|
2 | 2 | <html lang="en"> |
3 | 3 | <head> |
4 | 4 | <meta charset="utf-8" /> |
5 | | - <title>HAProxy version 3.3-dev12-30 - Configuration Manual</title> |
| 5 | + <title>HAProxy version 3.3-dev13 - Configuration Manual</title> |
6 | 6 | <link href="https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css" rel="stylesheet" /> |
7 | 7 | <link href="https://raw.githubusercontent.com/thomaspark/bootswatch/v3.3.7/cerulean/bootstrap.min.css" rel="stylesheet" /> |
8 | 8 | <link href="../css/page.css?0.4.2-15" rel="stylesheet" /> |
|
4699 | 4699 | You can use <strong>left</strong> and <strong>right</strong> arrow keys to navigate between chapters.<br> |
4700 | 4700 | </p> |
4701 | 4701 | <p class="text-right"> |
4702 | | - <small>Converted with <a href="https://github.com/cbonte/haproxy-dconv">haproxy-dconv</a> v<b>0.4.2-15</b> on <b>2025/11/13</b></small> |
| 4702 | + <small>Converted with <a href="https://github.com/cbonte/haproxy-dconv">haproxy-dconv</a> v<b>0.4.2-15</b> on <b>2025/11/14</b></small> |
4703 | 4703 | </p> |
4704 | 4704 | </div> |
4705 | 4705 | <!-- /.sidebar --> |
|
4710 | 4710 | <div class="text-center"> |
4711 | 4711 | <h1><a href="http://www.haproxy.org/" title="HAProxy"><img src="../img/HAProxyCommunityEdition_60px.png?0.4.2-15" /></a></h1> |
4712 | 4712 | <h2>Configuration Manual</h2> |
4713 | | - <p><strong>version 3.3-dev12-30</strong></p> |
| 4713 | + <p><strong>version 3.3-dev13</strong></p> |
4714 | 4714 | <p> |
4715 | | - 2025/11/08<br> |
| 4715 | + 2025/11/14<br> |
4716 | 4716 |
|
4717 | 4717 | </p> |
4718 | 4718 | </div> |
@@ -7013,33 +7013,70 @@ <h2 id="chapter-2.4" data-target="2.4"><small><a class="small" href="#2.4">2.4.< |
7013 | 7013 |
|
7014 | 7014 | The list of currently supported predicates is the following: |
7015 | 7015 |
|
7016 | | - - defined(<name>) : returns true if an environment variable <name> |
7017 | | - exists, regardless of its contents |
| 7016 | + - awslc_api_atleast(<ver>): returns true if the current awslc API number |
| 7017 | + is at least as recent as <ver> otherwise false. |
| 7018 | +</pre><div class="separator"> |
| 7019 | +<span class="label label-success">Example:</span> |
| 7020 | +<pre class="prettyprint"> |
| 7021 | +<div class="example-desc">awslc_api_atleast(35)</div><code></code></pre> |
| 7022 | +</div><pre class="text">- awslc_api_before(<ver>): returns true if the current awslc API number |
| 7023 | + is strictly older than <ver> otherwise false. |
| 7024 | +</pre><div class="separator"> |
| 7025 | +<span class="label label-success">Example:</span> |
| 7026 | +<pre class="prettyprint"> |
| 7027 | +<div class="example-desc">awslc_api_before(26)</div><code></code></pre> |
| 7028 | +</div><pre class="text">- defined(<name>) : returns true if an environment variable <name> |
| 7029 | + exists, regardless of its contents |
7018 | 7030 |
|
7019 | | - - feature(<name>) : returns true if feature <name> is listed as present |
7020 | | - in the features list reported by "haproxy -vv" |
7021 | | - (which means a <name> appears after a '+') |
| 7031 | +- feature(<name>) : returns true if feature <name> is listed as present |
| 7032 | + in the features list reported by "haproxy -vv" |
| 7033 | + (which means a <name> appears after a '+') |
7022 | 7034 |
|
7023 | | - - streq(<str1>,<str2>) : returns true only if the two strings are equal |
7024 | | - - strneq(<str1>,<str2>) : returns true only if the two strings differ |
7025 | | - - strstr(<str1>,<str2>) : returns true only if the second string is found in |
7026 | | - the first one. |
| 7035 | +- openssl_version_atleast(<ver>) : returns true if the current openssl |
| 7036 | + version is at least as recent as <ver> otherwise |
| 7037 | + false. |
| 7038 | + Libraries like LibreSSL, AWS-LC and WolfSSL also |
| 7039 | + provide a pseudo OpenSSL version. |
| 7040 | +</pre><div class="separator"> |
| 7041 | +<span class="label label-success">Example:</span> |
| 7042 | +<pre class="prettyprint"> |
| 7043 | +<code>ssllib_name_startswith(OpenSSL) && openssl_version_atleast(1.1.1) |
| 7044 | +</code></pre> |
| 7045 | +</div><pre class="text">- openssl_version_before(<ver>) : returns true if the current openssl |
| 7046 | + version is strictly older than <ver> otherwise |
| 7047 | + false. |
| 7048 | + Libraries like LibreSSL, AWS-LC and WolfSSL also |
| 7049 | + provide a pseudo OpenSSL version. |
| 7050 | +</pre><div class="separator"> |
| 7051 | +<span class="label label-success">Example:</span> |
| 7052 | +<pre class="prettyprint"> |
| 7053 | +<div class="example-desc">openssl_version_before(3.5.0)</div><code></code></pre> |
| 7054 | +</div><pre class="text">- ssllib_name_startswith(<name>) : return true if the SSL library name |
| 7055 | + HAProxy was linked with, starts with <name>. |
| 7056 | +</pre><div class="separator"> |
| 7057 | +<span class="label label-success">Example:</span> |
| 7058 | +<pre class="prettyprint"> |
| 7059 | +<div class="example-desc">ssllib_name_startswith(wolfSSL)</div><code></code></pre> |
| 7060 | +</div><pre class="text">- streq(<str1>,<str2>) : returns true only if the two strings are equal |
| 7061 | +- strneq(<str1>,<str2>) : returns true only if the two strings differ |
| 7062 | +- strstr(<str1>,<str2>) : returns true only if the second string is found in |
| 7063 | + the first one. |
7027 | 7064 |
|
7028 | | - - version_atleast(<ver>): returns true if the current haproxy version is |
7029 | | - at least as recent as <ver> otherwise false. The |
7030 | | - version syntax is the same as shown by "haproxy -v" |
7031 | | - and missing components are assumed as being zero. |
| 7065 | +- version_atleast(<ver>): returns true if the current haproxy version is |
| 7066 | + at least as recent as <ver> otherwise false. The |
| 7067 | + version syntax is the same as shown by "haproxy -v" |
| 7068 | + and missing components are assumed as being zero. |
7032 | 7069 |
|
7033 | | - - version_before(<ver>) : returns true if the current haproxy version is |
7034 | | - strictly older than <ver> otherwise false. The |
7035 | | - version syntax is the same as shown by "haproxy -v" |
7036 | | - and missing components are assumed as being zero. |
| 7070 | +- version_before(<ver>) : returns true if the current haproxy version is |
| 7071 | + strictly older than <ver> otherwise false. The |
| 7072 | + version syntax is the same as shown by "haproxy -v" |
| 7073 | + and missing components are assumed as being zero. |
7037 | 7074 |
|
7038 | | - - enabled(<opt>) : returns true if the option <opt> is enabled at |
7039 | | - run-time. Only a subset of options are supported: |
7040 | | - POLL, EPOLL, KQUEUE, EVPORTS, SPLICE, |
7041 | | - GETADDRINFO, REUSEPORT, FAST-FORWARD, |
7042 | | - SERVER-SSL-VERIFY-NONE |
| 7075 | +- enabled(<opt>) : returns true if the option <opt> is enabled at |
| 7076 | + run-time. Only a subset of options are supported: |
| 7077 | + POLL, EPOLL, KQUEUE, EVPORTS, SPLICE, |
| 7078 | + GETADDRINFO, REUSEPORT, FAST-FORWARD, |
| 7079 | + SERVER-SSL-VERIFY-NONE |
7043 | 7080 | </pre><div class="separator"> |
7044 | 7081 | <span class="label label-success">Example:</span> |
7045 | 7082 | <pre class="prettyprint"> |
@@ -22144,11 +22181,14 @@ <h2 id="chapter-5.2" data-target="5.2"><small><a class="small" href="#5.2">5.2.< |
22144 | 22181 | This option permits checks to reuse idle connections if available instead of |
22145 | 22182 | opening a dedicated one. The connection is reinserted in the pool on check |
22146 | 22183 | completion. The main objective is to limit the number of connections opening |
22147 | | -and closure on a specific server. |
| 22184 | +and closure on a specific server. This feature is compatible only with |
| 22185 | +http-check rulesets. It is silently ignored for other check types. |
| 22186 | +Furthermore, reuse policy should be set to aggressive on the backend as each |
| 22187 | +check attempt is performed over a dedicated session. |
22148 | 22188 |
|
22149 | | -Note that for configuration simplicity, this option is silently ignored if |
22150 | | -any specific check connect option is defined, either on the server line or |
22151 | | -via a custom tcp-check connect rule. |
| 22189 | +For configuration simplicity, this option is silently ignored if any specific |
| 22190 | +check connect option is defined, either on the server line or via a custom |
| 22191 | +tcp-check connect rule. |
22152 | 22192 |
|
22153 | 22193 | This option is automatically enabled for servers acting as passive reverse |
22154 | 22194 | HTTP gateway, as for those servers connect is only supported through reuse. |
@@ -22193,10 +22233,16 @@ <h2 id="chapter-5.2" data-target="5.2"><small><a class="small" href="#5.2">5.2.< |
22193 | 22233 | fcgi : mode=HTTP side=BE mux=FCGI flags=HTX|HOL_RISK|NO_UPG |
22194 | 22234 | h1 : mode=HTTP side=FE|BE mux=H1 flags=HTX|NO_UPG |
22195 | 22235 | none : mode=TCP side=FE|BE mux=PASS flags=NO_UPG |
| 22236 | + quic : mode=HTTP side=FE|BE mux=QUIC flags=HTX|NO_UPG|FRAMED |
22196 | 22237 |
|
22197 | 22238 | Idea behind this option is to bypass the selection of the best multiplexer's |
22198 | 22239 | protocol for health-check connections established to this server. |
22199 | 22240 | If not defined, the server one will be used, if set. |
| 22241 | + |
| 22242 | +QUIC check configuration is not fully implemented yet. First, QUIC checks may |
| 22243 | +only be performed for QUIC servers. Second, if one or more check specific |
| 22244 | +connection parameters is specified on a QUIC server, check protocol will |
| 22245 | +fallback to TCP usage. |
22200 | 22246 | </pre><a class="anchor" name="check-sni-auto"></a><a class="anchor" name="5-check-sni-auto"></a><a class="anchor" name="5.2-check-sni-auto"></a><a class="anchor" name="check-sni-auto (Bind and server options)"></a><a class="anchor" name="check-sni-auto (Server and default-server options)"></a><div class="keyword"><b><a class="anchor" name="check-sni-auto"></a><a href="#5.2-check-sni-auto">check-sni-auto</a></b></div><pre class="text">May be used in the following contexts: tcp, http, log |
22201 | 22247 |
|
22202 | 22248 | This option enables the automatic SNI selection when doing health checks over |
@@ -33737,8 +33783,8 @@ <h2 id="chapter-12.8" data-target="12.8"><small><a class="small" href="#12.8">12 |
33737 | 33783 | <br> |
33738 | 33784 | <hr> |
33739 | 33785 | <div class="text-right"> |
33740 | | - HAProxy 3.3-dev12-30 – Configuration Manual<br> |
33741 | | - <small>, 2025/11/08</small> |
| 33786 | + HAProxy 3.3-dev13 – Configuration Manual<br> |
| 33787 | + <small>, 2025/11/14</small> |
33742 | 33788 | </div> |
33743 | 33789 | </div> |
33744 | 33790 | <!-- /.col-lg-12 --> |
|
0 commit comments