nginx: src/http/modules/ngx_http_realip

annotate src/http/modules/ngx_http_realip_module.c @ 6565:3af0e65a461a

Realip: detect duplicate real_ip_header directive.

author	Ruslan Ermilov <ru@nginx.com>
date	Mon, 23 May 2016 19:17:24 +0300
parents	26feae43987f
children	b3b7e33083ac

rev	line source
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	1
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	2 /*
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	3 * Copyright (C) Igor Sysoev
4412 d620f497c50f Copyright updated. Maxim Konovalov <maxim@nginx.com> parents: 3305 diff changeset	4 * Copyright (C) Nginx, Inc.
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	5 */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	6
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	7
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	8 #include <ngx_config.h>
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	9 #include <ngx_core.h>
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	10 #include <ngx_http.h>
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	11
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	12
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	13 #define NGX_HTTP_REALIP_XREALIP 0
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	14 #define NGX_HTTP_REALIP_XFWD 1
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	15 #define NGX_HTTP_REALIP_HEADER 2
5605 3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	16 #define NGX_HTTP_REALIP_PROXY 3
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	17
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	18
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	19 typedef struct {
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	20 ngx_array_t from; / array of ngx_cidr_t */
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	21 ngx_uint_t type;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	22 ngx_uint_t hash;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	23 ngx_str_t header;
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	24 ngx_flag_t recursive;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	25 } ngx_http_realip_loc_conf_t;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	26
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	27
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	28 typedef struct {
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	29 ngx_connection_t *connection;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	30 struct sockaddr *sockaddr;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	31 socklen_t socklen;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	32 ngx_str_t addr_text;
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	33 } ngx_http_realip_ctx_t;
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	34
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	35
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	36 static ngx_int_t ngx_http_realip_handler(ngx_http_request_t *r);
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	37 static ngx_int_t ngx_http_realip_set_addr(ngx_http_request_t *r,
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	38 ngx_addr_t *addr);
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	39 static void ngx_http_realip_cleanup(void *data);
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	40 static char ngx_http_realip_from(ngx_conf_t cf, ngx_command_t *cmd,
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	41 void *conf);
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	42 static char ngx_http_realip(ngx_conf_t cf, ngx_command_t cmd, void conf);
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	43 static void ngx_http_realip_create_loc_conf(ngx_conf_t cf);
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	44 static char ngx_http_realip_merge_loc_conf(ngx_conf_t cf,
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	45 void parent, void child);
6294 cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	46 static ngx_int_t ngx_http_realip_add_variables(ngx_conf_t *cf);
681 7e24168b0853 nginx-0.4.0-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: 667 diff changeset	47 static ngx_int_t ngx_http_realip_init(ngx_conf_t *cf);
6562 b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	48 static ngx_http_realip_ctx_t *ngx_http_realip_get_module_ctx(
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	49 ngx_http_request_t *r);
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	50
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	51
6294 cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	52 static ngx_int_t ngx_http_realip_remote_addr_variable(ngx_http_request_t *r,
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	53 ngx_http_variable_value_t *v, uintptr_t data);
6562 b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	54 static ngx_int_t ngx_http_realip_remote_port_variable(ngx_http_request_t *r,
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	55 ngx_http_variable_value_t *v, uintptr_t data);
6294 cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	56
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	57
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	58 static ngx_command_t ngx_http_realip_commands[] = {
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	59
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	60 { ngx_string("set_real_ip_from"),
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	61 NGX_HTTP_MAIN_CONF\|NGX_HTTP_SRV_CONF\|NGX_HTTP_LOC_CONF\|NGX_CONF_TAKE1,
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	62 ngx_http_realip_from,
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	63 NGX_HTTP_LOC_CONF_OFFSET,
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	64 0,
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	65 NULL },
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	66
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	67 { ngx_string("real_ip_header"),
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	68 NGX_HTTP_MAIN_CONF\|NGX_HTTP_SRV_CONF\|NGX_HTTP_LOC_CONF\|NGX_CONF_TAKE1,
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	69 ngx_http_realip,
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	70 NGX_HTTP_LOC_CONF_OFFSET,
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	71 0,
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	72 NULL },
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	73
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	74 { ngx_string("real_ip_recursive"),
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	75 NGX_HTTP_MAIN_CONF\|NGX_HTTP_SRV_CONF\|NGX_HTTP_LOC_CONF\|NGX_CONF_FLAG,
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	76 ngx_conf_set_flag_slot,
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	77 NGX_HTTP_LOC_CONF_OFFSET,
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	78 offsetof(ngx_http_realip_loc_conf_t, recursive),
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	79 NULL },
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	80
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	81 ngx_null_command
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	82 };
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	83
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	84
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	85
667 63a820b0bc6c nginx-0.3.55-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: 663 diff changeset	86 static ngx_http_module_t ngx_http_realip_module_ctx = {
6294 cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	87 ngx_http_realip_add_variables, /* preconfiguration */
681 7e24168b0853 nginx-0.4.0-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: 667 diff changeset	88 ngx_http_realip_init, /* postconfiguration */
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	89
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	90 NULL, /* create main configuration */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	91 NULL, /* init main configuration */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	92
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	93 NULL, /* create server configuration */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	94 NULL, /* merge server configuration */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	95
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	96 ngx_http_realip_create_loc_conf, /* create location configuration */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	97 ngx_http_realip_merge_loc_conf /* merge location configuration */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	98 };
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	99
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	100
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	101 ngx_module_t ngx_http_realip_module = {
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	102 NGX_MODULE_V1,
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	103 &ngx_http_realip_module_ctx, /* module context */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	104 ngx_http_realip_commands, /* module directives */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	105 NGX_HTTP_MODULE, /* module type */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	106 NULL, /* init master */
681 7e24168b0853 nginx-0.4.0-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: 667 diff changeset	107 NULL, /* init module */
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	108 NULL, /* init process */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	109 NULL, /* init thread */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	110 NULL, /* exit thread */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	111 NULL, /* exit process */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	112 NULL, /* exit master */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	113 NGX_MODULE_V1_PADDING
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	114 };
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	115
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	116
6294 cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	117 static ngx_http_variable_t ngx_http_realip_vars[] = {
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	118
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	119 { ngx_string("realip_remote_addr"), NULL,
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	120 ngx_http_realip_remote_addr_variable, 0, 0, 0 },
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	121
6562 b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	122 { ngx_string("realip_remote_port"), NULL,
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	123 ngx_http_realip_remote_port_variable, 0, 0, 0 },
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	124
6294 cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	125 { ngx_null_string, NULL, NULL, 0, 0, 0 }
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	126 };
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	127
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	128
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	129 static ngx_int_t
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	130 ngx_http_realip_handler(ngx_http_request_t *r)
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	131 {
5084 f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	132 u_char *p;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	133 size_t len;
5084 f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	134 ngx_str_t *value;
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	135 ngx_uint_t i, hash;
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	136 ngx_addr_t addr;
5084 f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	137 ngx_array_t *xfwd;
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	138 ngx_list_part_t *part;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	139 ngx_table_elt_t *header;
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	140 ngx_connection_t *c;
6563 26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	141 struct sockaddr_in *sin;
26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	142 #if (NGX_HAVE_INET6)
26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	143 struct sockaddr_in6 *sin6;
26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	144 #endif
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	145 ngx_http_realip_ctx_t *ctx;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	146 ngx_http_realip_loc_conf_t *rlcf;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	147
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	148 ctx = ngx_http_get_module_ctx(r, ngx_http_realip_module);
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	149
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	150 if (ctx) {
986 68c85f283043 ngx_http_realip_module must return NGX_DECLINED Igor Sysoev <igor@sysoev.ru> parents: 681 diff changeset	151 return NGX_DECLINED;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	152 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	153
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	154 rlcf = ngx_http_get_module_loc_conf(r, ngx_http_realip_module);
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	155
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	156 if (rlcf->from == NULL) {
986 68c85f283043 ngx_http_realip_module must return NGX_DECLINED Igor Sysoev <igor@sysoev.ru> parents: 681 diff changeset	157 return NGX_DECLINED;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	158 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	159
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	160 switch (rlcf->type) {
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	161
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	162 case NGX_HTTP_REALIP_XREALIP:
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	163
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	164 if (r->headers_in.x_real_ip == NULL) {
986 68c85f283043 ngx_http_realip_module must return NGX_DECLINED Igor Sysoev <igor@sysoev.ru> parents: 681 diff changeset	165 return NGX_DECLINED;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	166 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	167
5084 f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	168 value = &r->headers_in.x_real_ip->value;
f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	169 xfwd = NULL;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	170
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	171 break;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	172
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	173 case NGX_HTTP_REALIP_XFWD:
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	174
5084 f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	175 xfwd = &r->headers_in.x_forwarded_for;
f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	176
f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	177 if (xfwd->elts == NULL) {
986 68c85f283043 ngx_http_realip_module must return NGX_DECLINED Igor Sysoev <igor@sysoev.ru> parents: 681 diff changeset	178 return NGX_DECLINED;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	179 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	180
5084 f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	181 value = NULL;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	182
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	183 break;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	184
5605 3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	185 case NGX_HTTP_REALIP_PROXY:
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	186
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	187 value = &r->connection->proxy_protocol_addr;
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	188
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	189 if (value->len == 0) {
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	190 return NGX_DECLINED;
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	191 }
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	192
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	193 xfwd = NULL;
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	194
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	195 break;
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	196
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	197 default: /* NGX_HTTP_REALIP_HEADER */
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	198
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	199 part = &r->headers_in.headers.part;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	200 header = part->elts;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	201
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	202 hash = rlcf->hash;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	203 len = rlcf->header.len;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	204 p = rlcf->header.data;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	205
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	206 for (i = 0; /* void */ ; i++) {
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	207
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	208 if (i >= part->nelts) {
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	209 if (part->next == NULL) {
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	210 break;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	211 }
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	212
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	213 part = part->next;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	214 header = part->elts;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	215 i = 0;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	216 }
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	217
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	218 if (hash == header[i].hash
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	219 && len == header[i].key.len
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	220 && ngx_strncmp(p, header[i].lowcase_key, len) == 0)
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	221 {
5084 f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	222 value = &header[i].value;
f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	223 xfwd = NULL;
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	224
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	225 goto found;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	226 }
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	227 }
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	228
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	229 return NGX_DECLINED;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	230 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	231
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	232 found:
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	233
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	234 c = r->connection;
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	235
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	236 addr.sockaddr = c->sockaddr;
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	237 addr.socklen = c->socklen;
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	238 /* addr.name = c->addr_text; */
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	239
5084 f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	240 if (ngx_http_get_forwarded_addr(r, &addr, xfwd, value, rlcf->from,
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	241 rlcf->recursive)
5084 f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	242 != NGX_DECLINED)
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	243 {
6563 26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	244 if (rlcf->type == NGX_HTTP_REALIP_PROXY) {
26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	245
26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	246 switch (addr.sockaddr->sa_family) {
26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	247
26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	248 #if (NGX_HAVE_INET6)
26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	249 case AF_INET6:
26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	250 sin6 = (struct sockaddr_in6 *) addr.sockaddr;
26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	251 sin6->sin6_port = htons(c->proxy_protocol_port);
26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	252 break;
26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	253 #endif
26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	254
26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	255 default: /* AF_INET */
26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	256 sin = (struct sockaddr_in *) addr.sockaddr;
26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	257 sin->sin_port = htons(c->proxy_protocol_port);
26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	258 break;
26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	259 }
26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	260 }
26feae43987f Realip: take client port from PROXY protocol header. Dmitry Volyntsev <xeioex@nginx.com> parents: 6562 diff changeset	261
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	262 return ngx_http_realip_set_addr(r, &addr);
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	263 }
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	264
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	265 return NGX_DECLINED;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	266 }
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	267
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	268
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	269 static ngx_int_t
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	270 ngx_http_realip_set_addr(ngx_http_request_t r, ngx_addr_t addr)
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	271 {
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	272 size_t len;
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	273 u_char *p;
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	274 u_char text[NGX_SOCKADDR_STRLEN];
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	275 ngx_connection_t *c;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	276 ngx_pool_cleanup_t *cln;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	277 ngx_http_realip_ctx_t *ctx;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	278
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	279 cln = ngx_pool_cleanup_add(r->pool, sizeof(ngx_http_realip_ctx_t));
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	280 if (cln == NULL) {
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	281 return NGX_HTTP_INTERNAL_SERVER_ERROR;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	282 }
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	283
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	284 ctx = cln->data;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	285 ngx_http_set_ctx(r, ctx, ngx_http_realip_module);
1114 3f354952e91d fix broken values, debug logging, and style fix Igor Sysoev <igor@sysoev.ru> parents: 986 diff changeset	286
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	287 c = r->connection;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	288
5263 05ba5bce31e0 Core: extended ngx_sock_ntop() with socklen parameter. Vladimir Homutov <vl@nginx.com> parents: 5084 diff changeset	289 len = ngx_sock_ntop(addr->sockaddr, addr->socklen, text,
05ba5bce31e0 Core: extended ngx_sock_ntop() with socklen parameter. Vladimir Homutov <vl@nginx.com> parents: 5084 diff changeset	290 NGX_SOCKADDR_STRLEN, 0);
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	291 if (len == 0) {
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	292 return NGX_HTTP_INTERNAL_SERVER_ERROR;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	293 }
1114 3f354952e91d fix broken values, debug logging, and style fix Igor Sysoev <igor@sysoev.ru> parents: 986 diff changeset	294
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	295 p = ngx_pnalloc(c->pool, len);
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	296 if (p == NULL) {
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	297 return NGX_HTTP_INTERNAL_SERVER_ERROR;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	298 }
1118 cec2866f29bd a client address must be allocated from a connection pool Igor Sysoev <igor@sysoev.ru> parents: 1114 diff changeset	299
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	300 ngx_memcpy(p, text, len);
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	301
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	302 cln->handler = ngx_http_realip_cleanup;
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	303
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	304 ctx->connection = c;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	305 ctx->sockaddr = c->sockaddr;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	306 ctx->socklen = c->socklen;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	307 ctx->addr_text = c->addr_text;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	308
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	309 c->sockaddr = addr->sockaddr;
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	310 c->socklen = addr->socklen;
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	311 c->addr_text.len = len;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	312 c->addr_text.data = p;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	313
986 68c85f283043 ngx_http_realip_module must return NGX_DECLINED Igor Sysoev <igor@sysoev.ru> parents: 681 diff changeset	314 return NGX_DECLINED;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	315 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	316
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	317
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	318 static void
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	319 ngx_http_realip_cleanup(void *data)
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	320 {
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	321 ngx_http_realip_ctx_t *ctx = data;
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	322
3273 fe71be4a02f1 support IPv6 addresses in Real IP headers Igor Sysoev <igor@sysoev.ru> parents: 3267 diff changeset	323 ngx_connection_t *c;
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	324
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	325 c = ctx->connection;
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	326
3273 fe71be4a02f1 support IPv6 addresses in Real IP headers Igor Sysoev <igor@sysoev.ru> parents: 3267 diff changeset	327 c->sockaddr = ctx->sockaddr;
fe71be4a02f1 support IPv6 addresses in Real IP headers Igor Sysoev <igor@sysoev.ru> parents: 3267 diff changeset	328 c->socklen = ctx->socklen;
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	329 c->addr_text = ctx->addr_text;
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	330 }
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	331
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	332
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	333 static char *
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	334 ngx_http_realip_from(ngx_conf_t cf, ngx_command_t cmd, void *conf)
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	335 {
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	336 ngx_http_realip_loc_conf_t *rlcf = conf;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	337
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	338 ngx_int_t rc;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	339 ngx_str_t *value;
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	340 ngx_cidr_t *cidr;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	341
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	342 value = cf->args->elts;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	343
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	344 if (rlcf->from == NULL) {
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	345 rlcf->from = ngx_array_create(cf->pool, 2,
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	346 sizeof(ngx_cidr_t));
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	347 if (rlcf->from == NULL) {
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	348 return NGX_CONF_ERROR;
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	349 }
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	350 }
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	351
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	352 cidr = ngx_array_push(rlcf->from);
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	353 if (cidr == NULL) {
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	354 return NGX_CONF_ERROR;
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	355 }
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	356
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	357 #if (NGX_HAVE_UNIX_DOMAIN)
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	358
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	359 if (ngx_strcmp(value[1].data, "unix:") == 0) {
6474 2cd019520210 Style. Ruslan Ermilov <ru@nginx.com> parents: 6294 diff changeset	360 cidr->family = AF_UNIX;
2cd019520210 Style. Ruslan Ermilov <ru@nginx.com> parents: 6294 diff changeset	361 return NGX_CONF_OK;
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	362 }
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	363
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	364 #endif
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	365
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	366 rc = ngx_ptocidr(&value[1], cidr);
1380 b590a528fd41 ignore meaningless bits in CIDR and warn about them Igor Sysoev <igor@sysoev.ru> parents: 1118 diff changeset	367
b590a528fd41 ignore meaningless bits in CIDR and warn about them Igor Sysoev <igor@sysoev.ru> parents: 1118 diff changeset	368 if (rc == NGX_ERROR) {
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	369 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0, "invalid parameter \"%V\"",
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	370 &value[1]);
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	371 return NGX_CONF_ERROR;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	372 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	373
1380 b590a528fd41 ignore meaningless bits in CIDR and warn about them Igor Sysoev <igor@sysoev.ru> parents: 1118 diff changeset	374 if (rc == NGX_DONE) {
b590a528fd41 ignore meaningless bits in CIDR and warn about them Igor Sysoev <igor@sysoev.ru> parents: 1118 diff changeset	375 ngx_conf_log_error(NGX_LOG_WARN, cf, 0,
b590a528fd41 ignore meaningless bits in CIDR and warn about them Igor Sysoev <igor@sysoev.ru> parents: 1118 diff changeset	376 "low address bits of %V are meaningless", &value[1]);
b590a528fd41 ignore meaningless bits in CIDR and warn about them Igor Sysoev <igor@sysoev.ru> parents: 1118 diff changeset	377 }
b590a528fd41 ignore meaningless bits in CIDR and warn about them Igor Sysoev <igor@sysoev.ru> parents: 1118 diff changeset	378
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	379 return NGX_CONF_OK;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	380 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	381
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	382
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	383 static char *
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	384 ngx_http_realip(ngx_conf_t cf, ngx_command_t cmd, void *conf)
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	385 {
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	386 ngx_http_realip_loc_conf_t *rlcf = conf;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	387
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	388 ngx_str_t *value;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	389
6565 3af0e65a461a Realip: detect duplicate real_ip_header directive. Ruslan Ermilov <ru@nginx.com> parents: 6563 diff changeset	390 if (rlcf->type != NGX_CONF_UNSET_UINT) {
3af0e65a461a Realip: detect duplicate real_ip_header directive. Ruslan Ermilov <ru@nginx.com> parents: 6563 diff changeset	391 return "is duplicate";
3af0e65a461a Realip: detect duplicate real_ip_header directive. Ruslan Ermilov <ru@nginx.com> parents: 6563 diff changeset	392 }
3af0e65a461a Realip: detect duplicate real_ip_header directive. Ruslan Ermilov <ru@nginx.com> parents: 6563 diff changeset	393
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	394 value = cf->args->elts;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	395
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	396 if (ngx_strcmp(value[1].data, "X-Real-IP") == 0) {
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	397 rlcf->type = NGX_HTTP_REALIP_XREALIP;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	398 return NGX_CONF_OK;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	399 }
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	400
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	401 if (ngx_strcmp(value[1].data, "X-Forwarded-For") == 0) {
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	402 rlcf->type = NGX_HTTP_REALIP_XFWD;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	403 return NGX_CONF_OK;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	404 }
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	405
5605 3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	406 if (ngx_strcmp(value[1].data, "proxy_protocol") == 0) {
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	407 rlcf->type = NGX_HTTP_REALIP_PROXY;
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	408 return NGX_CONF_OK;
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	409 }
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	410
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	411 rlcf->type = NGX_HTTP_REALIP_HEADER;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	412 rlcf->hash = ngx_hash_strlow(value[1].data, value[1].data, value[1].len);
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	413 rlcf->header = value[1];
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	414
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	415 return NGX_CONF_OK;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	416 }
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	417
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	418
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	419 static void *
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	420 ngx_http_realip_create_loc_conf(ngx_conf_t *cf)
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	421 {
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	422 ngx_http_realip_loc_conf_t *conf;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	423
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	424 conf = ngx_pcalloc(cf->pool, sizeof(ngx_http_realip_loc_conf_t));
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	425 if (conf == NULL) {
2912 c7d57b539248 return NULL instead of NGX_CONF_ERROR on a create conf failure Igor Sysoev <igor@sysoev.ru> parents: 2537 diff changeset	426 return NULL;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	427 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	428
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	429 /*
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	430 * set by ngx_pcalloc():
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	431 *
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	432 * conf->from = NULL;
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	433 * conf->hash = 0;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	434 * conf->header = { 0, NULL };
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	435 */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	436
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	437 conf->type = NGX_CONF_UNSET_UINT;
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	438 conf->recursive = NGX_CONF_UNSET;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	439
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	440 return conf;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	441 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	442
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	443
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	444 static char *
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	445 ngx_http_realip_merge_loc_conf(ngx_conf_t cf, void parent, void *child)
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	446 {
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	447 ngx_http_realip_loc_conf_t *prev = parent;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	448 ngx_http_realip_loc_conf_t *conf = child;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	449
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	450 if (conf->from == NULL) {
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	451 conf->from = prev->from;
3305 8017f9bda3f6 fix "set_real_ip_from unix:" inheritance Igor Sysoev <igor@sysoev.ru> parents: 3291 diff changeset	452 }
8017f9bda3f6 fix "set_real_ip_from unix:" inheritance Igor Sysoev <igor@sysoev.ru> parents: 3291 diff changeset	453
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	454 ngx_conf_merge_uint_value(conf->type, prev->type, NGX_HTTP_REALIP_XREALIP);
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	455 ngx_conf_merge_value(conf->recursive, prev->recursive, 0);
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	456
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	457 if (conf->header.len == 0) {
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	458 conf->hash = prev->hash;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	459 conf->header = prev->header;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	460 }
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	461
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	462 return NGX_CONF_OK;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	463 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	464
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	465
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	466 static ngx_int_t
6294 cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	467 ngx_http_realip_add_variables(ngx_conf_t *cf)
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	468 {
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	469 ngx_http_variable_t var, v;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	470
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	471 for (v = ngx_http_realip_vars; v->name.len; v++) {
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	472 var = ngx_http_add_variable(cf, &v->name, v->flags);
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	473 if (var == NULL) {
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	474 return NGX_ERROR;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	475 }
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	476
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	477 var->get_handler = v->get_handler;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	478 var->data = v->data;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	479 }
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	480
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	481 return NGX_OK;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	482 }
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	483
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	484
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	485 static ngx_int_t
681 7e24168b0853 nginx-0.4.0-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: 667 diff changeset	486 ngx_http_realip_init(ngx_conf_t *cf)
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	487 {
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	488 ngx_http_handler_pt *h;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	489 ngx_http_core_main_conf_t *cmcf;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	490
681 7e24168b0853 nginx-0.4.0-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: 667 diff changeset	491 cmcf = ngx_http_conf_get_module_main_conf(cf, ngx_http_core_module);
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	492
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	493 h = ngx_array_push(&cmcf->phases[NGX_HTTP_POST_READ_PHASE].handlers);
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	494 if (h == NULL) {
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	495 return NGX_ERROR;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	496 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	497
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	498 *h = ngx_http_realip_handler;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	499
581 326634fb9d47 nginx-0.3.12-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: 573 diff changeset	500 h = ngx_array_push(&cmcf->phases[NGX_HTTP_PREACCESS_PHASE].handlers);
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	501 if (h == NULL) {
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	502 return NGX_ERROR;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	503 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	504
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	505 *h = ngx_http_realip_handler;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	506
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	507 return NGX_OK;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	508 }
6294 cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	509
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	510
6562 b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	511 static ngx_http_realip_ctx_t *
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	512 ngx_http_realip_get_module_ctx(ngx_http_request_t *r)
6294 cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	513 {
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	514 ngx_pool_cleanup_t *cln;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	515 ngx_http_realip_ctx_t *ctx;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	516
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	517 ctx = ngx_http_get_module_ctx(r, ngx_http_realip_module);
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	518
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	519 if (ctx == NULL && (r->internal \|\| r->filter_finalize)) {
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	520
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	521 /*
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	522 * if module context was reset, the original address
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	523 * can still be found in the cleanup handler
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	524 */
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	525
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	526 for (cln = r->pool->cleanup; cln; cln = cln->next) {
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	527 if (cln->handler == ngx_http_realip_cleanup) {
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	528 ctx = cln->data;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	529 break;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	530 }
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	531 }
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	532 }
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	533
6562 b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	534 return ctx;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	535 }
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	536
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	537
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	538 static ngx_int_t
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	539 ngx_http_realip_remote_addr_variable(ngx_http_request_t *r,
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	540 ngx_http_variable_value_t *v, uintptr_t data)
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	541 {
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	542 ngx_str_t *addr_text;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	543 ngx_http_realip_ctx_t *ctx;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	544
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	545 ctx = ngx_http_realip_get_module_ctx(r);
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	546
6294 cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	547 addr_text = ctx ? &ctx->addr_text : &r->connection->addr_text;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	548
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	549 v->len = addr_text->len;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	550 v->valid = 1;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	551 v->no_cacheable = 0;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	552 v->not_found = 0;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	553 v->data = addr_text->data;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	554
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	555 return NGX_OK;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	556 }
6562 b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	557
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	558
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	559 static ngx_int_t
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	560 ngx_http_realip_remote_port_variable(ngx_http_request_t *r,
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	561 ngx_http_variable_value_t *v, uintptr_t data)
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	562 {
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	563 ngx_uint_t port;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	564 struct sockaddr *sa;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	565 ngx_http_realip_ctx_t *ctx;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	566
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	567 ctx = ngx_http_realip_get_module_ctx(r);
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	568
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	569 sa = ctx ? ctx->sockaddr : r->connection->sockaddr;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	570
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	571 v->len = 0;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	572 v->valid = 1;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	573 v->no_cacheable = 0;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	574 v->not_found = 0;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	575
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	576 v->data = ngx_pnalloc(r->pool, sizeof("65535") - 1);
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	577 if (v->data == NULL) {
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	578 return NGX_ERROR;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	579 }
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	580
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	581 switch (sa->sa_family) {
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	582
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	583 #if (NGX_HAVE_INET6)
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	584 case AF_INET6:
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	585 port = ntohs(((struct sockaddr_in6 *) sa)->sin6_port);
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	586 break;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	587 #endif
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	588
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	589 #if (NGX_HAVE_UNIX_DOMAIN)
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	590 case AF_UNIX:
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	591 port = 0;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	592 break;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	593 #endif
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	594
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	595 default: /* AF_INET */
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	596 port = ntohs(((struct sockaddr_in *) sa)->sin_port);
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	597 break;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	598 }
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	599
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	600 if (port > 0 && port < 65536) {
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	601 v->len = ngx_sprintf(v->data, "%ui", port) - v->data;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	602 }
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	603
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	604 return NGX_OK;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	605 }

Mercurial > hg > nginx

annotate src/http/modules/ngx_http_realip_module.c @ 6565:3af0e65a461a