mod_proxy_wstunnel.c revision 5d9953b57425b6ee84fdf2666f687c101e2ffd65
0922cbe8300e97215564748d449824f458196335Lennart Poettering/* Licensed to the Apache Software Foundation (ASF) under one or more
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * contributor license agreements. See the NOTICE file distributed with
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * this work for additional information regarding copyright ownership.
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * The ASF licenses this file to You under the Apache License, Version 2.0
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * (the "License"); you may not use this file except in compliance with
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * the License. You may obtain a copy of the License at
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering *
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * http://www.apache.org/licenses/LICENSE-2.0
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering *
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * Unless required by applicable law or agreed to in writing, software
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * distributed under the License is distributed on an "AS IS" BASIS,
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * See the License for the specific language governing permissions and
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * limitations under the License.
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering */
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering#include "mod_proxy.h"
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering#include "ap_mpm.h"
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poetteringmodule AP_MODULE_DECLARE_DATA proxy_wstunnel_module;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poetteringtypedef struct {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering signed char is_async;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_time_t idle_timeout;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_time_t async_delay;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering} proxyws_dir_conf;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poetteringtypedef struct ws_baton_t {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering request_rec *r;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering proxy_conn_rec *proxy_connrec;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_socket_t *server_soc;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_socket_t *client_soc;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_pollset_t *pollset;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_bucket_brigade *bb;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_pool_t *subpool; /* cleared before each suspend, destroyed when request ends */
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering char *scheme; /* required to release the proxy connection */
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering} ws_baton_t;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poetteringstatic apr_status_t proxy_wstunnel_transfer(request_rec *r, conn_rec *c_i, conn_rec *c_o,
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_bucket_brigade *bb, char *name);
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poetteringstatic void proxy_wstunnel_callback(void *b);
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poetteringstatic int proxy_wstunnel_pump(ws_baton_t *baton, apr_time_t timeout, int try_async) {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering request_rec *r = baton->r;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering conn_rec *c = r->connection;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering proxy_conn_rec *conn = baton->proxy_connrec;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_socket_t *sock = conn->sock;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering conn_rec *backconn = conn->connection;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering const apr_pollfd_t *signalled;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_int32_t pollcnt, pi;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_int16_t pollevent;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_pollset_t *pollset = baton->pollset;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_socket_t *client_socket = baton->client_soc;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_status_t rv;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_bucket_brigade *bb = baton->bb;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering while(1) {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering if ((rv = apr_pollset_poll(pollset, timeout, &pollcnt, &signalled))
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering != APR_SUCCESS) {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering if (APR_STATUS_IS_EINTR(rv)) {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering continue;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering }
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering else if (APR_STATUS_IS_TIMEUP(rv)) {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering if (try_async) {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, APLOGNO(02542) "Attempting to go async");
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering return SUSPENDED;
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering }
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering else {
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering return HTTP_REQUEST_TIME_OUT;
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering }
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering }
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering else {
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(02444) "error apr_poll()");
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering return HTTP_INTERNAL_SERVER_ERROR;
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering }
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering }
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, APLOGNO(02445)
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering "woke from poll(), i=%d", pollcnt);
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering for (pi = 0; pi < pollcnt; pi++) {
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering const apr_pollfd_t *cur = &signalled[pi];
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering if (cur->desc.s == sock) {
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering pollevent = cur->rtnevents;
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering if (pollevent & (APR_POLLIN | APR_POLLHUP)) {
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, APLOGNO(02446)
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering "sock was readable");
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering rv = proxy_wstunnel_transfer(r, backconn, c, bb, "sock");
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering }
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering else if (pollevent & APR_POLLERR) {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering rv = APR_EPIPE;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering backconn->aborted = 1;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering ap_log_rerror(APLOG_MARK, APLOG_NOTICE, 0, r, APLOGNO(02447)
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering "error on backconn");
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering }
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering else {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering rv = APR_EGENERAL;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering ap_log_rerror(APLOG_MARK, APLOG_NOTICE, 0, r, APLOGNO(02605)
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering "unknown event on backconn %d", pollevent);
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering }
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering }
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering else if (cur->desc.s == client_socket) {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering pollevent = cur->rtnevents;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering if (pollevent & (APR_POLLIN | APR_POLLHUP)) {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, APLOGNO(02448)
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering "client was readable");
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering rv = proxy_wstunnel_transfer(r, c, backconn, bb, "client");
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering }
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering else if (pollevent & APR_POLLERR) {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering rv = APR_EPIPE;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering c->aborted = 1;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, APLOGNO(02607)
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering "error on client conn");
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering }
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering else {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering rv = APR_EGENERAL;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering ap_log_rerror(APLOG_MARK, APLOG_NOTICE, 0, r, APLOGNO(02606)
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering "unknown event on client conn %d", pollevent);
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering }
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering }
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering else {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering rv = APR_EBADF;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(02449)
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering "unknown socket in pollset");
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering }
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering }
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering if (rv != APR_SUCCESS) {
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering break;
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering }
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering }
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r,
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering "finished with poll() - cleaning up");
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering return OK;
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering}
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering
d4205751d4643c272059a3728045929dd0e5e800Lennart Poetteringstatic void proxy_wstunnel_finish(ws_baton_t *baton) {
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, baton->r, "proxy_wstunnel_finish");
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering baton->proxy_connrec->close = 1; /* new handshake expected on each back-conn */
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering baton->r->connection->keepalive = AP_CONN_CLOSE;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering ap_proxy_release_connection(baton->scheme, baton->proxy_connrec, baton->r->server);
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering ap_finalize_request_protocol(baton->r);
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering ap_lingering_close(baton->r->connection);
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_socket_close(baton->client_soc);
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering ap_mpm_resume_suspended(baton->r->connection);
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering ap_process_request_after_handler(baton->r); /* don't touch baton or r after here */
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering}
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering/* If neither socket becomes readable in the specified timeout,
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering * this callback will kill the request. We do not have to worry about
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * having a cancel and a IO both queued.
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering */
d4205751d4643c272059a3728045929dd0e5e800Lennart Poetteringstatic void proxy_wstunnel_cancel_callback(void *b)
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering{
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering ws_baton_t *baton = (ws_baton_t*)b;
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, baton->r, "proxy_wstunnel_cancel_callback, IO timed out");
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering proxy_wstunnel_finish(baton);
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering return;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering}
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering/* Invoked by the event loop when data is ready on either end.
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * Pump both ends until they'd block and then start over again
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * We don't need the invoke_mtx, since we never put multiple callback events
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * in the queue.
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering */
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poetteringstatic void proxy_wstunnel_callback(void *b) {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering int status;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_socket_t *sockets[3] = {NULL, NULL, NULL};
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering ws_baton_t *baton = (ws_baton_t*)b;
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering proxyws_dir_conf *dconf = ap_get_module_config(baton->r->per_dir_config, &proxy_wstunnel_module);
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_pool_clear(baton->subpool);
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering status = proxy_wstunnel_pump(baton, dconf->async_delay, dconf->is_async);
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering if (status == SUSPENDED) {
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering sockets[0] = baton->client_soc;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering sockets[1] = baton->server_soc;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering ap_mpm_register_socket_callback_timeout(sockets, baton->subpool, 1,
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering proxy_wstunnel_callback,
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering proxy_wstunnel_cancel_callback,
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering baton,
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering dconf->idle_timeout);
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, baton->r, "proxy_wstunnel_callback suspend");
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering }
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering else {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering proxy_wstunnel_finish(baton);
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering }
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering}
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering/*
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * Canonicalise http-like URLs.
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering * scheme is the scheme for the URL
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * url is the URL starting with the first '/'
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * def_port is the default port for this scheme.
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering */
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poetteringstatic int proxy_wstunnel_canon(request_rec *r, char *url)
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering{
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering char *host, *path, sport[7];
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering char *search = NULL;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering const char *err;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering char *scheme;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_port_t port, def_port;
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering /* ap_port_of_scheme() */
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering if (strncasecmp(url, "ws:", 3) == 0) {
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering url += 3;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering scheme = "ws:";
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering def_port = apr_uri_port_of_scheme("http");
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering }
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering else if (strncasecmp(url, "wss:", 4) == 0) {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering url += 4;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering scheme = "wss:";
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering def_port = apr_uri_port_of_scheme("https");
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering }
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering else {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering return DECLINED;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering }
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering port = def_port;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, "canonicalising URL %s", url);
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering /*
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * do syntactic check.
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * We break the URL into host, port, path, search
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering */
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering err = ap_proxy_canon_netloc(r->pool, &url, NULL, NULL, &host, &port);
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering if (err) {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02439) "error parsing URL %s: %s",
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering url, err);
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering return HTTP_BAD_REQUEST;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering }
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering /*
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * now parse path/search args, according to rfc1738:
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * process the path. With proxy-nocanon set (by
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering * mod_proxy) we use the raw, unparsed uri
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering */
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering if (apr_table_get(r->notes, "proxy-nocanon")) {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering path = url; /* this is the raw path */
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering }
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering else {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering path = ap_proxy_canonenc(r->pool, url, strlen(url), enc_path, 0,
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering r->proxyreq);
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering search = r->args;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering }
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering if (path == NULL)
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering return HTTP_BAD_REQUEST;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_snprintf(sport, sizeof(sport), ":%d", port);
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering if (ap_strchr_c(host, ':')) {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering /* if literal IPv6 address */
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering host = apr_pstrcat(r->pool, "[", host, "]", NULL);
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering }
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering r->filename = apr_pstrcat(r->pool, "proxy:", scheme, "//", host, sport,
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering "/", path, (search) ? "?" : "",
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering (search) ? search : "", NULL);
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering return OK;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering}
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poetteringstatic apr_status_t proxy_wstunnel_transfer(request_rec *r, conn_rec *c_i, conn_rec *c_o,
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_bucket_brigade *bb, char *name)
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering{
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_status_t rv;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering#ifdef DEBUGGING
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_off_t len;
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering#endif
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering do {
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering apr_brigade_cleanup(bb);
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering rv = ap_get_brigade(c_i->input_filters, bb, AP_MODE_READBYTES,
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering APR_NONBLOCK_READ, AP_IOBUFSIZE);
5d6a86d7a034a1fb3d6e3f1b58e2c13739270894Lennart Poettering if (rv == APR_SUCCESS) {
if (c_o->aborted) {
return APR_EPIPE;
}
if (APR_BRIGADE_EMPTY(bb)) {
break;
}
#ifdef DEBUGGING
len = -1;
apr_brigade_length(bb, 0, &len);
ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02440)
"read %" APR_OFF_T_FMT
" bytes from %s", len, name);
#endif
rv = ap_pass_brigade(c_o->output_filters, bb);
if (rv == APR_SUCCESS) {
ap_fflush(c_o->output_filters, bb);
}
else {
ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(02441)
"error on %s - ap_pass_brigade",
name);
}
} else if (!APR_STATUS_IS_EAGAIN(rv) && !APR_STATUS_IS_EOF(rv)) {
ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(02442)
"error on %s - ap_get_brigade",
name);
}
} while (rv == APR_SUCCESS);
ap_log_rerror(APLOG_MARK, APLOG_TRACE2, rv, r, "wstunnel_transfer complete");
if (APR_STATUS_IS_EAGAIN(rv)) {
rv = APR_SUCCESS;
}
return rv;
}
/*
* process the request and write the response.
*/
static int proxy_wstunnel_request(apr_pool_t *p, request_rec *r,
proxy_conn_rec *conn,
proxy_worker *worker,
proxy_server_conf *conf,
apr_uri_t *uri,
char *url, char *server_portstr, char *scheme)
{
apr_status_t rv;
apr_pollset_t *pollset;
apr_pollfd_t pollfd;
conn_rec *c = r->connection;
apr_socket_t *sock = conn->sock;
conn_rec *backconn = conn->connection;
char *buf;
apr_bucket_brigade *header_brigade;
apr_bucket *e;
char *old_cl_val = NULL;
char *old_te_val = NULL;
apr_bucket_brigade *bb = apr_brigade_create(p, c->bucket_alloc);
apr_socket_t *client_socket = ap_get_conn_socket(c);
ws_baton_t *baton = apr_pcalloc(r->pool, sizeof(ws_baton_t));
apr_socket_t *sockets[3] = {NULL, NULL, NULL};
int status;
proxyws_dir_conf *dconf = ap_get_module_config(r->per_dir_config, &proxy_wstunnel_module);
header_brigade = apr_brigade_create(p, backconn->bucket_alloc);
ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "sending request");
rv = ap_proxy_create_hdrbrgd(p, header_brigade, r, conn,
worker, conf, uri, url, server_portstr,
&old_cl_val, &old_te_val);
if (rv != OK) {
return rv;
}
buf = apr_pstrcat(p, "Upgrade: WebSocket", CRLF, "Connection: Upgrade", CRLF, CRLF, NULL);
ap_xlate_proto_to_ascii(buf, strlen(buf));
e = apr_bucket_pool_create(buf, strlen(buf), p, c->bucket_alloc);
APR_BRIGADE_INSERT_TAIL(header_brigade, e);
if ((rv = ap_proxy_pass_brigade(c->bucket_alloc, r, conn, backconn,
header_brigade, 1)) != OK)
return rv;
ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r, "setting up poll()");
if ((rv = apr_pollset_create(&pollset, 2, p, 0)) != APR_SUCCESS) {
ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(02443)
"error apr_pollset_create()");
return HTTP_INTERNAL_SERVER_ERROR;
}
#if 0
apr_socket_opt_set(sock, APR_SO_NONBLOCK, 1);
apr_socket_opt_set(sock, APR_SO_KEEPALIVE, 1);
apr_socket_opt_set(client_socket, APR_SO_NONBLOCK, 1);
apr_socket_opt_set(client_socket, APR_SO_KEEPALIVE, 1);
#endif
pollfd.p = p;
pollfd.desc_type = APR_POLL_SOCKET;
pollfd.reqevents = APR_POLLIN | APR_POLLHUP;
pollfd.desc.s = sock;
pollfd.client_data = NULL;
apr_pollset_add(pollset, &pollfd);
pollfd.desc.s = client_socket;
apr_pollset_add(pollset, &pollfd);
ap_remove_input_filter_byhandle(c->input_filters, "reqtimeout");
r->output_filters = c->output_filters;
r->proto_output_filters = c->output_filters;
r->input_filters = c->input_filters;
r->proto_input_filters = c->input_filters;
/* This handler should take care of the entire connection; make it so that
* nothing else is attempted on the connection after returning. */
c->keepalive = AP_CONN_CLOSE;
baton->r = r;
baton->pollset = pollset;
baton->client_soc = client_socket;
baton->server_soc = sock;
baton->proxy_connrec = conn;
baton->bb = bb;
baton->scheme = scheme;
apr_pool_create(&baton->subpool, r->pool);
if (!dconf->is_async) {
status = proxy_wstunnel_pump(baton, dconf->idle_timeout, dconf->is_async);
}
else {
status = proxy_wstunnel_pump(baton, dconf->async_delay, dconf->is_async);
apr_pool_clear(baton->subpool);
if (status == SUSPENDED) {
sockets[0] = baton->client_soc;
sockets[1] = baton->server_soc;
rv = ap_mpm_register_socket_callback_timeout(sockets, baton->subpool, 1,
proxy_wstunnel_callback,
proxy_wstunnel_cancel_callback,
baton,
dconf->idle_timeout);
if (rv == APR_SUCCESS) {
return SUSPENDED;
}
else if (APR_STATUS_IS_ENOTIMPL(rv)) {
ap_log_rerror(APLOG_MARK, APLOG_TRACE1, 0, r, APLOGNO(02544) "No async support");
status = proxy_wstunnel_pump(baton, dconf->idle_timeout, 0); /* force no async */
}
else {
ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r,
APLOGNO(02543) "error creating websockets tunnel");
return HTTP_INTERNAL_SERVER_ERROR;
}
}
}
if (status != OK) {
/* Avoid sending error pages down an upgraded connection */
if (status != HTTP_REQUEST_TIME_OUT) {
r->status = status;
}
status = OK;
}
return status;
}
/*
*/
static int proxy_wstunnel_handler(request_rec *r, proxy_worker *worker,
proxy_server_conf *conf,
char *url, const char *proxyname,
apr_port_t proxyport)
{
int status;
char server_portstr[32];
proxy_conn_rec *backend = NULL;
char *scheme;
int retry;
conn_rec *c = r->connection;
apr_pool_t *p = r->pool;
apr_uri_t *uri;
int is_ssl = 0;
if (strncasecmp(url, "wss:", 4) == 0) {
scheme = "WSS";
is_ssl = 1;
}
else if (strncasecmp(url, "ws:", 3) == 0) {
scheme = "WS";
}
else {
ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02450) "declining URL %s", url);
return DECLINED;
}
uri = apr_palloc(p, sizeof(*uri));
ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(02451) "serving URL %s", url);
/* create space for state information */
status = ap_proxy_acquire_connection(scheme, &backend, worker,
r->server);
if (status != OK) {
if (backend) {
backend->close = 1;
ap_proxy_release_connection(scheme, backend, r->server);
}
return status;
}
backend->is_ssl = is_ssl;
backend->close = 0;
retry = 0;
while (retry < 2) {
char *locurl = url;
/* Step One: Determine Who To Connect To */
status = ap_proxy_determine_connection(p, r, conf, worker, backend,
uri, &locurl, proxyname, proxyport,
server_portstr,
sizeof(server_portstr));
if (status != OK)
break;
/* Step Two: Make the Connection */
if (ap_proxy_connect_backend(scheme, backend, worker, r->server)) {
ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02452)
"failed to make connection to backend: %s",
backend->hostname);
status = HTTP_SERVICE_UNAVAILABLE;
break;
}
/* Step Three: Create conn_rec */
if (!backend->connection) {
if ((status = ap_proxy_connection_create(scheme, backend,
c, r->server)) != OK)
break;
}
backend->close = 1; /* must be after ap_proxy_determine_connection */
/* Step Three: Process the Request */
status = proxy_wstunnel_request(p, r, backend, worker, conf, uri, locurl,
server_portstr, scheme);
break;
}
/* Do not close the socket */
if (status != SUSPENDED) {
ap_proxy_release_connection(scheme, backend, r->server);
}
return status;
}
static void *create_proxyws_dir_config(apr_pool_t *p, char *dummy)
{
proxyws_dir_conf *new =
(proxyws_dir_conf *) apr_pcalloc(p, sizeof(proxyws_dir_conf));
new->idle_timeout = -1; /* no timeout */
return (void *) new;
}
static const char * proxyws_set_idle(cmd_parms *cmd, void *conf, const char *val)
{
proxyws_dir_conf *dconf = conf;
if (ap_timeout_parameter_parse(val, &(dconf->idle_timeout), "s") != APR_SUCCESS)
return "ProxyWebsocketIdleTimeout timeout has wrong format";
return NULL;
}
static const char * proxyws_set_aysnch_delay(cmd_parms *cmd, void *conf, const char *val)
{
proxyws_dir_conf *dconf = conf;
if (ap_timeout_parameter_parse(val, &(dconf->async_delay), "s") != APR_SUCCESS)
return "ProxyWebsocketAsyncDelay timeout has wrong format";
return NULL;
}
static const command_rec ws_proxy_cmds[] =
{
AP_INIT_FLAG("ProxyWebsocketAsync", ap_set_flag_slot_char, (void*)APR_OFFSETOF(proxyws_dir_conf, is_async),
RSRC_CONF|ACCESS_CONF,
"on if idle websockets connections should be monitored asyncronously"),
AP_INIT_TAKE1("ProxyWebsocketIdleTimeout", proxyws_set_idle, NULL, RSRC_CONF|ACCESS_CONF,
"timeout for activity in either direction, unlimited by default"),
AP_INIT_TAKE1("ProxyWebsocketAsyncDelay", proxyws_set_aysnch_delay, NULL, RSRC_CONF|ACCESS_CONF,
"amount of time to poll before going asyncronous"),
{NULL}
};
static void ap_proxy_http_register_hook(apr_pool_t *p)
{
proxy_hook_scheme_handler(proxy_wstunnel_handler, NULL, NULL, APR_HOOK_FIRST);
proxy_hook_canon_handler(proxy_wstunnel_canon, NULL, NULL, APR_HOOK_FIRST);
}
AP_DECLARE_MODULE(proxy_wstunnel) = {
STANDARD20_MODULE_STUFF,
create_proxyws_dir_config, /* create per-directory config structure */
NULL, /* merge per-directory config structures */
NULL, /* create per-server config structure */
NULL, /* merge per-server config structures */
ws_proxy_cmds, /* command apr_table_t */
ap_proxy_http_register_hook /* register hooks */
};