mod_proxy.c revision 38161f83959979bc9916ece8ab84410ca72a9230
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce/* Licensed to the Apache Software Foundation (ASF) under one or more
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce * contributor license agreements. See the NOTICE file distributed with
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce * this work for additional information regarding copyright ownership.
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce * The ASF licenses this file to You under the Apache License, Version 2.0
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce * (the "License"); you may not use this file except in compliance with
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce * the License. You may obtain a copy of the License at
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce * Unless required by applicable law or agreed to in writing, software
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce * distributed under the License is distributed on an "AS IS" BASIS,
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce * See the License for the specific language governing permissions and
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce * limitations under the License.
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub HrozekAPR_DECLARE_OPTIONAL_FN(int, ssl_proxy_enable, (conn_rec *));
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub HrozekAPR_DECLARE_OPTIONAL_FN(int, ssl_engine_disable, (conn_rec *));
225d845476b6136be9b77f528ed986bba7a7f732Simo SorceAPR_DECLARE_OPTIONAL_FN(int, ssl_is_https, (conn_rec *));
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek#define MAX(x,y) ((x) >= (y) ? (x) : (y))
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * A Web proxy module. Stages:
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * translate_name: set filename to proxy:<URL>
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * map_to_storage: run proxy_walk (rather than directory_walk/file_walk)
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * can't trust directory_walk/file_walk since these are
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * not in our filesystem. Prevents mod_http from serving
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce * the TRACE request we will set aside to handle later.
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce * fix_ups: convert the URL stored in the filename to the
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce * canonical form.
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce * handler: handle proxy requests
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek/* -------------------------------------------------------------- */
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce/* Translate the URL into a 'filename' */
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorcestatic const char *set_worker_param(apr_pool_t *p,
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce const char *key,
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce const char *val)
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce /* Normalized load factor. Used with BalancerMamber,
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * it is a number between 1 and 100.
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce if (worker->s->lbfactor < 1 || worker->s->lbfactor > 100)
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce return "LoadFactor must be a number between 1..100";
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce /* If set it will give the retry timeout for the worker
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce * The default value is 60 seconds, meaning that if
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * in error state, it will be retried after that timeout.
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce return "Retry must be a positive value";
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce /* Time in seconds that will destroy all the connections
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce * that exceed the smax
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "TTL must be at least one second";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Initial number of connections to remote
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce return "Min must be a positive number";
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce /* Maximum number of connections to remote
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "Max must be a positive number";
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce /* XXX: More inteligent naming needed */
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce /* Maximum number of connections to remote that
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce * will not be destroyed
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "Smax must be a positive number";
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce /* Acquire timeout in given unit (default is milliseconds).
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce * If set this will be the maximum time to
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce * wait for a free connection.
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce if (ap_timeout_parameter_parse(val, &timeout, "ms") != APR_SUCCESS)
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce return "Acquire timeout has wrong format";
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce return "Acquire must be at least one millisecond";
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce /* Connection timeout in seconds.
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce * Defaults to server timeout.
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce return "Timeout must be at least one second";
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce if (s < 512 && s) {
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce return "IOBufferSize must be >= 512 bytes, or 0 for system default.";
225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce worker->s->io_buffer_size = (s ? s : AP_IOBUFSIZE);
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (!strcasecmp(key, "receivebuffersize")) {
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "ReceiveBufferSize must be >= 512 bytes, or 0 for system default.";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "KeepAlive must be On|Off";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "DisableReuse must be On|Off";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Worker route.
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return apr_psprintf(p, "Route length must be < %d characters",
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Worker redirection route.
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (strlen(val) >= sizeof(worker->s->redirect))
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return apr_psprintf(p, "Redirect length must be < %d characters",
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *v;
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Worker status.
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek for (v = val; *v; v++) {
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (*v == '+') {
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (*v == '-') {
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "Unknown status parameter option";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "flushpackets must be on|off|auto";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "flushwait must be <= 1000, or 0 for system default of 10 millseconds.";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->s->flush_wait = ival * 1000; /* change to microseconds */
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Ping/Pong timeout in given unit (default is second).
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (ap_timeout_parameter_parse(val, &timeout, "s") != APR_SUCCESS)
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "Ping/Pong timeout has wrong format";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "Ping/Pong timeout must be at least one millisecond";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "lbset must be between 0 and 99";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (!strcasecmp(key, "connectiontimeout")) {
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Request timeout in given unit (default is second).
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * Defaults to connection timeout
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (ap_timeout_parameter_parse(val, &timeout, "s") != APR_SUCCESS)
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "Connectiontimeout has wrong format";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "Connectiontimeout must be at least one millisecond.";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek apr_psprintf(p, "flusher name length must be < %d characters",
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "unknown Worker parameter";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozekstatic const char *set_balancer_param(proxy_server_conf *conf,
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *key,
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *val)
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Balancer sticky session name.
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * Set to something like JSESSIONID or
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * PHPSESSIONID, etc..,
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (strlen(val) >= sizeof(balancer->s->sticky_path))
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek apr_psprintf(p, "stickysession length must be < %d characters",
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if ((path = strchr((char *)balancer->s->sticky, '|'))) {
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (!strcasecmp(key, "stickysessionsep")) {
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* separator/delimiter for sessionid and route,
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * normally '.'
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "stickysessionsep must be a single character or Off";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* If set to 'on' the session will break
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * if the worker is in error state or
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "failover must be On|Off";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Balancer timeout in seconds.
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * If set this will be the maximum time to
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * wait for a free worker.
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * Default is not to wait.
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "timeout must be at least one second";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek balancer->s->timeout = apr_time_from_sec(ival);
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Maximum number of failover attempts before
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * giving up.
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "maximum number of attempts must be a positive number";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (strlen(val) > (sizeof(balancer->s->lbpname)-1))
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "unknown lbmethod";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek provider = ap_lookup_provider(PROXY_LBMETHOD, val, "0");
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (PROXY_STRNCPY(balancer->s->lbpname, val) == APR_SUCCESS) {
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "lbmethod name too large";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "unknown lbmethod";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (!strcasecmp(key, "scolonpathdelim")) {
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* If set to 'on' then ';' will also be
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * used as a session path separator/delim (ala
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "scolonpathdelim must be On|Off";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek balancer->errstatuses = apr_array_make(p, 1, sizeof(int));
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek status = apr_strtok(val_split, ", ", &tok_state);
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek *(int *)apr_array_push(balancer->errstatuses) = ival;
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "failonstatus must be one or more HTTP response codes";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "failontimeout must be On|Off";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (PROXY_STRNCPY(balancer->s->nonce, val) != APR_SUCCESS) {
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "Provided nonce is too large";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (ival < 1 || ival > 100) /* arbitrary limit here */
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "growth must be between 1 and 100";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "forcerecovery must be On|Off";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "unknown Balancer parameter";
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozekstatic int alias_match(const char *uri, const char *alias_fakename)
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *end_fakename = alias_fakename + strlen(alias_fakename);
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *aliasp = alias_fakename, *urip = uri;
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek while (aliasp < end_fakename && urip < end_uri) {
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* any number of '/' in the alias matches any number in
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * the supplied URI, but there must be at least one...
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Other characters are compared literally */
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* fixup badly encoded stuff (e.g. % as last character) */
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* We reach the end of the uri before the end of "alias_fakename"
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * for example uri is "/" and alias_fakename "/examples"
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (urip == end_uri && aliasp != end_fakename) {
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Check last alias path component matched all the way */
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (aliasp[-1] != '/' && *urip != '\0' && *urip != '/')
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Return number of characters from URI which matched (may be
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * greater than length of alias, since we may have matched
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * doubled slashes)
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek/* Detect if an absoluteURI should be proxied or not. Note that we
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * have to do this during this phase because later phases are
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * "short-circuiting"... i.e. translate_names will end when the first
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * module returns OK. So for example, if the request is something like:
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * GET http://othervhost/cgi-bin/printenv HTTP/1.0
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * mod_alias will notice the /cgi-bin part and ScriptAlias it and
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * short-circuit the proxy... just because of the ordering in the
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * configuration file.
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek (proxy_server_conf *) ap_get_module_config(sconf, &proxy_module);
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Ick... msvc (perhaps others) promotes ternary short results to int */
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* but it might be something vhosted */
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek && !strcasecmp(r->parsed_uri.scheme, ap_http_scheme(r))
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek && ap_matches_request_vhost(r, r->parsed_uri.hostname,
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek (apr_port_t)(r->parsed_uri.port_str ? r->parsed_uri.port
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek r->filename = apr_pstrcat(r->pool, "proxy:", r->uri, NULL);
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* We need special treatment for CONNECT proxying: it has no scheme part */
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (conf->req && r->method_number == M_CONNECT
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek r->filename = apr_pstrcat(r->pool, "proxy:", r->uri, NULL);
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozekstatic const char *proxy_interpolate(request_rec *r, const char *str)
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Interpolate an env str in a configuration string
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * Syntax ${var} --> value_of(var)
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * Method: replace one var, and recurse on remainder of string
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * Nothing clever here, and crap like nested vars may do silly things
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * but we'll at least avoid sending the unwary into a loop
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *end;
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *var;
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *val;
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* OK, this is syntax we want to interpolate. Is there such a var ? */
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek var = apr_pstrndup(r->pool, start+2, end-(start+2));
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek firstpart = apr_pstrndup(r->pool, str, (start-str));
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozekstatic apr_array_header_t *proxy_vars(request_rec *r,
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek apr_array_header_t *ret = apr_array_make(r->pool, hdr->nelts,
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek sizeof (struct proxy_alias));
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek struct proxy_alias *old = (struct proxy_alias *) hdr->elts;
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek struct proxy_alias *newcopy = apr_array_push(ret);
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek newcopy->fake = (old[i].flags & PROXYPASS_INTERPOLATE)
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ? proxy_interpolate(r, old[i].fake) : old[i].fake;
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek newcopy->real = (old[i].flags & PROXYPASS_INTERPOLATE)
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ? proxy_interpolate(r, old[i].real) : old[i].real;
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub HrozekPROXY_DECLARE(int) ap_proxy_trans_match(request_rec *r, struct proxy_alias *ent,
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *fake;
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *real;
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek unsigned int nocanon = ent->flags & PROXYPASS_NOCANON;
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *use_uri = nocanon ? r->unparsed_uri : r->uri;
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (dconf && (dconf->interpolate_env == 1) && (ent->flags & PROXYPASS_INTERPOLATE)) {
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (!ap_regexec(ent->regex, r->uri, AP_MAX_REG_MATCH, regm, 0)) {
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* test that we haven't reduced the URI */
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (nocanon && ap_regexec(ent->regex, r->unparsed_uri,
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek found = ap_pregsub(r->pool, real, use_uri, AP_MAX_REG_MATCH,
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(01135)
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek "Substitution in regular expression failed. "
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek "Replacement too long?");
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Note: The strcmp() below catches cases where there
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * was no regex substitution. This is so cases like:
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * ProxyPassMatch \.gif balancer://foo
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * will work "as expected". The upshot is that the 2
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * directives below act the exact same way (ie: $1 is implied):
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * ProxyPassMatch ^(/.*\.gif)$ balancer://foo
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * ProxyPassMatch ^(/.*\.gif)$ balancer://foo$1
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * which may be confusing.
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek found = apr_pstrcat(r->pool, "proxy:", found, NULL);
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek found = apr_pstrcat(r->pool, "proxy:", real, use_uri, NULL);
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (nocanon && len != alias_match(r->unparsed_uri, ent->fake)) {
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek found = apr_pstrcat(r->pool, "proxy:", real, use_uri + len, NULL);
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* We made a reducing transformation, so we can't safely use
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * unparsed_uri. Safe fallback is to ignore nocanon.
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01136)
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek "Unescaped URL path matched ProxyPass; ignoring unsafe nocanon");
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* mod_proxy_http needs to be told. Different module. */
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek apr_table_setn(r->notes, "proxy-nocanon", "1");
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek apr_table_setn(r->notes, "proxy-noquery", "1");
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* someone has already set up the proxy, it was possibly ourselves
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * in proxy_detect
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if ((r->unparsed_uri[0] == '*' && r->unparsed_uri[1] == '\0')
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* XXX: since r->uri has been manipulated already we're not really
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * compliant with RFC1945 at this point. But this probably isn't
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek * an issue because this is a hybrid proxy/origin server.
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek dconf = ap_get_module_config(r->per_dir_config, &proxy_module);
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* short way - this location is reverse proxied? */
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek int rv = ap_proxy_trans_match(r, dconf->alias, dconf);
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek conf = (proxy_server_conf *) ap_get_module_config(r->server->module_config,
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* long way - walk the list of aliases, find a match */
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ent = (struct proxy_alias *) conf->aliases->elts;
c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek int rv = ap_proxy_trans_match(r, &ent[i], dconf);
return rv;
return DECLINED;
&proxy_module);
for (j = 0; j < num_sec; ++j)
if (entry_proxy->r
return OK;
int access_status;
return DECLINED;
return access_status;
return OK;
char *url, *p;
int access_status;
&proxy_module);
return DECLINED;
return access_status;
return HTTP_BAD_REQUEST;
char *nuri;
const char *ref;
return DECLINED;
&r->parsed_uri,
return HTTP_MOVED_PERMANENTLY;
const char *p2;
int direct_connect = 0;
const char *str;
return DECLINED;
char *end;
else if (maxfwd == 0) {
switch (r->method_number) {
case M_TRACE: {
int access_status;
return OK;
case M_OPTIONS: {
int access_status;
return OK;
if (maxfwd >= 0) {
return HTTP_METHOD_NOT_ALLOWED;
return HTTP_REQUEST_ENTITY_TOO_LARGE;
if (p == NULL) {
return HTTP_BAD_REQUEST;
return HTTP_MOVED_PERMANENTLY;
!direct_connect; i++) {
#if DEBUGGING
r->uri);
return access_status;
if (!worker)
goto cleanup;
if (balancer) {
if (!direct_connect) {
const char *cl_a;
char *end;
goto cleanup;
if (cl_a) {
if (cl > 0) {
goto cleanup;
goto cleanup;
if (balancer) {
if (balancer) {
goto cleanup;
return access_status;
return ps;
ps->recv_buffer_size = (overrides->recv_buffer_size_set == 0) ? base->recv_buffer_size : overrides->recv_buffer_size;
ps->io_buffer_size = (overrides->io_buffer_size_set == 0) ? base->io_buffer_size : overrides->io_buffer_size;
ps->proxy_status = (overrides->proxy_status_set == 0) ? base->proxy_status : overrides->proxy_status;
ps->source_address = (overrides->source_address_set == 0) ? base->source_address : overrides->source_address;
return ps;
const char *arg)
return NULL;
return (void *) new;
return new;
char *r, *f, *scheme;
int port;
if (regex)
scheme[p-r] = 0;
if (q != NULL) {
if (regex)
if (regex) {
if (!reg)
return NULL;
char *ptr;
char *ret, *c;
if (c == NULL) {
return NULL;
return ret;
return url;
char *r = NULL;
char *word;
unsigned int flags = 0;
const char *err;
if (err) {
return err;
while (*arg) {
if (is_regex) {
f = word;
r = word;
if (!val) {
if (r == NULL) {
if (apr_fnmatch_test(f)) {
if (use_regex) {
return NULL;
if (!balancer) {
if (err)
if (err)
int reuse = 0;
if (!worker) {
if (err)
if (reuse) {
if (err)
return NULL;
const char *fake;
const char *real;
const char *interp;
const char *err;
if (err) {
return err;
fake = f;
real = r;
interp = i;
real = f;
interp = r;
return NULL;
const char *r, const char *interp)
return NULL;
const char *r, const char *interp)
return NULL;
int found = 0;
if (!found) {
return NULL;
int found = 0;
if (!found) {
#if DEBUGGING
#if DEBUGGING
#if DEBUGGING
#if DEBUGGING
return NULL;
return NULL;
return NULL;
return NULL;
return NULL;
return NULL;
return NULL;
return NULL;
return NULL;
int timeout;
return NULL;
return NULL;
return NULL;
return NULL;
return NULL;
return NULL;
return NULL;
return NULL;
char *word;
int reuse = 0;
if (err)
return err;
while (*arg) {
char *val;
if (!val) {
if (!path)
else if (!name)
if (!path)
if (!name)
if (!balancer) {
if (err)
if (!worker) {
if (reuse) {
if (err)
return NULL;
int in_proxy_section = 0;
if (err)
return err;
if (!balancer) {
if (in_proxy_section) {
if (err)
if (!worker) {
if (in_proxy_section) {
if (err)
while (*arg) {
if (!val) {
if (worker)
if (err)
return NULL;
&proxy_module);
const char *errmsg;
return err;
if (!arg) {
return errmsg;
conf->r = r;
NULL);
NULL);
if (!balancer) {
if (err)
if (!worker) {
if (err)
NULL);
while (*arg) {
if (!val) {
if (worker)
if (err)
return NULL;
{NULL}
if (proxy_ssl_enable) {
if (proxy_ssl_disable) {
return proxy_ssl_disable(c);
if (proxy_is_https) {
return proxy_is_https(c);
const char *var)
if (proxy_ssl_val) {
return NULL;
return rv;
return OK;
return OK;
++worker;
++balancer;
return OK;
if (!reverse) {
s = s->next;
APR_LOCK_DEFAULT, 0);
proxy_lb_workers = 0;
return OK;
/* register optional functions within proxy_util.c */
request_rec *r,
request_rec *r,
(request_rec *r), (r),
(status, r),