-
Notifications
You must be signed in to change notification settings - Fork 55
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feat: Add dosguard to new webserver (#1772)
For #919.
- Loading branch information
Showing
23 changed files
with
1,321 additions
and
144 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,4 +1,4 @@ | ||
| add_library(clio_app) | ||
| target_sources(clio_app PRIVATE CliArgs.cpp ClioApplication.cpp) | ||
| target_sources(clio_app PRIVATE CliArgs.cpp ClioApplication.cpp WebHandlers.cpp) | ||
|
|
||
| target_link_libraries(clio_app PUBLIC clio_etl clio_etlng clio_feed clio_web clio_rpc) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,111 @@ | ||
| //------------------------------------------------------------------------------ | ||
| /* | ||
| This file is part of clio: https://github.com/XRPLF/clio | ||
| Copyright (c) 2024, the clio developers. | ||
| Permission to use, copy, modify, and distribute this software for any | ||
| purpose with or without fee is hereby granted, provided that the above | ||
| copyright notice and this permission notice appear in all copies. | ||
| THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES | ||
| WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF | ||
| MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR | ||
| ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES | ||
| WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN | ||
| ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF | ||
| OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. | ||
| */ | ||
| //============================================================================== | ||
|
|
||
| #include "app/WebHandlers.hpp" | ||
|
|
||
| #include "util/Assert.hpp" | ||
| #include "util/prometheus/Http.hpp" | ||
| #include "web/AdminVerificationStrategy.hpp" | ||
| #include "web/SubscriptionContextInterface.hpp" | ||
| #include "web/dosguard/DOSGuardInterface.hpp" | ||
| #include "web/ng/Connection.hpp" | ||
| #include "web/ng/Request.hpp" | ||
| #include "web/ng/Response.hpp" | ||
|
|
||
| #include <boost/asio/spawn.hpp> | ||
| #include <boost/beast/http/status.hpp> | ||
|
|
||
| #include <memory> | ||
| #include <optional> | ||
| #include <utility> | ||
|
|
||
| namespace app { | ||
|
|
||
| OnConnectCheck::OnConnectCheck(web::dosguard::DOSGuardInterface& dosguard) : dosguard_{dosguard} | ||
| { | ||
| } | ||
|
|
||
| std::expected<void, web::ng::Response> | ||
| OnConnectCheck::operator()(web::ng::Connection const& connection) | ||
| { | ||
| dosguard_.get().increment(connection.ip()); | ||
| if (not dosguard_.get().isOk(connection.ip())) { | ||
| return std::unexpected{ | ||
| web::ng::Response{boost::beast::http::status::too_many_requests, "Too many requests", connection} | ||
| }; | ||
| } | ||
|
|
||
| return {}; | ||
| } | ||
|
|
||
| DisconnectHook::DisconnectHook(web::dosguard::DOSGuardInterface& dosguard) : dosguard_{dosguard} | ||
| { | ||
| } | ||
|
|
||
| void | ||
| DisconnectHook::operator()(web::ng::Connection const& connection) | ||
| { | ||
| dosguard_.get().decrement(connection.ip()); | ||
| } | ||
|
|
||
| MetricsHandler::MetricsHandler(std::shared_ptr<web::AdminVerificationStrategy> adminVerifier) | ||
| : adminVerifier_{std::move(adminVerifier)} | ||
| { | ||
| } | ||
|
|
||
| web::ng::Response | ||
| MetricsHandler::operator()( | ||
| web::ng::Request const& request, | ||
| web::ng::ConnectionMetadata& connectionMetadata, | ||
| web::SubscriptionContextPtr, | ||
| boost::asio::yield_context | ||
| ) | ||
| { | ||
| auto const maybeHttpRequest = request.asHttpRequest(); | ||
| ASSERT(maybeHttpRequest.has_value(), "Got not a http request in Get"); | ||
| auto const& httpRequest = maybeHttpRequest->get(); | ||
|
|
||
| // FIXME(#1702): Using veb server thread to handle prometheus request. Better to post on work queue. | ||
| auto maybeResponse = util::prometheus::handlePrometheusRequest( | ||
| httpRequest, adminVerifier_->isAdmin(httpRequest, connectionMetadata.ip()) | ||
| ); | ||
| ASSERT(maybeResponse.has_value(), "Got unexpected request for Prometheus"); | ||
| return web::ng::Response{std::move(maybeResponse).value(), request}; | ||
| } | ||
|
|
||
| web::ng::Response | ||
| HealthCheckHandler::operator()( | ||
| web::ng::Request const& request, | ||
| web::ng::ConnectionMetadata&, | ||
| web::SubscriptionContextPtr, | ||
| boost::asio::yield_context | ||
| ) | ||
| { | ||
| static auto constexpr HealthCheckHTML = R"html( | ||
| <!DOCTYPE html> | ||
| <html> | ||
| <head><title>Test page for Clio</title></head> | ||
| <body><h1>Clio Test</h1><p>This page shows Clio http(s) connectivity is working.</p></body> | ||
| </html> | ||
| )html"; | ||
|
|
||
| return web::ng::Response{boost::beast::http::status::ok, HealthCheckHTML, request}; | ||
| } | ||
|
|
||
| } // namespace app |
Oops, something went wrong.