Cavemanon/haproxy-protection
8
Fork 0
mirror of https://gitgud.io/fatchan/haproxy-protection.git synced 2025-05-09 02:05:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

/cdn-cgi/trace test

Browse Source
This commit is contained in:
Thomas Lynch
2021-12-30 00:13:14 +11:00
parent e9111471b7
commit 7de768d731
3 changed files with 25 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
docker-compose.yml
View File

@ -20,6 +20,7 @@ services:
- ./haproxy/backends.map:/etc/haproxy/backends.map - ./haproxy/backends.map:/etc/haproxy/backends.map
- ./haproxy/blocked.map:/etc/haproxy/blocked.map - ./haproxy/blocked.map:/etc/haproxy/blocked.map
- ./haproxy/dataplaneapi.hcl:/etc/haproxy/dataplaneapi.hcl - ./haproxy/dataplaneapi.hcl:/etc/haproxy/dataplaneapi.hcl
- ./haproxy/trace.html:/etc/haproxy/trace.html
- ./src/scripts/:/etc/haproxy/scripts/ - ./src/scripts/:/etc/haproxy/scripts/
- ./src/libs/:/etc/haproxy/libs/ - ./src/libs/:/etc/haproxy/libs/
- ./haproxy/js/:/var/www/js/ - ./haproxy/js/:/var/www/js/
@ -28,7 +29,7 @@ services:
- HCAPTCHA_SITEKEY= - HCAPTCHA_SITEKEY=
- CAPTCHA_COOKIE_SECRET= - CAPTCHA_COOKIE_SECRET=
- POW_COOKIE_SECRET= - POW_COOKIE_SECRET=
- RAY_ID= - RAY_ID=docker
- BUCKET_DURATION=43200 - BUCKET_DURATION=43200
- BACKEND_NAME=servers - BACKEND_NAME=servers
- SERVER_PREFIX=websrv - SERVER_PREFIX=websrv

2
haproxy/haproxy.cfg
View File

@ -22,6 +22,8 @@ frontend http-in
acl is_existing_vhost hdr(host),lower,map_str(/etc/haproxy/hosts.map) -m found acl is_existing_vhost hdr(host),lower,map_str(/etc/haproxy/hosts.map) -m found
http-request silent-drop unless is_existing_vhost http-request silent-drop unless is_existing_vhost
http-request return status 200 content-type "text/html; charset=utf-8" lf-file /etc/haproxy/trace.html if { path /cdn-cgi/trace }
# acl for blocked IPs/subnets # acl for blocked IPs/subnets
acl blocked_ip_or_subnet src,map_ip(/etc/haproxy/blocked.map) -m found acl blocked_ip_or_subnet src,map_ip(/etc/haproxy/blocked.map) -m found
http-request deny deny_status 403 if blocked_ip_or_subnet http-request deny deny_status 403 if blocked_ip_or_subnet

21
haproxy/trace.html Normal file
View File

@ -0,0 +1,21 @@
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8" />
<title>trace</title>
</head>
<body>
<pre>
ts=%Ts
h=%[hdr(host)]
ip=%ci
uag=%[hdr(user-agent)]
http=%HV
tls=%[ssl_fc]
tlsv=%sslv
sni=%[ssl_fc_sni]
vey_id=%[env(RAY_ID)]
bucket=%[env(BUCKET_DURATION)]
</pre>
</body>
</html>