302 lines
9.6 KiB
Go
302 lines
9.6 KiB
Go
|
package label
|
||
|
|
||
|
import (
|
||
|
"math"
|
||
|
"regexp"
|
||
|
"strconv"
|
||
|
"strings"
|
||
|
|
||
|
"github.com/containous/flaeg"
|
||
|
"github.com/containous/traefik/log"
|
||
|
"github.com/containous/traefik/types"
|
||
|
)
|
||
|
|
||
|
// GetWhiteList Create white list from labels
|
||
|
func GetWhiteList(labels map[string]string) *types.WhiteList {
|
||
|
if Has(labels, TraefikFrontendWhitelistSourceRange) {
|
||
|
log.Warnf("Deprecated configuration found: %s. Please use %s.", TraefikFrontendWhitelistSourceRange, TraefikFrontendWhiteListSourceRange)
|
||
|
}
|
||
|
|
||
|
ranges := GetSliceStringValue(labels, TraefikFrontendWhiteListSourceRange)
|
||
|
if len(ranges) > 0 {
|
||
|
return &types.WhiteList{
|
||
|
SourceRange: ranges,
|
||
|
UseXForwardedFor: GetBoolValue(labels, TraefikFrontendWhiteListUseXForwardedFor, false),
|
||
|
}
|
||
|
}
|
||
|
|
||
|
// TODO: Deprecated
|
||
|
values := GetSliceStringValue(labels, TraefikFrontendWhitelistSourceRange)
|
||
|
if len(values) > 0 {
|
||
|
return &types.WhiteList{
|
||
|
SourceRange: values,
|
||
|
UseXForwardedFor: false,
|
||
|
}
|
||
|
}
|
||
|
|
||
|
return nil
|
||
|
}
|
||
|
|
||
|
// GetRedirect Create redirect from labels
|
||
|
func GetRedirect(labels map[string]string) *types.Redirect {
|
||
|
permanent := GetBoolValue(labels, TraefikFrontendRedirectPermanent, false)
|
||
|
|
||
|
if Has(labels, TraefikFrontendRedirectEntryPoint) {
|
||
|
return &types.Redirect{
|
||
|
EntryPoint: GetStringValue(labels, TraefikFrontendRedirectEntryPoint, ""),
|
||
|
Permanent: permanent,
|
||
|
}
|
||
|
}
|
||
|
|
||
|
if Has(labels, TraefikFrontendRedirectRegex) &&
|
||
|
Has(labels, TraefikFrontendRedirectReplacement) {
|
||
|
return &types.Redirect{
|
||
|
Regex: GetStringValue(labels, TraefikFrontendRedirectRegex, ""),
|
||
|
Replacement: GetStringValue(labels, TraefikFrontendRedirectReplacement, ""),
|
||
|
Permanent: permanent,
|
||
|
}
|
||
|
}
|
||
|
|
||
|
return nil
|
||
|
}
|
||
|
|
||
|
// GetErrorPages Create error pages from labels
|
||
|
func GetErrorPages(labels map[string]string) map[string]*types.ErrorPage {
|
||
|
prefix := Prefix + BaseFrontendErrorPage
|
||
|
return ParseErrorPages(labels, prefix, RegexpFrontendErrorPage)
|
||
|
}
|
||
|
|
||
|
// ParseErrorPages parse error pages to create ErrorPage struct
|
||
|
func ParseErrorPages(labels map[string]string, labelPrefix string, labelRegex *regexp.Regexp) map[string]*types.ErrorPage {
|
||
|
var errorPages map[string]*types.ErrorPage
|
||
|
|
||
|
for lblName, value := range labels {
|
||
|
if strings.HasPrefix(lblName, labelPrefix) {
|
||
|
submatch := labelRegex.FindStringSubmatch(lblName)
|
||
|
if len(submatch) != 3 {
|
||
|
log.Errorf("Invalid page error label: %s, sub-match: %v", lblName, submatch)
|
||
|
continue
|
||
|
}
|
||
|
|
||
|
if errorPages == nil {
|
||
|
errorPages = make(map[string]*types.ErrorPage)
|
||
|
}
|
||
|
|
||
|
pageName := submatch[1]
|
||
|
|
||
|
ep, ok := errorPages[pageName]
|
||
|
if !ok {
|
||
|
ep = &types.ErrorPage{}
|
||
|
errorPages[pageName] = ep
|
||
|
}
|
||
|
|
||
|
switch submatch[2] {
|
||
|
case SuffixErrorPageStatus:
|
||
|
ep.Status = SplitAndTrimString(value, ",")
|
||
|
case SuffixErrorPageQuery:
|
||
|
ep.Query = value
|
||
|
case SuffixErrorPageBackend:
|
||
|
ep.Backend = value
|
||
|
default:
|
||
|
log.Errorf("Invalid page error label: %s", lblName)
|
||
|
continue
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
|
||
|
return errorPages
|
||
|
}
|
||
|
|
||
|
// GetRateLimit Create rate limits from labels
|
||
|
func GetRateLimit(labels map[string]string) *types.RateLimit {
|
||
|
extractorFunc := GetStringValue(labels, TraefikFrontendRateLimitExtractorFunc, "")
|
||
|
if len(extractorFunc) == 0 {
|
||
|
return nil
|
||
|
}
|
||
|
|
||
|
prefix := Prefix + BaseFrontendRateLimit
|
||
|
limits := ParseRateSets(labels, prefix, RegexpFrontendRateLimit)
|
||
|
|
||
|
return &types.RateLimit{
|
||
|
ExtractorFunc: extractorFunc,
|
||
|
RateSet: limits,
|
||
|
}
|
||
|
}
|
||
|
|
||
|
// ParseRateSets parse rate limits to create Rate struct
|
||
|
func ParseRateSets(labels map[string]string, labelPrefix string, labelRegex *regexp.Regexp) map[string]*types.Rate {
|
||
|
var rateSets map[string]*types.Rate
|
||
|
|
||
|
for lblName, rawValue := range labels {
|
||
|
if strings.HasPrefix(lblName, labelPrefix) && len(rawValue) > 0 {
|
||
|
submatch := labelRegex.FindStringSubmatch(lblName)
|
||
|
if len(submatch) != 3 {
|
||
|
log.Errorf("Invalid rate limit label: %s, sub-match: %v", lblName, submatch)
|
||
|
continue
|
||
|
}
|
||
|
|
||
|
if rateSets == nil {
|
||
|
rateSets = make(map[string]*types.Rate)
|
||
|
}
|
||
|
|
||
|
limitName := submatch[1]
|
||
|
|
||
|
ep, ok := rateSets[limitName]
|
||
|
if !ok {
|
||
|
ep = &types.Rate{}
|
||
|
rateSets[limitName] = ep
|
||
|
}
|
||
|
|
||
|
switch submatch[2] {
|
||
|
case "period":
|
||
|
var d flaeg.Duration
|
||
|
err := d.Set(rawValue)
|
||
|
if err != nil {
|
||
|
log.Errorf("Unable to parse %q: %q. %v", lblName, rawValue, err)
|
||
|
continue
|
||
|
}
|
||
|
ep.Period = d
|
||
|
case "average":
|
||
|
value, err := strconv.ParseInt(rawValue, 10, 64)
|
||
|
if err != nil {
|
||
|
log.Errorf("Unable to parse %q: %q. %v", lblName, rawValue, err)
|
||
|
continue
|
||
|
}
|
||
|
ep.Average = value
|
||
|
case "burst":
|
||
|
value, err := strconv.ParseInt(rawValue, 10, 64)
|
||
|
if err != nil {
|
||
|
log.Errorf("Unable to parse %q: %q. %v", lblName, rawValue, err)
|
||
|
continue
|
||
|
}
|
||
|
ep.Burst = value
|
||
|
default:
|
||
|
log.Errorf("Invalid rate limit label: %s", lblName)
|
||
|
continue
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
return rateSets
|
||
|
}
|
||
|
|
||
|
// GetHeaders Create headers from labels
|
||
|
func GetHeaders(labels map[string]string) *types.Headers {
|
||
|
headers := &types.Headers{
|
||
|
CustomRequestHeaders: GetMapValue(labels, TraefikFrontendRequestHeaders),
|
||
|
CustomResponseHeaders: GetMapValue(labels, TraefikFrontendResponseHeaders),
|
||
|
SSLProxyHeaders: GetMapValue(labels, TraefikFrontendSSLProxyHeaders),
|
||
|
AllowedHosts: GetSliceStringValue(labels, TraefikFrontendAllowedHosts),
|
||
|
HostsProxyHeaders: GetSliceStringValue(labels, TraefikFrontendHostsProxyHeaders),
|
||
|
STSSeconds: GetInt64Value(labels, TraefikFrontendSTSSeconds, 0),
|
||
|
SSLRedirect: GetBoolValue(labels, TraefikFrontendSSLRedirect, false),
|
||
|
SSLTemporaryRedirect: GetBoolValue(labels, TraefikFrontendSSLTemporaryRedirect, false),
|
||
|
STSIncludeSubdomains: GetBoolValue(labels, TraefikFrontendSTSIncludeSubdomains, false),
|
||
|
STSPreload: GetBoolValue(labels, TraefikFrontendSTSPreload, false),
|
||
|
ForceSTSHeader: GetBoolValue(labels, TraefikFrontendForceSTSHeader, false),
|
||
|
FrameDeny: GetBoolValue(labels, TraefikFrontendFrameDeny, false),
|
||
|
ContentTypeNosniff: GetBoolValue(labels, TraefikFrontendContentTypeNosniff, false),
|
||
|
BrowserXSSFilter: GetBoolValue(labels, TraefikFrontendBrowserXSSFilter, false),
|
||
|
IsDevelopment: GetBoolValue(labels, TraefikFrontendIsDevelopment, false),
|
||
|
SSLHost: GetStringValue(labels, TraefikFrontendSSLHost, ""),
|
||
|
CustomFrameOptionsValue: GetStringValue(labels, TraefikFrontendCustomFrameOptionsValue, ""),
|
||
|
ContentSecurityPolicy: GetStringValue(labels, TraefikFrontendContentSecurityPolicy, ""),
|
||
|
PublicKey: GetStringValue(labels, TraefikFrontendPublicKey, ""),
|
||
|
ReferrerPolicy: GetStringValue(labels, TraefikFrontendReferrerPolicy, ""),
|
||
|
CustomBrowserXSSValue: GetStringValue(labels, TraefikFrontendCustomBrowserXSSValue, ""),
|
||
|
}
|
||
|
|
||
|
if !headers.HasSecureHeadersDefined() && !headers.HasCustomHeadersDefined() {
|
||
|
return nil
|
||
|
}
|
||
|
|
||
|
return headers
|
||
|
}
|
||
|
|
||
|
// GetMaxConn Create max connection from labels
|
||
|
func GetMaxConn(labels map[string]string) *types.MaxConn {
|
||
|
amount := GetInt64Value(labels, TraefikBackendMaxConnAmount, math.MinInt64)
|
||
|
extractorFunc := GetStringValue(labels, TraefikBackendMaxConnExtractorFunc, DefaultBackendMaxconnExtractorFunc)
|
||
|
|
||
|
if amount == math.MinInt64 || len(extractorFunc) == 0 {
|
||
|
return nil
|
||
|
}
|
||
|
|
||
|
return &types.MaxConn{
|
||
|
Amount: amount,
|
||
|
ExtractorFunc: extractorFunc,
|
||
|
}
|
||
|
}
|
||
|
|
||
|
// GetHealthCheck Create health check from labels
|
||
|
func GetHealthCheck(labels map[string]string) *types.HealthCheck {
|
||
|
path := GetStringValue(labels, TraefikBackendHealthCheckPath, "")
|
||
|
if len(path) == 0 {
|
||
|
return nil
|
||
|
}
|
||
|
|
||
|
port := GetIntValue(labels, TraefikBackendHealthCheckPort, DefaultBackendHealthCheckPort)
|
||
|
interval := GetStringValue(labels, TraefikBackendHealthCheckInterval, "")
|
||
|
|
||
|
return &types.HealthCheck{
|
||
|
Path: path,
|
||
|
Port: port,
|
||
|
Interval: interval,
|
||
|
}
|
||
|
}
|
||
|
|
||
|
// GetBuffering Create buffering from labels
|
||
|
func GetBuffering(labels map[string]string) *types.Buffering {
|
||
|
if !HasPrefix(labels, TraefikBackendBuffering) {
|
||
|
return nil
|
||
|
}
|
||
|
|
||
|
return &types.Buffering{
|
||
|
MaxRequestBodyBytes: GetInt64Value(labels, TraefikBackendBufferingMaxRequestBodyBytes, 0),
|
||
|
MaxResponseBodyBytes: GetInt64Value(labels, TraefikBackendBufferingMaxResponseBodyBytes, 0),
|
||
|
MemRequestBodyBytes: GetInt64Value(labels, TraefikBackendBufferingMemRequestBodyBytes, 0),
|
||
|
MemResponseBodyBytes: GetInt64Value(labels, TraefikBackendBufferingMemResponseBodyBytes, 0),
|
||
|
RetryExpression: GetStringValue(labels, TraefikBackendBufferingRetryExpression, ""),
|
||
|
}
|
||
|
}
|
||
|
|
||
|
// GetCircuitBreaker Create circuit breaker from labels
|
||
|
func GetCircuitBreaker(labels map[string]string) *types.CircuitBreaker {
|
||
|
circuitBreaker := GetStringValue(labels, TraefikBackendCircuitBreakerExpression, "")
|
||
|
if len(circuitBreaker) == 0 {
|
||
|
return nil
|
||
|
}
|
||
|
return &types.CircuitBreaker{Expression: circuitBreaker}
|
||
|
}
|
||
|
|
||
|
// GetLoadBalancer Create load balancer from labels
|
||
|
func GetLoadBalancer(labels map[string]string) *types.LoadBalancer {
|
||
|
if !HasPrefix(labels, TraefikBackendLoadBalancer) {
|
||
|
return nil
|
||
|
}
|
||
|
|
||
|
method := GetStringValue(labels, TraefikBackendLoadBalancerMethod, DefaultBackendLoadBalancerMethod)
|
||
|
|
||
|
lb := &types.LoadBalancer{
|
||
|
Method: method,
|
||
|
Sticky: getSticky(labels),
|
||
|
}
|
||
|
|
||
|
if GetBoolValue(labels, TraefikBackendLoadBalancerStickiness, false) {
|
||
|
cookieName := GetStringValue(labels, TraefikBackendLoadBalancerStickinessCookieName, DefaultBackendLoadbalancerStickinessCookieName)
|
||
|
lb.Stickiness = &types.Stickiness{CookieName: cookieName}
|
||
|
}
|
||
|
|
||
|
return lb
|
||
|
}
|
||
|
|
||
|
// TODO: Deprecated
|
||
|
// replaced by Stickiness
|
||
|
// Deprecated
|
||
|
func getSticky(labels map[string]string) bool {
|
||
|
if Has(labels, TraefikBackendLoadBalancerSticky) {
|
||
|
log.Warnf("Deprecated configuration found: %s. Please use %s.", TraefikBackendLoadBalancerSticky, TraefikBackendLoadBalancerStickiness)
|
||
|
}
|
||
|
|
||
|
return GetBoolValue(labels, TraefikBackendLoadBalancerSticky, false)
|
||
|
}
|