mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-09-20 13:21:29 +02:00
Code Issues Projects Releases Wiki Activity

BUG/MINOR: check: fix dst address when reusing a connection

Browse Source 
The keyword check-reuse-pool allows to reuse an idle connection to
perform a health check instead of opening a new one. It is implemented
similarly to HTTP transfer reuse : a hash is calculated with a subset of
properties to lookup a connection with the same characteristics.

One of these properties is the destination address. Initially it was
always set to NULL prior to reuse check, as this is necessary to match
connections on a reverse-HTTP server. However, this prevents reuse on
other servers with a proper address configured. Indeed, in this case
destination address is always used as key for connections inserted in
idle pool.

This patch fixes this by properly setting destination address for check
reuse. By default, it reuses the address from the server. The only
exception is if the server is using reverse-HTTP, in which case address
remains NULL.

A new test is also performed prior to try check reuse to ensure this is
not performed on a transparent server. Indeed, in this case server
address would be unset. Anyway, check cannot reuse a connection in this
case so this is OK. Note that this does not prevent to continue check
with a newly connection with a NULL address : this should be handled
more properly in another patch.

This must be backported up to 3.2.
This commit is contained in:
Amaury Denoyelle 2025-09-03 15:00:12 +02:00
parent 6d3c3c7871
commit 9410b2ab97
1 changed files with 17 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
src/tcpcheck.c
View File

@ -1265,8 +1265,10 @@ enum tcpcheck_eval_ret tcpcheck_eval_connect(struct check *check, struct tcpchec
check_release_buf(check, &check->bo);
if (!(check->state & CHK_ST_AGENT) && check->reuse_pool &&
!tcpcheck_use_nondefault_connect(check, connect)) {
!tcpcheck_use_nondefault_connect(check, connect) &&
!srv_is_transparent(s)) {
struct ist pool_conn_name = IST_NULL;
struct sockaddr_storage *dst, dst_tmp;
int64_t hash;
int conn_err;
@ -1279,7 +1281,17 @@ enum tcpcheck_eval_ret tcpcheck_eval_connect(struct check *check, struct tcpchec
else if ((connect->options & TCPCHK_OPT_DEFAULT_CONNECT) && check->sni)
pool_conn_name = ist(check->sni);
hash = be_calculate_conn_hash(s, NULL, check->sess, NULL, NULL, pool_conn_name);
if (!(s->flags & SRV_F_RHTTP)) {
dst_tmp = s->addr;
set_host_port(&dst_tmp, s->svc_port);
dst = &dst_tmp;
}
else {
/* For reverse HTTP, destination address is unknown. */
dst = NULL;
}
hash = be_calculate_conn_hash(s, NULL, check->sess, NULL, dst, pool_conn_name);
conn_err = be_reuse_connection(hash, check->sess, s->proxy, s,
check->sc, &s->obj_type, 0);
if (conn_err == SF_ERR_INTERNAL) {
@ -1330,6 +1342,9 @@ enum tcpcheck_eval_ret tcpcheck_eval_connect(struct check *check, struct tcpchec
/* connect to the connect rule addr if specified, otherwise the check
* addr if specified on the server. otherwise, use the server addr (it
* MUST exist at this step).
* TODO server address may be unset if server is transparent. In this
* case and if there is no address configured via a check statement,
* an error should be returned immediately.
*/
*conn->dst = (is_addr(&connect->addr)
? connect->addr