From ba43108f552fc3f6e7ef9ba8741c7612d948fb2c Mon Sep 17 00:00:00 2001 From: Michael Pardatscher Date: Fri, 25 Sep 2026 17:45:56 +0000 Subject: haproxy: T8977: allow a listen-address that is not assigned to an interface A listen-address had to be present on an interface at commit time, which refused a perfectly valid configuration: such an address is commonly supplied by a failover mechanism only after the commit, and the kernel permits binding it as soon as the non-local bind sysctl is set. That is accepted now. Co-authored-by: Christian Breunig --- src/conf_mode/load-balancing_haproxy.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src') diff --git a/src/conf_mode/load-balancing_haproxy.py b/src/conf_mode/load-balancing_haproxy.py index f95d05151..3a7fa7f01 100644 --- a/src/conf_mode/load-balancing_haproxy.py +++ b/src/conf_mode/load-balancing_haproxy.py @@ -81,7 +81,7 @@ def verify(lb): if '%' in listen_address: listen_address, *_ = listen_address.split('%', maxsplit=1) - if not is_addr_assigned(listen_address): + if not is_addr_assigned(listen_address, allow_nonlocal=True): raise ConfigError( f'listen-address "{listen_address}" not assigned on any interface!' ) -- cgit v1.2.3