Skip to content

Commit 667ac8a

Browse files
committed
DOC: management: Clearly state "show errors" only reports malformed H1 messages
For now, only the H1 multiplexer is able to capture malformed messages. So it is better to update the management guide accordingly to avoid any confusion.
1 parent e863d8d commit 667ac8a

File tree

1 file changed

+19
-19
lines changed

1 file changed

+19
-19
lines changed

doc/management.txt

Lines changed: 19 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -2820,14 +2820,14 @@ show env [<name>]
28202820
can only be issued on sockets configured for levels "operator" or "admin".
28212821

28222822
show errors [<iid>|<proxy>] [request|response]
2823-
Dump last known request and response errors collected by frontends and
2824-
backends. If <iid> is specified, the limit the dump to errors concerning
2825-
either frontend or backend whose ID is <iid>. Proxy ID "-1" will cause
2826-
all instances to be dumped. If a proxy name is specified instead, its ID
2827-
will be used as the filter. If "request" or "response" is added after the
2828-
proxy name or ID, only request or response errors will be dumped. This
2829-
command is restricted and can only be issued on sockets configured for
2830-
levels "operator" or "admin".
2823+
Dump last known HTTP/1.x request and response errors collected by frontends
2824+
and backends. If <iid> is specified, the limit the dump to errors concerning
2825+
either frontend or backend whose ID is <iid>. Proxy ID "-1" will cause all
2826+
instances to be dumped. If a proxy name is specified instead, its ID will be
2827+
used as the filter. If "request" or "response" is added after the proxy name
2828+
or ID, only request or response errors will be dumped. This command is
2829+
restricted and can only be issued on sockets configured for levels "operator"
2830+
or "admin".
28312831

28322832
The errors which may be collected are the last request and response errors
28332833
caused by protocol violations, often due to invalid characters in header
@@ -4537,17 +4537,17 @@ connections are handled in parallel, though the "debug2ansi" and "debug2html"
45374537
scripts found in the examples/ directory definitely help here by coloring the
45384538
output.
45394539

4540-
If a request or response is rejected because HAProxy finds it is malformed, the
4541-
best thing to do is to connect to the CLI and issue "show errors", which will
4542-
report the last captured faulty request and response for each frontend and
4543-
backend, with all the necessary information to indicate precisely the first
4544-
character of the input stream that was rejected. This is sometimes needed to
4545-
prove to customers or to developers that a bug is present in their code. In this
4546-
case it is often possible to relax the checks (but still keep the captures)
4547-
using "option accept-unsafe-violations-in-http-request" or its equivalent for
4548-
responses coming from the server "option
4549-
accept-unsafe-violations-in-http-response". Please see the configuration manual
4550-
for more details.
4540+
If a HTTP/1.x request or response is rejected because HAProxy finds it is
4541+
malformed, the best thing to do is to connect to the CLI and issue "show
4542+
errors", which will report the last captured faulty HTTP/1.x request and
4543+
response for each frontend and backend, with all the necessary information to
4544+
indicate precisely the first character of the input stream that was
4545+
rejected. This is sometimes needed to prove to customers or to developers that a
4546+
bug is present in their code. In this case it is often possible to relax the
4547+
checks (but still keep the captures) using "option
4548+
accept-unsafe-violations-in-http-request" or its equivalent for responses coming
4549+
from the server "option accept-unsafe-violations-in-http-response". Please see
4550+
the configuration manual for more details.
45514551

45524552
Example :
45534553

0 commit comments

Comments
 (0)