diff options
Diffstat (limited to '')
| -rw-r--r-- | src/log.c | 3968 |
1 files changed, 3968 insertions, 0 deletions
diff --git a/src/log.c b/src/log.c new file mode 100644 index 0000000..fd1c0ea --- /dev/null +++ b/src/log.c @@ -0,0 +1,3968 @@ +/* + * General logging functions. + * + * Copyright 2000-2008 Willy Tarreau <w@1wt.eu> + * + * This program is free software; you can redistribute it and/or + * modify it under the terms of the GNU General Public License + * as published by the Free Software Foundation; either version + * 2 of the License, or (at your option) any later version. + * + */ + +#include <ctype.h> +#include <stdarg.h> +#include <stdio.h> +#include <stdlib.h> +#include <string.h> +#include <syslog.h> +#include <time.h> +#include <unistd.h> +#include <errno.h> + +#include <sys/time.h> +#include <sys/uio.h> + +#include <haproxy/api.h> +#include <haproxy/applet.h> +#include <haproxy/cfgparse.h> +#include <haproxy/clock.h> +#include <haproxy/fd.h> +#include <haproxy/frontend.h> +#include <haproxy/global.h> +#include <haproxy/http.h> +#include <haproxy/http_ana.h> +#include <haproxy/listener.h> +#include <haproxy/log.h> +#include <haproxy/proxy.h> +#include <haproxy/sample.h> +#include <haproxy/sc_strm.h> +#include <haproxy/sink.h> +#include <haproxy/ssl_sock.h> +#include <haproxy/stconn.h> +#include <haproxy/stream.h> +#include <haproxy/time.h> +#include <haproxy/tools.h> + +/* global recv logs counter */ +int cum_log_messages; + +/* log forward proxy list */ +struct proxy *cfg_log_forward; + +struct log_fmt_st { + char *name; +}; + +static const struct log_fmt_st log_formats[LOG_FORMATS] = { + [LOG_FORMAT_LOCAL] = { + .name = "local", + }, + [LOG_FORMAT_RFC3164] = { + .name = "rfc3164", + }, + [LOG_FORMAT_RFC5424] = { + .name = "rfc5424", + }, + [LOG_FORMAT_PRIO] = { + .name = "priority", + }, + [LOG_FORMAT_SHORT] = { + .name = "short", + }, + [LOG_FORMAT_TIMED] = { + .name = "timed", + }, + [LOG_FORMAT_ISO] = { + .name = "iso", + }, + [LOG_FORMAT_RAW] = { + .name = "raw", + }, +}; + +/* + * This map is used with all the FD_* macros to check whether a particular bit + * is set or not. Each bit represents an ACSII code. ha_bit_set() sets those + * bytes which should be escaped. When ha_bit_test() returns non-zero, it means + * that the byte should be escaped. Be careful to always pass bytes from 0 to + * 255 exclusively to the macros. + */ +long rfc5424_escape_map[(256/8) / sizeof(long)]; +long hdr_encode_map[(256/8) / sizeof(long)]; +long url_encode_map[(256/8) / sizeof(long)]; +long http_encode_map[(256/8) / sizeof(long)]; + + +const char *log_facilities[NB_LOG_FACILITIES] = { + "kern", "user", "mail", "daemon", + "auth", "syslog", "lpr", "news", + "uucp", "cron", "auth2", "ftp", + "ntp", "audit", "alert", "cron2", + "local0", "local1", "local2", "local3", + "local4", "local5", "local6", "local7" +}; + +const char *log_levels[NB_LOG_LEVELS] = { + "emerg", "alert", "crit", "err", + "warning", "notice", "info", "debug" +}; + +const char sess_term_cond[16] = "-LcCsSPRIDKUIIII"; /* normal, Local, CliTo, CliErr, SrvTo, SrvErr, PxErr, Resource, Internal, Down, Killed, Up, -- */ +const char sess_fin_state[8] = "-RCHDLQT"; /* cliRequest, srvConnect, srvHeader, Data, Last, Queue, Tarpit */ + + +/* log_format */ +struct logformat_type { + char *name; + int type; + int mode; + int lw; /* logwait bitsfield */ + int (*config_callback)(struct logformat_node *node, struct proxy *curproxy); +}; + +int prepare_addrsource(struct logformat_node *node, struct proxy *curproxy); + +/* log_format variable names */ +static const struct logformat_type logformat_keywords[] = { + { "o", LOG_FMT_GLOBAL, PR_MODE_TCP, 0, NULL }, /* global option */ + + /* please keep these lines sorted ! */ + { "B", LOG_FMT_BYTES, PR_MODE_TCP, LW_BYTES, NULL }, /* bytes from server to client */ + { "CC", LOG_FMT_CCLIENT, PR_MODE_HTTP, LW_REQHDR, NULL }, /* client cookie */ + { "CS", LOG_FMT_CSERVER, PR_MODE_HTTP, LW_RSPHDR, NULL }, /* server cookie */ + { "H", LOG_FMT_HOSTNAME, PR_MODE_TCP, LW_INIT, NULL }, /* Hostname */ + { "ID", LOG_FMT_UNIQUEID, PR_MODE_TCP, LW_BYTES, NULL }, /* Unique ID */ + { "ST", LOG_FMT_STATUS, PR_MODE_TCP, LW_RESP, NULL }, /* status code */ + { "T", LOG_FMT_DATEGMT, PR_MODE_TCP, LW_INIT, NULL }, /* date GMT */ + { "Ta", LOG_FMT_Ta, PR_MODE_HTTP, LW_BYTES, NULL }, /* Time active (tr to end) */ + { "Tc", LOG_FMT_TC, PR_MODE_TCP, LW_BYTES, NULL }, /* Tc */ + { "Th", LOG_FMT_Th, PR_MODE_TCP, LW_BYTES, NULL }, /* Time handshake */ + { "Ti", LOG_FMT_Ti, PR_MODE_HTTP, LW_BYTES, NULL }, /* Time idle */ + { "Tl", LOG_FMT_DATELOCAL, PR_MODE_TCP, LW_INIT, NULL }, /* date local timezone */ + { "Tq", LOG_FMT_TQ, PR_MODE_HTTP, LW_BYTES, NULL }, /* Tq=Th+Ti+TR */ + { "Tr", LOG_FMT_Tr, PR_MODE_HTTP, LW_BYTES, NULL }, /* Tr */ + { "TR", LOG_FMT_TR, PR_MODE_HTTP, LW_BYTES, NULL }, /* Time to receive a valid request */ + { "Td", LOG_FMT_TD, PR_MODE_TCP, LW_BYTES, NULL }, /* Td = Tt - (Tq + Tw + Tc + Tr) */ + { "Ts", LOG_FMT_TS, PR_MODE_TCP, LW_INIT, NULL }, /* timestamp GMT */ + { "Tt", LOG_FMT_TT, PR_MODE_TCP, LW_BYTES, NULL }, /* Tt */ + { "Tu", LOG_FMT_TU, PR_MODE_TCP, LW_BYTES, NULL }, /* Tu = Tt -Ti */ + { "Tw", LOG_FMT_TW, PR_MODE_TCP, LW_BYTES, NULL }, /* Tw */ + { "U", LOG_FMT_BYTES_UP, PR_MODE_TCP, LW_BYTES, NULL }, /* bytes from client to server */ + { "ac", LOG_FMT_ACTCONN, PR_MODE_TCP, LW_BYTES, NULL }, /* actconn */ + { "b", LOG_FMT_BACKEND, PR_MODE_TCP, LW_INIT, NULL }, /* backend */ + { "bc", LOG_FMT_BECONN, PR_MODE_TCP, LW_BYTES, NULL }, /* beconn */ + { "bi", LOG_FMT_BACKENDIP, PR_MODE_TCP, LW_BCKIP, prepare_addrsource }, /* backend source ip */ + { "bp", LOG_FMT_BACKENDPORT, PR_MODE_TCP, LW_BCKIP, prepare_addrsource }, /* backend source port */ + { "bq", LOG_FMT_BCKQUEUE, PR_MODE_TCP, LW_BYTES, NULL }, /* backend_queue */ + { "ci", LOG_FMT_CLIENTIP, PR_MODE_TCP, LW_CLIP | LW_XPRT, NULL }, /* client ip */ + { "cp", LOG_FMT_CLIENTPORT, PR_MODE_TCP, LW_CLIP | LW_XPRT, NULL }, /* client port */ + { "f", LOG_FMT_FRONTEND, PR_MODE_TCP, LW_INIT, NULL }, /* frontend */ + { "fc", LOG_FMT_FECONN, PR_MODE_TCP, LW_BYTES, NULL }, /* feconn */ + { "fi", LOG_FMT_FRONTENDIP, PR_MODE_TCP, LW_FRTIP | LW_XPRT, NULL }, /* frontend ip */ + { "fp", LOG_FMT_FRONTENDPORT, PR_MODE_TCP, LW_FRTIP | LW_XPRT, NULL }, /* frontend port */ + { "ft", LOG_FMT_FRONTEND_XPRT, PR_MODE_TCP, LW_INIT, NULL }, /* frontend with transport mode */ + { "hr", LOG_FMT_HDRREQUEST, PR_MODE_TCP, LW_REQHDR, NULL }, /* header request */ + { "hrl", LOG_FMT_HDRREQUESTLIST, PR_MODE_TCP, LW_REQHDR, NULL }, /* header request list */ + { "hs", LOG_FMT_HDRRESPONS, PR_MODE_TCP, LW_RSPHDR, NULL }, /* header response */ + { "hsl", LOG_FMT_HDRRESPONSLIST, PR_MODE_TCP, LW_RSPHDR, NULL }, /* header response list */ + { "HM", LOG_FMT_HTTP_METHOD, PR_MODE_HTTP, LW_REQ, NULL }, /* HTTP method */ + { "HP", LOG_FMT_HTTP_PATH, PR_MODE_HTTP, LW_REQ, NULL }, /* HTTP relative or absolute path */ + { "HPO", LOG_FMT_HTTP_PATH_ONLY, PR_MODE_HTTP, LW_REQ, NULL }, /* HTTP path only (without host nor query string) */ + { "HQ", LOG_FMT_HTTP_QUERY, PR_MODE_HTTP, LW_REQ, NULL }, /* HTTP query */ + { "HU", LOG_FMT_HTTP_URI, PR_MODE_HTTP, LW_REQ, NULL }, /* HTTP full URI */ + { "HV", LOG_FMT_HTTP_VERSION, PR_MODE_HTTP, LW_REQ, NULL }, /* HTTP version */ + { "lc", LOG_FMT_LOGCNT, PR_MODE_TCP, LW_INIT, NULL }, /* log counter */ + { "ms", LOG_FMT_MS, PR_MODE_TCP, LW_INIT, NULL }, /* accept date millisecond */ + { "pid", LOG_FMT_PID, PR_MODE_TCP, LW_INIT, NULL }, /* log pid */ + { "r", LOG_FMT_REQ, PR_MODE_HTTP, LW_REQ, NULL }, /* request */ + { "rc", LOG_FMT_RETRIES, PR_MODE_TCP, LW_BYTES, NULL }, /* retries */ + { "rt", LOG_FMT_COUNTER, PR_MODE_TCP, LW_REQ, NULL }, /* request counter (HTTP or TCP session) */ + { "s", LOG_FMT_SERVER, PR_MODE_TCP, LW_SVID, NULL }, /* server */ + { "sc", LOG_FMT_SRVCONN, PR_MODE_TCP, LW_BYTES, NULL }, /* srv_conn */ + { "si", LOG_FMT_SERVERIP, PR_MODE_TCP, LW_SVIP, NULL }, /* server destination ip */ + { "sp", LOG_FMT_SERVERPORT, PR_MODE_TCP, LW_SVIP, NULL }, /* server destination port */ + { "sq", LOG_FMT_SRVQUEUE, PR_MODE_TCP, LW_BYTES, NULL }, /* srv_queue */ + { "sslc", LOG_FMT_SSL_CIPHER, PR_MODE_TCP, LW_XPRT, NULL }, /* client-side SSL ciphers */ + { "sslv", LOG_FMT_SSL_VERSION, PR_MODE_TCP, LW_XPRT, NULL }, /* client-side SSL protocol version */ + { "t", LOG_FMT_DATE, PR_MODE_TCP, LW_INIT, NULL }, /* date */ + { "tr", LOG_FMT_tr, PR_MODE_HTTP, LW_INIT, NULL }, /* date of start of request */ + { "trg",LOG_FMT_trg, PR_MODE_HTTP, LW_INIT, NULL }, /* date of start of request, GMT */ + { "trl",LOG_FMT_trl, PR_MODE_HTTP, LW_INIT, NULL }, /* date of start of request, local */ + { "ts", LOG_FMT_TERMSTATE, PR_MODE_TCP, LW_BYTES, NULL },/* termination state */ + { "tsc", LOG_FMT_TERMSTATE_CK, PR_MODE_TCP, LW_INIT, NULL },/* termination state */ + { 0, 0, 0, 0, NULL } +}; + +char default_http_log_format[] = "%ci:%cp [%tr] %ft %b/%s %TR/%Tw/%Tc/%Tr/%Ta %ST %B %CC %CS %tsc %ac/%fc/%bc/%sc/%rc %sq/%bq %hr %hs %{+Q}r"; // default format +char default_https_log_format[] = "%ci:%cp [%tr] %ft %b/%s %TR/%Tw/%Tc/%Tr/%Ta %ST %B %CC %CS %tsc %ac/%fc/%bc/%sc/%rc %sq/%bq %hr %hs %{+Q}r %[fc_err]/%[ssl_fc_err,hex]/%[ssl_c_err]/%[ssl_c_ca_err]/%[ssl_fc_is_resumed] %[ssl_fc_sni]/%sslv/%sslc"; +char clf_http_log_format[] = "%{+Q}o %{-Q}ci - - [%trg] %r %ST %B \"\" \"\" %cp %ms %ft %b %s %TR %Tw %Tc %Tr %Ta %tsc %ac %fc %bc %sc %rc %sq %bq %CC %CS %hrl %hsl"; +char default_tcp_log_format[] = "%ci:%cp [%t] %ft %b/%s %Tw/%Tc/%Tt %B %ts %ac/%fc/%bc/%sc/%rc %sq/%bq"; +char *log_format = NULL; + +/* Default string used for structured-data part in RFC5424 formatted + * syslog messages. + */ +char default_rfc5424_sd_log_format[] = "- "; + +/* total number of dropped logs */ +unsigned int dropped_logs = 0; + +/* This is a global syslog message buffer, common to all outgoing + * messages. It contains only the data part. + */ +THREAD_LOCAL char *logline = NULL; + +/* A global syslog message buffer, common to all RFC5424 syslog messages. + * Currently, it is used for generating the structured-data part. + */ +THREAD_LOCAL char *logline_rfc5424 = NULL; + +struct logformat_var_args { + char *name; + int mask; +}; + +struct logformat_var_args var_args_list[] = { +// global + { "M", LOG_OPT_MANDATORY }, + { "Q", LOG_OPT_QUOTE }, + { "X", LOG_OPT_HEXA }, + { "E", LOG_OPT_ESC }, + { 0, 0 } +}; + +/* + * callback used to configure addr source retrieval + */ +int prepare_addrsource(struct logformat_node *node, struct proxy *curproxy) +{ + curproxy->options2 |= PR_O2_SRC_ADDR; + + return 0; +} + + +/* + * Parse args in a logformat_var. Returns 0 in error + * case, otherwise, it returns 1. + */ +int parse_logformat_var_args(char *args, struct logformat_node *node, char **err) +{ + int i = 0; + int end = 0; + int flags = 0; // 1 = + 2 = - + char *sp = NULL; // start pointer + + if (args == NULL) { + memprintf(err, "internal error: parse_logformat_var_args() expects non null 'args'"); + return 0; + } + + while (1) { + if (*args == '\0') + end = 1; + + if (*args == '+') { + // add flag + sp = args + 1; + flags = 1; + } + if (*args == '-') { + // delete flag + sp = args + 1; + flags = 2; + } + + if (*args == '\0' || *args == ',') { + *args = '\0'; + for (i = 0; sp && var_args_list[i].name; i++) { + if (strcmp(sp, var_args_list[i].name) == 0) { + if (flags == 1) { + node->options |= var_args_list[i].mask; + break; + } else if (flags == 2) { + node->options &= ~var_args_list[i].mask; + break; + } + } + } + sp = NULL; + if (end) + break; + } + args++; + } + return 1; +} + +/* + * Parse a variable '%varname' or '%{args}varname' in log-format. The caller + * must pass the args part in the <arg> pointer with its length in <arg_len>, + * and varname with its length in <var> and <var_len> respectively. <arg> is + * ignored when arg_len is 0. Neither <var> nor <var_len> may be null. + * Returns false in error case and err is filled, otherwise returns true. + */ +int parse_logformat_var(char *arg, int arg_len, char *var, int var_len, struct proxy *curproxy, struct list *list_format, int *defoptions, char **err) +{ + int j; + struct logformat_node *node = NULL; + + for (j = 0; logformat_keywords[j].name; j++) { // search a log type + if (strlen(logformat_keywords[j].name) == var_len && + strncmp(var, logformat_keywords[j].name, var_len) == 0) { + if (logformat_keywords[j].mode != PR_MODE_HTTP || curproxy->mode == PR_MODE_HTTP) { + node = calloc(1, sizeof(*node)); + if (!node) { + memprintf(err, "out of memory error"); + goto error_free; + } + node->type = logformat_keywords[j].type; + node->options = *defoptions; + if (arg_len) { + node->arg = my_strndup(arg, arg_len); + if (!parse_logformat_var_args(node->arg, node, err)) + goto error_free; + } + if (node->type == LOG_FMT_GLOBAL) { + *defoptions = node->options; + free(node->arg); + free(node); + } else { + if (logformat_keywords[j].config_callback && + logformat_keywords[j].config_callback(node, curproxy) != 0) { + goto error_free; + } + curproxy->to_log |= logformat_keywords[j].lw; + LIST_APPEND(list_format, &node->list); + } + return 1; + } else { + memprintf(err, "format variable '%s' is reserved for HTTP mode", + logformat_keywords[j].name); + goto error_free; + } + } + } + + j = var[var_len]; + var[var_len] = 0; + memprintf(err, "no such format variable '%s'. If you wanted to emit the '%%' character verbatim, you need to use '%%%%'", var); + var[var_len] = j; + + error_free: + if (node) { + free(node->arg); + free(node); + } + return 0; +} + +/* + * push to the logformat linked list + * + * start: start pointer + * end: end text pointer + * type: string type + * list_format: destination list + * + * LOG_TEXT: copy chars from start to end excluding end. + * +*/ +int add_to_logformat_list(char *start, char *end, int type, struct list *list_format, char **err) +{ + char *str; + + if (type == LF_TEXT) { /* type text */ + struct logformat_node *node = calloc(1, sizeof(*node)); + if (!node) { + memprintf(err, "out of memory error"); + return 0; + } + str = calloc(1, end - start + 1); + strncpy(str, start, end - start); + str[end - start] = '\0'; + node->arg = str; + node->type = LOG_FMT_TEXT; // type string + LIST_APPEND(list_format, &node->list); + } else if (type == LF_SEPARATOR) { + struct logformat_node *node = calloc(1, sizeof(*node)); + if (!node) { + memprintf(err, "out of memory error"); + return 0; + } + node->type = LOG_FMT_SEPARATOR; + LIST_APPEND(list_format, &node->list); + } + return 1; +} + +/* + * Parse the sample fetch expression <text> and add a node to <list_format> upon + * success. At the moment, sample converters are not yet supported but fetch arguments + * should work. The curpx->conf.args.ctx must be set by the caller. If an end pointer + * is passed in <endptr>, it will be updated with the pointer to the first character + * not part of the sample expression. + * + * In error case, the function returns 0, otherwise it returns 1. + */ +int add_sample_to_logformat_list(char *text, char *arg, int arg_len, struct proxy *curpx, struct list *list_format, int options, int cap, char **err, char **endptr) +{ + char *cmd[2]; + struct sample_expr *expr = NULL; + struct logformat_node *node = NULL; + int cmd_arg; + + cmd[0] = text; + cmd[1] = ""; + cmd_arg = 0; + + expr = sample_parse_expr(cmd, &cmd_arg, curpx->conf.args.file, curpx->conf.args.line, err, + &curpx->conf.args, endptr); + if (!expr) { + memprintf(err, "failed to parse sample expression <%s> : %s", text, *err); + goto error_free; + } + + node = calloc(1, sizeof(*node)); + if (!node) { + memprintf(err, "out of memory error"); + goto error_free; + } + node->type = LOG_FMT_EXPR; + node->expr = expr; + node->options = options; + + if (arg_len) { + node->arg = my_strndup(arg, arg_len); + if (!parse_logformat_var_args(node->arg, node, err)) + goto error_free; + } + if (expr->fetch->val & cap & SMP_VAL_REQUEST) + node->options |= LOG_OPT_REQ_CAP; /* fetch method is request-compatible */ + + if (expr->fetch->val & cap & SMP_VAL_RESPONSE) + node->options |= LOG_OPT_RES_CAP; /* fetch method is response-compatible */ + + if (!(expr->fetch->val & cap)) { + memprintf(err, "sample fetch <%s> may not be reliably used here because it needs '%s' which is not available here", + text, sample_src_names(expr->fetch->use)); + goto error_free; + } + + if ((options & LOG_OPT_HTTP) && (expr->fetch->use & (SMP_USE_L6REQ|SMP_USE_L6RES))) { + ha_warning("parsing [%s:%d] : L6 sample fetch <%s> ignored in HTTP log-format string.\n", + curpx->conf.args.file, curpx->conf.args.line, text); + } + + /* check if we need to allocate an http_txn struct for HTTP parsing */ + /* Note, we may also need to set curpx->to_log with certain fetches */ + curpx->http_needed |= !!(expr->fetch->use & SMP_USE_HTTP_ANY); + + /* FIXME: temporary workaround for missing LW_XPRT and LW_REQ flags + * needed with some sample fetches (eg: ssl*). We always set it for + * now on, but this will leave with sample capabilities soon. + */ + curpx->to_log |= LW_XPRT; + if (curpx->http_needed) + curpx->to_log |= LW_REQ; + LIST_APPEND(list_format, &node->list); + return 1; + + error_free: + release_sample_expr(expr); + if (node) { + free(node->arg); + free(node); + } + return 0; +} + +/* + * Parse the log_format string and fill a linked list. + * Variable name are preceded by % and composed by characters [a-zA-Z0-9]* : %varname + * You can set arguments using { } : %{many arguments}varname. + * The curproxy->conf.args.ctx must be set by the caller. + * + * fmt: the string to parse + * curproxy: the proxy affected + * list_format: the destination list + * options: LOG_OPT_* to force on every node + * cap: all SMP_VAL_* flags supported by the consumer + * + * The function returns 1 in success case, otherwise, it returns 0 and err is filled. + */ +int parse_logformat_string(const char *fmt, struct proxy *curproxy, struct list *list_format, int options, int cap, char **err) +{ + char *sp, *str, *backfmt; /* start pointer for text parts */ + char *arg = NULL; /* start pointer for args */ + char *var = NULL; /* start pointer for vars */ + int arg_len = 0; + int var_len = 0; + int cformat; /* current token format */ + int pformat; /* previous token format */ + struct logformat_node *tmplf, *back; + + sp = str = backfmt = strdup(fmt); + if (!str) { + memprintf(err, "out of memory error"); + return 0; + } + curproxy->to_log |= LW_INIT; + + /* flush the list first. */ + list_for_each_entry_safe(tmplf, back, list_format, list) { + LIST_DELETE(&tmplf->list); + release_sample_expr(tmplf->expr); + free(tmplf->arg); + free(tmplf); + } + + for (cformat = LF_INIT; cformat != LF_END; str++) { + pformat = cformat; + + if (!*str) + cformat = LF_END; // preset it to save all states from doing this + + /* The principle of the two-step state machine below is to first detect a change, and + * second have all common paths processed at one place. The common paths are the ones + * encountered in text areas (LF_INIT, LF_TEXT, LF_SEPARATOR) and at the end (LF_END). + * We use the common LF_INIT state to dispatch to the different final states. + */ + switch (pformat) { + case LF_STARTVAR: // text immediately following a '%' + arg = NULL; var = NULL; + arg_len = var_len = 0; + if (*str == '{') { // optional argument + cformat = LF_STARG; + arg = str + 1; + } + else if (*str == '[') { + cformat = LF_STEXPR; + var = str + 1; // store expr in variable name + } + else if (isalpha((unsigned char)*str)) { // variable name + cformat = LF_VAR; + var = str; + } + else if (*str == '%') + cformat = LF_TEXT; // convert this character to a literal (useful for '%') + else if (isdigit((unsigned char)*str) || *str == ' ' || *str == '\t') { + /* single '%' followed by blank or digit, send them both */ + cformat = LF_TEXT; + pformat = LF_TEXT; /* finally we include the previous char as well */ + sp = str - 1; /* send both the '%' and the current char */ + memprintf(err, "unexpected variable name near '%c' at position %d line : '%s'. Maybe you want to write a single '%%', use the syntax '%%%%'", + *str, (int)(str - backfmt), fmt); + goto fail; + + } + else + cformat = LF_INIT; // handle other cases of literals + break; + + case LF_STARG: // text immediately following '%{' + if (*str == '}') { // end of arg + cformat = LF_EDARG; + arg_len = str - arg; + *str = 0; // used for reporting errors + } + break; + + case LF_EDARG: // text immediately following '%{arg}' + if (*str == '[') { + cformat = LF_STEXPR; + var = str + 1; // store expr in variable name + break; + } + else if (isalnum((unsigned char)*str)) { // variable name + cformat = LF_VAR; + var = str; + break; + } + memprintf(err, "parse argument modifier without variable name near '%%{%s}'", arg); + goto fail; + + case LF_STEXPR: // text immediately following '%[' + /* the whole sample expression is parsed at once, + * returning the pointer to the first character not + * part of the expression, which MUST be the trailing + * angle bracket. + */ + if (!add_sample_to_logformat_list(var, arg, arg_len, curproxy, list_format, options, cap, err, &str)) + goto fail; + + if (*str == ']') { + // end of arg, go on with next state + cformat = pformat = LF_EDEXPR; + sp = str; + } + else { + char c = *str; + *str = 0; + if (isprint((unsigned char)c)) + memprintf(err, "expected ']' after '%s', but found '%c'", var, c); + else + memprintf(err, "missing ']' after '%s'", var); + goto fail; + } + break; + + case LF_VAR: // text part of a variable name + var_len = str - var; + if (!isalnum((unsigned char)*str)) + cformat = LF_INIT; // not variable name anymore + break; + + default: // LF_INIT, LF_TEXT, LF_SEPARATOR, LF_END, LF_EDEXPR + cformat = LF_INIT; + } + + if (cformat == LF_INIT) { /* resynchronize state to text/sep/startvar */ + switch (*str) { + case '%': cformat = LF_STARTVAR; break; + case 0 : cformat = LF_END; break; + case ' ': + if (options & LOG_OPT_MERGE_SPACES) { + cformat = LF_SEPARATOR; + break; + } + /* fall through */ + default : cformat = LF_TEXT; break; + } + } + + if (cformat != pformat || pformat == LF_SEPARATOR) { + switch (pformat) { + case LF_VAR: + if (!parse_logformat_var(arg, arg_len, var, var_len, curproxy, list_format, &options, err)) + goto fail; + break; + case LF_TEXT: + case LF_SEPARATOR: + if (!add_to_logformat_list(sp, str, pformat, list_format, err)) + goto fail; + break; + } + sp = str; /* new start of text at every state switch and at every separator */ + } + } + + if (pformat == LF_STARTVAR || pformat == LF_STARG || pformat == LF_STEXPR) { + memprintf(err, "truncated line after '%s'", var ? var : arg ? arg : "%"); + goto fail; + } + free(backfmt); + + return 1; + fail: + free(backfmt); + return 0; +} + +/* + * Parse the first range of indexes from a string made of a list of comma separated + * ranges of indexes. Note that an index may be considered as a particular range + * with a high limit to the low limit. + */ +int get_logsrv_smp_range(unsigned int *low, unsigned int *high, char **arg, char **err) +{ + char *end, *p; + + *low = *high = 0; + + p = *arg; + end = strchr(p, ','); + if (!end) + end = p + strlen(p); + + *high = *low = read_uint((const char **)&p, end); + if (!*low || (p != end && *p != '-')) + goto err; + + if (p == end) + goto done; + + p++; + *high = read_uint((const char **)&p, end); + if (!*high || *high <= *low || p != end) + goto err; + + done: + if (*end == ',') + end++; + *arg = end; + return 1; + + err: + memprintf(err, "wrong sample range '%s'", *arg); + return 0; +} + +/* + * Returns 1 if the range defined by <low> and <high> overlaps + * one of them in <rgs> array of ranges with <sz> the size of this + * array, 0 if not. + */ +int smp_log_ranges_overlap(struct smp_log_range *rgs, size_t sz, + unsigned int low, unsigned int high, char **err) +{ + size_t i; + + for (i = 0; i < sz; i++) { + if ((low >= rgs[i].low && low <= rgs[i].high) || + (high >= rgs[i].low && high <= rgs[i].high)) { + memprintf(err, "ranges are overlapping"); + return 1; + } + } + + return 0; +} + +int smp_log_range_cmp(const void *a, const void *b) +{ + const struct smp_log_range *rg_a = a; + const struct smp_log_range *rg_b = b; + + if (rg_a->high < rg_b->low) + return -1; + else if (rg_a->low > rg_b->high) + return 1; + + return 0; +} + +/* frees log server <logsrv> after freeing all of its allocated fields. The + * server must not belong to a list anymore. Logsrv may be NULL, which is + * silently ignored. + */ +void free_logsrv(struct logsrv *logsrv) +{ + if (!logsrv) + return; + + BUG_ON(LIST_INLIST(&logsrv->list)); + ha_free(&logsrv->conf.file); + ha_free(&logsrv->ring_name); + free(logsrv); +} + +/* + * Parse "log" keyword and update <logsrvs> list accordingly. + * + * When <do_del> is set, it means the "no log" line was parsed, so all log + * servers in <logsrvs> are released. + * + * Otherwise, we try to parse the "log" line. First of all, when the list is not + * the global one, we look for the parameter "global". If we find it, + * global.logsrvs is copied. Else we parse each arguments. + * + * The function returns 1 in success case, otherwise, it returns 0 and err is + * filled. + */ +int parse_logsrv(char **args, struct list *logsrvs, int do_del, const char *file, int linenum, char **err) +{ + struct smp_log_range *smp_rgs = NULL; + struct sockaddr_storage *sk; + struct protocol *proto; + struct logsrv *logsrv = NULL; + int port1, port2; + int cur_arg; + int fd; + + /* + * "no log": delete previous herited or defined syslog + * servers. + */ + if (do_del) { + struct logsrv *back; + + if (*(args[1]) != 0) { + memprintf(err, "'no log' does not expect arguments"); + goto error; + } + + list_for_each_entry_safe(logsrv, back, logsrvs, list) { + LIST_DEL_INIT(&logsrv->list); + free_logsrv(logsrv); + } + return 1; + } + + /* + * "log global": copy global.logrsvs linked list to the end of logsrvs + * list. But first, we check (logsrvs != global.logsrvs). + */ + if (*(args[1]) && *(args[2]) == 0 && strcmp(args[1], "global") == 0) { + if (logsrvs == &global.logsrvs) { + memprintf(err, "'global' is not supported for a global syslog server"); + goto error; + } + list_for_each_entry(logsrv, &global.logsrvs, list) { + struct logsrv *node; + + list_for_each_entry(node, logsrvs, list) { + if (node->ref == logsrv) + goto skip_logsrv; + } + + node = malloc(sizeof(*node)); + memcpy(node, logsrv, sizeof(struct logsrv)); + node->ref = logsrv; + LIST_INIT(&node->list); + LIST_APPEND(logsrvs, &node->list); + node->ring_name = logsrv->ring_name ? strdup(logsrv->ring_name) : NULL; + node->conf.file = strdup(file); + node->conf.line = linenum; + + skip_logsrv: + continue; + } + return 1; + } + + /* + * "log <address> ...: parse a syslog server line + */ + if (*(args[1]) == 0 || *(args[2]) == 0) { + memprintf(err, "expects <address> and <facility> %s as arguments", + ((logsrvs == &global.logsrvs) ? "" : "or global")); + goto error; + } + + /* take care of "stdout" and "stderr" as regular aliases for fd@1 / fd@2 */ + if (strcmp(args[1], "stdout") == 0) + args[1] = "fd@1"; + else if (strcmp(args[1], "stderr") == 0) + args[1] = "fd@2"; + + logsrv = calloc(1, sizeof(*logsrv)); + if (!logsrv) { + memprintf(err, "out of memory"); + goto error; + } + LIST_INIT(&logsrv->list); + logsrv->conf.file = strdup(file); + logsrv->conf.line = linenum; + + /* skip address for now, it will be parsed at the end */ + cur_arg = 2; + + /* just after the address, a length may be specified */ + logsrv->maxlen = MAX_SYSLOG_LEN; + if (strcmp(args[cur_arg], "len") == 0) { + int len = atoi(args[cur_arg+1]); + if (len < 80 || len > 65535) { + memprintf(err, "invalid log length '%s', must be between 80 and 65535", + args[cur_arg+1]); + goto error; + } + logsrv->maxlen = len; + cur_arg += 2; + } + if (logsrv->maxlen > global.max_syslog_len) + global.max_syslog_len = logsrv->maxlen; + + /* after the length, a format may be specified */ + if (strcmp(args[cur_arg], "format") == 0) { + logsrv->format = get_log_format(args[cur_arg+1]); + if (logsrv->format == LOG_FORMAT_UNSPEC) { + memprintf(err, "unknown log format '%s'", args[cur_arg+1]); + goto error; + } + cur_arg += 2; + } + + if (strcmp(args[cur_arg], "sample") == 0) { + unsigned low, high; + char *p, *beg, *end, *smp_sz_str; + size_t smp_rgs_sz = 0, smp_sz = 0, new_smp_sz; + + p = args[cur_arg+1]; + smp_sz_str = strchr(p, ':'); + if (!smp_sz_str) { + memprintf(err, "Missing sample size"); + goto error; + } + + *smp_sz_str++ = '\0'; + + end = p + strlen(p); + + while (p != end) { + if (!get_logsrv_smp_range(&low, &high, &p, err)) + goto error; + + if (smp_rgs && smp_log_ranges_overlap(smp_rgs, smp_rgs_sz, low, high, err)) + goto error; + + smp_rgs = my_realloc2(smp_rgs, (smp_rgs_sz + 1) * sizeof *smp_rgs); + if (!smp_rgs) { + memprintf(err, "out of memory error"); + goto error; + } + + smp_rgs[smp_rgs_sz].low = low; + smp_rgs[smp_rgs_sz].high = high; + smp_rgs[smp_rgs_sz].sz = high - low + 1; + smp_rgs[smp_rgs_sz].curr_idx = 0; + if (smp_rgs[smp_rgs_sz].high > smp_sz) + smp_sz = smp_rgs[smp_rgs_sz].high; + smp_rgs_sz++; + } + + if (smp_rgs == NULL) { + memprintf(err, "no sampling ranges given"); + goto error; + } + + beg = smp_sz_str; + end = beg + strlen(beg); + new_smp_sz = read_uint((const char **)&beg, end); + if (!new_smp_sz || beg != end) { + memprintf(err, "wrong sample size '%s' for sample range '%s'", + smp_sz_str, args[cur_arg+1]); + goto error; + } + + if (new_smp_sz < smp_sz) { + memprintf(err, "sample size %zu should be greater or equal to " + "%zu the maximum of the high ranges limits", + new_smp_sz, smp_sz); + goto error; + } + smp_sz = new_smp_sz; + + /* Let's order <smp_rgs> array. */ + qsort(smp_rgs, smp_rgs_sz, sizeof(struct smp_log_range), smp_log_range_cmp); + + logsrv->lb.smp_rgs = smp_rgs; + logsrv->lb.smp_rgs_sz = smp_rgs_sz; + logsrv->lb.smp_sz = smp_sz; + + cur_arg += 2; + } + HA_SPIN_INIT(&logsrv->lock); + /* parse the facility */ + logsrv->facility = get_log_facility(args[cur_arg]); + if (logsrv->facility < 0) { + memprintf(err, "unknown log facility '%s'", args[cur_arg]); + goto error; + } + cur_arg++; + + /* parse the max syslog level (default: debug) */ + logsrv->level = 7; + if (*(args[cur_arg])) { + logsrv->level = get_log_level(args[cur_arg]); + if (logsrv->level < 0) { + memprintf(err, "unknown optional log level '%s'", args[cur_arg]); + goto error; + } + cur_arg++; + } + + /* parse the limit syslog level (default: emerg) */ + logsrv->minlvl = 0; + if (*(args[cur_arg])) { + logsrv->minlvl = get_log_level(args[cur_arg]); + if (logsrv->minlvl < 0) { + memprintf(err, "unknown optional minimum log level '%s'", args[cur_arg]); + goto error; + } + cur_arg++; + } + + /* Too many args */ + if (*(args[cur_arg])) { + memprintf(err, "cannot handle unexpected argument '%s'", args[cur_arg]); + goto error; + } + + /* now, back to the address */ + logsrv->type = LOG_TARGET_DGRAM; + if (strncmp(args[1], "ring@", 5) == 0) { + logsrv->addr.ss_family = AF_UNSPEC; + logsrv->type = LOG_TARGET_BUFFER; + logsrv->sink = NULL; + logsrv->ring_name = strdup(args[1] + 5); + goto done; + } + + sk = str2sa_range(args[1], NULL, &port1, &port2, &fd, &proto, + err, NULL, NULL, + PA_O_RESOLVE | PA_O_PORT_OK | PA_O_RAW_FD | PA_O_DGRAM | PA_O_STREAM | PA_O_DEFAULT_DGRAM); + if (!sk) + goto error; + + if (fd != -1) + logsrv->type = LOG_TARGET_FD; + logsrv->addr = *sk; + + if (sk->ss_family == AF_INET || sk->ss_family == AF_INET6) { + if (!port1) + set_host_port(&logsrv->addr, SYSLOG_PORT); + } + + if (proto && proto->xprt_type == PROTO_TYPE_STREAM) { + static unsigned long ring_ids; + + /* Implicit sink buffer will be + * initialized in post_check + */ + logsrv->type = LOG_TARGET_BUFFER; + logsrv->sink = NULL; + /* compute uniq name for the ring */ + memprintf(&logsrv->ring_name, "ring#%lu", ++ring_ids); + } + + done: + LIST_APPEND(logsrvs, &logsrv->list); + return 1; + + error: + free(smp_rgs); + free_logsrv(logsrv); + return 0; +} + + +/* + * returns log format, LOG_FORMAT_UNSPEC is return if not found. + */ +enum log_fmt get_log_format(const char *fmt) +{ + enum log_fmt format; + + format = LOG_FORMATS - 1; + while (format > 0 && log_formats[format].name + && strcmp(log_formats[format].name, fmt) != 0) + format--; + + /* Note: 0 is LOG_FORMAT_UNSPEC */ + return format; +} + +/* + * returns log level for <lev> or -1 if not found. + */ +int get_log_level(const char *lev) +{ + int level; + + level = NB_LOG_LEVELS - 1; + while (level >= 0 && strcmp(log_levels[level], lev) != 0) + level--; + + return level; +} + +/* + * returns log facility for <fac> or -1 if not found. + */ +int get_log_facility(const char *fac) +{ + int facility; + + facility = NB_LOG_FACILITIES - 1; + while (facility >= 0 && strcmp(log_facilities[facility], fac) != 0) + facility--; + + return facility; +} + +/* + * Encode the string. + * + * When using the +E log format option, it will try to escape '"\]' + * characters with '\' as prefix. The same prefix should not be used as + * <escape>. + */ +static char *lf_encode_string(char *start, char *stop, + const char escape, const long *map, + const char *string, + struct logformat_node *node) +{ + if (node->options & LOG_OPT_ESC) { + if (start < stop) { + stop--; /* reserve one byte for the final '\0' */ + while (start < stop && *string != '\0') { + if (!ha_bit_test((unsigned char)(*string), map)) { + if (!ha_bit_test((unsigned char)(*string), rfc5424_escape_map)) + *start++ = *string; + else { + if (start + 2 >= stop) + break; + *start++ = '\\'; + *start++ = *string; + } + } + else { + if (start + 3 >= stop) + break; + *start++ = escape; + *start++ = hextab[(*string >> 4) & 15]; + *start++ = hextab[*string & 15]; + } + string++; + } + *start = '\0'; + } + } + else { + return encode_string(start, stop, escape, map, string); + } + + return start; +} + +/* + * Encode the chunk. + * + * When using the +E log format option, it will try to escape '"\]' + * characters with '\' as prefix. The same prefix should not be used as + * <escape>. + */ +static char *lf_encode_chunk(char *start, char *stop, + const char escape, const long *map, + const struct buffer *chunk, + struct logformat_node *node) +{ + char *str, *end; + + if (node->options & LOG_OPT_ESC) { + if (start < stop) { + str = chunk->area; + end = chunk->area + chunk->data; + + stop--; /* reserve one byte for the final '\0' */ + while (start < stop && str < end) { + if (!ha_bit_test((unsigned char)(*str), map)) { + if (!ha_bit_test((unsigned char)(*str), rfc5424_escape_map)) + *start++ = *str; + else { + if (start + 2 >= stop) + break; + *start++ = '\\'; + *start++ = *str; + } + } + else { + if (start + 3 >= stop) + break; + *start++ = escape; + *start++ = hextab[(*str >> 4) & 15]; + *start++ = hextab[*str & 15]; + } + str++; + } + *start = '\0'; + } + } + else { + return encode_chunk(start, stop, escape, map, chunk); + } + + return start; +} + +/* + * Write a string in the log string + * Take cares of quote and escape options + * + * Return the address of the \0 character, or NULL on error + */ +char *lf_text_len(char *dst, const char *src, size_t len, size_t size, const struct logformat_node *node) +{ + if (size < 2) + return NULL; + + if (node->options & LOG_OPT_QUOTE) { + *(dst++) = '"'; + size--; + } + + if (src && len) { + /* escape_string and strlcpy2 will both try to add terminating NULL-byte + * to dst, so we need to make sure that extra byte will fit into dst + * before calling them + */ + if (node->options & LOG_OPT_ESC) { + char *ret; + + ret = escape_string(dst, (dst + size - 1), '\\', rfc5424_escape_map, src, src + len); + if (ret == NULL || *ret != '\0') + return NULL; + len = ret - dst; + } + else { + if (++len > size) + len = size; + len = strlcpy2(dst, src, len); + } + + size -= len; + dst += len; + } + else if ((node->options & (LOG_OPT_QUOTE|LOG_OPT_MANDATORY)) == LOG_OPT_MANDATORY) { + if (size < 2) + return NULL; + *(dst++) = '-'; + size -= 1; + } + + if (node->options & LOG_OPT_QUOTE) { + if (size < 2) + return NULL; + *(dst++) = '"'; + } + + *dst = '\0'; + return dst; +} + +static inline char *lf_text(char *dst, const char *src, size_t size, const struct logformat_node *node) +{ + return lf_text_len(dst, src, size, size, node); +} + +/* + * Write a IP address to the log string + * +X option write in hexadecimal notation, most significant byte on the left + */ +char *lf_ip(char *dst, const struct sockaddr *sockaddr, size_t size, const struct logformat_node *node) +{ + char *ret = dst; + int iret; + char pn[INET6_ADDRSTRLEN]; + + if (node->options & LOG_OPT_HEXA) { + unsigned char *addr = NULL; + switch (sockaddr->sa_family) { + case AF_INET: + addr = (unsigned char *)&((struct sockaddr_in *)sockaddr)->sin_addr.s_addr; + iret = snprintf(dst, size, "%02X%02X%02X%02X", addr[0], addr[1], addr[2], addr[3]); + break; + case AF_INET6: + addr = (unsigned char *)&((struct sockaddr_in6 *)sockaddr)->sin6_addr.s6_addr; + iret = snprintf(dst, size, "%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X", + addr[0], addr[1], addr[2], addr[3], addr[4], addr[5], addr[6], addr[7], + addr[8], addr[9], addr[10], addr[11], addr[12], addr[13], addr[14], addr[15]); + break; + default: + return NULL; + } + if (iret < 0 || iret > size) + return NULL; + ret += iret; + } else { + addr_to_str((struct sockaddr_storage *)sockaddr, pn, sizeof(pn)); + ret = lf_text(dst, pn, size, node); + if (ret == NULL) + return NULL; + } + return ret; +} + +/* + * Write a port to the log + * +X option write in hexadecimal notation, most significant byte on the left + */ +char *lf_port(char *dst, const struct sockaddr *sockaddr, size_t size, const struct logformat_node *node) +{ + char *ret = dst; + int iret; + + if (node->options & LOG_OPT_HEXA) { + const unsigned char *port = (const unsigned char *)&((struct sockaddr_in *)sockaddr)->sin_port; + iret = snprintf(dst, size, "%02X%02X", port[0], port[1]); + if (iret < 0 || iret > size) + return NULL; + ret += iret; + } else { + ret = ltoa_o(get_host_port((struct sockaddr_storage *)sockaddr), dst, size); + if (ret == NULL) + return NULL; + } + return ret; +} + + +/* + * This function sends the syslog message using a printf format string. It + * expects an LF-terminated message. + */ +void send_log(struct proxy *p, int level, const char *format, ...) +{ + va_list argp; + int data_len; + + if (level < 0 || format == NULL || logline == NULL) + return; + + va_start(argp, format); + data_len = vsnprintf(logline, global.max_syslog_len, format, argp); + if (data_len < 0 || data_len > global.max_syslog_len) + data_len = global.max_syslog_len; + va_end(argp); + + __send_log((p ? &p->logsrvs : NULL), (p ? &p->log_tag : NULL), level, + logline, data_len, default_rfc5424_sd_log_format, 2); +} +/* + * This function builds a log header of given format using given + * metadata, if format is set to LOF_FORMAT_UNSPEC, it tries + * to determine format based on given metadas. It is useful + * for log-forwarding to be able to forward any format without + * settings. + * This function returns a struct ist array of elements of the header + * nbelem is set to the number of available elements. + * This function returns currently a maximum of NB_LOG_HDR_IST_ELEMENTS + * elements. + */ +struct ist *build_log_header(enum log_fmt format, int level, int facility, + struct ist *metadata, size_t *nbelem) +{ + static THREAD_LOCAL struct { + struct ist ist_vector[NB_LOG_HDR_MAX_ELEMENTS]; + char timestamp_buffer[LOG_LEGACYTIME_LEN+1+1]; + time_t cur_legacy_time; + char priority_buffer[6]; + } hdr_ctx = { .priority_buffer = "<<<<>" }; + + struct tm logtime; + int len; + int fac_level = 0; + time_t time = date.tv_sec; + + *nbelem = 0; + + + if (format == LOG_FORMAT_UNSPEC) { + format = LOG_FORMAT_RAW; + if (metadata) { + /* If a hostname is set, it appears we want to perform syslog + * because only rfc5427 or rfc3164 support an hostname. + */ + if (metadata[LOG_META_HOST].len) { + /* If a rfc5424 compliant timestamp is used we consider + * that output format is rfc5424, else legacy format + * is used as specified default for local logs + * in documentation. + */ + if ((metadata[LOG_META_TIME].len == 1 && metadata[LOG_META_TIME].ptr[0] == '-') + || (metadata[LOG_META_TIME].len >= LOG_ISOTIME_MINLEN)) + format = LOG_FORMAT_RFC5424; + else + format = LOG_FORMAT_RFC3164; + } + else if (metadata[LOG_META_TAG].len) { + /* Tag is present but no hostname, we should + * consider we try to emit a local log + * in legacy format (analog to RFC3164 but + * with stripped hostname). + */ + format = LOG_FORMAT_LOCAL; + } + else if (metadata[LOG_META_PRIO].len) { + /* the source seems a parsed message + * offering a valid level/prio prefix + * so we consider this format. + */ + format = LOG_FORMAT_PRIO; + } + } + } + + /* prepare priority, stored into 1 single elem */ + switch (format) { + case LOG_FORMAT_LOCAL: + case LOG_FORMAT_RFC3164: + case LOG_FORMAT_RFC5424: + case LOG_FORMAT_PRIO: + fac_level = facility << 3; + /* further format ignore the facility */ + /* fall through */ + case LOG_FORMAT_TIMED: + case LOG_FORMAT_SHORT: + fac_level += level; + hdr_ctx.ist_vector[*nbelem].ptr = &hdr_ctx.priority_buffer[3]; /* last digit of the log level */ + do { + *hdr_ctx.ist_vector[*nbelem].ptr = '0' + fac_level % 10; + fac_level /= 10; + hdr_ctx.ist_vector[*nbelem].ptr--; + } while (fac_level && hdr_ctx.ist_vector[*nbelem].ptr > &hdr_ctx.priority_buffer[0]); + *hdr_ctx.ist_vector[*nbelem].ptr = '<'; + hdr_ctx.ist_vector[(*nbelem)++].len = &hdr_ctx.priority_buffer[5] - hdr_ctx.ist_vector[0].ptr; + break; + case LOG_FORMAT_ISO: + case LOG_FORMAT_RAW: + break; + case LOG_FORMAT_UNSPEC: + case LOG_FORMATS: + ABORT_NOW(); + } + + + /* prepare timestamp, stored into a max of 4 elems */ + switch (format) { + case LOG_FORMAT_LOCAL: + case LOG_FORMAT_RFC3164: + /* rfc3164 ex: 'Jan 1 00:00:00 ' */ + if (metadata && metadata[LOG_META_TIME].len == LOG_LEGACYTIME_LEN) { + hdr_ctx.ist_vector[(*nbelem)++] = metadata[LOG_META_TIME]; + hdr_ctx.ist_vector[(*nbelem)++] = ist2(" ", 1); + /* time is set, break immediately */ + break; + } + else if (metadata && metadata[LOG_META_TIME].len >= LOG_ISOTIME_MINLEN) { + int month; + char *timestamp = metadata[LOG_META_TIME].ptr; + + /* iso time always begins like this: '1970-01-01T00:00:00' */ + + /* compute month */ + month = 10*(timestamp[5] - '0') + (timestamp[6] - '0'); + if (month) + month--; + if (month <= 11) { + /* builds log prefix ex: 'Jan 1 ' */ + len = snprintf(hdr_ctx.timestamp_buffer, sizeof(hdr_ctx.timestamp_buffer), + "%s %c%c ", monthname[month], + timestamp[8] != '0' ? timestamp[8] : ' ', + timestamp[9]); + /* we reused the timestamp_buffer, signal that it does not + * contain local time anymore + */ + hdr_ctx.cur_legacy_time = 0; + if (len == 7) { + hdr_ctx.ist_vector[(*nbelem)++] = ist2(&hdr_ctx.timestamp_buffer[0], len); + /* adds 'HH:MM:SS' from iso time */ + hdr_ctx.ist_vector[(*nbelem)++] = ist2(×tamp[11], 8); + hdr_ctx.ist_vector[(*nbelem)++] = ist2(" ", 1); + /* we successfully reuse iso time, we can break */ + break; + } + } + /* Failed to reuse isotime time, fallback to local legacy time */ + } + + if (unlikely(time != hdr_ctx.cur_legacy_time)) { + /* re-builds timestamp from the current local time */ + get_localtime(time, &logtime); + + len = snprintf(hdr_ctx.timestamp_buffer, sizeof(hdr_ctx.timestamp_buffer), + "%s %2d %02d:%02d:%02d ", + monthname[logtime.tm_mon], + logtime.tm_mday, logtime.tm_hour, logtime.tm_min, logtime.tm_sec); + if (len != LOG_LEGACYTIME_LEN+1) + hdr_ctx.cur_legacy_time = 0; + else + hdr_ctx.cur_legacy_time = time; + } + if (likely(hdr_ctx.cur_legacy_time)) + hdr_ctx.ist_vector[(*nbelem)++] = ist2(&hdr_ctx.timestamp_buffer[0], LOG_LEGACYTIME_LEN+1); + else + hdr_ctx.ist_vector[(*nbelem)++] = ist2("Jan 1 00:00:00 ", LOG_LEGACYTIME_LEN+1); + break; + case LOG_FORMAT_RFC5424: + /* adds rfc5425 version prefix */ + hdr_ctx.ist_vector[(*nbelem)++] = ist2("1 ", 2); + if (metadata && metadata[LOG_META_TIME].len == 1 && metadata[LOG_META_TIME].ptr[0] == '-') { + /* submitted len is NILVALUE, it is a valid timestamp for rfc5425 */ + hdr_ctx.ist_vector[(*nbelem)++] = metadata[LOG_META_TIME]; + hdr_ctx.ist_vector[(*nbelem)++] = ist2(" ", 1); + break; + } + /* let continue as 'timed' and 'iso' format for usual timestamp */ + /* fall through */ + case LOG_FORMAT_TIMED: + case LOG_FORMAT_ISO: + /* ISO format ex: '1900:01:01T12:00:00.123456Z' + * '1900:01:01T14:00:00+02:00' + * '1900:01:01T10:00:00.123456-02:00' + */ + if (metadata && metadata[LOG_META_TIME].len >= LOG_ISOTIME_MINLEN) { + hdr_ctx.ist_vector[(*nbelem)++] = metadata[LOG_META_TIME]; + hdr_ctx.ist_vector[(*nbelem)++] = ist2(" ", 1); + /* time is set, break immediately */ + break; + } + else if (metadata && metadata[LOG_META_TIME].len == LOG_LEGACYTIME_LEN) { + int month; + char *timestamp = metadata[LOG_META_TIME].ptr; + + for (month = 0; month < 12; month++) + if (!memcmp(monthname[month], timestamp, 3)) + break; + + if (month < 12) { + + /* get local time to retrieve year */ + get_localtime(time, &logtime); + + /* year seems changed since log */ + if (logtime.tm_mon < month) + logtime.tm_year--; + + /* builds rfc5424 prefix ex: '1900-01-01T' */ + len = snprintf(hdr_ctx.timestamp_buffer, sizeof(hdr_ctx.timestamp_buffer), + "%4d-%02d-%c%cT", + logtime.tm_year+1900, month+1, + timestamp[4] != ' ' ? timestamp[4] : '0', + timestamp[5]); + + /* we reused the timestamp_buffer, signal that it does not + * contain local time anymore + */ + hdr_ctx.cur_legacy_time = 0; + if (len == 11) { + hdr_ctx.ist_vector[(*nbelem)++] = ist2(&hdr_ctx.timestamp_buffer[0], len); + /* adds HH:MM:SS from legacy timestamp */ + hdr_ctx.ist_vector[(*nbelem)++] = ist2(×tamp[7], 8); + /* skip secfraq because it is optional */ + /* according to rfc: -00:00 means we don't know the timezone */ + hdr_ctx.ist_vector[(*nbelem)++] = ist2("-00:00 ", 7); + /* we successfully reuse legacy time, we can break */ + break; + } + } + /* Failed to reuse legacy time, fallback to local iso time */ + } + hdr_ctx.ist_vector[(*nbelem)++] = ist2(timeofday_as_iso_us(1), LOG_ISOTIME_MAXLEN + 1); + break; + case LOG_FORMAT_PRIO: + case LOG_FORMAT_SHORT: + case LOG_FORMAT_RAW: + break; + case LOG_FORMAT_UNSPEC: + case LOG_FORMATS: + ABORT_NOW(); + } + + /* prepare other meta data, stored into a max of 10 elems */ + switch (format) { + case LOG_FORMAT_RFC3164: + if (metadata && metadata[LOG_META_HOST].len) { + hdr_ctx.ist_vector[(*nbelem)++] = metadata[LOG_META_HOST]; + hdr_ctx.ist_vector[(*nbelem)++] = ist2(" ", 1); + } + else /* the caller MUST fill the hostname, this field is mandatory */ + hdr_ctx.ist_vector[(*nbelem)++] = ist2("localhost ", 10); + /* fall through */ + case LOG_FORMAT_LOCAL: + if (!metadata || !metadata[LOG_META_TAG].len) + break; + + hdr_ctx.ist_vector[(*nbelem)++] = metadata[LOG_META_TAG]; + if (metadata[LOG_META_PID].len) { + hdr_ctx.ist_vector[(*nbelem)++] = ist2("[", 1); + hdr_ctx.ist_vector[(*nbelem)++] = metadata[LOG_META_PID]; + hdr_ctx.ist_vector[(*nbelem)++] = ist2("]", 1); + } + hdr_ctx.ist_vector[(*nbelem)++] = ist2(": ", 2); + break; + case LOG_FORMAT_RFC5424: + if (metadata && metadata[LOG_META_HOST].len) { + hdr_ctx.ist_vector[(*nbelem)++] = metadata[LOG_META_HOST]; + hdr_ctx.ist_vector[(*nbelem)++] = ist2(" ", 1); + } + else + hdr_ctx.ist_vector[(*nbelem)++] = ist2("- ", 2); + + if (metadata && metadata[LOG_META_TAG].len) { + hdr_ctx.ist_vector[(*nbelem)++] = metadata[LOG_META_TAG]; + hdr_ctx.ist_vector[(*nbelem)++] = ist2(" ", 1); + } + else + hdr_ctx.ist_vector[(*nbelem)++] = ist2("- ", 2); + + if (metadata && metadata[LOG_META_PID].len) { + hdr_ctx.ist_vector[(*nbelem)++] = metadata[LOG_META_PID]; + hdr_ctx.ist_vector[(*nbelem)++] = ist2(" ", 1); + } + else + hdr_ctx.ist_vector[(*nbelem)++] = ist2("- ", 2); + + if (metadata && metadata[LOG_META_MSGID].len) { + hdr_ctx.ist_vector[(*nbelem)++] = metadata[LOG_META_MSGID]; + hdr_ctx.ist_vector[(*nbelem)++] = ist2(" ", 1); + } + else + hdr_ctx.ist_vector[(*nbelem)++] = ist2("- ", 2); + + if (metadata && metadata[LOG_META_STDATA].len) { + hdr_ctx.ist_vector[(*nbelem)++] = metadata[LOG_META_STDATA]; + hdr_ctx.ist_vector[(*nbelem)++] = ist2(" ", 1); + } + else + hdr_ctx.ist_vector[(*nbelem)++] = ist2("- ", 2); + break; + case LOG_FORMAT_PRIO: + case LOG_FORMAT_SHORT: + case LOG_FORMAT_TIMED: + case LOG_FORMAT_ISO: + case LOG_FORMAT_RAW: + break; + case LOG_FORMAT_UNSPEC: + case LOG_FORMATS: + ABORT_NOW(); + } + + return hdr_ctx.ist_vector; +} + +/* + * This function sends a syslog message to <logsrv>. + * The argument <metadata> MUST be an array of size + * LOG_META_FIELDS*sizeof(struct ist) containing data to build the header. + * It overrides the last byte of the message vector with an LF character. + * Does not return any error, + */ +static inline void __do_send_log(struct logsrv *logsrv, int nblogger, int level, int facility, struct ist *metadata, char *message, size_t size) +{ + static THREAD_LOCAL struct iovec iovec[NB_LOG_HDR_MAX_ELEMENTS+1+1] = { }; /* header elements + message + LF */ + static THREAD_LOCAL struct msghdr msghdr = { + //.msg_iov = iovec, + .msg_iovlen = NB_LOG_HDR_MAX_ELEMENTS+2 + }; + static THREAD_LOCAL int logfdunix = -1; /* syslog to AF_UNIX socket */ + static THREAD_LOCAL int logfdinet = -1; /* syslog to AF_INET socket */ + int *plogfd; + int sent; + size_t nbelem; + struct ist *msg_header = NULL; + + msghdr.msg_iov = iovec; + + /* historically some messages used to already contain the trailing LF + * or Zero. Let's remove all trailing LF or Zero + */ + while (size && (message[size-1] == '\n' || (message[size-1] == 0))) + size--; + + if (logsrv->type == LOG_TARGET_BUFFER) { + plogfd = NULL; + goto send; + } + else if (logsrv->addr.ss_family == AF_CUST_EXISTING_FD) { + /* the socket's address is a file descriptor */ + plogfd = (int *)&((struct sockaddr_in *)&logsrv->addr)->sin_addr.s_addr; + } + else if (logsrv->addr.ss_family == AF_UNIX) + plogfd = &logfdunix; + else + plogfd = &logfdinet; + + if (plogfd && unlikely(*plogfd < 0)) { + /* socket not successfully initialized yet */ + if ((*plogfd = socket(logsrv->addr.ss_family, SOCK_DGRAM, + (logsrv->addr.ss_family == AF_UNIX) ? 0 : IPPROTO_UDP)) < 0) { + static char once; + + if (!once) { + once = 1; /* note: no need for atomic ops here */ + ha_alert("socket() failed in logger #%d: %s (errno=%d)\n", + nblogger, strerror(errno), errno); + } + return; + } else { + /* we don't want to receive anything on this socket */ + setsockopt(*plogfd, SOL_SOCKET, SO_RCVBUF, &zero, sizeof(zero)); + /* does nothing under Linux, maybe needed for others */ + shutdown(*plogfd, SHUT_RD); + fd_set_cloexec(*plogfd); + } + } + + msg_header = build_log_header(logsrv->format, level, facility, metadata, &nbelem); + send: + if (logsrv->type == LOG_TARGET_BUFFER) { + struct ist msg; + + msg = ist2(message, size); + msg = isttrim(msg, logsrv->maxlen); + + sent = sink_write(logsrv->sink, &msg, 1, level, facility, metadata); + } + else if (logsrv->addr.ss_family == AF_CUST_EXISTING_FD) { + struct ist msg; + + msg = ist2(message, size); + msg = isttrim(msg, logsrv->maxlen); + + sent = fd_write_frag_line(*plogfd, logsrv->maxlen, msg_header, nbelem, &msg, 1, 1); + } + else { + int i = 0; + int totlen = logsrv->maxlen; + + for (i = 0 ; i < nbelem ; i++ ) { + iovec[i].iov_base = msg_header[i].ptr; + iovec[i].iov_len = msg_header[i].len; + if (totlen <= iovec[i].iov_len) { + iovec[i].iov_len = totlen; + totlen = 0; + break; + } + totlen -= iovec[i].iov_len; + } + if (totlen) { + iovec[i].iov_base = message; + iovec[i].iov_len = size; + if (totlen <= iovec[i].iov_len) + iovec[i].iov_len = totlen; + i++; + } + iovec[i].iov_base = "\n"; /* insert a \n at the end of the message */ + iovec[i].iov_len = 1; + i++; + + msghdr.msg_iovlen = i; + msghdr.msg_name = (struct sockaddr *)&logsrv->addr; + msghdr.msg_namelen = get_addr_len(&logsrv->addr); + + sent = sendmsg(*plogfd, &msghdr, MSG_DONTWAIT | MSG_NOSIGNAL); + } + + if (sent < 0) { + static char once; + + if (errno == EAGAIN || errno == EWOULDBLOCK) + _HA_ATOMIC_INC(&dropped_logs); + else if (!once) { + once = 1; /* note: no need for atomic ops here */ + ha_alert("sendmsg()/writev() failed in logger #%d: %s (errno=%d)\n", + nblogger, strerror(errno), errno); + } + } +} + +/* + * This function sends a syslog message. + * It doesn't care about errors nor does it report them. + * The argument <metadata> MUST be an array of size + * LOG_META_FIELDS*sizeof(struct ist) containing + * data to build the header. + */ +void process_send_log(struct list *logsrvs, int level, int facility, + struct ist *metadata, char *message, size_t size) +{ + struct logsrv *logsrv; + int nblogger; + + /* Send log messages to syslog server. */ + nblogger = 0; + list_for_each_entry(logsrv, logsrvs, list) { + int in_range = 1; + + /* we can filter the level of the messages that are sent to each logger */ + if (level > logsrv->level) + continue; + + if (logsrv->lb.smp_rgs) { + struct smp_log_range *curr_rg; + + HA_SPIN_LOCK(LOGSRV_LOCK, &logsrv->lock); + curr_rg = &logsrv->lb.smp_rgs[logsrv->lb.curr_rg]; + in_range = in_smp_log_range(curr_rg, logsrv->lb.curr_idx); + if (in_range) { + /* Let's consume this range. */ + curr_rg->curr_idx = (curr_rg->curr_idx + 1) % curr_rg->sz; + if (!curr_rg->curr_idx) { + /* If consumed, let's select the next range. */ + logsrv->lb.curr_rg = (logsrv->lb.curr_rg + 1) % logsrv->lb.smp_rgs_sz; + } + } + logsrv->lb.curr_idx = (logsrv->lb.curr_idx + 1) % logsrv->lb.smp_sz; + HA_SPIN_UNLOCK(LOGSRV_LOCK, &logsrv->lock); + } + if (in_range) + __do_send_log(logsrv, ++nblogger, MAX(level, logsrv->minlvl), + (facility == -1) ? logsrv->facility : facility, + metadata, message, size); + } +} + +/* + * This function sends a syslog message. + * It doesn't care about errors nor does it report them. + * The arguments <sd> and <sd_size> are used for the structured-data part + * in RFC5424 formatted syslog messages. + */ +void __send_log(struct list *logsrvs, struct buffer *tagb, int level, + char *message, size_t size, char *sd, size_t sd_size) +{ + static THREAD_LOCAL pid_t curr_pid; + static THREAD_LOCAL char pidstr[16]; + static THREAD_LOCAL struct ist metadata[LOG_META_FIELDS]; + + if (logsrvs == NULL) { + if (!LIST_ISEMPTY(&global.logsrvs)) { + logsrvs = &global.logsrvs; + } + } + if (!logsrvs || LIST_ISEMPTY(logsrvs)) + return; + + if (!metadata[LOG_META_HOST].len) { + if (global.log_send_hostname) + metadata[LOG_META_HOST] = ist(global.log_send_hostname); + } + + if (!tagb || !tagb->area) + tagb = &global.log_tag; + + if (tagb) + metadata[LOG_META_TAG] = ist2(tagb->area, tagb->data); + + if (unlikely(curr_pid != getpid())) + metadata[LOG_META_PID].len = 0; + + if (!metadata[LOG_META_PID].len) { + curr_pid = getpid(); + ltoa_o(curr_pid, pidstr, sizeof(pidstr)); + metadata[LOG_META_PID] = ist2(pidstr, strlen(pidstr)); + } + + metadata[LOG_META_STDATA] = ist2(sd, sd_size); + + /* Remove trailing space of structured data */ + while (metadata[LOG_META_STDATA].len && metadata[LOG_META_STDATA].ptr[metadata[LOG_META_STDATA].len-1] == ' ') + metadata[LOG_META_STDATA].len--; + + return process_send_log(logsrvs, level, -1, metadata, message, size); +} + +const char sess_cookie[8] = "NIDVEOU7"; /* No cookie, Invalid cookie, cookie for a Down server, Valid cookie, Expired cookie, Old cookie, Unused, unknown */ +const char sess_set_cookie[8] = "NPDIRU67"; /* No set-cookie, Set-cookie found and left unchanged (passive), + Set-cookie Deleted, Set-Cookie Inserted, Set-cookie Rewritten, + Set-cookie Updated, unknown, unknown */ + +/* + * try to write a character if there is enough space, or goto out + */ +#define LOGCHAR(x) do { \ + if (tmplog < dst + maxsize - 1) { \ + *(tmplog++) = (x); \ + } else { \ + goto out; \ + } \ + } while(0) + + +/* Initializes some log data at boot */ +static void init_log() +{ + char *tmp; + int i; + + /* Initialize the escape map for the RFC5424 structured-data : '"\]' + * inside PARAM-VALUE should be escaped with '\' as prefix. + * See https://tools.ietf.org/html/rfc5424#section-6.3.3 for more + * details. + */ + memset(rfc5424_escape_map, 0, sizeof(rfc5424_escape_map)); + + tmp = "\"\\]"; + while (*tmp) { + ha_bit_set(*tmp, rfc5424_escape_map); + tmp++; + } + + /* initialize the log header encoding map : '{|}"#' should be encoded with + * '#' as prefix, as well as non-printable characters ( <32 or >= 127 ). + * URL encoding only requires '"', '#' to be encoded as well as non- + * printable characters above. + */ + memset(hdr_encode_map, 0, sizeof(hdr_encode_map)); + memset(url_encode_map, 0, sizeof(url_encode_map)); + for (i = 0; i < 32; i++) { + ha_bit_set(i, hdr_encode_map); + ha_bit_set(i, url_encode_map); + } + for (i = 127; i < 256; i++) { + ha_bit_set(i, hdr_encode_map); + ha_bit_set(i, url_encode_map); + } + + tmp = "\"#{|}"; + while (*tmp) { + ha_bit_set(*tmp, hdr_encode_map); + tmp++; + } + + tmp = "\"#"; + while (*tmp) { + ha_bit_set(*tmp, url_encode_map); + tmp++; + } + + /* initialize the http header encoding map. The draft httpbis define the + * header content as: + * + * HTTP-message = start-line + * *( header-field CRLF ) + * CRLF + * [ message-body ] + * header-field = field-name ":" OWS field-value OWS + * field-value = *( field-content / obs-fold ) + * field-content = field-vchar [ 1*( SP / HTAB ) field-vchar ] + * obs-fold = CRLF 1*( SP / HTAB ) + * field-vchar = VCHAR / obs-text + * VCHAR = %x21-7E + * obs-text = %x80-FF + * + * All the chars are encoded except "VCHAR", "obs-text", SP and HTAB. + * The encoded chars are form 0x00 to 0x08, 0x0a to 0x1f and 0x7f. The + * "obs-fold" is voluntarily forgotten because haproxy remove this. + */ + memset(http_encode_map, 0, sizeof(http_encode_map)); + for (i = 0x00; i <= 0x08; i++) + ha_bit_set(i, http_encode_map); + for (i = 0x0a; i <= 0x1f; i++) + ha_bit_set(i, http_encode_map); + ha_bit_set(0x7f, http_encode_map); +} + +INITCALL0(STG_PREPARE, init_log); + +/* Initialize log buffers used for syslog messages */ +int init_log_buffers() +{ + logline = my_realloc2(logline, global.max_syslog_len + 1); + logline_rfc5424 = my_realloc2(logline_rfc5424, global.max_syslog_len + 1); + if (!logline || !logline_rfc5424) + return 0; + return 1; +} + +/* Deinitialize log buffers used for syslog messages */ +void deinit_log_buffers() +{ + free(logline); + free(logline_rfc5424); + logline = NULL; + logline_rfc5424 = NULL; +} + +/* Builds a log line in <dst> based on <list_format>, and stops before reaching + * <maxsize> characters. Returns the size of the output string in characters, + * not counting the trailing zero which is always added if the resulting size + * is not zero. It requires a valid session and optionally a stream. If the + * stream is NULL, default values will be assumed for the stream part. + */ +int sess_build_logline(struct session *sess, struct stream *s, char *dst, size_t maxsize, struct list *list_format) +{ + struct proxy *fe = sess->fe; + struct proxy *be; + struct http_txn *txn; + const struct strm_logs *logs; + struct connection *fe_conn, *be_conn; + unsigned int s_flags; + unsigned int uniq_id; + struct buffer chunk; + char *uri; + char *spc; + char *qmark; + char *end; + struct tm tm; + int t_request; + int hdr; + int last_isspace = 1; + int nspaces = 0; + char *tmplog; + char *ret; + int iret; + int status; + struct logformat_node *tmp; + struct timeval tv; + struct strm_logs tmp_strm_log; + struct ist path; + struct http_uri_parser parser; + + /* FIXME: let's limit ourselves to frontend logging for now. */ + + if (likely(s)) { + be = s->be; + txn = s->txn; + be_conn = sc_conn(s->scb); + status = (txn ? txn->status : 0); + s_flags = s->flags; + uniq_id = s->uniq_id; + logs = &s->logs; + } else { + /* we have no stream so we first need to initialize a few + * things that are needed later. We do increment the request + * ID so that it's uniquely assigned to this request just as + * if the request had reached the point of being processed. + * A request error is reported as it's the only element we have + * here and which justifies emitting such a log. + */ + be = ((obj_type(sess->origin) == OBJ_TYPE_CHECK) ? __objt_check(sess->origin)->proxy : fe); + txn = NULL; + fe_conn = objt_conn(sess->origin); + be_conn = ((obj_type(sess->origin) == OBJ_TYPE_CHECK) ? sc_conn(__objt_check(sess->origin)->sc) : NULL); + status = 0; + s_flags = SF_ERR_PRXCOND | SF_FINST_R; + uniq_id = _HA_ATOMIC_FETCH_ADD(&global.req_count, 1); + + /* prepare a valid log structure */ + tmp_strm_log.tv_accept = sess->tv_accept; + tmp_strm_log.accept_date = sess->accept_date; + tmp_strm_log.t_handshake = sess->t_handshake; + tmp_strm_log.t_idle = (sess->t_idle >= 0 ? sess->t_idle : 0); + tv_zero(&tmp_strm_log.tv_request); + tmp_strm_log.t_queue = -1; + tmp_strm_log.t_connect = -1; + tmp_strm_log.t_data = -1; + tmp_strm_log.t_close = tv_ms_elapsed(&sess->tv_accept, &now); + tmp_strm_log.bytes_in = 0; + tmp_strm_log.bytes_out = 0; + tmp_strm_log.prx_queue_pos = 0; + tmp_strm_log.srv_queue_pos = 0; + + logs = &tmp_strm_log; + + if ((fe->mode == PR_MODE_HTTP) && fe_conn && fe_conn->mux && fe_conn->mux->ctl) { + enum mux_exit_status es = fe_conn->mux->ctl(fe_conn, MUX_EXIT_STATUS, &status); + + switch (es) { + case MUX_ES_SUCCESS: + break; + case MUX_ES_INVALID_ERR: + status = (status ? status : 400); + if ((fe_conn->flags & CO_FL_ERROR) || conn_xprt_read0_pending(fe_conn)) + s_flags = SF_ERR_CLICL | SF_FINST_R; + else + s_flags = SF_ERR_PRXCOND | SF_FINST_R; + break; + case MUX_ES_TOUT_ERR: + status = (status ? status : 408); + s_flags = SF_ERR_CLITO | SF_FINST_R; + break; + case MUX_ES_NOTIMPL_ERR: + status = (status ? status : 501); + s_flags = SF_ERR_PRXCOND | SF_FINST_R; + break; + case MUX_ES_INTERNAL_ERR: + status = (status ? status : 500); + s_flags = SF_ERR_INTERNAL | SF_FINST_R; + break; + default: + break; + } + } + } + + t_request = -1; + if (tv_isge(&logs->tv_request, &logs->tv_accept)) + t_request = tv_ms_elapsed(&logs->tv_accept, &logs->tv_request); + + tmplog = dst; + + /* fill logbuffer */ + if (LIST_ISEMPTY(list_format)) + return 0; + + list_for_each_entry(tmp, list_format, list) { +#ifdef USE_OPENSSL + struct connection *conn; +#endif + const struct sockaddr_storage *addr; + const char *src = NULL; + struct sample *key; + const struct buffer empty = { }; + + switch (tmp->type) { + case LOG_FMT_SEPARATOR: + if (!last_isspace) { + LOGCHAR(' '); + last_isspace = 1; + } + break; + + case LOG_FMT_TEXT: // text + src = tmp->arg; + iret = strlcpy2(tmplog, src, dst + maxsize - tmplog); + if (iret == 0) + goto out; + tmplog += iret; + last_isspace = 0; + break; + + case LOG_FMT_EXPR: // sample expression, may be request or response + key = NULL; + if (tmp->options & LOG_OPT_REQ_CAP) + key = sample_fetch_as_type(be, sess, s, SMP_OPT_DIR_REQ|SMP_OPT_FINAL, tmp->expr, SMP_T_STR); + + if (!key && (tmp->options & LOG_OPT_RES_CAP)) + key = sample_fetch_as_type(be, sess, s, SMP_OPT_DIR_RES|SMP_OPT_FINAL, tmp->expr, SMP_T_STR); + + if (!key && !(tmp->options & (LOG_OPT_REQ_CAP|LOG_OPT_RES_CAP))) // cfg, cli + key = sample_fetch_as_type(be, sess, s, SMP_OPT_FINAL, tmp->expr, SMP_T_STR); + + if (tmp->options & LOG_OPT_HTTP) + ret = lf_encode_chunk(tmplog, dst + maxsize, + '%', http_encode_map, key ? &key->data.u.str : &empty, tmp); + else + ret = lf_text_len(tmplog, + key ? key->data.u.str.area : NULL, + key ? key->data.u.str.data : 0, + dst + maxsize - tmplog, + tmp); + if (ret == 0) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_CLIENTIP: // %ci + addr = (s ? sc_src(s->scf) : sess_src(sess)); + if (addr) + ret = lf_ip(tmplog, (struct sockaddr *)addr, dst + maxsize - tmplog, tmp); + else + ret = lf_text_len(tmplog, NULL, 0, dst + maxsize - tmplog, tmp); + + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_CLIENTPORT: // %cp + addr = (s ? sc_src(s->scf) : sess_src(sess)); + if (addr) { + /* sess->listener is always defined when the session's owner is an inbound connections */ + if (addr->ss_family == AF_UNIX) + ret = ltoa_o(sess->listener->luid, tmplog, dst + maxsize - tmplog); + else + ret = lf_port(tmplog, (struct sockaddr *)addr, dst + maxsize - tmplog, tmp); + } + else + ret = lf_text_len(tmplog, NULL, 0, dst + maxsize - tmplog, tmp); + + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_FRONTENDIP: // %fi + addr = (s ? sc_dst(s->scf) : sess_dst(sess)); + if (addr) + ret = lf_ip(tmplog, (struct sockaddr *)addr, dst + maxsize - tmplog, tmp); + else + ret = lf_text_len(tmplog, NULL, 0, dst + maxsize - tmplog, tmp); + + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_FRONTENDPORT: // %fp + addr = (s ? sc_dst(s->scf) : sess_dst(sess)); + if (addr) { + /* sess->listener is always defined when the session's owner is an inbound connections */ + if (addr->ss_family == AF_UNIX) + ret = ltoa_o(sess->listener->luid, tmplog, dst + maxsize - tmplog); + else + ret = lf_port(tmplog, (struct sockaddr *)addr, dst + maxsize - tmplog, tmp); + } + else + ret = lf_text_len(tmplog, NULL, 0, dst + maxsize - tmplog, tmp); + + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_BACKENDIP: // %bi + if (be_conn && conn_get_src(be_conn)) + ret = lf_ip(tmplog, (const struct sockaddr *)be_conn->src, dst + maxsize - tmplog, tmp); + else + ret = lf_text_len(tmplog, NULL, 0, dst + maxsize - tmplog, tmp); + + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_BACKENDPORT: // %bp + if (be_conn && conn_get_src(be_conn)) + ret = lf_port(tmplog, (struct sockaddr *)be_conn->src, dst + maxsize - tmplog, tmp); + else + ret = lf_text_len(tmplog, NULL, 0, dst + maxsize - tmplog, tmp); + + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_SERVERIP: // %si + if (be_conn && conn_get_dst(be_conn)) + ret = lf_ip(tmplog, (struct sockaddr *)be_conn->dst, dst + maxsize - tmplog, tmp); + else + ret = lf_text_len(tmplog, NULL, 0, dst + maxsize - tmplog, tmp); + + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_SERVERPORT: // %sp + if (be_conn && conn_get_dst(be_conn)) + ret = lf_port(tmplog, (struct sockaddr *)be_conn->dst, dst + maxsize - tmplog, tmp); + else + ret = lf_text_len(tmplog, NULL, 0, dst + maxsize - tmplog, tmp); + + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_DATE: // %t = accept date + get_localtime(logs->accept_date.tv_sec, &tm); + ret = date2str_log(tmplog, &tm, &logs->accept_date, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_tr: // %tr = start of request date + /* Note that the timers are valid if we get here */ + tv_ms_add(&tv, &logs->accept_date, logs->t_idle >= 0 ? logs->t_idle + logs->t_handshake : 0); + get_localtime(tv.tv_sec, &tm); + ret = date2str_log(tmplog, &tm, &tv, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_DATEGMT: // %T = accept date, GMT + get_gmtime(logs->accept_date.tv_sec, &tm); + ret = gmt2str_log(tmplog, &tm, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_trg: // %trg = start of request date, GMT + tv_ms_add(&tv, &logs->accept_date, logs->t_idle >= 0 ? logs->t_idle + logs->t_handshake : 0); + get_gmtime(tv.tv_sec, &tm); + ret = gmt2str_log(tmplog, &tm, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_DATELOCAL: // %Tl = accept date, local + get_localtime(logs->accept_date.tv_sec, &tm); + ret = localdate2str_log(tmplog, logs->accept_date.tv_sec, &tm, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_trl: // %trl = start of request date, local + tv_ms_add(&tv, &logs->accept_date, logs->t_idle >= 0 ? logs->t_idle + logs->t_handshake : 0); + get_localtime(tv.tv_sec, &tm); + ret = localdate2str_log(tmplog, tv.tv_sec, &tm, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_TS: // %Ts + if (tmp->options & LOG_OPT_HEXA) { + iret = snprintf(tmplog, dst + maxsize - tmplog, "%04X", (unsigned int)logs->accept_date.tv_sec); + if (iret < 0 || iret > dst + maxsize - tmplog) + goto out; + last_isspace = 0; + tmplog += iret; + } else { + ret = ltoa_o(logs->accept_date.tv_sec, tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + } + break; + + case LOG_FMT_MS: // %ms + if (tmp->options & LOG_OPT_HEXA) { + iret = snprintf(tmplog, dst + maxsize - tmplog, "%02X",(unsigned int)logs->accept_date.tv_usec/1000); + if (iret < 0 || iret > dst + maxsize - tmplog) + goto out; + last_isspace = 0; + tmplog += iret; + } else { + if ((dst + maxsize - tmplog) < 4) + goto out; + ret = utoa_pad((unsigned int)logs->accept_date.tv_usec/1000, + tmplog, 4); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + } + break; + + case LOG_FMT_FRONTEND: // %f + src = fe->id; + ret = lf_text(tmplog, src, dst + maxsize - tmplog, tmp); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_FRONTEND_XPRT: // %ft + src = fe->id; + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + iret = strlcpy2(tmplog, src, dst + maxsize - tmplog); + if (iret == 0) + goto out; + tmplog += iret; + + /* sess->listener may be undefined if the session's owner is a health-check */ + if (sess->listener && sess->listener->bind_conf->xprt->get_ssl_sock_ctx) + LOGCHAR('~'); + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + last_isspace = 0; + break; +#ifdef USE_OPENSSL + case LOG_FMT_SSL_CIPHER: // %sslc + src = NULL; + conn = objt_conn(sess->origin); + if (conn) { + src = ssl_sock_get_cipher_name(conn); + } + ret = lf_text(tmplog, src, dst + maxsize - tmplog, tmp); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_SSL_VERSION: // %sslv + src = NULL; + conn = objt_conn(sess->origin); + if (conn) { + src = ssl_sock_get_proto_version(conn); + } + ret = lf_text(tmplog, src, dst + maxsize - tmplog, tmp); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; +#endif + case LOG_FMT_BACKEND: // %b + src = be->id; + ret = lf_text(tmplog, src, dst + maxsize - tmplog, tmp); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_SERVER: // %s + switch (obj_type(s ? s->target : sess->origin)) { + case OBJ_TYPE_SERVER: + src = __objt_server(s->target)->id; + break; + case OBJ_TYPE_APPLET: + src = __objt_applet(s->target)->name; + break; + case OBJ_TYPE_CHECK: + src = (__objt_check(sess->origin)->server + ? __objt_check(sess->origin)->server->id + : "<NOSRV>"); + break; + default: + src = "<NOSRV>"; + break; + } + ret = lf_text(tmplog, src, dst + maxsize - tmplog, tmp); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_Th: // %Th = handshake time + ret = ltoa_o(logs->t_handshake, tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_Ti: // %Ti = HTTP idle time + ret = ltoa_o(logs->t_idle, tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_TR: // %TR = HTTP request time + ret = ltoa_o((t_request >= 0) ? t_request - logs->t_idle - logs->t_handshake : -1, + tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_TQ: // %Tq = Th + Ti + TR + ret = ltoa_o(t_request, tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_TW: // %Tw + ret = ltoa_o((logs->t_queue >= 0) ? logs->t_queue - t_request : -1, + tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_TC: // %Tc + ret = ltoa_o((logs->t_connect >= 0) ? logs->t_connect - logs->t_queue : -1, + tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_Tr: // %Tr + ret = ltoa_o((logs->t_data >= 0) ? logs->t_data - logs->t_connect : -1, + tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_TD: // %Td + if (be->mode == PR_MODE_HTTP) + ret = ltoa_o((logs->t_data >= 0) ? logs->t_close - logs->t_data : -1, + tmplog, dst + maxsize - tmplog); + else + ret = ltoa_o((logs->t_connect >= 0) ? logs->t_close - logs->t_connect : -1, + tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_Ta: // %Ta = active time = Tt - Th - Ti + if (!(fe->to_log & LW_BYTES)) + LOGCHAR('+'); + ret = ltoa_o(logs->t_close - (logs->t_idle >= 0 ? logs->t_idle + logs->t_handshake : 0), + tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_TT: // %Tt = total time + if (!(fe->to_log & LW_BYTES)) + LOGCHAR('+'); + ret = ltoa_o(logs->t_close, tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_TU: // %Tu = total time seen by user = Tt - Ti + if (!(fe->to_log & LW_BYTES)) + LOGCHAR('+'); + ret = ltoa_o(logs->t_close - (logs->t_idle >= 0 ? logs->t_idle : 0), + tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_STATUS: // %ST + ret = ltoa_o(status, tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_BYTES: // %B + if (!(fe->to_log & LW_BYTES)) + LOGCHAR('+'); + ret = lltoa(logs->bytes_out, tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_BYTES_UP: // %U + ret = lltoa(logs->bytes_in, tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_CCLIENT: // %CC + src = txn ? txn->cli_cookie : NULL; + ret = lf_text(tmplog, src, dst + maxsize - tmplog, tmp); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_CSERVER: // %CS + src = txn ? txn->srv_cookie : NULL; + ret = lf_text(tmplog, src, dst + maxsize - tmplog, tmp); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_TERMSTATE: // %ts + LOGCHAR(sess_term_cond[(s_flags & SF_ERR_MASK) >> SF_ERR_SHIFT]); + LOGCHAR(sess_fin_state[(s_flags & SF_FINST_MASK) >> SF_FINST_SHIFT]); + *tmplog = '\0'; + last_isspace = 0; + break; + + case LOG_FMT_TERMSTATE_CK: // %tsc, same as TS with cookie state (for mode HTTP) + LOGCHAR(sess_term_cond[(s_flags & SF_ERR_MASK) >> SF_ERR_SHIFT]); + LOGCHAR(sess_fin_state[(s_flags & SF_FINST_MASK) >> SF_FINST_SHIFT]); + LOGCHAR((txn && (be->ck_opts & PR_CK_ANY)) ? sess_cookie[(txn->flags & TX_CK_MASK) >> TX_CK_SHIFT] : '-'); + LOGCHAR((txn && (be->ck_opts & PR_CK_ANY)) ? sess_set_cookie[(txn->flags & TX_SCK_MASK) >> TX_SCK_SHIFT] : '-'); + last_isspace = 0; + break; + + case LOG_FMT_ACTCONN: // %ac + ret = ltoa_o(actconn, tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_FECONN: // %fc + ret = ltoa_o(fe->feconn, tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_BECONN: // %bc + ret = ltoa_o(be->beconn, tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_SRVCONN: // %sc + switch (obj_type(s ? s->target : sess->origin)) { + case OBJ_TYPE_SERVER: + ret = ultoa_o(__objt_server(s->target)->cur_sess, + tmplog, dst + maxsize - tmplog); + break; + case OBJ_TYPE_CHECK: + ret = ultoa_o(__objt_check(sess->origin)->server + ? __objt_check(sess->origin)->server->cur_sess + : 0, tmplog, dst + maxsize - tmplog); + break; + default: + ret = ultoa_o(0, tmplog, dst + maxsize - tmplog); + break; + } + + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_RETRIES: // %rq + if (s_flags & SF_REDISP) + LOGCHAR('+'); + ret = ltoa_o((s ? s->conn_retries : 0), tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_SRVQUEUE: // %sq + ret = ltoa_o(logs->srv_queue_pos, tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_BCKQUEUE: // %bq + ret = ltoa_o(logs->prx_queue_pos, tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_HDRREQUEST: // %hr + /* request header */ + if (fe->nb_req_cap && s && s->req_cap) { + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + LOGCHAR('{'); + for (hdr = 0; hdr < fe->nb_req_cap; hdr++) { + if (hdr) + LOGCHAR('|'); + if (s->req_cap[hdr] != NULL) { + ret = lf_encode_string(tmplog, dst + maxsize, + '#', hdr_encode_map, s->req_cap[hdr], tmp); + if (ret == NULL || *ret != '\0') + goto out; + tmplog = ret; + } + } + LOGCHAR('}'); + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + last_isspace = 0; + } + break; + + case LOG_FMT_HDRREQUESTLIST: // %hrl + /* request header list */ + if (fe->nb_req_cap && s && s->req_cap) { + for (hdr = 0; hdr < fe->nb_req_cap; hdr++) { + if (hdr > 0) + LOGCHAR(' '); + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + if (s->req_cap[hdr] != NULL) { + ret = lf_encode_string(tmplog, dst + maxsize, + '#', hdr_encode_map, s->req_cap[hdr], tmp); + if (ret == NULL || *ret != '\0') + goto out; + tmplog = ret; + } else if (!(tmp->options & LOG_OPT_QUOTE)) + LOGCHAR('-'); + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + last_isspace = 0; + } + } + break; + + + case LOG_FMT_HDRRESPONS: // %hs + /* response header */ + if (fe->nb_rsp_cap && s && s->res_cap) { + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + LOGCHAR('{'); + for (hdr = 0; hdr < fe->nb_rsp_cap; hdr++) { + if (hdr) + LOGCHAR('|'); + if (s->res_cap[hdr] != NULL) { + ret = lf_encode_string(tmplog, dst + maxsize, + '#', hdr_encode_map, s->res_cap[hdr], tmp); + if (ret == NULL || *ret != '\0') + goto out; + tmplog = ret; + } + } + LOGCHAR('}'); + last_isspace = 0; + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + } + break; + + case LOG_FMT_HDRRESPONSLIST: // %hsl + /* response header list */ + if (fe->nb_rsp_cap && s && s->res_cap) { + for (hdr = 0; hdr < fe->nb_rsp_cap; hdr++) { + if (hdr > 0) + LOGCHAR(' '); + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + if (s->res_cap[hdr] != NULL) { + ret = lf_encode_string(tmplog, dst + maxsize, + '#', hdr_encode_map, s->res_cap[hdr], tmp); + if (ret == NULL || *ret != '\0') + goto out; + tmplog = ret; + } else if (!(tmp->options & LOG_OPT_QUOTE)) + LOGCHAR('-'); + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + last_isspace = 0; + } + } + break; + + case LOG_FMT_REQ: // %r + /* Request */ + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + uri = txn && txn->uri ? txn->uri : "<BADREQ>"; + ret = lf_encode_string(tmplog, dst + maxsize, + '#', url_encode_map, uri, tmp); + if (ret == NULL || *ret != '\0') + goto out; + tmplog = ret; + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + last_isspace = 0; + break; + + case LOG_FMT_HTTP_PATH: // %HP + uri = txn && txn->uri ? txn->uri : "<BADREQ>"; + + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + + end = uri + strlen(uri); + // look for the first whitespace character + while (uri < end && !HTTP_IS_SPHT(*uri)) + uri++; + + // keep advancing past multiple spaces + while (uri < end && HTTP_IS_SPHT(*uri)) { + uri++; nspaces++; + } + + // look for first space or question mark after url + spc = uri; + while (spc < end && *spc != '?' && !HTTP_IS_SPHT(*spc)) + spc++; + + if (!txn || !txn->uri || nspaces == 0) { + chunk.area = "<BADREQ>"; + chunk.data = strlen("<BADREQ>"); + } else { + chunk.area = uri; + chunk.data = spc - uri; + } + + ret = lf_encode_chunk(tmplog, dst + maxsize, '#', url_encode_map, &chunk, tmp); + if (ret == NULL || *ret != '\0') + goto out; + + tmplog = ret; + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + + last_isspace = 0; + break; + + case LOG_FMT_HTTP_PATH_ONLY: // %HPO + uri = txn && txn->uri ? txn->uri : "<BADREQ>"; + + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + + end = uri + strlen(uri); + + // look for the first whitespace character + while (uri < end && !HTTP_IS_SPHT(*uri)) + uri++; + + // keep advancing past multiple spaces + while (uri < end && HTTP_IS_SPHT(*uri)) { + uri++; nspaces++; + } + + // look for first space after url + spc = uri; + while (spc < end && !HTTP_IS_SPHT(*spc)) + spc++; + + path = ist2(uri, spc - uri); + + // extract relative path without query params from url + parser = http_uri_parser_init(path); + path = iststop(http_parse_path(&parser), '?'); + if (!txn || !txn->uri || nspaces == 0) { + chunk.area = "<BADREQ>"; + chunk.data = strlen("<BADREQ>"); + } else { + chunk.area = path.ptr; + chunk.data = path.len; + } + + ret = lf_encode_chunk(tmplog, dst + maxsize, '#', url_encode_map, &chunk, tmp); + if (ret == NULL || *ret != '\0') + goto out; + + tmplog = ret; + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + + last_isspace = 0; + break; + + case LOG_FMT_HTTP_QUERY: // %HQ + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + + if (!txn || !txn->uri) { + chunk.area = "<BADREQ>"; + chunk.data = strlen("<BADREQ>"); + } else { + uri = txn->uri; + end = uri + strlen(uri); + // look for the first question mark + while (uri < end && *uri != '?') + uri++; + + qmark = uri; + // look for first space or question mark after url + while (uri < end && !HTTP_IS_SPHT(*uri)) + uri++; + + chunk.area = qmark; + chunk.data = uri - qmark; + } + + ret = lf_encode_chunk(tmplog, dst + maxsize, '#', url_encode_map, &chunk, tmp); + if (ret == NULL || *ret != '\0') + goto out; + + tmplog = ret; + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + + last_isspace = 0; + break; + + case LOG_FMT_HTTP_URI: // %HU + uri = txn && txn->uri ? txn->uri : "<BADREQ>"; + + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + + end = uri + strlen(uri); + // look for the first whitespace character + while (uri < end && !HTTP_IS_SPHT(*uri)) + uri++; + + // keep advancing past multiple spaces + while (uri < end && HTTP_IS_SPHT(*uri)) { + uri++; nspaces++; + } + + // look for first space after url + spc = uri; + while (spc < end && !HTTP_IS_SPHT(*spc)) + spc++; + + if (!txn || !txn->uri || nspaces == 0) { + chunk.area = "<BADREQ>"; + chunk.data = strlen("<BADREQ>"); + } else { + chunk.area = uri; + chunk.data = spc - uri; + } + + ret = lf_encode_chunk(tmplog, dst + maxsize, '#', url_encode_map, &chunk, tmp); + if (ret == NULL || *ret != '\0') + goto out; + + tmplog = ret; + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + + last_isspace = 0; + break; + + case LOG_FMT_HTTP_METHOD: // %HM + uri = txn && txn->uri ? txn->uri : "<BADREQ>"; + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + + end = uri + strlen(uri); + // look for the first whitespace character + spc = uri; + while (spc < end && !HTTP_IS_SPHT(*spc)) + spc++; + + if (spc == end) { // odd case, we have txn->uri, but we only got a verb + chunk.area = "<BADREQ>"; + chunk.data = strlen("<BADREQ>"); + } else { + chunk.area = uri; + chunk.data = spc - uri; + } + + ret = lf_encode_chunk(tmplog, dst + maxsize, '#', url_encode_map, &chunk, tmp); + if (ret == NULL || *ret != '\0') + goto out; + + tmplog = ret; + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + + last_isspace = 0; + break; + + case LOG_FMT_HTTP_VERSION: // %HV + uri = txn && txn->uri ? txn->uri : "<BADREQ>"; + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + + end = uri + strlen(uri); + // look for the first whitespace character + while (uri < end && !HTTP_IS_SPHT(*uri)) + uri++; + + // keep advancing past multiple spaces + while (uri < end && HTTP_IS_SPHT(*uri)) { + uri++; nspaces++; + } + + // look for the next whitespace character + while (uri < end && !HTTP_IS_SPHT(*uri)) + uri++; + + // keep advancing past multiple spaces + while (uri < end && HTTP_IS_SPHT(*uri)) + uri++; + + if (!txn || !txn->uri || nspaces == 0) { + chunk.area = "<BADREQ>"; + chunk.data = strlen("<BADREQ>"); + } else if (uri == end) { + chunk.area = "HTTP/0.9"; + chunk.data = strlen("HTTP/0.9"); + } else { + chunk.area = uri; + chunk.data = end - uri; + } + + ret = lf_encode_chunk(tmplog, dst + maxsize, '#', url_encode_map, &chunk, tmp); + if (ret == NULL || *ret != '\0') + goto out; + + tmplog = ret; + if (tmp->options & LOG_OPT_QUOTE) + LOGCHAR('"'); + + last_isspace = 0; + break; + + case LOG_FMT_COUNTER: // %rt + if (tmp->options & LOG_OPT_HEXA) { + iret = snprintf(tmplog, dst + maxsize - tmplog, "%04X", uniq_id); + if (iret < 0 || iret > dst + maxsize - tmplog) + goto out; + last_isspace = 0; + tmplog += iret; + } else { + ret = ltoa_o(uniq_id, tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + } + break; + + case LOG_FMT_LOGCNT: // %lc + if (tmp->options & LOG_OPT_HEXA) { + iret = snprintf(tmplog, dst + maxsize - tmplog, "%04X", fe->log_count); + if (iret < 0 || iret > dst + maxsize - tmplog) + goto out; + last_isspace = 0; + tmplog += iret; + } else { + ret = ultoa_o(fe->log_count, tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + } + break; + + case LOG_FMT_HOSTNAME: // %H + src = hostname; + ret = lf_text(tmplog, src, dst + maxsize - tmplog, tmp); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + case LOG_FMT_PID: // %pid + if (tmp->options & LOG_OPT_HEXA) { + iret = snprintf(tmplog, dst + maxsize - tmplog, "%04X", pid); + if (iret < 0 || iret > dst + maxsize - tmplog) + goto out; + last_isspace = 0; + tmplog += iret; + } else { + ret = ltoa_o(pid, tmplog, dst + maxsize - tmplog); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + } + break; + + case LOG_FMT_UNIQUEID: // %ID + ret = NULL; + if (s) + ret = lf_text_len(tmplog, s->unique_id.ptr, s->unique_id.len, maxsize - (tmplog - dst), tmp); + else + ret = lf_text_len(tmplog, NULL, 0, maxsize - (tmplog - dst), tmp); + if (ret == NULL) + goto out; + tmplog = ret; + last_isspace = 0; + break; + + } + } + +out: + /* *tmplog is a unused character */ + *tmplog = '\0'; + return tmplog - dst; + +} + +/* + * send a log for the stream when we have enough info about it. + * Will not log if the frontend has no log defined. + */ +void strm_log(struct stream *s) +{ + struct session *sess = s->sess; + int size, err, level; + int sd_size = 0; + + /* if we don't want to log normal traffic, return now */ + err = (s->flags & SF_REDISP) || + ((s->flags & SF_ERR_MASK) > SF_ERR_LOCAL) || + (((s->flags & SF_ERR_MASK) == SF_ERR_NONE) && s->conn_retries) || + ((sess->fe->mode == PR_MODE_HTTP) && s->txn && s->txn->status >= 500); + + if (!err && (sess->fe->options2 & PR_O2_NOLOGNORM)) + return; + + if (LIST_ISEMPTY(&sess->fe->logsrvs)) + return; + + if (s->logs.level) { /* loglevel was overridden */ + if (s->logs.level == -1) { + s->logs.logwait = 0; /* logs disabled */ + return; + } + level = s->logs.level - 1; + } + else { + level = LOG_INFO; + if (err && (sess->fe->options2 & PR_O2_LOGERRORS)) + level = LOG_ERR; + } + + /* if unique-id was not generated */ + if (!isttest(s->unique_id) && !LIST_ISEMPTY(&sess->fe->format_unique_id)) { + stream_generate_unique_id(s, &sess->fe->format_unique_id); + } + + if (!LIST_ISEMPTY(&sess->fe->logformat_sd)) { + sd_size = build_logline(s, logline_rfc5424, global.max_syslog_len, + &sess->fe->logformat_sd); + } + + size = build_logline(s, logline, global.max_syslog_len, &sess->fe->logformat); + if (size > 0) { + _HA_ATOMIC_INC(&sess->fe->log_count); + __send_log(&sess->fe->logsrvs, &sess->fe->log_tag, level, + logline, size + 1, logline_rfc5424, sd_size); + s->logs.logwait = 0; + } +} + +/* + * send a minimalist log for the session. Will not log if the frontend has no + * log defined. It is assumed that this is only used to report anomalies that + * cannot lead to the creation of a regular stream. Because of this the log + * level is LOG_INFO or LOG_ERR depending on the "log-separate-error" setting + * in the frontend. The caller must simply know that it should not call this + * function to report unimportant events. It is safe to call this function with + * sess==NULL (will not do anything). + */ +void sess_log(struct session *sess) +{ + int size, level; + int sd_size = 0; + + if (!sess) + return; + + if (LIST_ISEMPTY(&sess->fe->logsrvs)) + return; + + level = LOG_INFO; + if (sess->fe->options2 & PR_O2_LOGERRORS) + level = LOG_ERR; + + if (!LIST_ISEMPTY(&sess->fe->logformat_sd)) { + sd_size = sess_build_logline(sess, NULL, + logline_rfc5424, global.max_syslog_len, + &sess->fe->logformat_sd); + } + + if (!LIST_ISEMPTY(&sess->fe->logformat_error)) + size = sess_build_logline(sess, NULL, logline, global.max_syslog_len, &sess->fe->logformat_error); + else + size = sess_build_logline(sess, NULL, logline, global.max_syslog_len, &sess->fe->logformat); + if (size > 0) { + _HA_ATOMIC_INC(&sess->fe->log_count); + __send_log(&sess->fe->logsrvs, &sess->fe->log_tag, level, + logline, size + 1, logline_rfc5424, sd_size); + } +} + +void app_log(struct list *logsrvs, struct buffer *tag, int level, const char *format, ...) +{ + va_list argp; + int data_len; + + if (level < 0 || format == NULL || logline == NULL) + return; + + va_start(argp, format); + data_len = vsnprintf(logline, global.max_syslog_len, format, argp); + if (data_len < 0 || data_len > global.max_syslog_len) + data_len = global.max_syslog_len; + va_end(argp); + + __send_log(logsrvs, tag, level, logline, data_len, default_rfc5424_sd_log_format, 2); +} +/* + * This function parse a received log message <buf>, of size <buflen> + * it fills <level>, <facility> and <metadata> depending of the detected + * header format and message will point on remaining payload of <size> + * + * <metadata> must point on a preallocated array of LOG_META_FIELDS*sizeof(struct ist) + * struct ist len will be set to 0 if field is not found + * <level> and <facility> will be set to -1 if not found. + */ +void parse_log_message(char *buf, size_t buflen, int *level, int *facility, + struct ist *metadata, char **message, size_t *size) +{ + + char *p; + int fac_level = 0; + + *level = *facility = -1; + + *message = buf; + *size = buflen; + + memset(metadata, 0, LOG_META_FIELDS*sizeof(struct ist)); + + p = buf; + if (*size < 2 || *p != '<') + return; + + p++; + while (*p != '>') { + if (*p > '9' || *p < '0') + return; + fac_level = 10*fac_level + (*p - '0'); + p++; + if ((p - buf) > buflen) + return; + } + + *facility = fac_level >> 3; + *level = fac_level & 0x7; + p++; + + metadata[LOG_META_PRIO] = ist2(buf, p - buf); + + buflen -= p - buf; + buf = p; + + *size = buflen; + *message = buf; + + /* for rfc5424, prio is always followed by '1' and ' ' */ + if ((*size > 2) && (p[0] == '1') && (p[1] == ' ')) { + /* format is always '1 TIMESTAMP HOSTNAME TAG PID MSGID STDATA ' + * followed by message. + * Each header field can present NILVALUE: '-' + */ + + p += 2; + *size -= 2; + /* timestamp is NILVALUE '-' */ + if (*size > 2 && (p[0] == '-') && p[1] == ' ') { + metadata[LOG_META_TIME] = ist2(p, 1); + p++; + } + else if (*size > LOG_ISOTIME_MINLEN) { + metadata[LOG_META_TIME].ptr = p; + + /* check if optional secfrac is present + * in timestamp. + * possible format are: + * ex: '1970-01-01T00:00:00.000000Z' + * '1970-01-01T00:00:00.000000+00:00' + * '1970-01-01T00:00:00.000000-00:00' + * '1970-01-01T00:00:00Z' + * '1970-01-01T00:00:00+00:00' + * '1970-01-01T00:00:00-00:00' + */ + p += 19; + if (*p == '.') { + p++; + if ((p - buf) >= buflen) + goto bad_format; + while (*p != 'Z' && *p != '+' && *p != '-') { + if ((unsigned char)(*p - '0') > 9) + goto bad_format; + + p++; + if ((p - buf) >= buflen) + goto bad_format; + } + } + + if (*p == 'Z') + p++; + else + p += 6; /* case of '+00:00 or '-00:00' */ + + if ((p - buf) >= buflen || *p != ' ') + goto bad_format; + metadata[LOG_META_TIME].len = p - metadata[LOG_META_TIME].ptr; + } + else + goto bad_format; + + + p++; + if ((p - buf) >= buflen || *p == ' ') + goto bad_format; + + metadata[LOG_META_HOST].ptr = p; + while (*p != ' ') { + p++; + if ((p - buf) >= buflen) + goto bad_format; + } + metadata[LOG_META_HOST].len = p - metadata[LOG_META_HOST].ptr; + if (metadata[LOG_META_HOST].len == 1 && metadata[LOG_META_HOST].ptr[0] == '-') + metadata[LOG_META_HOST].len = 0; + + p++; + if ((p - buf) >= buflen || *p == ' ') + goto bad_format; + + metadata[LOG_META_TAG].ptr = p; + while (*p != ' ') { + p++; + if ((p - buf) >= buflen) + goto bad_format; + } + metadata[LOG_META_TAG].len = p - metadata[LOG_META_TAG].ptr; + if (metadata[LOG_META_TAG].len == 1 && metadata[LOG_META_TAG].ptr[0] == '-') + metadata[LOG_META_TAG].len = 0; + + p++; + if ((p - buf) >= buflen || *p == ' ') + goto bad_format; + + metadata[LOG_META_PID].ptr = p; + while (*p != ' ') { + p++; + if ((p - buf) >= buflen) + goto bad_format; + } + metadata[LOG_META_PID].len = p - metadata[LOG_META_PID].ptr; + if (metadata[LOG_META_PID].len == 1 && metadata[LOG_META_PID].ptr[0] == '-') + metadata[LOG_META_PID].len = 0; + + p++; + if ((p - buf) >= buflen || *p == ' ') + goto bad_format; + + metadata[LOG_META_MSGID].ptr = p; + while (*p != ' ') { + p++; + if ((p - buf) >= buflen) + goto bad_format; + } + metadata[LOG_META_MSGID].len = p - metadata[LOG_META_MSGID].ptr; + if (metadata[LOG_META_MSGID].len == 1 && metadata[LOG_META_MSGID].ptr[0] == '-') + metadata[LOG_META_MSGID].len = 0; + + p++; + if ((p - buf) >= buflen || *p == ' ') + goto bad_format; + + /* structured data format is: + * ex: + * '[key1=value1 key2=value2][key3=value3]' + * + * space is invalid outside [] because + * considered as the end of structured data field + */ + metadata[LOG_META_STDATA].ptr = p; + if (*p == '[') { + int elem = 0; + + while (1) { + if (elem) { + /* according to rfc this char is escaped in param values */ + if (*p == ']' && *(p-1) != '\\') + elem = 0; + } + else { + if (*p == '[') + elem = 1; + else if (*p == ' ') + break; + else + goto bad_format; + } + p++; + if ((p - buf) >= buflen) + goto bad_format; + } + } + else if (*p == '-') { + /* case of NILVALUE */ + p++; + if ((p - buf) >= buflen || *p != ' ') + goto bad_format; + } + else + goto bad_format; + + metadata[LOG_META_STDATA].len = p - metadata[LOG_META_STDATA].ptr; + if (metadata[LOG_META_STDATA].len == 1 && metadata[LOG_META_STDATA].ptr[0] == '-') + metadata[LOG_META_STDATA].len = 0; + + p++; + + buflen -= p - buf; + buf = p; + + *size = buflen; + *message = p; + } + else if (*size > LOG_LEGACYTIME_LEN) { + int m; + + /* supported header format according to rfc3164. + * ex: + * 'Jan 1 00:00:00 HOSTNAME TAG[PID]: ' + * or 'Jan 1 00:00:00 HOSTNAME TAG: ' + * or 'Jan 1 00:00:00 HOSTNAME ' + * Note: HOSTNAME is mandatory, and day + * of month uses a single space prefix if + * less than 10 to ensure hour offset is + * always the same. + */ + + /* Check month to see if it correspond to a rfc3164 + * header ex 'Jan 1 00:00:00' */ + for (m = 0; m < 12; m++) + if (!memcmp(monthname[m], p, 3)) + break; + /* Month not found */ + if (m == 12) + goto bad_format; + + metadata[LOG_META_TIME] = ist2(p, LOG_LEGACYTIME_LEN); + + p += LOG_LEGACYTIME_LEN; + if ((p - buf) >= buflen || *p != ' ') + goto bad_format; + + p++; + if ((p - buf) >= buflen || *p == ' ') + goto bad_format; + + metadata[LOG_META_HOST].ptr = p; + while (*p != ' ') { + p++; + if ((p - buf) >= buflen) + goto bad_format; + } + metadata[LOG_META_HOST].len = p - metadata[LOG_META_HOST].ptr; + + /* TAG seems to no be mandatory */ + p++; + + buflen -= p - buf; + buf = p; + + *size = buflen; + *message = buf; + + if (!buflen) + return; + + while (((p - buf) < buflen) && *p != ' ' && *p != ':') + p++; + + /* a tag must present a trailing ':' */ + if (((p - buf) >= buflen) || *p != ':') + return; + p++; + /* followed by a space */ + if (((p - buf) >= buflen) || *p != ' ') + return; + + /* rewind to parse tag and pid */ + p = buf; + metadata[LOG_META_TAG].ptr = p; + /* we have the guarantee that ':' will be reach before size limit */ + while (*p != ':') { + if (*p == '[') { + metadata[LOG_META_TAG].len = p - metadata[LOG_META_TAG].ptr; + metadata[LOG_META_PID].ptr = p + 1; + } + else if (*p == ']' && isttest(metadata[LOG_META_PID])) { + if (p[1] != ':') + return; + metadata[LOG_META_PID].len = p - metadata[LOG_META_PID].ptr; + } + p++; + } + if (!metadata[LOG_META_TAG].len) + metadata[LOG_META_TAG].len = p - metadata[LOG_META_TAG].ptr; + + /* let pass ':' and ' ', we still have warranty size is large enough */ + p += 2; + + buflen -= p - buf; + buf = p; + + *size = buflen; + *message = buf; + } + + return; + +bad_format: + /* bad syslog format, we reset all parsed syslog fields + * but priority is kept because we are able to re-build + * this message using LOF_FORMAT_PRIO. + */ + metadata[LOG_META_TIME].len = 0; + metadata[LOG_META_HOST].len = 0; + metadata[LOG_META_TAG].len = 0; + metadata[LOG_META_PID].len = 0; + metadata[LOG_META_MSGID].len = 0; + metadata[LOG_META_STDATA].len = 0; + + return; +} + +/* + * UDP syslog fd handler + */ +void syslog_fd_handler(int fd) +{ + static THREAD_LOCAL struct ist metadata[LOG_META_FIELDS]; + ssize_t ret = 0; + struct buffer *buf = get_trash_chunk(); + size_t size; + char *message; + int level; + int facility; + struct listener *l = objt_listener(fdtab[fd].owner); + int max_accept; + + BUG_ON(!l); + + if (fdtab[fd].state & FD_POLL_IN) { + + if (!fd_recv_ready(fd)) + return; + + max_accept = l->maxaccept ? l->maxaccept : 1; + + do { + /* Source address */ + struct sockaddr_storage saddr = {0}; + socklen_t saddrlen; + + saddrlen = sizeof(saddr); + + ret = recvfrom(fd, buf->area, buf->size, 0, (struct sockaddr *)&saddr, &saddrlen); + if (ret < 0) { + if (errno == EINTR) + continue; + if (errno == EAGAIN || errno == EWOULDBLOCK) + fd_cant_recv(fd); + goto out; + } + buf->data = ret; + + /* update counters */ + _HA_ATOMIC_INC(&cum_log_messages); + proxy_inc_fe_req_ctr(l, l->bind_conf->frontend); + + parse_log_message(buf->area, buf->data, &level, &facility, metadata, &message, &size); + + process_send_log(&l->bind_conf->frontend->logsrvs, level, facility, metadata, message, size); + + } while (--max_accept); + } + +out: + return; +} + +/* + * IO Handler to handle message exchange with a syslog tcp client + */ +static void syslog_io_handler(struct appctx *appctx) +{ + static THREAD_LOCAL struct ist metadata[LOG_META_FIELDS]; + struct stconn *sc = appctx_sc(appctx); + struct stream *s = __sc_strm(sc); + struct proxy *frontend = strm_fe(s); + struct listener *l = strm_li(s); + struct buffer *buf = get_trash_chunk(); + int max_accept; + int to_skip; + int facility; + int level; + char *message; + size_t size; + + max_accept = l->maxaccept ? l->maxaccept : 1; + while (co_data(sc_oc(sc))) { + char c; + + if (max_accept <= 0) + goto missing_budget; + max_accept--; + + to_skip = co_getchar(sc_oc(sc), &c); + if (!to_skip) + goto missing_data; + else if (to_skip < 0) + goto cli_abort; + + if (c == '<') { + /* rfc-6587, Non-Transparent-Framing: messages separated by + * a trailing LF or CR LF + */ + to_skip = co_getline(sc_oc(sc), buf->area, buf->size); + if (!to_skip) + goto missing_data; + else if (to_skip < 0) + goto cli_abort; + + if (buf->area[to_skip - 1] != '\n') + goto parse_error; + + buf->data = to_skip - 1; + + /* according to rfc-6587, some devices adds CR before LF */ + if (buf->data && buf->area[buf->data - 1] == '\r') + buf->data--; + + } + else if ((unsigned char)(c - '1') <= 8) { + /* rfc-6587, Octet-Counting: message length in ASCII + * (first digit can not be ZERO), followed by a space + * and message length + */ + char *p = NULL; + int msglen; + + to_skip = co_getword(sc_oc(sc), buf->area, buf->size, ' '); + if (!to_skip) + goto missing_data; + else if (to_skip < 0) + goto cli_abort; + + if (buf->area[to_skip - 1] != ' ') + goto parse_error; + + msglen = strtol(buf->area, &p, 10); + if (!msglen || p != &buf->area[to_skip - 1]) + goto parse_error; + + /* message seems too large */ + if (msglen > buf->size) + goto parse_error; + + msglen = co_getblk(sc_oc(sc), buf->area, msglen, to_skip); + if (!msglen) + goto missing_data; + else if (msglen < 0) + goto cli_abort; + + + buf->data = msglen; + to_skip += msglen; + } + else + goto parse_error; + + co_skip(sc_oc(sc), to_skip); + + /* update counters */ + _HA_ATOMIC_INC(&cum_log_messages); + proxy_inc_fe_req_ctr(l, frontend); + + parse_log_message(buf->area, buf->data, &level, &facility, metadata, &message, &size); + + process_send_log(&frontend->logsrvs, level, facility, metadata, message, size); + + } + +missing_data: + /* we need more data to read */ + sc_oc(sc)->flags |= CF_READ_DONTWAIT; + + return; + +missing_budget: + /* it may remain some stuff to do, let's retry later */ + appctx_wakeup(appctx); + + return; + +parse_error: + if (l->counters) + _HA_ATOMIC_INC(&l->counters->failed_req); + _HA_ATOMIC_INC(&frontend->fe_counters.failed_req); + + goto close; + +cli_abort: + if (l->counters) + _HA_ATOMIC_INC(&l->counters->cli_aborts); + _HA_ATOMIC_INC(&frontend->fe_counters.cli_aborts); + +close: + sc_shutw(sc); + sc_shutr(sc); + + sc_ic(sc)->flags |= CF_READ_NULL; + + return; +} + +static struct applet syslog_applet = { + .obj_type = OBJ_TYPE_APPLET, + .name = "<SYSLOG>", /* used for logging */ + .fct = syslog_io_handler, + .release = NULL, +}; + +/* + * Parse "log-forward" section and create corresponding sink buffer. + * + * The function returns 0 in success case, otherwise, it returns error + * flags. + */ +int cfg_parse_log_forward(const char *file, int linenum, char **args, int kwm) +{ + int err_code = 0; + struct proxy *px; + char *errmsg = NULL; + const char *err = NULL; + + if (strcmp(args[0], "log-forward") == 0) { + if (!*args[1]) { + ha_alert("parsing [%s:%d] : missing name for ip-forward section.\n", file, linenum); + err_code |= ERR_ALERT | ERR_ABORT; + goto out; + } + + if (alertif_too_many_args(1, file, linenum, args, &err_code)) + goto out; + + err = invalid_char(args[1]); + if (err) { + ha_alert("parsing [%s:%d] : character '%c' is not permitted in '%s' name '%s'.\n", + file, linenum, *err, args[0], args[1]); + err_code |= ERR_ALERT | ERR_ABORT; + goto out; + } + + px = log_forward_by_name(args[1]); + if (px) { + ha_alert("Parsing [%s:%d]: log-forward section '%s' has the same name as another log-forward section declared at %s:%d.\n", + file, linenum, args[1], px->conf.file, px->conf.line); + err_code |= ERR_ALERT | ERR_FATAL; + } + + px = proxy_find_by_name(args[1], 0, 0); + if (px) { + ha_alert("Parsing [%s:%d]: log forward section '%s' has the same name as %s '%s' declared at %s:%d.\n", + file, linenum, args[1], proxy_type_str(px), + px->id, px->conf.file, px->conf.line); + err_code |= ERR_ALERT | ERR_FATAL; + } + + px = calloc(1, sizeof *px); + if (!px) { + err_code |= ERR_ALERT | ERR_FATAL; + goto out; + } + + init_new_proxy(px); + px->next = cfg_log_forward; + cfg_log_forward = px; + px->conf.file = strdup(file); + px->conf.line = linenum; + px->mode = PR_MODE_SYSLOG; + px->last_change = now.tv_sec; + px->cap = PR_CAP_FE; + px->maxconn = 10; + px->timeout.client = TICK_ETERNITY; + px->accept = frontend_accept; + px->default_target = &syslog_applet.obj_type; + px->id = strdup(args[1]); + + } + else if (strcmp(args[0], "maxconn") == 0) { /* maxconn */ + if (warnifnotcap(cfg_log_forward, PR_CAP_FE, file, linenum, args[0], " Maybe you want 'fullconn' instead ?")) + err_code |= ERR_WARN; + + if (*(args[1]) == 0) { + ha_alert("parsing [%s:%d] : '%s' expects an integer argument.\n", file, linenum, args[0]); + err_code |= ERR_ALERT | ERR_FATAL; + goto out; + } + cfg_log_forward->maxconn = atol(args[1]); + if (alertif_too_many_args(1, file, linenum, args, &err_code)) + goto out; + } + else if (strcmp(args[0], "backlog") == 0) { /* backlog */ + if (warnifnotcap(cfg_log_forward, PR_CAP_FE, file, linenum, args[0], NULL)) + err_code |= ERR_WARN; + + if (*(args[1]) == 0) { + ha_alert("parsing [%s:%d] : '%s' expects an integer argument.\n", file, linenum, args[0]); + err_code |= ERR_ALERT | ERR_FATAL; + goto out; + } + cfg_log_forward->backlog = atol(args[1]); + if (alertif_too_many_args(1, file, linenum, args, &err_code)) + goto out; + } + else if (strcmp(args[0], "bind") == 0) { + int cur_arg; + struct bind_conf *bind_conf; + struct listener *l; + int ret; + + cur_arg = 1; + + bind_conf = bind_conf_alloc(cfg_log_forward, file, linenum, + NULL, xprt_get(XPRT_RAW)); + if (!bind_conf) { + ha_alert("parsing [%s:%d] : out of memory error.", file, linenum); + err_code |= ERR_ALERT | ERR_FATAL; + goto out; + } + + if (!str2listener(args[1], cfg_log_forward, bind_conf, file, linenum, &errmsg)) { + if (errmsg && *errmsg) { + indent_msg(&errmsg, 2); + ha_alert("parsing [%s:%d] : '%s %s' : %s\n", file, linenum, args[0], args[1], errmsg); + } + else { + ha_alert("parsing [%s:%d] : '%s %s' : error encountered while parsing listening address %s.\n", + file, linenum, args[0], args[1], args[2]); + err_code |= ERR_ALERT | ERR_FATAL; + goto out; + } + } + list_for_each_entry(l, &bind_conf->listeners, by_bind) { + l->maxaccept = global.tune.maxaccept ? global.tune.maxaccept : MAX_ACCEPT; + l->accept = session_accept_fd; + l->analysers |= cfg_log_forward->fe_req_ana; + l->default_target = cfg_log_forward->default_target; + global.maxsock++; + } + cur_arg++; + + ret = bind_parse_args_list(bind_conf, args, cur_arg, cursection, file, linenum); + err_code |= ret; + if (ret != 0) { + err_code |= ERR_ALERT | ERR_FATAL; + goto out; + } + } + else if (strcmp(args[0], "dgram-bind") == 0) { + int cur_arg; + struct bind_conf *bind_conf; + struct bind_kw *kw; + struct listener *l; + + cur_arg = 1; + + bind_conf = bind_conf_alloc(cfg_log_forward, file, linenum, + NULL, xprt_get(XPRT_RAW)); + if (!bind_conf) { + ha_alert("parsing [%s:%d] : out of memory error.", file, linenum); + err_code |= ERR_ALERT | ERR_FATAL; + goto out; + } + + if (!str2receiver(args[1], cfg_log_forward, bind_conf, file, linenum, &errmsg)) { + if (errmsg && *errmsg) { + indent_msg(&errmsg, 2); + ha_alert("parsing [%s:%d] : '%s %s' : %s\n", file, linenum, args[0], args[1], errmsg); + } + else { + ha_alert("parsing [%s:%d] : '%s %s' : error encountered while parsing listening address %s.\n", + file, linenum, args[0], args[1], args[2]); + } + err_code |= ERR_ALERT | ERR_FATAL; + goto out; + } + list_for_each_entry(l, &bind_conf->listeners, by_bind) { + /* the fact that the sockets are of type dgram is guaranteed by str2receiver() */ + l->maxaccept = global.tune.maxaccept ? global.tune.maxaccept : MAX_ACCEPT; + l->rx.iocb = syslog_fd_handler; + global.maxsock++; + } + cur_arg++; + + while (*args[cur_arg] && (kw = bind_find_kw(args[cur_arg]))) { + int ret; + + ret = kw->parse(args, cur_arg, cfg_log_forward, bind_conf, &errmsg); + err_code |= ret; + if (ret) { + if (errmsg && *errmsg) { + indent_msg(&errmsg, 2); + ha_alert("parsing [%s:%d] : %s\n", file, linenum, errmsg); + } + else + ha_alert("parsing [%s:%d]: error encountered while processing '%s'\n", + file, linenum, args[cur_arg]); + if (ret & ERR_FATAL) + goto out; + } + cur_arg += 1 + kw->skip; + } + if (*args[cur_arg] != 0) { + const char *best = bind_find_best_kw(args[cur_arg]); + if (best) + ha_alert("parsing [%s:%d] : unknown keyword '%s' in '%s' section; did you mean '%s' maybe ?\n", + file, linenum, args[cur_arg], cursection, best); + else + ha_alert("parsing [%s:%d] : unknown keyword '%s' in '%s' section.\n", + file, linenum, args[cur_arg], cursection); + err_code |= ERR_ALERT | ERR_FATAL; + goto out; + } + } + else if (strcmp(args[0], "log") == 0) { + if (!parse_logsrv(args, &cfg_log_forward->logsrvs, (kwm == KWM_NO), file, linenum, &errmsg)) { + ha_alert("parsing [%s:%d] : %s : %s\n", file, linenum, args[0], errmsg); + err_code |= ERR_ALERT | ERR_FATAL; + goto out; + } + } + else if (strcmp(args[0], "timeout") == 0) { + const char *res; + unsigned timeout; + + if (strcmp(args[1], "client") != 0) { + ha_alert("parsing [%s:%d] : unknown keyword '%s %s' in log-forward section.\n", file, linenum, args[0], args[1]); + err_code |= ERR_ALERT | ERR_FATAL; + goto out; + } + + if (*args[2] == 0) { + ha_alert("parsing [%s:%d] : missing timeout client value.\n", file, linenum); + err_code |= ERR_ALERT | ERR_FATAL; + goto out; + } + res = parse_time_err(args[2], &timeout, TIME_UNIT_MS); + if (res == PARSE_TIME_OVER) { + memprintf(&errmsg, "timer overflow in argument '%s' to 'timeout client' (maximum value is 2147483647 ms or ~24.8 days)", args[2]); + } + else if (res == PARSE_TIME_UNDER) { + memprintf(&errmsg, "timer underflow in argument '%s' to 'timeout client' (minimum non-null value is 1 ms)", args[2]); + } + else if (res) { + memprintf(&errmsg, "unexpected character '%c' in 'timeout client'", *res); + return -1; + } + + if (res) { + ha_alert("parsing [%s:%d] : %s : %s\n", file, linenum, args[0], errmsg); + err_code |= ERR_ALERT | ERR_FATAL; + goto out; + } + cfg_log_forward->timeout.client = MS_TO_TICKS(timeout); + } + else { + ha_alert("parsing [%s:%d] : unknown keyword '%s' in log-forward section.\n", file, linenum, args[0]); + err_code |= ERR_ALERT | ERR_ABORT; + goto out; + } +out: + return err_code; +} + + +/* config parsers for this section */ +REGISTER_CONFIG_SECTION("log-forward", cfg_parse_log_forward, NULL); + +REGISTER_PER_THREAD_ALLOC(init_log_buffers); +REGISTER_PER_THREAD_FREE(deinit_log_buffers); + +/* + * Local variables: + * c-indent-level: 8 + * c-basic-offset: 8 + * End: + */ |