From: Amaury Denoyelle <adenoyelle@haproxy.com>
Date: Thu, 30 Oct 2025 10:39:42 +0000 (+0100)
Subject: MINOR: check: use auto SNI for QUIC checks
X-Git-Tag: v3.3-dev13~13
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=ca5a5f37a17ec0d10f79bfc7aa46f56adfe22310;p=thirdparty%2Fhaproxy.git

MINOR: check: use auto SNI for QUIC checks

By default, check SNI is set to the Host header when an HTTPS check is
performed. This patch extends this mode so that it is also active when
QUIC checks are executed.

This patch should improve reuse rate with checks. Indeed, SNI is also
already automatically set for normal traffic. The same value must be
used during check so that a connection hash match can be found.
---

diff --git a/src/tcpcheck.c b/src/tcpcheck.c
index 00825422a..e353ef62d 100644
--- a/src/tcpcheck.c
+++ b/src/tcpcheck.c
@@ -1234,8 +1234,10 @@ static inline int tcpcheck_connect_use_ssl(const struct check *check,
 {
 	if (connect->options & TCPCHK_OPT_SSL)
 		return 1;
-	if (connect->options & TCPCHK_OPT_DEFAULT_CONNECT)
-		return (check->xprt == xprt_get(XPRT_SSL));
+	if (connect->options & TCPCHK_OPT_DEFAULT_CONNECT) {
+		return (check->xprt == xprt_get(XPRT_SSL) ||
+		        check->xprt == xprt_get(XPRT_QUIC));
+	}
 	return 0;
 }