|
0
|
1
|
|
|
2 /*
|
|
|
3 * Copyright (C) Igor Sysoev
|
|
|
4 */
|
|
|
5
|
|
|
6
|
|
|
7 #include <ngx_config.h>
|
|
|
8 #include <ngx_core.h>
|
|
|
9 #include <ngx_event.h>
|
|
|
10
|
|
|
11
|
|
|
12 ngx_os_io_t ngx_io;
|
|
|
13
|
|
|
14
|
|
70
|
15 ngx_listening_t *
|
|
486
|
16 ngx_create_listening(ngx_conf_t *cf, void *sockaddr, socklen_t socklen)
|
|
0
|
17 {
|
|
538
|
18 size_t len;
|
|
486
|
19 ngx_listening_t *ls;
|
|
|
20 struct sockaddr *sa;
|
|
|
21 u_char text[NGX_SOCKADDR_STRLEN];
|
|
0
|
22
|
|
50
|
23 ls = ngx_array_push(&cf->cycle->listening);
|
|
|
24 if (ls == NULL) {
|
|
0
|
25 return NULL;
|
|
|
26 }
|
|
|
27
|
|
|
28 ngx_memzero(ls, sizeof(ngx_listening_t));
|
|
|
29
|
|
486
|
30 sa = ngx_palloc(cf->pool, socklen);
|
|
|
31 if (sa == NULL) {
|
|
0
|
32 return NULL;
|
|
|
33 }
|
|
|
34
|
|
486
|
35 ngx_memcpy(sa, sockaddr, socklen);
|
|
0
|
36
|
|
486
|
37 ls->sockaddr = sa;
|
|
|
38 ls->socklen = socklen;
|
|
10
|
39
|
|
538
|
40 len = ngx_sock_ntop(sa, text, NGX_SOCKADDR_STRLEN, 1);
|
|
|
41 ls->addr_text.len = len;
|
|
486
|
42
|
|
|
43 switch (ls->sockaddr->sa_family) {
|
|
|
44 #if (NGX_HAVE_INET6)
|
|
|
45 case AF_INET6:
|
|
|
46 ls->addr_text_max_len = NGX_INET6_ADDRSTRLEN;
|
|
|
47 break;
|
|
|
48 #endif
|
|
538
|
49 #if (NGX_HAVE_UNIX_DOMAIN)
|
|
|
50 case AF_UNIX:
|
|
|
51 ls->addr_text_max_len = NGX_UNIX_ADDRSTRLEN;
|
|
|
52 len++;
|
|
|
53 break;
|
|
|
54 #endif
|
|
486
|
55 case AF_INET:
|
|
|
56 ls->addr_text_max_len = NGX_INET_ADDRSTRLEN;
|
|
|
57 break;
|
|
|
58 default:
|
|
|
59 ls->addr_text_max_len = NGX_SOCKADDR_STRLEN;
|
|
|
60 break;
|
|
|
61 }
|
|
|
62
|
|
538
|
63 ls->addr_text.data = ngx_pnalloc(cf->pool, len);
|
|
|
64 if (ls->addr_text.data == NULL) {
|
|
|
65 return NULL;
|
|
|
66 }
|
|
|
67
|
|
|
68 ngx_memcpy(ls->addr_text.data, text, len);
|
|
|
69
|
|
|
70 ls->fd = (ngx_socket_t) -1;
|
|
|
71 ls->type = SOCK_STREAM;
|
|
|
72
|
|
486
|
73 ls->backlog = NGX_LISTEN_BACKLOG;
|
|
|
74 ls->rcvbuf = -1;
|
|
|
75 ls->sndbuf = -1;
|
|
0
|
76
|
|
|
77 return ls;
|
|
|
78 }
|
|
|
79
|
|
|
80
|
|
70
|
81 ngx_int_t
|
|
|
82 ngx_set_inherited_sockets(ngx_cycle_t *cycle)
|
|
0
|
83 {
|
|
72
|
84 size_t len;
|
|
|
85 ngx_uint_t i;
|
|
|
86 ngx_listening_t *ls;
|
|
112
|
87 socklen_t olen;
|
|
72
|
88 #if (NGX_HAVE_DEFERRED_ACCEPT && defined SO_ACCEPTFILTER)
|
|
90
|
89 ngx_err_t err;
|
|
72
|
90 struct accept_filter_arg af;
|
|
|
91 #endif
|
|
|
92 #if (NGX_HAVE_DEFERRED_ACCEPT && defined TCP_DEFER_ACCEPT)
|
|
|
93 int timeout;
|
|
|
94 #endif
|
|
0
|
95
|
|
|
96 ls = cycle->listening.elts;
|
|
|
97 for (i = 0; i < cycle->listening.nelts; i++) {
|
|
|
98
|
|
|
99 /* AF_INET only */
|
|
|
100
|
|
|
101 ls[i].sockaddr = ngx_palloc(cycle->pool, sizeof(struct sockaddr_in));
|
|
|
102 if (ls[i].sockaddr == NULL) {
|
|
|
103 return NGX_ERROR;
|
|
|
104 }
|
|
|
105
|
|
|
106 ls[i].socklen = sizeof(struct sockaddr_in);
|
|
|
107 if (getsockname(ls[i].fd, ls[i].sockaddr, &ls[i].socklen) == -1) {
|
|
|
108 ngx_log_error(NGX_LOG_CRIT, cycle->log, ngx_socket_errno,
|
|
|
109 "getsockname() of the inherited "
|
|
|
110 "socket #%d failed", ls[i].fd);
|
|
|
111 ls[i].ignore = 1;
|
|
|
112 continue;
|
|
|
113 }
|
|
|
114
|
|
448
|
115 switch (ls[i].sockaddr->sa_family) {
|
|
0
|
116
|
|
448
|
117 #if (NGX_HAVE_INET6)
|
|
|
118 case AF_INET6:
|
|
|
119 ls[i].addr_text_max_len = NGX_INET6_ADDRSTRLEN;
|
|
|
120 break;
|
|
|
121 #endif
|
|
|
122
|
|
|
123 case AF_INET:
|
|
|
124 ls[i].addr_text_max_len = NGX_INET_ADDRSTRLEN;
|
|
|
125 break;
|
|
|
126
|
|
|
127 default:
|
|
0
|
128 ngx_log_error(NGX_LOG_CRIT, cycle->log, ngx_socket_errno,
|
|
|
129 "the inherited socket #%d has "
|
|
448
|
130 "an unsupported protocol family", ls[i].fd);
|
|
0
|
131 ls[i].ignore = 1;
|
|
|
132 continue;
|
|
|
133 }
|
|
10
|
134
|
|
448
|
135 len = ls[i].addr_text_max_len + sizeof(":65535") - 1;
|
|
0
|
136
|
|
448
|
137 ls[i].addr_text.data = ngx_pnalloc(cycle->pool, len);
|
|
0
|
138 if (ls[i].addr_text.data == NULL) {
|
|
|
139 return NGX_ERROR;
|
|
|
140 }
|
|
|
141
|
|
448
|
142 len = ngx_sock_ntop(ls[i].sockaddr, ls[i].addr_text.data, len, 1);
|
|
10
|
143 if (len == 0) {
|
|
0
|
144 return NGX_ERROR;
|
|
|
145 }
|
|
10
|
146
|
|
448
|
147 ls[i].addr_text.len = len;
|
|
72
|
148
|
|
326
|
149 ls[i].backlog = NGX_LISTEN_BACKLOG;
|
|
86
|
150
|
|
112
|
151 olen = sizeof(int);
|
|
|
152
|
|
|
153 if (getsockopt(ls[i].fd, SOL_SOCKET, SO_RCVBUF, (void *) &ls[i].rcvbuf,
|
|
|
154 &olen)
|
|
|
155 == -1)
|
|
|
156 {
|
|
|
157 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_socket_errno,
|
|
|
158 "getsockopt(SO_RCVBUF) %V failed, ignored",
|
|
|
159 &ls[i].addr_text);
|
|
|
160
|
|
|
161 ls[i].rcvbuf = -1;
|
|
|
162 }
|
|
|
163
|
|
|
164 olen = sizeof(int);
|
|
|
165
|
|
|
166 if (getsockopt(ls[i].fd, SOL_SOCKET, SO_SNDBUF, (void *) &ls[i].sndbuf,
|
|
|
167 &olen)
|
|
|
168 == -1)
|
|
|
169 {
|
|
|
170 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_socket_errno,
|
|
|
171 "getsockopt(SO_SNDBUF) %V failed, ignored",
|
|
|
172 &ls[i].addr_text);
|
|
|
173
|
|
|
174 ls[i].sndbuf = -1;
|
|
|
175 }
|
|
|
176
|
|
72
|
177 #if (NGX_HAVE_DEFERRED_ACCEPT && defined SO_ACCEPTFILTER)
|
|
|
178
|
|
|
179 ngx_memzero(&af, sizeof(struct accept_filter_arg));
|
|
112
|
180 olen = sizeof(struct accept_filter_arg);
|
|
72
|
181
|
|
112
|
182 if (getsockopt(ls[i].fd, SOL_SOCKET, SO_ACCEPTFILTER, &af, &olen)
|
|
72
|
183 == -1)
|
|
|
184 {
|
|
90
|
185 err = ngx_errno;
|
|
|
186
|
|
|
187 if (err == NGX_EINVAL) {
|
|
|
188 continue;
|
|
|
189 }
|
|
|
190
|
|
|
191 ngx_log_error(NGX_LOG_NOTICE, cycle->log, err,
|
|
72
|
192 "getsockopt(SO_ACCEPTFILTER) for %V failed, ignored",
|
|
|
193 &ls[i].addr_text);
|
|
|
194 continue;
|
|
|
195 }
|
|
|
196
|
|
112
|
197 if (olen < sizeof(struct accept_filter_arg) || af.af_name[0] == '\0') {
|
|
72
|
198 continue;
|
|
|
199 }
|
|
|
200
|
|
|
201 ls[i].accept_filter = ngx_palloc(cycle->pool, 16);
|
|
|
202 if (ls[i].accept_filter == NULL) {
|
|
|
203 return NGX_ERROR;
|
|
|
204 }
|
|
|
205
|
|
|
206 (void) ngx_cpystrn((u_char *) ls[i].accept_filter,
|
|
|
207 (u_char *) af.af_name, 16);
|
|
|
208 #endif
|
|
|
209
|
|
|
210 #if (NGX_HAVE_DEFERRED_ACCEPT && defined TCP_DEFER_ACCEPT)
|
|
|
211
|
|
|
212 timeout = 0;
|
|
112
|
213 olen = sizeof(int);
|
|
72
|
214
|
|
112
|
215 if (getsockopt(ls[i].fd, IPPROTO_TCP, TCP_DEFER_ACCEPT, &timeout, &olen)
|
|
72
|
216 == -1)
|
|
|
217 {
|
|
|
218 ngx_log_error(NGX_LOG_NOTICE, cycle->log, ngx_errno,
|
|
|
219 "getsockopt(TCP_DEFER_ACCEPT) for %V failed, ignored",
|
|
|
220 &ls[i].addr_text);
|
|
|
221 continue;
|
|
|
222 }
|
|
|
223
|
|
114
|
224 if (olen < sizeof(int) || timeout == 0) {
|
|
72
|
225 continue;
|
|
|
226 }
|
|
|
227
|
|
|
228 ls[i].deferred_accept = 1;
|
|
|
229 #endif
|
|
0
|
230 }
|
|
|
231
|
|
|
232 return NGX_OK;
|
|
|
233 }
|
|
|
234
|
|
|
235
|
|
70
|
236 ngx_int_t
|
|
|
237 ngx_open_listening_sockets(ngx_cycle_t *cycle)
|
|
0
|
238 {
|
|
112
|
239 int reuseaddr;
|
|
|
240 ngx_uint_t i, tries, failed;
|
|
0
|
241 ngx_err_t err;
|
|
|
242 ngx_log_t *log;
|
|
|
243 ngx_socket_t s;
|
|
|
244 ngx_listening_t *ls;
|
|
|
245
|
|
|
246 reuseaddr = 1;
|
|
|
247 #if (NGX_SUPPRESS_WARN)
|
|
|
248 failed = 0;
|
|
|
249 #endif
|
|
|
250
|
|
|
251 log = cycle->log;
|
|
|
252
|
|
112
|
253 /* TODO: configurable try number */
|
|
0
|
254
|
|
378
|
255 for (tries = 5; tries; tries--) {
|
|
0
|
256 failed = 0;
|
|
|
257
|
|
|
258 /* for each listening socket */
|
|
|
259
|
|
|
260 ls = cycle->listening.elts;
|
|
|
261 for (i = 0; i < cycle->listening.nelts; i++) {
|
|
|
262
|
|
|
263 if (ls[i].ignore) {
|
|
|
264 continue;
|
|
|
265 }
|
|
|
266
|
|
|
267 if (ls[i].fd != -1) {
|
|
|
268 continue;
|
|
|
269 }
|
|
|
270
|
|
|
271 if (ls[i].inherited) {
|
|
|
272
|
|
|
273 /* TODO: close on exit */
|
|
|
274 /* TODO: nonblocking */
|
|
|
275 /* TODO: deferred accept */
|
|
|
276
|
|
|
277 continue;
|
|
|
278 }
|
|
|
279
|
|
400
|
280 s = ngx_socket(ls[i].sockaddr->sa_family, ls[i].type, 0);
|
|
0
|
281
|
|
|
282 if (s == -1) {
|
|
|
283 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
10
|
284 ngx_socket_n " %V failed", &ls[i].addr_text);
|
|
0
|
285 return NGX_ERROR;
|
|
|
286 }
|
|
|
287
|
|
|
288 if (setsockopt(s, SOL_SOCKET, SO_REUSEADDR,
|
|
112
|
289 (const void *) &reuseaddr, sizeof(int))
|
|
|
290 == -1)
|
|
|
291 {
|
|
0
|
292 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
10
|
293 "setsockopt(SO_REUSEADDR) %V failed",
|
|
|
294 &ls[i].addr_text);
|
|
112
|
295
|
|
306
|
296 if (ngx_close_socket(s) == -1) {
|
|
112
|
297 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
|
298 ngx_close_socket_n " %V failed",
|
|
|
299 &ls[i].addr_text);
|
|
306
|
300 }
|
|
112
|
301
|
|
0
|
302 return NGX_ERROR;
|
|
|
303 }
|
|
|
304
|
|
460
|
305 #if (NGX_HAVE_INET6 && defined IPV6_V6ONLY)
|
|
|
306
|
|
|
307 if (ls[i].sockaddr->sa_family == AF_INET6 && ls[i].ipv6only) {
|
|
|
308 int ipv6only;
|
|
|
309
|
|
|
310 ipv6only = (ls[i].ipv6only == 1);
|
|
|
311
|
|
|
312 if (setsockopt(s, IPPROTO_IPV6, IPV6_V6ONLY,
|
|
|
313 (const void *) &ipv6only, sizeof(int))
|
|
|
314 == -1)
|
|
|
315 {
|
|
486
|
316 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
460
|
317 "setsockopt(IPV6_V6ONLY) %V failed, ignored",
|
|
|
318 &ls[i].addr_text);
|
|
|
319 }
|
|
|
320 }
|
|
|
321 #endif
|
|
0
|
322 /* TODO: close on exit */
|
|
|
323
|
|
|
324 if (!(ngx_event_flags & NGX_USE_AIO_EVENT)) {
|
|
|
325 if (ngx_nonblocking(s) == -1) {
|
|
|
326 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
10
|
327 ngx_nonblocking_n " %V failed",
|
|
|
328 &ls[i].addr_text);
|
|
112
|
329
|
|
306
|
330 if (ngx_close_socket(s) == -1) {
|
|
112
|
331 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
|
332 ngx_close_socket_n " %V failed",
|
|
|
333 &ls[i].addr_text);
|
|
306
|
334 }
|
|
112
|
335
|
|
0
|
336 return NGX_ERROR;
|
|
|
337 }
|
|
|
338 }
|
|
|
339
|
|
486
|
340 ngx_log_debug2(NGX_LOG_DEBUG_CORE, log, 0,
|
|
142
|
341 "bind() %V #%d ", &ls[i].addr_text, s);
|
|
|
342
|
|
0
|
343 if (bind(s, ls[i].sockaddr, ls[i].socklen) == -1) {
|
|
|
344 err = ngx_socket_errno;
|
|
112
|
345
|
|
|
346 if (err == NGX_EADDRINUSE && ngx_test_config) {
|
|
|
347 continue;
|
|
|
348 }
|
|
|
349
|
|
0
|
350 ngx_log_error(NGX_LOG_EMERG, log, err,
|
|
10
|
351 "bind() to %V failed", &ls[i].addr_text);
|
|
0
|
352
|
|
306
|
353 if (ngx_close_socket(s) == -1) {
|
|
0
|
354 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
10
|
355 ngx_close_socket_n " %V failed",
|
|
|
356 &ls[i].addr_text);
|
|
306
|
357 }
|
|
0
|
358
|
|
112
|
359 if (err != NGX_EADDRINUSE) {
|
|
|
360 return NGX_ERROR;
|
|
|
361 }
|
|
|
362
|
|
0
|
363 failed = 1;
|
|
112
|
364
|
|
0
|
365 continue;
|
|
|
366 }
|
|
|
367
|
|
540
|
368 #if (NGX_HAVE_UNIX_DOMAIN)
|
|
|
369
|
|
|
370 if (ngx_test_config && ls[i].sockaddr->sa_family == AF_UNIX) {
|
|
|
371 u_char *name = ls[i].addr_text.data + sizeof("unix:") - 1;
|
|
|
372
|
|
|
373 if (ngx_delete_file(name) == -1) {
|
|
|
374 ngx_log_error(NGX_LOG_EMERG, cycle->log, ngx_socket_errno,
|
|
|
375 ngx_delete_file_n " %s failed", name);
|
|
|
376 }
|
|
|
377 }
|
|
|
378 #endif
|
|
|
379
|
|
306
|
380 if (listen(s, ls[i].backlog) == -1) {
|
|
|
381 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
|
382 "listen() to %V, backlog %d failed",
|
|
|
383 &ls[i].addr_text, ls[i].backlog);
|
|
|
384
|
|
|
385 if (ngx_close_socket(s) == -1) {
|
|
|
386 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
|
387 ngx_close_socket_n " %V failed",
|
|
|
388 &ls[i].addr_text);
|
|
|
389 }
|
|
|
390
|
|
|
391 return NGX_ERROR;
|
|
|
392 }
|
|
|
393
|
|
112
|
394 ls[i].listen = 1;
|
|
0
|
395
|
|
|
396 ls[i].fd = s;
|
|
|
397 }
|
|
|
398
|
|
112
|
399 if (!failed) {
|
|
0
|
400 break;
|
|
112
|
401 }
|
|
0
|
402
|
|
|
403 /* TODO: delay configurable */
|
|
|
404
|
|
|
405 ngx_log_error(NGX_LOG_NOTICE, log, 0,
|
|
|
406 "try again to bind() after 500ms");
|
|
112
|
407
|
|
0
|
408 ngx_msleep(500);
|
|
|
409 }
|
|
|
410
|
|
|
411 if (failed) {
|
|
26
|
412 ngx_log_error(NGX_LOG_EMERG, log, 0, "still could not bind()");
|
|
0
|
413 return NGX_ERROR;
|
|
|
414 }
|
|
|
415
|
|
|
416 return NGX_OK;
|
|
|
417 }
|
|
|
418
|
|
|
419
|
|
70
|
420 void
|
|
486
|
421 ngx_configure_listening_sockets(ngx_cycle_t *cycle)
|
|
112
|
422 {
|
|
|
423 ngx_uint_t i;
|
|
|
424 ngx_listening_t *ls;
|
|
|
425
|
|
|
426 #if (NGX_HAVE_DEFERRED_ACCEPT && defined SO_ACCEPTFILTER)
|
|
|
427 struct accept_filter_arg af;
|
|
|
428 #endif
|
|
|
429 #if (NGX_HAVE_DEFERRED_ACCEPT && defined TCP_DEFER_ACCEPT)
|
|
|
430 int timeout;
|
|
|
431 #endif
|
|
|
432
|
|
|
433 ls = cycle->listening.elts;
|
|
|
434 for (i = 0; i < cycle->listening.nelts; i++) {
|
|
|
435
|
|
486
|
436 ls[i].log = *ls[i].logp;
|
|
|
437
|
|
112
|
438 if (ls[i].rcvbuf != -1) {
|
|
|
439 if (setsockopt(ls[i].fd, SOL_SOCKET, SO_RCVBUF,
|
|
|
440 (const void *) &ls[i].rcvbuf, sizeof(int))
|
|
|
441 == -1)
|
|
|
442 {
|
|
|
443 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_socket_errno,
|
|
118
|
444 "setsockopt(SO_RCVBUF, %d) %V failed, ignored",
|
|
|
445 ls[i].rcvbuf, &ls[i].addr_text);
|
|
112
|
446 }
|
|
|
447 }
|
|
|
448
|
|
|
449 if (ls[i].sndbuf != -1) {
|
|
|
450 if (setsockopt(ls[i].fd, SOL_SOCKET, SO_SNDBUF,
|
|
|
451 (const void *) &ls[i].sndbuf, sizeof(int))
|
|
|
452 == -1)
|
|
|
453 {
|
|
|
454 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_socket_errno,
|
|
118
|
455 "setsockopt(SO_SNDBUF, %d) %V failed, ignored",
|
|
|
456 ls[i].sndbuf, &ls[i].addr_text);
|
|
112
|
457 }
|
|
|
458 }
|
|
|
459
|
|
184
|
460 #if 0
|
|
|
461 if (1) {
|
|
|
462 int tcp_nodelay = 1;
|
|
|
463
|
|
|
464 if (setsockopt(ls[i].fd, IPPROTO_TCP, TCP_NODELAY,
|
|
|
465 (const void *) &tcp_nodelay, sizeof(int))
|
|
|
466 == -1)
|
|
|
467 {
|
|
|
468 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_socket_errno,
|
|
|
469 "setsockopt(TCP_NODELAY) %V failed, ignored",
|
|
|
470 &ls[i].addr_text);
|
|
|
471 }
|
|
|
472 }
|
|
|
473 #endif
|
|
|
474
|
|
112
|
475 if (ls[i].listen) {
|
|
306
|
476
|
|
|
477 /* change backlog via listen() */
|
|
|
478
|
|
112
|
479 if (listen(ls[i].fd, ls[i].backlog) == -1) {
|
|
|
480 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_socket_errno,
|
|
306
|
481 "listen() to %V, backlog %d failed, ignored",
|
|
112
|
482 &ls[i].addr_text, ls[i].backlog);
|
|
|
483 }
|
|
|
484 }
|
|
|
485
|
|
|
486 /*
|
|
|
487 * setting deferred mode should be last operation on socket,
|
|
|
488 * because code may prematurely continue cycle on failure
|
|
|
489 */
|
|
|
490
|
|
|
491 #if (NGX_HAVE_DEFERRED_ACCEPT)
|
|
|
492
|
|
|
493 #ifdef SO_ACCEPTFILTER
|
|
|
494
|
|
176
|
495 if (ls[i].delete_deferred) {
|
|
|
496 if (setsockopt(ls[i].fd, SOL_SOCKET, SO_ACCEPTFILTER, NULL, 0)
|
|
|
497 == -1)
|
|
112
|
498 {
|
|
|
499 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_errno,
|
|
|
500 "setsockopt(SO_ACCEPTFILTER, NULL) "
|
|
|
501 "for %V failed, ignored",
|
|
176
|
502 &ls[i].addr_text);
|
|
112
|
503
|
|
176
|
504 if (ls[i].accept_filter) {
|
|
112
|
505 ngx_log_error(NGX_LOG_ALERT, cycle->log, 0,
|
|
|
506 "could not change the accept filter "
|
|
|
507 "to \"%s\" for %V, ignored",
|
|
176
|
508 ls[i].accept_filter, &ls[i].addr_text);
|
|
112
|
509 }
|
|
|
510
|
|
|
511 continue;
|
|
|
512 }
|
|
|
513
|
|
176
|
514 ls[i].deferred_accept = 0;
|
|
112
|
515 }
|
|
|
516
|
|
176
|
517 if (ls[i].add_deferred) {
|
|
112
|
518 ngx_memzero(&af, sizeof(struct accept_filter_arg));
|
|
|
519 (void) ngx_cpystrn((u_char *) af.af_name,
|
|
176
|
520 (u_char *) ls[i].accept_filter, 16);
|
|
112
|
521
|
|
176
|
522 if (setsockopt(ls[i].fd, SOL_SOCKET, SO_ACCEPTFILTER,
|
|
112
|
523 &af, sizeof(struct accept_filter_arg))
|
|
|
524 == -1)
|
|
|
525 {
|
|
|
526 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_errno,
|
|
|
527 "setsockopt(SO_ACCEPTFILTER, \"%s\") "
|
|
|
528 " for %V failed, ignored",
|
|
176
|
529 ls[i].accept_filter, &ls[i].addr_text);
|
|
112
|
530 continue;
|
|
|
531 }
|
|
|
532
|
|
176
|
533 ls[i].deferred_accept = 1;
|
|
112
|
534 }
|
|
|
535
|
|
|
536 #endif
|
|
|
537
|
|
|
538 #ifdef TCP_DEFER_ACCEPT
|
|
|
539
|
|
176
|
540 if (ls[i].add_deferred || ls[i].delete_deferred) {
|
|
112
|
541
|
|
176
|
542 if (ls[i].add_deferred) {
|
|
|
543 timeout = (int) (ls[i].post_accept_timeout / 1000);
|
|
112
|
544
|
|
|
545 } else {
|
|
|
546 timeout = 0;
|
|
|
547 }
|
|
|
548
|
|
176
|
549 if (setsockopt(ls[i].fd, IPPROTO_TCP, TCP_DEFER_ACCEPT,
|
|
112
|
550 &timeout, sizeof(int))
|
|
|
551 == -1)
|
|
|
552 {
|
|
|
553 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_errno,
|
|
|
554 "setsockopt(TCP_DEFER_ACCEPT, %d) for %V failed, "
|
|
|
555 "ignored",
|
|
176
|
556 timeout, &ls[i].addr_text);
|
|
112
|
557
|
|
|
558 continue;
|
|
|
559 }
|
|
|
560 }
|
|
|
561
|
|
176
|
562 if (ls[i].add_deferred) {
|
|
|
563 ls[i].deferred_accept = 1;
|
|
112
|
564 }
|
|
|
565
|
|
|
566 #endif
|
|
|
567
|
|
|
568 #endif /* NGX_HAVE_DEFERRED_ACCEPT */
|
|
|
569 }
|
|
|
570
|
|
|
571 return;
|
|
|
572 }
|
|
|
573
|
|
|
574
|
|
|
575 void
|
|
70
|
576 ngx_close_listening_sockets(ngx_cycle_t *cycle)
|
|
0
|
577 {
|
|
92
|
578 ngx_uint_t i;
|
|
|
579 ngx_listening_t *ls;
|
|
|
580 ngx_connection_t *c;
|
|
0
|
581
|
|
|
582 if (ngx_event_flags & NGX_USE_IOCP_EVENT) {
|
|
|
583 return;
|
|
|
584 }
|
|
|
585
|
|
|
586 ngx_accept_mutex_held = 0;
|
|
160
|
587 ngx_use_accept_mutex = 0;
|
|
0
|
588
|
|
|
589 ls = cycle->listening.elts;
|
|
|
590 for (i = 0; i < cycle->listening.nelts; i++) {
|
|
|
591
|
|
92
|
592 c = ls[i].connection;
|
|
0
|
593
|
|
480
|
594 if (c) {
|
|
|
595 if (c->read->active) {
|
|
|
596 if (ngx_event_flags & NGX_USE_RTSIG_EVENT) {
|
|
|
597 ngx_del_conn(c, NGX_CLOSE_EVENT);
|
|
362
|
598
|
|
480
|
599 } else if (ngx_event_flags & NGX_USE_EPOLL_EVENT) {
|
|
0
|
600
|
|
480
|
601 /*
|
|
|
602 * it seems that Linux-2.6.x OpenVZ sends events
|
|
|
603 * for closed shared listening sockets unless
|
|
|
604 * the events was explicity deleted
|
|
|
605 */
|
|
362
|
606
|
|
480
|
607 ngx_del_event(c->read, NGX_READ_EVENT, 0);
|
|
362
|
608
|
|
480
|
609 } else {
|
|
|
610 ngx_del_event(c->read, NGX_READ_EVENT, NGX_CLOSE_EVENT);
|
|
|
611 }
|
|
0
|
612 }
|
|
480
|
613
|
|
|
614 ngx_free_connection(c);
|
|
|
615
|
|
|
616 c->fd = (ngx_socket_t) -1;
|
|
0
|
617 }
|
|
|
618
|
|
112
|
619 ngx_log_debug2(NGX_LOG_DEBUG_CORE, cycle->log, 0,
|
|
|
620 "close listening %V #%d ", &ls[i].addr_text, ls[i].fd);
|
|
|
621
|
|
92
|
622 if (ngx_close_socket(ls[i].fd) == -1) {
|
|
0
|
623 ngx_log_error(NGX_LOG_EMERG, cycle->log, ngx_socket_errno,
|
|
10
|
624 ngx_close_socket_n " %V failed", &ls[i].addr_text);
|
|
0
|
625 }
|
|
498
|
626
|
|
538
|
627 #if (NGX_HAVE_UNIX_DOMAIN)
|
|
|
628
|
|
|
629 if (ls[i].sockaddr->sa_family == AF_UNIX
|
|
540
|
630 && ngx_process != NGX_PROCESS_WORKER
|
|
|
631 && ngx_new_binary == 0)
|
|
538
|
632 {
|
|
|
633 u_char *name = ls[i].addr_text.data + sizeof("unix:") - 1;
|
|
|
634
|
|
|
635 if (ngx_delete_file(name) == -1) {
|
|
|
636 ngx_log_error(NGX_LOG_EMERG, cycle->log, ngx_socket_errno,
|
|
|
637 ngx_delete_file_n " %s failed", name);
|
|
|
638 }
|
|
|
639 }
|
|
|
640
|
|
|
641 #endif
|
|
|
642
|
|
498
|
643 ls[i].fd = (ngx_socket_t) -1;
|
|
92
|
644 }
|
|
|
645 }
|
|
0
|
646
|
|
92
|
647
|
|
|
648 ngx_connection_t *
|
|
|
649 ngx_get_connection(ngx_socket_t s, ngx_log_t *log)
|
|
|
650 {
|
|
110
|
651 ngx_uint_t instance;
|
|
|
652 ngx_event_t *rev, *wev;
|
|
|
653 ngx_connection_t *c;
|
|
92
|
654
|
|
|
655 /* disable warning: Win32 SOCKET is u_int while UNIX socket is int */
|
|
|
656
|
|
|
657 if (ngx_cycle->files && (ngx_uint_t) s >= ngx_cycle->files_n) {
|
|
|
658 ngx_log_error(NGX_LOG_ALERT, log, 0,
|
|
|
659 "the new socket has number %d, "
|
|
|
660 "but only %ui files are available",
|
|
|
661 s, ngx_cycle->files_n);
|
|
|
662 return NULL;
|
|
|
663 }
|
|
|
664
|
|
|
665 /* ngx_mutex_lock */
|
|
|
666
|
|
|
667 c = ngx_cycle->free_connections;
|
|
|
668
|
|
|
669 if (c == NULL) {
|
|
|
670 ngx_log_error(NGX_LOG_ALERT, log, 0,
|
|
412
|
671 "%ui worker_connections are not enough",
|
|
92
|
672 ngx_cycle->connection_n);
|
|
|
673
|
|
|
674 /* ngx_mutex_unlock */
|
|
|
675
|
|
|
676 return NULL;
|
|
|
677 }
|
|
|
678
|
|
|
679 ngx_cycle->free_connections = c->data;
|
|
|
680 ngx_cycle->free_connection_n--;
|
|
|
681
|
|
|
682 /* ngx_mutex_unlock */
|
|
|
683
|
|
|
684 if (ngx_cycle->files) {
|
|
|
685 ngx_cycle->files[s] = c;
|
|
|
686 }
|
|
|
687
|
|
110
|
688 rev = c->read;
|
|
|
689 wev = c->write;
|
|
|
690
|
|
|
691 ngx_memzero(c, sizeof(ngx_connection_t));
|
|
|
692
|
|
|
693 c->read = rev;
|
|
|
694 c->write = wev;
|
|
|
695 c->fd = s;
|
|
|
696 c->log = log;
|
|
|
697
|
|
|
698 instance = rev->instance;
|
|
|
699
|
|
|
700 ngx_memzero(rev, sizeof(ngx_event_t));
|
|
|
701 ngx_memzero(wev, sizeof(ngx_event_t));
|
|
|
702
|
|
|
703 rev->instance = !instance;
|
|
|
704 wev->instance = !instance;
|
|
|
705
|
|
|
706 rev->index = NGX_INVALID_INDEX;
|
|
|
707 wev->index = NGX_INVALID_INDEX;
|
|
|
708
|
|
|
709 rev->data = c;
|
|
|
710 wev->data = c;
|
|
|
711
|
|
|
712 wev->write = 1;
|
|
|
713
|
|
92
|
714 return c;
|
|
|
715 }
|
|
|
716
|
|
|
717
|
|
|
718 void
|
|
|
719 ngx_free_connection(ngx_connection_t *c)
|
|
|
720 {
|
|
|
721 /* ngx_mutex_lock */
|
|
|
722
|
|
|
723 c->data = ngx_cycle->free_connections;
|
|
|
724 ngx_cycle->free_connections = c;
|
|
|
725 ngx_cycle->free_connection_n++;
|
|
|
726
|
|
|
727 /* ngx_mutex_unlock */
|
|
|
728
|
|
|
729 if (ngx_cycle->files) {
|
|
|
730 ngx_cycle->files[c->fd] = NULL;
|
|
0
|
731 }
|
|
|
732 }
|
|
|
733
|
|
|
734
|
|
70
|
735 void
|
|
|
736 ngx_close_connection(ngx_connection_t *c)
|
|
0
|
737 {
|
|
366
|
738 ngx_err_t err;
|
|
|
739 ngx_uint_t log_error, level;
|
|
0
|
740 ngx_socket_t fd;
|
|
|
741
|
|
28
|
742 if (c->fd == -1) {
|
|
0
|
743 ngx_log_error(NGX_LOG_ALERT, c->log, 0, "connection already closed");
|
|
|
744 return;
|
|
|
745 }
|
|
|
746
|
|
|
747 if (c->read->timer_set) {
|
|
|
748 ngx_del_timer(c->read);
|
|
|
749 }
|
|
126
|
750
|
|
0
|
751 if (c->write->timer_set) {
|
|
|
752 ngx_del_timer(c->write);
|
|
|
753 }
|
|
126
|
754
|
|
0
|
755 if (ngx_del_conn) {
|
|
|
756 ngx_del_conn(c, NGX_CLOSE_EVENT);
|
|
|
757
|
|
|
758 } else {
|
|
|
759 if (c->read->active || c->read->disabled) {
|
|
|
760 ngx_del_event(c->read, NGX_READ_EVENT, NGX_CLOSE_EVENT);
|
|
|
761 }
|
|
|
762
|
|
|
763 if (c->write->active || c->write->disabled) {
|
|
|
764 ngx_del_event(c->write, NGX_WRITE_EVENT, NGX_CLOSE_EVENT);
|
|
|
765 }
|
|
|
766 }
|
|
|
767
|
|
|
768 #if (NGX_THREADS)
|
|
|
769
|
|
|
770 /*
|
|
|
771 * we have to clean the connection information before the closing
|
|
|
772 * because another thread may reopen the same file descriptor
|
|
|
773 * before we clean the connection
|
|
|
774 */
|
|
|
775
|
|
112
|
776 ngx_mutex_lock(ngx_posted_events_mutex);
|
|
0
|
777
|
|
112
|
778 if (c->read->prev) {
|
|
|
779 ngx_delete_posted_event(c->read);
|
|
|
780 }
|
|
0
|
781
|
|
112
|
782 if (c->write->prev) {
|
|
|
783 ngx_delete_posted_event(c->write);
|
|
|
784 }
|
|
0
|
785
|
|
112
|
786 c->read->closed = 1;
|
|
|
787 c->write->closed = 1;
|
|
0
|
788
|
|
112
|
789 if (c->single_connection) {
|
|
|
790 ngx_unlock(&c->lock);
|
|
|
791 c->read->locked = 0;
|
|
|
792 c->write->locked = 0;
|
|
|
793 }
|
|
0
|
794
|
|
112
|
795 ngx_mutex_unlock(ngx_posted_events_mutex);
|
|
0
|
796
|
|
|
797 #else
|
|
|
798
|
|
|
799 if (c->read->prev) {
|
|
|
800 ngx_delete_posted_event(c->read);
|
|
|
801 }
|
|
|
802
|
|
|
803 if (c->write->prev) {
|
|
|
804 ngx_delete_posted_event(c->write);
|
|
|
805 }
|
|
|
806
|
|
|
807 c->read->closed = 1;
|
|
|
808 c->write->closed = 1;
|
|
|
809
|
|
|
810 #endif
|
|
|
811
|
|
366
|
812 log_error = c->log_error;
|
|
|
813
|
|
92
|
814 ngx_free_connection(c);
|
|
|
815
|
|
0
|
816 fd = c->fd;
|
|
|
817 c->fd = (ngx_socket_t) -1;
|
|
|
818
|
|
|
819 if (ngx_close_socket(fd) == -1) {
|
|
|
820
|
|
366
|
821 err = ngx_socket_errno;
|
|
|
822
|
|
|
823 if (err == NGX_ECONNRESET || err == NGX_ENOTCONN) {
|
|
|
824
|
|
|
825 switch (log_error) {
|
|
|
826
|
|
|
827 case NGX_ERROR_INFO:
|
|
|
828 level = NGX_LOG_INFO;
|
|
|
829 break;
|
|
|
830
|
|
|
831 case NGX_ERROR_ERR:
|
|
|
832 level = NGX_LOG_ERR;
|
|
|
833 break;
|
|
|
834
|
|
|
835 default:
|
|
|
836 level = NGX_LOG_CRIT;
|
|
|
837 }
|
|
|
838
|
|
|
839 } else {
|
|
|
840 level = NGX_LOG_CRIT;
|
|
|
841 }
|
|
|
842
|
|
0
|
843 /* we use ngx_cycle->log because c->log was in c->pool */
|
|
|
844
|
|
366
|
845 ngx_log_error(level, ngx_cycle->log, err,
|
|
332
|
846 ngx_close_socket_n " %d failed", fd);
|
|
0
|
847 }
|
|
|
848 }
|
|
|
849
|
|
|
850
|
|
70
|
851 ngx_int_t
|
|
492
|
852 ngx_connection_local_sockaddr(ngx_connection_t *c, ngx_str_t *s,
|
|
|
853 ngx_uint_t port)
|
|
|
854 {
|
|
|
855 socklen_t len;
|
|
|
856 ngx_uint_t addr;
|
|
|
857 u_char sa[NGX_SOCKADDRLEN];
|
|
|
858 struct sockaddr_in *sin;
|
|
|
859 #if (NGX_HAVE_INET6)
|
|
|
860 ngx_uint_t i;
|
|
|
861 struct sockaddr_in6 *sin6;
|
|
|
862 #endif
|
|
|
863
|
|
|
864 switch (c->local_sockaddr->sa_family) {
|
|
|
865
|
|
|
866 #if (NGX_HAVE_INET6)
|
|
|
867 case AF_INET6:
|
|
|
868 sin6 = (struct sockaddr_in6 *) c->local_sockaddr;
|
|
|
869
|
|
|
870 for (addr = 0, i = 0; addr == 0 && i < 16; i++) {
|
|
|
871 addr |= sin6->sin6_addr.s6_addr[i];
|
|
|
872 }
|
|
|
873
|
|
|
874 break;
|
|
|
875 #endif
|
|
|
876
|
|
|
877 default: /* AF_INET */
|
|
|
878 sin = (struct sockaddr_in *) c->local_sockaddr;
|
|
|
879 addr = sin->sin_addr.s_addr;
|
|
|
880 break;
|
|
|
881 }
|
|
|
882
|
|
|
883 if (addr == 0) {
|
|
|
884
|
|
|
885 len = NGX_SOCKADDRLEN;
|
|
|
886
|
|
|
887 if (getsockname(c->fd, (struct sockaddr *) &sa, &len) == -1) {
|
|
|
888 ngx_connection_error(c, ngx_socket_errno, "getsockname() failed");
|
|
|
889 return NGX_ERROR;
|
|
|
890 }
|
|
|
891
|
|
|
892 c->local_sockaddr = ngx_palloc(c->pool, len);
|
|
|
893 if (c->local_sockaddr == NULL) {
|
|
|
894 return NGX_ERROR;
|
|
|
895 }
|
|
|
896
|
|
|
897 ngx_memcpy(c->local_sockaddr, &sa, len);
|
|
|
898 }
|
|
|
899
|
|
|
900 if (s == NULL) {
|
|
|
901 return NGX_OK;
|
|
|
902 }
|
|
|
903
|
|
|
904 s->len = ngx_sock_ntop(c->local_sockaddr, s->data, s->len, port);
|
|
|
905
|
|
|
906 return NGX_OK;
|
|
|
907 }
|
|
|
908
|
|
|
909
|
|
|
910 ngx_int_t
|
|
70
|
911 ngx_connection_error(ngx_connection_t *c, ngx_err_t err, char *text)
|
|
0
|
912 {
|
|
|
913 ngx_uint_t level;
|
|
|
914
|
|
484
|
915 /* Winsock may return NGX_ECONNABORTED instead of NGX_ECONNRESET */
|
|
|
916
|
|
|
917 if ((err == NGX_ECONNRESET
|
|
|
918 #if (NGX_WIN32)
|
|
|
919 || err == NGX_ECONNABORTED
|
|
|
920 #endif
|
|
|
921 ) && c->log_error == NGX_ERROR_IGNORE_ECONNRESET)
|
|
|
922 {
|
|
0
|
923 return 0;
|
|
|
924 }
|
|
|
925
|
|
460
|
926 #if (NGX_SOLARIS)
|
|
|
927 if (err == NGX_EINVAL && c->log_error == NGX_ERROR_IGNORE_EINVAL) {
|
|
|
928 return 0;
|
|
|
929 }
|
|
|
930 #endif
|
|
|
931
|
|
86
|
932 if (err == 0
|
|
|
933 || err == NGX_ECONNRESET
|
|
484
|
934 #if (NGX_WIN32)
|
|
|
935 || err == NGX_ECONNABORTED
|
|
|
936 #else
|
|
0
|
937 || err == NGX_EPIPE
|
|
|
938 #endif
|
|
|
939 || err == NGX_ENOTCONN
|
|
136
|
940 || err == NGX_ETIMEDOUT
|
|
0
|
941 || err == NGX_ECONNREFUSED
|
|
364
|
942 || err == NGX_ENETDOWN
|
|
|
943 || err == NGX_ENETUNREACH
|
|
|
944 || err == NGX_EHOSTDOWN
|
|
0
|
945 || err == NGX_EHOSTUNREACH)
|
|
|
946 {
|
|
|
947 switch (c->log_error) {
|
|
|
948
|
|
460
|
949 case NGX_ERROR_IGNORE_EINVAL:
|
|
0
|
950 case NGX_ERROR_IGNORE_ECONNRESET:
|
|
|
951 case NGX_ERROR_INFO:
|
|
|
952 level = NGX_LOG_INFO;
|
|
|
953 break;
|
|
|
954
|
|
530
|
955 default:
|
|
0
|
956 level = NGX_LOG_ERR;
|
|
|
957 }
|
|
|
958
|
|
|
959 } else {
|
|
366
|
960 level = NGX_LOG_ALERT;
|
|
0
|
961 }
|
|
|
962
|
|
|
963 ngx_log_error(level, c->log, err, text);
|
|
|
964
|
|
|
965 return NGX_ERROR;
|
|
|
966 }
|
