Willy Tarreau876171e2018-06-18 11:11:07 +02002648 b_reset(check->bo);
2649 b_reset(check->bi);
Willy Tarreau449f9522015-05-13 15:39:48 +02002650 check->current_step = next;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002651 t->expire = tick_add(now_ms, MS_TO_TICKS(check->inter));
2652 if (s->proxy->timeout.check)
2653 t->expire = tick_add_ifset(now_ms, s->proxy->timeout.check);
2654 }
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002655
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002656 /* It's only the rules which will enable send/recv */
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002657 if (cs)
2658 cs_stop_both(cs);
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002659
Willy Tarreauabca5b62013-12-06 14:19:25 +01002660 while (1) {
Willy Tarreau263013d2015-05-13 11:59:14 +02002661 /* We have to try to flush the output buffer before reading, at
2662 * the end, or if we're about to send a string that does not fit
2663 * in the remaining space. That explains why we break out of the
Willy Tarreau00149122017-10-04 18:05:01 +02002664 * loop after this control. If we have data, conn is valid.
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002665 */
Willy Tarreau876171e2018-06-18 11:11:07 +02002666 if (b_data(check->bo) &&
Willy Tarreauce8c42a2015-05-13 11:23:01 +02002667 (&check->current_step->list == head ||
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002668 check->current_step->action != TCPCHK_ACT_SEND ||
Willy Tarreaueac52592018-06-15 13:59:36 +02002669 check->current_step->string_len >= b_room(check->bo))) {
Willy Tarreaudeccd112018-06-14 18:38:55 +02002670 int ret;
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002671
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002672 __cs_want_send(cs);
Willy Tarreau876171e2018-06-18 11:11:07 +02002673 ret = conn->mux->snd_buf(cs, check->bo, b_data(check->bo), 0);
Willy Tarreaudeccd112018-06-14 18:38:55 +02002674 b_del(check->bo, ret);
2675 b_realign_if_empty(check->bo);
2676
2677 if (ret <= 0) {
Willy Tarreau4ff3b892017-10-16 15:17:17 +02002678 if (conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR) {
Willy Tarreaub5259bf2017-10-04 14:47:29 +02002679 chk_report_conn_err(check, errno, 0);
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002680 __cs_stop_both(cs);
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002681 goto out_end_tcpcheck;
2682 }
Willy Tarreau263013d2015-05-13 11:59:14 +02002683 break;
Willy Tarreauabca5b62013-12-06 14:19:25 +01002684 }
Willy Tarreauabca5b62013-12-06 14:19:25 +01002685 }
2686
Willy Tarreau263013d2015-05-13 11:59:14 +02002687 if (&check->current_step->list == head)
Willy Tarreauabca5b62013-12-06 14:19:25 +01002688 break;
2689
Willy Tarreauce8c42a2015-05-13 11:23:01 +02002690 /* have 'next' point to the next rule or NULL if we're on the
2691 * last one, connect() needs this.
2692 */
Willy Tarreau5581c272015-05-13 12:24:53 +02002693 next = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002694
2695 /* bypass all comment rules */
Willy Tarreauf2c87352015-05-13 12:08:21 +02002696 while (&next->list != head && next->action == TCPCHK_ACT_COMMENT)
Willy Tarreau5581c272015-05-13 12:24:53 +02002697 next = LIST_NEXT(&next->list, struct tcpcheck_rule *, list);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002698
2699 /* NULL if we're on the last rule */
Willy Tarreauf3d34822014-12-08 12:11:28 +01002700 if (&next->list == head)
2701 next = NULL;
2702
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002703 if (check->current_step->action == TCPCHK_ACT_CONNECT) {
2704 struct protocol *proto;
2705 struct xprt_ops *xprt;
2706
Willy Tarreau00149122017-10-04 18:05:01 +02002707 /* For a connect action we'll create a new connection.
2708 * We may also have to kill a previous one. But we don't
2709 * want to leave *without* a connection if we came here
2710 * from the connection layer, hence with a connection.
2711 * Thus we'll proceed in the following order :
2712 * 1: close but not release previous connection
2713 * 2: try to get a new connection
2714 * 3: release and replace the old one on success
2715 */
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002716 if (check->cs) {
Willy Tarreaua553ae92017-10-05 18:52:17 +02002717 cs_close(check->cs);
2718 retcode = -1; /* do not reuse the fd in the caller! */
Willy Tarreau00149122017-10-04 18:05:01 +02002719 }
2720
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002721 /* mark the step as started */
2722 check->last_started_step = check->current_step;
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002723
2724 /* prepare new connection */
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002725 cs = cs_new(NULL);
2726 if (!cs) {
Willy Tarreau00149122017-10-04 18:05:01 +02002727 step = tcpcheck_get_step_id(check);
2728 chunk_printf(&trash, "TCPCHK error allocating connection at step %d", step);
2729 comment = tcpcheck_get_step_comment(check, step);
2730 if (comment)
2731 chunk_appendf(&trash, " comment: '%s'", comment);
2732 set_server_check_status(check, HCHK_STATUS_SOCKERR, trash.str);
2733 check->current_step = NULL;
Christopher Fauletb6102852017-11-28 10:06:29 +01002734 goto out;
Willy Tarreau00149122017-10-04 18:05:01 +02002735 }
2736
Willy Tarreauac59f362017-10-08 11:10:19 +02002737 if (check->cs)
2738 cs_destroy(check->cs);
Willy Tarreau00149122017-10-04 18:05:01 +02002739
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002740 check->cs = cs;
2741 conn = cs->conn;
2742 cs_attach(cs, check, &check_conn_cb);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002743 conn->target = &s->obj_type;
2744
2745 /* no client address */
2746 clear_addr(&conn->addr.from);
2747
Simon Horman41f58762015-01-30 11:22:56 +09002748 if (is_addr(&check->addr)) {
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002749 /* we'll connect to the check addr specified on the server */
Simon Horman41f58762015-01-30 11:22:56 +09002750 conn->addr.to = check->addr;
Willy Tarreau640556c2014-05-09 23:38:15 +02002751 }
2752 else {
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002753 /* we'll connect to the addr on the server */
2754 conn->addr.to = s->addr;
Willy Tarreau640556c2014-05-09 23:38:15 +02002755 }
Thierry FOURNIERbb2ae642015-01-14 11:31:49 +01002756 proto = protocol_by_family(conn->addr.to.ss_family);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002757
2758 /* port */
2759 if (check->current_step->port)
2760 set_host_port(&conn->addr.to, check->current_step->port);
2761 else if (check->port)
2762 set_host_port(&conn->addr.to, check->port);
Baptiste Assmann2f3a56b2018-03-19 12:22:41 +01002763 else if (s->svc_port)
2764 set_host_port(&conn->addr.to, s->svc_port);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002765
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002766 if (check->current_step->conn_opts & TCPCHK_OPT_SSL) {
Willy Tarreaua261e9b2016-12-22 20:44:00 +01002767 xprt = xprt_get(XPRT_SSL);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002768 }
2769 else {
Willy Tarreaua261e9b2016-12-22 20:44:00 +01002770 xprt = xprt_get(XPRT_RAW);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002771 }
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002772 conn_prepare(conn, proto, xprt);
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002773 conn_install_mux(conn, &mux_pt_ops, cs);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002774
Willy Tarreaue7dff022015-04-03 01:14:29 +02002775 ret = SF_ERR_INTERNAL;
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002776 if (proto->connect)
Willy Tarreauf3d34822014-12-08 12:11:28 +01002777 ret = proto->connect(conn,
2778 1 /* I/O polling is always needed */,
2779 (next && next->action == TCPCHK_ACT_EXPECT) ? 0 : 2);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002780 if (check->current_step->conn_opts & TCPCHK_OPT_SEND_PROXY) {
2781 conn->send_proxy_ofs = 1;
2782 conn->flags |= CO_FL_SEND_PROXY;
2783 }
2784
2785 /* It can return one of :
Willy Tarreaue7dff022015-04-03 01:14:29 +02002786 * - SF_ERR_NONE if everything's OK
2787 * - SF_ERR_SRVTO if there are no more servers
2788 * - SF_ERR_SRVCL if the connection was refused by the server
2789 * - SF_ERR_PRXCOND if the connection has been limited by the proxy (maxconn)
2790 * - SF_ERR_RESOURCE if a system resource is lacking (eg: fd limits, ports, ...)
2791 * - SF_ERR_INTERNAL for any other purely internal errors
Tim Düsterhus4896c442016-11-29 02:15:19 +01002792 * Additionally, in the case of SF_ERR_RESOURCE, an emergency log will be emitted.
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002793 * Note that we try to prevent the network stack from sending the ACK during the
2794 * connect() when a pure TCP check is used (without PROXY protocol).
2795 */
2796 switch (ret) {
Willy Tarreaue7dff022015-04-03 01:14:29 +02002797 case SF_ERR_NONE:
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002798 /* we allow up to min(inter, timeout.connect) for a connection
2799 * to establish but only when timeout.check is set
2800 * as it may be to short for a full check otherwise
2801 */
2802 t->expire = tick_add(now_ms, MS_TO_TICKS(check->inter));
2803
2804 if (s->proxy->timeout.check && s->proxy->timeout.connect) {
2805 int t_con = tick_add(now_ms, s->proxy->timeout.connect);
2806 t->expire = tick_first(t->expire, t_con);
2807 }
2808 break;
Willy Tarreaue7dff022015-04-03 01:14:29 +02002809 case SF_ERR_SRVTO: /* ETIMEDOUT */
2810 case SF_ERR_SRVCL: /* ECONNREFUSED, ENETUNREACH, ... */
Baptiste Assmanncfbd1b82015-05-02 09:00:23 +02002811 step = tcpcheck_get_step_id(check);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002812 chunk_printf(&trash, "TCPCHK error establishing connection at step %d: %s",
Baptiste Assmanncfbd1b82015-05-02 09:00:23 +02002813 step, strerror(errno));
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002814 comment = tcpcheck_get_step_comment(check, step);
2815 if (comment)
2816 chunk_appendf(&trash, " comment: '%s'", comment);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002817 set_server_check_status(check, HCHK_STATUS_L4CON, trash.str);
2818 goto out_end_tcpcheck;
Willy Tarreaue7dff022015-04-03 01:14:29 +02002819 case SF_ERR_PRXCOND:
2820 case SF_ERR_RESOURCE:
2821 case SF_ERR_INTERNAL:
Baptiste Assmanncfbd1b82015-05-02 09:00:23 +02002822 step = tcpcheck_get_step_id(check);
2823 chunk_printf(&trash, "TCPCHK error establishing connection at step %d", step);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002824 comment = tcpcheck_get_step_comment(check, step);
2825 if (comment)
2826 chunk_appendf(&trash, " comment: '%s'", comment);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002827 set_server_check_status(check, HCHK_STATUS_SOCKERR, trash.str);
2828 goto out_end_tcpcheck;
2829 }
2830
2831 /* allow next rule */
Willy Tarreau5581c272015-05-13 12:24:53 +02002832 check->current_step = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002833
2834 /* bypass all comment rules */
Willy Tarreauf2c87352015-05-13 12:08:21 +02002835 while (&check->current_step->list != head &&
2836 check->current_step->action == TCPCHK_ACT_COMMENT)
Willy Tarreau5581c272015-05-13 12:24:53 +02002837 check->current_step = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002838
Willy Tarreauf2c87352015-05-13 12:08:21 +02002839 if (&check->current_step->list == head)
2840 break;
2841
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002842 } /* end 'connect' */
2843 else if (check->current_step->action == TCPCHK_ACT_SEND) {
2844 /* mark the step as started */
2845 check->last_started_step = check->current_step;
2846
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002847 /* reset the read buffer */
Willy Tarreau876171e2018-06-18 11:11:07 +02002848 if (*b_head(check->bi) != '\0') {
2849 *b_head(check->bi) = '\0';
2850 b_reset(check->bi);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002851 }
2852
Willy Tarreaubbae3f02017-08-30 09:59:52 +02002853 if (conn->flags & CO_FL_SOCK_WR_SH) {
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002854 conn->flags |= CO_FL_ERROR;
Willy Tarreaub5259bf2017-10-04 14:47:29 +02002855 chk_report_conn_err(check, 0, 0);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002856 goto out_end_tcpcheck;
2857 }
2858
Willy Tarreauabca5b62013-12-06 14:19:25 +01002859 if (check->current_step->string_len >= check->bo->size) {
Willy Tarreau506a29a2018-07-18 10:07:58 +02002860 chunk_printf(&trash, "tcp-check send : string too large (%d) for buffer size (%u) at step %d",
2861 check->current_step->string_len, (unsigned int)check->bo->size,
Simon Hormane16c1b32015-01-30 11:22:57 +09002862 tcpcheck_get_step_id(check));
Willy Tarreauabca5b62013-12-06 14:19:25 +01002863 set_server_check_status(check, HCHK_STATUS_L7RSP, trash.str);
2864 goto out_end_tcpcheck;
2865 }
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002866
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002867 /* do not try to send if there is no space */
Willy Tarreaueac52592018-06-15 13:59:36 +02002868 if (check->current_step->string_len >= b_room(check->bo))
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002869 continue;
2870
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002871 bo_putblk(check->bo, check->current_step->string, check->current_step->string_len);
Willy Tarreau876171e2018-06-18 11:11:07 +02002872 *b_tail(check->bo) = '\0'; /* to make gdb output easier to read */
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002873
Willy Tarreauabca5b62013-12-06 14:19:25 +01002874 /* go to next rule and try to send */
Willy Tarreau5581c272015-05-13 12:24:53 +02002875 check->current_step = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002876
2877 /* bypass all comment rules */
Willy Tarreauf2c87352015-05-13 12:08:21 +02002878 while (&check->current_step->list != head &&
2879 check->current_step->action == TCPCHK_ACT_COMMENT)
Willy Tarreau5581c272015-05-13 12:24:53 +02002880 check->current_step = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Willy Tarreauf2c87352015-05-13 12:08:21 +02002881
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002882 } /* end 'send' */
Willy Tarreau98aec9f2013-12-06 16:16:41 +01002883 else if (check->current_step->action == TCPCHK_ACT_EXPECT) {
Willy Tarreau6aaa1b82013-12-11 17:09:34 +01002884 if (unlikely(check->result == CHK_RES_FAILED))
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002885 goto out_end_tcpcheck;
2886
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002887 __cs_want_recv(cs);
Willy Tarreau7f3225f2018-06-19 06:15:17 +02002888 if (conn->mux->rcv_buf(cs, check->bi, check->bi->size, 0) <= 0) {
Willy Tarreau4ff3b892017-10-16 15:17:17 +02002889 if (conn->flags & (CO_FL_ERROR | CO_FL_SOCK_RD_SH) || cs->flags & CS_FL_ERROR) {
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002890 done = 1;
Willy Tarreau876171e2018-06-18 11:11:07 +02002891 if ((conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR) && !b_data(check->bi)) {
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002892 /* Report network errors only if we got no other data. Otherwise
2893 * we'll let the upper layers decide whether the response is OK
2894 * or not. It is very common that an RST sent by the server is
2895 * reported as an error just after the last data chunk.
2896 */
Willy Tarreaub5259bf2017-10-04 14:47:29 +02002897 chk_report_conn_err(check, errno, 0);
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002898 goto out_end_tcpcheck;
2899 }
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002900 }
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002901 else
Willy Tarreau263013d2015-05-13 11:59:14 +02002902 break;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002903 }
2904
Baptiste Assmann69e273f2013-12-11 00:52:19 +01002905 /* mark the step as started */
2906 check->last_started_step = check->current_step;
2907
2908
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002909 /* Intermediate or complete response received.
Willy Tarreau876171e2018-06-18 11:11:07 +02002910 * Terminate string in b_head(check->bi) buffer.
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002911 */
Willy Tarreau876171e2018-06-18 11:11:07 +02002912 if (b_data(check->bi) < check->bi->size) {
2913 b_head(check->bi)[b_data(check->bi)] = '\0';
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002914 }
2915 else {
Willy Tarreau876171e2018-06-18 11:11:07 +02002916 b_head(check->bi)[b_data(check->bi) - 1] = '\0';
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002917 done = 1; /* buffer full, don't wait for more data */
2918 }
2919
Willy Tarreau876171e2018-06-18 11:11:07 +02002920 contentptr = b_head(check->bi);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002921
2922 /* Check that response body is not empty... */
Willy Tarreau876171e2018-06-18 11:11:07 +02002923 if (!b_data(check->bi)) {
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002924 if (!done)
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01002925 continue;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002926
2927 /* empty response */
Baptiste Assmanncfbd1b82015-05-02 09:00:23 +02002928 step = tcpcheck_get_step_id(check);
2929 chunk_printf(&trash, "TCPCHK got an empty response at step %d", step);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002930 comment = tcpcheck_get_step_comment(check, step);
2931 if (comment)
2932 chunk_appendf(&trash, " comment: '%s'", comment);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002933 set_server_check_status(check, HCHK_STATUS_L7RSP, trash.str);
2934
2935 goto out_end_tcpcheck;
2936 }
2937
Willy Tarreau876171e2018-06-18 11:11:07 +02002938 if (!done && (check->current_step->string != NULL) && (b_data(check->bi) < check->current_step->string_len) )
Willy Tarreaua970c282013-12-06 12:47:19 +01002939 continue; /* try to read more */
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002940
Willy Tarreaua970c282013-12-06 12:47:19 +01002941 tcpcheck_expect:
Willy Tarreauce8c42a2015-05-13 11:23:01 +02002942 if (check->current_step->string != NULL)
Willy Tarreau876171e2018-06-18 11:11:07 +02002943 ret = my_memmem(contentptr, b_data(check->bi), check->current_step->string, check->current_step->string_len) != NULL;
Willy Tarreauce8c42a2015-05-13 11:23:01 +02002944 else if (check->current_step->expect_regex != NULL)
2945 ret = regex_exec(check->current_step->expect_regex, contentptr);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002946
2947 if (!ret && !done)
Willy Tarreaua970c282013-12-06 12:47:19 +01002948 continue; /* try to read more */
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002949
2950 /* matched */
Baptiste Assmanncfbd1b82015-05-02 09:00:23 +02002951 step = tcpcheck_get_step_id(check);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002952 if (ret) {
2953 /* matched but we did not want to => ERROR */
Willy Tarreauce8c42a2015-05-13 11:23:01 +02002954 if (check->current_step->inverse) {
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002955 /* we were looking for a string */
Willy Tarreauce8c42a2015-05-13 11:23:01 +02002956 if (check->current_step->string != NULL) {
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002957 chunk_printf(&trash, "TCPCHK matched unwanted content '%s' at step %d",
Willy Tarreauce8c42a2015-05-13 11:23:01 +02002958 check->current_step->string, step);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002959 }
2960 else {
2961 /* we were looking for a regex */
Baptiste Assmanncfbd1b82015-05-02 09:00:23 +02002962 chunk_printf(&trash, "TCPCHK matched unwanted content (regex) at step %d", step);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002963 }
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002964 comment = tcpcheck_get_step_comment(check, step);
2965 if (comment)
2966 chunk_appendf(&trash, " comment: '%s'", comment);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002967 set_server_check_status(check, HCHK_STATUS_L7RSP, trash.str);
2968 goto out_end_tcpcheck;
2969 }
2970 /* matched and was supposed to => OK, next step */
2971 else {
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002972 /* allow next rule */
Willy Tarreau5581c272015-05-13 12:24:53 +02002973 check->current_step = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002974
2975 /* bypass all comment rules */
Willy Tarreauf2c87352015-05-13 12:08:21 +02002976 while (&check->current_step->list != head &&
2977 check->current_step->action == TCPCHK_ACT_COMMENT)
Willy Tarreau5581c272015-05-13 12:24:53 +02002978 check->current_step = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002979
Willy Tarreauf2c87352015-05-13 12:08:21 +02002980 if (&check->current_step->list == head)
2981 break;
2982
Willy Tarreau98aec9f2013-12-06 16:16:41 +01002983 if (check->current_step->action == TCPCHK_ACT_EXPECT)
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002984 goto tcpcheck_expect;
Olivier Houchard9aaf7782017-09-13 18:30:23 +02002985 __cs_stop_recv(cs);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02002986 }
2987 }
2988 else {
2989 /* not matched */
2990 /* not matched and was not supposed to => OK, next step */
Willy Tarreauce8c42a2015-05-13 11:23:01 +02002991 if (check->current_step->inverse) {
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002992 /* allow next rule */
Willy Tarreau5581c272015-05-13 12:24:53 +02002993 check->current_step = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002994
2995 /* bypass all comment rules */
Willy Tarreauf2c87352015-05-13 12:08:21 +02002996 while (&check->current_step->list != head &&
2997 check->current_step->action == TCPCHK_ACT_COMMENT)
Willy Tarreau5581c272015-05-13 12:24:53 +02002998 check->current_step = LIST_NEXT(&check->current_step->list, struct tcpcheck_rule *, list);
Baptiste Assmann22b09d22015-05-01 08:03:04 +02002999
Willy Tarreauf2c87352015-05-13 12:08:21 +02003000 if (&check->current_step->list == head)
3001 break;
3002
Willy Tarreau98aec9f2013-12-06 16:16:41 +01003003 if (check->current_step->action == TCPCHK_ACT_EXPECT)
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003004 goto tcpcheck_expect;
Olivier Houchard9aaf7782017-09-13 18:30:23 +02003005 __cs_stop_recv(cs);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003006 }
3007 /* not matched but was supposed to => ERROR */
3008 else {
3009 /* we were looking for a string */
Willy Tarreauce8c42a2015-05-13 11:23:01 +02003010 if (check->current_step->string != NULL) {
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003011 chunk_printf(&trash, "TCPCHK did not match content '%s' at step %d",
Willy Tarreauce8c42a2015-05-13 11:23:01 +02003012 check->current_step->string, step);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003013 }
3014 else {
3015 /* we were looking for a regex */
3016 chunk_printf(&trash, "TCPCHK did not match content (regex) at step %d",
Baptiste Assmanncfbd1b82015-05-02 09:00:23 +02003017 step);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003018 }
Baptiste Assmann22b09d22015-05-01 08:03:04 +02003019 comment = tcpcheck_get_step_comment(check, step);
3020 if (comment)
3021 chunk_appendf(&trash, " comment: '%s'", comment);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003022 set_server_check_status(check, HCHK_STATUS_L7RSP, trash.str);
3023 goto out_end_tcpcheck;
3024 }
3025 }
3026 } /* end expect */
3027 } /* end loop over double chained step list */
3028
Baptiste Assmann248f1172018-03-01 21:49:01 +01003029 /* don't do anything until the connection is established */
3030 if (!(conn->flags & CO_FL_CONNECTED)) {
3031 /* update expire time, should be done by process_chk */
3032 /* we allow up to min(inter, timeout.connect) for a connection
3033 * to establish but only when timeout.check is set
3034 * as it may be to short for a full check otherwise
3035 */
3036 while (tick_is_expired(t->expire, now_ms)) {
3037 int t_con;
3038
3039 t_con = tick_add(t->expire, s->proxy->timeout.connect);
3040 t->expire = tick_add(t->expire, MS_TO_TICKS(check->inter));
3041
3042 if (s->proxy->timeout.check)
3043 t->expire = tick_first(t->expire, t_con);
3044 }
3045 goto out;
3046 }
3047
Willy Tarreau263013d2015-05-13 11:59:14 +02003048 /* We're waiting for some I/O to complete, we've reached the end of the
3049 * rules, or both. Do what we have to do, otherwise we're done.
3050 */
Willy Tarreau876171e2018-06-18 11:11:07 +02003051 if (&check->current_step->list == head && !b_data(check->bo)) {
Willy Tarreau263013d2015-05-13 11:59:14 +02003052 set_server_check_status(check, HCHK_STATUS_L7OKD, "(tcp-check)");
3053 goto out_end_tcpcheck;
3054 }
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003055
Willy Tarreau53c5a042015-05-13 11:38:17 +02003056 /* warning, current_step may now point to the head */
Willy Tarreau876171e2018-06-18 11:11:07 +02003057 if (b_data(check->bo))
Olivier Houchard9aaf7782017-09-13 18:30:23 +02003058 __cs_want_send(cs);
Willy Tarreaufbe0edf2013-12-06 16:54:31 +01003059
Willy Tarreau53c5a042015-05-13 11:38:17 +02003060 if (&check->current_step->list != head &&
3061 check->current_step->action == TCPCHK_ACT_EXPECT)
Olivier Houchard9aaf7782017-09-13 18:30:23 +02003062 __cs_want_recv(cs);
Christopher Fauletb6102852017-11-28 10:06:29 +01003063 goto out;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003064
3065 out_end_tcpcheck:
3066 /* collect possible new errors */
Willy Tarreau4ff3b892017-10-16 15:17:17 +02003067 if (conn->flags & CO_FL_ERROR || cs->flags & CS_FL_ERROR)
Willy Tarreaub5259bf2017-10-04 14:47:29 +02003068 chk_report_conn_err(check, 0, 0);
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003069
Baptiste Assmann69e273f2013-12-11 00:52:19 +01003070 /* cleanup before leaving */
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003071 check->current_step = NULL;
3072
Willy Tarreau6aaa1b82013-12-11 17:09:34 +01003073 if (check->result == CHK_RES_FAILED)
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003074 conn->flags |= CO_FL_ERROR;
3075
Olivier Houchard9aaf7782017-09-13 18:30:23 +02003076 __cs_stop_both(cs);
Willy Tarreau62ac84f2017-11-05 10:11:13 +01003077
Christopher Fauletb6102852017-11-28 10:06:29 +01003078 out:
Willy Tarreau6bdcab02017-10-04 18:41:00 +02003079 return retcode;
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003080}
3081
Simon Hormanb1900d52015-01-30 11:22:54 +09003082const char *init_check(struct check *check, int type)
3083{
3084 check->type = type;
3085
3086 /* Allocate buffer for requests... */
3087 if ((check->bi = calloc(sizeof(struct buffer) + global.tune.chksize, sizeof(char))) == NULL) {
3088 return "out of memory while allocating check buffer";
3089 }
3090 check->bi->size = global.tune.chksize;
3091
3092 /* Allocate buffer for responses... */
3093 if ((check->bo = calloc(sizeof(struct buffer) + global.tune.chksize, sizeof(char))) == NULL) {
3094 return "out of memory while allocating check buffer";
3095 }
3096 check->bo->size = global.tune.chksize;
Simon Hormanb1900d52015-01-30 11:22:54 +09003097 return NULL;
3098}
3099
Simon Hormanbfb5d332015-01-30 11:22:55 +09003100void free_check(struct check *check)
3101{
3102 free(check->bi);
Frédéric Lécaille6e0843c2017-03-21 16:39:15 +01003103 check->bi = NULL;
Simon Hormanbfb5d332015-01-30 11:22:55 +09003104 free(check->bo);
Frédéric Lécaille6e0843c2017-03-21 16:39:15 +01003105 check->bo = NULL;
Christopher Faulet23d86d12018-01-25 11:36:35 +01003106 if (check->cs) {
3107 free(check->cs->conn);
3108 check->cs->conn = NULL;
3109 cs_free(check->cs);
3110 check->cs = NULL;
3111 }
Simon Hormanbfb5d332015-01-30 11:22:55 +09003112}
3113
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003114void email_alert_free(struct email_alert *alert)
3115{
3116 struct tcpcheck_rule *rule, *back;
3117
3118 if (!alert)
3119 return;
3120
Christopher Fauletde1a75b2017-10-23 15:38:19 +02003121 list_for_each_entry_safe(rule, back, &alert->tcpcheck_rules, list) {
3122 LIST_DEL(&rule->list);
3123 free(rule->comment);
3124 free(rule->string);
3125 if (rule->expect_regex)
3126 regex_free(rule->expect_regex);
Willy Tarreaubafbe012017-11-24 17:34:44 +01003127 pool_free(pool_head_tcpcheck_rule, rule);
Christopher Fauletde1a75b2017-10-23 15:38:19 +02003128 }
Willy Tarreaubafbe012017-11-24 17:34:44 +01003129 pool_free(pool_head_email_alert, alert);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003130}
3131
Olivier Houchard9f6af332018-05-25 14:04:04 +02003132static struct task *process_email_alert(struct task *t, void *context, unsigned short state)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003133{
Olivier Houchard9f6af332018-05-25 14:04:04 +02003134 struct check *check = context;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003135 struct email_alertq *q;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003136 struct email_alert *alert;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003137
3138 q = container_of(check, typeof(*q), check);
3139
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003140 HA_SPIN_LOCK(EMAIL_ALERTS_LOCK, &q->lock);
Christopher Faulet0108bb32017-10-20 21:34:32 +02003141 while (1) {
3142 if (!(check->state & CHK_ST_ENABLED)) {
3143 if (LIST_ISEMPTY(&q->email_alerts)) {
3144 /* All alerts processed, queue the task */
3145 t->expire = TICK_ETERNITY;
3146 task_queue(t);
Christopher Fauletc2a89a62017-10-23 15:54:24 +02003147 goto end;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003148 }
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003149
3150 alert = LIST_NEXT(&q->email_alerts, typeof(alert), list);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003151 LIST_DEL(&alert->list);
Christopher Faulet0108bb32017-10-20 21:34:32 +02003152 t->expire = now_ms;
3153 check->server = alert->srv;
3154 check->tcpcheck_rules = &alert->tcpcheck_rules;
PiBa-NL1714b9f2017-12-06 01:35:43 +01003155 check->status = HCHK_STATUS_UNKNOWN; // the UNKNOWN status is used to exit set_server_check_status(.) early
Christopher Faulet0108bb32017-10-20 21:34:32 +02003156 check->state |= CHK_ST_ENABLED;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003157 }
3158
Olivier Houchard9f6af332018-05-25 14:04:04 +02003159 process_chk(t, context, state);
Christopher Faulet0108bb32017-10-20 21:34:32 +02003160 if (check->state & CHK_ST_INPROGRESS)
3161 break;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003162
3163 alert = container_of(check->tcpcheck_rules, typeof(*alert), tcpcheck_rules);
3164 email_alert_free(alert);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003165 check->tcpcheck_rules = NULL;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003166 check->server = NULL;
3167 check->state &= ~CHK_ST_ENABLED;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003168 }
Christopher Fauletc2a89a62017-10-23 15:54:24 +02003169 end:
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003170 HA_SPIN_UNLOCK(EMAIL_ALERTS_LOCK, &q->lock);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003171 return t;
3172}
3173
Christopher Faulet0108bb32017-10-20 21:34:32 +02003174/* Initializes mailer alerts for the proxy <p> using <mls> parameters.
3175 *
3176 * The function returns 1 in success case, otherwise, it returns 0 and err is
3177 * filled.
3178 */
3179int init_email_alert(struct mailers *mls, struct proxy *p, char **err)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003180{
Christopher Faulet0108bb32017-10-20 21:34:32 +02003181 struct mailer *mailer;
3182 struct email_alertq *queues;
3183 const char *err_str;
3184 int i = 0;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003185
Christopher Faulet0108bb32017-10-20 21:34:32 +02003186 if ((queues = calloc(mls->count, sizeof(*queues))) == NULL) {
3187 memprintf(err, "out of memory while allocating mailer alerts queues");
3188 goto error;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003189 }
3190
Christopher Faulet0108bb32017-10-20 21:34:32 +02003191 for (mailer = mls->mailer_list; mailer; i++, mailer = mailer->next) {
3192 struct email_alertq *q = &queues[i];
3193 struct check *check = &q->check;
3194 struct task *t;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003195
3196 LIST_INIT(&q->email_alerts);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003197 HA_SPIN_INIT(&q->lock);
Christopher Faulet0108bb32017-10-20 21:34:32 +02003198 check->inter = mls->timeout.mail;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003199 check->rise = DEF_AGENT_RISETIME;
3200 check->fall = DEF_AGENT_FALLTIME;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003201 if ((err_str = init_check(check, PR_O2_TCPCHK_CHK))) {
3202 memprintf(err, "%s", err_str);
3203 goto error;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003204 }
3205
3206 check->xprt = mailer->xprt;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003207 check->addr = mailer->addr;
Christopher Fauletb797ae12018-03-27 15:35:35 +02003208 check->port = get_host_port(&mailer->addr);
Christopher Faulet0108bb32017-10-20 21:34:32 +02003209 //check->server = s;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003210
Emeric Brunc60def82017-09-27 14:59:38 +02003211 if ((t = task_new(MAX_THREADS_MASK)) == NULL) {
Christopher Faulet0108bb32017-10-20 21:34:32 +02003212 memprintf(err, "out of memory while allocating mailer alerts task");
3213 goto error;
3214 }
3215
3216 check->task = t;
3217 t->process = process_email_alert;
3218 t->context = check;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003219
Christopher Faulet0108bb32017-10-20 21:34:32 +02003220 /* check this in one ms */
3221 t->expire = TICK_ETERNITY;
3222 check->start = now;
3223 task_queue(t);
3224 }
3225
3226 mls->users++;
3227 free(p->email_alert.mailers.name);
3228 p->email_alert.mailers.m = mls;
3229 p->email_alert.queues = queues;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003230 return 0;
Christopher Faulet0108bb32017-10-20 21:34:32 +02003231
3232 error:
3233 for (i = 0; i < mls->count; i++) {
3234 struct email_alertq *q = &queues[i];
3235 struct check *check = &q->check;
3236
3237 if (check->task) {
3238 task_delete(check->task);
3239 task_free(check->task);
3240 check->task = NULL;
3241 }
3242 free_check(check);
3243 }
3244 free(queues);
3245 return 1;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003246}
3247
3248
3249static int add_tcpcheck_expect_str(struct list *list, const char *str)
3250{
3251 struct tcpcheck_rule *tcpcheck;
3252
Willy Tarreaubafbe012017-11-24 17:34:44 +01003253 if ((tcpcheck = pool_alloc(pool_head_tcpcheck_rule)) == NULL)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003254 return 0;
Christopher Faulet31dff9b2017-10-23 15:45:20 +02003255 memset(tcpcheck, 0, sizeof(*tcpcheck));
3256 tcpcheck->action = TCPCHK_ACT_EXPECT;
3257 tcpcheck->string = strdup(str);
3258 tcpcheck->expect_regex = NULL;
3259 tcpcheck->comment = NULL;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003260 if (!tcpcheck->string) {
Willy Tarreaubafbe012017-11-24 17:34:44 +01003261 pool_free(pool_head_tcpcheck_rule, tcpcheck);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003262 return 0;
3263 }
3264
3265 LIST_ADDQ(list, &tcpcheck->list);
3266 return 1;
3267}
3268
3269static int add_tcpcheck_send_strs(struct list *list, const char * const *strs)
3270{
3271 struct tcpcheck_rule *tcpcheck;
Willy Tarreau64345aa2016-08-10 19:29:09 +02003272 const char *in;
3273 char *dst;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003274 int i;
3275
Willy Tarreaubafbe012017-11-24 17:34:44 +01003276 if ((tcpcheck = pool_alloc(pool_head_tcpcheck_rule)) == NULL)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003277 return 0;
Christopher Faulet31dff9b2017-10-23 15:45:20 +02003278 memset(tcpcheck, 0, sizeof(*tcpcheck));
3279 tcpcheck->action = TCPCHK_ACT_SEND;
3280 tcpcheck->expect_regex = NULL;
3281 tcpcheck->comment = NULL;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003282 tcpcheck->string_len = 0;
3283 for (i = 0; strs[i]; i++)
3284 tcpcheck->string_len += strlen(strs[i]);
3285
3286 tcpcheck->string = malloc(tcpcheck->string_len + 1);
3287 if (!tcpcheck->string) {
Willy Tarreaubafbe012017-11-24 17:34:44 +01003288 pool_free(pool_head_tcpcheck_rule, tcpcheck);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003289 return 0;
3290 }
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003291
Willy Tarreau64345aa2016-08-10 19:29:09 +02003292 dst = tcpcheck->string;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003293 for (i = 0; strs[i]; i++)
Willy Tarreau64345aa2016-08-10 19:29:09 +02003294 for (in = strs[i]; (*dst = *in++); dst++);
3295 *dst = 0;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003296
3297 LIST_ADDQ(list, &tcpcheck->list);
3298 return 1;
3299}
3300
Christopher Faulet0108bb32017-10-20 21:34:32 +02003301static int enqueue_one_email_alert(struct proxy *p, struct server *s,
3302 struct email_alertq *q, const char *msg)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003303{
Christopher Faulet31dff9b2017-10-23 15:45:20 +02003304 struct email_alert *alert;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003305 struct tcpcheck_rule *tcpcheck;
3306 struct check *check = &q->check;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003307
Willy Tarreaubafbe012017-11-24 17:34:44 +01003308 if ((alert = pool_alloc(pool_head_email_alert)) == NULL)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003309 goto error;
Christopher Faulet31dff9b2017-10-23 15:45:20 +02003310 LIST_INIT(&alert->list);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003311 LIST_INIT(&alert->tcpcheck_rules);
Christopher Faulet0108bb32017-10-20 21:34:32 +02003312 alert->srv = s;
Christopher Faulet31dff9b2017-10-23 15:45:20 +02003313
Willy Tarreaubafbe012017-11-24 17:34:44 +01003314 if ((tcpcheck = pool_alloc(pool_head_tcpcheck_rule)) == NULL)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003315 goto error;
Christopher Faulet31dff9b2017-10-23 15:45:20 +02003316 memset(tcpcheck, 0, sizeof(*tcpcheck));
3317 tcpcheck->action = TCPCHK_ACT_CONNECT;
3318 tcpcheck->comment = NULL;
3319 tcpcheck->string = NULL;
3320 tcpcheck->expect_regex = NULL;
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003321 LIST_ADDQ(&alert->tcpcheck_rules, &tcpcheck->list);
3322
3323 if (!add_tcpcheck_expect_str(&alert->tcpcheck_rules, "220 "))
3324 goto error;
3325
3326 {
3327 const char * const strs[4] = { "EHLO ", p->email_alert.myhostname, "\r\n" };
3328 if (!add_tcpcheck_send_strs(&alert->tcpcheck_rules, strs))
3329 goto error;
3330 }
3331
3332 if (!add_tcpcheck_expect_str(&alert->tcpcheck_rules, "250 "))
3333 goto error;
3334
3335 {
3336 const char * const strs[4] = { "MAIL FROM:<", p->email_alert.from, ">\r\n" };
3337 if (!add_tcpcheck_send_strs(&alert->tcpcheck_rules, strs))
3338 goto error;
3339 }
3340
3341 if (!add_tcpcheck_expect_str(&alert->tcpcheck_rules, "250 "))
3342 goto error;
3343
3344 {
3345 const char * const strs[4] = { "RCPT TO:<", p->email_alert.to, ">\r\n" };
3346 if (!add_tcpcheck_send_strs(&alert->tcpcheck_rules, strs))
3347 goto error;
3348 }
3349
3350 if (!add_tcpcheck_expect_str(&alert->tcpcheck_rules, "250 "))
3351 goto error;
3352
3353 {
3354 const char * const strs[2] = { "DATA\r\n" };
3355 if (!add_tcpcheck_send_strs(&alert->tcpcheck_rules, strs))
3356 goto error;
3357 }
3358
3359 if (!add_tcpcheck_expect_str(&alert->tcpcheck_rules, "354 "))
3360 goto error;
3361
3362 {
3363 struct tm tm;
3364 char datestr[48];
3365 const char * const strs[18] = {
Pieter Baauw5e0964e2016-02-13 16:27:35 +01003366 "From: ", p->email_alert.from, "\r\n",
3367 "To: ", p->email_alert.to, "\r\n",
3368 "Date: ", datestr, "\r\n",
3369 "Subject: [HAproxy Alert] ", msg, "\r\n",
3370 "\r\n",
3371 msg, "\r\n",
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003372 "\r\n",
Pieter Baauwed35c372015-07-22 19:51:54 +02003373 ".\r\n",
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003374 NULL
3375 };
3376
3377 get_localtime(date.tv_sec, &tm);
3378
3379 if (strftime(datestr, sizeof(datestr), "%a, %d %b %Y %T %z (%Z)", &tm) == 0) {
3380 goto error;
3381 }
3382
3383 if (!add_tcpcheck_send_strs(&alert->tcpcheck_rules, strs))
3384 goto error;
3385 }
3386
3387 if (!add_tcpcheck_expect_str(&alert->tcpcheck_rules, "250 "))
3388 goto error;
3389
3390 {
3391 const char * const strs[2] = { "QUIT\r\n" };
3392 if (!add_tcpcheck_send_strs(&alert->tcpcheck_rules, strs))
3393 goto error;
3394 }
3395
3396 if (!add_tcpcheck_expect_str(&alert->tcpcheck_rules, "221 "))
3397 goto error;
3398
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003399 HA_SPIN_LOCK(EMAIL_ALERTS_LOCK, &q->lock);
Christopher Faulet0108bb32017-10-20 21:34:32 +02003400 task_wakeup(check->task, TASK_WOKEN_MSG);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003401 LIST_ADDQ(&q->email_alerts, &alert->list);
Christopher Faulet2a944ee2017-11-07 10:42:54 +01003402 HA_SPIN_UNLOCK(EMAIL_ALERTS_LOCK, &q->lock);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003403 return 1;
3404
3405error:
3406 email_alert_free(alert);
3407 return 0;
3408}
3409
Christopher Faulet0108bb32017-10-20 21:34:32 +02003410static void enqueue_email_alert(struct proxy *p, struct server *s, const char *msg)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003411{
3412 int i;
3413 struct mailer *mailer;
3414
3415 for (i = 0, mailer = p->email_alert.mailers.m->mailer_list;
3416 i < p->email_alert.mailers.m->count; i++, mailer = mailer->next) {
Christopher Faulet0108bb32017-10-20 21:34:32 +02003417 if (!enqueue_one_email_alert(p, s, &p->email_alert.queues[i], msg)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003418 ha_alert("Email alert [%s] could not be enqueued: out of memory\n", p->id);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003419 return;
3420 }
3421 }
3422
3423 return;
3424}
3425
3426/*
3427 * Send email alert if configured.
3428 */
Simon Horman64e34162015-02-06 11:11:57 +09003429void send_email_alert(struct server *s, int level, const char *format, ...)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003430{
3431 va_list argp;
3432 char buf[1024];
3433 int len;
3434 struct proxy *p = s->proxy;
3435
Christopher Faulet0108bb32017-10-20 21:34:32 +02003436 if (!p->email_alert.mailers.m || level > p->email_alert.level || format == NULL)
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003437 return;
3438
3439 va_start(argp, format);
3440 len = vsnprintf(buf, sizeof(buf), format, argp);
3441 va_end(argp);
3442
Thierry FOURNIER62c8a212017-02-09 12:19:27 +01003443 if (len < 0 || len >= sizeof(buf)) {
Christopher Faulet767a84b2017-11-24 16:50:31 +01003444 ha_alert("Email alert [%s] could not format message\n", p->id);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003445 return;
3446 }
3447
Christopher Faulet0108bb32017-10-20 21:34:32 +02003448 enqueue_email_alert(p, s, buf);
Simon Horman0ba0e4a2015-01-30 11:23:00 +09003449}
3450
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02003451/*
3452 * Return value:
3453 * the port to be used for the health check
3454 * 0 in case no port could be found for the check
3455 */
3456int srv_check_healthcheck_port(struct check *chk)
3457{
3458 int i = 0;
3459 struct server *srv = NULL;
3460
3461 srv = chk->server;
3462
3463 /* If neither a port nor an addr was specified and no check transport
3464 * layer is forced, then the transport layer used by the checks is the
3465 * same as for the production traffic. Otherwise we use raw_sock by
3466 * default, unless one is specified.
3467 */
3468 if (!chk->port && !is_addr(&chk->addr)) {
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02003469 chk->use_ssl |= (srv->use_ssl || (srv->proxy->options & PR_O_TCPCHK_SSL));
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02003470 chk->send_proxy |= (srv->pp_opts);
3471 }
3472
3473 /* by default, we use the health check port ocnfigured */
3474 if (chk->port > 0)
3475 return chk->port;
3476
3477 /* try to get the port from check_core.addr if check.port not set */
3478 i = get_host_port(&chk->addr);
3479 if (i > 0)
3480 return i;
3481
3482 /* try to get the port from server address */
3483 /* prevent MAPPORTS from working at this point, since checks could
3484 * not be performed in such case (MAPPORTS impose a relative ports
3485 * based on live traffic)
3486 */
3487 if (srv->flags & SRV_F_MAPPORTS)
3488 return 0;
Willy Tarreau04276f32017-01-06 17:41:29 +01003489
3490 i = srv->svc_port; /* by default */
Baptiste Assmann95db2bc2016-06-13 14:15:41 +02003491 if (i > 0)
3492 return i;
3493
3494 return 0;
3495}
3496
Willy Tarreau865c5142016-12-21 20:04:48 +01003497__attribute__((constructor))
3498static void __check_init(void)
3499{
3500 hap_register_post_check(start_checks);
Christopher Faulet31dff9b2017-10-23 15:45:20 +02003501
Willy Tarreaubafbe012017-11-24 17:34:44 +01003502 pool_head_email_alert = create_pool("email_alert", sizeof(struct email_alert), MEM_F_SHARED);
3503 pool_head_tcpcheck_rule = create_pool("tcpcheck_rule", sizeof(struct tcpcheck_rule), MEM_F_SHARED);
Willy Tarreau865c5142016-12-21 20:04:48 +01003504}
3505
Baptiste Assmann5ecb77f2013-10-06 23:24:13 +02003506
Willy Tarreaubd741542010-03-16 18:46:54 +01003507/*
Willy Tarreaubaaee002006-06-26 02:48:02 +02003508 * Local variables:
3509 * c-indent-level: 8
3510 * c-basic-offset: 8
3511 * End:
3512 */