ezelkow1 opened a new pull request #7212: URL: https://github.com/apache/trafficserver/pull/7212
From what I can tell the issue that causes ipallow reloading to have problems is related to stale acl_records. As found by @elsloo , you can produce the issue when testing with KA sessions since they will keep stale acl_records around, so after a reload is done and the timeout to free them has expired you end up with an invalid reference to an ipallow/acl object. It looks like what was happening is that the httpsession's acl_record is set only once while creating a new session, so that is what becomes stale. I added a get function for the session's acl record which then fetches the parent acl record which then uses the ipallow scoped config to get a new acl based on the current client IP. In testing this seems to have alleviated the issue that I can see ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
