Remove debug prints
This commit is contained in:
parent
f5e4a421bb
commit
e9cf447586
5 changed files with 11 additions and 217 deletions
|
|
@ -50,11 +50,11 @@ pub fn verify_challenge_cookie(
|
||||||
challenge_timeout: u64,
|
challenge_timeout: u64,
|
||||||
) -> bool {
|
) -> bool {
|
||||||
let Ok(cookie_bytes) = base64::engine::general_purpose::URL_SAFE_NO_PAD.decode(cookie) else {
|
let Ok(cookie_bytes) = base64::engine::general_purpose::URL_SAFE_NO_PAD.decode(cookie) else {
|
||||||
dbg!("invalid base64");
|
// invalid base64
|
||||||
return false;
|
return false;
|
||||||
};
|
};
|
||||||
if cookie_bytes.len() != SALT_LEN + 8 + MAC_LEN {
|
if cookie_bytes.len() != SALT_LEN + 8 + MAC_LEN {
|
||||||
dbg!("invalid len");
|
// bad length
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
let timestamp: [u8; 8] = cookie_bytes[SALT_LEN..SALT_LEN + 8].try_into().unwrap();
|
let timestamp: [u8; 8] = cookie_bytes[SALT_LEN..SALT_LEN + 8].try_into().unwrap();
|
||||||
|
|
@ -65,7 +65,7 @@ pub fn verify_challenge_cookie(
|
||||||
.unwrap()
|
.unwrap()
|
||||||
.as_secs()
|
.as_secs()
|
||||||
{
|
{
|
||||||
dbg!("invalid time");
|
// challenge timeout
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
let salt: [u8; SALT_LEN] = cookie_bytes[0..SALT_LEN].try_into().unwrap();
|
let salt: [u8; SALT_LEN] = cookie_bytes[0..SALT_LEN].try_into().unwrap();
|
||||||
|
|
|
||||||
|
|
@ -1,5 +1,5 @@
|
||||||
/// PoW anti-crawler middle-proxy
|
/// PoW anti-crawler middle-proxy
|
||||||
///
|
///
|
||||||
/// https://git.txmn.tk/tuxmain/mesozoa/
|
/// https://git.txmn.tk/tuxmain/mesozoa/
|
||||||
/// Distributed under license GNU AGPL v3 without any warranty.
|
/// Distributed under license GNU AGPL v3 without any warranty.
|
||||||
#[derive(argp::FromArgs)]
|
#[derive(argp::FromArgs)]
|
||||||
|
|
|
||||||
20
src/main.rs
20
src/main.rs
|
|
@ -10,7 +10,7 @@ use policy::CompiledPolicies;
|
||||||
use rand::Rng;
|
use rand::Rng;
|
||||||
use realm_syscall::socket2::TcpKeepalive;
|
use realm_syscall::socket2::TcpKeepalive;
|
||||||
use regex::bytes::Regex;
|
use regex::bytes::Regex;
|
||||||
use std::{io::Write, net::SocketAddr, time::Duration};
|
use std::{net::SocketAddr, time::Duration};
|
||||||
use tokio::{
|
use tokio::{
|
||||||
io::{AsyncWriteExt, ReadBuf},
|
io::{AsyncWriteExt, ReadBuf},
|
||||||
net::{TcpSocket, TcpStream},
|
net::{TcpSocket, TcpStream},
|
||||||
|
|
@ -100,25 +100,19 @@ async fn main() {
|
||||||
.await
|
.await
|
||||||
.is_err()
|
.is_err()
|
||||||
{
|
{
|
||||||
println!("peek timeout");
|
// Peek timeout
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
let mut stdout = std::io::stdout();
|
|
||||||
stdout.write_all(&buf).unwrap();
|
|
||||||
stdout.flush().unwrap();
|
|
||||||
println!();
|
|
||||||
|
|
||||||
let mut header_line_iter = HeaderLineIterator::new(&buf);
|
let mut header_line_iter = HeaderLineIterator::new(&buf);
|
||||||
let Some(first_line) = header_line_iter.next() else {
|
let Some(first_line) = header_line_iter.next() else {
|
||||||
println!("Not HTTP, or too long line");
|
// Not HTTP, or too long line
|
||||||
return;
|
return;
|
||||||
};
|
};
|
||||||
|
|
||||||
let mut action = config.default_action;
|
let mut action = config.default_action;
|
||||||
for policy_group in policy_groups.iter() {
|
for policy_group in policy_groups.iter() {
|
||||||
if let Some(policy) = policy_group.evaluate(first_line) {
|
if let Some(policy) = policy_group.evaluate(first_line) {
|
||||||
println!("Applying policy {}", policy.name);
|
|
||||||
action = policy.action;
|
action = policy.action;
|
||||||
break;
|
break;
|
||||||
}
|
}
|
||||||
|
|
@ -160,12 +154,8 @@ async fn main() {
|
||||||
req_ip,
|
req_ip,
|
||||||
config.challenge_timeout,
|
config.challenge_timeout,
|
||||||
);
|
);
|
||||||
allow = dbg!(valid_challenge)
|
allow = valid_challenge
|
||||||
&& dbg!(challenge::check_challenge(
|
&& challenge::check_challenge(req_challenge, req_proof, TARGET_ZEROS);
|
||||||
req_challenge,
|
|
||||||
req_proof,
|
|
||||||
TARGET_ZEROS
|
|
||||||
));
|
|
||||||
}
|
}
|
||||||
|
|
||||||
if allow {
|
if allow {
|
||||||
|
|
|
||||||
|
|
@ -1,198 +0,0 @@
|
||||||
use regex::bytes::{Regex, RegexSet, SetMatches};
|
|
||||||
|
|
||||||
#[derive(Clone, Debug)]
|
|
||||||
pub enum Action {
|
|
||||||
Allow,
|
|
||||||
Challenge,
|
|
||||||
Drop,
|
|
||||||
}
|
|
||||||
|
|
||||||
#[derive(Clone, Debug)]
|
|
||||||
pub enum Filter {
|
|
||||||
Bool(bool),
|
|
||||||
FirstLineMatch(String),
|
|
||||||
HeaderLineMatch(String),
|
|
||||||
And(Vec<Filter>),
|
|
||||||
Or(Vec<Filter>),
|
|
||||||
Not(Box<Filter>),
|
|
||||||
}
|
|
||||||
|
|
||||||
impl Filter {
|
|
||||||
fn compile<'a>(
|
|
||||||
&'a self,
|
|
||||||
first_line_regexes: &mut Vec<&'a str>,
|
|
||||||
header_line_regexes: &mut Vec<&'a str>,
|
|
||||||
) -> CompiledFilter {
|
|
||||||
match self {
|
|
||||||
Filter::Bool(v) => CompiledFilter::Bool(*v),
|
|
||||||
Filter::And(filters) => CompiledFilter::And(
|
|
||||||
filters
|
|
||||||
.iter()
|
|
||||||
.map(|filter| filter.compile(first_line_regexes, header_line_regexes))
|
|
||||||
.collect(),
|
|
||||||
),
|
|
||||||
Filter::Or(filters) => CompiledFilter::Or(
|
|
||||||
filters
|
|
||||||
.iter()
|
|
||||||
.map(|filter| filter.compile(first_line_regexes, header_line_regexes))
|
|
||||||
.collect(),
|
|
||||||
),
|
|
||||||
Filter::Not(filter) => CompiledFilter::Not(Box::new(
|
|
||||||
filter.compile(first_line_regexes, header_line_regexes),
|
|
||||||
)),
|
|
||||||
Filter::FirstLineMatch(regex) => {
|
|
||||||
let filter = CompiledFilter::FirstLineMatch(first_line_regexes.len());
|
|
||||||
first_line_regexes.push(regex);
|
|
||||||
filter
|
|
||||||
}
|
|
||||||
Filter::HeaderLineMatch(regex) => {
|
|
||||||
let filter = CompiledFilter::HeaderLineMatch(header_line_regexes.len());
|
|
||||||
header_line_regexes.push(regex);
|
|
||||||
filter
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
#[derive(Clone, Debug)]
|
|
||||||
pub struct Policy {
|
|
||||||
pub name: String,
|
|
||||||
pub filter: Filter,
|
|
||||||
pub action: Action,
|
|
||||||
pub priority: i32,
|
|
||||||
}
|
|
||||||
|
|
||||||
pub enum CompiledFilter {
|
|
||||||
Bool(bool),
|
|
||||||
FirstLineMatch(usize),
|
|
||||||
HeaderLineMatch(usize),
|
|
||||||
And(Vec<CompiledFilter>),
|
|
||||||
Or(Vec<CompiledFilter>),
|
|
||||||
Not(Box<CompiledFilter>),
|
|
||||||
}
|
|
||||||
|
|
||||||
/*impl CompiledFilter {
|
|
||||||
fn evaluate(&self, matches: &SetMatches) -> bool {
|
|
||||||
match self {
|
|
||||||
Self::And(filters) => filters.iter().all(Self::evaluate),
|
|
||||||
Self::Or(filters) => filters.iter().any(Self::evaluate),
|
|
||||||
Self::Bool(b) => *b,
|
|
||||||
Self::Not(filter) => !filter.evaluate(matches),
|
|
||||||
Self::FirstLineMatch(regex_id) => matches.matched(regex_id),
|
|
||||||
Self::HeaderLineMatch(regex_id) => matches.matched(regex_id),
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}*/
|
|
||||||
|
|
||||||
pub struct CompiledPolicy {
|
|
||||||
pub name: String,
|
|
||||||
pub filter: CompiledFilter,
|
|
||||||
pub priority: i32,
|
|
||||||
pub action: Action,
|
|
||||||
}
|
|
||||||
|
|
||||||
pub struct CompiledPolicies {
|
|
||||||
pub first_line_regex_set: Option<RegexSet>,
|
|
||||||
pub header_line_regex_set: Option<RegexSet>,
|
|
||||||
pub policies: Vec<CompiledPolicy>,
|
|
||||||
}
|
|
||||||
|
|
||||||
pub enum RegexOrRegexSet {
|
|
||||||
Many(RegexSet),
|
|
||||||
One(Regex),
|
|
||||||
None,
|
|
||||||
}
|
|
||||||
|
|
||||||
impl TryInto<RegexOrRegexSet> for Vec<&str> {
|
|
||||||
type Error = regex::Error;
|
|
||||||
fn try_into(self) -> Result<RegexOrRegexSet, regex::Error> {
|
|
||||||
Ok(match self.len() {
|
|
||||||
0 => RegexOrRegexSet::None,
|
|
||||||
1 => RegexOrRegexSet::One(Regex::new(self[0])?),
|
|
||||||
_ => RegexOrRegexSet::Many(RegexSet::new(self)?)
|
|
||||||
})
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
impl CompiledPolicies {
|
|
||||||
pub fn new<'a>(policies: impl IntoIterator<Item = &'a Policy>) -> Self {
|
|
||||||
let mut first_line_regexes = Vec::new();
|
|
||||||
let mut header_line_regexes = Vec::new();
|
|
||||||
let mut compiled_policies = Vec::new();
|
|
||||||
|
|
||||||
for policy in policies {
|
|
||||||
let compiled_policy = CompiledPolicy {
|
|
||||||
name: policy.name.clone(),
|
|
||||||
filter: policy
|
|
||||||
.filter
|
|
||||||
.compile(&mut first_line_regexes, &mut header_line_regexes),
|
|
||||||
priority: policy.priority,
|
|
||||||
action: policy.action.clone(),
|
|
||||||
};
|
|
||||||
compiled_policies.push(compiled_policy);
|
|
||||||
}
|
|
||||||
|
|
||||||
CompiledPolicies {
|
|
||||||
first_line_regex_set: if first_line_regexes.is_empty() {
|
|
||||||
None
|
|
||||||
} else {
|
|
||||||
Some(RegexSet::new(&first_line_regexes).unwrap())
|
|
||||||
},
|
|
||||||
header_line_regex_set: if header_line_regexes.is_empty() {
|
|
||||||
None
|
|
||||||
} else {
|
|
||||||
Some(RegexSet::new(&header_line_regexes).unwrap())
|
|
||||||
},
|
|
||||||
policies: compiled_policies,
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
/*pub fn evaluate<'a>(
|
|
||||||
&self,
|
|
||||||
mut header_lines: impl Iterator<Item = &'a [u8]>,
|
|
||||||
) -> Result<Option<&CompiledPolicy>, PolicyEvaluationError> {
|
|
||||||
let mut best_policy: Option<&CompiledPolicy> = None;
|
|
||||||
|
|
||||||
let first_line = header_lines
|
|
||||||
.next()
|
|
||||||
.ok_or(PolicyEvaluationError::NoFirstLine)?;
|
|
||||||
|
|
||||||
if let Some(first_line_regex_set) = &self.first_line_regex_set {
|
|
||||||
let matches = first_line_regex_set.matches(first_line);
|
|
||||||
for policy in self.policies.iter() {
|
|
||||||
|
|
||||||
}
|
|
||||||
let policy = &self.policies[matched];
|
|
||||||
if let Some(best_policy) = &mut best_policy {
|
|
||||||
if policy.priority < best_policy.priority {
|
|
||||||
*best_policy = policy;
|
|
||||||
}
|
|
||||||
} else {
|
|
||||||
best_policy = Some(policy);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
if let Some(header_line_regex_set) = &self.header_line_regex_set {
|
|
||||||
for header_line in header_lines {
|
|
||||||
for matched in header_line_regex_set.matches(header_line) {
|
|
||||||
let policy = &self.policies[matched];
|
|
||||||
if let Some(best_policy) = &mut best_policy {
|
|
||||||
if policy.priority < best_policy.priority {
|
|
||||||
*best_policy = policy;
|
|
||||||
}
|
|
||||||
} else {
|
|
||||||
best_policy = Some(policy);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
Ok(best_policy)
|
|
||||||
}*/
|
|
||||||
}
|
|
||||||
|
|
||||||
#[derive(Debug)]
|
|
||||||
pub enum PolicyEvaluationError {
|
|
||||||
/// First HTTP line is too long or absent
|
|
||||||
NoFirstLine,
|
|
||||||
}
|
|
||||||
|
|
@ -21,6 +21,8 @@ impl std::str::FromStr for Action {
|
||||||
|
|
||||||
#[derive(Clone, Debug)]
|
#[derive(Clone, Debug)]
|
||||||
pub struct Policy {
|
pub struct Policy {
|
||||||
|
// Will be used when we add log
|
||||||
|
#[allow(unused)]
|
||||||
pub name: String,
|
pub name: String,
|
||||||
pub first_line_regex: String,
|
pub first_line_regex: String,
|
||||||
pub action: Action,
|
pub action: Action,
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue