mirror of
https://github.com/Rayzggz/server_torii.git
synced 2025-06-19 21:51:20 +08:00
feat: HTTP FLOOD Speed Limit
add shared memory
This commit is contained in:
35
internal/check/HTTPFlood.go
Normal file
35
internal/check/HTTPFlood.go
Normal file
@ -0,0 +1,35 @@
|
||||
package check
|
||||
|
||||
import (
|
||||
"log"
|
||||
"server_torii/internal/action"
|
||||
"server_torii/internal/config"
|
||||
"server_torii/internal/dataType"
|
||||
)
|
||||
|
||||
func HTTPFlood(reqData dataType.UserRequest, ruleSet *config.RuleSet, decision *action.Decision, sharedMem *dataType.SharedMemory) {
|
||||
ipKey := reqData.RemoteIP
|
||||
sharedMem.HTTPFloodSpeedLimitCounter.Add(ipKey, 1)
|
||||
|
||||
uriKey := reqData.RemoteIP + "|" + reqData.Uri
|
||||
sharedMem.HTTPFloodSameURILimitCounter.Add(uriKey, 1)
|
||||
|
||||
for window, limit := range ruleSet.HTTPFloodRule.HTTPFloodSpeedLimit {
|
||||
if sharedMem.HTTPFloodSpeedLimitCounter.Query(ipKey, window) > limit {
|
||||
log.Printf("HTTPFlood rate limit exceeded: IP %s, window %d, limit %d", ipKey, window, limit)
|
||||
//decision.SetResponse(action.Done, []byte("403"), nil)
|
||||
decision.Set(action.Continue)
|
||||
return
|
||||
}
|
||||
}
|
||||
|
||||
for window, limit := range ruleSet.HTTPFloodRule.HTTPFloodSameURILimit {
|
||||
if sharedMem.HTTPFloodSameURILimitCounter.Query(uriKey, window) > limit {
|
||||
log.Printf("HTTPFlood URI rate limit exceeded: IP %s, URI %s, window %d, limit %d", ipKey, reqData.Uri, window, limit)
|
||||
//decision.SetResponse(action.Done, []byte("403"), nil)
|
||||
decision.Set(action.Continue)
|
||||
return
|
||||
}
|
||||
}
|
||||
decision.Set(action.Continue)
|
||||
}
|
Reference in New Issue
Block a user