mirror of https://github.com/tailscale/tailscale/
cmd/tailscale/cli, ipn: move serve CLI funcs on to ServeConfig (#6401)
Signed-off-by: Shayne Sweeney <shayne@tailscale.com>pull/6402/head
shayne
2 years ago
committed by
GitHub
parent
2847dd2aef
commit
f52a6d1b8c
@ -0,0 +1,135 @@
|
|||||||
|
// Copyright (c) 2022 Tailscale Inc & AUTHORS All rights reserved.
|
||||||
|
// Use of this source code is governed by a BSD-style
|
||||||
|
// license that can be found in the LICENSE file.
|
||||||
|
|
||||||
|
package ipn
|
||||||
|
|
||||||
|
// ServeConfigKey returns a StateKey that stores the
|
||||||
|
// JSON-encoded ServeConfig for a config profile.
|
||||||
|
func ServeConfigKey(profileID ProfileID) StateKey {
|
||||||
|
return StateKey("_serve/" + profileID)
|
||||||
|
}
|
||||||
|
|
||||||
|
// ServeConfig is the JSON type stored in the StateStore for
|
||||||
|
// StateKey "_serve/$PROFILE_ID" as returned by ServeConfigKey.
|
||||||
|
type ServeConfig struct {
|
||||||
|
// TCP are the list of TCP port numbers that tailscaled should handle for
|
||||||
|
// the Tailscale IP addresses. (not subnet routers, etc)
|
||||||
|
TCP map[uint16]*TCPPortHandler `json:",omitempty"`
|
||||||
|
|
||||||
|
// Web maps from "$SNI_NAME:$PORT" to a set of HTTP handlers
|
||||||
|
// keyed by mount point ("/", "/foo", etc)
|
||||||
|
Web map[HostPort]*WebServerConfig `json:",omitempty"`
|
||||||
|
|
||||||
|
// AllowFunnel is the set of SNI:port values for which funnel
|
||||||
|
// traffic is allowed, from trusted ingress peers.
|
||||||
|
AllowFunnel map[HostPort]bool `json:",omitempty"`
|
||||||
|
}
|
||||||
|
|
||||||
|
// HostPort is an SNI name and port number, joined by a colon.
|
||||||
|
// There is no implicit port 443. It must contain a colon.
|
||||||
|
type HostPort string
|
||||||
|
|
||||||
|
// WebServerConfig describes a web server's configuration.
|
||||||
|
type WebServerConfig struct {
|
||||||
|
Handlers map[string]*HTTPHandler // mountPoint => handler
|
||||||
|
}
|
||||||
|
|
||||||
|
// TCPPortHandler describes what to do when handling a TCP
|
||||||
|
// connection.
|
||||||
|
type TCPPortHandler struct {
|
||||||
|
// HTTPS, if true, means that tailscaled should handle this connection as an
|
||||||
|
// HTTPS request as configured by ServeConfig.Web.
|
||||||
|
//
|
||||||
|
// It is mutually exclusive with TCPForward.
|
||||||
|
HTTPS bool `json:",omitempty"`
|
||||||
|
|
||||||
|
// TCPForward is the IP:port to forward TCP connections to.
|
||||||
|
// Whether or not TLS is terminated by tailscaled depends on
|
||||||
|
// TerminateTLS.
|
||||||
|
//
|
||||||
|
// It is mutually exclusive with HTTPS.
|
||||||
|
TCPForward string `json:",omitempty"`
|
||||||
|
|
||||||
|
// TerminateTLS, if non-empty, means that tailscaled should terminate the
|
||||||
|
// TLS connections before forwarding them to TCPForward, permitting only the
|
||||||
|
// SNI name with this value. It is only used if TCPForward is non-empty.
|
||||||
|
// (the HTTPS mode uses ServeConfig.Web)
|
||||||
|
TerminateTLS string `json:",omitempty"`
|
||||||
|
}
|
||||||
|
|
||||||
|
// HTTPHandler is either a path or a proxy to serve.
|
||||||
|
type HTTPHandler struct {
|
||||||
|
// Exactly one of the following may be set.
|
||||||
|
|
||||||
|
Path string `json:",omitempty"` // absolute path to directory or file to serve
|
||||||
|
Proxy string `json:",omitempty"` // http://localhost:3000/, localhost:3030, 3030
|
||||||
|
|
||||||
|
Text string `json:",omitempty"` // plaintext to serve (primarily for testing)
|
||||||
|
|
||||||
|
// TODO(bradfitz): bool to not enumerate directories? TTL on mapping for
|
||||||
|
// temporary ones? Error codes? Redirects?
|
||||||
|
}
|
||||||
|
|
||||||
|
// WebHandlerExists checks if the ServeConfig Web handler exists for
|
||||||
|
// the given host:port and mount point.
|
||||||
|
func (sc *ServeConfig) WebHandlerExists(hp HostPort, mount string) bool {
|
||||||
|
h := sc.GetWebHandler(hp, mount)
|
||||||
|
return h != nil
|
||||||
|
}
|
||||||
|
|
||||||
|
// GetWebHandler returns the HTTPHandler for the given host:port and mount point.
|
||||||
|
// Returns nil if the handler does not exist.
|
||||||
|
func (sc *ServeConfig) GetWebHandler(hp HostPort, mount string) *HTTPHandler {
|
||||||
|
if sc.Web[hp] != nil {
|
||||||
|
return sc.Web[hp].Handlers[mount]
|
||||||
|
}
|
||||||
|
return nil
|
||||||
|
}
|
||||||
|
|
||||||
|
// GetTCPPortHandler returns the TCPPortHandler for the given port.
|
||||||
|
// If the port is not configured, nil is returned.
|
||||||
|
func (sc *ServeConfig) GetTCPPortHandler(port uint16) *TCPPortHandler {
|
||||||
|
return sc.TCP[port]
|
||||||
|
}
|
||||||
|
|
||||||
|
// IsTCPForwardingAny checks if ServeConfig is currently forwarding
|
||||||
|
// in TCPForward mode on any port.
|
||||||
|
// This is exclusive of Web/HTTPS serving.
|
||||||
|
func (sc *ServeConfig) IsTCPForwardingAny() bool {
|
||||||
|
if len(sc.TCP) == 0 {
|
||||||
|
return false
|
||||||
|
}
|
||||||
|
for _, h := range sc.TCP {
|
||||||
|
if h.TCPForward != "" {
|
||||||
|
return true
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return false
|
||||||
|
}
|
||||||
|
|
||||||
|
// IsTCPForwardingOnPort checks if ServeConfig is currently forwarding
|
||||||
|
// in TCPForward mode on the given port.
|
||||||
|
// This is exclusive of Web/HTTPS serving.
|
||||||
|
func (sc *ServeConfig) IsTCPForwardingOnPort(port uint16) bool {
|
||||||
|
if sc.TCP[port] == nil {
|
||||||
|
return false
|
||||||
|
}
|
||||||
|
return !sc.TCP[port].HTTPS
|
||||||
|
}
|
||||||
|
|
||||||
|
// IsServingWeb checks if ServeConfig is currently serving
|
||||||
|
// Web/HTTPS on the given port.
|
||||||
|
// This is exclusive of TCPForwarding.
|
||||||
|
func (sc *ServeConfig) IsServingWeb(port uint16) bool {
|
||||||
|
if sc.TCP[port] == nil {
|
||||||
|
return false
|
||||||
|
}
|
||||||
|
return sc.TCP[port].HTTPS
|
||||||
|
}
|
||||||
|
|
||||||
|
// IsFunnelOn checks if ServeConfig is currently allowing
|
||||||
|
// funnel traffic on for the given host:port.
|
||||||
|
func (sc *ServeConfig) IsFunnelOn(hp HostPort) bool {
|
||||||
|
return sc.AllowFunnel[hp]
|
||||||
|
}
|
||||||
Loading…
Reference in New Issue