a0246ccee2
Includes a few minor fixes: - frontend: support setting port for WHOIS server - proxy: fix handling of very long lines - proxy: refactor IP allowlist logic, parse allow IP list at startup
94 lines
3.0 KiB
Go
94 lines
3.0 KiB
Go
package main
|
|
|
|
import (
|
|
"fmt"
|
|
"net"
|
|
"strings"
|
|
|
|
"github.com/google/shlex"
|
|
"github.com/spf13/pflag"
|
|
"github.com/spf13/viper"
|
|
)
|
|
|
|
type viperSettingType struct {
|
|
BirdSocket string `mapstructure:"bird_socket"`
|
|
Listen string `mapstructure:"listen"`
|
|
AllowedIPs string `mapstructure:"allowed_ips"`
|
|
TracerouteBin string `mapstructure:"traceroute_bin"`
|
|
TracerouteFlags string `mapstructure:"traceroute_flags"`
|
|
TracerouteRaw bool `mapstructure:"traceroute_raw"`
|
|
}
|
|
|
|
// Parse settings with viper, and convert to legacy setting format
|
|
func parseSettings() {
|
|
viper.AddConfigPath(".")
|
|
viper.AddConfigPath("/etc/bird-lg")
|
|
viper.SetConfigName("bird-lgproxy")
|
|
viper.AllowEmptyEnv(true)
|
|
viper.AutomaticEnv()
|
|
viper.SetEnvPrefix("birdlg")
|
|
viper.SetEnvKeyReplacer(strings.NewReplacer("-", "_", ".", "_"))
|
|
|
|
// Legacy environment variables without prefixes
|
|
viper.BindEnv("bird_socket", "BIRD_SOCKET")
|
|
viper.BindEnv("listen", "BIRDLG_LISTEN", "BIRDLG_PROXY_PORT")
|
|
viper.BindEnv("allowed_ips", "ALLOWED_IPS")
|
|
|
|
pflag.String("bird", "/var/run/bird/bird.ctl", "socket file for bird, set either in parameter or environment variable BIRD_SOCKET")
|
|
viper.BindPFlag("bird_socket", pflag.Lookup("bird"))
|
|
|
|
pflag.String("listen", "8000", "listen address, set either in parameter or environment variable BIRDLG_PROXY_PORT")
|
|
viper.BindPFlag("listen", pflag.Lookup("listen"))
|
|
|
|
pflag.String("allowed", "", "IPs allowed to access this proxy, separated by commas. Don't set to allow all IPs.")
|
|
viper.BindPFlag("allowed_ips", pflag.Lookup("allowed"))
|
|
|
|
pflag.String("traceroute_bin", "", "traceroute binary file, set either in parameter or environment variable BIRDLG_TRACEROUTE_BIN")
|
|
viper.BindPFlag("traceroute_bin", pflag.Lookup("traceroute_bin"))
|
|
|
|
pflag.String("traceroute_flags", "", "traceroute flags, supports multiple flags separated with space.")
|
|
viper.BindPFlag("traceroute_flags", pflag.Lookup("traceroute_flags"))
|
|
|
|
pflag.Bool("traceroute_raw", false, "whether to display traceroute outputs raw; set via parameter or environment variable BIRDLG_TRACEROUTE_RAW")
|
|
viper.BindPFlag("traceroute_raw", pflag.Lookup("traceroute_raw"))
|
|
|
|
pflag.Parse()
|
|
|
|
if err := viper.ReadInConfig(); err != nil {
|
|
println("Warning on reading config: " + err.Error())
|
|
}
|
|
|
|
viperSettings := viperSettingType{}
|
|
if err := viper.Unmarshal(&viperSettings); err != nil {
|
|
panic(err)
|
|
}
|
|
|
|
setting.birdSocket = viperSettings.BirdSocket
|
|
setting.listen = viperSettings.Listen
|
|
|
|
if viperSettings.AllowedIPs != "" {
|
|
for _, ip := range strings.Split(viperSettings.AllowedIPs, ",") {
|
|
ipObject := net.ParseIP(ip)
|
|
if ipObject == nil {
|
|
fmt.Printf("Parse IP %s failed\n", ip)
|
|
continue
|
|
}
|
|
|
|
setting.allowedIPs = append(setting.allowedIPs, ipObject)
|
|
}
|
|
} else {
|
|
setting.allowedIPs = []net.IP{}
|
|
}
|
|
|
|
var err error
|
|
setting.tr_bin = viperSettings.TracerouteBin
|
|
setting.tr_flags, err = shlex.Split(viperSettings.TracerouteFlags)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
|
|
setting.tr_raw = viperSettings.TracerouteRaw
|
|
|
|
fmt.Printf("%#v\n", setting)
|
|
}
|