From: Christopher Faulet Date: Tue, 19 Dec 2023 07:51:26 +0000 (+0100) Subject: DOC: config: Update documentation about local haproxy response X-Git-Tag: v3.0-dev1~84 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=0a203c1d3f359396e66679991f5c84460fae80e2;p=thirdparty%2Fhaproxy.git DOC: config: Update documentation about local haproxy response Documentation about 'L' state in the termination state was outdated. Today, not only the request may be intercepted, but also the response. Documentation about 'L' must be more generic. However, documentation about possible 2-letter termination states was also extended to add 'LC' and 'LH' in the list. And 'LR' was adapted too. This patch should fix the issue #2384. It may be backported to every stable versions. Note that on 2.8 and lowers, we talk about session and not stream. --- diff --git a/doc/configuration.txt b/doc/configuration.txt index 13c21560bc..2d514b7548 100644 --- a/doc/configuration.txt +++ b/doc/configuration.txt @@ -25386,8 +25386,7 @@ each of which has a special meaning : dangerous error in server response which might have caused information leak (e.g. cacheable cookie). - L : the stream was locally processed by HAProxy and was not passed to - a server. This is what happens for stats and redirects. + L : the stream was locally processed by HAProxy. R : a resource on the proxy has been exhausted (memory, sockets, source ports, ...). Usually, this appears during the connection phase, and @@ -25585,8 +25584,18 @@ easier finding and understanding. closer to the average reported "Tw" timer, in order not to consume resources for just a few attackers. - LR The request was intercepted and locally handled by HAProxy. Generally - it means that this was a redirect or a stats request. + LC The request was intercepted and locally handled by HAProxy. The + request was not sent to the server. It only happens with a redirect + because of a "redir" parameter on the server line. + + LR The request was intercepted and locally handled by HAProxy. The + request was not sent to the server. Generally it means a redirect was + returned, an HTTP return statement was processed or the request was + handled by an applet (stats, cache, Prometheus exported, lua applet...). + + LH The response was intercepted and locally handled by HAProxy. Generally + it means a redirect was returned or an HTTP return statement was + processed. SC The server or an equipment between it and HAProxy explicitly refused the TCP connection (the proxy received a TCP RST or an ICMP message