]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MEDIUM: ssl: Add splicing with SSL.
authorOlivier Houchard <ohouchard@haproxy.com>
Wed, 13 Aug 2025 16:52:13 +0000 (16:52 +0000)
committerOlivier Houchard <cognet@ci0.org>
Wed, 20 Aug 2025 16:33:11 +0000 (18:33 +0200)
commita903004a1a3169e96fe415bf6cf8bcac621bc14d
tree4f12d99dcbe568c78333c40d7c79eab75e35af36
parent755436920d78f7a5462aa85a85f9dca661c2afbc
MEDIUM: ssl: Add splicing with SSL.

Implement the splicing methods to the SSL xprt (which will just call the
raw_sock methods if kTLS is enabled on the socket), and properly report
that a connection supports splicing if kTLS is configured on that
connection.
For OpenSSL, if the upper layer indicated that it wanted to start using
splicing by adding the CO_FL_WANT_SPLICING flag, make sure we don't read
any more data from the socket, and just drain what may be in the
internal OpenSSL buffers, before allowing splicing
src/ssl_sock.c