You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
'log ... len yyy' parameter. Your syslog daemon may also need specific
8155
8204
configuration directives too.
8156
8205
The default value is 1024.
8157
-
</pre><a class="anchor" name="tune.http.maxhdr"></a><a class="anchor" name="3-tune.http.maxhdr"></a><a class="anchor" name="3.2-tune.http.maxhdr"></a><a class="anchor" name="tune.http.maxhdr (Global parameters)"></a><a class="anchor" name="tune.http.maxhdr (Performance tuning)"></a><div class="keyword"><b><a class="anchor" name="tune.http.maxhdr"></a><a href="#3.2-tune.http.maxhdr">tune.http.maxhdr</a></b> <span style="color: #080"><number></span></div><pre class="text">Sets the maximum number of headers in a request. When a request comes with a
8158
-
number of headers greater than this value (including the first line), it is
8159
-
rejected with a "400 Bad Request" status code. Similarly, too large responses
8160
-
are blocked with "502 Bad Gateway". The default value is 101, which is enough
8161
-
for all usages, considering that the widely deployed Apache server uses the
8162
-
same limit. It can be useful to push this limit further to temporarily allow
8163
-
a buggy application to work by the time it gets fixed. The accepted range is
8164
-
1..32767. Keep in mind that each new header consumes 32bits of memory for
8165
-
each stream, so don't push this limit too high.
8206
+
</pre><a class="anchor" name="tune.http.maxhdr"></a><a class="anchor" name="3-tune.http.maxhdr"></a><a class="anchor" name="3.2-tune.http.maxhdr"></a><a class="anchor" name="tune.http.maxhdr (Global parameters)"></a><a class="anchor" name="tune.http.maxhdr (Performance tuning)"></a><div class="keyword"><b><a class="anchor" name="tune.http.maxhdr"></a><a href="#3.2-tune.http.maxhdr">tune.http.maxhdr</a></b> <span style="color: #080"><number></span></div><pre class="text">Sets the maximum number of headers allowed in received HTTP messages. When a
8207
+
message comes with a number of headers greater than this value (including the
8208
+
first line), it is rejected with a "400 Bad Request" status code for a
8209
+
request, or "502 Bad Gateway" for a response. The default value is 101, which
8210
+
is enough for all usages, considering that the widely deployed Apache server
8211
+
uses the same limit. It can be useful to push this limit further to
8212
+
temporarily allow a buggy application to work by the time it gets fixed. The
8213
+
accepted range is 1..32767. Keep in mind that each new header consumes 32bits
8214
+
of memory for each stream, so don't push this limit too high.
8215
+
8216
+
Note that HTTP/1.1 is a text protocol, so there is no special limit when the
8217
+
message is sent. The limit during the message parsing is sufficient. HTTP/2
8218
+
and HTTP/3 are binary protocols and require an encoding step. A limit is set
8219
+
too when headers are encoded to comply to limitation imposed by the
8220
+
protocols. This limit is large enough but not documented on purpose. The same
8221
+
limit is applied on the first steps of the decoding for the same reason.
8166
8222
</pre><a class="anchor" name="tune.idle-pool.shared"></a><a class="anchor" name="3-tune.idle-pool.shared"></a><a class="anchor" name="3.2-tune.idle-pool.shared"></a><a class="anchor" name="tune.idle-pool.shared (Global parameters)"></a><a class="anchor" name="tune.idle-pool.shared (Performance tuning)"></a><div class="keyword"><b><a class="anchor" name="tune.idle-pool.shared"></a><a href="#3.2-tune.idle-pool.shared">tune.idle-pool.shared</a></b> <span style="color: #800">{ on | off }</span></div><pre class="text">Enables ('on') or disables ('off') sharing of idle connection pools between
8167
8223
threads for a same server. The default is to share them between threads in
8168
8224
order to minimize the number of persistent connections to a server, and to
</pre><a class="anchor" name="act_conn"></a><a class="anchor" name="7-act_conn"></a><a class="anchor" name="7.3.2-act_conn"></a><a class="anchor" name="act_conn (Using ACLs and fetching samples)"></a><a class="anchor" name="act_conn (Fetching samples from internal states)"></a><div class="keyword"><b><a class="anchor" name="act_conn"></a><a href="#7.3.2-act_conn">act_conn</a></b> : integer</div><pre class="text">Returns the total number of active concurrent connections on the process.
23703
23760
</pre><a class="anchor" name="acl"></a><a class="anchor" name="7-acl"></a><a class="anchor" name="7.3.2-acl"></a><a class="anchor" name="acl (Using ACLs and fetching samples)"></a><a class="anchor" name="acl (Fetching samples from internal states)"></a><div class="keyword"><b><a class="anchor" name="acl"></a><a href="#7.3.2-acl">acl</a></b>(<span style="color: #008">[!]</span><span style="color: #080"><name></span><span style="color: #008">[,...]</span>) : boolean</div><pre class="text">Returns true if the evaluation of all the named ACL(s) is true, otherwise
"res" : the variable is shared only during response processing.
24087
24144
This prefix is followed by a name. The separator is a '.'. The name may only
24088
24145
contain characters 'a-z', 'A-Z', '0-9', '.' and '_'.
24089
-
</pre></div>
24146
+
</pre><a class="anchor" name="wait_end"></a><a class="anchor" name="7-wait_end"></a><a class="anchor" name="7.3.2-wait_end"></a><a class="anchor" name="wait_end (Using ACLs and fetching samples)"></a><a class="anchor" name="wait_end (Fetching samples from internal states)"></a><div class="keyword"><b><a class="anchor" name="wait_end"></a><a href="#7.3.2-wait_end">wait_end</a></b> : boolean</div><pre class="text">This fetch either returns true when the inspection period is over, or does
24147
+
not fetch. It is only used in ACLs, in conjunction with content analysis to
24148
+
avoid returning a wrong verdict early. It may also be used to delay some
24149
+
actions, such as a delayed reject for some special addresses. Since it either
24150
+
stops the rules evaluation or immediately returns true, it is recommended to
24151
+
use this acl as the last one in a rule. Please note that the default ACL
24152
+
"WAIT_END" is always usable without prior declaration. This test was designed
</pre><a class="anchor" name="bs.id"></a><a class="anchor" name="7-bs.id"></a><a class="anchor" name="7.3.5-bs.id"></a><a class="anchor" name="bs.id (Using ACLs and fetching samples)"></a><a class="anchor" name="bs.id (Fetching samples from buffer contents (Layer 6))"></a><div class="keyword"><b><a class="anchor" name="bs.id"></a><a href="#7.3.5-bs.id">bs.id</a></b> : integer</div><pre class="text">Returns the multiplexer's stream ID on the server side. It is the
25791
25870
multiplexer's responsibility to return the appropriate information.
SSL data layer, so this will not work with "<span class="dropdown"><a class="dropdown-toggle" data-toggle="dropdown" href="#">server<span class="caret"></span></a><ul class="dropdown-menu"><li class="dropdown-header">This keyword is available in sections :</li><li><a href="#server%20%28Peers%29">Peers</a></li><li><a href="#server%20%28Rings%29">Rings</a></li><li><a href="#server%20%28Alphabetically%20sorted%20keywords%20reference%29">Alphabetically sorted keywords reference</a></li></ul></span>" lines having the "<span class="dropdown"><a class="dropdown-toggle" data-toggle="dropdown" href="#">ssl<span class="caret"></span></a><ul class="dropdown-menu"><li class="dropdown-header">This keyword is available in sections :</li><li><a href="#ssl%20%28Bind%20options%29">Bind options</a></li><li><a href="#ssl%20%28Server%20and%20default-server%20options%29">Server and default-server options</a></li></ul></span>"
26014
26093
option. This is mostly used in ACL to detect presence of an SSL hello message
26015
26094
that is supposed to contain an SSL session ID usable for stickiness.
26016
-
</pre><a class="anchor" name="wait_end"></a><a class="anchor" name="7-wait_end"></a><a class="anchor" name="7.3.5-wait_end"></a><a class="anchor" name="wait_end (Using ACLs and fetching samples)"></a><a class="anchor" name="wait_end (Fetching samples from buffer contents (Layer 6))"></a><div class="keyword"><b><a class="anchor" name="wait_end"></a><a href="#7.3.5-wait_end">wait_end</a></b> : boolean</div><pre class="text">This fetch either returns true when the inspection period is over, or does
26017
-
not fetch. It is only used in ACLs, in conjunction with content analysis to
26018
-
avoid returning a wrong verdict early. It may also be used to delay some
26019
-
actions, such as a delayed reject for some special addresses. Since it either
26020
-
stops the rules evaluation or immediately returns true, it is recommended to
26021
-
use this acl as the last one in a rule. Please note that the default ACL
26022
-
"WAIT_END" is always usable without prior declaration. This test was designed
0 commit comments