mirror of
https://github.com/hanzozt/zt.git
synced 2026-10-30 15:04:55 +00:00
105 lines
3.1 KiB
Go
105 lines
3.1 KiB
Go
package intercept
|
|
|
|
import (
|
|
"github.com/google/uuid"
|
|
"github.com/openziti/edge-api/rest_model"
|
|
"github.com/openziti/foundation/v2/util"
|
|
"github.com/openziti/ziti/tunnel"
|
|
"github.com/openziti/ziti/tunnel/entities"
|
|
"github.com/stretchr/testify/require"
|
|
"net"
|
|
"testing"
|
|
)
|
|
|
|
type testProvider struct {
|
|
}
|
|
|
|
func (self *testProvider) PrepForUse(serviceId string) {
|
|
}
|
|
|
|
func (self *testProvider) GetCurrentIdentity() (*rest_model.IdentityDetail, error) {
|
|
cost := rest_model.TerminatorCost(0)
|
|
return &rest_model.IdentityDetail{
|
|
Name: util.Ptr("foo.bar"),
|
|
DefaultHostingCost: &cost,
|
|
AppData: &rest_model.Tags{
|
|
SubTags: map[string]interface{}{
|
|
"srcip": "123.456.789.10:5555",
|
|
"sourceIp": "15.14.13.12",
|
|
"sourcePort": 1999,
|
|
},
|
|
},
|
|
}, nil
|
|
}
|
|
|
|
func (self *testProvider) GetCurrentIdentityWithBackoff() (*rest_model.IdentityDetail, error) {
|
|
return self.GetCurrentIdentity()
|
|
}
|
|
|
|
func (self *testProvider) TunnelService(service tunnel.Service, identity string, conn net.Conn, halfClose bool, appInfo []byte) error {
|
|
panic("implement me")
|
|
}
|
|
|
|
func (self *testProvider) HostService(hostCtx tunnel.HostingContext) (tunnel.HostControl, error) {
|
|
panic("implement me")
|
|
}
|
|
|
|
func Test_SourceIp(t *testing.T) {
|
|
svc := &entities.Service{}
|
|
|
|
sourceAddr := &net.TCPAddr{IP: net.ParseIP("1.2.3.4"), Port: 5432}
|
|
destAddr := &net.TCPAddr{IP: net.ParseIP("5.6.7.8"), Port: 80}
|
|
|
|
req := require.New(t)
|
|
|
|
poller := &ServiceListener{provider: &testProvider{}}
|
|
req.NoError(poller.configureSourceAddrProvider(svc))
|
|
req.Equal("", svc.GetSourceAddr(sourceAddr, destAddr))
|
|
|
|
svc = &entities.Service{
|
|
InterceptV1Config: &entities.InterceptV1Config{},
|
|
}
|
|
|
|
req.NoError(poller.configureSourceAddrProvider(svc))
|
|
req.Equal("", svc.GetSourceAddr(sourceAddr, destAddr))
|
|
|
|
testMatch := func(templ string, expected string) {
|
|
svc.InterceptV1Config.SourceIp = &templ
|
|
req.NoError(poller.configureSourceAddrProvider(svc))
|
|
req.Equal(expected, svc.GetSourceAddr(sourceAddr, destAddr))
|
|
}
|
|
|
|
testMatch("$src_ip:$src_port", "1.2.3.4:5432")
|
|
testMatch("$src_ip:$dst_port", "1.2.3.4:80")
|
|
testMatch("$dst_ip:$src_port", "5.6.7.8:5432")
|
|
testMatch("$dst_ip:$dst_port", "5.6.7.8:80")
|
|
testMatch("$tunneler_id.name", "foo.bar")
|
|
testMatch("$tunneler_id.appData[srcip]", "123.456.789.10:5555")
|
|
testMatch("$tunneler_id.appData[sourceIp]:$tunneler_id.appData[sourcePort]", "15.14.13.12:1999")
|
|
}
|
|
|
|
func Test_TemplateIdentity(t *testing.T) {
|
|
serviceId := uuid.NewString()
|
|
svc := &entities.Service{
|
|
ServiceDetail: rest_model.ServiceDetail{
|
|
BaseEntity: rest_model.BaseEntity{
|
|
ID: &serviceId,
|
|
},
|
|
},
|
|
}
|
|
hostTerminator := &entities.HostV1Config{ListenOptions: &entities.HostV1ListenOptions{}}
|
|
provider := &testProvider{}
|
|
currentIdentity, err := provider.GetCurrentIdentity()
|
|
req := require.New(t)
|
|
req.NoError(err)
|
|
|
|
testMatch := func(templ string, expected string) {
|
|
hostTerminator.ListenOptions.Identity = templ
|
|
listenOptions, err := getDefaultOptions(svc, currentIdentity, hostTerminator)
|
|
req.NoError(err)
|
|
req.Equal(expected, listenOptions.Identity)
|
|
}
|
|
|
|
testMatch("$tunneler_id.appData[sourceIp]", "15.14.13.12")
|
|
}
|