mirror of
https://gitgud.io/fatchan/haproxy-protection.git
synced 2025-05-09 02:05:37 +00:00
add "domain mode <domain>" to toggle domain in nocaptcha map, and add nocaptcha status in "domain status <domain>" close #1
This commit is contained in:
@ -1,6 +1,7 @@
|
|||||||
#!/usr/bin/env bash
|
#!/usr/bin/env bash
|
||||||
|
|
||||||
HAPROXY_DDOS_DOMAINS_FILE="/usr/local/etc/haproxy/ddos.map"
|
HAPROXY_DDOS_DOMAINS_FILE="/usr/local/etc/haproxy/ddos.map"
|
||||||
|
HAPROXY_NOCAPTCHA_DOMAINS_FILE="/usr/local/etc/haproxy/no_captcha.map"
|
||||||
HAPROXY_GLOBAL_ACL="hdr_cnt"
|
HAPROXY_GLOBAL_ACL="hdr_cnt"
|
||||||
HAPROXY_SOCKET="/var/run/haproxy.sock"
|
HAPROXY_SOCKET="/var/run/haproxy.sock"
|
||||||
SOCAT="$(which socat)"
|
SOCAT="$(which socat)"
|
||||||
@ -25,6 +26,24 @@ _h_del_acl() {
|
|||||||
echo "del acl #${1} ${2}" | ${SOCAT} ${HAPROXY_SOCKET} stdio
|
echo "del acl #${1} ${2}" | ${SOCAT} ${HAPROXY_SOCKET} stdio
|
||||||
}
|
}
|
||||||
|
|
||||||
|
_h_show_map() {
|
||||||
|
local cmd
|
||||||
|
if [[ ${1} ]]; then
|
||||||
|
cmd="show map #${1}"
|
||||||
|
else
|
||||||
|
cmd="show map"
|
||||||
|
fi
|
||||||
|
echo "${cmd}" | ${SOCAT} ${HAPROXY_SOCKET} stdio
|
||||||
|
}
|
||||||
|
|
||||||
|
_h_add_map() {
|
||||||
|
echo "add map #${1} ${2} ${2}" | ${SOCAT} ${HAPROXY_SOCKET} stdio
|
||||||
|
}
|
||||||
|
|
||||||
|
_h_del_map() {
|
||||||
|
echo "del map #${1} ${2}" | ${SOCAT} ${HAPROXY_SOCKET} stdio
|
||||||
|
}
|
||||||
|
|
||||||
_help() {
|
_help() {
|
||||||
/bin/cat <<EOF
|
/bin/cat <<EOF
|
||||||
Usage: $0 <command> [options]
|
Usage: $0 <command> [options]
|
||||||
@ -45,6 +64,7 @@ Commands:
|
|||||||
$0 domain status <domain> Get ddos mode status for a domain.
|
$0 domain status <domain> Get ddos mode status for a domain.
|
||||||
$0 domain enable <domain> Enable ddos mode for a domain.
|
$0 domain enable <domain> Enable ddos mode for a domain.
|
||||||
$0 domain disable <domain> Disable ddos mode for a domain.
|
$0 domain disable <domain> Disable ddos mode for a domain.
|
||||||
|
$0 domain mode <domain> Toggle nocaptcha mode for a domain.
|
||||||
EOF
|
EOF
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -66,15 +86,24 @@ _domain_list() {
|
|||||||
_h_show_acl "${domain_acl_id}" | cut -d' ' -f2
|
_h_show_acl "${domain_acl_id}" | cut -d' ' -f2
|
||||||
}
|
}
|
||||||
|
|
||||||
|
_nocaptcha_list() {
|
||||||
|
local nocaptcha_map_id
|
||||||
|
nocaptcha_map_id=$(_h_show_map | grep ${HAPROXY_NOCAPTCHA_DOMAINS_FILE} | cut -d' ' -f1)
|
||||||
|
_h_show_map "${nocaptcha_map_id}" | cut -d' ' -f2
|
||||||
|
}
|
||||||
|
|
||||||
_domain_status() {
|
_domain_status() {
|
||||||
local ddos_domains
|
local ddos_domains
|
||||||
|
local nocaptcha_domains
|
||||||
local global_ddos_acl_id
|
local global_ddos_acl_id
|
||||||
local global_ddos_status
|
local global_ddos_status
|
||||||
|
|
||||||
ddos_domains="$(_domain_list)"
|
ddos_domains="$(_domain_list)"
|
||||||
|
nocaptcha_domains="$(_nocaptcha_list)"
|
||||||
global_ddos_acl_id=$(_h_show_acl | grep ${HAPROXY_GLOBAL_ACL} | cut -d' ' -f1)
|
global_ddos_acl_id=$(_h_show_acl | grep ${HAPROXY_GLOBAL_ACL} | cut -d' ' -f1)
|
||||||
global_ddos_status=$(_h_show_acl "${global_ddos_acl_id}" | cut -d' ' -f2)
|
global_ddos_status=$(_h_show_acl "${global_ddos_acl_id}" | cut -d' ' -f2)
|
||||||
|
|
||||||
|
|
||||||
if echo "${ddos_domains}" | grep -q "^${1}$"; then
|
if echo "${ddos_domains}" | grep -q "^${1}$"; then
|
||||||
echo "DDoS-protection mode is enabled for ${1}"
|
echo "DDoS-protection mode is enabled for ${1}"
|
||||||
else
|
else
|
||||||
@ -83,6 +112,9 @@ _domain_status() {
|
|||||||
echo "ATTENTION: DDoS-protection mode is enabled globally"
|
echo "ATTENTION: DDoS-protection mode is enabled globally"
|
||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
|
if echo "${nocaptcha_domains}" | grep -q "^${1}$"; then
|
||||||
|
echo "Nocaptcha mode is enabled for ${1}"
|
||||||
|
fi
|
||||||
}
|
}
|
||||||
|
|
||||||
_domain_enable() {
|
_domain_enable() {
|
||||||
@ -105,6 +137,28 @@ _domain_enable() {
|
|||||||
echo "DDoS-protection mode was enabled for ${1}"
|
echo "DDoS-protection mode was enabled for ${1}"
|
||||||
}
|
}
|
||||||
|
|
||||||
|
_domain_changemode() {
|
||||||
|
local nocaptcha_domains
|
||||||
|
local domain_map_id
|
||||||
|
|
||||||
|
nocaptcha_domains="$(_nocaptcha_list)"
|
||||||
|
|
||||||
|
domain_map_id=$(_h_show_acl | grep ${HAPROXY_NOCAPTCHA_DOMAINS_FILE} | cut -d' ' -f1)
|
||||||
|
if echo "${nocaptcha_domains}" | grep -q "^${1}$"; then
|
||||||
|
_h_del_map "${domain_acl_id}" "${1}" &>/dev/null
|
||||||
|
if grep -q "^${1}$" ${HAPROXY_NOCAPTCHA_DOMAINS_FILE}; then
|
||||||
|
sed -i "/^${1}$/d" ${HAPROXY_NOCAPTCHA_DOMAINS_FILE}
|
||||||
|
fi
|
||||||
|
echo "Nocaptcha mode was disabled for ${1}"
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
_h_add_map "${domain_acl_id}" "${1}" &>/dev/null
|
||||||
|
if ! grep -q "^${1}$" ${HAPROXY_NOCAPTCHA_DOMAINS_FILE}; then
|
||||||
|
echo "${1}" >> ${HAPROXY_NOCAPTCHA_DOMAINS_FILE}
|
||||||
|
fi
|
||||||
|
echo "Nocaptcha mode was enabled for ${1}"
|
||||||
|
}
|
||||||
|
|
||||||
_domain_disable() {
|
_domain_disable() {
|
||||||
local ddos_domains
|
local ddos_domains
|
||||||
local domain_acl_id
|
local domain_acl_id
|
||||||
@ -198,6 +252,9 @@ _handle_domain_management() {
|
|||||||
disable)
|
disable)
|
||||||
_ensure_domain_passed "${2}"
|
_ensure_domain_passed "${2}"
|
||||||
_domain_disable "${2}";;
|
_domain_disable "${2}";;
|
||||||
|
mode)
|
||||||
|
_ensure_domain_passed "${2}"
|
||||||
|
_domain_changemode "${2}";;
|
||||||
*) _help; exit 1;;
|
*) _help; exit 1;;
|
||||||
esac
|
esac
|
||||||
}
|
}
|
||||||
|
Reference in New Issue
Block a user