Initial commit (code only without large binaries)

EdgeCommon/pkg/serverconfigs/firewallconfigs/http_firewall_policy.go

@@ -0,0 +1,141 @@
+package firewallconfigs
+
+import "encoding/json"
+
+const DefaultMaxRequestBodySize int64 = 256 << 10
+
+// HTTPFirewallPolicy 防火墙策略
+type HTTPFirewallPolicy struct {
+	Id              int64                               `yaml:"id" json:"id"`
+	IsOn            bool                                `yaml:"isOn" json:"isOn"`
+	ServerId        int64                               `yaml:"serverId" json:"serverId"` // 所属网站ID
+	Name            string                              `yaml:"name" json:"name"`
+	Description     string                              `yaml:"description" json:"description"`
+	Inbound         *HTTPFirewallInboundConfig          `yaml:"inbound" json:"inbound"`
+	Outbound        *HTTPFirewallOutboundConfig         `yaml:"outbound" json:"outbound"`
+	BlockOptions    *HTTPFirewallBlockAction            `yaml:"blockOptions" json:"blockOptions"`
+	CaptchaOptions  *HTTPFirewallCaptchaAction          `yaml:"captchaOptions" json:"captchaOptions"`
+	PageOptions     *HTTPFirewallPageAction             `yaml:"pageOptions" json:"pageOptions"`
+	Get302Options   *HTTPFirewallGet302Action           `yaml:"get302Options" json:"get302Options"`
+	Post307Options  *HTTPFirewallPost307Action          `yaml:"post307Options" json:"post307Options"`
+	JSCookieOptions *HTTPFirewallJavascriptCookieAction `yaml:"jsCookieOptions" json:"jsCookieOptions"`
+
+	Mode               FirewallMode                 `yaml:"mode" json:"mode"`
+	UseLocalFirewall   bool                         `yaml:"useLocalFirewall" json:"useLocalFirewall"`
+	SYNFlood           *SYNFloodConfig              `yaml:"synFlood" json:"synFlood"`
+	Log                *HTTPFirewallPolicyLogConfig `yaml:"log" json:"log"`                               // 强制记录日志
+	MaxRequestBodySize int64                        `yaml:"maxRequestBodySize" json:"maxRequestBodySize"` // 读取的请求最大尺寸
+	DenyCountryHTML    string                       `yaml:"denyCountryHTML" json:"denyCountryHTML"`       // 默认地区禁用提示
+	DenyProvinceHTML   string                       `yaml:"denyProvinceHTML" json:"denyProvinceHTML"`     // 默认省份禁用提示
+}
+
+// Init 初始化
+func (this *HTTPFirewallPolicy) Init() error {
+	if this.Inbound != nil {
+		err := this.Inbound.Init()
+		if err != nil {
+			return err
+		}
+	}
+
+	if this.Outbound != nil {
+		err := this.Outbound.Init()
+		if err != nil {
+			return err
+		}
+	}
+
+	if this.SYNFlood != nil {
+		err := this.SYNFlood.Init()
+		if err != nil {
+			return err
+		}
+	}
+
+	if this.Log != nil {
+		err := this.Log.Init()
+		if err != nil {
+			return err
+		}
+	}
+
+	return nil
+}
+
+// AllRuleGroups 获取所有分组
+func (this *HTTPFirewallPolicy) AllRuleGroups() []*HTTPFirewallRuleGroup {
+	result := []*HTTPFirewallRuleGroup{}
+	if this.Inbound != nil {
+		result = append(result, this.Inbound.Groups...)
+	}
+	if this.Outbound != nil {
+		result = append(result, this.Outbound.Groups...)
+	}
+	return result
+}
+
+// FindRuleGroupWithCode 根据代号查找分组
+func (this *HTTPFirewallPolicy) FindRuleGroupWithCode(code string) *HTTPFirewallRuleGroup {
+	for _, g := range this.AllRuleGroups() {
+		if g.Code == code {
+			return g
+		}
+	}
+	return nil
+}
+
+// FindRuleGroupWithName 根据名称查找分组
+func (this *HTTPFirewallPolicy) FindRuleGroupWithName(name string) *HTTPFirewallRuleGroup {
+	for _, g := range this.AllRuleGroups() {
+		if g.Name == name {
+			return g
+		}
+	}
+	return nil
+}
+
+// FindRuleGroup 根据ID查找分组
+func (this *HTTPFirewallPolicy) FindRuleGroup(groupId int64) *HTTPFirewallRuleGroup {
+	for _, g := range this.AllRuleGroups() {
+		if g.Id == groupId {
+			return g
+		}
+	}
+	return nil
+}
+
+// RemoveRuleGroup 删除某个分组
+func (this *HTTPFirewallPolicy) RemoveRuleGroup(groupId int64) {
+	if this.Inbound != nil {
+		this.Inbound.RemoveRuleGroup(groupId)
+	}
+	if this.Outbound != nil {
+		this.Outbound.RemoveRuleGroup(groupId)
+	}
+}
+
+// InboundJSON Inbound JSON
+func (this *HTTPFirewallPolicy) InboundJSON() ([]byte, error) {
+	if this.Inbound == nil {
+		return []byte("null"), nil
+	}
+	groups := this.Inbound.Groups
+	this.Inbound.Groups = nil
+	defer func() {
+		this.Inbound.Groups = groups
+	}()
+	return json.Marshal(this.Inbound)
+}
+
+// OutboundJSON Outbound JSON
+func (this *HTTPFirewallPolicy) OutboundJSON() ([]byte, error) {
+	if this.Inbound == nil {
+		return []byte("null"), nil
+	}
+	groups := this.Outbound.Groups
+	this.Outbound.Groups = nil
+	defer func() {
+		this.Outbound.Groups = groups
+	}()
+	return json.Marshal(this.Outbound)
+}