mirror of
https://github.com/TeaOSLab/EdgeAPI.git
synced 2025-11-05 01:20:25 +08:00
464 lines
12 KiB
Go
464 lines
12 KiB
Go
package models
|
|
|
|
import (
|
|
"encoding/json"
|
|
"github.com/TeaOSLab/EdgeAPI/internal/configs"
|
|
"github.com/TeaOSLab/EdgeAPI/internal/errors"
|
|
"github.com/TeaOSLab/EdgeAPI/internal/utils"
|
|
"github.com/TeaOSLab/EdgeCommon/pkg/rpc/pb"
|
|
"github.com/TeaOSLab/EdgeCommon/pkg/serverconfigs/shared"
|
|
_ "github.com/go-sql-driver/mysql"
|
|
"github.com/iwind/TeaGo/Tea"
|
|
"github.com/iwind/TeaGo/dbs"
|
|
"github.com/iwind/TeaGo/lists"
|
|
"github.com/iwind/TeaGo/logs"
|
|
"github.com/iwind/TeaGo/types"
|
|
timeutil "github.com/iwind/TeaGo/utils/time"
|
|
"net"
|
|
"net/http"
|
|
"regexp"
|
|
"sort"
|
|
"strconv"
|
|
"strings"
|
|
"sync"
|
|
"time"
|
|
)
|
|
|
|
type HTTPAccessLogDAO dbs.DAO
|
|
|
|
var SharedHTTPAccessLogDAO *HTTPAccessLogDAO
|
|
|
|
func init() {
|
|
dbs.OnReady(func() {
|
|
SharedHTTPAccessLogDAO = NewHTTPAccessLogDAO()
|
|
})
|
|
}
|
|
|
|
func NewHTTPAccessLogDAO() *HTTPAccessLogDAO {
|
|
return dbs.NewDAO(&HTTPAccessLogDAO{
|
|
DAOObject: dbs.DAOObject{
|
|
DB: Tea.Env,
|
|
Table: "edgeHTTPAccessLogs",
|
|
Model: new(HTTPAccessLog),
|
|
PkName: "id",
|
|
},
|
|
}).(*HTTPAccessLogDAO)
|
|
}
|
|
|
|
// CreateHTTPAccessLogs 创建访问日志
|
|
func (this *HTTPAccessLogDAO) CreateHTTPAccessLogs(tx *dbs.Tx, accessLogs []*pb.HTTPAccessLog) error {
|
|
dao := randomHTTPAccessLogDAO()
|
|
if dao == nil {
|
|
dao = &HTTPAccessLogDAOWrapper{
|
|
DAO: SharedHTTPAccessLogDAO,
|
|
NodeId: 0,
|
|
}
|
|
}
|
|
return this.CreateHTTPAccessLogsWithDAO(tx, dao, accessLogs)
|
|
}
|
|
|
|
// CreateHTTPAccessLogsWithDAO 使用特定的DAO创建访问日志
|
|
func (this *HTTPAccessLogDAO) CreateHTTPAccessLogsWithDAO(tx *dbs.Tx, daoWrapper *HTTPAccessLogDAOWrapper, accessLogs []*pb.HTTPAccessLog) error {
|
|
if daoWrapper == nil {
|
|
return errors.New("dao should not be nil")
|
|
}
|
|
if len(accessLogs) == 0 {
|
|
return nil
|
|
}
|
|
|
|
dao := daoWrapper.DAO
|
|
|
|
// TODO 改成事务批量提交，以加快速度
|
|
|
|
for _, accessLog := range accessLogs {
|
|
day := timeutil.Format("Ymd", time.Unix(accessLog.Timestamp, 0))
|
|
tableDef, err := findHTTPAccessLogTable(dao.Instance, day, false)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
fields := map[string]interface{}{}
|
|
fields["serverId"] = accessLog.ServerId
|
|
fields["nodeId"] = accessLog.NodeId
|
|
fields["status"] = accessLog.Status
|
|
fields["createdAt"] = accessLog.Timestamp
|
|
fields["requestId"] = accessLog.RequestId + strconv.FormatInt(time.Now().UnixNano(), 10) + configs.PaddingId
|
|
fields["firewallPolicyId"] = accessLog.FirewallPolicyId
|
|
fields["firewallRuleGroupId"] = accessLog.FirewallRuleGroupId
|
|
fields["firewallRuleSetId"] = accessLog.FirewallRuleSetId
|
|
fields["firewallRuleId"] = accessLog.FirewallRuleId
|
|
|
|
// TODO 根据集群、服务设置获取IP
|
|
if tableDef.HasRemoteAddr {
|
|
fields["remoteAddr"] = accessLog.RemoteAddr
|
|
}
|
|
if tableDef.HasDomain {
|
|
fields["domain"] = accessLog.Host
|
|
}
|
|
|
|
content, err := json.Marshal(accessLog)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
fields["content"] = content
|
|
|
|
_, err = dao.Query(tx).
|
|
Table(tableDef.Name).
|
|
Sets(fields).
|
|
Insert()
|
|
if err != nil {
|
|
// 是否为 Error 1146: Table 'xxx.xxx' doesn't exist 如果是，则创建表之后重试
|
|
if strings.Contains(err.Error(), "1146") {
|
|
tableDef, err = findHTTPAccessLogTable(dao.Instance, day, true)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
_, err = dao.Query(tx).
|
|
Table(tableDef.Name).
|
|
Sets(fields).
|
|
Insert()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
} else {
|
|
logs.Println("HTTP_ACCESS_LOG", err.Error())
|
|
}
|
|
}
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
// ListAccessLogs 读取往前的 单页访问日志
|
|
func (this *HTTPAccessLogDAO) ListAccessLogs(tx *dbs.Tx, lastRequestId string,
|
|
size int64,
|
|
day string,
|
|
serverId int64,
|
|
reverse bool,
|
|
hasError bool,
|
|
firewallPolicyId int64,
|
|
firewallRuleGroupId int64,
|
|
firewallRuleSetId int64,
|
|
hasFirewallPolicy bool,
|
|
userId int64,
|
|
keyword string,
|
|
ip string,
|
|
domain string) (result []*HTTPAccessLog, nextLastRequestId string, hasMore bool, err error) {
|
|
if len(day) != 8 {
|
|
return
|
|
}
|
|
|
|
// 限制能查询的最大条数，防止占用内存过多
|
|
if size > 1000 {
|
|
size = 1000
|
|
}
|
|
|
|
result, nextLastRequestId, err = this.listAccessLogs(tx, lastRequestId, size, day, serverId, reverse, hasError, firewallPolicyId, firewallRuleGroupId, firewallRuleSetId, hasFirewallPolicy, userId, keyword, ip, domain)
|
|
if err != nil || int64(len(result)) < size {
|
|
return
|
|
}
|
|
|
|
moreResult, _, _ := this.listAccessLogs(tx, nextLastRequestId, 1, day, serverId, reverse, hasError, firewallPolicyId, firewallRuleGroupId, firewallRuleSetId, hasFirewallPolicy, userId, keyword, ip, domain)
|
|
hasMore = len(moreResult) > 0
|
|
return
|
|
}
|
|
|
|
// 读取往前的单页访问日志
|
|
func (this *HTTPAccessLogDAO) listAccessLogs(tx *dbs.Tx, lastRequestId string, size int64, day string, serverId int64, reverse bool, hasError bool, firewallPolicyId int64, firewallRuleGroupId int64, firewallRuleSetId int64, hasFirewallPolicy bool, userId int64, keyword string, ip string, domain string) (result []*HTTPAccessLog, nextLastRequestId string, err error) {
|
|
if size <= 0 {
|
|
return nil, lastRequestId, nil
|
|
}
|
|
|
|
serverIds := []int64{}
|
|
if userId > 0 {
|
|
serverIds, err = SharedServerDAO.FindAllEnabledServerIdsWithUserId(tx, userId)
|
|
if err != nil {
|
|
return
|
|
}
|
|
if len(serverIds) == 0 {
|
|
return
|
|
}
|
|
}
|
|
|
|
accessLogLocker.RLock()
|
|
daoList := []*HTTPAccessLogDAOWrapper{}
|
|
for _, daoWrapper := range httpAccessLogDAOMapping {
|
|
daoList = append(daoList, daoWrapper)
|
|
}
|
|
accessLogLocker.RUnlock()
|
|
|
|
if len(daoList) == 0 {
|
|
daoList = []*HTTPAccessLogDAOWrapper{{
|
|
DAO: SharedHTTPAccessLogDAO,
|
|
NodeId: 0,
|
|
}}
|
|
}
|
|
|
|
locker := sync.Mutex{}
|
|
|
|
count := len(daoList)
|
|
wg := &sync.WaitGroup{}
|
|
wg.Add(count)
|
|
for _, daoWrapper := range daoList {
|
|
go func(daoWrapper *HTTPAccessLogDAOWrapper) {
|
|
defer wg.Done()
|
|
|
|
dao := daoWrapper.DAO
|
|
|
|
tableName, hasRemoteAddrField, hasDomainField, exists, err := findHTTPAccessLogTableName(dao.Instance, day)
|
|
if !exists {
|
|
// 表格不存在则跳过
|
|
return
|
|
}
|
|
if err != nil {
|
|
logs.Println("[DB_NODE]" + err.Error())
|
|
return
|
|
}
|
|
|
|
query := dao.Query(tx)
|
|
|
|
// 条件
|
|
if serverId > 0 {
|
|
query.Attr("serverId", serverId)
|
|
} else if userId > 0 && len(serverIds) > 0 {
|
|
query.Attr("serverId", serverIds).
|
|
Reuse(false)
|
|
}
|
|
if hasError {
|
|
query.Where("status>=400")
|
|
}
|
|
if firewallPolicyId > 0 {
|
|
query.Attr("firewallPolicyId", firewallPolicyId)
|
|
}
|
|
if firewallRuleGroupId > 0 {
|
|
query.Attr("firewallRuleGroupId", firewallRuleGroupId)
|
|
}
|
|
if firewallRuleSetId > 0 {
|
|
query.Attr("firewallRuleSetId", firewallRuleSetId)
|
|
}
|
|
if hasFirewallPolicy {
|
|
query.Where("firewallPolicyId>0")
|
|
query.UseIndex("firewallPolicyId")
|
|
}
|
|
|
|
// keyword
|
|
if len(ip) > 0 {
|
|
// TODO 支持IP范围
|
|
if hasRemoteAddrField {
|
|
// IP格式
|
|
if strings.Contains(ip, ",") || strings.Contains(ip, "-") {
|
|
rangeConfig, err := shared.ParseIPRange(ip)
|
|
if err == nil {
|
|
if len(rangeConfig.IPFrom) > 0 && len(rangeConfig.IPTo) > 0 {
|
|
query.Between("INET_ATON(remoteAddr)", utils.IP2Long(rangeConfig.IPFrom), utils.IP2Long(rangeConfig.IPTo))
|
|
}
|
|
}
|
|
} else {
|
|
query.Attr("remoteAddr", ip)
|
|
query.UseIndex("remoteAddr")
|
|
}
|
|
} else {
|
|
query.Where("JSON_EXTRACT(content, '$.remoteAddr')=:ip1").
|
|
Param("ip1", ip)
|
|
}
|
|
}
|
|
if len(domain) > 0 {
|
|
if hasDomainField {
|
|
if strings.Contains(domain, "*") {
|
|
domain = strings.ReplaceAll(domain, "*", "%")
|
|
domain = regexp.MustCompile(`[^a-zA-Z0-9-.%]`).ReplaceAllString(domain, "")
|
|
query.Where("domain LIKE :host2").
|
|
Param("host2", domain)
|
|
} else {
|
|
query.Attr("domain", domain)
|
|
query.UseIndex("domain")
|
|
}
|
|
} else {
|
|
query.Where("JSON_EXTRACT(content, '$.host')=:host1").
|
|
Param("host1", domain)
|
|
}
|
|
}
|
|
if len(keyword) > 0 {
|
|
// remoteAddr
|
|
if hasRemoteAddrField && net.ParseIP(keyword) != nil {
|
|
query.Attr("remoteAddr", keyword)
|
|
} else if hasRemoteAddrField && regexp.MustCompile(`^ip:.+`).MatchString(keyword) {
|
|
keyword = keyword[3:]
|
|
pieces := strings.SplitN(keyword, ",", 2)
|
|
if len(pieces) == 1 || len(pieces[1]) == 0 {
|
|
query.Attr("remoteAddr", pieces[0])
|
|
} else {
|
|
query.Between("INET_ATON(remoteAddr)", utils.IP2Long(pieces[0]), utils.IP2Long(pieces[1]))
|
|
}
|
|
} else {
|
|
if regexp.MustCompile(`^ip:.+`).MatchString(keyword) {
|
|
keyword = keyword[3:]
|
|
}
|
|
|
|
useOriginKeyword := false
|
|
|
|
where := "JSON_EXTRACT(content, '$.remoteAddr') LIKE :keyword OR JSON_EXTRACT(content, '$.requestURI') LIKE :keyword OR JSON_EXTRACT(content, '$.host') LIKE :keyword OR JSON_EXTRACT(content, '$.userAgent') LIKE :keyword"
|
|
|
|
jsonKeyword, err := json.Marshal(keyword)
|
|
if err == nil {
|
|
where += " OR JSON_CONTAINS(content, :jsonKeyword, '$.tags')"
|
|
query.Param("jsonKeyword", jsonKeyword)
|
|
}
|
|
|
|
// 请求方法
|
|
if keyword == http.MethodGet ||
|
|
keyword == http.MethodPost ||
|
|
keyword == http.MethodHead ||
|
|
keyword == http.MethodConnect ||
|
|
keyword == http.MethodPut ||
|
|
keyword == http.MethodTrace ||
|
|
keyword == http.MethodOptions ||
|
|
keyword == http.MethodDelete ||
|
|
keyword == http.MethodPatch {
|
|
where += " OR JSON_EXTRACT(content, '$.requestMethod')=:originKeyword"
|
|
useOriginKeyword = true
|
|
}
|
|
|
|
// 响应状态码
|
|
if regexp.MustCompile(`^\d{3}$`).MatchString(keyword) {
|
|
where += " OR JSON_EXTRACT(content, '$.status')=:intKeyword"
|
|
query.Param("intKeyword", types.Int(keyword))
|
|
}
|
|
|
|
if regexp.MustCompile(`^\d{3}-\d{3}$`).MatchString(keyword) {
|
|
pieces := strings.Split(keyword, "-")
|
|
where += " OR JSON_EXTRACT(content, '$.status') BETWEEN :intKeyword1 AND :intKeyword2"
|
|
query.Param("intKeyword1", types.Int(pieces[0]))
|
|
query.Param("intKeyword2", types.Int(pieces[1]))
|
|
}
|
|
|
|
query.Where("("+where+")").
|
|
Param("keyword", "%"+keyword+"%")
|
|
if useOriginKeyword {
|
|
query.Param("originKeyword", keyword)
|
|
}
|
|
}
|
|
}
|
|
|
|
// offset
|
|
if len(lastRequestId) > 0 {
|
|
if !reverse {
|
|
query.Where("requestId<:requestId").
|
|
Param("requestId", lastRequestId)
|
|
} else {
|
|
query.Where("requestId>:requestId").
|
|
Param("requestId", lastRequestId)
|
|
}
|
|
}
|
|
|
|
if !reverse {
|
|
query.Desc("requestId")
|
|
} else {
|
|
query.Asc("requestId")
|
|
}
|
|
|
|
// 开始查询
|
|
ones, err := query.
|
|
Table(tableName).
|
|
Limit(size).
|
|
FindAll()
|
|
if err != nil {
|
|
logs.Println("[DB_NODE]" + err.Error())
|
|
return
|
|
}
|
|
locker.Lock()
|
|
for _, one := range ones {
|
|
accessLog := one.(*HTTPAccessLog)
|
|
result = append(result, accessLog)
|
|
}
|
|
locker.Unlock()
|
|
}(daoWrapper)
|
|
}
|
|
wg.Wait()
|
|
|
|
if len(result) == 0 {
|
|
return nil, lastRequestId, nil
|
|
}
|
|
|
|
// 按照requestId排序
|
|
sort.Slice(result, func(i, j int) bool {
|
|
if !reverse {
|
|
return result[i].RequestId > result[j].RequestId
|
|
} else {
|
|
return result[i].RequestId < result[j].RequestId
|
|
}
|
|
})
|
|
|
|
if int64(len(result)) > size {
|
|
result = result[:size]
|
|
}
|
|
|
|
requestId := result[len(result)-1].RequestId
|
|
if reverse {
|
|
lists.Reverse(result)
|
|
}
|
|
|
|
if !reverse {
|
|
return result, requestId, nil
|
|
} else {
|
|
return result, requestId, nil
|
|
}
|
|
}
|
|
|
|
// FindAccessLogWithRequestId 根据请求ID获取访问日志
|
|
func (this *HTTPAccessLogDAO) FindAccessLogWithRequestId(tx *dbs.Tx, requestId string) (*HTTPAccessLog, error) {
|
|
if !regexp.MustCompile(`^\d{30,}`).MatchString(requestId) {
|
|
return nil, errors.New("invalid requestId")
|
|
}
|
|
|
|
accessLogLocker.RLock()
|
|
daoList := []*HTTPAccessLogDAOWrapper{}
|
|
for _, daoWrapper := range httpAccessLogDAOMapping {
|
|
daoList = append(daoList, daoWrapper)
|
|
}
|
|
accessLogLocker.RUnlock()
|
|
|
|
if len(daoList) == 0 {
|
|
daoList = []*HTTPAccessLogDAOWrapper{{
|
|
DAO: SharedHTTPAccessLogDAO,
|
|
NodeId: 0,
|
|
}}
|
|
}
|
|
|
|
count := len(daoList)
|
|
wg := &sync.WaitGroup{}
|
|
wg.Add(count)
|
|
var result *HTTPAccessLog = nil
|
|
day := timeutil.FormatTime("Ymd", types.Int64(requestId[:10]))
|
|
for _, daoWrapper := range daoList {
|
|
go func(daoWrapper *HTTPAccessLogDAOWrapper) {
|
|
defer wg.Done()
|
|
|
|
dao := daoWrapper.DAO
|
|
|
|
tableName, _, _, exists, err := findHTTPAccessLogTableName(dao.Instance, day)
|
|
if err != nil {
|
|
logs.Println("[DB_NODE]" + err.Error())
|
|
return
|
|
}
|
|
if !exists {
|
|
return
|
|
}
|
|
|
|
one, err := dao.Query(tx).
|
|
Table(tableName).
|
|
Attr("requestId", requestId).
|
|
Find()
|
|
if err != nil {
|
|
logs.Println("[DB_NODE]" + err.Error())
|
|
return
|
|
}
|
|
if one != nil {
|
|
result = one.(*HTTPAccessLog)
|
|
}
|
|
}(daoWrapper)
|
|
}
|
|
wg.Wait()
|
|
return result, nil
|
|
}
|