|
2 | 2 | <html lang="en"> |
3 | 3 | <head> |
4 | 4 | <meta charset="utf-8" /> |
5 | | - <title>HAProxy version 3.3-dev8-141 - Configuration Manual</title> |
| 5 | + <title>HAProxy version 3.3-dev8-158 - Configuration Manual</title> |
6 | 6 | <link href="https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css" rel="stylesheet" /> |
7 | 7 | <link href="https://raw.githubusercontent.com/thomaspark/bootswatch/v3.3.7/cerulean/bootstrap.min.css" rel="stylesheet" /> |
8 | 8 | <link href="../css/page.css?0.4.2-15" rel="stylesheet" /> |
|
1599 | 1599 |
|
1600 | 1600 | <a class="list-group-item" href="#capture.res.ver">capture.res.ver</a> |
1601 | 1601 |
|
| 1602 | + <a class="list-group-item" href="#cc (Bind options)">cc (Bind options)</a> |
| 1603 | + |
| 1604 | + <a class="list-group-item" href="#cc (Server and default-server options)">cc (Server and default-server options)</a> |
| 1605 | + |
1602 | 1606 | <a class="list-group-item" href="#challenge">challenge</a> |
1603 | 1607 |
|
1604 | 1608 | <a class="list-group-item" href="#check">check</a> |
|
4617 | 4621 | You can use <strong>left</strong> and <strong>right</strong> arrow keys to navigate between chapters.<br> |
4618 | 4622 | </p> |
4619 | 4623 | <p class="text-right"> |
4620 | | - <small>Converted with <a href="https://github.com/cbonte/haproxy-dconv">haproxy-dconv</a> v<b>0.4.2-15</b> on <b>2025/09/11</b></small> |
| 4624 | + <small>Converted with <a href="https://github.com/cbonte/haproxy-dconv">haproxy-dconv</a> v<b>0.4.2-15</b> on <b>2025/09/17</b></small> |
4621 | 4625 | </p> |
4622 | 4626 | </div> |
4623 | 4627 | <!-- /.sidebar --> |
|
4628 | 4632 | <div class="text-center"> |
4629 | 4633 | <h1><a href="http://www.haproxy.org/" title="HAProxy"><img src="../img/HAProxyCommunityEdition_60px.png?0.4.2-15" /></a></h1> |
4630 | 4634 | <h2>Configuration Manual</h2> |
4631 | | - <p><strong>version 3.3-dev8-141</strong></p> |
| 4635 | + <p><strong>version 3.3-dev8-158</strong></p> |
4632 | 4636 | <p> |
4633 | 4637 | 2025/09/05<br> |
4634 | 4638 |
|
@@ -20818,6 +20822,22 @@ <h2 id="chapter-5.1" data-target="5.1"><small><a class="small" href="#5.1">5.1.< |
20818 | 20822 | included in CA names sent in server hello message. Typically, "<span class="dropdown"><a class="dropdown-toggle" data-toggle="dropdown" href="#">ca-file<span class="caret"></span></a><ul class="dropdown-menu"><li class="dropdown-header">This keyword is available in sections :</li><li><a href="#ca-file%20%28Bind%20options%29">Bind options</a></li><li><a href="#ca-file%20%28Server%20and%20default-server%20options%29">Server and default-server options</a></li></ul></span>" must |
20819 | 20823 | be defined with intermediate certificates, and "<a href="#ca-verify-file">ca-verify-file</a>" with |
20820 | 20824 | certificates to ending the chain, like root CA. |
| 20825 | +</pre><a class="anchor" name="cc"></a><a class="anchor" name="5-cc"></a><a class="anchor" name="5.1-cc"></a><a class="anchor" name="cc (Bind and server options)"></a><a class="anchor" name="cc (Bind options)"></a><div class="keyword"><b><a class="anchor" name="cc"></a><a href="#5.1-cc">cc</a></b> <span style="color: #080"><algo></span></div><pre class="text">This setting is only available on systems which define TCP_CONGESTION, and |
| 20826 | +was validated on Linux and FreeBSD. It takes the name of a TCP congestion |
| 20827 | +control algorithm and configures the listener to use this algorithm on all |
| 20828 | +connections that are accepted from this listener. Typical names include |
| 20829 | +"reno", "cubic" and will depend on the operating system. On some systems, |
| 20830 | +special permissions may be required to configure certain algorithms. On |
| 20831 | +Linux, the list of available algorithms may be found in the sysctl |
| 20832 | +"net.ipv4.tcp_available_congestion_control", and the list of those permitted |
| 20833 | +without privileges is in "net.ipv4.tcp_allowed_congestion_control". In order |
| 20834 | +to access algorithms requiring extra permissions, the "cap_net_admin" |
| 20835 | +capability might be required (see "<a href="#setcap">setcap</a>" in the global section). In case of |
| 20836 | +failure to configure a specific congestion control algorithm, the default one |
| 20837 | +will remain unchanged and a warning will be emitted to report the problem. |
| 20838 | +</pre><div class="page-header"><b>See also:</b> the "<span class="dropdown"><a class="dropdown-toggle" data-toggle="dropdown" href="#">cc<span class="caret"></span></a><ul class="dropdown-menu"><li class="dropdown-header">This keyword is available in sections :</li><li><a href="#cc%20%28Bind%20options%29">Bind options</a></li><li><a href="#cc%20%28Server%20and%20default-server%20options%29">Server and default-server options</a></li></ul></span>" server keyword (<a href="#5.2">section 5.2</a>). Example:</div> |
| 20839 | +<pre class="text">frontend public |
| 20840 | + bind :443 cc bbr # use the BBR algorithm for high bandwidths |
20821 | 20841 | </pre><a class="anchor" name="ciphers"></a><a class="anchor" name="5-ciphers"></a><a class="anchor" name="5.1-ciphers"></a><a class="anchor" name="ciphers (Bind and server options)"></a><a class="anchor" name="ciphers (Bind options)"></a><div class="keyword"><b><a class="anchor" name="ciphers"></a><a href="#5.1-ciphers">ciphers</a></b> <span style="color: #080"><ciphers></span></div><pre class="text">This setting is only available when support for OpenSSL was built in. It sets |
20822 | 20842 | the string describing the list of cipher algorithms ("cipher suite") that are |
20823 | 20843 | negotiated during the SSL/TLS handshake up to TLSv1.2. The format of the |
@@ -21803,7 +21823,21 @@ <h2 id="chapter-5.2" data-target="5.2"><small><a class="small" href="#5.2">5.2.< |
21803 | 21823 | In order to use the trusted CAs of your system, the "@system-ca" parameter |
21804 | 21824 | could be used in place of the cafile. The location of this directory could be |
21805 | 21825 | overwritten by setting the SSL_CERT_DIR environment variable. |
21806 | | -</pre><a class="anchor" name="check"></a><a class="anchor" name="5-check"></a><a class="anchor" name="5.2-check"></a><a class="anchor" name="check (Bind and server options)"></a><a class="anchor" name="check (Server and default-server options)"></a><div class="keyword"><b><a class="anchor" name="check"></a><a href="#5.2-check">check</a></b></div><pre class="text">May be used in the following contexts: tcp, http, log |
| 21826 | +</pre><a class="anchor" name="cc"></a><a class="anchor" name="5-cc"></a><a class="anchor" name="5.2-cc"></a><a class="anchor" name="cc (Bind and server options)"></a><a class="anchor" name="cc (Server and default-server options)"></a><div class="keyword"><b><a class="anchor" name="cc"></a><a href="#5.2-cc">cc</a></b> <span style="color: #080"><algo></span></div><pre class="text">May be used in the following contexts: tcp, http, log, peers, ring |
| 21827 | + |
| 21828 | +This setting is only available on systems which define TCP_CONGESTION, and |
| 21829 | +was validated on Linux and FreeBSD. It takes the name of a TCP congestion |
| 21830 | +control algorithm and configures outgoing connections to use this algorithm. |
| 21831 | +Typical names include "reno" or "cubic" and will depend on the operating |
| 21832 | +system. On some systems, special permissions may be required to configure |
| 21833 | +certain algorithms. On Linux, available algorithms are listed in sysctl |
| 21834 | +"net.ipv4.tcp_available_congestion_control", and those permitted without |
| 21835 | +privileges are in "net.ipv4.tcp_allowed_congestion_control". In order to |
| 21836 | +access algorithms requiring extra permissions, the "cap_net_admin" capability |
| 21837 | +might be required (see "<a href="#setcap">setcap</a>" in the global section). In case of failure to |
| 21838 | +configure a specific congestion control algorithm, the default one remains |
| 21839 | +</pre><div class="page-header"><b>See also:</b> the "<span class="dropdown"><a class="dropdown-toggle" data-toggle="dropdown" href="#">cc<span class="caret"></span></a><ul class="dropdown-menu"><li class="dropdown-header">This keyword is available in sections :</li><li><a href="#cc%20%28Bind%20options%29">Bind options</a></li><li><a href="#cc%20%28Server%20and%20default-server%20options%29">Server and default-server options</a></li></ul></span>" bind keyword (<a href="#5.1">section 5.1</a>).</div> |
| 21840 | +<a class="anchor" name="check"></a><a class="anchor" name="5-check"></a><a class="anchor" name="5.2-check"></a><a class="anchor" name="check (Bind and server options)"></a><a class="anchor" name="check (Server and default-server options)"></a><div class="keyword"><b><a class="anchor" name="check"></a><a href="#5.2-check">check</a></b></div><pre class="text">May be used in the following contexts: tcp, http, log |
21807 | 21841 |
|
21808 | 21842 | This option enables health checks on a server: |
21809 | 21843 | - when not set, no health checking is performed, and the server is always |
@@ -33307,7 +33341,7 @@ <h2 id="chapter-12.8" data-target="12.8"><small><a class="small" href="#12.8">12 |
33307 | 33341 | <br> |
33308 | 33342 | <hr> |
33309 | 33343 | <div class="text-right"> |
33310 | | - HAProxy 3.3-dev8-141 – Configuration Manual<br> |
| 33344 | + HAProxy 3.3-dev8-158 – Configuration Manual<br> |
33311 | 33345 | <small>, 2025/09/05</small> |
33312 | 33346 | </div> |
33313 | 33347 | </div> |
|
0 commit comments