Skip to content

Commit d029e6c

Browse files
author
HAProxy Community
committed
Update docs for 2.8
1 parent 3e07e1b commit d029e6c

File tree

3 files changed

+76
-47
lines changed

3 files changed

+76
-47
lines changed

‎docs/2.8/configuration.html‎

Lines changed: 68 additions & 39 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
<html lang="en">
33
<head>
44
<meta charset="utf-8" />
5-
<title>HAProxy version 2.8.11 - Configuration Manual</title>
5+
<title>HAProxy version 2.8.11-8 - Configuration Manual</title>
66
<link href="https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css" rel="stylesheet" />
77
<link href="https://raw.githubusercontent.com/thomaspark/bootswatch/v3.3.7/cerulean/bootstrap.min.css" rel="stylesheet" />
88
<link href="../css/page.css?0.4.2-15" rel="stylesheet" />
@@ -4294,7 +4294,7 @@
42944294
You can use <strong>left</strong> and <strong>right</strong> arrow keys to navigate between chapters.<br>
42954295
</p>
42964296
<p class="text-right">
4297-
<small>Converted with <a href="https://github.com/cbonte/haproxy-dconv">haproxy-dconv</a> v<b>0.4.2-15</b> on <b>2024/09/19</b></small>
4297+
<small>Converted with <a href="https://github.com/cbonte/haproxy-dconv">haproxy-dconv</a> v<b>0.4.2-15</b> on <b>2024/10/01</b></small>
42984298
</p>
42994299
</div>
43004300
<!-- /.sidebar -->
@@ -4305,7 +4305,7 @@
43054305
<div class="text-center">
43064306
<h1><a href="http://www.haproxy.org/" title="HAProxy"><img src="../img/HAProxyCommunityEdition_60px.png?0.4.2-15" /></a></h1>
43074307
<h2>Configuration Manual</h2>
4308-
<p><strong>version 2.8.11</strong></p>
4308+
<p><strong>version 2.8.11-8</strong></p>
43094309
<p>
43104310
2024/09/19<br>
43114311

@@ -13713,35 +13713,53 @@ <h2 id="chapter-4.2" data-target="4.2"><small><a class="small" href="#4.2">4.2.<
1371313713
<div class="separator">
1371413714
<span class="label label-info">Arguments :</span> none
1371513715
</div>
13716-
<pre class="text">By default, HAProxy complies with RFC7230 in terms of message parsing. This
13717-
means that invalid characters in header names are not permitted and cause an
13718-
error to be returned to the client. This is the desired behavior as such
13719-
forbidden characters are essentially used to build attacks exploiting server
13720-
weaknesses, and bypass security filtering. Sometimes, a buggy browser or
13721-
server will emit invalid header names for whatever reason (configuration,
13722-
implementation) and the issue will not be immediately fixed. In such a case,
13723-
it is possible to relax HAProxy's header name parser to accept any character
13724-
even if that does not make sense, by specifying this option. Similarly, the
13725-
list of characters allowed to appear in a URI is well defined by RFC3986, and
13726-
chars 0-31, 32 (space), 34 ('&quot;'), 60 ('&lt;'), 62 ('&gt;'), 92 ('\'), 94 ('^'), 96
13727-
('`'), 123 ('{'), 124 ('|'), 125 ('}'), 127 (delete) and anything above are
13728-
not allowed at all. HAProxy always blocks a number of them (0..32, 127). The
13729-
remaining ones are blocked by default unless this option is enabled. This
13730-
option also relaxes the test on the HTTP version, it allows HTTP/0.9 requests
13731-
to pass through (no version specified), as well as different protocol names
13732-
(e.g. RTSP), and multiple digits for both the major and the minor version.
13733-
Finally, this option also allows incoming URLs to contain fragment references
13734-
('#' after the path).
13716+
<pre class="text">By default, HAProxy complies with the different HTTP RFCs in terms of message
13717+
parsing. This means the message parsing is quite strict and causes an error
13718+
to be returned to the client for malformed messages. This is the desired
13719+
behavior as such malformed messages are essentially used to build attacks
13720+
exploiting server weaknesses, and bypass security filtering. Sometimes, a
13721+
buggy browser will not respect these RCFs for whatever reason (configuration,
13722+
implementation...) and the issue will not be immediately fixed. In such case,
13723+
it is possible to relax HAProxy's parser to accept some invalid requests by
13724+
specifying this option. Most of rules concern the H1 parsing for historical
13725+
reason. Newer HTTP versions tends to be cleaner and applications follow more
13726+
stickly these protocols.
13727+
13728+
When this option is set, the following rules are observed:
13729+
13730+
* In H1 only, invalid characters, including NULL character, in header name
13731+
will be accepted;
13732+
13733+
* In H1 only, NULL character in header value will be accepted;
13734+
13735+
* The list of characters allowed to appear in a URI is well defined by
13736+
RFC3986, and chars 0-31, 32 (space), 34 ('&quot;'), 60 ('&lt;'), 62 ('&gt;'), 92
13737+
('\'), 94 ('^'), 96 ('`'), 123 ('{'), 124 ('|'), 125 ('}'), 127 (delete)
13738+
and anything above are normally not allowed. But here, in H1 only,
13739+
HAProxy will only block a number of them (0..32, 127);
13740+
13741+
* In H1 and H2, URLs containing fragment references ('#' after the path)
13742+
will be accepted;
13743+
13744+
* In H1 only, no check will be performed on the authority for CONNECT
13745+
requests;
13746+
13747+
* In H1 only, no check will be performed against the authority and the Host
13748+
header value.
13749+
13750+
* In H1 only, tests on the HTTP version will be relaxed. It will allow
13751+
HTTP/0.9 GET requests to pass through (no version specified), as well as
13752+
different protocol names (e.g. RTSP), and multiple digits for both the
13753+
major and the minor version.
1373513754

1373613755
This option should never be enabled by default as it hides application bugs
1373713756
and open security breaches. It should only be deployed after a problem has
1373813757
been confirmed.
1373913758

13740-
When this option is enabled, erroneous header names will still be accepted in
13741-
requests, but the complete request will be captured in order to permit later
13742-
analysis using the &quot;show errors&quot; request on the UNIX stats socket. Similarly,
13743-
requests containing invalid chars in the URI part will be logged. Doing this
13744-
also helps confirming that the issue has been solved.
13759+
When this option is enabled, invalid but accepted H1 requests will be
13760+
captured in order to permit later analysis using the &quot;show errors&quot; request on
13761+
the UNIX stats socket.Doing this also helps confirming that the issue has
13762+
been solved.
1374513763

1374613764
If this option has been enabled in a &quot;defaults&quot; section, it can be disabled
1374713765
in a specific instance by prepending the &quot;no&quot; keyword before it.
@@ -13754,17 +13772,28 @@ <h2 id="chapter-4.2" data-target="4.2"><small><a class="small" href="#4.2">4.2.<
1375413772
<div class="separator">
1375513773
<span class="label label-info">Arguments :</span> none
1375613774
</div>
13757-
<pre class="text">By default, HAProxy complies with RFC7230 in terms of message parsing. This
13758-
means that invalid characters in header names are not permitted and cause an
13759-
error to be returned to the client. This is the desired behavior as such
13760-
forbidden characters are essentially used to build attacks exploiting server
13761-
weaknesses, and bypass security filtering. Sometimes, a buggy browser or
13762-
server will emit invalid header names for whatever reason (configuration,
13763-
implementation) and the issue will not be immediately fixed. In such a case,
13764-
it is possible to relax HAProxy's header name parser to accept any character
13765-
even if that does not make sense, by specifying this option. This option also
13766-
relaxes the test on the HTTP version format, it allows multiple digits for
13767-
both the major and the minor version.
13775+
<pre class="text">Similarly to &quot;<a href="#option%20accept-invalid-http-request">option accept-invalid-http-request</a>&quot;, this option may be used to
13776+
relax parsing rules of HTTP responses. It should only be enabled for trusted
13777+
legacy servers to accept some invalid responses. Most of rules concern the H1
13778+
parsing for historical reason. Newer HTTP versions tends to be cleaner and
13779+
applications follow more stickly these protocols.
13780+
13781+
When this option is set, the following rules are observed:
13782+
13783+
* In H1 only, invalid characters, including NULL character, in header name
13784+
will be accepted;
13785+
13786+
* In H1 only, NULL character in header value will be accepted;
13787+
13788+
* In H1 only, empty values or several &quot;chunked&quot; value occurrences for
13789+
Transfer-Encoding header will be accepted;
13790+
13791+
* In H1 only, no check will be performed against the authority and the Host
13792+
header value.
13793+
13794+
* In H1 only, tests on the HTTP version will be relaxed. It will allow
13795+
different protocol names (e.g. RTSP), and multiple digits for both the
13796+
major and the minor version.
1376813797

1376913798
This option should never be enabled by default as it hides application bugs
1377013799
and open security breaches. It should only be deployed after a problem has
@@ -27795,7 +27824,7 @@ <h2 id="chapter-11.3" data-target="11.3"><small><a class="small" href="#11.3">11
2779527824
<br>
2779627825
<hr>
2779727826
<div class="text-right">
27798-
HAProxy 2.8.11 &ndash; Configuration Manual<br>
27827+
HAProxy 2.8.11-8 &ndash; Configuration Manual<br>
2779927828
<small>, 2024/09/19</small>
2780027829
</div>
2780127830
</div>

‎docs/2.8/intro.html‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
<html lang="en">
33
<head>
44
<meta charset="utf-8" />
5-
<title>HAProxy version 2.8.11 - Starter Guide</title>
5+
<title>HAProxy version 2.8.11-8 - Starter Guide</title>
66
<link href="https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css" rel="stylesheet" />
77
<link href="https://raw.githubusercontent.com/thomaspark/bootswatch/v3.3.7/cerulean/bootstrap.min.css" rel="stylesheet" />
88
<link href="../css/page.css?0.4.2-15" rel="stylesheet" />
@@ -484,7 +484,7 @@
484484
You can use <strong>left</strong> and <strong>right</strong> arrow keys to navigate between chapters.<br>
485485
</p>
486486
<p class="text-right">
487-
<small>Converted with <a href="https://github.com/cbonte/haproxy-dconv">haproxy-dconv</a> v<b>0.4.2-15</b> on <b>2024/09/19</b></small>
487+
<small>Converted with <a href="https://github.com/cbonte/haproxy-dconv">haproxy-dconv</a> v<b>0.4.2-15</b> on <b>2024/10/01</b></small>
488488
</p>
489489
</div>
490490
<!-- /.sidebar -->
@@ -495,7 +495,7 @@
495495
<div class="text-center">
496496
<h1><a href="http://www.haproxy.org/" title="HAProxy"><img src="../img/HAProxyCommunityEdition_60px.png?0.4.2-15" /></a></h1>
497497
<h2>Starter Guide</h2>
498-
<p><strong>version 2.8.11</strong></p>
498+
<p><strong>version 2.8.11-8</strong></p>
499499
<p>
500500
<br>
501501

@@ -2515,7 +2515,7 @@ <h2 id="chapter-4.4" data-target="4.4"><small><a class="small" href="#4.4">4.4.<
25152515
<br>
25162516
<hr>
25172517
<div class="text-right">
2518-
HAProxy 2.8.11 &ndash; Starter Guide<br>
2518+
HAProxy 2.8.11-8 &ndash; Starter Guide<br>
25192519
<small>, </small>
25202520
</div>
25212521
</div>

‎docs/2.8/management.html‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
<html lang="en">
33
<head>
44
<meta charset="utf-8" />
5-
<title>HAProxy version 2.8.11 - Management Guide</title>
5+
<title>HAProxy version 2.8.11-8 - Management Guide</title>
66
<link href="https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css" rel="stylesheet" />
77
<link href="https://raw.githubusercontent.com/thomaspark/bootswatch/v3.3.7/cerulean/bootstrap.min.css" rel="stylesheet" />
88
<link href="../css/page.css?0.4.2-15" rel="stylesheet" />
@@ -610,7 +610,7 @@
610610
You can use <strong>left</strong> and <strong>right</strong> arrow keys to navigate between chapters.<br>
611611
</p>
612612
<p class="text-right">
613-
<small>Converted with <a href="https://github.com/cbonte/haproxy-dconv">haproxy-dconv</a> v<b>0.4.2-15</b> on <b>2024/09/19</b></small>
613+
<small>Converted with <a href="https://github.com/cbonte/haproxy-dconv">haproxy-dconv</a> v<b>0.4.2-15</b> on <b>2024/10/01</b></small>
614614
</p>
615615
</div>
616616
<!-- /.sidebar -->
@@ -621,7 +621,7 @@
621621
<div class="text-center">
622622
<h1><a href="http://www.haproxy.org/" title="HAProxy"><img src="../img/HAProxyCommunityEdition_60px.png?0.4.2-15" /></a></h1>
623623
<h2>Management Guide</h2>
624-
<p><strong>version 2.8.11</strong></p>
624+
<p><strong>version 2.8.11-8</strong></p>
625625
<p>
626626
<br>
627627

@@ -4971,7 +4971,7 @@ <h3 id="chapter-9.4.1" data-target="9.4.1"><small><a class="small" href="#9.4.1"
49714971
<br>
49724972
<hr>
49734973
<div class="text-right">
4974-
HAProxy 2.8.11 &ndash; Management Guide<br>
4974+
HAProxy 2.8.11-8 &ndash; Management Guide<br>
49754975
<small>, </small>
49764976
</div>
49774977
</div>

0 commit comments

Comments
 (0)