mirror of
				https://github.com/TeaOSLab/EdgeNode.git
				synced 2025-11-04 16:00:25 +08:00 
			
		
		
		
	
		
			
				
	
	
		
			100 lines
		
	
	
		
			2.1 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			100 lines
		
	
	
		
			2.1 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
// Copyright 2021 Liuxiangchao iwind.liu@gmail.com. All rights reserved.
 | 
						||
 | 
						||
package iplibrary
 | 
						||
 | 
						||
import (
 | 
						||
	"encoding/hex"
 | 
						||
	"github.com/TeaOSLab/EdgeCommon/pkg/iputils"
 | 
						||
	"github.com/TeaOSLab/EdgeCommon/pkg/nodeconfigs"
 | 
						||
	"github.com/iwind/TeaGo/Tea"
 | 
						||
)
 | 
						||
 | 
						||
// AllowIP 检查IP是否被允许访问
 | 
						||
// 如果一个IP不在任何名单中,则允许访问
 | 
						||
func AllowIP(ip string, serverId int64) (canGoNext bool, inAllowList bool, expiresAt int64) {
 | 
						||
	if !Tea.IsTesting() { // 如果在测试环境,我们不加入一些白名单,以便于可以在本地和局域网正常测试
 | 
						||
		// 放行lo
 | 
						||
		if ip == "127.0.0.1" || ip == "::1" {
 | 
						||
			return true, true, 0
 | 
						||
		}
 | 
						||
 | 
						||
		// check node
 | 
						||
		nodeConfig, err := nodeconfigs.SharedNodeConfig()
 | 
						||
		if err == nil && nodeConfig.IPIsAutoAllowed(ip) {
 | 
						||
			return true, true, 0
 | 
						||
		}
 | 
						||
	}
 | 
						||
 | 
						||
	var ipBytes = iputils.ToBytes(ip)
 | 
						||
	if IsZero(ipBytes) {
 | 
						||
		return false, false, 0
 | 
						||
	}
 | 
						||
 | 
						||
	// check white lists
 | 
						||
	if GlobalWhiteIPList.Contains(ipBytes) {
 | 
						||
		return true, true, 0
 | 
						||
	}
 | 
						||
 | 
						||
	if serverId > 0 {
 | 
						||
		var list = SharedServerListManager.FindWhiteList(serverId, false)
 | 
						||
		if list != nil && list.Contains(ipBytes) {
 | 
						||
			return true, true, 0
 | 
						||
		}
 | 
						||
	}
 | 
						||
 | 
						||
	// check black lists
 | 
						||
	expiresAt, ok := GlobalBlackIPList.ContainsExpires(ipBytes)
 | 
						||
	if ok {
 | 
						||
		return false, false, expiresAt
 | 
						||
	}
 | 
						||
 | 
						||
	if serverId > 0 {
 | 
						||
		var list = SharedServerListManager.FindBlackList(serverId, false)
 | 
						||
		if list != nil {
 | 
						||
			expiresAt, ok = list.ContainsExpires(ipBytes)
 | 
						||
			if ok {
 | 
						||
				return false, false, expiresAt
 | 
						||
			}
 | 
						||
		}
 | 
						||
	}
 | 
						||
 | 
						||
	return true, false, 0
 | 
						||
}
 | 
						||
 | 
						||
// IsInWhiteList 检查IP是否在白名单中
 | 
						||
func IsInWhiteList(ip string) bool {
 | 
						||
	var ipBytes = iputils.ToBytes(ip)
 | 
						||
	if IsZero(ipBytes) {
 | 
						||
		return false
 | 
						||
	}
 | 
						||
 | 
						||
	// check white lists
 | 
						||
	return GlobalWhiteIPList.Contains(ipBytes)
 | 
						||
}
 | 
						||
 | 
						||
// AllowIPStrings 检查一组IP是否被允许访问
 | 
						||
func AllowIPStrings(ipStrings []string, serverId int64) bool {
 | 
						||
	if len(ipStrings) == 0 {
 | 
						||
		return true
 | 
						||
	}
 | 
						||
	for _, ip := range ipStrings {
 | 
						||
		isAllowed, _, _ := AllowIP(ip, serverId)
 | 
						||
		if !isAllowed {
 | 
						||
			return false
 | 
						||
		}
 | 
						||
	}
 | 
						||
	return true
 | 
						||
}
 | 
						||
 | 
						||
func IsZero(ipBytes []byte) bool {
 | 
						||
	return len(ipBytes) == 0
 | 
						||
}
 | 
						||
 | 
						||
func ToHex(b []byte) string {
 | 
						||
	if len(b) == 0 {
 | 
						||
		return ""
 | 
						||
	}
 | 
						||
 | 
						||
	return hex.EncodeToString(b)
 | 
						||
}
 |