static void
sslPeerSelectComplete(FwdServer * fs, void *data)
{
SslStateData *sslState = data;
request_t *request = sslState->request;
peer *g = NULL;
if (fs == NULL) {
ErrorState *err;
err = errorCon(ERR_CANNOT_FORWARD, HTTP_SERVICE_UNAVAILABLE);
err->request = requestLink(sslState->request);
err->callback = sslErrorComplete;
err->callback_data = sslState;
errorSend(sslState->client.fd, err);
return;
}
sslState->servers = fs;
sslState->host = fs->peer ? fs->peer->host : request->host;
if (fs->peer == NULL) {
sslState->port = request->port;
} else if (fs->peer->http_port != 0) {
sslState->port = fs->peer->http_port;
} else if ((g = peerFindByName(fs->peer->host))) {
sslState->port = g->http_port;
} else {
sslState->port = CACHE_HTTP_PORT;
}
if (fs->peer) {
sslState->request->peer_login = fs->peer->login;
sslState->request->flags.proxying = 1;
} else {
sslState->request->flags.proxying = 0;
}
#if DELAY_POOLS
/* no point using the delayIsNoDelay stuff since ssl is nice and simple */
if (g && g->options.no_delay && sslState->delay_id) {
delayUnregisterDelayIdPtr(&sslState->delay_id);
sslState->delay_id = 0;
}
#endif
hierarchyNote(&sslState->request->hier,
fs->peer ? fs->code : DIRECT,
sslState->host);
commConnectStart(sslState->server.fd,
sslState->host,
sslState->port,
sslConnectDone,
sslState);
}
peer *
netdbClosestParent(request_t * request)
{
#if USE_ICMP
peer *p = NULL;
netdbEntry *n;
const ipcache_addrs *ia;
net_db_peer *h;
int i;
n = netdbLookupHost(request->host);
if (NULL == n) {
/* try IP addr */
ia = ipcache_gethostbyname(request->host, 0);
if (NULL != ia)
n = netdbLookupAddr(ia->in_addrs[ia->cur]);
}
if (NULL == n)
return NULL;
if (0 == n->n_peers)
return NULL;
n->last_use_time = squid_curtime;
/*
* Find the parent with the least RTT to the origin server.
* Make sure we don't return a parent who is farther away than
* we are. Note, the n->peers list is pre-sorted by RTT.
*/
for (i = 0; i < n->n_peers; i++) {
h = &n->peers[i];
if (n->rtt > 0)
if (n->rtt < h->rtt)
break;
p = peerFindByName(h->peername);
if (NULL == p) /* not found */
continue;
if (neighborType(p, request) != PEER_PARENT)
continue;
if (!peerHTTPOkay(p, request)) /* not allowed */
continue;
return p;
}
#endif
return NULL;
}
