mod_proxy.c revision 5c7ac1d1917c534320143462fe68624af7af0c66
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor/* Copyright 1999-2005 The Apache Software Foundation or its licensors, as
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * applicable.
b475917ddf898282aa51ce31b3275c2c4783ce98coar * Licensed under the Apache License, Version 2.0 (the "License");
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * you may not use this file except in compliance with the License.
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * You may obtain a copy of the License at
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * Unless required by applicable law or agreed to in writing, software
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * distributed under the License is distributed on an "AS IS" BASIS,
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * See the License for the specific language governing permissions and
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * limitations under the License.
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzorAPR_DECLARE_OPTIONAL_FN(int, ssl_proxy_enable, (conn_rec *));
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzorAPR_DECLARE_OPTIONAL_FN(int, ssl_engine_disable, (conn_rec *));
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzorAPR_DECLARE_OPTIONAL_FN(int, ssl_is_https, (conn_rec *));
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor#define MAX(x,y) ((x) >= (y) ? (x) : (y))
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * A Web proxy module. Stages:
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * translate_name: set filename to proxy:<URL>
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * map_to_storage: run proxy_walk (rather than directory_walk/file_walk)
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * can't trust directory_walk/file_walk since these are
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * not in our filesystem. Prevents mod_http from serving
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * the TRACE request we will set aside to handle later.
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * type_checker: set type to PROXY_MAGIC_TYPE if filename begins proxy:
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * fix_ups: convert the URL stored in the filename to the
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * canonical form.
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * handler: handle proxy requests
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor/* -------------------------------------------------------------- */
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor/* Translate the URL into a 'filename' */
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor (w)->recv_buffer_size_set = (c)->recv_buffer_size_set; \
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor } while (0)
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor const char *key,
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor const char *val)
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor /* Normalized load factor. Used with BalancerMamber,
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * it is a number between 1 and 100.
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor return "LoadFactor must be number between 1..100";
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor /* If set it will give the retry timeout for the worker
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * The default value is 60 seconds, meaning that if
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * in error state, it will be retried after that timeout.
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor return "Retry must be at least one second";
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor /* Time in seconds that will destroy all the connections
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * that exced the smax
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor return "TTL must be at least one second";
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor /* Initial number of connections to remote
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor return "Min must be a positive number";
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor /* Maximum number of connections to remote
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor return "Max must be a positive number";
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor /* XXX: More inteligent naming needed */
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor /* Maximum number of connections to remote that
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * will not be destroyed
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor return "Smax must be a positive number";
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor /* Acquire timeout in milliseconds.
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * If set this will be the maximum time to
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * wait for a free connection.
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor return "Acquire must be at least one mili second";
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor /* Connection timeout in seconds.
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor * Defaults to server timeout.
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor return "Timeout must be at least one second";
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor worker->io_buffer_size = ((s > AP_IOBUFSIZE) ? s : AP_IOBUFSIZE);
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor return "ReceiveBufferSize must be >= 512 bytes, or 0 for system default.";
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor return "KeepAlive must be On|Off";
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor /* Worker route.
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor return "Route length must be < 64 characters";
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor /* Worker redirection route.
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor return "Redirect length must be < 64 characters";
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor const char *v;
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor /* Worker status.
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor for (v = val; *v; v++) {
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor if (*v == '+') {
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor else if (*v == '-') {
5dc0b34303ac92db537d4ea5c972d7caea8c2e13gryzor return "Unknow status parameter option";
return NULL;
apr_pool_t *p,
const char *key,
const char *val)
int ival;
if (ival < 0)
if (provider) {
return NULL;
return NULL;
++aliasp;
++urip;
* GET http://othervhost/cgi-bin/printenv HTTP/1.0
: ap_default_port(r))))) {
return DECLINED;
int i, len;
if (r->proxyreq) {
return OK;
if (len > 0) {
return DECLINED;
return OK;
return DECLINED;
&proxy_module);
for (j = 0; j < num_sec; ++j)
if (entry_proxy->r
return OK;
int access_status;
return DECLINED;
return access_status;
return OK;
char *url, *p;
int access_status;
return DECLINED;
return access_status;
return HTTP_BAD_REQUEST;
char *nuri;
const char *ref;
return DECLINED;
&r->parsed_uri,
return HTTP_MOVED_PERMANENTLY;
const char *p2;
int direct_connect = 0;
const char *str;
long maxfwd;
return DECLINED;
switch (r->method_number) {
case M_TRACE: {
int access_status;
return OK;
case M_OPTIONS: {
int access_status;
return OK;
return HTTP_FORBIDDEN;
return HTTP_REQUEST_ENTITY_TOO_LARGE;
if (p == NULL) {
return HTTP_BAD_REQUEST;
return HTTP_MOVED_PERMANENTLY;
!direct_connect; i++) {
#if DEBUGGING
r->uri);
return access_status;
if (!worker)
goto cleanup;
if (!direct_connect) {
goto cleanup;
if (balancer)
if (balancer) {
goto cleanup;
if (balancer) {
return access_status;
return ps;
ps->allowed_connect_ports = apr_array_append(p, base->allowed_connect_ports, overrides->allowed_connect_ports);
ps->recv_buffer_size = (overrides->recv_buffer_size_set == 0) ? base->recv_buffer_size : overrides->recv_buffer_size;
ps->io_buffer_size = (overrides->io_buffer_size_set == 0) ? base->io_buffer_size : overrides->io_buffer_size;
ps->error_override = (overrides->error_override_set == 0) ? base->error_override : overrides->error_override;
ps->preserve_host = (overrides->preserve_host_set == 0) ? base->preserve_host : overrides->preserve_host;
ps->proxy_status = (overrides->proxy_status_set == 0) ? base->proxy_status : overrides->proxy_status;
return ps;
return (void *) new;
return new;
char *r, *f, *scheme;
int port;
if (regex)
scheme[p-r] = 0;
if (q != NULL) {
if (regex)
if (regex) {
if (!reg)
return NULL;
char *r = NULL;
char *word;
while (*arg) {
f = word;
r = word;
if (!val) {
if (r == NULL)
return NULL;
if (!balancer) {
conf, r);
if (err)
if (err)
if (!worker) {
if (err)
if (err)
return NULL;
if ( r == NULL)
return NULL;
return NULL;
return NULL;
int found = 0;
if (!found) {
return NULL;
int *New;
return NULL;
int found = 0;
if (!found) {
#if DEBUGGING
#if DEBUGGING
#if DEBUGGING
#if DEBUGGING
return NULL;
return NULL;
return NULL;
return NULL;
return NULL;
return NULL;
return NULL;
return NULL;
int timeout;
return NULL;
return NULL;
return NULL;
return NULL;
char *word;
while (*arg) {
if (!path)
else if (!name)
if (!val)
if (!path)
if (!name)
if (!worker) {
const char *err;
if (err)
if (!balancer) {
if (err)
return NULL;
const char *err;
if (!balancer) {
if (!worker) {
while (*arg) {
if (!val) {
if (worker)
if (err)
return NULL;
&proxy_module);
const char *errmsg;
return err;
if (!arg) {
return errmsg;
conf->r = r;
return NULL;
{NULL}
if (proxy_ssl_enable) {
if (proxy_ssl_disable) {
return proxy_ssl_disable(c);
if (proxy_is_https) {
return proxy_is_https(c);
const char *var)
if (proxy_ssl_val) {
return NULL;
return OK;
return OK;
++worker;
++balancer;
return OK;
worker++;
if (!reverse) {
s = s->next;
proxy_lb_workers = 0;
return OK;
request_rec *r,
request_rec *r,
(request_rec *r), (r),
(status, r),