<operator> = [ == | =~ | =* | =^ | =/ | != | !~ | !* | !^ | !/ ]
<pattern> = "<string>"
<action> = [ allow | permit | deny | delete | replace | switch | add | set | redir ]
- <args> = optionnal action args
+ <args> = optional action args
- exemples:
+ examples:
req in URI =^ "/images" switch images
req in h(host) =* ".mydomain.com" switch mydomain
- each http_txn has 1 request message (http_req), and 0 or 1 response message
(http_rtr). Each of them has 1 and only one http_txn. An http_txn holds
- informations such as the HTTP method, the URI, the HTTP version, the
+ information such as the HTTP method, the URI, the HTTP version, the
transfer-encoding, the HTTP status, the authorization, the req and rtr
content-length, the timers, logs, etc... The backend and server which process
the request are also known from the http_txn.
-- both request and response messages hold header and parsing informations, such
+- both request and response messages hold header and parsing information, such
as the parsing state, start of headers, start of message, captures, etc...
tokenized, so comments are stripped and indenting is forced. If a non-zero
key is specified, lines are truncated before sensitive/confidential fields,
and identifiers and addresses are emitted hashed with this key using the
- same algorithmm as the one used by the anonymized mode on the CLI. This
+ same algorithm as the one used by the anonymized mode on the CLI. This
means that the output may safely be shared with a developer who needs it
to figure what's happening in a dump that was anonymized using the same
key. Please also see the CLI's "set anon" command.
add ssl ca-file <cafile> <payload>
Add a new certificate to a ca-file. This command is useful when you reached
- the buffer size limit on the CLI and want to add multiple certicates.
+ the buffer size limit on the CLI and want to add multiple certificates.
Instead of doing a "set" with all the certificates you are able to add each
certificate individually. A "set ssl ca-file" will reset the ca-file.
other: any other DNS errors
invalid: invalid DNS response (from a protocol point of view)
too_big: too big response
- outdated: number of response arrived too late (after an other name server)
+ outdated: number of response arrived too late (after another name server)
show quic [all]
Dump information on all active QUIC frontend connections. This command is