upstream/haproxy
1
0
Fork 0
mirror of https://github.com/haproxy/haproxy.git synced 2026-02-18 18:19:39 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 16

BUG/MEDIUM: h3: reject frontend CONNECT as currently not implemented

Browse source 
HTTP/3 CONNECT transcoding is not properly implemented on the frontend
side. Neither tunnel mode of application nor extended connect are
currently functional.

Clarify this situation by rejecting any CONNETC attempts on the frontend
side. The stream is thus now closed via a RESET_STREAM with error code
REQUEST_REJECTED.

This should be backported to every stable versions.
This commit is contained in:
Amaury Denoyelle 2026-02-16 16:33:41 +01:00
parent f3003d1508
commit 4c275c7d17
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
src/h3.c
View file

@ -812,6 +812,11 @@ static ssize_t h3_req_headers_to_htx(struct qcs *qcs, const struct buffer *buf,
goto out;
}
}
else {
h3s->err = H3_ERR_REQUEST_REJECTED;
len = -1;
goto out;
}
flags |= HTX_SL_F_VER_11;
flags |= HTX_SL_F_XFER_LEN;