RepoMirrors/haproxy
1
0
Fork 0
mirror of http://git.haproxy.org/git/haproxy.git/ synced 2025-02-21 13:16:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

[MINOR] stick-tables: add support for "stick on hdr"

Browse Source 
It is now possible to stick on an IP address found in a HTTP header. Right
now only the last occurrence of the header can be used, which is generally
enough for most uses. Also, the header extraction rule only knows how to
convert the header to IP. Later it will be usable as a plain string with
an implicit conversion, and the syntax will not change.
This commit is contained in:
Willy Tarreau 2010-05-12 08:08:50 +02:00
parent 58215a01af
commit 4a568976c5
2 changed files with 35 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
doc/configuration.txt
View File

@ -6555,6 +6555,11 @@ The list of currently supported pattern fetch functions is the following :
ports to some clients for a whole application session. It is of
type integer and only works with such tables.
hdr(name) This extracts the last occurrence of header <name> in an HTTP
request and converts it to an IP address. This IP address is
then used to match the table. A typical use is with the
x-forwarded-for header.
The currently available list of transformations include :

30
src/proto_http.c
View File

@ -49,6 +49,7 @@
#include <proto/fd.h>
#include <proto/log.h>
#include <proto/hdr_idx.h>
#include <proto/pattern.h>
#include <proto/proto_tcp.h>
#include <proto/proto_http.h>
#include <proto/proxy.h>
@ -7429,11 +7430,40 @@ static struct acl_kw_list acl_kws = {{ },{
{ NULL, NULL, NULL, NULL },
}};
/************************************************************************/
/* The code below is dedicated to pattern fetching and matching */
/************************************************************************/
/* extract the IP address from the last occurrence of specified header. Note
* that we should normally first extract the string then convert it to IP,
* but right now we have all the functions to do this seemlessly, and we will
* be able to change that later without touching the configuration.
*/
static int
pattern_fetch_hdr_ip(struct proxy *px, struct session *l4, void *l7, int dir,
const char *arg, int arg_len, union pattern_data *data)
{
struct http_txn *txn = l7;
data->ip.s_addr = htonl(get_ip_from_hdr2(&txn->req, arg, arg_len, &txn->hdr_idx, -1));
return data->ip.s_addr != 0;
}
/************************************************************************/
/* All supported keywords must be declared here. */
/************************************************************************/
/* Note: must not be declared <const> as its list will be overwritten */
static struct pattern_fetch_kw_list pattern_fetch_keywords = {{ },{
{ "hdr", pattern_fetch_hdr_ip, PATTERN_TYPE_IP, PATTERN_FETCH_REQ },
{ NULL, NULL, 0, 0 },
}};
__attribute__((constructor))
static void __http_protocol_init(void)
{
acl_register_keywords(&acl_kws);
pattern_register_fetches(&pattern_fetch_keywords);
}