MINOR: global: add fd-hard-limit

Author: mjuraga

config-parser/section-parsers.go

@@ -249,6 +249,7 @@ func (p *configParser) getGlobalParser() *Parsers { //nolint: maintidx
 	addParser(parser, &sequence, &simple.Number{Name: "maxsslconn"})
 	addParser(parser, &sequence, &simple.Number{Name: "maxsslrate"})
 	addParser(parser, &sequence, &simple.Number{Name: "maxzlibmem"})
+	addParser(parser, &sequence, &simple.Number{Name: "fd-hard-limit"})
 	addParser(parser, &sequence, &simple.String{Name: "pidfile"})
 	addParser(parser, &sequence, &parsers.Socket{})
 	addParser(parser, &sequence, &parsers.StatsTimeout{})

configuration/global.go

@@ -414,6 +414,15 @@ func parsePerformanceOptions(p parser.Parser) (*models.PerformanceOptions, error
 		options.Maxzlibmem = maxzlibmem
 	}
 
+	fdHardLimit, err := parseInt64POption(p, "fd-hard-limit")
+	if err != nil {
+		return nil, err
+	}
+	if fdHardLimit != nil {
+		isEmpty = false
+		options.FdHardLimit = fdHardLimit
+	}
+
 	noepoll, err := parseBoolOption(p, "noepoll")
 	if err != nil {
 		return nil, err
@@ -2790,6 +2799,10 @@ func serializePerformanceOptions(p parser.Parser, options *models.PerformanceOpt
 		return err
 	}
 
+	if err := serializeInt64POption(p, "fd-hard-limit", options.FdHardLimit); err != nil {
+		return err
+	}
+
 	if err := serializeBoolOption(p, "noepoll", options.Noepoll); err != nil {
 		return err
 	}

models/performance_options.go

@@ -1128,6 +1128,9 @@ definitions:
     properties:
       busy_polling:
         type: boolean
+      fd_hard_limit:
+        type: integer
+        x-nullable: true
       max_spread_checks:
         minimum: 0
         type: integer

models/performance_options_compare.go

@@ -956,6 +956,9 @@ performance_options:
       x-nullable: true
       x-duration: true
       x-default-unit: ms
+    fd_hard_limit:
+      type: integer
+      x-nullable: true
     maxconn:
       type: integer
       x-display-name: Max Connections

models/performance_options_compare_test.go

@@ -257,6 +257,7 @@ global
   log 127.0.0.1:10002 sample 2:4 local0
   harden.reject-privileged-ports.tcp on
   profiling.tasks enabled
+  fd-hard-limit 4096
   thread-hard-limit 77
   ssl-security-level 3
   http-err-codes 400,402-444,446-480,490 -450 +500

specification/build/haproxy_spec.yaml

@@ -40,6 +40,7 @@
             "server_state_base": "/path",
             "server_state_file": "serverstatefile",
             "spread_checks": 10,
+            "fd_hard_limit": 4096,
             "thread_hard_limit": 77
         },
         "ssl_options": {