]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MEDIUM: http: emulate "block" rules using "http-request" rules
authorWilly Tarreau <w@1wt.eu>
Mon, 28 Apr 2014 20:06:57 +0000 (22:06 +0200)
committerWilly Tarreau <w@1wt.eu>
Mon, 28 Apr 2014 20:06:57 +0000 (22:06 +0200)
commitb3dc39dfe163ea29819986caa939e4b8c78aae25
tree786c862675ceb28b2a3ab3ded48925f5f7fc2486
parent353bc9f43f428f23cf90230cfcf5d7b08522a973
MEDIUM: http: emulate "block" rules using "http-request" rules

The "block" rules are redundant with http-request rules because they
are performed immediately before and do exactly the same thing as
"http-request deny". Moreover, this duplication has led to a few
minor stats accounting issues fixed lately.

Instead of keeping the two rule sets, we now build a list of "block"
rules that we compile as "http-request block" and that we later insert
at the beginning of the "http-request" rules.

The only user-visible change is that in case of a parsing error, the
config parser will now report "http-request block rule" instead of
"blocking condition".
src/cfgparse.c