Cavemanon/haproxy-protection
8
Fork 0
mirror of https://gitgud.io/fatchan/haproxy-protection.git synced 2025-05-09 02:05:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

lint: make ddos-cli shellcheck-compliant

Browse Source
This commit is contained in:
Eugene Prodan
2021-06-11 22:36:15 +03:00
parent d4483fe161
commit 30b2d4ed91
1 changed files with 56 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files

91
src/cli/ddos-cli
View File

@ -8,12 +8,13 @@ SOCAT="$(which socat)"
DOMAIN_REGEX='(?=^.{5,254}$)(^(?:(?!\d+\.)[a-zA-Z0-9_\-]{1,63}\.?)+(?:[a-zA-Z]{2,})$)' DOMAIN_REGEX='(?=^.{5,254}$)(^(?:(?!\d+\.)[a-zA-Z0-9_\-]{1,63}\.?)+(?:[a-zA-Z]{2,})$)'
_h_show_acl() { _h_show_acl() {
local cmd
if [[ ${1} ]]; then if [[ ${1} ]]; then
local cmd="show acl #${1}" cmd="show acl #${1}"
else else
local cmd="show acl" cmd="show acl"
fi fi
echo ${cmd} | ${SOCAT} ${HAPROXY_SOCKET} stdio echo "${cmd}" | ${SOCAT} ${HAPROXY_SOCKET} stdio
} }
_h_add_acl() { _h_add_acl() {
@ -52,7 +53,7 @@ _ensure_domain_passed() {
echo "Error: 'domain' argument is required for this action" echo "Error: 'domain' argument is required for this action"
_help _help
exit 1 exit 1
elif ! echo ${1} | grep -qP ${DOMAIN_REGEX}; then elif ! echo "${1}" | grep -qP "${DOMAIN_REGEX}"; then
echo "Error: '${1}' is not a valid domain" echo "Error: '${1}' is not a valid domain"
_help _help
exit 1 exit 1
@ -60,14 +61,19 @@ _ensure_domain_passed() {
} }
_domain_list() { _domain_list() {
local domain_acl_id=$(_h_show_acl | grep ${HAPROXY_DDOS_DOMAINS_FILE} | cut -d' ' -f1) local domain_acl_id
_h_show_acl ${domain_acl_id} | cut -d' ' -f2 domain_acl_id=$(_h_show_acl | grep ${HAPROXY_DDOS_DOMAINS_FILE} | cut -d' ' -f1)
_h_show_acl "${domain_acl_id}" | cut -d' ' -f2
} }
_domain_status() { _domain_status() {
local ddos_domains="$(_domain_list)" local ddos_domains
local global_ddos_acl_id=$(_h_show_acl | grep ${HAPROXY_GLOBAL_ACL} | cut -d' ' -f1) local global_ddos_acl_id
local global_ddos_status=$(_h_show_acl ${global_ddos_acl_id} | cut -d' ' -f2) local global_ddos_status
ddos_domains="$(_domain_list)"
global_ddos_acl_id=$(_h_show_acl | grep ${HAPROXY_GLOBAL_ACL} | cut -d' ' -f1)
global_ddos_status=$(_h_show_acl "${global_ddos_acl_id}" | cut -d' ' -f2)
if echo "${ddos_domains}" | grep -q "^${1}$"; then if echo "${ddos_domains}" | grep -q "^${1}$"; then
echo "DDoS-protection mode is enabled for ${1}" echo "DDoS-protection mode is enabled for ${1}"
@ -80,32 +86,38 @@ _domain_status() {
} }
_domain_add() { _domain_add() {
local ddos_domains="$(_domain_list)" local ddos_domains
local domain_acl_id
ddos_domains="$(_domain_list)"
if echo "${ddos_domains}" | grep -q "^${1}$"; then if echo "${ddos_domains}" | grep -q "^${1}$"; then
echo "DDoS-protection mode is already enabled for ${1}" echo "DDoS-protection mode is already enabled for ${1}"
exit 0 exit 0
fi fi
local domain_acl_id=$(_h_show_acl | grep ${HAPROXY_DDOS_DOMAINS_FILE} | cut -d' ' -f1) domain_acl_id=$(_h_show_acl | grep ${HAPROXY_DDOS_DOMAINS_FILE} | cut -d' ' -f1)
_h_add_acl ${domain_acl_id} ${1} &>/dev/null _h_add_acl "${domain_acl_id}" "${1}" &>/dev/null
if ! grep -q "^${1}$" ${HAPROXY_DDOS_DOMAINS_FILE}; then if ! grep -q "^${1}$" ${HAPROXY_DDOS_DOMAINS_FILE}; then
echo ${1} >> ${HAPROXY_DDOS_DOMAINS_FILE} echo "${1}" >> ${HAPROXY_DDOS_DOMAINS_FILE}
fi fi
echo "DDoS-protection mode was enabled for ${1}" echo "DDoS-protection mode was enabled for ${1}"
} }
_domain_del() { _domain_del() {
local ddos_domains="$(_domain_list)" local ddos_domains
local domain_acl_id
ddos_domains="$(_domain_list)"
if ! echo "${ddos_domains}" | grep -q "^${1}$"; then if ! echo "${ddos_domains}" | grep -q "^${1}$"; then
echo "DDoS-protection mode is already disabled for ${1}" echo "DDoS-protection mode is already disabled for ${1}"
exit 0 exit 0
fi fi
local domain_acl_id=$(_h_show_acl | grep ${HAPROXY_DDOS_DOMAINS_FILE} | cut -d' ' -f1) domain_acl_id=$(_h_show_acl | grep ${HAPROXY_DDOS_DOMAINS_FILE} | cut -d' ' -f1)
_h_del_acl ${domain_acl_id} ${1} &>/dev/null _h_del_acl "${domain_acl_id}" "${1}" &>/dev/null
if grep -q "^${1}$" ${HAPROXY_DDOS_DOMAINS_FILE}; then if grep -q "^${1}$" ${HAPROXY_DDOS_DOMAINS_FILE}; then
sed -i "/^${1}$/d" ${HAPROXY_DDOS_DOMAINS_FILE} sed -i "/^${1}$/d" ${HAPROXY_DDOS_DOMAINS_FILE}
@ -114,8 +126,11 @@ _domain_del() {
} }
_global_status() { _global_status() {
local global_ddos_acl_id=$(_h_show_acl | grep ${HAPROXY_GLOBAL_ACL} | cut -d' ' -f1) local global_ddos_acl_id
local global_ddos_status=$(_h_show_acl ${global_ddos_acl_id} | cut -d' ' -f2) local global_ddos_status
global_ddos_acl_id=$(_h_show_acl | grep ${HAPROXY_GLOBAL_ACL} | cut -d' ' -f1)
global_ddos_status=$(_h_show_acl "${global_ddos_acl_id}" | cut -d' ' -f2)
if [[ ${global_ddos_status} -eq 0 ]]; then if [[ ${global_ddos_status} -eq 0 ]]; then
echo "DDoS-protection mode is enabled globally" echo "DDoS-protection mode is enabled globally"
@ -125,30 +140,36 @@ _global_status() {
} }
_global_enable() { _global_enable() {
local global_ddos_acl_id=$(_h_show_acl | grep ${HAPROXY_GLOBAL_ACL} | cut -d' ' -f1) local global_ddos_acl_id
local global_ddos_status=$(_h_show_acl ${global_ddos_acl_id} | cut -d' ' -f2) local global_ddos_status
global_ddos_acl_id=$(_h_show_acl | grep ${HAPROXY_GLOBAL_ACL} | cut -d' ' -f1)
global_ddos_status=$(_h_show_acl "${global_ddos_acl_id}" | cut -d' ' -f2)
if [[ ${global_ddos_status} -eq 0 ]]; then if [[ ${global_ddos_status} -eq 0 ]]; then
echo "DDoS-protection mode is already enabled globally" echo "DDoS-protection mode is already enabled globally"
exit 0 exit 0
fi fi
_h_add_acl ${global_ddos_acl_id} 0 &>/dev/null _h_add_acl "${global_ddos_acl_id}" 0 &>/dev/null
_h_del_acl ${global_ddos_acl_id} 1 &>/dev/null _h_del_acl "${global_ddos_acl_id}" 1 &>/dev/null
echo "DDoS-protection mode was enabled globally" echo "DDoS-protection mode was enabled globally"
} }
_global_disable() { _global_disable() {
local global_ddos_acl_id=$(_h_show_acl | grep ${HAPROXY_GLOBAL_ACL} | cut -d' ' -f1) local global_ddos_acl_id
local global_ddos_status=$(_h_show_acl ${global_ddos_acl_id} | cut -d' ' -f2) local global_ddos_status
global_ddos_acl_id=$(_h_show_acl | grep ${HAPROXY_GLOBAL_ACL} | cut -d' ' -f1)
global_ddos_status=$(_h_show_acl "${global_ddos_acl_id}" | cut -d' ' -f2)
if [[ ${global_ddos_status} -eq 1 ]]; then if [[ ${global_ddos_status} -eq 1 ]]; then
echo "DDoS-protection mode is already disabled globally" echo "DDoS-protection mode is already disabled globally"
exit 0 exit 0
fi fi
_h_add_acl ${global_ddos_acl_id} 1 &>/dev/null _h_add_acl "${global_ddos_acl_id}" 1 &>/dev/null
_h_del_acl ${global_ddos_acl_id} 0 &>/dev/null _h_del_acl "${global_ddos_acl_id}" 0 &>/dev/null
echo "DDoS-protection mode was disabled globally" echo "DDoS-protection mode was disabled globally"
} }
@ -165,19 +186,19 @@ _handle_domain_management() {
case ${1} in case ${1} in
list) _domain_list;; list) _domain_list;;
status) status)
_ensure_domain_passed ${2} _ensure_domain_passed "${2}"
_domain_status $2;; _domain_status "${2}";;
add) add)
_ensure_domain_passed ${2} _ensure_domain_passed "${2}"
_domain_add $2;; _domain_add "${2}";;
del) del)
_ensure_domain_passed ${2} _ensure_domain_passed "${2}"
_domain_del $2;; _domain_del "${2}";;
*) _help; exit 1;; *) _help; exit 1;;
esac esac
} }
if ! [[ "${@}" ]]; then if ! [[ "${*}" ]]; then
_help _help
exit 1 exit 1
fi fi
@ -192,6 +213,6 @@ for i in "${@}"; do
done done
case ${MODE} in case ${MODE} in
DOMAIN) _handle_domain_management ${@};; DOMAIN) _handle_domain_management "${@}";;
GLOBAL) _handle_global_management ${@};; GLOBAL) _handle_global_management "${@}";;
esac esac