mod_proxy.c revision d5ea44510f258c84b08a9cecd1804cc41fabfc45
a530dde7009b0a808300c420def741354a4d13d2Martin Kühl/* ====================================================================
a530dde7009b0a808300c420def741354a4d13d2Martin Kühl * The Apache Software License, Version 1.1
a530dde7009b0a808300c420def741354a4d13d2Martin Kühl * Copyright (c) 2000 The Apache Software Foundation. All rights
a530dde7009b0a808300c420def741354a4d13d2Martin Kühl * Redistribution and use in source and binary forms, with or without
a530dde7009b0a808300c420def741354a4d13d2Martin Kühl * modification, are permitted provided that the following conditions
a530dde7009b0a808300c420def741354a4d13d2Martin Kühl * 1. Redistributions of source code must retain the above copyright
a530dde7009b0a808300c420def741354a4d13d2Martin Kühl * notice, this list of conditions and the following disclaimer.
d72e314a1952b4418fb1c98b17dbab0d16bba585Adrián Riesco * 2. Redistributions in binary form must reproduce the above copyright
d72e314a1952b4418fb1c98b17dbab0d16bba585Adrián Riesco * notice, this list of conditions and the following disclaimer in
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco * the documentation and/or other materials provided with the
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco * distribution.
d72e314a1952b4418fb1c98b17dbab0d16bba585Adrián Riesco * 3. The end-user documentation included with the redistribution,
d72e314a1952b4418fb1c98b17dbab0d16bba585Adrián Riesco * if any, must include the following acknowledgment:
d72e314a1952b4418fb1c98b17dbab0d16bba585Adrián Riesco * "This product includes software developed by the
d72e314a1952b4418fb1c98b17dbab0d16bba585Adrián Riesco * Apache Software Foundation (http://www.apache.org/)."
d72e314a1952b4418fb1c98b17dbab0d16bba585Adrián Riesco * Alternately, this acknowledgment may appear in the software itself,
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco * if and wherever such third-party acknowledgments normally appear.
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco * 4. The names "Apache" and "Apache Software Foundation" must
d72e314a1952b4418fb1c98b17dbab0d16bba585Adrián Riesco * not be used to endorse or promote products derived from this
d72e314a1952b4418fb1c98b17dbab0d16bba585Adrián Riesco * software without prior written permission. For written
d72e314a1952b4418fb1c98b17dbab0d16bba585Adrián Riesco * permission, please contact apache@apache.org.
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco * 5. Products derived from this software may not be called "Apache",
223be434693e8c97e2522ac19155a284b3536035Adrián Riesco * nor may "Apache" appear in their name, without prior written
d72e314a1952b4418fb1c98b17dbab0d16bba585Adrián Riesco * permission of the Apache Software Foundation.
d72e314a1952b4418fb1c98b17dbab0d16bba585Adrián Riesco * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
d72e314a1952b4418fb1c98b17dbab0d16bba585Adrián Riesco * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
b9840e4ee6fda6e42fa4ee9f337482ccc4839a39Adrián Riesco * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
d72e314a1952b4418fb1c98b17dbab0d16bba585Adrián Riesco * DISCLAIMED. IN NO EVENT SHALL THE APACHE SOFTWARE FOUNDATION OR
d72e314a1952b4418fb1c98b17dbab0d16bba585Adrián Riesco * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
223be434693e8c97e2522ac19155a284b3536035Adrián Riesco * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
223be434693e8c97e2522ac19155a284b3536035Adrián Riesco * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
223be434693e8c97e2522ac19155a284b3536035Adrián Riesco * USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
223be434693e8c97e2522ac19155a284b3536035Adrián Riesco * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
223be434693e8c97e2522ac19155a284b3536035Adrián Riesco * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
223be434693e8c97e2522ac19155a284b3536035Adrián Riesco * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
223be434693e8c97e2522ac19155a284b3536035Adrián Riesco * SUCH DAMAGE.
223be434693e8c97e2522ac19155a284b3536035Adrián Riesco * ====================================================================
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco * This software consists of voluntary contributions made by many
51c15129e8118fed5c33c334f8df82619ce98e7dAdrián Riesco * individuals on behalf of the Apache Software Foundation. For more
d72e314a1952b4418fb1c98b17dbab0d16bba585Adrián Riesco * information on the Apache Software Foundation, please see
0f35e410ce3d3202f6769e9d139ad26d1de69b8eAdrián Riesco * Portions of this software are based upon public domain software
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco * originally written at the National Center for Supercomputing Applications,
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco * University of Illinois, Urbana-Champaign.
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco/* Some WWW schemes and their default ports; this is basically /etc/services */
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco/* This will become global when the protocol abstraction comes */
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco * A Web proxy module. Stages:
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco * translate_name: set filename to proxy:<URL>
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco * type_checker: set type to PROXY_MAGIC_TYPE if filename begins proxy:
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco * fix_ups: convert the URL stored in the filename to the
6d498b6f56ed9f71cced898b6c42fb48f6e60583Adrián Riesco * canonical form.
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco * handler: handle proxy requests
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco/* -------------------------------------------------------------- */
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco/* Translate the URL into a 'filename' */
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riescostatic int alias_match(const char *uri, const char *alias_fakename)
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco const char *end_fakename = alias_fakename + strlen(alias_fakename);
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco const char *aliasp = alias_fakename, *urip = uri;
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco /* any number of '/' in the alias matches any number in
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco * the supplied URI, but there must be at least one...
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco /* Other characters are compared literally */
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco /* Check last alias path component matched all the way */
6e121321775373fe11161d23c541437456df19b4Adrián Riesco if (aliasp[-1] != '/' && *urip != '\0' && *urip != '/')
6e121321775373fe11161d23c541437456df19b4Adrián Riesco /* Return number of characters from URI which matched (may be
6e121321775373fe11161d23c541437456df19b4Adrián Riesco * greater than length of alias, since we may have matched
6e121321775373fe11161d23c541437456df19b4Adrián Riesco * doubled slashes)
6e121321775373fe11161d23c541437456df19b4Adrián Riesco/* Detect if an absoluteURI should be proxied or not. Note that we
6e121321775373fe11161d23c541437456df19b4Adrián Riesco * have to do this during this phase because later phases are
6e121321775373fe11161d23c541437456df19b4Adrián Riesco * "short-circuiting"... i.e. translate_names will end when the first
6e121321775373fe11161d23c541437456df19b4Adrián Riesco * module returns OK. So for example, if the request is something like:
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco * GET http://othervhost/cgi-bin/printenv HTTP/1.0
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco * mod_alias will notice the /cgi-bin part and ScriptAlias it and
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco * short-circuit the proxy... just because of the ordering in the
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco * configuration file.
fecce42517d20490f893c4a9dee29b000e1653eaAdrián Riesco conf = (proxy_server_conf *) ap_get_module_config(sconf, &proxy_module);
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco /* but it might be something vhosted */
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco && !strcasecmp(r->parsed_uri.scheme, ap_http_method(r))
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco && ap_matches_request_vhost(r, r->parsed_uri.hostname,
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco r->parsed_uri.port_str ? r->parsed_uri.port : ap_default_port(r)))) {
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco r->filename = apr_pstrcat(r->pool, "proxy:", r->uri, NULL);
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco /* We need special treatment for CONNECT proxying: it has no scheme part */
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco else if (conf->req && r->method_number == M_CONNECT
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco r->filename = apr_pstrcat(r->pool, "proxy:", r->uri, NULL);
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco (proxy_server_conf *) ap_get_module_config(sconf, &proxy_module);
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco struct proxy_alias *ent = (struct proxy_alias *) conf->aliases->elts;
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco /* someone has already set up the proxy, it was possibly ourselves
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco * in proxy_detect
6d498b6f56ed9f71cced898b6c42fb48f6e60583Adrián Riesco /* XXX: since r->uri has been manipulated already we're not really
51c15129e8118fed5c33c334f8df82619ce98e7dAdrián Riesco * compliant with RFC1945 at this point. But this probably isn't
51c15129e8118fed5c33c334f8df82619ce98e7dAdrián Riesco * an issue because this is a hybrid proxy/origin server.
357381f0a999099cd2d4c268006df56b47847d68Adrián Riesco r->filename = apr_pstrcat(r->pool, "proxy:", ent[i].real,
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco/* -------------------------------------------------------------- */
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco/* Fixup the filename */
6b2e3d60f2e2c230c9637bf0701d7024d289764dAdrián Riesco * Canonicalise the URL
6d498b6f56ed9f71cced898b6c42fb48f6e60583Adrián Riesco if (!r->proxyreq || strncmp(r->filename, "proxy:", 6) != 0)
8b389272b3312c6d3e3c0aee2e94bca6dbdade50Adrián Riesco/* canonicalise each specific scheme */
51c15129e8118fed5c33c334f8df82619ce98e7dAdrián Riesco return ap_proxy_http_canon(r, url + 5, "http", DEFAULT_HTTP_PORT);
6d498b6f56ed9f71cced898b6c42fb48f6e60583Adrián Riesco return OK; /* otherwise; we've done the best we can */
51c15129e8118fed5c33c334f8df82619ce98e7dAdrián Riesco/* Send a redirection if the request contains a hostname which is not */
51c15129e8118fed5c33c334f8df82619ce98e7dAdrián Riesco/* fully qualified, i.e. doesn't have a domain name appended. Some proxy */
51c15129e8118fed5c33c334f8df82619ce98e7dAdrián Riesco/* servers like Netscape's allow this and access hosts from the local */
6b2e3d60f2e2c230c9637bf0701d7024d289764dAdrián Riesco/* domain in this case. I think it is better to redirect to a FQDN, since */
6b2e3d60f2e2c230c9637bf0701d7024d289764dAdrián Riesco/* these will later be found in the bookmarks files. */
a74f814d3b445eadad6f68737a98a7a303698affChristian Maeder/* The "ProxyDomain" directive determines what domain will be appended */
6b2e3d60f2e2c230c9637bf0701d7024d289764dAdrián Riescostatic int proxy_needsdomain(request_rec *r, const char *url, const char *domain)
6b2e3d60f2e2c230c9637bf0701d7024d289764dAdrián Riesco const char *ref;
6b2e3d60f2e2c230c9637bf0701d7024d289764dAdrián Riesco /* We only want to worry about GETs */
6b2e3d60f2e2c230c9637bf0701d7024d289764dAdrián Riesco if (!r->proxyreq || r->method_number != M_GET || !r->parsed_uri.hostname)
6b2e3d60f2e2c230c9637bf0701d7024d289764dAdrián Riesco /* If host does contain a dot already, or it is "localhost", decline */
6b2e3d60f2e2c230c9637bf0701d7024d289764dAdrián Riesco if (strchr(r->parsed_uri.hostname, '.') != NULL
6b2e3d60f2e2c230c9637bf0701d7024d289764dAdrián Riesco || strcasecmp(r->parsed_uri.hostname, "localhost") == 0)
6b2e3d60f2e2c230c9637bf0701d7024d289764dAdrián Riesco return DECLINED; /* host name has a dot already */
6b2e3d60f2e2c230c9637bf0701d7024d289764dAdrián Riesco ref = apr_table_get(r->headers_in, "Referer");
6b2e3d60f2e2c230c9637bf0701d7024d289764dAdrián Riesco /* Reassemble the request, but insert the domain after the host name */
6b2e3d60f2e2c230c9637bf0701d7024d289764dAdrián Riesco /* Note that the domain name always starts with a dot */
6b2e3d60f2e2c230c9637bf0701d7024d289764dAdrián Riesco r->parsed_uri.hostname = apr_pstrcat(r->pool, r->parsed_uri.hostname,
6b2e3d60f2e2c230c9637bf0701d7024d289764dAdrián Riesco apr_table_set(r->headers_out, "Location", nuri);
6b2e3d60f2e2c230c9637bf0701d7024d289764dAdrián Riesco ap_log_rerror(APLOG_MARK, APLOG_INFO|APLOG_NOERRNO, 0, r,
6b2e3d60f2e2c230c9637bf0701d7024d289764dAdrián Riesco ap_unparse_uri_components(r->pool, &r->parsed_uri,
6b2e3d60f2e2c230c9637bf0701d7024d289764dAdrián Riesco/* -------------------------------------------------------------- */
6b2e3d60f2e2c230c9637bf0701d7024d289764dAdrián Riesco/* Invoke handler */
6b2e3d60f2e2c230c9637bf0701d7024d289764dAdrián Riesco const char *p2;
223be434693e8c97e2522ac19155a284b3536035Adrián Riesco proxy_server_conf *conf = (proxy_server_conf *)
223be434693e8c97e2522ac19155a284b3536035Adrián Riesco struct proxy_remote *ents = (struct proxy_remote *) proxies->elts;
0f35e410ce3d3202f6769e9d139ad26d1de69b8eAdrián Riesco if (!r->proxyreq || strncmp(r->filename, "proxy:", 6) != 0)
c1cf2f634a37116ff90e99ca710179a23115cbfbAdrián Riesco (maxfwd_str = apr_table_get(r->headers_in, "Max-Forwards")) != NULL) {
b9840e4ee6fda6e42fa4ee9f337482ccc4839a39Adrián Riesco apr_psprintf(r->pool, "%ld", (maxfwd > 0) ? maxfwd-1 : 0));
223be434693e8c97e2522ac19155a284b3536035Adrián Riesco if ((rc = ap_setup_client_block(r, REQUEST_CHUNKED_ERROR)))
fe5611d78ea0648e8719cb004a6a26e9a033429aAdrián Riesco pragma = apr_table_get(r->headers_in, "Pragma");
fe5611d78ea0648e8719cb004a6a26e9a033429aAdrián Riesco auth = apr_table_get(r->headers_in, "Authorization");
fe5611d78ea0648e8719cb004a6a26e9a033429aAdrián Riesco imstr = apr_table_get(r->headers_in, "If-Modified-Since");
fe5611d78ea0648e8719cb004a6a26e9a033429aAdrián Riesco ap_log_error(APLOG_MARK, APLOG_DEBUG|APLOG_NOERRNO, 0, NULL,
fe5611d78ea0648e8719cb004a6a26e9a033429aAdrián Riesco "Request for %s, pragma=%s, auth=%s, imstr=%s", url,
fe5611d78ea0648e8719cb004a6a26e9a033429aAdrián Riesco /* If the host doesn't have a domain name, add one and redirect. */
b9840e4ee6fda6e42fa4ee9f337482ccc4839a39Adrián Riesco /* Check URI's destination host against NoProxy hosts */
b9840e4ee6fda6e42fa4ee9f337482ccc4839a39Adrián Riesco /* Bypass ProxyRemote server lookup if configured as NoProxy */
7fc57d0f02d0fec1192376ccebe2be0224cb9a55Adrián Riesco /* we only know how to handle communication to a proxy via http */
c1cf2f634a37116ff90e99ca710179a23115cbfbAdrián Riesco /*if (strcasecmp(scheme, "http") == 0) */
223be434693e8c97e2522ac19155a284b3536035Adrián Riesco struct dirconn_entry *list = (struct dirconn_entry *) conf->dirconn->elts;
c1cf2f634a37116ff90e99ca710179a23115cbfbAdrián Riesco for (direct_connect = ii = 0; ii < conf->dirconn->nelts && !direct_connect; ii++) {
223be434693e8c97e2522ac19155a284b3536035Adrián Riesco direct_connect = list[ii].matcher(&list[ii], r);
27aad79faa0eec8d0e7dda32bca710db95bd2d0aAdrián Riesco ap_log_rerror(APLOG_MARK, APLOG_DEBUG|APLOG_NOERRNO, r,
27aad79faa0eec8d0e7dda32bca710db95bd2d0aAdrián Riesco (direct_connect) ? "NoProxy for %s" : "UseProxy for %s",
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco/* firstly, try a proxy, unless a NoProxy directive is active */
223be434693e8c97e2522ac19155a284b3536035Adrián Riesco p2 = ap_strchr_c(ents[i].scheme, ':'); /* is it a partial URL? */
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco (p2 == NULL && strcasecmp(scheme, ents[i].scheme) == 0) ||
223be434693e8c97e2522ac19155a284b3536035Adrián Riesco strncasecmp(url, ents[i].scheme, strlen(ents[i].scheme)) == 0)) {
223be434693e8c97e2522ac19155a284b3536035Adrián Riesco /* CONNECT is a special method that bypasses the normal
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco * proxy code.
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco rc = ap_proxy_connect_handler(r, url, ents[i].hostname,
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco/* we only know how to handle communication to a proxy via http */
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco else if (strcasecmp(ents[i].protocol, "http") == 0)
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco rc = ap_proxy_http_handler(r, url, ents[i].hostname,
27aad79faa0eec8d0e7dda32bca710db95bd2d0aAdrián Riesco /* an error or success */
27aad79faa0eec8d0e7dda32bca710db95bd2d0aAdrián Riesco /* we failed to talk to the upstream proxy */
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco/* otherwise, try it direct */
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco/* N.B. what if we're behind a firewall, where we must use a proxy or
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco /* handle the scheme */
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco return ap_proxy_connect_handler(r, url, NULL, 0);
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco return ap_proxy_http_handler(r, url, NULL, 0);
7fc57d0f02d0fec1192376ccebe2be0224cb9a55Adrián Riesco/* -------------------------------------------------------------- */
27aad79faa0eec8d0e7dda32bca710db95bd2d0aAdrián Riesco/* Setup configurable data */
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riescostatic void * create_proxy_config(apr_pool_t *p, server_rec *s)
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco proxy_server_conf *ps = ap_pcalloc(p, sizeof(proxy_server_conf));
27aad79faa0eec8d0e7dda32bca710db95bd2d0aAdrián Riesco ps->proxies = ap_make_array(p, 10, sizeof(struct proxy_remote));
27aad79faa0eec8d0e7dda32bca710db95bd2d0aAdrián Riesco ps->aliases = ap_make_array(p, 10, sizeof(struct proxy_alias));
27aad79faa0eec8d0e7dda32bca710db95bd2d0aAdrián Riesco ps->raliases = ap_make_array(p, 10, sizeof(struct proxy_alias));
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco ps->noproxies = ap_make_array(p, 10, sizeof(struct noproxy_entry));
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco ps->dirconn = ap_make_array(p, 10, sizeof(struct dirconn_entry));
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco ps->nocaches = ap_make_array(p, 10, sizeof(struct nocache_entry));
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco ps->allowed_connect_ports = ap_make_array(p, 10, sizeof(int));
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco ps->cache_completion = DEFAULT_CACHE_COMPLETION;
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco ps->viaopt = via_off; /* initially backward compatible with 1.3.1 */
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco ps->recv_buffer_size = 0; /* this default was left unset for some reason */
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riescostatic void * merge_proxy_config(apr_pool_t *p, void *basev, void *overridesv)
7fc57d0f02d0fec1192376ccebe2be0224cb9a55Adrián Riesco proxy_server_conf *ps = ap_pcalloc(p, sizeof(proxy_server_conf));
27aad79faa0eec8d0e7dda32bca710db95bd2d0aAdrián Riesco proxy_server_conf *base = (proxy_server_conf *) basev;
27aad79faa0eec8d0e7dda32bca710db95bd2d0aAdrián Riesco proxy_server_conf *overrides = (proxy_server_conf *) overridesv;
27aad79faa0eec8d0e7dda32bca710db95bd2d0aAdrián Riesco ps->proxies = ap_append_arrays(p, base->proxies, overrides->proxies);
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco ps->aliases = ap_append_arrays(p, base->aliases, overrides->aliases);
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco ps->raliases = ap_append_arrays(p, base->raliases, overrides->raliases);
27aad79faa0eec8d0e7dda32bca710db95bd2d0aAdrián Riesco ps->noproxies = ap_append_arrays(p, base->noproxies, overrides->noproxies);
27aad79faa0eec8d0e7dda32bca710db95bd2d0aAdrián Riesco ps->dirconn = ap_append_arrays(p, base->dirconn, overrides->dirconn);
27aad79faa0eec8d0e7dda32bca710db95bd2d0aAdrián Riesco ps->nocaches = ap_append_arrays(p, base->nocaches, overrides->nocaches);
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco ps->allowed_connect_ports = ap_append_arrays(p, base->allowed_connect_ports, overrides->allowed_connect_ports);
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco ps->domain = (overrides->domain == NULL) ? base->domain : overrides->domain;
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco ps->viaopt = (overrides->viaopt_set == 0) ? base->viaopt : overrides->viaopt;
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco ps->req = (overrides->req_set == 0) ? base->req : overrides->req;
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco ps->recv_buffer_size = (overrides->recv_buffer_size_set == 0) ? base->recv_buffer_size : overrides->recv_buffer_size;
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riescostatic const char *
aea9000fc94442cbfc92596f4264473c0fce51e4Adrián Riesco add_proxy(cmd_parms *cmd, void *dummy, const char *f1, const char *r1)
357381f0a999099cd2d4c268006df56b47847d68Adrián Riesco (proxy_server_conf *) ap_get_module_config(s->module_config, &proxy_module);
357381f0a999099cd2d4c268006df56b47847d68Adrián Riesco if (p == NULL || p[1] != '/' || p[2] != '/' || p[3] == '\0')
357381f0a999099cd2d4c268006df56b47847d68Adrián Riesco return "ProxyRemote: Bad syntax for a remote proxy server";
357381f0a999099cd2d4c268006df56b47847d68Adrián Riesco if (sscanf(q + 1, "%u", &port) != 1 || port > 65535)
357381f0a999099cd2d4c268006df56b47847d68Adrián Riesco return "ProxyRemote: Bad syntax for a remote proxy server (bad port number)";
357381f0a999099cd2d4c268006df56b47847d68Adrián Riesco ap_str_tolower(p + 3); /* lowercase hostname */
c1cf2f634a37116ff90e99ca710179a23115cbfbAdrián Riescostatic const char *
fecce42517d20490f893c4a9dee29b000e1653eaAdrián Riesco set_cache_exclude(cmd_parms *cmd, void *dummy, const char *arg)
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco proxy_server_conf *psf = (proxy_server_conf *) ap_get_module_config(s->module_config, &proxy_module);
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco struct nocache_entry *list = (struct nocache_entry *) psf->nocaches->elts;
c1cf2f634a37116ff90e99ca710179a23115cbfbAdrián Riesco /* Don't duplicate entries */
fecce42517d20490f893c4a9dee29b000e1653eaAdrián Riesco if (strcasecmp(arg, list[i].name) == 0) /* ignore case for host names */
71410be62420b321abb02ef1ac2b7f2141b3bc7fAdrián Riesco /* Don't do name lookups on things that aren't dotted */
fecce42517d20490f893c4a9dee29b000e1653eaAdrián Riesco /*@@@FIXME: This copies only the first of (possibly many) IP addrs */ memcpy(&new->addr, hp.h_addr, sizeof(struct in_addr));
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riescostatic const char *
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco add_pass(cmd_parms *cmd, void *dummy, const char *f, const char *r)
357381f0a999099cd2d4c268006df56b47847d68Adrián Riesco (proxy_server_conf *) ap_get_module_config(s->module_config, &proxy_module);
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riescostatic const char *
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco add_pass_reverse(cmd_parms *cmd, void *dummy, const char *f, const char *r)
fecce42517d20490f893c4a9dee29b000e1653eaAdrián Riesco conf = (proxy_server_conf *)ap_get_module_config(s->module_config,
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riescostatic const char *
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco set_proxy_exclude(cmd_parms *parms, void *dummy, const char *arg)
7474965b2e6323002c96c0b39a59843cde201870Adrián Riesco ap_get_module_config(s->module_config, &proxy_module);
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco struct noproxy_entry *list = (struct noproxy_entry *) conf->noproxies->elts;
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco /* Don't duplicate entries */
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco for (i = 0; i < conf->noproxies->nelts; i++) {
0f35e410ce3d3202f6769e9d139ad26d1de69b8eAdrián Riesco if (strcasecmp(arg, list[i].name) == 0) /* ignore case for host names */
fecce42517d20490f893c4a9dee29b000e1653eaAdrián Riesco /* Don't do name lookups on things that aren't dotted */
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco /*@@@FIXME: This copies only the first of (possibly many) IP addrs */
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco memcpy(&new->addr, hp.h_addr, sizeof(struct in_addr));
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco * Set the ports CONNECT can use
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riescostatic const char *
0f35e410ce3d3202f6769e9d139ad26d1de69b8eAdrián Riesco set_allowed_ports(cmd_parms *parms, void *dummy, const char *arg)
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco ap_get_module_config(s->module_config, &proxy_module);
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco return "AllowCONNECT: port number must be numeric";
0f35e410ce3d3202f6769e9d139ad26d1de69b8eAdrián Riesco New = apr_array_push(conf->allowed_connect_ports);
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco/* Similar to set_proxy_exclude(), but defining directly connected hosts,
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco * which should never be accessed via the configured ProxyRemote servers
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riescostatic const char *
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco set_proxy_dirconn(cmd_parms *parms, void *dummy, const char *arg)
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco ap_get_module_config(s->module_config, &proxy_module);
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco struct dirconn_entry *list = (struct dirconn_entry *) conf->dirconn->elts;
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco /* Don't duplicate entries */
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco ap_log_error(APLOG_MARK, APLOG_STARTUP | APLOG_NOERRNO, 0, NULL,
172f4dfb4b858440fab545bac00d3ec4abd0cbe4Adrián Riesco ap_log_error(APLOG_MARK, APLOG_STARTUP | APLOG_NOERRNO, 0, NULL,
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco else if (ap_proxy_is_domainname(New, parms->pool)) {
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco ap_log_error(APLOG_MARK, APLOG_STARTUP | APLOG_NOERRNO, 0, NULL,
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco else if (ap_proxy_is_hostname(New, parms->pool)) {
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco ap_log_error(APLOG_MARK, APLOG_STARTUP | APLOG_NOERRNO, 0, NULL,
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco fprintf(stderr, "Parsed word %s\n", New->name);
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riescostatic const char *
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco set_proxy_domain(cmd_parms *parms, void *dummy, const char *arg)
fecce42517d20490f893c4a9dee29b000e1653eaAdrián Riesco ap_get_module_config(parms->server->module_config, &proxy_module);
0f77efdcc159eee5682aabf2b9a3c178c467b466Adrián Riesco return "ProxyDomain: domain name must start with a dot.";
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riescostatic const char *
fecce42517d20490f893c4a9dee29b000e1653eaAdrián Riesco set_proxy_req(cmd_parms *parms, void *dummy, int flag)
fecce42517d20490f893c4a9dee29b000e1653eaAdrián Riesco ap_get_module_config(parms->server->module_config, &proxy_module);
0f77efdcc159eee5682aabf2b9a3c178c467b466Adrián Riescostatic const char *
0f77efdcc159eee5682aabf2b9a3c178c467b466Adrián Riesco set_recv_buffer_size(cmd_parms *parms, void *dummy, const char *arg)
0f77efdcc159eee5682aabf2b9a3c178c467b466Adrián Riesco ap_get_module_config(parms->server->module_config, &proxy_module);
0f77efdcc159eee5682aabf2b9a3c178c467b466Adrián Riesco if (s < 512 && s != 0) {
0f77efdcc159eee5682aabf2b9a3c178c467b466Adrián Riesco return "ProxyReceiveBufferSize must be >= 512 bytes, or 0 for system default.";
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riescostatic const char*
0f77efdcc159eee5682aabf2b9a3c178c467b466Adrián Riesco set_via_opt(cmd_parms *parms, void *dummy, const char *arg)
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco ap_get_module_config(parms->server->module_config, &proxy_module);
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco return "ProxyVia must be one of: "
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco "off | on | full | block";
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riescostatic const char*
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco set_cache_completion(cmd_parms *parms, void *dummy, const char *arg)
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco proxy_server_conf *psf = ap_get_module_config(parms->server->module_config, &proxy_module);
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco if (s > 100 || s < 0) {
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco return "CacheForceCompletion must be <= 100 percent, "
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco "or 0 for system default.";
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco AP_INIT_FLAG("ProxyRequests", set_proxy_req, NULL, RSRC_CONF,
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco "on if the true proxy requests should be accepted"),
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco AP_INIT_TAKE2("ProxyRemote", add_proxy, NULL, RSRC_CONF,
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco "a scheme, partial URL or '*' and a proxy server"),
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco AP_INIT_TAKE2("ProxyPass", add_pass, NULL, RSRC_CONF,
0f77efdcc159eee5682aabf2b9a3c178c467b466Adrián Riesco "a virtual path and a URL"),
fecce42517d20490f893c4a9dee29b000e1653eaAdrián Riesco AP_INIT_TAKE2("ProxyPassReverse", add_pass_reverse, NULL, RSRC_CONF,
fecce42517d20490f893c4a9dee29b000e1653eaAdrián Riesco "a virtual path and a URL for reverse proxy behaviour"),
fecce42517d20490f893c4a9dee29b000e1653eaAdrián Riesco AP_INIT_ITERATE("ProxyBlock", set_proxy_exclude, NULL, RSRC_CONF,
fecce42517d20490f893c4a9dee29b000e1653eaAdrián Riesco "A list of names, hosts or domains to which the proxy will not connect"),
fecce42517d20490f893c4a9dee29b000e1653eaAdrián Riesco AP_INIT_TAKE1("ProxyReceiveBufferSize", set_recv_buffer_size, NULL, RSRC_CONF,
fecce42517d20490f893c4a9dee29b000e1653eaAdrián Riesco "Receive buffer size for outgoing HTTP and FTP connections in bytes"),
fecce42517d20490f893c4a9dee29b000e1653eaAdrián Riesco AP_INIT_ITERATE("NoProxy", set_proxy_dirconn, NULL, RSRC_CONF,
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco "A list of domains, hosts, or subnets to which the proxy will connect directly"),
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco AP_INIT_TAKE1("ProxyDomain", set_proxy_domain, NULL, RSRC_CONF,
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco "The default intranet domain name (in absence of a domain in the URL)"),
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco AP_INIT_ITERATE("AllowCONNECT", set_allowed_ports, NULL, RSRC_CONF,
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco "A list of ports which CONNECT may connect to"),
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco AP_INIT_TAKE1("ProxyVia", set_via_opt, NULL, RSRC_CONF,
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco "Configure Via: proxy header header to one of: on | off | block | full"),
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco AP_INIT_ITERATE("ProxyNoCache", set_cache_exclude, NULL, RSRC_CONF,
0f77efdcc159eee5682aabf2b9a3c178c467b466Adrián Riesco "A list of names, hosts or domains for which caching is *not* provided"),
0f77efdcc159eee5682aabf2b9a3c178c467b466Adrián Riesco AP_INIT_TAKE1("ProxyCacheForceCompletion", set_cache_completion, NULL, RSRC_CONF,
0f77efdcc159eee5682aabf2b9a3c178c467b466Adrián Riesco "Force a http cache completion after this percentage is loaded"),
51c15129e8118fed5c33c334f8df82619ce98e7dAdrián Riesco /* handler */
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco ap_hook_handler(proxy_handler, NULL, NULL, APR_HOOK_FIRST);
27aad79faa0eec8d0e7dda32bca710db95bd2d0aAdrián Riesco /* filename-to-URI translation */
51c15129e8118fed5c33c334f8df82619ce98e7dAdrián Riesco ap_hook_translate_name(proxy_trans, NULL, NULL, APR_HOOK_FIRST);
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco ap_hook_fixups(proxy_fixup, NULL, NULL, APR_HOOK_FIRST);
27aad79faa0eec8d0e7dda32bca710db95bd2d0aAdrián Riesco /* post read_request handling */
5318901bb69bf247e0f341312c800ba4ea87e46bAdrián Riesco ap_hook_post_read_request(proxy_detect, NULL, NULL, APR_HOOK_FIRST);
51c15129e8118fed5c33c334f8df82619ce98e7dAdrián Riesco NULL, /* create per-directory config structure */
27aad79faa0eec8d0e7dda32bca710db95bd2d0aAdrián Riesco NULL, /* merge per-directory config structures */
7474965b2e6323002c96c0b39a59843cde201870Adrián Riesco create_proxy_config, /* create per-server config structure */
27aad79faa0eec8d0e7dda32bca710db95bd2d0aAdrián Riesco merge_proxy_config, /* merge per-server config structures */