mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2026-04-14 10:12:43 +02:00
Code Issues Projects Releases Wiki Activity

BUG/MINOR: config/server: reject QUIC addresses

Browse Source 
QUIC is not implemented on the backend side. To prevent any issue, it is
better to reject any server configured which uses it. This is done via
_srv_parse_init() which is used both for static and dynamic servers.

This should be backported up to all stable versions.
This commit is contained in:
Amaury Denoyelle 2025-06-11 18:26:10 +02:00
parent b5525fe759
commit 1ecf2e9bab
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/server.c
View File

@ -3596,6 +3596,14 @@ static int _srv_parse_init(struct server **srv, char **args, int *cur_arg,
goto out;
}
#ifdef USE_QUIC
if (newsrv->addr_type.proto_type == PROTO_TYPE_DGRAM &&
newsrv->addr_type.xprt_type == PROTO_TYPE_STREAM) {
ha_alert("QUIC protocol is unsupported on the backend side.\n");
goto out;
}
#endif
if (!port1 || !port2) {
if (sk->ss_family != AF_CUST_RHTTP_SRV) {
/* no port specified, +offset, -offset */