|
0
|
1
|
|
|
2 /*
|
|
|
3 * Copyright (C) Igor Sysoev
|
|
|
4 */
|
|
|
5
|
|
|
6
|
|
|
7 #include <ngx_config.h>
|
|
|
8 #include <ngx_core.h>
|
|
|
9 #include <ngx_event.h>
|
|
|
10
|
|
|
11
|
|
|
12 ngx_os_io_t ngx_io;
|
|
|
13
|
|
|
14
|
|
70
|
15 ngx_listening_t *
|
|
495
|
16 ngx_create_listening(ngx_conf_t *cf, void *sockaddr, socklen_t socklen)
|
|
0
|
17 {
|
|
550
|
18 size_t len;
|
|
495
|
19 ngx_listening_t *ls;
|
|
|
20 struct sockaddr *sa;
|
|
|
21 u_char text[NGX_SOCKADDR_STRLEN];
|
|
0
|
22
|
|
50
|
23 ls = ngx_array_push(&cf->cycle->listening);
|
|
|
24 if (ls == NULL) {
|
|
0
|
25 return NULL;
|
|
|
26 }
|
|
|
27
|
|
|
28 ngx_memzero(ls, sizeof(ngx_listening_t));
|
|
|
29
|
|
495
|
30 sa = ngx_palloc(cf->pool, socklen);
|
|
|
31 if (sa == NULL) {
|
|
0
|
32 return NULL;
|
|
|
33 }
|
|
|
34
|
|
495
|
35 ngx_memcpy(sa, sockaddr, socklen);
|
|
0
|
36
|
|
495
|
37 ls->sockaddr = sa;
|
|
|
38 ls->socklen = socklen;
|
|
10
|
39
|
|
550
|
40 len = ngx_sock_ntop(sa, text, NGX_SOCKADDR_STRLEN, 1);
|
|
|
41 ls->addr_text.len = len;
|
|
495
|
42
|
|
|
43 switch (ls->sockaddr->sa_family) {
|
|
|
44 #if (NGX_HAVE_INET6)
|
|
|
45 case AF_INET6:
|
|
|
46 ls->addr_text_max_len = NGX_INET6_ADDRSTRLEN;
|
|
|
47 break;
|
|
|
48 #endif
|
|
550
|
49 #if (NGX_HAVE_UNIX_DOMAIN)
|
|
|
50 case AF_UNIX:
|
|
|
51 ls->addr_text_max_len = NGX_UNIX_ADDRSTRLEN;
|
|
|
52 len++;
|
|
|
53 break;
|
|
|
54 #endif
|
|
495
|
55 case AF_INET:
|
|
|
56 ls->addr_text_max_len = NGX_INET_ADDRSTRLEN;
|
|
|
57 break;
|
|
|
58 default:
|
|
|
59 ls->addr_text_max_len = NGX_SOCKADDR_STRLEN;
|
|
|
60 break;
|
|
|
61 }
|
|
|
62
|
|
550
|
63 ls->addr_text.data = ngx_pnalloc(cf->pool, len);
|
|
|
64 if (ls->addr_text.data == NULL) {
|
|
|
65 return NULL;
|
|
|
66 }
|
|
|
67
|
|
|
68 ngx_memcpy(ls->addr_text.data, text, len);
|
|
|
69
|
|
|
70 ls->fd = (ngx_socket_t) -1;
|
|
|
71 ls->type = SOCK_STREAM;
|
|
|
72
|
|
495
|
73 ls->backlog = NGX_LISTEN_BACKLOG;
|
|
|
74 ls->rcvbuf = -1;
|
|
|
75 ls->sndbuf = -1;
|
|
0
|
76
|
|
|
77 return ls;
|
|
|
78 }
|
|
|
79
|
|
|
80
|
|
70
|
81 ngx_int_t
|
|
|
82 ngx_set_inherited_sockets(ngx_cycle_t *cycle)
|
|
0
|
83 {
|
|
72
|
84 size_t len;
|
|
|
85 ngx_uint_t i;
|
|
|
86 ngx_listening_t *ls;
|
|
112
|
87 socklen_t olen;
|
|
72
|
88 #if (NGX_HAVE_DEFERRED_ACCEPT && defined SO_ACCEPTFILTER)
|
|
90
|
89 ngx_err_t err;
|
|
72
|
90 struct accept_filter_arg af;
|
|
|
91 #endif
|
|
|
92 #if (NGX_HAVE_DEFERRED_ACCEPT && defined TCP_DEFER_ACCEPT)
|
|
|
93 int timeout;
|
|
|
94 #endif
|
|
0
|
95
|
|
|
96 ls = cycle->listening.elts;
|
|
|
97 for (i = 0; i < cycle->listening.nelts; i++) {
|
|
|
98
|
|
|
99 /* AF_INET only */
|
|
|
100
|
|
|
101 ls[i].sockaddr = ngx_palloc(cycle->pool, sizeof(struct sockaddr_in));
|
|
|
102 if (ls[i].sockaddr == NULL) {
|
|
|
103 return NGX_ERROR;
|
|
|
104 }
|
|
|
105
|
|
|
106 ls[i].socklen = sizeof(struct sockaddr_in);
|
|
|
107 if (getsockname(ls[i].fd, ls[i].sockaddr, &ls[i].socklen) == -1) {
|
|
|
108 ngx_log_error(NGX_LOG_CRIT, cycle->log, ngx_socket_errno,
|
|
|
109 "getsockname() of the inherited "
|
|
|
110 "socket #%d failed", ls[i].fd);
|
|
|
111 ls[i].ignore = 1;
|
|
|
112 continue;
|
|
|
113 }
|
|
|
114
|
|
457
|
115 switch (ls[i].sockaddr->sa_family) {
|
|
0
|
116
|
|
457
|
117 #if (NGX_HAVE_INET6)
|
|
|
118 case AF_INET6:
|
|
|
119 ls[i].addr_text_max_len = NGX_INET6_ADDRSTRLEN;
|
|
|
120 break;
|
|
|
121 #endif
|
|
|
122
|
|
|
123 case AF_INET:
|
|
|
124 ls[i].addr_text_max_len = NGX_INET_ADDRSTRLEN;
|
|
|
125 break;
|
|
|
126
|
|
|
127 default:
|
|
0
|
128 ngx_log_error(NGX_LOG_CRIT, cycle->log, ngx_socket_errno,
|
|
|
129 "the inherited socket #%d has "
|
|
457
|
130 "an unsupported protocol family", ls[i].fd);
|
|
0
|
131 ls[i].ignore = 1;
|
|
|
132 continue;
|
|
|
133 }
|
|
10
|
134
|
|
457
|
135 len = ls[i].addr_text_max_len + sizeof(":65535") - 1;
|
|
0
|
136
|
|
457
|
137 ls[i].addr_text.data = ngx_pnalloc(cycle->pool, len);
|
|
0
|
138 if (ls[i].addr_text.data == NULL) {
|
|
|
139 return NGX_ERROR;
|
|
|
140 }
|
|
|
141
|
|
457
|
142 len = ngx_sock_ntop(ls[i].sockaddr, ls[i].addr_text.data, len, 1);
|
|
10
|
143 if (len == 0) {
|
|
0
|
144 return NGX_ERROR;
|
|
|
145 }
|
|
10
|
146
|
|
457
|
147 ls[i].addr_text.len = len;
|
|
72
|
148
|
|
326
|
149 ls[i].backlog = NGX_LISTEN_BACKLOG;
|
|
86
|
150
|
|
112
|
151 olen = sizeof(int);
|
|
|
152
|
|
|
153 if (getsockopt(ls[i].fd, SOL_SOCKET, SO_RCVBUF, (void *) &ls[i].rcvbuf,
|
|
|
154 &olen)
|
|
|
155 == -1)
|
|
|
156 {
|
|
|
157 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_socket_errno,
|
|
|
158 "getsockopt(SO_RCVBUF) %V failed, ignored",
|
|
|
159 &ls[i].addr_text);
|
|
|
160
|
|
|
161 ls[i].rcvbuf = -1;
|
|
|
162 }
|
|
|
163
|
|
|
164 olen = sizeof(int);
|
|
|
165
|
|
|
166 if (getsockopt(ls[i].fd, SOL_SOCKET, SO_SNDBUF, (void *) &ls[i].sndbuf,
|
|
|
167 &olen)
|
|
|
168 == -1)
|
|
|
169 {
|
|
|
170 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_socket_errno,
|
|
|
171 "getsockopt(SO_SNDBUF) %V failed, ignored",
|
|
|
172 &ls[i].addr_text);
|
|
|
173
|
|
|
174 ls[i].sndbuf = -1;
|
|
|
175 }
|
|
|
176
|
|
72
|
177 #if (NGX_HAVE_DEFERRED_ACCEPT && defined SO_ACCEPTFILTER)
|
|
|
178
|
|
|
179 ngx_memzero(&af, sizeof(struct accept_filter_arg));
|
|
112
|
180 olen = sizeof(struct accept_filter_arg);
|
|
72
|
181
|
|
112
|
182 if (getsockopt(ls[i].fd, SOL_SOCKET, SO_ACCEPTFILTER, &af, &olen)
|
|
72
|
183 == -1)
|
|
|
184 {
|
|
90
|
185 err = ngx_errno;
|
|
|
186
|
|
|
187 if (err == NGX_EINVAL) {
|
|
|
188 continue;
|
|
|
189 }
|
|
|
190
|
|
|
191 ngx_log_error(NGX_LOG_NOTICE, cycle->log, err,
|
|
72
|
192 "getsockopt(SO_ACCEPTFILTER) for %V failed, ignored",
|
|
|
193 &ls[i].addr_text);
|
|
|
194 continue;
|
|
|
195 }
|
|
|
196
|
|
112
|
197 if (olen < sizeof(struct accept_filter_arg) || af.af_name[0] == '\0') {
|
|
72
|
198 continue;
|
|
|
199 }
|
|
|
200
|
|
|
201 ls[i].accept_filter = ngx_palloc(cycle->pool, 16);
|
|
|
202 if (ls[i].accept_filter == NULL) {
|
|
|
203 return NGX_ERROR;
|
|
|
204 }
|
|
|
205
|
|
|
206 (void) ngx_cpystrn((u_char *) ls[i].accept_filter,
|
|
|
207 (u_char *) af.af_name, 16);
|
|
|
208 #endif
|
|
|
209
|
|
|
210 #if (NGX_HAVE_DEFERRED_ACCEPT && defined TCP_DEFER_ACCEPT)
|
|
|
211
|
|
|
212 timeout = 0;
|
|
112
|
213 olen = sizeof(int);
|
|
72
|
214
|
|
112
|
215 if (getsockopt(ls[i].fd, IPPROTO_TCP, TCP_DEFER_ACCEPT, &timeout, &olen)
|
|
72
|
216 == -1)
|
|
|
217 {
|
|
|
218 ngx_log_error(NGX_LOG_NOTICE, cycle->log, ngx_errno,
|
|
|
219 "getsockopt(TCP_DEFER_ACCEPT) for %V failed, ignored",
|
|
|
220 &ls[i].addr_text);
|
|
|
221 continue;
|
|
|
222 }
|
|
|
223
|
|
114
|
224 if (olen < sizeof(int) || timeout == 0) {
|
|
72
|
225 continue;
|
|
|
226 }
|
|
|
227
|
|
|
228 ls[i].deferred_accept = 1;
|
|
|
229 #endif
|
|
0
|
230 }
|
|
|
231
|
|
|
232 return NGX_OK;
|
|
|
233 }
|
|
|
234
|
|
|
235
|
|
70
|
236 ngx_int_t
|
|
|
237 ngx_open_listening_sockets(ngx_cycle_t *cycle)
|
|
0
|
238 {
|
|
112
|
239 int reuseaddr;
|
|
|
240 ngx_uint_t i, tries, failed;
|
|
0
|
241 ngx_err_t err;
|
|
|
242 ngx_log_t *log;
|
|
|
243 ngx_socket_t s;
|
|
|
244 ngx_listening_t *ls;
|
|
|
245
|
|
|
246 reuseaddr = 1;
|
|
|
247 #if (NGX_SUPPRESS_WARN)
|
|
|
248 failed = 0;
|
|
|
249 #endif
|
|
|
250
|
|
|
251 log = cycle->log;
|
|
|
252
|
|
112
|
253 /* TODO: configurable try number */
|
|
0
|
254
|
|
378
|
255 for (tries = 5; tries; tries--) {
|
|
0
|
256 failed = 0;
|
|
|
257
|
|
|
258 /* for each listening socket */
|
|
|
259
|
|
|
260 ls = cycle->listening.elts;
|
|
|
261 for (i = 0; i < cycle->listening.nelts; i++) {
|
|
|
262
|
|
|
263 if (ls[i].ignore) {
|
|
|
264 continue;
|
|
|
265 }
|
|
|
266
|
|
|
267 if (ls[i].fd != -1) {
|
|
|
268 continue;
|
|
|
269 }
|
|
|
270
|
|
|
271 if (ls[i].inherited) {
|
|
|
272
|
|
|
273 /* TODO: close on exit */
|
|
|
274 /* TODO: nonblocking */
|
|
|
275 /* TODO: deferred accept */
|
|
|
276
|
|
|
277 continue;
|
|
|
278 }
|
|
|
279
|
|
406
|
280 s = ngx_socket(ls[i].sockaddr->sa_family, ls[i].type, 0);
|
|
0
|
281
|
|
|
282 if (s == -1) {
|
|
|
283 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
10
|
284 ngx_socket_n " %V failed", &ls[i].addr_text);
|
|
0
|
285 return NGX_ERROR;
|
|
|
286 }
|
|
|
287
|
|
|
288 if (setsockopt(s, SOL_SOCKET, SO_REUSEADDR,
|
|
112
|
289 (const void *) &reuseaddr, sizeof(int))
|
|
|
290 == -1)
|
|
|
291 {
|
|
0
|
292 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
10
|
293 "setsockopt(SO_REUSEADDR) %V failed",
|
|
|
294 &ls[i].addr_text);
|
|
112
|
295
|
|
306
|
296 if (ngx_close_socket(s) == -1) {
|
|
112
|
297 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
|
298 ngx_close_socket_n " %V failed",
|
|
|
299 &ls[i].addr_text);
|
|
306
|
300 }
|
|
112
|
301
|
|
0
|
302 return NGX_ERROR;
|
|
|
303 }
|
|
|
304
|
|
469
|
305 #if (NGX_HAVE_INET6 && defined IPV6_V6ONLY)
|
|
|
306
|
|
|
307 if (ls[i].sockaddr->sa_family == AF_INET6 && ls[i].ipv6only) {
|
|
|
308 int ipv6only;
|
|
|
309
|
|
|
310 ipv6only = (ls[i].ipv6only == 1);
|
|
|
311
|
|
|
312 if (setsockopt(s, IPPROTO_IPV6, IPV6_V6ONLY,
|
|
|
313 (const void *) &ipv6only, sizeof(int))
|
|
|
314 == -1)
|
|
|
315 {
|
|
495
|
316 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
469
|
317 "setsockopt(IPV6_V6ONLY) %V failed, ignored",
|
|
|
318 &ls[i].addr_text);
|
|
|
319 }
|
|
|
320 }
|
|
|
321 #endif
|
|
0
|
322 /* TODO: close on exit */
|
|
|
323
|
|
|
324 if (!(ngx_event_flags & NGX_USE_AIO_EVENT)) {
|
|
|
325 if (ngx_nonblocking(s) == -1) {
|
|
|
326 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
10
|
327 ngx_nonblocking_n " %V failed",
|
|
|
328 &ls[i].addr_text);
|
|
112
|
329
|
|
306
|
330 if (ngx_close_socket(s) == -1) {
|
|
112
|
331 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
|
332 ngx_close_socket_n " %V failed",
|
|
|
333 &ls[i].addr_text);
|
|
306
|
334 }
|
|
112
|
335
|
|
0
|
336 return NGX_ERROR;
|
|
|
337 }
|
|
|
338 }
|
|
|
339
|
|
495
|
340 ngx_log_debug2(NGX_LOG_DEBUG_CORE, log, 0,
|
|
142
|
341 "bind() %V #%d ", &ls[i].addr_text, s);
|
|
|
342
|
|
0
|
343 if (bind(s, ls[i].sockaddr, ls[i].socklen) == -1) {
|
|
|
344 err = ngx_socket_errno;
|
|
112
|
345
|
|
|
346 if (err == NGX_EADDRINUSE && ngx_test_config) {
|
|
|
347 continue;
|
|
|
348 }
|
|
|
349
|
|
0
|
350 ngx_log_error(NGX_LOG_EMERG, log, err,
|
|
10
|
351 "bind() to %V failed", &ls[i].addr_text);
|
|
0
|
352
|
|
306
|
353 if (ngx_close_socket(s) == -1) {
|
|
0
|
354 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
10
|
355 ngx_close_socket_n " %V failed",
|
|
|
356 &ls[i].addr_text);
|
|
306
|
357 }
|
|
0
|
358
|
|
112
|
359 if (err != NGX_EADDRINUSE) {
|
|
|
360 return NGX_ERROR;
|
|
|
361 }
|
|
|
362
|
|
0
|
363 failed = 1;
|
|
112
|
364
|
|
0
|
365 continue;
|
|
|
366 }
|
|
|
367
|
|
306
|
368 if (listen(s, ls[i].backlog) == -1) {
|
|
|
369 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
|
370 "listen() to %V, backlog %d failed",
|
|
|
371 &ls[i].addr_text, ls[i].backlog);
|
|
|
372
|
|
|
373 if (ngx_close_socket(s) == -1) {
|
|
|
374 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
|
375 ngx_close_socket_n " %V failed",
|
|
|
376 &ls[i].addr_text);
|
|
|
377 }
|
|
|
378
|
|
|
379 return NGX_ERROR;
|
|
|
380 }
|
|
|
381
|
|
112
|
382 ls[i].listen = 1;
|
|
0
|
383
|
|
|
384 ls[i].fd = s;
|
|
|
385 }
|
|
|
386
|
|
112
|
387 if (!failed) {
|
|
0
|
388 break;
|
|
112
|
389 }
|
|
0
|
390
|
|
|
391 /* TODO: delay configurable */
|
|
|
392
|
|
|
393 ngx_log_error(NGX_LOG_NOTICE, log, 0,
|
|
|
394 "try again to bind() after 500ms");
|
|
112
|
395
|
|
0
|
396 ngx_msleep(500);
|
|
|
397 }
|
|
|
398
|
|
|
399 if (failed) {
|
|
26
|
400 ngx_log_error(NGX_LOG_EMERG, log, 0, "still could not bind()");
|
|
0
|
401 return NGX_ERROR;
|
|
|
402 }
|
|
|
403
|
|
|
404 return NGX_OK;
|
|
|
405 }
|
|
|
406
|
|
|
407
|
|
70
|
408 void
|
|
495
|
409 ngx_configure_listening_sockets(ngx_cycle_t *cycle)
|
|
112
|
410 {
|
|
|
411 ngx_uint_t i;
|
|
|
412 ngx_listening_t *ls;
|
|
|
413
|
|
|
414 #if (NGX_HAVE_DEFERRED_ACCEPT && defined SO_ACCEPTFILTER)
|
|
|
415 struct accept_filter_arg af;
|
|
|
416 #endif
|
|
|
417 #if (NGX_HAVE_DEFERRED_ACCEPT && defined TCP_DEFER_ACCEPT)
|
|
|
418 int timeout;
|
|
|
419 #endif
|
|
|
420
|
|
|
421 ls = cycle->listening.elts;
|
|
|
422 for (i = 0; i < cycle->listening.nelts; i++) {
|
|
|
423
|
|
495
|
424 ls[i].log = *ls[i].logp;
|
|
|
425
|
|
112
|
426 if (ls[i].rcvbuf != -1) {
|
|
|
427 if (setsockopt(ls[i].fd, SOL_SOCKET, SO_RCVBUF,
|
|
|
428 (const void *) &ls[i].rcvbuf, sizeof(int))
|
|
|
429 == -1)
|
|
|
430 {
|
|
|
431 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_socket_errno,
|
|
118
|
432 "setsockopt(SO_RCVBUF, %d) %V failed, ignored",
|
|
|
433 ls[i].rcvbuf, &ls[i].addr_text);
|
|
112
|
434 }
|
|
|
435 }
|
|
|
436
|
|
|
437 if (ls[i].sndbuf != -1) {
|
|
|
438 if (setsockopt(ls[i].fd, SOL_SOCKET, SO_SNDBUF,
|
|
|
439 (const void *) &ls[i].sndbuf, sizeof(int))
|
|
|
440 == -1)
|
|
|
441 {
|
|
|
442 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_socket_errno,
|
|
118
|
443 "setsockopt(SO_SNDBUF, %d) %V failed, ignored",
|
|
|
444 ls[i].sndbuf, &ls[i].addr_text);
|
|
112
|
445 }
|
|
|
446 }
|
|
|
447
|
|
184
|
448 #if 0
|
|
|
449 if (1) {
|
|
|
450 int tcp_nodelay = 1;
|
|
|
451
|
|
|
452 if (setsockopt(ls[i].fd, IPPROTO_TCP, TCP_NODELAY,
|
|
|
453 (const void *) &tcp_nodelay, sizeof(int))
|
|
|
454 == -1)
|
|
|
455 {
|
|
|
456 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_socket_errno,
|
|
|
457 "setsockopt(TCP_NODELAY) %V failed, ignored",
|
|
|
458 &ls[i].addr_text);
|
|
|
459 }
|
|
|
460 }
|
|
|
461 #endif
|
|
|
462
|
|
112
|
463 if (ls[i].listen) {
|
|
306
|
464
|
|
|
465 /* change backlog via listen() */
|
|
|
466
|
|
112
|
467 if (listen(ls[i].fd, ls[i].backlog) == -1) {
|
|
|
468 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_socket_errno,
|
|
306
|
469 "listen() to %V, backlog %d failed, ignored",
|
|
112
|
470 &ls[i].addr_text, ls[i].backlog);
|
|
|
471 }
|
|
|
472 }
|
|
|
473
|
|
|
474 /*
|
|
|
475 * setting deferred mode should be last operation on socket,
|
|
|
476 * because code may prematurely continue cycle on failure
|
|
|
477 */
|
|
|
478
|
|
|
479 #if (NGX_HAVE_DEFERRED_ACCEPT)
|
|
|
480
|
|
|
481 #ifdef SO_ACCEPTFILTER
|
|
|
482
|
|
176
|
483 if (ls[i].delete_deferred) {
|
|
|
484 if (setsockopt(ls[i].fd, SOL_SOCKET, SO_ACCEPTFILTER, NULL, 0)
|
|
|
485 == -1)
|
|
112
|
486 {
|
|
|
487 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_errno,
|
|
|
488 "setsockopt(SO_ACCEPTFILTER, NULL) "
|
|
|
489 "for %V failed, ignored",
|
|
176
|
490 &ls[i].addr_text);
|
|
112
|
491
|
|
176
|
492 if (ls[i].accept_filter) {
|
|
112
|
493 ngx_log_error(NGX_LOG_ALERT, cycle->log, 0,
|
|
|
494 "could not change the accept filter "
|
|
|
495 "to \"%s\" for %V, ignored",
|
|
176
|
496 ls[i].accept_filter, &ls[i].addr_text);
|
|
112
|
497 }
|
|
|
498
|
|
|
499 continue;
|
|
|
500 }
|
|
|
501
|
|
176
|
502 ls[i].deferred_accept = 0;
|
|
112
|
503 }
|
|
|
504
|
|
176
|
505 if (ls[i].add_deferred) {
|
|
112
|
506 ngx_memzero(&af, sizeof(struct accept_filter_arg));
|
|
|
507 (void) ngx_cpystrn((u_char *) af.af_name,
|
|
176
|
508 (u_char *) ls[i].accept_filter, 16);
|
|
112
|
509
|
|
176
|
510 if (setsockopt(ls[i].fd, SOL_SOCKET, SO_ACCEPTFILTER,
|
|
112
|
511 &af, sizeof(struct accept_filter_arg))
|
|
|
512 == -1)
|
|
|
513 {
|
|
|
514 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_errno,
|
|
|
515 "setsockopt(SO_ACCEPTFILTER, \"%s\") "
|
|
|
516 " for %V failed, ignored",
|
|
176
|
517 ls[i].accept_filter, &ls[i].addr_text);
|
|
112
|
518 continue;
|
|
|
519 }
|
|
|
520
|
|
176
|
521 ls[i].deferred_accept = 1;
|
|
112
|
522 }
|
|
|
523
|
|
|
524 #endif
|
|
|
525
|
|
|
526 #ifdef TCP_DEFER_ACCEPT
|
|
|
527
|
|
176
|
528 if (ls[i].add_deferred || ls[i].delete_deferred) {
|
|
112
|
529
|
|
176
|
530 if (ls[i].add_deferred) {
|
|
|
531 timeout = (int) (ls[i].post_accept_timeout / 1000);
|
|
112
|
532
|
|
|
533 } else {
|
|
|
534 timeout = 0;
|
|
|
535 }
|
|
|
536
|
|
176
|
537 if (setsockopt(ls[i].fd, IPPROTO_TCP, TCP_DEFER_ACCEPT,
|
|
112
|
538 &timeout, sizeof(int))
|
|
|
539 == -1)
|
|
|
540 {
|
|
|
541 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_errno,
|
|
|
542 "setsockopt(TCP_DEFER_ACCEPT, %d) for %V failed, "
|
|
|
543 "ignored",
|
|
176
|
544 timeout, &ls[i].addr_text);
|
|
112
|
545
|
|
|
546 continue;
|
|
|
547 }
|
|
|
548 }
|
|
|
549
|
|
176
|
550 if (ls[i].add_deferred) {
|
|
|
551 ls[i].deferred_accept = 1;
|
|
112
|
552 }
|
|
|
553
|
|
|
554 #endif
|
|
|
555
|
|
|
556 #endif /* NGX_HAVE_DEFERRED_ACCEPT */
|
|
|
557 }
|
|
|
558
|
|
|
559 return;
|
|
|
560 }
|
|
|
561
|
|
|
562
|
|
|
563 void
|
|
70
|
564 ngx_close_listening_sockets(ngx_cycle_t *cycle)
|
|
0
|
565 {
|
|
92
|
566 ngx_uint_t i;
|
|
|
567 ngx_listening_t *ls;
|
|
|
568 ngx_connection_t *c;
|
|
0
|
569
|
|
|
570 if (ngx_event_flags & NGX_USE_IOCP_EVENT) {
|
|
|
571 return;
|
|
|
572 }
|
|
|
573
|
|
|
574 ngx_accept_mutex_held = 0;
|
|
160
|
575 ngx_use_accept_mutex = 0;
|
|
0
|
576
|
|
|
577 ls = cycle->listening.elts;
|
|
|
578 for (i = 0; i < cycle->listening.nelts; i++) {
|
|
|
579
|
|
92
|
580 c = ls[i].connection;
|
|
0
|
581
|
|
489
|
582 if (c) {
|
|
|
583 if (c->read->active) {
|
|
|
584 if (ngx_event_flags & NGX_USE_RTSIG_EVENT) {
|
|
|
585 ngx_del_conn(c, NGX_CLOSE_EVENT);
|
|
362
|
586
|
|
489
|
587 } else if (ngx_event_flags & NGX_USE_EPOLL_EVENT) {
|
|
0
|
588
|
|
489
|
589 /*
|
|
|
590 * it seems that Linux-2.6.x OpenVZ sends events
|
|
|
591 * for closed shared listening sockets unless
|
|
|
592 * the events was explicity deleted
|
|
|
593 */
|
|
362
|
594
|
|
489
|
595 ngx_del_event(c->read, NGX_READ_EVENT, 0);
|
|
362
|
596
|
|
489
|
597 } else {
|
|
|
598 ngx_del_event(c->read, NGX_READ_EVENT, NGX_CLOSE_EVENT);
|
|
|
599 }
|
|
0
|
600 }
|
|
489
|
601
|
|
|
602 ngx_free_connection(c);
|
|
|
603
|
|
|
604 c->fd = (ngx_socket_t) -1;
|
|
0
|
605 }
|
|
|
606
|
|
112
|
607 ngx_log_debug2(NGX_LOG_DEBUG_CORE, cycle->log, 0,
|
|
|
608 "close listening %V #%d ", &ls[i].addr_text, ls[i].fd);
|
|
|
609
|
|
92
|
610 if (ngx_close_socket(ls[i].fd) == -1) {
|
|
0
|
611 ngx_log_error(NGX_LOG_EMERG, cycle->log, ngx_socket_errno,
|
|
10
|
612 ngx_close_socket_n " %V failed", &ls[i].addr_text);
|
|
0
|
613 }
|
|
507
|
614
|
|
550
|
615 #if (NGX_HAVE_UNIX_DOMAIN)
|
|
|
616
|
|
|
617 if (ls[i].sockaddr->sa_family == AF_UNIX
|
|
|
618 && ngx_process != NGX_PROCESS_WORKER)
|
|
|
619 {
|
|
|
620 u_char *name = ls[i].addr_text.data + sizeof("unix:") - 1;
|
|
|
621
|
|
|
622 if (ngx_delete_file(name) == -1) {
|
|
|
623 ngx_log_error(NGX_LOG_EMERG, cycle->log, ngx_socket_errno,
|
|
|
624 ngx_delete_file_n " %s failed", name);
|
|
|
625 }
|
|
|
626 }
|
|
|
627
|
|
|
628 #endif
|
|
|
629
|
|
507
|
630 ls[i].fd = (ngx_socket_t) -1;
|
|
92
|
631 }
|
|
|
632 }
|
|
0
|
633
|
|
92
|
634
|
|
|
635 ngx_connection_t *
|
|
|
636 ngx_get_connection(ngx_socket_t s, ngx_log_t *log)
|
|
|
637 {
|
|
110
|
638 ngx_uint_t instance;
|
|
|
639 ngx_event_t *rev, *wev;
|
|
|
640 ngx_connection_t *c;
|
|
92
|
641
|
|
|
642 /* disable warning: Win32 SOCKET is u_int while UNIX socket is int */
|
|
|
643
|
|
|
644 if (ngx_cycle->files && (ngx_uint_t) s >= ngx_cycle->files_n) {
|
|
|
645 ngx_log_error(NGX_LOG_ALERT, log, 0,
|
|
|
646 "the new socket has number %d, "
|
|
|
647 "but only %ui files are available",
|
|
|
648 s, ngx_cycle->files_n);
|
|
|
649 return NULL;
|
|
|
650 }
|
|
|
651
|
|
|
652 /* ngx_mutex_lock */
|
|
|
653
|
|
|
654 c = ngx_cycle->free_connections;
|
|
|
655
|
|
|
656 if (c == NULL) {
|
|
|
657 ngx_log_error(NGX_LOG_ALERT, log, 0,
|
|
420
|
658 "%ui worker_connections are not enough",
|
|
92
|
659 ngx_cycle->connection_n);
|
|
|
660
|
|
|
661 /* ngx_mutex_unlock */
|
|
|
662
|
|
|
663 return NULL;
|
|
|
664 }
|
|
|
665
|
|
|
666 ngx_cycle->free_connections = c->data;
|
|
|
667 ngx_cycle->free_connection_n--;
|
|
|
668
|
|
|
669 /* ngx_mutex_unlock */
|
|
|
670
|
|
|
671 if (ngx_cycle->files) {
|
|
|
672 ngx_cycle->files[s] = c;
|
|
|
673 }
|
|
|
674
|
|
110
|
675 rev = c->read;
|
|
|
676 wev = c->write;
|
|
|
677
|
|
|
678 ngx_memzero(c, sizeof(ngx_connection_t));
|
|
|
679
|
|
|
680 c->read = rev;
|
|
|
681 c->write = wev;
|
|
|
682 c->fd = s;
|
|
|
683 c->log = log;
|
|
|
684
|
|
|
685 instance = rev->instance;
|
|
|
686
|
|
|
687 ngx_memzero(rev, sizeof(ngx_event_t));
|
|
|
688 ngx_memzero(wev, sizeof(ngx_event_t));
|
|
|
689
|
|
|
690 rev->instance = !instance;
|
|
|
691 wev->instance = !instance;
|
|
|
692
|
|
|
693 rev->index = NGX_INVALID_INDEX;
|
|
|
694 wev->index = NGX_INVALID_INDEX;
|
|
|
695
|
|
|
696 rev->data = c;
|
|
|
697 wev->data = c;
|
|
|
698
|
|
|
699 wev->write = 1;
|
|
|
700
|
|
92
|
701 return c;
|
|
|
702 }
|
|
|
703
|
|
|
704
|
|
|
705 void
|
|
|
706 ngx_free_connection(ngx_connection_t *c)
|
|
|
707 {
|
|
|
708 /* ngx_mutex_lock */
|
|
|
709
|
|
|
710 c->data = ngx_cycle->free_connections;
|
|
|
711 ngx_cycle->free_connections = c;
|
|
|
712 ngx_cycle->free_connection_n++;
|
|
|
713
|
|
|
714 /* ngx_mutex_unlock */
|
|
|
715
|
|
|
716 if (ngx_cycle->files) {
|
|
|
717 ngx_cycle->files[c->fd] = NULL;
|
|
0
|
718 }
|
|
|
719 }
|
|
|
720
|
|
|
721
|
|
70
|
722 void
|
|
|
723 ngx_close_connection(ngx_connection_t *c)
|
|
0
|
724 {
|
|
366
|
725 ngx_err_t err;
|
|
|
726 ngx_uint_t log_error, level;
|
|
0
|
727 ngx_socket_t fd;
|
|
|
728
|
|
28
|
729 if (c->fd == -1) {
|
|
0
|
730 ngx_log_error(NGX_LOG_ALERT, c->log, 0, "connection already closed");
|
|
|
731 return;
|
|
|
732 }
|
|
|
733
|
|
|
734 if (c->read->timer_set) {
|
|
|
735 ngx_del_timer(c->read);
|
|
|
736 }
|
|
126
|
737
|
|
0
|
738 if (c->write->timer_set) {
|
|
|
739 ngx_del_timer(c->write);
|
|
|
740 }
|
|
126
|
741
|
|
0
|
742 if (ngx_del_conn) {
|
|
|
743 ngx_del_conn(c, NGX_CLOSE_EVENT);
|
|
|
744
|
|
|
745 } else {
|
|
|
746 if (c->read->active || c->read->disabled) {
|
|
|
747 ngx_del_event(c->read, NGX_READ_EVENT, NGX_CLOSE_EVENT);
|
|
|
748 }
|
|
|
749
|
|
|
750 if (c->write->active || c->write->disabled) {
|
|
|
751 ngx_del_event(c->write, NGX_WRITE_EVENT, NGX_CLOSE_EVENT);
|
|
|
752 }
|
|
|
753 }
|
|
|
754
|
|
|
755 #if (NGX_THREADS)
|
|
|
756
|
|
|
757 /*
|
|
|
758 * we have to clean the connection information before the closing
|
|
|
759 * because another thread may reopen the same file descriptor
|
|
|
760 * before we clean the connection
|
|
|
761 */
|
|
|
762
|
|
112
|
763 ngx_mutex_lock(ngx_posted_events_mutex);
|
|
0
|
764
|
|
112
|
765 if (c->read->prev) {
|
|
|
766 ngx_delete_posted_event(c->read);
|
|
|
767 }
|
|
0
|
768
|
|
112
|
769 if (c->write->prev) {
|
|
|
770 ngx_delete_posted_event(c->write);
|
|
|
771 }
|
|
0
|
772
|
|
112
|
773 c->read->closed = 1;
|
|
|
774 c->write->closed = 1;
|
|
0
|
775
|
|
112
|
776 if (c->single_connection) {
|
|
|
777 ngx_unlock(&c->lock);
|
|
|
778 c->read->locked = 0;
|
|
|
779 c->write->locked = 0;
|
|
|
780 }
|
|
0
|
781
|
|
112
|
782 ngx_mutex_unlock(ngx_posted_events_mutex);
|
|
0
|
783
|
|
|
784 #else
|
|
|
785
|
|
|
786 if (c->read->prev) {
|
|
|
787 ngx_delete_posted_event(c->read);
|
|
|
788 }
|
|
|
789
|
|
|
790 if (c->write->prev) {
|
|
|
791 ngx_delete_posted_event(c->write);
|
|
|
792 }
|
|
|
793
|
|
|
794 c->read->closed = 1;
|
|
|
795 c->write->closed = 1;
|
|
|
796
|
|
|
797 #endif
|
|
|
798
|
|
366
|
799 log_error = c->log_error;
|
|
|
800
|
|
92
|
801 ngx_free_connection(c);
|
|
|
802
|
|
0
|
803 fd = c->fd;
|
|
|
804 c->fd = (ngx_socket_t) -1;
|
|
|
805
|
|
|
806 if (ngx_close_socket(fd) == -1) {
|
|
|
807
|
|
366
|
808 err = ngx_socket_errno;
|
|
|
809
|
|
|
810 if (err == NGX_ECONNRESET || err == NGX_ENOTCONN) {
|
|
|
811
|
|
|
812 switch (log_error) {
|
|
|
813
|
|
|
814 case NGX_ERROR_INFO:
|
|
|
815 level = NGX_LOG_INFO;
|
|
|
816 break;
|
|
|
817
|
|
|
818 case NGX_ERROR_ERR:
|
|
|
819 level = NGX_LOG_ERR;
|
|
|
820 break;
|
|
|
821
|
|
|
822 default:
|
|
|
823 level = NGX_LOG_CRIT;
|
|
|
824 }
|
|
|
825
|
|
|
826 } else {
|
|
|
827 level = NGX_LOG_CRIT;
|
|
|
828 }
|
|
|
829
|
|
0
|
830 /* we use ngx_cycle->log because c->log was in c->pool */
|
|
|
831
|
|
366
|
832 ngx_log_error(level, ngx_cycle->log, err,
|
|
332
|
833 ngx_close_socket_n " %d failed", fd);
|
|
0
|
834 }
|
|
|
835 }
|
|
|
836
|
|
|
837
|
|
70
|
838 ngx_int_t
|
|
501
|
839 ngx_connection_local_sockaddr(ngx_connection_t *c, ngx_str_t *s,
|
|
|
840 ngx_uint_t port)
|
|
|
841 {
|
|
|
842 socklen_t len;
|
|
|
843 ngx_uint_t addr;
|
|
|
844 u_char sa[NGX_SOCKADDRLEN];
|
|
|
845 struct sockaddr_in *sin;
|
|
|
846 #if (NGX_HAVE_INET6)
|
|
|
847 ngx_uint_t i;
|
|
|
848 struct sockaddr_in6 *sin6;
|
|
|
849 #endif
|
|
|
850
|
|
|
851 switch (c->local_sockaddr->sa_family) {
|
|
|
852
|
|
|
853 #if (NGX_HAVE_INET6)
|
|
|
854 case AF_INET6:
|
|
|
855 sin6 = (struct sockaddr_in6 *) c->local_sockaddr;
|
|
|
856
|
|
|
857 for (addr = 0, i = 0; addr == 0 && i < 16; i++) {
|
|
|
858 addr |= sin6->sin6_addr.s6_addr[i];
|
|
|
859 }
|
|
|
860
|
|
|
861 break;
|
|
|
862 #endif
|
|
|
863
|
|
|
864 default: /* AF_INET */
|
|
|
865 sin = (struct sockaddr_in *) c->local_sockaddr;
|
|
|
866 addr = sin->sin_addr.s_addr;
|
|
|
867 break;
|
|
|
868 }
|
|
|
869
|
|
|
870 if (addr == 0) {
|
|
|
871
|
|
|
872 len = NGX_SOCKADDRLEN;
|
|
|
873
|
|
|
874 if (getsockname(c->fd, (struct sockaddr *) &sa, &len) == -1) {
|
|
|
875 ngx_connection_error(c, ngx_socket_errno, "getsockname() failed");
|
|
|
876 return NGX_ERROR;
|
|
|
877 }
|
|
|
878
|
|
|
879 c->local_sockaddr = ngx_palloc(c->pool, len);
|
|
|
880 if (c->local_sockaddr == NULL) {
|
|
|
881 return NGX_ERROR;
|
|
|
882 }
|
|
|
883
|
|
|
884 c->local_socklen = len;
|
|
|
885 ngx_memcpy(c->local_sockaddr, &sa, len);
|
|
|
886 }
|
|
|
887
|
|
|
888 if (s == NULL) {
|
|
|
889 return NGX_OK;
|
|
|
890 }
|
|
|
891
|
|
|
892 s->len = ngx_sock_ntop(c->local_sockaddr, s->data, s->len, port);
|
|
|
893
|
|
|
894 return NGX_OK;
|
|
|
895 }
|
|
|
896
|
|
|
897
|
|
|
898 ngx_int_t
|
|
70
|
899 ngx_connection_error(ngx_connection_t *c, ngx_err_t err, char *text)
|
|
0
|
900 {
|
|
|
901 ngx_uint_t level;
|
|
|
902
|
|
493
|
903 /* Winsock may return NGX_ECONNABORTED instead of NGX_ECONNRESET */
|
|
|
904
|
|
|
905 if ((err == NGX_ECONNRESET
|
|
|
906 #if (NGX_WIN32)
|
|
|
907 || err == NGX_ECONNABORTED
|
|
|
908 #endif
|
|
|
909 ) && c->log_error == NGX_ERROR_IGNORE_ECONNRESET)
|
|
|
910 {
|
|
0
|
911 return 0;
|
|
|
912 }
|
|
|
913
|
|
469
|
914 #if (NGX_SOLARIS)
|
|
|
915 if (err == NGX_EINVAL && c->log_error == NGX_ERROR_IGNORE_EINVAL) {
|
|
|
916 return 0;
|
|
|
917 }
|
|
|
918 #endif
|
|
|
919
|
|
86
|
920 if (err == 0
|
|
|
921 || err == NGX_ECONNRESET
|
|
493
|
922 #if (NGX_WIN32)
|
|
|
923 || err == NGX_ECONNABORTED
|
|
|
924 #else
|
|
0
|
925 || err == NGX_EPIPE
|
|
|
926 #endif
|
|
|
927 || err == NGX_ENOTCONN
|
|
136
|
928 || err == NGX_ETIMEDOUT
|
|
0
|
929 || err == NGX_ECONNREFUSED
|
|
364
|
930 || err == NGX_ENETDOWN
|
|
|
931 || err == NGX_ENETUNREACH
|
|
|
932 || err == NGX_EHOSTDOWN
|
|
0
|
933 || err == NGX_EHOSTUNREACH)
|
|
|
934 {
|
|
|
935 switch (c->log_error) {
|
|
|
936
|
|
469
|
937 case NGX_ERROR_IGNORE_EINVAL:
|
|
0
|
938 case NGX_ERROR_IGNORE_ECONNRESET:
|
|
|
939 case NGX_ERROR_INFO:
|
|
|
940 level = NGX_LOG_INFO;
|
|
|
941 break;
|
|
|
942
|
|
542
|
943 default:
|
|
0
|
944 level = NGX_LOG_ERR;
|
|
|
945 }
|
|
|
946
|
|
|
947 } else {
|
|
366
|
948 level = NGX_LOG_ALERT;
|
|
0
|
949 }
|
|
|
950
|
|
|
951 ngx_log_error(level, c->log, err, text);
|
|
|
952
|
|
|
953 return NGX_ERROR;
|
|
|
954 }
|
