mirror of
https://github.com/dcarrillo/whatismyip.git
synced 2024-07-01 19:20:28 +00:00
Compare commits
No commits in common. "main" and "1.0.7" have entirely different histories.
52
.github/workflows/codeql-analysis.yml
vendored
52
.github/workflows/codeql-analysis.yml
vendored
|
@ -1,52 +0,0 @@
|
||||||
# For most projects, this workflow file will not need changing; you simply need
|
|
||||||
# to commit it to your repository.
|
|
||||||
#
|
|
||||||
# You may wish to alter this file to override the set of languages analyzed,
|
|
||||||
# or to provide custom queries or build logic.
|
|
||||||
#
|
|
||||||
# ******** NOTE ********
|
|
||||||
# We have attempted to detect the languages in your repository. Please check
|
|
||||||
# the `language` matrix defined below to confirm you have the correct set of
|
|
||||||
# supported CodeQL languages.
|
|
||||||
#
|
|
||||||
name: "CodeQL"
|
|
||||||
|
|
||||||
on:
|
|
||||||
push:
|
|
||||||
branches: [ "main" ]
|
|
||||||
pull_request:
|
|
||||||
# The branches below must be a subset of the branches above
|
|
||||||
branches: [ "main" ]
|
|
||||||
schedule:
|
|
||||||
- cron: '21 21 * * 0'
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
analyze:
|
|
||||||
name: Analyze
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
permissions:
|
|
||||||
actions: read
|
|
||||||
contents: read
|
|
||||||
security-events: write
|
|
||||||
|
|
||||||
steps:
|
|
||||||
- name: Checkout repository
|
|
||||||
uses: actions/checkout@v4
|
|
||||||
|
|
||||||
- name: install go
|
|
||||||
uses: actions/setup-go@v5
|
|
||||||
with:
|
|
||||||
go-version-file: go.mod
|
|
||||||
cache: true
|
|
||||||
|
|
||||||
- name: Initialize CodeQL
|
|
||||||
uses: github/codeql-action/init@v3
|
|
||||||
with:
|
|
||||||
languages: go
|
|
||||||
|
|
||||||
- run: |
|
|
||||||
echo "Build"
|
|
||||||
make build
|
|
||||||
|
|
||||||
- name: Perform CodeQL Analysis
|
|
||||||
uses: github/codeql-action/analyze@v3
|
|
27
.github/workflows/main.yml
vendored
27
.github/workflows/main.yml
vendored
|
@ -8,24 +8,22 @@ on:
|
||||||
- '*'
|
- '*'
|
||||||
pull_request:
|
pull_request:
|
||||||
|
|
||||||
concurrency: ${{ github.ref_name }}
|
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
tests:
|
tests:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
strategy:
|
|
||||||
matrix:
|
|
||||||
make: ["lint", "unit-test", "integration-test"]
|
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v4
|
- uses: actions/checkout@v2.4.0
|
||||||
|
|
||||||
- name: install go
|
- name: install go
|
||||||
uses: actions/setup-go@v5
|
uses: actions/setup-go@v2
|
||||||
with:
|
with:
|
||||||
go-version-file: go.mod
|
go-version: "^1.18"
|
||||||
|
|
||||||
- name: ${{ matrix.make }}
|
- name: Lint
|
||||||
run: make ${{ matrix.make }}
|
run: make lint
|
||||||
|
|
||||||
|
- name: Tests
|
||||||
|
run: make test
|
||||||
|
|
||||||
deploy:
|
deploy:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
|
@ -35,14 +33,9 @@ jobs:
|
||||||
matrix:
|
matrix:
|
||||||
goosarch: [linux-amd64]
|
goosarch: [linux-amd64]
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v4
|
- uses: actions/checkout@v2.4.0
|
||||||
with:
|
with:
|
||||||
fetch-depth: 0
|
fetch-depth: 0
|
||||||
- name: install go
|
|
||||||
uses: actions/setup-go@v5
|
|
||||||
with:
|
|
||||||
go-version-file: go.mod
|
|
||||||
cache: true
|
|
||||||
|
|
||||||
- name: Set env
|
- name: Set env
|
||||||
run: echo "RELEASE_VERSION=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV
|
run: echo "RELEASE_VERSION=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV
|
||||||
|
@ -63,7 +56,7 @@ jobs:
|
||||||
sha256sum whatismyip-$RELEASE_VERSION-${{matrix.goosarch}}.tar.gz > whatismyip-$RELEASE_VERSION-${{matrix.goosarch}}.tar.gz.sha256
|
sha256sum whatismyip-$RELEASE_VERSION-${{matrix.goosarch}}.tar.gz > whatismyip-$RELEASE_VERSION-${{matrix.goosarch}}.tar.gz.sha256
|
||||||
|
|
||||||
- name: Release
|
- name: Release
|
||||||
uses: softprops/action-gh-release@v2
|
uses: softprops/action-gh-release@v0.1.14
|
||||||
with:
|
with:
|
||||||
body_path: changelog.txt
|
body_path: changelog.txt
|
||||||
files: |
|
files: |
|
||||||
|
|
1
.gitignore
vendored
1
.gitignore
vendored
|
@ -1 +0,0 @@
|
||||||
whatismyip
|
|
|
@ -1,49 +0,0 @@
|
||||||
---
|
|
||||||
run:
|
|
||||||
timeout: 10m
|
|
||||||
issues:
|
|
||||||
max-same-issues: 0
|
|
||||||
linters:
|
|
||||||
disable-all: true
|
|
||||||
enable:
|
|
||||||
- goimports
|
|
||||||
- ineffassign
|
|
||||||
- nakedret
|
|
||||||
- revive
|
|
||||||
- staticcheck
|
|
||||||
- stylecheck
|
|
||||||
- unconvert
|
|
||||||
- unparam
|
|
||||||
- unused
|
|
||||||
linters-settings:
|
|
||||||
staticcheck:
|
|
||||||
checks:
|
|
||||||
- all
|
|
||||||
revive:
|
|
||||||
ignore-generated-header: true
|
|
||||||
severity: warning
|
|
||||||
confidence: 0.8
|
|
||||||
rules:
|
|
||||||
- name: blank-imports
|
|
||||||
- name: context-as-argument
|
|
||||||
- name: context-keys-type
|
|
||||||
- name: dot-imports
|
|
||||||
- name: error-return
|
|
||||||
- name: error-strings
|
|
||||||
- name: error-naming
|
|
||||||
- name: exported
|
|
||||||
- name: increment-decrement
|
|
||||||
- name: var-naming
|
|
||||||
- name: var-declaration
|
|
||||||
- name: package-comments
|
|
||||||
- name: range
|
|
||||||
- name: receiver-naming
|
|
||||||
- name: time-naming
|
|
||||||
- name: unexported-return
|
|
||||||
- name: indent-error-flow
|
|
||||||
- name: errorf
|
|
||||||
- name: empty-block
|
|
||||||
- name: superfluous-else
|
|
||||||
- name: unused-parameter
|
|
||||||
- name: unreachable-code
|
|
||||||
- name: redefines-builtin-id
|
|
29
Dockerfile
29
Dockerfile
|
@ -1,28 +1,21 @@
|
||||||
FROM golang:1.22-alpine as builder
|
FROM golang:1.18-alpine as builder
|
||||||
|
|
||||||
ARG ARG_VERSION
|
ARG ARG_VERSION
|
||||||
ENV VERSION $ARG_VERSION
|
ENV VERSION $ARG_VERSION
|
||||||
|
|
||||||
WORKDIR /app
|
WORKDIR /app
|
||||||
COPY go.mod .
|
|
||||||
COPY go.sum .
|
|
||||||
RUN --mount=type=cache,target=/go/pkg/mod/ go mod download -x
|
|
||||||
COPY . .
|
COPY . .
|
||||||
|
|
||||||
FROM builder AS build-dev-app
|
RUN apk add make git && make build VERSION=$VERSION
|
||||||
# hadolint ignore=DL3018
|
|
||||||
RUN --mount=type=cache,target=/go/pkg/mod/ apk --no-cache add make && make build
|
|
||||||
|
|
||||||
FROM builder AS build-prod-app
|
# Build final image
|
||||||
# hadolint ignore=DL3018
|
FROM scratch
|
||||||
RUN --mount=type=cache,target=/go/pkg/mod/ apk --no-cache add make upx \
|
|
||||||
&& make build \
|
WORKDIR /app
|
||||||
&& upx --best --lzma whatismyip
|
|
||||||
|
COPY --from=builder /app/whatismyip /usr/bin/
|
||||||
|
|
||||||
|
EXPOSE 8080
|
||||||
|
|
||||||
FROM scratch AS dev
|
|
||||||
COPY --from=build-dev-app /app/whatismyip /usr/bin/
|
|
||||||
ENTRYPOINT ["whatismyip"]
|
|
||||||
|
|
||||||
FROM scratch AS prod
|
|
||||||
COPY --from=build-prod-app /app/whatismyip /usr/bin/
|
|
||||||
ENTRYPOINT ["whatismyip"]
|
ENTRYPOINT ["whatismyip"]
|
||||||
|
|
2
LICENSE
2
LICENSE
|
@ -176,7 +176,7 @@
|
||||||
|
|
||||||
END OF TERMS AND CONDITIONS
|
END OF TERMS AND CONDITIONS
|
||||||
|
|
||||||
Copyright 2024 Daniel Carrillo
|
Copyright 2021 Daniel Carrillo
|
||||||
|
|
||||||
Licensed under the Apache License, Version 2.0 (the "License");
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
you may not use this file except in compliance with the License.
|
you may not use this file except in compliance with the License.
|
||||||
|
|
35
Makefile
35
Makefile
|
@ -5,40 +5,44 @@ DOCKER_URL ?= dcarrillo/whatismyip
|
||||||
.PHONY: test
|
.PHONY: test
|
||||||
test: unit-test integration-test
|
test: unit-test integration-test
|
||||||
|
|
||||||
|
.PHONY: unit-test
|
||||||
unit-test:
|
unit-test:
|
||||||
go test -count=1 -race -short -cover ./...
|
go test -race -short -cover ./...
|
||||||
|
|
||||||
|
.PHONY: integration-test
|
||||||
integration-test:
|
integration-test:
|
||||||
go test -count=1 -v ./integration-tests
|
go test ./integration-tests -v
|
||||||
|
|
||||||
|
.PHONY: install-tools
|
||||||
install-tools:
|
install-tools:
|
||||||
@command golangci-lint > /dev/null 2>&1; if [ $$? -ne 0 ]; then \
|
@command golangci-lint > /dev/null 2>&1; if [ $$? -ne 0 ]; then \
|
||||||
curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(GOPATH)/bin; \
|
curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(GOPATH)/bin v1.45.0; \
|
||||||
fi
|
|
||||||
|
|
||||||
@command $(GOPATH)/revive > /dev/null 2>&1; if [ $$? -ne 0 ]; then \
|
|
||||||
go get -u github.com/mgechev/revive; \
|
|
||||||
fi
|
fi
|
||||||
|
|
||||||
@command $(GOPATH)/shadow > /dev/null 2>&1; if [ $$? -ne 0 ]; then \
|
@command $(GOPATH)/shadow > /dev/null 2>&1; if [ $$? -ne 0 ]; then \
|
||||||
go install golang.org/x/tools/go/analysis/passes/shadow/cmd/shadow@latest; \
|
go install golang.org/x/tools/go/analysis/passes/shadow/cmd/shadow@v0.1.10; \
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
@command $(GOPATH)/golines > /dev/null 2>&1; if [ $$? -ne 0 ]; then \
|
||||||
|
go install github.com/segmentio/golines@latest; \
|
||||||
|
fi
|
||||||
|
.PHONY: lint
|
||||||
lint: install-tools
|
lint: install-tools
|
||||||
gofmt -l . && test -z $$(gofmt -l .)
|
gofmt -l . && test -z $$(gofmt -l .)
|
||||||
|
golines -l . && test -z $$(golines -l .)
|
||||||
golangci-lint run
|
golangci-lint run
|
||||||
shadow ./...
|
shadow ./...
|
||||||
|
|
||||||
|
.PHONY: build
|
||||||
build:
|
build:
|
||||||
CGO_ENABLED=0 go build -ldflags="-s -w -X 'github.com/dcarrillo/whatismyip/internal/core.Version=${VERSION}'" -o whatismyip ./cmd
|
CGO_ENABLED=0 go build -ldflags="-s -w -X 'github.com/dcarrillo/whatismyip/internal/core.Version=${VERSION}'" -o whatismyip ./cmd
|
||||||
|
|
||||||
docker-build-dev:
|
.PHONY: docker-build
|
||||||
docker build --target=dev --build-arg=ARG_VERSION="${VERSION}" --tag ${DOCKER_URL}:${VERSION} .
|
docker-build:
|
||||||
|
docker build --build-arg=ARG_VERSION="${VERSION}" --tag ${DOCKER_URL}:${VERSION} .
|
||||||
|
|
||||||
docker-build-prod:
|
.PHONY: docker-push
|
||||||
docker build --target=prod --build-arg=ARG_VERSION="${VERSION}" --tag ${DOCKER_URL}:${VERSION} .
|
docker-push: docker-build
|
||||||
|
|
||||||
docker-push: docker-build-prod
|
|
||||||
ifneq (,$(findstring devel-,$(VERSION)))
|
ifneq (,$(findstring devel-,$(VERSION)))
|
||||||
@echo "VERSION is set to ${VERSION}, I can't push devel builds"
|
@echo "VERSION is set to ${VERSION}, I can't push devel builds"
|
||||||
exit 1
|
exit 1
|
||||||
|
@ -48,7 +52,8 @@ else
|
||||||
docker push ${DOCKER_URL}:latest
|
docker push ${DOCKER_URL}:latest
|
||||||
endif
|
endif
|
||||||
|
|
||||||
docker-run: docker-build-dev
|
.PHONY: docker-run
|
||||||
|
docker-run: docker-build
|
||||||
docker run --tty --interactive --rm \
|
docker run --tty --interactive --rm \
|
||||||
-v ${PWD}/test/GeoIP2-City-Test.mmdb:/tmp/GeoIP2-City-Test.mmdb:ro \
|
-v ${PWD}/test/GeoIP2-City-Test.mmdb:/tmp/GeoIP2-City-Test.mmdb:ro \
|
||||||
-v ${PWD}/test/GeoLite2-ASN-Test.mmdb:/tmp/GeoLite2-ASN-Test.mmdb:ro -p 8080:8080 \
|
-v ${PWD}/test/GeoLite2-ASN-Test.mmdb:/tmp/GeoLite2-ASN-Test.mmdb:ro -p 8080:8080 \
|
||||||
|
|
96
README.md
96
README.md
|
@ -1,7 +1,6 @@
|
||||||
# What is my IP address
|
# What is my IP address
|
||||||
|
|
||||||
[![CI](https://github.com/dcarrillo/whatismyip/workflows/CI/badge.svg)](https://github.com/dcarrillo/whatismyip/actions)
|
[![CI](https://github.com/dcarrillo/whatismyip/workflows/CI/badge.svg)](https://github.com/dcarrillo/whatismyip/actions)
|
||||||
[![CodeQL](https://github.com/dcarrillo/whatismyip/actions/workflows/codeql-analysis.yml/badge.svg)](https://github.com/dcarrillo/whatismyip/actions/workflows/codeql-analysis.yml)
|
|
||||||
[![Go Report Card](https://goreportcard.com/badge/github.com/dcarrillo/whatismyip)](https://goreportcard.com/report/github.com/dcarrillo/whatismyip)
|
[![Go Report Card](https://goreportcard.com/badge/github.com/dcarrillo/whatismyip)](https://goreportcard.com/report/github.com/dcarrillo/whatismyip)
|
||||||
[![GitHub release](https://img.shields.io/github/release/dcarrillo/whatismyip.svg)](https://github.com/dcarrillo/whatismyip/releases/)
|
[![GitHub release](https://img.shields.io/github/release/dcarrillo/whatismyip.svg)](https://github.com/dcarrillo/whatismyip/releases/)
|
||||||
[![License Apache 2.0](https://img.shields.io/badge/license-Apache%202.0-blue.svg)](./LICENSE)
|
[![License Apache 2.0](https://img.shields.io/badge/license-Apache%202.0-blue.svg)](./LICENSE)
|
||||||
|
@ -9,26 +8,20 @@
|
||||||
- [What is my IP address](#what-is-my-ip-address)
|
- [What is my IP address](#what-is-my-ip-address)
|
||||||
- [Features](#features)
|
- [Features](#features)
|
||||||
- [Endpoints](#endpoints)
|
- [Endpoints](#endpoints)
|
||||||
- [DNS discovery](#dns-discovery)
|
|
||||||
- [Build](#build)
|
- [Build](#build)
|
||||||
- [Usage](#usage)
|
- [Usage](#usage)
|
||||||
- [Examples](#examples)
|
- [Examples](#examples)
|
||||||
- [Run a default TCP server](#run-a-default-tcp-server)
|
- [Run a default TCP server](#run-a-default-tcp-server)
|
||||||
- [Run a TLS (HTTP/2) and enable What is my DNS](#run-a-tls-http2-and-enable-what-is-my-dns)
|
- [Run a TLS (HTTP/2) server only](#run-a-tls-http2-server-only)
|
||||||
- [Run an HTTP/3 server](#run-an-http3-server)
|
- [Run a default TCP server with a custom template and trust a custom header set by an upstream proxy](#run-a-default-tcp-server-with-a-custom-template-and-trust-a-custom-header-set-by-an-upstream-proxy)
|
||||||
- [Run a default TCP server with a custom template and trust a pair of custom headers set by an upstream proxy](#run-a-default-tcp-server-with-a-custom-template-and-trust-a-pair-of-custom-headers-set-by-an-upstream-proxy)
|
|
||||||
- [Download](#download)
|
- [Download](#download)
|
||||||
- [Docker](#docker)
|
- [Docker](#docker)
|
||||||
- [Run a container locally using test databases](#run-a-container-locally-using-test-databases)
|
- [Run a container locally using test databases](#run-a-container-locally-using-test-databases)
|
||||||
- [From Docker Hub](#from-docker-hub)
|
- [From Docker Hub](#from-docker-hub)
|
||||||
|
|
||||||
> [!NOTE]
|
Just another "what is my IP address" service, including geolocation and headers information, written in go with high performance in mind, it uses [gin](https://github.com/gin-gonic/gin) which uses [httprouter](https://github.com/julienschmidt/httprouter) a lightweight high performance HTTP multiplexer.
|
||||||
> Since version 2.3.0, the application includes an optional client [DNS discovery](#dns-discovery)
|
|
||||||
|
|
||||||
Just another "what is my IP address" service, including geolocation, TCP open port checking, and headers information. Written in go with high performance in mind,
|
Take a look at [ifconfig.es](https://ifconfig.es) a live site using `whatismyip`
|
||||||
it uses [gin](https://github.com/gin-gonic/gin) which uses [httprouter](https://github.com/julienschmidt/httprouter) a lightweight high performance HTTP multiplexer.
|
|
||||||
|
|
||||||
Take a look at [ifconfig.es](https://ifconfig.es) a live site using `whatismyip` and the `DNS discovery` enabled.
|
|
||||||
|
|
||||||
Get your public IP easily from the command line:
|
Get your public IP easily from the command line:
|
||||||
|
|
||||||
|
@ -40,31 +33,20 @@ curl -6 ifconfig.es
|
||||||
::1
|
::1
|
||||||
```
|
```
|
||||||
|
|
||||||
Get the IP of your DNS provider:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
curl -L dns.ifconfig.es
|
|
||||||
2a04:e4c0:47::67 (Spain / OPENDNS)
|
|
||||||
```
|
|
||||||
|
|
||||||
## Features
|
## Features
|
||||||
|
|
||||||
- TLS and HTTP/2.
|
- TLS and HTTP/2.
|
||||||
- Experimental HTTP/3 support. HTTP/3 requires a TLS server running (`-tls-bind`), as HTTP/3 starts as a TLS connection that then gets upgraded to UDP. The UDP port is the same as the one used for the TLS server.
|
- Can run behind a proxy by trusting a custom header (usually `X-Real-IP`) to figure out the source IP address.
|
||||||
- Beta DNS discovery: A best-effort approach to discovering the DNS server that is resolving the client's requests.
|
|
||||||
- Can run behind a proxy by trusting a custom header (usually `X-Real-IP`) to figure out the source IP address. It also supports a custom header to resolve the client port, if the proxy can only add a header for the IP (for example a fixed header from CDNs) the client port is shown as unknown.
|
|
||||||
- IPv4 and IPv6.
|
- IPv4 and IPv6.
|
||||||
- Geolocation info including ASN. This feature is possible thanks to [maxmind](https://dev.maxmind.com/geoip/geolite2-free-geolocation-data?lang=en) GeoLite2 databases. In order to use these databases, a license key is needed. Please visit Maxmind site for further instructions and get a free license.
|
- Geolocation info including ASN. This feature is possible thanks to [maxmind](https://dev.maxmind.com/geoip/geolite2-free-geolocation-data?lang=en) GeoLite2 databases. In order to use these databases, a license key is needed. Please visit Maxmind site for further instructions and get a free license.
|
||||||
- Checking TCP open ports.
|
|
||||||
- High performance.
|
- High performance.
|
||||||
- Self-contained server that can reload GeoLite2 databases and/or SSL certificates without stop/start. The `hup` signal is honored.
|
- Self-contained server what can reload GeoLite2 databases and/or SSL certificates without stop/start. The `hup` signal is honored.
|
||||||
- HTML templates for the landing page.
|
- HTML templates for the landing page.
|
||||||
- Text plain and JSON output.
|
- Text plain and JSON output.
|
||||||
|
|
||||||
## Endpoints
|
## Endpoints
|
||||||
|
|
||||||
- https://ifconfig.es/
|
- https://ifconfig.es/
|
||||||
- https://ifconfig.es/client-port
|
|
||||||
- https://ifconfig.es/json (this is the same as `curl -H "Accept: application/json" https://ifconfig.es/`)
|
- https://ifconfig.es/json (this is the same as `curl -H "Accept: application/json" https://ifconfig.es/`)
|
||||||
- https://ifconfig.es/geo
|
- https://ifconfig.es/geo
|
||||||
- https://ifconfig.es/geo/city
|
- https://ifconfig.es/geo/city
|
||||||
|
@ -80,61 +62,23 @@ curl -L dns.ifconfig.es
|
||||||
- https://ifconfig.es/all
|
- https://ifconfig.es/all
|
||||||
- https://ifconfig.es/headers
|
- https://ifconfig.es/headers
|
||||||
- https://ifconfig.es/<header_name>
|
- https://ifconfig.es/<header_name>
|
||||||
- https://ifconfig.es/scan/tcp/<port_number>
|
|
||||||
- https://dns.ifconfig.es
|
|
||||||
|
|
||||||
## DNS discovery
|
|
||||||
|
|
||||||
The DNS discovery works by forcing the client to make a request to `<uuid>.dns.ifconfig.es` this DNS request is handled by a microdns server
|
|
||||||
included in the `whatismyip` binary. In order to run the discovery server, a configuration file in the following form has to be created:
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
---
|
|
||||||
domain: dns.example.com
|
|
||||||
redirect_port: ":8000"
|
|
||||||
resource_records:
|
|
||||||
- "1800 IN SOA xns.example.com. hostmaster.example.com. 1 10000 2400 604800 1800"
|
|
||||||
- "3600 IN NS xns.example.com."
|
|
||||||
ipv4:
|
|
||||||
- "127.0.0.2"
|
|
||||||
ipv6:
|
|
||||||
- "aaa:aaa:aaa:aaaa::1"
|
|
||||||
```
|
|
||||||
|
|
||||||
The DNS authority for example.com has delegated the subdomain zone `dns.example.com` to the server running the `whatismyip` service.
|
|
||||||
|
|
||||||
The client can request the URL `dns.example.com` by following the redirection `curl -L dns.example.com`.
|
|
||||||
|
|
||||||
To avoid the redirection, you can provide a valid URL, for example, for the real [ifconfig.es](https://ifconfig.es):
|
|
||||||
|
|
||||||
```bash
|
|
||||||
curl $(uuidgen).dns.ifconfig.es
|
|
||||||
|
|
||||||
curl $(cat /proc/sys/kernel/random/uuid).dns.ifconfig.es
|
|
||||||
```
|
|
||||||
|
|
||||||
## Build
|
## Build
|
||||||
|
|
||||||
Golang >= 1.22 is required.
|
Golang >= 1.17 is required. Previous versions may work.
|
||||||
|
|
||||||
`make build`
|
`make build`
|
||||||
|
|
||||||
## Usage
|
## Usage
|
||||||
|
|
||||||
```text
|
```text
|
||||||
Usage of whatismyip:
|
Usage of ./whatismyip:
|
||||||
-bind string
|
-bind string
|
||||||
Listening address (see https://pkg.go.dev/net?#Listen) (default ":8080")
|
Listening address (see https://pkg.go.dev/net?#Listen) (default ":8080")
|
||||||
-enable-http3
|
|
||||||
Enable HTTP/3 protocol. HTTP/3 requires --tls-bind set, as HTTP/3 starts as a TLS connection that then gets upgraded to UDP. The UDP port is the same as the one used for the TLS server.
|
|
||||||
-enable-secure-headers
|
|
||||||
Add sane security-related headers to every response
|
|
||||||
-geoip2-asn string
|
-geoip2-asn string
|
||||||
Path to GeoIP2 ASN database
|
Path to GeoIP2 ASN database
|
||||||
-geoip2-city string
|
-geoip2-city string
|
||||||
Path to GeoIP2 city database
|
Path to GeoIP2 city database
|
||||||
-resolver string
|
|
||||||
Path to the resolver configuration. It actually enables the resolver for DNS client discovery.
|
|
||||||
-template string
|
-template string
|
||||||
Path to template file
|
Path to template file
|
||||||
-tls-bind string
|
-tls-bind string
|
||||||
|
@ -144,9 +88,7 @@ Usage of whatismyip:
|
||||||
-tls-key string
|
-tls-key string
|
||||||
When using TLS, path to private key file
|
When using TLS, path to private key file
|
||||||
-trusted-header string
|
-trusted-header string
|
||||||
Trusted request header for remote IP (e.g. X-Real-IP). When using this feature if -trusted-port-header is not set the client port is shown as 'unknown'
|
Trusted request header for remote IP (e.g. X-Real-IP)
|
||||||
-trusted-port-header string
|
|
||||||
Trusted request header for remote client port (e.g. X-Real-Port). When this parameter is set -trusted-header becomes mandatory
|
|
||||||
-version
|
-version
|
||||||
Output version information and exit
|
Output version information and exit
|
||||||
```
|
```
|
||||||
|
@ -159,35 +101,27 @@ Usage of whatismyip:
|
||||||
./whatismyip -geoip2-city ./test/GeoIP2-City-Test.mmdb -geoip2-asn ./test/GeoLite2-ASN-Test.mmdb
|
./whatismyip -geoip2-city ./test/GeoIP2-City-Test.mmdb -geoip2-asn ./test/GeoLite2-ASN-Test.mmdb
|
||||||
```
|
```
|
||||||
|
|
||||||
### Run a TLS (HTTP/2) and enable What is my DNS
|
### Run a TLS (HTTP/2) server only
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
./whatismyip -geoip2-city ./test/GeoIP2-City-Test.mmdb -geoip2-asn ./test/GeoLite2-ASN-Test.mmdb \
|
./whatismyip -geoip2-city ./test/GeoIP2-City-Test.mmdb -geoip2-asn ./test/GeoLite2-ASN-Test.mmdb \
|
||||||
-bind "" -tls-bind :8081 -tls-crt ./test/server.pem -tls-key ./test/server.key \
|
-bind "" -tls-bind :8081 -tls-crt ./test/server.pem -tls-key ./test/server.key
|
||||||
-resolver ./test/resolver.yml
|
|
||||||
```
|
```
|
||||||
|
|
||||||
### Run an HTTP/3 server
|
### Run a default TCP server with a custom template and trust a custom header set by an upstream proxy
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
./whatismyip -geoip2-city ./test/GeoIP2-City-Test.mmdb -geoip2-asn ./test/GeoLite2-ASN-Test.mmdb \
|
./whatismyip -geoip2-city ./test/GeoIP2-City-Test.mmdb -geoip2-asn ./test/GeoLite2-ASN-Test.mmdb \
|
||||||
-bind "" -tls-bind :8081 -tls-crt ./test/server.pem -tls-key ./test/server.key -enable-http3
|
-trusted-header X-Real-IP -template mytemplate.tmpl
|
||||||
```
|
|
||||||
|
|
||||||
### Run a default TCP server with a custom template and trust a pair of custom headers set by an upstream proxy
|
|
||||||
|
|
||||||
```bash
|
|
||||||
./whatismyip -geoip2-city ./test/GeoIP2-City-Test.mmdb -geoip2-asn ./test/GeoLite2-ASN-Test.mmdb \
|
|
||||||
-trusted-header X-Real-IP -trusted-port-header X-Real-Port -template mytemplate.tmpl
|
|
||||||
```
|
```
|
||||||
|
|
||||||
## Download
|
## Download
|
||||||
|
|
||||||
Download the latest version from [github](https://github.com/dcarrillo/whatismyip/releases)
|
Download latest version from https://github.com/dcarrillo/whatismyip/releases
|
||||||
|
|
||||||
## Docker
|
## Docker
|
||||||
|
|
||||||
An ultra-light (~4MB) image is available on [docker hub](https://hub.docker.com/r/dcarrillo/whatismyip). Since version `2.1.2`, the binary is compressed using [upx](https://github.com/upx/upx).
|
An ultra-light (~9MB) image is available.
|
||||||
|
|
||||||
### Run a container locally using test databases
|
### Run a container locally using test databases
|
||||||
|
|
||||||
|
|
|
@ -2,22 +2,28 @@ package main
|
||||||
|
|
||||||
import (
|
import (
|
||||||
"context"
|
"context"
|
||||||
|
"errors"
|
||||||
"flag"
|
"flag"
|
||||||
"fmt"
|
"fmt"
|
||||||
|
"log"
|
||||||
"net/http"
|
"net/http"
|
||||||
"os"
|
"os"
|
||||||
"slices"
|
"os/signal"
|
||||||
"time"
|
"syscall"
|
||||||
|
|
||||||
"github.com/dcarrillo/whatismyip/internal/httputils"
|
"github.com/dcarrillo/whatismyip/internal/httputils"
|
||||||
"github.com/dcarrillo/whatismyip/internal/setting"
|
"github.com/dcarrillo/whatismyip/internal/setting"
|
||||||
"github.com/dcarrillo/whatismyip/resolver"
|
"github.com/dcarrillo/whatismyip/models"
|
||||||
"github.com/dcarrillo/whatismyip/server"
|
|
||||||
"github.com/gin-contrib/secure"
|
|
||||||
"github.com/patrickmn/go-cache"
|
|
||||||
|
|
||||||
"github.com/dcarrillo/whatismyip/router"
|
"github.com/dcarrillo/whatismyip/router"
|
||||||
|
|
||||||
"github.com/gin-gonic/gin"
|
"github.com/gin-gonic/gin"
|
||||||
|
"github.com/unrolled/secure"
|
||||||
|
)
|
||||||
|
|
||||||
|
var (
|
||||||
|
tcpServer *http.Server
|
||||||
|
tlsServer *http.Server
|
||||||
|
engine *gin.Engine
|
||||||
)
|
)
|
||||||
|
|
||||||
func main() {
|
func main() {
|
||||||
|
@ -26,66 +32,135 @@ func main() {
|
||||||
fmt.Print(o)
|
fmt.Print(o)
|
||||||
os.Exit(0)
|
os.Exit(0)
|
||||||
} else if err != nil {
|
} else if err != nil {
|
||||||
fmt.Println(err)
|
fmt.Print(err)
|
||||||
os.Exit(1)
|
os.Exit(1)
|
||||||
}
|
}
|
||||||
|
|
||||||
servers := []server.Server{}
|
models.Setup(setting.App.GeodbPath.City, setting.App.GeodbPath.ASN)
|
||||||
engine := setupEngine()
|
setupEngine()
|
||||||
|
|
||||||
if setting.App.Resolver.Domain != "" {
|
|
||||||
store := cache.New(1*time.Minute, 10*time.Minute)
|
|
||||||
dnsEngine := resolver.Setup(store)
|
|
||||||
nameServer := server.NewDNSServer(context.Background(), dnsEngine.Handler())
|
|
||||||
servers = append(servers, nameServer)
|
|
||||||
engine.Use(router.GetDNSDiscoveryHandler(store, setting.App.Resolver.Domain, setting.App.Resolver.RedirectPort))
|
|
||||||
}
|
|
||||||
|
|
||||||
router.SetupTemplate(engine)
|
router.SetupTemplate(engine)
|
||||||
router.Setup(engine)
|
router.Setup(engine)
|
||||||
servers = slices.Concat(servers, setupHTTPServers(context.Background(), engine.Handler()))
|
|
||||||
|
|
||||||
whatismyip := server.Setup(servers)
|
if setting.App.BindAddress != "" {
|
||||||
whatismyip.Run()
|
runTCPServer()
|
||||||
|
}
|
||||||
|
|
||||||
|
if setting.App.TLSAddress != "" {
|
||||||
|
runTLSServer()
|
||||||
|
}
|
||||||
|
|
||||||
|
runHandler()
|
||||||
}
|
}
|
||||||
|
|
||||||
func setupEngine() *gin.Engine {
|
func runHandler() {
|
||||||
|
signalChan := make(chan os.Signal, 3)
|
||||||
|
signal.Notify(signalChan, syscall.SIGHUP, syscall.SIGINT, syscall.SIGTERM)
|
||||||
|
ctx := context.Background()
|
||||||
|
var s os.Signal
|
||||||
|
|
||||||
|
for {
|
||||||
|
s = <-signalChan
|
||||||
|
|
||||||
|
if s == syscall.SIGHUP {
|
||||||
|
models.CloseDBs()
|
||||||
|
models.Setup(setting.App.GeodbPath.City, setting.App.GeodbPath.ASN)
|
||||||
|
router.SetupTemplate(engine)
|
||||||
|
|
||||||
|
if setting.App.BindAddress != "" {
|
||||||
|
if err := tcpServer.Shutdown(ctx); err != nil {
|
||||||
|
log.Printf("TCP server forced to shutdown: %s", err)
|
||||||
|
}
|
||||||
|
runTCPServer()
|
||||||
|
}
|
||||||
|
if setting.App.TLSAddress != "" {
|
||||||
|
if err := tlsServer.Shutdown(ctx); err != nil {
|
||||||
|
log.Printf("TLS server forced to shutdown: %s", err)
|
||||||
|
}
|
||||||
|
runTLSServer()
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
log.Printf("Shutting down...")
|
||||||
|
if setting.App.BindAddress != "" {
|
||||||
|
if err := tcpServer.Shutdown(ctx); err != nil {
|
||||||
|
log.Printf("TCP server forced to shutdown: %s", err)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
if setting.App.TLSAddress != "" {
|
||||||
|
if err := tlsServer.Shutdown(ctx); err != nil {
|
||||||
|
log.Printf("TLS server forced to shutdown: %s", err)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
models.CloseDBs()
|
||||||
|
break
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func runTCPServer() {
|
||||||
|
tcpServer = &http.Server{
|
||||||
|
Addr: setting.App.BindAddress,
|
||||||
|
Handler: engine,
|
||||||
|
ReadTimeout: setting.App.Server.ReadTimeout,
|
||||||
|
WriteTimeout: setting.App.Server.WriteTimeout,
|
||||||
|
}
|
||||||
|
|
||||||
|
go func() {
|
||||||
|
log.Printf("Starting TCP server listening on %s", setting.App.BindAddress)
|
||||||
|
if err := tcpServer.ListenAndServe(); err != nil && !errors.Is(err, http.ErrServerClosed) {
|
||||||
|
log.Fatal(err)
|
||||||
|
}
|
||||||
|
log.Printf("Stopping TCP server...")
|
||||||
|
}()
|
||||||
|
}
|
||||||
|
|
||||||
|
func runTLSServer() {
|
||||||
|
tlsServer = &http.Server{
|
||||||
|
Addr: setting.App.TLSAddress,
|
||||||
|
Handler: engine,
|
||||||
|
ReadTimeout: setting.App.Server.ReadTimeout,
|
||||||
|
WriteTimeout: setting.App.Server.WriteTimeout,
|
||||||
|
}
|
||||||
|
|
||||||
|
go func() {
|
||||||
|
log.Printf("Starting TLS server listening on %s", setting.App.TLSAddress)
|
||||||
|
if err := tlsServer.ListenAndServeTLS(setting.App.TLSCrtPath, setting.App.TLSKeyPath); err != nil &&
|
||||||
|
!errors.Is(err, http.ErrServerClosed) {
|
||||||
|
log.Fatal(err)
|
||||||
|
}
|
||||||
|
log.Printf("Stopping TLS server...")
|
||||||
|
}()
|
||||||
|
}
|
||||||
|
|
||||||
|
func setupEngine() {
|
||||||
gin.DisableConsoleColor()
|
gin.DisableConsoleColor()
|
||||||
if os.Getenv(gin.EnvGinMode) == "" {
|
if os.Getenv(gin.EnvGinMode) == "" {
|
||||||
gin.SetMode(gin.ReleaseMode)
|
gin.SetMode(gin.ReleaseMode)
|
||||||
}
|
}
|
||||||
engine := gin.New()
|
engine = gin.New()
|
||||||
engine.Use(gin.LoggerWithFormatter(httputils.GetLogFormatter))
|
engine.Use(gin.LoggerWithFormatter(httputils.GetLogFormatter))
|
||||||
engine.Use(gin.Recovery())
|
engine.Use(gin.Recovery())
|
||||||
if setting.App.EnableSecureHeaders {
|
if setting.App.EnableSecureHeaders {
|
||||||
engine.Use(secure.New(secure.Config{
|
engine.Use(addSecureHeaders())
|
||||||
BrowserXssFilter: true,
|
|
||||||
ContentTypeNosniff: true,
|
|
||||||
FrameDeny: true,
|
|
||||||
}))
|
|
||||||
}
|
}
|
||||||
_ = engine.SetTrustedProxies(nil)
|
_ = engine.SetTrustedProxies(nil)
|
||||||
engine.TrustedPlatform = setting.App.TrustedHeader
|
engine.TrustedPlatform = setting.App.TrustedHeader
|
||||||
|
|
||||||
return engine
|
|
||||||
}
|
}
|
||||||
|
|
||||||
func setupHTTPServers(ctx context.Context, handler http.Handler) []server.Server {
|
func addSecureHeaders() gin.HandlerFunc {
|
||||||
var servers []server.Server
|
return func(c *gin.Context) {
|
||||||
|
err := secure.New(secure.Options{
|
||||||
|
BrowserXssFilter: true,
|
||||||
|
ContentTypeNosniff: true,
|
||||||
|
FrameDeny: true,
|
||||||
|
}).Process(c.Writer, c.Request)
|
||||||
|
if err != nil {
|
||||||
|
c.Abort()
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
if setting.App.BindAddress != "" {
|
// Avoid header rewrite if response is a redirection.
|
||||||
tcpServer := server.NewTCPServer(ctx, &handler)
|
if status := c.Writer.Status(); status > 300 && status < 399 {
|
||||||
servers = append(servers, tcpServer)
|
c.Abort()
|
||||||
}
|
|
||||||
|
|
||||||
if setting.App.TLSAddress != "" {
|
|
||||||
tlsServer := server.NewTLSServer(ctx, &handler)
|
|
||||||
servers = append(servers, tlsServer)
|
|
||||||
if setting.App.EnableHTTP3 {
|
|
||||||
quicServer := server.NewQuicServer(ctx, tlsServer)
|
|
||||||
servers = append(servers, quicServer)
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
return servers
|
|
||||||
}
|
}
|
||||||
|
|
122
go.mod
122
go.mod
|
@ -1,100 +1,60 @@
|
||||||
module github.com/dcarrillo/whatismyip
|
module github.com/dcarrillo/whatismyip
|
||||||
|
|
||||||
go 1.22
|
go 1.18
|
||||||
|
|
||||||
require (
|
require (
|
||||||
github.com/docker/docker v26.1.3+incompatible
|
github.com/gin-gonic/gin v1.7.7
|
||||||
github.com/gin-contrib/secure v1.1.0
|
github.com/oschwald/maxminddb-golang v1.9.0
|
||||||
github.com/gin-gonic/gin v1.10.0
|
github.com/stretchr/testify v1.7.1
|
||||||
github.com/google/uuid v1.6.0
|
github.com/testcontainers/testcontainers-go v0.12.0
|
||||||
github.com/miekg/dns v1.1.61
|
github.com/unrolled/secure v1.10.0
|
||||||
github.com/oschwald/maxminddb-golang v1.13.1
|
|
||||||
github.com/patrickmn/go-cache v2.1.0+incompatible
|
|
||||||
github.com/quic-go/quic-go v0.45.1
|
|
||||||
github.com/stretchr/testify v1.9.0
|
|
||||||
github.com/testcontainers/testcontainers-go v0.31.0
|
|
||||||
gopkg.in/yaml.v3 v3.0.1
|
|
||||||
)
|
)
|
||||||
|
|
||||||
require (
|
require (
|
||||||
dario.cat/mergo v1.0.0 // indirect
|
|
||||||
github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
|
github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
|
||||||
github.com/Microsoft/go-winio v0.6.1 // indirect
|
github.com/Microsoft/go-winio v0.5.2 // indirect
|
||||||
github.com/Microsoft/hcsshim v0.11.4 // indirect
|
github.com/Microsoft/hcsshim v0.9.2 // indirect
|
||||||
github.com/bytedance/sonic v1.11.9 // indirect
|
github.com/cenkalti/backoff v2.2.1+incompatible // indirect
|
||||||
github.com/bytedance/sonic/loader v0.1.1 // indirect
|
github.com/containerd/cgroups v1.0.3 // indirect
|
||||||
github.com/cenkalti/backoff/v4 v4.2.1 // indirect
|
github.com/containerd/containerd v1.6.2 // indirect
|
||||||
github.com/cloudwego/base64x v0.1.4 // indirect
|
|
||||||
github.com/cloudwego/iasm v0.2.0 // indirect
|
|
||||||
github.com/containerd/containerd v1.7.15 // indirect
|
|
||||||
github.com/containerd/log v0.1.0 // indirect
|
|
||||||
github.com/cpuguy83/dockercfg v0.3.1 // indirect
|
|
||||||
github.com/davecgh/go-spew v1.1.1 // indirect
|
github.com/davecgh/go-spew v1.1.1 // indirect
|
||||||
github.com/distribution/reference v0.5.0 // indirect
|
github.com/docker/distribution v2.8.1+incompatible // indirect
|
||||||
github.com/docker/go-connections v0.5.0 // indirect
|
github.com/docker/docker v20.10.14+incompatible // indirect
|
||||||
github.com/docker/go-units v0.5.0 // indirect
|
github.com/docker/go-connections v0.4.0 // indirect
|
||||||
github.com/felixge/httpsnoop v1.0.4 // indirect
|
github.com/docker/go-units v0.4.0 // indirect
|
||||||
github.com/gabriel-vasile/mimetype v1.4.4 // indirect
|
|
||||||
github.com/gin-contrib/sse v0.1.0 // indirect
|
github.com/gin-contrib/sse v0.1.0 // indirect
|
||||||
github.com/go-logr/logr v1.4.1 // indirect
|
github.com/go-playground/locales v0.14.0 // indirect
|
||||||
github.com/go-logr/stdr v1.2.2 // indirect
|
github.com/go-playground/universal-translator v0.18.0 // indirect
|
||||||
github.com/go-ole/go-ole v1.2.6 // indirect
|
github.com/go-playground/validator/v10 v10.10.1 // indirect
|
||||||
github.com/go-playground/locales v0.14.1 // indirect
|
|
||||||
github.com/go-playground/universal-translator v0.18.1 // indirect
|
|
||||||
github.com/go-playground/validator/v10 v10.22.0 // indirect
|
|
||||||
github.com/go-task/slim-sprig/v3 v3.0.0 // indirect
|
|
||||||
github.com/goccy/go-json v0.10.3 // indirect
|
|
||||||
github.com/gogo/protobuf v1.3.2 // indirect
|
github.com/gogo/protobuf v1.3.2 // indirect
|
||||||
github.com/golang/protobuf v1.5.4 // indirect
|
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
|
||||||
github.com/google/pprof v0.0.0-20240625030939-27f56978b8b0 // indirect
|
github.com/golang/protobuf v1.5.2 // indirect
|
||||||
|
github.com/google/uuid v1.3.0 // indirect
|
||||||
github.com/json-iterator/go v1.1.12 // indirect
|
github.com/json-iterator/go v1.1.12 // indirect
|
||||||
github.com/klauspost/compress v1.16.0 // indirect
|
github.com/leodido/go-urn v1.2.1 // indirect
|
||||||
github.com/klauspost/cpuid/v2 v2.2.8 // indirect
|
github.com/magiconair/properties v1.8.6 // indirect
|
||||||
github.com/kr/text v0.2.0 // indirect
|
github.com/mattn/go-isatty v0.0.14 // indirect
|
||||||
github.com/leodido/go-urn v1.4.0 // indirect
|
github.com/moby/sys/mount v0.3.1 // indirect
|
||||||
github.com/lufia/plan9stats v0.0.0-20211012122336-39d0f177ccd0 // indirect
|
github.com/moby/sys/mountinfo v0.6.0 // indirect
|
||||||
github.com/magiconair/properties v1.8.7 // indirect
|
github.com/moby/term v0.0.0-20210619224110-3f7ff695adc6 // indirect
|
||||||
github.com/mattn/go-isatty v0.0.20 // indirect
|
|
||||||
github.com/moby/docker-image-spec v1.3.1 // indirect
|
|
||||||
github.com/moby/patternmatcher v0.6.0 // indirect
|
|
||||||
github.com/moby/sys/sequential v0.5.0 // indirect
|
|
||||||
github.com/moby/sys/user v0.1.0 // indirect
|
|
||||||
github.com/moby/term v0.5.0 // indirect
|
|
||||||
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
|
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
|
||||||
github.com/modern-go/reflect2 v1.0.2 // indirect
|
github.com/modern-go/reflect2 v1.0.2 // indirect
|
||||||
github.com/morikuni/aec v1.0.0 // indirect
|
github.com/morikuni/aec v1.0.0 // indirect
|
||||||
github.com/onsi/ginkgo/v2 v2.19.0 // indirect
|
|
||||||
github.com/opencontainers/go-digest v1.0.0 // indirect
|
github.com/opencontainers/go-digest v1.0.0 // indirect
|
||||||
github.com/opencontainers/image-spec v1.1.0 // indirect
|
github.com/opencontainers/image-spec v1.0.2 // indirect
|
||||||
github.com/pelletier/go-toml/v2 v2.2.2 // indirect
|
github.com/opencontainers/runc v1.1.1 // indirect
|
||||||
github.com/pkg/errors v0.9.1 // indirect
|
github.com/pkg/errors v0.9.1 // indirect
|
||||||
github.com/pmezard/go-difflib v1.0.0 // indirect
|
github.com/pmezard/go-difflib v1.0.0 // indirect
|
||||||
github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c // indirect
|
github.com/sirupsen/logrus v1.8.1 // indirect
|
||||||
github.com/quic-go/qpack v0.4.0 // indirect
|
github.com/ugorji/go/codec v1.2.7 // indirect
|
||||||
github.com/shirou/gopsutil/v3 v3.23.12 // indirect
|
go.opencensus.io v0.23.0 // indirect
|
||||||
github.com/shoenig/go-m1cpu v0.1.6 // indirect
|
golang.org/x/crypto v0.0.0-20220331220935-ae2d96664a29 // indirect
|
||||||
github.com/sirupsen/logrus v1.9.3 // indirect
|
golang.org/x/net v0.0.0-20220401154927-543a649e0bdd // indirect
|
||||||
github.com/tklauser/go-sysconf v0.3.12 // indirect
|
golang.org/x/sys v0.0.0-20220330033206-e17cdc41300f // indirect
|
||||||
github.com/tklauser/numcpus v0.6.1 // indirect
|
golang.org/x/text v0.3.7 // indirect
|
||||||
github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
|
google.golang.org/genproto v0.0.0-20220401170504-314d38edb7de // indirect
|
||||||
github.com/ugorji/go/codec v1.2.12 // indirect
|
google.golang.org/grpc v1.45.0 // indirect
|
||||||
github.com/yusufpapurcu/wmi v1.2.3 // indirect
|
google.golang.org/protobuf v1.28.0 // indirect
|
||||||
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.49.0 // indirect
|
gopkg.in/yaml.v2 v2.4.0 // indirect
|
||||||
go.opentelemetry.io/otel v1.24.0 // indirect
|
gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b // indirect
|
||||||
go.opentelemetry.io/otel/metric v1.24.0 // indirect
|
|
||||||
go.opentelemetry.io/otel/trace v1.24.0 // indirect
|
|
||||||
go.uber.org/mock v0.4.0 // indirect
|
|
||||||
golang.org/x/arch v0.8.0 // indirect
|
|
||||||
golang.org/x/crypto v0.24.0 // indirect
|
|
||||||
golang.org/x/exp v0.0.0-20240613232115-7f521ea00fb8 // indirect
|
|
||||||
golang.org/x/mod v0.18.0 // indirect
|
|
||||||
golang.org/x/net v0.26.0 // indirect
|
|
||||||
golang.org/x/sync v0.7.0 // indirect
|
|
||||||
golang.org/x/sys v0.21.0 // indirect
|
|
||||||
golang.org/x/text v0.16.0 // indirect
|
|
||||||
golang.org/x/tools v0.22.0 // indirect
|
|
||||||
google.golang.org/genproto/googleapis/api v0.0.0-20231106174013-bbf56f31fb17 // indirect
|
|
||||||
google.golang.org/genproto/googleapis/rpc v0.0.0-20231120223509-83a465c0220f // indirect
|
|
||||||
google.golang.org/grpc v1.59.0 // indirect
|
|
||||||
google.golang.org/protobuf v1.34.2 // indirect
|
|
||||||
)
|
)
|
||||||
|
|
|
@ -4,78 +4,49 @@ import (
|
||||||
"context"
|
"context"
|
||||||
"crypto/tls"
|
"crypto/tls"
|
||||||
"encoding/json"
|
"encoding/json"
|
||||||
"fmt"
|
"io/ioutil"
|
||||||
"io"
|
"log"
|
||||||
"net"
|
|
||||||
"net/http"
|
"net/http"
|
||||||
"strings"
|
"path/filepath"
|
||||||
|
"runtime"
|
||||||
"testing"
|
"testing"
|
||||||
"time"
|
|
||||||
|
|
||||||
validator "github.com/dcarrillo/whatismyip/internal/validator/uuid"
|
|
||||||
"github.com/dcarrillo/whatismyip/router"
|
"github.com/dcarrillo/whatismyip/router"
|
||||||
"github.com/docker/docker/api/types"
|
|
||||||
"github.com/quic-go/quic-go/http3"
|
|
||||||
"github.com/stretchr/testify/assert"
|
"github.com/stretchr/testify/assert"
|
||||||
"github.com/stretchr/testify/require"
|
"github.com/testcontainers/testcontainers-go"
|
||||||
tc "github.com/testcontainers/testcontainers-go"
|
|
||||||
"github.com/testcontainers/testcontainers-go/wait"
|
"github.com/testcontainers/testcontainers-go/wait"
|
||||||
)
|
)
|
||||||
|
|
||||||
func customDialContext() func(ctx context.Context, network, addr string) (net.Conn, error) {
|
func buildContainer() testcontainers.ContainerRequest {
|
||||||
return func(ctx context.Context, network, addr string) (net.Conn, error) {
|
_, filename, _, _ := runtime.Caller(0)
|
||||||
dialer := &net.Dialer{
|
dir := filepath.Dir(filename)
|
||||||
Resolver: &net.Resolver{
|
|
||||||
PreferGo: true,
|
|
||||||
Dial: func(ctx context.Context, _, _ string) (net.Conn, error) {
|
|
||||||
d := net.Dialer{}
|
|
||||||
return d.DialContext(ctx, "udp", "127.0.0.1:53531")
|
|
||||||
},
|
|
||||||
},
|
|
||||||
}
|
|
||||||
|
|
||||||
return dialer.DialContext(ctx, network, addr)
|
req := testcontainers.ContainerRequest{
|
||||||
|
FromDockerfile: testcontainers.FromDockerfile{
|
||||||
|
Context: "../",
|
||||||
|
Dockerfile: "Dockerfile",
|
||||||
|
},
|
||||||
|
Cmd: []string{
|
||||||
|
"-geoip2-city", "/tmp/GeoIP2-City-Test.mmdb",
|
||||||
|
"-geoip2-asn", "/tmp/GeoLite2-ASN-Test.mmdb",
|
||||||
|
"-bind", ":8000",
|
||||||
|
"-tls-bind", ":8001",
|
||||||
|
"-tls-crt", "/tmp/server.pem",
|
||||||
|
"-tls-key", "/tmp/server.key",
|
||||||
|
"-trusted-header", "X-Real-IP",
|
||||||
|
"-enable-secure-headers",
|
||||||
|
},
|
||||||
|
ExposedPorts: []string{"8000:8000", "8001:8001"},
|
||||||
|
WaitingFor: wait.ForLog("Starting TLS server listening on :8001"),
|
||||||
|
BindMounts: map[string]string{
|
||||||
|
"/tmp/GeoIP2-City-Test.mmdb": filepath.Join(dir, "/../test/GeoIP2-City-Test.mmdb"),
|
||||||
|
"/tmp/GeoLite2-ASN-Test.mmdb": filepath.Join(dir, "/../test/GeoLite2-ASN-Test.mmdb"),
|
||||||
|
"/tmp/server.pem": filepath.Join(dir, "/../test/server.pem"),
|
||||||
|
"/tmp/server.key": filepath.Join(dir, "/../test/server.key"),
|
||||||
|
},
|
||||||
}
|
}
|
||||||
}
|
|
||||||
|
|
||||||
func testWhatIsMyDNS(t *testing.T) {
|
return req
|
||||||
t.Run("RequestDNSDiscovery", func(t *testing.T) {
|
|
||||||
http.DefaultTransport.(*http.Transport).DialContext = customDialContext()
|
|
||||||
req, err := http.NewRequest("GET", "http://localhost:8000", nil)
|
|
||||||
assert.NoError(t, err)
|
|
||||||
req.Host = "dns.example.com"
|
|
||||||
client := &http.Client{
|
|
||||||
CheckRedirect: func(_ *http.Request, _ []*http.Request) error {
|
|
||||||
return http.ErrUseLastResponse
|
|
||||||
},
|
|
||||||
}
|
|
||||||
|
|
||||||
resp, err := client.Do(req)
|
|
||||||
assert.NoError(t, err)
|
|
||||||
assert.Equal(t, http.StatusFound, resp.StatusCode)
|
|
||||||
u, err := resp.Location()
|
|
||||||
assert.NoError(t, err)
|
|
||||||
assert.True(t, validator.IsValid(strings.Split(u.Hostname(), ".")[0]))
|
|
||||||
|
|
||||||
for _, accept := range []string{"application/json", "*/*", "text/html"} {
|
|
||||||
req, err = http.NewRequest("GET", u.String(), nil)
|
|
||||||
req.Host = u.Hostname()
|
|
||||||
req.Header.Set("Accept", accept)
|
|
||||||
assert.NoError(t, err)
|
|
||||||
resp, err = client.Do(req)
|
|
||||||
assert.NoError(t, err)
|
|
||||||
assert.Equal(t, http.StatusOK, resp.StatusCode)
|
|
||||||
body, err := io.ReadAll(resp.Body)
|
|
||||||
assert.NoError(t, err)
|
|
||||||
|
|
||||||
if accept == "application/json" {
|
|
||||||
assert.NoError(t, json.Unmarshal(body, &router.DNSJSONResponse{}))
|
|
||||||
} else {
|
|
||||||
ip := strings.Split(string(body), " ")[0]
|
|
||||||
assert.True(t, net.ParseIP(ip) != nil)
|
|
||||||
}
|
|
||||||
}
|
|
||||||
})
|
|
||||||
}
|
}
|
||||||
|
|
||||||
func TestContainerIntegration(t *testing.T) {
|
func TestContainerIntegration(t *testing.T) {
|
||||||
|
@ -84,180 +55,33 @@ func TestContainerIntegration(t *testing.T) {
|
||||||
}
|
}
|
||||||
|
|
||||||
ctx := context.Background()
|
ctx := context.Background()
|
||||||
c, err := tc.GenericContainer(ctx, tc.GenericContainerRequest{
|
container, err := testcontainers.GenericContainer(ctx, testcontainers.GenericContainerRequest{
|
||||||
ContainerRequest: tc.ContainerRequest{
|
ContainerRequest: buildContainer(),
|
||||||
FromDockerfile: tc.FromDockerfile{
|
Started: true,
|
||||||
Context: "../",
|
|
||||||
Dockerfile: "./test/Dockerfile",
|
|
||||||
PrintBuildLog: true,
|
|
||||||
KeepImage: false,
|
|
||||||
BuildOptionsModifier: func(buildOptions *types.ImageBuildOptions) {
|
|
||||||
buildOptions.Target = "test"
|
|
||||||
},
|
|
||||||
},
|
|
||||||
ExposedPorts: []string{
|
|
||||||
"8000:8000",
|
|
||||||
"8001:8001",
|
|
||||||
"8001:8001/udp",
|
|
||||||
"53531:53/udp",
|
|
||||||
},
|
|
||||||
Cmd: []string{
|
|
||||||
"-geoip2-city", "/GeoIP2-City-Test.mmdb",
|
|
||||||
"-geoip2-asn", "/GeoLite2-ASN-Test.mmdb",
|
|
||||||
"-bind", ":8000",
|
|
||||||
"-tls-bind", ":8001",
|
|
||||||
"-tls-crt", "/server.pem",
|
|
||||||
"-tls-key", "/server.key",
|
|
||||||
"-trusted-header", "X-Real-IP",
|
|
||||||
"-enable-secure-headers",
|
|
||||||
"-enable-http3",
|
|
||||||
"-resolver", "/resolver.yml",
|
|
||||||
},
|
|
||||||
Files: []tc.ContainerFile{
|
|
||||||
{
|
|
||||||
HostFilePath: "./../test/GeoIP2-City-Test.mmdb",
|
|
||||||
ContainerFilePath: "/GeoIP2-City-Test.mmdb",
|
|
||||||
},
|
|
||||||
{
|
|
||||||
HostFilePath: "./../test/GeoLite2-ASN-Test.mmdb",
|
|
||||||
ContainerFilePath: "/GeoLite2-ASN-Test.mmdb",
|
|
||||||
},
|
|
||||||
{
|
|
||||||
HostFilePath: "./../test/server.pem",
|
|
||||||
ContainerFilePath: "/server.pem",
|
|
||||||
},
|
|
||||||
{
|
|
||||||
HostFilePath: "./../test/server.key",
|
|
||||||
ContainerFilePath: "/server.key",
|
|
||||||
},
|
|
||||||
{
|
|
||||||
HostFilePath: "./../test/resolver.yml",
|
|
||||||
ContainerFilePath: "/resolver.yml",
|
|
||||||
},
|
|
||||||
},
|
|
||||||
WaitingFor: wait.ForAll(
|
|
||||||
wait.ForListeningPort("8000/tcp").WithStartupTimeout(5*time.Second),
|
|
||||||
wait.ForListeningPort("8001/tcp").WithStartupTimeout(5*time.Second),
|
|
||||||
wait.ForListeningPort("8001/udp").WithStartupTimeout(5*time.Second),
|
|
||||||
wait.ForListeningPort("53/udp").WithStartupTimeout(5*time.Second),
|
|
||||||
),
|
|
||||||
AutoRemove: true,
|
|
||||||
},
|
|
||||||
Started: true,
|
|
||||||
})
|
})
|
||||||
require.NoError(t, err)
|
if err != nil {
|
||||||
t.Cleanup(func() { c.Terminate(ctx) })
|
log.Fatal(err)
|
||||||
|
}
|
||||||
|
defer func() {
|
||||||
|
err := container.Terminate(ctx)
|
||||||
|
if err != nil {
|
||||||
|
log.Fatal(err)
|
||||||
|
}
|
||||||
|
}()
|
||||||
|
|
||||||
http.DefaultTransport.(*http.Transport).TLSClientConfig = &tls.Config{InsecureSkipVerify: true}
|
http.DefaultTransport.(*http.Transport).TLSClientConfig = &tls.Config{InsecureSkipVerify: true}
|
||||||
tests := []struct {
|
for _, url := range []string{"http://localhost:8000", "https://localhost:8001"} {
|
||||||
name string
|
client := &http.Client{}
|
||||||
url string
|
req, _ := http.NewRequest("GET", url, nil)
|
||||||
quic bool
|
req.Header.Set("Accept", "application/json")
|
||||||
}{
|
resp, _ := client.Do(req)
|
||||||
{
|
assert.Equal(t, 200, resp.StatusCode)
|
||||||
name: "RequestOverHTTP",
|
|
||||||
url: "http://localhost:8000",
|
body, err := ioutil.ReadAll(resp.Body)
|
||||||
quic: false,
|
if err != nil {
|
||||||
},
|
log.Fatal(err)
|
||||||
{
|
}
|
||||||
name: "RequestOverHTTPs",
|
|
||||||
url: "https://localhost:8001",
|
assert.NoError(t, json.Unmarshal(body, &router.JSONResponse{}))
|
||||||
quic: false,
|
|
||||||
},
|
|
||||||
{
|
|
||||||
name: "RequestOverUDPWithQuic",
|
|
||||||
url: "https://localhost:8001",
|
|
||||||
quic: true,
|
|
||||||
},
|
|
||||||
}
|
}
|
||||||
|
|
||||||
testsPortScan := []struct {
|
|
||||||
name string
|
|
||||||
port int
|
|
||||||
want bool
|
|
||||||
}{
|
|
||||||
{
|
|
||||||
name: "RequestOpenPortScan",
|
|
||||||
port: 8000,
|
|
||||||
want: true,
|
|
||||||
},
|
|
||||||
{
|
|
||||||
name: "RequestClosedPortScan",
|
|
||||||
port: 65533,
|
|
||||||
want: false,
|
|
||||||
},
|
|
||||||
}
|
|
||||||
|
|
||||||
for _, tt := range tests {
|
|
||||||
t.Run(tt.name, func(t *testing.T) {
|
|
||||||
req, err := http.NewRequest("GET", tt.url, nil)
|
|
||||||
assert.NoError(t, err)
|
|
||||||
req.Header.Set("Accept", "application/json")
|
|
||||||
|
|
||||||
var resp *http.Response
|
|
||||||
var body []byte
|
|
||||||
if tt.quic {
|
|
||||||
resp, body, err = doQuicRequest(req)
|
|
||||||
} else {
|
|
||||||
client := &http.Client{}
|
|
||||||
resp, _ = client.Do(req)
|
|
||||||
body, err = io.ReadAll(resp.Body)
|
|
||||||
if strings.Contains(tt.url, "https://") {
|
|
||||||
assert.Equal(t, `h3=":8001"; ma=2592000`, resp.Header.Get("Alt-Svc"))
|
|
||||||
}
|
|
||||||
}
|
|
||||||
assert.NoError(t, err)
|
|
||||||
assert.Equal(t, 200, resp.StatusCode)
|
|
||||||
|
|
||||||
assert.NoError(t, json.Unmarshal(body, &router.JSONResponse{}))
|
|
||||||
assert.Equal(t, "DENY", resp.Header.Get("X-Frame-Options"))
|
|
||||||
assert.Equal(t, "nosniff", resp.Header.Get("X-Content-Type-Options"))
|
|
||||||
assert.Equal(t, "1; mode=block", resp.Header.Get("X-Xss-Protection"))
|
|
||||||
})
|
|
||||||
}
|
|
||||||
|
|
||||||
for _, tt := range testsPortScan {
|
|
||||||
t.Run(tt.name, func(t *testing.T) {
|
|
||||||
req, err := http.NewRequest("GET", fmt.Sprintf("http://localhost:8000/scan/tcp/%d", tt.port), nil)
|
|
||||||
assert.NoError(t, err)
|
|
||||||
req.Header.Set("Accept", "application/json")
|
|
||||||
req.Header.Set("X-Real-IP", "127.0.0.1")
|
|
||||||
|
|
||||||
client := &http.Client{}
|
|
||||||
resp, err := client.Do(req)
|
|
||||||
assert.NoError(t, err)
|
|
||||||
assert.Equal(t, 200, resp.StatusCode)
|
|
||||||
|
|
||||||
body, err := io.ReadAll(resp.Body)
|
|
||||||
assert.NoError(t, err)
|
|
||||||
j := router.JSONScanResponse{}
|
|
||||||
assert.NoError(t, json.Unmarshal(body, &j))
|
|
||||||
assert.Equal(t, tt.want, j.Reachable)
|
|
||||||
})
|
|
||||||
}
|
|
||||||
|
|
||||||
testWhatIsMyDNS(t)
|
|
||||||
}
|
|
||||||
|
|
||||||
func doQuicRequest(req *http.Request) (*http.Response, []byte, error) {
|
|
||||||
roundTripper := &http3.RoundTripper{
|
|
||||||
TLSClientConfig: &tls.Config{
|
|
||||||
InsecureSkipVerify: true,
|
|
||||||
},
|
|
||||||
}
|
|
||||||
defer roundTripper.Close()
|
|
||||||
|
|
||||||
client := &http.Client{
|
|
||||||
Transport: roundTripper,
|
|
||||||
}
|
|
||||||
|
|
||||||
resp, err := client.Do(req)
|
|
||||||
if err != nil {
|
|
||||||
return nil, nil, err
|
|
||||||
}
|
|
||||||
|
|
||||||
defer resp.Body.Close()
|
|
||||||
body, _ := io.ReadAll(resp.Body)
|
|
||||||
|
|
||||||
return resp, body, nil
|
|
||||||
}
|
}
|
||||||
|
|
|
@ -3,11 +3,9 @@ package httputils
|
||||||
import (
|
import (
|
||||||
"fmt"
|
"fmt"
|
||||||
"net/http"
|
"net/http"
|
||||||
"net/textproto"
|
|
||||||
"sort"
|
"sort"
|
||||||
"strings"
|
"strings"
|
||||||
|
|
||||||
"github.com/dcarrillo/whatismyip/internal/setting"
|
|
||||||
"github.com/gin-gonic/gin"
|
"github.com/gin-gonic/gin"
|
||||||
)
|
)
|
||||||
|
|
||||||
|
@ -34,17 +32,6 @@ func HeadersToSortedString(headers http.Header) string {
|
||||||
return output
|
return output
|
||||||
}
|
}
|
||||||
|
|
||||||
// GetHeadersWithoutTrustedHeaders return a http.Heade object with the original headers except trusted headers
|
|
||||||
func GetHeadersWithoutTrustedHeaders(ctx *gin.Context) http.Header {
|
|
||||||
h := ctx.Request.Header
|
|
||||||
|
|
||||||
for _, k := range []string{setting.App.TrustedHeader, setting.App.TrustedPortHeader} {
|
|
||||||
delete(h, textproto.CanonicalMIMEHeaderKey(k))
|
|
||||||
}
|
|
||||||
|
|
||||||
return h
|
|
||||||
}
|
|
||||||
|
|
||||||
// GetLogFormatter returns our custom log format
|
// GetLogFormatter returns our custom log format
|
||||||
func GetLogFormatter(param gin.LogFormatterParams) string {
|
func GetLogFormatter(param gin.LogFormatterParams) string {
|
||||||
return fmt.Sprintf("%s - [%s] \"%s %s %s\" %d %d %d %s \"%s\" \"%s\" \"%s\"\n",
|
return fmt.Sprintf("%s - [%s] \"%s %s %s\" %d %d %d %s \"%s\" \"%s\" \"%s\"\n",
|
||||||
|
@ -63,7 +50,7 @@ func GetLogFormatter(param gin.LogFormatterParams) string {
|
||||||
)
|
)
|
||||||
}
|
}
|
||||||
|
|
||||||
func normalizeLog(log any) any {
|
func normalizeLog(log interface{}) interface{} {
|
||||||
switch v := log.(type) {
|
switch v := log.(type) {
|
||||||
case string:
|
case string:
|
||||||
if v == "" {
|
if v == "" {
|
||||||
|
|
|
@ -9,7 +9,6 @@ import (
|
||||||
"time"
|
"time"
|
||||||
|
|
||||||
"github.com/dcarrillo/whatismyip/internal/core"
|
"github.com/dcarrillo/whatismyip/internal/core"
|
||||||
"gopkg.in/yaml.v3"
|
|
||||||
)
|
)
|
||||||
|
|
||||||
type geodbPath struct {
|
type geodbPath struct {
|
||||||
|
@ -20,15 +19,6 @@ type serverSettings struct {
|
||||||
ReadTimeout time.Duration
|
ReadTimeout time.Duration
|
||||||
WriteTimeout time.Duration
|
WriteTimeout time.Duration
|
||||||
}
|
}
|
||||||
|
|
||||||
type resolver struct {
|
|
||||||
Domain string `yaml:"domain"`
|
|
||||||
ResourceRecords []string `yaml:"resource_records"`
|
|
||||||
RedirectPort string `yaml:"redirect_port,omitempty"`
|
|
||||||
Ipv4 []string `yaml:"ipv4,omitempty"`
|
|
||||||
Ipv6 []string `yaml:"ipv6,omitempty"`
|
|
||||||
}
|
|
||||||
|
|
||||||
type settings struct {
|
type settings struct {
|
||||||
GeodbPath geodbPath
|
GeodbPath geodbPath
|
||||||
TemplatePath string
|
TemplatePath string
|
||||||
|
@ -37,18 +27,17 @@ type settings struct {
|
||||||
TLSCrtPath string
|
TLSCrtPath string
|
||||||
TLSKeyPath string
|
TLSKeyPath string
|
||||||
TrustedHeader string
|
TrustedHeader string
|
||||||
TrustedPortHeader string
|
|
||||||
EnableSecureHeaders bool
|
EnableSecureHeaders bool
|
||||||
EnableHTTP3 bool
|
|
||||||
Server serverSettings
|
Server serverSettings
|
||||||
Resolver resolver
|
|
||||||
version bool
|
version bool
|
||||||
}
|
}
|
||||||
|
|
||||||
const defaultAddress = ":8080"
|
const defaultAddress = ":8080"
|
||||||
|
|
||||||
|
// ErrVersion is the custom error triggered when -version flag is passed
|
||||||
var ErrVersion = errors.New("setting: version requested")
|
var ErrVersion = errors.New("setting: version requested")
|
||||||
|
|
||||||
|
// App is the var with the parsed settings
|
||||||
var App = settings{
|
var App = settings{
|
||||||
// hard-coded for the time being
|
// hard-coded for the time being
|
||||||
Server: serverSettings{
|
Server: serverSettings{
|
||||||
|
@ -57,20 +46,15 @@ var App = settings{
|
||||||
},
|
},
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// Setup initializes the App object parsing the flags
|
||||||
func Setup(args []string) (output string, err error) {
|
func Setup(args []string) (output string, err error) {
|
||||||
flags := flag.NewFlagSet("whatismyip", flag.ContinueOnError)
|
flags := flag.NewFlagSet("whatismyip", flag.ContinueOnError)
|
||||||
var buf bytes.Buffer
|
var buf bytes.Buffer
|
||||||
var resolverConf string
|
|
||||||
flags.SetOutput(&buf)
|
flags.SetOutput(&buf)
|
||||||
|
|
||||||
flags.StringVar(&App.GeodbPath.City, "geoip2-city", "", "Path to GeoIP2 city database")
|
flags.StringVar(&App.GeodbPath.City, "geoip2-city", "", "Path to GeoIP2 city database")
|
||||||
flags.StringVar(&App.GeodbPath.ASN, "geoip2-asn", "", "Path to GeoIP2 ASN database")
|
flags.StringVar(&App.GeodbPath.ASN, "geoip2-asn", "", "Path to GeoIP2 ASN database")
|
||||||
flags.StringVar(&App.TemplatePath, "template", "", "Path to the template file")
|
flags.StringVar(&App.TemplatePath, "template", "", "Path to template file")
|
||||||
flags.StringVar(
|
|
||||||
&resolverConf,
|
|
||||||
"resolver",
|
|
||||||
"",
|
|
||||||
"Path to the resolver configuration. It actually enables the resolver for DNS client discovery.")
|
|
||||||
flags.StringVar(
|
flags.StringVar(
|
||||||
&App.BindAddress,
|
&App.BindAddress,
|
||||||
"bind",
|
"bind",
|
||||||
|
@ -85,17 +69,10 @@ func Setup(args []string) (output string, err error) {
|
||||||
)
|
)
|
||||||
flags.StringVar(&App.TLSCrtPath, "tls-crt", "", "When using TLS, path to certificate file")
|
flags.StringVar(&App.TLSCrtPath, "tls-crt", "", "When using TLS, path to certificate file")
|
||||||
flags.StringVar(&App.TLSKeyPath, "tls-key", "", "When using TLS, path to private key file")
|
flags.StringVar(&App.TLSKeyPath, "tls-key", "", "When using TLS, path to private key file")
|
||||||
flags.StringVar(
|
flags.StringVar(&App.TrustedHeader,
|
||||||
&App.TrustedHeader,
|
|
||||||
"trusted-header",
|
"trusted-header",
|
||||||
"",
|
"",
|
||||||
"Trusted request header for remote IP (e.g. X-Real-IP). When using this feature if -trusted-port-header is not set the client port is shown as 'unknown'",
|
"Trusted request header for remote IP (e.g. X-Real-IP)",
|
||||||
)
|
|
||||||
flags.StringVar(
|
|
||||||
&App.TrustedPortHeader,
|
|
||||||
"trusted-port-header",
|
|
||||||
"",
|
|
||||||
"Trusted request header for remote client port (e.g. X-Real-Port). When this parameter is set -trusted-header becomes mandatory",
|
|
||||||
)
|
)
|
||||||
flags.BoolVar(&App.version, "version", false, "Output version information and exit")
|
flags.BoolVar(&App.version, "version", false, "Output version information and exit")
|
||||||
flags.BoolVar(
|
flags.BoolVar(
|
||||||
|
@ -104,12 +81,6 @@ func Setup(args []string) (output string, err error) {
|
||||||
false,
|
false,
|
||||||
"Add sane security-related headers to every response",
|
"Add sane security-related headers to every response",
|
||||||
)
|
)
|
||||||
flags.BoolVar(
|
|
||||||
&App.EnableHTTP3,
|
|
||||||
"enable-http3",
|
|
||||||
false,
|
|
||||||
"Enable HTTP/3 protocol. HTTP/3 requires --tls-bind set, as HTTP/3 starts as a TLS connection that then gets upgraded to UDP. The UDP port is the same as the one used for the TLS server.",
|
|
||||||
)
|
|
||||||
|
|
||||||
err = flags.Parse(args)
|
err = flags.Parse(args)
|
||||||
if err != nil {
|
if err != nil {
|
||||||
|
@ -120,20 +91,12 @@ func Setup(args []string) (output string, err error) {
|
||||||
return fmt.Sprintf("whatismyip version %s", core.Version), ErrVersion
|
return fmt.Sprintf("whatismyip version %s", core.Version), ErrVersion
|
||||||
}
|
}
|
||||||
|
|
||||||
if App.TrustedPortHeader != "" && App.TrustedHeader == "" {
|
|
||||||
return "", fmt.Errorf("truster-header is mandatory when truster-port-header is set")
|
|
||||||
}
|
|
||||||
|
|
||||||
if App.GeodbPath.City == "" || App.GeodbPath.ASN == "" {
|
if App.GeodbPath.City == "" || App.GeodbPath.ASN == "" {
|
||||||
return "", fmt.Errorf("geoip2-city and geoip2-asn parameters are mandatory")
|
return "", fmt.Errorf("geoip2-city and geoip2-asn parameters are mandatory")
|
||||||
}
|
}
|
||||||
|
|
||||||
if (App.TLSAddress != "") && (App.TLSCrtPath == "" || App.TLSKeyPath == "") {
|
if (App.TLSAddress != "") && (App.TLSCrtPath == "" || App.TLSKeyPath == "") {
|
||||||
return "", fmt.Errorf("in order to use TLS, the -tls-crt and -tls-key flags are mandatory")
|
return "", fmt.Errorf("In order to use TLS -tls-crt and -tls-key flags are mandatory")
|
||||||
}
|
|
||||||
|
|
||||||
if App.EnableHTTP3 && App.TLSAddress == "" {
|
|
||||||
return "", fmt.Errorf("in order to use HTTP3, the -tls-bind is mandatory")
|
|
||||||
}
|
}
|
||||||
|
|
||||||
if App.TemplatePath != "" {
|
if App.TemplatePath != "" {
|
||||||
|
@ -146,21 +109,5 @@ func Setup(args []string) (output string, err error) {
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
if resolverConf != "" {
|
|
||||||
var err error
|
|
||||||
App.Resolver, err = readYAML(resolverConf)
|
|
||||||
if err != nil {
|
|
||||||
return "", fmt.Errorf("error reading resolver configuration %s", err)
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
return buf.String(), nil
|
return buf.String(), nil
|
||||||
}
|
}
|
||||||
|
|
||||||
func readYAML(path string) (resolver resolver, err error) {
|
|
||||||
yamlFile, err := os.ReadFile(path)
|
|
||||||
if err != nil {
|
|
||||||
return resolver, err
|
|
||||||
}
|
|
||||||
return resolver, yaml.Unmarshal(yamlFile, &resolver)
|
|
||||||
}
|
|
||||||
|
|
|
@ -8,56 +8,51 @@ import (
|
||||||
"time"
|
"time"
|
||||||
|
|
||||||
"github.com/stretchr/testify/assert"
|
"github.com/stretchr/testify/assert"
|
||||||
"github.com/stretchr/testify/require"
|
|
||||||
)
|
)
|
||||||
|
|
||||||
func TestParseMandatoryFlags(t *testing.T) {
|
func TestParseMandatoryFlags(t *testing.T) {
|
||||||
var mandatoryFlags = []struct {
|
var mandatoryFlags = []struct {
|
||||||
args []string
|
args []string
|
||||||
|
conf settings
|
||||||
}{
|
}{
|
||||||
{
|
{
|
||||||
[]string{},
|
[]string{},
|
||||||
|
settings{},
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
[]string{"-geoip2-city", "/city-path"},
|
[]string{"-geoip2-city", "/city-path"},
|
||||||
|
settings{},
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
[]string{"-geoip2-asn", "/asn-path"},
|
[]string{"-geoip2-asn", "/asn-path"},
|
||||||
|
settings{},
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
[]string{
|
[]string{
|
||||||
"-geoip2-city", "/city-path", "-geoip2-asn", "/asn-path", "-tls-bind", ":9000",
|
"-geoip2-city", "/city-path", "-geoip2-asn", "/asn-path", "-tls-bind", ":9000",
|
||||||
},
|
},
|
||||||
|
settings{},
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
[]string{
|
[]string{
|
||||||
"-geoip2-city", "/city-path", "-geoip2-asn", "/asn-path", "-tls-bind", ":9000",
|
"-geoip2-city", "/city-path", "-geoip2-asn", "/asn-path", "-tls-bind", ":9000",
|
||||||
"-tls-crt", "/crt-path",
|
"-tls-crt", "/crt-path",
|
||||||
},
|
},
|
||||||
|
settings{},
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
[]string{
|
[]string{
|
||||||
"-geoip2-city", "/city-path", "-geoip2-asn", "/asn-path", "-tls-bind", ":9000",
|
"-geoip2-city", "/city-path", "-geoip2-asn", "/asn-path", "-tls-bind", ":9000",
|
||||||
"-tls-key", "/key-path",
|
"-tls-key", "/key-path",
|
||||||
},
|
},
|
||||||
},
|
settings{},
|
||||||
{
|
|
||||||
[]string{
|
|
||||||
"-geoip2-city", "/city-path", "-geoip2-asn", "/asn-path", "-enable-http3",
|
|
||||||
},
|
|
||||||
},
|
|
||||||
{
|
|
||||||
[]string{
|
|
||||||
"-geoip2-city", "/city-path", "-geoip2-asn", "/asn-path", "-bind", ":8000",
|
|
||||||
"-trusted-port-header", "port-header",
|
|
||||||
},
|
|
||||||
},
|
},
|
||||||
}
|
}
|
||||||
|
|
||||||
for _, tt := range mandatoryFlags {
|
for _, tt := range mandatoryFlags {
|
||||||
t.Run(strings.Join(tt.args, " "), func(t *testing.T) {
|
t.Run(strings.Join(tt.args, " "), func(t *testing.T) {
|
||||||
_, err := Setup(tt.args)
|
_, err := Setup(tt.args)
|
||||||
require.NotNil(t, err)
|
assert.NotNil(t, err)
|
||||||
assert.Contains(t, err.Error(), "mandatory")
|
assert.Contains(t, err.Error(), "mandatory")
|
||||||
})
|
})
|
||||||
}
|
}
|
||||||
|
@ -75,7 +70,13 @@ func TestParseFlags(t *testing.T) {
|
||||||
City: "/city-path",
|
City: "/city-path",
|
||||||
ASN: "/asn-path",
|
ASN: "/asn-path",
|
||||||
},
|
},
|
||||||
BindAddress: ":8080",
|
TemplatePath: "",
|
||||||
|
BindAddress: ":8080",
|
||||||
|
TLSAddress: "",
|
||||||
|
TLSCrtPath: "",
|
||||||
|
TLSKeyPath: "",
|
||||||
|
TrustedHeader: "",
|
||||||
|
EnableSecureHeaders: false,
|
||||||
Server: serverSettings{
|
Server: serverSettings{
|
||||||
ReadTimeout: 10 * time.Second,
|
ReadTimeout: 10 * time.Second,
|
||||||
WriteTimeout: 10 * time.Second,
|
WriteTimeout: 10 * time.Second,
|
||||||
|
@ -89,7 +90,13 @@ func TestParseFlags(t *testing.T) {
|
||||||
City: "/city-path",
|
City: "/city-path",
|
||||||
ASN: "/asn-path",
|
ASN: "/asn-path",
|
||||||
},
|
},
|
||||||
BindAddress: ":8001",
|
TemplatePath: "",
|
||||||
|
BindAddress: ":8001",
|
||||||
|
TLSAddress: "",
|
||||||
|
TLSCrtPath: "",
|
||||||
|
TLSKeyPath: "",
|
||||||
|
TrustedHeader: "",
|
||||||
|
EnableSecureHeaders: false,
|
||||||
Server: serverSettings{
|
Server: serverSettings{
|
||||||
ReadTimeout: 10 * time.Second,
|
ReadTimeout: 10 * time.Second,
|
||||||
WriteTimeout: 10 * time.Second,
|
WriteTimeout: 10 * time.Second,
|
||||||
|
@ -106,29 +113,13 @@ func TestParseFlags(t *testing.T) {
|
||||||
City: "/city-path",
|
City: "/city-path",
|
||||||
ASN: "/asn-path",
|
ASN: "/asn-path",
|
||||||
},
|
},
|
||||||
BindAddress: ":8080",
|
TemplatePath: "",
|
||||||
TLSAddress: ":9000",
|
BindAddress: ":8080",
|
||||||
TLSCrtPath: "/crt-path",
|
TLSAddress: ":9000",
|
||||||
TLSKeyPath: "/key-path",
|
TLSCrtPath: "/crt-path",
|
||||||
Server: serverSettings{
|
TLSKeyPath: "/key-path",
|
||||||
ReadTimeout: 10 * time.Second,
|
TrustedHeader: "",
|
||||||
WriteTimeout: 10 * time.Second,
|
EnableSecureHeaders: false,
|
||||||
},
|
|
||||||
},
|
|
||||||
},
|
|
||||||
{
|
|
||||||
[]string{
|
|
||||||
"-geoip2-city", "/city-path", "-geoip2-asn", "/asn-path",
|
|
||||||
"-trusted-header", "header", "-trusted-port-header", "port-header",
|
|
||||||
},
|
|
||||||
settings{
|
|
||||||
GeodbPath: geodbPath{
|
|
||||||
City: "/city-path",
|
|
||||||
ASN: "/asn-path",
|
|
||||||
},
|
|
||||||
BindAddress: ":8080",
|
|
||||||
TrustedHeader: "header",
|
|
||||||
TrustedPortHeader: "port-header",
|
|
||||||
Server: serverSettings{
|
Server: serverSettings{
|
||||||
ReadTimeout: 10 * time.Second,
|
ReadTimeout: 10 * time.Second,
|
||||||
WriteTimeout: 10 * time.Second,
|
WriteTimeout: 10 * time.Second,
|
||||||
|
@ -145,7 +136,11 @@ func TestParseFlags(t *testing.T) {
|
||||||
City: "/city-path",
|
City: "/city-path",
|
||||||
ASN: "/asn-path",
|
ASN: "/asn-path",
|
||||||
},
|
},
|
||||||
|
TemplatePath: "",
|
||||||
BindAddress: ":8080",
|
BindAddress: ":8080",
|
||||||
|
TLSAddress: "",
|
||||||
|
TLSCrtPath: "",
|
||||||
|
TLSKeyPath: "",
|
||||||
TrustedHeader: "header",
|
TrustedHeader: "header",
|
||||||
EnableSecureHeaders: true,
|
EnableSecureHeaders: true,
|
||||||
Server: serverSettings{
|
Server: serverSettings{
|
||||||
|
@ -159,7 +154,7 @@ func TestParseFlags(t *testing.T) {
|
||||||
for _, tt := range flags {
|
for _, tt := range flags {
|
||||||
t.Run(strings.Join(tt.args, " "), func(t *testing.T) {
|
t.Run(strings.Join(tt.args, " "), func(t *testing.T) {
|
||||||
_, err := Setup(tt.args)
|
_, err := Setup(tt.args)
|
||||||
require.Nil(t, err)
|
assert.Nil(t, err)
|
||||||
assert.True(t, reflect.DeepEqual(App, tt.conf))
|
assert.True(t, reflect.DeepEqual(App, tt.conf))
|
||||||
})
|
})
|
||||||
}
|
}
|
||||||
|
@ -197,6 +192,6 @@ func TestParseFlagTemplate(t *testing.T) {
|
||||||
"-template", "/",
|
"-template", "/",
|
||||||
}
|
}
|
||||||
_, err = Setup(flags)
|
_, err = Setup(flags)
|
||||||
require.Error(t, err)
|
assert.Error(t, err)
|
||||||
assert.Contains(t, err.Error(), "must be a file")
|
assert.Contains(t, err.Error(), "must be a file")
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,10 +0,0 @@
|
||||||
package uuid
|
|
||||||
|
|
||||||
import (
|
|
||||||
"github.com/google/uuid"
|
|
||||||
)
|
|
||||||
|
|
||||||
func IsValid(u string) bool {
|
|
||||||
_, err := uuid.Parse(u)
|
|
||||||
return err == nil
|
|
||||||
}
|
|
|
@ -1,37 +0,0 @@
|
||||||
package uuid
|
|
||||||
|
|
||||||
import (
|
|
||||||
"testing"
|
|
||||||
|
|
||||||
"github.com/stretchr/testify/assert"
|
|
||||||
)
|
|
||||||
|
|
||||||
func TestIsValid(t *testing.T) {
|
|
||||||
tests := []struct {
|
|
||||||
name string
|
|
||||||
u string
|
|
||||||
want bool
|
|
||||||
}{
|
|
||||||
{
|
|
||||||
name: "Valid UUID",
|
|
||||||
u: "3b241101-e2bb-4255-8caf-4136c566a964",
|
|
||||||
want: true,
|
|
||||||
},
|
|
||||||
{
|
|
||||||
name: "Invalid UUID",
|
|
||||||
u: "invalid-uuid",
|
|
||||||
want: false,
|
|
||||||
},
|
|
||||||
{
|
|
||||||
name: "Empty string",
|
|
||||||
u: "",
|
|
||||||
want: false,
|
|
||||||
},
|
|
||||||
}
|
|
||||||
|
|
||||||
for _, tt := range tests {
|
|
||||||
t.Run(tt.name, func(t *testing.T) {
|
|
||||||
assert.True(t, IsValid(tt.u) == tt.want)
|
|
||||||
})
|
|
||||||
}
|
|
||||||
}
|
|
|
@ -68,10 +68,18 @@ func CloseDBs() {
|
||||||
|
|
||||||
// LookUp an IP and get city data
|
// LookUp an IP and get city data
|
||||||
func (record *GeoRecord) LookUp(ip net.IP) error {
|
func (record *GeoRecord) LookUp(ip net.IP) error {
|
||||||
return db.city.Lookup(ip, record)
|
if err := db.city.Lookup(ip, record); err != nil {
|
||||||
|
return err
|
||||||
|
}
|
||||||
|
|
||||||
|
return nil
|
||||||
}
|
}
|
||||||
|
|
||||||
// LookUp an IP and get ASN data
|
// LookUp an IP and get ASN data
|
||||||
func (record *ASNRecord) LookUp(ip net.IP) error {
|
func (record *ASNRecord) LookUp(ip net.IP) error {
|
||||||
return db.asn.Lookup(ip, record)
|
if err := db.asn.Lookup(ip, record); err != nil {
|
||||||
|
return err
|
||||||
|
}
|
||||||
|
|
||||||
|
return nil
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,165 +0,0 @@
|
||||||
package resolver
|
|
||||||
|
|
||||||
import (
|
|
||||||
"log"
|
|
||||||
"net"
|
|
||||||
"strings"
|
|
||||||
|
|
||||||
"github.com/dcarrillo/whatismyip/internal/setting"
|
|
||||||
"github.com/dcarrillo/whatismyip/internal/validator/uuid"
|
|
||||||
"github.com/miekg/dns"
|
|
||||||
"github.com/patrickmn/go-cache"
|
|
||||||
)
|
|
||||||
|
|
||||||
type Resolver struct {
|
|
||||||
handler *dns.ServeMux
|
|
||||||
store *cache.Cache
|
|
||||||
domain string
|
|
||||||
rr []string
|
|
||||||
ipv4 []net.IP
|
|
||||||
ipv6 []net.IP
|
|
||||||
}
|
|
||||||
|
|
||||||
func ensureDotSuffix(s string) string {
|
|
||||||
if !strings.HasSuffix(s, ".") {
|
|
||||||
return s + "."
|
|
||||||
}
|
|
||||||
return s
|
|
||||||
}
|
|
||||||
|
|
||||||
func Setup(store *cache.Cache) *Resolver {
|
|
||||||
var ipv4, ipv6 []net.IP
|
|
||||||
for _, ip := range setting.App.Resolver.Ipv4 {
|
|
||||||
ipv4 = append(ipv4, net.ParseIP(ip))
|
|
||||||
}
|
|
||||||
for _, ip := range setting.App.Resolver.Ipv6 {
|
|
||||||
ipv6 = append(ipv6, net.ParseIP(ip))
|
|
||||||
}
|
|
||||||
|
|
||||||
resolver := &Resolver{
|
|
||||||
handler: dns.NewServeMux(),
|
|
||||||
store: store,
|
|
||||||
domain: ensureDotSuffix(setting.App.Resolver.Domain),
|
|
||||||
rr: setting.App.Resolver.ResourceRecords,
|
|
||||||
ipv4: ipv4,
|
|
||||||
ipv6: ipv6,
|
|
||||||
}
|
|
||||||
resolver.handler.HandleFunc(resolver.domain, resolver.resolve)
|
|
||||||
resolver.handler.HandleFunc(".", resolver.blackHole)
|
|
||||||
|
|
||||||
return resolver
|
|
||||||
}
|
|
||||||
|
|
||||||
func (rsv *Resolver) Handler() *dns.ServeMux {
|
|
||||||
return rsv.handler
|
|
||||||
}
|
|
||||||
|
|
||||||
func (rsv *Resolver) blackHole(w dns.ResponseWriter, r *dns.Msg) {
|
|
||||||
msg := startReply(r)
|
|
||||||
msg.SetRcode(r, dns.RcodeRefused)
|
|
||||||
w.WriteMsg(msg)
|
|
||||||
logger(w, r.Question[0], msg.Rcode)
|
|
||||||
}
|
|
||||||
|
|
||||||
func (rsv *Resolver) resolve(w dns.ResponseWriter, r *dns.Msg) {
|
|
||||||
msg := startReply(r)
|
|
||||||
q := r.Question[0]
|
|
||||||
ip, _, _ := net.SplitHostPort(w.RemoteAddr().String())
|
|
||||||
|
|
||||||
for _, res := range rsv.rr {
|
|
||||||
t := strings.Split(res, " ")[2]
|
|
||||||
if q.Qtype == dns.StringToType[t] {
|
|
||||||
brr, err := buildRR(rsv.domain + " " + res)
|
|
||||||
if err != nil {
|
|
||||||
msg.SetRcode(r, dns.RcodeServerFailure)
|
|
||||||
logger(w, q, msg.Rcode, err.Error())
|
|
||||||
} else {
|
|
||||||
msg.Answer = append(msg.Answer, brr)
|
|
||||||
logger(w, q, msg.Rcode)
|
|
||||||
}
|
|
||||||
w.WriteMsg(msg)
|
|
||||||
return
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
lowerName := strings.ToLower(q.Name) // lowercase because of dns-0x20
|
|
||||||
subDomain := strings.Split(lowerName, ".")[0]
|
|
||||||
switch {
|
|
||||||
case uuid.IsValid(subDomain):
|
|
||||||
msg.SetRcode(r, rsv.getIP(q, msg))
|
|
||||||
rsv.store.Add(subDomain, ip, cache.DefaultExpiration)
|
|
||||||
case lowerName == rsv.domain:
|
|
||||||
msg.SetRcode(r, rsv.getIP(q, msg))
|
|
||||||
default:
|
|
||||||
msg.SetRcode(r, dns.RcodeRefused)
|
|
||||||
}
|
|
||||||
|
|
||||||
w.WriteMsg(msg)
|
|
||||||
logger(w, q, msg.Rcode)
|
|
||||||
}
|
|
||||||
|
|
||||||
func (rsv *Resolver) getIP(question dns.Question, msg *dns.Msg) int {
|
|
||||||
if question.Qtype == dns.TypeA && len(rsv.ipv4) > 0 {
|
|
||||||
for _, ip := range rsv.ipv4 {
|
|
||||||
msg.Answer = append(msg.Answer, &dns.A{
|
|
||||||
Hdr: setHdr(question),
|
|
||||||
A: ip,
|
|
||||||
})
|
|
||||||
}
|
|
||||||
return dns.RcodeSuccess
|
|
||||||
}
|
|
||||||
|
|
||||||
if question.Qtype == dns.TypeAAAA && len(rsv.ipv6) > 0 {
|
|
||||||
for _, ip := range rsv.ipv6 {
|
|
||||||
msg.Answer = append(msg.Answer, &dns.AAAA{
|
|
||||||
Hdr: setHdr(question),
|
|
||||||
AAAA: ip,
|
|
||||||
})
|
|
||||||
}
|
|
||||||
return dns.RcodeSuccess
|
|
||||||
}
|
|
||||||
|
|
||||||
return dns.RcodeRefused
|
|
||||||
}
|
|
||||||
|
|
||||||
func buildRR(rrs string) (dns.RR, error) {
|
|
||||||
rr, err := dns.NewRR(rrs)
|
|
||||||
if err != nil {
|
|
||||||
return nil, err
|
|
||||||
}
|
|
||||||
|
|
||||||
return rr, nil
|
|
||||||
}
|
|
||||||
|
|
||||||
func setHdr(q dns.Question) dns.RR_Header {
|
|
||||||
return dns.RR_Header{
|
|
||||||
Name: q.Name,
|
|
||||||
Rrtype: q.Qtype,
|
|
||||||
Class: dns.ClassINET,
|
|
||||||
Ttl: 60,
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func startReply(r *dns.Msg) *dns.Msg {
|
|
||||||
msg := new(dns.Msg)
|
|
||||||
msg.SetReply(r)
|
|
||||||
msg.Authoritative = true
|
|
||||||
|
|
||||||
return msg
|
|
||||||
}
|
|
||||||
|
|
||||||
func logger(w dns.ResponseWriter, q dns.Question, code int, err ...string) {
|
|
||||||
emsg := ""
|
|
||||||
if len(err) > 0 {
|
|
||||||
emsg = " - " + strings.Join(err, " ")
|
|
||||||
}
|
|
||||||
ip, _, _ := net.SplitHostPort(w.RemoteAddr().String())
|
|
||||||
log.Printf(
|
|
||||||
"DNS %s - %s - %s - %s%s",
|
|
||||||
ip,
|
|
||||||
dns.TypeToString[q.Qtype],
|
|
||||||
q.Name,
|
|
||||||
dns.RcodeToString[code],
|
|
||||||
emsg,
|
|
||||||
)
|
|
||||||
}
|
|
|
@ -1,85 +0,0 @@
|
||||||
package router
|
|
||||||
|
|
||||||
import (
|
|
||||||
"fmt"
|
|
||||||
"net"
|
|
||||||
"net/http"
|
|
||||||
"strings"
|
|
||||||
|
|
||||||
validator "github.com/dcarrillo/whatismyip/internal/validator/uuid"
|
|
||||||
"github.com/dcarrillo/whatismyip/service"
|
|
||||||
"github.com/gin-gonic/gin"
|
|
||||||
"github.com/google/uuid"
|
|
||||||
"github.com/patrickmn/go-cache"
|
|
||||||
)
|
|
||||||
|
|
||||||
type DNSJSONResponse struct {
|
|
||||||
DNS dnsData `json:"dns"`
|
|
||||||
}
|
|
||||||
type dnsData struct {
|
|
||||||
IP string `json:"ip"`
|
|
||||||
Country string `json:"country"`
|
|
||||||
AsnOrganization string `json:"provider"`
|
|
||||||
}
|
|
||||||
|
|
||||||
// TODO
|
|
||||||
// Implement a proper vhost manager instead of using a middleware
|
|
||||||
func GetDNSDiscoveryHandler(store *cache.Cache, domain string, redirectPort string) gin.HandlerFunc {
|
|
||||||
return func(ctx *gin.Context) {
|
|
||||||
if !strings.HasSuffix(ctx.Request.Host, domain) {
|
|
||||||
ctx.Next()
|
|
||||||
return
|
|
||||||
}
|
|
||||||
|
|
||||||
if ctx.Request.Host == domain && ctx.Request.URL.Path == "/" {
|
|
||||||
ctx.Redirect(http.StatusFound, fmt.Sprintf("http://%s.%s%s", uuid.New().String(), domain, redirectPort))
|
|
||||||
ctx.Abort()
|
|
||||||
return
|
|
||||||
}
|
|
||||||
|
|
||||||
handleDNS(ctx, store)
|
|
||||||
ctx.Abort()
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func handleDNS(ctx *gin.Context, store *cache.Cache) {
|
|
||||||
d := strings.Split(ctx.Request.Host, ".")[0]
|
|
||||||
if !validator.IsValid(d) {
|
|
||||||
ctx.String(http.StatusNotFound, http.StatusText(http.StatusNotFound))
|
|
||||||
return
|
|
||||||
}
|
|
||||||
|
|
||||||
v, found := store.Get(d)
|
|
||||||
if !found {
|
|
||||||
ctx.String(http.StatusNotFound, http.StatusText(http.StatusNotFound))
|
|
||||||
return
|
|
||||||
}
|
|
||||||
|
|
||||||
ipStr, ok := v.(string)
|
|
||||||
if !ok {
|
|
||||||
ctx.String(http.StatusNotFound, http.StatusText(http.StatusNotFound))
|
|
||||||
return
|
|
||||||
}
|
|
||||||
|
|
||||||
ip := net.ParseIP(ipStr)
|
|
||||||
if ip == nil {
|
|
||||||
ctx.String(http.StatusNotFound, http.StatusText(http.StatusNotFound))
|
|
||||||
return
|
|
||||||
}
|
|
||||||
|
|
||||||
geo := service.Geo{IP: ip}
|
|
||||||
j := DNSJSONResponse{
|
|
||||||
DNS: dnsData{
|
|
||||||
IP: ipStr,
|
|
||||||
Country: geo.LookUpCity().Country.Names["en"],
|
|
||||||
AsnOrganization: geo.LookUpASN().AutonomousSystemOrganization,
|
|
||||||
},
|
|
||||||
}
|
|
||||||
|
|
||||||
switch ctx.NegotiateFormat(gin.MIMEPlain, gin.MIMEHTML, gin.MIMEJSON) {
|
|
||||||
case gin.MIMEJSON:
|
|
||||||
ctx.JSON(http.StatusOK, j)
|
|
||||||
default:
|
|
||||||
ctx.String(http.StatusOK, fmt.Sprintf("%s (%s / %s)\n", j.DNS.IP, j.DNS.Country, j.DNS.AsnOrganization))
|
|
||||||
}
|
|
||||||
}
|
|
|
@ -1,153 +0,0 @@
|
||||||
package router
|
|
||||||
|
|
||||||
import (
|
|
||||||
"net/http"
|
|
||||||
"net/http/httptest"
|
|
||||||
"net/url"
|
|
||||||
"strings"
|
|
||||||
"testing"
|
|
||||||
|
|
||||||
validator "github.com/dcarrillo/whatismyip/internal/validator/uuid"
|
|
||||||
"github.com/gin-gonic/gin"
|
|
||||||
"github.com/google/uuid"
|
|
||||||
"github.com/patrickmn/go-cache"
|
|
||||||
"github.com/stretchr/testify/assert"
|
|
||||||
)
|
|
||||||
|
|
||||||
func TestGetDNSDiscoveryHandler(t *testing.T) {
|
|
||||||
store := cache.New(cache.NoExpiration, cache.NoExpiration)
|
|
||||||
handler := GetDNSDiscoveryHandler(store, domain, "")
|
|
||||||
|
|
||||||
t.Run("calls next if host does not have domain suffix", func(t *testing.T) {
|
|
||||||
req, _ := http.NewRequest("GET", "/", nil)
|
|
||||||
req.Header.Set(trustedHeader, testIP.ipv4)
|
|
||||||
req.Host = "example.com"
|
|
||||||
|
|
||||||
w := httptest.NewRecorder()
|
|
||||||
c, _ := gin.CreateTestContext(w)
|
|
||||||
c.Request = req
|
|
||||||
handler(c)
|
|
||||||
app.ServeHTTP(w, req)
|
|
||||||
|
|
||||||
assert.Equal(t, http.StatusOK, w.Code)
|
|
||||||
assert.Equal(t, testIP.ipv4+"\n", w.Body.String())
|
|
||||||
})
|
|
||||||
|
|
||||||
t.Run("return 404 if there is a path", func(t *testing.T) {
|
|
||||||
req, _ := http.NewRequest("GET", "/path", nil)
|
|
||||||
req.Host = domain
|
|
||||||
|
|
||||||
w := httptest.NewRecorder()
|
|
||||||
c, _ := gin.CreateTestContext(w)
|
|
||||||
c.Request = req
|
|
||||||
handler(c)
|
|
||||||
app.ServeHTTP(w, req)
|
|
||||||
|
|
||||||
assert.Equal(t, http.StatusNotFound, w.Code)
|
|
||||||
})
|
|
||||||
|
|
||||||
t.Run("redirects if host is domain", func(t *testing.T) {
|
|
||||||
req, _ := http.NewRequest("GET", "/", nil)
|
|
||||||
req.Host = domain
|
|
||||||
|
|
||||||
w := httptest.NewRecorder()
|
|
||||||
c, _ := gin.CreateTestContext(w)
|
|
||||||
c.Request = req
|
|
||||||
handler(c)
|
|
||||||
|
|
||||||
assert.Equal(t, http.StatusFound, w.Code)
|
|
||||||
r, err := url.Parse(w.Header().Get("Location"))
|
|
||||||
assert.NoError(t, err)
|
|
||||||
assert.True(t, validator.IsValid(strings.Split(r.Host, ".")[0]))
|
|
||||||
assert.Equal(t, domain, strings.Join(strings.Split(r.Host, ".")[1:], "."))
|
|
||||||
})
|
|
||||||
}
|
|
||||||
|
|
||||||
func TestHandleDNS(t *testing.T) {
|
|
||||||
store := cache.New(cache.NoExpiration, cache.NoExpiration)
|
|
||||||
u := uuid.New().String()
|
|
||||||
|
|
||||||
tests := []struct {
|
|
||||||
name string
|
|
||||||
subDomain string
|
|
||||||
stored any
|
|
||||||
}{
|
|
||||||
{
|
|
||||||
name: "not found if the subdomain is not a valid uuid",
|
|
||||||
subDomain: "not-uuid",
|
|
||||||
stored: "",
|
|
||||||
},
|
|
||||||
{
|
|
||||||
name: "not found if the ip is not found in the store",
|
|
||||||
subDomain: u,
|
|
||||||
stored: "",
|
|
||||||
},
|
|
||||||
{
|
|
||||||
name: "not found if the ip is in store but is not valid",
|
|
||||||
subDomain: u,
|
|
||||||
stored: "bogus",
|
|
||||||
},
|
|
||||||
{
|
|
||||||
name: "not found if the store contains no string",
|
|
||||||
subDomain: u,
|
|
||||||
stored: 20,
|
|
||||||
},
|
|
||||||
}
|
|
||||||
|
|
||||||
for _, tt := range tests {
|
|
||||||
t.Run(tt.name, func(t *testing.T) {
|
|
||||||
req, _ := http.NewRequest("GET", "/", nil)
|
|
||||||
req.Host = tt.subDomain + "." + domain
|
|
||||||
|
|
||||||
if tt.stored != "" {
|
|
||||||
store.Add(tt.subDomain, tt.stored, cache.DefaultExpiration)
|
|
||||||
}
|
|
||||||
|
|
||||||
w := httptest.NewRecorder()
|
|
||||||
c, _ := gin.CreateTestContext(w)
|
|
||||||
c.Request = req
|
|
||||||
handleDNS(c, store)
|
|
||||||
assert.Equal(t, http.StatusNotFound, w.Code)
|
|
||||||
})
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func TestAcceptDNSRequest(t *testing.T) {
|
|
||||||
store := cache.New(cache.NoExpiration, cache.NoExpiration)
|
|
||||||
|
|
||||||
tests := []struct {
|
|
||||||
name string
|
|
||||||
accept string
|
|
||||||
want string
|
|
||||||
}{
|
|
||||||
{
|
|
||||||
name: "returns json dns data",
|
|
||||||
accept: "application/json",
|
|
||||||
want: jsonDNSIPv4,
|
|
||||||
},
|
|
||||||
{
|
|
||||||
name: "return plan text dns data",
|
|
||||||
accept: "text/plain",
|
|
||||||
want: plainDNSIPv4,
|
|
||||||
},
|
|
||||||
}
|
|
||||||
|
|
||||||
for _, tt := range tests {
|
|
||||||
t.Run(tt.name, func(t *testing.T) {
|
|
||||||
req, _ := http.NewRequest("GET", "/", nil)
|
|
||||||
u := uuid.New().String()
|
|
||||||
req.Host = u + "." + domain
|
|
||||||
req.Header.Add("Accept", tt.accept)
|
|
||||||
|
|
||||||
w := httptest.NewRecorder()
|
|
||||||
c, _ := gin.CreateTestContext(w)
|
|
||||||
c.Request = req
|
|
||||||
|
|
||||||
store.Add(u, testIP.ipv4, cache.DefaultExpiration)
|
|
||||||
handleDNS(c, store)
|
|
||||||
|
|
||||||
assert.Equal(t, http.StatusOK, w.Code)
|
|
||||||
assert.Equal(t, tt.want, w.Body.String())
|
|
||||||
})
|
|
||||||
}
|
|
||||||
}
|
|
|
@ -11,6 +11,7 @@ import (
|
||||||
"github.com/gin-gonic/gin"
|
"github.com/gin-gonic/gin"
|
||||||
)
|
)
|
||||||
|
|
||||||
|
// JSONResponse maps data as json
|
||||||
type JSONResponse struct {
|
type JSONResponse struct {
|
||||||
IP string `json:"ip"`
|
IP string `json:"ip"`
|
||||||
IPVersion byte `json:"ip_version"`
|
IPVersion byte `json:"ip_version"`
|
||||||
|
@ -43,31 +44,15 @@ func getRoot(ctx *gin.Context) {
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
func getClientPort(ctx *gin.Context) string {
|
|
||||||
var port string
|
|
||||||
if setting.App.TrustedPortHeader == "" {
|
|
||||||
if setting.App.TrustedHeader != "" {
|
|
||||||
port = "unknown"
|
|
||||||
} else {
|
|
||||||
_, port, _ = net.SplitHostPort(ctx.Request.RemoteAddr)
|
|
||||||
}
|
|
||||||
} else {
|
|
||||||
port = ctx.GetHeader(setting.App.TrustedPortHeader)
|
|
||||||
if port == "" {
|
|
||||||
port = "unknown"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
return port
|
|
||||||
}
|
|
||||||
|
|
||||||
func getClientPortAsString(ctx *gin.Context) {
|
func getClientPortAsString(ctx *gin.Context) {
|
||||||
ctx.String(http.StatusOK, getClientPort(ctx)+"\n")
|
_, port, _ := net.SplitHostPort(ctx.Request.RemoteAddr)
|
||||||
|
ctx.String(http.StatusOK, port+"\n")
|
||||||
}
|
}
|
||||||
|
|
||||||
func getAllAsString(ctx *gin.Context) {
|
func getAllAsString(ctx *gin.Context) {
|
||||||
output := "IP: " + ctx.ClientIP() + "\n"
|
output := "IP: " + ctx.ClientIP() + "\n"
|
||||||
output += "Client Port: " + getClientPort(ctx) + "\n"
|
_, port, _ := net.SplitHostPort(ctx.Request.RemoteAddr)
|
||||||
|
output += "Client Port: " + port + "\n"
|
||||||
|
|
||||||
r := service.Geo{IP: net.ParseIP(ctx.ClientIP())}
|
r := service.Geo{IP: net.ParseIP(ctx.ClientIP())}
|
||||||
if record := r.LookUpCity(); record != nil {
|
if record := r.LookUpCity(); record != nil {
|
||||||
|
@ -78,8 +63,8 @@ func getAllAsString(ctx *gin.Context) {
|
||||||
output += geoASNRecordToString(record) + "\n"
|
output += geoASNRecordToString(record) + "\n"
|
||||||
}
|
}
|
||||||
|
|
||||||
h := httputils.GetHeadersWithoutTrustedHeaders(ctx)
|
h := ctx.Request.Header
|
||||||
h.Set("Host", ctx.Request.Host)
|
h["Host"] = []string{ctx.Request.Host}
|
||||||
output += httputils.HeadersToSortedString(h)
|
output += httputils.HeadersToSortedString(h)
|
||||||
|
|
||||||
ctx.String(http.StatusOK, output)
|
ctx.String(http.StatusOK, output)
|
||||||
|
@ -98,10 +83,11 @@ func jsonOutput(ctx *gin.Context) JSONResponse {
|
||||||
version = 6
|
version = 6
|
||||||
}
|
}
|
||||||
|
|
||||||
|
_, port, _ := net.SplitHostPort(ctx.Request.RemoteAddr)
|
||||||
return JSONResponse{
|
return JSONResponse{
|
||||||
IP: ctx.ClientIP(),
|
IP: ctx.ClientIP(),
|
||||||
IPVersion: version,
|
IPVersion: version,
|
||||||
ClientPort: getClientPort(ctx),
|
ClientPort: port,
|
||||||
Country: cityRecord.Country.Names["en"],
|
Country: cityRecord.Country.Names["en"],
|
||||||
CountryCode: cityRecord.Country.ISOCode,
|
CountryCode: cityRecord.Country.ISOCode,
|
||||||
City: cityRecord.City.Names["en"],
|
City: cityRecord.City.Names["en"],
|
||||||
|
@ -112,6 +98,6 @@ func jsonOutput(ctx *gin.Context) JSONResponse {
|
||||||
ASN: asnRecord.AutonomousSystemNumber,
|
ASN: asnRecord.AutonomousSystemNumber,
|
||||||
ASNOrganization: asnRecord.AutonomousSystemOrganization,
|
ASNOrganization: asnRecord.AutonomousSystemOrganization,
|
||||||
Host: ctx.Request.Host,
|
Host: ctx.Request.Host,
|
||||||
Headers: httputils.GetHeadersWithoutTrustedHeaders(ctx),
|
Headers: ctx.Request.Header,
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
|
@ -6,7 +6,6 @@ import (
|
||||||
"net/http/httptest"
|
"net/http/httptest"
|
||||||
"testing"
|
"testing"
|
||||||
|
|
||||||
"github.com/dcarrillo/whatismyip/internal/setting"
|
|
||||||
"github.com/stretchr/testify/assert"
|
"github.com/stretchr/testify/assert"
|
||||||
)
|
)
|
||||||
|
|
||||||
|
@ -98,76 +97,16 @@ func TestHost(t *testing.T) {
|
||||||
}
|
}
|
||||||
|
|
||||||
func TestClientPort(t *testing.T) {
|
func TestClientPort(t *testing.T) {
|
||||||
type args struct {
|
req, _ := http.NewRequest("GET", "/client-port", nil)
|
||||||
params []string
|
req.RemoteAddr = net.JoinHostPort(testIP.ipv4, "1000")
|
||||||
headers map[string][]string
|
req.Header.Set(trustedHeader, testIP.ipv4)
|
||||||
}
|
|
||||||
tests := []struct {
|
|
||||||
name string
|
|
||||||
args args
|
|
||||||
expected string
|
|
||||||
}{
|
|
||||||
{
|
|
||||||
name: "No trusted headers set",
|
|
||||||
expected: "1000\n",
|
|
||||||
},
|
|
||||||
{
|
|
||||||
name: "Trusted header only set",
|
|
||||||
args: args{
|
|
||||||
params: []string{
|
|
||||||
"-geoip2-city", "city",
|
|
||||||
"-geoip2-asn", "asn",
|
|
||||||
"-trusted-header", trustedHeader,
|
|
||||||
},
|
|
||||||
},
|
|
||||||
expected: "unknown\n",
|
|
||||||
},
|
|
||||||
{
|
|
||||||
name: "Trusted and port header set but not included in headers",
|
|
||||||
args: args{
|
|
||||||
params: []string{
|
|
||||||
"-geoip2-city", "city",
|
|
||||||
"-geoip2-asn", "asn",
|
|
||||||
"-trusted-header", trustedHeader,
|
|
||||||
"-trusted-port-header", trustedPortHeader,
|
|
||||||
},
|
|
||||||
},
|
|
||||||
expected: "unknown\n",
|
|
||||||
},
|
|
||||||
{
|
|
||||||
name: "Trusted and port header set and included in headers",
|
|
||||||
args: args{
|
|
||||||
params: []string{
|
|
||||||
"-geoip2-city", "city",
|
|
||||||
"-geoip2-asn", "asn",
|
|
||||||
"-trusted-header", trustedHeader,
|
|
||||||
"-trusted-port-header", trustedPortHeader,
|
|
||||||
},
|
|
||||||
headers: map[string][]string{
|
|
||||||
trustedHeader: {testIP.ipv4},
|
|
||||||
trustedPortHeader: {"1001"},
|
|
||||||
},
|
|
||||||
},
|
|
||||||
expected: "1001\n",
|
|
||||||
},
|
|
||||||
}
|
|
||||||
|
|
||||||
for _, tt := range tests {
|
w := httptest.NewRecorder()
|
||||||
_, _ = setting.Setup(tt.args.params)
|
app.ServeHTTP(w, req)
|
||||||
t.Run(tt.name, func(t *testing.T) {
|
|
||||||
req, _ := http.NewRequest("GET", "/client-port", nil)
|
|
||||||
req.RemoteAddr = net.JoinHostPort(testIP.ipv4, "1000")
|
|
||||||
req.Header = tt.args.headers
|
|
||||||
|
|
||||||
w := httptest.NewRecorder()
|
assert.Equal(t, 200, w.Code)
|
||||||
app.ServeHTTP(w, req)
|
assert.Equal(t, contentType.text, w.Header().Get("Content-Type"))
|
||||||
|
assert.Equal(t, "1000\n", w.Body.String())
|
||||||
assert.Equal(t, 200, w.Code)
|
|
||||||
assert.Equal(t, contentType.text, w.Header().Get("Content-Type"))
|
|
||||||
assert.Equal(t, tt.expected, w.Body.String())
|
|
||||||
t.Log(w.Header())
|
|
||||||
})
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
|
|
||||||
func TestNotFound(t *testing.T) {
|
func TestNotFound(t *testing.T) {
|
||||||
|
@ -181,15 +120,6 @@ func TestNotFound(t *testing.T) {
|
||||||
}
|
}
|
||||||
|
|
||||||
func TestJSON(t *testing.T) {
|
func TestJSON(t *testing.T) {
|
||||||
_, _ = setting.Setup(
|
|
||||||
[]string{
|
|
||||||
"-geoip2-city", "city",
|
|
||||||
"-geoip2-asn", "asn",
|
|
||||||
"-trusted-header", trustedHeader,
|
|
||||||
"-trusted-port-header", trustedPortHeader,
|
|
||||||
},
|
|
||||||
)
|
|
||||||
|
|
||||||
type args struct {
|
type args struct {
|
||||||
ip string
|
ip string
|
||||||
}
|
}
|
||||||
|
@ -219,7 +149,6 @@ func TestJSON(t *testing.T) {
|
||||||
req.RemoteAddr = net.JoinHostPort(tt.args.ip, "1000")
|
req.RemoteAddr = net.JoinHostPort(tt.args.ip, "1000")
|
||||||
req.Host = "test"
|
req.Host = "test"
|
||||||
req.Header.Set(trustedHeader, tt.args.ip)
|
req.Header.Set(trustedHeader, tt.args.ip)
|
||||||
req.Header.Set(trustedPortHeader, "1001")
|
|
||||||
|
|
||||||
w := httptest.NewRecorder()
|
w := httptest.NewRecorder()
|
||||||
app.ServeHTTP(w, req)
|
app.ServeHTTP(w, req)
|
||||||
|
@ -233,7 +162,7 @@ func TestJSON(t *testing.T) {
|
||||||
|
|
||||||
func TestAll(t *testing.T) {
|
func TestAll(t *testing.T) {
|
||||||
expected := `IP: 81.2.69.192
|
expected := `IP: 81.2.69.192
|
||||||
Client Port: 1001
|
Client Port: 1000
|
||||||
City: London
|
City: London
|
||||||
Country: United Kingdom
|
Country: United Kingdom
|
||||||
Country Code: GB
|
Country Code: GB
|
||||||
|
@ -247,21 +176,13 @@ ASN Organization:
|
||||||
|
|
||||||
Header1: one
|
Header1: one
|
||||||
Host: test
|
Host: test
|
||||||
|
X-Real-Ip: 81.2.69.192
|
||||||
`
|
`
|
||||||
_, _ = setting.Setup(
|
|
||||||
[]string{
|
|
||||||
"-geoip2-city", "city",
|
|
||||||
"-geoip2-asn", "asn",
|
|
||||||
"-trusted-header", trustedHeader,
|
|
||||||
"-trusted-port-header", trustedPortHeader,
|
|
||||||
},
|
|
||||||
)
|
|
||||||
|
|
||||||
req, _ := http.NewRequest("GET", "/all", nil)
|
req, _ := http.NewRequest("GET", "/all", nil)
|
||||||
req.RemoteAddr = net.JoinHostPort(testIP.ipv4, "1000")
|
req.RemoteAddr = net.JoinHostPort(testIP.ipv4, "1000")
|
||||||
req.Host = "test"
|
req.Host = "test"
|
||||||
req.Header.Set(trustedHeader, testIP.ipv4)
|
req.Header.Set(trustedHeader, testIP.ipv4)
|
||||||
req.Header.Set(trustedPortHeader, "1001")
|
|
||||||
req.Header.Set("Header1", "one")
|
req.Header.Set("Header1", "one")
|
||||||
|
|
||||||
w := httptest.NewRecorder()
|
w := httptest.NewRecorder()
|
||||||
|
|
|
@ -10,17 +10,15 @@ import (
|
||||||
)
|
)
|
||||||
|
|
||||||
func getHeadersAsSortedString(ctx *gin.Context) {
|
func getHeadersAsSortedString(ctx *gin.Context) {
|
||||||
h := httputils.GetHeadersWithoutTrustedHeaders(ctx)
|
h := ctx.Request.Header
|
||||||
h.Set("Host", ctx.Request.Host)
|
h["Host"] = []string{ctx.Request.Host}
|
||||||
|
|
||||||
ctx.String(http.StatusOK, httputils.HeadersToSortedString(h))
|
ctx.String(http.StatusOK, httputils.HeadersToSortedString(h))
|
||||||
}
|
}
|
||||||
|
|
||||||
func getHeaderAsString(ctx *gin.Context) {
|
func getHeaderAsString(ctx *gin.Context) {
|
||||||
headers := httputils.GetHeadersWithoutTrustedHeaders(ctx)
|
|
||||||
|
|
||||||
h := ctx.Params.ByName("header")
|
h := ctx.Params.ByName("header")
|
||||||
if v := headers.Get(ctx.Params.ByName("header")); v != "" {
|
if v := ctx.GetHeader(h); v != "" {
|
||||||
ctx.String(http.StatusOK, template.HTMLEscapeString(v))
|
ctx.String(http.StatusOK, template.HTMLEscapeString(v))
|
||||||
} else if strings.ToLower(h) == "host" {
|
} else if strings.ToLower(h) == "host" {
|
||||||
ctx.String(http.StatusOK, template.HTMLEscapeString(ctx.Request.Host))
|
ctx.String(http.StatusOK, template.HTMLEscapeString(ctx.Request.Host))
|
||||||
|
|
|
@ -5,7 +5,6 @@ import (
|
||||||
"net/http/httptest"
|
"net/http/httptest"
|
||||||
"testing"
|
"testing"
|
||||||
|
|
||||||
"github.com/dcarrillo/whatismyip/internal/setting"
|
|
||||||
"github.com/stretchr/testify/assert"
|
"github.com/stretchr/testify/assert"
|
||||||
)
|
)
|
||||||
|
|
||||||
|
@ -27,20 +26,13 @@ Header2: value22
|
||||||
Header3: value3
|
Header3: value3
|
||||||
Host:
|
Host:
|
||||||
`
|
`
|
||||||
_, _ = setting.Setup([]string{
|
|
||||||
"-geoip2-city", "city",
|
|
||||||
"-geoip2-asn", "asn",
|
|
||||||
"-trusted-header", trustedHeader,
|
|
||||||
"-trusted-port-header", trustedPortHeader,
|
|
||||||
})
|
|
||||||
req, _ := http.NewRequest("GET", "/headers", nil)
|
req, _ := http.NewRequest("GET", "/headers", nil)
|
||||||
req.Header = map[string][]string{
|
req.Header = map[string][]string{
|
||||||
"Header1": {"value1"},
|
"Header1": {"value1"},
|
||||||
"Header2": {"value21", "value22"},
|
"Header2": {"value21", "value22"},
|
||||||
"Header3": {"value3"},
|
"Header3": {"value3"},
|
||||||
}
|
}
|
||||||
req.Header.Set(trustedHeader, "1.1.1.1")
|
|
||||||
req.Header.Set(trustedPortHeader, "1025")
|
|
||||||
|
|
||||||
w := httptest.NewRecorder()
|
w := httptest.NewRecorder()
|
||||||
app.ServeHTTP(w, req)
|
app.ServeHTTP(w, req)
|
||||||
|
|
|
@ -1,54 +0,0 @@
|
||||||
package router
|
|
||||||
|
|
||||||
import (
|
|
||||||
"fmt"
|
|
||||||
"net"
|
|
||||||
"net/http"
|
|
||||||
"strconv"
|
|
||||||
|
|
||||||
"github.com/dcarrillo/whatismyip/service"
|
|
||||||
"github.com/gin-gonic/gin"
|
|
||||||
)
|
|
||||||
|
|
||||||
type JSONScanResponse struct {
|
|
||||||
IP string `json:"ip"`
|
|
||||||
Port int `json:"port"`
|
|
||||||
Reachable bool `json:"reachable"`
|
|
||||||
Reason string `json:"reason"`
|
|
||||||
}
|
|
||||||
|
|
||||||
func scanTCPPort(ctx *gin.Context) {
|
|
||||||
port, err := strconv.Atoi(ctx.Params.ByName("port"))
|
|
||||||
if err == nil && (port < 1 || port > 65535) {
|
|
||||||
err = fmt.Errorf("%d is not a valid port number", port)
|
|
||||||
}
|
|
||||||
if err != nil {
|
|
||||||
ctx.JSON(http.StatusBadRequest, JSONScanResponse{
|
|
||||||
Reason: err.Error(),
|
|
||||||
})
|
|
||||||
return
|
|
||||||
}
|
|
||||||
|
|
||||||
add := net.TCPAddr{
|
|
||||||
IP: net.ParseIP(ctx.ClientIP()),
|
|
||||||
Port: port,
|
|
||||||
}
|
|
||||||
|
|
||||||
scan := service.PortScanner{
|
|
||||||
Address: &add,
|
|
||||||
}
|
|
||||||
|
|
||||||
isOpen, err := scan.IsPortOpen()
|
|
||||||
reason := ""
|
|
||||||
if err != nil {
|
|
||||||
reason = err.Error()
|
|
||||||
}
|
|
||||||
|
|
||||||
response := JSONScanResponse{
|
|
||||||
IP: ctx.ClientIP(),
|
|
||||||
Port: port,
|
|
||||||
Reachable: isOpen,
|
|
||||||
Reason: reason,
|
|
||||||
}
|
|
||||||
ctx.JSON(http.StatusOK, response)
|
|
||||||
}
|
|
|
@ -8,6 +8,7 @@ import (
|
||||||
"github.com/gin-gonic/gin"
|
"github.com/gin-gonic/gin"
|
||||||
)
|
)
|
||||||
|
|
||||||
|
// SetupTemplate reads and parses a template from file
|
||||||
func SetupTemplate(r *gin.Engine) {
|
func SetupTemplate(r *gin.Engine) {
|
||||||
if setting.App.TemplatePath == "" {
|
if setting.App.TemplatePath == "" {
|
||||||
t, _ := template.New("home").Parse(home)
|
t, _ := template.New("home").Parse(home)
|
||||||
|
@ -18,9 +19,9 @@ func SetupTemplate(r *gin.Engine) {
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// Setup defines the endpoints
|
||||||
func Setup(r *gin.Engine) {
|
func Setup(r *gin.Engine) {
|
||||||
r.GET("/", getRoot)
|
r.GET("/", getRoot)
|
||||||
r.GET("/scan/tcp/:port", scanTCPPort)
|
|
||||||
r.GET("/client-port", getClientPortAsString)
|
r.GET("/client-port", getClientPortAsString)
|
||||||
r.GET("/geo", getGeoAsString)
|
r.GET("/geo", getGeoAsString)
|
||||||
r.GET("/geo/:field", getGeoAsString)
|
r.GET("/geo/:field", getGeoAsString)
|
||||||
|
|
|
@ -34,17 +34,11 @@ var (
|
||||||
text: "text/plain; charset=utf-8",
|
text: "text/plain; charset=utf-8",
|
||||||
json: "application/json; charset=utf-8",
|
json: "application/json; charset=utf-8",
|
||||||
}
|
}
|
||||||
jsonIPv4 = `{"client_port":"1001","ip":"81.2.69.192","ip_version":4,"country":"United Kingdom","country_code":"GB","city":"London","latitude":51.5142,"longitude":-0.0931,"postal_code":"","time_zone":"Europe/London","asn":0,"asn_organization":"","host":"test", "headers": {}}`
|
jsonIPv4 = `{"client_port":"1000","ip":"81.2.69.192","ip_version":4,"country":"United Kingdom","country_code":"GB","city":"London","latitude":51.5142,"longitude":-0.0931,"postal_code":"","time_zone":"Europe/London","asn":0,"asn_organization":"","host":"test","headers":{"X-Real-Ip":["81.2.69.192"]}}`
|
||||||
jsonIPv6 = `{"asn":3352, "asn_organization":"TELEFONICA DE ESPANA", "city":"", "client_port":"1001", "country":"", "country_code":"", "host":"test", "ip":"2a02:9000::1", "ip_version":6, "latitude":0, "longitude":0, "postal_code":"", "time_zone":"", "headers": {}}`
|
jsonIPv6 = `{"asn":3352, "asn_organization":"TELEFONICA DE ESPANA", "city":"", "client_port":"1000", "country":"", "country_code":"", "headers":{"X-Real-Ip":["2a02:9000::1"]}, "host":"test", "ip":"2a02:9000::1", "ip_version":6, "latitude":0, "longitude":0, "postal_code":"", "time_zone":""}`
|
||||||
jsonDNSIPv4 = `{"dns":{"ip":"81.2.69.192","country":"United Kingdom","provider":""}}`
|
|
||||||
plainDNSIPv4 = "81.2.69.192 (United Kingdom / )\n"
|
|
||||||
)
|
)
|
||||||
|
|
||||||
const (
|
const trustedHeader = "X-Real-IP"
|
||||||
trustedHeader = "X-Real-IP"
|
|
||||||
trustedPortHeader = "X-Real-Port"
|
|
||||||
domain = "dns.example.com"
|
|
||||||
)
|
|
||||||
|
|
||||||
func TestMain(m *testing.M) {
|
func TestMain(m *testing.M) {
|
||||||
app = gin.Default()
|
app = gin.Default()
|
||||||
|
|
|
@ -1,48 +0,0 @@
|
||||||
package server
|
|
||||||
|
|
||||||
import (
|
|
||||||
"context"
|
|
||||||
"log"
|
|
||||||
"strconv"
|
|
||||||
|
|
||||||
"github.com/miekg/dns"
|
|
||||||
)
|
|
||||||
|
|
||||||
const port = 53
|
|
||||||
|
|
||||||
type DNS struct {
|
|
||||||
server *dns.Server
|
|
||||||
handler *dns.Handler
|
|
||||||
ctx context.Context
|
|
||||||
}
|
|
||||||
|
|
||||||
func NewDNSServer(ctx context.Context, handler dns.Handler) *DNS {
|
|
||||||
return &DNS{
|
|
||||||
handler: &handler,
|
|
||||||
ctx: ctx,
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func (d *DNS) Start() {
|
|
||||||
d.server = &dns.Server{
|
|
||||||
Addr: ":" + strconv.Itoa(port),
|
|
||||||
Net: "udp",
|
|
||||||
Handler: *d.handler,
|
|
||||||
// UDPSize: 65535,
|
|
||||||
// ReusePort: true,
|
|
||||||
}
|
|
||||||
|
|
||||||
log.Printf("Starting DNS server listening on :%d (udp)", port)
|
|
||||||
go func() {
|
|
||||||
if err := d.server.ListenAndServe(); err != nil {
|
|
||||||
log.Fatal(err)
|
|
||||||
}
|
|
||||||
}()
|
|
||||||
}
|
|
||||||
|
|
||||||
func (d *DNS) Stop() {
|
|
||||||
log.Printf("Stopping DNS server...")
|
|
||||||
if err := d.server.Shutdown(); err != nil {
|
|
||||||
log.Printf("DNS server forced to shutdown: %s", err)
|
|
||||||
}
|
|
||||||
}
|
|
|
@ -1,55 +0,0 @@
|
||||||
package server
|
|
||||||
|
|
||||||
import (
|
|
||||||
"context"
|
|
||||||
"errors"
|
|
||||||
"log"
|
|
||||||
"net/http"
|
|
||||||
|
|
||||||
"github.com/dcarrillo/whatismyip/internal/setting"
|
|
||||||
"github.com/quic-go/quic-go/http3"
|
|
||||||
)
|
|
||||||
|
|
||||||
type Quic struct {
|
|
||||||
server *http3.Server
|
|
||||||
tlsServer *TLS
|
|
||||||
ctx context.Context
|
|
||||||
}
|
|
||||||
|
|
||||||
func NewQuicServer(ctx context.Context, tlsServer *TLS) *Quic {
|
|
||||||
return &Quic{
|
|
||||||
tlsServer: tlsServer,
|
|
||||||
ctx: ctx,
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func (q *Quic) Start() {
|
|
||||||
q.server = &http3.Server{
|
|
||||||
Addr: setting.App.TLSAddress,
|
|
||||||
Handler: q.tlsServer.server.Handler,
|
|
||||||
}
|
|
||||||
|
|
||||||
parentHandler := q.tlsServer.server.Handler
|
|
||||||
q.tlsServer.server.Handler = http.HandlerFunc(func(rw http.ResponseWriter, req *http.Request) {
|
|
||||||
if err := q.server.SetQUICHeaders(rw.Header()); err != nil {
|
|
||||||
log.Fatal(err)
|
|
||||||
}
|
|
||||||
|
|
||||||
parentHandler.ServeHTTP(rw, req)
|
|
||||||
})
|
|
||||||
|
|
||||||
log.Printf("Starting QUIC server listening on %s (udp)", setting.App.TLSAddress)
|
|
||||||
go func() {
|
|
||||||
if err := q.server.ListenAndServeTLS(setting.App.TLSCrtPath, setting.App.TLSKeyPath); err != nil &&
|
|
||||||
!errors.Is(err, http.ErrServerClosed) {
|
|
||||||
log.Fatal(err)
|
|
||||||
}
|
|
||||||
}()
|
|
||||||
}
|
|
||||||
|
|
||||||
func (q *Quic) Stop() {
|
|
||||||
log.Printf("Stopping QUIC server...")
|
|
||||||
if err := q.server.Close(); err != nil {
|
|
||||||
log.Printf("QUIC server forced to shutdown")
|
|
||||||
}
|
|
||||||
}
|
|
|
@ -1,62 +0,0 @@
|
||||||
package server
|
|
||||||
|
|
||||||
import (
|
|
||||||
"log"
|
|
||||||
"os"
|
|
||||||
"os/signal"
|
|
||||||
"syscall"
|
|
||||||
|
|
||||||
"github.com/dcarrillo/whatismyip/internal/setting"
|
|
||||||
"github.com/dcarrillo/whatismyip/models"
|
|
||||||
)
|
|
||||||
|
|
||||||
type Server interface {
|
|
||||||
Start()
|
|
||||||
Stop()
|
|
||||||
}
|
|
||||||
|
|
||||||
type Manager struct {
|
|
||||||
servers []Server
|
|
||||||
}
|
|
||||||
|
|
||||||
func Setup(servers []Server) *Manager {
|
|
||||||
return &Manager{
|
|
||||||
servers: servers,
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func (m *Manager) Run() {
|
|
||||||
m.start()
|
|
||||||
|
|
||||||
models.Setup(setting.App.GeodbPath.City, setting.App.GeodbPath.ASN)
|
|
||||||
signalChan := make(chan os.Signal, len(m.servers))
|
|
||||||
signal.Notify(signalChan, syscall.SIGHUP, syscall.SIGINT, syscall.SIGTERM)
|
|
||||||
var s os.Signal
|
|
||||||
for {
|
|
||||||
s = <-signalChan
|
|
||||||
|
|
||||||
if s == syscall.SIGHUP {
|
|
||||||
m.stop()
|
|
||||||
models.CloseDBs()
|
|
||||||
models.Setup(setting.App.GeodbPath.City, setting.App.GeodbPath.ASN)
|
|
||||||
m.start()
|
|
||||||
} else {
|
|
||||||
log.Printf("Shutting down...")
|
|
||||||
m.stop()
|
|
||||||
models.CloseDBs()
|
|
||||||
break
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func (m *Manager) start() {
|
|
||||||
for _, s := range m.servers {
|
|
||||||
s.Start()
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func (m *Manager) stop() {
|
|
||||||
for _, s := range m.servers {
|
|
||||||
s.Stop()
|
|
||||||
}
|
|
||||||
}
|
|
|
@ -1,46 +0,0 @@
|
||||||
package server
|
|
||||||
|
|
||||||
import (
|
|
||||||
"context"
|
|
||||||
"errors"
|
|
||||||
"log"
|
|
||||||
"net/http"
|
|
||||||
|
|
||||||
"github.com/dcarrillo/whatismyip/internal/setting"
|
|
||||||
)
|
|
||||||
|
|
||||||
type TCP struct {
|
|
||||||
server *http.Server
|
|
||||||
handler *http.Handler
|
|
||||||
ctx context.Context
|
|
||||||
}
|
|
||||||
|
|
||||||
func NewTCPServer(ctx context.Context, handler *http.Handler) *TCP {
|
|
||||||
return &TCP{
|
|
||||||
handler: handler,
|
|
||||||
ctx: ctx,
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func (t *TCP) Start() {
|
|
||||||
t.server = &http.Server{
|
|
||||||
Addr: setting.App.BindAddress,
|
|
||||||
Handler: *t.handler,
|
|
||||||
ReadTimeout: setting.App.Server.ReadTimeout,
|
|
||||||
WriteTimeout: setting.App.Server.WriteTimeout,
|
|
||||||
}
|
|
||||||
|
|
||||||
log.Printf("Starting TCP server listening on %s", setting.App.BindAddress)
|
|
||||||
go func() {
|
|
||||||
if err := t.server.ListenAndServe(); err != nil && !errors.Is(err, http.ErrServerClosed) {
|
|
||||||
log.Fatal(err)
|
|
||||||
}
|
|
||||||
}()
|
|
||||||
}
|
|
||||||
|
|
||||||
func (t *TCP) Stop() {
|
|
||||||
log.Printf("Stopping TCP server...")
|
|
||||||
if err := t.server.Shutdown(t.ctx); err != nil {
|
|
||||||
log.Printf("TCP server forced to shutdown: %s", err)
|
|
||||||
}
|
|
||||||
}
|
|
|
@ -1,47 +0,0 @@
|
||||||
package server
|
|
||||||
|
|
||||||
import (
|
|
||||||
"context"
|
|
||||||
"errors"
|
|
||||||
"log"
|
|
||||||
"net/http"
|
|
||||||
|
|
||||||
"github.com/dcarrillo/whatismyip/internal/setting"
|
|
||||||
)
|
|
||||||
|
|
||||||
type TLS struct {
|
|
||||||
server *http.Server
|
|
||||||
handler *http.Handler
|
|
||||||
ctx context.Context
|
|
||||||
}
|
|
||||||
|
|
||||||
func NewTLSServer(ctx context.Context, handler *http.Handler) *TLS {
|
|
||||||
return &TLS{
|
|
||||||
handler: handler,
|
|
||||||
ctx: ctx,
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func (t *TLS) Start() {
|
|
||||||
t.server = &http.Server{
|
|
||||||
Addr: setting.App.TLSAddress,
|
|
||||||
Handler: *t.handler,
|
|
||||||
ReadTimeout: setting.App.Server.ReadTimeout,
|
|
||||||
WriteTimeout: setting.App.Server.WriteTimeout,
|
|
||||||
}
|
|
||||||
|
|
||||||
log.Printf("Starting TLS server listening on %s", setting.App.TLSAddress)
|
|
||||||
go func() {
|
|
||||||
if err := t.server.ListenAndServeTLS(setting.App.TLSCrtPath, setting.App.TLSKeyPath); err != nil &&
|
|
||||||
!errors.Is(err, http.ErrServerClosed) {
|
|
||||||
log.Fatal(err)
|
|
||||||
}
|
|
||||||
}()
|
|
||||||
}
|
|
||||||
|
|
||||||
func (t *TLS) Stop() {
|
|
||||||
log.Printf("Stopping TLS server...")
|
|
||||||
if err := t.server.Shutdown(t.ctx); err != nil {
|
|
||||||
log.Printf("TLS server forced to shutdown: %s", err)
|
|
||||||
}
|
|
||||||
}
|
|
|
@ -1,24 +0,0 @@
|
||||||
package service
|
|
||||||
|
|
||||||
import (
|
|
||||||
"net"
|
|
||||||
"time"
|
|
||||||
)
|
|
||||||
|
|
||||||
const scannerTimeOut = 3 * time.Second
|
|
||||||
|
|
||||||
type PortScanner struct {
|
|
||||||
Address net.Addr
|
|
||||||
}
|
|
||||||
|
|
||||||
func (p *PortScanner) IsPortOpen() (bool, error) {
|
|
||||||
conn, err := net.DialTimeout(p.Address.Network(), p.Address.String(), scannerTimeOut)
|
|
||||||
if err != nil {
|
|
||||||
return false, err
|
|
||||||
}
|
|
||||||
if conn != nil {
|
|
||||||
defer conn.Close()
|
|
||||||
}
|
|
||||||
|
|
||||||
return true, nil
|
|
||||||
}
|
|
|
@ -1,15 +0,0 @@
|
||||||
FROM golang:1.22-alpine as builder
|
|
||||||
|
|
||||||
ARG ARG_VERSION
|
|
||||||
ENV VERSION $ARG_VERSION
|
|
||||||
|
|
||||||
WORKDIR /app
|
|
||||||
COPY . .
|
|
||||||
|
|
||||||
FROM builder AS build-test-app
|
|
||||||
RUN CGO_ENABLED=0 \
|
|
||||||
go build -ldflags="-s -w" -o whatismyip ./cmd
|
|
||||||
|
|
||||||
FROM scratch AS test
|
|
||||||
COPY --from=build-test-app /app/whatismyip /usr/bin/
|
|
||||||
ENTRYPOINT ["whatismyip"]
|
|
|
@ -1,10 +0,0 @@
|
||||||
---
|
|
||||||
domain: dns.example.com
|
|
||||||
redirect_port: ":8000"
|
|
||||||
resource_records:
|
|
||||||
- "1800 IN SOA xns.example.com. hostmaster.example.com. 1 10000 2400 604800 1800"
|
|
||||||
- "3600 IN NS xns.example.com."
|
|
||||||
ipv4:
|
|
||||||
- "127.0.0.2"
|
|
||||||
ipv6:
|
|
||||||
- "aaa:aaa:aaa:aaaa::1"
|
|
Loading…
Reference in New Issue
Block a user