From 91d772de3f59e7298c3f2c1d8fd90fc5cd697e01 Mon Sep 17 00:00:00 2001
From: Christopher Faulet <cfaulet@haproxy.com>
Date: Fri, 2 Oct 2026 21:32:14 +0200
Subject: [PATCH] REGTESTS: filters: Check non-HTX Lua filters in HTTP chains

Configure enabled non-HTX Lua rewrites alongside compatible trace and
bandwidth filters in HTTP mode. Check that neither request nor response
bodies are rewritten and the compatible chain still forwards correctly,
with both instances and legacy declarations.

Reuse the TCP rewrite fixture so the compatibility check complements its
positive TCP payload tests.
---
 reg-tests/filters/lua-non-htx.vtc | 61 +++++++++++++++++++++++++++++++
 1 file changed, 61 insertions(+)
 create mode 100644 reg-tests/filters/lua-non-htx.vtc

diff --git a/reg-tests/filters/lua-non-htx.vtc b/reg-tests/filters/lua-non-htx.vtc
new file mode 100644
index 000000000..121d33b50
--- /dev/null
+++ b/reg-tests/filters/lua-non-htx.vtc
@@ -0,0 +1,61 @@
+varnishtest "Non-HTX Lua filters are skipped without disabling compatible filters"
+
+feature cmd "$HAPROXY_PROGRAM -cc 'feature(LUA)'"
+feature ignore_unknown_macro
+
+server s1 {
+    rxreq
+    expect req.body == "aaaabb"
+    txresp -body "aabbcc"
+    close
+    accept
+    rxreq
+    expect req.body == "aaaabb"
+    txresp -body "aabbcc"
+} -start
+
+haproxy h1 -conf {
+    global
+        nbthread 1
+        tune.lua.bool-sample-conversion normal
+        lua-load "${testdir}/lua-tcp-rewrite.lua"
+    defaults
+        mode http
+        timeout connect "${HAPROXY_TEST_TIMEOUT-5s}"
+        timeout client "${HAPROXY_TEST_TIMEOUT-5s}"
+        timeout server "${HAPROXY_TEST_TIMEOUT-5s}"
+
+    listen instances
+        bind "fd@${instances}"
+        filter-config lua id rewrite-a enabled
+        filter-config lua id rewrite-b enabled
+        filter-config trace id trace enabled quiet
+        filter-config bwlim-in id upload enabled default-limit 1m default-period 1s
+        http-request set-bandwidth-limit upload
+        server s1 ${s1_addr}:${s1_port}
+
+    listen legacy
+        bind "fd@${legacy}"
+        filter lua.rewrite-a
+        filter lua.rewrite-b
+        filter trace quiet
+        filter bwlim-in upload default-limit 1m default-period 1s
+        http-request set-bandwidth-limit upload
+        server s1 ${s1_addr}:${s1_port}
+} -start
+
+# The instances are enabled, but the registered Lua classes have no HTX
+# flag. Neither channel may be rewritten in HTTP mode, in either model.
+client c1 -connect ${h1_instances_sock} {
+    txreq -req POST -body "aaaabb"
+    rxresp
+    expect resp.status == 200
+    expect resp.body == "aabbcc"
+} -run
+
+client c2 -connect ${h1_legacy_sock} {
+    txreq -req POST -body "aaaabb"
+    rxresp
+    expect resp.status == 200
+    expect resp.body == "aabbcc"
+} -run
-- 
2.47.3