]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MINOR: quic: support ACL for quic-initial rules
authorAmaury Denoyelle <adenoyelle@haproxy.com>
Fri, 19 Jul 2024 14:05:15 +0000 (16:05 +0200)
committerAmaury Denoyelle <adenoyelle@haproxy.com>
Thu, 25 Jul 2024 13:39:39 +0000 (15:39 +0200)
commit1259700763894a73866702913196c25a70f9706b
treeb35b8fedd646b47e84ac40e8d2dd96df4d74e10e
parentcafe5966084099fd87cfcaccd1cd17d0c04e1299
MINOR: quic: support ACL for quic-initial rules

Add ACL condition support for quic-initial rules. This requires the
extension of quic_parse_quic_initial() to parse an extra if/unless
block.

Only layer4 client samples are allowed to be used with quic-initial
rules. However, due to the early execution of quic-initial rules prior
to any connection instantiation, some samples are non supported.

To be able to use the 4 described samples, a dummy session is
instantiated before quic-initial rules execution. Its src and dst fields
are set from the received datagram values.
doc/configuration.txt
include/haproxy/quic_rules.h
src/cfgparse-quic.c
src/quic_rules.c
src/quic_rx.c