mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-08-06 23:27:04 +02:00
Code Issues Projects Releases Wiki Activity

MEDIUM: quic: Heavy task mode with non contiguously bufferized CRYPTO data

Browse Source 
This patch sets the handshake task in heavy task mode when receiving in disorder
CRYPTO data which results in in order bufferized CRYPTO data. This is done
thanks to a non-contiguous buffer and from qc_handle_crypto_frm() after having
potentially bufferized CRYPTO data in this buffer.
qc_treat_rx_crypto_frms() is no more called from qc_treat_rx_pkts() but instead
this is where the task is set in heavy task mode. Consequently,
this is the job of qc_ssl_provide_all_quic_data() to call directly
qc_treat_rx_crypto_frms() to provide the in order bufferized CRYPTO data to the
TLS stack. As this function releases the non-contiguous buffer for the CRYPTO
data, if possible, there is no need to do that from qc_treat_rx_crypto_frms()
anymore.
This commit is contained in:
Frédéric Lécaille 2023-10-31 16:23:05 +01:00
parent 94d20be138
commit 3a8dd48e30
3 changed files with 16 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
include/haproxy/quic_rx.h
View File

@ -33,5 +33,7 @@ int qc_parse_hd_form(struct quic_rx_packet *pkt,
void quic_free_ncbuf(struct ncbuf *ncbuf);
int qc_release_lost_pkts(struct quic_conn *qc, struct quic_pktns *pktns,
struct list *pkts, uint64_t now_us);
int qc_treat_rx_crypto_frms(struct quic_conn *qc, struct quic_enc_level *el,
struct ssl_sock_ctx *ctx);
#endif /* _HAPROXY_QUIC_RX_H */

18
src/quic_rx.c
View File

@ -871,6 +871,9 @@ static int qc_handle_crypto_frm(struct quic_conn *qc,
goto leave;
}
if (ncb_data(ncbuf, 0))
HA_ATOMIC_OR(&qc->wait_event.tasklet->state, TASK_HEAVY);
done:
ret = 1;
leave:
@ -1262,9 +1265,8 @@ static void qc_rm_hp_pkts(struct quic_conn *qc, struct quic_enc_level *el)
* stream for this level.
* Return 1 if succeeded, 0 if not.
*/
static int qc_treat_rx_crypto_frms(struct quic_conn *qc,
struct quic_enc_level *el,
struct ssl_sock_ctx *ctx)
int qc_treat_rx_crypto_frms(struct quic_conn *qc, struct quic_enc_level *el,
struct ssl_sock_ctx *ctx)
{
int ret = 0;
struct ncbuf *ncbuf;
@ -1411,9 +1413,13 @@ int qc_treat_rx_pkts(struct quic_conn *qc)
qel->pktns->flags |= QUIC_FL_PKTNS_NEW_LARGEST_PN;
}
if (qel->cstream && !qc_treat_rx_crypto_frms(qc, qel, qc->xprt_ctx)) {
// trace already emitted by function above
goto leave;
if (qel->cstream) {
struct ncbuf *ncbuf = &qel->cstream->rx.ncbuf;
if (!ncb_is_null(ncbuf) && ncb_data(ncbuf, 0)) {
/* Some in order CRYPTO data were bufferized. */
HA_ATOMIC_OR(&qc->wait_event.tasklet->state, TASK_HEAVY);
}
}
/* Release the Initial encryption level and packet number space. */

6
src/quic_ssl.c
View File

@ -673,10 +673,8 @@ int qc_ssl_provide_all_quic_data(struct quic_conn *qc, struct ssl_sock_ctx *ctx)
QUIC_EV_CONN_PHPKTS, qc, qel);
}
if (ncb_is_empty(ncbuf)) {
TRACE_DEVEL("freeing crypto buf", QUIC_EV_CONN_PHPKTS, qc, qel);
quic_free_ncbuf(ncbuf);
}
if (!qc_treat_rx_crypto_frms(qc, qel, ctx))
ssl_ret = 0;
if (!ssl_ret)
goto leave;