From cac1fa71aef398e35ae51f6f41f90fc94061de9f Mon Sep 17 00:00:00 2001
From: Frank Wall <fw@moov.de>
Date: Mon, 22 Dec 2025 21:04:51 +0100
Subject: [PATCH] net/haproxy: add support for http-request silent-drop

---
 net/haproxy/pkg-descr                                          | 3 +++
 .../src/opnsense/mvc/app/models/OPNsense/HAProxy/HAProxy.xml   | 1 +
 .../opnsense/service/templates/OPNsense/HAProxy/haproxy.conf   | 2 ++
 3 files changed, 6 insertions(+)

diff --git a/net/haproxy/pkg-descr b/net/haproxy/pkg-descr
index 13a4f948b..348f8e5b1 100644
--- a/net/haproxy/pkg-descr
+++ b/net/haproxy/pkg-descr
@@ -6,6 +6,9 @@ very high loads while needing persistence or Layer7 processing.
 Plugin Changelog
 ================
 
+Added:
+* add support for "http-request silent-drop"
+
 4.6
 
 Changed:
diff --git a/net/haproxy/src/opnsense/mvc/app/models/OPNsense/HAProxy/HAProxy.xml b/net/haproxy/src/opnsense/mvc/app/models/OPNsense/HAProxy/HAProxy.xml
index e1a40e1c5..aad51398e 100644
--- a/net/haproxy/src/opnsense/mvc/app/models/OPNsense/HAProxy/HAProxy.xml
+++ b/net/haproxy/src/opnsense/mvc/app/models/OPNsense/HAProxy/HAProxy.xml
@@ -2259,6 +2259,7 @@
                         <http-request_replace-value>http-request header replace value</http-request_replace-value>
                         <http-request_set-path>http-request set-path</http-request_set-path>
                         <http-request_set-var>http-request set-var</http-request_set-var>
+                        <http-request_silent-drop>http-request silent-drop</http-request_silent-drop>
                         <http-response_allow>http-response allow</http-response_allow>
                         <http-response_deny>http-response deny</http-response_deny>
                         <http-response_lua>http-response lua script</http-response_lua>
diff --git a/net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf b/net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf
index 642a84e4a..a11ba548d 100644
--- a/net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf
+++ b/net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf
@@ -561,6 +561,8 @@
 {%             set action_enabled = '0' %}
     # ERROR: missing parameters
 {%           endif %}
+{%         elif action_data.type == 'http-request_silent-drop' %}
+{%           do action_options.append('http-request silent-drop') %}
 {%         elif action_data.type == 'http-response_allow' %}
 {%           do action_options.append('http-response allow') %}
 {%         elif action_data.type == 'http-response_deny' %}