nginx: src/http/modules/ngx_http_realip

annotate src/http/modules/ngx_http_realip_module.c @ 6562:b13d3a6f0512

Added the $realip_remote_port variable.

author	Dmitry Volyntsev <xeioex@nginx.com>
date	Mon, 23 May 2016 18:44:22 +0300
parents	2cd019520210
children	26feae43987f

rev	line source
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	1
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	2 /*
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	3 * Copyright (C) Igor Sysoev
4412 d620f497c50f Copyright updated. Maxim Konovalov <maxim@nginx.com> parents: 3305 diff changeset	4 * Copyright (C) Nginx, Inc.
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	5 */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	6
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	7
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	8 #include <ngx_config.h>
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	9 #include <ngx_core.h>
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	10 #include <ngx_http.h>
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	11
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	12
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	13 #define NGX_HTTP_REALIP_XREALIP 0
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	14 #define NGX_HTTP_REALIP_XFWD 1
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	15 #define NGX_HTTP_REALIP_HEADER 2
5605 3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	16 #define NGX_HTTP_REALIP_PROXY 3
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	17
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	18
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	19 typedef struct {
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	20 ngx_array_t from; / array of ngx_cidr_t */
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	21 ngx_uint_t type;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	22 ngx_uint_t hash;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	23 ngx_str_t header;
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	24 ngx_flag_t recursive;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	25 } ngx_http_realip_loc_conf_t;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	26
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	27
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	28 typedef struct {
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	29 ngx_connection_t *connection;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	30 struct sockaddr *sockaddr;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	31 socklen_t socklen;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	32 ngx_str_t addr_text;
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	33 } ngx_http_realip_ctx_t;
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	34
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	35
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	36 static ngx_int_t ngx_http_realip_handler(ngx_http_request_t *r);
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	37 static ngx_int_t ngx_http_realip_set_addr(ngx_http_request_t *r,
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	38 ngx_addr_t *addr);
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	39 static void ngx_http_realip_cleanup(void *data);
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	40 static char ngx_http_realip_from(ngx_conf_t cf, ngx_command_t *cmd,
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	41 void *conf);
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	42 static char ngx_http_realip(ngx_conf_t cf, ngx_command_t cmd, void conf);
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	43 static void ngx_http_realip_create_loc_conf(ngx_conf_t cf);
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	44 static char ngx_http_realip_merge_loc_conf(ngx_conf_t cf,
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	45 void parent, void child);
6294 cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	46 static ngx_int_t ngx_http_realip_add_variables(ngx_conf_t *cf);
681 7e24168b0853 nginx-0.4.0-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: 667 diff changeset	47 static ngx_int_t ngx_http_realip_init(ngx_conf_t *cf);
6562 b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	48 static ngx_http_realip_ctx_t *ngx_http_realip_get_module_ctx(
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	49 ngx_http_request_t *r);
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	50
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	51
6294 cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	52 static ngx_int_t ngx_http_realip_remote_addr_variable(ngx_http_request_t *r,
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	53 ngx_http_variable_value_t *v, uintptr_t data);
6562 b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	54 static ngx_int_t ngx_http_realip_remote_port_variable(ngx_http_request_t *r,
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	55 ngx_http_variable_value_t *v, uintptr_t data);
6294 cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	56
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	57
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	58 static ngx_command_t ngx_http_realip_commands[] = {
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	59
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	60 { ngx_string("set_real_ip_from"),
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	61 NGX_HTTP_MAIN_CONF\|NGX_HTTP_SRV_CONF\|NGX_HTTP_LOC_CONF\|NGX_CONF_TAKE1,
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	62 ngx_http_realip_from,
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	63 NGX_HTTP_LOC_CONF_OFFSET,
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	64 0,
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	65 NULL },
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	66
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	67 { ngx_string("real_ip_header"),
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	68 NGX_HTTP_MAIN_CONF\|NGX_HTTP_SRV_CONF\|NGX_HTTP_LOC_CONF\|NGX_CONF_TAKE1,
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	69 ngx_http_realip,
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	70 NGX_HTTP_LOC_CONF_OFFSET,
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	71 0,
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	72 NULL },
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	73
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	74 { ngx_string("real_ip_recursive"),
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	75 NGX_HTTP_MAIN_CONF\|NGX_HTTP_SRV_CONF\|NGX_HTTP_LOC_CONF\|NGX_CONF_FLAG,
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	76 ngx_conf_set_flag_slot,
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	77 NGX_HTTP_LOC_CONF_OFFSET,
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	78 offsetof(ngx_http_realip_loc_conf_t, recursive),
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	79 NULL },
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	80
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	81 ngx_null_command
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	82 };
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	83
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	84
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	85
667 63a820b0bc6c nginx-0.3.55-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: 663 diff changeset	86 static ngx_http_module_t ngx_http_realip_module_ctx = {
6294 cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	87 ngx_http_realip_add_variables, /* preconfiguration */
681 7e24168b0853 nginx-0.4.0-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: 667 diff changeset	88 ngx_http_realip_init, /* postconfiguration */
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	89
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	90 NULL, /* create main configuration */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	91 NULL, /* init main configuration */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	92
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	93 NULL, /* create server configuration */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	94 NULL, /* merge server configuration */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	95
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	96 ngx_http_realip_create_loc_conf, /* create location configuration */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	97 ngx_http_realip_merge_loc_conf /* merge location configuration */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	98 };
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	99
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	100
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	101 ngx_module_t ngx_http_realip_module = {
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	102 NGX_MODULE_V1,
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	103 &ngx_http_realip_module_ctx, /* module context */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	104 ngx_http_realip_commands, /* module directives */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	105 NGX_HTTP_MODULE, /* module type */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	106 NULL, /* init master */
681 7e24168b0853 nginx-0.4.0-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: 667 diff changeset	107 NULL, /* init module */
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	108 NULL, /* init process */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	109 NULL, /* init thread */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	110 NULL, /* exit thread */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	111 NULL, /* exit process */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	112 NULL, /* exit master */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	113 NGX_MODULE_V1_PADDING
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	114 };
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	115
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	116
6294 cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	117 static ngx_http_variable_t ngx_http_realip_vars[] = {
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	118
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	119 { ngx_string("realip_remote_addr"), NULL,
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	120 ngx_http_realip_remote_addr_variable, 0, 0, 0 },
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	121
6562 b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	122 { ngx_string("realip_remote_port"), NULL,
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	123 ngx_http_realip_remote_port_variable, 0, 0, 0 },
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	124
6294 cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	125 { ngx_null_string, NULL, NULL, 0, 0, 0 }
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	126 };
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	127
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	128
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	129 static ngx_int_t
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	130 ngx_http_realip_handler(ngx_http_request_t *r)
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	131 {
5084 f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	132 u_char *p;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	133 size_t len;
5084 f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	134 ngx_str_t *value;
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	135 ngx_uint_t i, hash;
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	136 ngx_addr_t addr;
5084 f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	137 ngx_array_t *xfwd;
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	138 ngx_list_part_t *part;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	139 ngx_table_elt_t *header;
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	140 ngx_connection_t *c;
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	141 ngx_http_realip_ctx_t *ctx;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	142 ngx_http_realip_loc_conf_t *rlcf;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	143
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	144 ctx = ngx_http_get_module_ctx(r, ngx_http_realip_module);
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	145
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	146 if (ctx) {
986 68c85f283043 ngx_http_realip_module must return NGX_DECLINED Igor Sysoev <igor@sysoev.ru> parents: 681 diff changeset	147 return NGX_DECLINED;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	148 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	149
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	150 rlcf = ngx_http_get_module_loc_conf(r, ngx_http_realip_module);
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	151
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	152 if (rlcf->from == NULL) {
986 68c85f283043 ngx_http_realip_module must return NGX_DECLINED Igor Sysoev <igor@sysoev.ru> parents: 681 diff changeset	153 return NGX_DECLINED;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	154 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	155
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	156 switch (rlcf->type) {
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	157
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	158 case NGX_HTTP_REALIP_XREALIP:
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	159
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	160 if (r->headers_in.x_real_ip == NULL) {
986 68c85f283043 ngx_http_realip_module must return NGX_DECLINED Igor Sysoev <igor@sysoev.ru> parents: 681 diff changeset	161 return NGX_DECLINED;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	162 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	163
5084 f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	164 value = &r->headers_in.x_real_ip->value;
f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	165 xfwd = NULL;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	166
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	167 break;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	168
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	169 case NGX_HTTP_REALIP_XFWD:
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	170
5084 f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	171 xfwd = &r->headers_in.x_forwarded_for;
f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	172
f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	173 if (xfwd->elts == NULL) {
986 68c85f283043 ngx_http_realip_module must return NGX_DECLINED Igor Sysoev <igor@sysoev.ru> parents: 681 diff changeset	174 return NGX_DECLINED;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	175 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	176
5084 f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	177 value = NULL;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	178
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	179 break;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	180
5605 3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	181 case NGX_HTTP_REALIP_PROXY:
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	182
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	183 value = &r->connection->proxy_protocol_addr;
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	184
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	185 if (value->len == 0) {
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	186 return NGX_DECLINED;
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	187 }
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	188
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	189 xfwd = NULL;
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	190
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	191 break;
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	192
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	193 default: /* NGX_HTTP_REALIP_HEADER */
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	194
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	195 part = &r->headers_in.headers.part;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	196 header = part->elts;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	197
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	198 hash = rlcf->hash;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	199 len = rlcf->header.len;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	200 p = rlcf->header.data;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	201
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	202 for (i = 0; /* void */ ; i++) {
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	203
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	204 if (i >= part->nelts) {
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	205 if (part->next == NULL) {
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	206 break;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	207 }
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	208
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	209 part = part->next;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	210 header = part->elts;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	211 i = 0;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	212 }
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	213
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	214 if (hash == header[i].hash
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	215 && len == header[i].key.len
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	216 && ngx_strncmp(p, header[i].lowcase_key, len) == 0)
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	217 {
5084 f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	218 value = &header[i].value;
f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	219 xfwd = NULL;
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	220
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	221 goto found;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	222 }
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	223 }
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	224
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	225 return NGX_DECLINED;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	226 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	227
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	228 found:
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	229
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	230 c = r->connection;
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	231
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	232 addr.sockaddr = c->sockaddr;
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	233 addr.socklen = c->socklen;
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	234 /* addr.name = c->addr_text; */
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	235
5084 f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	236 if (ngx_http_get_forwarded_addr(r, &addr, xfwd, value, rlcf->from,
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	237 rlcf->recursive)
5084 f7fe817c92a2 Correctly handle multiple X-Forwarded-For headers (ticket #106). Ruslan Ermilov <ru@nginx.com> parents: 4624 diff changeset	238 != NGX_DECLINED)
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	239 {
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	240 return ngx_http_realip_set_addr(r, &addr);
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	241 }
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	242
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	243 return NGX_DECLINED;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	244 }
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	245
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	246
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	247 static ngx_int_t
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	248 ngx_http_realip_set_addr(ngx_http_request_t r, ngx_addr_t addr)
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	249 {
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	250 size_t len;
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	251 u_char *p;
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	252 u_char text[NGX_SOCKADDR_STRLEN];
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	253 ngx_connection_t *c;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	254 ngx_pool_cleanup_t *cln;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	255 ngx_http_realip_ctx_t *ctx;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	256
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	257 cln = ngx_pool_cleanup_add(r->pool, sizeof(ngx_http_realip_ctx_t));
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	258 if (cln == NULL) {
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	259 return NGX_HTTP_INTERNAL_SERVER_ERROR;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	260 }
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	261
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	262 ctx = cln->data;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	263 ngx_http_set_ctx(r, ctx, ngx_http_realip_module);
1114 3f354952e91d fix broken values, debug logging, and style fix Igor Sysoev <igor@sysoev.ru> parents: 986 diff changeset	264
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	265 c = r->connection;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	266
5263 05ba5bce31e0 Core: extended ngx_sock_ntop() with socklen parameter. Vladimir Homutov <vl@nginx.com> parents: 5084 diff changeset	267 len = ngx_sock_ntop(addr->sockaddr, addr->socklen, text,
05ba5bce31e0 Core: extended ngx_sock_ntop() with socklen parameter. Vladimir Homutov <vl@nginx.com> parents: 5084 diff changeset	268 NGX_SOCKADDR_STRLEN, 0);
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	269 if (len == 0) {
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	270 return NGX_HTTP_INTERNAL_SERVER_ERROR;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	271 }
1114 3f354952e91d fix broken values, debug logging, and style fix Igor Sysoev <igor@sysoev.ru> parents: 986 diff changeset	272
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	273 p = ngx_pnalloc(c->pool, len);
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	274 if (p == NULL) {
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	275 return NGX_HTTP_INTERNAL_SERVER_ERROR;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	276 }
1118 cec2866f29bd a client address must be allocated from a connection pool Igor Sysoev <igor@sysoev.ru> parents: 1114 diff changeset	277
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	278 ngx_memcpy(p, text, len);
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	279
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	280 cln->handler = ngx_http_realip_cleanup;
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	281
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	282 ctx->connection = c;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	283 ctx->sockaddr = c->sockaddr;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	284 ctx->socklen = c->socklen;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	285 ctx->addr_text = c->addr_text;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	286
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	287 c->sockaddr = addr->sockaddr;
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	288 c->socklen = addr->socklen;
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	289 c->addr_text.len = len;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	290 c->addr_text.data = p;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	291
986 68c85f283043 ngx_http_realip_module must return NGX_DECLINED Igor Sysoev <igor@sysoev.ru> parents: 681 diff changeset	292 return NGX_DECLINED;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	293 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	294
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	295
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	296 static void
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	297 ngx_http_realip_cleanup(void *data)
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	298 {
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	299 ngx_http_realip_ctx_t *ctx = data;
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	300
3273 fe71be4a02f1 support IPv6 addresses in Real IP headers Igor Sysoev <igor@sysoev.ru> parents: 3267 diff changeset	301 ngx_connection_t *c;
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	302
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	303 c = ctx->connection;
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	304
3273 fe71be4a02f1 support IPv6 addresses in Real IP headers Igor Sysoev <igor@sysoev.ru> parents: 3267 diff changeset	305 c->sockaddr = ctx->sockaddr;
fe71be4a02f1 support IPv6 addresses in Real IP headers Igor Sysoev <igor@sysoev.ru> parents: 3267 diff changeset	306 c->socklen = ctx->socklen;
2176 29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	307 c->addr_text = ctx->addr_text;
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	308 }
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	309
29d26406e1bd restore connection address on request closure, Igor Sysoev <igor@sysoev.ru> parents: 2049 diff changeset	310
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	311 static char *
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	312 ngx_http_realip_from(ngx_conf_t cf, ngx_command_t cmd, void *conf)
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	313 {
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	314 ngx_http_realip_loc_conf_t *rlcf = conf;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	315
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	316 ngx_int_t rc;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	317 ngx_str_t *value;
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	318 ngx_cidr_t *cidr;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	319
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	320 value = cf->args->elts;
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	321
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	322 if (rlcf->from == NULL) {
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	323 rlcf->from = ngx_array_create(cf->pool, 2,
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	324 sizeof(ngx_cidr_t));
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	325 if (rlcf->from == NULL) {
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	326 return NGX_CONF_ERROR;
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	327 }
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	328 }
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	329
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	330 cidr = ngx_array_push(rlcf->from);
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	331 if (cidr == NULL) {
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	332 return NGX_CONF_ERROR;
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	333 }
df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	334
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	335 #if (NGX_HAVE_UNIX_DOMAIN)
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	336
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	337 if (ngx_strcmp(value[1].data, "unix:") == 0) {
6474 2cd019520210 Style. Ruslan Ermilov <ru@nginx.com> parents: 6294 diff changeset	338 cidr->family = AF_UNIX;
2cd019520210 Style. Ruslan Ermilov <ru@nginx.com> parents: 6294 diff changeset	339 return NGX_CONF_OK;
3274 95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	340 }
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	341
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	342 #endif
95b0b0d7843f set_real_ip_from unix: Igor Sysoev <igor@sysoev.ru> parents: 3273 diff changeset	343
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	344 rc = ngx_ptocidr(&value[1], cidr);
1380 b590a528fd41 ignore meaningless bits in CIDR and warn about them Igor Sysoev <igor@sysoev.ru> parents: 1118 diff changeset	345
b590a528fd41 ignore meaningless bits in CIDR and warn about them Igor Sysoev <igor@sysoev.ru> parents: 1118 diff changeset	346 if (rc == NGX_ERROR) {
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	347 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0, "invalid parameter \"%V\"",
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	348 &value[1]);
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	349 return NGX_CONF_ERROR;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	350 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	351
1380 b590a528fd41 ignore meaningless bits in CIDR and warn about them Igor Sysoev <igor@sysoev.ru> parents: 1118 diff changeset	352 if (rc == NGX_DONE) {
b590a528fd41 ignore meaningless bits in CIDR and warn about them Igor Sysoev <igor@sysoev.ru> parents: 1118 diff changeset	353 ngx_conf_log_error(NGX_LOG_WARN, cf, 0,
b590a528fd41 ignore meaningless bits in CIDR and warn about them Igor Sysoev <igor@sysoev.ru> parents: 1118 diff changeset	354 "low address bits of %V are meaningless", &value[1]);
b590a528fd41 ignore meaningless bits in CIDR and warn about them Igor Sysoev <igor@sysoev.ru> parents: 1118 diff changeset	355 }
b590a528fd41 ignore meaningless bits in CIDR and warn about them Igor Sysoev <igor@sysoev.ru> parents: 1118 diff changeset	356
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	357 return NGX_CONF_OK;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	358 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	359
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	360
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	361 static char *
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	362 ngx_http_realip(ngx_conf_t cf, ngx_command_t cmd, void *conf)
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	363 {
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	364 ngx_http_realip_loc_conf_t *rlcf = conf;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	365
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	366 ngx_str_t *value;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	367
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	368 value = cf->args->elts;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	369
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	370 if (ngx_strcmp(value[1].data, "X-Real-IP") == 0) {
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	371 rlcf->type = NGX_HTTP_REALIP_XREALIP;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	372 return NGX_CONF_OK;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	373 }
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	374
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	375 if (ngx_strcmp(value[1].data, "X-Forwarded-For") == 0) {
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	376 rlcf->type = NGX_HTTP_REALIP_XFWD;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	377 return NGX_CONF_OK;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	378 }
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	379
5605 3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	380 if (ngx_strcmp(value[1].data, "proxy_protocol") == 0) {
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	381 rlcf->type = NGX_HTTP_REALIP_PROXY;
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	382 return NGX_CONF_OK;
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	383 }
3a72b1805c52 Added server-side support for PROXY protocol v1 (ticket #355). Roman Arutyunyan <arut@nginx.com> parents: 5263 diff changeset	384
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	385 rlcf->type = NGX_HTTP_REALIP_HEADER;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	386 rlcf->hash = ngx_hash_strlow(value[1].data, value[1].data, value[1].len);
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	387 rlcf->header = value[1];
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	388
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	389 return NGX_CONF_OK;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	390 }
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	391
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	392
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	393 static void *
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	394 ngx_http_realip_create_loc_conf(ngx_conf_t *cf)
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	395 {
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	396 ngx_http_realip_loc_conf_t *conf;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	397
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	398 conf = ngx_pcalloc(cf->pool, sizeof(ngx_http_realip_loc_conf_t));
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	399 if (conf == NULL) {
2912 c7d57b539248 return NULL instead of NGX_CONF_ERROR on a create conf failure Igor Sysoev <igor@sysoev.ru> parents: 2537 diff changeset	400 return NULL;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	401 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	402
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	403 /*
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	404 * set by ngx_pcalloc():
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	405 *
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	406 * conf->from = NULL;
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	407 * conf->hash = 0;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	408 * conf->header = { 0, NULL };
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	409 */
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	410
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	411 conf->type = NGX_CONF_UNSET_UINT;
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	412 conf->recursive = NGX_CONF_UNSET;
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	413
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	414 return conf;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	415 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	416
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	417
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	418 static char *
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	419 ngx_http_realip_merge_loc_conf(ngx_conf_t cf, void parent, void *child)
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	420 {
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	421 ngx_http_realip_loc_conf_t *prev = parent;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	422 ngx_http_realip_loc_conf_t *conf = child;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	423
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	424 if (conf->from == NULL) {
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	425 conf->from = prev->from;
3305 8017f9bda3f6 fix "set_real_ip_from unix:" inheritance Igor Sysoev <igor@sysoev.ru> parents: 3291 diff changeset	426 }
8017f9bda3f6 fix "set_real_ip_from unix:" inheritance Igor Sysoev <igor@sysoev.ru> parents: 3291 diff changeset	427
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	428 ngx_conf_merge_uint_value(conf->type, prev->type, NGX_HTTP_REALIP_XREALIP);
4624 df93068953c0 realip: chains of trusted proxies and IPv6 support. Ruslan Ermilov <ru@nginx.com> parents: 4562 diff changeset	429 ngx_conf_merge_value(conf->recursive, prev->recursive, 0);
2257 74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	430
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	431 if (conf->header.len == 0) {
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	432 conf->hash = prev->hash;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	433 conf->header = prev->header;
74d270c8821e real_ip_header supports any header Igor Sysoev <igor@sysoev.ru> parents: 2202 diff changeset	434 }
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	435
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	436 return NGX_CONF_OK;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	437 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	438
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	439
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	440 static ngx_int_t
6294 cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	441 ngx_http_realip_add_variables(ngx_conf_t *cf)
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	442 {
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	443 ngx_http_variable_t var, v;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	444
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	445 for (v = ngx_http_realip_vars; v->name.len; v++) {
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	446 var = ngx_http_add_variable(cf, &v->name, v->flags);
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	447 if (var == NULL) {
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	448 return NGX_ERROR;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	449 }
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	450
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	451 var->get_handler = v->get_handler;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	452 var->data = v->data;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	453 }
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	454
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	455 return NGX_OK;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	456 }
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	457
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	458
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	459 static ngx_int_t
681 7e24168b0853 nginx-0.4.0-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: 667 diff changeset	460 ngx_http_realip_init(ngx_conf_t *cf)
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	461 {
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	462 ngx_http_handler_pt *h;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	463 ngx_http_core_main_conf_t *cmcf;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	464
681 7e24168b0853 nginx-0.4.0-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: 667 diff changeset	465 cmcf = ngx_http_conf_get_module_main_conf(cf, ngx_http_core_module);
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	466
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	467 h = ngx_array_push(&cmcf->phases[NGX_HTTP_POST_READ_PHASE].handlers);
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	468 if (h == NULL) {
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	469 return NGX_ERROR;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	470 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	471
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	472 *h = ngx_http_realip_handler;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	473
581 326634fb9d47 nginx-0.3.12-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: 573 diff changeset	474 h = ngx_array_push(&cmcf->phases[NGX_HTTP_PREACCESS_PHASE].handlers);
573 58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	475 if (h == NULL) {
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	476 return NGX_ERROR;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	477 }
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	478
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	479 *h = ngx_http_realip_handler;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	480
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	481 return NGX_OK;
58475592100c nginx-0.3.8-RELEASE import Igor Sysoev <igor@sysoev.ru> parents: diff changeset	482 }
6294 cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	483
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	484
6562 b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	485 static ngx_http_realip_ctx_t *
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	486 ngx_http_realip_get_module_ctx(ngx_http_request_t *r)
6294 cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	487 {
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	488 ngx_pool_cleanup_t *cln;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	489 ngx_http_realip_ctx_t *ctx;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	490
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	491 ctx = ngx_http_get_module_ctx(r, ngx_http_realip_module);
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	492
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	493 if (ctx == NULL && (r->internal \|\| r->filter_finalize)) {
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	494
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	495 /*
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	496 * if module context was reset, the original address
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	497 * can still be found in the cleanup handler
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	498 */
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	499
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	500 for (cln = r->pool->cleanup; cln; cln = cln->next) {
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	501 if (cln->handler == ngx_http_realip_cleanup) {
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	502 ctx = cln->data;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	503 break;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	504 }
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	505 }
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	506 }
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	507
6562 b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	508 return ctx;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	509 }
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	510
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	511
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	512 static ngx_int_t
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	513 ngx_http_realip_remote_addr_variable(ngx_http_request_t *r,
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	514 ngx_http_variable_value_t *v, uintptr_t data)
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	515 {
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	516 ngx_str_t *addr_text;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	517 ngx_http_realip_ctx_t *ctx;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	518
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	519 ctx = ngx_http_realip_get_module_ctx(r);
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	520
6294 cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	521 addr_text = ctx ? &ctx->addr_text : &r->connection->addr_text;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	522
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	523 v->len = addr_text->len;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	524 v->valid = 1;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	525 v->no_cacheable = 0;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	526 v->not_found = 0;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	527 v->data = addr_text->data;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	528
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	529 return NGX_OK;
cebe43bace93 Realip: the $realip_remote_addr variable. Ruslan Ermilov <ru@nginx.com> parents: 5605 diff changeset	530 }
6562 b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	531
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	532
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	533 static ngx_int_t
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	534 ngx_http_realip_remote_port_variable(ngx_http_request_t *r,
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	535 ngx_http_variable_value_t *v, uintptr_t data)
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	536 {
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	537 ngx_uint_t port;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	538 struct sockaddr *sa;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	539 ngx_http_realip_ctx_t *ctx;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	540
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	541 ctx = ngx_http_realip_get_module_ctx(r);
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	542
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	543 sa = ctx ? ctx->sockaddr : r->connection->sockaddr;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	544
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	545 v->len = 0;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	546 v->valid = 1;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	547 v->no_cacheable = 0;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	548 v->not_found = 0;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	549
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	550 v->data = ngx_pnalloc(r->pool, sizeof("65535") - 1);
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	551 if (v->data == NULL) {
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	552 return NGX_ERROR;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	553 }
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	554
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	555 switch (sa->sa_family) {
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	556
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	557 #if (NGX_HAVE_INET6)
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	558 case AF_INET6:
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	559 port = ntohs(((struct sockaddr_in6 *) sa)->sin6_port);
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	560 break;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	561 #endif
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	562
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	563 #if (NGX_HAVE_UNIX_DOMAIN)
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	564 case AF_UNIX:
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	565 port = 0;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	566 break;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	567 #endif
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	568
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	569 default: /* AF_INET */
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	570 port = ntohs(((struct sockaddr_in *) sa)->sin_port);
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	571 break;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	572 }
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	573
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	574 if (port > 0 && port < 65536) {
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	575 v->len = ngx_sprintf(v->data, "%ui", port) - v->data;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	576 }
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	577
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	578 return NGX_OK;
b13d3a6f0512 Added the $realip_remote_port variable. Dmitry Volyntsev <xeioex@nginx.com> parents: 6474 diff changeset	579 }

Mercurial > hg > nginx

annotate src/http/modules/ngx_http_realip_module.c @ 6562:b13d3a6f0512