Mark D. Roth | d58a985 | 2017-01-18 08:28:57 -0800 | [diff] [blame] | 1 | /* |
| 2 | * |
Jan Tattermusch | 7897ae9 | 2017-06-07 22:57:36 +0200 | [diff] [blame] | 3 | * Copyright 2016 gRPC authors. |
Mark D. Roth | d58a985 | 2017-01-18 08:28:57 -0800 | [diff] [blame] | 4 | * |
Jan Tattermusch | 7897ae9 | 2017-06-07 22:57:36 +0200 | [diff] [blame] | 5 | * Licensed under the Apache License, Version 2.0 (the "License"); |
| 6 | * you may not use this file except in compliance with the License. |
| 7 | * You may obtain a copy of the License at |
Mark D. Roth | d58a985 | 2017-01-18 08:28:57 -0800 | [diff] [blame] | 8 | * |
Jan Tattermusch | 7897ae9 | 2017-06-07 22:57:36 +0200 | [diff] [blame] | 9 | * http://www.apache.org/licenses/LICENSE-2.0 |
Mark D. Roth | d58a985 | 2017-01-18 08:28:57 -0800 | [diff] [blame] | 10 | * |
Jan Tattermusch | 7897ae9 | 2017-06-07 22:57:36 +0200 | [diff] [blame] | 11 | * Unless required by applicable law or agreed to in writing, software |
| 12 | * distributed under the License is distributed on an "AS IS" BASIS, |
| 13 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 14 | * See the License for the specific language governing permissions and |
| 15 | * limitations under the License. |
Mark D. Roth | d58a985 | 2017-01-18 08:28:57 -0800 | [diff] [blame] | 16 | * |
| 17 | */ |
| 18 | |
Craig Tiller | 9eb0fde | 2017-03-31 16:59:30 -0700 | [diff] [blame] | 19 | #include "src/core/ext/filters/client_channel/http_proxy.h" |
Mark D. Roth | d58a985 | 2017-01-18 08:28:57 -0800 | [diff] [blame] | 20 | |
| 21 | #include <stdbool.h> |
| 22 | #include <string.h> |
| 23 | |
| 24 | #include <grpc/support/alloc.h> |
Ben Sykes | 02d426e | 2017-07-11 13:58:42 -0700 | [diff] [blame] | 25 | #include <grpc/support/host_port.h> |
Mark D. Roth | d58a985 | 2017-01-18 08:28:57 -0800 | [diff] [blame] | 26 | #include <grpc/support/log.h> |
| 27 | #include <grpc/support/string_util.h> |
| 28 | |
Craig Tiller | 9eb0fde | 2017-03-31 16:59:30 -0700 | [diff] [blame] | 29 | #include "src/core/ext/filters/client_channel/http_connect_handshaker.h" |
| 30 | #include "src/core/ext/filters/client_channel/proxy_mapper_registry.h" |
| 31 | #include "src/core/ext/filters/client_channel/uri_parser.h" |
Mark D. Roth | dc9bee7 | 2017-02-07 12:29:14 -0800 | [diff] [blame] | 32 | #include "src/core/lib/channel/channel_args.h" |
Mark D. Roth | d58a985 | 2017-01-18 08:28:57 -0800 | [diff] [blame] | 33 | #include "src/core/lib/support/env.h" |
Yash Tibrewal | f7350ea | 2017-07-19 10:26:41 -0700 | [diff] [blame] | 34 | #include "src/core/lib/support/string.h" |
| 35 | #include "src/core/lib/slice/b64.h" |
Mark D. Roth | d58a985 | 2017-01-18 08:28:57 -0800 | [diff] [blame] | 36 | |
Yash Tibrewal | 78d7125 | 2017-07-19 16:33:16 -0700 | [diff] [blame] | 37 | /** |
| 38 | * Parses the 'http_proxy' env var and returns the proxy hostname to resolve or |
Yash Tibrewal | a74ea86 | 2017-07-19 17:43:30 -0700 | [diff] [blame^] | 39 | * NULL on error. Also sets 'user_cred' to user credentials present in the |
| 40 | * 'http_proxy' env var, NULL if not present. |
Yash Tibrewal | 78d7125 | 2017-07-19 16:33:16 -0700 | [diff] [blame] | 41 | */ |
| 42 | static char *grpc_get_http_proxy_server(grpc_exec_ctx* exec_ctx, |
Yash Tibrewal | f7350ea | 2017-07-19 10:26:41 -0700 | [diff] [blame] | 43 | char **user_cred) { |
Yash Tibrewal | 78d7125 | 2017-07-19 16:33:16 -0700 | [diff] [blame] | 44 | char *proxy_name = NULL; |
| 45 | if(user_cred != NULL) { |
| 46 | *user_cred = NULL; |
| 47 | } |
Mark D. Roth | d58a985 | 2017-01-18 08:28:57 -0800 | [diff] [blame] | 48 | char* uri_str = gpr_getenv("http_proxy"); |
Yash Tibrewal | 78d7125 | 2017-07-19 16:33:16 -0700 | [diff] [blame] | 49 | if (uri_str == NULL) return NULL; |
David Garcia Quintas | dcb71e0 | 2017-03-06 10:16:26 -0800 | [diff] [blame] | 50 | grpc_uri* uri = |
| 51 | grpc_uri_parse(exec_ctx, uri_str, false /* suppress_errors */); |
Mark D. Roth | d58a985 | 2017-01-18 08:28:57 -0800 | [diff] [blame] | 52 | if (uri == NULL || uri->authority == NULL) { |
| 53 | gpr_log(GPR_ERROR, "cannot parse value of 'http_proxy' env var"); |
| 54 | goto done; |
| 55 | } |
| 56 | if (strcmp(uri->scheme, "http") != 0) { |
| 57 | gpr_log(GPR_ERROR, "'%s' scheme not supported in proxy URI", uri->scheme); |
| 58 | goto done; |
| 59 | } |
Yash Tibrewal | 78d7125 | 2017-07-19 16:33:16 -0700 | [diff] [blame] | 60 | /* Split on '@' to separate user credentials from host */ |
| 61 | char **authority_strs = NULL; |
| 62 | size_t authority_nstrs; |
| 63 | gpr_string_split(uri->authority, "@", &authority_strs, &authority_nstrs); |
Yash Tibrewal | a74ea86 | 2017-07-19 17:43:30 -0700 | [diff] [blame^] | 64 | GPR_ASSERT(authority_nstrs != 0); /* should have at least 1 string */ |
Yash Tibrewal | 78d7125 | 2017-07-19 16:33:16 -0700 | [diff] [blame] | 65 | if(authority_nstrs == 1) { |
| 66 | /* User cred not present in authority */ |
| 67 | proxy_name = gpr_strdup(authority_strs[0]); |
| 68 | } else if(authority_nstrs == 2) { |
| 69 | /* User cred found */ |
| 70 | if(user_cred != NULL) { |
| 71 | *user_cred = gpr_strdup(authority_strs[0]); |
| 72 | } |
| 73 | proxy_name = gpr_strdup(authority_strs[1]); |
Yash Tibrewal | f7350ea | 2017-07-19 10:26:41 -0700 | [diff] [blame] | 74 | gpr_log(GPR_INFO, "userinfo found in proxy URI"); |
| 75 | } else { |
Yash Tibrewal | 78d7125 | 2017-07-19 16:33:16 -0700 | [diff] [blame] | 76 | /* Bad authority */ |
| 77 | proxy_name = NULL; |
Mark D. Roth | d58a985 | 2017-01-18 08:28:57 -0800 | [diff] [blame] | 78 | } |
Yash Tibrewal | 78d7125 | 2017-07-19 16:33:16 -0700 | [diff] [blame] | 79 | for(size_t i = 0; i < authority_nstrs; i++) { |
| 80 | gpr_free(authority_strs[i]); |
| 81 | } |
| 82 | gpr_free(authority_strs); |
Mark D. Roth | d58a985 | 2017-01-18 08:28:57 -0800 | [diff] [blame] | 83 | done: |
| 84 | gpr_free(uri_str); |
| 85 | grpc_uri_destroy(uri); |
Yash Tibrewal | 78d7125 | 2017-07-19 16:33:16 -0700 | [diff] [blame] | 86 | return proxy_name; |
Mark D. Roth | d58a985 | 2017-01-18 08:28:57 -0800 | [diff] [blame] | 87 | } |
Mark D. Roth | dc9bee7 | 2017-02-07 12:29:14 -0800 | [diff] [blame] | 88 | |
| 89 | static bool proxy_mapper_map_name(grpc_exec_ctx* exec_ctx, |
| 90 | grpc_proxy_mapper* mapper, |
| 91 | const char* server_uri, |
| 92 | const grpc_channel_args* args, |
| 93 | char** name_to_resolve, |
| 94 | grpc_channel_args** new_args) { |
Yash Tibrewal | f7350ea | 2017-07-19 10:26:41 -0700 | [diff] [blame] | 95 | char *user_cred = NULL; |
Yash Tibrewal | 78d7125 | 2017-07-19 16:33:16 -0700 | [diff] [blame] | 96 | *name_to_resolve = grpc_get_http_proxy_server(exec_ctx, &user_cred); |
Mark D. Roth | dc9bee7 | 2017-02-07 12:29:14 -0800 | [diff] [blame] | 97 | if (*name_to_resolve == NULL) return false; |
David Garcia Quintas | dcb71e0 | 2017-03-06 10:16:26 -0800 | [diff] [blame] | 98 | grpc_uri* uri = |
| 99 | grpc_uri_parse(exec_ctx, server_uri, false /* suppress_errors */); |
Mark D. Roth | dc9bee7 | 2017-02-07 12:29:14 -0800 | [diff] [blame] | 100 | if (uri == NULL || uri->path[0] == '\0') { |
| 101 | gpr_log(GPR_ERROR, |
| 102 | "'http_proxy' environment variable set, but cannot " |
| 103 | "parse server URI '%s' -- not using proxy", |
| 104 | server_uri); |
Yash Tibrewal | f7350ea | 2017-07-19 10:26:41 -0700 | [diff] [blame] | 105 | if (uri != NULL) { |
| 106 | gpr_free(user_cred); |
| 107 | grpc_uri_destroy(uri); |
| 108 | } |
Mark D. Roth | dc9bee7 | 2017-02-07 12:29:14 -0800 | [diff] [blame] | 109 | return false; |
| 110 | } |
Mark D. Roth | 3878859 | 2017-02-09 09:28:53 -0800 | [diff] [blame] | 111 | if (strcmp(uri->scheme, "unix") == 0) { |
| 112 | gpr_log(GPR_INFO, "not using proxy for Unix domain socket '%s'", |
| 113 | server_uri); |
Yash Tibrewal | f7350ea | 2017-07-19 10:26:41 -0700 | [diff] [blame] | 114 | gpr_free(user_cred); |
Mark D. Roth | 3878859 | 2017-02-09 09:28:53 -0800 | [diff] [blame] | 115 | grpc_uri_destroy(uri); |
| 116 | return false; |
| 117 | } |
Ben Sykes | 02d426e | 2017-07-11 13:58:42 -0700 | [diff] [blame] | 118 | char* no_proxy_str = gpr_getenv("no_proxy"); |
| 119 | if (no_proxy_str != NULL) { |
| 120 | static const char* NO_PROXY_SEPARATOR = ","; |
| 121 | bool use_proxy = true; |
| 122 | char* server_host; |
| 123 | char* server_port; |
| 124 | if (!gpr_split_host_port(uri->path[0] == '/' ? uri->path + 1 : uri->path, |
| 125 | &server_host, &server_port)) { |
| 126 | gpr_log(GPR_INFO, |
| 127 | "unable to split host and port, not checking no_proxy list for " |
| 128 | "host '%s'", |
| 129 | server_uri); |
| 130 | } else { |
| 131 | size_t uri_len = strlen(server_host); |
| 132 | char** no_proxy_hosts; |
| 133 | size_t num_no_proxy_hosts; |
| 134 | gpr_string_split(no_proxy_str, NO_PROXY_SEPARATOR, &no_proxy_hosts, |
| 135 | &num_no_proxy_hosts); |
| 136 | for (size_t i = 0; i < num_no_proxy_hosts; i++) { |
| 137 | char* no_proxy_entry = no_proxy_hosts[i]; |
| 138 | size_t no_proxy_len = strlen(no_proxy_entry); |
| 139 | if (no_proxy_len <= uri_len && |
| 140 | gpr_stricmp(no_proxy_entry, &server_host[uri_len - no_proxy_len]) == |
| 141 | 0) { |
| 142 | gpr_log(GPR_INFO, "not using proxy for host in no_proxy list '%s'", |
| 143 | server_uri); |
| 144 | use_proxy = false; |
| 145 | break; |
| 146 | } |
| 147 | } |
| 148 | for (size_t i = 0; i < num_no_proxy_hosts; i++) { |
| 149 | gpr_free(no_proxy_hosts[i]); |
| 150 | } |
| 151 | gpr_free(no_proxy_hosts); |
| 152 | gpr_free(server_host); |
| 153 | gpr_free(server_port); |
| 154 | if (!use_proxy) { |
| 155 | grpc_uri_destroy(uri); |
| 156 | gpr_free(*name_to_resolve); |
| 157 | *name_to_resolve = NULL; |
| 158 | return false; |
| 159 | } |
| 160 | } |
| 161 | } |
Yash Tibrewal | f7350ea | 2017-07-19 10:26:41 -0700 | [diff] [blame] | 162 | grpc_arg args_to_add[2]; |
| 163 | args_to_add[0] = grpc_channel_arg_string_create( |
Mark D. Roth | 8d5e60b | 2017-06-09 09:08:23 -0700 | [diff] [blame] | 164 | GRPC_ARG_HTTP_CONNECT_SERVER, |
| 165 | uri->path[0] == '/' ? uri->path + 1 : uri->path); |
Yash Tibrewal | f7350ea | 2017-07-19 10:26:41 -0700 | [diff] [blame] | 166 | if(user_cred != NULL) { |
| 167 | /* Use base64 encoding for user credentials */ |
| 168 | char *encoded_user_cred = |
Yash Tibrewal | c59ef5e | 2017-07-19 10:40:17 -0700 | [diff] [blame] | 169 | grpc_base64_encode(user_cred, strlen(user_cred), 0, 0); |
Yash Tibrewal | f7350ea | 2017-07-19 10:26:41 -0700 | [diff] [blame] | 170 | char *header; |
| 171 | gpr_asprintf(&header, "Proxy-Authorization:Basic %s", encoded_user_cred); |
| 172 | gpr_free(encoded_user_cred); |
| 173 | args_to_add[1] = grpc_channel_arg_string_create( |
| 174 | GRPC_ARG_HTTP_CONNECT_HEADERS, header); |
| 175 | *new_args = grpc_channel_args_copy_and_add(args, args_to_add, 2); |
| 176 | gpr_free(header); |
| 177 | } else { |
| 178 | *new_args = grpc_channel_args_copy_and_add(args, args_to_add, 1); |
| 179 | } |
| 180 | gpr_free(user_cred); |
Mark D. Roth | dc9bee7 | 2017-02-07 12:29:14 -0800 | [diff] [blame] | 181 | grpc_uri_destroy(uri); |
| 182 | return true; |
| 183 | } |
| 184 | |
| 185 | static bool proxy_mapper_map_address(grpc_exec_ctx* exec_ctx, |
| 186 | grpc_proxy_mapper* mapper, |
| 187 | const grpc_resolved_address* address, |
| 188 | const grpc_channel_args* args, |
| 189 | grpc_resolved_address** new_address, |
| 190 | grpc_channel_args** new_args) { |
| 191 | return false; |
| 192 | } |
| 193 | |
| 194 | static void proxy_mapper_destroy(grpc_proxy_mapper* mapper) {} |
| 195 | |
| 196 | static const grpc_proxy_mapper_vtable proxy_mapper_vtable = { |
| 197 | proxy_mapper_map_name, proxy_mapper_map_address, proxy_mapper_destroy}; |
| 198 | |
| 199 | static grpc_proxy_mapper proxy_mapper = {&proxy_mapper_vtable}; |
| 200 | |
| 201 | void grpc_register_http_proxy_mapper() { |
| 202 | grpc_proxy_mapper_register(true /* at_start */, &proxy_mapper); |
| 203 | } |