mirror of
https://github.com/TeaOSLab/EdgeNode.git
synced 2025-11-04 07:40:56 +08:00
96 lines
3.6 KiB
Go
96 lines
3.6 KiB
Go
// Copyright 2022 Liuxiangchao iwind.liu@gmail.com. All rights reserved. Official site: https://goedge.cn .
|
|
|
|
package nodes
|
|
|
|
import (
|
|
"github.com/TeaOSLab/EdgeCommon/pkg/nodeutils"
|
|
"github.com/TeaOSLab/EdgeCommon/pkg/serverconfigs"
|
|
"github.com/TeaOSLab/EdgeCommon/pkg/serverconfigs/firewallconfigs"
|
|
"github.com/TeaOSLab/EdgeNode/internal/ttlcache"
|
|
"github.com/TeaOSLab/EdgeNode/internal/utils"
|
|
"github.com/TeaOSLab/EdgeNode/internal/waf"
|
|
"github.com/iwind/TeaGo/types"
|
|
"net/http"
|
|
"time"
|
|
)
|
|
|
|
// 域名无匹配情况处理
|
|
func (this *HTTPRequest) doMismatch() {
|
|
// 是否为健康检查
|
|
var healthCheckKey = this.RawReq.Header.Get(serverconfigs.HealthCheckHeaderName)
|
|
if len(healthCheckKey) > 0 {
|
|
_, err := nodeutils.Base64DecodeMap(healthCheckKey)
|
|
if err == nil {
|
|
this.writer.WriteHeader(http.StatusOK)
|
|
return
|
|
}
|
|
}
|
|
|
|
// 是否已经在黑名单
|
|
var remoteIP = this.RemoteAddr()
|
|
if waf.SharedIPBlackList.Contains(waf.IPTypeAll, firewallconfigs.FirewallScopeGlobal, 0, remoteIP) {
|
|
this.Close()
|
|
return
|
|
}
|
|
|
|
// 根据配置进行相应的处理
|
|
var globalServerConfig = sharedNodeConfig.GlobalServerConfig
|
|
if globalServerConfig != nil && globalServerConfig.HTTPAll.MatchDomainStrictly {
|
|
var statusCode = 404
|
|
var httpAllConfig = globalServerConfig.HTTPAll
|
|
var mismatchAction = httpAllConfig.DomainMismatchAction
|
|
|
|
if mismatchAction != nil && mismatchAction.Options != nil {
|
|
var mismatchStatusCode = mismatchAction.Options.GetInt("statusCode")
|
|
if mismatchStatusCode > 0 && mismatchStatusCode >= 100 && mismatchStatusCode < 1000 {
|
|
statusCode = mismatchStatusCode
|
|
}
|
|
}
|
|
|
|
// 是否正在访问IP
|
|
if globalServerConfig.HTTPAll.NodeIPShowPage && utils.IsWildIP(this.ReqHost) {
|
|
this.writer.statusCode = statusCode
|
|
var contentHTML = this.Format(globalServerConfig.HTTPAll.NodeIPPageHTML)
|
|
this.writer.Header().Set("Content-Type", "text/html; charset=utf-8")
|
|
this.writer.Header().Set("Content-Length", types.String(len(contentHTML)))
|
|
this.writer.WriteHeader(statusCode)
|
|
_, _ = this.writer.WriteString(contentHTML)
|
|
return
|
|
}
|
|
|
|
// 检查cc
|
|
// TODO 可以在管理端配置是否开启以及最多尝试次数
|
|
// 要考虑到服务在切换集群时，域名未生效状态时，用户访问的仍然是老集群中的节点，就会产生找不到域名的情况
|
|
if len(remoteIP) > 0 {
|
|
const maxAttempts = 100
|
|
if ttlcache.SharedCache.IncreaseInt64("MISMATCH_DOMAIN:"+remoteIP, int64(1), time.Now().Unix()+60, false) > maxAttempts {
|
|
// 在加入之前再次检查黑名单
|
|
if !waf.SharedIPBlackList.Contains(waf.IPTypeAll, firewallconfigs.FirewallScopeGlobal, 0, remoteIP) {
|
|
waf.SharedIPBlackList.Add(waf.IPTypeAll, firewallconfigs.FirewallScopeGlobal, 0, remoteIP, time.Now().Unix()+3600)
|
|
}
|
|
}
|
|
}
|
|
|
|
// 处理当前连接
|
|
if mismatchAction != nil && mismatchAction.Code == serverconfigs.DomainMismatchActionPage {
|
|
if mismatchAction.Options != nil {
|
|
this.writer.statusCode = statusCode
|
|
var contentHTML = this.Format(mismatchAction.Options.GetString("contentHTML"))
|
|
this.writer.Header().Set("Content-Type", "text/html; charset=utf-8")
|
|
this.writer.Header().Set("Content-Length", types.String(len(contentHTML)))
|
|
this.writer.WriteHeader(statusCode)
|
|
_, _ = this.writer.Write([]byte(contentHTML))
|
|
} else {
|
|
http.Error(this.writer, "404 page not found: '"+this.URL()+"'", http.StatusNotFound)
|
|
}
|
|
return
|
|
} else {
|
|
http.Error(this.writer, "404 page not found: '"+this.URL()+"'", http.StatusNotFound)
|
|
this.Close()
|
|
return
|
|
}
|
|
}
|
|
|
|
http.Error(this.writer, "404 page not found: '"+this.URL()+"'", http.StatusNotFound)
|
|
}
|