54 lines
1.1 KiB
Go
54 lines
1.1 KiB
Go
package server
|
|
|
|
import (
|
|
"net/http"
|
|
"os"
|
|
|
|
"github.com/containous/traefik/log"
|
|
"github.com/containous/traefik/whitelist"
|
|
"github.com/vulcand/oxy/forward"
|
|
)
|
|
|
|
// NewHeaderRewriter Create a header rewriter
|
|
func NewHeaderRewriter(trustedIPs []string, insecure bool) (forward.ReqRewriter, error) {
|
|
ips, err := whitelist.NewIP(trustedIPs, insecure, true)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
hostname, err := os.Hostname()
|
|
if err != nil {
|
|
hostname = "localhost"
|
|
}
|
|
|
|
return &headerRewriter{
|
|
secureRewriter: &forward.HeaderRewriter{TrustForwardHeader: false, Hostname: hostname},
|
|
insecureRewriter: &forward.HeaderRewriter{TrustForwardHeader: true, Hostname: hostname},
|
|
ips: ips,
|
|
insecure: insecure,
|
|
}, nil
|
|
}
|
|
|
|
type headerRewriter struct {
|
|
secureRewriter forward.ReqRewriter
|
|
insecureRewriter forward.ReqRewriter
|
|
insecure bool
|
|
ips *whitelist.IP
|
|
}
|
|
|
|
func (h *headerRewriter) Rewrite(req *http.Request) {
|
|
if h.insecure {
|
|
h.insecureRewriter.Rewrite(req)
|
|
return
|
|
}
|
|
|
|
err := h.ips.IsAuthorized(req)
|
|
if err != nil {
|
|
log.Debug(err)
|
|
h.secureRewriter.Rewrite(req)
|
|
return
|
|
}
|
|
|
|
h.insecureRewriter.Rewrite(req)
|
|
}
|