|
0
|
1
|
|
|
2 /*
|
|
|
3 * Copyright (C) Igor Sysoev
|
|
|
4 */
|
|
|
5
|
|
|
6
|
|
|
7 #include <ngx_config.h>
|
|
|
8 #include <ngx_core.h>
|
|
|
9 #include <ngx_http.h>
|
|
|
10 #include <ngx_http_proxy_handler.h>
|
|
|
11
|
|
|
12
|
|
|
13 static ngx_int_t ngx_http_proxy_handler(ngx_http_request_t *r);
|
|
|
14
|
|
|
15 static u_char *ngx_http_proxy_log_proxy_state(ngx_http_request_t *r,
|
|
|
16 u_char *buf, uintptr_t data);
|
|
|
17 static u_char *ngx_http_proxy_log_cache_state(ngx_http_request_t *r,
|
|
|
18 u_char *buf, uintptr_t data);
|
|
|
19 static u_char *ngx_http_proxy_log_reason(ngx_http_request_t *r, u_char *buf,
|
|
|
20 uintptr_t data);
|
|
|
21
|
|
|
22 static ngx_int_t ngx_http_proxy_pre_conf(ngx_conf_t *cf);
|
|
|
23 static void *ngx_http_proxy_create_loc_conf(ngx_conf_t *cf);
|
|
|
24 static char *ngx_http_proxy_merge_loc_conf(ngx_conf_t *cf,
|
|
|
25 void *parent, void *child);
|
|
|
26
|
|
|
27 static char *ngx_http_proxy_set_pass(ngx_conf_t *cf, ngx_command_t *cmd,
|
|
|
28 void *conf);
|
|
|
29 static char *ngx_http_proxy_parse_upstream(ngx_str_t *url,
|
|
|
30 ngx_http_proxy_upstream_conf_t *u);
|
|
|
31
|
|
2
|
32 static char *ngx_http_proxy_lowat_check(ngx_conf_t *cf, void *post, void *data);
|
|
|
33
|
|
|
34 static ngx_conf_post_t ngx_http_proxy_lowat_post =
|
|
|
35 { ngx_http_proxy_lowat_check } ;
|
|
|
36
|
|
0
|
37
|
|
|
38 static ngx_conf_bitmask_t next_upstream_masks[] = {
|
|
|
39 { ngx_string("error"), NGX_HTTP_PROXY_FT_ERROR },
|
|
|
40 { ngx_string("timeout"), NGX_HTTP_PROXY_FT_TIMEOUT },
|
|
|
41 { ngx_string("invalid_header"), NGX_HTTP_PROXY_FT_INVALID_HEADER },
|
|
|
42 { ngx_string("http_500"), NGX_HTTP_PROXY_FT_HTTP_500 },
|
|
|
43 { ngx_string("http_404"), NGX_HTTP_PROXY_FT_HTTP_404 },
|
|
|
44 { ngx_null_string, 0 }
|
|
|
45 };
|
|
|
46
|
|
|
47
|
|
|
48 static ngx_conf_bitmask_t use_stale_masks[] = {
|
|
|
49 { ngx_string("error"), NGX_HTTP_PROXY_FT_ERROR },
|
|
|
50 { ngx_string("timeout"), NGX_HTTP_PROXY_FT_TIMEOUT },
|
|
|
51 { ngx_string("invalid_header"), NGX_HTTP_PROXY_FT_INVALID_HEADER },
|
|
|
52 { ngx_string("http_500"), NGX_HTTP_PROXY_FT_HTTP_500 },
|
|
|
53 { ngx_string("busy_lock"), NGX_HTTP_PROXY_FT_BUSY_LOCK },
|
|
|
54 { ngx_string("max_waiting"), NGX_HTTP_PROXY_FT_MAX_WAITING },
|
|
|
55 { ngx_null_string, 0 }
|
|
|
56 };
|
|
|
57
|
|
|
58
|
|
|
59 static ngx_conf_num_bounds_t ngx_http_proxy_lm_factor_bounds = {
|
|
|
60 ngx_conf_check_num_bounds, 0, 100
|
|
|
61 };
|
|
|
62
|
|
|
63
|
|
|
64 static ngx_command_t ngx_http_proxy_commands[] = {
|
|
|
65
|
|
|
66 { ngx_string("proxy_pass"),
|
|
|
67 NGX_HTTP_LOC_CONF|NGX_CONF_TAKE1,
|
|
|
68 ngx_http_proxy_set_pass,
|
|
|
69 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
70 0,
|
|
|
71 NULL },
|
|
|
72
|
|
|
73 { ngx_string("proxy_connect_timeout"),
|
|
|
74 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_TAKE1,
|
|
|
75 ngx_conf_set_msec_slot,
|
|
|
76 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
77 offsetof(ngx_http_proxy_loc_conf_t, connect_timeout),
|
|
|
78 NULL },
|
|
|
79
|
|
|
80 { ngx_string("proxy_send_timeout"),
|
|
|
81 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_TAKE1,
|
|
|
82 ngx_conf_set_msec_slot,
|
|
|
83 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
84 offsetof(ngx_http_proxy_loc_conf_t, send_timeout),
|
|
|
85 NULL },
|
|
|
86
|
|
2
|
87 { ngx_string("proxy_send_lowat"),
|
|
|
88 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_TAKE1,
|
|
|
89 ngx_conf_set_size_slot,
|
|
|
90 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
91 offsetof(ngx_http_proxy_loc_conf_t, send_lowat),
|
|
|
92 &ngx_http_proxy_lowat_post },
|
|
|
93
|
|
0
|
94 { ngx_string("proxy_preserve_host"),
|
|
|
95 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_FLAG,
|
|
|
96 ngx_conf_set_flag_slot,
|
|
|
97 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
98 offsetof(ngx_http_proxy_loc_conf_t, preserve_host),
|
|
|
99 NULL },
|
|
|
100
|
|
6
|
101 { ngx_string("proxy_set_x_url"),
|
|
|
102 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_FLAG,
|
|
|
103 ngx_conf_set_flag_slot,
|
|
|
104 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
105 offsetof(ngx_http_proxy_loc_conf_t, set_x_url),
|
|
|
106 NULL },
|
|
|
107
|
|
0
|
108 { ngx_string("proxy_set_x_real_ip"),
|
|
|
109 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_FLAG,
|
|
|
110 ngx_conf_set_flag_slot,
|
|
|
111 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
112 offsetof(ngx_http_proxy_loc_conf_t, set_x_real_ip),
|
|
|
113 NULL },
|
|
|
114
|
|
|
115 { ngx_string("proxy_add_x_forwarded_for"),
|
|
|
116 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_FLAG,
|
|
|
117 ngx_conf_set_flag_slot,
|
|
|
118 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
119 offsetof(ngx_http_proxy_loc_conf_t, add_x_forwarded_for),
|
|
|
120 NULL },
|
|
|
121
|
|
|
122 { ngx_string("proxy_header_buffer_size"),
|
|
|
123 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_TAKE1,
|
|
|
124 ngx_conf_set_size_slot,
|
|
|
125 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
126 offsetof(ngx_http_proxy_loc_conf_t, header_buffer_size),
|
|
|
127 NULL },
|
|
|
128
|
|
|
129 { ngx_string("proxy_read_timeout"),
|
|
|
130 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_TAKE1,
|
|
|
131 ngx_conf_set_msec_slot,
|
|
|
132 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
133 offsetof(ngx_http_proxy_loc_conf_t, read_timeout),
|
|
|
134 NULL },
|
|
|
135
|
|
|
136 { ngx_string("proxy_buffers"),
|
|
|
137 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_TAKE2,
|
|
|
138 ngx_conf_set_bufs_slot,
|
|
|
139 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
140 offsetof(ngx_http_proxy_loc_conf_t, bufs),
|
|
|
141 NULL },
|
|
|
142
|
|
|
143 { ngx_string("proxy_busy_buffers_size"),
|
|
|
144 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_TAKE1,
|
|
|
145 ngx_conf_set_size_slot,
|
|
|
146 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
147 offsetof(ngx_http_proxy_loc_conf_t, busy_buffers_size),
|
|
|
148 NULL },
|
|
|
149
|
|
|
150 #if (NGX_HTTP_FILE_CACHE)
|
|
|
151
|
|
|
152 { ngx_string("proxy_cache_path"),
|
|
|
153 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_TAKE1234,
|
|
|
154 ngx_conf_set_path_slot,
|
|
|
155 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
156 offsetof(ngx_http_proxy_loc_conf_t, cache_path),
|
|
|
157 ngx_garbage_collector_http_cache_handler },
|
|
|
158
|
|
|
159 #endif
|
|
|
160
|
|
|
161 { ngx_string("proxy_temp_path"),
|
|
|
162 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_TAKE1234,
|
|
|
163 ngx_conf_set_path_slot,
|
|
|
164 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
165 offsetof(ngx_http_proxy_loc_conf_t, temp_path),
|
|
|
166 (void *) ngx_garbage_collector_temp_handler },
|
|
|
167
|
|
|
168 { ngx_string("proxy_temp_file_write_size"),
|
|
|
169 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_TAKE1,
|
|
|
170 ngx_conf_set_size_slot,
|
|
|
171 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
172 offsetof(ngx_http_proxy_loc_conf_t, temp_file_write_size),
|
|
|
173 NULL },
|
|
|
174
|
|
|
175 { ngx_string("proxy_cache"),
|
|
|
176 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_FLAG,
|
|
|
177 ngx_conf_set_flag_slot,
|
|
|
178 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
179 offsetof(ngx_http_proxy_loc_conf_t, cache),
|
|
|
180 NULL },
|
|
|
181
|
|
|
182
|
|
|
183 { ngx_string("proxy_busy_lock"),
|
|
|
184 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_TAKE13,
|
|
|
185 ngx_http_set_busy_lock_slot,
|
|
|
186 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
187 offsetof(ngx_http_proxy_loc_conf_t, busy_lock),
|
|
|
188 NULL },
|
|
|
189
|
|
|
190
|
|
|
191 { ngx_string("proxy_pass_server"),
|
|
|
192 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_FLAG,
|
|
|
193 ngx_conf_set_flag_slot,
|
|
|
194 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
195 offsetof(ngx_http_proxy_loc_conf_t, pass_server),
|
|
|
196 NULL },
|
|
|
197
|
|
|
198 { ngx_string("proxy_pass_x_accel_expires"),
|
|
|
199 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_FLAG,
|
|
|
200 ngx_conf_set_flag_slot,
|
|
|
201 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
202 offsetof(ngx_http_proxy_loc_conf_t, pass_x_accel_expires),
|
|
|
203 NULL },
|
|
|
204
|
|
|
205 { ngx_string("proxy_ignore_expires"),
|
|
|
206 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_FLAG,
|
|
|
207 ngx_conf_set_flag_slot,
|
|
|
208 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
209 offsetof(ngx_http_proxy_loc_conf_t, ignore_expires),
|
|
|
210 NULL },
|
|
|
211
|
|
|
212 { ngx_string("proxy_lm_factor"),
|
|
|
213 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_TAKE1,
|
|
|
214 ngx_conf_set_num_slot,
|
|
|
215 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
216 offsetof(ngx_http_proxy_loc_conf_t, lm_factor),
|
|
|
217 &ngx_http_proxy_lm_factor_bounds },
|
|
|
218
|
|
|
219 { ngx_string("proxy_default_expires"),
|
|
|
220 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_TAKE1,
|
|
|
221 ngx_conf_set_sec_slot,
|
|
|
222 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
223 offsetof(ngx_http_proxy_loc_conf_t, default_expires),
|
|
|
224 NULL },
|
|
|
225
|
|
|
226
|
|
|
227 { ngx_string("proxy_next_upstream"),
|
|
|
228 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_ANY,
|
|
|
229 ngx_conf_set_bitmask_slot,
|
|
|
230 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
231 offsetof(ngx_http_proxy_loc_conf_t, next_upstream),
|
|
|
232 &next_upstream_masks },
|
|
|
233
|
|
|
234 { ngx_string("proxy_use_stale"),
|
|
|
235 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_ANY,
|
|
|
236 ngx_conf_set_bitmask_slot,
|
|
|
237 NGX_HTTP_LOC_CONF_OFFSET,
|
|
|
238 offsetof(ngx_http_proxy_loc_conf_t, use_stale),
|
|
|
239 &use_stale_masks },
|
|
|
240
|
|
|
241 ngx_null_command
|
|
|
242 };
|
|
|
243
|
|
|
244
|
|
|
245 ngx_http_module_t ngx_http_proxy_module_ctx = {
|
|
|
246 ngx_http_proxy_pre_conf, /* pre conf */
|
|
|
247
|
|
|
248 NULL, /* create main configuration */
|
|
|
249 NULL, /* init main configuration */
|
|
|
250
|
|
|
251 NULL, /* create server configuration */
|
|
|
252 NULL, /* merge server configuration */
|
|
|
253
|
|
|
254 ngx_http_proxy_create_loc_conf, /* create location configration */
|
|
|
255 ngx_http_proxy_merge_loc_conf /* merge location configration */
|
|
|
256 };
|
|
|
257
|
|
|
258
|
|
|
259 ngx_module_t ngx_http_proxy_module = {
|
|
|
260 NGX_MODULE,
|
|
|
261 &ngx_http_proxy_module_ctx, /* module context */
|
|
|
262 ngx_http_proxy_commands, /* module directives */
|
|
|
263 NGX_HTTP_MODULE, /* module type */
|
|
|
264 NULL, /* init module */
|
|
|
265 NULL /* init child */
|
|
|
266 };
|
|
|
267
|
|
|
268
|
|
|
269
|
|
|
270 static ngx_http_log_op_name_t ngx_http_proxy_log_fmt_ops[] = {
|
|
|
271 { ngx_string("proxy"), /* STUB */ 100,
|
|
|
272 ngx_http_proxy_log_proxy_state },
|
|
|
273 { ngx_string("proxy_cache_state"), sizeof("BYPASS") - 1,
|
|
|
274 ngx_http_proxy_log_cache_state },
|
|
|
275 { ngx_string("proxy_reason"), sizeof("BPS") - 1,
|
|
|
276 ngx_http_proxy_log_reason },
|
|
|
277 { ngx_null_string, 0, NULL }
|
|
|
278 };
|
|
|
279
|
|
|
280
|
|
|
281
|
|
|
282 ngx_http_header_t ngx_http_proxy_headers_in[] = {
|
|
|
283 { ngx_string("Date"), offsetof(ngx_http_proxy_headers_in_t, date) },
|
|
|
284 { ngx_string("Server"), offsetof(ngx_http_proxy_headers_in_t, server) },
|
|
|
285
|
|
|
286 { ngx_string("Expires"), offsetof(ngx_http_proxy_headers_in_t, expires) },
|
|
|
287 { ngx_string("Cache-Control"),
|
|
|
288 offsetof(ngx_http_proxy_headers_in_t, cache_control) },
|
|
|
289 { ngx_string("ETag"), offsetof(ngx_http_proxy_headers_in_t, etag) },
|
|
|
290 { ngx_string("X-Accel-Expires"),
|
|
|
291 offsetof(ngx_http_proxy_headers_in_t, x_accel_expires) },
|
|
|
292
|
|
|
293 { ngx_string("Connection"),
|
|
|
294 offsetof(ngx_http_proxy_headers_in_t, connection) },
|
|
|
295 { ngx_string("Content-Type"),
|
|
|
296 offsetof(ngx_http_proxy_headers_in_t, content_type) },
|
|
|
297 { ngx_string("Content-Length"),
|
|
|
298 offsetof(ngx_http_proxy_headers_in_t, content_length) },
|
|
4
|
299 { ngx_string("Content-Encoding"),
|
|
|
300 offsetof(ngx_http_proxy_headers_in_t, content_encoding) },
|
|
0
|
301 { ngx_string("Last-Modified"),
|
|
|
302 offsetof(ngx_http_proxy_headers_in_t, last_modified) },
|
|
|
303 { ngx_string("Location"),
|
|
|
304 offsetof(ngx_http_proxy_headers_in_t, location) },
|
|
|
305 { ngx_string("Accept-Ranges"),
|
|
|
306 offsetof(ngx_http_proxy_headers_in_t, accept_ranges) },
|
|
|
307 { ngx_string("X-Pad"), offsetof(ngx_http_proxy_headers_in_t, x_pad) },
|
|
|
308
|
|
|
309 { ngx_null_string, 0 }
|
|
|
310 };
|
|
|
311
|
|
|
312
|
|
|
313 static ngx_str_t cache_states[] = {
|
|
|
314 ngx_string("PASS"),
|
|
|
315 ngx_string("BYPASS"),
|
|
|
316 ngx_string("AUTH"),
|
|
|
317 ngx_string("PGNC"),
|
|
|
318 ngx_string("MISS"),
|
|
|
319 ngx_string("EXPR"),
|
|
|
320 ngx_string("AGED"),
|
|
|
321 ngx_string("HIT")
|
|
|
322 };
|
|
|
323
|
|
|
324
|
|
|
325 static ngx_str_t cache_reasons[] = {
|
|
|
326 ngx_string("BPS"),
|
|
|
327 ngx_string("XAE"),
|
|
|
328 ngx_string("CTL"),
|
|
|
329 ngx_string("EXP"),
|
|
|
330 ngx_string("MVD"),
|
|
|
331 ngx_string("LMF"),
|
|
|
332 ngx_string("PDE")
|
|
|
333 };
|
|
|
334
|
|
|
335
|
|
|
336 static ngx_int_t ngx_http_proxy_handler(ngx_http_request_t *r)
|
|
|
337 {
|
|
|
338 ngx_http_proxy_ctx_t *p;
|
|
|
339
|
|
|
340 ngx_http_create_ctx(r, p, ngx_http_proxy_module,
|
|
|
341 sizeof(ngx_http_proxy_ctx_t),
|
|
|
342 NGX_HTTP_INTERNAL_SERVER_ERROR);
|
|
|
343
|
|
|
344 p->lcf = ngx_http_get_module_loc_conf(r, ngx_http_proxy_module);
|
|
|
345 p->request = r;
|
|
|
346
|
|
|
347 /* TODO: we currently support reverse proxy only */
|
|
|
348 p->accel = 1;
|
|
|
349
|
|
|
350 ngx_init_array(p->states, r->pool, p->lcf->peers->number,
|
|
|
351 sizeof(ngx_http_proxy_state_t),
|
|
|
352 NGX_HTTP_INTERNAL_SERVER_ERROR);
|
|
|
353
|
|
|
354 if (!(p->state = ngx_push_array(&p->states))) {
|
|
|
355 return NGX_HTTP_INTERNAL_SERVER_ERROR;
|
|
|
356 }
|
|
|
357
|
|
|
358 ngx_memzero(p->state, sizeof(ngx_http_proxy_state_t));
|
|
|
359
|
|
|
360 #if (NGX_HTTP_FILE_CACHE)
|
|
|
361
|
|
|
362 if (!p->lcf->cache
|
|
|
363 || (r->method != NGX_HTTP_GET && r->method != NGX_HTTP_HEAD))
|
|
|
364 {
|
|
|
365 p->state->cache_state = NGX_HTTP_PROXY_CACHE_PASS;
|
|
|
366
|
|
|
367 } else if (r->bypass_cache) {
|
|
|
368 p->state->cache_state = NGX_HTTP_PROXY_CACHE_BYPASS;
|
|
|
369
|
|
|
370 } else if (r->headers_in.authorization) {
|
|
|
371 p->state->cache_state = NGX_HTTP_PROXY_CACHE_AUTH;
|
|
|
372
|
|
|
373 } else if (r->no_cache) {
|
|
|
374 p->state->cache_state = NGX_HTTP_PROXY_CACHE_PGNC;
|
|
|
375 p->cachable = 1;
|
|
|
376
|
|
|
377 } else {
|
|
|
378 p->cachable = 1;
|
|
|
379 }
|
|
|
380
|
|
|
381
|
|
|
382 if (p->state->cache_state != 0) {
|
|
|
383 return ngx_http_proxy_request_upstream(p);
|
|
|
384 }
|
|
|
385
|
|
|
386 return ngx_http_proxy_get_cached_response(p);
|
|
|
387
|
|
|
388 #else
|
|
|
389
|
|
|
390 p->state->cache_state = NGX_HTTP_PROXY_CACHE_PASS;
|
|
|
391
|
|
|
392 return ngx_http_proxy_request_upstream(p);
|
|
|
393
|
|
|
394 #endif
|
|
|
395 }
|
|
|
396
|
|
|
397
|
|
|
398 void ngx_http_proxy_check_broken_connection(ngx_event_t *ev)
|
|
|
399 {
|
|
|
400 int n;
|
|
|
401 char buf[1];
|
|
|
402 ngx_err_t err;
|
|
|
403 ngx_connection_t *c;
|
|
|
404 ngx_http_request_t *r;
|
|
|
405 ngx_http_proxy_ctx_t *p;
|
|
|
406
|
|
|
407 ngx_log_debug1(NGX_LOG_DEBUG_HTTP, ev->log, 0,
|
|
|
408 "http proxy check client, write event:%d", ev->write);
|
|
|
409
|
|
|
410 #if (HAVE_KQUEUE)
|
|
|
411
|
|
4
|
412 if (ngx_event_flags & NGX_USE_KQUEUE_EVENT) {
|
|
0
|
413
|
|
|
414 if (!ev->pending_eof) {
|
|
|
415 return;
|
|
|
416 }
|
|
|
417
|
|
|
418 c = ev->data;
|
|
|
419 r = c->data;
|
|
|
420 p = ngx_http_get_module_ctx(r, ngx_http_proxy_module);
|
|
|
421
|
|
|
422 ev->eof = 1;
|
|
|
423
|
|
|
424 if (ev->kq_errno) {
|
|
|
425 ev->error = 1;
|
|
|
426 }
|
|
|
427
|
|
|
428 if (!p->cachable && p->upstream->peer.connection) {
|
|
|
429 ngx_log_error(NGX_LOG_INFO, ev->log, ev->kq_errno,
|
|
|
430 "kevent() reported that client closed "
|
|
|
431 "prematurely connection, "
|
|
|
432 "so upstream connection is closed too");
|
|
|
433 ngx_http_proxy_finalize_request(p, NGX_HTTP_CLIENT_CLOSED_REQUEST);
|
|
|
434 return;
|
|
|
435 }
|
|
|
436
|
|
|
437 ngx_log_error(NGX_LOG_INFO, ev->log, ev->kq_errno,
|
|
|
438 "kevent() reported that client closed "
|
|
|
439 "prematurely connection");
|
|
|
440
|
|
|
441 if (p->upstream == NULL || p->upstream->peer.connection == NULL) {
|
|
|
442 ngx_http_proxy_finalize_request(p, NGX_HTTP_CLIENT_CLOSED_REQUEST);
|
|
|
443 }
|
|
|
444
|
|
|
445 return;
|
|
|
446 }
|
|
|
447
|
|
|
448 #endif
|
|
|
449
|
|
|
450 c = ev->data;
|
|
|
451 r = c->data;
|
|
|
452 p = ngx_http_get_module_ctx(r, ngx_http_proxy_module);
|
|
|
453
|
|
|
454 n = recv(c->fd, buf, 1, MSG_PEEK);
|
|
|
455
|
|
|
456 err = ngx_socket_errno;
|
|
|
457
|
|
|
458 /*
|
|
|
459 * we do not need to disable the write event because
|
|
|
460 * that event has NGX_USE_CLEAR_EVENT type
|
|
|
461 */
|
|
|
462
|
|
|
463 if (ev->write && (n >= 0 || err == NGX_EAGAIN)) {
|
|
|
464 return;
|
|
|
465 }
|
|
|
466
|
|
|
467 if ((ngx_event_flags & NGX_USE_LEVEL_EVENT) && ev->active) {
|
|
|
468 if (ngx_del_event(ev, NGX_READ_EVENT, 0) == NGX_ERROR) {
|
|
|
469 ngx_http_proxy_finalize_request(p, NGX_HTTP_INTERNAL_SERVER_ERROR);
|
|
|
470 }
|
|
|
471 }
|
|
|
472
|
|
|
473 if (n > 0) {
|
|
|
474 return;
|
|
|
475 }
|
|
|
476
|
|
|
477 ev->eof = 1;
|
|
|
478
|
|
|
479 if (n == -1) {
|
|
|
480 if (err == NGX_EAGAIN) {
|
|
|
481 return;
|
|
|
482 }
|
|
|
483
|
|
|
484 ev->error = 1;
|
|
|
485
|
|
|
486 } else {
|
|
|
487 /* n == 0 */
|
|
|
488 err = 0;
|
|
|
489 }
|
|
|
490
|
|
|
491 if (!p->cachable && p->upstream->peer.connection) {
|
|
|
492 ngx_log_error(NGX_LOG_INFO, ev->log, err,
|
|
|
493 "client closed prematurely connection, "
|
|
|
494 "so upstream connection is closed too");
|
|
|
495 ngx_http_proxy_finalize_request(p, NGX_HTTP_CLIENT_CLOSED_REQUEST);
|
|
|
496 return;
|
|
|
497 }
|
|
|
498
|
|
|
499 ngx_log_error(NGX_LOG_INFO, ev->log, err,
|
|
|
500 "client closed prematurely connection");
|
|
|
501
|
|
|
502 if (p->upstream == NULL || p->upstream->peer.connection == NULL) {
|
|
|
503 ngx_http_proxy_finalize_request(p, NGX_HTTP_CLIENT_CLOSED_REQUEST);
|
|
|
504 }
|
|
|
505 }
|
|
|
506
|
|
|
507
|
|
|
508 void ngx_http_proxy_busy_lock_handler(ngx_event_t *rev)
|
|
|
509 {
|
|
|
510 ngx_connection_t *c;
|
|
|
511 ngx_http_request_t *r;
|
|
|
512 ngx_http_proxy_ctx_t *p;
|
|
|
513
|
|
|
514 ngx_log_debug0(NGX_LOG_DEBUG_HTTP, rev->log, 0, "http proxy busy lock");
|
|
|
515
|
|
|
516 c = rev->data;
|
|
|
517 r = c->data;
|
|
|
518 p = ngx_http_get_module_ctx(r, ngx_http_proxy_module);
|
|
|
519 p->action = "waiting upstream in busy lock";
|
|
|
520
|
|
|
521 if (p->request->connection->write->eof) {
|
|
|
522 ngx_http_busy_unlock(p->lcf->busy_lock, &p->busy_lock);
|
|
|
523 ngx_http_proxy_finalize_request(p, NGX_HTTP_CLIENT_CLOSED_REQUEST);
|
|
|
524 return;
|
|
|
525 }
|
|
|
526
|
|
|
527 if (rev->timedout) {
|
|
|
528 rev->timedout = 0;
|
|
|
529 p->busy_lock.time++;
|
|
|
530 p->state->bl_time = p->busy_lock.time;
|
|
|
531
|
|
|
532 #if (NGX_HTTP_FILE_CACHE)
|
|
|
533
|
|
|
534 if (p->state->cache_state < NGX_HTTP_PROXY_CACHE_MISS) {
|
|
|
535 ngx_http_proxy_upstream_busy_lock(p);
|
|
|
536
|
|
|
537 } else {
|
|
|
538 ngx_http_proxy_cache_busy_lock(p);
|
|
|
539 }
|
|
|
540 #else
|
|
|
541
|
|
|
542 ngx_http_proxy_upstream_busy_lock(p);
|
|
|
543
|
|
|
544 #endif
|
|
|
545
|
|
|
546 return;
|
|
|
547 }
|
|
|
548
|
|
|
549 ngx_log_debug0(NGX_LOG_DEBUG_HTTP, rev->log, 0,
|
|
|
550 "http proxy: client sent while busy lock");
|
|
|
551
|
|
|
552 /*
|
|
|
553 * TODO: kevent() notify about error, otherwise we need to
|
|
|
554 * call ngx_peek(): recv(MSG_PEEK) to get errno. THINK about aio.
|
|
|
555 * if there's no error we need to disable event.
|
|
|
556 */
|
|
|
557
|
|
|
558 #if 0
|
|
|
559 #if (HAVE_KQUEUE)
|
|
|
560
|
|
|
561 if ((ngx_event_flags & NGX_HAVE_KQUEUE_EVENT) && rev->kq_eof) {
|
|
|
562 ngx_http_busy_unlock(p->lcf->busy_lock, &p->busy_lock);
|
|
|
563
|
|
|
564 ngx_del_timer(rev);
|
|
|
565
|
|
|
566 ngx_log_error(NGX_LOG_ERR, c->log, rev->kq_errno,
|
|
|
567 "client() closed connection");
|
|
|
568
|
|
|
569 if (ngx_del_event(rev, NGX_READ_EVENT, NGX_CLOSE_EVENT) == NGX_ERROR) {
|
|
|
570 ngx_http_proxy_finalize_request(p, NGX_HTTP_INTERNAL_SERVER_ERROR);
|
|
|
571 return;
|
|
|
572 }
|
|
|
573
|
|
|
574 ngx_http_proxy_finalize_request(p, NGX_HTTP_CLIENT_CLOSED_REQUEST);
|
|
|
575 return;
|
|
|
576 }
|
|
|
577
|
|
|
578 #endif
|
|
|
579 #endif
|
|
|
580
|
|
|
581 }
|
|
|
582
|
|
|
583
|
|
|
584 void ngx_http_proxy_finalize_request(ngx_http_proxy_ctx_t *p, int rc)
|
|
|
585 {
|
|
|
586 ngx_http_request_t *r;
|
|
|
587
|
|
|
588 r = p->request;
|
|
|
589
|
|
|
590 ngx_log_debug0(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,
|
|
|
591 "finalize http proxy request");
|
|
|
592
|
|
|
593 if (p->upstream && p->upstream->peer.connection) {
|
|
|
594 ngx_http_proxy_close_connection(p);
|
|
|
595 }
|
|
|
596
|
|
|
597 if (p->header_sent
|
|
|
598 && (rc == NGX_ERROR || rc >= NGX_HTTP_SPECIAL_RESPONSE))
|
|
|
599 {
|
|
|
600 rc = 0;
|
|
|
601 }
|
|
|
602
|
|
|
603 if (p->saved_ctx) {
|
|
|
604 r->connection->log->data = p->saved_ctx;
|
|
|
605 r->connection->log->handler = p->saved_handler;
|
|
|
606 }
|
|
|
607
|
|
|
608 if (p->upstream && p->upstream->event_pipe) {
|
|
|
609 ngx_log_debug1(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,
|
|
|
610 "http proxy temp fd: %d",
|
|
|
611 p->upstream->event_pipe->temp_file->file.fd);
|
|
|
612 }
|
|
|
613
|
|
|
614 if (p->cache) {
|
|
|
615 ngx_log_debug1(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,
|
|
|
616 "http proxy cache fd: %d",
|
|
|
617 p->cache->ctx.file.fd);
|
|
|
618 }
|
|
|
619
|
|
|
620 if (p->upstream && p->upstream->event_pipe) {
|
|
|
621 r->file.fd = p->upstream->event_pipe->temp_file->file.fd;
|
|
|
622
|
|
|
623 } else if (p->cache) {
|
|
|
624 r->file.fd = p->cache->ctx.file.fd;
|
|
|
625 }
|
|
|
626
|
|
|
627 if (rc == 0 && r->main == NULL) {
|
|
|
628 rc = ngx_http_send_last(r);
|
|
|
629 }
|
|
|
630
|
|
|
631 ngx_http_finalize_request(r, rc);
|
|
|
632 }
|
|
|
633
|
|
|
634
|
|
|
635 void ngx_http_proxy_close_connection(ngx_http_proxy_ctx_t *p)
|
|
|
636 {
|
|
|
637 ngx_socket_t fd;
|
|
|
638 ngx_connection_t *c;
|
|
|
639
|
|
|
640 c = p->upstream->peer.connection;
|
|
|
641 p->upstream->peer.connection = NULL;
|
|
|
642
|
|
|
643 if (p->lcf->busy_lock) {
|
|
|
644 p->lcf->busy_lock->busy--;
|
|
|
645 }
|
|
|
646
|
|
|
647 ngx_log_debug1(NGX_LOG_DEBUG_HTTP, c->log, 0,
|
|
|
648 "http proxy close connection: %d", c->fd);
|
|
|
649
|
|
|
650 if (c->fd == -1) {
|
|
|
651 #if 0
|
|
|
652 ngx_log_error(NGX_LOG_ALERT, c->log, 0, "connection already closed");
|
|
|
653 #endif
|
|
|
654 return;
|
|
|
655 }
|
|
|
656
|
|
|
657 if (c->read->timer_set) {
|
|
|
658 ngx_del_timer(c->read);
|
|
|
659 }
|
|
|
660
|
|
|
661 if (c->write->timer_set) {
|
|
|
662 ngx_del_timer(c->write);
|
|
|
663 }
|
|
|
664
|
|
|
665 /* TODO: move connection to the connection pool */
|
|
|
666
|
|
|
667 if (ngx_del_conn) {
|
|
|
668 ngx_del_conn(c, NGX_CLOSE_EVENT);
|
|
|
669
|
|
|
670 } else {
|
|
|
671 if (c->read->active || c->read->disabled) {
|
|
|
672 ngx_del_event(c->read, NGX_READ_EVENT, NGX_CLOSE_EVENT);
|
|
|
673 }
|
|
|
674
|
|
|
675 if (c->write->active || c->read->disabled) {
|
|
|
676 ngx_del_event(c->write, NGX_WRITE_EVENT, NGX_CLOSE_EVENT);
|
|
|
677 }
|
|
|
678 }
|
|
|
679
|
|
|
680 /*
|
|
|
681 * we have to clean the connection information before the closing
|
|
|
682 * because another thread may reopen the same file descriptor
|
|
|
683 * before we clean the connection
|
|
|
684 */
|
|
|
685
|
|
|
686 if (ngx_mutex_lock(ngx_posted_events_mutex) == NGX_OK) {
|
|
|
687
|
|
|
688 if (c->read->prev) {
|
|
|
689 ngx_delete_posted_event(c->read);
|
|
|
690 }
|
|
|
691
|
|
|
692 if (c->write->prev) {
|
|
|
693 ngx_delete_posted_event(c->write);
|
|
|
694 }
|
|
|
695
|
|
|
696 c->read->closed = 1;
|
|
|
697 c->write->closed = 1;
|
|
|
698
|
|
|
699 ngx_mutex_unlock(ngx_posted_events_mutex);
|
|
|
700 }
|
|
|
701
|
|
|
702 fd = c->fd;
|
|
|
703 c->fd = (ngx_socket_t) -1;
|
|
|
704 c->data = NULL;
|
|
|
705
|
|
|
706 if (ngx_close_socket(fd) == -1) {
|
|
|
707 ngx_log_error(NGX_LOG_ALERT, c->log, ngx_socket_errno,
|
|
|
708 ngx_close_socket_n " failed");
|
|
|
709 }
|
|
|
710 }
|
|
|
711
|
|
|
712
|
|
|
713 size_t ngx_http_proxy_log_error(void *data, char *buf, size_t len)
|
|
|
714 {
|
|
|
715 ngx_http_proxy_log_ctx_t *ctx = data;
|
|
|
716
|
|
|
717 ngx_http_request_t *r;
|
|
|
718 ngx_peer_connection_t *peer;
|
|
|
719
|
|
|
720 r = ctx->proxy->request;
|
|
|
721 peer = &ctx->proxy->upstream->peer;
|
|
|
722
|
|
|
723 return ngx_snprintf(buf, len,
|
|
|
724 " while %s, client: %s, URL: %s, upstream: %s%s%s%s%s",
|
|
|
725 ctx->proxy->action,
|
|
|
726 r->connection->addr_text.data,
|
|
|
727 r->unparsed_uri.data,
|
|
|
728 peer->peers->peers[peer->cur_peer].addr_port_text.data,
|
|
|
729 ctx->proxy->lcf->upstream->uri.data,
|
|
|
730 r->uri.data + ctx->proxy->lcf->upstream->location->len,
|
|
|
731 r->args.len ? "?" : "",
|
|
|
732 r->args.len ? r->args.data : (u_char *) "");
|
|
|
733 }
|
|
|
734
|
|
|
735
|
|
|
736 static u_char *ngx_http_proxy_log_proxy_state(ngx_http_request_t *r,
|
|
|
737 u_char *buf, uintptr_t data)
|
|
|
738 {
|
|
|
739 ngx_http_proxy_ctx_t *p;
|
|
|
740
|
|
|
741 p = ngx_http_get_module_err_ctx(r, ngx_http_proxy_module);
|
|
|
742
|
|
|
743 if (p == NULL) {
|
|
|
744 *buf = '-';
|
|
|
745 return buf + 1;
|
|
|
746 }
|
|
|
747
|
|
|
748 if (p->state->cache_state == 0) {
|
|
|
749 *buf++ = '-';
|
|
|
750
|
|
|
751 } else {
|
|
|
752 buf = ngx_cpymem(buf, cache_states[p->state->cache_state - 1].data,
|
|
|
753 cache_states[p->state->cache_state - 1].len);
|
|
|
754 }
|
|
|
755
|
|
|
756 *buf++ = '/';
|
|
|
757
|
|
|
758 if (p->state->expired == 0) {
|
|
|
759 *buf++ = '-';
|
|
|
760
|
|
|
761 } else {
|
|
|
762 buf += ngx_snprintf((char *) buf, TIME_T_LEN,
|
|
|
763 TIME_T_FMT, p->state->expired);
|
|
|
764 }
|
|
|
765
|
|
|
766 *buf++ = '/';
|
|
|
767
|
|
|
768 if (p->state->bl_time == 0) {
|
|
|
769 *buf++ = '-';
|
|
|
770
|
|
|
771 } else {
|
|
|
772 buf += ngx_snprintf((char *) buf, TIME_T_LEN,
|
|
|
773 TIME_T_FMT, p->state->bl_time);
|
|
|
774 }
|
|
|
775
|
|
|
776 *buf++ = '/';
|
|
|
777
|
|
|
778 *buf++ = '*';
|
|
|
779
|
|
|
780 *buf++ = ' ';
|
|
|
781
|
|
|
782 if (p->state->status == 0) {
|
|
|
783 *buf++ = '-';
|
|
|
784
|
|
|
785 } else {
|
|
|
786 buf += ngx_snprintf((char *) buf, 4, "%" NGX_UINT_T_FMT,
|
|
|
787 p->state->status);
|
|
|
788 }
|
|
|
789
|
|
|
790 *buf++ = '/';
|
|
|
791
|
|
|
792 if (p->state->reason == 0) {
|
|
|
793 *buf++ = '-';
|
|
|
794
|
|
|
795 } else {
|
|
|
796 buf = ngx_cpymem(buf, cache_reasons[p->state->reason - 1].data,
|
|
|
797 cache_reasons[p->state->reason - 1].len);
|
|
|
798 }
|
|
|
799
|
|
|
800 *buf++ = '/';
|
|
|
801
|
|
|
802 if (p->state->reason < NGX_HTTP_PROXY_CACHE_XAE) {
|
|
|
803 *buf++ = '-';
|
|
|
804
|
|
|
805 } else {
|
|
|
806 buf += ngx_snprintf((char *) buf, TIME_T_LEN,
|
|
|
807 TIME_T_FMT, p->state->expires);
|
|
|
808 }
|
|
|
809
|
|
|
810 *buf++ = ' ';
|
|
|
811 *buf++ = '*';
|
|
|
812
|
|
|
813 return buf;
|
|
|
814 }
|
|
|
815
|
|
|
816
|
|
|
817 static u_char *ngx_http_proxy_log_cache_state(ngx_http_request_t *r,
|
|
|
818 u_char *buf, uintptr_t data)
|
|
|
819 {
|
|
|
820 ngx_http_proxy_ctx_t *p;
|
|
|
821
|
|
|
822 p = ngx_http_get_module_err_ctx(r, ngx_http_proxy_module);
|
|
|
823
|
|
|
824 if (p == NULL || p->state->cache_state == 0) {
|
|
|
825 *buf = '-';
|
|
|
826 return buf + 1;
|
|
|
827 }
|
|
|
828
|
|
|
829 return ngx_cpymem(buf, cache_states[p->state->cache_state - 1].data,
|
|
|
830 cache_states[p->state->cache_state - 1].len);
|
|
|
831 }
|
|
|
832
|
|
|
833
|
|
|
834 static u_char *ngx_http_proxy_log_reason(ngx_http_request_t *r, u_char *buf,
|
|
|
835 uintptr_t data)
|
|
|
836 {
|
|
|
837 ngx_http_proxy_ctx_t *p;
|
|
|
838
|
|
|
839 p = ngx_http_get_module_err_ctx(r, ngx_http_proxy_module);
|
|
|
840
|
|
|
841 if (p == NULL || p->state->reason == 0) {
|
|
|
842 *buf = '-';
|
|
|
843 return buf + 1;
|
|
|
844 }
|
|
|
845
|
|
|
846 return ngx_cpymem(buf, cache_reasons[p->state->reason - 1].data,
|
|
|
847 cache_reasons[p->state->reason - 1].len);
|
|
|
848 }
|
|
|
849
|
|
|
850
|
|
|
851 static ngx_int_t ngx_http_proxy_pre_conf(ngx_conf_t *cf)
|
|
|
852 {
|
|
|
853 ngx_http_log_op_name_t *op;
|
|
|
854
|
|
|
855 for (op = ngx_http_proxy_log_fmt_ops; op->name.len; op++) { /* void */ }
|
|
|
856 op->op = NULL;
|
|
|
857
|
|
|
858 op = ngx_http_log_fmt_ops;
|
|
|
859
|
|
|
860 for (op = ngx_http_log_fmt_ops; op->op; op++) {
|
|
|
861 if (op->name.len == 0) {
|
|
|
862 op = (ngx_http_log_op_name_t *) op->op;
|
|
|
863 }
|
|
|
864 }
|
|
|
865
|
|
|
866 op->op = (ngx_http_log_op_pt) ngx_http_proxy_log_fmt_ops;
|
|
|
867
|
|
|
868 return NGX_OK;
|
|
|
869 }
|
|
|
870
|
|
|
871
|
|
|
872 static void *ngx_http_proxy_create_loc_conf(ngx_conf_t *cf)
|
|
|
873 {
|
|
|
874 ngx_http_proxy_loc_conf_t *conf;
|
|
|
875
|
|
|
876 ngx_test_null(conf,
|
|
|
877 ngx_pcalloc(cf->pool, sizeof(ngx_http_proxy_loc_conf_t)),
|
|
|
878 NGX_CONF_ERROR);
|
|
|
879
|
|
|
880 /* set by ngx_pcalloc():
|
|
|
881
|
|
|
882 conf->bufs.num = 0;
|
|
|
883
|
|
|
884 conf->path = NULL;
|
|
|
885
|
|
|
886 conf->next_upstream = 0;
|
|
|
887 conf->use_stale = 0;
|
|
|
888
|
|
|
889 conf->upstreams = NULL;
|
|
|
890 conf->peers = NULL;
|
|
|
891
|
|
|
892 conf->cache_path = NULL;
|
|
|
893 conf->temp_path = NULL;
|
|
|
894
|
|
|
895 conf->busy_lock = NULL;
|
|
|
896
|
|
|
897 */
|
|
|
898
|
|
|
899 conf->connect_timeout = NGX_CONF_UNSET_MSEC;
|
|
|
900 conf->send_timeout = NGX_CONF_UNSET_MSEC;
|
|
2
|
901 conf->send_lowat = NGX_CONF_UNSET_SIZE;
|
|
0
|
902
|
|
|
903 conf->preserve_host = NGX_CONF_UNSET;
|
|
6
|
904 conf->set_x_url = NGX_CONF_UNSET;
|
|
0
|
905 conf->set_x_real_ip = NGX_CONF_UNSET;
|
|
|
906 conf->add_x_forwarded_for = NGX_CONF_UNSET;
|
|
|
907
|
|
|
908 conf->header_buffer_size = NGX_CONF_UNSET_SIZE;
|
|
|
909 conf->read_timeout = NGX_CONF_UNSET_MSEC;
|
|
|
910 conf->busy_buffers_size = NGX_CONF_UNSET_SIZE;
|
|
|
911
|
|
|
912 /*
|
|
|
913 * "proxy_max_temp_file_size" is hardcoded to 1G for reverse proxy,
|
|
|
914 * it should be configurable in the generic proxy
|
|
|
915 */
|
|
|
916 conf->max_temp_file_size = 1024 * 1024 * 1024;
|
|
|
917
|
|
|
918 conf->temp_file_write_size = NGX_CONF_UNSET_SIZE;
|
|
|
919
|
|
|
920 /* "proxy_cyclic_temp_file" is disabled */
|
|
|
921 conf->cyclic_temp_file = 0;
|
|
|
922
|
|
|
923 conf->cache = NGX_CONF_UNSET;
|
|
|
924
|
|
|
925 conf->pass_server = NGX_CONF_UNSET;
|
|
|
926 conf->pass_x_accel_expires = NGX_CONF_UNSET;
|
|
|
927 conf->ignore_expires = NGX_CONF_UNSET;
|
|
|
928 conf->lm_factor = NGX_CONF_UNSET;
|
|
|
929 conf->default_expires = NGX_CONF_UNSET;
|
|
|
930
|
|
|
931 return conf;
|
|
|
932 }
|
|
|
933
|
|
|
934
|
|
|
935 static char *ngx_http_proxy_merge_loc_conf(ngx_conf_t *cf,
|
|
|
936 void *parent, void *child)
|
|
|
937 {
|
|
|
938 ngx_http_proxy_loc_conf_t *prev = parent;
|
|
|
939 ngx_http_proxy_loc_conf_t *conf = child;
|
|
|
940
|
|
|
941 size_t size;
|
|
|
942
|
|
|
943 ngx_conf_merge_msec_value(conf->connect_timeout,
|
|
|
944 prev->connect_timeout, 60000);
|
|
|
945 ngx_conf_merge_msec_value(conf->send_timeout, prev->send_timeout, 60000);
|
|
2
|
946 ngx_conf_merge_size_value(conf->send_lowat, prev->send_lowat, 0);
|
|
0
|
947
|
|
|
948 ngx_conf_merge_value(conf->preserve_host, prev->preserve_host, 0);
|
|
6
|
949 ngx_conf_merge_value(conf->set_x_url, prev->set_x_url, 0);
|
|
0
|
950 ngx_conf_merge_value(conf->set_x_real_ip, prev->set_x_real_ip, 0);
|
|
|
951 ngx_conf_merge_value(conf->add_x_forwarded_for,
|
|
|
952 prev->add_x_forwarded_for, 0);
|
|
|
953
|
|
|
954 ngx_conf_merge_msec_value(conf->read_timeout, prev->read_timeout, 60000);
|
|
|
955
|
|
|
956 ngx_conf_merge_size_value(conf->header_buffer_size,
|
|
|
957 prev->header_buffer_size, (size_t) ngx_pagesize);
|
|
|
958
|
|
|
959 ngx_conf_merge_bufs_value(conf->bufs, prev->bufs, 8, ngx_pagesize);
|
|
|
960
|
|
|
961 if (conf->bufs.num < 2) {
|
|
|
962 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
|
|
|
963 "there must be at least 2 \"proxy_buffers\"");
|
|
|
964 return NGX_CONF_ERROR;
|
|
|
965 }
|
|
|
966
|
|
|
967 size = conf->header_buffer_size;
|
|
|
968 if (size < conf->bufs.size) {
|
|
|
969 size = conf->bufs.size;
|
|
|
970 }
|
|
|
971
|
|
|
972
|
|
|
973 ngx_conf_merge_size_value(conf->busy_buffers_size,
|
|
|
974 prev->busy_buffers_size, NGX_CONF_UNSET_SIZE);
|
|
|
975
|
|
|
976 if (conf->busy_buffers_size == NGX_CONF_UNSET_SIZE) {
|
|
|
977 conf->busy_buffers_size = 2 * size;
|
|
|
978
|
|
|
979 } else if (conf->busy_buffers_size < size) {
|
|
|
980 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
|
|
|
981 "\"proxy_busy_buffers_size\" must be equal or bigger than "
|
|
|
982 "maximum of the value of \"proxy_header_buffer_size\" and "
|
|
|
983 "one of the \"proxy_buffers\"");
|
|
|
984
|
|
|
985 return NGX_CONF_ERROR;
|
|
|
986
|
|
|
987 } else if (conf->busy_buffers_size > (conf->bufs.num - 1) * conf->bufs.size)
|
|
|
988 {
|
|
|
989 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
|
|
|
990 "\"proxy_busy_buffers_size\" must be less than "
|
|
|
991 "the size of all \"proxy_buffers\" minus one buffer");
|
|
|
992
|
|
|
993 return NGX_CONF_ERROR;
|
|
|
994 }
|
|
|
995
|
|
|
996
|
|
|
997 ngx_conf_merge_size_value(conf->temp_file_write_size,
|
|
|
998 prev->temp_file_write_size, NGX_CONF_UNSET_SIZE);
|
|
|
999
|
|
|
1000 if (conf->temp_file_write_size == NGX_CONF_UNSET_SIZE) {
|
|
|
1001 conf->temp_file_write_size = 2 * size;
|
|
|
1002
|
|
|
1003 } else if (conf->temp_file_write_size < size) {
|
|
|
1004 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
|
|
|
1005 "\"proxy_temp_file_write_size\" must be equal or bigger than "
|
|
|
1006 "maximum of the value of \"proxy_header_buffer_size\" and "
|
|
|
1007 "one of the \"proxy_buffers\"");
|
|
|
1008
|
|
|
1009 return NGX_CONF_ERROR;
|
|
|
1010 }
|
|
|
1011
|
|
|
1012
|
|
|
1013 ngx_conf_merge_size_value(conf->max_temp_file_size,
|
|
|
1014 prev->max_temp_file_size, NGX_CONF_UNSET_SIZE);
|
|
|
1015
|
|
|
1016 if (conf->max_temp_file_size == NGX_CONF_UNSET_SIZE) {
|
|
|
1017 conf->max_temp_file_size = 2 * size;
|
|
|
1018
|
|
|
1019 } else if (conf->max_temp_file_size < size) {
|
|
|
1020 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
|
|
|
1021 "\"proxy_max_temp_file_size\" must be equal or bigger than "
|
|
|
1022 "maximum of the value of \"proxy_header_buffer_size\" and "
|
|
|
1023 "one of the \"proxy_buffers\"");
|
|
|
1024
|
|
|
1025 return NGX_CONF_ERROR;
|
|
|
1026 }
|
|
|
1027
|
|
|
1028
|
|
|
1029 ngx_conf_merge_bitmask_value(conf->next_upstream, prev->next_upstream,
|
|
|
1030 (NGX_CONF_BITMASK_SET
|
|
|
1031 |NGX_HTTP_PROXY_FT_ERROR
|
|
|
1032 |NGX_HTTP_PROXY_FT_TIMEOUT));
|
|
|
1033
|
|
|
1034 ngx_conf_merge_bitmask_value(conf->use_stale, prev->use_stale,
|
|
|
1035 NGX_CONF_BITMASK_SET);
|
|
|
1036
|
|
|
1037 ngx_conf_merge_path_value(conf->cache_path, prev->cache_path,
|
|
|
1038 "cache", 1, 2, 0, cf->pool);
|
|
|
1039
|
|
|
1040 ngx_conf_merge_path_value(conf->temp_path, prev->temp_path,
|
|
|
1041 "temp", 1, 2, 0, cf->pool);
|
|
|
1042
|
|
|
1043 ngx_conf_merge_value(conf->cache, prev->cache, 0);
|
|
|
1044
|
|
|
1045
|
|
|
1046 /* conf->cache must be merged */
|
|
|
1047
|
|
|
1048 if (conf->busy_lock == NULL) {
|
|
|
1049 conf->busy_lock = prev->busy_lock;
|
|
|
1050 }
|
|
|
1051
|
|
|
1052 if (conf->busy_lock && conf->cache && conf->busy_lock->md5 == NULL) {
|
|
|
1053
|
|
|
1054 /* ngx_calloc_shared() */
|
|
|
1055 conf->busy_lock->md5_mask =
|
|
|
1056 ngx_pcalloc(cf->pool, (conf->busy_lock->max_busy + 7) / 8);
|
|
|
1057 if (conf->busy_lock->md5_mask == NULL) {
|
|
|
1058 return NGX_CONF_ERROR;
|
|
|
1059 }
|
|
|
1060
|
|
|
1061 /* 16 bytes are 128 bits of the md5 */
|
|
|
1062
|
|
|
1063 /* ngx_alloc_shared() */
|
|
|
1064 conf->busy_lock->md5 = ngx_palloc(cf->pool,
|
|
|
1065 16 * conf->busy_lock->max_busy);
|
|
|
1066 if (conf->busy_lock->md5 == NULL) {
|
|
|
1067 return NGX_CONF_ERROR;
|
|
|
1068 }
|
|
|
1069 }
|
|
|
1070
|
|
|
1071
|
|
|
1072 ngx_conf_merge_value(conf->pass_server, prev->pass_server, 0);
|
|
|
1073 ngx_conf_merge_value(conf->pass_x_accel_expires,
|
|
|
1074 prev->pass_x_accel_expires, 0);
|
|
|
1075 ngx_conf_merge_value(conf->ignore_expires, prev->ignore_expires, 0);
|
|
|
1076 ngx_conf_merge_value(conf->lm_factor, prev->lm_factor, 0);
|
|
|
1077 ngx_conf_merge_sec_value(conf->default_expires, prev->default_expires, 0);
|
|
|
1078
|
|
|
1079 return NULL;
|
|
|
1080 }
|
|
|
1081
|
|
|
1082
|
|
|
1083
|
|
|
1084 static char *ngx_http_proxy_set_pass(ngx_conf_t *cf, ngx_command_t *cmd,
|
|
|
1085 void *conf)
|
|
|
1086 {
|
|
|
1087 ngx_http_proxy_loc_conf_t *lcf = conf;
|
|
|
1088
|
|
|
1089 ngx_uint_t i, len;
|
|
|
1090 char *err;
|
|
|
1091 u_char *host;
|
|
|
1092 in_addr_t addr;
|
|
|
1093 ngx_str_t *value;
|
|
|
1094 struct hostent *h;
|
|
|
1095 ngx_http_core_loc_conf_t *clcf;
|
|
|
1096
|
|
|
1097
|
|
|
1098 value = cf->args->elts;
|
|
|
1099
|
|
|
1100 if (ngx_strncasecmp(value[1].data, "http://", 7) != 0) {
|
|
2
|
1101 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0, "invalid URL prefix");
|
|
|
1102 return NGX_CONF_ERROR;
|
|
0
|
1103 }
|
|
|
1104
|
|
2
|
1105 lcf->upstream = ngx_pcalloc(cf->pool,
|
|
|
1106 sizeof(ngx_http_proxy_upstream_conf_t));
|
|
|
1107 if (lcf->upstream == NULL) {
|
|
|
1108 return NGX_CONF_ERROR;
|
|
|
1109 }
|
|
0
|
1110
|
|
|
1111 lcf->upstream->url.len = value[1].len;
|
|
|
1112 if (!(lcf->upstream->url.data = ngx_palloc(cf->pool, value[1].len + 1))) {
|
|
|
1113 return NGX_CONF_ERROR;
|
|
|
1114 }
|
|
2
|
1115
|
|
0
|
1116 ngx_cpystrn(lcf->upstream->url.data, value[1].data, value[1].len + 1);
|
|
|
1117
|
|
|
1118 value[1].data += 7;
|
|
|
1119 value[1].len -= 7;
|
|
|
1120
|
|
|
1121 err = ngx_http_proxy_parse_upstream(&value[1], lcf->upstream);
|
|
|
1122
|
|
|
1123 if (err) {
|
|
2
|
1124 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0, err);
|
|
|
1125 return NGX_CONF_ERROR;
|
|
0
|
1126 }
|
|
|
1127
|
|
2
|
1128 if (!(host = ngx_palloc(cf->pool, lcf->upstream->host.len + 1))) {
|
|
|
1129 return NGX_CONF_ERROR;
|
|
|
1130 }
|
|
|
1131
|
|
0
|
1132 ngx_cpystrn(host, lcf->upstream->host.data, lcf->upstream->host.len + 1);
|
|
|
1133
|
|
|
1134 /* AF_INET only */
|
|
|
1135
|
|
|
1136 addr = inet_addr((char *) host);
|
|
|
1137
|
|
|
1138 if (addr == INADDR_NONE) {
|
|
|
1139 h = gethostbyname((char *) host);
|
|
|
1140
|
|
|
1141 if (h == NULL || h->h_addr_list[0] == NULL) {
|
|
|
1142 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0, "host %s not found", host);
|
|
|
1143 return NGX_CONF_ERROR;
|
|
|
1144 }
|
|
|
1145
|
|
|
1146 for (i = 0; h->h_addr_list[i] != NULL; i++) { /* void */ }
|
|
|
1147
|
|
|
1148 /* MP: ngx_shared_palloc() */
|
|
|
1149
|
|
2
|
1150 lcf->peers = ngx_pcalloc(cf->pool,
|
|
|
1151 sizeof(ngx_peers_t) + sizeof(ngx_peer_t) * (i - 1));
|
|
|
1152
|
|
|
1153 if (lcf->peers == NULL) {
|
|
|
1154 return NGX_CONF_ERROR;
|
|
|
1155 }
|
|
0
|
1156
|
|
|
1157 lcf->peers->number = i;
|
|
|
1158
|
|
6
|
1159 /* STUB */
|
|
|
1160 lcf->peers->max_fails = 1;
|
|
|
1161 lcf->peers->fail_timeout = 60;
|
|
|
1162
|
|
0
|
1163 for (i = 0; h->h_addr_list[i] != NULL; i++) {
|
|
|
1164 lcf->peers->peers[i].host.data = host;
|
|
|
1165 lcf->peers->peers[i].host.len = lcf->upstream->host.len;
|
|
|
1166 lcf->peers->peers[i].addr = *(in_addr_t *)(h->h_addr_list[i]);
|
|
|
1167 lcf->peers->peers[i].port = lcf->upstream->port;
|
|
|
1168
|
|
|
1169 len = INET_ADDRSTRLEN + lcf->upstream->port_text.len + 1;
|
|
2
|
1170
|
|
|
1171 lcf->peers->peers[i].addr_port_text.data =
|
|
|
1172 ngx_palloc(cf->pool, len);
|
|
|
1173 if (lcf->peers->peers[i].addr_port_text.data == NULL) {
|
|
|
1174 return NGX_CONF_ERROR;
|
|
|
1175 }
|
|
0
|
1176
|
|
|
1177 len = ngx_inet_ntop(AF_INET,
|
|
|
1178 &lcf->peers->peers[i].addr,
|
|
|
1179 lcf->peers->peers[i].addr_port_text.data,
|
|
|
1180 len);
|
|
|
1181
|
|
|
1182 lcf->peers->peers[i].addr_port_text.data[len++] = ':';
|
|
|
1183
|
|
|
1184 ngx_cpystrn(lcf->peers->peers[i].addr_port_text.data + len,
|
|
|
1185 lcf->upstream->port_text.data,
|
|
|
1186 lcf->upstream->port_text.len + 1);
|
|
|
1187
|
|
|
1188 lcf->peers->peers[i].addr_port_text.len =
|
|
|
1189 len + lcf->upstream->port_text.len + 1;
|
|
|
1190 }
|
|
|
1191
|
|
|
1192 } else {
|
|
|
1193
|
|
|
1194 /* MP: ngx_shared_palloc() */
|
|
|
1195
|
|
2
|
1196 if (!(lcf->peers = ngx_pcalloc(cf->pool, sizeof(ngx_peers_t)))) {
|
|
|
1197 return NGX_CONF_ERROR;
|
|
|
1198 }
|
|
0
|
1199
|
|
|
1200 lcf->peers->number = 1;
|
|
|
1201
|
|
|
1202 lcf->peers->peers[0].host.data = host;
|
|
|
1203 lcf->peers->peers[0].host.len = lcf->upstream->host.len;
|
|
|
1204 lcf->peers->peers[0].addr = addr;
|
|
|
1205 lcf->peers->peers[0].port = lcf->upstream->port;
|
|
|
1206
|
|
|
1207 len = lcf->upstream->host.len + lcf->upstream->port_text.len + 1;
|
|
|
1208
|
|
2
|
1209 lcf->peers->peers[0].addr_port_text.data =
|
|
|
1210 ngx_palloc(cf->pool, len + 1);
|
|
|
1211 if (lcf->peers->peers[0].addr_port_text.data == NULL) {
|
|
|
1212 return NGX_CONF_ERROR;
|
|
|
1213 }
|
|
0
|
1214
|
|
|
1215 len = lcf->upstream->host.len;
|
|
|
1216
|
|
|
1217 ngx_memcpy(lcf->peers->peers[0].addr_port_text.data,
|
|
|
1218 lcf->upstream->host.data, len);
|
|
|
1219
|
|
|
1220 lcf->peers->peers[0].addr_port_text.data[len++] = ':';
|
|
|
1221
|
|
|
1222 ngx_cpystrn(lcf->peers->peers[0].addr_port_text.data + len,
|
|
|
1223 lcf->upstream->port_text.data,
|
|
|
1224 lcf->upstream->port_text.len + 1);
|
|
|
1225 }
|
|
|
1226
|
|
|
1227 clcf = ngx_http_conf_get_module_loc_conf(cf, ngx_http_core_module);
|
|
|
1228
|
|
|
1229 lcf->upstream->location = &clcf->name;
|
|
|
1230 clcf->handler = ngx_http_proxy_handler;
|
|
|
1231
|
|
|
1232 if (clcf->name.data[clcf->name.len - 1] == '/') {
|
|
|
1233 clcf->auto_redirect = 1;
|
|
|
1234 }
|
|
|
1235
|
|
|
1236 return NULL;
|
|
|
1237 }
|
|
|
1238
|
|
|
1239
|
|
|
1240 static char *ngx_http_proxy_parse_upstream(ngx_str_t *url,
|
|
|
1241 ngx_http_proxy_upstream_conf_t *u)
|
|
|
1242 {
|
|
|
1243 size_t i;
|
|
|
1244
|
|
|
1245 if (url->data[0] == ':' || url->data[0] == '/') {
|
|
|
1246 return "invalid upstream URL";
|
|
|
1247 }
|
|
|
1248
|
|
|
1249 u->host.data = url->data;
|
|
|
1250 u->host_header.data = url->data;
|
|
|
1251
|
|
|
1252 for (i = 1; i < url->len; i++) {
|
|
|
1253 if (url->data[i] == ':') {
|
|
|
1254 u->port_text.data = &url->data[i] + 1;
|
|
|
1255 u->host.len = i;
|
|
|
1256 }
|
|
|
1257
|
|
|
1258 if (url->data[i] == '/') {
|
|
|
1259 u->uri.data = &url->data[i];
|
|
|
1260 u->uri.len = url->len - i;
|
|
|
1261 u->host_header.len = i;
|
|
|
1262
|
|
|
1263 if (u->host.len == 0) {
|
|
|
1264 u->host.len = i;
|
|
|
1265 }
|
|
|
1266
|
|
|
1267 if (u->port_text.data == NULL) {
|
|
|
1268 u->default_port = 1;
|
|
|
1269 u->port = htons(80);
|
|
|
1270 u->port_text.len = 2;
|
|
|
1271 u->port_text.data = (u_char *) "80";
|
|
|
1272 return NULL;
|
|
|
1273 }
|
|
|
1274
|
|
|
1275 u->port_text.len = &url->data[i] - u->port_text.data;
|
|
|
1276
|
|
|
1277 if (u->port_text.len > 0) {
|
|
|
1278 u->port = (in_port_t) ngx_atoi(u->port_text.data,
|
|
|
1279 u->port_text.len);
|
|
|
1280 if (u->port > 0) {
|
|
|
1281
|
|
|
1282 if (u->port == 80) {
|
|
|
1283 u->default_port = 1;
|
|
|
1284 }
|
|
|
1285
|
|
|
1286 u->port = htons(u->port);
|
|
|
1287 return NULL;
|
|
|
1288 }
|
|
|
1289 }
|
|
|
1290
|
|
|
1291 return "invalid port in upstream URL";
|
|
|
1292 }
|
|
|
1293 }
|
|
|
1294
|
|
|
1295 if (u->host.len == 0) {
|
|
|
1296 u->host.len = i;
|
|
|
1297 }
|
|
|
1298
|
|
|
1299 u->host_header.len = i;
|
|
|
1300
|
|
|
1301 u->uri.data = (u_char *) "/";
|
|
|
1302 u->uri.len = 1;
|
|
|
1303
|
|
|
1304 if (u->port_text.data == NULL) {
|
|
|
1305 u->default_port = 1;
|
|
|
1306 u->port = htons(80);
|
|
|
1307 u->port_text.len = 2;
|
|
|
1308 u->port_text.data = (u_char *) "80";
|
|
|
1309 return NULL;
|
|
|
1310 }
|
|
|
1311
|
|
|
1312 u->port_text.len = &url->data[i] - u->port_text.data;
|
|
|
1313
|
|
|
1314 if (u->port_text.len > 0) {
|
|
|
1315 u->port = (in_port_t) ngx_atoi(u->port_text.data, u->port_text.len);
|
|
|
1316 if (u->port > 0) {
|
|
|
1317 u->port = htons(u->port);
|
|
|
1318 return NULL;
|
|
|
1319 }
|
|
|
1320 }
|
|
|
1321
|
|
|
1322 return "invalid port in upstream URL";
|
|
|
1323 }
|
|
2
|
1324
|
|
|
1325
|
|
|
1326 static char *ngx_http_proxy_lowat_check(ngx_conf_t *cf, void *post, void *data)
|
|
|
1327 {
|
|
4
|
1328 ssize_t *np = data;
|
|
2
|
1329
|
|
4
|
1330 #if (NGX_FREEBSD)
|
|
2
|
1331
|
|
|
1332 if (*np >= ngx_freebsd_net_inet_tcp_sendspace) {
|
|
|
1333 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
|
|
|
1334 "\"proxy_send_lowat\" must be less than %d "
|
|
|
1335 "(sysctl net.inet.tcp.sendspace)",
|
|
|
1336 ngx_freebsd_net_inet_tcp_sendspace);
|
|
|
1337
|
|
|
1338 return NGX_CONF_ERROR;
|
|
|
1339 }
|
|
|
1340
|
|
4
|
1341 #elif !(HAVE_SO_SNDLOWAT)
|
|
2
|
1342
|
|
|
1343 ngx_conf_log_error(NGX_LOG_WARN, cf, 0,
|
|
|
1344 "\"proxy_send_lowat\" is not supported, ignored");
|
|
|
1345
|
|
|
1346 *np = 0;
|
|
|
1347
|
|
|
1348 #endif
|
|
|
1349
|
|
|
1350 return NGX_CONF_OK;
|
|
|
1351 }
|
