0f081398cf0eef8cc7c66a535d450110a92dc8aefielding

3568de757bac0b47256647504c186d17ca272f85rbb#include "mod_proxy.h"

3568de757bac0b47256647504c186d17ca272f85rbb#include "mod_core.h"

3568de757bac0b47256647504c186d17ca272f85rbb#include "apr_optional.h"

3568de757bac0b47256647504c186d17ca272f85rbb#include "scoreboard.h"

3568de757bac0b47256647504c186d17ca272f85rbb#include "mod_status.h"

3568de757bac0b47256647504c186d17ca272f85rbb#include "proxy_util.h"

3568de757bac0b47256647504c186d17ca272f85rbb

3568de757bac0b47256647504c186d17ca272f85rbb#if (MODULE_MAGIC_NUMBER_MAJOR > 20020903)

3568de757bac0b47256647504c186d17ca272f85rbb#include "mod_ssl.h"

3568de757bac0b47256647504c186d17ca272f85rbb#else

3568de757bac0b47256647504c186d17ca272f85rbbAPR_DECLARE_OPTIONAL_FN(int, ssl_proxy_enable, (conn_rec *));

3568de757bac0b47256647504c186d17ca272f85rbbAPR_DECLARE_OPTIONAL_FN(int, ssl_engine_disable, (conn_rec *));

3568de757bac0b47256647504c186d17ca272f85rbbAPR_DECLARE_OPTIONAL_FN(int, ssl_is_https, (conn_rec *));

3568de757bac0b47256647504c186d17ca272f85rbbAPR_DECLARE_OPTIONAL_FN(char *, ssl_var_lookup,

3568de757bac0b47256647504c186d17ca272f85rbb (apr_pool_t *, server_rec *,

3568de757bac0b47256647504c186d17ca272f85rbb conn_rec *, request_rec *, char *));

3568de757bac0b47256647504c186d17ca272f85rbb#endif

3568de757bac0b47256647504c186d17ca272f85rbb

3568de757bac0b47256647504c186d17ca272f85rbb#ifndef MAX

3568de757bac0b47256647504c186d17ca272f85rbb#define MAX(x,y) ((x) >= (y) ? (x) : (y))

3568de757bac0b47256647504c186d17ca272f85rbb#endif

3568de757bac0b47256647504c186d17ca272f85rbb

3568de757bac0b47256647504c186d17ca272f85rbb

3568de757bac0b47256647504c186d17ca272f85rbb

3568de757bac0b47256647504c186d17ca272f85rbbstatic const char *set_worker_param(apr_pool_t *p,

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding proxy_worker *worker,

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding const char *key,

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding const char *val)

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding{

3568de757bac0b47256647504c186d17ca272f85rbb

cd8f8c995d415473f3bfb0b329b2450f2a722c3atrawick int ival;

3568de757bac0b47256647504c186d17ca272f85rbb apr_interval_time_t timeout;

3568de757bac0b47256647504c186d17ca272f85rbb

3568de757bac0b47256647504c186d17ca272f85rbb if (!strcasecmp(key, "loadfactor")) {

3568de757bac0b47256647504c186d17ca272f85rbb /* Normalized load factor. Used with BalancerMamber,

db12cd62083041bf90945eeb90cc40fbd2340797trawick worker->s->lbfactor = atoi(val);

db12cd62083041bf90945eeb90cc40fbd2340797trawick if (worker->s->lbfactor < 1 || worker->s->lbfactor > 100)

333eac96e4fb7d6901cb75e6ca7bb22b2ccb84cetrawick return "LoadFactor must be a number between 1..100";

333eac96e4fb7d6901cb75e6ca7bb22b2ccb84cetrawick }

9f979f5c8061f6f6f560d1824e0e378ff5b91931rpluem else if (!strcasecmp(key, "retry")) {

3568de757bac0b47256647504c186d17ca272f85rbb /* If set it will give the retry timeout for the worker

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz ival = atoi(val);

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz if (ival < 0)

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding return "Retry must be a positive value";

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz worker->s->retry = apr_time_from_sec(ival);

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding worker->s->retry_set = 1;

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding }

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding else if (!strcasecmp(key, "ttl")) {

8f3ec4772d2aeb347cf40e87c77627bb784dd018rbb /* Time in seconds that will destroy all the connections

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding ival = atoi(val);

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf if (ival < 1)

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf return "TTL must be at least one second";

cd8f8c995d415473f3bfb0b329b2450f2a722c3atrawick worker->s->ttl = apr_time_from_sec(ival);

98fb535f829e2a95aabd82420931f476661fa8e3jorton }

f0e395a55abfcad3d2bd7c63470003b08a93d567nd else if (!strcasecmp(key, "min")) {

f0e395a55abfcad3d2bd7c63470003b08a93d567nd /* Initial number of connections to remote

f0e395a55abfcad3d2bd7c63470003b08a93d567nd ival = atoi(val);

98fb535f829e2a95aabd82420931f476661fa8e3jorton if (ival < 0)

7cd5419264796cfeaf8215383cf0f89130a81fectrawick return "Min must be a positive number";

7cd5419264796cfeaf8215383cf0f89130a81fectrawick worker->s->min = ival;

7cd5419264796cfeaf8215383cf0f89130a81fectrawick }

7cd5419264796cfeaf8215383cf0f89130a81fectrawick else if (!strcasecmp(key, "max")) {

7cd5419264796cfeaf8215383cf0f89130a81fectrawick /* Maximum number of connections to remote

7cd5419264796cfeaf8215383cf0f89130a81fectrawick ival = atoi(val);

7cd5419264796cfeaf8215383cf0f89130a81fectrawick if (ival < 0)

3568de757bac0b47256647504c186d17ca272f85rbb return "Max must be a positive number";

41634f717c623556a16b27b25d7d909a66fe20f8wrowe worker->s->hmax = ival;

3568de757bac0b47256647504c186d17ca272f85rbb }

3568de757bac0b47256647504c186d17ca272f85rbb /* XXX: More inteligent naming needed */

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz else if (!strcasecmp(key, "smax")) {

3568de757bac0b47256647504c186d17ca272f85rbb /* Maximum number of connections to remote that

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz ival = atoi(val);

3568de757bac0b47256647504c186d17ca272f85rbb if (ival < 0)

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz return "Smax must be a positive number";

3568de757bac0b47256647504c186d17ca272f85rbb worker->s->smax = ival;

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding }

41634f717c623556a16b27b25d7d909a66fe20f8wrowe else if (!strcasecmp(key, "acquire")) {

3568de757bac0b47256647504c186d17ca272f85rbb /* Acquire timeout in given unit (default is milliseconds).

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz if (ap_timeout_parameter_parse(val, &timeout, "ms") != APR_SUCCESS)

3568de757bac0b47256647504c186d17ca272f85rbb return "Acquire timeout has wrong format";

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz if (timeout < 1000)

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding return "Acquire must be at least one millisecond";

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding worker->s->acquire = timeout;

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz worker->s->acquire_set = 1;

3568de757bac0b47256647504c186d17ca272f85rbb }

fc1efab92032301e317f07e1b3a00082d9d71f3frbb else if (!strcasecmp(key, "timeout")) {

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz /* Connection timeout in seconds.

24b534291150023e6b68eca89ddd33e475ccddc0wrowe ival = atoi(val);

3568de757bac0b47256647504c186d17ca272f85rbb if (ival < 1)

24b534291150023e6b68eca89ddd33e475ccddc0wrowe return "Timeout must be at least one second";

24b534291150023e6b68eca89ddd33e475ccddc0wrowe worker->s->timeout = apr_time_from_sec(ival);

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz worker->s->timeout_set = 1;

3568de757bac0b47256647504c186d17ca272f85rbb }

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz else if (!strcasecmp(key, "iobuffersize")) {

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz long s = atol(val);

3568de757bac0b47256647504c186d17ca272f85rbb if (s < 512 && s) {

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz return "IOBufferSize must be >= 512 bytes, or 0 for system default.";

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz }

3568de757bac0b47256647504c186d17ca272f85rbb worker->s->io_buffer_size = (s ? s : AP_IOBUFSIZE);

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz worker->s->io_buffer_size_set = 1;

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz }

3568de757bac0b47256647504c186d17ca272f85rbb else if (!strcasecmp(key, "receivebuffersize")) {

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz ival = atoi(val);

3568de757bac0b47256647504c186d17ca272f85rbb if (ival < 512 && ival != 0) {

3568de757bac0b47256647504c186d17ca272f85rbb return "ReceiveBufferSize must be >= 512 bytes, or 0 for system default.";

3568de757bac0b47256647504c186d17ca272f85rbb }

3568de757bac0b47256647504c186d17ca272f85rbb worker->s->recv_buffer_size = ival;

3568de757bac0b47256647504c186d17ca272f85rbb worker->s->recv_buffer_size_set = 1;

3568de757bac0b47256647504c186d17ca272f85rbb }

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz else if (!strcasecmp(key, "keepalive")) {

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz if (!strcasecmp(val, "on"))

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz worker->s->keepalive = 1;

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz else if (!strcasecmp(val, "off"))

3568de757bac0b47256647504c186d17ca272f85rbb worker->s->keepalive = 0;

3568de757bac0b47256647504c186d17ca272f85rbb else

3568de757bac0b47256647504c186d17ca272f85rbb return "KeepAlive must be On|Off";

3568de757bac0b47256647504c186d17ca272f85rbb worker->s->keepalive_set = 1;

3568de757bac0b47256647504c186d17ca272f85rbb }

3568de757bac0b47256647504c186d17ca272f85rbb else if (!strcasecmp(key, "disablereuse")) {

3568de757bac0b47256647504c186d17ca272f85rbb if (!strcasecmp(val, "on"))

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz worker->s->disablereuse = 1;

3568de757bac0b47256647504c186d17ca272f85rbb else if (!strcasecmp(val, "off"))

3568de757bac0b47256647504c186d17ca272f85rbb worker->s->disablereuse = 0;

3568de757bac0b47256647504c186d17ca272f85rbb else

3568de757bac0b47256647504c186d17ca272f85rbb return "DisableReuse must be On|Off";

3568de757bac0b47256647504c186d17ca272f85rbb worker->s->disablereuse_set = 1;

3568de757bac0b47256647504c186d17ca272f85rbb }

3568de757bac0b47256647504c186d17ca272f85rbb else if (!strcasecmp(key, "route")) {

3fa816e4832a1c70600bdfd6fc5ef60e9f1c18bbsf /* Worker route.

397df70abe0bdd78a84fb6c38c02641bcfeadceasf if (strlen(val) >= PROXY_WORKER_MAX_ROUTE_SIZE)

397df70abe0bdd78a84fb6c38c02641bcfeadceasf return "Route length must be < 64 characters";

397df70abe0bdd78a84fb6c38c02641bcfeadceasf PROXY_STRNCPY(worker->s->route, val);

3568de757bac0b47256647504c186d17ca272f85rbb }

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding else if (!strcasecmp(key, "redirect")) {

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding /* Worker redirection route.

239f998fbee5ac5b114b965bb76e217cce0003edstoddard if (strlen(val) >= PROXY_WORKER_MAX_ROUTE_SIZE)

78ae889ffe0fdfab72f56c6993b0f302cb48da55rbb return "Redirect length must be < 64 characters";

d69e1ed15b5db3d832c1f6c8c403ef397248857atrawick PROXY_STRNCPY(worker->s->redirect, val);

6653a33e820463abd4f81915b7a1eba0f602e200brianp }

6653a33e820463abd4f81915b7a1eba0f602e200brianp else if (!strcasecmp(key, "status")) {

6653a33e820463abd4f81915b7a1eba0f602e200brianp const char *v;

41634f717c623556a16b27b25d7d909a66fe20f8wrowe int mode = 1;

41634f717c623556a16b27b25d7d909a66fe20f8wrowe apr_status_t rv;

6653a33e820463abd4f81915b7a1eba0f602e200brianp /* Worker status.

6653a33e820463abd4f81915b7a1eba0f602e200brianp for (v = val; *v; v++) {

6653a33e820463abd4f81915b7a1eba0f602e200brianp if (*v == '+') {

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm mode = 1;

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm v++;

cd8f8c995d415473f3bfb0b329b2450f2a722c3atrawick }

36c8049de63c446926139936c3d195330a0539cetrawick else if (*v == '-') {

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf mode = 0;

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf v++;

3568de757bac0b47256647504c186d17ca272f85rbb }

dd028aa8111afb6534fece555e8c2d408894671etrawick rv = ap_proxy_set_wstatus(*v, mode, worker);

d90b36a9e6f6ea9a583694f4db5e5edd54a750b3minfrin if (rv != APR_SUCCESS)

d90b36a9e6f6ea9a583694f4db5e5edd54a750b3minfrin return "Unknown status parameter option";

d90b36a9e6f6ea9a583694f4db5e5edd54a750b3minfrin }

d90b36a9e6f6ea9a583694f4db5e5edd54a750b3minfrin }

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding else if (!strcasecmp(key, "flushpackets")) {

d90b36a9e6f6ea9a583694f4db5e5edd54a750b3minfrin if (!strcasecmp(val, "on"))

d90b36a9e6f6ea9a583694f4db5e5edd54a750b3minfrin worker->s->flush_packets = flush_on;

ca53a74f4012a45cbad48e940eddf27d866981f9dougm else if (!strcasecmp(val, "off"))

ca53a74f4012a45cbad48e940eddf27d866981f9dougm worker->s->flush_packets = flush_off;

ca53a74f4012a45cbad48e940eddf27d866981f9dougm else if (!strcasecmp(val, "auto"))

d90b36a9e6f6ea9a583694f4db5e5edd54a750b3minfrin worker->s->flush_packets = flush_auto;

d90b36a9e6f6ea9a583694f4db5e5edd54a750b3minfrin else

d90b36a9e6f6ea9a583694f4db5e5edd54a750b3minfrin return "flushpackets must be on|off|auto";

d90b36a9e6f6ea9a583694f4db5e5edd54a750b3minfrin }

dd028aa8111afb6534fece555e8c2d408894671etrawick else if (!strcasecmp(key, "flushwait")) {

dd028aa8111afb6534fece555e8c2d408894671etrawick ival = atoi(val);

6653a33e820463abd4f81915b7a1eba0f602e200brianp if (ival > 1000 || ival < 0) {

6653a33e820463abd4f81915b7a1eba0f602e200brianp return "flushwait must be <= 1000, or 0 for system default of 10 millseconds.";

6653a33e820463abd4f81915b7a1eba0f602e200brianp }

6653a33e820463abd4f81915b7a1eba0f602e200brianp if (ival == 0)

6653a33e820463abd4f81915b7a1eba0f602e200brianp worker->s->flush_wait = PROXY_FLUSH_WAIT;

6653a33e820463abd4f81915b7a1eba0f602e200brianp else

6653a33e820463abd4f81915b7a1eba0f602e200brianp worker->s->flush_wait = ival * 1000; /* change to microseconds */

6653a33e820463abd4f81915b7a1eba0f602e200brianp }

6653a33e820463abd4f81915b7a1eba0f602e200brianp else if (!strcasecmp(key, "ping")) {

6653a33e820463abd4f81915b7a1eba0f602e200brianp /* Ping/Pong timeout in given unit (default is second).

6653a33e820463abd4f81915b7a1eba0f602e200brianp if (ap_timeout_parameter_parse(val, &timeout, "s") != APR_SUCCESS)

6653a33e820463abd4f81915b7a1eba0f602e200brianp return "Ping/Pong timeout has wrong format";

6653a33e820463abd4f81915b7a1eba0f602e200brianp if (timeout < 1000)

6653a33e820463abd4f81915b7a1eba0f602e200brianp return "Ping/Pong timeout must be at least one millisecond";

6653a33e820463abd4f81915b7a1eba0f602e200brianp worker->s->ping_timeout = timeout;

cd8f8c995d415473f3bfb0b329b2450f2a722c3atrawick worker->s->ping_timeout_set = 1;

cd8f8c995d415473f3bfb0b329b2450f2a722c3atrawick }

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf else if (!strcasecmp(key, "lbset")) {

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf ival = atoi(val);

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf if (ival < 0 || ival > 99)

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf return "lbset must be between 0 and 99";

cd8f8c995d415473f3bfb0b329b2450f2a722c3atrawick worker->s->lbset = ival;

239f998fbee5ac5b114b965bb76e217cce0003edstoddard }

3568de757bac0b47256647504c186d17ca272f85rbb else if (!strcasecmp(key, "connectiontimeout")) {

3568de757bac0b47256647504c186d17ca272f85rbb /* Request timeout in given unit (default is second).

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard if (ap_timeout_parameter_parse(val, &timeout, "s") != APR_SUCCESS)

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard return "Connectiontimeout has wrong format";

3568de757bac0b47256647504c186d17ca272f85rbb if (timeout < 1000)

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz return "Connectiontimeout must be at least one millisecond.";

48d2edbfb84e5559b5da0f8d614ccab805cc67a8rbb worker->s->conn_timeout = timeout;

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding worker->s->conn_timeout_set = 1;

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard }

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding else if (!strcasecmp(key, "flusher")) {

f2e009134c7e279f99dfca5bd421f721bf1f7840jorton if (strlen(val) >= PROXY_WORKER_MAX_SCHEME_SIZE)

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding return "flusher name length must be < 16 characters";

3568de757bac0b47256647504c186d17ca272f85rbb PROXY_STRNCPY(worker->s->flusher, val);

3568de757bac0b47256647504c186d17ca272f85rbb }

3568de757bac0b47256647504c186d17ca272f85rbb else {

3568de757bac0b47256647504c186d17ca272f85rbb return "unknown Worker parameter";

3568de757bac0b47256647504c186d17ca272f85rbb }

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard return NULL;

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard}

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantzstatic const char *set_balancer_param(proxy_server_conf *conf,

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard apr_pool_t *p,

9f979f5c8061f6f6f560d1824e0e378ff5b91931rpluem proxy_balancer *balancer,

9f979f5c8061f6f6f560d1824e0e378ff5b91931rpluem const char *key,

9f979f5c8061f6f6f560d1824e0e378ff5b91931rpluem const char *val)

9f979f5c8061f6f6f560d1824e0e378ff5b91931rpluem{

9f979f5c8061f6f6f560d1824e0e378ff5b91931rpluem

9f979f5c8061f6f6f560d1824e0e378ff5b91931rpluem int ival;

9f979f5c8061f6f6f560d1824e0e378ff5b91931rpluem if (!strcasecmp(key, "stickysession")) {

e2de0e939faab767454a164c7d2e8ea710fd1a26sf char *path;

e2de0e939faab767454a164c7d2e8ea710fd1a26sf /* Balancer sticky session name.

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard if (strlen(val) > (PROXY_BALANCER_MAX_STICKY_SIZE-1))

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard return "stickysession length must be < 64 characters";

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard PROXY_STRNCPY(balancer->s->sticky_path, val);

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard PROXY_STRNCPY(balancer->s->sticky, val);

f2e009134c7e279f99dfca5bd421f721bf1f7840jorton

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard if ((path = strchr((char *)balancer->s->sticky, '|'))) {

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard *path++ = '\0';

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard PROXY_STRNCPY(balancer->s->sticky_path, path);

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard }

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz }

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard else if (!strcasecmp(key, "nofailover")) {

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard /* If set to 'on' the session will break

7cd5419264796cfeaf8215383cf0f89130a81fectrawick if (!strcasecmp(val, "on"))

7cd5419264796cfeaf8215383cf0f89130a81fectrawick balancer->s->sticky_force = 1;

7cd5419264796cfeaf8215383cf0f89130a81fectrawick else if (!strcasecmp(val, "off"))

7cd5419264796cfeaf8215383cf0f89130a81fectrawick balancer->s->sticky_force = 0;

e8f95a682820a599fe41b22977010636be5c2717jim else

98cd3186185bb28ae6c95a3f159899fcf56a663ftrawick return "failover must be On|Off";

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf }

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf else if (!strcasecmp(key, "timeout")) {

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf /* Balancer timeout in seconds.

a72ba68ecbbc61e4b513e50d6000245c33f753dcwrowe ival = atoi(val);

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm if (ival < 1)

397df70abe0bdd78a84fb6c38c02641bcfeadceasf return "timeout must be at least one second";

397df70abe0bdd78a84fb6c38c02641bcfeadceasf balancer->s->timeout = apr_time_from_sec(ival);

397df70abe0bdd78a84fb6c38c02641bcfeadceasf }

397df70abe0bdd78a84fb6c38c02641bcfeadceasf else if (!strcasecmp(key, "maxattempts")) {

397df70abe0bdd78a84fb6c38c02641bcfeadceasf /* Maximum number of failover attempts before

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm ival = atoi(val);

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm if (ival < 0)

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf return "maximum number of attempts must be a positive number";

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf balancer->s->max_attempts = ival;

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf balancer->s->max_attempts_set = 1;

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf }

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf else if (!strcasecmp(key, "lbmethod")) {

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf proxy_balancer_method *provider;

3cbd177a6c885562f9ad0cf11695f044489c881dgregames if (strlen(val) > (sizeof(balancer->s->lbpname)-1))

3cbd177a6c885562f9ad0cf11695f044489c881dgregames return "unknown lbmethod";

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf provider = ap_lookup_provider(PROXY_LBMETHOD, val, "0");

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard if (provider) {

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf balancer->lbmethod = provider;

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf if (PROXY_STRNCPY(balancer->s->lbpname, val) == APR_SUCCESS) {

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf return NULL;

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf }

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf else {

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf return "lbmethod name too large";

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf }

5a0f707b48da7703cbe6bc087f13a6735b1c742dgregames }

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz return "unknown lbmethod";

5a0f707b48da7703cbe6bc087f13a6735b1c742dgregames }

5a0f707b48da7703cbe6bc087f13a6735b1c742dgregames else if (!strcasecmp(key, "scolonpathdelim")) {

5a0f707b48da7703cbe6bc087f13a6735b1c742dgregames /* If set to 'on' then ';' will also be

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz if (!strcasecmp(val, "on"))

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard balancer->s->scolonsep = 1;

ad83978f20c7d1a4323059d9af122e56fcd353bdstoddard else if (!strcasecmp(val, "off"))

7cd5419264796cfeaf8215383cf0f89130a81fectrawick balancer->s->scolonsep = 0;

7cd5419264796cfeaf8215383cf0f89130a81fectrawick else

7cd5419264796cfeaf8215383cf0f89130a81fectrawick return "scolonpathdelim must be On|Off";

7cd5419264796cfeaf8215383cf0f89130a81fectrawick }

7cd5419264796cfeaf8215383cf0f89130a81fectrawick else if (!strcasecmp(key, "failonstatus")) {

7cd5419264796cfeaf8215383cf0f89130a81fectrawick char *val_split;

7cd5419264796cfeaf8215383cf0f89130a81fectrawick char *status;

7cd5419264796cfeaf8215383cf0f89130a81fectrawick char *tok_state;

7cd5419264796cfeaf8215383cf0f89130a81fectrawick

4f017cb91aa6591385966ccaf0c326e6b2f2c2b8sf val_split = apr_pstrdup(p, val);

7cd5419264796cfeaf8215383cf0f89130a81fectrawick

7cd5419264796cfeaf8215383cf0f89130a81fectrawick balancer->errstatuses = apr_array_make(p, 1, sizeof(int));

7cd5419264796cfeaf8215383cf0f89130a81fectrawick

7cd5419264796cfeaf8215383cf0f89130a81fectrawick status = apr_strtok(val_split, ", ", &tok_state);

7cd5419264796cfeaf8215383cf0f89130a81fectrawick while (status != NULL) {

7cd5419264796cfeaf8215383cf0f89130a81fectrawick ival = atoi(status);

7cd5419264796cfeaf8215383cf0f89130a81fectrawick if (ap_is_HTTP_VALID_RESPONSE(ival)) {

7cd5419264796cfeaf8215383cf0f89130a81fectrawick *(int *)apr_array_push(balancer->errstatuses) = ival;

7cd5419264796cfeaf8215383cf0f89130a81fectrawick }

4f017cb91aa6591385966ccaf0c326e6b2f2c2b8sf else {

7cd5419264796cfeaf8215383cf0f89130a81fectrawick return "failonstatus must be one or more HTTP response codes";

7cd5419264796cfeaf8215383cf0f89130a81fectrawick }

ad83978f20c7d1a4323059d9af122e56fcd353bdstoddard status = apr_strtok(NULL, ", ", &tok_state);

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz }

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard }

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz else if (!strcasecmp(key, "nonce")) {

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard if (!strcasecmp(val, "None")) {

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard *balancer->s->nonce = '\0';

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard }

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard else {

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard if (PROXY_STRNCPY(balancer->s->nonce, val) != APR_SUCCESS) {

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard return "Provided nonce is too large";

3568de757bac0b47256647504c186d17ca272f85rbb }

7cd5419264796cfeaf8215383cf0f89130a81fectrawick }

7cd5419264796cfeaf8215383cf0f89130a81fectrawick }

7cd5419264796cfeaf8215383cf0f89130a81fectrawick else if (!strcasecmp(key, "growth")) {

7cd5419264796cfeaf8215383cf0f89130a81fectrawick ival = atoi(val);

7cd5419264796cfeaf8215383cf0f89130a81fectrawick if (ival < 1 || ival > 100) /* arbitrary limit here */

7cd5419264796cfeaf8215383cf0f89130a81fectrawick return "growth must be between 1 and 100";

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm balancer->growth = ival;

3568de757bac0b47256647504c186d17ca272f85rbb }

3568de757bac0b47256647504c186d17ca272f85rbb else {

74fd6d9aeadb9022086259c5c1ae00bc0dda9c9astoddard return "unknown Balancer parameter";

72b6f1cf3e616473e1c26464b3193b13c2c09e87brianp }

72b6f1cf3e616473e1c26464b3193b13c2c09e87brianp return NULL;

3568de757bac0b47256647504c186d17ca272f85rbb}

3568de757bac0b47256647504c186d17ca272f85rbb

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddardstatic int alias_match(const char *uri, const char *alias_fakename)

8dfa8c6f60f12e0b65eebbb652b629f911f0f84bsf{

8dfa8c6f60f12e0b65eebbb652b629f911f0f84bsf const char *end_fakename = alias_fakename + strlen(alias_fakename);

8dfa8c6f60f12e0b65eebbb652b629f911f0f84bsf const char *aliasp = alias_fakename, *urip = uri;

8dfa8c6f60f12e0b65eebbb652b629f911f0f84bsf const char *end_uri = uri + strlen(uri);

ddf3c03e4798f13fe6eea22039864261ea09da18sf

b5ffe4f30780fb159db08bd9f628980d2a092711sf while (aliasp < end_fakename && urip < end_uri) {

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard if (*aliasp == '/') {

1ce78cf71b5baaf2c1ab48e818cb1f2397df5010trawick /* any number of '/' in the alias matches any number in

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard if (*urip != '/')

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz return 0;

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard while (*aliasp == '/')

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz ++aliasp;

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz while (*urip == '/')

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz ++urip;

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard }

01d315c948a50cb511dbaee108b9571ee9a4d287jim else {

01d315c948a50cb511dbaee108b9571ee9a4d287jim /* Other characters are compared literally */

01d315c948a50cb511dbaee108b9571ee9a4d287jim if (*urip++ != *aliasp++)

dd028aa8111afb6534fece555e8c2d408894671etrawick return 0;

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard }

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard }

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard

3568de757bac0b47256647504c186d17ca272f85rbb /* fixup badly encoded stuff (e.g. % as last character) */

3568de757bac0b47256647504c186d17ca272f85rbb if (aliasp > end_fakename) {

3568de757bac0b47256647504c186d17ca272f85rbb aliasp = end_fakename;

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard }

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz if (urip > end_uri) {

f714f1a7002928d785e53e70349700a7f595fee3trawick urip = end_uri;

f714f1a7002928d785e53e70349700a7f595fee3trawick }

3568de757bac0b47256647504c186d17ca272f85rbb

ad83978f20c7d1a4323059d9af122e56fcd353bdstoddard /* We reach the end of the uri before the end of "alias_fakename"

4a13940dc2990df0a798718d3a3f9cf1566c2217bjh if (urip == end_uri && aliasp != end_fakename) {

4a13940dc2990df0a798718d3a3f9cf1566c2217bjh return 0;

3568de757bac0b47256647504c186d17ca272f85rbb }

3568de757bac0b47256647504c186d17ca272f85rbb

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard /* Check last alias path component matched all the way */

663237d6bcc59ac0997d71d48a1baa55fa29a3d8jim if (aliasp[-1] != '/' && *urip != '\0' && *urip != '/')

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard return 0;

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard

3568de757bac0b47256647504c186d17ca272f85rbb /* Return number of characters from URI which matched (may be

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard return urip - uri;

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard}

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard

4a13940dc2990df0a798718d3a3f9cf1566c2217bjhstatic int proxy_detect(request_rec *r)

4a13940dc2990df0a798718d3a3f9cf1566c2217bjh{

3568de757bac0b47256647504c186d17ca272f85rbb void *sconf = r->server->module_config;

3568de757bac0b47256647504c186d17ca272f85rbb proxy_server_conf *conf =

663237d6bcc59ac0997d71d48a1baa55fa29a3d8jim (proxy_server_conf *) ap_get_module_config(sconf, &proxy_module);

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard /* Ick... msvc (perhaps others) promotes ternary short results to int */

3568de757bac0b47256647504c186d17ca272f85rbb

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz if (conf->req && r->parsed_uri.scheme) {

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard /* but it might be something vhosted */

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard if (!(r->parsed_uri.hostname

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard && !strcasecmp(r->parsed_uri.scheme, ap_http_scheme(r))

3568de757bac0b47256647504c186d17ca272f85rbb && ap_matches_request_vhost(r, r->parsed_uri.hostname,

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard (apr_port_t)(r->parsed_uri.port_str ? r->parsed_uri.port

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz : ap_default_port(r))))) {

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard r->proxyreq = PROXYREQ_PROXY;

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard r->uri = r->unparsed_uri;

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard r->filename = apr_pstrcat(r->pool, "proxy:", r->uri, NULL);

3568de757bac0b47256647504c186d17ca272f85rbb r->handler = "proxy-server";

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard }

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz }

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz /* We need special treatment for CONNECT proxying: it has no scheme part */

3568de757bac0b47256647504c186d17ca272f85rbb else if (conf->req && r->method_number == M_CONNECT

3568de757bac0b47256647504c186d17ca272f85rbb && r->parsed_uri.hostname

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz && r->parsed_uri.port_str) {

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz r->proxyreq = PROXYREQ_PROXY;

3568de757bac0b47256647504c186d17ca272f85rbb r->uri = r->unparsed_uri;

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard r->filename = apr_pstrcat(r->pool, "proxy:", r->uri, NULL);

3568de757bac0b47256647504c186d17ca272f85rbb r->handler = "proxy-server";

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf }

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf return DECLINED;

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf}

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf

49aa87d735a13ae3d04012ee0df91ddb51f7c36esfstatic const char *proxy_interpolate(request_rec *r, const char *str)

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf{

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf /* Interpolate an env str in a configuration string

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf const char *start;

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf const char *end;

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf const char *var;

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf const char *val;

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf const char *firstpart;

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf start = ap_strstr_c(str, "${");

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf if (start == NULL) {

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf return str;

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf }

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf end = ap_strchr_c(start+2, '}');

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf if (end == NULL) {

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf return str;

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf }

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf /* OK, this is syntax we want to interpolate. Is there such a var ? */

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf var = apr_pstrndup(r->pool, start+2, end-(start+2));

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf val = apr_table_get(r->subprocess_env, var);

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf firstpart = apr_pstrndup(r->pool, str, (start-str));

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf if (val == NULL) {

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf return apr_pstrcat(r->pool, firstpart,

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf proxy_interpolate(r, end+1), NULL);

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf }

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf else {

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf return apr_pstrcat(r->pool, firstpart, val,

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf proxy_interpolate(r, end+1), NULL);

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf }

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf}

49aa87d735a13ae3d04012ee0df91ddb51f7c36esfstatic apr_array_header_t *proxy_vars(request_rec *r,

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf apr_array_header_t *hdr)

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf{

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf int i;

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf apr_array_header_t *ret = apr_array_make(r->pool, hdr->nelts,

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf sizeof (struct proxy_alias));

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf struct proxy_alias *old = (struct proxy_alias *) hdr->elts;

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf for (i = 0; i < hdr->nelts; ++i) {

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf struct proxy_alias *newcopy = apr_array_push(ret);

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf newcopy->fake = (old[i].flags & PROXYPASS_INTERPOLATE)

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf ? proxy_interpolate(r, old[i].fake) : old[i].fake;

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf newcopy->real = (old[i].flags & PROXYPASS_INTERPOLATE)

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf ? proxy_interpolate(r, old[i].real) : old[i].real;

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf }

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf return ret;

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf}

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf

49aa87d735a13ae3d04012ee0df91ddb51f7c36esfPROXY_DECLARE(int) ap_proxy_trans_match(request_rec *r, struct proxy_alias *ent,

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf proxy_dir_conf *dconf)

3568de757bac0b47256647504c186d17ca272f85rbb{

3568de757bac0b47256647504c186d17ca272f85rbb int len;

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf const char *fake;

3568de757bac0b47256647504c186d17ca272f85rbb const char *real;

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard ap_regmatch_t regm[AP_MAX_REG_MATCH];

3568de757bac0b47256647504c186d17ca272f85rbb ap_regmatch_t reg1[AP_MAX_REG_MATCH];

d69e1ed15b5db3d832c1f6c8c403ef397248857atrawick char *found = NULL;

cd8f8c995d415473f3bfb0b329b2450f2a722c3atrawick int mismatch = 0;

cd8f8c995d415473f3bfb0b329b2450f2a722c3atrawick unsigned int nocanon = ent->flags & PROXYPASS_NOCANON;

cd8f8c995d415473f3bfb0b329b2450f2a722c3atrawick const char *use_uri = nocanon ? r->unparsed_uri : r->uri;

d69e1ed15b5db3d832c1f6c8c403ef397248857atrawick

d69e1ed15b5db3d832c1f6c8c403ef397248857atrawick if (dconf && (dconf->interpolate_env == 1) && (ent->flags & PROXYPASS_INTERPOLATE)) {

d69e1ed15b5db3d832c1f6c8c403ef397248857atrawick fake = proxy_interpolate(r, ent->fake);

d69e1ed15b5db3d832c1f6c8c403ef397248857atrawick real = proxy_interpolate(r, ent->real);

d69e1ed15b5db3d832c1f6c8c403ef397248857atrawick }

d69e1ed15b5db3d832c1f6c8c403ef397248857atrawick else {

d69e1ed15b5db3d832c1f6c8c403ef397248857atrawick fake = ent->fake;

beb70d51e435dc36c56a72b6cd83556c04db9283wrowe real = ent->real;

fe6baec9bbcd36f932b71a355120cd7b5a685d6cfielding }

3568de757bac0b47256647504c186d17ca272f85rbb if (ent->regex) {

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf if (!ap_regexec(ent->regex, r->uri, AP_MAX_REG_MATCH, regm, 0)) {

3568de757bac0b47256647504c186d17ca272f85rbb if ((real[0] == '!') && (real[1] == '\0')) {

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard return DECLINED;

3568de757bac0b47256647504c186d17ca272f85rbb }

8dfa8c6f60f12e0b65eebbb652b629f911f0f84bsf /* test that we haven't reduced the URI */

8dfa8c6f60f12e0b65eebbb652b629f911f0f84bsf if (nocanon && ap_regexec(ent->regex, r->unparsed_uri,

8dfa8c6f60f12e0b65eebbb652b629f911f0f84bsf AP_MAX_REG_MATCH, reg1, 0)) {

8dfa8c6f60f12e0b65eebbb652b629f911f0f84bsf mismatch = 1;

8dfa8c6f60f12e0b65eebbb652b629f911f0f84bsf use_uri = r->uri;

8dfa8c6f60f12e0b65eebbb652b629f911f0f84bsf }

8dfa8c6f60f12e0b65eebbb652b629f911f0f84bsf found = ap_pregsub(r->pool, real, use_uri, AP_MAX_REG_MATCH,

8dfa8c6f60f12e0b65eebbb652b629f911f0f84bsf (use_uri == r->uri) ? regm : reg1);

8dfa8c6f60f12e0b65eebbb652b629f911f0f84bsf if (!found) {

8dfa8c6f60f12e0b65eebbb652b629f911f0f84bsf ap_log_rerror(APLOG_MARK, APLOG_CRIT, 0, r, APLOGNO(01135)

8dfa8c6f60f12e0b65eebbb652b629f911f0f84bsf "Substitution in regular expression failed. "

8dfa8c6f60f12e0b65eebbb652b629f911f0f84bsf "Replacement too long?");

8dfa8c6f60f12e0b65eebbb652b629f911f0f84bsf return HTTP_INTERNAL_SERVER_ERROR;

8dfa8c6f60f12e0b65eebbb652b629f911f0f84bsf }

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard /* Note: The strcmp() below catches cases where there

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard if (strcmp(found, real) != 0) {

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard found = apr_pstrcat(r->pool, "proxy:", found, NULL);

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard }

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard else {

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard found = apr_pstrcat(r->pool, "proxy:", real, use_uri, NULL);

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard }

3568de757bac0b47256647504c186d17ca272f85rbb }

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard }

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz else {

8dfa8c6f60f12e0b65eebbb652b629f911f0f84bsf len = alias_match(r->uri, fake);

8dfa8c6f60f12e0b65eebbb652b629f911f0f84bsf

c0659e61002e9d6ff77b2dca72540e0af1b2ca64stoddard if (len != 0) {

3568de757bac0b47256647504c186d17ca272f85rbb if ((real[0] == '!') && (real[1] == '\0')) {

3568de757bac0b47256647504c186d17ca272f85rbb return DECLINED;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick }

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick if (nocanon && len != alias_match(r->unparsed_uri, ent->fake)) {

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick mismatch = 1;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick use_uri = r->uri;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick }

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick found = apr_pstrcat(r->pool, "proxy:", real, use_uri + len, NULL);

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick }

f886987cd0bd4220c14043c4d9be77ec22902e73trawick }

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick if (mismatch) {

f886987cd0bd4220c14043c4d9be77ec22902e73trawick /* We made a reducing transformation, so we can't safely use

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01136)

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick "Unescaped URL path matched ProxyPass; ignoring unsafe nocanon");

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz }

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz if (found) {

a72ba68ecbbc61e4b513e50d6000245c33f753dcwrowe r->filename = found;

2e7f1d7da527c09e717251e186deffe55e6fbd0ftrawick r->handler = "proxy-server";

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm r->proxyreq = PROXYREQ_REVERSE;

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm if (nocanon && !mismatch) {

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm /* mod_proxy_http needs to be told. Different module. */

2e7f1d7da527c09e717251e186deffe55e6fbd0ftrawick apr_table_setn(r->notes, "proxy-nocanon", "1");

2e7f1d7da527c09e717251e186deffe55e6fbd0ftrawick }

2e7f1d7da527c09e717251e186deffe55e6fbd0ftrawick return OK;

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm }

3568de757bac0b47256647504c186d17ca272f85rbb

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm return DONE;

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz}

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantzstatic int proxy_trans(request_rec *r)

e8f95a682820a599fe41b22977010636be5c2717jim{

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm int i;

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz struct proxy_alias *ent;

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz proxy_dir_conf *dconf;

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz proxy_server_conf *conf;

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm if (r->proxyreq) {

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm /* someone has already set up the proxy, it was possibly ourselves

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm return OK;

36c8049de63c446926139936c3d195330a0539cetrawick }

36c8049de63c446926139936c3d195330a0539cetrawick

36c8049de63c446926139936c3d195330a0539cetrawick if (strcmp(r->unparsed_uri, "*") == 0) {

36c8049de63c446926139936c3d195330a0539cetrawick /* "*" cannot be proxied. */

36c8049de63c446926139936c3d195330a0539cetrawick return DECLINED;

36c8049de63c446926139936c3d195330a0539cetrawick }

36c8049de63c446926139936c3d195330a0539cetrawick

36c8049de63c446926139936c3d195330a0539cetrawick /* Check that the URI is valid. */

e8f95a682820a599fe41b22977010636be5c2717jim if (!r->uri || r->uri[0] != '/') {

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01137)

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm "Invalid URI in request %s", r->the_request);

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick return HTTP_BAD_REQUEST;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick }

36c8049de63c446926139936c3d195330a0539cetrawick

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick /* XXX: since r->uri has been manipulated already we're not really

cb97ae2ff6969c2789b8e03f1bc4187fa73b6bafwrowe

36c8049de63c446926139936c3d195330a0539cetrawick dconf = ap_get_module_config(r->per_dir_config, &proxy_module);

36c8049de63c446926139936c3d195330a0539cetrawick

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick /* short way - this location is reverse proxied? */

e8f95a682820a599fe41b22977010636be5c2717jim if (dconf->alias) {

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm int rv = ap_proxy_trans_match(r, dconf->alias, dconf);

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick if (DONE != rv) {

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick return rv;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick }

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick }

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick conf = (proxy_server_conf *) ap_get_module_config(r->server->module_config,

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick &proxy_module);

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick /* long way - walk the list of aliases, find a match */

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick if (conf->aliases->nelts) {

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick ent = (struct proxy_alias *) conf->aliases->elts;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick for (i = 0; i < conf->aliases->nelts; i++) {

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick int rv = ap_proxy_trans_match(r, &ent[i], dconf);

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick if (DONE != rv) {

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick return rv;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick }

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick }

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick }

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick return DECLINED;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick}

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawickstatic int proxy_walk(request_rec *r)

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick{

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick proxy_server_conf *sconf = ap_get_module_config(r->server->module_config,

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick &proxy_module);

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick ap_conf_vector_t *per_dir_defaults = r->server->lookup_defaults;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick ap_conf_vector_t **sec_proxy = (ap_conf_vector_t **) sconf->sec_proxy->elts;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick ap_conf_vector_t *entry_config;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick proxy_dir_conf *entry_proxy;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick int num_sec = sconf->sec_proxy->nelts;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick /* XXX: shouldn't we use URI here? Canonicalize it first?

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick const char *proxyname = r->filename + 6;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick int j;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick for (j = 0; j < num_sec; ++j)

e8f95a682820a599fe41b22977010636be5c2717jim {

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick entry_config = sec_proxy[j];

f886987cd0bd4220c14043c4d9be77ec22902e73trawick entry_proxy = ap_get_module_config(entry_config, &proxy_module);

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick

f886987cd0bd4220c14043c4d9be77ec22902e73trawick /* XXX: What about case insensitive matching ???

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm if (entry_proxy->r

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm ? ap_regexec(entry_proxy->r, proxyname, 0, NULL, 0)

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm : (entry_proxy->p_is_fnmatch

3568de757bac0b47256647504c186d17ca272f85rbb ? apr_fnmatch(entry_proxy->p, proxyname, 0)

72b6f1cf3e616473e1c26464b3193b13c2c09e87brianp : strncmp(proxyname, entry_proxy->p,

72b6f1cf3e616473e1c26464b3193b13c2c09e87brianp strlen(entry_proxy->p)))) {

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick continue;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick }

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick per_dir_defaults = ap_merge_per_dir_configs(r->pool, per_dir_defaults,

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick entry_config);

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick }

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick r->per_dir_config = per_dir_defaults;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick return OK;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick}

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick

64c351fd973428b5bb4c28e983fa86875ea4e60fdougmstatic int proxy_map_location(request_rec *r)

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick{

f2e009134c7e279f99dfca5bd421f721bf1f7840jorton int access_status;

f2e009134c7e279f99dfca5bd421f721bf1f7840jorton

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick if (!r->proxyreq || !r->filename || strncmp(r->filename, "proxy:", 6) != 0)

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm return DECLINED;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick /* Don't let the core or mod_http map_to_storage hooks handle this,

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick if ((access_status = proxy_walk(r))) {

36c8049de63c446926139936c3d195330a0539cetrawick ap_die(access_status, r);

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick return access_status;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick }

f886987cd0bd4220c14043c4d9be77ec22902e73trawick

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick return OK;

cb97ae2ff6969c2789b8e03f1bc4187fa73b6bafwrowe}

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick

36c8049de63c446926139936c3d195330a0539cetrawick

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawickstatic int proxy_fixup(request_rec *r)

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick{

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick char *url, *p;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick int access_status;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick proxy_dir_conf *dconf = ap_get_module_config(r->per_dir_config,

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick &proxy_module);

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick if (!r->proxyreq || !r->filename || strncmp(r->filename, "proxy:", 6) != 0)

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick return DECLINED;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick /* XXX: Shouldn't we try this before we run the proxy_walk? */

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick url = &r->filename[6];

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick if ((dconf->interpolate_env == 1) && (r->proxyreq == PROXYREQ_REVERSE)) {

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick /* create per-request copy of reverse proxy conf,

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick proxy_req_conf *rconf = apr_palloc(r->pool, sizeof(proxy_req_conf));

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick ap_set_module_config(r->request_config, &proxy_module, rconf);

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick rconf->raliases = proxy_vars(r, dconf->raliases);

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick rconf->cookie_paths = proxy_vars(r, dconf->cookie_paths);

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick rconf->cookie_domains = proxy_vars(r, dconf->cookie_domains);

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick }

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick /* canonicalise each specific scheme */

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick if ((access_status = proxy_run_canon_handler(r, url))) {

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick return access_status;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick }

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick p = strchr(url, ':');

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick if (p == NULL || p == url)

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick return HTTP_BAD_REQUEST;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick return OK; /* otherwise; we've done the best we can */

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick}

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawickstatic int proxy_needsdomain(request_rec *r, const char *url, const char *domain)

f886987cd0bd4220c14043c4d9be77ec22902e73trawick{

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick char *nuri;

f886987cd0bd4220c14043c4d9be77ec22902e73trawick const char *ref;

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm /* We only want to worry about GETs */

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm if (!r->proxyreq || r->method_number != M_GET || !r->parsed_uri.hostname)

64c351fd973428b5bb4c28e983fa86875ea4e60fdougm return DECLINED;

3568de757bac0b47256647504c186d17ca272f85rbb

72b6f1cf3e616473e1c26464b3193b13c2c09e87brianp /* If host does contain a dot already, or it is "localhost", decline */

72b6f1cf3e616473e1c26464b3193b13c2c09e87brianp if (strchr(r->parsed_uri.hostname, '.') != NULL /* has domain, or IPv4 literal */

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick || strchr(r->parsed_uri.hostname, ':') != NULL /* IPv6 literal */

e8f95a682820a599fe41b22977010636be5c2717jim || strcasecmp(r->parsed_uri.hostname, "localhost") == 0)

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick return DECLINED; /* host name has a dot already */

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick ref = apr_table_get(r->headers_in, "Referer");

e8f95a682820a599fe41b22977010636be5c2717jim

44d2e75323651320b480d8bc2f098448a08de4fcwrowe /* Reassemble the request, but insert the domain after the host name */

44d2e75323651320b480d8bc2f098448a08de4fcwrowe /* Note that the domain name always starts with a dot */

44d2e75323651320b480d8bc2f098448a08de4fcwrowe r->parsed_uri.hostname = apr_pstrcat(r->pool, r->parsed_uri.hostname,

44d2e75323651320b480d8bc2f098448a08de4fcwrowe domain, NULL);

44d2e75323651320b480d8bc2f098448a08de4fcwrowe nuri = apr_uri_unparse(r->pool,

44d2e75323651320b480d8bc2f098448a08de4fcwrowe &r->parsed_uri,

44d2e75323651320b480d8bc2f098448a08de4fcwrowe APR_URI_UNP_REVEALPASSWORD);

44d2e75323651320b480d8bc2f098448a08de4fcwrowe

44d2e75323651320b480d8bc2f098448a08de4fcwrowe apr_table_setn(r->headers_out, "Location", nuri);

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(01138)

2e7f1d7da527c09e717251e186deffe55e6fbd0ftrawick "Domain missing: %s sent to %s%s%s", r->uri,

2e7f1d7da527c09e717251e186deffe55e6fbd0ftrawick apr_uri_unparse(r->pool, &r->parsed_uri,

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz APR_URI_UNP_OMITUSERINFO),

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick ref ? " from " : "", ref ? ref : "");

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz

1ec8bd0373f11c07688ec9afbbf778cf78a0bc52wrowe return HTTP_MOVED_PERMANENTLY;

3568de757bac0b47256647504c186d17ca272f85rbb}

1ec8bd0373f11c07688ec9afbbf778cf78a0bc52wrowe

f886987cd0bd4220c14043c4d9be77ec22902e73trawick

f886987cd0bd4220c14043c4d9be77ec22902e73trawickstatic int proxy_handler(request_rec *r)

f886987cd0bd4220c14043c4d9be77ec22902e73trawick{

f886987cd0bd4220c14043c4d9be77ec22902e73trawick char *uri, *scheme, *p;

f886987cd0bd4220c14043c4d9be77ec22902e73trawick const char *p2;

f886987cd0bd4220c14043c4d9be77ec22902e73trawick void *sconf = r->server->module_config;

f886987cd0bd4220c14043c4d9be77ec22902e73trawick proxy_server_conf *conf = (proxy_server_conf *)

1ec8bd0373f11c07688ec9afbbf778cf78a0bc52wrowe ap_get_module_config(sconf, &proxy_module);

1ec8bd0373f11c07688ec9afbbf778cf78a0bc52wrowe apr_array_header_t *proxies = conf->proxies;

1ec8bd0373f11c07688ec9afbbf778cf78a0bc52wrowe struct proxy_remote *ents = (struct proxy_remote *) proxies->elts;

1ec8bd0373f11c07688ec9afbbf778cf78a0bc52wrowe int i, rc, access_status;

3568de757bac0b47256647504c186d17ca272f85rbb int direct_connect = 0;

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz const char *str;

8bfe865d8d61be4ba4a89e45427a3c4211ebabdctrawick long maxfwd;

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz proxy_balancer *balancer = NULL;

3568de757bac0b47256647504c186d17ca272f85rbb proxy_worker *worker = NULL;

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz int attempts = 0, max_attempts = 0;

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz struct dirconn_entry *list = (struct dirconn_entry *)conf->dirconn->elts;

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz /* is this for us? */

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz if (!r->proxyreq || !r->filename || strncmp(r->filename, "proxy:", 6) != 0)

3568de757bac0b47256647504c186d17ca272f85rbb return DECLINED;

3568de757bac0b47256647504c186d17ca272f85rbb

98fb535f829e2a95aabd82420931f476661fa8e3jorton /* handle max-forwards / OPTIONS / TRACE */

98fb535f829e2a95aabd82420931f476661fa8e3jorton if ((str = apr_table_get(r->headers_in, "Max-Forwards"))) {

e8f95a682820a599fe41b22977010636be5c2717jim maxfwd = strtol(str, NULL, 10);

e8f95a682820a599fe41b22977010636be5c2717jim if (maxfwd < 1) {

98fb535f829e2a95aabd82420931f476661fa8e3jorton switch (r->method_number) {

98fb535f829e2a95aabd82420931f476661fa8e3jorton case M_TRACE: {

e8f95a682820a599fe41b22977010636be5c2717jim int access_status;

98fb535f829e2a95aabd82420931f476661fa8e3jorton r->proxyreq = PROXYREQ_NONE;

98fb535f829e2a95aabd82420931f476661fa8e3jorton if ((access_status = ap_send_http_trace(r)))

98fb535f829e2a95aabd82420931f476661fa8e3jorton ap_die(access_status, r);

3568de757bac0b47256647504c186d17ca272f85rbb else

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz ap_finalize_request_protocol(r);

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz return OK;

3568de757bac0b47256647504c186d17ca272f85rbb }

3568de757bac0b47256647504c186d17ca272f85rbb case M_OPTIONS: {

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding int access_status;

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding r->proxyreq = PROXYREQ_NONE;

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding if ((access_status = ap_send_http_options(r)))

85c5af648e9f414bd4f157490766d2fd5515a9f5rpluem ap_die(access_status, r);

0cb6873985efbf0cc9644114925df6baa4b32d5awrowe else

0cb6873985efbf0cc9644114925df6baa4b32d5awrowe ap_finalize_request_protocol(r);

0cb6873985efbf0cc9644114925df6baa4b32d5awrowe return OK;

0cb6873985efbf0cc9644114925df6baa4b32d5awrowe }

0cb6873985efbf0cc9644114925df6baa4b32d5awrowe default: {

0cb6873985efbf0cc9644114925df6baa4b32d5awrowe return ap_proxyerror(r, HTTP_BAD_GATEWAY,

0cb6873985efbf0cc9644114925df6baa4b32d5awrowe "Max-Forwards has reached zero - proxy loop?");

85c5af648e9f414bd4f157490766d2fd5515a9f5rpluem }

0cb6873985efbf0cc9644114925df6baa4b32d5awrowe }

3568de757bac0b47256647504c186d17ca272f85rbb }

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz maxfwd = (maxfwd > 0) ? maxfwd - 1 : 0;

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz }

3568de757bac0b47256647504c186d17ca272f85rbb else {

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz /* set configured max-forwards */

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz maxfwd = conf->maxfwd;

3568de757bac0b47256647504c186d17ca272f85rbb }

3568de757bac0b47256647504c186d17ca272f85rbb if (maxfwd >= 0) {

3568de757bac0b47256647504c186d17ca272f85rbb apr_table_setn(r->headers_in, "Max-Forwards",

3568de757bac0b47256647504c186d17ca272f85rbb apr_psprintf(r->pool, "%ld", maxfwd));

3568de757bac0b47256647504c186d17ca272f85rbb }

3568de757bac0b47256647504c186d17ca272f85rbb

ec020ca384efb30d501a5af796ddc3bb237d7b8fgregames if (r->method_number == M_TRACE) {

3568de757bac0b47256647504c186d17ca272f85rbb core_server_config *coreconf = (core_server_config *)

ce03576b2434cec77f2921db9d5b6a0510581c23rederpj ap_get_core_module_config(sconf);

397df70abe0bdd78a84fb6c38c02641bcfeadceasf

cd8f8c995d415473f3bfb0b329b2450f2a722c3atrawick if (coreconf->trace_enable == AP_TRACE_DISABLE)

cd8f8c995d415473f3bfb0b329b2450f2a722c3atrawick {

397df70abe0bdd78a84fb6c38c02641bcfeadceasf /* Allow "error-notes" string to be printed by ap_send_error_response()

397df70abe0bdd78a84fb6c38c02641bcfeadceasf apr_table_setn(r->notes, "error-notes",

397df70abe0bdd78a84fb6c38c02641bcfeadceasf "TRACE forbidden by server configuration");

49aa87d735a13ae3d04012ee0df91ddb51f7c36esf apr_table_setn(r->notes, "verbose-error-to", "*");

9d0665da83d1e22c0ea0e5f6f940f70f75bf5237ianh ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01139)

3568de757bac0b47256647504c186d17ca272f85rbb "TRACE forbidden by server configuration");

3568de757bac0b47256647504c186d17ca272f85rbb return HTTP_METHOD_NOT_ALLOWED;

7cd5419264796cfeaf8215383cf0f89130a81fectrawick }

7cd5419264796cfeaf8215383cf0f89130a81fectrawick

7cd5419264796cfeaf8215383cf0f89130a81fectrawick /* Can't test ap_should_client_block, we aren't ready to send

7cd5419264796cfeaf8215383cf0f89130a81fectrawick if (coreconf->trace_enable != AP_TRACE_EXTENDED

73e8b26287de5c06fa470d36162e103dbac9c7e5wrowe && (r->read_length || r->read_chunked || r->remaining))

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding {

b980ad7fdc218b4855cde9f75a747527f50c554dwrowe /* Allow "error-notes" string to be printed by ap_send_error_response()

7cd5419264796cfeaf8215383cf0f89130a81fectrawick apr_table_setn(r->notes, "error-notes",

7cd5419264796cfeaf8215383cf0f89130a81fectrawick "TRACE with request body is not allowed");

7cd5419264796cfeaf8215383cf0f89130a81fectrawick apr_table_setn(r->notes, "verbose-error-to", "*");

ca53a74f4012a45cbad48e940eddf27d866981f9dougm ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01140)

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding "TRACE with request body is not allowed");

36ef8f77bffe75d1aa327882be1b5bdbe2ff567asf return HTTP_REQUEST_ENTITY_TOO_LARGE;

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding }

302dc1f7b3feee23a91ad8f3cf3cb2edd95a557bmanoj }

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz uri = r->filename + 6;

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz p = strchr(uri, ':');

28c170ac8e99644de58cad454c6e0f9b4b359be6jerenkrantz if (p == NULL) {

0cb6873985efbf0cc9644114925df6baa4b32d5awrowe ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01141)

3568de757bac0b47256647504c186d17ca272f85rbb "proxy_handler no URL in %s", r->filename);

0f081398cf0eef8cc7c66a535d450110a92dc8aefielding return HTTP_BAD_REQUEST;

3568de757bac0b47256647504c186d17ca272f85rbb }

/* If the host doesn't have a domain name, add one and redirect. */

if (conf->domain != NULL) {

rc = proxy_needsdomain(r, uri, conf->domain);

if (ap_is_HTTP_REDIRECT(rc))

return HTTP_MOVED_PERMANENTLY;

}

scheme = apr_pstrndup(r->pool, uri, p - uri);

/* Check URI's destination host against NoProxy hosts */

/* Bypass ProxyRemote server lookup if configured as NoProxy */

for (direct_connect = i = 0; i < conf->dirconn->nelts &&

!direct_connect; i++) {

direct_connect = list[i].matcher(&list[i], r);

}

#if DEBUGGING

ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r,

(direct_connect) ? "NoProxy for %s" : "UseProxy for %s",

r->uri);

#endif

do {

char *url = uri;

/* Try to obtain the most suitable worker */

access_status = ap_proxy_pre_request(&worker, &balancer, r, conf, &url);

if (access_status != OK) {

/*

if (access_status != HTTP_SERVICE_UNAVAILABLE)

return access_status;

/*

if (!worker)

balancer = NULL;

goto cleanup;

}

/* Initialise worker if needed, note the shared area must be initialized by the balancer logic */

if (balancer) {

ap_proxy_initialize_worker(worker, r->server, conf->pool);

}

if (balancer && balancer->s->max_attempts_set && !max_attempts)

max_attempts = balancer->s->max_attempts;

/* firstly, try a proxy, unless a NoProxy directive is active */

if (!direct_connect) {

for (i = 0; i < proxies->nelts; i++) {

p2 = ap_strchr_c(ents[i].scheme, ':'); /* is it a partial URL? */

if (strcmp(ents[i].scheme, "*") == 0 ||

(ents[i].use_regex &&

ap_regexec(ents[i].regexp, url, 0, NULL, 0) == 0) ||

(p2 == NULL && strcasecmp(scheme, ents[i].scheme) == 0) ||

(p2 != NULL &&

strncasecmp(url, ents[i].scheme,

strlen(ents[i].scheme)) == 0)) {

/* handle the scheme */

ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01142)

"Trying to run scheme_handler against proxy");

access_status = proxy_run_scheme_handler(r, worker,

conf, url,

ents[i].hostname,

ents[i].port);

/* Did the scheme handler process the request? */

if (access_status != DECLINED) {

const char *cl_a;

char *end;

apr_off_t cl;

/*

if (access_status != HTTP_BAD_GATEWAY) {

goto cleanup;

}

cl_a = apr_table_get(r->headers_in, "Content-Length");

if (cl_a) {

apr_strtoff(&cl, cl_a, &end, 10);

/*

if (cl > 0) {

goto cleanup;

}

}

/*

if (apr_table_get(r->headers_in, "Transfer-Encoding")) {

goto cleanup;

}

}

}

}

}

/* otherwise, try it direct */

/* N.B. what if we're behind a firewall, where we must use a proxy or

/* handle the scheme */

ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01143)

"Running scheme %s handler (attempt %d)",

scheme, attempts);

AP_PROXY_RUN(r, worker, conf, url, attempts);

access_status = proxy_run_scheme_handler(r, worker, conf,

url, NULL, 0);

if (access_status == OK)

break;

else if (access_status == HTTP_INTERNAL_SERVER_ERROR) {

/* Unrecoverable server error.

if (balancer) {

worker->s->status |= PROXY_WORKER_IN_ERROR;

worker->s->error_time = apr_time_now();

}

break;

}

else if (access_status == HTTP_SERVICE_UNAVAILABLE) {

/* Recoverable server error.

if (balancer) {

worker->s->status |= PROXY_WORKER_IN_ERROR;

worker->s->error_time = apr_time_now();

}

}

else {

/* Unrecoverable error.

break;

}

/* Try again if the worker is unusable and the service is

} while (!PROXY_WORKER_IS_USABLE(worker) &&

max_attempts > attempts++);

if (DECLINED == access_status) {

ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(01144)

"No protocol handler was valid for the URL %s. "

"If you are using a DSO version of mod_proxy, make sure "

"the proxy submodules are included in the configuration "

"using LoadModule.", r->uri);

access_status = HTTP_INTERNAL_SERVER_ERROR;

goto cleanup;

}

cleanup:

ap_proxy_post_request(worker, balancer, r, conf);

proxy_run_request_status(&access_status, r);

AP_PROXY_RUN_FINISHED(r, attempts, access_status);

return access_status;

}

static void * create_proxy_config(apr_pool_t *p, server_rec *s)

{

unsigned int id;

proxy_server_conf *ps = apr_pcalloc(p, sizeof(proxy_server_conf));

ps->sec_proxy = apr_array_make(p, 10, sizeof(ap_conf_vector_t *));

ps->proxies = apr_array_make(p, 10, sizeof(struct proxy_remote));

ps->aliases = apr_array_make(p, 10, sizeof(struct proxy_alias));

ps->noproxies = apr_array_make(p, 10, sizeof(struct noproxy_entry));

ps->dirconn = apr_array_make(p, 10, sizeof(struct dirconn_entry));

ps->workers = apr_array_make(p, 10, sizeof(proxy_worker));

ps->balancers = apr_array_make(p, 10, sizeof(proxy_balancer));

ps->forward = NULL;

ps->reverse = NULL;

ps->domain = NULL;

#if 0

id = ap_proxy_hashfunc(apr_psprintf(p, "%pp-%" APR_TIME_T_FMT, ps, apr_time_now()), PROXY_HASHFUNC_DEFAULT);

#else

id = ap_proxy_hashfunc(apr_psprintf(p, "%pp", ps), PROXY_HASHFUNC_DEFAULT);

#endif

ps->id = apr_psprintf(p, "s%x", id);

ps->viaopt = via_off; /* initially backward compatible with 1.3.1 */

ps->viaopt_set = 0; /* 0 means default */

ps->req = 0;

ps->max_balancers = 0;

ps->bgrowth = 5;

ps->bgrowth_set = 0;

ps->req_set = 0;

ps->recv_buffer_size = 0; /* this default was left unset for some reason */

ps->recv_buffer_size_set = 0;

ps->io_buffer_size = AP_IOBUFSIZE;

ps->io_buffer_size_set = 0;

ps->maxfwd = DEFAULT_MAX_FORWARDS;

ps->maxfwd_set = 0;

ps->timeout = 0;

ps->timeout_set = 0;

ps->badopt = bad_error;

ps->badopt_set = 0;

ps->source_address = NULL;

ps->source_address_set = 0;

ps->pool = p;

return ps;

}

static void * merge_proxy_config(apr_pool_t *p, void *basev, void *overridesv)

{

proxy_server_conf *ps = apr_pcalloc(p, sizeof(proxy_server_conf));

proxy_server_conf *base = (proxy_server_conf *) basev;

proxy_server_conf *overrides = (proxy_server_conf *) overridesv;

ps->proxies = apr_array_append(p, base->proxies, overrides->proxies);

ps->sec_proxy = apr_array_append(p, base->sec_proxy, overrides->sec_proxy);

ps->aliases = apr_array_append(p, base->aliases, overrides->aliases);

ps->noproxies = apr_array_append(p, base->noproxies, overrides->noproxies);

ps->dirconn = apr_array_append(p, base->dirconn, overrides->dirconn);

ps->workers = apr_array_append(p, base->workers, overrides->workers);

ps->balancers = apr_array_append(p, base->balancers, overrides->balancers);

ps->forward = overrides->forward ? overrides->forward : base->forward;

ps->reverse = overrides->reverse ? overrides->reverse : base->reverse;

ps->domain = (overrides->domain == NULL) ? base->domain : overrides->domain;

ps->id = (overrides->id == NULL) ? base->id : overrides->id;

ps->viaopt = (overrides->viaopt_set == 0) ? base->viaopt : overrides->viaopt;

ps->viaopt_set = overrides->viaopt_set || base->viaopt_set;

ps->req = (overrides->req_set == 0) ? base->req : overrides->req;

ps->req_set = overrides->req_set || base->req_set;

ps->bgrowth = (overrides->bgrowth_set == 0) ? base->bgrowth : overrides->bgrowth;

ps->bgrowth_set = overrides->bgrowth_set || base->bgrowth_set;

ps->max_balancers = overrides->max_balancers || base->max_balancers;

ps->recv_buffer_size = (overrides->recv_buffer_size_set == 0) ? base->recv_buffer_size : overrides->recv_buffer_size;

ps->recv_buffer_size_set = overrides->recv_buffer_size_set || base->recv_buffer_size_set;

ps->io_buffer_size = (overrides->io_buffer_size_set == 0) ? base->io_buffer_size : overrides->io_buffer_size;

ps->io_buffer_size_set = overrides->io_buffer_size_set || base->io_buffer_size_set;

ps->maxfwd = (overrides->maxfwd_set == 0) ? base->maxfwd : overrides->maxfwd;

ps->maxfwd_set = overrides->maxfwd_set || base->maxfwd_set;

ps->timeout = (overrides->timeout_set == 0) ? base->timeout : overrides->timeout;

ps->timeout_set = overrides->timeout_set || base->timeout_set;

ps->badopt = (overrides->badopt_set == 0) ? base->badopt : overrides->badopt;

ps->badopt_set = overrides->badopt_set || base->badopt_set;

ps->proxy_status = (overrides->proxy_status_set == 0) ? base->proxy_status : overrides->proxy_status;

ps->proxy_status_set = overrides->proxy_status_set || base->proxy_status_set;

ps->source_address = (overrides->source_address_set == 0) ? base->source_address : overrides->source_address;

ps->source_address_set = overrides->source_address_set || base->source_address_set;

ps->pool = p;

return ps;

}

static const char *set_source_address(cmd_parms *parms, void *dummy,

const char *arg)

{

proxy_server_conf *psf =

ap_get_module_config(parms->server->module_config, &proxy_module);

struct apr_sockaddr_t *addr;

if (APR_SUCCESS == apr_sockaddr_info_get(&addr, arg, APR_UNSPEC, 0, 0,

psf->pool)) {

psf->source_address = addr;

psf->source_address_set = 1;

}

else {

return "ProxySourceAddress invalid value";

}

return NULL;

}

static void *create_proxy_dir_config(apr_pool_t *p, char *dummy)

{

proxy_dir_conf *new =

(proxy_dir_conf *) apr_pcalloc(p, sizeof(proxy_dir_conf));

/* Filled in by proxysection, when applicable */

/* Put these in the dir config so they work inside <Location> */

new->raliases = apr_array_make(p, 10, sizeof(struct proxy_alias));

new->cookie_paths = apr_array_make(p, 10, sizeof(struct proxy_alias));

new->cookie_domains = apr_array_make(p, 10, sizeof(struct proxy_alias));

new->preserve_host_set = 0;

new->preserve_host = 0;

new->interpolate_env = -1; /* unset */

new->error_override = 0;

new->error_override_set = 0;

new->add_forwarded_headers = 1;

return (void *) new;

}

static void *merge_proxy_dir_config(apr_pool_t *p, void *basev, void *addv)

{

proxy_dir_conf *new = (proxy_dir_conf *) apr_pcalloc(p, sizeof(proxy_dir_conf));

proxy_dir_conf *add = (proxy_dir_conf *) addv;

proxy_dir_conf *base = (proxy_dir_conf *) basev;

new->p = add->p;

new->p_is_fnmatch = add->p_is_fnmatch;

new->r = add->r;

/* Put these in the dir config so they work inside <Location> */

new->raliases = apr_array_append(p, base->raliases, add->raliases);

new->cookie_paths

= apr_array_append(p, base->cookie_paths, add->cookie_paths);

new->cookie_domains

= apr_array_append(p, base->cookie_domains, add->cookie_domains);

new->interpolate_env = (add->interpolate_env == -1) ? base->interpolate_env

: add->interpolate_env;

new->preserve_host = (add->preserve_host_set == 0) ? base->preserve_host

: add->preserve_host;

new->preserve_host_set = add->preserve_host_set || base->preserve_host_set;

new->error_override = (add->error_override_set == 0) ? base->error_override