WEB

Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
Co-Authored-By: John Preston <17900494+john-preston@users.noreply.github.com>

src/config/hot_reload/fields.rs

@@ -337,9 +337,15 @@ pub(super) fn overlay_hot_fields(old: &ProxyConfig, new: &ProxyConfig) -> ProxyC
     cfg.access.user_max_unique_ips_global_each = new.access.user_max_unique_ips_global_each;
     cfg.access.user_max_unique_ips_mode = new.access.user_max_unique_ips_mode;
     cfg.access.user_max_unique_ips_window_secs = new.access.user_max_unique_ips_window_secs;
+    let process_limits = cfg.web.limits.clone();
+    cfg.web = new.web.clone();
+    cfg.web.limits = process_limits;
     if cfg.rebuild_runtime_user_auth().is_err() {
         cfg.runtime_user_auth = None;
     }
+    if cfg.rebuild_runtime_web().is_err() {
+        cfg.web = old.web.clone();
+    }
 
     cfg
 }

src/config/hot_reload/tests.rs

@@ -123,6 +123,7 @@ fn listener_synlimit_fields_are_process_owned() {
     let mut old = sample_config();
     old.server.listeners.push(ListenerConfig {
         ip: "0.0.0.0".parse().unwrap(),
+        transport: crate::config::ListenerTransport::Mtproxy,
         port: Some(443),
         client_mss: None,
         synlimit: SynLimitMode::Iptables,
@@ -138,6 +139,8 @@ fn listener_synlimit_fields_are_process_owned() {
         announce_ip: None,
         proxy_protocol: None,
         reuse_allow: false,
+        web_client_ip_source: crate::config::WebClientIpSource::XForwardedFor,
+        web_trusted_proxy_cidrs: Vec::new(),
     });
     let mut new = old.clone();
     new.server.port = 8443;