Compare commits
73 Commits
Author | SHA1 | Date |
---|---|---|
|
2fa4dda2c3 | |
|
4492f77d87 | |
|
aaf8a3b163 | |
|
c37642c6c1 | |
|
f3a6f27e99 | |
|
f167424e4f | |
|
789cc6939e | |
|
b57beded8f | |
|
d29e238beb | |
|
5d3dcb4b8e | |
|
71a0f37abb | |
|
c8d6da5ebd | |
|
7caf4ad4a8 | |
|
d13ea29071 | |
|
b11f15ecfe | |
|
454f65f087 | |
|
1988241b98 | |
|
901345a337 | |
|
0c14419e7e | |
|
db111642d2 | |
|
d5b1373e17 | |
|
ba8a2ec494 | |
|
f8e27bef56 | |
|
2bbeeb34c5 | |
|
0090b794ee | |
|
93f561d6ef | |
|
9da6d2fec5 | |
|
8e3d731719 | |
|
d5b244dc5f | |
|
d767afd658 | |
|
f4fd79737e | |
|
2ab6b29ed5 | |
|
55e6cd4816 | |
|
a490d5f10e | |
|
994a12da5a | |
|
91deff4a14 | |
|
81c3a4fbb0 | |
|
5b85eef7eb | |
|
c54cf5a456 | |
|
7dfa0a2e6d | |
|
68ef680439 | |
|
bd42f712ea | |
|
0b31633309 | |
|
b5fa3be506 | |
|
8783db018b | |
|
e60d1ae5b7 | |
|
84a767ade0 | |
|
19c72f94a5 | |
|
de78dcdf52 | |
|
eb200ddd81 | |
|
5c4ac4a3ee | |
|
ee328892d6 | |
|
04d983d671 | |
|
202518d547 | |
|
52d14fe78f | |
|
8aadc4fbb6 | |
|
b6391d8fd1 | |
|
35fac1bd57 | |
|
b13a30c354 | |
|
5982683cdd | |
|
1a986a029f | |
|
ed0ddccab5 | |
|
20ae50c115 | |
|
9763ed0e29 | |
|
88691a5149 | |
|
6b7fc0bc6a | |
|
c5a659ff64 | |
|
bd06da7b2b | |
|
b61d64a755 | |
|
3df794ecc4 | |
|
ca1d002974 | |
|
1ee7256506 | |
|
7c70abf07f |
|
@ -0,0 +1,52 @@
|
||||||
|
# For most projects, this workflow file will not need changing; you simply need
|
||||||
|
# to commit it to your repository.
|
||||||
|
#
|
||||||
|
# You may wish to alter this file to override the set of languages analyzed,
|
||||||
|
# or to provide custom queries or build logic.
|
||||||
|
#
|
||||||
|
# ******** NOTE ********
|
||||||
|
# We have attempted to detect the languages in your repository. Please check
|
||||||
|
# the `language` matrix defined below to confirm you have the correct set of
|
||||||
|
# supported CodeQL languages.
|
||||||
|
#
|
||||||
|
name: "CodeQL"
|
||||||
|
|
||||||
|
on:
|
||||||
|
push:
|
||||||
|
branches: [ "main" ]
|
||||||
|
pull_request:
|
||||||
|
# The branches below must be a subset of the branches above
|
||||||
|
branches: [ "main" ]
|
||||||
|
schedule:
|
||||||
|
- cron: '21 21 * * 0'
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
analyze:
|
||||||
|
name: Analyze
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
permissions:
|
||||||
|
actions: read
|
||||||
|
contents: read
|
||||||
|
security-events: write
|
||||||
|
|
||||||
|
steps:
|
||||||
|
- name: Checkout repository
|
||||||
|
uses: actions/checkout@v4
|
||||||
|
|
||||||
|
- name: install go
|
||||||
|
uses: actions/setup-go@v5
|
||||||
|
with:
|
||||||
|
go-version-file: go.mod
|
||||||
|
cache: true
|
||||||
|
|
||||||
|
- name: Initialize CodeQL
|
||||||
|
uses: github/codeql-action/init@v3
|
||||||
|
with:
|
||||||
|
languages: go
|
||||||
|
|
||||||
|
- run: |
|
||||||
|
echo "Build"
|
||||||
|
make build
|
||||||
|
|
||||||
|
- name: Perform CodeQL Analysis
|
||||||
|
uses: github/codeql-action/analyze@v3
|
|
@ -8,22 +8,24 @@ on:
|
||||||
- '*'
|
- '*'
|
||||||
pull_request:
|
pull_request:
|
||||||
|
|
||||||
|
concurrency: ${{ github.ref_name }}
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
tests:
|
tests:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
|
strategy:
|
||||||
|
matrix:
|
||||||
|
make: ["lint", "unit-test", "integration-test"]
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v2.4.0
|
- uses: actions/checkout@v4
|
||||||
|
|
||||||
- name: install go
|
- name: install go
|
||||||
uses: actions/setup-go@v2
|
uses: actions/setup-go@v5
|
||||||
with:
|
with:
|
||||||
go-version: "^1.18"
|
go-version-file: go.mod
|
||||||
|
|
||||||
- name: Lint
|
- name: ${{ matrix.make }}
|
||||||
run: make lint
|
run: make ${{ matrix.make }}
|
||||||
|
|
||||||
- name: Tests
|
|
||||||
run: make test
|
|
||||||
|
|
||||||
deploy:
|
deploy:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
|
@ -33,9 +35,14 @@ jobs:
|
||||||
matrix:
|
matrix:
|
||||||
goosarch: [linux-amd64]
|
goosarch: [linux-amd64]
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v2.4.0
|
- uses: actions/checkout@v4
|
||||||
with:
|
with:
|
||||||
fetch-depth: 0
|
fetch-depth: 0
|
||||||
|
- name: install go
|
||||||
|
uses: actions/setup-go@v5
|
||||||
|
with:
|
||||||
|
go-version-file: go.mod
|
||||||
|
cache: true
|
||||||
|
|
||||||
- name: Set env
|
- name: Set env
|
||||||
run: echo "RELEASE_VERSION=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV
|
run: echo "RELEASE_VERSION=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV
|
||||||
|
@ -56,7 +63,7 @@ jobs:
|
||||||
sha256sum whatismyip-$RELEASE_VERSION-${{matrix.goosarch}}.tar.gz > whatismyip-$RELEASE_VERSION-${{matrix.goosarch}}.tar.gz.sha256
|
sha256sum whatismyip-$RELEASE_VERSION-${{matrix.goosarch}}.tar.gz > whatismyip-$RELEASE_VERSION-${{matrix.goosarch}}.tar.gz.sha256
|
||||||
|
|
||||||
- name: Release
|
- name: Release
|
||||||
uses: softprops/action-gh-release@v0.1.14
|
uses: softprops/action-gh-release@v2
|
||||||
with:
|
with:
|
||||||
body_path: changelog.txt
|
body_path: changelog.txt
|
||||||
files: |
|
files: |
|
||||||
|
|
|
@ -0,0 +1 @@
|
||||||
|
whatismyip
|
|
@ -0,0 +1,49 @@
|
||||||
|
---
|
||||||
|
run:
|
||||||
|
timeout: 10m
|
||||||
|
issues:
|
||||||
|
max-same-issues: 0
|
||||||
|
linters:
|
||||||
|
disable-all: true
|
||||||
|
enable:
|
||||||
|
- goimports
|
||||||
|
- ineffassign
|
||||||
|
- nakedret
|
||||||
|
- revive
|
||||||
|
- staticcheck
|
||||||
|
- stylecheck
|
||||||
|
- unconvert
|
||||||
|
- unparam
|
||||||
|
- unused
|
||||||
|
linters-settings:
|
||||||
|
staticcheck:
|
||||||
|
checks:
|
||||||
|
- all
|
||||||
|
revive:
|
||||||
|
ignore-generated-header: true
|
||||||
|
severity: warning
|
||||||
|
confidence: 0.8
|
||||||
|
rules:
|
||||||
|
- name: blank-imports
|
||||||
|
- name: context-as-argument
|
||||||
|
- name: context-keys-type
|
||||||
|
- name: dot-imports
|
||||||
|
- name: error-return
|
||||||
|
- name: error-strings
|
||||||
|
- name: error-naming
|
||||||
|
- name: exported
|
||||||
|
- name: increment-decrement
|
||||||
|
- name: var-naming
|
||||||
|
- name: var-declaration
|
||||||
|
- name: package-comments
|
||||||
|
- name: range
|
||||||
|
- name: receiver-naming
|
||||||
|
- name: time-naming
|
||||||
|
- name: unexported-return
|
||||||
|
- name: indent-error-flow
|
||||||
|
- name: errorf
|
||||||
|
- name: empty-block
|
||||||
|
- name: superfluous-else
|
||||||
|
- name: unused-parameter
|
||||||
|
- name: unreachable-code
|
||||||
|
- name: redefines-builtin-id
|
29
Dockerfile
29
Dockerfile
|
@ -1,21 +1,28 @@
|
||||||
FROM golang:1.18-alpine as builder
|
FROM golang:1.22-alpine as builder
|
||||||
|
|
||||||
ARG ARG_VERSION
|
ARG ARG_VERSION
|
||||||
ENV VERSION $ARG_VERSION
|
ENV VERSION $ARG_VERSION
|
||||||
|
|
||||||
WORKDIR /app
|
WORKDIR /app
|
||||||
|
COPY go.mod .
|
||||||
|
COPY go.sum .
|
||||||
|
RUN --mount=type=cache,target=/go/pkg/mod/ go mod download -x
|
||||||
COPY . .
|
COPY . .
|
||||||
|
|
||||||
RUN apk add make git && make build VERSION=$VERSION
|
FROM builder AS build-dev-app
|
||||||
|
# hadolint ignore=DL3018
|
||||||
|
RUN --mount=type=cache,target=/go/pkg/mod/ apk --no-cache add make && make build
|
||||||
|
|
||||||
# Build final image
|
FROM builder AS build-prod-app
|
||||||
FROM scratch
|
# hadolint ignore=DL3018
|
||||||
|
RUN --mount=type=cache,target=/go/pkg/mod/ apk --no-cache add make upx \
|
||||||
WORKDIR /app
|
&& make build \
|
||||||
|
&& upx --best --lzma whatismyip
|
||||||
COPY --from=builder /app/whatismyip /usr/bin/
|
|
||||||
|
|
||||||
EXPOSE 8080
|
|
||||||
|
|
||||||
|
FROM scratch AS dev
|
||||||
|
COPY --from=build-dev-app /app/whatismyip /usr/bin/
|
||||||
|
ENTRYPOINT ["whatismyip"]
|
||||||
|
|
||||||
|
FROM scratch AS prod
|
||||||
|
COPY --from=build-prod-app /app/whatismyip /usr/bin/
|
||||||
ENTRYPOINT ["whatismyip"]
|
ENTRYPOINT ["whatismyip"]
|
||||||
|
|
2
LICENSE
2
LICENSE
|
@ -176,7 +176,7 @@
|
||||||
|
|
||||||
END OF TERMS AND CONDITIONS
|
END OF TERMS AND CONDITIONS
|
||||||
|
|
||||||
Copyright 2021 Daniel Carrillo
|
Copyright 2024 Daniel Carrillo
|
||||||
|
|
||||||
Licensed under the Apache License, Version 2.0 (the "License");
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
you may not use this file except in compliance with the License.
|
you may not use this file except in compliance with the License.
|
||||||
|
|
35
Makefile
35
Makefile
|
@ -5,44 +5,40 @@ DOCKER_URL ?= dcarrillo/whatismyip
|
||||||
.PHONY: test
|
.PHONY: test
|
||||||
test: unit-test integration-test
|
test: unit-test integration-test
|
||||||
|
|
||||||
.PHONY: unit-test
|
|
||||||
unit-test:
|
unit-test:
|
||||||
go test -race -short -cover ./...
|
go test -count=1 -race -short -cover ./...
|
||||||
|
|
||||||
.PHONY: integration-test
|
|
||||||
integration-test:
|
integration-test:
|
||||||
go test ./integration-tests -v
|
go test -count=1 -v ./integration-tests
|
||||||
|
|
||||||
.PHONY: install-tools
|
|
||||||
install-tools:
|
install-tools:
|
||||||
@command golangci-lint > /dev/null 2>&1; if [ $$? -ne 0 ]; then \
|
@command golangci-lint > /dev/null 2>&1; if [ $$? -ne 0 ]; then \
|
||||||
curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(GOPATH)/bin v1.45.0; \
|
curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(GOPATH)/bin; \
|
||||||
|
fi
|
||||||
|
|
||||||
|
@command $(GOPATH)/revive > /dev/null 2>&1; if [ $$? -ne 0 ]; then \
|
||||||
|
go get -u github.com/mgechev/revive; \
|
||||||
fi
|
fi
|
||||||
|
|
||||||
@command $(GOPATH)/shadow > /dev/null 2>&1; if [ $$? -ne 0 ]; then \
|
@command $(GOPATH)/shadow > /dev/null 2>&1; if [ $$? -ne 0 ]; then \
|
||||||
go install golang.org/x/tools/go/analysis/passes/shadow/cmd/shadow@v0.1.10; \
|
go install golang.org/x/tools/go/analysis/passes/shadow/cmd/shadow@latest; \
|
||||||
fi
|
fi
|
||||||
|
|
||||||
@command $(GOPATH)/golines > /dev/null 2>&1; if [ $$? -ne 0 ]; then \
|
|
||||||
go install github.com/segmentio/golines@latest; \
|
|
||||||
fi
|
|
||||||
.PHONY: lint
|
|
||||||
lint: install-tools
|
lint: install-tools
|
||||||
gofmt -l . && test -z $$(gofmt -l .)
|
gofmt -l . && test -z $$(gofmt -l .)
|
||||||
golines -l . && test -z $$(golines -l .)
|
|
||||||
golangci-lint run
|
golangci-lint run
|
||||||
shadow ./...
|
shadow ./...
|
||||||
|
|
||||||
.PHONY: build
|
|
||||||
build:
|
build:
|
||||||
CGO_ENABLED=0 go build -ldflags="-s -w -X 'github.com/dcarrillo/whatismyip/internal/core.Version=${VERSION}'" -o whatismyip ./cmd
|
CGO_ENABLED=0 go build -ldflags="-s -w -X 'github.com/dcarrillo/whatismyip/internal/core.Version=${VERSION}'" -o whatismyip ./cmd
|
||||||
|
|
||||||
.PHONY: docker-build
|
docker-build-dev:
|
||||||
docker-build:
|
docker build --target=dev --build-arg=ARG_VERSION="${VERSION}" --tag ${DOCKER_URL}:${VERSION} .
|
||||||
docker build --build-arg=ARG_VERSION="${VERSION}" --tag ${DOCKER_URL}:${VERSION} .
|
|
||||||
|
|
||||||
.PHONY: docker-push
|
docker-build-prod:
|
||||||
docker-push: docker-build
|
docker build --target=prod --build-arg=ARG_VERSION="${VERSION}" --tag ${DOCKER_URL}:${VERSION} .
|
||||||
|
|
||||||
|
docker-push: docker-build-prod
|
||||||
ifneq (,$(findstring devel-,$(VERSION)))
|
ifneq (,$(findstring devel-,$(VERSION)))
|
||||||
@echo "VERSION is set to ${VERSION}, I can't push devel builds"
|
@echo "VERSION is set to ${VERSION}, I can't push devel builds"
|
||||||
exit 1
|
exit 1
|
||||||
|
@ -52,8 +48,7 @@ else
|
||||||
docker push ${DOCKER_URL}:latest
|
docker push ${DOCKER_URL}:latest
|
||||||
endif
|
endif
|
||||||
|
|
||||||
.PHONY: docker-run
|
docker-run: docker-build-dev
|
||||||
docker-run: docker-build
|
|
||||||
docker run --tty --interactive --rm \
|
docker run --tty --interactive --rm \
|
||||||
-v ${PWD}/test/GeoIP2-City-Test.mmdb:/tmp/GeoIP2-City-Test.mmdb:ro \
|
-v ${PWD}/test/GeoIP2-City-Test.mmdb:/tmp/GeoIP2-City-Test.mmdb:ro \
|
||||||
-v ${PWD}/test/GeoLite2-ASN-Test.mmdb:/tmp/GeoLite2-ASN-Test.mmdb:ro -p 8080:8080 \
|
-v ${PWD}/test/GeoLite2-ASN-Test.mmdb:/tmp/GeoLite2-ASN-Test.mmdb:ro -p 8080:8080 \
|
||||||
|
|
96
README.md
96
README.md
|
@ -1,6 +1,7 @@
|
||||||
# What is my IP address
|
# What is my IP address
|
||||||
|
|
||||||
[![CI](https://github.com/dcarrillo/whatismyip/workflows/CI/badge.svg)](https://github.com/dcarrillo/whatismyip/actions)
|
[![CI](https://github.com/dcarrillo/whatismyip/workflows/CI/badge.svg)](https://github.com/dcarrillo/whatismyip/actions)
|
||||||
|
[![CodeQL](https://github.com/dcarrillo/whatismyip/actions/workflows/codeql-analysis.yml/badge.svg)](https://github.com/dcarrillo/whatismyip/actions/workflows/codeql-analysis.yml)
|
||||||
[![Go Report Card](https://goreportcard.com/badge/github.com/dcarrillo/whatismyip)](https://goreportcard.com/report/github.com/dcarrillo/whatismyip)
|
[![Go Report Card](https://goreportcard.com/badge/github.com/dcarrillo/whatismyip)](https://goreportcard.com/report/github.com/dcarrillo/whatismyip)
|
||||||
[![GitHub release](https://img.shields.io/github/release/dcarrillo/whatismyip.svg)](https://github.com/dcarrillo/whatismyip/releases/)
|
[![GitHub release](https://img.shields.io/github/release/dcarrillo/whatismyip.svg)](https://github.com/dcarrillo/whatismyip/releases/)
|
||||||
[![License Apache 2.0](https://img.shields.io/badge/license-Apache%202.0-blue.svg)](./LICENSE)
|
[![License Apache 2.0](https://img.shields.io/badge/license-Apache%202.0-blue.svg)](./LICENSE)
|
||||||
|
@ -8,20 +9,26 @@
|
||||||
- [What is my IP address](#what-is-my-ip-address)
|
- [What is my IP address](#what-is-my-ip-address)
|
||||||
- [Features](#features)
|
- [Features](#features)
|
||||||
- [Endpoints](#endpoints)
|
- [Endpoints](#endpoints)
|
||||||
|
- [DNS discovery](#dns-discovery)
|
||||||
- [Build](#build)
|
- [Build](#build)
|
||||||
- [Usage](#usage)
|
- [Usage](#usage)
|
||||||
- [Examples](#examples)
|
- [Examples](#examples)
|
||||||
- [Run a default TCP server](#run-a-default-tcp-server)
|
- [Run a default TCP server](#run-a-default-tcp-server)
|
||||||
- [Run a TLS (HTTP/2) server only](#run-a-tls-http2-server-only)
|
- [Run a TLS (HTTP/2) and enable What is my DNS](#run-a-tls-http2-and-enable-what-is-my-dns)
|
||||||
- [Run a default TCP server with a custom template and trust a custom header set by an upstream proxy](#run-a-default-tcp-server-with-a-custom-template-and-trust-a-custom-header-set-by-an-upstream-proxy)
|
- [Run an HTTP/3 server](#run-an-http3-server)
|
||||||
|
- [Run a default TCP server with a custom template and trust a pair of custom headers set by an upstream proxy](#run-a-default-tcp-server-with-a-custom-template-and-trust-a-pair-of-custom-headers-set-by-an-upstream-proxy)
|
||||||
- [Download](#download)
|
- [Download](#download)
|
||||||
- [Docker](#docker)
|
- [Docker](#docker)
|
||||||
- [Run a container locally using test databases](#run-a-container-locally-using-test-databases)
|
- [Run a container locally using test databases](#run-a-container-locally-using-test-databases)
|
||||||
- [From Docker Hub](#from-docker-hub)
|
- [From Docker Hub](#from-docker-hub)
|
||||||
|
|
||||||
Just another "what is my IP address" service, including geolocation and headers information, written in go with high performance in mind, it uses [gin](https://github.com/gin-gonic/gin) which uses [httprouter](https://github.com/julienschmidt/httprouter) a lightweight high performance HTTP multiplexer.
|
> [!NOTE]
|
||||||
|
> Since version 2.3.0, the application includes an optional client [DNS discovery](#dns-discovery)
|
||||||
|
|
||||||
Take a look at [ifconfig.es](https://ifconfig.es) a live site using `whatismyip`
|
Just another "what is my IP address" service, including geolocation, TCP open port checking, and headers information. Written in go with high performance in mind,
|
||||||
|
it uses [gin](https://github.com/gin-gonic/gin) which uses [httprouter](https://github.com/julienschmidt/httprouter) a lightweight high performance HTTP multiplexer.
|
||||||
|
|
||||||
|
Take a look at [ifconfig.es](https://ifconfig.es) a live site using `whatismyip` and the `DNS discovery` enabled.
|
||||||
|
|
||||||
Get your public IP easily from the command line:
|
Get your public IP easily from the command line:
|
||||||
|
|
||||||
|
@ -33,20 +40,31 @@ curl -6 ifconfig.es
|
||||||
::1
|
::1
|
||||||
```
|
```
|
||||||
|
|
||||||
|
Get the IP of your DNS provider:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
curl -L dns.ifconfig.es
|
||||||
|
2a04:e4c0:47::67 (Spain / OPENDNS)
|
||||||
|
```
|
||||||
|
|
||||||
## Features
|
## Features
|
||||||
|
|
||||||
- TLS and HTTP/2.
|
- TLS and HTTP/2.
|
||||||
- Can run behind a proxy by trusting a custom header (usually `X-Real-IP`) to figure out the source IP address.
|
- Experimental HTTP/3 support. HTTP/3 requires a TLS server running (`-tls-bind`), as HTTP/3 starts as a TLS connection that then gets upgraded to UDP. The UDP port is the same as the one used for the TLS server.
|
||||||
|
- Beta DNS discovery: A best-effort approach to discovering the DNS server that is resolving the client's requests.
|
||||||
|
- Can run behind a proxy by trusting a custom header (usually `X-Real-IP`) to figure out the source IP address. It also supports a custom header to resolve the client port, if the proxy can only add a header for the IP (for example a fixed header from CDNs) the client port is shown as unknown.
|
||||||
- IPv4 and IPv6.
|
- IPv4 and IPv6.
|
||||||
- Geolocation info including ASN. This feature is possible thanks to [maxmind](https://dev.maxmind.com/geoip/geolite2-free-geolocation-data?lang=en) GeoLite2 databases. In order to use these databases, a license key is needed. Please visit Maxmind site for further instructions and get a free license.
|
- Geolocation info including ASN. This feature is possible thanks to [maxmind](https://dev.maxmind.com/geoip/geolite2-free-geolocation-data?lang=en) GeoLite2 databases. In order to use these databases, a license key is needed. Please visit Maxmind site for further instructions and get a free license.
|
||||||
|
- Checking TCP open ports.
|
||||||
- High performance.
|
- High performance.
|
||||||
- Self-contained server what can reload GeoLite2 databases and/or SSL certificates without stop/start. The `hup` signal is honored.
|
- Self-contained server that can reload GeoLite2 databases and/or SSL certificates without stop/start. The `hup` signal is honored.
|
||||||
- HTML templates for the landing page.
|
- HTML templates for the landing page.
|
||||||
- Text plain and JSON output.
|
- Text plain and JSON output.
|
||||||
|
|
||||||
## Endpoints
|
## Endpoints
|
||||||
|
|
||||||
- https://ifconfig.es/
|
- https://ifconfig.es/
|
||||||
|
- https://ifconfig.es/client-port
|
||||||
- https://ifconfig.es/json (this is the same as `curl -H "Accept: application/json" https://ifconfig.es/`)
|
- https://ifconfig.es/json (this is the same as `curl -H "Accept: application/json" https://ifconfig.es/`)
|
||||||
- https://ifconfig.es/geo
|
- https://ifconfig.es/geo
|
||||||
- https://ifconfig.es/geo/city
|
- https://ifconfig.es/geo/city
|
||||||
|
@ -62,23 +80,61 @@ curl -6 ifconfig.es
|
||||||
- https://ifconfig.es/all
|
- https://ifconfig.es/all
|
||||||
- https://ifconfig.es/headers
|
- https://ifconfig.es/headers
|
||||||
- https://ifconfig.es/<header_name>
|
- https://ifconfig.es/<header_name>
|
||||||
|
- https://ifconfig.es/scan/tcp/<port_number>
|
||||||
|
- https://dns.ifconfig.es
|
||||||
|
|
||||||
|
## DNS discovery
|
||||||
|
|
||||||
|
The DNS discovery works by forcing the client to make a request to `<uuid>.dns.ifconfig.es` this DNS request is handled by a microdns server
|
||||||
|
included in the `whatismyip` binary. In order to run the discovery server, a configuration file in the following form has to be created:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
---
|
||||||
|
domain: dns.example.com
|
||||||
|
redirect_port: ":8000"
|
||||||
|
resource_records:
|
||||||
|
- "1800 IN SOA xns.example.com. hostmaster.example.com. 1 10000 2400 604800 1800"
|
||||||
|
- "3600 IN NS xns.example.com."
|
||||||
|
ipv4:
|
||||||
|
- "127.0.0.2"
|
||||||
|
ipv6:
|
||||||
|
- "aaa:aaa:aaa:aaaa::1"
|
||||||
|
```
|
||||||
|
|
||||||
|
The DNS authority for example.com has delegated the subdomain zone `dns.example.com` to the server running the `whatismyip` service.
|
||||||
|
|
||||||
|
The client can request the URL `dns.example.com` by following the redirection `curl -L dns.example.com`.
|
||||||
|
|
||||||
|
To avoid the redirection, you can provide a valid URL, for example, for the real [ifconfig.es](https://ifconfig.es):
|
||||||
|
|
||||||
|
```bash
|
||||||
|
curl $(uuidgen).dns.ifconfig.es
|
||||||
|
|
||||||
|
curl $(cat /proc/sys/kernel/random/uuid).dns.ifconfig.es
|
||||||
|
```
|
||||||
|
|
||||||
## Build
|
## Build
|
||||||
|
|
||||||
Golang >= 1.17 is required. Previous versions may work.
|
Golang >= 1.22 is required.
|
||||||
|
|
||||||
`make build`
|
`make build`
|
||||||
|
|
||||||
## Usage
|
## Usage
|
||||||
|
|
||||||
```text
|
```text
|
||||||
Usage of ./whatismyip:
|
Usage of whatismyip:
|
||||||
-bind string
|
-bind string
|
||||||
Listening address (see https://pkg.go.dev/net?#Listen) (default ":8080")
|
Listening address (see https://pkg.go.dev/net?#Listen) (default ":8080")
|
||||||
|
-enable-http3
|
||||||
|
Enable HTTP/3 protocol. HTTP/3 requires --tls-bind set, as HTTP/3 starts as a TLS connection that then gets upgraded to UDP. The UDP port is the same as the one used for the TLS server.
|
||||||
|
-enable-secure-headers
|
||||||
|
Add sane security-related headers to every response
|
||||||
-geoip2-asn string
|
-geoip2-asn string
|
||||||
Path to GeoIP2 ASN database
|
Path to GeoIP2 ASN database
|
||||||
-geoip2-city string
|
-geoip2-city string
|
||||||
Path to GeoIP2 city database
|
Path to GeoIP2 city database
|
||||||
|
-resolver string
|
||||||
|
Path to the resolver configuration. It actually enables the resolver for DNS client discovery.
|
||||||
-template string
|
-template string
|
||||||
Path to template file
|
Path to template file
|
||||||
-tls-bind string
|
-tls-bind string
|
||||||
|
@ -88,7 +144,9 @@ Usage of ./whatismyip:
|
||||||
-tls-key string
|
-tls-key string
|
||||||
When using TLS, path to private key file
|
When using TLS, path to private key file
|
||||||
-trusted-header string
|
-trusted-header string
|
||||||
Trusted request header for remote IP (e.g. X-Real-IP)
|
Trusted request header for remote IP (e.g. X-Real-IP). When using this feature if -trusted-port-header is not set the client port is shown as 'unknown'
|
||||||
|
-trusted-port-header string
|
||||||
|
Trusted request header for remote client port (e.g. X-Real-Port). When this parameter is set -trusted-header becomes mandatory
|
||||||
-version
|
-version
|
||||||
Output version information and exit
|
Output version information and exit
|
||||||
```
|
```
|
||||||
|
@ -101,27 +159,35 @@ Usage of ./whatismyip:
|
||||||
./whatismyip -geoip2-city ./test/GeoIP2-City-Test.mmdb -geoip2-asn ./test/GeoLite2-ASN-Test.mmdb
|
./whatismyip -geoip2-city ./test/GeoIP2-City-Test.mmdb -geoip2-asn ./test/GeoLite2-ASN-Test.mmdb
|
||||||
```
|
```
|
||||||
|
|
||||||
### Run a TLS (HTTP/2) server only
|
### Run a TLS (HTTP/2) and enable What is my DNS
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
./whatismyip -geoip2-city ./test/GeoIP2-City-Test.mmdb -geoip2-asn ./test/GeoLite2-ASN-Test.mmdb \
|
./whatismyip -geoip2-city ./test/GeoIP2-City-Test.mmdb -geoip2-asn ./test/GeoLite2-ASN-Test.mmdb \
|
||||||
-bind "" -tls-bind :8081 -tls-crt ./test/server.pem -tls-key ./test/server.key
|
-bind "" -tls-bind :8081 -tls-crt ./test/server.pem -tls-key ./test/server.key \
|
||||||
|
-resolver ./test/resolver.yml
|
||||||
```
|
```
|
||||||
|
|
||||||
### Run a default TCP server with a custom template and trust a custom header set by an upstream proxy
|
### Run an HTTP/3 server
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
./whatismyip -geoip2-city ./test/GeoIP2-City-Test.mmdb -geoip2-asn ./test/GeoLite2-ASN-Test.mmdb \
|
./whatismyip -geoip2-city ./test/GeoIP2-City-Test.mmdb -geoip2-asn ./test/GeoLite2-ASN-Test.mmdb \
|
||||||
-trusted-header X-Real-IP -template mytemplate.tmpl
|
-bind "" -tls-bind :8081 -tls-crt ./test/server.pem -tls-key ./test/server.key -enable-http3
|
||||||
|
```
|
||||||
|
|
||||||
|
### Run a default TCP server with a custom template and trust a pair of custom headers set by an upstream proxy
|
||||||
|
|
||||||
|
```bash
|
||||||
|
./whatismyip -geoip2-city ./test/GeoIP2-City-Test.mmdb -geoip2-asn ./test/GeoLite2-ASN-Test.mmdb \
|
||||||
|
-trusted-header X-Real-IP -trusted-port-header X-Real-Port -template mytemplate.tmpl
|
||||||
```
|
```
|
||||||
|
|
||||||
## Download
|
## Download
|
||||||
|
|
||||||
Download latest version from https://github.com/dcarrillo/whatismyip/releases
|
Download the latest version from [github](https://github.com/dcarrillo/whatismyip/releases)
|
||||||
|
|
||||||
## Docker
|
## Docker
|
||||||
|
|
||||||
An ultra-light (~9MB) image is available.
|
An ultra-light (~4MB) image is available on [docker hub](https://hub.docker.com/r/dcarrillo/whatismyip). Since version `2.1.2`, the binary is compressed using [upx](https://github.com/upx/upx).
|
||||||
|
|
||||||
### Run a container locally using test databases
|
### Run a container locally using test databases
|
||||||
|
|
||||||
|
|
|
@ -2,28 +2,22 @@ package main
|
||||||
|
|
||||||
import (
|
import (
|
||||||
"context"
|
"context"
|
||||||
"errors"
|
|
||||||
"flag"
|
"flag"
|
||||||
"fmt"
|
"fmt"
|
||||||
"log"
|
|
||||||
"net/http"
|
"net/http"
|
||||||
"os"
|
"os"
|
||||||
"os/signal"
|
"slices"
|
||||||
"syscall"
|
"time"
|
||||||
|
|
||||||
"github.com/dcarrillo/whatismyip/internal/httputils"
|
"github.com/dcarrillo/whatismyip/internal/httputils"
|
||||||
"github.com/dcarrillo/whatismyip/internal/setting"
|
"github.com/dcarrillo/whatismyip/internal/setting"
|
||||||
"github.com/dcarrillo/whatismyip/models"
|
"github.com/dcarrillo/whatismyip/resolver"
|
||||||
|
"github.com/dcarrillo/whatismyip/server"
|
||||||
|
"github.com/gin-contrib/secure"
|
||||||
|
"github.com/patrickmn/go-cache"
|
||||||
|
|
||||||
"github.com/dcarrillo/whatismyip/router"
|
"github.com/dcarrillo/whatismyip/router"
|
||||||
|
|
||||||
"github.com/gin-gonic/gin"
|
"github.com/gin-gonic/gin"
|
||||||
"github.com/unrolled/secure"
|
|
||||||
)
|
|
||||||
|
|
||||||
var (
|
|
||||||
tcpServer *http.Server
|
|
||||||
tlsServer *http.Server
|
|
||||||
engine *gin.Engine
|
|
||||||
)
|
)
|
||||||
|
|
||||||
func main() {
|
func main() {
|
||||||
|
@ -32,135 +26,66 @@ func main() {
|
||||||
fmt.Print(o)
|
fmt.Print(o)
|
||||||
os.Exit(0)
|
os.Exit(0)
|
||||||
} else if err != nil {
|
} else if err != nil {
|
||||||
fmt.Print(err)
|
fmt.Println(err)
|
||||||
os.Exit(1)
|
os.Exit(1)
|
||||||
}
|
}
|
||||||
|
|
||||||
models.Setup(setting.App.GeodbPath.City, setting.App.GeodbPath.ASN)
|
servers := []server.Server{}
|
||||||
setupEngine()
|
engine := setupEngine()
|
||||||
|
|
||||||
|
if setting.App.Resolver.Domain != "" {
|
||||||
|
store := cache.New(1*time.Minute, 10*time.Minute)
|
||||||
|
dnsEngine := resolver.Setup(store)
|
||||||
|
nameServer := server.NewDNSServer(context.Background(), dnsEngine.Handler())
|
||||||
|
servers = append(servers, nameServer)
|
||||||
|
engine.Use(router.GetDNSDiscoveryHandler(store, setting.App.Resolver.Domain, setting.App.Resolver.RedirectPort))
|
||||||
|
}
|
||||||
|
|
||||||
router.SetupTemplate(engine)
|
router.SetupTemplate(engine)
|
||||||
router.Setup(engine)
|
router.Setup(engine)
|
||||||
|
servers = slices.Concat(servers, setupHTTPServers(context.Background(), engine.Handler()))
|
||||||
|
|
||||||
if setting.App.BindAddress != "" {
|
whatismyip := server.Setup(servers)
|
||||||
runTCPServer()
|
whatismyip.Run()
|
||||||
}
|
|
||||||
|
|
||||||
if setting.App.TLSAddress != "" {
|
|
||||||
runTLSServer()
|
|
||||||
}
|
|
||||||
|
|
||||||
runHandler()
|
|
||||||
}
|
}
|
||||||
|
|
||||||
func runHandler() {
|
func setupEngine() *gin.Engine {
|
||||||
signalChan := make(chan os.Signal, 3)
|
|
||||||
signal.Notify(signalChan, syscall.SIGHUP, syscall.SIGINT, syscall.SIGTERM)
|
|
||||||
ctx := context.Background()
|
|
||||||
var s os.Signal
|
|
||||||
|
|
||||||
for {
|
|
||||||
s = <-signalChan
|
|
||||||
|
|
||||||
if s == syscall.SIGHUP {
|
|
||||||
models.CloseDBs()
|
|
||||||
models.Setup(setting.App.GeodbPath.City, setting.App.GeodbPath.ASN)
|
|
||||||
router.SetupTemplate(engine)
|
|
||||||
|
|
||||||
if setting.App.BindAddress != "" {
|
|
||||||
if err := tcpServer.Shutdown(ctx); err != nil {
|
|
||||||
log.Printf("TCP server forced to shutdown: %s", err)
|
|
||||||
}
|
|
||||||
runTCPServer()
|
|
||||||
}
|
|
||||||
if setting.App.TLSAddress != "" {
|
|
||||||
if err := tlsServer.Shutdown(ctx); err != nil {
|
|
||||||
log.Printf("TLS server forced to shutdown: %s", err)
|
|
||||||
}
|
|
||||||
runTLSServer()
|
|
||||||
}
|
|
||||||
} else {
|
|
||||||
log.Printf("Shutting down...")
|
|
||||||
if setting.App.BindAddress != "" {
|
|
||||||
if err := tcpServer.Shutdown(ctx); err != nil {
|
|
||||||
log.Printf("TCP server forced to shutdown: %s", err)
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if setting.App.TLSAddress != "" {
|
|
||||||
if err := tlsServer.Shutdown(ctx); err != nil {
|
|
||||||
log.Printf("TLS server forced to shutdown: %s", err)
|
|
||||||
}
|
|
||||||
}
|
|
||||||
models.CloseDBs()
|
|
||||||
break
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func runTCPServer() {
|
|
||||||
tcpServer = &http.Server{
|
|
||||||
Addr: setting.App.BindAddress,
|
|
||||||
Handler: engine,
|
|
||||||
ReadTimeout: setting.App.Server.ReadTimeout,
|
|
||||||
WriteTimeout: setting.App.Server.WriteTimeout,
|
|
||||||
}
|
|
||||||
|
|
||||||
go func() {
|
|
||||||
log.Printf("Starting TCP server listening on %s", setting.App.BindAddress)
|
|
||||||
if err := tcpServer.ListenAndServe(); err != nil && !errors.Is(err, http.ErrServerClosed) {
|
|
||||||
log.Fatal(err)
|
|
||||||
}
|
|
||||||
log.Printf("Stopping TCP server...")
|
|
||||||
}()
|
|
||||||
}
|
|
||||||
|
|
||||||
func runTLSServer() {
|
|
||||||
tlsServer = &http.Server{
|
|
||||||
Addr: setting.App.TLSAddress,
|
|
||||||
Handler: engine,
|
|
||||||
ReadTimeout: setting.App.Server.ReadTimeout,
|
|
||||||
WriteTimeout: setting.App.Server.WriteTimeout,
|
|
||||||
}
|
|
||||||
|
|
||||||
go func() {
|
|
||||||
log.Printf("Starting TLS server listening on %s", setting.App.TLSAddress)
|
|
||||||
if err := tlsServer.ListenAndServeTLS(setting.App.TLSCrtPath, setting.App.TLSKeyPath); err != nil &&
|
|
||||||
!errors.Is(err, http.ErrServerClosed) {
|
|
||||||
log.Fatal(err)
|
|
||||||
}
|
|
||||||
log.Printf("Stopping TLS server...")
|
|
||||||
}()
|
|
||||||
}
|
|
||||||
|
|
||||||
func setupEngine() {
|
|
||||||
gin.DisableConsoleColor()
|
gin.DisableConsoleColor()
|
||||||
if os.Getenv(gin.EnvGinMode) == "" {
|
if os.Getenv(gin.EnvGinMode) == "" {
|
||||||
gin.SetMode(gin.ReleaseMode)
|
gin.SetMode(gin.ReleaseMode)
|
||||||
}
|
}
|
||||||
engine = gin.New()
|
engine := gin.New()
|
||||||
engine.Use(gin.LoggerWithFormatter(httputils.GetLogFormatter))
|
engine.Use(gin.LoggerWithFormatter(httputils.GetLogFormatter))
|
||||||
engine.Use(gin.Recovery())
|
engine.Use(gin.Recovery())
|
||||||
if setting.App.EnableSecureHeaders {
|
if setting.App.EnableSecureHeaders {
|
||||||
engine.Use(addSecureHeaders())
|
engine.Use(secure.New(secure.Config{
|
||||||
}
|
|
||||||
_ = engine.SetTrustedProxies(nil)
|
|
||||||
engine.TrustedPlatform = setting.App.TrustedHeader
|
|
||||||
}
|
|
||||||
|
|
||||||
func addSecureHeaders() gin.HandlerFunc {
|
|
||||||
return func(c *gin.Context) {
|
|
||||||
err := secure.New(secure.Options{
|
|
||||||
BrowserXssFilter: true,
|
BrowserXssFilter: true,
|
||||||
ContentTypeNosniff: true,
|
ContentTypeNosniff: true,
|
||||||
FrameDeny: true,
|
FrameDeny: true,
|
||||||
}).Process(c.Writer, c.Request)
|
}))
|
||||||
if err != nil {
|
}
|
||||||
c.Abort()
|
_ = engine.SetTrustedProxies(nil)
|
||||||
return
|
engine.TrustedPlatform = setting.App.TrustedHeader
|
||||||
}
|
|
||||||
|
|
||||||
// Avoid header rewrite if response is a redirection.
|
return engine
|
||||||
if status := c.Writer.Status(); status > 300 && status < 399 {
|
}
|
||||||
c.Abort()
|
|
||||||
|
func setupHTTPServers(ctx context.Context, handler http.Handler) []server.Server {
|
||||||
|
var servers []server.Server
|
||||||
|
|
||||||
|
if setting.App.BindAddress != "" {
|
||||||
|
tcpServer := server.NewTCPServer(ctx, &handler)
|
||||||
|
servers = append(servers, tcpServer)
|
||||||
|
}
|
||||||
|
|
||||||
|
if setting.App.TLSAddress != "" {
|
||||||
|
tlsServer := server.NewTLSServer(ctx, &handler)
|
||||||
|
servers = append(servers, tlsServer)
|
||||||
|
if setting.App.EnableHTTP3 {
|
||||||
|
quicServer := server.NewQuicServer(ctx, tlsServer)
|
||||||
|
servers = append(servers, quicServer)
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
return servers
|
||||||
}
|
}
|
||||||
|
|
122
go.mod
122
go.mod
|
@ -1,60 +1,100 @@
|
||||||
module github.com/dcarrillo/whatismyip
|
module github.com/dcarrillo/whatismyip
|
||||||
|
|
||||||
go 1.18
|
go 1.22
|
||||||
|
|
||||||
require (
|
require (
|
||||||
github.com/gin-gonic/gin v1.7.7
|
github.com/docker/docker v26.1.3+incompatible
|
||||||
github.com/oschwald/maxminddb-golang v1.9.0
|
github.com/gin-contrib/secure v1.1.0
|
||||||
github.com/stretchr/testify v1.7.1
|
github.com/gin-gonic/gin v1.10.0
|
||||||
github.com/testcontainers/testcontainers-go v0.12.0
|
github.com/google/uuid v1.6.0
|
||||||
github.com/unrolled/secure v1.10.0
|
github.com/miekg/dns v1.1.61
|
||||||
|
github.com/oschwald/maxminddb-golang v1.13.0
|
||||||
|
github.com/patrickmn/go-cache v2.1.0+incompatible
|
||||||
|
github.com/quic-go/quic-go v0.45.0
|
||||||
|
github.com/stretchr/testify v1.9.0
|
||||||
|
github.com/testcontainers/testcontainers-go v0.31.0
|
||||||
|
gopkg.in/yaml.v3 v3.0.1
|
||||||
)
|
)
|
||||||
|
|
||||||
require (
|
require (
|
||||||
|
dario.cat/mergo v1.0.0 // indirect
|
||||||
github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
|
github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
|
||||||
github.com/Microsoft/go-winio v0.5.2 // indirect
|
github.com/Microsoft/go-winio v0.6.1 // indirect
|
||||||
github.com/Microsoft/hcsshim v0.9.2 // indirect
|
github.com/Microsoft/hcsshim v0.11.4 // indirect
|
||||||
github.com/cenkalti/backoff v2.2.1+incompatible // indirect
|
github.com/bytedance/sonic v1.11.8 // indirect
|
||||||
github.com/containerd/cgroups v1.0.3 // indirect
|
github.com/bytedance/sonic/loader v0.1.1 // indirect
|
||||||
github.com/containerd/containerd v1.6.2 // indirect
|
github.com/cenkalti/backoff/v4 v4.2.1 // indirect
|
||||||
|
github.com/cloudwego/base64x v0.1.4 // indirect
|
||||||
|
github.com/cloudwego/iasm v0.2.0 // indirect
|
||||||
|
github.com/containerd/containerd v1.7.15 // indirect
|
||||||
|
github.com/containerd/log v0.1.0 // indirect
|
||||||
|
github.com/cpuguy83/dockercfg v0.3.1 // indirect
|
||||||
github.com/davecgh/go-spew v1.1.1 // indirect
|
github.com/davecgh/go-spew v1.1.1 // indirect
|
||||||
github.com/docker/distribution v2.8.1+incompatible // indirect
|
github.com/distribution/reference v0.5.0 // indirect
|
||||||
github.com/docker/docker v20.10.14+incompatible // indirect
|
github.com/docker/go-connections v0.5.0 // indirect
|
||||||
github.com/docker/go-connections v0.4.0 // indirect
|
github.com/docker/go-units v0.5.0 // indirect
|
||||||
github.com/docker/go-units v0.4.0 // indirect
|
github.com/felixge/httpsnoop v1.0.4 // indirect
|
||||||
|
github.com/gabriel-vasile/mimetype v1.4.4 // indirect
|
||||||
github.com/gin-contrib/sse v0.1.0 // indirect
|
github.com/gin-contrib/sse v0.1.0 // indirect
|
||||||
github.com/go-playground/locales v0.14.0 // indirect
|
github.com/go-logr/logr v1.4.1 // indirect
|
||||||
github.com/go-playground/universal-translator v0.18.0 // indirect
|
github.com/go-logr/stdr v1.2.2 // indirect
|
||||||
github.com/go-playground/validator/v10 v10.10.1 // indirect
|
github.com/go-ole/go-ole v1.2.6 // indirect
|
||||||
|
github.com/go-playground/locales v0.14.1 // indirect
|
||||||
|
github.com/go-playground/universal-translator v0.18.1 // indirect
|
||||||
|
github.com/go-playground/validator/v10 v10.22.0 // indirect
|
||||||
|
github.com/go-task/slim-sprig/v3 v3.0.0 // indirect
|
||||||
|
github.com/goccy/go-json v0.10.3 // indirect
|
||||||
github.com/gogo/protobuf v1.3.2 // indirect
|
github.com/gogo/protobuf v1.3.2 // indirect
|
||||||
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
|
github.com/golang/protobuf v1.5.4 // indirect
|
||||||
github.com/golang/protobuf v1.5.2 // indirect
|
github.com/google/pprof v0.0.0-20240528025155-186aa0362fba // indirect
|
||||||
github.com/google/uuid v1.3.0 // indirect
|
|
||||||
github.com/json-iterator/go v1.1.12 // indirect
|
github.com/json-iterator/go v1.1.12 // indirect
|
||||||
github.com/leodido/go-urn v1.2.1 // indirect
|
github.com/klauspost/compress v1.16.0 // indirect
|
||||||
github.com/magiconair/properties v1.8.6 // indirect
|
github.com/klauspost/cpuid/v2 v2.2.8 // indirect
|
||||||
github.com/mattn/go-isatty v0.0.14 // indirect
|
github.com/kr/text v0.2.0 // indirect
|
||||||
github.com/moby/sys/mount v0.3.1 // indirect
|
github.com/leodido/go-urn v1.4.0 // indirect
|
||||||
github.com/moby/sys/mountinfo v0.6.0 // indirect
|
github.com/lufia/plan9stats v0.0.0-20211012122336-39d0f177ccd0 // indirect
|
||||||
github.com/moby/term v0.0.0-20210619224110-3f7ff695adc6 // indirect
|
github.com/magiconair/properties v1.8.7 // indirect
|
||||||
|
github.com/mattn/go-isatty v0.0.20 // indirect
|
||||||
|
github.com/moby/docker-image-spec v1.3.1 // indirect
|
||||||
|
github.com/moby/patternmatcher v0.6.0 // indirect
|
||||||
|
github.com/moby/sys/sequential v0.5.0 // indirect
|
||||||
|
github.com/moby/sys/user v0.1.0 // indirect
|
||||||
|
github.com/moby/term v0.5.0 // indirect
|
||||||
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
|
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
|
||||||
github.com/modern-go/reflect2 v1.0.2 // indirect
|
github.com/modern-go/reflect2 v1.0.2 // indirect
|
||||||
github.com/morikuni/aec v1.0.0 // indirect
|
github.com/morikuni/aec v1.0.0 // indirect
|
||||||
|
github.com/onsi/ginkgo/v2 v2.19.0 // indirect
|
||||||
github.com/opencontainers/go-digest v1.0.0 // indirect
|
github.com/opencontainers/go-digest v1.0.0 // indirect
|
||||||
github.com/opencontainers/image-spec v1.0.2 // indirect
|
github.com/opencontainers/image-spec v1.1.0 // indirect
|
||||||
github.com/opencontainers/runc v1.1.1 // indirect
|
github.com/pelletier/go-toml/v2 v2.2.2 // indirect
|
||||||
github.com/pkg/errors v0.9.1 // indirect
|
github.com/pkg/errors v0.9.1 // indirect
|
||||||
github.com/pmezard/go-difflib v1.0.0 // indirect
|
github.com/pmezard/go-difflib v1.0.0 // indirect
|
||||||
github.com/sirupsen/logrus v1.8.1 // indirect
|
github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c // indirect
|
||||||
github.com/ugorji/go/codec v1.2.7 // indirect
|
github.com/quic-go/qpack v0.4.0 // indirect
|
||||||
go.opencensus.io v0.23.0 // indirect
|
github.com/shirou/gopsutil/v3 v3.23.12 // indirect
|
||||||
golang.org/x/crypto v0.0.0-20220331220935-ae2d96664a29 // indirect
|
github.com/shoenig/go-m1cpu v0.1.6 // indirect
|
||||||
golang.org/x/net v0.0.0-20220401154927-543a649e0bdd // indirect
|
github.com/sirupsen/logrus v1.9.3 // indirect
|
||||||
golang.org/x/sys v0.0.0-20220330033206-e17cdc41300f // indirect
|
github.com/tklauser/go-sysconf v0.3.12 // indirect
|
||||||
golang.org/x/text v0.3.7 // indirect
|
github.com/tklauser/numcpus v0.6.1 // indirect
|
||||||
google.golang.org/genproto v0.0.0-20220401170504-314d38edb7de // indirect
|
github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
|
||||||
google.golang.org/grpc v1.45.0 // indirect
|
github.com/ugorji/go/codec v1.2.12 // indirect
|
||||||
google.golang.org/protobuf v1.28.0 // indirect
|
github.com/yusufpapurcu/wmi v1.2.3 // indirect
|
||||||
gopkg.in/yaml.v2 v2.4.0 // indirect
|
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.49.0 // indirect
|
||||||
gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b // indirect
|
go.opentelemetry.io/otel v1.24.0 // indirect
|
||||||
|
go.opentelemetry.io/otel/metric v1.24.0 // indirect
|
||||||
|
go.opentelemetry.io/otel/trace v1.24.0 // indirect
|
||||||
|
go.uber.org/mock v0.4.0 // indirect
|
||||||
|
golang.org/x/arch v0.8.0 // indirect
|
||||||
|
golang.org/x/crypto v0.24.0 // indirect
|
||||||
|
golang.org/x/exp v0.0.0-20240604190554-fc45aab8b7f8 // indirect
|
||||||
|
golang.org/x/mod v0.18.0 // indirect
|
||||||
|
golang.org/x/net v0.26.0 // indirect
|
||||||
|
golang.org/x/sync v0.7.0 // indirect
|
||||||
|
golang.org/x/sys v0.21.0 // indirect
|
||||||
|
golang.org/x/text v0.16.0 // indirect
|
||||||
|
golang.org/x/tools v0.22.0 // indirect
|
||||||
|
google.golang.org/genproto/googleapis/api v0.0.0-20231106174013-bbf56f31fb17 // indirect
|
||||||
|
google.golang.org/genproto/googleapis/rpc v0.0.0-20231120223509-83a465c0220f // indirect
|
||||||
|
google.golang.org/grpc v1.59.0 // indirect
|
||||||
|
google.golang.org/protobuf v1.34.2 // indirect
|
||||||
)
|
)
|
||||||
|
|
|
@ -4,49 +4,78 @@ import (
|
||||||
"context"
|
"context"
|
||||||
"crypto/tls"
|
"crypto/tls"
|
||||||
"encoding/json"
|
"encoding/json"
|
||||||
"io/ioutil"
|
"fmt"
|
||||||
"log"
|
"io"
|
||||||
|
"net"
|
||||||
"net/http"
|
"net/http"
|
||||||
"path/filepath"
|
"strings"
|
||||||
"runtime"
|
|
||||||
"testing"
|
"testing"
|
||||||
|
"time"
|
||||||
|
|
||||||
|
validator "github.com/dcarrillo/whatismyip/internal/validator/uuid"
|
||||||
"github.com/dcarrillo/whatismyip/router"
|
"github.com/dcarrillo/whatismyip/router"
|
||||||
|
"github.com/docker/docker/api/types"
|
||||||
|
"github.com/quic-go/quic-go/http3"
|
||||||
"github.com/stretchr/testify/assert"
|
"github.com/stretchr/testify/assert"
|
||||||
"github.com/testcontainers/testcontainers-go"
|
"github.com/stretchr/testify/require"
|
||||||
|
tc "github.com/testcontainers/testcontainers-go"
|
||||||
"github.com/testcontainers/testcontainers-go/wait"
|
"github.com/testcontainers/testcontainers-go/wait"
|
||||||
)
|
)
|
||||||
|
|
||||||
func buildContainer() testcontainers.ContainerRequest {
|
func customDialContext() func(ctx context.Context, network, addr string) (net.Conn, error) {
|
||||||
_, filename, _, _ := runtime.Caller(0)
|
return func(ctx context.Context, network, addr string) (net.Conn, error) {
|
||||||
dir := filepath.Dir(filename)
|
dialer := &net.Dialer{
|
||||||
|
Resolver: &net.Resolver{
|
||||||
|
PreferGo: true,
|
||||||
|
Dial: func(ctx context.Context, _, _ string) (net.Conn, error) {
|
||||||
|
d := net.Dialer{}
|
||||||
|
return d.DialContext(ctx, "udp", "127.0.0.1:53531")
|
||||||
|
},
|
||||||
|
},
|
||||||
|
}
|
||||||
|
|
||||||
req := testcontainers.ContainerRequest{
|
return dialer.DialContext(ctx, network, addr)
|
||||||
FromDockerfile: testcontainers.FromDockerfile{
|
|
||||||
Context: "../",
|
|
||||||
Dockerfile: "Dockerfile",
|
|
||||||
},
|
|
||||||
Cmd: []string{
|
|
||||||
"-geoip2-city", "/tmp/GeoIP2-City-Test.mmdb",
|
|
||||||
"-geoip2-asn", "/tmp/GeoLite2-ASN-Test.mmdb",
|
|
||||||
"-bind", ":8000",
|
|
||||||
"-tls-bind", ":8001",
|
|
||||||
"-tls-crt", "/tmp/server.pem",
|
|
||||||
"-tls-key", "/tmp/server.key",
|
|
||||||
"-trusted-header", "X-Real-IP",
|
|
||||||
"-enable-secure-headers",
|
|
||||||
},
|
|
||||||
ExposedPorts: []string{"8000:8000", "8001:8001"},
|
|
||||||
WaitingFor: wait.ForLog("Starting TLS server listening on :8001"),
|
|
||||||
BindMounts: map[string]string{
|
|
||||||
"/tmp/GeoIP2-City-Test.mmdb": filepath.Join(dir, "/../test/GeoIP2-City-Test.mmdb"),
|
|
||||||
"/tmp/GeoLite2-ASN-Test.mmdb": filepath.Join(dir, "/../test/GeoLite2-ASN-Test.mmdb"),
|
|
||||||
"/tmp/server.pem": filepath.Join(dir, "/../test/server.pem"),
|
|
||||||
"/tmp/server.key": filepath.Join(dir, "/../test/server.key"),
|
|
||||||
},
|
|
||||||
}
|
}
|
||||||
|
}
|
||||||
|
|
||||||
return req
|
func testWhatIsMyDNS(t *testing.T) {
|
||||||
|
t.Run("RequestDNSDiscovery", func(t *testing.T) {
|
||||||
|
http.DefaultTransport.(*http.Transport).DialContext = customDialContext()
|
||||||
|
req, err := http.NewRequest("GET", "http://localhost:8000", nil)
|
||||||
|
assert.NoError(t, err)
|
||||||
|
req.Host = "dns.example.com"
|
||||||
|
client := &http.Client{
|
||||||
|
CheckRedirect: func(_ *http.Request, _ []*http.Request) error {
|
||||||
|
return http.ErrUseLastResponse
|
||||||
|
},
|
||||||
|
}
|
||||||
|
|
||||||
|
resp, err := client.Do(req)
|
||||||
|
assert.NoError(t, err)
|
||||||
|
assert.Equal(t, http.StatusFound, resp.StatusCode)
|
||||||
|
u, err := resp.Location()
|
||||||
|
assert.NoError(t, err)
|
||||||
|
assert.True(t, validator.IsValid(strings.Split(u.Hostname(), ".")[0]))
|
||||||
|
|
||||||
|
for _, accept := range []string{"application/json", "*/*", "text/html"} {
|
||||||
|
req, err = http.NewRequest("GET", u.String(), nil)
|
||||||
|
req.Host = u.Hostname()
|
||||||
|
req.Header.Set("Accept", accept)
|
||||||
|
assert.NoError(t, err)
|
||||||
|
resp, err = client.Do(req)
|
||||||
|
assert.NoError(t, err)
|
||||||
|
assert.Equal(t, http.StatusOK, resp.StatusCode)
|
||||||
|
body, err := io.ReadAll(resp.Body)
|
||||||
|
assert.NoError(t, err)
|
||||||
|
|
||||||
|
if accept == "application/json" {
|
||||||
|
assert.NoError(t, json.Unmarshal(body, &router.DNSJSONResponse{}))
|
||||||
|
} else {
|
||||||
|
ip := strings.Split(string(body), " ")[0]
|
||||||
|
assert.True(t, net.ParseIP(ip) != nil)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
})
|
||||||
}
|
}
|
||||||
|
|
||||||
func TestContainerIntegration(t *testing.T) {
|
func TestContainerIntegration(t *testing.T) {
|
||||||
|
@ -55,33 +84,180 @@ func TestContainerIntegration(t *testing.T) {
|
||||||
}
|
}
|
||||||
|
|
||||||
ctx := context.Background()
|
ctx := context.Background()
|
||||||
container, err := testcontainers.GenericContainer(ctx, testcontainers.GenericContainerRequest{
|
c, err := tc.GenericContainer(ctx, tc.GenericContainerRequest{
|
||||||
ContainerRequest: buildContainer(),
|
ContainerRequest: tc.ContainerRequest{
|
||||||
Started: true,
|
FromDockerfile: tc.FromDockerfile{
|
||||||
|
Context: "../",
|
||||||
|
Dockerfile: "./test/Dockerfile",
|
||||||
|
PrintBuildLog: true,
|
||||||
|
KeepImage: false,
|
||||||
|
BuildOptionsModifier: func(buildOptions *types.ImageBuildOptions) {
|
||||||
|
buildOptions.Target = "test"
|
||||||
|
},
|
||||||
|
},
|
||||||
|
ExposedPorts: []string{
|
||||||
|
"8000:8000",
|
||||||
|
"8001:8001",
|
||||||
|
"8001:8001/udp",
|
||||||
|
"53531:53/udp",
|
||||||
|
},
|
||||||
|
Cmd: []string{
|
||||||
|
"-geoip2-city", "/GeoIP2-City-Test.mmdb",
|
||||||
|
"-geoip2-asn", "/GeoLite2-ASN-Test.mmdb",
|
||||||
|
"-bind", ":8000",
|
||||||
|
"-tls-bind", ":8001",
|
||||||
|
"-tls-crt", "/server.pem",
|
||||||
|
"-tls-key", "/server.key",
|
||||||
|
"-trusted-header", "X-Real-IP",
|
||||||
|
"-enable-secure-headers",
|
||||||
|
"-enable-http3",
|
||||||
|
"-resolver", "/resolver.yml",
|
||||||
|
},
|
||||||
|
Files: []tc.ContainerFile{
|
||||||
|
{
|
||||||
|
HostFilePath: "./../test/GeoIP2-City-Test.mmdb",
|
||||||
|
ContainerFilePath: "/GeoIP2-City-Test.mmdb",
|
||||||
|
},
|
||||||
|
{
|
||||||
|
HostFilePath: "./../test/GeoLite2-ASN-Test.mmdb",
|
||||||
|
ContainerFilePath: "/GeoLite2-ASN-Test.mmdb",
|
||||||
|
},
|
||||||
|
{
|
||||||
|
HostFilePath: "./../test/server.pem",
|
||||||
|
ContainerFilePath: "/server.pem",
|
||||||
|
},
|
||||||
|
{
|
||||||
|
HostFilePath: "./../test/server.key",
|
||||||
|
ContainerFilePath: "/server.key",
|
||||||
|
},
|
||||||
|
{
|
||||||
|
HostFilePath: "./../test/resolver.yml",
|
||||||
|
ContainerFilePath: "/resolver.yml",
|
||||||
|
},
|
||||||
|
},
|
||||||
|
WaitingFor: wait.ForAll(
|
||||||
|
wait.ForListeningPort("8000/tcp").WithStartupTimeout(5*time.Second),
|
||||||
|
wait.ForListeningPort("8001/tcp").WithStartupTimeout(5*time.Second),
|
||||||
|
wait.ForListeningPort("8001/udp").WithStartupTimeout(5*time.Second),
|
||||||
|
wait.ForListeningPort("53/udp").WithStartupTimeout(5*time.Second),
|
||||||
|
),
|
||||||
|
AutoRemove: true,
|
||||||
|
},
|
||||||
|
Started: true,
|
||||||
})
|
})
|
||||||
if err != nil {
|
require.NoError(t, err)
|
||||||
log.Fatal(err)
|
t.Cleanup(func() { c.Terminate(ctx) })
|
||||||
}
|
|
||||||
defer func() {
|
|
||||||
err := container.Terminate(ctx)
|
|
||||||
if err != nil {
|
|
||||||
log.Fatal(err)
|
|
||||||
}
|
|
||||||
}()
|
|
||||||
|
|
||||||
http.DefaultTransport.(*http.Transport).TLSClientConfig = &tls.Config{InsecureSkipVerify: true}
|
http.DefaultTransport.(*http.Transport).TLSClientConfig = &tls.Config{InsecureSkipVerify: true}
|
||||||
for _, url := range []string{"http://localhost:8000", "https://localhost:8001"} {
|
tests := []struct {
|
||||||
client := &http.Client{}
|
name string
|
||||||
req, _ := http.NewRequest("GET", url, nil)
|
url string
|
||||||
req.Header.Set("Accept", "application/json")
|
quic bool
|
||||||
resp, _ := client.Do(req)
|
}{
|
||||||
assert.Equal(t, 200, resp.StatusCode)
|
{
|
||||||
|
name: "RequestOverHTTP",
|
||||||
body, err := ioutil.ReadAll(resp.Body)
|
url: "http://localhost:8000",
|
||||||
if err != nil {
|
quic: false,
|
||||||
log.Fatal(err)
|
},
|
||||||
}
|
{
|
||||||
|
name: "RequestOverHTTPs",
|
||||||
assert.NoError(t, json.Unmarshal(body, &router.JSONResponse{}))
|
url: "https://localhost:8001",
|
||||||
|
quic: false,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
name: "RequestOverUDPWithQuic",
|
||||||
|
url: "https://localhost:8001",
|
||||||
|
quic: true,
|
||||||
|
},
|
||||||
}
|
}
|
||||||
|
|
||||||
|
testsPortScan := []struct {
|
||||||
|
name string
|
||||||
|
port int
|
||||||
|
want bool
|
||||||
|
}{
|
||||||
|
{
|
||||||
|
name: "RequestOpenPortScan",
|
||||||
|
port: 8000,
|
||||||
|
want: true,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
name: "RequestClosedPortScan",
|
||||||
|
port: 65533,
|
||||||
|
want: false,
|
||||||
|
},
|
||||||
|
}
|
||||||
|
|
||||||
|
for _, tt := range tests {
|
||||||
|
t.Run(tt.name, func(t *testing.T) {
|
||||||
|
req, err := http.NewRequest("GET", tt.url, nil)
|
||||||
|
assert.NoError(t, err)
|
||||||
|
req.Header.Set("Accept", "application/json")
|
||||||
|
|
||||||
|
var resp *http.Response
|
||||||
|
var body []byte
|
||||||
|
if tt.quic {
|
||||||
|
resp, body, err = doQuicRequest(req)
|
||||||
|
} else {
|
||||||
|
client := &http.Client{}
|
||||||
|
resp, _ = client.Do(req)
|
||||||
|
body, err = io.ReadAll(resp.Body)
|
||||||
|
if strings.Contains(tt.url, "https://") {
|
||||||
|
assert.Equal(t, `h3=":8001"; ma=2592000`, resp.Header.Get("Alt-Svc"))
|
||||||
|
}
|
||||||
|
}
|
||||||
|
assert.NoError(t, err)
|
||||||
|
assert.Equal(t, 200, resp.StatusCode)
|
||||||
|
|
||||||
|
assert.NoError(t, json.Unmarshal(body, &router.JSONResponse{}))
|
||||||
|
assert.Equal(t, "DENY", resp.Header.Get("X-Frame-Options"))
|
||||||
|
assert.Equal(t, "nosniff", resp.Header.Get("X-Content-Type-Options"))
|
||||||
|
assert.Equal(t, "1; mode=block", resp.Header.Get("X-Xss-Protection"))
|
||||||
|
})
|
||||||
|
}
|
||||||
|
|
||||||
|
for _, tt := range testsPortScan {
|
||||||
|
t.Run(tt.name, func(t *testing.T) {
|
||||||
|
req, err := http.NewRequest("GET", fmt.Sprintf("http://localhost:8000/scan/tcp/%d", tt.port), nil)
|
||||||
|
assert.NoError(t, err)
|
||||||
|
req.Header.Set("Accept", "application/json")
|
||||||
|
req.Header.Set("X-Real-IP", "127.0.0.1")
|
||||||
|
|
||||||
|
client := &http.Client{}
|
||||||
|
resp, err := client.Do(req)
|
||||||
|
assert.NoError(t, err)
|
||||||
|
assert.Equal(t, 200, resp.StatusCode)
|
||||||
|
|
||||||
|
body, err := io.ReadAll(resp.Body)
|
||||||
|
assert.NoError(t, err)
|
||||||
|
j := router.JSONScanResponse{}
|
||||||
|
assert.NoError(t, json.Unmarshal(body, &j))
|
||||||
|
assert.Equal(t, tt.want, j.Reachable)
|
||||||
|
})
|
||||||
|
}
|
||||||
|
|
||||||
|
testWhatIsMyDNS(t)
|
||||||
|
}
|
||||||
|
|
||||||
|
func doQuicRequest(req *http.Request) (*http.Response, []byte, error) {
|
||||||
|
roundTripper := &http3.RoundTripper{
|
||||||
|
TLSClientConfig: &tls.Config{
|
||||||
|
InsecureSkipVerify: true,
|
||||||
|
},
|
||||||
|
}
|
||||||
|
defer roundTripper.Close()
|
||||||
|
|
||||||
|
client := &http.Client{
|
||||||
|
Transport: roundTripper,
|
||||||
|
}
|
||||||
|
|
||||||
|
resp, err := client.Do(req)
|
||||||
|
if err != nil {
|
||||||
|
return nil, nil, err
|
||||||
|
}
|
||||||
|
|
||||||
|
defer resp.Body.Close()
|
||||||
|
body, _ := io.ReadAll(resp.Body)
|
||||||
|
|
||||||
|
return resp, body, nil
|
||||||
}
|
}
|
||||||
|
|
|
@ -3,9 +3,11 @@ package httputils
|
||||||
import (
|
import (
|
||||||
"fmt"
|
"fmt"
|
||||||
"net/http"
|
"net/http"
|
||||||
|
"net/textproto"
|
||||||
"sort"
|
"sort"
|
||||||
"strings"
|
"strings"
|
||||||
|
|
||||||
|
"github.com/dcarrillo/whatismyip/internal/setting"
|
||||||
"github.com/gin-gonic/gin"
|
"github.com/gin-gonic/gin"
|
||||||
)
|
)
|
||||||
|
|
||||||
|
@ -32,6 +34,17 @@ func HeadersToSortedString(headers http.Header) string {
|
||||||
return output
|
return output
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// GetHeadersWithoutTrustedHeaders return a http.Heade object with the original headers except trusted headers
|
||||||
|
func GetHeadersWithoutTrustedHeaders(ctx *gin.Context) http.Header {
|
||||||
|
h := ctx.Request.Header
|
||||||
|
|
||||||
|
for _, k := range []string{setting.App.TrustedHeader, setting.App.TrustedPortHeader} {
|
||||||
|
delete(h, textproto.CanonicalMIMEHeaderKey(k))
|
||||||
|
}
|
||||||
|
|
||||||
|
return h
|
||||||
|
}
|
||||||
|
|
||||||
// GetLogFormatter returns our custom log format
|
// GetLogFormatter returns our custom log format
|
||||||
func GetLogFormatter(param gin.LogFormatterParams) string {
|
func GetLogFormatter(param gin.LogFormatterParams) string {
|
||||||
return fmt.Sprintf("%s - [%s] \"%s %s %s\" %d %d %d %s \"%s\" \"%s\" \"%s\"\n",
|
return fmt.Sprintf("%s - [%s] \"%s %s %s\" %d %d %d %s \"%s\" \"%s\" \"%s\"\n",
|
||||||
|
@ -50,7 +63,7 @@ func GetLogFormatter(param gin.LogFormatterParams) string {
|
||||||
)
|
)
|
||||||
}
|
}
|
||||||
|
|
||||||
func normalizeLog(log interface{}) interface{} {
|
func normalizeLog(log any) any {
|
||||||
switch v := log.(type) {
|
switch v := log.(type) {
|
||||||
case string:
|
case string:
|
||||||
if v == "" {
|
if v == "" {
|
||||||
|
|
|
@ -9,6 +9,7 @@ import (
|
||||||
"time"
|
"time"
|
||||||
|
|
||||||
"github.com/dcarrillo/whatismyip/internal/core"
|
"github.com/dcarrillo/whatismyip/internal/core"
|
||||||
|
"gopkg.in/yaml.v3"
|
||||||
)
|
)
|
||||||
|
|
||||||
type geodbPath struct {
|
type geodbPath struct {
|
||||||
|
@ -19,6 +20,15 @@ type serverSettings struct {
|
||||||
ReadTimeout time.Duration
|
ReadTimeout time.Duration
|
||||||
WriteTimeout time.Duration
|
WriteTimeout time.Duration
|
||||||
}
|
}
|
||||||
|
|
||||||
|
type resolver struct {
|
||||||
|
Domain string `yaml:"domain"`
|
||||||
|
ResourceRecords []string `yaml:"resource_records"`
|
||||||
|
RedirectPort string `yaml:"redirect_port,omitempty"`
|
||||||
|
Ipv4 []string `yaml:"ipv4,omitempty"`
|
||||||
|
Ipv6 []string `yaml:"ipv6,omitempty"`
|
||||||
|
}
|
||||||
|
|
||||||
type settings struct {
|
type settings struct {
|
||||||
GeodbPath geodbPath
|
GeodbPath geodbPath
|
||||||
TemplatePath string
|
TemplatePath string
|
||||||
|
@ -27,17 +37,18 @@ type settings struct {
|
||||||
TLSCrtPath string
|
TLSCrtPath string
|
||||||
TLSKeyPath string
|
TLSKeyPath string
|
||||||
TrustedHeader string
|
TrustedHeader string
|
||||||
|
TrustedPortHeader string
|
||||||
EnableSecureHeaders bool
|
EnableSecureHeaders bool
|
||||||
|
EnableHTTP3 bool
|
||||||
Server serverSettings
|
Server serverSettings
|
||||||
|
Resolver resolver
|
||||||
version bool
|
version bool
|
||||||
}
|
}
|
||||||
|
|
||||||
const defaultAddress = ":8080"
|
const defaultAddress = ":8080"
|
||||||
|
|
||||||
// ErrVersion is the custom error triggered when -version flag is passed
|
|
||||||
var ErrVersion = errors.New("setting: version requested")
|
var ErrVersion = errors.New("setting: version requested")
|
||||||
|
|
||||||
// App is the var with the parsed settings
|
|
||||||
var App = settings{
|
var App = settings{
|
||||||
// hard-coded for the time being
|
// hard-coded for the time being
|
||||||
Server: serverSettings{
|
Server: serverSettings{
|
||||||
|
@ -46,15 +57,20 @@ var App = settings{
|
||||||
},
|
},
|
||||||
}
|
}
|
||||||
|
|
||||||
// Setup initializes the App object parsing the flags
|
|
||||||
func Setup(args []string) (output string, err error) {
|
func Setup(args []string) (output string, err error) {
|
||||||
flags := flag.NewFlagSet("whatismyip", flag.ContinueOnError)
|
flags := flag.NewFlagSet("whatismyip", flag.ContinueOnError)
|
||||||
var buf bytes.Buffer
|
var buf bytes.Buffer
|
||||||
|
var resolverConf string
|
||||||
flags.SetOutput(&buf)
|
flags.SetOutput(&buf)
|
||||||
|
|
||||||
flags.StringVar(&App.GeodbPath.City, "geoip2-city", "", "Path to GeoIP2 city database")
|
flags.StringVar(&App.GeodbPath.City, "geoip2-city", "", "Path to GeoIP2 city database")
|
||||||
flags.StringVar(&App.GeodbPath.ASN, "geoip2-asn", "", "Path to GeoIP2 ASN database")
|
flags.StringVar(&App.GeodbPath.ASN, "geoip2-asn", "", "Path to GeoIP2 ASN database")
|
||||||
flags.StringVar(&App.TemplatePath, "template", "", "Path to template file")
|
flags.StringVar(&App.TemplatePath, "template", "", "Path to the template file")
|
||||||
|
flags.StringVar(
|
||||||
|
&resolverConf,
|
||||||
|
"resolver",
|
||||||
|
"",
|
||||||
|
"Path to the resolver configuration. It actually enables the resolver for DNS client discovery.")
|
||||||
flags.StringVar(
|
flags.StringVar(
|
||||||
&App.BindAddress,
|
&App.BindAddress,
|
||||||
"bind",
|
"bind",
|
||||||
|
@ -69,10 +85,17 @@ func Setup(args []string) (output string, err error) {
|
||||||
)
|
)
|
||||||
flags.StringVar(&App.TLSCrtPath, "tls-crt", "", "When using TLS, path to certificate file")
|
flags.StringVar(&App.TLSCrtPath, "tls-crt", "", "When using TLS, path to certificate file")
|
||||||
flags.StringVar(&App.TLSKeyPath, "tls-key", "", "When using TLS, path to private key file")
|
flags.StringVar(&App.TLSKeyPath, "tls-key", "", "When using TLS, path to private key file")
|
||||||
flags.StringVar(&App.TrustedHeader,
|
flags.StringVar(
|
||||||
|
&App.TrustedHeader,
|
||||||
"trusted-header",
|
"trusted-header",
|
||||||
"",
|
"",
|
||||||
"Trusted request header for remote IP (e.g. X-Real-IP)",
|
"Trusted request header for remote IP (e.g. X-Real-IP). When using this feature if -trusted-port-header is not set the client port is shown as 'unknown'",
|
||||||
|
)
|
||||||
|
flags.StringVar(
|
||||||
|
&App.TrustedPortHeader,
|
||||||
|
"trusted-port-header",
|
||||||
|
"",
|
||||||
|
"Trusted request header for remote client port (e.g. X-Real-Port). When this parameter is set -trusted-header becomes mandatory",
|
||||||
)
|
)
|
||||||
flags.BoolVar(&App.version, "version", false, "Output version information and exit")
|
flags.BoolVar(&App.version, "version", false, "Output version information and exit")
|
||||||
flags.BoolVar(
|
flags.BoolVar(
|
||||||
|
@ -81,6 +104,12 @@ func Setup(args []string) (output string, err error) {
|
||||||
false,
|
false,
|
||||||
"Add sane security-related headers to every response",
|
"Add sane security-related headers to every response",
|
||||||
)
|
)
|
||||||
|
flags.BoolVar(
|
||||||
|
&App.EnableHTTP3,
|
||||||
|
"enable-http3",
|
||||||
|
false,
|
||||||
|
"Enable HTTP/3 protocol. HTTP/3 requires --tls-bind set, as HTTP/3 starts as a TLS connection that then gets upgraded to UDP. The UDP port is the same as the one used for the TLS server.",
|
||||||
|
)
|
||||||
|
|
||||||
err = flags.Parse(args)
|
err = flags.Parse(args)
|
||||||
if err != nil {
|
if err != nil {
|
||||||
|
@ -91,12 +120,20 @@ func Setup(args []string) (output string, err error) {
|
||||||
return fmt.Sprintf("whatismyip version %s", core.Version), ErrVersion
|
return fmt.Sprintf("whatismyip version %s", core.Version), ErrVersion
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if App.TrustedPortHeader != "" && App.TrustedHeader == "" {
|
||||||
|
return "", fmt.Errorf("truster-header is mandatory when truster-port-header is set")
|
||||||
|
}
|
||||||
|
|
||||||
if App.GeodbPath.City == "" || App.GeodbPath.ASN == "" {
|
if App.GeodbPath.City == "" || App.GeodbPath.ASN == "" {
|
||||||
return "", fmt.Errorf("geoip2-city and geoip2-asn parameters are mandatory")
|
return "", fmt.Errorf("geoip2-city and geoip2-asn parameters are mandatory")
|
||||||
}
|
}
|
||||||
|
|
||||||
if (App.TLSAddress != "") && (App.TLSCrtPath == "" || App.TLSKeyPath == "") {
|
if (App.TLSAddress != "") && (App.TLSCrtPath == "" || App.TLSKeyPath == "") {
|
||||||
return "", fmt.Errorf("In order to use TLS -tls-crt and -tls-key flags are mandatory")
|
return "", fmt.Errorf("in order to use TLS, the -tls-crt and -tls-key flags are mandatory")
|
||||||
|
}
|
||||||
|
|
||||||
|
if App.EnableHTTP3 && App.TLSAddress == "" {
|
||||||
|
return "", fmt.Errorf("in order to use HTTP3, the -tls-bind is mandatory")
|
||||||
}
|
}
|
||||||
|
|
||||||
if App.TemplatePath != "" {
|
if App.TemplatePath != "" {
|
||||||
|
@ -109,5 +146,21 @@ func Setup(args []string) (output string, err error) {
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if resolverConf != "" {
|
||||||
|
var err error
|
||||||
|
App.Resolver, err = readYAML(resolverConf)
|
||||||
|
if err != nil {
|
||||||
|
return "", fmt.Errorf("error reading resolver configuration %s", err)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
return buf.String(), nil
|
return buf.String(), nil
|
||||||
}
|
}
|
||||||
|
|
||||||
|
func readYAML(path string) (resolver resolver, err error) {
|
||||||
|
yamlFile, err := os.ReadFile(path)
|
||||||
|
if err != nil {
|
||||||
|
return resolver, err
|
||||||
|
}
|
||||||
|
return resolver, yaml.Unmarshal(yamlFile, &resolver)
|
||||||
|
}
|
||||||
|
|
|
@ -8,51 +8,56 @@ import (
|
||||||
"time"
|
"time"
|
||||||
|
|
||||||
"github.com/stretchr/testify/assert"
|
"github.com/stretchr/testify/assert"
|
||||||
|
"github.com/stretchr/testify/require"
|
||||||
)
|
)
|
||||||
|
|
||||||
func TestParseMandatoryFlags(t *testing.T) {
|
func TestParseMandatoryFlags(t *testing.T) {
|
||||||
var mandatoryFlags = []struct {
|
var mandatoryFlags = []struct {
|
||||||
args []string
|
args []string
|
||||||
conf settings
|
|
||||||
}{
|
}{
|
||||||
{
|
{
|
||||||
[]string{},
|
[]string{},
|
||||||
settings{},
|
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
[]string{"-geoip2-city", "/city-path"},
|
[]string{"-geoip2-city", "/city-path"},
|
||||||
settings{},
|
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
[]string{"-geoip2-asn", "/asn-path"},
|
[]string{"-geoip2-asn", "/asn-path"},
|
||||||
settings{},
|
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
[]string{
|
[]string{
|
||||||
"-geoip2-city", "/city-path", "-geoip2-asn", "/asn-path", "-tls-bind", ":9000",
|
"-geoip2-city", "/city-path", "-geoip2-asn", "/asn-path", "-tls-bind", ":9000",
|
||||||
},
|
},
|
||||||
settings{},
|
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
[]string{
|
[]string{
|
||||||
"-geoip2-city", "/city-path", "-geoip2-asn", "/asn-path", "-tls-bind", ":9000",
|
"-geoip2-city", "/city-path", "-geoip2-asn", "/asn-path", "-tls-bind", ":9000",
|
||||||
"-tls-crt", "/crt-path",
|
"-tls-crt", "/crt-path",
|
||||||
},
|
},
|
||||||
settings{},
|
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
[]string{
|
[]string{
|
||||||
"-geoip2-city", "/city-path", "-geoip2-asn", "/asn-path", "-tls-bind", ":9000",
|
"-geoip2-city", "/city-path", "-geoip2-asn", "/asn-path", "-tls-bind", ":9000",
|
||||||
"-tls-key", "/key-path",
|
"-tls-key", "/key-path",
|
||||||
},
|
},
|
||||||
settings{},
|
},
|
||||||
|
{
|
||||||
|
[]string{
|
||||||
|
"-geoip2-city", "/city-path", "-geoip2-asn", "/asn-path", "-enable-http3",
|
||||||
|
},
|
||||||
|
},
|
||||||
|
{
|
||||||
|
[]string{
|
||||||
|
"-geoip2-city", "/city-path", "-geoip2-asn", "/asn-path", "-bind", ":8000",
|
||||||
|
"-trusted-port-header", "port-header",
|
||||||
|
},
|
||||||
},
|
},
|
||||||
}
|
}
|
||||||
|
|
||||||
for _, tt := range mandatoryFlags {
|
for _, tt := range mandatoryFlags {
|
||||||
t.Run(strings.Join(tt.args, " "), func(t *testing.T) {
|
t.Run(strings.Join(tt.args, " "), func(t *testing.T) {
|
||||||
_, err := Setup(tt.args)
|
_, err := Setup(tt.args)
|
||||||
assert.NotNil(t, err)
|
require.NotNil(t, err)
|
||||||
assert.Contains(t, err.Error(), "mandatory")
|
assert.Contains(t, err.Error(), "mandatory")
|
||||||
})
|
})
|
||||||
}
|
}
|
||||||
|
@ -70,13 +75,7 @@ func TestParseFlags(t *testing.T) {
|
||||||
City: "/city-path",
|
City: "/city-path",
|
||||||
ASN: "/asn-path",
|
ASN: "/asn-path",
|
||||||
},
|
},
|
||||||
TemplatePath: "",
|
BindAddress: ":8080",
|
||||||
BindAddress: ":8080",
|
|
||||||
TLSAddress: "",
|
|
||||||
TLSCrtPath: "",
|
|
||||||
TLSKeyPath: "",
|
|
||||||
TrustedHeader: "",
|
|
||||||
EnableSecureHeaders: false,
|
|
||||||
Server: serverSettings{
|
Server: serverSettings{
|
||||||
ReadTimeout: 10 * time.Second,
|
ReadTimeout: 10 * time.Second,
|
||||||
WriteTimeout: 10 * time.Second,
|
WriteTimeout: 10 * time.Second,
|
||||||
|
@ -90,13 +89,7 @@ func TestParseFlags(t *testing.T) {
|
||||||
City: "/city-path",
|
City: "/city-path",
|
||||||
ASN: "/asn-path",
|
ASN: "/asn-path",
|
||||||
},
|
},
|
||||||
TemplatePath: "",
|
BindAddress: ":8001",
|
||||||
BindAddress: ":8001",
|
|
||||||
TLSAddress: "",
|
|
||||||
TLSCrtPath: "",
|
|
||||||
TLSKeyPath: "",
|
|
||||||
TrustedHeader: "",
|
|
||||||
EnableSecureHeaders: false,
|
|
||||||
Server: serverSettings{
|
Server: serverSettings{
|
||||||
ReadTimeout: 10 * time.Second,
|
ReadTimeout: 10 * time.Second,
|
||||||
WriteTimeout: 10 * time.Second,
|
WriteTimeout: 10 * time.Second,
|
||||||
|
@ -113,13 +106,29 @@ func TestParseFlags(t *testing.T) {
|
||||||
City: "/city-path",
|
City: "/city-path",
|
||||||
ASN: "/asn-path",
|
ASN: "/asn-path",
|
||||||
},
|
},
|
||||||
TemplatePath: "",
|
BindAddress: ":8080",
|
||||||
BindAddress: ":8080",
|
TLSAddress: ":9000",
|
||||||
TLSAddress: ":9000",
|
TLSCrtPath: "/crt-path",
|
||||||
TLSCrtPath: "/crt-path",
|
TLSKeyPath: "/key-path",
|
||||||
TLSKeyPath: "/key-path",
|
Server: serverSettings{
|
||||||
TrustedHeader: "",
|
ReadTimeout: 10 * time.Second,
|
||||||
EnableSecureHeaders: false,
|
WriteTimeout: 10 * time.Second,
|
||||||
|
},
|
||||||
|
},
|
||||||
|
},
|
||||||
|
{
|
||||||
|
[]string{
|
||||||
|
"-geoip2-city", "/city-path", "-geoip2-asn", "/asn-path",
|
||||||
|
"-trusted-header", "header", "-trusted-port-header", "port-header",
|
||||||
|
},
|
||||||
|
settings{
|
||||||
|
GeodbPath: geodbPath{
|
||||||
|
City: "/city-path",
|
||||||
|
ASN: "/asn-path",
|
||||||
|
},
|
||||||
|
BindAddress: ":8080",
|
||||||
|
TrustedHeader: "header",
|
||||||
|
TrustedPortHeader: "port-header",
|
||||||
Server: serverSettings{
|
Server: serverSettings{
|
||||||
ReadTimeout: 10 * time.Second,
|
ReadTimeout: 10 * time.Second,
|
||||||
WriteTimeout: 10 * time.Second,
|
WriteTimeout: 10 * time.Second,
|
||||||
|
@ -136,11 +145,7 @@ func TestParseFlags(t *testing.T) {
|
||||||
City: "/city-path",
|
City: "/city-path",
|
||||||
ASN: "/asn-path",
|
ASN: "/asn-path",
|
||||||
},
|
},
|
||||||
TemplatePath: "",
|
|
||||||
BindAddress: ":8080",
|
BindAddress: ":8080",
|
||||||
TLSAddress: "",
|
|
||||||
TLSCrtPath: "",
|
|
||||||
TLSKeyPath: "",
|
|
||||||
TrustedHeader: "header",
|
TrustedHeader: "header",
|
||||||
EnableSecureHeaders: true,
|
EnableSecureHeaders: true,
|
||||||
Server: serverSettings{
|
Server: serverSettings{
|
||||||
|
@ -154,7 +159,7 @@ func TestParseFlags(t *testing.T) {
|
||||||
for _, tt := range flags {
|
for _, tt := range flags {
|
||||||
t.Run(strings.Join(tt.args, " "), func(t *testing.T) {
|
t.Run(strings.Join(tt.args, " "), func(t *testing.T) {
|
||||||
_, err := Setup(tt.args)
|
_, err := Setup(tt.args)
|
||||||
assert.Nil(t, err)
|
require.Nil(t, err)
|
||||||
assert.True(t, reflect.DeepEqual(App, tt.conf))
|
assert.True(t, reflect.DeepEqual(App, tt.conf))
|
||||||
})
|
})
|
||||||
}
|
}
|
||||||
|
@ -192,6 +197,6 @@ func TestParseFlagTemplate(t *testing.T) {
|
||||||
"-template", "/",
|
"-template", "/",
|
||||||
}
|
}
|
||||||
_, err = Setup(flags)
|
_, err = Setup(flags)
|
||||||
assert.Error(t, err)
|
require.Error(t, err)
|
||||||
assert.Contains(t, err.Error(), "must be a file")
|
assert.Contains(t, err.Error(), "must be a file")
|
||||||
}
|
}
|
||||||
|
|
|
@ -0,0 +1,10 @@
|
||||||
|
package uuid
|
||||||
|
|
||||||
|
import (
|
||||||
|
"github.com/google/uuid"
|
||||||
|
)
|
||||||
|
|
||||||
|
func IsValid(u string) bool {
|
||||||
|
_, err := uuid.Parse(u)
|
||||||
|
return err == nil
|
||||||
|
}
|
|
@ -0,0 +1,37 @@
|
||||||
|
package uuid
|
||||||
|
|
||||||
|
import (
|
||||||
|
"testing"
|
||||||
|
|
||||||
|
"github.com/stretchr/testify/assert"
|
||||||
|
)
|
||||||
|
|
||||||
|
func TestIsValid(t *testing.T) {
|
||||||
|
tests := []struct {
|
||||||
|
name string
|
||||||
|
u string
|
||||||
|
want bool
|
||||||
|
}{
|
||||||
|
{
|
||||||
|
name: "Valid UUID",
|
||||||
|
u: "3b241101-e2bb-4255-8caf-4136c566a964",
|
||||||
|
want: true,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
name: "Invalid UUID",
|
||||||
|
u: "invalid-uuid",
|
||||||
|
want: false,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
name: "Empty string",
|
||||||
|
u: "",
|
||||||
|
want: false,
|
||||||
|
},
|
||||||
|
}
|
||||||
|
|
||||||
|
for _, tt := range tests {
|
||||||
|
t.Run(tt.name, func(t *testing.T) {
|
||||||
|
assert.True(t, IsValid(tt.u) == tt.want)
|
||||||
|
})
|
||||||
|
}
|
||||||
|
}
|
|
@ -68,18 +68,10 @@ func CloseDBs() {
|
||||||
|
|
||||||
// LookUp an IP and get city data
|
// LookUp an IP and get city data
|
||||||
func (record *GeoRecord) LookUp(ip net.IP) error {
|
func (record *GeoRecord) LookUp(ip net.IP) error {
|
||||||
if err := db.city.Lookup(ip, record); err != nil {
|
return db.city.Lookup(ip, record)
|
||||||
return err
|
|
||||||
}
|
|
||||||
|
|
||||||
return nil
|
|
||||||
}
|
}
|
||||||
|
|
||||||
// LookUp an IP and get ASN data
|
// LookUp an IP and get ASN data
|
||||||
func (record *ASNRecord) LookUp(ip net.IP) error {
|
func (record *ASNRecord) LookUp(ip net.IP) error {
|
||||||
if err := db.asn.Lookup(ip, record); err != nil {
|
return db.asn.Lookup(ip, record)
|
||||||
return err
|
|
||||||
}
|
|
||||||
|
|
||||||
return nil
|
|
||||||
}
|
}
|
||||||
|
|
|
@ -0,0 +1,165 @@
|
||||||
|
package resolver
|
||||||
|
|
||||||
|
import (
|
||||||
|
"log"
|
||||||
|
"net"
|
||||||
|
"strings"
|
||||||
|
|
||||||
|
"github.com/dcarrillo/whatismyip/internal/setting"
|
||||||
|
"github.com/dcarrillo/whatismyip/internal/validator/uuid"
|
||||||
|
"github.com/miekg/dns"
|
||||||
|
"github.com/patrickmn/go-cache"
|
||||||
|
)
|
||||||
|
|
||||||
|
type Resolver struct {
|
||||||
|
handler *dns.ServeMux
|
||||||
|
store *cache.Cache
|
||||||
|
domain string
|
||||||
|
rr []string
|
||||||
|
ipv4 []net.IP
|
||||||
|
ipv6 []net.IP
|
||||||
|
}
|
||||||
|
|
||||||
|
func ensureDotSuffix(s string) string {
|
||||||
|
if !strings.HasSuffix(s, ".") {
|
||||||
|
return s + "."
|
||||||
|
}
|
||||||
|
return s
|
||||||
|
}
|
||||||
|
|
||||||
|
func Setup(store *cache.Cache) *Resolver {
|
||||||
|
var ipv4, ipv6 []net.IP
|
||||||
|
for _, ip := range setting.App.Resolver.Ipv4 {
|
||||||
|
ipv4 = append(ipv4, net.ParseIP(ip))
|
||||||
|
}
|
||||||
|
for _, ip := range setting.App.Resolver.Ipv6 {
|
||||||
|
ipv6 = append(ipv6, net.ParseIP(ip))
|
||||||
|
}
|
||||||
|
|
||||||
|
resolver := &Resolver{
|
||||||
|
handler: dns.NewServeMux(),
|
||||||
|
store: store,
|
||||||
|
domain: ensureDotSuffix(setting.App.Resolver.Domain),
|
||||||
|
rr: setting.App.Resolver.ResourceRecords,
|
||||||
|
ipv4: ipv4,
|
||||||
|
ipv6: ipv6,
|
||||||
|
}
|
||||||
|
resolver.handler.HandleFunc(resolver.domain, resolver.resolve)
|
||||||
|
resolver.handler.HandleFunc(".", resolver.blackHole)
|
||||||
|
|
||||||
|
return resolver
|
||||||
|
}
|
||||||
|
|
||||||
|
func (rsv *Resolver) Handler() *dns.ServeMux {
|
||||||
|
return rsv.handler
|
||||||
|
}
|
||||||
|
|
||||||
|
func (rsv *Resolver) blackHole(w dns.ResponseWriter, r *dns.Msg) {
|
||||||
|
msg := startReply(r)
|
||||||
|
msg.SetRcode(r, dns.RcodeRefused)
|
||||||
|
w.WriteMsg(msg)
|
||||||
|
logger(w, r.Question[0], msg.Rcode)
|
||||||
|
}
|
||||||
|
|
||||||
|
func (rsv *Resolver) resolve(w dns.ResponseWriter, r *dns.Msg) {
|
||||||
|
msg := startReply(r)
|
||||||
|
q := r.Question[0]
|
||||||
|
ip, _, _ := net.SplitHostPort(w.RemoteAddr().String())
|
||||||
|
|
||||||
|
for _, res := range rsv.rr {
|
||||||
|
t := strings.Split(res, " ")[2]
|
||||||
|
if q.Qtype == dns.StringToType[t] {
|
||||||
|
brr, err := buildRR(rsv.domain + " " + res)
|
||||||
|
if err != nil {
|
||||||
|
msg.SetRcode(r, dns.RcodeServerFailure)
|
||||||
|
logger(w, q, msg.Rcode, err.Error())
|
||||||
|
} else {
|
||||||
|
msg.Answer = append(msg.Answer, brr)
|
||||||
|
logger(w, q, msg.Rcode)
|
||||||
|
}
|
||||||
|
w.WriteMsg(msg)
|
||||||
|
return
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
lowerName := strings.ToLower(q.Name) // lowercase because of dns-0x20
|
||||||
|
subDomain := strings.Split(lowerName, ".")[0]
|
||||||
|
switch {
|
||||||
|
case uuid.IsValid(subDomain):
|
||||||
|
msg.SetRcode(r, rsv.getIP(q, msg))
|
||||||
|
rsv.store.Add(subDomain, ip, cache.DefaultExpiration)
|
||||||
|
case lowerName == rsv.domain:
|
||||||
|
msg.SetRcode(r, rsv.getIP(q, msg))
|
||||||
|
default:
|
||||||
|
msg.SetRcode(r, dns.RcodeRefused)
|
||||||
|
}
|
||||||
|
|
||||||
|
w.WriteMsg(msg)
|
||||||
|
logger(w, q, msg.Rcode)
|
||||||
|
}
|
||||||
|
|
||||||
|
func (rsv *Resolver) getIP(question dns.Question, msg *dns.Msg) int {
|
||||||
|
if question.Qtype == dns.TypeA && len(rsv.ipv4) > 0 {
|
||||||
|
for _, ip := range rsv.ipv4 {
|
||||||
|
msg.Answer = append(msg.Answer, &dns.A{
|
||||||
|
Hdr: setHdr(question),
|
||||||
|
A: ip,
|
||||||
|
})
|
||||||
|
}
|
||||||
|
return dns.RcodeSuccess
|
||||||
|
}
|
||||||
|
|
||||||
|
if question.Qtype == dns.TypeAAAA && len(rsv.ipv6) > 0 {
|
||||||
|
for _, ip := range rsv.ipv6 {
|
||||||
|
msg.Answer = append(msg.Answer, &dns.AAAA{
|
||||||
|
Hdr: setHdr(question),
|
||||||
|
AAAA: ip,
|
||||||
|
})
|
||||||
|
}
|
||||||
|
return dns.RcodeSuccess
|
||||||
|
}
|
||||||
|
|
||||||
|
return dns.RcodeRefused
|
||||||
|
}
|
||||||
|
|
||||||
|
func buildRR(rrs string) (dns.RR, error) {
|
||||||
|
rr, err := dns.NewRR(rrs)
|
||||||
|
if err != nil {
|
||||||
|
return nil, err
|
||||||
|
}
|
||||||
|
|
||||||
|
return rr, nil
|
||||||
|
}
|
||||||
|
|
||||||
|
func setHdr(q dns.Question) dns.RR_Header {
|
||||||
|
return dns.RR_Header{
|
||||||
|
Name: q.Name,
|
||||||
|
Rrtype: q.Qtype,
|
||||||
|
Class: dns.ClassINET,
|
||||||
|
Ttl: 60,
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func startReply(r *dns.Msg) *dns.Msg {
|
||||||
|
msg := new(dns.Msg)
|
||||||
|
msg.SetReply(r)
|
||||||
|
msg.Authoritative = true
|
||||||
|
|
||||||
|
return msg
|
||||||
|
}
|
||||||
|
|
||||||
|
func logger(w dns.ResponseWriter, q dns.Question, code int, err ...string) {
|
||||||
|
emsg := ""
|
||||||
|
if len(err) > 0 {
|
||||||
|
emsg = " - " + strings.Join(err, " ")
|
||||||
|
}
|
||||||
|
ip, _, _ := net.SplitHostPort(w.RemoteAddr().String())
|
||||||
|
log.Printf(
|
||||||
|
"DNS %s - %s - %s - %s%s",
|
||||||
|
ip,
|
||||||
|
dns.TypeToString[q.Qtype],
|
||||||
|
q.Name,
|
||||||
|
dns.RcodeToString[code],
|
||||||
|
emsg,
|
||||||
|
)
|
||||||
|
}
|
|
@ -0,0 +1,85 @@
|
||||||
|
package router
|
||||||
|
|
||||||
|
import (
|
||||||
|
"fmt"
|
||||||
|
"net"
|
||||||
|
"net/http"
|
||||||
|
"strings"
|
||||||
|
|
||||||
|
validator "github.com/dcarrillo/whatismyip/internal/validator/uuid"
|
||||||
|
"github.com/dcarrillo/whatismyip/service"
|
||||||
|
"github.com/gin-gonic/gin"
|
||||||
|
"github.com/google/uuid"
|
||||||
|
"github.com/patrickmn/go-cache"
|
||||||
|
)
|
||||||
|
|
||||||
|
type DNSJSONResponse struct {
|
||||||
|
DNS dnsData `json:"dns"`
|
||||||
|
}
|
||||||
|
type dnsData struct {
|
||||||
|
IP string `json:"ip"`
|
||||||
|
Country string `json:"country"`
|
||||||
|
AsnOrganization string `json:"provider"`
|
||||||
|
}
|
||||||
|
|
||||||
|
// TODO
|
||||||
|
// Implement a proper vhost manager instead of using a middleware
|
||||||
|
func GetDNSDiscoveryHandler(store *cache.Cache, domain string, redirectPort string) gin.HandlerFunc {
|
||||||
|
return func(ctx *gin.Context) {
|
||||||
|
if !strings.HasSuffix(ctx.Request.Host, domain) {
|
||||||
|
ctx.Next()
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
if ctx.Request.Host == domain && ctx.Request.URL.Path == "/" {
|
||||||
|
ctx.Redirect(http.StatusFound, fmt.Sprintf("http://%s.%s%s", uuid.New().String(), domain, redirectPort))
|
||||||
|
ctx.Abort()
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
handleDNS(ctx, store)
|
||||||
|
ctx.Abort()
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func handleDNS(ctx *gin.Context, store *cache.Cache) {
|
||||||
|
d := strings.Split(ctx.Request.Host, ".")[0]
|
||||||
|
if !validator.IsValid(d) {
|
||||||
|
ctx.String(http.StatusNotFound, http.StatusText(http.StatusNotFound))
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
v, found := store.Get(d)
|
||||||
|
if !found {
|
||||||
|
ctx.String(http.StatusNotFound, http.StatusText(http.StatusNotFound))
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
ipStr, ok := v.(string)
|
||||||
|
if !ok {
|
||||||
|
ctx.String(http.StatusNotFound, http.StatusText(http.StatusNotFound))
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
ip := net.ParseIP(ipStr)
|
||||||
|
if ip == nil {
|
||||||
|
ctx.String(http.StatusNotFound, http.StatusText(http.StatusNotFound))
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
geo := service.Geo{IP: ip}
|
||||||
|
j := DNSJSONResponse{
|
||||||
|
DNS: dnsData{
|
||||||
|
IP: ipStr,
|
||||||
|
Country: geo.LookUpCity().Country.Names["en"],
|
||||||
|
AsnOrganization: geo.LookUpASN().AutonomousSystemOrganization,
|
||||||
|
},
|
||||||
|
}
|
||||||
|
|
||||||
|
switch ctx.NegotiateFormat(gin.MIMEPlain, gin.MIMEHTML, gin.MIMEJSON) {
|
||||||
|
case gin.MIMEJSON:
|
||||||
|
ctx.JSON(http.StatusOK, j)
|
||||||
|
default:
|
||||||
|
ctx.String(http.StatusOK, fmt.Sprintf("%s (%s / %s)\n", j.DNS.IP, j.DNS.Country, j.DNS.AsnOrganization))
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,153 @@
|
||||||
|
package router
|
||||||
|
|
||||||
|
import (
|
||||||
|
"net/http"
|
||||||
|
"net/http/httptest"
|
||||||
|
"net/url"
|
||||||
|
"strings"
|
||||||
|
"testing"
|
||||||
|
|
||||||
|
validator "github.com/dcarrillo/whatismyip/internal/validator/uuid"
|
||||||
|
"github.com/gin-gonic/gin"
|
||||||
|
"github.com/google/uuid"
|
||||||
|
"github.com/patrickmn/go-cache"
|
||||||
|
"github.com/stretchr/testify/assert"
|
||||||
|
)
|
||||||
|
|
||||||
|
func TestGetDNSDiscoveryHandler(t *testing.T) {
|
||||||
|
store := cache.New(cache.NoExpiration, cache.NoExpiration)
|
||||||
|
handler := GetDNSDiscoveryHandler(store, domain, "")
|
||||||
|
|
||||||
|
t.Run("calls next if host does not have domain suffix", func(t *testing.T) {
|
||||||
|
req, _ := http.NewRequest("GET", "/", nil)
|
||||||
|
req.Header.Set(trustedHeader, testIP.ipv4)
|
||||||
|
req.Host = "example.com"
|
||||||
|
|
||||||
|
w := httptest.NewRecorder()
|
||||||
|
c, _ := gin.CreateTestContext(w)
|
||||||
|
c.Request = req
|
||||||
|
handler(c)
|
||||||
|
app.ServeHTTP(w, req)
|
||||||
|
|
||||||
|
assert.Equal(t, http.StatusOK, w.Code)
|
||||||
|
assert.Equal(t, testIP.ipv4+"\n", w.Body.String())
|
||||||
|
})
|
||||||
|
|
||||||
|
t.Run("return 404 if there is a path", func(t *testing.T) {
|
||||||
|
req, _ := http.NewRequest("GET", "/path", nil)
|
||||||
|
req.Host = domain
|
||||||
|
|
||||||
|
w := httptest.NewRecorder()
|
||||||
|
c, _ := gin.CreateTestContext(w)
|
||||||
|
c.Request = req
|
||||||
|
handler(c)
|
||||||
|
app.ServeHTTP(w, req)
|
||||||
|
|
||||||
|
assert.Equal(t, http.StatusNotFound, w.Code)
|
||||||
|
})
|
||||||
|
|
||||||
|
t.Run("redirects if host is domain", func(t *testing.T) {
|
||||||
|
req, _ := http.NewRequest("GET", "/", nil)
|
||||||
|
req.Host = domain
|
||||||
|
|
||||||
|
w := httptest.NewRecorder()
|
||||||
|
c, _ := gin.CreateTestContext(w)
|
||||||
|
c.Request = req
|
||||||
|
handler(c)
|
||||||
|
|
||||||
|
assert.Equal(t, http.StatusFound, w.Code)
|
||||||
|
r, err := url.Parse(w.Header().Get("Location"))
|
||||||
|
assert.NoError(t, err)
|
||||||
|
assert.True(t, validator.IsValid(strings.Split(r.Host, ".")[0]))
|
||||||
|
assert.Equal(t, domain, strings.Join(strings.Split(r.Host, ".")[1:], "."))
|
||||||
|
})
|
||||||
|
}
|
||||||
|
|
||||||
|
func TestHandleDNS(t *testing.T) {
|
||||||
|
store := cache.New(cache.NoExpiration, cache.NoExpiration)
|
||||||
|
u := uuid.New().String()
|
||||||
|
|
||||||
|
tests := []struct {
|
||||||
|
name string
|
||||||
|
subDomain string
|
||||||
|
stored any
|
||||||
|
}{
|
||||||
|
{
|
||||||
|
name: "not found if the subdomain is not a valid uuid",
|
||||||
|
subDomain: "not-uuid",
|
||||||
|
stored: "",
|
||||||
|
},
|
||||||
|
{
|
||||||
|
name: "not found if the ip is not found in the store",
|
||||||
|
subDomain: u,
|
||||||
|
stored: "",
|
||||||
|
},
|
||||||
|
{
|
||||||
|
name: "not found if the ip is in store but is not valid",
|
||||||
|
subDomain: u,
|
||||||
|
stored: "bogus",
|
||||||
|
},
|
||||||
|
{
|
||||||
|
name: "not found if the store contains no string",
|
||||||
|
subDomain: u,
|
||||||
|
stored: 20,
|
||||||
|
},
|
||||||
|
}
|
||||||
|
|
||||||
|
for _, tt := range tests {
|
||||||
|
t.Run(tt.name, func(t *testing.T) {
|
||||||
|
req, _ := http.NewRequest("GET", "/", nil)
|
||||||
|
req.Host = tt.subDomain + "." + domain
|
||||||
|
|
||||||
|
if tt.stored != "" {
|
||||||
|
store.Add(tt.subDomain, tt.stored, cache.DefaultExpiration)
|
||||||
|
}
|
||||||
|
|
||||||
|
w := httptest.NewRecorder()
|
||||||
|
c, _ := gin.CreateTestContext(w)
|
||||||
|
c.Request = req
|
||||||
|
handleDNS(c, store)
|
||||||
|
assert.Equal(t, http.StatusNotFound, w.Code)
|
||||||
|
})
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func TestAcceptDNSRequest(t *testing.T) {
|
||||||
|
store := cache.New(cache.NoExpiration, cache.NoExpiration)
|
||||||
|
|
||||||
|
tests := []struct {
|
||||||
|
name string
|
||||||
|
accept string
|
||||||
|
want string
|
||||||
|
}{
|
||||||
|
{
|
||||||
|
name: "returns json dns data",
|
||||||
|
accept: "application/json",
|
||||||
|
want: jsonDNSIPv4,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
name: "return plan text dns data",
|
||||||
|
accept: "text/plain",
|
||||||
|
want: plainDNSIPv4,
|
||||||
|
},
|
||||||
|
}
|
||||||
|
|
||||||
|
for _, tt := range tests {
|
||||||
|
t.Run(tt.name, func(t *testing.T) {
|
||||||
|
req, _ := http.NewRequest("GET", "/", nil)
|
||||||
|
u := uuid.New().String()
|
||||||
|
req.Host = u + "." + domain
|
||||||
|
req.Header.Add("Accept", tt.accept)
|
||||||
|
|
||||||
|
w := httptest.NewRecorder()
|
||||||
|
c, _ := gin.CreateTestContext(w)
|
||||||
|
c.Request = req
|
||||||
|
|
||||||
|
store.Add(u, testIP.ipv4, cache.DefaultExpiration)
|
||||||
|
handleDNS(c, store)
|
||||||
|
|
||||||
|
assert.Equal(t, http.StatusOK, w.Code)
|
||||||
|
assert.Equal(t, tt.want, w.Body.String())
|
||||||
|
})
|
||||||
|
}
|
||||||
|
}
|
|
@ -11,7 +11,6 @@ import (
|
||||||
"github.com/gin-gonic/gin"
|
"github.com/gin-gonic/gin"
|
||||||
)
|
)
|
||||||
|
|
||||||
// JSONResponse maps data as json
|
|
||||||
type JSONResponse struct {
|
type JSONResponse struct {
|
||||||
IP string `json:"ip"`
|
IP string `json:"ip"`
|
||||||
IPVersion byte `json:"ip_version"`
|
IPVersion byte `json:"ip_version"`
|
||||||
|
@ -44,15 +43,31 @@ func getRoot(ctx *gin.Context) {
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
func getClientPort(ctx *gin.Context) string {
|
||||||
|
var port string
|
||||||
|
if setting.App.TrustedPortHeader == "" {
|
||||||
|
if setting.App.TrustedHeader != "" {
|
||||||
|
port = "unknown"
|
||||||
|
} else {
|
||||||
|
_, port, _ = net.SplitHostPort(ctx.Request.RemoteAddr)
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
port = ctx.GetHeader(setting.App.TrustedPortHeader)
|
||||||
|
if port == "" {
|
||||||
|
port = "unknown"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
return port
|
||||||
|
}
|
||||||
|
|
||||||
func getClientPortAsString(ctx *gin.Context) {
|
func getClientPortAsString(ctx *gin.Context) {
|
||||||
_, port, _ := net.SplitHostPort(ctx.Request.RemoteAddr)
|
ctx.String(http.StatusOK, getClientPort(ctx)+"\n")
|
||||||
ctx.String(http.StatusOK, port+"\n")
|
|
||||||
}
|
}
|
||||||
|
|
||||||
func getAllAsString(ctx *gin.Context) {
|
func getAllAsString(ctx *gin.Context) {
|
||||||
output := "IP: " + ctx.ClientIP() + "\n"
|
output := "IP: " + ctx.ClientIP() + "\n"
|
||||||
_, port, _ := net.SplitHostPort(ctx.Request.RemoteAddr)
|
output += "Client Port: " + getClientPort(ctx) + "\n"
|
||||||
output += "Client Port: " + port + "\n"
|
|
||||||
|
|
||||||
r := service.Geo{IP: net.ParseIP(ctx.ClientIP())}
|
r := service.Geo{IP: net.ParseIP(ctx.ClientIP())}
|
||||||
if record := r.LookUpCity(); record != nil {
|
if record := r.LookUpCity(); record != nil {
|
||||||
|
@ -63,8 +78,8 @@ func getAllAsString(ctx *gin.Context) {
|
||||||
output += geoASNRecordToString(record) + "\n"
|
output += geoASNRecordToString(record) + "\n"
|
||||||
}
|
}
|
||||||
|
|
||||||
h := ctx.Request.Header
|
h := httputils.GetHeadersWithoutTrustedHeaders(ctx)
|
||||||
h["Host"] = []string{ctx.Request.Host}
|
h.Set("Host", ctx.Request.Host)
|
||||||
output += httputils.HeadersToSortedString(h)
|
output += httputils.HeadersToSortedString(h)
|
||||||
|
|
||||||
ctx.String(http.StatusOK, output)
|
ctx.String(http.StatusOK, output)
|
||||||
|
@ -83,11 +98,10 @@ func jsonOutput(ctx *gin.Context) JSONResponse {
|
||||||
version = 6
|
version = 6
|
||||||
}
|
}
|
||||||
|
|
||||||
_, port, _ := net.SplitHostPort(ctx.Request.RemoteAddr)
|
|
||||||
return JSONResponse{
|
return JSONResponse{
|
||||||
IP: ctx.ClientIP(),
|
IP: ctx.ClientIP(),
|
||||||
IPVersion: version,
|
IPVersion: version,
|
||||||
ClientPort: port,
|
ClientPort: getClientPort(ctx),
|
||||||
Country: cityRecord.Country.Names["en"],
|
Country: cityRecord.Country.Names["en"],
|
||||||
CountryCode: cityRecord.Country.ISOCode,
|
CountryCode: cityRecord.Country.ISOCode,
|
||||||
City: cityRecord.City.Names["en"],
|
City: cityRecord.City.Names["en"],
|
||||||
|
@ -98,6 +112,6 @@ func jsonOutput(ctx *gin.Context) JSONResponse {
|
||||||
ASN: asnRecord.AutonomousSystemNumber,
|
ASN: asnRecord.AutonomousSystemNumber,
|
||||||
ASNOrganization: asnRecord.AutonomousSystemOrganization,
|
ASNOrganization: asnRecord.AutonomousSystemOrganization,
|
||||||
Host: ctx.Request.Host,
|
Host: ctx.Request.Host,
|
||||||
Headers: ctx.Request.Header,
|
Headers: httputils.GetHeadersWithoutTrustedHeaders(ctx),
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
|
@ -6,6 +6,7 @@ import (
|
||||||
"net/http/httptest"
|
"net/http/httptest"
|
||||||
"testing"
|
"testing"
|
||||||
|
|
||||||
|
"github.com/dcarrillo/whatismyip/internal/setting"
|
||||||
"github.com/stretchr/testify/assert"
|
"github.com/stretchr/testify/assert"
|
||||||
)
|
)
|
||||||
|
|
||||||
|
@ -97,16 +98,76 @@ func TestHost(t *testing.T) {
|
||||||
}
|
}
|
||||||
|
|
||||||
func TestClientPort(t *testing.T) {
|
func TestClientPort(t *testing.T) {
|
||||||
req, _ := http.NewRequest("GET", "/client-port", nil)
|
type args struct {
|
||||||
req.RemoteAddr = net.JoinHostPort(testIP.ipv4, "1000")
|
params []string
|
||||||
req.Header.Set(trustedHeader, testIP.ipv4)
|
headers map[string][]string
|
||||||
|
}
|
||||||
|
tests := []struct {
|
||||||
|
name string
|
||||||
|
args args
|
||||||
|
expected string
|
||||||
|
}{
|
||||||
|
{
|
||||||
|
name: "No trusted headers set",
|
||||||
|
expected: "1000\n",
|
||||||
|
},
|
||||||
|
{
|
||||||
|
name: "Trusted header only set",
|
||||||
|
args: args{
|
||||||
|
params: []string{
|
||||||
|
"-geoip2-city", "city",
|
||||||
|
"-geoip2-asn", "asn",
|
||||||
|
"-trusted-header", trustedHeader,
|
||||||
|
},
|
||||||
|
},
|
||||||
|
expected: "unknown\n",
|
||||||
|
},
|
||||||
|
{
|
||||||
|
name: "Trusted and port header set but not included in headers",
|
||||||
|
args: args{
|
||||||
|
params: []string{
|
||||||
|
"-geoip2-city", "city",
|
||||||
|
"-geoip2-asn", "asn",
|
||||||
|
"-trusted-header", trustedHeader,
|
||||||
|
"-trusted-port-header", trustedPortHeader,
|
||||||
|
},
|
||||||
|
},
|
||||||
|
expected: "unknown\n",
|
||||||
|
},
|
||||||
|
{
|
||||||
|
name: "Trusted and port header set and included in headers",
|
||||||
|
args: args{
|
||||||
|
params: []string{
|
||||||
|
"-geoip2-city", "city",
|
||||||
|
"-geoip2-asn", "asn",
|
||||||
|
"-trusted-header", trustedHeader,
|
||||||
|
"-trusted-port-header", trustedPortHeader,
|
||||||
|
},
|
||||||
|
headers: map[string][]string{
|
||||||
|
trustedHeader: {testIP.ipv4},
|
||||||
|
trustedPortHeader: {"1001"},
|
||||||
|
},
|
||||||
|
},
|
||||||
|
expected: "1001\n",
|
||||||
|
},
|
||||||
|
}
|
||||||
|
|
||||||
w := httptest.NewRecorder()
|
for _, tt := range tests {
|
||||||
app.ServeHTTP(w, req)
|
_, _ = setting.Setup(tt.args.params)
|
||||||
|
t.Run(tt.name, func(t *testing.T) {
|
||||||
|
req, _ := http.NewRequest("GET", "/client-port", nil)
|
||||||
|
req.RemoteAddr = net.JoinHostPort(testIP.ipv4, "1000")
|
||||||
|
req.Header = tt.args.headers
|
||||||
|
|
||||||
assert.Equal(t, 200, w.Code)
|
w := httptest.NewRecorder()
|
||||||
assert.Equal(t, contentType.text, w.Header().Get("Content-Type"))
|
app.ServeHTTP(w, req)
|
||||||
assert.Equal(t, "1000\n", w.Body.String())
|
|
||||||
|
assert.Equal(t, 200, w.Code)
|
||||||
|
assert.Equal(t, contentType.text, w.Header().Get("Content-Type"))
|
||||||
|
assert.Equal(t, tt.expected, w.Body.String())
|
||||||
|
t.Log(w.Header())
|
||||||
|
})
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
func TestNotFound(t *testing.T) {
|
func TestNotFound(t *testing.T) {
|
||||||
|
@ -120,6 +181,15 @@ func TestNotFound(t *testing.T) {
|
||||||
}
|
}
|
||||||
|
|
||||||
func TestJSON(t *testing.T) {
|
func TestJSON(t *testing.T) {
|
||||||
|
_, _ = setting.Setup(
|
||||||
|
[]string{
|
||||||
|
"-geoip2-city", "city",
|
||||||
|
"-geoip2-asn", "asn",
|
||||||
|
"-trusted-header", trustedHeader,
|
||||||
|
"-trusted-port-header", trustedPortHeader,
|
||||||
|
},
|
||||||
|
)
|
||||||
|
|
||||||
type args struct {
|
type args struct {
|
||||||
ip string
|
ip string
|
||||||
}
|
}
|
||||||
|
@ -149,6 +219,7 @@ func TestJSON(t *testing.T) {
|
||||||
req.RemoteAddr = net.JoinHostPort(tt.args.ip, "1000")
|
req.RemoteAddr = net.JoinHostPort(tt.args.ip, "1000")
|
||||||
req.Host = "test"
|
req.Host = "test"
|
||||||
req.Header.Set(trustedHeader, tt.args.ip)
|
req.Header.Set(trustedHeader, tt.args.ip)
|
||||||
|
req.Header.Set(trustedPortHeader, "1001")
|
||||||
|
|
||||||
w := httptest.NewRecorder()
|
w := httptest.NewRecorder()
|
||||||
app.ServeHTTP(w, req)
|
app.ServeHTTP(w, req)
|
||||||
|
@ -162,7 +233,7 @@ func TestJSON(t *testing.T) {
|
||||||
|
|
||||||
func TestAll(t *testing.T) {
|
func TestAll(t *testing.T) {
|
||||||
expected := `IP: 81.2.69.192
|
expected := `IP: 81.2.69.192
|
||||||
Client Port: 1000
|
Client Port: 1001
|
||||||
City: London
|
City: London
|
||||||
Country: United Kingdom
|
Country: United Kingdom
|
||||||
Country Code: GB
|
Country Code: GB
|
||||||
|
@ -176,13 +247,21 @@ ASN Organization:
|
||||||
|
|
||||||
Header1: one
|
Header1: one
|
||||||
Host: test
|
Host: test
|
||||||
X-Real-Ip: 81.2.69.192
|
|
||||||
`
|
`
|
||||||
|
_, _ = setting.Setup(
|
||||||
|
[]string{
|
||||||
|
"-geoip2-city", "city",
|
||||||
|
"-geoip2-asn", "asn",
|
||||||
|
"-trusted-header", trustedHeader,
|
||||||
|
"-trusted-port-header", trustedPortHeader,
|
||||||
|
},
|
||||||
|
)
|
||||||
|
|
||||||
req, _ := http.NewRequest("GET", "/all", nil)
|
req, _ := http.NewRequest("GET", "/all", nil)
|
||||||
req.RemoteAddr = net.JoinHostPort(testIP.ipv4, "1000")
|
req.RemoteAddr = net.JoinHostPort(testIP.ipv4, "1000")
|
||||||
req.Host = "test"
|
req.Host = "test"
|
||||||
req.Header.Set(trustedHeader, testIP.ipv4)
|
req.Header.Set(trustedHeader, testIP.ipv4)
|
||||||
|
req.Header.Set(trustedPortHeader, "1001")
|
||||||
req.Header.Set("Header1", "one")
|
req.Header.Set("Header1", "one")
|
||||||
|
|
||||||
w := httptest.NewRecorder()
|
w := httptest.NewRecorder()
|
||||||
|
|
|
@ -10,15 +10,17 @@ import (
|
||||||
)
|
)
|
||||||
|
|
||||||
func getHeadersAsSortedString(ctx *gin.Context) {
|
func getHeadersAsSortedString(ctx *gin.Context) {
|
||||||
h := ctx.Request.Header
|
h := httputils.GetHeadersWithoutTrustedHeaders(ctx)
|
||||||
h["Host"] = []string{ctx.Request.Host}
|
h.Set("Host", ctx.Request.Host)
|
||||||
|
|
||||||
ctx.String(http.StatusOK, httputils.HeadersToSortedString(h))
|
ctx.String(http.StatusOK, httputils.HeadersToSortedString(h))
|
||||||
}
|
}
|
||||||
|
|
||||||
func getHeaderAsString(ctx *gin.Context) {
|
func getHeaderAsString(ctx *gin.Context) {
|
||||||
|
headers := httputils.GetHeadersWithoutTrustedHeaders(ctx)
|
||||||
|
|
||||||
h := ctx.Params.ByName("header")
|
h := ctx.Params.ByName("header")
|
||||||
if v := ctx.GetHeader(h); v != "" {
|
if v := headers.Get(ctx.Params.ByName("header")); v != "" {
|
||||||
ctx.String(http.StatusOK, template.HTMLEscapeString(v))
|
ctx.String(http.StatusOK, template.HTMLEscapeString(v))
|
||||||
} else if strings.ToLower(h) == "host" {
|
} else if strings.ToLower(h) == "host" {
|
||||||
ctx.String(http.StatusOK, template.HTMLEscapeString(ctx.Request.Host))
|
ctx.String(http.StatusOK, template.HTMLEscapeString(ctx.Request.Host))
|
||||||
|
|
|
@ -5,6 +5,7 @@ import (
|
||||||
"net/http/httptest"
|
"net/http/httptest"
|
||||||
"testing"
|
"testing"
|
||||||
|
|
||||||
|
"github.com/dcarrillo/whatismyip/internal/setting"
|
||||||
"github.com/stretchr/testify/assert"
|
"github.com/stretchr/testify/assert"
|
||||||
)
|
)
|
||||||
|
|
||||||
|
@ -26,13 +27,20 @@ Header2: value22
|
||||||
Header3: value3
|
Header3: value3
|
||||||
Host:
|
Host:
|
||||||
`
|
`
|
||||||
|
_, _ = setting.Setup([]string{
|
||||||
|
"-geoip2-city", "city",
|
||||||
|
"-geoip2-asn", "asn",
|
||||||
|
"-trusted-header", trustedHeader,
|
||||||
|
"-trusted-port-header", trustedPortHeader,
|
||||||
|
})
|
||||||
req, _ := http.NewRequest("GET", "/headers", nil)
|
req, _ := http.NewRequest("GET", "/headers", nil)
|
||||||
req.Header = map[string][]string{
|
req.Header = map[string][]string{
|
||||||
"Header1": {"value1"},
|
"Header1": {"value1"},
|
||||||
"Header2": {"value21", "value22"},
|
"Header2": {"value21", "value22"},
|
||||||
"Header3": {"value3"},
|
"Header3": {"value3"},
|
||||||
}
|
}
|
||||||
|
req.Header.Set(trustedHeader, "1.1.1.1")
|
||||||
|
req.Header.Set(trustedPortHeader, "1025")
|
||||||
|
|
||||||
w := httptest.NewRecorder()
|
w := httptest.NewRecorder()
|
||||||
app.ServeHTTP(w, req)
|
app.ServeHTTP(w, req)
|
||||||
|
|
|
@ -0,0 +1,54 @@
|
||||||
|
package router
|
||||||
|
|
||||||
|
import (
|
||||||
|
"fmt"
|
||||||
|
"net"
|
||||||
|
"net/http"
|
||||||
|
"strconv"
|
||||||
|
|
||||||
|
"github.com/dcarrillo/whatismyip/service"
|
||||||
|
"github.com/gin-gonic/gin"
|
||||||
|
)
|
||||||
|
|
||||||
|
type JSONScanResponse struct {
|
||||||
|
IP string `json:"ip"`
|
||||||
|
Port int `json:"port"`
|
||||||
|
Reachable bool `json:"reachable"`
|
||||||
|
Reason string `json:"reason"`
|
||||||
|
}
|
||||||
|
|
||||||
|
func scanTCPPort(ctx *gin.Context) {
|
||||||
|
port, err := strconv.Atoi(ctx.Params.ByName("port"))
|
||||||
|
if err == nil && (port < 1 || port > 65535) {
|
||||||
|
err = fmt.Errorf("%d is not a valid port number", port)
|
||||||
|
}
|
||||||
|
if err != nil {
|
||||||
|
ctx.JSON(http.StatusBadRequest, JSONScanResponse{
|
||||||
|
Reason: err.Error(),
|
||||||
|
})
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
add := net.TCPAddr{
|
||||||
|
IP: net.ParseIP(ctx.ClientIP()),
|
||||||
|
Port: port,
|
||||||
|
}
|
||||||
|
|
||||||
|
scan := service.PortScanner{
|
||||||
|
Address: &add,
|
||||||
|
}
|
||||||
|
|
||||||
|
isOpen, err := scan.IsPortOpen()
|
||||||
|
reason := ""
|
||||||
|
if err != nil {
|
||||||
|
reason = err.Error()
|
||||||
|
}
|
||||||
|
|
||||||
|
response := JSONScanResponse{
|
||||||
|
IP: ctx.ClientIP(),
|
||||||
|
Port: port,
|
||||||
|
Reachable: isOpen,
|
||||||
|
Reason: reason,
|
||||||
|
}
|
||||||
|
ctx.JSON(http.StatusOK, response)
|
||||||
|
}
|
|
@ -8,7 +8,6 @@ import (
|
||||||
"github.com/gin-gonic/gin"
|
"github.com/gin-gonic/gin"
|
||||||
)
|
)
|
||||||
|
|
||||||
// SetupTemplate reads and parses a template from file
|
|
||||||
func SetupTemplate(r *gin.Engine) {
|
func SetupTemplate(r *gin.Engine) {
|
||||||
if setting.App.TemplatePath == "" {
|
if setting.App.TemplatePath == "" {
|
||||||
t, _ := template.New("home").Parse(home)
|
t, _ := template.New("home").Parse(home)
|
||||||
|
@ -19,9 +18,9 @@ func SetupTemplate(r *gin.Engine) {
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
// Setup defines the endpoints
|
|
||||||
func Setup(r *gin.Engine) {
|
func Setup(r *gin.Engine) {
|
||||||
r.GET("/", getRoot)
|
r.GET("/", getRoot)
|
||||||
|
r.GET("/scan/tcp/:port", scanTCPPort)
|
||||||
r.GET("/client-port", getClientPortAsString)
|
r.GET("/client-port", getClientPortAsString)
|
||||||
r.GET("/geo", getGeoAsString)
|
r.GET("/geo", getGeoAsString)
|
||||||
r.GET("/geo/:field", getGeoAsString)
|
r.GET("/geo/:field", getGeoAsString)
|
||||||
|
|
|
@ -34,11 +34,17 @@ var (
|
||||||
text: "text/plain; charset=utf-8",
|
text: "text/plain; charset=utf-8",
|
||||||
json: "application/json; charset=utf-8",
|
json: "application/json; charset=utf-8",
|
||||||
}
|
}
|
||||||
jsonIPv4 = `{"client_port":"1000","ip":"81.2.69.192","ip_version":4,"country":"United Kingdom","country_code":"GB","city":"London","latitude":51.5142,"longitude":-0.0931,"postal_code":"","time_zone":"Europe/London","asn":0,"asn_organization":"","host":"test","headers":{"X-Real-Ip":["81.2.69.192"]}}`
|
jsonIPv4 = `{"client_port":"1001","ip":"81.2.69.192","ip_version":4,"country":"United Kingdom","country_code":"GB","city":"London","latitude":51.5142,"longitude":-0.0931,"postal_code":"","time_zone":"Europe/London","asn":0,"asn_organization":"","host":"test", "headers": {}}`
|
||||||
jsonIPv6 = `{"asn":3352, "asn_organization":"TELEFONICA DE ESPANA", "city":"", "client_port":"1000", "country":"", "country_code":"", "headers":{"X-Real-Ip":["2a02:9000::1"]}, "host":"test", "ip":"2a02:9000::1", "ip_version":6, "latitude":0, "longitude":0, "postal_code":"", "time_zone":""}`
|
jsonIPv6 = `{"asn":3352, "asn_organization":"TELEFONICA DE ESPANA", "city":"", "client_port":"1001", "country":"", "country_code":"", "host":"test", "ip":"2a02:9000::1", "ip_version":6, "latitude":0, "longitude":0, "postal_code":"", "time_zone":"", "headers": {}}`
|
||||||
|
jsonDNSIPv4 = `{"dns":{"ip":"81.2.69.192","country":"United Kingdom","provider":""}}`
|
||||||
|
plainDNSIPv4 = "81.2.69.192 (United Kingdom / )\n"
|
||||||
)
|
)
|
||||||
|
|
||||||
const trustedHeader = "X-Real-IP"
|
const (
|
||||||
|
trustedHeader = "X-Real-IP"
|
||||||
|
trustedPortHeader = "X-Real-Port"
|
||||||
|
domain = "dns.example.com"
|
||||||
|
)
|
||||||
|
|
||||||
func TestMain(m *testing.M) {
|
func TestMain(m *testing.M) {
|
||||||
app = gin.Default()
|
app = gin.Default()
|
||||||
|
|
|
@ -0,0 +1,48 @@
|
||||||
|
package server
|
||||||
|
|
||||||
|
import (
|
||||||
|
"context"
|
||||||
|
"log"
|
||||||
|
"strconv"
|
||||||
|
|
||||||
|
"github.com/miekg/dns"
|
||||||
|
)
|
||||||
|
|
||||||
|
const port = 53
|
||||||
|
|
||||||
|
type DNS struct {
|
||||||
|
server *dns.Server
|
||||||
|
handler *dns.Handler
|
||||||
|
ctx context.Context
|
||||||
|
}
|
||||||
|
|
||||||
|
func NewDNSServer(ctx context.Context, handler dns.Handler) *DNS {
|
||||||
|
return &DNS{
|
||||||
|
handler: &handler,
|
||||||
|
ctx: ctx,
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func (d *DNS) Start() {
|
||||||
|
d.server = &dns.Server{
|
||||||
|
Addr: ":" + strconv.Itoa(port),
|
||||||
|
Net: "udp",
|
||||||
|
Handler: *d.handler,
|
||||||
|
// UDPSize: 65535,
|
||||||
|
// ReusePort: true,
|
||||||
|
}
|
||||||
|
|
||||||
|
log.Printf("Starting DNS server listening on :%d (udp)", port)
|
||||||
|
go func() {
|
||||||
|
if err := d.server.ListenAndServe(); err != nil {
|
||||||
|
log.Fatal(err)
|
||||||
|
}
|
||||||
|
}()
|
||||||
|
}
|
||||||
|
|
||||||
|
func (d *DNS) Stop() {
|
||||||
|
log.Printf("Stopping DNS server...")
|
||||||
|
if err := d.server.Shutdown(); err != nil {
|
||||||
|
log.Printf("DNS server forced to shutdown: %s", err)
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,55 @@
|
||||||
|
package server
|
||||||
|
|
||||||
|
import (
|
||||||
|
"context"
|
||||||
|
"errors"
|
||||||
|
"log"
|
||||||
|
"net/http"
|
||||||
|
|
||||||
|
"github.com/dcarrillo/whatismyip/internal/setting"
|
||||||
|
"github.com/quic-go/quic-go/http3"
|
||||||
|
)
|
||||||
|
|
||||||
|
type Quic struct {
|
||||||
|
server *http3.Server
|
||||||
|
tlsServer *TLS
|
||||||
|
ctx context.Context
|
||||||
|
}
|
||||||
|
|
||||||
|
func NewQuicServer(ctx context.Context, tlsServer *TLS) *Quic {
|
||||||
|
return &Quic{
|
||||||
|
tlsServer: tlsServer,
|
||||||
|
ctx: ctx,
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func (q *Quic) Start() {
|
||||||
|
q.server = &http3.Server{
|
||||||
|
Addr: setting.App.TLSAddress,
|
||||||
|
Handler: q.tlsServer.server.Handler,
|
||||||
|
}
|
||||||
|
|
||||||
|
parentHandler := q.tlsServer.server.Handler
|
||||||
|
q.tlsServer.server.Handler = http.HandlerFunc(func(rw http.ResponseWriter, req *http.Request) {
|
||||||
|
if err := q.server.SetQUICHeaders(rw.Header()); err != nil {
|
||||||
|
log.Fatal(err)
|
||||||
|
}
|
||||||
|
|
||||||
|
parentHandler.ServeHTTP(rw, req)
|
||||||
|
})
|
||||||
|
|
||||||
|
log.Printf("Starting QUIC server listening on %s (udp)", setting.App.TLSAddress)
|
||||||
|
go func() {
|
||||||
|
if err := q.server.ListenAndServeTLS(setting.App.TLSCrtPath, setting.App.TLSKeyPath); err != nil &&
|
||||||
|
!errors.Is(err, http.ErrServerClosed) {
|
||||||
|
log.Fatal(err)
|
||||||
|
}
|
||||||
|
}()
|
||||||
|
}
|
||||||
|
|
||||||
|
func (q *Quic) Stop() {
|
||||||
|
log.Printf("Stopping QUIC server...")
|
||||||
|
if err := q.server.Close(); err != nil {
|
||||||
|
log.Printf("QUIC server forced to shutdown")
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,62 @@
|
||||||
|
package server
|
||||||
|
|
||||||
|
import (
|
||||||
|
"log"
|
||||||
|
"os"
|
||||||
|
"os/signal"
|
||||||
|
"syscall"
|
||||||
|
|
||||||
|
"github.com/dcarrillo/whatismyip/internal/setting"
|
||||||
|
"github.com/dcarrillo/whatismyip/models"
|
||||||
|
)
|
||||||
|
|
||||||
|
type Server interface {
|
||||||
|
Start()
|
||||||
|
Stop()
|
||||||
|
}
|
||||||
|
|
||||||
|
type Manager struct {
|
||||||
|
servers []Server
|
||||||
|
}
|
||||||
|
|
||||||
|
func Setup(servers []Server) *Manager {
|
||||||
|
return &Manager{
|
||||||
|
servers: servers,
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func (m *Manager) Run() {
|
||||||
|
m.start()
|
||||||
|
|
||||||
|
models.Setup(setting.App.GeodbPath.City, setting.App.GeodbPath.ASN)
|
||||||
|
signalChan := make(chan os.Signal, len(m.servers))
|
||||||
|
signal.Notify(signalChan, syscall.SIGHUP, syscall.SIGINT, syscall.SIGTERM)
|
||||||
|
var s os.Signal
|
||||||
|
for {
|
||||||
|
s = <-signalChan
|
||||||
|
|
||||||
|
if s == syscall.SIGHUP {
|
||||||
|
m.stop()
|
||||||
|
models.CloseDBs()
|
||||||
|
models.Setup(setting.App.GeodbPath.City, setting.App.GeodbPath.ASN)
|
||||||
|
m.start()
|
||||||
|
} else {
|
||||||
|
log.Printf("Shutting down...")
|
||||||
|
m.stop()
|
||||||
|
models.CloseDBs()
|
||||||
|
break
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func (m *Manager) start() {
|
||||||
|
for _, s := range m.servers {
|
||||||
|
s.Start()
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func (m *Manager) stop() {
|
||||||
|
for _, s := range m.servers {
|
||||||
|
s.Stop()
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,46 @@
|
||||||
|
package server
|
||||||
|
|
||||||
|
import (
|
||||||
|
"context"
|
||||||
|
"errors"
|
||||||
|
"log"
|
||||||
|
"net/http"
|
||||||
|
|
||||||
|
"github.com/dcarrillo/whatismyip/internal/setting"
|
||||||
|
)
|
||||||
|
|
||||||
|
type TCP struct {
|
||||||
|
server *http.Server
|
||||||
|
handler *http.Handler
|
||||||
|
ctx context.Context
|
||||||
|
}
|
||||||
|
|
||||||
|
func NewTCPServer(ctx context.Context, handler *http.Handler) *TCP {
|
||||||
|
return &TCP{
|
||||||
|
handler: handler,
|
||||||
|
ctx: ctx,
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func (t *TCP) Start() {
|
||||||
|
t.server = &http.Server{
|
||||||
|
Addr: setting.App.BindAddress,
|
||||||
|
Handler: *t.handler,
|
||||||
|
ReadTimeout: setting.App.Server.ReadTimeout,
|
||||||
|
WriteTimeout: setting.App.Server.WriteTimeout,
|
||||||
|
}
|
||||||
|
|
||||||
|
log.Printf("Starting TCP server listening on %s", setting.App.BindAddress)
|
||||||
|
go func() {
|
||||||
|
if err := t.server.ListenAndServe(); err != nil && !errors.Is(err, http.ErrServerClosed) {
|
||||||
|
log.Fatal(err)
|
||||||
|
}
|
||||||
|
}()
|
||||||
|
}
|
||||||
|
|
||||||
|
func (t *TCP) Stop() {
|
||||||
|
log.Printf("Stopping TCP server...")
|
||||||
|
if err := t.server.Shutdown(t.ctx); err != nil {
|
||||||
|
log.Printf("TCP server forced to shutdown: %s", err)
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,47 @@
|
||||||
|
package server
|
||||||
|
|
||||||
|
import (
|
||||||
|
"context"
|
||||||
|
"errors"
|
||||||
|
"log"
|
||||||
|
"net/http"
|
||||||
|
|
||||||
|
"github.com/dcarrillo/whatismyip/internal/setting"
|
||||||
|
)
|
||||||
|
|
||||||
|
type TLS struct {
|
||||||
|
server *http.Server
|
||||||
|
handler *http.Handler
|
||||||
|
ctx context.Context
|
||||||
|
}
|
||||||
|
|
||||||
|
func NewTLSServer(ctx context.Context, handler *http.Handler) *TLS {
|
||||||
|
return &TLS{
|
||||||
|
handler: handler,
|
||||||
|
ctx: ctx,
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func (t *TLS) Start() {
|
||||||
|
t.server = &http.Server{
|
||||||
|
Addr: setting.App.TLSAddress,
|
||||||
|
Handler: *t.handler,
|
||||||
|
ReadTimeout: setting.App.Server.ReadTimeout,
|
||||||
|
WriteTimeout: setting.App.Server.WriteTimeout,
|
||||||
|
}
|
||||||
|
|
||||||
|
log.Printf("Starting TLS server listening on %s", setting.App.TLSAddress)
|
||||||
|
go func() {
|
||||||
|
if err := t.server.ListenAndServeTLS(setting.App.TLSCrtPath, setting.App.TLSKeyPath); err != nil &&
|
||||||
|
!errors.Is(err, http.ErrServerClosed) {
|
||||||
|
log.Fatal(err)
|
||||||
|
}
|
||||||
|
}()
|
||||||
|
}
|
||||||
|
|
||||||
|
func (t *TLS) Stop() {
|
||||||
|
log.Printf("Stopping TLS server...")
|
||||||
|
if err := t.server.Shutdown(t.ctx); err != nil {
|
||||||
|
log.Printf("TLS server forced to shutdown: %s", err)
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,24 @@
|
||||||
|
package service
|
||||||
|
|
||||||
|
import (
|
||||||
|
"net"
|
||||||
|
"time"
|
||||||
|
)
|
||||||
|
|
||||||
|
const scannerTimeOut = 3 * time.Second
|
||||||
|
|
||||||
|
type PortScanner struct {
|
||||||
|
Address net.Addr
|
||||||
|
}
|
||||||
|
|
||||||
|
func (p *PortScanner) IsPortOpen() (bool, error) {
|
||||||
|
conn, err := net.DialTimeout(p.Address.Network(), p.Address.String(), scannerTimeOut)
|
||||||
|
if err != nil {
|
||||||
|
return false, err
|
||||||
|
}
|
||||||
|
if conn != nil {
|
||||||
|
defer conn.Close()
|
||||||
|
}
|
||||||
|
|
||||||
|
return true, nil
|
||||||
|
}
|
|
@ -0,0 +1,15 @@
|
||||||
|
FROM golang:1.22-alpine as builder
|
||||||
|
|
||||||
|
ARG ARG_VERSION
|
||||||
|
ENV VERSION $ARG_VERSION
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
COPY . .
|
||||||
|
|
||||||
|
FROM builder AS build-test-app
|
||||||
|
RUN CGO_ENABLED=0 \
|
||||||
|
go build -ldflags="-s -w" -o whatismyip ./cmd
|
||||||
|
|
||||||
|
FROM scratch AS test
|
||||||
|
COPY --from=build-test-app /app/whatismyip /usr/bin/
|
||||||
|
ENTRYPOINT ["whatismyip"]
|
|
@ -0,0 +1,10 @@
|
||||||
|
---
|
||||||
|
domain: dns.example.com
|
||||||
|
redirect_port: ":8000"
|
||||||
|
resource_records:
|
||||||
|
- "1800 IN SOA xns.example.com. hostmaster.example.com. 1 10000 2400 604800 1800"
|
||||||
|
- "3600 IN NS xns.example.com."
|
||||||
|
ipv4:
|
||||||
|
- "127.0.0.2"
|
||||||
|
ipv6:
|
||||||
|
- "aaa:aaa:aaa:aaaa::1"
|
Loading…
Reference in New Issue