walkero
/
nghttp2
1
0
Fork 0
Code Issues Pull Requests Projects Releases 1 Wiki Activity
nghttp2/gennghttpxfun.py

156 lines
4.0 KiB
Python
Raw Normal View History

nghttpx: Refactor option name lookup
2015-07-14 16:21:38 +02:00
#!/usr/bin/env python
from gentokenlookup import gentokenlookup
OPTIONS = [
"private-key-file",
"private-key-passwd-file",
"certificate-file",
"dh-param-file",
"subcert",
"backend",
"frontend",
"workers",
"http2-max-concurrent-streams",
"log-level",
"daemon",
"http2-proxy",
"http2-bridge",
"client-proxy",
"add-x-forwarded-for",
"strip-incoming-x-forwarded-for",
"no-via",
"frontend-http2-read-timeout",
"frontend-read-timeout",
"frontend-write-timeout",
"backend-read-timeout",
"backend-write-timeout",
"stream-read-timeout",
"stream-write-timeout",
"accesslog-file",
"accesslog-syslog",
"accesslog-format",
"errorlog-file",
"errorlog-syslog",
"backend-keep-alive-timeout",
"frontend-http2-window-bits",
"backend-http2-window-bits",
"frontend-http2-connection-window-bits",
"backend-http2-connection-window-bits",
"frontend-no-tls",
"backend-no-tls",
"backend-tls-sni-field",
"pid-file",
"user",
"syslog-facility",
"backlog",
"ciphers",
"client",
"insecure",
"cacert",
"backend-ipv4",
"backend-ipv6",
"backend-http-proxy-uri",
"read-rate",
"read-burst",
"write-rate",
"write-burst",
"worker-read-rate",
"worker-read-burst",
"worker-write-rate",
"worker-write-burst",
"npn-list",
"tls-proto-list",
"verify-client",
"verify-client-cacert",
"client-private-key-file",
"client-cert-file",
"frontend-http2-dump-request-header",
"frontend-http2-dump-response-header",
"http2-no-cookie-crumbling",
"frontend-frame-debug",
"padding",
"altsvc",
"add-request-header",
"add-response-header",
"worker-frontend-connections",
"no-location-rewrite",
"no-host-rewrite",
"backend-http1-connections-per-host",
"backend-http1-connections-per-frontend",
"listener-disable-timeout",
"tls-ticket-key-file",
"rlimit-nofile",
"backend-request-buffer",
"backend-response-buffer",
"no-server-push",
"backend-http2-connections-per-worker",
"fetch-ocsp-response-file",
"ocsp-update-interval",
"no-ocsp",
"include",
nghttpx: Rename --tls-ticket-cipher as --tls-ticket-key-cipher
2015-07-28 16:49:37 +02:00
"tls-ticket-key-cipher",
nghttpx: Don't rewrite host header field by default In reverse proxy usage, backend server most likely wants to see the original header field. So this commit turns off host header rewrite by default. --no-host-rewrite option is deprecated, and if it is used, warning message is displayed. --host-rewrite option is added to enable host rewrite.
2015-07-23 16:54:56 +02:00
"host-rewrite",
nghttpx: Add shared session cache using memcached
2015-07-25 15:22:17 +02:00
"tls-session-cache-memcached",
nghttpx: Add TLS support for session cache memcached connection
2016-02-11 14:56:45 +01:00
"tls-session-cache-memcached-tls",
nghttpx: Add TLS ticket key sharing among nghttpx instances using memcached
2015-07-27 17:54:44 +02:00
"tls-ticket-key-memcached",
nghttpx: Add --tls-ticket-key-memcached-interval option
2015-07-27 18:02:33 +02:00
"tls-ticket-key-memcached-interval",
nghttpx: Add options to set maximum retry and failure when getting ticket keys
2015-07-27 18:17:29 +02:00
"tls-ticket-key-memcached-max-retry",
"tls-ticket-key-memcached-max-fail",
nghttpx: Change mruby script handling This commit changes nghttpx's mruby script handling. Previously we have 2 options to specify the mruby script file to be run on request and on response. Now they are merged into 1 option, namely --mruby-file. It now must return object. On request, the object's on_req(env) method is invoked with env object. Similarly, on response, the object's on_resp(env) method is invoked. The specification of Env object has not changed.
2015-10-05 17:10:42 +02:00
"mruby-file",
nghttpx: Implement PROXY protocol version 1 Use --accept-proxy-protocol to enable PROXY protocol handling
2015-09-06 11:39:32 +02:00
"accept-proxy-protocol",
nghttpx: Refactor option name lookup
2015-07-14 16:21:38 +02:00
"conf",
Added support for RFC 7413 (TCP Fast Open) on nghttpx proxy listening connections. Fixed code as per PR comments
2015-10-03 00:32:58 +02:00
"fastopen",
Add TLS dynamic record size behaviour command line options
2015-10-21 12:22:46 +02:00
"tls-dyn-rec-warmup-threshold",
nghttpx: Add RFC 7239 Forwarded header field support
2016-01-15 15:04:58 +01:00
"tls-dyn-rec-idle-timeout",
"add-forwarded",
"strip-incoming-forwarded",
"forwarded-by",
nghttpx: Limit header fields from backend
2016-02-06 04:25:34 +01:00
"forwarded-for",
"response-header-field-buffer",
nghttpx: Add --no-http2-cipher-black-list to allow black listed cipher suite
2016-02-06 09:05:14 +01:00
"max-response-header-fields",
nghttpx: Add request-header-field-buffer and max-request-header-fields options This commit adds request-header-field-buffer and max-request-header-fields, and deprecates header-field-buffer and max-header-fields options.
2016-02-06 09:22:23 +01:00
"request-header-field-buffer",
"max-request-header-fields",
"header-field-buffer",
"max-header-fields",
nghttpx: Add TLS support for HTTP/1 backend
2016-02-06 11:50:21 +01:00
"no-http2-cipher-black-list",
nghttpx: Add option to specify maximum number of session cache
2016-02-06 16:16:14 +01:00
"backend-http1-tls",
nghttpx: Add client auth options for session cache memcached TLS connection
2016-02-12 16:20:38 +01:00
"tls-session-cache-memcached-cert-file",
nghttpx: Add encryption support for TLS ticket key retrieval
2016-02-13 10:17:11 +01:00
"tls-session-cache-memcached-private-key-file",
nghttpx: Add options to specify address family of memcached connections
2016-02-13 10:45:23 +01:00
"tls-session-cache-memcached-address-family",
nghttpx: Add encryption support for TLS ticket key retrieval
2016-02-13 10:17:11 +01:00
"tls-ticket-key-memcached-tls",
"tls-ticket-key-memcached-cert-file",
nghttpx: Add options to specify address family of memcached connections
2016-02-13 10:45:23 +01:00
"tls-ticket-key-memcached-private-key-file",
"tls-ticket-key-memcached-address-family",
nghttpx: Deprecate --http2-max-concurrent-streams option We added 2 new option instead: --frontend-http2-max-concurrent-streams and --backend-http2-max-concurrent-streams.
2016-02-27 16:06:40 +01:00
"backend-address-family",
"frontend-http2-max-concurrent-streams",
nghttpx: Deprecate backend-http1-connections-per-frontend in favor of backend-connections-per-frontend
2016-02-28 09:11:12 +01:00
"backend-http2-max-concurrent-streams",
nghttpx: Restructure mode settings It is very hard to support multiple protocols in backend while retaining multiple mode settings. Therefore, we dropped modes except for default and HTTP/2 proxy mode. The other removed modes can be emulated using combinations of options. Now the backend connection is not encrypted by default. To enable encryption on backend connection, use --backend-tls option.
2016-02-28 13:35:26 +01:00
"backend-connections-per-frontend",
nghttpx: Deprecate backend-http1-connections-per-host in favor of backend-connections-per-host
2016-02-28 14:15:49 +01:00
"backend-tls",
nghttpx: Add custom error pages
2016-03-19 15:41:21 +01:00
"backend-connections-per-host",
"error-page",
nghttpx: Enable kqueue by default We enabled libev kqueue backend in nghttpx by default. Since it might not work on some platforms, we also added --no-kqueue option to disable it.
2016-05-06 16:10:09 +02:00
"no-kqueue",
nghttpx: Refactor option name lookup
2015-07-14 16:21:38 +02:00
]
LOGVARS = [
"remote_addr",
"time_local",
"time_iso8601",
"request",
"status",
"body_bytes_sent",
"remote_port",
"server_port",
"request_time",
"pid",
"alpn",
"ssl_cipher",
"ssl_protocol",
"ssl_session_id",
"ssl_session_reused",
]
if __name__ == '__main__':
gentokenlookup(OPTIONS, 'SHRPX_OPTID', value_type='char', comp_fun='util::strieq_l')
nghttpx: Refactor log format parsing
2015-07-14 16:36:44 +02:00
gentokenlookup(LOGVARS, 'SHRPX_LOGF', value_type='char', comp_fun='util::strieq_l', return_type='LogFragmentType', fail_value='SHRPX_LOGF_NONE')