mirror of
https://github.com/opencloud-eu/opencloud.git
synced 2026-09-13 22:29:01 -04:00
102 lines
3.3 KiB
Go
102 lines
3.3 KiB
Go
package proxy
|
|
|
|
import (
|
|
"crypto/tls"
|
|
"crypto/x509"
|
|
"errors"
|
|
stdlog "log"
|
|
"net"
|
|
"net/http"
|
|
"net/http/httputil"
|
|
"os"
|
|
|
|
"github.com/opencloud-eu/opencloud/pkg/log"
|
|
"github.com/opencloud-eu/opencloud/services/proxy/pkg/config"
|
|
"github.com/opencloud-eu/opencloud/services/proxy/pkg/middleware"
|
|
"github.com/opencloud-eu/opencloud/services/proxy/pkg/proxy/policy"
|
|
"github.com/opencloud-eu/opencloud/services/proxy/pkg/router"
|
|
"github.com/rs/zerolog"
|
|
)
|
|
|
|
// MultiHostReverseProxy extends "httputil" to support multiple hosts with different policies
|
|
type MultiHostReverseProxy struct {
|
|
httputil.ReverseProxy
|
|
// Directors holds policy route type method endpoint Director
|
|
Directors map[string]map[config.RouteType]map[string]map[string]func(req *http.Request)
|
|
PolicySelector policy.Selector
|
|
logger log.Logger
|
|
config *config.Config
|
|
}
|
|
|
|
// NewMultiHostReverseProxy creates a new MultiHostReverseProxy
|
|
func NewMultiHostReverseProxy(opts ...Option) (*MultiHostReverseProxy, error) {
|
|
options := newOptions(opts...)
|
|
|
|
rp := &MultiHostReverseProxy{
|
|
ReverseProxy: httputil.ReverseProxy{
|
|
ErrorLog: stdlog.New(options.Logger, "", 0),
|
|
},
|
|
Directors: make(map[string]map[config.RouteType]map[string]map[string]func(req *http.Request)),
|
|
logger: options.Logger,
|
|
config: options.Config,
|
|
}
|
|
|
|
rp.Rewrite = func(r *httputil.ProxyRequest) {
|
|
// Check if datagateway middleware already handled this request
|
|
if skip, _ := r.In.Context().Value(middleware.DatagatewaySkipRoutingKey).(bool); skip {
|
|
r.SetXForwarded()
|
|
return
|
|
}
|
|
|
|
// Fallback to standard service routing logic
|
|
ri := router.ContextRoutingInfo(r.In.Context())
|
|
ri.Rewrite()(r)
|
|
}
|
|
|
|
rp.ErrorHandler = func(rw http.ResponseWriter, req *http.Request, err error) {
|
|
reqLogger := zerolog.Ctx(req.Context())
|
|
if ev := reqLogger.Error(); ev.Enabled() {
|
|
ev.Err(err).Msg("error happened in MultiHostReverseProxy")
|
|
} else {
|
|
rp.logger.Err(err).Msg("error happened in MultiHostReverseProxy")
|
|
}
|
|
rw.WriteHeader(http.StatusBadGateway)
|
|
}
|
|
|
|
tlsConf := &tls.Config{
|
|
MinVersion: tls.VersionTLS12,
|
|
InsecureSkipVerify: options.Config.InsecureBackends, //nolint:gosec
|
|
}
|
|
if options.Config.BackendHTTPSCACert != "" {
|
|
certs := x509.NewCertPool()
|
|
pemData, err := os.ReadFile(options.Config.BackendHTTPSCACert)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
if !certs.AppendCertsFromPEM(pemData) {
|
|
return nil, errors.New("Error initializing Proxy. Adding CA cert failed")
|
|
}
|
|
tlsConf.RootCAs = certs
|
|
}
|
|
// equals http.DefaultTransport except TLSClientConfig
|
|
rp.Transport = &http.Transport{
|
|
Proxy: http.ProxyFromEnvironment,
|
|
DialContext: (&net.Dialer{
|
|
Timeout: options.Config.HTTP.Client.DialTimeout,
|
|
KeepAlive: options.Config.HTTP.Client.DialKeepAlive,
|
|
}).DialContext,
|
|
ForceAttemptHTTP2: options.Config.HTTP.Client.ForceAttemptHTTP2,
|
|
MaxIdleConns: options.Config.HTTP.Client.MaxIdleConns,
|
|
MaxIdleConnsPerHost: options.Config.HTTP.Client.MaxIdleConnsPerHost,
|
|
IdleConnTimeout: options.Config.HTTP.Client.IdleConnTimeout,
|
|
TLSHandshakeTimeout: options.Config.HTTP.Client.TLSHandshakeTimeout,
|
|
ExpectContinueTimeout: options.Config.HTTP.Client.ExpectContinueTimeout,
|
|
TLSClientConfig: tlsConf,
|
|
}
|
|
return rp, nil
|
|
}
|
|
|
|
func (p *MultiHostReverseProxy) ServeHTTP(w http.ResponseWriter, r *http.Request) {
|
|
p.ReverseProxy.ServeHTTP(w, r)
|
|
}
|