bneradt commented on PR #13788: URL: https://github.com/apache/trafficserver/pull/13788#issuecomment-5998436591
@bryancall Addressed the PERMISSIVE reuse logging issue. ENFORCED reuse rejections stay on the `ssl_verify` debug channel with `Action=RejectReuse`; PERMISSIVE mismatches now use `SiteThrottledWarning` with `Action=ContinueReuse`, preserving visibility in diags.log without flooding it. The regression test now covers both policies. ENFORCED excludes "Origin hostname" from diags.log while checking the debug rejection. PERMISSIVE runs with debug logging disabled, verifies the warning and the successful response, and excludes a bar.com handshake warning to confirm the established session was reused. Local validation passed in the ATS build container: formatting, a full build/install, 72 focused CTest tests, and `h2_origin_cert_reverify`, `h2_to_origin_pool_reuse`, and `http2_flow_control` AuTests. The corresponding 10.0.x mirror PR, yahoo-Edge/edge-mirror-trafficserver#1296, has the same changes and passed its full build/install, five selected CTest suites, and the same three AuTests. I agree that a send-window-blocked counter would improve default-on visibility. I am leaving that as a follow-up, as suggested in the review. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
