mirror of
				https://github.com/TeaOSLab/EdgeNode.git
				synced 2025-11-04 07:40:56 +08:00 
			
		
		
		
	WAF规则匹配后的IP也会上报/实现IP全局名单/将名单存储到本地数据库,提升读写速度
This commit is contained in:
		
							
								
								
									
										55
									
								
								internal/iplibrary/list_utils.go
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										55
									
								
								internal/iplibrary/list_utils.go
									
									
									
									
									
										Normal file
									
								
							@@ -0,0 +1,55 @@
 | 
			
		||||
// Copyright 2021 Liuxiangchao iwind.liu@gmail.com. All rights reserved.
 | 
			
		||||
 | 
			
		||||
package iplibrary
 | 
			
		||||
 | 
			
		||||
import (
 | 
			
		||||
	"github.com/TeaOSLab/EdgeNode/internal/utils"
 | 
			
		||||
)
 | 
			
		||||
 | 
			
		||||
// AllowIP 检查IP是否被允许访问
 | 
			
		||||
func AllowIP(ip string, serverId int64) bool {
 | 
			
		||||
	var ipLong = utils.IP2Long(ip)
 | 
			
		||||
	if ipLong == 0 {
 | 
			
		||||
		return false
 | 
			
		||||
	}
 | 
			
		||||
 | 
			
		||||
	// check white lists
 | 
			
		||||
	if GlobalWhiteIPList.Contains(ipLong) {
 | 
			
		||||
		return true
 | 
			
		||||
	}
 | 
			
		||||
 | 
			
		||||
	if serverId > 0 {
 | 
			
		||||
		var list = SharedServerListManager.FindWhiteList(serverId, false)
 | 
			
		||||
		if list != nil && list.Contains(ipLong) {
 | 
			
		||||
			return true
 | 
			
		||||
		}
 | 
			
		||||
	}
 | 
			
		||||
 | 
			
		||||
	// check black lists
 | 
			
		||||
	if GlobalBlackIPList.Contains(ipLong) {
 | 
			
		||||
		return false
 | 
			
		||||
	}
 | 
			
		||||
 | 
			
		||||
	if serverId > 0 {
 | 
			
		||||
		var list = SharedServerListManager.FindBlackList(serverId, false)
 | 
			
		||||
		if list != nil && list.Contains(ipLong) {
 | 
			
		||||
			return false
 | 
			
		||||
		}
 | 
			
		||||
	}
 | 
			
		||||
 | 
			
		||||
	return true
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
// AllowIPStrings 检查一组IP是否被允许访问
 | 
			
		||||
func AllowIPStrings(ipStrings []string, serverId int64) bool {
 | 
			
		||||
	if len(ipStrings) == 0 {
 | 
			
		||||
		return true
 | 
			
		||||
	}
 | 
			
		||||
	for _, ip := range ipStrings {
 | 
			
		||||
		isAllowed := AllowIP(ip, serverId)
 | 
			
		||||
		if !isAllowed {
 | 
			
		||||
			return false
 | 
			
		||||
		}
 | 
			
		||||
	}
 | 
			
		||||
	return true
 | 
			
		||||
}
 | 
			
		||||
		Reference in New Issue
	
	Block a user