mirror of
https://git.haproxy.org/git/haproxy.git/
synced 2025-08-06 07:07:04 +02:00
48d5ef363d
When threads are enabled and running on a machine with multiple CCX or multiple nodes, thread groups are now enabled since 3.3-dev2, causing load-balancing algorithms to randomly fail due to incoming connections spreading over multiple groups and using different load balancing indexes. Let's just force "thread-groups 1" into all configs when threads are enabled to avoid this.
64 lines
1.7 KiB
Plaintext
64 lines
1.7 KiB
Plaintext
varnishtest "Set server ssl via CLI"
|
|
|
|
feature ignore_unknown_macro
|
|
|
|
# for "set server <srv> ssl"
|
|
#REGTEST_TYPE=devel
|
|
#REQUIRE_OPTIONS=OPENSSL
|
|
|
|
# Do nothing. Is there only to create s1_* macros
|
|
server s1 {
|
|
} -start
|
|
|
|
haproxy h1 -conf {
|
|
global
|
|
.if feature(THREAD)
|
|
thread-groups 1
|
|
.endif
|
|
|
|
ssl-server-verify none
|
|
|
|
defaults
|
|
mode http
|
|
timeout connect "${HAPROXY_TEST_TIMEOUT-5s}"
|
|
timeout client "${HAPROXY_TEST_TIMEOUT-5s}"
|
|
timeout server "${HAPROXY_TEST_TIMEOUT-5s}"
|
|
|
|
frontend myfrontend
|
|
bind "fd@${my_fe}"
|
|
default_backend test0
|
|
|
|
backend test0
|
|
server www0 ${s1_addr}:${s1_port} no-ssl
|
|
default-server ssl
|
|
server www1 ${s1_addr}:${s1_port} no-ssl
|
|
|
|
backend test1
|
|
server www0 ${s1_addr}:${s1_port} no-ssl
|
|
} -start
|
|
|
|
haproxy h1 -cli {
|
|
# supported case
|
|
send "show servers state test0"
|
|
expect ~ "test0 2 www1 ${s1_addr} .* - ${s1_port} - -1"
|
|
send "set server test0/www1 ssl on"
|
|
expect ~ "server ssl setting updated"
|
|
send "show servers state test0"
|
|
expect ~ "test0 2 www1 ${s1_addr} .* - ${s1_port} - 1"
|
|
send "set server test0/www1 ssl off"
|
|
expect ~ "server ssl setting updated"
|
|
send "show servers state test0"
|
|
expect ~ "test0 2 www1 ${s1_addr} .* - ${s1_port} - 0"
|
|
|
|
# unsupported cases
|
|
send "show servers state test0"
|
|
expect ~ "test0 1 www0 ${s1_addr} .* - ${s1_port} - -1"
|
|
send "set server test0/www0 ssl on"
|
|
expect ~ "'set server <srv> ssl' cannot be set"
|
|
|
|
send "show servers state test1"
|
|
expect ~ "test1 1 www0 ${s1_addr} .* - ${s1_port} - -1"
|
|
send "set server test1/www0 ssl on"
|
|
expect ~ "'set server <srv> ssl' cannot be set"
|
|
} -wait
|