EdgeCommon/pkg/serverconfigs/firewallconfigs/http_firewall_inbound_config.go

package firewallconfigs

import (
	"github.com/TeaOSLab/EdgeCommon/pkg/serverconfigs/ipconfigs"
)

// HTTPFirewallInboundConfig HTTP防火墙入口配置
type HTTPFirewallInboundConfig struct {
	IsOn      bool                        `yaml:"isOn" json:"isOn"`
	GroupRefs []*HTTPFirewallRuleGroupRef `yaml:"groupRefs" json:"groupRefs"`
	Groups    []*HTTPFirewallRuleGroup    `yaml:"groups" json:"groups"`

	// 地区相关
	Region *HTTPFirewallRegionConfig `yaml:"region" json:"region"`

	// IP名单
	AllowListRef *ipconfigs.IPListRef `yaml:"whiteListRef" json:"whiteListRef"`
	DenyListRef  *ipconfigs.IPListRef `yaml:"blackListRef" json:"blackListRef"`
	GreyListRef  *ipconfigs.IPListRef `yaml:"greyListRef" json:"greyListRef"`

	// 绑定的IP名单
	PublicAllowListRefs []*ipconfigs.IPListRef `yaml:"publicWhiteListRefs" json:"publicWhiteListRefs"`
	PublicDenyListRefs  []*ipconfigs.IPListRef `yaml:"publicBlackListRefs" json:"publicBlackListRefs"`

	allAllowListRefs []*ipconfigs.IPListRef
	allDenyListRefs  []*ipconfigs.IPListRef
}

// Init 初始化
func (this *HTTPFirewallInboundConfig) Init() error {
	for _, group := range this.Groups {
		err := group.Init()
		if err != nil {
			return err
		}
	}

	if this.Region != nil {
		err := this.Region.Init()
		if err != nil {
			return err
		}
	}

	this.allAllowListRefs = []*ipconfigs.IPListRef{}
	if this.AllowListRef != nil {
		this.allAllowListRefs = append(this.allAllowListRefs, this.AllowListRef)
	}
	if len(this.PublicAllowListRefs) > 0 {
		this.allAllowListRefs = append(this.allAllowListRefs, this.PublicAllowListRefs...)
	}

	this.allDenyListRefs = []*ipconfigs.IPListRef{}
	if this.DenyListRef != nil {
		this.allDenyListRefs = append(this.allDenyListRefs, this.DenyListRef)
	}
	if len(this.PublicDenyListRefs) > 0 {
		this.allDenyListRefs = append(this.allDenyListRefs, this.PublicDenyListRefs...)
	}

	return nil
}

// FindGroupWithCode 根据Code查找Group
func (this *HTTPFirewallInboundConfig) FindGroupWithCode(code string) *HTTPFirewallRuleGroup {
	for _, group := range this.Groups {
		if group.Code == code {
			return group
		}
	}
	return nil
}

// RemoveRuleGroup 删除某个分组
func (this *HTTPFirewallInboundConfig) RemoveRuleGroup(groupId int64) {
	groups := []*HTTPFirewallRuleGroup{}
	refs := []*HTTPFirewallRuleGroupRef{}
	for _, g := range this.Groups {
		if g.Id == groupId {
			continue
		}
		groups = append(groups, g)
	}
	for _, ref := range this.GroupRefs {
		if ref.GroupId == groupId {
			continue
		}
		refs = append(refs, ref)
	}
	this.Groups = groups
	this.GroupRefs = refs
}

// AddPublicList 绑定公用的IP名单
func (this *HTTPFirewallInboundConfig) AddPublicList(listId int64, listType string) {
	var refs []*ipconfigs.IPListRef
	switch listType {
	case ipconfigs.IPListTypeBlack:
		refs = this.PublicDenyListRefs
	case ipconfigs.IPListTypeWhite:
		refs = this.PublicAllowListRefs
	}
	var found = false
	for _, ref := range refs {
		if ref.ListId == listId {
			found = true
			ref.IsOn = true
			break
		}
	}
	if !found {
		refs = append(refs, &ipconfigs.IPListRef{
			IsOn:   true,
			ListId: listId,
		})
	}
	switch listType {
	case ipconfigs.IPListTypeBlack:
		this.PublicDenyListRefs = refs
	case ipconfigs.IPListTypeWhite:
		this.PublicAllowListRefs = refs
	}
}

// RemovePublicList 解绑公用的IP名单
func (this *HTTPFirewallInboundConfig) RemovePublicList(listId int64, listType string) {
	var refs []*ipconfigs.IPListRef
	switch listType {
	case ipconfigs.IPListTypeBlack:
		refs = this.PublicDenyListRefs
	case ipconfigs.IPListTypeWhite:
		refs = this.PublicAllowListRefs
	}
	var newRefs = []*ipconfigs.IPListRef{}
	for _, ref := range refs {
		if ref.ListId == listId {
			continue
		}
		newRefs = append(newRefs, ref)
	}
	switch listType {
	case ipconfigs.IPListTypeBlack:
		this.PublicDenyListRefs = newRefs
	case ipconfigs.IPListTypeWhite:
		this.PublicAllowListRefs = newRefs
	}
}

// AllAllowListRefs 获取所有允许的IP名单
func (this *HTTPFirewallInboundConfig) AllAllowListRefs() []*ipconfigs.IPListRef {
	return this.allAllowListRefs
}

// AllDenyListRefs 获取所有禁止的IP名单
func (this *HTTPFirewallInboundConfig) AllDenyListRefs() []*ipconfigs.IPListRef {
	return this.allDenyListRefs
}