TRKJ/EdgeCommon
2
0
Fork 0
mirror of https://github.com/TeaOSLab/EdgeCommon.git synced 2026-04-23 05:35:18 +08:00
Code Issues Packages Projects Releases Wiki Activity

优化WAF区域/省份封禁：增加仅允许、增加中国香港澳台、内地等特殊区域

Browse Source
This commit is contained in:
GoEdgeLab
2023-07-07 09:51:30 +08:00
parent d7b8e9f179
commit 89eb516dd0
6 changed files with 341 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

180
pkg/serverconfigs/firewallconfigs/http_firewall_region_config_test.go Normal file
View File

@@ -0,0 +1,180 @@
// Copyright 2023 GoEdge CDN goedge.cdn@gmail.com. All rights reserved. Official site: https://goedge.cn .
package firewallconfigs_test
import (
"github.com/TeaOSLab/EdgeCommon/pkg/serverconfigs/firewallconfigs"
"github.com/TeaOSLab/EdgeCommon/pkg/serverconfigs/regionconfigs"
"github.com/iwind/TeaGo/assert"
"testing"
)
func TestHTTPFirewallRegionConfig_IsAllowed(t *testing.T) {
var a = assert.NewAssertion(t)
{
var config = &firewallconfigs.HTTPFirewallRegionConfig{}
config.AllowCountryIds = []int64{1, 2, 3}
config.DenyCountryIds = []int64{4, 5, 6}
err := config.Init()
if err != nil {
t.Fatal(err)
}
a.IsTrue(config.IsAllowedCountry(1, 1))
a.IsFalse(config.IsAllowedCountry(0, 0))
a.IsFalse(config.IsAllowedCountry(4, 0))
}
{
var config = &firewallconfigs.HTTPFirewallRegionConfig{}
config.AllowCountryIds = []int64{1, 2, 3}
config.DenyCountryIds = []int64{1, 2, 3}
err := config.Init()
if err != nil {
t.Fatal(err)
}
a.IsTrue(config.IsAllowedCountry(1, 1))
a.IsFalse(config.IsAllowedCountry(0, 0))
a.IsFalse(config.IsAllowedCountry(4, 0))
}
{
var config = &firewallconfigs.HTTPFirewallRegionConfig{}
config.AllowCountryIds = []int64{}
config.DenyCountryIds = []int64{1, 2, 3}
err := config.Init()
if err != nil {
t.Fatal(err)
}
a.IsFalse(config.IsAllowedCountry(1, 0))
a.IsTrue(config.IsAllowedCountry(0, 0))
a.IsTrue(config.IsAllowedCountry(4, 0))
}
{
var config = &firewallconfigs.HTTPFirewallRegionConfig{}
config.AllowProvinceIds = []int64{1, 2, 3}
config.DenyProvinceIds = []int64{4, 5, 6}
err := config.Init()
if err != nil {
t.Fatal(err)
}
a.IsTrue(config.IsAllowedProvince(1, 1))
a.IsFalse(config.IsAllowedProvince(1, 0))
a.IsFalse(config.IsAllowedProvince(1, 4))
}
{
var config = &firewallconfigs.HTTPFirewallRegionConfig{}
config.AllowProvinceIds = []int64{}
config.DenyProvinceIds = []int64{4, 5, 6}
err := config.Init()
if err != nil {
t.Fatal(err)
}
a.IsTrue(config.IsAllowedProvince(1, 1))
a.IsTrue(config.IsAllowedProvince(1, 3))
a.IsFalse(config.IsAllowedProvince(1, 4))
}
{
var config = &firewallconfigs.HTTPFirewallRegionConfig{}
config.AllowProvinceIds = []int64{}
config.DenyProvinceIds = []int64{}
err := config.Init()
if err != nil {
t.Fatal(err)
}
a.IsTrue(config.IsAllowedProvince(1, 1))
a.IsTrue(config.IsAllowedProvince(1, 4))
a.IsTrue(config.IsAllowedProvince(1, 4))
}
// the greater China area: Taiwan & Hongkong & Macao
{
var config = &firewallconfigs.HTTPFirewallRegionConfig{}
config.AllowCountryIds = []int64{
regionconfigs.RegionChinaIdHK,
regionconfigs.RegionChinaIdMO,
regionconfigs.RegionChinaIdTW,
//regionconfigs.RegionChinaIdMainland,
}
config.DenyCountryIds = []int64{}
err := config.Init()
if err != nil {
t.Fatal(err)
}
a.IsTrue(config.IsAllowedCountry(1, regionconfigs.RegionChinaProvinceIdHK))
a.IsTrue(config.IsAllowedCountry(1, regionconfigs.RegionChinaProvinceIdTW))
a.IsTrue(config.IsAllowedCountry(1, regionconfigs.RegionChinaProvinceIdMO))
a.IsFalse(config.IsAllowedCountry(1, 1))
a.IsFalse(config.IsAllowedCountry(1, 0))
}
{
var config = &firewallconfigs.HTTPFirewallRegionConfig{}
config.AllowCountryIds = []int64{
regionconfigs.RegionChinaIdHK,
regionconfigs.RegionChinaIdMainland,
}
config.DenyCountryIds = []int64{}
err := config.Init()
if err != nil {
t.Fatal(err)
}
a.IsTrue(config.IsAllowedCountry(1, regionconfigs.RegionChinaProvinceIdHK))
a.IsFalse(config.IsAllowedCountry(1, regionconfigs.RegionChinaProvinceIdTW))
a.IsFalse(config.IsAllowedCountry(1, regionconfigs.RegionChinaProvinceIdMO))
a.IsTrue(config.IsAllowedCountry(1, 1))
a.IsFalse(config.IsAllowedCountry(1, 0))
}
{
var config = &firewallconfigs.HTTPFirewallRegionConfig{}
config.AllowCountryIds = []int64{}
config.DenyCountryIds = []int64{
regionconfigs.RegionChinaIdHK,
regionconfigs.RegionChinaIdMainland,
}
err := config.Init()
if err != nil {
t.Fatal(err)
}
a.IsFalse(config.IsAllowedCountry(1, regionconfigs.RegionChinaProvinceIdHK))
a.IsTrue(config.IsAllowedCountry(1, regionconfigs.RegionChinaProvinceIdTW))
a.IsTrue(config.IsAllowedCountry(1, regionconfigs.RegionChinaProvinceIdMO))
a.IsFalse(config.IsAllowedCountry(1, 1))
a.IsTrue(config.IsAllowedCountry(1, 0))
}
}
func Benchmark_HTTPFirewallRegionConfig_Map(b *testing.B) {
var m = map[int64]bool{}
const max = 50
for i := 0; i < max; i++ {
m[int64(i)] = true
}
b.ResetTimer()
for i := 0; i < b.N; i++ {
_ = m[int64(i%max)]
}
}
func Benchmark_HTTPFirewallRegionConfig_Slice(b *testing.B) {
var m = []int64{}
const max = 50
for i := 0; i < max; i++ {
m = append(m, int64(i))
}
b.ResetTimer()
for i := 0; i < b.N; i++ {
var l = int64(i % max)
for _, v := range m {
if v == l {
break
}
}
}
}