mirror of
https://github.com/TeaOSLab/EdgeNode.git
synced 2025-11-03 23:20:25 +08:00
101 lines
2.7 KiB
Go
101 lines
2.7 KiB
Go
// Copyright 2021 GoEdge goedge.cdn@gmail.com. All rights reserved.
|
|
|
|
package checkpoints
|
|
|
|
import (
|
|
"fmt"
|
|
"path/filepath"
|
|
"strings"
|
|
|
|
"github.com/TeaOSLab/EdgeNode/internal/utils"
|
|
"github.com/TeaOSLab/EdgeNode/internal/utils/counters"
|
|
"github.com/TeaOSLab/EdgeNode/internal/waf/requests"
|
|
wafutils "github.com/TeaOSLab/EdgeNode/internal/waf/utils"
|
|
"github.com/iwind/TeaGo/maps"
|
|
"github.com/iwind/TeaGo/types"
|
|
)
|
|
|
|
// CC2Checkpoint 新的CC
|
|
type CC2Checkpoint struct {
|
|
Checkpoint
|
|
}
|
|
|
|
func (this *CC2Checkpoint) RequestValue(req requests.Request, param string, options maps.Map, ruleId int64) (value any, hasRequestBody bool, sysErr error, userErr error) {
|
|
var keys = options.GetSlice("keys")
|
|
var keyValues = []string{}
|
|
var hasRemoteAddr = false
|
|
for _, key := range keys {
|
|
if key == "${remoteAddr}" || key == "${rawRemoteAddr}" {
|
|
hasRemoteAddr = true
|
|
}
|
|
keyValues = append(keyValues, req.Format(types.String(key)))
|
|
}
|
|
if len(keyValues) == 0 {
|
|
return
|
|
}
|
|
|
|
var period = options.GetInt("period")
|
|
if period <= 0 {
|
|
period = 60
|
|
} else if period > 7*86400 {
|
|
period = 7 * 86400
|
|
}
|
|
|
|
/**var threshold = options.GetInt64("threshold")
|
|
if threshold <= 0 {
|
|
threshold = 1000
|
|
}**/
|
|
|
|
if options.GetBool("ignoreCommonFiles") {
|
|
var rawReq = req.WAFRaw()
|
|
if len(rawReq.Referer()) > 0 {
|
|
var ext = filepath.Ext(rawReq.URL.Path)
|
|
if len(ext) > 0 && utils.IsCommonFileExtension(ext) {
|
|
return
|
|
}
|
|
}
|
|
}
|
|
|
|
var ccKey = "WAF-CC-" + types.String(ruleId) + "-" + strings.Join(keyValues, "@")
|
|
var ccValue = counters.SharedCounter.IncreaseKey(ccKey, period)
|
|
value = ccValue
|
|
|
|
// 基于指纹统计
|
|
var enableFingerprint = true
|
|
if options.Has("enableFingerprint") && !options.GetBool("enableFingerprint") {
|
|
enableFingerprint = false
|
|
}
|
|
if hasRemoteAddr && enableFingerprint {
|
|
var fingerprint = req.WAFFingerprint()
|
|
if len(fingerprint) > 0 {
|
|
var fpKeyValues = []string{}
|
|
for _, key := range keys {
|
|
if key == "${remoteAddr}" || key == "${rawRemoteAddr}" {
|
|
fpKeyValues = append(fpKeyValues, fmt.Sprintf("%x", fingerprint))
|
|
continue
|
|
}
|
|
fpKeyValues = append(fpKeyValues, req.Format(types.String(key)))
|
|
}
|
|
var fpCCKey = "WAF-CC-" + types.String(ruleId) + "-" + strings.Join(fpKeyValues, "@")
|
|
var fpValue = counters.SharedCounter.IncreaseKey(fpCCKey, period)
|
|
if fpValue > ccValue {
|
|
value = fpValue
|
|
}
|
|
}
|
|
}
|
|
|
|
return
|
|
}
|
|
|
|
func (this *CC2Checkpoint) ResponseValue(req requests.Request, resp *requests.Response, param string, options maps.Map, ruleId int64) (value any, hasRequestBody bool, sysErr error, userErr error) {
|
|
if this.IsRequest() {
|
|
return this.RequestValue(req, param, options, ruleId)
|
|
}
|
|
|
|
return
|
|
}
|
|
|
|
func (this *CC2Checkpoint) CacheLife() wafutils.CacheLife {
|
|
return wafutils.CacheDisabled
|
|
}
|