mirror of
https://git.haproxy.org/git/haproxy.git/
synced 2025-08-07 07:37:02 +02:00
d4c33c8889
The file acl.c is a real mess, it both contains functions to parse and process ACLs, and some sample extraction functions which act on buffers. Some other payload analysers were arbitrarily dispatched to proto_tcp.c. So now we're moving all payload-based fetches and ACLs to payload.c which is capable of extracting data from buffers and rely on everything that is protocol-independant. That way we can safely inflate this file and only use the other ones when some fetches are really specific (eg: HTTP, SSL, ...). As a result of this cleanup, the following new sample fetches became available even if they're not really useful : always_false, always_true, rep_ssl_hello_type, rdp_cookie_cnt, req_len, req_ssl_hello_type, req_ssl_sni, req_ssl_ver, wait_end The function 'acl_fetch_nothing' was wrong and never used anywhere so it was removed. The "rdp_cookie" sample fetch used to have a mandatory argument while it was optional in ACLs, which are supposed to iterate over RDP cookies. So we're making it optional as a fetch too, and it will return the first one.
70 lines
2.4 KiB
C
70 lines
2.4 KiB
C
/*
|
|
* include/proto/proto_tcp.h
|
|
* This file contains TCP socket protocol definitions.
|
|
*
|
|
* Copyright (C) 2000-2013 Willy Tarreau - w@1wt.eu
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License as published by the Free Software Foundation, version 2.1
|
|
* exclusively.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with this library; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
|
|
*/
|
|
|
|
#ifndef _PROTO_PROTO_TCP_H
|
|
#define _PROTO_PROTO_TCP_H
|
|
|
|
#include <common/config.h>
|
|
#include <types/proto_tcp.h>
|
|
#include <types/task.h>
|
|
#include <proto/stick_table.h>
|
|
|
|
int tcp_bind_socket(int fd, int flags, struct sockaddr_storage *local, struct sockaddr_storage *remote);
|
|
void tcpv4_add_listener(struct listener *listener);
|
|
void tcpv6_add_listener(struct listener *listener);
|
|
int tcp_connect_server(struct connection *conn, int data, int delack);
|
|
int tcp_connect_probe(struct connection *conn);
|
|
int tcp_get_src(int fd, struct sockaddr *sa, socklen_t salen, int dir);
|
|
int tcp_get_dst(int fd, struct sockaddr *sa, socklen_t salen, int dir);
|
|
int tcp_inspect_request(struct session *s, struct channel *req, int an_bit);
|
|
int tcp_inspect_response(struct session *s, struct channel *rep, int an_bit);
|
|
int tcp_exec_req_rules(struct session *s);
|
|
|
|
/* Converts the INET/INET6 source address to a stick_table key usable for table
|
|
* lookups. Returns either NULL if the source cannot be converted (eg: not
|
|
* IPv4) or a pointer to the converted result in static_table_key in the
|
|
* appropriate format (IP).
|
|
*/
|
|
static inline struct stktable_key *addr_to_stktable_key(struct sockaddr_storage *addr)
|
|
{
|
|
switch (addr->ss_family) {
|
|
case AF_INET:
|
|
static_table_key->key = (void *)&((struct sockaddr_in *)addr)->sin_addr;
|
|
break;
|
|
case AF_INET6:
|
|
static_table_key->key = (void *)&((struct sockaddr_in6 *)addr)->sin6_addr;
|
|
break;
|
|
default:
|
|
return NULL;
|
|
}
|
|
return static_table_key;
|
|
}
|
|
|
|
|
|
#endif /* _PROTO_PROTO_TCP_H */
|
|
|
|
/*
|
|
* Local variables:
|
|
* c-indent-level: 8
|
|
* c-basic-offset: 8
|
|
* End:
|
|
*/
|