2d2eda71267231c2526be701fe655db125852c1ffielding

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh#include "mod_proxy.h"

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh#include "mod_core.h"

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh#include "apr_optional.h"

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh#include "scoreboard.h"

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh#include "mod_status.h"

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh#include "proxy_util.h"

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh#if (MODULE_MAGIC_NUMBER_MAJOR > 20020903)

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh#include "mod_ssl.h"

2d2eda71267231c2526be701fe655db125852c1ffielding#else

2d2eda71267231c2526be701fe655db125852c1ffieldingAPR_DECLARE_OPTIONAL_FN(int, ssl_proxy_enable, (conn_rec *));

2d2eda71267231c2526be701fe655db125852c1ffieldingAPR_DECLARE_OPTIONAL_FN(int, ssl_engine_disable, (conn_rec *));

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbbAPR_DECLARE_OPTIONAL_FN(int, ssl_is_https, (conn_rec *));

ab5581cc78e9d865b0a6ab1404c53347b3276968rbbAPR_DECLARE_OPTIONAL_FN(char *, ssl_var_lookup,

92f3af936ce61f25358a3ee4f28df2f6d62040dfdreid (apr_pool_t *, server_rec *,

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb conn_rec *, request_rec *, char *));

c9a95767fbf0f5fb0976a06b97a256033925e433rbb#endif

fd0edaa8e3d4dd67d0604ccef2e96b071db96643fielding

2d2eda71267231c2526be701fe655db125852c1ffielding#ifndef MAX

2d2eda71267231c2526be701fe655db125852c1ffielding#define MAX(x,y) ((x) >= (y) ? (x) : (y))

2d2eda71267231c2526be701fe655db125852c1ffielding#endif

2d2eda71267231c2526be701fe655db125852c1ffielding

52de7a47876ce1748910cf3a0ee97f78842fab54rederpjstatic const char * const proxy_id = "proxy";

52de7a47876ce1748910cf3a0ee97f78842fab54rederpjapr_global_mutex_t *proxy_mutex = NULL;

52de7a47876ce1748910cf3a0ee97f78842fab54rederpj

2d2eda71267231c2526be701fe655db125852c1ffielding

61fd0cab072a05b855cbef9c585702401ac5ae29rbb

61fd0cab072a05b855cbef9c585702401ac5ae29rbbstatic const char *set_worker_param(apr_pool_t *p,

61fd0cab072a05b855cbef9c585702401ac5ae29rbb proxy_worker *worker,

61fd0cab072a05b855cbef9c585702401ac5ae29rbb const char *key,

2d2eda71267231c2526be701fe655db125852c1ffielding const char *val)

2d2eda71267231c2526be701fe655db125852c1ffielding{

8af88bd6958b80c224e964892b8237720b13ab1ajerenkrantz

8af88bd6958b80c224e964892b8237720b13ab1ajerenkrantz int ival;

8af88bd6958b80c224e964892b8237720b13ab1ajerenkrantz apr_interval_time_t timeout;

8af88bd6958b80c224e964892b8237720b13ab1ajerenkrantz

50e60f30bdc074fbc887f0b98f4d570457ac97c9brianp if (!strcasecmp(key, "loadfactor")) {

50e60f30bdc074fbc887f0b98f4d570457ac97c9brianp /* Normalized load factor. Used with BalancerMamber,

50e60f30bdc074fbc887f0b98f4d570457ac97c9brianp worker->s->lbfactor = atoi(val);

50e60f30bdc074fbc887f0b98f4d570457ac97c9brianp if (worker->s->lbfactor < 1 || worker->s->lbfactor > 100)

50e60f30bdc074fbc887f0b98f4d570457ac97c9brianp return "LoadFactor must be a number between 1..100";

50e60f30bdc074fbc887f0b98f4d570457ac97c9brianp }

50e60f30bdc074fbc887f0b98f4d570457ac97c9brianp else if (!strcasecmp(key, "retry")) {

50e60f30bdc074fbc887f0b98f4d570457ac97c9brianp /* If set it will give the retry timeout for the worker

61fd0cab072a05b855cbef9c585702401ac5ae29rbb ival = atoi(val);

61fd0cab072a05b855cbef9c585702401ac5ae29rbb if (ival < 0)

61fd0cab072a05b855cbef9c585702401ac5ae29rbb return "Retry must be a positive value";

61fd0cab072a05b855cbef9c585702401ac5ae29rbb worker->s->retry = apr_time_from_sec(ival);

61fd0cab072a05b855cbef9c585702401ac5ae29rbb worker->s->retry_set = 1;

3d96ee83babeec32482c9082c9426340cee8c44dwrowe }

2d2eda71267231c2526be701fe655db125852c1ffielding else if (!strcasecmp(key, "ttl")) {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb /* Time in seconds that will destroy all the connections

61fd0cab072a05b855cbef9c585702401ac5ae29rbb ival = atoi(val);

61fd0cab072a05b855cbef9c585702401ac5ae29rbb if (ival < 1)

61fd0cab072a05b855cbef9c585702401ac5ae29rbb return "TTL must be at least one second";

61fd0cab072a05b855cbef9c585702401ac5ae29rbb worker->s->ttl = apr_time_from_sec(ival);

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

2d2eda71267231c2526be701fe655db125852c1ffielding else if (!strcasecmp(key, "min")) {

3d96ee83babeec32482c9082c9426340cee8c44dwrowe /* Initial number of connections to remote

2d2eda71267231c2526be701fe655db125852c1ffielding ival = atoi(val);

2d2eda71267231c2526be701fe655db125852c1ffielding if (ival < 0)

2d2eda71267231c2526be701fe655db125852c1ffielding return "Min must be a positive number";

000b67449410515eac43e76ef6667915bfd4d2abgstein worker->s->min = ival;

2d2eda71267231c2526be701fe655db125852c1ffielding }

2d2eda71267231c2526be701fe655db125852c1ffielding else if (!strcasecmp(key, "max")) {

2d2eda71267231c2526be701fe655db125852c1ffielding /* Maximum number of connections to remote

61fd0cab072a05b855cbef9c585702401ac5ae29rbb ival = atoi(val);

61fd0cab072a05b855cbef9c585702401ac5ae29rbb if (ival < 0)

61fd0cab072a05b855cbef9c585702401ac5ae29rbb return "Max must be a positive number";

61fd0cab072a05b855cbef9c585702401ac5ae29rbb worker->s->hmax = ival;

7bdef86e15d47d16dcbe7a5611683191774bd5fbgstein }

7bdef86e15d47d16dcbe7a5611683191774bd5fbgstein /* XXX: More inteligent naming needed */

61fd0cab072a05b855cbef9c585702401ac5ae29rbb else if (!strcasecmp(key, "smax")) {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb /* Maximum number of connections to remote that

61fd0cab072a05b855cbef9c585702401ac5ae29rbb ival = atoi(val);

3d96ee83babeec32482c9082c9426340cee8c44dwrowe if (ival < 0)

7bdef86e15d47d16dcbe7a5611683191774bd5fbgstein return "Smax must be a positive number";

61fd0cab072a05b855cbef9c585702401ac5ae29rbb worker->s->smax = ival;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb else if (!strcasecmp(key, "acquire")) {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb /* Acquire timeout in given unit (default is milliseconds).

3d96ee83babeec32482c9082c9426340cee8c44dwrowe if (ap_timeout_parameter_parse(val, &timeout, "ms") != APR_SUCCESS)

7bdef86e15d47d16dcbe7a5611683191774bd5fbgstein return "Acquire timeout has wrong format";

c9a95767fbf0f5fb0976a06b97a256033925e433rbb if (timeout < 1000)

c9a95767fbf0f5fb0976a06b97a256033925e433rbb return "Acquire must be at least one millisecond";

c9a95767fbf0f5fb0976a06b97a256033925e433rbb worker->s->acquire = timeout;

cf8d02ea0c91653917b044529f3133c5a1bb9200fielding worker->s->acquire_set = 1;

c9a95767fbf0f5fb0976a06b97a256033925e433rbb }

c9a95767fbf0f5fb0976a06b97a256033925e433rbb else if (!strcasecmp(key, "timeout")) {

c9a95767fbf0f5fb0976a06b97a256033925e433rbb /* Connection timeout in seconds.

c9a95767fbf0f5fb0976a06b97a256033925e433rbb ival = atoi(val);

c9a95767fbf0f5fb0976a06b97a256033925e433rbb if (ival < 1)

d82d78a97558238d16c52ec5278fe921bb7d7ec3brianp return "Timeout must be at least one second";

d82d78a97558238d16c52ec5278fe921bb7d7ec3brianp worker->s->timeout = apr_time_from_sec(ival);

d82d78a97558238d16c52ec5278fe921bb7d7ec3brianp worker->s->timeout_set = 1;

d82d78a97558238d16c52ec5278fe921bb7d7ec3brianp }

d82d78a97558238d16c52ec5278fe921bb7d7ec3brianp else if (!strcasecmp(key, "iobuffersize")) {

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh long s = atol(val);

d82d78a97558238d16c52ec5278fe921bb7d7ec3brianp if (s < 512 && s) {

d82d78a97558238d16c52ec5278fe921bb7d7ec3brianp return "IOBufferSize must be >= 512 bytes, or 0 for system default.";

c9a95767fbf0f5fb0976a06b97a256033925e433rbb }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb worker->s->io_buffer_size = (s ? s : AP_IOBUFSIZE);

61fd0cab072a05b855cbef9c585702401ac5ae29rbb worker->s->io_buffer_size_set = 1;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb else if (!strcasecmp(key, "receivebuffersize")) {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb ival = atoi(val);

61fd0cab072a05b855cbef9c585702401ac5ae29rbb if (ival < 512 && ival != 0) {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb return "ReceiveBufferSize must be >= 512 bytes, or 0 for system default.";

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

3d96ee83babeec32482c9082c9426340cee8c44dwrowe worker->s->recv_buffer_size = ival;

7bdef86e15d47d16dcbe7a5611683191774bd5fbgstein worker->s->recv_buffer_size_set = 1;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb else if (!strcasecmp(key, "keepalive")) {

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh if (!strcasecmp(val, "on"))

61fd0cab072a05b855cbef9c585702401ac5ae29rbb worker->s->keepalive = 1;

3d96ee83babeec32482c9082c9426340cee8c44dwrowe else if (!strcasecmp(val, "off"))

7bdef86e15d47d16dcbe7a5611683191774bd5fbgstein worker->s->keepalive = 0;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb else

61fd0cab072a05b855cbef9c585702401ac5ae29rbb return "KeepAlive must be On|Off";

61fd0cab072a05b855cbef9c585702401ac5ae29rbb worker->s->keepalive_set = 1;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

3d96ee83babeec32482c9082c9426340cee8c44dwrowe else if (!strcasecmp(key, "disablereuse")) {

7bdef86e15d47d16dcbe7a5611683191774bd5fbgstein if (!strcasecmp(val, "on"))

61fd0cab072a05b855cbef9c585702401ac5ae29rbb worker->s->disablereuse = 1;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb else if (!strcasecmp(val, "off"))

61fd0cab072a05b855cbef9c585702401ac5ae29rbb worker->s->disablereuse = 0;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb else

61fd0cab072a05b855cbef9c585702401ac5ae29rbb return "DisableReuse must be On|Off";

78ae1cbba5a848a24ca551629bbf0a90d2b931f0stas worker->s->disablereuse_set = 1;

78ae1cbba5a848a24ca551629bbf0a90d2b931f0stas }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb else if (!strcasecmp(key, "route")) {

3d96ee83babeec32482c9082c9426340cee8c44dwrowe /* Worker route.

2d2eda71267231c2526be701fe655db125852c1ffielding if (strlen(val) >= PROXY_WORKER_MAX_ROUTE_SIZE)

2d2eda71267231c2526be701fe655db125852c1ffielding return "Route length must be < 64 characters";

2d2eda71267231c2526be701fe655db125852c1ffielding PROXY_STRNCPY(worker->s->route, val);

2d2eda71267231c2526be701fe655db125852c1ffielding }

2d2eda71267231c2526be701fe655db125852c1ffielding else if (!strcasecmp(key, "redirect")) {

2d2eda71267231c2526be701fe655db125852c1ffielding /* Worker redirection route.

2d2eda71267231c2526be701fe655db125852c1ffielding if (strlen(val) >= PROXY_WORKER_MAX_ROUTE_SIZE)

2d2eda71267231c2526be701fe655db125852c1ffielding return "Redirect length must be < 64 characters";

2d2eda71267231c2526be701fe655db125852c1ffielding PROXY_STRNCPY(worker->s->redirect, val);

2d2eda71267231c2526be701fe655db125852c1ffielding }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb else if (!strcasecmp(key, "status")) {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb const char *v;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb int mode = 1;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb apr_status_t rv;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb /* Worker status.

61fd0cab072a05b855cbef9c585702401ac5ae29rbb for (v = val; *v; v++) {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb if (*v == '+') {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb mode = 1;

3d96ee83babeec32482c9082c9426340cee8c44dwrowe v++;

1ccd992d37d62c8cb2056126f2234f64ec189bfddougm }

7bdef86e15d47d16dcbe7a5611683191774bd5fbgstein else if (*v == '-') {

23ff73a56371e21f16744cb94d06399b877829f1rbb mode = 0;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb v++;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb rv = ap_proxy_set_wstatus(*v, mode, worker);

61fd0cab072a05b855cbef9c585702401ac5ae29rbb if (rv != APR_SUCCESS)

61fd0cab072a05b855cbef9c585702401ac5ae29rbb return "Unknown status parameter option";

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb else if (!strcasecmp(key, "flushpackets")) {

3d96ee83babeec32482c9082c9426340cee8c44dwrowe if (!strcasecmp(val, "on"))

2d2eda71267231c2526be701fe655db125852c1ffielding worker->s->flush_packets = flush_on;

23ff73a56371e21f16744cb94d06399b877829f1rbb else if (!strcasecmp(val, "off"))

2d2eda71267231c2526be701fe655db125852c1ffielding worker->s->flush_packets = flush_off;

62db15de4c1f335a64d45821796ae197cff94ef8rbb else if (!strcasecmp(val, "auto"))

62db15de4c1f335a64d45821796ae197cff94ef8rbb worker->s->flush_packets = flush_auto;

62db15de4c1f335a64d45821796ae197cff94ef8rbb else

62db15de4c1f335a64d45821796ae197cff94ef8rbb return "flushpackets must be on|off|auto";

62db15de4c1f335a64d45821796ae197cff94ef8rbb }

62db15de4c1f335a64d45821796ae197cff94ef8rbb else if (!strcasecmp(key, "flushwait")) {

62db15de4c1f335a64d45821796ae197cff94ef8rbb ival = atoi(val);

62db15de4c1f335a64d45821796ae197cff94ef8rbb if (ival > 1000 || ival < 0) {

62db15de4c1f335a64d45821796ae197cff94ef8rbb return "flushwait must be <= 1000, or 0 for system default of 10 millseconds.";

48d2edbfb84e5559b5da0f8d614ccab805cc67a8rbb }

62db15de4c1f335a64d45821796ae197cff94ef8rbb if (ival == 0)

62db15de4c1f335a64d45821796ae197cff94ef8rbb worker->s->flush_wait = PROXY_FLUSH_WAIT;

62db15de4c1f335a64d45821796ae197cff94ef8rbb else

62db15de4c1f335a64d45821796ae197cff94ef8rbb worker->s->flush_wait = ival * 1000; /* change to microseconds */

62db15de4c1f335a64d45821796ae197cff94ef8rbb }

62db15de4c1f335a64d45821796ae197cff94ef8rbb else if (!strcasecmp(key, "ping")) {

62db15de4c1f335a64d45821796ae197cff94ef8rbb /* Ping/Pong timeout in given unit (default is second).

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh if (ap_timeout_parameter_parse(val, &timeout, "s") != APR_SUCCESS)

62db15de4c1f335a64d45821796ae197cff94ef8rbb return "Ping/Pong timeout has wrong format";

62db15de4c1f335a64d45821796ae197cff94ef8rbb if (timeout < 1000 && timeout >= 0)

62db15de4c1f335a64d45821796ae197cff94ef8rbb return "Ping/Pong timeout must be at least one millisecond";

48d2edbfb84e5559b5da0f8d614ccab805cc67a8rbb worker->s->ping_timeout = timeout;

48d2edbfb84e5559b5da0f8d614ccab805cc67a8rbb worker->s->ping_timeout_set = 1;

62db15de4c1f335a64d45821796ae197cff94ef8rbb }

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar else if (!strcasecmp(key, "lbset")) {

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar ival = atoi(val);

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar if (ival < 0 || ival > 99)

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar return "lbset must be between 0 and 99";

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar worker->s->lbset = ival;

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar }

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar else if (!strcasecmp(key, "connectiontimeout")) {

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar /* Request timeout in given unit (default is second).

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh if (ap_timeout_parameter_parse(val, &timeout, "s") != APR_SUCCESS)

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh return "Connectiontimeout has wrong format";

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh if (timeout < 1000)

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh return "Connectiontimeout must be at least one millisecond.";

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh worker->s->conn_timeout = timeout;

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh worker->s->conn_timeout_set = 1;

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh }

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh else if (!strcasecmp(key, "flusher")) {

3d96ee83babeec32482c9082c9426340cee8c44dwrowe if (strlen(val) >= PROXY_WORKER_MAX_SCHEME_SIZE)

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar return "flusher name length must be < 16 characters";

599c5abcc7fec60611956f56b732eca033c287d2pquerna PROXY_STRNCPY(worker->s->flusher, val);

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar }

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar else {

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar return "unknown Worker parameter";

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar }

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar return NULL;

41287245b1632a4722b55f6dfe5fcf81f361f043wrowe}

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coarstatic const char *set_balancer_param(proxy_server_conf *conf,

3d96ee83babeec32482c9082c9426340cee8c44dwrowe apr_pool_t *p,

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar proxy_balancer *balancer,

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar const char *key,

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar const char *val)

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar{

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar int ival;

41287245b1632a4722b55f6dfe5fcf81f361f043wrowe if (!strcasecmp(key, "stickysession")) {

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar char *path;

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar /* Balancer sticky session name.

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar if (strlen(val) > (PROXY_BALANCER_MAX_STICKY_SIZE-1))

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar return "stickysession length must be < 64 characters";

41287245b1632a4722b55f6dfe5fcf81f361f043wrowe PROXY_STRNCPY(balancer->s->sticky_path, val);

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar PROXY_STRNCPY(balancer->s->sticky, val);

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar if ((path = strchr((char *)balancer->s->sticky, '|'))) {

3d96ee83babeec32482c9082c9426340cee8c44dwrowe *path++ = '\0';

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar PROXY_STRNCPY(balancer->s->sticky_path, path);

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar }

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar }

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar else if (!strcasecmp(key, "stickysessionsep")) {

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar /* separator/delimiter for sessionid and route,

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar if (strlen(val) != 1) {

3d96ee83babeec32482c9082c9426340cee8c44dwrowe if (!strcasecmp(val, "off"))

91f0d8da77152d24e4bbb31ce199282b3fd6e3b2coar balancer->s->sticky_separator = 0;

2864362ca8266097928e84f101010bdf814ffa08stoddard else

db08da9ddcd65c31f9ea44b823898b72a1b24fbestoddard return "stickysessionsep must be a single character or Off";

db08da9ddcd65c31f9ea44b823898b72a1b24fbestoddard }

bf648cbfa4a723c9c02fe8444103cd41ed8642d0wrowe else

bf648cbfa4a723c9c02fe8444103cd41ed8642d0wrowe balancer->s->sticky_separator = *val;

bf648cbfa4a723c9c02fe8444103cd41ed8642d0wrowe }

2864362ca8266097928e84f101010bdf814ffa08stoddard else if (!strcasecmp(key, "nofailover")) {

db08da9ddcd65c31f9ea44b823898b72a1b24fbestoddard /* If set to 'on' the session will break

af7cd2711a9737c0a2aa1b8475455a7dd8ce6113covener if (!strcasecmp(val, "on"))

af7cd2711a9737c0a2aa1b8475455a7dd8ce6113covener balancer->s->sticky_force = 1;

af7cd2711a9737c0a2aa1b8475455a7dd8ce6113covener else if (!strcasecmp(val, "off"))

af7cd2711a9737c0a2aa1b8475455a7dd8ce6113covener balancer->s->sticky_force = 0;

af7cd2711a9737c0a2aa1b8475455a7dd8ce6113covener else

2d2eda71267231c2526be701fe655db125852c1ffielding return "failover must be On|Off";

2d2eda71267231c2526be701fe655db125852c1ffielding }

2d2eda71267231c2526be701fe655db125852c1ffielding else if (!strcasecmp(key, "timeout")) {

2d2eda71267231c2526be701fe655db125852c1ffielding /* Balancer timeout in seconds.

61fd0cab072a05b855cbef9c585702401ac5ae29rbb ival = atoi(val);

61fd0cab072a05b855cbef9c585702401ac5ae29rbb if (ival < 1)

3d96ee83babeec32482c9082c9426340cee8c44dwrowe return "timeout must be at least one second";

a6b9ed64fdf548c61de9714e2cfb999ec59d149cgstein balancer->s->timeout = apr_time_from_sec(ival);

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

b5c963a560a55d08763229330dc661b16b726da0sf else if (!strcasecmp(key, "maxattempts")) {

b5c963a560a55d08763229330dc661b16b726da0sf /* Maximum number of failover attempts before

61fd0cab072a05b855cbef9c585702401ac5ae29rbb ival = atoi(val);

61fd0cab072a05b855cbef9c585702401ac5ae29rbb if (ival < 0)

b5c963a560a55d08763229330dc661b16b726da0sf return "maximum number of attempts must be a positive number";

a6b9ed64fdf548c61de9714e2cfb999ec59d149cgstein balancer->s->max_attempts = ival;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb balancer->s->max_attempts_set = 1;

b5c963a560a55d08763229330dc661b16b726da0sf }

b5c963a560a55d08763229330dc661b16b726da0sf else if (!strcasecmp(key, "lbmethod")) {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb proxy_balancer_method *provider;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb if (strlen(val) > (sizeof(balancer->s->lbpname)-1))

b5c963a560a55d08763229330dc661b16b726da0sf return "unknown lbmethod";

61fd0cab072a05b855cbef9c585702401ac5ae29rbb provider = ap_lookup_provider(PROXY_LBMETHOD, val, "0");

2968569cc3b1440bdb874d2d597ea4a49f0c0acfsf if (provider) {

b5c963a560a55d08763229330dc661b16b726da0sf balancer->lbmethod = provider;

b5c963a560a55d08763229330dc661b16b726da0sf if (PROXY_STRNCPY(balancer->s->lbpname, val) == APR_SUCCESS) {

b5c963a560a55d08763229330dc661b16b726da0sf return NULL;

a6b9ed64fdf548c61de9714e2cfb999ec59d149cgstein }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb else {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb return "lbmethod name too large";

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb return "unknown lbmethod";

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

64945a581b504264270920efbad4f6af0d5a1978sf else if (!strcasecmp(key, "scolonpathdelim")) {

5043abfdca708cb5acb2e43ec4d63b0a68e2012asf /* If set to 'on' then ';' will also be

61fd0cab072a05b855cbef9c585702401ac5ae29rbb if (!strcasecmp(val, "on"))

61fd0cab072a05b855cbef9c585702401ac5ae29rbb balancer->s->scolonsep = 1;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb else if (!strcasecmp(val, "off"))

61fd0cab072a05b855cbef9c585702401ac5ae29rbb balancer->s->scolonsep = 0;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb else

aecb17a45c6d3ee4729ed5f68dc4270f211ee7a8fielding return "scolonpathdelim must be On|Off";

a6b9ed64fdf548c61de9714e2cfb999ec59d149cgstein }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb else if (!strcasecmp(key, "failonstatus")) {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb char *val_split;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb char *status;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb char *tok_state;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb

61fd0cab072a05b855cbef9c585702401ac5ae29rbb val_split = apr_pstrdup(p, val);

61fd0cab072a05b855cbef9c585702401ac5ae29rbb

aecb17a45c6d3ee4729ed5f68dc4270f211ee7a8fielding balancer->errstatuses = apr_array_make(p, 1, sizeof(int));

2d2eda71267231c2526be701fe655db125852c1ffielding

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh status = apr_strtok(val_split, ", ", &tok_state);

61fd0cab072a05b855cbef9c585702401ac5ae29rbb while (status != NULL) {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb ival = atoi(status);

61fd0cab072a05b855cbef9c585702401ac5ae29rbb if (ap_is_HTTP_VALID_RESPONSE(ival)) {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb *(int *)apr_array_push(balancer->errstatuses) = ival;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

3d96ee83babeec32482c9082c9426340cee8c44dwrowe else {

2d2eda71267231c2526be701fe655db125852c1ffielding return "failonstatus must be one or more HTTP response codes";

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

2d2eda71267231c2526be701fe655db125852c1ffielding status = apr_strtok(NULL, ", ", &tok_state);

2d2eda71267231c2526be701fe655db125852c1ffielding }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

2d2eda71267231c2526be701fe655db125852c1ffielding else if (!strcasecmp(key, "failontimeout")) {

3d96ee83babeec32482c9082c9426340cee8c44dwrowe if (!strcasecmp(val, "on"))

2d2eda71267231c2526be701fe655db125852c1ffielding balancer->failontimeout = 1;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb else if (!strcasecmp(val, "off"))

d839a9822ee53ce00da24c15f2d9fe054233d342gstein balancer->failontimeout = 0;

d839a9822ee53ce00da24c15f2d9fe054233d342gstein else

d839a9822ee53ce00da24c15f2d9fe054233d342gstein return "failontimeout must be On|Off";

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb else if (!strcasecmp(key, "nonce")) {

d839a9822ee53ce00da24c15f2d9fe054233d342gstein if (!strcasecmp(val, "None")) {

3d96ee83babeec32482c9082c9426340cee8c44dwrowe *balancer->s->nonce = '\0';

d839a9822ee53ce00da24c15f2d9fe054233d342gstein }

2d2eda71267231c2526be701fe655db125852c1ffielding else {

2d2eda71267231c2526be701fe655db125852c1ffielding if (PROXY_STRNCPY(balancer->s->nonce, val) != APR_SUCCESS) {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb return "Provided nonce is too large";

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

346029f34d03eb20d84fc35664426d3874b00f9ewrowe else if (!strcasecmp(key, "growth")) {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb ival = atoi(val);

61fd0cab072a05b855cbef9c585702401ac5ae29rbb if (ival < 1 || ival > 100) /* arbitrary limit here */

61fd0cab072a05b855cbef9c585702401ac5ae29rbb return "growth must be between 1 and 100";

346029f34d03eb20d84fc35664426d3874b00f9ewrowe balancer->growth = ival;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb else if (!strcasecmp(key, "forcerecovery")) {

3d96ee83babeec32482c9082c9426340cee8c44dwrowe if (!strcasecmp(val, "on"))

a6b9ed64fdf548c61de9714e2cfb999ec59d149cgstein balancer->s->forcerecovery = 1;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb else if (!strcasecmp(val, "off"))

61fd0cab072a05b855cbef9c585702401ac5ae29rbb balancer->s->forcerecovery = 0;

face099b681c052cb1f52176a5499661c44b2982trawick else

61fd0cab072a05b855cbef9c585702401ac5ae29rbb return "forcerecovery must be On|Off";

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb else {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb return "unknown Balancer parameter";

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

3d96ee83babeec32482c9082c9426340cee8c44dwrowe return NULL;

a6b9ed64fdf548c61de9714e2cfb999ec59d149cgstein}

61fd0cab072a05b855cbef9c585702401ac5ae29rbb

61fd0cab072a05b855cbef9c585702401ac5ae29rbbstatic int alias_match(const char *uri, const char *alias_fakename)

61fd0cab072a05b855cbef9c585702401ac5ae29rbb{

61fd0cab072a05b855cbef9c585702401ac5ae29rbb const char *end_fakename = alias_fakename + strlen(alias_fakename);

61fd0cab072a05b855cbef9c585702401ac5ae29rbb const char *aliasp = alias_fakename, *urip = uri;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb const char *end_uri = uri + strlen(uri);

61fd0cab072a05b855cbef9c585702401ac5ae29rbb

61fd0cab072a05b855cbef9c585702401ac5ae29rbb while (aliasp < end_fakename && urip < end_uri) {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb if (*aliasp == '/') {

aecb17a45c6d3ee4729ed5f68dc4270f211ee7a8fielding /* any number of '/' in the alias matches any number in

61fd0cab072a05b855cbef9c585702401ac5ae29rbb if (*urip != '/')

61fd0cab072a05b855cbef9c585702401ac5ae29rbb return 0;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb

61fd0cab072a05b855cbef9c585702401ac5ae29rbb while (*aliasp == '/')

61fd0cab072a05b855cbef9c585702401ac5ae29rbb ++aliasp;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb while (*urip == '/')

61fd0cab072a05b855cbef9c585702401ac5ae29rbb ++urip;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb else {

3d96ee83babeec32482c9082c9426340cee8c44dwrowe /* Other characters are compared literally */

2d2eda71267231c2526be701fe655db125852c1ffielding if (*urip++ != *aliasp++)

61fd0cab072a05b855cbef9c585702401ac5ae29rbb return 0;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

a44d29a3794110c558c940bd903a1930d717a7d7sf }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb

61fd0cab072a05b855cbef9c585702401ac5ae29rbb /* fixup badly encoded stuff (e.g. % as last character) */

3d96ee83babeec32482c9082c9426340cee8c44dwrowe if (aliasp > end_fakename) {

a6b9ed64fdf548c61de9714e2cfb999ec59d149cgstein aliasp = end_fakename;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

a44d29a3794110c558c940bd903a1930d717a7d7sf if (urip > end_uri) {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb urip = end_uri;

3d96ee83babeec32482c9082c9426340cee8c44dwrowe }

a6b9ed64fdf548c61de9714e2cfb999ec59d149cgstein

61fd0cab072a05b855cbef9c585702401ac5ae29rbb /* We reach the end of the uri before the end of "alias_fakename"

3d96ee83babeec32482c9082c9426340cee8c44dwrowe if (urip == end_uri && aliasp != end_fakename) {

a6b9ed64fdf548c61de9714e2cfb999ec59d149cgstein return 0;

a44d29a3794110c558c940bd903a1930d717a7d7sf }

a44d29a3794110c558c940bd903a1930d717a7d7sf

a44d29a3794110c558c940bd903a1930d717a7d7sf /* Check last alias path component matched all the way */

a44d29a3794110c558c940bd903a1930d717a7d7sf if (aliasp[-1] != '/' && *urip != '\0' && *urip != '/')

a44d29a3794110c558c940bd903a1930d717a7d7sf return 0;

a44d29a3794110c558c940bd903a1930d717a7d7sf

a44d29a3794110c558c940bd903a1930d717a7d7sf /* Return number of characters from URI which matched (may be

61fd0cab072a05b855cbef9c585702401ac5ae29rbb

61fd0cab072a05b855cbef9c585702401ac5ae29rbb return urip - uri;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb}

61fd0cab072a05b855cbef9c585702401ac5ae29rbb

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianhstatic int proxy_detect(request_rec *r)

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh{

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh void *sconf = r->server->module_config;

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh proxy_server_conf *conf =

61fd0cab072a05b855cbef9c585702401ac5ae29rbb (proxy_server_conf *) ap_get_module_config(sconf, &proxy_module);

61fd0cab072a05b855cbef9c585702401ac5ae29rbb

61fd0cab072a05b855cbef9c585702401ac5ae29rbb /* Ick... msvc (perhaps others) promotes ternary short results to int */

3d96ee83babeec32482c9082c9426340cee8c44dwrowe

2d2eda71267231c2526be701fe655db125852c1ffielding if (conf->req && r->parsed_uri.scheme) {

fd8b91502bc200ed4cca3810560a2a570522b3debrianp /* but it might be something vhosted */

fd8b91502bc200ed4cca3810560a2a570522b3debrianp if (!(r->parsed_uri.hostname

fd8b91502bc200ed4cca3810560a2a570522b3debrianp && !strcasecmp(r->parsed_uri.scheme, ap_http_scheme(r))

fd8b91502bc200ed4cca3810560a2a570522b3debrianp && ap_matches_request_vhost(r, r->parsed_uri.hostname,

fd8b91502bc200ed4cca3810560a2a570522b3debrianp (apr_port_t)(r->parsed_uri.port_str ? r->parsed_uri.port

fd8b91502bc200ed4cca3810560a2a570522b3debrianp : ap_default_port(r))))) {

fd8b91502bc200ed4cca3810560a2a570522b3debrianp r->proxyreq = PROXYREQ_PROXY;

fd8b91502bc200ed4cca3810560a2a570522b3debrianp r->uri = r->unparsed_uri;

fd8b91502bc200ed4cca3810560a2a570522b3debrianp r->filename = apr_pstrcat(r->pool, "proxy:", r->uri, NULL);

fd8b91502bc200ed4cca3810560a2a570522b3debrianp r->handler = "proxy-server";

aa4af3da5c68fe5dbd9d2c3fd7b2fe7103daa2b7dougm }

e351a4349a3dcc2e8d9c27bcdf72414bdde0942frbb }

fd8b91502bc200ed4cca3810560a2a570522b3debrianp /* We need special treatment for CONNECT proxying: it has no scheme part */

fd8b91502bc200ed4cca3810560a2a570522b3debrianp else if (conf->req && r->method_number == M_CONNECT

4111de96e9f75c58e77c2bdda23be83b8ebf81ccgregames && r->parsed_uri.hostname

4111de96e9f75c58e77c2bdda23be83b8ebf81ccgregames && r->parsed_uri.port_str) {

4111de96e9f75c58e77c2bdda23be83b8ebf81ccgregames r->proxyreq = PROXYREQ_PROXY;

4111de96e9f75c58e77c2bdda23be83b8ebf81ccgregames r->uri = r->unparsed_uri;

4111de96e9f75c58e77c2bdda23be83b8ebf81ccgregames r->filename = apr_pstrcat(r->pool, "proxy:", r->uri, NULL);

4111de96e9f75c58e77c2bdda23be83b8ebf81ccgregames r->handler = "proxy-server";

4111de96e9f75c58e77c2bdda23be83b8ebf81ccgregames }

4111de96e9f75c58e77c2bdda23be83b8ebf81ccgregames return DECLINED;

fd8b91502bc200ed4cca3810560a2a570522b3debrianp}

fd8b91502bc200ed4cca3810560a2a570522b3debrianp

fd8b91502bc200ed4cca3810560a2a570522b3debrianpstatic const char *proxy_interpolate(request_rec *r, const char *str)

fd8b91502bc200ed4cca3810560a2a570522b3debrianp{

45613d36b9466a48def0498cffa07f48980720f8jerenkrantz /* Interpolate an env str in a configuration string

45613d36b9466a48def0498cffa07f48980720f8jerenkrantz const char *start;

fd8b91502bc200ed4cca3810560a2a570522b3debrianp const char *end;

4111de96e9f75c58e77c2bdda23be83b8ebf81ccgregames const char *var;

4111de96e9f75c58e77c2bdda23be83b8ebf81ccgregames const char *val;

4111de96e9f75c58e77c2bdda23be83b8ebf81ccgregames const char *firstpart;

50e60f30bdc074fbc887f0b98f4d570457ac97c9brianp

50e60f30bdc074fbc887f0b98f4d570457ac97c9brianp start = ap_strstr_c(str, "${");

4111de96e9f75c58e77c2bdda23be83b8ebf81ccgregames if (start == NULL) {

50e60f30bdc074fbc887f0b98f4d570457ac97c9brianp return str;

50e60f30bdc074fbc887f0b98f4d570457ac97c9brianp }

4111de96e9f75c58e77c2bdda23be83b8ebf81ccgregames end = ap_strchr_c(start+2, '}');

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh if (end == NULL) {

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh return str;

4111de96e9f75c58e77c2bdda23be83b8ebf81ccgregames }

4111de96e9f75c58e77c2bdda23be83b8ebf81ccgregames /* OK, this is syntax we want to interpolate. Is there such a var ? */

50e60f30bdc074fbc887f0b98f4d570457ac97c9brianp var = apr_pstrndup(r->pool, start+2, end-(start+2));

50e60f30bdc074fbc887f0b98f4d570457ac97c9brianp val = apr_table_get(r->subprocess_env, var);

5a9667916c79d8c699b069068e5570aa1c331c80gstein firstpart = apr_pstrndup(r->pool, str, (start-str));

61fd0cab072a05b855cbef9c585702401ac5ae29rbb

61fd0cab072a05b855cbef9c585702401ac5ae29rbb if (val == NULL) {

2d2eda71267231c2526be701fe655db125852c1ffielding return apr_pstrcat(r->pool, firstpart,

61fd0cab072a05b855cbef9c585702401ac5ae29rbb proxy_interpolate(r, end+1), NULL);

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

2d2eda71267231c2526be701fe655db125852c1ffielding else {

3d96ee83babeec32482c9082c9426340cee8c44dwrowe return apr_pstrcat(r->pool, firstpart, val,

2d2eda71267231c2526be701fe655db125852c1ffielding proxy_interpolate(r, end+1), NULL);

344f3bc38dfccf6261d5bb8d689794cde113b3d6coar }

344f3bc38dfccf6261d5bb8d689794cde113b3d6coar}

344f3bc38dfccf6261d5bb8d689794cde113b3d6coarstatic apr_array_header_t *proxy_vars(request_rec *r,

5a9667916c79d8c699b069068e5570aa1c331c80gstein apr_array_header_t *hdr)

344f3bc38dfccf6261d5bb8d689794cde113b3d6coar{

344f3bc38dfccf6261d5bb8d689794cde113b3d6coar int i;

344f3bc38dfccf6261d5bb8d689794cde113b3d6coar apr_array_header_t *ret = apr_array_make(r->pool, hdr->nelts,

5a9667916c79d8c699b069068e5570aa1c331c80gstein sizeof (struct proxy_alias));

344f3bc38dfccf6261d5bb8d689794cde113b3d6coar struct proxy_alias *old = (struct proxy_alias *) hdr->elts;

d5df46b7972c0c4a5ca0ba5068e238f6053c2e6ftrawick

a2930b0b01bfdbaa9e5c3324266bce9ef74158c2jim for (i = 0; i < hdr->nelts; ++i) {

a2930b0b01bfdbaa9e5c3324266bce9ef74158c2jim struct proxy_alias *newcopy = apr_array_push(ret);

a2930b0b01bfdbaa9e5c3324266bce9ef74158c2jim newcopy->fake = (old[i].flags & PROXYPASS_INTERPOLATE)

a2930b0b01bfdbaa9e5c3324266bce9ef74158c2jim ? proxy_interpolate(r, old[i].fake) : old[i].fake;

a2930b0b01bfdbaa9e5c3324266bce9ef74158c2jim newcopy->real = (old[i].flags & PROXYPASS_INTERPOLATE)

a2930b0b01bfdbaa9e5c3324266bce9ef74158c2jim ? proxy_interpolate(r, old[i].real) : old[i].real;

a2930b0b01bfdbaa9e5c3324266bce9ef74158c2jim }

a2930b0b01bfdbaa9e5c3324266bce9ef74158c2jim return ret;

a2930b0b01bfdbaa9e5c3324266bce9ef74158c2jim}

a2930b0b01bfdbaa9e5c3324266bce9ef74158c2jim

a2930b0b01bfdbaa9e5c3324266bce9ef74158c2jimPROXY_DECLARE(int) ap_proxy_trans_match(request_rec *r, struct proxy_alias *ent,

a2930b0b01bfdbaa9e5c3324266bce9ef74158c2jim proxy_dir_conf *dconf)

a2930b0b01bfdbaa9e5c3324266bce9ef74158c2jim{

a2930b0b01bfdbaa9e5c3324266bce9ef74158c2jim int len;

a2930b0b01bfdbaa9e5c3324266bce9ef74158c2jim const char *fake;

a2930b0b01bfdbaa9e5c3324266bce9ef74158c2jim const char *real;

a2930b0b01bfdbaa9e5c3324266bce9ef74158c2jim ap_regmatch_t regm[AP_MAX_REG_MATCH];

a2930b0b01bfdbaa9e5c3324266bce9ef74158c2jim ap_regmatch_t reg1[AP_MAX_REG_MATCH];

61fd0cab072a05b855cbef9c585702401ac5ae29rbb char *found = NULL;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb int mismatch = 0;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb unsigned int nocanon = ent->flags & PROXYPASS_NOCANON;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb const char *use_uri = nocanon ? r->unparsed_uri : r->uri;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb

61fd0cab072a05b855cbef9c585702401ac5ae29rbb if (dconf && (dconf->interpolate_env == 1) && (ent->flags & PROXYPASS_INTERPOLATE)) {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb fake = proxy_interpolate(r, ent->fake);

42ce672c516baf6e4eaed18ccc1647de2d456d8edougm real = proxy_interpolate(r, ent->real);

a2930b0b01bfdbaa9e5c3324266bce9ef74158c2jim }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb else {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb fake = ent->fake;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb real = ent->real;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

61fd0cab072a05b855cbef9c585702401ac5ae29rbb if (ent->regex) {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb if (!ap_regexec(ent->regex, r->uri, AP_MAX_REG_MATCH, regm, 0)) {

42ce672c516baf6e4eaed18ccc1647de2d456d8edougm if ((real[0] == '!') && (real[1] == '\0')) {

a6b9ed64fdf548c61de9714e2cfb999ec59d149cgstein return DECLINED;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb }

7b6ba9c468f26bdb3492d5e8cb79628a3b04e8c8wrowe /* test that we haven't reduced the URI */

7b6ba9c468f26bdb3492d5e8cb79628a3b04e8c8wrowe if (nocanon && ap_regexec(ent->regex, r->unparsed_uri,

61fd0cab072a05b855cbef9c585702401ac5ae29rbb AP_MAX_REG_MATCH, reg1, 0)) {

7b6ba9c468f26bdb3492d5e8cb79628a3b04e8c8wrowe mismatch = 1;

61fd0cab072a05b855cbef9c585702401ac5ae29rbb use_uri = r->uri;

7b6ba9c468f26bdb3492d5e8cb79628a3b04e8c8wrowe }

a6b9ed64fdf548c61de9714e2cfb999ec59d149cgstein found = ap_pregsub(r->pool, real, use_uri, AP_MAX_REG_MATCH,

61fd0cab072a05b855cbef9c585702401ac5ae29rbb (use_uri == r->uri) ? regm : reg1);

61fd0cab072a05b855cbef9c585702401ac5ae29rbb if (!found) {

61fd0cab072a05b855cbef9c585702401ac5ae29rbb ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(01135)

61fd0cab072a05b855cbef9c585702401ac5ae29rbb "Substitution in regular expression failed. "

61fd0cab072a05b855cbef9c585702401ac5ae29rbb "Replacement too long?");

42ce672c516baf6e4eaed18ccc1647de2d456d8edougm return HTTP_INTERNAL_SERVER_ERROR;

fd0edaa8e3d4dd67d0604ccef2e96b071db96643fielding }

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb /* Note: The strcmp() below catches cases where there

0de8f88b22d24dd57ed10b96fb594e69b6aa0072jwoolley if (strcmp(found, real) != 0) {

8b7047e519340545e6807c9749576a40a76b6d3frbb found = apr_pstrcat(r->pool, "proxy:", found, NULL);

8b7047e519340545e6807c9749576a40a76b6d3frbb }

8b7047e519340545e6807c9749576a40a76b6d3frbb else {

6d00a43be9ab145c89e8cc22bad59e3aa746f761jwoolley found = apr_pstrcat(r->pool, "proxy:", real, use_uri, NULL);

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb }

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb }

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh }

9484ae61c7cc5fa8d8d9a836efdbdb1e88d3036dwrowe else {

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb len = alias_match(r->uri, fake);

2e75499d05677dd589f7ce6b5139ae15ba049419jerenkrantz

2e75499d05677dd589f7ce6b5139ae15ba049419jerenkrantz if (len != 0) {

2e75499d05677dd589f7ce6b5139ae15ba049419jerenkrantz if ((real[0] == '!') && (real[1] == '\0')) {

2e75499d05677dd589f7ce6b5139ae15ba049419jerenkrantz return DECLINED;

2e75499d05677dd589f7ce6b5139ae15ba049419jerenkrantz }

2e75499d05677dd589f7ce6b5139ae15ba049419jerenkrantz if (nocanon && len != alias_match(r->unparsed_uri, ent->fake)) {

2e75499d05677dd589f7ce6b5139ae15ba049419jerenkrantz mismatch = 1;

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb use_uri = r->uri;

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb }

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb found = apr_pstrcat(r->pool, "proxy:", real, use_uri + len, NULL);

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb }

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb }

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb if (mismatch) {

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb /* We made a reducing transformation, so we can't safely use

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01136)

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb "Unescaped URL path matched ProxyPass; ignoring unsafe nocanon");

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb }

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb if (found) {

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb r->filename = found;

2fc50921b88defeb7127985dfe4b4130175e069ejwoolley r->handler = "proxy-server";

2fc50921b88defeb7127985dfe4b4130175e069ejwoolley r->proxyreq = PROXYREQ_REVERSE;

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb if (nocanon && !mismatch) {

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb /* mod_proxy_http needs to be told. Different module. */

2fc50921b88defeb7127985dfe4b4130175e069ejwoolley apr_table_setn(r->notes, "proxy-nocanon", "1");

2fc50921b88defeb7127985dfe4b4130175e069ejwoolley }

2fc50921b88defeb7127985dfe4b4130175e069ejwoolley if (ent->flags & PROXYPASS_NOQUERY) {

fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb apr_table_setn(r->notes, "proxy-noquery", "1");

c9a95767fbf0f5fb0976a06b97a256033925e433rbb }

c9a95767fbf0f5fb0976a06b97a256033925e433rbb return OK;

c9a95767fbf0f5fb0976a06b97a256033925e433rbb }

c9a95767fbf0f5fb0976a06b97a256033925e433rbb

c9a95767fbf0f5fb0976a06b97a256033925e433rbb return DONE;

c9a95767fbf0f5fb0976a06b97a256033925e433rbb}

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianhstatic int proxy_trans(request_rec *r)

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh{

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh int i;

c9a95767fbf0f5fb0976a06b97a256033925e433rbb struct proxy_alias *ent;

3311183b8638d2ba2ff8496cad5e01c27d329a05nd proxy_dir_conf *dconf;

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh proxy_server_conf *conf;

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh if (r->proxyreq) {

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh /* someone has already set up the proxy, it was possibly ourselves

3311183b8638d2ba2ff8496cad5e01c27d329a05nd return OK;

f5abdb59b6579717b5de18de9de340f4b67d6f26niq }

f5abdb59b6579717b5de18de9de340f4b67d6f26niq

f5abdb59b6579717b5de18de9de340f4b67d6f26niq if ((r->unparsed_uri[0] == '*' && r->unparsed_uri[1] == '\0')

f5abdb59b6579717b5de18de9de340f4b67d6f26niq || !r->uri || r->uri[0] != '/') {

3347ef7496eff25aaca86b2852a14bab667d0e34niq return DECLINED;

f5abdb59b6579717b5de18de9de340f4b67d6f26niq }

3347ef7496eff25aaca86b2852a14bab667d0e34niq

c2213b3a46a2666e2e7606ceec509cc4978f187fminfrin /* XXX: since r->uri has been manipulated already we're not really

2d2eda71267231c2526be701fe655db125852c1ffielding

2d2eda71267231c2526be701fe655db125852c1ffielding dconf = ap_get_module_config(r->per_dir_config, &proxy_module);

9d129b55f5a43abf43865c6b0eb6dd19bc22aba8ianh

/* short way - this location is reverse proxied? */

if (dconf->alias) {

int rv = ap_proxy_trans_match(r, dconf->alias, dconf);

if (DONE != rv) {

return rv;

}

}

conf = (proxy_server_conf *) ap_get_module_config(r->server->module_config,

&proxy_module);

/* long way - walk the list of aliases, find a match */

if (conf->aliases->nelts) {

ent = (struct proxy_alias *) conf->aliases->elts;

for (i = 0; i < conf->aliases->nelts; i++) {

int rv = ap_proxy_trans_match(r, &ent[i], dconf);

if (DONE != rv) {

return rv;

}

}

}

return DECLINED;

}

static int proxy_walk(request_rec *r)

{

proxy_server_conf *sconf = ap_get_module_config(r->server->module_config,

&proxy_module);

ap_conf_vector_t *per_dir_defaults = r->server->lookup_defaults;

ap_conf_vector_t **sec_proxy = (ap_conf_vector_t **) sconf->sec_proxy->elts;

ap_conf_vector_t *entry_config;

proxy_dir_conf *entry_proxy;

int num_sec = sconf->sec_proxy->nelts;

/* XXX: shouldn't we use URI here? Canonicalize it first?

const char *proxyname = r->filename + 6;

int j;

for (j = 0; j < num_sec; ++j)

{

entry_config = sec_proxy[j];

entry_proxy = ap_get_module_config(entry_config, &proxy_module);

/* XXX: What about case insensitive matching ???

if (entry_proxy->r

? ap_regexec(entry_proxy->r, proxyname, 0, NULL, 0)

: (entry_proxy->p_is_fnmatch

? apr_fnmatch(entry_proxy->p, proxyname, 0)

: strncmp(proxyname, entry_proxy->p,

strlen(entry_proxy->p)))) {

continue;

}

per_dir_defaults = ap_merge_per_dir_configs(r->pool, per_dir_defaults,

entry_config);

}

r->per_dir_config = per_dir_defaults;

return OK;

}

static int proxy_map_location(request_rec *r)

{

int access_status;

if (!r->proxyreq || !r->filename || strncmp(r->filename, "proxy:", 6) != 0)

return DECLINED;

/* Don't let the core or mod_http map_to_storage hooks handle this,

if ((access_status = proxy_walk(r))) {

ap_die(access_status, r);

return access_status;

}

return OK;

}

static int proxy_fixup(request_rec *r)

{

char *url, *p;

int access_status;

proxy_dir_conf *dconf = ap_get_module_config(r->per_dir_config,

&proxy_module);

if (!r->proxyreq || !r->filename || strncmp(r->filename, "proxy:", 6) != 0)

return DECLINED;

/* XXX: Shouldn't we try this before we run the proxy_walk? */

url = &r->filename[6];

if ((dconf->interpolate_env == 1) && (r->proxyreq == PROXYREQ_REVERSE)) {

/* create per-request copy of reverse proxy conf,

proxy_req_conf *rconf = apr_palloc(r->pool, sizeof(proxy_req_conf));

ap_set_module_config(r->request_config, &proxy_module, rconf);

rconf->raliases = proxy_vars(r, dconf->raliases);

rconf->cookie_paths = proxy_vars(r, dconf->cookie_paths);

rconf->cookie_domains = proxy_vars(r, dconf->cookie_domains);

}

/* canonicalise each specific scheme */

if ((access_status = proxy_run_canon_handler(r, url))) {

return access_status;

}

p = strchr(url, ':');

if (p == NULL || p == url)

return HTTP_BAD_REQUEST;

return OK; /* otherwise; we've done the best we can */

}

static int proxy_needsdomain(request_rec *r, const char *url, const char *domain)

{

char *nuri;

const char *ref;

/* We only want to worry about GETs */

if (!r->proxyreq || r->method_number != M_GET || !r->parsed_uri.hostname)

return DECLINED;

/* If host does contain a dot already, or it is "localhost", decline */

if (strchr(r->parsed_uri.hostname, '.') != NULL /* has domain, or IPv4 literal */

|| strchr(r->parsed_uri.hostname, ':') != NULL /* IPv6 literal */

|| strcasecmp(r->parsed_uri.hostname, "localhost") == 0)

return DECLINED; /* host name has a dot already */

ref = apr_table_get(r->headers_in, "Referer");

/* Reassemble the request, but insert the domain after the host name */

/* Note that the domain name always starts with a dot */

r->parsed_uri.hostname = apr_pstrcat(r->pool, r->parsed_uri.hostname,

domain, NULL);

nuri = apr_uri_unparse(r->pool,

&r->parsed_uri,

APR_URI_UNP_REVEALPASSWORD);

apr_table_setn(r->headers_out, "Location", nuri);

ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(01138)

"Domain missing: %s sent to %s%s%s", r->uri,

apr_uri_unparse(r->pool, &r->parsed_uri,

APR_URI_UNP_OMITUSERINFO),

ref ? " from " : "", ref ? ref : "");

return HTTP_MOVED_PERMANENTLY;

}

static int proxy_handler(request_rec *r)

{

char *uri, *scheme, *p;

const char *p2;

void *sconf = r->server->module_config;

proxy_server_conf *conf = (proxy_server_conf *)

ap_get_module_config(sconf, &proxy_module);

apr_array_header_t *proxies = conf->proxies;

struct proxy_remote *ents = (struct proxy_remote *) proxies->elts;

int i, rc, access_status;

int direct_connect = 0;

const char *str;

apr_int64_t maxfwd;

proxy_balancer *balancer = NULL;

proxy_worker *worker = NULL;

int attempts = 0, max_attempts = 0;

struct dirconn_entry *list = (struct dirconn_entry *)conf->dirconn->elts;

/* is this for us? */

if (!r->proxyreq || !r->filename || strncmp(r->filename, "proxy:", 6) != 0)

return DECLINED;

/* handle max-forwards / OPTIONS / TRACE */

if ((str = apr_table_get(r->headers_in, "Max-Forwards"))) {

char *end;

maxfwd = apr_strtoi64(str, &end, 10);

if (maxfwd < 0 || maxfwd == APR_INT64_MAX || *end) {

return ap_proxyerror(r, HTTP_BAD_REQUEST,

apr_psprintf(r->pool,

"Max-Forwards value '%s' could not be parsed", str));

}

else if (maxfwd == 0) {

switch (r->method_number) {

case M_TRACE: {

int access_status;

r->proxyreq = PROXYREQ_NONE;

if ((access_status = ap_send_http_trace(r)))

ap_die(access_status, r);

else

ap_finalize_request_protocol(r);

return OK;

}

case M_OPTIONS: {

int access_status;

r->proxyreq = PROXYREQ_NONE;

if ((access_status = ap_send_http_options(r)))

ap_die(access_status, r);

else

ap_finalize_request_protocol(r);

return OK;

}

default: {

return ap_proxyerror(r, HTTP_BAD_REQUEST,

"Max-Forwards has reached zero - proxy loop?");

}

}

}

maxfwd = (maxfwd > 0) ? maxfwd - 1 : 0;

}

else {

/* set configured max-forwards */

maxfwd = conf->maxfwd;

}

if (maxfwd >= 0) {

apr_table_setn(r->headers_in, "Max-Forwards",

apr_psprintf(r->pool, "%" APR_INT64_T_FMT, maxfwd));

}

if (r->method_number == M_TRACE) {

core_server_config *coreconf = (core_server_config *)

ap_get_core_module_config(sconf);

if (coreconf->trace_enable == AP_TRACE_DISABLE)

{

/* Allow "error-notes" string to be printed by ap_send_error_response()

apr_table_setn(r->notes, "error-notes",

"TRACE forbidden by server configuration");

apr_table_setn(r->notes, "verbose-error-to", "*");

ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01139)

"TRACE forbidden by server configuration");

return HTTP_METHOD_NOT_ALLOWED;

}

/* Can't test ap_should_client_block, we aren't ready to send

if (coreconf->trace_enable != AP_TRACE_EXTENDED

&& (r->read_length || r->read_chunked || r->remaining))

{

/* Allow "error-notes" string to be printed by ap_send_error_response()

apr_table_setn(r->notes, "error-notes",

"TRACE with request body is not allowed");

apr_table_setn(r->notes, "verbose-error-to", "*");

ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01140)

"TRACE with request body is not allowed");

return HTTP_REQUEST_ENTITY_TOO_LARGE;

}

}

uri = r->filename + 6;

p = strchr(uri, ':');

if (p == NULL) {

ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01141)

"proxy_handler no URL in %s", r->filename);

return HTTP_BAD_REQUEST;

}

/* If the host doesn't have a domain name, add one and redirect. */

if (conf->domain != NULL) {

rc = proxy_needsdomain(r, uri, conf->domain);

if (ap_is_HTTP_REDIRECT(rc))

return HTTP_MOVED_PERMANENTLY;

}

scheme = apr_pstrndup(r->pool, uri, p - uri);

/* Check URI's destination host against NoProxy hosts */

/* Bypass ProxyRemote server lookup if configured as NoProxy */

for (direct_connect = i = 0; i < conf->dirconn->nelts &&

!direct_connect; i++) {

direct_connect = list[i].matcher(&list[i], r);

}

#if DEBUGGING

ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r,

(direct_connect) ? "NoProxy for %s" : "UseProxy for %s",

r->uri);

#endif

do {

char *url = uri;

/* Try to obtain the most suitable worker */

access_status = ap_proxy_pre_request(&worker, &balancer, r, conf, &url);

if (access_status != OK) {

/*

if (access_status != HTTP_SERVICE_UNAVAILABLE)

return access_status;

/*

if (!worker)

balancer = NULL;

goto cleanup;

}

/* Initialise worker if needed, note the shared area must be initialized by the balancer logic */

if (balancer) {

ap_proxy_initialize_worker(worker, r->server, conf->pool);

}

if (balancer && balancer->s->max_attempts_set && !max_attempts)

max_attempts = balancer->s->max_attempts;

/* firstly, try a proxy, unless a NoProxy directive is active */

if (!direct_connect) {

for (i = 0; i < proxies->nelts; i++) {

p2 = ap_strchr_c(ents[i].scheme, ':'); /* is it a partial URL? */

if (strcmp(ents[i].scheme, "*") == 0 ||

(ents[i].use_regex &&

ap_regexec(ents[i].regexp, url, 0, NULL, 0) == 0) ||

(p2 == NULL && strcasecmp(scheme, ents[i].scheme) == 0) ||

(p2 != NULL &&

strncasecmp(url, ents[i].scheme,

strlen(ents[i].scheme)) == 0)) {

/* handle the scheme */

ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01142)

"Trying to run scheme_handler against proxy");

access_status = proxy_run_scheme_handler(r, worker,

conf, url,

ents[i].hostname,

ents[i].port);

/* Did the scheme handler process the request? */

if (access_status != DECLINED) {

const char *cl_a;

char *end;

apr_off_t cl;

/*

if (access_status != HTTP_BAD_GATEWAY) {

goto cleanup;

}

cl_a = apr_table_get(r->headers_in, "Content-Length");

if (cl_a) {

apr_strtoff(&cl, cl_a, &end, 10);

/*

if (cl > 0) {

goto cleanup;

}

}

/*

if (apr_table_get(r->headers_in, "Transfer-Encoding")) {

goto cleanup;

}

}

}

}

}

/* otherwise, try it direct */

/* N.B. what if we're behind a firewall, where we must use a proxy or

/* handle the scheme */

ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01143)

"Running scheme %s handler (attempt %d)",

scheme, attempts);

AP_PROXY_RUN(r, worker, conf, url, attempts);

access_status = proxy_run_scheme_handler(r, worker, conf,

url, NULL, 0);

if (access_status == OK)

break;

else if (access_status == HTTP_INTERNAL_SERVER_ERROR) {

/* Unrecoverable server error.

if (balancer) {

worker->s->status |= PROXY_WORKER_IN_ERROR;

worker->s->error_time = apr_time_now();

}

break;

}

else if (access_status == HTTP_SERVICE_UNAVAILABLE) {

/* Recoverable server error.

if (balancer) {

worker->s->status |= PROXY_WORKER_IN_ERROR;

worker->s->error_time = apr_time_now();

}

}

else {

/* Unrecoverable error.

break;

}

/* Try again if the worker is unusable and the service is

} while (!PROXY_WORKER_IS_USABLE(worker) &&

max_attempts > attempts++);

if (DECLINED == access_status) {

ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01144)

"No protocol handler was valid for the URL %s. "

"If you are using a DSO version of mod_proxy, make sure "

"the proxy submodules are included in the configuration "

"using LoadModule.", r->uri);

access_status = HTTP_INTERNAL_SERVER_ERROR;

goto cleanup;

}

cleanup:

ap_proxy_post_request(worker, balancer, r, conf);

proxy_run_request_status(&access_status, r);

AP_PROXY_RUN_FINISHED(r, attempts, access_status);

return access_status;

}

static void * create_proxy_config(apr_pool_t *p, server_rec *s)

{

proxy_server_conf *ps = apr_pcalloc(p, sizeof(proxy_server_conf));

ps->sec_proxy = apr_array_make(p, 10, sizeof(ap_conf_vector_t *));

ps->proxies = apr_array_make(p, 10, sizeof(struct proxy_remote));

ps->aliases = apr_array_make(p, 10, sizeof(struct proxy_alias));

ps->noproxies = apr_array_make(p, 10, sizeof(struct noproxy_entry));

ps->dirconn = apr_array_make(p, 10, sizeof(struct dirconn_entry));

ps->workers = apr_array_make(p, 10, sizeof(proxy_worker));

ps->balancers = apr_array_make(p, 10, sizeof(proxy_balancer));

ps->forward = NULL;

ps->reverse = NULL;

ps->domain = NULL;

ps->id = apr_psprintf(p, "p%x", 1); /* simply for storage size */

ps->viaopt = via_off; /* initially backward compatible with 1.3.1 */

ps->viaopt_set = 0; /* 0 means default */

ps->req = 0;

ps->max_balancers = 0;

ps->bal_persist = 0;

ps->inherit = 1;

ps->inherit_set = 0;

ps->ppinherit = 1;

ps->ppinherit_set = 0;

ps->bgrowth = 5;

ps->bgrowth_set = 0;

ps->req_set = 0;

ps->recv_buffer_size = 0; /* this default was left unset for some reason */

ps->recv_buffer_size_set = 0;

ps->io_buffer_size = AP_IOBUFSIZE;

ps->io_buffer_size_set = 0;

ps->maxfwd = DEFAULT_MAX_FORWARDS;

ps->maxfwd_set = 0;

ps->timeout = 0;

ps->timeout_set = 0;

ps->badopt = bad_error;

ps->badopt_set = 0;

ps->source_address = NULL;

ps->source_address_set = 0;

apr_pool_create_ex(&ps->pool, p, NULL, NULL);

return ps;

}

static void * merge_proxy_config(apr_pool_t *p, void *basev, void *overridesv)

{

proxy_server_conf *ps = apr_pcalloc(p, sizeof(proxy_server_conf));

proxy_server_conf *base = (proxy_server_conf *) basev;

proxy_server_conf *overrides = (proxy_server_conf *) overridesv;

ps->inherit = (overrides->inherit_set == 0) ? base->inherit : overrides->inherit;

ps->inherit_set = overrides->inherit_set || base->inherit_set;

ps->ppinherit = (overrides->ppinherit_set == 0) ? base->ppinherit : overrides->ppinherit;

ps->ppinherit_set = overrides->ppinherit_set || base->ppinherit_set;

if (ps->ppinherit) {

ps->proxies = apr_array_append(p, base->proxies, overrides->proxies);

}

else {

ps->proxies = overrides->proxies;

}

ps->sec_proxy = apr_array_append(p, base->sec_proxy, overrides->sec_proxy);

ps->aliases = apr_array_append(p, base->aliases, overrides->aliases);

ps->noproxies = apr_array_append(p, base->noproxies, overrides->noproxies);

ps->dirconn = apr_array_append(p, base->dirconn, overrides->dirconn);

if (ps->inherit || ps->ppinherit) {

ps->workers = apr_array_append(p, base->workers, overrides->workers);

ps->balancers = apr_array_append(p, base->balancers, overrides->balancers);

}

else {

ps->workers = overrides->workers;

ps->balancers = overrides->balancers;

}

ps->forward = overrides->forward ? overrides->forward : base->forward;

ps->reverse = overrides->reverse ? overrides->reverse : base->reverse;

ps->domain = (overrides->domain == NULL) ? base->domain : overrides->domain;

ps->id = (overrides->id == NULL) ? base->id : overrides->id;

ps->viaopt = (overrides->viaopt_set == 0) ? base->viaopt : overrides->viaopt;

ps->viaopt_set = overrides->viaopt_set || base->viaopt_set;

ps->req = (overrides->req_set == 0) ? base->req : overrides->req;

ps->req_set = overrides->req_set || base->req_set;

ps->bgrowth = (overrides->bgrowth_set == 0) ? base->bgrowth : overrides->bgrowth;

ps->bgrowth_set = overrides->bgrowth_set || base->bgrowth_set;

ps->max_balancers = overrides->max_balancers || base->max_balancers;

ps->bal_persist = overrides->bal_persist;

ps->recv_buffer_size = (overrides->recv_buffer_size_set == 0) ? base->recv_buffer_size : overrides->recv_buffer_size;

ps->recv_buffer_size_set = overrides->recv_buffer_size_set || base->recv_buffer_size_set;

ps->io_buffer_size = (overrides->io_buffer_size_set == 0) ? base->io_buffer_size : overrides->io_buffer_size;

ps->io_buffer_size_set = overrides->io_buffer_size_set || base->io_buffer_size_set;

ps->maxfwd = (overrides->maxfwd_set == 0) ? base->maxfwd : overrides->maxfwd;

ps->maxfwd_set = overrides->maxfwd_set || base->maxfwd_set;

ps->timeout = (overrides->timeout_set == 0) ? base->timeout : overrides->timeout;

ps->timeout_set = overrides->timeout_set || base->timeout_set;

ps->badopt = (overrides->badopt_set == 0) ? base->badopt : overrides->badopt;

ps->badopt_set = overrides->badopt_set || base->badopt_set;

ps->proxy_status = (overrides->proxy_status_set == 0) ? base->proxy_status : overrides->proxy_status;

ps->proxy_status_set = overrides->proxy_status_set || base->proxy_status_set;

ps->source_address = (overrides->source_address_set == 0) ? base->source_address : overrides->source_address;

ps->source_address_set = overrides->source_address_set || base->source_address_set;

ps->pool = base->pool;

return ps;

}

static const char *set_source_address(cmd_parms *parms, void *dummy,

const char *arg)

{

proxy_server_conf *psf =

ap_get_module_config(parms->server->module_config, &proxy_module);

struct apr_sockaddr_t *addr;

if (APR_SUCCESS == apr_sockaddr_info_get(&addr, arg, APR_UNSPEC, 0, 0,

psf->pool)) {

psf->source_address = addr;