225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce#include "mod_proxy.h"

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce#include "mod_core.h"

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce#include "apr_optional.h"

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce#include "scoreboard.h"

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce#include "mod_status.h"

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce#if (MODULE_MAGIC_NUMBER_MAJOR > 20020903)

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce#include "mod_ssl.h"

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce#else

225d845476b6136be9b77f528ed986bba7a7f732Simo SorceAPR_DECLARE_OPTIONAL_FN(int, ssl_proxy_enable, (conn_rec *));

79f128801d598ca57a6acebade01136525a47e00Pavel ReichlAPR_DECLARE_OPTIONAL_FN(int, ssl_engine_disable, (conn_rec *));

79f128801d598ca57a6acebade01136525a47e00Pavel ReichlAPR_DECLARE_OPTIONAL_FN(int, ssl_is_https, (conn_rec *));

79f128801d598ca57a6acebade01136525a47e00Pavel ReichlAPR_DECLARE_OPTIONAL_FN(char *, ssl_var_lookup,

79f128801d598ca57a6acebade01136525a47e00Pavel Reichl (apr_pool_t *, server_rec *,

79f128801d598ca57a6acebade01136525a47e00Pavel Reichl conn_rec *, request_rec *, char *));

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek#endif

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce#ifndef MAX

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek#define MAX(x,y) ((x) >= (y) ? (x) : (y))

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek#endif

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozekstatic int ap_proxy_lb_worker_size(void)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek{

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return sizeof(proxy_worker_stat);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek}

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce

a0d010f488bf15fb3e170ce04092013fa494401fPavel Březina

79f128801d598ca57a6acebade01136525a47e00Pavel Reichl#define PROXY_COPY_CONF_PARAMS(w, c) \

79f128801d598ca57a6acebade01136525a47e00Pavel Reichl do { \

79f128801d598ca57a6acebade01136525a47e00Pavel Reichl (w)->timeout = (c)->timeout; \

79f128801d598ca57a6acebade01136525a47e00Pavel Reichl (w)->timeout_set = (c)->timeout_set; \

79f128801d598ca57a6acebade01136525a47e00Pavel Reichl (w)->recv_buffer_size = (c)->recv_buffer_size; \

a0d010f488bf15fb3e170ce04092013fa494401fPavel Březina (w)->recv_buffer_size_set = (c)->recv_buffer_size_set; \

a0d010f488bf15fb3e170ce04092013fa494401fPavel Březina (w)->io_buffer_size = (c)->io_buffer_size; \

a0d010f488bf15fb3e170ce04092013fa494401fPavel Březina (w)->io_buffer_size_set = (c)->io_buffer_size_set; \

a0d010f488bf15fb3e170ce04092013fa494401fPavel Březina } while (0)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashovstatic const char *set_worker_param(apr_pool_t *p,

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov proxy_worker *worker,

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce const char *key,

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce const char *val)

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce{

958037cf32ea156dfdde426a45ac1d972fe46618Pavel Reichl

958037cf32ea156dfdde426a45ac1d972fe46618Pavel Reichl int ival;

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce apr_interval_time_t timeout;

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce

958037cf32ea156dfdde426a45ac1d972fe46618Pavel Reichl if (!strcasecmp(key, "loadfactor")) {

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce /* Normalized load factor. Used with BalancerMamber,

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce worker->lbfactor = atoi(val);

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce if (worker->lbfactor < 1 || worker->lbfactor > 100)

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce return "LoadFactor must be number between 1..100";

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov else if (!strcasecmp(key, "retry")) {

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce /* If set it will give the retry timeout for the worker

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce ival = atoi(val);

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce if (ival < 0)

b011330c77168cdd864aaae54a75214935136c05Pavel Reichl return "Retry must be a positive value";

b011330c77168cdd864aaae54a75214935136c05Pavel Reichl worker->retry = apr_time_from_sec(ival);

a0d010f488bf15fb3e170ce04092013fa494401fPavel Březina worker->retry_set = 1;

79f128801d598ca57a6acebade01136525a47e00Pavel Reichl }

79f128801d598ca57a6acebade01136525a47e00Pavel Reichl else if (!strcasecmp(key, "ttl")) {

79f128801d598ca57a6acebade01136525a47e00Pavel Reichl /* Time in seconds that will destroy all the connections

a0d010f488bf15fb3e170ce04092013fa494401fPavel Březina ival = atoi(val);

a0d010f488bf15fb3e170ce04092013fa494401fPavel Březina if (ival < 1)

a0d010f488bf15fb3e170ce04092013fa494401fPavel Březina return "TTL must be at least one second";

a0d010f488bf15fb3e170ce04092013fa494401fPavel Březina worker->ttl = apr_time_from_sec(ival);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov else if (!strcasecmp(key, "min")) {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov /* Initial number of connections to remote

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce ival = atoi(val);

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce if (ival < 0)

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce return "Min must be a positive number";

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce worker->min = ival;

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce }

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce else if (!strcasecmp(key, "max")) {

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce /* Maximum number of connections to remote

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ival = atoi(val);

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce if (ival < 0)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "Max must be a positive number";

8e195a545d41647e591c1d06082133cbd25dc0a4Jakub Hrozek worker->hmax = ival;

8e195a545d41647e591c1d06082133cbd25dc0a4Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* XXX: More inteligent naming needed */

a0d010f488bf15fb3e170ce04092013fa494401fPavel Březina else if (!strcasecmp(key, "smax")) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Maximum number of connections to remote that

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce ival = atoi(val);

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce if (ival < 0)

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce return "Smax must be a positive number";

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce worker->smax = ival;

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce }

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce else if (!strcasecmp(key, "acquire")) {

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce /* Acquire timeout in given unit (default is milliseconds).

79f128801d598ca57a6acebade01136525a47e00Pavel Reichl if (ap_timeout_parameter_parse(val, &timeout, "ms") != APR_SUCCESS)

79f128801d598ca57a6acebade01136525a47e00Pavel Reichl return "Acquire timeout has wrong format";

79f128801d598ca57a6acebade01136525a47e00Pavel Reichl if (timeout < 1000)

79f128801d598ca57a6acebade01136525a47e00Pavel Reichl return "Acquire must be at least one millisecond";

79f128801d598ca57a6acebade01136525a47e00Pavel Reichl worker->acquire = timeout;

79f128801d598ca57a6acebade01136525a47e00Pavel Reichl worker->acquire_set = 1;

a0d010f488bf15fb3e170ce04092013fa494401fPavel Březina }

a0d010f488bf15fb3e170ce04092013fa494401fPavel Březina else if (!strcasecmp(key, "timeout")) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Connection timeout in seconds.

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce ival = atoi(val);

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce if (ival < 1)

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce return "Timeout must be at least one second";

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce worker->timeout = apr_time_from_sec(ival);

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce worker->timeout_set = 1;

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce }

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce else if (!strcasecmp(key, "iobuffersize")) {

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce long s = atol(val);

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce if (s < 512 && s) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "IOBufferSize must be >= 512 bytes, or 0 for system default.";

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov }

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov worker->io_buffer_size = (s ? s : AP_IOBUFSIZE);

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce worker->io_buffer_size_set = 1;

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce }

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce else if (!strcasecmp(key, "receivebuffersize")) {

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce ival = atoi(val);

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce if (ival < 512 && ival != 0) {

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce return "ReceiveBufferSize must be >= 512 bytes, or 0 for system default.";

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce }

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce worker->recv_buffer_size = ival;

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce worker->recv_buffer_size_set = 1;

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce }

b011330c77168cdd864aaae54a75214935136c05Pavel Reichl else if (!strcasecmp(key, "keepalive")) {

b011330c77168cdd864aaae54a75214935136c05Pavel Reichl if (!strcasecmp(val, "on"))

a0d010f488bf15fb3e170ce04092013fa494401fPavel Březina worker->keepalive = 1;

79f128801d598ca57a6acebade01136525a47e00Pavel Reichl else if (!strcasecmp(val, "off"))

79f128801d598ca57a6acebade01136525a47e00Pavel Reichl worker->keepalive = 0;

79f128801d598ca57a6acebade01136525a47e00Pavel Reichl else

79f128801d598ca57a6acebade01136525a47e00Pavel Reichl return "KeepAlive must be On|Off";

79f128801d598ca57a6acebade01136525a47e00Pavel Reichl worker->keepalive_set = 1;

a0d010f488bf15fb3e170ce04092013fa494401fPavel Březina }

a0d010f488bf15fb3e170ce04092013fa494401fPavel Březina else if (!strcasecmp(key, "disablereuse")) {

a0d010f488bf15fb3e170ce04092013fa494401fPavel Březina if (!strcasecmp(val, "on"))

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->disablereuse = 1;

a0d010f488bf15fb3e170ce04092013fa494401fPavel Březina else if (!strcasecmp(val, "off"))

a0d010f488bf15fb3e170ce04092013fa494401fPavel Březina worker->disablereuse = 0;

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce else

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce return "DisableReuse must be On|Off";

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce worker->disablereuse_set = 1;

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce }

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce else if (!strcasecmp(key, "route")) {

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce /* Worker route.

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce if (strlen(val) > PROXY_WORKER_MAX_ROUTE_SIZ)

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce return "Route length must be < 64 characters";

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->route = apr_pstrdup(p, val);

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov }

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov else if (!strcasecmp(key, "redirect")) {

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce /* Worker redirection route.

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce if (strlen(val) > PROXY_WORKER_MAX_ROUTE_SIZ)

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce return "Redirect length must be < 64 characters";

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce worker->redirect = apr_pstrdup(p, val);

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (!strcasecmp(key, "status")) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *v;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek int mode = 1;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Worker status.

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek for (v = val; *v; v++) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (*v == '+') {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek mode = 1;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek v++;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (*v == '-') {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek mode = 0;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek v++;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (*v == 'D' || *v == 'd') {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (mode)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->status |= PROXY_WORKER_DISABLED;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->status &= ~PROXY_WORKER_DISABLED;

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (*v == 'S' || *v == 's') {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (mode)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->status |= PROXY_WORKER_STOPPED;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->status &= ~PROXY_WORKER_STOPPED;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (*v == 'E' || *v == 'e') {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (mode)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->status |= PROXY_WORKER_IN_ERROR;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->status &= ~PROXY_WORKER_IN_ERROR;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina else if (*v == 'H' || *v == 'h') {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (mode)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->status |= PROXY_WORKER_HOT_STANDBY;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->status &= ~PROXY_WORKER_HOT_STANDBY;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (*v == 'I' || *v == 'i') {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (mode)

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov worker->status |= PROXY_WORKER_IGNORE_ERRORS;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->status &= ~PROXY_WORKER_IGNORE_ERRORS;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov return "Unknown status parameter option";

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (!strcasecmp(key, "flushpackets")) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (!strcasecmp(val, "on"))

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->flush_packets = flush_on;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (!strcasecmp(val, "off"))

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->flush_packets = flush_off;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (!strcasecmp(val, "auto"))

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->flush_packets = flush_auto;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "flushpackets must be on|off|auto";

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (!strcasecmp(key, "flushwait")) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ival = atoi(val);

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina if (ival > 1000 || ival < 0) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "flushwait must be <= 1000, or 0 for system default of 10 millseconds.";

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (ival == 0)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->flush_wait = PROXY_FLUSH_WAIT;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->flush_wait = ival * 1000; /* change to microseconds */

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (!strcasecmp(key, "ping")) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Ping/Pong timeout in given unit (default is second).

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (ap_timeout_parameter_parse(val, &timeout, "s") != APR_SUCCESS)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "Ping/Pong timeout has wrong format";

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (timeout < 1000)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "Ping/Pong timeout must be at least one millisecond";

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->ping_timeout = timeout;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->ping_timeout_set = 1;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (!strcasecmp(key, "lbset")) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ival = atoi(val);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (ival < 0 || ival > 99)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "lbset must be between 0 and 99";

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->lbset = ival;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (!strcasecmp(key, "connectiontimeout")) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Request timeout in given unit (default is second).

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (ap_timeout_parameter_parse(val, &timeout, "s") != APR_SUCCESS)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "Connectiontimeout has wrong format";

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (timeout < 1000)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "Connectiontimeout must be at least one millisecond.";

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->conn_timeout = timeout;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek worker->conn_timeout_set = 1;

4c08db0fb0dda3d27b1184248ca5c800d7ce23f0Michal Zidek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (!strcasecmp(key, "flusher")) {

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina worker->flusher = apr_pstrdup(p, val);

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina }

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina else {

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina return "unknown Worker parameter";

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov return NULL;

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov}

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozekstatic const char *set_balancer_param(proxy_server_conf *conf,

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek apr_pool_t *p,

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek proxy_balancer *balancer,

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *key,

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov const char *val)

18f01e63c1968c29bddb9e48c279b583c0444730Jakub Hrozek{

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek int ival;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (!strcasecmp(key, "stickysession")) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek char *path;

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov /* Balancer sticky session name.

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov path = apr_pstrdup(p, val);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek balancer->sticky = balancer->sticky_path = path;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if ((path = strchr(path, '|'))) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek *path++ = '\0';

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek balancer->sticky_path = path;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (!strcasecmp(key, "nofailover")) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* If set to 'on' the session will break

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (!strcasecmp(val, "on"))

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek balancer->sticky_force = 1;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (!strcasecmp(val, "off"))

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek balancer->sticky_force = 0;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "failover must be On|Off";

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (!strcasecmp(key, "timeout")) {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov /* Balancer timeout in seconds.

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ival = atoi(val);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (ival < 1)

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov return "timeout must be at least one second";

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov balancer->timeout = apr_time_from_sec(ival);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (!strcasecmp(key, "maxattempts")) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Maximum number of failover attempts before

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ival = atoi(val);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (ival < 0)

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov return "maximum number of attempts must be a positive number";

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek balancer->max_attempts = ival;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek balancer->max_attempts_set = 1;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (!strcasecmp(key, "lbmethod")) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek proxy_balancer_method *provider;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek provider = ap_lookup_provider(PROXY_LBMETHOD, val, "0");

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (provider) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek balancer->lbmethod = provider;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return NULL;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "unknown lbmethod";

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (!strcasecmp(key, "scolonpathdelim")) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* If set to 'on' then ';' will also be

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (!strcasecmp(val, "on"))

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek balancer->scolonsep = 1;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (!strcasecmp(val, "off"))

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek balancer->scolonsep = 0;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina return "scolonpathdelim must be On|Off";

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina }

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina else if (!strcasecmp(key, "erroronstatus")) {

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina char *val_split;

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina char *status;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek char *tok_state;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek val_split = apr_pstrdup(p, val);

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek balancer->errstatuses = apr_array_make(p, 1, sizeof(int));

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina status = apr_strtok(val_split, ", ", &tok_state);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek while (status != NULL) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ival = atoi(status);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (ap_is_HTTP_VALID_RESPONSE(ival)) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek *(int *)apr_array_push(balancer->errstatuses) = ival;

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl }

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl else {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "erroronstatus must be one or more HTTP response code";

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek status = apr_strtok(NULL, ", ", &tok_state);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return "unknown Balancer parameter";

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return NULL;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek}

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozekstatic int alias_match(const char *uri, const char *alias_fakename)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek{

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *end_fakename = alias_fakename + strlen(alias_fakename);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *aliasp = alias_fakename, *urip = uri;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *end_uri = uri + strlen(uri);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek while (aliasp < end_fakename && urip < end_uri) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (*aliasp == '/') {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* any number of '/' in the alias matches any number in

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (*urip != '/')

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return 0;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek while (*aliasp == '/')

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ++aliasp;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek while (*urip == '/')

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ++urip;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Other characters are compared literally */

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (*urip++ != *aliasp++)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return 0;

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* fixup badly encoded stuff (e.g. % as last character) */

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina if (aliasp > end_fakename) {

b011330c77168cdd864aaae54a75214935136c05Pavel Reichl aliasp = end_fakename;

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina }

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov if (urip > end_uri) {

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina urip = end_uri;

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina }

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina /* We reach the end of the uri before the end of "alias_fakename"

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (urip == end_uri && aliasp!=end_fakename) {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov return 0;

18f01e63c1968c29bddb9e48c279b583c0444730Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Check last alias path component matched all the way */

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (aliasp[-1] != '/' && *urip != '\0' && *urip != '/')

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov return 0;

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Return number of characters from URI which matched (may be

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return urip - uri;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek}

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozekstatic int proxy_detect(request_rec *r)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek{

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek void *sconf = r->server->module_config;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek proxy_server_conf *conf =

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek (proxy_server_conf *) ap_get_module_config(sconf, &proxy_module);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Ick... msvc (perhaps others) promotes ternary short results to int */

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (conf->req && r->parsed_uri.scheme) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* but it might be something vhosted */

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (!(r->parsed_uri.hostname

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek && !strcasecmp(r->parsed_uri.scheme, ap_http_scheme(r))

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek && ap_matches_request_vhost(r, r->parsed_uri.hostname,

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek (apr_port_t)(r->parsed_uri.port_str ? r->parsed_uri.port

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek : ap_default_port(r))))) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek r->proxyreq = PROXYREQ_PROXY;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek r->uri = r->unparsed_uri;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek r->filename = apr_pstrcat(r->pool, "proxy:", r->uri, NULL);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek r->handler = "proxy-server";

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* We need special treatment for CONNECT proxying: it has no scheme part */

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else if (conf->req && r->method_number == M_CONNECT

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek && r->parsed_uri.hostname

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek && r->parsed_uri.port_str) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek r->proxyreq = PROXYREQ_PROXY;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek r->uri = r->unparsed_uri;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek r->filename = apr_pstrcat(r->pool, "proxy:", r->uri, NULL);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek r->handler = "proxy-server";

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina return DECLINED;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek}

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozekstatic const char *proxy_interpolate(request_rec *r, const char *str)

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov{

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Interpolate an env str in a configuration string

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *start;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *end;

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina const char *var;

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina const char *val;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *firstpart;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek start = ap_strstr_c(str, "${");

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (start == NULL) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return str;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek end = ap_strchr_c(start+2, '}');

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce if (end == NULL) {

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce return str;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* OK, this is syntax we want to interpolate. Is there such a var ? */

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek var = apr_pstrndup(r->pool, start+2, end-(start+2));

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek val = apr_table_get(r->subprocess_env, var);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek firstpart = apr_pstrndup(r->pool, str, (start-str));

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (val == NULL) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return apr_pstrcat(r->pool, firstpart,

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek proxy_interpolate(r, end+1), NULL);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return apr_pstrcat(r->pool, firstpart, val,

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek proxy_interpolate(r, end+1), NULL);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek}

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozekstatic apr_array_header_t *proxy_vars(request_rec *r,

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek apr_array_header_t *hdr)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek{

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek int i;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek apr_array_header_t *ret = apr_array_make(r->pool, hdr->nelts,

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek sizeof (struct proxy_alias));

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek struct proxy_alias *old = (struct proxy_alias *) hdr->elts;

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov for (i = 0; i < hdr->nelts; ++i) {

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl struct proxy_alias *newcopy = apr_array_push(ret);

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl newcopy->fake = (old[i].flags & PROXYPASS_INTERPOLATE)

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl ? proxy_interpolate(r, old[i].fake) : old[i].fake;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek newcopy->real = (old[i].flags & PROXYPASS_INTERPOLATE)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ? proxy_interpolate(r, old[i].real) : old[i].real;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina return ret;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek}

115241b0eeedd033d34d9721a896f031140944d7Pavel Březinastatic int proxy_trans(request_rec *r)

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina{

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek void *sconf = r->server->module_config;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek proxy_server_conf *conf =

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek (proxy_server_conf *) ap_get_module_config(sconf, &proxy_module);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek int i, len;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek struct proxy_alias *ent = (struct proxy_alias *) conf->aliases->elts;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek proxy_dir_conf *dconf = ap_get_module_config(r->per_dir_config,

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek &proxy_module);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *fake;

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov const char *real;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ap_regmatch_t regm[AP_MAX_REG_MATCH];

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ap_regmatch_t reg1[AP_MAX_REG_MATCH];

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek char *found = NULL;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek int mismatch = 0;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (r->proxyreq) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* someone has already set up the proxy, it was possibly ourselves

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina return OK;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* XXX: since r->uri has been manipulated already we're not really

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek for (i = 0; i < conf->aliases->nelts; i++) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek unsigned int nocanon = ent[i].flags & PROXYPASS_NOCANON;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *use_uri = nocanon ? r->unparsed_uri : r->uri;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if ((dconf->interpolate_env == 1)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek && (ent[i].flags & PROXYPASS_INTERPOLATE)) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek fake = proxy_interpolate(r, ent[i].fake);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek real = proxy_interpolate(r, ent[i].real);

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek else {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek fake = ent[i].fake;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek real = ent[i].real;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (ent[i].regex) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (!ap_regexec(ent[i].regex, r->uri, AP_MAX_REG_MATCH, regm, 0)) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if ((real[0] == '!') && (real[1] == '\0')) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return DECLINED;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* test that we haven't reduced the URI */

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (nocanon && ap_regexec(ent[i].regex, r->unparsed_uri,

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov AP_MAX_REG_MATCH, reg1, 0)) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek mismatch = 1;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek use_uri = r->uri;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek found = ap_pregsub(r->pool, real, use_uri, AP_MAX_REG_MATCH,

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek (use_uri == r->uri) ? regm : reg1);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Note: The strcmp() below catches cases where there

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina if (found && strcmp(found, real)) {

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina found = apr_pstrcat(r->pool, "proxy:", found, NULL);

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina }

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina else {

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina found = apr_pstrcat(r->pool, "proxy:", real,

9ca0071db0e226e4e65b2a80fdeddd5048ca8990Pavel Reichl use_uri, NULL);

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina }

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov }

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov }

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina else {

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina len = alias_match(r->uri, fake);

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina if (len != 0) {

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina if ((real[0] == '!') && (real[1] == '\0')) {

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina return DECLINED;

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina }

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov if (nocanon

115241b0eeedd033d34d9721a896f031140944d7Pavel Březina && len != alias_match(r->unparsed_uri, ent[i].fake)) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek mismatch = 1;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek use_uri = r->uri;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek found = apr_pstrcat(r->pool, "proxy:", real,

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek use_uri + len, NULL);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (mismatch) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* We made a reducing transformation, so we can't safely use

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r,

4c08db0fb0dda3d27b1184248ca5c800d7ce23f0Michal Zidek "Unescaped URL path matched ProxyPass; ignoring unsafe nocanon");

4c08db0fb0dda3d27b1184248ca5c800d7ce23f0Michal Zidek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (found) {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov r->filename = found;

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov r->handler = "proxy-server";

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek r->proxyreq = PROXYREQ_REVERSE;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (nocanon && !mismatch) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* mod_proxy_http needs to be told. Different module. */

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek apr_table_setn(r->notes, "proxy-nocanon", "1");

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return OK;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return DECLINED;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek}

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozekstatic int proxy_walk(request_rec *r)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek{

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek proxy_server_conf *sconf = ap_get_module_config(r->server->module_config,

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek &proxy_module);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ap_conf_vector_t *per_dir_defaults = r->server->lookup_defaults;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ap_conf_vector_t **sec_proxy = (ap_conf_vector_t **) sconf->sec_proxy->elts;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ap_conf_vector_t *entry_config;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek proxy_dir_conf *entry_proxy;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek int num_sec = sconf->sec_proxy->nelts;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* XXX: shouldn't we use URI here? Canonicalize it first?

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *proxyname = r->filename + 6;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek int j;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek for (j = 0; j < num_sec; ++j)

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl {

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl entry_config = sec_proxy[j];

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl entry_proxy = ap_get_module_config(entry_config, &proxy_module);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* XXX: What about case insensitive matching ???

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (entry_proxy->r

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ? ap_regexec(entry_proxy->r, proxyname, 0, NULL, 0)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek : (entry_proxy->p_is_fnmatch

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ? apr_fnmatch(entry_proxy->p, proxyname, 0)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek : strncmp(proxyname, entry_proxy->p,

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek strlen(entry_proxy->p)))) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek continue;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek per_dir_defaults = ap_merge_per_dir_configs(r->pool, per_dir_defaults,

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek entry_config);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek r->per_dir_config = per_dir_defaults;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return OK;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek}

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozekstatic int proxy_map_location(request_rec *r)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek{

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek int access_status;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (!r->proxyreq || !r->filename || strncmp(r->filename, "proxy:", 6) != 0)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return DECLINED;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* Don't let the core or mod_http map_to_storage hooks handle this,

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if ((access_status = proxy_walk(r))) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ap_die(access_status, r);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return access_status;

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return OK;

18f01e63c1968c29bddb9e48c279b583c0444730Jakub Hrozek}

18f01e63c1968c29bddb9e48c279b583c0444730Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

18f01e63c1968c29bddb9e48c279b583c0444730Jakub Hrozekstatic int proxy_fixup(request_rec *r)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek{

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek char *url, *p;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek int access_status;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek proxy_dir_conf *dconf = ap_get_module_config(r->per_dir_config,

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov &proxy_module);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (!r->proxyreq || !r->filename || strncmp(r->filename, "proxy:", 6) != 0)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return DECLINED;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* XXX: Shouldn't we try this before we run the proxy_walk? */

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek url = &r->filename[6];

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if ((dconf->interpolate_env == 1) && (r->proxyreq == PROXYREQ_REVERSE)) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* create per-request copy of reverse proxy conf,

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek proxy_req_conf *rconf = apr_palloc(r->pool, sizeof(proxy_req_conf));

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ap_set_module_config(r->request_config, &proxy_module, rconf);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek rconf->raliases = proxy_vars(r, dconf->raliases);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek rconf->cookie_paths = proxy_vars(r, dconf->cookie_paths);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek rconf->cookie_domains = proxy_vars(r, dconf->cookie_domains);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* canonicalise each specific scheme */

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if ((access_status = proxy_run_canon_handler(r, url))) {

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return access_status;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek }

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek p = strchr(url, ':');

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (p == NULL || p == url)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return HTTP_BAD_REQUEST;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return OK; /* otherwise; we've done the best we can */

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek}

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozekstatic int proxy_needsdomain(request_rec *r, const char *url, const char *domain)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek{

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl char *nuri;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *ref;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek /* We only want to worry about GETs */

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek if (!r->proxyreq || r->method_number != M_GET || !r->parsed_uri.hostname)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek return DECLINED;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl /* If host does contain a dot already, or it is "localhost", decline */

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl if (strchr(r->parsed_uri.hostname, '.') != NULL /* has domain, or IPv4 literal */

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl || strchr(r->parsed_uri.hostname, ':') != NULL /* IPv6 literal */

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl || strcasecmp(r->parsed_uri.hostname, "localhost") == 0)

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl return DECLINED; /* host name has a dot already */

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl ref = apr_table_get(r->headers_in, "Referer");

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl /* Reassemble the request, but insert the domain after the host name */

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl /* Note that the domain name always starts with a dot */

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl r->parsed_uri.hostname = apr_pstrcat(r->pool, r->parsed_uri.hostname,

82a958e6592c4a4078e45b7197bbe4751b70f511Pavel Reichl domain, NULL);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek nuri = apr_uri_unparse(r->pool,

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek &r->parsed_uri,

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov APR_URI_UNP_REVEALPASSWORD);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek apr_table_set(r->headers_out, "Location", nuri);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r,

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek "Domain missing: %s sent to %s%s%s", r->uri,

8e195a545d41647e591c1d06082133cbd25dc0a4Jakub Hrozek apr_uri_unparse(r->pool, &r->parsed_uri,

8e195a545d41647e591c1d06082133cbd25dc0a4Jakub Hrozek APR_URI_UNP_OMITUSERINFO),

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ref ? " from " : "", ref ? ref : "");

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov return HTTP_MOVED_PERMANENTLY;

18f01e63c1968c29bddb9e48c279b583c0444730Jakub Hrozek}

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashovstatic int proxy_handler(request_rec *r)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek{

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek char *uri, *scheme, *p;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *p2;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek void *sconf = r->server->module_config;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek proxy_server_conf *conf = (proxy_server_conf *)

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek ap_get_module_config(sconf, &proxy_module);

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek apr_array_header_t *proxies = conf->proxies;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek struct proxy_remote *ents = (struct proxy_remote *) proxies->elts;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek int i, rc, access_status;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek int direct_connect = 0;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek const char *str;

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov long maxfwd;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek proxy_balancer *balancer = NULL;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek proxy_worker *worker = NULL;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek int attempts = 0, max_attempts = 0;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek struct dirconn_entry *list = (struct dirconn_entry *)conf->dirconn->elts;

c0bca1722d6f9dfb654ad78397be70f79ff39af1Jakub Hrozek

225d845476b6136be9b77f528ed986bba7a7f732Simo Sorce /* is this for us? */

if (!r->proxyreq || !r->filename || strncmp(r->filename, "proxy:", 6) != 0)

return DECLINED;

/* handle max-forwards / OPTIONS / TRACE */

if ((str = apr_table_get(r->headers_in, "Max-Forwards"))) {

maxfwd = strtol(str, NULL, 10);

if (maxfwd < 1) {

switch (r->method_number) {

case M_TRACE: {

int access_status;

r->proxyreq = PROXYREQ_NONE;

if ((access_status = ap_send_http_trace(r)))

ap_die(access_status, r);

else

ap_finalize_request_protocol(r);

return OK;

}

case M_OPTIONS: {

int access_status;

r->proxyreq = PROXYREQ_NONE;

if ((access_status = ap_send_http_options(r)))

ap_die(access_status, r);

else

ap_finalize_request_protocol(r);

return OK;

}

default: {

return ap_proxyerror(r, HTTP_BAD_GATEWAY,

"Max-Forwards has reached zero - proxy loop?");

}

}

}

maxfwd = (maxfwd > 0) ? maxfwd - 1 : 0;

}

else {

/* set configured max-forwards */

maxfwd = conf->maxfwd;

}

if (maxfwd >= 0) {

apr_table_set(r->headers_in, "Max-Forwards",

apr_psprintf(r->pool, "%ld", maxfwd));

}

if (r->method_number == M_TRACE) {

core_server_config *coreconf = (core_server_config *)

ap_get_module_config(sconf, &core_module);

if (coreconf->trace_enable == AP_TRACE_DISABLE)

{

/* Allow "error-notes" string to be printed by ap_send_error_response()

apr_table_setn(r->notes, "error-notes",

"TRACE forbidden by server configuration");

apr_table_setn(r->notes, "verbose-error-to", "*");

ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r,

"proxy: TRACE forbidden by server configuration");

return HTTP_METHOD_NOT_ALLOWED;

}

/* Can't test ap_should_client_block, we aren't ready to send

if (coreconf->trace_enable != AP_TRACE_EXTENDED

&& (r->read_length || r->read_chunked || r->remaining))

{

/* Allow "error-notes" string to be printed by ap_send_error_response()

apr_table_setn(r->notes, "error-notes",

"TRACE with request body is not allowed");

apr_table_setn(r->notes, "verbose-error-to", "*");

ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r,

"proxy: TRACE with request body is not allowed");

return HTTP_REQUEST_ENTITY_TOO_LARGE;

}

}

uri = r->filename + 6;

p = strchr(uri, ':');

if (p == NULL) {

ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r,

"proxy_handler no URL in %s", r->filename);

return HTTP_BAD_REQUEST;

}

/* If the host doesn't have a domain name, add one and redirect. */

if (conf->domain != NULL) {

rc = proxy_needsdomain(r, uri, conf->domain);

if (ap_is_HTTP_REDIRECT(rc))

return HTTP_MOVED_PERMANENTLY;

}

scheme = apr_pstrndup(r->pool, uri, p - uri);

/* Check URI's destination host against NoProxy hosts */

/* Bypass ProxyRemote server lookup if configured as NoProxy */

for (direct_connect = i = 0; i < conf->dirconn->nelts &&

!direct_connect; i++) {

direct_connect = list[i].matcher(&list[i], r);

}

#if DEBUGGING

ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r,

(direct_connect) ? "NoProxy for %s" : "UseProxy for %s",

r->uri);

#endif

do {

char *url = uri;

/* Try to obtain the most suitable worker */

access_status = ap_proxy_pre_request(&worker, &balancer, r, conf, &url);

if (access_status != OK) {

/*

if (access_status != HTTP_SERVICE_UNAVAILABLE)

return access_status;

/*

if (!worker)

balancer = NULL;

goto cleanup;

}

/* Initialise worker if needed, note the shared area must be initialized by the balancer logic */

if (balancer) {

ap_proxy_initialize_worker(worker, r->server, conf->pool);

ap_proxy_initialize_worker_share(conf, worker, r->server);

}

if (balancer && balancer->max_attempts_set && !max_attempts)

max_attempts = balancer->max_attempts;

/* firstly, try a proxy, unless a NoProxy directive is active */

if (!direct_connect) {

for (i = 0; i < proxies->nelts; i++) {

p2 = ap_strchr_c(ents[i].scheme, ':'); /* is it a partial URL? */

if (strcmp(ents[i].scheme, "*") == 0 ||

(ents[i].use_regex &&

ap_regexec(ents[i].regexp, url, 0, NULL, 0) == 0) ||

(p2 == NULL && strcasecmp(scheme, ents[i].scheme) == 0) ||

(p2 != NULL &&

strncasecmp(url, ents[i].scheme,

strlen(ents[i].scheme)) == 0)) {

/* handle the scheme */

ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, r->server,

"Trying to run scheme_handler against proxy");

access_status = proxy_run_scheme_handler(r, worker,

conf, url,

ents[i].hostname,

ents[i].port);

/* Did the scheme handler process the request? */

if (access_status != DECLINED) {

const char *cl_a;

char *end;

apr_off_t cl;

/*

if (access_status != HTTP_BAD_GATEWAY) {

goto cleanup;

}

cl_a = apr_table_get(r->headers_in, "Content-Length");

if (cl_a) {

apr_strtoff(&cl, cl_a, &end, 0);

/*

if (cl > 0) {

goto cleanup;

}

}

/*

if (apr_table_get(r->headers_in, "Transfer-Encoding")) {

goto cleanup;

}

}

}

}

}

/* otherwise, try it direct */

/* N.B. what if we're behind a firewall, where we must use a proxy or

/* handle the scheme */

ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, r->server,

"Running scheme %s handler (attempt %d)",

scheme, attempts);

AP_PROXY_RUN(r, worker, conf, url, attempts);

access_status = proxy_run_scheme_handler(r, worker, conf,

url, NULL, 0);

if (access_status == OK)

break;

else if (access_status == HTTP_INTERNAL_SERVER_ERROR) {

/* Unrecoverable server error.

if (balancer) {

worker->s->status |= PROXY_WORKER_IN_ERROR;

worker->s->error_time = apr_time_now();

}

break;

}

else if (access_status == HTTP_SERVICE_UNAVAILABLE) {

/* Recoverable server error.

if (balancer) {

worker->s->status |= PROXY_WORKER_IN_ERROR;

worker->s->error_time = apr_time_now();

}

}

else {

/* Unrecoverable error.

break;

}

/* Try again if the worker is unusable and the service is

} while (!PROXY_WORKER_IS_USABLE(worker) &&

max_attempts > attempts++);

if (DECLINED == access_status) {

ap_log_error(APLOG_MARK, APLOG_WARNING, 0, r->server,

"proxy: No protocol handler was valid for the URL %s. "

"If you are using a DSO version of mod_proxy, make sure "

"the proxy submodules are included in the configuration "

"using LoadModule.", r->uri);

access_status = HTTP_INTERNAL_SERVER_ERROR;

goto cleanup;

}

cleanup:

ap_proxy_post_request(worker, balancer, r, conf);

proxy_run_request_status(&access_status, r);

AP_PROXY_RUN_FINISHED(r, attempts, access_status);

return access_status;

}

static void * create_proxy_config(apr_pool_t *p, server_rec *s)

{

proxy_server_conf *ps = apr_pcalloc(p, sizeof(proxy_server_conf));

ps->sec_proxy = apr_array_make(p, 10, sizeof(ap_conf_vector_t *));

ps->proxies = apr_array_make(p, 10, sizeof(struct proxy_remote));

ps->aliases = apr_array_make(p, 10, sizeof(struct proxy_alias));

ps->noproxies = apr_array_make(p, 10, sizeof(struct noproxy_entry));

ps->dirconn = apr_array_make(p, 10, sizeof(struct dirconn_entry));

ps->workers = apr_array_make(p, 10, sizeof(proxy_worker));

ps->balancers = apr_array_make(p, 10, sizeof(proxy_balancer));

ps->forward = NULL;

ps->reverse = NULL;

ps->domain = NULL;

ps->viaopt = via_off; /* initially backward compatible with 1.3.1 */

ps->viaopt_set = 0; /* 0 means default */

ps->req = 0;

ps->req_set = 0;

ps->recv_buffer_size = 0; /* this default was left unset for some reason */

ps->recv_buffer_size_set = 0;

ps->io_buffer_size = AP_IOBUFSIZE;

ps->io_buffer_size_set = 0;

ps->maxfwd = DEFAULT_MAX_FORWARDS;

ps->maxfwd_set = 0;

ps->error_override = 0;

ps->error_override_set = 0;

ps->timeout = 0;

ps->timeout_set = 0;

ps->badopt = bad_error;

ps->badopt_set = 0;

ps->pool = p;

return ps;

}

static void * merge_proxy_config(apr_pool_t *p, void *basev, void *overridesv)

{

proxy_server_conf *ps = apr_pcalloc(p, sizeof(proxy_server_conf));

proxy_server_conf *base = (proxy_server_conf *) basev;

proxy_server_conf *overrides = (proxy_server_conf *) overridesv;

ps->proxies = apr_array_append(p, base->proxies, overrides->proxies);

ps->sec_proxy = apr_array_append(p, base->sec_proxy, overrides->sec_proxy);

ps->aliases = apr_array_append(p, base->aliases, overrides->aliases);

ps->noproxies = apr_array_append(p, base->noproxies, overrides->noproxies);

ps->dirconn = apr_array_append(p, base->dirconn, overrides->dirconn);

ps->workers = apr_array_append(p, base->workers, overrides->workers);

ps->balancers = apr_array_append(p, base->balancers, overrides->balancers);

ps->forward = overrides->forward ? overrides->forward : base->forward;

ps->reverse = overrides->reverse ? overrides->reverse : base->reverse;

ps->domain = (overrides->domain == NULL) ? base->domain : overrides->domain;

ps->viaopt = (overrides->viaopt_set == 0) ? base->viaopt : overrides->viaopt;

ps->viaopt_set = overrides->viaopt_set || base->viaopt_set;

ps->req = (overrides->req_set == 0) ? base->req : overrides->req;

ps->req_set = overrides->req_set || base->req_set;

ps->recv_buffer_size = (overrides->recv_buffer_size_set == 0) ? base->recv_buffer_size : overrides->recv_buffer_size;

ps->recv_buffer_size_set = overrides->recv_buffer_size_set || base->recv_buffer_size_set;

ps->io_buffer_size = (overrides->io_buffer_size_set == 0) ? base->io_buffer_size : overrides->io_buffer_size;

ps->io_buffer_size_set = overrides->io_buffer_size_set || base->io_buffer_size_set;

ps->maxfwd = (overrides->maxfwd_set == 0) ? base->maxfwd : overrides->maxfwd;

ps->maxfwd_set = overrides->maxfwd_set || base->maxfwd_set;

ps->error_override = (overrides->error_override_set == 0) ? base->error_override : overrides->error_override;

ps->error_override_set = overrides->error_override_set || base->error_override_set;

ps->timeout= (overrides->timeout_set == 0) ? base->timeout : overrides->timeout;

ps->timeout_set = overrides->timeout_set || base->timeout_set;

ps->badopt = (overrides->badopt_set == 0) ? base->badopt : overrides->badopt;

ps->badopt_set = overrides->badopt_set || base->badopt_set;

ps->proxy_status = (overrides->proxy_status_set == 0) ? base->proxy_status : overrides->proxy_status;

ps->proxy_status_set = overrides->proxy_status_set || base->proxy_status_set;

ps->pool = p;

return ps;

}

static void *create_proxy_dir_config(apr_pool_t *p, char *dummy)

{

proxy_dir_conf *new =

(proxy_dir_conf *) apr_pcalloc(p, sizeof(proxy_dir_conf));

/* Filled in by proxysection, when applicable */

/* Put these in the dir config so they work inside <Location> */

new->raliases = apr_array_make(p, 10, sizeof(struct proxy_alias));

new->cookie_paths = apr_array_make(p, 10, sizeof(struct proxy_alias));

new->cookie_domains = apr_array_make(p, 10, sizeof(struct proxy_alias));

new->cookie_path_str = apr_strmatch_precompile(p, "path=", 0);

new->cookie_domain_str = apr_strmatch_precompile(p, "domain=", 0);

new->preserve_host_set = 0;

new->preserve_host = 0;

new->interpolate_env = -1; /* unset */

return (void *) new;

}

static void *merge_proxy_dir_config(apr_pool_t *p, void *basev, void *addv)

{

proxy_dir_conf *new = (proxy_dir_conf *) apr_pcalloc(p, sizeof(proxy_dir_conf));

proxy_dir_conf *add = (proxy_dir_conf *) addv;

proxy_dir_conf *base = (proxy_dir_conf *) basev;

new->p = add->p;

new->p_is_fnmatch = add->p_is_fnmatch;

new->r = add->r;

/* Put these in the dir config so they work inside <Location> */

new->raliases = apr_array_append(p, base->raliases, add->raliases);

new->cookie_paths

= apr_array_append(p, base->cookie_paths, add->cookie_paths);

new->cookie_domains

= apr_array_append(p, base->cookie_domains, add->cookie_domains);

new->cookie_path_str = base->cookie_path_str;

new->cookie_domain_str = base->cookie_domain_str;

new->interpolate_env = (add->interpolate_env == -1) ? base->interpolate_env

: add->interpolate_env;

new->preserve_host = (add->preserve_host_set == 0) ? base->preserve_host

: add->preserve_host;

new->preserve_host_set = add->preserve_host_set || base->preserve_host_set;

return new;

}

static const char *

add_proxy(cmd_parms *cmd, void *dummy, const char *f1, const char *r1, int regex)

{

server_rec *s = cmd->server;

proxy_server_conf *conf =

(proxy_server_conf *) ap_get_module_config(s->module_config, &proxy_module);

struct proxy_remote *new;

char *p, *q;

char *r, *f, *scheme;

ap_regex_t *reg = NULL;

int port;

r = apr_pstrdup(cmd->pool, r1);

scheme = apr_pstrdup(cmd->pool, r1);

f = apr_pstrdup(cmd->pool, f1);

p = strchr(r, ':');

if (p == NULL || p[1] != '/' || p[2] != '/' || p[3] == '\0') {

if (regex)

return "ProxyRemoteMatch: Bad syntax for a remote proxy server";

else

return "ProxyRemote: Bad syntax for a remote proxy server";

}

else {

scheme[p-r] = 0;

}

q = strchr(p + 3, ':');

if (q != NULL) {

if (sscanf(q + 1, "%u", &port) != 1 || port > 65535) {

if (regex)

return "ProxyRemoteMatch: Bad syntax for a remote proxy server (bad port number)";

else

return "ProxyRemote: Bad syntax for a remote proxy server (bad port number)";

}

*q = '\0';

}

else

port = -1;

*p = '\0';

if (regex) {

reg = ap_pregcomp(cmd->pool, f, AP_REG_EXTENDED);

if (!reg)

return "Regular expression for ProxyRemoteMatch could not be compiled.";

}

else

if (strchr(f, ':') == NULL)

ap_str_tolower(f); /* lowercase scheme */

ap_str_tolower(p + 3); /* lowercase hostname */

if (port == -1) {

port = apr_uri_port_of_scheme(scheme);

}

new = apr_array_push(conf->proxies);

new->scheme = f;

new->protocol = r;

new->hostname = p + 3;

new->port = port;

new->regexp = reg;

new->use_regex = regex;

return NULL;

}