]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
BUG/MINOR: config/server: reject QUIC addresses
authorAmaury Denoyelle <adenoyelle@haproxy.com>
Wed, 11 Jun 2025 16:26:10 +0000 (18:26 +0200)
committerAmaury Denoyelle <adenoyelle@haproxy.com>
Wed, 11 Jun 2025 16:37:17 +0000 (18:37 +0200)
QUIC is not implemented on the backend side. To prevent any issue, it is
better to reject any server configured which uses it. This is done via
_srv_parse_init() which is used both for static and dynamic servers.

This should be backported up to all stable versions.

src/server.c

index fc886c917fb9b5c546b3d8214e76a63eecbc724b..1bef0e39f274c35b5075fd552ac6d16fd4069680 100644 (file)
@@ -3596,6 +3596,14 @@ static int _srv_parse_init(struct server **srv, char **args, int *cur_arg,
                        goto out;
                }
 
+#ifdef USE_QUIC
+               if (newsrv->addr_type.proto_type == PROTO_TYPE_DGRAM &&
+                   newsrv->addr_type.xprt_type == PROTO_TYPE_STREAM) {
+                       ha_alert("QUIC protocol is unsupported on the backend side.\n");
+                       goto out;
+               }
+#endif
+
                if (!port1 || !port2) {
                        if (sk->ss_family != AF_CUST_RHTTP_SRV) {
                                /* no port specified, +offset, -offset */