|
0
|
1
|
|
|
2 /*
|
|
|
3 * Copyright (C) Igor Sysoev
|
|
|
4 */
|
|
|
5
|
|
|
6
|
|
|
7 #include <ngx_config.h>
|
|
|
8 #include <ngx_core.h>
|
|
|
9 #include <ngx_event.h>
|
|
|
10
|
|
|
11
|
|
|
12 ngx_os_io_t ngx_io;
|
|
|
13
|
|
|
14
|
|
70
|
15 ngx_listening_t *
|
|
486
|
16 ngx_create_listening(ngx_conf_t *cf, void *sockaddr, socklen_t socklen)
|
|
0
|
17 {
|
|
538
|
18 size_t len;
|
|
486
|
19 ngx_listening_t *ls;
|
|
|
20 struct sockaddr *sa;
|
|
|
21 u_char text[NGX_SOCKADDR_STRLEN];
|
|
0
|
22
|
|
50
|
23 ls = ngx_array_push(&cf->cycle->listening);
|
|
|
24 if (ls == NULL) {
|
|
0
|
25 return NULL;
|
|
|
26 }
|
|
|
27
|
|
|
28 ngx_memzero(ls, sizeof(ngx_listening_t));
|
|
|
29
|
|
486
|
30 sa = ngx_palloc(cf->pool, socklen);
|
|
|
31 if (sa == NULL) {
|
|
0
|
32 return NULL;
|
|
|
33 }
|
|
|
34
|
|
486
|
35 ngx_memcpy(sa, sockaddr, socklen);
|
|
0
|
36
|
|
486
|
37 ls->sockaddr = sa;
|
|
|
38 ls->socklen = socklen;
|
|
10
|
39
|
|
538
|
40 len = ngx_sock_ntop(sa, text, NGX_SOCKADDR_STRLEN, 1);
|
|
|
41 ls->addr_text.len = len;
|
|
486
|
42
|
|
|
43 switch (ls->sockaddr->sa_family) {
|
|
|
44 #if (NGX_HAVE_INET6)
|
|
|
45 case AF_INET6:
|
|
|
46 ls->addr_text_max_len = NGX_INET6_ADDRSTRLEN;
|
|
|
47 break;
|
|
|
48 #endif
|
|
538
|
49 #if (NGX_HAVE_UNIX_DOMAIN)
|
|
|
50 case AF_UNIX:
|
|
|
51 ls->addr_text_max_len = NGX_UNIX_ADDRSTRLEN;
|
|
|
52 len++;
|
|
|
53 break;
|
|
|
54 #endif
|
|
486
|
55 case AF_INET:
|
|
|
56 ls->addr_text_max_len = NGX_INET_ADDRSTRLEN;
|
|
|
57 break;
|
|
|
58 default:
|
|
|
59 ls->addr_text_max_len = NGX_SOCKADDR_STRLEN;
|
|
|
60 break;
|
|
|
61 }
|
|
|
62
|
|
538
|
63 ls->addr_text.data = ngx_pnalloc(cf->pool, len);
|
|
|
64 if (ls->addr_text.data == NULL) {
|
|
|
65 return NULL;
|
|
|
66 }
|
|
|
67
|
|
|
68 ngx_memcpy(ls->addr_text.data, text, len);
|
|
|
69
|
|
|
70 ls->fd = (ngx_socket_t) -1;
|
|
|
71 ls->type = SOCK_STREAM;
|
|
|
72
|
|
486
|
73 ls->backlog = NGX_LISTEN_BACKLOG;
|
|
|
74 ls->rcvbuf = -1;
|
|
|
75 ls->sndbuf = -1;
|
|
0
|
76
|
|
|
77 return ls;
|
|
|
78 }
|
|
|
79
|
|
|
80
|
|
70
|
81 ngx_int_t
|
|
|
82 ngx_set_inherited_sockets(ngx_cycle_t *cycle)
|
|
0
|
83 {
|
|
72
|
84 size_t len;
|
|
|
85 ngx_uint_t i;
|
|
|
86 ngx_listening_t *ls;
|
|
112
|
87 socklen_t olen;
|
|
72
|
88 #if (NGX_HAVE_DEFERRED_ACCEPT && defined SO_ACCEPTFILTER)
|
|
90
|
89 ngx_err_t err;
|
|
72
|
90 struct accept_filter_arg af;
|
|
|
91 #endif
|
|
|
92 #if (NGX_HAVE_DEFERRED_ACCEPT && defined TCP_DEFER_ACCEPT)
|
|
|
93 int timeout;
|
|
|
94 #endif
|
|
0
|
95
|
|
|
96 ls = cycle->listening.elts;
|
|
|
97 for (i = 0; i < cycle->listening.nelts; i++) {
|
|
|
98
|
|
574
|
99 ls[i].sockaddr = ngx_palloc(cycle->pool, NGX_SOCKADDRLEN);
|
|
0
|
100 if (ls[i].sockaddr == NULL) {
|
|
|
101 return NGX_ERROR;
|
|
|
102 }
|
|
|
103
|
|
574
|
104 ls[i].socklen = NGX_SOCKADDRLEN;
|
|
0
|
105 if (getsockname(ls[i].fd, ls[i].sockaddr, &ls[i].socklen) == -1) {
|
|
|
106 ngx_log_error(NGX_LOG_CRIT, cycle->log, ngx_socket_errno,
|
|
|
107 "getsockname() of the inherited "
|
|
|
108 "socket #%d failed", ls[i].fd);
|
|
|
109 ls[i].ignore = 1;
|
|
|
110 continue;
|
|
|
111 }
|
|
|
112
|
|
448
|
113 switch (ls[i].sockaddr->sa_family) {
|
|
0
|
114
|
|
448
|
115 #if (NGX_HAVE_INET6)
|
|
|
116 case AF_INET6:
|
|
|
117 ls[i].addr_text_max_len = NGX_INET6_ADDRSTRLEN;
|
|
542
|
118 len = NGX_INET6_ADDRSTRLEN + sizeof(":65535") - 1;
|
|
|
119 break;
|
|
|
120 #endif
|
|
|
121
|
|
|
122 #if (NGX_HAVE_UNIX_DOMAIN)
|
|
|
123 case AF_UNIX:
|
|
|
124 ls[i].addr_text_max_len = NGX_UNIX_ADDRSTRLEN;
|
|
|
125 len = NGX_UNIX_ADDRSTRLEN;
|
|
448
|
126 break;
|
|
|
127 #endif
|
|
|
128
|
|
|
129 case AF_INET:
|
|
|
130 ls[i].addr_text_max_len = NGX_INET_ADDRSTRLEN;
|
|
542
|
131 len = NGX_INET_ADDRSTRLEN + sizeof(":65535") - 1;
|
|
448
|
132 break;
|
|
|
133
|
|
|
134 default:
|
|
0
|
135 ngx_log_error(NGX_LOG_CRIT, cycle->log, ngx_socket_errno,
|
|
|
136 "the inherited socket #%d has "
|
|
448
|
137 "an unsupported protocol family", ls[i].fd);
|
|
0
|
138 ls[i].ignore = 1;
|
|
|
139 continue;
|
|
|
140 }
|
|
10
|
141
|
|
448
|
142 ls[i].addr_text.data = ngx_pnalloc(cycle->pool, len);
|
|
0
|
143 if (ls[i].addr_text.data == NULL) {
|
|
|
144 return NGX_ERROR;
|
|
|
145 }
|
|
|
146
|
|
448
|
147 len = ngx_sock_ntop(ls[i].sockaddr, ls[i].addr_text.data, len, 1);
|
|
10
|
148 if (len == 0) {
|
|
0
|
149 return NGX_ERROR;
|
|
|
150 }
|
|
10
|
151
|
|
448
|
152 ls[i].addr_text.len = len;
|
|
72
|
153
|
|
326
|
154 ls[i].backlog = NGX_LISTEN_BACKLOG;
|
|
86
|
155
|
|
112
|
156 olen = sizeof(int);
|
|
|
157
|
|
|
158 if (getsockopt(ls[i].fd, SOL_SOCKET, SO_RCVBUF, (void *) &ls[i].rcvbuf,
|
|
|
159 &olen)
|
|
|
160 == -1)
|
|
|
161 {
|
|
|
162 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_socket_errno,
|
|
|
163 "getsockopt(SO_RCVBUF) %V failed, ignored",
|
|
|
164 &ls[i].addr_text);
|
|
|
165
|
|
|
166 ls[i].rcvbuf = -1;
|
|
|
167 }
|
|
|
168
|
|
|
169 olen = sizeof(int);
|
|
|
170
|
|
|
171 if (getsockopt(ls[i].fd, SOL_SOCKET, SO_SNDBUF, (void *) &ls[i].sndbuf,
|
|
|
172 &olen)
|
|
|
173 == -1)
|
|
|
174 {
|
|
|
175 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_socket_errno,
|
|
|
176 "getsockopt(SO_SNDBUF) %V failed, ignored",
|
|
|
177 &ls[i].addr_text);
|
|
|
178
|
|
|
179 ls[i].sndbuf = -1;
|
|
|
180 }
|
|
|
181
|
|
72
|
182 #if (NGX_HAVE_DEFERRED_ACCEPT && defined SO_ACCEPTFILTER)
|
|
|
183
|
|
|
184 ngx_memzero(&af, sizeof(struct accept_filter_arg));
|
|
112
|
185 olen = sizeof(struct accept_filter_arg);
|
|
72
|
186
|
|
112
|
187 if (getsockopt(ls[i].fd, SOL_SOCKET, SO_ACCEPTFILTER, &af, &olen)
|
|
72
|
188 == -1)
|
|
|
189 {
|
|
90
|
190 err = ngx_errno;
|
|
|
191
|
|
|
192 if (err == NGX_EINVAL) {
|
|
|
193 continue;
|
|
|
194 }
|
|
|
195
|
|
|
196 ngx_log_error(NGX_LOG_NOTICE, cycle->log, err,
|
|
72
|
197 "getsockopt(SO_ACCEPTFILTER) for %V failed, ignored",
|
|
|
198 &ls[i].addr_text);
|
|
|
199 continue;
|
|
|
200 }
|
|
|
201
|
|
112
|
202 if (olen < sizeof(struct accept_filter_arg) || af.af_name[0] == '\0') {
|
|
72
|
203 continue;
|
|
|
204 }
|
|
|
205
|
|
|
206 ls[i].accept_filter = ngx_palloc(cycle->pool, 16);
|
|
|
207 if (ls[i].accept_filter == NULL) {
|
|
|
208 return NGX_ERROR;
|
|
|
209 }
|
|
|
210
|
|
|
211 (void) ngx_cpystrn((u_char *) ls[i].accept_filter,
|
|
|
212 (u_char *) af.af_name, 16);
|
|
|
213 #endif
|
|
|
214
|
|
|
215 #if (NGX_HAVE_DEFERRED_ACCEPT && defined TCP_DEFER_ACCEPT)
|
|
|
216
|
|
|
217 timeout = 0;
|
|
112
|
218 olen = sizeof(int);
|
|
72
|
219
|
|
112
|
220 if (getsockopt(ls[i].fd, IPPROTO_TCP, TCP_DEFER_ACCEPT, &timeout, &olen)
|
|
72
|
221 == -1)
|
|
|
222 {
|
|
|
223 ngx_log_error(NGX_LOG_NOTICE, cycle->log, ngx_errno,
|
|
|
224 "getsockopt(TCP_DEFER_ACCEPT) for %V failed, ignored",
|
|
|
225 &ls[i].addr_text);
|
|
|
226 continue;
|
|
|
227 }
|
|
|
228
|
|
114
|
229 if (olen < sizeof(int) || timeout == 0) {
|
|
72
|
230 continue;
|
|
|
231 }
|
|
|
232
|
|
|
233 ls[i].deferred_accept = 1;
|
|
|
234 #endif
|
|
0
|
235 }
|
|
|
236
|
|
|
237 return NGX_OK;
|
|
|
238 }
|
|
|
239
|
|
|
240
|
|
70
|
241 ngx_int_t
|
|
|
242 ngx_open_listening_sockets(ngx_cycle_t *cycle)
|
|
0
|
243 {
|
|
112
|
244 int reuseaddr;
|
|
|
245 ngx_uint_t i, tries, failed;
|
|
0
|
246 ngx_err_t err;
|
|
|
247 ngx_log_t *log;
|
|
|
248 ngx_socket_t s;
|
|
|
249 ngx_listening_t *ls;
|
|
|
250
|
|
|
251 reuseaddr = 1;
|
|
|
252 #if (NGX_SUPPRESS_WARN)
|
|
|
253 failed = 0;
|
|
|
254 #endif
|
|
|
255
|
|
|
256 log = cycle->log;
|
|
|
257
|
|
112
|
258 /* TODO: configurable try number */
|
|
0
|
259
|
|
378
|
260 for (tries = 5; tries; tries--) {
|
|
0
|
261 failed = 0;
|
|
|
262
|
|
|
263 /* for each listening socket */
|
|
|
264
|
|
|
265 ls = cycle->listening.elts;
|
|
|
266 for (i = 0; i < cycle->listening.nelts; i++) {
|
|
|
267
|
|
|
268 if (ls[i].ignore) {
|
|
|
269 continue;
|
|
|
270 }
|
|
|
271
|
|
|
272 if (ls[i].fd != -1) {
|
|
|
273 continue;
|
|
|
274 }
|
|
|
275
|
|
|
276 if (ls[i].inherited) {
|
|
|
277
|
|
|
278 /* TODO: close on exit */
|
|
|
279 /* TODO: nonblocking */
|
|
|
280 /* TODO: deferred accept */
|
|
|
281
|
|
|
282 continue;
|
|
|
283 }
|
|
|
284
|
|
400
|
285 s = ngx_socket(ls[i].sockaddr->sa_family, ls[i].type, 0);
|
|
0
|
286
|
|
|
287 if (s == -1) {
|
|
|
288 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
10
|
289 ngx_socket_n " %V failed", &ls[i].addr_text);
|
|
0
|
290 return NGX_ERROR;
|
|
|
291 }
|
|
|
292
|
|
|
293 if (setsockopt(s, SOL_SOCKET, SO_REUSEADDR,
|
|
112
|
294 (const void *) &reuseaddr, sizeof(int))
|
|
|
295 == -1)
|
|
|
296 {
|
|
0
|
297 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
10
|
298 "setsockopt(SO_REUSEADDR) %V failed",
|
|
|
299 &ls[i].addr_text);
|
|
112
|
300
|
|
306
|
301 if (ngx_close_socket(s) == -1) {
|
|
112
|
302 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
|
303 ngx_close_socket_n " %V failed",
|
|
|
304 &ls[i].addr_text);
|
|
306
|
305 }
|
|
112
|
306
|
|
0
|
307 return NGX_ERROR;
|
|
|
308 }
|
|
|
309
|
|
460
|
310 #if (NGX_HAVE_INET6 && defined IPV6_V6ONLY)
|
|
|
311
|
|
|
312 if (ls[i].sockaddr->sa_family == AF_INET6 && ls[i].ipv6only) {
|
|
|
313 int ipv6only;
|
|
|
314
|
|
|
315 ipv6only = (ls[i].ipv6only == 1);
|
|
|
316
|
|
|
317 if (setsockopt(s, IPPROTO_IPV6, IPV6_V6ONLY,
|
|
|
318 (const void *) &ipv6only, sizeof(int))
|
|
|
319 == -1)
|
|
|
320 {
|
|
486
|
321 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
460
|
322 "setsockopt(IPV6_V6ONLY) %V failed, ignored",
|
|
|
323 &ls[i].addr_text);
|
|
|
324 }
|
|
|
325 }
|
|
|
326 #endif
|
|
0
|
327 /* TODO: close on exit */
|
|
|
328
|
|
|
329 if (!(ngx_event_flags & NGX_USE_AIO_EVENT)) {
|
|
|
330 if (ngx_nonblocking(s) == -1) {
|
|
|
331 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
10
|
332 ngx_nonblocking_n " %V failed",
|
|
|
333 &ls[i].addr_text);
|
|
112
|
334
|
|
306
|
335 if (ngx_close_socket(s) == -1) {
|
|
112
|
336 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
|
337 ngx_close_socket_n " %V failed",
|
|
|
338 &ls[i].addr_text);
|
|
306
|
339 }
|
|
112
|
340
|
|
0
|
341 return NGX_ERROR;
|
|
|
342 }
|
|
|
343 }
|
|
|
344
|
|
486
|
345 ngx_log_debug2(NGX_LOG_DEBUG_CORE, log, 0,
|
|
142
|
346 "bind() %V #%d ", &ls[i].addr_text, s);
|
|
|
347
|
|
0
|
348 if (bind(s, ls[i].sockaddr, ls[i].socklen) == -1) {
|
|
|
349 err = ngx_socket_errno;
|
|
112
|
350
|
|
|
351 if (err == NGX_EADDRINUSE && ngx_test_config) {
|
|
|
352 continue;
|
|
|
353 }
|
|
|
354
|
|
0
|
355 ngx_log_error(NGX_LOG_EMERG, log, err,
|
|
10
|
356 "bind() to %V failed", &ls[i].addr_text);
|
|
0
|
357
|
|
306
|
358 if (ngx_close_socket(s) == -1) {
|
|
0
|
359 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
10
|
360 ngx_close_socket_n " %V failed",
|
|
|
361 &ls[i].addr_text);
|
|
306
|
362 }
|
|
0
|
363
|
|
112
|
364 if (err != NGX_EADDRINUSE) {
|
|
|
365 return NGX_ERROR;
|
|
|
366 }
|
|
|
367
|
|
0
|
368 failed = 1;
|
|
112
|
369
|
|
0
|
370 continue;
|
|
|
371 }
|
|
|
372
|
|
540
|
373 #if (NGX_HAVE_UNIX_DOMAIN)
|
|
|
374
|
|
554
|
375 if (ls[i].sockaddr->sa_family == AF_UNIX) {
|
|
|
376 mode_t mode;
|
|
|
377 u_char *name;
|
|
|
378
|
|
|
379 name = ls[i].addr_text.data + sizeof("unix:") - 1;
|
|
|
380 mode = (S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP|S_IROTH|S_IWOTH);
|
|
540
|
381
|
|
554
|
382 if (chmod((char *) name, mode) == -1) {
|
|
|
383 ngx_log_error(NGX_LOG_EMERG, cycle->log, ngx_errno,
|
|
|
384 "chmod() \"%s\" failed", name);
|
|
|
385 }
|
|
|
386
|
|
|
387 if (ngx_test_config) {
|
|
|
388 if (ngx_delete_file(name) == -1) {
|
|
|
389 ngx_log_error(NGX_LOG_EMERG, cycle->log, ngx_errno,
|
|
|
390 ngx_delete_file_n " %s failed", name);
|
|
|
391 }
|
|
540
|
392 }
|
|
|
393 }
|
|
|
394 #endif
|
|
|
395
|
|
306
|
396 if (listen(s, ls[i].backlog) == -1) {
|
|
|
397 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
|
398 "listen() to %V, backlog %d failed",
|
|
|
399 &ls[i].addr_text, ls[i].backlog);
|
|
|
400
|
|
|
401 if (ngx_close_socket(s) == -1) {
|
|
|
402 ngx_log_error(NGX_LOG_EMERG, log, ngx_socket_errno,
|
|
|
403 ngx_close_socket_n " %V failed",
|
|
|
404 &ls[i].addr_text);
|
|
|
405 }
|
|
|
406
|
|
|
407 return NGX_ERROR;
|
|
|
408 }
|
|
|
409
|
|
112
|
410 ls[i].listen = 1;
|
|
0
|
411
|
|
|
412 ls[i].fd = s;
|
|
|
413 }
|
|
|
414
|
|
112
|
415 if (!failed) {
|
|
0
|
416 break;
|
|
112
|
417 }
|
|
0
|
418
|
|
|
419 /* TODO: delay configurable */
|
|
|
420
|
|
|
421 ngx_log_error(NGX_LOG_NOTICE, log, 0,
|
|
|
422 "try again to bind() after 500ms");
|
|
112
|
423
|
|
0
|
424 ngx_msleep(500);
|
|
|
425 }
|
|
|
426
|
|
|
427 if (failed) {
|
|
26
|
428 ngx_log_error(NGX_LOG_EMERG, log, 0, "still could not bind()");
|
|
0
|
429 return NGX_ERROR;
|
|
|
430 }
|
|
|
431
|
|
|
432 return NGX_OK;
|
|
|
433 }
|
|
|
434
|
|
|
435
|
|
70
|
436 void
|
|
486
|
437 ngx_configure_listening_sockets(ngx_cycle_t *cycle)
|
|
112
|
438 {
|
|
|
439 ngx_uint_t i;
|
|
|
440 ngx_listening_t *ls;
|
|
|
441
|
|
|
442 #if (NGX_HAVE_DEFERRED_ACCEPT && defined SO_ACCEPTFILTER)
|
|
|
443 struct accept_filter_arg af;
|
|
|
444 #endif
|
|
|
445 #if (NGX_HAVE_DEFERRED_ACCEPT && defined TCP_DEFER_ACCEPT)
|
|
|
446 int timeout;
|
|
|
447 #endif
|
|
|
448
|
|
|
449 ls = cycle->listening.elts;
|
|
|
450 for (i = 0; i < cycle->listening.nelts; i++) {
|
|
|
451
|
|
486
|
452 ls[i].log = *ls[i].logp;
|
|
|
453
|
|
112
|
454 if (ls[i].rcvbuf != -1) {
|
|
|
455 if (setsockopt(ls[i].fd, SOL_SOCKET, SO_RCVBUF,
|
|
|
456 (const void *) &ls[i].rcvbuf, sizeof(int))
|
|
|
457 == -1)
|
|
|
458 {
|
|
|
459 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_socket_errno,
|
|
118
|
460 "setsockopt(SO_RCVBUF, %d) %V failed, ignored",
|
|
|
461 ls[i].rcvbuf, &ls[i].addr_text);
|
|
112
|
462 }
|
|
|
463 }
|
|
|
464
|
|
|
465 if (ls[i].sndbuf != -1) {
|
|
|
466 if (setsockopt(ls[i].fd, SOL_SOCKET, SO_SNDBUF,
|
|
|
467 (const void *) &ls[i].sndbuf, sizeof(int))
|
|
|
468 == -1)
|
|
|
469 {
|
|
|
470 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_socket_errno,
|
|
118
|
471 "setsockopt(SO_SNDBUF, %d) %V failed, ignored",
|
|
|
472 ls[i].sndbuf, &ls[i].addr_text);
|
|
112
|
473 }
|
|
|
474 }
|
|
|
475
|
|
184
|
476 #if 0
|
|
|
477 if (1) {
|
|
|
478 int tcp_nodelay = 1;
|
|
|
479
|
|
|
480 if (setsockopt(ls[i].fd, IPPROTO_TCP, TCP_NODELAY,
|
|
|
481 (const void *) &tcp_nodelay, sizeof(int))
|
|
|
482 == -1)
|
|
|
483 {
|
|
|
484 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_socket_errno,
|
|
|
485 "setsockopt(TCP_NODELAY) %V failed, ignored",
|
|
|
486 &ls[i].addr_text);
|
|
|
487 }
|
|
|
488 }
|
|
|
489 #endif
|
|
|
490
|
|
112
|
491 if (ls[i].listen) {
|
|
306
|
492
|
|
|
493 /* change backlog via listen() */
|
|
|
494
|
|
112
|
495 if (listen(ls[i].fd, ls[i].backlog) == -1) {
|
|
|
496 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_socket_errno,
|
|
306
|
497 "listen() to %V, backlog %d failed, ignored",
|
|
112
|
498 &ls[i].addr_text, ls[i].backlog);
|
|
|
499 }
|
|
|
500 }
|
|
|
501
|
|
|
502 /*
|
|
|
503 * setting deferred mode should be last operation on socket,
|
|
|
504 * because code may prematurely continue cycle on failure
|
|
|
505 */
|
|
|
506
|
|
|
507 #if (NGX_HAVE_DEFERRED_ACCEPT)
|
|
|
508
|
|
|
509 #ifdef SO_ACCEPTFILTER
|
|
|
510
|
|
176
|
511 if (ls[i].delete_deferred) {
|
|
|
512 if (setsockopt(ls[i].fd, SOL_SOCKET, SO_ACCEPTFILTER, NULL, 0)
|
|
|
513 == -1)
|
|
112
|
514 {
|
|
|
515 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_errno,
|
|
|
516 "setsockopt(SO_ACCEPTFILTER, NULL) "
|
|
|
517 "for %V failed, ignored",
|
|
176
|
518 &ls[i].addr_text);
|
|
112
|
519
|
|
176
|
520 if (ls[i].accept_filter) {
|
|
112
|
521 ngx_log_error(NGX_LOG_ALERT, cycle->log, 0,
|
|
|
522 "could not change the accept filter "
|
|
|
523 "to \"%s\" for %V, ignored",
|
|
176
|
524 ls[i].accept_filter, &ls[i].addr_text);
|
|
112
|
525 }
|
|
|
526
|
|
|
527 continue;
|
|
|
528 }
|
|
|
529
|
|
176
|
530 ls[i].deferred_accept = 0;
|
|
112
|
531 }
|
|
|
532
|
|
176
|
533 if (ls[i].add_deferred) {
|
|
112
|
534 ngx_memzero(&af, sizeof(struct accept_filter_arg));
|
|
|
535 (void) ngx_cpystrn((u_char *) af.af_name,
|
|
176
|
536 (u_char *) ls[i].accept_filter, 16);
|
|
112
|
537
|
|
176
|
538 if (setsockopt(ls[i].fd, SOL_SOCKET, SO_ACCEPTFILTER,
|
|
112
|
539 &af, sizeof(struct accept_filter_arg))
|
|
|
540 == -1)
|
|
|
541 {
|
|
|
542 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_errno,
|
|
|
543 "setsockopt(SO_ACCEPTFILTER, \"%s\") "
|
|
|
544 " for %V failed, ignored",
|
|
176
|
545 ls[i].accept_filter, &ls[i].addr_text);
|
|
112
|
546 continue;
|
|
|
547 }
|
|
|
548
|
|
176
|
549 ls[i].deferred_accept = 1;
|
|
112
|
550 }
|
|
|
551
|
|
|
552 #endif
|
|
|
553
|
|
|
554 #ifdef TCP_DEFER_ACCEPT
|
|
|
555
|
|
176
|
556 if (ls[i].add_deferred || ls[i].delete_deferred) {
|
|
112
|
557
|
|
176
|
558 if (ls[i].add_deferred) {
|
|
|
559 timeout = (int) (ls[i].post_accept_timeout / 1000);
|
|
112
|
560
|
|
|
561 } else {
|
|
|
562 timeout = 0;
|
|
|
563 }
|
|
|
564
|
|
176
|
565 if (setsockopt(ls[i].fd, IPPROTO_TCP, TCP_DEFER_ACCEPT,
|
|
112
|
566 &timeout, sizeof(int))
|
|
|
567 == -1)
|
|
|
568 {
|
|
|
569 ngx_log_error(NGX_LOG_ALERT, cycle->log, ngx_errno,
|
|
|
570 "setsockopt(TCP_DEFER_ACCEPT, %d) for %V failed, "
|
|
|
571 "ignored",
|
|
176
|
572 timeout, &ls[i].addr_text);
|
|
112
|
573
|
|
|
574 continue;
|
|
|
575 }
|
|
|
576 }
|
|
|
577
|
|
176
|
578 if (ls[i].add_deferred) {
|
|
|
579 ls[i].deferred_accept = 1;
|
|
112
|
580 }
|
|
|
581
|
|
|
582 #endif
|
|
|
583
|
|
|
584 #endif /* NGX_HAVE_DEFERRED_ACCEPT */
|
|
|
585 }
|
|
|
586
|
|
|
587 return;
|
|
|
588 }
|
|
|
589
|
|
|
590
|
|
|
591 void
|
|
70
|
592 ngx_close_listening_sockets(ngx_cycle_t *cycle)
|
|
0
|
593 {
|
|
92
|
594 ngx_uint_t i;
|
|
|
595 ngx_listening_t *ls;
|
|
|
596 ngx_connection_t *c;
|
|
0
|
597
|
|
|
598 if (ngx_event_flags & NGX_USE_IOCP_EVENT) {
|
|
|
599 return;
|
|
|
600 }
|
|
|
601
|
|
|
602 ngx_accept_mutex_held = 0;
|
|
160
|
603 ngx_use_accept_mutex = 0;
|
|
0
|
604
|
|
|
605 ls = cycle->listening.elts;
|
|
|
606 for (i = 0; i < cycle->listening.nelts; i++) {
|
|
|
607
|
|
92
|
608 c = ls[i].connection;
|
|
0
|
609
|
|
480
|
610 if (c) {
|
|
|
611 if (c->read->active) {
|
|
|
612 if (ngx_event_flags & NGX_USE_RTSIG_EVENT) {
|
|
|
613 ngx_del_conn(c, NGX_CLOSE_EVENT);
|
|
362
|
614
|
|
480
|
615 } else if (ngx_event_flags & NGX_USE_EPOLL_EVENT) {
|
|
0
|
616
|
|
480
|
617 /*
|
|
|
618 * it seems that Linux-2.6.x OpenVZ sends events
|
|
|
619 * for closed shared listening sockets unless
|
|
|
620 * the events was explicity deleted
|
|
|
621 */
|
|
362
|
622
|
|
480
|
623 ngx_del_event(c->read, NGX_READ_EVENT, 0);
|
|
362
|
624
|
|
480
|
625 } else {
|
|
|
626 ngx_del_event(c->read, NGX_READ_EVENT, NGX_CLOSE_EVENT);
|
|
|
627 }
|
|
0
|
628 }
|
|
480
|
629
|
|
|
630 ngx_free_connection(c);
|
|
|
631
|
|
|
632 c->fd = (ngx_socket_t) -1;
|
|
0
|
633 }
|
|
|
634
|
|
112
|
635 ngx_log_debug2(NGX_LOG_DEBUG_CORE, cycle->log, 0,
|
|
|
636 "close listening %V #%d ", &ls[i].addr_text, ls[i].fd);
|
|
|
637
|
|
92
|
638 if (ngx_close_socket(ls[i].fd) == -1) {
|
|
0
|
639 ngx_log_error(NGX_LOG_EMERG, cycle->log, ngx_socket_errno,
|
|
10
|
640 ngx_close_socket_n " %V failed", &ls[i].addr_text);
|
|
0
|
641 }
|
|
498
|
642
|
|
538
|
643 #if (NGX_HAVE_UNIX_DOMAIN)
|
|
|
644
|
|
|
645 if (ls[i].sockaddr->sa_family == AF_UNIX
|
|
552
|
646 && ngx_process <= NGX_PROCESS_MASTER
|
|
540
|
647 && ngx_new_binary == 0)
|
|
538
|
648 {
|
|
|
649 u_char *name = ls[i].addr_text.data + sizeof("unix:") - 1;
|
|
|
650
|
|
|
651 if (ngx_delete_file(name) == -1) {
|
|
|
652 ngx_log_error(NGX_LOG_EMERG, cycle->log, ngx_socket_errno,
|
|
|
653 ngx_delete_file_n " %s failed", name);
|
|
|
654 }
|
|
|
655 }
|
|
|
656
|
|
|
657 #endif
|
|
|
658
|
|
498
|
659 ls[i].fd = (ngx_socket_t) -1;
|
|
92
|
660 }
|
|
|
661 }
|
|
0
|
662
|
|
92
|
663
|
|
|
664 ngx_connection_t *
|
|
|
665 ngx_get_connection(ngx_socket_t s, ngx_log_t *log)
|
|
|
666 {
|
|
110
|
667 ngx_uint_t instance;
|
|
|
668 ngx_event_t *rev, *wev;
|
|
|
669 ngx_connection_t *c;
|
|
92
|
670
|
|
|
671 /* disable warning: Win32 SOCKET is u_int while UNIX socket is int */
|
|
|
672
|
|
|
673 if (ngx_cycle->files && (ngx_uint_t) s >= ngx_cycle->files_n) {
|
|
|
674 ngx_log_error(NGX_LOG_ALERT, log, 0,
|
|
|
675 "the new socket has number %d, "
|
|
|
676 "but only %ui files are available",
|
|
|
677 s, ngx_cycle->files_n);
|
|
|
678 return NULL;
|
|
|
679 }
|
|
|
680
|
|
|
681 /* ngx_mutex_lock */
|
|
|
682
|
|
|
683 c = ngx_cycle->free_connections;
|
|
|
684
|
|
|
685 if (c == NULL) {
|
|
|
686 ngx_log_error(NGX_LOG_ALERT, log, 0,
|
|
412
|
687 "%ui worker_connections are not enough",
|
|
92
|
688 ngx_cycle->connection_n);
|
|
|
689
|
|
|
690 /* ngx_mutex_unlock */
|
|
|
691
|
|
|
692 return NULL;
|
|
|
693 }
|
|
|
694
|
|
|
695 ngx_cycle->free_connections = c->data;
|
|
|
696 ngx_cycle->free_connection_n--;
|
|
|
697
|
|
|
698 /* ngx_mutex_unlock */
|
|
|
699
|
|
|
700 if (ngx_cycle->files) {
|
|
|
701 ngx_cycle->files[s] = c;
|
|
|
702 }
|
|
|
703
|
|
110
|
704 rev = c->read;
|
|
|
705 wev = c->write;
|
|
|
706
|
|
|
707 ngx_memzero(c, sizeof(ngx_connection_t));
|
|
|
708
|
|
|
709 c->read = rev;
|
|
|
710 c->write = wev;
|
|
|
711 c->fd = s;
|
|
|
712 c->log = log;
|
|
|
713
|
|
|
714 instance = rev->instance;
|
|
|
715
|
|
|
716 ngx_memzero(rev, sizeof(ngx_event_t));
|
|
|
717 ngx_memzero(wev, sizeof(ngx_event_t));
|
|
|
718
|
|
|
719 rev->instance = !instance;
|
|
|
720 wev->instance = !instance;
|
|
|
721
|
|
|
722 rev->index = NGX_INVALID_INDEX;
|
|
|
723 wev->index = NGX_INVALID_INDEX;
|
|
|
724
|
|
|
725 rev->data = c;
|
|
|
726 wev->data = c;
|
|
|
727
|
|
|
728 wev->write = 1;
|
|
|
729
|
|
92
|
730 return c;
|
|
|
731 }
|
|
|
732
|
|
|
733
|
|
|
734 void
|
|
|
735 ngx_free_connection(ngx_connection_t *c)
|
|
|
736 {
|
|
|
737 /* ngx_mutex_lock */
|
|
|
738
|
|
|
739 c->data = ngx_cycle->free_connections;
|
|
|
740 ngx_cycle->free_connections = c;
|
|
|
741 ngx_cycle->free_connection_n++;
|
|
|
742
|
|
|
743 /* ngx_mutex_unlock */
|
|
|
744
|
|
|
745 if (ngx_cycle->files) {
|
|
|
746 ngx_cycle->files[c->fd] = NULL;
|
|
0
|
747 }
|
|
|
748 }
|
|
|
749
|
|
|
750
|
|
70
|
751 void
|
|
|
752 ngx_close_connection(ngx_connection_t *c)
|
|
0
|
753 {
|
|
366
|
754 ngx_err_t err;
|
|
|
755 ngx_uint_t log_error, level;
|
|
0
|
756 ngx_socket_t fd;
|
|
|
757
|
|
28
|
758 if (c->fd == -1) {
|
|
0
|
759 ngx_log_error(NGX_LOG_ALERT, c->log, 0, "connection already closed");
|
|
|
760 return;
|
|
|
761 }
|
|
|
762
|
|
|
763 if (c->read->timer_set) {
|
|
|
764 ngx_del_timer(c->read);
|
|
|
765 }
|
|
126
|
766
|
|
0
|
767 if (c->write->timer_set) {
|
|
|
768 ngx_del_timer(c->write);
|
|
|
769 }
|
|
126
|
770
|
|
0
|
771 if (ngx_del_conn) {
|
|
|
772 ngx_del_conn(c, NGX_CLOSE_EVENT);
|
|
|
773
|
|
|
774 } else {
|
|
|
775 if (c->read->active || c->read->disabled) {
|
|
|
776 ngx_del_event(c->read, NGX_READ_EVENT, NGX_CLOSE_EVENT);
|
|
|
777 }
|
|
|
778
|
|
|
779 if (c->write->active || c->write->disabled) {
|
|
|
780 ngx_del_event(c->write, NGX_WRITE_EVENT, NGX_CLOSE_EVENT);
|
|
|
781 }
|
|
|
782 }
|
|
|
783
|
|
|
784 #if (NGX_THREADS)
|
|
|
785
|
|
|
786 /*
|
|
|
787 * we have to clean the connection information before the closing
|
|
|
788 * because another thread may reopen the same file descriptor
|
|
|
789 * before we clean the connection
|
|
|
790 */
|
|
|
791
|
|
112
|
792 ngx_mutex_lock(ngx_posted_events_mutex);
|
|
0
|
793
|
|
112
|
794 if (c->read->prev) {
|
|
|
795 ngx_delete_posted_event(c->read);
|
|
|
796 }
|
|
0
|
797
|
|
112
|
798 if (c->write->prev) {
|
|
|
799 ngx_delete_posted_event(c->write);
|
|
|
800 }
|
|
0
|
801
|
|
112
|
802 c->read->closed = 1;
|
|
|
803 c->write->closed = 1;
|
|
0
|
804
|
|
112
|
805 if (c->single_connection) {
|
|
|
806 ngx_unlock(&c->lock);
|
|
|
807 c->read->locked = 0;
|
|
|
808 c->write->locked = 0;
|
|
|
809 }
|
|
0
|
810
|
|
112
|
811 ngx_mutex_unlock(ngx_posted_events_mutex);
|
|
0
|
812
|
|
|
813 #else
|
|
|
814
|
|
|
815 if (c->read->prev) {
|
|
|
816 ngx_delete_posted_event(c->read);
|
|
|
817 }
|
|
|
818
|
|
|
819 if (c->write->prev) {
|
|
|
820 ngx_delete_posted_event(c->write);
|
|
|
821 }
|
|
|
822
|
|
|
823 c->read->closed = 1;
|
|
|
824 c->write->closed = 1;
|
|
|
825
|
|
|
826 #endif
|
|
|
827
|
|
366
|
828 log_error = c->log_error;
|
|
|
829
|
|
92
|
830 ngx_free_connection(c);
|
|
|
831
|
|
0
|
832 fd = c->fd;
|
|
|
833 c->fd = (ngx_socket_t) -1;
|
|
|
834
|
|
|
835 if (ngx_close_socket(fd) == -1) {
|
|
|
836
|
|
366
|
837 err = ngx_socket_errno;
|
|
|
838
|
|
|
839 if (err == NGX_ECONNRESET || err == NGX_ENOTCONN) {
|
|
|
840
|
|
|
841 switch (log_error) {
|
|
|
842
|
|
|
843 case NGX_ERROR_INFO:
|
|
|
844 level = NGX_LOG_INFO;
|
|
|
845 break;
|
|
|
846
|
|
|
847 case NGX_ERROR_ERR:
|
|
|
848 level = NGX_LOG_ERR;
|
|
|
849 break;
|
|
|
850
|
|
|
851 default:
|
|
|
852 level = NGX_LOG_CRIT;
|
|
|
853 }
|
|
|
854
|
|
|
855 } else {
|
|
|
856 level = NGX_LOG_CRIT;
|
|
|
857 }
|
|
|
858
|
|
0
|
859 /* we use ngx_cycle->log because c->log was in c->pool */
|
|
|
860
|
|
366
|
861 ngx_log_error(level, ngx_cycle->log, err,
|
|
332
|
862 ngx_close_socket_n " %d failed", fd);
|
|
0
|
863 }
|
|
|
864 }
|
|
|
865
|
|
|
866
|
|
70
|
867 ngx_int_t
|
|
492
|
868 ngx_connection_local_sockaddr(ngx_connection_t *c, ngx_str_t *s,
|
|
|
869 ngx_uint_t port)
|
|
|
870 {
|
|
|
871 socklen_t len;
|
|
|
872 ngx_uint_t addr;
|
|
|
873 u_char sa[NGX_SOCKADDRLEN];
|
|
|
874 struct sockaddr_in *sin;
|
|
|
875 #if (NGX_HAVE_INET6)
|
|
|
876 ngx_uint_t i;
|
|
|
877 struct sockaddr_in6 *sin6;
|
|
|
878 #endif
|
|
|
879
|
|
|
880 switch (c->local_sockaddr->sa_family) {
|
|
|
881
|
|
|
882 #if (NGX_HAVE_INET6)
|
|
|
883 case AF_INET6:
|
|
|
884 sin6 = (struct sockaddr_in6 *) c->local_sockaddr;
|
|
|
885
|
|
|
886 for (addr = 0, i = 0; addr == 0 && i < 16; i++) {
|
|
|
887 addr |= sin6->sin6_addr.s6_addr[i];
|
|
|
888 }
|
|
|
889
|
|
|
890 break;
|
|
|
891 #endif
|
|
|
892
|
|
|
893 default: /* AF_INET */
|
|
|
894 sin = (struct sockaddr_in *) c->local_sockaddr;
|
|
|
895 addr = sin->sin_addr.s_addr;
|
|
|
896 break;
|
|
|
897 }
|
|
|
898
|
|
|
899 if (addr == 0) {
|
|
|
900
|
|
|
901 len = NGX_SOCKADDRLEN;
|
|
|
902
|
|
|
903 if (getsockname(c->fd, (struct sockaddr *) &sa, &len) == -1) {
|
|
|
904 ngx_connection_error(c, ngx_socket_errno, "getsockname() failed");
|
|
|
905 return NGX_ERROR;
|
|
|
906 }
|
|
|
907
|
|
|
908 c->local_sockaddr = ngx_palloc(c->pool, len);
|
|
|
909 if (c->local_sockaddr == NULL) {
|
|
|
910 return NGX_ERROR;
|
|
|
911 }
|
|
|
912
|
|
|
913 ngx_memcpy(c->local_sockaddr, &sa, len);
|
|
|
914 }
|
|
|
915
|
|
|
916 if (s == NULL) {
|
|
|
917 return NGX_OK;
|
|
|
918 }
|
|
|
919
|
|
|
920 s->len = ngx_sock_ntop(c->local_sockaddr, s->data, s->len, port);
|
|
|
921
|
|
|
922 return NGX_OK;
|
|
|
923 }
|
|
|
924
|
|
|
925
|
|
|
926 ngx_int_t
|
|
70
|
927 ngx_connection_error(ngx_connection_t *c, ngx_err_t err, char *text)
|
|
0
|
928 {
|
|
|
929 ngx_uint_t level;
|
|
|
930
|
|
484
|
931 /* Winsock may return NGX_ECONNABORTED instead of NGX_ECONNRESET */
|
|
|
932
|
|
|
933 if ((err == NGX_ECONNRESET
|
|
|
934 #if (NGX_WIN32)
|
|
|
935 || err == NGX_ECONNABORTED
|
|
|
936 #endif
|
|
|
937 ) && c->log_error == NGX_ERROR_IGNORE_ECONNRESET)
|
|
|
938 {
|
|
0
|
939 return 0;
|
|
|
940 }
|
|
|
941
|
|
460
|
942 #if (NGX_SOLARIS)
|
|
|
943 if (err == NGX_EINVAL && c->log_error == NGX_ERROR_IGNORE_EINVAL) {
|
|
|
944 return 0;
|
|
|
945 }
|
|
|
946 #endif
|
|
|
947
|
|
86
|
948 if (err == 0
|
|
|
949 || err == NGX_ECONNRESET
|
|
484
|
950 #if (NGX_WIN32)
|
|
|
951 || err == NGX_ECONNABORTED
|
|
|
952 #else
|
|
0
|
953 || err == NGX_EPIPE
|
|
|
954 #endif
|
|
|
955 || err == NGX_ENOTCONN
|
|
136
|
956 || err == NGX_ETIMEDOUT
|
|
0
|
957 || err == NGX_ECONNREFUSED
|
|
364
|
958 || err == NGX_ENETDOWN
|
|
|
959 || err == NGX_ENETUNREACH
|
|
|
960 || err == NGX_EHOSTDOWN
|
|
0
|
961 || err == NGX_EHOSTUNREACH)
|
|
|
962 {
|
|
|
963 switch (c->log_error) {
|
|
|
964
|
|
460
|
965 case NGX_ERROR_IGNORE_EINVAL:
|
|
0
|
966 case NGX_ERROR_IGNORE_ECONNRESET:
|
|
|
967 case NGX_ERROR_INFO:
|
|
|
968 level = NGX_LOG_INFO;
|
|
|
969 break;
|
|
|
970
|
|
530
|
971 default:
|
|
0
|
972 level = NGX_LOG_ERR;
|
|
|
973 }
|
|
|
974
|
|
|
975 } else {
|
|
366
|
976 level = NGX_LOG_ALERT;
|
|
0
|
977 }
|
|
|
978
|
|
|
979 ngx_log_error(level, c->log, err, text);
|
|
|
980
|
|
|
981 return NGX_ERROR;
|
|
|
982 }
|
