BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
authorChristopher Faulet <cfaulet@haproxy.com>
Tue, 9 Nov 2021 15:33:25 +0000 (16:33 +0100)
committerChristopher Faulet <cfaulet@haproxy.com>
Tue, 23 Nov 2021 15:34:07 +0000 (16:34 +0100)
commit0c31f63f981a730e21bd4edd85438075de4ba706
tree79b5f55a324235b716e989e6c5e5ed06d538e918
parent95f79d9959dde8c56b52a5425bf615c90699cae0
BUG/MINOR: http-ana: Apply stop to the current section for http-response rules

A TCP/HTTP action can stop the rules evaluation. However, it should be
applied on the current section only. For instance, for http-requests rules,
an "allow" on a frontend must stop evaluation of rules defined in this
frontend. But the backend rules, if any, must still be evaluated.

For http-response rulesets, according the configuration manual, the same
must be true. Only "allow" action is concerned. However, since the
beginning, this action stops evaluation of all remaining rules, not only
those of the current section.

This patch may be backported to all supported versions. But it is not so
critical because the bug exists since a while. I doubt it will break any
existing configuration because the current behavior is
counterintuitive.

(cherry picked from commit 46f46df300b5258f05e3bcf72e409f8629e8b63f)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
(cherry picked from commit b4c4a977eb8be158f6735b53861d2530e4ad41b5)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
reg-tests/http-rules/h1or2_to_h1c.vtc
src/http_ana.c